Disassembly of File: EKD4.EXE
Code Offset = 00000400, Code Size = 00072E00
Data Offset = 00074E00, Data Size = 0000B200

Number of Objects = 0005 (dec), Imagebase = 00400000h

   Object01: .text    RVA: 00001000 Offset: 00000400 Size: 00072E00 Flags: 60000020
   Object02: .rdata   RVA: 00074000 Offset: 00073200 Size: 00001C00 Flags: 40000040
   Object03: .data    RVA: 00076000 Offset: 00074E00 Size: 0000B200 Flags: C0000040
   Object04: .idata   RVA: 000B8000 Offset: 00080000 Size: 00001800 Flags: C0000040
   Object05: .rsrc    RVA: 000BA000 Offset: 00081800 Size: 0001F600 Flags: 40000040


+++++++++++++++++++ MENU INFORMATION ++++++++++++++++++

Number of Menus =    4 (decimal)


APPMENU

      H(F) {Popup}
              e(L)    [ID=0066h]
           2X(S)      [ID=0065h]
           J2P_(X)    [ID=0068h]

      (O) {Popup}
           -(K)    [ID=006Bh]
              P_(E)  [ID=006Dh]

      1(I) {Popup}
           f1(B)    [ID=0069h]
           )(T)    [ID=006Ah]
           04.(J)   [ID=006Ch]

      (H) {Popup}
           H,1(A)    [ID=9C89h]


DBGMENU

      H(F) {Popup}
              e(L)    [ID=0066h]
           2X(S)      [ID=0065h]
           J2P_(X)    [ID=0068h]

      (O) {Popup}
           -(K)    [ID=006Bh]
              P_(E)  [ID=006Dh]

      1(I) {Popup}
           f1(B)    [ID=0069h]
           )(T)    [ID=006Ah]
           04.(J)   [ID=006Ch]

      (H) {Popup}
           H,1       [ID=9C89h]
           DEBUG(R) {Popup}
                f@l    [ID=009Bh]
                fhG     [ID=009Ch]
                QSw {Popup}
                              [ID=00A1h]
                     Sw         [ID=00A3h]

                q {Popup}
                     0bH       [ID=009Eh]
                     ՛        [ID=009Fh]

                fh       [ID=00A0h]
                U,       [ID=00A2h]
                (K)     [ID=0070h]
                BMP>CHIP   [ID=9C71h]
                MAPEDIT    [ID=9C6Eh]
                OBJEDIT    [ID=9C6Fh]


MAPMENU

      ATR {Popup}
           LOAD       [ID=9CB1h]
           INIT       [ID=9CB4h]
           F          [ID=9CBFh]
           0        [ID=9CC0h]
           1        [ID=9CC1h]
           2        [ID=9CC2h]
           3        [ID=9CC3h]
           Mn0      [ID=9CC7h]
           Mn1      [ID=9CC8h]
           Mn2      [ID=9CC9h]
           Mn3      [ID=9CCAh]
           Mn     [ID=9CA5h]
            {Popup}

      MAP {Popup}
           0xڄ   e  [ID=9CB3h]
           SAVE       [ID=9C6Ch]
           INIT       [ID=9C70h]
           ^ {Popup}
                          [ID=9CA6h]
                          [ID=9CB0h]

           >' {Popup}
                8          [ID=9C68h]
                10         [ID=9C69h]
                16         [ID=9C6Ah]
                32         [ID=9C6Bh]

           DISP {Popup}
                jCGLOAD  [ID=9CB2h]
                GAME VIEW  [ID=9CBBh]
                ueF        [ID=9CA4h]
                /*U      [ID=9CC4h]


SMAPMENU

      ܉(C)      [ID=9CBDh]

+++++++++++++++++ DIALOG INFORMATION ++++++++++++++++++

Number of Dialogs =   42 (decimal)

Name:    APPVERSION, # of Controls=005, Caption:"T0w H,1", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"STATIC" Control Text:"T0w" 
     004 - ControlID:FFFF, Control Class:"STATIC" Control Text:"6ERSION" 
     005 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Copyright(C) *> I 1999" 
Name:       KANKYOU, # of Controls=000, Caption:"", ClassName:""
Name: DialogID_0091, # of Controls=005, Caption:"Ǚ	e", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:04A9, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"STATIC" Control Text:"xǀǙx
" 
     005 - ControlID:0402, Control Class:"LISTBOX" Control Text:"" 
Name: DialogID_00A6, # of Controls=021, Caption:"f1", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:04A9, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0403, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:0404, Control Class:"BUTTON" Control Text:"" 
     005 - ControlID:03EA, Control Class:"STATIC" Control Text:"" 
     006 - ControlID:03FB, Control Class:"STATIC" Control Text:"rubi" 
     007 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     008 - ControlID:03F7, Control Class:"STATIC" Control Text:"@l" 
     009 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     010 - ControlID:03F8, Control Class:"STATIC" Control Text:"" 
     011 - ControlID:03FA, Control Class:"STATIC" Control Text:"" 
     012 - ControlID:0434, Control Class:"STATIC" Control Text:"" 
     013 - ControlID:05BE, Control Class:"STATIC" Control Text:"" 
     014 - ControlID:05BF, Control Class:"STATIC" Control Text:"" 
     015 - ControlID:05C0, Control Class:"STATIC" Control Text:"" 
     016 - ControlID:05C1, Control Class:"STATIC" Control Text:"" 
     017 - ControlID:03FC, Control Class:"STATIC" Control Text:"" 
     018 - ControlID:03FD, Control Class:"STATIC" Control Text:"'2" 
     019 - ControlID:03FE, Control Class:"STATIC" Control Text:"" 
     020 - ControlID:03FF, Control Class:"STATIC" Control Text:"" 
     021 - ControlID:0001, Control Class:"99" Control Text:"" 
Name: DialogID_00A7, # of Controls=000, Caption:"Sw1", ClassName:""
Name: DialogID_00B2, # of Controls=018, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";ʛ" 
     002 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     003 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     004 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"K#" 
     005 - ControlID:03EE, Control Class:"STATIC" Control Text:"255" 
     006 - ControlID:03EF, Control Class:"STATIC" Control Text:"255" 
     007 - ControlID:03F0, Control Class:"STATIC" Control Text:"255" 
     008 - ControlID:03F1, Control Class:"STATIC" Control Text:"255" 
     009 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"}-" 
     010 - ControlID:03F3, Control Class:"STATIC" Control Text:"255" 
     011 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"Ow" 
     012 - ControlID:03F4, Control Class:"STATIC" Control Text:"255" 
     013 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     014 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     015 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     016 - ControlID:03FD, Control Class:"STATIC" Control Text:"1000" 
     017 - ControlID:03F2, Control Class:"STATIC" Control Text:"255" 
     018 - ControlID:03F5, Control Class:"STATIC" Control Text:"255" 
Name: DialogID_00B3, # of Controls=015, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     002 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:03FD, Control Class:"STATIC" Control Text:"1000" 
     005 - ControlID:03F2, Control Class:"STATIC" Control Text:"255" 
     006 - ControlID:03F5, Control Class:"STATIC" Control Text:"255" 
     007 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     008 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     010 - ControlID:03F3, Control Class:"STATIC" Control Text:"255" 
     011 - ControlID:052B, Control Class:"BUTTON" Control Text:"@" 
     012 - ControlID:0432, Control Class:"STATIC" Control Text:"65535" 
     013 - ControlID:0001, Control Class:"" Control Text:"" 
     014 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     015 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_00BA, # of Controls=000, Caption:"%", ClassName:""
Name: DialogID_00BB, # of Controls=012, Caption:"2X", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:04A9, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"Ǚg" 
     006 - ControlID:03F7, Control Class:"STATIC" Control Text:"" 
     007 - ControlID:FFFF, Control Class:"STATIC" Control Text:";҄I" 
     008 - ControlID:03F9, Control Class:"STATIC" Control Text:"0" 
     009 - ControlID:03F8, Control Class:"STATIC" Control Text:"*******K0" 
     010 - ControlID:0434, Control Class:"STATIC" Control Text:"2XBx" 
     011 - ControlID:0433, Control Class:"STATIC" Control Text:"0" 
     012 - ControlID:03FA, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00C1, # of Controls=006, Caption:"-", ClassName:""
     001 - ControlID:0403, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0404, Control Class:"BUTTON" Control Text:"	e2" 
     003 - ControlID:0422, Control Class:"BUTTON" Control Text:"J2P_" 
     004 - ControlID:0423, Control Class:"BUTTON" Control Text:"" 
     005 - ControlID:0424, Control Class:"BUTTON" Control Text:"" 
     006 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00C3, # of Controls=012, Caption:"	e", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:04A9, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"Ǚg" 
     005 - ControlID:03F7, Control Class:"STATIC" Control Text:"" 
     006 - ControlID:03F8, Control Class:"STATIC" Control Text:"*******K0" 
     007 - ControlID:FFFF, Control Class:"STATIC" Control Text:";҄I" 
     008 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     009 - ControlID:0434, Control Class:"STATIC" Control Text:"" 
     010 - ControlID:0433, Control Class:"STATIC" Control Text:"255" 
     011 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     012 - ControlID:03FA, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00C8, # of Controls=004, Caption:"", ClassName:""
     001 - ControlID:03EB, Control Class:"LISTBOX" Control Text:"" 
     002 - ControlID:052E, Control Class:"STATIC" Control Text:"@Sw" 
     003 - ControlID:0513, Control Class:"STATIC" Control Text:"" 
     004 - ControlID:052F, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00CD, # of Controls=011, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"STATIC" Control Text:";ʛ" 
     002 - ControlID:FFFF, Control Class:"STATIC" Control Text:"2" 
     003 - ControlID:053B, Control Class:"STATIC" Control Text:"" 
     004 - ControlID:04FF, Control Class:"STATIC" Control Text:"
" 
     005 - ControlID:0500, Control Class:"STATIC" Control Text:"[+" 
     006 - ControlID:0502, Control Class:"STATIC" Control Text:"" 
     007 - ControlID:FFFF, Control Class:"STATIC" Control Text:"8" 
     008 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:FFFF, Control Class:"STATIC" Control Text:"M" 
     010 - ControlID:0001, Control Class:"" Control Text:"" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"/,mT
" 
Name: DialogID_00CF, # of Controls=005, Caption:"Ǚ2X", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:04A9, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:0402, Control Class:"LISTBOX" Control Text:"" 
Name: DialogID_00D0, # of Controls=000, Caption:"", ClassName:""
Name: DialogID_00D2, # of Controls=005, Caption:"/1", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"P_" 
     002 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f(R)" 
     003 - ControlID:03F0, Control Class:"COMBOBOX" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"Sw" 
     005 - ControlID:03F1, Control Class:"COMBOBOX" Control Text:"" 
Name: DialogID_00D4, # of Controls=003, Caption:"f1", ClassName:""
     001 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:04A9, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0001, Control Class:"" Control Text:"" 
Name: DialogID_00DA, # of Controls=000, Caption:"i", ClassName:""
Name: DialogID_00E9, # of Controls=003, Caption:"", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:043C, Control Class:"BUTTON" Control Text:"X" 
Name: DialogID_00EA, # of Controls=004, Caption:"	", ClassName:""
     001 - ControlID:043C, Control Class:"BUTTON" Control Text:"X" 
     002 - ControlID:043B, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:043D, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:0002, Control Class:"BUTTON" Control Text:"P_" 
Name: DialogID_00EB, # of Controls=200, Caption:"i", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"	" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"@i" 
     003 - ControlID:0000, Control Class:"STATIC" Control Text:";ʛ 99" 
     004 - ControlID:0000, Control Class:"STATIC" Control Text:"2 99" 
     005 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     006 - ControlID:0000, Control Class:"STATIC" Control Text:"K#" 
     007 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     020 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     021 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv.99" 
     023 - ControlID:0001, Control Class:"" Control Text:"" 
     024 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv.99" 
     025 - ControlID:0000, Control Class:"BUTTON" Control Text:"	" 
     026 - ControlID:0000, Control Class:"BUTTON" Control Text:"@i" 
     027 - ControlID:0000, Control Class:"STATIC" Control Text:";ʛ" 
     028 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     029 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     030 - ControlID:0000, Control Class:"STATIC" Control Text:"K#" 
     031 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     032 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     033 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     034 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     035 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     036 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     037 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     038 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     039 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     040 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     041 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     042 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     043 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     044 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     045 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     046 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     047 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     048 - ControlID:0009, Control Class:"BUTTON" Control Text:"" 
     049 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     050 - ControlID:0473, Control Class:"STATIC" Control Text:"T0w" 
     051 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     052 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     053 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f1" 
     054 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     055 - ControlID:03F3, Control Class:"STATIC" Control Text:"1000" 
     056 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     057 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     058 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     059 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     060 - ControlID:0535, Control Class:"STATIC" Control Text:"i" 
     061 - ControlID:0536, Control Class:"STATIC" Control Text:"99" 
     062 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     063 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     064 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     065 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";ʛ" 
     066 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     067 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     068 - ControlID:053E, Control Class:"BUTTON" Control Text:"" 
     069 - ControlID:053F, Control Class:"BUTTON" Control Text:"" 
     070 - ControlID:0540, Control Class:"BUTTON" Control Text:"" 
     071 - ControlID:0402, Control Class:"STATIC" Control Text:"1000" 
     072 - ControlID:0403, Control Class:"STATIC" Control Text:"1000" 
     073 - ControlID:05BC, Control Class:"STATIC" Control Text:"/" 
     074 - ControlID:05BD, Control Class:"STATIC" Control Text:"/" 
     075 - ControlID:0001, Control Class:"" Control Text:"" 
     076 - ControlID:0000, Control Class:"BUTTON" Control Text:"P_" 
     077 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     078 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     079 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     080 - ControlID:0000, Control Class:"BUTTON" Control Text:"F" 
     081 - ControlID:0000, Control Class:"BUTTON" Control Text:"@i" 
     082 - ControlID:5000, Control Class:"" Control Text:"iOl" 
     083 - ControlID:0000, Control Class:"BUTTON" Control Text:"	" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     085 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     086 - ControlID:0001, Control Class:"" Control Text:"" 
     087 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     088 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     089 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     090 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     091 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     092 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     093 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     094 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv.99" 
     096 - ControlID:0000, Control Class:"STATIC" Control Text:";ʛ 1000" 
     097 - ControlID:0000, Control Class:"STATIC" Control Text:"2 1000" 
     098 - ControlID:0000, Control Class:"STATIC" Control Text:"z 1000" 
     099 - ControlID:0000, Control Class:"STATIC" Control Text:"K# 1000" 
     100 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     101 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     102 - ControlID:0000, Control Class:"STATIC" Control Text:"}- 1000" 
     103 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow 1000" 
     104 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     105 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     106 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     107 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     108 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     109 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     110 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     111 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     112 - ControlID:0001, Control Class:"" Control Text:"" 
     113 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     114 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     115 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     116 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     117 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     118 - ControlID:0000, Control Class:"STATIC" Control Text:"l'" 
     119 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     120 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     121 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     122 - ControlID:0000, Control Class:"BUTTON" Control Text:"	H
" 
     123 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     124 - ControlID:0000, Control Class:"BUTTON" Control Text:"q
" 
     125 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     126 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     127 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     128 - ControlID:0507, Control Class:"BUTTON" Control Text:";" 
     129 - ControlID:0508, Control Class:"BUTTON" Control Text:"" 
     130 - ControlID:0509, Control Class:"BUTTON" Control Text:"Sw" 
     131 - ControlID:050B, Control Class:"BUTTON" Control Text:"" 
     132 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     133 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     134 - ControlID:0509, Control Class:"BUTTON" Control Text:"" 
     135 - ControlID:050A, Control Class:"BUTTON" Control Text:"" 
     136 - ControlID:050C, Control Class:"BUTTON" Control Text:"	" 
     137 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     138 - ControlID:050D, Control Class:"BUTTON" Control Text:"" 
     139 - ControlID:0003, Control Class:"BUTTON" Control Text:"(" 
     140 - ControlID:0004, Control Class:"BUTTON" Control Text:"" 
     141 - ControlID:0005, Control Class:"BUTTON" Control Text:"h" 
     142 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     143 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     144 - ControlID:0521, Control Class:"LISTBOX" Control Text:"" 
     145 - ControlID:0001, Control Class:"" Control Text:"" 
     146 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     147 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     148 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     149 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     150 - ControlID:0000, Control Class:"STATIC" Control Text:"l'" 
     151 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     152 - ControlID:FFFF, Control Class:"" Control Text:"" 
     153 - ControlID:FFFF, Control Class:"" Control Text:"" 
     154 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     155 - ControlID:FFFF, Control Class:"" Control Text:"" 
     156 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     157 - ControlID:FFFF, Control Class:"" Control Text:"" 
     158 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     159 - ControlID:05B1, Control Class:"STATIC" Control Text:"" 
     160 - ControlID:05B3, Control Class:"STATIC" Control Text:"" 
     161 - ControlID:05B4, Control Class:"STATIC" Control Text:"1" 
     162 - ControlID:0001, Control Class:"" Control Text:"" 
     163 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     164 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     165 - ControlID:0001, Control Class:"" Control Text:"" 
     166 - ControlID:0000, Control Class:"EDIT" Control Text:"" 
     167 - ControlID:0000, Control Class:"BUTTON" Control Text:"/" 
     168 - ControlID:0000, Control Class:"BUTTON" Control Text:"&" 
     169 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     170 - ControlID:0000, Control Class:"STATIC" Control Text:"dULo:2o:K" 
     171 - ControlID:0563, Control Class:"BUTTON" Control Text:"" 
     172 - ControlID:0001, Control Class:"" Control Text:"" 
     173 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     174 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     175 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     176 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     177 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     178 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     179 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     180 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     181 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     182 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     183 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     184 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     185 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     186 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     187 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     188 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     189 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     190 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     191 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     192 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     193 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     194 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     195 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     196 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     197 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     198 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     199 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     200 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_00EC, # of Controls=032, Caption:"fx", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     003 - ControlID:0009, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:0473, Control Class:"STATIC" Control Text:"T0w" 
     006 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     007 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     008 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f1" 
     009 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     010 - ControlID:03F3, Control Class:"STATIC" Control Text:"1000" 
     011 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     012 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     013 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     014 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     015 - ControlID:0535, Control Class:"STATIC" Control Text:"i" 
     016 - ControlID:0536, Control Class:"STATIC" Control Text:"99" 
     017 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     018 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     019 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     020 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";ʛ" 
     021 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     022 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     023 - ControlID:053E, Control Class:"BUTTON" Control Text:"" 
     024 - ControlID:053F, Control Class:"BUTTON" Control Text:"" 
     025 - ControlID:0540, Control Class:"BUTTON" Control Text:"" 
     026 - ControlID:0402, Control Class:"STATIC" Control Text:"1000" 
     027 - ControlID:0403, Control Class:"STATIC" Control Text:"1000" 
     028 - ControlID:05BC, Control Class:"STATIC" Control Text:"/" 
     029 - ControlID:05BD, Control Class:"STATIC" Control Text:"/" 
     030 - ControlID:0001, Control Class:"" Control Text:"" 
     031 - ControlID:0000, Control Class:"BUTTON" Control Text:"P_" 
     032 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_00ED, # of Controls=000, Caption:"l", ClassName:""
Name: DialogID_00F2, # of Controls=200, Caption:"e", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     003 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     004 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     005 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     006 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     007 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv.99" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:";ʛ 1000" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"2 1000" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"z 1000" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"K# 1000" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"}- 1000" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow 1000" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     020 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     021 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     023 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     024 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     025 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     026 - ControlID:0001, Control Class:"" Control Text:"" 
     027 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     028 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     029 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     030 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     031 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     032 - ControlID:0000, Control Class:"STATIC" Control Text:"l'" 
     033 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     034 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     035 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     036 - ControlID:0000, Control Class:"BUTTON" Control Text:"	H
" 
     037 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     038 - ControlID:0000, Control Class:"BUTTON" Control Text:"q
" 
     039 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     040 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     041 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     042 - ControlID:0507, Control Class:"BUTTON" Control Text:";" 
     043 - ControlID:0508, Control Class:"BUTTON" Control Text:"" 
     044 - ControlID:0509, Control Class:"BUTTON" Control Text:"Sw" 
     045 - ControlID:050B, Control Class:"BUTTON" Control Text:"" 
     046 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     047 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     048 - ControlID:0509, Control Class:"BUTTON" Control Text:"" 
     049 - ControlID:050A, Control Class:"BUTTON" Control Text:"" 
     050 - ControlID:050C, Control Class:"BUTTON" Control Text:"	" 
     051 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     052 - ControlID:050D, Control Class:"BUTTON" Control Text:"" 
     053 - ControlID:0003, Control Class:"BUTTON" Control Text:"(" 
     054 - ControlID:0004, Control Class:"BUTTON" Control Text:"" 
     055 - ControlID:0005, Control Class:"BUTTON" Control Text:"h" 
     056 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     057 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     058 - ControlID:0521, Control Class:"LISTBOX" Control Text:"" 
     059 - ControlID:0001, Control Class:"" Control Text:"" 
     060 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     061 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     062 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     063 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     064 - ControlID:0000, Control Class:"STATIC" Control Text:"l'" 
     065 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     066 - ControlID:FFFF, Control Class:"" Control Text:"" 
     067 - ControlID:FFFF, Control Class:"" Control Text:"" 
     068 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     069 - ControlID:FFFF, Control Class:"" Control Text:"" 
     070 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     071 - ControlID:FFFF, Control Class:"" Control Text:"" 
     072 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     073 - ControlID:05B1, Control Class:"STATIC" Control Text:"" 
     074 - ControlID:05B3, Control Class:"STATIC" Control Text:"" 
     075 - ControlID:05B4, Control Class:"STATIC" Control Text:"1" 
     076 - ControlID:0001, Control Class:"" Control Text:"" 
     077 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     078 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     079 - ControlID:0001, Control Class:"" Control Text:"" 
     080 - ControlID:0000, Control Class:"EDIT" Control Text:"" 
     081 - ControlID:0000, Control Class:"BUTTON" Control Text:"/" 
     082 - ControlID:0000, Control Class:"BUTTON" Control Text:"&" 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:"dULo:2o:K" 
     085 - ControlID:0563, Control Class:"BUTTON" Control Text:"" 
     086 - ControlID:0001, Control Class:"" Control Text:"" 
     087 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     088 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     089 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     090 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     091 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     092 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     093 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     094 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     095 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     096 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     097 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     098 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     099 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     100 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     101 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     102 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     103 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     104 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     105 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     106 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     107 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     108 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     109 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     110 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     111 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     112 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     113 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     114 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     115 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     116 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     117 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     118 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     119 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     120 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     121 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     122 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     123 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     124 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     125 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     126 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     127 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     128 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     129 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     130 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     131 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     132 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     133 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     134 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     135 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     136 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     137 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     138 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     139 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     140 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     141 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     142 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     143 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     144 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     145 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     146 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     147 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     148 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     149 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     150 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     151 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     152 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     153 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     154 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     155 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     156 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     157 - ControlID:0001, Control Class:"" Control Text:"" 
     158 - ControlID:0000, Control Class:"BUTTON" Control Text:"P_" 
     159 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     160 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     161 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     162 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     163 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"fy'" 
     164 - ControlID:056B, Control Class:"LISTBOX" Control Text:"" 
     165 - ControlID:0001, Control Class:"" Control Text:"" 
     166 - ControlID:0000, Control Class:"BUTTON" Control Text:"P_" 
     167 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     168 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     169 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     170 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     171 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     172 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     173 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     174 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     175 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     176 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     177 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     178 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     179 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     180 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     181 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     182 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     183 - ControlID:0000, Control Class:"STATIC" Control Text:"040/040" 
     184 - ControlID:0000, Control Class:"STATIC" Control Text:"H" 
     185 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     186 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     187 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     188 - ControlID:0000, Control Class:"STATIC" Control Text:"	H" 
     189 - ControlID:0000, Control Class:"STATIC" Control Text:"q" 
     190 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     191 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     192 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     193 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     194 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     195 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     196 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     197 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     198 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     199 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     200 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
Name: DialogID_0117, # of Controls=006, Caption:"0%", ClassName:""
     001 - ControlID:0507, Control Class:"BUTTON" Control Text:";" 
     002 - ControlID:0508, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0509, Control Class:"BUTTON" Control Text:"Sw" 
     004 - ControlID:050B, Control Class:"BUTTON" Control Text:"" 
     005 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     006 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_0118, # of Controls=005, Caption:";", ClassName:""
     001 - ControlID:0509, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:050A, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:050C, Control Class:"BUTTON" Control Text:"	" 
     004 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     005 - ControlID:050D, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_0119, # of Controls=004, Caption:"Sw", ClassName:""
     001 - ControlID:0003, Control Class:"BUTTON" Control Text:"(" 
     002 - ControlID:0004, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0005, Control Class:"BUTTON" Control Text:"h" 
     004 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
Name: DialogID_011C, # of Controls=002, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0521, Control Class:"LISTBOX" Control Text:"" 
Name: DialogID_011D, # of Controls=000, Caption:"1", ClassName:""
Name: DialogID_011E, # of Controls=003, Caption:" ", ClassName:""
     001 - ControlID:05B1, Control Class:"STATIC" Control Text:"" 
     002 - ControlID:05B3, Control Class:"STATIC" Control Text:"" 
     003 - ControlID:05B4, Control Class:"STATIC" Control Text:"1" 
Name: DialogID_0122, # of Controls=000, Caption:"", ClassName:""
Name: DialogID_0126, # of Controls=000, Caption:"&", ClassName:""
Name: DialogID_0129, # of Controls=200, Caption:"P", ClassName:""
     001 - ControlID:0000, Control Class:"EDIT" Control Text:"" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"/" 
     003 - ControlID:0000, Control Class:"BUTTON" Control Text:"&" 
     004 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:0000, Control Class:"STATIC" Control Text:"dULo:2o:K" 
     006 - ControlID:0563, Control Class:"BUTTON" Control Text:"" 
     007 - ControlID:0001, Control Class:"" Control Text:"" 
     008 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     009 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     010 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     011 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     014 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     015 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     016 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     017 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     018 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     019 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     020 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     021 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     022 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     023 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     024 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     025 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     026 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     027 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     028 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     029 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     030 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     031 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     032 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     033 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     034 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     035 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     036 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     037 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     038 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     039 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     040 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     041 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     042 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     043 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     044 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     045 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     046 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     047 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     048 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     049 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     050 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     051 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     052 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     053 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     054 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     055 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     056 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     057 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     058 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     059 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     060 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     061 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     062 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     063 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     064 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     065 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     066 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     067 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     068 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     069 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     070 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     071 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     072 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     073 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     074 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     075 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     076 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     077 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     078 - ControlID:0001, Control Class:"" Control Text:"" 
     079 - ControlID:0000, Control Class:"BUTTON" Control Text:"P_" 
     080 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     081 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     082 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     084 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"fy'" 
     085 - ControlID:056B, Control Class:"LISTBOX" Control Text:"" 
     086 - ControlID:0001, Control Class:"" Control Text:"" 
     087 - ControlID:0000, Control Class:"BUTTON" Control Text:"P_" 
     088 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     089 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     090 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     091 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     092 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     093 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     094 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     096 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     097 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     098 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     099 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     100 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     101 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     102 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     103 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     104 - ControlID:0000, Control Class:"STATIC" Control Text:"040/040" 
     105 - ControlID:0000, Control Class:"STATIC" Control Text:"H" 
     106 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     107 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     108 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     109 - ControlID:0000, Control Class:"STATIC" Control Text:"	H" 
     110 - ControlID:0000, Control Class:"STATIC" Control Text:"q" 
     111 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     112 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     113 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     114 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     115 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     116 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     117 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     118 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     119 - ControlID:0000, Control Class:"STATIC" Control Text:"%" 
     120 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     121 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     122 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     123 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     124 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     125 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     126 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     127 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     128 - ControlID:0000, Control Class:"STATIC" Control Text:"	H" 
     129 - ControlID:0000, Control Class:"STATIC" Control Text:"q" 
     130 - ControlID:0000, Control Class:"STATIC" Control Text:"	H" 
     131 - ControlID:0000, Control Class:"STATIC" Control Text:"q" 
     132 - ControlID:0000, Control Class:"STATIC" Control Text:")a55G" 
     133 - ControlID:0000, Control Class:"STATIC" Control Text:")a55G" 
     134 - ControlID:0000, Control Class:"STATIC" Control Text:")a55G" 
     135 - ControlID:0000, Control Class:"STATIC" Control Text:"H" 
     136 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     137 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     138 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     139 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     140 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     141 - ControlID:0000, Control Class:"STATIC" Control Text:"H" 
     142 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     143 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     144 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     145 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     146 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     147 - ControlID:0001, Control Class:"255" Control Text:"" 
     148 - ControlID:0000, Control Class:"BUTTON" Control Text:"/" 
     149 - ControlID:0000, Control Class:"BUTTON" Control Text:"&" 
     150 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     151 - ControlID:0000, Control Class:"STATIC" Control Text:")a55G" 
     152 - ControlID:FFFF, Control Class:"" Control Text:"" 
     153 - ControlID:FFFF, Control Class:"" Control Text:"" 
     154 - ControlID:0000, Control Class:"STATIC" Control Text:"999" 
     155 - ControlID:0000, Control Class:"STATIC" Control Text:"999" 
     156 - ControlID:0000, Control Class:"STATIC" Control Text:"H" 
     157 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     158 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     159 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     160 - ControlID:0001, Control Class:"255" Control Text:"" 
     161 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     162 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     163 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     164 - ControlID:0000, Control Class:"STATIC" Control Text:"y'
" 
     165 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     166 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     167 - ControlID:0009, Control Class:"BUTTON" Control Text:"" 
     168 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     169 - ControlID:0473, Control Class:"STATIC" Control Text:"T0w" 
     170 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     171 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     172 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f1" 
     173 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     174 - ControlID:03F3, Control Class:"STATIC" Control Text:"1000" 
     175 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     176 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     177 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     178 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     179 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     180 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     181 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";ʛ" 
     182 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     183 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     184 - ControlID:0402, Control Class:"STATIC" Control Text:"1000" 
     185 - ControlID:0403, Control Class:"STATIC" Control Text:"1000" 
     186 - ControlID:05BC, Control Class:"STATIC" Control Text:"/" 
     187 - ControlID:05BD, Control Class:"STATIC" Control Text:"/" 
     188 - ControlID:05BE, Control Class:"STATIC" Control Text:"" 
     189 - ControlID:05BF, Control Class:"STATIC" Control Text:"" 
     190 - ControlID:05C0, Control Class:"STATIC" Control Text:"" 
     191 - ControlID:05C1, Control Class:"STATIC" Control Text:"" 
     192 - ControlID:05C2, Control Class:"STATIC" Control Text:"fh1" 
     193 - ControlID:05C3, Control Class:"STATIC" Control Text:"fh2" 
     194 - ControlID:05C4, Control Class:"STATIC" Control Text:"fh3" 
     195 - ControlID:05C5, Control Class:"STATIC" Control Text:"fh4" 
     196 - ControlID:00FF, Control Class:"70" Control Text:"" 
     197 - ControlID:4744, Control Class:"wDDDDDDDDDDDDDDDDDGDGGGGGGGGDDOwGGGttDttttttDDDDDDDDDDDDDDDDGDtOtttttt" Control Text:"" 
     198 - ControlID:77CC, Control Class:"" Control Text:"wGGGLLLGGGLGLGGGLLLLLLLLLLLLLLO||wLLLLLLwLw|||GLttwtttttt" 
     199 - ControlID:0000, Control Class:"" Control Text:"" 
     200 - ControlID:0000, Control Class:"" Control Text:"" 
Name: DialogID_012B, # of Controls=001, Caption:"", ClassName:""
     001 - ControlID:0563, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_0132, # of Controls=000, Caption:"n", ClassName:""
Name: DialogID_0134, # of Controls=000, Caption:"a", ClassName:""
Name: DialogID_0136, # of Controls=200, Caption:"W", ClassName:""
     001 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv.99" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"	" 
     003 - ControlID:0000, Control Class:"BUTTON" Control Text:"@i" 
     004 - ControlID:0000, Control Class:"STATIC" Control Text:";ʛ" 
     005 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     006 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     007 - ControlID:0000, Control Class:"STATIC" Control Text:"K#" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     020 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     021 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     023 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     024 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     025 - ControlID:0009, Control Class:"BUTTON" Control Text:"" 
     026 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     027 - ControlID:0473, Control Class:"STATIC" Control Text:"T0w" 
     028 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     029 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     030 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f1" 
     031 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     032 - ControlID:03F3, Control Class:"STATIC" Control Text:"1000" 
     033 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     034 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     035 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     036 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     037 - ControlID:0535, Control Class:"STATIC" Control Text:"i" 
     038 - ControlID:0536, Control Class:"STATIC" Control Text:"99" 
     039 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     040 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     041 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     042 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";ʛ" 
     043 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     044 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     045 - ControlID:053E, Control Class:"BUTTON" Control Text:"" 
     046 - ControlID:053F, Control Class:"BUTTON" Control Text:"" 
     047 - ControlID:0540, Control Class:"BUTTON" Control Text:"" 
     048 - ControlID:0402, Control Class:"STATIC" Control Text:"1000" 
     049 - ControlID:0403, Control Class:"STATIC" Control Text:"1000" 
     050 - ControlID:05BC, Control Class:"STATIC" Control Text:"/" 
     051 - ControlID:05BD, Control Class:"STATIC" Control Text:"/" 
     052 - ControlID:0001, Control Class:"" Control Text:"" 
     053 - ControlID:0000, Control Class:"BUTTON" Control Text:"P_" 
     054 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     055 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     056 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     057 - ControlID:0000, Control Class:"BUTTON" Control Text:"F" 
     058 - ControlID:0000, Control Class:"BUTTON" Control Text:"@i" 
     059 - ControlID:5000, Control Class:"" Control Text:"iOl" 
     060 - ControlID:0000, Control Class:"BUTTON" Control Text:"	" 
     061 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     062 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     063 - ControlID:0001, Control Class:"" Control Text:"" 
     064 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     065 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     066 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     067 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     068 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     069 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     070 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     071 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     072 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv.99" 
     073 - ControlID:0000, Control Class:"STATIC" Control Text:";ʛ 1000" 
     074 - ControlID:0000, Control Class:"STATIC" Control Text:"2 1000" 
     075 - ControlID:0000, Control Class:"STATIC" Control Text:"z 1000" 
     076 - ControlID:0000, Control Class:"STATIC" Control Text:"K# 1000" 
     077 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     078 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     079 - ControlID:0000, Control Class:"STATIC" Control Text:"}- 1000" 
     080 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow 1000" 
     081 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     082 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     085 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     086 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     087 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     088 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     089 - ControlID:0001, Control Class:"" Control Text:"" 
     090 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     091 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     092 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     093 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     094 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"l'" 
     096 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     097 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     098 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     099 - ControlID:0000, Control Class:"BUTTON" Control Text:"	H
" 
     100 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     101 - ControlID:0000, Control Class:"BUTTON" Control Text:"q
" 
     102 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     103 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     104 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     105 - ControlID:0507, Control Class:"BUTTON" Control Text:";" 
     106 - ControlID:0508, Control Class:"BUTTON" Control Text:"" 
     107 - ControlID:0509, Control Class:"BUTTON" Control Text:"Sw" 
     108 - ControlID:050B, Control Class:"BUTTON" Control Text:"" 
     109 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     110 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     111 - ControlID:0509, Control Class:"BUTTON" Control Text:"" 
     112 - ControlID:050A, Control Class:"BUTTON" Control Text:"" 
     113 - ControlID:050C, Control Class:"BUTTON" Control Text:"	" 
     114 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     115 - ControlID:050D, Control Class:"BUTTON" Control Text:"" 
     116 - ControlID:0003, Control Class:"BUTTON" Control Text:"(" 
     117 - ControlID:0004, Control Class:"BUTTON" Control Text:"" 
     118 - ControlID:0005, Control Class:"BUTTON" Control Text:"h" 
     119 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     120 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     121 - ControlID:0521, Control Class:"LISTBOX" Control Text:"" 
     122 - ControlID:0001, Control Class:"" Control Text:"" 
     123 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     124 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     125 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     126 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     127 - ControlID:0000, Control Class:"STATIC" Control Text:"l'" 
     128 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     129 - ControlID:FFFF, Control Class:"" Control Text:"" 
     130 - ControlID:FFFF, Control Class:"" Control Text:"" 
     131 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     132 - ControlID:FFFF, Control Class:"" Control Text:"" 
     133 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     134 - ControlID:FFFF, Control Class:"" Control Text:"" 
     135 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     136 - ControlID:05B1, Control Class:"STATIC" Control Text:"" 
     137 - ControlID:05B3, Control Class:"STATIC" Control Text:"" 
     138 - ControlID:05B4, Control Class:"STATIC" Control Text:"1" 
     139 - ControlID:0001, Control Class:"" Control Text:"" 
     140 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     141 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     142 - ControlID:0001, Control Class:"" Control Text:"" 
     143 - ControlID:0000, Control Class:"EDIT" Control Text:"" 
     144 - ControlID:0000, Control Class:"BUTTON" Control Text:"/" 
     145 - ControlID:0000, Control Class:"BUTTON" Control Text:"&" 
     146 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     147 - ControlID:0000, Control Class:"STATIC" Control Text:"dULo:2o:K" 
     148 - ControlID:0563, Control Class:"BUTTON" Control Text:"" 
     149 - ControlID:0001, Control Class:"" Control Text:"" 
     150 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     151 - ControlID:0000, Control Class:"BUTTON" Control Text:"-b" 
     152 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     153 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     154 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     155 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     156 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     157 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     158 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     159 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     160 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     161 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     162 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     163 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     164 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     165 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     166 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     167 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     168 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     169 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     170 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     171 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     172 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     173 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     174 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     175 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     176 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     177 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     178 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     179 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     180 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     181 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     182 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     183 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     184 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     185 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     186 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     187 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     188 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     189 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     190 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     191 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     192 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     193 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     194 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     195 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     196 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     197 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     198 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     199 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     200 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_0137, # of Controls=002, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"fy'" 
     002 - ControlID:056B, Control Class:"LISTBOX" Control Text:"" 
Name: DialogID_0138, # of Controls=000, Caption:">", ClassName:""
Name: DialogID_014A, # of Controls=200, Caption:"}`", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"/" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"&" 
     003 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     004 - ControlID:0000, Control Class:"STATIC" Control Text:")a55G" 
     005 - ControlID:FFFF, Control Class:"" Control Text:"" 
     006 - ControlID:FFFF, Control Class:"" Control Text:"" 
     007 - ControlID:0000, Control Class:"STATIC" Control Text:"999" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:"999" 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"H" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     013 - ControlID:0001, Control Class:"255" Control Text:"" 
     014 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     015 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"y'
" 
     018 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     019 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     020 - ControlID:0009, Control Class:"BUTTON" Control Text:"" 
     021 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     022 - ControlID:0473, Control Class:"STATIC" Control Text:"T0w" 
     023 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     024 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     025 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f1" 
     026 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     027 - ControlID:03F3, Control Class:"STATIC" Control Text:"1000" 
     028 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     029 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     030 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     031 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     032 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     033 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     034 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";ʛ" 
     035 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     036 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     037 - ControlID:0402, Control Class:"STATIC" Control Text:"1000" 
     038 - ControlID:0403, Control Class:"STATIC" Control Text:"1000" 
     039 - ControlID:05BC, Control Class:"STATIC" Control Text:"/" 
     040 - ControlID:05BD, Control Class:"STATIC" Control Text:"/" 
     041 - ControlID:05BE, Control Class:"STATIC" Control Text:"" 
     042 - ControlID:05BF, Control Class:"STATIC" Control Text:"" 
     043 - ControlID:05C0, Control Class:"STATIC" Control Text:"" 
     044 - ControlID:605C1, Control Class:"STATIC" Control Text:"" 
     045 - ControlID:05C2, Control Class:"STATIC" Control Text:"fh1" 
     046 - ControlID:05C3, Control Class:"STATIC" Control Text:"fh2" 
     047 - ControlID:05C4, Control Class:"STATIC" Control Text:"fh3" 
     048 - ControlID:05C5, Control Class:"STATIC" Control Text:"fh4" 
     049 - ControlID:00FF, Control Class:"70" Control Text:"" 
     050 - ControlID:4744, Control Class:"wDDDDDDDDDDDDDDDDDGDGGGGGGGGDDOwGGGttDttttttDDDDDDDDDDDDDDDDGDtOtttttt" Control Text:"" 
     051 - ControlID:77CC, Control Class:"" Control Text:"wGGGLLLGGGLGLGGGLLLLLLLLLLLLLLO||wLLLLLLwLw|||GLttwtttttt" 
     052 - ControlID:0000, Control Class:"" Control Text:"" 
     053 - ControlID:0000, Control Class:"" Control Text:"" 
     054 - ControlID:FFFF, Control Class:"" Control Text:"" 
     055 - ControlID:FFFF, Control Class:"" Control Text:"" 
     056 - ControlID:0000, Control Class:"" Control Text:"" 
     057 - ControlID:FFFF, Control Class:"" Control Text:"" 
     058 - ControlID:FFFF, Control Class:"" Control Text:"" 
     059 - ControlID:0000, Control Class:"" Control Text:"" 
     060 - ControlID:FFFF, Control Class:"" Control Text:"" 
     061 - ControlID:FFFF, Control Class:"" Control Text:"" 
     062 - ControlID:0000, Control Class:"" Control Text:"" 
     063 - ControlID:FFFF, Control Class:"" Control Text:"" 
     064 - ControlID:FFFF, Control Class:"" Control Text:"" 
     065 - ControlID:0000, Control Class:"" Control Text:"" 
     066 - ControlID:FFFF, Control Class:"" Control Text:"" 
     067 - ControlID:FFFF, Control Class:"" Control Text:"" 
     068 - ControlID:0000, Control Class:"" Control Text:"" 
     069 - ControlID:FFFF, Control Class:"" Control Text:"" 
     070 - ControlID:FFFF, Control Class:"" Control Text:"" 
     071 - ControlID:0000, Control Class:"" Control Text:"" 
     072 - ControlID:FFFF, Control Class:"" Control Text:"" 
     073 - ControlID:FFFF, Control Class:"" Control Text:"" 
     074 - ControlID:FFFF, Control Class:"" Control Text:"" 
     075 - ControlID:FFFF, Control Class:"" Control Text:"" 
     076 - ControlID:FFFF, Control Class:"" Control Text:"" 
     077 - ControlID:FFFF, Control Class:"" Control Text:"" 
     078 - ControlID:FFFF, Control Class:"" Control Text:"" 
     079 - ControlID:FFFF, Control Class:"" Control Text:"" 
     080 - ControlID:FFFF, Control Class:"" Control Text:"" 
     081 - ControlID:FFFF, Control Class:"" Control Text:"" 
     082 - ControlID:FFFF, Control Class:"" Control Text:"" 
     083 - ControlID:FFFF, Control Class:"" Control Text:"" 
     084 - ControlID:FFFF, Control Class:"" Control Text:"" 
     085 - ControlID:FFFF, Control Class:"" Control Text:"" 
     086 - ControlID:FFFF, Control Class:"" Control Text:"" 
     087 - ControlID:FFFF, Control Class:"" Control Text:"" 
     088 - ControlID:FFFF, Control Class:"" Control Text:"" 
     089 - ControlID:FFFF, Control Class:"" Control Text:"" 
     090 - ControlID:FFFF, Control Class:"" Control Text:"" 
     091 - ControlID:FFFF, Control Class:"" Control Text:"" 
     092 - ControlID:FFFF, Control Class:"" Control Text:"" 
     093 - ControlID:FFFF, Control Class:"" Control Text:"" 
     094 - ControlID:FFFF, Control Class:"" Control Text:"" 
     095 - ControlID:FFFF, Control Class:"" Control Text:"" 
     096 - ControlID:FFFF, Control Class:"" Control Text:"" 
     097 - ControlID:FFFF, Control Class:"" Control Text:"" 
     098 - ControlID:FFFF, Control Class:"" Control Text:"" 
     099 - ControlID:FFFF, Control Class:"" Control Text:"" 
     100 - ControlID:FFFF, Control Class:"" Control Text:"" 
     101 - ControlID:FFFF, Control Class:"" Control Text:"" 
     102 - ControlID:FFFF, Control Class:"" Control Text:"" 
     103 - ControlID:FFFF, Control Class:"" Control Text:"" 
     104 - ControlID:FFFF, Control Class:"" Control Text:"" 
     105 - ControlID:FFFF, Control Class:"" Control Text:"" 
     106 - ControlID:FFFF, Control Class:"" Control Text:"" 
     107 - ControlID:FFFF, Control Class:"" Control Text:"" 
     108 - ControlID:FFFF, Control Class:"" Control Text:"" 
     109 - ControlID:FFFF, Control Class:"" Control Text:"" 
     110 - ControlID:FFFF, Control Class:"" Control Text:"" 
     111 - ControlID:FFFF, Control Class:"" Control Text:"" 
     112 - ControlID:FFFF, Control Class:"" Control Text:"" 
     113 - ControlID:FFFF, Control Class:"" Control Text:"" 
     114 - ControlID:FFFF, Control Class:"" Control Text:"" 
     115 - ControlID:FFFF, Control Class:"" Control Text:"" 
     116 - ControlID:FFFF, Control Class:"" Control Text:"" 
     117 - ControlID:FFFF, Control Class:"" Control Text:"" 
     118 - ControlID:FFFF, Control Class:"" Control Text:"" 
     119 - ControlID:FFFF, Control Class:"" Control Text:"" 
     120 - ControlID:FFFF, Control Class:"" Control Text:"" 
     121 - ControlID:FFFF, Control Class:"" Control Text:"" 
     122 - ControlID:FFFF, Control Class:"" Control Text:"" 
     123 - ControlID:FFFF, Control Class:"" Control Text:"" 
     124 - ControlID:FFFF, Control Class:"" Control Text:"" 
     125 - ControlID:FFFF, Control Class:"" Control Text:"" 
     126 - ControlID:FFFF, Control Class:"" Control Text:"" 
     127 - ControlID:FFFF, Control Class:"" Control Text:"" 
     128 - ControlID:FFFF, Control Class:"" Control Text:"" 
     129 - ControlID:FFFF, Control Class:"" Control Text:"" 
     130 - ControlID:FFFF, Control Class:"" Control Text:"" 
     131 - ControlID:FFFF, Control Class:"" Control Text:"" 
     132 - ControlID:FFFF, Control Class:"" Control Text:"" 
     133 - ControlID:FFFF, Control Class:"" Control Text:"" 
     134 - ControlID:FFFF, Control Class:"" Control Text:"" 
     135 - ControlID:FFFF, Control Class:"" Control Text:"" 
     136 - ControlID:FFFF, Control Class:"" Control Text:"" 
     137 - ControlID:FFFF, Control Class:"" Control Text:"" 
     138 - ControlID:FFFF, Control Class:"" Control Text:"" 
     139 - ControlID:FFFF, Control Class:"" Control Text:"" 
     140 - ControlID:FFFF, Control Class:"" Control Text:"" 
     141 - ControlID:FFFF, Control Class:"" Control Text:"" 
     142 - ControlID:FFFF, Control Class:"" Control Text:"" 
     143 - ControlID:FFFF, Control Class:"" Control Text:"" 
     144 - ControlID:FFFF, Control Class:"" Control Text:"" 
     145 - ControlID:FFFF, Control Class:"" Control Text:"" 
     146 - ControlID:FFFF, Control Class:"" Control Text:"" 
     147 - ControlID:FFFF, Control Class:"" Control Text:"" 
     148 - ControlID:FFFF, Control Class:"" Control Text:"" 
     149 - ControlID:FFFF, Control Class:"" Control Text:"" 
     150 - ControlID:FFFF, Control Class:"" Control Text:"" 
     151 - ControlID:FFFF, Control Class:"" Control Text:"" 
     152 - ControlID:FFFF, Control Class:"" Control Text:"" 
     153 - ControlID:FFFF, Control Class:"" Control Text:"" 
     154 - ControlID:FFFF, Control Class:"" Control Text:"" 
     155 - ControlID:FFFF, Control Class:"" Control Text:"" 
     156 - ControlID:FFFF, Control Class:"" Control Text:"" 
     157 - ControlID:FFFF, Control Class:"" Control Text:"" 
     158 - ControlID:FFFF, Control Class:"" Control Text:"" 
     159 - ControlID:FFFF, Control Class:"" Control Text:"" 
     160 - ControlID:FFFF, Control Class:"" Control Text:"" 
     161 - ControlID:FFFF, Control Class:"" Control Text:"" 
     162 - ControlID:FFFF, Control Class:"" Control Text:"" 
     163 - ControlID:FFFF, Control Class:"" Control Text:"" 
     164 - ControlID:FFFF, Control Class:"" Control Text:"" 
     165 - ControlID:FFFF, Control Class:"" Control Text:"" 
     166 - ControlID:FFFF, Control Class:"" Control Text:"" 
     167 - ControlID:FFFF, Control Class:"" Control Text:"" 
     168 - ControlID:FFFF, Control Class:"" Control Text:"" 
     169 - ControlID:FFFF, Control Class:"" Control Text:"" 
     170 - ControlID:FFFF, Control Class:"" Control Text:"" 
     171 - ControlID:FFFF, Control Class:"" Control Text:"" 
     172 - ControlID:FFFF, Control Class:"" Control Text:"" 
     173 - ControlID:FFFF, Control Class:"" Control Text:"" 
     174 - ControlID:FFFF, Control Class:"" Control Text:"" 
     175 - ControlID:FFFF, Control Class:"" Control Text:"" 
     176 - ControlID:FFFF, Control Class:"" Control Text:"" 
     177 - ControlID:FFFF, Control Class:"" Control Text:"" 
     178 - ControlID:FFFF, Control Class:"" Control Text:"" 
     179 - ControlID:FFFF, Control Class:"" Control Text:"" 
     180 - ControlID:FFFF, Control Class:"" Control Text:"" 
     181 - ControlID:FFFF, Control Class:"" Control Text:"" 
     182 - ControlID:FFFF, Control Class:"" Control Text:"" 
     183 - ControlID:FFFF, Control Class:"" Control Text:"" 
     184 - ControlID:FFFF, Control Class:"" Control Text:"" 
     185 - ControlID:FFFF, Control Class:"" Control Text:"" 
     186 - ControlID:FFFF, Control Class:"" Control Text:"" 
     187 - ControlID:FFFF, Control Class:"" Control Text:"" 
     188 - ControlID:FFFF, Control Class:"" Control Text:"" 
     189 - ControlID:FFFF, Control Class:"" Control Text:"" 
     190 - ControlID:FFFF, Control Class:"" Control Text:"" 
     191 - ControlID:FFFF, Control Class:"" Control Text:"" 
     192 - ControlID:FFFF, Control Class:"" Control Text:"" 
     193 - ControlID:FFFF, Control Class:"" Control Text:"" 
     194 - ControlID:FFFF, Control Class:"" Control Text:"" 
     195 - ControlID:FFFF, Control Class:"" Control Text:"" 
     196 - ControlID:FFFF, Control Class:"" Control Text:"" 
     197 - ControlID:FFFF, Control Class:"" Control Text:"" 
     198 - ControlID:FFFF, Control Class:"" Control Text:"" 
     199 - ControlID:FFFF, Control Class:"" Control Text:"" 
     200 - ControlID:FFFF, Control Class:"" Control Text:"" 
Name: DialogID_014D, # of Controls=000, Caption:"fy'1", ClassName:""
Name: DialogID_014E, # of Controls=034, Caption:"f", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"-b" 
     003 - ControlID:0009, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:0473, Control Class:"STATIC" Control Text:"T0w" 
     006 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     007 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     008 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f1" 
     009 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     010 - ControlID:03F3, Control Class:"STATIC" Control Text:"1000" 
     011 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     012 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     013 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     014 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     015 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     016 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     017 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";ʛ" 
     018 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     019 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     020 - ControlID:0402, Control Class:"STATIC" Control Text:"1000" 
     021 - ControlID:0403, Control Class:"STATIC" Control Text:"1000" 
     022 - ControlID:05BC, Control Class:"STATIC" Control Text:"/" 
     023 - ControlID:05BD, Control Class:"STATIC" Control Text:"/" 
     024 - ControlID:05BE, Control Class:"STATIC" Control Text:"" 
     025 - ControlID:05BF, Control Class:"STATIC" Control Text:"" 
     026 - ControlID:05C0, Control Class:"STATIC" Control Text:"" 
     027 - ControlID:05C1, Control Class:"STATIC" Control Text:"" 
     028 - ControlID:05C2, Control Class:"STATIC" Control Text:"fh1" 
     029 - ControlID:05C3, Control Class:"STATIC" Control Text:"fh2" 
     030 - ControlID:05C4, Control Class:"STATIC" Control Text:"fh3" 
     031 - ControlID:05C5, Control Class:"STATIC" Control Text:"fh4" 
     032 - ControlID:00FF, Control Class:"70" Control Text:"" 
     033 - ControlID:4744, Control Class:"wDDDDDDDDDDDDDDDDDGDGGGGGGGGDDOwGGGttDttttttDDDDDDDDDDDDDDDDGDtOtttttt" Control Text:"" 
     034 - ControlID:77CC, Control Class:"" Control Text:"wGGGLLLGGGLGLGGGLLLLLLLLLLLLLLO||wLLLLLLwLw|||GLttwtttttt" 

+++++++++++++++++++ IMPORTED FUNCTIONS ++++++++++++++++++
Number of Imported Modules =    6 (decimal)

   Import Module 001: WINMM.dll
   Import Module 002: COMCTL32.dll
   Import Module 003: KERNEL32.dll
   Import Module 004: USER32.dll
   Import Module 005: GDI32.dll
   Import Module 006: koeicda.dll

+++++++++++++++++++ IMPORT MODULE DETAILS +++++++++++++++

   Import Module 001: WINMM.dll

 Addr:000B8814 hint(0032) Name: mciSendCommandA
 Addr:000B8826 hint(0090) Name: sndPlaySoundA

   Import Module 002: COMCTL32.dll

 Addr:000B8890 hint(0019) Name: ImageList_DragLeave
 Addr:000B88A6 hint(0018) Name: ImageList_DragEnter
 Addr:000B8840 hint(001C) Name: ImageList_Draw
 Addr:000B8852 hint(0017) Name: ImageList_Destroy
 Addr:000B8866 hint(001A) Name: ImageList_DragMove
 Addr:000B887C hint(001E) Name: ImageList_EndDrag
 Addr:000B8912 hint(0008) Name: CreateToolbarEx
 Addr:80000011 hint(0011) Name: InitCommonControls
 Addr:000B88BC hint(0014) Name: ImageList_BeginDrag
 Addr:000B88D2 hint(002D) Name: ImageList_ReplaceIcon
 Addr:000B88EA hint(0016) Name: ImageList_Create
 Addr:000B88FE hint(0021) Name: ImageList_GetIcon

   Import Module 003: KERNEL32.dll

 Addr:000B8A72 hint(026A) Name: WaitForSingleObject
 Addr:000B8AA8 hint(006C) Name: ExitThread
 Addr:000B8AB6 hint(0247) Name: TerminateThread
 Addr:000B8A5E hint(0233) Name: SetThreadPriority
 Addr:000B8A4E hint(0043) Name: CreateThread
 Addr:000B8A3E hint(0089) Name: FindResourceA
 Addr:000B8A2E hint(0195) Name: LoadResource
 Addr:000B8A1E hint(01A3) Name: LockResource
 Addr:000B8A0E hint(00F5) Name: GetLocalTime
 Addr:000B89F6 hint(014F) Name: GetVolumeInformationA
 Addr:000B89E6 hint(00DF) Name: GetDriveTypeA
 Addr:000B89D4 hint(0082) Name: FindFirstFileA
 Addr:000B89C8 hint(007E) Name: FindClose
 Addr:000B89BA hint(004E) Name: DeleteFileA
 Addr:000B89AC hint(0018) Name: CloseHandle
 Addr:000B89A0 hint(027B) Name: WriteFile
 Addr:000B898E hint(0219) Name: SetFilePointer
 Addr:000B8982 hint(01D6) Name: ReadFile
 Addr:000B8974 hint(0031) Name: CreateFileA
 Addr:000B895C hint(00D1) Name: GetCurrentDirectoryA
 Addr:000B8950 hint(02A1) Name: lstrlenA
 Addr:000B8940 hint(0190) Name: LoadLibraryA
 Addr:000B8932 hint(0098) Name: FreeLibrary
 Addr:000B8A88 hint(0241) Name: SuspendThread
 Addr:000B8A98 hint(01E2) Name: ResumeThread
 Addr:000B9628 hint(012B) Name: GetStringTypeA
 Addr:000B9618 hint(0180) Name: IsBadCodePtr
 Addr:000B9608 hint(0186) Name: IsBadWritePtr
 Addr:000B95DA hint(0236) Name: SetUnhandledExceptionFilter
 Addr:000B95CC hint(00EF) Name: GetFileType
 Addr:000B95F8 hint(0183) Name: IsBadReadPtr
 Addr:000B95AA hint(021B) Name: SetHandleCount
 Addr:000B959E hint(0109) Name: GetOEMCP
 Addr:000B95BC hint(012A) Name: GetStdHandle
 Addr:000B9588 hint(00A3) Name: GetCPInfo
 Addr:000B9572 hint(026E) Name: WideCharToMultiByte
 Addr:000B9594 hint(009D) Name: GetACP
 Addr:000B9540 hint(00E1) Name: GetEnvironmentStrings
 Addr:000B9526 hint(0097) Name: FreeEnvironmentStringsW
 Addr:000B9558 hint(00E3) Name: GetEnvironmentStringsW
 Addr:000B94F6 hint(0096) Name: FreeEnvironmentStringsA
 Addr:000B94E0 hint(00FC) Name: GetModuleFileNameA
 Addr:000B9510 hint(01AB) Name: MultiByteToWideChar
 Addr:000B94B2 hint(0116) Name: GetProcAddress
 Addr:000B94A2 hint(025B) Name: VirtualAlloc
 Addr:000B94C4 hint(0250) Name: UnhandledExceptionFilter
 Addr:000B9486 hint(016A) Name: HeapCreate
 Addr:000B9478 hint(016C) Name: HeapDestroy
 Addr:000B9494 hint(025E) Name: VirtualFree
 Addr:000B9458 hint(00D3) Name: GetCurrentProcess
 Addr:000B9444 hint(0246) Name: TerminateProcess
 Addr:000B946C hint(0172) Name: HeapSize
 Addr:000B9428 hint(014C) Name: GetVersion
 Addr:000B9416 hint(00AA) Name: GetCommandLineA
 Addr:000B9436 hint(0171) Name: HeapReAlloc
 Addr:000B93F0 hint(00FE) Name: GetModuleHandleA
 Addr:000B93E4 hint(0168) Name: HeapAlloc
 Addr:000B9404 hint(0128) Name: GetStartupInfoA
 Addr:000B93CC hint(01E5) Name: RtlUnwind
 Addr:000B963A hint(012E) Name: GetStringTypeW
 Addr:000B93D8 hint(016E) Name: HeapFree
 Addr:000B93AE hint(0145) Name: GetTickCount
 Addr:000B93A0 hint(0155) Name: GlobalAlloc
 Addr:000B9392 hint(0160) Name: GlobalLock
 Addr:000B9382 hint(0166) Name: GlobalUnlock
 Addr:000B9374 hint(015C) Name: GlobalFree
 Addr:000B9364 hint(014D) Name: GetVersionExA
 Addr:000B964C hint(018D) Name: LCMapStringA
 Addr:000B965C hint(018E) Name: LCMapStringW
 Addr:000B93BE hint(006B) Name: ExitProcess

   Import Module 004: USER32.dll

 Addr:000B8FF6 hint(0088) Name: DestroyIcon
 Addr:000B9004 hint(0178) Name: LoadImageA
 Addr:000B9012 hint(0167) Name: IsWindow
 Addr:000B901E hint(025E) Name: WinHelpA
 Addr:000B8CF8 hint(0143) Name: GetWindowThreadProcessId
 Addr:000B902A hint(022B) Name: ShowScrollBar
 Addr:000B903A hint(0108) Name: GetLastActivePopup
 Addr:000B9050 hint(0164) Name: IsIconic
 Addr:000B905C hint(00CD) Name: FindWindowA
 Addr:000B906A hint(00A6) Name: DrawMenuBar
 Addr:000B9078 hint(01FB) Name: SetMenu
 Addr:000B9082 hint(017E) Name: LoadMenuA
 Addr:000B908E hint(0128) Name: GetSubMenu
 Addr:000B909C hint(00B0) Name: EnableMenuItem
 Addr:000B90AE hint(010D) Name: GetMenuItemCount
 Addr:000B90C2 hint(0030) Name: CheckMenuItem
 Addr:000B90D2 hint(018B) Name: MapDialogRect
 Addr:000B90E2 hint(020A) Name: SetScrollInfo
 Addr:000B90F2 hint(016B) Name: IsZoomed
 Addr:000B90FE hint(0125) Name: GetScrollPos
 Addr:000B8CE4 hint(0225) Name: SetWindowsHookExA
 Addr:000B8CCE hint(0248) Name: UnhookWindowsHookEx
 Addr:000B8CBC hint(0011) Name: CallNextHookEx
 Addr:000B8CB0 hint(01EC) Name: SetCursor
 Addr:000B8FC4 hint(00EB) Name: GetCursor
 Addr:000B8FD0 hint(00D8) Name: GetCapture
 Addr:000B8FDE hint(0216) Name: SetTimer
 Addr:000B8C74 hint(0195) Name: MessageBoxA
 Addr:000B8C5C hint(005C) Name: DdeClientTransaction
 Addr:000B8C46 hint(004B) Name: CreateDialogParamA
 Addr:000B8C36 hint(0251) Name: UpdateWindow
 Addr:000B8C2A hint(01F5) Name: SetFocus
 Addr:000B8C1C hint(00F3) Name: GetDlgItem
 Addr:000B8C0A hint(0221) Name: SetWindowTextA
 Addr:000B8BF4 hint(01D8) Name: SendDlgItemMessageA
 Addr:000B8BEC hint(00EE) Name: GetDC
 Addr:000B8BE0 hint(01CD) Name: ReleaseDC
 Addr:000B8BCE hint(020C) Name: SetScrollRange
 Addr:000B8BBE hint(020B) Name: SetScrollPos
 Addr:000B8BAE hint(00E4) Name: GetClientRect
 Addr:000B8B9C hint(0152) Name: InvalidateRect
 Addr:000B8B8E hint(0009) Name: BeginPaint
 Addr:000B8B82 hint(00B6) Name: EndPaint
 Addr:000B8B72 hint(01DA) Name: SendMessageA
 Addr:000B8B60 hint(0080) Name: DefWindowProcA
 Addr:000B8B4E hint(016A) Name: IsWindowVisible
 Addr:000B8B40 hint(022D) Name: ShowWindow
 Addr:000B8B34 hint(0176) Name: LoadIconA
 Addr:000B8B26 hint(0172) Name: LoadCursorA
 Addr:000B8B14 hint(01BE) Name: RegisterClassA
 Addr:000B8B02 hint(0055) Name: CreateWindowExA
 Addr:000B8AF0 hint(0036) Name: ClientToScreen
 Addr:000B8AE2 hint(019D) Name: MoveWindow
 Addr:000B8AD6 hint(0264) Name: wsprintfA
 Addr:000B8FB8 hint(016D) Name: KillTimer
 Addr:000B8FA4 hint(000A) Name: BringWindowToTop
 Addr:000B8F90 hint(0001) Name: AdjustWindowRect
 Addr:000B8F84 hint(0203) Name: SetParent
 Addr:000B8F74 hint(00B2) Name: EnableWindow
 Addr:000B8F62 hint(0054) Name: CreatePopupMenu
 Addr:000B8F54 hint(0004) Name: AppendMenuA
 Addr:000B8C82 hint(008E) Name: DialogBoxParamA
 Addr:000B8F08 hint(0112) Name: GetMenuState
 Addr:000B8F22 hint(01E2) Name: SetActiveWindow
 Addr:000B8F18 hint(0109) Name: GetMenu
 Addr:000B8EDA hint(0087) Name: DestroyCursor
 Addr:000B8EFA hint(0229) Name: ShowCursor
 Addr:000B8EEA hint(01EE) Name: SetCursorPos
 Addr:000B8EAA hint(00A5) Name: DrawIconEx
 Addr:000B8EC8 hint(00D5) Name: GetActiveWindow
 Addr:000B8EB8 hint(00F4) Name: GetDlgItemInt
 Addr:000B8E80 hint(01E3) Name: SetCapture
 Addr:000B8E9E hint(00CC) Name: FillRect
 Addr:000B8E8E hint(01F1) Name: SetDlgItemInt
 Addr:000B8E46 hint(01CC) Name: ReleaseCapture
 Addr:000B8E70 hint(013D) Name: GetWindowRect
 Addr:000B8E58 hint(0033) Name: ChildWindowFromPoint
 Addr:000B8E18 hint(00ED) Name: GetCursorPos
 Addr:000B8E38 hint(00AB) Name: DrawTextExA
 Addr:000B8E28 hint(00F2) Name: GetDlgCtrlID
 Addr:000B8DE6 hint(021B) Name: SetWindowLongA
 Addr:000B8E06 hint(01D3) Name: ScreenToClient
 Addr:000B8DF8 hint(0183) Name: LoadStringA
 Addr:000B8DAE hint(012C) Name: GetSystemMetrics
 Addr:000B8DD8 hint(0266) Name: wvsprintfA
 Addr:000B8DC2 hint(0198) Name: MessageBoxIndirectA
 Addr:000B8D84 hint(011D) Name: GetParent
 Addr:000B8DA2 hint(00AA) Name: DrawTextA
 Addr:000B8D90 hint(013A) Name: GetWindowLongA
 Addr:000B8D52 hint(01BD) Name: RedrawWindow
 Addr:000B8D72 hint(0012) Name: CallWindowProcA
 Addr:000B8D62 hint(01AF) Name: PeekMessageA
 Addr:000B8D24 hint(0170) Name: LoadBitmapA
 Addr:000B8D42 hint(01E6) Name: SetClassLongA
 Addr:000B8D32 hint(008A) Name: DestroyWindow
 Addr:000B8CA0 hint(01B1) Name: PostMessageA
 Addr:000B8D14 hint(021E) Name: SetWindowPos
 Addr:000B8C94 hint(00B4) Name: EndDialog
 Addr:000B8F34 hint(0089) Name: DestroyMenu
 Addr:000B8F42 hint(023F) Name: TrackPopupMenu
 Addr:000B8FEA hint(00A4) Name: DrawIcon
 Addr:000B96AC hint(01B3) Name: PostQuitMessage
 Addr:000B966C hint(0090) Name: DispatchMessageA
 Addr:000B9680 hint(0245) Name: TranslateMessage
 Addr:000B9694 hint(0234) Name: SystemParametersInfoA

   Import Module 005: GDI32.dll

 Addr:000B977C hint(0035) Name: CreatePalette
 Addr:000B978C hint(00FC) Name: GetSystemPaletteEntries
 Addr:000B911A hint(0046) Name: DeleteObject
 Addr:000B96F4 hint(0161) Name: SetMapMode
 Addr:000B96E0 hint(00EF) Name: GetPaletteEntries
 Addr:000B9136 hint(000A) Name: BitBlt
 Addr:000B9140 hint(014A) Name: SelectObject
 Addr:000B9150 hint(001F) Name: CreateCompatibleDC
 Addr:000B9166 hint(0183) Name: TextOutA
 Addr:000B9172 hint(002B) Name: CreateFontA
 Addr:000B9180 hint(0151) Name: SetBkMode
 Addr:000B918C hint(0172) Name: SetTextColor
 Addr:000B919C hint(010B) Name: GetTextMetricsA
 Addr:000B91AE hint(0148) Name: SelectClipRgn
 Addr:000B91BE hint(003B) Name: CreateRectRgn
 Addr:000B91CE hint(0122) Name: PatBlt
 Addr:000B91D8 hint(001E) Name: CreateCompatibleBitmap
 Addr:000B91F2 hint(00FA) Name: GetStockObject
 Addr:000B9204 hint(0019) Name: CreateBitmap
 Addr:000B9214 hint(00C7) Name: GetDeviceCaps
 Addr:000B9224 hint(0170) Name: SetTextAlign
 Addr:000B9234 hint(0040) Name: CreateSolidBrush
 Addr:000B9248 hint(017F) Name: StretchDIBits
 Addr:000B9258 hint(0150) Name: SetBkColor
 Addr:000B912A hint(0043) Name: DeleteDC
 Addr:000B9702 hint(0025) Name: CreateDIBitmap
 Addr:000B9714 hint(00C6) Name: GetDIBits
 Addr:000B96BE hint(0137) Name: RealizePalette
 Addr:000B96D0 hint(014B) Name: SelectPalette
 Addr:000B975A hint(00EA) Name: GetObjectA
 Addr:000B9768 hint(0156) Name: SetDIBColorTable
 Addr:000B9720 hint(0006) Name: AnimatePalette
 Addr:000B9732 hint(016E) Name: SetStretchBltMode
 Addr:000B9746 hint(0024) Name: CreateDIBSection

   Import Module 006: koeicda.dll

 Addr:000B9306 hint(0011) Name: CDAudioResume
 Addr:000B9316 hint(000A) Name: CDAudioIsPlaying
 Addr:000B932A hint(0005) Name: CDAudioGetPlayingPos
 Addr:000B9342 hint(0004) Name: CDAudioGetNumTracks
 Addr:000B92E8 hint(0012) Name: CDAudioStop
 Addr:000B92BC hint(0010) Name: CDAudioPlayTrack
 Addr:000B92A8 hint(0013) Name: CDAudioTerminate
 Addr:000B9294 hint(0008) Name: CDAudioInitialize
 Addr:000B927E hint(0003) Name: CDAudioGetNumDrives
 Addr:000B9270 hint(000D) Name: CDAudioOpen
 Addr:000B92D0 hint(0002) Name: CDAudioGetDriveLetter
 Addr:000B92F6 hint(000E) Name: CDAudioPause

+++++++++++++++++++ EXPORTED FUNCTIONS ++++++++++++++++++
Number of Exported Functions = 0000 (decimal)




+++++++++++++++++++ ASSEMBLY CODE LISTING ++++++++++++++++++
//********************** Start of Code in Object .text **************
Program Entry Point = 0046E660 (EKD4.EXE File Offset:000E1860)


:00401000 55                      push ebp
:00401001 8BEC                    mov ebp, esp
:00401003 83EC20                  sub esp, 00000020
:00401006 817D0885020000          cmp dword ptr [ebp+08], 00000285
:0040100D 7207                    jb 00401016
:0040100F 0CFF                    or al, FF
:00401011 E97C020000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040100D(C)
|
:00401016 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401019 6BC970                  imul ecx, 00000070
:0040101C 81C198224900            add ecx, 00492298
:00401022 E849370000              call 00404770
:00401027 8845FC                  mov byte ptr [ebp-04], al
:0040102A 837D0800                cmp dword ptr [ebp+08], 00000000
:0040102E 7563                    jne 00401093
:00401030 8B45FC                  mov eax, dword ptr [ebp-04]
:00401033 25FF000000              and eax, 000000FF
:00401038 8945F8                  mov dword ptr [ebp-08], eax
:0040103B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040103E 83E902                  sub ecx, 00000002
:00401041 894DF8                  mov dword ptr [ebp-08], ecx
:00401044 837DF80D                cmp dword ptr [ebp-08], 0000000D
:00401048 7742                    ja 0040108C
:0040104A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040104D FF249596124000          jmp dword ptr [4*edx+00401296]
:00401054 B057                    mov al, 57
:00401056 E937020000              jmp 00401292
:0040105B B058                    mov al, 58
:0040105D E930020000              jmp 00401292
:00401062 B059                    mov al, 59
:00401064 E929020000              jmp 00401292
:00401069 B05A                    mov al, 5A
:0040106B E922020000              jmp 00401292
:00401070 B05B                    mov al, 5B
:00401072 E91B020000              jmp 00401292
:00401077 B05C                    mov al, 5C
:00401079 E914020000              jmp 00401292
:0040107E B05D                    mov al, 5D
:00401080 E90D020000              jmp 00401292
:00401085 B05E                    mov al, 5E
:00401087 E906020000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401048(C)
|
:0040108C B057                    mov al, 57
:0040108E E9FF010000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040102E(C)
|
:00401093 837D0803                cmp dword ptr [ebp+08], 00000003
:00401097 755D                    jne 004010F6
:00401099 8B45FC                  mov eax, dword ptr [ebp-04]
:0040109C 25FF000000              and eax, 000000FF
:004010A1 8945F4                  mov dword ptr [ebp-0C], eax
:004010A4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004010A7 83E904                  sub ecx, 00000004
:004010AA 894DF4                  mov dword ptr [ebp-0C], ecx
:004010AD 837DF411                cmp dword ptr [ebp-0C], 00000011
:004010B1 773C                    ja 004010EF
:004010B3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004010B6 33D2                    xor edx, edx
:004010B8 8A90EA124000            mov dl, byte ptr [eax+004012EA]
:004010BE FF2495CE124000          jmp dword ptr [4*edx+004012CE]
:004010C5 B05F                    mov al, 5F
:004010C7 E9C6010000              jmp 00401292
:004010CC B060                    mov al, 60
:004010CE E9BF010000              jmp 00401292
:004010D3 B061                    mov al, 61
:004010D5 E9B8010000              jmp 00401292
:004010DA B062                    mov al, 62
:004010DC E9B1010000              jmp 00401292
:004010E1 B063                    mov al, 63
:004010E3 E9AA010000              jmp 00401292
:004010E8 B064                    mov al, 64
:004010EA E9A3010000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004010B1(C)
|
:004010EF B05F                    mov al, 5F
:004010F1 E99C010000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401097(C)
|
:004010F6 837D0801                cmp dword ptr [ebp+08], 00000001
:004010FA 7548                    jne 00401144
:004010FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004010FF 81E1FF000000            and ecx, 000000FF
:00401105 894DF0                  mov dword ptr [ebp-10], ecx
:00401108 8B55F0                  mov edx, dword ptr [ebp-10]
:0040110B 83EA02                  sub edx, 00000002
:0040110E 8955F0                  mov dword ptr [ebp-10], edx
:00401111 837DF005                cmp dword ptr [ebp-10], 00000005
:00401115 7726                    ja 0040113D
:00401117 8B45F0                  mov eax, dword ptr [ebp-10]
:0040111A FF2485FC124000          jmp dword ptr [4*eax+004012FC]
:00401121 B065                    mov al, 65
:00401123 E96A010000              jmp 00401292
:00401128 B066                    mov al, 66
:0040112A E963010000              jmp 00401292
:0040112F B067                    mov al, 67
:00401131 E95C010000              jmp 00401292
:00401136 B068                    mov al, 68
:00401138 E955010000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401115(C)
|
:0040113D B065                    mov al, 65
:0040113F E94E010000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004010FA(C)
|
:00401144 837D0802                cmp dword ptr [ebp+08], 00000002
:00401148 755E                    jne 004011A8
:0040114A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040114D 81E1FF000000            and ecx, 000000FF
:00401153 894DEC                  mov dword ptr [ebp-14], ecx
:00401156 8B55EC                  mov edx, dword ptr [ebp-14]
:00401159 83EA02                  sub edx, 00000002
:0040115C 8955EC                  mov dword ptr [ebp-14], edx
:0040115F 837DEC0F                cmp dword ptr [ebp-14], 0000000F
:00401163 773C                    ja 004011A1
:00401165 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00401168 33C0                    xor eax, eax
:0040116A 8A8130134000            mov al, byte ptr [ecx+00401330]
:00401170 FF248514134000          jmp dword ptr [4*eax+00401314]
:00401177 B069                    mov al, 69
:00401179 E914010000              jmp 00401292
:0040117E B06A                    mov al, 6A
:00401180 E90D010000              jmp 00401292
:00401185 B06B                    mov al, 6B
:00401187 E906010000              jmp 00401292
:0040118C B06C                    mov al, 6C
:0040118E E9FF000000              jmp 00401292
:00401193 B06D                    mov al, 6D
:00401195 E9F8000000              jmp 00401292
:0040119A B06E                    mov al, 6E
:0040119C E9F1000000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401163(C)
|
:004011A1 B069                    mov al, 69
:004011A3 E9EA000000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401148(C)
|
:004011A8 837D0804                cmp dword ptr [ebp+08], 00000004
:004011AC 7555                    jne 00401203
:004011AE 8B55FC                  mov edx, dword ptr [ebp-04]
:004011B1 81E2FF000000            and edx, 000000FF
:004011B7 8955E8                  mov dword ptr [ebp-18], edx
:004011BA 837DE813                cmp dword ptr [ebp-18], 00000013
:004011BE 773C                    ja 004011FC
:004011C0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004011C3 33C0                    xor eax, eax
:004011C5 8A815C134000            mov al, byte ptr [ecx+0040135C]
:004011CB FF248540134000          jmp dword ptr [4*eax+00401340]
:004011D2 B06F                    mov al, 6F
:004011D4 E9B9000000              jmp 00401292
:004011D9 B070                    mov al, 70
:004011DB E9B2000000              jmp 00401292
:004011E0 B071                    mov al, 71
:004011E2 E9AB000000              jmp 00401292
:004011E7 B072                    mov al, 72
:004011E9 E9A4000000              jmp 00401292
:004011EE B073                    mov al, 73
:004011F0 E99D000000              jmp 00401292
:004011F5 B074                    mov al, 74
:004011F7 E996000000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004011BE(C)
|
:004011FC B06F                    mov al, 6F
:004011FE E98F000000              jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004011AC(C)
|
:00401203 837D0805                cmp dword ptr [ebp+08], 00000005
:00401207 7540                    jne 00401249
:00401209 8B55FC                  mov edx, dword ptr [ebp-04]
:0040120C 81E2FF000000            and edx, 000000FF
:00401212 8955E4                  mov dword ptr [ebp-1C], edx
:00401215 837DE40D                cmp dword ptr [ebp-1C], 0000000D
:00401219 772A                    ja 00401245
:0040121B 8B45E4                  mov eax, dword ptr [ebp-1C]
:0040121E FF248570134000          jmp dword ptr [4*eax+00401370]
:00401225 B075                    mov al, 75
:00401227 EB69                    jmp 00401292
:00401229 B076                    mov al, 76
:0040122B EB65                    jmp 00401292
:0040122D B077                    mov al, 77
:0040122F EB61                    jmp 00401292
:00401231 B078                    mov al, 78
:00401233 EB5D                    jmp 00401292
:00401235 B079                    mov al, 79
:00401237 EB59                    jmp 00401292
:00401239 B07A                    mov al, 7A
:0040123B EB55                    jmp 00401292
:0040123D B07B                    mov al, 7B
:0040123F EB51                    jmp 00401292
:00401241 B07C                    mov al, 7C
:00401243 EB4D                    jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401219(C)
|
:00401245 B075                    mov al, 75
:00401247 EB49                    jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401207(C)
|
:00401249 837D0826                cmp dword ptr [ebp+08], 00000026
:0040124D 7541                    jne 00401290
:0040124F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401252 81E1FF000000            and ecx, 000000FF
:00401258 894DE0                  mov dword ptr [ebp-20], ecx
:0040125B 8B55E0                  mov edx, dword ptr [ebp-20]
:0040125E 83EA06                  sub edx, 00000006
:00401261 8955E0                  mov dword ptr [ebp-20], edx
:00401264 837DE009                cmp dword ptr [ebp-20], 00000009
:00401268 7722                    ja 0040128C
:0040126A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040126D 33C0                    xor eax, eax
:0040126F 8A81BC134000            mov al, byte ptr [ecx+004013BC]
:00401275 FF2485A8134000          jmp dword ptr [4*eax+004013A8]
:0040127C B07D                    mov al, 7D
:0040127E EB12                    jmp 00401292
:00401280 B07E                    mov al, 7E
:00401282 EB0E                    jmp 00401292
:00401284 B07F                    mov al, 7F
:00401286 EB0A                    jmp 00401292
:00401288 B080                    mov al, 80
:0040128A EB06                    jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401268(C)
|
:0040128C B07D                    mov al, 7D
:0040128E EB02                    jmp 00401292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040124D(C)
|
:00401290 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401011(U), :00401056(U), :0040105D(U), :00401064(U), :0040106B(U)
|:00401072(U), :00401079(U), :00401080(U), :00401087(U), :0040108E(U)
|:004010C7(U), :004010CE(U), :004010D5(U), :004010DC(U), :004010E3(U)
|:004010EA(U), :004010F1(U), :00401123(U), :0040112A(U), :00401131(U)
|:00401138(U), :0040113F(U), :00401179(U), :00401180(U), :00401187(U)
|:0040118E(U), :00401195(U), :0040119C(U), :004011A3(U), :004011D4(U)
|:004011DB(U), :004011E2(U), :004011E9(U), :004011F0(U), :004011F7(U)
|:004011FE(U), :00401227(U), :0040122B(U), :0040122F(U), :00401233(U)
|:00401237(U), :0040123B(U), :0040123F(U), :00401243(U), :00401247(U)
|:0040127E(U), :00401282(U), :00401286(U), :0040128A(U), :0040128E(U)
|
:00401292 8BE5                    mov esp, ebp
:00401294 5D                      pop ebp
:00401295 C3                      ret



:00401296 54104000                DWORD 00401054
:0040129A 5B104000                DWORD 0040105B
:0040129E 8C104000                DWORD 0040108C
:004012A2 8C104000                DWORD 0040108C
:004012A6 62104000                DWORD 00401062
:004012AA 69104000                DWORD 00401069
:004012AE 8C104000                DWORD 0040108C
:004012B2 8C104000                DWORD 0040108C
:004012B6 70104000                DWORD 00401070
:004012BA 77104000                DWORD 00401077
:004012BE 8C104000                DWORD 0040108C
:004012C2 8C104000                DWORD 0040108C
:004012C6 7E104000                DWORD 0040107E
:004012CA 85104000                DWORD 00401085
:004012CE C5104000                DWORD 004010C5
:004012D2 CC104000                DWORD 004010CC
:004012D6 D3104000                DWORD 004010D3
:004012DA DA104000                DWORD 004010DA
:004012DE E1104000                DWORD 004010E1
:004012E2 E8104000                DWORD 004010E8
:004012E6 EF104000                DWORD 004010EF


:004012EA 0001                    add byte ptr [ecx], al
:004012EC 06                      push es
:004012ED 06                      push es
:004012EE 06                      push es
:004012EF 06                      push es
:004012F0 06                      push es
:004012F1 06                      push es
:004012F2 0203                    add al, byte ptr [ebx]
:004012F4 06                      push es
:004012F5 06                      push es
:004012F6 06                      push es
:004012F7 06                      push es
:004012F8 06                      push es
:004012F9 06                      push es
:004012FA 0405                    add al, 05

:004012FC 21114000                DWORD 00401121
:00401300 28114000                DWORD 00401128
:00401304 3D114000                DWORD 0040113D
:00401308 3D114000                DWORD 0040113D
:0040130C 2F114000                DWORD 0040112F
:00401310 36114000                DWORD 00401136
:00401314 77114000                DWORD 00401177
:00401318 7E114000                DWORD 0040117E
:0040131C 85114000                DWORD 00401185
:00401320 8C114000                DWORD 0040118C
:00401324 93114000                DWORD 00401193
:00401328 9A114000                DWORD 0040119A
:0040132C A1114000                DWORD 004011A1


:00401330 0001                    add byte ptr [ecx], al
:00401332 06                      push es
:00401333 06                      push es
:00401334 06                      push es
:00401335 06                      push es
:00401336 06                      push es
:00401337 06                      push es
:00401338 0203                    add al, byte ptr [ebx]
:0040133A 06                      push es
:0040133B 06                      push es
:0040133C 06                      push es
:0040133D 06                      push es
:0040133E 0405                    add al, 05

:00401340 D2114000                DWORD 004011D2
:00401344 D9114000                DWORD 004011D9
:00401348 E0114000                DWORD 004011E0
:0040134C E7114000                DWORD 004011E7
:00401350 EE114000                DWORD 004011EE
:00401354 F5114000                DWORD 004011F5
:00401358 FC114000                DWORD 004011FC


:0040135C 0001                    add byte ptr [ecx], al
:0040135E 06                      push es
:0040135F 06                      push es
:00401360 06                      push es
:00401361 06                      push es
:00401362 06                      push es
:00401363 06                      push es
:00401364 06                      push es
:00401365 06                      push es
:00401366 06                      push es
:00401367 06                      push es
:00401368 0203                    add al, byte ptr [ebx]
:0040136A 06                      push es
:0040136B 06                      push es
:0040136C 06                      push es
:0040136D 06                      push es
:0040136E 0405                    add al, 05

:00401370 25124000                DWORD 00401225
:00401374 29124000                DWORD 00401229
:00401378 45124000                DWORD 00401245
:0040137C 45124000                DWORD 00401245
:00401380 2D124000                DWORD 0040122D
:00401384 31124000                DWORD 00401231
:00401388 45124000                DWORD 00401245
:0040138C 45124000                DWORD 00401245
:00401390 35124000                DWORD 00401235
:00401394 39124000                DWORD 00401239
:00401398 45124000                DWORD 00401245
:0040139C 45124000                DWORD 00401245
:004013A0 3D124000                DWORD 0040123D
:004013A4 41124000                DWORD 00401241
:004013A8 7C124000                DWORD 0040127C
:004013AC 80124000                DWORD 00401280
:004013B0 84124000                DWORD 00401284
:004013B4 88124000                DWORD 00401288
:004013B8 8C124000                DWORD 0040128C



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013A8(C)
|
:004013BC 0001                    add byte ptr [ecx], al
:004013BE 0404                    add al, 04
:004013C0 0404                    add al, 04
:004013C2 0404                    add al, 04
:004013C4 0203                    add al, byte ptr [ebx]

* Referenced by a CALL at Addresses:
|:00429819   , :0045102E   , :00452044   , :00465F9C   
|
:004013C6 55                      push ebp
:004013C7 8BEC                    mov ebp, esp
:004013C9 83EC08                  sub esp, 00000008
:004013CC 894DF8                  mov dword ptr [ebp-08], ecx
:004013CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004013D2 E839330000              call 00404710
:004013D7 50                      push eax
:004013D8 E823FCFFFF              call 00401000
:004013DD 83C404                  add esp, 00000004
:004013E0 8845FC                  mov byte ptr [ebp-04], al
:004013E3 8B45FC                  mov eax, dword ptr [ebp-04]
:004013E6 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004013EB 3DFF000000              cmp eax, 000000FF
:004013F0 750B                    jne 004013FD
:004013F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004013F5 E876330000              call 00404770
:004013FA 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013F0(C)
|
:004013FD 8A45FC                  mov al, byte ptr [ebp-04]
:00401400 8BE5                    mov esp, ebp
:00401402 5D                      pop ebp
:00401403 C3                      ret



* Referenced by a CALL at Addresses:
|:00406A4F   , :00413261   , :00417549   , :00431FB2   
|
:00401404 55                      push ebp
:00401405 8BEC                    mov ebp, esp
:00401407 817D0885020000          cmp dword ptr [ebp+08], 00000285
:0040140E 7204                    jb 00401414
:00401410 33C0                    xor eax, eax
:00401412 EB11                    jmp 00401425

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040140E(C)
|
:00401414 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401417 6BC970                  imul ecx, 00000070
:0040141A 81C198224900            add ecx, 00492298
:00401420 E87D270000              call 00403BA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401412(U)
|
:00401425 5D                      pop ebp
:00401426 C3                      ret



* Referenced by a CALL at Address:
|:00423D35   
|
:00401427 55                      push ebp
:00401428 8BEC                    mov ebp, esp
:0040142A 8B4508                  mov eax, dword ptr [ebp+08]
:0040142D 80E40F                  and ah, 0F
:00401430 5D                      pop ebp
:00401431 C3                      ret



* Referenced by a CALL at Addresses:
|:004015FC   , :00402CBD   , :00402D83   , :00402DC8   , :00467668   
|:00467676   , :0046787D   
|
:00401432 55                      push ebp
:00401433 8BEC                    mov ebp, esp
:00401435 83EC0C                  sub esp, 0000000C
:00401438 894DF8                  mov dword ptr [ebp-08], ecx
:0040143B C645FCFF                mov [ebp-04], FF
:0040143F 8B4508                  mov eax, dword ptr [ebp+08]
:00401442 8945F4                  mov dword ptr [ebp-0C], eax
:00401445 837DF410                cmp dword ptr [ebp-0C], 00000010
:00401449 0F873B010000            ja 0040158A
:0040144F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401452 FF248D92154000          jmp dword ptr [4*ecx+00401592]
:00401459 8B55F8                  mov edx, dword ptr [ebp-08]
:0040145C 33C0                    xor eax, eax
:0040145E 8A4228                  mov al, byte ptr [edx+28]
:00401461 E926010000              jmp 0040158C
:00401466 8B45F8                  mov eax, dword ptr [ebp-08]
:00401469 33C9                    xor ecx, ecx
:0040146B 8A4829                  mov cl, byte ptr [eax+29]
:0040146E 8BC1                    mov eax, ecx
:00401470 E917010000              jmp 0040158C
:00401475 8B55F8                  mov edx, dword ptr [ebp-08]
:00401478 33C0                    xor eax, eax
:0040147A 8A422A                  mov al, byte ptr [edx+2A]
:0040147D E90A010000              jmp 0040158C
:00401482 8B45F8                  mov eax, dword ptr [ebp-08]
:00401485 33C9                    xor ecx, ecx
:00401487 8A482B                  mov cl, byte ptr [eax+2B]
:0040148A 8BC1                    mov eax, ecx
:0040148C E9FB000000              jmp 0040158C
:00401491 8B55F8                  mov edx, dword ptr [ebp-08]
:00401494 33C0                    xor eax, eax
:00401496 8A422C                  mov al, byte ptr [edx+2C]
:00401499 E9EE000000              jmp 0040158C
:0040149E 8B45F8                  mov eax, dword ptr [ebp-08]
:004014A1 33C9                    xor ecx, ecx
:004014A3 8A482E                  mov cl, byte ptr [eax+2E]
:004014A6 8BC1                    mov eax, ecx
:004014A8 E9DF000000              jmp 0040158C
:004014AD 8B55F8                  mov edx, dword ptr [ebp-08]
:004014B0 33C0                    xor eax, eax
:004014B2 8A422F                  mov al, byte ptr [edx+2F]
:004014B5 E9D2000000              jmp 0040158C
:004014BA 8B45F8                  mov eax, dword ptr [ebp-08]
:004014BD 8B4008                  mov eax, dword ptr [eax+08]
:004014C0 E9C7000000              jmp 0040158C
:004014C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004014C8 33C0                    xor eax, eax
:004014CA 8A4134                  mov al, byte ptr [ecx+34]
:004014CD E9BA000000              jmp 0040158C
:004014D2 8B55F8                  mov edx, dword ptr [ebp-08]
:004014D5 33C0                    xor eax, eax
:004014D7 8A4232                  mov al, byte ptr [edx+32]
:004014DA E9AD000000              jmp 0040158C
:004014DF 8B45F8                  mov eax, dword ptr [ebp-08]
:004014E2 33C9                    xor ecx, ecx
:004014E4 8A4833                  mov cl, byte ptr [eax+33]
:004014E7 8BC1                    mov eax, ecx
:004014E9 E99E000000              jmp 0040158C
:004014EE 8B55F8                  mov edx, dword ptr [ebp-08]
:004014F1 8B4204                  mov eax, dword ptr [edx+04]
:004014F4 E993000000              jmp 0040158C
:004014F9 8B45F8                  mov eax, dword ptr [ebp-08]
:004014FC 33C9                    xor ecx, ecx
:004014FE 8A4802                  mov cl, byte ptr [eax+02]
:00401501 8BC1                    mov eax, ecx
:00401503 E984000000              jmp 0040158C
:00401508 8B55F8                  mov edx, dword ptr [ebp-08]
:0040150B 33C0                    xor eax, eax
:0040150D 8A4231                  mov al, byte ptr [edx+31]
:00401510 EB7A                    jmp 0040158C
:00401512 8B45F8                  mov eax, dword ptr [ebp-08]
:00401515 33C9                    xor ecx, ecx
:00401517 8A4830                  mov cl, byte ptr [eax+30]
:0040151A 8BC1                    mov eax, ecx
:0040151C EB6E                    jmp 0040158C
:0040151E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401521 E8243D0600              call 0046524A
:00401526 8845FC                  mov byte ptr [ebp-04], al
:00401529 8B55FC                  mov edx, dword ptr [ebp-04]
:0040152C 81E2FF000000            and edx, 000000FF
:00401532 81FAFF000000            cmp edx, 000000FF
:00401538 7419                    je 00401553
:0040153A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040153D 81E1FF000000            and ecx, 000000FF
:00401543 6BC924                  imul ecx, 00000024
:00401546 81C108F54A00            add ecx, 004AF508
:0040154C E81F330000              call 00404870
:00401551 EB39                    jmp 0040158C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401538(C)
|
:00401553 33C0                    xor eax, eax
:00401555 EB35                    jmp 0040158C
:00401557 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040155A E8EB3C0600              call 0046524A
:0040155F 8845FC                  mov byte ptr [ebp-04], al
:00401562 8B45FC                  mov eax, dword ptr [ebp-04]
:00401565 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040156A 3DFF000000              cmp eax, 000000FF
:0040156F 7419                    je 0040158A
:00401571 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401574 81E1FF000000            and ecx, 000000FF
:0040157A 6BC924                  imul ecx, 00000024
:0040157D 81C108F54A00            add ecx, 004AF508
:00401583 E828330000              call 004048B0
:00401588 EB02                    jmp 0040158C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401449(C), :0040156F(C)
|
:0040158A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401461(U), :00401470(U), :0040147D(U), :0040148C(U), :00401499(U)
|:004014A8(U), :004014B5(U), :004014C0(U), :004014CD(U), :004014DA(U)
|:004014E9(U), :004014F4(U), :00401503(U), :00401510(U), :0040151C(U)
|:00401551(U), :00401555(U), :00401588(U)
|
:0040158C 8BE5                    mov esp, ebp
:0040158E 5D                      pop ebp
:0040158F C20400                  ret 0004



:00401592 59144000                DWORD 00401459
:00401596 66144000                DWORD 00401466
:0040159A 75144000                DWORD 00401475
:0040159E 82144000                DWORD 00401482
:004015A2 BA144000                DWORD 004014BA
:004015A6 91144000                DWORD 00401491
:004015AA 9E144000                DWORD 0040149E
:004015AE AD144000                DWORD 004014AD
:004015B2 DF144000                DWORD 004014DF
:004015B6 C5144000                DWORD 004014C5
:004015BA EE144000                DWORD 004014EE
:004015BE F9144000                DWORD 004014F9
:004015C2 08154000                DWORD 00401508
:004015C6 12154000                DWORD 00401512
:004015CA D2144000                DWORD 004014D2
:004015CE 1E154000                DWORD 0040151E
:004015D2 57154000                DWORD 00401557



* Referenced by a CALL at Addresses:
|:00406CF1   , :00409622   , :0040AC0F   , :00442900   
|
:004015D6 55                      push ebp
:004015D7 8BEC                    mov ebp, esp
:004015D9 817D0885020000          cmp dword ptr [ebp+08], 00000285
:004015E0 7306                    jnb 004015E8
:004015E2 837D0C11                cmp dword ptr [ebp+0C], 00000011
:004015E6 7604                    jbe 004015EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004015E0(C)
|
:004015E8 33C0                    xor eax, eax
:004015EA EB15                    jmp 00401601

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004015E6(C)
|
:004015EC 8B450C                  mov eax, dword ptr [ebp+0C]
:004015EF 50                      push eax
:004015F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004015F3 6BC970                  imul ecx, 00000070
:004015F6 81C198224900            add ecx, 00492298
:004015FC E831FEFFFF              call 00401432

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004015EA(U)
|
:00401601 5D                      pop ebp
:00401602 C3                      ret



* Referenced by a CALL at Addresses:
|:00401B17   , :00401B51   
|
:00401603 55                      push ebp
:00401604 8BEC                    mov ebp, esp
:00401606 83EC10                  sub esp, 00000010
:00401609 894DF4                  mov dword ptr [ebp-0C], ecx
:0040160C C745FC00000000          mov [ebp-04], 00000000
:00401613 C645F8FF                mov [ebp-08], FF
:00401617 8B4508                  mov eax, dword ptr [ebp+08]
:0040161A 8945F0                  mov dword ptr [ebp-10], eax
:0040161D 837DF010                cmp dword ptr [ebp-10], 00000010
:00401621 0F8779040000            ja 00401AA0
:00401627 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040162A FF248DA61A4000          jmp dword ptr [4*ecx+00401AA6]
:00401631 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401638 741D                    je 00401657

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040163A 68FF000000              push 000000FF
:0040163F 8B5510                  mov edx, dword ptr [ebp+10]
:00401642 52                      push edx
:00401643 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401646 33C9                    xor ecx, ecx
:00401648 8A4828                  mov cl, byte ptr [eax+28]
:0040164B 51                      push ecx
:0040164C E841090600              call 00461F92
:00401651 83C40C                  add esp, 0000000C
:00401654 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401638(C)
|
:00401657 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040165A 8A450C                  mov al, byte ptr [ebp+0C]
:0040165D 884228                  mov byte ptr [edx+28], al
:00401660 E93B040000              jmp 00401AA0
:00401665 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040166C 741D                    je 0040168B

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040166E 68FF000000              push 000000FF
:00401673 8B4D10                  mov ecx, dword ptr [ebp+10]
:00401676 51                      push ecx
:00401677 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040167A 33C0                    xor eax, eax
:0040167C 8A4229                  mov al, byte ptr [edx+29]
:0040167F 50                      push eax
:00401680 E80D090600              call 00461F92
:00401685 83C40C                  add esp, 0000000C
:00401688 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040166C(C)
|
:0040168B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040168E 8A550C                  mov dl, byte ptr [ebp+0C]
:00401691 885129                  mov byte ptr [ecx+29], dl
:00401694 E907040000              jmp 00401AA0
:00401699 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004016A0 741D                    je 004016BF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004016A2 68FF000000              push 000000FF
:004016A7 8B4510                  mov eax, dword ptr [ebp+10]
:004016AA 50                      push eax
:004016AB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004016AE 33D2                    xor edx, edx
:004016B0 8A512A                  mov dl, byte ptr [ecx+2A]
:004016B3 52                      push edx
:004016B4 E8D9080600              call 00461F92
:004016B9 83C40C                  add esp, 0000000C
:004016BC 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016A0(C)
|
:004016BF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004016C2 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004016C5 88482A                  mov byte ptr [eax+2A], cl
:004016C8 E9D3030000              jmp 00401AA0
:004016CD 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004016D4 741D                    je 004016F3

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004016D6 68FF000000              push 000000FF
:004016DB 8B5510                  mov edx, dword ptr [ebp+10]
:004016DE 52                      push edx
:004016DF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004016E2 33C9                    xor ecx, ecx
:004016E4 8A482B                  mov cl, byte ptr [eax+2B]
:004016E7 51                      push ecx
:004016E8 E8A5080600              call 00461F92
:004016ED 83C40C                  add esp, 0000000C
:004016F0 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016D4(C)
|
:004016F3 8B55F4                  mov edx, dword ptr [ebp-0C]
:004016F6 8A450C                  mov al, byte ptr [ebp+0C]
:004016F9 88422B                  mov byte ptr [edx+2B], al
:004016FC E99F030000              jmp 00401AA0
:00401701 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401708 741D                    je 00401727

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040170A 68FF000000              push 000000FF
:0040170F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00401712 51                      push ecx
:00401713 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401716 33C0                    xor eax, eax
:00401718 8A422C                  mov al, byte ptr [edx+2C]
:0040171B 50                      push eax
:0040171C E871080600              call 00461F92
:00401721 83C40C                  add esp, 0000000C
:00401724 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401708(C)
|
:00401727 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040172A 8A550C                  mov dl, byte ptr [ebp+0C]
:0040172D 88512C                  mov byte ptr [ecx+2C], dl
:00401730 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401733 E8D82F0000              call 00404710
:00401738 50                      push eax
:00401739 E8E2F10000              call 00410920
:0040173E 83C404                  add esp, 00000004
:00401741 85C0                    test eax, eax
:00401743 750E                    jne 00401753
:00401745 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401748 33C9                    xor ecx, ecx
:0040174A 8A482C                  mov cl, byte ptr [eax+2C]
:0040174D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401750 894A6C                  mov dword ptr [edx+6C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401743(C)
|
:00401753 E948030000              jmp 00401AA0
:00401758 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040175F 741D                    je 0040177E

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00401761 68FF000000              push 000000FF
:00401766 8B4510                  mov eax, dword ptr [ebp+10]
:00401769 50                      push eax
:0040176A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040176D 33D2                    xor edx, edx
:0040176F 8A512E                  mov dl, byte ptr [ecx+2E]
:00401772 52                      push edx
:00401773 E81A080600              call 00461F92
:00401778 83C40C                  add esp, 0000000C
:0040177B 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040175F(C)
|
:0040177E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401781 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00401784 88482E                  mov byte ptr [eax+2E], cl
:00401787 E914030000              jmp 00401AA0
:0040178C 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401793 741D                    je 004017B2

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00401795 68FF000000              push 000000FF
:0040179A 8B5510                  mov edx, dword ptr [ebp+10]
:0040179D 52                      push edx
:0040179E 8B45F4                  mov eax, dword ptr [ebp-0C]
:004017A1 33C9                    xor ecx, ecx
:004017A3 8A482F                  mov cl, byte ptr [eax+2F]
:004017A6 51                      push ecx
:004017A7 E8E6070600              call 00461F92
:004017AC 83C40C                  add esp, 0000000C
:004017AF 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401793(C)
|
:004017B2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004017B5 8A450C                  mov al, byte ptr [ebp+0C]
:004017B8 88422F                  mov byte ptr [edx+2F], al
:004017BB E9E0020000              jmp 00401AA0
:004017C0 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004017C7 741B                    je 004017E4
:004017C9 68E8030000              push 000003E8
:004017CE 8B4D10                  mov ecx, dword ptr [ebp+10]
:004017D1 51                      push ecx
:004017D2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004017D5 8B4208                  mov eax, dword ptr [edx+08]
:004017D8 50                      push eax
:004017D9 E8B4070600              call 00461F92
:004017DE 83C40C                  add esp, 0000000C
:004017E1 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004017C7(C)
|
:004017E4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004017E7 8B550C                  mov edx, dword ptr [ebp+0C]
:004017EA 895108                  mov dword ptr [ecx+08], edx
:004017ED 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004017F0 E81B2F0000              call 00404710
:004017F5 50                      push eax
:004017F6 E825F10000              call 00410920
:004017FB 83C404                  add esp, 00000004
:004017FE 85C0                    test eax, eax
:00401800 750C                    jne 0040180E
:00401802 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401805 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401808 8B5108                  mov edx, dword ptr [ecx+08]
:0040180B 895068                  mov dword ptr [eax+68], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401800(C)
|
:0040180E E98D020000              jmp 00401AA0
:00401813 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040181A 741A                    je 00401836
:0040181C 6A63                    push 00000063
:0040181E 8B4510                  mov eax, dword ptr [ebp+10]
:00401821 50                      push eax
:00401822 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401825 33D2                    xor edx, edx
:00401827 8A5133                  mov dl, byte ptr [ecx+33]
:0040182A 52                      push edx
:0040182B E862070600              call 00461F92
:00401830 83C40C                  add esp, 0000000C
:00401833 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040181A(C)
|
:00401836 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401839 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0040183C 884833                  mov byte ptr [eax+33], cl
:0040183F E95C020000              jmp 00401AA0
:00401844 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040184B 741D                    je 0040186A

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040184D 68FF000000              push 000000FF
:00401852 8B5510                  mov edx, dword ptr [ebp+10]
:00401855 52                      push edx
:00401856 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401859 33C9                    xor ecx, ecx
:0040185B 8A4832                  mov cl, byte ptr [eax+32]
:0040185E 51                      push ecx
:0040185F E82E070600              call 00461F92
:00401864 83C40C                  add esp, 0000000C
:00401867 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040184B(C)
|
:0040186A 837D0C1C                cmp dword ptr [ebp+0C], 0000001C
:0040186E 7309                    jnb 00401879
:00401870 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401873 8A450C                  mov al, byte ptr [ebp+0C]
:00401876 884232                  mov byte ptr [edx+32], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040186E(C)
|
:00401879 E922020000              jmp 00401AA0
:0040187E 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401885 741B                    je 004018A2
:00401887 68DB000000              push 000000DB
:0040188C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040188F 51                      push ecx
:00401890 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401893 8B4204                  mov eax, dword ptr [edx+04]
:00401896 50                      push eax
:00401897 E8F6060600              call 00461F92
:0040189C 83C40C                  add esp, 0000000C
:0040189F 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401885(C)
|
:004018A2 817D0CDB000000          cmp dword ptr [ebp+0C], 000000DB
:004018A9 7309                    jnb 004018B4
:004018AB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004018AE 8B550C                  mov edx, dword ptr [ebp+0C]
:004018B1 895104                  mov dword ptr [ecx+04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018A9(C)
|
:004018B4 E9E7010000              jmp 00401AA0
:004018B9 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004018C0 741A                    je 004018DC
:004018C2 6A61                    push 00000061
:004018C4 8B4510                  mov eax, dword ptr [ebp+10]
:004018C7 50                      push eax
:004018C8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004018CB 33D2                    xor edx, edx
:004018CD 8A5102                  mov dl, byte ptr [ecx+02]
:004018D0 52                      push edx
:004018D1 E8BC060600              call 00461F92
:004018D6 83C40C                  add esp, 0000000C
:004018D9 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018C0(C)
|
:004018DC 837D0C61                cmp dword ptr [ebp+0C], 00000061
:004018E0 7309                    jnb 004018EB
:004018E2 8B45F4                  mov eax, dword ptr [ebp-0C]
:004018E5 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004018E8 884802                  mov byte ptr [eax+02], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018E0(C)
|
:004018EB E9B0010000              jmp 00401AA0
:004018F0 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004018F7 741A                    je 00401913
:004018F9 6A1A                    push 0000001A
:004018FB 8B5510                  mov edx, dword ptr [ebp+10]
:004018FE 52                      push edx
:004018FF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401902 33C9                    xor ecx, ecx
:00401904 8A4831                  mov cl, byte ptr [eax+31]
:00401907 51                      push ecx
:00401908 E885060600              call 00461F92
:0040190D 83C40C                  add esp, 0000000C
:00401910 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018F7(C)
|
:00401913 837D0C1A                cmp dword ptr [ebp+0C], 0000001A
:00401917 7309                    jnb 00401922
:00401919 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040191C 8A450C                  mov al, byte ptr [ebp+0C]
:0040191F 884231                  mov byte ptr [edx+31], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401917(C)
|
:00401922 E979010000              jmp 00401AA0
:00401927 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040192E 741A                    je 0040194A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00401930 6A02                    push 00000002
:00401932 8B4D10                  mov ecx, dword ptr [ebp+10]
:00401935 51                      push ecx
:00401936 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401939 33C0                    xor eax, eax
:0040193B 8A4230                  mov al, byte ptr [edx+30]
:0040193E 50                      push eax
:0040193F E84E060600              call 00461F92
:00401944 83C40C                  add esp, 0000000C
:00401947 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040192E(C)
|
:0040194A 837D0C02                cmp dword ptr [ebp+0C], 00000002
:0040194E 7309                    jnb 00401959
:00401950 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401953 8A550C                  mov dl, byte ptr [ebp+0C]
:00401956 885130                  mov byte ptr [ecx+30], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040194E(C)
|
:00401959 E942010000              jmp 00401AA0
:0040195E 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401965 741A                    je 00401981
:00401967 6A64                    push 00000064
:00401969 8B4510                  mov eax, dword ptr [ebp+10]
:0040196C 50                      push eax
:0040196D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401970 33D2                    xor edx, edx
:00401972 8A5134                  mov dl, byte ptr [ecx+34]
:00401975 52                      push edx
:00401976 E817060600              call 00461F92
:0040197B 83C40C                  add esp, 0000000C
:0040197E 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401965(C)
|
:00401981 837D0C64                cmp dword ptr [ebp+0C], 00000064
:00401985 7309                    jnb 00401990
:00401987 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040198A 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0040198D 884834                  mov byte ptr [eax+34], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401985(C)
|
:00401990 E90B010000              jmp 00401AA0
:00401995 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401998 E8AD380600              call 0046524A
:0040199D 8845F8                  mov byte ptr [ebp-08], al
:004019A0 8B55F8                  mov edx, dword ptr [ebp-08]
:004019A3 81E2FF000000            and edx, 000000FF
:004019A9 81FAFF000000            cmp edx, 000000FF
:004019AF 741A                    je 004019CB
:004019B1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004019B4 81E1FF000000            and ecx, 000000FF
:004019BA 6BC924                  imul ecx, 00000024
:004019BD 81C108F54A00            add ecx, 004AF508
:004019C3 E8A82E0000              call 00404870
:004019C8 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004019AF(C)
|
:004019CB 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004019D2 7418                    je 004019EC
:004019D4 68E8030000              push 000003E8
:004019D9 8B4510                  mov eax, dword ptr [ebp+10]
:004019DC 50                      push eax
:004019DD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004019E0 51                      push ecx
:004019E1 E8AC050600              call 00461F92
:004019E6 83C40C                  add esp, 0000000C
:004019E9 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004019D2(C)
|
:004019EC 8B55F8                  mov edx, dword ptr [ebp-08]
:004019EF 81E2FF000000            and edx, 000000FF
:004019F5 81FAFF000000            cmp edx, 000000FF
:004019FB 741B                    je 00401A18
:004019FD 8B450C                  mov eax, dword ptr [ebp+0C]
:00401A00 50                      push eax
:00401A01 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401A04 81E1FF000000            and ecx, 000000FF
:00401A0A 6BC924                  imul ecx, 00000024
:00401A0D 81C108F54A00            add ecx, 004AF508
:00401A13 E8488F0200              call 0042A960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004019FB(C)
|
:00401A18 E983000000              jmp 00401AA0
:00401A1D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401A20 E825380600              call 0046524A
:00401A25 8845F8                  mov byte ptr [ebp-08], al
:00401A28 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401A2B 81E1FF000000            and ecx, 000000FF
:00401A31 81F9FF000000            cmp ecx, 000000FF
:00401A37 741A                    je 00401A53
:00401A39 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401A3C 81E1FF000000            and ecx, 000000FF
:00401A42 6BC924                  imul ecx, 00000024
:00401A45 81C108F54A00            add ecx, 004AF508
:00401A4B E8602E0000              call 004048B0
:00401A50 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A37(C)
|
:00401A53 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401A5A 7418                    je 00401A74
:00401A5C 68E8030000              push 000003E8
:00401A61 8B5510                  mov edx, dword ptr [ebp+10]
:00401A64 52                      push edx
:00401A65 8B45FC                  mov eax, dword ptr [ebp-04]
:00401A68 50                      push eax
:00401A69 E824050600              call 00461F92
:00401A6E 83C40C                  add esp, 0000000C
:00401A71 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A5A(C)
|
:00401A74 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401A77 81E1FF000000            and ecx, 000000FF
:00401A7D 81F9FF000000            cmp ecx, 000000FF
:00401A83 741B                    je 00401AA0
:00401A85 8B550C                  mov edx, dword ptr [ebp+0C]
:00401A88 52                      push edx
:00401A89 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401A8C 81E1FF000000            and ecx, 000000FF
:00401A92 6BC924                  imul ecx, 00000024
:00401A95 81C108F54A00            add ecx, 004AF508
:00401A9B E81D8F0200              call 0042A9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401621(C), :00401660(U), :00401694(U), :004016C8(U), :004016FC(U)
|:00401753(U), :00401787(U), :004017BB(U), :0040180E(U), :0040183F(U)
|:00401879(U), :004018B4(U), :004018EB(U), :00401922(U), :00401959(U)
|:00401990(U), :00401A18(U), :00401A83(C)
|
:00401AA0 8BE5                    mov esp, ebp
:00401AA2 5D                      pop ebp
:00401AA3 C20C00                  ret 000C



:00401AA6 31164000                DWORD 00401631
:00401AAA 65164000                DWORD 00401665
:00401AAE 99164000                DWORD 00401699
:00401AB2 CD164000                DWORD 004016CD
:00401AB6 C0174000                DWORD 004017C0
:00401ABA 01174000                DWORD 00401701
:00401ABE 58174000                DWORD 00401758
:00401AC2 8C174000                DWORD 0040178C
:00401AC6 13184000                DWORD 00401813
:00401ACA 5E194000                DWORD 0040195E
:00401ACE 7E184000                DWORD 0040187E
:00401AD2 B9184000                DWORD 004018B9
:00401AD6 F0184000                DWORD 004018F0
:00401ADA 27194000                DWORD 00401927
:00401ADE 44184000                DWORD 00401844
:00401AE2 95194000                DWORD 00401995
:00401AE6 1D1A4000                DWORD 00401A1D



* Referenced by a CALL at Addresses:
|:00406D08   , :0040ABD1   , :0040AC45   , :0040D5BE   
|
:00401AEA 55                      push ebp
:00401AEB 8BEC                    mov ebp, esp
:00401AED 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00401AF4 7706                    ja 00401AFC
:00401AF6 837D0C11                cmp dword ptr [ebp+0C], 00000011
:00401AFA 7602                    jbe 00401AFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AF4(C)
|
:00401AFC EB1E                    jmp 00401B1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AFA(C)
|
:00401AFE 68FFFF0000              push 0000FFFF
:00401B03 8B4510                  mov eax, dword ptr [ebp+10]
:00401B06 50                      push eax
:00401B07 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00401B0A 51                      push ecx
:00401B0B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401B0E 6BC970                  imul ecx, 00000070
:00401B11 81C198224900            add ecx, 00492298
:00401B17 E8E7FAFFFF              call 00401603

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401AFC(U)
|
:00401B1C 5D                      pop ebp
:00401B1D C3                      ret



* Referenced by a CALL at Addresses:
|:004021A6   , :0040ABF2   , :0042BF9E   , :004333EC   , :00433406   
|:0043341A   
|
:00401B1E 55                      push ebp
:00401B1F 8BEC                    mov ebp, esp
:00401B21 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00401B28 770F                    ja 00401B39
:00401B2A 837D0C11                cmp dword ptr [ebp+0C], 00000011
:00401B2E 7709                    ja 00401B39
:00401B30 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401B37 7502                    jne 00401B3B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401B28(C), :00401B2E(C)
|
:00401B39 EB1B                    jmp 00401B56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B37(C)
|
:00401B3B 8B4510                  mov eax, dword ptr [ebp+10]
:00401B3E 50                      push eax
:00401B3F 6A00                    push 00000000
:00401B41 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00401B44 51                      push ecx
:00401B45 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401B48 6BC970                  imul ecx, 00000070
:00401B4B 81C198224900            add ecx, 00492298
:00401B51 E8ADFAFFFF              call 00401603

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B39(U)
|
:00401B56 5D                      pop ebp
:00401B57 C3                      ret


:00401B58 55                      push ebp
:00401B59 8BEC                    mov ebp, esp
:00401B5B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401B5E 6BC933                  imul ecx, 00000033
:00401B61 81C1C8EF4800            add ecx, 0048EFC8
:00401B67 E8442B0000              call 004046B0
:00401B6C 5D                      pop ebp
:00401B6D C3                      ret



* Referenced by a CALL at Addresses:
|:00402333   , :0045C6E4   
|
:00401B6E 55                      push ebp
:00401B6F 8BEC                    mov ebp, esp
:00401B71 51                      push ecx
:00401B72 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401B75 6BC933                  imul ecx, 00000033
:00401B78 81C1C8EF4800            add ecx, 0048EFC8
:00401B7E E80D2B0000              call 00404690
:00401B83 8845FC                  mov byte ptr [ebp-04], al
:00401B86 8B45FC                  mov eax, dword ptr [ebp-04]
:00401B89 25FF000000              and eax, 000000FF
:00401B8E 83F806                  cmp eax, 00000006
:00401B91 7F04                    jg 00401B97
:00401B93 32C0                    xor al, al
:00401B95 EB40                    jmp 00401BD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B91(C)
|
:00401B97 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401B9A 81E1FF000000            and ecx, 000000FF
:00401BA0 83F90F                  cmp ecx, 0000000F
:00401BA3 7C04                    jl 00401BA9
:00401BA5 B009                    mov al, 09
:00401BA7 EB2E                    jmp 00401BD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401BA3(C)
|
:00401BA9 8B55FC                  mov edx, dword ptr [ebp-04]
:00401BAC 81E2FF000000            and edx, 000000FF
:00401BB2 83FA0D                  cmp edx, 0000000D
:00401BB5 7504                    jne 00401BBB
:00401BB7 B007                    mov al, 07
:00401BB9 EB1C                    jmp 00401BD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401BB5(C)
|
:00401BBB 8B45FC                  mov eax, dword ptr [ebp-04]
:00401BBE 25FF000000              and eax, 000000FF
:00401BC3 83F80E                  cmp eax, 0000000E
:00401BC6 7504                    jne 00401BCC
:00401BC8 B008                    mov al, 08
:00401BCA EB0B                    jmp 00401BD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401BC6(C)
|
:00401BCC 8B45FC                  mov eax, dword ptr [ebp-04]
:00401BCF 25FF000000              and eax, 000000FF
:00401BD4 83E806                  sub eax, 00000006

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401B95(U), :00401BA7(U), :00401BB9(U), :00401BCA(U)
|
:00401BD7 8BE5                    mov esp, ebp
:00401BD9 5D                      pop ebp
:00401BDA C3                      ret


:00401BDB 55                      push ebp
:00401BDC 8BEC                    mov ebp, esp
:00401BDE 51                      push ecx
:00401BDF 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:00401BE6 7204                    jb 00401BEC
:00401BE8 0CFF                    or al, FF
:00401BEA EB4C                    jmp 00401C38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401BE6(C)
|
:00401BEC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401BEF 6BC933                  imul ecx, 00000033
:00401BF2 81C1C8EF4800            add ecx, 0048EFC8
:00401BF8 E8932A0000              call 00404690
:00401BFD 8845FC                  mov byte ptr [ebp-04], al
:00401C00 8B45FC                  mov eax, dword ptr [ebp-04]
:00401C03 25FF000000              and eax, 000000FF
:00401C08 83F806                  cmp eax, 00000006
:00401C0B 7F05                    jg 00401C12
:00401C0D 8A45FC                  mov al, byte ptr [ebp-04]
:00401C10 EB26                    jmp 00401C38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C0B(C)
|
:00401C12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401C15 81E1FF000000            and ecx, 000000FF
:00401C1B 83F90E                  cmp ecx, 0000000E
:00401C1E 7F04                    jg 00401C24
:00401C20 B007                    mov al, 07
:00401C22 EB14                    jmp 00401C38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C1E(C)
|
:00401C24 8B55FC                  mov edx, dword ptr [ebp-04]
:00401C27 81E2FF000000            and edx, 000000FF
:00401C2D 83FA17                  cmp edx, 00000017
:00401C30 7F04                    jg 00401C36
:00401C32 B008                    mov al, 08
:00401C34 EB02                    jmp 00401C38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C30(C)
|
:00401C36 B009                    mov al, 09

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401BEA(U), :00401C10(U), :00401C22(U), :00401C34(U)
|
:00401C38 8BE5                    mov esp, ebp
:00401C3A 5D                      pop ebp
:00401C3B C3                      ret



* Referenced by a CALL at Address:
|:0042F7F5   
|
:00401C3C 55                      push ebp
:00401C3D 8BEC                    mov ebp, esp
:00401C3F 83EC08                  sub esp, 00000008
:00401C42 894DF8                  mov dword ptr [ebp-08], ecx
:00401C45 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401C48 E8232B0000              call 00404770
:00401C4D 8845FC                  mov byte ptr [ebp-04], al
:00401C50 8B45FC                  mov eax, dword ptr [ebp-04]
:00401C53 25FF000000              and eax, 000000FF
:00401C58 83F815                  cmp eax, 00000015
:00401C5B 7F0F                    jg 00401C6C
:00401C5D 8B45FC                  mov eax, dword ptr [ebp-04]
:00401C60 25FF000000              and eax, 000000FF
:00401C65 99                      cdq
:00401C66 2BC2                    sub eax, edx
:00401C68 D1F8                    sar eax, 1
:00401C6A EB1D                    jmp 00401C89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C5B(C)
|
:00401C6C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401C6F 81E1FF000000            and ecx, 000000FF
:00401C75 83F91C                  cmp ecx, 0000001C
:00401C78 7D0D                    jge 00401C87
:00401C7A 8B45FC                  mov eax, dword ptr [ebp-04]
:00401C7D 25FF000000              and eax, 000000FF
:00401C82 83E80B                  sub eax, 0000000B
:00401C85 EB02                    jmp 00401C89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C78(C)
|
:00401C87 B011                    mov al, 11

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401C6A(U), :00401C85(U)
|
:00401C89 8BE5                    mov esp, ebp
:00401C8B 5D                      pop ebp
:00401C8C C3                      ret



* Referenced by a CALL at Addresses:
|:00401DB9   , :004020B8   , :0040229A   , :0040245B   , :0040D5F0   
|:00419BDD   , :0041AAFE   , :0041C053   , :0041C61B   , :0041FA40   
|:0042C051   , :00433383   , :00449EBC   , :00451F7F   , :0045EB01   
|:0045F0EE   
|
:00401C8D 55                      push ebp
:00401C8E 8BEC                    mov ebp, esp
:00401C90 83EC14                  sub esp, 00000014
:00401C93 53                      push ebx
:00401C94 894DF0                  mov dword ptr [ebp-10], ecx
:00401C97 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401C9A 6BC933                  imul ecx, 00000033
:00401C9D 81C1C8EF4800            add ecx, 0048EFC8
:00401CA3 E8E8290000              call 00404690
:00401CA8 8845F8                  mov byte ptr [ebp-08], al
:00401CAB C745F400000000          mov [ebp-0C], 00000000
:00401CB2 8B45F8                  mov eax, dword ptr [ebp-08]
:00401CB5 25FF000000              and eax, 000000FF
:00401CBA 83F806                  cmp eax, 00000006
:00401CBD 7E07                    jle 00401CC6
:00401CBF 33C0                    xor eax, eax
:00401CC1 E994000000              jmp 00401D5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401CBD(C)
|
:00401CC6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00401CC9 E8B11F0000              call 00403C7F
:00401CCE 8945FC                  mov dword ptr [ebp-04], eax
:00401CD1 837DFC00                cmp dword ptr [ebp-04], 00000000
:00401CD5 754B                    jne 00401D22
:00401CD7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00401CDA E8312A0000              call 00404710
:00401CDF 83F826                  cmp eax, 00000026
:00401CE2 7537                    jne 00401D1B
:00401CE4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401CE7 6BC933                  imul ecx, 00000033
:00401CEA 81C1C8EF4800            add ecx, 0048EFC8
:00401CF0 E8A63B0000              call 0040589B
:00401CF5 8845EC                  mov byte ptr [ebp-14], al
:00401CF8 807DEC01                cmp byte ptr [ebp-14], 01
:00401CFC 7408                    je 00401D06
:00401CFE 807DEC03                cmp byte ptr [ebp-14], 03
:00401D02 7402                    je 00401D06
:00401D04 EB09                    jmp 00401D0F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401CFC(C), :00401D02(C)
|
:00401D06 C745F401000000          mov [ebp-0C], 00000001
:00401D0D EB07                    jmp 00401D16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401D04(U)
|
:00401D0F C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401D0D(U)
|
:00401D16 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401D19 EB3F                    jmp 00401D5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401CE2(C)
|
:00401D1B B801000000              mov eax, 00000001
:00401D20 EB38                    jmp 00401D5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401CD5(C)
|
:00401D22 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00401D25 E8A62A0000              call 004047D0
:00401D2A 8AD8                    mov bl, al
:00401D2C 81E3FF000000            and ebx, 000000FF
:00401D32 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401D35 6BC933                  imul ecx, 00000033
:00401D38 81C1C8EF4800            add ecx, 0048EFC8
:00401D3E E8583B0000              call 0040589B
:00401D43 50                      push eax
:00401D44 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401D47 E8C7260000              call 00404413
:00401D4C 25FF000000              and eax, 000000FF
:00401D51 33C9                    xor ecx, ecx
:00401D53 3BD8                    cmp ebx, eax
:00401D55 0F9DC1                  setnl cl
:00401D58 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401CC1(U), :00401D19(U), :00401D20(U)
|
:00401D5A 5B                      pop ebx
:00401D5B 8BE5                    mov esp, ebp
:00401D5D 5D                      pop ebp
:00401D5E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040A8F6   , :0040D610   , :00418354   , :00419C7B   , :0041A035   
|:0042F527   , :0045200A   , :0045211B   , :0045D799   
|
:00401D61 55                      push ebp
:00401D62 8BEC                    mov ebp, esp
:00401D64 51                      push ecx
:00401D65 894DFC                  mov dword ptr [ebp-04], ecx
:00401D68 8B4508                  mov eax, dword ptr [ebp+08]
:00401D6B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00401D70 3DFF000000              cmp eax, 000000FF
:00401D75 7410                    je 00401D87
:00401D77 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401D7A 81E1FF000000            and ecx, 000000FF
:00401D80 83F908                  cmp ecx, 00000008
:00401D83 7C02                    jl 00401D87
:00401D85 EB4C                    jmp 00401DD3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401D75(C), :00401D83(C)
|
:00401D87 8B5508                  mov edx, dword ptr [ebp+08]
:00401D8A 81E2FF000000            and edx, 000000FF
:00401D90 81FAFF000000            cmp edx, 000000FF
:00401D96 750B                    jne 00401DA3
:00401D98 8B45FC                  mov eax, dword ptr [ebp-04]
:00401D9B 8A4D08                  mov cl, byte ptr [ebp+08]
:00401D9E 884835                  mov byte ptr [eax+35], cl
:00401DA1 EB30                    jmp 00401DD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401D96(C)
|
:00401DA3 8B5508                  mov edx, dword ptr [ebp+08]
:00401DA6 81E2FF000000            and edx, 000000FF
:00401DAC 8B45FC                  mov eax, dword ptr [ebp-04]
:00401DAF 33C9                    xor ecx, ecx
:00401DB1 8A4C1036                mov cl, byte ptr [eax+edx+36]
:00401DB5 51                      push ecx
:00401DB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401DB9 E8CFFEFFFF              call 00401C8D
:00401DBE 85C0                    test eax, eax
:00401DC0 7411                    je 00401DD3
:00401DC2 8B55FC                  mov edx, dword ptr [ebp-04]
:00401DC5 8A4508                  mov al, byte ptr [ebp+08]
:00401DC8 884235                  mov byte ptr [edx+35], al
:00401DCB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401DCE E806000000              call 00401DD9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401D85(U), :00401DA1(U), :00401DC0(C)
|
:00401DD3 8BE5                    mov esp, ebp
:00401DD5 5D                      pop ebp
:00401DD6 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00401DCE   
|
:00401DD9 55                      push ebp
:00401DDA 8BEC                    mov ebp, esp
:00401DDC 83EC1C                  sub esp, 0000001C
:00401DDF 894DE8                  mov dword ptr [ebp-18], ecx
:00401DE2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401DE5 E8062A0000              call 004047F0
:00401DEA 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00401DEF 3DFF000000              cmp eax, 000000FF
:00401DF4 7505                    jne 00401DFB
:00401DF6 E95E020000              jmp 00402059

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401DF4(C)
|
:00401DFB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401DFE E86D290000              call 00404770
:00401E03 8845EC                  mov byte ptr [ebp-14], al
:00401E06 8B45EC                  mov eax, dword ptr [ebp-14]
:00401E09 25FF000000              and eax, 000000FF
:00401E0E 83F816                  cmp eax, 00000016
:00401E11 7C05                    jl 00401E18
:00401E13 E941020000              jmp 00402059

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401E11(C)
|
:00401E18 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401E1B E8D0290000              call 004047F0
:00401E20 50                      push eax
:00401E21 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401E24 E8E7290000              call 00404810
:00401E29 25FF000000              and eax, 000000FF
:00401E2E 8945F8                  mov dword ptr [ebp-08], eax
:00401E31 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401E34 6BC933                  imul ecx, 00000033
:00401E37 81C1C8EF4800            add ecx, 0048EFC8
:00401E3D E8593A0000              call 0040589B
:00401E42 8845FC                  mov byte ptr [ebp-04], al
:00401E45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401E48 81E1FF000000            and ecx, 000000FF
:00401E4E 81F9FF000000            cmp ecx, 000000FF
:00401E54 7505                    jne 00401E5B
:00401E56 E9FE010000              jmp 00402059

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401E54(C)
|
:00401E5B 8B55FC                  mov edx, dword ptr [ebp-04]
:00401E5E 81E2FF000000            and edx, 000000FF
:00401E64 83FA07                  cmp edx, 00000007
:00401E67 7C05                    jl 00401E6E
:00401E69 E9EB010000              jmp 00402059

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401E67(C)
|
:00401E6E C645F0FF                mov [ebp-10], FF
:00401E72 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401E75 E8D6280000              call 00404750
:00401E7A 8845F4                  mov byte ptr [ebp-0C], al
:00401E7D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401E80 25FF000000              and eax, 000000FF
:00401E85 83F802                  cmp eax, 00000002
:00401E88 7C05                    jl 00401E8F
:00401E8A E9CA010000              jmp 00402059

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401E88(C)
|
:00401E8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401E92 81E1FF000000            and ecx, 000000FF
:00401E98 894DE4                  mov dword ptr [ebp-1C], ecx
:00401E9B 837DE406                cmp dword ptr [ebp-1C], 00000006
:00401E9F 0F8797010000            ja 0040203C
:00401EA5 8B55E4                  mov edx, dword ptr [ebp-1C]
:00401EA8 FF24955D204000          jmp dword ptr [4*edx+0040205D]
:00401EAF 8B45EC                  mov eax, dword ptr [ebp-14]
:00401EB2 25FF000000              and eax, 000000FF
:00401EB7 99                      cdq
:00401EB8 33C2                    xor eax, edx
:00401EBA 2BC2                    sub eax, edx
:00401EBC 83E001                  and eax, 00000001
:00401EBF 33C2                    xor eax, edx
:00401EC1 2BC2                    sub eax, edx
:00401EC3 85C0                    test eax, eax
:00401EC5 7417                    je 00401EDE
:00401EC7 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401ECA 25FF000000              and eax, 000000FF
:00401ECF F7D8                    neg eax
:00401ED1 1BC0                    sbb eax, eax
:00401ED3 83E002                  and eax, 00000002
:00401ED6 83C001                  add eax, 00000001
:00401ED9 8845F0                  mov byte ptr [ebp-10], al
:00401EDC EB13                    jmp 00401EF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401EC5(C)
|
:00401EDE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401EE1 81E1FF000000            and ecx, 000000FF
:00401EE7 F7D9                    neg ecx
:00401EE9 1BC9                    sbb ecx, ecx
:00401EEB 83E102                  and ecx, 00000002
:00401EEE 884DF0                  mov byte ptr [ebp-10], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401EDC(U)
|
:00401EF1 E946010000              jmp 0040203C
:00401EF6 8B45EC                  mov eax, dword ptr [ebp-14]
:00401EF9 25FF000000              and eax, 000000FF
:00401EFE 99                      cdq
:00401EFF 33C2                    xor eax, edx
:00401F01 2BC2                    sub eax, edx
:00401F03 83E001                  and eax, 00000001
:00401F06 33C2                    xor eax, edx
:00401F08 2BC2                    sub eax, edx
:00401F0A 85C0                    test eax, eax
:00401F0C 7418                    je 00401F26
:00401F0E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401F11 81E2FF000000            and edx, 000000FF
:00401F17 F7DA                    neg edx
:00401F19 1BD2                    sbb edx, edx
:00401F1B 83E202                  and edx, 00000002
:00401F1E 83C205                  add edx, 00000005
:00401F21 8855F0                  mov byte ptr [ebp-10], dl
:00401F24 EB15                    jmp 00401F3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F0C(C)
|
:00401F26 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401F29 25FF000000              and eax, 000000FF
:00401F2E F7D8                    neg eax
:00401F30 1BC0                    sbb eax, eax
:00401F32 83E002                  and eax, 00000002
:00401F35 83C004                  add eax, 00000004
:00401F38 8845F0                  mov byte ptr [ebp-10], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F24(U)
|
:00401F3B E9FC000000              jmp 0040203C
:00401F40 8B45EC                  mov eax, dword ptr [ebp-14]
:00401F43 25FF000000              and eax, 000000FF
:00401F48 99                      cdq
:00401F49 33C2                    xor eax, edx
:00401F4B 2BC2                    sub eax, edx
:00401F4D 83E001                  and eax, 00000001
:00401F50 33C2                    xor eax, edx
:00401F52 2BC2                    sub eax, edx
:00401F54 85C0                    test eax, eax
:00401F56 7418                    je 00401F70
:00401F58 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401F5B 81E1FF000000            and ecx, 000000FF
:00401F61 F7D9                    neg ecx
:00401F63 1BC9                    sbb ecx, ecx
:00401F65 83E102                  and ecx, 00000002
:00401F68 83C109                  add ecx, 00000009
:00401F6B 884DF0                  mov byte ptr [ebp-10], cl
:00401F6E EB16                    jmp 00401F86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F56(C)
|
:00401F70 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401F73 81E2FF000000            and edx, 000000FF
:00401F79 F7DA                    neg edx
:00401F7B 1BD2                    sbb edx, edx
:00401F7D 83E202                  and edx, 00000002
:00401F80 83C208                  add edx, 00000008
:00401F83 8855F0                  mov byte ptr [ebp-10], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F6E(U)
|
:00401F86 E9B1000000              jmp 0040203C
:00401F8B 8B45EC                  mov eax, dword ptr [ebp-14]
:00401F8E 25FF000000              and eax, 000000FF
:00401F93 99                      cdq
:00401F94 33C2                    xor eax, edx
:00401F96 2BC2                    sub eax, edx
:00401F98 83E001                  and eax, 00000001
:00401F9B 33C2                    xor eax, edx
:00401F9D 2BC2                    sub eax, edx
:00401F9F 85C0                    test eax, eax
:00401FA1 7417                    je 00401FBA
:00401FA3 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401FA6 25FF000000              and eax, 000000FF
:00401FAB F7D8                    neg eax
:00401FAD 1BC0                    sbb eax, eax
:00401FAF 83E002                  and eax, 00000002
:00401FB2 83C00D                  add eax, 0000000D
:00401FB5 8845F0                  mov byte ptr [ebp-10], al
:00401FB8 EB16                    jmp 00401FD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FA1(C)
|
:00401FBA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401FBD 81E1FF000000            and ecx, 000000FF
:00401FC3 F7D9                    neg ecx
:00401FC5 1BC9                    sbb ecx, ecx
:00401FC7 83E102                  and ecx, 00000002
:00401FCA 83C10C                  add ecx, 0000000C
:00401FCD 884DF0                  mov byte ptr [ebp-10], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FB8(U)
|
:00401FD0 EB6A                    jmp 0040203C
:00401FD2 8B45EC                  mov eax, dword ptr [ebp-14]
:00401FD5 25FF000000              and eax, 000000FF
:00401FDA 99                      cdq
:00401FDB 33C2                    xor eax, edx
:00401FDD 2BC2                    sub eax, edx
:00401FDF 83E001                  and eax, 00000001
:00401FE2 33C2                    xor eax, edx
:00401FE4 2BC2                    sub eax, edx
:00401FE6 85C0                    test eax, eax
:00401FE8 7406                    je 00401FF0
:00401FEA C645F011                mov [ebp-10], 11
:00401FEE EB04                    jmp 00401FF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FE8(C)
|
:00401FF0 C645F010                mov [ebp-10], 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FEE(U)
|
:00401FF4 EB46                    jmp 0040203C
:00401FF6 8B45EC                  mov eax, dword ptr [ebp-14]
:00401FF9 25FF000000              and eax, 000000FF
:00401FFE 99                      cdq
:00401FFF 33C2                    xor eax, edx
:00402001 2BC2                    sub eax, edx
:00402003 83E001                  and eax, 00000001
:00402006 33C2                    xor eax, edx
:00402008 2BC2                    sub eax, edx
:0040200A 85C0                    test eax, eax
:0040200C 7406                    je 00402014
:0040200E C645F013                mov [ebp-10], 13
:00402012 EB04                    jmp 00402018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040200C(C)
|
:00402014 C645F012                mov [ebp-10], 12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402012(U)
|
:00402018 EB22                    jmp 0040203C
:0040201A 8B45EC                  mov eax, dword ptr [ebp-14]
:0040201D 25FF000000              and eax, 000000FF
:00402022 99                      cdq
:00402023 33C2                    xor eax, edx
:00402025 2BC2                    sub eax, edx
:00402027 83E001                  and eax, 00000001
:0040202A 33C2                    xor eax, edx
:0040202C 2BC2                    sub eax, edx
:0040202E 85C0                    test eax, eax
:00402030 7406                    je 00402038
:00402032 C645F015                mov [ebp-10], 15
:00402036 EB04                    jmp 0040203C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402030(C)
|
:00402038 C645F014                mov [ebp-10], 14

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401E9F(C), :00401EF1(U), :00401F3B(U), :00401F86(U), :00401FD0(U)
|:00401FF4(U), :00402018(U), :00402036(U)
|
:0040203C 8B55F0                  mov edx, dword ptr [ebp-10]
:0040203F 81E2FF000000            and edx, 000000FF
:00402045 81FAFF000000            cmp edx, 000000FF
:0040204B 740C                    je 00402059
:0040204D 8A45F0                  mov al, byte ptr [ebp-10]
:00402050 50                      push eax
:00402051 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00402054 E857270000              call 004047B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401DF6(U), :00401E13(U), :00401E56(U), :00401E69(U), :00401E8A(U)
|:0040204B(C)
|
:00402059 8BE5                    mov esp, ebp
:0040205B 5D                      pop ebp
:0040205C C3                      ret



:0040205D AF1E4000                DWORD 00401EAF
:00402061 F61E4000                DWORD 00401EF6
:00402065 401F4000                DWORD 00401F40
:00402069 8B1F4000                DWORD 00401F8B
:0040206D D21F4000                DWORD 00401FD2
:00402071 F61F4000                DWORD 00401FF6
:00402075 1A204000                DWORD 0040201A



* Referenced by a CALL at Addresses:
|:0040209E   , :00402353   
|
:00402079 55                      push ebp
:0040207A 8BEC                    mov ebp, esp
:0040207C 51                      push ecx
:0040207D 894DFC                  mov dword ptr [ebp-04], ecx
:00402080 B801000000              mov eax, 00000001
:00402085 8BE5                    mov esp, ebp
:00402087 5D                      pop ebp
:00402088 C20400                  ret 0004


:0040208B 55                      push ebp
:0040208C 8BEC                    mov ebp, esp
:0040208E 8B4508                  mov eax, dword ptr [ebp+08]
:00402091 50                      push eax
:00402092 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402095 6BC970                  imul ecx, 00000070
:00402098 81C198224900            add ecx, 00492298
:0040209E E8D6FFFFFF              call 00402079
:004020A3 5D                      pop ebp
:004020A4 C3                      ret



* Referenced by a CALL at Address:
|:0040A8D4   
|
:004020A5 55                      push ebp
:004020A6 8BEC                    mov ebp, esp
:004020A8 8B4508                  mov eax, dword ptr [ebp+08]
:004020AB 50                      push eax
:004020AC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004020AF 6BC970                  imul ecx, 00000070
:004020B2 81C198224900            add ecx, 00492298
:004020B8 E8D0FBFFFF              call 00401C8D
:004020BD 5D                      pop ebp
:004020BE C3                      ret



* Referenced by a CALL at Addresses:
|:00402CE5   , :00406DC8   , :0040D46A   
|
:004020BF 55                      push ebp
:004020C0 8BEC                    mov ebp, esp
:004020C2 83EC20                  sub esp, 00000020
:004020C5 56                      push esi
:004020C6 894DE0                  mov dword ptr [ebp-20], ecx
:004020C9 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004020CC E8AE1B0000              call 00403C7F
:004020D1 8945F4                  mov dword ptr [ebp-0C], eax
:004020D4 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004020D7 E834260000              call 00404710
:004020DC 8945E8                  mov dword ptr [ebp-18], eax
:004020DF 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004020E2 E8E9260000              call 004047D0
:004020E7 8845E4                  mov byte ptr [ebp-1C], al
:004020EA B863000000              mov eax, 00000063
:004020EF 2B4508                  sub eax, dword ptr [ebp+08]
:004020F2 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004020F5 33D2                    xor edx, edx
:004020F7 8A5133                  mov dl, byte ptr [ecx+33]
:004020FA 3BC2                    cmp eax, edx
:004020FC 7314                    jnb 00402112
:004020FE 8B45E0                  mov eax, dword ptr [ebp-20]
:00402101 33C9                    xor ecx, ecx
:00402103 8A4833                  mov cl, byte ptr [eax+33]
:00402106 BA63000000              mov edx, 00000063
:0040210B 2BD1                    sub edx, ecx
:0040210D 8855FC                  mov byte ptr [ebp-04], dl
:00402110 EB06                    jmp 00402118

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004020FC(C)
|
:00402112 8A4508                  mov al, byte ptr [ebp+08]
:00402115 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402110(U)
|
:00402118 C745F800000000          mov [ebp-08], 00000000
:0040211F EB09                    jmp 0040212A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021B0(U)
|
:00402121 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402124 83C101                  add ecx, 00000001
:00402127 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040211F(U)
|
:0040212A 837DF808                cmp dword ptr [ebp-08], 00000008
:0040212E 0F8D81000000            jnl 004021B5
:00402134 837DF400                cmp dword ptr [ebp-0C], 00000000
:00402138 7416                    je 00402150
:0040213A 8A55F8                  mov dl, byte ptr [ebp-08]
:0040213D 52                      push edx
:0040213E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402141 E870220000              call 004043B6
:00402146 25FF000000              and eax, 000000FF
:0040214B 8945EC                  mov dword ptr [ebp-14], eax
:0040214E EB24                    jmp 00402174

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402138(C)
|
:00402150 8B45F8                  mov eax, dword ptr [ebp-08]
:00402153 50                      push eax
:00402154 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00402157 33D2                    xor edx, edx
:00402159 8A5132                  mov dl, byte ptr [ecx+32]
:0040215C 8BCA                    mov ecx, edx
:0040215E 6BC927                  imul ecx, 00000027
:00402161 81C1C83C4A00            add ecx, 004A3CC8
:00402167 E864250000              call 004046D0
:0040216C 25FF000000              and eax, 000000FF
:00402171 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040214E(U)
|
:00402174 837DEC00                cmp dword ptr [ebp-14], 00000000
:00402178 7436                    je 004021B0
:0040217A C745F000000000          mov [ebp-10], 00000000
:00402181 EB09                    jmp 0040218C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021AE(U)
|
:00402183 8B45F0                  mov eax, dword ptr [ebp-10]
:00402186 83C001                  add eax, 00000001
:00402189 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402181(U)
|
:0040218C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040218F 81E1FF000000            and ecx, 000000FF
:00402195 394DF0                  cmp dword ptr [ebp-10], ecx
:00402198 7316                    jnb 004021B0
:0040219A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040219D 52                      push edx
:0040219E 8B45F8                  mov eax, dword ptr [ebp-08]
:004021A1 50                      push eax
:004021A2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004021A5 51                      push ecx
:004021A6 E873F9FFFF              call 00401B1E
:004021AB 83C40C                  add esp, 0000000C
:004021AE EBD3                    jmp 00402183

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402178(C), :00402198(C)
|
:004021B0 E96CFFFFFF              jmp 00402121

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040212E(C)
|
:004021B5 8B55E0                  mov edx, dword ptr [ebp-20]
:004021B8 8A4233                  mov al, byte ptr [edx+33]
:004021BB 0245FC                  add al, byte ptr [ebp-04]
:004021BE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004021C1 884133                  mov byte ptr [ecx+33], al
:004021C4 837DF400                cmp dword ptr [ebp-0C], 00000000
:004021C8 747A                    je 00402244
:004021CA C745F000000000          mov [ebp-10], 00000000
:004021D1 EB09                    jmp 004021DC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004021F7(U), :00402242(U)
|
:004021D3 8B55F0                  mov edx, dword ptr [ebp-10]
:004021D6 83C201                  add edx, 00000001
:004021D9 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021D1(U)
|
:004021DC 837DF020                cmp dword ptr [ebp-10], 00000020
:004021E0 7362                    jnb 00402244
:004021E2 8A45F0                  mov al, byte ptr [ebp-10]
:004021E5 50                      push eax
:004021E6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004021E9 E882220000              call 00404470
:004021EE 25FF000000              and eax, 000000FF
:004021F3 85C0                    test eax, eax
:004021F5 7502                    jne 004021F9
:004021F7 EBDA                    jmp 004021D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021F5(C)
|
:004021F9 8B75E4                  mov esi, dword ptr [ebp-1C]
:004021FC 81E6FF000000            and esi, 000000FF
:00402202 8A4DF0                  mov cl, byte ptr [ebp-10]
:00402205 51                      push ecx
:00402206 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402209 E862220000              call 00404470
:0040220E 25FF000000              and eax, 000000FF
:00402213 3BF0                    cmp esi, eax
:00402215 7D2B                    jge 00402242
:00402217 8A55F0                  mov dl, byte ptr [ebp-10]
:0040221A 52                      push edx
:0040221B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040221E E84D220000              call 00404470
:00402223 25FF000000              and eax, 000000FF
:00402228 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040222B 33D2                    xor edx, edx
:0040222D 8A5133                  mov dl, byte ptr [ecx+33]
:00402230 3BC2                    cmp eax, edx
:00402232 7F0E                    jg 00402242
:00402234 6A00                    push 00000000
:00402236 8A45F0                  mov al, byte ptr [ebp-10]
:00402239 50                      push eax
:0040223A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040223D E8DC1D0000              call 0040401E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402215(C), :00402232(C)
|
:00402242 EB8F                    jmp 004021D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004021C8(C), :004021E0(C)
|
:00402244 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00402247 8A4133                  mov al, byte ptr [ecx+33]
:0040224A 5E                      pop esi
:0040224B 8BE5                    mov esp, ebp
:0040224D 5D                      pop ebp
:0040224E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004023D3   , :00402406   , :004024C0   , :004024F3   , :00402524   
|:004025C4   , :00402902   , :00402926   
|
:00402251 55                      push ebp
:00402252 8BEC                    mov ebp, esp
:00402254 83EC20                  sub esp, 00000020
:00402257 894DE4                  mov dword ptr [ebp-1C], ecx
:0040225A C645FC00                mov [ebp-04], 00
:0040225E C645ECFF                mov [ebp-14], FF
:00402262 837D0800                cmp dword ptr [ebp+08], 00000000
:00402266 0F8585000000            jne 004022F1
:0040226C 8B45E4                  mov eax, dword ptr [ebp-1C]
:0040226F 33C9                    xor ecx, ecx
:00402271 8A4835                  mov cl, byte ptr [eax+35]
:00402274 81F9FF000000            cmp ecx, 000000FF
:0040227A 7459                    je 004022D5
:0040227C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0040227F 33C0                    xor eax, eax
:00402281 8A4235                  mov al, byte ptr [edx+35]
:00402284 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00402287 8A540136                mov dl, byte ptr [ecx+eax+36]
:0040228B 8855EC                  mov byte ptr [ebp-14], dl
:0040228E 8B45EC                  mov eax, dword ptr [ebp-14]
:00402291 25FF000000              and eax, 000000FF
:00402296 50                      push eax
:00402297 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040229A E8EEF9FFFF              call 00401C8D
:0040229F 85C0                    test eax, eax
:004022A1 7518                    jne 004022BB
:004022A3 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004022A6 C64135FF                mov [ecx+35], FF
:004022AA 8B450C                  mov eax, dword ptr [ebp+0C]
:004022AD F7D8                    neg eax
:004022AF 1BC0                    sbb eax, eax
:004022B1 25FF000000              and eax, 000000FF
:004022B6 E9FF000000              jmp 004023BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004022A1(C)
|
:004022BB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004022BE 81E1FF000000            and ecx, 000000FF
:004022C4 6BC933                  imul ecx, 00000033
:004022C7 81C1C8EF4800            add ecx, 0048EFC8
:004022CD E85EDD0100              call 00420030
:004022D2 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040227A(C)
|
:004022D5 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004022D9 7508                    jne 004022E3
:004022DB 8A55FC                  mov dl, byte ptr [ebp-04]
:004022DE 8855E3                  mov byte ptr [ebp-1D], dl
:004022E1 EB06                    jmp 004022E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004022D9(C)
|
:004022E3 8A45EC                  mov al, byte ptr [ebp-14]
:004022E6 8845E3                  mov byte ptr [ebp-1D], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004022E1(U)
|
:004022E9 8A45E3                  mov al, byte ptr [ebp-1D]
:004022EC E9C9000000              jmp 004023BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402266(C)
|
:004022F1 C645F000                mov [ebp-10], 00
:004022F5 EB09                    jmp 00402300

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040239E(U)
|
:004022F7 8A4DF0                  mov cl, byte ptr [ebp-10]
:004022FA 80C101                  add cl, 01
:004022FD 884DF0                  mov byte ptr [ebp-10], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004022F5(U)
|
:00402300 8B55F0                  mov edx, dword ptr [ebp-10]
:00402303 81E2FF000000            and edx, 000000FF
:00402309 83FA08                  cmp edx, 00000008
:0040230C 0F8D91000000            jnl 004023A3
:00402312 8B45F0                  mov eax, dword ptr [ebp-10]
:00402315 25FF000000              and eax, 000000FF
:0040231A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040231D 33D2                    xor edx, edx
:0040231F 8A540136                mov dl, byte ptr [ecx+eax+36]
:00402323 8955F8                  mov dword ptr [ebp-08], edx
:00402326 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:0040232D 746F                    je 0040239E
:0040232F 8B45F8                  mov eax, dword ptr [ebp-08]
:00402332 50                      push eax
:00402333 E836F8FFFF              call 00401B6E
:00402338 83C404                  add esp, 00000004
:0040233B 8845E8                  mov byte ptr [ebp-18], al
:0040233E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00402341 81E1FF000000            and ecx, 000000FF
:00402347 3B4D08                  cmp ecx, dword ptr [ebp+08]
:0040234A 7552                    jne 0040239E
:0040234C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040234F 52                      push edx
:00402350 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00402353 E821FDFFFF              call 00402079
:00402358 85C0                    test eax, eax
:0040235A 7442                    je 0040239E
:0040235C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040235F 6BC933                  imul ecx, 00000033
:00402362 81C1C8EF4800            add ecx, 0048EFC8
:00402368 E8C3DC0100              call 00420030
:0040236D 8845F4                  mov byte ptr [ebp-0C], al
:00402370 8B45FC                  mov eax, dword ptr [ebp-04]
:00402373 25FF000000              and eax, 000000FF
:00402378 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040237B 81E1FF000000            and ecx, 000000FF
:00402381 3BC1                    cmp eax, ecx
:00402383 7D19                    jge 0040239E
:00402385 8B55F0                  mov edx, dword ptr [ebp-10]
:00402388 81E2FF000000            and edx, 000000FF
:0040238E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00402391 8A4C1036                mov cl, byte ptr [eax+edx+36]
:00402395 884DEC                  mov byte ptr [ebp-14], cl
:00402398 8A55F4                  mov dl, byte ptr [ebp-0C]
:0040239B 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040232D(C), :0040234A(C), :0040235A(C), :00402383(C)
|
:0040239E E954FFFFFF              jmp 004022F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040230C(C)
|
:004023A3 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004023A7 7508                    jne 004023B1
:004023A9 8A45FC                  mov al, byte ptr [ebp-04]
:004023AC 8845E2                  mov byte ptr [ebp-1E], al
:004023AF EB06                    jmp 004023B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004023A7(C)
|
:004023B1 8A4DEC                  mov cl, byte ptr [ebp-14]
:004023B4 884DE2                  mov byte ptr [ebp-1E], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004023AF(U)
|
:004023B7 8A45E2                  mov al, byte ptr [ebp-1E]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004022B6(U), :004022EC(U)
|
:004023BA 8BE5                    mov esp, ebp
:004023BC 5D                      pop ebp
:004023BD C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00418EE6   , :0041A43A   , :0041A739   , :0041ABF6   , :0041C14B   
|:0041C713   , :0042A461   , :00451574   , :004515AE   , :00451C3C   
|:0045E64A   , :0045EBF9   , :00464D86   , :00467579   , :00467583   
|:00467721   , :00467BE0   
|
:004023C0 55                      push ebp
:004023C1 8BEC                    mov ebp, esp
:004023C3 51                      push ecx
:004023C4 894DFC                  mov dword ptr [ebp-04], ecx
:004023C7 68F4010000              push 000001F4
:004023CC 6A00                    push 00000000
:004023CE 6A00                    push 00000000
:004023D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004023D3 E879FEFFFF              call 00402251
:004023D8 25FF000000              and eax, 000000FF
:004023DD 50                      push eax
:004023DE 8B45FC                  mov eax, dword ptr [ebp-04]
:004023E1 33C9                    xor ecx, ecx
:004023E3 8A4828                  mov cl, byte ptr [eax+28]
:004023E6 51                      push ecx
:004023E7 E8A6FB0500              call 00461F92
:004023EC 83C40C                  add esp, 0000000C
:004023EF 8BE5                    mov esp, ebp
:004023F1 5D                      pop ebp
:004023F2 C3                      ret



* Referenced by a CALL at Addresses:
|:00418F15   , :0041A469   , :0041A768   , :0041ADF9   , :0041C342   
|:0041C90A   , :0042A4DD   , :004515CB   , :00451605   , :00451C56   
|:0045E679   , :0045EDF0   , :00464D91   , :00467595   , :0046759F   
|:0046774B   , :00467C35   
|
:004023F3 55                      push ebp
:004023F4 8BEC                    mov ebp, esp
:004023F6 51                      push ecx
:004023F7 894DFC                  mov dword ptr [ebp-04], ecx
:004023FA 68F4010000              push 000001F4
:004023FF 6A00                    push 00000000
:00402401 6A01                    push 00000001
:00402403 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402406 E846FEFFFF              call 00402251
:0040240B 25FF000000              and eax, 000000FF
:00402410 50                      push eax
:00402411 8B45FC                  mov eax, dword ptr [ebp-04]
:00402414 33C9                    xor ecx, ecx
:00402416 8A4829                  mov cl, byte ptr [eax+29]
:00402419 51                      push ecx
:0040241A E873FB0500              call 00461F92
:0040241F 83C40C                  add esp, 0000000C
:00402422 8BE5                    mov esp, ebp
:00402424 5D                      pop ebp
:00402425 C3                      ret



* Referenced by a CALL at Addresses:
|:00418F44   , :0041A498   , :0041A797   , :0041AC9E   , :0041AE87   
|:0041C1F3   , :0041C3D0   , :0041C7BB   , :0041C998   , :0042A504   
|:0042B743   , :0042B805   , :00451622   , :0045165C   , :0045E6A8   
|:0045ECA1   , :0045EE7E   , :00464D9C   , :004675B1   , :004675BB   
|:00467775   , :00467C8A   
|
:00402426 55                      push ebp
:00402427 8BEC                    mov ebp, esp
:00402429 83EC08                  sub esp, 00000008
:0040242C 894DF8                  mov dword ptr [ebp-08], ecx
:0040242F C745FC00000000          mov [ebp-04], 00000000
:00402436 8B45F8                  mov eax, dword ptr [ebp-08]
:00402439 33C9                    xor ecx, ecx
:0040243B 8A4835                  mov cl, byte ptr [eax+35]
:0040243E 81F9FF000000            cmp ecx, 000000FF
:00402444 7449                    je 0040248F
:00402446 8B55F8                  mov edx, dword ptr [ebp-08]
:00402449 33C0                    xor eax, eax
:0040244B 8A4235                  mov al, byte ptr [edx+35]
:0040244E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402451 33D2                    xor edx, edx
:00402453 8A540136                mov dl, byte ptr [ecx+eax+36]
:00402457 52                      push edx
:00402458 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040245B E82DF8FFFF              call 00401C8D
:00402460 85C0                    test eax, eax
:00402462 7502                    jne 00402466
:00402464 EB29                    jmp 0040248F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402462(C)
|
:00402466 8B45F8                  mov eax, dword ptr [ebp-08]
:00402469 33C9                    xor ecx, ecx
:0040246B 8A4835                  mov cl, byte ptr [eax+35]
:0040246E 8B55F8                  mov edx, dword ptr [ebp-08]
:00402471 33C0                    xor eax, eax
:00402473 8A440A36                mov al, byte ptr [edx+ecx+36]
:00402477 8BC8                    mov ecx, eax
:00402479 6BC933                  imul ecx, 00000033
:0040247C 81C1C8EF4800            add ecx, 0048EFC8
:00402482 E8E9220000              call 00404770
:00402487 25FF000000              and eax, 000000FF
:0040248C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402444(C), :00402464(U)
|
:0040248F 68F4010000              push 000001F4
:00402494 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402497 51                      push ecx
:00402498 8B55F8                  mov edx, dword ptr [ebp-08]
:0040249B 33C0                    xor eax, eax
:0040249D 8A422A                  mov al, byte ptr [edx+2A]
:004024A0 50                      push eax
:004024A1 E8ECFA0500              call 00461F92
:004024A6 83C40C                  add esp, 0000000C
:004024A9 8BE5                    mov esp, ebp
:004024AB 5D                      pop ebp
:004024AC C3                      ret



* Referenced by a CALL at Addresses:
|:00418F73   , :0041A4C7   , :0041A7C6   , :0041AF15   , :0041C45E   
|:0041CA26   , :0042B56A   , :0042F925   , :0045E6D7   , :0045EF0C   
|:00464EEC   , :00464F19   , :004675CD   , :004675D7   , :0046779F   
|:00467CDF   
|
:004024AD 55                      push ebp
:004024AE 8BEC                    mov ebp, esp
:004024B0 51                      push ecx
:004024B1 894DFC                  mov dword ptr [ebp-04], ecx
:004024B4 68F4010000              push 000001F4
:004024B9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004024BB 6A03                    push 00000003
:004024BD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004024C0 E88CFDFFFF              call 00402251
:004024C5 25FF000000              and eax, 000000FF
:004024CA 50                      push eax
:004024CB 8B45FC                  mov eax, dword ptr [ebp-04]
:004024CE 33C9                    xor ecx, ecx
:004024D0 8A482B                  mov cl, byte ptr [eax+2B]
:004024D3 51                      push ecx
:004024D4 E8B9FA0500              call 00461F92
:004024D9 83C40C                  add esp, 0000000C
:004024DC 8BE5                    mov esp, ebp
:004024DE 5D                      pop ebp
:004024DF C3                      ret



* Referenced by a CALL at Addresses:
|:0040D445   , :0040D49F   , :00418FA2   , :0041A4F6   , :0041A7F5   
|:0041AF99   , :0041C4E2   , :0041CAAA   , :0042A977   , :0042AD72   
|:0042AF9E   , :0042B277   , :0042B2AE   , :0042B2D4   , :0042B2E0   
|:0042B33A   , :0042B4A5   , :0042B4B1   , :0042BFE9   , :0042D075   
|:00430CBF   , :00430CD9   , :00430D04   , :00430D26   , :004325F8   
|:00439518   , :00439600   , :00439669   , :00439675   , :00439A85   
|:0043BD00   , :004425D0   , :004425FB   , :004428CC   , :00442AB3   
|:0044889F   , :004488B7   , :00448ED4   , :00448F17   , :004491AB   
|:0044AB1E   , :0044AB71   , :0044B415   , :0044B6A5   , :0044B976   
|:0044BA4B   , :0044BC1A   , :0044BC88   , :0044C344   , :0044C377   
|:0044C398   , :0044C3C2   , :0044C3D7   , :0044C410   , :0044C666   
|:0044C6C2   , :0044C6E3   , :0044C70D   , :0044C722   , :0044C75B   
|:004514D5   , :0045519C   , :00455633   , :004579B2   , :004579EA   
|:00457A0D   , :00458138   , :00458BC8   , :0045A0E5   , :0045E706   
|:0045EF90   , :00464FFE   , :004650FB   , :004675E9   , :004675F3   
|:004677C9   , :00467D34   
|
:004024E0 55                      push ebp
:004024E1 8BEC                    mov ebp, esp
:004024E3 51                      push ecx
:004024E4 894DFC                  mov dword ptr [ebp-04], ecx
:004024E7 68E8030000              push 000003E8
:004024EC 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004024EE 6A04                    push 00000004
:004024F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004024F3 E859FDFFFF              call 00402251
:004024F8 25FF000000              and eax, 000000FF
:004024FD 50                      push eax
:004024FE 8B45FC                  mov eax, dword ptr [ebp-04]
:00402501 8B4808                  mov ecx, dword ptr [eax+08]
:00402504 51                      push ecx
:00402505 E888FA0500              call 00461F92
:0040250A 83C40C                  add esp, 0000000C
:0040250D 8BE5                    mov esp, ebp
:0040250F 5D                      pop ebp
:00402510 C3                      ret



* Referenced by a CALL at Addresses:
|:0040D4CE   , :00418FD1   , :0041A525   , :0041A824   , :0041B027   
|:0041C570   , :0041CB38   , :0042A9D4   , :0042B537   , :0042B556   
|:0042B58F   , :0042B5A8   , :0042BFFA   , :0042D0B4   , :0042F464   
|:0042FE93   , :0042FE9F   , :00430F1E   , :00430F40   , :00430F62   
|:00432630   , :00437871   , :00437889   , :00437901   , :0043790D   
|:00439B35   , :004426F7   , :00442722   , :004428DF   , :00442AEC   
|:0044AAC1   , :0044AAE3   , :0044BADA   , :0044C47C   , :0044C491   
|:0044C4CA   , :0044C7E6   , :0044C7FB   , :0044C834   , :0045153F   
|:00453D3C   , :004551CB   , :0045565C   , :004577A9   , :00457A61   
|:00457A99   , :00457ABC   , :00458167   , :00458BE2   , :0045A115   
|:0045E735   , :0045F01E   , :00465009   , :00465129   , :00467605   
|:0046760F   , :004677F3   , :00467D89   
|
:00402511 55                      push ebp
:00402512 8BEC                    mov ebp, esp
:00402514 51                      push ecx
:00402515 894DFC                  mov dword ptr [ebp-04], ecx
:00402518 68F4010000              push 000001F4
:0040251D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040251F 6A05                    push 00000005
:00402521 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402524 E828FDFFFF              call 00402251
:00402529 25FF000000              and eax, 000000FF
:0040252E 50                      push eax
:0040252F 8B45FC                  mov eax, dword ptr [ebp-04]
:00402532 33C9                    xor ecx, ecx
:00402534 8A482C                  mov cl, byte ptr [eax+2C]
:00402537 51                      push ecx
:00402538 E855FA0500              call 00461F92
:0040253D 83C40C                  add esp, 0000000C
:00402540 8BE5                    mov esp, ebp
:00402542 5D                      pop ebp
:00402543 C3                      ret



* Referenced by a CALL at Addresses:
|:00417889   , :004178BD   , :00419000   , :0041A554   , :0041A853   
|:0041AC25   , :0041C17A   , :0041C742   , :0042AE3A   , :0045E764   
|:0045EC28   , :00464F39   , :00464F66   , :0046761E   , :00467628   
|:0046781D   , :00467DDE   
|
:00402544 55                      push ebp
:00402545 8BEC                    mov ebp, esp
:00402547 83EC08                  sub esp, 00000008
:0040254A 894DF8                  mov dword ptr [ebp-08], ecx
:0040254D C745FC00000000          mov [ebp-04], 00000000
:00402554 8B45F8                  mov eax, dword ptr [ebp-08]
:00402557 33C9                    xor ecx, ecx
:00402559 8A4835                  mov cl, byte ptr [eax+35]
:0040255C 81F9FF000000            cmp ecx, 000000FF
:00402562 742E                    je 00402592
:00402564 8B55F8                  mov edx, dword ptr [ebp-08]
:00402567 33C0                    xor eax, eax
:00402569 8A4235                  mov al, byte ptr [edx+35]
:0040256C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040256F 33D2                    xor edx, edx
:00402571 8A540136                mov dl, byte ptr [ecx+eax+36]
:00402575 8BCA                    mov ecx, edx
:00402577 6BC933                  imul ecx, 00000033
:0040257A 81C1C8EF4800            add ecx, 0048EFC8
:00402580 E86B210000              call 004046F0
:00402585 25FF000000              and eax, 000000FF
:0040258A 99                      cdq
:0040258B 2BC2                    sub eax, edx
:0040258D D1F8                    sar eax, 1
:0040258F 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402562(C)
|
:00402592 68F4010000              push 000001F4
:00402597 8B45FC                  mov eax, dword ptr [ebp-04]
:0040259A 50                      push eax
:0040259B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040259E 33D2                    xor edx, edx
:004025A0 8A512E                  mov dl, byte ptr [ecx+2E]
:004025A3 52                      push edx
:004025A4 E8E9F90500              call 00461F92
:004025A9 83C40C                  add esp, 0000000C
:004025AC 8BE5                    mov esp, ebp
:004025AE 5D                      pop ebp
:004025AF C3                      ret



* Referenced by a CALL at Address:
|:00402606   
|
:004025B0 55                      push ebp
:004025B1 8BEC                    mov ebp, esp
:004025B3 83EC0C                  sub esp, 0000000C
:004025B6 894DF4                  mov dword ptr [ebp-0C], ecx
:004025B9 C645F800                mov [ebp-08], 00
:004025BD 6A01                    push 00000001
:004025BF 6A01                    push 00000001
:004025C1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004025C4 E888FCFFFF              call 00402251
:004025C9 8845FC                  mov byte ptr [ebp-04], al
:004025CC 8B45FC                  mov eax, dword ptr [ebp-04]
:004025CF 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004025D4 3DFF000000              cmp eax, 000000FF
:004025D9 741A                    je 004025F5
:004025DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004025DE 81E1FF000000            and ecx, 000000FF
:004025E4 6BC933                  imul ecx, 00000033
:004025E7 81C1C8EF4800            add ecx, 0048EFC8
:004025ED E83E210000              call 00404730
:004025F2 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004025D9(C)
|
:004025F5 8A45F8                  mov al, byte ptr [ebp-08]
:004025F8 8BE5                    mov esp, ebp
:004025FA 5D                      pop ebp
:004025FB C3                      ret



* Referenced by a CALL at Addresses:
|:0041902F   , :0041A583   , :0041A882   , :0041AD81   , :0041C2CA   
|:0041C892   , :0042A522   , :0043C728   , :0043C75A   , :0045E793   
|:0045ED78   , :00464F86   , :00464FB8   , :00467637   , :00467647   
|:00467844   , :00467E33   
|
:004025FC 55                      push ebp
:004025FD 8BEC                    mov ebp, esp
:004025FF 51                      push ecx
:00402600 894DFC                  mov dword ptr [ebp-04], ecx
:00402603 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402606 E8A5FFFFFF              call 004025B0
:0040260B 50                      push eax
:0040260C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040260F 8A482F                  mov cl, byte ptr [eax+2F]
:00402612 51                      push ecx
:00402613 E820FA0500              call 00462038
:00402618 83C408                  add esp, 00000008
:0040261B 8BE5                    mov esp, ebp
:0040261D 5D                      pop ebp
:0040261E C3                      ret



* Referenced by a CALL at Addresses:
|:00402687   , :0041F024   
|
:0040261F 55                      push ebp
:00402620 8BEC                    mov ebp, esp
:00402622 83EC0C                  sub esp, 0000000C
:00402625 894DF4                  mov dword ptr [ebp-0C], ecx
:00402628 C645FC00                mov [ebp-04], 00
:0040262C C645F800                mov [ebp-08], 00
:00402630 EB08                    jmp 0040263A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402668(U)
|
:00402632 8A45F8                  mov al, byte ptr [ebp-08]
:00402635 0401                    add al, 01
:00402637 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402630(U)
|
:0040263A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040263D 81E1FF000000            and ecx, 000000FF
:00402643 83F908                  cmp ecx, 00000008
:00402646 7D22                    jge 0040266A
:00402648 8B55F8                  mov edx, dword ptr [ebp-08]
:0040264B 81E2FF000000            and edx, 000000FF
:00402651 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402654 33C9                    xor ecx, ecx
:00402656 8A4C1036                mov cl, byte ptr [eax+edx+36]
:0040265A 394D08                  cmp dword ptr [ebp+08], ecx
:0040265D 7509                    jne 00402668
:0040265F 8A55FC                  mov dl, byte ptr [ebp-04]
:00402662 80C201                  add dl, 01
:00402665 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040265D(C)
|
:00402668 EBC8                    jmp 00402632

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402646(C)
|
:0040266A 8A45FC                  mov al, byte ptr [ebp-04]
:0040266D 8BE5                    mov esp, ebp
:0040266F 5D                      pop ebp
:00402670 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00431E44   , :00431F75   , :00451FDB   
|
:00402673 55                      push ebp
:00402674 8BEC                    mov ebp, esp
:00402676 83EC14                  sub esp, 00000014
:00402679 894DEC                  mov dword ptr [ebp-14], ecx
:0040267C C645FCFF                mov [ebp-04], FF
:00402680 8B4508                  mov eax, dword ptr [ebp+08]
:00402683 50                      push eax
:00402684 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402687 E893FFFFFF              call 0040261F
:0040268C 8845F8                  mov byte ptr [ebp-08], al
:0040268F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402692 81E1FF000000            and ecx, 000000FF
:00402698 85C9                    test ecx, ecx
:0040269A 7507                    jne 004026A3
:0040269C 0CFF                    or al, FF
:0040269E E9A2000000              jmp 00402745

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040269A(C)
|
:004026A3 8B55F8                  mov edx, dword ptr [ebp-08]
:004026A6 81E2FF000000            and edx, 000000FF
:004026AC 83FA01                  cmp edx, 00000001
:004026AF 753F                    jne 004026F0
:004026B1 C645F400                mov [ebp-0C], 00
:004026B5 EB08                    jmp 004026BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004026EC(U)
|
:004026B7 8A45F4                  mov al, byte ptr [ebp-0C]
:004026BA 0401                    add al, 01
:004026BC 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004026B5(U)
|
:004026BF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004026C2 81E1FF000000            and ecx, 000000FF
:004026C8 83F908                  cmp ecx, 00000008
:004026CB 7D21                    jge 004026EE
:004026CD 8B55F4                  mov edx, dword ptr [ebp-0C]
:004026D0 81E2FF000000            and edx, 000000FF
:004026D6 8B45EC                  mov eax, dword ptr [ebp-14]
:004026D9 33C9                    xor ecx, ecx
:004026DB 8A4C1036                mov cl, byte ptr [eax+edx+36]
:004026DF 394D08                  cmp dword ptr [ebp+08], ecx
:004026E2 7508                    jne 004026EC
:004026E4 8A55F4                  mov dl, byte ptr [ebp-0C]
:004026E7 8855FC                  mov byte ptr [ebp-04], dl
:004026EA EB02                    jmp 004026EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004026E2(C)
|
:004026EC EBC9                    jmp 004026B7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004026CB(C), :004026EA(U)
|
:004026EE EB52                    jmp 00402742

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004026AF(C)
|
:004026F0 C645F000                mov [ebp-10], 00
:004026F4 EB08                    jmp 004026FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402740(U)
|
:004026F6 8A45F0                  mov al, byte ptr [ebp-10]
:004026F9 0401                    add al, 01
:004026FB 8845F0                  mov byte ptr [ebp-10], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004026F4(U)
|
:004026FE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00402701 81E1FF000000            and ecx, 000000FF
:00402707 83F908                  cmp ecx, 00000008
:0040270A 7D36                    jge 00402742
:0040270C 8B55F0                  mov edx, dword ptr [ebp-10]
:0040270F 81E2FF000000            and edx, 000000FF
:00402715 8B45EC                  mov eax, dword ptr [ebp-14]
:00402718 33C9                    xor ecx, ecx
:0040271A 8A4C1036                mov cl, byte ptr [eax+edx+36]
:0040271E 394D08                  cmp dword ptr [ebp+08], ecx
:00402721 751D                    jne 00402740
:00402723 8B55F0                  mov edx, dword ptr [ebp-10]
:00402726 81E2FF000000            and edx, 000000FF
:0040272C 8B45EC                  mov eax, dword ptr [ebp-14]
:0040272F 33C9                    xor ecx, ecx
:00402731 8A4835                  mov cl, byte ptr [eax+35]
:00402734 3BD1                    cmp edx, ecx
:00402736 7408                    je 00402740
:00402738 8A55F0                  mov dl, byte ptr [ebp-10]
:0040273B 8855FC                  mov byte ptr [ebp-04], dl
:0040273E EB02                    jmp 00402742

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402721(C), :00402736(C)
|
:00402740 EBB4                    jmp 004026F6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004026EE(U), :0040270A(C), :0040273E(U)
|
:00402742 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040269E(U)
|
:00402745 8BE5                    mov esp, ebp
:00402747 5D                      pop ebp
:00402748 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040A82C   , :0040D5D8   , :0041786C   , :0041822F   , :0041F00A   
|:00430109   , :00433371   , :00439DEA   , :00449EA8   , :0044D94B   
|:00465AE4   
|
:0040274B 55                      push ebp
:0040274C 8BEC                    mov ebp, esp
:0040274E 83EC08                  sub esp, 00000008
:00402751 894DF8                  mov dword ptr [ebp-08], ecx
:00402754 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402757 E894200000              call 004047F0
:0040275C 25FF000000              and eax, 000000FF
:00402761 8945FC                  mov dword ptr [ebp-04], eax
:00402764 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0040276B 7414                    je 00402781
:0040276D 8A45FC                  mov al, byte ptr [ebp-04]
:00402770 50                      push eax
:00402771 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402774 E897200000              call 00404810
:00402779 25FF000000              and eax, 000000FF
:0040277E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040276B(C)
|
:00402781 8B45FC                  mov eax, dword ptr [ebp-04]
:00402784 8BE5                    mov esp, ebp
:00402786 5D                      pop ebp
:00402787 C3                      ret


:00402788 55                      push ebp
:00402789 8BEC                    mov ebp, esp
:0040278B 83EC0C                  sub esp, 0000000C
:0040278E 894DF4                  mov dword ptr [ebp-0C], ecx
:00402791 C645FC00                mov [ebp-04], 00
:00402795 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402798 E853200000              call 004047F0
:0040279D 8845F8                  mov byte ptr [ebp-08], al
:004027A0 8B45F8                  mov eax, dword ptr [ebp-08]
:004027A3 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004027A8 3DFF000000              cmp eax, 000000FF
:004027AD 7425                    je 004027D4
:004027AF 8A4DF8                  mov cl, byte ptr [ebp-08]
:004027B2 51                      push ecx
:004027B3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004027B6 E855200000              call 00404810
:004027BB 8AC8                    mov cl, al
:004027BD 81E1FF000000            and ecx, 000000FF
:004027C3 6BC933                  imul ecx, 00000033
:004027C6 81C1C8EF4800            add ecx, 0048EFC8
:004027CC E85F1F0000              call 00404730
:004027D1 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004027AD(C)
|
:004027D4 8A45FC                  mov al, byte ptr [ebp-04]
:004027D7 8BE5                    mov esp, ebp
:004027D9 5D                      pop ebp
:004027DA C3                      ret



* Referenced by a CALL at Addresses:
|:00403DB0   , :0042AC27   , :0042B07E   , :0042FD65   
|
:004027DB 55                      push ebp
:004027DC 8BEC                    mov ebp, esp
:004027DE 83EC0C                  sub esp, 0000000C
:004027E1 894DF4                  mov dword ptr [ebp-0C], ecx
:004027E4 C645FCFF                mov [ebp-04], FF
:004027E8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004027EB E800200000              call 004047F0
:004027F0 8845F8                  mov byte ptr [ebp-08], al
:004027F3 8B45F8                  mov eax, dword ptr [ebp-08]
:004027F6 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004027FB 3DFF000000              cmp eax, 000000FF
:00402800 7425                    je 00402827
:00402802 8A4DF8                  mov cl, byte ptr [ebp-08]
:00402805 51                      push ecx
:00402806 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402809 E802200000              call 00404810
:0040280E 8AC8                    mov cl, al
:00402810 81E1FF000000            and ecx, 000000FF
:00402816 6BC933                  imul ecx, 00000033
:00402819 81C1C8EF4800            add ecx, 0048EFC8
:0040281F E877300000              call 0040589B
:00402824 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402800(C)
|
:00402827 8A45FC                  mov al, byte ptr [ebp-04]
:0040282A 8BE5                    mov esp, ebp
:0040282C 5D                      pop ebp
:0040282D C3                      ret



* Referenced by a CALL at Address:
|:0042AB86   
|
:0040282E 55                      push ebp
:0040282F 8BEC                    mov ebp, esp
:00402831 83EC0C                  sub esp, 0000000C
:00402834 894DF4                  mov dword ptr [ebp-0C], ecx
:00402837 C645FC00                mov [ebp-04], 00
:0040283B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040283E E8AD1F0000              call 004047F0
:00402843 8845F8                  mov byte ptr [ebp-08], al
:00402846 8B45F8                  mov eax, dword ptr [ebp-08]
:00402849 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040284E 3DFF000000              cmp eax, 000000FF
:00402853 7425                    je 0040287A
:00402855 8A4DF8                  mov cl, byte ptr [ebp-08]
:00402858 51                      push ecx
:00402859 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040285C E8AF1F0000              call 00404810
:00402861 8AC8                    mov cl, al
:00402863 81E1FF000000            and ecx, 000000FF
:00402869 6BC933                  imul ecx, 00000033
:0040286C 81C1C8EF4800            add ecx, 0048EFC8
:00402872 E8191F0000              call 00404790
:00402877 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402853(C)
|
:0040287A 8A45FC                  mov al, byte ptr [ebp-04]
:0040287D 8BE5                    mov esp, ebp
:0040287F 5D                      pop ebp
:00402880 C3                      ret



* Referenced by a CALL at Addresses:
|:0042ABA4   , :00448FD2   
|
:00402881 55                      push ebp
:00402882 8BEC                    mov ebp, esp
:00402884 83EC0C                  sub esp, 0000000C
:00402887 894DF4                  mov dword ptr [ebp-0C], ecx
:0040288A C645FC00                mov [ebp-04], 00
:0040288E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402891 E85A1F0000              call 004047F0
:00402896 8845F8                  mov byte ptr [ebp-08], al
:00402899 8B45F8                  mov eax, dword ptr [ebp-08]
:0040289C 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004028A1 3DFF000000              cmp eax, 000000FF
:004028A6 7425                    je 004028CD
:004028A8 8A4DF8                  mov cl, byte ptr [ebp-08]
:004028AB 51                      push ecx
:004028AC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004028AF E85C1F0000              call 00404810
:004028B4 8AC8                    mov cl, al
:004028B6 81E1FF000000            and ecx, 000000FF
:004028BC 6BC933                  imul ecx, 00000033
:004028BF 81C1C8EF4800            add ecx, 0048EFC8
:004028C5 E886D70100              call 00420050
:004028CA 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004028A6(C)
|
:004028CD 8A45FC                  mov al, byte ptr [ebp-04]
:004028D0 8BE5                    mov esp, ebp
:004028D2 5D                      pop ebp
:004028D3 C3                      ret



* Referenced by a CALL at Address:
|:0042A542   
|
:004028D4 55                      push ebp
:004028D5 8BEC                    mov ebp, esp
:004028D7 83EC08                  sub esp, 00000008
:004028DA 894DF8                  mov dword ptr [ebp-08], ecx
:004028DD 8B45F8                  mov eax, dword ptr [ebp-08]
:004028E0 33C9                    xor ecx, ecx
:004028E2 8A4832                  mov cl, byte ptr [eax+32]
:004028E5 6BC927                  imul ecx, 00000027
:004028E8 81C1C83C4A00            add ecx, 004A3CC8
:004028EE E8DDCF0200              call 0042F8D0
:004028F3 8845FC                  mov byte ptr [ebp-04], al

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004028F6 68FF000000              push 000000FF
:004028FB 6A00                    push 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004028FD 6A07                    push 00000007
:004028FF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402902 E84AF9FFFF              call 00402251
:00402907 50                      push eax
:00402908 8A55FC                  mov dl, byte ptr [ebp-04]
:0040290B 52                      push edx
:0040290C E8D8F60500              call 00461FE9
:00402911 83C40C                  add esp, 0000000C
:00402914 8BE5                    mov esp, ebp
:00402916 5D                      pop ebp
:00402917 C3                      ret



* Referenced by a CALL at Address:
|:00402C65   
|
:00402918 55                      push ebp
:00402919 8BEC                    mov ebp, esp
:0040291B 51                      push ecx
:0040291C 894DFC                  mov dword ptr [ebp-04], ecx
:0040291F 6A00                    push 00000000

* Possible Reference to String Resource ID=00008: ""
                                  |
:00402921 6A08                    push 00000008
:00402923 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402926 E826F9FFFF              call 00402251
:0040292B 8BE5                    mov esp, ebp
:0040292D 5D                      pop ebp
:0040292E C3                      ret



* Referenced by a CALL at Address:
|:0043232A   
|
:0040292F 55                      push ebp
:00402930 8BEC                    mov ebp, esp
:00402932 83EC08                  sub esp, 00000008
:00402935 894DF8                  mov dword ptr [ebp-08], ecx
:00402938 C645FC00                mov [ebp-04], 00
:0040293C EB08                    jmp 00402946

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402970(U)
|
:0040293E 8A45FC                  mov al, byte ptr [ebp-04]
:00402941 0401                    add al, 01
:00402943 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040293C(U)
|
:00402946 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402949 81E1FF000000            and ecx, 000000FF
:0040294F 83F908                  cmp ecx, 00000008
:00402952 7D1E                    jge 00402972
:00402954 8B55FC                  mov edx, dword ptr [ebp-04]
:00402957 81E2FF000000            and edx, 000000FF
:0040295D 8B45F8                  mov eax, dword ptr [ebp-08]
:00402960 33C9                    xor ecx, ecx
:00402962 8A4C1036                mov cl, byte ptr [eax+edx+36]
:00402966 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00402969 7505                    jne 00402970
:0040296B 8A45FC                  mov al, byte ptr [ebp-04]
:0040296E EB04                    jmp 00402974

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402969(C)
|
:00402970 EBCC                    jmp 0040293E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402952(C)
|
:00402972 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040296E(U)
|
:00402974 8BE5                    mov esp, ebp
:00402976 5D                      pop ebp
:00402977 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00432094   
|
:0040297A 55                      push ebp
:0040297B 8BEC                    mov ebp, esp
:0040297D 83EC08                  sub esp, 00000008
:00402980 894DF8                  mov dword ptr [ebp-08], ecx
:00402983 C745FC00000000          mov [ebp-04], 00000000
:0040298A EB09                    jmp 00402995

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029C2(U)
|
:0040298C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040298F 83C001                  add eax, 00000001
:00402992 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040298A(U)
|
:00402995 837DFC08                cmp dword ptr [ebp-04], 00000008
:00402999 7329                    jnb 004029C4
:0040299B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040299E 034DFC                  add ecx, dword ptr [ebp-04]
:004029A1 33D2                    xor edx, edx
:004029A3 8A5136                  mov dl, byte ptr [ecx+36]
:004029A6 3B5508                  cmp edx, dword ptr [ebp+08]
:004029A9 7517                    jne 004029C2
:004029AB 8A450C                  mov al, byte ptr [ebp+0C]
:004029AE 50                      push eax
:004029AF 8A4DFC                  mov cl, byte ptr [ebp-04]
:004029B2 51                      push ecx
:004029B3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004029B6 E8751E0000              call 00404830
:004029BB B801000000              mov eax, 00000001
:004029C0 EB04                    jmp 004029C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029A9(C)
|
:004029C2 EBC8                    jmp 0040298C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402999(C)
|
:004029C4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029C0(U)
|
:004029C6 8BE5                    mov esp, ebp
:004029C8 5D                      pop ebp
:004029C9 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00402A21   , :0041DC5F   , :004312E8   , :00431D5B   
|
:004029CC 55                      push ebp
:004029CD 8BEC                    mov ebp, esp
:004029CF 83EC0C                  sub esp, 0000000C
:004029D2 894DF4                  mov dword ptr [ebp-0C], ecx
:004029D5 C745FC00000000          mov [ebp-04], 00000000
:004029DC 8B45FC                  mov eax, dword ptr [ebp-04]
:004029DF 8945F8                  mov dword ptr [ebp-08], eax
:004029E2 EB09                    jmp 004029ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A0E(U)
|
:004029E4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004029E7 83C101                  add ecx, 00000001
:004029EA 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029E2(U)
|
:004029ED 837DF808                cmp dword ptr [ebp-08], 00000008
:004029F1 731D                    jnb 00402A10
:004029F3 8B55F4                  mov edx, dword ptr [ebp-0C]
:004029F6 0355F8                  add edx, dword ptr [ebp-08]
:004029F9 33C0                    xor eax, eax
:004029FB 8A4236                  mov al, byte ptr [edx+36]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004029FE 3DFF000000              cmp eax, 000000FF
:00402A03 7409                    je 00402A0E
:00402A05 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402A08 83C101                  add ecx, 00000001
:00402A0B 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A03(C)
|
:00402A0E EBD4                    jmp 004029E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029F1(C)
|
:00402A10 8A45FC                  mov al, byte ptr [ebp-04]
:00402A13 8BE5                    mov esp, ebp
:00402A15 5D                      pop ebp
:00402A16 C3                      ret



* Referenced by a CALL at Addresses:
|:00402AC1   , :00431F56   
|
:00402A17 55                      push ebp
:00402A18 8BEC                    mov ebp, esp
:00402A1A 51                      push ecx
:00402A1B 894DFC                  mov dword ptr [ebp-04], ecx
:00402A1E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402A21 E8A6FFFFFF              call 004029CC
:00402A26 25FF000000              and eax, 000000FF
:00402A2B 33C9                    xor ecx, ecx
:00402A2D 83F808                  cmp eax, 00000008
:00402A30 0F95C1                  setne cl
:00402A33 8BC1                    mov eax, ecx
:00402A35 8BE5                    mov esp, ebp
:00402A37 5D                      pop ebp
:00402A38 C3                      ret



* Referenced by a CALL at Addresses:
|:00402AE4   , :0042C0B1   , :00431F8D   , :00455711   , :00455735   
|:0045595E   , :00455982   
|
:00402A39 55                      push ebp
:00402A3A 8BEC                    mov ebp, esp
:00402A3C 83EC08                  sub esp, 00000008
:00402A3F 894DF8                  mov dword ptr [ebp-08], ecx
:00402A42 C745FC00000000          mov [ebp-04], 00000000
:00402A49 EB09                    jmp 00402A54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A7F(U)
|
:00402A4B 8B45FC                  mov eax, dword ptr [ebp-04]
:00402A4E 83C001                  add eax, 00000001
:00402A51 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A49(U)
|
:00402A54 837DFC08                cmp dword ptr [ebp-04], 00000008
:00402A58 7327                    jnb 00402A81
:00402A5A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402A5D 034DFC                  add ecx, dword ptr [ebp-04]
:00402A60 33D2                    xor edx, edx
:00402A62 8A5136                  mov dl, byte ptr [ecx+36]
:00402A65 81FAFF000000            cmp edx, 000000FF
:00402A6B 7512                    jne 00402A7F
:00402A6D 8A4508                  mov al, byte ptr [ebp+08]
:00402A70 50                      push eax
:00402A71 8A4DFC                  mov cl, byte ptr [ebp-04]
:00402A74 51                      push ecx
:00402A75 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402A78 E8B31D0000              call 00404830
:00402A7D EB02                    jmp 00402A81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A6B(C)
|
:00402A7F EBCA                    jmp 00402A4B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402A58(C), :00402A7D(U)
|
:00402A81 8B45FC                  mov eax, dword ptr [ebp-04]
:00402A84 8BE5                    mov esp, ebp
:00402A86 5D                      pop ebp
:00402A87 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040693B   , :0040CF9B   
|
:00402A8A 55                      push ebp
:00402A8B 8BEC                    mov ebp, esp
:00402A8D 83EC78                  sub esp, 00000078
:00402A90 894D8C                  mov dword ptr [ebp-74], ecx
:00402A93 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:00402A9A 7207                    jb 00402AA3
:00402A9C 33C0                    xor eax, eax
:00402A9E E95F010000              jmp 00402C02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A9A(C)
|
:00402AA3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402AA6 6BC933                  imul ecx, 00000033
:00402AA9 81C1C8EF4800            add ecx, 0048EFC8
:00402AAF E8FC4C0000              call 004077B0
:00402AB4 8945FC                  mov dword ptr [ebp-04], eax
:00402AB7 C7459400000000          mov [ebp-6C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402BFD(U)
|
:00402ABE 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00402AC1 E851FFFFFF              call 00402A17
:00402AC6 85C0                    test eax, eax
:00402AC8 7429                    je 00402AF3
:00402ACA 8B45FC                  mov eax, dword ptr [ebp-04]
:00402ACD 50                      push eax

* Possible StringData Ref from Data Obj ->"oF%sI"
                                  |
:00402ACE 6830614700              push 00476130
:00402AD3 6A00                    push 00000000
:00402AD5 E892600200              call 00428B6C
:00402ADA 83C40C                  add esp, 0000000C
:00402ADD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402AE0 51                      push ecx
:00402AE1 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00402AE4 E850FFFFFF              call 00402A39
:00402AE9 B801000000              mov eax, 00000001
:00402AEE E90F010000              jmp 00402C02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402AC8(C)
|
:00402AF3 B9C8E24A00              mov ecx, 004AE2C8
:00402AF8 E8773D0000              call 00406874
:00402AFD 85C0                    test eax, eax
:00402AFF 745A                    je 00402B5B
:00402B01 C7459401000000          mov [ebp-6C], 00000001
:00402B08 8B55FC                  mov edx, dword ptr [ebp-04]
:00402B0B 52                      push edx

* Possible StringData Ref from Data Obj ->"aF躡FAN%sJܮwܡH"
                                  |
:00402B0C 683C614700              push 0047613C
:00402B11 8D4598                  lea eax, dword ptr [ebp-68]
:00402B14 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402B15 FF1500874B00            Call dword ptr [004B8700]
:00402B1B 83C40C                  add esp, 0000000C
:00402B1E 6A00                    push 00000000
:00402B20 8D4D98                  lea ecx, dword ptr [ebp-68]
:00402B23 51                      push ecx
:00402B24 E8070B0600              call 00463630
:00402B29 83C408                  add esp, 00000008
:00402B2C 85C0                    test eax, eax
:00402B2E 742B                    je 00402B5B
:00402B30 8B55FC                  mov edx, dword ptr [ebp-04]
:00402B33 52                      push edx

* Possible StringData Ref from Data Obj ->"N%sJFܮw"
                                  |
:00402B34 685C614700              push 0047615C
:00402B39 6A00                    push 00000000
:00402B3B E82C600200              call 00428B6C
:00402B40 83C40C                  add esp, 0000000C
:00402B43 8B4508                  mov eax, dword ptr [ebp+08]
:00402B46 50                      push eax
:00402B47 B9C8E24A00              mov ecx, 004AE2C8
:00402B4C E8473D0000              call 00406898
:00402B51 B801000000              mov eax, 00000001
:00402B56 E9A7000000              jmp 00402C02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402AFF(C), :00402B2E(C)
|
:00402B5B 837D9400                cmp dword ptr [ebp-6C], 00000000
:00402B5F 7409                    je 00402B6A

* Possible StringData Ref from Data Obj ->"ND㲾ʨܮwܡH"
                                  |
:00402B61 C745886C614700          mov [ebp-78], 0047616C
:00402B68 EB07                    jmp 00402B71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402B5F(C)
|

* Possible StringData Ref from Data Obj ->"ʭܮw̪DܡH"
                                  |
:00402B6A C7458884614700          mov [ebp-78], 00476184

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402B68(U)
|
:00402B71 8B4D88                  mov ecx, dword ptr [ebp-78]
:00402B74 51                      push ecx
:00402B75 8B55FC                  mov edx, dword ptr [ebp-04]
:00402B78 52                      push edx

* Possible StringData Ref from Data Obj ->"Sa%sC%s"
                                  |
:00402B79 689C614700              push 0047619C
:00402B7E 8D4598                  lea eax, dword ptr [ebp-68]
:00402B81 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402B82 FF1500874B00            Call dword ptr [004B8700]
:00402B88 83C410                  add esp, 00000010
:00402B8B 6A00                    push 00000000
:00402B8D 8D4D98                  lea ecx, dword ptr [ebp-68]
:00402B90 51                      push ecx
:00402B91 E89A0A0600              call 00463630
:00402B96 83C408                  add esp, 00000008
:00402B99 85C0                    test eax, eax
:00402B9B 7421                    je 00402BBE
:00402B9D 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00402BA0 E86B1B0000              call 00404710
:00402BA5 50                      push eax
:00402BA6 E808410000              call 00406CB3
:00402BAB 83C404                  add esp, 00000004
:00402BAE 894590                  mov dword ptr [ebp-70], eax
:00402BB1 837D9000                cmp dword ptr [ebp-70], 00000000
:00402BB5 7405                    je 00402BBC
:00402BB7 E8E4010500              call 00452DA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402BB5(C)
|
:00402BBC EB3F                    jmp 00402BFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402B9B(C)
|
:00402BBE 8B55FC                  mov edx, dword ptr [ebp-04]
:00402BC1 52                      push edx

* Possible StringData Ref from Data Obj ->"˱%sܡH"
                                  |
:00402BC2 68AC614700              push 004761AC
:00402BC7 8D4598                  lea eax, dword ptr [ebp-68]
:00402BCA 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402BCB FF1500874B00            Call dword ptr [004B8700]
:00402BD1 83C40C                  add esp, 0000000C
:00402BD4 6A00                    push 00000000
:00402BD6 8D4D98                  lea ecx, dword ptr [ebp-68]
:00402BD9 51                      push ecx
:00402BDA E8510A0600              call 00463630
:00402BDF 83C408                  add esp, 00000008
:00402BE2 85C0                    test eax, eax
:00402BE4 7417                    je 00402BFD
:00402BE6 8B55FC                  mov edx, dword ptr [ebp-04]
:00402BE9 52                      push edx

* Possible StringData Ref from Data Obj ->"˱F%sC"
                                  |
:00402BEA 68B8614700              push 004761B8
:00402BEF 6A00                    push 00000000
:00402BF1 E8765F0200              call 00428B6C
:00402BF6 83C40C                  add esp, 0000000C
:00402BF9 33C0                    xor eax, eax
:00402BFB EB05                    jmp 00402C02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402BBC(U), :00402BE4(C)
|
:00402BFD E9BCFEFFFF              jmp 00402ABE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402A9E(U), :00402AEE(U), :00402B56(U), :00402BFB(U)
|
:00402C02 8BE5                    mov esp, ebp
:00402C04 5D                      pop ebp
:00402C05 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043595C   , :004360A9   , :0043637D   , :004366D8   , :00436A62   
|:00436CF7   , :00436FD7   , :004372B5   , :0043781E   , :00437AC1   
|:00437D2B   , :00437EAD   , :0043802F   , :0043842B   , :0043881B   
|:004389CD   , :00438C83   , :00438E0D   , :0043C57C   
|
:00402C08 55                      push ebp
:00402C09 8BEC                    mov ebp, esp
:00402C0B 81EC88020000            sub esp, 00000288
:00402C11 898D78FDFFFF            mov dword ptr [ebp+FFFFFD78], ecx
:00402C17 C785ACFDFFFF00000000    mov dword ptr [ebp+FFFFFDAC], 00000000
:00402C21 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402C27 E8E41A0000              call 00404710
:00402C2C 8985A0FDFFFF            mov dword ptr [ebp+FFFFFDA0], eax
:00402C32 81BDA0FDFFFFC8000000    cmp dword ptr [ebp+FFFFFDA0], 000000C8
:00402C3C 7710                    ja 00402C4E
:00402C3E 8B8578FDFFFF            mov eax, dword ptr [ebp+FFFFFD78]
:00402C44 33C9                    xor ecx, ecx
:00402C46 8A4833                  mov cl, byte ptr [eax+33]
:00402C49 83F963                  cmp ecx, 00000063
:00402C4C 720B                    jb 00402C59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C3C(C)
|
:00402C4E 8B85ACFDFFFF            mov eax, dword ptr [ebp+FFFFFDAC]
:00402C54 E9C1030000              jmp 0040301A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C4C(C)
|
:00402C59 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00402C5D 7418                    je 00402C77
:00402C5F 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402C65 E8AEFCFFFF              call 00402918
:00402C6A 25FF000000              and eax, 000000FF
:00402C6F 8B5508                  mov edx, dword ptr [ebp+08]
:00402C72 03D0                    add edx, eax
:00402C74 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C5D(C)
|
:00402C77 EB09                    jmp 00402C82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402FEF(U)
|
:00402C79 8B4508                  mov eax, dword ptr [ebp+08]
:00402C7C 83E864                  sub eax, 00000064
:00402C7F 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C77(U)
|
:00402C82 837D0864                cmp dword ptr [ebp+08], 00000064
:00402C86 0F8268030000            jb 00402FF4
:00402C8C C785A8FDFFFF00000000    mov dword ptr [ebp+FFFFFDA8], 00000000
:00402C96 EB0F                    jmp 00402CA7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402CCF(U)
|
:00402C98 8B8DA8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDA8]
:00402C9E 83C101                  add ecx, 00000001
:00402CA1 898DA8FDFFFF            mov dword ptr [ebp+FFFFFDA8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C96(U)
|
:00402CA7 83BDA8FDFFFF08          cmp dword ptr [ebp+FFFFFDA8], 00000008
:00402CAE 7321                    jnb 00402CD1
:00402CB0 8B95A8FDFFFF            mov edx, dword ptr [ebp+FFFFFDA8]
:00402CB6 52                      push edx
:00402CB7 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402CBD E870E7FFFF              call 00401432
:00402CC2 8B8DA8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDA8]
:00402CC8 89848D80FDFFFF          mov dword ptr [ebp+4*ecx-00000280], eax
:00402CCF EBC7                    jmp 00402C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402CAE(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402CD1 6A05                    push 00000005
:00402CD3 B9800D4B00              mov ecx, 004B0D80
:00402CD8 E8CCEE0500              call 00461BA9
:00402CDD 6A01                    push 00000001
:00402CDF 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402CE5 E8D5F3FFFF              call 004020BF
:00402CEA 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00402CEE 0F84FB020000            je 00402FEF
:00402CF4 C68514FEFFFF00          mov byte ptr [ebp+FFFFFE14], 00
:00402CFB 8B9578FDFFFF            mov edx, dword ptr [ebp+FFFFFD78]
:00402D01 33C0                    xor eax, eax
:00402D03 8A4233                  mov al, byte ptr [edx+33]
:00402D06 50                      push eax
:00402D07 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402D0D 83C10C                  add ecx, 0000000C
:00402D10 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sŹF%uFI

"
                                  |
:00402D11 6810624700              push 00476210
:00402D16 8D95B0FDFFFF            lea edx, dword ptr [ebp+FFFFFDB0]
:00402D1C 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402D1D FF1500874B00            Call dword ptr [004B8700]
:00402D23 83C410                  add esp, 00000010
:00402D26 8D85B0FDFFFF            lea eax, dword ptr [ebp+FFFFFDB0]
:00402D2C 50                      push eax
:00402D2D 8D8D14FEFFFF            lea ecx, dword ptr [ebp+FFFFFE14]
:00402D33 51                      push ecx
:00402D34 E8A6F80500              call 004625DF
:00402D39 83C408                  add esp, 00000008
:00402D3C C785A8FDFFFF00000000    mov dword ptr [ebp+FFFFFDA8], 00000000
:00402D46 EB0F                    jmp 00402D57

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E14(U)
|
:00402D48 8B95A8FDFFFF            mov edx, dword ptr [ebp+FFFFFDA8]
:00402D4E 83C201                  add edx, 00000001
:00402D51 8995A8FDFFFF            mov dword ptr [ebp+FFFFFDA8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402D46(U)
|
:00402D57 83BDA8FDFFFF08          cmp dword ptr [ebp+FFFFFDA8], 00000008
:00402D5E 0F83B5000000            jnb 00402E19
:00402D64 83BDA8FDFFFF04          cmp dword ptr [ebp+FFFFFDA8], 00000004
:00402D6B 7409                    je 00402D76
:00402D6D 83BDA8FDFFFF05          cmp dword ptr [ebp+FFFFFDA8], 00000005
:00402D74 7545                    jne 00402DBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402D6B(C)
|
:00402D76 8B85A8FDFFFF            mov eax, dword ptr [ebp+FFFFFDA8]
:00402D7C 50                      push eax
:00402D7D 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402D83 E8AAE6FFFF              call 00401432
:00402D88 8B8DA8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDA8]
:00402D8E 2B848D80FDFFFF          sub eax, dword ptr [ebp+4*ecx-00000280]
:00402D95 50                      push eax
:00402D96 8B95A8FDFFFF            mov edx, dword ptr [ebp+FFFFFDA8]
:00402D9C 8B0495287C4700          mov eax, dword ptr [4*edx+00477C28]
:00402DA3 50                      push eax

* Possible StringData Ref from Data Obj ->"%sW[F%2uC
"
                                  |
:00402DA4 6824624700              push 00476224
:00402DA9 8D8DB0FDFFFF            lea ecx, dword ptr [ebp+FFFFFDB0]
:00402DAF 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402DB0 FF1500874B00            Call dword ptr [004B8700]
:00402DB6 83C410                  add esp, 00000010
:00402DB9 EB43                    jmp 00402DFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402D74(C)
|
:00402DBB 8B95A8FDFFFF            mov edx, dword ptr [ebp+FFFFFDA8]
:00402DC1 52                      push edx
:00402DC2 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402DC8 E865E6FFFF              call 00401432
:00402DCD 8B8DA8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDA8]
:00402DD3 2B848D80FDFFFF          sub eax, dword ptr [ebp+4*ecx-00000280]
:00402DDA 50                      push eax
:00402DDB 8B95A8FDFFFF            mov edx, dword ptr [ebp+FFFFFDA8]
:00402DE1 8B0495287C4700          mov eax, dword ptr [4*edx+00477C28]
:00402DE8 50                      push eax

* Possible StringData Ref from Data Obj ->"%s  W[F%2uC
"
                                  |
:00402DE9 6834624700              push 00476234
:00402DEE 8D8DB0FDFFFF            lea ecx, dword ptr [ebp+FFFFFDB0]
:00402DF4 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402DF5 FF1500874B00            Call dword ptr [004B8700]
:00402DFB 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DB9(U)
|
:00402DFE 8D95B0FDFFFF            lea edx, dword ptr [ebp+FFFFFDB0]
:00402E04 52                      push edx
:00402E05 8D8514FEFFFF            lea eax, dword ptr [ebp+FFFFFE14]
:00402E0B 50                      push eax
:00402E0C E80DF80500              call 0046261E
:00402E11 83C408                  add esp, 00000008
:00402E14 E92FFFFFFF              jmp 00402D48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402D5E(C)
|
:00402E19 8D8D14FEFFFF            lea ecx, dword ptr [ebp+FFFFFE14]
:00402E1F 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402E20 6A05                    push 00000005
:00402E22 E8455D0200              call 00428B6C
:00402E27 83C408                  add esp, 00000008
:00402E2A 6A01                    push 00000001
:00402E2C 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402E32 E82E0F0000              call 00403D65
:00402E37 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402E3D E83D0E0000              call 00403C7F
:00402E42 89857CFDFFFF            mov dword ptr [ebp+FFFFFD7C], eax
:00402E48 83BD7CFDFFFF00          cmp dword ptr [ebp+FFFFFD7C], 00000000
:00402E4F 0F849A010000            je 00402FEF
:00402E55 C68514FEFFFF00          mov byte ptr [ebp+FFFFFE14], 00
:00402E5C C785A4FDFFFF00000000    mov dword ptr [ebp+FFFFFDA4], 00000000
:00402E66 EB0F                    jmp 00402E77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402EE6(U)
|
:00402E68 8B95A4FDFFFF            mov edx, dword ptr [ebp+FFFFFDA4]
:00402E6E 83C201                  add edx, 00000001
:00402E71 8995A4FDFFFF            mov dword ptr [ebp+FFFFFDA4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E66(U)
|
:00402E77 83BDA4FDFFFF20          cmp dword ptr [ebp+FFFFFDA4], 00000020
:00402E7E 7368                    jnb 00402EE8
:00402E80 8A85A4FDFFFF            mov al, byte ptr [ebp+FFFFFDA4]
:00402E86 50                      push eax
:00402E87 8B8D7CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD7C]
:00402E8D E8DE150000              call 00404470
:00402E92 25FF000000              and eax, 000000FF
:00402E97 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402E9D 33D2                    xor edx, edx
:00402E9F 8A5133                  mov dl, byte ptr [ecx+33]
:00402EA2 3BC2                    cmp eax, edx
:00402EA4 7540                    jne 00402EE6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402EA6 6A05                    push 00000005
:00402EA8 B9800D4B00              mov ecx, 004B0D80
:00402EAD E8F7EC0500              call 00461BA9
:00402EB2 8B85A4FDFFFF            mov eax, dword ptr [ebp+FFFFFDA4]
:00402EB8 8B0C85507C4700          mov ecx, dword ptr [4*eax+00477C50]
:00402EBF 51                      push ecx

* Possible StringData Ref from Data Obj ->"Ƿ|FSʡu%svI"
                                  |
:00402EC0 6848624700              push 00476248
:00402EC5 8D9514FEFFFF            lea edx, dword ptr [ebp+FFFFFE14]
:00402ECB 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402ECC FF1500874B00            Call dword ptr [004B8700]
:00402ED2 83C40C                  add esp, 0000000C
:00402ED5 8D8514FEFFFF            lea eax, dword ptr [ebp+FFFFFE14]
:00402EDB 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402EDC 6A05                    push 00000005
:00402EDE E8895C0200              call 00428B6C
:00402EE3 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402EA4(C)
|
:00402EE6 EB80                    jmp 00402E68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402E7E(C)
|
:00402EE8 C785A4FDFFFF00000000    mov dword ptr [ebp+FFFFFDA4], 00000000
:00402EF2 8B8DA4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDA4]
:00402EF8 898DA8FDFFFF            mov dword ptr [ebp+FFFFFDA8], ecx
:00402EFE EB0F                    jmp 00402F0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402FB0(U)
|
:00402F00 8B95A4FDFFFF            mov edx, dword ptr [ebp+FFFFFDA4]
:00402F06 83C201                  add edx, 00000001
:00402F09 8995A4FDFFFF            mov dword ptr [ebp+FFFFFDA4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402EFE(U)
|
:00402F0F 83BDA4FDFFFF07          cmp dword ptr [ebp+FFFFFDA4], 00000007
:00402F16 0F8399000000            jnb 00402FB5
:00402F1C 8A85A4FDFFFF            mov al, byte ptr [ebp+FFFFFDA4]
:00402F22 50                      push eax
:00402F23 8B8D7CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD7C]
:00402F29 E8E5140000              call 00404413
:00402F2E 25FF000000              and eax, 000000FF
:00402F33 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402F39 33D2                    xor edx, edx
:00402F3B 8A5133                  mov dl, byte ptr [ecx+33]
:00402F3E 3BC2                    cmp eax, edx
:00402F40 756E                    jne 00402FB0
:00402F42 83BDA8FDFFFF00          cmp dword ptr [ebp+FFFFFDA8], 00000000
:00402F49 7525                    jne 00402F70
:00402F4B 8B85A4FDFFFF            mov eax, dword ptr [ebp+FFFFFDA4]
:00402F51 8B0C85C8614700          mov ecx, dword ptr [4*eax+004761C8]
:00402F58 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00402F59 685C624700              push 0047625C
:00402F5E 8D9514FEFFFF            lea edx, dword ptr [ebp+FFFFFE14]
:00402F64 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402F65 FF1500874B00            Call dword ptr [004B8700]
:00402F6B 83C40C                  add esp, 0000000C
:00402F6E EB31                    jmp 00402FA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402F49(C)
|

* Possible StringData Ref from Data Obj ->"N"
                                  |
:00402F70 6860624700              push 00476260
:00402F75 8D8514FEFFFF            lea eax, dword ptr [ebp+FFFFFE14]
:00402F7B 50                      push eax
:00402F7C E89DF60500              call 0046261E
:00402F81 83C408                  add esp, 00000008
:00402F84 8B8DA4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDA4]
:00402F8A 8B148DC8614700          mov edx, dword ptr [4*ecx+004761C8]
:00402F91 52                      push edx
:00402F92 8D8514FEFFFF            lea eax, dword ptr [ebp+FFFFFE14]
:00402F98 50                      push eax
:00402F99 E880F60500              call 0046261E
:00402F9E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402F6E(U)
|
:00402FA1 8B8DA8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDA8]
:00402FA7 83C101                  add ecx, 00000001
:00402FAA 898DA8FDFFFF            mov dword ptr [ebp+FFFFFDA8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402F40(C)
|
:00402FB0 E94BFFFFFF              jmp 00402F00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402F16(C)
|
:00402FB5 83BDA8FDFFFF00          cmp dword ptr [ebp+FFFFFDA8], 00000000
:00402FBC 7631                    jbe 00402FEF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402FBE 6A05                    push 00000005
:00402FC0 B9800D4B00              mov ecx, 004B0D80
:00402FC5 E8DFEB0500              call 00461BA9

* Possible StringData Ref from Data Obj ->"iH˳ƤFI"
                                  |
:00402FCA 6864624700              push 00476264
:00402FCF 8D9514FEFFFF            lea edx, dword ptr [ebp+FFFFFE14]
:00402FD5 52                      push edx
:00402FD6 E843F60500              call 0046261E
:00402FDB 83C408                  add esp, 00000008
:00402FDE 8D8514FEFFFF            lea eax, dword ptr [ebp+FFFFFE14]
:00402FE4 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402FE5 6A05                    push 00000005
:00402FE7 E8805B0200              call 00428B6C
:00402FEC 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402CEE(C), :00402E4F(C), :00402FBC(C)
|
:00402FEF E985FCFFFF              jmp 00402C79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C86(C)
|
:00402FF4 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00402FFA 8A5508                  mov dl, byte ptr [ebp+08]
:00402FFD 885134                  mov byte ptr [ecx+34], dl
:00403000 8B8D78FDFFFF            mov ecx, dword ptr [ebp+FFFFFD78]
:00403006 E805170000              call 00404710
:0040300B 50                      push eax
:0040300C E83F3F0600              call 00466F50
:00403011 83C404                  add esp, 00000004
:00403014 8B85ACFDFFFF            mov eax, dword ptr [ebp+FFFFFDAC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C54(U)
|
:0040301A 8BE5                    mov esp, ebp
:0040301C 5D                      pop ebp
:0040301D C20800                  ret 0008



* Referenced by a CALL at Address:
|:0042BF8E   
|
:00403020 55                      push ebp
:00403021 8BEC                    mov ebp, esp
:00403023 83EC18                  sub esp, 00000018
:00403026 894DEC                  mov dword ptr [ebp-14], ecx
:00403029 C745F400000000          mov [ebp-0C], 00000000
:00403030 8B45EC                  mov eax, dword ptr [ebp-14]
:00403033 33C9                    xor ecx, ecx
:00403035 8A4833                  mov cl, byte ptr [eax+33]
:00403038 894DF0                  mov dword ptr [ebp-10], ecx
:0040303B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040303E E83C0C0000              call 00403C7F
:00403043 8945F8                  mov dword ptr [ebp-08], eax
:00403046 8B55EC                  mov edx, dword ptr [ebp-14]
:00403049 33C0                    xor eax, eax
:0040304B 8A4232                  mov al, byte ptr [edx+32]
:0040304E 83F816                  cmp eax, 00000016
:00403051 7E55                    jle 004030A8
:00403053 837DF800                cmp dword ptr [ebp-08], 00000000
:00403057 7416                    je 0040306F
:00403059 8A4D08                  mov cl, byte ptr [ebp+08]
:0040305C 51                      push ecx
:0040305D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403060 E851130000              call 004043B6
:00403065 25FF000000              and eax, 000000FF
:0040306A 8945FC                  mov dword ptr [ebp-04], eax
:0040306D EB22                    jmp 00403091

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403057(C)
|
:0040306F 8B5508                  mov edx, dword ptr [ebp+08]
:00403072 52                      push edx
:00403073 8B45EC                  mov eax, dword ptr [ebp-14]
:00403076 33C9                    xor ecx, ecx
:00403078 8A4832                  mov cl, byte ptr [eax+32]
:0040307B 6BC927                  imul ecx, 00000027
:0040307E 81C1C83C4A00            add ecx, 004A3CC8
:00403084 E847160000              call 004046D0
:00403089 25FF000000              and eax, 000000FF
:0040308E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040306D(U)
|
:00403091 8B55F0                  mov edx, dword ptr [ebp-10]
:00403094 0FAF55FC                imul edx, dword ptr [ebp-04]
:00403098 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040309B 03C2                    add eax, edx
:0040309D 8945F4                  mov dword ptr [ebp-0C], eax
:004030A0 8B45F4                  mov eax, dword ptr [ebp-0C]
:004030A3 E9EA000000              jmp 00403192

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403051(C)
|
:004030A8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004030AB 33C0                    xor eax, eax
:004030AD 8A4132                  mov al, byte ptr [ecx+32]
:004030B0 99                      cdq
:004030B1 33C2                    xor eax, edx
:004030B3 2BC2                    sub eax, edx
:004030B5 83E001                  and eax, 00000001
:004030B8 33C2                    xor eax, edx
:004030BA 2BC2                    sub eax, edx
:004030BC 8945E8                  mov dword ptr [ebp-18], eax
:004030BF 837DE800                cmp dword ptr [ebp-18], 00000000
:004030C3 747D                    je 00403142
:004030C5 837DE801                cmp dword ptr [ebp-18], 00000001
:004030C9 7405                    je 004030D0
:004030CB E9BF000000              jmp 0040318F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030C9(C)
|
:004030D0 837DF014                cmp dword ptr [ebp-10], 00000014
:004030D4 7302                    jnb 004030D8
:004030D6 EB6A                    jmp 00403142

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030D4(C)
|
:004030D8 837DF800                cmp dword ptr [ebp-08], 00000000
:004030DC 7416                    je 004030F4
:004030DE 8A5508                  mov dl, byte ptr [ebp+08]
:004030E1 52                      push edx
:004030E2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004030E5 E8CC120000              call 004043B6
:004030EA 25FF000000              and eax, 000000FF
:004030EF 8945FC                  mov dword ptr [ebp-04], eax
:004030F2 EB27                    jmp 0040311B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030DC(C)
|
:004030F4 8B4508                  mov eax, dword ptr [ebp+08]
:004030F7 50                      push eax
:004030F8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004030FB 33D2                    xor edx, edx
:004030FD 8A5132                  mov dl, byte ptr [ecx+32]
:00403100 8BCA                    mov ecx, edx
:00403102 83E901                  sub ecx, 00000001
:00403105 6BC927                  imul ecx, 00000027
:00403108 81C1C83C4A00            add ecx, 004A3CC8
:0040310E E8BD150000              call 004046D0
:00403113 25FF000000              and eax, 000000FF
:00403118 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030F2(U)
|
:0040311B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040311E 6BC014                  imul eax, 00000014
:00403121 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00403124 03C8                    add ecx, eax
:00403126 894DF4                  mov dword ptr [ebp-0C], ecx
:00403129 6A14                    push 00000014
:0040312B 8B55EC                  mov edx, dword ptr [ebp-14]
:0040312E 8A4233                  mov al, byte ptr [edx+33]
:00403131 50                      push eax
:00403132 E801EF0500              call 00462038
:00403137 83C408                  add esp, 00000008
:0040313A 25FF000000              and eax, 000000FF
:0040313F 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004030C3(C), :004030D6(U)
|
:00403142 837DF800                cmp dword ptr [ebp-08], 00000000
:00403146 7416                    je 0040315E
:00403148 8A4D08                  mov cl, byte ptr [ebp+08]
:0040314B 51                      push ecx
:0040314C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040314F E862120000              call 004043B6
:00403154 25FF000000              and eax, 000000FF
:00403159 8945FC                  mov dword ptr [ebp-04], eax
:0040315C EB22                    jmp 00403180

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403146(C)
|
:0040315E 8B5508                  mov edx, dword ptr [ebp+08]
:00403161 52                      push edx
:00403162 8B45EC                  mov eax, dword ptr [ebp-14]
:00403165 33C9                    xor ecx, ecx
:00403167 8A4832                  mov cl, byte ptr [eax+32]
:0040316A 6BC927                  imul ecx, 00000027
:0040316D 81C1C83C4A00            add ecx, 004A3CC8
:00403173 E858150000              call 004046D0
:00403178 25FF000000              and eax, 000000FF
:0040317D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040315C(U)
|
:00403180 8B55F0                  mov edx, dword ptr [ebp-10]
:00403183 0FAF55FC                imul edx, dword ptr [ebp-04]
:00403187 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040318A 03C2                    add eax, edx
:0040318C 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030CB(U)
|
:0040318F 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030A3(U)
|
:00403192 8BE5                    mov esp, ebp
:00403194 5D                      pop ebp
:00403195 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00411B99   , :00411BFD   
|
:00403198 55                      push ebp
:00403199 8BEC                    mov ebp, esp
:0040319B 83EC14                  sub esp, 00000014
:0040319E 894DEC                  mov dword ptr [ebp-14], ecx
:004031A1 8B4508                  mov eax, dword ptr [ebp+08]
:004031A4 80CC10                  or ah, 10
:004031A7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004031AA 668901                  mov word ptr [ecx], ax
:004031AD 8B550C                  mov edx, dword ptr [ebp+0C]
:004031B0 8955FC                  mov dword ptr [ebp-04], edx
:004031B3 8B45EC                  mov eax, dword ptr [ebp-14]
:004031B6 83C00C                  add eax, 0000000C
:004031B9 8945F8                  mov dword ptr [ebp-08], eax
:004031BC C745F000000000          mov [ebp-10], 00000000
:004031C3 EB09                    jmp 004031CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004031F0(U)
|
:004031C5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004031C8 83C101                  add ecx, 00000001
:004031CB 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004031C3(U)
|
:004031CE 837DF00C                cmp dword ptr [ebp-10], 0000000C
:004031D2 731E                    jnb 004031F2
:004031D4 8B55F8                  mov edx, dword ptr [ebp-08]
:004031D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004031DA 8A08                    mov cl, byte ptr [eax]
:004031DC 880A                    mov byte ptr [edx], cl
:004031DE 8B55F8                  mov edx, dword ptr [ebp-08]
:004031E1 83C201                  add edx, 00000001
:004031E4 8955F8                  mov dword ptr [ebp-08], edx
:004031E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004031EA 83C001                  add eax, 00000001
:004031ED 8945FC                  mov dword ptr [ebp-04], eax
:004031F0 EBD3                    jmp 004031C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004031D2(C)
|
:004031F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004031F5 C60100                  mov byte ptr [ecx], 00
:004031F8 8B550C                  mov edx, dword ptr [ebp+0C]
:004031FB 83C20D                  add edx, 0000000D
:004031FE 89550C                  mov dword ptr [ebp+0C], edx
:00403201 8B450C                  mov eax, dword ptr [ebp+0C]
:00403204 8945FC                  mov dword ptr [ebp-04], eax
:00403207 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040320A 83C119                  add ecx, 00000019
:0040320D 894DF8                  mov dword ptr [ebp-08], ecx
:00403210 C745F000000000          mov [ebp-10], 00000000
:00403217 EB09                    jmp 00403222

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403244(U)
|
:00403219 8B55F0                  mov edx, dword ptr [ebp-10]
:0040321C 83C201                  add edx, 00000001
:0040321F 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403217(U)
|
:00403222 837DF00E                cmp dword ptr [ebp-10], 0000000E
:00403226 731E                    jnb 00403246
:00403228 8B45F8                  mov eax, dword ptr [ebp-08]
:0040322B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040322E 8A11                    mov dl, byte ptr [ecx]
:00403230 8810                    mov byte ptr [eax], dl
:00403232 8B45F8                  mov eax, dword ptr [ebp-08]
:00403235 83C001                  add eax, 00000001
:00403238 8945F8                  mov dword ptr [ebp-08], eax
:0040323B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040323E 83C101                  add ecx, 00000001
:00403241 894DFC                  mov dword ptr [ebp-04], ecx
:00403244 EBD3                    jmp 00403219

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403226(C)
|
:00403246 8B55F8                  mov edx, dword ptr [ebp-08]
:00403249 C60200                  mov byte ptr [edx], 00
:0040324C 8B450C                  mov eax, dword ptr [ebp+0C]
:0040324F 83C00F                  add eax, 0000000F
:00403252 89450C                  mov dword ptr [ebp+0C], eax
:00403255 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00403258 33D2                    xor edx, edx
:0040325A 8A11                    mov dl, byte ptr [ecx]
:0040325C 8955F4                  mov dword ptr [ebp-0C], edx
:0040325F 8B450C                  mov eax, dword ptr [ebp+0C]
:00403262 83C001                  add eax, 00000001
:00403265 89450C                  mov dword ptr [ebp+0C], eax
:00403268 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040326B 33D2                    xor edx, edx
:0040326D 8A11                    mov dl, byte ptr [ecx]
:0040326F C1E208                  shl edx, 08
:00403272 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403275 03C2                    add eax, edx
:00403277 8945F4                  mov dword ptr [ebp-0C], eax
:0040327A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040327D 83C101                  add ecx, 00000001
:00403280 894D0C                  mov dword ptr [ebp+0C], ecx
:00403283 837D1000                cmp dword ptr [ebp+10], 00000000
:00403287 751F                    jne 004032A8
:00403289 8B55EC                  mov edx, dword ptr [ebp-14]
:0040328C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040328F 894204                  mov dword ptr [edx+04], eax
:00403292 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403295 8B550C                  mov edx, dword ptr [ebp+0C]
:00403298 8A02                    mov al, byte ptr [edx]
:0040329A 884102                  mov byte ptr [ecx+02], al
:0040329D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004032A0 83C101                  add ecx, 00000001
:004032A3 894D0C                  mov dword ptr [ebp+0C], ecx
:004032A6 EB09                    jmp 004032B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403287(C)
|
:004032A8 8B550C                  mov edx, dword ptr [ebp+0C]
:004032AB 83C201                  add edx, 00000001
:004032AE 89550C                  mov dword ptr [ebp+0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004032A6(U)
|
:004032B1 8B45EC                  mov eax, dword ptr [ebp-14]
:004032B4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004032B7 8A11                    mov dl, byte ptr [ecx]
:004032B9 885030                  mov byte ptr [eax+30], dl
:004032BC 8B450C                  mov eax, dword ptr [ebp+0C]
:004032BF 83C001                  add eax, 00000001
:004032C2 89450C                  mov dword ptr [ebp+0C], eax
:004032C5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004032C8 8B550C                  mov edx, dword ptr [ebp+0C]
:004032CB 8A02                    mov al, byte ptr [edx]
:004032CD 884131                  mov byte ptr [ecx+31], al
:004032D0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004032D3 83C101                  add ecx, 00000001
:004032D6 894D0C                  mov dword ptr [ebp+0C], ecx
:004032D9 C745F000000000          mov [ebp-10], 00000000
:004032E0 EB09                    jmp 004032EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403308(U)
|
:004032E2 8B55F0                  mov edx, dword ptr [ebp-10]
:004032E5 83C201                  add edx, 00000001
:004032E8 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004032E0(U)
|
:004032EB 837DF008                cmp dword ptr [ebp-10], 00000008
:004032EF 7319                    jnb 0040330A
:004032F1 8B45EC                  mov eax, dword ptr [ebp-14]
:004032F4 0345F0                  add eax, dword ptr [ebp-10]
:004032F7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004032FA 8A11                    mov dl, byte ptr [ecx]
:004032FC 88504E                  mov byte ptr [eax+4E], dl
:004032FF 8B450C                  mov eax, dword ptr [ebp+0C]
:00403302 83C001                  add eax, 00000001
:00403305 89450C                  mov dword ptr [ebp+0C], eax
:00403308 EBD8                    jmp 004032E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004032EF(C)
|
:0040330A C745F000000000          mov [ebp-10], 00000000
:00403311 EB09                    jmp 0040331C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403339(U)
|
:00403313 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403316 83C101                  add ecx, 00000001
:00403319 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403311(U)
|
:0040331C 837DF008                cmp dword ptr [ebp-10], 00000008
:00403320 7319                    jnb 0040333B
:00403322 8B55EC                  mov edx, dword ptr [ebp-14]
:00403325 0355F0                  add edx, dword ptr [ebp-10]
:00403328 8B450C                  mov eax, dword ptr [ebp+0C]
:0040332B 8A08                    mov cl, byte ptr [eax]
:0040332D 884A56                  mov byte ptr [edx+56], cl
:00403330 8B550C                  mov edx, dword ptr [ebp+0C]
:00403333 83C201                  add edx, 00000001
:00403336 89550C                  mov dword ptr [ebp+0C], edx
:00403339 EBD8                    jmp 00403313

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403320(C)
|
:0040333B C745F000000000          mov [ebp-10], 00000000
:00403342 EB09                    jmp 0040334D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040336A(U)
|
:00403344 8B45F0                  mov eax, dword ptr [ebp-10]
:00403347 83C001                  add eax, 00000001
:0040334A 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403342(U)
|
:0040334D 837DF007                cmp dword ptr [ebp-10], 00000007
:00403351 7319                    jnb 0040336C
:00403353 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403356 034DF0                  add ecx, dword ptr [ebp-10]
:00403359 8B550C                  mov edx, dword ptr [ebp+0C]
:0040335C 8A02                    mov al, byte ptr [edx]
:0040335E 88415E                  mov byte ptr [ecx+5E], al
:00403361 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00403364 83C101                  add ecx, 00000001
:00403367 894D0C                  mov dword ptr [ebp+0C], ecx
:0040336A EBD8                    jmp 00403344

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403351(C)
|
:0040336C 8B55EC                  mov edx, dword ptr [ebp-14]
:0040336F 8B450C                  mov eax, dword ptr [ebp+0C]
:00403372 8A08                    mov cl, byte ptr [eax]
:00403374 884A28                  mov byte ptr [edx+28], cl
:00403377 8B550C                  mov edx, dword ptr [ebp+0C]
:0040337A 83C201                  add edx, 00000001
:0040337D 89550C                  mov dword ptr [ebp+0C], edx
:00403380 8B45EC                  mov eax, dword ptr [ebp-14]
:00403383 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00403386 8A11                    mov dl, byte ptr [ecx]
:00403388 885029                  mov byte ptr [eax+29], dl
:0040338B 8B450C                  mov eax, dword ptr [ebp+0C]
:0040338E 83C001                  add eax, 00000001
:00403391 89450C                  mov dword ptr [ebp+0C], eax
:00403394 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403397 8B550C                  mov edx, dword ptr [ebp+0C]
:0040339A 8A02                    mov al, byte ptr [edx]
:0040339C 88412A                  mov byte ptr [ecx+2A], al
:0040339F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004033A2 83C101                  add ecx, 00000001
:004033A5 894D0C                  mov dword ptr [ebp+0C], ecx
:004033A8 8B55EC                  mov edx, dword ptr [ebp-14]
:004033AB 8B450C                  mov eax, dword ptr [ebp+0C]
:004033AE 8A08                    mov cl, byte ptr [eax]
:004033B0 884A2B                  mov byte ptr [edx+2B], cl
:004033B3 8B550C                  mov edx, dword ptr [ebp+0C]
:004033B6 83C201                  add edx, 00000001
:004033B9 89550C                  mov dword ptr [ebp+0C], edx
:004033BC 8B450C                  mov eax, dword ptr [ebp+0C]
:004033BF 33C9                    xor ecx, ecx
:004033C1 8A08                    mov cl, byte ptr [eax]
:004033C3 894DF4                  mov dword ptr [ebp-0C], ecx
:004033C6 8B550C                  mov edx, dword ptr [ebp+0C]
:004033C9 83C201                  add edx, 00000001
:004033CC 89550C                  mov dword ptr [ebp+0C], edx
:004033CF 8B450C                  mov eax, dword ptr [ebp+0C]
:004033D2 33C9                    xor ecx, ecx
:004033D4 8A08                    mov cl, byte ptr [eax]
:004033D6 C1E108                  shl ecx, 08
:004033D9 8B55F4                  mov edx, dword ptr [ebp-0C]
:004033DC 03D1                    add edx, ecx
:004033DE 8955F4                  mov dword ptr [ebp-0C], edx
:004033E1 8B450C                  mov eax, dword ptr [ebp+0C]
:004033E4 83C001                  add eax, 00000001
:004033E7 89450C                  mov dword ptr [ebp+0C], eax
:004033EA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004033ED 8B55F4                  mov edx, dword ptr [ebp-0C]
:004033F0 895108                  mov dword ptr [ecx+08], edx
:004033F3 8B45EC                  mov eax, dword ptr [ebp-14]
:004033F6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004033F9 8A11                    mov dl, byte ptr [ecx]
:004033FB 88502C                  mov byte ptr [eax+2C], dl
:004033FE 8B450C                  mov eax, dword ptr [ebp+0C]
:00403401 83C001                  add eax, 00000001
:00403404 89450C                  mov dword ptr [ebp+0C], eax
:00403407 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040340A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040340D 8B4208                  mov eax, dword ptr [edx+08]
:00403410 894168                  mov dword ptr [ecx+68], eax
:00403413 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403416 33D2                    xor edx, edx
:00403418 8A512C                  mov dl, byte ptr [ecx+2C]
:0040341B 8B45EC                  mov eax, dword ptr [ebp-14]
:0040341E 89506C                  mov dword ptr [eax+6C], edx
:00403421 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403424 8B550C                  mov edx, dword ptr [ebp+0C]
:00403427 8A02                    mov al, byte ptr [edx]
:00403429 88412E                  mov byte ptr [ecx+2E], al
:0040342C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040342F 83C101                  add ecx, 00000001
:00403432 894D0C                  mov dword ptr [ebp+0C], ecx
:00403435 8B55EC                  mov edx, dword ptr [ebp-14]
:00403438 8B450C                  mov eax, dword ptr [ebp+0C]
:0040343B 8A08                    mov cl, byte ptr [eax]
:0040343D 884A2F                  mov byte ptr [edx+2F], cl
:00403440 8B550C                  mov edx, dword ptr [ebp+0C]
:00403443 83C201                  add edx, 00000001
:00403446 89550C                  mov dword ptr [ebp+0C], edx
:00403449 8B45EC                  mov eax, dword ptr [ebp-14]
:0040344C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040344F 8A11                    mov dl, byte ptr [ecx]
:00403451 885032                  mov byte ptr [eax+32], dl
:00403454 8B450C                  mov eax, dword ptr [ebp+0C]
:00403457 83C001                  add eax, 00000001
:0040345A 89450C                  mov dword ptr [ebp+0C], eax
:0040345D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403460 8B550C                  mov edx, dword ptr [ebp+0C]
:00403463 8A02                    mov al, byte ptr [edx]
:00403465 884133                  mov byte ptr [ecx+33], al
:00403468 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040346B 83C101                  add ecx, 00000001
:0040346E 894D0C                  mov dword ptr [ebp+0C], ecx
:00403471 8B55EC                  mov edx, dword ptr [ebp-14]
:00403474 8B450C                  mov eax, dword ptr [ebp+0C]
:00403477 8A08                    mov cl, byte ptr [eax]
:00403479 884A34                  mov byte ptr [edx+34], cl
:0040347C 8B550C                  mov edx, dword ptr [ebp+0C]
:0040347F 83C201                  add edx, 00000001
:00403482 89550C                  mov dword ptr [ebp+0C], edx
:00403485 8B45EC                  mov eax, dword ptr [ebp-14]
:00403488 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040348B 8A11                    mov dl, byte ptr [ecx]
:0040348D 885035                  mov byte ptr [eax+35], dl
:00403490 8B450C                  mov eax, dword ptr [ebp+0C]
:00403493 83C001                  add eax, 00000001
:00403496 89450C                  mov dword ptr [ebp+0C], eax
:00403499 C745F000000000          mov [ebp-10], 00000000
:004034A0 EB09                    jmp 004034AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004034C8(U)
|
:004034A2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004034A5 83C101                  add ecx, 00000001
:004034A8 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004034A0(U)
|
:004034AB 837DF008                cmp dword ptr [ebp-10], 00000008
:004034AF 7319                    jnb 004034CA
:004034B1 8B55EC                  mov edx, dword ptr [ebp-14]
:004034B4 0355F0                  add edx, dword ptr [ebp-10]
:004034B7 8B450C                  mov eax, dword ptr [ebp+0C]
:004034BA 8A08                    mov cl, byte ptr [eax]
:004034BC 884A36                  mov byte ptr [edx+36], cl
:004034BF 8B550C                  mov edx, dword ptr [ebp+0C]
:004034C2 83C201                  add edx, 00000001
:004034C5 89550C                  mov dword ptr [ebp+0C], edx
:004034C8 EBD8                    jmp 004034A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004034AF(C)
|
:004034CA 8B45EC                  mov eax, dword ptr [ebp-14]
:004034CD 817808E8030000          cmp dword ptr [eax+08], 000003E8
:004034D4 760A                    jbe 004034E0
:004034D6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004034D9 C74108E8030000          mov [ecx+08], 000003E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004034D4(C)
|
:004034E0 8B55EC                  mov edx, dword ptr [ebp-14]
:004034E3 33C0                    xor eax, eax
:004034E5 8A4233                  mov al, byte ptr [edx+33]
:004034E8 85C0                    test eax, eax
:004034EA 7507                    jne 004034F3
:004034EC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004034EF C6413301                mov [ecx+33], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004034EA(C)
|
:004034F3 8B450C                  mov eax, dword ptr [ebp+0C]
:004034F6 8BE5                    mov esp, ebp
:004034F8 5D                      pop ebp
:004034F9 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:004118FB   
|
:004034FC 55                      push ebp
:004034FD 8BEC                    mov ebp, esp
:004034FF 83EC08                  sub esp, 00000008
:00403502 894DF8                  mov dword ptr [ebp-08], ecx
:00403505 8B45F8                  mov eax, dword ptr [ebp-08]
:00403508 8B4804                  mov ecx, dword ptr [eax+04]
:0040350B 81E1FF000000            and ecx, 000000FF
:00403511 8B5508                  mov edx, dword ptr [ebp+08]
:00403514 880A                    mov byte ptr [edx], cl
:00403516 8B4508                  mov eax, dword ptr [ebp+08]
:00403519 83C001                  add eax, 00000001
:0040351C 894508                  mov dword ptr [ebp+08], eax
:0040351F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403522 8B5104                  mov edx, dword ptr [ecx+04]
:00403525 C1EA08                  shr edx, 08
:00403528 8B4508                  mov eax, dword ptr [ebp+08]
:0040352B 8810                    mov byte ptr [eax], dl
:0040352D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403530 83C101                  add ecx, 00000001
:00403533 894D08                  mov dword ptr [ebp+08], ecx
:00403536 8B5508                  mov edx, dword ptr [ebp+08]
:00403539 8B45F8                  mov eax, dword ptr [ebp-08]
:0040353C 8A4802                  mov cl, byte ptr [eax+02]
:0040353F 880A                    mov byte ptr [edx], cl
:00403541 8B5508                  mov edx, dword ptr [ebp+08]
:00403544 83C201                  add edx, 00000001
:00403547 895508                  mov dword ptr [ebp+08], edx
:0040354A 8B4508                  mov eax, dword ptr [ebp+08]
:0040354D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403550 8A5130                  mov dl, byte ptr [ecx+30]
:00403553 8810                    mov byte ptr [eax], dl
:00403555 8B4508                  mov eax, dword ptr [ebp+08]
:00403558 83C001                  add eax, 00000001
:0040355B 894508                  mov dword ptr [ebp+08], eax
:0040355E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403561 8B55F8                  mov edx, dword ptr [ebp-08]
:00403564 8A4231                  mov al, byte ptr [edx+31]
:00403567 8801                    mov byte ptr [ecx], al
:00403569 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040356C 83C101                  add ecx, 00000001
:0040356F 894D08                  mov dword ptr [ebp+08], ecx
:00403572 8B5508                  mov edx, dword ptr [ebp+08]
:00403575 8B45F8                  mov eax, dword ptr [ebp-08]
:00403578 8A4828                  mov cl, byte ptr [eax+28]
:0040357B 880A                    mov byte ptr [edx], cl
:0040357D 8B5508                  mov edx, dword ptr [ebp+08]
:00403580 83C201                  add edx, 00000001
:00403583 895508                  mov dword ptr [ebp+08], edx
:00403586 8B4508                  mov eax, dword ptr [ebp+08]
:00403589 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040358C 8A5129                  mov dl, byte ptr [ecx+29]
:0040358F 8810                    mov byte ptr [eax], dl
:00403591 8B4508                  mov eax, dword ptr [ebp+08]
:00403594 83C001                  add eax, 00000001
:00403597 894508                  mov dword ptr [ebp+08], eax
:0040359A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040359D 8B55F8                  mov edx, dword ptr [ebp-08]
:004035A0 8A422A                  mov al, byte ptr [edx+2A]
:004035A3 8801                    mov byte ptr [ecx], al
:004035A5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004035A8 83C101                  add ecx, 00000001
:004035AB 894D08                  mov dword ptr [ebp+08], ecx
:004035AE 8B5508                  mov edx, dword ptr [ebp+08]
:004035B1 8B45F8                  mov eax, dword ptr [ebp-08]
:004035B4 8A482B                  mov cl, byte ptr [eax+2B]
:004035B7 880A                    mov byte ptr [edx], cl
:004035B9 8B5508                  mov edx, dword ptr [ebp+08]
:004035BC 83C201                  add edx, 00000001
:004035BF 895508                  mov dword ptr [ebp+08], edx
:004035C2 8B45F8                  mov eax, dword ptr [ebp-08]
:004035C5 8B4808                  mov ecx, dword ptr [eax+08]
:004035C8 81E1FF000000            and ecx, 000000FF
:004035CE 8B5508                  mov edx, dword ptr [ebp+08]
:004035D1 880A                    mov byte ptr [edx], cl
:004035D3 8B4508                  mov eax, dword ptr [ebp+08]
:004035D6 83C001                  add eax, 00000001
:004035D9 894508                  mov dword ptr [ebp+08], eax
:004035DC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004035DF 8B5108                  mov edx, dword ptr [ecx+08]
:004035E2 C1EA08                  shr edx, 08
:004035E5 8B4508                  mov eax, dword ptr [ebp+08]
:004035E8 8810                    mov byte ptr [eax], dl
:004035EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004035ED 83C101                  add ecx, 00000001
:004035F0 894D08                  mov dword ptr [ebp+08], ecx
:004035F3 8B5508                  mov edx, dword ptr [ebp+08]
:004035F6 8B45F8                  mov eax, dword ptr [ebp-08]
:004035F9 8A482C                  mov cl, byte ptr [eax+2C]
:004035FC 880A                    mov byte ptr [edx], cl
:004035FE 8B5508                  mov edx, dword ptr [ebp+08]
:00403601 83C201                  add edx, 00000001
:00403604 895508                  mov dword ptr [ebp+08], edx
:00403607 8B4508                  mov eax, dword ptr [ebp+08]
:0040360A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040360D 8A512E                  mov dl, byte ptr [ecx+2E]
:00403610 8810                    mov byte ptr [eax], dl
:00403612 8B4508                  mov eax, dword ptr [ebp+08]
:00403615 83C001                  add eax, 00000001
:00403618 894508                  mov dword ptr [ebp+08], eax
:0040361B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040361E 8B55F8                  mov edx, dword ptr [ebp-08]
:00403621 8A422F                  mov al, byte ptr [edx+2F]
:00403624 8801                    mov byte ptr [ecx], al
:00403626 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403629 83C101                  add ecx, 00000001
:0040362C 894D08                  mov dword ptr [ebp+08], ecx
:0040362F 8B5508                  mov edx, dword ptr [ebp+08]
:00403632 8B45F8                  mov eax, dword ptr [ebp-08]
:00403635 8A4832                  mov cl, byte ptr [eax+32]
:00403638 880A                    mov byte ptr [edx], cl
:0040363A 8B5508                  mov edx, dword ptr [ebp+08]
:0040363D 83C201                  add edx, 00000001
:00403640 895508                  mov dword ptr [ebp+08], edx
:00403643 8B4508                  mov eax, dword ptr [ebp+08]
:00403646 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403649 8A5133                  mov dl, byte ptr [ecx+33]
:0040364C 8810                    mov byte ptr [eax], dl
:0040364E 8B4508                  mov eax, dword ptr [ebp+08]
:00403651 83C001                  add eax, 00000001
:00403654 894508                  mov dword ptr [ebp+08], eax
:00403657 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040365A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040365D 8A4234                  mov al, byte ptr [edx+34]
:00403660 8801                    mov byte ptr [ecx], al
:00403662 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403665 83C101                  add ecx, 00000001
:00403668 894D08                  mov dword ptr [ebp+08], ecx
:0040366B 8B5508                  mov edx, dword ptr [ebp+08]
:0040366E 8B45F8                  mov eax, dword ptr [ebp-08]
:00403671 8A4835                  mov cl, byte ptr [eax+35]
:00403674 880A                    mov byte ptr [edx], cl
:00403676 8B5508                  mov edx, dword ptr [ebp+08]
:00403679 83C201                  add edx, 00000001
:0040367C 895508                  mov dword ptr [ebp+08], edx
:0040367F C745FC00000000          mov [ebp-04], 00000000
:00403686 EB09                    jmp 00403691

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036AE(U)
|
:00403688 8B45FC                  mov eax, dword ptr [ebp-04]
:0040368B 83C001                  add eax, 00000001
:0040368E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403686(U)
|
:00403691 837DFC08                cmp dword ptr [ebp-04], 00000008
:00403695 7319                    jnb 004036B0
:00403697 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040369A 034DFC                  add ecx, dword ptr [ebp-04]
:0040369D 8B5508                  mov edx, dword ptr [ebp+08]
:004036A0 8A4136                  mov al, byte ptr [ecx+36]
:004036A3 8802                    mov byte ptr [edx], al
:004036A5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004036A8 83C101                  add ecx, 00000001
:004036AB 894D08                  mov dword ptr [ebp+08], ecx
:004036AE EBD8                    jmp 00403688

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403695(C)
|
:004036B0 C745FC00000000          mov [ebp-04], 00000000
:004036B7 EB09                    jmp 004036C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036DF(U)
|
:004036B9 8B55FC                  mov edx, dword ptr [ebp-04]
:004036BC 83C201                  add edx, 00000001
:004036BF 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036B7(U)
|
:004036C2 837DFC08                cmp dword ptr [ebp-04], 00000008
:004036C6 7319                    jnb 004036E1
:004036C8 8B45F8                  mov eax, dword ptr [ebp-08]
:004036CB 0345FC                  add eax, dword ptr [ebp-04]
:004036CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004036D1 8A504E                  mov dl, byte ptr [eax+4E]
:004036D4 8811                    mov byte ptr [ecx], dl
:004036D6 8B4508                  mov eax, dword ptr [ebp+08]
:004036D9 83C001                  add eax, 00000001
:004036DC 894508                  mov dword ptr [ebp+08], eax
:004036DF EBD8                    jmp 004036B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036C6(C)
|
:004036E1 C745FC00000000          mov [ebp-04], 00000000
:004036E8 EB09                    jmp 004036F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403710(U)
|
:004036EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004036ED 83C101                  add ecx, 00000001
:004036F0 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036E8(U)
|
:004036F3 837DFC08                cmp dword ptr [ebp-04], 00000008
:004036F7 7319                    jnb 00403712
:004036F9 8B55F8                  mov edx, dword ptr [ebp-08]
:004036FC 0355FC                  add edx, dword ptr [ebp-04]
:004036FF 8B4508                  mov eax, dword ptr [ebp+08]
:00403702 8A4A56                  mov cl, byte ptr [edx+56]
:00403705 8808                    mov byte ptr [eax], cl
:00403707 8B5508                  mov edx, dword ptr [ebp+08]
:0040370A 83C201                  add edx, 00000001
:0040370D 895508                  mov dword ptr [ebp+08], edx
:00403710 EBD8                    jmp 004036EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036F7(C)
|
:00403712 8B45F8                  mov eax, dword ptr [ebp-08]
:00403715 8B4868                  mov ecx, dword ptr [eax+68]
:00403718 81E1FF000000            and ecx, 000000FF
:0040371E 8B5508                  mov edx, dword ptr [ebp+08]
:00403721 880A                    mov byte ptr [edx], cl
:00403723 8B4508                  mov eax, dword ptr [ebp+08]
:00403726 83C001                  add eax, 00000001
:00403729 894508                  mov dword ptr [ebp+08], eax
:0040372C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040372F 8B5168                  mov edx, dword ptr [ecx+68]
:00403732 C1EA08                  shr edx, 08
:00403735 8B4508                  mov eax, dword ptr [ebp+08]
:00403738 8810                    mov byte ptr [eax], dl
:0040373A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040373D 83C101                  add ecx, 00000001
:00403740 894D08                  mov dword ptr [ebp+08], ecx
:00403743 8B55F8                  mov edx, dword ptr [ebp-08]
:00403746 8B426C                  mov eax, dword ptr [edx+6C]
:00403749 25FF000000              and eax, 000000FF
:0040374E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403751 8801                    mov byte ptr [ecx], al
:00403753 8B5508                  mov edx, dword ptr [ebp+08]
:00403756 83C201                  add edx, 00000001
:00403759 895508                  mov dword ptr [ebp+08], edx
:0040375C 8B45F8                  mov eax, dword ptr [ebp-08]
:0040375F 8B486C                  mov ecx, dword ptr [eax+6C]
:00403762 C1E908                  shr ecx, 08
:00403765 8B5508                  mov edx, dword ptr [ebp+08]
:00403768 880A                    mov byte ptr [edx], cl
:0040376A 8B4508                  mov eax, dword ptr [ebp+08]
:0040376D 83C001                  add eax, 00000001
:00403770 894508                  mov dword ptr [ebp+08], eax
:00403773 8B4508                  mov eax, dword ptr [ebp+08]
:00403776 8BE5                    mov esp, ebp
:00403778 5D                      pop ebp
:00403779 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004110FF   
|
:0040377C 55                      push ebp
:0040377D 8BEC                    mov ebp, esp
:0040377F 83EC0C                  sub esp, 0000000C
:00403782 894DF4                  mov dword ptr [ebp-0C], ecx
:00403785 8B4508                  mov eax, dword ptr [ebp+08]
:00403788 33C9                    xor ecx, ecx
:0040378A 8A08                    mov cl, byte ptr [eax]
:0040378C 894DFC                  mov dword ptr [ebp-04], ecx
:0040378F 8B5508                  mov edx, dword ptr [ebp+08]
:00403792 83C201                  add edx, 00000001
:00403795 895508                  mov dword ptr [ebp+08], edx
:00403798 8B4508                  mov eax, dword ptr [ebp+08]
:0040379B 33C9                    xor ecx, ecx
:0040379D 8A08                    mov cl, byte ptr [eax]
:0040379F C1E108                  shl ecx, 08
:004037A2 8B55FC                  mov edx, dword ptr [ebp-04]
:004037A5 03D1                    add edx, ecx
:004037A7 8955FC                  mov dword ptr [ebp-04], edx
:004037AA 8B4508                  mov eax, dword ptr [ebp+08]
:004037AD 83C001                  add eax, 00000001
:004037B0 894508                  mov dword ptr [ebp+08], eax
:004037B3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004037B6 8B55FC                  mov edx, dword ptr [ebp-04]
:004037B9 895104                  mov dword ptr [ecx+04], edx
:004037BC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004037BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004037C2 8A11                    mov dl, byte ptr [ecx]
:004037C4 885002                  mov byte ptr [eax+02], dl
:004037C7 8B4508                  mov eax, dword ptr [ebp+08]
:004037CA 83C001                  add eax, 00000001
:004037CD 894508                  mov dword ptr [ebp+08], eax
:004037D0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004037D3 8B5508                  mov edx, dword ptr [ebp+08]
:004037D6 8A02                    mov al, byte ptr [edx]
:004037D8 884130                  mov byte ptr [ecx+30], al
:004037DB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004037DE 83C101                  add ecx, 00000001
:004037E1 894D08                  mov dword ptr [ebp+08], ecx
:004037E4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004037E7 8B4508                  mov eax, dword ptr [ebp+08]
:004037EA 8A08                    mov cl, byte ptr [eax]
:004037EC 884A31                  mov byte ptr [edx+31], cl
:004037EF 8B5508                  mov edx, dword ptr [ebp+08]
:004037F2 83C201                  add edx, 00000001
:004037F5 895508                  mov dword ptr [ebp+08], edx
:004037F8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004037FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004037FE 8A11                    mov dl, byte ptr [ecx]
:00403800 885028                  mov byte ptr [eax+28], dl
:00403803 8B4508                  mov eax, dword ptr [ebp+08]
:00403806 83C001                  add eax, 00000001
:00403809 894508                  mov dword ptr [ebp+08], eax
:0040380C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040380F 8B5508                  mov edx, dword ptr [ebp+08]
:00403812 8A02                    mov al, byte ptr [edx]
:00403814 884129                  mov byte ptr [ecx+29], al
:00403817 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040381A 83C101                  add ecx, 00000001
:0040381D 894D08                  mov dword ptr [ebp+08], ecx
:00403820 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403823 8B4508                  mov eax, dword ptr [ebp+08]
:00403826 8A08                    mov cl, byte ptr [eax]
:00403828 884A2A                  mov byte ptr [edx+2A], cl
:0040382B 8B5508                  mov edx, dword ptr [ebp+08]
:0040382E 83C201                  add edx, 00000001
:00403831 895508                  mov dword ptr [ebp+08], edx
:00403834 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403837 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040383A 8A11                    mov dl, byte ptr [ecx]
:0040383C 88502B                  mov byte ptr [eax+2B], dl
:0040383F 8B4508                  mov eax, dword ptr [ebp+08]
:00403842 83C001                  add eax, 00000001
:00403845 894508                  mov dword ptr [ebp+08], eax
:00403848 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040384B 33D2                    xor edx, edx
:0040384D 8A11                    mov dl, byte ptr [ecx]
:0040384F 8955FC                  mov dword ptr [ebp-04], edx
:00403852 8B4508                  mov eax, dword ptr [ebp+08]
:00403855 83C001                  add eax, 00000001
:00403858 894508                  mov dword ptr [ebp+08], eax
:0040385B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040385E 33D2                    xor edx, edx
:00403860 8A11                    mov dl, byte ptr [ecx]
:00403862 C1E208                  shl edx, 08
:00403865 8B45FC                  mov eax, dword ptr [ebp-04]
:00403868 03C2                    add eax, edx
:0040386A 8945FC                  mov dword ptr [ebp-04], eax
:0040386D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403870 83C101                  add ecx, 00000001
:00403873 894D08                  mov dword ptr [ebp+08], ecx
:00403876 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403879 8B45FC                  mov eax, dword ptr [ebp-04]
:0040387C 894208                  mov dword ptr [edx+08], eax
:0040387F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00403882 8B5508                  mov edx, dword ptr [ebp+08]
:00403885 8A02                    mov al, byte ptr [edx]
:00403887 88412C                  mov byte ptr [ecx+2C], al
:0040388A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040388D 83C101                  add ecx, 00000001
:00403890 894D08                  mov dword ptr [ebp+08], ecx
:00403893 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403896 8B4508                  mov eax, dword ptr [ebp+08]
:00403899 8A08                    mov cl, byte ptr [eax]
:0040389B 884A2E                  mov byte ptr [edx+2E], cl
:0040389E 8B5508                  mov edx, dword ptr [ebp+08]
:004038A1 83C201                  add edx, 00000001
:004038A4 895508                  mov dword ptr [ebp+08], edx
:004038A7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004038AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004038AD 8A11                    mov dl, byte ptr [ecx]
:004038AF 88502F                  mov byte ptr [eax+2F], dl
:004038B2 8B4508                  mov eax, dword ptr [ebp+08]
:004038B5 83C001                  add eax, 00000001
:004038B8 894508                  mov dword ptr [ebp+08], eax
:004038BB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004038BE 8B5508                  mov edx, dword ptr [ebp+08]
:004038C1 8A02                    mov al, byte ptr [edx]
:004038C3 884132                  mov byte ptr [ecx+32], al
:004038C6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004038C9 83C101                  add ecx, 00000001
:004038CC 894D08                  mov dword ptr [ebp+08], ecx
:004038CF 8B55F4                  mov edx, dword ptr [ebp-0C]
:004038D2 8B4508                  mov eax, dword ptr [ebp+08]
:004038D5 8A08                    mov cl, byte ptr [eax]
:004038D7 884A33                  mov byte ptr [edx+33], cl
:004038DA 8B5508                  mov edx, dword ptr [ebp+08]
:004038DD 83C201                  add edx, 00000001
:004038E0 895508                  mov dword ptr [ebp+08], edx
:004038E3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004038E6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004038E9 8A11                    mov dl, byte ptr [ecx]
:004038EB 885034                  mov byte ptr [eax+34], dl
:004038EE 8B4508                  mov eax, dword ptr [ebp+08]
:004038F1 83C001                  add eax, 00000001
:004038F4 894508                  mov dword ptr [ebp+08], eax
:004038F7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004038FA 8B5508                  mov edx, dword ptr [ebp+08]
:004038FD 8A02                    mov al, byte ptr [edx]
:004038FF 884135                  mov byte ptr [ecx+35], al
:00403902 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403905 83C101                  add ecx, 00000001
:00403908 894D08                  mov dword ptr [ebp+08], ecx
:0040390B C745F800000000          mov [ebp-08], 00000000
:00403912 EB09                    jmp 0040391D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040393A(U)
|
:00403914 8B55F8                  mov edx, dword ptr [ebp-08]
:00403917 83C201                  add edx, 00000001
:0040391A 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403912(U)
|
:0040391D 837DF808                cmp dword ptr [ebp-08], 00000008
:00403921 7319                    jnb 0040393C
:00403923 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403926 0345F8                  add eax, dword ptr [ebp-08]
:00403929 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040392C 8A11                    mov dl, byte ptr [ecx]
:0040392E 885036                  mov byte ptr [eax+36], dl
:00403931 8B4508                  mov eax, dword ptr [ebp+08]
:00403934 83C001                  add eax, 00000001
:00403937 894508                  mov dword ptr [ebp+08], eax
:0040393A EBD8                    jmp 00403914

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403921(C)
|
:0040393C C745F800000000          mov [ebp-08], 00000000
:00403943 EB09                    jmp 0040394E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040396B(U)
|
:00403945 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403948 83C101                  add ecx, 00000001
:0040394B 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403943(U)
|
:0040394E 837DF808                cmp dword ptr [ebp-08], 00000008
:00403952 7319                    jnb 0040396D
:00403954 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403957 0355F8                  add edx, dword ptr [ebp-08]
:0040395A 8B4508                  mov eax, dword ptr [ebp+08]
:0040395D 8A08                    mov cl, byte ptr [eax]
:0040395F 884A4E                  mov byte ptr [edx+4E], cl
:00403962 8B5508                  mov edx, dword ptr [ebp+08]
:00403965 83C201                  add edx, 00000001
:00403968 895508                  mov dword ptr [ebp+08], edx
:0040396B EBD8                    jmp 00403945

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403952(C)
|
:0040396D C745F800000000          mov [ebp-08], 00000000
:00403974 EB09                    jmp 0040397F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040399C(U)
|
:00403976 8B45F8                  mov eax, dword ptr [ebp-08]
:00403979 83C001                  add eax, 00000001
:0040397C 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403974(U)
|
:0040397F 837DF808                cmp dword ptr [ebp-08], 00000008
:00403983 7319                    jnb 0040399E
:00403985 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00403988 034DF8                  add ecx, dword ptr [ebp-08]
:0040398B 8B5508                  mov edx, dword ptr [ebp+08]
:0040398E 8A02                    mov al, byte ptr [edx]
:00403990 884156                  mov byte ptr [ecx+56], al
:00403993 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403996 83C101                  add ecx, 00000001
:00403999 894D08                  mov dword ptr [ebp+08], ecx
:0040399C EBD8                    jmp 00403976

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403983(C)
|
:0040399E 8B5508                  mov edx, dword ptr [ebp+08]
:004039A1 33C0                    xor eax, eax
:004039A3 8A02                    mov al, byte ptr [edx]
:004039A5 8945FC                  mov dword ptr [ebp-04], eax
:004039A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004039AB 83C101                  add ecx, 00000001
:004039AE 894D08                  mov dword ptr [ebp+08], ecx
:004039B1 8B5508                  mov edx, dword ptr [ebp+08]
:004039B4 33C0                    xor eax, eax
:004039B6 8A02                    mov al, byte ptr [edx]
:004039B8 C1E008                  shl eax, 08
:004039BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004039BE 03C8                    add ecx, eax
:004039C0 894DFC                  mov dword ptr [ebp-04], ecx
:004039C3 8B5508                  mov edx, dword ptr [ebp+08]
:004039C6 83C201                  add edx, 00000001
:004039C9 895508                  mov dword ptr [ebp+08], edx
:004039CC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004039CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004039D2 894868                  mov dword ptr [eax+68], ecx
:004039D5 8B5508                  mov edx, dword ptr [ebp+08]
:004039D8 33C0                    xor eax, eax
:004039DA 8A02                    mov al, byte ptr [edx]
:004039DC 8945FC                  mov dword ptr [ebp-04], eax
:004039DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004039E2 83C101                  add ecx, 00000001
:004039E5 894D08                  mov dword ptr [ebp+08], ecx
:004039E8 8B5508                  mov edx, dword ptr [ebp+08]
:004039EB 33C0                    xor eax, eax
:004039ED 8A02                    mov al, byte ptr [edx]
:004039EF C1E008                  shl eax, 08
:004039F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004039F5 03C8                    add ecx, eax
:004039F7 894DFC                  mov dword ptr [ebp-04], ecx
:004039FA 8B5508                  mov edx, dword ptr [ebp+08]
:004039FD 83C201                  add edx, 00000001
:00403A00 895508                  mov dword ptr [ebp+08], edx
:00403A03 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403A06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403A09 89486C                  mov dword ptr [eax+6C], ecx
:00403A0C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403A0F 33C0                    xor eax, eax
:00403A11 8A4235                  mov al, byte ptr [edx+35]
:00403A14 83F808                  cmp eax, 00000008
:00403A17 7D20                    jge 00403A39
:00403A19 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00403A1C 33D2                    xor edx, edx
:00403A1E 8A5135                  mov dl, byte ptr [ecx+35]
:00403A21 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403A24 33C9                    xor ecx, ecx
:00403A26 8A4C1036                mov cl, byte ptr [eax+edx+36]
:00403A2A 81F9FF000000            cmp ecx, 000000FF
:00403A30 7507                    jne 00403A39
:00403A32 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403A35 C64235FF                mov [edx+35], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403A17(C), :00403A30(C)
|
:00403A39 8B4508                  mov eax, dword ptr [ebp+08]
:00403A3C 8BE5                    mov esp, ebp
:00403A3E 5D                      pop ebp
:00403A3F C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411D80   
|
:00403A42 55                      push ebp
:00403A43 8BEC                    mov ebp, esp
:00403A45 83EC08                  sub esp, 00000008
:00403A48 894DF8                  mov dword ptr [ebp-08], ecx
:00403A4B C745FC00000000          mov [ebp-04], 00000000
:00403A52 EB09                    jmp 00403A5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A7A(U)
|
:00403A54 8B45FC                  mov eax, dword ptr [ebp-04]
:00403A57 83C001                  add eax, 00000001
:00403A5A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A52(U)
|
:00403A5D 837DFC25                cmp dword ptr [ebp-04], 00000025
:00403A61 7319                    jnb 00403A7C
:00403A63 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403A66 034DFC                  add ecx, dword ptr [ebp-04]
:00403A69 8B5508                  mov edx, dword ptr [ebp+08]
:00403A6C 8A02                    mov al, byte ptr [edx]
:00403A6E 884125                  mov byte ptr [ecx+25], al
:00403A71 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403A74 83C101                  add ecx, 00000001
:00403A77 894D08                  mov dword ptr [ebp+08], ecx
:00403A7A EBD8                    jmp 00403A54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A61(C)
|
:00403A7C C745FC00000000          mov [ebp-04], 00000000
:00403A83 EB09                    jmp 00403A8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403AAA(U)
|
:00403A85 8B55FC                  mov edx, dword ptr [ebp-04]
:00403A88 83C201                  add edx, 00000001
:00403A8B 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A83(U)
|
:00403A8E 837DFC25                cmp dword ptr [ebp-04], 00000025
:00403A92 7318                    jnb 00403AAC
:00403A94 8B45F8                  mov eax, dword ptr [ebp-08]
:00403A97 0345FC                  add eax, dword ptr [ebp-04]
:00403A9A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403A9D 8A11                    mov dl, byte ptr [ecx]
:00403A9F 8810                    mov byte ptr [eax], dl
:00403AA1 8B4508                  mov eax, dword ptr [ebp+08]
:00403AA4 83C001                  add eax, 00000001
:00403AA7 894508                  mov dword ptr [ebp+08], eax
:00403AAA EBD9                    jmp 00403A85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A92(C)
|
:00403AAC 8B4508                  mov eax, dword ptr [ebp+08]
:00403AAF 8BE5                    mov esp, ebp
:00403AB1 5D                      pop ebp
:00403AB2 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411D20   
|
:00403AB5 55                      push ebp
:00403AB6 8BEC                    mov ebp, esp
:00403AB8 83EC10                  sub esp, 00000010
:00403ABB 894DF0                  mov dword ptr [ebp-10], ecx
:00403ABE 8B4508                  mov eax, dword ptr [ebp+08]
:00403AC1 8945FC                  mov dword ptr [ebp-04], eax
:00403AC4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403AC7 894DF8                  mov dword ptr [ebp-08], ecx
:00403ACA C745F400000000          mov [ebp-0C], 00000000
:00403AD1 EB09                    jmp 00403ADC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403AFE(U)
|
:00403AD3 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403AD6 83C201                  add edx, 00000001
:00403AD9 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403AD1(U)
|
:00403ADC 837DF40A                cmp dword ptr [ebp-0C], 0000000A
:00403AE0 731E                    jnb 00403B00
:00403AE2 8B45F8                  mov eax, dword ptr [ebp-08]
:00403AE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403AE8 8A11                    mov dl, byte ptr [ecx]
:00403AEA 8810                    mov byte ptr [eax], dl
:00403AEC 8B45F8                  mov eax, dword ptr [ebp-08]
:00403AEF 83C001                  add eax, 00000001
:00403AF2 8945F8                  mov dword ptr [ebp-08], eax
:00403AF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403AF8 83C101                  add ecx, 00000001
:00403AFB 894DFC                  mov dword ptr [ebp-04], ecx
:00403AFE EBD3                    jmp 00403AD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403AE0(C)
|
:00403B00 8B55F8                  mov edx, dword ptr [ebp-08]
:00403B03 C60200                  mov byte ptr [edx], 00
:00403B06 8B4508                  mov eax, dword ptr [ebp+08]
:00403B09 83C00B                  add eax, 0000000B
:00403B0C 894508                  mov dword ptr [ebp+08], eax
:00403B0F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403B12 8B5508                  mov edx, dword ptr [ebp+08]
:00403B15 8A02                    mov al, byte ptr [edx]
:00403B17 88410B                  mov byte ptr [ecx+0B], al
:00403B1A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403B1D 83C101                  add ecx, 00000001
:00403B20 894D08                  mov dword ptr [ebp+08], ecx
:00403B23 8B55F0                  mov edx, dword ptr [ebp-10]
:00403B26 8B4508                  mov eax, dword ptr [ebp+08]
:00403B29 8A08                    mov cl, byte ptr [eax]
:00403B2B 884A0C                  mov byte ptr [edx+0C], cl
:00403B2E 8B5508                  mov edx, dword ptr [ebp+08]
:00403B31 83C201                  add edx, 00000001
:00403B34 895508                  mov dword ptr [ebp+08], edx
:00403B37 C745F400000000          mov [ebp-0C], 00000000
:00403B3E EB09                    jmp 00403B49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B66(U)
|
:00403B40 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403B43 83C001                  add eax, 00000001
:00403B46 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B3E(U)
|
:00403B49 837DF408                cmp dword ptr [ebp-0C], 00000008
:00403B4D 7319                    jnb 00403B68
:00403B4F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403B52 034DF4                  add ecx, dword ptr [ebp-0C]
:00403B55 8B5508                  mov edx, dword ptr [ebp+08]
:00403B58 8A02                    mov al, byte ptr [edx]
:00403B5A 88410D                  mov byte ptr [ecx+0D], al
:00403B5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403B60 83C101                  add ecx, 00000001
:00403B63 894D08                  mov dword ptr [ebp+08], ecx
:00403B66 EBD8                    jmp 00403B40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B4D(C)
|
:00403B68 C745F400000000          mov [ebp-0C], 00000000
:00403B6F EB09                    jmp 00403B7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B97(U)
|
:00403B71 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403B74 83C201                  add edx, 00000001
:00403B77 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B6F(U)
|
:00403B7A 837DF412                cmp dword ptr [ebp-0C], 00000012
:00403B7E 7319                    jnb 00403B99
:00403B80 8B45F0                  mov eax, dword ptr [ebp-10]
:00403B83 0345F4                  add eax, dword ptr [ebp-0C]
:00403B86 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403B89 8A11                    mov dl, byte ptr [ecx]
:00403B8B 885015                  mov byte ptr [eax+15], dl
:00403B8E 8B4508                  mov eax, dword ptr [ebp+08]
:00403B91 83C001                  add eax, 00000001
:00403B94 894508                  mov dword ptr [ebp+08], eax
:00403B97 EBD8                    jmp 00403B71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403B7E(C)
|
:00403B99 8B4508                  mov eax, dword ptr [ebp+08]
:00403B9C 8BE5                    mov esp, ebp
:00403B9E 5D                      pop ebp
:00403B9F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401420   , :00403F58   , :0040412A   , :00404277   , :004193B2   
|:004193E1   , :00419C4B   , :0041E74C   , :0041F54A   , :0041FCC7   
|:00420E83   , :0042773F   , :0042F6F5   , :004513EE   , :00451F8E   
|:0045D104   , :0045D151   , :0045DD35   , :0045E385   , :0045E3BD   
|:00465D23   , :0046770E   , :00467B99   
|
:00403BA2 55                      push ebp
:00403BA3 8BEC                    mov ebp, esp
:00403BA5 83EC0C                  sub esp, 0000000C
:00403BA8 894DF4                  mov dword ptr [ebp-0C], ecx
:00403BAB C745FC00000000          mov [ebp-04], 00000000
:00403BB2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403BB5 83C00C                  add eax, 0000000C
:00403BB8 8945F8                  mov dword ptr [ebp-08], eax
:00403BBB EB09                    jmp 00403BC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C05(U)
|
:00403BBD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403BC0 83C101                  add ecx, 00000001
:00403BC3 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403BBB(U)
|
:00403BC6 8B55F8                  mov edx, dword ptr [ebp-08]
:00403BC9 0FBE02                  movsx eax, byte ptr [edx]
:00403BCC 85C0                    test eax, eax
:00403BCE 7437                    je 00403C07
:00403BD0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403BD3 0FBE11                  movsx edx, byte ptr [ecx]
:00403BD6 83FA30                  cmp edx, 00000030
:00403BD9 7C0B                    jl 00403BE6
:00403BDB 8B45F8                  mov eax, dword ptr [ebp-08]
:00403BDE 0FBE08                  movsx ecx, byte ptr [eax]
:00403BE1 83F939                  cmp ecx, 00000039
:00403BE4 7E17                    jle 00403BFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403BD9(C)
|
:00403BE6 8B55F4                  mov edx, dword ptr [ebp-0C]
:00403BE9 0355FC                  add edx, dword ptr [ebp-04]
:00403BEC 8B45F8                  mov eax, dword ptr [ebp-08]
:00403BEF 8A08                    mov cl, byte ptr [eax]
:00403BF1 884A3E                  mov byte ptr [edx+3E], cl
:00403BF4 8B55FC                  mov edx, dword ptr [ebp-04]
:00403BF7 83C201                  add edx, 00000001
:00403BFA 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403BE4(C)
|
:00403BFD 837DFC0E                cmp dword ptr [ebp-04], 0000000E
:00403C01 7E02                    jle 00403C05
:00403C03 EB02                    jmp 00403C07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C01(C)
|
:00403C05 EBB6                    jmp 00403BBD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403BCE(C), :00403C03(U)
|
:00403C07 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403C0A 0345FC                  add eax, dword ptr [ebp-04]
:00403C0D C6403E00                mov [eax+3E], 00
:00403C11 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403C14 83C03E                  add eax, 0000003E
:00403C17 8BE5                    mov esp, ebp
:00403C19 5D                      pop ebp
:00403C1A C3                      ret



* Referenced by a CALL at Addresses:
|:004160C2   , :0041F7A3   , :0041F7D9   , :0041FDB7   , :00466269   
|
:00403C1B 55                      push ebp
:00403C1C 8BEC                    mov ebp, esp
:00403C1E 83EC08                  sub esp, 00000008
:00403C21 53                      push ebx
:00403C22 894DF8                  mov dword ptr [ebp-08], ecx
:00403C25 8B4508                  mov eax, dword ptr [ebp+08]
:00403C28 25FF000000              and eax, 000000FF
:00403C2D 83F807                  cmp eax, 00000007
:00403C30 7C04                    jl 00403C36
:00403C32 33C0                    xor eax, eax
:00403C34 EB42                    jmp 00403C78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C30(C)
|
:00403C36 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403C39 E841000000              call 00403C7F
:00403C3E 8945FC                  mov dword ptr [ebp-04], eax
:00403C41 837DFC00                cmp dword ptr [ebp-04], 00000000
:00403C45 7507                    jne 00403C4E
:00403C47 B801000000              mov eax, 00000001
:00403C4C EB2A                    jmp 00403C78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C45(C)
|
:00403C4E 8A4D08                  mov cl, byte ptr [ebp+08]
:00403C51 51                      push ecx
:00403C52 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403C55 E8B9070000              call 00404413
:00403C5A 8AD8                    mov bl, al
:00403C5C 81E3FF000000            and ebx, 000000FF
:00403C62 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403C65 E8660B0000              call 004047D0
:00403C6A 25FF000000              and eax, 000000FF
:00403C6F 33D2                    xor edx, edx
:00403C71 3BD8                    cmp ebx, eax
:00403C73 0F9EC2                  setle dl
:00403C76 8BC2                    mov eax, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403C34(U), :00403C4C(U)
|
:00403C78 5B                      pop ebx
:00403C79 8BE5                    mov esp, ebp
:00403C7B 5D                      pop ebp
:00403C7C C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401CC9   , :004020CC   , :00402E3D   , :0040303E   , :00403C39   
|:0042BE27   , :004554EA   , :00455C8D   , :00455CBB   , :00455CF3   
|
:00403C7F 55                      push ebp
:00403C80 8BEC                    mov ebp, esp
:00403C82 83EC08                  sub esp, 00000008
:00403C85 56                      push esi
:00403C86 894DF8                  mov dword ptr [ebp-08], ecx
:00403C89 C745FC00000000          mov [ebp-04], 00000000
:00403C90 EB09                    jmp 00403C9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403CD4(U)
|
:00403C92 8B45FC                  mov eax, dword ptr [ebp-04]
:00403C95 83C001                  add eax, 00000001
:00403C98 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C90(U)
|
:00403C9B 837DFC19                cmp dword ptr [ebp-04], 00000019
:00403C9F 7335                    jnb 00403CD6
:00403CA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403CA4 6BC932                  imul ecx, 00000032
:00403CA7 81C1B0EA4800            add ecx, 0048EAB0
:00403CAD E87E170200              call 00425430
:00403CB2 668BF0                  mov si, ax
:00403CB5 81E6FFFF0000            and esi, 0000FFFF
:00403CBB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403CBE E84D0A0000              call 00404710
:00403CC3 3BF0                    cmp esi, eax
:00403CC5 750D                    jne 00403CD4
:00403CC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00403CCA 6BC032                  imul eax, 00000032
:00403CCD 05B0EA4800              add eax, 0048EAB0
:00403CD2 EB04                    jmp 00403CD8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403CC5(C)
|
:00403CD4 EBBC                    jmp 00403C92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403C9F(C)
|
:00403CD6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403CD2(U)
|
:00403CD8 5E                      pop esi
:00403CD9 8BE5                    mov esp, ebp
:00403CDB 5D                      pop ebp
:00403CDC C3                      ret



* Referenced by a CALL at Address:
|:00403D71   
|
:00403CDD 55                      push ebp
:00403CDE 8BEC                    mov ebp, esp
:00403CE0 83EC08                  sub esp, 00000008
:00403CE3 53                      push ebx
:00403CE4 56                      push esi
:00403CE5 894DF8                  mov dword ptr [ebp-08], ecx
:00403CE8 C745FC00000000          mov [ebp-04], 00000000
:00403CEF EB09                    jmp 00403CFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D5B(U)
|
:00403CF1 8B45FC                  mov eax, dword ptr [ebp-04]
:00403CF4 83C001                  add eax, 00000001
:00403CF7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403CEF(U)
|
:00403CFA 837DFC7D                cmp dword ptr [ebp-04], 0000007D
:00403CFE 735D                    jnb 00403D5D
:00403D00 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403D03 E8080A0000              call 00404710
:00403D08 8BF0                    mov esi, eax
:00403D0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403D0D 6BC90C                  imul ecx, 0000000C
:00403D10 81C148954A00            add ecx, 004A9548
:00403D16 E815170200              call 00425430
:00403D1B 25FFFF0000              and eax, 0000FFFF
:00403D20 3BF0                    cmp esi, eax
:00403D22 7537                    jne 00403D5B
:00403D24 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403D27 E8A40A0000              call 004047D0
:00403D2C 8AD8                    mov bl, al
:00403D2E 81E3FF000000            and ebx, 000000FF
:00403D34 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403D37 6BC90C                  imul ecx, 0000000C
:00403D3A 81C148954A00            add ecx, 004A9548
:00403D40 E84B980300              call 0043D590
:00403D45 25FF000000              and eax, 000000FF
:00403D4A 3BD8                    cmp ebx, eax
:00403D4C 750D                    jne 00403D5B
:00403D4E 8B45FC                  mov eax, dword ptr [ebp-04]
:00403D51 6BC00C                  imul eax, 0000000C
:00403D54 0548954A00              add eax, 004A9548
:00403D59 EB04                    jmp 00403D5F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403D22(C), :00403D4C(C)
|
:00403D5B EB94                    jmp 00403CF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403CFE(C)
|
:00403D5D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D59(U)
|
:00403D5F 5E                      pop esi
:00403D60 5B                      pop ebx
:00403D61 8BE5                    mov esp, ebp
:00403D63 5D                      pop ebp
:00403D64 C3                      ret



* Referenced by a CALL at Addresses:
|:00402E32   , :00406DDB   , :0042BE12   
|
:00403D65 55                      push ebp
:00403D66 8BEC                    mov ebp, esp
:00403D68 83EC10                  sub esp, 00000010
:00403D6B 894DF0                  mov dword ptr [ebp-10], ecx
:00403D6E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403D71 E867FFFFFF              call 00403CDD
:00403D76 8945F8                  mov dword ptr [ebp-08], eax
:00403D79 837DF800                cmp dword ptr [ebp-08], 00000000
:00403D7D 7502                    jne 00403D81
:00403D7F EB78                    jmp 00403DF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D7D(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00403D81 6A07                    push 00000007
:00403D83 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403D86 E8C4050000              call 0040434F
:00403D8B 8845FC                  mov byte ptr [ebp-04], al
:00403D8E 8B45FC                  mov eax, dword ptr [ebp-04]
:00403D91 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00403D96 3DFF000000              cmp eax, 000000FF
:00403D9B 7410                    je 00403DAD
:00403D9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403DA0 51                      push ecx
:00403DA1 8A55FC                  mov dl, byte ptr [ebp-04]
:00403DA4 52                      push edx
:00403DA5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403DA8 E8AD000000              call 00403E5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D9B(C)
|
:00403DAD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403DB0 E826EAFFFF              call 004027DB
:00403DB5 8845F4                  mov byte ptr [ebp-0C], al
:00403DB8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403DBB 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00403DC0 3DFF000000              cmp eax, 000000FF
:00403DC5 7502                    jne 00403DC9
:00403DC7 EB30                    jmp 00403DF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DC5(C)
|
:00403DC9 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00403DCC 51                      push ecx
:00403DCD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403DD0 E87A050000              call 0040434F
:00403DD5 8845FC                  mov byte ptr [ebp-04], al
:00403DD8 8B55FC                  mov edx, dword ptr [ebp-04]
:00403DDB 81E2FF000000            and edx, 000000FF
:00403DE1 81FAFF000000            cmp edx, 000000FF
:00403DE7 7410                    je 00403DF9
:00403DE9 8B4508                  mov eax, dword ptr [ebp+08]
:00403DEC 50                      push eax
:00403DED 8A4DFC                  mov cl, byte ptr [ebp-04]
:00403DF0 51                      push ecx
:00403DF1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403DF4 E861000000              call 00403E5A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403D7F(U), :00403DC7(U), :00403DE7(C)
|
:00403DF9 8BE5                    mov esp, ebp
:00403DFB 5D                      pop ebp
:00403DFC C20400                  ret 0004



* Referenced by a CALL at Address:
|:00403E6A   
|
:00403DFF 55                      push ebp
:00403E00 8BEC                    mov ebp, esp
:00403E02 83EC08                  sub esp, 00000008
:00403E05 894DF8                  mov dword ptr [ebp-08], ecx
:00403E08 8B4508                  mov eax, dword ptr [ebp+08]
:00403E0B 25FF000000              and eax, 000000FF
:00403E10 83F831                  cmp eax, 00000031
:00403E13 7E04                    jle 00403E19
:00403E15 33C0                    xor eax, eax
:00403E17 EB3B                    jmp 00403E54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E13(C)
|
:00403E19 C745FC00000000          mov [ebp-04], 00000000
:00403E20 EB09                    jmp 00403E2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E50(U)
|
:00403E22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403E25 83C101                  add ecx, 00000001
:00403E28 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E20(U)
|
:00403E2B 837DFC08                cmp dword ptr [ebp-04], 00000008
:00403E2F 7321                    jnb 00403E52
:00403E31 8B55F8                  mov edx, dword ptr [ebp-08]
:00403E34 0355FC                  add edx, dword ptr [ebp-04]
:00403E37 33C0                    xor eax, eax
:00403E39 8A424E                  mov al, byte ptr [edx+4E]
:00403E3C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403E3F 81E1FF000000            and ecx, 000000FF
:00403E45 3BC1                    cmp eax, ecx
:00403E47 7507                    jne 00403E50
:00403E49 B801000000              mov eax, 00000001
:00403E4E EB04                    jmp 00403E54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E47(C)
|
:00403E50 EBD0                    jmp 00403E22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E2F(C)
|
:00403E52 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403E17(U), :00403E4E(U)
|
:00403E54 8BE5                    mov esp, ebp
:00403E56 5D                      pop ebp
:00403E57 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00403DA8   , :00403DF4   , :0042CB4D   , :0042CBFD   , :0045A240   
|
:00403E5A 55                      push ebp
:00403E5B 8BEC                    mov ebp, esp
:00403E5D 83EC60                  sub esp, 00000060
:00403E60 894DA0                  mov dword ptr [ebp-60], ecx
:00403E63 8A4508                  mov al, byte ptr [ebp+08]
:00403E66 50                      push eax
:00403E67 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00403E6A E890FFFFFF              call 00403DFF
:00403E6F 85C0                    test eax, eax
:00403E71 7405                    je 00403E78
:00403E73 E917010000              jmp 00403F8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E71(C)
|
:00403E78 C745A800000000          mov [ebp-58], 00000000
:00403E7F EB09                    jmp 00403E8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EB0(U)
|
:00403E81 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00403E84 83C101                  add ecx, 00000001
:00403E87 894DA8                  mov dword ptr [ebp-58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E7F(U)
|
:00403E8A 837DA808                cmp dword ptr [ebp-58], 00000008
:00403E8E 7322                    jnb 00403EB2
:00403E90 8B55A0                  mov edx, dword ptr [ebp-60]
:00403E93 0355A8                  add edx, dword ptr [ebp-58]
:00403E96 33C0                    xor eax, eax
:00403E98 8A424E                  mov al, byte ptr [edx+4E]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00403E9B 3DFF000000              cmp eax, 000000FF
:00403EA0 750E                    jne 00403EB0
:00403EA2 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00403EA5 034DA8                  add ecx, dword ptr [ebp-58]
:00403EA8 8A5508                  mov dl, byte ptr [ebp+08]
:00403EAB 88514E                  mov byte ptr [ecx+4E], dl
:00403EAE EB02                    jmp 00403EB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EA0(C)
|
:00403EB0 EBCF                    jmp 00403E81

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403E8E(C), :00403EAE(U)
|
:00403EB2 837DA808                cmp dword ptr [ebp-58], 00000008
:00403EB6 7205                    jb 00403EBD
:00403EB8 E9D2000000              jmp 00403F8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EB6(C)
|
:00403EBD C745A800000000          mov [ebp-58], 00000000
:00403EC4 EB09                    jmp 00403ECF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F35(U)
|
:00403EC6 8B45A8                  mov eax, dword ptr [ebp-58]
:00403EC9 83C001                  add eax, 00000001
:00403ECC 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EC4(U)
|
:00403ECF 837DA808                cmp dword ptr [ebp-58], 00000008
:00403ED3 7362                    jnb 00403F37
:00403ED5 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00403ED8 83C101                  add ecx, 00000001
:00403EDB 894DA4                  mov dword ptr [ebp-5C], ecx
:00403EDE EB09                    jmp 00403EE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F33(U)
|
:00403EE0 8B55A4                  mov edx, dword ptr [ebp-5C]
:00403EE3 83C201                  add edx, 00000001
:00403EE6 8955A4                  mov dword ptr [ebp-5C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EDE(U)
|
:00403EE9 837DA408                cmp dword ptr [ebp-5C], 00000008
:00403EED 7346                    jnb 00403F35
:00403EEF 8B45A0                  mov eax, dword ptr [ebp-60]
:00403EF2 0345A8                  add eax, dword ptr [ebp-58]
:00403EF5 33C9                    xor ecx, ecx
:00403EF7 8A484E                  mov cl, byte ptr [eax+4E]
:00403EFA 8B55A0                  mov edx, dword ptr [ebp-60]
:00403EFD 0355A4                  add edx, dword ptr [ebp-5C]
:00403F00 33C0                    xor eax, eax
:00403F02 8A424E                  mov al, byte ptr [edx+4E]
:00403F05 3BC8                    cmp ecx, eax
:00403F07 7E2A                    jle 00403F33
:00403F09 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00403F0C 034DA8                  add ecx, dword ptr [ebp-58]
:00403F0F 8A514E                  mov dl, byte ptr [ecx+4E]
:00403F12 8855FC                  mov byte ptr [ebp-04], dl
:00403F15 8B45A0                  mov eax, dword ptr [ebp-60]
:00403F18 0345A8                  add eax, dword ptr [ebp-58]
:00403F1B 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00403F1E 034DA4                  add ecx, dword ptr [ebp-5C]
:00403F21 8A514E                  mov dl, byte ptr [ecx+4E]
:00403F24 88504E                  mov byte ptr [eax+4E], dl
:00403F27 8B45A0                  mov eax, dword ptr [ebp-60]
:00403F2A 0345A4                  add eax, dword ptr [ebp-5C]
:00403F2D 8A4DFC                  mov cl, byte ptr [ebp-04]
:00403F30 88484E                  mov byte ptr [eax+4E], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F07(C)
|
:00403F33 EBAB                    jmp 00403EE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EED(C)
|
:00403F35 EB8F                    jmp 00403EC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403ED3(C)
|
:00403F37 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00403F3B 7441                    je 00403F7E
:00403F3D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403F40 81E1FF000000            and ecx, 000000FF
:00403F46 6BC911                  imul ecx, 00000011
:00403F49 81C180DF4A00            add ecx, 004ADF80
:00403F4F E85C380000              call 004077B0
:00403F54 50                      push eax
:00403F55 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00403F58 E845FCFFFF              call 00403BA2
:00403F5D 50                      push eax

* Possible StringData Ref from Data Obj ->"%sǷ|FoNޡu%svI"
                                  |
:00403F5E 6874624700              push 00476274
:00403F63 8D55AC                  lea edx, dword ptr [ebp-54]
:00403F66 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00403F67 FF1500874B00            Call dword ptr [004B8700]
:00403F6D 83C410                  add esp, 00000010
:00403F70 8D45AC                  lea eax, dword ptr [ebp-54]
:00403F73 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00403F74 6A05                    push 00000005
:00403F76 E8F14B0200              call 00428B6C
:00403F7B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F3B(C)
|
:00403F7E 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00403F81 E88A070000              call 00404710
:00403F86 50                      push eax
:00403F87 E8C42F0600              call 00466F50
:00403F8C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403E73(U), :00403EB8(U)
|
:00403F8F 8BE5                    mov esp, ebp
:00403F91 5D                      pop ebp
:00403F92 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004312B6   , :0043176F   , :00449985   , :0046533D   
|
:00403F95 55                      push ebp
:00403F96 8BEC                    mov ebp, esp
:00403F98 51                      push ecx
:00403F99 894DFC                  mov dword ptr [ebp-04], ecx
:00403F9C 8B4508                  mov eax, dword ptr [ebp+08]
:00403F9F 25FF000000              and eax, 000000FF
:00403FA4 83F808                  cmp eax, 00000008
:00403FA7 7C04                    jl 00403FAD
:00403FA9 0CFF                    or al, FF
:00403FAB EB10                    jmp 00403FBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FA7(C)
|
:00403FAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403FB0 81E1FF000000            and ecx, 000000FF
:00403FB6 8B55FC                  mov edx, dword ptr [ebp-04]
:00403FB9 8A440A4E                mov al, byte ptr [edx+ecx+4E]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FAB(U)
|
:00403FBD 8BE5                    mov esp, ebp
:00403FBF 5D                      pop ebp
:00403FC0 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040402E   , :00404177   , :0042A687   , :0042A6CD   , :0042A713   
|:0042A759   , :0042A7AD   , :0042A7F4   , :0042A856   , :0042AAF8   
|:0042AC4D   , :0042AC94   , :0042ACD8   , :0042AD1A   , :0042AD58   
|:0042ADCB   , :0042AF88   , :0042B1B1   , :0042B267   , :0042B526   
|:0042BA68   , :0042BA97   , :0042BAD7   , :0042BB17   , :0042BB57   
|:0043BC17   , :0043BC85   , :0043BCDF   , :0043C0BD   , :0043C2AE   
|
:00403FC3 55                      push ebp
:00403FC4 8BEC                    mov ebp, esp
:00403FC6 83EC08                  sub esp, 00000008
:00403FC9 894DF8                  mov dword ptr [ebp-08], ecx
:00403FCC 8B4508                  mov eax, dword ptr [ebp+08]
:00403FCF 25FF000000              and eax, 000000FF
:00403FD4 83F820                  cmp eax, 00000020
:00403FD7 7C04                    jl 00403FDD
:00403FD9 33C0                    xor eax, eax
:00403FDB EB3B                    jmp 00404018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FD7(C)
|
:00403FDD C745FC00000000          mov [ebp-04], 00000000
:00403FE4 EB09                    jmp 00403FEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404014(U)
|
:00403FE6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403FE9 83C101                  add ecx, 00000001
:00403FEC 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FE4(U)
|
:00403FEF 837DFC08                cmp dword ptr [ebp-04], 00000008
:00403FF3 7321                    jnb 00404016
:00403FF5 8B55F8                  mov edx, dword ptr [ebp-08]
:00403FF8 0355FC                  add edx, dword ptr [ebp-04]
:00403FFB 33C0                    xor eax, eax
:00403FFD 8A4256                  mov al, byte ptr [edx+56]
:00404000 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404003 81E1FF000000            and ecx, 000000FF
:00404009 3BC1                    cmp eax, ecx
:0040400B 7507                    jne 00404014
:0040400D B801000000              mov eax, 00000001
:00404012 EB04                    jmp 00404018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040400B(C)
|
:00404014 EBD0                    jmp 00403FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FF3(C)
|
:00404016 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403FDB(U), :00404012(U)
|
:00404018 8BE5                    mov esp, ebp
:0040401A 5D                      pop ebp
:0040401B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040223D   , :0042BECE   , :0042CB8D   , :0042CC3A   , :0045A275   
|
:0040401E 55                      push ebp
:0040401F 8BEC                    mov ebp, esp
:00404021 83EC60                  sub esp, 00000060
:00404024 894DA0                  mov dword ptr [ebp-60], ecx
:00404027 8A4508                  mov al, byte ptr [ebp+08]
:0040402A 50                      push eax
:0040402B 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0040402E E890FFFFFF              call 00403FC3
:00404033 85C0                    test eax, eax
:00404035 7405                    je 0040403C
:00404037 E925010000              jmp 00404161

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404035(C)
|
:0040403C C745A800000000          mov [ebp-58], 00000000
:00404043 EB09                    jmp 0040404E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404074(U)
|
:00404045 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00404048 83C101                  add ecx, 00000001
:0040404B 894DA8                  mov dword ptr [ebp-58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404043(U)
|
:0040404E 837DA808                cmp dword ptr [ebp-58], 00000008
:00404052 7322                    jnb 00404076
:00404054 8B55A0                  mov edx, dword ptr [ebp-60]
:00404057 0355A8                  add edx, dword ptr [ebp-58]
:0040405A 33C0                    xor eax, eax
:0040405C 8A4256                  mov al, byte ptr [edx+56]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040405F 3DFF000000              cmp eax, 000000FF
:00404064 750E                    jne 00404074
:00404066 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00404069 034DA8                  add ecx, dword ptr [ebp-58]
:0040406C 8A5508                  mov dl, byte ptr [ebp+08]
:0040406F 885156                  mov byte ptr [ecx+56], dl
:00404072 EB02                    jmp 00404076

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404064(C)
|
:00404074 EBCF                    jmp 00404045

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404052(C), :00404072(U)
|
:00404076 837DA808                cmp dword ptr [ebp-58], 00000008
:0040407A 7205                    jb 00404081
:0040407C E9E0000000              jmp 00404161

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040407A(C)
|
:00404081 C745A800000000          mov [ebp-58], 00000000
:00404088 EB09                    jmp 00404093

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004040F9(U)
|
:0040408A 8B45A8                  mov eax, dword ptr [ebp-58]
:0040408D 83C001                  add eax, 00000001
:00404090 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404088(U)
|
:00404093 837DA808                cmp dword ptr [ebp-58], 00000008
:00404097 7362                    jnb 004040FB
:00404099 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0040409C 83C101                  add ecx, 00000001
:0040409F 894DA4                  mov dword ptr [ebp-5C], ecx
:004040A2 EB09                    jmp 004040AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004040F7(U)
|
:004040A4 8B55A4                  mov edx, dword ptr [ebp-5C]
:004040A7 83C201                  add edx, 00000001
:004040AA 8955A4                  mov dword ptr [ebp-5C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004040A2(U)
|
:004040AD 837DA408                cmp dword ptr [ebp-5C], 00000008
:004040B1 7346                    jnb 004040F9
:004040B3 8B45A0                  mov eax, dword ptr [ebp-60]
:004040B6 0345A8                  add eax, dword ptr [ebp-58]
:004040B9 33C9                    xor ecx, ecx
:004040BB 8A4856                  mov cl, byte ptr [eax+56]
:004040BE 8B55A0                  mov edx, dword ptr [ebp-60]
:004040C1 0355A4                  add edx, dword ptr [ebp-5C]
:004040C4 33C0                    xor eax, eax
:004040C6 8A4256                  mov al, byte ptr [edx+56]
:004040C9 3BC8                    cmp ecx, eax
:004040CB 7E2A                    jle 004040F7
:004040CD 8B4DA0                  mov ecx, dword ptr [ebp-60]
:004040D0 034DA8                  add ecx, dword ptr [ebp-58]
:004040D3 8A5156                  mov dl, byte ptr [ecx+56]
:004040D6 8855FC                  mov byte ptr [ebp-04], dl
:004040D9 8B45A0                  mov eax, dword ptr [ebp-60]
:004040DC 0345A8                  add eax, dword ptr [ebp-58]
:004040DF 8B4DA0                  mov ecx, dword ptr [ebp-60]
:004040E2 034DA4                  add ecx, dword ptr [ebp-5C]
:004040E5 8A5156                  mov dl, byte ptr [ecx+56]
:004040E8 885056                  mov byte ptr [eax+56], dl
:004040EB 8B45A0                  mov eax, dword ptr [ebp-60]
:004040EE 0345A4                  add eax, dword ptr [ebp-5C]
:004040F1 8A4DFC                  mov cl, byte ptr [ebp-04]
:004040F4 884856                  mov byte ptr [eax+56], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004040CB(C)
|
:004040F7 EBAB                    jmp 004040A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004040B1(C)
|
:004040F9 EB8F                    jmp 0040408A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404097(C)
|
:004040FB 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004040FF 744F                    je 00404150
:00404101 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00404104 E807060000              call 00404710
:00404109 50                      push eax
:0040410A E811C80000              call 00410920
:0040410F 83C404                  add esp, 00000004
:00404112 85C0                    test eax, eax
:00404114 743A                    je 00404150
:00404116 8B5508                  mov edx, dword ptr [ebp+08]
:00404119 81E2FF000000            and edx, 000000FF
:0040411F 8B0495507C4700          mov eax, dword ptr [4*edx+00477C50]
:00404126 50                      push eax
:00404127 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0040412A E873FAFFFF              call 00403BA2
:0040412F 50                      push eax

* Possible StringData Ref from Data Obj ->"u%sv[%sSʤI"
                                  |
:00404130 688C624700              push 0047628C
:00404135 8D4DAC                  lea ecx, dword ptr [ebp-54]
:00404138 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00404139 FF1500874B00            Call dword ptr [004B8700]
:0040413F 83C410                  add esp, 00000010
:00404142 8D55AC                  lea edx, dword ptr [ebp-54]
:00404145 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00404146 6A05                    push 00000005
:00404148 E81F4A0200              call 00428B6C
:0040414D 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004040FF(C), :00404114(C)
|
:00404150 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00404153 E8B8050000              call 00404710
:00404158 50                      push eax
:00404159 E8F22D0600              call 00466F50
:0040415E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404037(U), :0040407C(U)
|
:00404161 8BE5                    mov esp, ebp
:00404163 5D                      pop ebp
:00404164 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0045A2AA   
|
:00404167 55                      push ebp
:00404168 8BEC                    mov ebp, esp
:0040416A 83EC60                  sub esp, 00000060
:0040416D 894DA0                  mov dword ptr [ebp-60], ecx
:00404170 8A4508                  mov al, byte ptr [ebp+08]
:00404173 50                      push eax
:00404174 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00404177 E847FEFFFF              call 00403FC3
:0040417C 85C0                    test eax, eax
:0040417E 7505                    jne 00404185
:00404180 E929010000              jmp 004042AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040417E(C)
|
:00404185 C745A800000000          mov [ebp-58], 00000000
:0040418C EB09                    jmp 00404197

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041C1(U)
|
:0040418E 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00404191 83C101                  add ecx, 00000001
:00404194 894DA8                  mov dword ptr [ebp-58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040418C(U)
|
:00404197 837DA808                cmp dword ptr [ebp-58], 00000008
:0040419B 7326                    jnb 004041C3
:0040419D 8B55A0                  mov edx, dword ptr [ebp-60]
:004041A0 0355A8                  add edx, dword ptr [ebp-58]
:004041A3 33C0                    xor eax, eax
:004041A5 8A4256                  mov al, byte ptr [edx+56]
:004041A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004041AB 81E1FF000000            and ecx, 000000FF
:004041B1 3BC1                    cmp eax, ecx
:004041B3 750C                    jne 004041C1
:004041B5 8B55A0                  mov edx, dword ptr [ebp-60]
:004041B8 0355A8                  add edx, dword ptr [ebp-58]
:004041BB C64256FF                mov [edx+56], FF
:004041BF EB02                    jmp 004041C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041B3(C)
|
:004041C1 EBCB                    jmp 0040418E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040419B(C), :004041BF(U)
|
:004041C3 837DA808                cmp dword ptr [ebp-58], 00000008
:004041C7 7205                    jb 004041CE
:004041C9 E9E0000000              jmp 004042AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041C7(C)
|
:004041CE C745A800000000          mov [ebp-58], 00000000
:004041D5 EB09                    jmp 004041E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404246(U)
|
:004041D7 8B45A8                  mov eax, dword ptr [ebp-58]
:004041DA 83C001                  add eax, 00000001
:004041DD 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041D5(U)
|
:004041E0 837DA808                cmp dword ptr [ebp-58], 00000008
:004041E4 7362                    jnb 00404248
:004041E6 8B4DA8                  mov ecx, dword ptr [ebp-58]
:004041E9 83C101                  add ecx, 00000001
:004041EC 894DA4                  mov dword ptr [ebp-5C], ecx
:004041EF EB09                    jmp 004041FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404244(U)
|
:004041F1 8B55A4                  mov edx, dword ptr [ebp-5C]
:004041F4 83C201                  add edx, 00000001
:004041F7 8955A4                  mov dword ptr [ebp-5C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041EF(U)
|
:004041FA 837DA408                cmp dword ptr [ebp-5C], 00000008
:004041FE 7346                    jnb 00404246
:00404200 8B45A0                  mov eax, dword ptr [ebp-60]
:00404203 0345A8                  add eax, dword ptr [ebp-58]
:00404206 33C9                    xor ecx, ecx
:00404208 8A4856                  mov cl, byte ptr [eax+56]
:0040420B 8B55A0                  mov edx, dword ptr [ebp-60]
:0040420E 0355A4                  add edx, dword ptr [ebp-5C]
:00404211 33C0                    xor eax, eax
:00404213 8A4256                  mov al, byte ptr [edx+56]
:00404216 3BC8                    cmp ecx, eax
:00404218 7E2A                    jle 00404244
:0040421A 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0040421D 034DA8                  add ecx, dword ptr [ebp-58]
:00404220 8A5156                  mov dl, byte ptr [ecx+56]
:00404223 8855FC                  mov byte ptr [ebp-04], dl
:00404226 8B45A0                  mov eax, dword ptr [ebp-60]
:00404229 0345A8                  add eax, dword ptr [ebp-58]
:0040422C 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0040422F 034DA4                  add ecx, dword ptr [ebp-5C]
:00404232 8A5156                  mov dl, byte ptr [ecx+56]
:00404235 885056                  mov byte ptr [eax+56], dl
:00404238 8B45A0                  mov eax, dword ptr [ebp-60]
:0040423B 0345A4                  add eax, dword ptr [ebp-5C]
:0040423E 8A4DFC                  mov cl, byte ptr [ebp-04]
:00404241 884856                  mov byte ptr [eax+56], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404218(C)
|
:00404244 EBAB                    jmp 004041F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041FE(C)
|
:00404246 EB8F                    jmp 004041D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041E4(C)
|
:00404248 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0040424C 744F                    je 0040429D
:0040424E 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00404251 E8BA040000              call 00404710
:00404256 50                      push eax
:00404257 E8C4C60000              call 00410920
:0040425C 83C404                  add esp, 00000004
:0040425F 85C0                    test eax, eax
:00404261 743A                    je 0040429D
:00404263 8B5508                  mov edx, dword ptr [ebp+08]
:00404266 81E2FF000000            and edx, 000000FF
:0040426C 8B0495507C4700          mov eax, dword ptr [4*edx+00477C50]
:00404273 50                      push eax
:00404274 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00404277 E826F9FFFF              call 00403BA2
:0040427C 50                      push eax

* Possible StringData Ref from Data Obj ->"%sS%sѤFI"
                                  |
:0040427D 68A4624700              push 004762A4
:00404282 8D4DAC                  lea ecx, dword ptr [ebp-54]
:00404285 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00404286 FF1500874B00            Call dword ptr [004B8700]
:0040428C 83C410                  add esp, 00000010
:0040428F 8D55AC                  lea edx, dword ptr [ebp-54]
:00404292 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00404293 6A05                    push 00000005
:00404295 E8D2480200              call 00428B6C
:0040429A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040424C(C), :00404261(C)
|
:0040429D 8B4DA0                  mov ecx, dword ptr [ebp-60]
:004042A0 E86B040000              call 00404710
:004042A5 50                      push eax
:004042A6 E8A52C0600              call 00466F50
:004042AB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404180(U), :004041C9(U)
|
:004042AE 8BE5                    mov esp, ebp
:004042B0 5D                      pop ebp
:004042B1 C20800                  ret 0008



* Referenced by a CALL at Address:
|:004654C7   
|
:004042B4 55                      push ebp
:004042B5 8BEC                    mov ebp, esp
:004042B7 51                      push ecx
:004042B8 894DFC                  mov dword ptr [ebp-04], ecx
:004042BB 8B4508                  mov eax, dword ptr [ebp+08]
:004042BE 25FF000000              and eax, 000000FF
:004042C3 83F808                  cmp eax, 00000008
:004042C6 7C04                    jl 004042CC
:004042C8 0CFF                    or al, FF
:004042CA EB10                    jmp 004042DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004042C6(C)
|
:004042CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004042CF 81E1FF000000            and ecx, 000000FF
:004042D5 8B55FC                  mov edx, dword ptr [ebp-04]
:004042D8 8A440A56                mov al, byte ptr [edx+ecx+56]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004042CA(U)
|
:004042DC 8BE5                    mov esp, ebp
:004042DE 5D                      pop ebp
:004042DF C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411EA5   
|
:004042E2 55                      push ebp
:004042E3 8BEC                    mov ebp, esp
:004042E5 83EC08                  sub esp, 00000008
:004042E8 894DF8                  mov dword ptr [ebp-08], ecx
:004042EB 8B4508                  mov eax, dword ptr [ebp+08]
:004042EE 660FB608                movzx cx, byte ptr [eax]
:004042F2 8B55F8                  mov edx, dword ptr [ebp-08]
:004042F5 66890A                  mov word ptr [edx], cx
:004042F8 8B4508                  mov eax, dword ptr [ebp+08]
:004042FB 83C001                  add eax, 00000001
:004042FE 894508                  mov dword ptr [ebp+08], eax
:00404301 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404304 8B5508                  mov edx, dword ptr [ebp+08]
:00404307 8A02                    mov al, byte ptr [edx]
:00404309 884102                  mov byte ptr [ecx+02], al
:0040430C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040430F 83C101                  add ecx, 00000001
:00404312 894D08                  mov dword ptr [ebp+08], ecx
:00404315 C745FC00000000          mov [ebp-04], 00000000
:0040431C EB09                    jmp 00404327

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404344(U)
|
:0040431E 8B55FC                  mov edx, dword ptr [ebp-04]
:00404321 83C201                  add edx, 00000001
:00404324 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040431C(U)
|
:00404327 837DFC08                cmp dword ptr [ebp-04], 00000008
:0040432B 7319                    jnb 00404346
:0040432D 8B45F8                  mov eax, dword ptr [ebp-08]
:00404330 0345FC                  add eax, dword ptr [ebp-04]
:00404333 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404336 8A11                    mov dl, byte ptr [ecx]
:00404338 885003                  mov byte ptr [eax+03], dl
:0040433B 8B4508                  mov eax, dword ptr [ebp+08]
:0040433E 83C001                  add eax, 00000001
:00404341 894508                  mov dword ptr [ebp+08], eax
:00404344 EBD8                    jmp 0040431E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040432B(C)
|
:00404346 8B4508                  mov eax, dword ptr [ebp+08]
:00404349 8BE5                    mov esp, ebp
:0040434B 5D                      pop ebp
:0040434C C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00403D86   , :00403DD0   
|
:0040434F 55                      push ebp
:00404350 8BEC                    mov ebp, esp
:00404352 51                      push ecx
:00404353 894DFC                  mov dword ptr [ebp-04], ecx
:00404356 8B4508                  mov eax, dword ptr [ebp+08]
:00404359 25FF000000              and eax, 000000FF
:0040435E 83F808                  cmp eax, 00000008
:00404361 7E04                    jle 00404367
:00404363 0CFF                    or al, FF
:00404365 EB10                    jmp 00404377

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404361(C)
|
:00404367 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040436A 81E1FF000000            and ecx, 000000FF
:00404370 8B55FC                  mov edx, dword ptr [ebp-04]
:00404373 8A440A03                mov al, byte ptr [edx+ecx+03]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404365(U)
|
:00404377 8BE5                    mov esp, ebp
:00404379 5D                      pop ebp
:0040437A C20400                  ret 0004


:0040437D 55                      push ebp
:0040437E 8BEC                    mov ebp, esp
:00404380 51                      push ecx
:00404381 894DFC                  mov dword ptr [ebp-04], ecx
:00404384 8B4508                  mov eax, dword ptr [ebp+08]
:00404387 25FFFF0000              and eax, 0000FFFF
:0040438C 3D85020000              cmp eax, 00000285
:00404391 7C13                    jl 004043A6
:00404393 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404396 81E1FFFF0000            and ecx, 0000FFFF
:0040439C 81F9FFFF0000            cmp ecx, 0000FFFF
:004043A2 7402                    je 004043A6
:004043A4 EB0A                    jmp 004043B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404391(C), :004043A2(C)
|
:004043A6 8B55FC                  mov edx, dword ptr [ebp-04]
:004043A9 668B4508                mov ax, word ptr [ebp+08]
:004043AD 668902                  mov word ptr [edx], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043A4(U)
|
:004043B0 8BE5                    mov esp, ebp
:004043B2 5D                      pop ebp
:004043B3 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00402141   , :00403060   , :004030E5   , :0040314F   
|
:004043B6 55                      push ebp
:004043B7 8BEC                    mov ebp, esp
:004043B9 51                      push ecx
:004043BA 894DFC                  mov dword ptr [ebp-04], ecx
:004043BD 8B4508                  mov eax, dword ptr [ebp+08]
:004043C0 25FF000000              and eax, 000000FF
:004043C5 83F808                  cmp eax, 00000008
:004043C8 7C04                    jl 004043CE
:004043CA 32C0                    xor al, al
:004043CC EB10                    jmp 004043DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043C8(C)
|
:004043CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004043D1 81E1FF000000            and ecx, 000000FF
:004043D7 8B55FC                  mov edx, dword ptr [ebp-04]
:004043DA 8A440A02                mov al, byte ptr [edx+ecx+02]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043CC(U)
|
:004043DE 8BE5                    mov esp, ebp
:004043E0 5D                      pop ebp
:004043E1 C20400                  ret 0004


:004043E4 55                      push ebp
:004043E5 8BEC                    mov ebp, esp
:004043E7 51                      push ecx
:004043E8 894DFC                  mov dword ptr [ebp-04], ecx
:004043EB 8B4508                  mov eax, dword ptr [ebp+08]
:004043EE 25FF000000              and eax, 000000FF
:004043F3 83F808                  cmp eax, 00000008
:004043F6 7C02                    jl 004043FA
:004043F8 EB13                    jmp 0040440D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043F6(C)
|
:004043FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004043FD 81E1FF000000            and ecx, 000000FF
:00404403 8B55FC                  mov edx, dword ptr [ebp-04]
:00404406 8A450C                  mov al, byte ptr [ebp+0C]
:00404409 88440A02                mov byte ptr [edx+ecx+02], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043F8(U)
|
:0040440D 8BE5                    mov esp, ebp
:0040440F 5D                      pop ebp
:00404410 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00401D47   , :00402F29   , :00403C55   
|
:00404413 55                      push ebp
:00404414 8BEC                    mov ebp, esp
:00404416 51                      push ecx
:00404417 894DFC                  mov dword ptr [ebp-04], ecx
:0040441A 8B4508                  mov eax, dword ptr [ebp+08]
:0040441D 25FF000000              and eax, 000000FF
:00404422 83F807                  cmp eax, 00000007
:00404425 7C04                    jl 0040442B
:00404427 0CFF                    or al, FF
:00404429 EB10                    jmp 0040443B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404425(C)
|
:0040442B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040442E 81E1FF000000            and ecx, 000000FF
:00404434 8B55FC                  mov edx, dword ptr [ebp-04]
:00404437 8A440A0A                mov al, byte ptr [edx+ecx+0A]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404429(U)
|
:0040443B 8BE5                    mov esp, ebp
:0040443D 5D                      pop ebp
:0040443E C20400                  ret 0004


:00404441 55                      push ebp
:00404442 8BEC                    mov ebp, esp
:00404444 51                      push ecx
:00404445 894DFC                  mov dword ptr [ebp-04], ecx
:00404448 8B4508                  mov eax, dword ptr [ebp+08]
:0040444B 25FF000000              and eax, 000000FF
:00404450 83F80A                  cmp eax, 0000000A
:00404453 7C02                    jl 00404457
:00404455 EB13                    jmp 0040446A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404453(C)
|
:00404457 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040445A 81E1FF000000            and ecx, 000000FF
:00404460 8B55FC                  mov edx, dword ptr [ebp-04]
:00404463 8A450C                  mov al, byte ptr [ebp+0C]
:00404466 88440A0A                mov byte ptr [edx+ecx+0A], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404455(U)
|
:0040446A 8BE5                    mov esp, ebp
:0040446C 5D                      pop ebp
:0040446D C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004021E9   , :00402209   , :0040221E   , :00402E8D   , :0042BE5C   
|:0042BE7C   , :0042BE91   
|
:00404470 55                      push ebp
:00404471 8BEC                    mov ebp, esp
:00404473 51                      push ecx
:00404474 894DFC                  mov dword ptr [ebp-04], ecx
:00404477 8B4508                  mov eax, dword ptr [ebp+08]
:0040447A 25FF000000              and eax, 000000FF
:0040447F 83F820                  cmp eax, 00000020
:00404482 7C04                    jl 00404488
:00404484 0CFF                    or al, FF
:00404486 EB10                    jmp 00404498

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404482(C)
|
:00404488 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040448B 81E1FF000000            and ecx, 000000FF
:00404491 8B55FC                  mov edx, dword ptr [ebp-04]
:00404494 8A440A11                mov al, byte ptr [edx+ecx+11]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404486(U)
|
:00404498 8BE5                    mov esp, ebp
:0040449A 5D                      pop ebp
:0040449B C20400                  ret 0004


:0040449E 55                      push ebp
:0040449F 8BEC                    mov ebp, esp
:004044A1 51                      push ecx
:004044A2 894DFC                  mov dword ptr [ebp-04], ecx
:004044A5 8B4508                  mov eax, dword ptr [ebp+08]
:004044A8 25FF000000              and eax, 000000FF
:004044AD 83F820                  cmp eax, 00000020
:004044B0 7C02                    jl 004044B4
:004044B2 EB13                    jmp 004044C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044B0(C)
|
:004044B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004044B7 81E1FF000000            and ecx, 000000FF
:004044BD 8B55FC                  mov edx, dword ptr [ebp-04]
:004044C0 8A450C                  mov al, byte ptr [ebp+0C]
:004044C3 88440A11                mov byte ptr [edx+ecx+11], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044B2(U)
|
:004044C7 8BE5                    mov esp, ebp
:004044C9 5D                      pop ebp
:004044CA C20800                  ret 0008



* Referenced by a CALL at Address:
|:00411E45   
|
:004044CD 55                      push ebp
:004044CE 8BEC                    mov ebp, esp
:004044D0 83EC08                  sub esp, 00000008
:004044D3 894DF8                  mov dword ptr [ebp-08], ecx
:004044D6 8B45F8                  mov eax, dword ptr [ebp-08]
:004044D9 668B4D0C                mov cx, word ptr [ebp+0C]
:004044DD 668908                  mov word ptr [eax], cx
:004044E0 C745FC00000000          mov [ebp-04], 00000000
:004044E7 EB09                    jmp 004044F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040450F(U)
|
:004044E9 8B55FC                  mov edx, dword ptr [ebp-04]
:004044EC 83C201                  add edx, 00000001
:004044EF 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044E7(U)
|
:004044F2 837DFC08                cmp dword ptr [ebp-04], 00000008
:004044F6 7319                    jnb 00404511
:004044F8 8B45F8                  mov eax, dword ptr [ebp-08]
:004044FB 0345FC                  add eax, dword ptr [ebp-04]
:004044FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404501 8A11                    mov dl, byte ptr [ecx]
:00404503 885002                  mov byte ptr [eax+02], dl
:00404506 8B4508                  mov eax, dword ptr [ebp+08]
:00404509 83C001                  add eax, 00000001
:0040450C 894508                  mov dword ptr [ebp+08], eax
:0040450F EBD8                    jmp 004044E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044F6(C)
|
:00404511 C745FC00000000          mov [ebp-04], 00000000
:00404518 EB09                    jmp 00404523

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404540(U)
|
:0040451A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040451D 83C101                  add ecx, 00000001
:00404520 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404518(U)
|
:00404523 837DFC07                cmp dword ptr [ebp-04], 00000007
:00404527 7319                    jnb 00404542
:00404529 8B55F8                  mov edx, dword ptr [ebp-08]
:0040452C 0355FC                  add edx, dword ptr [ebp-04]
:0040452F 8B4508                  mov eax, dword ptr [ebp+08]
:00404532 8A08                    mov cl, byte ptr [eax]
:00404534 884A0A                  mov byte ptr [edx+0A], cl
:00404537 8B5508                  mov edx, dword ptr [ebp+08]
:0040453A 83C201                  add edx, 00000001
:0040453D 895508                  mov dword ptr [ebp+08], edx
:00404540 EBD8                    jmp 0040451A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404527(C)
|
:00404542 C745FC00000000          mov [ebp-04], 00000000
:00404549 EB09                    jmp 00404554

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404571(U)
|
:0040454B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040454E 83C001                  add eax, 00000001
:00404551 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404549(U)
|
:00404554 837DFC20                cmp dword ptr [ebp-04], 00000020
:00404558 7319                    jnb 00404573
:0040455A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040455D 034DFC                  add ecx, dword ptr [ebp-04]
:00404560 8B5508                  mov edx, dword ptr [ebp+08]
:00404563 8A02                    mov al, byte ptr [edx]
:00404565 884111                  mov byte ptr [ecx+11], al
:00404568 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040456B 83C101                  add ecx, 00000001
:0040456E 894D08                  mov dword ptr [ebp+08], ecx
:00404571 EBD8                    jmp 0040454B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404558(C)
|
:00404573 8B4508                  mov eax, dword ptr [ebp+08]
:00404576 8BE5                    mov esp, ebp
:00404578 5D                      pop ebp
:00404579 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00406D4C   , :004553F1   
|
:0040457C 55                      push ebp
:0040457D 8BEC                    mov ebp, esp
:0040457F 83EC14                  sub esp, 00000014
:00404582 C745FC00000000          mov [ebp-04], 00000000
:00404589 C745F800000000          mov [ebp-08], 00000000
:00404590 C645EC00                mov [ebp-14], 00
:00404594 B998224900              mov ecx, 00492298
:00404599 E832020000              call 004047D0
:0040459E 8845F0                  mov byte ptr [ebp-10], al
:004045A1 C745F400000000          mov [ebp-0C], 00000000
:004045A8 EB09                    jmp 004045B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045FA(U)
|
:004045AA 8B45F4                  mov eax, dword ptr [ebp-0C]
:004045AD 83C001                  add eax, 00000001
:004045B0 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045A8(U)
|
:004045B3 837DF419                cmp dword ptr [ebp-0C], 00000019
:004045B7 7343                    jnb 004045FC
:004045B9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004045BC 6BC970                  imul ecx, 00000070
:004045BF 81C198224900            add ecx, 00492298
:004045C5 E826030000              call 004048F0
:004045CA 25FF000000              and eax, 000000FF
:004045CF 85C0                    test eax, eax
:004045D1 7527                    jne 004045FA
:004045D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004045D6 83C101                  add ecx, 00000001
:004045D9 894DFC                  mov dword ptr [ebp-04], ecx
:004045DC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004045DF 6BC970                  imul ecx, 00000070
:004045E2 81C198224900            add ecx, 00492298
:004045E8 E8E3010000              call 004047D0
:004045ED 25FF000000              and eax, 000000FF
:004045F2 8B55F8                  mov edx, dword ptr [ebp-08]
:004045F5 03D0                    add edx, eax
:004045F7 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045D1(C)
|
:004045FA EBAE                    jmp 004045AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045B7(C)
|
:004045FC 837DFC00                cmp dword ptr [ebp-04], 00000000
:00404600 743C                    je 0040463E
:00404602 8B45F8                  mov eax, dword ptr [ebp-08]
:00404605 6BC064                  imul eax, 00000064
:00404608 8945F8                  mov dword ptr [ebp-08], eax
:0040460B 8B45F8                  mov eax, dword ptr [ebp-08]
:0040460E 33D2                    xor edx, edx
:00404610 F775FC                  div [ebp-04]
:00404613 33D2                    xor edx, edx
:00404615 B964000000              mov ecx, 00000064
:0040461A F7F1                    div ecx
:0040461C 8845EC                  mov byte ptr [ebp-14], al
:0040461F 8B45F8                  mov eax, dword ptr [ebp-08]
:00404622 33D2                    xor edx, edx
:00404624 F775FC                  div [ebp-04]
:00404627 33D2                    xor edx, edx
:00404629 B964000000              mov ecx, 00000064
:0040462E F7F1                    div ecx
:00404630 83FA32                  cmp edx, 00000032
:00404633 7209                    jb 0040463E
:00404635 8A55EC                  mov dl, byte ptr [ebp-14]
:00404638 80C201                  add dl, 01
:0040463B 8855EC                  mov byte ptr [ebp-14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404600(C), :00404633(C)
|
:0040463E 837D0800                cmp dword ptr [ebp+08], 00000000
:00404642 742D                    je 00404671
:00404644 8B45F0                  mov eax, dword ptr [ebp-10]
:00404647 25FF000000              and eax, 000000FF
:0040464C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040464F 81E1FF000000            and ecx, 000000FF
:00404655 3BC1                    cmp eax, ecx
:00404657 7E18                    jle 00404671
:00404659 8B55EC                  mov edx, dword ptr [ebp-14]
:0040465C 81E2FF000000            and edx, 000000FF
:00404662 8B45F0                  mov eax, dword ptr [ebp-10]
:00404665 25FF000000              and eax, 000000FF
:0040466A 03D0                    add edx, eax
:0040466C D1EA                    shr edx, 1
:0040466E 8855EC                  mov byte ptr [ebp-14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404642(C), :00404657(C)
|
:00404671 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00404674 81E1FF000000            and ecx, 000000FF
:0040467A 85C9                    test ecx, ecx
:0040467C 7F04                    jg 00404682
:0040467E C645EC01                mov [ebp-14], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040467C(C)
|
:00404682 8A45EC                  mov al, byte ptr [ebp-14]
:00404685 8BE5                    mov esp, ebp
:00404687 5D                      pop ebp
:00404688 C3                      ret


:00404689 CC                      int 03
:0040468A CC                      int 03
:0040468B CC                      int 03
:0040468C CC                      int 03
:0040468D CC                      int 03
:0040468E CC                      int 03
:0040468F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401B7E   , :00401BF8   , :00401CA3   , :00417E01   , :00417E1A   
|:0041AAD7   , :0041C02C   , :0041C5F4   , :00430D61   , :00430F9D   
|:004321F4   , :00432A59   , :00432B2F   , :00432DB9   , :00432EC1   
|:0043300B   , :004331DB   , :00439E04   , :00455C39   , :0045CCA6   
|:0045CFCE   , :0045D01B   , :0045D525   , :0045D6A5   , :0045EADA   
|
:00404690 55                      push ebp
:00404691 8BEC                    mov ebp, esp
:00404693 51                      push ecx
:00404694 894DFC                  mov dword ptr [ebp-04], ecx
:00404697 8B45FC                  mov eax, dword ptr [ebp-04]
:0040469A 8A4026                  mov al, byte ptr [eax+26]
:0040469D 8BE5                    mov esp, ebp
:0040469F 5D                      pop ebp
:004046A0 C3                      ret


:004046A1 CC                      int 03
:004046A2 CC                      int 03
:004046A3 CC                      int 03
:004046A4 CC                      int 03
:004046A5 CC                      int 03
:004046A6 CC                      int 03
:004046A7 CC                      int 03
:004046A8 CC                      int 03
:004046A9 CC                      int 03
:004046AA CC                      int 03
:004046AB CC                      int 03
:004046AC CC                      int 03
:004046AD CC                      int 03
:004046AE CC                      int 03
:004046AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00401B67   , :00405F73   , :00415BB2   , :00415C3F   , :0041719E   
|:004171EE   , :00419581   , :00419F13   , :0041AB37   , :0041C08C   
|:0041C654   , :0041E59E   , :0045B7AF   , :0045B849   , :0045C702   
|:0045CDD7   , :0045CF6E   , :0045D8E2   , :0045DC56   , :0045EB3A   
|
:004046B0 55                      push ebp
:004046B1 8BEC                    mov ebp, esp
:004046B3 51                      push ecx
:004046B4 894DFC                  mov dword ptr [ebp-04], ecx
:004046B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004046BA 8A4028                  mov al, byte ptr [eax+28]
:004046BD 8BE5                    mov esp, ebp
:004046BF 5D                      pop ebp
:004046C0 C3                      ret


:004046C1 CC                      int 03
:004046C2 CC                      int 03
:004046C3 CC                      int 03
:004046C4 CC                      int 03
:004046C5 CC                      int 03
:004046C6 CC                      int 03
:004046C7 CC                      int 03
:004046C8 CC                      int 03
:004046C9 CC                      int 03
:004046CA CC                      int 03
:004046CB CC                      int 03
:004046CC CC                      int 03
:004046CD CC                      int 03
:004046CE CC                      int 03
:004046CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402167   , :00403084   , :0040310E   , :00403173   
|
:004046D0 55                      push ebp
:004046D1 8BEC                    mov ebp, esp
:004046D3 51                      push ecx
:004046D4 894DFC                  mov dword ptr [ebp-04], ecx
:004046D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004046DA 034508                  add eax, dword ptr [ebp+08]
:004046DD 8A400D                  mov al, byte ptr [eax+0D]
:004046E0 8BE5                    mov esp, ebp
:004046E2 5D                      pop ebp
:004046E3 C20400                  ret 0004


:004046E6 CC                      int 03
:004046E7 CC                      int 03
:004046E8 CC                      int 03
:004046E9 CC                      int 03
:004046EA CC                      int 03
:004046EB CC                      int 03
:004046EC CC                      int 03
:004046ED CC                      int 03
:004046EE CC                      int 03
:004046EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402580   , :0041789C   , :0041AB89   , :0041AFE8   , :0041C0DE   
|:0041C531   , :0041C6A6   , :0041CAF9   , :0045B9F4   , :0045EB8C   
|:0045EFDF   
|
:004046F0 55                      push ebp
:004046F1 8BEC                    mov ebp, esp
:004046F3 51                      push ecx
:004046F4 894DFC                  mov dword ptr [ebp-04], ecx
:004046F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004046FA 8A402C                  mov al, byte ptr [eax+2C]
:004046FD 8BE5                    mov esp, ebp
:004046FF 5D                      pop ebp
:00404700 C3                      ret


:00404701 CC                      int 03
:00404702 CC                      int 03
:00404703 CC                      int 03
:00404704 CC                      int 03
:00404705 CC                      int 03
:00404706 CC                      int 03
:00404707 CC                      int 03
:00404708 CC                      int 03
:00404709 CC                      int 03
:0040470A CC                      int 03
:0040470B CC                      int 03
:0040470C CC                      int 03
:0040470D CC                      int 03
:0040470E CC                      int 03
:0040470F CC                      int 03

* Referenced by a CALL at Addresses:
|:004013D2   , :00401733   , :004017F0   , :00401CDA   , :004020D7   
|:00402BA0   , :00402C27   , :00403006   , :00403CBE   , :00403D03   
|:00403F81   , :00404104   , :00404153   , :00404251   , :004042A0   
|:00415DB4   , :004193A7   , :00446CC0   , :00446E85   , :00446EB7   
|:00451F4D   , :00452D90   , :004651A9   , :004652B9   , :00465F8B   
|:0046715A   
|
:00404710 55                      push ebp
:00404711 8BEC                    mov ebp, esp
:00404713 51                      push ecx
:00404714 894DFC                  mov dword ptr [ebp-04], ecx
:00404717 8B45FC                  mov eax, dword ptr [ebp-04]
:0040471A 33C9                    xor ecx, ecx
:0040471C 668B08                  mov cx, word ptr [eax]
:0040471F 8BC1                    mov eax, ecx
:00404721 80E40F                  and ah, 0F
:00404724 8BE5                    mov esp, ebp
:00404726 5D                      pop ebp
:00404727 C3                      ret


:00404728 CC                      int 03
:00404729 CC                      int 03
:0040472A CC                      int 03
:0040472B CC                      int 03
:0040472C CC                      int 03
:0040472D CC                      int 03
:0040472E CC                      int 03
:0040472F CC                      int 03

* Referenced by a CALL at Addresses:
|:004025ED   , :004027CC   , :00417A7E   , :00417E9B   , :00417EB4   
|:004187B6   , :0041AD3A   , :0041C28F   , :0041C857   , :0045BA27   
|:0045ED3D   
|
:00404730 55                      push ebp
:00404731 8BEC                    mov ebp, esp
:00404733 51                      push ecx
:00404734 894DFC                  mov dword ptr [ebp-04], ecx
:00404737 8B45FC                  mov eax, dword ptr [ebp-04]
:0040473A 8A402D                  mov al, byte ptr [eax+2D]
:0040473D 8BE5                    mov esp, ebp
:0040473F 5D                      pop ebp
:00404740 C3                      ret


:00404741 CC                      int 03
:00404742 CC                      int 03
:00404743 CC                      int 03
:00404744 CC                      int 03
:00404745 CC                      int 03
:00404746 CC                      int 03
:00404747 CC                      int 03
:00404748 CC                      int 03
:00404749 CC                      int 03
:0040474A CC                      int 03
:0040474B CC                      int 03
:0040474C CC                      int 03
:0040474D CC                      int 03
:0040474E CC                      int 03
:0040474F CC                      int 03

* Referenced by a CALL at Address:
|:00401E75   
|
:00404750 55                      push ebp
:00404751 8BEC                    mov ebp, esp
:00404753 51                      push ecx
:00404754 894DFC                  mov dword ptr [ebp-04], ecx
:00404757 8B45FC                  mov eax, dword ptr [ebp-04]
:0040475A 8A4030                  mov al, byte ptr [eax+30]
:0040475D 8BE5                    mov esp, ebp
:0040475F 5D                      pop ebp
:00404760 C3                      ret


:00404761 CC                      int 03
:00404762 CC                      int 03
:00404763 CC                      int 03
:00404764 CC                      int 03
:00404765 CC                      int 03
:00404766 CC                      int 03
:00404767 CC                      int 03
:00404768 CC                      int 03
:00404769 CC                      int 03
:0040476A CC                      int 03
:0040476B CC                      int 03
:0040476C CC                      int 03
:0040476D CC                      int 03
:0040476E CC                      int 03
:0040476F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401022   , :004013F5   , :00401C48   , :00401DFE   , :00402482   
|:00417531   , :0041AC78   , :0041C1CD   , :0041C795   , :0042FC95   
|:0043C6F4   , :0044C2F1   , :0044C591   , :00451423   , :0045BA5A   
|:0045EC7B   
|
:00404770 55                      push ebp
:00404771 8BEC                    mov ebp, esp
:00404773 51                      push ecx
:00404774 894DFC                  mov dword ptr [ebp-04], ecx
:00404777 8B45FC                  mov eax, dword ptr [ebp-04]
:0040477A 8A4032                  mov al, byte ptr [eax+32]
:0040477D 8BE5                    mov esp, ebp
:0040477F 5D                      pop ebp
:00404780 C3                      ret


:00404781 CC                      int 03
:00404782 CC                      int 03
:00404783 CC                      int 03
:00404784 CC                      int 03
:00404785 CC                      int 03
:00404786 CC                      int 03
:00404787 CC                      int 03
:00404788 CC                      int 03
:00404789 CC                      int 03
:0040478A CC                      int 03
:0040478B CC                      int 03
:0040478C CC                      int 03
:0040478D CC                      int 03
:0040478E CC                      int 03
:0040478F CC                      int 03

* Referenced by a CALL at Addresses:
|:00402872   , :0042A933   , :004323BF   , :0043268E   , :00432870   
|:00432CA1   , :0044D976   , :0045CFEF   
|
:00404790 55                      push ebp
:00404791 8BEC                    mov ebp, esp
:00404793 51                      push ecx
:00404794 894DFC                  mov dword ptr [ebp-04], ecx
:00404797 8B45FC                  mov eax, dword ptr [ebp-04]
:0040479A 8A402E                  mov al, byte ptr [eax+2E]
:0040479D 8BE5                    mov esp, ebp
:0040479F 5D                      pop ebp
:004047A0 C3                      ret


:004047A1 CC                      int 03
:004047A2 CC                      int 03
:004047A3 CC                      int 03
:004047A4 CC                      int 03
:004047A5 CC                      int 03
:004047A6 CC                      int 03
:004047A7 CC                      int 03
:004047A8 CC                      int 03
:004047A9 CC                      int 03
:004047AA CC                      int 03
:004047AB CC                      int 03
:004047AC CC                      int 03
:004047AD CC                      int 03
:004047AE CC                      int 03
:004047AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402054   , :0042BD98   , :00433360   , :00458899   
|
:004047B0 55                      push ebp
:004047B1 8BEC                    mov ebp, esp
:004047B3 51                      push ecx
:004047B4 894DFC                  mov dword ptr [ebp-04], ecx
:004047B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004047BA 8A4D08                  mov cl, byte ptr [ebp+08]
:004047BD 884832                  mov byte ptr [eax+32], cl
:004047C0 8BE5                    mov esp, ebp
:004047C2 5D                      pop ebp
:004047C3 C20400                  ret 0004


:004047C6 CC                      int 03
:004047C7 CC                      int 03
:004047C8 CC                      int 03
:004047C9 CC                      int 03
:004047CA CC                      int 03
:004047CB CC                      int 03
:004047CC CC                      int 03
:004047CD CC                      int 03
:004047CE CC                      int 03
:004047CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00401D25   , :004020E2   , :00403C65   , :00403D27   , :00404599   
|:004045E8   , :00406D63   , :00406D94   , :0041170A   , :00417594   
|:0042BDCF   , :0042BEAC   , :0042D019   , :0042F8C5   , :0043BF5A   
|:0043BF76   , :0044C360   , :00451466   , :00451C1D   , :00451C70   
|:0045584F   , :004559E1   , :0045697B   , :00467E8D   
|
:004047D0 55                      push ebp
:004047D1 8BEC                    mov ebp, esp
:004047D3 51                      push ecx
:004047D4 894DFC                  mov dword ptr [ebp-04], ecx
:004047D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004047DA 8A4033                  mov al, byte ptr [eax+33]
:004047DD 8BE5                    mov esp, ebp
:004047DF 5D                      pop ebp
:004047E0 C3                      ret


:004047E1 CC                      int 03
:004047E2 CC                      int 03
:004047E3 CC                      int 03
:004047E4 CC                      int 03
:004047E5 CC                      int 03
:004047E6 CC                      int 03
:004047E7 CC                      int 03
:004047E8 CC                      int 03
:004047E9 CC                      int 03
:004047EA CC                      int 03
:004047EB CC                      int 03
:004047EC CC                      int 03
:004047ED CC                      int 03
:004047EE CC                      int 03
:004047EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00401DE5   , :00401E1B   , :00402757   , :00402798   , :004027EB   
|:0040283E   , :00402891   , :0040A812   , :004171D4   , :00418E5E   
|:00419BF2   , :00419FD9   , :0041A3AF   , :0041A6B1   , :0041F03F   
|:0041F1BE   , :0042A8F2   , :0042C06C   , :004314B1   , :00431E7F   
|:0043C26C   , :0043CB41   , :00448D8C   , :00449E84   , :0045118D   
|:00455D22   , :0045D755   , :0045E5BF   
|
:004047F0 55                      push ebp
:004047F1 8BEC                    mov ebp, esp
:004047F3 51                      push ecx
:004047F4 894DFC                  mov dword ptr [ebp-04], ecx
:004047F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004047FA 8A4035                  mov al, byte ptr [eax+35]
:004047FD 8BE5                    mov esp, ebp
:004047FF 5D                      pop ebp
:00404800 C3                      ret


:00404801 CC                      int 03
:00404802 CC                      int 03
:00404803 CC                      int 03
:00404804 CC                      int 03
:00404805 CC                      int 03
:00404806 CC                      int 03
:00404807 CC                      int 03
:00404808 CC                      int 03
:00404809 CC                      int 03
:0040480A CC                      int 03
:0040480B CC                      int 03
:0040480C CC                      int 03
:0040480D CC                      int 03
:0040480E CC                      int 03
:0040480F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401E24   , :00402774   , :004027B6   , :00402809   , :0040285C   
|:004028AF   , :0040A867   , :00417245   , :00417306   , :00418336   
|:00418E84   , :00419BC0   , :00419CF4   , :00419D43   , :00419DAB   
|:0041A3D8   , :0041A6D7   , :0041BD0F   , :0041DD15   , :0041EE37   
|:0042A91D   , :0043CB68   , :00455C15   , :0045C6CA   , :0045CBFB   
|:0045D0C4   , :0045D30F   , :0045D334   , :0045DB9A   , :0045E524   
|:0045E5E8   , :0045F0C8   , :0045F181   , :00465C1B   
|
:00404810 55                      push ebp
:00404811 8BEC                    mov ebp, esp
:00404813 51                      push ecx
:00404814 894DFC                  mov dword ptr [ebp-04], ecx
:00404817 8B4508                  mov eax, dword ptr [ebp+08]
:0040481A 25FF000000              and eax, 000000FF
:0040481F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404822 8A440136                mov al, byte ptr [ecx+eax+36]
:00404826 8BE5                    mov esp, ebp
:00404828 5D                      pop ebp
:00404829 C20400                  ret 0004


:0040482C CC                      int 03
:0040482D CC                      int 03
:0040482E CC                      int 03
:0040482F CC                      int 03

* Referenced by a CALL at Addresses:
|:004029B6   , :00402A78   , :0040A889   , :0040A8A9   , :004182BA   
|:004182ED   , :00419B10   , :00419E28   , :0041A1A3   , :0041BD7E   
|:0041BD98   , :0041ECE1   , :0041EEBE   , :0041F120   , :0041F280   
|:0042C09A   , :00431FA9   , :0043233E   , :00455C5D   , :0045D77E   
|
:00404830 55                      push ebp
:00404831 8BEC                    mov ebp, esp
:00404833 51                      push ecx
:00404834 894DFC                  mov dword ptr [ebp-04], ecx
:00404837 8B4508                  mov eax, dword ptr [ebp+08]
:0040483A 25FF000000              and eax, 000000FF
:0040483F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404842 8A550C                  mov dl, byte ptr [ebp+0C]
:00404845 88540136                mov byte ptr [ecx+eax+36], dl
:00404849 8B45FC                  mov eax, dword ptr [ebp-04]
:0040484C 33C9                    xor ecx, ecx
:0040484E 8A4835                  mov cl, byte ptr [eax+35]
:00404851 8B5508                  mov edx, dword ptr [ebp+08]
:00404854 81E2FF000000            and edx, 000000FF
:0040485A 3BCA                    cmp ecx, edx
:0040485C 7507                    jne 00404865
:0040485E 8B45FC                  mov eax, dword ptr [ebp-04]
:00404861 C64035FF                mov [eax+35], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040485C(C)
|
:00404865 8BE5                    mov esp, ebp
:00404867 5D                      pop ebp
:00404868 C20800                  ret 0008


:0040486B CC                      int 03
:0040486C CC                      int 03
:0040486D CC                      int 03
:0040486E CC                      int 03
:0040486F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040154C   , :004019C3   , :004095E9   , :0040D42C   , :0042AD64   
|:0042AF94   , :0042B211   , :0042B2C7   , :0042B2EA   , :0042B330   
|:0042B487   , :0042B49B   , :0042D07E   , :0042F4E9   , :0043031A   
|:00430373   , :00430479   , :004308EC   , :004308FF   , :00430924   
|:00430938   , :00430AA3   , :00430ACE   , :00430AFD   , :00430B27   
|:00430CB5   , :00430CEC   , :00430D17   , :00430D39   , :00430EB0   
|:00432159   , :004325EE   , :00433FBE   , :00433FD4   , :00433FEF   
|:00434E3A   , :00439133   , :00439140   , :00439159   , :00439169   
|:00439177   , :00439190   , :00439223   , :00439230   , :0043923B   
|:00439253   , :0043950E   , :0043965C   , :0043967F   , :004397E8   
|:00439947   , :0043BCF6   , :0043C6C3   , :0043D3B5   , :0043D3CC   
|:004423C0   , :004424C7   , :004425C3   , :004425EB   , :0044261D   
|:0044263B   , :00448862   , :004488D1   , :00448EB5   , :00448F01   
|:0044918D   , :00449214   , :0044AB14   , :0044AB67   , :0044B408   
|:0044B5C6   , :0044B68F   , :0044B95A   , :0044BA2F   , :0044BC0D   
|:0044BC7B   , :0044C381   , :0044C3A2   , :0044C3B5   , :0044C3E1   
|:0044C403   , :0044C6CC   , :0044C6ED   , :0044C700   , :0044C72C   
|:0044C74E   , :0045768D   , :004576A3   , :004576FF   , :004597FC   
|:00459BAA   , :00459BCE   , :00459BFC   , :00459C1B   , :0045A0D1   
|:0045A42F   , :0045A45D   , :00465048   
|
:00404870 55                      push ebp
:00404871 8BEC                    mov ebp, esp
:00404873 51                      push ecx
:00404874 894DFC                  mov dword ptr [ebp-04], ecx
:00404877 8B45FC                  mov eax, dword ptr [ebp-04]
:0040487A 8B08                    mov ecx, dword ptr [eax]
:0040487C 6BC970                  imul ecx, 00000070
:0040487F 81C198224900            add ecx, 00492298
:00404885 E806000000              call 00404890
:0040488A 8BE5                    mov esp, ebp
:0040488C 5D                      pop ebp
:0040488D C3                      ret


:0040488E CC                      int 03
:0040488F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404885   , :00446DEF   , :00447413   , :004514A0   , :004579CB   
|:00457A29   
|
:00404890 55                      push ebp
:00404891 8BEC                    mov ebp, esp
:00404893 51                      push ecx
:00404894 894DFC                  mov dword ptr [ebp-04], ecx
:00404897 8B45FC                  mov eax, dword ptr [ebp-04]
:0040489A 8B4068                  mov eax, dword ptr [eax+68]
:0040489D 8BE5                    mov esp, ebp
:0040489F 5D                      pop ebp
:004048A0 C3                      ret


:004048A1 CC                      int 03
:004048A2 CC                      int 03
:004048A3 CC                      int 03
:004048A4 CC                      int 03
:004048A5 CC                      int 03
:004048A6 CC                      int 03
:004048A7 CC                      int 03
:004048A8 CC                      int 03
:004048A9 CC                      int 03
:004048AA CC                      int 03
:004048AB CC                      int 03
:004048AC CC                      int 03
:004048AD CC                      int 03
:004048AE CC                      int 03
:004048AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00401583   , :00401A4B   , :00409605   , :0042B541   , :0042B599   
|:0042B5B2   , :0042B700   , :0042D0BD   , :0042F46F   , :0042F48F   
|:0042FE86   , :0042FEA9   , :0043004B   , :00430159   , :004304FB   
|:00430F31   , :00430F53   , :00430F75   , :004310EB   , :00432190   
|:00432626   , :00433477   , :00433968   , :00435653   , :00435675   
|:00435690   , :004356AD   , :004358C6   , :00437727   , :00437753   
|:00437867   , :004378AB   , :004378F4   , :00437920   , :0043BB96   
|:0043BBB7   , :0043BBD8   , :0043C6DB   , :004423FD   , :004424E1   
|:004426EA   , :00442712   , :00442744   , :00442762   , :0044AAD5   
|:0044B8BD   , :0044B8D8   , :0044BACD   , :0044C46F   , :0044C49B   
|:0044C4BD   , :0044C7D9   , :0044C805   , :0044C827   , :00453D28   
|:004577C3   , :004577D9   , :00457832   , :0045A101   , :0045A4A2   
|:0045A4D0   , :00465062   
|
:004048B0 55                      push ebp
:004048B1 8BEC                    mov ebp, esp
:004048B3 51                      push ecx
:004048B4 894DFC                  mov dword ptr [ebp-04], ecx
:004048B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004048BA 8B08                    mov ecx, dword ptr [eax]
:004048BC 6BC970                  imul ecx, 00000070
:004048BF 81C198224900            add ecx, 00492298
:004048C5 E806000000              call 004048D0
:004048CA 8BE5                    mov esp, ebp
:004048CC 5D                      pop ebp
:004048CD C3                      ret


:004048CE CC                      int 03
:004048CF CC                      int 03

* Referenced by a CALL at Addresses:
|:004048C5   , :0045150A   , :00457A7A   , :00457AD8   
|
:004048D0 55                      push ebp
:004048D1 8BEC                    mov ebp, esp
:004048D3 51                      push ecx
:004048D4 894DFC                  mov dword ptr [ebp-04], ecx
:004048D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004048DA 8B406C                  mov eax, dword ptr [eax+6C]
:004048DD 8BE5                    mov esp, ebp
:004048DF 5D                      pop ebp
:004048E0 C3                      ret


:004048E1 CC                      int 03
:004048E2 CC                      int 03
:004048E3 CC                      int 03
:004048E4 CC                      int 03
:004048E5 CC                      int 03
:004048E6 CC                      int 03
:004048E7 CC                      int 03
:004048E8 CC                      int 03
:004048E9 CC                      int 03
:004048EA CC                      int 03
:004048EB CC                      int 03
:004048EC CC                      int 03
:004048ED CC                      int 03
:004048EE CC                      int 03
:004048EF CC                      int 03

* Referenced by a CALL at Addresses:
|:004045C5   , :0040CE75   , :0041092F   , :0042D496   , :0042D4D6   
|:0042D516   , :0043BFA1   , :00446DD5   , :004473F9   , :00455141   
|:00455D08   , :00457967   , :00458FE3   , :00459446   , :0045A5C5   
|
:004048F0 55                      push ebp
:004048F1 8BEC                    mov ebp, esp
:004048F3 51                      push ecx
:004048F4 894DFC                  mov dword ptr [ebp-04], ecx
:004048F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004048FA 8A4031                  mov al, byte ptr [eax+31]
:004048FD 8BE5                    mov esp, ebp
:004048FF 5D                      pop ebp
:00404900 C3                      ret


:00404901 CC                      int 03
:00404902 CC                      int 03
:00404903 CC                      int 03
:00404904 CC                      int 03
:00404905 CC                      int 03
:00404906 CC                      int 03
:00404907 CC                      int 03
:00404908 CC                      int 03
:00404909 CC                      int 03
:0040490A CC                      int 03
:0040490B CC                      int 03
:0040490C CC                      int 03
:0040490D CC                      int 03
:0040490E CC                      int 03
:0040490F CC                      int 03
:00404910 55                      push ebp
:00404911 8BEC                    mov ebp, esp
:00404913 E807000000              call 0040491F
:00404918 E811000000              call 0040492E
:0040491D 5D                      pop ebp
:0040491E C3                      ret



* Referenced by a CALL at Address:
|:00404913   
|
:0040491F 55                      push ebp
:00404920 8BEC                    mov ebp, esp
:00404922 B9B0114800              mov ecx, 004811B0
:00404927 E8540D0000              call 00405680
:0040492C 5D                      pop ebp
:0040492D C3                      ret



* Referenced by a CALL at Address:
|:00404918   
|
:0040492E 55                      push ebp
:0040492F 8BEC                    mov ebp, esp
:00404931 6840494000              push 00404940
:00404936 E8358B0600              call 0046D470
:0040493B 83C404                  add esp, 00000004
:0040493E 5D                      pop ebp
:0040493F C3                      ret


:00404940 55                      push ebp
:00404941 8BEC                    mov ebp, esp
:00404943 B9B0114800              mov ecx, 004811B0
:00404948 E853130200              call 00425CA0
:0040494D 5D                      pop ebp
:0040494E C3                      ret



* Referenced by a CALL at Address:
|:00414AC7   
|
:0040494F 55                      push ebp
:00404950 8BEC                    mov ebp, esp
:00404952 83EC38                  sub esp, 00000038
:00404955 C745FC01000000          mov [ebp-04], 00000001
:0040495C B9B0114800              mov ecx, 004811B0
:00404961 E86AAD0200              call 0042F6D0
:00404966 85C0                    test eax, eax
:00404968 745D                    je 004049C7
:0040496A B9B0114800              mov ecx, 004811B0
:0040496F E85CAD0200              call 0042F6D0
:00404974 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00404975 FF15E0864B00            Call dword ptr [004B86E0]
:0040497B 85C0                    test eax, eax
:0040497D 7415                    je 00404994
:0040497F 6A00                    push 00000000
:00404981 B9B0114800              mov ecx, 004811B0
:00404986 E845AD0200              call 0042F6D0
:0040498B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0040498C FF15E4864B00            Call dword ptr [004B86E4]
:00404992 EB2B                    jmp 004049BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040497D(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00404994 6A05                    push 00000005
:00404996 B9B0114800              mov ecx, 004811B0
:0040499B E830AD0200              call 0042F6D0
:004049A0 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004049A1 FF15E4864B00            Call dword ptr [004B86E4]
:004049A7 B9B0114800              mov ecx, 004811B0
:004049AC E86FAE0200              call 0042F820
:004049B1 50                      push eax
:004049B2 B9B0114800              mov ecx, 004811B0
:004049B7 E85E050000              call 00404F1A
:004049BC 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404992(U)
|
:004049BF 8B45FC                  mov eax, dword ptr [ebp-04]
:004049C2 E942010000              jmp 00404B09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404968(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004049C7 C745D003000000          mov [ebp-30], 00000003
:004049CE C745D40D4B4000          mov [ebp-2C], 00404B0D
:004049D5 C745D800000000          mov [ebp-28], 00000000
:004049DC C745DC00000000          mov [ebp-24], 00000000
:004049E3 A1300E4B00              mov eax, dword ptr [004B0E30]
:004049E8 8945E0                  mov dword ptr [ebp-20], eax
:004049EB 6889000000              push 00000089
:004049F0 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004049F6 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:004049F7 FF15E8864B00            Call dword ptr [004B86E8]
:004049FD 8945E4                  mov dword ptr [ebp-1C], eax
:00404A00 68007F0000              push 00007F00
:00404A05 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00404A07 FF15EC864B00            Call dword ptr [004B86EC]
:00404A0D 8945E8                  mov dword ptr [ebp-18], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00404A10 C745EC05000000          mov [ebp-14], 00000005
:00404A17 C745F000000000          mov [ebp-10], 00000000

* Possible StringData Ref from Data Obj ->"Chrono"
                                  |
:00404A1E C745F4B8624700          mov [ebp-0C], 004762B8
:00404A25 8D55D0                  lea edx, dword ptr [ebp-30]
:00404A28 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00404A29 FF15F0864B00            Call dword ptr [004B86F0]
:00404A2F 25FFFF0000              and eax, 0000FFFF
:00404A34 85C0                    test eax, eax
:00404A36 7507                    jne 00404A3F
:00404A38 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A36(C)
|
:00404A3F 6A00                    push 00000000
:00404A41 A1300E4B00              mov eax, dword ptr [004B0E30]
:00404A46 50                      push eax
:00404A47 6A00                    push 00000000
:00404A49 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00404A4F 51                      push ecx
:00404A50 6890010000              push 00000190
:00404A55 687C010000              push 0000017C
:00404A5A 6A00                    push 00000000
:00404A5C 6A00                    push 00000000
:00404A5E 680000E880              push 80E80000

* Possible StringData Ref from Data Obj ->"ѰO"
                                  |
:00404A63 68C0624700              push 004762C0

* Possible StringData Ref from Data Obj ->"Chrono"
                                  |
:00404A68 68C8624700              push 004762C8
:00404A6D 6A00                    push 00000000

* Reference To: USER32.CreateWindowExA, Ord:0055h
                                  |
:00404A6F FF15F4864B00            Call dword ptr [004B86F4]
:00404A75 8945F8                  mov dword ptr [ebp-08], eax
:00404A78 8B55F8                  mov edx, dword ptr [ebp-08]
:00404A7B 52                      push edx
:00404A7C B9B0114800              mov ecx, 004811B0
:00404A81 E8DAE30400              call 00452E60
:00404A86 B9B0114800              mov ecx, 004811B0
:00404A8B E840AC0200              call 0042F6D0
:00404A90 85C0                    test eax, eax
:00404A92 746B                    je 00404AFF
:00404A94 C745C800000000          mov [ebp-38], 00000000
:00404A9B C745CC00000000          mov [ebp-34], 00000000
:00404AA2 8D45C8                  lea eax, dword ptr [ebp-38]
:00404AA5 50                      push eax
:00404AA6 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00404AAC 51                      push ecx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00404AAD FF15F8864B00            Call dword ptr [004B86F8]
:00404AB3 6A01                    push 00000001
:00404AB5 6890010000              push 00000190
:00404ABA 687C010000              push 0000017C
:00404ABF 8B55CC                  mov edx, dword ptr [ebp-34]
:00404AC2 83C228                  add edx, 00000028
:00404AC5 52                      push edx
:00404AC6 8B45C8                  mov eax, dword ptr [ebp-38]
:00404AC9 50                      push eax
:00404ACA B9B0114800              mov ecx, 004811B0
:00404ACF E8FCAB0200              call 0042F6D0
:00404AD4 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00404AD5 FF15FC864B00            Call dword ptr [004B86FC]
:00404ADB 6A01                    push 00000001
:00404ADD B9B0114800              mov ecx, 004811B0
:00404AE2 E8E9AB0200              call 0042F6D0
:00404AE7 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00404AE8 FF15E4864B00            Call dword ptr [004B86E4]
:00404AEE 6A00                    push 00000000
:00404AF0 B9B0114800              mov ecx, 004811B0
:00404AF5 E820040000              call 00404F1A
:00404AFA 8945FC                  mov dword ptr [ebp-04], eax
:00404AFD EB07                    jmp 00404B06

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A92(C)
|
:00404AFF C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404AFD(U)
|
:00404B06 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004049C2(U)
|
:00404B09 8BE5                    mov esp, ebp
:00404B0B 5D                      pop ebp
:00404B0C C3                      ret


:00404B0D 55                      push ebp
:00404B0E 8BEC                    mov ebp, esp
:00404B10 51                      push ecx
:00404B11 8B450C                  mov eax, dword ptr [ebp+0C]
:00404B14 8945FC                  mov dword ptr [ebp-04], eax
:00404B17 837DFC0F                cmp dword ptr [ebp-04], 0000000F
:00404B1B 7711                    ja 00404B2E
:00404B1D 837DFC0F                cmp dword ptr [ebp-04], 0000000F
:00404B21 7468                    je 00404B8B
:00404B23 837DFC02                cmp dword ptr [ebp-04], 00000002
:00404B27 741F                    je 00404B48
:00404B29 E982000000              jmp 00404BB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B1B(C)
|
:00404B2E 837DFC10                cmp dword ptr [ebp-04], 00000010
:00404B32 7416                    je 00404B4A
:00404B34 817DFC12010000          cmp dword ptr [ebp-04], 00000112
:00404B3B 7420                    je 00404B5D
:00404B3D 817DFC15010000          cmp dword ptr [ebp-04], 00000115
:00404B44 7419                    je 00404B5F
:00404B46 EB68                    jmp 00404BB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B27(C)
|
:00404B48 EB7E                    jmp 00404BC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B32(C)
|
:00404B4A 6A00                    push 00000000
:00404B4C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404B4F 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00404B50 FF15E4864B00            Call dword ptr [004B86E4]
:00404B56 33C0                    xor eax, eax
:00404B58 E983000000              jmp 00404BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B3B(C)
|
:00404B5D EB69                    jmp 00404BC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B44(C)
|
:00404B5F 8B5514                  mov edx, dword ptr [ebp+14]
:00404B62 52                      push edx
:00404B63 8B4510                  mov eax, dword ptr [ebp+10]
:00404B66 50                      push eax
:00404B67 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404B6A 51                      push ecx
:00404B6B B9B0114800              mov ecx, 004811B0
:00404B70 E841090000              call 004054B6
:00404B75 8B5514                  mov edx, dword ptr [ebp+14]
:00404B78 52                      push edx
:00404B79 8B4510                  mov eax, dword ptr [ebp+10]
:00404B7C 50                      push eax

* Possible Reference to String Resource ID=00015: ""
                                  |
:00404B7D 6A0F                    push 0000000F
:00404B7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404B82 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00404B83 FF15D8864B00            Call dword ptr [004B86D8]
:00404B89 EB3D                    jmp 00404BC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B21(C)
|
:00404B8B 8B5508                  mov edx, dword ptr [ebp+08]
:00404B8E 52                      push edx
:00404B8F B9B0114800              mov ecx, 004811B0
:00404B94 E888020000              call 00404E21
:00404B99 B9B0114800              mov ecx, 004811B0
:00404B9E E87DAC0200              call 0042F820
:00404BA3 50                      push eax
:00404BA4 B9B0114800              mov ecx, 004811B0
:00404BA9 E86C030000              call 00404F1A
:00404BAE EB18                    jmp 00404BC8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404B29(U), :00404B46(U)
|
:00404BB0 8B4514                  mov eax, dword ptr [ebp+14]
:00404BB3 50                      push eax
:00404BB4 8B4D10                  mov ecx, dword ptr [ebp+10]
:00404BB7 51                      push ecx
:00404BB8 8B550C                  mov edx, dword ptr [ebp+0C]
:00404BBB 52                      push edx
:00404BBC 8B4508                  mov eax, dword ptr [ebp+08]
:00404BBF 50                      push eax

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00404BC0 FF15DC864B00            Call dword ptr [004B86DC]
:00404BC6 EB18                    jmp 00404BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404B48(U), :00404B5D(U), :00404B89(U), :00404BAE(U)
|
:00404BC8 8B4D14                  mov ecx, dword ptr [ebp+14]
:00404BCB 51                      push ecx
:00404BCC 8B5510                  mov edx, dword ptr [ebp+10]
:00404BCF 52                      push edx
:00404BD0 8B450C                  mov eax, dword ptr [ebp+0C]
:00404BD3 50                      push eax
:00404BD4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404BD7 51                      push ecx
:00404BD8 E80C7E0600              call 0046C9E9
:00404BDD 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404B58(U), :00404BC6(U)
|
:00404BE0 8BE5                    mov esp, ebp
:00404BE2 5D                      pop ebp
:00404BE3 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0040DEF6   
|
:00404BE6 55                      push ebp
:00404BE7 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00404BE9 6AFF                    push FFFFFFFF
:00404BEB 6819374700              push 00473719
:00404BF0 64A100000000            mov eax, dword ptr fs:[00000000]
:00404BF6 50                      push eax
:00404BF7 64892500000000          mov dword ptr fs:[00000000], esp
:00404BFE 83EC20                  sub esp, 00000020
:00404C01 894DD4                  mov dword ptr [ebp-2C], ecx
:00404C04 A1D0624700              mov eax, dword ptr [004762D0]
:00404C09 8945E0                  mov dword ptr [ebp-20], eax
:00404C0C 8B0DD4624700            mov ecx, dword ptr [004762D4]
:00404C12 894DE4                  mov dword ptr [ebp-1C], ecx
:00404C15 668B15D8624700          mov dx, word ptr [004762D8]
:00404C1C 668955E8                mov word ptr [ebp-18], dx
:00404C20 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404C23 E8182C0000              call 00407840
:00404C28 C745FC00000000          mov [ebp-04], 00000000
:00404C2F C745F001000000          mov [ebp-10], 00000001

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00404C36 6A02                    push 00000002
:00404C38 8D45E0                  lea eax, dword ptr [ebp-20]
:00404C3B 50                      push eax
:00404C3C 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404C3F E80DB60000              call 00410251
:00404C44 8945F0                  mov dword ptr [ebp-10], eax
:00404C47 837DF000                cmp dword ptr [ebp-10], 00000000
:00404C4B 7522                    jne 00404C6F
:00404C4D 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404C50 E8B7B90000              call 0041060C
:00404C55 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00404C58 894DDC                  mov dword ptr [ebp-24], ecx
:00404C5B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00404C62 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404C65 E8D4B50000              call 0041023E
:00404C6A 8B45DC                  mov eax, dword ptr [ebp-24]
:00404C6D EB45                    jmp 00404CB4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C4B(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00404C6F 6A02                    push 00000002
:00404C71 6A00                    push 00000000
:00404C73 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404C76 E8EBB80000              call 00410566
:00404C7B 8B5508                  mov edx, dword ptr [ebp+08]
:00404C7E 52                      push edx
:00404C7F E81FD90500              call 004625A3
:00404C84 83C404                  add esp, 00000004
:00404C87 50                      push eax
:00404C88 8B4508                  mov eax, dword ptr [ebp+08]
:00404C8B 50                      push eax
:00404C8C 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404C8F E830B90000              call 004105C4
:00404C94 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404C97 E870B90000              call 0041060C
:00404C9C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00404C9F 894DD8                  mov dword ptr [ebp-28], ecx
:00404CA2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00404CA9 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404CAC E88DB50000              call 0041023E
:00404CB1 8B45D8                  mov eax, dword ptr [ebp-28]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C6D(U)
|
:00404CB4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00404CB7 64890D00000000          mov dword ptr fs:[00000000], ecx
:00404CBE 8BE5                    mov esp, ebp
:00404CC0 5D                      pop ebp
:00404CC1 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004112AD   , :00411A30   , :0041251B   
|
:00404CC4 55                      push ebp
:00404CC5 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00404CC7 6AFF                    push FFFFFFFF
:00404CC9 682C374700              push 0047372C
:00404CCE 64A100000000            mov eax, dword ptr fs:[00000000]
:00404CD4 50                      push eax
:00404CD5 64892500000000          mov dword ptr fs:[00000000], esp
:00404CDC 83EC34                  sub esp, 00000034
:00404CDF 894DC0                  mov dword ptr [ebp-40], ecx
:00404CE2 A1DC624700              mov eax, dword ptr [004762DC]
:00404CE7 8945C8                  mov dword ptr [ebp-38], eax
:00404CEA 8B0DE0624700            mov ecx, dword ptr [004762E0]
:00404CF0 894DCC                  mov dword ptr [ebp-34], ecx
:00404CF3 668B15E4624700          mov dx, word ptr [004762E4]
:00404CFA 668955D0                mov word ptr [ebp-30], dx
:00404CFE A0E6624700              mov al, byte ptr [004762E6]
:00404D03 8845D2                  mov byte ptr [ebp-2E], al
:00404D06 8B0DE8624700            mov ecx, dword ptr [004762E8]
:00404D0C 894DD4                  mov dword ptr [ebp-2C], ecx
:00404D0F 8B15EC624700            mov edx, dword ptr [004762EC]
:00404D15 8955D8                  mov dword ptr [ebp-28], edx
:00404D18 66A1F0624700            mov ax, word ptr [004762F0]
:00404D1E 668945DC                mov word ptr [ebp-24], ax
:00404D22 8B0DF4624700            mov ecx, dword ptr [004762F4]
:00404D28 894DE0                  mov dword ptr [ebp-20], ecx
:00404D2B 8B15F8624700            mov edx, dword ptr [004762F8]
:00404D31 8955E4                  mov dword ptr [ebp-1C], edx
:00404D34 66A1FC624700            mov ax, word ptr [004762FC]
:00404D3A 668945E8                mov word ptr [ebp-18], ax
:00404D3E 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404D41 E8FA2A0000              call 00407840
:00404D46 C745FC00000000          mov [ebp-04], 00000000
:00404D4D C745F001000000          mov [ebp-10], 00000001
:00404D54 8B4508                  mov eax, dword ptr [ebp+08]
:00404D57 25FF000000              and eax, 000000FF
:00404D5C 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00404D5D B90A000000              mov ecx, 0000000A
:00404D62 F7F9                    idiv ecx
:00404D64 83C230                  add edx, 00000030
:00404D67 8855D7                  mov byte ptr [ebp-29], dl
:00404D6A 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00404D6E 753B                    jne 00404DAB
:00404D70 8D55D4                  lea edx, dword ptr [ebp-2C]
:00404D73 52                      push edx
:00404D74 E83BB40000              call 004101B4
:00404D79 83C404                  add esp, 00000004
:00404D7C 50                      push eax
:00404D7D 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404D80 E8F2B80000              call 00410677
:00404D85 85C0                    test eax, eax
:00404D87 7420                    je 00404DA9
:00404D89 6A00                    push 00000000
:00404D8B B910414A00              mov ecx, 004A4110
:00404D90 E809E80000              call 0041359E
:00404D95 50                      push eax
:00404D96 8D45E0                  lea eax, dword ptr [ebp-20]
:00404D99 50                      push eax
:00404D9A 8D4DC8                  lea ecx, dword ptr [ebp-38]
:00404D9D 51                      push ecx
:00404D9E 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404DA1 E846B90000              call 004106EC
:00404DA6 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404D87(C)
|
:00404DA9 EB4E                    jmp 00404DF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404D6E(C)
|
:00404DAB 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00404DAF 7522                    jne 00404DD3
:00404DB1 6A00                    push 00000000
:00404DB3 B910414A00              mov ecx, 004A4110
:00404DB8 E8E1E70000              call 0041359E
:00404DBD 50                      push eax
:00404DBE 8D55E0                  lea edx, dword ptr [ebp-20]
:00404DC1 52                      push edx
:00404DC2 8D45D4                  lea eax, dword ptr [ebp-2C]
:00404DC5 50                      push eax
:00404DC6 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404DC9 E81EB90000              call 004106EC
:00404DCE 8945F0                  mov dword ptr [ebp-10], eax
:00404DD1 EB26                    jmp 00404DF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404DAF(C)
|
:00404DD3 837D0C02                cmp dword ptr [ebp+0C], 00000002
:00404DD7 7520                    jne 00404DF9
:00404DD9 6A00                    push 00000000
:00404DDB B910414A00              mov ecx, 004A4110
:00404DE0 E8B9E70000              call 0041359E
:00404DE5 50                      push eax
:00404DE6 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00404DE9 51                      push ecx
:00404DEA 8D55E0                  lea edx, dword ptr [ebp-20]
:00404DED 52                      push edx
:00404DEE 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404DF1 E8F6B80000              call 004106EC
:00404DF6 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404DA9(U), :00404DD1(U), :00404DD7(C)
|
:00404DF9 8B45F0                  mov eax, dword ptr [ebp-10]
:00404DFC 8945C4                  mov dword ptr [ebp-3C], eax
:00404DFF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00404E06 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404E09 E830B40000              call 0041023E
:00404E0E 8B45C4                  mov eax, dword ptr [ebp-3C]
:00404E11 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00404E14 64890D00000000          mov dword ptr fs:[00000000], ecx
:00404E1B 8BE5                    mov esp, ebp
:00404E1D 5D                      pop ebp
:00404E1E C20800                  ret 0008



* Referenced by a CALL at Address:
|:00404B94   
|
:00404E21 55                      push ebp
:00404E22 8BEC                    mov ebp, esp
:00404E24 83EC64                  sub esp, 00000064
:00404E27 894D9C                  mov dword ptr [ebp-64], ecx
:00404E2A 8D45F0                  lea eax, dword ptr [ebp-10]
:00404E2D 50                      push eax
:00404E2E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404E31 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00404E32 FF15C8864B00            Call dword ptr [004B86C8]
:00404E38 6A00                    push 00000000
:00404E3A 8D55F0                  lea edx, dword ptr [ebp-10]
:00404E3D 52                      push edx
:00404E3E 8B4508                  mov eax, dword ptr [ebp+08]
:00404E41 50                      push eax

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:00404E42 FF15CC864B00            Call dword ptr [004B86CC]
:00404E48 8D4DAC                  lea ecx, dword ptr [ebp-54]
:00404E4B 51                      push ecx
:00404E4C 8B5508                  mov edx, dword ptr [ebp+08]
:00404E4F 52                      push edx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:00404E50 FF15D0864B00            Call dword ptr [004B86D0]

* Possible Reference to Dialog: DialogID_014D 
                                  |
:00404E56 684D010000              push 0000014D
:00404E5B B910584800              mov ecx, 00485810
:00404E60 E8FBF70400              call 00454660
:00404E65 50                      push eax
:00404E66 E8C1F90000              call 0041482C
:00404E6B 83C408                  add esp, 00000008
:00404E6E 8945A4                  mov dword ptr [ebp-5C], eax
:00404E71 8B45AC                  mov eax, dword ptr [ebp-54]
:00404E74 50                      push eax

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:00404E75 FF15A0844B00            Call dword ptr [004B84A0]
:00404E7B 8945EC                  mov dword ptr [ebp-14], eax
:00404E7E 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00404E81 51                      push ecx
:00404E82 8B55EC                  mov edx, dword ptr [ebp-14]
:00404E85 52                      push edx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00404E86 FF159C844B00            Call dword ptr [004B849C]
:00404E8C C745A000000000          mov [ebp-60], 00000000
:00404E93 EB0B                    jmp 00404EA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404EF0(U)
|
:00404E95 8B45A0                  mov eax, dword ptr [ebp-60]
:00404E98 05C8000000              add eax, 000000C8
:00404E9D 8945A0                  mov dword ptr [ebp-60], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404E93(U)
|
:00404EA0 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00404EA3 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00404EA6 7D4A                    jge 00404EF2
:00404EA8 C745A800000000          mov [ebp-58], 00000000
:00404EAF EB0C                    jmp 00404EBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404EEE(U)
|
:00404EB1 8B55A8                  mov edx, dword ptr [ebp-58]
:00404EB4 81C240010000            add edx, 00000140
:00404EBA 8955A8                  mov dword ptr [ebp-58], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404EAF(U)
|
:00404EBD 8B45A8                  mov eax, dword ptr [ebp-58]
:00404EC0 3B45F8                  cmp eax, dword ptr [ebp-08]
:00404EC3 7D2B                    jge 00404EF0
:00404EC5 682000CC00              push 00CC0020
:00404ECA 6A00                    push 00000000
:00404ECC 6A00                    push 00000000
:00404ECE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00404ED1 51                      push ecx

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00404ED2 68C8000000              push 000000C8
:00404ED7 6840010000              push 00000140
:00404EDC 8B55A0                  mov edx, dword ptr [ebp-60]
:00404EDF 52                      push edx
:00404EE0 8B45A8                  mov eax, dword ptr [ebp-58]
:00404EE3 50                      push eax
:00404EE4 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00404EE7 51                      push ecx

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:00404EE8 FF1598844B00            Call dword ptr [004B8498]
:00404EEE EBC1                    jmp 00404EB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404EC3(C)
|
:00404EF0 EBA3                    jmp 00404E95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404EA6(C)
|
:00404EF2 8B55EC                  mov edx, dword ptr [ebp-14]
:00404EF5 52                      push edx

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:00404EF6 FF15E4844B00            Call dword ptr [004B84E4]
:00404EFC 8B45A4                  mov eax, dword ptr [ebp-5C]
:00404EFF 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00404F00 FF158C844B00            Call dword ptr [004B848C]
:00404F06 8D4DAC                  lea ecx, dword ptr [ebp-54]
:00404F09 51                      push ecx
:00404F0A 8B5508                  mov edx, dword ptr [ebp+08]
:00404F0D 52                      push edx

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:00404F0E FF15D4864B00            Call dword ptr [004B86D4]
:00404F14 8BE5                    mov esp, ebp
:00404F16 5D                      pop ebp
:00404F17 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004049B7   , :00404AF5   , :00404BA9   
|
:00404F1A 55                      push ebp
:00404F1B 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00404F1D 6AFF                    push FFFFFFFF
:00404F1F 683F374700              push 0047373F
:00404F24 64A100000000            mov eax, dword ptr fs:[00000000]
:00404F2A 50                      push eax
:00404F2B 64892500000000          mov dword ptr fs:[00000000], esp
:00404F32 81EC9C000000            sub esp, 0000009C
:00404F38 898D5CFFFFFF            mov dword ptr [ebp+FFFFFF5C], ecx
:00404F3E 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404F41 E8FA280000              call 00407840
:00404F46 C745FC00000000          mov [ebp-04], 00000000
:00404F4D A100634700              mov eax, dword ptr [00476300]
:00404F52 8945CC                  mov dword ptr [ebp-34], eax
:00404F55 8B0D04634700            mov ecx, dword ptr [00476304]
:00404F5B 894DD0                  mov dword ptr [ebp-30], ecx
:00404F5E 668B1508634700          mov dx, word ptr [00476308]
:00404F65 668955D4                mov word ptr [ebp-2C], dx
:00404F69 C745F001000000          mov [ebp-10], 00000001
:00404F70 C645E800                mov [ebp-18], 00

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00404F74 6A02                    push 00000002
:00404F76 8D45CC                  lea eax, dword ptr [ebp-34]
:00404F79 50                      push eax
:00404F7A 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404F7D E8CFB20000              call 00410251
:00404F82 8945F0                  mov dword ptr [ebp-10], eax
:00404F85 837DF000                cmp dword ptr [ebp-10], 00000000
:00404F89 0F8476030000            je 00405305
:00404F8F 8D4DCC                  lea ecx, dword ptr [ebp-34]
:00404F92 51                      push ecx
:00404F93 E81CB20000              call 004101B4
:00404F98 83C404                  add esp, 00000004
:00404F9B 50                      push eax
:00404F9C 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404F9F E8D3B60000              call 00410677
:00404FA4 50                      push eax
:00404FA5 6A00                    push 00000000
:00404FA7 B910414A00              mov ecx, 004A4110
:00404FAC E8EDE50000              call 0041359E
:00404FB1 50                      push eax
:00404FB2 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404FB5 E8D7B40000              call 00410491
:00404FBA 8D55CC                  lea edx, dword ptr [ebp-34]
:00404FBD 52                      push edx
:00404FBE E8F1B10000              call 004101B4
:00404FC3 83C404                  add esp, 00000004
:00404FC6 50                      push eax
:00404FC7 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00404FCA E8A8B60000              call 00410677
:00404FCF 50                      push eax
:00404FD0 B910414A00              mov ecx, 004A4110
:00404FD5 E8C4E50000              call 0041359E
:00404FDA C60000                  mov byte ptr [eax], 00
:00404FDD 6A00                    push 00000000
:00404FDF B910414A00              mov ecx, 004A4110
:00404FE4 E8B5E50000              call 0041359E
:00404FE9 8945E0                  mov dword ptr [ebp-20], eax
:00404FEC 8B45E0                  mov eax, dword ptr [ebp-20]
:00404FEF 0FBE08                  movsx ecx, byte ptr [eax]
:00404FF2 83F926                  cmp ecx, 00000026
:00404FF5 740C                    je 00405003
:00404FF7 C745F000000000          mov [ebp-10], 00000000
:00404FFE E900030000              jmp 00405303

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404FF5(C)
|
:00405003 8D55A0                  lea edx, dword ptr [ebp-60]
:00405006 52                      push edx
:00405007 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:0040500D E8BEA60200              call 0042F6D0
:00405012 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00405013 FF15C8864B00            Call dword ptr [004B86C8]
:00405019 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:0040501F E8ACA60200              call 0042F6D0
:00405024 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00405025 FF15B8864B00            Call dword ptr [004B86B8]
:0040502B 8945BC                  mov dword ptr [ebp-44], eax
:0040502E 8B45AC                  mov eax, dword ptr [ebp-54]
:00405031 50                      push eax
:00405032 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00405035 51                      push ecx
:00405036 6A00                    push 00000000
:00405038 6A00                    push 00000000

* Reference To: GDI32.CreateRectRgn, Ord:003Bh
                                  |
:0040503A FF15BC844B00            Call dword ptr [004B84BC]
:00405040 8945B0                  mov dword ptr [ebp-50], eax
:00405043 8B55B0                  mov edx, dword ptr [ebp-50]
:00405046 52                      push edx
:00405047 8B45BC                  mov eax, dword ptr [ebp-44]
:0040504A 50                      push eax

* Reference To: GDI32.SelectClipRgn, Ord:0148h
                                  |
:0040504B FF15B8844B00            Call dword ptr [004B84B8]
:00405051 8D8D64FFFFFF            lea ecx, dword ptr [ebp+FFFFFF64]
:00405057 51                      push ecx
:00405058 8B55BC                  mov edx, dword ptr [ebp-44]
:0040505B 52                      push edx

* Reference To: GDI32.GetTextMetricsA, Ord:010Bh
                                  |
:0040505C FF15B4844B00            Call dword ptr [004B84B4]
:00405062 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:00405068 038574FFFFFF            add eax, dword ptr [ebp+FFFFFF74]
:0040506E 89459C                  mov dword ptr [ebp-64], eax
:00405071 8B45AC                  mov eax, dword ptr [ebp-54]
:00405074 83E808                  sub eax, 00000008
:00405077 99                      cdq
:00405078 F77D9C                  idiv [ebp-64]
:0040507B 8945C8                  mov dword ptr [ebp-38], eax
:0040507E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00405081 83C101                  add ecx, 00000001
:00405084 894DE0                  mov dword ptr [ebp-20], ecx
:00405087 8B55E0                  mov edx, dword ptr [ebp-20]
:0040508A 8A02                    mov al, byte ptr [edx]
:0040508C 8845DC                  mov byte ptr [ebp-24], al
:0040508F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00405092 83C101                  add ecx, 00000001
:00405095 894DE0                  mov dword ptr [ebp-20], ecx
:00405098 C645C400                mov [ebp-3C], 00
:0040509C EB09                    jmp 004050A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405251(U)
|
:0040509E 8A55C4                  mov dl, byte ptr [ebp-3C]
:004050A1 80C201                  add dl, 01
:004050A4 8855C4                  mov byte ptr [ebp-3C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040509C(U)
|
:004050A7 8B45E8                  mov eax, dword ptr [ebp-18]
:004050AA 25FF000000              and eax, 000000FF
:004050AF 83F802                  cmp eax, 00000002
:004050B2 0F849E010000            je 00405256
:004050B8 C745E4A0124800          mov [ebp-1C], 004812A0
:004050BF C645E800                mov [ebp-18], 00
:004050C3 EB12                    jmp 004050D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405132(U)
|
:004050C5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004050C8 83C101                  add ecx, 00000001
:004050CB 894DE4                  mov dword ptr [ebp-1C], ecx
:004050CE 8B55E0                  mov edx, dword ptr [ebp-20]
:004050D1 83C201                  add edx, 00000001
:004050D4 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004050C3(U)
|
:004050D7 8B45E8                  mov eax, dword ptr [ebp-18]
:004050DA 25FF000000              and eax, 000000FF
:004050DF 83F801                  cmp eax, 00000001
:004050E2 7450                    je 00405134
:004050E4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004050E7 81E1FF000000            and ecx, 000000FF
:004050ED 83F902                  cmp ecx, 00000002
:004050F0 7442                    je 00405134
:004050F2 8B55E4                  mov edx, dword ptr [ebp-1C]
:004050F5 8B45E0                  mov eax, dword ptr [ebp-20]
:004050F8 8A08                    mov cl, byte ptr [eax]
:004050FA 880A                    mov byte ptr [edx], cl
:004050FC 8B55E0                  mov edx, dword ptr [ebp-20]
:004050FF 0FBE02                  movsx eax, byte ptr [edx]
:00405102 85C0                    test eax, eax
:00405104 7506                    jne 0040510C
:00405106 C645E802                mov [ebp-18], 02
:0040510A EB26                    jmp 00405132

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405104(C)
|
:0040510C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040510F 0FBE11                  movsx edx, byte ptr [ecx]
:00405112 83FA26                  cmp edx, 00000026
:00405115 751B                    jne 00405132
:00405117 C645E801                mov [ebp-18], 01
:0040511B 8B45E4                  mov eax, dword ptr [ebp-1C]
:0040511E C60000                  mov byte ptr [eax], 00
:00405121 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00405124 83C101                  add ecx, 00000001
:00405127 894DE0                  mov dword ptr [ebp-20], ecx
:0040512A 8B55E0                  mov edx, dword ptr [ebp-20]
:0040512D 8A02                    mov al, byte ptr [edx]
:0040512F 8845B4                  mov byte ptr [ebp-4C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040510A(U), :00405115(C)
|
:00405132 EB91                    jmp 004050C5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004050E2(C), :004050F0(C)
|
:00405134 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00405137 81E1FF000000            and ecx, 000000FF
:0040513D 8B5508                  mov edx, dword ptr [ebp+08]
:00405140 81E2FF000000            and edx, 000000FF
:00405146 2BCA                    sub ecx, edx
:00405148 0FAF4D9C                imul ecx, dword ptr [ebp-64]
:0040514C 894DC0                  mov dword ptr [ebp-40], ecx
:0040514F 8B45C4                  mov eax, dword ptr [ebp-3C]
:00405152 25FF000000              and eax, 000000FF
:00405157 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040515A 81E1FF000000            and ecx, 000000FF
:00405160 3BC1                    cmp eax, ecx
:00405162 0F8CE3000000            jl 0040524B
:00405168 8B55C0                  mov edx, dword ptr [ebp-40]
:0040516B 039564FFFFFF            add edx, dword ptr [ebp+FFFFFF64]
:00405171 81FA90010000            cmp edx, 00000190
:00405177 0F8DCE000000            jnl 0040524B
:0040517D 0FBE45DC                movsx eax, byte ptr [ebp-24]
:00405181 83F831                  cmp eax, 00000031
:00405184 7511                    jne 00405197
:00405186 680000D000              push 00D00000
:0040518B 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0040518E 51                      push ecx

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:0040518F FF15B0844B00            Call dword ptr [004B84B0]
:00405195 EB26                    jmp 004051BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405184(C)
|
:00405197 0FBE55DC                movsx edx, byte ptr [ebp-24]
:0040519B 83FA32                  cmp edx, 00000032
:0040519E 7511                    jne 004051B1

* Possible Reference to Dialog: DialogID_00D0 
                                  |
:004051A0 68D0000000              push 000000D0
:004051A5 8B45BC                  mov eax, dword ptr [ebp-44]
:004051A8 50                      push eax

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:004051A9 FF15B0844B00            Call dword ptr [004B84B0]
:004051AF EB0C                    jmp 004051BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040519E(C)
|
:004051B1 6A00                    push 00000000
:004051B3 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004051B6 51                      push ecx

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:004051B7 FF15B0844B00            Call dword ptr [004B84B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405195(U), :004051AF(U)
|
:004051BD 6A01                    push 00000001
:004051BF 8B55BC                  mov edx, dword ptr [ebp-44]
:004051C2 52                      push edx

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:004051C3 FF15AC844B00            Call dword ptr [004B84AC]

* Possible StringData Ref from Data Obj ->"ө"
                                  |
:004051C9 680C634700              push 0047630C
:004051CE 6A00                    push 00000000
:004051D0 6A00                    push 00000000
:004051D2 6A00                    push 00000000
:004051D4 6A00                    push 00000000
:004051D6 6888000000              push 00000088
:004051DB 6A00                    push 00000000
:004051DD 6A00                    push 00000000
:004051DF 6A00                    push 00000000
:004051E1 6858020000              push 00000258
:004051E6 6A00                    push 00000000
:004051E8 6A00                    push 00000000
:004051EA 6A00                    push 00000000
:004051EC 8B8568FFFFFF            mov eax, dword ptr [ebp+FFFFFF68]
:004051F2 50                      push eax

* Reference To: GDI32.CreateFontA, Ord:002Bh
                                  |
:004051F3 FF15A8844B00            Call dword ptr [004B84A8]
:004051F9 8945D8                  mov dword ptr [ebp-28], eax
:004051FC 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004051FF 51                      push ecx
:00405200 8B55BC                  mov edx, dword ptr [ebp-44]
:00405203 52                      push edx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00405204 FF159C844B00            Call dword ptr [004B849C]
:0040520A 8945B8                  mov dword ptr [ebp-48], eax
:0040520D 68A0124800              push 004812A0
:00405212 E88CD30500              call 004625A3
:00405217 83C404                  add esp, 00000004
:0040521A 50                      push eax
:0040521B 68A0124800              push 004812A0
:00405220 8B45C0                  mov eax, dword ptr [ebp-40]
:00405223 83C008                  add eax, 00000008
:00405226 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:00405227 6A08                    push 00000008
:00405229 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0040522C 51                      push ecx

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:0040522D FF15A4844B00            Call dword ptr [004B84A4]
:00405233 8B55B8                  mov edx, dword ptr [ebp-48]
:00405236 52                      push edx
:00405237 8B45BC                  mov eax, dword ptr [ebp-44]
:0040523A 50                      push eax

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0040523B FF159C844B00            Call dword ptr [004B849C]
:00405241 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00405244 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00405245 FF158C844B00            Call dword ptr [004B848C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405162(C), :00405177(C)
|
:0040524B 8A55B4                  mov dl, byte ptr [ebp-4C]
:0040524E 8855DC                  mov byte ptr [ebp-24], dl
:00405251 E948FEFFFF              jmp 0040509E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004050B2(C)
|
:00405256 6A00                    push 00000000
:00405258 8B45BC                  mov eax, dword ptr [ebp-44]
:0040525B 50                      push eax

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:0040525C FF15B0844B00            Call dword ptr [004B84B0]
:00405262 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00405265 51                      push ecx
:00405266 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:0040526C E85FA40200              call 0042F6D0
:00405271 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00405272 FF15BC864B00            Call dword ptr [004B86BC]
:00405278 8A55C4                  mov dl, byte ptr [ebp-3C]
:0040527B 52                      push edx
:0040527C 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:00405282 E8F91C0100              call 00416F80
:00405287 8A4508                  mov al, byte ptr [ebp+08]
:0040528A 50                      push eax
:0040528B 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:00405291 E80A490300              call 00439BA0
:00405296 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00405299 81E1FF000000            and ecx, 000000FF
:0040529F 2B4DC8                  sub ecx, dword ptr [ebp-38]
:004052A2 85C9                    test ecx, ecx
:004052A4 7D0C                    jge 004052B2
:004052A6 C78558FFFFFF00000000    mov dword ptr [ebp+FFFFFF58], 00000000
:004052B0 EB12                    jmp 004052C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004052A4(C)
|
:004052B2 8B55C4                  mov edx, dword ptr [ebp-3C]
:004052B5 81E2FF000000            and edx, 000000FF
:004052BB 2B55C8                  sub edx, dword ptr [ebp-38]
:004052BE 899558FFFFFF            mov dword ptr [ebp+FFFFFF58], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004052B0(U)
|
:004052C4 6A01                    push 00000001
:004052C6 8B8558FFFFFF            mov eax, dword ptr [ebp+FFFFFF58]
:004052CC 50                      push eax
:004052CD 6A00                    push 00000000
:004052CF 6A01                    push 00000001
:004052D1 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:004052D7 E8F4A30200              call 0042F6D0
:004052DC 50                      push eax

* Reference To: USER32.SetScrollRange, Ord:020Ch
                                  |
:004052DD FF15C0864B00            Call dword ptr [004B86C0]
:004052E3 6A01                    push 00000001
:004052E5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004052E8 81E1FF000000            and ecx, 000000FF
:004052EE 51                      push ecx
:004052EF 6A01                    push 00000001
:004052F1 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:004052F7 E8D4A30200              call 0042F6D0
:004052FC 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:004052FD FF15C4864B00            Call dword ptr [004B86C4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404FFE(U)
|
:00405303 EB07                    jmp 0040530C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404F89(C)
|
:00405305 C745F000000000          mov [ebp-10], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405303(U)
|
:0040530C 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0040530F E8F8B20000              call 0041060C
:00405314 8B55F0                  mov edx, dword ptr [ebp-10]
:00405317 899560FFFFFF            mov dword ptr [ebp+FFFFFF60], edx
:0040531D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00405324 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00405327 E812AF0000              call 0041023E
:0040532C 8B8560FFFFFF            mov eax, dword ptr [ebp+FFFFFF60]
:00405332 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405335 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040533C 8BE5                    mov esp, ebp
:0040533E 5D                      pop ebp
:0040533F C20400                  ret 0004



* Referenced by a CALL at Address:
|:00405512   
|
:00405342 55                      push ebp
:00405343 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00405345 6AFF                    push FFFFFFFF
:00405347 6852374700              push 00473752
:0040534C 64A100000000            mov eax, dword ptr fs:[00000000]
:00405352 50                      push eax
:00405353 64892500000000          mov dword ptr fs:[00000000], esp
:0040535A 83EC24                  sub esp, 00000024
:0040535D 894DD0                  mov dword ptr [ebp-30], ecx
:00405360 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00405363 E8D8240000              call 00407840
:00405368 C745FC00000000          mov [ebp-04], 00000000
:0040536F A114634700              mov eax, dword ptr [00476314]
:00405374 8945DC                  mov dword ptr [ebp-24], eax
:00405377 8B0D18634700            mov ecx, dword ptr [00476318]
:0040537D 894DE0                  mov dword ptr [ebp-20], ecx
:00405380 668B151C634700          mov dx, word ptr [0047631C]
:00405387 668955E4                mov word ptr [ebp-1C], dx
:0040538B C645EC00                mov [ebp-14], 00
:0040538F C645D800                mov [ebp-28], 00

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00405393 6A02                    push 00000002
:00405395 8D45DC                  lea eax, dword ptr [ebp-24]
:00405398 50                      push eax
:00405399 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040539C E8B0AE0000              call 00410251
:004053A1 85C0                    test eax, eax
:004053A3 0F84DA000000            je 00405483
:004053A9 8D4DDC                  lea ecx, dword ptr [ebp-24]
:004053AC 51                      push ecx
:004053AD E802AE0000              call 004101B4
:004053B2 83C404                  add esp, 00000004
:004053B5 50                      push eax
:004053B6 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004053B9 E8B9B20000              call 00410677
:004053BE 50                      push eax
:004053BF 6A00                    push 00000000
:004053C1 B910414A00              mov ecx, 004A4110
:004053C6 E8D3E10000              call 0041359E
:004053CB 50                      push eax
:004053CC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004053CF E8BDB00000              call 00410491
:004053D4 8D55DC                  lea edx, dword ptr [ebp-24]
:004053D7 52                      push edx
:004053D8 E8D7AD0000              call 004101B4
:004053DD 83C404                  add esp, 00000004
:004053E0 50                      push eax
:004053E1 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004053E4 E88EB20000              call 00410677
:004053E9 50                      push eax
:004053EA B910414A00              mov ecx, 004A4110
:004053EF E8AAE10000              call 0041359E
:004053F4 C60000                  mov byte ptr [eax], 00
:004053F7 6A00                    push 00000000
:004053F9 B910414A00              mov ecx, 004A4110
:004053FE E89BE10000              call 0041359E
:00405403 8945E8                  mov dword ptr [ebp-18], eax
:00405406 8B45E8                  mov eax, dword ptr [ebp-18]
:00405409 0FBE08                  movsx ecx, byte ptr [eax]
:0040540C 83F926                  cmp ecx, 00000026
:0040540F 7572                    jne 00405483
:00405411 8B55E8                  mov edx, dword ptr [ebp-18]
:00405414 83C201                  add edx, 00000001
:00405417 8955E8                  mov dword ptr [ebp-18], edx
:0040541A C645D800                mov [ebp-28], 00
:0040541E EB08                    jmp 00405428

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405481(U)
|
:00405420 8A45D8                  mov al, byte ptr [ebp-28]
:00405423 0401                    add al, 01
:00405425 8845D8                  mov byte ptr [ebp-28], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040541E(U)
|
:00405428 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040542B 81E1FF000000            and ecx, 000000FF
:00405431 83F902                  cmp ecx, 00000002
:00405434 744D                    je 00405483
:00405436 C645EC00                mov [ebp-14], 00
:0040543A EB09                    jmp 00405445

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040547F(U)
|
:0040543C 8B55E8                  mov edx, dword ptr [ebp-18]
:0040543F 83C201                  add edx, 00000001
:00405442 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040543A(U)
|
:00405445 8B45EC                  mov eax, dword ptr [ebp-14]
:00405448 25FF000000              and eax, 000000FF
:0040544D 83F801                  cmp eax, 00000001
:00405450 742F                    je 00405481
:00405452 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00405455 81E1FF000000            and ecx, 000000FF
:0040545B 83F902                  cmp ecx, 00000002
:0040545E 7421                    je 00405481
:00405460 8B55E8                  mov edx, dword ptr [ebp-18]
:00405463 0FBE02                  movsx eax, byte ptr [edx]
:00405466 85C0                    test eax, eax
:00405468 7506                    jne 00405470
:0040546A C645EC02                mov [ebp-14], 02
:0040546E EB0F                    jmp 0040547F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405468(C)
|
:00405470 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00405473 0FBE11                  movsx edx, byte ptr [ecx]
:00405476 83FA26                  cmp edx, 00000026
:00405479 7504                    jne 0040547F
:0040547B C645EC01                mov [ebp-14], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040546E(U), :00405479(C)
|
:0040547F EBBB                    jmp 0040543C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405450(C), :0040545E(C)
|
:00405481 EB9D                    jmp 00405420

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004053A3(C), :0040540F(C), :00405434(C)
|
:00405483 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00405486 E881B10000              call 0041060C
:0040548B 8B45D8                  mov eax, dword ptr [ebp-28]
:0040548E 25FF000000              and eax, 000000FF
:00405493 8945D4                  mov dword ptr [ebp-2C], eax
:00405496 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040549D 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004054A0 E899AD0000              call 0041023E
:004054A5 8B45D4                  mov eax, dword ptr [ebp-2C]
:004054A8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004054AB 64890D00000000          mov dword ptr fs:[00000000], ecx
:004054B2 8BE5                    mov esp, ebp
:004054B4 5D                      pop ebp
:004054B5 C3                      ret



* Referenced by a CALL at Address:
|:00404B70   
|
:004054B6 55                      push ebp
:004054B7 8BEC                    mov ebp, esp
:004054B9 83EC7C                  sub esp, 0000007C
:004054BC 894DA0                  mov dword ptr [ebp-60], ecx
:004054BF 8B4DA0                  mov ecx, dword ptr [ebp-60]
:004054C2 E859A30200              call 0042F820
:004054C7 25FF000000              and eax, 000000FF
:004054CC 8945A4                  mov dword ptr [ebp-5C], eax
:004054CF 8B4508                  mov eax, dword ptr [ebp+08]
:004054D2 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:004054D3 FF15B8864B00            Call dword ptr [004B86B8]
:004054D9 8945F8                  mov dword ptr [ebp-08], eax
:004054DC 8D4DA8                  lea ecx, dword ptr [ebp-58]
:004054DF 51                      push ecx
:004054E0 8B55F8                  mov edx, dword ptr [ebp-08]
:004054E3 52                      push edx

* Reference To: GDI32.GetTextMetricsA, Ord:010Bh
                                  |
:004054E4 FF15B4844B00            Call dword ptr [004B84B4]
:004054EA 8D45E4                  lea eax, dword ptr [ebp-1C]
:004054ED 50                      push eax
:004054EE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004054F1 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004054F2 FF15C8864B00            Call dword ptr [004B86C8]
:004054F8 8B55F8                  mov edx, dword ptr [ebp-08]
:004054FB 52                      push edx
:004054FC 8B4508                  mov eax, dword ptr [ebp+08]
:004054FF 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00405500 FF15BC864B00            Call dword ptr [004B86BC]
:00405506 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00405509 034DB8                  add ecx, dword ptr [ebp-48]
:0040550C 894DE0                  mov dword ptr [ebp-20], ecx
:0040550F 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00405512 E82BFEFFFF              call 00405342
:00405517 8945F4                  mov dword ptr [ebp-0C], eax
:0040551A 8B45F0                  mov eax, dword ptr [ebp-10]
:0040551D 83E808                  sub eax, 00000008
:00405520 99                      cdq
:00405521 F77DE0                  idiv [ebp-20]
:00405524 8945FC                  mov dword ptr [ebp-04], eax
:00405527 8B550C                  mov edx, dword ptr [ebp+0C]
:0040552A 81E2FFFF0000            and edx, 0000FFFF
:00405530 89559C                  mov dword ptr [ebp-64], edx
:00405533 837D9C05                cmp dword ptr [ebp-64], 00000005
:00405537 0F8719010000            ja 00405656
:0040553D 8B459C                  mov eax, dword ptr [ebp-64]
:00405540 FF248568564000          jmp dword ptr [4*eax+00405668]
:00405547 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:0040554A 83E901                  sub ecx, 00000001
:0040554D 894DA4                  mov dword ptr [ebp-5C], ecx
:00405550 33D2                    xor edx, edx
:00405552 837DA400                cmp dword ptr [ebp-5C], 00000000
:00405556 0F9CC2                  setl dl
:00405559 4A                      dec edx
:0040555A 2355A4                  and edx, dword ptr [ebp-5C]
:0040555D 8955A4                  mov dword ptr [ebp-5C], edx
:00405560 E9F1000000              jmp 00405656
:00405565 8B45A4                  mov eax, dword ptr [ebp-5C]
:00405568 83C001                  add eax, 00000001
:0040556B 8945A4                  mov dword ptr [ebp-5C], eax
:0040556E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405571 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00405574 85C9                    test ecx, ecx
:00405576 7D09                    jge 00405581
:00405578 C7459800000000          mov [ebp-68], 00000000
:0040557F EB09                    jmp 0040558A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405576(C)
|
:00405581 8B55F4                  mov edx, dword ptr [ebp-0C]
:00405584 2B55FC                  sub edx, dword ptr [ebp-04]
:00405587 895598                  mov dword ptr [ebp-68], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040557F(U)
|
:0040558A 8B45A4                  mov eax, dword ptr [ebp-5C]
:0040558D 3B4598                  cmp eax, dword ptr [ebp-68]
:00405590 7D08                    jge 0040559A
:00405592 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00405595 894D94                  mov dword ptr [ebp-6C], ecx
:00405598 EB22                    jmp 004055BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405590(C)
|
:0040559A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040559D 2B55FC                  sub edx, dword ptr [ebp-04]
:004055A0 85D2                    test edx, edx
:004055A2 7D09                    jge 004055AD
:004055A4 C7459000000000          mov [ebp-70], 00000000
:004055AB EB09                    jmp 004055B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004055A2(C)
|
:004055AD 8B45F4                  mov eax, dword ptr [ebp-0C]
:004055B0 2B45FC                  sub eax, dword ptr [ebp-04]
:004055B3 894590                  mov dword ptr [ebp-70], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004055AB(U)
|
:004055B6 8B4D90                  mov ecx, dword ptr [ebp-70]
:004055B9 894D94                  mov dword ptr [ebp-6C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405598(U)
|
:004055BC 8B5594                  mov edx, dword ptr [ebp-6C]
:004055BF 8955A4                  mov dword ptr [ebp-5C], edx
:004055C2 E98F000000              jmp 00405656
:004055C7 8B45A4                  mov eax, dword ptr [ebp-5C]
:004055CA 2B45FC                  sub eax, dword ptr [ebp-04]
:004055CD 8945A4                  mov dword ptr [ebp-5C], eax
:004055D0 33C9                    xor ecx, ecx
:004055D2 837DA400                cmp dword ptr [ebp-5C], 00000000
:004055D6 0F9CC1                  setl cl
:004055D9 49                      dec ecx
:004055DA 234DA4                  and ecx, dword ptr [ebp-5C]
:004055DD 894DA4                  mov dword ptr [ebp-5C], ecx
:004055E0 EB74                    jmp 00405656
:004055E2 8B55A4                  mov edx, dword ptr [ebp-5C]
:004055E5 0355FC                  add edx, dword ptr [ebp-04]
:004055E8 8955A4                  mov dword ptr [ebp-5C], edx
:004055EB 8B45F4                  mov eax, dword ptr [ebp-0C]
:004055EE 2B45FC                  sub eax, dword ptr [ebp-04]
:004055F1 85C0                    test eax, eax
:004055F3 7D09                    jge 004055FE
:004055F5 C7458C00000000          mov [ebp-74], 00000000
:004055FC EB09                    jmp 00405607

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004055F3(C)
|
:004055FE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405601 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00405604 894D8C                  mov dword ptr [ebp-74], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004055FC(U)
|
:00405607 8B55A4                  mov edx, dword ptr [ebp-5C]
:0040560A 3B558C                  cmp edx, dword ptr [ebp-74]
:0040560D 7D08                    jge 00405617
:0040560F 8B45A4                  mov eax, dword ptr [ebp-5C]
:00405612 894588                  mov dword ptr [ebp-78], eax
:00405615 EB22                    jmp 00405639

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040560D(C)
|
:00405617 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040561A 2B4DFC                  sub ecx, dword ptr [ebp-04]
:0040561D 85C9                    test ecx, ecx
:0040561F 7D09                    jge 0040562A
:00405621 C7458400000000          mov [ebp-7C], 00000000
:00405628 EB09                    jmp 00405633

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040561F(C)
|
:0040562A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040562D 2B55FC                  sub edx, dword ptr [ebp-04]
:00405630 895584                  mov dword ptr [ebp-7C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405628(U)
|
:00405633 8B4584                  mov eax, dword ptr [ebp-7C]
:00405636 894588                  mov dword ptr [ebp-78], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405615(U)
|
:00405639 8B4D88                  mov ecx, dword ptr [ebp-78]
:0040563C 894DA4                  mov dword ptr [ebp-5C], ecx
:0040563F EB15                    jmp 00405656
:00405641 8B550C                  mov edx, dword ptr [ebp+0C]
:00405644 C1EA10                  shr edx, 10
:00405647 81E2FFFF0000            and edx, 0000FFFF
:0040564D 81E2FFFF0000            and edx, 0000FFFF
:00405653 8955A4                  mov dword ptr [ebp-5C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405537(C), :00405560(U), :004055C2(U), :004055E0(U), :0040563F(U)
|
:00405656 8A45A4                  mov al, byte ptr [ebp-5C]
:00405659 50                      push eax
:0040565A 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0040565D E83E450300              call 00439BA0
:00405662 8BE5                    mov esp, ebp
:00405664 5D                      pop ebp
:00405665 C20C00                  ret 000C



:00405668 47554000                DWORD 00405547
:0040566C 65554000                DWORD 00405565
:00405670 C7554000                DWORD 004055C7
:00405674 E2554000                DWORD 004055E2
:00405678 56564000                DWORD 00405656
:0040567C 41564000                DWORD 00405641



* Referenced by a CALL at Address:
|:00404927   
|
:00405680 55                      push ebp
:00405681 8BEC                    mov ebp, esp
:00405683 51                      push ecx
:00405684 894DFC                  mov dword ptr [ebp-04], ecx
:00405687 8B45FC                  mov eax, dword ptr [ebp-04]
:0040568A C6400400                mov [eax+04], 00
:0040568E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405691 C6410500                mov [ecx+05], 00
:00405695 8B45FC                  mov eax, dword ptr [ebp-04]
:00405698 8BE5                    mov esp, ebp
:0040569A 5D                      pop ebp
:0040569B C3                      ret


:0040569C CC                      int 03
:0040569D CC                      int 03
:0040569E CC                      int 03
:0040569F CC                      int 03

* Referenced by a CALL at Address:
|:00411C60   
|
:004056A0 55                      push ebp
:004056A1 8BEC                    mov ebp, esp
:004056A3 83EC10                  sub esp, 00000010
:004056A6 894DF0                  mov dword ptr [ebp-10], ecx
:004056A9 8B4508                  mov eax, dword ptr [ebp+08]
:004056AC 8945FC                  mov dword ptr [ebp-04], eax
:004056AF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004056B2 894DF8                  mov dword ptr [ebp-08], ecx
:004056B5 C745F400000000          mov [ebp-0C], 00000000
:004056BC EB09                    jmp 004056C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056E9(U)
|
:004056BE 8B55F4                  mov edx, dword ptr [ebp-0C]
:004056C1 83C201                  add edx, 00000001
:004056C4 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056BC(U)
|
:004056C7 837DF410                cmp dword ptr [ebp-0C], 00000010
:004056CB 731E                    jnb 004056EB
:004056CD 8B45F8                  mov eax, dword ptr [ebp-08]
:004056D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004056D3 8A11                    mov dl, byte ptr [ecx]
:004056D5 8810                    mov byte ptr [eax], dl
:004056D7 8B45F8                  mov eax, dword ptr [ebp-08]
:004056DA 83C001                  add eax, 00000001
:004056DD 8945F8                  mov dword ptr [ebp-08], eax
:004056E0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004056E3 83C101                  add ecx, 00000001
:004056E6 894DFC                  mov dword ptr [ebp-04], ecx
:004056E9 EBD3                    jmp 004056BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056CB(C)
|
:004056EB 8B55F8                  mov edx, dword ptr [ebp-08]
:004056EE C60200                  mov byte ptr [edx], 00
:004056F1 8B4508                  mov eax, dword ptr [ebp+08]
:004056F4 83C011                  add eax, 00000011
:004056F7 894508                  mov dword ptr [ebp+08], eax
:004056FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004056FD 894DFC                  mov dword ptr [ebp-04], ecx
:00405700 8B55F0                  mov edx, dword ptr [ebp-10]
:00405703 83C211                  add edx, 00000011
:00405706 8955F8                  mov dword ptr [ebp-08], edx
:00405709 C745F400000000          mov [ebp-0C], 00000000
:00405710 EB09                    jmp 0040571B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040573D(U)
|
:00405712 8B45F4                  mov eax, dword ptr [ebp-0C]
:00405715 83C001                  add eax, 00000001
:00405718 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405710(U)
|
:0040571B 837DF414                cmp dword ptr [ebp-0C], 00000014
:0040571F 731E                    jnb 0040573F
:00405721 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00405724 8B55FC                  mov edx, dword ptr [ebp-04]
:00405727 8A02                    mov al, byte ptr [edx]
:00405729 8801                    mov byte ptr [ecx], al
:0040572B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040572E 83C101                  add ecx, 00000001
:00405731 894DF8                  mov dword ptr [ebp-08], ecx
:00405734 8B55FC                  mov edx, dword ptr [ebp-04]
:00405737 83C201                  add edx, 00000001
:0040573A 8955FC                  mov dword ptr [ebp-04], edx
:0040573D EBD3                    jmp 00405712

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040571F(C)
|
:0040573F 8B45F8                  mov eax, dword ptr [ebp-08]
:00405742 C60000                  mov byte ptr [eax], 00
:00405745 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405748 83C115                  add ecx, 00000015
:0040574B 894D08                  mov dword ptr [ebp+08], ecx
:0040574E 8B55F0                  mov edx, dword ptr [ebp-10]
:00405751 8B4508                  mov eax, dword ptr [ebp+08]
:00405754 8A08                    mov cl, byte ptr [eax]
:00405756 884A26                  mov byte ptr [edx+26], cl
:00405759 8B5508                  mov edx, dword ptr [ebp+08]
:0040575C 83C201                  add edx, 00000001
:0040575F 895508                  mov dword ptr [ebp+08], edx
:00405762 8B45F0                  mov eax, dword ptr [ebp-10]
:00405765 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405768 8A11                    mov dl, byte ptr [ecx]
:0040576A 885027                  mov byte ptr [eax+27], dl
:0040576D 8B4508                  mov eax, dword ptr [ebp+08]
:00405770 83C001                  add eax, 00000001
:00405773 894508                  mov dword ptr [ebp+08], eax
:00405776 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00405779 8B5508                  mov edx, dword ptr [ebp+08]
:0040577C 8A02                    mov al, byte ptr [edx]
:0040577E 884128                  mov byte ptr [ecx+28], al
:00405781 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405784 83C101                  add ecx, 00000001
:00405787 894D08                  mov dword ptr [ebp+08], ecx
:0040578A 8B55F0                  mov edx, dword ptr [ebp-10]
:0040578D 8B4508                  mov eax, dword ptr [ebp+08]
:00405790 8A08                    mov cl, byte ptr [eax]
:00405792 884A29                  mov byte ptr [edx+29], cl
:00405795 8B5508                  mov edx, dword ptr [ebp+08]
:00405798 83C201                  add edx, 00000001
:0040579B 895508                  mov dword ptr [ebp+08], edx
:0040579E 8B45F0                  mov eax, dword ptr [ebp-10]
:004057A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004057A4 8A11                    mov dl, byte ptr [ecx]
:004057A6 88502A                  mov byte ptr [eax+2A], dl
:004057A9 8B4508                  mov eax, dword ptr [ebp+08]
:004057AC 83C001                  add eax, 00000001
:004057AF 894508                  mov dword ptr [ebp+08], eax
:004057B2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004057B5 8B5508                  mov edx, dword ptr [ebp+08]
:004057B8 8A02                    mov al, byte ptr [edx]
:004057BA 88412B                  mov byte ptr [ecx+2B], al
:004057BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004057C0 83C101                  add ecx, 00000001
:004057C3 894D08                  mov dword ptr [ebp+08], ecx
:004057C6 8B55F0                  mov edx, dword ptr [ebp-10]
:004057C9 8B4508                  mov eax, dword ptr [ebp+08]
:004057CC 8A08                    mov cl, byte ptr [eax]
:004057CE 884A2C                  mov byte ptr [edx+2C], cl
:004057D1 8B5508                  mov edx, dword ptr [ebp+08]
:004057D4 83C201                  add edx, 00000001
:004057D7 895508                  mov dword ptr [ebp+08], edx
:004057DA 8B45F0                  mov eax, dword ptr [ebp-10]
:004057DD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004057E0 8A11                    mov dl, byte ptr [ecx]
:004057E2 88502D                  mov byte ptr [eax+2D], dl
:004057E5 8B4508                  mov eax, dword ptr [ebp+08]
:004057E8 83C001                  add eax, 00000001
:004057EB 894508                  mov dword ptr [ebp+08], eax
:004057EE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004057F1 8B5508                  mov edx, dword ptr [ebp+08]
:004057F4 8A02                    mov al, byte ptr [edx]
:004057F6 88412E                  mov byte ptr [ecx+2E], al
:004057F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004057FC 83C101                  add ecx, 00000001
:004057FF 894D08                  mov dword ptr [ebp+08], ecx
:00405802 8B55F0                  mov edx, dword ptr [ebp-10]
:00405805 8B4508                  mov eax, dword ptr [ebp+08]
:00405808 8A08                    mov cl, byte ptr [eax]
:0040580A 884A2F                  mov byte ptr [edx+2F], cl
:0040580D 8B5508                  mov edx, dword ptr [ebp+08]
:00405810 83C201                  add edx, 00000001
:00405813 895508                  mov dword ptr [ebp+08], edx
:00405816 8B45F0                  mov eax, dword ptr [ebp-10]
:00405819 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040581C 8A11                    mov dl, byte ptr [ecx]
:0040581E 885030                  mov byte ptr [eax+30], dl
:00405821 8B4508                  mov eax, dword ptr [ebp+08]
:00405824 83C001                  add eax, 00000001
:00405827 894508                  mov dword ptr [ebp+08], eax
:0040582A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040582D 8B5508                  mov edx, dword ptr [ebp+08]
:00405830 8A02                    mov al, byte ptr [edx]
:00405832 884131                  mov byte ptr [ecx+31], al
:00405835 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405838 83C101                  add ecx, 00000001
:0040583B 894D08                  mov dword ptr [ebp+08], ecx
:0040583E 8B55F0                  mov edx, dword ptr [ebp-10]
:00405841 8B4508                  mov eax, dword ptr [ebp+08]
:00405844 8A08                    mov cl, byte ptr [eax]
:00405846 884A32                  mov byte ptr [edx+32], cl
:00405849 8B5508                  mov edx, dword ptr [ebp+08]
:0040584C 83C201                  add edx, 00000001
:0040584F 895508                  mov dword ptr [ebp+08], edx
:00405852 8B4508                  mov eax, dword ptr [ebp+08]
:00405855 8BE5                    mov esp, ebp
:00405857 5D                      pop ebp
:00405858 C20400                  ret 0004


:0040585B 55                      push ebp
:0040585C 8BEC                    mov ebp, esp
:0040585E 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:00405865 730D                    jnb 00405874
:00405867 8B4508                  mov eax, dword ptr [ebp+08]
:0040586A 6BC033                  imul eax, 00000033
:0040586D 05C8EF4800              add eax, 0048EFC8
:00405872 EB02                    jmp 00405876

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405865(C)
|
:00405874 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405872(U)
|
:00405876 5D                      pop ebp
:00405877 C3                      ret



* Referenced by a CALL at Addresses:
|:00431FBF   , :0043205C   , :0043209D   , :00465B16   , :00465C35   
|:00465C90   
|
:00405878 55                      push ebp
:00405879 8BEC                    mov ebp, esp
:0040587B 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:00405882 7204                    jb 00405888
:00405884 33C0                    xor eax, eax
:00405886 EB11                    jmp 00405899

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405882(C)
|
:00405888 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040588B 6BC933                  imul ecx, 00000033
:0040588E 81C1C8EF4800            add ecx, 0048EFC8
:00405894 E8171F0000              call 004077B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405886(U)
|
:00405899 5D                      pop ebp
:0040589A C3                      ret



* Referenced by a CALL at Addresses:
|:00401CF0   , :00401D3E   , :00401E3D   , :0040281F   , :00405DE5   
|:00417A06   , :004185D9   , :004301A2   
|
:0040589B 55                      push ebp
:0040589C 8BEC                    mov ebp, esp
:0040589E 51                      push ecx
:0040589F 894DFC                  mov dword ptr [ebp-04], ecx
:004058A2 8B45FC                  mov eax, dword ptr [ebp-04]
:004058A5 33C9                    xor ecx, ecx
:004058A7 8A4826                  mov cl, byte ptr [eax+26]
:004058AA 83F906                  cmp ecx, 00000006
:004058AD 7F08                    jg 004058B7
:004058AF 8B55FC                  mov edx, dword ptr [ebp-04]
:004058B2 8A4226                  mov al, byte ptr [edx+26]
:004058B5 EB24                    jmp 004058DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004058AD(C)
|
:004058B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004058BA 33C9                    xor ecx, ecx
:004058BC 8A4826                  mov cl, byte ptr [eax+26]
:004058BF 83F90E                  cmp ecx, 0000000E
:004058C2 7F04                    jg 004058C8
:004058C4 B007                    mov al, 07
:004058C6 EB13                    jmp 004058DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004058C2(C)
|
:004058C8 8B55FC                  mov edx, dword ptr [ebp-04]
:004058CB 33C0                    xor eax, eax
:004058CD 8A4226                  mov al, byte ptr [edx+26]
:004058D0 83F817                  cmp eax, 00000017
:004058D3 7F04                    jg 004058D9
:004058D5 B008                    mov al, 08
:004058D7 EB02                    jmp 004058DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004058D3(C)
|
:004058D9 B009                    mov al, 09

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004058B5(U), :004058C6(U), :004058D7(U)
|
:004058DB 8BE5                    mov esp, ebp
:004058DD 5D                      pop ebp
:004058DE C3                      ret



* Referenced by a CALL at Addresses:
|:00405A02   , :004550AA   
|
:004058DF 55                      push ebp
:004058E0 8BEC                    mov ebp, esp
:004058E2 51                      push ecx
:004058E3 C645FCFF                mov [ebp-04], FF
:004058E7 837D0864                cmp dword ptr [ebp+08], 00000064
:004058EB 7304                    jnb 004058F1
:004058ED 0CFF                    or al, FF
:004058EF EB7D                    jmp 0040596E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004058EB(C)
|
:004058F1 817D08BE000000          cmp dword ptr [ebp+08], 000000BE
:004058F8 7216                    jb 00405910
:004058FA C645FC3B                mov [ebp-04], 3B
:004058FE 8B4508                  mov eax, dword ptr [ebp+08]
:00405901 2DBE000000              sub eax, 000000BE
:00405906 8A4DFC                  mov cl, byte ptr [ebp-04]
:00405909 02C8                    add cl, al
:0040590B 884DFC                  mov byte ptr [ebp-04], cl
:0040590E EB49                    jmp 00405959

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004058F8(C)
|
:00405910 817D0896000000          cmp dword ptr [ebp+08], 00000096
:00405917 7217                    jb 00405930
:00405919 C645FC21                mov [ebp-04], 21
:0040591D 8B5508                  mov edx, dword ptr [ebp+08]
:00405920 81EA96000000            sub edx, 00000096
:00405926 8A45FC                  mov al, byte ptr [ebp-04]
:00405929 02C2                    add al, dl
:0040592B 8845FC                  mov byte ptr [ebp-04], al
:0040592E EB29                    jmp 00405959

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405917(C)
|
:00405930 817D0882000000          cmp dword ptr [ebp+08], 00000082
:00405937 7217                    jb 00405950
:00405939 C645FC16                mov [ebp-04], 16
:0040593D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405940 81E982000000            sub ecx, 00000082
:00405946 8A55FC                  mov dl, byte ptr [ebp-04]
:00405949 02D1                    add dl, cl
:0040594B 8855FC                  mov byte ptr [ebp-04], dl
:0040594E EB09                    jmp 00405959

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405937(C)
|
:00405950 8B4508                  mov eax, dword ptr [ebp+08]
:00405953 83E864                  sub eax, 00000064
:00405956 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040590E(U), :0040592E(U), :0040594E(U)
|
:00405959 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040595C 81E1FF000000            and ecx, 000000FF
:00405962 83F945                  cmp ecx, 00000045
:00405965 7C04                    jl 0040596B
:00405967 0CFF                    or al, FF
:00405969 EB03                    jmp 0040596E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405965(C)
|
:0040596B 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004058EF(U), :00405969(U)
|
:0040596E 8BE5                    mov esp, ebp
:00405970 5D                      pop ebp
:00405971 C3                      ret



* Referenced by a CALL at Addresses:
|:004059AD   , :004059CF   , :004059F1   , :00405A2E   , :00405A52   
|:00405A79   , :00405BC4   , :0046871C   
|
:00405972 55                      push ebp
:00405973 8BEC                    mov ebp, esp
:00405975 6A64                    push 00000064
:00405977 8B4508                  mov eax, dword ptr [ebp+08]
:0040597A 50                      push eax
:0040597B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040597E 6BC964                  imul ecx, 00000064
:00405981 51                      push ecx
:00405982 B914DA4A00              mov ecx, 004ADA14
:00405987 E822AB0000              call 004104AE
:0040598C 8B5508                  mov edx, dword ptr [ebp+08]
:0040598F C6426400                mov [edx+64], 00
:00405993 5D                      pop ebp
:00405994 C3                      ret



* Referenced by a CALL at Addresses:
|:0040711F   , :0045449F   
|
:00405995 55                      push ebp
:00405996 8BEC                    mov ebp, esp
:00405998 837D0C40                cmp dword ptr [ebp+0C], 00000040
:0040599C 7602                    jbe 004059A0
:0040599E EB15                    jmp 004059B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040599C(C)
|
:004059A0 8B450C                  mov eax, dword ptr [ebp+0C]
:004059A3 0500010000              add eax, 00000100
:004059A8 50                      push eax
:004059A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004059AC 51                      push ecx
:004059AD E8C0FFFFFF              call 00405972
:004059B2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040599E(U)
|
:004059B5 5D                      pop ebp
:004059B6 C3                      ret



* Referenced by a CALL at Address:
|:0042C624   
|
:004059B7 55                      push ebp
:004059B8 8BEC                    mov ebp, esp
:004059BA 837D0C19                cmp dword ptr [ebp+0C], 00000019
:004059BE 7602                    jbe 004059C2
:004059C0 EB15                    jmp 004059D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004059BE(C)
|
:004059C2 8B450C                  mov eax, dword ptr [ebp+0C]
:004059C5 054B010000              add eax, 0000014B
:004059CA 50                      push eax
:004059CB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004059CE 51                      push ecx
:004059CF E89EFFFFFF              call 00405972
:004059D4 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004059C0(U)
|
:004059D7 5D                      pop ebp
:004059D8 C3                      ret



* Referenced by a CALL at Address:
|:0042C656   
|
:004059D9 55                      push ebp
:004059DA 8BEC                    mov ebp, esp
:004059DC 837D0C19                cmp dword ptr [ebp+0C], 00000019
:004059E0 7602                    jbe 004059E4
:004059E2 EB15                    jmp 004059F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004059E0(C)
|
:004059E4 8B450C                  mov eax, dword ptr [ebp+0C]
:004059E7 0587010000              add eax, 00000187
:004059EC 50                      push eax
:004059ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004059F0 51                      push ecx
:004059F1 E87CFFFFFF              call 00405972
:004059F6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004059E2(U)
|
:004059F9 5D                      pop ebp
:004059FA C3                      ret



* Referenced by a CALL at Addresses:
|:004117B3   , :00458310   
|
:004059FB 55                      push ebp
:004059FC 8BEC                    mov ebp, esp
:004059FE 8B450C                  mov eax, dword ptr [ebp+0C]
:00405A01 50                      push eax
:00405A02 E8D8FEFFFF              call 004058DF
:00405A07 83C404                  add esp, 00000004
:00405A0A 25FF000000              and eax, 000000FF
:00405A0F 89450C                  mov dword ptr [ebp+0C], eax
:00405A12 837D0C45                cmp dword ptr [ebp+0C], 00000045
:00405A16 7608                    jbe 00405A20
:00405A18 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405A1B C60100                  mov byte ptr [ecx], 00
:00405A1E EB16                    jmp 00405A36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A16(C)
|
:00405A20 8B550C                  mov edx, dword ptr [ebp+0C]
:00405A23 81C2C3010000            add edx, 000001C3
:00405A29 52                      push edx
:00405A2A 8B4508                  mov eax, dword ptr [ebp+08]
:00405A2D 50                      push eax
:00405A2E E83FFFFFFF              call 00405972
:00405A33 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A1E(U)
|
:00405A36 5D                      pop ebp
:00405A37 C3                      ret



* Referenced by a CALL at Addresses:
|:00407541   , :004654FD   
|
:00405A38 55                      push ebp
:00405A39 8BEC                    mov ebp, esp
:00405A3B 837D0C20                cmp dword ptr [ebp+0C], 00000020
:00405A3F 7204                    jb 00405A45
:00405A41 33C0                    xor eax, eax
:00405A43 EB1A                    jmp 00405A5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A3F(C)
|
:00405A45 8B450C                  mov eax, dword ptr [ebp+0C]
:00405A48 05B7020000              add eax, 000002B7
:00405A4D 50                      push eax
:00405A4E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405A51 51                      push ecx
:00405A52 E81BFFFFFF              call 00405972
:00405A57 83C408                  add esp, 00000008
:00405A5A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A43(U)
|
:00405A5F 5D                      pop ebp
:00405A60 C3                      ret


:00405A61 55                      push ebp
:00405A62 8BEC                    mov ebp, esp
:00405A64 837D0C68                cmp dword ptr [ebp+0C], 00000068
:00405A68 7602                    jbe 00405A6C
:00405A6A EB15                    jmp 00405A81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A68(C)
|
:00405A6C 8B450C                  mov eax, dword ptr [ebp+0C]
:00405A6F 053B020000              add eax, 0000023B
:00405A74 50                      push eax
:00405A75 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405A78 51                      push ecx
:00405A79 E8F4FEFFFF              call 00405972
:00405A7E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A6A(U)
|
:00405A81 5D                      pop ebp
:00405A82 C3                      ret



* Referenced by a CALL at Address:
|:00405FC6   
|
:00405A83 55                      push ebp
:00405A84 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00405A86 6AFF                    push FFFFFFFF
:00405A88 686C374700              push 0047376C
:00405A8D 64A100000000            mov eax, dword ptr fs:[00000000]
:00405A93 50                      push eax
:00405A94 64892500000000          mov dword ptr fs:[00000000], esp
:00405A9B 81EC10010000            sub esp, 00000110
:00405AA1 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:00405AA7 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00405AAD E84E1C0000              call 00407700
:00405AB2 C745FC00000000          mov [ebp-04], 00000000
:00405AB9 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00405ABF 8A482E                  mov cl, byte ptr [eax+2E]
:00405AC2 884DF0                  mov byte ptr [ebp-10], cl
:00405AC5 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00405ACB 8A422F                  mov al, byte ptr [edx+2F]
:00405ACE 8885E8FEFFFF            mov byte ptr [ebp+FFFFFEE8], al
:00405AD4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00405AD7 81E1FF000000            and ecx, 000000FF
:00405ADD 81F9FF000000            cmp ecx, 000000FF
:00405AE3 7504                    jne 00405AE9
:00405AE5 C645F000                mov [ebp-10], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405AE3(C)
|
:00405AE9 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00405AEF 81E2FF000000            and edx, 000000FF
:00405AF5 81FAFF000000            cmp edx, 000000FF
:00405AFB 7507                    jne 00405B04
:00405AFD C685E8FEFFFF00          mov byte ptr [ebp+FFFFFEE8], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405AFB(C)
|
:00405B04 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00405B0A 33C9                    xor ecx, ecx
:00405B0C 8A4826                  mov cl, byte ptr [eax+26]
:00405B0F 83F906                  cmp ecx, 00000006
:00405B12 7E3B                    jle 00405B4F
:00405B14 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00405B1A 33C0                    xor eax, eax
:00405B1C 8A4226                  mov al, byte ptr [edx+26]
:00405B1F 83F80C                  cmp eax, 0000000C
:00405B22 742B                    je 00405B4F
:00405B24 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00405B2A 33D2                    xor edx, edx
:00405B2C 8A5126                  mov dl, byte ptr [ecx+26]
:00405B2F 83FA0F                  cmp edx, 0000000F
:00405B32 7C10                    jl 00405B44
:00405B34 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00405B3A 33C9                    xor ecx, ecx
:00405B3C 8A4826                  mov cl, byte ptr [eax+26]
:00405B3F 83F917                  cmp ecx, 00000017
:00405B42 7E0B                    jle 00405B4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405B32(C)
|
:00405B44 C645F00B                mov [ebp-10], 0B
:00405B48 C685E8FEFFFF0A          mov byte ptr [ebp+FFFFFEE8], 0A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405B12(C), :00405B22(C), :00405B42(C)
|
:00405B4F 68E9030000              push 000003E9
:00405B54 8A55F0                  mov dl, byte ptr [ebp-10]
:00405B57 52                      push edx
:00405B58 8B4508                  mov eax, dword ptr [ebp+08]
:00405B5B 50                      push eax
:00405B5C B9C00B4B00              mov ecx, 004B0BC0
:00405B61 E8EF960500              call 0045F255

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00405B66 68EA030000              push 000003EA
:00405B6B 8A8DE8FEFFFF            mov cl, byte ptr [ebp+FFFFFEE8]
:00405B71 51                      push ecx
:00405B72 8B5508                  mov edx, dword ptr [ebp+08]
:00405B75 52                      push edx
:00405B76 B9C00B4B00              mov ecx, 004B0BC0
:00405B7B E85F970500              call 0045F2DF
:00405B80 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00405B87 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00405B8D E88E1B0000              call 00407720
:00405B92 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405B95 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405B9C 8BE5                    mov esp, ebp
:00405B9E 5D                      pop ebp
:00405B9F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00406038   , :00406116   
|
:00405BA2 55                      push ebp
:00405BA3 8BEC                    mov ebp, esp
:00405BA5 81ECD4010000            sub esp, 000001D4
:00405BAB 898D2CFEFFFF            mov dword ptr [ebp+FFFFFE2C], ecx
:00405BB1 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405BB7 33C9                    xor ecx, ecx
:00405BB9 8A4829                  mov cl, byte ptr [eax+29]
:00405BBC 51                      push ecx
:00405BBD 8D9598FEFFFF            lea edx, dword ptr [ebp+FFFFFE98]
:00405BC3 52                      push edx
:00405BC4 E8A9FDFFFF              call 00405972
:00405BC9 83C408                  add esp, 00000008
:00405BCC 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405BD2 33C9                    xor ecx, ecx
:00405BD4 8A4826                  mov cl, byte ptr [eax+26]
:00405BD7 83F906                  cmp ecx, 00000006
:00405BDA 7E4D                    jle 00405C29
:00405BDC 6A00                    push 00000000
:00405BDE 6829050000              push 00000529
:00405BE3 8B5508                  mov edx, dword ptr [ebp+08]
:00405BE6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405BE7 FF15AC864B00            Call dword ptr [004B86AC]
:00405BED 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405BEE FF15E4864B00            Call dword ptr [004B86E4]
:00405BF4 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:00405BF6 68FC030000              push 000003FC
:00405BFB 8B4508                  mov eax, dword ptr [ebp+08]
:00405BFE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405BFF FF15AC864B00            Call dword ptr [004B86AC]
:00405C05 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405C06 FF15E4864B00            Call dword ptr [004B86E4]
:00405C0C 6A00                    push 00000000
:00405C0E 6807040000              push 00000407
:00405C13 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405C16 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405C17 FF15AC864B00            Call dword ptr [004B86AC]
:00405C1D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405C1E FF15E4864B00            Call dword ptr [004B86E4]
:00405C24 E99E000000              jmp 00405CC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BDA(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00405C29 6A05                    push 00000005
:00405C2B 6829050000              push 00000529
:00405C30 8B5508                  mov edx, dword ptr [ebp+08]
:00405C33 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405C34 FF15AC864B00            Call dword ptr [004B86AC]
:00405C3A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405C3B FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00405C41 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:00405C43 68FC030000              push 000003FC
:00405C48 8B4508                  mov eax, dword ptr [ebp+08]
:00405C4B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405C4C FF15AC864B00            Call dword ptr [004B86AC]
:00405C52 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405C53 FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00405C59 6A05                    push 00000005
:00405C5B 6807040000              push 00000407
:00405C60 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405C63 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405C64 FF15AC864B00            Call dword ptr [004B86AC]
:00405C6A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405C6B FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405C71 6A0A                    push 0000000A
:00405C73 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00405C79 52                      push edx
:00405C7A 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405C80 33C9                    xor ecx, ecx
:00405C82 8A482C                  mov cl, byte ptr [eax+2C]
:00405C85 51                      push ecx
:00405C86 E8E5E70500              call 00464470
:00405C8B 83C40C                  add esp, 0000000C
:00405C8E 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:00405C8F 68FC030000              push 000003FC
:00405C94 8B5508                  mov edx, dword ptr [ebp+08]
:00405C97 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405C98 FF15AC864B00            Call dword ptr [004B86AC]
:00405C9E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405C9F FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00405CA5 68FF000000              push 000000FF
:00405CAA 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405CB0 660FB6482C              movzx cx, byte ptr [eax+2C]
:00405CB5 51                      push ecx
:00405CB6 6807040000              push 00000407
:00405CBB 8B5508                  mov edx, dword ptr [ebp+08]
:00405CBE 52                      push edx
:00405CBF E847F00500              call 00464D0B
:00405CC4 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405C24(U)
|
:00405CC7 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405CCD 33C9                    xor ecx, ecx
:00405CCF 8A4826                  mov cl, byte ptr [eax+26]
:00405CD2 83F90C                  cmp ecx, 0000000C
:00405CD5 754D                    jne 00405D24
:00405CD7 6A00                    push 00000000
:00405CD9 682D050000              push 0000052D
:00405CDE 8B5508                  mov edx, dword ptr [ebp+08]
:00405CE1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405CE2 FF15AC864B00            Call dword ptr [004B86AC]
:00405CE8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405CE9 FF15E4864B00            Call dword ptr [004B86E4]
:00405CEF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FB, "rubi"
                                  |
:00405CF1 68FB030000              push 000003FB
:00405CF6 8B4508                  mov eax, dword ptr [ebp+08]
:00405CF9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405CFA FF15AC864B00            Call dword ptr [004B86AC]
:00405D00 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405D01 FF15E4864B00            Call dword ptr [004B86E4]
:00405D07 6A00                    push 00000000
:00405D09 6806040000              push 00000406
:00405D0E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405D11 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405D12 FF15AC864B00            Call dword ptr [004B86AC]
:00405D18 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405D19 FF15E4864B00            Call dword ptr [004B86E4]
:00405D1F E99E000000              jmp 00405DC2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405CD5(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00405D24 6A05                    push 00000005
:00405D26 682D050000              push 0000052D
:00405D2B 8B5508                  mov edx, dword ptr [ebp+08]
:00405D2E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405D2F FF15AC864B00            Call dword ptr [004B86AC]
:00405D35 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405D36 FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00405D3C 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FB, "rubi"
                                  |
:00405D3E 68FB030000              push 000003FB
:00405D43 8B4508                  mov eax, dword ptr [ebp+08]
:00405D46 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405D47 FF15AC864B00            Call dword ptr [004B86AC]
:00405D4D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405D4E FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00405D54 6A05                    push 00000005
:00405D56 6806040000              push 00000406
:00405D5B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405D5E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405D5F FF15AC864B00            Call dword ptr [004B86AC]
:00405D65 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405D66 FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405D6C 6A0A                    push 0000000A
:00405D6E 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00405D74 52                      push edx
:00405D75 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405D7B 33C9                    xor ecx, ecx
:00405D7D 8A482B                  mov cl, byte ptr [eax+2B]
:00405D80 51                      push ecx
:00405D81 E8EAE60500              call 00464470
:00405D86 83C40C                  add esp, 0000000C
:00405D89 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FB, "rubi"
                                  |
:00405D8A 68FB030000              push 000003FB
:00405D8F 8B5508                  mov edx, dword ptr [ebp+08]
:00405D92 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405D93 FF15AC864B00            Call dword ptr [004B86AC]
:00405D99 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405D9A FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00405DA0 68FF000000              push 000000FF
:00405DA5 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405DAB 660FB6482B              movzx cx, byte ptr [eax+2B]
:00405DB0 51                      push ecx
:00405DB1 6806040000              push 00000406
:00405DB6 8B5508                  mov edx, dword ptr [ebp+08]
:00405DB9 52                      push edx
:00405DBA E84CEF0500              call 00464D0B
:00405DBF 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405D1F(U)
|
:00405DC2 8D8598FEFFFF            lea eax, dword ptr [ebp+FFFFFE98]
:00405DC8 50                      push eax
:00405DC9 682E040000              push 0000042E
:00405DCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405DD1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405DD2 FF15AC864B00            Call dword ptr [004B86AC]
:00405DD8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405DD9 FF15B0864B00            Call dword ptr [004B86B0]
:00405DDF 8B8D2CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE2C]
:00405DE5 E8B1FAFFFF              call 0040589B
:00405DEA 25FF000000              and eax, 000000FF
:00405DEF 8B1485707B4700          mov edx, dword ptr [4*eax+00477B70]
:00405DF6 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:00405DF7 68FF030000              push 000003FF
:00405DFC 8B4508                  mov eax, dword ptr [ebp+08]
:00405DFF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405E00 FF15AC864B00            Call dword ptr [004B86AC]
:00405E06 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405E07 FF15B0864B00            Call dword ptr [004B86B0]
:00405E0D 8B8D2CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE2C]
:00405E13 83C111                  add ecx, 00000011
:00405E16 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00405E17 68F9030000              push 000003F9
:00405E1C 8B5508                  mov edx, dword ptr [ebp+08]
:00405E1F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405E20 FF15AC864B00            Call dword ptr [004B86AC]
:00405E26 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405E27 FF15B0864B00            Call dword ptr [004B86B0]
:00405E2D 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405E33 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:00405E34 68F8030000              push 000003F8
:00405E39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405E3C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405E3D FF15AC864B00            Call dword ptr [004B86AC]
:00405E43 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405E44 FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405E4A 6A0A                    push 0000000A
:00405E4C 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00405E52 52                      push edx
:00405E53 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405E59 33C9                    xor ecx, ecx
:00405E5B 8A482D                  mov cl, byte ptr [eax+2D]
:00405E5E 51                      push ecx
:00405E5F E80CE60500              call 00464470
:00405E64 83C40C                  add esp, 0000000C
:00405E67 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:00405E68 68FD030000              push 000003FD
:00405E6D 8B5508                  mov edx, dword ptr [ebp+08]
:00405E70 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405E71 FF15AC864B00            Call dword ptr [004B86AC]
:00405E77 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405E78 FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00405E7E 68FF000000              push 000000FF
:00405E83 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405E89 660FB6482D              movzx cx, byte ptr [eax+2D]
:00405E8E 51                      push ecx
:00405E8F 6808040000              push 00000408
:00405E94 8B5508                  mov edx, dword ptr [ebp+08]
:00405E97 52                      push edx
:00405E98 E86EEE0500              call 00464D0B
:00405E9D 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405EA0 6A0A                    push 0000000A
:00405EA2 8D8534FEFFFF            lea eax, dword ptr [ebp+FFFFFE34]
:00405EA8 50                      push eax
:00405EA9 8B8D2CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE2C]
:00405EAF 33D2                    xor edx, edx
:00405EB1 8A5127                  mov dl, byte ptr [ecx+27]
:00405EB4 6BD20A                  imul edx, 0000000A
:00405EB7 52                      push edx
:00405EB8 E8B3E50500              call 00464470
:00405EBD 83C40C                  add esp, 0000000C
:00405EC0 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:00405EC1 68FE030000              push 000003FE
:00405EC6 8B4508                  mov eax, dword ptr [ebp+08]
:00405EC9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405ECA FF15AC864B00            Call dword ptr [004B86AC]
:00405ED0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405ED1 FF15B0864B00            Call dword ptr [004B86B0]
:00405ED7 68F6090000              push 000009F6
:00405EDC 8B8D2CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE2C]
:00405EE2 33D2                    xor edx, edx
:00405EE4 8A5127                  mov dl, byte ptr [ecx+27]
:00405EE7 6BD20A                  imul edx, 0000000A
:00405EEA 52                      push edx
:00405EEB 6809040000              push 00000409
:00405EF0 8B4508                  mov eax, dword ptr [ebp+08]
:00405EF3 50                      push eax
:00405EF4 E812EE0500              call 00464D0B
:00405EF9 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405EFC 6A0A                    push 0000000A
:00405EFE 8D8D34FEFFFF            lea ecx, dword ptr [ebp+FFFFFE34]
:00405F04 51                      push ecx
:00405F05 8B952CFEFFFF            mov edx, dword ptr [ebp+FFFFFE2C]
:00405F0B 33C0                    xor eax, eax
:00405F0D 8A4227                  mov al, byte ptr [edx+27]
:00405F10 6BC00A                  imul eax, 0000000A
:00405F13 50                      push eax
:00405F14 E857E50500              call 00464470
:00405F19 83C40C                  add esp, 0000000C
:00405F1C 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:00405F1D 68FA030000              push 000003FA
:00405F22 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405F25 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405F26 FF15AC864B00            Call dword ptr [004B86AC]
:00405F2C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405F2D FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405F33 6A0A                    push 0000000A
:00405F35 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00405F3B 52                      push edx
:00405F3C 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00405F42 33C9                    xor ecx, ecx
:00405F44 8A482F                  mov cl, byte ptr [eax+2F]
:00405F47 51                      push ecx
:00405F48 E823E50500              call 00464470
:00405F4D 83C40C                  add esp, 0000000C
:00405F50 50                      push eax
:00405F51 68E9030000              push 000003E9
:00405F56 8B5508                  mov edx, dword ptr [ebp+08]
:00405F59 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405F5A FF15AC864B00            Call dword ptr [004B86AC]
:00405F60 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405F61 FF15B0864B00            Call dword ptr [004B86B0]
:00405F67 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00405F6A 6BC933                  imul ecx, 00000033
:00405F6D 81C1C8EF4800            add ecx, 0048EFC8
:00405F73 E838E7FFFF              call 004046B0
:00405F78 25FF000000              and eax, 000000FF
:00405F7D 05C2010000              add eax, 000001C2
:00405F82 25FFFF0000              and eax, 0000FFFF
:00405F87 50                      push eax
:00405F88 B910584800              mov ecx, 00485810
:00405F8D E8CEE60400              call 00454660
:00405F92 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00405F93 FF15E8864B00            Call dword ptr [004B86E8]
:00405F99 898530FEFFFF            mov dword ptr [ebp+FFFFFE30], eax
:00405F9F 6A00                    push 00000000
:00405FA1 8B8530FEFFFF            mov eax, dword ptr [ebp+FFFFFE30]
:00405FA7 50                      push eax
:00405FA8 6870010000              push 00000170
:00405FAD 6815040000              push 00000415
:00405FB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405FB5 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00405FB6 FF15B4864B00            Call dword ptr [004B86B4]
:00405FBC 8B5508                  mov edx, dword ptr [ebp+08]
:00405FBF 52                      push edx
:00405FC0 8B8D2CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE2C]
:00405FC6 E8B8FAFFFF              call 00405A83
:00405FCB 8BE5                    mov esp, ebp
:00405FCD 5D                      pop ebp
:00405FCE C20800                  ret 0008


:00405FD1 55                      push ebp
:00405FD2 8BEC                    mov ebp, esp
:00405FD4 83EC08                  sub esp, 00000008
:00405FD7 8B450C                  mov eax, dword ptr [ebp+0C]
:00405FDA 8945FC                  mov dword ptr [ebp-04], eax
:00405FDD 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00405FE4 7714                    ja 00405FFA
:00405FE6 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00405FED 742F                    je 0040601E
:00405FEF 837DFC4E                cmp dword ptr [ebp-04], 0000004E
:00405FF3 744D                    je 00406042
:00405FF5 E9EF000000              jmp 004060E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405FE4(C)
|
:00405FFA 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00406001 0F849A000000            je 004060A1
:00406007 817DFC12010000          cmp dword ptr [ebp-04], 00000112
:0040600E 744E                    je 0040605E
:00406010 817DFC11030000          cmp dword ptr [ebp-04], 00000311
:00406017 742E                    je 00406047
:00406019 E9CB000000              jmp 004060E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405FED(C)
|
:0040601E 8B0DD8534800            mov ecx, dword ptr [004853D8]
:00406024 51                      push ecx
:00406025 8B5508                  mov edx, dword ptr [ebp+08]
:00406028 52                      push edx
:00406029 8B0DD8534800            mov ecx, dword ptr [004853D8]
:0040602F 6BC933                  imul ecx, 00000033
:00406032 81C1C8EF4800            add ecx, 0048EFC8
:00406038 E865FBFFFF              call 00405BA2
:0040603D E9A7000000              jmp 004060E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405FF3(C)
|
:00406042 E9A2000000              jmp 004060E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406017(C)
|
:00406047 6A00                    push 00000000
:00406049 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040604B 6A06                    push 00000006
:0040604D A1380E4B00              mov eax, dword ptr [004B0E38]
:00406052 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00406053 FF15D8864B00            Call dword ptr [004B86D8]
:00406059 E98B000000              jmp 004060E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040600E(C)
|
:0040605E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00406061 894DF8                  mov dword ptr [ebp-08], ecx
:00406064 817DF820F00000          cmp dword ptr [ebp-08], 0000F020
:0040606B 740B                    je 00406078
:0040606D 817DF820F10000          cmp dword ptr [ebp-08], 0000F120
:00406074 7404                    je 0040607A
:00406076 EB27                    jmp 0040609F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040606B(C)
|
:00406078 EB25                    jmp 0040609F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406074(C)
|
:0040607A 6A00                    push 00000000
:0040607C 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040607E 6A06                    push 00000006
:00406080 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00406086 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00406087 FF15D8864B00            Call dword ptr [004B86D8]
:0040608D 6A00                    push 00000000
:0040608F 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:00406091 6A06                    push 00000006
:00406093 A1380E4B00              mov eax, dword ptr [004B0E38]
:00406098 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00406099 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406076(U), :00406078(U)
|
:0040609F EB48                    jmp 004060E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406001(C)
|
:004060A1 8B4D10                  mov ecx, dword ptr [ebp+10]
:004060A4 81E1FFFF0000            and ecx, 0000FFFF
:004060AA 83F901                  cmp ecx, 00000001
:004060AD 740E                    je 004060BD
:004060AF 8B5510                  mov edx, dword ptr [ebp+10]
:004060B2 81E2FFFF0000            and edx, 0000FFFF
:004060B8 83FA02                  cmp edx, 00000002
:004060BB 750E                    jne 004060CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004060AD(C)
|
:004060BD 6A00                    push 00000000
:004060BF A18C184B00              mov eax, dword ptr [004B188C]
:004060C4 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004060C5 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004060BB(C)
|
:004060CB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004060CE 81E1FFFF0000            and ecx, 0000FFFF
:004060D4 81F9A9040000            cmp ecx, 000004A9
:004060DA 750D                    jne 004060E9
:004060DC 68FA0F0000              push 00000FFA
:004060E1 E87CD80500              call 00463962
:004060E6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405FF5(U), :00406019(U), :0040603D(U), :00406042(U), :00406059(U)
|:0040609F(U), :004060DA(C)
|
:004060E9 33C0                    xor eax, eax
:004060EB 8BE5                    mov esp, ebp
:004060ED 5D                      pop ebp
:004060EE C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0041AA2E   , :0045EA6F   , :00466970   
|
:004060F1 55                      push ebp
:004060F2 8BEC                    mov ebp, esp
:004060F4 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:004060FB 7202                    jb 004060FF
:004060FD EB4E                    jmp 0040614D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004060FB(C)
|
:004060FF 8B4508                  mov eax, dword ptr [ebp+08]
:00406102 50                      push eax
:00406103 8B0D8C184B00            mov ecx, dword ptr [004B188C]
:00406109 51                      push ecx
:0040610A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040610D 6BC933                  imul ecx, 00000033
:00406110 81C1C8EF4800            add ecx, 0048EFC8
:00406116 E887FAFFFF              call 00405BA2
:0040611B 8B158C184B00            mov edx, dword ptr [004B188C]
:00406121 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00406122 FF15A4864B00            Call dword ptr [004B86A4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00406128 6A09                    push 00000009
:0040612A A18C184B00              mov eax, dword ptr [004B188C]
:0040612F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00406130 FF15E4864B00            Call dword ptr [004B86E4]
:00406136 6A00                    push 00000000
:00406138 E8EA450600              call 0046A727
:0040613D 83C404                  add esp, 00000004
:00406140 8B0D8C184B00            mov ecx, dword ptr [004B188C]
:00406146 51                      push ecx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00406147 FF15A8864B00            Call dword ptr [004B86A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004060FD(U)
|
:0040614D 5D                      pop ebp
:0040614E C3                      ret



* Referenced by a CALL at Address:
|:00466FF3   
|
:0040614F 55                      push ebp
:00406150 8BEC                    mov ebp, esp
:00406152 C705D853480000000000    mov dword ptr [004853D8], 00000000
:0040615C 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UEE}"
                                  |
:0040615E 68D15F4000              push 00405FD1
:00406163 A1380E4B00              mov eax, dword ptr [004B0E38]
:00406168 50                      push eax

* Possible Reference to Dialog: DialogID_00A7 
                                  |
:00406169 68A7000000              push 000000A7
:0040616E 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00406174 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00406175 FF15A0864B00            Call dword ptr [004B86A0]
:0040617B A38C184B00              mov dword ptr [004B188C], eax
:00406180 833D8C184B0000          cmp dword ptr [004B188C], 00000000
:00406187 7504                    jne 0040618D
:00406189 33C0                    xor eax, eax
:0040618B EB14                    jmp 004061A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406187(C)
|
:0040618D 6A00                    push 00000000
:0040618F 8B158C184B00            mov edx, dword ptr [004B188C]
:00406195 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00406196 FF15E4864B00            Call dword ptr [004B86E4]
:0040619C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040618B(U)
|
:004061A1 5D                      pop ebp
:004061A2 C3                      ret



* Referenced by a CALL at Address:
|:00410FC0   
|
:004061A3 55                      push ebp
:004061A4 8BEC                    mov ebp, esp
:004061A6 83EC0C                  sub esp, 0000000C
:004061A9 894DF4                  mov dword ptr [ebp-0C], ecx
:004061AC 8B4508                  mov eax, dword ptr [ebp+08]
:004061AF 33C9                    xor ecx, ecx
:004061B1 8A08                    mov cl, byte ptr [eax]
:004061B3 894DFC                  mov dword ptr [ebp-04], ecx
:004061B6 8B5508                  mov edx, dword ptr [ebp+08]
:004061B9 83C201                  add edx, 00000001
:004061BC 895508                  mov dword ptr [ebp+08], edx
:004061BF 8B4508                  mov eax, dword ptr [ebp+08]
:004061C2 33C9                    xor ecx, ecx
:004061C4 8A08                    mov cl, byte ptr [eax]
:004061C6 C1E108                  shl ecx, 08
:004061C9 8B55FC                  mov edx, dword ptr [ebp-04]
:004061CC 03D1                    add edx, ecx
:004061CE 8955FC                  mov dword ptr [ebp-04], edx
:004061D1 8B4508                  mov eax, dword ptr [ebp+08]
:004061D4 83C001                  add eax, 00000001
:004061D7 894508                  mov dword ptr [ebp+08], eax
:004061DA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004061DD 8B55FC                  mov edx, dword ptr [ebp-04]
:004061E0 8911                    mov dword ptr [ecx], edx
:004061E2 8B45F4                  mov eax, dword ptr [ebp-0C]
:004061E5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004061E8 8A11                    mov dl, byte ptr [ecx]
:004061EA 885004                  mov byte ptr [eax+04], dl
:004061ED 8B4508                  mov eax, dword ptr [ebp+08]
:004061F0 83C001                  add eax, 00000001
:004061F3 894508                  mov dword ptr [ebp+08], eax
:004061F6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004061F9 8B5508                  mov edx, dword ptr [ebp+08]
:004061FC 8A02                    mov al, byte ptr [edx]
:004061FE 884105                  mov byte ptr [ecx+05], al
:00406201 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406204 83C101                  add ecx, 00000001
:00406207 894D08                  mov dword ptr [ebp+08], ecx
:0040620A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040620D 8B4508                  mov eax, dword ptr [ebp+08]
:00406210 8A08                    mov cl, byte ptr [eax]
:00406212 884A06                  mov byte ptr [edx+06], cl
:00406215 8B5508                  mov edx, dword ptr [ebp+08]
:00406218 83C201                  add edx, 00000001
:0040621B 895508                  mov dword ptr [ebp+08], edx
:0040621E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406221 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406224 8A11                    mov dl, byte ptr [ecx]
:00406226 885007                  mov byte ptr [eax+07], dl
:00406229 8B4508                  mov eax, dword ptr [ebp+08]
:0040622C 83C001                  add eax, 00000001
:0040622F 894508                  mov dword ptr [ebp+08], eax
:00406232 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00406235 8B5508                  mov edx, dword ptr [ebp+08]
:00406238 8A02                    mov al, byte ptr [edx]
:0040623A 884108                  mov byte ptr [ecx+08], al
:0040623D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406240 83C101                  add ecx, 00000001
:00406243 894D08                  mov dword ptr [ebp+08], ecx
:00406246 8B55F4                  mov edx, dword ptr [ebp-0C]
:00406249 8B4508                  mov eax, dword ptr [ebp+08]
:0040624C 8A08                    mov cl, byte ptr [eax]
:0040624E 884A11                  mov byte ptr [edx+11], cl
:00406251 8B5508                  mov edx, dword ptr [ebp+08]
:00406254 83C201                  add edx, 00000001
:00406257 895508                  mov dword ptr [ebp+08], edx
:0040625A 8B4508                  mov eax, dword ptr [ebp+08]
:0040625D 33C9                    xor ecx, ecx
:0040625F 8A08                    mov cl, byte ptr [eax]
:00406261 894DFC                  mov dword ptr [ebp-04], ecx
:00406264 8B5508                  mov edx, dword ptr [ebp+08]
:00406267 83C201                  add edx, 00000001
:0040626A 895508                  mov dword ptr [ebp+08], edx
:0040626D 8B4508                  mov eax, dword ptr [ebp+08]
:00406270 33C9                    xor ecx, ecx
:00406272 8A08                    mov cl, byte ptr [eax]
:00406274 C1E108                  shl ecx, 08
:00406277 8B55FC                  mov edx, dword ptr [ebp-04]
:0040627A 03D1                    add edx, ecx
:0040627C 8955FC                  mov dword ptr [ebp-04], edx
:0040627F 8B4508                  mov eax, dword ptr [ebp+08]
:00406282 83C001                  add eax, 00000001
:00406285 894508                  mov dword ptr [ebp+08], eax
:00406288 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040628B 668B55FC                mov dx, word ptr [ebp-04]
:0040628F 6689510A                mov word ptr [ecx+0A], dx
:00406293 8B4508                  mov eax, dword ptr [ebp+08]
:00406296 33C9                    xor ecx, ecx
:00406298 8A08                    mov cl, byte ptr [eax]
:0040629A 894DFC                  mov dword ptr [ebp-04], ecx
:0040629D 8B5508                  mov edx, dword ptr [ebp+08]
:004062A0 83C201                  add edx, 00000001
:004062A3 895508                  mov dword ptr [ebp+08], edx
:004062A6 8B4508                  mov eax, dword ptr [ebp+08]
:004062A9 33C9                    xor ecx, ecx
:004062AB 8A08                    mov cl, byte ptr [eax]
:004062AD C1E108                  shl ecx, 08
:004062B0 8B55FC                  mov edx, dword ptr [ebp-04]
:004062B3 03D1                    add edx, ecx
:004062B5 8955FC                  mov dword ptr [ebp-04], edx
:004062B8 8B4508                  mov eax, dword ptr [ebp+08]
:004062BB 83C001                  add eax, 00000001
:004062BE 894508                  mov dword ptr [ebp+08], eax
:004062C1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004062C4 668B55FC                mov dx, word ptr [ebp-04]
:004062C8 6689510C                mov word ptr [ecx+0C], dx
:004062CC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004062CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004062D2 8A11                    mov dl, byte ptr [ecx]
:004062D4 88500E                  mov byte ptr [eax+0E], dl
:004062D7 8B4508                  mov eax, dword ptr [ebp+08]
:004062DA 83C001                  add eax, 00000001
:004062DD 894508                  mov dword ptr [ebp+08], eax
:004062E0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004062E3 8B5508                  mov edx, dword ptr [ebp+08]
:004062E6 8A02                    mov al, byte ptr [edx]
:004062E8 884115                  mov byte ptr [ecx+15], al
:004062EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004062EE 83C101                  add ecx, 00000001
:004062F1 894D08                  mov dword ptr [ebp+08], ecx
:004062F4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004062F7 8B4508                  mov eax, dword ptr [ebp+08]
:004062FA 8A08                    mov cl, byte ptr [eax]
:004062FC 884A10                  mov byte ptr [edx+10], cl
:004062FF 8B5508                  mov edx, dword ptr [ebp+08]
:00406302 83C201                  add edx, 00000001
:00406305 895508                  mov dword ptr [ebp+08], edx
:00406308 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040630B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040630E 8A11                    mov dl, byte ptr [ecx]
:00406310 885012                  mov byte ptr [eax+12], dl
:00406313 8B4508                  mov eax, dword ptr [ebp+08]
:00406316 83C001                  add eax, 00000001
:00406319 894508                  mov dword ptr [ebp+08], eax
:0040631C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040631F 8B5508                  mov edx, dword ptr [ebp+08]
:00406322 8A02                    mov al, byte ptr [edx]
:00406324 884113                  mov byte ptr [ecx+13], al
:00406327 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040632A 83C101                  add ecx, 00000001
:0040632D 894D08                  mov dword ptr [ebp+08], ecx
:00406330 8B55F4                  mov edx, dword ptr [ebp-0C]
:00406333 8B4508                  mov eax, dword ptr [ebp+08]
:00406336 8A08                    mov cl, byte ptr [eax]
:00406338 884A14                  mov byte ptr [edx+14], cl
:0040633B 8B5508                  mov edx, dword ptr [ebp+08]
:0040633E 83C201                  add edx, 00000001
:00406341 895508                  mov dword ptr [ebp+08], edx
:00406344 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406347 8A4814                  mov cl, byte ptr [eax+14]
:0040634A 51                      push ecx
:0040634B B910584800              mov ecx, 00485810
:00406350 E8CB140000              call 00407820
:00406355 C745F800000000          mov [ebp-08], 00000000
:0040635C EB09                    jmp 00406367

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406387(U)
|
:0040635E 8B55F8                  mov edx, dword ptr [ebp-08]
:00406361 83C201                  add edx, 00000001
:00406364 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040635C(U)
|
:00406367 837DF808                cmp dword ptr [ebp-08], 00000008
:0040636B 731C                    jnb 00406389
:0040636D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406370 0345F8                  add eax, dword ptr [ebp-08]
:00406373 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406376 8A11                    mov dl, byte ptr [ecx]
:00406378 889026010000            mov byte ptr [eax+00000126], dl
:0040637E 8B4508                  mov eax, dword ptr [ebp+08]
:00406381 83C001                  add eax, 00000001
:00406384 894508                  mov dword ptr [ebp+08], eax
:00406387 EBD5                    jmp 0040635E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040636B(C)
|
:00406389 C745F800000000          mov [ebp-08], 00000000
:00406390 EB09                    jmp 0040639B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063CF(U)
|
:00406392 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406395 83C101                  add ecx, 00000001
:00406398 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406390(U)
|
:0040639B 837DF808                cmp dword ptr [ebp-08], 00000008
:0040639F 7330                    jnb 004063D1
:004063A1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004063A4 0355F8                  add edx, dword ptr [ebp-08]
:004063A7 8B4508                  mov eax, dword ptr [ebp+08]
:004063AA 8A08                    mov cl, byte ptr [eax]
:004063AC 884A16                  mov byte ptr [edx+16], cl
:004063AF 8B5508                  mov edx, dword ptr [ebp+08]
:004063B2 83C201                  add edx, 00000001
:004063B5 895508                  mov dword ptr [ebp+08], edx
:004063B8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004063BB 0345F8                  add eax, dword ptr [ebp-08]
:004063BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004063C1 8A11                    mov dl, byte ptr [ecx]
:004063C3 88501E                  mov byte ptr [eax+1E], dl
:004063C6 8B4508                  mov eax, dword ptr [ebp+08]
:004063C9 83C001                  add eax, 00000001
:004063CC 894508                  mov dword ptr [ebp+08], eax
:004063CF EBC1                    jmp 00406392

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040639F(C)
|
:004063D1 C745F800000000          mov [ebp-08], 00000000
:004063D8 EB09                    jmp 004063E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406429(U)
|
:004063DA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004063DD 83C101                  add ecx, 00000001
:004063E0 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063D8(U)
|
:004063E3 817DF880000000          cmp dword ptr [ebp-08], 00000080
:004063EA 733F                    jnb 0040642B
:004063EC 8B5508                  mov edx, dword ptr [ebp+08]
:004063EF 33C0                    xor eax, eax
:004063F1 8A02                    mov al, byte ptr [edx]
:004063F3 8945FC                  mov dword ptr [ebp-04], eax
:004063F6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004063F9 83C101                  add ecx, 00000001
:004063FC 894D08                  mov dword ptr [ebp+08], ecx
:004063FF 8B5508                  mov edx, dword ptr [ebp+08]
:00406402 33C0                    xor eax, eax
:00406404 8A02                    mov al, byte ptr [edx]
:00406406 C1E008                  shl eax, 08
:00406409 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040640C 03C8                    add ecx, eax
:0040640E 894DFC                  mov dword ptr [ebp-04], ecx
:00406411 8B5508                  mov edx, dword ptr [ebp+08]
:00406414 83C201                  add edx, 00000001
:00406417 895508                  mov dword ptr [ebp+08], edx
:0040641A 8B45F8                  mov eax, dword ptr [ebp-08]
:0040641D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00406420 668B55FC                mov dx, word ptr [ebp-04]
:00406424 6689544126              mov word ptr [ecx+2*eax+26], dx
:00406429 EBAF                    jmp 004063DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063EA(C)
|
:0040642B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040642E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406431 8A11                    mov dl, byte ptr [ecx]
:00406433 88500F                  mov byte ptr [eax+0F], dl
:00406436 8B4508                  mov eax, dword ptr [ebp+08]
:00406439 83C001                  add eax, 00000001
:0040643C 894508                  mov dword ptr [ebp+08], eax
:0040643F 8B4508                  mov eax, dword ptr [ebp+08]
:00406442 8BE5                    mov esp, ebp
:00406444 5D                      pop ebp
:00406445 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004117F6   
|
:00406448 55                      push ebp
:00406449 8BEC                    mov ebp, esp
:0040644B 83EC08                  sub esp, 00000008
:0040644E 894DF8                  mov dword ptr [ebp-08], ecx
:00406451 8B45F8                  mov eax, dword ptr [ebp-08]
:00406454 8B08                    mov ecx, dword ptr [eax]
:00406456 81E1FF000000            and ecx, 000000FF
:0040645C 8B5508                  mov edx, dword ptr [ebp+08]
:0040645F 880A                    mov byte ptr [edx], cl
:00406461 8B4508                  mov eax, dword ptr [ebp+08]
:00406464 83C001                  add eax, 00000001
:00406467 894508                  mov dword ptr [ebp+08], eax
:0040646A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040646D 8B11                    mov edx, dword ptr [ecx]
:0040646F C1EA08                  shr edx, 08
:00406472 8B4508                  mov eax, dword ptr [ebp+08]
:00406475 8810                    mov byte ptr [eax], dl
:00406477 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040647A 83C101                  add ecx, 00000001
:0040647D 894D08                  mov dword ptr [ebp+08], ecx
:00406480 8B5508                  mov edx, dword ptr [ebp+08]
:00406483 8B45F8                  mov eax, dword ptr [ebp-08]
:00406486 8A4804                  mov cl, byte ptr [eax+04]
:00406489 880A                    mov byte ptr [edx], cl
:0040648B 8B5508                  mov edx, dword ptr [ebp+08]
:0040648E 83C201                  add edx, 00000001
:00406491 895508                  mov dword ptr [ebp+08], edx
:00406494 8B4508                  mov eax, dword ptr [ebp+08]
:00406497 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040649A 8A5105                  mov dl, byte ptr [ecx+05]
:0040649D 8810                    mov byte ptr [eax], dl
:0040649F 8B4508                  mov eax, dword ptr [ebp+08]
:004064A2 83C001                  add eax, 00000001
:004064A5 894508                  mov dword ptr [ebp+08], eax
:004064A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004064AB 8B55F8                  mov edx, dword ptr [ebp-08]
:004064AE 8A4206                  mov al, byte ptr [edx+06]
:004064B1 8801                    mov byte ptr [ecx], al
:004064B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004064B6 83C101                  add ecx, 00000001
:004064B9 894D08                  mov dword ptr [ebp+08], ecx
:004064BC 8B5508                  mov edx, dword ptr [ebp+08]
:004064BF 8B45F8                  mov eax, dword ptr [ebp-08]
:004064C2 8A4807                  mov cl, byte ptr [eax+07]
:004064C5 880A                    mov byte ptr [edx], cl
:004064C7 8B5508                  mov edx, dword ptr [ebp+08]
:004064CA 83C201                  add edx, 00000001
:004064CD 895508                  mov dword ptr [ebp+08], edx
:004064D0 8B4508                  mov eax, dword ptr [ebp+08]
:004064D3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004064D6 8A5108                  mov dl, byte ptr [ecx+08]
:004064D9 8810                    mov byte ptr [eax], dl
:004064DB 8B4508                  mov eax, dword ptr [ebp+08]
:004064DE 83C001                  add eax, 00000001
:004064E1 894508                  mov dword ptr [ebp+08], eax
:004064E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004064E7 8B55F8                  mov edx, dword ptr [ebp-08]
:004064EA 8A4211                  mov al, byte ptr [edx+11]
:004064ED 8801                    mov byte ptr [ecx], al
:004064EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004064F2 83C101                  add ecx, 00000001
:004064F5 894D08                  mov dword ptr [ebp+08], ecx
:004064F8 8B55F8                  mov edx, dword ptr [ebp-08]
:004064FB 33C0                    xor eax, eax
:004064FD 668B420A                mov ax, word ptr [edx+0A]
:00406501 25FF000000              and eax, 000000FF
:00406506 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406509 8801                    mov byte ptr [ecx], al
:0040650B 8B5508                  mov edx, dword ptr [ebp+08]
:0040650E 83C201                  add edx, 00000001
:00406511 895508                  mov dword ptr [ebp+08], edx
:00406514 8B45F8                  mov eax, dword ptr [ebp-08]
:00406517 33C9                    xor ecx, ecx
:00406519 668B480A                mov cx, word ptr [eax+0A]
:0040651D C1F908                  sar ecx, 08
:00406520 8B5508                  mov edx, dword ptr [ebp+08]
:00406523 880A                    mov byte ptr [edx], cl
:00406525 8B4508                  mov eax, dword ptr [ebp+08]
:00406528 83C001                  add eax, 00000001
:0040652B 894508                  mov dword ptr [ebp+08], eax
:0040652E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406531 33D2                    xor edx, edx
:00406533 668B510C                mov dx, word ptr [ecx+0C]
:00406537 81E2FF000000            and edx, 000000FF
:0040653D 8B4508                  mov eax, dword ptr [ebp+08]
:00406540 8810                    mov byte ptr [eax], dl
:00406542 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406545 83C101                  add ecx, 00000001
:00406548 894D08                  mov dword ptr [ebp+08], ecx
:0040654B 8B55F8                  mov edx, dword ptr [ebp-08]
:0040654E 33C0                    xor eax, eax
:00406550 668B420C                mov ax, word ptr [edx+0C]
:00406554 C1F808                  sar eax, 08
:00406557 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040655A 8801                    mov byte ptr [ecx], al
:0040655C 8B5508                  mov edx, dword ptr [ebp+08]
:0040655F 83C201                  add edx, 00000001
:00406562 895508                  mov dword ptr [ebp+08], edx
:00406565 8B4508                  mov eax, dword ptr [ebp+08]
:00406568 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040656B 8A510E                  mov dl, byte ptr [ecx+0E]
:0040656E 8810                    mov byte ptr [eax], dl
:00406570 8B4508                  mov eax, dword ptr [ebp+08]
:00406573 83C001                  add eax, 00000001
:00406576 894508                  mov dword ptr [ebp+08], eax
:00406579 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040657C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040657F 8A4215                  mov al, byte ptr [edx+15]
:00406582 8801                    mov byte ptr [ecx], al
:00406584 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406587 83C101                  add ecx, 00000001
:0040658A 894D08                  mov dword ptr [ebp+08], ecx
:0040658D 8B5508                  mov edx, dword ptr [ebp+08]
:00406590 8B45F8                  mov eax, dword ptr [ebp-08]
:00406593 8A4810                  mov cl, byte ptr [eax+10]
:00406596 880A                    mov byte ptr [edx], cl
:00406598 8B5508                  mov edx, dword ptr [ebp+08]
:0040659B 83C201                  add edx, 00000001
:0040659E 895508                  mov dword ptr [ebp+08], edx
:004065A1 8B4508                  mov eax, dword ptr [ebp+08]
:004065A4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004065A7 8A5112                  mov dl, byte ptr [ecx+12]
:004065AA 8810                    mov byte ptr [eax], dl
:004065AC 8B4508                  mov eax, dword ptr [ebp+08]
:004065AF 83C001                  add eax, 00000001
:004065B2 894508                  mov dword ptr [ebp+08], eax
:004065B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004065B8 8B55F8                  mov edx, dword ptr [ebp-08]
:004065BB 8A4213                  mov al, byte ptr [edx+13]
:004065BE 8801                    mov byte ptr [ecx], al
:004065C0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004065C3 83C101                  add ecx, 00000001
:004065C6 894D08                  mov dword ptr [ebp+08], ecx
:004065C9 8B5508                  mov edx, dword ptr [ebp+08]
:004065CC 8B45F8                  mov eax, dword ptr [ebp-08]
:004065CF 8A4814                  mov cl, byte ptr [eax+14]
:004065D2 880A                    mov byte ptr [edx], cl
:004065D4 8B5508                  mov edx, dword ptr [ebp+08]
:004065D7 83C201                  add edx, 00000001
:004065DA 895508                  mov dword ptr [ebp+08], edx
:004065DD C745FC00000000          mov [ebp-04], 00000000
:004065E4 EB09                    jmp 004065EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040660F(U)
|
:004065E6 8B45FC                  mov eax, dword ptr [ebp-04]
:004065E9 83C001                  add eax, 00000001
:004065EC 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004065E4(U)
|
:004065EF 837DFC08                cmp dword ptr [ebp-04], 00000008
:004065F3 7D1C                    jge 00406611
:004065F5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004065F8 034DFC                  add ecx, dword ptr [ebp-04]
:004065FB 8B5508                  mov edx, dword ptr [ebp+08]
:004065FE 8A8126010000            mov al, byte ptr [ecx+00000126]
:00406604 8802                    mov byte ptr [edx], al
:00406606 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406609 83C101                  add ecx, 00000001
:0040660C 894D08                  mov dword ptr [ebp+08], ecx
:0040660F EBD5                    jmp 004065E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004065F3(C)
|
:00406611 C745FC00000000          mov [ebp-04], 00000000
:00406618 EB09                    jmp 00406623

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406657(U)
|
:0040661A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040661D 83C201                  add edx, 00000001
:00406620 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406618(U)
|
:00406623 837DFC08                cmp dword ptr [ebp-04], 00000008
:00406627 7D30                    jge 00406659
:00406629 8B45F8                  mov eax, dword ptr [ebp-08]
:0040662C 0345FC                  add eax, dword ptr [ebp-04]
:0040662F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406632 8A5016                  mov dl, byte ptr [eax+16]
:00406635 8811                    mov byte ptr [ecx], dl
:00406637 8B4508                  mov eax, dword ptr [ebp+08]
:0040663A 83C001                  add eax, 00000001
:0040663D 894508                  mov dword ptr [ebp+08], eax
:00406640 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406643 034DFC                  add ecx, dword ptr [ebp-04]
:00406646 8B5508                  mov edx, dword ptr [ebp+08]
:00406649 8A411E                  mov al, byte ptr [ecx+1E]
:0040664C 8802                    mov byte ptr [edx], al
:0040664E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406651 83C101                  add ecx, 00000001
:00406654 894D08                  mov dword ptr [ebp+08], ecx
:00406657 EBC1                    jmp 0040661A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406627(C)
|
:00406659 C745FC00000000          mov [ebp-04], 00000000
:00406660 EB09                    jmp 0040666B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066B3(U)
|
:00406662 8B55FC                  mov edx, dword ptr [ebp-04]
:00406665 83C201                  add edx, 00000001
:00406668 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406660(U)
|
:0040666B 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:00406672 7D41                    jge 004066B5
:00406674 8B45FC                  mov eax, dword ptr [ebp-04]
:00406677 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040667A 33D2                    xor edx, edx
:0040667C 668B544126              mov dx, word ptr [ecx+2*eax+26]
:00406681 81E2FF000000            and edx, 000000FF
:00406687 8B4508                  mov eax, dword ptr [ebp+08]
:0040668A 8810                    mov byte ptr [eax], dl
:0040668C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040668F 83C101                  add ecx, 00000001
:00406692 894D08                  mov dword ptr [ebp+08], ecx
:00406695 8B55FC                  mov edx, dword ptr [ebp-04]
:00406698 8B45F8                  mov eax, dword ptr [ebp-08]
:0040669B 33C9                    xor ecx, ecx
:0040669D 668B4C5026              mov cx, word ptr [eax+2*edx+26]
:004066A2 C1F908                  sar ecx, 08
:004066A5 8B5508                  mov edx, dword ptr [ebp+08]
:004066A8 880A                    mov byte ptr [edx], cl
:004066AA 8B4508                  mov eax, dword ptr [ebp+08]
:004066AD 83C001                  add eax, 00000001
:004066B0 894508                  mov dword ptr [ebp+08], eax
:004066B3 EBAD                    jmp 00406662

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406672(C)
|
:004066B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004066B8 8B55F8                  mov edx, dword ptr [ebp-08]
:004066BB 8A420F                  mov al, byte ptr [edx+0F]
:004066BE 8801                    mov byte ptr [ecx], al
:004066C0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004066C3 83C101                  add ecx, 00000001
:004066C6 894D08                  mov dword ptr [ebp+08], ecx
:004066C9 8B4508                  mov eax, dword ptr [ebp+08]
:004066CC 8BE5                    mov esp, ebp
:004066CE 5D                      pop ebp
:004066CF C20400                  ret 0004


:004066D2 55                      push ebp
:004066D3 8BEC                    mov ebp, esp
:004066D5 83EC08                  sub esp, 00000008
:004066D8 894DF8                  mov dword ptr [ebp-08], ecx
:004066DB 8B45F8                  mov eax, dword ptr [ebp-08]
:004066DE 33C9                    xor ecx, ecx
:004066E0 668B480A                mov cx, word ptr [eax+0A]
:004066E4 894DFC                  mov dword ptr [ebp-04], ecx
:004066E7 8B55F8                  mov edx, dword ptr [ebp-08]
:004066EA 668B420A                mov ax, word ptr [edx+0A]
:004066EE 6625FFEF                and ax, EFFF
:004066F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004066F5 6689410A                mov word ptr [ecx+0A], ax
:004066F9 8B45FC                  mov eax, dword ptr [ebp-04]
:004066FC 8BE5                    mov esp, ebp
:004066FE 5D                      pop ebp
:004066FF C3                      ret



* Referenced by a CALL at Addresses:
|:00426F91   , :0045FDD3   
|
:00406700 55                      push ebp
:00406701 8BEC                    mov ebp, esp
:00406703 51                      push ecx
:00406704 894DFC                  mov dword ptr [ebp-04], ecx
:00406707 8B45FC                  mov eax, dword ptr [ebp-04]
:0040670A 33C9                    xor ecx, ecx
:0040670C 668B480C                mov cx, word ptr [eax+0C]
:00406710 8BC1                    mov eax, ecx
:00406712 8BE5                    mov esp, ebp
:00406714 5D                      pop ebp
:00406715 C3                      ret



* Referenced by a CALL at Address:
|:00426F60   
|
:00406716 55                      push ebp
:00406717 8BEC                    mov ebp, esp
:00406719 51                      push ecx
:0040671A 894DFC                  mov dword ptr [ebp-04], ecx
:0040671D 8B45FC                  mov eax, dword ptr [ebp-04]
:00406720 668B4D08                mov cx, word ptr [ebp+08]
:00406724 6689480C                mov word ptr [eax+0C], cx
:00406728 8BE5                    mov esp, ebp
:0040672A 5D                      pop ebp
:0040672B C20400                  ret 0004


:0040672E 55                      push ebp
:0040672F 8BEC                    mov ebp, esp
:00406731 83EC0C                  sub esp, 0000000C
:00406734 894DF4                  mov dword ptr [ebp-0C], ecx
:00406737 C645FC00                mov [ebp-04], 00
:0040673B C645F800                mov [ebp-08], 00
:0040673F EB08                    jmp 00406749

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406773(U)
|
:00406741 8A45F8                  mov al, byte ptr [ebp-08]
:00406744 0401                    add al, 01
:00406746 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040673F(U)
|
:00406749 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040674C 81E1FF000000            and ecx, 000000FF
:00406752 83F908                  cmp ecx, 00000008
:00406755 7D1E                    jge 00406775
:00406757 8B55F8                  mov edx, dword ptr [ebp-08]
:0040675A 81E2FF000000            and edx, 000000FF
:00406760 52                      push edx
:00406761 B9C8E24A00              mov ecx, 004AE2C8
:00406766 E8D50F0000              call 00407740
:0040676B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040676E 02C8                    add cl, al
:00406770 884DFC                  mov byte ptr [ebp-04], cl
:00406773 EBCC                    jmp 00406741

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406755(C)
|
:00406775 8B45FC                  mov eax, dword ptr [ebp-04]
:00406778 25FF000000              and eax, 000000FF
:0040677D 6BC005                  imul eax, 00000005
:00406780 8BE5                    mov esp, ebp
:00406782 5D                      pop ebp
:00406783 C3                      ret


:00406784 55                      push ebp
:00406785 8BEC                    mov ebp, esp
:00406787 83EC08                  sub esp, 00000008
:0040678A 894DF8                  mov dword ptr [ebp-08], ecx
:0040678D C745FC00000000          mov [ebp-04], 00000000
:00406794 EB09                    jmp 0040679F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067BF(U)
|
:00406796 8B45FC                  mov eax, dword ptr [ebp-04]
:00406799 83C001                  add eax, 00000001
:0040679C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406794(U)
|
:0040679F 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004067A6 7319                    jnb 004067C1
:004067A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004067AB 8B55F8                  mov edx, dword ptr [ebp-08]
:004067AE 33C0                    xor eax, eax
:004067B0 668B444A26              mov ax, word ptr [edx+2*ecx+26]
:004067B5 3B4508                  cmp eax, dword ptr [ebp+08]
:004067B8 7505                    jne 004067BF
:004067BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004067BD EB07                    jmp 004067C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067B8(C)
|
:004067BF EBD5                    jmp 00406796

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067A6(C)
|
:004067C1 B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067BD(U)
|
:004067C6 8BE5                    mov esp, ebp
:004067C8 5D                      pop ebp
:004067C9 C20400                  ret 0004


:004067CC 55                      push ebp
:004067CD 8BEC                    mov ebp, esp
:004067CF 83EC08                  sub esp, 00000008
:004067D2 894DF8                  mov dword ptr [ebp-08], ecx
:004067D5 C745FC00000000          mov [ebp-04], 00000000
:004067DC EB09                    jmp 004067E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406819(U)
|
:004067DE 8B45FC                  mov eax, dword ptr [ebp-04]
:004067E1 83C001                  add eax, 00000001
:004067E4 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067DC(U)
|
:004067E7 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004067EE 732B                    jnb 0040681B
:004067F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004067F3 8B55F8                  mov edx, dword ptr [ebp-08]
:004067F6 33C0                    xor eax, eax
:004067F8 668B444A26              mov ax, word ptr [edx+2*ecx+26]
:004067FD 3B4508                  cmp eax, dword ptr [ebp+08]
:00406800 7517                    jne 00406819
:00406802 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00406805 51                      push ecx
:00406806 8B55FC                  mov edx, dword ptr [ebp-04]
:00406809 52                      push edx
:0040680A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040680D E84E0F0000              call 00407760
:00406812 B801000000              mov eax, 00000001
:00406817 EB04                    jmp 0040681D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406800(C)
|
:00406819 EBC3                    jmp 004067DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067EE(C)
|
:0040681B 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406817(U)
|
:0040681D 8BE5                    mov esp, ebp
:0040681F 5D                      pop ebp
:00406820 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040687E   , :00409AA9   , :0041DC3D   
|
:00406823 55                      push ebp
:00406824 8BEC                    mov ebp, esp
:00406826 83EC0C                  sub esp, 0000000C
:00406829 894DF4                  mov dword ptr [ebp-0C], ecx
:0040682C C745FC00000000          mov [ebp-04], 00000000
:00406833 8B45FC                  mov eax, dword ptr [ebp-04]
:00406836 8945F8                  mov dword ptr [ebp-08], eax
:00406839 EB09                    jmp 00406844

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040686B(U)
|
:0040683B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040683E 83C101                  add ecx, 00000001
:00406841 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406839(U)
|
:00406844 817DF880000000          cmp dword ptr [ebp-08], 00000080
:0040684B 7320                    jnb 0040686D
:0040684D 8B55F8                  mov edx, dword ptr [ebp-08]
:00406850 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406853 33C9                    xor ecx, ecx
:00406855 668B4C5026              mov cx, word ptr [eax+2*edx+26]
:0040685A 81F9FFFF0000            cmp ecx, 0000FFFF
:00406860 7409                    je 0040686B
:00406862 8B55FC                  mov edx, dword ptr [ebp-04]
:00406865 83C201                  add edx, 00000001
:00406868 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406860(C)
|
:0040686B EBCE                    jmp 0040683B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040684B(C)
|
:0040686D 8A45FC                  mov al, byte ptr [ebp-04]
:00406870 8BE5                    mov esp, ebp
:00406872 5D                      pop ebp
:00406873 C3                      ret



* Referenced by a CALL at Addresses:
|:00402AF8   , :00406900   , :0040CEF0   
|
:00406874 55                      push ebp
:00406875 8BEC                    mov ebp, esp
:00406877 51                      push ecx
:00406878 894DFC                  mov dword ptr [ebp-04], ecx
:0040687B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040687E E8A0FFFFFF              call 00406823
:00406883 25FF000000              and eax, 000000FF
:00406888 33C9                    xor ecx, ecx
:0040688A 3D80000000              cmp eax, 00000080
:0040688F 0F95C1                  setne cl
:00406892 8BC1                    mov eax, ecx
:00406894 8BE5                    mov esp, ebp
:00406896 5D                      pop ebp
:00406897 C3                      ret



* Referenced by a CALL at Addresses:
|:00402B4C   , :00406910   , :0040CF00   
|
:00406898 55                      push ebp
:00406899 8BEC                    mov ebp, esp
:0040689B 83EC08                  sub esp, 00000008
:0040689E 894DF8                  mov dword ptr [ebp-08], ecx
:004068A1 C745FC00000000          mov [ebp-04], 00000000
:004068A8 EB09                    jmp 004068B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068E2(U)
|
:004068AA 8B45FC                  mov eax, dword ptr [ebp-04]
:004068AD 83C001                  add eax, 00000001
:004068B0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068A8(U)
|
:004068B3 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004068BA 7328                    jnb 004068E4
:004068BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004068BF 8B55F8                  mov edx, dword ptr [ebp-08]
:004068C2 33C0                    xor eax, eax
:004068C4 668B444A26              mov ax, word ptr [edx+2*ecx+26]
:004068C9 3DFFFF0000              cmp eax, 0000FFFF
:004068CE 7512                    jne 004068E2
:004068D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004068D3 51                      push ecx
:004068D4 8B55FC                  mov edx, dword ptr [ebp-04]
:004068D7 52                      push edx
:004068D8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004068DB E8800E0000              call 00407760
:004068E0 EB02                    jmp 004068E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068CE(C)
|
:004068E2 EBC6                    jmp 004068AA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004068BA(C), :004068E0(U)
|
:004068E4 8B45FC                  mov eax, dword ptr [ebp-04]
:004068E7 8BE5                    mov esp, ebp
:004068E9 5D                      pop ebp
:004068EA C20400                  ret 0004


:004068ED 55                      push ebp
:004068EE 8BEC                    mov ebp, esp
:004068F0 83EC08                  sub esp, 00000008
:004068F3 894DF8                  mov dword ptr [ebp-08], ecx
:004068F6 C745FC01000000          mov [ebp-04], 00000001
:004068FD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406900 E86FFFFFFF              call 00406874
:00406905 85C0                    test eax, eax
:00406907 741B                    je 00406924
:00406909 8B4508                  mov eax, dword ptr [ebp+08]
:0040690C 50                      push eax
:0040690D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406910 E883FFFFFF              call 00406898
:00406915 33C9                    xor ecx, ecx
:00406917 3D80000000              cmp eax, 00000080
:0040691C 0F95C1                  setne cl
:0040691F 894DFC                  mov dword ptr [ebp-04], ecx
:00406922 EB1F                    jmp 00406943

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406907(C)
|
:00406924 6A00                    push 00000000
:00406926 E8F59F0000              call 00410920
:0040692B 83C404                  add esp, 00000004
:0040692E 85C0                    test eax, eax
:00406930 7411                    je 00406943
:00406932 8B5508                  mov edx, dword ptr [ebp+08]
:00406935 52                      push edx
:00406936 B998224900              mov ecx, 00492298
:0040693B E84AC1FFFF              call 00402A8A
:00406940 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406922(U), :00406930(C)
|
:00406943 8B45FC                  mov eax, dword ptr [ebp-04]
:00406946 8BE5                    mov esp, ebp
:00406948 5D                      pop ebp
:00406949 C20400                  ret 0004


:0040694C 55                      push ebp
:0040694D 8BEC                    mov ebp, esp
:0040694F 83EC08                  sub esp, 00000008
:00406952 894DF8                  mov dword ptr [ebp-08], ecx
:00406955 C745FC00000000          mov [ebp-04], 00000000
:0040695C EB09                    jmp 00406967

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040698B(U)
|
:0040695E 8B45FC                  mov eax, dword ptr [ebp-04]
:00406961 83C001                  add eax, 00000001
:00406964 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040695C(U)
|
:00406967 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:0040696E 731D                    jnb 0040698D
:00406970 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406973 660FB611                movzx dx, byte ptr [ecx]
:00406977 8B45FC                  mov eax, dword ptr [ebp-04]
:0040697A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040697D 6689544126              mov word ptr [ecx+2*eax+26], dx
:00406982 8B5508                  mov edx, dword ptr [ebp+08]
:00406985 83C201                  add edx, 00000001
:00406988 895508                  mov dword ptr [ebp+08], edx
:0040698B EBD1                    jmp 0040695E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040696E(C)
|
:0040698D 8BE5                    mov esp, ebp
:0040698F 5D                      pop ebp
:00406990 C20400                  ret 0004


:00406993 55                      push ebp
:00406994 8BEC                    mov ebp, esp
:00406996 83EC08                  sub esp, 00000008
:00406999 894DF8                  mov dword ptr [ebp-08], ecx
:0040699C C745FC00000000          mov [ebp-04], 00000000
:004069A3 EB09                    jmp 004069AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004069CF(U)
|
:004069A5 8B45FC                  mov eax, dword ptr [ebp-04]
:004069A8 83C001                  add eax, 00000001
:004069AB 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004069A3(U)
|
:004069AE 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004069B5 731A                    jnb 004069D1
:004069B7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004069BA 8B55FC                  mov edx, dword ptr [ebp-04]
:004069BD 8B45F8                  mov eax, dword ptr [ebp-08]
:004069C0 8A545026                mov dl, byte ptr [eax+2*edx+26]
:004069C4 8811                    mov byte ptr [ecx], dl
:004069C6 8B4508                  mov eax, dword ptr [ebp+08]
:004069C9 83C001                  add eax, 00000001
:004069CC 894508                  mov dword ptr [ebp+08], eax
:004069CF EBD4                    jmp 004069A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004069B5(C)
|
:004069D1 8BE5                    mov esp, ebp
:004069D3 5D                      pop ebp
:004069D4 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0041227D   
|
:004069D7 55                      push ebp
:004069D8 8BEC                    mov ebp, esp
:004069DA 51                      push ecx
:004069DB 894DFC                  mov dword ptr [ebp-04], ecx
:004069DE 8B45FC                  mov eax, dword ptr [ebp-04]
:004069E1 33C9                    xor ecx, ecx
:004069E3 668B480A                mov cx, word ptr [eax+0A]
:004069E7 8BC1                    mov eax, ecx
:004069E9 234508                  and eax, dword ptr [ebp+08]
:004069EC F7D8                    neg eax
:004069EE 1BC0                    sbb eax, eax
:004069F0 F7D8                    neg eax
:004069F2 8BE5                    mov esp, ebp
:004069F4 5D                      pop ebp
:004069F5 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411F47   
|
:004069F8 55                      push ebp
:004069F9 8BEC                    mov ebp, esp
:004069FB 51                      push ecx
:004069FC 894DFC                  mov dword ptr [ebp-04], ecx
:004069FF 8B45FC                  mov eax, dword ptr [ebp-04]
:00406A02 33C9                    xor ecx, ecx
:00406A04 668B480A                mov cx, word ptr [eax+0A]
:00406A08 0B4D08                  or ecx, dword ptr [ebp+08]
:00406A0B 51                      push ecx
:00406A0C B9C8E24A00              mov ecx, 004AE2C8
:00406A11 E87AE60100              call 00425090
:00406A16 8BE5                    mov esp, ebp
:00406A18 5D                      pop ebp
:00406A19 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411F57   
|
:00406A1C 55                      push ebp
:00406A1D 8BEC                    mov ebp, esp
:00406A1F 51                      push ecx
:00406A20 894DFC                  mov dword ptr [ebp-04], ecx
:00406A23 8B45FC                  mov eax, dword ptr [ebp-04]
:00406A26 33C9                    xor ecx, ecx
:00406A28 668B480A                mov cx, word ptr [eax+0A]
:00406A2C 8B5508                  mov edx, dword ptr [ebp+08]
:00406A2F F7D2                    not edx
:00406A31 23CA                    and ecx, edx
:00406A33 51                      push ecx
:00406A34 B9C8E24A00              mov ecx, 004AE2C8
:00406A39 E852E60100              call 00425090
:00406A3E 8BE5                    mov esp, ebp
:00406A40 5D                      pop ebp
:00406A41 C20400                  ret 0004


:00406A44 55                      push ebp
:00406A45 8BEC                    mov ebp, esp
:00406A47 51                      push ecx
:00406A48 894DFC                  mov dword ptr [ebp-04], ecx
:00406A4B 8B4508                  mov eax, dword ptr [ebp+08]
:00406A4E 50                      push eax
:00406A4F E8B0A9FFFF              call 00401404
:00406A54 83C404                  add esp, 00000004
:00406A57 50                      push eax

* Possible StringData Ref from Data Obj ->"%s[JC"
                                  |
:00406A58 6820634700              push 00476320
:00406A5D 6A00                    push 00000000
:00406A5F E808210200              call 00428B6C
:00406A64 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00012: ""
                                  |
:00406A67 6A0C                    push 0000000C
:00406A69 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406A6C 6BC970                  imul ecx, 00000070
:00406A6F 81C198224900            add ecx, 00492298
:00406A75 E8860D0000              call 00407800
:00406A7A B801000000              mov eax, 00000001
:00406A7F 8BE5                    mov esp, ebp
:00406A81 5D                      pop ebp
:00406A82 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040D284   
|
:00406A85 55                      push ebp
:00406A86 8BEC                    mov ebp, esp
:00406A88 83EC08                  sub esp, 00000008
:00406A8B 894DF8                  mov dword ptr [ebp-08], ecx
:00406A8E B9C8E24A00              mov ecx, 004AE2C8
:00406A93 E8388C0200              call 0042F6D0
:00406A98 8945FC                  mov dword ptr [ebp-04], eax
:00406A9B 6850C30000              push 0000C350
:00406AA0 8B4508                  mov eax, dword ptr [ebp+08]
:00406AA3 50                      push eax
:00406AA4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406AA7 51                      push ecx
:00406AA8 E8E5B40500              call 00461F92
:00406AAD 83C40C                  add esp, 0000000C
:00406AB0 8945FC                  mov dword ptr [ebp-04], eax
:00406AB3 8B55FC                  mov edx, dword ptr [ebp-04]
:00406AB6 52                      push edx
:00406AB7 B9C8E24A00              mov ecx, 004AE2C8
:00406ABC E8BF0C0000              call 00407780
:00406AC1 33C0                    xor eax, eax
:00406AC3 8BE5                    mov esp, ebp
:00406AC5 5D                      pop ebp
:00406AC6 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040D294   
|
:00406AC9 55                      push ebp
:00406ACA 8BEC                    mov ebp, esp
:00406ACC 83EC08                  sub esp, 00000008
:00406ACF 894DF8                  mov dword ptr [ebp-08], ecx
:00406AD2 B9C8E24A00              mov ecx, 004AE2C8
:00406AD7 E8F48B0200              call 0042F6D0
:00406ADC 8945FC                  mov dword ptr [ebp-04], eax
:00406ADF 8B4508                  mov eax, dword ptr [ebp+08]
:00406AE2 50                      push eax
:00406AE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406AE6 51                      push ecx
:00406AE7 E8D8B40500              call 00461FC4
:00406AEC 83C408                  add esp, 00000008
:00406AEF 8945FC                  mov dword ptr [ebp-04], eax
:00406AF2 8B55FC                  mov edx, dword ptr [ebp-04]
:00406AF5 52                      push edx
:00406AF6 B9C8E24A00              mov ecx, 004AE2C8
:00406AFB E8800C0000              call 00407780
:00406B00 8BE5                    mov esp, ebp
:00406B02 5D                      pop ebp
:00406B03 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411039   
|
:00406B06 55                      push ebp
:00406B07 8BEC                    mov ebp, esp
:00406B09 51                      push ecx
:00406B0A 894DFC                  mov dword ptr [ebp-04], ecx
:00406B0D 8B45FC                  mov eax, dword ptr [ebp-04]
:00406B10 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406B13 8A11                    mov dl, byte ptr [ecx]
:00406B15 8810                    mov byte ptr [eax], dl
:00406B17 8B4508                  mov eax, dword ptr [ebp+08]
:00406B1A 83C001                  add eax, 00000001
:00406B1D 894508                  mov dword ptr [ebp+08], eax
:00406B20 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406B23 8B5508                  mov edx, dword ptr [ebp+08]
:00406B26 8A02                    mov al, byte ptr [edx]
:00406B28 884101                  mov byte ptr [ecx+01], al
:00406B2B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406B2E 83C101                  add ecx, 00000001
:00406B31 894D08                  mov dword ptr [ebp+08], ecx
:00406B34 8B55FC                  mov edx, dword ptr [ebp-04]
:00406B37 8B4508                  mov eax, dword ptr [ebp+08]
:00406B3A 8A08                    mov cl, byte ptr [eax]
:00406B3C 884A02                  mov byte ptr [edx+02], cl
:00406B3F 8B5508                  mov edx, dword ptr [ebp+08]
:00406B42 83C201                  add edx, 00000001
:00406B45 895508                  mov dword ptr [ebp+08], edx
:00406B48 8B45FC                  mov eax, dword ptr [ebp-04]
:00406B4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406B4E 8A11                    mov dl, byte ptr [ecx]
:00406B50 885003                  mov byte ptr [eax+03], dl
:00406B53 8B4508                  mov eax, dword ptr [ebp+08]
:00406B56 83C001                  add eax, 00000001
:00406B59 894508                  mov dword ptr [ebp+08], eax
:00406B5C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406B5F 8B5508                  mov edx, dword ptr [ebp+08]
:00406B62 8A02                    mov al, byte ptr [edx]
:00406B64 884104                  mov byte ptr [ecx+04], al
:00406B67 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406B6A 83C101                  add ecx, 00000001
:00406B6D 894D08                  mov dword ptr [ebp+08], ecx
:00406B70 8B55FC                  mov edx, dword ptr [ebp-04]
:00406B73 8B4508                  mov eax, dword ptr [ebp+08]
:00406B76 8A08                    mov cl, byte ptr [eax]
:00406B78 884A05                  mov byte ptr [edx+05], cl
:00406B7B 8B5508                  mov edx, dword ptr [ebp+08]
:00406B7E 83C201                  add edx, 00000001
:00406B81 895508                  mov dword ptr [ebp+08], edx
:00406B84 8B45FC                  mov eax, dword ptr [ebp-04]
:00406B87 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406B8A 8A11                    mov dl, byte ptr [ecx]
:00406B8C 885006                  mov byte ptr [eax+06], dl
:00406B8F 8B4508                  mov eax, dword ptr [ebp+08]
:00406B92 83C001                  add eax, 00000001
:00406B95 894508                  mov dword ptr [ebp+08], eax
:00406B98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406B9B 8B5508                  mov edx, dword ptr [ebp+08]
:00406B9E 8A02                    mov al, byte ptr [edx]
:00406BA0 884107                  mov byte ptr [ecx+07], al
:00406BA3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406BA6 83C101                  add ecx, 00000001
:00406BA9 894D08                  mov dword ptr [ebp+08], ecx
:00406BAC 8B55FC                  mov edx, dword ptr [ebp-04]
:00406BAF 8B4508                  mov eax, dword ptr [ebp+08]
:00406BB2 8A08                    mov cl, byte ptr [eax]
:00406BB4 884A08                  mov byte ptr [edx+08], cl
:00406BB7 8B5508                  mov edx, dword ptr [ebp+08]
:00406BBA 83C201                  add edx, 00000001
:00406BBD 895508                  mov dword ptr [ebp+08], edx
:00406BC0 8B45FC                  mov eax, dword ptr [ebp-04]
:00406BC3 C6400900                mov [eax+09], 00
:00406BC7 8B4508                  mov eax, dword ptr [ebp+08]
:00406BCA 8BE5                    mov esp, ebp
:00406BCC 5D                      pop ebp
:00406BCD C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411854   
|
:00406BD0 55                      push ebp
:00406BD1 8BEC                    mov ebp, esp
:00406BD3 51                      push ecx
:00406BD4 894DFC                  mov dword ptr [ebp-04], ecx
:00406BD7 8B4508                  mov eax, dword ptr [ebp+08]
:00406BDA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406BDD 8A11                    mov dl, byte ptr [ecx]
:00406BDF 8810                    mov byte ptr [eax], dl
:00406BE1 8B4508                  mov eax, dword ptr [ebp+08]
:00406BE4 83C001                  add eax, 00000001
:00406BE7 894508                  mov dword ptr [ebp+08], eax
:00406BEA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406BED 8B55FC                  mov edx, dword ptr [ebp-04]
:00406BF0 8A4201                  mov al, byte ptr [edx+01]
:00406BF3 8801                    mov byte ptr [ecx], al
:00406BF5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406BF8 83C101                  add ecx, 00000001
:00406BFB 894D08                  mov dword ptr [ebp+08], ecx
:00406BFE 8B5508                  mov edx, dword ptr [ebp+08]
:00406C01 8B45FC                  mov eax, dword ptr [ebp-04]
:00406C04 8A4802                  mov cl, byte ptr [eax+02]
:00406C07 880A                    mov byte ptr [edx], cl
:00406C09 8B5508                  mov edx, dword ptr [ebp+08]
:00406C0C 83C201                  add edx, 00000001
:00406C0F 895508                  mov dword ptr [ebp+08], edx
:00406C12 8B4508                  mov eax, dword ptr [ebp+08]
:00406C15 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406C18 8A5103                  mov dl, byte ptr [ecx+03]
:00406C1B 8810                    mov byte ptr [eax], dl
:00406C1D 8B4508                  mov eax, dword ptr [ebp+08]
:00406C20 83C001                  add eax, 00000001
:00406C23 894508                  mov dword ptr [ebp+08], eax
:00406C26 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406C29 8B55FC                  mov edx, dword ptr [ebp-04]
:00406C2C 8A4204                  mov al, byte ptr [edx+04]
:00406C2F 8801                    mov byte ptr [ecx], al
:00406C31 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406C34 83C101                  add ecx, 00000001
:00406C37 894D08                  mov dword ptr [ebp+08], ecx
:00406C3A 8B5508                  mov edx, dword ptr [ebp+08]
:00406C3D 8B45FC                  mov eax, dword ptr [ebp-04]
:00406C40 8A4805                  mov cl, byte ptr [eax+05]
:00406C43 880A                    mov byte ptr [edx], cl
:00406C45 8B5508                  mov edx, dword ptr [ebp+08]
:00406C48 83C201                  add edx, 00000001
:00406C4B 895508                  mov dword ptr [ebp+08], edx
:00406C4E 8B4508                  mov eax, dword ptr [ebp+08]
:00406C51 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406C54 8A5106                  mov dl, byte ptr [ecx+06]
:00406C57 8810                    mov byte ptr [eax], dl
:00406C59 8B4508                  mov eax, dword ptr [ebp+08]
:00406C5C 83C001                  add eax, 00000001
:00406C5F 894508                  mov dword ptr [ebp+08], eax
:00406C62 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406C65 8B55FC                  mov edx, dword ptr [ebp-04]
:00406C68 8A4207                  mov al, byte ptr [edx+07]
:00406C6B 8801                    mov byte ptr [ecx], al
:00406C6D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406C70 83C101                  add ecx, 00000001
:00406C73 894D08                  mov dword ptr [ebp+08], ecx
:00406C76 8B5508                  mov edx, dword ptr [ebp+08]
:00406C79 8B45FC                  mov eax, dword ptr [ebp-04]
:00406C7C 8A4808                  mov cl, byte ptr [eax+08]
:00406C7F 880A                    mov byte ptr [edx], cl
:00406C81 8B5508                  mov edx, dword ptr [ebp+08]
:00406C84 83C201                  add edx, 00000001
:00406C87 895508                  mov dword ptr [ebp+08], edx
:00406C8A 8B4508                  mov eax, dword ptr [ebp+08]
:00406C8D 8BE5                    mov esp, ebp
:00406C8F 5D                      pop ebp
:00406C90 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0041753C   , :0042CFFB   , :0044238E   , :0045142E   , :00465D6B   
|
:00406C93 55                      push ebp
:00406C94 8BEC                    mov ebp, esp
:00406C96 837D081C                cmp dword ptr [ebp+08], 0000001C
:00406C9A 7204                    jb 00406CA0
:00406C9C 33C0                    xor eax, eax
:00406C9E EB11                    jmp 00406CB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C9A(C)
|
:00406CA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406CA3 6BC927                  imul ecx, 00000027
:00406CA6 81C1C83C4A00            add ecx, 004A3CC8
:00406CAC E8FF0A0000              call 004077B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C9E(U)
|
:00406CB1 5D                      pop ebp
:00406CB2 C3                      ret



* Referenced by a CALL at Addresses:
|:00402BA6   , :0040CEC4   , :00420E1A   , :00420E79   , :00427230   
|
:00406CB3 55                      push ebp
:00406CB4 8BEC                    mov ebp, esp
:00406CB6 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00406CBD 730D                    jnb 00406CCC
:00406CBF 8B4508                  mov eax, dword ptr [ebp+08]
:00406CC2 6BC070                  imul eax, 00000070
:00406CC5 0598224900              add eax, 00492298
:00406CCA EB02                    jmp 00406CCE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CBD(C)
|
:00406CCC 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CCA(U)
|
:00406CCE 5D                      pop ebp
:00406CCF C3                      ret



* Referenced by a CALL at Addresses:
|:0042AE8F   , :004428ED   
|
:00406CD0 55                      push ebp
:00406CD1 8BEC                    mov ebp, esp
:00406CD3 8B4508                  mov eax, dword ptr [ebp+08]
:00406CD6 2D98224900              sub eax, 00492298
:00406CDB 99                      cdq

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:00406CDC B970000000              mov ecx, 00000070
:00406CE1 F7F9                    idiv ecx
:00406CE3 5D                      pop ebp
:00406CE4 C3                      ret



* Referenced by a CALL at Addresses:
|:0040A79D   , :0040A7F1   , :0040A910   
|
:00406CE5 55                      push ebp
:00406CE6 8BEC                    mov ebp, esp
:00406CE8 51                      push ecx
:00406CE9 8B4510                  mov eax, dword ptr [ebp+10]
:00406CEC 50                      push eax
:00406CED 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406CF0 51                      push ecx
:00406CF1 E8E0A8FFFF              call 004015D6
:00406CF6 83C408                  add esp, 00000008
:00406CF9 8945FC                  mov dword ptr [ebp-04], eax
:00406CFC 8B55FC                  mov edx, dword ptr [ebp-04]
:00406CFF 52                      push edx
:00406D00 8B4510                  mov eax, dword ptr [ebp+10]
:00406D03 50                      push eax
:00406D04 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00406D07 51                      push ecx
:00406D08 E8DDADFFFF              call 00401AEA
:00406D0D 83C40C                  add esp, 0000000C
:00406D10 33C0                    xor eax, eax
:00406D12 8BE5                    mov esp, ebp
:00406D14 5D                      pop ebp
:00406D15 C3                      ret



* Referenced by a CALL at Address:
|:0040D1A4   
|
:00406D16 55                      push ebp
:00406D17 8BEC                    mov ebp, esp
:00406D19 83EC08                  sub esp, 00000008
:00406D1C 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00406D23 7207                    jb 00406D2C
:00406D25 33C0                    xor eax, eax
:00406D27 E9CD000000              jmp 00406DF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406D23(C)
|
:00406D2C 8B4508                  mov eax, dword ptr [ebp+08]
:00406D2F 50                      push eax
:00406D30 E8EB9B0000              call 00410920
:00406D35 83C404                  add esp, 00000004
:00406D38 85C0                    test eax, eax
:00406D3A 0F85A2000000            jne 00406DE2
:00406D40 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00406D44 0F8598000000            jne 00406DE2
:00406D4A 6A00                    push 00000000
:00406D4C E82BD8FFFF              call 0040457C
:00406D51 83C404                  add esp, 00000004
:00406D54 8845FC                  mov byte ptr [ebp-04], al
:00406D57 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406D5A 6BC970                  imul ecx, 00000070
:00406D5D 81C198224900            add ecx, 00492298
:00406D63 E868DAFFFF              call 004047D0
:00406D68 25FF000000              and eax, 000000FF
:00406D6D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406D70 81E1FF000000            and ecx, 000000FF
:00406D76 3BC1                    cmp eax, ecx
:00406D78 7D68                    jge 00406DE2
:00406D7A 8B55FC                  mov edx, dword ptr [ebp-04]
:00406D7D 81E2FF000000            and edx, 000000FF
:00406D83 83FA01                  cmp edx, 00000001
:00406D86 7E5A                    jle 00406DE2
:00406D88 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406D8B 6BC970                  imul ecx, 00000070
:00406D8E 81C198224900            add ecx, 00492298
:00406D94 E837DAFFFF              call 004047D0
:00406D99 25FF000000              and eax, 000000FF
:00406D9E 8945F8                  mov dword ptr [ebp-08], eax
:00406DA1 EB09                    jmp 00406DAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406DE0(U)
|
:00406DA3 8B45F8                  mov eax, dword ptr [ebp-08]
:00406DA6 83C001                  add eax, 00000001
:00406DA9 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406DA1(U)
|
:00406DAC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406DAF 81E1FF000000            and ecx, 000000FF
:00406DB5 394DF8                  cmp dword ptr [ebp-08], ecx
:00406DB8 7328                    jnb 00406DE2
:00406DBA 6A01                    push 00000001
:00406DBC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406DBF 6BC970                  imul ecx, 00000070
:00406DC2 81C198224900            add ecx, 00492298
:00406DC8 E8F2B2FFFF              call 004020BF
:00406DCD 6A00                    push 00000000
:00406DCF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406DD2 6BC970                  imul ecx, 00000070
:00406DD5 81C198224900            add ecx, 00492298
:00406DDB E885CFFFFF              call 00403D65
:00406DE0 EBC1                    jmp 00406DA3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406D3A(C), :00406D44(C), :00406D78(C), :00406D86(C), :00406DB8(C)
|
:00406DE2 8A550C                  mov dl, byte ptr [ebp+0C]
:00406DE5 52                      push edx
:00406DE6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406DE9 6BC970                  imul ecx, 00000070
:00406DEC 81C198224900            add ecx, 00492298
:00406DF2 E8090A0000              call 00407800
:00406DF7 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406D27(U)
|
:00406DF9 8BE5                    mov esp, ebp
:00406DFB 5D                      pop ebp
:00406DFC C3                      ret



* Referenced by a CALL at Address:
|:00411CC0   
|
:00406DFD 55                      push ebp
:00406DFE 8BEC                    mov ebp, esp
:00406E00 83EC18                  sub esp, 00000018
:00406E03 894DF0                  mov dword ptr [ebp-10], ecx
:00406E06 8B45F0                  mov eax, dword ptr [ebp-10]
:00406E09 8945F8                  mov dword ptr [ebp-08], eax
:00406E0C C745F400000000          mov [ebp-0C], 00000000
:00406E13 EB09                    jmp 00406E1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406E40(U)
|
:00406E15 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00406E18 83C101                  add ecx, 00000001
:00406E1B 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406E13(U)
|
:00406E1E 837DF408                cmp dword ptr [ebp-0C], 00000008
:00406E22 731E                    jnb 00406E42
:00406E24 8B55F8                  mov edx, dword ptr [ebp-08]
:00406E27 8B4508                  mov eax, dword ptr [ebp+08]
:00406E2A 8A08                    mov cl, byte ptr [eax]
:00406E2C 880A                    mov byte ptr [edx], cl
:00406E2E 8B55F8                  mov edx, dword ptr [ebp-08]
:00406E31 83C201                  add edx, 00000001
:00406E34 8955F8                  mov dword ptr [ebp-08], edx
:00406E37 8B4508                  mov eax, dword ptr [ebp+08]
:00406E3A 83C001                  add eax, 00000001
:00406E3D 894508                  mov dword ptr [ebp+08], eax
:00406E40 EBD3                    jmp 00406E15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406E22(C)
|
:00406E42 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406E45 C60100                  mov byte ptr [ecx], 00
:00406E48 8B5508                  mov edx, dword ptr [ebp+08]
:00406E4B 83C201                  add edx, 00000001
:00406E4E 895508                  mov dword ptr [ebp+08], edx
:00406E51 C745FC00000000          mov [ebp-04], 00000000
:00406E58 EB09                    jmp 00406E63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406EB3(U)
|
:00406E5A 8B45FC                  mov eax, dword ptr [ebp-04]
:00406E5D 83C001                  add eax, 00000001
:00406E60 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406E58(U)
|
:00406E63 837DFC03                cmp dword ptr [ebp-04], 00000003
:00406E67 734C                    jnb 00406EB5
:00406E69 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406E6C 33D2                    xor edx, edx
:00406E6E 8A11                    mov dl, byte ptr [ecx]
:00406E70 8955EC                  mov dword ptr [ebp-14], edx
:00406E73 8B45EC                  mov eax, dword ptr [ebp-14]
:00406E76 50                      push eax
:00406E77 6A00                    push 00000000
:00406E79 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406E7C 51                      push ecx
:00406E7D 8B5508                  mov edx, dword ptr [ebp+08]
:00406E80 83C201                  add edx, 00000001
:00406E83 895508                  mov dword ptr [ebp+08], edx
:00406E86 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00406E89 E832090000              call 004077C0
:00406E8E 8B4508                  mov eax, dword ptr [ebp+08]
:00406E91 33C9                    xor ecx, ecx
:00406E93 8A08                    mov cl, byte ptr [eax]
:00406E95 894DE8                  mov dword ptr [ebp-18], ecx
:00406E98 8B55E8                  mov edx, dword ptr [ebp-18]
:00406E9B 52                      push edx
:00406E9C 6A01                    push 00000001
:00406E9E 8B45FC                  mov eax, dword ptr [ebp-04]
:00406EA1 50                      push eax
:00406EA2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406EA5 83C101                  add ecx, 00000001
:00406EA8 894D08                  mov dword ptr [ebp+08], ecx
:00406EAB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00406EAE E80D090000              call 004077C0
:00406EB3 EBA5                    jmp 00406E5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406E67(C)
|
:00406EB5 8B4508                  mov eax, dword ptr [ebp+08]
:00406EB8 8BE5                    mov esp, ebp
:00406EBA 5D                      pop ebp
:00406EBB C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411DE0   
|
:00406EBE 55                      push ebp
:00406EBF 8BEC                    mov ebp, esp
:00406EC1 83EC0C                  sub esp, 0000000C
:00406EC4 894DF4                  mov dword ptr [ebp-0C], ecx
:00406EC7 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406ECA 8945FC                  mov dword ptr [ebp-04], eax
:00406ECD C745F800000000          mov [ebp-08], 00000000
:00406ED4 EB09                    jmp 00406EDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406F01(U)
|
:00406ED6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406ED9 83C101                  add ecx, 00000001
:00406EDC 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406ED4(U)
|
:00406EDF 837DF80A                cmp dword ptr [ebp-08], 0000000A
:00406EE3 731E                    jnb 00406F03
:00406EE5 8B55FC                  mov edx, dword ptr [ebp-04]
:00406EE8 8B4508                  mov eax, dword ptr [ebp+08]
:00406EEB 8A08                    mov cl, byte ptr [eax]
:00406EED 880A                    mov byte ptr [edx], cl
:00406EEF 8B55FC                  mov edx, dword ptr [ebp-04]
:00406EF2 83C201                  add edx, 00000001
:00406EF5 8955FC                  mov dword ptr [ebp-04], edx
:00406EF8 8B4508                  mov eax, dword ptr [ebp+08]
:00406EFB 83C001                  add eax, 00000001
:00406EFE 894508                  mov dword ptr [ebp+08], eax
:00406F01 EBD3                    jmp 00406ED6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406EE3(C)
|
:00406F03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406F06 C60100                  mov byte ptr [ecx], 00
:00406F09 8B5508                  mov edx, dword ptr [ebp+08]
:00406F0C 83C201                  add edx, 00000001
:00406F0F 895508                  mov dword ptr [ebp+08], edx
:00406F12 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406F15 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406F18 8A11                    mov dl, byte ptr [ecx]
:00406F1A 88500B                  mov byte ptr [eax+0B], dl
:00406F1D 8B4508                  mov eax, dword ptr [ebp+08]
:00406F20 83C001                  add eax, 00000001
:00406F23 894508                  mov dword ptr [ebp+08], eax
:00406F26 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00406F29 8B5508                  mov edx, dword ptr [ebp+08]
:00406F2C 8A02                    mov al, byte ptr [edx]
:00406F2E 88410C                  mov byte ptr [ecx+0C], al
:00406F31 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406F34 83C101                  add ecx, 00000001
:00406F37 894D08                  mov dword ptr [ebp+08], ecx
:00406F3A 8B55F4                  mov edx, dword ptr [ebp-0C]
:00406F3D 8B4508                  mov eax, dword ptr [ebp+08]
:00406F40 8A08                    mov cl, byte ptr [eax]
:00406F42 884A0D                  mov byte ptr [edx+0D], cl
:00406F45 8B5508                  mov edx, dword ptr [ebp+08]
:00406F48 83C201                  add edx, 00000001
:00406F4B 895508                  mov dword ptr [ebp+08], edx
:00406F4E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406F51 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406F54 8A11                    mov dl, byte ptr [ecx]
:00406F56 88500E                  mov byte ptr [eax+0E], dl
:00406F59 8B4508                  mov eax, dword ptr [ebp+08]
:00406F5C 83C001                  add eax, 00000001
:00406F5F 894508                  mov dword ptr [ebp+08], eax
:00406F62 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00406F65 8B5508                  mov edx, dword ptr [ebp+08]
:00406F68 8A02                    mov al, byte ptr [edx]
:00406F6A 88410F                  mov byte ptr [ecx+0F], al
:00406F6D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406F70 83C101                  add ecx, 00000001
:00406F73 894D08                  mov dword ptr [ebp+08], ecx
:00406F76 8B55F4                  mov edx, dword ptr [ebp-0C]
:00406F79 8B4508                  mov eax, dword ptr [ebp+08]
:00406F7C 8A08                    mov cl, byte ptr [eax]
:00406F7E 884A10                  mov byte ptr [edx+10], cl
:00406F81 8B5508                  mov edx, dword ptr [ebp+08]
:00406F84 83C201                  add edx, 00000001
:00406F87 895508                  mov dword ptr [ebp+08], edx
:00406F8A 8B4508                  mov eax, dword ptr [ebp+08]
:00406F8D 8BE5                    mov esp, ebp
:00406F8F 5D                      pop ebp
:00406F90 C20400                  ret 0004


:00406F93 55                      push ebp
:00406F94 8BEC                    mov ebp, esp
:00406F96 51                      push ecx
:00406F97 894DFC                  mov dword ptr [ebp-04], ecx
:00406F9A 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00406F9D C74004FF000000          mov [eax+04], 000000FF
:00406FA4 8BE5                    mov esp, ebp
:00406FA6 5D                      pop ebp
:00406FA7 C3                      ret



* Referenced by a CALL at Address:
|:00407484   
|
:00406FA8 55                      push ebp
:00406FA9 8BEC                    mov ebp, esp
:00406FAB 51                      push ecx
:00406FAC 894DFC                  mov dword ptr [ebp-04], ecx
:00406FAF 8B45FC                  mov eax, dword ptr [ebp-04]
:00406FB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406FB5 8908                    mov dword ptr [eax], ecx
:00406FB7 8BE5                    mov esp, ebp
:00406FB9 5D                      pop ebp
:00406FBA C20400                  ret 0004



* Referenced by a CALL at Address:
|:00466763   
|
:00406FBD 55                      push ebp
:00406FBE 8BEC                    mov ebp, esp
:00406FC0 83EC14                  sub esp, 00000014
:00406FC3 894DEC                  mov dword ptr [ebp-14], ecx
:00406FC6 8B45EC                  mov eax, dword ptr [ebp-14]
:00406FC9 833800                  cmp dword ptr [eax], 00000000
:00406FCC 7505                    jne 00406FD3
:00406FCE E9B1010000              jmp 00407184

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406FCC(C)
|
:00406FD3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406FD6 81E1FF000000            and ecx, 000000FF
:00406FDC 83F931                  cmp ecx, 00000031
:00406FDF 7C05                    jl 00406FE6
:00406FE1 E99E010000              jmp 00407184

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406FDF(C)
|
:00406FE6 8B5508                  mov edx, dword ptr [ebp+08]
:00406FE9 81E2FF000000            and edx, 000000FF
:00406FEF 8B45EC                  mov eax, dword ptr [ebp-14]
:00406FF2 895004                  mov dword ptr [eax+04], edx
:00406FF5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406FF8 81E1FF000000            and ecx, 000000FF
:00406FFE 6BC911                  imul ecx, 00000011
:00407001 81C180DF4A00            add ecx, 004ADF80
:00407007 E8A4070000              call 004077B0
:0040700C 50                      push eax
:0040700D 6822050000              push 00000522
:00407012 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407015 8B11                    mov edx, dword ptr [ecx]
:00407017 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00407018 FF15AC864B00            Call dword ptr [004B86AC]
:0040701E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0040701F FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00407025 6A0A                    push 0000000A
:00407027 8D45F4                  lea eax, dword ptr [ebp-0C]
:0040702A 50                      push eax
:0040702B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040702E 81E1FF000000            and ecx, 000000FF
:00407034 6BC911                  imul ecx, 00000011
:00407037 81C180DF4A00            add ecx, 004ADF80
:0040703D E8AE8C0200              call 0042FCF0
:00407042 25FF000000              and eax, 000000FF
:00407047 50                      push eax
:00407048 E823D40500              call 00464470
:0040704D 83C40C                  add esp, 0000000C
:00407050 50                      push eax
:00407051 6823050000              push 00000523
:00407056 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407059 8B11                    mov edx, dword ptr [ecx]
:0040705B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040705C FF15AC864B00            Call dword ptr [004B86AC]
:00407062 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00407063 FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00407069 68FF000000              push 000000FF
:0040706E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407071 81E1FF000000            and ecx, 000000FF
:00407077 6BC911                  imul ecx, 00000011
:0040707A 81C180DF4A00            add ecx, 004ADF80
:00407080 E86B8C0200              call 0042FCF0
:00407085 660FB6C0                movzx ax, al
:00407089 50                      push eax
:0040708A 6824050000              push 00000524
:0040708F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407092 8B11                    mov edx, dword ptr [ecx]
:00407094 52                      push edx
:00407095 E871DC0500              call 00464D0B
:0040709A 83C410                  add esp, 00000010
:0040709D 8B4D08                  mov ecx, dword ptr [ebp+08]
:004070A0 81E1FF000000            and ecx, 000000FF
:004070A6 6BC911                  imul ecx, 00000011
:004070A9 81C180DF4A00            add ecx, 004ADF80
:004070AF E8ECB60000              call 004127A0
:004070B4 8845F0                  mov byte ptr [ebp-10], al
:004070B7 8B45F0                  mov eax, dword ptr [ebp-10]
:004070BA 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004070BF 3DFF000000              cmp eax, 000000FF
:004070C4 742B                    je 004070F1
:004070C6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004070C9 81E1FF000000            and ecx, 000000FF
:004070CF 8B148D707B4700          mov edx, dword ptr [4*ecx+00477B70]
:004070D6 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:004070D7 68FF030000              push 000003FF
:004070DC 8B45EC                  mov eax, dword ptr [ebp-14]
:004070DF 8B08                    mov ecx, dword ptr [eax]
:004070E1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004070E2 FF15AC864B00            Call dword ptr [004B86AC]
:004070E8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004070E9 FF15B0864B00            Call dword ptr [004B86B0]
:004070EF EB1D                    jmp 0040710E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004070C4(C)
|

* Possible StringData Ref from Data Obj ->"L"
                                  |
:004070F1 682C634700              push 0047632C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:004070F6 68FF030000              push 000003FF
:004070FB 8B55EC                  mov edx, dword ptr [ebp-14]
:004070FE 8B02                    mov eax, dword ptr [edx]
:00407100 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00407101 FF15AC864B00            Call dword ptr [004B86AC]
:00407107 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00407108 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004070EF(U)
|
:0040710E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407111 81E1FF000000            and ecx, 000000FF
:00407117 51                      push ecx
:00407118 8B55EC                  mov edx, dword ptr [ebp-14]
:0040711B 83C20C                  add edx, 0000000C
:0040711E 52                      push edx
:0040711F E871E8FFFF              call 00405995
:00407124 83C408                  add esp, 00000008
:00407127 8B45EC                  mov eax, dword ptr [ebp-14]
:0040712A 83C00C                  add eax, 0000000C
:0040712D 50                      push eax
:0040712E 6825050000              push 00000525
:00407133 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407136 8B11                    mov edx, dword ptr [ecx]
:00407138 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00407139 FF15AC864B00            Call dword ptr [004B86AC]
:0040713F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00407140 FF15B0864B00            Call dword ptr [004B86B0]
:00407146 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407149 E8A3010000              call 004072F1
:0040714E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407151 E84D000000              call 004071A3
:00407156 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407159 E8F2000000              call 00407250
:0040715E 8B45EC                  mov eax, dword ptr [ebp-14]
:00407161 8B08                    mov ecx, dword ptr [eax]
:00407163 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00407164 FF15A4864B00            Call dword ptr [004B86A4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0040716A 6A09                    push 00000009
:0040716C 8B55EC                  mov edx, dword ptr [ebp-14]
:0040716F 8B02                    mov eax, dword ptr [edx]
:00407171 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00407172 FF15E4864B00            Call dword ptr [004B86E4]
:00407178 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040717B 8B11                    mov edx, dword ptr [ecx]
:0040717D 52                      push edx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:0040717E FF15A8864B00            Call dword ptr [004B86A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406FCE(U), :00406FE1(U)
|
:00407184 8BE5                    mov esp, ebp
:00407186 5D                      pop ebp
:00407187 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00407414   , :0046704B   , :004670C6   
|
:0040718A 55                      push ebp
:0040718B 8BEC                    mov ebp, esp
:0040718D 51                      push ecx
:0040718E 894DFC                  mov dword ptr [ebp-04], ecx
:00407191 6A00                    push 00000000
:00407193 8B45FC                  mov eax, dword ptr [ebp-04]
:00407196 8B08                    mov ecx, dword ptr [eax]
:00407198 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00407199 FF15E4864B00            Call dword ptr [004B86E4]
:0040719F 8BE5                    mov esp, ebp
:004071A1 5D                      pop ebp
:004071A2 C3                      ret



* Referenced by a CALL at Address:
|:00407151   
|
:004071A3 55                      push ebp
:004071A4 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004071A6 6AFF                    push FFFFFFFF
:004071A8 6882374700              push 00473782
:004071AD 64A100000000            mov eax, dword ptr fs:[00000000]
:004071B3 50                      push eax
:004071B4 64892500000000          mov dword ptr fs:[00000000], esp
:004071BB 81EC0C010000            sub esp, 0000010C
:004071C1 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:004071C7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004071CD E82E050000              call 00407700
:004071D2 C745FC00000000          mov [ebp-04], 00000000
:004071D9 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:004071DF 8B4804                  mov ecx, dword ptr [eax+04]
:004071E2 6BC911                  imul ecx, 00000011
:004071E5 81C180DF4A00            add ecx, 004ADF80
:004071EB E8F0050000              call 004077E0
:004071F0 8885ECFEFFFF            mov byte ptr [ebp+FFFFFEEC], al
:004071F6 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:004071FC 81E1FF000000            and ecx, 000000FF
:00407202 81F9FF000000            cmp ecx, 000000FF
:00407208 7507                    jne 00407211
:0040720A C685ECFEFFFF0B          mov byte ptr [ebp+FFFFFEEC], 0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407208(C)
|
:00407211 6827050000              push 00000527
:00407216 8A95ECFEFFFF            mov dl, byte ptr [ebp+FFFFFEEC]
:0040721C 52                      push edx
:0040721D 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00407223 8B08                    mov ecx, dword ptr [eax]
:00407225 51                      push ecx
:00407226 B9C80B4B00              mov ecx, 004B0BC8
:0040722B E825800500              call 0045F255
:00407230 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00407237 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040723D E8DE040000              call 00407720
:00407242 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407245 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040724C 8BE5                    mov esp, ebp
:0040724E 5D                      pop ebp
:0040724F C3                      ret



* Referenced by a CALL at Address:
|:00407159   
|
:00407250 55                      push ebp
:00407251 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00407253 6AFF                    push FFFFFFFF
:00407255 6898374700              push 00473798
:0040725A 64A100000000            mov eax, dword ptr fs:[00000000]
:00407260 50                      push eax
:00407261 64892500000000          mov dword ptr fs:[00000000], esp
:00407268 81EC0C010000            sub esp, 0000010C
:0040726E 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:00407274 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040727A E881040000              call 00407700
:0040727F C745FC00000000          mov [ebp-04], 00000000
:00407286 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0040728C 8B4804                  mov ecx, dword ptr [eax+04]
:0040728F 6BC911                  imul ecx, 00000011
:00407292 81C180DF4A00            add ecx, 004ADF80
:00407298 E853860200              call 0042F8F0
:0040729D 8845F0                  mov byte ptr [ebp-10], al
:004072A0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004072A3 81E1FF000000            and ecx, 000000FF
:004072A9 81F9FF000000            cmp ecx, 000000FF
:004072AF 7504                    jne 004072B5
:004072B1 C645F000                mov [ebp-10], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004072AF(C)
|
:004072B5 6828050000              push 00000528
:004072BA 8A55F0                  mov dl, byte ptr [ebp-10]
:004072BD 52                      push edx
:004072BE 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:004072C4 8B08                    mov ecx, dword ptr [eax]
:004072C6 51                      push ecx
:004072C7 B9C80B4B00              mov ecx, 004B0BC8
:004072CC E80E800500              call 0045F2DF
:004072D1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004072D8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004072DE E83D040000              call 00407720
:004072E3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004072E6 64890D00000000          mov dword ptr fs:[00000000], ecx
:004072ED 8BE5                    mov esp, ebp
:004072EF 5D                      pop ebp
:004072F0 C3                      ret



* Referenced by a CALL at Address:
|:00407149   
|
:004072F1 55                      push ebp
:004072F2 8BEC                    mov ebp, esp
:004072F4 83EC08                  sub esp, 00000008
:004072F7 894DF8                  mov dword ptr [ebp-08], ecx
:004072FA 8B45F8                  mov eax, dword ptr [ebp-08]
:004072FD 8B4804                  mov ecx, dword ptr [eax+04]
:00407300 6BC911                  imul ecx, 00000011
:00407303 81C180DF4A00            add ecx, 004ADF80
:00407309 E872D30400              call 00454680
:0040730E 25FF000000              and eax, 000000FF
:00407313 83C064                  add eax, 00000064
:00407316 25FFFF0000              and eax, 0000FFFF
:0040731B 50                      push eax
:0040731C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040731F 8B5108                  mov edx, dword ptr [ecx+08]
:00407322 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00407323 FF15E8864B00            Call dword ptr [004B86E8]
:00407329 8945FC                  mov dword ptr [ebp-04], eax
:0040732C 6A00                    push 00000000
:0040732E 8B45FC                  mov eax, dword ptr [ebp-04]
:00407331 50                      push eax
:00407332 6870010000              push 00000170
:00407337 6826050000              push 00000526
:0040733C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040733F 8B11                    mov edx, dword ptr [ecx]
:00407341 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00407342 FF15B4864B00            Call dword ptr [004B86B4]
:00407348 8BE5                    mov esp, ebp
:0040734A 5D                      pop ebp
:0040734B C3                      ret


:0040734C 55                      push ebp
:0040734D 8BEC                    mov ebp, esp
:0040734F E807000000              call 0040735B
:00407354 E811000000              call 0040736A
:00407359 5D                      pop ebp
:0040735A C3                      ret



* Referenced by a CALL at Address:
|:0040734F   
|
:0040735B 55                      push ebp
:0040735C 8BEC                    mov ebp, esp
:0040735E B9B8114800              mov ecx, 004811B8
:00407363 E8D8040000              call 00407840
:00407368 5D                      pop ebp
:00407369 C3                      ret



* Referenced by a CALL at Address:
|:00407354   
|
:0040736A 55                      push ebp
:0040736B 8BEC                    mov ebp, esp
:0040736D 687C734000              push 0040737C
:00407372 E8F9600600              call 0046D470
:00407377 83C404                  add esp, 00000004
:0040737A 5D                      pop ebp
:0040737B C3                      ret


:0040737C 55                      push ebp
:0040737D 8BEC                    mov ebp, esp
:0040737F B9B8114800              mov ecx, 004811B8
:00407384 E817E90100              call 00425CA0
:00407389 5D                      pop ebp
:0040738A C3                      ret


:0040738B 55                      push ebp
:0040738C 8BEC                    mov ebp, esp
:0040738E 83EC08                  sub esp, 00000008
:00407391 8B450C                  mov eax, dword ptr [ebp+0C]
:00407394 8945F8                  mov dword ptr [ebp-08], eax
:00407397 837DF802                cmp dword ptr [ebp-08], 00000002
:0040739B 743E                    je 004073DB
:0040739D 817DF810010000          cmp dword ptr [ebp-08], 00000110
:004073A4 740E                    je 004073B4
:004073A6 817DF811010000          cmp dword ptr [ebp-08], 00000111
:004073AD 7445                    je 004073F4
:004073AF E983000000              jmp 00407437

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004073A4(C)
|

* Possible StringData Ref from Data Obj ->"MgcIcon.dll"
                                  |
:004073B4 68B07A4700              push 00477AB0
:004073B9 E8F68D0000              call 004101B4
:004073BE 83C404                  add esp, 00000004
:004073C1 50                      push eax

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:004073C2 FF1564854B00            Call dword ptr [004B8564]
:004073C8 8945FC                  mov dword ptr [ebp-04], eax
:004073CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004073CE 51                      push ecx
:004073CF B9B8114800              mov ecx, 004811B8
:004073D4 E8E7260300              call 00439AC0
:004073D9 EB5C                    jmp 00407437

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040739B(C)
|
:004073DB B9B8114800              mov ecx, 004811B8
:004073E0 E89BBA0400              call 00452E80
:004073E5 8945FC                  mov dword ptr [ebp-04], eax
:004073E8 8B55FC                  mov edx, dword ptr [ebp-04]
:004073EB 52                      push edx

* Reference To: KERNEL32.FreeLibrary, Ord:0098h
                                  |
:004073EC FF1568854B00            Call dword ptr [004B8568]
:004073F2 EB43                    jmp 00407437

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004073AD(C)
|
:004073F4 8B4510                  mov eax, dword ptr [ebp+10]
:004073F7 25FFFF0000              and eax, 0000FFFF
:004073FC 83F801                  cmp eax, 00000001
:004073FF 740E                    je 0040740F
:00407401 8B4D10                  mov ecx, dword ptr [ebp+10]
:00407404 81E1FFFF0000            and ecx, 0000FFFF
:0040740A 83F902                  cmp ecx, 00000002
:0040740D 750A                    jne 00407419

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004073FF(C)
|
:0040740F B9B8114800              mov ecx, 004811B8
:00407414 E871FDFFFF              call 0040718A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040740D(C)
|
:00407419 8B5510                  mov edx, dword ptr [ebp+10]
:0040741C 81E2FFFF0000            and edx, 0000FFFF
:00407422 81FAA9040000            cmp edx, 000004A9
:00407428 750D                    jne 00407437
:0040742A 6818100000              push 00001018
:0040742F E82EC50500              call 00463962
:00407434 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004073AF(U), :004073D9(U), :004073F2(U), :00407428(C)
|
:00407437 33C0                    xor eax, eax
:00407439 8BE5                    mov esp, ebp
:0040743B 5D                      pop ebp
:0040743C C21000                  ret 0010



* Referenced by a CALL at Address:
|:00467000   
|
:0040743F 55                      push ebp
:00407440 8BEC                    mov ebp, esp
:00407442 51                      push ecx
:00407443 6A00                    push 00000000
:00407445 688B734000              push 0040738B
:0040744A A1380E4B00              mov eax, dword ptr [004B0E38]
:0040744F 50                      push eax

* Possible Reference to Dialog: DialogID_011D 
                                  |
:00407450 681D010000              push 0000011D
:00407455 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0040745B 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0040745C FF15A0864B00            Call dword ptr [004B86A0]
:00407462 8945FC                  mov dword ptr [ebp-04], eax
:00407465 837DFC00                cmp dword ptr [ebp-04], 00000000
:00407469 7504                    jne 0040746F
:0040746B 33C0                    xor eax, eax
:0040746D EB1F                    jmp 0040748E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407469(C)
|
:0040746F 6A00                    push 00000000
:00407471 8B55FC                  mov edx, dword ptr [ebp-04]
:00407474 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00407475 FF15E4864B00            Call dword ptr [004B86E4]
:0040747B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040747E 50                      push eax
:0040747F B9B8114800              mov ecx, 004811B8
:00407484 E81FFBFFFF              call 00406FA8
:00407489 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040746D(U)
|
:0040748E 8BE5                    mov esp, ebp
:00407490 5D                      pop ebp
:00407491 C3                      ret


:00407492 55                      push ebp
:00407493 8BEC                    mov ebp, esp
:00407495 51                      push ecx
:00407496 894DFC                  mov dword ptr [ebp-04], ecx
:00407499 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040749C C74004FF000000          mov [eax+04], 000000FF
:004074A3 8BE5                    mov esp, ebp
:004074A5 5D                      pop ebp
:004074A6 C3                      ret



* Referenced by a CALL at Address:
|:0040767F   
|
:004074A7 55                      push ebp
:004074A8 8BEC                    mov ebp, esp
:004074AA 51                      push ecx
:004074AB 894DFC                  mov dword ptr [ebp-04], ecx
:004074AE 8B45FC                  mov eax, dword ptr [ebp-04]
:004074B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004074B4 8908                    mov dword ptr [eax], ecx
:004074B6 8BE5                    mov esp, ebp
:004074B8 5D                      pop ebp
:004074B9 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00407611   
|
:004074BC 55                      push ebp
:004074BD 8BEC                    mov ebp, esp
:004074BF 51                      push ecx
:004074C0 894DFC                  mov dword ptr [ebp-04], ecx
:004074C3 6A00                    push 00000000
:004074C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004074C8 8B08                    mov ecx, dword ptr [eax]
:004074CA 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004074CB FF15E4864B00            Call dword ptr [004B86E4]
:004074D1 8BE5                    mov esp, ebp
:004074D3 5D                      pop ebp
:004074D4 C3                      ret


:004074D5 55                      push ebp
:004074D6 8BEC                    mov ebp, esp
:004074D8 51                      push ecx
:004074D9 894DFC                  mov dword ptr [ebp-04], ecx
:004074DC 8B45FC                  mov eax, dword ptr [ebp-04]
:004074DF 833800                  cmp dword ptr [eax], 00000000
:004074E2 7505                    jne 004074E9
:004074E4 E9A5000000              jmp 0040758E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074E2(C)
|
:004074E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004074EC 81E1FF000000            and ecx, 000000FF
:004074F2 83F920                  cmp ecx, 00000020
:004074F5 7C05                    jl 004074FC
:004074F7 E992000000              jmp 0040758E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074F5(C)
|
:004074FC 8B5508                  mov edx, dword ptr [ebp+08]
:004074FF 81E2FF000000            and edx, 000000FF
:00407505 8B45FC                  mov eax, dword ptr [ebp-04]
:00407508 895004                  mov dword ptr [eax+04], edx
:0040750B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040750E 8B5104                  mov edx, dword ptr [ecx+04]
:00407511 8B0495507C4700          mov eax, dword ptr [4*edx+00477C50]
:00407518 50                      push eax
:00407519 68B6050000              push 000005B6
:0040751E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407521 8B11                    mov edx, dword ptr [ecx]
:00407523 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00407524 FF15AC864B00            Call dword ptr [004B86AC]
:0040752A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0040752B FF15B0864B00            Call dword ptr [004B86B0]
:00407531 8B4508                  mov eax, dword ptr [ebp+08]
:00407534 25FF000000              and eax, 000000FF
:00407539 50                      push eax
:0040753A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040753D 83C108                  add ecx, 00000008
:00407540 51                      push ecx
:00407541 E8F2E4FFFF              call 00405A38
:00407546 83C408                  add esp, 00000008
:00407549 8B55FC                  mov edx, dword ptr [ebp-04]
:0040754C 83C208                  add edx, 00000008
:0040754F 52                      push edx
:00407550 68B5050000              push 000005B5
:00407555 8B45FC                  mov eax, dword ptr [ebp-04]
:00407558 8B08                    mov ecx, dword ptr [eax]
:0040755A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040755B FF15AC864B00            Call dword ptr [004B86AC]
:00407561 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00407562 FF15B0864B00            Call dword ptr [004B86B0]
:00407568 8B55FC                  mov edx, dword ptr [ebp-04]
:0040756B 8B02                    mov eax, dword ptr [edx]
:0040756D 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0040756E FF15A4864B00            Call dword ptr [004B86A4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00407574 6A09                    push 00000009
:00407576 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407579 8B11                    mov edx, dword ptr [ecx]
:0040757B 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0040757C FF15E4864B00            Call dword ptr [004B86E4]
:00407582 8B45FC                  mov eax, dword ptr [ebp-04]
:00407585 8B08                    mov ecx, dword ptr [eax]
:00407587 51                      push ecx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00407588 FF15A8864B00            Call dword ptr [004B86A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004074E4(U), :004074F7(U)
|
:0040758E 8BE5                    mov esp, ebp
:00407590 5D                      pop ebp
:00407591 C20400                  ret 0004


:00407594 55                      push ebp
:00407595 8BEC                    mov ebp, esp
:00407597 E807000000              call 004075A3
:0040759C E811000000              call 004075B2
:004075A1 5D                      pop ebp
:004075A2 C3                      ret



* Referenced by a CALL at Address:
|:00407597   
|
:004075A3 55                      push ebp
:004075A4 8BEC                    mov ebp, esp
:004075A6 B930124800              mov ecx, 00481230
:004075AB E890020000              call 00407840
:004075B0 5D                      pop ebp
:004075B1 C3                      ret



* Referenced by a CALL at Address:
|:0040759C   
|
:004075B2 55                      push ebp
:004075B3 8BEC                    mov ebp, esp
:004075B5 68C4754000              push 004075C4
:004075BA E8B15E0600              call 0046D470
:004075BF 83C404                  add esp, 00000004
:004075C2 5D                      pop ebp
:004075C3 C3                      ret


:004075C4 55                      push ebp
:004075C5 8BEC                    mov ebp, esp
:004075C7 B930124800              mov ecx, 00481230
:004075CC E8CFE60100              call 00425CA0
:004075D1 5D                      pop ebp
:004075D2 C3                      ret


:004075D3 55                      push ebp
:004075D4 8BEC                    mov ebp, esp
:004075D6 51                      push ecx
:004075D7 8B450C                  mov eax, dword ptr [ebp+0C]
:004075DA 8945FC                  mov dword ptr [ebp-04], eax
:004075DD 837DFC02                cmp dword ptr [ebp-04], 00000002
:004075E1 740B                    je 004075EE
:004075E3 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004075EA 7404                    je 004075F0
:004075EC EB44                    jmp 00407632

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075E1(C)
|
:004075EE EB42                    jmp 00407632

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075EA(C)
|
:004075F0 8B4D10                  mov ecx, dword ptr [ebp+10]
:004075F3 81E1FFFF0000            and ecx, 0000FFFF
:004075F9 83F901                  cmp ecx, 00000001
:004075FC 740E                    je 0040760C
:004075FE 8B5510                  mov edx, dword ptr [ebp+10]
:00407601 81E2FFFF0000            and edx, 0000FFFF
:00407607 83FA02                  cmp edx, 00000002
:0040760A 750A                    jne 00407616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075FC(C)
|
:0040760C B930124800              mov ecx, 00481230
:00407611 E8A6FEFFFF              call 004074BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040760A(C)
|
:00407616 8B4510                  mov eax, dword ptr [ebp+10]
:00407619 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:04A9, ""
                                  |
:0040761E 3DA9040000              cmp eax, 000004A9
:00407623 750D                    jne 00407632
:00407625 6818100000              push 00001018
:0040762A E833C30500              call 00463962
:0040762F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004075EC(U), :004075EE(U), :00407623(C)
|
:00407632 33C0                    xor eax, eax
:00407634 8BE5                    mov esp, ebp
:00407636 5D                      pop ebp
:00407637 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0046700D   
|
:0040763A 55                      push ebp
:0040763B 8BEC                    mov ebp, esp
:0040763D 51                      push ecx
:0040763E 6A00                    push 00000000
:00407640 68D3754000              push 004075D3
:00407645 A1380E4B00              mov eax, dword ptr [004B0E38]
:0040764A 50                      push eax

* Possible Reference to Dialog: DialogID_014D 
                                  |
:0040764B 684D010000              push 0000014D
:00407650 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00407656 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00407657 FF15A0864B00            Call dword ptr [004B86A0]
:0040765D 8945FC                  mov dword ptr [ebp-04], eax
:00407660 837DFC00                cmp dword ptr [ebp-04], 00000000
:00407664 7504                    jne 0040766A
:00407666 33C0                    xor eax, eax
:00407668 EB1F                    jmp 00407689

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407664(C)
|
:0040766A 6A00                    push 00000000
:0040766C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040766F 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00407670 FF15E4864B00            Call dword ptr [004B86E4]
:00407676 8B45FC                  mov eax, dword ptr [ebp-04]
:00407679 50                      push eax
:0040767A B930124800              mov ecx, 00481230
:0040767F E823FEFFFF              call 004074A7
:00407684 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407668(U)
|
:00407689 8BE5                    mov esp, ebp
:0040768B 5D                      pop ebp
:0040768C C3                      ret



* Referenced by a CALL at Addresses:
|:00447956   , :004479C0   , :00447B58   , :00449458   , :004494FF   
|:004496F7   , :00449B8B   , :0044C9CC   , :0044CA4F   , :0044DAE5   
|:0044DB33   , :004590F4   , :004591AB   , :004591E5   , :004592FD   
|
:0040768D 55                      push ebp
:0040768E 8BEC                    mov ebp, esp
:00407690 51                      push ecx
:00407691 894DFC                  mov dword ptr [ebp-04], ecx
:00407694 8B4508                  mov eax, dword ptr [ebp+08]
:00407697 33C9                    xor ecx, ecx
:00407699 8A08                    mov cl, byte ptr [eax]
:0040769B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040769E 33C0                    xor eax, eax
:004076A0 8A02                    mov al, byte ptr [edx]
:004076A2 3BC8                    cmp ecx, eax
:004076A4 7C31                    jl 004076D7
:004076A6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004076A9 33D2                    xor edx, edx
:004076AB 8A5101                  mov dl, byte ptr [ecx+01]
:004076AE 8B45FC                  mov eax, dword ptr [ebp-04]
:004076B1 33C9                    xor ecx, ecx
:004076B3 8A4801                  mov cl, byte ptr [eax+01]
:004076B6 3BD1                    cmp edx, ecx
:004076B8 7C1D                    jl 004076D7
:004076BA 8B55FC                  mov edx, dword ptr [ebp-04]
:004076BD 33C0                    xor eax, eax
:004076BF 8A4201                  mov al, byte ptr [edx+01]
:004076C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004076C5 33D2                    xor edx, edx
:004076C7 8A11                    mov dl, byte ptr [ecx]
:004076C9 0FAFC2                  imul eax, edx
:004076CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004076CF 33D2                    xor edx, edx
:004076D1 8A11                    mov dl, byte ptr [ecx]
:004076D3 03C2                    add eax, edx
:004076D5 EB14                    jmp 004076EB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004076A4(C), :004076B8(C)
|
:004076D7 8B4508                  mov eax, dword ptr [ebp+08]
:004076DA 33C9                    xor ecx, ecx
:004076DC 8A08                    mov cl, byte ptr [eax]
:004076DE 8BC1                    mov eax, ecx
:004076E0 8B5508                  mov edx, dword ptr [ebp+08]
:004076E3 33C9                    xor ecx, ecx
:004076E5 8A4A01                  mov cl, byte ptr [edx+01]
:004076E8 0FAFC1                  imul eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004076D5(U)
|
:004076EB 8BE5                    mov esp, ebp
:004076ED 5D                      pop ebp
:004076EE C20400                  ret 0004


:004076F1 CC                      int 03
:004076F2 CC                      int 03
:004076F3 CC                      int 03
:004076F4 CC                      int 03
:004076F5 CC                      int 03
:004076F6 CC                      int 03
:004076F7 CC                      int 03
:004076F8 CC                      int 03
:004076F9 CC                      int 03
:004076FA CC                      int 03
:004076FB CC                      int 03
:004076FC CC                      int 03
:004076FD CC                      int 03
:004076FE CC                      int 03
:004076FF CC                      int 03

* Referenced by a CALL at Addresses:
|:00405AAD   , :004071CD   , :0040727A   , :00411AAB   , :004128F9   
|:00412A6E   , :00412B53   , :00421125   , :00422C3F   , :00425ACE   
|:00425B0D   , :00425D74   , :0042627C   , :00426380   , :0042A08E   
|:0042C2D1   , :0042C3D6   , :0043AA7F   , :0043B64F   , :0043B80D   
|:0043BA2D   , :0043DB10   , :0043DDAB   , :0043E639   , :0043EA4F   
|:0043ECD7   , :0043F257   , :0043F567   , :00440142   , :0045008E   
|:00450FF4   , :00452015   , :00452913   , :00454AB2   , :00454C04   
|:00454D3E   , :00466041   
|
:00407700 55                      push ebp
:00407701 8BEC                    mov ebp, esp
:00407703 51                      push ecx
:00407704 894DFC                  mov dword ptr [ebp-04], ecx
:00407707 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040770A E831010000              call 00407840
:0040770F 8B45FC                  mov eax, dword ptr [ebp-04]
:00407712 8BE5                    mov esp, ebp
:00407714 5D                      pop ebp
:00407715 C3                      ret


:00407716 CC                      int 03
:00407717 CC                      int 03
:00407718 CC                      int 03
:00407719 CC                      int 03
:0040771A CC                      int 03
:0040771B CC                      int 03
:0040771C CC                      int 03
:0040771D CC                      int 03
:0040771E CC                      int 03
:0040771F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405B8D   , :0040723D   , :004072DE   , :00411AE1   , :00411B27   
|:00411B56   , :0041292F   , :004129AE   , :00412AA5   , :00412B1C   
|:00412B8A   , :00412C01   , :00421225   , :00422D18   , :00425AEF   
|:00425B2E   , :00425FB9   , :004262A9   , :0042633F   , :004263AD   
|:00426448   , :0042A0B2   , :0042A0E9   , :0042A135   , :0042A167   
|:0042A321   , :0042C386   , :0042C49E   , :0043AB45   , :0043B7C0   
|:0043B9DE   , :0043BADD   , :0043DB7B   , :0043DBD9   , :0043DC0C   
|:0043DC30   , :0043DE0C   , :0043DE68   , :0043DE9E   , :0043DED1   
|:0043E020   , :0043E746   , :0043E77D   , :0043E823   , :0043E878   
|:0043E8AE   , :0043E922   , :0043E959   , :0043EABA   , :0043EB0D   
|:0043EB40   , :0043EB64   , :0043ED1F   , :0043ED7C   , :0043EDB2   
|:0043EE1F   , :0043EE7C   , :0043EEB2   , :0043EEF2   , :0043EF4E   
|:0043EF84   , :0043F11C   , :0043F2FB   , :0043F35B   , :0043F391   
|:0043F512   , :0043F5AE   , :0043F677   , :0043F6C3   , :0043F6F9   
|:0043F76A   , :0043F7A1   , :004401BA   , :004401E8   , :00440217   
|:004500C6   , :00450118   , :0045014B   , :0045016F   , :004511B3   
|:004520C2   , :00452A96   , :00454BC5   , :00454CFF   , :00454E0B   
|:0046645C   , :00473766   , :0047377C   , :00473792   , :00473892   
|:004738B6   , :004738CC   , :004738E2   , :00473906   , :0047391C   
|:00473936   , :00473955   , :0047396B   , :004739AF   , :004739C5   
|:004739DB   , :004739F6   , :00473A0C   , :00473A22   , :00473A38   
|:00473A56   , :00473A6C   , :00473A82   , :00473A98   , :00473AAE   
|:00473AC4   , :00473ADA   , :00473AF0   , :00473B06   , :00473B6A   
|:00473B80   , :00473BAB   , :00473BC6   , :00473BDC   , :00473BF2   
|:00473C66   
|
:00407720 55                      push ebp
:00407721 8BEC                    mov ebp, esp
:00407723 51                      push ecx
:00407724 894DFC                  mov dword ptr [ebp-04], ecx
:00407727 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040772A E80F8B0000              call 0041023E
:0040772F 8BE5                    mov esp, ebp
:00407731 5D                      pop ebp
:00407732 C3                      ret


:00407733 CC                      int 03
:00407734 CC                      int 03
:00407735 CC                      int 03
:00407736 CC                      int 03
:00407737 CC                      int 03
:00407738 CC                      int 03
:00407739 CC                      int 03
:0040773A CC                      int 03
:0040773B CC                      int 03
:0040773C CC                      int 03
:0040773D CC                      int 03
:0040773E CC                      int 03
:0040773F CC                      int 03

* Referenced by a CALL at Addresses:
|:00406766   , :0045AF0C   , :0045C82A   , :0045C859   , :0045C888   
|:0045C8B7   , :0045C8E6   , :0045C915   , :0045C944   , :0045C973   
|:0045CCB6   , :0045D535   , :0045D964   , :0045D982   , :0045D9B4   
|:0045D9DB   , :0045DA50   
|
:00407740 55                      push ebp
:00407741 8BEC                    mov ebp, esp
:00407743 51                      push ecx
:00407744 894DFC                  mov dword ptr [ebp-04], ecx
:00407747 8B45FC                  mov eax, dword ptr [ebp-04]
:0040774A 034508                  add eax, dword ptr [ebp+08]
:0040774D 8A4016                  mov al, byte ptr [eax+16]
:00407750 8BE5                    mov esp, ebp
:00407752 5D                      pop ebp
:00407753 C20400                  ret 0004


:00407756 CC                      int 03
:00407757 CC                      int 03
:00407758 CC                      int 03
:00407759 CC                      int 03
:0040775A CC                      int 03
:0040775B CC                      int 03
:0040775C CC                      int 03
:0040775D CC                      int 03
:0040775E CC                      int 03
:0040775F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040680D   , :004068DB   , :004181A9   , :004181D8   , :00419B3D   
|:00419E0E   , :0041A187   , :0041EC2C   , :0041EEA4   , :0041F293   
|:0041F428   
|
:00407760 55                      push ebp
:00407761 8BEC                    mov ebp, esp
:00407763 51                      push ecx
:00407764 894DFC                  mov dword ptr [ebp-04], ecx
:00407767 8B4508                  mov eax, dword ptr [ebp+08]
:0040776A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040776D 668B550C                mov dx, word ptr [ebp+0C]
:00407771 6689544126              mov word ptr [ecx+2*eax+26], dx
:00407776 8BE5                    mov esp, ebp
:00407778 5D                      pop ebp
:00407779 C20800                  ret 0008


:0040777C CC                      int 03
:0040777D CC                      int 03
:0040777E CC                      int 03
:0040777F CC                      int 03

* Referenced by a CALL at Addresses:
|:00406ABC   , :00406AFB   , :0040D274   , :0041EDE9   , :0041F0B3   
|:00438BC9   , :00438BED   , :0045D64C   
|
:00407780 55                      push ebp
:00407781 8BEC                    mov ebp, esp
:00407783 83EC08                  sub esp, 00000008
:00407786 894DFC                  mov dword ptr [ebp-04], ecx
:00407789 817D0850C30000          cmp dword ptr [ebp+08], 0000C350
:00407790 7308                    jnb 0040779A
:00407792 8B4508                  mov eax, dword ptr [ebp+08]
:00407795 8945F8                  mov dword ptr [ebp-08], eax
:00407798 EB07                    jmp 004077A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407790(C)
|
:0040779A C745F850C30000          mov [ebp-08], 0000C350

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407798(U)
|
:004077A1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004077A4 8B55F8                  mov edx, dword ptr [ebp-08]
:004077A7 8911                    mov dword ptr [ecx], edx
:004077A9 8BE5                    mov esp, ebp
:004077AB 5D                      pop ebp
:004077AC C20400                  ret 0004


:004077AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402AAF   , :00403F4F   , :00405894   , :00406CAC   , :00407007   
|:0040CEBA   , :0040F00D   , :004158BB   , :00415ACF   , :00415C17   
|:00417B10   , :00417B2F   , :00417B4B   , :00417B95   , :00417BB9   
|:00418549   , :00418E9A   , :0041989C   , :00419C39   , :0041A3EE   
|:0041A6ED   , :0041BC6D   , :0041D962   , :0041DB55   , :0041DBCD   
|:00425B8A   , :00425B95   , :00429728   , :0042A074   , :0042D207   
|:0042F6AD   , :0042F6B8   , :0043159A   , :0043160E   , :0043350B   
|:00433BAA   , :00433EA7   , :00434187   , :004343A0   , :0043460D   
|:004347EA   , :00434A40   , :00434BF7   , :00434DB4   , :00435024   
|:0043528B   , :0043548D   , :00435548   , :00435A94   , :00435CD7   
|:00435F9E   , :00436272   , :004364B4   , :00436839   , :00436934   
|:00436BEF   , :00436DBE   , :00436EB9   , :00437185   , :004374EB   
|:00437E19   , :00437FCA   , :00438311   , :00438733   , :004388B9   
|:00438ABE   , :00438D21   , :00438E29   , :00438FC6   , :00439C17   
|:00439C51   , :00439C5B   , :00439E69   , :0043AB89   , :0043AB91   
|:0043B0D0   , :0043B2EE   , :0043B50A   , :0043CD1F   , :0043FE03   
|:00440238   , :00440907   , :0044090F   , :00441260   , :004416AB   
|:00442139   , :00442BC5   , :00442D01   , :00442D0C   , :00442D17   
|:00442D25   , :00442FB4   , :00444AB6   , :00444ACB   , :00444BD0   
|:00444BF7   , :00444D45   , :00444D5A   , :004451F0   , :00445C71   
|:00445D0C   , :00445D14   , :00446F46   , :004470EC   , :00447672   
|:0044768B   , :004477AC   , :00447A2D   , :00448A44   , :00448B1B   
|:004493AD   , :004493B5   , :00449860   , :00449868   , :0044A012   
|:0044B295   , :0044CE0A   , :0044D70C   , :0044D928   , :0044D930   
|:0044DE80   , :00452EEA   , :004533D7   , :00454186   , :004546F1   
|:00456C66   , :0045760A   , :004588BD   , :00458D44   , :00458F2A   
|:00459051   , :0045992D   , :00459CE6   , :00459E44   , :0045B993   
|:0045D116   , :0045D138   , :0045DCAE   , :0045E5FE   , :00465368   
|:00465415   
|
:004077B0 55                      push ebp
:004077B1 8BEC                    mov ebp, esp
:004077B3 51                      push ecx
:004077B4 894DFC                  mov dword ptr [ebp-04], ecx
:004077B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004077BA 8BE5                    mov esp, ebp
:004077BC 5D                      pop ebp
:004077BD C3                      ret


:004077BE CC                      int 03
:004077BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00406E89   , :00406EAE   
|
:004077C0 55                      push ebp
:004077C1 8BEC                    mov ebp, esp
:004077C3 51                      push ecx
:004077C4 894DFC                  mov dword ptr [ebp-04], ecx
:004077C7 8B4508                  mov eax, dword ptr [ebp+08]
:004077CA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004077CD 8D1441                  lea edx, dword ptr [ecx+2*eax]
:004077D0 8B45FC                  mov eax, dword ptr [ebp-04]
:004077D3 8A4D10                  mov cl, byte ptr [ebp+10]
:004077D6 884C1009                mov byte ptr [eax+edx+09], cl
:004077DA 8BE5                    mov esp, ebp
:004077DC 5D                      pop ebp
:004077DD C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:004071EB   , :00433AB4   , :00433D71   , :00434091   , :004342B7   
|:004344D1   , :004346FF   , :0043493B   , :00434AF9   , :00434CB6   
|:00434EFE   , :00435174   , :00435421   , :004359A9   , :00435BC3   
|:00435D9E   , :004360F5   , :004363C9   , :0043682E   , :00436AB3   
|:00436DB3   , :004370AC   , :0043741E   , :0043794C   , :00437AE7   
|:00437D55   , :00437ED2   , :00438219   , :004385FB   , :00438A0E   
|:0044AF69   , :0044B3B4   , :00454388   
|
:004077E0 55                      push ebp
:004077E1 8BEC                    mov ebp, esp
:004077E3 51                      push ecx
:004077E4 894DFC                  mov dword ptr [ebp-04], ecx
:004077E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004077EA 8A400C                  mov al, byte ptr [eax+0C]
:004077ED 8BE5                    mov esp, ebp
:004077EF 5D                      pop ebp
:004077F0 C3                      ret


:004077F1 CC                      int 03
:004077F2 CC                      int 03
:004077F3 CC                      int 03
:004077F4 CC                      int 03
:004077F5 CC                      int 03
:004077F6 CC                      int 03
:004077F7 CC                      int 03
:004077F8 CC                      int 03
:004077F9 CC                      int 03
:004077FA CC                      int 03
:004077FB CC                      int 03
:004077FC CC                      int 03
:004077FD CC                      int 03
:004077FE CC                      int 03
:004077FF CC                      int 03

* Referenced by a CALL at Addresses:
|:00406A75   , :00406DF2   , :0042D535   , :0045947D   , :004594AE   
|:0045956C   , :00459589   
|
:00407800 55                      push ebp
:00407801 8BEC                    mov ebp, esp
:00407803 51                      push ecx
:00407804 894DFC                  mov dword ptr [ebp-04], ecx
:00407807 8B45FC                  mov eax, dword ptr [ebp-04]
:0040780A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040780D 884831                  mov byte ptr [eax+31], cl
:00407810 8BE5                    mov esp, ebp
:00407812 5D                      pop ebp
:00407813 C20400                  ret 0004


:00407816 CC                      int 03
:00407817 CC                      int 03
:00407818 CC                      int 03
:00407819 CC                      int 03
:0040781A CC                      int 03
:0040781B CC                      int 03
:0040781C CC                      int 03
:0040781D CC                      int 03
:0040781E CC                      int 03
:0040781F CC                      int 03

* Referenced by a CALL at Addresses:
|:00406350   , :0041205C   , :00412080   , :004150AA   
|
:00407820 55                      push ebp
:00407821 8BEC                    mov ebp, esp
:00407823 51                      push ecx
:00407824 894DFC                  mov dword ptr [ebp-04], ecx
:00407827 8B45FC                  mov eax, dword ptr [ebp-04]
:0040782A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040782D 884821                  mov byte ptr [eax+21], cl
:00407830 8BE5                    mov esp, ebp
:00407832 5D                      pop ebp
:00407833 C20400                  ret 0004


:00407836 CC                      int 03
:00407837 CC                      int 03
:00407838 CC                      int 03
:00407839 CC                      int 03
:0040783A CC                      int 03
:0040783B CC                      int 03
:0040783C CC                      int 03
:0040783D CC                      int 03
:0040783E CC                      int 03
:0040783F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404C23   , :00404D41   , :00404F41   , :00405363   , :00407363   
|:004075AB   , :0040770A   , :0040E4F5   , :0040E725   , :0040E9FD   
|:00410AB1   , :00410D6C   , :004115E9   , :00425B4C   , :00425D83   
|:0043D5E7   , :0046A2CE   
|
:00407840 55                      push ebp
:00407841 8BEC                    mov ebp, esp
:00407843 51                      push ecx
:00407844 894DFC                  mov dword ptr [ebp-04], ecx
:00407847 8B45FC                  mov eax, dword ptr [ebp-04]
:0040784A C70000000000            mov dword ptr [eax], 00000000
:00407850 8B45FC                  mov eax, dword ptr [ebp-04]
:00407853 8BE5                    mov esp, ebp
:00407855 5D                      pop ebp
:00407856 C3                      ret


:00407857 CC                      int 03
:00407858 CC                      int 03
:00407859 CC                      int 03
:0040785A CC                      int 03
:0040785B CC                      int 03
:0040785C CC                      int 03
:0040785D CC                      int 03
:0040785E CC                      int 03
:0040785F CC                      int 03
:00407860 55                      push ebp
:00407861 8BEC                    mov ebp, esp
:00407863 E802000000              call 0040786A
:00407868 5D                      pop ebp
:00407869 C3                      ret



* Referenced by a CALL at Address:
|:00407863   
|
:0040786A 55                      push ebp
:0040786B 8BEC                    mov ebp, esp
:0040786D B9A8134800              mov ecx, 004813A8
:00407872 E81E060000              call 00407E95
:00407877 5D                      pop ebp
:00407878 C3                      ret



* Referenced by a CALL at Addresses:
|:004078B4   , :004078CF   , :00407B72   
|
:00407879 55                      push ebp
:0040787A 8BEC                    mov ebp, esp
:0040787C 51                      push ecx
:0040787D 837D0C0A                cmp dword ptr [ebp+0C], 0000000A
:00407881 7D21                    jge 004078A4
:00407883 8B450C                  mov eax, dword ptr [ebp+0C]
:00407886 83C030                  add eax, 00000030
:00407889 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040788C 8B11                    mov edx, dword ptr [ecx]
:0040788E 8802                    mov byte ptr [edx], al
:00407890 8B4508                  mov eax, dword ptr [ebp+08]
:00407893 8B08                    mov ecx, dword ptr [eax]
:00407895 83C101                  add ecx, 00000001
:00407898 8B5508                  mov edx, dword ptr [ebp+08]
:0040789B 890A                    mov dword ptr [edx], ecx
:0040789D B801000000              mov eax, 00000001
:004078A2 EB39                    jmp 004078DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407881(C)
|
:004078A4 8B450C                  mov eax, dword ptr [ebp+0C]
:004078A7 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004078A8 B90A000000              mov ecx, 0000000A
:004078AD F7F9                    idiv ecx
:004078AF 50                      push eax
:004078B0 8B5508                  mov edx, dword ptr [ebp+08]
:004078B3 52                      push edx
:004078B4 E8C0FFFFFF              call 00407879
:004078B9 83C408                  add esp, 00000008
:004078BC 8945FC                  mov dword ptr [ebp-04], eax
:004078BF 8B450C                  mov eax, dword ptr [ebp+0C]
:004078C2 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004078C3 B90A000000              mov ecx, 0000000A
:004078C8 F7F9                    idiv ecx
:004078CA 52                      push edx
:004078CB 8B5508                  mov edx, dword ptr [ebp+08]
:004078CE 52                      push edx
:004078CF E8A5FFFFFF              call 00407879
:004078D4 83C408                  add esp, 00000008
:004078D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004078DA 83C001                  add eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004078A2(U)
|
:004078DD 8BE5                    mov esp, ebp
:004078DF 5D                      pop ebp
:004078E0 C3                      ret



* Referenced by a CALL at Addresses:
|:0040791D   , :00407939   , :00407B98   
|
:004078E1 55                      push ebp
:004078E2 8BEC                    mov ebp, esp
:004078E4 51                      push ecx
:004078E5 837D0C0A                cmp dword ptr [ebp+0C], 0000000A
:004078E9 7321                    jnb 0040790C
:004078EB 8B450C                  mov eax, dword ptr [ebp+0C]
:004078EE 83C030                  add eax, 00000030
:004078F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004078F4 8B11                    mov edx, dword ptr [ecx]
:004078F6 8802                    mov byte ptr [edx], al
:004078F8 8B4508                  mov eax, dword ptr [ebp+08]
:004078FB 8B08                    mov ecx, dword ptr [eax]
:004078FD 83C101                  add ecx, 00000001
:00407900 8B5508                  mov edx, dword ptr [ebp+08]
:00407903 890A                    mov dword ptr [edx], ecx
:00407905 B801000000              mov eax, 00000001
:0040790A EB3B                    jmp 00407947

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004078E9(C)
|
:0040790C 8B450C                  mov eax, dword ptr [ebp+0C]
:0040790F 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00407911 B90A000000              mov ecx, 0000000A
:00407916 F7F1                    div ecx
:00407918 50                      push eax
:00407919 8B5508                  mov edx, dword ptr [ebp+08]
:0040791C 52                      push edx
:0040791D E8BFFFFFFF              call 004078E1
:00407922 83C408                  add esp, 00000008
:00407925 8945FC                  mov dword ptr [ebp-04], eax
:00407928 8B450C                  mov eax, dword ptr [ebp+0C]
:0040792B 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040792D B90A000000              mov ecx, 0000000A
:00407932 F7F1                    div ecx
:00407934 52                      push edx
:00407935 8B5508                  mov edx, dword ptr [ebp+08]
:00407938 52                      push edx
:00407939 E8A3FFFFFF              call 004078E1
:0040793E 83C408                  add esp, 00000008
:00407941 8B45FC                  mov eax, dword ptr [ebp-04]
:00407944 83C001                  add eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040790A(U)
|
:00407947 8BE5                    mov esp, ebp
:00407949 5D                      pop ebp
:0040794A C3                      ret



* Referenced by a CALL at Address:
|:00408C84   
|
:0040794B 55                      push ebp
:0040794C 8BEC                    mov ebp, esp
:0040794E 83EC64                  sub esp, 00000064
:00407951 C745FCA0124800          mov [ebp-04], 004812A0
:00407958 8B4508                  mov eax, dword ptr [ebp+08]
:0040795B 8B08                    mov ecx, dword ptr [eax]
:0040795D 894DBC                  mov dword ptr [ebp-44], ecx
:00407960 8B5508                  mov edx, dword ptr [ebp+08]
:00407963 83C204                  add edx, 00000004
:00407966 895508                  mov dword ptr [ebp+08], edx
:00407969 8B4508                  mov eax, dword ptr [ebp+08]
:0040796C 8945B8                  mov dword ptr [ebp-48], eax
:0040796F C745B400000000          mov [ebp-4C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DC3(U)
|
:00407976 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00407979 8A11                    mov dl, byte ptr [ecx]
:0040797B 8855D8                  mov byte ptr [ebp-28], dl
:0040797E 8B45D8                  mov eax, dword ptr [ebp-28]
:00407981 25FF000000              and eax, 000000FF
:00407986 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00407989 83C101                  add ecx, 00000001
:0040798C 894DBC                  mov dword ptr [ebp-44], ecx
:0040798F 85C0                    test eax, eax
:00407991 0F8431040000            je 00407DC8
:00407997 837DB400                cmp dword ptr [ebp-4C], 00000000
:0040799B 0F8527040000            jne 00407DC8
:004079A1 8B55D8                  mov edx, dword ptr [ebp-28]
:004079A4 81E2FF000000            and edx, 000000FF
:004079AA 83FA25                  cmp edx, 00000025
:004079AD 0F85E1030000            jne 00407D94
:004079B3 8D45E0                  lea eax, dword ptr [ebp-20]
:004079B6 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:004079B9 C745C406000000          mov [ebp-3C], 00000006
:004079C0 C745B000000000          mov [ebp-50], 00000000
:004079C7 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004079CA 894DF8                  mov dword ptr [ebp-08], ecx
:004079CD 8B55F8                  mov edx, dword ptr [ebp-08]
:004079D0 8955C0                  mov dword ptr [ebp-40], edx
:004079D3 8B45C0                  mov eax, dword ptr [ebp-40]
:004079D6 8945CC                  mov dword ptr [ebp-34], eax
:004079D9 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004079DC 894DD0                  mov dword ptr [ebp-30], ecx
:004079DF C745D400000000          mov [ebp-2C], 00000000
:004079E6 8B55BC                  mov edx, dword ptr [ebp-44]
:004079E9 33C0                    xor eax, eax
:004079EB 8A02                    mov al, byte ptr [edx]
:004079ED 83F82D                  cmp eax, 0000002D
:004079F0 7510                    jne 00407A02
:004079F2 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004079F5 83C101                  add ecx, 00000001
:004079F8 894DBC                  mov dword ptr [ebp-44], ecx
:004079FB C745D001000000          mov [ebp-30], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004079F0(C)
|
:00407A02 8B55BC                  mov edx, dword ptr [ebp-44]
:00407A05 8A02                    mov al, byte ptr [edx]
:00407A07 8845D8                  mov byte ptr [ebp-28], al
:00407A0A 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00407A0D 81E1FF000000            and ecx, 000000FF
:00407A13 83E930                  sub ecx, 00000030
:00407A16 F7D9                    neg ecx
:00407A18 1AC9                    sbb cl, cl
:00407A1A 80E1F0                  and cl, F0
:00407A1D 80C130                  add cl, 30
:00407A20 884DC8                  mov byte ptr [ebp-38], cl
:00407A23 8A55D8                  mov dl, byte ptr [ebp-28]
:00407A26 52                      push edx
:00407A27 E874120000              call 00408CA0
:00407A2C 83C404                  add esp, 00000004
:00407A2F 85C0                    test eax, eax
:00407A31 7411                    je 00407A44
:00407A33 8D45BC                  lea eax, dword ptr [ebp-44]
:00407A36 50                      push eax
:00407A37 E813040000              call 00407E4F
:00407A3C 83C404                  add esp, 00000004
:00407A3F 8945AC                  mov dword ptr [ebp-54], eax
:00407A42 EB07                    jmp 00407A4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407A31(C)
|
:00407A44 C745AC00000000          mov [ebp-54], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407A42(U)
|
:00407A4B 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00407A4E 894DDC                  mov dword ptr [ebp-24], ecx
:00407A51 8B55BC                  mov edx, dword ptr [ebp-44]
:00407A54 8A02                    mov al, byte ptr [edx]
:00407A56 8845D8                  mov byte ptr [ebp-28], al
:00407A59 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00407A5C 81E1FF000000            and ecx, 000000FF
:00407A62 8B55BC                  mov edx, dword ptr [ebp-44]
:00407A65 83C201                  add edx, 00000001
:00407A68 8955BC                  mov dword ptr [ebp-44], edx
:00407A6B 83F92E                  cmp ecx, 0000002E
:00407A6E 7527                    jne 00407A97
:00407A70 8D45BC                  lea eax, dword ptr [ebp-44]
:00407A73 50                      push eax
:00407A74 E8D6030000              call 00407E4F
:00407A79 83C404                  add esp, 00000004
:00407A7C 8945C4                  mov dword ptr [ebp-3C], eax
:00407A7F C745CC01000000          mov [ebp-34], 00000001
:00407A86 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00407A89 8A11                    mov dl, byte ptr [ecx]
:00407A8B 8855D8                  mov byte ptr [ebp-28], dl
:00407A8E 8B45BC                  mov eax, dword ptr [ebp-44]
:00407A91 83C001                  add eax, 00000001
:00407A94 8945BC                  mov dword ptr [ebp-44], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407A6E(C)
|
:00407A97 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00407A9A 81E1FF000000            and ecx, 000000FF
:00407AA0 83F96C                  cmp ecx, 0000006C
:00407AA3 7518                    jne 00407ABD
:00407AA5 C745C001000000          mov [ebp-40], 00000001
:00407AAC 8B55BC                  mov edx, dword ptr [ebp-44]
:00407AAF 8A02                    mov al, byte ptr [edx]
:00407AB1 8845D8                  mov byte ptr [ebp-28], al
:00407AB4 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00407AB7 83C101                  add ecx, 00000001
:00407ABA 894DBC                  mov dword ptr [ebp-44], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407AA3(C)
|
:00407ABD 8A55D8                  mov dl, byte ptr [ebp-28]
:00407AC0 52                      push edx
:00407AC1 E81A120000              call 00408CE0
:00407AC6 83C404                  add esp, 00000004
:00407AC9 25FF000000              and eax, 000000FF
:00407ACE 8945A8                  mov dword ptr [ebp-58], eax
:00407AD1 837DA855                cmp dword ptr [ebp-58], 00000055
:00407AD5 0F8788020000            ja 00407D63
:00407ADB 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00407ADE 33C0                    xor eax, eax
:00407AE0 8A81F97D4000            mov al, byte ptr [ecx+00407DF9]
:00407AE6 FF2485E17D4000          jmp dword ptr [4*eax+00407DE1]
:00407AED 837DC000                cmp dword ptr [ebp-40], 00000000
:00407AF1 742E                    je 00407B21
:00407AF3 8B55B8                  mov edx, dword ptr [ebp-48]
:00407AF6 833A00                  cmp dword ptr [edx], 00000000
:00407AF9 7D26                    jge 00407B21
:00407AFB 8B45B8                  mov eax, dword ptr [ebp-48]
:00407AFE 8B08                    mov ecx, dword ptr [eax]
:00407B00 F7D9                    neg ecx
:00407B02 8B55B8                  mov edx, dword ptr [ebp-48]
:00407B05 890A                    mov dword ptr [edx], ecx
:00407B07 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407B0A C6002D                  mov byte ptr [eax], 2D
:00407B0D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407B10 83C101                  add ecx, 00000001
:00407B13 894DF4                  mov dword ptr [ebp-0C], ecx
:00407B16 8B55DC                  mov edx, dword ptr [ebp-24]
:00407B19 83EA01                  sub edx, 00000001
:00407B1C 8955DC                  mov dword ptr [ebp-24], edx
:00407B1F EB32                    jmp 00407B53

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407AF1(C), :00407AF9(C)
|
:00407B21 837DC000                cmp dword ptr [ebp-40], 00000000
:00407B25 752C                    jne 00407B53
:00407B27 8B45B8                  mov eax, dword ptr [ebp-48]
:00407B2A 833800                  cmp dword ptr [eax], 00000000
:00407B2D 7D24                    jge 00407B53
:00407B2F 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00407B32 8B11                    mov edx, dword ptr [ecx]
:00407B34 F7DA                    neg edx
:00407B36 8B45B8                  mov eax, dword ptr [ebp-48]
:00407B39 8910                    mov dword ptr [eax], edx
:00407B3B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407B3E C6012D                  mov byte ptr [ecx], 2D
:00407B41 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407B44 83C201                  add edx, 00000001
:00407B47 8955F4                  mov dword ptr [ebp-0C], edx
:00407B4A 8B45DC                  mov eax, dword ptr [ebp-24]
:00407B4D 83E801                  sub eax, 00000001
:00407B50 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407B1F(U), :00407B25(C), :00407B2D(C)
|
:00407B53 837DC000                cmp dword ptr [ebp-40], 00000000
:00407B57 7426                    je 00407B7F
:00407B59 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00407B5C 8B11                    mov edx, dword ptr [ecx]
:00407B5E 8955A4                  mov dword ptr [ebp-5C], edx
:00407B61 8B45A4                  mov eax, dword ptr [ebp-5C]
:00407B64 50                      push eax
:00407B65 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00407B68 51                      push ecx
:00407B69 8B55B8                  mov edx, dword ptr [ebp-48]
:00407B6C 83C204                  add edx, 00000004
:00407B6F 8955B8                  mov dword ptr [ebp-48], edx
:00407B72 E802FDFFFF              call 00407879
:00407B77 83C408                  add esp, 00000008
:00407B7A 8945A0                  mov dword ptr [ebp-60], eax
:00407B7D EB24                    jmp 00407BA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407B57(C)
|
:00407B7F 8B45B8                  mov eax, dword ptr [ebp-48]
:00407B82 8B08                    mov ecx, dword ptr [eax]
:00407B84 894D9C                  mov dword ptr [ebp-64], ecx
:00407B87 8B559C                  mov edx, dword ptr [ebp-64]
:00407B8A 52                      push edx
:00407B8B 8D45F4                  lea eax, dword ptr [ebp-0C]
:00407B8E 50                      push eax
:00407B8F 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00407B92 83C104                  add ecx, 00000004
:00407B95 894DB8                  mov dword ptr [ebp-48], ecx
:00407B98 E844FDFFFF              call 004078E1
:00407B9D 83C408                  add esp, 00000008
:00407BA0 8945A0                  mov dword ptr [ebp-60], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407B7D(U)
|
:00407BA3 8B55DC                  mov edx, dword ptr [ebp-24]
:00407BA6 2B55A0                  sub edx, dword ptr [ebp-60]
:00407BA9 8955DC                  mov dword ptr [ebp-24], edx
:00407BAC E927020000              jmp 00407DD8
:00407BB1 8B45B8                  mov eax, dword ptr [ebp-48]
:00407BB4 8B08                    mov ecx, dword ptr [eax]
:00407BB6 894DF4                  mov dword ptr [ebp-0C], ecx
:00407BB9 8B55B8                  mov edx, dword ptr [ebp-48]
:00407BBC 83C204                  add edx, 00000004
:00407BBF 8955B8                  mov dword ptr [ebp-48], edx
:00407BC2 837DF400                cmp dword ptr [ebp-0C], 00000000
:00407BC6 7507                    jne 00407BCF
:00407BC8 C745F4F0134800          mov [ebp-0C], 004813F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407BC6(C)
|
:00407BCF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407BD2 50                      push eax
:00407BD3 E8CBA90500              call 004625A3
:00407BD8 83C404                  add esp, 00000004
:00407BDB 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00407BDE 2BC8                    sub ecx, eax
:00407BE0 894DDC                  mov dword ptr [ebp-24], ecx
:00407BE3 E9EB010000              jmp 00407DD3
:00407BE8 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407BEB 8B45B8                  mov eax, dword ptr [ebp-48]
:00407BEE 8A08                    mov cl, byte ptr [eax]
:00407BF0 880A                    mov byte ptr [edx], cl
:00407BF2 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407BF5 83C201                  add edx, 00000001
:00407BF8 8955F4                  mov dword ptr [ebp-0C], edx
:00407BFB 8B45B8                  mov eax, dword ptr [ebp-48]
:00407BFE 83C004                  add eax, 00000004
:00407C01 8945B8                  mov dword ptr [ebp-48], eax
:00407C04 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00407C07 83E901                  sub ecx, 00000001
:00407C0A 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DD8(U)
|
:00407C0D C745CC00000000          mov [ebp-34], 00000000
:00407C14 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407C17 C60200                  mov byte ptr [edx], 00
:00407C1A 8D45E0                  lea eax, dword ptr [ebp-20]
:00407C1D 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DD3(U)
|
:00407C20 837DD000                cmp dword ptr [ebp-30], 00000000
:00407C24 754D                    jne 00407C73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C71(U)
|
:00407C26 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00407C29 8B55DC                  mov edx, dword ptr [ebp-24]
:00407C2C 83EA01                  sub edx, 00000001
:00407C2F 8955DC                  mov dword ptr [ebp-24], edx
:00407C32 85C9                    test ecx, ecx
:00407C34 7E3D                    jle 00407C73
:00407C36 837DB001                cmp dword ptr [ebp-50], 00000001
:00407C3A 7504                    jne 00407C40
:00407C3C C645C830                mov [ebp-38], 30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C3A(C)
|
:00407C40 833DA013480001          cmp dword ptr [004813A0], 00000001
:00407C47 7513                    jne 00407C5C
:00407C49 8B45FC                  mov eax, dword ptr [ebp-04]
:00407C4C 8A4DC8                  mov cl, byte ptr [ebp-38]
:00407C4F 8808                    mov byte ptr [eax], cl
:00407C51 8B55FC                  mov edx, dword ptr [ebp-04]
:00407C54 83C201                  add edx, 00000001
:00407C57 8955FC                  mov dword ptr [ebp-04], edx
:00407C5A EB15                    jmp 00407C71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C47(C)
|
:00407C5C 8B45D4                  mov eax, dword ptr [ebp-2C]
:00407C5F 50                      push eax
:00407C60 8A4DC8                  mov cl, byte ptr [ebp-38]
:00407C63 51                      push ecx
:00407C64 B9A8134800              mov ecx, 004813A8
:00407C69 E810050000              call 0040817E
:00407C6E 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C5A(U)
|
:00407C71 EBB3                    jmp 00407C26

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407C24(C), :00407C34(C), :00407D14(U)
|
:00407C73 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407C76 33C0                    xor eax, eax
:00407C78 8A02                    mov al, byte ptr [edx]
:00407C7A 85C0                    test eax, eax
:00407C7C 0F8497000000            je 00407D19
:00407C82 837DCC00                cmp dword ptr [ebp-34], 00000000
:00407C86 7406                    je 00407C8E
:00407C88 837DC400                cmp dword ptr [ebp-3C], 00000000
:00407C8C 7E7D                    jle 00407D0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C86(C)
|
:00407C8E 837DF800                cmp dword ptr [ebp-08], 00000000
:00407C92 740C                    je 00407CA0
:00407C94 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407C97 33D2                    xor edx, edx
:00407C99 8A11                    mov dl, byte ptr [ecx]
:00407C9B 83FA20                  cmp edx, 00000020
:00407C9E 746B                    je 00407D0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C92(C)
|
:00407CA0 837DF800                cmp dword ptr [ebp-08], 00000000
:00407CA4 7427                    je 00407CCD
:00407CA6 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407CA9 33C9                    xor ecx, ecx
:00407CAB 8A08                    mov cl, byte ptr [eax]
:00407CAD 81F9A1000000            cmp ecx, 000000A1
:00407CB3 7518                    jne 00407CCD
:00407CB5 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407CB8 33C0                    xor eax, eax
:00407CBA 8A4201                  mov al, byte ptr [edx+01]
:00407CBD 83F840                  cmp eax, 00000040
:00407CC0 750B                    jne 00407CCD
:00407CC2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407CC5 83C101                  add ecx, 00000001
:00407CC8 894DF4                  mov dword ptr [ebp-0C], ecx
:00407CCB EB3E                    jmp 00407D0B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407CA4(C), :00407CB3(C), :00407CC0(C)
|
:00407CCD 833DA013480001          cmp dword ptr [004813A0], 00000001
:00407CD4 7515                    jne 00407CEB
:00407CD6 8B55FC                  mov edx, dword ptr [ebp-04]
:00407CD9 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407CDC 8A08                    mov cl, byte ptr [eax]
:00407CDE 880A                    mov byte ptr [edx], cl
:00407CE0 8B55FC                  mov edx, dword ptr [ebp-04]
:00407CE3 83C201                  add edx, 00000001
:00407CE6 8955FC                  mov dword ptr [ebp-04], edx
:00407CE9 EB17                    jmp 00407D02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407CD4(C)
|
:00407CEB 8B45D4                  mov eax, dword ptr [ebp-2C]
:00407CEE 50                      push eax
:00407CEF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407CF2 8A11                    mov dl, byte ptr [ecx]
:00407CF4 52                      push edx
:00407CF5 B9A8134800              mov ecx, 004813A8
:00407CFA E87F040000              call 0040817E
:00407CFF 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407CE9(U)
|
:00407D02 8B45C4                  mov eax, dword ptr [ebp-3C]
:00407D05 83E801                  sub eax, 00000001
:00407D08 8945C4                  mov dword ptr [ebp-3C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407C8C(C), :00407C9E(C), :00407CCB(U)
|
:00407D0B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407D0E 83C101                  add ecx, 00000001
:00407D11 894DF4                  mov dword ptr [ebp-0C], ecx
:00407D14 E95AFFFFFF              jmp 00407C73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C7C(C)
|
:00407D19 837DD000                cmp dword ptr [ebp-30], 00000000
:00407D1D 743D                    je 00407D5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D5A(U)
|
:00407D1F 8B55DC                  mov edx, dword ptr [ebp-24]
:00407D22 8B45DC                  mov eax, dword ptr [ebp-24]
:00407D25 83E801                  sub eax, 00000001
:00407D28 8945DC                  mov dword ptr [ebp-24], eax
:00407D2B 85D2                    test edx, edx
:00407D2D 7E2D                    jle 00407D5C
:00407D2F 833DA013480001          cmp dword ptr [004813A0], 00000001
:00407D36 7511                    jne 00407D49
:00407D38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407D3B C60120                  mov byte ptr [ecx], 20
:00407D3E 8B55FC                  mov edx, dword ptr [ebp-04]
:00407D41 83C201                  add edx, 00000001
:00407D44 8955FC                  mov dword ptr [ebp-04], edx
:00407D47 EB11                    jmp 00407D5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D36(C)
|
:00407D49 6A00                    push 00000000
:00407D4B 6A20                    push 00000020
:00407D4D B9A8134800              mov ecx, 004813A8
:00407D52 E827040000              call 0040817E
:00407D57 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D47(U)
|
:00407D5A EBC3                    jmp 00407D1F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407D1D(C), :00407D2D(C)
|
:00407D5C EB34                    jmp 00407D92
:00407D5E 8B45B4                  mov eax, dword ptr [ebp-4C]
:00407D61 EB7A                    jmp 00407DDD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407AD5(C)
|
:00407D63 833DA013480001          cmp dword ptr [004813A0], 00000001
:00407D6A 7513                    jne 00407D7F
:00407D6C 8B45FC                  mov eax, dword ptr [ebp-04]
:00407D6F 8A4DD8                  mov cl, byte ptr [ebp-28]
:00407D72 8808                    mov byte ptr [eax], cl
:00407D74 8B55FC                  mov edx, dword ptr [ebp-04]
:00407D77 83C201                  add edx, 00000001
:00407D7A 8955FC                  mov dword ptr [ebp-04], edx
:00407D7D EB13                    jmp 00407D92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D6A(C)
|
:00407D7F 6A00                    push 00000000
:00407D81 8A45D8                  mov al, byte ptr [ebp-28]
:00407D84 50                      push eax
:00407D85 B9A8134800              mov ecx, 004813A8
:00407D8A E8EF030000              call 0040817E
:00407D8F 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407D5C(U), :00407D7D(U)
|
:00407D92 EB2F                    jmp 00407DC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004079AD(C)
|
:00407D94 833DA013480001          cmp dword ptr [004813A0], 00000001
:00407D9B 7513                    jne 00407DB0
:00407D9D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407DA0 8A55D8                  mov dl, byte ptr [ebp-28]
:00407DA3 8811                    mov byte ptr [ecx], dl
:00407DA5 8B45FC                  mov eax, dword ptr [ebp-04]
:00407DA8 83C001                  add eax, 00000001
:00407DAB 8945FC                  mov dword ptr [ebp-04], eax
:00407DAE EB13                    jmp 00407DC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D9B(C)
|
:00407DB0 6A00                    push 00000000
:00407DB2 8A4DD8                  mov cl, byte ptr [ebp-28]
:00407DB5 51                      push ecx
:00407DB6 B9A8134800              mov ecx, 004813A8
:00407DBB E8BE030000              call 0040817E
:00407DC0 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407D92(U), :00407DAE(U)
|
:00407DC3 E9AEFBFFFF              jmp 00407976

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407991(C), :0040799B(C)
|
:00407DC8 8B55FC                  mov edx, dword ptr [ebp-04]
:00407DCB C60200                  mov byte ptr [edx], 00
:00407DCE 8B45B4                  mov eax, dword ptr [ebp-4C]
:00407DD1 EB0A                    jmp 00407DDD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407BE3(U)
|
:00407DD3 E948FEFFFF              jmp 00407C20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407BAC(U)
|
:00407DD8 E930FEFFFF              jmp 00407C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407D61(U), :00407DD1(U)
|
:00407DDD 8BE5                    mov esp, ebp
:00407DDF 5D                      pop ebp
:00407DE0 C3                      ret



:00407DE1 5E7D4000                DWORD 00407D5E
:00407DE5 E87B4000                DWORD 00407BE8
:00407DE9 ED7A4000                DWORD 00407AED
:00407DED B17B4000                DWORD 00407BB1
:00407DF1 537B4000                DWORD 00407B53
:00407DF5 637D4000                DWORD 00407D63


:00407DF9 000505050505            add byte ptr [05050505], al
:00407DFF 0505050505              add eax, 05050505
:00407E04 0505050505              add eax, 05050505
:00407E09 0505050505              add eax, 05050505
:00407E0E 0505050505              add eax, 05050505
:00407E13 0505050505              add eax, 05050505
:00407E18 0505050505              add eax, 05050505
:00407E1D 0505050505              add eax, 05050505
:00407E22 0505050505              add eax, 05050505
:00407E27 0505050505              add eax, 05050505

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DEA(C)
|
:00407E2C 0505050505              add eax, 05050505
:00407E31 0505050505              add eax, 05050505
:00407E36 0505050505              add eax, 05050505
:00407E3B 0501020505              add eax, 05050201
:00407E40 0505050505              add eax, 05050505
:00407E45 0505050505              add eax, 05050505
:00407E4A 0505030504              add eax, 04050305

* Referenced by a CALL at Addresses:
|:00407A37   , :00407A74   
|
:00407E4F 55                      push ebp
:00407E50 8BEC                    mov ebp, esp
:00407E52 83EC08                  sub esp, 00000008
:00407E55 C745F800000000          mov [ebp-08], 00000000
:00407E5C EB0D                    jmp 00407E6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E8C(U)
|
:00407E5E 8B4508                  mov eax, dword ptr [ebp+08]
:00407E61 8B08                    mov ecx, dword ptr [eax]
:00407E63 83C101                  add ecx, 00000001
:00407E66 8B5508                  mov edx, dword ptr [ebp+08]
:00407E69 890A                    mov dword ptr [edx], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E5C(U)
|
:00407E6B 8B4508                  mov eax, dword ptr [ebp+08]
:00407E6E 8B08                    mov ecx, dword ptr [eax]
:00407E70 33D2                    xor edx, edx
:00407E72 8A11                    mov dl, byte ptr [ecx]
:00407E74 83EA30                  sub edx, 00000030
:00407E77 8955FC                  mov dword ptr [ebp-04], edx
:00407E7A 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:00407E7E 730E                    jnb 00407E8E
:00407E80 8B45F8                  mov eax, dword ptr [ebp-08]
:00407E83 6BC00A                  imul eax, 0000000A
:00407E86 0345FC                  add eax, dword ptr [ebp-04]
:00407E89 8945F8                  mov dword ptr [ebp-08], eax
:00407E8C EBD0                    jmp 00407E5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E7E(C)
|
:00407E8E 8B45F8                  mov eax, dword ptr [ebp-08]
:00407E91 8BE5                    mov esp, ebp
:00407E93 5D                      pop ebp
:00407E94 C3                      ret



* Referenced by a CALL at Address:
|:00407872   
|
:00407E95 55                      push ebp
:00407E96 8BEC                    mov ebp, esp
:00407E98 51                      push ecx
:00407E99 894DFC                  mov dword ptr [ebp-04], ecx
:00407E9C 8B45FC                  mov eax, dword ptr [ebp-04]
:00407E9F C7401400000000          mov [eax+14], 00000000
:00407EA6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407EA9 C7410C00000000          mov [ecx+0C], 00000000
:00407EB0 8B55FC                  mov edx, dword ptr [ebp-04]
:00407EB3 C7420800000000          mov [edx+08], 00000000
:00407EBA 8B45FC                  mov eax, dword ptr [ebp-04]
:00407EBD C7400400000000          mov [eax+04], 00000000
:00407EC4 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible Reference to String Resource ID=00008: ""
                                  |
:00407EC7 C7411C08000000          mov [ecx+1C], 00000008
:00407ECE 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible Ref to Menu: DBGMENU, Item: "՛"
                                  |
:00407ED1 C742109F000000          mov [edx+10], 0000009F
:00407ED8 8B45FC                  mov eax, dword ptr [ebp-04]
:00407EDB C74018D8030000          mov [eax+18], 000003D8
:00407EE2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407EE5 C6412500                mov [ecx+25], 00
:00407EE9 8B55FC                  mov edx, dword ptr [ebp-04]
:00407EEC C6422412                mov [edx+24], 12
:00407EF0 8B45FC                  mov eax, dword ptr [ebp-04]
:00407EF3 C7403800000000          mov [eax+38], 00000000
:00407EFA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407EFD C7412000000000          mov [ecx+20], 00000000
:00407F04 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00407F06 6A0A                    push 0000000A
:00407F08 8B55FC                  mov edx, dword ptr [ebp-04]
:00407F0B 83C23C                  add edx, 0000003C
:00407F0E 52                      push edx
:00407F0F E834A90500              call 00462848
:00407F14 83C40C                  add esp, 0000000C
:00407F17 8B45FC                  mov eax, dword ptr [ebp-04]
:00407F1A C7403400000000          mov [eax+34], 00000000
:00407F21 8B45FC                  mov eax, dword ptr [ebp-04]
:00407F24 8BE5                    mov esp, ebp
:00407F26 5D                      pop ebp
:00407F27 C3                      ret



* Referenced by a CALL at Addresses:
|:00407FB9   , :0040827D   , :00408C55   
|
:00407F28 55                      push ebp
:00407F29 8BEC                    mov ebp, esp
:00407F2B 83EC08                  sub esp, 00000008
:00407F2E 894DF8                  mov dword ptr [ebp-08], ecx
:00407F31 8B45F8                  mov eax, dword ptr [ebp-08]
:00407F34 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407F37 8B5010                  mov edx, dword ptr [eax+10]
:00407F3A 2B510C                  sub edx, dword ptr [ecx+0C]
:00407F3D 83C201                  add edx, 00000001
:00407F40 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F54(U)
|
:00407F43 8B4508                  mov eax, dword ptr [ebp+08]
:00407F46 3B45FC                  cmp eax, dword ptr [ebp-04]
:00407F49 720B                    jb 00407F56
:00407F4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407F4E 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00407F51 894D08                  mov dword ptr [ebp+08], ecx
:00407F54 EBED                    jmp 00407F43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F49(C)
|
:00407F56 8B55F8                  mov edx, dword ptr [ebp-08]
:00407F59 8B4508                  mov eax, dword ptr [ebp+08]
:00407F5C 03420C                  add eax, dword ptr [edx+0C]
:00407F5F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407F62 894104                  mov dword ptr [ecx+04], eax
:00407F65 8BE5                    mov esp, ebp
:00407F67 5D                      pop ebp
:00407F68 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00407FC5   , :0040825A   
|
:00407F6B 55                      push ebp
:00407F6C 8BEC                    mov ebp, esp
:00407F6E 83EC08                  sub esp, 00000008
:00407F71 894DFC                  mov dword ptr [ebp-04], ecx
:00407F74 8B45FC                  mov eax, dword ptr [ebp-04]
:00407F77 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407F7A 034814                  add ecx, dword ptr [eax+14]
:00407F7D 8B55FC                  mov edx, dword ptr [ebp-04]
:00407F80 3B4A18                  cmp ecx, dword ptr [edx+18]
:00407F83 730E                    jnb 00407F93
:00407F85 8B45FC                  mov eax, dword ptr [ebp-04]
:00407F88 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407F8B 034814                  add ecx, dword ptr [eax+14]
:00407F8E 894DF8                  mov dword ptr [ebp-08], ecx
:00407F91 EB09                    jmp 00407F9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F83(C)
|
:00407F93 8B55FC                  mov edx, dword ptr [ebp-04]
:00407F96 8B4218                  mov eax, dword ptr [edx+18]
:00407F99 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F91(U)
|
:00407F9C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407F9F 8B55F8                  mov edx, dword ptr [ebp-08]
:00407FA2 895108                  mov dword ptr [ecx+08], edx
:00407FA5 8BE5                    mov esp, ebp
:00407FA7 5D                      pop ebp
:00407FA8 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0041304F   , :00413246   , :0042604B   , :004271B7   , :00427731   
|:00427FA1   , :00428521   , :00428B28   , :00428F9F   , :0042929D   
|:0042CFB1   , :0042CFEC   , :0042D06D   , :0042D0AC   , :0042D0F7   
|:0042D147   , :0044207E   , :0044231E   , :0044236C   , :00442AAB   
|:00442AE4   , :00442B1D   , :00446318   , :00446357   , :00457F13   
|:0045FFB0   , :00461304   , :0046135A   
|
:00407FAB 55                      push ebp
:00407FAC 8BEC                    mov ebp, esp
:00407FAE 51                      push ecx
:00407FAF 894DFC                  mov dword ptr [ebp-04], ecx
:00407FB2 8B4508                  mov eax, dword ptr [ebp+08]
:00407FB5 50                      push eax
:00407FB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407FB9 E86AFFFFFF              call 00407F28
:00407FBE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00407FC1 51                      push ecx
:00407FC2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407FC5 E8A1FFFFFF              call 00407F6B
:00407FCA 8BE5                    mov esp, ebp
:00407FCC 5D                      pop ebp
:00407FCD C20800                  ret 0008



* Referenced by a CALL at Address:
|:004082F1   
|
:00407FD0 55                      push ebp
:00407FD1 8BEC                    mov ebp, esp
:00407FD3 83EC08                  sub esp, 00000008
:00407FD6 894DF8                  mov dword ptr [ebp-08], ecx
:00407FD9 8B45F8                  mov eax, dword ptr [ebp-08]
:00407FDC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407FDF 8B5010                  mov edx, dword ptr [eax+10]
:00407FE2 2B510C                  sub edx, dword ptr [ecx+0C]
:00407FE5 83C201                  add edx, 00000001
:00407FE8 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407FFC(U)
|
:00407FEB 8B4508                  mov eax, dword ptr [ebp+08]
:00407FEE 3B45FC                  cmp eax, dword ptr [ebp-04]
:00407FF1 720B                    jb 00407FFE
:00407FF3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407FF6 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00407FF9 894D08                  mov dword ptr [ebp+08], ecx
:00407FFC EBED                    jmp 00407FEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407FF1(C)
|
:00407FFE 8B55F8                  mov edx, dword ptr [ebp-08]
:00408001 8B4508                  mov eax, dword ptr [ebp+08]
:00408004 03420C                  add eax, dword ptr [edx+0C]
:00408007 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040800A 89411C                  mov dword ptr [ecx+1C], eax
:0040800D 8BE5                    mov esp, ebp
:0040800F 5D                      pop ebp
:00408010 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00408479   , :004084F4   
|
:00408013 55                      push ebp
:00408014 8BEC                    mov ebp, esp
:00408016 51                      push ecx
:00408017 894DFC                  mov dword ptr [ebp-04], ecx
:0040801A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040801D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408020 8B511C                  mov edx, dword ptr [ecx+1C]
:00408023 895004                  mov dword ptr [eax+04], edx
:00408026 8B45FC                  mov eax, dword ptr [ebp-04]
:00408029 33C9                    xor ecx, ecx
:0040802B 8A4824                  mov cl, byte ptr [eax+24]
:0040802E 8B55FC                  mov edx, dword ptr [ebp-04]
:00408031 8B4208                  mov eax, dword ptr [edx+08]
:00408034 03C1                    add eax, ecx
:00408036 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408039 3B4118                  cmp eax, dword ptr [ecx+18]
:0040803C 7716                    ja 00408054
:0040803E 8B55FC                  mov edx, dword ptr [ebp-04]
:00408041 33C0                    xor eax, eax
:00408043 8A4224                  mov al, byte ptr [edx+24]
:00408046 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408049 8B5108                  mov edx, dword ptr [ecx+08]
:0040804C 03D0                    add edx, eax
:0040804E 8B45FC                  mov eax, dword ptr [ebp-04]
:00408051 895008                  mov dword ptr [eax+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040803C(C)
|
:00408054 8BE5                    mov esp, ebp
:00408056 5D                      pop ebp
:00408057 C3                      ret



* Referenced by a CALL at Addresses:
|:004082DA   , :00412F7B   , :004130EC   , :0041311F   , :004132EA   
|:00426057   , :004276FC   , :0042785A   , :00427EE3   , :00427FD6   
|:0042800F   , :00428555   , :00428B0A   , :00428E96   , :00429193   
|:0042933C   , :0042CF96   , :0042CFD1   , :0042D03D   , :0042D0DC   
|:0042D171   , :0042D647   , :0042D655   , :0042D663   , :0042D683   
|:0042D691   , :0042D6AF   , :0042D6CB   , :0043C329   , :00441FB0   
|:00442306   , :00442354   , :00442A7F   , :00446243   , :00457F2B   
|:0045FFBC   , :00461211   , :0046121F   
|
:00408058 55                      push ebp
:00408059 8BEC                    mov ebp, esp
:0040805B 51                      push ecx
:0040805C 894DFC                  mov dword ptr [ebp-04], ecx
:0040805F 8B45FC                  mov eax, dword ptr [ebp-04]
:00408062 8A4D08                  mov cl, byte ptr [ebp+08]
:00408065 884801                  mov byte ptr [eax+01], cl
:00408068 8B55FC                  mov edx, dword ptr [ebp-04]
:0040806B 33C0                    xor eax, eax
:0040806D 8A4202                  mov al, byte ptr [edx+02]
:00408070 50                      push eax
:00408071 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408074 33D2                    xor edx, edx
:00408076 8A5101                  mov dl, byte ptr [ecx+01]
:00408079 52                      push edx
:0040807A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040807D 33C9                    xor ecx, ecx
:0040807F 8A08                    mov cl, byte ptr [eax]
:00408081 51                      push ecx
:00408082 E8D12D0600              call 0046AE58
:00408087 83C40C                  add esp, 0000000C
:0040808A 8BE5                    mov esp, ebp
:0040808C 5D                      pop ebp
:0040808D C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040835D   , :00426063   , :0042747E   , :00427EEF   , :00428B16   
|:00428EA2   , :0042919F   , :0042CFBD   , :0042D049   , :0043C335   
|:00441FBC   , :00442A4F   , :0044624F   , :0045FFC8   , :0046122B   
|
:00408090 55                      push ebp
:00408091 8BEC                    mov ebp, esp
:00408093 51                      push ecx
:00408094 894DFC                  mov dword ptr [ebp-04], ecx
:00408097 8B45FC                  mov eax, dword ptr [ebp-04]
:0040809A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040809D 884802                  mov byte ptr [eax+02], cl
:004080A0 8B55FC                  mov edx, dword ptr [ebp-04]
:004080A3 33C0                    xor eax, eax
:004080A5 8A4202                  mov al, byte ptr [edx+02]
:004080A8 50                      push eax
:004080A9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004080AC 33D2                    xor edx, edx
:004080AE 8A5101                  mov dl, byte ptr [ecx+01]
:004080B1 52                      push edx
:004080B2 8B45FC                  mov eax, dword ptr [ebp-04]
:004080B5 33C9                    xor ecx, ecx
:004080B7 8A08                    mov cl, byte ptr [eax]
:004080B9 51                      push ecx
:004080BA E8992D0600              call 0046AE58
:004080BF 83C40C                  add esp, 0000000C
:004080C2 8BE5                    mov esp, ebp
:004080C4 5D                      pop ebp
:004080C5 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004083B0   , :00441FD4   , :00442A73   
|
:004080C8 55                      push ebp
:004080C9 8BEC                    mov ebp, esp
:004080CB 51                      push ecx
:004080CC 894DFC                  mov dword ptr [ebp-04], ecx
:004080CF 8B45FC                  mov eax, dword ptr [ebp-04]
:004080D2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004080D5 894820                  mov dword ptr [eax+20], ecx
:004080D8 8BE5                    mov esp, ebp
:004080DA 5D                      pop ebp
:004080DB C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004083CA   , :0041305B   , :00413083   , :00413252   , :00413283   
|:00441FC8   , :00442126   , :00442A67   , :00442B56   
|
:004080DE 55                      push ebp
:004080DF 8BEC                    mov ebp, esp
:004080E1 51                      push ecx
:004080E2 894DFC                  mov dword ptr [ebp-04], ecx
:004080E5 8B45FC                  mov eax, dword ptr [ebp-04]
:004080E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004080EB 894834                  mov dword ptr [eax+34], ecx
:004080EE 8BE5                    mov esp, ebp
:004080F0 5D                      pop ebp
:004080F1 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00408308   , :00427472   , :00427ED7   , :00428AFE   , :00428E8A   
|:00429187   , :00429330   , :0042CF8A   , :0043C31D   , :00441F9C   
|:004422F2   , :00442A5B   , :00446237   , :00457F1F   , :004611F6   
|
:004080F4 55                      push ebp
:004080F5 8BEC                    mov ebp, esp
:004080F7 51                      push ecx
:004080F8 894DFC                  mov dword ptr [ebp-04], ecx
:004080FB 8B45FC                  mov eax, dword ptr [ebp-04]
:004080FE 8A4D08                  mov cl, byte ptr [ebp+08]
:00408101 8808                    mov byte ptr [eax], cl
:00408103 8B55FC                  mov edx, dword ptr [ebp-04]
:00408106 33C0                    xor eax, eax
:00408108 8A4202                  mov al, byte ptr [edx+02]
:0040810B 50                      push eax
:0040810C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040810F 33D2                    xor edx, edx
:00408111 8A5101                  mov dl, byte ptr [ecx+01]
:00408114 52                      push edx
:00408115 8B45FC                  mov eax, dword ptr [ebp-04]
:00408118 33C9                    xor ecx, ecx
:0040811A 8A08                    mov cl, byte ptr [eax]
:0040811C 51                      push ecx
:0040811D E8362D0600              call 0046AE58
:00408122 83C40C                  add esp, 0000000C
:00408125 8BE5                    mov esp, ebp
:00408127 5D                      pop ebp
:00408128 C20400                  ret 0004


:0040812B 55                      push ebp
:0040812C 8BEC                    mov ebp, esp
:0040812E 51                      push ecx
:0040812F 894DFC                  mov dword ptr [ebp-04], ecx
:00408132 817D08C8030000          cmp dword ptr [ebp+08], 000003C8
:00408139 7709                    ja 00408144
:0040813B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040813E 8A4D08                  mov cl, byte ptr [ebp+08]
:00408141 884824                  mov byte ptr [eax+24], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408139(C)
|
:00408144 8BE5                    mov esp, ebp
:00408146 5D                      pop ebp
:00408147 C20400                  ret 0004


:0040814A 55                      push ebp
:0040814B 8BEC                    mov ebp, esp
:0040814D 51                      push ecx
:0040814E 894DFC                  mov dword ptr [ebp-04], ecx
:00408151 817D089F000000          cmp dword ptr [ebp+08], 0000009F
:00408158 7709                    ja 00408163
:0040815A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040815D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408160 894810                  mov dword ptr [eax+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408158(C)
|
:00408163 8BE5                    mov esp, ebp
:00408165 5D                      pop ebp
:00408166 C20400                  ret 0004


:00408169 55                      push ebp
:0040816A 8BEC                    mov ebp, esp
:0040816C 51                      push ecx
:0040816D 894DFC                  mov dword ptr [ebp-04], ecx
:00408170 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Ref to Menu: DBGMENU, Item: "՛"
                                  |
:00408173 C740109F000000          mov [eax+10], 0000009F
:0040817A 8BE5                    mov esp, ebp
:0040817C 5D                      pop ebp
:0040817D C3                      ret



* Referenced by a CALL at Addresses:
|:00407C69   , :00407CFA   , :00407D52   , :00407D8A   , :00407DBB   
|:00408BD9   
|
:0040817E 55                      push ebp
:0040817F 8BEC                    mov ebp, esp
:00408181 83EC2C                  sub esp, 0000002C
:00408184 894DEC                  mov dword ptr [ebp-14], ecx
:00408187 C745F000000000          mov [ebp-10], 00000000
:0040818E 8B45EC                  mov eax, dword ptr [ebp-14]
:00408191 8B4838                  mov ecx, dword ptr [eax+38]
:00408194 894DE8                  mov dword ptr [ebp-18], ecx
:00408197 8B55E8                  mov edx, dword ptr [ebp-18]
:0040819A 83EA01                  sub edx, 00000001
:0040819D 8955E8                  mov dword ptr [ebp-18], edx
:004081A0 837DE809                cmp dword ptr [ebp-18], 00000009
:004081A4 0F872A020000            ja 004083D4
:004081AA 8B45E8                  mov eax, dword ptr [ebp-18]
:004081AD FF2485C3854000          jmp dword ptr [4*eax+004085C3]
:004081B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004081B7 81E1FF000000            and ecx, 000000FF
:004081BD 894DE4                  mov dword ptr [ebp-1C], ecx
:004081C0 8B55E4                  mov edx, dword ptr [ebp-1C]
:004081C3 83EA3D                  sub edx, 0000003D
:004081C6 8955E4                  mov dword ptr [ebp-1C], edx
:004081C9 837DE41A                cmp dword ptr [ebp-1C], 0000001A
:004081CD 7773                    ja 00408242
:004081CF 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004081D2 33C0                    xor eax, eax
:004081D4 8A810F864000            mov al, byte ptr [ecx+0040860F]
:004081DA FF2485EB854000          jmp dword ptr [4*eax+004085EB]
:004081E1 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004081E4 C7423802000000          mov [edx+38], 00000002
:004081EB EB55                    jmp 00408242
:004081ED 8B45EC                  mov eax, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004081F0 C7403804000000          mov [eax+38], 00000004
:004081F7 EB49                    jmp 00408242
:004081F9 8B4DEC                  mov ecx, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004081FC C7413805000000          mov [ecx+38], 00000005
:00408203 EB3D                    jmp 00408242
:00408205 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00006: ""
                                  |
:00408208 C7423806000000          mov [edx+38], 00000006
:0040820F EB31                    jmp 00408242
:00408211 6A01                    push 00000001
:00408213 E8D8E90100              call 00426BF0
:00408218 83C404                  add esp, 00000004
:0040821B E998030000              jmp 004085B8
:00408220 8B45EC                  mov eax, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00008: ""
                                  |
:00408223 C7403808000000          mov [eax+38], 00000008
:0040822A EB16                    jmp 00408242
:0040822C 8B4DEC                  mov ecx, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0040822F C7413809000000          mov [ecx+38], 00000009
:00408236 EB0A                    jmp 00408242
:00408238 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040823B C742380A000000          mov [edx+38], 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004081CD(C), :004081EB(U), :004081F7(U), :00408203(U), :0040820F(U)
|:0040822A(U), :00408236(U)
|
:00408242 E96C030000              jmp 004085B3
:00408247 8B4508                  mov eax, dword ptr [ebp+08]
:0040824A 25FF000000              and eax, 000000FF
:0040824F 8D0CC500FFFFFF          lea ecx, dword ptr [8*eax+FFFFFF00]
:00408256 51                      push ecx
:00408257 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040825A E80CFDFFFF              call 00407F6B
:0040825F 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00408262 C7423803000000          mov [edx+38], 00000003
:00408269 E945030000              jmp 004085B3
:0040826E 8B4508                  mov eax, dword ptr [ebp+08]
:00408271 25FF000000              and eax, 000000FF
:00408276 83E820                  sub eax, 00000020
:00408279 50                      push eax
:0040827A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040827D E8A6FCFFFF              call 00407F28

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004082DF(U), :004082F6(U), :0040830D(U), :00408362(U), :004083B5(U)
|:004083CF(U), :004085B8(U)
|
:00408282 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408285 C7413800000000          mov [ecx+38], 00000000
:0040828C E922030000              jmp 004085B3
:00408291 8A5508                  mov dl, byte ptr [ebp+08]
:00408294 52                      push edx
:00408295 E8060A0000              call 00408CA0
:0040829A 83C404                  add esp, 00000004
:0040829D 85C0                    test eax, eax
:0040829F 7410                    je 004082B1
:004082A1 8B4508                  mov eax, dword ptr [ebp+08]
:004082A4 25FF000000              and eax, 000000FF
:004082A9 83E830                  sub eax, 00000030
:004082AC 8845E3                  mov byte ptr [ebp-1D], al
:004082AF EB17                    jmp 004082C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040829F(C)
|
:004082B1 8A4D08                  mov cl, byte ptr [ebp+08]
:004082B4 51                      push ecx
:004082B5 E8260A0000              call 00408CE0
:004082BA 83C404                  add esp, 00000004
:004082BD 25FF000000              and eax, 000000FF
:004082C2 83E837                  sub eax, 00000037
:004082C5 8845E3                  mov byte ptr [ebp-1D], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004082AF(U)
|
:004082C8 8A55E3                  mov dl, byte ptr [ebp-1D]
:004082CB 885508                  mov byte ptr [ebp+08], dl
:004082CE 8B4508                  mov eax, dword ptr [ebp+08]
:004082D1 25FF000000              and eax, 000000FF
:004082D6 50                      push eax
:004082D7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004082DA E879FDFFFF              call 00408058
:004082DF EBA1                    jmp 00408282
:004082E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004082E4 81E1FF000000            and ecx, 000000FF
:004082EA 83E920                  sub ecx, 00000020
:004082ED 51                      push ecx
:004082EE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004082F1 E8DAFCFFFF              call 00407FD0
:004082F6 EB8A                    jmp 00408282
:004082F8 8B5508                  mov edx, dword ptr [ebp+08]
:004082FB 81E2FF000000            and edx, 000000FF
:00408301 83EA30                  sub edx, 00000030
:00408304 52                      push edx
:00408305 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408308 E8E7FDFFFF              call 004080F4
:0040830D E970FFFFFF              jmp 00408282
:00408312 8A4508                  mov al, byte ptr [ebp+08]
:00408315 50                      push eax
:00408316 E885090000              call 00408CA0
:0040831B 83C404                  add esp, 00000004
:0040831E 85C0                    test eax, eax
:00408320 7411                    je 00408333
:00408322 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408325 81E1FF000000            and ecx, 000000FF
:0040832B 83E930                  sub ecx, 00000030
:0040832E 884DE2                  mov byte ptr [ebp-1E], cl
:00408331 EB17                    jmp 0040834A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408320(C)
|
:00408333 8A5508                  mov dl, byte ptr [ebp+08]
:00408336 52                      push edx
:00408337 E8A4090000              call 00408CE0
:0040833C 83C404                  add esp, 00000004
:0040833F 25FF000000              and eax, 000000FF
:00408344 83E837                  sub eax, 00000037
:00408347 8845E2                  mov byte ptr [ebp-1E], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408331(U)
|
:0040834A 8A45E2                  mov al, byte ptr [ebp-1E]
:0040834D 884508                  mov byte ptr [ebp+08], al
:00408350 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408353 81E1FF000000            and ecx, 000000FF
:00408359 51                      push ecx
:0040835A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040835D E82EFDFFFF              call 00408090
:00408362 E91BFFFFFF              jmp 00408282
:00408367 8A5508                  mov dl, byte ptr [ebp+08]
:0040836A 52                      push edx
:0040836B E830090000              call 00408CA0
:00408370 83C404                  add esp, 00000004
:00408373 85C0                    test eax, eax
:00408375 7410                    je 00408387
:00408377 8B4508                  mov eax, dword ptr [ebp+08]
:0040837A 25FF000000              and eax, 000000FF
:0040837F 83E830                  sub eax, 00000030
:00408382 8845E1                  mov byte ptr [ebp-1F], al
:00408385 EB17                    jmp 0040839E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408375(C)
|
:00408387 8A4D08                  mov cl, byte ptr [ebp+08]
:0040838A 51                      push ecx
:0040838B E850090000              call 00408CE0
:00408390 83C404                  add esp, 00000004
:00408393 25FF000000              and eax, 000000FF
:00408398 83E837                  sub eax, 00000037
:0040839B 8845E1                  mov byte ptr [ebp-1F], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408385(U)
|
:0040839E 8A55E1                  mov dl, byte ptr [ebp-1F]
:004083A1 885508                  mov byte ptr [ebp+08], dl
:004083A4 8B4508                  mov eax, dword ptr [ebp+08]
:004083A7 25FF000000              and eax, 000000FF
:004083AC 50                      push eax
:004083AD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004083B0 E813FDFFFF              call 004080C8
:004083B5 E9C8FEFFFF              jmp 00408282
:004083BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004083BD 81E1FF000000            and ecx, 000000FF
:004083C3 83E930                  sub ecx, 00000030
:004083C6 51                      push ecx
:004083C7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004083CA E80FFDFFFF              call 004080DE
:004083CF E9AEFEFFFF              jmp 00408282

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004081A4(C)
|
:004083D4 8B55EC                  mov edx, dword ptr [ebp-14]
:004083D7 33C0                    xor eax, eax
:004083D9 8A4225                  mov al, byte ptr [edx+25]
:004083DC 85C0                    test eax, eax
:004083DE 7424                    je 00408404
:004083E0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004083E3 33D2                    xor edx, edx
:004083E5 8A5125                  mov dl, byte ptr [ecx+25]
:004083E8 C1E208                  shl edx, 08
:004083EB 8B4508                  mov eax, dword ptr [ebp+08]
:004083EE 25FF000000              and eax, 000000FF
:004083F3 03D0                    add edx, eax
:004083F5 8955FC                  mov dword ptr [ebp-04], edx
:004083F8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004083FB C6412500                mov [ecx+25], 00
:004083FF E999000000              jmp 0040849D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004083DE(C)
|
:00408404 837D0C02                cmp dword ptr [ebp+0C], 00000002
:00408408 742E                    je 00408438
:0040840A 8B5508                  mov edx, dword ptr [ebp+08]
:0040840D 81E2FF000000            and edx, 000000FF
:00408413 81FAA1000000            cmp edx, 000000A1
:00408419 7C1D                    jl 00408438
:0040841B 8B4508                  mov eax, dword ptr [ebp+08]
:0040841E 25FF000000              and eax, 000000FF
:00408423 3DFE000000              cmp eax, 000000FE
:00408428 7F0E                    jg 00408438
:0040842A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040842D 8A5508                  mov dl, byte ptr [ebp+08]
:00408430 885125                  mov byte ptr [ecx+25], dl
:00408433 E97B010000              jmp 004085B3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408408(C), :00408419(C), :00408428(C)
|
:00408438 8B4508                  mov eax, dword ptr [ebp+08]
:0040843B 25FF000000              and eax, 000000FF
:00408440 83F81B                  cmp eax, 0000001B
:00408443 750F                    jne 00408454
:00408445 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408448 C7413801000000          mov [ecx+38], 00000001
:0040844F E95F010000              jmp 004085B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408443(C)
|
:00408454 8B5508                  mov edx, dword ptr [ebp+08]
:00408457 81E2FF000000            and edx, 000000FF
:0040845D 83FA20                  cmp edx, 00000020
:00408460 7D2F                    jge 00408491
:00408462 8A4508                  mov al, byte ptr [ebp+08]
:00408465 8845DC                  mov byte ptr [ebp-24], al
:00408468 807DDC0A                cmp byte ptr [ebp-24], 0A
:0040846C 7408                    je 00408476
:0040846E 807DDC0D                cmp byte ptr [ebp-24], 0D
:00408472 740C                    je 00408480
:00408474 EB16                    jmp 0040848C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040846C(C)
|
:00408476 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408479 E895FBFFFF              call 00408013
:0040847E EB0C                    jmp 0040848C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408472(C)
|
:00408480 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408483 8B55EC                  mov edx, dword ptr [ebp-14]
:00408486 8B421C                  mov eax, dword ptr [edx+1C]
:00408489 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408474(U), :0040847E(U)
|
:0040848C E922010000              jmp 004085B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408460(C)
|
:00408491 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408494 81E1FF000000            and ecx, 000000FF
:0040849A 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004083FF(U)
|
:0040849D 817DFC00020000          cmp dword ptr [ebp-04], 00000200
:004084A4 1BD2                    sbb edx, edx
:004084A6 F7DA                    neg edx
:004084A8 8955F8                  mov dword ptr [ebp-08], edx
:004084AB 837DF800                cmp dword ptr [ebp-08], 00000000
:004084AF 740B                    je 004084BC
:004084B1 8B45EC                  mov eax, dword ptr [ebp-14]
:004084B4 8B4810                  mov ecx, dword ptr [eax+10]
:004084B7 894DD8                  mov dword ptr [ebp-28], ecx
:004084BA EB0C                    jmp 004084C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004084AF(C)
|
:004084BC 8B55EC                  mov edx, dword ptr [ebp-14]
:004084BF 8B4210                  mov eax, dword ptr [edx+10]
:004084C2 83E801                  sub eax, 00000001
:004084C5 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004084BA(U)
|
:004084C8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004084CB 8B5104                  mov edx, dword ptr [ecx+04]
:004084CE 3B55D8                  cmp edx, dword ptr [ebp-28]
:004084D1 7626                    jbe 004084F9
:004084D3 8B45EC                  mov eax, dword ptr [ebp-14]
:004084D6 8178109F000000          cmp dword ptr [eax+10], 0000009F
:004084DD 7412                    je 004084F1
:004084DF 817DFC41A10000          cmp dword ptr [ebp-04], 0000A141
:004084E6 7209                    jb 004084F1
:004084E8 817DFC45A10000          cmp dword ptr [ebp-04], 0000A145
:004084EF 7608                    jbe 004084F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004084DD(C), :004084E6(C)
|
:004084F1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004084F4 E81AFBFFFF              call 00408013

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004084D1(C), :004084EF(C)
|
:004084F9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004084FC 51                      push ecx
:004084FD 8B55FC                  mov edx, dword ptr [ebp-04]
:00408500 52                      push edx
:00408501 8B45EC                  mov eax, dword ptr [ebp-14]
:00408504 8B4808                  mov ecx, dword ptr [eax+08]
:00408507 51                      push ecx
:00408508 8B55EC                  mov edx, dword ptr [ebp-14]
:0040850B 8B4204                  mov eax, dword ptr [edx+04]
:0040850E 50                      push eax
:0040850F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408512 E8E2030000              call 004088F9
:00408517 8945F0                  mov dword ptr [ebp-10], eax
:0040851A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040851D 33D2                    xor edx, edx
:0040851F 8A11                    mov dl, byte ptr [ecx]
:00408521 83E240                  and edx, 00000040
:00408524 F7DA                    neg edx
:00408526 1BD2                    sbb edx, edx
:00408528 F7DA                    neg edx
:0040852A 83C201                  add edx, 00000001
:0040852D 8955F4                  mov dword ptr [ebp-0C], edx
:00408530 8B45EC                  mov eax, dword ptr [ebp-14]
:00408533 33C9                    xor ecx, ecx
:00408535 8A08                    mov cl, byte ptr [eax]
:00408537 83E120                  and ecx, 00000020
:0040853A 85C9                    test ecx, ecx
:0040853C 7446                    je 00408584
:0040853E 8B55EC                  mov edx, dword ptr [ebp-14]
:00408541 33C0                    xor eax, eax
:00408543 8A4224                  mov al, byte ptr [edx+24]
:00408546 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408549 33D2                    xor edx, edx
:0040854B 8A11                    mov dl, byte ptr [ecx]
:0040854D 81E2C0000000            and edx, 000000C0
:00408553 F7DA                    neg edx
:00408555 1BD2                    sbb edx, edx
:00408557 83E210                  and edx, 00000010
:0040855A 03C2                    add eax, edx
:0040855C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040855F 8B5108                  mov edx, dword ptr [ecx+08]
:00408562 03D0                    add edx, eax
:00408564 8B45EC                  mov eax, dword ptr [ebp-14]
:00408567 895008                  mov dword ptr [eax+08], edx
:0040856A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040856D 8B55EC                  mov edx, dword ptr [ebp-14]
:00408570 8B4108                  mov eax, dword ptr [ecx+08]
:00408573 3B4218                  cmp eax, dword ptr [edx+18]
:00408576 760A                    jbe 00408582
:00408578 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040857B C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408576(C)
|
:00408582 EB2F                    jmp 004085B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040853C(C)
|
:00408584 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00408588 7509                    jne 00408593

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040858A C745D404000000          mov [ebp-2C], 00000004
:00408591 EB11                    jmp 004085A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408588(C)
|
:00408593 8B55F8                  mov edx, dword ptr [ebp-08]
:00408596 F7DA                    neg edx
:00408598 1BD2                    sbb edx, edx
:0040859A 83C202                  add edx, 00000002
:0040859D 0FAF55F4                imul edx, dword ptr [ebp-0C]
:004085A1 8955D4                  mov dword ptr [ebp-2C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408591(U)
|
:004085A4 8B45EC                  mov eax, dword ptr [ebp-14]
:004085A7 8B4804                  mov ecx, dword ptr [eax+04]
:004085AA 034DD4                  add ecx, dword ptr [ebp-2C]
:004085AD 8B55EC                  mov edx, dword ptr [ebp-14]
:004085B0 894A04                  mov dword ptr [edx+04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408242(U), :00408269(U), :0040828C(U), :00408433(U), :0040844F(U)
|:0040848C(U), :00408582(U)
|
:004085B3 8B45F0                  mov eax, dword ptr [ebp-10]
:004085B6 EB05                    jmp 004085BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040821B(U)
|
:004085B8 E9C5FCFFFF              jmp 00408282

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004085B6(U)
|
:004085BD 8BE5                    mov esp, ebp
:004085BF 5D                      pop ebp
:004085C0 C20800                  ret 0008



:004085C3 B4814000                DWORD 004081B4
:004085C7 47824000                DWORD 00408247
:004085CB 6E824000                DWORD 0040826E
:004085CF 91824000                DWORD 00408291
:004085D3 E1824000                DWORD 004082E1
:004085D7 F8824000                DWORD 004082F8
:004085DB D4834000                DWORD 004083D4
:004085DF 12834000                DWORD 00408312
:004085E3 67834000                DWORD 00408367
:004085E7 BA834000                DWORD 004083BA
:004085EB E1814000                DWORD 004081E1
:004085EF 20824000                DWORD 00408220
:004085F3 ED814000                DWORD 004081ED
:004085F7 2C824000                DWORD 0040822C
:004085FB 38824000                DWORD 00408238
:004085FF 05824000                DWORD 00408205
:00408603 F9814000                DWORD 004081F9
:00408607 11824000                DWORD 00408211
:0040860B 42824000                DWORD 00408242


:0040860F 0008                    add byte ptr [eax], cl
:00408611 0808                    or byte ptr [eax], cl
:00408613 0801                    or byte ptr [ecx], al
:00408615 0208                    add cl, byte ptr [eax]
:00408617 0803                    or byte ptr [ebx], al
:00408619 0408                    add al, 08
:0040861B 0808                    or byte ptr [eax], cl
:0040861D 0808                    or byte ptr [eax], cl
:0040861F 0508080808              add eax, 08080808
:00408624 06                      push es
:00408625 0808                    or byte ptr [eax], cl
:00408627 0808                    or byte ptr [eax], cl
:00408629 07                      pop es

* Referenced by a CALL at Address:
|:004089F9   
|
:0040862A 55                      push ebp
:0040862B 8BEC                    mov ebp, esp
:0040862D 83EC18                  sub esp, 00000018
:00408630 8B4510                  mov eax, dword ptr [ebp+10]
:00408633 C1E004                  shl eax, 04
:00408636 50                      push eax
:00408637 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040863A 51                      push ecx
:0040863B 8B5508                  mov edx, dword ptr [ebp+08]
:0040863E 52                      push edx
:0040863F E8EBA10500              call 0046282F
:00408644 83C40C                  add esp, 0000000C
:00408647 837D1001                cmp dword ptr [ebp+10], 00000001
:0040864B 0F844B010000            je 0040879C
:00408651 8B450C                  mov eax, dword ptr [ebp+0C]
:00408654 8945FC                  mov dword ptr [ebp-04], eax
:00408657 C745F800000000          mov [ebp-08], 00000000
:0040865E EB09                    jmp 00408669

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004086B5(U)
|
:00408660 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408663 83C101                  add ecx, 00000001
:00408666 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040865E(U)
|
:00408669 837DF810                cmp dword ptr [ebp-08], 00000010
:0040866D 7D48                    jge 004086B7
:0040866F 8B55FC                  mov edx, dword ptr [ebp-04]
:00408672 668B02                  mov ax, word ptr [edx]
:00408675 668945F4                mov word ptr [ebp-0C], ax
:00408679 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040867C 81E1FFFF0000            and ecx, 0000FFFF
:00408682 D1E1                    shl ecx, 1
:00408684 8B55F4                  mov edx, dword ptr [ebp-0C]
:00408687 81E2FFFF0000            and edx, 0000FFFF
:0040868D C1FA0F                  sar edx, 0F
:00408690 0BCA                    or ecx, edx
:00408692 81E1FEFF0000            and ecx, 0000FFFE
:00408698 66894DF4                mov word ptr [ebp-0C], cx
:0040869C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040869F 668B08                  mov cx, word ptr [eax]
:004086A2 660B4DF4                or cx, word ptr [ebp-0C]
:004086A6 8B55FC                  mov edx, dword ptr [ebp-04]
:004086A9 66890A                  mov word ptr [edx], cx
:004086AC 8B45FC                  mov eax, dword ptr [ebp-04]
:004086AF 83C002                  add eax, 00000002
:004086B2 8945FC                  mov dword ptr [ebp-04], eax
:004086B5 EBA9                    jmp 00408660

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040866D(C)
|
:004086B7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004086BA 894DFC                  mov dword ptr [ebp-04], ecx
:004086BD C745F800000000          mov [ebp-08], 00000000
:004086C4 EB09                    jmp 004086CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040871A(U)
|
:004086C6 8B55F8                  mov edx, dword ptr [ebp-08]
:004086C9 83C201                  add edx, 00000001
:004086CC 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004086C4(U)
|
:004086CF 837DF810                cmp dword ptr [ebp-08], 00000010
:004086D3 7D47                    jge 0040871C
:004086D5 8B45FC                  mov eax, dword ptr [ebp-04]
:004086D8 668B08                  mov cx, word ptr [eax]
:004086DB 66894DF0                mov word ptr [ebp-10], cx
:004086DF 8B55F0                  mov edx, dword ptr [ebp-10]
:004086E2 81E2FFFF0000            and edx, 0000FFFF
:004086E8 D1FA                    sar edx, 1
:004086EA 8B45F0                  mov eax, dword ptr [ebp-10]
:004086ED 25FFFF0000              and eax, 0000FFFF
:004086F2 C1E00F                  shl eax, 0F
:004086F5 0BD0                    or edx, eax
:004086F7 81E2FEFF0000            and edx, 0000FFFE
:004086FD 668955F0                mov word ptr [ebp-10], dx
:00408701 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408704 668B11                  mov dx, word ptr [ecx]
:00408707 660B55F0                or dx, word ptr [ebp-10]
:0040870B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040870E 668910                  mov word ptr [eax], dx
:00408711 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408714 83C102                  add ecx, 00000002
:00408717 894DFC                  mov dword ptr [ebp-04], ecx
:0040871A EBAA                    jmp 004086C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004086D3(C)
|
:0040871C 8B550C                  mov edx, dword ptr [ebp+0C]
:0040871F 8955FC                  mov dword ptr [ebp-04], edx
:00408722 C745F800000000          mov [ebp-08], 00000000
:00408729 EB09                    jmp 00408734

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408756(U)
|
:0040872B 8B45F8                  mov eax, dword ptr [ebp-08]
:0040872E 83C001                  add eax, 00000001
:00408731 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408729(U)
|
:00408734 837DF80F                cmp dword ptr [ebp-08], 0000000F
:00408738 7D1E                    jge 00408758
:0040873A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040873D 8B55FC                  mov edx, dword ptr [ebp-04]
:00408740 668B01                  mov ax, word ptr [ecx]
:00408743 660B4202                or ax, word ptr [edx+02]
:00408747 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040874A 668901                  mov word ptr [ecx], ax
:0040874D 8B55FC                  mov edx, dword ptr [ebp-04]
:00408750 83C202                  add edx, 00000002
:00408753 8955FC                  mov dword ptr [ebp-04], edx
:00408756 EBD3                    jmp 0040872B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408738(C)
|
:00408758 8B450C                  mov eax, dword ptr [ebp+0C]
:0040875B 83C01E                  add eax, 0000001E
:0040875E 8945FC                  mov dword ptr [ebp-04], eax
:00408761 C745F800000000          mov [ebp-08], 00000000
:00408768 EB09                    jmp 00408773

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408795(U)
|
:0040876A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040876D 83C101                  add ecx, 00000001
:00408770 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408768(U)
|
:00408773 837DF80F                cmp dword ptr [ebp-08], 0000000F
:00408777 7D1E                    jge 00408797
:00408779 8B55FC                  mov edx, dword ptr [ebp-04]
:0040877C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040877F 668B0A                  mov cx, word ptr [edx]
:00408782 660B48FE                or cx, word ptr [eax-02]
:00408786 8B55FC                  mov edx, dword ptr [ebp-04]
:00408789 66890A                  mov word ptr [edx], cx
:0040878C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040878F 83E802                  sub eax, 00000002
:00408792 8945FC                  mov dword ptr [ebp-04], eax
:00408795 EBD3                    jmp 0040876A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408777(C)
|
:00408797 E912010000              jmp 004088AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040864B(C)
|
:0040879C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040879F 894DEC                  mov dword ptr [ebp-14], ecx
:004087A2 C745E800000000          mov [ebp-18], 00000000
:004087A9 EB09                    jmp 004087B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004087EA(U)
|
:004087AB 8B55E8                  mov edx, dword ptr [ebp-18]
:004087AE 83C201                  add edx, 00000001
:004087B1 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004087A9(U)
|
:004087B4 837DE810                cmp dword ptr [ebp-18], 00000010
:004087B8 7D32                    jge 004087EC
:004087BA 8B45EC                  mov eax, dword ptr [ebp-14]
:004087BD 33C9                    xor ecx, ecx
:004087BF 8A08                    mov cl, byte ptr [eax]
:004087C1 D1E1                    shl ecx, 1
:004087C3 8B55EC                  mov edx, dword ptr [ebp-14]
:004087C6 33C0                    xor eax, eax
:004087C8 8A02                    mov al, byte ptr [edx]
:004087CA C1F807                  sar eax, 07
:004087CD 0BC8                    or ecx, eax
:004087CF 81E1FE000000            and ecx, 000000FE
:004087D5 8B55EC                  mov edx, dword ptr [ebp-14]
:004087D8 8A02                    mov al, byte ptr [edx]
:004087DA 0AC1                    or al, cl
:004087DC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004087DF 8801                    mov byte ptr [ecx], al
:004087E1 8B55EC                  mov edx, dword ptr [ebp-14]
:004087E4 83C201                  add edx, 00000001
:004087E7 8955EC                  mov dword ptr [ebp-14], edx
:004087EA EBBF                    jmp 004087AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004087B8(C)
|
:004087EC 8B450C                  mov eax, dword ptr [ebp+0C]
:004087EF 8945EC                  mov dword ptr [ebp-14], eax
:004087F2 C745E800000000          mov [ebp-18], 00000000
:004087F9 EB09                    jmp 00408804

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408837(U)
|
:004087FB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004087FE 83C101                  add ecx, 00000001
:00408801 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004087F9(U)
|
:00408804 837DE810                cmp dword ptr [ebp-18], 00000010
:00408808 7D2F                    jge 00408839
:0040880A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040880D 33C0                    xor eax, eax
:0040880F 8A02                    mov al, byte ptr [edx]
:00408811 D1F8                    sar eax, 1
:00408813 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408816 33D2                    xor edx, edx
:00408818 8A11                    mov dl, byte ptr [ecx]
:0040881A C1E207                  shl edx, 07
:0040881D 0BC2                    or eax, edx
:0040881F 83E07F                  and eax, 0000007F
:00408822 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408825 8A11                    mov dl, byte ptr [ecx]
:00408827 0AD0                    or dl, al
:00408829 8B45EC                  mov eax, dword ptr [ebp-14]
:0040882C 8810                    mov byte ptr [eax], dl
:0040882E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408831 83C101                  add ecx, 00000001
:00408834 894DEC                  mov dword ptr [ebp-14], ecx
:00408837 EBC2                    jmp 004087FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408808(C)
|
:00408839 8B550C                  mov edx, dword ptr [ebp+0C]
:0040883C 8955EC                  mov dword ptr [ebp-14], edx
:0040883F C745E800000000          mov [ebp-18], 00000000
:00408846 EB09                    jmp 00408851

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408870(U)
|
:00408848 8B45E8                  mov eax, dword ptr [ebp-18]
:0040884B 83C001                  add eax, 00000001
:0040884E 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408846(U)
|
:00408851 837DE80F                cmp dword ptr [ebp-18], 0000000F
:00408855 7D1B                    jge 00408872
:00408857 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040885A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040885D 8A01                    mov al, byte ptr [ecx]
:0040885F 0A4201                  or al, byte ptr [edx+01]
:00408862 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408865 8801                    mov byte ptr [ecx], al
:00408867 8B55EC                  mov edx, dword ptr [ebp-14]
:0040886A 83C201                  add edx, 00000001
:0040886D 8955EC                  mov dword ptr [ebp-14], edx
:00408870 EBD6                    jmp 00408848

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408855(C)
|
:00408872 8B450C                  mov eax, dword ptr [ebp+0C]
:00408875 83C00F                  add eax, 0000000F
:00408878 8945EC                  mov dword ptr [ebp-14], eax
:0040887B C745E800000000          mov [ebp-18], 00000000
:00408882 EB09                    jmp 0040888D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004088AC(U)
|
:00408884 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00408887 83C101                  add ecx, 00000001
:0040888A 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408882(U)
|
:0040888D 837DE80F                cmp dword ptr [ebp-18], 0000000F
:00408891 7D1B                    jge 004088AE
:00408893 8B55EC                  mov edx, dword ptr [ebp-14]
:00408896 8B45EC                  mov eax, dword ptr [ebp-14]
:00408899 8A0A                    mov cl, byte ptr [edx]
:0040889B 0A48FF                  or cl, byte ptr [eax-01]
:0040889E 8B55EC                  mov edx, dword ptr [ebp-14]
:004088A1 880A                    mov byte ptr [edx], cl
:004088A3 8B45EC                  mov eax, dword ptr [ebp-14]
:004088A6 83E801                  sub eax, 00000001
:004088A9 8945EC                  mov dword ptr [ebp-14], eax
:004088AC EBD6                    jmp 00408884

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408797(U), :00408891(C)
|
:004088AE 8BE5                    mov esp, ebp
:004088B0 5D                      pop ebp
:004088B1 C3                      ret


:004088B2 55                      push ebp
:004088B3 8BEC                    mov ebp, esp
:004088B5 6A00                    push 00000000
:004088B7 8B4518                  mov eax, dword ptr [ebp+18]
:004088BA 25FF000000              and eax, 000000FF
:004088BF 50                      push eax
:004088C0 8B4D18                  mov ecx, dword ptr [ebp+18]
:004088C3 81E100FF0000            and ecx, 0000FF00
:004088C9 C1E908                  shr ecx, 08
:004088CC 51                      push ecx
:004088CD E886250600              call 0046AE58
:004088D2 83C40C                  add esp, 0000000C
:004088D5 8B551C                  mov edx, dword ptr [ebp+1C]
:004088D8 52                      push edx
:004088D9 8B4514                  mov eax, dword ptr [ebp+14]
:004088DC 50                      push eax
:004088DD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004088E0 C1E103                  shl ecx, 03
:004088E3 51                      push ecx
:004088E4 8B550C                  mov edx, dword ptr [ebp+0C]
:004088E7 52                      push edx
:004088E8 8B4508                  mov eax, dword ptr [ebp+08]
:004088EB C1E003                  shl eax, 03
:004088EE 50                      push eax
:004088EF E8DA350600              call 0046BECE
:004088F4 83C414                  add esp, 00000014
:004088F7 5D                      pop ebp
:004088F8 C3                      ret



* Referenced by a CALL at Address:
|:00408512   
|
:004088F9 55                      push ebp
:004088FA 8BEC                    mov ebp, esp
:004088FC 81EC10010000            sub esp, 00000110
:00408902 898DF0FEFFFF            mov dword ptr [ebp+FFFFFEF0], ecx
:00408908 C7451400000000          mov [ebp+14], 00000000
:0040890F C785F4FEFFFF01000000    mov dword ptr [ebp+FFFFFEF4], 00000001
:00408919 837D1030                cmp dword ptr [ebp+10], 00000030
:0040891D 723A                    jb 00408959
:0040891F 837D1039                cmp dword ptr [ebp+10], 00000039
:00408923 7734                    ja 00408959

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00408925 6A10                    push 00000010
:00408927 8D4580                  lea eax, dword ptr [ebp-80]
:0040892A 50                      push eax
:0040892B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040892E 83E930                  sub ecx, 00000030
:00408931 C1E104                  shl ecx, 04
:00408934 81C130634700            add ecx, 00476330
:0040893A 51                      push ecx
:0040893B E8EF9E0500              call 0046282F
:00408940 83C40C                  add esp, 0000000C
:00408943 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:0040894D C785FCFEFFFF01000000    mov dword ptr [ebp+FFFFFEFC], 00000001
:00408957 EB5C                    jmp 004089B5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040891D(C), :00408923(C)
|
:00408959 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:0040895F 33C0                    xor eax, eax
:00408961 8A02                    mov al, byte ptr [edx]
:00408963 83E020                  and eax, 00000020
:00408966 85C0                    test eax, eax
:00408968 740C                    je 00408976

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040896A C785FCFEFFFF02000000    mov dword ptr [ebp+FFFFFEFC], 00000002
:00408974 EB3F                    jmp 004089B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408968(C)
|
:00408976 817D1000020000          cmp dword ptr [ebp+10], 00000200
:0040897D 731C                    jnb 0040899B
:0040897F C785FCFEFFFF01000000    mov dword ptr [ebp+FFFFFEFC], 00000001
:00408989 8D4D80                  lea ecx, dword ptr [ebp-80]
:0040898C 51                      push ecx
:0040898D 8B5510                  mov edx, dword ptr [ebp+10]
:00408990 52                      push edx
:00408991 E802390600              call 0046C298
:00408996 83C408                  add esp, 00000008
:00408999 EB1A                    jmp 004089B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040897D(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040899B C785FCFEFFFF02000000    mov dword ptr [ebp+FFFFFEFC], 00000002
:004089A5 8D4580                  lea eax, dword ptr [ebp-80]
:004089A8 50                      push eax
:004089A9 8B4D10                  mov ecx, dword ptr [ebp+10]
:004089AC 51                      push ecx
:004089AD E832380600              call 0046C1E4
:004089B2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408957(U), :00408974(U), :00408999(U)
|
:004089B5 83BDF4FEFFFF01          cmp dword ptr [ebp+FFFFFEF4], 00000001
:004089BC 7513                    jne 004089D1
:004089BE 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:004089C4 52                      push edx
:004089C5 8D4580                  lea eax, dword ptr [ebp-80]
:004089C8 50                      push eax
:004089C9 E84B010000              call 00408B19
:004089CE 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004089BC(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004089D1 C785F8FEFFFF10000000    mov dword ptr [ebp+FFFFFEF8], 00000010
:004089DB 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:004089E1 83793400                cmp dword ptr [ecx+34], 00000000
:004089E5 745B                    je 00408A42
:004089E7 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:004089ED 52                      push edx
:004089EE 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:004089F4 50                      push eax
:004089F5 8D4D80                  lea ecx, dword ptr [ebp-80]
:004089F8 51                      push ecx
:004089F9 E82CFCFFFF              call 0040862A
:004089FE 83C40C                  add esp, 0000000C
:00408A01 6A00                    push 00000000
:00408A03 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00408A09 8B4220                  mov eax, dword ptr [edx+20]
:00408A0C 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408A0D 6A04                    push 00000004
:00408A0F E844240600              call 0046AE58
:00408A14 83C40C                  add esp, 0000000C
:00408A17 8D8D00FFFFFF            lea ecx, dword ptr [ebp+FFFFFF00]
:00408A1D 51                      push ecx
:00408A1E 8B95F8FEFFFF            mov edx, dword ptr [ebp+FFFFFEF8]
:00408A24 52                      push edx
:00408A25 8B85FCFEFFFF            mov eax, dword ptr [ebp+FFFFFEFC]
:00408A2B C1E003                  shl eax, 03
:00408A2E 50                      push eax
:00408A2F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00408A32 51                      push ecx
:00408A33 8B5508                  mov edx, dword ptr [ebp+08]
:00408A36 C1E203                  shl edx, 03
:00408A39 52                      push edx
:00408A3A E88F340600              call 0046BECE
:00408A3F 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004089E5(C)
|
:00408A42 8B85F0FEFFFF            mov eax, dword ptr [ebp+FFFFFEF0]
:00408A48 33C9                    xor ecx, ecx
:00408A4A 8A4802                  mov cl, byte ptr [eax+02]
:00408A4D 85C9                    test ecx, ecx
:00408A4F 754B                    jne 00408A9C
:00408A51 6A00                    push 00000000
:00408A53 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00408A59 33C0                    xor eax, eax
:00408A5B 8A4201                  mov al, byte ptr [edx+01]
:00408A5E 50                      push eax
:00408A5F 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00408A65 33D2                    xor edx, edx
:00408A67 8A11                    mov dl, byte ptr [ecx]
:00408A69 52                      push edx
:00408A6A E8E9230600              call 0046AE58
:00408A6F 83C40C                  add esp, 0000000C
:00408A72 8D4580                  lea eax, dword ptr [ebp-80]
:00408A75 50                      push eax
:00408A76 8B8DF8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF8]
:00408A7C 51                      push ecx
:00408A7D 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:00408A83 C1E203                  shl edx, 03
:00408A86 52                      push edx
:00408A87 8B450C                  mov eax, dword ptr [ebp+0C]
:00408A8A 50                      push eax
:00408A8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408A8E C1E103                  shl ecx, 03
:00408A91 51                      push ecx
:00408A92 E837340600              call 0046BECE
:00408A97 83C414                  add esp, 00000014
:00408A9A EB4A                    jmp 00408AE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A4F(C)
|
:00408A9C 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00408AA2 33C0                    xor eax, eax
:00408AA4 8A4202                  mov al, byte ptr [edx+02]
:00408AA7 50                      push eax
:00408AA8 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00408AAE 33D2                    xor edx, edx
:00408AB0 8A5101                  mov dl, byte ptr [ecx+01]
:00408AB3 52                      push edx
:00408AB4 6A00                    push 00000000
:00408AB6 E89D230600              call 0046AE58
:00408ABB 83C40C                  add esp, 0000000C
:00408ABE 8D4580                  lea eax, dword ptr [ebp-80]
:00408AC1 50                      push eax
:00408AC2 8B8DF8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF8]
:00408AC8 51                      push ecx
:00408AC9 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:00408ACF C1E203                  shl edx, 03
:00408AD2 52                      push edx
:00408AD3 8B450C                  mov eax, dword ptr [ebp+0C]
:00408AD6 50                      push eax
:00408AD7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408ADA C1E103                  shl ecx, 03
:00408ADD 51                      push ecx
:00408ADE E8EB330600              call 0046BECE
:00408AE3 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A9A(U)
|
:00408AE6 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00408AEC 33C0                    xor eax, eax
:00408AEE 8A4202                  mov al, byte ptr [edx+02]
:00408AF1 50                      push eax
:00408AF2 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00408AF8 33D2                    xor edx, edx
:00408AFA 8A5101                  mov dl, byte ptr [ecx+01]
:00408AFD 52                      push edx
:00408AFE 8B85F0FEFFFF            mov eax, dword ptr [ebp+FFFFFEF0]
:00408B04 33C9                    xor ecx, ecx
:00408B06 8A08                    mov cl, byte ptr [eax]
:00408B08 51                      push ecx
:00408B09 E84A230600              call 0046AE58
:00408B0E 83C40C                  add esp, 0000000C
:00408B11 33C0                    xor eax, eax
:00408B13 8BE5                    mov esp, ebp
:00408B15 5D                      pop ebp
:00408B16 C21000                  ret 0010



* Referenced by a CALL at Address:
|:004089C9   
|
:00408B19 55                      push ebp
:00408B1A 8BEC                    mov ebp, esp
:00408B1C 83EC08                  sub esp, 00000008
:00408B1F 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00408B23 7502                    jne 00408B27
:00408B25 EB7C                    jmp 00408BA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B23(C)
|
:00408B27 8B4508                  mov eax, dword ptr [ebp+08]
:00408B2A 8945FC                  mov dword ptr [ebp-04], eax
:00408B2D C745F800000000          mov [ebp-08], 00000000
:00408B34 EB12                    jmp 00408B48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BA1(U)
|
:00408B36 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408B39 83C101                  add ecx, 00000001
:00408B3C 894DF8                  mov dword ptr [ebp-08], ecx
:00408B3F 8B55FC                  mov edx, dword ptr [ebp-04]
:00408B42 83C201                  add edx, 00000001
:00408B45 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B34(U)
|
:00408B48 8B450C                  mov eax, dword ptr [ebp+0C]
:00408B4B C1E004                  shl eax, 04
:00408B4E 3945F8                  cmp dword ptr [ebp-08], eax
:00408B51 7D50                    jge 00408BA3
:00408B53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408B56 33D2                    xor edx, edx
:00408B58 8A11                    mov dl, byte ptr [ecx]
:00408B5A D1E2                    shl edx, 1
:00408B5C 8B45FC                  mov eax, dword ptr [ebp-04]
:00408B5F 8A08                    mov cl, byte ptr [eax]
:00408B61 0ACA                    or cl, dl
:00408B63 8B55FC                  mov edx, dword ptr [ebp-04]
:00408B66 880A                    mov byte ptr [edx], cl
:00408B68 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00408B6C 7433                    je 00408BA1
:00408B6E 8B45F8                  mov eax, dword ptr [ebp-08]
:00408B71 99                      cdq
:00408B72 33C2                    xor eax, edx
:00408B74 2BC2                    sub eax, edx
:00408B76 83E001                  and eax, 00000001
:00408B79 33C2                    xor eax, edx
:00408B7B 2BC2                    sub eax, edx
:00408B7D 85C0                    test eax, eax
:00408B7F 7520                    jne 00408BA1
:00408B81 8B45FC                  mov eax, dword ptr [ebp-04]
:00408B84 33C9                    xor ecx, ecx
:00408B86 8A4801                  mov cl, byte ptr [eax+01]
:00408B89 81E180000000            and ecx, 00000080
:00408B8F F7D9                    neg ecx
:00408B91 1BC9                    sbb ecx, ecx
:00408B93 F7D9                    neg ecx
:00408B95 8B55FC                  mov edx, dword ptr [ebp-04]
:00408B98 8A02                    mov al, byte ptr [edx]
:00408B9A 0AC1                    or al, cl
:00408B9C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408B9F 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408B6C(C), :00408B7F(C)
|
:00408BA1 EB93                    jmp 00408B36

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408B25(U), :00408B51(C)
|
:00408BA3 8BE5                    mov esp, ebp
:00408BA5 5D                      pop ebp
:00408BA6 C3                      ret



* Referenced by a CALL at Addresses:
|:00408C02   , :00408C67   
|
:00408BA7 55                      push ebp
:00408BA8 8BEC                    mov ebp, esp
:00408BAA 83EC08                  sub esp, 00000008
:00408BAD C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BE9(U)
|
:00408BB4 8B450C                  mov eax, dword ptr [ebp+0C]
:00408BB7 33C9                    xor ecx, ecx
:00408BB9 8A08                    mov cl, byte ptr [eax]
:00408BBB 85C9                    test ecx, ecx
:00408BBD 742C                    je 00408BEB
:00408BBF 6A00                    push 00000000
:00408BC1 8B550C                  mov edx, dword ptr [ebp+0C]
:00408BC4 8A02                    mov al, byte ptr [edx]
:00408BC6 8845FB                  mov byte ptr [ebp-05], al
:00408BC9 8A4DFB                  mov cl, byte ptr [ebp-05]
:00408BCC 51                      push ecx
:00408BCD 8B550C                  mov edx, dword ptr [ebp+0C]
:00408BD0 83C201                  add edx, 00000001
:00408BD3 89550C                  mov dword ptr [ebp+0C], edx
:00408BD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408BD9 E8A0F5FFFF              call 0040817E
:00408BDE 8945FC                  mov dword ptr [ebp-04], eax
:00408BE1 837DFC00                cmp dword ptr [ebp-04], 00000000
:00408BE5 7402                    je 00408BE9
:00408BE7 EB02                    jmp 00408BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BE5(C)
|
:00408BE9 EBC9                    jmp 00408BB4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408BBD(C), :00408BE7(U)
|
:00408BEB 8B45FC                  mov eax, dword ptr [ebp-04]
:00408BEE 8BE5                    mov esp, ebp
:00408BF0 5D                      pop ebp
:00408BF1 C3                      ret



* Referenced by a CALL at Addresses:
|:00428B36   , :004292AE   , :00457F3E   
|
:00408BF2 55                      push ebp
:00408BF3 8BEC                    mov ebp, esp
:00408BF5 E838A20000              call 00412E32
:00408BFA 8B450C                  mov eax, dword ptr [ebp+0C]
:00408BFD 50                      push eax
:00408BFE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C01 51                      push ecx
:00408C02 E8A0FFFFFF              call 00408BA7
:00408C07 83C408                  add esp, 00000008
:00408C0A E83EA20000              call 00412E4D
:00408C0F 5D                      pop ebp
:00408C10 C3                      ret


:00408C11 55                      push ebp
:00408C12 8BEC                    mov ebp, esp
:00408C14 83EC0C                  sub esp, 0000000C
:00408C17 8B4510                  mov eax, dword ptr [ebp+10]
:00408C1A 50                      push eax
:00408C1B E883990500              call 004625A3
:00408C20 83C404                  add esp, 00000004
:00408C23 8945F8                  mov dword ptr [ebp-08], eax
:00408C26 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00408C29 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:00408C2C 760D                    jbe 00408C3B
:00408C2E 8B550C                  mov edx, dword ptr [ebp+0C]
:00408C31 2B55F8                  sub edx, dword ptr [ebp-08]
:00408C34 D1EA                    shr edx, 1
:00408C36 8955F4                  mov dword ptr [ebp-0C], edx
:00408C39 EB07                    jmp 00408C42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C2C(C)
|
:00408C3B C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C39(U)
|
:00408C42 8B45F4                  mov eax, dword ptr [ebp-0C]
:00408C45 8945FC                  mov dword ptr [ebp-04], eax
:00408C48 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C4B 8B5104                  mov edx, dword ptr [ecx+04]
:00408C4E 0355FC                  add edx, dword ptr [ebp-04]
:00408C51 52                      push edx
:00408C52 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C55 E8CEF2FFFF              call 00407F28
:00408C5A E8D3A10000              call 00412E32
:00408C5F 8B4510                  mov eax, dword ptr [ebp+10]
:00408C62 50                      push eax
:00408C63 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C66 51                      push ecx
:00408C67 E83BFFFFFF              call 00408BA7
:00408C6C 83C408                  add esp, 00000008
:00408C6F E8D9A10000              call 00412E4D
:00408C74 8BE5                    mov esp, ebp
:00408C76 5D                      pop ebp
:00408C77 C3                      ret



* Referenced by a CALL at Addresses:
|:00413074   , :00413274   , :00426076   , :004271CA   , :0042774F   
|:00427767   , :00427FFB   , :00428579   , :00428FB5   , :0042D00E   
|:0042D02E   , :0042D08E   , :0042D0CD   , :0042D129   , :0042D162   
|:0042D6E3   , :004420B5   , :00442345   , :004423A1   , :00442AC7   
|:00442B00   , :00442B47   , :004462EF   , :00446338   , :00446376   
|:0044639A   , :0045FFD6   , :00461370   
|
:00408C78 55                      push ebp
:00408C79 8BEC                    mov ebp, esp
:00408C7B E8B2A10000              call 00412E32
:00408C80 8D450C                  lea eax, dword ptr [ebp+0C]
:00408C83 50                      push eax
:00408C84 E8C2ECFFFF              call 0040794B
:00408C89 83C404                  add esp, 00000004
:00408C8C E8BCA10000              call 00412E4D
:00408C91 5D                      pop ebp
:00408C92 C3                      ret


:00408C93 CC                      int 03
:00408C94 CC                      int 03
:00408C95 CC                      int 03
:00408C96 CC                      int 03
:00408C97 CC                      int 03
:00408C98 CC                      int 03
:00408C99 CC                      int 03
:00408C9A CC                      int 03
:00408C9B CC                      int 03
:00408C9C CC                      int 03
:00408C9D CC                      int 03
:00408C9E CC                      int 03
:00408C9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00407A27   , :00408295   , :00408316   , :0040836B   
|
:00408CA0 55                      push ebp
:00408CA1 8BEC                    mov ebp, esp
:00408CA3 51                      push ecx
:00408CA4 8B4508                  mov eax, dword ptr [ebp+08]
:00408CA7 25FF000000              and eax, 000000FF
:00408CAC 83F830                  cmp eax, 00000030
:00408CAF 7C17                    jl 00408CC8
:00408CB1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408CB4 81E1FF000000            and ecx, 000000FF
:00408CBA 83F939                  cmp ecx, 00000039
:00408CBD 7F09                    jg 00408CC8
:00408CBF C745FC01000000          mov [ebp-04], 00000001
:00408CC6 EB07                    jmp 00408CCF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408CAF(C), :00408CBD(C)
|
:00408CC8 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408CC6(U)
|
:00408CCF 8B45FC                  mov eax, dword ptr [ebp-04]
:00408CD2 8BE5                    mov esp, ebp
:00408CD4 5D                      pop ebp
:00408CD5 C3                      ret


:00408CD6 CC                      int 03
:00408CD7 CC                      int 03
:00408CD8 CC                      int 03
:00408CD9 CC                      int 03
:00408CDA CC                      int 03
:00408CDB CC                      int 03
:00408CDC CC                      int 03
:00408CDD CC                      int 03
:00408CDE CC                      int 03
:00408CDF CC                      int 03

* Referenced by a CALL at Addresses:
|:00407AC1   , :004082B5   , :00408337   , :0040838B   
|
:00408CE0 55                      push ebp
:00408CE1 8BEC                    mov ebp, esp
:00408CE3 51                      push ecx
:00408CE4 8B4508                  mov eax, dword ptr [ebp+08]
:00408CE7 25FF000000              and eax, 000000FF
:00408CEC 83F861                  cmp eax, 00000061
:00408CEF 7C1F                    jl 00408D10
:00408CF1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408CF4 81E1FF000000            and ecx, 000000FF
:00408CFA 83F97A                  cmp ecx, 0000007A
:00408CFD 7F11                    jg 00408D10
:00408CFF 8B5508                  mov edx, dword ptr [ebp+08]
:00408D02 81E2FF000000            and edx, 000000FF
:00408D08 83EA20                  sub edx, 00000020
:00408D0B 8955FC                  mov dword ptr [ebp-04], edx
:00408D0E EB0B                    jmp 00408D1B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408CEF(C), :00408CFD(C)
|
:00408D10 8B4508                  mov eax, dword ptr [ebp+08]
:00408D13 25FF000000              and eax, 000000FF
:00408D18 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408D0E(U)
|
:00408D1B 8A45FC                  mov al, byte ptr [ebp-04]
:00408D1E 8BE5                    mov esp, ebp
:00408D20 5D                      pop ebp
:00408D21 C3                      ret


:00408D22 CC                      int 03
:00408D23 CC                      int 03
:00408D24 CC                      int 03
:00408D25 CC                      int 03
:00408D26 CC                      int 03
:00408D27 CC                      int 03
:00408D28 CC                      int 03
:00408D29 CC                      int 03
:00408D2A CC                      int 03
:00408D2B CC                      int 03
:00408D2C CC                      int 03
:00408D2D CC                      int 03
:00408D2E CC                      int 03
:00408D2F CC                      int 03
:00408D30 55                      push ebp
:00408D31 8BEC                    mov ebp, esp
:00408D33 E807000000              call 00408D3F
:00408D38 E811000000              call 00408D4E
:00408D3D 5D                      pop ebp
:00408D3E C3                      ret



* Referenced by a CALL at Address:
|:00408D33   
|
:00408D3F 55                      push ebp
:00408D40 8BEC                    mov ebp, esp
:00408D42 B9F8134800              mov ecx, 004813F8
:00408D47 E8F4610000              call 0040EF40
:00408D4C 5D                      pop ebp
:00408D4D C3                      ret



* Referenced by a CALL at Address:
|:00408D38   
|
:00408D4E 55                      push ebp
:00408D4F 8BEC                    mov ebp, esp
:00408D51 68608D4000              push 00408D60
:00408D56 E815470600              call 0046D470
:00408D5B 83C404                  add esp, 00000004
:00408D5E 5D                      pop ebp
:00408D5F C3                      ret


:00408D60 55                      push ebp
:00408D61 8BEC                    mov ebp, esp
:00408D63 B9F8134800              mov ecx, 004813F8
:00408D68 E8B3610000              call 0040EF20
:00408D6D 5D                      pop ebp
:00408D6E C3                      ret


:00408D6F 55                      push ebp
:00408D70 8BEC                    mov ebp, esp
:00408D72 83EC0C                  sub esp, 0000000C
:00408D75 894DF8                  mov dword ptr [ebp-08], ecx
:00408D78 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408D7B E842680000              call 0040F5C2
:00408D80 668945FC                mov word ptr [ebp-04], ax
:00408D84 8B45FC                  mov eax, dword ptr [ebp-04]
:00408D87 25FFFF0000              and eax, 0000FFFF
:00408D8C 8945F4                  mov dword ptr [ebp-0C], eax
:00408D8F 837DF457                cmp dword ptr [ebp-0C], 00000057
:00408D93 0F8786050000            ja 0040931F
:00408D99 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00408D9C FF248D28934000          jmp dword ptr [4*ecx+00409328]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00408DA3 B803000000              mov eax, 00000003
:00408DA8 E977050000              jmp 00409324

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408DAD B804000000              mov eax, 00000004
:00408DB2 E96D050000              jmp 00409324
:00408DB7 8B55F8                  mov edx, dword ptr [ebp-08]
:00408DBA 52                      push edx
:00408DBB E8C8060000              call 00409488
:00408DC0 83C404                  add esp, 00000004
:00408DC3 E95C050000              jmp 00409324
:00408DC8 8B45F8                  mov eax, dword ptr [ebp-08]
:00408DCB 50                      push eax
:00408DCC E8C1060000              call 00409492
:00408DD1 83C404                  add esp, 00000004
:00408DD4 E94B050000              jmp 00409324
:00408DD9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408DDC 51                      push ecx
:00408DDD E892080000              call 00409674
:00408DE2 83C404                  add esp, 00000004
:00408DE5 E93A050000              jmp 00409324
:00408DEA 8B55F8                  mov edx, dword ptr [ebp-08]
:00408DED 52                      push edx
:00408DEE E88B090000              call 0040977E
:00408DF3 83C404                  add esp, 00000004
:00408DF6 E929050000              jmp 00409324
:00408DFB 8B45F8                  mov eax, dword ptr [ebp-08]
:00408DFE 50                      push eax
:00408DFF E8160A0000              call 0040981A
:00408E04 83C404                  add esp, 00000004
:00408E07 E918050000              jmp 00409324
:00408E0C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408E0F 51                      push ecx
:00408E10 E85D0A0000              call 00409872
:00408E15 83C404                  add esp, 00000004
:00408E18 E907050000              jmp 00409324
:00408E1D 8B55F8                  mov edx, dword ptr [ebp-08]
:00408E20 52                      push edx
:00408E21 E8A50A0000              call 004098CB
:00408E26 83C404                  add esp, 00000004
:00408E29 E9F6040000              jmp 00409324
:00408E2E 8B45F8                  mov eax, dword ptr [ebp-08]
:00408E31 50                      push eax
:00408E32 E8C70B0000              call 004099FE
:00408E37 83C404                  add esp, 00000004
:00408E3A E9E5040000              jmp 00409324
:00408E3F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408E42 51                      push ecx
:00408E43 E8B20C0000              call 00409AFA
:00408E48 83C404                  add esp, 00000004
:00408E4B E9D4040000              jmp 00409324
:00408E50 8B55F8                  mov edx, dword ptr [ebp-08]
:00408E53 52                      push edx
:00408E54 E8620D0000              call 00409BBB
:00408E59 83C404                  add esp, 00000004
:00408E5C E9C3040000              jmp 00409324
:00408E61 8B45F8                  mov eax, dword ptr [ebp-08]
:00408E64 50                      push eax
:00408E65 E8BE0D0000              call 00409C28
:00408E6A 83C404                  add esp, 00000004
:00408E6D E9B2040000              jmp 00409324
:00408E72 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408E75 51                      push ecx
:00408E76 E86D100000              call 00409EE8
:00408E7B 83C404                  add esp, 00000004
:00408E7E E9A1040000              jmp 00409324
:00408E83 8B55F8                  mov edx, dword ptr [ebp-08]
:00408E86 52                      push edx
:00408E87 E8B9100000              call 00409F45
:00408E8C 83C404                  add esp, 00000004
:00408E8F E990040000              jmp 00409324
:00408E94 8B45F8                  mov eax, dword ptr [ebp-08]
:00408E97 50                      push eax
:00408E98 E86A130000              call 0040A207
:00408E9D 83C404                  add esp, 00000004
:00408EA0 E97F040000              jmp 00409324
:00408EA5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408EA8 51                      push ecx
:00408EA9 E87A130000              call 0040A228
:00408EAE 83C404                  add esp, 00000004
:00408EB1 E96E040000              jmp 00409324
:00408EB6 8B55F8                  mov edx, dword ptr [ebp-08]
:00408EB9 52                      push edx
:00408EBA E88A130000              call 0040A249
:00408EBF 83C404                  add esp, 00000004
:00408EC2 E95D040000              jmp 00409324
:00408EC7 8B45F8                  mov eax, dword ptr [ebp-08]
:00408ECA 50                      push eax
:00408ECB E8AC160000              call 0040A57C
:00408ED0 83C404                  add esp, 00000004
:00408ED3 E94C040000              jmp 00409324
:00408ED8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408EDB 51                      push ecx
:00408EDC E8D2170000              call 0040A6B3
:00408EE1 83C404                  add esp, 00000004
:00408EE4 E93B040000              jmp 00409324
:00408EE9 8B55F8                  mov edx, dword ptr [ebp-08]
:00408EEC 52                      push edx
:00408EED E8F8170000              call 0040A6EA
:00408EF2 83C404                  add esp, 00000004
:00408EF5 E92A040000              jmp 00409324
:00408EFA 8B45F8                  mov eax, dword ptr [ebp-08]
:00408EFD 50                      push eax
:00408EFE E8F1170000              call 0040A6F4
:00408F03 83C404                  add esp, 00000004
:00408F06 E919040000              jmp 00409324
:00408F0B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408F0E 51                      push ecx
:00408F0F E8311B0000              call 0040AA45
:00408F14 83C404                  add esp, 00000004
:00408F17 E908040000              jmp 00409324
:00408F1C 8B55F8                  mov edx, dword ptr [ebp-08]
:00408F1F 52                      push edx
:00408F20 E84B1D0000              call 0040AC70
:00408F25 83C404                  add esp, 00000004
:00408F28 E9F7030000              jmp 00409324
:00408F2D 8B45F8                  mov eax, dword ptr [ebp-08]
:00408F30 50                      push eax
:00408F31 E8641D0000              call 0040AC9A
:00408F36 83C404                  add esp, 00000004
:00408F39 E9E6030000              jmp 00409324
:00408F3E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408F41 51                      push ecx
:00408F42 E8961D0000              call 0040ACDD
:00408F47 83C404                  add esp, 00000004
:00408F4A E9D5030000              jmp 00409324
:00408F4F 8B55F8                  mov edx, dword ptr [ebp-08]
:00408F52 52                      push edx
:00408F53 E8301E0000              call 0040AD88
:00408F58 83C404                  add esp, 00000004
:00408F5B E9C4030000              jmp 00409324
:00408F60 8B45F8                  mov eax, dword ptr [ebp-08]
:00408F63 50                      push eax
:00408F64 E84D240000              call 0040B3B6
:00408F69 83C404                  add esp, 00000004
:00408F6C E9B3030000              jmp 00409324
:00408F71 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408F74 51                      push ecx
:00408F75 E8FF2C0000              call 0040BC79
:00408F7A 83C404                  add esp, 00000004
:00408F7D E9A2030000              jmp 00409324
:00408F82 8B55F8                  mov edx, dword ptr [ebp-08]
:00408F85 52                      push edx
:00408F86 E85B2D0000              call 0040BCE6
:00408F8B 83C404                  add esp, 00000004
:00408F8E E991030000              jmp 00409324
:00408F93 8B45F8                  mov eax, dword ptr [ebp-08]
:00408F96 50                      push eax
:00408F97 E8562E0000              call 0040BDF2
:00408F9C 83C404                  add esp, 00000004
:00408F9F E980030000              jmp 00409324
:00408FA4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408FA7 51                      push ecx
:00408FA8 E8912F0000              call 0040BF3E
:00408FAD 83C404                  add esp, 00000004
:00408FB0 E96F030000              jmp 00409324
:00408FB5 8B55F8                  mov edx, dword ptr [ebp-08]
:00408FB8 52                      push edx
:00408FB9 E8DE300000              call 0040C09C
:00408FBE 83C404                  add esp, 00000004
:00408FC1 E95E030000              jmp 00409324
:00408FC6 8B45F8                  mov eax, dword ptr [ebp-08]
:00408FC9 50                      push eax
:00408FCA E86B310000              call 0040C13A
:00408FCF 83C404                  add esp, 00000004
:00408FD2 E94D030000              jmp 00409324
:00408FD7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408FDA 51                      push ecx
:00408FDB E8D1310000              call 0040C1B1
:00408FE0 83C404                  add esp, 00000004
:00408FE3 E93C030000              jmp 00409324
:00408FE8 8B55F8                  mov edx, dword ptr [ebp-08]
:00408FEB 52                      push edx
:00408FEC E834320000              call 0040C225
:00408FF1 83C404                  add esp, 00000004
:00408FF4 E92B030000              jmp 00409324
:00408FF9 8B45F8                  mov eax, dword ptr [ebp-08]
:00408FFC 50                      push eax
:00408FFD E8AC330000              call 0040C3AE
:00409002 83C404                  add esp, 00000004
:00409005 E91A030000              jmp 00409324
:0040900A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040900D 51                      push ecx
:0040900E E8AA330000              call 0040C3BD
:00409013 83C404                  add esp, 00000004
:00409016 E909030000              jmp 00409324
:0040901B 8B55F8                  mov edx, dword ptr [ebp-08]
:0040901E 52                      push edx
:0040901F E833360000              call 0040C657
:00409024 83C404                  add esp, 00000004
:00409027 E9F8020000              jmp 00409324
:0040902C 8B45F8                  mov eax, dword ptr [ebp-08]
:0040902F 50                      push eax
:00409030 E87E360000              call 0040C6B3
:00409035 83C404                  add esp, 00000004
:00409038 E9E7020000              jmp 00409324
:0040903D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409040 51                      push ecx
:00409041 E8C0360000              call 0040C706
:00409046 83C404                  add esp, 00000004
:00409049 E9D6020000              jmp 00409324
:0040904E 8B55F8                  mov edx, dword ptr [ebp-08]
:00409051 52                      push edx
:00409052 E8E5360000              call 0040C73C
:00409057 83C404                  add esp, 00000004
:0040905A E9C5020000              jmp 00409324
:0040905F 8B45F8                  mov eax, dword ptr [ebp-08]
:00409062 50                      push eax
:00409063 E80A370000              call 0040C772
:00409068 83C404                  add esp, 00000004
:0040906B E9B4020000              jmp 00409324
:00409070 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409073 51                      push ecx
:00409074 E836370000              call 0040C7AF
:00409079 83C404                  add esp, 00000004
:0040907C E9A3020000              jmp 00409324
:00409081 8B55F8                  mov edx, dword ptr [ebp-08]
:00409084 52                      push edx
:00409085 E8C4380000              call 0040C94E
:0040908A 83C404                  add esp, 00000004
:0040908D E992020000              jmp 00409324
:00409092 8B45F8                  mov eax, dword ptr [ebp-08]
:00409095 50                      push eax
:00409096 E8B2390000              call 0040CA4D
:0040909B 83C404                  add esp, 00000004
:0040909E E981020000              jmp 00409324
:004090A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004090A6 51                      push ecx
:004090A7 E8C6390000              call 0040CA72
:004090AC 83C404                  add esp, 00000004
:004090AF E970020000              jmp 00409324
:004090B4 8B55F8                  mov edx, dword ptr [ebp-08]
:004090B7 52                      push edx
:004090B8 E8C4390000              call 0040CA81
:004090BD 83C404                  add esp, 00000004
:004090C0 E95F020000              jmp 00409324
:004090C5 8B45F8                  mov eax, dword ptr [ebp-08]
:004090C8 50                      push eax
:004090C9 E83F3A0000              call 0040CB0D
:004090CE 83C404                  add esp, 00000004
:004090D1 E94E020000              jmp 00409324
:004090D6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004090D9 51                      push ecx
:004090DA E8383A0000              call 0040CB17
:004090DF 83C404                  add esp, 00000004
:004090E2 E93D020000              jmp 00409324
:004090E7 8B55F8                  mov edx, dword ptr [ebp-08]
:004090EA 52                      push edx
:004090EB E88B3A0000              call 0040CB7B
:004090F0 83C404                  add esp, 00000004
:004090F3 E92C020000              jmp 00409324
:004090F8 8B45F8                  mov eax, dword ptr [ebp-08]
:004090FB 50                      push eax
:004090FC E8E63A0000              call 0040CBE7
:00409101 83C404                  add esp, 00000004
:00409104 E91B020000              jmp 00409324
:00409109 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040910C 51                      push ecx
:0040910D E8693C0000              call 0040CD7B
:00409112 83C404                  add esp, 00000004
:00409115 E90A020000              jmp 00409324
:0040911A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040911D 52                      push edx
:0040911E E89B3C0000              call 0040CDBE
:00409123 83C404                  add esp, 00000004
:00409126 E9F9010000              jmp 00409324
:0040912B 8B45F8                  mov eax, dword ptr [ebp-08]
:0040912E 50                      push eax
:0040912F E8CD3C0000              call 0040CE01
:00409134 83C404                  add esp, 00000004
:00409137 E9E8010000              jmp 00409324
:0040913C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040913F 51                      push ecx
:00409140 E8C63C0000              call 0040CE0B
:00409145 83C404                  add esp, 00000004
:00409148 E9D7010000              jmp 00409324
:0040914D 8B55F8                  mov edx, dword ptr [ebp-08]
:00409150 52                      push edx
:00409151 E8C93C0000              call 0040CE1F
:00409156 83C404                  add esp, 00000004
:00409159 E9C6010000              jmp 00409324
:0040915E 8B45F8                  mov eax, dword ptr [ebp-08]
:00409161 50                      push eax
:00409162 E8513E0000              call 0040CFB8
:00409167 83C404                  add esp, 00000004
:0040916A E9B5010000              jmp 00409324
:0040916F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409172 51                      push ecx
:00409173 E8A63F0000              call 0040D11E
:00409178 83C404                  add esp, 00000004
:0040917B E9A4010000              jmp 00409324
:00409180 8B55F8                  mov edx, dword ptr [ebp-08]
:00409183 52                      push edx
:00409184 E82C400000              call 0040D1B5
:00409189 83C404                  add esp, 00000004
:0040918C E993010000              jmp 00409324
:00409191 8B45F8                  mov eax, dword ptr [ebp-08]
:00409194 50                      push eax
:00409195 E8BC410000              call 0040D356
:0040919A 83C404                  add esp, 00000004
:0040919D E982010000              jmp 00409324
:004091A2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004091A5 51                      push ecx
:004091A6 E85C430000              call 0040D507
:004091AB 83C404                  add esp, 00000004
:004091AE E971010000              jmp 00409324
:004091B3 8B55F8                  mov edx, dword ptr [ebp-08]
:004091B6 52                      push edx
:004091B7 E8D6440000              call 0040D692
:004091BC 83C404                  add esp, 00000004
:004091BF E960010000              jmp 00409324
:004091C4 8B45F8                  mov eax, dword ptr [ebp-08]
:004091C7 50                      push eax
:004091C8 E804450000              call 0040D6D1
:004091CD 83C404                  add esp, 00000004
:004091D0 E94F010000              jmp 00409324
:004091D5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004091D8 51                      push ecx
:004091D9 E845450000              call 0040D723
:004091DE 83C404                  add esp, 00000004
:004091E1 E93E010000              jmp 00409324
:004091E6 8B55F8                  mov edx, dword ptr [ebp-08]
:004091E9 52                      push edx
:004091EA E888480000              call 0040DA77
:004091EF 83C404                  add esp, 00000004
:004091F2 E92D010000              jmp 00409324
:004091F7 8B45F8                  mov eax, dword ptr [ebp-08]
:004091FA 50                      push eax
:004091FB E881480000              call 0040DA81
:00409200 83C404                  add esp, 00000004
:00409203 E91C010000              jmp 00409324
:00409208 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040920B 51                      push ecx
:0040920C E81A4A0000              call 0040DC2B
:00409211 83C404                  add esp, 00000004
:00409214 E90B010000              jmp 00409324
:00409219 8B55F8                  mov edx, dword ptr [ebp-08]
:0040921C 52                      push edx
:0040921D E8284A0000              call 0040DC4A
:00409222 83C404                  add esp, 00000004
:00409225 E9FA000000              jmp 00409324
:0040922A 8B45F8                  mov eax, dword ptr [ebp-08]
:0040922D 50                      push eax
:0040922E E87F4A0000              call 0040DCB2
:00409233 83C404                  add esp, 00000004
:00409236 E9E9000000              jmp 00409324
:0040923B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040923E 51                      push ecx
:0040923F E8E24A0000              call 0040DD26
:00409244 83C404                  add esp, 00000004
:00409247 E9D8000000              jmp 00409324
:0040924C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040924F 52                      push edx
:00409250 E8F74A0000              call 0040DD4C
:00409255 83C404                  add esp, 00000004
:00409258 E9C7000000              jmp 00409324
:0040925D 8B45F8                  mov eax, dword ptr [ebp-08]
:00409260 50                      push eax
:00409261 E8294B0000              call 0040DD8F
:00409266 83C404                  add esp, 00000004
:00409269 E9B6000000              jmp 00409324
:0040926E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409271 51                      push ecx
:00409272 E8754B0000              call 0040DDEC
:00409277 83C404                  add esp, 00000004
:0040927A E9A5000000              jmp 00409324
:0040927F 8B55F8                  mov edx, dword ptr [ebp-08]
:00409282 52                      push edx
:00409283 E8B64B0000              call 0040DE3E
:00409288 83C404                  add esp, 00000004
:0040928B E994000000              jmp 00409324
:00409290 8B45F8                  mov eax, dword ptr [ebp-08]
:00409293 50                      push eax
:00409294 E8DD4B0000              call 0040DE76
:00409299 83C404                  add esp, 00000004
:0040929C E983000000              jmp 00409324
:004092A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004092A4 51                      push ecx
:004092A5 E8024C0000              call 0040DEAC
:004092AA 83C404                  add esp, 00000004
:004092AD EB75                    jmp 00409324
:004092AF 8B55F8                  mov edx, dword ptr [ebp-08]
:004092B2 52                      push edx
:004092B3 E84C4C0000              call 0040DF04
:004092B8 83C404                  add esp, 00000004
:004092BB EB67                    jmp 00409324
:004092BD 8B45F8                  mov eax, dword ptr [ebp-08]
:004092C0 50                      push eax
:004092C1 E8944C0000              call 0040DF5A
:004092C6 83C404                  add esp, 00000004
:004092C9 EB59                    jmp 00409324
:004092CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004092CE 51                      push ecx
:004092CF E8374D0000              call 0040E00B
:004092D4 83C404                  add esp, 00000004
:004092D7 EB4B                    jmp 00409324
:004092D9 8B55F8                  mov edx, dword ptr [ebp-08]
:004092DC 52                      push edx
:004092DD E8DA4D0000              call 0040E0BC
:004092E2 83C404                  add esp, 00000004
:004092E5 EB3D                    jmp 00409324
:004092E7 8B45F8                  mov eax, dword ptr [ebp-08]
:004092EA 50                      push eax
:004092EB E87D4E0000              call 0040E16D
:004092F0 83C404                  add esp, 00000004
:004092F3 EB2F                    jmp 00409324
:004092F5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004092F8 51                      push ecx
:004092F9 E8B94E0000              call 0040E1B7
:004092FE 83C404                  add esp, 00000004
:00409301 EB21                    jmp 00409324
:00409303 8B55F8                  mov edx, dword ptr [ebp-08]
:00409306 52                      push edx
:00409307 E8E34E0000              call 0040E1EF
:0040930C 83C404                  add esp, 00000004
:0040930F EB13                    jmp 00409324
:00409311 8B45F8                  mov eax, dword ptr [ebp-08]
:00409314 50                      push eax
:00409315 E8334F0000              call 0040E24D
:0040931A 83C404                  add esp, 00000004
:0040931D EB05                    jmp 00409324

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408D93(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040931F B805000000              mov eax, 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408DA8(U), :00408DB2(U), :00408DC3(U), :00408DD4(U), :00408DE5(U)
|:00408DF6(U), :00408E07(U), :00408E18(U), :00408E29(U), :00408E3A(U)
|:00408E4B(U), :00408E5C(U), :00408E6D(U), :00408E7E(U), :00408E8F(U)
|:00408EA0(U), :00408EB1(U), :00408EC2(U), :00408ED3(U), :00408EE4(U)
|:00408EF5(U), :00408F06(U), :00408F17(U), :00408F28(U), :00408F39(U)
|:00408F4A(U), :00408F5B(U), :00408F6C(U), :00408F7D(U), :00408F8E(U)
|:00408F9F(U), :00408FB0(U), :00408FC1(U), :00408FD2(U), :00408FE3(U)
|:00408FF4(U), :00409005(U), :00409016(U), :00409027(U), :00409038(U)
|:00409049(U), :0040905A(U), :0040906B(U), :0040907C(U), :0040908D(U)
|:0040909E(U), :004090AF(U), :004090C0(U), :004090D1(U), :004090E2(U)
|:004090F3(U), :00409104(U), :00409115(U), :00409126(U), :00409137(U)
|:00409148(U), :00409159(U), :0040916A(U), :0040917B(U), :0040918C(U)
|:0040919D(U), :004091AE(U), :004091BF(U), :004091D0(U), :004091E1(U)
|:004091F2(U), :00409203(U), :00409214(U), :00409225(U), :00409236(U)
|:00409247(U), :00409258(U), :00409269(U), :0040927A(U), :0040928B(U)
|:0040929C(U), :004092AD(U), :004092BB(U), :004092C9(U), :004092D7(U)
|:004092E5(U), :004092F3(U), :00409301(U), :0040930F(U), :0040931D(U)
|
:00409324 8BE5                    mov esp, ebp
:00409326 5D                      pop ebp
:00409327 C3                      ret



:00409328 A38D4000                DWORD 00408DA3
:0040932C AD8D4000                DWORD 00408DAD
:00409330 B78D4000                DWORD 00408DB7
:00409334 C88D4000                DWORD 00408DC8
:00409338 D98D4000                DWORD 00408DD9
:0040933C EA8D4000                DWORD 00408DEA
:00409340 FB8D4000                DWORD 00408DFB
:00409344 0C8E4000                DWORD 00408E0C
:00409348 1D8E4000                DWORD 00408E1D
:0040934C 2E8E4000                DWORD 00408E2E
:00409350 3F8E4000                DWORD 00408E3F
:00409354 508E4000                DWORD 00408E50
:00409358 618E4000                DWORD 00408E61
:0040935C 728E4000                DWORD 00408E72
:00409360 838E4000                DWORD 00408E83
:00409364 948E4000                DWORD 00408E94
:00409368 A58E4000                DWORD 00408EA5
:0040936C B68E4000                DWORD 00408EB6
:00409370 C78E4000                DWORD 00408EC7
:00409374 D88E4000                DWORD 00408ED8
:00409378 E98E4000                DWORD 00408EE9
:0040937C FA8E4000                DWORD 00408EFA
:00409380 0B8F4000                DWORD 00408F0B
:00409384 1C8F4000                DWORD 00408F1C
:00409388 2D8F4000                DWORD 00408F2D
:0040938C 3E8F4000                DWORD 00408F3E
:00409390 1F934000                DWORD 0040931F
:00409394 1F934000                DWORD 0040931F
:00409398 4F8F4000                DWORD 00408F4F
:0040939C 608F4000                DWORD 00408F60
:004093A0 718F4000                DWORD 00408F71
:004093A4 828F4000                DWORD 00408F82
:004093A8 938F4000                DWORD 00408F93
:004093AC A48F4000                DWORD 00408FA4
:004093B0 B58F4000                DWORD 00408FB5
:004093B4 C68F4000                DWORD 00408FC6
:004093B8 D78F4000                DWORD 00408FD7
:004093BC E88F4000                DWORD 00408FE8
:004093C0 F98F4000                DWORD 00408FF9
:004093C4 0A904000                DWORD 0040900A
:004093C8 1B904000                DWORD 0040901B
:004093CC 2C904000                DWORD 0040902C
:004093D0 3D904000                DWORD 0040903D
:004093D4 4E904000                DWORD 0040904E
:004093D8 5F904000                DWORD 0040905F
:004093DC 70904000                DWORD 00409070
:004093E0 81904000                DWORD 00409081
:004093E4 92904000                DWORD 00409092
:004093E8 A3904000                DWORD 004090A3
:004093EC B4904000                DWORD 004090B4
:004093F0 C5904000                DWORD 004090C5
:004093F4 D6904000                DWORD 004090D6
:004093F8 E7904000                DWORD 004090E7
:004093FC F8904000                DWORD 004090F8
:00409400 09914000                DWORD 00409109
:00409404 1A914000                DWORD 0040911A
:00409408 2B914000                DWORD 0040912B
:0040940C 3C914000                DWORD 0040913C
:00409410 4D914000                DWORD 0040914D
:00409414 5E914000                DWORD 0040915E
:00409418 6F914000                DWORD 0040916F
:0040941C 80914000                DWORD 00409180
:00409420 91914000                DWORD 00409191
:00409424 A2914000                DWORD 004091A2
:00409428 B3914000                DWORD 004091B3
:0040942C C4914000                DWORD 004091C4
:00409430 D5914000                DWORD 004091D5
:00409434 E6914000                DWORD 004091E6
:00409438 F7914000                DWORD 004091F7
:0040943C 08924000                DWORD 00409208
:00409440 19924000                DWORD 00409219
:00409444 2A924000                DWORD 0040922A
:00409448 3B924000                DWORD 0040923B
:0040944C 4C924000                DWORD 0040924C
:00409450 5D924000                DWORD 0040925D
:00409454 6E924000                DWORD 0040926E
:00409458 7F924000                DWORD 0040927F
:0040945C 1F934000                DWORD 0040931F
:00409460 90924000                DWORD 00409290
:00409464 A1924000                DWORD 004092A1
:00409468 AF924000                DWORD 004092AF
:0040946C BD924000                DWORD 004092BD
:00409470 CB924000                DWORD 004092CB
:00409474 D9924000                DWORD 004092D9
:00409478 E7924000                DWORD 004092E7
:0040947C F5924000                DWORD 004092F5
:00409480 03934000                DWORD 00409303
:00409484 11934000                DWORD 00409311



* Referenced by a CALL at Address:
|:00408DBB   
|
:00409488 55                      push ebp
:00409489 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040948B B806000000              mov eax, 00000006
:00409490 5D                      pop ebp
:00409491 C3                      ret



* Referenced by a CALL at Address:
|:00408DCC   
|
:00409492 55                      push ebp
:00409493 8BEC                    mov ebp, esp
:00409495 83EC1C                  sub esp, 0000001C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00409498 6A02                    push 00000002
:0040949A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040949D E8FF580000              call 0040EDA1
:004094A2 668945FC                mov word ptr [ebp-04], ax
:004094A6 8B45FC                  mov eax, dword ptr [ebp-04]
:004094A9 25FFFF0000              and eax, 0000FFFF
:004094AE 3D00800000              cmp eax, 00008000
:004094B3 750A                    jne 004094BF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004094B5 B805000000              mov eax, 00000005
:004094BA E9B1010000              jmp 00409670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004094B3(C)
|
:004094BF 6A23                    push 00000023
:004094C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004094C4 E8D8580000              call 0040EDA1
:004094C9 668945F4                mov word ptr [ebp-0C], ax
:004094CD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004094D0 81E1FFFF0000            and ecx, 0000FFFF
:004094D6 81F900800000            cmp ecx, 00008000
:004094DC 750A                    jne 004094E8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004094DE B805000000              mov eax, 00000005
:004094E3 E988010000              jmp 00409670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004094DC(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004094E8 6A04                    push 00000004
:004094EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004094ED E8AF580000              call 0040EDA1
:004094F2 8945F8                  mov dword ptr [ebp-08], eax
:004094F5 817DF800000080          cmp dword ptr [ebp-08], 80000000
:004094FC 750A                    jne 00409508

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004094FE B805000000              mov eax, 00000005
:00409503 E968010000              jmp 00409670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004094FC(C)
|
:00409508 6A24                    push 00000024
:0040950A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040950D E88F580000              call 0040EDA1
:00409512 668945F0                mov word ptr [ebp-10], ax
:00409516 8B55F0                  mov edx, dword ptr [ebp-10]
:00409519 81E2FFFF0000            and edx, 0000FFFF
:0040951F 81FA00800000            cmp edx, 00008000
:00409525 750A                    jne 00409531

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409527 B805000000              mov eax, 00000005
:0040952C E93F010000              jmp 00409670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409525(C)
|
:00409531 E8DCD30000              call 00416912
:00409536 85C0                    test eax, eax
:00409538 742E                    je 00409568
:0040953A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040953D 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:00409542 3D00040000              cmp eax, 00000400
:00409547 7C1F                    jl 00409568
:00409549 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040954C 81E1FFFF0000            and ecx, 0000FFFF
:00409552 81F902040000            cmp ecx, 00000402
:00409558 7F0E                    jg 00409568
:0040955A B9880B4B00              mov ecx, 004B0B88
:0040955F E81C990400              call 00452E80
:00409564 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409538(C), :00409547(C), :00409558(C)
|
:00409568 C745EC00000000          mov [ebp-14], 00000000
:0040956F E89ED30000              call 00416912
:00409574 85C0                    test eax, eax
:00409576 0F8493000000            je 0040960F
:0040957C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040957F 81E2FFFF0000            and edx, 0000FFFF
:00409585 83FA0F                  cmp edx, 0000000F
:00409588 740D                    je 00409597
:0040958A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040958D 25FFFF0000              and eax, 0000FFFF
:00409592 83F810                  cmp eax, 00000010
:00409595 7578                    jne 0040960F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409588(C)
|
:00409597 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040959A 81E1FFFF0000            and ecx, 0000FFFF
:004095A0 6BC970                  imul ecx, 00000070
:004095A3 81C198224900            add ecx, 00492298
:004095A9 E89CBC0500              call 0046524A
:004095AE 8845E8                  mov byte ptr [ebp-18], al
:004095B1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004095B4 81E1FF000000            and ecx, 000000FF
:004095BA 81F9FF000000            cmp ecx, 000000FF
:004095C0 7507                    jne 004095C9
:004095C2 33C0                    xor eax, eax
:004095C4 E9A7000000              jmp 00409670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004095C0(C)
|
:004095C9 8B55F4                  mov edx, dword ptr [ebp-0C]
:004095CC 81E2FFFF0000            and edx, 0000FFFF
:004095D2 83FA0F                  cmp edx, 0000000F
:004095D5 751C                    jne 004095F3
:004095D7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004095DA 81E1FF000000            and ecx, 000000FF
:004095E0 6BC924                  imul ecx, 00000024
:004095E3 81C108F54A00            add ecx, 004AF508
:004095E9 E882B2FFFF              call 00404870
:004095EE 8945EC                  mov dword ptr [ebp-14], eax
:004095F1 EB1A                    jmp 0040960D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004095D5(C)
|
:004095F3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004095F6 81E1FF000000            and ecx, 000000FF
:004095FC 6BC924                  imul ecx, 00000024
:004095FF 81C108F54A00            add ecx, 004AF508
:00409605 E8A6B2FFFF              call 004048B0
:0040960A 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004095F1(U)
|
:0040960D EB1E                    jmp 0040962D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409576(C), :00409595(C)
|
:0040960F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00409612 25FFFF0000              and eax, 0000FFFF
:00409617 50                      push eax
:00409618 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040961B 81E1FFFF0000            and ecx, 0000FFFF
:00409621 51                      push ecx
:00409622 E8AF7FFFFF              call 004015D6
:00409627 83C408                  add esp, 00000008
:0040962A 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040960D(U)
|
:0040962D 8B55F0                  mov edx, dword ptr [ebp-10]
:00409630 81E2FFFF0000            and edx, 0000FFFF
:00409636 8955E4                  mov dword ptr [ebp-1C], edx
:00409639 837DE400                cmp dword ptr [ebp-1C], 00000000
:0040963D 7408                    je 00409647
:0040963F 837DE401                cmp dword ptr [ebp-1C], 00000001
:00409643 7411                    je 00409656
:00409645 EB1C                    jmp 00409663

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040963D(C)
|
:00409647 8B45EC                  mov eax, dword ptr [ebp-14]
:0040964A 33C9                    xor ecx, ecx
:0040964C 3B45F8                  cmp eax, dword ptr [ebp-08]
:0040964F 0F9DC1                  setnl cl
:00409652 8BC1                    mov eax, ecx
:00409654 EB1A                    jmp 00409670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409643(C)
|
:00409656 8B55EC                  mov edx, dword ptr [ebp-14]
:00409659 33C0                    xor eax, eax
:0040965B 3B55F8                  cmp edx, dword ptr [ebp-08]
:0040965E 0F9CC0                  setl al
:00409661 EB0D                    jmp 00409670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409645(U)
|
:00409663 8B45EC                  mov eax, dword ptr [ebp-14]
:00409666 33C9                    xor ecx, ecx
:00409668 3B45F8                  cmp eax, dword ptr [ebp-08]
:0040966B 0F94C1                  sete cl
:0040966E 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004094BA(U), :004094E3(U), :00409503(U), :0040952C(U), :004095C4(U)
|:00409654(U), :00409661(U)
|
:00409670 8BE5                    mov esp, ebp
:00409672 5D                      pop ebp
:00409673 C3                      ret



* Referenced by a CALL at Address:
|:00408DDD   
|
:00409674 55                      push ebp
:00409675 8BEC                    mov ebp, esp
:00409677 83EC14                  sub esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040967A 6A03                    push 00000003
:0040967C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040967F E81D570000              call 0040EDA1
:00409684 668945F0                mov word ptr [ebp-10], ax
:00409688 8B45F0                  mov eax, dword ptr [ebp-10]
:0040968B 25FFFF0000              and eax, 0000FFFF
:00409690 3D00800000              cmp eax, 00008000
:00409695 750A                    jne 004096A1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409697 B805000000              mov eax, 00000005
:0040969C E9D9000000              jmp 0040977A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409695(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004096A1 6A04                    push 00000004
:004096A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004096A6 E8F6560000              call 0040EDA1
:004096AB 8945FC                  mov dword ptr [ebp-04], eax
:004096AE 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:004096B5 750A                    jne 004096C1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004096B7 B805000000              mov eax, 00000005
:004096BC E9B9000000              jmp 0040977A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096B5(C)
|
:004096C1 6A24                    push 00000024
:004096C3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004096C6 E8D6560000              call 0040EDA1
:004096CB 668945F4                mov word ptr [ebp-0C], ax
:004096CF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004096D2 81E1FFFF0000            and ecx, 0000FFFF
:004096D8 81F900800000            cmp ecx, 00008000
:004096DE 750A                    jne 004096EA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004096E0 B805000000              mov eax, 00000005
:004096E5 E990000000              jmp 0040977A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096DE(C)
|
:004096EA C745F800000000          mov [ebp-08], 00000000
:004096F1 8B55F0                  mov edx, dword ptr [ebp-10]
:004096F4 81E2FFFF0000            and edx, 0000FFFF
:004096FA 85D2                    test edx, edx
:004096FC 7419                    je 00409717
:004096FE 6A01                    push 00000001
:00409700 B9180A4B00              mov ecx, 004B0A18
:00409705 E8E9EE0400              call 004585F3
:0040970A 25FF000000              and eax, 000000FF
:0040970F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409712 03C8                    add ecx, eax
:00409714 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096FC(C)
|
:00409717 8B55F0                  mov edx, dword ptr [ebp-10]
:0040971A 81E2FFFF0000            and edx, 0000FFFF
:00409720 83FA01                  cmp edx, 00000001
:00409723 7419                    je 0040973E

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00409725 6A02                    push 00000002
:00409727 B9180A4B00              mov ecx, 004B0A18
:0040972C E8C2EE0400              call 004585F3
:00409731 25FF000000              and eax, 000000FF
:00409736 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409739 03C8                    add ecx, eax
:0040973B 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409723(C)
|
:0040973E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00409741 81E2FFFF0000            and edx, 0000FFFF
:00409747 8955EC                  mov dword ptr [ebp-14], edx
:0040974A 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040974E 7408                    je 00409758
:00409750 837DEC01                cmp dword ptr [ebp-14], 00000001
:00409754 740D                    je 00409763
:00409756 EB17                    jmp 0040976F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040974E(C)
|
:00409758 8B45F8                  mov eax, dword ptr [ebp-08]
:0040975B 3B45FC                  cmp eax, dword ptr [ebp-04]
:0040975E 1BC0                    sbb eax, eax
:00409760 40                      inc eax
:00409761 EB17                    jmp 0040977A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409754(C)
|
:00409763 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409766 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00409769 1BC0                    sbb eax, eax
:0040976B F7D8                    neg eax
:0040976D EB0B                    jmp 0040977A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409756(U)
|
:0040976F 8B55F8                  mov edx, dword ptr [ebp-08]
:00409772 33C0                    xor eax, eax
:00409774 3B55FC                  cmp edx, dword ptr [ebp-04]
:00409777 0F94C0                  sete al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040969C(U), :004096BC(U), :004096E5(U), :00409761(U), :0040976D(U)
|
:0040977A 8BE5                    mov esp, ebp
:0040977C 5D                      pop ebp
:0040977D C3                      ret



* Referenced by a CALL at Address:
|:00408DEE   
|
:0040977E 55                      push ebp
:0040977F 8BEC                    mov ebp, esp
:00409781 83EC10                  sub esp, 00000010

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409784 6A04                    push 00000004
:00409786 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409789 E813560000              call 0040EDA1
:0040978E 8945F8                  mov dword ptr [ebp-08], eax
:00409791 817DF800000080          cmp dword ptr [ebp-08], 80000000
:00409798 7507                    jne 004097A1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040979A B805000000              mov eax, 00000005
:0040979F EB75                    jmp 00409816

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409798(C)
|
:004097A1 6A24                    push 00000024
:004097A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004097A6 E8F6550000              call 0040EDA1
:004097AB 668945F4                mov word ptr [ebp-0C], ax
:004097AF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004097B2 25FFFF0000              and eax, 0000FFFF
:004097B7 3D00800000              cmp eax, 00008000
:004097BC 7507                    jne 004097C5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004097BE B805000000              mov eax, 00000005
:004097C3 EB51                    jmp 00409816

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097BC(C)
|
:004097C5 33C9                    xor ecx, ecx
:004097C7 8A0D1A0A4B00            mov cl, byte ptr [004B0A1A]
:004097CD 83C101                  add ecx, 00000001
:004097D0 894DFC                  mov dword ptr [ebp-04], ecx
:004097D3 8B55F4                  mov edx, dword ptr [ebp-0C]
:004097D6 81E2FFFF0000            and edx, 0000FFFF
:004097DC 8955F0                  mov dword ptr [ebp-10], edx
:004097DF 837DF000                cmp dword ptr [ebp-10], 00000000
:004097E3 7408                    je 004097ED
:004097E5 837DF001                cmp dword ptr [ebp-10], 00000001
:004097E9 7411                    je 004097FC
:004097EB EB1C                    jmp 00409809

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097E3(C)
|
:004097ED 8B45FC                  mov eax, dword ptr [ebp-04]
:004097F0 33C9                    xor ecx, ecx
:004097F2 3B45F8                  cmp eax, dword ptr [ebp-08]
:004097F5 0F9DC1                  setnl cl
:004097F8 8BC1                    mov eax, ecx
:004097FA EB1A                    jmp 00409816

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097E9(C)
|
:004097FC 8B55FC                  mov edx, dword ptr [ebp-04]
:004097FF 33C0                    xor eax, eax
:00409801 3B55F8                  cmp edx, dword ptr [ebp-08]
:00409804 0F9CC0                  setl al
:00409807 EB0D                    jmp 00409816

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004097EB(U)
|
:00409809 8B45FC                  mov eax, dword ptr [ebp-04]
:0040980C 33C9                    xor ecx, ecx
:0040980E 3B45F8                  cmp eax, dword ptr [ebp-08]
:00409811 0F94C1                  sete cl
:00409814 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040979F(U), :004097C3(U), :004097FA(U), :00409807(U)
|
:00409816 8BE5                    mov esp, ebp
:00409818 5D                      pop ebp
:00409819 C3                      ret



* Referenced by a CALL at Address:
|:00408DFF   
|
:0040981A 55                      push ebp
:0040981B 8BEC                    mov ebp, esp
:0040981D 83EC08                  sub esp, 00000008
:00409820 6A25                    push 00000025
:00409822 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409825 E877550000              call 0040EDA1
:0040982A 668945FC                mov word ptr [ebp-04], ax
:0040982E 8B45FC                  mov eax, dword ptr [ebp-04]
:00409831 25FFFF0000              and eax, 0000FFFF
:00409836 3D00800000              cmp eax, 00008000
:0040983B 7507                    jne 00409844

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040983D B805000000              mov eax, 00000005
:00409842 EB2A                    jmp 0040986E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040983B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409844 6A04                    push 00000004
:00409846 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00409849 51                      push ecx
:0040984A 6A00                    push 00000000
:0040984C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040984F E867600000              call 0040F8BB
:00409854 8B55F8                  mov edx, dword ptr [ebp-08]
:00409857 81E2FFFF0000            and edx, 0000FFFF
:0040985D 8B45FC                  mov eax, dword ptr [ebp-04]
:00409860 25FFFF0000              and eax, 0000FFFF
:00409865 33C9                    xor ecx, ecx
:00409867 3BD0                    cmp edx, eax
:00409869 0F94C1                  sete cl
:0040986C 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409842(U)
|
:0040986E 8BE5                    mov esp, ebp
:00409870 5D                      pop ebp
:00409871 C3                      ret



* Referenced by a CALL at Address:
|:00408E10   
|
:00409872 55                      push ebp
:00409873 8BEC                    mov ebp, esp
:00409875 83EC08                  sub esp, 00000008
:00409878 6A26                    push 00000026
:0040987A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040987D E81F550000              call 0040EDA1
:00409882 668945F8                mov word ptr [ebp-08], ax
:00409886 8B45F8                  mov eax, dword ptr [ebp-08]
:00409889 25FFFF0000              and eax, 0000FFFF
:0040988E 3D00800000              cmp eax, 00008000
:00409893 7507                    jne 0040989C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409895 B805000000              mov eax, 00000005
:0040989A EB2B                    jmp 004098C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409893(C)
|

* Possible StringData Ref from Data Obj ->"iHܡH"
                                  |
:0040989C 68E4634700              push 004763E4

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004098A1 6A02                    push 00000002
:004098A3 E8C4F20100              call 00428B6C
:004098A8 83C408                  add esp, 00000008
:004098AB 8945FC                  mov dword ptr [ebp-04], eax
:004098AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004098B1 81E1FFFF0000            and ecx, 0000FFFF
:004098B7 8B55F8                  mov edx, dword ptr [ebp-08]
:004098BA 81E2FFFF0000            and edx, 0000FFFF
:004098C0 33C0                    xor eax, eax
:004098C2 3BCA                    cmp ecx, edx
:004098C4 0F94C0                  sete al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040989A(U)
|
:004098C7 8BE5                    mov esp, ebp
:004098C9 5D                      pop ebp
:004098CA C3                      ret



* Referenced by a CALL at Address:
|:00408E21   
|
:004098CB 55                      push ebp
:004098CC 8BEC                    mov ebp, esp
:004098CE 83EC1C                  sub esp, 0000001C
:004098D1 C745F001000000          mov [ebp-10], 00000001
:004098D8 6A35                    push 00000035
:004098DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004098DD E8BF540000              call 0040EDA1
:004098E2 668945FC                mov word ptr [ebp-04], ax
:004098E6 8B45FC                  mov eax, dword ptr [ebp-04]
:004098E9 25FFFF0000              and eax, 0000FFFF
:004098EE 3D00800000              cmp eax, 00008000
:004098F3 750A                    jne 004098FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004098F5 B805000000              mov eax, 00000005
:004098FA E9FB000000              jmp 004099FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004098F3(C)
|
:004098FF C745F800000000          mov [ebp-08], 00000000
:00409906 EB09                    jmp 00409911

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409966(U)
|
:00409908 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040990B 83C101                  add ecx, 00000001
:0040990E 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409906(U)
|
:00409911 8B55FC                  mov edx, dword ptr [ebp-04]
:00409914 81E2FFFF0000            and edx, 0000FFFF
:0040991A 3955F8                  cmp dword ptr [ebp-08], edx
:0040991D 7D49                    jge 00409968
:0040991F 6A01                    push 00000001
:00409921 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409924 E878540000              call 0040EDA1
:00409929 668945E8                mov word ptr [ebp-18], ax
:0040992D 8B45E8                  mov eax, dword ptr [ebp-18]
:00409930 25FFFF0000              and eax, 0000FFFF
:00409935 3D00800000              cmp eax, 00008000
:0040993A 750A                    jne 00409946

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040993C B805000000              mov eax, 00000005
:00409941 E9B4000000              jmp 004099FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040993A(C)
|
:00409946 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00409949 81E1FFFF0000            and ecx, 0000FFFF
:0040994F 51                      push ecx
:00409950 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409953 E804550000              call 0040EE5C
:00409958 F7D8                    neg eax
:0040995A 1BC0                    sbb eax, eax
:0040995C F7D8                    neg eax
:0040995E 8B55F0                  mov edx, dword ptr [ebp-10]
:00409961 23D0                    and edx, eax
:00409963 8955F0                  mov dword ptr [ebp-10], edx
:00409966 EBA0                    jmp 00409908

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040991D(C)
|
:00409968 6A35                    push 00000035
:0040996A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040996D E82F540000              call 0040EDA1
:00409972 668945EC                mov word ptr [ebp-14], ax
:00409976 8B45EC                  mov eax, dword ptr [ebp-14]
:00409979 25FFFF0000              and eax, 0000FFFF
:0040997E 3D00800000              cmp eax, 00008000
:00409983 7507                    jne 0040998C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409985 B805000000              mov eax, 00000005
:0040998A EB6E                    jmp 004099FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409983(C)
|
:0040998C C745F400000000          mov [ebp-0C], 00000000
:00409993 EB09                    jmp 0040999E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099EF(U)
|
:00409995 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00409998 83C101                  add ecx, 00000001
:0040999B 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409993(U)
|
:0040999E 8B55EC                  mov edx, dword ptr [ebp-14]
:004099A1 81E2FFFF0000            and edx, 0000FFFF
:004099A7 3955F4                  cmp dword ptr [ebp-0C], edx
:004099AA 7D45                    jge 004099F1
:004099AC 6A01                    push 00000001
:004099AE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004099B1 E8EB530000              call 0040EDA1
:004099B6 668945E4                mov word ptr [ebp-1C], ax
:004099BA 8B45E4                  mov eax, dword ptr [ebp-1C]
:004099BD 25FFFF0000              and eax, 0000FFFF
:004099C2 3D00800000              cmp eax, 00008000
:004099C7 7507                    jne 004099D0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004099C9 B805000000              mov eax, 00000005
:004099CE EB2A                    jmp 004099FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099C7(C)
|
:004099D0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004099D3 81E1FFFF0000            and ecx, 0000FFFF
:004099D9 51                      push ecx
:004099DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004099DD E87A540000              call 0040EE5C
:004099E2 F7D8                    neg eax
:004099E4 1BC0                    sbb eax, eax
:004099E6 40                      inc eax
:004099E7 8B55F0                  mov edx, dword ptr [ebp-10]
:004099EA 23D0                    and edx, eax
:004099EC 8955F0                  mov dword ptr [ebp-10], edx
:004099EF EBA4                    jmp 00409995

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099AA(C)
|
:004099F1 33C0                    xor eax, eax
:004099F3 837DF000                cmp dword ptr [ebp-10], 00000000
:004099F7 0F95C0                  setne al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004098FA(U), :00409941(U), :0040998A(U), :004099CE(U)
|
:004099FA 8BE5                    mov esp, ebp
:004099FC 5D                      pop ebp
:004099FD C3                      ret



* Referenced by a CALL at Address:
|:00408E32   
|
:004099FE 55                      push ebp
:004099FF 8BEC                    mov ebp, esp
:00409A01 83EC18                  sub esp, 00000018
:00409A04 6A28                    push 00000028
:00409A06 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409A09 E893530000              call 0040EDA1
:00409A0E 668945F4                mov word ptr [ebp-0C], ax
:00409A12 8B45F4                  mov eax, dword ptr [ebp-0C]
:00409A15 25FFFF0000              and eax, 0000FFFF
:00409A1A 3D00800000              cmp eax, 00008000
:00409A1F 750A                    jne 00409A2B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409A21 B805000000              mov eax, 00000005
:00409A26 E9CB000000              jmp 00409AF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A1F(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409A2B 6A04                    push 00000004
:00409A2D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409A30 E86C530000              call 0040EDA1
:00409A35 8945FC                  mov dword ptr [ebp-04], eax
:00409A38 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:00409A3F 750A                    jne 00409A4B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409A41 B805000000              mov eax, 00000005
:00409A46 E9AB000000              jmp 00409AF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A3F(C)
|
:00409A4B 6A24                    push 00000024
:00409A4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409A50 E84C530000              call 0040EDA1
:00409A55 668945F8                mov word ptr [ebp-08], ax
:00409A59 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409A5C 81E1FFFF0000            and ecx, 0000FFFF
:00409A62 81F900800000            cmp ecx, 00008000
:00409A68 750A                    jne 00409A74

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409A6A B805000000              mov eax, 00000005
:00409A6F E982000000              jmp 00409AF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A68(C)
|
:00409A74 C745F000000000          mov [ebp-10], 00000000
:00409A7B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00409A7E 81E2FFFF0000            and edx, 0000FFFF
:00409A84 8955EC                  mov dword ptr [ebp-14], edx
:00409A87 837DEC00                cmp dword ptr [ebp-14], 00000000
:00409A8B 7408                    je 00409A95
:00409A8D 837DEC02                cmp dword ptr [ebp-14], 00000002
:00409A91 7411                    je 00409AA4
:00409A93 EB21                    jmp 00409AB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A8B(C)
|
:00409A95 B9C8E24A00              mov ecx, 004AE2C8
:00409A9A E8315C0200              call 0042F6D0
:00409A9F 8945F0                  mov dword ptr [ebp-10], eax
:00409AA2 EB12                    jmp 00409AB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A91(C)
|
:00409AA4 B9C8E24A00              mov ecx, 004AE2C8
:00409AA9 E875CDFFFF              call 00406823
:00409AAE 25FF000000              and eax, 000000FF
:00409AB3 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409A93(U), :00409AA2(U)
|
:00409AB6 8B45F8                  mov eax, dword ptr [ebp-08]
:00409AB9 25FFFF0000              and eax, 0000FFFF
:00409ABE 8945E8                  mov dword ptr [ebp-18], eax
:00409AC1 837DE800                cmp dword ptr [ebp-18], 00000000
:00409AC5 7408                    je 00409ACF
:00409AC7 837DE801                cmp dword ptr [ebp-18], 00000001
:00409ACB 740F                    je 00409ADC
:00409ACD EB1A                    jmp 00409AE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409AC5(C)
|
:00409ACF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00409AD2 33C0                    xor eax, eax
:00409AD4 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00409AD7 0F9DC0                  setnl al
:00409ADA EB1A                    jmp 00409AF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409ACB(C)
|
:00409ADC 8B55F0                  mov edx, dword ptr [ebp-10]
:00409ADF 33C0                    xor eax, eax
:00409AE1 3B55FC                  cmp edx, dword ptr [ebp-04]
:00409AE4 0F9CC0                  setl al
:00409AE7 EB0D                    jmp 00409AF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409ACD(U)
|
:00409AE9 8B45F0                  mov eax, dword ptr [ebp-10]
:00409AEC 33C9                    xor ecx, ecx
:00409AEE 3B45FC                  cmp eax, dword ptr [ebp-04]
:00409AF1 0F94C1                  sete cl
:00409AF4 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409A26(U), :00409A46(U), :00409A6F(U), :00409ADA(U), :00409AE7(U)
|
:00409AF6 8BE5                    mov esp, ebp
:00409AF8 5D                      pop ebp
:00409AF9 C3                      ret



* Referenced by a CALL at Address:
|:00408E43   
|
:00409AFA 55                      push ebp
:00409AFB 8BEC                    mov ebp, esp
:00409AFD 83EC14                  sub esp, 00000014
:00409B00 6A1C                    push 0000001C
:00409B02 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409B05 E897520000              call 0040EDA1
:00409B0A 668945FC                mov word ptr [ebp-04], ax
:00409B0E 8B45FC                  mov eax, dword ptr [ebp-04]
:00409B11 25FFFF0000              and eax, 0000FFFF
:00409B16 3D00800000              cmp eax, 00008000
:00409B1B 750A                    jne 00409B27

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409B1D B805000000              mov eax, 00000005
:00409B22 E990000000              jmp 00409BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409B1B(C)
|

* Possible Reference to String Resource ID=00012: ""
                                  |
:00409B27 6A0C                    push 0000000C
:00409B29 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409B2C E870520000              call 0040EDA1
:00409B31 668945F4                mov word ptr [ebp-0C], ax
:00409B35 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00409B38 81E1FFFF0000            and ecx, 0000FFFF
:00409B3E 81F900800000            cmp ecx, 00008000
:00409B44 7507                    jne 00409B4D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409B46 B805000000              mov eax, 00000005
:00409B4B EB6A                    jmp 00409BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409B44(C)
|
:00409B4D B9C8E24A00              mov ecx, 004AE2C8
:00409B52 E879560000              call 0040F1D0
:00409B57 83E040                  and eax, 00000040
:00409B5A 85C0                    test eax, eax
:00409B5C 7457                    je 00409BB5
:00409B5E C745F818DA4A00          mov [ebp-08], 004ADA18
:00409B65 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409B68 E843560000              call 0040F1B0
:00409B6D 25FF000000              and eax, 000000FF
:00409B72 8945EC                  mov dword ptr [ebp-14], eax
:00409B75 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409B78 E8A35C0200              call 0042F820
:00409B7D 25FF000000              and eax, 000000FF
:00409B82 8945F0                  mov dword ptr [ebp-10], eax
:00409B85 E879CD0000              call 00416903
:00409B8A 25FF000000              and eax, 000000FF
:00409B8F 85C0                    test eax, eax
:00409B91 7522                    jne 00409BB5
:00409B93 8B55F4                  mov edx, dword ptr [ebp-0C]
:00409B96 81E2FFFF0000            and edx, 0000FFFF
:00409B9C 3955F0                  cmp dword ptr [ebp-10], edx
:00409B9F 7514                    jne 00409BB5
:00409BA1 8B45FC                  mov eax, dword ptr [ebp-04]
:00409BA4 25FFFF0000              and eax, 0000FFFF
:00409BA9 3945EC                  cmp dword ptr [ebp-14], eax
:00409BAC 7507                    jne 00409BB5
:00409BAE B801000000              mov eax, 00000001
:00409BB3 EB02                    jmp 00409BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409B5C(C), :00409B91(C), :00409B9F(C), :00409BAC(C)
|
:00409BB5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409B22(U), :00409B4B(U), :00409BB3(U)
|
:00409BB7 8BE5                    mov esp, ebp
:00409BB9 5D                      pop ebp
:00409BBA C3                      ret



* Referenced by a CALL at Address:
|:00408E54   
|
:00409BBB 55                      push ebp
:00409BBC 8BEC                    mov ebp, esp
:00409BBE 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00409BC1 6A02                    push 00000002
:00409BC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409BC6 E8D6510000              call 0040EDA1
:00409BCB 668945F8                mov word ptr [ebp-08], ax
:00409BCF 8B45F8                  mov eax, dword ptr [ebp-08]
:00409BD2 25FFFF0000              and eax, 0000FFFF
:00409BD7 3D00800000              cmp eax, 00008000
:00409BDC 7507                    jne 00409BE5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409BDE B805000000              mov eax, 00000005
:00409BE3 EB3F                    jmp 00409C24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409BDC(C)
|
:00409BE5 B9C8E24A00              mov ecx, 004AE2C8
:00409BEA E8E1550000              call 0040F1D0
:00409BEF 83E020                  and eax, 00000020
:00409BF2 85C0                    test eax, eax
:00409BF4 742C                    je 00409C22

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409BF6 6A04                    push 00000004
:00409BF8 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00409BFB 51                      push ecx
:00409BFC 6A01                    push 00000001
:00409BFE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409C01 E8B55C0000              call 0040F8BB
:00409C06 8B55FC                  mov edx, dword ptr [ebp-04]
:00409C09 81E2FFFF0000            and edx, 0000FFFF
:00409C0F 8B45F8                  mov eax, dword ptr [ebp-08]
:00409C12 25FFFF0000              and eax, 0000FFFF
:00409C17 33C9                    xor ecx, ecx
:00409C19 3BD0                    cmp edx, eax
:00409C1B 0F94C1                  sete cl
:00409C1E 8BC1                    mov eax, ecx
:00409C20 EB02                    jmp 00409C24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409BF4(C)
|
:00409C22 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409BE3(U), :00409C20(U)
|
:00409C24 8BE5                    mov esp, ebp
:00409C26 5D                      pop ebp
:00409C27 C3                      ret



* Referenced by a CALL at Address:
|:00408E65   
|
:00409C28 55                      push ebp
:00409C29 8BEC                    mov ebp, esp
:00409C2B 83EC24                  sub esp, 00000024

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00409C2E 6A02                    push 00000002
:00409C30 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409C33 E869510000              call 0040EDA1
:00409C38 668945F8                mov word ptr [ebp-08], ax
:00409C3C 8B45F8                  mov eax, dword ptr [ebp-08]
:00409C3F 25FFFF0000              and eax, 0000FFFF
:00409C44 3D00800000              cmp eax, 00008000
:00409C49 750A                    jne 00409C55

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409C4B B805000000              mov eax, 00000005
:00409C50 E98F020000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409C49(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00409C55 6A02                    push 00000002
:00409C57 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409C5A E842510000              call 0040EDA1
:00409C5F 668945EC                mov word ptr [ebp-14], ax
:00409C63 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00409C66 81E1FFFF0000            and ecx, 0000FFFF
:00409C6C 81F900800000            cmp ecx, 00008000
:00409C72 750A                    jne 00409C7E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409C74 B805000000              mov eax, 00000005
:00409C79 E966020000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409C72(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:00409C7E 6A08                    push 00000008
:00409C80 8D55F0                  lea edx, dword ptr [ebp-10]
:00409C83 52                      push edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00409C84 6A02                    push 00000002
:00409C86 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409C89 E82D5C0000              call 0040F8BB
:00409C8E E87FCC0000              call 00416912
:00409C93 85C0                    test eax, eax
:00409C95 7507                    jne 00409C9E
:00409C97 33C0                    xor eax, eax
:00409C99 E946020000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409C95(C)
|
:00409C9E 8B45F8                  mov eax, dword ptr [ebp-08]
:00409CA1 25FFFF0000              and eax, 0000FFFF
:00409CA6 3D85020000              cmp eax, 00000285
:00409CAB 7D7E                    jge 00409D2B
:00409CAD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00409CB0 81E1FFFF0000            and ecx, 0000FFFF
:00409CB6 81F985020000            cmp ecx, 00000285
:00409CBC 7D6D                    jge 00409D2B
:00409CBE 8B55F0                  mov edx, dword ptr [ebp-10]
:00409CC1 81E2FFFF0000            and edx, 0000FFFF
:00409CC7 8B45F8                  mov eax, dword ptr [ebp-08]
:00409CCA 25FFFF0000              and eax, 0000FFFF
:00409CCF 3BD0                    cmp edx, eax
:00409CD1 7516                    jne 00409CE9
:00409CD3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00409CD6 81E1FFFF0000            and ecx, 0000FFFF
:00409CDC 8B55EC                  mov edx, dword ptr [ebp-14]
:00409CDF 81E2FFFF0000            and edx, 0000FFFF
:00409CE5 3BCA                    cmp ecx, edx
:00409CE7 7433                    je 00409D1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409CD1(C)
|
:00409CE9 8B45F0                  mov eax, dword ptr [ebp-10]
:00409CEC 25FFFF0000              and eax, 0000FFFF
:00409CF1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00409CF4 81E1FFFF0000            and ecx, 0000FFFF
:00409CFA 3BC1                    cmp eax, ecx
:00409CFC 7515                    jne 00409D13
:00409CFE 8B55F4                  mov edx, dword ptr [ebp-0C]
:00409D01 81E2FFFF0000            and edx, 0000FFFF
:00409D07 8B45F8                  mov eax, dword ptr [ebp-08]
:00409D0A 25FFFF0000              and eax, 0000FFFF
:00409D0F 3BD0                    cmp edx, eax
:00409D11 7409                    je 00409D1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409CFC(C)
|
:00409D13 C745E400000000          mov [ebp-1C], 00000000
:00409D1A EB07                    jmp 00409D23

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409CE7(C), :00409D11(C)
|
:00409D1C C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409D1A(U)
|
:00409D23 8B45E4                  mov eax, dword ptr [ebp-1C]
:00409D26 E9B9010000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409CAB(C), :00409CBC(C)
|
:00409D2B 817DF085020000          cmp dword ptr [ebp-10], 00000285
:00409D32 7E07                    jle 00409D3B
:00409D34 33C0                    xor eax, eax
:00409D36 E9A9010000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409D32(C)
|
:00409D3B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00409D3E 6BC970                  imul ecx, 00000070
:00409D41 81C198224900            add ecx, 00492298
:00409D47 E8FEB40500              call 0046524A
:00409D4C 8845FC                  mov byte ptr [ebp-04], al
:00409D4F 817DF485020000          cmp dword ptr [ebp-0C], 00000285
:00409D56 7E07                    jle 00409D5F
:00409D58 33C0                    xor eax, eax
:00409D5A E985010000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409D56(C)
|
:00409D5F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00409D62 6BC970                  imul ecx, 00000070
:00409D65 81C198224900            add ecx, 00492298
:00409D6B E8DAB40500              call 0046524A
:00409D70 8845E8                  mov byte ptr [ebp-18], al
:00409D73 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409D76 81E1FF000000            and ecx, 000000FF
:00409D7C 81F9FF000000            cmp ecx, 000000FF
:00409D82 7411                    je 00409D95
:00409D84 8B55E8                  mov edx, dword ptr [ebp-18]
:00409D87 81E2FF000000            and edx, 000000FF
:00409D8D 81FAFF000000            cmp edx, 000000FF
:00409D93 7507                    jne 00409D9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409D82(C)
|
:00409D95 33C0                    xor eax, eax
:00409D97 E948010000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409D93(C)
|
:00409D9C 8B45F8                  mov eax, dword ptr [ebp-08]
:00409D9F 25FFFF0000              and eax, 0000FFFF
:00409DA4 8945E0                  mov dword ptr [ebp-20], eax
:00409DA7 817DE000040000          cmp dword ptr [ebp-20], 00000400
:00409DAE 741B                    je 00409DCB
:00409DB0 817DE001040000          cmp dword ptr [ebp-20], 00000401
:00409DB7 7455                    je 00409E0E
:00409DB9 817DE002040000          cmp dword ptr [ebp-20], 00000402
:00409DC0 0F84B6000000            je 00409E7C
:00409DC6 E917010000              jmp 00409EE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DAE(C)
|
:00409DCB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00409DCE 81E1FFFF0000            and ecx, 0000FFFF
:00409DD4 8B55EC                  mov edx, dword ptr [ebp-14]
:00409DD7 81E2FFFF0000            and edx, 0000FFFF
:00409DDD 3BCA                    cmp ecx, edx
:00409DDF 741E                    je 00409DFF
:00409DE1 8B45F0                  mov eax, dword ptr [ebp-10]
:00409DE4 25FFFF0000              and eax, 0000FFFF
:00409DE9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00409DEC 81E1FFFF0000            and ecx, 0000FFFF
:00409DF2 3BC1                    cmp eax, ecx
:00409DF4 7409                    je 00409DFF
:00409DF6 C745DC00000000          mov [ebp-24], 00000000
:00409DFD EB07                    jmp 00409E06

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409DDF(C), :00409DF4(C)
|
:00409DFF C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DFD(U)
|
:00409E06 8B45DC                  mov eax, dword ptr [ebp-24]
:00409E09 E9D6000000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DB7(C)
|
:00409E0E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00409E11 81E2FFFF0000            and edx, 0000FFFF
:00409E17 8B45EC                  mov eax, dword ptr [ebp-14]
:00409E1A 25FFFF0000              and eax, 0000FFFF
:00409E1F 3BD0                    cmp edx, eax
:00409E21 7522                    jne 00409E45
:00409E23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409E26 81E1FF000000            and ecx, 000000FF
:00409E2C 6BC924                  imul ecx, 00000024
:00409E2F 81C108F54A00            add ecx, 004AF508
:00409E35 E896540000              call 0040F2D0
:00409E3A F7D8                    neg eax
:00409E3C 1BC0                    sbb eax, eax
:00409E3E F7D8                    neg eax
:00409E40 E99F000000              jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E21(C)
|
:00409E45 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00409E48 81E1FFFF0000            and ecx, 0000FFFF
:00409E4E 8B55EC                  mov edx, dword ptr [ebp-14]
:00409E51 81E2FFFF0000            and edx, 0000FFFF
:00409E57 3BCA                    cmp ecx, edx
:00409E59 751F                    jne 00409E7A
:00409E5B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00409E5E 81E1FF000000            and ecx, 000000FF
:00409E64 6BC924                  imul ecx, 00000024
:00409E67 81C108F54A00            add ecx, 004AF508
:00409E6D E85E540000              call 0040F2D0
:00409E72 F7D8                    neg eax
:00409E74 1BC0                    sbb eax, eax
:00409E76 F7D8                    neg eax
:00409E78 EB6A                    jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E59(C)
|
:00409E7A EB66                    jmp 00409EE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DC0(C)
|
:00409E7C 8B45F4                  mov eax, dword ptr [ebp-0C]
:00409E7F 25FFFF0000              and eax, 0000FFFF
:00409E84 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00409E87 81E1FFFF0000            and ecx, 0000FFFF
:00409E8D 3BC1                    cmp eax, ecx
:00409E8F 751E                    jne 00409EAF
:00409E91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409E94 81E1FF000000            and ecx, 000000FF
:00409E9A 6BC924                  imul ecx, 00000024
:00409E9D 81C108F54A00            add ecx, 004AF508
:00409EA3 E828540000              call 0040F2D0
:00409EA8 F7D8                    neg eax
:00409EAA 1BC0                    sbb eax, eax
:00409EAC 40                      inc eax
:00409EAD EB35                    jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E8F(C)
|
:00409EAF 8B55F0                  mov edx, dword ptr [ebp-10]
:00409EB2 81E2FFFF0000            and edx, 0000FFFF
:00409EB8 8B45EC                  mov eax, dword ptr [ebp-14]
:00409EBB 25FFFF0000              and eax, 0000FFFF
:00409EC0 3BD0                    cmp edx, eax
:00409EC2 751E                    jne 00409EE2
:00409EC4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00409EC7 81E1FF000000            and ecx, 000000FF
:00409ECD 6BC924                  imul ecx, 00000024
:00409ED0 81C108F54A00            add ecx, 004AF508
:00409ED6 E8F5530000              call 0040F2D0
:00409EDB F7D8                    neg eax
:00409EDD 1BC0                    sbb eax, eax
:00409EDF 40                      inc eax
:00409EE0 EB02                    jmp 00409EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409DC6(U), :00409E7A(U), :00409EC2(C)
|
:00409EE2 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409C50(U), :00409C79(U), :00409C99(U), :00409D26(U), :00409D36(U)
|:00409D5A(U), :00409D97(U), :00409E09(U), :00409E40(U), :00409E78(U)
|:00409EAD(U), :00409EE0(U)
|
:00409EE4 8BE5                    mov esp, ebp
:00409EE6 5D                      pop ebp
:00409EE7 C3                      ret



* Referenced by a CALL at Address:
|:00408E76   
|
:00409EE8 55                      push ebp
:00409EE9 8BEC                    mov ebp, esp
:00409EEB 51                      push ecx

* Possible Reference to String Resource ID=00012: ""
                                  |
:00409EEC 6A0C                    push 0000000C
:00409EEE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409EF1 E8AB4E0000              call 0040EDA1
:00409EF6 668945FC                mov word ptr [ebp-04], ax
:00409EFA 8B45FC                  mov eax, dword ptr [ebp-04]
:00409EFD 25FFFF0000              and eax, 0000FFFF
:00409F02 3D00800000              cmp eax, 00008000
:00409F07 7507                    jne 00409F10

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409F09 B805000000              mov eax, 00000005
:00409F0E EB31                    jmp 00409F41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F07(C)
|
:00409F10 B9C8E24A00              mov ecx, 004AE2C8
:00409F15 E8B6520000              call 0040F1D0
:00409F1A 2580000000              and eax, 00000080
:00409F1F 85C0                    test eax, eax
:00409F21 741C                    je 00409F3F
:00409F23 33C9                    xor ecx, ecx
:00409F25 8A0D0C414A00            mov cl, byte ptr [004A410C]
:00409F2B 8B55FC                  mov edx, dword ptr [ebp-04]
:00409F2E 81E2FFFF0000            and edx, 0000FFFF
:00409F34 3BCA                    cmp ecx, edx
:00409F36 7507                    jne 00409F3F
:00409F38 B801000000              mov eax, 00000001
:00409F3D EB02                    jmp 00409F41

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409F21(C), :00409F36(C)
|
:00409F3F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409F0E(U), :00409F3D(U)
|
:00409F41 8BE5                    mov esp, ebp
:00409F43 5D                      pop ebp
:00409F44 C3                      ret



* Referenced by a CALL at Address:
|:00408E87   
|
:00409F45 55                      push ebp
:00409F46 8BEC                    mov ebp, esp
:00409F48 83EC30                  sub esp, 00000030
:00409F4B C645E4FF                mov [ebp-1C], FF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00409F4F 6A02                    push 00000002
:00409F51 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409F54 E8484E0000              call 0040EDA1
:00409F59 668945FC                mov word ptr [ebp-04], ax
:00409F5D 8B45FC                  mov eax, dword ptr [ebp-04]
:00409F60 25FFFF0000              and eax, 0000FFFF
:00409F65 3D00800000              cmp eax, 00008000
:00409F6A 750A                    jne 00409F76

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409F6C B805000000              mov eax, 00000005
:00409F71 E98D020000              jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F6A(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409F76 6A04                    push 00000004
:00409F78 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409F7B E8214E0000              call 0040EDA1
:00409F80 8945EC                  mov dword ptr [ebp-14], eax
:00409F83 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:00409F8A 750A                    jne 00409F96

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409F8C B805000000              mov eax, 00000005
:00409F91 E96D020000              jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F8A(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409F96 6A04                    push 00000004
:00409F98 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409F9B E8014E0000              call 0040EDA1
:00409FA0 8945E8                  mov dword ptr [ebp-18], eax
:00409FA3 817DE800000080          cmp dword ptr [ebp-18], 80000000
:00409FAA 750A                    jne 00409FB6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409FAC B805000000              mov eax, 00000005
:00409FB1 E94D020000              jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409FAA(C)
|

* Possible Reference to String Resource ID=00012: ""
                                  |
:00409FB6 6A0C                    push 0000000C
:00409FB8 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00409FBB 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00409FBC 6A03                    push 00000003
:00409FBE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409FC1 E8F5580000              call 0040F8BB
:00409FC6 8B55FC                  mov edx, dword ptr [ebp-04]
:00409FC9 81E2FFFF0000            and edx, 0000FFFF
:00409FCF 85D2                    test edx, edx
:00409FD1 7C09                    jl 00409FDC
:00409FD3 E83AC90000              call 00416912
:00409FD8 85C0                    test eax, eax
:00409FDA 7507                    jne 00409FE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409FD1(C)
|
:00409FDC 33C0                    xor eax, eax
:00409FDE E920020000              jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409FDA(C)
|
:00409FE3 8B45FC                  mov eax, dword ptr [ebp-04]
:00409FE6 25FFFF0000              and eax, 0000FFFF
:00409FEB 3D85020000              cmp eax, 00000285
:00409FF0 7E29                    jle 0040A01B
:00409FF2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409FF5 81E1FFFF0000            and ecx, 0000FFFF
:00409FFB 81F900040000            cmp ecx, 00000400
:0040A001 7C11                    jl 0040A014
:0040A003 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A006 81E2FFFF0000            and edx, 0000FFFF
:0040A00C 81FA02040000            cmp edx, 00000402
:0040A012 7E07                    jle 0040A01B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A001(C)
|
:0040A014 33C0                    xor eax, eax
:0040A016 E9E8010000              jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409FF0(C), :0040A012(C)
|
:0040A01B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A01E 25FFFF0000              and eax, 0000FFFF
:0040A023 8945E0                  mov dword ptr [ebp-20], eax
:0040A026 817DE000040000          cmp dword ptr [ebp-20], 00000400
:0040A02D 741B                    je 0040A04A
:0040A02F 817DE001040000          cmp dword ptr [ebp-20], 00000401
:0040A036 743A                    je 0040A072
:0040A038 817DE002040000          cmp dword ptr [ebp-20], 00000402
:0040A03F 0F84DA000000            je 0040A11F
:0040A045 E97C010000              jmp 0040A1C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A02D(C)
|
:0040A04A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A04D 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:0040A050 7511                    jne 0040A063
:0040A052 8B55F8                  mov edx, dword ptr [ebp-08]
:0040A055 3B55E8                  cmp edx, dword ptr [ebp-18]
:0040A058 7509                    jne 0040A063
:0040A05A C745DC01000000          mov [ebp-24], 00000001
:0040A061 EB07                    jmp 0040A06A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A050(C), :0040A058(C)
|
:0040A063 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A061(U)
|
:0040A06A 8B45DC                  mov eax, dword ptr [ebp-24]
:0040A06D E991010000              jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A036(C)
|
:0040A072 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040A076 0F8C9E000000            jl 0040A11A
:0040A07C 837DF800                cmp dword ptr [ebp-08], 00000000
:0040A080 0F8C94000000            jl 0040A11A
:0040A086 33C0                    xor eax, eax
:0040A088 A0800A4B00              mov al, byte ptr [004B0A80]
:0040A08D 3945F4                  cmp dword ptr [ebp-0C], eax
:0040A090 0F8D84000000            jnl 0040A11A
:0040A096 33C9                    xor ecx, ecx
:0040A098 8A0D810A4B00            mov cl, byte ptr [004B0A81]
:0040A09E 394DF8                  cmp dword ptr [ebp-08], ecx
:0040A0A1 7D77                    jge 0040A11A
:0040A0A3 837DF000                cmp dword ptr [ebp-10], 00000000
:0040A0A7 7C71                    jl 0040A11A
:0040A0A9 817DF085020000          cmp dword ptr [ebp-10], 00000285
:0040A0B0 7D68                    jge 0040A11A
:0040A0B2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A0B5 6BC970                  imul ecx, 00000070
:0040A0B8 81C198224900            add ecx, 00492298
:0040A0BE E887B10500              call 0046524A
:0040A0C3 8845E4                  mov byte ptr [ebp-1C], al
:0040A0C6 8B55E4                  mov edx, dword ptr [ebp-1C]
:0040A0C9 81E2FF000000            and edx, 000000FF
:0040A0CF 81FAFF000000            cmp edx, 000000FF
:0040A0D5 7443                    je 0040A11A
:0040A0D7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040A0DA 81E1FF000000            and ecx, 000000FF
:0040A0E0 6BC924                  imul ecx, 00000024
:0040A0E3 81C108F54A00            add ecx, 004AF508
:0040A0E9 E8E2510000              call 0040F2D0
:0040A0EE 85C0                    test eax, eax
:0040A0F0 7428                    je 0040A11A
:0040A0F2 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040A0F5 3B45EC                  cmp eax, dword ptr [ebp-14]
:0040A0F8 7511                    jne 0040A10B
:0040A0FA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A0FD 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:0040A100 7509                    jne 0040A10B
:0040A102 C745D801000000          mov [ebp-28], 00000001
:0040A109 EB07                    jmp 0040A112

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A0F8(C), :0040A100(C)
|
:0040A10B C745D800000000          mov [ebp-28], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A109(U)
|
:0040A112 8B45D8                  mov eax, dword ptr [ebp-28]
:0040A115 E9E9000000              jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A076(C), :0040A080(C), :0040A090(C), :0040A0A1(C), :0040A0A7(C)
|:0040A0B0(C), :0040A0D5(C), :0040A0F0(C)
|
:0040A11A E9E2000000              jmp 0040A201

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A03F(C)
|
:0040A11F 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040A123 0F8C9B000000            jl 0040A1C4
:0040A129 837DF800                cmp dword ptr [ebp-08], 00000000
:0040A12D 0F8C91000000            jl 0040A1C4
:0040A133 33D2                    xor edx, edx
:0040A135 8A15800A4B00            mov dl, byte ptr [004B0A80]
:0040A13B 3955F4                  cmp dword ptr [ebp-0C], edx
:0040A13E 0F8D80000000            jnl 0040A1C4
:0040A144 33C0                    xor eax, eax
:0040A146 A0810A4B00              mov al, byte ptr [004B0A81]
:0040A14B 3945F8                  cmp dword ptr [ebp-08], eax
:0040A14E 7D74                    jge 0040A1C4
:0040A150 837DF000                cmp dword ptr [ebp-10], 00000000
:0040A154 7C6E                    jl 0040A1C4
:0040A156 817DF085020000          cmp dword ptr [ebp-10], 00000285
:0040A15D 7D65                    jge 0040A1C4
:0040A15F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A162 6BC970                  imul ecx, 00000070
:0040A165 81C198224900            add ecx, 00492298
:0040A16B E8DAB00500              call 0046524A
:0040A170 8845E4                  mov byte ptr [ebp-1C], al
:0040A173 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040A176 81E1FF000000            and ecx, 000000FF
:0040A17C 81F9FF000000            cmp ecx, 000000FF
:0040A182 7440                    je 0040A1C4
:0040A184 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040A187 81E1FF000000            and ecx, 000000FF
:0040A18D 6BC924                  imul ecx, 00000024
:0040A190 81C108F54A00            add ecx, 004AF508
:0040A196 E835510000              call 0040F2D0
:0040A19B 85C0                    test eax, eax
:0040A19D 7525                    jne 0040A1C4
:0040A19F 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A1A2 3B55EC                  cmp edx, dword ptr [ebp-14]
:0040A1A5 7511                    jne 0040A1B8
:0040A1A7 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A1AA 3B45E8                  cmp eax, dword ptr [ebp-18]
:0040A1AD 7509                    jne 0040A1B8
:0040A1AF C745D401000000          mov [ebp-2C], 00000001
:0040A1B6 EB07                    jmp 0040A1BF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A1A5(C), :0040A1AD(C)
|
:0040A1B8 C745D400000000          mov [ebp-2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A1B6(U)
|
:0040A1BF 8B45D4                  mov eax, dword ptr [ebp-2C]
:0040A1C2 EB3F                    jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A123(C), :0040A12D(C), :0040A13E(C), :0040A14E(C), :0040A154(C)
|:0040A15D(C), :0040A182(C), :0040A19D(C)
|
:0040A1C4 EB3B                    jmp 0040A201

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A045(U)
|
:0040A1C6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A1C9 81E1FFFF0000            and ecx, 0000FFFF
:0040A1CF 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A1D2 81E2FFFF0000            and edx, 0000FFFF
:0040A1D8 3BCA                    cmp ecx, edx
:0040A1DA 7519                    jne 0040A1F5
:0040A1DC 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040A1DF 3B45EC                  cmp eax, dword ptr [ebp-14]
:0040A1E2 7511                    jne 0040A1F5
:0040A1E4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A1E7 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:0040A1EA 7509                    jne 0040A1F5
:0040A1EC C745D001000000          mov [ebp-30], 00000001
:0040A1F3 EB07                    jmp 0040A1FC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A1DA(C), :0040A1E2(C), :0040A1EA(C)
|
:0040A1F5 C745D000000000          mov [ebp-30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A1F3(U)
|
:0040A1FC 8B45D0                  mov eax, dword ptr [ebp-30]
:0040A1FF EB02                    jmp 0040A203

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A11A(U), :0040A1C4(U)
|
:0040A201 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409F71(U), :00409F91(U), :00409FB1(U), :00409FDE(U), :0040A016(U)
|:0040A06D(U), :0040A115(U), :0040A1C2(U), :0040A1FF(U)
|
:0040A203 8BE5                    mov esp, ebp
:0040A205 5D                      pop ebp
:0040A206 C3                      ret



* Referenced by a CALL at Address:
|:00408E98   
|
:0040A207 55                      push ebp
:0040A208 8BEC                    mov ebp, esp
:0040A20A 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A20B 6A04                    push 00000004
:0040A20D 8D45FC                  lea eax, dword ptr [ebp-04]
:0040A210 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A211 6A05                    push 00000005
:0040A213 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A216 E8A0560000              call 0040F8BB
:0040A21B 33C0                    xor eax, eax
:0040A21D 837DFC01                cmp dword ptr [ebp-04], 00000001
:0040A221 0F94C0                  sete al
:0040A224 8BE5                    mov esp, ebp
:0040A226 5D                      pop ebp
:0040A227 C3                      ret



* Referenced by a CALL at Address:
|:00408EA9   
|
:0040A228 55                      push ebp
:0040A229 8BEC                    mov ebp, esp
:0040A22B 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A22C 6A04                    push 00000004
:0040A22E 8D45FC                  lea eax, dword ptr [ebp-04]
:0040A231 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040A232 6A06                    push 00000006
:0040A234 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A237 E87F560000              call 0040F8BB
:0040A23C 33C0                    xor eax, eax
:0040A23E 837DFC01                cmp dword ptr [ebp-04], 00000001
:0040A242 0F94C0                  sete al
:0040A245 8BE5                    mov esp, ebp
:0040A247 5D                      pop ebp
:0040A248 C3                      ret



* Referenced by a CALL at Address:
|:00408EBA   
|
:0040A249 55                      push ebp
:0040A24A 8BEC                    mov ebp, esp
:0040A24C 83EC28                  sub esp, 00000028
:0040A24F C645E0FF                mov [ebp-20], FF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040A253 6A02                    push 00000002
:0040A255 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A258 E8444B0000              call 0040EDA1
:0040A25D 668945FC                mov word ptr [ebp-04], ax
:0040A261 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A264 25FFFF0000              and eax, 0000FFFF
:0040A269 3D00800000              cmp eax, 00008000
:0040A26E 750A                    jne 0040A27A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A270 B805000000              mov eax, 00000005
:0040A275 E9FE020000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A26E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A27A 6A04                    push 00000004
:0040A27C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A27F E81D4B0000              call 0040EDA1
:0040A284 8945E4                  mov dword ptr [ebp-1C], eax
:0040A287 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040A28E 750A                    jne 0040A29A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A290 B805000000              mov eax, 00000005
:0040A295 E9DE020000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A28E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A29A 6A04                    push 00000004
:0040A29C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A29F E8FD4A0000              call 0040EDA1
:0040A2A4 8945DC                  mov dword ptr [ebp-24], eax
:0040A2A7 817DDC00000080          cmp dword ptr [ebp-24], 80000000
:0040A2AE 750A                    jne 0040A2BA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A2B0 B805000000              mov eax, 00000005
:0040A2B5 E9BE020000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A2AE(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A2BA 6A04                    push 00000004
:0040A2BC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A2BF E8DD4A0000              call 0040EDA1
:0040A2C4 8945F8                  mov dword ptr [ebp-08], eax
:0040A2C7 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040A2CE 750A                    jne 0040A2DA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A2D0 B805000000              mov eax, 00000005
:0040A2D5 E99E020000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A2CE(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A2DA 6A04                    push 00000004
:0040A2DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A2DF E8BD4A0000              call 0040EDA1
:0040A2E4 8945F4                  mov dword ptr [ebp-0C], eax
:0040A2E7 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040A2EE 750A                    jne 0040A2FA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A2F0 B805000000              mov eax, 00000005
:0040A2F5 E97E020000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A2EE(C)
|

* Possible Reference to String Resource ID=00012: ""
                                  |
:0040A2FA 6A0C                    push 0000000C
:0040A2FC 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040A2FF 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040A300 6A03                    push 00000003
:0040A302 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A305 E8B1550000              call 0040F8BB
:0040A30A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A30D 81E2FFFF0000            and edx, 0000FFFF
:0040A313 85D2                    test edx, edx
:0040A315 7C09                    jl 0040A320
:0040A317 E8F6C50000              call 00416912
:0040A31C 85C0                    test eax, eax
:0040A31E 7507                    jne 0040A327

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A315(C)
|
:0040A320 33C0                    xor eax, eax
:0040A322 E951020000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A31E(C)
|
:0040A327 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A32A 25FFFF0000              and eax, 0000FFFF
:0040A32F 3D85020000              cmp eax, 00000285
:0040A334 7E29                    jle 0040A35F
:0040A336 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A339 81E1FFFF0000            and ecx, 0000FFFF
:0040A33F 81F900040000            cmp ecx, 00000400
:0040A345 7C11                    jl 0040A358
:0040A347 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A34A 81E2FFFF0000            and edx, 0000FFFF
:0040A350 81FA02040000            cmp edx, 00000402
:0040A356 7E07                    jle 0040A35F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A345(C)
|
:0040A358 33C0                    xor eax, eax
:0040A35A E919020000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A334(C), :0040A356(C)
|
:0040A35F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A362 25FFFF0000              and eax, 0000FFFF
:0040A367 8945D8                  mov dword ptr [ebp-28], eax
:0040A36A 817DD800040000          cmp dword ptr [ebp-28], 00000400
:0040A371 741B                    je 0040A38E
:0040A373 817DD801040000          cmp dword ptr [ebp-28], 00000401
:0040A37A 7467                    je 0040A3E3
:0040A37C 817DD802040000          cmp dword ptr [ebp-28], 00000402
:0040A383 0F8408010000            je 0040A491
:0040A389 E9AC010000              jmp 0040A53A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A371(C)
|
:0040A38E 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040A392 7C4A                    jl 0040A3DE
:0040A394 837DF000                cmp dword ptr [ebp-10], 00000000
:0040A398 7C44                    jl 0040A3DE
:0040A39A 33C9                    xor ecx, ecx
:0040A39C 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:0040A3A2 394DEC                  cmp dword ptr [ebp-14], ecx
:0040A3A5 7D37                    jge 0040A3DE
:0040A3A7 33D2                    xor edx, edx
:0040A3A9 8A15810A4B00            mov dl, byte ptr [004B0A81]
:0040A3AF 3955F0                  cmp dword ptr [ebp-10], edx
:0040A3B2 7D2A                    jge 0040A3DE
:0040A3B4 8B45EC                  mov eax, dword ptr [ebp-14]
:0040A3B7 3B45E4                  cmp eax, dword ptr [ebp-1C]
:0040A3BA 7C22                    jl 0040A3DE
:0040A3BC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040A3BF 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0040A3C2 7F1A                    jg 0040A3DE
:0040A3C4 8B55F0                  mov edx, dword ptr [ebp-10]
:0040A3C7 3B55DC                  cmp edx, dword ptr [ebp-24]
:0040A3CA 7C12                    jl 0040A3DE
:0040A3CC 8B45F0                  mov eax, dword ptr [ebp-10]
:0040A3CF 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0040A3D2 7F0A                    jg 0040A3DE
:0040A3D4 B801000000              mov eax, 00000001
:0040A3D9 E99A010000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A392(C), :0040A398(C), :0040A3A5(C), :0040A3B2(C), :0040A3BA(C)
|:0040A3C2(C), :0040A3CA(C), :0040A3D2(C)
|
:0040A3DE E993010000              jmp 0040A576

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A37A(C)
|
:0040A3E3 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040A3E7 0F8C9F000000            jl 0040A48C
:0040A3ED 837DF000                cmp dword ptr [ebp-10], 00000000
:0040A3F1 0F8C95000000            jl 0040A48C
:0040A3F7 33C9                    xor ecx, ecx
:0040A3F9 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:0040A3FF 394DEC                  cmp dword ptr [ebp-14], ecx
:0040A402 0F8D84000000            jnl 0040A48C
:0040A408 33D2                    xor edx, edx
:0040A40A 8A15810A4B00            mov dl, byte ptr [004B0A81]
:0040A410 3955F0                  cmp dword ptr [ebp-10], edx
:0040A413 7D77                    jge 0040A48C
:0040A415 837DE800                cmp dword ptr [ebp-18], 00000000
:0040A419 7C71                    jl 0040A48C
:0040A41B 817DE885020000          cmp dword ptr [ebp-18], 00000285
:0040A422 7D68                    jge 0040A48C
:0040A424 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040A427 6BC970                  imul ecx, 00000070
:0040A42A 81C198224900            add ecx, 00492298
:0040A430 E815AE0500              call 0046524A
:0040A435 8845E0                  mov byte ptr [ebp-20], al
:0040A438 8B45E0                  mov eax, dword ptr [ebp-20]
:0040A43B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040A440 3DFF000000              cmp eax, 000000FF
:0040A445 7445                    je 0040A48C
:0040A447 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040A44A 81E1FF000000            and ecx, 000000FF
:0040A450 6BC924                  imul ecx, 00000024
:0040A453 81C108F54A00            add ecx, 004AF508
:0040A459 E8724E0000              call 0040F2D0
:0040A45E 85C0                    test eax, eax
:0040A460 742A                    je 0040A48C
:0040A462 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040A465 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0040A468 7C22                    jl 0040A48C
:0040A46A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040A46D 3B55F8                  cmp edx, dword ptr [ebp-08]
:0040A470 7F1A                    jg 0040A48C
:0040A472 8B45F0                  mov eax, dword ptr [ebp-10]
:0040A475 3B45DC                  cmp eax, dword ptr [ebp-24]
:0040A478 7C12                    jl 0040A48C
:0040A47A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A47D 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0040A480 7F0A                    jg 0040A48C
:0040A482 B801000000              mov eax, 00000001
:0040A487 E9EC000000              jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A3E7(C), :0040A3F1(C), :0040A402(C), :0040A413(C), :0040A419(C)
|:0040A422(C), :0040A445(C), :0040A460(C), :0040A468(C), :0040A470(C)
|:0040A478(C), :0040A480(C)
|
:0040A48C E9E5000000              jmp 0040A576

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A383(C)
|
:0040A491 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040A495 0F8C9D000000            jl 0040A538
:0040A49B 837DF000                cmp dword ptr [ebp-10], 00000000
:0040A49F 0F8C93000000            jl 0040A538
:0040A4A5 33D2                    xor edx, edx
:0040A4A7 8A15800A4B00            mov dl, byte ptr [004B0A80]
:0040A4AD 3955EC                  cmp dword ptr [ebp-14], edx
:0040A4B0 0F8D82000000            jnl 0040A538
:0040A4B6 33C0                    xor eax, eax
:0040A4B8 A0810A4B00              mov al, byte ptr [004B0A81]
:0040A4BD 3945F0                  cmp dword ptr [ebp-10], eax
:0040A4C0 7D76                    jge 0040A538
:0040A4C2 837DE800                cmp dword ptr [ebp-18], 00000000
:0040A4C6 7C70                    jl 0040A538
:0040A4C8 817DE885020000          cmp dword ptr [ebp-18], 00000285
:0040A4CF 7D67                    jge 0040A538
:0040A4D1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040A4D4 6BC970                  imul ecx, 00000070
:0040A4D7 81C198224900            add ecx, 00492298
:0040A4DD E868AD0500              call 0046524A
:0040A4E2 8845E0                  mov byte ptr [ebp-20], al
:0040A4E5 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040A4E8 81E1FF000000            and ecx, 000000FF
:0040A4EE 81F9FF000000            cmp ecx, 000000FF
:0040A4F4 7442                    je 0040A538
:0040A4F6 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040A4F9 81E1FF000000            and ecx, 000000FF
:0040A4FF 6BC924                  imul ecx, 00000024
:0040A502 81C108F54A00            add ecx, 004AF508
:0040A508 E8C34D0000              call 0040F2D0
:0040A50D 85C0                    test eax, eax
:0040A50F 7527                    jne 0040A538
:0040A511 8B55EC                  mov edx, dword ptr [ebp-14]
:0040A514 3B55E4                  cmp edx, dword ptr [ebp-1C]
:0040A517 7C1F                    jl 0040A538
:0040A519 8B45EC                  mov eax, dword ptr [ebp-14]
:0040A51C 3B45F8                  cmp eax, dword ptr [ebp-08]
:0040A51F 7F17                    jg 0040A538
:0040A521 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A524 3B4DDC                  cmp ecx, dword ptr [ebp-24]
:0040A527 7C0F                    jl 0040A538
:0040A529 8B55F0                  mov edx, dword ptr [ebp-10]
:0040A52C 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0040A52F 7F07                    jg 0040A538
:0040A531 B801000000              mov eax, 00000001
:0040A536 EB40                    jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A495(C), :0040A49F(C), :0040A4B0(C), :0040A4C0(C), :0040A4C6(C)
|:0040A4CF(C), :0040A4F4(C), :0040A50F(C), :0040A517(C), :0040A51F(C)
|:0040A527(C), :0040A52F(C)
|
:0040A538 EB3C                    jmp 0040A576

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A389(U)
|
:0040A53A 8B45E8                  mov eax, dword ptr [ebp-18]
:0040A53D 25FFFF0000              and eax, 0000FFFF
:0040A542 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A545 81E1FFFF0000            and ecx, 0000FFFF
:0040A54B 3BC1                    cmp eax, ecx
:0040A54D 7527                    jne 0040A576
:0040A54F 8B55EC                  mov edx, dword ptr [ebp-14]
:0040A552 3B55E4                  cmp edx, dword ptr [ebp-1C]
:0040A555 7C1F                    jl 0040A576
:0040A557 8B45EC                  mov eax, dword ptr [ebp-14]
:0040A55A 3B45F8                  cmp eax, dword ptr [ebp-08]
:0040A55D 7F17                    jg 0040A576
:0040A55F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A562 3B4DDC                  cmp ecx, dword ptr [ebp-24]
:0040A565 7C0F                    jl 0040A576
:0040A567 8B55F0                  mov edx, dword ptr [ebp-10]
:0040A56A 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0040A56D 7F07                    jg 0040A576
:0040A56F B801000000              mov eax, 00000001
:0040A574 EB02                    jmp 0040A578

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A3DE(U), :0040A48C(U), :0040A538(U), :0040A54D(C), :0040A555(C)
|:0040A55D(C), :0040A565(C), :0040A56D(C)
|
:0040A576 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A275(U), :0040A295(U), :0040A2B5(U), :0040A2D5(U), :0040A2F5(U)
|:0040A322(U), :0040A35A(U), :0040A3D9(U), :0040A487(U), :0040A536(U)
|:0040A574(U)
|
:0040A578 8BE5                    mov esp, ebp
:0040A57A 5D                      pop ebp
:0040A57B C3                      ret



* Referenced by a CALL at Address:
|:00408ECB   
|
:0040A57C 55                      push ebp
:0040A57D 8BEC                    mov ebp, esp
:0040A57F 81EC54040000            sub esp, 00000454

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A585 6A05                    push 00000005
:0040A587 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A58A E812480000              call 0040EDA1
:0040A58F 8945F4                  mov dword ptr [ebp-0C], eax
:0040A592 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040A599 750A                    jne 0040A5A5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A59B B805000000              mov eax, 00000005
:0040A5A0 E90A010000              jmp 0040A6AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A599(C)
|
:0040A5A5 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040A5A8 50                      push eax
:0040A5A9 8D8DACFBFFFF            lea ecx, dword ptr [ebp+FFFFFBAC]
:0040A5AF 51                      push ecx
:0040A5B0 B9F8134800              mov ecx, 004813F8
:0040A5B5 E8933D0000              call 0040E34D
:0040A5BA 8D55B4                  lea edx, dword ptr [ebp-4C]
:0040A5BD 8955FC                  mov dword ptr [ebp-04], edx
:0040A5C0 8D85ACFBFFFF            lea eax, dword ptr [ebp+FFFFFBAC]
:0040A5C6 8945B0                  mov dword ptr [ebp-50], eax
:0040A5C9 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A666(U)
|
:0040A5D0 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040A5D3 33D2                    xor edx, edx
:0040A5D5 8A11                    mov dl, byte ptr [ecx]
:0040A5D7 85D2                    test edx, edx
:0040A5D9 0F848C000000            je 0040A66B
:0040A5DF 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A5E2 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040A5E5 8908                    mov dword ptr [eax], ecx
:0040A5E7 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A5EA 83C204                  add edx, 00000004
:0040A5ED 8955FC                  mov dword ptr [ebp-04], edx
:0040A5F0 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A5F3 83C001                  add eax, 00000001
:0040A5F6 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A625(U)
|
:0040A5F9 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040A5FC 33D2                    xor edx, edx
:0040A5FE 8A11                    mov dl, byte ptr [ecx]
:0040A600 83FA0A                  cmp edx, 0000000A
:0040A603 7422                    je 0040A627
:0040A605 8B45B0                  mov eax, dword ptr [ebp-50]
:0040A608 33C9                    xor ecx, ecx
:0040A60A 8A08                    mov cl, byte ptr [eax]
:0040A60C 83F90D                  cmp ecx, 0000000D
:0040A60F 7416                    je 0040A627
:0040A611 8B55B0                  mov edx, dword ptr [ebp-50]
:0040A614 33C0                    xor eax, eax
:0040A616 8A02                    mov al, byte ptr [edx]
:0040A618 85C0                    test eax, eax
:0040A61A 740B                    je 0040A627
:0040A61C 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040A61F 83C101                  add ecx, 00000001
:0040A622 894DB0                  mov dword ptr [ebp-50], ecx
:0040A625 EBD2                    jmp 0040A5F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A603(C), :0040A60F(C), :0040A61A(C)
|
:0040A627 8B55B0                  mov edx, dword ptr [ebp-50]
:0040A62A 33C0                    xor eax, eax
:0040A62C 8A02                    mov al, byte ptr [edx]
:0040A62E 85C0                    test eax, eax
:0040A630 7502                    jne 0040A634
:0040A632 EB37                    jmp 0040A66B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A630(C)
|
:0040A634 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040A637 C60100                  mov byte ptr [ecx], 00
:0040A63A 8B55B0                  mov edx, dword ptr [ebp-50]
:0040A63D 83C201                  add edx, 00000001
:0040A640 8955B0                  mov dword ptr [ebp-50], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A664(U)
|
:0040A643 8B45B0                  mov eax, dword ptr [ebp-50]
:0040A646 33C9                    xor ecx, ecx
:0040A648 8A08                    mov cl, byte ptr [eax]
:0040A64A 83F90A                  cmp ecx, 0000000A
:0040A64D 740C                    je 0040A65B
:0040A64F 8B55B0                  mov edx, dword ptr [ebp-50]
:0040A652 33C0                    xor eax, eax
:0040A654 8A02                    mov al, byte ptr [edx]
:0040A656 83F80D                  cmp eax, 0000000D
:0040A659 750B                    jne 0040A666

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A64D(C)
|
:0040A65B 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040A65E 83C101                  add ecx, 00000001
:0040A661 894DB0                  mov dword ptr [ebp-50], ecx
:0040A664 EBDD                    jmp 0040A643

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A659(C)
|
:0040A666 E965FFFFFF              jmp 0040A5D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A5D9(C), :0040A632(U)
|
:0040A66B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A66E C70200000000            mov dword ptr [edx], 00000000
:0040A674 6A00                    push 00000000
:0040A676 6A00                    push 00000000
:0040A678 6A00                    push 00000000
:0040A67A 6A01                    push 00000001
:0040A67C 8A45F8                  mov al, byte ptr [ebp-08]
:0040A67F 50                      push eax
:0040A680 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:0040A683 51                      push ecx

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:0040A684 6A70                    push 00000070
:0040A686 68E0000000              push 000000E0
:0040A68B E806D40100              call 00427A96
:0040A690 83C420                  add esp, 00000020
:0040A693 25FF000000              and eax, 000000FF
:0040A698 8945AC                  mov dword ptr [ebp-54], eax
:0040A69B 8B55AC                  mov edx, dword ptr [ebp-54]
:0040A69E 83C201                  add edx, 00000001
:0040A6A1 52                      push edx
:0040A6A2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A6A5 E8EB470000              call 0040EE95
:0040A6AA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A5A0(U)
|
:0040A6AF 8BE5                    mov esp, ebp
:0040A6B1 5D                      pop ebp
:0040A6B2 C3                      ret



* Referenced by a CALL at Address:
|:00408EDC   
|
:0040A6B3 55                      push ebp
:0040A6B4 8BEC                    mov ebp, esp
:0040A6B6 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A6B7 6A04                    push 00000004
:0040A6B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A6BC E8E0460000              call 0040EDA1
:0040A6C1 8945FC                  mov dword ptr [ebp-04], eax
:0040A6C4 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A6CB 7507                    jne 0040A6D4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A6CD B805000000              mov eax, 00000005
:0040A6D2 EB12                    jmp 0040A6E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6CB(C)
|
:0040A6D4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A6D7 E8D2470000              call 0040EEAE
:0040A6DC 33C9                    xor ecx, ecx
:0040A6DE 3945FC                  cmp dword ptr [ebp-04], eax
:0040A6E1 0F94C1                  sete cl
:0040A6E4 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6D2(U)
|
:0040A6E6 8BE5                    mov esp, ebp
:0040A6E8 5D                      pop ebp
:0040A6E9 C3                      ret



* Referenced by a CALL at Address:
|:00408EED   
|
:0040A6EA 55                      push ebp
:0040A6EB 8BEC                    mov ebp, esp
:0040A6ED B801000000              mov eax, 00000001
:0040A6F2 5D                      pop ebp
:0040A6F3 C3                      ret



* Referenced by a CALL at Address:
|:00408EFE   
|
:0040A6F4 55                      push ebp
:0040A6F5 8BEC                    mov ebp, esp
:0040A6F7 83EC20                  sub esp, 00000020

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040A6FA 6A02                    push 00000002
:0040A6FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A6FF E89D460000              call 0040EDA1
:0040A704 668945F8                mov word ptr [ebp-08], ax
:0040A708 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A70B 25FFFF0000              and eax, 0000FFFF
:0040A710 3D00800000              cmp eax, 00008000
:0040A715 750A                    jne 0040A721

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A717 B805000000              mov eax, 00000005
:0040A71C E920030000              jmp 0040AA41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A715(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040A721 6A02                    push 00000002
:0040A723 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A726 E876460000              call 0040EDA1
:0040A72B 668945F4                mov word ptr [ebp-0C], ax
:0040A72F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A732 81E1FFFF0000            and ecx, 0000FFFF
:0040A738 81F900800000            cmp ecx, 00008000
:0040A73E 750A                    jne 0040A74A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A740 B805000000              mov eax, 00000005
:0040A745 E9F7020000              jmp 0040AA41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A73E(C)
|
:0040A74A 6A23                    push 00000023
:0040A74C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A74F E84D460000              call 0040EDA1
:0040A754 668945EC                mov word ptr [ebp-14], ax
:0040A758 8B55EC                  mov edx, dword ptr [ebp-14]
:0040A75B 81E2FFFF0000            and edx, 0000FFFF
:0040A761 81FA00800000            cmp edx, 00008000
:0040A767 750A                    jne 0040A773

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A769 B805000000              mov eax, 00000005
:0040A76E E9CE020000              jmp 0040AA41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A767(C)
|
:0040A773 8B45EC                  mov eax, dword ptr [ebp-14]
:0040A776 25FFFF0000              and eax, 0000FFFF
:0040A77B 83F811                  cmp eax, 00000011
:0040A77E 7D2A                    jge 0040A7AA
:0040A780 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040A783 81E1FFFF0000            and ecx, 0000FFFF
:0040A789 51                      push ecx
:0040A78A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A78D 81E2FFFF0000            and edx, 0000FFFF
:0040A793 52                      push edx
:0040A794 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A797 25FFFF0000              and eax, 0000FFFF
:0040A79C 50                      push eax
:0040A79D E843C5FFFF              call 00406CE5
:0040A7A2 83C40C                  add esp, 0000000C
:0040A7A5 E980020000              jmp 0040AA2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A77E(C)
|
:0040A7AA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040A7AD 81E1FFFF0000            and ecx, 0000FFFF
:0040A7B3 83F911                  cmp ecx, 00000011
:0040A7B6 7548                    jne 0040A800
:0040A7B8 C645E400                mov [ebp-1C], 00
:0040A7BC EB09                    jmp 0040A7C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7F9(U)
|
:0040A7BE 8A55E4                  mov dl, byte ptr [ebp-1C]
:0040A7C1 80C201                  add dl, 01
:0040A7C4 8855E4                  mov byte ptr [ebp-1C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7BC(U)
|
:0040A7C7 8B45E4                  mov eax, dword ptr [ebp-1C]
:0040A7CA 25FF000000              and eax, 000000FF
:0040A7CF 83F809                  cmp eax, 00000009
:0040A7D2 7D27                    jge 0040A7FB
:0040A7D4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040A7D7 81E1FF000000            and ecx, 000000FF
:0040A7DD 51                      push ecx
:0040A7DE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A7E1 81E2FFFF0000            and edx, 0000FFFF
:0040A7E7 52                      push edx
:0040A7E8 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A7EB 25FFFF0000              and eax, 0000FFFF
:0040A7F0 50                      push eax
:0040A7F1 E8EFC4FFFF              call 00406CE5
:0040A7F6 83C40C                  add esp, 0000000C
:0040A7F9 EBC3                    jmp 0040A7BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7D2(C)
|
:0040A7FB E92A020000              jmp 0040AA2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7B6(C)
|
:0040A800 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A803 81E1FFFF0000            and ecx, 0000FFFF
:0040A809 6BC970                  imul ecx, 00000070
:0040A80C 81C198224900            add ecx, 00492298
:0040A812 E8D99FFFFF              call 004047F0
:0040A817 8845E8                  mov byte ptr [ebp-18], al
:0040A81A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A81D 81E1FFFF0000            and ecx, 0000FFFF
:0040A823 6BC970                  imul ecx, 00000070
:0040A826 81C198224900            add ecx, 00492298
:0040A82C E81A7FFFFF              call 0040274B
:0040A831 8845FC                  mov byte ptr [ebp-04], al
:0040A834 C645E000                mov [ebp-20], 00
:0040A838 EB09                    jmp 0040A843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A8AE(U)
|
:0040A83A 8A4DE0                  mov cl, byte ptr [ebp-20]
:0040A83D 80C101                  add cl, 01
:0040A840 884DE0                  mov byte ptr [ebp-20], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A838(U)
|
:0040A843 8B55E0                  mov edx, dword ptr [ebp-20]
:0040A846 81E2FF000000            and edx, 000000FF
:0040A84C 83FA08                  cmp edx, 00000008
:0040A84F 7D5F                    jge 0040A8B0
:0040A851 8A45E0                  mov al, byte ptr [ebp-20]
:0040A854 50                      push eax
:0040A855 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A858 81E1FFFF0000            and ecx, 0000FFFF
:0040A85E 6BC970                  imul ecx, 00000070
:0040A861 81C198224900            add ecx, 00492298
:0040A867 E8A49FFFFF              call 00404810
:0040A86C 8845F0                  mov byte ptr [ebp-10], al
:0040A86F 8A4DF0                  mov cl, byte ptr [ebp-10]
:0040A872 51                      push ecx
:0040A873 8A55E0                  mov dl, byte ptr [ebp-20]
:0040A876 52                      push edx
:0040A877 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A87A 81E1FFFF0000            and ecx, 0000FFFF
:0040A880 6BC970                  imul ecx, 00000070
:0040A883 81C198224900            add ecx, 00492298
:0040A889 E8A29FFFFF              call 00404830

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040A88E 68FF000000              push 000000FF
:0040A893 8A45E0                  mov al, byte ptr [ebp-20]
:0040A896 50                      push eax
:0040A897 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A89A 81E1FFFF0000            and ecx, 0000FFFF
:0040A8A0 6BC970                  imul ecx, 00000070
:0040A8A3 81C198224900            add ecx, 00492298
:0040A8A9 E8829FFFFF              call 00404830
:0040A8AE EB8A                    jmp 0040A83A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A84F(C)
|
:0040A8B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A8B3 81E1FF000000            and ecx, 000000FF
:0040A8B9 81F9FF000000            cmp ecx, 000000FF
:0040A8BF 743A                    je 0040A8FB
:0040A8C1 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A8C4 81E2FFFF0000            and edx, 0000FFFF
:0040A8CA 52                      push edx
:0040A8CB 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A8CE 25FF000000              and eax, 000000FF
:0040A8D3 50                      push eax
:0040A8D4 E8CC77FFFF              call 004020A5
:0040A8D9 83C408                  add esp, 00000008
:0040A8DC 85C0                    test eax, eax
:0040A8DE 741B                    je 0040A8FB
:0040A8E0 8A4DE8                  mov cl, byte ptr [ebp-18]
:0040A8E3 51                      push ecx
:0040A8E4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A8E7 81E1FFFF0000            and ecx, 0000FFFF
:0040A8ED 6BC970                  imul ecx, 00000070
:0040A8F0 81C198224900            add ecx, 00492298
:0040A8F6 E86674FFFF              call 00401D61

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A8BF(C), :0040A8DE(C)
|

* Possible Reference to String Resource ID=00014: ""
                                  |
:0040A8FB 6A0E                    push 0000000E
:0040A8FD 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A900 81E2FFFF0000            and edx, 0000FFFF
:0040A906 52                      push edx
:0040A907 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A90A 25FFFF0000              and eax, 0000FFFF
:0040A90F 50                      push eax
:0040A910 E8D0C3FFFF              call 00406CE5
:0040A915 83C40C                  add esp, 0000000C
:0040A918 C645E000                mov [ebp-20], 00
:0040A91C EB09                    jmp 0040A927

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A972(U)
|
:0040A91E 8A4DE0                  mov cl, byte ptr [ebp-20]
:0040A921 80C101                  add cl, 01
:0040A924 884DE0                  mov byte ptr [ebp-20], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A91C(U)
|
:0040A927 8B55E0                  mov edx, dword ptr [ebp-20]
:0040A92A 81E2FF000000            and edx, 000000FF
:0040A930 83FA08                  cmp edx, 00000008
:0040A933 7D3F                    jge 0040A974
:0040A935 8A45E0                  mov al, byte ptr [ebp-20]
:0040A938 50                      push eax
:0040A939 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A93C 81E1FFFF0000            and ecx, 0000FFFF
:0040A942 6BC970                  imul ecx, 00000070
:0040A945 81C198224900            add ecx, 00492298
:0040A94B E8E0480000              call 0040F230
:0040A950 8845F0                  mov byte ptr [ebp-10], al
:0040A953 8A4DF0                  mov cl, byte ptr [ebp-10]
:0040A956 51                      push ecx
:0040A957 8A55E0                  mov dl, byte ptr [ebp-20]
:0040A95A 52                      push edx
:0040A95B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A95E 81E1FFFF0000            and ecx, 0000FFFF
:0040A964 6BC970                  imul ecx, 00000070
:0040A967 81C198224900            add ecx, 00492298
:0040A96D E8DE480000              call 0040F250
:0040A972 EBAA                    jmp 0040A91E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A933(C)
|
:0040A974 C645E000                mov [ebp-20], 00
:0040A978 EB08                    jmp 0040A982

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A9CD(U)
|
:0040A97A 8A45E0                  mov al, byte ptr [ebp-20]
:0040A97D 0401                    add al, 01
:0040A97F 8845E0                  mov byte ptr [ebp-20], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A978(U)
|
:0040A982 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040A985 81E1FF000000            and ecx, 000000FF
:0040A98B 83F908                  cmp ecx, 00000008
:0040A98E 7D3F                    jge 0040A9CF
:0040A990 8A55E0                  mov dl, byte ptr [ebp-20]
:0040A993 52                      push edx
:0040A994 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A997 81E1FFFF0000            and ecx, 0000FFFF
:0040A99D 6BC970                  imul ecx, 00000070
:0040A9A0 81C198224900            add ecx, 00492298
:0040A9A6 E845480000              call 0040F1F0
:0040A9AB 8845F0                  mov byte ptr [ebp-10], al
:0040A9AE 8A45F0                  mov al, byte ptr [ebp-10]
:0040A9B1 50                      push eax
:0040A9B2 8A4DE0                  mov cl, byte ptr [ebp-20]
:0040A9B5 51                      push ecx
:0040A9B6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A9B9 81E1FFFF0000            and ecx, 0000FFFF
:0040A9BF 6BC970                  imul ecx, 00000070
:0040A9C2 81C198224900            add ecx, 00492298
:0040A9C8 E843480000              call 0040F210
:0040A9CD EBAB                    jmp 0040A97A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A98E(C)
|
:0040A9CF C645E000                mov [ebp-20], 00
:0040A9D3 EB09                    jmp 0040A9DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AA28(U)
|
:0040A9D5 8A55E0                  mov dl, byte ptr [ebp-20]
:0040A9D8 80C201                  add dl, 01
:0040A9DB 8855E0                  mov byte ptr [ebp-20], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A9D3(U)
|
:0040A9DE 8B45E0                  mov eax, dword ptr [ebp-20]
:0040A9E1 25FF000000              and eax, 000000FF
:0040A9E6 83F807                  cmp eax, 00000007
:0040A9E9 7D3F                    jge 0040AA2A
:0040A9EB 8A4DE0                  mov cl, byte ptr [ebp-20]
:0040A9EE 51                      push ecx
:0040A9EF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A9F2 81E1FFFF0000            and ecx, 0000FFFF
:0040A9F8 6BC970                  imul ecx, 00000070
:0040A9FB 81C198224900            add ecx, 00492298
:0040AA01 E86A480000              call 0040F270
:0040AA06 8845F0                  mov byte ptr [ebp-10], al
:0040AA09 8A55F0                  mov dl, byte ptr [ebp-10]
:0040AA0C 52                      push edx
:0040AA0D 8A45E0                  mov al, byte ptr [ebp-20]
:0040AA10 50                      push eax
:0040AA11 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040AA14 81E1FFFF0000            and ecx, 0000FFFF
:0040AA1A 6BC970                  imul ecx, 00000070
:0040AA1D 81C198224900            add ecx, 00492298
:0040AA23 E868480000              call 0040F290
:0040AA28 EBAB                    jmp 0040A9D5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A7A5(U), :0040A7FB(U), :0040A9E9(C)
|
:0040AA2A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040AA2D 81E1FFFF0000            and ecx, 0000FFFF
:0040AA33 51                      push ecx
:0040AA34 E817C50500              call 00466F50
:0040AA39 83C404                  add esp, 00000004
:0040AA3C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A71C(U), :0040A745(U), :0040A76E(U)
|
:0040AA41 8BE5                    mov esp, ebp
:0040AA43 5D                      pop ebp
:0040AA44 C3                      ret



* Referenced by a CALL at Address:
|:00408F0F   
|
:0040AA45 55                      push ebp
:0040AA46 8BEC                    mov ebp, esp
:0040AA48 83EC18                  sub esp, 00000018

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040AA4B 6A02                    push 00000002
:0040AA4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AA50 E84C430000              call 0040EDA1
:0040AA55 668945FC                mov word ptr [ebp-04], ax
:0040AA59 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AA5C 25FFFF0000              and eax, 0000FFFF
:0040AA61 3D00800000              cmp eax, 00008000
:0040AA66 750A                    jne 0040AA72

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AA68 B805000000              mov eax, 00000005
:0040AA6D E9FA010000              jmp 0040AC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AA66(C)
|
:0040AA72 6A23                    push 00000023
:0040AA74 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AA77 E825430000              call 0040EDA1
:0040AA7C 668945F0                mov word ptr [ebp-10], ax
:0040AA80 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040AA83 81E1FFFF0000            and ecx, 0000FFFF
:0040AA89 81F900800000            cmp ecx, 00008000
:0040AA8F 750A                    jne 0040AA9B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AA91 B805000000              mov eax, 00000005
:0040AA96 E9D1010000              jmp 0040AC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AA8F(C)
|
:0040AA9B 6A34                    push 00000034
:0040AA9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AAA0 E8FC420000              call 0040EDA1
:0040AAA5 668945F4                mov word ptr [ebp-0C], ax
:0040AAA9 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040AAAC 81E2FFFF0000            and edx, 0000FFFF
:0040AAB2 81FA00800000            cmp edx, 00008000
:0040AAB8 750A                    jne 0040AAC4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AABA B805000000              mov eax, 00000005
:0040AABF E9A8010000              jmp 0040AC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AAB8(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040AAC4 6A04                    push 00000004
:0040AAC6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AAC9 E8D3420000              call 0040EDA1
:0040AACE 8945F8                  mov dword ptr [ebp-08], eax
:0040AAD1 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040AAD8 750A                    jne 0040AAE4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AADA B805000000              mov eax, 00000005
:0040AADF E988010000              jmp 0040AC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AAD8(C)
|
:0040AAE4 E829BE0000              call 00416912
:0040AAE9 85C0                    test eax, eax
:0040AAEB 742E                    je 0040AB1B
:0040AAED 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AAF0 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0040AAF5 3D00040000              cmp eax, 00000400
:0040AAFA 7C1F                    jl 0040AB1B
:0040AAFC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AAFF 81E1FFFF0000            and ecx, 0000FFFF
:0040AB05 81F902040000            cmp ecx, 00000402
:0040AB0B 7F0E                    jg 0040AB1B
:0040AB0D B9880B4B00              mov ecx, 004B0B88
:0040AB12 E869830400              call 00452E80
:0040AB17 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AAEB(C), :0040AAFA(C), :0040AB0B(C)
|
:0040AB1B E8F2BD0000              call 00416912
:0040AB20 85C0                    test eax, eax
:0040AB22 7525                    jne 0040AB49
:0040AB24 8B55F0                  mov edx, dword ptr [ebp-10]
:0040AB27 81E2FFFF0000            and edx, 0000FFFF
:0040AB2D 83FA0F                  cmp edx, 0000000F
:0040AB30 740D                    je 0040AB3F
:0040AB32 8B45F0                  mov eax, dword ptr [ebp-10]
:0040AB35 25FFFF0000              and eax, 0000FFFF
:0040AB3A 83F810                  cmp eax, 00000010
:0040AB3D 750A                    jne 0040AB49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AB30(C)
|
:0040AB3F B801000000              mov eax, 00000001
:0040AB44 E923010000              jmp 0040AC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AB22(C), :0040AB3D(C)
|
:0040AB49 E8C4BD0000              call 00416912
:0040AB4E 85C0                    test eax, eax
:0040AB50 7445                    je 0040AB97
:0040AB52 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040AB55 81E1FFFF0000            and ecx, 0000FFFF
:0040AB5B 83F90F                  cmp ecx, 0000000F
:0040AB5E 740E                    je 0040AB6E
:0040AB60 8B55F0                  mov edx, dword ptr [ebp-10]
:0040AB63 81E2FFFF0000            and edx, 0000FFFF
:0040AB69 83FA10                  cmp edx, 00000010
:0040AB6C 7529                    jne 0040AB97

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AB5E(C)
|
:0040AB6E 8B45F8                  mov eax, dword ptr [ebp-08]
:0040AB71 50                      push eax
:0040AB72 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0040AB75 51                      push ecx
:0040AB76 8A55F0                  mov dl, byte ptr [ebp-10]
:0040AB79 52                      push edx
:0040AB7A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AB7D 25FFFF0000              and eax, 0000FFFF
:0040AB82 50                      push eax
:0040AB83 B9880B4B00              mov ecx, 004B0B88
:0040AB88 E8D7F40400              call 0045A064
:0040AB8D B801000000              mov eax, 00000001
:0040AB92 E9D5000000              jmp 0040AC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AB50(C), :0040AB6C(C)
|
:0040AB97 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040AB9A 81E1FFFF0000            and ecx, 0000FFFF
:0040ABA0 894DE8                  mov dword ptr [ebp-18], ecx
:0040ABA3 837DE800                cmp dword ptr [ebp-18], 00000000
:0040ABA7 7411                    je 0040ABBA
:0040ABA9 837DE801                cmp dword ptr [ebp-18], 00000001
:0040ABAD 742C                    je 0040ABDB
:0040ABAF 837DE802                cmp dword ptr [ebp-18], 00000002
:0040ABB3 7447                    je 0040ABFC
:0040ABB5 E995000000              jmp 0040AC4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ABA7(C)
|
:0040ABBA 8B55F8                  mov edx, dword ptr [ebp-08]
:0040ABBD 52                      push edx
:0040ABBE 8B45F0                  mov eax, dword ptr [ebp-10]
:0040ABC1 25FFFF0000              and eax, 0000FFFF
:0040ABC6 50                      push eax
:0040ABC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040ABCA 81E1FFFF0000            and ecx, 0000FFFF
:0040ABD0 51                      push ecx
:0040ABD1 E8146FFFFF              call 00401AEA
:0040ABD6 83C40C                  add esp, 0000000C
:0040ABD9 EB7B                    jmp 0040AC56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ABAD(C)
|
:0040ABDB 8B55F8                  mov edx, dword ptr [ebp-08]
:0040ABDE 52                      push edx
:0040ABDF 8B45F0                  mov eax, dword ptr [ebp-10]
:0040ABE2 25FFFF0000              and eax, 0000FFFF
:0040ABE7 50                      push eax
:0040ABE8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040ABEB 81E1FFFF0000            and ecx, 0000FFFF
:0040ABF1 51                      push ecx
:0040ABF2 E8276FFFFF              call 00401B1E
:0040ABF7 83C40C                  add esp, 0000000C
:0040ABFA EB5A                    jmp 0040AC56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ABB3(C)
|
:0040ABFC 8B55F0                  mov edx, dword ptr [ebp-10]
:0040ABFF 81E2FFFF0000            and edx, 0000FFFF
:0040AC05 52                      push edx
:0040AC06 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AC09 25FFFF0000              and eax, 0000FFFF
:0040AC0E 50                      push eax
:0040AC0F E8C269FFFF              call 004015D6
:0040AC14 83C408                  add esp, 00000008
:0040AC17 8945EC                  mov dword ptr [ebp-14], eax
:0040AC1A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040AC1D 51                      push ecx
:0040AC1E 8B55EC                  mov edx, dword ptr [ebp-14]
:0040AC21 52                      push edx
:0040AC22 E89D730500              call 00461FC4
:0040AC27 83C408                  add esp, 00000008
:0040AC2A 8945EC                  mov dword ptr [ebp-14], eax
:0040AC2D 8B45EC                  mov eax, dword ptr [ebp-14]
:0040AC30 50                      push eax
:0040AC31 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040AC34 81E1FFFF0000            and ecx, 0000FFFF
:0040AC3A 51                      push ecx
:0040AC3B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040AC3E 81E2FFFF0000            and edx, 0000FFFF
:0040AC44 52                      push edx
:0040AC45 E8A06EFFFF              call 00401AEA
:0040AC4A 83C40C                  add esp, 0000000C
:0040AC4D EB07                    jmp 0040AC56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ABB5(U)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AC4F B805000000              mov eax, 00000005
:0040AC54 EB16                    jmp 0040AC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ABD9(U), :0040ABFA(U), :0040AC4D(U)
|
:0040AC56 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AC59 25FFFF0000              and eax, 0000FFFF
:0040AC5E 50                      push eax
:0040AC5F E8ECC20500              call 00466F50
:0040AC64 83C404                  add esp, 00000004
:0040AC67 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AA6D(U), :0040AA96(U), :0040AABF(U), :0040AADF(U), :0040AB44(U)
|:0040AB92(U), :0040AC54(U)
|
:0040AC6C 8BE5                    mov esp, ebp
:0040AC6E 5D                      pop ebp
:0040AC6F C3                      ret



* Referenced by a CALL at Address:
|:00408F20   
|
:0040AC70 55                      push ebp
:0040AC71 8BEC                    mov ebp, esp
:0040AC73 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AC74 6A05                    push 00000005
:0040AC76 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AC79 E823410000              call 0040EDA1
:0040AC7E 8945FC                  mov dword ptr [ebp-04], eax
:0040AC81 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040AC88 7507                    jne 0040AC91

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AC8A B805000000              mov eax, 00000005
:0040AC8F EB05                    jmp 0040AC96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AC88(C)
|
:0040AC91 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AC8F(U)
|
:0040AC96 8BE5                    mov esp, ebp
:0040AC98 5D                      pop ebp
:0040AC99 C3                      ret



* Referenced by a CALL at Address:
|:00408F31   
|
:0040AC9A 55                      push ebp
:0040AC9B 8BEC                    mov ebp, esp
:0040AC9D 51                      push ecx
:0040AC9E 6A1B                    push 0000001B
:0040ACA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040ACA3 E8F9400000              call 0040EDA1
:0040ACA8 668945FC                mov word ptr [ebp-04], ax
:0040ACAC 8B45FC                  mov eax, dword ptr [ebp-04]
:0040ACAF 25FFFF0000              and eax, 0000FFFF
:0040ACB4 3D00800000              cmp eax, 00008000
:0040ACB9 7507                    jne 0040ACC2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040ACBB B805000000              mov eax, 00000005
:0040ACC0 EB17                    jmp 0040ACD9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ACB9(C)
|
:0040ACC2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040ACC5 81E1FFFF0000            and ecx, 0000FFFF
:0040ACCB 51                      push ecx
:0040ACCC E8FDE50100              call 004292CE
:0040ACD1 83C404                  add esp, 00000004
:0040ACD4 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ACC0(U)
|
:0040ACD9 8BE5                    mov esp, ebp
:0040ACDB 5D                      pop ebp
:0040ACDC C3                      ret



* Referenced by a CALL at Address:
|:00408F42   
|
:0040ACDD 55                      push ebp
:0040ACDE 8BEC                    mov ebp, esp
:0040ACE0 83EC10                  sub esp, 00000010

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040ACE3 6A04                    push 00000004
:0040ACE5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040ACE8 E8B4400000              call 0040EDA1
:0040ACED 8945F4                  mov dword ptr [ebp-0C], eax
:0040ACF0 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040ACF7 750A                    jne 0040AD03

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040ACF9 B805000000              mov eax, 00000005
:0040ACFE E981000000              jmp 0040AD84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ACF7(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040AD03 6A04                    push 00000004
:0040AD05 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AD08 E894400000              call 0040EDA1
:0040AD0D 8945F0                  mov dword ptr [ebp-10], eax
:0040AD10 817DF000000080          cmp dword ptr [ebp-10], 80000000
:0040AD17 7507                    jne 0040AD20

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AD19 B805000000              mov eax, 00000005
:0040AD1E EB64                    jmp 0040AD84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD17(C)
|
:0040AD20 6A29                    push 00000029
:0040AD22 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AD25 E877400000              call 0040EDA1
:0040AD2A 668945F8                mov word ptr [ebp-08], ax
:0040AD2E 8B45F8                  mov eax, dword ptr [ebp-08]
:0040AD31 25FFFF0000              and eax, 0000FFFF
:0040AD36 3D00800000              cmp eax, 00008000
:0040AD3B 7507                    jne 0040AD44

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AD3D B805000000              mov eax, 00000005
:0040AD42 EB40                    jmp 0040AD84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD3B(C)
|
:0040AD44 6A2A                    push 0000002A
:0040AD46 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AD49 E853400000              call 0040EDA1
:0040AD4E 8945FC                  mov dword ptr [ebp-04], eax
:0040AD51 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040AD58 7507                    jne 0040AD61

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AD5A B805000000              mov eax, 00000005
:0040AD5F EB23                    jmp 0040AD84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD58(C)
|
:0040AD61 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AD64 51                      push ecx
:0040AD65 8B55F8                  mov edx, dword ptr [ebp-08]
:0040AD68 81E2FFFF0000            and edx, 0000FFFF
:0040AD6E 52                      push edx
:0040AD6F 8B45F0                  mov eax, dword ptr [ebp-10]
:0040AD72 50                      push eax
:0040AD73 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040AD76 51                      push ecx
:0040AD77 E821C00000              call 00416D9D
:0040AD7C 83C410                  add esp, 00000010
:0040AD7F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ACFE(U), :0040AD1E(U), :0040AD42(U), :0040AD5F(U)
|
:0040AD84 8BE5                    mov esp, ebp
:0040AD86 5D                      pop ebp
:0040AD87 C3                      ret



* Referenced by a CALL at Address:
|:00408F53   
|
:0040AD88 55                      push ebp
:0040AD89 8BEC                    mov ebp, esp
:0040AD8B 81ECA0030000            sub esp, 000003A0
:0040AD91 C785A4FCFFFF00000000    mov dword ptr [ebp+FFFFFCA4], 00000000
:0040AD9B EB0F                    jmp 0040ADAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ADD8(U)
|
:0040AD9D 8B85A4FCFFFF            mov eax, dword ptr [ebp+FFFFFCA4]
:0040ADA3 83C001                  add eax, 00000001
:0040ADA6 8985A4FCFFFF            mov dword ptr [ebp+FFFFFCA4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD9B(U)
|
:0040ADAC 83BDA4FCFFFF5A          cmp dword ptr [ebp+FFFFFCA4], 0000005A
:0040ADB3 7D25                    jge 0040ADDA
:0040ADB5 8B8DA4FCFFFF            mov ecx, dword ptr [ebp+FFFFFCA4]
:0040ADBB 51                      push ecx
:0040ADBC B9F8134800              mov ecx, 004813F8
:0040ADC1 E8AA450000              call 0040F370
:0040ADC6 8985A0FCFFFF            mov dword ptr [ebp+FFFFFCA0], eax
:0040ADCC 8B95A0FCFFFF            mov edx, dword ptr [ebp+FFFFFCA0]
:0040ADD2 C702FFFF0000            mov dword ptr [edx], 0000FFFF
:0040ADD8 EBC3                    jmp 0040AD9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ADB3(C)
|
:0040ADDA 6A26                    push 00000026
:0040ADDC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040ADDF E8BD3F0000              call 0040EDA1
:0040ADE4 668945FC                mov word ptr [ebp-04], ax
:0040ADE8 8B45FC                  mov eax, dword ptr [ebp-04]
:0040ADEB 25FFFF0000              and eax, 0000FFFF
:0040ADF0 3D00800000              cmp eax, 00008000
:0040ADF5 750A                    jne 0040AE01

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040ADF7 B805000000              mov eax, 00000005
:0040ADFC E9B1050000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ADF5(C)
|
:0040AE01 6A26                    push 00000026
:0040AE03 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AE06 E8963F0000              call 0040EDA1
:0040AE0B 66898598FCFFFF          mov word ptr [ebp+FFFFFC98], ax
:0040AE12 8B8D98FCFFFF            mov ecx, dword ptr [ebp+FFFFFC98]
:0040AE18 81E1FFFF0000            and ecx, 0000FFFF
:0040AE1E 81F900800000            cmp ecx, 00008000
:0040AE24 750A                    jne 0040AE30

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AE26 B805000000              mov eax, 00000005
:0040AE2B E982050000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AE24(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040AE30 6A04                    push 00000004
:0040AE32 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AE35 E8673F0000              call 0040EDA1
:0040AE3A 89858CFCFFFF            mov dword ptr [ebp+FFFFFC8C], eax
:0040AE40 81BD8CFCFFFF00000080    cmp dword ptr [ebp+FFFFFC8C], 80000000
:0040AE4A 750A                    jne 0040AE56

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AE4C B805000000              mov eax, 00000005
:0040AE51 E95C050000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AE4A(C)
|
:0040AE56 6A32                    push 00000032
:0040AE58 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AE5B E8413F0000              call 0040EDA1
:0040AE60 6689859CFCFFFF          mov word ptr [ebp+FFFFFC9C], ax
:0040AE67 8B959CFCFFFF            mov edx, dword ptr [ebp+FFFFFC9C]
:0040AE6D 81E2FFFF0000            and edx, 0000FFFF
:0040AE73 81FA00800000            cmp edx, 00008000
:0040AE79 750A                    jne 0040AE85

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AE7B B805000000              mov eax, 00000005
:0040AE80 E92D050000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AE79(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040AE85 6A02                    push 00000002
:0040AE87 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AE8A E8123F0000              call 0040EDA1
:0040AE8F 668985ACFCFFFF          mov word ptr [ebp+FFFFFCAC], ax
:0040AE96 8B85ACFCFFFF            mov eax, dword ptr [ebp+FFFFFCAC]
:0040AE9C 25FFFF0000              and eax, 0000FFFF
:0040AEA1 3D00800000              cmp eax, 00008000
:0040AEA6 750A                    jne 0040AEB2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AEA8 B805000000              mov eax, 00000005
:0040AEAD E900050000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AEA6(C)
|
:0040AEB2 6A32                    push 00000032
:0040AEB4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AEB7 E8E53E0000              call 0040EDA1
:0040AEBC 66898590FCFFFF          mov word ptr [ebp+FFFFFC90], ax
:0040AEC3 8B8D90FCFFFF            mov ecx, dword ptr [ebp+FFFFFC90]
:0040AEC9 81E1FFFF0000            and ecx, 0000FFFF
:0040AECF 81F900800000            cmp ecx, 00008000
:0040AED5 750A                    jne 0040AEE1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AED7 B805000000              mov eax, 00000005
:0040AEDC E9D1040000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AED5(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040AEE1 6A02                    push 00000002
:0040AEE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AEE6 E8B63E0000              call 0040EDA1
:0040AEEB 668985A8FCFFFF          mov word ptr [ebp+FFFFFCA8], ax
:0040AEF2 8B95A8FCFFFF            mov edx, dword ptr [ebp+FFFFFCA8]
:0040AEF8 81E2FFFF0000            and edx, 0000FFFF
:0040AEFE 81FA00800000            cmp edx, 00008000
:0040AF04 750A                    jne 0040AF10

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AF06 B805000000              mov eax, 00000005
:0040AF0B E9A2040000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AF04(C)
|
:0040AF10 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AF13 25FFFF0000              and eax, 0000FFFF
:0040AF18 F7D8                    neg eax
:0040AF1A 1BC0                    sbb eax, eax
:0040AF1C F7D8                    neg eax
:0040AF1E 66A338344800            mov word ptr [00483438], ax
:0040AF24 8A8D98FCFFFF            mov cl, byte ptr [ebp+FFFFFC98]
:0040AF2A 880D5F494800            mov byte ptr [0048495F], cl
:0040AF30 8B958CFCFFFF            mov edx, dword ptr [ebp+FFFFFC8C]
:0040AF36 52                      push edx
:0040AF37 B9F8134800              mov ecx, 004813F8
:0040AF3C E84F440000              call 0040F390
:0040AF41 8B85ACFCFFFF            mov eax, dword ptr [ebp+FFFFFCAC]
:0040AF47 25FFFF0000              and eax, 0000FFFF
:0040AF4C 33C9                    xor ecx, ecx
:0040AF4E 3DFFFF0000              cmp eax, 0000FFFF
:0040AF53 0F95C1                  setne cl
:0040AF56 66890D54494800          mov word ptr [00484954], cx
:0040AF5D 668B95ACFCFFFF          mov dx, word ptr [ebp+FFFFFCAC]
:0040AF64 66891556494800          mov word ptr [00484956], dx
:0040AF6B 8B85A8FCFFFF            mov eax, dword ptr [ebp+FFFFFCA8]
:0040AF71 25FFFF0000              and eax, 0000FFFF
:0040AF76 33C9                    xor ecx, ecx
:0040AF78 3DFFFF0000              cmp eax, 0000FFFF
:0040AF7D 0F95C1                  setne cl
:0040AF80 66890D58494800          mov word ptr [00484958], cx
:0040AF87 668B95A8FCFFFF          mov dx, word ptr [ebp+FFFFFCA8]
:0040AF8E 6689155A494800          mov word ptr [0048495A], dx
:0040AF95 C745F800000000          mov [ebp-08], 00000000
:0040AF9C C78594FCFFFF00000000    mov dword ptr [ebp+FFFFFC94], 00000000
:0040AFA6 EB0F                    jmp 0040AFB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B3A8(U)
|
:0040AFA8 8B8594FCFFFF            mov eax, dword ptr [ebp+FFFFFC94]
:0040AFAE 83C001                  add eax, 00000001
:0040AFB1 898594FCFFFF            mov dword ptr [ebp+FFFFFC94], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AFA6(U)
|
:0040AFB7 83BD94FCFFFF1E          cmp dword ptr [ebp+FFFFFC94], 0000001E
:0040AFBE 0F8DE9030000            jnl 0040B3AD

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040AFC4 6A02                    push 00000002
:0040AFC6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AFC9 E8D33D0000              call 0040EDA1
:0040AFCE 66898580FCFFFF          mov word ptr [ebp+FFFFFC80], ax
:0040AFD5 8B8D80FCFFFF            mov ecx, dword ptr [ebp+FFFFFC80]
:0040AFDB 81E1FFFF0000            and ecx, 0000FFFF
:0040AFE1 81F900800000            cmp ecx, 00008000
:0040AFE7 750A                    jne 0040AFF3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AFE9 B805000000              mov eax, 00000005
:0040AFEE E9BF030000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AFE7(C)
|
:0040AFF3 8B9594FCFFFF            mov edx, dword ptr [ebp+FFFFFC94]
:0040AFF9 6BD21C                  imul edx, 0000001C
:0040AFFC 668B8580FCFFFF          mov ax, word ptr [ebp+FFFFFC80]
:0040B003 66898415B0FCFFFF        mov word ptr [ebp+edx-00000350], ax
:0040B00B 6A26                    push 00000026
:0040B00D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B010 E88C3D0000              call 0040EDA1
:0040B015 66898564FCFFFF          mov word ptr [ebp+FFFFFC64], ax
:0040B01C 8B8D64FCFFFF            mov ecx, dword ptr [ebp+FFFFFC64]
:0040B022 81E1FFFF0000            and ecx, 0000FFFF
:0040B028 81F900800000            cmp ecx, 00008000
:0040B02E 750A                    jne 0040B03A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B030 B805000000              mov eax, 00000005
:0040B035 E978030000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B02E(C)
|
:0040B03A 8B9594FCFFFF            mov edx, dword ptr [ebp+FFFFFC94]
:0040B040 6BD21C                  imul edx, 0000001C
:0040B043 668B8564FCFFFF          mov ax, word ptr [ebp+FFFFFC64]
:0040B04A 66898415B2FCFFFF        mov word ptr [ebp+edx-0000034E], ax
:0040B052 6A26                    push 00000026
:0040B054 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B057 E8453D0000              call 0040EDA1
:0040B05C 6689856CFCFFFF          mov word ptr [ebp+FFFFFC6C], ax
:0040B063 8B8D6CFCFFFF            mov ecx, dword ptr [ebp+FFFFFC6C]
:0040B069 81E1FFFF0000            and ecx, 0000FFFF
:0040B06F 81F900800000            cmp ecx, 00008000
:0040B075 750A                    jne 0040B081

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B077 B805000000              mov eax, 00000005
:0040B07C E931030000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B075(C)
|
:0040B081 8B9594FCFFFF            mov edx, dword ptr [ebp+FFFFFC94]
:0040B087 6BD21C                  imul edx, 0000001C
:0040B08A 668B856CFCFFFF          mov ax, word ptr [ebp+FFFFFC6C]
:0040B091 66898415B4FCFFFF        mov word ptr [ebp+edx-0000034C], ax
:0040B099 6A26                    push 00000026
:0040B09B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B09E E8FE3C0000              call 0040EDA1
:0040B0A3 66898588FCFFFF          mov word ptr [ebp+FFFFFC88], ax
:0040B0AA 8B8D88FCFFFF            mov ecx, dword ptr [ebp+FFFFFC88]
:0040B0B0 81E1FFFF0000            and ecx, 0000FFFF
:0040B0B6 81F900800000            cmp ecx, 00008000
:0040B0BC 750A                    jne 0040B0C8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B0BE B805000000              mov eax, 00000005
:0040B0C3 E9EA020000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B0BC(C)
|
:0040B0C8 8B9594FCFFFF            mov edx, dword ptr [ebp+FFFFFC94]
:0040B0CE 6BD21C                  imul edx, 0000001C
:0040B0D1 668B8588FCFFFF          mov ax, word ptr [ebp+FFFFFC88]
:0040B0D8 66898415B6FCFFFF        mov word ptr [ebp+edx-0000034A], ax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B0E0 6A04                    push 00000004
:0040B0E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B0E5 E8B73C0000              call 0040EDA1
:0040B0EA 898568FCFFFF            mov dword ptr [ebp+FFFFFC68], eax
:0040B0F0 81BD68FCFFFF00000080    cmp dword ptr [ebp+FFFFFC68], 80000000
:0040B0FA 750A                    jne 0040B106

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B0FC B805000000              mov eax, 00000005
:0040B101 E9AC020000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B0FA(C)
|
:0040B106 8B8D94FCFFFF            mov ecx, dword ptr [ebp+FFFFFC94]
:0040B10C 6BC91C                  imul ecx, 0000001C
:0040B10F 8B9568FCFFFF            mov edx, dword ptr [ebp+FFFFFC68]
:0040B115 89940DB8FCFFFF          mov dword ptr [ebp+ecx-00000348], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B11C 6A04                    push 00000004
:0040B11E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B121 E87B3C0000              call 0040EDA1
:0040B126 898560FCFFFF            mov dword ptr [ebp+FFFFFC60], eax
:0040B12C 81BD60FCFFFF00000080    cmp dword ptr [ebp+FFFFFC60], 80000000
:0040B136 750A                    jne 0040B142

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B138 B805000000              mov eax, 00000005
:0040B13D E970020000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B136(C)
|
:0040B142 8B8594FCFFFF            mov eax, dword ptr [ebp+FFFFFC94]
:0040B148 6BC01C                  imul eax, 0000001C
:0040B14B 8B8D60FCFFFF            mov ecx, dword ptr [ebp+FFFFFC60]
:0040B151 898C05BCFCFFFF          mov dword ptr [ebp+eax-00000344], ecx
:0040B158 6A2B                    push 0000002B
:0040B15A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B15D E83F3C0000              call 0040EDA1
:0040B162 66898570FCFFFF          mov word ptr [ebp+FFFFFC70], ax
:0040B169 8B9570FCFFFF            mov edx, dword ptr [ebp+FFFFFC70]
:0040B16F 81E2FFFF0000            and edx, 0000FFFF
:0040B175 81FA00800000            cmp edx, 00008000
:0040B17B 750A                    jne 0040B187

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B17D B805000000              mov eax, 00000005
:0040B182 E92B020000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B17B(C)
|
:0040B187 8B8594FCFFFF            mov eax, dword ptr [ebp+FFFFFC94]
:0040B18D 6BC01C                  imul eax, 0000001C
:0040B190 668B8D70FCFFFF          mov cx, word ptr [ebp+FFFFFC70]
:0040B197 66898C05C0FCFFFF        mov word ptr [ebp+eax-00000340], cx
:0040B19F 6A33                    push 00000033
:0040B1A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B1A4 E8F83B0000              call 0040EDA1
:0040B1A9 66898574FCFFFF          mov word ptr [ebp+FFFFFC74], ax
:0040B1B0 8B9574FCFFFF            mov edx, dword ptr [ebp+FFFFFC74]
:0040B1B6 81E2FFFF0000            and edx, 0000FFFF
:0040B1BC 81FA00800000            cmp edx, 00008000
:0040B1C2 750A                    jne 0040B1CE

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B1C4 B805000000              mov eax, 00000005
:0040B1C9 E9E4010000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B1C2(C)
|
:0040B1CE 8B8594FCFFFF            mov eax, dword ptr [ebp+FFFFFC94]
:0040B1D4 6BC01C                  imul eax, 0000001C
:0040B1D7 668B8D74FCFFFF          mov cx, word ptr [ebp+FFFFFC74]
:0040B1DE 66898C05C2FCFFFF        mov word ptr [ebp+eax-0000033E], cx
:0040B1E6 6A17                    push 00000017
:0040B1E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B1EB E8B13B0000              call 0040EDA1
:0040B1F0 66898584FCFFFF          mov word ptr [ebp+FFFFFC84], ax
:0040B1F7 8B9584FCFFFF            mov edx, dword ptr [ebp+FFFFFC84]
:0040B1FD 81E2FFFF0000            and edx, 0000FFFF
:0040B203 81FA00800000            cmp edx, 00008000
:0040B209 750A                    jne 0040B215

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B20B B805000000              mov eax, 00000005
:0040B210 E99D010000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B209(C)
|
:0040B215 8B8594FCFFFF            mov eax, dword ptr [ebp+FFFFFC94]
:0040B21B 6BC01C                  imul eax, 0000001C
:0040B21E 668B8D84FCFFFF          mov cx, word ptr [ebp+FFFFFC84]
:0040B225 66898C05C4FCFFFF        mov word ptr [ebp+eax-0000033C], cx
:0040B22D 6A17                    push 00000017
:0040B22F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B232 E86A3B0000              call 0040EDA1
:0040B237 6689857CFCFFFF          mov word ptr [ebp+FFFFFC7C], ax
:0040B23E 8B957CFCFFFF            mov edx, dword ptr [ebp+FFFFFC7C]
:0040B244 81E2FFFF0000            and edx, 0000FFFF
:0040B24A 81FA00800000            cmp edx, 00008000
:0040B250 750A                    jne 0040B25C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B252 B805000000              mov eax, 00000005
:0040B257 E956010000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B250(C)
|
:0040B25C 8B8594FCFFFF            mov eax, dword ptr [ebp+FFFFFC94]
:0040B262 6BC01C                  imul eax, 0000001C
:0040B265 668B8D7CFCFFFF          mov cx, word ptr [ebp+FFFFFC7C]
:0040B26C 66898C05C6FCFFFF        mov word ptr [ebp+eax-0000033A], cx
:0040B274 6A17                    push 00000017
:0040B276 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B279 E8233B0000              call 0040EDA1
:0040B27E 66898578FCFFFF          mov word ptr [ebp+FFFFFC78], ax
:0040B285 8B9578FCFFFF            mov edx, dword ptr [ebp+FFFFFC78]
:0040B28B 81E2FFFF0000            and edx, 0000FFFF
:0040B291 81FA00800000            cmp edx, 00008000
:0040B297 750A                    jne 0040B2A3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B299 B805000000              mov eax, 00000005
:0040B29E E90F010000              jmp 0040B3B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B297(C)
|
:0040B2A3 8B8594FCFFFF            mov eax, dword ptr [ebp+FFFFFC94]
:0040B2A9 6BC01C                  imul eax, 0000001C
:0040B2AC 668B8D78FCFFFF          mov cx, word ptr [ebp+FFFFFC78]
:0040B2B3 66898C05C8FCFFFF        mov word ptr [ebp+eax-00000338], cx
:0040B2BB 8B9580FCFFFF            mov edx, dword ptr [ebp+FFFFFC80]
:0040B2C1 81E2FFFF0000            and edx, 0000FFFF
:0040B2C7 81FAFFFF0000            cmp edx, 0000FFFF
:0040B2CD 0F84D5000000            je 0040B3A8
:0040B2D3 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B2D6 50                      push eax
:0040B2D7 B9F8134800              mov ecx, 004813F8
:0040B2DC E88F400000              call 0040F370
:0040B2E1 8985A0FCFFFF            mov dword ptr [ebp+FFFFFCA0], eax
:0040B2E7 8B8D80FCFFFF            mov ecx, dword ptr [ebp+FFFFFC80]
:0040B2ED 81E1FFFF0000            and ecx, 0000FFFF
:0040B2F3 8B95A0FCFFFF            mov edx, dword ptr [ebp+FFFFFCA0]
:0040B2F9 890A                    mov dword ptr [edx], ecx
:0040B2FB 8B85A0FCFFFF            mov eax, dword ptr [ebp+FFFFFCA0]
:0040B301 8A8D68FCFFFF            mov cl, byte ptr [ebp+FFFFFC68]
:0040B307 884804                  mov byte ptr [eax+04], cl
:0040B30A 8B95A0FCFFFF            mov edx, dword ptr [ebp+FFFFFCA0]
:0040B310 8A8560FCFFFF            mov al, byte ptr [ebp+FFFFFC60]
:0040B316 884205                  mov byte ptr [edx+05], al
:0040B319 8B8D64FCFFFF            mov ecx, dword ptr [ebp+FFFFFC64]
:0040B31F 81E1FFFF0000            and ecx, 0000FFFF
:0040B325 F7D9                    neg ecx
:0040B327 1BC9                    sbb ecx, ecx
:0040B329 41                      inc ecx
:0040B32A 8B9588FCFFFF            mov edx, dword ptr [ebp+FFFFFC88]
:0040B330 81E2FFFF0000            and edx, 0000FFFF
:0040B336 F7DA                    neg edx
:0040B338 1BD2                    sbb edx, edx
:0040B33A 83E202                  and edx, 00000002
:0040B33D 0BCA                    or ecx, edx
:0040B33F 8B8570FCFFFF            mov eax, dword ptr [ebp+FFFFFC70]
:0040B345 25FFFF0000              and eax, 0000FFFF
:0040B34A 83E801                  sub eax, 00000001
:0040B34D F7D8                    neg eax
:0040B34F 1BC0                    sbb eax, eax
:0040B351 24FC                    and al, FC
:0040B353 83C004                  add eax, 00000004
:0040B356 0BC8                    or ecx, eax
:0040B358 8B95A0FCFFFF            mov edx, dword ptr [ebp+FFFFFCA0]
:0040B35E 894A08                  mov dword ptr [edx+08], ecx
:0040B361 8B8584FCFFFF            mov eax, dword ptr [ebp+FFFFFC84]
:0040B367 25FFFF0000              and eax, 0000FFFF
:0040B36C 8B8DA0FCFFFF            mov ecx, dword ptr [ebp+FFFFFCA0]
:0040B372 894114                  mov dword ptr [ecx+14], eax
:0040B375 8B957CFCFFFF            mov edx, dword ptr [ebp+FFFFFC7C]
:0040B37B 81E2FFFF0000            and edx, 0000FFFF
:0040B381 8B85A0FCFFFF            mov eax, dword ptr [ebp+FFFFFCA0]
:0040B387 895018                  mov dword ptr [eax+18], edx
:0040B38A 8B8D78FCFFFF            mov ecx, dword ptr [ebp+FFFFFC78]
:0040B390 81E1FFFF0000            and ecx, 0000FFFF
:0040B396 8B95A0FCFFFF            mov edx, dword ptr [ebp+FFFFFCA0]
:0040B39C 894A1C                  mov dword ptr [edx+1C], ecx
:0040B39F 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B3A2 83C001                  add eax, 00000001
:0040B3A5 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B2CD(C)
|
:0040B3A8 E9FBFBFFFF              jmp 0040AFA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AFBE(C)
|
:0040B3AD B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ADFC(U), :0040AE2B(U), :0040AE51(U), :0040AE80(U), :0040AEAD(U)
|:0040AEDC(U), :0040AF0B(U), :0040AFEE(U), :0040B035(U), :0040B07C(U)
|:0040B0C3(U), :0040B101(U), :0040B13D(U), :0040B182(U), :0040B1C9(U)
|:0040B210(U), :0040B257(U), :0040B29E(U)
|
:0040B3B2 8BE5                    mov esp, ebp
:0040B3B4 5D                      pop ebp
:0040B3B5 C3                      ret



* Referenced by a CALL at Address:
|:00408F64   
|
:0040B3B6 55                      push ebp
:0040B3B7 8BEC                    mov ebp, esp
:0040B3B9 B838130000              mov eax, 00001338
:0040B3BE E86D250600              call 0046D930
:0040B3C3 6A26                    push 00000026
:0040B3C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B3C8 E8D4390000              call 0040EDA1
:0040B3CD 66898534EDFFFF          mov word ptr [ebp+FFFFED34], ax
:0040B3D4 8B8534EDFFFF            mov eax, dword ptr [ebp+FFFFED34]
:0040B3DA 25FFFF0000              and eax, 0000FFFF
:0040B3DF 3D00800000              cmp eax, 00008000
:0040B3E4 750A                    jne 0040B3F0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B3E6 B805000000              mov eax, 00000005
:0040B3EB E969080000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B3E4(C)
|
:0040B3F0 8B8D34EDFFFF            mov ecx, dword ptr [ebp+FFFFED34]
:0040B3F6 81E1FFFF0000            and ecx, 0000FFFF
:0040B3FC 894DFC                  mov dword ptr [ebp-04], ecx
:0040B3FF C745F800000000          mov [ebp-08], 00000000
:0040B406 EB09                    jmp 0040B411

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B442(U), :0040B44C(U), :0040B45E(U)
|
:0040B408 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B40B 83C201                  add edx, 00000001
:0040B40E 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B406(U)
|
:0040B411 837DF85A                cmp dword ptr [ebp-08], 0000005A
:0040B415 7D49                    jge 0040B460
:0040B417 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B41A 6BC03C                  imul eax, 0000003C
:0040B41D 81B83C344800FFFF0000    cmp dword ptr [eax+0048343C], 0000FFFF
:0040B427 7435                    je 0040B45E
:0040B429 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B42C 6BC93C                  imul ecx, 0000003C
:0040B42F 8B9144344800            mov edx, dword ptr [ecx+00483444]
:0040B435 83E201                  and edx, 00000001
:0040B438 85D2                    test edx, edx
:0040B43A 740A                    je 0040B446
:0040B43C 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040B440 7402                    je 0040B444
:0040B442 EBC4                    jmp 0040B408

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B440(C)
|
:0040B444 EB08                    jmp 0040B44E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B43A(C)
|
:0040B446 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040B44A 7502                    jne 0040B44E
:0040B44C EBBA                    jmp 0040B408

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B444(U), :0040B44A(C)
|
:0040B44E 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B451 6BC03C                  imul eax, 0000003C
:0040B454 C7803C344800FFFF0000    mov dword ptr [ebx+0048343C], 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B427(C)
|
:0040B45E EBA8                    jmp 0040B408

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B415(C)
|
:0040B460 C745F800000000          mov [ebp-08], 00000000
:0040B467 EB09                    jmp 0040B472

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BC4F(U)
|
:0040B469 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B46C 83C101                  add ecx, 00000001
:0040B46F 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B467(U)
|
:0040B472 837DF83C                cmp dword ptr [ebp-08], 0000003C
:0040B476 0F8DD8070000            jnl 0040BC54

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040B47C 6A02                    push 00000002
:0040B47E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B481 E81B390000              call 0040EDA1
:0040B486 66898520EDFFFF          mov word ptr [ebp+FFFFED20], ax
:0040B48D 8B9520EDFFFF            mov edx, dword ptr [ebp+FFFFED20]
:0040B493 81E2FFFF0000            and edx, 0000FFFF
:0040B499 81FA00800000            cmp edx, 00008000
:0040B49F 750A                    jne 0040B4AB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B4A1 B805000000              mov eax, 00000005
:0040B4A6 E9AE070000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B49F(C)
|
:0040B4AB 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B4AE 6BC050                  imul eax, 00000050
:0040B4B1 668B8D20EDFFFF          mov cx, word ptr [ebp+FFFFED20]
:0040B4B8 66898C0538EDFFFF        mov word ptr [ebp+eax-000012C8], cx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B4C0 6A04                    push 00000004
:0040B4C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B4C5 E8D7380000              call 0040EDA1
:0040B4CA 8985E8ECFFFF            mov dword ptr [ebp+FFFFECE8], eax
:0040B4D0 81BDE8ECFFFF00000080    cmp dword ptr [ebp+FFFFECE8], 80000000
:0040B4DA 750A                    jne 0040B4E6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B4DC B805000000              mov eax, 00000005
:0040B4E1 E973070000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B4DA(C)
|
:0040B4E6 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B4E9 6BD250                  imul edx, 00000050
:0040B4EC 8B85E8ECFFFF            mov eax, dword ptr [ebp+FFFFECE8]
:0040B4F2 8984153CEDFFFF          mov dword ptr [ebp+edx-000012C4], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B4F9 6A04                    push 00000004
:0040B4FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B4FE E89E380000              call 0040EDA1
:0040B503 8985E0ECFFFF            mov dword ptr [ebp+FFFFECE0], eax
:0040B509 81BDE0ECFFFF00000080    cmp dword ptr [ebp+FFFFECE0], 80000000
:0040B513 750A                    jne 0040B51F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B515 B805000000              mov eax, 00000005
:0040B51A E93A070000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B513(C)
|
:0040B51F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B522 6BC950                  imul ecx, 00000050
:0040B525 8B95E0ECFFFF            mov edx, dword ptr [ebp+FFFFECE0]
:0040B52B 89940D40EDFFFF          mov dword ptr [ebp+ecx-000012C0], edx
:0040B532 6A2B                    push 0000002B
:0040B534 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B537 E865380000              call 0040EDA1
:0040B53C 668985FCECFFFF          mov word ptr [ebp+FFFFECFC], ax
:0040B543 8B85FCECFFFF            mov eax, dword ptr [ebp+FFFFECFC]
:0040B549 25FFFF0000              and eax, 0000FFFF
:0040B54E 3D00800000              cmp eax, 00008000
:0040B553 750A                    jne 0040B55F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B555 B805000000              mov eax, 00000005
:0040B55A E9FA060000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B553(C)
|
:0040B55F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B562 6BC950                  imul ecx, 00000050
:0040B565 668B95FCECFFFF          mov dx, word ptr [ebp+FFFFECFC]
:0040B56C 6689940D44EDFFFF        mov word ptr [ebp+ecx-000012BC], dx
:0040B574 6A33                    push 00000033
:0040B576 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B579 E823380000              call 0040EDA1
:0040B57E 66898500EDFFFF          mov word ptr [ebp+FFFFED00], ax
:0040B585 8B8500EDFFFF            mov eax, dword ptr [ebp+FFFFED00]
:0040B58B 25FFFF0000              and eax, 0000FFFF
:0040B590 3D00800000              cmp eax, 00008000
:0040B595 750A                    jne 0040B5A1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B597 B805000000              mov eax, 00000005
:0040B59C E9B8060000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B595(C)
|
:0040B5A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B5A4 6BC950                  imul ecx, 00000050
:0040B5A7 668B9500EDFFFF          mov dx, word ptr [ebp+FFFFED00]
:0040B5AE 6689940D46EDFFFF        mov word ptr [ebp+ecx-000012BA], dx
:0040B5B6 6A26                    push 00000026
:0040B5B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B5BB E8E1370000              call 0040EDA1
:0040B5C0 66898504EDFFFF          mov word ptr [ebp+FFFFED04], ax
:0040B5C7 8B8504EDFFFF            mov eax, dword ptr [ebp+FFFFED04]
:0040B5CD 25FFFF0000              and eax, 0000FFFF
:0040B5D2 3D00800000              cmp eax, 00008000
:0040B5D7 750A                    jne 0040B5E3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B5D9 B805000000              mov eax, 00000005
:0040B5DE E976060000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B5D7(C)
|
:0040B5E3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B5E6 6BC950                  imul ecx, 00000050
:0040B5E9 668B9504EDFFFF          mov dx, word ptr [ebp+FFFFED04]
:0040B5F0 6689940D48EDFFFF        mov word ptr [ebp+ecx-000012B8], dx
:0040B5F8 6A26                    push 00000026
:0040B5FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B5FD E89F370000              call 0040EDA1
:0040B602 6689852CEDFFFF          mov word ptr [ebp+FFFFED2C], ax
:0040B609 8B852CEDFFFF            mov eax, dword ptr [ebp+FFFFED2C]
:0040B60F 25FFFF0000              and eax, 0000FFFF
:0040B614 3D00800000              cmp eax, 00008000
:0040B619 750A                    jne 0040B625

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B61B B805000000              mov eax, 00000005
:0040B620 E934060000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B619(C)
|
:0040B625 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B628 6BC950                  imul ecx, 00000050
:0040B62B 668B952CEDFFFF          mov dx, word ptr [ebp+FFFFED2C]
:0040B632 6689940D4AEDFFFF        mov word ptr [ebp+ecx-000012B6], dx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040B63A 6A07                    push 00000007
:0040B63C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B63F E85D370000              call 0040EDA1
:0040B644 66898518EDFFFF          mov word ptr [ebp+FFFFED18], ax
:0040B64B 8B8518EDFFFF            mov eax, dword ptr [ebp+FFFFED18]
:0040B651 25FFFF0000              and eax, 0000FFFF
:0040B656 3D00800000              cmp eax, 00008000
:0040B65B 750A                    jne 0040B667

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B65D B805000000              mov eax, 00000005
:0040B662 E9F2050000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B65B(C)
|
:0040B667 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B66A 6BC950                  imul ecx, 00000050
:0040B66D 668B9518EDFFFF          mov dx, word ptr [ebp+FFFFED18]
:0040B674 6689940D4CEDFFFF        mov word ptr [ebp+ecx-000012B4], dx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040B67C 6A02                    push 00000002
:0040B67E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B681 E81B370000              call 0040EDA1
:0040B686 6689851CEDFFFF          mov word ptr [ebp+FFFFED1C], ax
:0040B68D 8B851CEDFFFF            mov eax, dword ptr [ebp+FFFFED1C]
:0040B693 25FFFF0000              and eax, 0000FFFF
:0040B698 3D00800000              cmp eax, 00008000
:0040B69D 750A                    jne 0040B6A9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B69F B805000000              mov eax, 00000005
:0040B6A4 E9B0050000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B69D(C)
|
:0040B6A9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B6AC 6BC950                  imul ecx, 00000050
:0040B6AF 668B951CEDFFFF          mov dx, word ptr [ebp+FFFFED1C]
:0040B6B6 6689940D4EEDFFFF        mov word ptr [ebp+ecx-000012B2], dx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B6BE 6A04                    push 00000004
:0040B6C0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B6C3 E8D9360000              call 0040EDA1
:0040B6C8 8985E4ECFFFF            mov dword ptr [ebp+FFFFECE4], eax
:0040B6CE 81BDE4ECFFFF00000080    cmp dword ptr [ebp+FFFFECE4], 80000000
:0040B6D8 750A                    jne 0040B6E4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B6DA B805000000              mov eax, 00000005
:0040B6DF E975050000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B6D8(C)
|
:0040B6E4 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B6E7 6BC050                  imul eax, 00000050
:0040B6EA 8B8DE4ECFFFF            mov ecx, dword ptr [ebp+FFFFECE4]
:0040B6F0 898C0550EDFFFF          mov dword ptr [ebp+eax-000012B0], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B6F7 6A04                    push 00000004
:0040B6F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B6FC E8A0360000              call 0040EDA1
:0040B701 898524EDFFFF            mov dword ptr [ebp+FFFFED24], eax
:0040B707 81BD24EDFFFF00000080    cmp dword ptr [ebp+FFFFED24], 80000000
:0040B711 750A                    jne 0040B71D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B713 B805000000              mov eax, 00000005
:0040B718 E93C050000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B711(C)
|
:0040B71D 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B720 6BD250                  imul edx, 00000050
:0040B723 8B8524EDFFFF            mov eax, dword ptr [ebp+FFFFED24]
:0040B729 89841554EDFFFF          mov dword ptr [ebp+edx-000012AC], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040B730 6A03                    push 00000003
:0040B732 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B735 E867360000              call 0040EDA1
:0040B73A 668985D4ECFFFF          mov word ptr [ebp+FFFFECD4], ax
:0040B741 8B8DD4ECFFFF            mov ecx, dword ptr [ebp+FFFFECD4]
:0040B747 81E1FFFF0000            and ecx, 0000FFFF
:0040B74D 81F900800000            cmp ecx, 00008000
:0040B753 750A                    jne 0040B75F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B755 B805000000              mov eax, 00000005
:0040B75A E9FA040000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B753(C)
|
:0040B75F 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B762 6BD250                  imul edx, 00000050
:0040B765 668B85D4ECFFFF          mov ax, word ptr [ebp+FFFFECD4]
:0040B76C 6689841558EDFFFF        mov word ptr [ebp+edx-000012A8], ax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B774 6A04                    push 00000004
:0040B776 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B779 E823360000              call 0040EDA1
:0040B77E 898530EDFFFF            mov dword ptr [ebp+FFFFED30], eax
:0040B784 81BD30EDFFFF00000080    cmp dword ptr [ebp+FFFFED30], 80000000
:0040B78E 750A                    jne 0040B79A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B790 B805000000              mov eax, 00000005
:0040B795 E9BF040000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B78E(C)
|
:0040B79A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B79D 6BC950                  imul ecx, 00000050
:0040B7A0 8B9530EDFFFF            mov edx, dword ptr [ebp+FFFFED30]
:0040B7A6 89940D5CEDFFFF          mov dword ptr [ebp+ecx-000012A4], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B7AD 6A04                    push 00000004
:0040B7AF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B7B2 E8EA350000              call 0040EDA1
:0040B7B7 8985F0ECFFFF            mov dword ptr [ebp+FFFFECF0], eax
:0040B7BD 81BDF0ECFFFF00000080    cmp dword ptr [ebp+FFFFECF0], 80000000
:0040B7C7 750A                    jne 0040B7D3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B7C9 B805000000              mov eax, 00000005
:0040B7CE E986040000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B7C7(C)
|
:0040B7D3 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B7D6 6BC050                  imul eax, 00000050
:0040B7D9 8B8DF0ECFFFF            mov ecx, dword ptr [ebp+FFFFECF0]
:0040B7DF 898C0560EDFFFF          mov dword ptr [ebp+eax-000012A0], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B7E6 6A04                    push 00000004
:0040B7E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B7EB E8B1350000              call 0040EDA1
:0040B7F0 898514EDFFFF            mov dword ptr [ebp+FFFFED14], eax
:0040B7F6 81BD14EDFFFF00000080    cmp dword ptr [ebp+FFFFED14], 80000000
:0040B800 750A                    jne 0040B80C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B802 B805000000              mov eax, 00000005
:0040B807 E94D040000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B800(C)
|
:0040B80C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B80F 6BD250                  imul edx, 00000050
:0040B812 8B8514EDFFFF            mov eax, dword ptr [ebp+FFFFED14]
:0040B818 89841564EDFFFF          mov dword ptr [ebp+edx-0000129C], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B81F 6A04                    push 00000004
:0040B821 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B824 E878350000              call 0040EDA1
:0040B829 8985F4ECFFFF            mov dword ptr [ebp+FFFFECF4], eax
:0040B82F 81BDF4ECFFFF00000080    cmp dword ptr [ebp+FFFFECF4], 80000000
:0040B839 750A                    jne 0040B845

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B83B B805000000              mov eax, 00000005
:0040B840 E914040000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B839(C)
|
:0040B845 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B848 6BC950                  imul ecx, 00000050
:0040B84B 8B95F4ECFFFF            mov edx, dword ptr [ebp+FFFFECF4]
:0040B851 89940D68EDFFFF          mov dword ptr [ebp+ecx-00001298], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B858 6A04                    push 00000004
:0040B85A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B85D E83F350000              call 0040EDA1
:0040B862 8985DCECFFFF            mov dword ptr [ebp+FFFFECDC], eax
:0040B868 81BDDCECFFFF00000080    cmp dword ptr [ebp+FFFFECDC], 80000000
:0040B872 750A                    jne 0040B87E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B874 B805000000              mov eax, 00000005
:0040B879 E9DB030000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B872(C)
|
:0040B87E 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B881 6BC050                  imul eax, 00000050
:0040B884 8B8DDCECFFFF            mov ecx, dword ptr [ebp+FFFFECDC]
:0040B88A 898C056CEDFFFF          mov dword ptr [ebp+eax-00001294], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B891 6A04                    push 00000004
:0040B893 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B896 E806350000              call 0040EDA1
:0040B89B 8985D8ECFFFF            mov dword ptr [ebp+FFFFECD8], eax
:0040B8A1 81BDD8ECFFFF00000080    cmp dword ptr [ebp+FFFFECD8], 80000000
:0040B8AB 750A                    jne 0040B8B7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B8AD B805000000              mov eax, 00000005
:0040B8B2 E9A2030000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8AB(C)
|
:0040B8B7 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B8BA 6BD250                  imul edx, 00000050
:0040B8BD 8B85D8ECFFFF            mov eax, dword ptr [ebp+FFFFECD8]
:0040B8C3 89841570EDFFFF          mov dword ptr [ebp+edx-00001290], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B8CA 6A04                    push 00000004
:0040B8CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B8CF E8CD340000              call 0040EDA1
:0040B8D4 8985F8ECFFFF            mov dword ptr [ebp+FFFFECF8], eax
:0040B8DA 81BDF8ECFFFF00000080    cmp dword ptr [ebp+FFFFECF8], 80000000
:0040B8E4 750A                    jne 0040B8F0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B8E6 B805000000              mov eax, 00000005
:0040B8EB E969030000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8E4(C)
|
:0040B8F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B8F3 6BC950                  imul ecx, 00000050
:0040B8F6 8B95F8ECFFFF            mov edx, dword ptr [ebp+FFFFECF8]
:0040B8FC 89940D74EDFFFF          mov dword ptr [ebp+ecx-0000128C], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B903 6A04                    push 00000004
:0040B905 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B908 E894340000              call 0040EDA1
:0040B90D 898508EDFFFF            mov dword ptr [ebp+FFFFED08], eax
:0040B913 81BD08EDFFFF00000080    cmp dword ptr [ebp+FFFFED08], 80000000
:0040B91D 750A                    jne 0040B929

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B91F B805000000              mov eax, 00000005
:0040B924 E930030000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B91D(C)
|
:0040B929 8B45F8                  mov eax, dword ptr [ebp-08]
:0040B92C 6BC050                  imul eax, 00000050
:0040B92F 8B8D08EDFFFF            mov ecx, dword ptr [ebp+FFFFED08]
:0040B935 898C0578EDFFFF          mov dword ptr [ebp+eax-00001288], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B93C 6A04                    push 00000004
:0040B93E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B941 E85B340000              call 0040EDA1
:0040B946 8985ECECFFFF            mov dword ptr [ebp+FFFFECEC], eax
:0040B94C 81BDECECFFFF00000080    cmp dword ptr [ebp+FFFFECEC], 80000000
:0040B956 750A                    jne 0040B962

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B958 B805000000              mov eax, 00000005
:0040B95D E9F7020000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B956(C)
|
:0040B962 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B965 6BD250                  imul edx, 00000050
:0040B968 8B85ECECFFFF            mov eax, dword ptr [ebp+FFFFECEC]
:0040B96E 8984157CEDFFFF          mov dword ptr [ebp+edx-00001284], eax
:0040B975 6A17                    push 00000017
:0040B977 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B97A E822340000              call 0040EDA1
:0040B97F 66898528EDFFFF          mov word ptr [ebp+FFFFED28], ax
:0040B986 8B8D28EDFFFF            mov ecx, dword ptr [ebp+FFFFED28]
:0040B98C 81E1FFFF0000            and ecx, 0000FFFF
:0040B992 81F900800000            cmp ecx, 00008000
:0040B998 750A                    jne 0040B9A4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B99A B805000000              mov eax, 00000005
:0040B99F E9B5020000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B998(C)
|
:0040B9A4 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B9A7 6BD250                  imul edx, 00000050
:0040B9AA 668B8528EDFFFF          mov ax, word ptr [ebp+FFFFED28]
:0040B9B1 6689841580EDFFFF        mov word ptr [ebp+edx-00001280], ax
:0040B9B9 6A17                    push 00000017
:0040B9BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B9BE E8DE330000              call 0040EDA1
:0040B9C3 66898510EDFFFF          mov word ptr [ebp+FFFFED10], ax
:0040B9CA 8B8D10EDFFFF            mov ecx, dword ptr [ebp+FFFFED10]
:0040B9D0 81E1FFFF0000            and ecx, 0000FFFF
:0040B9D6 81F900800000            cmp ecx, 00008000
:0040B9DC 750A                    jne 0040B9E8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B9DE B805000000              mov eax, 00000005
:0040B9E3 E971020000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B9DC(C)
|
:0040B9E8 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B9EB 6BD250                  imul edx, 00000050
:0040B9EE 668B8510EDFFFF          mov ax, word ptr [ebp+FFFFED10]
:0040B9F5 6689841582EDFFFF        mov word ptr [ebp+edx-0000127E], ax
:0040B9FD 6A17                    push 00000017
:0040B9FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BA02 E89A330000              call 0040EDA1
:0040BA07 6689850CEDFFFF          mov word ptr [ebp+FFFFED0C], ax
:0040BA0E 8B8D0CEDFFFF            mov ecx, dword ptr [ebp+FFFFED0C]
:0040BA14 81E1FFFF0000            and ecx, 0000FFFF
:0040BA1A 81F900800000            cmp ecx, 00008000
:0040BA20 750A                    jne 0040BA2C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BA22 B805000000              mov eax, 00000005
:0040BA27 E92D020000              jmp 0040BC59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BA20(C)
|
:0040BA2C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040BA2F 6BD250                  imul edx, 00000050
:0040BA32 668B850CEDFFFF          mov ax, word ptr [ebp+FFFFED0C]
:0040BA39 6689841584EDFFFF        mov word ptr [ebp+edx-0000127C], ax
:0040BA41 8B8D20EDFFFF            mov ecx, dword ptr [ebp+FFFFED20]
:0040BA47 81E1FFFF0000            and ecx, 0000FFFF
:0040BA4D 81F9FFFF0000            cmp ecx, 0000FFFF
:0040BA53 0F84F6010000            je 0040BC4F
:0040BA59 C785CCECFFFFFFFFFFFF    mov dword ptr [ebp+FFFFECCC], FFFFFFFF
:0040BA63 C785D0ECFFFF00000000    mov dword ptr [ebp+FFFFECD0], 00000000
:0040BA6D EB0F                    jmp 0040BA7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BAB1(U)
|
:0040BA6F 8B95D0ECFFFF            mov edx, dword ptr [ebp+FFFFECD0]
:0040BA75 83C201                  add edx, 00000001
:0040BA78 8995D0ECFFFF            mov dword ptr [ebp+FFFFECD0], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BA6D(U)
|
:0040BA7E 83BDD0ECFFFF5A          cmp dword ptr [ebp+FFFFECD0], 0000005A
:0040BA85 7D2C                    jge 0040BAB3
:0040BA87 8B85D0ECFFFF            mov eax, dword ptr [ebp+FFFFECD0]
:0040BA8D 6BC03C                  imul eax, 0000003C
:0040BA90 81B83C344800FFFF0000    cmp dword ptr [eax+0048343C], 0000FFFF
:0040BA9A 7515                    jne 0040BAB1
:0040BA9C 83BDCCECFFFFFF          cmp dword ptr [ebp+FFFFECCC], FFFFFFFF
:0040BAA3 750C                    jne 0040BAB1
:0040BAA5 8B8DD0ECFFFF            mov ecx, dword ptr [ebp+FFFFECD0]
:0040BAAB 898DCCECFFFF            mov dword ptr [ebp+FFFFECCC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BA9A(C), :0040BAA3(C)
|
:0040BAB1 EBBC                    jmp 0040BA6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BA85(C)
|
:0040BAB3 8B9520EDFFFF            mov edx, dword ptr [ebp+FFFFED20]
:0040BAB9 81E2FFFF0000            and edx, 0000FFFF
:0040BABF 8B85CCECFFFF            mov eax, dword ptr [ebp+FFFFECCC]
:0040BAC5 6BC03C                  imul eax, 0000003C
:0040BAC8 89903C344800            mov dword ptr [eax+0048343C], edx
:0040BACE 8B8DCCECFFFF            mov ecx, dword ptr [ebp+FFFFECCC]
:0040BAD4 6BC93C                  imul ecx, 0000003C
:0040BAD7 8A95E8ECFFFF            mov dl, byte ptr [ebp+FFFFECE8]
:0040BADD 889140344800            mov byte ptr [ecx+00483440], dl
:0040BAE3 8B85CCECFFFF            mov eax, dword ptr [ebp+FFFFECCC]
:0040BAE9 6BC03C                  imul eax, 0000003C
:0040BAEC 8A8DE0ECFFFF            mov cl, byte ptr [ebp+FFFFECE0]
:0040BAF2 888841344800            mov byte ptr [eax+00483441], cl
:0040BAF8 33D2                    xor edx, edx
:0040BAFA 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040BAFE 0F94C2                  sete dl
:0040BB01 8B852CEDFFFF            mov eax, dword ptr [ebp+FFFFED2C]
:0040BB07 25FFFF0000              and eax, 0000FFFF
:0040BB0C F7D8                    neg eax
:0040BB0E 1BC0                    sbb eax, eax
:0040BB10 83E002                  and eax, 00000002
:0040BB13 0BD0                    or edx, eax
:0040BB15 8B8DFCECFFFF            mov ecx, dword ptr [ebp+FFFFECFC]
:0040BB1B 81E1FFFF0000            and ecx, 0000FFFF
:0040BB21 83E901                  sub ecx, 00000001
:0040BB24 F7D9                    neg ecx
:0040BB26 1BC9                    sbb ecx, ecx
:0040BB28 83E1FC                  and ecx, FFFFFFFC
:0040BB2B 83C104                  add ecx, 00000004
:0040BB2E 0BD1                    or edx, ecx
:0040BB30 8B85CCECFFFF            mov eax, dword ptr [ebp+FFFFECCC]
:0040BB36 6BC03C                  imul eax, 0000003C
:0040BB39 899044344800            mov dword ptr [eax+00483444], edx
:0040BB3F 8B8DCCECFFFF            mov ecx, dword ptr [ebp+FFFFECCC]
:0040BB45 6BC93C                  imul ecx, 0000003C
:0040BB48 8A9518EDFFFF            mov dl, byte ptr [ebp+FFFFED18]
:0040BB4E 889148344800            mov byte ptr [ecx+00483448], dl
:0040BB54 8B85CCECFFFF            mov eax, dword ptr [ebp+FFFFECCC]
:0040BB5A 6BC03C                  imul eax, 0000003C
:0040BB5D 8A8D00EDFFFF            mov cl, byte ptr [ebp+FFFFED00]
:0040BB63 88884E344800            mov byte ptr [eax+0048344E], cl
:0040BB69 8B95CCECFFFF            mov edx, dword ptr [ebp+FFFFECCC]
:0040BB6F 6BD23C                  imul edx, 0000003C
:0040BB72 8A85D4ECFFFF            mov al, byte ptr [ebp+FFFFECD4]
:0040BB78 88824C344800            mov byte ptr [edx+0048344C], al
:0040BB7E 8B8DCCECFFFF            mov ecx, dword ptr [ebp+FFFFECCC]
:0040BB84 6BC93C                  imul ecx, 0000003C
:0040BB87 8A9530EDFFFF            mov dl, byte ptr [ebp+FFFFED30]
:0040BB8D 88914D344800            mov byte ptr [ecx+0048344D], dl
:0040BB93 8B8528EDFFFF            mov eax, dword ptr [ebp+FFFFED28]
:0040BB99 25FFFF0000              and eax, 0000FFFF
:0040BB9E 8B8DCCECFFFF            mov ecx, dword ptr [ebp+FFFFECCC]
:0040BBA4 6BC93C                  imul ecx, 0000003C
:0040BBA7 898150344800            mov dword ptr [ecx+00483450], eax
:0040BBAD 8B9510EDFFFF            mov edx, dword ptr [ebp+FFFFED10]
:0040BBB3 81E2FFFF0000            and edx, 0000FFFF
:0040BBB9 8B85CCECFFFF            mov eax, dword ptr [ebp+FFFFECCC]
:0040BBBF 6BC03C                  imul eax, 0000003C
:0040BBC2 899054344800            mov dword ptr [eax+00483454], edx
:0040BBC8 8B8D0CEDFFFF            mov ecx, dword ptr [ebp+FFFFED0C]
:0040BBCE 81E1FFFF0000            and ecx, 0000FFFF
:0040BBD4 8B95CCECFFFF            mov edx, dword ptr [ebp+FFFFECCC]
:0040BBDA 6BD23C                  imul edx, 0000003C
:0040BBDD 898A58344800            mov dword ptr [edx+00483458], ecx
:0040BBE3 8B8518EDFFFF            mov eax, dword ptr [ebp+FFFFED18]
:0040BBE9 25FFFF0000              and eax, 0000FFFF
:0040BBEE 8985C8ECFFFF            mov dword ptr [ebp+FFFFECC8], eax
:0040BBF4 83BDC8ECFFFF06          cmp dword ptr [ebp+FFFFECC8], 00000006
:0040BBFB 7752                    ja 0040BC4F
:0040BBFD 8B8DC8ECFFFF            mov ecx, dword ptr [ebp+FFFFECC8]
:0040BC03 FF248D5DBC4000          jmp dword ptr [4*ecx+0040BC5D]
:0040BC0A EB43                    jmp 0040BC4F
:0040BC0C 8B95CCECFFFF            mov edx, dword ptr [ebp+FFFFECCC]
:0040BC12 6BD23C                  imul edx, 0000003C
:0040BC15 668B851CEDFFFF          mov ax, word ptr [ebp+FFFFED1C]
:0040BC1C 6689824A344800          mov word ptr [edx+0048344A], ax
:0040BC23 EB2A                    jmp 0040BC4F
:0040BC25 8B8DCCECFFFF            mov ecx, dword ptr [ebp+FFFFECCC]
:0040BC2B 6BC93C                  imul ecx, 0000003C
:0040BC2E 8A95E4ECFFFF            mov dl, byte ptr [ebp+FFFFECE4]
:0040BC34 88914A344800            mov byte ptr [ecx+0048344A], dl
:0040BC3A 8B85CCECFFFF            mov eax, dword ptr [ebp+FFFFECCC]
:0040BC40 6BC03C                  imul eax, 0000003C
:0040BC43 8A8D24EDFFFF            mov cl, byte ptr [ebp+FFFFED24]
:0040BC49 88884B344800            mov byte ptr [eax+0048344B], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BA53(C), :0040BBFB(C), :0040BC0A(U), :0040BC23(U)
|
:0040BC4F E915F8FFFF              jmp 0040B469

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B476(C)
|
:0040BC54 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B3EB(U), :0040B4A6(U), :0040B4E1(U), :0040B51A(U), :0040B55A(U)
|:0040B59C(U), :0040B5DE(U), :0040B620(U), :0040B662(U), :0040B6A4(U)
|:0040B6DF(U), :0040B718(U), :0040B75A(U), :0040B795(U), :0040B7CE(U)
|:0040B807(U), :0040B840(U), :0040B879(U), :0040B8B2(U), :0040B8EB(U)
|:0040B924(U), :0040B95D(U), :0040B99F(U), :0040B9E3(U), :0040BA27(U)
|
:0040BC59 8BE5                    mov esp, ebp
:0040BC5B 5D                      pop ebp
:0040BC5C C3                      ret



:0040BC5D 0ABC4000                DWORD 0040BC0A
:0040BC61 4FBC4000                DWORD 0040BC4F
:0040BC65 4FBC4000                DWORD 0040BC4F
:0040BC69 0CBC4000                DWORD 0040BC0C
:0040BC6D 25BC4000                DWORD 0040BC25
:0040BC71 0CBC4000                DWORD 0040BC0C
:0040BC75 25BC4000                DWORD 0040BC25



* Referenced by a CALL at Address:
|:00408F75   
|
:0040BC79 55                      push ebp
:0040BC7A 8BEC                    mov ebp, esp
:0040BC7C 83EC0C                  sub esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BC7F 6A04                    push 00000004
:0040BC81 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BC84 E818310000              call 0040EDA1
:0040BC89 8945F8                  mov dword ptr [ebp-08], eax
:0040BC8C 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040BC93 7507                    jne 0040BC9C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BC95 B805000000              mov eax, 00000005
:0040BC9A EB46                    jmp 0040BCE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BC93(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BC9C 6A04                    push 00000004
:0040BC9E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BCA1 E8FB300000              call 0040EDA1
:0040BCA6 8945F4                  mov dword ptr [ebp-0C], eax
:0040BCA9 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040BCB0 7507                    jne 0040BCB9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BCB2 B805000000              mov eax, 00000005
:0040BCB7 EB29                    jmp 0040BCE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BCB0(C)
|

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0040BCB9 6A0B                    push 0000000B
:0040BCBB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BCBE E8DE300000              call 0040EDA1
:0040BCC3 668945FC                mov word ptr [ebp-04], ax
:0040BCC7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040BCCA 25FFFF0000              and eax, 0000FFFF
:0040BCCF 3D00800000              cmp eax, 00008000
:0040BCD4 7507                    jne 0040BCDD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BCD6 B805000000              mov eax, 00000005
:0040BCDB EB05                    jmp 0040BCE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BCD4(C)
|
:0040BCDD B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BC9A(U), :0040BCB7(U), :0040BCDB(U)
|
:0040BCE2 8BE5                    mov esp, ebp
:0040BCE4 5D                      pop ebp
:0040BCE5 C3                      ret



* Referenced by a CALL at Address:
|:00408F86   
|
:0040BCE6 55                      push ebp
:0040BCE7 8BEC                    mov ebp, esp
:0040BCE9 83EC14                  sub esp, 00000014

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040BCEC 6A02                    push 00000002
:0040BCEE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BCF1 E8AB300000              call 0040EDA1
:0040BCF6 668945FC                mov word ptr [ebp-04], ax
:0040BCFA 8B45FC                  mov eax, dword ptr [ebp-04]
:0040BCFD 25FFFF0000              and eax, 0000FFFF
:0040BD02 3D00800000              cmp eax, 00008000
:0040BD07 750A                    jne 0040BD13

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BD09 B805000000              mov eax, 00000005
:0040BD0E E9DB000000              jmp 0040BDEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD07(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BD13 6A04                    push 00000004
:0040BD15 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BD18 E884300000              call 0040EDA1
:0040BD1D 8945F0                  mov dword ptr [ebp-10], eax
:0040BD20 817DF000000080          cmp dword ptr [ebp-10], 80000000
:0040BD27 750A                    jne 0040BD33

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BD29 B805000000              mov eax, 00000005
:0040BD2E E9BB000000              jmp 0040BDEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD27(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BD33 6A04                    push 00000004
:0040BD35 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BD38 E864300000              call 0040EDA1
:0040BD3D 8945EC                  mov dword ptr [ebp-14], eax
:0040BD40 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040BD47 750A                    jne 0040BD53

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BD49 B805000000              mov eax, 00000005
:0040BD4E E99B000000              jmp 0040BDEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD47(C)
|
:0040BD53 6A2B                    push 0000002B
:0040BD55 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BD58 E844300000              call 0040EDA1
:0040BD5D 668945F8                mov word ptr [ebp-08], ax
:0040BD61 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040BD64 81E1FFFF0000            and ecx, 0000FFFF
:0040BD6A 81F900800000            cmp ecx, 00008000
:0040BD70 7507                    jne 0040BD79

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BD72 B805000000              mov eax, 00000005
:0040BD77 EB75                    jmp 0040BDEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD70(C)
|

* Possible Reference to String Resource ID=00013: ""
                                  |
:0040BD79 6A0D                    push 0000000D
:0040BD7B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BD7E E81E300000              call 0040EDA1
:0040BD83 668945F4                mov word ptr [ebp-0C], ax
:0040BD87 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040BD8A 81E2FFFF0000            and edx, 0000FFFF
:0040BD90 81FA00800000            cmp edx, 00008000
:0040BD96 7507                    jne 0040BD9F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BD98 B805000000              mov eax, 00000005
:0040BD9D EB4F                    jmp 0040BDEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD96(C)
|
:0040BD9F E86EAB0000              call 00416912
:0040BDA4 85C0                    test eax, eax
:0040BDA6 7525                    jne 0040BDCD
:0040BDA8 668B45F4                mov ax, word ptr [ebp-0C]
:0040BDAC 50                      push eax
:0040BDAD 668B4DF8                mov cx, word ptr [ebp-08]
:0040BDB1 51                      push ecx
:0040BDB2 6A00                    push 00000000
:0040BDB4 668B55EC                mov dx, word ptr [ebp-14]
:0040BDB8 52                      push edx
:0040BDB9 668B45F0                mov ax, word ptr [ebp-10]
:0040BDBD 50                      push eax
:0040BDBE 668B4DFC                mov cx, word ptr [ebp-04]
:0040BDC2 51                      push ecx
:0040BDC3 E82C760100              call 004233F4
:0040BDC8 83C418                  add esp, 00000018
:0040BDCB EB1C                    jmp 0040BDE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BDA6(C)
|
:0040BDCD 8A55EC                  mov dl, byte ptr [ebp-14]
:0040BDD0 52                      push edx
:0040BDD1 8A45F0                  mov al, byte ptr [ebp-10]
:0040BDD4 50                      push eax
:0040BDD5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040BDD8 81E1FFFF0000            and ecx, 0000FFFF
:0040BDDE 51                      push ecx
:0040BDDF B9880B4B00              mov ecx, 004B0B88
:0040BDE4 E8BFCB0400              call 004589A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BDCB(U)
|
:0040BDE9 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BD0E(U), :0040BD2E(U), :0040BD4E(U), :0040BD77(U), :0040BD9D(U)
|
:0040BDEE 8BE5                    mov esp, ebp
:0040BDF0 5D                      pop ebp
:0040BDF1 C3                      ret



* Referenced by a CALL at Address:
|:00408F97   
|
:0040BDF2 55                      push ebp
:0040BDF3 8BEC                    mov ebp, esp
:0040BDF5 83EC1C                  sub esp, 0000001C
:0040BDF8 6A2C                    push 0000002C
:0040BDFA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BDFD E89F2F0000              call 0040EDA1
:0040BE02 668945F0                mov word ptr [ebp-10], ax
:0040BE06 8B45F0                  mov eax, dword ptr [ebp-10]
:0040BE09 25FFFF0000              and eax, 0000FFFF
:0040BE0E 3D00800000              cmp eax, 00008000
:0040BE13 750A                    jne 0040BE1F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BE15 B805000000              mov eax, 00000005
:0040BE1A E91B010000              jmp 0040BF3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE13(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040BE1F 6A02                    push 00000002
:0040BE21 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BE24 E8782F0000              call 0040EDA1
:0040BE29 668945FC                mov word ptr [ebp-04], ax
:0040BE2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040BE30 81E1FFFF0000            and ecx, 0000FFFF
:0040BE36 81F900800000            cmp ecx, 00008000
:0040BE3C 750A                    jne 0040BE48

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BE3E B805000000              mov eax, 00000005
:0040BE43 E9F2000000              jmp 0040BF3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE3C(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BE48 6A04                    push 00000004
:0040BE4A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BE4D E84F2F0000              call 0040EDA1
:0040BE52 8945EC                  mov dword ptr [ebp-14], eax
:0040BE55 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040BE5C 750A                    jne 0040BE68

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BE5E B805000000              mov eax, 00000005
:0040BE63 E9D2000000              jmp 0040BF3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE5C(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BE68 6A04                    push 00000004
:0040BE6A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BE6D E82F2F0000              call 0040EDA1
:0040BE72 8945E4                  mov dword ptr [ebp-1C], eax
:0040BE75 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040BE7C 750A                    jne 0040BE88

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BE7E B805000000              mov eax, 00000005
:0040BE83 E9B2000000              jmp 0040BF3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE7C(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BE88 6A04                    push 00000004
:0040BE8A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BE8D E80F2F0000              call 0040EDA1
:0040BE92 8945F8                  mov dword ptr [ebp-08], eax
:0040BE95 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040BE9C 750A                    jne 0040BEA8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BE9E B805000000              mov eax, 00000005
:0040BEA3 E992000000              jmp 0040BF3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE9C(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BEA8 6A04                    push 00000004
:0040BEAA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BEAD E8EF2E0000              call 0040EDA1
:0040BEB2 8945F4                  mov dword ptr [ebp-0C], eax
:0040BEB5 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040BEBC 7507                    jne 0040BEC5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BEBE B805000000              mov eax, 00000005
:0040BEC3 EB75                    jmp 0040BF3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BEBC(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040BEC5 6A03                    push 00000003
:0040BEC7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BECA E8D22E0000              call 0040EDA1
:0040BECF 668945E8                mov word ptr [ebp-18], ax
:0040BED3 8B55E8                  mov edx, dword ptr [ebp-18]
:0040BED6 81E2FFFF0000            and edx, 0000FFFF
:0040BEDC 81FA00800000            cmp edx, 00008000
:0040BEE2 7507                    jne 0040BEEB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BEE4 B805000000              mov eax, 00000005
:0040BEE9 EB4F                    jmp 0040BF3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BEE2(C)
|
:0040BEEB 8B45F0                  mov eax, dword ptr [ebp-10]
:0040BEEE 25FFFF0000              and eax, 0000FFFF
:0040BEF3 85C0                    test eax, eax
:0040BEF5 7517                    jne 0040BF0E
:0040BEF7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040BEFA 81E1FFFF0000            and ecx, 0000FFFF
:0040BF00 80CD10                  or ch, 10
:0040BF03 51                      push ecx
:0040BF04 E8E16F0100              call 00422EEA
:0040BF09 83C404                  add esp, 00000004
:0040BF0C EB27                    jmp 0040BF35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BEF5(C)
|
:0040BF0E E8FFA90000              call 00416912
:0040BF13 85C0                    test eax, eax
:0040BF15 741E                    je 0040BF35
:0040BF17 8A55E8                  mov dl, byte ptr [ebp-18]
:0040BF1A 52                      push edx
:0040BF1B 8A45F4                  mov al, byte ptr [ebp-0C]
:0040BF1E 50                      push eax
:0040BF1F 8A4DF8                  mov cl, byte ptr [ebp-08]
:0040BF22 51                      push ecx
:0040BF23 8A55E4                  mov dl, byte ptr [ebp-1C]
:0040BF26 52                      push edx
:0040BF27 8A45EC                  mov al, byte ptr [ebp-14]
:0040BF2A 50                      push eax
:0040BF2B B9880B4B00              mov ecx, 004B0B88
:0040BF30 E8ECD90400              call 00459921

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BF0C(U), :0040BF15(C)
|
:0040BF35 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BE1A(U), :0040BE43(U), :0040BE63(U), :0040BE83(U), :0040BEA3(U)
|:0040BEC3(U), :0040BEE9(U)
|
:0040BF3A 8BE5                    mov esp, ebp
:0040BF3C 5D                      pop ebp
:0040BF3D C3                      ret



* Referenced by a CALL at Address:
|:00408FA8   
|
:0040BF3E 55                      push ebp
:0040BF3F 8BEC                    mov ebp, esp
:0040BF41 83EC18                  sub esp, 00000018

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040BF44 6A02                    push 00000002
:0040BF46 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BF49 E8532E0000              call 0040EDA1
:0040BF4E 668945FC                mov word ptr [ebp-04], ax
:0040BF52 8B45FC                  mov eax, dword ptr [ebp-04]
:0040BF55 25FFFF0000              and eax, 0000FFFF
:0040BF5A 3D00800000              cmp eax, 00008000
:0040BF5F 750A                    jne 0040BF6B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BF61 B805000000              mov eax, 00000005
:0040BF66 E91D010000              jmp 0040C088

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BF5F(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BF6B 6A04                    push 00000004
:0040BF6D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BF70 E82C2E0000              call 0040EDA1
:0040BF75 8945F4                  mov dword ptr [ebp-0C], eax
:0040BF78 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040BF7F 750A                    jne 0040BF8B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BF81 B805000000              mov eax, 00000005
:0040BF86 E9FD000000              jmp 0040C088

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BF7F(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BF8B 6A04                    push 00000004
:0040BF8D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BF90 E80C2E0000              call 0040EDA1
:0040BF95 8945F0                  mov dword ptr [ebp-10], eax
:0040BF98 817DF000000080          cmp dword ptr [ebp-10], 80000000
:0040BF9F 750A                    jne 0040BFAB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BFA1 B805000000              mov eax, 00000005
:0040BFA6 E9DD000000              jmp 0040C088

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BF9F(C)
|
:0040BFAB 6A2B                    push 0000002B
:0040BFAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BFB0 E8EC2D0000              call 0040EDA1
:0040BFB5 668945F8                mov word ptr [ebp-08], ax
:0040BFB9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040BFBC 81E1FFFF0000            and ecx, 0000FFFF
:0040BFC2 81F900800000            cmp ecx, 00008000
:0040BFC8 750A                    jne 0040BFD4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040BFCA B805000000              mov eax, 00000005
:0040BFCF E9B4000000              jmp 0040C088

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BFC8(C)
|
:0040BFD4 E839A90000              call 00416912
:0040BFD9 85C0                    test eax, eax
:0040BFDB 745D                    je 0040C03A
:0040BFDD C645ECFF                mov [ebp-14], FF
:0040BFE1 8B55F8                  mov edx, dword ptr [ebp-08]
:0040BFE4 81E2FFFF0000            and edx, 0000FFFF
:0040BFEA 8955E8                  mov dword ptr [ebp-18], edx
:0040BFED 837DE803                cmp dword ptr [ebp-18], 00000003
:0040BFF1 7720                    ja 0040C013
:0040BFF3 8B45E8                  mov eax, dword ptr [ebp-18]
:0040BFF6 FF24858CC04000          jmp dword ptr [4*eax+0040C08C]
:0040BFFD C645EC00                mov [ebp-14], 00
:0040C001 EB10                    jmp 0040C013
:0040C003 C645EC01                mov [ebp-14], 01
:0040C007 EB0A                    jmp 0040C013
:0040C009 C645EC02                mov [ebp-14], 02
:0040C00D EB04                    jmp 0040C013
:0040C00F C645EC03                mov [ebp-14], 03

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BFF1(C), :0040C001(U), :0040C007(U), :0040C00D(U)
|
:0040C013 8A4DEC                  mov cl, byte ptr [ebp-14]
:0040C016 51                      push ecx
:0040C017 8A55F0                  mov dl, byte ptr [ebp-10]
:0040C01A 52                      push edx
:0040C01B 8A45F4                  mov al, byte ptr [ebp-0C]
:0040C01E 50                      push eax
:0040C01F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C022 81E1FFFF0000            and ecx, 0000FFFF
:0040C028 51                      push ecx
:0040C029 B9880B4B00              mov ecx, 004B0B88
:0040C02E E85CCC0400              call 00458C8F
:0040C033 B801000000              mov eax, 00000001
:0040C038 EB4E                    jmp 0040C088

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BFDB(C)
|
:0040C03A 668B55F8                mov dx, word ptr [ebp-08]
:0040C03E 52                      push edx
:0040C03F 668B45F0                mov ax, word ptr [ebp-10]
:0040C043 50                      push eax
:0040C044 668B4DF4                mov cx, word ptr [ebp-0C]
:0040C048 51                      push ecx
:0040C049 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C04C 81E2FFFF0000            and edx, 0000FFFF
:0040C052 80CE10                  or dh, 10
:0040C055 52                      push edx
:0040C056 E8F3740100              call 0042354E
:0040C05B 83C410                  add esp, 00000010
:0040C05E B9F8134800              mov ecx, 004813F8
:0040C063 E818310000              call 0040F180
:0040C068 25FFFF0000              and eax, 0000FFFF
:0040C06D 83F821                  cmp eax, 00000021
:0040C070 7511                    jne 0040C083
:0040C072 6A00                    push 00000000
:0040C074 E8DBAE0100              call 00426F54
:0040C079 83C404                  add esp, 00000004
:0040C07C B801000000              mov eax, 00000001
:0040C081 EB05                    jmp 0040C088

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C070(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040C083 B802000000              mov eax, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BF66(U), :0040BF86(U), :0040BFA6(U), :0040BFCF(U), :0040C038(U)
|:0040C081(U)
|
:0040C088 8BE5                    mov esp, ebp
:0040C08A 5D                      pop ebp
:0040C08B C3                      ret



:0040C08C FDBF4000                DWORD 0040BFFD
:0040C090 03C04000                DWORD 0040C003
:0040C094 09C04000                DWORD 0040C009
:0040C098 0FC04000                DWORD 0040C00F



* Referenced by a CALL at Address:
|:00408FB9   
|
:0040C09C 55                      push ebp
:0040C09D 8BEC                    mov ebp, esp
:0040C09F 83EC0C                  sub esp, 0000000C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040C0A2 6A02                    push 00000002
:0040C0A4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C0A7 E8F52C0000              call 0040EDA1
:0040C0AC 668945FC                mov word ptr [ebp-04], ax
:0040C0B0 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C0B3 25FFFF0000              and eax, 0000FFFF
:0040C0B8 3D00800000              cmp eax, 00008000
:0040C0BD 7507                    jne 0040C0C6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C0BF B805000000              mov eax, 00000005
:0040C0C4 EB70                    jmp 0040C136

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C0BD(C)
|

* Possible Reference to String Resource ID=00013: ""
                                  |
:0040C0C6 6A0D                    push 0000000D
:0040C0C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C0CB E8D12C0000              call 0040EDA1
:0040C0D0 668945F4                mov word ptr [ebp-0C], ax
:0040C0D4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040C0D7 81E1FFFF0000            and ecx, 0000FFFF
:0040C0DD 81F900800000            cmp ecx, 00008000
:0040C0E3 7507                    jne 0040C0EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C0E5 B805000000              mov eax, 00000005
:0040C0EA EB4A                    jmp 0040C136

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C0E3(C)
|
:0040C0EC 6A2B                    push 0000002B
:0040C0EE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C0F1 E8AB2C0000              call 0040EDA1
:0040C0F6 668945F8                mov word ptr [ebp-08], ax
:0040C0FA 8B55F8                  mov edx, dword ptr [ebp-08]
:0040C0FD 81E2FFFF0000            and edx, 0000FFFF
:0040C103 81FA00800000            cmp edx, 00008000
:0040C109 7507                    jne 0040C112

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C10B B805000000              mov eax, 00000005
:0040C110 EB24                    jmp 0040C136

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C109(C)
|
:0040C112 668B45F8                mov ax, word ptr [ebp-08]
:0040C116 50                      push eax
:0040C117 668B4DF4                mov cx, word ptr [ebp-0C]
:0040C11B 51                      push ecx
:0040C11C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C11F 81E2FFFF0000            and edx, 0000FFFF
:0040C125 80CE10                  or dh, 10
:0040C128 52                      push edx
:0040C129 E8216E0100              call 00422F4F
:0040C12E 83C40C                  add esp, 0000000C
:0040C131 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C0C4(U), :0040C0EA(U), :0040C110(U)
|
:0040C136 8BE5                    mov esp, ebp
:0040C138 5D                      pop ebp
:0040C139 C3                      ret



* Referenced by a CALL at Address:
|:00408FCA   
|
:0040C13A 55                      push ebp
:0040C13B 8BEC                    mov ebp, esp
:0040C13D 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040C140 6A02                    push 00000002
:0040C142 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C145 E8572C0000              call 0040EDA1
:0040C14A 668945FC                mov word ptr [ebp-04], ax
:0040C14E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C151 25FFFF0000              and eax, 0000FFFF
:0040C156 3D00800000              cmp eax, 00008000
:0040C15B 7507                    jne 0040C164

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C15D B805000000              mov eax, 00000005
:0040C162 EB49                    jmp 0040C1AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C15B(C)
|

* Possible Reference to String Resource ID=00013: ""
                                  |
:0040C164 6A0D                    push 0000000D
:0040C166 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C169 E8332C0000              call 0040EDA1
:0040C16E 668945F8                mov word ptr [ebp-08], ax
:0040C172 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C175 81E1FFFF0000            and ecx, 0000FFFF
:0040C17B 81F900800000            cmp ecx, 00008000
:0040C181 7507                    jne 0040C18A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C183 B805000000              mov eax, 00000005
:0040C188 EB23                    jmp 0040C1AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C181(C)
|
:0040C18A 68FFFF0000              push 0000FFFF
:0040C18F 668B55F8                mov dx, word ptr [ebp-08]
:0040C193 52                      push edx
:0040C194 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C197 25FFFF0000              and eax, 0000FFFF
:0040C19C 80CC10                  or ah, 10
:0040C19F 50                      push eax
:0040C1A0 E8AA6D0100              call 00422F4F
:0040C1A5 83C40C                  add esp, 0000000C
:0040C1A8 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C162(U), :0040C188(U)
|
:0040C1AD 8BE5                    mov esp, ebp
:0040C1AF 5D                      pop ebp
:0040C1B0 C3                      ret



* Referenced by a CALL at Address:
|:00408FDB   
|
:0040C1B1 55                      push ebp
:0040C1B2 8BEC                    mov ebp, esp
:0040C1B4 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040C1B7 6A02                    push 00000002
:0040C1B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C1BC E8E02B0000              call 0040EDA1
:0040C1C1 668945FC                mov word ptr [ebp-04], ax
:0040C1C5 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C1C8 25FFFF0000              and eax, 0000FFFF
:0040C1CD 3D00800000              cmp eax, 00008000
:0040C1D2 7507                    jne 0040C1DB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C1D4 B805000000              mov eax, 00000005
:0040C1D9 EB46                    jmp 0040C221

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C1D2(C)
|
:0040C1DB 6A13                    push 00000013
:0040C1DD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C1E0 E8BC2B0000              call 0040EDA1
:0040C1E5 668945F8                mov word ptr [ebp-08], ax
:0040C1E9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1EC 81E1FFFF0000            and ecx, 0000FFFF
:0040C1F2 81F900800000            cmp ecx, 00008000
:0040C1F8 7507                    jne 0040C201

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C1FA B805000000              mov eax, 00000005
:0040C1FF EB20                    jmp 0040C221

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C1F8(C)
|
:0040C201 8A55F8                  mov dl, byte ptr [ebp-08]
:0040C204 52                      push edx
:0040C205 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C208 81E1FFFF0000            and ecx, 0000FFFF
:0040C20E 6BC970                  imul ecx, 00000070
:0040C211 81C198224900            add ecx, 00492298
:0040C217 E894300000              call 0040F2B0
:0040C21C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C1D9(U), :0040C1FF(U)
|
:0040C221 8BE5                    mov esp, ebp
:0040C223 5D                      pop ebp
:0040C224 C3                      ret



* Referenced by a CALL at Address:
|:00408FEC   
|
:0040C225 55                      push ebp
:0040C226 8BEC                    mov ebp, esp
:0040C228 83EC20                  sub esp, 00000020
:0040C22B 6A2D                    push 0000002D
:0040C22D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C230 E86C2B0000              call 0040EDA1
:0040C235 668945FC                mov word ptr [ebp-04], ax
:0040C239 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C23C 25FFFF0000              and eax, 0000FFFF
:0040C241 3D00800000              cmp eax, 00008000
:0040C246 750A                    jne 0040C252

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C248 B805000000              mov eax, 00000005
:0040C24D E958010000              jmp 0040C3AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C246(C)
|

* Possible Reference to String Resource ID=00012: ""
                                  |
:0040C252 6A0C                    push 0000000C
:0040C254 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C257 E8452B0000              call 0040EDA1
:0040C25C 668945EC                mov word ptr [ebp-14], ax
:0040C260 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C263 81E1FFFF0000            and ecx, 0000FFFF
:0040C269 81F900800000            cmp ecx, 00008000
:0040C26F 750A                    jne 0040C27B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C271 B805000000              mov eax, 00000005
:0040C276 E92F010000              jmp 0040C3AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C26F(C)
|
:0040C27B 6A1A                    push 0000001A
:0040C27D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C280 E81C2B0000              call 0040EDA1
:0040C285 668945F4                mov word ptr [ebp-0C], ax
:0040C289 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040C28C 81E2FFFF0000            and edx, 0000FFFF
:0040C292 81FA00800000            cmp edx, 00008000
:0040C298 750A                    jne 0040C2A4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C29A B805000000              mov eax, 00000005
:0040C29F E906010000              jmp 0040C3AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C298(C)
|
:0040C2A4 6A1C                    push 0000001C
:0040C2A6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C2A9 E8F32A0000              call 0040EDA1
:0040C2AE 668945F8                mov word ptr [ebp-08], ax
:0040C2B2 8B45F8                  mov eax, dword ptr [ebp-08]
:0040C2B5 25FFFF0000              and eax, 0000FFFF
:0040C2BA 3D00800000              cmp eax, 00008000
:0040C2BF 750A                    jne 0040C2CB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C2C1 B805000000              mov eax, 00000005
:0040C2C6 E9DF000000              jmp 0040C3AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C2BF(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040C2CB 6A04                    push 00000004
:0040C2CD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C2D0 E8CC2A0000              call 0040EDA1
:0040C2D5 8945E8                  mov dword ptr [ebp-18], eax
:0040C2D8 817DE800000080          cmp dword ptr [ebp-18], 80000000
:0040C2DF 750A                    jne 0040C2EB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C2E1 B805000000              mov eax, 00000005
:0040C2E6 E9BF000000              jmp 0040C3AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C2DF(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040C2EB 6A04                    push 00000004
:0040C2ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C2F0 E8AC2A0000              call 0040EDA1
:0040C2F5 8945E4                  mov dword ptr [ebp-1C], eax
:0040C2F8 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040C2FF 750A                    jne 0040C30B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C301 B805000000              mov eax, 00000005
:0040C306 E99F000000              jmp 0040C3AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C2FF(C)
|
:0040C30B 6A2B                    push 0000002B
:0040C30D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C310 E88C2A0000              call 0040EDA1
:0040C315 668945F0                mov word ptr [ebp-10], ax
:0040C319 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040C31C 81E1FFFF0000            and ecx, 0000FFFF
:0040C322 81F900800000            cmp ecx, 00008000
:0040C328 7507                    jne 0040C331

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C32A B805000000              mov eax, 00000005
:0040C32F EB79                    jmp 0040C3AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C328(C)
|
:0040C331 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C334 81E2FFFF0000            and edx, 0000FFFF
:0040C33A 8955E0                  mov dword ptr [ebp-20], edx
:0040C33D 837DE000                cmp dword ptr [ebp-20], 00000000
:0040C341 7422                    je 0040C365
:0040C343 837DE001                cmp dword ptr [ebp-20], 00000001
:0040C347 7430                    je 0040C379
:0040C349 837DE002                cmp dword ptr [ebp-20], 00000002
:0040C34D 7402                    je 0040C351
:0040C34F EB3A                    jmp 0040C38B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C34D(C)
|
:0040C351 668B45EC                mov ax, word ptr [ebp-14]
:0040C355 50                      push eax
:0040C356 668B4DF8                mov cx, word ptr [ebp-08]
:0040C35A 51                      push ecx
:0040C35B E832A60000              call 00416992
:0040C360 83C408                  add esp, 00000008
:0040C363 EB26                    jmp 0040C38B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C341(C)
|
:0040C365 668B55EC                mov dx, word ptr [ebp-14]
:0040C369 52                      push edx
:0040C36A 668B45F8                mov ax, word ptr [ebp-08]
:0040C36E 50                      push eax
:0040C36F E8A3A60000              call 00416A17
:0040C374 83C408                  add esp, 00000008
:0040C377 EB12                    jmp 0040C38B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C347(C)
|
:0040C379 668B4DEC                mov cx, word ptr [ebp-14]
:0040C37D 51                      push ecx
:0040C37E 668B55F8                mov dx, word ptr [ebp-08]
:0040C382 52                      push edx
:0040C383 E8C7A50000              call 0041694F
:0040C388 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C34F(U), :0040C363(U), :0040C377(U)
|
:0040C38B 6A01                    push 00000001
:0040C38D B918DA4A00              mov ecx, 004ADA18
:0040C392 E889380200              call 0042FC20
:0040C397 8A45EC                  mov al, byte ptr [ebp-14]
:0040C39A 50                      push eax
:0040C39B B918DA4A00              mov ecx, 004ADA18
:0040C3A0 E8FBD70200              call 00439BA0
:0040C3A5 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C24D(U), :0040C276(U), :0040C29F(U), :0040C2C6(U), :0040C2E6(U)
|:0040C306(U), :0040C32F(U)
|
:0040C3AA 8BE5                    mov esp, ebp
:0040C3AC 5D                      pop ebp
:0040C3AD C3                      ret



* Referenced by a CALL at Address:
|:00408FFD   
|
:0040C3AE 55                      push ebp
:0040C3AF 8BEC                    mov ebp, esp
:0040C3B1 E8B64C0100              call 0042106C
:0040C3B6 B801000000              mov eax, 00000001
:0040C3BB 5D                      pop ebp
:0040C3BC C3                      ret



* Referenced by a CALL at Address:
|:0040900E   
|
:0040C3BD 55                      push ebp
:0040C3BE 8BEC                    mov ebp, esp
:0040C3C0 81EC5C040000            sub esp, 0000045C
:0040C3C6 66C785A8FBFFFFFFFF      mov word ptr [ebp+FFFFFBA8], FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C3CF 6A05                    push 00000005
:0040C3D1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C3D4 E8C8290000              call 0040EDA1
:0040C3D9 8945F8                  mov dword ptr [ebp-08], eax
:0040C3DC 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040C3E3 750A                    jne 0040C3EF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C3E5 B805000000              mov eax, 00000005
:0040C3EA E964020000              jmp 0040C653

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C3E3(C)
|
:0040C3EF 8B45F8                  mov eax, dword ptr [ebp-08]
:0040C3F2 8945FC                  mov dword ptr [ebp-04], eax
:0040C3F5 C745F400000000          mov [ebp-0C], 00000000
:0040C3FC 6A41                    push 00000041
:0040C3FE 6A00                    push 00000000
:0040C400 8D4DB0                  lea ecx, dword ptr [ebp-50]
:0040C403 51                      push ecx
:0040C404 E857150600              call 0046D960
:0040C409 83C40C                  add esp, 0000000C
:0040C40C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C40F 33C0                    xor eax, eax
:0040C411 8A02                    mov al, byte ptr [edx]
:0040C413 83F824                  cmp eax, 00000024
:0040C416 7535                    jne 0040C44D
:0040C418 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C41B 33D2                    xor edx, edx
:0040C41D 8A5101                  mov dl, byte ptr [ecx+01]
:0040C420 83FA26                  cmp edx, 00000026
:0040C423 7528                    jne 0040C44D
:0040C425 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C428 83C001                  add eax, 00000001
:0040C42B 8945FC                  mov dword ptr [ebp-04], eax
:0040C42E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C431 83C101                  add ecx, 00000001
:0040C434 894DFC                  mov dword ptr [ebp-04], ecx
:0040C437 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C43A 52                      push edx
:0040C43B E881CC0100              call 004290C1
:0040C440 83C404                  add esp, 00000004
:0040C443 B801000000              mov eax, 00000001
:0040C448 E906020000              jmp 0040C653

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C416(C), :0040C423(C), :0040C648(C)
|
:0040C44D C745F400000000          mov [ebp-0C], 00000000
:0040C454 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C457 33C9                    xor ecx, ecx
:0040C459 8A08                    mov cl, byte ptr [eax]
:0040C45B 83F926                  cmp ecx, 00000026
:0040C45E 0F85F1000000            jne 0040C555
:0040C464 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C467 83C201                  add edx, 00000001
:0040C46A 8955FC                  mov dword ptr [ebp-04], edx
:0040C46D E8A0A40000              call 00416912
:0040C472 85C0                    test eax, eax
:0040C474 742B                    je 0040C4A1
:0040C476 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C479 33C9                    xor ecx, ecx
:0040C47B 8A08                    mov cl, byte ptr [eax]
:0040C47D 83F90A                  cmp ecx, 0000000A
:0040C480 751F                    jne 0040C4A1
:0040C482 B9880B4B00              mov ecx, 004B0B88
:0040C487 E8F4690400              call 00452E80
:0040C48C 668985A8FBFFFF          mov word ptr [ebp+FFFFFBA8], ax
:0040C493 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C496 83C201                  add edx, 00000001
:0040C499 8955FC                  mov dword ptr [ebp-04], edx
:0040C49C E9B4000000              jmp 0040C555

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C474(C), :0040C480(C), :0040C526(U)
|
:0040C4A1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C4A4 33C9                    xor ecx, ecx
:0040C4A6 8A08                    mov cl, byte ptr [eax]
:0040C4A8 83F90A                  cmp ecx, 0000000A
:0040C4AB 747E                    je 0040C52B
:0040C4AD 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040C4B0 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C4B3 8A08                    mov cl, byte ptr [eax]
:0040C4B5 888C15ACFBFFFF          mov byte ptr [ebp+edx-00000454], cl
:0040C4BC 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040C4BF 83C201                  add edx, 00000001
:0040C4C2 8955F4                  mov dword ptr [ebp-0C], edx
:0040C4C5 817DF400040000          cmp dword ptr [ebp-0C], 00000400
:0040C4CC 7602                    jbe 0040C4D0
:0040C4CE EB5B                    jmp 0040C52B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4CC(C)
|
:0040C4D0 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C4D3 83C001                  add eax, 00000001
:0040C4D6 8945FC                  mov dword ptr [ebp-04], eax
:0040C4D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C4DC 33D2                    xor edx, edx
:0040C4DE 8A11                    mov dl, byte ptr [ecx]
:0040C4E0 83FA26                  cmp edx, 00000026
:0040C4E3 7541                    jne 0040C526
:0040C4E5 C785A4FBFFFF00000000    mov dword ptr [ebp+FFFFFBA4], 00000000
:0040C4EF EB0F                    jmp 0040C500

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C524(U)
|
:0040C4F1 8B85A4FBFFFF            mov eax, dword ptr [ebp+FFFFFBA4]
:0040C4F7 83C001                  add eax, 00000001
:0040C4FA 8985A4FBFFFF            mov dword ptr [ebp+FFFFFBA4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4EF(U)
|
:0040C500 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C503 33D2                    xor edx, edx
:0040C505 8A11                    mov dl, byte ptr [ecx]
:0040C507 83FA0A                  cmp edx, 0000000A
:0040C50A 741A                    je 0040C526
:0040C50C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C50F 83C001                  add eax, 00000001
:0040C512 8945FC                  mov dword ptr [ebp-04], eax
:0040C515 8B8DA4FBFFFF            mov ecx, dword ptr [ebp+FFFFFBA4]
:0040C51B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C51E 8A02                    mov al, byte ptr [edx]
:0040C520 88440DB0                mov byte ptr [ebp+ecx-50], al
:0040C524 EBCB                    jmp 0040C4F1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C4E3(C), :0040C50A(C)
|
:0040C526 E976FFFFFF              jmp 0040C4A1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C4AB(C), :0040C4CE(U)
|
:0040C52B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C52E 83C101                  add ecx, 00000001
:0040C531 894DFC                  mov dword ptr [ebp-04], ecx
:0040C534 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040C537 C68415ACFBFFFF00        mov byte ptr [ebp+edx-00000454], 00
:0040C53F 8D85ACFBFFFF            lea eax, dword ptr [ebp+FFFFFBAC]
:0040C545 50                      push eax
:0040C546 E81E6F0000              call 00413469
:0040C54B 83C404                  add esp, 00000004
:0040C54E 668985A8FBFFFF          mov word ptr [ebp+FFFFFBA8], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C45E(C), :0040C49C(U)
|
:0040C555 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C558 51                      push ecx
:0040C559 8D95ACFBFFFF            lea edx, dword ptr [ebp+FFFFFBAC]
:0040C55F 52                      push edx
:0040C560 B9F8134800              mov ecx, 004813F8
:0040C565 E8E31D0000              call 0040E34D
:0040C56A E8A3A30000              call 00416912
:0040C56F 85C0                    test eax, eax
:0040C571 7412                    je 0040C585
:0040C573 8B85A8FBFFFF            mov eax, dword ptr [ebp+FFFFFBA8]
:0040C579 25FFFF0000              and eax, 0000FFFF
:0040C57E 3DFFFF0000              cmp eax, 0000FFFF
:0040C583 7561                    jne 0040C5E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C571(C)
|
:0040C585 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040C588 81E1FF000000            and ecx, 000000FF
:0040C58E 85C9                    test ecx, ecx
:0040C590 7433                    je 0040C5C5
:0040C592 8D55B0                  lea edx, dword ptr [ebp-50]
:0040C595 52                      push edx
:0040C596 6A00                    push 00000000
:0040C598 8B85A8FBFFFF            mov eax, dword ptr [ebp+FFFFFBA8]
:0040C59E 25FFFF0000              and eax, 0000FFFF
:0040C5A3 50                      push eax
:0040C5A4 8D8DACFBFFFF            lea ecx, dword ptr [ebp+FFFFFBAC]
:0040C5AA 51                      push ecx
:0040C5AB E829AC0100              call 004271D9
:0040C5B0 83C410                  add esp, 00000010
:0040C5B3 6A41                    push 00000041
:0040C5B5 6A00                    push 00000000
:0040C5B7 8D55B0                  lea edx, dword ptr [ebp-50]
:0040C5BA 52                      push edx
:0040C5BB E8A0130600              call 0046D960
:0040C5C0 83C40C                  add esp, 0000000C
:0040C5C3 EB1F                    jmp 0040C5E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C590(C)
|
:0040C5C5 6A00                    push 00000000
:0040C5C7 6A00                    push 00000000
:0040C5C9 8B85A8FBFFFF            mov eax, dword ptr [ebp+FFFFFBA8]
:0040C5CF 25FFFF0000              and eax, 0000FFFF
:0040C5D4 50                      push eax
:0040C5D5 8D8DACFBFFFF            lea ecx, dword ptr [ebp+FFFFFBAC]
:0040C5DB 51                      push ecx
:0040C5DC E8F8AB0100              call 004271D9
:0040C5E1 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C5C3(U)
|
:0040C5E4 EB1E                    jmp 0040C604

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C583(C)
|
:0040C5E6 8B95A8FBFFFF            mov edx, dword ptr [ebp+FFFFFBA8]
:0040C5EC 81E2FFFF0000            and edx, 0000FFFF
:0040C5F2 52                      push edx
:0040C5F3 8D85ACFBFFFF            lea eax, dword ptr [ebp+FFFFFBAC]
:0040C5F9 50                      push eax
:0040C5FA B9880B4B00              mov ecx, 004B0B88
:0040C5FF E8BBC80400              call 00458EBF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C5E4(U), :0040C63C(U)
|
:0040C604 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C607 33D2                    xor edx, edx
:0040C609 8A11                    mov dl, byte ptr [ecx]
:0040C60B 85D2                    test edx, edx
:0040C60D 742F                    je 0040C63E
:0040C60F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C612 33C9                    xor ecx, ecx
:0040C614 8A08                    mov cl, byte ptr [eax]
:0040C616 83F90A                  cmp ecx, 0000000A
:0040C619 7518                    jne 0040C633
:0040C61B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C61E 33C0                    xor eax, eax
:0040C620 8A4201                  mov al, byte ptr [edx+01]
:0040C623 83F826                  cmp eax, 00000026
:0040C626 750B                    jne 0040C633
:0040C628 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C62B 83C101                  add ecx, 00000001
:0040C62E 894DFC                  mov dword ptr [ebp-04], ecx
:0040C631 EB0B                    jmp 0040C63E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C619(C), :0040C626(C)
|
:0040C633 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C636 83C201                  add edx, 00000001
:0040C639 8955FC                  mov dword ptr [ebp-04], edx
:0040C63C EBC6                    jmp 0040C604

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C60D(C), :0040C631(U)
|
:0040C63E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C641 33C9                    xor ecx, ecx
:0040C643 8A08                    mov cl, byte ptr [eax]
:0040C645 83F926                  cmp ecx, 00000026
:0040C648 0F84FFFDFFFF            je 0040C44D
:0040C64E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C3EA(U), :0040C448(U)
|
:0040C653 8BE5                    mov esp, ebp
:0040C655 5D                      pop ebp
:0040C656 C3                      ret



* Referenced by a CALL at Address:
|:0040901F   
|
:0040C657 55                      push ebp
:0040C658 8BEC                    mov ebp, esp
:0040C65A 81EC04040000            sub esp, 00000404

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C660 6A05                    push 00000005
:0040C662 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C665 E837270000              call 0040EDA1
:0040C66A 8945FC                  mov dword ptr [ebp-04], eax
:0040C66D 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040C674 7507                    jne 0040C67D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C676 B805000000              mov eax, 00000005
:0040C67B EB32                    jmp 0040C6AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C674(C)
|
:0040C67D 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C680 50                      push eax
:0040C681 8D8DFCFBFFFF            lea ecx, dword ptr [ebp+FFFFFBFC]
:0040C687 51                      push ecx
:0040C688 B9F8134800              mov ecx, 004813F8
:0040C68D E8BB1C0000              call 0040E34D
:0040C692 6A00                    push 00000000
:0040C694 6A00                    push 00000000
:0040C696 68FFFF0000              push 0000FFFF
:0040C69B 8D95FCFBFFFF            lea edx, dword ptr [ebp+FFFFFBFC]
:0040C6A1 52                      push edx
:0040C6A2 E832AB0100              call 004271D9
:0040C6A7 83C410                  add esp, 00000010
:0040C6AA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C67B(U)
|
:0040C6AF 8BE5                    mov esp, ebp
:0040C6B1 5D                      pop ebp
:0040C6B2 C3                      ret



* Referenced by a CALL at Address:
|:00409030   
|
:0040C6B3 55                      push ebp
:0040C6B4 8BEC                    mov ebp, esp
:0040C6B6 81EC04040000            sub esp, 00000404

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C6BC 6A05                    push 00000005
:0040C6BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C6C1 E8DB260000              call 0040EDA1
:0040C6C6 8945FC                  mov dword ptr [ebp-04], eax
:0040C6C9 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040C6D0 7507                    jne 0040C6D9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C6D2 B805000000              mov eax, 00000005
:0040C6D7 EB29                    jmp 0040C702

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C6D0(C)
|
:0040C6D9 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C6DC 50                      push eax
:0040C6DD 8D8DFCFBFFFF            lea ecx, dword ptr [ebp+FFFFFBFC]
:0040C6E3 51                      push ecx
:0040C6E4 B9F8134800              mov ecx, 004813F8
:0040C6E9 E85F1C0000              call 0040E34D
:0040C6EE 8D95FCFBFFFF            lea edx, dword ptr [ebp+FFFFFBFC]
:0040C6F4 52                      push edx
:0040C6F5 E859A40000              call 00416B53
:0040C6FA 83C404                  add esp, 00000004
:0040C6FD B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C6D7(U)
|
:0040C702 8BE5                    mov esp, ebp
:0040C704 5D                      pop ebp
:0040C705 C3                      ret



* Referenced by a CALL at Address:
|:00409041   
|
:0040C706 55                      push ebp
:0040C707 8BEC                    mov ebp, esp
:0040C709 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C70A 6A05                    push 00000005
:0040C70C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C70F E88D260000              call 0040EDA1
:0040C714 8945FC                  mov dword ptr [ebp-04], eax
:0040C717 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040C71E 7507                    jne 0040C727

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C720 B805000000              mov eax, 00000005
:0040C725 EB11                    jmp 0040C738

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C71E(C)
|
:0040C727 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C72A 50                      push eax
:0040C72B E8FBA10000              call 0041692B
:0040C730 83C404                  add esp, 00000004
:0040C733 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C725(U)
|
:0040C738 8BE5                    mov esp, ebp
:0040C73A 5D                      pop ebp
:0040C73B C3                      ret



* Referenced by a CALL at Address:
|:00409052   
|
:0040C73C 55                      push ebp
:0040C73D 8BEC                    mov ebp, esp
:0040C73F 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C740 6A05                    push 00000005
:0040C742 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C745 E857260000              call 0040EDA1
:0040C74A 8945FC                  mov dword ptr [ebp-04], eax
:0040C74D 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040C754 7507                    jne 0040C75D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C756 B805000000              mov eax, 00000005
:0040C75B EB11                    jmp 0040C76E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C754(C)
|
:0040C75D 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C760 50                      push eax
:0040C761 E8EDA30000              call 00416B53
:0040C766 83C404                  add esp, 00000004
:0040C769 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C75B(U)
|
:0040C76E 8BE5                    mov esp, ebp
:0040C770 5D                      pop ebp
:0040C771 C3                      ret



* Referenced by a CALL at Address:
|:00409063   
|
:0040C772 55                      push ebp
:0040C773 8BEC                    mov ebp, esp
:0040C775 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C776 6A05                    push 00000005
:0040C778 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C77B E821260000              call 0040EDA1
:0040C780 8945FC                  mov dword ptr [ebp-04], eax
:0040C783 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040C78A 7507                    jne 0040C793

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C78C B805000000              mov eax, 00000005
:0040C791 EB18                    jmp 0040C7AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C78A(C)
|
:0040C793 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C796 50                      push eax
:0040C797 6860494800              push 00484960
:0040C79C B9F8134800              mov ecx, 004813F8
:0040C7A1 E8A71B0000              call 0040E34D
:0040C7A6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C791(U)
|
:0040C7AB 8BE5                    mov esp, ebp
:0040C7AD 5D                      pop ebp
:0040C7AE C3                      ret



* Referenced by a CALL at Address:
|:00409074   
|
:0040C7AF 55                      push ebp
:0040C7B0 8BEC                    mov ebp, esp
:0040C7B2 83EC18                  sub esp, 00000018
:0040C7B5 6A2D                    push 0000002D
:0040C7B7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C7BA E8E2250000              call 0040EDA1
:0040C7BF 668945FC                mov word ptr [ebp-04], ax
:0040C7C3 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C7C6 25FFFF0000              and eax, 0000FFFF
:0040C7CB 3D00800000              cmp eax, 00008000
:0040C7D0 750A                    jne 0040C7DC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C7D2 B805000000              mov eax, 00000005
:0040C7D7 E95E010000              jmp 0040C93A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C7D0(C)
|

* Possible Reference to String Resource ID=00012: ""
                                  |
:0040C7DC 6A0C                    push 0000000C
:0040C7DE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C7E1 E8BB250000              call 0040EDA1
:0040C7E6 668945F0                mov word ptr [ebp-10], ax
:0040C7EA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040C7ED 81E1FFFF0000            and ecx, 0000FFFF
:0040C7F3 81F900800000            cmp ecx, 00008000
:0040C7F9 750A                    jne 0040C805

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C7FB B805000000              mov eax, 00000005
:0040C800 E935010000              jmp 0040C93A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C7F9(C)
|
:0040C805 6A1A                    push 0000001A
:0040C807 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C80A E892250000              call 0040EDA1
:0040C80F 668945F4                mov word ptr [ebp-0C], ax
:0040C813 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040C816 81E2FFFF0000            and edx, 0000FFFF
:0040C81C 81FA00800000            cmp edx, 00008000
:0040C822 750A                    jne 0040C82E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C824 B805000000              mov eax, 00000005
:0040C829 E90C010000              jmp 0040C93A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C822(C)
|
:0040C82E 6A1C                    push 0000001C
:0040C830 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C833 E869250000              call 0040EDA1
:0040C838 668945F8                mov word ptr [ebp-08], ax
:0040C83C 8B45F8                  mov eax, dword ptr [ebp-08]
:0040C83F 25FFFF0000              and eax, 0000FFFF
:0040C844 3D00800000              cmp eax, 00008000
:0040C849 750A                    jne 0040C855

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C84B B805000000              mov eax, 00000005
:0040C850 E9E5000000              jmp 0040C93A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C849(C)
|
:0040C855 6A15                    push 00000015
:0040C857 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C85A E842250000              call 0040EDA1
:0040C85F 668945EC                mov word ptr [ebp-14], ax
:0040C863 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C866 81E1FFFF0000            and ecx, 0000FFFF
:0040C86C 81F900800000            cmp ecx, 00008000
:0040C872 750A                    jne 0040C87E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C874 B805000000              mov eax, 00000005
:0040C879 E9BC000000              jmp 0040C93A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C872(C)
|
:0040C87E 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C881 81E2FFFF0000            and edx, 0000FFFF
:0040C887 8955E8                  mov dword ptr [ebp-18], edx
:0040C88A 837DE803                cmp dword ptr [ebp-18], 00000003
:0040C88E 777C                    ja 0040C90C
:0040C890 8B45E8                  mov eax, dword ptr [ebp-18]
:0040C893 FF24853EC94000          jmp dword ptr [4*eax+0040C93E]
:0040C89A 668B4DF0                mov cx, word ptr [ebp-10]
:0040C89E 51                      push ecx
:0040C89F 668B55EC                mov dx, word ptr [ebp-14]
:0040C8A3 52                      push edx
:0040C8A4 E82BA10000              call 004169D4
:0040C8A9 83C408                  add esp, 00000008
:0040C8AC 8A45EC                  mov al, byte ptr [ebp-14]
:0040C8AF A2180A4B00              mov byte ptr [004B0A18], al
:0040C8B4 EB56                    jmp 0040C90C
:0040C8B6 668B4DF0                mov cx, word ptr [ebp-10]
:0040C8BA 51                      push ecx
:0040C8BB 668B55F8                mov dx, word ptr [ebp-08]
:0040C8BF 52                      push edx
:0040C8C0 E8CDA00000              call 00416992
:0040C8C5 83C408                  add esp, 00000008
:0040C8C8 EB42                    jmp 0040C90C
:0040C8CA 668B45F0                mov ax, word ptr [ebp-10]
:0040C8CE 50                      push eax
:0040C8CF 668B4DF8                mov cx, word ptr [ebp-08]
:0040C8D3 51                      push ecx
:0040C8D4 E83EA10000              call 00416A17
:0040C8D9 83C408                  add esp, 00000008
:0040C8DC EB2E                    jmp 0040C90C
:0040C8DE 668B55F0                mov dx, word ptr [ebp-10]
:0040C8E2 52                      push edx
:0040C8E3 668B45F8                mov ax, word ptr [ebp-08]
:0040C8E7 50                      push eax
:0040C8E8 E862A00000              call 0041694F
:0040C8ED 83C408                  add esp, 00000008
:0040C8F0 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0040C8F3 51                      push ecx
:0040C8F4 B9C8E24A00              mov ecx, 004AE2C8
:0040C8F9 E8F2290000              call 0040F2F0
:0040C8FE 8A55F4                  mov dl, byte ptr [ebp-0C]
:0040C901 52                      push edx
:0040C902 B9C8E24A00              mov ecx, 004AE2C8
:0040C907 E894A60000              call 00416FA0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C88E(C), :0040C8B4(U), :0040C8C8(U), :0040C8DC(U)
|
:0040C90C 6A00                    push 00000000
:0040C90E B918DA4A00              mov ecx, 004ADA18
:0040C913 E808330200              call 0042FC20
:0040C918 8A45F0                  mov al, byte ptr [ebp-10]
:0040C91B 50                      push eax
:0040C91C B918DA4A00              mov ecx, 004ADA18
:0040C921 E87AD20200              call 00439BA0
:0040C926 8B0D3C8B4A00            mov ecx, dword ptr [004A8B3C]
:0040C92C 83C902                  or ecx, 00000002
:0040C92F 890D3C8B4A00            mov dword ptr [004A8B3C], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040C935 B802000000              mov eax, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C7D7(U), :0040C800(U), :0040C829(U), :0040C850(U), :0040C879(U)
|
:0040C93A 8BE5                    mov esp, ebp
:0040C93C 5D                      pop ebp
:0040C93D C3                      ret



:0040C93E CAC84000                DWORD 0040C8CA
:0040C942 DEC84000                DWORD 0040C8DE
:0040C946 B6C84000                DWORD 0040C8B6
:0040C94A 9AC84000                DWORD 0040C89A



* Referenced by a CALL at Address:
|:00409085   
|
:0040C94E 55                      push ebp
:0040C94F 8BEC                    mov ebp, esp
:0040C951 83EC18                  sub esp, 00000018
:0040C954 6A2D                    push 0000002D
:0040C956 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C959 E843240000              call 0040EDA1
:0040C95E 668945FC                mov word ptr [ebp-04], ax
:0040C962 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C965 25FFFF0000              and eax, 0000FFFF
:0040C96A 3D00800000              cmp eax, 00008000
:0040C96F 750A                    jne 0040C97B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C971 B805000000              mov eax, 00000005
:0040C976 E9CE000000              jmp 0040CA49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C96F(C)
|

* Possible Reference to String Resource ID=00012: ""
                                  |
:0040C97B 6A0C                    push 0000000C
:0040C97D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C980 E81C240000              call 0040EDA1
:0040C985 668945F0                mov word ptr [ebp-10], ax
:0040C989 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040C98C 81E1FFFF0000            and ecx, 0000FFFF
:0040C992 81F900800000            cmp ecx, 00008000
:0040C998 750A                    jne 0040C9A4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C99A B805000000              mov eax, 00000005
:0040C99F E9A5000000              jmp 0040CA49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C998(C)
|
:0040C9A4 6A1A                    push 0000001A
:0040C9A6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C9A9 E8F3230000              call 0040EDA1
:0040C9AE 668945F4                mov word ptr [ebp-0C], ax
:0040C9B2 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040C9B5 81E2FFFF0000            and edx, 0000FFFF
:0040C9BB 81FA00800000            cmp edx, 00008000
:0040C9C1 7507                    jne 0040C9CA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C9C3 B805000000              mov eax, 00000005
:0040C9C8 EB7F                    jmp 0040CA49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C9C1(C)
|
:0040C9CA 6A1C                    push 0000001C
:0040C9CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C9CF E8CD230000              call 0040EDA1
:0040C9D4 668945F8                mov word ptr [ebp-08], ax
:0040C9D8 8B45F8                  mov eax, dword ptr [ebp-08]
:0040C9DB 25FFFF0000              and eax, 0000FFFF
:0040C9E0 3D00800000              cmp eax, 00008000
:0040C9E5 7507                    jne 0040C9EE

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040C9E7 B805000000              mov eax, 00000005
:0040C9EC EB5B                    jmp 0040CA49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C9E5(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040C9EE 6A04                    push 00000004
:0040C9F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C9F3 E8A9230000              call 0040EDA1
:0040C9F8 8945EC                  mov dword ptr [ebp-14], eax
:0040C9FB 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040CA02 7507                    jne 0040CA0B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CA04 B805000000              mov eax, 00000005
:0040CA09 EB3E                    jmp 0040CA49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA02(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040CA0B 6A04                    push 00000004
:0040CA0D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CA10 E88C230000              call 0040EDA1
:0040CA15 8945E8                  mov dword ptr [ebp-18], eax
:0040CA18 817DE800000080          cmp dword ptr [ebp-18], 80000000
:0040CA1F 7507                    jne 0040CA28

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CA21 B805000000              mov eax, 00000005
:0040CA26 EB21                    jmp 0040CA49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA1F(C)
|
:0040CA28 668B4DE8                mov cx, word ptr [ebp-18]
:0040CA2C 51                      push ecx
:0040CA2D 668B55EC                mov dx, word ptr [ebp-14]
:0040CA31 52                      push edx
:0040CA32 668B45F8                mov ax, word ptr [ebp-08]
:0040CA36 50                      push eax
:0040CA37 668B4DFC                mov cx, word ptr [ebp-04]
:0040CA3B 51                      push ecx
:0040CA3C E819A00000              call 00416A5A
:0040CA41 83C410                  add esp, 00000010
:0040CA44 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C976(U), :0040C99F(U), :0040C9C8(U), :0040C9EC(U), :0040CA09(U)
|:0040CA26(U)
|
:0040CA49 8BE5                    mov esp, ebp
:0040CA4B 5D                      pop ebp
:0040CA4C C3                      ret



* Referenced by a CALL at Address:
|:00409096   
|
:0040CA4D 55                      push ebp
:0040CA4E 8BEC                    mov ebp, esp
:0040CA50 E8AE9E0000              call 00416903
:0040CA55 25FF000000              and eax, 000000FF
:0040CA5A 83F802                  cmp eax, 00000002
:0040CA5D 7507                    jne 0040CA66
:0040CA5F E86E640100              call 00422ED2
:0040CA64 EB05                    jmp 0040CA6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA5D(C)
|
:0040CA66 E8B8630000              call 00412E23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA64(U)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040CA6B B802000000              mov eax, 00000002
:0040CA70 5D                      pop ebp
:0040CA71 C3                      ret



* Referenced by a CALL at Address:
|:004090A7   
|
:0040CA72 55                      push ebp
:0040CA73 8BEC                    mov ebp, esp
:0040CA75 E800620000              call 00412C7A
:0040CA7A B801000000              mov eax, 00000001
:0040CA7F 5D                      pop ebp
:0040CA80 C3                      ret



* Referenced by a CALL at Address:
|:004090B8   
|
:0040CA81 55                      push ebp
:0040CA82 8BEC                    mov ebp, esp
:0040CA84 83EC0C                  sub esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040CA87 6A04                    push 00000004
:0040CA89 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CA8C E810230000              call 0040EDA1
:0040CA91 8945F8                  mov dword ptr [ebp-08], eax
:0040CA94 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040CA9B 7507                    jne 0040CAA4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CA9D B805000000              mov eax, 00000005
:0040CAA2 EB65                    jmp 0040CB09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CA9B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040CAA4 6A04                    push 00000004
:0040CAA6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CAA9 E8F3220000              call 0040EDA1
:0040CAAE 8945F4                  mov dword ptr [ebp-0C], eax
:0040CAB1 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040CAB8 7507                    jne 0040CAC1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CABA B805000000              mov eax, 00000005
:0040CABF EB48                    jmp 0040CB09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CAB8(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0040CAC1 6A10                    push 00000010
:0040CAC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CAC6 E8D6220000              call 0040EDA1
:0040CACB 668945FC                mov word ptr [ebp-04], ax
:0040CACF 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CAD2 25FFFF0000              and eax, 0000FFFF
:0040CAD7 3D00800000              cmp eax, 00008000
:0040CADC 7507                    jne 0040CAE5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CADE B805000000              mov eax, 00000005
:0040CAE3 EB24                    jmp 0040CB09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CADC(C)
|
:0040CAE5 E8289E0000              call 00416912
:0040CAEA 85C0                    test eax, eax
:0040CAEC 7416                    je 0040CB04
:0040CAEE 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040CAF1 51                      push ecx
:0040CAF2 8A55F4                  mov dl, byte ptr [ebp-0C]
:0040CAF5 52                      push edx
:0040CAF6 8A45F8                  mov al, byte ptr [ebp-08]
:0040CAF9 50                      push eax
:0040CAFA B9880B4B00              mov ecx, 004B0B88
:0040CAFF E80DC60400              call 00459111

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CAEC(C)
|
:0040CB04 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CAA2(U), :0040CABF(U), :0040CAE3(U)
|
:0040CB09 8BE5                    mov esp, ebp
:0040CB0B 5D                      pop ebp
:0040CB0C C3                      ret



* Referenced by a CALL at Address:
|:004090C9   
|
:0040CB0D 55                      push ebp
:0040CB0E 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040CB10 B802000000              mov eax, 00000002
:0040CB15 5D                      pop ebp
:0040CB16 C3                      ret



* Referenced by a CALL at Address:
|:004090DA   
|
:0040CB17 55                      push ebp
:0040CB18 8BEC                    mov ebp, esp
:0040CB1A 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040CB1D 6A04                    push 00000004
:0040CB1F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CB22 E87A220000              call 0040EDA1
:0040CB27 8945FC                  mov dword ptr [ebp-04], eax
:0040CB2A 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040CB31 7507                    jne 0040CB3A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CB33 B805000000              mov eax, 00000005
:0040CB38 EB3D                    jmp 0040CB77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB31(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040CB3A 6A04                    push 00000004
:0040CB3C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CB3F E85D220000              call 0040EDA1
:0040CB44 8945F8                  mov dword ptr [ebp-08], eax
:0040CB47 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040CB4E 7507                    jne 0040CB57

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CB50 B805000000              mov eax, 00000005
:0040CB55 EB20                    jmp 0040CB77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB4E(C)
|
:0040CB57 E8B69D0000              call 00416912
:0040CB5C 85C0                    test eax, eax
:0040CB5E 7412                    je 0040CB72
:0040CB60 8A45F8                  mov al, byte ptr [ebp-08]
:0040CB63 50                      push eax
:0040CB64 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040CB67 51                      push ecx
:0040CB68 B9A8034B00              mov ecx, 004B03A8
:0040CB6D E8C58E0300              call 00445A37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB5E(C)
|
:0040CB72 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CB38(U), :0040CB55(U)
|
:0040CB77 8BE5                    mov esp, ebp
:0040CB79 5D                      pop ebp
:0040CB7A C3                      ret



* Referenced by a CALL at Address:
|:004090EB   
|
:0040CB7B 55                      push ebp
:0040CB7C 8BEC                    mov ebp, esp
:0040CB7E 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040CB81 6A04                    push 00000004
:0040CB83 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CB86 E816220000              call 0040EDA1
:0040CB8B 8945FC                  mov dword ptr [ebp-04], eax
:0040CB8E 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040CB95 7507                    jne 0040CB9E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CB97 B805000000              mov eax, 00000005
:0040CB9C EB45                    jmp 0040CBE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB95(C)
|
:0040CB9E 6A27                    push 00000027
:0040CBA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CBA3 E8F9210000              call 0040EDA1
:0040CBA8 668945F8                mov word ptr [ebp-08], ax
:0040CBAC 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CBAF 25FFFF0000              and eax, 0000FFFF
:0040CBB4 3D00800000              cmp eax, 00008000
:0040CBB9 7507                    jne 0040CBC2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CBBB B805000000              mov eax, 00000005
:0040CBC0 EB21                    jmp 0040CBE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CBB9(C)
|
:0040CBC2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CBC5 81E1FFFF0000            and ecx, 0000FFFF
:0040CBCB F7D9                    neg ecx
:0040CBCD 1BC9                    sbb ecx, ecx
:0040CBCF F7D9                    neg ecx
:0040CBD1 51                      push ecx
:0040CBD2 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CBD5 52                      push edx
:0040CBD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CBD9 E89D220000              call 0040EE7B
:0040CBDE B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CB9C(U), :0040CBC0(U)
|
:0040CBE3 8BE5                    mov esp, ebp
:0040CBE5 5D                      pop ebp
:0040CBE6 C3                      ret



* Referenced by a CALL at Address:
|:004090FC   
|
:0040CBE7 55                      push ebp
:0040CBE8 8BEC                    mov ebp, esp
:0040CBEA 81EC14020000            sub esp, 00000214

* Possible Reference to String Resource ID=00012: ""
                                  |
:0040CBF0 6A0C                    push 0000000C
:0040CBF2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CBF5 E8A7210000              call 0040EDA1
:0040CBFA 668985F8FDFFFF          mov word ptr [ebp+FFFFFDF8], ax
:0040CC01 8B85F8FDFFFF            mov eax, dword ptr [ebp+FFFFFDF8]
:0040CC07 25FFFF0000              and eax, 0000FFFF
:0040CC0C 3D00800000              cmp eax, 00008000
:0040CC11 750A                    jne 0040CC1D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CC13 B805000000              mov eax, 00000005
:0040CC18 E95A010000              jmp 0040CD77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CC11(C)
|
:0040CC1D 66C785FCFDFFFF0000      mov word ptr [ebp+FFFFFDFC], 0000
:0040CC26 66C785F4FDFFFF0000      mov word ptr [ebp+FFFFFDF4], 0000
:0040CC2F EB12                    jmp 0040CC43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CCBA(U)
|
:0040CC31 668B8DF4FDFFFF          mov cx, word ptr [ebp+FFFFFDF4]
:0040CC38 6683C101                add cx, 0001
:0040CC3C 66898DF4FDFFFF          mov word ptr [ebp+FFFFFDF4], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CC2F(U)
|
:0040CC43 8B95F4FDFFFF            mov edx, dword ptr [ebp+FFFFFDF4]
:0040CC49 81E2FFFF0000            and edx, 0000FFFF
:0040CC4F 8B85F8FDFFFF            mov eax, dword ptr [ebp+FFFFFDF8]
:0040CC55 25FFFF0000              and eax, 0000FFFF
:0040CC5A 3BD0                    cmp edx, eax
:0040CC5C 7D61                    jge 0040CCBF
:0040CC5E 6A01                    push 00000001
:0040CC60 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CC63 E839210000              call 0040EDA1
:0040CC68 668985ECFDFFFF          mov word ptr [ebp+FFFFFDEC], ax
:0040CC6F 8B8DECFDFFFF            mov ecx, dword ptr [ebp+FFFFFDEC]
:0040CC75 81E1FFFF0000            and ecx, 0000FFFF
:0040CC7B 81F900800000            cmp ecx, 00008000
:0040CC81 750A                    jne 0040CC8D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CC83 B805000000              mov eax, 00000005
:0040CC88 E9EA000000              jmp 0040CD77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CC81(C)
|
:0040CC8D 8B95FCFDFFFF            mov edx, dword ptr [ebp+FFFFFDFC]
:0040CC93 81E2FFFF0000            and edx, 0000FFFF
:0040CC99 668B85ECFDFFFF          mov ax, word ptr [ebp+FFFFFDEC]
:0040CCA0 6689845500FEFFFF        mov word ptr [ebp+2*edx-00000200], ax
:0040CCA8 668B8DFCFDFFFF          mov cx, word ptr [ebp+FFFFFDFC]
:0040CCAF 6683C101                add cx, 0001
:0040CCB3 66898DFCFDFFFF          mov word ptr [ebp+FFFFFDFC], cx
:0040CCBA E972FFFFFF              jmp 0040CC31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CC5C(C)
|
:0040CCBF 6A26                    push 00000026
:0040CCC1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CCC4 E8D8200000              call 0040EDA1
:0040CCC9 668985F0FDFFFF          mov word ptr [ebp+FFFFFDF0], ax
:0040CCD0 8B95F0FDFFFF            mov edx, dword ptr [ebp+FFFFFDF0]
:0040CCD6 81E2FFFF0000            and edx, 0000FFFF
:0040CCDC 81FA00800000            cmp edx, 00008000
:0040CCE2 750A                    jne 0040CCEE

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CCE4 B805000000              mov eax, 00000005
:0040CCE9 E989000000              jmp 0040CD77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CCE2(C)
|
:0040CCEE 8B85F0FDFFFF            mov eax, dword ptr [ebp+FFFFFDF0]
:0040CCF4 25FFFF0000              and eax, 0000FFFF
:0040CCF9 83F801                  cmp eax, 00000001
:0040CCFC 750A                    jne 0040CD08

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040CCFE 6AFF                    push FFFFFFFF
:0040CD00 E8019E0000              call 00416B06
:0040CD05 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CCFC(C)
|
:0040CD08 66C785F4FDFFFF0000      mov word ptr [ebp+FFFFFDF4], 0000
:0040CD11 EB12                    jmp 0040CD25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD70(U)
|
:0040CD13 668B8DF4FDFFFF          mov cx, word ptr [ebp+FFFFFDF4]
:0040CD1A 6683C101                add cx, 0001
:0040CD1E 66898DF4FDFFFF          mov word ptr [ebp+FFFFFDF4], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD11(U)
|
:0040CD25 8B95F4FDFFFF            mov edx, dword ptr [ebp+FFFFFDF4]
:0040CD2B 81E2FFFF0000            and edx, 0000FFFF
:0040CD31 8B85F8FDFFFF            mov eax, dword ptr [ebp+FFFFFDF8]
:0040CD37 25FFFF0000              and eax, 0000FFFF
:0040CD3C 3BD0                    cmp edx, eax
:0040CD3E 7D32                    jge 0040CD72
:0040CD40 8B8DF4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDF4]
:0040CD46 81E1FFFF0000            and ecx, 0000FFFF
:0040CD4C 83F934                  cmp ecx, 00000034
:0040CD4F 7D1F                    jge 0040CD70
:0040CD51 8B95F4FDFFFF            mov edx, dword ptr [ebp+FFFFFDF4]
:0040CD57 81E2FFFF0000            and edx, 0000FFFF
:0040CD5D 33C0                    xor eax, eax
:0040CD5F 668B845500FEFFFF        mov ax, word ptr [ebp+2*edx-00000200]
:0040CD67 50                      push eax
:0040CD68 E8999D0000              call 00416B06
:0040CD6D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD4F(C)
|
:0040CD70 EBA1                    jmp 0040CD13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD3E(C)
|
:0040CD72 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CC18(U), :0040CC88(U), :0040CCE9(U)
|
:0040CD77 8BE5                    mov esp, ebp
:0040CD79 5D                      pop ebp
:0040CD7A C3                      ret



* Referenced by a CALL at Address:
|:0040910D   
|
:0040CD7B 55                      push ebp
:0040CD7C 8BEC                    mov ebp, esp
:0040CD7E 51                      push ecx
:0040CD7F 6A2E                    push 0000002E
:0040CD81 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CD84 E818200000              call 0040EDA1
:0040CD89 668945FC                mov word ptr [ebp-04], ax
:0040CD8D 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CD90 25FFFF0000              and eax, 0000FFFF
:0040CD95 3D00800000              cmp eax, 00008000
:0040CD9A 7507                    jne 0040CDA3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CD9C B805000000              mov eax, 00000005
:0040CDA1 EB17                    jmp 0040CDBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD9A(C)
|
:0040CDA3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CDA6 81E1FFFF0000            and ecx, 0000FFFF
:0040CDAC 51                      push ecx
:0040CDAD E8A2A10100              call 00426F54
:0040CDB2 83C404                  add esp, 00000004
:0040CDB5 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CDA1(U)
|
:0040CDBA 8BE5                    mov esp, ebp
:0040CDBC 5D                      pop ebp
:0040CDBD C3                      ret



* Referenced by a CALL at Address:
|:0040911E   
|
:0040CDBE 55                      push ebp
:0040CDBF 8BEC                    mov ebp, esp
:0040CDC1 51                      push ecx
:0040CDC2 6A36                    push 00000036
:0040CDC4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CDC7 E8D51F0000              call 0040EDA1
:0040CDCC 668945FC                mov word ptr [ebp-04], ax
:0040CDD0 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CDD3 25FFFF0000              and eax, 0000FFFF
:0040CDD8 3D00800000              cmp eax, 00008000
:0040CDDD 7507                    jne 0040CDE6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CDDF B805000000              mov eax, 00000005
:0040CDE4 EB17                    jmp 0040CDFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CDDD(C)
|
:0040CDE6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CDE9 81E1FFFF0000            and ecx, 0000FFFF
:0040CDEF 51                      push ecx
:0040CDF0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CDF3 E8CA200000              call 0040EEC2
:0040CDF8 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CDE4(U)
|
:0040CDFD 8BE5                    mov esp, ebp
:0040CDFF 5D                      pop ebp
:0040CE00 C3                      ret



* Referenced by a CALL at Address:
|:0040912F   
|
:0040CE01 55                      push ebp
:0040CE02 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040CE04 B808000000              mov eax, 00000008
:0040CE09 5D                      pop ebp
:0040CE0A C3                      ret



* Referenced by a CALL at Address:
|:00409140   
|
:0040CE0B 55                      push ebp
:0040CE0C 8BEC                    mov ebp, esp
:0040CE0E 6A00                    push 00000000
:0040CE10 E83FA10100              call 00426F54
:0040CE15 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040CE18 B807000000              mov eax, 00000007
:0040CE1D 5D                      pop ebp
:0040CE1E C3                      ret



* Referenced by a CALL at Address:
|:00409151   
|
:0040CE1F 55                      push ebp
:0040CE20 8BEC                    mov ebp, esp
:0040CE22 83EC7C                  sub esp, 0000007C
:0040CE25 6A17                    push 00000017
:0040CE27 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CE2A E8721F0000              call 0040EDA1
:0040CE2F 668945FC                mov word ptr [ebp-04], ax
:0040CE33 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CE36 25FFFF0000              and eax, 0000FFFF
:0040CE3B 3D00800000              cmp eax, 00008000
:0040CE40 750A                    jne 0040CE4C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CE42 B805000000              mov eax, 00000005
:0040CE47 E968010000              jmp 0040CFB4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE40(C)
|
:0040CE4C C745F800000000          mov [ebp-08], 00000000
:0040CE53 E8BA9A0000              call 00416912
:0040CE58 85C0                    test eax, eax
:0040CE5A 742E                    je 0040CE8A
:0040CE5C B9880B4B00              mov ecx, 004B0B88
:0040CE61 E81A600400              call 00452E80
:0040CE66 8945F8                  mov dword ptr [ebp-08], eax
:0040CE69 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CE6C 6BC970                  imul ecx, 00000070
:0040CE6F 81C198224900            add ecx, 00492298
:0040CE75 E8767AFFFF              call 004048F0
:0040CE7A 25FF000000              and eax, 000000FF
:0040CE7F 85C0                    test eax, eax
:0040CE81 7407                    je 0040CE8A
:0040CE83 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CE5A(C), :0040CE81(C)
|
:0040CE8A 817DF885020000          cmp dword ptr [ebp-08], 00000285
:0040CE91 7D06                    jge 0040CE99
:0040CE93 837DF800                cmp dword ptr [ebp-08], 00000000
:0040CE97 7507                    jne 0040CEA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE91(C)
|
:0040CE99 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE97(C)
|
:0040CEA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CEA3 81E1FFFF0000            and ecx, 0000FFFF
:0040CEA9 81F9F0000000            cmp ecx, 000000F0
:0040CEAF 0F85D0000000            jne 0040CF85
:0040CEB5 B9BAFD4800              mov ecx, 0048FDBA
:0040CEBA E8F1A8FFFF              call 004077B0
:0040CEBF 8945F4                  mov dword ptr [ebp-0C], eax
:0040CEC2 6A00                    push 00000000
:0040CEC4 E8EA9DFFFF              call 00406CB3
:0040CEC9 83C404                  add esp, 00000004
:0040CECC 894588                  mov dword ptr [ebp-78], eax
:0040CECF C7458C00000000          mov [ebp-74], 00000000
:0040CED6 EB09                    jmp 0040CEE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF7E(U)
|
:0040CED8 8B558C                  mov edx, dword ptr [ebp-74]
:0040CEDB 83C201                  add edx, 00000001
:0040CEDE 89558C                  mov dword ptr [ebp-74], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CED6(U)
|
:0040CEE1 837D8C08                cmp dword ptr [ebp-74], 00000008
:0040CEE5 0F8398000000            jnb 0040CF83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF79(U)
|
:0040CEEB B9C8E24A00              mov ecx, 004AE2C8
:0040CEF0 E87F99FFFF              call 00406874
:0040CEF5 85C0                    test eax, eax
:0040CEF7 740E                    je 0040CF07
:0040CEF9 6A46                    push 00000046
:0040CEFB B9C8E24A00              mov ecx, 004AE2C8
:0040CF00 E89399FFFF              call 00406898
:0040CF05 EB77                    jmp 0040CF7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEF7(C)
|
:0040CF07 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040CF0A 50                      push eax

* Possible StringData Ref from Data Obj ->"ܮwwgFALkJ%sAʭܮwDܡH"
                                  |
:0040CF0B 68F0634700              push 004763F0
:0040CF10 8D4D90                  lea ecx, dword ptr [ebp-70]
:0040CF13 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040CF14 FF1500874B00            Call dword ptr [004B8700]
:0040CF1A 83C40C                  add esp, 0000000C
:0040CF1D 6A00                    push 00000000
:0040CF1F 8D5590                  lea edx, dword ptr [ebp-70]
:0040CF22 52                      push edx
:0040CF23 E808670500              call 00463630
:0040CF28 83C408                  add esp, 00000008
:0040CF2B 85C0                    test eax, eax
:0040CF2D 740D                    je 0040CF3C
:0040CF2F 837D8800                cmp dword ptr [ebp-78], 00000000
:0040CF33 7405                    je 0040CF3A
:0040CF35 E8665E0400              call 00452DA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF33(C)
|
:0040CF3A EB3D                    jmp 0040CF79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF2D(C)
|
:0040CF3C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040CF3F 50                      push eax

* Possible StringData Ref from Data Obj ->"˱%sܡH"
                                  |
:0040CF40 6820644700              push 00476420
:0040CF45 8D4D90                  lea ecx, dword ptr [ebp-70]
:0040CF48 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040CF49 FF1500874B00            Call dword ptr [004B8700]
:0040CF4F 83C40C                  add esp, 0000000C
:0040CF52 6A00                    push 00000000
:0040CF54 8D5590                  lea edx, dword ptr [ebp-70]
:0040CF57 52                      push edx
:0040CF58 E8D3660500              call 00463630
:0040CF5D 83C408                  add esp, 00000008
:0040CF60 85C0                    test eax, eax
:0040CF62 7415                    je 0040CF79
:0040CF64 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040CF67 50                      push eax

* Possible StringData Ref from Data Obj ->"˱F%sC"
                                  |
:0040CF68 682C644700              push 0047642C
:0040CF6D 6A00                    push 00000000
:0040CF6F E8F8BB0100              call 00428B6C
:0040CF74 83C40C                  add esp, 0000000C
:0040CF77 EB05                    jmp 0040CF7E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CF3A(U), :0040CF62(C)
|
:0040CF79 E96DFFFFFF              jmp 0040CEEB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CF05(U), :0040CF77(U)
|
:0040CF7E E955FFFFFF              jmp 0040CED8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEE5(C)
|
:0040CF83 EB2A                    jmp 0040CFAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEAF(C)
|
:0040CF85 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CF88 81E1FFFF0000            and ecx, 0000FFFF
:0040CF8E 51                      push ecx
:0040CF8F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CF92 6BC970                  imul ecx, 00000070
:0040CF95 81C198224900            add ecx, 00492298
:0040CF9B E8EA5AFFFF              call 00402A8A
:0040CFA0 894584                  mov dword ptr [ebp-7C], eax
:0040CFA3 8B55F8                  mov edx, dword ptr [ebp-08]
:0040CFA6 52                      push edx
:0040CFA7 E8A49F0500              call 00466F50
:0040CFAC 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF83(U)
|
:0040CFAF B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE47(U)
|
:0040CFB4 8BE5                    mov esp, ebp
:0040CFB6 5D                      pop ebp
:0040CFB7 C3                      ret



* Referenced by a CALL at Address:
|:00409162   
|
:0040CFB8 55                      push ebp
:0040CFB9 8BEC                    mov ebp, esp
:0040CFBB 83EC18                  sub esp, 00000018

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040CFBE 6A02                    push 00000002
:0040CFC0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CFC3 E8D91D0000              call 0040EDA1
:0040CFC8 668945FC                mov word ptr [ebp-04], ax
:0040CFCC 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CFCF 25FFFF0000              and eax, 0000FFFF
:0040CFD4 3D00800000              cmp eax, 00008000
:0040CFD9 750A                    jne 0040CFE5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CFDB B805000000              mov eax, 00000005
:0040CFE0 E919010000              jmp 0040D0FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CFD9(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040CFE5 6A07                    push 00000007
:0040CFE7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CFEA E8B21D0000              call 0040EDA1
:0040CFEF 668945F4                mov word ptr [ebp-0C], ax
:0040CFF3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040CFF6 81E1FFFF0000            and ecx, 0000FFFF
:0040CFFC 81F900800000            cmp ecx, 00008000
:0040D002 750A                    jne 0040D00E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D004 B805000000              mov eax, 00000005
:0040D009 E9F0000000              jmp 0040D0FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D002(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040D00E 6A02                    push 00000002
:0040D010 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D013 E8891D0000              call 0040EDA1
:0040D018 668945F8                mov word ptr [ebp-08], ax
:0040D01C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D01F 81E2FFFF0000            and edx, 0000FFFF
:0040D025 81FA00800000            cmp edx, 00008000
:0040D02B 750A                    jne 0040D037

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D02D B805000000              mov eax, 00000005
:0040D032 E9C7000000              jmp 0040D0FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D02B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D037 6A04                    push 00000004
:0040D039 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D03C E8601D0000              call 0040EDA1
:0040D041 8945F0                  mov dword ptr [ebp-10], eax
:0040D044 817DF000000080          cmp dword ptr [ebp-10], 80000000
:0040D04B 750A                    jne 0040D057

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D04D B805000000              mov eax, 00000005
:0040D052 E9A7000000              jmp 0040D0FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D04B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D057 6A04                    push 00000004
:0040D059 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D05C E8401D0000              call 0040EDA1
:0040D061 8945EC                  mov dword ptr [ebp-14], eax
:0040D064 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040D06B 750A                    jne 0040D077

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D06D B805000000              mov eax, 00000005
:0040D072 E987000000              jmp 0040D0FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D06B(C)
|
:0040D077 E896980000              call 00416912
:0040D07C 85C0                    test eax, eax
:0040D07E 7507                    jne 0040D087
:0040D080 B801000000              mov eax, 00000001
:0040D085 EB77                    jmp 0040D0FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D07E(C)
|
:0040D087 8A45F4                  mov al, byte ptr [ebp-0C]
:0040D08A 50                      push eax
:0040D08B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D08E 81E1FFFF0000            and ecx, 0000FFFF
:0040D094 51                      push ecx
:0040D095 B9880B4B00              mov ecx, 004B0B88
:0040D09A E815BF0400              call 00458FB4
:0040D09F 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040D0A2 81E2FFFF0000            and edx, 0000FFFF
:0040D0A8 8955E8                  mov dword ptr [ebp-18], edx
:0040D0AB 837DE806                cmp dword ptr [ebp-18], 00000006
:0040D0AF 7748                    ja 0040D0F9
:0040D0B1 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D0B4 FF248502D14000          jmp dword ptr [4*eax+0040D102]
:0040D0BB EB3C                    jmp 0040D0F9
:0040D0BD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D0C0 81E1FF000000            and ecx, 000000FF
:0040D0C6 51                      push ecx
:0040D0C7 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D0CA 81E2FFFF0000            and edx, 0000FFFF
:0040D0D0 52                      push edx
:0040D0D1 B9880B4B00              mov ecx, 004B0B88
:0040D0D6 E836C60400              call 00459711
:0040D0DB EB1C                    jmp 0040D0F9
:0040D0DD 8A45EC                  mov al, byte ptr [ebp-14]
:0040D0E0 50                      push eax
:0040D0E1 8A4DF0                  mov cl, byte ptr [ebp-10]
:0040D0E4 51                      push ecx
:0040D0E5 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D0E8 81E2FFFF0000            and edx, 0000FFFF
:0040D0EE 52                      push edx
:0040D0EF B9880B4B00              mov ecx, 004B0B88
:0040D0F4 E889C50400              call 00459682

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D0AF(C), :0040D0BB(U), :0040D0DB(U)
|
:0040D0F9 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CFE0(U), :0040D009(U), :0040D032(U), :0040D052(U), :0040D072(U)
|:0040D085(U)
|
:0040D0FE 8BE5                    mov esp, ebp
:0040D100 5D                      pop ebp
:0040D101 C3                      ret



:0040D102 BBD04000                DWORD 0040D0BB
:0040D106 F9D04000                DWORD 0040D0F9
:0040D10A F9D04000                DWORD 0040D0F9
:0040D10E BDD04000                DWORD 0040D0BD
:0040D112 DDD04000                DWORD 0040D0DD
:0040D116 BDD04000                DWORD 0040D0BD
:0040D11A DDD04000                DWORD 0040D0DD



* Referenced by a CALL at Address:
|:00409173   
|
:0040D11E 55                      push ebp
:0040D11F 8BEC                    mov ebp, esp
:0040D121 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040D124 6A02                    push 00000002
:0040D126 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D129 E8731C0000              call 0040EDA1
:0040D12E 668945FC                mov word ptr [ebp-04], ax
:0040D132 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D135 25FFFF0000              and eax, 0000FFFF
:0040D13A 3D00800000              cmp eax, 00008000
:0040D13F 7507                    jne 0040D148

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D141 B805000000              mov eax, 00000005
:0040D146 EB69                    jmp 0040D1B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D13F(C)
|

* Possible Reference to String Resource ID=00014: ""
                                  |
:0040D148 6A0E                    push 0000000E
:0040D14A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D14D E84F1C0000              call 0040EDA1
:0040D152 668945F8                mov word ptr [ebp-08], ax
:0040D156 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D159 81E1FFFF0000            and ecx, 0000FFFF
:0040D15F 81F900800000            cmp ecx, 00008000
:0040D165 7507                    jne 0040D16E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D167 B805000000              mov eax, 00000005
:0040D16C EB43                    jmp 0040D1B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D165(C)
|
:0040D16E E89F970000              call 00416912
:0040D173 85C0                    test eax, eax
:0040D175 7419                    je 0040D190
:0040D177 8A55F8                  mov dl, byte ptr [ebp-08]
:0040D17A 52                      push edx
:0040D17B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D17E 25FFFF0000              and eax, 0000FFFF
:0040D183 50                      push eax
:0040D184 B9880B4B00              mov ecx, 004B0B88
:0040D189 E88DC20400              call 0045941B
:0040D18E EB1C                    jmp 0040D1AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D175(C)
|
:0040D190 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D193 81E1FFFF0000            and ecx, 0000FFFF
:0040D199 51                      push ecx
:0040D19A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D19D 81E2FFFF0000            and edx, 0000FFFF
:0040D1A3 52                      push edx
:0040D1A4 E86D9BFFFF              call 00406D16
:0040D1A9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D18E(U)
|
:0040D1AC B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D146(U), :0040D16C(U)
|
:0040D1B1 8BE5                    mov esp, ebp
:0040D1B3 5D                      pop ebp
:0040D1B4 C3                      ret



* Referenced by a CALL at Address:
|:00409184   
|
:0040D1B5 55                      push ebp
:0040D1B6 8BEC                    mov ebp, esp
:0040D1B8 83EC18                  sub esp, 00000018
:0040D1BB 6A28                    push 00000028
:0040D1BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D1C0 E8DC1B0000              call 0040EDA1
:0040D1C5 668945F4                mov word ptr [ebp-0C], ax
:0040D1C9 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040D1CC 25FFFF0000              and eax, 0000FFFF
:0040D1D1 3D00800000              cmp eax, 00008000
:0040D1D6 750A                    jne 0040D1E2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D1D8 B805000000              mov eax, 00000005
:0040D1DD E95C010000              jmp 0040D33E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D1D6(C)
|
:0040D1E2 6A34                    push 00000034
:0040D1E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D1E7 E8B51B0000              call 0040EDA1
:0040D1EC 668945F8                mov word ptr [ebp-08], ax
:0040D1F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D1F3 81E1FFFF0000            and ecx, 0000FFFF
:0040D1F9 81F900800000            cmp ecx, 00008000
:0040D1FF 750A                    jne 0040D20B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D201 B805000000              mov eax, 00000005
:0040D206 E933010000              jmp 0040D33E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D1FF(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D20B 6A04                    push 00000004
:0040D20D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D210 E88C1B0000              call 0040EDA1
:0040D215 8945FC                  mov dword ptr [ebp-04], eax
:0040D218 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040D21F 750A                    jne 0040D22B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D221 B805000000              mov eax, 00000005
:0040D226 E913010000              jmp 0040D33E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D21F(C)
|
:0040D22B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040D22E 81E2FFFF0000            and edx, 0000FFFF
:0040D234 8955F0                  mov dword ptr [ebp-10], edx
:0040D237 837DF004                cmp dword ptr [ebp-10], 00000004
:0040D23B 0F87F8000000            ja 0040D339
:0040D241 8B45F0                  mov eax, dword ptr [ebp-10]
:0040D244 FF248542D34000          jmp dword ptr [4*eax+0040D342]
:0040D24B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D24E 81E1FFFF0000            and ecx, 0000FFFF
:0040D254 894DEC                  mov dword ptr [ebp-14], ecx
:0040D257 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040D25B 740E                    je 0040D26B
:0040D25D 837DEC01                cmp dword ptr [ebp-14], 00000001
:0040D261 7418                    je 0040D27B
:0040D263 837DEC02                cmp dword ptr [ebp-14], 00000002
:0040D267 7422                    je 0040D28B
:0040D269 EB30                    jmp 0040D29B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D25B(C)
|
:0040D26B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D26E 52                      push edx
:0040D26F B9C8E24A00              mov ecx, 004AE2C8
:0040D274 E807A5FFFF              call 00407780
:0040D279 EB2A                    jmp 0040D2A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D261(C)
|
:0040D27B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D27E 50                      push eax
:0040D27F B9C8E24A00              mov ecx, 004AE2C8
:0040D284 E8FC97FFFF              call 00406A85
:0040D289 EB1A                    jmp 0040D2A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D267(C)
|
:0040D28B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D28E 51                      push ecx
:0040D28F B9C8E24A00              mov ecx, 004AE2C8
:0040D294 E83098FFFF              call 00406AC9
:0040D299 EB0A                    jmp 0040D2A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D269(U)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D29B B805000000              mov eax, 00000005
:0040D2A0 E999000000              jmp 0040D33E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D279(U), :0040D289(U), :0040D299(U)
|
:0040D2A5 E98F000000              jmp 0040D339
:0040D2AA 8A55FC                  mov dl, byte ptr [ebp-04]
:0040D2AD 52                      push edx
:0040D2AE B9C8E24A00              mov ecx, 004AE2C8
:0040D2B3 E858200000              call 0040F310
:0040D2B8 EB7F                    jmp 0040D339
:0040D2BA 8A45FC                  mov al, byte ptr [ebp-04]
:0040D2BD 50                      push eax
:0040D2BE B9C8E24A00              mov ecx, 004AE2C8
:0040D2C3 E828200000              call 0040F2F0
:0040D2C8 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040D2CB 51                      push ecx
:0040D2CC B9C8E24A00              mov ecx, 004AE2C8
:0040D2D1 E8CA9C0000              call 00416FA0
:0040D2D6 EB61                    jmp 0040D339
:0040D2D8 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D2DB 81E2FFFF0000            and edx, 0000FFFF
:0040D2E1 8955E8                  mov dword ptr [ebp-18], edx
:0040D2E4 837DE800                cmp dword ptr [ebp-18], 00000000
:0040D2E8 740E                    je 0040D2F8
:0040D2EA 837DE801                cmp dword ptr [ebp-18], 00000001
:0040D2EE 741E                    je 0040D30E
:0040D2F0 837DE802                cmp dword ptr [ebp-18], 00000002
:0040D2F4 742B                    je 0040D321
:0040D2F6 EB3A                    jmp 0040D332

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2E8(C)
|
:0040D2F8 837DFC08                cmp dword ptr [ebp-04], 00000008
:0040D2FC 770E                    ja 0040D30C
:0040D2FE 8A45FC                  mov al, byte ptr [ebp-04]
:0040D301 50                      push eax
:0040D302 B9C8E24A00              mov ecx, 004AE2C8
:0040D307 E844200000              call 0040F350

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2FC(C)
|
:0040D30C EB2B                    jmp 0040D339

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2EE(C)
|
:0040D30E 8A0DD0634700            mov cl, byte ptr [004763D0]
:0040D314 51                      push ecx
:0040D315 B9C8E24A00              mov ecx, 004AE2C8
:0040D31A E831200000              call 0040F350
:0040D31F EB18                    jmp 0040D339

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2F4(C)
|
:0040D321 B9C8E24A00              mov ecx, 004AE2C8
:0040D326 E805200000              call 0040F330
:0040D32B A2D0634700              mov byte ptr [004763D0], al
:0040D330 EB07                    jmp 0040D339

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2F6(U)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D332 B805000000              mov eax, 00000005
:0040D337 EB05                    jmp 0040D33E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D23B(C), :0040D2A5(U), :0040D2B8(U), :0040D2D6(U), :0040D30C(U)
|:0040D31F(U), :0040D330(U)
|
:0040D339 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D1DD(U), :0040D206(U), :0040D226(U), :0040D2A0(U), :0040D337(U)
|
:0040D33E 8BE5                    mov esp, ebp
:0040D340 5D                      pop ebp
:0040D341 C3                      ret



:0040D342 4BD24000                DWORD 0040D24B
:0040D346 39D34000                DWORD 0040D339
:0040D34A AAD24000                DWORD 0040D2AA
:0040D34E BAD24000                DWORD 0040D2BA
:0040D352 D8D24000                DWORD 0040D2D8



* Referenced by a CALL at Address:
|:00409195   
|
:0040D356 55                      push ebp
:0040D357 8BEC                    mov ebp, esp
:0040D359 83EC10                  sub esp, 00000010
:0040D35C 56                      push esi

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040D35D 6A02                    push 00000002
:0040D35F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D362 E83A1A0000              call 0040EDA1
:0040D367 668945FC                mov word ptr [ebp-04], ax
:0040D36B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D36E 25FFFF0000              and eax, 0000FFFF
:0040D373 3D00800000              cmp eax, 00008000
:0040D378 750A                    jne 0040D384

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D37A B805000000              mov eax, 00000005
:0040D37F E97E010000              jmp 0040D502

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D378(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D384 6A04                    push 00000004
:0040D386 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D389 E8131A0000              call 0040EDA1
:0040D38E 8945F8                  mov dword ptr [ebp-08], eax
:0040D391 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040D398 750A                    jne 0040D3A4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D39A B805000000              mov eax, 00000005
:0040D39F E95E010000              jmp 0040D502

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D398(C)
|
:0040D3A4 E869950000              call 00416912
:0040D3A9 85C0                    test eax, eax
:0040D3AB 7430                    je 0040D3DD
:0040D3AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D3B0 81E1FFFF0000            and ecx, 0000FFFF
:0040D3B6 81F900040000            cmp ecx, 00000400
:0040D3BC 7C1F                    jl 0040D3DD
:0040D3BE 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D3C1 81E2FFFF0000            and edx, 0000FFFF
:0040D3C7 81FA02040000            cmp edx, 00000402
:0040D3CD 7F0E                    jg 0040D3DD
:0040D3CF B9880B4B00              mov ecx, 004B0B88
:0040D3D4 E8A75A0400              call 00452E80
:0040D3D9 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D3AB(C), :0040D3BC(C), :0040D3CD(C)
|
:0040D3DD C645F0FF                mov [ebp-10], FF
:0040D3E1 C745F400000000          mov [ebp-0C], 00000000
:0040D3E8 E825950000              call 00416912
:0040D3ED 85C0                    test eax, eax
:0040D3EF 7463                    je 0040D454
:0040D3F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D3F4 81E1FFFF0000            and ecx, 0000FFFF
:0040D3FA 6BC970                  imul ecx, 00000070
:0040D3FD 81C198224900            add ecx, 00492298
:0040D403 E8427E0500              call 0046524A
:0040D408 8845F0                  mov byte ptr [ebp-10], al
:0040D40B 8B45F0                  mov eax, dword ptr [ebp-10]
:0040D40E 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040D413 3DFF000000              cmp eax, 000000FF
:0040D418 743A                    je 0040D454
:0040D41A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040D41D 81E1FF000000            and ecx, 000000FF
:0040D423 6BC924                  imul ecx, 00000024
:0040D426 81C108F54A00            add ecx, 004AF508
:0040D42C E83F74FFFF              call 00404870
:0040D431 8BF0                    mov esi, eax
:0040D433 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D436 81E1FFFF0000            and ecx, 0000FFFF
:0040D43C 6BC970                  imul ecx, 00000070
:0040D43F 81C198224900            add ecx, 00492298
:0040D445 E89650FFFF              call 004024E0
:0040D44A 33C9                    xor ecx, ecx
:0040D44C 3BF0                    cmp esi, eax
:0040D44E 0F94C1                  sete cl
:0040D451 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D3EF(C), :0040D418(C)
|
:0040D454 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D457 52                      push edx
:0040D458 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D45B 81E1FFFF0000            and ecx, 0000FFFF
:0040D461 6BC970                  imul ecx, 00000070
:0040D464 81C198224900            add ecx, 00492298
:0040D46A E8504CFFFF              call 004020BF
:0040D46F E89E940000              call 00416912
:0040D474 85C0                    test eax, eax
:0040D476 7473                    je 0040D4EB
:0040D478 8B45F0                  mov eax, dword ptr [ebp-10]
:0040D47B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040D480 3DFF000000              cmp eax, 000000FF
:0040D485 7464                    je 0040D4EB
:0040D487 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040D48B 745E                    je 0040D4EB
:0040D48D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D490 81E1FFFF0000            and ecx, 0000FFFF
:0040D496 6BC970                  imul ecx, 00000070
:0040D499 81C198224900            add ecx, 00492298
:0040D49F E83C50FFFF              call 004024E0
:0040D4A4 50                      push eax
:0040D4A5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040D4A8 81E1FF000000            and ecx, 000000FF
:0040D4AE 6BC924                  imul ecx, 00000024
:0040D4B1 81C108F54A00            add ecx, 004AF508
:0040D4B7 E8A4D40100              call 0042A960
:0040D4BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D4BF 81E1FFFF0000            and ecx, 0000FFFF
:0040D4C5 6BC970                  imul ecx, 00000070
:0040D4C8 81C198224900            add ecx, 00492298
:0040D4CE E83E50FFFF              call 00402511
:0040D4D3 50                      push eax
:0040D4D4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040D4D7 81E1FF000000            and ecx, 000000FF
:0040D4DD 6BC924                  imul ecx, 00000024
:0040D4E0 81C108F54A00            add ecx, 004AF508
:0040D4E6 E8D2D40100              call 0042A9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D476(C), :0040D485(C), :0040D48B(C)
|
:0040D4EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D4EE 81E1FFFF0000            and ecx, 0000FFFF
:0040D4F4 51                      push ecx
:0040D4F5 E8569A0500              call 00466F50
:0040D4FA 83C404                  add esp, 00000004
:0040D4FD B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D37F(U), :0040D39F(U)
|
:0040D502 5E                      pop esi
:0040D503 8BE5                    mov esp, ebp
:0040D505 5D                      pop ebp
:0040D506 C3                      ret



* Referenced by a CALL at Address:
|:004091A6   
|
:0040D507 55                      push ebp
:0040D508 8BEC                    mov ebp, esp
:0040D50A 83EC0C                  sub esp, 0000000C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040D50D 6A02                    push 00000002
:0040D50F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D512 E88A180000              call 0040EDA1
:0040D517 668945FC                mov word ptr [ebp-04], ax
:0040D51B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D51E 25FFFF0000              and eax, 0000FFFF
:0040D523 3D00800000              cmp eax, 00008000
:0040D528 750A                    jne 0040D534

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D52A B805000000              mov eax, 00000005
:0040D52F E95A010000              jmp 0040D68E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D528(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040D534 6A03                    push 00000003
:0040D536 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D539 E863180000              call 0040EDA1
:0040D53E 668945F8                mov word ptr [ebp-08], ax
:0040D542 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D545 81E1FFFF0000            and ecx, 0000FFFF
:0040D54B 81F900800000            cmp ecx, 00008000
:0040D551 750A                    jne 0040D55D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D553 B805000000              mov eax, 00000005
:0040D558 E931010000              jmp 0040D68E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D551(C)
|
:0040D55D E8B0930000              call 00416912
:0040D562 85C0                    test eax, eax
:0040D564 742E                    je 0040D594
:0040D566 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D569 81E2FFFF0000            and edx, 0000FFFF
:0040D56F 81FA00040000            cmp edx, 00000400
:0040D575 7C1D                    jl 0040D594
:0040D577 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D57A 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0040D57F 3D02040000              cmp eax, 00000402
:0040D584 7F0E                    jg 0040D594
:0040D586 B9880B4B00              mov ecx, 004B0B88
:0040D58B E8F0580400              call 00452E80
:0040D590 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D564(C), :0040D575(C), :0040D584(C)
|
:0040D594 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D597 81E1FFFF0000            and ecx, 0000FFFF
:0040D59D 81F985020000            cmp ecx, 00000285
:0040D5A3 0F8DE0000000            jnl 0040D689
:0040D5A9 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D5AC 81E2FFFF0000            and edx, 0000FFFF
:0040D5B2 52                      push edx

* Possible Reference to String Resource ID=00014: ""
                                  |
:0040D5B3 6A0E                    push 0000000E
:0040D5B5 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D5B8 25FFFF0000              and eax, 0000FFFF
:0040D5BD 50                      push eax
:0040D5BE E82745FFFF              call 00401AEA
:0040D5C3 83C40C                  add esp, 0000000C
:0040D5C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D5C9 81E1FFFF0000            and ecx, 0000FFFF
:0040D5CF 6BC970                  imul ecx, 00000070
:0040D5D2 81C198224900            add ecx, 00492298
:0040D5D8 E86E51FFFF              call 0040274B
:0040D5DD 50                      push eax
:0040D5DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D5E1 81E1FFFF0000            and ecx, 0000FFFF
:0040D5E7 6BC970                  imul ecx, 00000070
:0040D5EA 81C198224900            add ecx, 00492298
:0040D5F0 E89846FFFF              call 00401C8D
:0040D5F5 85C0                    test eax, eax
:0040D5F7 751C                    jne 0040D615

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040D5F9 68FF000000              push 000000FF
:0040D5FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D601 81E1FFFF0000            and ecx, 0000FFFF
:0040D607 6BC970                  imul ecx, 00000070
:0040D60A 81C198224900            add ecx, 00492298
:0040D610 E84C47FFFF              call 00401D61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D5F7(C)
|
:0040D615 E8F8920000              call 00416912
:0040D61A 85C0                    test eax, eax
:0040D61C 7459                    je 0040D677
:0040D61E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D621 81E1FFFF0000            and ecx, 0000FFFF
:0040D627 6BC970                  imul ecx, 00000070
:0040D62A 81C198224900            add ecx, 00492298
:0040D630 E8157C0500              call 0046524A
:0040D635 8845F4                  mov byte ptr [ebp-0C], al
:0040D638 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D63B 81E1FF000000            and ecx, 000000FF
:0040D641 81F9FF000000            cmp ecx, 000000FF
:0040D647 742E                    je 0040D677
:0040D649 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D64C 81E1FF000000            and ecx, 000000FF
:0040D652 6BC924                  imul ecx, 00000024
:0040D655 81C108F54A00            add ecx, 004AF508
:0040D65B E85EEE0100              call 0042C4BE
:0040D660 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D663 81E1FF000000            and ecx, 000000FF
:0040D669 6BC924                  imul ecx, 00000024
:0040D66C 81C108F54A00            add ecx, 004AF508
:0040D672 E8D1F50100              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D61C(C), :0040D647(C)
|
:0040D677 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D67A 81E2FFFF0000            and edx, 0000FFFF
:0040D680 52                      push edx
:0040D681 E8CA980500              call 00466F50
:0040D686 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D5A3(C)
|
:0040D689 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D52F(U), :0040D558(U)
|
:0040D68E 8BE5                    mov esp, ebp
:0040D690 5D                      pop ebp
:0040D691 C3                      ret



* Referenced by a CALL at Address:
|:004091B7   
|
:0040D692 55                      push ebp
:0040D693 8BEC                    mov ebp, esp
:0040D695 51                      push ecx
:0040D696 6A22                    push 00000022
:0040D698 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D69B E801170000              call 0040EDA1
:0040D6A0 668945FC                mov word ptr [ebp-04], ax
:0040D6A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D6A7 25FFFF0000              and eax, 0000FFFF
:0040D6AC 3D00800000              cmp eax, 00008000
:0040D6B1 7507                    jne 0040D6BA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D6B3 B805000000              mov eax, 00000005
:0040D6B8 EB13                    jmp 0040D6CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D6B1(C)
|
:0040D6BA 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040D6BD 51                      push ecx
:0040D6BE B9880B4B00              mov ecx, 004B0B88
:0040D6C3 E881CC0400              call 0045A349
:0040D6C8 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D6B8(U)
|
:0040D6CD 8BE5                    mov esp, ebp
:0040D6CF 5D                      pop ebp
:0040D6D0 C3                      ret



* Referenced by a CALL at Address:
|:004091C8   
|
:0040D6D1 55                      push ebp
:0040D6D2 8BEC                    mov ebp, esp
:0040D6D4 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040D6D5 6A02                    push 00000002
:0040D6D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D6DA E8C2160000              call 0040EDA1
:0040D6DF 668945FC                mov word ptr [ebp-04], ax
:0040D6E3 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D6E6 25FFFF0000              and eax, 0000FFFF
:0040D6EB 3D00800000              cmp eax, 00008000
:0040D6F0 7507                    jne 0040D6F9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D6F2 B805000000              mov eax, 00000005
:0040D6F7 EB26                    jmp 0040D71F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D6F0(C)
|
:0040D6F9 E814920000              call 00416912
:0040D6FE 85C0                    test eax, eax
:0040D700 7418                    je 0040D71A
:0040D702 6A00                    push 00000000
:0040D704 6A00                    push 00000000
:0040D706 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D709 81E1FFFF0000            and ecx, 0000FFFF
:0040D70F 51                      push ecx
:0040D710 B9880B4B00              mov ecx, 004B0B88
:0040D715 E88EB20400              call 004589A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D700(C)
|
:0040D71A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D6F7(U)
|
:0040D71F 8BE5                    mov esp, ebp
:0040D721 5D                      pop ebp
:0040D722 C3                      ret



* Referenced by a CALL at Address:
|:004091D9   
|
:0040D723 55                      push ebp
:0040D724 8BEC                    mov ebp, esp
:0040D726 83EC44                  sub esp, 00000044
:0040D729 6A2C                    push 0000002C
:0040D72B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D72E E86E160000              call 0040EDA1
:0040D733 668945E0                mov word ptr [ebp-20], ax
:0040D737 8B45E0                  mov eax, dword ptr [ebp-20]
:0040D73A 25FFFF0000              and eax, 0000FFFF
:0040D73F 3D00800000              cmp eax, 00008000
:0040D744 750A                    jne 0040D750

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D746 B805000000              mov eax, 00000005
:0040D74B E9FB020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D744(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040D750 6A02                    push 00000002
:0040D752 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D755 E847160000              call 0040EDA1
:0040D75A 668945F0                mov word ptr [ebp-10], ax
:0040D75E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040D761 81E1FFFF0000            and ecx, 0000FFFF
:0040D767 81F900800000            cmp ecx, 00008000
:0040D76D 750A                    jne 0040D779

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D76F B805000000              mov eax, 00000005
:0040D774 E9D2020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D76D(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D779 6A04                    push 00000004
:0040D77B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D77E E81E160000              call 0040EDA1
:0040D783 8945CC                  mov dword ptr [ebp-34], eax
:0040D786 817DCC00000080          cmp dword ptr [ebp-34], 80000000
:0040D78D 750A                    jne 0040D799

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D78F B805000000              mov eax, 00000005
:0040D794 E9B2020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D78D(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D799 6A04                    push 00000004
:0040D79B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D79E E8FE150000              call 0040EDA1
:0040D7A3 8945C8                  mov dword ptr [ebp-38], eax
:0040D7A6 817DC800000080          cmp dword ptr [ebp-38], 80000000
:0040D7AD 750A                    jne 0040D7B9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D7AF B805000000              mov eax, 00000005
:0040D7B4 E992020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D7AD(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D7B9 6A04                    push 00000004
:0040D7BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D7BE E8DE150000              call 0040EDA1
:0040D7C3 8945E8                  mov dword ptr [ebp-18], eax
:0040D7C6 817DE800000080          cmp dword ptr [ebp-18], 80000000
:0040D7CD 750A                    jne 0040D7D9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D7CF B805000000              mov eax, 00000005
:0040D7D4 E972020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D7CD(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D7D9 6A04                    push 00000004
:0040D7DB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D7DE E8BE150000              call 0040EDA1
:0040D7E3 8945E4                  mov dword ptr [ebp-1C], eax
:0040D7E6 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040D7ED 750A                    jne 0040D7F9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D7EF B805000000              mov eax, 00000005
:0040D7F4 E952020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D7ED(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040D7F9 6A03                    push 00000003
:0040D7FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D7FE E89E150000              call 0040EDA1
:0040D803 668945D8                mov word ptr [ebp-28], ax
:0040D807 8B55D8                  mov edx, dword ptr [ebp-28]
:0040D80A 81E2FFFF0000            and edx, 0000FFFF
:0040D810 81FA00800000            cmp edx, 00008000
:0040D816 750A                    jne 0040D822

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D818 B805000000              mov eax, 00000005
:0040D81D E929020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D816(C)
|
:0040D822 6A2F                    push 0000002F
:0040D824 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D827 E875150000              call 0040EDA1
:0040D82C 668945F4                mov word ptr [ebp-0C], ax
:0040D830 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040D833 25FFFF0000              and eax, 0000FFFF
:0040D838 3D00800000              cmp eax, 00008000
:0040D83D 750A                    jne 0040D849

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D83F B805000000              mov eax, 00000005
:0040D844 E902020000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D83D(C)
|
:0040D849 6A18                    push 00000018
:0040D84B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D84E E84E150000              call 0040EDA1
:0040D853 668945D4                mov word ptr [ebp-2C], ax
:0040D857 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0040D85A 81E1FFFF0000            and ecx, 0000FFFF
:0040D860 81F900800000            cmp ecx, 00008000
:0040D866 750A                    jne 0040D872

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D868 B805000000              mov eax, 00000005
:0040D86D E9D9010000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D866(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D872 6A04                    push 00000004
:0040D874 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D877 E825150000              call 0040EDA1
:0040D87C 8945EC                  mov dword ptr [ebp-14], eax
:0040D87F 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040D886 750A                    jne 0040D892

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D888 B805000000              mov eax, 00000005
:0040D88D E9B9010000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D886(C)
|
:0040D892 6A30                    push 00000030
:0040D894 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D897 E805150000              call 0040EDA1
:0040D89C 668945FC                mov word ptr [ebp-04], ax
:0040D8A0 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D8A3 81E2FFFF0000            and edx, 0000FFFF
:0040D8A9 81FA00800000            cmp edx, 00008000
:0040D8AF 750A                    jne 0040D8BB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D8B1 B805000000              mov eax, 00000005
:0040D8B6 E990010000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D8AF(C)
|
:0040D8BB E852900000              call 00416912
:0040D8C0 85C0                    test eax, eax
:0040D8C2 750A                    jne 0040D8CE
:0040D8C4 B801000000              mov eax, 00000001
:0040D8C9 E97D010000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D8C2(C)
|
:0040D8CE C645F800                mov [ebp-08], 00
:0040D8D2 C645D000                mov [ebp-30], 00
:0040D8D6 C645DC00                mov [ebp-24], 00
:0040D8DA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040D8DD 25FFFF0000              and eax, 0000FFFF
:0040D8E2 8945C4                  mov dword ptr [ebp-3C], eax
:0040D8E5 837DC404                cmp dword ptr [ebp-3C], 00000004
:0040D8E9 7773                    ja 0040D95E
:0040D8EB 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0040D8EE FF248D4FDA4000          jmp dword ptr [4*ecx+0040DA4F]
:0040D8F5 8A55F4                  mov dl, byte ptr [ebp-0C]
:0040D8F8 8855F8                  mov byte ptr [ebp-08], dl
:0040D8FB 8A45D4                  mov al, byte ptr [ebp-2C]
:0040D8FE 8845D0                  mov byte ptr [ebp-30], al
:0040D901 EB65                    jmp 0040D968
:0040D903 C645F804                mov [ebp-08], 04
:0040D907 8A4DD4                  mov cl, byte ptr [ebp-2C]
:0040D90A 884DD0                  mov byte ptr [ebp-30], cl
:0040D90D EB59                    jmp 0040D968
:0040D90F C645F802                mov [ebp-08], 02
:0040D913 8A55EC                  mov dl, byte ptr [ebp-14]
:0040D916 8855D0                  mov byte ptr [ebp-30], dl
:0040D919 EB4D                    jmp 0040D968
:0040D91B C645F803                mov [ebp-08], 03
:0040D91F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D922 25FFFF0000              and eax, 0000FFFF
:0040D927 8945C0                  mov dword ptr [ebp-40], eax
:0040D92A 837DC004                cmp dword ptr [ebp-40], 00000004
:0040D92E 7728                    ja 0040D958
:0040D930 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D933 FF248D63DA4000          jmp dword ptr [4*ecx+0040DA63]
:0040D93A C645D010                mov [ebp-30], 10
:0040D93E EB1C                    jmp 0040D95C
:0040D940 C645D004                mov [ebp-30], 04
:0040D944 EB16                    jmp 0040D95C
:0040D946 C645D001                mov [ebp-30], 01
:0040D94A EB10                    jmp 0040D95C
:0040D94C C645D002                mov [ebp-30], 02
:0040D950 EB0A                    jmp 0040D95C
:0040D952 C645D020                mov [ebp-30], 20
:0040D956 EB04                    jmp 0040D95C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D92E(C)
|
:0040D958 C645D000                mov [ebp-30], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D93E(U), :0040D944(U), :0040D94A(U), :0040D950(U), :0040D956(U)
|
:0040D95C EB0A                    jmp 0040D968

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D8E9(C)
|
:0040D95E B801000000              mov eax, 00000001
:0040D963 E9E3000000              jmp 0040DA4B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D901(U), :0040D90D(U), :0040D919(U), :0040D95C(U)
|
:0040D968 8B55E0                  mov edx, dword ptr [ebp-20]
:0040D96B 81E2FFFF0000            and edx, 0000FFFF
:0040D971 85D2                    test edx, edx
:0040D973 7569                    jne 0040D9DE
:0040D975 E8988F0000              call 00416912
:0040D97A 85C0                    test eax, eax
:0040D97C 742E                    je 0040D9AC
:0040D97E 8B45F0                  mov eax, dword ptr [ebp-10]
:0040D981 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0040D986 3D00040000              cmp eax, 00000400
:0040D98B 7C1F                    jl 0040D9AC
:0040D98D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040D990 81E1FFFF0000            and ecx, 0000FFFF
:0040D996 81F902040000            cmp ecx, 00000402
:0040D99C 7F0E                    jg 0040D9AC
:0040D99E B9880B4B00              mov ecx, 004B0B88
:0040D9A3 E8D8540400              call 00452E80
:0040D9A8 668945F0                mov word ptr [ebp-10], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D97C(C), :0040D98B(C), :0040D99C(C)
|
:0040D9AC 6A01                    push 00000001
:0040D9AE 8A55D0                  mov dl, byte ptr [ebp-30]
:0040D9B1 52                      push edx
:0040D9B2 8A45F8                  mov al, byte ptr [ebp-08]
:0040D9B5 50                      push eax
:0040D9B6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040D9B9 81E1FFFF0000            and ecx, 0000FFFF
:0040D9BF 51                      push ecx
:0040D9C0 B9880B4B00              mov ecx, 004B0B88
:0040D9C5 E8D5C00400              call 00459A9F
:0040D9CA 8B55F0                  mov edx, dword ptr [ebp-10]
:0040D9CD 81E2FFFF0000            and edx, 0000FFFF
:0040D9D3 52                      push edx
:0040D9D4 E877950500              call 00466F50
:0040D9D9 83C404                  add esp, 00000004
:0040D9DC EB68                    jmp 0040DA46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D973(C)
|
:0040D9DE 8B45E0                  mov eax, dword ptr [ebp-20]
:0040D9E1 25FFFF0000              and eax, 0000FFFF
:0040D9E6 85C0                    test eax, eax
:0040D9E8 745C                    je 0040DA46
:0040D9EA 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040D9ED 81E1FFFF0000            and ecx, 0000FFFF
:0040D9F3 894DBC                  mov dword ptr [ebp-44], ecx
:0040D9F6 837DBC00                cmp dword ptr [ebp-44], 00000000
:0040D9FA 740E                    je 0040DA0A
:0040D9FC 837DBC01                cmp dword ptr [ebp-44], 00000001
:0040DA00 740E                    je 0040DA10
:0040DA02 837DBC02                cmp dword ptr [ebp-44], 00000002
:0040DA06 740E                    je 0040DA16
:0040DA08 EB12                    jmp 0040DA1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D9FA(C)
|
:0040DA0A C645DC01                mov [ebp-24], 01
:0040DA0E EB10                    jmp 0040DA20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DA00(C)
|
:0040DA10 C645DC00                mov [ebp-24], 00
:0040DA14 EB0A                    jmp 0040DA20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DA06(C)
|
:0040DA16 C645DC02                mov [ebp-24], 02
:0040DA1A EB04                    jmp 0040DA20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DA08(U)
|
:0040DA1C C645DC02                mov [ebp-24], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DA0E(U), :0040DA14(U), :0040DA1A(U)
|
:0040DA20 8A55D0                  mov dl, byte ptr [ebp-30]
:0040DA23 52                      push edx
:0040DA24 8A45F8                  mov al, byte ptr [ebp-08]
:0040DA27 50                      push eax
:0040DA28 8A4DDC                  mov cl, byte ptr [ebp-24]
:0040DA2B 51                      push ecx
:0040DA2C 8A55E4                  mov dl, byte ptr [ebp-1C]
:0040DA2F 52                      push edx
:0040DA30 8A45E8                  mov al, byte ptr [ebp-18]
:0040DA33 50                      push eax
:0040DA34 8A4DC8                  mov cl, byte ptr [ebp-38]
:0040DA37 51                      push ecx
:0040DA38 8A55CC                  mov dl, byte ptr [ebp-34]
:0040DA3B 52                      push edx
:0040DA3C B9880B4B00              mov ecx, 004B0B88
:0040DA41 E894C20400              call 00459CDA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D9DC(U), :0040D9E8(C)
|
:0040DA46 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D74B(U), :0040D774(U), :0040D794(U), :0040D7B4(U), :0040D7D4(U)
|:0040D7F4(U), :0040D81D(U), :0040D844(U), :0040D86D(U), :0040D88D(U)
|:0040D8B6(U), :0040D8C9(U), :0040D963(U)
|
:0040DA4B 8BE5                    mov esp, ebp
:0040DA4D 5D                      pop ebp
:0040DA4E C3                      ret



:0040DA4F F5D84000                DWORD 0040D8F5
:0040DA53 F5D84000                DWORD 0040D8F5
:0040DA57 03D94000                DWORD 0040D903
:0040DA5B 0FD94000                DWORD 0040D90F
:0040DA5F 1BD94000                DWORD 0040D91B
:0040DA63 3AD94000                DWORD 0040D93A
:0040DA67 40D94000                DWORD 0040D940
:0040DA6B 46D94000                DWORD 0040D946
:0040DA6F 4CD94000                DWORD 0040D94C
:0040DA73 52D94000                DWORD 0040D952



* Referenced by a CALL at Address:
|:004091EA   
|
:0040DA77 55                      push ebp
:0040DA78 8BEC                    mov ebp, esp
:0040DA7A B801000000              mov eax, 00000001
:0040DA7F 5D                      pop ebp
:0040DA80 C3                      ret



* Referenced by a CALL at Address:
|:004091FB   
|
:0040DA81 55                      push ebp
:0040DA82 8BEC                    mov ebp, esp
:0040DA84 83EC1C                  sub esp, 0000001C
:0040DA87 6A2C                    push 0000002C
:0040DA89 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DA8C E810130000              call 0040EDA1
:0040DA91 668945F0                mov word ptr [ebp-10], ax
:0040DA95 8B45F0                  mov eax, dword ptr [ebp-10]
:0040DA98 25FFFF0000              and eax, 0000FFFF
:0040DA9D 3D00800000              cmp eax, 00008000
:0040DAA2 750A                    jne 0040DAAE

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DAA4 B805000000              mov eax, 00000005
:0040DAA9 E979010000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAA2(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040DAAE 6A02                    push 00000002
:0040DAB0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DAB3 E8E9120000              call 0040EDA1
:0040DAB8 668945FC                mov word ptr [ebp-04], ax
:0040DABC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DABF 81E1FFFF0000            and ecx, 0000FFFF
:0040DAC5 81F900800000            cmp ecx, 00008000
:0040DACB 750A                    jne 0040DAD7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DACD B805000000              mov eax, 00000005
:0040DAD2 E950010000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DACB(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DAD7 6A04                    push 00000004
:0040DAD9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DADC E8C0120000              call 0040EDA1
:0040DAE1 8945EC                  mov dword ptr [ebp-14], eax
:0040DAE4 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040DAEB 750A                    jne 0040DAF7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DAED B805000000              mov eax, 00000005
:0040DAF2 E930010000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAEB(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DAF7 6A04                    push 00000004
:0040DAF9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DAFC E8A0120000              call 0040EDA1
:0040DB01 8945E4                  mov dword ptr [ebp-1C], eax
:0040DB04 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040DB0B 750A                    jne 0040DB17

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DB0D B805000000              mov eax, 00000005
:0040DB12 E910010000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB0B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DB17 6A04                    push 00000004
:0040DB19 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DB1C E880120000              call 0040EDA1
:0040DB21 8945F8                  mov dword ptr [ebp-08], eax
:0040DB24 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040DB2B 750A                    jne 0040DB37

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DB2D B805000000              mov eax, 00000005
:0040DB32 E9F0000000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB2B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DB37 6A04                    push 00000004
:0040DB39 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DB3C E860120000              call 0040EDA1
:0040DB41 8945F4                  mov dword ptr [ebp-0C], eax
:0040DB44 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040DB4B 750A                    jne 0040DB57

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DB4D B805000000              mov eax, 00000005
:0040DB52 E9D0000000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB4B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040DB57 6A03                    push 00000003
:0040DB59 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DB5C E840120000              call 0040EDA1
:0040DB61 668945E8                mov word ptr [ebp-18], ax
:0040DB65 8B55E8                  mov edx, dword ptr [ebp-18]
:0040DB68 81E2FFFF0000            and edx, 0000FFFF
:0040DB6E 81FA00800000            cmp edx, 00008000
:0040DB74 750A                    jne 0040DB80

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DB76 B805000000              mov eax, 00000005
:0040DB7B E9A7000000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB74(C)
|
:0040DB80 E88D8D0000              call 00416912
:0040DB85 85C0                    test eax, eax
:0040DB87 750A                    jne 0040DB93
:0040DB89 B801000000              mov eax, 00000001
:0040DB8E E994000000              jmp 0040DC27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB87(C)
|
:0040DB93 8B45F0                  mov eax, dword ptr [ebp-10]
:0040DB96 25FFFF0000              and eax, 0000FFFF
:0040DB9B 85C0                    test eax, eax
:0040DB9D 754E                    jne 0040DBED
:0040DB9F E86E8D0000              call 00416912
:0040DBA4 85C0                    test eax, eax
:0040DBA6 7430                    je 0040DBD8
:0040DBA8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DBAB 81E1FFFF0000            and ecx, 0000FFFF
:0040DBB1 81F900040000            cmp ecx, 00000400
:0040DBB7 7C1F                    jl 0040DBD8
:0040DBB9 8B55FC                  mov edx, dword ptr [ebp-04]
:0040DBBC 81E2FFFF0000            and edx, 0000FFFF
:0040DBC2 81FA02040000            cmp edx, 00000402
:0040DBC8 7F0E                    jg 0040DBD8
:0040DBCA B9880B4B00              mov ecx, 004B0B88
:0040DBCF E8AC520400              call 00452E80
:0040DBD4 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DBA6(C), :0040DBB7(C), :0040DBC8(C)
|
:0040DBD8 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DBDB 25FFFF0000              and eax, 0000FFFF
:0040DBE0 50                      push eax
:0040DBE1 B9880B4B00              mov ecx, 004B0B88
:0040DBE6 E8ECBC0400              call 004598D7
:0040DBEB EB35                    jmp 0040DC22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB9D(C)
|
:0040DBED 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040DBF0 81E1FFFF0000            and ecx, 0000FFFF
:0040DBF6 81F9FFFF0000            cmp ecx, 0000FFFF
:0040DBFC 7506                    jne 0040DC04
:0040DBFE 66C745E80200            mov [ebp-18], 0002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DBFC(C)
|
:0040DC04 8A55E8                  mov dl, byte ptr [ebp-18]
:0040DC07 52                      push edx
:0040DC08 8A45F4                  mov al, byte ptr [ebp-0C]
:0040DC0B 50                      push eax
:0040DC0C 8A4DF8                  mov cl, byte ptr [ebp-08]
:0040DC0F 51                      push ecx
:0040DC10 8A55E4                  mov dl, byte ptr [ebp-1C]
:0040DC13 52                      push edx
:0040DC14 8A45EC                  mov al, byte ptr [ebp-14]
:0040DC17 50                      push eax
:0040DC18 B9880B4B00              mov ecx, 004B0B88
:0040DC1D E8FFBC0400              call 00459921

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DBEB(U)
|
:0040DC22 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DAA9(U), :0040DAD2(U), :0040DAF2(U), :0040DB12(U), :0040DB32(U)
|:0040DB52(U), :0040DB7B(U), :0040DB8E(U)
|
:0040DC27 8BE5                    mov esp, ebp
:0040DC29 5D                      pop ebp
:0040DC2A C3                      ret



* Referenced by a CALL at Address:
|:0040920C   
|
:0040DC2B 55                      push ebp
:0040DC2C 8BEC                    mov ebp, esp
:0040DC2E E8DF8C0000              call 00416912
:0040DC33 85C0                    test eax, eax
:0040DC35 740C                    je 0040DC43

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040DC37 6A02                    push 00000002
:0040DC39 B9880B4B00              mov ecx, 004B0B88
:0040DC3E E812B20400              call 00458E55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DC35(C)
|
:0040DC43 B801000000              mov eax, 00000001
:0040DC48 5D                      pop ebp
:0040DC49 C3                      ret



* Referenced by a CALL at Address:
|:0040921D   
|
:0040DC4A 55                      push ebp
:0040DC4B 8BEC                    mov ebp, esp
:0040DC4D 83EC08                  sub esp, 00000008
:0040DC50 6A1E                    push 0000001E
:0040DC52 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DC55 E847110000              call 0040EDA1
:0040DC5A 668945FC                mov word ptr [ebp-04], ax
:0040DC5E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DC61 25FFFF0000              and eax, 0000FFFF
:0040DC66 3D00800000              cmp eax, 00008000
:0040DC6B 7507                    jne 0040DC74

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DC6D B805000000              mov eax, 00000005
:0040DC72 EB3A                    jmp 0040DCAE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DC6B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DC74 6A04                    push 00000004
:0040DC76 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DC79 E823110000              call 0040EDA1
:0040DC7E 8945F8                  mov dword ptr [ebp-08], eax
:0040DC81 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040DC88 7507                    jne 0040DC91

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DC8A B805000000              mov eax, 00000005
:0040DC8F EB1D                    jmp 0040DCAE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DC88(C)
|
:0040DC91 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DC94 51                      push ecx
:0040DC95 8B55FC                  mov edx, dword ptr [ebp-04]
:0040DC98 81E2FFFF0000            and edx, 0000FFFF
:0040DC9E 52                      push edx
:0040DC9F B9800D4B00              mov ecx, 004B0D80
:0040DCA4 E896410500              call 00461E3F
:0040DCA9 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DC72(U), :0040DC8F(U)
|
:0040DCAE 8BE5                    mov esp, ebp
:0040DCB0 5D                      pop ebp
:0040DCB1 C3                      ret



* Referenced by a CALL at Address:
|:0040922E   
|
:0040DCB2 55                      push ebp
:0040DCB3 8BEC                    mov ebp, esp
:0040DCB5 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0040DCB6 6A09                    push 00000009
:0040DCB8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DCBB E8E1100000              call 0040EDA1
:0040DCC0 668945FC                mov word ptr [ebp-04], ax
:0040DCC4 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DCC7 25FFFF0000              and eax, 0000FFFF
:0040DCCC 3D00800000              cmp eax, 00008000
:0040DCD1 7507                    jne 0040DCDA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DCD3 B805000000              mov eax, 00000005
:0040DCD8 EB48                    jmp 0040DD22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DCD1(C)
|
:0040DCDA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DCDD 81E1FFFF0000            and ecx, 0000FFFF
:0040DCE3 81F9FF000000            cmp ecx, 000000FF
:0040DCE9 7419                    je 0040DD04
:0040DCEB 8B55FC                  mov edx, dword ptr [ebp-04]
:0040DCEE 81E2FFFF0000            and edx, 0000FFFF
:0040DCF4 83C202                  add edx, 00000002
:0040DCF7 52                      push edx
:0040DCF8 B9880D4B00              mov ecx, 004B0D88
:0040DCFD E82B3E0500              call 00461B2D
:0040DD02 EB19                    jmp 0040DD1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DCE9(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040DD04 68FF000000              push 000000FF
:0040DD09 B9C8E24A00              mov ecx, 004AE2C8
:0040DD0E E8CDBE0200              call 00439BE0
:0040DD13 B9880D4B00              mov ecx, 004B0D88
:0040DD18 E82B3E0500              call 00461B48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD02(U)
|
:0040DD1D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DCD8(U)
|
:0040DD22 8BE5                    mov esp, ebp
:0040DD24 5D                      pop ebp
:0040DD25 C3                      ret



* Referenced by a CALL at Address:
|:0040923F   
|
:0040DD26 55                      push ebp
:0040DD27 8BEC                    mov ebp, esp
:0040DD29 E8E48B0000              call 00416912
:0040DD2E 85C0                    test eax, eax
:0040DD30 7413                    je 0040DD45

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040DD32 6A03                    push 00000003
:0040DD34 B9880B4B00              mov ecx, 004B0B88
:0040DD39 E817B10400              call 00458E55
:0040DD3E B801000000              mov eax, 00000001
:0040DD43 EB05                    jmp 0040DD4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD30(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040DD45 B803000000              mov eax, 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD43(U)
|
:0040DD4A 5D                      pop ebp
:0040DD4B C3                      ret



* Referenced by a CALL at Address:
|:00409250   
|
:0040DD4C 55                      push ebp
:0040DD4D 8BEC                    mov ebp, esp
:0040DD4F 51                      push ecx

* Possible Reference to String Resource ID=00018: "G"
                                  |
:0040DD50 6A12                    push 00000012
:0040DD52 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DD55 E847100000              call 0040EDA1
:0040DD5A 668945FC                mov word ptr [ebp-04], ax
:0040DD5E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DD61 25FFFF0000              and eax, 0000FFFF
:0040DD66 3D00800000              cmp eax, 00008000
:0040DD6B 7507                    jne 0040DD74

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DD6D B805000000              mov eax, 00000005
:0040DD72 EB17                    jmp 0040DD8B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD6B(C)
|
:0040DD74 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DD77 81E1FFFF0000            and ecx, 0000FFFF
:0040DD7D 51                      push ecx
:0040DD7E E86F870100              call 004264F2
:0040DD83 83C404                  add esp, 00000004
:0040DD86 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD72(U)
|
:0040DD8B 8BE5                    mov esp, ebp
:0040DD8D 5D                      pop ebp
:0040DD8E C3                      ret



* Referenced by a CALL at Address:
|:00409261   
|
:0040DD8F 55                      push ebp
:0040DD90 8BEC                    mov ebp, esp
:0040DD92 51                      push ecx
:0040DD93 6A31                    push 00000031
:0040DD95 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DD98 E804100000              call 0040EDA1
:0040DD9D 668945FC                mov word ptr [ebp-04], ax
:0040DDA1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DDA4 25FFFF0000              and eax, 0000FFFF
:0040DDA9 3D00800000              cmp eax, 00008000
:0040DDAE 7507                    jne 0040DDB7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DDB0 B805000000              mov eax, 00000005
:0040DDB5 EB31                    jmp 0040DDE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DDAE(C)
|
:0040DDB7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DDBA 81E1FFFF0000            and ecx, 0000FFFF
:0040DDC0 85C9                    test ecx, ecx
:0040DDC2 7412                    je 0040DDD6
:0040DDC4 E89F8D0000              call 00416B68
:0040DDC9 85C0                    test eax, eax
:0040DDCB 7407                    je 0040DDD4
:0040DDCD B801000000              mov eax, 00000001
:0040DDD2 EB14                    jmp 0040DDE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DDCB(C)
|
:0040DDD4 EB10                    jmp 0040DDE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DDC2(C)
|
:0040DDD6 E88D8D0000              call 00416B68
:0040DDDB 85C0                    test eax, eax
:0040DDDD 7407                    je 0040DDE6
:0040DDDF B801000000              mov eax, 00000001
:0040DDE4 EB02                    jmp 0040DDE8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DDD4(U), :0040DDDD(C)
|
:0040DDE6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DDB5(U), :0040DDD2(U), :0040DDE4(U)
|
:0040DDE8 8BE5                    mov esp, ebp
:0040DDEA 5D                      pop ebp
:0040DDEB C3                      ret



* Referenced by a CALL at Address:
|:00409272   
|
:0040DDEC 55                      push ebp
:0040DDED 8BEC                    mov ebp, esp
:0040DDEF 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040DDF0 6A02                    push 00000002
:0040DDF2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DDF5 E8A70F0000              call 0040EDA1
:0040DDFA 668945FC                mov word ptr [ebp-04], ax
:0040DDFE 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DE01 25FFFF0000              and eax, 0000FFFF
:0040DE06 3D00800000              cmp eax, 00008000
:0040DE0B 7507                    jne 0040DE14

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DE0D B805000000              mov eax, 00000005
:0040DE12 EB26                    jmp 0040DE3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE0B(C)
|
:0040DE14 E8F98A0000              call 00416912
:0040DE19 85C0                    test eax, eax
:0040DE1B 7418                    je 0040DE35
:0040DE1D 6A00                    push 00000000
:0040DE1F 6A00                    push 00000000
:0040DE21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DE24 81E1FFFF0000            and ecx, 0000FFFF
:0040DE2A 51                      push ecx
:0040DE2B B9880B4B00              mov ecx, 004B0B88
:0040DE30 E89BAC0400              call 00458AD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE1B(C)
|
:0040DE35 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE12(U)
|
:0040DE3A 8BE5                    mov esp, ebp
:0040DE3C 5D                      pop ebp
:0040DE3D C3                      ret



* Referenced by a CALL at Address:
|:00409283   
|
:0040DE3E 55                      push ebp
:0040DE3F 8BEC                    mov ebp, esp
:0040DE41 51                      push ecx
:0040DE42 C745FC00000000          mov [ebp-04], 00000000
:0040DE49 EB09                    jmp 0040DE54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE6B(U)
|
:0040DE4B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DE4E 83C001                  add eax, 00000001
:0040DE51 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE49(U)
|
:0040DE54 817DFC00010000          cmp dword ptr [ebp-04], 00000100
:0040DE5B 7310                    jnb 0040DE6D
:0040DE5D 6A00                    push 00000000
:0040DE5F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DE62 51                      push ecx
:0040DE63 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DE66 E810100000              call 0040EE7B
:0040DE6B EBDE                    jmp 0040DE4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE5B(C)
|
:0040DE6D B801000000              mov eax, 00000001
:0040DE72 8BE5                    mov esp, ebp
:0040DE74 5D                      pop ebp
:0040DE75 C3                      ret



* Referenced by a CALL at Address:
|:00409294   
|
:0040DE76 55                      push ebp
:0040DE77 8BEC                    mov ebp, esp
:0040DE79 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DE7A 6A04                    push 00000004
:0040DE7C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DE7F E81D0F0000              call 0040EDA1
:0040DE84 8945FC                  mov dword ptr [ebp-04], eax
:0040DE87 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040DE8E 7507                    jne 0040DE97

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DE90 B805000000              mov eax, 00000005
:0040DE95 EB11                    jmp 0040DEA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE8E(C)
|
:0040DE97 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DE9A 50                      push eax
:0040DE9B E8328D0100              call 00426BD2
:0040DEA0 83C404                  add esp, 00000004
:0040DEA3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE95(U)
|
:0040DEA8 8BE5                    mov esp, ebp
:0040DEAA 5D                      pop ebp
:0040DEAB C3                      ret



* Referenced by a CALL at Address:
|:004092A5   
|
:0040DEAC 55                      push ebp
:0040DEAD 8BEC                    mov ebp, esp
:0040DEAF 81EC0C040000            sub esp, 0000040C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DEB5 6A05                    push 00000005
:0040DEB7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DEBA E8E20E0000              call 0040EDA1
:0040DEBF 8945F8                  mov dword ptr [ebp-08], eax
:0040DEC2 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040DEC9 7507                    jne 0040DED2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DECB B805000000              mov eax, 00000005
:0040DED0 EB2E                    jmp 0040DF00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DEC9(C)
|
:0040DED2 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DED5 8945FC                  mov dword ptr [ebp-04], eax
:0040DED8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DEDB 51                      push ecx
:0040DEDC 8D95F4FBFFFF            lea edx, dword ptr [ebp+FFFFFBF4]
:0040DEE2 52                      push edx
:0040DEE3 B9F8134800              mov ecx, 004813F8
:0040DEE8 E860040000              call 0040E34D
:0040DEED 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DEF0 50                      push eax
:0040DEF1 B9B0114800              mov ecx, 004811B0
:0040DEF6 E8EB6CFFFF              call 00404BE6
:0040DEFB B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DED0(U)
|
:0040DF00 8BE5                    mov esp, ebp
:0040DF02 5D                      pop ebp
:0040DF03 C3                      ret



* Referenced by a CALL at Address:
|:004092B3   
|
:0040DF04 55                      push ebp
:0040DF05 8BEC                    mov ebp, esp
:0040DF07 51                      push ecx
:0040DF08 6A26                    push 00000026
:0040DF0A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DF0D E88F0E0000              call 0040EDA1
:0040DF12 8945FC                  mov dword ptr [ebp-04], eax
:0040DF15 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040DF1C 7507                    jne 0040DF25

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DF1E B805000000              mov eax, 00000005
:0040DF23 EB31                    jmp 0040DF56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF1C(C)
|
:0040DF25 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040DF29 741C                    je 0040DF47
:0040DF2B E8B1CF0400              call 0045AEE1
:0040DF30 50                      push eax
:0040DF31 B9C8E24A00              mov ecx, 004AE2C8
:0040DF36 E8E51C0200              call 0042FC20
:0040DF3B B9A0574800              mov ecx, 004857A0
:0040DF40 E845710000              call 0041508A
:0040DF45 EB0A                    jmp 0040DF51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF29(C)
|
:0040DF47 B9A0574800              mov ecx, 004857A0
:0040DF4C E89A770000              call 004156EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF45(U)
|
:0040DF51 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF23(U)
|
:0040DF56 8BE5                    mov esp, ebp
:0040DF58 5D                      pop ebp
:0040DF59 C3                      ret



* Referenced by a CALL at Address:
|:004092C1   
|
:0040DF5A 55                      push ebp
:0040DF5B 8BEC                    mov ebp, esp
:0040DF5D 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040DF60 6A02                    push 00000002
:0040DF62 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DF65 E8370E0000              call 0040EDA1
:0040DF6A 668945F8                mov word ptr [ebp-08], ax
:0040DF6E 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DF71 25FFFF0000              and eax, 0000FFFF
:0040DF76 3D00800000              cmp eax, 00008000
:0040DF7B 750A                    jne 0040DF87

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DF7D B805000000              mov eax, 00000005
:0040DF82 E980000000              jmp 0040E007

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF7B(C)
|
:0040DF87 6A37                    push 00000037
:0040DF89 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DF8C E8100E0000              call 0040EDA1
:0040DF91 668945FC                mov word ptr [ebp-04], ax
:0040DF95 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DF98 81E1FFFF0000            and ecx, 0000FFFF
:0040DF9E 81F900800000            cmp ecx, 00008000
:0040DFA4 7507                    jne 0040DFAD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040DFA6 B805000000              mov eax, 00000005
:0040DFAB EB5A                    jmp 0040E007

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DFA4(C)
|
:0040DFAD E860890000              call 00416912
:0040DFB2 85C0                    test eax, eax
:0040DFB4 744C                    je 0040E002
:0040DFB6 8B55F8                  mov edx, dword ptr [ebp-08]
:0040DFB9 81E2FFFF0000            and edx, 0000FFFF
:0040DFBF 81FA00040000            cmp edx, 00000400
:0040DFC5 7C1D                    jl 0040DFE4
:0040DFC7 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DFCA 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0040DFCF 3D02040000              cmp eax, 00000402
:0040DFD4 7F0E                    jg 0040DFE4
:0040DFD6 B9880B4B00              mov ecx, 004B0B88
:0040DFDB E8A04E0400              call 00452E80
:0040DFE0 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DFC5(C), :0040DFD4(C)
|
:0040DFE4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DFE7 81E1FFFF0000            and ecx, 0000FFFF
:0040DFED 51                      push ecx
:0040DFEE 8B55F8                  mov edx, dword ptr [ebp-08]
:0040DFF1 81E2FFFF0000            and edx, 0000FFFF
:0040DFF7 52                      push edx
:0040DFF8 B9880B4B00              mov ecx, 004B0B88
:0040DFFD E81CC20400              call 0045A21E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DFB4(C)
|
:0040E002 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DF82(U), :0040DFAB(U)
|
:0040E007 8BE5                    mov esp, ebp
:0040E009 5D                      pop ebp
:0040E00A C3                      ret



* Referenced by a CALL at Address:
|:004092CF   
|
:0040E00B 55                      push ebp
:0040E00C 8BEC                    mov ebp, esp
:0040E00E 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040E011 6A02                    push 00000002
:0040E013 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E016 E8860D0000              call 0040EDA1
:0040E01B 668945FC                mov word ptr [ebp-04], ax
:0040E01F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040E022 25FFFF0000              and eax, 0000FFFF
:0040E027 3D00800000              cmp eax, 00008000
:0040E02C 750A                    jne 0040E038

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E02E B805000000              mov eax, 00000005
:0040E033 E980000000              jmp 0040E0B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E02C(C)
|
:0040E038 6A38                    push 00000038
:0040E03A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E03D E85F0D0000              call 0040EDA1
:0040E042 668945F8                mov word ptr [ebp-08], ax
:0040E046 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040E049 81E1FFFF0000            and ecx, 0000FFFF
:0040E04F 81F900800000            cmp ecx, 00008000
:0040E055 7507                    jne 0040E05E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E057 B805000000              mov eax, 00000005
:0040E05C EB5A                    jmp 0040E0B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E055(C)
|
:0040E05E E8AF880000              call 00416912
:0040E063 85C0                    test eax, eax
:0040E065 744C                    je 0040E0B3
:0040E067 8B55FC                  mov edx, dword ptr [ebp-04]
:0040E06A 81E2FFFF0000            and edx, 0000FFFF
:0040E070 81FA00040000            cmp edx, 00000400
:0040E076 7C1D                    jl 0040E095
:0040E078 8B45FC                  mov eax, dword ptr [ebp-04]
:0040E07B 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0040E080 3D02040000              cmp eax, 00000402
:0040E085 7F0E                    jg 0040E095
:0040E087 B9880B4B00              mov ecx, 004B0B88
:0040E08C E8EF4D0400              call 00452E80
:0040E091 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E076(C), :0040E085(C)
|
:0040E095 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040E098 81E1FFFF0000            and ecx, 0000FFFF
:0040E09E 51                      push ecx
:0040E09F 8B55FC                  mov edx, dword ptr [ebp-04]
:0040E0A2 81E2FFFF0000            and edx, 0000FFFF
:0040E0A8 52                      push edx
:0040E0A9 B9880B4B00              mov ecx, 004B0B88
:0040E0AE E898C10400              call 0045A24B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E065(C)
|
:0040E0B3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E033(U), :0040E05C(U)
|
:0040E0B8 8BE5                    mov esp, ebp
:0040E0BA 5D                      pop ebp
:0040E0BB C3                      ret



* Referenced by a CALL at Address:
|:004092DD   
|
:0040E0BC 55                      push ebp
:0040E0BD 8BEC                    mov ebp, esp
:0040E0BF 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040E0C2 6A02                    push 00000002
:0040E0C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E0C7 E8D50C0000              call 0040EDA1
:0040E0CC 668945FC                mov word ptr [ebp-04], ax
:0040E0D0 8B45FC                  mov eax, dword ptr [ebp-04]
:0040E0D3 25FFFF0000              and eax, 0000FFFF
:0040E0D8 3D00800000              cmp eax, 00008000
:0040E0DD 750A                    jne 0040E0E9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E0DF B805000000              mov eax, 00000005
:0040E0E4 E980000000              jmp 0040E169

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E0DD(C)
|
:0040E0E9 6A38                    push 00000038
:0040E0EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E0EE E8AE0C0000              call 0040EDA1
:0040E0F3 668945F8                mov word ptr [ebp-08], ax
:0040E0F7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040E0FA 81E1FFFF0000            and ecx, 0000FFFF
:0040E100 81F900800000            cmp ecx, 00008000
:0040E106 7507                    jne 0040E10F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E108 B805000000              mov eax, 00000005
:0040E10D EB5A                    jmp 0040E169

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E106(C)
|
:0040E10F E8FE870000              call 00416912
:0040E114 85C0                    test eax, eax
:0040E116 744C                    je 0040E164
:0040E118 8B55FC                  mov edx, dword ptr [ebp-04]
:0040E11B 81E2FFFF0000            and edx, 0000FFFF
:0040E121 81FA00040000            cmp edx, 00000400
:0040E127 7C1D                    jl 0040E146
:0040E129 8B45FC                  mov eax, dword ptr [ebp-04]
:0040E12C 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0040E131 3D02040000              cmp eax, 00000402
:0040E136 7F0E                    jg 0040E146
:0040E138 B9880B4B00              mov ecx, 004B0B88
:0040E13D E83E4D0400              call 00452E80
:0040E142 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E127(C), :0040E136(C)
|
:0040E146 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040E149 81E1FFFF0000            and ecx, 0000FFFF
:0040E14F 51                      push ecx
:0040E150 8B55FC                  mov edx, dword ptr [ebp-04]
:0040E153 81E2FFFF0000            and edx, 0000FFFF
:0040E159 52                      push edx
:0040E15A B9880B4B00              mov ecx, 004B0B88
:0040E15F E81CC10400              call 0045A280

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E116(C)
|
:0040E164 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E0E4(U), :0040E10D(U)
|
:0040E169 8BE5                    mov esp, ebp
:0040E16B 5D                      pop ebp
:0040E16C C3                      ret



* Referenced by a CALL at Address:
|:004092EB   
|
:0040E16D 55                      push ebp
:0040E16E 8BEC                    mov ebp, esp
:0040E170 51                      push ecx
:0040E171 6A26                    push 00000026
:0040E173 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E176 E8260C0000              call 0040EDA1
:0040E17B 8945FC                  mov dword ptr [ebp-04], eax
:0040E17E 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040E185 7507                    jne 0040E18E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E187 B805000000              mov eax, 00000005
:0040E18C EB25                    jmp 0040E1B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E185(C)
|
:0040E18E 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040E192 740E                    je 0040E1A2
:0040E194 6A01                    push 00000001
:0040E196 B9880B4B00              mov ecx, 004B0B88
:0040E19B E815C10400              call 0045A2B5
:0040E1A0 EB0C                    jmp 0040E1AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E192(C)
|
:0040E1A2 6A00                    push 00000000
:0040E1A4 B9880B4B00              mov ecx, 004B0B88
:0040E1A9 E807C10400              call 0045A2B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E1A0(U)
|
:0040E1AE B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E18C(U)
|
:0040E1B3 8BE5                    mov esp, ebp
:0040E1B5 5D                      pop ebp
:0040E1B6 C3                      ret



* Referenced by a CALL at Address:
|:004092F9   
|
:0040E1B7 55                      push ebp
:0040E1B8 8BEC                    mov ebp, esp
:0040E1BA 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E1BB 6A04                    push 00000004
:0040E1BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E1C0 E8DC0B0000              call 0040EDA1
:0040E1C5 8945FC                  mov dword ptr [ebp-04], eax
:0040E1C8 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040E1CF 7507                    jne 0040E1D8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E1D1 B805000000              mov eax, 00000005
:0040E1D6 EB13                    jmp 0040E1EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E1CF(C)
|
:0040E1D8 8A45FC                  mov al, byte ptr [ebp-04]
:0040E1DB 50                      push eax
:0040E1DC B9C8E24A00              mov ecx, 004AE2C8
:0040E1E1 E8BAB90200              call 00439BA0
:0040E1E6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E1D6(U)
|
:0040E1EB 8BE5                    mov esp, ebp
:0040E1ED 5D                      pop ebp
:0040E1EE C3                      ret



* Referenced by a CALL at Address:
|:00409307   
|
:0040E1EF 55                      push ebp
:0040E1F0 8BEC                    mov ebp, esp
:0040E1F2 51                      push ecx
:0040E1F3 6A26                    push 00000026
:0040E1F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E1F8 E8A40B0000              call 0040EDA1
:0040E1FD 8945FC                  mov dword ptr [ebp-04], eax
:0040E200 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040E207 7507                    jne 0040E210

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E209 B805000000              mov eax, 00000005
:0040E20E EB39                    jmp 0040E249

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E207(C)
|
:0040E210 E8FD860000              call 00416912
:0040E215 85C0                    test eax, eax
:0040E217 7507                    jne 0040E220
:0040E219 B801000000              mov eax, 00000001
:0040E21E EB29                    jmp 0040E249

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E217(C)
|
:0040E220 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040E224 7410                    je 0040E236
:0040E226 6A01                    push 00000001
:0040E228 6A01                    push 00000001
:0040E22A B9880B4B00              mov ecx, 004B0B88
:0040E22F E89CC00400              call 0045A2D0
:0040E234 EB0E                    jmp 0040E244

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E224(C)
|
:0040E236 6A01                    push 00000001
:0040E238 6A00                    push 00000000
:0040E23A B9880B4B00              mov ecx, 004B0B88
:0040E23F E88CC00400              call 0045A2D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E234(U)
|
:0040E244 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E20E(U), :0040E21E(U)
|
:0040E249 8BE5                    mov esp, ebp
:0040E24B 5D                      pop ebp
:0040E24C C3                      ret



* Referenced by a CALL at Address:
|:00409315   
|
:0040E24D 55                      push ebp
:0040E24E 8BEC                    mov ebp, esp
:0040E250 83EC0C                  sub esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040E253 6A03                    push 00000003
:0040E255 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E258 E8440B0000              call 0040EDA1
:0040E25D 668945F4                mov word ptr [ebp-0C], ax
:0040E261 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040E264 25FFFF0000              and eax, 0000FFFF
:0040E269 3D00800000              cmp eax, 00008000
:0040E26E 7507                    jne 0040E277

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E270 B805000000              mov eax, 00000005
:0040E275 EB5E                    jmp 0040E2D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E26E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E277 6A04                    push 00000004
:0040E279 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E27C E8200B0000              call 0040EDA1
:0040E281 8945FC                  mov dword ptr [ebp-04], eax
:0040E284 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040E28B 7507                    jne 0040E294

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E28D B805000000              mov eax, 00000005
:0040E292 EB41                    jmp 0040E2D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E28B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E294 6A04                    push 00000004
:0040E296 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E299 E8030B0000              call 0040EDA1
:0040E29E 8945F8                  mov dword ptr [ebp-08], eax
:0040E2A1 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040E2A8 7507                    jne 0040E2B1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040E2AA B805000000              mov eax, 00000005
:0040E2AF EB24                    jmp 0040E2D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E2A8(C)
|
:0040E2B1 E85C860000              call 00416912
:0040E2B6 85C0                    test eax, eax
:0040E2B8 7416                    je 0040E2D0
:0040E2BA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040E2BD 51                      push ecx
:0040E2BE 8B55FC                  mov edx, dword ptr [ebp-04]
:0040E2C1 52                      push edx
:0040E2C2 8A45F4                  mov al, byte ptr [ebp-0C]
:0040E2C5 50                      push eax
:0040E2C6 B9880B4B00              mov ecx, 004B0B88
:0040E2CB E89EC00400              call 0045A36E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E2B8(C)
|
:0040E2D0 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E275(U), :0040E292(U), :0040E2AF(U)
|
:0040E2D5 8BE5                    mov esp, ebp
:0040E2D7 5D                      pop ebp
:0040E2D8 C3                      ret



* Referenced by a CALL at Addresses:
|:0040EAD9   , :0040EB1C   , :0040ED48   , :0040ED8B   , :004266A1   
|
:0040E2D9 55                      push ebp
:0040E2DA 8BEC                    mov ebp, esp
:0040E2DC 51                      push ecx
:0040E2DD 894DFC                  mov dword ptr [ebp-04], ecx
:0040E2E0 6800404700              push 00474000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040E2E5 6A07                    push 00000007
:0040E2E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040E2EA E810140000              call 0040F6FF
:0040E2EF 8BE5                    mov esp, ebp
:0040E2F1 5D                      pop ebp
:0040E2F2 C3                      ret



* Referenced by a CALL at Addresses:
|:0040E319   , :0040EAE1   , :0040EB24   , :0040ED50   , :0040ED93   
|:004266AB   , :0042698B   
|
:0040E2F3 55                      push ebp
:0040E2F4 8BEC                    mov ebp, esp
:0040E2F6 51                      push ecx
:0040E2F7 894DFC                  mov dword ptr [ebp-04], ecx
:0040E2FA 6800404700              push 00474000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040E2FF 6A07                    push 00000007
:0040E301 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040E304 E8F5140000              call 0040F7FE
:0040E309 8BE5                    mov esp, ebp
:0040E30B 5D                      pop ebp
:0040E30C C3                      ret



* Referenced by a CALL at Address:
|:0041249F   
|
:0040E30D 55                      push ebp
:0040E30E 8BEC                    mov ebp, esp
:0040E310 83EC08                  sub esp, 00000008
:0040E313 894DF8                  mov dword ptr [ebp-08], ecx
:0040E316 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040E319 E8D5FFFFFF              call 0040E2F3
:0040E31E C745FC00000000          mov [ebp-04], 00000000
:0040E325 EB09                    jmp 0040E330

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E347(U)
|
:0040E327 8B45FC                  mov eax, dword ptr [ebp-04]
:0040E32A 83C001                  add eax, 00000001
:0040E32D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E325(U)
|
:0040E330 817DFC00080000          cmp dword ptr [ebp-04], 00000800
:0040E337 7310                    jnb 0040E349
:0040E339 6A00                    push 00000000
:0040E33B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040E33E 51                      push ecx
:0040E33F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040E342 E8340B0000              call 0040EE7B
:0040E347 EBDE                    jmp 0040E327

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E337(C)
|
:0040E349 8BE5                    mov esp, ebp
:0040E34B 5D                      pop ebp
:0040E34C C3                      ret



* Referenced by a CALL at Addresses:
|:0040A5B5   , :0040C565   , :0040C68D   , :0040C6E9   , :0040C7A1   
|:0040DEE8   
|
:0040E34D 55                      push ebp
:0040E34E 8BEC                    mov ebp, esp
:0040E350 83EC0C                  sub esp, 0000000C
:0040E353 894DF8                  mov dword ptr [ebp-08], ecx
:0040E356 8B4508                  mov eax, dword ptr [ebp+08]
:0040E359 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E4B0(U)
|
:0040E35C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E35F 33D2                    xor edx, edx
:0040E361 8A11                    mov dl, byte ptr [ecx]
:0040E363 85D2                    test edx, edx
:0040E365 0F844A010000            je 0040E4B5
:0040E36B 8B450C                  mov eax, dword ptr [ebp+0C]
:0040E36E 33C9                    xor ecx, ecx
:0040E370 8A08                    mov cl, byte ptr [eax]
:0040E372 83F920                  cmp ecx, 00000020
:0040E375 7D3F                    jge 0040E3B6
:0040E377 8B550C                  mov edx, dword ptr [ebp+0C]
:0040E37A 33C0                    xor eax, eax
:0040E37C 8A02                    mov al, byte ptr [edx]
:0040E37E 83F80A                  cmp eax, 0000000A
:0040E381 7512                    jne 0040E395
:0040E383 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E386 33D2                    xor edx, edx
:0040E388 8A5101                  mov dl, byte ptr [ecx+01]
:0040E38B 83FA26                  cmp edx, 00000026
:0040E38E 7505                    jne 0040E395
:0040E390 E920010000              jmp 0040E4B5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E381(C), :0040E38E(C)
|
:0040E395 8B4508                  mov eax, dword ptr [ebp+08]
:0040E398 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E39B 8A11                    mov dl, byte ptr [ecx]
:0040E39D 8810                    mov byte ptr [eax], dl
:0040E39F 8B4508                  mov eax, dword ptr [ebp+08]
:0040E3A2 83C001                  add eax, 00000001
:0040E3A5 894508                  mov dword ptr [ebp+08], eax
:0040E3A8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E3AB 83C101                  add ecx, 00000001
:0040E3AE 894D0C                  mov dword ptr [ebp+0C], ecx
:0040E3B1 E9FA000000              jmp 0040E4B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E375(C)
|
:0040E3B6 8B550C                  mov edx, dword ptr [ebp+0C]
:0040E3B9 33C0                    xor eax, eax
:0040E3BB 8A02                    mov al, byte ptr [edx]
:0040E3BD 3D80000000              cmp eax, 00000080
:0040E3C2 0F8DB0000000            jnl 0040E478
:0040E3C8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E3CB 33D2                    xor edx, edx
:0040E3CD 8A11                    mov dl, byte ptr [ecx]
:0040E3CF 8955F4                  mov dword ptr [ebp-0C], edx
:0040E3D2 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040E3D5 83E873                  sub eax, 00000073
:0040E3D8 8945F4                  mov dword ptr [ebp-0C], eax
:0040E3DB 837DF403                cmp dword ptr [ebp-0C], 00000003
:0040E3DF 0F8788000000            ja 0040E46D
:0040E3E5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040E3E8 FF248DC4E44000          jmp dword ptr [4*ecx+0040E4C4]
:0040E3EF 8B5508                  mov edx, dword ptr [ebp+08]
:0040E3F2 C602A1                  mov byte ptr [edx], A1
:0040E3F5 8B4508                  mov eax, dword ptr [ebp+08]
:0040E3F8 83C001                  add eax, 00000001
:0040E3FB 894508                  mov dword ptr [ebp+08], eax
:0040E3FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E401 C60142                  mov byte ptr [ecx], 42
:0040E404 8B5508                  mov edx, dword ptr [ebp+08]
:0040E407 83C201                  add edx, 00000001
:0040E40A 895508                  mov dword ptr [ebp+08], edx
:0040E40D EB5E                    jmp 0040E46D
:0040E40F 8B4508                  mov eax, dword ptr [ebp+08]
:0040E412 C600A1                  mov byte ptr [eax], A1
:0040E415 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E418 83C101                  add ecx, 00000001
:0040E41B 894D08                  mov dword ptr [ebp+08], ecx
:0040E41E 8B5508                  mov edx, dword ptr [ebp+08]
:0040E421 C60245                  mov byte ptr [edx], 45
:0040E424 8B4508                  mov eax, dword ptr [ebp+08]
:0040E427 83C001                  add eax, 00000001
:0040E42A 894508                  mov dword ptr [ebp+08], eax
:0040E42D EB3E                    jmp 0040E46D
:0040E42F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E432 C601A1                  mov byte ptr [ecx], A1
:0040E435 8B5508                  mov edx, dword ptr [ebp+08]
:0040E438 83C201                  add edx, 00000001
:0040E43B 895508                  mov dword ptr [ebp+08], edx
:0040E43E 8B4508                  mov eax, dword ptr [ebp+08]
:0040E441 C60048                  mov byte ptr [eax], 48
:0040E444 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E447 83C101                  add ecx, 00000001
:0040E44A 894D08                  mov dword ptr [ebp+08], ecx
:0040E44D EB1E                    jmp 0040E46D
:0040E44F 8B5508                  mov edx, dword ptr [ebp+08]
:0040E452 C602A1                  mov byte ptr [edx], A1
:0040E455 8B4508                  mov eax, dword ptr [ebp+08]
:0040E458 83C001                  add eax, 00000001
:0040E45B 894508                  mov dword ptr [ebp+08], eax
:0040E45E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E461 C60149                  mov byte ptr [ecx], 49
:0040E464 8B5508                  mov edx, dword ptr [ebp+08]
:0040E467 83C201                  add edx, 00000001
:0040E46A 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E3DF(C), :0040E40D(U), :0040E42D(U), :0040E44D(U)
|
:0040E46D 8B450C                  mov eax, dword ptr [ebp+0C]
:0040E470 83C001                  add eax, 00000001
:0040E473 89450C                  mov dword ptr [ebp+0C], eax
:0040E476 EB38                    jmp 0040E4B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E3C2(C)
|
:0040E478 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E47B 8B550C                  mov edx, dword ptr [ebp+0C]
:0040E47E 8A02                    mov al, byte ptr [edx]
:0040E480 8801                    mov byte ptr [ecx], al
:0040E482 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E485 83C101                  add ecx, 00000001
:0040E488 894D08                  mov dword ptr [ebp+08], ecx
:0040E48B 8B550C                  mov edx, dword ptr [ebp+0C]
:0040E48E 83C201                  add edx, 00000001
:0040E491 89550C                  mov dword ptr [ebp+0C], edx
:0040E494 8B4508                  mov eax, dword ptr [ebp+08]
:0040E497 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E49A 8A11                    mov dl, byte ptr [ecx]
:0040E49C 8810                    mov byte ptr [eax], dl
:0040E49E 8B4508                  mov eax, dword ptr [ebp+08]
:0040E4A1 83C001                  add eax, 00000001
:0040E4A4 894508                  mov dword ptr [ebp+08], eax
:0040E4A7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E4AA 83C101                  add ecx, 00000001
:0040E4AD 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E3B1(U), :0040E476(U)
|
:0040E4B0 E9A7FEFFFF              jmp 0040E35C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E365(C), :0040E390(U)
|
:0040E4B5 8B5508                  mov edx, dword ptr [ebp+08]
:0040E4B8 C60200                  mov byte ptr [edx], 00
:0040E4BB 8B45FC                  mov eax, dword ptr [ebp-04]
:0040E4BE 8BE5                    mov esp, ebp
:0040E4C0 5D                      pop ebp
:0040E4C1 C20800                  ret 0008



:0040E4C4 EFE34000                DWORD 0040E3EF
:0040E4C8 0FE44000                DWORD 0040E40F
:0040E4CC 2FE44000                DWORD 0040E42F
:0040E4D0 4FE44000                DWORD 0040E44F



* Referenced by a CALL at Address:
|:0041114F   
|
:0040E4D4 55                      push ebp
:0040E4D5 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040E4D7 6AFF                    push FFFFFFFF
:0040E4D9 68F9374700              push 004737F9
:0040E4DE 64A100000000            mov eax, dword ptr fs:[00000000]
:0040E4E4 50                      push eax
:0040E4E5 64892500000000          mov dword ptr fs:[00000000], esp
:0040E4EC 83EC24                  sub esp, 00000024
:0040E4EF 894DD0                  mov dword ptr [ebp-30], ecx
:0040E4F2 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E4F5 E84693FFFF              call 00407840
:0040E4FA C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040E501 6A02                    push 00000002
:0040E503 8B4508                  mov eax, dword ptr [ebp+08]
:0040E506 50                      push eax
:0040E507 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E50A E8421D0000              call 00410251
:0040E50F C745D800000000          mov [ebp-28], 00000000
:0040E516 EB09                    jmp 0040E521

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E603(U)
|
:0040E518 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040E51B 83C101                  add ecx, 00000001
:0040E51E 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E516(U)
|
:0040E521 837DD85A                cmp dword ptr [ebp-28], 0000005A
:0040E525 0F8DDD000000            jnl 0040E608

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E52B 6A04                    push 00000004
:0040E52D 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E530 6BD23C                  imul edx, 0000003C
:0040E533 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E536 8D8C1044200000          lea ecx, dword ptr [eax+edx+00002044]
:0040E53D 51                      push ecx
:0040E53E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E541 E84B1F0000              call 00410491
:0040E546 6A01                    push 00000001
:0040E548 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E54B 6BD23C                  imul edx, 0000003C
:0040E54E 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E551 8D8C1048200000          lea ecx, dword ptr [eax+edx+00002048]
:0040E558 51                      push ecx
:0040E559 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E55C E8301F0000              call 00410491
:0040E561 6A01                    push 00000001
:0040E563 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E566 6BD23C                  imul edx, 0000003C
:0040E569 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E56C 8D8C1049200000          lea ecx, dword ptr [eax+edx+00002049]
:0040E573 51                      push ecx
:0040E574 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E577 E8151F0000              call 00410491

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E57C 6A04                    push 00000004
:0040E57E 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E581 6BD23C                  imul edx, 0000003C
:0040E584 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E587 8D8C104C200000          lea ecx, dword ptr [eax+edx+0000204C]
:0040E58E 51                      push ecx
:0040E58F 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E592 E8FA1E0000              call 00410491
:0040E597 6A01                    push 00000001
:0040E599 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E59C 6BD23C                  imul edx, 0000003C
:0040E59F 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E5A2 8D8C1050200000          lea ecx, dword ptr [eax+edx+00002050]
:0040E5A9 51                      push ecx
:0040E5AA 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E5AD E8DF1E0000              call 00410491

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040E5B2 6A02                    push 00000002
:0040E5B4 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E5B7 6BD23C                  imul edx, 0000003C
:0040E5BA 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E5BD 8D8C1052200000          lea ecx, dword ptr [eax+edx+00002052]
:0040E5C4 51                      push ecx
:0040E5C5 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E5C8 E8C41E0000              call 00410491
:0040E5CD 6A01                    push 00000001
:0040E5CF 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E5D2 6BD23C                  imul edx, 0000003C
:0040E5D5 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E5D8 8D8C1054200000          lea ecx, dword ptr [eax+edx+00002054]
:0040E5DF 51                      push ecx
:0040E5E0 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E5E3 E8A91E0000              call 00410491
:0040E5E8 6A01                    push 00000001
:0040E5EA 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E5ED 6BD23C                  imul edx, 0000003C
:0040E5F0 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E5F3 8D8C1055200000          lea ecx, dword ptr [eax+edx+00002055]
:0040E5FA 51                      push ecx
:0040E5FB 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E5FE E88E1E0000              call 00410491
:0040E603 E910FFFFFF              jmp 0040E518

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E525(C)
|
:0040E608 6881010000              push 00000181
:0040E60D 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E610 81C268350000            add edx, 00003568
:0040E616 52                      push edx
:0040E617 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E61A E8721E0000              call 00410491
:0040E61F 6A01                    push 00000001
:0040E621 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E624 0566350000              add eax, 00003566
:0040E629 50                      push eax
:0040E62A 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E62D E85F1E0000              call 00410491
:0040E632 6A01                    push 00000001
:0040E634 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040E637 81C167350000            add ecx, 00003567
:0040E63D 51                      push ecx
:0040E63E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E641 E84B1E0000              call 00410491

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040E646 6A08                    push 00000008
:0040E648 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E64B 81C25C350000            add edx, 0000355C
:0040E651 52                      push edx
:0040E652 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E655 E8371E0000              call 00410491
:0040E65A C745D800000000          mov [ebp-28], 00000000
:0040E661 EB09                    jmp 0040E66C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E68A(U)
|
:0040E663 8B45D8                  mov eax, dword ptr [ebp-28]
:0040E666 83C001                  add eax, 00000001
:0040E669 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E661(U)
|
:0040E66C 817DD800080000          cmp dword ptr [ebp-28], 00000800
:0040E673 7D17                    jge 0040E68C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E675 6A04                    push 00000004
:0040E677 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040E67A 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E67D 8D448A38                lea eax, dword ptr [edx+4*ecx+38]
:0040E681 50                      push eax
:0040E682 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E685 E8071E0000              call 00410491
:0040E68A EBD7                    jmp 0040E663

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E673(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E68C 6A04                    push 00000004
:0040E68E 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040E691 81C138200000            add ecx, 00002038
:0040E697 51                      push ecx
:0040E698 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E69B E8F11D0000              call 00410491

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E6A0 6A04                    push 00000004
:0040E6A2 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E6A5 81C23C200000            add edx, 0000203C
:0040E6AB 52                      push edx
:0040E6AC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E6AF E8DD1D0000              call 00410491

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040E6B4 6A08                    push 00000008
:0040E6B6 8D45DC                  lea eax, dword ptr [ebp-24]
:0040E6B9 50                      push eax
:0040E6BA 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E6BD E8CF1D0000              call 00410491
:0040E6C2 8945EC                  mov dword ptr [ebp-14], eax
:0040E6C5 8D4DDC                  lea ecx, dword ptr [ebp-24]
:0040E6C8 51                      push ecx
:0040E6C9 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040E6CC E8BA160000              call 0040FD8B
:0040E6D1 8945EC                  mov dword ptr [ebp-14], eax
:0040E6D4 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E6D7 E8301F0000              call 0041060C
:0040E6DC 8B55EC                  mov edx, dword ptr [ebp-14]
:0040E6DF 8955D4                  mov dword ptr [ebp-2C], edx
:0040E6E2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E6E9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E6EC E84D1B0000              call 0041023E
:0040E6F1 8B45D4                  mov eax, dword ptr [ebp-2C]
:0040E6F4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040E6F7 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040E6FE 8BE5                    mov esp, ebp
:0040E700 5D                      pop ebp
:0040E701 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411989   
|
:0040E704 55                      push ebp
:0040E705 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040E707 6AFF                    push FFFFFFFF
:0040E709 680C384700              push 0047380C
:0040E70E 64A100000000            mov eax, dword ptr fs:[00000000]
:0040E714 50                      push eax
:0040E715 64892500000000          mov dword ptr fs:[00000000], esp
:0040E71C 83EC24                  sub esp, 00000024
:0040E71F 894DD0                  mov dword ptr [ebp-30], ecx
:0040E722 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E725 E81691FFFF              call 00407840
:0040E72A C745FC00000000          mov [ebp-04], 00000000
:0040E731 6A01                    push 00000001
:0040E733 8B4508                  mov eax, dword ptr [ebp+08]
:0040E736 50                      push eax
:0040E737 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E73A E8121B0000              call 00410251
:0040E73F C745D800000000          mov [ebp-28], 00000000
:0040E746 EB09                    jmp 0040E751

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E833(U)
|
:0040E748 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040E74B 83C101                  add ecx, 00000001
:0040E74E 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E746(U)
|
:0040E751 837DD85A                cmp dword ptr [ebp-28], 0000005A
:0040E755 0F8DDD000000            jnl 0040E838

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E75B 6A04                    push 00000004
:0040E75D 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E760 6BD23C                  imul edx, 0000003C
:0040E763 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E766 8D8C1044200000          lea ecx, dword ptr [eax+edx+00002044]
:0040E76D 51                      push ecx
:0040E76E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E771 E84E1E0000              call 004105C4
:0040E776 6A01                    push 00000001
:0040E778 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E77B 6BD23C                  imul edx, 0000003C
:0040E77E 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E781 8D8C1048200000          lea ecx, dword ptr [eax+edx+00002048]
:0040E788 51                      push ecx
:0040E789 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E78C E8331E0000              call 004105C4
:0040E791 6A01                    push 00000001
:0040E793 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E796 6BD23C                  imul edx, 0000003C
:0040E799 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E79C 8D8C1049200000          lea ecx, dword ptr [eax+edx+00002049]
:0040E7A3 51                      push ecx
:0040E7A4 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E7A7 E8181E0000              call 004105C4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E7AC 6A04                    push 00000004
:0040E7AE 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E7B1 6BD23C                  imul edx, 0000003C
:0040E7B4 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E7B7 8D8C104C200000          lea ecx, dword ptr [eax+edx+0000204C]
:0040E7BE 51                      push ecx
:0040E7BF 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E7C2 E8FD1D0000              call 004105C4
:0040E7C7 6A01                    push 00000001
:0040E7C9 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E7CC 6BD23C                  imul edx, 0000003C
:0040E7CF 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E7D2 8D8C1050200000          lea ecx, dword ptr [eax+edx+00002050]
:0040E7D9 51                      push ecx
:0040E7DA 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E7DD E8E21D0000              call 004105C4

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040E7E2 6A02                    push 00000002
:0040E7E4 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E7E7 6BD23C                  imul edx, 0000003C
:0040E7EA 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E7ED 8D8C1052200000          lea ecx, dword ptr [eax+edx+00002052]
:0040E7F4 51                      push ecx
:0040E7F5 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E7F8 E8C71D0000              call 004105C4
:0040E7FD 6A01                    push 00000001
:0040E7FF 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E802 6BD23C                  imul edx, 0000003C
:0040E805 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E808 8D8C1054200000          lea ecx, dword ptr [eax+edx+00002054]
:0040E80F 51                      push ecx
:0040E810 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E813 E8AC1D0000              call 004105C4
:0040E818 6A01                    push 00000001
:0040E81A 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E81D 6BD23C                  imul edx, 0000003C
:0040E820 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E823 8D8C1055200000          lea ecx, dword ptr [eax+edx+00002055]
:0040E82A 51                      push ecx
:0040E82B 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E82E E8911D0000              call 004105C4
:0040E833 E910FFFFFF              jmp 0040E748

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E755(C)
|
:0040E838 6881010000              push 00000181
:0040E83D 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E840 81C268350000            add edx, 00003568
:0040E846 52                      push edx
:0040E847 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E84A E8751D0000              call 004105C4
:0040E84F 6A01                    push 00000001
:0040E851 8B45D0                  mov eax, dword ptr [ebp-30]
:0040E854 0566350000              add eax, 00003566
:0040E859 50                      push eax
:0040E85A 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E85D E8621D0000              call 004105C4
:0040E862 6A01                    push 00000001
:0040E864 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040E867 81C167350000            add ecx, 00003567
:0040E86D 51                      push ecx
:0040E86E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E871 E84E1D0000              call 004105C4

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040E876 6A08                    push 00000008
:0040E878 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E87B 81C25C350000            add edx, 0000355C
:0040E881 52                      push edx
:0040E882 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E885 E83A1D0000              call 004105C4
:0040E88A C745D800000000          mov [ebp-28], 00000000
:0040E891 EB09                    jmp 0040E89C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E8BA(U)
|
:0040E893 8B45D8                  mov eax, dword ptr [ebp-28]
:0040E896 83C001                  add eax, 00000001
:0040E899 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E891(U)
|
:0040E89C 817DD800080000          cmp dword ptr [ebp-28], 00000800
:0040E8A3 7D17                    jge 0040E8BC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E8A5 6A04                    push 00000004
:0040E8A7 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040E8AA 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E8AD 8D448A38                lea eax, dword ptr [edx+4*ecx+38]
:0040E8B1 50                      push eax
:0040E8B2 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E8B5 E80A1D0000              call 004105C4
:0040E8BA EBD7                    jmp 0040E893

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E8A3(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E8BC 6A04                    push 00000004
:0040E8BE 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040E8C1 81C138200000            add ecx, 00002038
:0040E8C7 51                      push ecx
:0040E8C8 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E8CB E8F41C0000              call 004105C4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040E8D0 6A04                    push 00000004
:0040E8D2 8B55D0                  mov edx, dword ptr [ebp-30]
:0040E8D5 81C23C200000            add edx, 0000203C
:0040E8DB 52                      push edx
:0040E8DC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E8DF E8E01C0000              call 004105C4
:0040E8E4 8D45DC                  lea eax, dword ptr [ebp-24]
:0040E8E7 50                      push eax
:0040E8E8 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040E8EB E81B140000              call 0040FD0B
:0040E8F0 8945EC                  mov dword ptr [ebp-14], eax
:0040E8F3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040E8F6 51                      push ecx
:0040E8F7 8D55DC                  lea edx, dword ptr [ebp-24]
:0040E8FA 52                      push edx
:0040E8FB 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E8FE E8C11C0000              call 004105C4
:0040E903 8945EC                  mov dword ptr [ebp-14], eax
:0040E906 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E909 E8FE1C0000              call 0041060C
:0040E90E 8B45EC                  mov eax, dword ptr [ebp-14]
:0040E911 8945D4                  mov dword ptr [ebp-2C], eax
:0040E914 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E91B 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040E91E E81B190000              call 0041023E
:0040E923 8B45D4                  mov eax, dword ptr [ebp-2C]
:0040E926 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040E929 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040E930 8BE5                    mov esp, ebp
:0040E932 5D                      pop ebp
:0040E933 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040EAC7   , :0040EB0A   , :0040ED36   , :0040ED79   , :004266F7   
|:0042676E   
|
:0040E936 55                      push ebp
:0040E937 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040E939 6AFF                    push FFFFFFFF
:0040E93B 681F384700              push 0047381F
:0040E940 64A100000000            mov eax, dword ptr fs:[00000000]
:0040E946 50                      push eax
:0040E947 64892500000000          mov dword ptr fs:[00000000], esp
:0040E94E 83EC20                  sub esp, 00000020
:0040E951 894DD4                  mov dword ptr [ebp-2C], ecx
:0040E954 C605DC57480000          mov byte ptr [004857DC], 00
:0040E95B 6800000200              push 00020000
:0040E960 E85BF00500              call 0046D9C0
:0040E965 83C404                  add esp, 00000004
:0040E968 8945E4                  mov dword ptr [ebp-1C], eax
:0040E96B B9C8E24A00              mov ecx, 004AE2C8
:0040E970 E83B0A0000              call 0040F3B0
:0040E975 25FF000000              and eax, 000000FF
:0040E97A 99                      cdq
:0040E97B B964000000              mov ecx, 00000064
:0040E980 F7F9                    idiv ecx
:0040E982 668945D8                mov word ptr [ebp-28], ax
:0040E986 B9C8E24A00              mov ecx, 004AE2C8
:0040E98B E8200A0000              call 0040F3B0
:0040E990 25FF000000              and eax, 000000FF
:0040E995 99                      cdq
:0040E996 B964000000              mov ecx, 00000064
:0040E99B F7F9                    idiv ecx
:0040E99D 8BC2                    mov eax, edx
:0040E99F 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040E9A0 B90A000000              mov ecx, 0000000A
:0040E9A5 F7F9                    idiv ecx
:0040E9A7 668945EC                mov word ptr [ebp-14], ax
:0040E9AB B9C8E24A00              mov ecx, 004AE2C8
:0040E9B0 E8FB090000              call 0040F3B0
:0040E9B5 25FF000000              and eax, 000000FF
:0040E9BA 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040E9BB B90A000000              mov ecx, 0000000A
:0040E9C0 F7F9                    idiv ecx
:0040E9C2 668955DC                mov word ptr [ebp-24], dx
:0040E9C6 8B55D8                  mov edx, dword ptr [ebp-28]
:0040E9C9 81E2FFFF0000            and edx, 0000FFFF
:0040E9CF 83C230                  add edx, 00000030
:0040E9D2 8815DA634700            mov byte ptr [004763DA], dl
:0040E9D8 8B45EC                  mov eax, dword ptr [ebp-14]
:0040E9DB 25FFFF0000              and eax, 0000FFFF
:0040E9E0 83C030                  add eax, 00000030
:0040E9E3 A2DB634700              mov byte ptr [004763DB], al
:0040E9E8 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0040E9EB 81E1FFFF0000            and ecx, 0000FFFF
:0040E9F1 83C130                  add ecx, 00000030
:0040E9F4 880DDC634700            mov byte ptr [004763DC], cl
:0040E9FA 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040E9FD E83E8EFFFF              call 00407840
:0040EA02 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"NB000.EEX"
                                  |
:0040EA09 C745E0D8634700          mov [ebp-20], 004763D8
:0040EA10 6A00                    push 00000000
:0040EA12 8B55E0                  mov edx, dword ptr [ebp-20]
:0040EA15 52                      push edx
:0040EA16 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040EA19 E833180000              call 00410251
:0040EA1E 85C0                    test eax, eax
:0040EA20 7524                    jne 0040EA46
:0040EA22 8B45E0                  mov eax, dword ptr [ebp-20]
:0040EA25 50                      push eax

* Possible StringData Ref from Data Obj ->""%s"ŪJALkŪJ´ЫHǪɮסC"
                                  |
:0040EA26 6838644700              push 00476438
:0040EA2B 6A00                    push 00000000
:0040EA2D E83AA10100              call 00428B6C
:0040EA32 83C40C                  add esp, 0000000C
:0040EA35 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040EA3C 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040EA3F E8FA170000              call 0041023E
:0040EA44 EB3F                    jmp 0040EA85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA20(C)
|
:0040EA46 6800000200              push 00020000
:0040EA4B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040EA4E 51                      push ecx
:0040EA4F 6A00                    push 00000000
:0040EA51 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040EA54 E8551A0000              call 004104AE
:0040EA59 8945F0                  mov dword ptr [ebp-10], eax
:0040EA5C 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040EA5F E8A81B0000              call 0041060C
:0040EA64 8B55F0                  mov edx, dword ptr [ebp-10]
:0040EA67 52                      push edx
:0040EA68 8B45E4                  mov eax, dword ptr [ebp-1C]
:0040EA6B 50                      push eax
:0040EA6C B9F8134800              mov ecx, 004813F8
:0040EA71 E86B100000              call 0040FAE1
:0040EA76 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040EA7D 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040EA80 E8B9170000              call 0041023E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA44(U)
|
:0040EA85 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040EA88 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040EA8F 8BE5                    mov esp, ebp
:0040EA91 5D                      pop ebp
:0040EA92 C3                      ret



* Referenced by a CALL at Addresses:
|:0040EBDB   , :0040EC2D   , :00416BE1   , :00416EBD   , :0042C920   
|:0042C941   , :00454716   , :004562D6   , :00457D3D   , :004581AD   
|:004582AD   , :00459FD4   , :0045A059   
|
:0040EA93 55                      push ebp
:0040EA94 8BEC                    mov ebp, esp
:0040EA96 83EC08                  sub esp, 00000008
:0040EA99 894DF8                  mov dword ptr [ebp-08], ecx
:0040EA9C C745FC00000000          mov [ebp-04], 00000000
:0040EAA3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAA6 E8640E0000              call 0040F90F
:0040EAAB 85C0                    test eax, eax
:0040EAAD 7437                    je 0040EAE6
:0040EAAF 6A00                    push 00000000
:0040EAB1 6A01                    push 00000001
:0040EAB3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAB6 E8D8150000              call 00410093
:0040EABB 8945FC                  mov dword ptr [ebp-04], eax
:0040EABE 837DFC04                cmp dword ptr [ebp-04], 00000004
:0040EAC2 7522                    jne 0040EAE6
:0040EAC4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAC7 E86AFEFFFF              call 0040E936
:0040EACC 8B45F8                  mov eax, dword ptr [ebp-08]
:0040EACF 8B10                    mov edx, dword ptr [eax]
:0040EAD1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAD4 FF12                    call dword ptr [edx]
:0040EAD6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAD9 E8FBF7FFFF              call 0040E2D9
:0040EADE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAE1 E80DF8FFFF              call 0040E2F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EAAD(C), :0040EAC2(C)
|
:0040EAE6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAE9 E8E2080000              call 0040F3D0
:0040EAEE 85C0                    test eax, eax
:0040EAF0 7537                    jne 0040EB29
:0040EAF2 6A00                    push 00000000
:0040EAF4 6A01                    push 00000001
:0040EAF6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EAF9 E895150000              call 00410093
:0040EAFE 8945FC                  mov dword ptr [ebp-04], eax
:0040EB01 837DFC04                cmp dword ptr [ebp-04], 00000004
:0040EB05 7522                    jne 0040EB29
:0040EB07 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EB0A E827FEFFFF              call 0040E936
:0040EB0F 8B45F8                  mov eax, dword ptr [ebp-08]
:0040EB12 8B10                    mov edx, dword ptr [eax]
:0040EB14 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EB17 FF12                    call dword ptr [edx]
:0040EB19 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EB1C E8B8F7FFFF              call 0040E2D9
:0040EB21 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EB24 E8CAF7FFFF              call 0040E2F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EAF0(C), :0040EB05(C)
|
:0040EB29 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EB2C 8BE5                    mov esp, ebp
:0040EB2E 5D                      pop ebp
:0040EB2F C20400                  ret 0004


:0040EB32 55                      push ebp
:0040EB33 8BEC                    mov ebp, esp
:0040EB35 51                      push ecx
:0040EB36 894DFC                  mov dword ptr [ebp-04], ecx
:0040EB39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EB3C E8CE0D0000              call 0040F90F
:0040EB41 85C0                    test eax, eax
:0040EB43 7407                    je 0040EB4C
:0040EB45 B801000000              mov eax, 00000001
:0040EB4A EB02                    jmp 0040EB4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EB43(C)
|
:0040EB4C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EB4A(U)
|
:0040EB4E 8BE5                    mov esp, ebp
:0040EB50 5D                      pop ebp
:0040EB51 C3                      ret


:0040EB52 55                      push ebp
:0040EB53 8BEC                    mov ebp, esp
:0040EB55 83EC0C                  sub esp, 0000000C
:0040EB58 894DF4                  mov dword ptr [ebp-0C], ecx
:0040EB5B B9C8E24A00              mov ecx, 004AE2C8
:0040EB60 E86B060000              call 0040F1D0
:0040EB65 8945F8                  mov dword ptr [ebp-08], eax
:0040EB68 8B45F8                  mov eax, dword ptr [ebp-08]
:0040EB6B 24DF                    and al, DF
:0040EB6D 8945F8                  mov dword ptr [ebp-08], eax
:0040EB70 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EB73 51                      push ecx
:0040EB74 B9C8E24A00              mov ecx, 004AE2C8
:0040EB79 E812650100              call 00425090
:0040EB7E C745FCFFFF0000          mov [ebp-04], 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040EB85 6A04                    push 00000004
:0040EB87 8D55FC                  lea edx, dword ptr [ebp-04]
:0040EB8A 52                      push edx
:0040EB8B 6A01                    push 00000001
:0040EB8D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040EB90 E8500D0000              call 0040F8E5
:0040EB95 33C0                    xor eax, eax
:0040EB97 8BE5                    mov esp, ebp
:0040EB99 5D                      pop ebp
:0040EB9A C3                      ret



* Referenced by a CALL at Addresses:
|:00416BF4   , :00423B80   
|
:0040EB9B 55                      push ebp
:0040EB9C 8BEC                    mov ebp, esp
:0040EB9E 83EC08                  sub esp, 00000008
:0040EBA1 894DF8                  mov dword ptr [ebp-08], ecx
:0040EBA4 B9C8E24A00              mov ecx, 004AE2C8
:0040EBA9 E822060000              call 0040F1D0
:0040EBAE 8945FC                  mov dword ptr [ebp-04], eax
:0040EBB1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EBB4 0C20                    or al, 20
:0040EBB6 50                      push eax
:0040EBB7 B9C8E24A00              mov ecx, 004AE2C8
:0040EBBC E8CF640100              call 00425090

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040EBC1 6A04                    push 00000004
:0040EBC3 8D4D08                  lea ecx, dword ptr [ebp+08]
:0040EBC6 51                      push ecx
:0040EBC7 6A01                    push 00000001
:0040EBC9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EBCC E8140D0000              call 0040F8E5
:0040EBD1 68FFFF0000              push 0000FFFF
:0040EBD6 B9F8134800              mov ecx, 004813F8
:0040EBDB E8B3FEFFFF              call 0040EA93
:0040EBE0 8B55FC                  mov edx, dword ptr [ebp-04]
:0040EBE3 52                      push edx
:0040EBE4 B9C8E24A00              mov ecx, 004AE2C8
:0040EBE9 E8A2640100              call 00425090
:0040EBEE 33C0                    xor eax, eax
:0040EBF0 8BE5                    mov esp, ebp
:0040EBF2 5D                      pop ebp
:0040EBF3 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004164CF   , :00416C05   
|
:0040EBF6 55                      push ebp
:0040EBF7 8BEC                    mov ebp, esp
:0040EBF9 83EC08                  sub esp, 00000008
:0040EBFC 894DF8                  mov dword ptr [ebp-08], ecx
:0040EBFF B9C8E24A00              mov ecx, 004AE2C8
:0040EC04 E8C7050000              call 0040F1D0
:0040EC09 8945FC                  mov dword ptr [ebp-04], eax
:0040EC0C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EC0F 0B4508                  or eax, dword ptr [ebp+08]
:0040EC12 8945FC                  mov dword ptr [ebp-04], eax
:0040EC15 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EC18 51                      push ecx
:0040EC19 B9C8E24A00              mov ecx, 004AE2C8
:0040EC1E E86D640100              call 00425090
:0040EC23 68FFFF0000              push 0000FFFF
:0040EC28 B9F8134800              mov ecx, 004813F8
:0040EC2D E861FEFFFF              call 0040EA93
:0040EC32 B9C8E24A00              mov ecx, 004AE2C8
:0040EC37 E894050000              call 0040F1D0
:0040EC3C 8945FC                  mov dword ptr [ebp-04], eax
:0040EC3F 8B5508                  mov edx, dword ptr [ebp+08]
:0040EC42 F7D2                    not edx
:0040EC44 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EC47 23C2                    and eax, edx
:0040EC49 8945FC                  mov dword ptr [ebp-04], eax
:0040EC4C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EC4F 51                      push ecx
:0040EC50 B9C8E24A00              mov ecx, 004AE2C8
:0040EC55 E836640100              call 00425090
:0040EC5A 33C0                    xor eax, eax
:0040EC5C 8BE5                    mov esp, ebp
:0040EC5E 5D                      pop ebp
:0040EC5F C20400                  ret 0004



* Referenced by a CALL at Address:
|:00423B66   
|
:0040EC62 55                      push ebp
:0040EC63 8BEC                    mov ebp, esp
:0040EC65 83EC14                  sub esp, 00000014
:0040EC68 894DEC                  mov dword ptr [ebp-14], ecx
:0040EC6B C745F400000000          mov [ebp-0C], 00000000
:0040EC72 C745FC00000000          mov [ebp-04], 00000000
:0040EC79 C745F8F8A84800          mov [ebp-08], 0048A8F8
:0040EC80 66C745F00000            mov [ebp-10], 0000
:0040EC86 EB15                    jmp 0040EC9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ED00(U)
|
:0040EC88 668B45F0                mov ax, word ptr [ebp-10]
:0040EC8C 66050100                add ax, 0001
:0040EC90 668945F0                mov word ptr [ebp-10], ax
:0040EC94 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EC97 83C140                  add ecx, 00000040
:0040EC9A 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC86(U)
|
:0040EC9D 8B55F0                  mov edx, dword ptr [ebp-10]
:0040ECA0 81E2FFFF0000            and edx, 0000FFFF
:0040ECA6 81FA80000000            cmp edx, 00000080
:0040ECAC 7D54                    jge 0040ED02
:0040ECAE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040ECB1 E83A070000              call 0040F3F0
:0040ECB6 25FFFF0000              and eax, 0000FFFF
:0040ECBB 2500800000              and eax, 00008000
:0040ECC0 85C0                    test eax, eax
:0040ECC2 743C                    je 0040ED00
:0040ECC4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040ECC7 E844070000              call 0040F410
:0040ECCC 25FFFF0000              and eax, 0000FFFF
:0040ECD1 83F802                  cmp eax, 00000002
:0040ECD4 7423                    je 0040ECF9
:0040ECD6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040ECD9 E832070000              call 0040F410
:0040ECDE 25FFFF0000              and eax, 0000FFFF
:0040ECE3 83F801                  cmp eax, 00000001
:0040ECE6 7411                    je 0040ECF9
:0040ECE8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040ECEB E820070000              call 0040F410
:0040ECF0 25FFFF0000              and eax, 0000FFFF
:0040ECF5 85C0                    test eax, eax
:0040ECF7 7507                    jne 0040ED00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ECD4(C), :0040ECE6(C)
|
:0040ECF9 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ECC2(C), :0040ECF7(C)
|
:0040ED00 EB86                    jmp 0040EC88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ECAC(C)
|
:0040ED02 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040ED06 740A                    je 0040ED12

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040ED08 B806000000              mov eax, 00000006
:0040ED0D E989000000              jmp 0040ED9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ED06(C)
|
:0040ED12 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED15 E8F50B0000              call 0040F90F
:0040ED1A 85C0                    test eax, eax
:0040ED1C 7437                    je 0040ED55
:0040ED1E 6A00                    push 00000000
:0040ED20 6A01                    push 00000001
:0040ED22 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED25 E869130000              call 00410093
:0040ED2A 8945F4                  mov dword ptr [ebp-0C], eax
:0040ED2D 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040ED31 7522                    jne 0040ED55
:0040ED33 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED36 E8FBFBFFFF              call 0040E936
:0040ED3B 8B45EC                  mov eax, dword ptr [ebp-14]
:0040ED3E 8B10                    mov edx, dword ptr [eax]
:0040ED40 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED43 FF12                    call dword ptr [edx]
:0040ED45 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED48 E88CF5FFFF              call 0040E2D9
:0040ED4D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED50 E89EF5FFFF              call 0040E2F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ED1C(C), :0040ED31(C)
|
:0040ED55 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED58 E873060000              call 0040F3D0
:0040ED5D 85C0                    test eax, eax
:0040ED5F 7537                    jne 0040ED98
:0040ED61 6A00                    push 00000000
:0040ED63 6A01                    push 00000001
:0040ED65 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED68 E826130000              call 00410093
:0040ED6D 8945F4                  mov dword ptr [ebp-0C], eax
:0040ED70 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040ED74 7522                    jne 0040ED98
:0040ED76 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED79 E8B8FBFFFF              call 0040E936
:0040ED7E 8B45EC                  mov eax, dword ptr [ebp-14]
:0040ED81 8B10                    mov edx, dword ptr [eax]
:0040ED83 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED86 FF12                    call dword ptr [edx]
:0040ED88 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED8B E849F5FFFF              call 0040E2D9
:0040ED90 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED93 E85BF5FFFF              call 0040E2F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ED5F(C), :0040ED74(C)
|
:0040ED98 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ED0D(U)
|
:0040ED9B 8BE5                    mov esp, ebp
:0040ED9D 5D                      pop ebp
:0040ED9E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040949D   , :004094C4   , :004094ED   , :0040950D   , :0040967F   
|:004096A6   , :004096C6   , :00409789   , :004097A6   , :00409825   
|:0040987D   , :004098DD   , :00409924   , :0040996D   , :004099B1   
|:00409A09   , :00409A30   , :00409A50   , :00409B05   , :00409B2C   
|:00409BC6   , :00409C33   , :00409C5A   , :00409EF1   , :00409F54   
|:00409F7B   , :00409F9B   , :0040A258   , :0040A27F   , :0040A29F   
|:0040A2BF   , :0040A2DF   , :0040A58A   , :0040A6BC   , :0040A6FF   
|:0040A726   , :0040A74F   , :0040AA50   , :0040AA77   , :0040AAA0   
|:0040AAC9   , :0040AC79   , :0040ACA3   , :0040ACE8   , :0040AD08   
|:0040AD25   , :0040AD49   , :0040ADDF   , :0040AE06   , :0040AE35   
|:0040AE5B   , :0040AE8A   , :0040AEB7   , :0040AEE6   , :0040AFC9   
|:0040B010   , :0040B057   , :0040B09E   , :0040B0E5   , :0040B121   
|:0040B15D   , :0040B1A4   , :0040B1EB   , :0040B232   , :0040B279   
|:0040B3C8   , :0040B481   , :0040B4C5   , :0040B4FE   , :0040B537   
|:0040B579   , :0040B5BB   , :0040B5FD   , :0040B63F   , :0040B681   
|:0040B6C3   , :0040B6FC   , :0040B735   , :0040B779   , :0040B7B2   
|:0040B7EB   , :0040B824   , :0040B85D   , :0040B896   , :0040B8CF   
|:0040B908   , :0040B941   , :0040B97A   , :0040B9BE   , :0040BA02   
|:0040BC84   , :0040BCA1   , :0040BCBE   , :0040BCF1   , :0040BD18   
|:0040BD38   , :0040BD58   , :0040BD7E   , :0040BDFD   , :0040BE24   
|:0040BE4D   , :0040BE6D   , :0040BE8D   , :0040BEAD   , :0040BECA   
|:0040BF49   , :0040BF70   , :0040BF90   , :0040BFB0   , :0040C0A7   
|:0040C0CB   , :0040C0F1   , :0040C145   , :0040C169   , :0040C1BC   
|:0040C1E0   , :0040C230   , :0040C257   , :0040C280   , :0040C2A9   
|:0040C2D0   , :0040C2F0   , :0040C310   , :0040C3D4   , :0040C665   
|:0040C6C1   , :0040C70F   , :0040C745   , :0040C77B   , :0040C7BA   
|:0040C7E1   , :0040C80A   , :0040C833   , :0040C85A   , :0040C959   
|:0040C980   , :0040C9A9   , :0040C9CF   , :0040C9F3   , :0040CA10   
|:0040CA8C   , :0040CAA9   , :0040CAC6   , :0040CB22   , :0040CB3F   
|:0040CB86   , :0040CBA3   , :0040CBF5   , :0040CC63   , :0040CCC4   
|:0040CD84   , :0040CDC7   , :0040CE2A   , :0040CFC3   , :0040CFEA   
|:0040D013   , :0040D03C   , :0040D05C   , :0040D129   , :0040D14D   
|:0040D1C0   , :0040D1E7   , :0040D210   , :0040D362   , :0040D389   
|:0040D512   , :0040D539   , :0040D69B   , :0040D6DA   , :0040D72E   
|:0040D755   , :0040D77E   , :0040D79E   , :0040D7BE   , :0040D7DE   
|:0040D7FE   , :0040D827   , :0040D84E   , :0040D877   , :0040D897   
|:0040DA8C   , :0040DAB3   , :0040DADC   , :0040DAFC   , :0040DB1C   
|:0040DB3C   , :0040DB5C   , :0040DC55   , :0040DC79   , :0040DCBB   
|:0040DD55   , :0040DD98   , :0040DDF5   , :0040DE7F   , :0040DEBA   
|:0040DF0D   , :0040DF65   , :0040DF8C   , :0040E016   , :0040E03D   
|:0040E0C7   , :0040E0EE   , :0040E176   , :0040E1C0   , :0040E1F8   
|:0040E258   , :0040E27C   , :0040E299   
|
:0040EDA1 55                      push ebp
:0040EDA2 8BEC                    mov ebp, esp
:0040EDA4 83EC18                  sub esp, 00000018
:0040EDA7 894DF8                  mov dword ptr [ebp-08], ecx
:0040EDAA 837D0801                cmp dword ptr [ebp+08], 00000001
:0040EDAE 7512                    jne 0040EDC2
:0040EDB0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EDB3 E80A080000              call 0040F5C2
:0040EDB8 25FFFF0000              and eax, 0000FFFF
:0040EDBD E994000000              jmp 0040EE56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDAE(C)
|
:0040EDC2 C745FC00000000          mov [ebp-04], 00000000
:0040EDC9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EDCC E8F1070000              call 0040F5C2
:0040EDD1 25FFFF0000              and eax, 0000FFFF
:0040EDD6 3B4508                  cmp eax, dword ptr [ebp+08]
:0040EDD9 7407                    je 0040EDE2
:0040EDDB C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDD9(C)
|
:0040EDE2 8B4508                  mov eax, dword ptr [ebp+08]
:0040EDE5 8945F4                  mov dword ptr [ebp-0C], eax
:0040EDE8 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040EDEC 7408                    je 0040EDF6
:0040EDEE 837DF405                cmp dword ptr [ebp-0C], 00000005
:0040EDF2 7421                    je 0040EE15
:0040EDF4 EB3E                    jmp 0040EE34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDEC(C)
|
:0040EDF6 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040EDFA 7409                    je 0040EE05
:0040EDFC C745F000000080          mov [ebp-10], 80000000
:0040EE03 EB0B                    jmp 0040EE10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDFA(C)
|
:0040EE05 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EE08 E8ED070000              call 0040F5FA
:0040EE0D 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE03(U)
|
:0040EE10 8B45F0                  mov eax, dword ptr [ebp-10]
:0040EE13 EB41                    jmp 0040EE56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDF2(C)
|
:0040EE15 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040EE19 7409                    je 0040EE24
:0040EE1B C745EC00000080          mov [ebp-14], 80000000
:0040EE22 EB0B                    jmp 0040EE2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE19(C)
|
:0040EE24 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EE27 E8FE070000              call 0040F62A
:0040EE2C 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE22(U)
|
:0040EE2F 8B45EC                  mov eax, dword ptr [ebp-14]
:0040EE32 EB22                    jmp 0040EE56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDF4(U)
|
:0040EE34 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040EE38 7408                    je 0040EE42
:0040EE3A 66C745E80080            mov [ebp-18], 8000
:0040EE40 EB0C                    jmp 0040EE4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE38(C)
|
:0040EE42 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EE45 E878070000              call 0040F5C2
:0040EE4A 668945E8                mov word ptr [ebp-18], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE40(U)
|
:0040EE4E 8B45E8                  mov eax, dword ptr [ebp-18]
:0040EE51 25FFFF0000              and eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EDBD(U), :0040EE13(U), :0040EE32(U)
|
:0040EE56 8BE5                    mov esp, ebp
:0040EE58 5D                      pop ebp
:0040EE59 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00409953   , :004099DD   , :0045ABB2   
|
:0040EE5C 55                      push ebp
:0040EE5D 8BEC                    mov ebp, esp
:0040EE5F 51                      push ecx
:0040EE60 894DFC                  mov dword ptr [ebp-04], ecx
:0040EE63 8B4508                  mov eax, dword ptr [ebp+08]
:0040EE66 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EE69 33D2                    xor edx, edx
:0040EE6B 837C813800              cmp dword ptr [ecx+4*eax+38], 00000000
:0040EE70 0F95C2                  setne dl
:0040EE73 8BC2                    mov eax, edx
:0040EE75 8BE5                    mov esp, ebp
:0040EE77 5D                      pop ebp
:0040EE78 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040CBD9   , :0040DE66   , :0040E342   
|
:0040EE7B 55                      push ebp
:0040EE7C 8BEC                    mov ebp, esp
:0040EE7E 51                      push ecx
:0040EE7F 894DFC                  mov dword ptr [ebp-04], ecx
:0040EE82 8B4508                  mov eax, dword ptr [ebp+08]
:0040EE85 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EE88 8B550C                  mov edx, dword ptr [ebp+0C]
:0040EE8B 89548138                mov dword ptr [ecx+4*eax+38], edx
:0040EE8F 8BE5                    mov esp, ebp
:0040EE91 5D                      pop ebp
:0040EE92 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040A6A5   
|
:0040EE95 55                      push ebp
:0040EE96 8BEC                    mov ebp, esp
:0040EE98 51                      push ecx
:0040EE99 894DFC                  mov dword ptr [ebp-04], ecx
:0040EE9C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EE9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040EEA2 898838200000            mov dword ptr [eax+00002038], ecx
:0040EEA8 8BE5                    mov esp, ebp
:0040EEAA 5D                      pop ebp
:0040EEAB C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040A6D7   
|
:0040EEAE 55                      push ebp
:0040EEAF 8BEC                    mov ebp, esp
:0040EEB1 51                      push ecx
:0040EEB2 894DFC                  mov dword ptr [ebp-04], ecx
:0040EEB5 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EEB8 8B8038200000            mov eax, dword ptr [eax+00002038]
:0040EEBE 8BE5                    mov esp, ebp
:0040EEC0 5D                      pop ebp
:0040EEC1 C3                      ret



* Referenced by a CALL at Address:
|:0040CDF3   
|
:0040EEC2 55                      push ebp
:0040EEC3 8BEC                    mov ebp, esp
:0040EEC5 51                      push ecx
:0040EEC6 894DFC                  mov dword ptr [ebp-04], ecx
:0040EEC9 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EECC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040EECF 89883C200000            mov dword ptr [eax+0000203C], ecx
:0040EED5 8BE5                    mov esp, ebp
:0040EED7 5D                      pop ebp
:0040EED8 C20400                  ret 0004


:0040EEDB 55                      push ebp
:0040EEDC 8BEC                    mov ebp, esp
:0040EEDE 51                      push ecx
:0040EEDF 894DFC                  mov dword ptr [ebp-04], ecx
:0040EEE2 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EEE5 8B803C200000            mov eax, dword ptr [eax+0000203C]
:0040EEEB 8BE5                    mov esp, ebp
:0040EEED 5D                      pop ebp
:0040EEEE C3                      ret


:0040EEEF 55                      push ebp
:0040EEF0 8BEC                    mov ebp, esp
:0040EEF2 51                      push ecx
:0040EEF3 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040EEF6 6A04                    push 00000004
:0040EEF8 8D4508                  lea eax, dword ptr [ebp+08]
:0040EEFB 50                      push eax
:0040EEFC 6A00                    push 00000000
:0040EEFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EF01 E8DF090000              call 0040F8E5
:0040EF06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EF09 E8010A0000              call 0040F90F
:0040EF0E 8BE5                    mov esp, ebp
:0040EF10 5D                      pop ebp
:0040EF11 C20400                  ret 0004


:0040EF14 CC                      int 03
:0040EF15 CC                      int 03
:0040EF16 CC                      int 03
:0040EF17 CC                      int 03
:0040EF18 CC                      int 03
:0040EF19 CC                      int 03
:0040EF1A CC                      int 03
:0040EF1B CC                      int 03
:0040EF1C CC                      int 03
:0040EF1D CC                      int 03
:0040EF1E CC                      int 03
:0040EF1F CC                      int 03

* Referenced by a CALL at Address:
|:00408D68   
|
:0040EF20 55                      push ebp
:0040EF21 8BEC                    mov ebp, esp
:0040EF23 51                      push ecx
:0040EF24 894DFC                  mov dword ptr [ebp-04], ecx
:0040EF27 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EF2A E891010000              call 0040F0C0
:0040EF2F 8BE5                    mov esp, ebp
:0040EF31 5D                      pop ebp
:0040EF32 C3                      ret


:0040EF33 CC                      int 03
:0040EF34 CC                      int 03
:0040EF35 CC                      int 03
:0040EF36 CC                      int 03
:0040EF37 CC                      int 03
:0040EF38 CC                      int 03
:0040EF39 CC                      int 03
:0040EF3A CC                      int 03
:0040EF3B CC                      int 03
:0040EF3C CC                      int 03
:0040EF3D CC                      int 03
:0040EF3E CC                      int 03
:0040EF3F CC                      int 03

* Referenced by a CALL at Address:
|:00408D47   
|
:0040EF40 55                      push ebp
:0040EF41 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040EF43 6AFF                    push FFFFFFFF
:0040EF45 68B9374700              push 004737B9
:0040EF4A 64A100000000            mov eax, dword ptr fs:[00000000]
:0040EF50 50                      push eax
:0040EF51 64892500000000          mov dword ptr fs:[00000000], esp
:0040EF58 51                      push ecx
:0040EF59 894DF0                  mov dword ptr [ebp-10], ecx
:0040EF5C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040EF5F E8BC000000              call 0040F020
:0040EF64 C745FC00000000          mov [ebp-04], 00000000
:0040EF6B 68B0EF4000              push 0040EFB0
:0040EF70 6A5A                    push 0000005A
:0040EF72 6A3C                    push 0000003C
:0040EF74 8B45F0                  mov eax, dword ptr [ebp-10]
:0040EF77 0544200000              add eax, 00002044
:0040EF7C 50                      push eax
:0040EF7D E84E000000              call 0040EFD0
:0040EF82 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040EF85 C70120404700            mov dword ptr [ecx], 00474020
:0040EF8B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040EF92 8B45F0                  mov eax, dword ptr [ebp-10]
:0040EF95 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040EF98 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040EF9F 8BE5                    mov esp, ebp
:0040EFA1 5D                      pop ebp
:0040EFA2 C3                      ret


:0040EFA3 CC                      int 03
:0040EFA4 CC                      int 03
:0040EFA5 CC                      int 03
:0040EFA6 CC                      int 03
:0040EFA7 CC                      int 03
:0040EFA8 CC                      int 03
:0040EFA9 CC                      int 03
:0040EFAA CC                      int 03
:0040EFAB CC                      int 03
:0040EFAC CC                      int 03
:0040EFAD CC                      int 03
:0040EFAE CC                      int 03
:0040EFAF CC                      int 03
:0040EFB0 55                      push ebp
:0040EFB1 8BEC                    mov ebp, esp
:0040EFB3 51                      push ecx
:0040EFB4 894DFC                  mov dword ptr [ebp-04], ecx
:0040EFB7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EFBA E841000000              call 0040F000
:0040EFBF 8B45FC                  mov eax, dword ptr [ebp-04]
:0040EFC2 8BE5                    mov esp, ebp
:0040EFC4 5D                      pop ebp
:0040EFC5 C3                      ret


:0040EFC6 CC                      int 03
:0040EFC7 CC                      int 03
:0040EFC8 CC                      int 03
:0040EFC9 CC                      int 03
:0040EFCA CC                      int 03
:0040EFCB CC                      int 03
:0040EFCC CC                      int 03
:0040EFCD CC                      int 03
:0040EFCE CC                      int 03
:0040EFCF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040EF7D   , :0042FDAB   
|
:0040EFD0 55                      push ebp
:0040EFD1 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EFF1(U)
|
:0040EFD3 8B4510                  mov eax, dword ptr [ebp+10]
:0040EFD6 83E801                  sub eax, 00000001
:0040EFD9 894510                  mov dword ptr [ebp+10], eax
:0040EFDC 837D1000                cmp dword ptr [ebp+10], 00000000
:0040EFE0 7C11                    jl 0040EFF3
:0040EFE2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040EFE5 FF5514                  call [ebp+14]
:0040EFE8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040EFEB 034D0C                  add ecx, dword ptr [ebp+0C]
:0040EFEE 894D08                  mov dword ptr [ebp+08], ecx
:0040EFF1 EBE0                    jmp 0040EFD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EFE0(C)
|
:0040EFF3 5D                      pop ebp
:0040EFF4 C21000                  ret 0010


:0040EFF7 CC                      int 03
:0040EFF8 CC                      int 03
:0040EFF9 CC                      int 03
:0040EFFA CC                      int 03
:0040EFFB CC                      int 03
:0040EFFC CC                      int 03
:0040EFFD CC                      int 03
:0040EFFE CC                      int 03
:0040EFFF CC                      int 03

* Referenced by a CALL at Address:
|:0040EFBA   
|
:0040F000 55                      push ebp
:0040F001 8BEC                    mov ebp, esp
:0040F003 51                      push ecx
:0040F004 894DFC                  mov dword ptr [ebp-04], ecx
:0040F007 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F00A 83C104                  add ecx, 00000004
:0040F00D E89E87FFFF              call 004077B0
:0040F012 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F015 8BE5                    mov esp, ebp
:0040F017 5D                      pop ebp
:0040F018 C3                      ret


:0040F019 CC                      int 03
:0040F01A CC                      int 03
:0040F01B CC                      int 03
:0040F01C CC                      int 03
:0040F01D CC                      int 03
:0040F01E CC                      int 03
:0040F01F CC                      int 03

* Referenced by a CALL at Address:
|:0040EF5F   
|
:0040F020 55                      push ebp
:0040F021 8BEC                    mov ebp, esp
:0040F023 51                      push ecx
:0040F024 894DFC                  mov dword ptr [ebp-04], ecx
:0040F027 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F02A 83C104                  add ecx, 00000004
:0040F02D E84E000000              call 0040F080
:0040F032 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F035 C7401800000000          mov [eax+18], 00000000
:0040F03C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F03F C7411C00000000          mov [ecx+1C], 00000000
:0040F046 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F049 C7422000000000          mov [edx+20], 00000000
:0040F050 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F053 C7402400000000          mov [eax+24], 00000000
:0040F05A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F05D C7412800000000          mov [ecx+28], 00000000
:0040F064 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F067 C7422C00000000          mov [edx+2C], 00000000
:0040F06E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F071 C70038404700            mov dword ptr [eax], 00474038
:0040F077 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F07A 8BE5                    mov esp, ebp
:0040F07C 5D                      pop ebp
:0040F07D C3                      ret


:0040F07E CC                      int 03
:0040F07F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040F02D   , :0040F9AB   
|
:0040F080 55                      push ebp
:0040F081 8BEC                    mov ebp, esp
:0040F083 51                      push ecx
:0040F084 894DFC                  mov dword ptr [ebp-04], ecx
:0040F087 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F08A C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:0040F090 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F093 C74104FFFFFFFF          mov [ecx+04], FFFFFFFF
:0040F09A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F09D C7420800000000          mov [edx+08], 00000000
:0040F0A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F0A7 66C7400CFFFF            mov [eax+0C], FFFF
:0040F0AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F0B0 C74110FFFFFFFF          mov [ecx+10], FFFFFFFF
:0040F0B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F0BA 8BE5                    mov esp, ebp
:0040F0BC 5D                      pop ebp
:0040F0BD C3                      ret


:0040F0BE CC                      int 03
:0040F0BF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040EF2A   , :004737B3   
|
:0040F0C0 55                      push ebp
:0040F0C1 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040F0C3 6AFF                    push FFFFFFFF
:0040F0C5 68DC374700              push 004737DC
:0040F0CA 64A100000000            mov eax, dword ptr fs:[00000000]
:0040F0D0 50                      push eax
:0040F0D1 64892500000000          mov dword ptr fs:[00000000], esp
:0040F0D8 83EC14                  sub esp, 00000014
:0040F0DB 894DE0                  mov dword ptr [ebp-20], ecx
:0040F0DE 8B45E0                  mov eax, dword ptr [ebp-20]
:0040F0E1 C70038404700            mov dword ptr [eax], 00474038
:0040F0E7 C745FC00000000          mov [ebp-04], 00000000
:0040F0EE C745F000000000          mov [ebp-10], 00000000
:0040F0F5 EB09                    jmp 0040F100

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F126(U)
|
:0040F0F7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040F0FA 83C101                  add ecx, 00000001
:0040F0FD 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F0F5(U)
|
:0040F100 8B55E0                  mov edx, dword ptr [ebp-20]
:0040F103 8B45F0                  mov eax, dword ptr [ebp-10]
:0040F106 3B4218                  cmp eax, dword ptr [edx+18]
:0040F109 7D1D                    jge 0040F128
:0040F10B 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040F10E 8B511C                  mov edx, dword ptr [ecx+1C]
:0040F111 8B45F0                  mov eax, dword ptr [ebp-10]
:0040F114 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:0040F117 894DEC                  mov dword ptr [ebp-14], ecx
:0040F11A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040F11D 52                      push edx
:0040F11E E8FDE70500              call 0046D920
:0040F123 83C404                  add esp, 00000004
:0040F126 EBCF                    jmp 0040F0F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F109(C)
|
:0040F128 8B45E0                  mov eax, dword ptr [ebp-20]
:0040F12B 8B481C                  mov ecx, dword ptr [eax+1C]
:0040F12E 894DE8                  mov dword ptr [ebp-18], ecx
:0040F131 8B55E8                  mov edx, dword ptr [ebp-18]
:0040F134 52                      push edx
:0040F135 E8E6E70500              call 0046D920
:0040F13A 83C404                  add esp, 00000004
:0040F13D 8B45E0                  mov eax, dword ptr [ebp-20]
:0040F140 8B4820                  mov ecx, dword ptr [eax+20]
:0040F143 894DE4                  mov dword ptr [ebp-1C], ecx
:0040F146 8B55E4                  mov edx, dword ptr [ebp-1C]
:0040F149 52                      push edx
:0040F14A E8D1E70500              call 0046D920
:0040F14F 83C404                  add esp, 00000004
:0040F152 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040F159 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040F15C 83C104                  add ecx, 00000004
:0040F15F E83C6B0100              call 00425CA0
:0040F164 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040F167 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040F16E 8BE5                    mov esp, ebp
:0040F170 5D                      pop ebp
:0040F171 C3                      ret


:0040F172 CC                      int 03
:0040F173 CC                      int 03
:0040F174 CC                      int 03
:0040F175 CC                      int 03
:0040F176 CC                      int 03
:0040F177 CC                      int 03
:0040F178 CC                      int 03
:0040F179 CC                      int 03
:0040F17A CC                      int 03
:0040F17B CC                      int 03
:0040F17C CC                      int 03
:0040F17D CC                      int 03
:0040F17E CC                      int 03
:0040F17F CC                      int 03

* Referenced by a CALL at Address:
|:0040C063   
|
:0040F180 55                      push ebp
:0040F181 8BEC                    mov ebp, esp
:0040F183 51                      push ecx
:0040F184 894DFC                  mov dword ptr [ebp-04], ecx
:0040F187 6A00                    push 00000000
:0040F189 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F18C E8EA040000              call 0040F67B
:0040F191 8BE5                    mov esp, ebp
:0040F193 5D                      pop ebp
:0040F194 C3                      ret


:0040F195 CC                      int 03
:0040F196 CC                      int 03
:0040F197 CC                      int 03
:0040F198 CC                      int 03
:0040F199 CC                      int 03
:0040F19A CC                      int 03
:0040F19B CC                      int 03
:0040F19C CC                      int 03
:0040F19D CC                      int 03
:0040F19E CC                      int 03
:0040F19F CC                      int 03
:0040F1A0 55                      push ebp
:0040F1A1 8BEC                    mov ebp, esp
:0040F1A3 51                      push ecx
:0040F1A4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F1A7 33C0                    xor eax, eax
:0040F1A9 8BE5                    mov esp, ebp
:0040F1AB 5D                      pop ebp
:0040F1AC C3                      ret


:0040F1AD CC                      int 03
:0040F1AE CC                      int 03
:0040F1AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00409B68   , :00422C50   
|
:0040F1B0 55                      push ebp
:0040F1B1 8BEC                    mov ebp, esp
:0040F1B3 51                      push ecx
:0040F1B4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F1B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F1BA 8A4006                  mov al, byte ptr [eax+06]
:0040F1BD 8BE5                    mov esp, ebp
:0040F1BF 5D                      pop ebp
:0040F1C0 C3                      ret


:0040F1C1 CC                      int 03
:0040F1C2 CC                      int 03
:0040F1C3 CC                      int 03
:0040F1C4 CC                      int 03
:0040F1C5 CC                      int 03
:0040F1C6 CC                      int 03
:0040F1C7 CC                      int 03
:0040F1C8 CC                      int 03
:0040F1C9 CC                      int 03
:0040F1CA CC                      int 03
:0040F1CB CC                      int 03
:0040F1CC CC                      int 03
:0040F1CD CC                      int 03
:0040F1CE CC                      int 03
:0040F1CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00409B52   , :00409BEA   , :00409F15   , :0040EB60   , :0040EBA9   
|:0040EC04   , :0040EC37   , :00411F69   , :004120E0   , :00412128   
|:00412145   , :00415230   , :00426547   , :00427439   , :0042D423   
|:0042D588   , :0042DECC   , :0042FF1D   , :00430D7E   , :00430FBA   
|:00435786   , :004396AF   , :0043C38E   , :0043C9EC   , :0043CD68   
|:0043D066   , :00442B68   , :004466E2   , :00446706   , :00454F12   
|:00457E61   , :00461B07   , :00461C7B   
|
:0040F1D0 55                      push ebp
:0040F1D1 8BEC                    mov ebp, esp
:0040F1D3 51                      push ecx
:0040F1D4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F1D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F1DA 33C9                    xor ecx, ecx
:0040F1DC 668B480A                mov cx, word ptr [eax+0A]
:0040F1E0 8BC1                    mov eax, ecx
:0040F1E2 8BE5                    mov esp, ebp
:0040F1E4 5D                      pop ebp
:0040F1E5 C3                      ret


:0040F1E6 CC                      int 03
:0040F1E7 CC                      int 03
:0040F1E8 CC                      int 03
:0040F1E9 CC                      int 03
:0040F1EA CC                      int 03
:0040F1EB CC                      int 03
:0040F1EC CC                      int 03
:0040F1ED CC                      int 03
:0040F1EE CC                      int 03
:0040F1EF CC                      int 03

* Referenced by a CALL at Address:
|:0040A9A6   
|
:0040F1F0 55                      push ebp
:0040F1F1 8BEC                    mov ebp, esp
:0040F1F3 51                      push ecx
:0040F1F4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F1F7 8B4508                  mov eax, dword ptr [ebp+08]
:0040F1FA 25FF000000              and eax, 000000FF
:0040F1FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F202 8A440156                mov al, byte ptr [ecx+eax+56]
:0040F206 8BE5                    mov esp, ebp
:0040F208 5D                      pop ebp
:0040F209 C20400                  ret 0004


:0040F20C CC                      int 03
:0040F20D CC                      int 03
:0040F20E CC                      int 03
:0040F20F CC                      int 03

* Referenced by a CALL at Address:
|:0040A9C8   
|
:0040F210 55                      push ebp
:0040F211 8BEC                    mov ebp, esp
:0040F213 51                      push ecx
:0040F214 894DFC                  mov dword ptr [ebp-04], ecx
:0040F217 8B4508                  mov eax, dword ptr [ebp+08]
:0040F21A 25FF000000              and eax, 000000FF
:0040F21F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F222 8A550C                  mov dl, byte ptr [ebp+0C]
:0040F225 88540156                mov byte ptr [ecx+eax+56], dl
:0040F229 8BE5                    mov esp, ebp
:0040F22B 5D                      pop ebp
:0040F22C C20800                  ret 0008


:0040F22F CC                      int 03

* Referenced by a CALL at Address:
|:0040A94B   
|
:0040F230 55                      push ebp
:0040F231 8BEC                    mov ebp, esp
:0040F233 51                      push ecx
:0040F234 894DFC                  mov dword ptr [ebp-04], ecx
:0040F237 8B4508                  mov eax, dword ptr [ebp+08]
:0040F23A 25FF000000              and eax, 000000FF
:0040F23F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F242 8A44014E                mov al, byte ptr [ecx+eax+4E]
:0040F246 8BE5                    mov esp, ebp
:0040F248 5D                      pop ebp
:0040F249 C20400                  ret 0004


:0040F24C CC                      int 03
:0040F24D CC                      int 03
:0040F24E CC                      int 03
:0040F24F CC                      int 03

* Referenced by a CALL at Address:
|:0040A96D   
|
:0040F250 55                      push ebp
:0040F251 8BEC                    mov ebp, esp
:0040F253 51                      push ecx
:0040F254 894DFC                  mov dword ptr [ebp-04], ecx
:0040F257 8B4508                  mov eax, dword ptr [ebp+08]
:0040F25A 25FF000000              and eax, 000000FF
:0040F25F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F262 8A550C                  mov dl, byte ptr [ebp+0C]
:0040F265 8854014E                mov byte ptr [ecx+eax+4E], dl
:0040F269 8BE5                    mov esp, ebp
:0040F26B 5D                      pop ebp
:0040F26C C20800                  ret 0008


:0040F26F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040AA01   , :004160A2   , :0041F56D   , :0041F7BC   , :0041F7F2   
|:0041FD30   , :0042B0A2   
|
:0040F270 55                      push ebp
:0040F271 8BEC                    mov ebp, esp
:0040F273 51                      push ecx
:0040F274 894DFC                  mov dword ptr [ebp-04], ecx
:0040F277 8B4508                  mov eax, dword ptr [ebp+08]
:0040F27A 25FF000000              and eax, 000000FF
:0040F27F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F282 8A44015E                mov al, byte ptr [ecx+eax+5E]
:0040F286 8BE5                    mov esp, ebp
:0040F288 5D                      pop ebp
:0040F289 C20400                  ret 0004


:0040F28C CC                      int 03
:0040F28D CC                      int 03
:0040F28E CC                      int 03
:0040F28F CC                      int 03

* Referenced by a CALL at Address:
|:0040AA23   
|
:0040F290 55                      push ebp
:0040F291 8BEC                    mov ebp, esp
:0040F293 51                      push ecx
:0040F294 894DFC                  mov dword ptr [ebp-04], ecx
:0040F297 8B4508                  mov eax, dword ptr [ebp+08]
:0040F29A 25FF000000              and eax, 000000FF
:0040F29F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F2A2 8A550C                  mov dl, byte ptr [ebp+0C]
:0040F2A5 8854015E                mov byte ptr [ecx+eax+5E], dl
:0040F2A9 8BE5                    mov esp, ebp
:0040F2AB 5D                      pop ebp
:0040F2AC C20800                  ret 0008


:0040F2AF CC                      int 03

* Referenced by a CALL at Address:
|:0040C217   
|
:0040F2B0 55                      push ebp
:0040F2B1 8BEC                    mov ebp, esp
:0040F2B3 51                      push ecx
:0040F2B4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F2B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F2BA 8A4D08                  mov cl, byte ptr [ebp+08]
:0040F2BD 884802                  mov byte ptr [eax+02], cl
:0040F2C0 8BE5                    mov esp, ebp
:0040F2C2 5D                      pop ebp
:0040F2C3 C20400                  ret 0004


:0040F2C6 CC                      int 03
:0040F2C7 CC                      int 03
:0040F2C8 CC                      int 03
:0040F2C9 CC                      int 03
:0040F2CA CC                      int 03
:0040F2CB CC                      int 03
:0040F2CC CC                      int 03
:0040F2CD CC                      int 03
:0040F2CE CC                      int 03
:0040F2CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00409E35   , :00409E6D   , :00409EA3   , :00409ED6   , :0040A0E9   
|:0040A196   , :0040A459   , :0040A508   , :0042AA5C   , :0042AB04   
|:0042AB1D   , :0042B3B8   , :0042B631   , :0042C275   , :0042D468   
|:0042D4AC   , :0042D4EC   , :0042D614   , :0042D826   , :0042D846   
|:0042FF86   , :004309C5   , :00430DE0   , :0043101D   , :00432461   
|:00432572   , :00432824   , :00432A07   , :00432E6F   , :004357F2   
|:004375D6   , :00437C90   , :00437CA9   , :0043839A   , :004383B1   
|:00438BAD   , :0043920B   , :0043971E   , :0043999D   , :0043C605   
|:0043CA97   , :0043D1D1   , :00442236   , :004422B1   , :0044251B   
|:00444F67   , :004454B7   , :00445F3A   , :00445F53   , :00445FD7   
|:00445FF0   , :00447827   , :00448679   , :00448693   , :0044883C   
|:0044895B   , :00448965   , :00448E6B   , :00448E75   , :004493D1   
|:00449880   , :00449C59   , :0044A10E   , :0044AD0A   , :0044AE50   
|:0044AE6E   , :0044B07E   , :0044B1A0   , :0044CDCF   , :0044CDD9   
|:0044CEAF   , :0044CEB9   , :0044CF4C   , :0044CF56   , :0044CFE9   
|:0044CFF3   , :0044D113   , :0044D11D   , :0044D261   , :0044D26B   
|:0044D2FE   , :0044D308   , :0044D981   , :0044DB6C   , :00456E8D   
|:004594C0   , :004595DA   , :004599F9   , :00459A44   , :00459DBD   
|:0045A5AE   , :00465E3E   , :00466DD5   , :00466DF2   
|
:0040F2D0 55                      push ebp
:0040F2D1 8BEC                    mov ebp, esp
:0040F2D3 51                      push ecx
:0040F2D4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F2D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F2DA 33C9                    xor ecx, ecx
:0040F2DC 8A4804                  mov cl, byte ptr [eax+04]
:0040F2DF 33C0                    xor eax, eax
:0040F2E1 83F91E                  cmp ecx, 0000001E
:0040F2E4 0F9CC0                  setl al
:0040F2E7 8BE5                    mov esp, ebp
:0040F2E9 5D                      pop ebp
:0040F2EA C3                      ret


:0040F2EB CC                      int 03
:0040F2EC CC                      int 03
:0040F2ED CC                      int 03
:0040F2EE CC                      int 03
:0040F2EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C8F9   , :0040D2C3   
|
:0040F2F0 55                      push ebp
:0040F2F1 8BEC                    mov ebp, esp
:0040F2F3 51                      push ecx
:0040F2F4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F2F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F2FA 8A4D08                  mov cl, byte ptr [ebp+08]
:0040F2FD 884812                  mov byte ptr [eax+12], cl
:0040F300 8BE5                    mov esp, ebp
:0040F302 5D                      pop ebp
:0040F303 C20400                  ret 0004


:0040F306 CC                      int 03
:0040F307 CC                      int 03
:0040F308 CC                      int 03
:0040F309 CC                      int 03
:0040F30A CC                      int 03
:0040F30B CC                      int 03
:0040F30C CC                      int 03
:0040F30D CC                      int 03
:0040F30E CC                      int 03
:0040F30F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040D2B3   , :004267CA   
|
:0040F310 55                      push ebp
:0040F311 8BEC                    mov ebp, esp
:0040F313 51                      push ecx
:0040F314 894DFC                  mov dword ptr [ebp-04], ecx
:0040F317 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F31A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040F31D 884813                  mov byte ptr [eax+13], cl
:0040F320 8BE5                    mov esp, ebp
:0040F322 5D                      pop ebp
:0040F323 C20400                  ret 0004


:0040F326 CC                      int 03
:0040F327 CC                      int 03
:0040F328 CC                      int 03
:0040F329 CC                      int 03
:0040F32A CC                      int 03
:0040F32B CC                      int 03
:0040F32C CC                      int 03
:0040F32D CC                      int 03
:0040F32E CC                      int 03
:0040F32F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040D326   , :00412307   , :0041509F   , :00424A9D   , :00424ABD   
|:0042DEDF   , :00454F2E   , :00457E7D   
|
:0040F330 55                      push ebp
:0040F331 8BEC                    mov ebp, esp
:0040F333 51                      push ecx
:0040F334 894DFC                  mov dword ptr [ebp-04], ecx
:0040F337 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F33A 8A4014                  mov al, byte ptr [eax+14]
:0040F33D 8BE5                    mov esp, ebp
:0040F33F 5D                      pop ebp
:0040F340 C3                      ret


:0040F341 CC                      int 03
:0040F342 CC                      int 03
:0040F343 CC                      int 03
:0040F344 CC                      int 03
:0040F345 CC                      int 03
:0040F346 CC                      int 03
:0040F347 CC                      int 03
:0040F348 CC                      int 03
:0040F349 CC                      int 03
:0040F34A CC                      int 03
:0040F34B CC                      int 03
:0040F34C CC                      int 03
:0040F34D CC                      int 03
:0040F34E CC                      int 03
:0040F34F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040D307   , :0040D31A   , :0041204B   , :0041206F   , :004150B6   
|:00415741   , :0045A855   , :0045AC9F   , :0045DD59   
|
:0040F350 55                      push ebp
:0040F351 8BEC                    mov ebp, esp
:0040F353 51                      push ecx
:0040F354 894DFC                  mov dword ptr [ebp-04], ecx
:0040F357 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F35A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040F35D 884814                  mov byte ptr [eax+14], cl
:0040F360 8BE5                    mov esp, ebp
:0040F362 5D                      pop ebp
:0040F363 C20400                  ret 0004


:0040F366 CC                      int 03
:0040F367 CC                      int 03
:0040F368 CC                      int 03
:0040F369 CC                      int 03
:0040F36A CC                      int 03
:0040F36B CC                      int 03
:0040F36C CC                      int 03
:0040F36D CC                      int 03
:0040F36E CC                      int 03
:0040F36F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040ADC1   , :0040B2DC   , :0045542D   , :00458A0C   , :00458B45   
|
:0040F370 55                      push ebp
:0040F371 8BEC                    mov ebp, esp
:0040F373 51                      push ecx
:0040F374 894DFC                  mov dword ptr [ebp-04], ecx
:0040F377 8B4508                  mov eax, dword ptr [ebp+08]
:0040F37A 6BC03C                  imul eax, 0000003C
:0040F37D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F380 8D840144200000          lea eax, dword ptr [ecx+eax+00002044]
:0040F387 8BE5                    mov esp, ebp
:0040F389 5D                      pop ebp
:0040F38A C20400                  ret 0004


:0040F38D CC                      int 03
:0040F38E CC                      int 03
:0040F38F CC                      int 03

* Referenced by a CALL at Address:
|:0040AF3C   
|
:0040F390 55                      push ebp
:0040F391 8BEC                    mov ebp, esp
:0040F393 51                      push ecx
:0040F394 894DFC                  mov dword ptr [ebp-04], ecx
:0040F397 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F39A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040F39D 888866350000            mov byte ptr [eax+00003566], cl
:0040F3A3 8BE5                    mov esp, ebp
:0040F3A5 5D                      pop ebp
:0040F3A6 C20400                  ret 0004


:0040F3A9 CC                      int 03
:0040F3AA CC                      int 03
:0040F3AB CC                      int 03
:0040F3AC CC                      int 03
:0040F3AD CC                      int 03
:0040F3AE CC                      int 03
:0040F3AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040E970   , :0040E98B   , :0040E9B0   , :004117A1   , :0042BDA2   
|:0045509F   , :00455474   , :0045548A   , :00455684   , :00455C70   
|:00455C9E   , :00455CD6   , :00458301   , :0045A86B   , :0045A8F2   
|:0045AB6D   , :0045ACB5   , :0045AD39   , :0045BC63   , :0045BDD1   
|:0045DD6F   , :0045DDF3   
|
:0040F3B0 55                      push ebp
:0040F3B1 8BEC                    mov ebp, esp
:0040F3B3 51                      push ecx
:0040F3B4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F3B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F3BA 8A4013                  mov al, byte ptr [eax+13]
:0040F3BD 8BE5                    mov esp, ebp
:0040F3BF 5D                      pop ebp
:0040F3C0 C3                      ret


:0040F3C1 CC                      int 03
:0040F3C2 CC                      int 03
:0040F3C3 CC                      int 03
:0040F3C4 CC                      int 03
:0040F3C5 CC                      int 03
:0040F3C6 CC                      int 03
:0040F3C7 CC                      int 03
:0040F3C8 CC                      int 03
:0040F3C9 CC                      int 03
:0040F3CA CC                      int 03
:0040F3CB CC                      int 03
:0040F3CC CC                      int 03
:0040F3CD CC                      int 03
:0040F3CE CC                      int 03
:0040F3CF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040EAE9   , :0040ED58   , :0040F96A   , :0041009F   
|
:0040F3D0 55                      push ebp
:0040F3D1 8BEC                    mov ebp, esp
:0040F3D3 51                      push ecx
:0040F3D4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F3D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F3DA 8B4028                  mov eax, dword ptr [eax+28]
:0040F3DD 8BE5                    mov esp, ebp
:0040F3DF 5D                      pop ebp
:0040F3E0 C3                      ret


:0040F3E1 CC                      int 03
:0040F3E2 CC                      int 03
:0040F3E3 CC                      int 03
:0040F3E4 CC                      int 03
:0040F3E5 CC                      int 03
:0040F3E6 CC                      int 03
:0040F3E7 CC                      int 03
:0040F3E8 CC                      int 03
:0040F3E9 CC                      int 03
:0040F3EA CC                      int 03
:0040F3EB CC                      int 03
:0040F3EC CC                      int 03
:0040F3ED CC                      int 03
:0040F3EE CC                      int 03
:0040F3EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040ECB1   , :00421293   , :0042214B   , :00422AFB   , :00422D69   
|:00423253   , :00423A45   , :00423DE8   , :00423FC6   , :0042495E   
|:0045AADE   
|
:0040F3F0 55                      push ebp
:0040F3F1 8BEC                    mov ebp, esp
:0040F3F3 51                      push ecx
:0040F3F4 894DFC                  mov dword ptr [ebp-04], ecx
:0040F3F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F3FA 668B4028                mov ax, word ptr [eax+28]
:0040F3FE 8BE5                    mov esp, ebp
:0040F400 5D                      pop ebp
:0040F401 C3                      ret


:0040F402 CC                      int 03
:0040F403 CC                      int 03
:0040F404 CC                      int 03
:0040F405 CC                      int 03
:0040F406 CC                      int 03
:0040F407 CC                      int 03
:0040F408 CC                      int 03
:0040F409 CC                      int 03
:0040F40A CC                      int 03
:0040F40B CC                      int 03
:0040F40C CC                      int 03
:0040F40D CC                      int 03
:0040F40E CC                      int 03
:0040F40F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040ECC7   , :0040ECD9   , :0040ECEB   , :00422B11   , :00423532   
|:004235A6   , :00423D67   , :00423E1D   , :00424BAF   , :0045AB13   
|
:0040F410 55                      push ebp
:0040F411 8BEC                    mov ebp, esp
:0040F413 51                      push ecx
:0040F414 894DFC                  mov dword ptr [ebp-04], ecx
:0040F417 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F41A 668B4030                mov ax, word ptr [eax+30]
:0040F41E 8BE5                    mov esp, ebp
:0040F420 5D                      pop ebp
:0040F421 C3                      ret


:0040F422 CC                      int 03
:0040F423 CC                      int 03
:0040F424 CC                      int 03
:0040F425 CC                      int 03
:0040F426 CC                      int 03
:0040F427 CC                      int 03
:0040F428 CC                      int 03
:0040F429 CC                      int 03
:0040F42A CC                      int 03
:0040F42B CC                      int 03
:0040F42C CC                      int 03
:0040F42D CC                      int 03
:0040F42E CC                      int 03
:0040F42F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040F464   , :0040FCDD   
|
:0040F430 55                      push ebp
:0040F431 8BEC                    mov ebp, esp
:0040F433 83EC08                  sub esp, 00000008
:0040F436 894DF8                  mov dword ptr [ebp-08], ecx
:0040F439 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F43C 8B4820                  mov ecx, dword ptr [eax+20]
:0040F43F 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F442 034A30                  add ecx, dword ptr [edx+30]
:0040F445 894DFC                  mov dword ptr [ebp-04], ecx
:0040F448 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F44B 8B4804                  mov ecx, dword ptr [eax+04]
:0040F44E 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F451 8B048A                  mov eax, dword ptr [edx+4*ecx]
:0040F454 8BE5                    mov esp, ebp
:0040F456 5D                      pop ebp
:0040F457 C3                      ret



* Referenced by a CALL at Addresses:
|:0040F495   , :0040F990   
|
:0040F458 55                      push ebp
:0040F459 8BEC                    mov ebp, esp
:0040F45B 83EC08                  sub esp, 00000008
:0040F45E 894DF8                  mov dword ptr [ebp-08], ecx
:0040F461 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F464 E8C7FFFFFF              call 0040F430
:0040F469 8945FC                  mov dword ptr [ebp-04], eax
:0040F46C 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F46F C7400800000000          mov [eax+08], 00000000
:0040F476 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F479 8B5120                  mov edx, dword ptr [ecx+20]
:0040F47C 0355FC                  add edx, dword ptr [ebp-04]
:0040F47F 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F482 89500C                  mov dword ptr [eax+0C], edx
:0040F485 8BE5                    mov esp, ebp
:0040F487 5D                      pop ebp
:0040F488 C3                      ret



* Referenced by a CALL at Address:
|:0040F9DB   
|
:0040F489 55                      push ebp
:0040F48A 8BEC                    mov ebp, esp
:0040F48C 83EC10                  sub esp, 00000010
:0040F48F 894DF0                  mov dword ptr [ebp-10], ecx
:0040F492 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040F495 E8BEFFFFFF              call 0040F458
:0040F49A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040F49D E820010000              call 0040F5C2
:0040F4A2 25FFFF0000              and eax, 0000FFFF
:0040F4A7 8945F8                  mov dword ptr [ebp-08], eax
:0040F4AA C745FC00000000          mov [ebp-04], 00000000
:0040F4B1 EB09                    jmp 0040F4BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F4F2(U)
|
:0040F4B3 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F4B6 83C001                  add eax, 00000001
:0040F4B9 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F4B1(U)
|
:0040F4BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F4BF 3B4D08                  cmp ecx, dword ptr [ebp+08]
:0040F4C2 7D30                    jge 0040F4F4
:0040F4C4 8B55F0                  mov edx, dword ptr [ebp-10]
:0040F4C7 837A3400                cmp dword ptr [edx+34], 00000000
:0040F4CB 7408                    je 0040F4D5
:0040F4CD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040F4D0 E8ED000000              call 0040F5C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F4CB(C)
|
:0040F4D5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040F4D8 E8E5000000              call 0040F5C2
:0040F4DD 668945F4                mov word ptr [ebp-0C], ax
:0040F4E1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040F4E4 25FFFF0000              and eax, 0000FFFF
:0040F4E9 50                      push eax
:0040F4EA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040F4ED E829000000              call 0040F51B
:0040F4F2 EBBF                    jmp 0040F4B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F4C2(C)
|
:0040F4F4 8BE5                    mov esp, ebp
:0040F4F6 5D                      pop ebp
:0040F4F7 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040FA63   
|
:0040F4FA 55                      push ebp
:0040F4FB 8BEC                    mov ebp, esp
:0040F4FD 51                      push ecx
:0040F4FE 56                      push esi
:0040F4FF 57                      push edi
:0040F500 894DFC                  mov dword ptr [ebp-04], ecx
:0040F503 8B7508                  mov esi, dword ptr [ebp+08]
:0040F506 8B7DFC                  mov edi, dword ptr [ebp-04]
:0040F509 83C704                  add edi, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040F50C B905000000              mov ecx, 00000005
:0040F511 F3                      repz
:0040F512 A5                      movsd
:0040F513 5F                      pop edi
:0040F514 5E                      pop esi
:0040F515 8BE5                    mov esp, ebp
:0040F517 5D                      pop ebp
:0040F518 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040F4ED   , :004100E7   
|
:0040F51B 55                      push ebp
:0040F51C 8BEC                    mov ebp, esp
:0040F51E 51                      push ecx
:0040F51F 894DFC                  mov dword ptr [ebp-04], ecx
:0040F522 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F525 8B4808                  mov ecx, dword ptr [eax+08]
:0040F528 034D08                  add ecx, dword ptr [ebp+08]
:0040F52B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F52E 894A08                  mov dword ptr [edx+08], ecx
:0040F531 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F534 8B480C                  mov ecx, dword ptr [eax+0C]
:0040F537 034D08                  add ecx, dword ptr [ebp+08]
:0040F53A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F53D 894A0C                  mov dword ptr [edx+0C], ecx
:0040F540 8BE5                    mov esp, ebp
:0040F542 5D                      pop ebp
:0040F543 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040FA46   
|
:0040F546 55                      push ebp
:0040F547 8BEC                    mov ebp, esp
:0040F549 51                      push ecx
:0040F54A 56                      push esi
:0040F54B 57                      push edi
:0040F54C 894DFC                  mov dword ptr [ebp-04], ecx
:0040F54F 8B75FC                  mov esi, dword ptr [ebp-04]
:0040F552 83C604                  add esi, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040F555 B905000000              mov ecx, 00000005
:0040F55A 8B7D08                  mov edi, dword ptr [ebp+08]
:0040F55D F3                      repz
:0040F55E A5                      movsd
:0040F55F 5F                      pop edi
:0040F560 5E                      pop esi
:0040F561 8BE5                    mov esp, ebp
:0040F563 5D                      pop ebp
:0040F564 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00410002   , :0041002A   
|
:0040F567 55                      push ebp
:0040F568 8BEC                    mov ebp, esp
:0040F56A 83EC08                  sub esp, 00000008
:0040F56D 894DF8                  mov dword ptr [ebp-08], ecx
:0040F570 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F573 8B4820                  mov ecx, dword ptr [eax+20]
:0040F576 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F579 034A30                  add ecx, dword ptr [edx+30]
:0040F57C 894DFC                  mov dword ptr [ebp-04], ecx
:0040F57F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F582 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F585 8B00                    mov eax, dword ptr [eax]
:0040F587 2B4130                  sub eax, dword ptr [ecx+30]
:0040F58A C1E802                  shr eax, 02
:0040F58D 8BE5                    mov esp, ebp
:0040F58F 5D                      pop ebp
:0040F590 C3                      ret



* Referenced by a CALL at Addresses:
|:0040F5CE   , :0040F5DE   
|
:0040F591 55                      push ebp
:0040F592 8BEC                    mov ebp, esp
:0040F594 51                      push ecx
:0040F595 894DFC                  mov dword ptr [ebp-04], ecx
:0040F598 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F59B 8B4808                  mov ecx, dword ptr [eax+08]
:0040F59E 83C101                  add ecx, 00000001
:0040F5A1 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F5A4 894A08                  mov dword ptr [edx+08], ecx
:0040F5A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F5AA 8B480C                  mov ecx, dword ptr [eax+0C]
:0040F5AD 8A01                    mov al, byte ptr [ecx]
:0040F5AF 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F5B2 8B4A0C                  mov ecx, dword ptr [edx+0C]
:0040F5B5 83C101                  add ecx, 00000001
:0040F5B8 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F5BB 894A0C                  mov dword ptr [edx+0C], ecx
:0040F5BE 8BE5                    mov esp, ebp
:0040F5C0 5D                      pop ebp
:0040F5C1 C3                      ret



* Referenced by a CALL at Addresses:
|:00408D7B   , :0040EDB3   , :0040EDCC   , :0040EE45   , :0040F49D   
|:0040F4D0   , :0040F4D8   , :0040F606   , :0040F616   , :0040F998   
|:0040F9EC   , :0040F9F8   , :0040FE63   , :004100CB   
|
:0040F5C2 55                      push ebp
:0040F5C3 8BEC                    mov ebp, esp
:0040F5C5 83EC08                  sub esp, 00000008
:0040F5C8 894DF8                  mov dword ptr [ebp-08], ecx
:0040F5CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F5CE E8BEFFFFFF              call 0040F591
:0040F5D3 660FB6C0                movzx ax, al
:0040F5D7 668945FC                mov word ptr [ebp-04], ax
:0040F5DB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F5DE E8AEFFFFFF              call 0040F591
:0040F5E3 25FF000000              and eax, 000000FF
:0040F5E8 C1E008                  shl eax, 08
:0040F5EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F5EE 81E1FFFF0000            and ecx, 0000FFFF
:0040F5F4 0BC1                    or eax, ecx
:0040F5F6 8BE5                    mov esp, ebp
:0040F5F8 5D                      pop ebp
:0040F5F9 C3                      ret



* Referenced by a CALL at Address:
|:0040EE08   
|
:0040F5FA 55                      push ebp
:0040F5FB 8BEC                    mov ebp, esp
:0040F5FD 83EC08                  sub esp, 00000008
:0040F600 894DF8                  mov dword ptr [ebp-08], ecx
:0040F603 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F606 E8B7FFFFFF              call 0040F5C2
:0040F60B 25FFFF0000              and eax, 0000FFFF
:0040F610 8945FC                  mov dword ptr [ebp-04], eax
:0040F613 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F616 E8A7FFFFFF              call 0040F5C2
:0040F61B 25FFFF0000              and eax, 0000FFFF
:0040F620 C1E010                  shl eax, 10
:0040F623 0B45FC                  or eax, dword ptr [ebp-04]
:0040F626 8BE5                    mov esp, ebp
:0040F628 5D                      pop ebp
:0040F629 C3                      ret



* Referenced by a CALL at Address:
|:0040EE27   
|
:0040F62A 55                      push ebp
:0040F62B 8BEC                    mov ebp, esp
:0040F62D 83EC08                  sub esp, 00000008
:0040F630 894DF8                  mov dword ptr [ebp-08], ecx
:0040F633 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F636 8B480C                  mov ecx, dword ptr [eax+0C]
:0040F639 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F659(U)
|
:0040F63C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F63F 8B420C                  mov eax, dword ptr [edx+0C]
:0040F642 33C9                    xor ecx, ecx
:0040F644 8A08                    mov cl, byte ptr [eax]
:0040F646 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F649 8B420C                  mov eax, dword ptr [edx+0C]
:0040F64C 83C001                  add eax, 00000001
:0040F64F 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F652 89420C                  mov dword ptr [edx+0C], eax
:0040F655 85C9                    test ecx, ecx
:0040F657 7402                    je 0040F65B
:0040F659 EBE1                    jmp 0040F63C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F657(C)
|
:0040F65B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F65E 8BE5                    mov esp, ebp
:0040F660 5D                      pop ebp
:0040F661 C3                      ret



* Referenced by a CALL at Addresses:
|:0040F68D   , :0040F6A4   
|
:0040F662 55                      push ebp
:0040F663 8BEC                    mov ebp, esp
:0040F665 51                      push ecx
:0040F666 894DFC                  mov dword ptr [ebp-04], ecx
:0040F669 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F66C 8B480C                  mov ecx, dword ptr [eax+0C]
:0040F66F 8B5508                  mov edx, dword ptr [ebp+08]
:0040F672 8A0411                  mov al, byte ptr [ecx+edx]
:0040F675 8BE5                    mov esp, ebp
:0040F677 5D                      pop ebp
:0040F678 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040F18C   , :0040F6C7   , :0040F6DD   
|
:0040F67B 55                      push ebp
:0040F67C 8BEC                    mov ebp, esp
:0040F67E 51                      push ecx
:0040F67F 53                      push ebx
:0040F680 894DFC                  mov dword ptr [ebp-04], ecx
:0040F683 8B4508                  mov eax, dword ptr [ebp+08]
:0040F686 83C001                  add eax, 00000001
:0040F689 50                      push eax
:0040F68A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F68D E8D0FFFFFF              call 0040F662
:0040F692 8AD8                    mov bl, al
:0040F694 81E3FF000000            and ebx, 000000FF
:0040F69A C1E308                  shl ebx, 08
:0040F69D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F6A0 51                      push ecx
:0040F6A1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F6A4 E8B9FFFFFF              call 0040F662
:0040F6A9 25FF000000              and eax, 000000FF
:0040F6AE 0BD8                    or ebx, eax
:0040F6B0 668BC3                  mov ax, bx
:0040F6B3 5B                      pop ebx
:0040F6B4 8BE5                    mov esp, ebp
:0040F6B6 5D                      pop ebp
:0040F6B7 C20400                  ret 0004


:0040F6BA 55                      push ebp
:0040F6BB 8BEC                    mov ebp, esp
:0040F6BD 51                      push ecx
:0040F6BE 56                      push esi
:0040F6BF 894DFC                  mov dword ptr [ebp-04], ecx
:0040F6C2 6A01                    push 00000001
:0040F6C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F6C7 E8AFFFFFFF              call 0040F67B
:0040F6CC 668BF0                  mov si, ax
:0040F6CF 81E6FFFF0000            and esi, 0000FFFF
:0040F6D5 C1E610                  shl esi, 10
:0040F6D8 6A00                    push 00000000
:0040F6DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F6DD E899FFFFFF              call 0040F67B
:0040F6E2 25FFFF0000              and eax, 0000FFFF
:0040F6E7 0BC6                    or eax, esi
:0040F6E9 5E                      pop esi
:0040F6EA 8BE5                    mov esp, ebp
:0040F6EC 5D                      pop ebp
:0040F6ED C3                      ret


:0040F6EE 55                      push ebp
:0040F6EF 8BEC                    mov ebp, esp
:0040F6F1 51                      push ecx
:0040F6F2 894DFC                  mov dword ptr [ebp-04], ecx
:0040F6F5 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F6F8 8B400C                  mov eax, dword ptr [eax+0C]
:0040F6FB 8BE5                    mov esp, ebp
:0040F6FD 5D                      pop ebp
:0040F6FE C3                      ret



* Referenced by a CALL at Address:
|:0040E2EA   
|
:0040F6FF 55                      push ebp
:0040F700 8BEC                    mov ebp, esp
:0040F702 83EC18                  sub esp, 00000018
:0040F705 894DE8                  mov dword ptr [ebp-18], ecx
:0040F708 8B45E8                  mov eax, dword ptr [ebp-18]
:0040F70B 83781C00                cmp dword ptr [eax+1C], 00000000
:0040F70F 744F                    je 0040F760
:0040F711 C745F800000000          mov [ebp-08], 00000000
:0040F718 EB09                    jmp 0040F723

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F749(U)
|
:0040F71A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F71D 83C101                  add ecx, 00000001
:0040F720 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F718(U)
|
:0040F723 8B55E8                  mov edx, dword ptr [ebp-18]
:0040F726 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F729 3B4218                  cmp eax, dword ptr [edx+18]
:0040F72C 7D1D                    jge 0040F74B
:0040F72E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040F731 8B511C                  mov edx, dword ptr [ecx+1C]
:0040F734 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F737 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:0040F73A 894DF4                  mov dword ptr [ebp-0C], ecx
:0040F73D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040F740 52                      push edx
:0040F741 E8DAE10500              call 0046D920
:0040F746 83C404                  add esp, 00000004
:0040F749 EBCF                    jmp 0040F71A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F72C(C)
|
:0040F74B 8B45E8                  mov eax, dword ptr [ebp-18]
:0040F74E 8B481C                  mov ecx, dword ptr [eax+1C]
:0040F751 894DF0                  mov dword ptr [ebp-10], ecx
:0040F754 8B55F0                  mov edx, dword ptr [ebp-10]
:0040F757 52                      push edx
:0040F758 E8C3E10500              call 0046D920
:0040F75D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F70F(C)
|
:0040F760 8B45E8                  mov eax, dword ptr [ebp-18]
:0040F763 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F766 894818                  mov dword ptr [eax+18], ecx
:0040F769 8B55E8                  mov edx, dword ptr [ebp-18]
:0040F76C 8B4218                  mov eax, dword ptr [edx+18]
:0040F76F C1E002                  shl eax, 02
:0040F772 50                      push eax
:0040F773 E848E20500              call 0046D9C0
:0040F778 83C404                  add esp, 00000004
:0040F77B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040F77E 89411C                  mov dword ptr [ecx+1C], eax
:0040F781 8B55E8                  mov edx, dword ptr [ebp-18]
:0040F784 837A1C00                cmp dword ptr [edx+1C], 00000000
:0040F788 7504                    jne 0040F78E
:0040F78A 33C0                    xor eax, eax
:0040F78C EB6A                    jmp 0040F7F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F788(C)
|
:0040F78E C745FC00000000          mov [ebp-04], 00000000
:0040F795 EB09                    jmp 0040F7A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F7F1(U)
|
:0040F797 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F79A 83C001                  add eax, 00000001
:0040F79D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F795(U)
|
:0040F7A0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040F7A3 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F7A6 3B5118                  cmp edx, dword ptr [ecx+18]
:0040F7A9 7D48                    jge 0040F7F3
:0040F7AB 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F7AE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040F7B1 8B1481                  mov edx, dword ptr [ecx+4*eax]
:0040F7B4 52                      push edx
:0040F7B5 E806E20500              call 0046D9C0
:0040F7BA 83C404                  add esp, 00000004
:0040F7BD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040F7C0 8B511C                  mov edx, dword ptr [ecx+1C]
:0040F7C3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F7C6 89048A                  mov dword ptr [edx+4*ecx], eax
:0040F7C9 8B55E8                  mov edx, dword ptr [ebp-18]
:0040F7CC 8B421C                  mov eax, dword ptr [edx+1C]
:0040F7CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F7D2 833C8800                cmp dword ptr [eax+4*ecx], 00000000
:0040F7D6 7519                    jne 0040F7F1
:0040F7D8 8B55E8                  mov edx, dword ptr [ebp-18]
:0040F7DB 8B421C                  mov eax, dword ptr [edx+1C]
:0040F7DE 8945EC                  mov dword ptr [ebp-14], eax
:0040F7E1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040F7E4 51                      push ecx
:0040F7E5 E836E10500              call 0046D920
:0040F7EA 83C404                  add esp, 00000004
:0040F7ED 33C0                    xor eax, eax
:0040F7EF EB07                    jmp 0040F7F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F7D6(C)
|
:0040F7F1 EBA4                    jmp 0040F797

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F7A9(C)
|
:0040F7F3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F78C(U), :0040F7EF(U)
|
:0040F7F8 8BE5                    mov esp, ebp
:0040F7FA 5D                      pop ebp
:0040F7FB C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040E304   
|
:0040F7FE 55                      push ebp
:0040F7FF 8BEC                    mov ebp, esp
:0040F801 83EC14                  sub esp, 00000014
:0040F804 894DEC                  mov dword ptr [ebp-14], ecx
:0040F807 8B45EC                  mov eax, dword ptr [ebp-14]
:0040F80A 83781C00                cmp dword ptr [eax+1C], 00000000
:0040F80E 7507                    jne 0040F817
:0040F810 33C0                    xor eax, eax
:0040F812 E99E000000              jmp 0040F8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F80E(C)
|
:0040F817 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040F81A 8B5508                  mov edx, dword ptr [ebp+08]
:0040F81D 3B5118                  cmp edx, dword ptr [ecx+18]
:0040F820 7407                    je 0040F829
:0040F822 33C0                    xor eax, eax
:0040F824 E98C000000              jmp 0040F8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F820(C)
|
:0040F829 C745FC00000000          mov [ebp-04], 00000000
:0040F830 EB09                    jmp 0040F83B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F8AE(U)
|
:0040F832 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F835 83C001                  add eax, 00000001
:0040F838 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F830(U)
|
:0040F83B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040F83E 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F841 3B5118                  cmp edx, dword ptr [ecx+18]
:0040F844 7D6A                    jge 0040F8B0
:0040F846 8B45EC                  mov eax, dword ptr [ebp-14]
:0040F849 8B481C                  mov ecx, dword ptr [eax+1C]
:0040F84C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F84F 833C9100                cmp dword ptr [ecx+4*edx], 00000000
:0040F853 7519                    jne 0040F86E
:0040F855 8B45EC                  mov eax, dword ptr [ebp-14]
:0040F858 8B481C                  mov ecx, dword ptr [eax+1C]
:0040F85B 894DF0                  mov dword ptr [ebp-10], ecx
:0040F85E 8B55F0                  mov edx, dword ptr [ebp-10]
:0040F861 52                      push edx
:0040F862 E8B9E00500              call 0046D920
:0040F867 83C404                  add esp, 00000004
:0040F86A 33C0                    xor eax, eax
:0040F86C EB47                    jmp 0040F8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F853(C)
|
:0040F86E 8B45EC                  mov eax, dword ptr [ebp-14]
:0040F871 8B481C                  mov ecx, dword ptr [eax+1C]
:0040F874 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F877 8B0491                  mov eax, dword ptr [ecx+4*edx]
:0040F87A 8945F8                  mov dword ptr [ebp-08], eax
:0040F87D C745F400000000          mov [ebp-0C], 00000000
:0040F884 EB09                    jmp 0040F88F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F8AC(U)
|
:0040F886 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040F889 83C101                  add ecx, 00000001
:0040F88C 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F884(U)
|
:0040F88F 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F892 8B450C                  mov eax, dword ptr [ebp+0C]
:0040F895 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040F898 3B0C90                  cmp ecx, dword ptr [eax+4*edx]
:0040F89B 7D11                    jge 0040F8AE
:0040F89D 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F8A0 C602FF                  mov byte ptr [edx], FF
:0040F8A3 8B45F8                  mov eax, dword ptr [ebp-08]
:0040F8A6 83C001                  add eax, 00000001
:0040F8A9 8945F8                  mov dword ptr [ebp-08], eax
:0040F8AC EBD8                    jmp 0040F886

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F89B(C)
|
:0040F8AE EB82                    jmp 0040F832

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F844(C)
|
:0040F8B0 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F812(U), :0040F824(U), :0040F86C(U)
|
:0040F8B5 8BE5                    mov esp, ebp
:0040F8B7 5D                      pop ebp
:0040F8B8 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040984F   , :00409C01   , :00409C89   , :00409FC1   , :0040A216   
|:0040A237   , :0040A305   
|
:0040F8BB 55                      push ebp
:0040F8BC 8BEC                    mov ebp, esp
:0040F8BE 51                      push ecx
:0040F8BF 894DFC                  mov dword ptr [ebp-04], ecx
:0040F8C2 8B4510                  mov eax, dword ptr [ebp+10]
:0040F8C5 50                      push eax
:0040F8C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F8C9 8B511C                  mov edx, dword ptr [ecx+1C]
:0040F8CC 8B4508                  mov eax, dword ptr [ebp+08]
:0040F8CF 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:0040F8D2 51                      push ecx
:0040F8D3 8B550C                  mov edx, dword ptr [ebp+0C]
:0040F8D6 52                      push edx
:0040F8D7 E8F4E00500              call 0046D9D0
:0040F8DC 83C40C                  add esp, 0000000C
:0040F8DF 8BE5                    mov esp, ebp
:0040F8E1 5D                      pop ebp
:0040F8E2 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040EB90   , :0040EBCC   , :0040EF01   , :0042FBD2   , :0042FBF2   
|:0045A522   , :0045A542   
|
:0040F8E5 55                      push ebp
:0040F8E6 8BEC                    mov ebp, esp
:0040F8E8 51                      push ecx
:0040F8E9 894DFC                  mov dword ptr [ebp-04], ecx
:0040F8EC 8B4510                  mov eax, dword ptr [ebp+10]
:0040F8EF 50                      push eax
:0040F8F0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040F8F3 51                      push ecx
:0040F8F4 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F8F7 8B421C                  mov eax, dword ptr [edx+1C]
:0040F8FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F8FD 8B1488                  mov edx, dword ptr [eax+4*ecx]
:0040F900 52                      push edx
:0040F901 E8CAE00500              call 0046D9D0
:0040F906 83C40C                  add esp, 0000000C
:0040F909 8BE5                    mov esp, ebp
:0040F90B 5D                      pop ebp
:0040F90C C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040EAA6   , :0040EB3C   , :0040ED15   , :0040EF09   
|
:0040F90F 55                      push ebp
:0040F910 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040F912 6AFF                    push FFFFFFFF
:0040F914 6839384700              push 00473839
:0040F919 64A100000000            mov eax, dword ptr fs:[00000000]
:0040F91F 50                      push eax
:0040F920 64892500000000          mov dword ptr fs:[00000000], esp
:0040F927 83EC34                  sub esp, 00000034
:0040F92A 894DC0                  mov dword ptr [ebp-40], ecx
:0040F92D 8B45C0                  mov eax, dword ptr [ebp-40]
:0040F930 33C9                    xor ecx, ecx
:0040F932 668B4810                mov cx, word ptr [eax+10]
:0040F936 81F9FFFF0000            cmp ecx, 0000FFFF
:0040F93C 7429                    je 0040F967
:0040F93E 8B55C0                  mov edx, dword ptr [ebp-40]
:0040F941 8B02                    mov eax, dword ptr [edx]
:0040F943 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F946 FF500C                  call [eax+0C]
:0040F949 85C0                    test eax, eax
:0040F94B 7407                    je 0040F954
:0040F94D 33C0                    xor eax, eax
:0040F94F E948010000              jmp 0040FA9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F94B(C)
|
:0040F954 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F957 66C74110FFFF            mov [ecx+10], FFFF
:0040F95D B801000000              mov eax, 00000001
:0040F962 E935010000              jmp 0040FA9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F93C(C)
|
:0040F967 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F96A E861FAFFFF              call 0040F3D0
:0040F96F 85C0                    test eax, eax
:0040F971 7507                    jne 0040F97A
:0040F973 33C0                    xor eax, eax
:0040F975 E922010000              jmp 0040FA9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F971(C)
|
:0040F97A 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F97D E8CE070000              call 00410150
:0040F982 85C0                    test eax, eax
:0040F984 7407                    je 0040F98D
:0040F986 33C0                    xor eax, eax
:0040F988 E90F010000              jmp 0040FA9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F984(C)
|
:0040F98D 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F990 E8C3FAFFFF              call 0040F458
:0040F995 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F998 E825FCFFFF              call 0040F5C2
:0040F99D 25FFFF0000              and eax, 0000FFFF
:0040F9A2 8B55C0                  mov edx, dword ptr [ebp-40]
:0040F9A5 894224                  mov dword ptr [edx+24], eax
:0040F9A8 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040F9AB E8D0F6FFFF              call 0040F080
:0040F9B0 C745FC00000000          mov [ebp-04], 00000000
:0040F9B7 C745DC00000000          mov [ebp-24], 00000000
:0040F9BE EB09                    jmp 0040F9C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA4B(U)
|
:0040F9C0 8B45DC                  mov eax, dword ptr [ebp-24]
:0040F9C3 83C001                  add eax, 00000001
:0040F9C6 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F9BE(U)
|
:0040F9C9 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F9CC 8B55DC                  mov edx, dword ptr [ebp-24]
:0040F9CF 3B5124                  cmp edx, dword ptr [ecx+24]
:0040F9D2 7D7C                    jge 0040FA50
:0040F9D4 8B45DC                  mov eax, dword ptr [ebp-24]
:0040F9D7 50                      push eax
:0040F9D8 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F9DB E8A9FAFFFF              call 0040F489
:0040F9E0 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F9E3 83793400                cmp dword ptr [ecx+34], 00000000
:0040F9E7 740C                    je 0040F9F5
:0040F9E9 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F9EC E8D1FBFFFF              call 0040F5C2
:0040F9F1 668945D8                mov word ptr [ebp-28], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F9E7(C)
|
:0040F9F5 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040F9F8 E8C5FBFFFF              call 0040F5C2
:0040F9FD 668945D0                mov word ptr [ebp-30], ax
:0040FA01 C745D401000000          mov [ebp-2C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA37(C)
|
:0040FA08 8B55C0                  mov edx, dword ptr [ebp-40]
:0040FA0B 8B02                    mov eax, dword ptr [edx]
:0040FA0D 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040FA10 FF5008                  call [eax+08]
:0040FA13 8945CC                  mov dword ptr [ebp-34], eax
:0040FA16 837DCC01                cmp dword ptr [ebp-34], 00000001
:0040FA1A 7406                    je 0040FA22
:0040FA1C 837DCC00                cmp dword ptr [ebp-34], 00000000
:0040FA20 7511                    jne 0040FA33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA1A(C)
|
:0040FA22 33C9                    xor ecx, ecx
:0040FA24 837DCC01                cmp dword ptr [ebp-34], 00000001
:0040FA28 0F94C1                  sete cl
:0040FA2B 8B55D4                  mov edx, dword ptr [ebp-2C]
:0040FA2E 23D1                    and edx, ecx
:0040FA30 8955D4                  mov dword ptr [ebp-2C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA20(C)
|
:0040FA33 837DCC03                cmp dword ptr [ebp-34], 00000003
:0040FA37 75CF                    jne 0040FA08
:0040FA39 837DD400                cmp dword ptr [ebp-2C], 00000000
:0040FA3D 740C                    je 0040FA4B
:0040FA3F 8D45E0                  lea eax, dword ptr [ebp-20]
:0040FA42 50                      push eax
:0040FA43 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040FA46 E8FBFAFFFF              call 0040F546

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA3D(C)
|
:0040FA4B E970FFFFFF              jmp 0040F9C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F9D2(C)
|
:0040FA50 837DE000                cmp dword ptr [ebp-20], 00000000
:0040FA54 7C2D                    jl 0040FA83
:0040FA56 837DE400                cmp dword ptr [ebp-1C], 00000000
:0040FA5A 7C27                    jl 0040FA83
:0040FA5C 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040FA5F 51                      push ecx
:0040FA60 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040FA63 E892FAFFFF              call 0040F4FA
:0040FA68 C745C801000000          mov [ebp-38], 00000001
:0040FA6F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040FA76 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040FA79 E822620100              call 00425CA0
:0040FA7E 8B45C8                  mov eax, dword ptr [ebp-38]
:0040FA81 EB19                    jmp 0040FA9C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FA54(C), :0040FA5A(C)
|
:0040FA83 C745C400000000          mov [ebp-3C], 00000000
:0040FA8A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040FA91 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040FA94 E807620100              call 00425CA0
:0040FA99 8B45C4                  mov eax, dword ptr [ebp-3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F94F(U), :0040F962(U), :0040F975(U), :0040F988(U), :0040FA81(U)
|
:0040FA9C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040FA9F 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040FAA6 8BE5                    mov esp, ebp
:0040FAA8 5D                      pop ebp
:0040FAA9 C3                      ret



* Referenced by a CALL at Addresses:
|:004266CE   , :00426713   
|
:0040FAAA 55                      push ebp
:0040FAAB 8BEC                    mov ebp, esp
:0040FAAD 51                      push ecx
:0040FAAE 894DFC                  mov dword ptr [ebp-04], ecx
:0040FAB1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FAB4 C7400400000000          mov [eax+04], 00000000
:0040FABB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FABE C7410800000000          mov [ecx+08], 00000000
:0040FAC5 8B55FC                  mov edx, dword ptr [ebp-04]
:0040FAC8 66C74210FFFF            mov [edx+10], FFFF
:0040FACE 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FAD1 C74014FFFFFFFF          mov [eax+14], FFFFFFFF
:0040FAD8 B801000000              mov eax, 00000001
:0040FADD 8BE5                    mov esp, ebp
:0040FADF 5D                      pop ebp
:0040FAE0 C3                      ret



* Referenced by a CALL at Address:
|:0040EA71   
|
:0040FAE1 55                      push ebp
:0040FAE2 8BEC                    mov ebp, esp
:0040FAE4 83EC24                  sub esp, 00000024
:0040FAE7 894DE0                  mov dword ptr [ebp-20], ecx
:0040FAEA 8B45E0                  mov eax, dword ptr [ebp-20]
:0040FAED 83782000                cmp dword ptr [eax+20], 00000000
:0040FAF1 7415                    je 0040FB08
:0040FAF3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040FAF6 8B5120                  mov edx, dword ptr [ecx+20]
:0040FAF9 8955E4                  mov dword ptr [ebp-1C], edx
:0040FAFC 8B45E4                  mov eax, dword ptr [ebp-1C]
:0040FAFF 50                      push eax
:0040FB00 E81BDE0500              call 0046D920
:0040FB05 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FAF1(C)
|
:0040FB08 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040FB0B C7413400000000          mov [ecx+34], 00000000
:0040FB12 8B5508                  mov edx, dword ptr [ebp+08]
:0040FB15 8955FC                  mov dword ptr [ebp-04], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040FB18 6A04                    push 00000004

* Possible StringData Ref from Data Obj ->"EEX"
                                  |
:0040FB1A 6864644700              push 00476464
:0040FB1F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FB22 50                      push eax
:0040FB23 E8E8E10500              call 0046DD10
:0040FB28 83C40C                  add esp, 0000000C
:0040FB2B 85C0                    test eax, eax
:0040FB2D 7407                    je 0040FB36
:0040FB2F 33C0                    xor eax, eax
:0040FB31 E9CF010000              jmp 0040FD05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FB2D(C)
|
:0040FB36 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FB39 33D2                    xor edx, edx
:0040FB3B 8A5104                  mov dl, byte ptr [ecx+04]
:0040FB3E 83FA01                  cmp edx, 00000001
:0040FB41 7E07                    jle 0040FB4A
:0040FB43 33C0                    xor eax, eax
:0040FB45 E9BB010000              jmp 0040FD05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FB41(C)
|
:0040FB4A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FB4D 33C9                    xor ecx, ecx
:0040FB4F 8A4804                  mov cl, byte ptr [eax+04]
:0040FB52 83F901                  cmp ecx, 00000001
:0040FB55 7514                    jne 0040FB6B
:0040FB57 8B55FC                  mov edx, dword ptr [ebp-04]
:0040FB5A 33C0                    xor eax, eax
:0040FB5C 8A4205                  mov al, byte ptr [edx+05]
:0040FB5F 83F802                  cmp eax, 00000002
:0040FB62 7E07                    jle 0040FB6B
:0040FB64 33C0                    xor eax, eax
:0040FB66 E99A010000              jmp 0040FD05

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FB55(C), :0040FB62(C)
|
:0040FB6B 8B4DE0                  mov ecx, dword ptr [ebp-20]

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040FB6E C7413006000000          mov [ecx+30], 00000006
:0040FB75 8B55FC                  mov edx, dword ptr [ebp-04]
:0040FB78 33C0                    xor eax, eax
:0040FB7A 8A4204                  mov al, byte ptr [edx+04]
:0040FB7D 83F801                  cmp eax, 00000001
:0040FB80 7F11                    jg 0040FB93
:0040FB82 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FB85 33D2                    xor edx, edx
:0040FB87 8A5105                  mov dl, byte ptr [ecx+05]
:0040FB8A 83FA01                  cmp edx, 00000001
:0040FB8D 0F8C07010000            jl 0040FC9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FB80(C)
|
:0040FB93 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FB96 83C006                  add eax, 00000006
:0040FB99 8945F8                  mov dword ptr [ebp-08], eax
:0040FB9C C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC87(U)
|
:0040FBA3 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040FBA7 0F85DF000000            jne 0040FC8C
:0040FBAD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FBB0 660FB611                movzx dx, byte ptr [ecx]
:0040FBB4 668955F0                mov word ptr [ebp-10], dx
:0040FBB8 8B45F8                  mov eax, dword ptr [ebp-08]
:0040FBBB 83C001                  add eax, 00000001
:0040FBBE 8945F8                  mov dword ptr [ebp-08], eax
:0040FBC1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FBC4 33D2                    xor edx, edx
:0040FBC6 8A11                    mov dl, byte ptr [ecx]
:0040FBC8 C1E208                  shl edx, 08
:0040FBCB 668B45F0                mov ax, word ptr [ebp-10]
:0040FBCF 660BC2                  or ax, dx
:0040FBD2 668945F0                mov word ptr [ebp-10], ax
:0040FBD6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FBD9 83C101                  add ecx, 00000001
:0040FBDC 894DF8                  mov dword ptr [ebp-08], ecx
:0040FBDF 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FBE2 660FB602                movzx ax, byte ptr [edx]
:0040FBE6 668945E8                mov word ptr [ebp-18], ax
:0040FBEA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FBED 83C101                  add ecx, 00000001
:0040FBF0 894DF8                  mov dword ptr [ebp-08], ecx
:0040FBF3 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FBF6 33C0                    xor eax, eax
:0040FBF8 8A02                    mov al, byte ptr [edx]
:0040FBFA C1E008                  shl eax, 08
:0040FBFD 668B4DE8                mov cx, word ptr [ebp-18]
:0040FC01 660BC8                  or cx, ax
:0040FC04 66894DE8                mov word ptr [ebp-18], cx
:0040FC08 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FC0B 83C201                  add edx, 00000001
:0040FC0E 8955F8                  mov dword ptr [ebp-08], edx
:0040FC11 8B45E8                  mov eax, dword ptr [ebp-18]
:0040FC14 25FFFF0000              and eax, 0000FFFF
:0040FC19 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FC1C 03C8                    add ecx, eax
:0040FC1E 894DEC                  mov dword ptr [ebp-14], ecx
:0040FC21 8B55F0                  mov edx, dword ptr [ebp-10]
:0040FC24 81E2FFFF0000            and edx, 0000FFFF
:0040FC2A 8955DC                  mov dword ptr [ebp-24], edx
:0040FC2D 837DDC00                cmp dword ptr [ebp-24], 00000000
:0040FC31 7408                    je 0040FC3B
:0040FC33 837DDC01                cmp dword ptr [ebp-24], 00000001
:0040FC37 740B                    je 0040FC44
:0040FC39 EB46                    jmp 0040FC81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC31(C)
|
:0040FC3B C745F401000000          mov [ebp-0C], 00000001
:0040FC42 EB3D                    jmp 0040FC81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC37(C)
|
:0040FC44 833DE44A480000          cmp dword ptr [00484AE4], 00000000
:0040FC4B 742A                    je 0040FC77
:0040FC4D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0040FC4F 6AFF                    push FFFFFFFF
:0040FC51 6850400000              push 00004050
:0040FC56 6A00                    push 00000000
:0040FC58 6A00                    push 00000000
:0040FC5A A1E44A4800              mov eax, dword ptr [00484AE4]
:0040FC5F 50                      push eax
:0040FC60 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FC63 51                      push ecx

* Reference To: KERNEL32.lstrlenA, Ord:02A1h
                                  |
:0040FC64 FF1560854B00            Call dword ptr [004B8560]
:0040FC6A 83C001                  add eax, 00000001
:0040FC6D 50                      push eax
:0040FC6E 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FC71 52                      push edx

* Reference To: USER32.DdeClientTransaction, Ord:005Ch
                                  |
:0040FC72 E81BA70500              Call 0046A392

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC4B(C)
|
:0040FC77 8B45E0                  mov eax, dword ptr [ebp-20]
:0040FC7A C7403401000000          mov [eax+34], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FC39(U), :0040FC42(U)
|
:0040FC81 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040FC84 894DF8                  mov dword ptr [ebp-08], ecx
:0040FC87 E917FFFFFF              jmp 0040FBA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FBA7(C)
|
:0040FC8C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FC8F 2B5508                  sub edx, dword ptr [ebp+08]
:0040FC92 8B45E0                  mov eax, dword ptr [ebp-20]
:0040FC95 895030                  mov dword ptr [eax+30], edx
:0040FC98 EB0A                    jmp 0040FCA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FB8D(C)
|
:0040FC9A 8B4DE0                  mov ecx, dword ptr [ebp-20]

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0040FC9D C7413010000000          mov [ecx+30], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC98(U)
|
:0040FCA4 8B550C                  mov edx, dword ptr [ebp+0C]
:0040FCA7 52                      push edx
:0040FCA8 E813DD0500              call 0046D9C0
:0040FCAD 83C404                  add esp, 00000004
:0040FCB0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040FCB3 894120                  mov dword ptr [ecx+20], eax
:0040FCB6 8B55E0                  mov edx, dword ptr [ebp-20]
:0040FCB9 837A2000                cmp dword ptr [edx+20], 00000000
:0040FCBD 7504                    jne 0040FCC3
:0040FCBF 33C0                    xor eax, eax
:0040FCC1 EB42                    jmp 0040FD05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FCBD(C)
|
:0040FCC3 8B450C                  mov eax, dword ptr [ebp+0C]
:0040FCC6 50                      push eax
:0040FCC7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FCCA 51                      push ecx
:0040FCCB 8B55E0                  mov edx, dword ptr [ebp-20]
:0040FCCE 8B4220                  mov eax, dword ptr [edx+20]
:0040FCD1 50                      push eax
:0040FCD2 E8F9DC0500              call 0046D9D0
:0040FCD7 83C40C                  add esp, 0000000C
:0040FCDA 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040FCDD E84EF7FFFF              call 0040F430
:0040FCE2 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040FCE5 8B5120                  mov edx, dword ptr [ecx+20]
:0040FCE8 03D0                    add edx, eax
:0040FCEA 8B45E0                  mov eax, dword ptr [ebp-20]
:0040FCED 035008                  add edx, dword ptr [eax+08]
:0040FCF0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040FCF3 89510C                  mov dword ptr [ecx+0C], edx
:0040FCF6 8B55E0                  mov edx, dword ptr [ebp-20]
:0040FCF9 C7422801000000          mov [edx+28], 00000001
:0040FD00 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FB31(U), :0040FB45(U), :0040FB66(U), :0040FCC1(U)
|
:0040FD05 8BE5                    mov esp, ebp
:0040FD07 5D                      pop ebp
:0040FD08 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040E8EB   
|
:0040FD0B 55                      push ebp
:0040FD0C 8BEC                    mov ebp, esp
:0040FD0E 83EC08                  sub esp, 00000008
:0040FD11 894DF8                  mov dword ptr [ebp-08], ecx
:0040FD14 837D0800                cmp dword ptr [ebp+08], 00000000
:0040FD18 7507                    jne 0040FD21

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0040FD1A B800040000              mov eax, 00000400
:0040FD1F EB64                    jmp 0040FD85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FD18(C)
|
:0040FD21 8B4508                  mov eax, dword ptr [ebp+08]
:0040FD24 8945FC                  mov dword ptr [ebp-04], eax
:0040FD27 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FD2A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FD2D 668B4204                mov ax, word ptr [edx+04]
:0040FD31 668901                  mov word ptr [ecx], ax
:0040FD34 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FD37 83C102                  add ecx, 00000002
:0040FD3A 894D08                  mov dword ptr [ebp+08], ecx
:0040FD3D 8B5508                  mov edx, dword ptr [ebp+08]
:0040FD40 8B45F8                  mov eax, dword ptr [ebp-08]
:0040FD43 668B4808                mov cx, word ptr [eax+08]
:0040FD47 66890A                  mov word ptr [edx], cx
:0040FD4A 8B5508                  mov edx, dword ptr [ebp+08]
:0040FD4D 83C202                  add edx, 00000002
:0040FD50 895508                  mov dword ptr [ebp+08], edx
:0040FD53 8B4508                  mov eax, dword ptr [ebp+08]
:0040FD56 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FD59 668B5110                mov dx, word ptr [ecx+10]
:0040FD5D 668910                  mov word ptr [eax], dx
:0040FD60 8B4508                  mov eax, dword ptr [ebp+08]
:0040FD63 83C002                  add eax, 00000002
:0040FD66 894508                  mov dword ptr [ebp+08], eax
:0040FD69 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FD6C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FD6F 668B4214                mov ax, word ptr [edx+14]
:0040FD73 668901                  mov word ptr [ecx], ax
:0040FD76 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FD79 83C102                  add ecx, 00000002
:0040FD7C 894D08                  mov dword ptr [ebp+08], ecx
:0040FD7F 8B4508                  mov eax, dword ptr [ebp+08]
:0040FD82 2B45FC                  sub eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FD1F(U)
|
:0040FD85 8BE5                    mov esp, ebp
:0040FD87 5D                      pop ebp
:0040FD88 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040E6CC   
|
:0040FD8B 55                      push ebp
:0040FD8C 8BEC                    mov ebp, esp
:0040FD8E 83EC08                  sub esp, 00000008
:0040FD91 894DF8                  mov dword ptr [ebp-08], ecx
:0040FD94 837D0800                cmp dword ptr [ebp+08], 00000000
:0040FD98 7507                    jne 0040FDA1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0040FD9A B800040000              mov eax, 00000400
:0040FD9F EB61                    jmp 0040FE02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FD98(C)
|
:0040FDA1 8B4508                  mov eax, dword ptr [ebp+08]
:0040FDA4 8945FC                  mov dword ptr [ebp-04], eax
:0040FDA7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FDAA 0FBF11                  movsx edx, word ptr [ecx]
:0040FDAD 8B45F8                  mov eax, dword ptr [ebp-08]
:0040FDB0 895004                  mov dword ptr [eax+04], edx
:0040FDB3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FDB6 83C102                  add ecx, 00000002
:0040FDB9 894D08                  mov dword ptr [ebp+08], ecx
:0040FDBC 8B5508                  mov edx, dword ptr [ebp+08]
:0040FDBF 0FBF02                  movsx eax, word ptr [edx]
:0040FDC2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FDC5 894108                  mov dword ptr [ecx+08], eax
:0040FDC8 8B5508                  mov edx, dword ptr [ebp+08]
:0040FDCB 83C202                  add edx, 00000002
:0040FDCE 895508                  mov dword ptr [ebp+08], edx
:0040FDD1 8B45F8                  mov eax, dword ptr [ebp-08]
:0040FDD4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FDD7 668B11                  mov dx, word ptr [ecx]
:0040FDDA 66895010                mov word ptr [eax+10], dx
:0040FDDE 8B4508                  mov eax, dword ptr [ebp+08]
:0040FDE1 83C002                  add eax, 00000002
:0040FDE4 894508                  mov dword ptr [ebp+08], eax
:0040FDE7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FDEA 0FBF11                  movsx edx, word ptr [ecx]
:0040FDED 8B45F8                  mov eax, dword ptr [ebp-08]
:0040FDF0 895014                  mov dword ptr [eax+14], edx
:0040FDF3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FDF6 83C102                  add ecx, 00000002
:0040FDF9 894D08                  mov dword ptr [ebp+08], ecx
:0040FDFC 8B4508                  mov eax, dword ptr [ebp+08]
:0040FDFF 2B45FC                  sub eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FD9F(U)
|
:0040FE02 8BE5                    mov esp, ebp
:0040FE04 5D                      pop ebp
:0040FE05 C20400                  ret 0004


:0040FE08 55                      push ebp
:0040FE09 8BEC                    mov ebp, esp
:0040FE0B 51                      push ecx
:0040FE0C 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040FE0F B805000000              mov eax, 00000005
:0040FE14 8BE5                    mov esp, ebp
:0040FE16 5D                      pop ebp
:0040FE17 C3                      ret



* Referenced by a CALL at Address:
|:00410107   
|
:0040FE18 55                      push ebp
:0040FE19 8BEC                    mov ebp, esp
:0040FE1B 83EC28                  sub esp, 00000028
:0040FE1E 894DE8                  mov dword ptr [ebp-18], ecx
:0040FE21 C745F801000000          mov [ebp-08], 00000001
:0040FE28 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040FE2F C745FC03000000          mov [ebp-04], 00000003
:0040FE36 8B45E8                  mov eax, dword ptr [ebp-18]
:0040FE39 8B4814                  mov ecx, dword ptr [eax+14]
:0040FE3C 3B4D08                  cmp ecx, dword ptr [ebp+08]
:0040FE3F 7E0C                    jle 0040FE4D
:0040FE41 C745FC01000000          mov [ebp-04], 00000001
:0040FE48 E9FF010000              jmp 0041004C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FE3F(C)
|
:0040FE4D 8B55E8                  mov edx, dword ptr [ebp-18]
:0040FE50 C74214FFFFFFFF          mov [edx+14], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FFC7(C)
|
:0040FE57 8B45E8                  mov eax, dword ptr [ebp-18]
:0040FE5A 83783400                cmp dword ptr [eax+34], 00000000
:0040FE5E 740C                    je 0040FE6C
:0040FE60 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FE63 E85AF7FFFF              call 0040F5C2
:0040FE68 668945EC                mov word ptr [ebp-14], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FE5E(C)
|
:0040FE6C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FE6F 8B11                    mov edx, dword ptr [ecx]
:0040FE71 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FE74 FF5210                  call [edx+10]
:0040FE77 668945F4                mov word ptr [ebp-0C], ax
:0040FE7B 8B45E8                  mov eax, dword ptr [ebp-18]
:0040FE7E 8B10                    mov edx, dword ptr [eax]
:0040FE80 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FE83 FF5208                  call [edx+08]
:0040FE86 8945FC                  mov dword ptr [ebp-04], eax
:0040FE89 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FE8C 8945E4                  mov dword ptr [ebp-1C], eax
:0040FE8F 837DE408                cmp dword ptr [ebp-1C], 00000008
:0040FE93 0F8720010000            ja 0040FFB9
:0040FE99 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040FE9C FF248D57004100          jmp dword ptr [4*ecx+00410057]
:0040FEA3 E91B010000              jmp 0040FFC3
:0040FEA8 E916010000              jmp 0040FFC3
:0040FEAD 8B55E8                  mov edx, dword ptr [ebp-18]
:0040FEB0 668B45F4                mov ax, word ptr [ebp-0C]
:0040FEB4 66894210                mov word ptr [edx+10], ax
:0040FEB8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FEBB 8B5508                  mov edx, dword ptr [ebp+08]
:0040FEBE 895114                  mov dword ptr [ecx+14], edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040FEC1 B802000000              mov eax, 00000002
:0040FEC6 E986010000              jmp 00410051
:0040FECB E9F3000000              jmp 0040FFC3
:0040FED0 8B45E8                  mov eax, dword ptr [ebp-18]
:0040FED3 8B10                    mov edx, dword ptr [eax]
:0040FED5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FED8 FF5208                  call [edx+08]
:0040FEDB 8945FC                  mov dword ptr [ebp-04], eax
:0040FEDE 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FEE1 8945E0                  mov dword ptr [ebp-20], eax
:0040FEE4 837DE000                cmp dword ptr [ebp-20], 00000000
:0040FEE8 740E                    je 0040FEF8
:0040FEEA 837DE001                cmp dword ptr [ebp-20], 00000001
:0040FEEE 7411                    je 0040FF01
:0040FEF0 837DE005                cmp dword ptr [ebp-20], 00000005
:0040FEF4 7414                    je 0040FF0A
:0040FEF6 EB1C                    jmp 0040FF14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FEE8(C)
|
:0040FEF8 C745F800000000          mov [ebp-08], 00000000
:0040FEFF EB13                    jmp 0040FF14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FEEE(C)
|
:0040FF01 C745F801000000          mov [ebp-08], 00000001
:0040FF08 EB0A                    jmp 0040FF14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FEF4(C)
|
:0040FF0A B801000000              mov eax, 00000001
:0040FF0F E93D010000              jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FEF6(U), :0040FEFF(U), :0040FF08(U), :0041004C(U)
|
:0040FF14 837DFC06                cmp dword ptr [ebp-04], 00000006
:0040FF18 7506                    jne 0040FF20
:0040FF1A 837DF800                cmp dword ptr [ebp-08], 00000000
:0040FF1E 740F                    je 0040FF2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FF18(C)
|
:0040FF20 837DFC01                cmp dword ptr [ebp-04], 00000001
:0040FF24 7409                    je 0040FF2F
:0040FF26 C745DC00000000          mov [ebp-24], 00000000
:0040FF2D EB07                    jmp 0040FF36

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FF1E(C), :0040FF24(C)
|
:0040FF2F C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FF2D(U)
|
:0040FF36 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FF39 83C101                  add ecx, 00000001
:0040FF3C 51                      push ecx
:0040FF3D 8B55DC                  mov edx, dword ptr [ebp-24]
:0040FF40 52                      push edx
:0040FF41 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FF44 E84A010000              call 00410093
:0040FF49 8945D8                  mov dword ptr [ebp-28], eax
:0040FF4C 837DD805                cmp dword ptr [ebp-28], 00000005
:0040FF50 773E                    ja 0040FF90
:0040FF52 8B45D8                  mov eax, dword ptr [ebp-28]
:0040FF55 FF24857B004100          jmp dword ptr [4*eax+0041007B]
:0040FF5C EB3C                    jmp 0040FF9A
:0040FF5E B801000000              mov eax, 00000001
:0040FF63 E9E9000000              jmp 00410051

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0040FF68 B802000000              mov eax, 00000002
:0040FF6D E9DF000000              jmp 00410051

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0040FF72 B803000000              mov eax, 00000003
:0040FF77 E9D5000000              jmp 00410051

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040FF7C B804000000              mov eax, 00000004
:0040FF81 E9CB000000              jmp 00410051

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040FF86 B805000000              mov eax, 00000005
:0040FF8B E9C1000000              jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FF50(C)
|
:0040FF90 B801000000              mov eax, 00000001
:0040FF95 E9B7000000              jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FF5C(U)
|
:0040FF9A EB27                    jmp 0040FFC3
:0040FF9C C745F001000000          mov [ebp-10], 00000001
:0040FFA3 EB1E                    jmp 0040FFC3
:0040FFA5 B801000000              mov eax, 00000001
:0040FFAA E9A2000000              jmp 00410051

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040FFAF B805000000              mov eax, 00000005
:0040FFB4 E998000000              jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FE93(C)
|
:0040FFB9 B801000000              mov eax, 00000001
:0040FFBE E98E000000              jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FEA3(U), :0040FEA8(U), :0040FECB(U), :0040FF9A(U), :0040FFA3(U)
|
:0040FFC3 837DFC03                cmp dword ptr [ebp-04], 00000003
:0040FFC7 0F858AFEFFFF            jne 0040FE57
:0040FFCD 837DF000                cmp dword ptr [ebp-10], 00000000
:0040FFD1 7513                    jne 0040FFE6
:0040FFD3 837D0800                cmp dword ptr [ebp+08], 00000000
:0040FFD7 754E                    jne 00410027
:0040FFD9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FFDC E84F680000              call 00416830
:0040FFE1 83F801                  cmp eax, 00000001
:0040FFE4 7541                    jne 00410027

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FFD1(C)
|
:0040FFE6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FFE9 8B5104                  mov edx, dword ptr [ecx+04]
:0040FFEC 83C201                  add edx, 00000001
:0040FFEF 8B45E8                  mov eax, dword ptr [ebp-18]
:0040FFF2 895004                  mov dword ptr [eax+04], edx
:0040FFF5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040FFF8 C7410800000000          mov [ecx+08], 00000000
:0040FFFF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00410002 E860F5FFFF              call 0040F567
:00410007 8B55E8                  mov edx, dword ptr [ebp-18]
:0041000A 394204                  cmp dword ptr [edx+04], eax
:0041000D 7C11                    jl 00410020
:0041000F 8B45E8                  mov eax, dword ptr [ebp-18]
:00410012 C7402800000000          mov [eax+28], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00410019 B804000000              mov eax, 00000004
:0041001E EB31                    jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041000D(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00410020 B803000000              mov eax, 00000003
:00410025 EB2A                    jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FFD7(C), :0040FFE4(C)
|
:00410027 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041002A E838F5FFFF              call 0040F567
:0041002F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00410032 394104                  cmp dword ptr [ecx+04], eax
:00410035 7C11                    jl 00410048
:00410037 8B55E8                  mov edx, dword ptr [ebp-18]
:0041003A C7422800000000          mov [edx+28], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00410041 B804000000              mov eax, 00000004
:00410046 EB09                    jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410035(C)
|
:00410048 33C0                    xor eax, eax
:0041004A EB05                    jmp 00410051

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FE48(U)
|
:0041004C E9C3FEFFFF              jmp 0040FF14

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FEC6(U), :0040FF0F(U), :0040FF63(U), :0040FF6D(U), :0040FF77(U)
|:0040FF81(U), :0040FF8B(U), :0040FF95(U), :0040FFAA(U), :0040FFB4(U)
|:0040FFBE(U), :0041001E(U), :00410025(U), :00410046(U), :0041004A(U)
|
:00410051 8BE5                    mov esp, ebp
:00410053 5D                      pop ebp
:00410054 C20400                  ret 0004



:00410057 A3FE4000                DWORD 0040FEA3
:0041005B A8FE                    test al, FE
:0041005D 40                      inc eax
:0041005E 00ADFE4000CB            add byte ptr [ebp+CB0040FE], ch
:00410064 FE4000                  inc [eax+00]
:00410067 D0FE                    sar dh, 1
:00410069 40                      inc eax
:0041006A 00A5FF4000B9            add byte ptr [ebp+B90040FF], ah
:00410070 FF4000                  inc [eax+00]
:00410073 9C                      pushfd
:00410074 FF4000                  inc [eax+00]
:00410077 AF                      scasd
:00410078 FF4000                  inc [eax+00]

:0041007B 5CFF4000                DWORD 0040FF5C
:0041007F 5E                      pop esi
:00410080 FF4000                  inc [eax+00]
:00410083 68FF400072              push 720040FF
:00410088 FF4000                  inc [eax+00]
:0041008B 7CFF                    jl 0041008C
:0041008D 40                      inc eax
:0041008E 00                      BYTE 00h
:0041008F 86                      BYTE 86h
:00410090 FF                      BYTE ffh
:00410091 40                      BYTE 40h
:00410092 00                      BYTE 00h


* Referenced by a CALL at Addresses:
|:0040EAB6   , :0040EAF9   , :0040ED25   , :0040ED68   , :0040FF44   
|
:00410093 55                      push ebp
:00410094 8BEC                    mov ebp, esp
:00410096 83EC0C                  sub esp, 0000000C
:00410099 894DF4                  mov dword ptr [ebp-0C], ecx
:0041009C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041009F E82CF3FFFF              call 0040F3D0
:004100A4 85C0                    test eax, eax
:004100A6 7507                    jne 004100AF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004100A8 B804000000              mov eax, 00000004
:004100AD EB79                    jmp 00410128

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004100A6(C)
|
:004100AF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004100B2 83781400                cmp dword ptr [eax+14], 00000000
:004100B6 7D48                    jge 00410100
:004100B8 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004100BC 750A                    jne 004100C8
:004100BE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004100C1 C7412C01000000          mov [ecx+2C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004100BC(C)
|
:004100C8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004100CB E8F2F4FFFF              call 0040F5C2
:004100D0 668945F8                mov word ptr [ebp-08], ax
:004100D4 837D0800                cmp dword ptr [ebp+08], 00000000
:004100D8 7526                    jne 00410100
:004100DA 8B55F8                  mov edx, dword ptr [ebp-08]
:004100DD 81E2FFFF0000            and edx, 0000FFFF
:004100E3 52                      push edx
:004100E4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004100E7 E82FF4FFFF              call 0040F51B
:004100EC 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004100F0 750A                    jne 004100FC
:004100F2 8B45F4                  mov eax, dword ptr [ebp-0C]
:004100F5 C7402C00000000          mov [eax+2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004100F0(C)
|
:004100FC 33C0                    xor eax, eax
:004100FE EB28                    jmp 00410128

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004100B6(C), :004100D8(C)
|
:00410100 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00410103 51                      push ecx
:00410104 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00410107 E80CFDFFFF              call 0040FE18
:0041010C 8945FC                  mov dword ptr [ebp-04], eax
:0041010F 837DFC02                cmp dword ptr [ebp-04], 00000002
:00410113 7410                    je 00410125
:00410115 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00410119 750A                    jne 00410125
:0041011B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041011E C7422C00000000          mov [edx+2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410113(C), :00410119(C)
|
:00410125 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004100AD(U), :004100FE(U)
|
:00410128 8BE5                    mov esp, ebp
:0041012A 5D                      pop ebp
:0041012B C20800                  ret 0008


:0041012E 55                      push ebp
:0041012F 8BEC                    mov ebp, esp
:00410131 51                      push ecx
:00410132 894DFC                  mov dword ptr [ebp-04], ecx
:00410135 B801000000              mov eax, 00000001
:0041013A 8BE5                    mov esp, ebp
:0041013C 5D                      pop ebp
:0041013D C20400                  ret 0004


:00410140 55                      push ebp
:00410141 8BEC                    mov ebp, esp
:00410143 51                      push ecx
:00410144 894DFC                  mov dword ptr [ebp-04], ecx
:00410147 B801000000              mov eax, 00000001
:0041014C 8BE5                    mov esp, ebp
:0041014E 5D                      pop ebp
:0041014F C3                      ret



* Referenced by a CALL at Address:
|:0040F97D   
|
:00410150 55                      push ebp
:00410151 8BEC                    mov ebp, esp
:00410153 51                      push ecx
:00410154 894DFC                  mov dword ptr [ebp-04], ecx
:00410157 8B45FC                  mov eax, dword ptr [ebp-04]
:0041015A 8B402C                  mov eax, dword ptr [eax+2C]
:0041015D 8BE5                    mov esp, ebp
:0041015F 5D                      pop ebp
:00410160 C3                      ret


:00410161 CC                      int 03
:00410162 CC                      int 03
:00410163 CC                      int 03
:00410164 CC                      int 03
:00410165 CC                      int 03
:00410166 CC                      int 03
:00410167 CC                      int 03
:00410168 CC                      int 03
:00410169 CC                      int 03
:0041016A CC                      int 03
:0041016B CC                      int 03
:0041016C CC                      int 03
:0041016D CC                      int 03
:0041016E CC                      int 03
:0041016F CC                      int 03

* Referenced by a CALL at Addresses:
|:004101DA   , :00410232   
|
:00410170 55                      push ebp
:00410171 8BEC                    mov ebp, esp
:00410173 837D0800                cmp dword ptr [ebp+08], 00000000
:00410177 7423                    je 0041019C
:00410179 8B4508                  mov eax, dword ptr [ebp+08]
:0041017C 50                      push eax
:0041017D 68E84A4800              push 00484AE8
:00410182 E839DC0500              call 0046DDC0
:00410187 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->"\"
                                  |
:0041018A 6870644700              push 00476470
:0041018F 68E84A4800              push 00484AE8
:00410194 E837DC0500              call 0046DDD0
:00410199 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410177(C)
|
:0041019C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041019F 51                      push ecx
:004101A0 68E84A4800              push 00484AE8
:004101A5 E826DC0500              call 0046DDD0
:004101AA 83C408                  add esp, 00000008
:004101AD B8E84A4800              mov eax, 00484AE8
:004101B2 5D                      pop ebp
:004101B3 C3                      ret



* Referenced by a CALL at Addresses:
|:00404D74   , :00404F93   , :00404FBE   , :004053AD   , :004053D8   
|:004073B9   , :00410318   , :00410715   , :0041075D   , :00411226   
|:004119CA   , :0041FE99   , :0041FEB3   , :0045313C   , :00461D41   
|:00461D74   , :00463979   , :00463ACA   , :00463AF4   , :00463B12   
|:00463B5C   , :00463CB9   
|
:004101B4 55                      push ebp
:004101B5 8BEC                    mov ebp, esp
:004101B7 81EC04010000            sub esp, 00000104
:004101BD 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:004101C3 50                      push eax
:004101C4 6804010000              push 00000104

* Reference To: KERNEL32.GetCurrentDirectoryA, Ord:00D1h
                                  |
:004101C9 FF155C854B00            Call dword ptr [004B855C]
:004101CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004101D2 51                      push ecx
:004101D3 8D95FCFEFFFF            lea edx, dword ptr [ebp+FFFFFEFC]
:004101D9 52                      push edx
:004101DA E891FFFFFF              call 00410170
:004101DF 83C408                  add esp, 00000008
:004101E2 8BE5                    mov esp, ebp
:004101E4 5D                      pop ebp
:004101E5 C3                      ret



* Referenced by a CALL at Addresses:
|:00410389   , :00413D57   
|
:004101E6 55                      push ebp
:004101E7 8BEC                    mov ebp, esp
:004101E9 81EC04010000            sub esp, 00000104

* Possible StringData Ref from Data Obj ->"D:"
                                  |
:004101EF 6874644700              push 00476474
:004101F4 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:004101FA 50                      push eax
:004101FB E8C0DB0500              call 0046DDC0
:00410200 83C408                  add esp, 00000008
:00410203 8D8DFCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEFC]
:00410209 51                      push ecx
:0041020A E87F050000              call 0041078E
:0041020F 83C404                  add esp, 00000004
:00410212 85C0                    test eax, eax
:00410214 7511                    jne 00410227
:00410216 8B5508                  mov edx, dword ptr [ebp+08]
:00410219 52                      push edx

* Possible StringData Ref from Data Obj ->"Can not open"
                                  |
:0041021A 6878644700              push 00476478
:0041021F E80C340500              call 00463630
:00410224 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410214(C)
|
:00410227 8B4508                  mov eax, dword ptr [ebp+08]
:0041022A 50                      push eax
:0041022B 8D8DFCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEFC]
:00410231 51                      push ecx
:00410232 E839FFFFFF              call 00410170
:00410237 83C408                  add esp, 00000008
:0041023A 8BE5                    mov esp, ebp
:0041023C 5D                      pop ebp
:0041023D C3                      ret



* Referenced by a CALL at Addresses:
|:00404C65   , :00404CAC   , :00404E09   , :00405327   , :004054A0   
|:0040772A   , :0040E6EC   , :0040E91E   , :0040EA3F   , :0040EA80   
|:00410C65   , :00410DBC   , :00410E0F   , :00410E51   , :00410EC7   
|:00410F8A   , :004112C9   , :0041163B   , :004116CA   , :00411A6E   
|:00425B6D   , :00425FA7   , :0046A317   , :0046A34F   , :0046A37C   
|:00473713   , :00473726   , :00473739   , :0047374C   , :004737F3   
|:00473806   , :00473819   , :00473853   , :00473869   , :0047387C   
|:0047393F   , :00473C83   
|
:0041023E 55                      push ebp
:0041023F 8BEC                    mov ebp, esp
:00410241 51                      push ecx
:00410242 894DFC                  mov dword ptr [ebp-04], ecx
:00410245 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410248 E8BF030000              call 0041060C
:0041024D 8BE5                    mov esp, ebp
:0041024F 5D                      pop ebp
:00410250 C3                      ret



* Referenced by a CALL at Addresses:
|:00404C3F   , :00404F7D   , :0040539C   , :0040E50A   , :0040E73A   
|:0040EA19   , :004106FC   , :00410744   , :00410B07   , :00410D9C   
|:00410F0A   , :0041120B   , :0041161E   , :00411926   , :004119AF   
|:00414345   , :00414396   , :00425D96   , :0042621A   , :0046A2FD   
|
:00410251 55                      push ebp
:00410252 8BEC                    mov ebp, esp
:00410254 83EC14                  sub esp, 00000014
:00410257 894DF0                  mov dword ptr [ebp-10], ecx
:0041025A 8B450C                  mov eax, dword ptr [ebp+0C]
:0041025D 25FFFF0000              and eax, 0000FFFF
:00410262 8945EC                  mov dword ptr [ebp-14], eax
:00410265 837DEC06                cmp dword ptr [ebp-14], 00000006
:00410269 776A                    ja 004102D5
:0041026B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041026E FF248DC9034100          jmp dword ptr [4*ecx+004103C9]
:00410275 C745F400000040          mov [ebp-0C], 40000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0041027C C745F805000000          mov [ebp-08], 00000005
:00410283 EB5E                    jmp 004102E3
:00410285 C745F400000040          mov [ebp-0C], 40000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0041028C C745F803000000          mov [ebp-08], 00000003
:00410293 EB4E                    jmp 004102E3
:00410295 C745F400000080          mov [ebp-0C], 80000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0041029C C745F803000000          mov [ebp-08], 00000003
:004102A3 EB3E                    jmp 004102E3
:004102A5 C745F400000080          mov [ebp-0C], 80000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004102AC C745F803000000          mov [ebp-08], 00000003
:004102B3 EB2E                    jmp 004102E3
:004102B5 C745F4000000C0          mov [ebp-0C], C0000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004102BC C745F803000000          mov [ebp-08], 00000003
:004102C3 EB1E                    jmp 004102E3
:004102C5 C745F4000000C0          mov [ebp-0C], C0000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004102CC C745F803000000          mov [ebp-08], 00000003
:004102D3 EB0E                    jmp 004102E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410269(C)
|
:004102D5 C745F400000080          mov [ebp-0C], 80000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004102DC C745F803000000          mov [ebp-08], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410283(U), :00410293(U), :004102A3(U), :004102B3(U), :004102C3(U)
|:004102D3(U)
|
:004102E3 8B55F0                  mov edx, dword ptr [ebp-10]
:004102E6 833A00                  cmp dword ptr [edx], 00000000
:004102E9 0F85CF000000            jne 004103BE
:004102EF C745FC00000000          mov [ebp-04], 00000000
:004102F6 EB09                    jmp 00410301

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410349(U)
|
:004102F8 8B45FC                  mov eax, dword ptr [ebp-04]
:004102FB 83C001                  add eax, 00000001
:004102FE 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004102F6(U)
|
:00410301 6A00                    push 00000000
:00410303 6880000000              push 00000080
:00410308 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041030B 51                      push ecx
:0041030C 6A00                    push 00000000
:0041030E 6A01                    push 00000001
:00410310 8B55F4                  mov edx, dword ptr [ebp-0C]
:00410313 52                      push edx
:00410314 8B4508                  mov eax, dword ptr [ebp+08]
:00410317 50                      push eax
:00410318 E897FEFFFF              call 004101B4
:0041031D 83C404                  add esp, 00000004
:00410320 50                      push eax

* Reference To: KERNEL32.CreateFileA, Ord:0031h
                                  |
:00410321 FF1558854B00            Call dword ptr [004B8558]
:00410327 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041032A 8901                    mov dword ptr [ecx], eax
:0041032C 8B55F0                  mov edx, dword ptr [ebp-10]
:0041032F 833AFF                  cmp dword ptr [edx], FFFFFFFF
:00410332 7513                    jne 00410347
:00410334 8B45F0                  mov eax, dword ptr [ebp-10]
:00410337 C70000000000            mov dword ptr [eax], 00000000
:0041033D 837DFC05                cmp dword ptr [ebp-04], 00000005
:00410341 7E02                    jle 00410345
:00410343 EB06                    jmp 0041034B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410341(C)
|
:00410345 EB02                    jmp 00410349

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410332(C)
|
:00410347 EB02                    jmp 0041034B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410345(U)
|
:00410349 EBAD                    jmp 004102F8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410343(U), :00410347(U)
|
:0041034B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041034E 833900                  cmp dword ptr [ecx], 00000000
:00410351 756B                    jne 004103BE
:00410353 817DF400000040          cmp dword ptr [ebp-0C], 40000000
:0041035A 7504                    jne 00410360
:0041035C 33C0                    xor eax, eax
:0041035E EB63                    jmp 004103C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041035A(C)
|
:00410360 C745FC00000000          mov [ebp-04], 00000000
:00410367 EB09                    jmp 00410372

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103BC(U)
|
:00410369 8B55FC                  mov edx, dword ptr [ebp-04]
:0041036C 83C201                  add edx, 00000001
:0041036F 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410367(U)
|
:00410372 6A00                    push 00000000
:00410374 6880000000              push 00000080
:00410379 8B45F8                  mov eax, dword ptr [ebp-08]
:0041037C 50                      push eax
:0041037D 6A00                    push 00000000
:0041037F 6A01                    push 00000001
:00410381 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00410384 51                      push ecx
:00410385 8B5508                  mov edx, dword ptr [ebp+08]
:00410388 52                      push edx
:00410389 E858FEFFFF              call 004101E6
:0041038E 83C404                  add esp, 00000004
:00410391 50                      push eax

* Reference To: KERNEL32.CreateFileA, Ord:0031h
                                  |
:00410392 FF1558854B00            Call dword ptr [004B8558]
:00410398 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041039B 8901                    mov dword ptr [ecx], eax
:0041039D 8B55F0                  mov edx, dword ptr [ebp-10]
:004103A0 833AFF                  cmp dword ptr [edx], FFFFFFFF
:004103A3 7515                    jne 004103BA
:004103A5 8B45F0                  mov eax, dword ptr [ebp-10]
:004103A8 C70000000000            mov dword ptr [eax], 00000000
:004103AE 837DFC05                cmp dword ptr [ebp-04], 00000005
:004103B2 7E04                    jle 004103B8
:004103B4 33C0                    xor eax, eax
:004103B6 EB0B                    jmp 004103C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103B2(C)
|
:004103B8 EB02                    jmp 004103BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103A3(C)
|
:004103BA EB02                    jmp 004103BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103B8(U)
|
:004103BC EBAB                    jmp 00410369

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004102E9(C), :00410351(C), :004103BA(U)
|
:004103BE B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041035E(U), :004103B6(U)
|
:004103C3 8BE5                    mov esp, ebp
:004103C5 5D                      pop ebp
:004103C6 C20800                  ret 0008



:004103C9 95024100                DWORD 00410295
:004103CD 75024100                DWORD 00410275

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103CD(C)
|
:004103D1 B5024100                DWORD 004102B5
:004103D5 D5024100                DWORD 004102D5
:004103D9 A5024100                DWORD 004102A5
:004103DD 85024100                DWORD 00410285
:004103E1 C5024100                DWORD 004102C5



* Referenced by a CALL at Addresses:
|:00411235   , :004119D6   
|
:004103E5 55                      push ebp
:004103E6 8BEC                    mov ebp, esp
:004103E8 51                      push ecx
:004103E9 894DFC                  mov dword ptr [ebp-04], ecx
:004103EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004103EF 833800                  cmp dword ptr [eax], 00000000
:004103F2 752D                    jne 00410421
:004103F4 6A00                    push 00000000
:004103F6 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004103FB 6A04                    push 00000004
:004103FD 6A00                    push 00000000
:004103FF 6A01                    push 00000001
:00410401 68000000C0              push C0000000
:00410406 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410409 51                      push ecx

* Reference To: KERNEL32.CreateFileA, Ord:0031h
                                  |
:0041040A FF1558854B00            Call dword ptr [004B8558]
:00410410 8B55FC                  mov edx, dword ptr [ebp-04]
:00410413 8902                    mov dword ptr [edx], eax
:00410415 8B45FC                  mov eax, dword ptr [ebp-04]
:00410418 8338FF                  cmp dword ptr [eax], FFFFFFFF
:0041041B 7504                    jne 00410421
:0041041D 33C0                    xor eax, eax
:0041041F EB05                    jmp 00410426

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004103F2(C), :0041041B(C)
|
:00410421 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041041F(U)
|
:00410426 8BE5                    mov esp, ebp
:00410428 5D                      pop ebp
:00410429 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004104A3   , :004104CE   
|
:0041042C 55                      push ebp
:0041042D 8BEC                    mov ebp, esp
:0041042F 83EC10                  sub esp, 00000010
:00410432 894DF0                  mov dword ptr [ebp-10], ecx
:00410435 8B45F0                  mov eax, dword ptr [ebp-10]
:00410438 833800                  cmp dword ptr [eax], 00000000
:0041043B 7447                    je 00410484
:0041043D C745F400000000          mov [ebp-0C], 00000000
:00410444 EB09                    jmp 0041044F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410480(U)
|
:00410446 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00410449 83C101                  add ecx, 00000001
:0041044C 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410444(U)
|
:0041044F 6A00                    push 00000000
:00410451 8D55FC                  lea edx, dword ptr [ebp-04]
:00410454 52                      push edx
:00410455 8B450C                  mov eax, dword ptr [ebp+0C]
:00410458 50                      push eax
:00410459 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041045C 51                      push ecx
:0041045D 8B55F0                  mov edx, dword ptr [ebp-10]
:00410460 8B02                    mov eax, dword ptr [edx]
:00410462 50                      push eax

* Reference To: KERNEL32.ReadFile, Ord:01D6h
                                  |
:00410463 FF1554854B00            Call dword ptr [004B8554]
:00410469 8945F8                  mov dword ptr [ebp-08], eax
:0041046C 837DF800                cmp dword ptr [ebp-08], 00000000
:00410470 750C                    jne 0041047E
:00410472 837DF405                cmp dword ptr [ebp-0C], 00000005
:00410476 7E04                    jle 0041047C
:00410478 33C0                    xor eax, eax
:0041047A EB0F                    jmp 0041048B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410476(C)
|
:0041047C EB02                    jmp 00410480

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410470(C)
|
:0041047E EB02                    jmp 00410482

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041047C(U)
|
:00410480 EBC4                    jmp 00410446

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041047E(U)
|
:00410482 EB04                    jmp 00410488

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041043B(C)
|
:00410484 33C0                    xor eax, eax
:00410486 EB03                    jmp 0041048B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410482(U)
|
:00410488 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041047A(U), :00410486(U)
|
:0041048B 8BE5                    mov esp, ebp
:0041048D 5D                      pop ebp
:0041048E C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00404FB5   , :004053CF   , :0040E541   , :0040E55C   , :0040E577   
|:0040E592   , :0040E5AD   , :0040E5C8   , :0040E5E3   , :0040E5FE   
|:0040E61A   , :0040E62D   , :0040E641   , :0040E655   , :0040E685   
|:0040E69B   , :0040E6AF   , :0040E6BD   , :0041072E   , :00410B15   
|:00410DDA   , :00410F20   , :00411657   , :004141CE   , :004144E9   
|:00414687   , :0046A32D   
|
:00410491 55                      push ebp
:00410492 8BEC                    mov ebp, esp
:00410494 51                      push ecx
:00410495 894DFC                  mov dword ptr [ebp-04], ecx
:00410498 8B450C                  mov eax, dword ptr [ebp+0C]
:0041049B 50                      push eax
:0041049C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041049F 51                      push ecx
:004104A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004104A3 E884FFFFFF              call 0041042C
:004104A8 8BE5                    mov esp, ebp
:004104AA 5D                      pop ebp
:004104AB C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00405987   , :0040EA54   , :00414376   , :004143C7   , :00425DB5   
|:00456B02   
|
:004104AE 55                      push ebp
:004104AF 8BEC                    mov ebp, esp
:004104B1 51                      push ecx
:004104B2 894DFC                  mov dword ptr [ebp-04], ecx
:004104B5 6A00                    push 00000000
:004104B7 8B4508                  mov eax, dword ptr [ebp+08]
:004104BA 50                      push eax
:004104BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004104BE E816000000              call 004104D9
:004104C3 8B4D10                  mov ecx, dword ptr [ebp+10]
:004104C6 51                      push ecx
:004104C7 8B550C                  mov edx, dword ptr [ebp+0C]
:004104CA 52                      push edx
:004104CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004104CE E859FFFFFF              call 0041042C
:004104D3 8BE5                    mov esp, ebp
:004104D5 5D                      pop ebp
:004104D6 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:004104BE   , :0041055B   , :00410578   , :004105F1   
|
:004104D9 55                      push ebp
:004104DA 8BEC                    mov ebp, esp
:004104DC 83EC0C                  sub esp, 0000000C
:004104DF 894DF8                  mov dword ptr [ebp-08], ecx
:004104E2 C745FC00000000          mov [ebp-04], 00000000
:004104E9 8B450C                  mov eax, dword ptr [ebp+0C]
:004104EC 8945F4                  mov dword ptr [ebp-0C], eax
:004104EF 837DF400                cmp dword ptr [ebp-0C], 00000000
:004104F3 740E                    je 00410503
:004104F5 837DF401                cmp dword ptr [ebp-0C], 00000001
:004104F9 7411                    je 0041050C
:004104FB 837DF402                cmp dword ptr [ebp-0C], 00000002
:004104FF 7414                    je 00410515
:00410501 EB1B                    jmp 0041051E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004104F3(C)
|
:00410503 C745FC00000000          mov [ebp-04], 00000000
:0041050A EB19                    jmp 00410525

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004104F9(C)
|
:0041050C C745FC01000000          mov [ebp-04], 00000001
:00410513 EB10                    jmp 00410525

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004104FF(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00410515 C745FC02000000          mov [ebp-04], 00000002
:0041051C EB07                    jmp 00410525

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410501(U)
|
:0041051E C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041050A(U), :00410513(U), :0041051C(U)
|
:00410525 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410528 833900                  cmp dword ptr [ecx], 00000000
:0041052B 7416                    je 00410543
:0041052D 8B55FC                  mov edx, dword ptr [ebp-04]
:00410530 52                      push edx
:00410531 6A00                    push 00000000
:00410533 8B4508                  mov eax, dword ptr [ebp+08]
:00410536 50                      push eax
:00410537 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041053A 8B11                    mov edx, dword ptr [ecx]
:0041053C 52                      push edx

* Reference To: KERNEL32.SetFilePointer, Ord:0219h
                                  |
:0041053D FF1550854B00            Call dword ptr [004B8550]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041052B(C)
|
:00410543 8BE5                    mov esp, ebp
:00410545 5D                      pop ebp
:00410546 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004144D5   , :00414669   
|
:00410549 55                      push ebp
:0041054A 8BEC                    mov ebp, esp
:0041054C 51                      push ecx
:0041054D 894DFC                  mov dword ptr [ebp-04], ecx
:00410550 8B450C                  mov eax, dword ptr [ebp+0C]
:00410553 50                      push eax
:00410554 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410557 51                      push ecx
:00410558 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041055B E879FFFFFF              call 004104D9
:00410560 8BE5                    mov esp, ebp
:00410562 5D                      pop ebp
:00410563 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00404C76   
|
:00410566 55                      push ebp
:00410567 8BEC                    mov ebp, esp
:00410569 51                      push ecx
:0041056A 894DFC                  mov dword ptr [ebp-04], ecx
:0041056D 8B450C                  mov eax, dword ptr [ebp+0C]
:00410570 50                      push eax
:00410571 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410574 51                      push ecx
:00410575 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410578 E85CFFFFFF              call 004104D9
:0041057D 8BE5                    mov esp, ebp
:0041057F 5D                      pop ebp
:00410580 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004105D6   , :00410601   
|
:00410583 55                      push ebp
:00410584 8BEC                    mov ebp, esp
:00410586 83EC0C                  sub esp, 0000000C
:00410589 894DF4                  mov dword ptr [ebp-0C], ecx
:0041058C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041058F 833800                  cmp dword ptr [eax], 00000000
:00410592 7427                    je 004105BB
:00410594 6A00                    push 00000000
:00410596 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00410599 51                      push ecx
:0041059A 8B550C                  mov edx, dword ptr [ebp+0C]
:0041059D 52                      push edx
:0041059E 8B4508                  mov eax, dword ptr [ebp+08]
:004105A1 50                      push eax
:004105A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004105A5 8B11                    mov edx, dword ptr [ecx]
:004105A7 52                      push edx

* Reference To: KERNEL32.WriteFile, Ord:027Bh
                                  |
:004105A8 FF154C854B00            Call dword ptr [004B854C]
:004105AE 8945F8                  mov dword ptr [ebp-08], eax
:004105B1 837DF800                cmp dword ptr [ebp-08], 00000000
:004105B5 7504                    jne 004105BB
:004105B7 33C0                    xor eax, eax
:004105B9 EB03                    jmp 004105BE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410592(C), :004105B5(C)
|
:004105BB 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004105B9(U)
|
:004105BE 8BE5                    mov esp, ebp
:004105C0 5D                      pop ebp
:004105C1 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00404C8F   , :0040E771   , :0040E78C   , :0040E7A7   , :0040E7C2   
|:0040E7DD   , :0040E7F8   , :0040E813   , :0040E82E   , :0040E84A   
|:0040E85D   , :0040E871   , :0040E885   , :0040E8B5   , :0040E8CB   
|:0040E8DF   , :0040E8FE   , :00410776   , :0041194B   
|
:004105C4 55                      push ebp
:004105C5 8BEC                    mov ebp, esp
:004105C7 51                      push ecx
:004105C8 894DFC                  mov dword ptr [ebp-04], ecx
:004105CB 8B450C                  mov eax, dword ptr [ebp+0C]
:004105CE 50                      push eax
:004105CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004105D2 51                      push ecx
:004105D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004105D6 E8A8FFFFFF              call 00410583
:004105DB 8BE5                    mov esp, ebp
:004105DD 5D                      pop ebp
:004105DE C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00411A12   , :00456AB3   
|
:004105E1 55                      push ebp
:004105E2 8BEC                    mov ebp, esp
:004105E4 51                      push ecx
:004105E5 894DFC                  mov dword ptr [ebp-04], ecx
:004105E8 6A00                    push 00000000
:004105EA 8B4508                  mov eax, dword ptr [ebp+08]
:004105ED 50                      push eax
:004105EE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004105F1 E8E3FEFFFF              call 004104D9
:004105F6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004105F9 51                      push ecx
:004105FA 8B550C                  mov edx, dword ptr [ebp+0C]
:004105FD 52                      push edx
:004105FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410601 E87DFFFFFF              call 00410583
:00410606 8BE5                    mov esp, ebp
:00410608 5D                      pop ebp
:00410609 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00404C50   , :00404C97   , :0040530F   , :00405486   , :0040E6D7   
|:0040E909   , :0040EA5F   , :00410248   , :00410652   , :00410708   
|:00410736   , :00410750   , :0041077E   , :00410B1D   , :00410DE5   
|:00410F31   , :00411251   , :0041165F   , :00411959   , :00411A20   
|:00411B0B   , :00411B3A   , :00412956   , :00412AC4   , :00412BA9   
|:004211D1   , :00422CC4   , :00425DC0   , :00425DF5   , :00425E54   
|:00425EB3   , :00425F12   , :00425F71   , :00426229   , :00426233   
|:0042623D   , :004262D3   , :004263D7   , :0042A126   , :0042A154   
|:0042C338   , :0042C450   , :0043AAC3   , :0043B698   , :0043B8EC   
|:0043BACB   , :0043DBBD   , :0043DBEC   , :0043DE4C   , :0043DE7E   
|:0043E88E   , :0043EB20   , :0043ED60   , :0043ED92   , :0043EE60   
|:0043EE92   , :0043EF32   , :0043EF64   , :0043F33F   , :0043F371   
|:0043F6D9   , :004500FC   , :0045012B   , :004510A5   , :0045209C   
|:0045294F   , :00454AF7   , :00454D83   , :004660A7   , :0046A339   
|:0046A35C   
|
:0041060C 55                      push ebp
:0041060D 8BEC                    mov ebp, esp
:0041060F 51                      push ecx
:00410610 894DFC                  mov dword ptr [ebp-04], ecx
:00410613 8B45FC                  mov eax, dword ptr [ebp-04]
:00410616 833800                  cmp dword ptr [eax], 00000000
:00410619 7424                    je 0041063F
:0041061B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041061E 8B11                    mov edx, dword ptr [ecx]
:00410620 52                      push edx

* Reference To: KERNEL32.CloseHandle, Ord:0018h
                                  |
:00410621 FF1548854B00            Call dword ptr [004B8548]
:00410627 85C0                    test eax, eax
:00410629 7410                    je 0041063B
:0041062B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041062E C70000000000            mov dword ptr [eax], 00000000
:00410634 B801000000              mov eax, 00000001
:00410639 EB09                    jmp 00410644

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410629(C)
|
:0041063B 33C0                    xor eax, eax
:0041063D EB05                    jmp 00410644

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410619(C)
|
:0041063F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410639(U), :0041063D(U)
|
:00410644 8BE5                    mov esp, ebp
:00410646 5D                      pop ebp
:00410647 C3                      ret


:00410648 55                      push ebp
:00410649 8BEC                    mov ebp, esp
:0041064B 51                      push ecx
:0041064C 894DFC                  mov dword ptr [ebp-04], ecx
:0041064F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410652 E8B5FFFFFF              call 0041060C
:00410657 8B4508                  mov eax, dword ptr [ebp+08]
:0041065A 50                      push eax

* Reference To: KERNEL32.DeleteFileA, Ord:004Eh
                                  |
:0041065B FF1544854B00            Call dword ptr [004B8544]
:00410661 8BE5                    mov esp, ebp
:00410663 5D                      pop ebp
:00410664 C20400                  ret 0004


:00410667 55                      push ebp
:00410668 8BEC                    mov ebp, esp
:0041066A 51                      push ecx
:0041066B 894DFC                  mov dword ptr [ebp-04], ecx
:0041066E 8B45FC                  mov eax, dword ptr [ebp-04]
:00410671 8B00                    mov eax, dword ptr [eax]
:00410673 8BE5                    mov esp, ebp
:00410675 5D                      pop ebp
:00410676 C3                      ret



* Referenced by a CALL at Addresses:
|:00404D80   , :00404F9F   , :00404FCA   , :004053B9   , :004053E4   
|:00410721   , :00410769   
|
:00410677 55                      push ebp
:00410678 8BEC                    mov ebp, esp
:0041067A 81EC4C010000            sub esp, 0000014C
:00410680 898DB4FEFFFF            mov dword ptr [ebp+FFFFFEB4], ecx
:00410686 C745FC00000000          mov [ebp-04], 00000000
:0041068D C785B8FEFFFF00000000    mov dword ptr [ebp+FFFFFEB8], 00000000
:00410697 8D85BCFEFFFF            lea eax, dword ptr [ebp+FFFFFEBC]
:0041069D 50                      push eax
:0041069E 8B4D08                  mov ecx, dword ptr [ebp+08]
:004106A1 51                      push ecx

* Reference To: KERNEL32.FindFirstFileA, Ord:0082h
                                  |
:004106A2 FF153C854B00            Call dword ptr [004B853C]
:004106A8 8985B8FEFFFF            mov dword ptr [ebp+FFFFFEB8], eax
:004106AE 83BDB8FEFFFFFF          cmp dword ptr [ebp+FFFFFEB8], FFFFFFFF
:004106B5 7416                    je 004106CD
:004106B7 83BDD8FEFFFF00          cmp dword ptr [ebp+FFFFFED8], 00000000
:004106BE 7404                    je 004106C4
:004106C0 33C0                    xor eax, eax
:004106C2 EB22                    jmp 004106E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106BE(C)
|
:004106C4 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:004106CA 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106B5(C)
|
:004106CD 83BDB8FEFFFF00          cmp dword ptr [ebp+FFFFFEB8], 00000000
:004106D4 740D                    je 004106E3
:004106D6 8B85B8FEFFFF            mov eax, dword ptr [ebp+FFFFFEB8]
:004106DC 50                      push eax

* Reference To: KERNEL32.FindClose, Ord:007Eh
                                  |
:004106DD FF1540854B00            Call dword ptr [004B8540]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106D4(C)
|
:004106E3 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106C2(U)
|
:004106E6 8BE5                    mov esp, ebp
:004106E8 5D                      pop ebp
:004106E9 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00404DA1   , :00404DC9   , :00404DF1   
|
:004106EC 55                      push ebp
:004106ED 8BEC                    mov ebp, esp
:004106EF 51                      push ecx
:004106F0 894DFC                  mov dword ptr [ebp-04], ecx
:004106F3 6A00                    push 00000000
:004106F5 8B4508                  mov eax, dword ptr [ebp+08]
:004106F8 50                      push eax
:004106F9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004106FC E850FBFFFF              call 00410251
:00410701 85C0                    test eax, eax
:00410703 750C                    jne 00410711
:00410705 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410708 E8FFFEFFFF              call 0041060C
:0041070D 33C0                    xor eax, eax
:0041070F EB77                    jmp 00410788

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410703(C)
|
:00410711 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410714 51                      push ecx
:00410715 E89AFAFFFF              call 004101B4
:0041071A 83C404                  add esp, 00000004
:0041071D 50                      push eax
:0041071E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410721 E851FFFFFF              call 00410677
:00410726 50                      push eax
:00410727 8B5510                  mov edx, dword ptr [ebp+10]
:0041072A 52                      push edx
:0041072B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041072E E85EFDFFFF              call 00410491
:00410733 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410736 E8D1FEFFFF              call 0041060C
:0041073B 6A01                    push 00000001
:0041073D 8B450C                  mov eax, dword ptr [ebp+0C]
:00410740 50                      push eax
:00410741 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410744 E808FBFFFF              call 00410251
:00410749 85C0                    test eax, eax
:0041074B 750C                    jne 00410759
:0041074D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410750 E8B7FEFFFF              call 0041060C
:00410755 33C0                    xor eax, eax
:00410757 EB2F                    jmp 00410788

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041074B(C)
|
:00410759 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041075C 51                      push ecx
:0041075D E852FAFFFF              call 004101B4
:00410762 83C404                  add esp, 00000004
:00410765 50                      push eax
:00410766 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410769 E809FFFFFF              call 00410677
:0041076E 50                      push eax
:0041076F 8B5510                  mov edx, dword ptr [ebp+10]
:00410772 52                      push edx
:00410773 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410776 E849FEFFFF              call 004105C4
:0041077B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041077E E889FEFFFF              call 0041060C
:00410783 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041070F(U), :00410757(U)
|
:00410788 8BE5                    mov esp, ebp
:0041078A 5D                      pop ebp
:0041078B C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0041020A   
|
:0041078E 55                      push ebp
:0041078F 8BEC                    mov ebp, esp
:00410791 83EC10                  sub esp, 00000010
:00410794 C645F863                mov [ebp-08], 63
:00410798 A188644700              mov eax, dword ptr [00476488]
:0041079D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041080F(U)
|
:004107A0 C645FC41                mov [ebp-04], 41
:004107A4 C745F400000000          mov [ebp-0C], 00000000
:004107AB EB12                    jmp 004107BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004107F4(U)
|
:004107AD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004107B0 83C101                  add ecx, 00000001
:004107B3 894DF4                  mov dword ptr [ebp-0C], ecx
:004107B6 8A55FC                  mov dl, byte ptr [ebp-04]
:004107B9 80C201                  add dl, 01
:004107BC 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004107AB(U)
|
:004107BF 837DF41A                cmp dword ptr [ebp-0C], 0000001A
:004107C3 7F31                    jg 004107F6
:004107C5 8D45FC                  lea eax, dword ptr [ebp-04]
:004107C8 50                      push eax

* Reference To: KERNEL32.GetDriveTypeA, Ord:00DFh
                                  |
:004107C9 FF1538854B00            Call dword ptr [004B8538]
:004107CF 8945F0                  mov dword ptr [ebp-10], eax
:004107D2 837DF005                cmp dword ptr [ebp-10], 00000005
:004107D6 750D                    jne 004107E5
:004107D8 E84F000000              call 0041082C
:004107DD 85C0                    test eax, eax
:004107DF 7402                    je 004107E3
:004107E1 EB13                    jmp 004107F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004107DF(C)
|
:004107E3 EB0F                    jmp 004107F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004107D6(C)
|
:004107E5 837DF003                cmp dword ptr [ebp-10], 00000003
:004107E9 7509                    jne 004107F4
:004107EB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004107EE 83C141                  add ecx, 00000041
:004107F1 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004107E3(U), :004107E9(C)
|
:004107F4 EBB7                    jmp 004107AD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004107C3(C), :004107E1(U)
|
:004107F6 837DF41A                cmp dword ptr [ebp-0C], 0000001A
:004107FA 7E1C                    jle 00410818

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410816(U)
|
:004107FC 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"So{´ЫHǪCD-ROMAбN´ЫHǪCD"
                                        ->"-ROMJCD-R0MоC"
                                  |
:004107FE 688C644700              push 0047648C
:00410803 E8282E0500              call 00463630
:00410808 83C408                  add esp, 00000008
:0041080B 85C0                    test eax, eax
:0041080D 7402                    je 00410811
:0041080F EB8F                    jmp 004107A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041080D(C)
|
:00410811 E80C310500              call 00463922
:00410816 EBE4                    jmp 004107FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004107FA(C)
|
:00410818 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041081B 83C141                  add ecx, 00000041
:0041081E 8B5508                  mov edx, dword ptr [ebp+08]
:00410821 880A                    mov byte ptr [edx], cl
:00410823 B801000000              mov eax, 00000001
:00410828 8BE5                    mov esp, ebp
:0041082A 5D                      pop ebp
:0041082B C3                      ret



* Referenced by a CALL at Address:
|:004107D8   
|
:0041082C 55                      push ebp
:0041082D 8BEC                    mov ebp, esp
:0041082F 81EC1C020000            sub esp, 0000021C
:00410835 A1D4644700              mov eax, dword ptr [004764D4]
:0041083A 8945F8                  mov dword ptr [ebp-08], eax
:0041083D C685F0FEFFFF41          mov byte ptr [ebp+FFFFFEF0], 41
:00410844 EB0F                    jmp 00410855

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108CC(U)
|
:00410846 8A8DF0FEFFFF            mov cl, byte ptr [ebp+FFFFFEF0]
:0041084C 80C101                  add cl, 01
:0041084F 888DF0FEFFFF            mov byte ptr [ebp+FFFFFEF0], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410844(U)
|
:00410855 0FBE95F0FEFFFF          movsx edx, byte ptr [ebp+FFFFFEF0]
:0041085C 83FA5A                  cmp edx, 0000005A
:0041085F 7F70                    jg 004108D1
:00410861 8A85F0FEFFFF            mov al, byte ptr [ebp+FFFFFEF0]
:00410867 8845F8                  mov byte ptr [ebp-08], al
:0041086A 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0041086D 51                      push ecx

* Reference To: KERNEL32.GetDriveTypeA, Ord:00DFh
                                  |
:0041086E FF1538854B00            Call dword ptr [004B8538]
:00410874 83F805                  cmp eax, 00000005
:00410877 7553                    jne 004108CC
:00410879 6804010000              push 00000104
:0041087E 8D95E4FDFFFF            lea edx, dword ptr [ebp+FFFFFDE4]
:00410884 52                      push edx
:00410885 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:0041088B 50                      push eax
:0041088C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410892 51                      push ecx
:00410893 8D55FC                  lea edx, dword ptr [ebp-04]
:00410896 52                      push edx
:00410897 6804010000              push 00000104
:0041089C 8D85F4FEFFFF            lea eax, dword ptr [ebp+FFFFFEF4]
:004108A2 50                      push eax
:004108A3 8D4DF8                  lea ecx, dword ptr [ebp-08]
:004108A6 51                      push ecx

* Reference To: KERNEL32.GetVolumeInformationA, Ord:014Fh
                                  |
:004108A7 FF1534854B00            Call dword ptr [004B8534]
:004108AD 8D95F4FEFFFF            lea edx, dword ptr [ebp+FFFFFEF4]
:004108B3 52                      push edx

* Possible StringData Ref from Data Obj ->"EKD4"
                                  |
:004108B4 6868644700              push 00476468
:004108B9 E8F2D50500              call 0046DEB0
:004108BE 83C408                  add esp, 00000008
:004108C1 85C0                    test eax, eax
:004108C3 7507                    jne 004108CC
:004108C5 B801000000              mov eax, 00000001
:004108CA EB07                    jmp 004108D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410877(C), :004108C3(C)
|
:004108CC E975FFFFFF              jmp 00410846

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041085F(C)
|
:004108D1 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108CA(U)
|
:004108D3 8BE5                    mov esp, ebp
:004108D5 5D                      pop ebp
:004108D6 C3                      ret


:004108D7 55                      push ebp
:004108D8 8BEC                    mov ebp, esp
:004108DA 81EC80000000            sub esp, 00000080
:004108E0 8B4508                  mov eax, dword ptr [ebp+08]
:004108E3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004108E4 68D8644700              push 004764D8
:004108E9 8D4D80                  lea ecx, dword ptr [ebp-80]
:004108EC 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004108ED FF1500874B00            Call dword ptr [004B8700]
:004108F3 83C40C                  add esp, 0000000C
:004108F6 6830200000              push 00002030

* Possible StringData Ref from Data Obj ->"´ЫH  "
                                  |
:004108FB 68DC644700              push 004764DC
:00410900 8D5580                  lea edx, dword ptr [ebp-80]
:00410903 52                      push edx
:00410904 A1380E4B00              mov eax, dword ptr [004B0E38]
:00410909 50                      push eax

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:0041090A FF1598864B00            Call dword ptr [004B8698]
:00410910 E80D300500              call 00463922
:00410915 8BE5                    mov esp, ebp
:00410917 5D                      pop ebp
:00410918 C3                      ret


:00410919 CC                      int 03
:0041091A CC                      int 03
:0041091B CC                      int 03
:0041091C CC                      int 03
:0041091D CC                      int 03
:0041091E CC                      int 03
:0041091F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401739   , :004017F6   , :0040410A   , :00404257   , :00406926   
|:00406D30   , :00417477   , :0041D3AC   , :0041E734   , :0042C28D   
|:0042C84D   , :0044AD2B   , :00452DE3   , :00455520   , :00455547   
|:004560DE   , :0045C68E   , :00464CDE   , :0046519A   , :00466020   
|
:00410920 55                      push ebp
:00410921 8BEC                    mov ebp, esp
:00410923 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410926 6BC970                  imul ecx, 00000070
:00410929 81C198224900            add ecx, 00492298
:0041092F E8BC3FFFFF              call 004048F0
:00410934 25FF000000              and eax, 000000FF
:00410939 F7D8                    neg eax
:0041093B 1BC0                    sbb eax, eax
:0041093D 40                      inc eax
:0041093E 5D                      pop ebp
:0041093F C3                      ret


:00410940 55                      push ebp
:00410941 8BEC                    mov ebp, esp
:00410943 33C0                    xor eax, eax
:00410945 5D                      pop ebp
:00410946 C3                      ret



* Referenced by a CALL at Address:
|:004124A9   
|
:00410947 55                      push ebp
:00410948 8BEC                    mov ebp, esp
:0041094A 51                      push ecx
:0041094B 894DFC                  mov dword ptr [ebp-04], ecx
:0041094E 8B45FC                  mov eax, dword ptr [ebp-04]
:00410951 C6400801                mov [eax+08], 01
:00410955 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410958 C70110270000            mov dword ptr [ecx], 00002710
:0041095E 8B55FC                  mov edx, dword ptr [ebp-04]
:00410961 C6421502                mov [edx+15], 02
:00410965 8B45FC                  mov eax, dword ptr [ebp-04]
:00410968 C6401402                mov [eax+14], 02
:0041096C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041096F C6411003                mov [ecx+10], 03
:00410973 8B55FC                  mov edx, dword ptr [ebp-04]
:00410976 66C7420A10F1            mov [edx+0A], F110
:0041097C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041097F C6401202                mov [eax+12], 02
:00410983 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410986 66C7410C0100            mov [ecx+0C], 0001
:0041098C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041098F C6420EFF                mov [edx+0E], FF
:00410993 8B45FC                  mov eax, dword ptr [ebp-04]
:00410996 C6401100                mov [eax+11], 00
:0041099A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041099D C6411300                mov [ecx+13], 00
:004109A1 8B55FC                  mov edx, dword ptr [ebp-04]
:004109A4 C6420400                mov [edx+04], 00

* Possible Reference to String Resource ID=00008: ""
                                  |
:004109A8 6A08                    push 00000008
:004109AA 6A01                    push 00000001
:004109AC 8B45FC                  mov eax, dword ptr [ebp-04]
:004109AF 83C016                  add eax, 00000016
:004109B2 50                      push eax
:004109B3 E8A8CF0500              call 0046D960
:004109B8 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00008: ""
                                  |
:004109BB 6A08                    push 00000008
:004109BD 6A00                    push 00000000
:004109BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004109C2 83C11E                  add ecx, 0000001E
:004109C5 51                      push ecx
:004109C6 E895CF0500              call 0046D960
:004109CB 83C40C                  add esp, 0000000C
:004109CE 6800010000              push 00000100

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004109D3 68FF000000              push 000000FF
:004109D8 8B55FC                  mov edx, dword ptr [ebp-04]
:004109DB 83C226                  add edx, 00000026
:004109DE 52                      push edx
:004109DF E87CCF0500              call 0046D960
:004109E4 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00008: ""
                                  |
:004109E7 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004109E9 68FF000000              push 000000FF
:004109EE 8B45FC                  mov eax, dword ptr [ebp-04]
:004109F1 0526010000              add eax, 00000126
:004109F6 50                      push eax
:004109F7 E864CF0500              call 0046D960
:004109FC 83C40C                  add esp, 0000000C
:004109FF 8BE5                    mov esp, ebp
:00410A01 5D                      pop ebp
:00410A02 C3                      ret



* Referenced by a CALL at Addresses:
|:00411514   , :00412532   
|
:00410A03 55                      push ebp
:00410A04 8BEC                    mov ebp, esp
:00410A06 C705E053480000000000    mov dword ptr [004853E0], 00000000
:00410A10 B9000D4B00              mov ecx, 004B0D00
:00410A15 E8661E0000              call 00412880
:00410A1A 85C0                    test eax, eax
:00410A1C 7404                    je 00410A22
:00410A1E 33C0                    xor eax, eax
:00410A20 EB6C                    jmp 00410A8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410A1C(C)
|
:00410A22 C705DC53480000000000    mov dword ptr [004853DC], 00000000
:00410A2C E85F000000              call 00410A90
:00410A31 85C0                    test eax, eax
:00410A33 7511                    jne 00410A46

* Possible StringData Ref from Data Obj ->"SxsơAŪʧ@C"
                                  |
:00410A35 6864654700              push 00476564
:00410A3A E8262D0500              call 00463765
:00410A3F 83C404                  add esp, 00000004
:00410A42 33C0                    xor eax, eax
:00410A44 EB48                    jmp 00410A8E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410A33(C), :00410A87(U)
|
:00410A46 6A00                    push 00000000
:00410A48 68E2124100              push 004112E2
:00410A4D A1380E4B00              mov eax, dword ptr [004B0E38]
:00410A52 50                      push eax

* Possible Reference to Dialog: DialogID_0091 
                                  |
:00410A53 6891000000              push 00000091
:00410A58 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00410A5E 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00410A5F FF1520874B00            Call dword ptr [004B8720]
:00410A65 833DDC53480000          cmp dword ptr [004853DC], 00000000
:00410A6C 7417                    je 00410A85
:00410A6E 8B15D8534800            mov edx, dword ptr [004853D8]
:00410A74 52                      push edx
:00410A75 E8CE020000              call 00410D48
:00410A7A 83C404                  add esp, 00000004
:00410A7D 85C0                    test eax, eax
:00410A7F 7402                    je 00410A83
:00410A81 EB06                    jmp 00410A89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410A7F(C)
|
:00410A83 EB02                    jmp 00410A87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410A6C(C)
|
:00410A85 EB02                    jmp 00410A89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410A83(U)
|
:00410A87 EBBD                    jmp 00410A46

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410A81(U), :00410A85(U)
|
:00410A89 A1DC534800              mov eax, dword ptr [004853DC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410A20(U), :00410A44(U)
|
:00410A8E 5D                      pop ebp
:00410A8F C3                      ret



* Referenced by a CALL at Addresses:
|:00410A2C   , :0041156D   
|
:00410A90 55                      push ebp
:00410A91 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00410A93 6AFF                    push FFFFFFFF
:00410A95 6859384700              push 00473859
:00410A9A 64A100000000            mov eax, dword ptr fs:[00000000]
:00410AA0 50                      push eax
:00410AA1 64892500000000          mov dword ptr fs:[00000000], esp
:00410AA8 81EC80000000            sub esp, 00000080
:00410AAE 8D4DD0                  lea ecx, dword ptr [ebp-30]
:00410AB1 E88A6DFFFF              call 00407840
:00410AB6 C745FC00000000          mov [ebp-04], 00000000
:00410ABD C745BC00000000          mov [ebp-44], 00000000
:00410AC4 C745CC00000000          mov [ebp-34], 00000000
:00410ACB EB09                    jmp 00410AD6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410C4D(U)
|
:00410ACD 8B45CC                  mov eax, dword ptr [ebp-34]
:00410AD0 83C001                  add eax, 00000001
:00410AD3 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410ACB(U)
|
:00410AD6 837DCC0A                cmp dword ptr [ebp-34], 0000000A
:00410ADA 0F8372010000            jnb 00410C52
:00410AE0 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00410AE3 C6440DC000              mov [ebp+ecx-40], 00
:00410AE8 C6458000                mov [ebp-80], 00
:00410AEC 6A00                    push 00000000
:00410AEE 8B55CC                  mov edx, dword ptr [ebp-34]
:00410AF1 52                      push edx
:00410AF2 8D45D4                  lea eax, dword ptr [ebp-2C]
:00410AF5 50                      push eax
:00410AF6 E883010000              call 00410C7E
:00410AFB 83C40C                  add esp, 0000000C
:00410AFE 6A00                    push 00000000
:00410B00 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00410B03 51                      push ecx
:00410B04 8D4DD0                  lea ecx, dword ptr [ebp-30]
:00410B07 E845F7FFFF              call 00410251
:00410B0C 6A23                    push 00000023
:00410B0E 8D5580                  lea edx, dword ptr [ebp-80]
:00410B11 52                      push edx
:00410B12 8D4DD0                  lea ecx, dword ptr [ebp-30]
:00410B15 E877F9FFFF              call 00410491
:00410B1A 8D4DD0                  lea ecx, dword ptr [ebp-30]
:00410B1D E8EAFAFFFF              call 0041060C
:00410B22 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00410B24 6A05                    push 00000005
:00410B26 8D45B4                  lea eax, dword ptr [ebp-4C]
:00410B29 50                      push eax
:00410B2A E8191D0500              call 00462848
:00410B2F 83C40C                  add esp, 0000000C
:00410B32 8B4D80                  mov ecx, dword ptr [ebp-80]
:00410B35 81E1FF000000            and ecx, 000000FF
:00410B3B 85C9                    test ecx, ecx
:00410B3D 0F84E4000000            je 00410C27
:00410B43 8B4587                  mov eax, dword ptr [ebp-79]
:00410B46 25FF000000              and eax, 000000FF
:00410B4B 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00410B4C B90A000000              mov ecx, 0000000A
:00410B51 F7F9                    idiv ecx
:00410B53 83C030                  add eax, 00000030
:00410B56 8845B4                  mov byte ptr [ebp-4C], al
:00410B59 8B4587                  mov eax, dword ptr [ebp-79]
:00410B5C 25FF000000              and eax, 000000FF
:00410B61 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00410B62 B90A000000              mov ecx, 0000000A
:00410B67 F7F9                    idiv ecx
:00410B69 83C230                  add edx, 00000030
:00410B6C 8855B5                  mov byte ptr [ebp-4B], dl
:00410B6F C645B600                mov [ebp-4A], 00
:00410B73 8B5583                  mov edx, dword ptr [ebp-7D]
:00410B76 81E2FF000000            and edx, 000000FF
:00410B7C 33C0                    xor eax, eax
:00410B7E 83FA4E                  cmp edx, 0000004E
:00410B81 0F9EC0                  setle al
:00410B84 83C013                  add eax, 00000013
:00410B87 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:00410B8D 8B4D81                  mov ecx, dword ptr [ebp-7F]
:00410B90 81E1FF000000            and ecx, 000000FF
:00410B96 83F963                  cmp ecx, 00000063
:00410B99 7311                    jnb 00410BAC
:00410B9B 8B5581                  mov edx, dword ptr [ebp-7F]
:00410B9E 81E2FF000000            and edx, 000000FF
:00410BA4 899574FFFFFF            mov dword ptr [ebp+FFFFFF74], edx
:00410BAA EB0A                    jmp 00410BB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410B99(C)
|
:00410BAC C78574FFFFFF00000000    mov dword ptr [ebp+FFFFFF74], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410BAA(U)
|
:00410BB6 8D4588                  lea eax, dword ptr [ebp-78]
:00410BB9 50                      push eax
:00410BBA 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:00410BC0 51                      push ecx
:00410BC1 8D55B4                  lea edx, dword ptr [ebp-4C]
:00410BC4 52                      push edx
:00410BC5 8B4586                  mov eax, dword ptr [ebp-7A]
:00410BC8 25FF000000              and eax, 000000FF
:00410BCD 50                      push eax
:00410BCE 8B4D85                  mov ecx, dword ptr [ebp-7B]
:00410BD1 81E1FF000000            and ecx, 000000FF
:00410BD7 51                      push ecx
:00410BD8 8B5584                  mov edx, dword ptr [ebp-7C]
:00410BDB 81E2FF000000            and edx, 000000FF
:00410BE1 52                      push edx
:00410BE2 8B4583                  mov eax, dword ptr [ebp-7D]
:00410BE5 25FF000000              and eax, 000000FF
:00410BEA 50                      push eax
:00410BEB 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:00410BF1 51                      push ecx
:00410BF2 8B55CC                  mov edx, dword ptr [ebp-34]
:00410BF5 83C201                  add edx, 00000001
:00410BF8 52                      push edx

* Possible StringData Ref from Data Obj ->"NO:%2d %d%02d/%02d/%02d%3d:%2s "
                                        ->"Lv.%2d %s"
                                  |
:00410BF9 68A0654700              push 004765A0
:00410BFE 8B45CC                  mov eax, dword ptr [ebp-34]
:00410C01 69C0C8000000            imul eax, 000000C8
:00410C07 05084C4800              add eax, 00484C08
:00410C0C 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00410C0D FF1500874B00            Call dword ptr [004B8700]
:00410C13 83C42C                  add esp, 0000002C
:00410C16 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00410C19 C6440DC001              mov [ebp+ecx-40], 01
:00410C1E C745BC01000000          mov [ebp-44], 00000001
:00410C25 EB26                    jmp 00410C4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410B3D(C)
|
:00410C27 8B55CC                  mov edx, dword ptr [ebp-34]
:00410C2A 83C201                  add edx, 00000001
:00410C2D 52                      push edx

* Possible StringData Ref from Data Obj ->"NO:%2d ϥxs"
                                  |
:00410C2E A184654700              mov eax, dword ptr [00476584]
:00410C33 50                      push eax
:00410C34 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00410C37 69C9C8000000            imul ecx, 000000C8
:00410C3D 81C1084C4800            add ecx, 00484C08
:00410C43 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00410C44 FF1500874B00            Call dword ptr [004B8700]
:00410C4A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410C25(U)
|
:00410C4D E97BFEFFFF              jmp 00410ACD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410ADA(C)
|
:00410C52 8B55BC                  mov edx, dword ptr [ebp-44]
:00410C55 899578FFFFFF            mov dword ptr [ebp+FFFFFF78], edx
:00410C5B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00410C62 8D4DD0                  lea ecx, dword ptr [ebp-30]
:00410C65 E8D4F5FFFF              call 0041023E
:00410C6A 8B8578FFFFFF            mov eax, dword ptr [ebp+FFFFFF78]
:00410C70 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00410C73 64890D00000000          mov dword ptr fs:[00000000], ecx
:00410C7A 8BE5                    mov esp, ebp
:00410C7C 5D                      pop ebp
:00410C7D C3                      ret



* Referenced by a CALL at Addresses:
|:00410AF6   , :00410D85   , :00410EF3   , :0041113B   , :004111F4   
|:0041160A   , :00411912   , :00411975   , :0041199B   
|
:00410C7E 55                      push ebp
:00410C7F 8BEC                    mov ebp, esp
:00410C81 81EC04010000            sub esp, 00000104
:00410C87 57                      push edi
:00410C88 A1CC654700              mov eax, dword ptr [004765CC]
:00410C8D 898500FFFFFF            mov dword ptr [ebp+FFFFFF00], eax
:00410C93 8B0DD0654700            mov ecx, dword ptr [004765D0]
:00410C99 898D04FFFFFF            mov dword ptr [ebp+FFFFFF04], ecx
:00410C9F 668B15D4654700          mov dx, word ptr [004765D4]
:00410CA6 66899508FFFFFF          mov word ptr [ebp+FFFFFF08], dx
:00410CAD B93D000000              mov ecx, 0000003D
:00410CB2 33C0                    xor eax, eax
:00410CB4 8DBD0AFFFFFF            lea edi, dword ptr [ebp+FFFFFF0A]
:00410CBA F3                      repz
:00410CBB AB                      stosd
:00410CBC 66AB                    stosw
:00410CBE 8B450C                  mov eax, dword ptr [ebp+0C]
:00410CC1 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00410CC3 B90A000000              mov ecx, 0000000A
:00410CC8 F7F1                    div ecx
:00410CCA 83C030                  add eax, 00000030
:00410CCD 888502FFFFFF            mov byte ptr [ebp+FFFFFF02], al
:00410CD3 8B450C                  mov eax, dword ptr [ebp+0C]
:00410CD6 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00410CD8 B90A000000              mov ecx, 0000000A
:00410CDD F7F1                    div ecx
:00410CDF 83C230                  add edx, 00000030
:00410CE2 889503FFFFFF            mov byte ptr [ebp+FFFFFF03], dl
:00410CE8 8B5510                  mov edx, dword ptr [ebp+10]
:00410CEB 8995FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], edx
:00410CF1 83BDFCFEFFFF01          cmp dword ptr [ebp+FFFFFEFC], 00000001
:00410CF8 7414                    je 00410D0E
:00410CFA 83BDFCFEFFFF02          cmp dword ptr [ebp+FFFFFEFC], 00000002
:00410D01 7414                    je 00410D17
:00410D03 83BDFCFEFFFF03          cmp dword ptr [ebp+FFFFFEFC], 00000003
:00410D0A 7414                    je 00410D20
:00410D0C EB1B                    jmp 00410D29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410CF8(C)
|
:00410D0E C68504FFFFFF45          mov byte ptr [ebp+FFFFFF04], 45
:00410D15 EB19                    jmp 00410D30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D01(C)
|
:00410D17 C68504FFFFFF53          mov byte ptr [ebp+FFFFFF04], 53
:00410D1E EB10                    jmp 00410D30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D0A(C)
|
:00410D20 C68504FFFFFF43          mov byte ptr [ebp+FFFFFF04], 43
:00410D27 EB07                    jmp 00410D30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D0C(U)
|
:00410D29 C68504FFFFFF44          mov byte ptr [ebp+FFFFFF04], 44

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410D15(U), :00410D1E(U), :00410D27(U)
|
:00410D30 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:00410D36 50                      push eax
:00410D37 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410D3A 51                      push ecx
:00410D3B E89F180500              call 004625DF
:00410D40 83C408                  add esp, 00000008
:00410D43 5F                      pop edi
:00410D44 8BE5                    mov esp, ebp
:00410D46 5D                      pop ebp
:00410D47 C3                      ret



* Referenced by a CALL at Address:
|:00410A75   
|
:00410D48 55                      push ebp
:00410D49 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00410D4B 6AFF                    push FFFFFFFF
:00410D4D 686F384700              push 0047386F
:00410D52 64A100000000            mov eax, dword ptr fs:[00000000]
:00410D58 50                      push eax
:00410D59 64892500000000          mov dword ptr fs:[00000000], esp
:00410D60 81EC44020000            sub esp, 00000244
:00410D66 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410D6C E8CF6AFFFF              call 00407840
:00410D71 C745FC00000000          mov [ebp-04], 00000000
:00410D78 6A00                    push 00000000
:00410D7A 8B4508                  mov eax, dword ptr [ebp+08]
:00410D7D 50                      push eax
:00410D7E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00410D84 51                      push ecx
:00410D85 E8F4FEFFFF              call 00410C7E
:00410D8A 83C40C                  add esp, 0000000C
:00410D8D 6A00                    push 00000000
:00410D8F 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:00410D95 52                      push edx
:00410D96 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410D9C E8B0F4FFFF              call 00410251
:00410DA1 85C0                    test eax, eax
:00410DA3 7527                    jne 00410DCC
:00410DA5 C785C4FDFFFF00000000    mov dword ptr [ebp+FFFFFDC4], 00000000
:00410DAF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00410DB6 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410DBC E87DF4FFFF              call 0041023E
:00410DC1 8B85C4FDFFFF            mov eax, dword ptr [ebp+FFFFFDC4]
:00410DC7 E908050000              jmp 004112D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410DA3(C)
|
:00410DCC 6A23                    push 00000023
:00410DCE A1004C4800              mov eax, dword ptr [00484C00]
:00410DD3 50                      push eax
:00410DD4 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410DDA E8B2F6FFFF              call 00410491
:00410DDF 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410DE5 E822F8FFFF              call 0041060C
:00410DEA 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00410DF0 33D2                    xor edx, edx
:00410DF2 8A11                    mov dl, byte ptr [ecx]
:00410DF4 85D2                    test edx, edx
:00410DF6 7527                    jne 00410E1F
:00410DF8 C785C0FDFFFF00000000    mov dword ptr [ebp+FFFFFDC0], 00000000
:00410E02 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00410E09 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410E0F E82AF4FFFF              call 0041023E
:00410E14 8B85C0FDFFFF            mov eax, dword ptr [ebp+FFFFFDC0]
:00410E1A E9B5040000              jmp 004112D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410DF6(C)
|
:00410E1F A1004C4800              mov eax, dword ptr [00484C00]
:00410E24 33C9                    xor ecx, ecx
:00410E26 8A08                    mov cl, byte ptr [eax]
:00410E28 83F901                  cmp ecx, 00000001
:00410E2B 7434                    je 00410E61

* Possible StringData Ref from Data Obj ->"ӸƤϥΤFC"
                                  |
:00410E2D 68D8654700              push 004765D8
:00410E32 E82E290500              call 00463765
:00410E37 83C404                  add esp, 00000004
:00410E3A C785BCFDFFFF00000000    mov dword ptr [ebp+FFFFFDBC], 00000000
:00410E44 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00410E4B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410E51 E8E8F3FFFF              call 0041023E
:00410E56 8B85BCFDFFFF            mov eax, dword ptr [ebp+FFFFFDBC]
:00410E5C E973040000              jmp 004112D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410E2B(C)
|
:00410E61 8B5508                  mov edx, dword ptr [ebp+08]
:00410E64 8915D8534800            mov dword ptr [004853D8], edx
:00410E6A 8B4508                  mov eax, dword ptr [ebp+08]
:00410E6D 69C0C8000000            imul eax, 000000C8
:00410E73 05084C4800              add eax, 00484C08
:00410E78 50                      push eax

* Possible StringData Ref from Data Obj ->"Ū%sAiHܡH"
                                  |
:00410E79 68EC654700              push 004765EC
:00410E7E 8D8DE0FDFFFF            lea ecx, dword ptr [ebp+FFFFFDE0]
:00410E84 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00410E85 FF1500874B00            Call dword ptr [004B8700]
:00410E8B 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Ū"
                                  |
:00410E8E 6800664700              push 00476600
:00410E93 8D95E0FDFFFF            lea edx, dword ptr [ebp+FFFFFDE0]
:00410E99 52                      push edx
:00410E9A E891270500              call 00463630
:00410E9F 83C408                  add esp, 00000008
:00410EA2 A3DC534800              mov dword ptr [004853DC], eax
:00410EA7 833DDC53480000          cmp dword ptr [004853DC], 00000000
:00410EAE 7527                    jne 00410ED7
:00410EB0 C785B8FDFFFF00000000    mov dword ptr [ebp+FFFFFDB8], 00000000
:00410EBA C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00410EC1 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410EC7 E872F3FFFF              call 0041023E
:00410ECC 8B85B8FDFFFF            mov eax, dword ptr [ebp+FFFFFDB8]
:00410ED2 E9FD030000              jmp 004112D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410EAE(C)
|
:00410ED7 B9A0574800              mov ecx, 004857A0
:00410EDC E80A480000              call 004156EB
:00410EE1 E8E3010100              call 004210C9
:00410EE6 6A00                    push 00000000
:00410EE8 8B4508                  mov eax, dword ptr [ebp+08]
:00410EEB 50                      push eax
:00410EEC 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00410EF2 51                      push ecx
:00410EF3 E886FDFFFF              call 00410C7E
:00410EF8 83C40C                  add esp, 0000000C
:00410EFB 6A00                    push 00000000
:00410EFD 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:00410F03 52                      push edx
:00410F04 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410F0A E842F3FFFF              call 00410251
:00410F0F 68DA8E0000              push 00008EDA
:00410F14 A1004C4800              mov eax, dword ptr [00484C00]
:00410F19 50                      push eax
:00410F1A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410F20 E86CF5FFFF              call 00410491
:00410F25 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:00410F2B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410F31 E8D6F6FFFF              call 0041060C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:5000, "iOl"
                                  |
:00410F36 6800500000              push 00005000
:00410F3B 6A00                    push 00000000
:00410F3D B960DF4A00              mov ecx, 004ADF60
:00410F42 E857260000              call 0041359E
:00410F47 50                      push eax
:00410F48 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00410F4E 51                      push ecx
:00410F4F E8DB180500              call 0046282F
:00410F54 83C40C                  add esp, 0000000C
:00410F57 8B15004C4800            mov edx, dword ptr [00484C00]
:00410F5D 33C0                    xor eax, eax
:00410F5F 8A02                    mov al, byte ptr [edx]
:00410F61 83F801                  cmp eax, 00000001
:00410F64 7434                    je 00410F9A

* Possible StringData Ref from Data Obj ->"ӸƤϥΤFC"
                                  |
:00410F66 6808664700              push 00476608
:00410F6B E8F5270500              call 00463765
:00410F70 83C404                  add esp, 00000004
:00410F73 C785B4FDFFFF00000000    mov dword ptr [ebp+FFFFFDB4], 00000000
:00410F7D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00410F84 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410F8A E8AFF2FFFF              call 0041023E
:00410F8F 8B85B4FDFFFF            mov eax, dword ptr [ebp+FFFFFDB4]
:00410F95 E93A030000              jmp 004112D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410F64(C)
|
:00410F9A 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00410FA0 83C108                  add ecx, 00000008
:00410FA3 51                      push ecx
:00410FA4 68A8EF4800              push 0048EFA8
:00410FA9 E831160500              call 004625DF
:00410FAE 83C408                  add esp, 00000008
:00410FB1 8B15004C4800            mov edx, dword ptr [00484C00]
:00410FB7 83C223                  add edx, 00000023
:00410FBA 52                      push edx
:00410FBB B9C8E24A00              mov ecx, 004AE2C8
:00410FC0 E8DE51FFFF              call 004061A3
:00410FC5 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:00410FCB C785DCFDFFFF00000000    mov dword ptr [ebp+FFFFFDDC], 00000000
:00410FD5 C705347A4700FFFF0000    mov dword ptr [00477A34], 0000FFFF
:00410FDF A1004C4800              mov eax, dword ptr [00484C00]
:00410FE4 0553010000              add eax, 00000153
:00410FE9 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:00410FEF C785D0FDFFFF18DA4A00    mov dword ptr [ebp+FFFFFDD0], 004ADA18
:00410FF9 C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:00411003 EB1E                    jmp 00411023

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041104D(U)
|
:00411005 8B8DD4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD4]
:0041100B 83C101                  add ecx, 00000001
:0041100E 898DD4FDFFFF            mov dword ptr [ebp+FFFFFDD4], ecx
:00411014 8B95D0FDFFFF            mov edx, dword ptr [ebp+FFFFFDD0]
:0041101A 83C20A                  add edx, 0000000A
:0041101D 8995D0FDFFFF            mov dword ptr [ebp+FFFFFDD0], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411003(U)
|
:00411023 83BDD4FDFFFF02          cmp dword ptr [ebp+FFFFFDD4], 00000002
:0041102A 7323                    jnb 0041104F
:0041102C 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00411032 50                      push eax
:00411033 8B8DD0FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD0]
:00411039 E8C85AFFFF              call 00406B06
:0041103E 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00411044 83C109                  add ecx, 00000009
:00411047 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:0041104D EBB6                    jmp 00411005

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041102A(C)
|
:0041104F C785D8FDFFFFF8A84800    mov dword ptr [ebp+FFFFFDD8], 0048A8F8
:00411059 C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:00411063 EB2D                    jmp 00411092

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004110B0(U)
|
:00411065 8B95D4FDFFFF            mov edx, dword ptr [ebp+FFFFFDD4]
:0041106B 83C201                  add edx, 00000001
:0041106E 8995D4FDFFFF            mov dword ptr [ebp+FFFFFDD4], edx
:00411074 8B85D8FDFFFF            mov eax, dword ptr [ebp+FFFFFDD8]
:0041107A 83C040                  add eax, 00000040
:0041107D 8985D8FDFFFF            mov dword ptr [ebp+FFFFFDD8], eax
:00411083 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00411089 83C124                  add ecx, 00000024
:0041108C 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411063(U)
|
:00411092 81BDD4FDFFFF80000000    cmp dword ptr [ebp+FFFFFDD4], 00000080
:0041109C 7314                    jnb 004110B2
:0041109E 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:004110A4 52                      push edx
:004110A5 8B8DD8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD8]
:004110AB E872340100              call 00424522
:004110B0 EBB3                    jmp 00411065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041109C(C)
|
:004110B2 A1004C4800              mov eax, dword ptr [00484C00]
:004110B7 0565130000              add eax, 00001365
:004110BC 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:004110C2 C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:004110CC EB0F                    jmp 004110DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041110A(U)
|
:004110CE 8B8DD4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD4]
:004110D4 83C101                  add ecx, 00000001
:004110D7 898DD4FDFFFF            mov dword ptr [ebp+FFFFFDD4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004110CC(U)
|
:004110DD 81BDD4FDFFFF85020000    cmp dword ptr [ebp+FFFFFDD4], 00000285
:004110E7 7323                    jnb 0041110C
:004110E9 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:004110EF 52                      push edx
:004110F0 8B8DD4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD4]
:004110F6 6BC970                  imul ecx, 00000070
:004110F9 81C198224900            add ecx, 00492298
:004110FF E87826FFFF              call 0040377C
:00411104 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0041110A EBC2                    jmp 004110CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004110E7(C)
|
:0041110C 6A00                    push 00000000
:0041110E A1700E4B00              mov eax, dword ptr [004B0E70]
:00411113 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00411114 FF15E4864B00            Call dword ptr [004B86E4]
:0041111A B9500E4B00              mov ecx, 004B0E50
:0041111F E893340500              call 004645B7
:00411124 6A19                    push 00000019
:00411126 E84D540100              call 00426578
:0041112B 83C404                  add esp, 00000004
:0041112E 6A01                    push 00000001
:00411130 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411133 51                      push ecx
:00411134 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:0041113A 52                      push edx
:0041113B E83EFBFFFF              call 00410C7E
:00411140 83C40C                  add esp, 0000000C
:00411143 8D85F0FEFFFF            lea eax, dword ptr [ebp+FFFFFEF0]
:00411149 50                      push eax
:0041114A B9F8134800              mov ecx, 004813F8
:0041114F E880D3FFFF              call 0040E4D4
:00411154 C605305A4A0001          mov byte ptr [004A5A30], 01
:0041115B B9880D4B00              mov ecx, 004B0D88
:00411160 E8E3090500              call 00461B48
:00411165 B9C8E24A00              mov ecx, 004AE2C8
:0041116A E831160000              call 004127A0
:0041116F 25FF000000              and eax, 000000FF
:00411174 8985CCFDFFFF            mov dword ptr [ebp+FFFFFDCC], eax
:0041117A B9800D4B00              mov ecx, 004B0D80
:0041117F E8FD090500              call 00461B81
:00411184 81BDCCFDFFFFFFFF0000    cmp dword ptr [ebp+FFFFFDCC], 0000FFFF
:0041118E 7411                    je 004111A1
:00411190 8B8DCCFDFFFF            mov ecx, dword ptr [ebp+FFFFFDCC]
:00411196 51                      push ecx
:00411197 B9800D4B00              mov ecx, 004B0D80
:0041119C E8230A0500              call 00461BC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041118E(C)
|
:004111A1 C705F864470001000000    mov dword ptr [004764F8], 00000001
:004111AB 8B153C8B4A00            mov edx, dword ptr [004A8B3C]
:004111B1 83CA08                  or edx, 00000008
:004111B4 89153C8B4A00            mov dword ptr [004A8B3C], edx
:004111BA C705E853480000000000    mov dword ptr [004853E8], 00000000
:004111C4 E849570000              call 00416912
:004111C9 85C0                    test eax, eax
:004111CB 0F84A0000000            je 00411271
:004111D1 B9800D4B00              mov ecx, 004B0D80
:004111D6 E8A6090500              call 00461B81
:004111DB 6A61                    push 00000061
:004111DD B9800D4B00              mov ecx, 004B0D80
:004111E2 E8DD090500              call 00461BC4

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004111E7 6A02                    push 00000002
:004111E9 8B4508                  mov eax, dword ptr [ebp+08]
:004111EC 50                      push eax
:004111ED 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004111F3 51                      push ecx
:004111F4 E885FAFFFF              call 00410C7E
:004111F9 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004111FC 6A02                    push 00000002
:004111FE 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:00411204 52                      push edx
:00411205 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041120B E841F0FFFF              call 00410251
:00411210 8985C8FDFFFF            mov dword ptr [ebp+FFFFFDC8], eax
:00411216 83BDC8FDFFFF00          cmp dword ptr [ebp+FFFFFDC8], 00000000
:0041121D 751B                    jne 0041123A
:0041121F 8D85F0FEFFFF            lea eax, dword ptr [ebp+FFFFFEF0]
:00411225 50                      push eax
:00411226 E889EFFFFF              call 004101B4
:0041122B 83C404                  add esp, 00000004
:0041122E 50                      push eax
:0041122F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00411235 E8ABF1FFFF              call 004103E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041121D(C)
|
:0041123A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00411240 51                      push ecx
:00411241 B9180A4B00              mov ecx, 004B0A18
:00411246 E880580400              call 00456ACB
:0041124B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00411251 E8B6F3FFFF              call 0041060C
:00411256 C705E853480001000000    mov dword ptr [004853E8], 00000001
:00411260 E8151A0000              call 00412C7A

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00411265 C7053C7A4700FF000000    mov dword ptr [00477A3C], 000000FF
:0041126F EB24                    jmp 00411295

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111CB(C)
|
:00411271 B9C8E24A00              mov ecx, 004AE2C8
:00411276 E875EA0100              call 0042FCF0
:0041127B 25FF000000              and eax, 000000FF
:00411280 50                      push eax
:00411281 B9880D4B00              mov ecx, 004B0D88
:00411286 E8A2080500              call 00461B2D

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041128B C7053C7A4700FF000000    mov dword ptr [00477A3C], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041126F(U)
|
:00411295 68A8EF4800              push 0048EFA8
:0041129A E832380500              call 00464AD1
:0041129F 83C404                  add esp, 00000004
:004112A2 6A01                    push 00000001
:004112A4 8A5508                  mov dl, byte ptr [ebp+08]
:004112A7 52                      push edx
:004112A8 B9B0114800              mov ecx, 004811B0
:004112AD E8123AFFFF              call 00404CC4
:004112B2 C785B0FDFFFF01000000    mov dword ptr [ebp+FFFFFDB0], 00000001
:004112BC C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004112C3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004112C9 E870EFFFFF              call 0041023E
:004112CE 8B85B0FDFFFF            mov eax, dword ptr [ebp+FFFFFDB0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410DC7(U), :00410E1A(U), :00410E5C(U), :00410ED2(U), :00410F95(U)
|
:004112D4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004112D7 64890D00000000          mov dword ptr fs:[00000000], ecx
:004112DE 8BE5                    mov esp, ebp
:004112E0 5D                      pop ebp
:004112E1 C3                      ret


:004112E2 55                      push ebp
:004112E3 8BEC                    mov ebp, esp
:004112E5 83EC14                  sub esp, 00000014

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:004112E8 6802040000              push 00000402
:004112ED 8B4508                  mov eax, dword ptr [ebp+08]
:004112F0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004112F1 FF15AC864B00            Call dword ptr [004B86AC]
:004112F7 8945FC                  mov dword ptr [ebp-04], eax
:004112FA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004112FD 894DF4                  mov dword ptr [ebp-0C], ecx
:00411300 817DF410010000          cmp dword ptr [ebp-0C], 00000110
:00411307 740E                    je 00411317
:00411309 817DF411010000          cmp dword ptr [ebp-0C], 00000111
:00411310 7416                    je 00411328
:00411312 E951010000              jmp 00411468

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411307(C)
|
:00411317 8B5508                  mov edx, dword ptr [ebp+08]
:0041131A 52                      push edx
:0041131B E857010000              call 00411477
:00411320 83C404                  add esp, 00000004
:00411323 E944010000              jmp 0041146C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411310(C)
|
:00411328 8B4510                  mov eax, dword ptr [ebp+10]
:0041132B 25FFFF0000              and eax, 0000FFFF
:00411330 83F802                  cmp eax, 00000002
:00411333 7527                    jne 0041135C
:00411335 6A01                    push 00000001
:00411337 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041133A 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041133B FF15B0874B00            Call dword ptr [004B87B0]
:00411341 C705D853480000000000    mov dword ptr [004853D8], 00000000
:0041134B C705DC53480000000000    mov dword ptr [004853DC], 00000000
:00411355 33C0                    xor eax, eax
:00411357 E915010000              jmp 00411471

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411333(C)
|
:0041135C 8B5510                  mov edx, dword ptr [ebp+10]
:0041135F 81E2FFFF0000            and edx, 0000FFFF
:00411365 81FAA9040000            cmp edx, 000004A9
:0041136B 7519                    jne 00411386
:0041136D A1E0534800              mov eax, dword ptr [004853E0]
:00411372 F7D8                    neg eax
:00411374 1BC0                    sbb eax, eax
:00411376 24F6                    and al, F6
:00411378 0596000000              add eax, 00000096
:0041137D 50                      push eax
:0041137E E8DF250500              call 00463962
:00411383 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041136B(C)
|
:00411386 8B4D10                  mov ecx, dword ptr [ebp+10]
:00411389 81E1FFFF0000            and ecx, 0000FFFF
:0041138F 83F901                  cmp ecx, 00000001
:00411392 754A                    jne 004113DE
:00411394 6A01                    push 00000001
:00411396 8B5508                  mov edx, dword ptr [ebp+08]
:00411399 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041139A FF15B0874B00            Call dword ptr [004B87B0]
:004113A0 6A00                    push 00000000
:004113A2 6A00                    push 00000000
:004113A4 6888010000              push 00000188
:004113A9 8B45FC                  mov eax, dword ptr [ebp-04]
:004113AC 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004113AD FF15D8864B00            Call dword ptr [004B86D8]
:004113B3 668945F8                mov word ptr [ebp-08], ax
:004113B7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004113BA 81E1FFFF0000            and ecx, 0000FFFF
:004113C0 83F90A                  cmp ecx, 0000000A
:004113C3 7D19                    jge 004113DE
:004113C5 8B55F8                  mov edx, dword ptr [ebp-08]
:004113C8 81E2FFFF0000            and edx, 0000FFFF
:004113CE 8915D8534800            mov dword ptr [004853D8], edx
:004113D4 C705DC53480001000000    mov dword ptr [004853DC], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411392(C), :004113C3(C)
|
:004113DE 8B4510                  mov eax, dword ptr [ebp+10]
:004113E1 25FFFF0000              and eax, 0000FFFF
:004113E6 8945F0                  mov dword ptr [ebp-10], eax
:004113E9 817DF002040000          cmp dword ptr [ebp-10], 00000402
:004113F0 7402                    je 004113F4
:004113F2 EB6E                    jmp 00411462

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004113F0(C)
|
:004113F4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004113F7 C1E910                  shr ecx, 10
:004113FA 81E1FFFF0000            and ecx, 0000FFFF
:00411400 81E1FFFF0000            and ecx, 0000FFFF
:00411406 894DEC                  mov dword ptr [ebp-14], ecx
:00411409 837DEC01                cmp dword ptr [ebp-14], 00000001
:0041140D 7451                    je 00411460
:0041140F 837DEC02                cmp dword ptr [ebp-14], 00000002
:00411413 7402                    je 00411417
:00411415 EB49                    jmp 00411460

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411413(C)
|
:00411417 6A00                    push 00000000
:00411419 6A00                    push 00000000
:0041141B 6888010000              push 00000188
:00411420 8B55FC                  mov edx, dword ptr [ebp-04]
:00411423 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00411424 FF15D8864B00            Call dword ptr [004B86D8]
:0041142A 668945F8                mov word ptr [ebp-08], ax
:0041142E 8B45F8                  mov eax, dword ptr [ebp-08]
:00411431 25FFFF0000              and eax, 0000FFFF
:00411436 83F80A                  cmp eax, 0000000A
:00411439 7D25                    jge 00411460
:0041143B 6A01                    push 00000001
:0041143D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411440 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00411441 FF15B0874B00            Call dword ptr [004B87B0]
:00411447 8B55F8                  mov edx, dword ptr [ebp-08]
:0041144A 81E2FFFF0000            and edx, 0000FFFF
:00411450 8915D8534800            mov dword ptr [004853D8], edx
:00411456 C705DC53480001000000    mov dword ptr [004853DC], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041140D(C), :00411415(U), :00411439(C)
|
:00411460 EB04                    jmp 00411466

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004113F2(U)
|
:00411462 33C0                    xor eax, eax
:00411464 EB0B                    jmp 00411471

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411460(U)
|
:00411466 EB04                    jmp 0041146C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411312(U)
|
:00411468 33C0                    xor eax, eax
:0041146A EB05                    jmp 00411471

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411323(U), :00411466(U)
|
:0041146C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411357(U), :00411464(U), :0041146A(U)
|
:00411471 8BE5                    mov esp, ebp
:00411473 5D                      pop ebp
:00411474 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0041131B   
|
:00411477 55                      push ebp
:00411478 8BEC                    mov ebp, esp
:0041147A 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0041147D 6802040000              push 00000402
:00411482 8B4508                  mov eax, dword ptr [ebp+08]
:00411485 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00411486 FF15AC864B00            Call dword ptr [004B86AC]
:0041148C 8945FC                  mov dword ptr [ebp-04], eax
:0041148F 6A00                    push 00000000
:00411491 6A00                    push 00000000
:00411493 6884010000              push 00000184
:00411498 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041149B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041149C FF15D8864B00            Call dword ptr [004B86D8]
:004114A2 C745F800000000          mov [ebp-08], 00000000
:004114A9 EB09                    jmp 004114B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004114F1(U)
|
:004114AB 8B55F8                  mov edx, dword ptr [ebp-08]
:004114AE 83C201                  add edx, 00000001
:004114B1 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004114A9(U)
|
:004114B4 837DF80A                cmp dword ptr [ebp-08], 0000000A
:004114B8 7339                    jnb 004114F3
:004114BA 8B45F8                  mov eax, dword ptr [ebp-08]
:004114BD 69C0C8000000            imul eax, 000000C8
:004114C3 05084C4800              add eax, 00484C08
:004114C8 50                      push eax
:004114C9 6A00                    push 00000000
:004114CB 6880010000              push 00000180
:004114D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004114D3 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004114D4 FF15D8864B00            Call dword ptr [004B86D8]
:004114DA 8B55F8                  mov edx, dword ptr [ebp-08]
:004114DD 52                      push edx
:004114DE 8B45F8                  mov eax, dword ptr [ebp-08]
:004114E1 50                      push eax
:004114E2 689A010000              push 0000019A
:004114E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004114EA 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004114EB FF15D8864B00            Call dword ptr [004B86D8]
:004114F1 EBB8                    jmp 004114AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004114B8(C)
|
:004114F3 8BE5                    mov esp, ebp
:004114F5 5D                      pop ebp
:004114F6 C3                      ret



* Referenced by a CALL at Address:
|:00463A17   
|
:004114F7 55                      push ebp
:004114F8 8BEC                    mov ebp, esp
:004114FA 83EC08                  sub esp, 00000008
:004114FD C745FC00000000          mov [ebp-04], 00000000
:00411504 E809540000              call 00416912
:00411509 85C0                    test eax, eax
:0041150B 7407                    je 00411514
:0041150D C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041150B(C)
|
:00411514 E8EAF4FFFF              call 00410A03
:00411519 8945F8                  mov dword ptr [ebp-08], eax
:0041151C 837DF800                cmp dword ptr [ebp-08], 00000000
:00411520 7417                    je 00411539
:00411522 837DFC00                cmp dword ptr [ebp-04], 00000000
:00411526 7411                    je 00411539

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00411528 6A05                    push 00000005
:0041152A B9180A4B00              mov ecx, 004B0A18
:0041152F E80C130000              call 00412840
:00411534 E8F5750500              call 00468B2E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411520(C), :00411526(C)
|
:00411539 8B45F8                  mov eax, dword ptr [ebp-08]
:0041153C 8BE5                    mov esp, ebp
:0041153E 5D                      pop ebp
:0041153F C3                      ret



* Referenced by a CALL at Addresses:
|:00416B7E   , :00463A0D   
|
:00411540 55                      push ebp
:00411541 8BEC                    mov ebp, esp
:00411543 C705E053480001000000    mov dword ptr [004853E0], 00000001
:0041154D B9000D4B00              mov ecx, 004B0D00
:00411552 E829130000              call 00412880
:00411557 85C0                    test eax, eax
:00411559 7404                    je 0041155F
:0041155B 33C0                    xor eax, eax
:0041155D EB67                    jmp 004115C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411559(C)
|
:0041155F E8255A0100              call 00426F89
:00411564 83F801                  cmp eax, 00000001
:00411567 7404                    je 0041156D
:00411569 33C0                    xor eax, eax
:0041156B EB59                    jmp 004115C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411567(C)
|
:0041156D E81EF5FFFF              call 00410A90
:00411572 C705DC53480000000000    mov dword ptr [004853DC], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004115BF(U)
|
:0041157C 6A00                    push 00000000
:0041157E 68E2124100              push 004112E2
:00411583 A1380E4B00              mov eax, dword ptr [004B0E38]
:00411588 50                      push eax

* Possible Reference to Dialog: DialogID_00CF 
                                  |
:00411589 68CF000000              push 000000CF
:0041158E 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00411594 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00411595 FF1520874B00            Call dword ptr [004B8720]
:0041159B 833DDC53480000          cmp dword ptr [004853DC], 00000000
:004115A2 7417                    je 004115BB
:004115A4 8B15D8534800            mov edx, dword ptr [004853D8]
:004115AA 52                      push edx
:004115AB E818000000              call 004115C8
:004115B0 83C404                  add esp, 00000004
:004115B3 85C0                    test eax, eax
:004115B5 7402                    je 004115B9
:004115B7 EB08                    jmp 004115C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004115B5(C)
|
:004115B9 EB04                    jmp 004115BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004115A2(C)
|
:004115BB 33C0                    xor eax, eax
:004115BD EB07                    jmp 004115C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004115B9(U)
|
:004115BF EBBB                    jmp 0041157C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004115B7(U)
|
:004115C1 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041155D(U), :0041156B(U), :004115BD(U)
|
:004115C6 5D                      pop ebp
:004115C7 C3                      ret



* Referenced by a CALL at Address:
|:004115AB   
|
:004115C8 55                      push ebp
:004115C9 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004115CB 6AFF                    push FFFFFFFF
:004115CD 6882384700              push 00473882
:004115D2 64A100000000            mov eax, dword ptr fs:[00000000]
:004115D8 50                      push eax
:004115D9 64892500000000          mov dword ptr fs:[00000000], esp
:004115E0 81EC9C020000            sub esp, 0000029C
:004115E6 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004115E9 E85262FFFF              call 00407840
:004115EE C745FC00000000          mov [ebp-04], 00000000
:004115F5 8B4508                  mov eax, dword ptr [ebp+08]
:004115F8 A3D8534800              mov dword ptr [004853D8], eax
:004115FD 6A00                    push 00000000
:004115FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411602 51                      push ecx
:00411603 8D95E8FEFFFF            lea edx, dword ptr [ebp+FFFFFEE8]
:00411609 52                      push edx
:0041160A E86FF6FFFF              call 00410C7E
:0041160F 83C40C                  add esp, 0000000C
:00411612 6A00                    push 00000000
:00411614 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:0041161A 50                      push eax
:0041161B 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0041161E E82EECFFFF              call 00410251
:00411623 85C0                    test eax, eax
:00411625 7524                    jne 0041164B
:00411627 C78560FDFFFF00000000    mov dword ptr [ebp+FFFFFD60], 00000000
:00411631 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00411638 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0041163B E8FEEBFFFF              call 0041023E
:00411640 8B8560FDFFFF            mov eax, dword ptr [ebp+FFFFFD60]
:00411646 E92E040000              jmp 00411A79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411625(C)
|
:0041164B 6A23                    push 00000023
:0041164D 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411653 51                      push ecx
:00411654 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00411657 E835EEFFFF              call 00410491
:0041165C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0041165F E8A8EFFFFF              call 0041060C
:00411664 8B15004C4800            mov edx, dword ptr [00484C00]
:0041166A 33C0                    xor eax, eax
:0041166C 8A02                    mov al, byte ptr [edx]
:0041166E 85C0                    test eax, eax
:00411670 7468                    je 004116DA
:00411672 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411675 69C9C8000000            imul ecx, 000000C8
:0041167B 81C1084C4800            add ecx, 00484C08
:00411681 51                      push ecx

* Possible StringData Ref from Data Obj ->"л\%sAiHܡH"
                                  |
:00411682 681C664700              push 0047661C
:00411687 8D95E0FDFFFF            lea edx, dword ptr [ebp+FFFFFDE0]
:0041168D 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0041168E FF1500874B00            Call dword ptr [004B8700]
:00411694 83C40C                  add esp, 0000000C
:00411697 6A00                    push 00000000
:00411699 8D85E0FDFFFF            lea eax, dword ptr [ebp+FFFFFDE0]
:0041169F 50                      push eax
:004116A0 E88B1F0500              call 00463630
:004116A5 83C408                  add esp, 00000008
:004116A8 A3DC534800              mov dword ptr [004853DC], eax
:004116AD 833DDC53480000          cmp dword ptr [004853DC], 00000000
:004116B4 7524                    jne 004116DA
:004116B6 C7855CFDFFFF00000000    mov dword ptr [ebp+FFFFFD5C], 00000000
:004116C0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004116C7 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004116CA E86FEBFFFF              call 0041023E
:004116CF 8B855CFDFFFF            mov eax, dword ptr [ebp+FFFFFD5C]
:004116D5 E99F030000              jmp 00411A79

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411670(C), :004116B4(C)
|
:004116DA 6A19                    push 00000019
:004116DC E8974E0100              call 00426578
:004116E1 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004116E4 68FF000000              push 000000FF
:004116E9 B9A0574800              mov ecx, 004857A0
:004116EE E84D840200              call 00439B40
:004116F3 8B0D004C4800            mov ecx, dword ptr [00484C00]
:004116F9 894DEC                  mov dword ptr [ebp-14], ecx
:004116FC 8B15004C4800            mov edx, dword ptr [00484C00]
:00411702 C60201                  mov byte ptr [edx], 01
:00411705 B998224900              mov ecx, 00492298
:0041170A E8C130FFFF              call 004047D0
:0041170F 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411715 884101                  mov byte ptr [ecx+01], al
:00411718 B918DA4A00              mov ecx, 004ADA18
:0041171D E8EEE50100              call 0042FD10
:00411722 8B15004C4800            mov edx, dword ptr [00484C00]
:00411728 884202                  mov byte ptr [edx+02], al
:0041172B 68F04B4800              push 00484BF0

* Reference To: KERNEL32.GetLocalTime, Ord:00F5h
                                  |
:00411730 FF1530854B00            Call dword ptr [004B8530]
:00411736 33C0                    xor eax, eax
:00411738 66A1F04B4800            mov ax, word ptr [00484BF0]
:0041173E 99                      cdq
:0041173F B964000000              mov ecx, 00000064
:00411744 F7F9                    idiv ecx
:00411746 A1004C4800              mov eax, dword ptr [00484C00]
:0041174B 885003                  mov byte ptr [eax+03], dl
:0041174E 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411754 8A15F24B4800            mov dl, byte ptr [00484BF2]
:0041175A 885104                  mov byte ptr [ecx+04], dl
:0041175D A1004C4800              mov eax, dword ptr [00484C00]
:00411762 8A0DF64B4800            mov cl, byte ptr [00484BF6]
:00411768 884805                  mov byte ptr [eax+05], cl
:0041176B 8B15004C4800            mov edx, dword ptr [00484C00]
:00411771 A0F84B4800              mov al, byte ptr [00484BF8]
:00411776 884206                  mov byte ptr [edx+06], al
:00411779 8B0D004C4800            mov ecx, dword ptr [00484C00]
:0041177F 8A15FA4B4800            mov dl, byte ptr [00484BFA]
:00411785 885107                  mov byte ptr [ecx+07], dl
:00411788 A1004C4800              mov eax, dword ptr [00484C00]
:0041178D 83C008                  add eax, 00000008
:00411790 8945EC                  mov dword ptr [ebp-14], eax
:00411793 E87A510000              call 00416912
:00411798 85C0                    test eax, eax
:0041179A 7434                    je 004117D0
:0041179C B9C8E24A00              mov ecx, 004AE2C8
:004117A1 E80ADCFFFF              call 0040F3B0
:004117A6 25FF000000              and eax, 000000FF
:004117AB 50                      push eax
:004117AC 8D8D68FDFFFF            lea ecx, dword ptr [ebp+FFFFFD68]
:004117B2 51                      push ecx
:004117B3 E84342FFFF              call 004059FB
:004117B8 83C408                  add esp, 00000008
:004117BB 8D9568FDFFFF            lea edx, dword ptr [ebp+FFFFFD68]
:004117C1 52                      push edx
:004117C2 8B45EC                  mov eax, dword ptr [ebp-14]
:004117C5 50                      push eax
:004117C6 E8140E0500              call 004625DF
:004117CB 83C408                  add esp, 00000008
:004117CE EB11                    jmp 004117E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041179A(C)
|
:004117D0 68A8EF4800              push 0048EFA8
:004117D5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004117D8 51                      push ecx
:004117D9 E8010E0500              call 004625DF
:004117DE 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004117CE(U)
|
:004117E1 8B15004C4800            mov edx, dword ptr [00484C00]
:004117E7 83C223                  add edx, 00000023
:004117EA 8955EC                  mov dword ptr [ebp-14], edx
:004117ED 8B45EC                  mov eax, dword ptr [ebp-14]
:004117F0 50                      push eax
:004117F1 B9C8E24A00              mov ecx, 004AE2C8
:004117F6 E84D4CFFFF              call 00406448
:004117FB 8945EC                  mov dword ptr [ebp-14], eax
:004117FE 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411804 81C153010000            add ecx, 00000153
:0041180A 894DEC                  mov dword ptr [ebp-14], ecx
:0041180D C785D0FDFFFF18DA4A00    mov dword ptr [ebp+FFFFFDD0], 004ADA18
:00411817 C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:00411821 EB1E                    jmp 00411841

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041185C(U)
|
:00411823 8B95D4FDFFFF            mov edx, dword ptr [ebp+FFFFFDD4]
:00411829 83C201                  add edx, 00000001
:0041182C 8995D4FDFFFF            mov dword ptr [ebp+FFFFFDD4], edx
:00411832 8B85D0FDFFFF            mov eax, dword ptr [ebp+FFFFFDD0]
:00411838 83C00A                  add eax, 0000000A
:0041183B 8985D0FDFFFF            mov dword ptr [ebp+FFFFFDD0], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411821(U)
|
:00411841 83BDD4FDFFFF02          cmp dword ptr [ebp+FFFFFDD4], 00000002
:00411848 7314                    jnb 0041185E
:0041184A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041184D 51                      push ecx
:0041184E 8B8DD0FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD0]
:00411854 E87753FFFF              call 00406BD0
:00411859 8945EC                  mov dword ptr [ebp-14], eax
:0041185C EBC5                    jmp 00411823

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411848(C)
|
:0041185E C785DCFDFFFFF8A84800    mov dword ptr [ebp+FFFFFDDC], 0048A8F8
:00411868 C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:00411872 EB1E                    jmp 00411892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004118B0(U)
|
:00411874 8B95D4FDFFFF            mov edx, dword ptr [ebp+FFFFFDD4]
:0041187A 83C201                  add edx, 00000001
:0041187D 8995D4FDFFFF            mov dword ptr [ebp+FFFFFDD4], edx
:00411883 8B85DCFDFFFF            mov eax, dword ptr [ebp+FFFFFDDC]
:00411889 83C040                  add eax, 00000040
:0041188C 8985DCFDFFFF            mov dword ptr [ebp+FFFFFDDC], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411872(U)
|
:00411892 81BDD4FDFFFF80000000    cmp dword ptr [ebp+FFFFFDD4], 00000080
:0041189C 7314                    jnb 004118B2
:0041189E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004118A1 51                      push ecx
:004118A2 8B8DDCFDFFFF            mov ecx, dword ptr [ebp+FFFFFDDC]
:004118A8 E8182E0100              call 004246C5
:004118AD 8945EC                  mov dword ptr [ebp-14], eax
:004118B0 EBC2                    jmp 00411874

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041189C(C)
|
:004118B2 8B15004C4800            mov edx, dword ptr [00484C00]
:004118B8 81C265130000            add edx, 00001365
:004118BE 8955EC                  mov dword ptr [ebp-14], edx
:004118C1 C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:004118CB EB0F                    jmp 004118DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411903(U)
|
:004118CD 8B85D4FDFFFF            mov eax, dword ptr [ebp+FFFFFDD4]
:004118D3 83C001                  add eax, 00000001
:004118D6 8985D4FDFFFF            mov dword ptr [ebp+FFFFFDD4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004118CB(U)
|
:004118DC 81BDD4FDFFFF85020000    cmp dword ptr [ebp+FFFFFDD4], 00000285
:004118E6 731D                    jnb 00411905
:004118E8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004118EB 51                      push ecx
:004118EC 8B8DD4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD4]
:004118F2 6BC970                  imul ecx, 00000070
:004118F5 81C198224900            add ecx, 00492298
:004118FB E8FC1BFFFF              call 004034FC
:00411900 8945EC                  mov dword ptr [ebp-14], eax
:00411903 EBC8                    jmp 004118CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004118E6(C)
|
:00411905 6A00                    push 00000000
:00411907 8B5508                  mov edx, dword ptr [ebp+08]
:0041190A 52                      push edx
:0041190B 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:00411911 50                      push eax
:00411912 E867F3FFFF              call 00410C7E
:00411917 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041191A 6A02                    push 00000002
:0041191C 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00411922 51                      push ecx
:00411923 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00411926 E826E9FFFF              call 00410251
:0041192B 8B55EC                  mov edx, dword ptr [ebp-14]
:0041192E 2B15004C4800            sub edx, dword ptr [00484C00]
:00411934 8995E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], edx
:0041193A 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00411940 50                      push eax
:00411941 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411947 51                      push ecx
:00411948 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0041194B E874ECFFFF              call 004105C4
:00411950 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:00411956 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00411959 E8AEECFFFF              call 0041060C
:0041195E 6A19                    push 00000019
:00411960 E8134C0100              call 00426578
:00411965 83C404                  add esp, 00000004
:00411968 6A01                    push 00000001
:0041196A 8B5508                  mov edx, dword ptr [ebp+08]
:0041196D 52                      push edx
:0041196E 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:00411974 50                      push eax
:00411975 E804F3FFFF              call 00410C7E
:0041197A 83C40C                  add esp, 0000000C
:0041197D 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00411983 51                      push ecx
:00411984 B9F8134800              mov ecx, 004813F8
:00411989 E876CDFFFF              call 0040E704

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041198E 6A02                    push 00000002
:00411990 8B5508                  mov edx, dword ptr [ebp+08]
:00411993 52                      push edx
:00411994 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:0041199A 50                      push eax
:0041199B E8DEF2FFFF              call 00410C7E
:004119A0 83C40C                  add esp, 0000000C
:004119A3 6A01                    push 00000001
:004119A5 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:004119AB 51                      push ecx
:004119AC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004119AF E89DE8FFFF              call 00410251
:004119B4 8985D8FDFFFF            mov dword ptr [ebp+FFFFFDD8], eax
:004119BA 83BDD8FDFFFF00          cmp dword ptr [ebp+FFFFFDD8], 00000000
:004119C1 7518                    jne 004119DB
:004119C3 8D95E8FEFFFF            lea edx, dword ptr [ebp+FFFFFEE8]
:004119C9 52                      push edx
:004119CA E8E5E7FFFF              call 004101B4
:004119CF 83C404                  add esp, 00000004
:004119D2 50                      push eax
:004119D3 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004119D6 E80AEAFFFF              call 004103E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004119C1(C)
|
:004119DB E8324F0000              call 00416912
:004119E0 85C0                    test eax, eax
:004119E2 7410                    je 004119F4
:004119E4 8D45F0                  lea eax, dword ptr [ebp-10]
:004119E7 50                      push eax
:004119E8 B9180A4B00              mov ecx, 004B0A18
:004119ED E84D4F0400              call 0045693F
:004119F2 EB29                    jmp 00411A1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004119E2(C)
|
:004119F4 B9F8134800              mov ecx, 004813F8
:004119F9 E8620E0000              call 00412860
:004119FE 898564FDFFFF            mov dword ptr [ebp+FFFFFD64], eax
:00411A04 6A1E                    push 0000001E
:00411A06 8B8D64FDFFFF            mov ecx, dword ptr [ebp+FFFFFD64]
:00411A0C 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00411A0D 6A05                    push 00000005
:00411A0F 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00411A12 E8CAEBFFFF              call 004105E1
:00411A17 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004119F2(U)
|
:00411A1D 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00411A20 E8E7EBFFFF              call 0041060C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00411A25 6A02                    push 00000002
:00411A27 8A5508                  mov dl, byte ptr [ebp+08]
:00411A2A 52                      push edx
:00411A2B B9B0114800              mov ecx, 004811B0
:00411A30 E88F32FFFF              call 00404CC4
:00411A35 6A00                    push 00000000
:00411A37 E83C4B0100              call 00426578
:00411A3C 83C404                  add esp, 00000004

* Possible StringData Ref from Data Obj ->"xsC"
                                  |
:00411A3F 6830664700              push 00476630
:00411A44 6A00                    push 00000000
:00411A46 E821710100              call 00428B6C
:00411A4B 83C408                  add esp, 00000008
:00411A4E 6A00                    push 00000000
:00411A50 B9A0574800              mov ecx, 004857A0
:00411A55 E8E6800200              call 00439B40
:00411A5A C78558FDFFFF01000000    mov dword ptr [ebp+FFFFFD58], 00000001
:00411A64 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00411A6B 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00411A6E E8CBE7FFFF              call 0041023E
:00411A73 8B8558FDFFFF            mov eax, dword ptr [ebp+FFFFFD58]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411646(U), :004116D5(U)
|
:00411A79 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00411A7C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00411A83 8BE5                    mov esp, ebp
:00411A85 5D                      pop ebp
:00411A86 C3                      ret



* Referenced by a CALL at Addresses:
|:00411BB5   , :00411C1E   , :00411C81   , :00411CE1   , :00411D41   
|:00411DA1   , :00411E01   , :00411E66   , :004553D9   
|
:00411A87 55                      push ebp
:00411A88 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00411A8A 6AFF                    push FFFFFFFF
:00411A8C 6898384700              push 00473898
:00411A91 64A100000000            mov eax, dword ptr fs:[00000000]
:00411A97 50                      push eax
:00411A98 64892500000000          mov dword ptr fs:[00000000], esp
:00411A9F 81EC10010000            sub esp, 00000110
:00411AA5 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411AAB E8505CFFFF              call 00407700
:00411AB0 C745FC00000000          mov [ebp-04], 00000000
:00411AB7 8B4508                  mov eax, dword ptr [ebp+08]
:00411ABA 50                      push eax
:00411ABB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411AC1 E86F280000              call 00414335
:00411AC6 85C0                    test eax, eax
:00411AC8 7524                    jne 00411AEE
:00411ACA C785ECFEFFFF00000000    mov dword ptr [ebp+FFFFFEEC], 00000000
:00411AD4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00411ADB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411AE1 E83A5CFFFF              call 00407720
:00411AE6 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:00411AEC EB73                    jmp 00411B61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411AC8(C)
|
:00411AEE 8B4D10                  mov ecx, dword ptr [ebp+10]
:00411AF1 51                      push ecx
:00411AF2 8B550C                  mov edx, dword ptr [ebp+0C]
:00411AF5 52                      push edx
:00411AF6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411AFC E8FF0C0000              call 00412800
:00411B01 85C0                    test eax, eax
:00411B03 752F                    jne 00411B34
:00411B05 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411B0B E8FCEAFFFF              call 0041060C
:00411B10 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00411B1A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00411B21 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411B27 E8F45BFFFF              call 00407720
:00411B2C 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00411B32 EB2D                    jmp 00411B61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411B03(C)
|
:00411B34 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411B3A E8CDEAFFFF              call 0041060C
:00411B3F C785E4FEFFFF01000000    mov dword ptr [ebp+FFFFFEE4], 00000001
:00411B49 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00411B50 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00411B56 E8C55BFFFF              call 00407720
:00411B5B 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411AEC(U), :00411B32(U)
|
:00411B61 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00411B64 64890D00000000          mov dword ptr fs:[00000000], ecx
:00411B6B 8BE5                    mov esp, ebp
:00411B6D 5D                      pop ebp
:00411B6E C3                      ret



* Referenced by a CALL at Addresses:
|:004554C1   , :00455506   , :0045557B   
|
:00411B6F 55                      push ebp
:00411B70 8BEC                    mov ebp, esp
:00411B72 51                      push ecx
:00411B73 8B450C                  mov eax, dword ptr [ebp+0C]
:00411B76 6BC04D                  imul eax, 0000004D
:00411B79 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411B7C 03C8                    add ecx, eax
:00411B7E 894DFC                  mov dword ptr [ebp-04], ecx
:00411B81 8B5510                  mov edx, dword ptr [ebp+10]
:00411B84 52                      push edx
:00411B85 8B45FC                  mov eax, dword ptr [ebp-04]
:00411B88 50                      push eax
:00411B89 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00411B8C 51                      push ecx
:00411B8D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00411B90 6BC970                  imul ecx, 00000070
:00411B93 81C198224900            add ecx, 00492298
:00411B99 E8FA15FFFF              call 00403198
:00411B9E 8BE5                    mov esp, ebp
:00411BA0 5D                      pop ebp
:00411BA1 C3                      ret



* Referenced by a CALL at Address:
|:00411EB6   
|
:00411BA2 55                      push ebp
:00411BA3 8BEC                    mov ebp, esp
:00411BA5 83EC08                  sub esp, 00000008
:00411BA8 A1004C4800              mov eax, dword ptr [00484C00]
:00411BAD 50                      push eax
:00411BAE 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411BB0 68907A4700              push 00477A90
:00411BB5 E8CDFEFFFF              call 00411A87
:00411BBA 83C40C                  add esp, 0000000C
:00411BBD 85C0                    test eax, eax
:00411BBF 7502                    jne 00411BC3
:00411BC1 EB44                    jmp 00411C07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411BBF(C)
|
:00411BC3 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411BC9 894DFC                  mov dword ptr [ebp-04], ecx
:00411BCC C745F800000000          mov [ebp-08], 00000000
:00411BD3 EB09                    jmp 00411BDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C05(U)
|
:00411BD5 8B55F8                  mov edx, dword ptr [ebp-08]
:00411BD8 83C201                  add edx, 00000001
:00411BDB 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411BD3(U)
|
:00411BDE 817DF885020000          cmp dword ptr [ebp-08], 00000285
:00411BE5 7320                    jnb 00411C07
:00411BE7 6A00                    push 00000000
:00411BE9 8B45FC                  mov eax, dword ptr [ebp-04]
:00411BEC 50                      push eax
:00411BED 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411BF0 51                      push ecx
:00411BF1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411BF4 6BC970                  imul ecx, 00000070
:00411BF7 81C198224900            add ecx, 00492298
:00411BFD E89615FFFF              call 00403198
:00411C02 8945FC                  mov dword ptr [ebp-04], eax
:00411C05 EBCE                    jmp 00411BD5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411BC1(U), :00411BE5(C)
|
:00411C07 8BE5                    mov esp, ebp
:00411C09 5D                      pop ebp
:00411C0A C3                      ret



* Referenced by a CALL at Address:
|:00411EBB   
|
:00411C0B 55                      push ebp
:00411C0C 8BEC                    mov ebp, esp
:00411C0E 83EC08                  sub esp, 00000008
:00411C11 A1004C4800              mov eax, dword ptr [00484C00]
:00411C16 50                      push eax
:00411C17 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411C19 68907A4700              push 00477A90
:00411C1E E864FEFFFF              call 00411A87
:00411C23 83C40C                  add esp, 0000000C
:00411C26 85C0                    test eax, eax
:00411C28 7502                    jne 00411C2C
:00411C2A EB3E                    jmp 00411C6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C28(C)
|
:00411C2C 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411C32 894DFC                  mov dword ptr [ebp-04], ecx
:00411C35 C745F800000000          mov [ebp-08], 00000000
:00411C3C EB09                    jmp 00411C47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C68(U)
|
:00411C3E 8B55F8                  mov edx, dword ptr [ebp-08]
:00411C41 83C201                  add edx, 00000001
:00411C44 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C3C(U)
|
:00411C47 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:00411C4E 731A                    jnb 00411C6A
:00411C50 8B45FC                  mov eax, dword ptr [ebp-04]
:00411C53 50                      push eax
:00411C54 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411C57 6BC933                  imul ecx, 00000033
:00411C5A 81C1C8EF4800            add ecx, 0048EFC8
:00411C60 E83B3AFFFF              call 004056A0
:00411C65 8945FC                  mov dword ptr [ebp-04], eax
:00411C68 EBD4                    jmp 00411C3E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411C2A(U), :00411C4E(C)
|
:00411C6A 8BE5                    mov esp, ebp
:00411C6C 5D                      pop ebp
:00411C6D C3                      ret



* Referenced by a CALL at Address:
|:00411EC0   
|
:00411C6E 55                      push ebp
:00411C6F 8BEC                    mov ebp, esp
:00411C71 83EC08                  sub esp, 00000008
:00411C74 A1004C4800              mov eax, dword ptr [00484C00]
:00411C79 50                      push eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00411C7A 6A02                    push 00000002

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411C7C 68907A4700              push 00477A90
:00411C81 E801FEFFFF              call 00411A87
:00411C86 83C40C                  add esp, 0000000C
:00411C89 85C0                    test eax, eax
:00411C8B 7502                    jne 00411C8F
:00411C8D EB3B                    jmp 00411CCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C8B(C)
|
:00411C8F 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411C95 894DFC                  mov dword ptr [ebp-04], ecx
:00411C98 C745F800000000          mov [ebp-08], 00000000
:00411C9F EB09                    jmp 00411CAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411CC8(U)
|
:00411CA1 8B55F8                  mov edx, dword ptr [ebp-08]
:00411CA4 83C201                  add edx, 00000001
:00411CA7 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C9F(U)
|
:00411CAA 837DF834                cmp dword ptr [ebp-08], 00000034
:00411CAE 731A                    jnb 00411CCA
:00411CB0 8B45FC                  mov eax, dword ptr [ebp-04]
:00411CB3 50                      push eax
:00411CB4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411CB7 6BC911                  imul ecx, 00000011
:00411CBA 81C1309C4A00            add ecx, 004A9C30
:00411CC0 E83851FFFF              call 00406DFD
:00411CC5 8945FC                  mov dword ptr [ebp-04], eax
:00411CC8 EBD7                    jmp 00411CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411C8D(U), :00411CAE(C)
|
:00411CCA 8BE5                    mov esp, ebp
:00411CCC 5D                      pop ebp
:00411CCD C3                      ret



* Referenced by a CALL at Address:
|:00411EC5   
|
:00411CCE 55                      push ebp
:00411CCF 8BEC                    mov ebp, esp
:00411CD1 83EC08                  sub esp, 00000008
:00411CD4 A1004C4800              mov eax, dword ptr [00484C00]
:00411CD9 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00411CDA 6A03                    push 00000003

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411CDC 68907A4700              push 00477A90
:00411CE1 E8A1FDFFFF              call 00411A87
:00411CE6 83C40C                  add esp, 0000000C
:00411CE9 85C0                    test eax, eax
:00411CEB 7502                    jne 00411CEF
:00411CED EB3B                    jmp 00411D2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411CEB(C)
|
:00411CEF 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411CF5 894DFC                  mov dword ptr [ebp-04], ecx
:00411CF8 C745F800000000          mov [ebp-08], 00000000
:00411CFF EB09                    jmp 00411D0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D28(U)
|
:00411D01 8B55F8                  mov edx, dword ptr [ebp-08]
:00411D04 83C201                  add edx, 00000001
:00411D07 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411CFF(U)
|
:00411D0A 837DF81C                cmp dword ptr [ebp-08], 0000001C
:00411D0E 731A                    jnb 00411D2A
:00411D10 8B45FC                  mov eax, dword ptr [ebp-04]
:00411D13 50                      push eax
:00411D14 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411D17 6BC927                  imul ecx, 00000027
:00411D1A 81C1C83C4A00            add ecx, 004A3CC8
:00411D20 E8901DFFFF              call 00403AB5
:00411D25 8945FC                  mov dword ptr [ebp-04], eax
:00411D28 EBD7                    jmp 00411D01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411CED(U), :00411D0E(C)
|
:00411D2A 8BE5                    mov esp, ebp
:00411D2C 5D                      pop ebp
:00411D2D C3                      ret



* Referenced by a CALL at Address:
|:00411ECA   
|
:00411D2E 55                      push ebp
:00411D2F 8BEC                    mov ebp, esp
:00411D31 83EC08                  sub esp, 00000008
:00411D34 A1004C4800              mov eax, dword ptr [00484C00]
:00411D39 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00411D3A 6A04                    push 00000004

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411D3C 68907A4700              push 00477A90
:00411D41 E841FDFFFF              call 00411A87
:00411D46 83C40C                  add esp, 0000000C
:00411D49 85C0                    test eax, eax
:00411D4B 7502                    jne 00411D4F
:00411D4D EB3B                    jmp 00411D8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D4B(C)
|
:00411D4F 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411D55 894DFC                  mov dword ptr [ebp-04], ecx
:00411D58 C745F800000000          mov [ebp-08], 00000000
:00411D5F EB09                    jmp 00411D6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D88(U)
|
:00411D61 8B55F8                  mov edx, dword ptr [ebp-08]
:00411D64 83C201                  add edx, 00000001
:00411D67 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D5F(U)
|
:00411D6A 837DF811                cmp dword ptr [ebp-08], 00000011
:00411D6E 731A                    jnb 00411D8A
:00411D70 8B45FC                  mov eax, dword ptr [ebp-04]
:00411D73 50                      push eax
:00411D74 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411D77 6BC94A                  imul ecx, 0000004A
:00411D7A 81C140DA4A00            add ecx, 004ADA40
:00411D80 E8BD1CFFFF              call 00403A42
:00411D85 8945FC                  mov dword ptr [ebp-04], eax
:00411D88 EBD7                    jmp 00411D61

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411D4D(U), :00411D6E(C)
|
:00411D8A 8BE5                    mov esp, ebp
:00411D8C 5D                      pop ebp
:00411D8D C3                      ret



* Referenced by a CALL at Address:
|:00411ECF   
|
:00411D8E 55                      push ebp
:00411D8F 8BEC                    mov ebp, esp
:00411D91 83EC08                  sub esp, 00000008
:00411D94 A1004C4800              mov eax, dword ptr [00484C00]
:00411D99 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00411D9A 6A05                    push 00000005

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411D9C 68907A4700              push 00477A90
:00411DA1 E8E1FCFFFF              call 00411A87
:00411DA6 83C40C                  add esp, 0000000C
:00411DA9 85C0                    test eax, eax
:00411DAB 7502                    jne 00411DAF
:00411DAD EB3B                    jmp 00411DEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411DAB(C)
|
:00411DAF 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411DB5 894DFC                  mov dword ptr [ebp-04], ecx
:00411DB8 C745F800000000          mov [ebp-08], 00000000
:00411DBF EB09                    jmp 00411DCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411DE8(U)
|
:00411DC1 8B55F8                  mov edx, dword ptr [ebp-08]
:00411DC4 83C201                  add edx, 00000001
:00411DC7 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411DBF(U)
|
:00411DCA 837DF831                cmp dword ptr [ebp-08], 00000031
:00411DCE 731A                    jnb 00411DEA
:00411DD0 8B45FC                  mov eax, dword ptr [ebp-04]
:00411DD3 50                      push eax
:00411DD4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411DD7 6BC911                  imul ecx, 00000011
:00411DDA 81C180DF4A00            add ecx, 004ADF80
:00411DE0 E8D950FFFF              call 00406EBE
:00411DE5 8945FC                  mov dword ptr [ebp-04], eax
:00411DE8 EBD7                    jmp 00411DC1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411DAD(U), :00411DCE(C)
|
:00411DEA 8BE5                    mov esp, ebp
:00411DEC 5D                      pop ebp
:00411DED C3                      ret



* Referenced by a CALL at Address:
|:00411ED4   
|
:00411DEE 55                      push ebp
:00411DEF 8BEC                    mov ebp, esp
:00411DF1 83EC08                  sub esp, 00000008
:00411DF4 A1004C4800              mov eax, dword ptr [00484C00]
:00411DF9 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00411DFA 6A06                    push 00000006

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411DFC 68907A4700              push 00477A90
:00411E01 E881FCFFFF              call 00411A87
:00411E06 83C40C                  add esp, 0000000C
:00411E09 85C0                    test eax, eax
:00411E0B 7502                    jne 00411E0F
:00411E0D EB40                    jmp 00411E4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E0B(C)
|
:00411E0F 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411E15 894DFC                  mov dword ptr [ebp-04], ecx
:00411E18 C745F800000000          mov [ebp-08], 00000000
:00411E1F EB09                    jmp 00411E2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E4D(U)
|
:00411E21 8B55F8                  mov edx, dword ptr [ebp-08]
:00411E24 83C201                  add edx, 00000001
:00411E27 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E1F(U)
|
:00411E2A 837DF819                cmp dword ptr [ebp-08], 00000019
:00411E2E 731F                    jnb 00411E4F
:00411E30 668B45F8                mov ax, word ptr [ebp-08]
:00411E34 50                      push eax
:00411E35 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411E38 51                      push ecx
:00411E39 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411E3C 6BC932                  imul ecx, 00000032
:00411E3F 81C1B0EA4800            add ecx, 0048EAB0
:00411E45 E88326FFFF              call 004044CD
:00411E4A 8945FC                  mov dword ptr [ebp-04], eax
:00411E4D EBD2                    jmp 00411E21

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411E0D(U), :00411E2E(C)
|
:00411E4F 8BE5                    mov esp, ebp
:00411E51 5D                      pop ebp
:00411E52 C3                      ret



* Referenced by a CALL at Address:
|:00411ED9   
|
:00411E53 55                      push ebp
:00411E54 8BEC                    mov ebp, esp
:00411E56 83EC08                  sub esp, 00000008
:00411E59 A1004C4800              mov eax, dword ptr [00484C00]
:00411E5E 50                      push eax

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00411E5F 6A07                    push 00000007

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:00411E61 68907A4700              push 00477A90
:00411E66 E81CFCFFFF              call 00411A87
:00411E6B 83C40C                  add esp, 0000000C
:00411E6E 85C0                    test eax, eax
:00411E70 7502                    jne 00411E74
:00411E72 EB3B                    jmp 00411EAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E70(C)
|
:00411E74 8B0D004C4800            mov ecx, dword ptr [00484C00]
:00411E7A 894DFC                  mov dword ptr [ebp-04], ecx
:00411E7D C745F800000000          mov [ebp-08], 00000000
:00411E84 EB09                    jmp 00411E8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411EAD(U)
|
:00411E86 8B55F8                  mov edx, dword ptr [ebp-08]
:00411E89 83C201                  add edx, 00000001
:00411E8C 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E84(U)
|
:00411E8F 837DF87D                cmp dword ptr [ebp-08], 0000007D
:00411E93 731A                    jnb 00411EAF
:00411E95 8B45FC                  mov eax, dword ptr [ebp-04]
:00411E98 50                      push eax
:00411E99 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411E9C 6BC90C                  imul ecx, 0000000C
:00411E9F 81C148954A00            add ecx, 004A9548
:00411EA5 E83824FFFF              call 004042E2
:00411EAA 8945FC                  mov dword ptr [ebp-04], eax
:00411EAD EBD7                    jmp 00411E86

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411E72(U), :00411E93(C)
|
:00411EAF 8BE5                    mov esp, ebp
:00411EB1 5D                      pop ebp
:00411EB2 C3                      ret



* Referenced by a CALL at Address:
|:00412495   
|
:00411EB3 55                      push ebp
:00411EB4 8BEC                    mov ebp, esp
:00411EB6 E8E7FCFFFF              call 00411BA2
:00411EBB E84BFDFFFF              call 00411C0B
:00411EC0 E8A9FDFFFF              call 00411C6E
:00411EC5 E804FEFFFF              call 00411CCE
:00411ECA E85FFEFFFF              call 00411D2E
:00411ECF E8BAFEFFFF              call 00411D8E
:00411ED4 E815FFFFFF              call 00411DEE
:00411ED9 E875FFFFFF              call 00411E53
:00411EDE 5D                      pop ebp
:00411EDF C3                      ret



* Referenced by a CALL at Addresses:
|:00411F32   , :00411FDE   , :0041202D   , :004120BA   
|
:00411EE0 55                      push ebp
:00411EE1 8BEC                    mov ebp, esp
:00411EE3 6A00                    push 00000000
:00411EE5 6A00                    push 00000000
:00411EE7 68F0000000              push 000000F0
:00411EEC 8B4508                  mov eax, dword ptr [ebp+08]
:00411EEF 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00411EF0 FF15D8864B00            Call dword ptr [004B86D8]
:00411EF6 83E801                  sub eax, 00000001
:00411EF9 F7D8                    neg eax
:00411EFB 1BC0                    sbb eax, eax
:00411EFD 40                      inc eax
:00411EFE 5D                      pop ebp
:00411EFF C3                      ret



* Referenced by a CALL at Addresses:
|:00412299   , :004122F2   , :00412368   , :004123C1   , :00467F86   
|
:00411F00 55                      push ebp
:00411F01 8BEC                    mov ebp, esp
:00411F03 6A00                    push 00000000
:00411F05 33C0                    xor eax, eax
:00411F07 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00411F0B 0F95C0                  setne al
:00411F0E 50                      push eax
:00411F0F 68F1000000              push 000000F1
:00411F14 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411F17 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00411F18 FF15D8864B00            Call dword ptr [004B86D8]
:00411F1E 5D                      pop ebp
:00411F1F C3                      ret



* Referenced by a CALL at Address:
|:00411FA6   
|
:00411F20 55                      push ebp
:00411F21 8BEC                    mov ebp, esp
:00411F23 8B450C                  mov eax, dword ptr [ebp+0C]
:00411F26 50                      push eax
:00411F27 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411F2A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00411F2B FF15AC864B00            Call dword ptr [004B86AC]
:00411F31 50                      push eax
:00411F32 E8A9FFFFFF              call 00411EE0
:00411F37 83C404                  add esp, 00000004
:00411F3A 85C0                    test eax, eax
:00411F3C 7410                    je 00411F4E
:00411F3E 8B5510                  mov edx, dword ptr [ebp+10]
:00411F41 52                      push edx
:00411F42 B9C8E24A00              mov ecx, 004AE2C8
:00411F47 E8AC4AFFFF              call 004069F8
:00411F4C EB0E                    jmp 00411F5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F3C(C)
|
:00411F4E 8B4510                  mov eax, dword ptr [ebp+10]
:00411F51 50                      push eax
:00411F52 B9C8E24A00              mov ecx, 004AE2C8
:00411F57 E8C04AFFFF              call 00406A1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F4C(U)
|
:00411F5C 5D                      pop ebp
:00411F5D C3                      ret



* Referenced by a CALL at Address:
|:0041220A   
|
:00411F5E 55                      push ebp
:00411F5F 8BEC                    mov ebp, esp
:00411F61 83EC0C                  sub esp, 0000000C
:00411F64 B9C8E24A00              mov ecx, 004AE2C8
:00411F69 E862D2FFFF              call 0040F1D0
:00411F6E 83E004                  and eax, 00000004
:00411F71 8845FC                  mov byte ptr [ebp-04], al
:00411F74 C745F800000000          mov [ebp-08], 00000000
:00411F7B EB09                    jmp 00411F86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FAE(U)
|
:00411F7D 8B45F8                  mov eax, dword ptr [ebp-08]
:00411F80 83C001                  add eax, 00000001
:00411F83 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F7B(U)
|
:00411F86 837DF806                cmp dword ptr [ebp-08], 00000006
:00411F8A 7324                    jnb 00411FB0
:00411F8C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411F8F 8B14CD04654700          mov edx, dword ptr [8*ecx+00476504]
:00411F96 52                      push edx
:00411F97 8B45F8                  mov eax, dword ptr [ebp-08]
:00411F9A 8B0CC500654700          mov ecx, dword ptr [8*eax+00476500]
:00411FA1 51                      push ecx
:00411FA2 8B5508                  mov edx, dword ptr [ebp+08]
:00411FA5 52                      push edx
:00411FA6 E875FFFFFF              call 00411F20
:00411FAB 83C40C                  add esp, 0000000C
:00411FAE EBCD                    jmp 00411F7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F8A(C)
|
:00411FB0 C745F800000000          mov [ebp-08], 00000000
:00411FB7 EB09                    jmp 00411FC2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FFD(U)
|
:00411FB9 8B45F8                  mov eax, dword ptr [ebp-08]
:00411FBC 83C001                  add eax, 00000001
:00411FBF 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FB7(U)
|
:00411FC2 837DF804                cmp dword ptr [ebp-08], 00000004
:00411FC6 7337                    jnb 00411FFF
:00411FC8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411FCB 8B148D30654700          mov edx, dword ptr [4*ecx+00476530]
:00411FD2 52                      push edx
:00411FD3 8B4508                  mov eax, dword ptr [ebp+08]
:00411FD6 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00411FD7 FF15AC864B00            Call dword ptr [004B86AC]
:00411FDD 50                      push eax
:00411FDE E8FDFEFFFF              call 00411EE0
:00411FE3 83C404                  add esp, 00000004
:00411FE6 85C0                    test eax, eax
:00411FE8 7413                    je 00411FFD
:00411FEA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411FED 83C101                  add ecx, 00000001
:00411FF0 51                      push ecx
:00411FF1 B9C8E24A00              mov ecx, 004AE2C8
:00411FF6 E825260400              call 00454620
:00411FFB EB02                    jmp 00411FFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FE8(C)
|
:00411FFD EBBA                    jmp 00411FB9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411FC6(C), :00411FFB(U)
|
:00411FFF C745F800000000          mov [ebp-08], 00000000
:00412006 EB09                    jmp 00412011

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412087(U)
|
:00412008 8B55F8                  mov edx, dword ptr [ebp-08]
:0041200B 83C201                  add edx, 00000001
:0041200E 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412006(U)
|
:00412011 837DF804                cmp dword ptr [ebp-08], 00000004
:00412015 7375                    jnb 0041208C
:00412017 8B45F8                  mov eax, dword ptr [ebp-08]
:0041201A 8B0C8540654700          mov ecx, dword ptr [4*eax+00476540]
:00412021 51                      push ecx
:00412022 8B5508                  mov edx, dword ptr [ebp+08]
:00412025 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412026 FF15AC864B00            Call dword ptr [004B86AC]
:0041202C 50                      push eax
:0041202D E8AEFEFFFF              call 00411EE0
:00412032 83C404                  add esp, 00000004
:00412035 85C0                    test eax, eax
:00412037 744E                    je 00412087
:00412039 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0041203D 7424                    je 00412063
:0041203F 8B45F8                  mov eax, dword ptr [ebp-08]
:00412042 83C001                  add eax, 00000001
:00412045 50                      push eax
:00412046 B9C8E24A00              mov ecx, 004AE2C8
:0041204B E800D3FFFF              call 0040F350
:00412050 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412053 83C101                  add ecx, 00000001
:00412056 51                      push ecx
:00412057 B910584800              mov ecx, 00485810
:0041205C E8BF57FFFF              call 00407820
:00412061 EB22                    jmp 00412085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041203D(C)
|
:00412063 8B55F8                  mov edx, dword ptr [ebp-08]
:00412066 83C201                  add edx, 00000001
:00412069 52                      push edx
:0041206A B9C8E24A00              mov ecx, 004AE2C8
:0041206F E8DCD2FFFF              call 0040F350
:00412074 8B45F8                  mov eax, dword ptr [ebp-08]
:00412077 83C001                  add eax, 00000001
:0041207A 50                      push eax
:0041207B B910584800              mov ecx, 00485810
:00412080 E89B57FFFF              call 00407820

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412061(U)
|
:00412085 EB05                    jmp 0041208C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412037(C)
|
:00412087 E97CFFFFFF              jmp 00412008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412015(C), :00412085(U)
|
:0041208C C745F800000000          mov [ebp-08], 00000000
:00412093 EB09                    jmp 0041209E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120D9(U)
|
:00412095 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412098 83C101                  add ecx, 00000001
:0041209B 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412093(U)
|
:0041209E 837DF804                cmp dword ptr [ebp-08], 00000004
:004120A2 7337                    jnb 004120DB
:004120A4 8B55F8                  mov edx, dword ptr [ebp-08]
:004120A7 8B049550654700          mov eax, dword ptr [4*edx+00476550]
:004120AE 50                      push eax
:004120AF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004120B2 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004120B3 FF15AC864B00            Call dword ptr [004B86AC]
:004120B9 50                      push eax
:004120BA E821FEFFFF              call 00411EE0
:004120BF 83C404                  add esp, 00000004
:004120C2 85C0                    test eax, eax
:004120C4 7413                    je 004120D9
:004120C6 8B55F8                  mov edx, dword ptr [ebp-08]
:004120C9 83C201                  add edx, 00000001
:004120CC 52                      push edx
:004120CD B9C8E24A00              mov ecx, 004AE2C8
:004120D2 E8E9060000              call 004127C0
:004120D7 EB02                    jmp 004120DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120C4(C)
|
:004120D9 EBBA                    jmp 00412095

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004120A2(C), :004120D7(U)
|
:004120DB B9C8E24A00              mov ecx, 004AE2C8
:004120E0 E8EBD0FFFF              call 0040F1D0
:004120E5 2500100000              and eax, 00001000
:004120EA 85C0                    test eax, eax
:004120EC 750C                    jne 004120FA
:004120EE B9800D4B00              mov ecx, 004B0D80
:004120F3 E889FA0400              call 00461B81
:004120F8 EB29                    jmp 00412123

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120EC(C)
|
:004120FA B9C8E24A00              mov ecx, 004AE2C8
:004120FF E89C060000              call 004127A0
:00412104 25FF000000              and eax, 000000FF
:00412109 8945F4                  mov dword ptr [ebp-0C], eax
:0041210C 817DF4FFFF0000          cmp dword ptr [ebp-0C], 0000FFFF
:00412113 740E                    je 00412123
:00412115 8B45F4                  mov eax, dword ptr [ebp-0C]
:00412118 50                      push eax
:00412119 B9800D4B00              mov ecx, 004B0D80
:0041211E E8A1FA0400              call 00461BC4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004120F8(U), :00412113(C)
|
:00412123 B9C8E24A00              mov ecx, 004AE2C8
:00412128 E8A3D0FFFF              call 0040F1D0
:0041212D 2500200000              and eax, 00002000
:00412132 85C0                    test eax, eax
:00412134 750A                    jne 00412140
:00412136 B9880D4B00              mov ecx, 004B0D88
:0041213B E808FA0400              call 00461B48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412134(C)
|
:00412140 B9C8E24A00              mov ecx, 004AE2C8
:00412145 E886D0FFFF              call 0040F1D0
:0041214A 83E004                  and eax, 00000004
:0041214D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412150 81E1FF000000            and ecx, 000000FF
:00412156 3BC1                    cmp eax, ecx
:00412158 7418                    je 00412172
:0041215A B9A0574800              mov ecx, 004857A0
:0041215F E862360000              call 004157C6
:00412164 85C0                    test eax, eax
:00412166 750A                    jne 00412172
:00412168 B9A0574800              mov ecx, 004857A0
:0041216D E8182F0000              call 0041508A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412158(C), :00412166(C)
|
:00412172 B9C8E24A00              mov ecx, 004AE2C8
:00412177 E874DB0100              call 0042FCF0
:0041217C 25FF000000              and eax, 000000FF
:00412181 50                      push eax
:00412182 B9880D4B00              mov ecx, 004B0D88
:00412187 E8A1F90400              call 00461B2D
:0041218C 8BE5                    mov esp, ebp
:0041218E 5D                      pop ebp
:0041218F C3                      ret


:00412190 55                      push ebp
:00412191 8BEC                    mov ebp, esp
:00412193 51                      push ecx
:00412194 8B450C                  mov eax, dword ptr [ebp+0C]
:00412197 8945FC                  mov dword ptr [ebp-04], eax
:0041219A 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:004121A1 740E                    je 004121B1
:004121A3 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004121AA 7428                    je 004121D4
:004121AC E992000000              jmp 00412243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004121A1(C)
|
:004121B1 8B4D14                  mov ecx, dword ptr [ebp+14]
:004121B4 890D60654700            mov dword ptr [00476560], ecx
:004121BA 8B1560654700            mov edx, dword ptr [00476560]
:004121C0 52                      push edx
:004121C1 8B4508                  mov eax, dword ptr [ebp+08]
:004121C4 50                      push eax
:004121C5 E885000000              call 0041224F
:004121CA 83C408                  add esp, 00000008
:004121CD B801000000              mov eax, 00000001
:004121D2 EB75                    jmp 00412249

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004121AA(C)
|
:004121D4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004121D7 81E1FFFF0000            and ecx, 0000FFFF
:004121DD 81F9A9040000            cmp ecx, 000004A9
:004121E3 750D                    jne 004121F2

* Possible Ref to Menu: DBGMENU, Item: "f@l"
                                  |
:004121E5 689B000000              push 0000009B
:004121EA E873170500              call 00463962
:004121EF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004121E3(C)
|
:004121F2 8B5510                  mov edx, dword ptr [ebp+10]
:004121F5 81E2FFFF0000            and edx, 0000FFFF
:004121FB 83FA01                  cmp edx, 00000001
:004121FE 7528                    jne 00412228
:00412200 A160654700              mov eax, dword ptr [00476560]
:00412205 50                      push eax
:00412206 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412209 51                      push ecx
:0041220A E84FFDFFFF              call 00411F5E
:0041220F 83C408                  add esp, 00000008
:00412212 6A01                    push 00000001
:00412214 8B5508                  mov edx, dword ptr [ebp+08]
:00412217 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00412218 FF15B0874B00            Call dword ptr [004B87B0]
:0041221E C705F864470000000000    mov dword ptr [004764F8], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004121FE(C)
|
:00412228 8B4510                  mov eax, dword ptr [ebp+10]
:0041222B 25FFFF0000              and eax, 0000FFFF
:00412230 83F802                  cmp eax, 00000002
:00412233 750C                    jne 00412241
:00412235 6A01                    push 00000001
:00412237 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041223A 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041223B FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412233(C)
|
:00412241 EB04                    jmp 00412247

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004121AC(U)
|
:00412243 33C0                    xor eax, eax
:00412245 EB02                    jmp 00412249

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412241(U)
|
:00412247 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004121D2(U), :00412245(U)
|
:00412249 8BE5                    mov esp, ebp
:0041224B 5D                      pop ebp
:0041224C C21000                  ret 0010



* Referenced by a CALL at Address:
|:004121C5   
|
:0041224F 55                      push ebp
:00412250 8BEC                    mov ebp, esp
:00412252 83EC0C                  sub esp, 0000000C
:00412255 C745F400000000          mov [ebp-0C], 00000000
:0041225C EB09                    jmp 00412267

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122A1(U)
|
:0041225E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00412261 83C001                  add eax, 00000001
:00412264 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041225C(U)
|
:00412267 837DF406                cmp dword ptr [ebp-0C], 00000006
:0041226B 7336                    jnb 004122A3
:0041226D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00412270 8B14CD04654700          mov edx, dword ptr [8*ecx+00476504]
:00412277 52                      push edx
:00412278 B9C8E24A00              mov ecx, 004AE2C8
:0041227D E85547FFFF              call 004069D7
:00412282 50                      push eax
:00412283 8B45F4                  mov eax, dword ptr [ebp-0C]
:00412286 8B0CC500654700          mov ecx, dword ptr [8*eax+00476500]
:0041228D 51                      push ecx
:0041228E 8B5508                  mov edx, dword ptr [ebp+08]
:00412291 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412292 FF15AC864B00            Call dword ptr [004B86AC]
:00412298 50                      push eax
:00412299 E862FCFFFF              call 00411F00
:0041229E 83C408                  add esp, 00000008
:004122A1 EBBB                    jmp 0041225E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041226B(C)
|
:004122A3 B9C8E24A00              mov ecx, 004AE2C8
:004122A8 E8D3230400              call 00454680
:004122AD 25FF000000              and eax, 000000FF
:004122B2 83E801                  sub eax, 00000001
:004122B5 8945F8                  mov dword ptr [ebp-08], eax
:004122B8 C745F400000000          mov [ebp-0C], 00000000
:004122BF EB09                    jmp 004122CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122FA(U)
|
:004122C1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004122C4 83C001                  add eax, 00000001
:004122C7 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122BF(U)
|
:004122CA 837DF404                cmp dword ptr [ebp-0C], 00000004
:004122CE 732C                    jnb 004122FC
:004122D0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004122D3 33D2                    xor edx, edx
:004122D5 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:004122D8 0F94C2                  sete dl
:004122DB 52                      push edx
:004122DC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004122DF 8B0C8530654700          mov ecx, dword ptr [4*eax+00476530]
:004122E6 51                      push ecx
:004122E7 8B5508                  mov edx, dword ptr [ebp+08]
:004122EA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004122EB FF15AC864B00            Call dword ptr [004B86AC]
:004122F1 50                      push eax
:004122F2 E809FCFFFF              call 00411F00
:004122F7 83C408                  add esp, 00000008
:004122FA EBC5                    jmp 004122C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122CE(C)
|
:004122FC 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00412300 7417                    je 00412319
:00412302 B9C8E24A00              mov ecx, 004AE2C8
:00412307 E824D0FFFF              call 0040F330
:0041230C 25FF000000              and eax, 000000FF
:00412311 83E801                  sub eax, 00000001
:00412314 8945FC                  mov dword ptr [ebp-04], eax
:00412317 EB15                    jmp 0041232E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412300(C)
|
:00412319 B910584800              mov ecx, 00485810
:0041231E E8FD040000              call 00412820
:00412323 25FF000000              and eax, 000000FF
:00412328 83E801                  sub eax, 00000001
:0041232B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412317(U)
|
:0041232E C745F400000000          mov [ebp-0C], 00000000
:00412335 EB09                    jmp 00412340

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412370(U)
|
:00412337 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041233A 83C001                  add eax, 00000001
:0041233D 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412335(U)
|
:00412340 837DF404                cmp dword ptr [ebp-0C], 00000004
:00412344 732C                    jnb 00412372
:00412346 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412349 33D2                    xor edx, edx
:0041234B 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0041234E 0F94C2                  sete dl
:00412351 52                      push edx
:00412352 8B45F4                  mov eax, dword ptr [ebp-0C]
:00412355 8B0C8540654700          mov ecx, dword ptr [4*eax+00476540]
:0041235C 51                      push ecx
:0041235D 8B5508                  mov edx, dword ptr [ebp+08]
:00412360 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412361 FF15AC864B00            Call dword ptr [004B86AC]
:00412367 50                      push eax
:00412368 E893FBFFFF              call 00411F00
:0041236D 83C408                  add esp, 00000008
:00412370 EBC5                    jmp 00412337

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412344(C)
|
:00412372 B9C8E24A00              mov ecx, 004AE2C8
:00412377 E864040000              call 004127E0
:0041237C 25FF000000              and eax, 000000FF
:00412381 83E801                  sub eax, 00000001
:00412384 8945FC                  mov dword ptr [ebp-04], eax
:00412387 C745F400000000          mov [ebp-0C], 00000000
:0041238E EB09                    jmp 00412399

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004123C9(U)
|
:00412390 8B45F4                  mov eax, dword ptr [ebp-0C]
:00412393 83C001                  add eax, 00000001
:00412396 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041238E(U)
|
:00412399 837DF404                cmp dword ptr [ebp-0C], 00000004
:0041239D 732C                    jnb 004123CB
:0041239F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004123A2 33D2                    xor edx, edx
:004123A4 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:004123A7 0F94C2                  sete dl
:004123AA 52                      push edx
:004123AB 8B45F4                  mov eax, dword ptr [ebp-0C]
:004123AE 8B0C8550654700          mov ecx, dword ptr [4*eax+00476550]
:004123B5 51                      push ecx
:004123B6 8B5508                  mov edx, dword ptr [ebp+08]
:004123B9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004123BA FF15AC864B00            Call dword ptr [004B86AC]
:004123C0 50                      push eax
:004123C1 E83AFBFFFF              call 00411F00
:004123C6 83C408                  add esp, 00000008
:004123C9 EBC5                    jmp 00412390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041239D(C)
|
:004123CB 8BE5                    mov esp, ebp
:004123CD 5D                      pop ebp
:004123CE C3                      ret



* Referenced by a CALL at Addresses:
|:004124FE   , :00463A82   
|
:004123CF 55                      push ebp
:004123D0 8BEC                    mov ebp, esp
:004123D2 8B4508                  mov eax, dword ptr [ebp+08]
:004123D5 50                      push eax
:004123D6 6890214100              push 00412190
:004123DB 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004123E1 51                      push ecx

* Possible StringData Ref from Data Obj ->"KANKYOU"
                                  |
:004123E2 683C664700              push 0047663C
:004123E7 8B15300E4B00            mov edx, dword ptr [004B0E30]
:004123ED 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:004123EE FF1520874B00            Call dword ptr [004B8720]
:004123F4 5D                      pop ebp
:004123F5 C3                      ret



* Referenced by a CALL at Address:
|:00463A5B   
|
:004123F6 55                      push ebp
:004123F7 8BEC                    mov ebp, esp
:004123F9 83EC0C                  sub esp, 0000000C
:004123FC B9F8134800              mov ecx, 004813F8
:00412401 E85A040000              call 00412860
:00412406 8945FC                  mov dword ptr [ebp-04], eax
:00412409 8B45FC                  mov eax, dword ptr [ebp-04]
:0041240C 50                      push eax
:0041240D E891010500              call 004625A3
:00412412 83C404                  add esp, 00000004
:00412415 8945F8                  mov dword ptr [ebp-08], eax
:00412418 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041241B 0FBE11                  movsx edx, byte ptr [ecx]
:0041241E 85D2                    test edx, edx
:00412420 7411                    je 00412433
:00412422 817DF8FA000000          cmp dword ptr [ebp-08], 000000FA
:00412429 7308                    jnb 00412433
:0041242B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041242E 8945F4                  mov dword ptr [ebp-0C], eax
:00412431 EB07                    jmp 0041243A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412420(C), :00412429(C)
|

* Possible StringData Ref from Data Obj ->"{bLk"
                                  |
:00412433 C745F444664700          mov [ebp-0C], 00476644

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412431(U)
|
:0041243A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041243D 51                      push ecx
:0041243E E822130500              call 00463765
:00412443 83C404                  add esp, 00000004
:00412446 8BE5                    mov esp, ebp
:00412448 5D                      pop ebp
:00412449 C3                      ret



* Referenced by a CALL at Address:
|:004266D3   
|
:0041244A 55                      push ebp
:0041244B 8BEC                    mov ebp, esp
:0041244D 83EC0C                  sub esp, 0000000C
:00412450 66C745F80000            mov [ebp-08], 0000
:00412456 66C745FC0000            mov [ebp-04], 0000
:0041245C 6882000000              push 00000082
:00412461 E850220500              call 004646B6
:00412466 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00412469 C705F8644700FF000000    mov dword ptr [004764F8], 000000FF
:00412473 6A00                    push 00000000
:00412475 B910414A00              mov ecx, 004A4110
:0041247A E81F110000              call 0041359E
:0041247F A3004C4800              mov dword ptr [00484C00], eax
:00412484 6A00                    push 00000000
:00412486 6A1E                    push 0000001E
:00412488 68A8EF4800              push 0048EFA8
:0041248D E8B6030500              call 00462848
:00412492 83C40C                  add esp, 0000000C
:00412495 E819FAFFFF              call 00411EB3
:0041249A B9F8134800              mov ecx, 004813F8
:0041249F E869BEFFFF              call 0040E30D
:004124A4 B9C8E24A00              mov ecx, 004AE2C8
:004124A9 E899E4FFFF              call 00410947
:004124AE E884260500              call 00464B37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125F7(U)
|
:004124B3 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UEE}"
                                  |
:004124B5 686A264100              push 0041266A
:004124BA A1380E4B00              mov eax, dword ptr [004B0E38]
:004124BF 50                      push eax

* Possible Reference to Dialog: DialogID_00C1 
                                  |
:004124C0 68C1000000              push 000000C1
:004124C5 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004124CB 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:004124CC FF1520874B00            Call dword ptr [004B8720]
:004124D2 8B15D8534800            mov edx, dword ptr [004853D8]
:004124D8 8955F4                  mov dword ptr [ebp-0C], edx
:004124DB 837DF404                cmp dword ptr [ebp-0C], 00000004
:004124DF 0F8704010000            ja 004125E9
:004124E5 8B45F4                  mov eax, dword ptr [ebp-0C]
:004124E8 FF248556264100          jmp dword ptr [4*eax+00412656]
:004124EF 68DA070000              push 000007DA
:004124F4 E8BD210500              call 004646B6
:004124F9 83C404                  add esp, 00000004
:004124FC 6A01                    push 00000001
:004124FE E8CCFEFFFF              call 004123CF
:00412503 83C404                  add esp, 00000004
:00412506 668B4DF8                mov cx, word ptr [ebp-08]
:0041250A 6683F101                xor cx, 0001
:0041250E 66894DF8                mov word ptr [ebp-08], cx
:00412512 6A00                    push 00000000
:00412514 6A00                    push 00000000
:00412516 B9B0114800              mov ecx, 004811B0
:0041251B E8A427FFFF              call 00404CC4
:00412520 E9C4000000              jmp 004125E9
:00412525 6896000000              push 00000096
:0041252A E887210500              call 004646B6
:0041252F 83C404                  add esp, 00000004
:00412532 E8CCE4FFFF              call 00410A03
:00412537 668B55F8                mov dx, word ptr [ebp-08]
:0041253B 6683F202                xor dx, 0002
:0041253F 668955F8                mov word ptr [ebp-08], dx
:00412543 E9A1000000              jmp 004125E9
:00412548 8B45F8                  mov eax, dword ptr [ebp-08]
:0041254B 25FFFF0000              and eax, 0000FFFF
:00412550 83F80F                  cmp eax, 0000000F
:00412553 7525                    jne 0041257A
:00412555 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ܡH"
                                  |
:00412557 6854664700              push 00476654
:0041255C E8CF100500              call 00463630
:00412561 83C408                  add esp, 00000008
:00412564 85C0                    test eax, eax
:00412566 740A                    je 00412572
:00412568 B8FFFF0000              mov eax, 0000FFFF
:0041256D E9E0000000              jmp 00412652

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412566(C)
|
:00412572 66C745FC0100            mov [ebp-04], 0001
:00412578 EB6F                    jmp 004125E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412553(C)
|
:0041257A B8FFFF0000              mov eax, 0000FFFF
:0041257F E9CE000000              jmp 00412652

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:00412584 68F2030000              push 000003F2
:00412589 E8D4130500              call 00463962
:0041258E 83C404                  add esp, 00000004
:00412591 668B4DF8                mov cx, word ptr [ebp-08]
:00412595 6683F104                xor cx, 0004
:00412599 66894DF8                mov word ptr [ebp-08], cx
:0041259D EB4A                    jmp 004125E9
:0041259F 8B55FC                  mov edx, dword ptr [ebp-04]
:004125A2 81E2FFFF0000            and edx, 0000FFFF
:004125A8 83FA01                  cmp edx, 00000001
:004125AB 751C                    jne 004125C9
:004125AD E825620500              call 004687D7
:004125B2 85C0                    test eax, eax
:004125B4 740C                    je 004125C2
:004125B6 C705F864470000000000    mov dword ptr [004764F8], 00000000
:004125C0 EB27                    jmp 004125E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125B4(C)
|
:004125C2 E81F090000              call 00412EE6
:004125C7 EB20                    jmp 004125E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125AB(C)
|
:004125C9 6A28                    push 00000028
:004125CB E8E6200500              call 004646B6
:004125D0 83C404                  add esp, 00000004
:004125D3 6A28                    push 00000028
:004125D5 E888130500              call 00463962
:004125DA 83C404                  add esp, 00000004
:004125DD 668B45F8                mov ax, word ptr [ebp-08]
:004125E1 66350800                xor ax, 0008
:004125E5 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004124DF(C), :00412520(U), :00412543(U), :00412578(U), :0041259D(U)
|:004125C0(U), :004125C7(U)
|
:004125E9 813DF8644700FF000000    cmp dword ptr [004764F8], 000000FF
:004125F3 7402                    je 004125F7
:004125F5 EB05                    jmp 004125FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125F3(C)
|
:004125F7 E9B7FEFFFF              jmp 004124B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004125F5(U)
|
:004125FC E8E2490500              call 00466FE3
:00412601 85C0                    test eax, eax
:00412603 752A                    jne 0041262F

* Possible StringData Ref from Data Obj ->"Lks@ܤAнT{OΪ̵wЪѾle"
                                        ->"qC"
                                  |
:00412605 6860664700              push 00476660
:0041260A E882120500              call 00463891
:0041260F 83C404                  add esp, 00000004
:00412612 E8D3750500              call 00469BEA
:00412617 E85A400100              call 00426676
:0041261C 6A00                    push 00000000
:0041261E 6A00                    push 00000000

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00412620 6A10                    push 00000010
:00412622 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00412628 51                      push ecx

* Reference To: USER32.PostMessageA, Ord:01B1h
                                  |
:00412629 FF15A8874B00            Call dword ptr [004B87A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412603(C)
|
:0041262F E895EA0000              call 004210C9
:00412634 E841060000              call 00412C7A
:00412639 E8A8080000              call 00412EE6
:0041263E E8A2070000              call 00412DE5
:00412643 C705287A4700FFFF0000    mov dword ptr [00477A28], 0000FFFF
:0041264D A1F8644700              mov eax, dword ptr [004764F8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041256D(U), :0041257F(U)
|
:00412652 8BE5                    mov esp, ebp
:00412654 5D                      pop ebp
:00412655 C3                      ret



:00412656 EF244100                DWORD 004124EF
:0041265A 25254100                DWORD 00412525
:0041265E 48254100                DWORD 00412548
:00412662 84254100                DWORD 00412584
:00412666 9F254100                DWORD 0041259F


:0041266A 55                      push ebp
:0041266B 8BEC                    mov ebp, esp
:0041266D 83EC08                  sub esp, 00000008
:00412670 8B450C                  mov eax, dword ptr [ebp+0C]
:00412673 8945FC                  mov dword ptr [ebp-04], eax
:00412676 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0041267D 740E                    je 0041268D
:0041267F 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00412686 740A                    je 00412692
:00412688 E9C1000000              jmp 0041274E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041267D(C)
|
:0041268D E9C0000000              jmp 00412752

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412686(C)
|
:00412692 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412695 81E1FFFF0000            and ecx, 0000FFFF
:0041269B 894DF8                  mov dword ptr [ebp-08], ecx
:0041269E 8B55F8                  mov edx, dword ptr [ebp-08]
:004126A1 81EA03040000            sub edx, 00000403
:004126A7 8955F8                  mov dword ptr [ebp-08], edx
:004126AA 837DF821                cmp dword ptr [ebp-08], 00000021
:004126AE 0F879A000000            ja 0041274E
:004126B4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004126B7 33C0                    xor eax, eax
:004126B9 8A8175274100            mov al, byte ptr [ecx+00412775]
:004126BF FF24855D274100          jmp dword ptr [4*eax+0041275D]
:004126C6 6A01                    push 00000001
:004126C8 8B5508                  mov edx, dword ptr [ebp+08]
:004126CB 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004126CC FF15B0874B00            Call dword ptr [004B87B0]
:004126D2 C705D853480000000000    mov dword ptr [004853D8], 00000000
:004126DC 33C0                    xor eax, eax
:004126DE EB77                    jmp 00412757
:004126E0 6A01                    push 00000001
:004126E2 8B4508                  mov eax, dword ptr [ebp+08]
:004126E5 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004126E6 FF15B0874B00            Call dword ptr [004B87B0]
:004126EC C705D853480001000000    mov dword ptr [004853D8], 00000001
:004126F6 33C0                    xor eax, eax
:004126F8 EB5D                    jmp 00412757
:004126FA 6A01                    push 00000001
:004126FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004126FF 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00412700 FF15B0874B00            Call dword ptr [004B87B0]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00412706 C705D853480002000000    mov dword ptr [004853D8], 00000002
:00412710 33C0                    xor eax, eax
:00412712 EB43                    jmp 00412757
:00412714 6A01                    push 00000001
:00412716 8B5508                  mov edx, dword ptr [ebp+08]
:00412719 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041271A FF15B0874B00            Call dword ptr [004B87B0]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00412720 C705D853480003000000    mov dword ptr [004853D8], 00000003
:0041272A B801000000              mov eax, 00000001
:0041272F EB26                    jmp 00412757
:00412731 6A01                    push 00000001
:00412733 8B4508                  mov eax, dword ptr [ebp+08]
:00412736 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00412737 FF15B0874B00            Call dword ptr [004B87B0]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041273D C705D853480004000000    mov dword ptr [004853D8], 00000004
:00412747 B801000000              mov eax, 00000001
:0041274C EB09                    jmp 00412757

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412688(U), :004126AE(C)
|
:0041274E 33C0                    xor eax, eax
:00412750 EB05                    jmp 00412757

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041268D(U)
|
:00412752 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004126DE(U), :004126F8(U), :00412712(U), :0041272F(U), :0041274C(U)
|:00412750(U)
|
:00412757 8BE5                    mov esp, ebp
:00412759 5D                      pop ebp
:0041275A C21000                  ret 0010



:0041275D C6264100                DWORD 004126C6
:00412761 E0264100                DWORD 004126E0
:00412765 FA264100                DWORD 004126FA
:00412769 14274100                DWORD 00412714
:0041276D 31274100                DWORD 00412731
:00412771 4E274100                DWORD 0041274E


:00412775 0001                    add byte ptr [ecx], al
:00412777 0505050505              add eax, 05050505
:0041277C 0505050505              add eax, 05050505
:00412781 0505050505              add eax, 05050505
:00412786 0505050505              add eax, 05050505
:0041278B 0505050505              add eax, 05050505
:00412790 0505050502              add eax, 02050505
:00412795 0304CC                  add eax, dword ptr [esp+8*ecx]
:00412798 CC                      int 03
:00412799 CC                      int 03
:0041279A CC                      int 03
:0041279B CC                      int 03
:0041279C CC                      int 03
:0041279D CC                      int 03
:0041279E CC                      int 03
:0041279F CC                      int 03

* Referenced by a CALL at Addresses:
|:004070AF   , :0041116A   , :004120FF   , :0043013A   , :004534F1   
|:0045351B   , :004541CE   , :004541EB   , :004542E5   , :004542FE   
|:00454502   
|
:004127A0 55                      push ebp
:004127A1 8BEC                    mov ebp, esp
:004127A3 51                      push ecx
:004127A4 894DFC                  mov dword ptr [ebp-04], ecx
:004127A7 8B45FC                  mov eax, dword ptr [ebp-04]
:004127AA 8A400F                  mov al, byte ptr [eax+0F]
:004127AD 8BE5                    mov esp, ebp
:004127AF 5D                      pop ebp
:004127B0 C3                      ret


:004127B1 CC                      int 03
:004127B2 CC                      int 03
:004127B3 CC                      int 03
:004127B4 CC                      int 03
:004127B5 CC                      int 03
:004127B6 CC                      int 03
:004127B7 CC                      int 03
:004127B8 CC                      int 03
:004127B9 CC                      int 03
:004127BA CC                      int 03
:004127BB CC                      int 03
:004127BC CC                      int 03
:004127BD CC                      int 03
:004127BE CC                      int 03
:004127BF CC                      int 03

* Referenced by a CALL at Address:
|:004120D2   
|
:004127C0 55                      push ebp
:004127C1 8BEC                    mov ebp, esp
:004127C3 51                      push ecx
:004127C4 894DFC                  mov dword ptr [ebp-04], ecx
:004127C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004127CA 8A4D08                  mov cl, byte ptr [ebp+08]
:004127CD 884815                  mov byte ptr [eax+15], cl
:004127D0 8BE5                    mov esp, ebp
:004127D2 5D                      pop ebp
:004127D3 C20400                  ret 0004


:004127D6 CC                      int 03
:004127D7 CC                      int 03
:004127D8 CC                      int 03
:004127D9 CC                      int 03
:004127DA CC                      int 03
:004127DB CC                      int 03
:004127DC CC                      int 03
:004127DD CC                      int 03
:004127DE CC                      int 03
:004127DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00412377   , :0042796A   , :00428B48   , :0042901B   
|
:004127E0 55                      push ebp
:004127E1 8BEC                    mov ebp, esp
:004127E3 51                      push ecx
:004127E4 894DFC                  mov dword ptr [ebp-04], ecx
:004127E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004127EA 8A4015                  mov al, byte ptr [eax+15]
:004127ED 8BE5                    mov esp, ebp
:004127EF 5D                      pop ebp
:004127F0 C3                      ret


:004127F1 CC                      int 03
:004127F2 CC                      int 03
:004127F3 CC                      int 03
:004127F4 CC                      int 03
:004127F5 CC                      int 03
:004127F6 CC                      int 03
:004127F7 CC                      int 03
:004127F8 CC                      int 03
:004127F9 CC                      int 03
:004127FA CC                      int 03
:004127FB CC                      int 03
:004127FC CC                      int 03
:004127FD CC                      int 03
:004127FE CC                      int 03
:004127FF CC                      int 03

* Referenced by a CALL at Address:
|:00411AFC   
|
:00412800 55                      push ebp
:00412801 8BEC                    mov ebp, esp
:00412803 51                      push ecx
:00412804 894DFC                  mov dword ptr [ebp-04], ecx
:00412807 8B450C                  mov eax, dword ptr [ebp+0C]
:0041280A 50                      push eax
:0041280B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041280E 51                      push ecx
:0041280F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412812 E8721C0000              call 00414489
:00412817 8BE5                    mov esp, ebp
:00412819 5D                      pop ebp
:0041281A C20800                  ret 0008


:0041281D CC                      int 03
:0041281E CC                      int 03
:0041281F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041231E   , :00415736   
|
:00412820 55                      push ebp
:00412821 8BEC                    mov ebp, esp
:00412823 51                      push ecx
:00412824 894DFC                  mov dword ptr [ebp-04], ecx
:00412827 8B45FC                  mov eax, dword ptr [ebp-04]
:0041282A 8A4021                  mov al, byte ptr [eax+21]
:0041282D 8BE5                    mov esp, ebp
:0041282F 5D                      pop ebp
:00412830 C3                      ret


:00412831 CC                      int 03
:00412832 CC                      int 03
:00412833 CC                      int 03
:00412834 CC                      int 03
:00412835 CC                      int 03
:00412836 CC                      int 03
:00412837 CC                      int 03
:00412838 CC                      int 03
:00412839 CC                      int 03
:0041283A CC                      int 03
:0041283B CC                      int 03
:0041283C CC                      int 03
:0041283D CC                      int 03
:0041283E CC                      int 03
:0041283F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041152F   , :0042694C   , :0042C957   , :00456C18   , :00456C4B   
|:00457188   , :004571AA   , :0045720E   , :0045729E   , :004582D6   
|:00458E6E   
|
:00412840 55                      push ebp
:00412841 8BEC                    mov ebp, esp
:00412843 51                      push ecx
:00412844 894DFC                  mov dword ptr [ebp-04], ecx
:00412847 8B45FC                  mov eax, dword ptr [ebp-04]
:0041284A 8A4D08                  mov cl, byte ptr [ebp+08]
:0041284D 884801                  mov byte ptr [eax+01], cl
:00412850 8BE5                    mov esp, ebp
:00412852 5D                      pop ebp
:00412853 C20400                  ret 0004


:00412856 CC                      int 03
:00412857 CC                      int 03
:00412858 CC                      int 03
:00412859 CC                      int 03
:0041285A CC                      int 03
:0041285B CC                      int 03
:0041285C CC                      int 03
:0041285D CC                      int 03
:0041285E CC                      int 03
:0041285F CC                      int 03

* Referenced by a CALL at Addresses:
|:004119F9   , :00412401   , :004569A5   
|
:00412860 55                      push ebp
:00412861 8BEC                    mov ebp, esp
:00412863 51                      push ecx
:00412864 894DFC                  mov dword ptr [ebp-04], ecx
:00412867 8B45FC                  mov eax, dword ptr [ebp-04]
:0041286A 0568350000              add eax, 00003568
:0041286F 8BE5                    mov esp, ebp
:00412871 5D                      pop ebp
:00412872 C3                      ret


:00412873 CC                      int 03
:00412874 CC                      int 03
:00412875 CC                      int 03
:00412876 CC                      int 03
:00412877 CC                      int 03
:00412878 CC                      int 03
:00412879 CC                      int 03
:0041287A CC                      int 03
:0041287B CC                      int 03
:0041287C CC                      int 03
:0041287D CC                      int 03
:0041287E CC                      int 03
:0041287F CC                      int 03

* Referenced by a CALL at Addresses:
|:00410A15   , :00411552   
|
:00412880 55                      push ebp
:00412881 8BEC                    mov ebp, esp
:00412883 51                      push ecx
:00412884 894DFC                  mov dword ptr [ebp-04], ecx
:00412887 8B45FC                  mov eax, dword ptr [ebp-04]
:0041288A 33C9                    xor ecx, ecx
:0041288C 8A4878                  mov cl, byte ptr [eax+78]
:0041288F 33C0                    xor eax, eax
:00412891 85C9                    test ecx, ecx
:00412893 0F9FC0                  setg al
:00412896 8BE5                    mov esp, ebp
:00412898 5D                      pop ebp
:00412899 C3                      ret


:0041289A CC                      int 03
:0041289B CC                      int 03
:0041289C CC                      int 03
:0041289D CC                      int 03
:0041289E CC                      int 03
:0041289F CC                      int 03

* Referenced by a CALL at Addresses:
|:00416D33   , :00422D03   , :00426694   , :00426A45   , :0045533E   
|:0045805C   
|
:004128A0 55                      push ebp
:004128A1 8BEC                    mov ebp, esp
:004128A3 51                      push ecx
:004128A4 8B450C                  mov eax, dword ptr [ebp+0C]
:004128A7 25FFFF0000              and eax, 0000FFFF
:004128AC 85C0                    test eax, eax
:004128AE 7409                    je 004128B9

* Possible StringData Ref from Data Obj ->"PMPALET.E4"
                                  |
:004128B0 C745FC507A4700          mov [ebp-04], 00477A50
:004128B7 EB07                    jmp 004128C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004128AE(C)
|

* Possible StringData Ref from Data Obj ->"SPALET.E4"
                                  |
:004128B9 C745FC207B4700          mov [ebp-04], 00477B20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004128B7(U)
|
:004128C0 668B4D08                mov cx, word ptr [ebp+08]
:004128C4 51                      push ecx
:004128C5 8B55FC                  mov edx, dword ptr [ebp-04]
:004128C8 52                      push edx
:004128C9 E807000000              call 004128D5
:004128CE 83C408                  add esp, 00000008
:004128D1 8BE5                    mov esp, ebp
:004128D3 5D                      pop ebp
:004128D4 C3                      ret



* Referenced by a CALL at Addresses:
|:004128C9   , :004129DC   
|
:004128D5 55                      push ebp
:004128D6 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004128D8 6AFF                    push FFFFFFFF
:004128DA 68BC384700              push 004738BC
:004128DF 64A100000000            mov eax, dword ptr fs:[00000000]
:004128E5 50                      push eax
:004128E6 64892500000000          mov dword ptr fs:[00000000], esp
:004128ED 81EC0C010000            sub esp, 0000010C
:004128F3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004128F9 E8024EFFFF              call 00407700
:004128FE C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00412905 6A07                    push 00000007
:00412907 E8DD840500              call 0046ADE9
:0041290C 83C404                  add esp, 00000004
:0041290F 8B4508                  mov eax, dword ptr [ebp+08]
:00412912 50                      push eax
:00412913 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412919 E8171A0000              call 00414335
:0041291E 85C0                    test eax, eax
:00412920 7514                    jne 00412936
:00412922 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00412929 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041292F E8EC4DFFFF              call 00407720
:00412934 EB7D                    jmp 004129B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412920(C)
|
:00412936 68F0534800              push 004853F0
:0041293B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041293E 81E1FFFF0000            and ecx, 0000FFFF
:00412944 51                      push ecx
:00412945 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041294B E8391B0000              call 00414489
:00412950 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412956 E8B1DCFFFF              call 0041060C
:0041295B C745F0F0534800          mov [ebp-10], 004853F0
:00412962 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:0041296C EB0F                    jmp 0041297D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041299F(U)
|
:0041296E 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00412974 83C201                  add edx, 00000001
:00412977 8995E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041296C(U)
|
:0041297D 81BDE8FEFFFF00030000    cmp dword ptr [ebp+FFFFFEE8], 00000300
:00412987 7318                    jnb 004129A1
:00412989 8B45F0                  mov eax, dword ptr [ebp-10]
:0041298C 8A08                    mov cl, byte ptr [eax]
:0041298E C0E904                  shr cl, 04
:00412991 8B55F0                  mov edx, dword ptr [ebp-10]
:00412994 880A                    mov byte ptr [edx], cl
:00412996 8B45F0                  mov eax, dword ptr [ebp-10]
:00412999 83C001                  add eax, 00000001
:0041299C 8945F0                  mov dword ptr [ebp-10], eax
:0041299F EBCD                    jmp 0041296E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412987(C)
|
:004129A1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004129A8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004129AE E86D4DFFFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412934(U)
|
:004129B3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004129B6 64890D00000000          mov dword ptr fs:[00000000], ecx
:004129BD 8BE5                    mov esp, ebp
:004129BF 5D                      pop ebp
:004129C0 C3                      ret



* Referenced by a CALL at Address:
|:0045A2FE   
|
:004129C1 55                      push ebp
:004129C2 8BEC                    mov ebp, esp
:004129C4 83EC08                  sub esp, 00000008
:004129C7 E8463F0000              call 00416912
:004129CC 85C0                    test eax, eax
:004129CE 7502                    jne 004129D2
:004129D0 EB74                    jmp 00412A46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004129CE(C)
|
:004129D2 668B4508                mov ax, word ptr [ebp+08]
:004129D6 50                      push eax

* Possible StringData Ref from Data Obj ->"SPALET.E4"
                                  |
:004129D7 68207B4700              push 00477B20
:004129DC E8F4FEFFFF              call 004128D5
:004129E1 83C408                  add esp, 00000008
:004129E4 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004129E8 7457                    je 00412A41
:004129EA C745FC6D554800          mov [ebp-04], 0048556D
:004129F1 C745F87D010000          mov [ebp-08], 0000017D
:004129F8 EB09                    jmp 00412A03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A3F(U)
|
:004129FA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004129FD 83C101                  add ecx, 00000001
:00412A00 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004129F8(U)
|
:00412A03 817DF800030000          cmp dword ptr [ebp-08], 00000300
:00412A0A 7335                    jnb 00412A41
:00412A0C 8B55FC                  mov edx, dword ptr [ebp-04]
:00412A0F 33C0                    xor eax, eax
:00412A11 8A02                    mov al, byte ptr [edx]
:00412A13 83F806                  cmp eax, 00000006
:00412A16 7C18                    jl 00412A30
:00412A18 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412A1B 8A11                    mov dl, byte ptr [ecx]
:00412A1D 80EA06                  sub dl, 06
:00412A20 8B45FC                  mov eax, dword ptr [ebp-04]
:00412A23 8810                    mov byte ptr [eax], dl
:00412A25 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412A28 83C101                  add ecx, 00000001
:00412A2B 894DFC                  mov dword ptr [ebp-04], ecx
:00412A2E EB0F                    jmp 00412A3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A16(C)
|
:00412A30 8B55FC                  mov edx, dword ptr [ebp-04]
:00412A33 C60200                  mov byte ptr [edx], 00
:00412A36 8B45FC                  mov eax, dword ptr [ebp-04]
:00412A39 83C001                  add eax, 00000001
:00412A3C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A2E(U)
|
:00412A3F EBB9                    jmp 004129FA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004129E8(C), :00412A0A(C)
|
:00412A41 E8DD030000              call 00412E23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004129D0(U)
|
:00412A46 8BE5                    mov esp, ebp
:00412A48 5D                      pop ebp
:00412A49 C3                      ret



* Referenced by a CALL at Address:
|:004262F1   
|
:00412A4A 55                      push ebp
:00412A4B 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00412A4D 6AFF                    push FFFFFFFF
:00412A4F 68D2384700              push 004738D2
:00412A54 64A100000000            mov eax, dword ptr fs:[00000000]
:00412A5A 50                      push eax
:00412A5B 64892500000000          mov dword ptr fs:[00000000], esp
:00412A62 81EC0C010000            sub esp, 0000010C
:00412A68 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412A6E E88D4CFFFF              call 00407700
:00412A73 C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00412A7A 6A07                    push 00000007
:00412A7C E868830500              call 0046ADE9
:00412A81 83C404                  add esp, 00000004

* Possible StringData Ref from Data Obj ->"LOGO.E4"
                                  |
:00412A84 68987A4700              push 00477A98
:00412A89 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412A8F E8A1180000              call 00414335
:00412A94 85C0                    test eax, eax
:00412A96 7514                    jne 00412AAC
:00412A98 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00412A9F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412AA5 E8764CFFFF              call 00407720
:00412AAA EB75                    jmp 00412B21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A96(C)
|
:00412AAC 68F0534800              push 004853F0
:00412AB1 6A00                    push 00000000
:00412AB3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412AB9 E8CB190000              call 00414489
:00412ABE 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412AC4 E843DBFFFF              call 0041060C
:00412AC9 C745F0F0534800          mov [ebp-10], 004853F0
:00412AD0 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00412ADA EB0F                    jmp 00412AEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412B0D(U)
|
:00412ADC 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00412AE2 83C001                  add eax, 00000001
:00412AE5 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412ADA(U)
|
:00412AEB 81BDE8FEFFFF00030000    cmp dword ptr [ebp+FFFFFEE8], 00000300
:00412AF5 7318                    jnb 00412B0F
:00412AF7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412AFA 8A11                    mov dl, byte ptr [ecx]
:00412AFC C0EA04                  shr dl, 04
:00412AFF 8B45F0                  mov eax, dword ptr [ebp-10]
:00412B02 8810                    mov byte ptr [eax], dl
:00412B04 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412B07 83C101                  add ecx, 00000001
:00412B0A 894DF0                  mov dword ptr [ebp-10], ecx
:00412B0D EBCD                    jmp 00412ADC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412AF5(C)
|
:00412B0F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00412B16 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412B1C E8FF4BFFFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412AAA(U)
|
:00412B21 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00412B24 64890D00000000          mov dword ptr fs:[00000000], ecx
:00412B2B 8BE5                    mov esp, ebp
:00412B2D 5D                      pop ebp
:00412B2E C3                      ret



* Referenced by a CALL at Address:
|:004263F5   
|
:00412B2F 55                      push ebp
:00412B30 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00412B32 6AFF                    push FFFFFFFF
:00412B34 68E8384700              push 004738E8
:00412B39 64A100000000            mov eax, dword ptr fs:[00000000]
:00412B3F 50                      push eax
:00412B40 64892500000000          mov dword ptr fs:[00000000], esp
:00412B47 81EC0C010000            sub esp, 0000010C
:00412B4D 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412B53 E8A84BFFFF              call 00407700
:00412B58 C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00412B5F 6A07                    push 00000007
:00412B61 E883820500              call 0046ADE9
:00412B66 83C404                  add esp, 00000004

* Possible StringData Ref from Data Obj ->"ACERTWP.E4"
                                  |
:00412B69 68A07A4700              push 00477AA0
:00412B6E 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412B74 E8BC170000              call 00414335
:00412B79 85C0                    test eax, eax
:00412B7B 7514                    jne 00412B91
:00412B7D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00412B84 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412B8A E8914BFFFF              call 00407720
:00412B8F EB75                    jmp 00412C06

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412B7B(C)
|
:00412B91 68F0534800              push 004853F0
:00412B96 6A00                    push 00000000
:00412B98 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412B9E E8E6180000              call 00414489
:00412BA3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412BA9 E85EDAFFFF              call 0041060C
:00412BAE C745F0F0534800          mov [ebp-10], 004853F0
:00412BB5 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00412BBF EB0F                    jmp 00412BD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412BF2(U)
|
:00412BC1 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00412BC7 83C001                  add eax, 00000001
:00412BCA 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412BBF(U)
|
:00412BD0 81BDE8FEFFFF00030000    cmp dword ptr [ebp+FFFFFEE8], 00000300
:00412BDA 7318                    jnb 00412BF4
:00412BDC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412BDF 8A11                    mov dl, byte ptr [ecx]
:00412BE1 C0EA04                  shr dl, 04
:00412BE4 8B45F0                  mov eax, dword ptr [ebp-10]
:00412BE7 8810                    mov byte ptr [eax], dl
:00412BE9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412BEC 83C101                  add ecx, 00000001
:00412BEF 894DF0                  mov dword ptr [ebp-10], ecx
:00412BF2 EBCD                    jmp 00412BC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412BDA(C)
|
:00412BF4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00412BFB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00412C01 E81A4BFFFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412B8F(U)
|
:00412C06 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00412C09 64890D00000000          mov dword ptr fs:[00000000], ecx
:00412C10 8BE5                    mov esp, ebp
:00412C12 5D                      pop ebp
:00412C13 C3                      ret



* Referenced by a CALL at Addresses:
|:0042632D   , :00426431   
|
:00412C14 55                      push ebp
:00412C15 8BEC                    mov ebp, esp
:00412C17 6A00                    push 00000000
:00412C19 E805000000              call 00412C23
:00412C1E 83C404                  add esp, 00000004
:00412C21 5D                      pop ebp
:00412C22 C3                      ret



* Referenced by a CALL at Addresses:
|:00412C19   , :00412D7D   
|
:00412C23 55                      push ebp
:00412C24 8BEC                    mov ebp, esp
:00412C26 81EC00030000            sub esp, 00000300
:00412C2C 6A00                    push 00000000
:00412C2E 6800030000              push 00000300
:00412C33 8D8500FDFFFF            lea eax, dword ptr [ebp+FFFFFD00]
:00412C39 50                      push eax
:00412C3A E809FC0400              call 00462848
:00412C3F 83C40C                  add esp, 0000000C
:00412C42 837D0800                cmp dword ptr [ebp+08], 00000000
:00412C46 7418                    je 00412C60
:00412C48 8D8D00FDFFFF            lea ecx, dword ptr [ebp+FFFFFD00]
:00412C4E 51                      push ecx
:00412C4F 6800010000              push 00000100
:00412C54 6A00                    push 00000000
:00412C56 E80A970500              call 0046C365
:00412C5B 83C40C                  add esp, 0000000C
:00412C5E EB16                    jmp 00412C76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412C46(C)
|
:00412C60 8D9500FDFFFF            lea edx, dword ptr [ebp+FFFFFD00]
:00412C66 52                      push edx
:00412C67 6800010000              push 00000100
:00412C6C 6A00                    push 00000000
:00412C6E E8F2960500              call 0046C365
:00412C73 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412C5E(U)
|
:00412C76 8BE5                    mov esp, ebp
:00412C78 5D                      pop ebp
:00412C79 C3                      ret



* Referenced by a CALL at Addresses:
|:0040CA75   , :00411260   , :00412634   , :00416D18   , :00424DA3   
|:004262D8   , :004263DC   , :004264C4   , :0042650E   , :004267E5   
|:00429171   , :00429341   
|
:00412C7A 55                      push ebp
:00412C7B 8BEC                    mov ebp, esp
:00412C7D 83EC14                  sub esp, 00000014
:00412C80 A1380E4B00              mov eax, dword ptr [004B0E38]
:00412C85 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00412C86 FF15B8864B00            Call dword ptr [004B86B8]
:00412C8C 8945FC                  mov dword ptr [ebp-04], eax
:00412C8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412C92 51                      push ecx

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:00412C93 FF15A0844B00            Call dword ptr [004B84A0]
:00412C99 8945F8                  mov dword ptr [ebp-08], eax
:00412C9C 68B8010000              push 000001B8
:00412CA1 6880020000              push 00000280
:00412CA6 8B55F8                  mov edx, dword ptr [ebp-08]
:00412CA9 52                      push edx

* Reference To: GDI32.CreateCompatibleBitmap, Ord:001Eh
                                  |
:00412CAA FF15C4844B00            Call dword ptr [004B84C4]
:00412CB0 8945F0                  mov dword ptr [ebp-10], eax
:00412CB3 8B45F0                  mov eax, dword ptr [ebp-10]
:00412CB6 50                      push eax
:00412CB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412CBA 51                      push ecx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00412CBB FF159C844B00            Call dword ptr [004B849C]
:00412CC1 C745F400000000          mov [ebp-0C], 00000000
:00412CC8 EB09                    jmp 00412CD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412D51(U)
|
:00412CCA 8B55F4                  mov edx, dword ptr [ebp-0C]
:00412CCD 83C201                  add edx, 00000001
:00412CD0 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412CC8(U)
|
:00412CD3 837DF404                cmp dword ptr [ebp-0C], 00000004
:00412CD7 7D7D                    jge 00412D56
:00412CD9 6A01                    push 00000001
:00412CDB E89B3E0100              call 00426B7B
:00412CE0 83C404                  add esp, 00000004
:00412CE3 8B45F4                  mov eax, dword ptr [ebp-0C]
:00412CE6 50                      push eax
:00412CE7 E89D000000              call 00412D89
:00412CEC 83C404                  add esp, 00000004
:00412CEF 8945EC                  mov dword ptr [ebp-14], eax
:00412CF2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00412CF5 51                      push ecx
:00412CF6 8B55F8                  mov edx, dword ptr [ebp-08]
:00412CF9 52                      push edx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00412CFA FF159C844B00            Call dword ptr [004B849C]
:00412D00 682100F000              push 00F00021
:00412D05 68B8010000              push 000001B8
:00412D0A 6880020000              push 00000280
:00412D0F 6A00                    push 00000000
:00412D11 6A00                    push 00000000
:00412D13 8B45F8                  mov eax, dword ptr [ebp-08]
:00412D16 50                      push eax

* Reference To: GDI32.PatBlt, Ord:0122h
                                  |
:00412D17 FF15C0844B00            Call dword ptr [004B84C0]
:00412D1D 68C6008800              push 008800C6
:00412D22 6A00                    push 00000000
:00412D24 6A00                    push 00000000
:00412D26 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412D29 51                      push ecx
:00412D2A 68B8010000              push 000001B8
:00412D2F 6880020000              push 00000280
:00412D34 6A28                    push 00000028
:00412D36 6A00                    push 00000000
:00412D38 8B55FC                  mov edx, dword ptr [ebp-04]
:00412D3B 52                      push edx

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:00412D3C FF1598844B00            Call dword ptr [004B8498]
:00412D42 8B45EC                  mov eax, dword ptr [ebp-14]
:00412D45 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00412D46 FF158C844B00            Call dword ptr [004B848C]
:00412D4C E83F3E0100              call 00426B90
:00412D51 E974FFFFFF              jmp 00412CCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412CD7(C)
|
:00412D56 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412D59 51                      push ecx

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:00412D5A FF15E4844B00            Call dword ptr [004B84E4]
:00412D60 8B55F0                  mov edx, dword ptr [ebp-10]
:00412D63 52                      push edx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00412D64 FF158C844B00            Call dword ptr [004B848C]
:00412D6A 8B45FC                  mov eax, dword ptr [ebp-04]
:00412D6D 50                      push eax
:00412D6E 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00412D74 51                      push ecx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00412D75 FF15BC864B00            Call dword ptr [004B86BC]
:00412D7B 6A01                    push 00000001
:00412D7D E8A1FEFFFF              call 00412C23
:00412D82 83C404                  add esp, 00000004
:00412D85 8BE5                    mov esp, ebp
:00412D87 5D                      pop ebp
:00412D88 C3                      ret



* Referenced by a CALL at Address:
|:00412CE7   
|
:00412D89 55                      push ebp
:00412D8A 8BEC                    mov ebp, esp
:00412D8C 83EC08                  sub esp, 00000008
:00412D8F 8B4508                  mov eax, dword ptr [ebp+08]
:00412D92 8945F8                  mov dword ptr [ebp-08], eax
:00412D95 837DF803                cmp dword ptr [ebp-08], 00000003
:00412D99 7725                    ja 00412DC0
:00412D9B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412D9E FF248DD52D4100          jmp dword ptr [4*ecx+00412DD5]
:00412DA5 C745FC01000000          mov [ebp-04], 00000001
:00412DAC EB19                    jmp 00412DC7

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00412DAE C745FC02000000          mov [ebp-04], 00000002
:00412DB5 EB10                    jmp 00412DC7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00412DB7 C745FC03000000          mov [ebp-04], 00000003
:00412DBE EB07                    jmp 00412DC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412D99(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00412DC0 C745FC04000000          mov [ebp-04], 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412DAC(U), :00412DB5(U), :00412DBE(U)
|
:00412DC7 8B55FC                  mov edx, dword ptr [ebp-04]
:00412DCA 52                      push edx

* Reference To: GDI32.GetStockObject, Ord:00FAh
                                  |
:00412DCB FF15C8844B00            Call dword ptr [004B84C8]
:00412DD1 8BE5                    mov esp, ebp
:00412DD3 5D                      pop ebp
:00412DD4 C3                      ret



:00412DD5 A52D4100                DWORD 00412DA5
:00412DD9 A52D4100                DWORD 00412DA5
:00412DDD AE2D4100                DWORD 00412DAE
:00412DE1 B72D4100                DWORD 00412DB7



* Referenced by a CALL at Addresses:
|:0041263E   , :004232EF   , :004687E2   
|
:00412DE5 55                      push ebp
:00412DE6 8BEC                    mov ebp, esp
:00412DE8 6A00                    push 00000000
:00412DEA E805000000              call 00412DF4
:00412DEF 83C404                  add esp, 00000004
:00412DF2 5D                      pop ebp
:00412DF3 C3                      ret



* Referenced by a CALL at Addresses:
|:00412DEA   , :00412E28   
|
:00412DF4 55                      push ebp
:00412DF5 8BEC                    mov ebp, esp
:00412DF7 51                      push ecx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00412DF8 6A07                    push 00000007
:00412DFA E8EA7F0500              call 0046ADE9
:00412DFF 83C404                  add esp, 00000004
:00412E02 C745FCF0534800          mov [ebp-04], 004853F0
:00412E09 8B45FC                  mov eax, dword ptr [ebp-04]
:00412E0C 83C01E                  add eax, 0000001E
:00412E0F 50                      push eax
:00412E10 68F6000000              push 000000F6

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00412E15 6A0A                    push 0000000A
:00412E17 E849950500              call 0046C365
:00412E1C 83C40C                  add esp, 0000000C
:00412E1F 8BE5                    mov esp, ebp
:00412E21 5D                      pop ebp
:00412E22 C3                      ret



* Referenced by a CALL at Addresses:
|:0040CA66   , :00412A41   , :00416D71   , :00422EDA   , :00424A71   
|:0042631E   , :00426422   , :004292C5   , :00455350   , :00458064   
|
:00412E23 55                      push ebp
:00412E24 8BEC                    mov ebp, esp
:00412E26 6A01                    push 00000001
:00412E28 E8C7FFFFFF              call 00412DF4
:00412E2D 83C404                  add esp, 00000004
:00412E30 5D                      pop ebp
:00412E31 C3                      ret



* Referenced by a CALL at Addresses:
|:00408BF5   , :00408C5A   , :00408C7B   , :00412F97   , :0041312A   
|:00413419   , :00416D22   , :0042243F   , :00424B34   , :00424CC2   
|:004262DD   , :004263E1   , :00427466   , :00427783   , :00428A43   
|:00428E50   , :00429176   , :0042A267   , :0042CEB5   , :0042E6AC   
|:0042ED15   , :00439CFE   , :00439FC6   , :0043A21C   , :0043A39F   
|:0043A820   , :0043A921   , :0043AC86   , :0043D07E   , :0043FEF7   
|:00440682   , :00440AFA   , :00440B73   , :0044134D   , :0044151E   
|:0044164C   , :00441826   , :00441955   , :0044224C   , :0044254F   
|:0044281E   , :0044299B   , :00443419   , :004449F3   , :00444CF5   
|:00444EAF   , :00445861   , :00446254   , :004518C3   , :00454824   
|:004550BB   , :00457E93   , :00457FDB   , :00458338   , :0045A999   
|:0045FFA2   , :00460041   , :0046060D   , :004609D7   , :00460C3A   
|:0046102B   , :004610D6   , :0046113A   , :0046123A   , :0046144F   
|:0046161A   
|
:00412E32 55                      push ebp
:00412E33 8BEC                    mov ebp, esp
:00412E35 A0F0564800              mov al, byte ptr [004856F0]
:00412E3A 0401                    add al, 01
:00412E3C A2F0564800              mov byte ptr [004856F0], al
:00412E41 6A00                    push 00000000
:00412E43 E8E7970500              call 0046C62F
:00412E48 83C404                  add esp, 00000004
:00412E4B 5D                      pop ebp
:00412E4C C3                      ret



* Referenced by a CALL at Addresses:
|:00408C0A   , :00408C6F   , :00408C8C   , :004130A5   , :004130C5   
|:004132A3   , :004132C3   , :00413462   , :00416D6C   , :00422449   
|:00424B3E   , :00424D36   , :00426319   , :0042641D   , :0042776F   
|:00427908   , :00428B3E   , :00428FC2   , :004292BB   , :0042A2CA   
|:0042D176   , :0042EC37   , :0042F352   , :00439D9C   , :0043A1A2   
|:0043A342   , :0043A3EA   , :0043A880   , :0043A981   , :0043AF56   
|:0043D0C1   , :004400C9   , :004407B2   , :00440B5A   , :00440BA0   
|:004414DF   , :00441638   , :00441679   , :0044193C   , :00441980   
|:00442483   , :004427A5   , :0044289A   , :00442A43   , :00443AD2   
|:00444A26   , :00444D07   , :00444EC6   , :004458B4   , :004462F7   
|:004463A2   , :004518F3   , :004548D1   , :00455327   , :00457F46   
|:0045804D   , :0045834E   , :0045A9A3   , :0046000E   , :0046006C   
|:004607C7   , :00460A97   , :00460C97   , :00461060   , :0046110D   
|:004611CB   , :00461378   , :00461566   , :004616F3   
|
:00412E4D 55                      push ebp
:00412E4E 8BEC                    mov ebp, esp
:00412E50 33C0                    xor eax, eax
:00412E52 A0F0564800              mov al, byte ptr [004856F0]
:00412E57 85C0                    test eax, eax
:00412E59 7419                    je 00412E74
:00412E5B 6A01                    push 00000001
:00412E5D E8CD970500              call 0046C62F
:00412E62 83C404                  add esp, 00000004
:00412E65 8A0DF0564800            mov cl, byte ptr [004856F0]
:00412E6B 80E901                  sub cl, 01
:00412E6E 880DF0564800            mov byte ptr [004856F0], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412E59(C)
|
:00412E74 5D                      pop ebp
:00412E75 C3                      ret



* Referenced by a CALL at Address:
|:00460B7B   
|
:00412E76 55                      push ebp
:00412E77 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00412E79 6A07                    push 00000007
:00412E7B E8697F0500              call 0046ADE9
:00412E80 83C404                  add esp, 00000004
:00412E83 8B4518                  mov eax, dword ptr [ebp+18]
:00412E86 50                      push eax
:00412E87 8B4D14                  mov ecx, dword ptr [ebp+14]
:00412E8A 51                      push ecx
:00412E8B 8B5510                  mov edx, dword ptr [ebp+10]
:00412E8E 52                      push edx
:00412E8F 8B450C                  mov eax, dword ptr [ebp+0C]
:00412E92 50                      push eax
:00412E93 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412E96 51                      push ecx
:00412E97 E8018F0500              call 0046BD9D
:00412E9C 83C414                  add esp, 00000014
:00412E9F 5D                      pop ebp
:00412EA0 C3                      ret



* Referenced by a CALL at Address:
|:00460C8F   
|
:00412EA1 55                      push ebp
:00412EA2 8BEC                    mov ebp, esp
:00412EA4 6A00                    push 00000000
:00412EA6 E87C780500              call 0046A727
:00412EAB 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00412EAE 6A07                    push 00000007
:00412EB0 E8347F0500              call 0046ADE9
:00412EB5 83C404                  add esp, 00000004
:00412EB8 6A00                    push 00000000
:00412EBA 6A00                    push 00000000
:00412EBC 8B4518                  mov eax, dword ptr [ebp+18]
:00412EBF 50                      push eax
:00412EC0 E84B7F0500              call 0046AE10
:00412EC5 83C40C                  add esp, 0000000C
:00412EC8 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00412ECB 51                      push ecx
:00412ECC 8B5514                  mov edx, dword ptr [ebp+14]
:00412ECF 52                      push edx
:00412ED0 8B4510                  mov eax, dword ptr [ebp+10]
:00412ED3 50                      push eax
:00412ED4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412ED7 51                      push ecx
:00412ED8 8B5508                  mov edx, dword ptr [ebp+08]
:00412EDB 52                      push edx
:00412EDC E8068D0500              call 0046BBE7
:00412EE1 83C414                  add esp, 00000014
:00412EE4 5D                      pop ebp
:00412EE5 C3                      ret



* Referenced by a CALL at Addresses:
|:004125C2   , :00412639   , :00412F9C   , :0041312F   , :00416D27   
|:00426083   , :004262EC   , :004263F0   , :00426436   , :004264C9   
|:00426513   , :004267EA   , :0042917B   , :00429346   , :00457EB2   
|:004687DD   , :004688FA   
|
:00412EE6 55                      push ebp
:00412EE7 8BEC                    mov ebp, esp
:00412EE9 6A00                    push 00000000
:00412EEB E837780500              call 0046A727
:00412EF0 83C404                  add esp, 00000004
:00412EF3 E867800500              call 0046AF5F
:00412EF8 5D                      pop ebp
:00412EF9 C3                      ret



* Referenced by a CALL at Addresses:
|:0042831D   , :004429D6   , :00460006   , :00460064   , :004660F1   
|
:00412EFA 55                      push ebp
:00412EFB 8BEC                    mov ebp, esp
:00412EFD 6A00                    push 00000000
:00412EFF 8B451C                  mov eax, dword ptr [ebp+1C]
:00412F02 50                      push eax
:00412F03 6A00                    push 00000000
:00412F05 E8067F0500              call 0046AE10
:00412F0A 83C40C                  add esp, 0000000C
:00412F0D 8B4D18                  mov ecx, dword ptr [ebp+18]
:00412F10 51                      push ecx
:00412F11 8B5514                  mov edx, dword ptr [ebp+14]
:00412F14 8B450C                  mov eax, dword ptr [ebp+0C]
:00412F17 8D4C10FF                lea ecx, dword ptr [eax+edx-01]
:00412F1B 51                      push ecx
:00412F1C 8B5510                  mov edx, dword ptr [ebp+10]
:00412F1F 8B4508                  mov eax, dword ptr [ebp+08]
:00412F22 8D4C10FF                lea ecx, dword ptr [eax+edx-01]
:00412F26 51                      push ecx
:00412F27 8B550C                  mov edx, dword ptr [ebp+0C]
:00412F2A 52                      push edx
:00412F2B 8B4508                  mov eax, dword ptr [ebp+08]
:00412F2E 50                      push eax
:00412F2F E8DB870500              call 0046B70F
:00412F34 83C414                  add esp, 00000014
:00412F37 5D                      pop ebp
:00412F38 C3                      ret



* Referenced by a CALL at Addresses:
|:00413006   , :004131CB   , :004133B6   , :004133E3   , :00465F43   
|
:00412F39 55                      push ebp
:00412F3A 8BEC                    mov ebp, esp
:00412F3C 817D08DB000000          cmp dword ptr [ebp+08], 000000DB
:00412F43 720F                    jb 00412F54
:00412F45 8B4508                  mov eax, dword ptr [ebp+08]
:00412F48 33D2                    xor edx, edx
:00412F4A B9DB000000              mov ecx, 000000DB
:00412F4F F7F1                    div ecx
:00412F51 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F43(C)
|
:00412F54 8B550C                  mov edx, dword ptr [ebp+0C]
:00412F57 52                      push edx
:00412F58 8B4508                  mov eax, dword ptr [ebp+08]
:00412F5B 50                      push eax
:00412F5C B9408B4A00              mov ecx, 004A8B40
:00412F61 E823150000              call 00414489
:00412F66 5D                      pop ebp
:00412F67 C3                      ret



* Referenced by a CALL at Address:
|:00413331   
|
:00412F68 55                      push ebp
:00412F69 8BEC                    mov ebp, esp
:00412F6B 83EC10                  sub esp, 00000010
:00412F6E 66C745F40000            mov [ebp-0C], 0000
:00412F74 6A4F                    push 0000004F
:00412F76 B9A8134800              mov ecx, 004813A8
:00412F7B E8D850FFFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130E0(U)
|
:00412F80 68027F0000              push 00007F02
:00412F85 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00412F87 FF15EC864B00            Call dword ptr [004B86EC]
:00412F8D 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00412F8E FF1588864B00            Call dword ptr [004B8688]
:00412F94 8945F0                  mov dword ptr [ebp-10], eax
:00412F97 E896FEFFFF              call 00412E32
:00412F9C E845FFFFFF              call 00412EE6
:00412FA1 66C745F82800            mov [ebp-08], 0028
:00412FA7 EB0C                    jmp 00412FB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130C0(U)
|
:00412FA9 668B45F8                mov ax, word ptr [ebp-08]
:00412FAD 66055000                add ax, 0050
:00412FB1 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412FA7(U)
|
:00412FB5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412FB8 81E1FFFF0000            and ecx, 0000FFFF
:00412FBE 83C150                  add ecx, 00000050
:00412FC1 81F9E0010000            cmp ecx, 000001E0
:00412FC7 0F8FF8000000            jg 004130C5
:00412FCD 66C745FC0000            mov [ebp-04], 0000
:00412FD3 EB0C                    jmp 00412FE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130BB(U)
|
:00412FD5 668B55FC                mov dx, word ptr [ebp-04]
:00412FD9 6683C240                add dx, 0040
:00412FDD 668955FC                mov word ptr [ebp-04], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412FD3(U)
|
:00412FE1 8B45FC                  mov eax, dword ptr [ebp-04]
:00412FE4 25FFFF0000              and eax, 0000FFFF
:00412FE9 83C040                  add eax, 00000040
:00412FEC 3D80020000              cmp eax, 00000280
:00412FF1 0F8FC9000000            jg 004130C0
:00412FF7 6808A94A00              push 004AA908
:00412FFC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00412FFF 81E1FFFF0000            and ecx, 0000FFFF
:00413005 51                      push ecx
:00413006 E82EFFFFFF              call 00412F39
:0041300B 83C408                  add esp, 00000008
:0041300E 6808A94A00              push 004AA908
:00413013 8B55F8                  mov edx, dword ptr [ebp-08]
:00413016 81E2FFFF0000            and edx, 0000FFFF
:0041301C 52                      push edx
:0041301D 8B45FC                  mov eax, dword ptr [ebp-04]
:00413020 25FFFF0000              and eax, 0000FFFF
:00413025 50                      push eax
:00413026 E8CA000000              call 004130F5
:0041302B 83C40C                  add esp, 0000000C
:0041302E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413031 81E1FFFF0000            and ecx, 0000FFFF
:00413037 51                      push ecx
:00413038 8B45FC                  mov eax, dword ptr [ebp-04]
:0041303B 25FFFF0000              and eax, 0000FFFF
:00413040 99                      cdq
:00413041 83E207                  and edx, 00000007
:00413044 03C2                    add eax, edx
:00413046 C1F803                  sar eax, 03
:00413049 50                      push eax
:0041304A B9A8134800              mov ecx, 004813A8
:0041304F E8574FFFFF              call 00407FAB
:00413054 6A01                    push 00000001
:00413056 B9A8134800              mov ecx, 004813A8
:0041305B E87E50FFFF              call 004080DE
:00413060 8B55F4                  mov edx, dword ptr [ebp-0C]
:00413063 81E2FFFF0000            and edx, 0000FFFF
:00413069 52                      push edx

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:0041306A 68C4664700              push 004766C4
:0041306F 68A8134800              push 004813A8
:00413074 E8FF5BFFFF              call 00408C78
:00413079 83C40C                  add esp, 0000000C
:0041307C 6A00                    push 00000000
:0041307E B9A8134800              mov ecx, 004813A8
:00413083 E85650FFFF              call 004080DE
:00413088 668B45F4                mov ax, word ptr [ebp-0C]
:0041308C 66050100                add ax, 0001
:00413090 668945F4                mov word ptr [ebp-0C], ax
:00413094 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00413097 81E1FFFF0000            and ecx, 0000FFFF
:0041309D 81F9DB000000            cmp ecx, 000000DB
:004130A3 7516                    jne 004130BB
:004130A5 E8A3FDFFFF              call 00412E4D
:004130AA 8B55F0                  mov edx, dword ptr [ebp-10]
:004130AD 52                      push edx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:004130AE FF1588864B00            Call dword ptr [004B8688]
:004130B4 E85A3C0100              call 00426D13
:004130B9 EB36                    jmp 004130F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130A3(C)
|
:004130BB E915FFFFFF              jmp 00412FD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412FF1(C)
|
:004130C0 E9E4FEFFFF              jmp 00412FA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412FC7(C)
|
:004130C5 E883FDFFFF              call 00412E4D
:004130CA 8B45F0                  mov eax, dword ptr [ebp-10]
:004130CD 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:004130CE FF1588864B00            Call dword ptr [004B8688]
:004130D4 E83A3C0100              call 00426D13
:004130D9 83F802                  cmp eax, 00000002
:004130DC 7502                    jne 004130E0
:004130DE EB05                    jmp 004130E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130DC(C)
|
:004130E0 E99BFEFFFF              jmp 00412F80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130DE(U)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004130E5 6A0A                    push 0000000A
:004130E7 B9A8134800              mov ecx, 004813A8
:004130EC E8674FFFFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004130B9(U)
|
:004130F1 8BE5                    mov esp, ebp
:004130F3 5D                      pop ebp
:004130F4 C3                      ret



* Referenced by a CALL at Addresses:
|:00413026   , :004131EB   , :0041340A   
|
:004130F5 55                      push ebp
:004130F6 8BEC                    mov ebp, esp
:004130F8 8B4510                  mov eax, dword ptr [ebp+10]
:004130FB 50                      push eax
:004130FC 6A50                    push 00000050
:004130FE 6A40                    push 00000040
:00413100 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413103 51                      push ecx
:00413104 8B5508                  mov edx, dword ptr [ebp+08]
:00413107 52                      push edx
:00413108 E8DA8A0500              call 0046BBE7
:0041310D 83C414                  add esp, 00000014
:00413110 5D                      pop ebp
:00413111 C3                      ret



* Referenced by a CALL at Address:
|:00413338   
|
:00413112 55                      push ebp
:00413113 8BEC                    mov ebp, esp
:00413115 83EC18                  sub esp, 00000018
:00413118 6A4F                    push 0000004F
:0041311A B9A8134800              mov ecx, 004813A8
:0041311F E8344FFFFF              call 00408058
:00413124 66C745F40000            mov [ebp-0C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132DE(U)
|
:0041312A E803FDFFFF              call 00412E32
:0041312F E8B2FDFFFF              call 00412EE6
:00413134 68027F0000              push 00007F02
:00413139 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0041313B FF15EC864B00            Call dword ptr [004B86EC]
:00413141 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00413142 FF1588864B00            Call dword ptr [004B8688]
:00413148 8945EC                  mov dword ptr [ebp-14], eax
:0041314B 66C745F82800            mov [ebp-08], 0028
:00413151 EB0C                    jmp 0041315F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132BE(U)
|
:00413153 668B45F8                mov ax, word ptr [ebp-08]
:00413157 66056400                add ax, 0064
:0041315B 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413151(U)
|
:0041315F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413162 81E1FFFF0000            and ecx, 0000FFFF
:00413168 83C164                  add ecx, 00000064
:0041316B 81F9E0010000            cmp ecx, 000001E0
:00413171 0F8F4C010000            jg 004132C3
:00413177 66C745FC0000            mov [ebp-04], 0000
:0041317D EB0C                    jmp 0041318B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132B9(U)
|
:0041317F 668B55FC                mov dx, word ptr [ebp-04]
:00413183 6683C240                add dx, 0040
:00413187 668955FC                mov word ptr [ebp-04], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041317D(U)
|
:0041318B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041318E 25FFFF0000              and eax, 0000FFFF
:00413193 83C040                  add eax, 00000040
:00413196 3D80020000              cmp eax, 00000280
:0041319B 0F8F1D010000            jg 004132BE
:004131A1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004131A4 81E1FFFF0000            and ecx, 0000FFFF
:004131AA 6BC970                  imul ecx, 00000070
:004131AD 81C198224900            add ecx, 00492298
:004131B3 E8A8140400              call 00454660
:004131B8 668945F0                mov word ptr [ebp-10], ax
:004131BC 6808A94A00              push 004AA908
:004131C1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004131C4 81E1FFFF0000            and ecx, 0000FFFF
:004131CA 51                      push ecx
:004131CB E869FDFFFF              call 00412F39
:004131D0 83C408                  add esp, 00000008
:004131D3 6808A94A00              push 004AA908
:004131D8 8B55F8                  mov edx, dword ptr [ebp-08]
:004131DB 81E2FFFF0000            and edx, 0000FFFF
:004131E1 52                      push edx
:004131E2 8B45FC                  mov eax, dword ptr [ebp-04]
:004131E5 25FFFF0000              and eax, 0000FFFF
:004131EA 50                      push eax
:004131EB E805FFFFFF              call 004130F5
:004131F0 83C40C                  add esp, 0000000C
:004131F3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004131F6 25FFFF0000              and eax, 0000FFFF
:004131FB 99                      cdq
:004131FC 33C2                    xor eax, edx
:004131FE 2BC2                    sub eax, edx
:00413200 83E001                  and eax, 00000001
:00413203 33C2                    xor eax, edx
:00413205 2BC2                    sub eax, edx
:00413207 85C0                    test eax, eax
:00413209 7411                    je 0041321C
:0041320B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041320E 81E1FFFF0000            and ecx, 0000FFFF
:00413214 83C154                  add ecx, 00000054
:00413217 894DE8                  mov dword ptr [ebp-18], ecx
:0041321A EB0F                    jmp 0041322B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413209(C)
|
:0041321C 8B55F8                  mov edx, dword ptr [ebp-08]
:0041321F 81E2FFFF0000            and edx, 0000FFFF
:00413225 83C250                  add edx, 00000050
:00413228 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041321A(U)
|
:0041322B 8B45E8                  mov eax, dword ptr [ebp-18]
:0041322E 50                      push eax
:0041322F 8B45FC                  mov eax, dword ptr [ebp-04]
:00413232 25FFFF0000              and eax, 0000FFFF
:00413237 99                      cdq
:00413238 83E207                  and edx, 00000007
:0041323B 03C2                    add eax, edx
:0041323D C1F803                  sar eax, 03
:00413240 50                      push eax
:00413241 B9A8134800              mov ecx, 004813A8
:00413246 E8604DFFFF              call 00407FAB
:0041324B 6A01                    push 00000001
:0041324D B9A8134800              mov ecx, 004813A8
:00413252 E8874EFFFF              call 004080DE
:00413257 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041325A 81E1FFFF0000            and ecx, 0000FFFF
:00413260 51                      push ecx
:00413261 E89EE1FEFF              call 00401404
:00413266 83C404                  add esp, 00000004
:00413269 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0041326A 68C8664700              push 004766C8
:0041326F 68A8134800              push 004813A8
:00413274 E8FF59FFFF              call 00408C78
:00413279 83C40C                  add esp, 0000000C
:0041327C 6A00                    push 00000000
:0041327E B9A8134800              mov ecx, 004813A8
:00413283 E8564EFFFF              call 004080DE
:00413288 668B55F4                mov dx, word ptr [ebp-0C]
:0041328C 6683C201                add dx, 0001
:00413290 668955F4                mov word ptr [ebp-0C], dx
:00413294 8B45F4                  mov eax, dword ptr [ebp-0C]
:00413297 25FFFF0000              and eax, 0000FFFF
:0041329C 3DB9000000              cmp eax, 000000B9
:004132A1 7516                    jne 004132B9
:004132A3 E8A5FBFFFF              call 00412E4D
:004132A8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004132AB 51                      push ecx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:004132AC FF1588864B00            Call dword ptr [004B8688]
:004132B2 E85C3A0100              call 00426D13
:004132B7 EB36                    jmp 004132EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132A1(C)
|
:004132B9 E9C1FEFFFF              jmp 0041317F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041319B(C)
|
:004132BE E990FEFFFF              jmp 00413153

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413171(C)
|
:004132C3 E885FBFFFF              call 00412E4D
:004132C8 8B55EC                  mov edx, dword ptr [ebp-14]
:004132CB 52                      push edx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:004132CC FF1588864B00            Call dword ptr [004B8688]
:004132D2 E83C3A0100              call 00426D13
:004132D7 83F802                  cmp eax, 00000002
:004132DA 7502                    jne 004132DE
:004132DC EB05                    jmp 004132E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132DA(C)
|
:004132DE E947FEFFFF              jmp 0041312A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132DC(U)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004132E3 6A0A                    push 0000000A
:004132E5 B9A8134800              mov ecx, 004813A8
:004132EA E8694DFFFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004132B7(U)
|
:004132EF 8BE5                    mov esp, ebp
:004132F1 5D                      pop ebp
:004132F2 C3                      ret



* Referenced by a CALL at Address:
|:004688F3   
|
:004132F3 55                      push ebp
:004132F4 8BEC                    mov ebp, esp
:004132F6 51                      push ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041333D(U)
|
:004132F7 6A00                    push 00000000
:004132F9 6A00                    push 00000000
:004132FB 6A00                    push 00000000

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:004132FD 68A0000000              push 000000A0

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00413302 6A02                    push 00000002

* Possible Indirect StringData Ref from Data Obj ->"ǫ"
                                  |
:00413304 6898664700              push 00476698
:00413309 6A64                    push 00000064

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0041330B 68C8000000              push 000000C8
:00413310 E881470100              call 00427A96
:00413315 83C420                  add esp, 00000020
:00413318 25FF000000              and eax, 000000FF
:0041331D 8945FC                  mov dword ptr [ebp-04], eax
:00413320 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00413327 7502                    jne 0041332B
:00413329 EB14                    jmp 0041333F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413327(C)
|
:0041332B 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041332F 7507                    jne 00413338
:00413331 E832FCFFFF              call 00412F68
:00413336 EB05                    jmp 0041333D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041332F(C)
|
:00413338 E8D5FDFFFF              call 00413112

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413336(U)
|
:0041333D EBB8                    jmp 004132F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413329(U)
|
:0041333F 8BE5                    mov esp, ebp
:00413341 5D                      pop ebp
:00413342 C3                      ret



* Referenced by a CALL at Addresses:
|:004276ED   , :00450261   
|
:00413343 55                      push ebp
:00413344 8BEC                    mov ebp, esp
:00413346 83EC08                  sub esp, 00000008
:00413349 C745F8FFFF0000          mov [ebp-08], 0000FFFF
:00413350 817D10DB000000          cmp dword ptr [ebp+10], 000000DB
:00413357 720F                    jb 00413368
:00413359 8B4510                  mov eax, dword ptr [ebp+10]
:0041335C 33D2                    xor edx, edx
:0041335E B9DB000000              mov ecx, 000000DB
:00413363 F7F1                    div ecx
:00413365 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413357(C)
|
:00413368 C745FC08A94A00          mov [ebp-04], 004AA908
:0041336F 8B5510                  mov edx, dword ptr [ebp+10]
:00413372 3B15287A4700            cmp edx, dword ptr [00477A28]
:00413378 750C                    jne 00413386
:0041337A C705F456480001000000    mov dword ptr [004856F4], 00000001
:00413384 EB78                    jmp 004133FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413378(C)
|
:00413386 8B4510                  mov eax, dword ptr [ebp+10]
:00413389 3B052C7A4700            cmp eax, dword ptr [00477A2C]
:0041338F 7513                    jne 004133A4
:00413391 C745FC385A4A00          mov [ebp-04], 004A5A38
:00413398 C705F456480000000000    mov dword ptr [004856F4], 00000000
:004133A2 EB5A                    jmp 004133FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041338F(C)
|
:004133A4 833DF456480000          cmp dword ptr [004856F4], 00000000
:004133AB 7526                    jne 004133D3
:004133AD 6808A94A00              push 004AA908
:004133B2 8B4D10                  mov ecx, dword ptr [ebp+10]
:004133B5 51                      push ecx
:004133B6 E87EFBFFFF              call 00412F39
:004133BB 83C408                  add esp, 00000008
:004133BE 8B5510                  mov edx, dword ptr [ebp+10]
:004133C1 8915287A4700            mov dword ptr [00477A28], edx
:004133C7 C705F456480001000000    mov dword ptr [004856F4], 00000001
:004133D1 EB2B                    jmp 004133FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004133AB(C)
|
:004133D3 C745FC385A4A00          mov [ebp-04], 004A5A38
:004133DA 68385A4A00              push 004A5A38
:004133DF 8B4510                  mov eax, dword ptr [ebp+10]
:004133E2 50                      push eax
:004133E3 E851FBFFFF              call 00412F39
:004133E8 83C408                  add esp, 00000008
:004133EB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004133EE 890D2C7A4700            mov dword ptr [00477A2C], ecx
:004133F4 C705F456480000000000    mov dword ptr [004856F4], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413384(U), :004133A2(U), :004133D1(U)
|
:004133FE 8B55FC                  mov edx, dword ptr [ebp-04]
:00413401 52                      push edx
:00413402 8B450C                  mov eax, dword ptr [ebp+0C]
:00413405 50                      push eax
:00413406 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413409 51                      push ecx
:0041340A E8E6FCFFFF              call 004130F5
:0041340F 83C40C                  add esp, 0000000C
:00413412 8BE5                    mov esp, ebp
:00413414 5D                      pop ebp
:00413415 C3                      ret



* Referenced by a CALL at Addresses:
|:0042784B   , :0042846C   , :00460A03   
|
:00413416 55                      push ebp
:00413417 8BEC                    mov ebp, esp
:00413419 E814FAFFFF              call 00412E32
:0041341E 68C0090000              push 000009C0
:00413423 B940DF4A00              mov ecx, 004ADF40
:00413428 E871010000              call 0041359E
:0041342D 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0041342E 6A10                    push 00000010
:00413430 6A01                    push 00000001
:00413432 E8757B0500              call 0046AFAC
:00413437 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041343A 6A02                    push 00000002
:0041343C 8B4514                  mov eax, dword ptr [ebp+14]
:0041343F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413442 8D5401FF                lea edx, dword ptr [ecx+eax-01]
:00413446 52                      push edx
:00413447 8B4510                  mov eax, dword ptr [ebp+10]
:0041344A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041344D 8D5401FF                lea edx, dword ptr [ecx+eax-01]
:00413451 52                      push edx
:00413452 8B450C                  mov eax, dword ptr [ebp+0C]
:00413455 50                      push eax
:00413456 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413459 51                      push ecx
:0041345A E8B0820500              call 0046B70F
:0041345F 83C414                  add esp, 00000014
:00413462 E8E6F9FFFF              call 00412E4D
:00413467 5D                      pop ebp
:00413468 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C546   , :00450207   
|
:00413469 55                      push ebp
:0041346A 8BEC                    mov ebp, esp
:0041346C 51                      push ecx
:0041346D C745FC00000000          mov [ebp-04], 00000000
:00413474 EB09                    jmp 0041347F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004134AF(U)
|
:00413476 8B45FC                  mov eax, dword ptr [ebp-04]
:00413479 83C001                  add eax, 00000001
:0041347C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413474(U)
|
:0041347F 817DFC85020000          cmp dword ptr [ebp-04], 00000285
:00413486 7329                    jnb 004134B1
:00413488 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041348B 6BC970                  imul ecx, 00000070
:0041348E 81C198224900            add ecx, 00492298
:00413494 E827000000              call 004134C0
:00413499 50                      push eax
:0041349A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041349D 51                      push ecx
:0041349E E810F20400              call 004626B3
:004134A3 83C408                  add esp, 00000008
:004134A6 85C0                    test eax, eax
:004134A8 7505                    jne 004134AF
:004134AA 8B45FC                  mov eax, dword ptr [ebp-04]
:004134AD EB07                    jmp 004134B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004134A8(C)
|
:004134AF EBC5                    jmp 00413476

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413486(C)
|
:004134B1 B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004134AD(U)
|
:004134B6 8BE5                    mov esp, ebp
:004134B8 5D                      pop ebp
:004134B9 C3                      ret


:004134BA CC                      int 03
:004134BB CC                      int 03
:004134BC CC                      int 03
:004134BD CC                      int 03
:004134BE CC                      int 03
:004134BF CC                      int 03

* Referenced by a CALL at Address:
|:00413494   
|
:004134C0 55                      push ebp
:004134C1 8BEC                    mov ebp, esp
:004134C3 51                      push ecx
:004134C4 894DFC                  mov dword ptr [ebp-04], ecx
:004134C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004134CA 83C00C                  add eax, 0000000C
:004134CD 8BE5                    mov esp, ebp
:004134CF 5D                      pop ebp
:004134D0 C3                      ret


:004134D1 CC                      int 03
:004134D2 CC                      int 03
:004134D3 CC                      int 03
:004134D4 CC                      int 03
:004134D5 CC                      int 03
:004134D6 CC                      int 03
:004134D7 CC                      int 03
:004134D8 CC                      int 03
:004134D9 CC                      int 03
:004134DA CC                      int 03
:004134DB CC                      int 03
:004134DC CC                      int 03
:004134DD CC                      int 03
:004134DE CC                      int 03
:004134DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00425879   , :004258B8   , :004258F7   , :00425936   , :00425975   
|:004259B4   , :004259F3   , :00425A32   , :00425A71   , :00425AB0   
|:0042A0C1   , :0042A0F8   , :0042A144   , :0042A176   , :0042A330   
|:00450ECF   , :00450EE1   , :004739A3   , :00473B26   , :00473B32   
|:00473B48   , :00473B54   
|
:004134E0 55                      push ebp
:004134E1 8BEC                    mov ebp, esp
:004134E3 51                      push ecx
:004134E4 894DFC                  mov dword ptr [ebp-04], ecx
:004134E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004134EA E804000000              call 004134F3
:004134EF 8BE5                    mov esp, ebp
:004134F1 5D                      pop ebp
:004134F2 C3                      ret



* Referenced by a CALL at Addresses:
|:004134EA   , :0041354E   , :00425FD4   , :00425FDE   , :00425FE8   
|:00425FF7   , :00426001   , :0042600B   , :00426015   , :0042601F   
|:0042602E   , :00426038   , :0042A312   , :00450EB5   , :00450EC0   
|
:004134F3 55                      push ebp
:004134F4 8BEC                    mov ebp, esp
:004134F6 83EC08                  sub esp, 00000008
:004134F9 894DF8                  mov dword ptr [ebp-08], ecx
:004134FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004134FF E8A6010000              call 004136AA
:00413504 85C0                    test eax, eax
:00413506 7432                    je 0041353A
:00413508 8B45F8                  mov eax, dword ptr [ebp-08]
:0041350B 8B4804                  mov ecx, dword ptr [eax+04]
:0041350E 894DFC                  mov dword ptr [ebp-04], ecx
:00413511 8B55FC                  mov edx, dword ptr [ebp-04]
:00413514 52                      push edx
:00413515 E806A40500              call 0046D920
:0041351A 83C404                  add esp, 00000004
:0041351D 8B45F8                  mov eax, dword ptr [ebp-08]
:00413520 C70000000000            mov dword ptr [eax], 00000000
:00413526 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413529 C7410400000000          mov [ecx+04], 00000000
:00413530 8B55F8                  mov edx, dword ptr [ebp-08]
:00413533 C7420800000000          mov [edx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413506(C)
|
:0041353A 8BE5                    mov esp, ebp
:0041353C 5D                      pop ebp
:0041353D C3                      ret



* Referenced by a CALL at Addresses:
|:004260AB   , :004260CB   , :004260EB   , :00426110   , :00426130   
|:00426150   , :00426170   , :00426190   , :004261B0   , :004261D0   
|:0042A09F   , :00450E3D   , :00450E5E   
|
:0041353E 55                      push ebp
:0041353F 8BEC                    mov ebp, esp
:00413541 51                      push ecx
:00413542 894DFC                  mov dword ptr [ebp-04], ecx
:00413545 837D0800                cmp dword ptr [ebp+08], 00000000
:00413549 7448                    je 00413593
:0041354B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041354E E8A0FFFFFF              call 004134F3
:00413553 8B4508                  mov eax, dword ptr [ebp+08]
:00413556 50                      push eax
:00413557 E864A40500              call 0046D9C0
:0041355C 83C404                  add esp, 00000004
:0041355F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413562 894104                  mov dword ptr [ecx+04], eax
:00413565 8B55FC                  mov edx, dword ptr [ebp-04]
:00413568 C70201000000            mov dword ptr [edx], 00000001
:0041356E 8B45FC                  mov eax, dword ptr [ebp-04]
:00413571 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413574 894808                  mov dword ptr [eax+08], ecx
:00413577 8B55FC                  mov edx, dword ptr [ebp-04]
:0041357A 837A0400                cmp dword ptr [edx+04], 00000000
:0041357E 7513                    jne 00413593
:00413580 8B45FC                  mov eax, dword ptr [ebp-04]
:00413583 C70000000000            mov dword ptr [eax], 00000000
:00413589 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041358C C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413549(C), :0041357E(C)
|
:00413593 8B55FC                  mov edx, dword ptr [ebp-04]
:00413596 8B02                    mov eax, dword ptr [edx]
:00413598 8BE5                    mov esp, ebp
:0041359A 5D                      pop ebp
:0041359B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00404D90   , :00404DB8   , :00404DE0   , :00404FAC   , :00404FD5   
|:00404FE4   , :004053C6   , :004053EF   , :004053FE   , :00410F42   
|:0041247A   , :00413428   , :004135F8   , :00413661   , :00416C67   
|:00416C9E   , :00416CDB   , :00421062   , :00421164   , :0042135F   
|:0042162C   , :00422372   , :00422604   , :00422999   , :00422B72   
|:00422CAB   , :00422CD0   , :00423669   , :00424219   , :004248A9   
|:0042490D   , :00425DAA   , :00425DDC   , :00425E09   , :00425E16   
|:00425E3B   , :00425E68   , :00425E75   , :00425E9A   , :00425EC7   
|:00425ED4   , :00425EF9   , :00425F26   , :00425F33   , :00425F58   
|:00425F85   , :00425F92   , :004262BA   , :004262FD   , :004263BE   
|:00426401   , :004275AD   , :00427644   , :00427671   , :004277E4   
|:0042823E   , :0042829F   , :0042A107   , :0042A213   , :0042A278   
|:0042A2AA   , :0042A2EF   , :0042C1AA   , :0042C1B9   , :0042C1DF   
|:0042C206   , :0042C215   , :0042C23B   , :0042C310   , :0042C42F   
|:0042D1B0   , :0042D872   , :0042D8E2   , :0042E18B   , :0042E1D7   
|:0042E259   , :0042E29B   , :0042E2D8   , :0042E36B   , :0042E3E1   
|:0042E455   , :0042E4E5   , :0042E542   , :0042E730   , :0042E76A   
|:0042E82E   , :0042E871   , :0042E9CD   , :0042EA51   , :0042EABB   
|:0042EB22   , :0042EBA6   , :0042EC03   , :0042EDAD   , :0042EDE7   
|:0042EEA9   , :0042EEEC   , :0042F06A   , :0042F10A   , :0042F192   
|:0042F21A   , :0042F2C1   , :0042F31E   , :00438F7B   , :0043986F   
|:00439C9F   , :00439D63   , :00439F14   , :00439FD7   , :0043A0FE   
|:0043A174   , :0043A22D   , :0043A29E   , :0043A314   , :0043A424   
|:0043A79E   , :0043A846   , :0043A896   , :0043A947   , :0043A997   
|:0043AAA5   , :0043AAD8   , :0043AAEF   , :0043AB12   , :0043AB2A   
|:0043ACC3   , :0043AD34   , :0043ADA4   , :0043AE04   , :0043AE74   
|:0043AEBE   , :0043AF2E   , :0043B15B   , :0043B19D   , :0043B1D5   
|:0043B225   , :0043B298   , :0043B38C   , :0043B3E6   , :0043B418   
|:0043B462   , :0043B4D2   , :0043B675   , :0043B6F2   , :0043B706   
|:0043B727   , :0043B736   , :0043B75B   , :0043B76F   , :0043B78D   
|:0043B7A1   , :0043B8C8   , :0043B8FB   , :0043B917   , :0043B952   
|:0043B9B1   , :0043BA50   , :0043BA6F   , :0043BA8E   , :0043BAAD   
|:0043DB92   , :0043DE23   , :0043DF29   , :0043DF47   , :0043DF65   
|:0043DF79   , :0043DFA0   , :0043DFBE   , :0043DFD9   , :0043DFF7   
|:0043E83A   , :0043E8C5   , :0043E8D7   , :0043EAD1   , :0043ED36   
|:0043EE36   , :0043EF09   , :0043F022   , :0043F070   , :0043F099   
|:0043F0C2   , :0043F0EE   , :0043F312   , :0043F41E   , :0043F437   
|:0043F45A   , :0043F46E   , :0043F492   , :0043F4AB   , :0043F4CB   
|:0043F4E4   , :0043F68E   , :0043F710   , :0043F722   , :0043FEB2   
|:0043FF05   , :0043FF31   , :0043FF6F   , :0043FFAA   , :0043FFE5   
|:00440031   , :004400A1   , :004400F5   , :004402D5   , :00440343   
|:0044039B   , :00440442   , :00440467   , :00440528   , :0044054D   
|:00440584   , :004405D3   , :00440640   , :00440690   , :0044070E   
|:00440784   , :00440A74   , :00440AB1   , :00440B08   , :00440B30   
|:00440B81   , :00440C48   , :00440D8D   , :00440ED2   , :00441016   
|:004410FC   , :0044114F   , :00441175   , :0044119D   , :004411CA   
|:004411F0   , :00441218   , :004412FD   , :0044135B   , :00441393   
|:004413C4   , :004413FB   , :00441447   , :004414B7   , :0044152C   
|:00441554   , :004415A0   , :00441610   , :0044165A   , :004417A4   
|:004417DF   , :00441834   , :0044185A   , :004418A4   , :00441914   
|:00441963   , :0044208A   , :004420FD   , :00442275   , :0044242F   
|:0044245F   , :00442574   , :0044268F   , :004429E7   , :00442EF1   
|:00442F13   , :004430BA   , :004430CC   , :00443129   , :00443142   
|:0044315B   , :004431BB   , :004436A8   , :004436B7   , :004436D0   
|:0044380F   , :004438E1   , :00443A06   , :00443A53   , :00443AAB   
|:00443EF1   , :00444639   , :0044474F   , :0044508D   , :004456E8   
|:00445D8A   , :00445EDD   , :004461CF   , :00446299   , :004470A1   
|:00447947   , :004479B1   , :00447B49   , :0044858F   , :004485C5   
|:00448606   , :0044891B   , :004489F2   , :00448AA9   , :004493E0   
|:00449449   , :004494F0   , :004496E8   , :00449850   , :004498EF   
|:00449BA3   , :00449BBC   , :00449D02   , :00449D20   , :00449D48   
|:00449E14   , :0044C9DC   , :0044CA5A   , :0044DAF5   , :0044DB3E   
|:004500DD   , :004502DE   , :00451023   , :0045105F   , :0045106F   
|:00451745   , :00451820   , :0045185E   , :00451ACA   , :00451EA6   
|:00452038   , :00452078   , :00452088   , :00452936   , :004529A9   
|:00454AD5   , :00454B03   , :00454B8A   , :00454C39   , :00454CC9   
|:00454D61   , :00454D8F   , :00454DAE   , :00454DE3   , :00454DF0   
|:00454E7F   , :00455007   , :004553CC   , :004554BB   , :00455500   
|:00455575   , :00456959   , :00456A1A   , :00456AEC   , :00456B5F   
|:004590E5   , :0045919C   , :004591D6   , :004592EE   , :00460631   
|:0046065F   , :0046068D   , :004606BB   , :004606EE   , :0046071C   
|:0046074A   , :00460778   , :00460919   , :00460965   , :00460999   
|:00460B65   , :00460C48   , :00461037   , :004610F1   , :00461160   
|:00461192   , :00461249   , :00461292   , :004612C0   , :0046145B   
|:00461492   , :004614DB   , :00461509   , :00461539   , :00465F33   
|:00465F66   , :00466067   , :00466093   , :004660CA   
|
:0041359E 55                      push ebp
:0041359F 8BEC                    mov ebp, esp
:004135A1 51                      push ecx
:004135A2 894DFC                  mov dword ptr [ebp-04], ecx
:004135A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004135A8 E8FD000000              call 004136AA
:004135AD 85C0                    test eax, eax
:004135AF 7504                    jne 004135B5
:004135B1 33C0                    xor eax, eax
:004135B3 EB1D                    jmp 004135D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135AF(C)
|
:004135B5 8B45FC                  mov eax, dword ptr [ebp-04]
:004135B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004135BB 3B4808                  cmp ecx, dword ptr [eax+08]
:004135BE 7E09                    jle 004135C9
:004135C0 8B55FC                  mov edx, dword ptr [ebp-04]
:004135C3 8B4208                  mov eax, dword ptr [edx+08]
:004135C6 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135BE(C)
|
:004135C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004135CC 8B4104                  mov eax, dword ptr [ecx+04]
:004135CF 034508                  add eax, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135B3(U)
|
:004135D2 8BE5                    mov esp, ebp
:004135D4 5D                      pop ebp
:004135D5 C20400                  ret 0004


:004135D8 55                      push ebp
:004135D9 8BEC                    mov ebp, esp
:004135DB 83EC0C                  sub esp, 0000000C
:004135DE 894DF4                  mov dword ptr [ebp-0C], ecx
:004135E1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004135E4 E8C1000000              call 004136AA
:004135E9 85C0                    test eax, eax
:004135EB 7504                    jne 004135F1
:004135ED 33C0                    xor eax, eax
:004135EF EB4A                    jmp 0041363B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135EB(C)
|
:004135F1 8B4508                  mov eax, dword ptr [ebp+08]
:004135F4 50                      push eax
:004135F5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004135F8 E8A1FFFFFF              call 0041359E
:004135FD 8945F8                  mov dword ptr [ebp-08], eax
:00413600 C745FC00000000          mov [ebp-04], 00000000
:00413607 EB09                    jmp 00413612

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413636(U)
|
:00413609 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041360C 83C101                  add ecx, 00000001
:0041360F 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413607(U)
|
:00413612 8B55FC                  mov edx, dword ptr [ebp-04]
:00413615 3B5510                  cmp edx, dword ptr [ebp+10]
:00413618 7D1E                    jge 00413638
:0041361A 8B450C                  mov eax, dword ptr [ebp+0C]
:0041361D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413620 8A11                    mov dl, byte ptr [ecx]
:00413622 8810                    mov byte ptr [eax], dl
:00413624 8B450C                  mov eax, dword ptr [ebp+0C]
:00413627 83C001                  add eax, 00000001
:0041362A 89450C                  mov dword ptr [ebp+0C], eax
:0041362D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413630 83C101                  add ecx, 00000001
:00413633 894DF8                  mov dword ptr [ebp-08], ecx
:00413636 EBD1                    jmp 00413609

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413618(C)
|
:00413638 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135EF(U)
|
:0041363B 8BE5                    mov esp, ebp
:0041363D 5D                      pop ebp
:0041363E C20C00                  ret 000C


:00413641 55                      push ebp
:00413642 8BEC                    mov ebp, esp
:00413644 83EC0C                  sub esp, 0000000C
:00413647 894DF4                  mov dword ptr [ebp-0C], ecx
:0041364A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041364D E858000000              call 004136AA
:00413652 85C0                    test eax, eax
:00413654 7504                    jne 0041365A
:00413656 33C0                    xor eax, eax
:00413658 EB4A                    jmp 004136A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413654(C)
|
:0041365A 8B4508                  mov eax, dword ptr [ebp+08]
:0041365D 50                      push eax
:0041365E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00413661 E838FFFFFF              call 0041359E
:00413666 8945F8                  mov dword ptr [ebp-08], eax
:00413669 C745FC00000000          mov [ebp-04], 00000000
:00413670 EB09                    jmp 0041367B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041369F(U)
|
:00413672 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413675 83C101                  add ecx, 00000001
:00413678 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413670(U)
|
:0041367B 8B55FC                  mov edx, dword ptr [ebp-04]
:0041367E 3B5510                  cmp edx, dword ptr [ebp+10]
:00413681 7D1E                    jge 004136A1
:00413683 8B45F8                  mov eax, dword ptr [ebp-08]
:00413686 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413689 8A11                    mov dl, byte ptr [ecx]
:0041368B 8810                    mov byte ptr [eax], dl
:0041368D 8B45F8                  mov eax, dword ptr [ebp-08]
:00413690 83C001                  add eax, 00000001
:00413693 8945F8                  mov dword ptr [ebp-08], eax
:00413696 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413699 83C101                  add ecx, 00000001
:0041369C 894D0C                  mov dword ptr [ebp+0C], ecx
:0041369F EBD1                    jmp 00413672

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413681(C)
|
:004136A1 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413658(U)
|
:004136A4 8BE5                    mov esp, ebp
:004136A6 5D                      pop ebp
:004136A7 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:004134FF   , :004135A8   , :004135E4   , :0041364D   , :004136C4   
|
:004136AA 55                      push ebp
:004136AB 8BEC                    mov ebp, esp
:004136AD 51                      push ecx
:004136AE 894DFC                  mov dword ptr [ebp-04], ecx
:004136B1 8B45FC                  mov eax, dword ptr [ebp-04]
:004136B4 8B00                    mov eax, dword ptr [eax]
:004136B6 8BE5                    mov esp, ebp
:004136B8 5D                      pop ebp
:004136B9 C3                      ret


:004136BA 55                      push ebp
:004136BB 8BEC                    mov ebp, esp
:004136BD 51                      push ecx
:004136BE 894DFC                  mov dword ptr [ebp-04], ecx
:004136C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004136C4 E8E1FFFFFF              call 004136AA
:004136C9 85C0                    test eax, eax
:004136CB 7504                    jne 004136D1
:004136CD 33C0                    xor eax, eax
:004136CF EB06                    jmp 004136D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004136CB(C)
|
:004136D1 8B45FC                  mov eax, dword ptr [ebp-04]
:004136D4 8B4008                  mov eax, dword ptr [eax+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004136CF(U)
|
:004136D7 8BE5                    mov esp, ebp
:004136D9 5D                      pop ebp
:004136DA C3                      ret



* Referenced by a CALL at Address:
|:00413796   
|
:004136DB 55                      push ebp
:004136DC 8BEC                    mov ebp, esp
:004136DE 51                      push ecx
:004136DF 66C745FC0000            mov [ebp-04], 0000
:004136E5 EB15                    jmp 004136FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413731(U)
|
:004136E7 668B45FC                mov ax, word ptr [ebp-04]
:004136EB 66050100                add ax, 0001
:004136EF 668945FC                mov word ptr [ebp-04], ax
:004136F3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004136F6 83C101                  add ecx, 00000001
:004136F9 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004136E5(U)
|
:004136FC 8B55FC                  mov edx, dword ptr [ebp-04]
:004136FF 81E2FFFF0000            and edx, 0000FFFF
:00413705 8B4510                  mov eax, dword ptr [ebp+10]
:00413708 25FFFF0000              and eax, 0000FFFF
:0041370D 3BD0                    cmp edx, eax
:0041370F 7D22                    jge 00413733
:00413711 8B4D10                  mov ecx, dword ptr [ebp+10]
:00413714 81E1FFFF0000            and ecx, 0000FFFF
:0041371A 8B5508                  mov edx, dword ptr [ebp+08]
:0041371D 03D1                    add edx, ecx
:0041371F 8B45FC                  mov eax, dword ptr [ebp-04]
:00413722 25FFFF0000              and eax, 0000FFFF
:00413727 2BD0                    sub edx, eax
:00413729 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041372C 8A52FF                  mov dl, byte ptr [edx-01]
:0041372F 8811                    mov byte ptr [ecx], dl
:00413731 EBB4                    jmp 004136E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041370F(C)
|
:00413733 8BE5                    mov esp, ebp
:00413735 5D                      pop ebp
:00413736 C3                      ret



* Referenced by a CALL at Addresses:
|:004211F1   , :00421210   , :0042C1C7   , :0042C223   , :0043AAF9   
|:0043B747   , :0043B983   , :0043DF8F   , :0043E8E9   , :0043F083   
|:0043F0D8   , :0043F481   , :0043F734   
|
:00413737 55                      push ebp
:00413738 8BEC                    mov ebp, esp
:0041373A 51                      push ecx
:0041373B 66C745FC0000            mov [ebp-04], 0000
:00413741 EB0C                    jmp 0041374F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041379E(U)
|
:00413743 668B45FC                mov ax, word ptr [ebp-04]
:00413747 66050100                add ax, 0001
:0041374B 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413741(U)
|
:0041374F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413752 81E1FFFF0000            and ecx, 0000FFFF
:00413758 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:0041375B 7D43                    jge 004137A0
:0041375D 668B5508                mov dx, word ptr [ebp+08]
:00413761 52                      push edx
:00413762 8B4508                  mov eax, dword ptr [ebp+08]
:00413765 25FFFF0000              and eax, 0000FFFF
:0041376A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041376D 81E1FFFF0000            and ecx, 0000FFFF
:00413773 0FAFC1                  imul eax, ecx
:00413776 8B5514                  mov edx, dword ptr [ebp+14]
:00413779 03D0                    add edx, eax
:0041377B 52                      push edx
:0041377C 8B4508                  mov eax, dword ptr [ebp+08]
:0041377F 25FFFF0000              and eax, 0000FFFF
:00413784 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413787 81E1FFFF0000            and ecx, 0000FFFF
:0041378D 0FAFC1                  imul eax, ecx
:00413790 8B5510                  mov edx, dword ptr [ebp+10]
:00413793 03D0                    add edx, eax
:00413795 52                      push edx
:00413796 E840FFFFFF              call 004136DB
:0041379B 83C40C                  add esp, 0000000C
:0041379E EBA3                    jmp 00413743

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041375B(C)
|
:004137A0 8BE5                    mov esp, ebp
:004137A2 5D                      pop ebp
:004137A3 C3                      ret


:004137A4 CC                      int 03
:004137A5 CC                      int 03
:004137A6 CC                      int 03
:004137A7 CC                      int 03
:004137A8 CC                      int 03
:004137A9 CC                      int 03
:004137AA CC                      int 03
:004137AB CC                      int 03
:004137AC CC                      int 03
:004137AD CC                      int 03
:004137AE CC                      int 03
:004137AF CC                      int 03
:004137B0 55                      push ebp
:004137B1 8BEC                    mov ebp, esp
:004137B3 E807000000              call 004137BF
:004137B8 E811000000              call 004137CE
:004137BD 5D                      pop ebp
:004137BE C3                      ret



* Referenced by a CALL at Address:
|:004137B3   
|
:004137BF 55                      push ebp
:004137C0 8BEC                    mov ebp, esp
:004137C2 B9F8564800              mov ecx, 004856F8
:004137C7 E8B4090000              call 00414180
:004137CC 5D                      pop ebp
:004137CD C3                      ret



* Referenced by a CALL at Address:
|:004137B8   
|
:004137CE 55                      push ebp
:004137CF 8BEC                    mov ebp, esp
:004137D1 68E0374100              push 004137E0
:004137D6 E8959C0500              call 0046D470
:004137DB 83C404                  add esp, 00000004
:004137DE 5D                      pop ebp
:004137DF C3                      ret


:004137E0 55                      push ebp
:004137E1 8BEC                    mov ebp, esp
:004137E3 B9F8564800              mov ecx, 004856F8
:004137E8 E8E2000000              call 004138CF
:004137ED 5D                      pop ebp
:004137EE C3                      ret


:004137EF 55                      push ebp
:004137F0 8BEC                    mov ebp, esp
:004137F2 E807000000              call 004137FE
:004137F7 E811000000              call 0041380D
:004137FC 5D                      pop ebp
:004137FD C3                      ret



* Referenced by a CALL at Address:
|:004137F2   
|
:004137FE 55                      push ebp
:004137FF 8BEC                    mov ebp, esp
:00413801 B920574800              mov ecx, 00485720
:00413806 E8D5080000              call 004140E0
:0041380B 5D                      pop ebp
:0041380C C3                      ret



* Referenced by a CALL at Address:
|:004137F7   
|
:0041380D 55                      push ebp
:0041380E 8BEC                    mov ebp, esp
:00413810 681F384100              push 0041381F
:00413815 E8569C0500              call 0046D470
:0041381A 83C404                  add esp, 00000004
:0041381D 5D                      pop ebp
:0041381E C3                      ret


:0041381F 55                      push ebp
:00413820 8BEC                    mov ebp, esp
:00413822 B920574800              mov ecx, 00485720
:00413827 E8E3C80000              call 0042010F
:0041382C 5D                      pop ebp
:0041382D C3                      ret


:0041382E 55                      push ebp
:0041382F 8BEC                    mov ebp, esp
:00413831 83EC18                  sub esp, 00000018
:00413834 837D0800                cmp dword ptr [ebp+08], 00000000
:00413838 7C76                    jl 004138B0
:0041383A 8B4510                  mov eax, dword ptr [ebp+10]
:0041383D 8B08                    mov ecx, dword ptr [eax]
:0041383F 894DFC                  mov dword ptr [ebp-04], ecx
:00413842 8B5510                  mov edx, dword ptr [ebp+10]
:00413845 8B4204                  mov eax, dword ptr [edx+04]
:00413848 8945F8                  mov dword ptr [ebp-08], eax
:0041384B 817DF801020000          cmp dword ptr [ebp-08], 00000201
:00413852 755C                    jne 004138B0
:00413854 833D1457480000          cmp dword ptr [00485714], 00000000
:0041385B 7417                    je 00413874
:0041385D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413860 3B0D1C574800            cmp ecx, dword ptr [0048571C]
:00413866 750A                    jne 00413872
:00413868 C7051057480001000000    mov dword ptr [00485710], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413866(C)
|
:00413872 EB3C                    jmp 004138B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041385B(C)
|
:00413874 33D2                    xor edx, edx
:00413876 668B15380E4B00          mov dx, word ptr [004B0E38]
:0041387D 8955EC                  mov dword ptr [ebp-14], edx
:00413880 C745F400000000          mov [ebp-0C], 00000000
:00413887 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041388A 8945F0                  mov dword ptr [ebp-10], eax
:0041388D C745E801000000          mov [ebp-18], 00000001
:00413894 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00413897 51                      push ecx
:00413898 8B55E8                  mov edx, dword ptr [ebp-18]
:0041389B 52                      push edx
:0041389C 6806080000              push 00000806
:004138A1 33C0                    xor eax, eax
:004138A3 66A15C574800            mov ax, word ptr [0048575C]
:004138A9 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:004138AA FF15D4874B00            Call dword ptr [004B87D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413838(C), :00413852(C), :00413872(U)
|
:004138B0 8B4D10                  mov ecx, dword ptr [ebp+10]
:004138B3 51                      push ecx
:004138B4 8B550C                  mov edx, dword ptr [ebp+0C]
:004138B7 52                      push edx
:004138B8 8B4508                  mov eax, dword ptr [ebp+08]
:004138BB 50                      push eax
:004138BC 8B0D18574800            mov ecx, dword ptr [00485718]
:004138C2 51                      push ecx

* Reference To: USER32.CallNextHookEx, Ord:0011h
                                  |
:004138C3 FF1584864B00            Call dword ptr [004B8684]
:004138C9 8BE5                    mov esp, ebp
:004138CB 5D                      pop ebp
:004138CC C20C00                  ret 000C



* Referenced by a CALL at Address:
|:004137E8   
|
:004138CF 55                      push ebp
:004138D0 8BEC                    mov ebp, esp
:004138D2 51                      push ecx
:004138D3 894DFC                  mov dword ptr [ebp-04], ecx
:004138D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004138D9 E804000000              call 004138E2
:004138DE 8BE5                    mov esp, ebp
:004138E0 5D                      pop ebp
:004138E1 C3                      ret



* Referenced by a CALL at Addresses:
|:004138D9   , :00414002   
|
:004138E2 55                      push ebp
:004138E3 8BEC                    mov ebp, esp
:004138E5 83EC20                  sub esp, 00000020
:004138E8 894DE0                  mov dword ptr [ebp-20], ecx
:004138EB C745E400000000          mov [ebp-1C], 00000000
:004138F2 C745E800000000          mov [ebp-18], 00000000

* Possible StringData Ref from Data Obj ->"avivideo"
                                  |
:004138F9 C745ECFC664700          mov [ebp-14], 004766FC
:00413900 C745F000000000          mov [ebp-10], 00000000
:00413907 C745F400000000          mov [ebp-0C], 00000000
:0041390E C745F800000000          mov [ebp-08], 00000000
:00413915 C745FC00000000          mov [ebp-04], 00000000
:0041391C 8D45E4                  lea eax, dword ptr [ebp-1C]
:0041391F 50                      push eax
:00413920 6800200000              push 00002000
:00413925 6803080000              push 00000803
:0041392A 6A00                    push 00000000

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:0041392C FF15D4874B00            Call dword ptr [004B87D4]
:00413932 F7D8                    neg eax
:00413934 1BC0                    sbb eax, eax
:00413936 40                      inc eax
:00413937 8BE5                    mov esp, ebp
:00413939 5D                      pop ebp
:0041393A C3                      ret



* Referenced by a CALL at Addresses:
|:004139CB   , :00413E6F   , :00414016   
|
:0041393B 55                      push ebp
:0041393C 8BEC                    mov ebp, esp
:0041393E 83EC08                  sub esp, 00000008
:00413941 894DF8                  mov dword ptr [ebp-08], ecx
:00413944 8B45F8                  mov eax, dword ptr [ebp-08]
:00413947 83781000                cmp dword ptr [eax+10], 00000000
:0041394B 7453                    je 004139A0
:0041394D 8B0D18574800            mov ecx, dword ptr [00485718]
:00413953 51                      push ecx

* Reference To: USER32.UnhookWindowsHookEx, Ord:0248h
                                  |
:00413954 FF1580864B00            Call dword ptr [004B8680]
:0041395A 8D55FC                  lea edx, dword ptr [ebp-04]
:0041395D 52                      push edx
:0041395E 6A00                    push 00000000
:00413960 6804080000              push 00000804
:00413965 33C0                    xor eax, eax
:00413967 66A15C574800            mov ax, word ptr [0048575C]
:0041396D 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:0041396E FF15D4874B00            Call dword ptr [004B87D4]
:00413974 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413977 C7411400000000          mov [ecx+14], 00000000
:0041397E 8B55F8                  mov edx, dword ptr [ebp-08]
:00413981 C7421000000000          mov [edx+10], 00000000
:00413988 6A01                    push 00000001
:0041398A 6A00                    push 00000000
:0041398C 8B4508                  mov eax, dword ptr [ebp+08]
:0041398F 50                      push eax

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:00413990 FF15CC864B00            Call dword ptr [004B86CC]
:00413996 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413999 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0041399A FF15A4864B00            Call dword ptr [004B86A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041394B(C)
|
:004139A0 B801000000              mov eax, 00000001
:004139A5 8BE5                    mov esp, ebp
:004139A7 5D                      pop ebp
:004139A8 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00413D79   
|
:004139AB 55                      push ebp
:004139AC 8BEC                    mov ebp, esp
:004139AE 83EC50                  sub esp, 00000050
:004139B1 894DB0                  mov dword ptr [ebp-50], ecx
:004139B4 C745FC00000000          mov [ebp-04], 00000000
:004139BB 8B45B0                  mov eax, dword ptr [ebp-50]
:004139BE 83781000                cmp dword ptr [eax+10], 00000000
:004139C2 740C                    je 004139D0
:004139C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004139C7 51                      push ecx
:004139C8 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004139CB E86BFFFFFF              call 0041393B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139C2(C)
|
:004139D0 C745B400000000          mov [ebp-4C], 00000000
:004139D7 C745B800000000          mov [ebp-48], 00000000
:004139DE C745BC00000000          mov [ebp-44], 00000000
:004139E5 8B550C                  mov edx, dword ptr [ebp+0C]
:004139E8 8955C0                  mov dword ptr [ebp-40], edx
:004139EB C745C400000000          mov [ebp-3C], 00000000
:004139F2 C745C800000080          mov [ebp-38], 80000000
:004139F9 8B4508                  mov eax, dword ptr [ebp+08]
:004139FC 8945CC                  mov dword ptr [ebp-34], eax
:004139FF C745D000000000          mov [ebp-30], 00000000
:00413A06 EB09                    jmp 00413A11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A3A(U)
|
:00413A08 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00413A0B 83C101                  add ecx, 00000001
:00413A0E 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A06(U)
|
:00413A11 837DD005                cmp dword ptr [ebp-30], 00000005
:00413A15 7D25                    jge 00413A3C
:00413A17 8D55B4                  lea edx, dword ptr [ebp-4C]
:00413A1A 52                      push edx
:00413A1B 6800020300              push 00030200
:00413A20 6803080000              push 00000803
:00413A25 6A00                    push 00000000

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413A27 FF15D4874B00            Call dword ptr [004B87D4]
:00413A2D 85C0                    test eax, eax
:00413A2F 7509                    jne 00413A3A
:00413A31 C745FC01000000          mov [ebp-04], 00000001
:00413A38 EB02                    jmp 00413A3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A2F(C)
|
:00413A3A EBCC                    jmp 00413A08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413A15(C), :00413A38(U)
|
:00413A3C 837DFC00                cmp dword ptr [ebp-04], 00000000
:00413A40 0F8488000000            je 00413ACE
:00413A46 668B45B8                mov ax, word ptr [ebp-48]
:00413A4A 66A35C574800            mov word ptr [0048575C], ax
:00413A50 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00413A53 C7411001000000          mov [ecx+10], 00000001
:00413A5A C745EC00000000          mov [ebp-14], 00000000
:00413A61 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00413A68 C745F405000000          mov [ebp-0C], 00000005
:00413A6F C745F800000000          mov [ebp-08], 00000000
:00413A76 8D55EC                  lea edx, dword ptr [ebp-14]
:00413A79 52                      push edx
:00413A7A 6800000400              push 00040000
:00413A7F 6841080000              push 00000841
:00413A84 33C0                    xor eax, eax
:00413A86 66A15C574800            mov ax, word ptr [0048575C]
:00413A8C 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413A8D FF15D4874B00            Call dword ptr [004B87D4]
:00413A93 C745DC01400000          mov [ebp-24], 00004001
:00413A9A 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00413A9D 51                      push ecx
:00413A9E 6800010000              push 00000100
:00413AA3 6814080000              push 00000814
:00413AA8 33D2                    xor edx, edx
:00413AAA 668B155C574800          mov dx, word ptr [0048575C]
:00413AB1 52                      push edx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413AB2 FF15D4874B00            Call dword ptr [004B87D4]
:00413AB8 8B45D8                  mov eax, dword ptr [ebp-28]
:00413ABB A31C574800              mov dword ptr [0048571C], eax
:00413AC0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413AC3 51                      push ecx
:00413AC4 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00413AC7 E871000000              call 00413B3D
:00413ACC EB24                    jmp 00413AF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A40(C)
|
:00413ACE 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"´ЫHforwindows95"
                                  |
:00413AD0 6808674700              push 00476708

* Possible StringData Ref from Data Obj ->"Lk}Ұʵeɮ"
                                  |
:00413AD5 6820674700              push 00476720
:00413ADA 8B5508                  mov edx, dword ptr [ebp+08]
:00413ADD 52                      push edx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00413ADE FF1598864B00            Call dword ptr [004B8698]
:00413AE4 8B45B0                  mov eax, dword ptr [ebp-50]
:00413AE7 C7401000000000          mov [eax+10], 00000000
:00413AEE 33C0                    xor eax, eax
:00413AF0 EB45                    jmp 00413B37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413ACC(U)
|
:00413AF2 6A00                    push 00000000
:00413AF4 6A00                    push 00000000
:00413AF6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413AF9 51                      push ecx

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:00413AFA FF15CC864B00            Call dword ptr [004B86CC]
:00413B00 8B5508                  mov edx, dword ptr [ebp+08]
:00413B03 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00413B04 FF15A4864B00            Call dword ptr [004B86A4]
:00413B0A 6A00                    push 00000000
:00413B0C A11C574800              mov eax, dword ptr [0048571C]
:00413B11 50                      push eax

* Reference To: USER32.GetWindowThreadProcessId, Ord:0143h
                                  |
:00413B12 FF153C864B00            Call dword ptr [004B863C]
:00413B18 50                      push eax
:00413B19 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00413B1F 51                      push ecx
:00413B20 682E384100              push 0041382E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00413B25 6A03                    push 00000003

* Reference To: USER32.SetWindowsHookExA, Ord:0225h
                                  |
:00413B27 FF157C864B00            Call dword ptr [004B867C]
:00413B2D A318574800              mov dword ptr [00485718], eax
:00413B32 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413AF0(U)
|
:00413B37 8BE5                    mov esp, ebp
:00413B39 5D                      pop ebp
:00413B3A C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00413AC7   , :00414057   
|
:00413B3D 55                      push ebp
:00413B3E 8BEC                    mov ebp, esp
:00413B40 83EC40                  sub esp, 00000040
:00413B43 894DC0                  mov dword ptr [ebp-40], ecx
:00413B46 8B45C0                  mov eax, dword ptr [ebp-40]
:00413B49 83781000                cmp dword ptr [eax+10], 00000000
:00413B4D 7505                    jne 00413B54
:00413B4F E9EA000000              jmp 00413C3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413B4D(C)
|
:00413B54 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:00413B57 51                      push ecx
:00413B58 8B5508                  mov edx, dword ptr [ebp+08]
:00413B5B 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00413B5C FF15C8864B00            Call dword ptr [004B86C8]
:00413B62 8D45D4                  lea eax, dword ptr [ebp-2C]
:00413B65 50                      push eax
:00413B66 6800000200              push 00020000
:00413B6B 6843080000              push 00000843
:00413B70 33C9                    xor ecx, ecx
:00413B72 668B0D5C574800          mov cx, word ptr [0048575C]
:00413B79 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413B7A FF15D4874B00            Call dword ptr [004B87D4]
:00413B80 8B55D8                  mov edx, dword ptr [ebp-28]
:00413B83 8955E8                  mov dword ptr [ebp-18], edx
:00413B86 8B45DC                  mov eax, dword ptr [ebp-24]
:00413B89 8945EC                  mov dword ptr [ebp-14], eax
:00413B8C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00413B8F 894DF0                  mov dword ptr [ebp-10], ecx
:00413B92 8B55E4                  mov edx, dword ptr [ebp-1C]
:00413B95 8955F4                  mov dword ptr [ebp-0C], edx
:00413B98 8B45CC                  mov eax, dword ptr [ebp-34]
:00413B9B 99                      cdq
:00413B9C 2BC2                    sub eax, edx
:00413B9E 8BC8                    mov ecx, eax
:00413BA0 D1F9                    sar ecx, 1
:00413BA2 8B45F0                  mov eax, dword ptr [ebp-10]
:00413BA5 99                      cdq
:00413BA6 2BC2                    sub eax, edx
:00413BA8 D1F8                    sar eax, 1
:00413BAA 2BC8                    sub ecx, eax
:00413BAC 8B55C0                  mov edx, dword ptr [ebp-40]
:00413BAF 890A                    mov dword ptr [edx], ecx
:00413BB1 8B45D0                  mov eax, dword ptr [ebp-30]
:00413BB4 99                      cdq
:00413BB5 2BC2                    sub eax, edx
:00413BB7 8BC8                    mov ecx, eax
:00413BB9 D1F9                    sar ecx, 1
:00413BBB 8B45F4                  mov eax, dword ptr [ebp-0C]
:00413BBE 99                      cdq
:00413BBF 2BC2                    sub eax, edx
:00413BC1 D1F8                    sar eax, 1
:00413BC3 2BC8                    sub ecx, eax
:00413BC5 8B55C0                  mov edx, dword ptr [ebp-40]
:00413BC8 894A04                  mov dword ptr [edx+04], ecx
:00413BCB 8B45C0                  mov eax, dword ptr [ebp-40]
:00413BCE 8B08                    mov ecx, dword ptr [eax]
:00413BD0 034DF0                  add ecx, dword ptr [ebp-10]
:00413BD3 8B55C0                  mov edx, dword ptr [ebp-40]
:00413BD6 894A08                  mov dword ptr [edx+08], ecx
:00413BD9 8B45C0                  mov eax, dword ptr [ebp-40]
:00413BDC 8B4804                  mov ecx, dword ptr [eax+04]
:00413BDF 034DF4                  add ecx, dword ptr [ebp-0C]
:00413BE2 8B55C0                  mov edx, dword ptr [ebp-40]
:00413BE5 894A0C                  mov dword ptr [edx+0C], ecx
:00413BE8 8B45C0                  mov eax, dword ptr [ebp-40]
:00413BEB 8B08                    mov ecx, dword ptr [eax]
:00413BED 894DF8                  mov dword ptr [ebp-08], ecx
:00413BF0 8B55C0                  mov edx, dword ptr [ebp-40]
:00413BF3 8B4204                  mov eax, dword ptr [edx+04]
:00413BF6 8945FC                  mov dword ptr [ebp-04], eax
:00413BF9 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00413BFC 51                      push ecx
:00413BFD 8B5508                  mov edx, dword ptr [ebp+08]
:00413C00 52                      push edx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00413C01 FF15F8864B00            Call dword ptr [004B86F8]
:00413C07 8B45C0                  mov eax, dword ptr [ebp-40]
:00413C0A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413C0D 8908                    mov dword ptr [eax], ecx
:00413C0F 8B55C0                  mov edx, dword ptr [ebp-40]
:00413C12 8B45FC                  mov eax, dword ptr [ebp-04]
:00413C15 894204                  mov dword ptr [edx+04], eax
:00413C18 6A00                    push 00000000
:00413C1A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00413C1D 51                      push ecx
:00413C1E 8B55F0                  mov edx, dword ptr [ebp-10]
:00413C21 52                      push edx
:00413C22 8B45C0                  mov eax, dword ptr [ebp-40]
:00413C25 8B4804                  mov ecx, dword ptr [eax+04]
:00413C28 51                      push ecx
:00413C29 8B55C0                  mov edx, dword ptr [ebp-40]
:00413C2C 8B02                    mov eax, dword ptr [edx]
:00413C2E 50                      push eax
:00413C2F 6A00                    push 00000000
:00413C31 8B0D1C574800            mov ecx, dword ptr [0048571C]
:00413C37 51                      push ecx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:00413C38 FF15AC874B00            Call dword ptr [004B87AC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413B4F(U)
|
:00413C3E 8BE5                    mov esp, ebp
:00413C40 5D                      pop ebp
:00413C41 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00413DCC   
|
:00413C44 55                      push ebp
:00413C45 8BEC                    mov ebp, esp
:00413C47 83EC18                  sub esp, 00000018
:00413C4A 894DE8                  mov dword ptr [ebp-18], ecx
:00413C4D 8B45E8                  mov eax, dword ptr [ebp-18]
:00413C50 C7401401000000          mov [eax+14], 00000001
:00413C57 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00413C5A 83791400                cmp dword ptr [ecx+14], 00000000
:00413C5E 745B                    je 00413CBB
:00413C60 8B5508                  mov edx, dword ptr [ebp+08]
:00413C63 81E2FFFF0000            and edx, 0000FFFF
:00413C69 8955F0                  mov dword ptr [ebp-10], edx
:00413C6C C745F800000000          mov [ebp-08], 00000000
:00413C73 8B45F8                  mov eax, dword ptr [ebp-08]
:00413C76 8945F4                  mov dword ptr [ebp-0C], eax
:00413C79 C745EC01000000          mov [ebp-14], 00000001
:00413C80 6A00                    push 00000000
:00413C82 6800010000              push 00000100
:00413C87 6807080000              push 00000807
:00413C8C 33C9                    xor ecx, ecx
:00413C8E 668B0D5C574800          mov cx, word ptr [0048575C]
:00413C95 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413C96 FF15D4874B00            Call dword ptr [004B87D4]
:00413C9C 8D55F0                  lea edx, dword ptr [ebp-10]
:00413C9F 52                      push edx
:00413CA0 8B45EC                  mov eax, dword ptr [ebp-14]
:00413CA3 50                      push eax
:00413CA4 6806080000              push 00000806
:00413CA9 33C9                    xor ecx, ecx
:00413CAB 668B0D5C574800          mov cx, word ptr [0048575C]
:00413CB2 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413CB3 FF15D4874B00            Call dword ptr [004B87D4]
:00413CB9 EB1A                    jmp 00413CD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413C5E(C)
|
:00413CBB 8D55FC                  lea edx, dword ptr [ebp-04]
:00413CBE 52                      push edx
:00413CBF 6A00                    push 00000000
:00413CC1 6809080000              push 00000809
:00413CC6 33C0                    xor eax, eax
:00413CC8 66A15C574800            mov ax, word ptr [0048575C]
:00413CCE 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413CCF FF15D4874B00            Call dword ptr [004B87D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413CB9(U)
|
:00413CD5 B801000000              mov eax, 00000001
:00413CDA 8BE5                    mov esp, ebp
:00413CDC 5D                      pop ebp
:00413CDD C20400                  ret 0004



* Referenced by a CALL at Address:
|:00414044   
|
:00413CE0 55                      push ebp
:00413CE1 8BEC                    mov ebp, esp
:00413CE3 83EC08                  sub esp, 00000008
:00413CE6 894DFC                  mov dword ptr [ebp-04], ecx
:00413CE9 33C0                    xor eax, eax
:00413CEB 66A15C574800            mov ax, word ptr [0048575C]
:00413CF1 39450C                  cmp dword ptr [ebp+0C], eax
:00413CF4 751F                    jne 00413D15
:00413CF6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413CF9 894DF8                  mov dword ptr [ebp-08], ecx
:00413CFC 837DF801                cmp dword ptr [ebp-08], 00000001
:00413D00 7402                    je 00413D04
:00413D02 EB11                    jmp 00413D15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D00(C)
|
:00413D04 8B55FC                  mov edx, dword ptr [ebp-04]
:00413D07 C7421400000000          mov [edx+14], 00000000
:00413D0E B801000000              mov eax, 00000001
:00413D13 EB02                    jmp 00413D17

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413CF4(C), :00413D02(U)
|
:00413D15 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D13(U)
|
:00413D17 8BE5                    mov esp, ebp
:00413D19 5D                      pop ebp
:00413D1A C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00414080   , :004140A9   
|
:00413D1D 55                      push ebp
:00413D1E 8BEC                    mov ebp, esp
:00413D20 83EC14                  sub esp, 00000014
:00413D23 894DF0                  mov dword ptr [ebp-10], ecx
:00413D26 C745F801000000          mov [ebp-08], 00000001
:00413D2D 8B450C                  mov eax, dword ptr [ebp+0C]
:00413D30 25FFFF0000              and eax, 0000FFFF
:00413D35 83F803                  cmp eax, 00000003
:00413D38 7C07                    jl 00413D41
:00413D3A 33C0                    xor eax, eax
:00413D3C E945010000              jmp 00413E86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D38(C)
|
:00413D41 E80F2F0100              call 00426C55
:00413D46 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413D49 81E1FFFF0000            and ecx, 0000FFFF
:00413D4F 8B148DD0664700          mov edx, dword ptr [4*ecx+004766D0]
:00413D56 52                      push edx
:00413D57 E88AC4FFFF              call 004101E6
:00413D5C 83C404                  add esp, 00000004
:00413D5F 8945FC                  mov dword ptr [ebp-04], eax
:00413D62 6A00                    push 00000000
:00413D64 6A00                    push 00000000
:00413D66 E82D660500              call 0046A398
:00413D6B 83C408                  add esp, 00000008
:00413D6E 8B45FC                  mov eax, dword ptr [ebp-04]
:00413D71 50                      push eax
:00413D72 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413D75 51                      push ecx
:00413D76 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00413D79 E82DFCFFFF              call 004139AB
:00413D7E 8B55F0                  mov edx, dword ptr [ebp-10]
:00413D81 837A1000                cmp dword ptr [edx+10], 00000000
:00413D85 752B                    jne 00413DB2
:00413D87 8B45FC                  mov eax, dword ptr [ebp-04]
:00413D8A 50                      push eax

* Possible StringData Ref from Data Obj ->"v%sLk"
                                  |
:00413D8B 6834674700              push 00476734
:00413D90 E8B4FA0400              call 00463849
:00413D95 83C408                  add esp, 00000008
:00413D98 85C0                    test eax, eax
:00413D9A 7516                    jne 00413DB2
:00413D9C 6800010000              push 00000100
:00413DA1 6A00                    push 00000000
:00413DA3 E8F0650500              call 0046A398
:00413DA8 83C408                  add esp, 00000008
:00413DAB 33C0                    xor eax, eax
:00413DAD E9D4000000              jmp 00413E86

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413D85(C), :00413D9A(C)
|
:00413DB2 C7051057480000000000    mov dword ptr [00485710], 00000000
:00413DBC 8B4D14                  mov ecx, dword ptr [ebp+14]
:00413DBF 890D14574800            mov dword ptr [00485714], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E5C(C)
|
:00413DC5 8B5508                  mov edx, dword ptr [ebp+08]
:00413DC8 52                      push edx
:00413DC9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00413DCC E873FEFFFF              call 00413C44

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E35(U)
|
:00413DD1 8B45F0                  mov eax, dword ptr [ebp-10]
:00413DD4 83781400                cmp dword ptr [eax+14], 00000000
:00413DD8 745D                    je 00413E37
:00413DDA E86F870500              call 0046C54E
:00413DDF 8B0D1C574800            mov ecx, dword ptr [0048571C]
:00413DE5 51                      push ecx
:00413DE6 B920574800              mov ecx, 00485720
:00413DEB E813CD0000              call 00420B03
:00413DF0 F7D8                    neg eax
:00413DF2 1BC0                    sbb eax, eax
:00413DF4 F7D8                    neg eax
:00413DF6 85C0                    test eax, eax
:00413DF8 7512                    jne 00413E0C
:00413DFA 833D1057480000          cmp dword ptr [00485710], 00000000
:00413E01 7509                    jne 00413E0C
:00413E03 C745EC00000000          mov [ebp-14], 00000000
:00413E0A EB07                    jmp 00413E13

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413DF8(C), :00413E01(C)
|
:00413E0C C745EC01000000          mov [ebp-14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E0A(U)
|
:00413E13 8B55EC                  mov edx, dword ptr [ebp-14]
:00413E16 8955F4                  mov dword ptr [ebp-0C], edx
:00413E19 837D1400                cmp dword ptr [ebp+14], 00000000
:00413E1D 7416                    je 00413E35
:00413E1F 837DF400                cmp dword ptr [ebp-0C], 00000000
:00413E23 7410                    je 00413E35
:00413E25 C745F800000000          mov [ebp-08], 00000000
:00413E2C C7451000000000          mov [ebp+10], 00000000
:00413E33 EB02                    jmp 00413E37

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413E1D(C), :00413E23(C)
|
:00413E35 EB9A                    jmp 00413DD1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413DD8(C), :00413E33(U)
|
:00413E37 837D1000                cmp dword ptr [ebp+10], 00000000
:00413E3B 741B                    je 00413E58
:00413E3D 6A00                    push 00000000
:00413E3F 6800010000              push 00000100
:00413E44 6807080000              push 00000807
:00413E49 33C0                    xor eax, eax
:00413E4B 66A15C574800            mov ax, word ptr [0048575C]
:00413E51 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413E52 FF15D4874B00            Call dword ptr [004B87D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E3B(C)
|
:00413E58 837D1000                cmp dword ptr [ebp+10], 00000000
:00413E5C 0F8563FFFFFF            jne 00413DC5
:00413E62 837D1800                cmp dword ptr [ebp+18], 00000000
:00413E66 751B                    jne 00413E83
:00413E68 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413E6B 51                      push ecx
:00413E6C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00413E6F E8C7FAFFFF              call 0041393B
:00413E74 6800010000              push 00000100
:00413E79 6A00                    push 00000000
:00413E7B E818650500              call 0046A398
:00413E80 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E66(C)
|
:00413E83 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413D3C(U), :00413DAD(U)
|
:00413E86 8BE5                    mov esp, ebp
:00413E88 5D                      pop ebp
:00413E89 C21800                  ret 0018



* Referenced by a CALL at Addresses:
|:00413EBB   , :00413F0F   , :00413F73   , :00413FCF   
|
:00413E8C 55                      push ebp
:00413E8D 8BEC                    mov ebp, esp
:00413E8F 51                      push ecx
:00413E90 894DFC                  mov dword ptr [ebp-04], ecx
:00413E93 33C0                    xor eax, eax
:00413E95 66A15C574800            mov ax, word ptr [0048575C]
:00413E9B 3DFFFF0000              cmp eax, 0000FFFF
:00413EA0 7504                    jne 00413EA6
:00413EA2 33C0                    xor eax, eax
:00413EA4 EB05                    jmp 00413EAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413EA0(C)
|
:00413EA6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413EA4(U)
|
:00413EAB 8BE5                    mov esp, ebp
:00413EAD 5D                      pop ebp
:00413EAE C3                      ret


:00413EAF 55                      push ebp
:00413EB0 8BEC                    mov ebp, esp
:00413EB2 83EC14                  sub esp, 00000014
:00413EB5 894DEC                  mov dword ptr [ebp-14], ecx
:00413EB8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00413EBB E8CCFFFFFF              call 00413E8C
:00413EC0 85C0                    test eax, eax
:00413EC2 7504                    jne 00413EC8
:00413EC4 33C0                    xor eax, eax
:00413EC6 EB37                    jmp 00413EFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413EC2(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00413EC8 C745F804000000          mov [ebp-08], 00000004
:00413ECF 8D45F0                  lea eax, dword ptr [ebp-10]
:00413ED2 50                      push eax
:00413ED3 6800010000              push 00000100
:00413ED8 6814080000              push 00000814
:00413EDD 33C9                    xor ecx, ecx
:00413EDF 668B0D5C574800          mov cx, word ptr [0048575C]
:00413EE6 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413EE7 FF15D4874B00            Call dword ptr [004B87D4]
:00413EED 817DF411020000          cmp dword ptr [ebp-0C], 00000211
:00413EF4 7507                    jne 00413EFD
:00413EF6 B801000000              mov eax, 00000001
:00413EFB EB02                    jmp 00413EFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413EF4(C)
|
:00413EFD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413EC6(U), :00413EFB(U)
|
:00413EFF 8BE5                    mov esp, ebp
:00413F01 5D                      pop ebp
:00413F02 C3                      ret



* Referenced by a CALL at Address:
|:00413FE2   
|
:00413F03 55                      push ebp
:00413F04 8BEC                    mov ebp, esp
:00413F06 83EC14                  sub esp, 00000014
:00413F09 894DEC                  mov dword ptr [ebp-14], ecx
:00413F0C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00413F0F E878FFFFFF              call 00413E8C
:00413F14 85C0                    test eax, eax
:00413F16 7507                    jne 00413F1F
:00413F18 B801000000              mov eax, 00000001
:00413F1D EB44                    jmp 00413F63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F16(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00413F1F C745F804000000          mov [ebp-08], 00000004
:00413F26 8D45F0                  lea eax, dword ptr [ebp-10]
:00413F29 50                      push eax
:00413F2A 6800010000              push 00000100
:00413F2F 6814080000              push 00000814
:00413F34 33C9                    xor ecx, ecx
:00413F36 668B0D5C574800          mov cx, word ptr [0048575C]
:00413F3D 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413F3E FF15D4874B00            Call dword ptr [004B87D4]
:00413F44 817DF40E020000          cmp dword ptr [ebp-0C], 0000020E
:00413F4B 7504                    jne 00413F51
:00413F4D 33C0                    xor eax, eax
:00413F4F EB12                    jmp 00413F63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F4B(C)
|
:00413F51 817DF411020000          cmp dword ptr [ebp-0C], 00000211
:00413F58 7504                    jne 00413F5E
:00413F5A 33C0                    xor eax, eax
:00413F5C EB05                    jmp 00413F63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F58(C)
|
:00413F5E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413F1D(U), :00413F4F(U), :00413F5C(U)
|
:00413F63 8BE5                    mov esp, ebp
:00413F65 5D                      pop ebp
:00413F66 C3                      ret



* Referenced by a CALL at Address:
|:004140B8   
|
:00413F67 55                      push ebp
:00413F68 8BEC                    mov ebp, esp
:00413F6A 83EC08                  sub esp, 00000008
:00413F6D 894DF8                  mov dword ptr [ebp-08], ecx
:00413F70 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413F73 E814FFFFFF              call 00413E8C
:00413F78 85C0                    test eax, eax
:00413F7A 7502                    jne 00413F7E
:00413F7C EB1B                    jmp 00413F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F7A(C)
|
:00413F7E 8D45FC                  lea eax, dword ptr [ebp-04]
:00413F81 50                      push eax
:00413F82 6A00                    push 00000000
:00413F84 6809080000              push 00000809
:00413F89 33C9                    xor ecx, ecx
:00413F8B 668B0D5C574800          mov cx, word ptr [0048575C]
:00413F92 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413F93 FF15D4874B00            Call dword ptr [004B87D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F7C(U)
|
:00413F99 8BE5                    mov esp, ebp
:00413F9B 5D                      pop ebp
:00413F9C C3                      ret



* Referenced by a CALL at Address:
|:004140CD   
|
:00413F9D 55                      push ebp
:00413F9E 8BEC                    mov ebp, esp
:00413FA0 83EC08                  sub esp, 00000008
:00413FA3 894DF8                  mov dword ptr [ebp-08], ecx
:00413FA6 8B4508                  mov eax, dword ptr [ebp+08]
:00413FA9 25FFFF0000              and eax, 0000FFFF
:00413FAE 8945FC                  mov dword ptr [ebp-04], eax
:00413FB1 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00413FB4 51                      push ecx
:00413FB5 6A01                    push 00000001
:00413FB7 6806080000              push 00000806
:00413FBC 33D2                    xor edx, edx
:00413FBE 668B155C574800          mov dx, word ptr [0048575C]
:00413FC5 52                      push edx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00413FC6 FF15D4874B00            Call dword ptr [004B87D4]
:00413FCC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413FCF E8B8FEFFFF              call 00413E8C
:00413FD4 85C0                    test eax, eax
:00413FD6 7407                    je 00413FDF
:00413FD8 B801000000              mov eax, 00000001
:00413FDD EB15                    jmp 00413FF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413FD6(C)
|
:00413FDF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413FE2 E81CFFFFFF              call 00413F03
:00413FE7 85C0                    test eax, eax
:00413FE9 7407                    je 00413FF2
:00413FEB B801000000              mov eax, 00000001
:00413FF0 EB02                    jmp 00413FF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413FE9(C)
|
:00413FF2 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413FDD(U), :00413FF0(U)
|
:00413FF4 8BE5                    mov esp, ebp
:00413FF6 5D                      pop ebp
:00413FF7 C20400                  ret 0004


:00413FFA 55                      push ebp
:00413FFB 8BEC                    mov ebp, esp
:00413FFD B9F8564800              mov ecx, 004856F8
:00414002 E8DBF8FFFF              call 004138E2
:00414007 5D                      pop ebp
:00414008 C3                      ret



* Referenced by a CALL at Address:
|:004264D4   
|
:00414009 55                      push ebp
:0041400A 8BEC                    mov ebp, esp
:0041400C 51                      push ecx
:0041400D 8B4508                  mov eax, dword ptr [ebp+08]
:00414010 50                      push eax
:00414011 B9F8564800              mov ecx, 004856F8
:00414016 E820F9FFFF              call 0041393B
:0041401B 8945FC                  mov dword ptr [ebp-04], eax
:0041401E 6800010000              push 00000100
:00414023 6A00                    push 00000000
:00414025 E86E630500              call 0046A398
:0041402A 83C408                  add esp, 00000008
:0041402D 8B45FC                  mov eax, dword ptr [ebp-04]
:00414030 8BE5                    mov esp, ebp
:00414032 5D                      pop ebp
:00414033 C3                      ret



* Referenced by a CALL at Address:
|:00463F42   
|
:00414034 55                      push ebp
:00414035 8BEC                    mov ebp, esp
:00414037 8B450C                  mov eax, dword ptr [ebp+0C]
:0041403A 50                      push eax
:0041403B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041403E 51                      push ecx
:0041403F B9F8564800              mov ecx, 004856F8
:00414044 E897FCFFFF              call 00413CE0
:00414049 5D                      pop ebp
:0041404A C3                      ret



* Referenced by a CALL at Address:
|:00463E53   
|
:0041404B 55                      push ebp
:0041404C 8BEC                    mov ebp, esp
:0041404E 8B4508                  mov eax, dword ptr [ebp+08]
:00414051 50                      push eax
:00414052 B9F8564800              mov ecx, 004856F8
:00414057 E8E1FAFFFF              call 00413B3D
:0041405C 5D                      pop ebp
:0041405D C3                      ret



* Referenced by a CALL at Addresses:
|:00426526   , :0042656E   , :0042935C   
|
:0041405E 55                      push ebp
:0041405F 8BEC                    mov ebp, esp
:00414061 6A00                    push 00000000
:00414063 8B4514                  mov eax, dword ptr [ebp+14]
:00414066 50                      push eax
:00414067 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041406A 51                      push ecx
:0041406B 8B550C                  mov edx, dword ptr [ebp+0C]
:0041406E 52                      push edx
:0041406F 668B4508                mov ax, word ptr [ebp+08]
:00414073 50                      push eax
:00414074 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0041407A 51                      push ecx
:0041407B B9F8564800              mov ecx, 004856F8
:00414080 E898FCFFFF              call 00413D1D
:00414085 5D                      pop ebp
:00414086 C3                      ret


:00414087 55                      push ebp
:00414088 8BEC                    mov ebp, esp
:0041408A 6A01                    push 00000001
:0041408C 8B4514                  mov eax, dword ptr [ebp+14]
:0041408F 50                      push eax
:00414090 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414093 51                      push ecx
:00414094 8B550C                  mov edx, dword ptr [ebp+0C]
:00414097 52                      push edx
:00414098 668B4508                mov ax, word ptr [ebp+08]
:0041409C 50                      push eax
:0041409D 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004140A3 51                      push ecx
:004140A4 B9F8564800              mov ecx, 004856F8
:004140A9 E86FFCFFFF              call 00413D1D
:004140AE 5D                      pop ebp
:004140AF C3                      ret



* Referenced by a CALL at Address:
|:00469028   
|
:004140B0 55                      push ebp
:004140B1 8BEC                    mov ebp, esp
:004140B3 B9F8564800              mov ecx, 004856F8
:004140B8 E8AAFEFFFF              call 00413F67
:004140BD 5D                      pop ebp
:004140BE C3                      ret



* Referenced by a CALL at Address:
|:004690FA   
|
:004140BF 55                      push ebp
:004140C0 8BEC                    mov ebp, esp
:004140C2 A1380E4B00              mov eax, dword ptr [004B0E38]
:004140C7 50                      push eax
:004140C8 B9F8564800              mov ecx, 004856F8
:004140CD E8CBFEFFFF              call 00413F9D
:004140D2 5D                      pop ebp
:004140D3 C3                      ret


:004140D4 CC                      int 03
:004140D5 CC                      int 03
:004140D6 CC                      int 03
:004140D7 CC                      int 03
:004140D8 CC                      int 03
:004140D9 CC                      int 03
:004140DA CC                      int 03
:004140DB CC                      int 03
:004140DC CC                      int 03
:004140DD CC                      int 03
:004140DE CC                      int 03
:004140DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00413806   , :004200E7   
|
:004140E0 55                      push ebp
:004140E1 8BEC                    mov ebp, esp
:004140E3 51                      push ecx
:004140E4 894DFC                  mov dword ptr [ebp-04], ecx
:004140E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004140EA C7400400000000          mov [eax+04], 00000000
:004140F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004140F4 C7410800000000          mov [ecx+08], 00000000
:004140FB 8B55FC                  mov edx, dword ptr [ebp-04]
:004140FE C7421440010000          mov [edx+14], 00000140
:00414105 8B45FC                  mov eax, dword ptr [ebp-04]
:00414108 C74018F0000000          mov [eax+18], 000000F0
:0041410F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414112 C7410C40010000          mov [ecx+0C], 00000140
:00414119 8B55FC                  mov edx, dword ptr [ebp-04]
:0041411C C74210F0000000          mov [edx+10], 000000F0
:00414123 8B45FC                  mov eax, dword ptr [ebp-04]
:00414126 C7401C00000000          mov [eax+1C], 00000000
:0041412D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414130 C7412000000000          mov [ecx+20], 00000000
:00414137 8B55FC                  mov edx, dword ptr [ebp-04]
:0041413A C7422400000000          mov [edx+24], 00000000
:00414141 8B45FC                  mov eax, dword ptr [ebp-04]
:00414144 C7402800000000          mov [eax+28], 00000000
:0041414B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041414E C7412C00000000          mov [ecx+2C], 00000000
:00414155 8B55FC                  mov edx, dword ptr [ebp-04]
:00414158 C7423000000000          mov [edx+30], 00000000
:0041415F 8B45FC                  mov eax, dword ptr [ebp-04]
:00414162 C7403400000000          mov [eax+34], 00000000
:00414169 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041416C C7413800000000          mov [ecx+38], 00000000
:00414173 8B45FC                  mov eax, dword ptr [ebp-04]
:00414176 8BE5                    mov esp, ebp
:00414178 5D                      pop ebp
:00414179 C3                      ret


:0041417A CC                      int 03
:0041417B CC                      int 03
:0041417C CC                      int 03
:0041417D CC                      int 03
:0041417E CC                      int 03
:0041417F CC                      int 03

* Referenced by a CALL at Address:
|:004137C7   
|
:00414180 55                      push ebp
:00414181 8BEC                    mov ebp, esp
:00414183 51                      push ecx
:00414184 894DFC                  mov dword ptr [ebp-04], ecx
:00414187 8B45FC                  mov eax, dword ptr [ebp-04]
:0041418A C7401000000000          mov [eax+10], 00000000
:00414191 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414194 C7411400000000          mov [ecx+14], 00000000
:0041419B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041419E 8BE5                    mov esp, ebp
:004141A0 5D                      pop ebp
:004141A1 C3                      ret


:004141A2 CC                      int 03
:004141A3 CC                      int 03
:004141A4 CC                      int 03
:004141A5 CC                      int 03
:004141A6 CC                      int 03
:004141A7 CC                      int 03
:004141A8 CC                      int 03
:004141A9 CC                      int 03
:004141AA CC                      int 03
:004141AB CC                      int 03
:004141AC CC                      int 03
:004141AD CC                      int 03
:004141AE CC                      int 03
:004141AF CC                      int 03

* Referenced by a CALL at Address:
|:00414253   
|
:004141B0 55                      push ebp
:004141B1 8BEC                    mov ebp, esp
:004141B3 51                      push ecx
:004141B4 894DFC                  mov dword ptr [ebp-04], ecx
:004141B7 833D7057480000          cmp dword ptr [00485770], 00000000
:004141BE 7532                    jne 004141F2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:004141C0 6800040000              push 00000400
:004141C5 A16C574800              mov eax, dword ptr [0048576C]
:004141CA 50                      push eax
:004141CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004141CE E8BEC2FFFF              call 00410491
:004141D3 A370574800              mov dword ptr [00485770], eax
:004141D8 833D7057480000          cmp dword ptr [00485770], 00000000
:004141DF 7F05                    jg 004141E6
:004141E1 83C8FF                  or eax, FFFFFFFF
:004141E4 EB3A                    jmp 00414220

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004141DF(C)
|
:004141E6 8B0D6C574800            mov ecx, dword ptr [0048576C]
:004141EC 890D68574800            mov dword ptr [00485768], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004141BE(C)
|
:004141F2 8B1570574800            mov edx, dword ptr [00485770]
:004141F8 83EA01                  sub edx, 00000001
:004141FB 891570574800            mov dword ptr [00485770], edx
:00414201 A168574800              mov eax, dword ptr [00485768]
:00414206 33C9                    xor ecx, ecx
:00414208 8A08                    mov cl, byte ptr [eax]
:0041420A 8BC1                    mov eax, ecx
:0041420C 25FF000000              and eax, 000000FF
:00414211 8B1568574800            mov edx, dword ptr [00485768]
:00414217 83C201                  add edx, 00000001
:0041421A 891568574800            mov dword ptr [00485768], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004141E4(U)
|
:00414220 8BE5                    mov esp, ebp
:00414222 5D                      pop ebp
:00414223 C3                      ret



* Referenced by a CALL at Addresses:
|:004142D5   , :00414312   
|
:00414224 55                      push ebp
:00414225 8BEC                    mov ebp, esp
:00414227 83EC0C                  sub esp, 0000000C
:0041422A 894DF4                  mov dword ptr [ebp-0C], ecx
:0041422D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004142AF(U)
|
:00414234 8B4508                  mov eax, dword ptr [ebp+08]
:00414237 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041423A 83E901                  sub ecx, 00000001
:0041423D 894D08                  mov dword ptr [ebp+08], ecx
:00414240 85C0                    test eax, eax
:00414242 746D                    je 004142B1
:00414244 33D2                    xor edx, edx
:00414246 8A1564574800            mov dl, byte ptr [00485764]
:0041424C 85D2                    test edx, edx
:0041424E 7525                    jne 00414275
:00414250 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00414253 E858FFFFFF              call 004141B0
:00414258 8945F8                  mov dword ptr [ebp-08], eax
:0041425B 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:0041425F 7505                    jne 00414266
:00414261 83C8FF                  or eax, FFFFFFFF
:00414264 EB4E                    jmp 004142B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041425F(C)
|
:00414266 8A45F8                  mov al, byte ptr [ebp-08]
:00414269 A260574800              mov byte ptr [00485760], al
:0041426E C6056457480008          mov byte ptr [00485764], 08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041424E(C)
|
:00414275 8A0D64574800            mov cl, byte ptr [00485764]
:0041427B 80E901                  sub cl, 01
:0041427E 880D64574800            mov byte ptr [00485764], cl
:00414284 33D2                    xor edx, edx
:00414286 8A1560574800            mov dl, byte ptr [00485760]
:0041428C 81E280000000            and edx, 00000080
:00414292 F7DA                    neg edx
:00414294 1BD2                    sbb edx, edx
:00414296 F7DA                    neg edx
:00414298 8B45FC                  mov eax, dword ptr [ebp-04]
:0041429B 8D0C42                  lea ecx, dword ptr [edx+2*eax]
:0041429E 894DFC                  mov dword ptr [ebp-04], ecx
:004142A1 8A1560574800            mov dl, byte ptr [00485760]
:004142A7 D0E2                    shl dl, 1
:004142A9 881560574800            mov byte ptr [00485760], dl
:004142AF EB83                    jmp 00414234

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414242(C)
|
:004142B1 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414264(U)
|
:004142B4 8BE5                    mov esp, ebp
:004142B6 5D                      pop ebp
:004142B7 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004143E3   , :00414402   
|
:004142BA 55                      push ebp
:004142BB 8BEC                    mov ebp, esp
:004142BD 83EC10                  sub esp, 00000010
:004142C0 894DF0                  mov dword ptr [ebp-10], ecx
:004142C3 C745FC00000000          mov [ebp-04], 00000000
:004142CA 66C745F40000            mov [ebp-0C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414308(C)
|
:004142D0 6A01                    push 00000001
:004142D2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004142D5 E84AFFFFFF              call 00414224
:004142DA 8945F8                  mov dword ptr [ebp-08], eax
:004142DD 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:004142E1 7505                    jne 004142E8
:004142E3 83C8FF                  or eax, FFFFFFFF
:004142E6 EB49                    jmp 00414331

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004142E1(C)
|
:004142E8 8B45FC                  mov eax, dword ptr [ebp-04]
:004142EB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004142EE 8D1441                  lea edx, dword ptr [ecx+2*eax]
:004142F1 8955FC                  mov dword ptr [ebp-04], edx
:004142F4 668B45F4                mov ax, word ptr [ebp-0C]
:004142F8 66050100                add ax, 0001
:004142FC 668945F4                mov word ptr [ebp-0C], ax
:00414300 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414303 83E101                  and ecx, 00000001
:00414306 85C9                    test ecx, ecx
:00414308 75C6                    jne 004142D0
:0041430A 0FBF55F4                movsx edx, word ptr [ebp-0C]
:0041430E 52                      push edx
:0041430F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414312 E80DFFFFFF              call 00414224
:00414317 8945F8                  mov dword ptr [ebp-08], eax
:0041431A 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:0041431E 7505                    jne 00414325
:00414320 83C8FF                  or eax, FFFFFFFF
:00414323 EB0C                    jmp 00414331

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041431E(C)
|
:00414325 8B45FC                  mov eax, dword ptr [ebp-04]
:00414328 0345F8                  add eax, dword ptr [ebp-08]
:0041432B 8945FC                  mov dword ptr [ebp-04], eax
:0041432E 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004142E6(U), :00414323(U)
|
:00414331 8BE5                    mov esp, ebp
:00414333 5D                      pop ebp
:00414334 C3                      ret



* Referenced by a CALL at Addresses:
|:00411AC1   , :00412919   , :00412A8F   , :00412B74   , :00421189   
|:00422C9F   , :00425DD0   , :00425E2F   , :00425E8E   , :00425EED   
|:00425F4C   , :004261FA   , :00426209   , :00426293   , :00426397   
|:0042A0D6   , :0042C2FF   , :0042C41E   , :0043AA96   , :0043B666   
|:0043B8B9   , :0043BA44   , :0043DB5B   , :0043DDEC   , :0043E803   
|:0043EA9A   , :0043ECFF   , :0043EDFF   , :0043EED2   , :0043F2DB   
|:0043F657   , :004500A6   , :0045100B   , :0045202C   , :0045292A   
|:00454AC9   , :00454D55   , :00466058   
|
:00414335 55                      push ebp
:00414336 8BEC                    mov ebp, esp
:00414338 51                      push ecx
:00414339 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041433C 6A04                    push 00000004
:0041433E 8B4508                  mov eax, dword ptr [ebp+08]
:00414341 50                      push eax
:00414342 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414345 E807BFFFFF              call 00410251
:0041434A 85C0                    test eax, eax
:0041434C 7517                    jne 00414365
:0041434E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414351 51                      push ecx

* Possible StringData Ref from Data Obj ->"File%sOpenErr"
                                  |
:00414352 6844674700              push 00476744
:00414357 6A00                    push 00000000
:00414359 E80E480100              call 00428B6C
:0041435E 83C40C                  add esp, 0000000C
:00414361 33C0                    xor eax, eax
:00414363 EB1B                    jmp 00414380

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041434C(C)
|
:00414365 6800010000              push 00000100
:0041436A 8B55FC                  mov edx, dword ptr [ebp-04]
:0041436D 83C204                  add edx, 00000004
:00414370 52                      push edx

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00414371 6A10                    push 00000010
:00414373 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414376 E833C1FFFF              call 004104AE
:0041437B B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414363(U)
|
:00414380 8BE5                    mov esp, ebp
:00414382 5D                      pop ebp
:00414383 C20400                  ret 0004


:00414386 55                      push ebp
:00414387 8BEC                    mov ebp, esp
:00414389 51                      push ecx
:0041438A 894DFC                  mov dword ptr [ebp-04], ecx
:0041438D 6A00                    push 00000000
:0041438F 8B4508                  mov eax, dword ptr [ebp+08]
:00414392 50                      push eax
:00414393 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414396 E8B6BEFFFF              call 00410251
:0041439B 85C0                    test eax, eax
:0041439D 7517                    jne 004143B6
:0041439F 8B4D08                  mov ecx, dword ptr [ebp+08]
:004143A2 51                      push ecx

* Possible StringData Ref from Data Obj ->"File%sOpenErr"
                                  |
:004143A3 6854674700              push 00476754
:004143A8 6A00                    push 00000000
:004143AA E8BD470100              call 00428B6C
:004143AF 83C40C                  add esp, 0000000C
:004143B2 33C0                    xor eax, eax
:004143B4 EB1B                    jmp 004143D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041439D(C)
|
:004143B6 6800010000              push 00000100
:004143BB 8B55FC                  mov edx, dword ptr [ebp-04]
:004143BE 83C204                  add edx, 00000004
:004143C1 52                      push edx

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004143C2 6A10                    push 00000010
:004143C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004143C7 E8E2C0FFFF              call 004104AE
:004143CC B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004143B4(U)
|
:004143D1 8BE5                    mov esp, ebp
:004143D3 5D                      pop ebp
:004143D4 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0041469C   
|
:004143D7 55                      push ebp
:004143D8 8BEC                    mov ebp, esp
:004143DA 83EC18                  sub esp, 00000018
:004143DD 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041447D(C)
|
:004143E0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004143E3 E8D2FEFFFF              call 004142BA
:004143E8 8945F8                  mov dword ptr [ebp-08], eax
:004143EB 817DF800010000          cmp dword ptr [ebp-08], 00000100
:004143F2 7C65                    jl 00414459
:004143F4 8B45F8                  mov eax, dword ptr [ebp-08]
:004143F7 2D00010000              sub eax, 00000100
:004143FC 8945F0                  mov dword ptr [ebp-10], eax
:004143FF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00414402 E8B3FEFFFF              call 004142BA
:00414407 83C003                  add eax, 00000003
:0041440A 8945F4                  mov dword ptr [ebp-0C], eax
:0041440D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414410 2B4DF0                  sub ecx, dword ptr [ebp-10]
:00414413 894DFC                  mov dword ptr [ebp-04], ecx
:00414416 C745EC00000000          mov [ebp-14], 00000000
:0041441D EB09                    jmp 00414428

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041444C(U)
|
:0041441F 8B55EC                  mov edx, dword ptr [ebp-14]
:00414422 83C201                  add edx, 00000001
:00414425 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041441D(U)
|
:00414428 8B45EC                  mov eax, dword ptr [ebp-14]
:0041442B 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0041442E 7D1E                    jge 0041444E
:00414430 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414433 8B55FC                  mov edx, dword ptr [ebp-04]
:00414436 8A02                    mov al, byte ptr [edx]
:00414438 8801                    mov byte ptr [ecx], al
:0041443A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041443D 83C101                  add ecx, 00000001
:00414440 894D08                  mov dword ptr [ebp+08], ecx
:00414443 8B55FC                  mov edx, dword ptr [ebp-04]
:00414446 83C201                  add edx, 00000001
:00414449 8955FC                  mov dword ptr [ebp-04], edx
:0041444C EBD1                    jmp 0041441F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041442E(C)
|
:0041444E 8B450C                  mov eax, dword ptr [ebp+0C]
:00414451 2B45F4                  sub eax, dword ptr [ebp-0C]
:00414454 89450C                  mov dword ptr [ebp+0C], eax
:00414457 EB20                    jmp 00414479

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004143F2(C)
|
:00414459 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041445C 034DF8                  add ecx, dword ptr [ebp-08]
:0041445F 8B5508                  mov edx, dword ptr [ebp+08]
:00414462 8A4104                  mov al, byte ptr [ecx+04]
:00414465 8802                    mov byte ptr [edx], al
:00414467 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041446A 83C101                  add ecx, 00000001
:0041446D 894D08                  mov dword ptr [ebp+08], ecx
:00414470 8B550C                  mov edx, dword ptr [ebp+0C]
:00414473 83EA01                  sub edx, 00000001
:00414476 89550C                  mov dword ptr [ebp+0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414457(U)
|
:00414479 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0041447D 0F855DFFFFFF            jne 004143E0
:00414483 8BE5                    mov esp, ebp
:00414485 5D                      pop ebp
:00414486 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00412812   , :0041294B   , :00412AB9   , :00412B9E   , :00412F61   
|:00416C2E   , :004211A5   , :004211C6   , :00422CB9   , :00425DEA   
|:00425E49   , :00425EA8   , :00425F07   , :00425F66   , :004262C8   
|:004263CC   , :0042A117   , :0042C32D   , :0042C445   , :0043AAB8   
|:0043B68D   , :0043B8E1   , :0043BA63   , :0043BA82   , :0043BAA1   
|:0043BAC0   , :0043DBAE   , :0043DE3D   , :0043E858   , :0043EAED   
|:0043ED51   , :0043EE51   , :0043EF23   , :0043F330   , :0043F6A3   
|:004500ED   , :0045103F   , :00452055   , :00452944   , :00454AEC   
|:00454D78   , :0046607A   
|
:00414489 55                      push ebp
:0041448A 8BEC                    mov ebp, esp
:0041448C 81EC10040000            sub esp, 00000410
:00414492 898DF0FBFFFF            mov dword ptr [ebp+FFFFFBF0], ecx
:00414498 8D85FCFBFFFF            lea eax, dword ptr [ebp+FFFFFBFC]
:0041449E A36C574800              mov dword ptr [0048576C], eax
:004144A3 C7057057480000000000    mov dword ptr [00485770], 00000000
:004144AD C6056457480000          mov byte ptr [00485764], 00
:004144B4 8A0D64574800            mov cl, byte ptr [00485764]
:004144BA 880D60574800            mov byte ptr [00485760], cl
:004144C0 6A00                    push 00000000
:004144C2 8B5508                  mov edx, dword ptr [ebp+08]
:004144C5 6BD20C                  imul edx, 0000000C
:004144C8 81C210010000            add edx, 00000110
:004144CE 52                      push edx
:004144CF 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:004144D5 E86FC0FFFF              call 00410549

* Possible Reference to String Resource ID=00012: ""
                                  |
:004144DA 6A0C                    push 0000000C
:004144DC 8D85FCFBFFFF            lea eax, dword ptr [ebp+FFFFFBFC]
:004144E2 50                      push eax
:004144E3 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:004144E9 E8A3BFFFFF              call 00410491
:004144EE 8B8D04FCFFFF            mov ecx, dword ptr [ebp+FFFFFC04]
:004144F4 81E1FF000000            and ecx, 000000FF
:004144FA 81E1FF000000            and ecx, 000000FF
:00414500 898DF4FBFFFF            mov dword ptr [ebp+FFFFFBF4], ecx
:00414506 8B95F4FBFFFF            mov edx, dword ptr [ebp+FFFFFBF4]
:0041450C C1E208                  shl edx, 08
:0041450F 8B8505FCFFFF            mov eax, dword ptr [ebp+FFFFFC05]
:00414515 25FF000000              and eax, 000000FF
:0041451A 25FF000000              and eax, 000000FF
:0041451F 03D0                    add edx, eax
:00414521 8995F4FBFFFF            mov dword ptr [ebp+FFFFFBF4], edx
:00414527 8B8DF4FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF4]
:0041452D C1E108                  shl ecx, 08
:00414530 8B9506FCFFFF            mov edx, dword ptr [ebp+FFFFFC06]
:00414536 81E2FF000000            and edx, 000000FF
:0041453C 81E2FF000000            and edx, 000000FF
:00414542 03CA                    add ecx, edx
:00414544 898DF4FBFFFF            mov dword ptr [ebp+FFFFFBF4], ecx
:0041454A 8B85F4FBFFFF            mov eax, dword ptr [ebp+FFFFFBF4]
:00414550 C1E008                  shl eax, 08
:00414553 8B8D07FCFFFF            mov ecx, dword ptr [ebp+FFFFFC07]
:00414559 81E1FF000000            and ecx, 000000FF
:0041455F 81E1FF000000            and ecx, 000000FF
:00414565 03C1                    add eax, ecx
:00414567 8985F4FBFFFF            mov dword ptr [ebp+FFFFFBF4], eax
:0041456D 8B9500FCFFFF            mov edx, dword ptr [ebp+FFFFFC00]
:00414573 81E2FF000000            and edx, 000000FF
:00414579 81E2FF000000            and edx, 000000FF
:0041457F 8955FC                  mov dword ptr [ebp-04], edx
:00414582 8B45FC                  mov eax, dword ptr [ebp-04]
:00414585 C1E008                  shl eax, 08
:00414588 8B8D01FCFFFF            mov ecx, dword ptr [ebp+FFFFFC01]
:0041458E 81E1FF000000            and ecx, 000000FF
:00414594 81E1FF000000            and ecx, 000000FF
:0041459A 03C1                    add eax, ecx
:0041459C 8945FC                  mov dword ptr [ebp-04], eax
:0041459F 8B55FC                  mov edx, dword ptr [ebp-04]
:004145A2 C1E208                  shl edx, 08
:004145A5 8B8502FCFFFF            mov eax, dword ptr [ebp+FFFFFC02]
:004145AB 25FF000000              and eax, 000000FF
:004145B0 25FF000000              and eax, 000000FF
:004145B5 03D0                    add edx, eax
:004145B7 8955FC                  mov dword ptr [ebp-04], edx
:004145BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004145BD C1E108                  shl ecx, 08
:004145C0 8B9503FCFFFF            mov edx, dword ptr [ebp+FFFFFC03]
:004145C6 81E2FF000000            and edx, 000000FF
:004145CC 81E2FF000000            and edx, 000000FF
:004145D2 03CA                    add ecx, edx
:004145D4 894DFC                  mov dword ptr [ebp-04], ecx
:004145D7 8B85FCFBFFFF            mov eax, dword ptr [ebp+FFFFFBFC]
:004145DD 25FF000000              and eax, 000000FF
:004145E2 25FF000000              and eax, 000000FF
:004145E7 8985F8FBFFFF            mov dword ptr [ebp+FFFFFBF8], eax
:004145ED 8B8DF8FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF8]
:004145F3 C1E108                  shl ecx, 08
:004145F6 8B95FDFBFFFF            mov edx, dword ptr [ebp+FFFFFBFD]
:004145FC 81E2FF000000            and edx, 000000FF
:00414602 81E2FF000000            and edx, 000000FF
:00414608 03CA                    add ecx, edx
:0041460A 898DF8FBFFFF            mov dword ptr [ebp+FFFFFBF8], ecx
:00414610 8B85F8FBFFFF            mov eax, dword ptr [ebp+FFFFFBF8]
:00414616 C1E008                  shl eax, 08
:00414619 8B8DFEFBFFFF            mov ecx, dword ptr [ebp+FFFFFBFE]
:0041461F 81E1FF000000            and ecx, 000000FF
:00414625 81E1FF000000            and ecx, 000000FF
:0041462B 03C1                    add eax, ecx
:0041462D 8985F8FBFFFF            mov dword ptr [ebp+FFFFFBF8], eax
:00414633 8B95F8FBFFFF            mov edx, dword ptr [ebp+FFFFFBF8]
:00414639 C1E208                  shl edx, 08
:0041463C 8B85FFFBFFFF            mov eax, dword ptr [ebp+FFFFFBFF]
:00414642 25FF000000              and eax, 000000FF
:00414647 25FF000000              and eax, 000000FF
:0041464C 03D0                    add edx, eax
:0041464E 8995F8FBFFFF            mov dword ptr [ebp+FFFFFBF8], edx
:00414654 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00414658 7447                    je 004146A1
:0041465A 6A00                    push 00000000
:0041465C 8B8DF4FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF4]
:00414662 51                      push ecx
:00414663 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:00414669 E8DBBEFFFF              call 00410549
:0041466E 8B55FC                  mov edx, dword ptr [ebp-04]
:00414671 3B95F8FBFFFF            cmp edx, dword ptr [ebp+FFFFFBF8]
:00414677 7515                    jne 0041468E
:00414679 8B45FC                  mov eax, dword ptr [ebp-04]
:0041467C 50                      push eax
:0041467D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414680 51                      push ecx
:00414681 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:00414687 E805BEFFFF              call 00410491
:0041468C EB13                    jmp 004146A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414677(C)
|
:0041468E 8B55FC                  mov edx, dword ptr [ebp-04]
:00414691 52                      push edx
:00414692 8B450C                  mov eax, dword ptr [ebp+0C]
:00414695 50                      push eax
:00414696 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:0041469C E836FDFFFF              call 004143D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414658(C), :0041468C(U)
|
:004146A1 8B45FC                  mov eax, dword ptr [ebp-04]
:004146A4 8BE5                    mov esp, ebp
:004146A6 5D                      pop ebp
:004146A7 C20800                  ret 0008


:004146AA CC                      int 03
:004146AB CC                      int 03
:004146AC CC                      int 03
:004146AD CC                      int 03
:004146AE CC                      int 03
:004146AF CC                      int 03
:004146B0 55                      push ebp
:004146B1 8BEC                    mov ebp, esp
:004146B3 E807000000              call 004146BF
:004146B8 E811000000              call 004146CE
:004146BD 5D                      pop ebp
:004146BE C3                      ret



* Referenced by a CALL at Address:
|:004146B3   
|
:004146BF 55                      push ebp
:004146C0 8BEC                    mov ebp, esp
:004146C2 B9A0574800              mov ecx, 004857A0
:004146C7 E824210000              call 004167F0
:004146CC 5D                      pop ebp
:004146CD C3                      ret



* Referenced by a CALL at Address:
|:004146B8   
|
:004146CE 55                      push ebp
:004146CF 8BEC                    mov ebp, esp
:004146D1 68E0464100              push 004146E0
:004146D6 E8958D0500              call 0046D470
:004146DB 83C404                  add esp, 00000004
:004146DE 5D                      pop ebp
:004146DF C3                      ret


:004146E0 55                      push ebp
:004146E1 8BEC                    mov ebp, esp
:004146E3 B9A0574800              mov ecx, 004857A0
:004146E8 E8B3150100              call 00425CA0
:004146ED 5D                      pop ebp
:004146EE C3                      ret



* Referenced by a CALL at Address:
|:00414840   
|
:004146EF 55                      push ebp
:004146F0 8BEC                    mov ebp, esp
:004146F2 83EC24                  sub esp, 00000024

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004146F5 6A02                    push 00000002
:004146F7 8B450C                  mov eax, dword ptr [ebp+0C]
:004146FA 25FFFF0000              and eax, 0000FFFF
:004146FF 50                      push eax
:00414700 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414703 51                      push ecx

* Reference To: KERNEL32.FindResourceA, Ord:0089h
                                  |
:00414704 FF1524854B00            Call dword ptr [004B8524]
:0041470A 50                      push eax
:0041470B 8B5508                  mov edx, dword ptr [ebp+08]
:0041470E 52                      push edx

* Reference To: KERNEL32.LoadResource, Ord:0195h
                                  |
:0041470F FF1528854B00            Call dword ptr [004B8528]
:00414715 8945E8                  mov dword ptr [ebp-18], eax
:00414718 8B45E8                  mov eax, dword ptr [ebp-18]
:0041471B 50                      push eax

* Reference To: KERNEL32.LockResource, Ord:01A3h
                                  |
:0041471C FF152C854B00            Call dword ptr [004B852C]
:00414722 8945F4                  mov dword ptr [ebp-0C], eax
:00414725 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00414728 8B5104                  mov edx, dword ptr [ecx+04]
:0041472B 8955FC                  mov dword ptr [ebp-04], edx
:0041472E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00414731 8B4808                  mov ecx, dword ptr [eax+08]
:00414734 894DF0                  mov dword ptr [ebp-10], ecx
:00414737 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041473A 8B4220                  mov eax, dword ptr [edx+20]
:0041473D 8945E4                  mov dword ptr [ebp-1C], eax
:00414740 837DE400                cmp dword ptr [ebp-1C], 00000000
:00414744 7507                    jne 0041474D
:00414746 C745E400010000          mov [ebp-1C], 00000100

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414744(C)
|
:0041474D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00414750 8B55F4                  mov edx, dword ptr [ebp-0C]
:00414753 0311                    add edx, dword ptr [ecx]
:00414755 8B45E4                  mov eax, dword ptr [ebp-1C]
:00414758 8D0C82                  lea ecx, dword ptr [edx+4*eax]
:0041475B 894DF8                  mov dword ptr [ebp-08], ecx
:0041475E 8B55FC                  mov edx, dword ptr [ebp-04]
:00414761 0FAF55F0                imul edx, dword ptr [ebp-10]
:00414765 52                      push edx
:00414766 E825980500              call 0046DF90
:0041476B 83C404                  add esp, 00000004
:0041476E 8945DC                  mov dword ptr [ebp-24], eax
:00414771 C745EC00000000          mov [ebp-14], 00000000
:00414778 EB09                    jmp 00414783

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004147B7(U)
|
:0041477A 8B45EC                  mov eax, dword ptr [ebp-14]
:0041477D 83C001                  add eax, 00000001
:00414780 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414778(U)
|
:00414783 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00414786 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00414789 7D2E                    jge 004147B9
:0041478B 8B55FC                  mov edx, dword ptr [ebp-04]
:0041478E 52                      push edx
:0041478F 8B45EC                  mov eax, dword ptr [ebp-14]
:00414792 0FAF45FC                imul eax, dword ptr [ebp-04]
:00414796 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00414799 03C8                    add ecx, eax
:0041479B 51                      push ecx
:0041479C 8B55F0                  mov edx, dword ptr [ebp-10]
:0041479F 83EA01                  sub edx, 00000001
:004147A2 2B55EC                  sub edx, dword ptr [ebp-14]
:004147A5 0FAF55FC                imul edx, dword ptr [ebp-04]
:004147A9 8B45DC                  mov eax, dword ptr [ebp-24]
:004147AC 03C2                    add eax, edx
:004147AE 50                      push eax
:004147AF E81C920500              call 0046D9D0
:004147B4 83C40C                  add esp, 0000000C
:004147B7 EBC1                    jmp 0041477A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414789(C)
|
:004147B9 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004147BC 51                      push ecx

* Possible Reference to String Resource ID=00008: ""
                                  |
:004147BD 6A08                    push 00000008
:004147BF 6A01                    push 00000001
:004147C1 8B55F0                  mov edx, dword ptr [ebp-10]
:004147C4 52                      push edx
:004147C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004147C8 50                      push eax

* Reference To: GDI32.CreateBitmap, Ord:0019h
                                  |
:004147C9 FF15CC844B00            Call dword ptr [004B84CC]
:004147CF 8945E0                  mov dword ptr [ebp-20], eax
:004147D2 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004147D5 51                      push ecx
:004147D6 E865970500              call 0046DF40
:004147DB 83C404                  add esp, 00000004
:004147DE 8B45E0                  mov eax, dword ptr [ebp-20]
:004147E1 8BE5                    mov esp, ebp
:004147E3 5D                      pop ebp
:004147E4 C3                      ret



* Referenced by a CALL at Address:
|:0041482F   
|
:004147E5 55                      push ebp
:004147E6 8BEC                    mov ebp, esp
:004147E8 83EC08                  sub esp, 00000008
:004147EB A1380E4B00              mov eax, dword ptr [004B0E38]
:004147F0 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:004147F1 FF15B8864B00            Call dword ptr [004B86B8]
:004147F7 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00012: ""
                                  |
:004147FA 6A0C                    push 0000000C
:004147FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004147FF 51                      push ecx

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:00414800 FF15D0844B00            Call dword ptr [004B84D0]
:00414806 8945FC                  mov dword ptr [ebp-04], eax
:00414809 8B55F8                  mov edx, dword ptr [ebp-08]
:0041480C 52                      push edx
:0041480D A1380E4B00              mov eax, dword ptr [004B0E38]
:00414812 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00414813 FF15BC864B00            Call dword ptr [004B86BC]
:00414819 837DFC08                cmp dword ptr [ebp-04], 00000008
:0041481D 7507                    jne 00414826
:0041481F B801000000              mov eax, 00000001
:00414824 EB02                    jmp 00414828

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041481D(C)
|
:00414826 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414824(U)
|
:00414828 8BE5                    mov esp, ebp
:0041482A 5D                      pop ebp
:0041482B C3                      ret



* Referenced by a CALL at Addresses:
|:00404E66   , :004148DD   , :00414B73   , :00414C92   , :00414DB1   
|:00414ED0   , :00414FEF   , :0041593B   , :0041652F   , :0041D9F4   
|:0045A800   , :0045AE3A   , :0045B519   , :0045F2B1   , :0045F33B   
|
:0041482C 55                      push ebp
:0041482D 8BEC                    mov ebp, esp
:0041482F E8B1FFFFFF              call 004147E5
:00414834 85C0                    test eax, eax
:00414836 7412                    je 0041484A
:00414838 8B450C                  mov eax, dword ptr [ebp+0C]
:0041483B 50                      push eax
:0041483C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041483F 51                      push ecx
:00414840 E8AAFEFFFF              call 004146EF
:00414845 83C408                  add esp, 00000008
:00414848 EB14                    jmp 0041485E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414836(C)
|
:0041484A 8B550C                  mov edx, dword ptr [ebp+0C]
:0041484D 81E2FFFF0000            and edx, 0000FFFF
:00414853 52                      push edx
:00414854 8B4508                  mov eax, dword ptr [ebp+08]
:00414857 50                      push eax

* Reference To: USER32.LoadBitmapA, Ord:0170h
                                  |
:00414858 FF159C874B00            Call dword ptr [004B879C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414848(U)
|
:0041485E 5D                      pop ebp
:0041485F C3                      ret


:00414860 55                      push ebp
:00414861 8BEC                    mov ebp, esp
:00414863 51                      push ecx
:00414864 8B450C                  mov eax, dword ptr [ebp+0C]
:00414867 8945FC                  mov dword ptr [ebp-04], eax
:0041486A 837DFC05                cmp dword ptr [ebp-04], 00000005
:0041486E 7719                    ja 00414889
:00414870 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414874 0F84C6000000            je 00414940
:0041487A 837DFC02                cmp dword ptr [ebp-04], 00000002
:0041487E 0F84AD000000            je 00414931
:00414884 E9EE000000              jmp 00414977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041486E(C)
|
:00414889 837DFC10                cmp dword ptr [ebp-04], 00000010
:0041488D 0F8492000000            je 00414925
:00414893 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0041489A 7412                    je 004148AE
:0041489C 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004148A3 0F84B9000000            je 00414962
:004148A9 E9C9000000              jmp 00414977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041489A(C)
|
:004148AE 8B0DC0594800            mov ecx, dword ptr [004859C0]
:004148B4 51                      push ecx
:004148B5 6AF4                    push FFFFFFF4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:004148B7 6863050000              push 00000563
:004148BC 8B5508                  mov edx, dword ptr [ebp+08]
:004148BF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004148C0 FF15AC864B00            Call dword ptr [004B86AC]
:004148C6 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:004148C7 FF15A0874B00            Call dword ptr [004B87A0]
:004148CD 6846010000              push 00000146
:004148D2 B910584800              mov ecx, 00485810
:004148D7 E884FD0300              call 00454660
:004148DC 50                      push eax
:004148DD E84AFFFFFF              call 0041482C
:004148E2 83C408                  add esp, 00000008
:004148E5 A3BC574800              mov dword ptr [004857BC], eax
:004148EA A1BC574800              mov eax, dword ptr [004857BC]
:004148EF 50                      push eax
:004148F0 6A00                    push 00000000
:004148F2 68F7000000              push 000000F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:004148F7 6863050000              push 00000563
:004148FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004148FF 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414900 FF15AC864B00            Call dword ptr [004B86AC]
:00414906 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414907 FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041490D 6A0A                    push 0000000A
:0041490F 6A30                    push 00000030
:00414911 6A30                    push 00000030
:00414913 6A00                    push 00000000
:00414915 6A00                    push 00000000
:00414917 6A00                    push 00000000
:00414919 8B5508                  mov edx, dword ptr [ebp+08]
:0041491C 52                      push edx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:0041491D FF15AC874B00            Call dword ptr [004B87AC]
:00414923 EB52                    jmp 00414977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041488D(C)
|
:00414925 8B4508                  mov eax, dword ptr [ebp+08]
:00414928 50                      push eax

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:00414929 FF15A4874B00            Call dword ptr [004B87A4]
:0041492F EB46                    jmp 00414977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041487E(C)
|
:00414931 8B0DBC574800            mov ecx, dword ptr [004857BC]
:00414937 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00414938 FF158C844B00            Call dword ptr [004B848C]
:0041493E EB37                    jmp 00414977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414874(C)
|
:00414940 6A00                    push 00000000
:00414942 6A30                    push 00000030
:00414944 6A30                    push 00000030
:00414946 6A00                    push 00000000
:00414948 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:0041494A 6863050000              push 00000563
:0041494F 8B5508                  mov edx, dword ptr [ebp+08]
:00414952 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414953 FF15AC864B00            Call dword ptr [004B86AC]
:00414959 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041495A FF15FC864B00            Call dword ptr [004B86FC]
:00414960 EB15                    jmp 00414977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004148A3(C)
|
:00414962 8B4510                  mov eax, dword ptr [ebp+10]
:00414965 50                      push eax
:00414966 8B0DBC574800            mov ecx, dword ptr [004857BC]
:0041496C 51                      push ecx
:0041496D 6A00                    push 00000000
:0041496F E80B000000              call 0041497F
:00414974 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414884(U), :004148A9(U), :00414923(U), :0041492F(U), :0041493E(U)
|:00414960(U)
|
:00414977 33C0                    xor eax, eax
:00414979 8BE5                    mov esp, ebp
:0041497B 5D                      pop ebp
:0041497C C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0041496F   , :00414C05   , :00414D24   , :00414E43   , :00414F62   
|:0041507A   
|
:0041497F 55                      push ebp
:00414980 8BEC                    mov ebp, esp
:00414982 83EC08                  sub esp, 00000008
:00414985 8B4510                  mov eax, dword ptr [ebp+10]
:00414988 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:0041498D 3D63050000              cmp eax, 00000563
:00414992 0F8542010000            jne 00414ADA
:00414998 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041499B C1E910                  shr ecx, 10
:0041499E 81E1FFFF0000            and ecx, 0000FFFF
:004149A4 81E1FFFF0000            and ecx, 0000FFFF
:004149AA 85C9                    test ecx, ecx
:004149AC 0F8528010000            jne 00414ADA
:004149B2 8B5508                  mov edx, dword ptr [ebp+08]
:004149B5 52                      push edx
:004149B6 B9A0574800              mov ecx, 004857A0
:004149BB E88A0D0000              call 0041574A
:004149C0 85C0                    test eax, eax
:004149C2 0F8412010000            je 00414ADA
:004149C8 B910584800              mov ecx, 00485810
:004149CD E8DE1D0000              call 004167B0
:004149D2 85C0                    test eax, eax
:004149D4 0F8400010000            je 00414ADA
:004149DA 8B4508                  mov eax, dword ptr [ebp+08]
:004149DD 50                      push eax
:004149DE B9A0574800              mov ecx, 004857A0
:004149E3 E8B90D0000              call 004157A1
:004149E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004149EB 894DF8                  mov dword ptr [ebp-08], ecx
:004149EE 837DF805                cmp dword ptr [ebp-08], 00000005
:004149F2 0F87D4000000            ja 00414ACC
:004149F8 8B55F8                  mov edx, dword ptr [ebp-08]
:004149FB FF2495DE4A4100          jmp dword ptr [4*edx+00414ADE]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00414A02 6A02                    push 00000002
:00414A04 B910584800              mov ecx, 00485810
:00414A09 E8C21D0000              call 004167D0
:00414A0E E8C4C50000              call 00420FD7
:00414A13 8945FC                  mov dword ptr [ebp-04], eax
:00414A16 6A00                    push 00000000
:00414A18 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414A1B E8B01E0000              call 004168D0
:00414A20 E9A7000000              jmp 00414ACC
:00414A25 6A00                    push 00000000
:00414A27 B910584800              mov ecx, 00485810
:00414A2C E89F1D0000              call 004167D0
:00414A31 E8A1C50000              call 00420FD7
:00414A36 8945FC                  mov dword ptr [ebp-04], eax
:00414A39 6A00                    push 00000000
:00414A3B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414A3E E88D1E0000              call 004168D0
:00414A43 E984000000              jmp 00414ACC
:00414A48 6A01                    push 00000001
:00414A4A B910584800              mov ecx, 00485810
:00414A4F E87C1D0000              call 004167D0
:00414A54 E87EC50000              call 00420FD7
:00414A59 8945FC                  mov dword ptr [ebp-04], eax
:00414A5C 6A00                    push 00000000
:00414A5E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00414A61 E86A1E0000              call 004168D0
:00414A66 EB64                    jmp 00414ACC
:00414A68 B9500E4B00              mov ecx, 004B0E50
:00414A6D E845FB0400              call 004645B7
:00414A72 B9B0114800              mov ecx, 004811B0
:00414A77 E854AC0100              call 0042F6D0
:00414A7C 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00414A7D FF15E0864B00            Call dword ptr [004B86E0]
:00414A83 85C0                    test eax, eax
:00414A85 7413                    je 00414A9A
:00414A87 6A00                    push 00000000
:00414A89 B9B0114800              mov ecx, 004811B0
:00414A8E E83DAC0100              call 0042F6D0
:00414A93 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00414A94 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414A85(C)
|
:00414A9A E80B1A0000              call 004164AA
:00414A9F A1380E4B00              mov eax, dword ptr [004B0E38]
:00414AA4 50                      push eax

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00414AA5 FF15A8864B00            Call dword ptr [004B86A8]
:00414AAB EB1F                    jmp 00414ACC
:00414AAD 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00414AB3 51                      push ecx
:00414AB4 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00414ABA 52                      push edx
:00414ABB B9500E4B00              mov ecx, 004B0E50
:00414AC0 E867FA0400              call 0046452C
:00414AC5 EB05                    jmp 00414ACC
:00414AC7 E883FEFEFF              call 0040494F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004149F2(C), :00414A20(U), :00414A43(U), :00414A66(U), :00414AAB(U)
|:00414AC5(U)
|
:00414ACC 8B4508                  mov eax, dword ptr [ebp+08]
:00414ACF 50                      push eax
:00414AD0 B9A0574800              mov ecx, 004857A0
:00414AD5 E8A00C0000              call 0041577A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414992(C), :004149AC(C), :004149C2(C), :004149D4(C)
|
:00414ADA 8BE5                    mov esp, ebp
:00414ADC 5D                      pop ebp
:00414ADD C3                      ret



:00414ADE 024A4100                DWORD 00414A02
:00414AE2 254A4100                DWORD 00414A25
:00414AE6 484A4100                DWORD 00414A48
:00414AEA 684A4100                DWORD 00414A68
:00414AEE AD4A4100                DWORD 00414AAD
:00414AF2 C74A4100                DWORD 00414AC7


:00414AF6 55                      push ebp
:00414AF7 8BEC                    mov ebp, esp
:00414AF9 51                      push ecx
:00414AFA 8B450C                  mov eax, dword ptr [ebp+0C]
:00414AFD 8945FC                  mov dword ptr [ebp-04], eax
:00414B00 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414B04 7719                    ja 00414B1F
:00414B06 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414B0A 0F84C6000000            je 00414BD6
:00414B10 837DFC02                cmp dword ptr [ebp-04], 00000002
:00414B14 0F84AD000000            je 00414BC7
:00414B1A E9EE000000              jmp 00414C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B04(C)
|
:00414B1F 837DFC10                cmp dword ptr [ebp-04], 00000010
:00414B23 0F8492000000            je 00414BBB
:00414B29 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00414B30 7412                    je 00414B44
:00414B32 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00414B39 0F84B9000000            je 00414BF8
:00414B3F E9C9000000              jmp 00414C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B30(C)
|
:00414B44 8B0DC0594800            mov ecx, dword ptr [004859C0]
:00414B4A 51                      push ecx
:00414B4B 6AF4                    push FFFFFFF4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414B4D 6863050000              push 00000563
:00414B52 8B5508                  mov edx, dword ptr [ebp+08]
:00414B55 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414B56 FF15AC864B00            Call dword ptr [004B86AC]
:00414B5C 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00414B5D FF15A0874B00            Call dword ptr [004B87A0]
:00414B63 6849010000              push 00000149
:00414B68 B910584800              mov ecx, 00485810
:00414B6D E8EEFA0300              call 00454660
:00414B72 50                      push eax
:00414B73 E8B4FCFFFF              call 0041482C
:00414B78 83C408                  add esp, 00000008
:00414B7B A3C8574800              mov dword ptr [004857C8], eax
:00414B80 A1C8574800              mov eax, dword ptr [004857C8]
:00414B85 50                      push eax
:00414B86 6A00                    push 00000000
:00414B88 68F7000000              push 000000F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414B8D 6863050000              push 00000563
:00414B92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414B95 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414B96 FF15AC864B00            Call dword ptr [004B86AC]
:00414B9C 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414B9D FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00414BA3 6A0A                    push 0000000A
:00414BA5 6A30                    push 00000030
:00414BA7 6A30                    push 00000030
:00414BA9 6A00                    push 00000000
:00414BAB 6A00                    push 00000000
:00414BAD 6A00                    push 00000000
:00414BAF 8B5508                  mov edx, dword ptr [ebp+08]
:00414BB2 52                      push edx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:00414BB3 FF15AC874B00            Call dword ptr [004B87AC]
:00414BB9 EB52                    jmp 00414C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B23(C)
|
:00414BBB 8B4508                  mov eax, dword ptr [ebp+08]
:00414BBE 50                      push eax

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:00414BBF FF15A4874B00            Call dword ptr [004B87A4]
:00414BC5 EB46                    jmp 00414C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B14(C)
|
:00414BC7 8B0DC8574800            mov ecx, dword ptr [004857C8]
:00414BCD 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00414BCE FF158C844B00            Call dword ptr [004B848C]
:00414BD4 EB37                    jmp 00414C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B0A(C)
|
:00414BD6 6A00                    push 00000000
:00414BD8 6A30                    push 00000030
:00414BDA 6A30                    push 00000030
:00414BDC 6A00                    push 00000000
:00414BDE 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414BE0 6863050000              push 00000563
:00414BE5 8B5508                  mov edx, dword ptr [ebp+08]
:00414BE8 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414BE9 FF15AC864B00            Call dword ptr [004B86AC]
:00414BEF 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00414BF0 FF15FC864B00            Call dword ptr [004B86FC]
:00414BF6 EB15                    jmp 00414C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B39(C)
|
:00414BF8 8B4510                  mov eax, dword ptr [ebp+10]
:00414BFB 50                      push eax
:00414BFC 8B0DC8574800            mov ecx, dword ptr [004857C8]
:00414C02 51                      push ecx
:00414C03 6A01                    push 00000001
:00414C05 E875FDFFFF              call 0041497F
:00414C0A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414B1A(U), :00414B3F(U), :00414BB9(U), :00414BC5(U), :00414BD4(U)
|:00414BF6(U)
|
:00414C0D 33C0                    xor eax, eax
:00414C0F 8BE5                    mov esp, ebp
:00414C11 5D                      pop ebp
:00414C12 C21000                  ret 0010


:00414C15 55                      push ebp
:00414C16 8BEC                    mov ebp, esp
:00414C18 51                      push ecx
:00414C19 8B450C                  mov eax, dword ptr [ebp+0C]
:00414C1C 8945FC                  mov dword ptr [ebp-04], eax
:00414C1F 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414C23 7719                    ja 00414C3E
:00414C25 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414C29 0F84C6000000            je 00414CF5
:00414C2F 837DFC02                cmp dword ptr [ebp-04], 00000002
:00414C33 0F84AD000000            je 00414CE6
:00414C39 E9EE000000              jmp 00414D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C23(C)
|
:00414C3E 837DFC10                cmp dword ptr [ebp-04], 00000010
:00414C42 0F8492000000            je 00414CDA
:00414C48 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00414C4F 7412                    je 00414C63
:00414C51 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00414C58 0F84B9000000            je 00414D17
:00414C5E E9C9000000              jmp 00414D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C4F(C)
|
:00414C63 8B0DC0594800            mov ecx, dword ptr [004859C0]
:00414C69 51                      push ecx
:00414C6A 6AF4                    push FFFFFFF4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414C6C 6863050000              push 00000563
:00414C71 8B5508                  mov edx, dword ptr [ebp+08]
:00414C74 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414C75 FF15AC864B00            Call dword ptr [004B86AC]
:00414C7B 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00414C7C FF15A0874B00            Call dword ptr [004B87A0]
:00414C82 6844010000              push 00000144
:00414C87 B910584800              mov ecx, 00485810
:00414C8C E8CFF90300              call 00454660
:00414C91 50                      push eax
:00414C92 E895FBFFFF              call 0041482C
:00414C97 83C408                  add esp, 00000008
:00414C9A A37C574800              mov dword ptr [0048577C], eax
:00414C9F A17C574800              mov eax, dword ptr [0048577C]
:00414CA4 50                      push eax
:00414CA5 6A00                    push 00000000
:00414CA7 68F7000000              push 000000F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414CAC 6863050000              push 00000563
:00414CB1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414CB4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414CB5 FF15AC864B00            Call dword ptr [004B86AC]
:00414CBB 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414CBC FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00414CC2 6A0A                    push 0000000A
:00414CC4 6A30                    push 00000030
:00414CC6 6A30                    push 00000030
:00414CC8 6A00                    push 00000000
:00414CCA 6A00                    push 00000000
:00414CCC 6A00                    push 00000000
:00414CCE 8B5508                  mov edx, dword ptr [ebp+08]
:00414CD1 52                      push edx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:00414CD2 FF15AC874B00            Call dword ptr [004B87AC]
:00414CD8 EB52                    jmp 00414D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C42(C)
|
:00414CDA 8B4508                  mov eax, dword ptr [ebp+08]
:00414CDD 50                      push eax

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:00414CDE FF15A4874B00            Call dword ptr [004B87A4]
:00414CE4 EB46                    jmp 00414D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C33(C)
|
:00414CE6 8B0D7C574800            mov ecx, dword ptr [0048577C]
:00414CEC 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00414CED FF158C844B00            Call dword ptr [004B848C]
:00414CF3 EB37                    jmp 00414D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C29(C)
|
:00414CF5 6A00                    push 00000000
:00414CF7 6A30                    push 00000030
:00414CF9 6A30                    push 00000030
:00414CFB 6A00                    push 00000000
:00414CFD 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414CFF 6863050000              push 00000563
:00414D04 8B5508                  mov edx, dword ptr [ebp+08]
:00414D07 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414D08 FF15AC864B00            Call dword ptr [004B86AC]
:00414D0E 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00414D0F FF15FC864B00            Call dword ptr [004B86FC]
:00414D15 EB15                    jmp 00414D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C58(C)
|
:00414D17 8B4510                  mov eax, dword ptr [ebp+10]
:00414D1A 50                      push eax
:00414D1B 8B0D7C574800            mov ecx, dword ptr [0048577C]
:00414D21 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00414D22 6A02                    push 00000002
:00414D24 E856FCFFFF              call 0041497F
:00414D29 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414C39(U), :00414C5E(U), :00414CD8(U), :00414CE4(U), :00414CF3(U)
|:00414D15(U)
|
:00414D2C 33C0                    xor eax, eax
:00414D2E 8BE5                    mov esp, ebp
:00414D30 5D                      pop ebp
:00414D31 C21000                  ret 0010


:00414D34 55                      push ebp
:00414D35 8BEC                    mov ebp, esp
:00414D37 51                      push ecx
:00414D38 8B450C                  mov eax, dword ptr [ebp+0C]
:00414D3B 8945FC                  mov dword ptr [ebp-04], eax
:00414D3E 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414D42 7719                    ja 00414D5D
:00414D44 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414D48 0F84C6000000            je 00414E14
:00414D4E 837DFC02                cmp dword ptr [ebp-04], 00000002
:00414D52 0F84AD000000            je 00414E05
:00414D58 E9EE000000              jmp 00414E4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D42(C)
|
:00414D5D 837DFC10                cmp dword ptr [ebp-04], 00000010
:00414D61 0F8492000000            je 00414DF9
:00414D67 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00414D6E 7412                    je 00414D82
:00414D70 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00414D77 0F84B9000000            je 00414E36
:00414D7D E9C9000000              jmp 00414E4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D6E(C)
|
:00414D82 8B0DC0594800            mov ecx, dword ptr [004859C0]
:00414D88 51                      push ecx
:00414D89 6AF4                    push FFFFFFF4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414D8B 6863050000              push 00000563
:00414D90 8B5508                  mov edx, dword ptr [ebp+08]
:00414D93 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414D94 FF15AC864B00            Call dword ptr [004B86AC]
:00414D9A 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00414D9B FF15A0874B00            Call dword ptr [004B87A0]
:00414DA1 6847010000              push 00000147
:00414DA6 B910584800              mov ecx, 00485810
:00414DAB E8B0F80300              call 00454660
:00414DB0 50                      push eax
:00414DB1 E876FAFFFF              call 0041482C
:00414DB6 83C408                  add esp, 00000008
:00414DB9 A384574800              mov dword ptr [00485784], eax
:00414DBE A184574800              mov eax, dword ptr [00485784]
:00414DC3 50                      push eax
:00414DC4 6A00                    push 00000000
:00414DC6 68F7000000              push 000000F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414DCB 6863050000              push 00000563
:00414DD0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414DD3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414DD4 FF15AC864B00            Call dword ptr [004B86AC]
:00414DDA 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414DDB FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00414DE1 6A0A                    push 0000000A
:00414DE3 6A30                    push 00000030
:00414DE5 6A30                    push 00000030
:00414DE7 6A00                    push 00000000
:00414DE9 6A00                    push 00000000
:00414DEB 6A00                    push 00000000
:00414DED 8B5508                  mov edx, dword ptr [ebp+08]
:00414DF0 52                      push edx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:00414DF1 FF15AC874B00            Call dword ptr [004B87AC]
:00414DF7 EB52                    jmp 00414E4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D61(C)
|
:00414DF9 8B4508                  mov eax, dword ptr [ebp+08]
:00414DFC 50                      push eax

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:00414DFD FF15A4874B00            Call dword ptr [004B87A4]
:00414E03 EB46                    jmp 00414E4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D52(C)
|
:00414E05 8B0D84574800            mov ecx, dword ptr [00485784]
:00414E0B 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00414E0C FF158C844B00            Call dword ptr [004B848C]
:00414E12 EB37                    jmp 00414E4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D48(C)
|
:00414E14 6A00                    push 00000000
:00414E16 6A30                    push 00000030
:00414E18 6A30                    push 00000030
:00414E1A 6A00                    push 00000000
:00414E1C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414E1E 6863050000              push 00000563
:00414E23 8B5508                  mov edx, dword ptr [ebp+08]
:00414E26 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414E27 FF15AC864B00            Call dword ptr [004B86AC]
:00414E2D 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00414E2E FF15FC864B00            Call dword ptr [004B86FC]
:00414E34 EB15                    jmp 00414E4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D77(C)
|
:00414E36 8B4510                  mov eax, dword ptr [ebp+10]
:00414E39 50                      push eax
:00414E3A 8B0D84574800            mov ecx, dword ptr [00485784]
:00414E40 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00414E41 6A03                    push 00000003
:00414E43 E837FBFFFF              call 0041497F
:00414E48 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414D58(U), :00414D7D(U), :00414DF7(U), :00414E03(U), :00414E12(U)
|:00414E34(U)
|
:00414E4B 33C0                    xor eax, eax
:00414E4D 8BE5                    mov esp, ebp
:00414E4F 5D                      pop ebp
:00414E50 C21000                  ret 0010


:00414E53 55                      push ebp
:00414E54 8BEC                    mov ebp, esp
:00414E56 51                      push ecx
:00414E57 8B450C                  mov eax, dword ptr [ebp+0C]
:00414E5A 8945FC                  mov dword ptr [ebp-04], eax
:00414E5D 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414E61 7719                    ja 00414E7C
:00414E63 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414E67 0F84C6000000            je 00414F33
:00414E6D 837DFC02                cmp dword ptr [ebp-04], 00000002
:00414E71 0F84AD000000            je 00414F24
:00414E77 E9EE000000              jmp 00414F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E61(C)
|
:00414E7C 837DFC10                cmp dword ptr [ebp-04], 00000010
:00414E80 0F8492000000            je 00414F18
:00414E86 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00414E8D 7412                    je 00414EA1
:00414E8F 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00414E96 0F84B9000000            je 00414F55
:00414E9C E9C9000000              jmp 00414F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E8D(C)
|
:00414EA1 8B0DC0594800            mov ecx, dword ptr [004859C0]
:00414EA7 51                      push ecx
:00414EA8 6AF4                    push FFFFFFF4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414EAA 6863050000              push 00000563
:00414EAF 8B5508                  mov edx, dword ptr [ebp+08]
:00414EB2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414EB3 FF15AC864B00            Call dword ptr [004B86AC]
:00414EB9 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00414EBA FF15A0874B00            Call dword ptr [004B87A0]
:00414EC0 6843010000              push 00000143
:00414EC5 B910584800              mov ecx, 00485810
:00414ECA E891F70300              call 00454660
:00414ECF 50                      push eax
:00414ED0 E857F9FFFF              call 0041482C
:00414ED5 83C408                  add esp, 00000008
:00414ED8 A398574800              mov dword ptr [00485798], eax
:00414EDD A198574800              mov eax, dword ptr [00485798]
:00414EE2 50                      push eax
:00414EE3 6A00                    push 00000000
:00414EE5 68F7000000              push 000000F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414EEA 6863050000              push 00000563
:00414EEF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414EF2 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414EF3 FF15AC864B00            Call dword ptr [004B86AC]
:00414EF9 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414EFA FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00414F00 6A0A                    push 0000000A
:00414F02 6A30                    push 00000030
:00414F04 6A30                    push 00000030
:00414F06 6A00                    push 00000000
:00414F08 6A00                    push 00000000
:00414F0A 6A00                    push 00000000
:00414F0C 8B5508                  mov edx, dword ptr [ebp+08]
:00414F0F 52                      push edx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:00414F10 FF15AC874B00            Call dword ptr [004B87AC]
:00414F16 EB52                    jmp 00414F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E80(C)
|
:00414F18 8B4508                  mov eax, dword ptr [ebp+08]
:00414F1B 50                      push eax

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:00414F1C FF15A4874B00            Call dword ptr [004B87A4]
:00414F22 EB46                    jmp 00414F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E71(C)
|
:00414F24 8B0D98574800            mov ecx, dword ptr [00485798]
:00414F2A 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00414F2B FF158C844B00            Call dword ptr [004B848C]
:00414F31 EB37                    jmp 00414F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E67(C)
|
:00414F33 6A00                    push 00000000
:00414F35 6A30                    push 00000030
:00414F37 6A30                    push 00000030
:00414F39 6A00                    push 00000000
:00414F3B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414F3D 6863050000              push 00000563
:00414F42 8B5508                  mov edx, dword ptr [ebp+08]
:00414F45 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414F46 FF15AC864B00            Call dword ptr [004B86AC]
:00414F4C 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00414F4D FF15FC864B00            Call dword ptr [004B86FC]
:00414F53 EB15                    jmp 00414F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414E96(C)
|
:00414F55 8B4510                  mov eax, dword ptr [ebp+10]
:00414F58 50                      push eax
:00414F59 8B0D98574800            mov ecx, dword ptr [00485798]
:00414F5F 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00414F60 6A04                    push 00000004
:00414F62 E818FAFFFF              call 0041497F
:00414F67 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414E77(U), :00414E9C(U), :00414F16(U), :00414F22(U), :00414F31(U)
|:00414F53(U)
|
:00414F6A 33C0                    xor eax, eax
:00414F6C 8BE5                    mov esp, ebp
:00414F6E 5D                      pop ebp
:00414F6F C21000                  ret 0010


:00414F72 55                      push ebp
:00414F73 8BEC                    mov ebp, esp
:00414F75 51                      push ecx
:00414F76 8B450C                  mov eax, dword ptr [ebp+0C]
:00414F79 8945FC                  mov dword ptr [ebp-04], eax
:00414F7C 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414F80 7719                    ja 00414F9B
:00414F82 837DFC05                cmp dword ptr [ebp-04], 00000005
:00414F86 0F84BF000000            je 0041504B
:00414F8C 837DFC02                cmp dword ptr [ebp-04], 00000002
:00414F90 0F84A6000000            je 0041503C
:00414F96 E9E7000000              jmp 00415082

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F80(C)
|
:00414F9B 837DFC10                cmp dword ptr [ebp-04], 00000010
:00414F9F 0F848B000000            je 00415030
:00414FA5 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00414FAC 7412                    je 00414FC0
:00414FAE 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00414FB5 0F84B2000000            je 0041506D
:00414FBB E9C2000000              jmp 00415082

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414FAC(C)
|
:00414FC0 8B0DC0594800            mov ecx, dword ptr [004859C0]
:00414FC6 51                      push ecx
:00414FC7 6AF4                    push FFFFFFF4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00414FC9 6863050000              push 00000563
:00414FCE 8B5508                  mov edx, dword ptr [ebp+08]
:00414FD1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414FD2 FF15AC864B00            Call dword ptr [004B86AC]
:00414FD8 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00414FD9 FF15A0874B00            Call dword ptr [004B87A0]
:00414FDF 6848010000              push 00000148
:00414FE4 B910584800              mov ecx, 00485810
:00414FE9 E872F60300              call 00454660
:00414FEE 50                      push eax
:00414FEF E838F8FFFF              call 0041482C
:00414FF4 83C408                  add esp, 00000008
:00414FF7 A3C0574800              mov dword ptr [004857C0], eax
:00414FFC A1C0574800              mov eax, dword ptr [004857C0]
:00415001 50                      push eax
:00415002 6A00                    push 00000000
:00415004 68F7000000              push 000000F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00415009 6863050000              push 00000563
:0041500E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415011 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00415012 FF15B4864B00            Call dword ptr [004B86B4]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00415018 6A0A                    push 0000000A
:0041501A 6A30                    push 00000030
:0041501C 6A30                    push 00000030
:0041501E 6A00                    push 00000000
:00415020 6A00                    push 00000000
:00415022 6A00                    push 00000000
:00415024 8B5508                  mov edx, dword ptr [ebp+08]
:00415027 52                      push edx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:00415028 FF15AC874B00            Call dword ptr [004B87AC]
:0041502E EB52                    jmp 00415082

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F9F(C)
|
:00415030 8B4508                  mov eax, dword ptr [ebp+08]
:00415033 50                      push eax

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:00415034 FF15A4874B00            Call dword ptr [004B87A4]
:0041503A EB46                    jmp 00415082

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F90(C)
|
:0041503C 8B0DC0574800            mov ecx, dword ptr [004857C0]
:00415042 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00415043 FF158C844B00            Call dword ptr [004B848C]
:00415049 EB37                    jmp 00415082

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F86(C)
|
:0041504B 6A00                    push 00000000
:0041504D 6A30                    push 00000030
:0041504F 6A30                    push 00000030
:00415051 6A00                    push 00000000
:00415053 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0563, ""
                                  |
:00415055 6863050000              push 00000563
:0041505A 8B5508                  mov edx, dword ptr [ebp+08]
:0041505D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041505E FF15AC864B00            Call dword ptr [004B86AC]
:00415064 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00415065 FF15FC864B00            Call dword ptr [004B86FC]
:0041506B EB15                    jmp 00415082

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414FB5(C)
|
:0041506D 8B4510                  mov eax, dword ptr [ebp+10]
:00415070 50                      push eax
:00415071 8B0DC0574800            mov ecx, dword ptr [004857C0]
:00415077 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00415078 6A05                    push 00000005
:0041507A E800F9FFFF              call 0041497F
:0041507F 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414F96(U), :00414FBB(U), :0041502E(U), :0041503A(U), :00415049(U)
|:0041506B(U)
|
:00415082 33C0                    xor eax, eax
:00415084 8BE5                    mov esp, ebp
:00415086 5D                      pop ebp
:00415087 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0040DF40   , :0041216D   , :00424A6C   
|
:0041508A 55                      push ebp
:0041508B 8BEC                    mov ebp, esp
:0041508D 83EC2C                  sub esp, 0000002C
:00415090 894DD4                  mov dword ptr [ebp-2C], ecx
:00415093 8B45D4                  mov eax, dword ptr [ebp-2C]
:00415096 C64018FF                mov [eax+18], FF
:0041509A B9C8E24A00              mov ecx, 004AE2C8
:0041509F E88CA2FFFF              call 0040F330
:004150A4 50                      push eax
:004150A5 B910584800              mov ecx, 00485810
:004150AA E87127FFFF              call 00407820
:004150AF 6A01                    push 00000001
:004150B1 B9C8E24A00              mov ecx, 004AE2C8
:004150B6 E895A2FFFF              call 0040F350
:004150BB 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004150BE 833900                  cmp dword ptr [ecx], 00000000
:004150C1 7524                    jne 004150E7
:004150C3 6A00                    push 00000000
:004150C5 6860484100              push 00414860
:004150CA 8B15380E4B00            mov edx, dword ptr [004B0E38]
:004150D0 52                      push edx

* Possible Reference to Dialog: DialogID_012B 
                                  |
:004150D1 682B010000              push 0000012B
:004150D6 A1300E4B00              mov eax, dword ptr [004B0E30]
:004150DB 50                      push eax

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:004150DC FF15A0864B00            Call dword ptr [004B86A0]
:004150E2 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004150E5 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150C1(C)
|
:004150E7 8B55D4                  mov edx, dword ptr [ebp-2C]
:004150EA 837A0400                cmp dword ptr [edx+04], 00000000
:004150EE 7525                    jne 00415115
:004150F0 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}w}"
                                  |
:004150F2 68F64A4100              push 00414AF6
:004150F7 A1380E4B00              mov eax, dword ptr [004B0E38]
:004150FC 50                      push eax

* Possible Reference to Dialog: DialogID_012B 
                                  |
:004150FD 682B010000              push 0000012B
:00415102 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00415108 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00415109 FF15A0864B00            Call dword ptr [004B86A0]
:0041510F 8B55D4                  mov edx, dword ptr [ebp-2C]
:00415112 894204                  mov dword ptr [edx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150EE(C)
|
:00415115 8B45D4                  mov eax, dword ptr [ebp-2C]
:00415118 83780800                cmp dword ptr [eax+08], 00000000
:0041511C 7526                    jne 00415144
:0041511E 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}w}"
                                  |
:00415120 68154C4100              push 00414C15
:00415125 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0041512B 51                      push ecx

* Possible Reference to Dialog: DialogID_012B 
                                  |
:0041512C 682B010000              push 0000012B
:00415131 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00415137 52                      push edx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00415138 FF15A0864B00            Call dword ptr [004B86A0]
:0041513E 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00415141 894108                  mov dword ptr [ecx+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041511C(C)
|
:00415144 8B55D4                  mov edx, dword ptr [ebp-2C]
:00415147 837A0C00                cmp dword ptr [edx+0C], 00000000
:0041514B 7525                    jne 00415172
:0041514D 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}w}"
                                  |
:0041514F 68344D4100              push 00414D34
:00415154 A1380E4B00              mov eax, dword ptr [004B0E38]
:00415159 50                      push eax

* Possible Reference to Dialog: DialogID_012B 
                                  |
:0041515A 682B010000              push 0000012B
:0041515F 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00415165 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00415166 FF15A0864B00            Call dword ptr [004B86A0]
:0041516C 8B55D4                  mov edx, dword ptr [ebp-2C]
:0041516F 89420C                  mov dword ptr [edx+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041514B(C)
|
:00415172 8B45D4                  mov eax, dword ptr [ebp-2C]
:00415175 83781000                cmp dword ptr [eax+10], 00000000
:00415179 7526                    jne 004151A1
:0041517B 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}w}"
                                  |
:0041517D 68534E4100              push 00414E53
:00415182 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00415188 51                      push ecx

* Possible Reference to Dialog: DialogID_012B 
                                  |
:00415189 682B010000              push 0000012B
:0041518E 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00415194 52                      push edx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00415195 FF15A0864B00            Call dword ptr [004B86A0]
:0041519B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0041519E 894110                  mov dword ptr [ecx+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415179(C)
|
:004151A1 8B55D4                  mov edx, dword ptr [ebp-2C]
:004151A4 837A1400                cmp dword ptr [edx+14], 00000000
:004151A8 7525                    jne 004151CF
:004151AA 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}w}"
                                  |
:004151AC 68724F4100              push 00414F72
:004151B1 A1380E4B00              mov eax, dword ptr [004B0E38]
:004151B6 50                      push eax

* Possible Reference to Dialog: DialogID_012B 
                                  |
:004151B7 682B010000              push 0000012B
:004151BC 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004151C2 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:004151C3 FF15A0864B00            Call dword ptr [004B86A0]
:004151C9 8B55D4                  mov edx, dword ptr [ebp-2C]
:004151CC 894214                  mov dword ptr [edx+14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004151A8(C)
|
:004151CF 8D45DC                  lea eax, dword ptr [ebp-24]
:004151D2 50                      push eax
:004151D3 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:004151D9 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004151DA FF15C8864B00            Call dword ptr [004B86C8]
:004151E0 8D55EC                  lea edx, dword ptr [ebp-14]
:004151E3 52                      push edx
:004151E4 A1380E4B00              mov eax, dword ptr [004B0E38]
:004151E9 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004151EA FF15C8864B00            Call dword ptr [004B86C8]
:004151F0 E817010000              call 0041530C
:004151F5 C745FC01000000          mov [ebp-04], 00000001
:004151FC EB09                    jmp 00415207

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152FC(U)
|
:004151FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415201 83C101                  add ecx, 00000001
:00415204 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004151FC(U)
|
:00415207 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0041520B 0F8FF0000000            jg 00415301
:00415211 E854010000              call 0041536A
:00415216 85C0                    test eax, eax
:00415218 7407                    je 00415221

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041521A C745FC0A000000          mov [ebp-04], 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415218(C)
|
:00415221 6A01                    push 00000001
:00415223 E853190100              call 00426B7B
:00415228 83C404                  add esp, 00000004
:0041522B B9C8E24A00              mov ecx, 004AE2C8
:00415230 E89B9FFFFF              call 0040F1D0
:00415235 83E004                  and eax, 00000004
:00415238 85C0                    test eax, eax
:0041523A 744A                    je 00415286
:0041523C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041523F 52                      push edx
:00415240 83EC10                  sub esp, 00000010
:00415243 8BC4                    mov eax, esp
:00415245 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00415248 8908                    mov dword ptr [eax], ecx
:0041524A 8B55E0                  mov edx, dword ptr [ebp-20]
:0041524D 895004                  mov dword ptr [eax+04], edx
:00415250 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00415253 894808                  mov dword ptr [eax+08], ecx
:00415256 8B55E8                  mov edx, dword ptr [ebp-18]
:00415259 89500C                  mov dword ptr [eax+0C], edx
:0041525C 83EC10                  sub esp, 00000010
:0041525F 8BC4                    mov eax, esp
:00415261 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00415264 8908                    mov dword ptr [eax], ecx
:00415266 8B55F0                  mov edx, dword ptr [ebp-10]
:00415269 895004                  mov dword ptr [eax+04], edx
:0041526C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041526F 894808                  mov dword ptr [eax+08], ecx
:00415272 8B55F8                  mov edx, dword ptr [ebp-08]
:00415275 89500C                  mov dword ptr [eax+0C], edx
:00415278 8B45D4                  mov eax, dword ptr [ebp-2C]
:0041527B 50                      push eax
:0041527C E8DB020000              call 0041555C
:00415281 83C428                  add esp, 00000028
:00415284 EB2C                    jmp 004152B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041523A(C)
|
:00415286 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415289 51                      push ecx
:0041528A 83EC10                  sub esp, 00000010
:0041528D 8BD4                    mov edx, esp
:0041528F 8B45EC                  mov eax, dword ptr [ebp-14]
:00415292 8902                    mov dword ptr [edx], eax
:00415294 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00415297 894A04                  mov dword ptr [edx+04], ecx
:0041529A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041529D 894208                  mov dword ptr [edx+08], eax
:004152A0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004152A3 894A0C                  mov dword ptr [edx+0C], ecx
:004152A6 8B55D4                  mov edx, dword ptr [ebp-2C]
:004152A9 52                      push edx
:004152AA E80F010000              call 004153BE
:004152AF 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415284(U)
|
:004152B2 C745D800000000          mov [ebp-28], 00000000
:004152B9 EB09                    jmp 004152C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152F5(U)
|
:004152BB 8B45D8                  mov eax, dword ptr [ebp-28]
:004152BE 83C001                  add eax, 00000001
:004152C1 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152B9(U)
|
:004152C4 837DD806                cmp dword ptr [ebp-28], 00000006
:004152C8 7D2D                    jge 004152F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004152CA 6A05                    push 00000005
:004152CC 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004152CF 8B55D4                  mov edx, dword ptr [ebp-2C]
:004152D2 8B048A                  mov eax, dword ptr [edx+4*ecx]
:004152D5 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004152D6 FF15E4864B00            Call dword ptr [004B86E4]
:004152DC 6801010000              push 00000101
:004152E1 6A00                    push 00000000
:004152E3 6A00                    push 00000000
:004152E5 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004152E8 8B55D4                  mov edx, dword ptr [ebp-2C]
:004152EB 8B048A                  mov eax, dword ptr [edx+4*ecx]
:004152EE 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:004152EF FF1590874B00            Call dword ptr [004B8790]
:004152F5 EBC4                    jmp 004152BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152C8(C)
|
:004152F7 E894180100              call 00426B90
:004152FC E9FDFEFFFF              jmp 004151FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041520B(C)
|
:00415301 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00415304 C6411800                mov [ecx+18], 00
:00415308 8BE5                    mov esp, ebp
:0041530A 5D                      pop ebp
:0041530B C3                      ret



* Referenced by a CALL at Address:
|:004151F0   
|
:0041530C 55                      push ebp
:0041530D 8BEC                    mov ebp, esp
:0041530F 6809020000              push 00000209
:00415314 6800020000              push 00000200
:00415319 E817000000              call 00415335
:0041531E 83C408                  add esp, 00000008
:00415321 6808010000              push 00000108
:00415326 6800010000              push 00000100
:0041532B E805000000              call 00415335
:00415330 83C408                  add esp, 00000008
:00415333 5D                      pop ebp
:00415334 C3                      ret



* Referenced by a CALL at Addresses:
|:00415319   , :0041532B   
|
:00415335 55                      push ebp
:00415336 8BEC                    mov ebp, esp
:00415338 83EC1C                  sub esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415364(U)
|
:0041533B B801000000              mov eax, 00000001
:00415340 85C0                    test eax, eax
:00415342 7422                    je 00415366
:00415344 6A01                    push 00000001
:00415346 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415349 51                      push ecx
:0041534A 8B5508                  mov edx, dword ptr [ebp+08]
:0041534D 52                      push edx
:0041534E A1380E4B00              mov eax, dword ptr [004B0E38]
:00415353 50                      push eax
:00415354 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00415357 51                      push ecx

* Reference To: USER32.PeekMessageA, Ord:01AFh
                                  |
:00415358 FF1598874B00            Call dword ptr [004B8798]
:0041535E 85C0                    test eax, eax
:00415360 7502                    jne 00415364
:00415362 EB02                    jmp 00415366

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415360(C)
|
:00415364 EBD5                    jmp 0041533B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415342(C), :00415362(U)
|
:00415366 8BE5                    mov esp, ebp
:00415368 5D                      pop ebp
:00415369 C3                      ret



* Referenced by a CALL at Address:
|:00415211   
|
:0041536A 55                      push ebp
:0041536B 8BEC                    mov ebp, esp
:0041536D 83EC1C                  sub esp, 0000001C
:00415370 6A00                    push 00000000
:00415372 6809020000              push 00000209
:00415377 6800020000              push 00000200
:0041537C A1380E4B00              mov eax, dword ptr [004B0E38]
:00415381 50                      push eax
:00415382 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00415385 51                      push ecx

* Reference To: USER32.PeekMessageA, Ord:01AFh
                                  |
:00415386 FF1598874B00            Call dword ptr [004B8798]
:0041538C 85C0                    test eax, eax
:0041538E 7521                    jne 004153B1
:00415390 6A00                    push 00000000
:00415392 6808010000              push 00000108
:00415397 6800010000              push 00000100
:0041539C 8B15380E4B00            mov edx, dword ptr [004B0E38]
:004153A2 52                      push edx
:004153A3 8D45E4                  lea eax, dword ptr [ebp-1C]
:004153A6 50                      push eax

* Reference To: USER32.PeekMessageA, Ord:01AFh
                                  |
:004153A7 FF1598874B00            Call dword ptr [004B8798]
:004153AD 85C0                    test eax, eax
:004153AF 7407                    je 004153B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041538E(C)
|
:004153B1 B801000000              mov eax, 00000001
:004153B6 EB02                    jmp 004153BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004153AF(C)
|
:004153B8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004153B6(U)
|
:004153BA 8BE5                    mov esp, ebp
:004153BC 5D                      pop ebp
:004153BD C3                      ret



* Referenced by a CALL at Address:
|:004152AA   
|
:004153BE 55                      push ebp
:004153BF 8BEC                    mov ebp, esp
:004153C1 83EC20                  sub esp, 00000020
:004153C4 8B451C                  mov eax, dword ptr [ebp+1C]
:004153C7 6BC028                  imul eax, 00000028
:004153CA 8945F8                  mov dword ptr [ebp-08], eax
:004153CD 8B4D18                  mov ecx, dword ptr [ebp+18]
:004153D0 83E960                  sub ecx, 00000060
:004153D3 394DF8                  cmp dword ptr [ebp-08], ecx
:004153D6 7D08                    jge 004153E0
:004153D8 8B55F8                  mov edx, dword ptr [ebp-08]
:004153DB 8955F4                  mov dword ptr [ebp-0C], edx
:004153DE EB09                    jmp 004153E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004153D6(C)
|
:004153E0 8B4518                  mov eax, dword ptr [ebp+18]
:004153E3 83E860                  sub eax, 00000060
:004153E6 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004153DE(U)
|
:004153E9 6A01                    push 00000001
:004153EB 6A30                    push 00000030
:004153ED 6A30                    push 00000030
:004153EF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004153F2 51                      push ecx
:004153F3 8B5514                  mov edx, dword ptr [ebp+14]
:004153F6 83EA30                  sub edx, 00000030
:004153F9 52                      push edx
:004153FA 8B4508                  mov eax, dword ptr [ebp+08]
:004153FD 8B08                    mov ecx, dword ptr [eax]
:004153FF 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00415400 FF15FC864B00            Call dword ptr [004B86FC]
:00415406 8B5518                  mov edx, dword ptr [ebp+18]
:00415409 83EA60                  sub edx, 00000060
:0041540C 3955F8                  cmp dword ptr [ebp-08], edx
:0041540F 7D08                    jge 00415419
:00415411 8B45F8                  mov eax, dword ptr [ebp-08]
:00415414 8945F0                  mov dword ptr [ebp-10], eax
:00415417 EB09                    jmp 00415422

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041540F(C)
|
:00415419 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041541C 83E960                  sub ecx, 00000060
:0041541F 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415417(U)
|
:00415422 6A01                    push 00000001
:00415424 6A30                    push 00000030
:00415426 6A30                    push 00000030
:00415428 8B55F0                  mov edx, dword ptr [ebp-10]
:0041542B 52                      push edx
:0041542C 8B4514                  mov eax, dword ptr [ebp+14]
:0041542F 83E860                  sub eax, 00000060
:00415432 50                      push eax
:00415433 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415436 8B5104                  mov edx, dword ptr [ecx+04]
:00415439 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041543A FF15FC864B00            Call dword ptr [004B86FC]
:00415440 8B451C                  mov eax, dword ptr [ebp+1C]
:00415443 C1E006                  shl eax, 06
:00415446 8945FC                  mov dword ptr [ebp-04], eax
:00415449 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041544C 81C190000000            add ecx, 00000090
:00415452 8B5514                  mov edx, dword ptr [ebp+14]
:00415455 83EA30                  sub edx, 00000030
:00415458 3BCA                    cmp ecx, edx
:0041545A 7D0D                    jge 00415469
:0041545C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041545F 0590000000              add eax, 00000090
:00415464 8945EC                  mov dword ptr [ebp-14], eax
:00415467 EB09                    jmp 00415472

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041545A(C)
|
:00415469 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041546C 83E930                  sub ecx, 00000030
:0041546F 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415467(U)
|
:00415472 6A01                    push 00000001
:00415474 6A30                    push 00000030
:00415476 6A30                    push 00000030
:00415478 8B5518                  mov edx, dword ptr [ebp+18]
:0041547B 83EA30                  sub edx, 00000030
:0041547E 52                      push edx
:0041547F 8B45EC                  mov eax, dword ptr [ebp-14]
:00415482 50                      push eax
:00415483 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415486 8B5108                  mov edx, dword ptr [ecx+08]
:00415489 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041548A FF15FC864B00            Call dword ptr [004B86FC]
:00415490 8B45FC                  mov eax, dword ptr [ebp-04]
:00415493 83C060                  add eax, 00000060
:00415496 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415499 83E960                  sub ecx, 00000060
:0041549C 3BC1                    cmp eax, ecx
:0041549E 7D0B                    jge 004154AB
:004154A0 8B55FC                  mov edx, dword ptr [ebp-04]
:004154A3 83C260                  add edx, 00000060
:004154A6 8955E8                  mov dword ptr [ebp-18], edx
:004154A9 EB09                    jmp 004154B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041549E(C)
|
:004154AB 8B4514                  mov eax, dword ptr [ebp+14]
:004154AE 83E860                  sub eax, 00000060
:004154B1 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004154A9(U)
|
:004154B4 6A01                    push 00000001
:004154B6 6A30                    push 00000030
:004154B8 6A30                    push 00000030
:004154BA 8B4D18                  mov ecx, dword ptr [ebp+18]
:004154BD 83E930                  sub ecx, 00000030
:004154C0 51                      push ecx
:004154C1 8B55E8                  mov edx, dword ptr [ebp-18]
:004154C4 52                      push edx
:004154C5 8B4508                  mov eax, dword ptr [ebp+08]
:004154C8 8B4814                  mov ecx, dword ptr [eax+14]
:004154CB 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004154CC FF15FC864B00            Call dword ptr [004B86FC]
:004154D2 8B55FC                  mov edx, dword ptr [ebp-04]
:004154D5 83C230                  add edx, 00000030
:004154D8 8B4514                  mov eax, dword ptr [ebp+14]
:004154DB 2D90000000              sub eax, 00000090
:004154E0 3BD0                    cmp edx, eax
:004154E2 7D0B                    jge 004154EF
:004154E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004154E7 83C130                  add ecx, 00000030
:004154EA 894DE4                  mov dword ptr [ebp-1C], ecx
:004154ED EB0C                    jmp 004154FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004154E2(C)
|
:004154EF 8B5514                  mov edx, dword ptr [ebp+14]
:004154F2 81EA90000000            sub edx, 00000090
:004154F8 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004154ED(U)
|
:004154FB 6A01                    push 00000001
:004154FD 6A30                    push 00000030
:004154FF 6A30                    push 00000030
:00415501 8B4518                  mov eax, dword ptr [ebp+18]
:00415504 83E830                  sub eax, 00000030
:00415507 50                      push eax
:00415508 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041550B 51                      push ecx
:0041550C 8B5508                  mov edx, dword ptr [ebp+08]
:0041550F 8B4210                  mov eax, dword ptr [edx+10]
:00415512 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00415513 FF15FC864B00            Call dword ptr [004B86FC]
:00415519 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041551C 81E9C0000000            sub ecx, 000000C0
:00415522 394DFC                  cmp dword ptr [ebp-04], ecx
:00415525 7D08                    jge 0041552F
:00415527 8B55FC                  mov edx, dword ptr [ebp-04]
:0041552A 8955E0                  mov dword ptr [ebp-20], edx
:0041552D EB0B                    jmp 0041553A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415525(C)
|
:0041552F 8B4514                  mov eax, dword ptr [ebp+14]
:00415532 2DC0000000              sub eax, 000000C0
:00415537 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041552D(U)
|
:0041553A 6A01                    push 00000001
:0041553C 6A30                    push 00000030
:0041553E 6A30                    push 00000030
:00415540 8B4D18                  mov ecx, dword ptr [ebp+18]
:00415543 83E930                  sub ecx, 00000030
:00415546 51                      push ecx
:00415547 8B55E0                  mov edx, dword ptr [ebp-20]
:0041554A 52                      push edx
:0041554B 8B4508                  mov eax, dword ptr [ebp+08]
:0041554E 8B480C                  mov ecx, dword ptr [eax+0C]
:00415551 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00415552 FF15FC864B00            Call dword ptr [004B86FC]
:00415558 8BE5                    mov esp, ebp
:0041555A 5D                      pop ebp
:0041555B C3                      ret



* Referenced by a CALL at Address:
|:0041527C   
|
:0041555C 55                      push ebp
:0041555D 8BEC                    mov ebp, esp
:0041555F 83EC20                  sub esp, 00000020
:00415562 8B452C                  mov eax, dword ptr [ebp+2C]
:00415565 6BC028                  imul eax, 00000028
:00415568 8945F8                  mov dword ptr [ebp-08], eax
:0041556B 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041556E 2B4DF8                  sub ecx, dword ptr [ebp-08]
:00415571 8B5528                  mov edx, dword ptr [ebp+28]
:00415574 83C230                  add edx, 00000030
:00415577 3BCA                    cmp ecx, edx
:00415579 7E0B                    jle 00415586
:0041557B 8B4518                  mov eax, dword ptr [ebp+18]
:0041557E 2B45F8                  sub eax, dword ptr [ebp-08]
:00415581 8945F4                  mov dword ptr [ebp-0C], eax
:00415584 EB09                    jmp 0041558F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415579(C)
|
:00415586 8B4D28                  mov ecx, dword ptr [ebp+28]
:00415589 83C130                  add ecx, 00000030
:0041558C 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415584(U)
|
:0041558F 6A01                    push 00000001
:00415591 6A30                    push 00000030
:00415593 6A30                    push 00000030
:00415595 8B55F4                  mov edx, dword ptr [ebp-0C]
:00415598 52                      push edx
:00415599 6A00                    push 00000000
:0041559B 8B4508                  mov eax, dword ptr [ebp+08]
:0041559E 8B08                    mov ecx, dword ptr [eax]
:004155A0 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004155A1 FF15FC864B00            Call dword ptr [004B86FC]
:004155A7 8B5518                  mov edx, dword ptr [ebp+18]
:004155AA 2B55F8                  sub edx, dword ptr [ebp-08]
:004155AD 8B4528                  mov eax, dword ptr [ebp+28]
:004155B0 83C030                  add eax, 00000030
:004155B3 3BD0                    cmp edx, eax
:004155B5 7E0B                    jle 004155C2
:004155B7 8B4D18                  mov ecx, dword ptr [ebp+18]
:004155BA 2B4DF8                  sub ecx, dword ptr [ebp-08]
:004155BD 894DF0                  mov dword ptr [ebp-10], ecx
:004155C0 EB09                    jmp 004155CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004155B5(C)
|
:004155C2 8B5528                  mov edx, dword ptr [ebp+28]
:004155C5 83C230                  add edx, 00000030
:004155C8 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004155C0(U)
|
:004155CB 6A01                    push 00000001
:004155CD 6A30                    push 00000030
:004155CF 6A30                    push 00000030
:004155D1 8B45F0                  mov eax, dword ptr [ebp-10]
:004155D4 50                      push eax
:004155D5 6A30                    push 00000030
:004155D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004155DA 8B5104                  mov edx, dword ptr [ecx+04]
:004155DD 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004155DE FF15FC864B00            Call dword ptr [004B86FC]
:004155E4 8B452C                  mov eax, dword ptr [ebp+2C]
:004155E7 C1E006                  shl eax, 06
:004155EA 8945FC                  mov dword ptr [ebp-04], eax
:004155ED 8B4D14                  mov ecx, dword ptr [ebp+14]
:004155F0 2B4DFC                  sub ecx, dword ptr [ebp-04]
:004155F3 81E990000000            sub ecx, 00000090
:004155F9 85C9                    test ecx, ecx
:004155FB 7E11                    jle 0041560E
:004155FD 8B5514                  mov edx, dword ptr [ebp+14]
:00415600 2B55FC                  sub edx, dword ptr [ebp-04]
:00415603 81EA90000000            sub edx, 00000090
:00415609 8955EC                  mov dword ptr [ebp-14], edx
:0041560C EB07                    jmp 00415615

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004155FB(C)
|
:0041560E C745EC00000000          mov [ebp-14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041560C(U)
|
:00415615 6A01                    push 00000001
:00415617 6A30                    push 00000030
:00415619 6A30                    push 00000030
:0041561B 8B4528                  mov eax, dword ptr [ebp+28]
:0041561E 50                      push eax
:0041561F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00415622 51                      push ecx
:00415623 8B5508                  mov edx, dword ptr [ebp+08]
:00415626 8B4208                  mov eax, dword ptr [edx+08]
:00415629 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041562A FF15FC864B00            Call dword ptr [004B86FC]
:00415630 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415633 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00415636 83E960                  sub ecx, 00000060
:00415639 83F930                  cmp ecx, 00000030
:0041563C 7E0E                    jle 0041564C
:0041563E 8B5514                  mov edx, dword ptr [ebp+14]
:00415641 2B55FC                  sub edx, dword ptr [ebp-04]
:00415644 83EA60                  sub edx, 00000060
:00415647 8955E8                  mov dword ptr [ebp-18], edx
:0041564A EB07                    jmp 00415653

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041563C(C)
|
:0041564C C745E830000000          mov [ebp-18], 00000030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041564A(U)
|
:00415653 6A01                    push 00000001
:00415655 6A30                    push 00000030
:00415657 6A30                    push 00000030
:00415659 8B4528                  mov eax, dword ptr [ebp+28]
:0041565C 50                      push eax
:0041565D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00415660 51                      push ecx
:00415661 8B5508                  mov edx, dword ptr [ebp+08]
:00415664 8B4214                  mov eax, dword ptr [edx+14]
:00415667 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00415668 FF15FC864B00            Call dword ptr [004B86FC]
:0041566E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415671 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00415674 83E930                  sub ecx, 00000030
:00415677 83F960                  cmp ecx, 00000060
:0041567A 7E0E                    jle 0041568A
:0041567C 8B5514                  mov edx, dword ptr [ebp+14]
:0041567F 2B55FC                  sub edx, dword ptr [ebp-04]
:00415682 83EA30                  sub edx, 00000030
:00415685 8955E4                  mov dword ptr [ebp-1C], edx
:00415688 EB07                    jmp 00415691

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041567A(C)
|
:0041568A C745E460000000          mov [ebp-1C], 00000060

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415688(U)
|
:00415691 6A01                    push 00000001
:00415693 6A30                    push 00000030
:00415695 6A30                    push 00000030
:00415697 8B4528                  mov eax, dword ptr [ebp+28]
:0041569A 50                      push eax
:0041569B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041569E 51                      push ecx
:0041569F 8B5508                  mov edx, dword ptr [ebp+08]
:004156A2 8B4210                  mov eax, dword ptr [edx+10]
:004156A5 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004156A6 FF15FC864B00            Call dword ptr [004B86FC]
:004156AC 8B4D14                  mov ecx, dword ptr [ebp+14]
:004156AF 2B4DFC                  sub ecx, dword ptr [ebp-04]
:004156B2 81F990000000            cmp ecx, 00000090
:004156B8 7E0B                    jle 004156C5
:004156BA 8B5514                  mov edx, dword ptr [ebp+14]
:004156BD 2B55FC                  sub edx, dword ptr [ebp-04]
:004156C0 8955E0                  mov dword ptr [ebp-20], edx
:004156C3 EB07                    jmp 004156CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004156B8(C)
|
:004156C5 C745E090000000          mov [ebp-20], 00000090

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004156C3(U)
|
:004156CC 6A01                    push 00000001
:004156CE 6A30                    push 00000030
:004156D0 6A30                    push 00000030
:004156D2 8B4528                  mov eax, dword ptr [ebp+28]
:004156D5 50                      push eax
:004156D6 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004156D9 51                      push ecx
:004156DA 8B5508                  mov edx, dword ptr [ebp+08]
:004156DD 8B420C                  mov eax, dword ptr [edx+0C]
:004156E0 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004156E1 FF15FC864B00            Call dword ptr [004B86FC]
:004156E7 8BE5                    mov esp, ebp
:004156E9 5D                      pop ebp
:004156EA C3                      ret



* Referenced by a CALL at Addresses:
|:0040DF4C   , :00410EDC   , :0042649C   , :004268DB   
|
:004156EB 55                      push ebp
:004156EC 8BEC                    mov ebp, esp
:004156EE 83EC08                  sub esp, 00000008
:004156F1 894DF8                  mov dword ptr [ebp-08], ecx
:004156F4 C745FC00000000          mov [ebp-04], 00000000
:004156FB EB09                    jmp 00415706

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041572F(U)
|
:004156FD 8B45FC                  mov eax, dword ptr [ebp-04]
:00415700 83C001                  add eax, 00000001
:00415703 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004156FB(U)
|
:00415706 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041570A 7D25                    jge 00415731
:0041570C 6A00                    push 00000000
:0041570E 6A00                    push 00000000

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00415710 6A10                    push 00000010
:00415712 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415715 8B55F8                  mov edx, dword ptr [ebp-08]
:00415718 8B048A                  mov eax, dword ptr [edx+4*ecx]
:0041571B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041571C FF15D8864B00            Call dword ptr [004B86D8]
:00415722 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415725 8B55F8                  mov edx, dword ptr [ebp-08]
:00415728 C7048A00000000          mov dword ptr [edx+4*ecx], 00000000
:0041572F EBCC                    jmp 004156FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041570A(C)
|
:00415731 B910584800              mov ecx, 00485810
:00415736 E8E5D0FFFF              call 00412820
:0041573B 50                      push eax
:0041573C B9C8E24A00              mov ecx, 004AE2C8
:00415741 E80A9CFFFF              call 0040F350
:00415746 8BE5                    mov esp, ebp
:00415748 5D                      pop ebp
:00415749 C3                      ret



* Referenced by a CALL at Address:
|:004149BB   
|
:0041574A 55                      push ebp
:0041574B 8BEC                    mov ebp, esp
:0041574D 51                      push ecx
:0041574E 894DFC                  mov dword ptr [ebp-04], ecx
:00415751 8B45FC                  mov eax, dword ptr [ebp-04]
:00415754 33C9                    xor ecx, ecx
:00415756 8A4818                  mov cl, byte ptr [eax+18]
:00415759 8BD1                    mov edx, ecx
:0041575B B801000000              mov eax, 00000001
:00415760 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415763 D3E0                    shl eax, cl
:00415765 23D0                    and edx, eax
:00415767 85D2                    test edx, edx
:00415769 7404                    je 0041576F
:0041576B 33C0                    xor eax, eax
:0041576D EB05                    jmp 00415774

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415769(C)
|
:0041576F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041576D(U)
|
:00415774 8BE5                    mov esp, ebp
:00415776 5D                      pop ebp
:00415777 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00414AD5   
|
:0041577A 55                      push ebp
:0041577B 8BEC                    mov ebp, esp
:0041577D 51                      push ecx
:0041577E 894DFC                  mov dword ptr [ebp-04], ecx
:00415781 B801000000              mov eax, 00000001
:00415786 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415789 D3E0                    shl eax, cl
:0041578B F7D0                    not eax
:0041578D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415790 8A5118                  mov dl, byte ptr [ecx+18]
:00415793 22D0                    and dl, al
:00415795 8B45FC                  mov eax, dword ptr [ebp-04]
:00415798 885018                  mov byte ptr [eax+18], dl
:0041579B 8BE5                    mov esp, ebp
:0041579D 5D                      pop ebp
:0041579E C20400                  ret 0004



* Referenced by a CALL at Address:
|:004149E3   
|
:004157A1 55                      push ebp
:004157A2 8BEC                    mov ebp, esp
:004157A4 51                      push ecx
:004157A5 894DFC                  mov dword ptr [ebp-04], ecx
:004157A8 B801000000              mov eax, 00000001
:004157AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004157B0 D3E0                    shl eax, cl
:004157B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004157B5 8A5118                  mov dl, byte ptr [ecx+18]
:004157B8 0AD0                    or dl, al
:004157BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004157BD 885018                  mov byte ptr [eax+18], dl
:004157C0 8BE5                    mov esp, ebp
:004157C2 5D                      pop ebp
:004157C3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0041215F   
|
:004157C6 55                      push ebp
:004157C7 8BEC                    mov ebp, esp
:004157C9 51                      push ecx
:004157CA 894DFC                  mov dword ptr [ebp-04], ecx
:004157CD 8B45FC                  mov eax, dword ptr [ebp-04]
:004157D0 833800                  cmp dword ptr [eax], 00000000
:004157D3 7507                    jne 004157DC
:004157D5 B801000000              mov eax, 00000001
:004157DA EB02                    jmp 004157DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157D3(C)
|
:004157DC 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157DA(U)
|
:004157DE 8BE5                    mov esp, ebp
:004157E0 5D                      pop ebp
:004157E1 C3                      ret



* Referenced by a CALL at Address:
|:004158C5   
|
:004157E2 55                      push ebp
:004157E3 8BEC                    mov ebp, esp
:004157E5 83EC3C                  sub esp, 0000003C
:004157E8 8B4508                  mov eax, dword ptr [ebp+08]
:004157EB 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:004157EC FF15B8864B00            Call dword ptr [004B86B8]
:004157F2 8945C4                  mov dword ptr [ebp-3C], eax
:004157F5 8D4DC8                  lea ecx, dword ptr [ebp-38]
:004157F8 51                      push ecx
:004157F9 8B55C4                  mov edx, dword ptr [ebp-3C]
:004157FC 52                      push edx

* Reference To: GDI32.GetTextMetricsA, Ord:010Bh
                                  |
:004157FD FF15B4844B00            Call dword ptr [004B84B4]
:00415803 8B45C4                  mov eax, dword ptr [ebp-3C]
:00415806 50                      push eax
:00415807 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041580A 51                      push ecx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0041580B FF15BC864B00            Call dword ptr [004B86BC]
:00415811 8B550C                  mov edx, dword ptr [ebp+0C]
:00415814 52                      push edx
:00415815 E826880500              call 0046E040
:0041581A 83C404                  add esp, 00000004
:0041581D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00415820 0FAFC1                  imul eax, ecx
:00415823 8BE5                    mov esp, ebp
:00415825 5D                      pop ebp
:00415826 C3                      ret


:00415827 55                      push ebp
:00415828 8BEC                    mov ebp, esp
:0041582A 83EC28                  sub esp, 00000028
:0041582D 8B450C                  mov eax, dword ptr [ebp+0C]
:00415830 8945D8                  mov dword ptr [ebp-28], eax
:00415833 817DD800020000          cmp dword ptr [ebp-28], 00000200
:0041583A 7405                    je 00415841
:0041583C E931010000              jmp 00415972

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041583A(C)
|
:00415841 6AF4                    push FFFFFFF4
:00415843 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415846 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00415847 FF158C874B00            Call dword ptr [004B878C]
:0041584D 2D14050000              sub eax, 00000514
:00415852 8945F0                  mov dword ptr [ebp-10], eax
:00415855 8A55F0                  mov dl, byte ptr [ebp-10]
:00415858 52                      push edx
:00415859 B910584800              mov ecx, 00485810
:0041585E E8FD0E0000              call 00416760
:00415863 8B4508                  mov eax, dword ptr [ebp+08]
:00415866 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00415867 FF1584874B00            Call dword ptr [004B8784]
:0041586D 8945F4                  mov dword ptr [ebp-0C], eax
:00415870 686A050000              push 0000056A
:00415875 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00415878 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415879 FF15AC864B00            Call dword ptr [004B86AC]
:0041587F 8945F8                  mov dword ptr [ebp-08], eax
:00415882 8B55F8                  mov edx, dword ptr [ebp-08]
:00415885 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00415886 FF15E0864B00            Call dword ptr [004B86E0]
:0041588C 85C0                    test eax, eax
:0041588E 740F                    je 0041589F
:00415890 8B45F0                  mov eax, dword ptr [ebp-10]
:00415893 3B0564674700            cmp eax, dword ptr [00476764]
:00415899 0F84D3000000            je 00415972

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041588E(C)
|
:0041589F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004158A2 51                      push ecx
:004158A3 8D55E4                  lea edx, dword ptr [ebp-1C]
:004158A6 52                      push edx
:004158A7 E8F5000000              call 004159A1
:004158AC 83C408                  add esp, 00000008
:004158AF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004158B2 6BC911                  imul ecx, 00000011
:004158B5 81C1309C4A00            add ecx, 004A9C30
:004158BB E8F01EFFFF              call 004077B0
:004158C0 50                      push eax
:004158C1 8B45F8                  mov eax, dword ptr [ebp-08]
:004158C4 50                      push eax
:004158C5 E818FFFFFF              call 004157E2
:004158CA 83C408                  add esp, 00000008
:004158CD 8945EC                  mov dword ptr [ebp-14], eax
:004158D0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004158D3 83C10A                  add ecx, 0000000A
:004158D6 394DE4                  cmp dword ptr [ebp-1C], ecx
:004158D9 7C1F                    jl 004158FA
:004158DB 6A01                    push 00000001
:004158DD 6A20                    push 00000020
:004158DF 8B55EC                  mov edx, dword ptr [ebp-14]
:004158E2 52                      push edx
:004158E3 8B45E8                  mov eax, dword ptr [ebp-18]
:004158E6 50                      push eax
:004158E7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004158EA 2B4DEC                  sub ecx, dword ptr [ebp-14]
:004158ED 51                      push ecx
:004158EE 8B55F8                  mov edx, dword ptr [ebp-08]
:004158F1 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004158F2 FF15FC864B00            Call dword ptr [004B86FC]
:004158F8 EB1D                    jmp 00415917

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004158D9(C)
|
:004158FA 6A01                    push 00000001
:004158FC 6A20                    push 00000020
:004158FE 8B45EC                  mov eax, dword ptr [ebp-14]
:00415901 50                      push eax
:00415902 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00415905 51                      push ecx
:00415906 8B55E4                  mov edx, dword ptr [ebp-1C]
:00415909 83C220                  add edx, 00000020
:0041590C 52                      push edx
:0041590D 8B45F8                  mov eax, dword ptr [ebp-08]
:00415910 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00415911 FF15FC864B00            Call dword ptr [004B86FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004158F8(U)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00415917 6A05                    push 00000005
:00415919 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041591C 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041591D FF15E4864B00            Call dword ptr [004B86E4]
:00415923 8B55F8                  mov edx, dword ptr [ebp-08]
:00415926 52                      push edx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00415927 FF15B8864B00            Call dword ptr [004B86B8]
:0041592D 8945E0                  mov dword ptr [ebp-20], eax
:00415930 6856010000              push 00000156
:00415935 A1300E4B00              mov eax, dword ptr [004B0E30]
:0041593A 50                      push eax
:0041593B E8ECEEFFFF              call 0041482C
:00415940 83C408                  add esp, 00000008
:00415943 8945DC                  mov dword ptr [ebp-24], eax
:00415946 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00415949 51                      push ecx
:0041594A 8B55DC                  mov edx, dword ptr [ebp-24]
:0041594D 52                      push edx
:0041594E 8B45E0                  mov eax, dword ptr [ebp-20]
:00415951 50                      push eax
:00415952 E8FB000000              call 00415A52
:00415957 83C40C                  add esp, 0000000C
:0041595A 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041595D 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0041595E FF158C844B00            Call dword ptr [004B848C]
:00415964 8B55E0                  mov edx, dword ptr [ebp-20]
:00415967 52                      push edx
:00415968 8B45F8                  mov eax, dword ptr [ebp-08]
:0041596B 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0041596C FF15BC864B00            Call dword ptr [004B86BC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041583C(U), :00415899(C)
|

* Possible Reference to Dialog: DialogID_00EB 
                                  |
:00415972 6AEB                    push FFFFFFEB
:00415974 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415977 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00415978 FF158C874B00            Call dword ptr [004B878C]
:0041597E 8945FC                  mov dword ptr [ebp-04], eax
:00415981 8B5514                  mov edx, dword ptr [ebp+14]
:00415984 52                      push edx
:00415985 8B4510                  mov eax, dword ptr [ebp+10]
:00415988 50                      push eax
:00415989 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041598C 51                      push ecx
:0041598D 8B5508                  mov edx, dword ptr [ebp+08]
:00415990 52                      push edx
:00415991 8B45FC                  mov eax, dword ptr [ebp-04]
:00415994 50                      push eax

* Reference To: USER32.CallWindowProcA, Ord:0012h
                                  |
:00415995 FF1594874B00            Call dword ptr [004B8794]
:0041599B 8BE5                    mov esp, ebp
:0041599D 5D                      pop ebp
:0041599E C21000                  ret 0010



* Referenced by a CALL at Address:
|:004158A7   
|
:004159A1 55                      push ebp
:004159A2 8BEC                    mov ebp, esp
:004159A4 83EC0C                  sub esp, 0000000C
:004159A7 B9C8E24A00              mov ecx, 004AE2C8
:004159AC E84F0D0000              call 00416700
:004159B1 25FF000000              and eax, 000000FF
:004159B6 8945F4                  mov dword ptr [ebp-0C], eax
:004159B9 8B45F4                  mov eax, dword ptr [ebp-0C]
:004159BC 50                      push eax
:004159BD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004159C0 6BC911                  imul ecx, 00000011
:004159C3 81C1309C4A00            add ecx, 004A9C30
:004159C9 E8520D0000              call 00416720
:004159CE 25FF000000              and eax, 000000FF
:004159D3 8945FC                  mov dword ptr [ebp-04], eax
:004159D6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004159D9 51                      push ecx
:004159DA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004159DD 6BC911                  imul ecx, 00000011
:004159E0 81C1309C4A00            add ecx, 004A9C30
:004159E6 E8550D0000              call 00416740
:004159EB 25FF000000              and eax, 000000FF
:004159F0 C1E002                  shl eax, 02
:004159F3 8945F8                  mov dword ptr [ebp-08], eax
:004159F6 837D0C2F                cmp dword ptr [ebp+0C], 0000002F
:004159FA 7204                    jb 00415A00
:004159FC 33C0                    xor eax, eax
:004159FE EB4E                    jmp 00415A4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004159FA(C)
|
:00415A00 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00415A07 740C                    je 00415A15
:00415A09 837DFC00                cmp dword ptr [ebp-04], 00000000
:00415A0D 750A                    jne 00415A19
:00415A0F 837DF800                cmp dword ptr [ebp-08], 00000000
:00415A13 7504                    jne 00415A19

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415A07(C)
|
:00415A15 33C0                    xor eax, eax
:00415A17 EB35                    jmp 00415A4E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415A0D(C), :00415A13(C)
|
:00415A19 6A00                    push 00000000
:00415A1B 8B550C                  mov edx, dword ptr [ebp+0C]
:00415A1E 52                      push edx
:00415A1F E86F100000              call 00416A93
:00415A24 83C408                  add esp, 00000008
:00415A27 85C0                    test eax, eax
:00415A29 7504                    jne 00415A2F
:00415A2B 33C0                    xor eax, eax
:00415A2D EB1F                    jmp 00415A4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415A29(C)
|
:00415A2F 8B45FC                  mov eax, dword ptr [ebp-04]
:00415A32 C1E002                  shl eax, 02
:00415A35 8945FC                  mov dword ptr [ebp-04], eax
:00415A38 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415A3B 8B55FC                  mov edx, dword ptr [ebp-04]
:00415A3E 8911                    mov dword ptr [ecx], edx
:00415A40 8B4508                  mov eax, dword ptr [ebp+08]
:00415A43 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415A46 894804                  mov dword ptr [eax+04], ecx
:00415A49 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004159FE(U), :00415A17(U), :00415A2D(U)
|
:00415A4E 8BE5                    mov esp, ebp
:00415A50 5D                      pop ebp
:00415A51 C3                      ret



* Referenced by a CALL at Address:
|:00415952   
|
:00415A52 55                      push ebp
:00415A53 8BEC                    mov ebp, esp
:00415A55 83EC08                  sub esp, 00000008
:00415A58 8B4508                  mov eax, dword ptr [ebp+08]
:00415A5B 50                      push eax

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:00415A5C FF15A0844B00            Call dword ptr [004B84A0]
:00415A62 8945FC                  mov dword ptr [ebp-04], eax
:00415A65 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415A68 51                      push ecx
:00415A69 8B55FC                  mov edx, dword ptr [ebp-04]
:00415A6C 52                      push edx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00415A6D FF159C844B00            Call dword ptr [004B849C]
:00415A73 682000CC00              push 00CC0020
:00415A78 6A00                    push 00000000
:00415A7A 6A00                    push 00000000
:00415A7C 8B45FC                  mov eax, dword ptr [ebp-04]
:00415A7F 50                      push eax
:00415A80 6A20                    push 00000020
:00415A82 8B4D10                  mov ecx, dword ptr [ebp+10]
:00415A85 51                      push ecx
:00415A86 6A00                    push 00000000
:00415A88 6A00                    push 00000000
:00415A8A 8B5508                  mov edx, dword ptr [ebp+08]
:00415A8D 52                      push edx

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:00415A8E FF1598844B00            Call dword ptr [004B8498]
:00415A94 8B45FC                  mov eax, dword ptr [ebp-04]
:00415A97 50                      push eax

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:00415A98 FF15E4844B00            Call dword ptr [004B84E4]
:00415A9E B910584800              mov ecx, 00485810
:00415AA3 E8D80C0000              call 00416780
:00415AA8 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00415AAD 3DFF000000              cmp eax, 000000FF
:00415AB2 7470                    je 00415B24
:00415AB4 B910584800              mov ecx, 00485810
:00415AB9 E8C20C0000              call 00416780
:00415ABE 8AC8                    mov cl, al
:00415AC0 81E1FF000000            and ecx, 000000FF
:00415AC6 6BC911                  imul ecx, 00000011
:00415AC9 81C1309C4A00            add ecx, 004A9C30
:00415ACF E8DC1CFFFF              call 004077B0
:00415AD4 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00415AD7 68FF000000              push 000000FF
:00415ADC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415ADF 51                      push ecx

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:00415AE0 FF15B0844B00            Call dword ptr [004B84B0]
:00415AE6 6A01                    push 00000001
:00415AE8 8B5508                  mov edx, dword ptr [ebp+08]
:00415AEB 52                      push edx

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:00415AEC FF15AC844B00            Call dword ptr [004B84AC]

* Possible Reference to String Resource ID=00014: ""
                                  |
:00415AF2 6A0E                    push 0000000E
:00415AF4 8B4508                  mov eax, dword ptr [ebp+08]
:00415AF7 50                      push eax

* Reference To: GDI32.SetTextAlign, Ord:0170h
                                  |
:00415AF8 FF15D4844B00            Call dword ptr [004B84D4]
:00415AFE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415B01 51                      push ecx
:00415B02 E89CCA0400              call 004625A3
:00415B07 83C404                  add esp, 00000004
:00415B0A 50                      push eax
:00415B0B 8B55F8                  mov edx, dword ptr [ebp-08]
:00415B0E 52                      push edx
:00415B0F 6A1B                    push 0000001B
:00415B11 8B4510                  mov eax, dword ptr [ebp+10]
:00415B14 99                      cdq
:00415B15 2BC2                    sub eax, edx
:00415B17 D1F8                    sar eax, 1
:00415B19 50                      push eax
:00415B1A 8B4508                  mov eax, dword ptr [ebp+08]
:00415B1D 50                      push eax

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:00415B1E FF15A4844B00            Call dword ptr [004B84A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415AB2(C)
|
:00415B24 8BE5                    mov esp, ebp
:00415B26 5D                      pop ebp
:00415B27 C3                      ret



* Referenced by a CALL at Addresses:
|:00416381   , :004527C6   
|
:00415B28 55                      push ebp
:00415B29 8BEC                    mov ebp, esp
:00415B2B 8B4508                  mov eax, dword ptr [ebp+08]
:00415B2E C7400C80000000          mov [eax+0C], 00000080
:00415B35 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415B38 C7411020000000          mov [ecx+10], 00000020
:00415B3F 5D                      pop ebp
:00415B40 C3                      ret



* Referenced by a CALL at Addresses:
|:00416398   , :004527DD   
|
:00415B41 55                      push ebp
:00415B42 8BEC                    mov ebp, esp
:00415B44 83EC1C                  sub esp, 0000001C
:00415B47 53                      push ebx
:00415B48 8B450C                  mov eax, dword ptr [ebp+0C]
:00415B4B 33C9                    xor ecx, ecx
:00415B4D 83781001                cmp dword ptr [eax+10], 00000001
:00415B51 0F94C1                  sete cl
:00415B54 51                      push ecx
:00415B55 8B550C                  mov edx, dword ptr [ebp+0C]
:00415B58 83C21C                  add edx, 0000001C
:00415B5B 52                      push edx
:00415B5C 8B450C                  mov eax, dword ptr [ebp+0C]
:00415B5F 8B4818                  mov ecx, dword ptr [eax+18]
:00415B62 51                      push ecx
:00415B63 E8CD810000              call 0041DD35
:00415B68 83C40C                  add esp, 0000000C
:00415B6B 8B550C                  mov edx, dword ptr [ebp+0C]
:00415B6E 33C0                    xor eax, eax
:00415B70 668B422C                mov ax, word ptr [edx+2C]
:00415B74 8945FC                  mov dword ptr [ebp-04], eax
:00415B77 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415B7A 8B512C                  mov edx, dword ptr [ecx+2C]
:00415B7D C1EA10                  shr edx, 10
:00415B80 81E2FFFF0000            and edx, 0000FFFF
:00415B86 81E2FFFF0000            and edx, 0000FFFF
:00415B8C 8955F8                  mov dword ptr [ebp-08], edx
:00415B8F 6A00                    push 00000000
:00415B91 8B450C                  mov eax, dword ptr [ebp+0C]
:00415B94 8B4820                  mov ecx, dword ptr [eax+20]
:00415B97 51                      push ecx
:00415B98 8B550C                  mov edx, dword ptr [ebp+0C]
:00415B9B 8B421C                  mov eax, dword ptr [edx+1C]
:00415B9E 50                      push eax
:00415B9F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415BA2 8B5118                  mov edx, dword ptr [ecx+18]
:00415BA5 52                      push edx
:00415BA6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415BA9 6BC933                  imul ecx, 00000033
:00415BAC 81C1C8EF4800            add ecx, 0048EFC8
:00415BB2 E8F9EAFEFF              call 004046B0
:00415BB7 25FF000000              and eax, 000000FF
:00415BBC 50                      push eax
:00415BBD B910584800              mov ecx, 00485810
:00415BC2 E8C90B0000              call 00416790
:00415BC7 50                      push eax

* Reference To: COMCTL32.ImageList_Draw, Ord:001Ch
                                  |
:00415BC8 FF1558844B00            Call dword ptr [004B8458]
:00415BCE 8B450C                  mov eax, dword ptr [ebp+0C]
:00415BD1 83C01C                  add eax, 0000001C
:00415BD4 8B08                    mov ecx, dword ptr [eax]
:00415BD6 894DE8                  mov dword ptr [ebp-18], ecx
:00415BD9 8B5004                  mov edx, dword ptr [eax+04]
:00415BDC 8955EC                  mov dword ptr [ebp-14], edx
:00415BDF 8B4808                  mov ecx, dword ptr [eax+08]
:00415BE2 894DF0                  mov dword ptr [ebp-10], ecx
:00415BE5 8B500C                  mov edx, dword ptr [eax+0C]
:00415BE8 8955F4                  mov dword ptr [ebp-0C], edx
:00415BEB 8B45E8                  mov eax, dword ptr [ebp-18]
:00415BEE 83C020                  add eax, 00000020
:00415BF1 8945E8                  mov dword ptr [ebp-18], eax
:00415BF4 6A01                    push 00000001
:00415BF6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415BF9 8B5118                  mov edx, dword ptr [ecx+18]
:00415BFC 52                      push edx

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:00415BFD FF15AC844B00            Call dword ptr [004B84AC]
:00415C03 6A25                    push 00000025
:00415C05 8D45E8                  lea eax, dword ptr [ebp-18]
:00415C08 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00415C09 6AFF                    push FFFFFFFF
:00415C0B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415C0E 6BC933                  imul ecx, 00000033
:00415C11 81C1C8EF4800            add ecx, 0048EFC8
:00415C17 E8941BFFFF              call 004077B0
:00415C1C 50                      push eax
:00415C1D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415C20 8B5118                  mov edx, dword ptr [ecx+18]
:00415C23 52                      push edx

* Reference To: USER32.DrawTextA, Ord:00AAh
                                  |
:00415C24 FF1588874B00            Call dword ptr [004B8788]
:00415C2A 8B450C                  mov eax, dword ptr [ebp+0C]
:00415C2D 83781001                cmp dword ptr [eax+10], 00000001
:00415C31 7570                    jne 00415CA3
:00415C33 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415C36 6BC970                  imul ecx, 00000070
:00415C39 81C198224900            add ecx, 00492298
:00415C3F E86CEAFEFF              call 004046B0
:00415C44 8AD8                    mov bl, al
:00415C46 81E3FF000000            and ebx, 000000FF
:00415C4C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415C4F 6BC933                  imul ecx, 00000033
:00415C52 81C1C8EF4800            add ecx, 0048EFC8
:00415C58 E8D3A30000              call 00420030
:00415C5D 25FF000000              and eax, 000000FF
:00415C62 03D8                    add ebx, eax
:00415C64 895DE4                  mov dword ptr [ebp-1C], ebx
:00415C67 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00415C6A 51                      push ecx

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00415C6B 686C674700              push 0047676C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0474, "1000"
                                  |
:00415C70 6874040000              push 00000474
:00415C75 8B5508                  mov edx, dword ptr [ebp+08]
:00415C78 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415C79 FF15AC864B00            Call dword ptr [004B86AC]
:00415C7F 50                      push eax
:00415C80 E885DB0400              call 0046380A
:00415C85 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00415C88 68FF000000              push 000000FF
:00415C8D 668B45E4                mov ax, word ptr [ebp-1C]
:00415C91 50                      push eax
:00415C92 6806040000              push 00000406
:00415C97 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415C9A 51                      push ecx
:00415C9B E86BF00400              call 00464D0B
:00415CA0 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C31(C)
|
:00415CA3 5B                      pop ebx
:00415CA4 8BE5                    mov esp, ebp
:00415CA6 5D                      pop ebp
:00415CA7 C3                      ret


:00415CA8 55                      push ebp
:00415CA9 8BEC                    mov ebp, esp
:00415CAB 83EC08                  sub esp, 00000008
:00415CAE 8B450C                  mov eax, dword ptr [ebp+0C]
:00415CB1 8945F8                  mov dword ptr [ebp-08], eax
:00415CB4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415CB7 81E911010000            sub ecx, 00000111
:00415CBD 894DF8                  mov dword ptr [ebp-08], ecx
:00415CC0 817DF8F4000000          cmp dword ptr [ebp-08], 000000F4
:00415CC7 0F87F5000000            ja 00415DC2
:00415CCD 8B45F8                  mov eax, dword ptr [ebp-08]
:00415CD0 33D2                    xor edx, edx
:00415CD2 8A90F45D4100            mov dl, byte ptr [eax+00415DF4]
:00415CD8 FF2495E05D4100          jmp dword ptr [4*edx+00415DE0]
:00415CDF 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415CE2 51                      push ecx
:00415CE3 8B5510                  mov edx, dword ptr [ebp+10]
:00415CE6 52                      push edx
:00415CE7 8B450C                  mov eax, dword ptr [ebp+0C]
:00415CEA 50                      push eax
:00415CEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415CEE 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00415CEF FF15DC864B00            Call dword ptr [004B86DC]
:00415CF5 E9E0000000              jmp 00415DDA
:00415CFA 833D78084B0000          cmp dword ptr [004B0878], 00000000
:00415D01 7452                    je 00415D55
:00415D03 8B5514                  mov edx, dword ptr [ebp+14]
:00415D06 C1EA10                  shr edx, 10
:00415D09 81E2FFFF0000            and edx, 0000FFFF
:00415D0F 81E2FFFF0000            and edx, 0000FFFF
:00415D15 52                      push edx
:00415D16 8B4514                  mov eax, dword ptr [ebp+14]
:00415D19 25FFFF0000              and eax, 0000FFFF
:00415D1E 50                      push eax
:00415D1F 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00415D25 E850B90300              call 0045167A
:00415D2A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415D2D C1E910                  shr ecx, 10
:00415D30 81E1FFFF0000            and ecx, 0000FFFF
:00415D36 81E1FFFF0000            and ecx, 0000FFFF
:00415D3C 51                      push ecx
:00415D3D 8B5514                  mov edx, dword ptr [ebp+14]
:00415D40 81E2FFFF0000            and edx, 0000FFFF
:00415D46 52                      push edx
:00415D47 A178084B00              mov eax, dword ptr [004B0878]
:00415D4C 50                      push eax
:00415D4D E897010000              call 00415EE9
:00415D52 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415D01(C)
|
:00415D55 EB6B                    jmp 00415DC2
:00415D57 833D78084B0000          cmp dword ptr [004B0878], 00000000
:00415D5E 7462                    je 00415DC2
:00415D60 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00415D66 E8E50A0000              call 00416850
:00415D6B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00415D70 3DFF000000              cmp eax, 000000FF
:00415D75 744B                    je 00415DC2
:00415D77 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415D7A 51                      push ecx
:00415D7B 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00415D81 E8CA0A0000              call 00416850
:00415D86 50                      push eax
:00415D87 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00415D8D E873C10300              call 00451F05
:00415D92 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00415D98 E8B30A0000              call 00416850
:00415D9D 25FF000000              and eax, 000000FF
:00415DA2 50                      push eax
:00415DA3 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00415DA9 E8C20A0000              call 00416870
:00415DAE 8945FC                  mov dword ptr [ebp-04], eax
:00415DB1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415DB4 E857E9FEFF              call 00404710
:00415DB9 50                      push eax
:00415DBA E891110500              call 00466F50
:00415DBF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415CC7(C), :00415D55(U), :00415D5E(C), :00415D75(C)
|
:00415DC2 8B5514                  mov edx, dword ptr [ebp+14]
:00415DC5 52                      push edx
:00415DC6 8B4510                  mov eax, dword ptr [ebp+10]
:00415DC9 50                      push eax
:00415DCA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415DCD 51                      push ecx
:00415DCE 8B5508                  mov edx, dword ptr [ebp+08]
:00415DD1 52                      push edx
:00415DD2 E8126C0500              call 0046C9E9
:00415DD7 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415CF5(U)
|
:00415DDA 8BE5                    mov esp, ebp
:00415DDC 5D                      pop ebp
:00415DDD C21000                  ret 0010



:00415DE0 DF5C4100                DWORD 00415CDF
:00415DE4 FA5C4100                DWORD 00415CFA
:00415DE8 575D4100                DWORD 00415D57
:00415DEC 575D4100                DWORD 00415D57
:00415DF0 C25D4100                DWORD 00415DC2


:00415DF4 000404                  add byte ptr [esp+eax], al
:00415DF7 0404                    add al, 04
:00415DF9 0404                    add al, 04
:00415DFB 0404                    add al, 04
:00415DFD 0404                    add al, 04
:00415DFF 0404                    add al, 04
:00415E01 0404                    add al, 04
:00415E03 0404                    add al, 04
:00415E05 0404                    add al, 04
:00415E07 0404                    add al, 04
:00415E09 0404                    add al, 04
:00415E0B 0404                    add al, 04
:00415E0D 0404                    add al, 04
:00415E0F 0404                    add al, 04
:00415E11 0404                    add al, 04
:00415E13 0404                    add al, 04
:00415E15 0404                    add al, 04
:00415E17 0404                    add al, 04
:00415E19 0404                    add al, 04
:00415E1B 0404                    add al, 04
:00415E1D 0404                    add al, 04
:00415E1F 0404                    add al, 04
:00415E21 0404                    add al, 04
:00415E23 0404                    add al, 04
:00415E25 0404                    add al, 04
:00415E27 0404                    add al, 04
:00415E29 0404                    add al, 04
:00415E2B 0404                    add al, 04
:00415E2D 0404                    add al, 04
:00415E2F 0404                    add al, 04
:00415E31 0404                    add al, 04
:00415E33 0404                    add al, 04
:00415E35 0404                    add al, 04
:00415E37 0404                    add al, 04
:00415E39 0404                    add al, 04
:00415E3B 0404                    add al, 04
:00415E3D 0404                    add al, 04
:00415E3F 0404                    add al, 04
:00415E41 0404                    add al, 04
:00415E43 0404                    add al, 04
:00415E45 0404                    add al, 04
:00415E47 0404                    add al, 04
:00415E49 0404                    add al, 04
:00415E4B 0404                    add al, 04
:00415E4D 0404                    add al, 04
:00415E4F 0404                    add al, 04
:00415E51 0404                    add al, 04
:00415E53 0404                    add al, 04
:00415E55 0404                    add al, 04
:00415E57 0404                    add al, 04
:00415E59 0404                    add al, 04
:00415E5B 0404                    add al, 04
:00415E5D 0404                    add al, 04
:00415E5F 0404                    add al, 04
:00415E61 0404                    add al, 04
:00415E63 0404                    add al, 04
:00415E65 0404                    add al, 04
:00415E67 0404                    add al, 04
:00415E69 0404                    add al, 04
:00415E6B 0404                    add al, 04
:00415E6D 0404                    add al, 04
:00415E6F 0404                    add al, 04
:00415E71 0404                    add al, 04
:00415E73 0404                    add al, 04
:00415E75 0404                    add al, 04
:00415E77 0404                    add al, 04
:00415E79 0404                    add al, 04
:00415E7B 0404                    add al, 04
:00415E7D 0404                    add al, 04
:00415E7F 0404                    add al, 04
:00415E81 0404                    add al, 04
:00415E83 0404                    add al, 04
:00415E85 0404                    add al, 04
:00415E87 0404                    add al, 04
:00415E89 0404                    add al, 04
:00415E8B 0404                    add al, 04
:00415E8D 0404                    add al, 04
:00415E8F 0404                    add al, 04
:00415E91 0404                    add al, 04
:00415E93 0404                    add al, 04
:00415E95 0404                    add al, 04
:00415E97 0404                    add al, 04
:00415E99 0404                    add al, 04
:00415E9B 0404                    add al, 04
:00415E9D 0404                    add al, 04
:00415E9F 0404                    add al, 04
:00415EA1 0404                    add al, 04
:00415EA3 0404                    add al, 04
:00415EA5 0404                    add al, 04
:00415EA7 0404                    add al, 04
:00415EA9 0404                    add al, 04
:00415EAB 0404                    add al, 04
:00415EAD 0404                    add al, 04
:00415EAF 0404                    add al, 04
:00415EB1 0404                    add al, 04
:00415EB3 0404                    add al, 04
:00415EB5 0404                    add al, 04
:00415EB7 0404                    add al, 04
:00415EB9 0404                    add al, 04
:00415EBB 0404                    add al, 04
:00415EBD 0404                    add al, 04
:00415EBF 0404                    add al, 04
:00415EC1 0404                    add al, 04
:00415EC3 0404                    add al, 04
:00415EC5 0404                    add al, 04
:00415EC7 0404                    add al, 04
:00415EC9 0404                    add al, 04
:00415ECB 0404                    add al, 04
:00415ECD 0404                    add al, 04
:00415ECF 0404                    add al, 04
:00415ED1 0404                    add al, 04
:00415ED3 0404                    add al, 04
:00415ED5 0404                    add al, 04
:00415ED7 0404                    add al, 04
:00415ED9 0404                    add al, 04
:00415EDB 0404                    add al, 04
:00415EDD 0404                    add al, 04
:00415EDF 0404                    add al, 04
:00415EE1 0404                    add al, 04
:00415EE3 010402                  add dword ptr [edx+eax], eax
:00415EE6 0404                    add al, 04
:00415EE8 03                      BYTE 03h


* Referenced by a CALL at Address:
|:00415D4D   
|
:00415EE9 55                      push ebp
:00415EEA 8BEC                    mov ebp, esp
:00415EEC 83EC74                  sub esp, 00000074
:00415EEF 8B4510                  mov eax, dword ptr [ebp+10]
:00415EF2 50                      push eax
:00415EF3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415EF6 51                      push ecx
:00415EF7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415EFA E8E5B20300              call 004511E4
:00415EFF 8845D0                  mov byte ptr [ebp-30], al
:00415F02 33D2                    xor edx, edx
:00415F04 8A1568674700            mov dl, byte ptr [00476768]
:00415F0A 8B45D0                  mov eax, dword ptr [ebp-30]
:00415F0D 25FF000000              and eax, 000000FF
:00415F12 3BD0                    cmp edx, eax
:00415F14 7505                    jne 00415F1B
:00415F16 E95D020000              jmp 00416178

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415F14(C)
|
:00415F1B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415F1E E80D090000              call 00416830
:00415F23 8945F8                  mov dword ptr [ebp-08], eax
:00415F26 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415F29 51                      push ecx
:00415F2A E84D020000              call 0041617C
:00415F2F 83C404                  add esp, 00000004
:00415F32 6801010000              push 00000101
:00415F37 6A00                    push 00000000
:00415F39 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05BE, ""
                                  |
:00415F3B 68BE050000              push 000005BE
:00415F40 8B55F8                  mov edx, dword ptr [ebp-08]
:00415F43 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F44 FF15AC864B00            Call dword ptr [004B86AC]
:00415F4A 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:00415F4B FF1590874B00            Call dword ptr [004B8790]
:00415F51 6801010000              push 00000101
:00415F56 6A00                    push 00000000
:00415F58 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05BF, ""
                                  |
:00415F5A 68BF050000              push 000005BF
:00415F5F 8B45F8                  mov eax, dword ptr [ebp-08]
:00415F62 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F63 FF15AC864B00            Call dword ptr [004B86AC]
:00415F69 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:00415F6A FF1590874B00            Call dword ptr [004B8790]
:00415F70 6801010000              push 00000101
:00415F75 6A00                    push 00000000
:00415F77 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05C0, ""
                                  |
:00415F79 68C0050000              push 000005C0
:00415F7E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415F81 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F82 FF15AC864B00            Call dword ptr [004B86AC]
:00415F88 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:00415F89 FF1590874B00            Call dword ptr [004B8790]
:00415F8F 6801010000              push 00000101
:00415F94 6A00                    push 00000000
:00415F96 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05C1, ""
                                  |
:00415F98 68C1050000              push 000005C1
:00415F9D 8B55F8                  mov edx, dword ptr [ebp-08]
:00415FA0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415FA1 FF15AC864B00            Call dword ptr [004B86AC]
:00415FA7 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:00415FA8 FF1590874B00            Call dword ptr [004B8790]
:00415FAE 8B45D0                  mov eax, dword ptr [ebp-30]
:00415FB1 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00415FB6 3DFF000000              cmp eax, 000000FF
:00415FBB 750C                    jne 00415FC9
:00415FBD C60568674700FF          mov byte ptr [00476768], FF
:00415FC4 E9AF010000              jmp 00416178

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415FBB(C)
|
:00415FC9 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00415FCC 81E1FF000000            and ecx, 000000FF
:00415FD2 51                      push ecx
:00415FD3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415FD6 E895080000              call 00416870
:00415FDB 8945FC                  mov dword ptr [ebp-04], eax

* Possible StringData Ref from Data Obj ->"M"
                                  |
:00415FDE C7459470674700          mov [ebp-6C], 00476770

* Possible StringData Ref from Data Obj ->"j"
                                  |
:00415FE5 C7459874674700          mov [ebp-68], 00476774

* Possible StringData Ref from Data Obj ->"}"
                                  |
:00415FEC C7459C78674700          mov [ebp-64], 00476778

* Possible StringData Ref from Data Obj ->"vj"
                                  |
:00415FF3 C745A07C674700          mov [ebp-60], 0047677C

* Possible StringData Ref from Data Obj ->"j"
                                  |
:00415FFA C745A484674700          mov [ebp-5C], 00476784

* Possible StringData Ref from Data Obj ->"Ԩ"
                                  |
:00416001 C745A88C674700          mov [ebp-58], 0047678C

* Possible StringData Ref from Data Obj ->"x"
                                  |
:00416008 C745AC94674700          mov [ebp-54], 00476794

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C2, "fh1
"
                                  |
:0041600F C745D4C2050000          mov [ebp-2C], 000005C2

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C3, "fh2
"
                                  |
:00416016 C745D8C3050000          mov [ebp-28], 000005C3

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C4, "fh3
"
                                  |
:0041601D C745DCC4050000          mov [ebp-24], 000005C4

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C5, "fh4
"
                                  |
:00416024 C745E0C5050000          mov [ebp-20], 000005C5
:0041602B C745B042010000          mov [ebp-50], 00000142
:00416032 C745B445010000          mov [ebp-4C], 00000145
:00416039 C745B83F010000          mov [ebp-48], 0000013F
:00416040 C745BC43010000          mov [ebp-44], 00000143
:00416047 C745C041010000          mov [ebp-40], 00000141
:0041604E C745C447010000          mov [ebp-3C], 00000147
:00416055 C745C840010000          mov [ebp-38], 00000140

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05BE, ""
                                  |
:0041605C C745E4BE050000          mov [ebp-1C], 000005BE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05BF, ""
                                  |
:00416063 C745E8BF050000          mov [ebp-18], 000005BF

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05C0, ""
                                  |
:0041606A C745ECC0050000          mov [ebp-14], 000005C0

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05C1, ""
                                  |
:00416071 C745F0C1050000          mov [ebp-10], 000005C1
:00416078 C745F400000000          mov [ebp-0C], 00000000
:0041607F C745CC00000000          mov [ebp-34], 00000000
:00416086 EB09                    jmp 00416091

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041616A(U)
|
:00416088 8B55CC                  mov edx, dword ptr [ebp-34]
:0041608B 83C201                  add edx, 00000001
:0041608E 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416086(U)
|
:00416091 837DCC07                cmp dword ptr [ebp-34], 00000007
:00416095 0F8DD4000000            jnl 0041616F
:0041609B 8A45CC                  mov al, byte ptr [ebp-34]
:0041609E 50                      push eax
:0041609F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004160A2 E8C991FFFF              call 0040F270
:004160A7 884590                  mov byte ptr [ebp-70], al
:004160AA 8B4D90                  mov ecx, dword ptr [ebp-70]
:004160AD 81E1FF000000            and ecx, 000000FF
:004160B3 85C9                    test ecx, ecx
:004160B5 0F84A7000000            je 00416162
:004160BB 8A55CC                  mov dl, byte ptr [ebp-34]
:004160BE 52                      push edx
:004160BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004160C2 E854DBFEFF              call 00403C1B
:004160C7 85C0                    test eax, eax
:004160C9 0F8493000000            je 00416162
:004160CF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004160D2 8B4C85E4                mov ecx, dword ptr [ebp+4*eax-1C]
:004160D6 51                      push ecx
:004160D7 8B55F8                  mov edx, dword ptr [ebp-08]
:004160DA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004160DB FF15AC864B00            Call dword ptr [004B86AC]
:004160E1 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:004160E2 FF15B8864B00            Call dword ptr [004B86B8]
:004160E8 89458C                  mov dword ptr [ebp-74], eax
:004160EB 6A20                    push 00000020
:004160ED 6A20                    push 00000020
:004160EF 8B45CC                  mov eax, dword ptr [ebp-34]
:004160F2 8B4C85B0                mov ecx, dword ptr [ebp+4*eax-50]
:004160F6 51                      push ecx
:004160F7 8B558C                  mov edx, dword ptr [ebp-74]
:004160FA 52                      push edx
:004160FB E833760000              call 0041D733
:00416100 83C410                  add esp, 00000010
:00416103 8B458C                  mov eax, dword ptr [ebp-74]
:00416106 50                      push eax
:00416107 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041610A 8B548DE4                mov edx, dword ptr [ebp+4*ecx-1C]
:0041610E 52                      push edx
:0041610F 8B45F8                  mov eax, dword ptr [ebp-08]
:00416112 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416113 FF15AC864B00            Call dword ptr [004B86AC]
:00416119 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0041611A FF15BC864B00            Call dword ptr [004B86BC]
:00416120 8B4D90                  mov ecx, dword ptr [ebp-70]
:00416123 81E1FF000000            and ecx, 000000FF
:00416129 51                      push ecx
:0041612A 8B55CC                  mov edx, dword ptr [ebp-34]
:0041612D 8B449594                mov eax, dword ptr [ebp+4*edx-6C]
:00416131 50                      push eax

* Possible StringData Ref from Data Obj ->"%s
%u"
                                  |
:00416132 689C674700              push 0047679C
:00416137 E88B170000              call 004178C7
:0041613C 83C40C                  add esp, 0000000C
:0041613F 50                      push eax
:00416140 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416143 8B548DD4                mov edx, dword ptr [ebp+4*ecx-2C]
:00416147 52                      push edx
:00416148 8B45F8                  mov eax, dword ptr [ebp-08]
:0041614B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041614C FF15AC864B00            Call dword ptr [004B86AC]
:00416152 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00416153 FF15B0864B00            Call dword ptr [004B86B0]
:00416159 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041615C 83C101                  add ecx, 00000001
:0041615F 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004160B5(C), :004160C9(C)
|
:00416162 837DF404                cmp dword ptr [ebp-0C], 00000004
:00416166 7C02                    jl 0041616A
:00416168 EB05                    jmp 0041616F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416166(C)
|
:0041616A E919FFFFFF              jmp 00416088

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416095(C), :00416168(U)
|
:0041616F 8A55D0                  mov dl, byte ptr [ebp-30]
:00416172 881568674700            mov byte ptr [00476768], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415F16(U), :00415FC4(U)
|
:00416178 8BE5                    mov esp, ebp
:0041617A 5D                      pop ebp
:0041617B C3                      ret



* Referenced by a CALL at Addresses:
|:00415F2A   , :00416279   
|
:0041617C 55                      push ebp
:0041617D 8BEC                    mov ebp, esp
:0041617F 68CC574800              push 004857CC

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C2, "fh1
"
                                  |
:00416184 68C2050000              push 000005C2
:00416189 8B4508                  mov eax, dword ptr [ebp+08]
:0041618C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041618D FF15AC864B00            Call dword ptr [004B86AC]
:00416193 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00416194 FF15B0864B00            Call dword ptr [004B86B0]
:0041619A 68D0574800              push 004857D0

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C3, "fh2
"
                                  |
:0041619F 68C3050000              push 000005C3
:004161A4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004161A7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004161A8 FF15AC864B00            Call dword ptr [004B86AC]
:004161AE 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004161AF FF15B0864B00            Call dword ptr [004B86B0]
:004161B5 68D4574800              push 004857D4

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C4, "fh3
"
                                  |
:004161BA 68C4050000              push 000005C4
:004161BF 8B5508                  mov edx, dword ptr [ebp+08]
:004161C2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004161C3 FF15AC864B00            Call dword ptr [004B86AC]
:004161C9 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004161CA FF15B0864B00            Call dword ptr [004B86B0]
:004161D0 68D8574800              push 004857D8

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C5, "fh4
"
                                  |
:004161D5 68C5050000              push 000005C5
:004161DA 8B4508                  mov eax, dword ptr [ebp+08]
:004161DD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004161DE FF15AC864B00            Call dword ptr [004B86AC]
:004161E4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004161E5 FF15B0864B00            Call dword ptr [004B86B0]
:004161EB 5D                      pop ebp
:004161EC C3                      ret


:004161ED 55                      push ebp
:004161EE 8BEC                    mov ebp, esp
:004161F0 83EC08                  sub esp, 00000008
:004161F3 8B450C                  mov eax, dword ptr [ebp+0C]
:004161F6 8945FC                  mov dword ptr [ebp-04], eax
:004161F9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004161FC 83E92B                  sub ecx, 0000002B
:004161FF 894DFC                  mov dword ptr [ebp-04], ecx
:00416202 817DFCE6000000          cmp dword ptr [ebp-04], 000000E6
:00416209 0F8798010000            ja 004163A7
:0041620F 8B45FC                  mov eax, dword ptr [ebp-04]
:00416212 33D2                    xor edx, edx
:00416214 8A90C3634100            mov dl, byte ptr [eax+004163C3]
:0041621A FF2495AF634100          jmp dword ptr [4*edx+004163AF]
:00416221 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00416227 E884060000              call 004168B0
:0041622C 50                      push eax
:0041622D 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00416233 E858060000              call 00416890
:00416238 50                      push eax
:00416239 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041623C 51                      push ecx
:0041623D E8ADC60300              call 004528EF
:00416242 83C40C                  add esp, 0000000C
:00416245 8B5508                  mov edx, dword ptr [ebp+08]
:00416248 52                      push edx
:00416249 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0041624F E874AF0300              call 004511C8
:00416254 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0041625A E8EABB0300              call 00451E49
:0041625F 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00416265 E83EB60300              call 004518A8
:0041626A 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00416270 E8D4AF0300              call 00451249
:00416275 8B4508                  mov eax, dword ptr [ebp+08]
:00416278 50                      push eax
:00416279 E8FEFEFFFF              call 0041617C
:0041627E 83C404                  add esp, 00000004
:00416281 6889000000              push 00000089
:00416286 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041628C 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0041628D FF15E8864B00            Call dword ptr [004B86E8]
:00416293 50                      push eax
:00416294 6ADE                    push FFFFFFDE
:00416296 8B5508                  mov edx, dword ptr [ebp+08]
:00416299 52                      push edx

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:0041629A FF15A0874B00            Call dword ptr [004B87A0]
:004162A0 E902010000              jmp 004163A7
:004162A5 8B4510                  mov eax, dword ptr [ebp+10]
:004162A8 C1E810                  shr eax, 10
:004162AB 25FFFF0000              and eax, 0000FFFF
:004162B0 25FFFF0000              and eax, 0000FFFF
:004162B5 85C0                    test eax, eax
:004162B7 0F85BE000000            jne 0041637B
:004162BD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004162C0 81E1FFFF0000            and ecx, 0000FFFF
:004162C6 894DF8                  mov dword ptr [ebp-08], ecx
:004162C9 837DF801                cmp dword ptr [ebp-08], 00000001
:004162CD 7415                    je 004162E4
:004162CF 837DF802                cmp dword ptr [ebp-08], 00000002
:004162D3 7441                    je 00416316
:004162D5 837DF809                cmp dword ptr [ebp-08], 00000009
:004162D9 0F848F000000            je 0041636E
:004162DF E997000000              jmp 0041637B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004162CD(C)
|
:004162E4 8B0D78084B00            mov ecx, dword ptr [004B0878]
:004162EA E8C1050000              call 004168B0
:004162EF 50                      push eax
:004162F0 8B0D78084B00            mov ecx, dword ptr [004B0878]
:004162F6 E895050000              call 00416890
:004162FB 50                      push eax
:004162FC 8B5508                  mov edx, dword ptr [ebp+08]
:004162FF 52                      push edx
:00416300 E8A4C70300              call 00452AA9
:00416305 83C40C                  add esp, 0000000C
:00416308 6A00                    push 00000000
:0041630A 8B4508                  mov eax, dword ptr [ebp+08]
:0041630D 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041630E FF15B0874B00            Call dword ptr [004B87B0]
:00416314 EB65                    jmp 0041637B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004162D3(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00416316 68FF000000              push 000000FF
:0041631B 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00416321 E8E5AB0300              call 00450F0B
:00416326 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0041632C E827B60300              call 00451958
:00416331 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00416337 E874050000              call 004168B0
:0041633C 50                      push eax
:0041633D 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00416343 E848050000              call 00416890
:00416348 50                      push eax
:00416349 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041634C 51                      push ecx
:0041634D E857C70300              call 00452AA9
:00416352 83C40C                  add esp, 0000000C
:00416355 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0041635B E877BD0300              call 004520D7
:00416360 6A00                    push 00000000
:00416362 8B5508                  mov edx, dword ptr [ebp+08]
:00416365 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00416366 FF15B0874B00            Call dword ptr [004B87B0]
:0041636C EB0D                    jmp 0041637B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004162D9(C)
|
:0041636E 683A0C0000              push 00000C3A
:00416373 E8EAD50400              call 00463962
:00416378 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004162B7(C), :004162DF(U), :00416314(U), :0041636C(U)
|
:0041637B EB2A                    jmp 004163A7
:0041637D 8B4514                  mov eax, dword ptr [ebp+14]
:00416380 50                      push eax
:00416381 E8A2F7FFFF              call 00415B28
:00416386 83C404                  add esp, 00000004
:00416389 B801000000              mov eax, 00000001
:0041638E EB19                    jmp 004163A9
:00416390 8B4D14                  mov ecx, dword ptr [ebp+14]
:00416393 51                      push ecx
:00416394 8B5508                  mov edx, dword ptr [ebp+08]
:00416397 52                      push edx
:00416398 E8A4F7FFFF              call 00415B41
:0041639D 83C408                  add esp, 00000008
:004163A0 B801000000              mov eax, 00000001
:004163A5 EB02                    jmp 004163A9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416209(C), :004162A0(U), :0041637B(U)
|
:004163A7 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041638E(U), :004163A5(U)
|
:004163A9 8BE5                    mov esp, ebp
:004163AB 5D                      pop ebp
:004163AC C21000                  ret 0010



:004163AF 90634100                DWORD 00416390
:004163B3 7D634100                DWORD 0041637D
:004163B7 21624100                DWORD 00416221
:004163BB A5624100                DWORD 004162A5
:004163BF A7634100                DWORD 004163A7


:004163C3 0001                    add byte ptr [ecx], al
:004163C5 0404                    add al, 04
:004163C7 0404                    add al, 04
:004163C9 0404                    add al, 04
:004163CB 0404                    add al, 04
:004163CD 0404                    add al, 04
:004163CF 0404                    add al, 04
:004163D1 0404                    add al, 04
:004163D3 0404                    add al, 04
:004163D5 0404                    add al, 04
:004163D7 0404                    add al, 04
:004163D9 0404                    add al, 04
:004163DB 0404                    add al, 04
:004163DD 0404                    add al, 04
:004163DF 0404                    add al, 04
:004163E1 0404                    add al, 04
:004163E3 0404                    add al, 04
:004163E5 0404                    add al, 04
:004163E7 0404                    add al, 04
:004163E9 0404                    add al, 04
:004163EB 0404                    add al, 04
:004163ED 0404                    add al, 04
:004163EF 0404                    add al, 04
:004163F1 0404                    add al, 04
:004163F3 0404                    add al, 04
:004163F5 0404                    add al, 04
:004163F7 0404                    add al, 04
:004163F9 0404                    add al, 04
:004163FB 0404                    add al, 04
:004163FD 0404                    add al, 04
:004163FF 0404                    add al, 04
:00416401 0404                    add al, 04
:00416403 0404                    add al, 04
:00416405 0404                    add al, 04
:00416407 0404                    add al, 04
:00416409 0404                    add al, 04
:0041640B 0404                    add al, 04
:0041640D 0404                    add al, 04
:0041640F 0404                    add al, 04
:00416411 0404                    add al, 04
:00416413 0404                    add al, 04
:00416415 0404                    add al, 04
:00416417 0404                    add al, 04
:00416419 0404                    add al, 04
:0041641B 0404                    add al, 04
:0041641D 0404                    add al, 04
:0041641F 0404                    add al, 04
:00416421 0404                    add al, 04
:00416423 0404                    add al, 04
:00416425 0404                    add al, 04
:00416427 0404                    add al, 04
:00416429 0404                    add al, 04
:0041642B 0404                    add al, 04
:0041642D 0404                    add al, 04
:0041642F 0404                    add al, 04
:00416431 0404                    add al, 04
:00416433 0404                    add al, 04
:00416435 0404                    add al, 04
:00416437 0404                    add al, 04
:00416439 0404                    add al, 04
:0041643B 0404                    add al, 04
:0041643D 0404                    add al, 04
:0041643F 0404                    add al, 04
:00416441 0404                    add al, 04
:00416443 0404                    add al, 04
:00416445 0404                    add al, 04
:00416447 0404                    add al, 04
:00416449 0404                    add al, 04
:0041644B 0404                    add al, 04
:0041644D 0404                    add al, 04
:0041644F 0404                    add al, 04
:00416451 0404                    add al, 04
:00416453 0404                    add al, 04
:00416455 0404                    add al, 04
:00416457 0404                    add al, 04
:00416459 0404                    add al, 04
:0041645B 0404                    add al, 04
:0041645D 0404                    add al, 04
:0041645F 0404                    add al, 04
:00416461 0404                    add al, 04
:00416463 0404                    add al, 04
:00416465 0404                    add al, 04
:00416467 0404                    add al, 04
:00416469 0404                    add al, 04
:0041646B 0404                    add al, 04
:0041646D 0404                    add al, 04
:0041646F 0404                    add al, 04
:00416471 0404                    add al, 04
:00416473 0404                    add al, 04
:00416475 0404                    add al, 04
:00416477 0404                    add al, 04
:00416479 0404                    add al, 04
:0041647B 0404                    add al, 04
:0041647D 0404                    add al, 04
:0041647F 0404                    add al, 04
:00416481 0404                    add al, 04
:00416483 0404                    add al, 04
:00416485 0404                    add al, 04
:00416487 0404                    add al, 04
:00416489 0404                    add al, 04
:0041648B 0404                    add al, 04
:0041648D 0404                    add al, 04
:0041648F 0404                    add al, 04
:00416491 0404                    add al, 04
:00416493 0404                    add al, 04
:00416495 0404                    add al, 04
:00416497 0404                    add al, 04
:00416499 0404                    add al, 04
:0041649B 0404                    add al, 04
:0041649D 0404                    add al, 04
:0041649F 0404                    add al, 04
:004164A1 0404                    add al, 04
:004164A3 0404                    add al, 04
:004164A5 0404                    add al, 04
:004164A7 0402                    add al, 02
:004164A9 03                      BYTE 03h


* Referenced by a CALL at Address:
|:00414A9A   
|
:004164AA 55                      push ebp
:004164AB 8BEC                    mov ebp, esp
:004164AD E8D70A0100              call 00426F89
:004164B2 83F801                  cmp eax, 00000001
:004164B5 7407                    je 004164BE

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004164B7 B8FF000000              mov eax, 000000FF
:004164BC EB18                    jmp 004164D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004164B5(C)
|
:004164BE C6050C414A0000          mov byte ptr [004A410C], 00
:004164C5 6880000000              push 00000080
:004164CA B9F8134800              mov ecx, 004813F8
:004164CF E82287FFFF              call 0040EBF6
:004164D4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004164BC(U)
|
:004164D6 5D                      pop ebp
:004164D7 C3                      ret


:004164D8 55                      push ebp
:004164D9 8BEC                    mov ebp, esp
:004164DB 83EC4C                  sub esp, 0000004C
:004164DE 8B450C                  mov eax, dword ptr [ebp+0C]
:004164E1 8945B8                  mov dword ptr [ebp-48], eax
:004164E4 837DB80F                cmp dword ptr [ebp-48], 0000000F
:004164E8 7711                    ja 004164FB
:004164EA 837DB80F                cmp dword ptr [ebp-48], 0000000F
:004164EE 7463                    je 00416553
:004164F0 837DB802                cmp dword ptr [ebp-48], 00000002
:004164F4 744B                    je 00416541
:004164F6 E9EB000000              jmp 004165E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004164E8(C)
|
:004164FB 817DB810010000          cmp dword ptr [ebp-48], 00000110
:00416502 7412                    je 00416516
:00416504 817DB811010000          cmp dword ptr [ebp-48], 00000111
:0041650B 0F84AC000000            je 004165BD
:00416511 E9D0000000              jmp 004165E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416502(C)
|
:00416516 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416519 51                      push ecx
:0041651A E8CF000000              call 004165EE
:0041651F 83C404                  add esp, 00000004
:00416522 6A00                    push 00000000
:00416524 B910584800              mov ecx, 00485810
:00416529 E832E10300              call 00454660
:0041652E 50                      push eax
:0041652F E8F8E2FFFF              call 0041482C
:00416534 83C408                  add esp, 00000008
:00416537 A378574800              mov dword ptr [00485778], eax
:0041653C E9A5000000              jmp 004165E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004164F4(C)
|
:00416541 8B1578574800            mov edx, dword ptr [00485778]
:00416547 52                      push edx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00416548 FF158C844B00            Call dword ptr [004B848C]
:0041654E E993000000              jmp 004165E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004164EE(C)
|
:00416553 8D45BC                  lea eax, dword ptr [ebp-44]
:00416556 50                      push eax
:00416557 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041655A 51                      push ecx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:0041655B FF15D0864B00            Call dword ptr [004B86D0]
:00416561 8B55BC                  mov edx, dword ptr [ebp-44]
:00416564 52                      push edx

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:00416565 FF15A0844B00            Call dword ptr [004B84A0]
:0041656B 8945FC                  mov dword ptr [ebp-04], eax
:0041656E A178574800              mov eax, dword ptr [00485778]
:00416573 50                      push eax
:00416574 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416577 51                      push ecx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00416578 FF159C844B00            Call dword ptr [004B849C]
:0041657E 682000CC00              push 00CC0020
:00416583 6A00                    push 00000000
:00416585 6A00                    push 00000000
:00416587 8B55FC                  mov edx, dword ptr [ebp-04]
:0041658A 52                      push edx
:0041658B 6890010000              push 00000190
:00416590 6880020000              push 00000280
:00416595 6A00                    push 00000000
:00416597 6A01                    push 00000001
:00416599 8B45BC                  mov eax, dword ptr [ebp-44]
:0041659C 50                      push eax

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:0041659D FF1598844B00            Call dword ptr [004B8498]
:004165A3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004165A6 51                      push ecx

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:004165A7 FF15E4844B00            Call dword ptr [004B84E4]
:004165AD 8D55BC                  lea edx, dword ptr [ebp-44]
:004165B0 52                      push edx
:004165B1 8B4508                  mov eax, dword ptr [ebp+08]
:004165B4 50                      push eax

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:004165B5 FF15D4864B00            Call dword ptr [004B86D4]
:004165BB EB29                    jmp 004165E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041650B(C)
|
:004165BD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004165C0 81E1FFFF0000            and ecx, 0000FFFF
:004165C6 894DB4                  mov dword ptr [ebp-4C], ecx
:004165C9 837DB400                cmp dword ptr [ebp-4C], 00000000
:004165CD 7E17                    jle 004165E6
:004165CF 837DB402                cmp dword ptr [ebp-4C], 00000002
:004165D3 7E02                    jle 004165D7
:004165D5 EB0F                    jmp 004165E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004165D3(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004165D7 68FF000000              push 000000FF
:004165DC 8B5508                  mov edx, dword ptr [ebp+08]
:004165DF 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004165E0 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004164F6(U), :00416511(U), :0041653C(U), :0041654E(U), :004165BB(U)
|:004165CD(C), :004165D5(U)
|
:004165E6 33C0                    xor eax, eax
:004165E8 8BE5                    mov esp, ebp
:004165EA 5D                      pop ebp
:004165EB C21000                  ret 0010



* Referenced by a CALL at Address:
|:0041651A   
|
:004165EE 55                      push ebp
:004165EF 8BEC                    mov ebp, esp
:004165F1 83EC28                  sub esp, 00000028

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004165F4 6A10                    push 00000010

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004165F6 FF1578874B00            Call dword ptr [004B8778]
:004165FC 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004165FF 6A11                    push 00000011

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00416601 FF1578874B00            Call dword ptr [004B8778]
:00416607 8945F4                  mov dword ptr [ebp-0C], eax
:0041660A 8B45F0                  mov eax, dword ptr [ebp-10]
:0041660D 2D80020000              sub eax, 00000280
:00416612 99                      cdq
:00416613 2BC2                    sub eax, edx
:00416615 D1F8                    sar eax, 1
:00416617 8945D8                  mov dword ptr [ebp-28], eax
:0041661A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041661D 2D90010000              sub eax, 00000190
:00416622 99                      cdq
:00416623 2BC2                    sub eax, edx
:00416625 D1F8                    sar eax, 1
:00416627 8945DC                  mov dword ptr [ebp-24], eax
:0041662A 8D45E0                  lea eax, dword ptr [ebp-20]
:0041662D 50                      push eax
:0041662E 6A01                    push 00000001
:00416630 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416633 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416634 FF15AC864B00            Call dword ptr [004B86AC]
:0041663A 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0041663B FF15C8864B00            Call dword ptr [004B86C8]
:00416641 C745FC82020000          mov [ebp-04], 00000282

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00416648 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041664A FF1578874B00            Call dword ptr [004B8778]
:00416650 8B55EC                  mov edx, dword ptr [ebp-14]
:00416653 8D840296010000          lea eax, dword ptr [edx+eax+00000196]
:0041665A 8945F8                  mov dword ptr [ebp-08], eax
:0041665D 6A00                    push 00000000
:0041665F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00416662 51                      push ecx
:00416663 8B55FC                  mov edx, dword ptr [ebp-04]
:00416666 52                      push edx
:00416667 8B45DC                  mov eax, dword ptr [ebp-24]
:0041666A 50                      push eax
:0041666B 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0041666E 51                      push ecx
:0041666F 8B5508                  mov edx, dword ptr [ebp+08]
:00416672 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00416673 FF15FC864B00            Call dword ptr [004B86FC]
:00416679 6A00                    push 00000000
:0041667B 6A01                    push 00000001
:0041667D 8B4508                  mov eax, dword ptr [ebp+08]
:00416680 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416681 FF15AC864B00            Call dword ptr [004B86AC]
:00416687 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00416688 FF15E4864B00            Call dword ptr [004B86E4]
:0041668E 6A00                    push 00000000
:00416690 6865050000              push 00000565
:00416695 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416698 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416699 FF15AC864B00            Call dword ptr [004B86AC]
:0041669F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004166A0 FF15E4864B00            Call dword ptr [004B86E4]
:004166A6 6A01                    push 00000001
:004166A8 6A00                    push 00000000
:004166AA 6A00                    push 00000000
:004166AC 6891010000              push 00000191
:004166B1 B880020000              mov eax, 00000280
:004166B6 2B45E8                  sub eax, dword ptr [ebp-18]
:004166B9 99                      cdq
:004166BA 2BC2                    sub eax, edx
:004166BC D1F8                    sar eax, 1
:004166BE 50                      push eax
:004166BF 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004166C1 6A02                    push 00000002
:004166C3 8B5508                  mov edx, dword ptr [ebp+08]
:004166C6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004166C7 FF15AC864B00            Call dword ptr [004B86AC]
:004166CD 50                      push eax

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:004166CE FF15AC874B00            Call dword ptr [004B87AC]
:004166D4 8BE5                    mov esp, ebp
:004166D6 5D                      pop ebp
:004166D7 C3                      ret



* Referenced by a CALL at Address:
|:00463A73   
|
:004166D8 55                      push ebp
:004166D9 8BEC                    mov ebp, esp
:004166DB 6A00                    push 00000000
:004166DD 68D8644100              push 004164D8
:004166E2 8B450C                  mov eax, dword ptr [ebp+0C]
:004166E5 50                      push eax

* Possible Reference to Dialog: DialogID_0132 
                                  |
:004166E6 6832010000              push 00000132
:004166EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004166EE 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:004166EF FF1520874B00            Call dword ptr [004B8720]
:004166F5 5D                      pop ebp
:004166F6 C3                      ret


:004166F7 CC                      int 03
:004166F8 CC                      int 03
:004166F9 CC                      int 03
:004166FA CC                      int 03
:004166FB CC                      int 03
:004166FC CC                      int 03
:004166FD CC                      int 03
:004166FE CC                      int 03
:004166FF CC                      int 03

* Referenced by a CALL at Addresses:
|:004159AC   , :00416E08   , :00416E1C   
|
:00416700 55                      push ebp
:00416701 8BEC                    mov ebp, esp
:00416703 51                      push ecx
:00416704 894DFC                  mov dword ptr [ebp-04], ecx
:00416707 8B45FC                  mov eax, dword ptr [ebp-04]
:0041670A 8A4012                  mov al, byte ptr [eax+12]
:0041670D 8BE5                    mov esp, ebp
:0041670F 5D                      pop ebp
:00416710 C3                      ret


:00416711 CC                      int 03
:00416712 CC                      int 03
:00416713 CC                      int 03
:00416714 CC                      int 03
:00416715 CC                      int 03
:00416716 CC                      int 03
:00416717 CC                      int 03
:00416718 CC                      int 03
:00416719 CC                      int 03
:0041671A CC                      int 03
:0041671B CC                      int 03
:0041671C CC                      int 03
:0041671D CC                      int 03
:0041671E CC                      int 03
:0041671F CC                      int 03

* Referenced by a CALL at Address:
|:004159C9   
|
:00416720 55                      push ebp
:00416721 8BEC                    mov ebp, esp
:00416723 51                      push ecx
:00416724 894DFC                  mov dword ptr [ebp-04], ecx
:00416727 8B4508                  mov eax, dword ptr [ebp+08]
:0041672A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041672D 8A444109                mov al, byte ptr [ecx+2*eax+09]
:00416731 8BE5                    mov esp, ebp
:00416733 5D                      pop ebp
:00416734 C20400                  ret 0004


:00416737 CC                      int 03
:00416738 CC                      int 03
:00416739 CC                      int 03
:0041673A CC                      int 03
:0041673B CC                      int 03
:0041673C CC                      int 03
:0041673D CC                      int 03
:0041673E CC                      int 03
:0041673F CC                      int 03

* Referenced by a CALL at Address:
|:004159E6   
|
:00416740 55                      push ebp
:00416741 8BEC                    mov ebp, esp
:00416743 51                      push ecx
:00416744 894DFC                  mov dword ptr [ebp-04], ecx
:00416747 8B4508                  mov eax, dword ptr [ebp+08]
:0041674A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041674D 8A44410A                mov al, byte ptr [ecx+2*eax+0A]
:00416751 8BE5                    mov esp, ebp
:00416753 5D                      pop ebp
:00416754 C20400                  ret 0004


:00416757 CC                      int 03
:00416758 CC                      int 03
:00416759 CC                      int 03
:0041675A CC                      int 03
:0041675B CC                      int 03
:0041675C CC                      int 03
:0041675D CC                      int 03
:0041675E CC                      int 03
:0041675F CC                      int 03

* Referenced by a CALL at Address:
|:0041585E   
|
:00416760 55                      push ebp
:00416761 8BEC                    mov ebp, esp
:00416763 51                      push ecx
:00416764 894DFC                  mov dword ptr [ebp-04], ecx
:00416767 8B45FC                  mov eax, dword ptr [ebp-04]
:0041676A 8A4D08                  mov cl, byte ptr [ebp+08]
:0041676D 8808                    mov byte ptr [eax], cl
:0041676F 8BE5                    mov esp, ebp
:00416771 5D                      pop ebp
:00416772 C20400                  ret 0004


:00416775 CC                      int 03
:00416776 CC                      int 03
:00416777 CC                      int 03
:00416778 CC                      int 03
:00416779 CC                      int 03
:0041677A CC                      int 03
:0041677B CC                      int 03
:0041677C CC                      int 03
:0041677D CC                      int 03
:0041677E CC                      int 03
:0041677F CC                      int 03

* Referenced by a CALL at Addresses:
|:00415AA3   , :00415AB9   , :0045A2F3   
|
:00416780 55                      push ebp
:00416781 8BEC                    mov ebp, esp
:00416783 51                      push ecx
:00416784 894DFC                  mov dword ptr [ebp-04], ecx
:00416787 8B45FC                  mov eax, dword ptr [ebp-04]
:0041678A 8A00                    mov al, byte ptr [eax]
:0041678C 8BE5                    mov esp, ebp
:0041678E 5D                      pop ebp
:0041678F C3                      ret



* Referenced by a CALL at Addresses:
|:00415BC2   , :00419331   , :0041BA1F   , :0041E3CA   , :0045B859   
|:0045C777   , :0045E3E6   
|
:00416790 55                      push ebp
:00416791 8BEC                    mov ebp, esp
:00416793 51                      push ecx
:00416794 894DFC                  mov dword ptr [ebp-04], ecx
:00416797 8B45FC                  mov eax, dword ptr [ebp-04]
:0041679A 8B4010                  mov eax, dword ptr [eax+10]
:0041679D 8BE5                    mov esp, ebp
:0041679F 5D                      pop ebp
:004167A0 C3                      ret


:004167A1 CC                      int 03
:004167A2 CC                      int 03
:004167A3 CC                      int 03
:004167A4 CC                      int 03
:004167A5 CC                      int 03
:004167A6 CC                      int 03
:004167A7 CC                      int 03
:004167A8 CC                      int 03
:004167A9 CC                      int 03
:004167AA CC                      int 03
:004167AB CC                      int 03
:004167AC CC                      int 03
:004167AD CC                      int 03
:004167AE CC                      int 03
:004167AF CC                      int 03

* Referenced by a CALL at Address:
|:004149CD   
|
:004167B0 55                      push ebp
:004167B1 8BEC                    mov ebp, esp
:004167B3 51                      push ecx
:004167B4 894DFC                  mov dword ptr [ebp-04], ecx
:004167B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004167BA 33C9                    xor ecx, ecx
:004167BC 8A4820                  mov cl, byte ptr [eax+20]
:004167BF 8BC1                    mov eax, ecx
:004167C1 8BE5                    mov esp, ebp
:004167C3 5D                      pop ebp
:004167C4 C3                      ret


:004167C5 CC                      int 03
:004167C6 CC                      int 03
:004167C7 CC                      int 03
:004167C8 CC                      int 03
:004167C9 CC                      int 03
:004167CA CC                      int 03
:004167CB CC                      int 03
:004167CC CC                      int 03
:004167CD CC                      int 03
:004167CE CC                      int 03
:004167CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00414A09   , :00414A2C   , :00414A4F   
|
:004167D0 55                      push ebp
:004167D1 8BEC                    mov ebp, esp
:004167D3 51                      push ecx
:004167D4 894DFC                  mov dword ptr [ebp-04], ecx
:004167D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004167DA 8A4D08                  mov cl, byte ptr [ebp+08]
:004167DD 884822                  mov byte ptr [eax+22], cl
:004167E0 8BE5                    mov esp, ebp
:004167E2 5D                      pop ebp
:004167E3 C20400                  ret 0004


:004167E6 CC                      int 03
:004167E7 CC                      int 03
:004167E8 CC                      int 03
:004167E9 CC                      int 03
:004167EA CC                      int 03
:004167EB CC                      int 03
:004167EC CC                      int 03
:004167ED CC                      int 03
:004167EE CC                      int 03
:004167EF CC                      int 03

* Referenced by a CALL at Address:
|:004146C7   
|
:004167F0 55                      push ebp
:004167F1 8BEC                    mov ebp, esp
:004167F3 83EC08                  sub esp, 00000008
:004167F6 894DF8                  mov dword ptr [ebp-08], ecx
:004167F9 C745FC00000000          mov [ebp-04], 00000000
:00416800 EB09                    jmp 0041680B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041681E(U)
|
:00416802 8B45FC                  mov eax, dword ptr [ebp-04]
:00416805 83C001                  add eax, 00000001
:00416808 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416800(U)
|
:0041680B 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041680F 7D0F                    jge 00416820
:00416811 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416814 8B55F8                  mov edx, dword ptr [ebp-08]
:00416817 C7048A00000000          mov dword ptr [edx+4*ecx], 00000000
:0041681E EBE2                    jmp 00416802

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041680F(C)
|
:00416820 8B45F8                  mov eax, dword ptr [ebp-08]
:00416823 C6401800                mov [eax+18], 00
:00416827 8B45F8                  mov eax, dword ptr [ebp-08]
:0041682A 8BE5                    mov esp, ebp
:0041682C 5D                      pop ebp
:0041682D C3                      ret


:0041682E CC                      int 03
:0041682F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040FFDC   , :00415F1E   , :00451FBD   
|
:00416830 55                      push ebp
:00416831 8BEC                    mov ebp, esp
:00416833 51                      push ecx
:00416834 894DFC                  mov dword ptr [ebp-04], ecx
:00416837 8B45FC                  mov eax, dword ptr [ebp-04]
:0041683A 8B4024                  mov eax, dword ptr [eax+24]
:0041683D 8BE5                    mov esp, ebp
:0041683F 5D                      pop ebp
:00416840 C3                      ret


:00416841 CC                      int 03
:00416842 CC                      int 03
:00416843 CC                      int 03
:00416844 CC                      int 03
:00416845 CC                      int 03
:00416846 CC                      int 03
:00416847 CC                      int 03
:00416848 CC                      int 03
:00416849 CC                      int 03
:0041684A CC                      int 03
:0041684B CC                      int 03
:0041684C CC                      int 03
:0041684D CC                      int 03
:0041684E CC                      int 03
:0041684F CC                      int 03

* Referenced by a CALL at Addresses:
|:00415D66   , :00415D81   , :00415D98   , :00452C12   , :00452C2D   
|
:00416850 55                      push ebp
:00416851 8BEC                    mov ebp, esp
:00416853 51                      push ecx
:00416854 894DFC                  mov dword ptr [ebp-04], ecx
:00416857 8B45FC                  mov eax, dword ptr [ebp-04]
:0041685A 8A4008                  mov al, byte ptr [eax+08]
:0041685D 8BE5                    mov esp, ebp
:0041685F 5D                      pop ebp
:00416860 C3                      ret


:00416861 CC                      int 03
:00416862 CC                      int 03
:00416863 CC                      int 03
:00416864 CC                      int 03
:00416865 CC                      int 03
:00416866 CC                      int 03
:00416867 CC                      int 03
:00416868 CC                      int 03
:00416869 CC                      int 03
:0041686A CC                      int 03
:0041686B CC                      int 03
:0041686C CC                      int 03
:0041686D CC                      int 03
:0041686E CC                      int 03
:0041686F CC                      int 03

* Referenced by a CALL at Addresses:
|:00415DA9   , :00415FD6   , :00451F38   , :0045236D   
|
:00416870 55                      push ebp
:00416871 8BEC                    mov ebp, esp
:00416873 51                      push ecx
:00416874 894DFC                  mov dword ptr [ebp-04], ecx
:00416877 8B45FC                  mov eax, dword ptr [ebp-04]
:0041687A 8B08                    mov ecx, dword ptr [eax]
:0041687C 8B5508                  mov edx, dword ptr [ebp+08]
:0041687F 8B0491                  mov eax, dword ptr [ecx+4*edx]
:00416882 8BE5                    mov esp, ebp
:00416884 5D                      pop ebp
:00416885 C20400                  ret 0004


:00416888 CC                      int 03
:00416889 CC                      int 03
:0041688A CC                      int 03
:0041688B CC                      int 03
:0041688C CC                      int 03
:0041688D CC                      int 03
:0041688E CC                      int 03
:0041688F CC                      int 03

* Referenced by a CALL at Addresses:
|:00416233   , :004162F6   , :00416343   , :00452667   , :004526CD   
|:00452725   
|
:00416890 55                      push ebp
:00416891 8BEC                    mov ebp, esp
:00416893 51                      push ecx
:00416894 894DFC                  mov dword ptr [ebp-04], ecx
:00416897 8B45FC                  mov eax, dword ptr [ebp-04]
:0041689A 8B8010010000            mov eax, dword ptr [eax+00000110]
:004168A0 8BE5                    mov esp, ebp
:004168A2 5D                      pop ebp
:004168A3 C3                      ret


:004168A4 CC                      int 03
:004168A5 CC                      int 03
:004168A6 CC                      int 03
:004168A7 CC                      int 03
:004168A8 CC                      int 03
:004168A9 CC                      int 03
:004168AA CC                      int 03
:004168AB CC                      int 03
:004168AC CC                      int 03
:004168AD CC                      int 03
:004168AE CC                      int 03
:004168AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00416227   , :004162EA   , :00416337   , :0045265B   , :004526C1   
|:00452719   
|
:004168B0 55                      push ebp
:004168B1 8BEC                    mov ebp, esp
:004168B3 51                      push ecx
:004168B4 894DFC                  mov dword ptr [ebp-04], ecx
:004168B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004168BA 8B8014010000            mov eax, dword ptr [eax+00000114]
:004168C0 8BE5                    mov esp, ebp
:004168C2 5D                      pop ebp
:004168C3 C3                      ret


:004168C4 CC                      int 03
:004168C5 CC                      int 03
:004168C6 CC                      int 03
:004168C7 CC                      int 03
:004168C8 CC                      int 03
:004168C9 CC                      int 03
:004168CA CC                      int 03
:004168CB CC                      int 03
:004168CC CC                      int 03
:004168CD CC                      int 03
:004168CE CC                      int 03
:004168CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00414A1B   , :00414A3E   , :00414A61   , :00423146   , :00423632   
|:00423BD0   
|
:004168D0 55                      push ebp
:004168D1 8BEC                    mov ebp, esp
:004168D3 51                      push ecx
:004168D4 894DFC                  mov dword ptr [ebp-04], ecx
:004168D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004168DA 668B4D08                mov cx, word ptr [ebp+08]
:004168DE 66894830                mov word ptr [eax+30], cx
:004168E2 8BE5                    mov esp, ebp
:004168E4 5D                      pop ebp
:004168E5 C20400                  ret 0004


:004168E8 CC                      int 03
:004168E9 CC                      int 03
:004168EA CC                      int 03
:004168EB CC                      int 03
:004168EC CC                      int 03
:004168ED CC                      int 03
:004168EE CC                      int 03
:004168EF CC                      int 03
:004168F0 55                      push ebp
:004168F1 8BEC                    mov ebp, esp
:004168F3 8A4508                  mov al, byte ptr [ebp+08]
:004168F6 50                      push eax
:004168F7 B918DA4A00              mov ecx, 004ADA18
:004168FC E87F060000              call 00416F80
:00416901 5D                      pop ebp
:00416902 C3                      ret



* Referenced by a CALL at Addresses:
|:00409B85   , :0040CA50   , :00416915   , :00424DC6   , :00456C02   
|:00456C2C   , :004587F2   
|
:00416903 55                      push ebp
:00416904 8BEC                    mov ebp, esp
:00416906 B918DA4A00              mov ecx, 004ADA18
:0041690B E800940100              call 0042FD10
:00416910 5D                      pop ebp
:00416911 C3                      ret



* Referenced by a CALL at Addresses:
|:00409531   , :0040956F   , :00409C8E   , :00409FD3   , :0040A317   
|:0040AAE4   , :0040AB1B   , :0040AB49   , :0040BD9F   , :0040BF0E   
|:0040BFD4   , :0040C46D   , :0040C56A   , :0040CAE5   , :0040CB57   
|:0040CE53   , :0040D077   , :0040D16E   , :0040D3A4   , :0040D3E8   
|:0040D46F   , :0040D55D   , :0040D615   , :0040D6F9   , :0040D8BB   
|:0040D975   , :0040DB80   , :0040DB9F   , :0040DC2E   , :0040DD29   
|:0040DE14   , :0040DFAD   , :0040E05E   , :0040E10F   , :0040E210   
|:0040E2B1   , :004111C4   , :00411504   , :00411793   , :004119DB   
|:004129C7   , :00419C0D   , :0042645E   , :00427538   , :00427D46   
|:00428A7A   , :00428DD8   , :00458E5C   , :004647A6   , :00464813   
|:0046496C   , :00464DA4   , :00465011   , :00465254   , :00465E20   
|:00465FB9   , :00466CE3   , :004690A9   
|
:00416912 55                      push ebp
:00416913 8BEC                    mov ebp, esp
:00416915 E8E9FFFFFF              call 00416903
:0041691A 25FF000000              and eax, 000000FF
:0041691F 33C9                    xor ecx, ecx
:00416921 83F803                  cmp eax, 00000003
:00416924 0F94C1                  sete cl
:00416927 8BC1                    mov eax, ecx
:00416929 5D                      pop ebp
:0041692A C3                      ret



* Referenced by a CALL at Address:
|:0040C72B   
|
:0041692B 55                      push ebp
:0041692C 8BEC                    mov ebp, esp
:0041692E 8B4508                  mov eax, dword ptr [ebp+08]
:00416931 50                      push eax
:00416932 68A8EF4800              push 0048EFA8
:00416937 E8A3BC0400              call 004625DF
:0041693C 83C408                  add esp, 00000008
:0041693F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416942 51                      push ecx
:00416943 E889E10400              call 00464AD1
:00416948 83C404                  add esp, 00000004
:0041694B 33C0                    xor eax, eax
:0041694D 5D                      pop ebp
:0041694E C3                      ret



* Referenced by a CALL at Addresses:
|:0040C383   , :0040C8E8   
|
:0041694F 55                      push ebp
:00416950 8BEC                    mov ebp, esp
:00416952 51                      push ecx
:00416953 C745FC18DA4A00          mov [ebp-04], 004ADA18
:0041695A 6A01                    push 00000001
:0041695C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041695F E81C060000              call 00416F80

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00416964 68FF000000              push 000000FF
:00416969 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041696C E82F060000              call 00416FA0
:00416971 8A450C                  mov al, byte ptr [ebp+0C]
:00416974 50                      push eax
:00416975 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416978 E823320200              call 00439BA0
:0041697D 8B0D3C8B4A00            mov ecx, dword ptr [004A8B3C]
:00416983 83C902                  or ecx, 00000002
:00416986 890D3C8B4A00            mov dword ptr [004A8B3C], ecx
:0041698C 33C0                    xor eax, eax
:0041698E 8BE5                    mov esp, ebp
:00416990 5D                      pop ebp
:00416991 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C35B   , :0040C8C0   
|
:00416992 55                      push ebp
:00416993 8BEC                    mov ebp, esp
:00416995 51                      push ecx
:00416996 C745FC18DA4A00          mov [ebp-04], 004ADA18

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041699D 6A02                    push 00000002
:0041699F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004169A2 E8D9050000              call 00416F80
:004169A7 8A4508                  mov al, byte ptr [ebp+08]
:004169AA 50                      push eax
:004169AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004169AE E8ED050000              call 00416FA0
:004169B3 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004169B6 51                      push ecx
:004169B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004169BA E8E1310200              call 00439BA0
:004169BF 8B153C8B4A00            mov edx, dword ptr [004A8B3C]
:004169C5 83CA02                  or edx, 00000002
:004169C8 89153C8B4A00            mov dword ptr [004A8B3C], edx
:004169CE 33C0                    xor eax, eax
:004169D0 8BE5                    mov esp, ebp
:004169D2 5D                      pop ebp
:004169D3 C3                      ret



* Referenced by a CALL at Address:
|:0040C8A4   
|
:004169D4 55                      push ebp
:004169D5 8BEC                    mov ebp, esp
:004169D7 51                      push ecx
:004169D8 C745FC18DA4A00          mov [ebp-04], 004ADA18

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004169DF 6A03                    push 00000003
:004169E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004169E4 E897050000              call 00416F80

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004169E9 68FF000000              push 000000FF
:004169EE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004169F1 E8AA050000              call 00416FA0
:004169F6 8A450C                  mov al, byte ptr [ebp+0C]
:004169F9 50                      push eax
:004169FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004169FD E89E310200              call 00439BA0
:00416A02 8B0D3C8B4A00            mov ecx, dword ptr [004A8B3C]
:00416A08 83C902                  or ecx, 00000002
:00416A0B 890D3C8B4A00            mov dword ptr [004A8B3C], ecx
:00416A11 33C0                    xor eax, eax
:00416A13 8BE5                    mov esp, ebp
:00416A15 5D                      pop ebp
:00416A16 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C36F   , :0040C8D4   
|
:00416A17 55                      push ebp
:00416A18 8BEC                    mov ebp, esp
:00416A1A 51                      push ecx
:00416A1B C745FC18DA4A00          mov [ebp-04], 004ADA18
:00416A22 6A00                    push 00000000
:00416A24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416A27 E854050000              call 00416F80

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00416A2C 68FF000000              push 000000FF
:00416A31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416A34 E867050000              call 00416FA0
:00416A39 8A450C                  mov al, byte ptr [ebp+0C]
:00416A3C 50                      push eax
:00416A3D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416A40 E85B310200              call 00439BA0
:00416A45 8B0D3C8B4A00            mov ecx, dword ptr [004A8B3C]
:00416A4B 83C902                  or ecx, 00000002
:00416A4E 890D3C8B4A00            mov dword ptr [004A8B3C], ecx
:00416A54 33C0                    xor eax, eax
:00416A56 8BE5                    mov esp, ebp
:00416A58 5D                      pop ebp
:00416A59 C3                      ret



* Referenced by a CALL at Address:
|:0040CA3C   
|
:00416A5A 55                      push ebp
:00416A5B 8BEC                    mov ebp, esp
:00416A5D 51                      push ecx
:00416A5E C745FC22DA4A00          mov [ebp-04], 004ADA22
:00416A65 8A4508                  mov al, byte ptr [ebp+08]
:00416A68 50                      push eax
:00416A69 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416A6C E80F050000              call 00416F80
:00416A71 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00416A74 51                      push ecx
:00416A75 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416A78 E823050000              call 00416FA0
:00416A7D 8A5514                  mov dl, byte ptr [ebp+14]
:00416A80 52                      push edx
:00416A81 8A4510                  mov al, byte ptr [ebp+10]
:00416A84 50                      push eax
:00416A85 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416A88 E833050000              call 00416FC0
:00416A8D 33C0                    xor eax, eax
:00416A8F 8BE5                    mov esp, ebp
:00416A91 5D                      pop ebp
:00416A92 C3                      ret



* Referenced by a CALL at Addresses:
|:00415A1F   , :00416B45   
|
:00416A93 55                      push ebp
:00416A94 8BEC                    mov ebp, esp
:00416A96 83EC10                  sub esp, 00000010
:00416A99 8B4508                  mov eax, dword ptr [ebp+08]
:00416A9C C1E803                  shr eax, 03
:00416A9F 8945F8                  mov dword ptr [ebp-08], eax
:00416AA2 8B4508                  mov eax, dword ptr [ebp+08]
:00416AA5 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00008: ""
                                  |
:00416AA7 B908000000              mov ecx, 00000008
:00416AAC F7F1                    div ecx
:00416AAE 8955FC                  mov dword ptr [ebp-04], edx
:00416AB1 C745F480000000          mov [ebp-0C], 00000080
:00416AB8 8B55F4                  mov edx, dword ptr [ebp-0C]
:00416ABB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416ABE D3EA                    shr edx, cl
:00416AC0 8955F4                  mov dword ptr [ebp-0C], edx
:00416AC3 8B45F8                  mov eax, dword ptr [ebp-08]
:00416AC6 50                      push eax
:00416AC7 B9C8E24A00              mov ecx, 004AE2C8
:00416ACC E82F050000              call 00417000
:00416AD1 25FF000000              and eax, 000000FF
:00416AD6 8945F0                  mov dword ptr [ebp-10], eax
:00416AD9 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00416ADD 741D                    je 00416AFC
:00416ADF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416AE2 F7D1                    not ecx
:00416AE4 8B55F0                  mov edx, dword ptr [ebp-10]
:00416AE7 23D1                    and edx, ecx
:00416AE9 52                      push edx
:00416AEA 8B45F8                  mov eax, dword ptr [ebp-08]
:00416AED 50                      push eax
:00416AEE B9C8E24A00              mov ecx, 004AE2C8
:00416AF3 E8E8040000              call 00416FE0
:00416AF8 33C0                    xor eax, eax
:00416AFA EB06                    jmp 00416B02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416ADD(C)
|
:00416AFC 8B45F0                  mov eax, dword ptr [ebp-10]
:00416AFF 2345F4                  and eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416AFA(U)
|
:00416B02 8BE5                    mov esp, ebp
:00416B04 5D                      pop ebp
:00416B05 C3                      ret



* Referenced by a CALL at Addresses:
|:0040CD00   , :0040CD68   
|
:00416B06 55                      push ebp
:00416B07 8BEC                    mov ebp, esp
:00416B09 51                      push ecx
:00416B0A 837D08FF                cmp dword ptr [ebp+08], FFFFFFFF
:00416B0E 752F                    jne 00416B3F
:00416B10 C745FC00000000          mov [ebp-04], 00000000
:00416B17 EB09                    jmp 00416B22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B3B(U)
|
:00416B19 8B45FC                  mov eax, dword ptr [ebp-04]
:00416B1C 83C001                  add eax, 00000001
:00416B1F 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B17(U)
|
:00416B22 837DFC08                cmp dword ptr [ebp-04], 00000008
:00416B26 7315                    jnb 00416B3D

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00416B28 68FF000000              push 000000FF
:00416B2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416B30 51                      push ecx
:00416B31 B9C8E24A00              mov ecx, 004AE2C8
:00416B36 E8A5040000              call 00416FE0
:00416B3B EBDC                    jmp 00416B19

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B26(C)
|
:00416B3D EB0E                    jmp 00416B4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B0E(C)
|
:00416B3F 6A01                    push 00000001
:00416B41 8B5508                  mov edx, dword ptr [ebp+08]
:00416B44 52                      push edx
:00416B45 E849FFFFFF              call 00416A93
:00416B4A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B3D(U)
|
:00416B4D 33C0                    xor eax, eax
:00416B4F 8BE5                    mov esp, ebp
:00416B51 5D                      pop ebp
:00416B52 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C6F5   , :0040C761   
|
:00416B53 55                      push ebp
:00416B54 8BEC                    mov ebp, esp
:00416B56 8B4508                  mov eax, dword ptr [ebp+08]
:00416B59 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00416B5A 6A03                    push 00000003
:00416B5C E80B200100              call 00428B6C
:00416B61 83C408                  add esp, 00000008
:00416B64 33C0                    xor eax, eax
:00416B66 5D                      pop ebp
:00416B67 C3                      ret



* Referenced by a CALL at Addresses:
|:0040DDC4   , :0040DDD6   
|
:00416B68 55                      push ebp
:00416B69 8BEC                    mov ebp, esp
:00416B6B 68C0674700              push 004767C0

* Possible Reference to String Resource ID=00006: ""
                                  |
:00416B70 6A06                    push 00000006
:00416B72 E8F51F0100              call 00428B6C
:00416B77 83C408                  add esp, 00000008
:00416B7A 85C0                    test eax, eax
:00416B7C 7428                    je 00416BA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416BA4(U)
|
:00416B7E E8BDA9FFFF              call 00411540
:00416B83 83F801                  cmp eax, 00000001
:00416B86 7507                    jne 00416B8F
:00416B88 B801000000              mov eax, 00000001
:00416B8D EB19                    jmp 00416BA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B86(C)
|

* Possible StringData Ref from Data Obj ->"xsiHܡH"
                                  |
:00416B8F 68D0674700              push 004767D0

* Possible Reference to String Resource ID=00006: ""
                                  |
:00416B94 6A06                    push 00000006
:00416B96 E8D11F0100              call 00428B6C
:00416B9B 83C408                  add esp, 00000008
:00416B9E 85C0                    test eax, eax
:00416BA0 7402                    je 00416BA4
:00416BA2 EB02                    jmp 00416BA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416BA0(C)
|
:00416BA4 EBD8                    jmp 00416B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416B7C(C), :00416BA2(U)
|
:00416BA6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B8D(U)
|
:00416BA8 5D                      pop ebp
:00416BA9 C3                      ret



* Referenced by a CALL at Addresses:
|:00416F58   , :0042671F   
|
:00416BAA 55                      push ebp
:00416BAB 8BEC                    mov ebp, esp
:00416BAD 83EC08                  sub esp, 00000008
:00416BB0 C745FCFFFF0000          mov [ebp-04], 0000FFFF
:00416BB7 833D3C8B4A0002          cmp dword ptr [004A8B3C], 00000002
:00416BBE 744D                    je 00416C0D
:00416BC0 8B4508                  mov eax, dword ptr [ebp+08]
:00416BC3 8945F8                  mov dword ptr [ebp-08], eax
:00416BC6 837DF800                cmp dword ptr [ebp-08], 00000000
:00416BCA 740E                    je 00416BDA
:00416BCC 837DF801                cmp dword ptr [ebp-08], 00000001
:00416BD0 7419                    je 00416BEB
:00416BD2 837DF802                cmp dword ptr [ebp-08], 00000002
:00416BD6 7426                    je 00416BFE
:00416BD8 EB33                    jmp 00416C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416BCA(C)
|
:00416BDA 6A00                    push 00000000
:00416BDC B9F8134800              mov ecx, 004813F8
:00416BE1 E8AD7EFFFF              call 0040EA93
:00416BE6 8945FC                  mov dword ptr [ebp-04], eax
:00416BE9 EB22                    jmp 00416C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416BD0(C)
|
:00416BEB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00416BEE 51                      push ecx
:00416BEF B9F8134800              mov ecx, 004813F8
:00416BF4 E8A27FFFFF              call 0040EB9B
:00416BF9 8945FC                  mov dword ptr [ebp-04], eax
:00416BFC EB0F                    jmp 00416C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416BD6(C)
|
:00416BFE 6A40                    push 00000040
:00416C00 B9F8134800              mov ecx, 004813F8
:00416C05 E8EC7FFFFF              call 0040EBF6
:00416C0A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416BBE(C), :00416BD8(U), :00416BE9(U), :00416BFC(U)
|
:00416C0D 8B45FC                  mov eax, dword ptr [ebp-04]
:00416C10 8BE5                    mov esp, ebp
:00416C12 5D                      pop ebp
:00416C13 C3                      ret



* Referenced by a CALL at Addresses:
|:00416C82   , :00416CB9   , :00416CF6   
|
:00416C14 55                      push ebp
:00416C15 8BEC                    mov ebp, esp
:00416C17 6A19                    push 00000019
:00416C19 E85AF90000              call 00426578
:00416C1E 83C404                  add esp, 00000004
:00416C21 8B450C                  mov eax, dword ptr [ebp+0C]
:00416C24 50                      push eax
:00416C25 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416C28 51                      push ecx
:00416C29 B9289B4A00              mov ecx, 004A9B28
:00416C2E E856D8FFFF              call 00414489
:00416C33 5D                      pop ebp
:00416C34 C3                      ret



* Referenced by a CALL at Addresses:
|:00416DF9   , :00416E27   , :00416E3C   , :00422CEC   
|
:00416C35 55                      push ebp
:00416C36 8BEC                    mov ebp, esp
:00416C38 83EC08                  sub esp, 00000008
:00416C3B 8B4508                  mov eax, dword ptr [ebp+08]
:00416C3E 8945F8                  mov dword ptr [ebp-08], eax
:00416C41 837DF80C                cmp dword ptr [ebp-08], 0000000C
:00416C45 0F8781000000            ja 00416CCC
:00416C4B 8B55F8                  mov edx, dword ptr [ebp-08]
:00416C4E 33C9                    xor ecx, ecx
:00416C50 8A8A906D4100            mov cl, byte ptr [edx+00416D90]
:00416C56 FF248D846D4100          jmp dword ptr [4*ecx+00416D84]
:00416C5D 6800D00700              push 0007D000
:00416C62 B920414A00              mov ecx, 004A4120
:00416C67 E832C9FFFF              call 0041359E
:00416C6C 8945FC                  mov dword ptr [ebp-04], eax
:00416C6F 8B4508                  mov eax, dword ptr [ebp+08]
:00416C72 3B05387A4700            cmp eax, dword ptr [00477A38]
:00416C78 7418                    je 00416C92
:00416C7A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416C7D 51                      push ecx
:00416C7E 8B5508                  mov edx, dword ptr [ebp+08]
:00416C81 52                      push edx
:00416C82 E88DFFFFFF              call 00416C14
:00416C87 83C408                  add esp, 00000008
:00416C8A 8B4508                  mov eax, dword ptr [ebp+08]
:00416C8D A3387A4700              mov dword ptr [00477A38], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416C78(C)
|
:00416C92 EB7A                    jmp 00416D0E
:00416C94 6800E80300              push 0003E800
:00416C99 B920414A00              mov ecx, 004A4120
:00416C9E E8FBC8FFFF              call 0041359E
:00416CA3 8945FC                  mov dword ptr [ebp-04], eax
:00416CA6 8B0D347A4700            mov ecx, dword ptr [00477A34]
:00416CAC 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00416CAF 7419                    je 00416CCA
:00416CB1 8B55FC                  mov edx, dword ptr [ebp-04]
:00416CB4 52                      push edx
:00416CB5 8B4508                  mov eax, dword ptr [ebp+08]
:00416CB8 50                      push eax
:00416CB9 E856FFFFFF              call 00416C14
:00416CBE 83C408                  add esp, 00000008
:00416CC1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416CC4 890D347A4700            mov dword ptr [00477A34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416CAF(C)
|
:00416CCA EB42                    jmp 00416D0E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416C45(C)
|
:00416CCC 837D0877                cmp dword ptr [ebp+08], 00000077
:00416CD0 7202                    jb 00416CD4
:00416CD2 EB38                    jmp 00416D0C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416CD0(C)
|
:00416CD4 6A00                    push 00000000
:00416CD6 B920414A00              mov ecx, 004A4120
:00416CDB E8BEC8FFFF              call 0041359E
:00416CE0 8945FC                  mov dword ptr [ebp-04], eax
:00416CE3 8B15307A4700            mov edx, dword ptr [00477A30]
:00416CE9 3B5508                  cmp edx, dword ptr [ebp+08]
:00416CEC 7419                    je 00416D07
:00416CEE 8B45FC                  mov eax, dword ptr [ebp-04]
:00416CF1 50                      push eax
:00416CF2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416CF5 51                      push ecx
:00416CF6 E819FFFFFF              call 00416C14
:00416CFB 83C408                  add esp, 00000008
:00416CFE 8B5508                  mov edx, dword ptr [ebp+08]
:00416D01 8915307A4700            mov dword ptr [00477A30], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416CEC(C)
|
:00416D07 E8221E0500              call 00468B2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416CD2(U)
|
:00416D0C EB72                    jmp 00416D80

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416C92(U), :00416CCA(U)
|
:00416D0E 6A00                    push 00000000
:00416D10 E8123A0500              call 0046A727
:00416D15 83C404                  add esp, 00000004
:00416D18 E85DBFFFFF              call 00412C7A
:00416D1D E80C1E0500              call 00468B2E
:00416D22 E80BC1FFFF              call 00412E32
:00416D27 E8BAC1FFFF              call 00412EE6
:00416D2C 6A01                    push 00000001
:00416D2E 668B4508                mov ax, word ptr [ebp+08]
:00416D32 50                      push eax
:00416D33 E868BBFFFF              call 004128A0
:00416D38 83C408                  add esp, 00000008

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00416D3B 6A07                    push 00000007
:00416D3D E8A7400500              call 0046ADE9
:00416D42 83C404                  add esp, 00000004
:00416D45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416D48 51                      push ecx
:00416D49 6890010000              push 00000190
:00416D4E 6880020000              push 00000280
:00416D53 6A28                    push 00000028
:00416D55 6A00                    push 00000000
:00416D57 E88B4E0500              call 0046BBE7
:00416D5C 83C414                  add esp, 00000014
:00416D5F 68A8EF4800              push 0048EFA8
:00416D64 E868DD0400              call 00464AD1
:00416D69 83C404                  add esp, 00000004
:00416D6C E8DCC0FFFF              call 00412E4D
:00416D71 E8ADC0FFFF              call 00412E23
:00416D76 6A00                    push 00000000
:00416D78 E8FBF70000              call 00426578
:00416D7D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416D0C(U)
|
:00416D80 8BE5                    mov esp, ebp
:00416D82 5D                      pop ebp
:00416D83 C3                      ret



:00416D84 5D6C4100                DWORD 00416C5D
:00416D88 946C4100                DWORD 00416C94
:00416D8C CC6C4100                DWORD 00416CCC


:00416D90 000000                  BYTE  3 DUP(0)


:00416D93 0101                    add dword ptr [ecx], eax
:00416D95 0101                    add dword ptr [ecx], eax
:00416D97 0101                    add dword ptr [ecx], eax
:00416D99 0101                    add dword ptr [ecx], eax
:00416D9B 0101                    add dword ptr [ecx], eax

* Referenced by a CALL at Address:
|:0040AD77   
|
:00416D9D 55                      push ebp
:00416D9E 8BEC                    mov ebp, esp
:00416DA0 5D                      pop ebp
:00416DA1 C3                      ret



* Referenced by a CALL at Address:
|:004268C9   
|
:00416DA2 55                      push ebp
:00416DA3 8BEC                    mov ebp, esp
:00416DA5 6A01                    push 00000001
:00416DA7 E82C000000              call 00416DD8
:00416DAC 83C404                  add esp, 00000004
:00416DAF A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416DB4 83E06E                  and eax, 0000006E
:00416DB7 85C0                    test eax, eax
:00416DB9 7407                    je 00416DC2
:00416DBB A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416DC0 EB14                    jmp 00416DD6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416DB9(C)
|
:00416DC2 E8B0000000              call 00416E77
:00416DC7 6A00                    push 00000000
:00416DC9 E84AD90400              call 00464718
:00416DCE 83C404                  add esp, 00000004
:00416DD1 A13C8B4A00              mov eax, dword ptr [004A8B3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416DC0(U)
|
:00416DD6 5D                      pop ebp
:00416DD7 C3                      ret



* Referenced by a CALL at Addresses:
|:00416DA7   , :00416EE1   
|
:00416DD8 55                      push ebp
:00416DD9 8BEC                    mov ebp, esp
:00416DDB 837D0800                cmp dword ptr [ebp+08], 00000000
:00416DDF 7522                    jne 00416E03
:00416DE1 B918DA4A00              mov ecx, 004ADA18
:00416DE6 E8358A0100              call 0042F820
:00416DEB 25FF000000              and eax, 000000FF
:00416DF0 33C9                    xor ecx, ecx
:00416DF2 8A88A8674700            mov cl, byte ptr [eax+004767A8]
:00416DF8 51                      push ecx
:00416DF9 E837FEFFFF              call 00416C35
:00416DFE 83C404                  add esp, 00000004
:00416E01 EB41                    jmp 00416E44

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416DDF(C)
|
:00416E03 B9C8E24A00              mov ecx, 004AE2C8
:00416E08 E8F3F8FFFF              call 00416700
:00416E0D 25FF000000              and eax, 000000FF
:00416E12 83F803                  cmp eax, 00000003
:00416E15 7D1A                    jge 00416E31
:00416E17 B9C8E24A00              mov ecx, 004AE2C8
:00416E1C E8DFF8FFFF              call 00416700
:00416E21 25FF000000              and eax, 000000FF
:00416E26 50                      push eax
:00416E27 E809FEFFFF              call 00416C35
:00416E2C 83C404                  add esp, 00000004
:00416E2F EB13                    jmp 00416E44

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416E15(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00416E31 6A03                    push 00000003
:00416E33 E87DB20400              call 004620B5
:00416E38 83C404                  add esp, 00000004
:00416E3B 50                      push eax
:00416E3C E8F4FDFFFF              call 00416C35
:00416E41 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416E01(U), :00416E2F(U)
|
:00416E44 C705388B4A0000000000    mov dword ptr [004A8B38], 00000000
:00416E4E C7057CDF4A0000000000    mov dword ptr [004ADF7C], 00000000
:00416E58 C605305A4A0000          mov byte ptr [004A5A30], 00
:00416E5F C7053C8B4A0000000000    mov dword ptr [004A8B3C], 00000000
:00416E69 C6050C414A00FF          mov byte ptr [004A410C], FF
:00416E70 E8D4DC0400              call 00464B49
:00416E75 5D                      pop ebp
:00416E76 C3                      ret



* Referenced by a CALL at Address:
|:00416DC2   
|
:00416E77 55                      push ebp
:00416E78 8BEC                    mov ebp, esp
:00416E7A 51                      push ecx
:00416E7B C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416ED6(U)
|
:00416E82 E802010100              call 00426F89
:00416E87 83F801                  cmp eax, 00000001
:00416E8A 7517                    jne 00416EA3
:00416E8C 837DFC00                cmp dword ptr [ebp-04], 00000000
:00416E90 7411                    je 00416EA3
:00416E92 6A01                    push 00000001
:00416E94 E87FD80400              call 00464718
:00416E99 83C404                  add esp, 00000004
:00416E9C C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416E8A(C), :00416E90(C)
|
:00416EA3 A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416EA8 83E06E                  and eax, 0000006E
:00416EAB 85C0                    test eax, eax
:00416EAD 7407                    je 00416EB6
:00416EAF A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416EB4 EB22                    jmp 00416ED8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EAD(C)
|
:00416EB6 6A00                    push 00000000
:00416EB8 B9F8134800              mov ecx, 004813F8
:00416EBD E8D17BFFFF              call 0040EA93
:00416EC2 8B0D3C8B4A00            mov ecx, dword ptr [004A8B3C]
:00416EC8 83E16E                  and ecx, 0000006E
:00416ECB 85C9                    test ecx, ecx
:00416ECD 7407                    je 00416ED6
:00416ECF A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416ED4 EB02                    jmp 00416ED8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416ECD(C)
|
:00416ED6 EBAA                    jmp 00416E82

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416EB4(U), :00416ED4(U)
|
:00416ED8 8BE5                    mov esp, ebp
:00416EDA 5D                      pop ebp
:00416EDB C3                      ret



* Referenced by a CALL at Address:
|:004268AF   
|
:00416EDC 55                      push ebp
:00416EDD 8BEC                    mov ebp, esp
:00416EDF 6A00                    push 00000000
:00416EE1 E8F2FEFFFF              call 00416DD8
:00416EE6 83C404                  add esp, 00000004
:00416EE9 A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416EEE 83E06E                  and eax, 0000006E
:00416EF1 85C0                    test eax, eax
:00416EF3 7407                    je 00416EFC
:00416EF5 A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416EFA EB14                    jmp 00416F10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EF3(C)
|
:00416EFC 6A00                    push 00000000
:00416EFE E815D80400              call 00464718
:00416F03 83C404                  add esp, 00000004
:00416F06 E807000000              call 00416F12
:00416F0B A13C8B4A00              mov eax, dword ptr [004A8B3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EFA(U)
|
:00416F10 5D                      pop ebp
:00416F11 C3                      ret



* Referenced by a CALL at Address:
|:00416F06   
|
:00416F12 55                      push ebp
:00416F13 8BEC                    mov ebp, esp
:00416F15 51                      push ecx
:00416F16 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416F74(U)
|
:00416F1D E867000100              call 00426F89
:00416F22 83F801                  cmp eax, 00000001
:00416F25 7517                    jne 00416F3E
:00416F27 837DFC00                cmp dword ptr [ebp-04], 00000000
:00416F2B 7411                    je 00416F3E
:00416F2D 6A01                    push 00000001
:00416F2F E8E4D70400              call 00464718
:00416F34 83C404                  add esp, 00000004
:00416F37 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416F25(C), :00416F2B(C)
|
:00416F3E A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416F43 83E06E                  and eax, 0000006E
:00416F46 85C0                    test eax, eax
:00416F48 7407                    je 00416F51
:00416F4A A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416F4F EB25                    jmp 00416F76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416F48(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00416F51 68FF000000              push 000000FF
:00416F56 6A00                    push 00000000
:00416F58 E84DFCFFFF              call 00416BAA
:00416F5D 83C408                  add esp, 00000008
:00416F60 8B0D3C8B4A00            mov ecx, dword ptr [004A8B3C]
:00416F66 83E16E                  and ecx, 0000006E
:00416F69 85C9                    test ecx, ecx
:00416F6B 7407                    je 00416F74
:00416F6D A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00416F72 EB02                    jmp 00416F76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416F6B(C)
|
:00416F74 EBA7                    jmp 00416F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416F4F(U), :00416F72(U)
|
:00416F76 8BE5                    mov esp, ebp
:00416F78 5D                      pop ebp
:00416F79 C3                      ret


:00416F7A CC                      int 03
:00416F7B CC                      int 03
:00416F7C CC                      int 03
:00416F7D CC                      int 03
:00416F7E CC                      int 03
:00416F7F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405282   , :004168FC   , :0041695F   , :004169A2   , :004169E4   
|:00416A27   , :00416A6C   , :00426A05   
|
:00416F80 55                      push ebp
:00416F81 8BEC                    mov ebp, esp
:00416F83 51                      push ecx
:00416F84 894DFC                  mov dword ptr [ebp-04], ecx
:00416F87 8B45FC                  mov eax, dword ptr [ebp-04]
:00416F8A 8A4D08                  mov cl, byte ptr [ebp+08]
:00416F8D 884805                  mov byte ptr [eax+05], cl
:00416F90 8BE5                    mov esp, ebp
:00416F92 5D                      pop ebp
:00416F93 C20400                  ret 0004


:00416F96 CC                      int 03
:00416F97 CC                      int 03
:00416F98 CC                      int 03
:00416F99 CC                      int 03
:00416F9A CC                      int 03
:00416F9B CC                      int 03
:00416F9C CC                      int 03
:00416F9D CC                      int 03
:00416F9E CC                      int 03
:00416F9F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C907   , :0040D2D1   , :0041696C   , :004169AE   , :004169F1   
|:00416A34   , :00416A78   
|
:00416FA0 55                      push ebp
:00416FA1 8BEC                    mov ebp, esp
:00416FA3 51                      push ecx
:00416FA4 894DFC                  mov dword ptr [ebp-04], ecx
:00416FA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00416FAA 8A4D08                  mov cl, byte ptr [ebp+08]
:00416FAD 884806                  mov byte ptr [eax+06], cl
:00416FB0 8BE5                    mov esp, ebp
:00416FB2 5D                      pop ebp
:00416FB3 C20400                  ret 0004


:00416FB6 CC                      int 03
:00416FB7 CC                      int 03
:00416FB8 CC                      int 03
:00416FB9 CC                      int 03
:00416FBA CC                      int 03
:00416FBB CC                      int 03
:00416FBC CC                      int 03
:00416FBD CC                      int 03
:00416FBE CC                      int 03
:00416FBF CC                      int 03

* Referenced by a CALL at Address:
|:00416A88   
|
:00416FC0 55                      push ebp
:00416FC1 8BEC                    mov ebp, esp
:00416FC3 51                      push ecx
:00416FC4 894DFC                  mov dword ptr [ebp-04], ecx
:00416FC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00416FCA 8A4D08                  mov cl, byte ptr [ebp+08]
:00416FCD 8808                    mov byte ptr [eax], cl
:00416FCF 8B55FC                  mov edx, dword ptr [ebp-04]
:00416FD2 8A450C                  mov al, byte ptr [ebp+0C]
:00416FD5 884201                  mov byte ptr [edx+01], al
:00416FD8 8BE5                    mov esp, ebp
:00416FDA 5D                      pop ebp
:00416FDB C20800                  ret 0008


:00416FDE CC                      int 03
:00416FDF CC                      int 03

* Referenced by a CALL at Addresses:
|:00416AF3   , :00416B36   
|
:00416FE0 55                      push ebp
:00416FE1 8BEC                    mov ebp, esp
:00416FE3 51                      push ecx
:00416FE4 894DFC                  mov dword ptr [ebp-04], ecx
:00416FE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00416FEA 034508                  add eax, dword ptr [ebp+08]
:00416FED 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00416FF0 888826010000            mov byte ptr [eax+00000126], cl
:00416FF6 8BE5                    mov esp, ebp
:00416FF8 5D                      pop ebp
:00416FF9 C20800                  ret 0008


:00416FFC CC                      int 03
:00416FFD CC                      int 03
:00416FFE CC                      int 03
:00416FFF CC                      int 03

* Referenced by a CALL at Address:
|:00416ACC   
|
:00417000 55                      push ebp
:00417001 8BEC                    mov ebp, esp
:00417003 51                      push ecx
:00417004 894DFC                  mov dword ptr [ebp-04], ecx
:00417007 8B45FC                  mov eax, dword ptr [ebp-04]
:0041700A 034508                  add eax, dword ptr [ebp+08]
:0041700D 8A8026010000            mov al, byte ptr [eax+00000126]
:00417013 8BE5                    mov esp, ebp
:00417015 5D                      pop ebp
:00417016 C20400                  ret 0004


:00417019 CC                      int 03
:0041701A CC                      int 03
:0041701B CC                      int 03
:0041701C CC                      int 03
:0041701D CC                      int 03
:0041701E CC                      int 03
:0041701F CC                      int 03
:00417020 55                      push ebp
:00417021 8BEC                    mov ebp, esp
:00417023 E807000000              call 0041702F
:00417028 E811000000              call 0041703E
:0041702D 5D                      pop ebp
:0041702E C3                      ret



* Referenced by a CALL at Address:
|:00417023   
|
:0041702F 55                      push ebp
:00417030 8BEC                    mov ebp, esp
:00417032 B910584800              mov ecx, 00485810
:00417037 E8448E0000              call 0041FE80
:0041703C 5D                      pop ebp
:0041703D C3                      ret



* Referenced by a CALL at Address:
|:00417028   
|
:0041703E 55                      push ebp
:0041703F 8BEC                    mov ebp, esp
:00417041 6850704100              push 00417050
:00417046 E825640500              call 0046D470
:0041704B 83C404                  add esp, 00000004
:0041704E 5D                      pop ebp
:0041704F C3                      ret


:00417050 55                      push ebp
:00417051 8BEC                    mov ebp, esp
:00417053 B910584800              mov ecx, 00485810
:00417058 E8A38E0000              call 0041FF00
:0041705D 5D                      pop ebp
:0041705E C3                      ret



* Referenced by a CALL at Addresses:
|:00419C21   , :00419CB3   , :00419F60   , :0041A000   , :0041D0DF   
|:0041D199   , :0041EF17   , :0041F343   , :0045DA6E   
|
:0041705F 55                      push ebp
:00417060 8BEC                    mov ebp, esp
:00417062 81EC2C010000            sub esp, 0000012C
:00417068 8D4514                  lea eax, dword ptr [ebp+14]
:0041706B 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax
:00417071 8B8DFCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEFC]
:00417077 51                      push ecx
:00417078 8B5510                  mov edx, dword ptr [ebp+10]
:0041707B 52                      push edx
:0041707C 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:00417082 50                      push eax

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:00417083 FF157C874B00            Call dword ptr [004B877C]
:00417089 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0041708D 7507                    jne 00417096

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0041708F C7450CD8E44700          mov [ebp+0C], 0047E4D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041708D(C)
|
:00417096 C785D4FEFFFF28000000    mov dword ptr [ebp+FFFFFED4], 00000028
:004170A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004170A3 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:004170A9 8B15300E4B00            mov edx, dword ptr [004B0E30]
:004170AF 8995DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], edx
:004170B5 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:004170BB 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax
:004170C1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004170C4 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:004170CA C785E8FEFFFF80200000    mov dword ptr [ebp+FFFFFEE8], 00002080
:004170D4 C785ECFEFFFF89000000    mov dword ptr [ebp+FFFFFEEC], 00000089
:004170DE C785F0FEFFFF00000000    mov dword ptr [ebp+FFFFFEF0], 00000000
:004170E8 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:004170F2 C785F8FEFFFF11040000    mov dword ptr [ebp+FFFFFEF8], 00000411
:004170FC 8D95D4FEFFFF            lea edx, dword ptr [ebp+FFFFFED4]
:00417102 52                      push edx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:00417103 FF1580874B00            Call dword ptr [004B8780]
:00417109 8BE5                    mov esp, ebp
:0041710B 5D                      pop ebp
:0041710C C3                      ret



* Referenced by a CALL at Addresses:
|:0041AA02   , :0041AAAB   , :0041F64A   , :0041FAE8   , :0041FC02   
|:0045D1D1   
|
:0041710D 55                      push ebp
:0041710E 8BEC                    mov ebp, esp
:00417110 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00417113 C745E803000000          mov [ebp-18], 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0041711A C745E403000000          mov [ebp-1C], 00000003
:00417121 8D45D8                  lea eax, dword ptr [ebp-28]
:00417124 50                      push eax
:00417125 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417128 51                      push ecx
:00417129 682B100000              push 0000102B
:0041712E 8B5508                  mov edx, dword ptr [ebp+08]
:00417131 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417132 FF15D8864B00            Call dword ptr [004B86D8]
:00417138 8BE5                    mov esp, ebp
:0041713A 5D                      pop ebp
:0041713B C3                      ret



* Referenced by a CALL at Addresses:
|:0041924D   , :00419267   , :00419283   , :0041929D   , :0041B951   
|:0041B96B   , :0041B987   , :0041B9A1   , :0041D468   , :0041D484   
|:0041D51B   , :0041D537   , :0041E2F0   , :0041E30A   , :0041E324   
|:0041E35F   , :0041E379   , :0041E393   , :0041E872   , :0041E88C   
|:0041E8A6   , :0041E8F0   , :0041E90A   , :0041E924   , :0045390E   
|:00453949   , :00453ECA   , :00453F0A   , :0045C063   , :0045C09E   
|:0045C477   , :0045C4B2   , :0045E324   , :0045E35F   , :0045E95C   
|:0045E9B2   
|
:0041713C 55                      push ebp
:0041713D 8BEC                    mov ebp, esp
:0041713F 51                      push ecx
:00417140 6AF0                    push FFFFFFF0
:00417142 8B4508                  mov eax, dword ptr [ebp+08]
:00417145 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00417146 FF158C874B00            Call dword ptr [004B878C]
:0041714C 8945FC                  mov dword ptr [ebp-04], eax
:0041714F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417152 83E103                  and ecx, 00000003
:00417155 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:00417158 7416                    je 00417170
:0041715A 8B55FC                  mov edx, dword ptr [ebp-04]
:0041715D 83E2FC                  and edx, FFFFFFFC
:00417160 0B550C                  or edx, dword ptr [ebp+0C]
:00417163 52                      push edx
:00417164 6AF0                    push FFFFFFF0
:00417166 8B4508                  mov eax, dword ptr [ebp+08]
:00417169 50                      push eax

* Reference To: USER32.SetWindowLongA, Ord:021Bh
                                  |
:0041716A FF156C874B00            Call dword ptr [004B876C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417158(C)
|
:00417170 B801000000              mov eax, 00000001
:00417175 8BE5                    mov esp, ebp
:00417177 5D                      pop ebp
:00417178 C3                      ret



* Referenced by a CALL at Addresses:
|:0041732E   , :004184F3   , :0045E546   
|
:00417179 55                      push ebp
:0041717A 8BEC                    mov ebp, esp
:0041717C 83EC08                  sub esp, 00000008
:0041717F 56                      push esi
:00417180 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:00417187 7509                    jne 00417192
:00417189 C745F800000000          mov [ebp-08], 00000000
:00417190 EB19                    jmp 004171AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417187(C)
|
:00417192 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417195 6BC933                  imul ecx, 00000033
:00417198 81C1C8EF4800            add ecx, 0048EFC8
:0041719E E80DD5FEFF              call 004046B0
:004171A3 25FF000000              and eax, 000000FF
:004171A8 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417190(U)
|
:004171AB 8B45F8                  mov eax, dword ptr [ebp-08]
:004171AE 8945FC                  mov dword ptr [ebp-04], eax
:004171B1 817D08FFFF0000          cmp dword ptr [ebp+08], 0000FFFF
:004171B8 7505                    jne 004171BF
:004171BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004171BD EB55                    jmp 00417214

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004171B8(C)
|
:004171BF 8B7510                  mov esi, dword ptr [ebp+10]
:004171C2 81E6FF000000            and esi, 000000FF
:004171C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004171CB 6BC970                  imul ecx, 00000070
:004171CE 81C198224900            add ecx, 00492298
:004171D4 E817D6FEFF              call 004047F0
:004171D9 25FF000000              and eax, 000000FF
:004171DE 3BF0                    cmp esi, eax
:004171E0 752F                    jne 00417211
:004171E2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004171E5 6BC933                  imul ecx, 00000033
:004171E8 81C1C8EF4800            add ecx, 0048EFC8
:004171EE E8BDD4FEFF              call 004046B0
:004171F3 25FF000000              and eax, 000000FF
:004171F8 83F826                  cmp eax, 00000026
:004171FB 750B                    jne 00417208
:004171FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417200 83C101                  add ecx, 00000001
:00417203 894DFC                  mov dword ptr [ebp-04], ecx
:00417206 EB09                    jmp 00417211

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004171FB(C)
|
:00417208 8B55FC                  mov edx, dword ptr [ebp-04]
:0041720B 83C228                  add edx, 00000028
:0041720E 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004171E0(C), :00417206(U)
|
:00417211 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004171BD(U)
|
:00417214 5E                      pop esi
:00417215 8BE5                    mov esp, ebp
:00417217 5D                      pop ebp
:00417218 C3                      ret


:00417219 55                      push ebp
:0041721A 8BEC                    mov ebp, esp
:0041721C 51                      push ecx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0041721D C745FC07000000          mov [ebp-04], 00000007
:00417224 EB09                    jmp 0041722F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041726B(U)
|
:00417226 8B45FC                  mov eax, dword ptr [ebp-04]
:00417229 83E801                  sub eax, 00000001
:0041722C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417224(U)
|
:0041722F 837DFC00                cmp dword ptr [ebp-04], 00000000
:00417233 7C38                    jl 0041726D
:00417235 8A4DFC                  mov cl, byte ptr [ebp-04]
:00417238 51                      push ecx
:00417239 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041723C 6BC970                  imul ecx, 00000070
:0041723F 81C198224900            add ecx, 00492298
:00417245 E8C6D5FEFF              call 00404810
:0041724A 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041724F 3DFF000000              cmp eax, 000000FF
:00417254 7C15                    jl 0041726B
:00417256 6A00                    push 00000000
:00417258 8B55FC                  mov edx, dword ptr [ebp-04]
:0041725B 52                      push edx
:0041725C 6808100000              push 00001008
:00417261 8B4508                  mov eax, dword ptr [ebp+08]
:00417264 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417265 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417254(C)
|
:0041726B EBB9                    jmp 00417226

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417233(C)
|
:0041726D 8BE5                    mov esp, ebp
:0041726F 5D                      pop ebp
:00417270 C3                      ret



* Referenced by a CALL at Addresses:
|:004197B1   , :00419B97   , :0041A284   , :0041B490   , :0041B524   
|:0041BDCD   , :0041D43E   , :0041D4C0   , :0041D4F1   , :0041E840   
|:0041ED34   , :0041F2B4   , :0041F5F3   , :0045E942   
|
:00417271 55                      push ebp
:00417272 8BEC                    mov ebp, esp
:00417274 817D0C85020000          cmp dword ptr [ebp+0C], 00000285
:0041727B 732F                    jnb 004172AC
:0041727D 6A00                    push 00000000
:0041727F 6A00                    push 00000000
:00417281 6809100000              push 00001009
:00417286 8B4508                  mov eax, dword ptr [ebp+08]
:00417289 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041728A FF15D8864B00            Call dword ptr [004B86D8]
:00417290 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417293 51                      push ecx
:00417294 8B5508                  mov edx, dword ptr [ebp+08]
:00417297 52                      push edx
:00417298 E811000000              call 004172AE
:0041729D 83C408                  add esp, 00000008
:004172A0 8B450C                  mov eax, dword ptr [ebp+0C]
:004172A3 50                      push eax
:004172A4 E8A7FC0400              call 00466F50
:004172A9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041727B(C)
|
:004172AC 5D                      pop ebp
:004172AD C3                      ret



* Referenced by a CALL at Addresses:
|:00417298   , :00419456   
|
:004172AE 55                      push ebp
:004172AF 8BEC                    mov ebp, esp
:004172B1 83EC30                  sub esp, 00000030

* Possible Reference to String Resource ID=00015: ""
                                  |
:004172B4 C745D80F000000          mov [ebp-28], 0000000F
:004172BB C745E400000000          mov [ebp-1C], 00000000
:004172C2 C745E800000000          mov [ebp-18], 00000000
:004172C9 C745E000000000          mov [ebp-20], 00000000
:004172D0 C745ECFFFFFFFF          mov [ebp-14], FFFFFFFF
:004172D7 C745F020000000          mov [ebp-10], 00000020
:004172DE C745D400000000          mov [ebp-2C], 00000000
:004172E5 EB09                    jmp 004172F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417367(U)
|
:004172E7 8B45D4                  mov eax, dword ptr [ebp-2C]
:004172EA 83C001                  add eax, 00000001
:004172ED 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004172E5(U)
|
:004172F0 837DD408                cmp dword ptr [ebp-2C], 00000008
:004172F4 7D76                    jge 0041736C
:004172F6 8A4DD4                  mov cl, byte ptr [ebp-2C]
:004172F9 51                      push ecx
:004172FA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004172FD 6BC970                  imul ecx, 00000070
:00417300 81C198224900            add ecx, 00492298
:00417306 E805D5FEFF              call 00404810
:0041730B 25FF000000              and eax, 000000FF
:00417310 8945D0                  mov dword ptr [ebp-30], eax
:00417313 817DD0FF000000          cmp dword ptr [ebp-30], 000000FF
:0041731A 734B                    jnb 00417367
:0041731C 8B55D4                  mov edx, dword ptr [ebp-2C]
:0041731F 8955DC                  mov dword ptr [ebp-24], edx
:00417322 8A45D4                  mov al, byte ptr [ebp-2C]
:00417325 50                      push eax
:00417326 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00417329 51                      push ecx
:0041732A 8B550C                  mov edx, dword ptr [ebp+0C]
:0041732D 52                      push edx
:0041732E E846FEFFFF              call 00417179
:00417333 83C40C                  add esp, 0000000C
:00417336 8945F4                  mov dword ptr [ebp-0C], eax
:00417339 8B45D0                  mov eax, dword ptr [ebp-30]
:0041733C 25FFFF0000              and eax, 0000FFFF
:00417341 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00417344 81E1FFFF0000            and ecx, 0000FFFF
:0041734A C1E110                  shl ecx, 10
:0041734D 0BC1                    or eax, ecx
:0041734F 8945F8                  mov dword ptr [ebp-08], eax
:00417352 8D55D8                  lea edx, dword ptr [ebp-28]
:00417355 52                      push edx
:00417356 6A00                    push 00000000
:00417358 6807100000              push 00001007
:0041735D 8B4508                  mov eax, dword ptr [ebp+08]
:00417360 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417361 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041731A(C)
|
:00417367 E97BFFFFFF              jmp 004172E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004172F4(C)
|
:0041736C 8BE5                    mov esp, ebp
:0041736E 5D                      pop ebp
:0041736F C3                      ret



* Referenced by a CALL at Addresses:
|:0041941C   , :00419499   , :0041E4A7   , :0045E45A   
|
:00417370 55                      push ebp
:00417371 8BEC                    mov ebp, esp
:00417373 83EC58                  sub esp, 00000058

* Possible StringData Ref from Data Obj ->"|ˤ}"
                                  |
:00417376 C745EC40714700          mov [ebp-14], 00477140

* Possible StringData Ref from Data Obj ->"vj"
                                  |
:0041737D C745F050714700          mov [ebp-10], 00477150

* Possible StringData Ref from Data Obj ->"2000"
                                  |
:00417384 C745F45C714700          mov [ebp-0C], 0047715C

* Possible StringData Ref from Data Obj ->"ĪG"
                                  |
:0041738B C745F86C714700          mov [ebp-08], 0047716C

* Possible StringData Ref from Data Obj ->"q"
                                  |
:00417392 C745FC78714700          mov [ebp-04], 00477178
:00417399 6A20                    push 00000020
:0041739B 6A00                    push 00000000
:0041739D 8D45CC                  lea eax, dword ptr [ebp-34]
:004173A0 50                      push eax
:004173A1 E8BA650500              call 0046D960
:004173A6 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00015: ""
                                  |
:004173A9 C745CC0F000000          mov [ebp-34], 0000000F
:004173B0 C745D000000000          mov [ebp-30], 00000000
:004173B7 8D4DAC                  lea ecx, dword ptr [ebp-54]
:004173BA 894DD8                  mov dword ptr [ebp-28], ecx
:004173BD C745DC20000000          mov [ebp-24], 00000020
:004173C4 C745A800000000          mov [ebp-58], 00000000
:004173CB EB09                    jmp 004173D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041742E(U)
|
:004173CD 8B55A8                  mov edx, dword ptr [ebp-58]
:004173D0 83C201                  add edx, 00000001
:004173D3 8955A8                  mov dword ptr [ebp-58], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004173CB(U)
|
:004173D6 837DA805                cmp dword ptr [ebp-58], 00000005
:004173DA 7D54                    jge 00417430
:004173DC 8B45A8                  mov eax, dword ptr [ebp-58]
:004173DF 8B4C85EC                mov ecx, dword ptr [ebp+4*eax-14]
:004173E3 51                      push ecx
:004173E4 6A00                    push 00000000
:004173E6 6811100000              push 00001011
:004173EB 8B550C                  mov edx, dword ptr [ebp+0C]
:004173EE 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004173EF FF15D8864B00            Call dword ptr [004B86D8]
:004173F5 8945D4                  mov dword ptr [ebp-2C], eax
:004173F8 8B45A8                  mov eax, dword ptr [ebp-58]
:004173FB 8945E0                  mov dword ptr [ebp-20], eax
:004173FE 6A20                    push 00000020
:00417400 8D4DAC                  lea ecx, dword ptr [ebp-54]
:00417403 51                      push ecx
:00417404 8B55A8                  mov edx, dword ptr [ebp-58]
:00417407 83C202                  add edx, 00000002
:0041740A 52                      push edx
:0041740B A1300E4B00              mov eax, dword ptr [004B0E30]
:00417410 50                      push eax

* Reference To: USER32.LoadStringA, Ord:0183h
                                  |
:00417411 FF1574874B00            Call dword ptr [004B8774]
:00417417 8D4DCC                  lea ecx, dword ptr [ebp-34]
:0041741A 51                      push ecx
:0041741B 8B55A8                  mov edx, dword ptr [ebp-58]
:0041741E 52                      push edx
:0041741F 681B100000              push 0000101B
:00417424 8B450C                  mov eax, dword ptr [ebp+0C]
:00417427 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417428 FF15D8864B00            Call dword ptr [004B86D8]
:0041742E EB9D                    jmp 004173CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004173DA(C)
|
:00417430 8BE5                    mov esp, ebp
:00417432 5D                      pop ebp
:00417433 C3                      ret



* Referenced by a CALL at Addresses:
|:00418BA5   , :004192D1   , :00419B75   , :0041B9D8   , :0041B9ED   
|:0041BA02   , :0041BBA0   
|
:00417434 55                      push ebp
:00417435 8BEC                    mov ebp, esp
:00417437 83EC4C                  sub esp, 0000004C
:0041743A 6A00                    push 00000000
:0041743C 6A00                    push 00000000
:0041743E 684B010000              push 0000014B
:00417443 8B4508                  mov eax, dword ptr [ebp+08]
:00417446 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417447 FF15D8864B00            Call dword ptr [004B86D8]
:0041744D C745BC00000000          mov [ebp-44], 00000000
:00417454 C745B8FFFF0000          mov [ebp-48], 0000FFFF
:0041745B C745B400000000          mov [ebp-4C], 00000000
:00417462 EB09                    jmp 0041746D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004174DF(U)
|
:00417464 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00417467 83C101                  add ecx, 00000001
:0041746A 894DB4                  mov dword ptr [ebp-4C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417462(U)
|
:0041746D 837DB419                cmp dword ptr [ebp-4C], 00000019
:00417471 736E                    jnb 004174E1
:00417473 8B55B4                  mov edx, dword ptr [ebp-4C]
:00417476 52                      push edx
:00417477 E8A494FFFF              call 00410920
:0041747C 83C404                  add esp, 00000004
:0041747F 85C0                    test eax, eax
:00417481 745C                    je 004174DF
:00417483 8B45B4                  mov eax, dword ptr [ebp-4C]
:00417486 3B450C                  cmp eax, dword ptr [ebp+0C]
:00417489 7454                    je 004174DF
:0041748B 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0041748E 51                      push ecx
:0041748F 8B55B4                  mov edx, dword ptr [ebp-4C]
:00417492 52                      push edx
:00417493 E887000000              call 0041751F
:00417498 83C408                  add esp, 00000008
:0041749B 8D45C0                  lea eax, dword ptr [ebp-40]
:0041749E 50                      push eax
:0041749F 6A00                    push 00000000
:004174A1 6843010000              push 00000143
:004174A6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004174A9 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004174AA FF15D8864B00            Call dword ptr [004B86D8]
:004174B0 8B55B4                  mov edx, dword ptr [ebp-4C]
:004174B3 52                      push edx
:004174B4 8B45BC                  mov eax, dword ptr [ebp-44]
:004174B7 50                      push eax
:004174B8 6851010000              push 00000151
:004174BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004174C0 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004174C1 FF15D8864B00            Call dword ptr [004B86D8]
:004174C7 817DB8FFFF0000          cmp dword ptr [ebp-48], 0000FFFF
:004174CE 7506                    jne 004174D6
:004174D0 8B55B4                  mov edx, dword ptr [ebp-4C]
:004174D3 8955B8                  mov dword ptr [ebp-48], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004174CE(C)
|
:004174D6 8B45BC                  mov eax, dword ptr [ebp-44]
:004174D9 83C001                  add eax, 00000001
:004174DC 8945BC                  mov dword ptr [ebp-44], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417481(C), :00417489(C)
|
:004174DF EB83                    jmp 00417464

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417471(C)
|
:004174E1 837D1000                cmp dword ptr [ebp+10], 00000000
:004174E5 7406                    je 004174ED
:004174E7 8B4D10                  mov ecx, dword ptr [ebp+10]
:004174EA 894DB8                  mov dword ptr [ebp-48], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004174E5(C)
|
:004174ED 837DBC00                cmp dword ptr [ebp-44], 00000000
:004174F1 7425                    je 00417518
:004174F3 8D55C0                  lea edx, dword ptr [ebp-40]
:004174F6 52                      push edx
:004174F7 8B45B8                  mov eax, dword ptr [ebp-48]
:004174FA 50                      push eax
:004174FB E81F000000              call 0041751F
:00417500 83C408                  add esp, 00000008
:00417503 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00417506 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00417507 6AFF                    push FFFFFFFF

* Possible Reference to Dialog: DialogID_014D 
                                  |
:00417509 684D010000              push 0000014D
:0041750E 8B5508                  mov edx, dword ptr [ebp+08]
:00417511 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417512 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004174F1(C)
|
:00417518 8B45B8                  mov eax, dword ptr [ebp-48]
:0041751B 8BE5                    mov esp, ebp
:0041751D 5D                      pop ebp
:0041751E C3                      ret



* Referenced by a CALL at Addresses:
|:00417493   , :004174FB   
|
:0041751F 55                      push ebp
:00417520 8BEC                    mov ebp, esp
:00417522 83EC40                  sub esp, 00000040
:00417525 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417528 6BC970                  imul ecx, 00000070
:0041752B 81C198224900            add ecx, 00492298
:00417531 E83AD2FEFF              call 00404770
:00417536 25FF000000              and eax, 000000FF
:0041753B 50                      push eax
:0041753C E852F7FEFF              call 00406C93
:00417541 83C404                  add esp, 00000004
:00417544 50                      push eax
:00417545 8B4508                  mov eax, dword ptr [ebp+08]
:00417548 50                      push eax
:00417549 E8B69EFEFF              call 00401404
:0041754E 83C404                  add esp, 00000004
:00417551 50                      push eax

* Possible StringData Ref from Data Obj ->"%s ]%s^"
                                  |
:00417552 6884714700              push 00477184
:00417557 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0041755A 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0041755B FF1500874B00            Call dword ptr [004B8700]
:00417561 83C410                  add esp, 00000010
:00417564 8D55C0                  lea edx, dword ptr [ebp-40]
:00417567 52                      push edx

* Possible StringData Ref from Data Obj ->"%20s"
                                  |
:00417568 6890714700              push 00477190
:0041756D 8B450C                  mov eax, dword ptr [ebp+0C]
:00417570 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00417571 FF1500874B00            Call dword ptr [004B8700]
:00417577 83C40C                  add esp, 0000000C
:0041757A 8BE5                    mov esp, ebp
:0041757C 5D                      pop ebp
:0041757D C3                      ret



* Referenced by a CALL at Addresses:
|:00419305   , :004197CD   , :0041B4AC   , :0041B540   , :0041BA58   
|:0041BAA9   , :0045E41F   
|
:0041757E 55                      push ebp
:0041757F 8BEC                    mov ebp, esp
:00417581 51                      push ecx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417582 6A0A                    push 0000000A
:00417584 8D45FC                  lea eax, dword ptr [ebp-04]
:00417587 50                      push eax
:00417588 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041758B 6BC970                  imul ecx, 00000070
:0041758E 81C198224900            add ecx, 00492298
:00417594 E837D2FEFF              call 004047D0
:00417599 25FF000000              and eax, 000000FF
:0041759E 50                      push eax
:0041759F E8CCCE0400              call 00464470
:004175A4 83C40C                  add esp, 0000000C
:004175A7 50                      push eax

* Possible StringData Ref from Data Obj ->"Lv.%s"
                                  |
:004175A8 6898714700              push 00477198
:004175AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004175B0 51                      push ecx
:004175B1 E854C20400              call 0046380A
:004175B6 83C40C                  add esp, 0000000C
:004175B9 8BE5                    mov esp, ebp
:004175BB 5D                      pop ebp
:004175BC C3                      ret



* Referenced by a CALL at Addresses:
|:0041766A   , :0041A018   
|
:004175BD 55                      push ebp
:004175BE 8BEC                    mov ebp, esp
:004175C0 83EC28                  sub esp, 00000028
:004175C3 837D1000                cmp dword ptr [ebp+10], 00000000
:004175C7 7507                    jne 004175D0

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:004175C9 C74510D8E44700          mov [ebp+10], 0047E4D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004175C7(C)
|
:004175D0 C745D828000000          mov [ebp-28], 00000028
:004175D7 8B4508                  mov eax, dword ptr [ebp+08]
:004175DA 8945DC                  mov dword ptr [ebp-24], eax
:004175DD 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004175E3 894DE0                  mov dword ptr [ebp-20], ecx
:004175E6 8B550C                  mov edx, dword ptr [ebp+0C]
:004175E9 8955E4                  mov dword ptr [ebp-1C], edx
:004175EC 8B4510                  mov eax, dword ptr [ebp+10]
:004175EF 8945E8                  mov dword ptr [ebp-18], eax
:004175F2 C745EC84200000          mov [ebp-14], 00002084
:004175F9 C745F089000000          mov [ebp-10], 00000089
:00417600 C745F400000000          mov [ebp-0C], 00000000
:00417607 C745F800000000          mov [ebp-08], 00000000
:0041760E C745FC11040000          mov [ebp-04], 00000411
:00417615 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00417618 51                      push ecx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:00417619 FF1580874B00            Call dword ptr [004B8780]
:0041761F 83F806                  cmp eax, 00000006
:00417622 7507                    jne 0041762B
:00417624 B801000000              mov eax, 00000001
:00417629 EB02                    jmp 0041762D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417622(C)
|
:0041762B 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417629(U)
|
:0041762D 8BE5                    mov esp, ebp
:0041762F 5D                      pop ebp
:00417630 C3                      ret



* Referenced by a CALL at Addresses:
|:004198B0   , :00419C5F   , :0041BC81   
|
:00417631 55                      push ebp
:00417632 8BEC                    mov ebp, esp
:00417634 81EC04010000            sub esp, 00000104
:0041763A 8D4514                  lea eax, dword ptr [ebp+14]
:0041763D 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax
:00417643 8B8DFCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEFC]
:00417649 51                      push ecx
:0041764A 8B5510                  mov edx, dword ptr [ebp+10]
:0041764D 52                      push edx
:0041764E 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:00417654 50                      push eax

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:00417655 FF157C874B00            Call dword ptr [004B877C]
:0041765B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041765E 51                      push ecx
:0041765F 8D9500FFFFFF            lea edx, dword ptr [ebp+FFFFFF00]
:00417665 52                      push edx
:00417666 8B4508                  mov eax, dword ptr [ebp+08]
:00417669 50                      push eax
:0041766A E84EFFFFFF              call 004175BD
:0041766F 83C40C                  add esp, 0000000C
:00417672 8BE5                    mov esp, ebp
:00417674 5D                      pop ebp
:00417675 C3                      ret



* Referenced by a CALL at Addresses:
|:00418165   , :0041826F   , :004183BA   , :00418411   , :00419883   
|:00419AB8   , :00419B22   , :00419D83   , :0041A14D   , :0041A23F   
|:0041AA1A   , :0041B71D   , :0041BC54   , :0041BCE7   , :0041EB1A   
|:0041EE0F   , :0041F185   , :0041F1F4   , :0041F48D   , :0041FC28   
|:004532AD   , :00453FE8   , :0045D875   , :0045DB64   , :0045E0F4   
|:0045EA1F   , :0045EA61   , :00467B01   
|
:00417676 55                      push ebp
:00417677 8BEC                    mov ebp, esp
:00417679 83EC28                  sub esp, 00000028
:0041767C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041767F 8945DC                  mov dword ptr [ebp-24], eax
:00417682 C745E000000000          mov [ebp-20], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00417689 C745D804000000          mov [ebp-28], 00000004
:00417690 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00417693 51                      push ecx
:00417694 6A00                    push 00000000
:00417696 6805100000              push 00001005
:0041769B 8B5508                  mov edx, dword ptr [ebp+08]
:0041769E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041769F FF15D8864B00            Call dword ptr [004B86D8]
:004176A5 8B45F8                  mov eax, dword ptr [ebp-08]
:004176A8 8BE5                    mov esp, ebp
:004176AA 5D                      pop ebp
:004176AB C3                      ret



* Referenced by a CALL at Addresses:
|:00419DF4   , :0041EC12   , :0041EE8A   
|
:004176AC 55                      push ebp
:004176AD 8BEC                    mov ebp, esp
:004176AF 51                      push ecx
:004176B0 C745FC00000000          mov [ebp-04], 00000000
:004176B7 EB09                    jmp 004176C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004176EA(U)
|
:004176B9 8B45FC                  mov eax, dword ptr [ebp-04]
:004176BC 83C001                  add eax, 00000001
:004176BF 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004176B7(U)
|
:004176C2 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004176C9 7D21                    jge 004176EC
:004176CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004176CE 51                      push ecx
:004176CF B9C8E24A00              mov ecx, 004AE2C8
:004176D4 E887870000              call 0041FE60
:004176D9 25FFFF0000              and eax, 0000FFFF
:004176DE 3DFFFF0000              cmp eax, 0000FFFF
:004176E3 7505                    jne 004176EA
:004176E5 8A45FC                  mov al, byte ptr [ebp-04]
:004176E8 EB04                    jmp 004176EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004176E3(C)
|
:004176EA EBCD                    jmp 004176B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004176C9(C)
|
:004176EC 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004176E8(U)
|
:004176EE 8BE5                    mov esp, ebp
:004176F0 5D                      pop ebp
:004176F1 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A224   , :0041A9C7   , :0041AA82   , :0041BF6E   , :0041BFEB   
|:0041F62B   , :0041FABF   , :0041FBD9   , :0045D1B6   , :0045E9EB   
|:0045EA42   , :0045EA8A   
|
:004176F2 55                      push ebp
:004176F3 8BEC                    mov ebp, esp
:004176F5 83EC1C                  sub esp, 0000001C
:004176F8 8D45E4                  lea eax, dword ptr [ebp-1C]
:004176FB 50                      push eax

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:004176FC FF1560874B00            Call dword ptr [004B8760]
:00417702 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00417705 51                      push ecx
:00417706 8B5508                  mov edx, dword ptr [ebp+08]
:00417709 52                      push edx

* Reference To: USER32.ScreenToClient, Ord:01D3h
                                  |
:0041770A FF1570874B00            Call dword ptr [004B8770]
:00417710 8B45E4                  mov eax, dword ptr [ebp-1C]
:00417713 8945EC                  mov dword ptr [ebp-14], eax
:00417716 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00417719 894DF0                  mov dword ptr [ebp-10], ecx

* Possible Reference to String Resource ID=00014: ""
                                  |
:0041771C C745F40E000000          mov [ebp-0C], 0000000E
:00417723 8D55EC                  lea edx, dword ptr [ebp-14]
:00417726 52                      push edx
:00417727 6A00                    push 00000000
:00417729 6812100000              push 00001012
:0041772E 8B4508                  mov eax, dword ptr [ebp+08]
:00417731 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417732 FF15D8864B00            Call dword ptr [004B86D8]
:00417738 8BE5                    mov esp, ebp
:0041773A 5D                      pop ebp
:0041773B C3                      ret



* Referenced by a CALL at Addresses:
|:0041AB5F   , :0041AB9D   , :0041AC87   , :0041AD49   , :0041ADE2   
|:0041AE70   , :0041AEFE   , :0041AF82   , :0041B010   , :0041C0B4   
|:0041C0F2   , :0041C1DC   , :0041C29E   , :0041C32B   , :0041C3B9   
|:0041C447   , :0041C4CB   , :0041C559   , :0041C67C   , :0041C6BA   
|:0041C7A4   , :0041C866   , :0041C8F3   , :0041C981   , :0041CA0F   
|:0041CA93   , :0041CB21   , :0045EB62   , :0045EBA0   , :0045EC8A   
|:0045ED4C   , :0045EDD9   , :0045EE67   , :0045EEF5   , :0045EF79   
|:0045F007   
|
:0041773C 55                      push ebp
:0041773D 8BEC                    mov ebp, esp
:0041773F 83EC0C                  sub esp, 0000000C
:00417742 8B4508                  mov eax, dword ptr [ebp+08]
:00417745 3B450C                  cmp eax, dword ptr [ebp+0C]
:00417748 7E08                    jle 00417752
:0041774A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041774D 894DFC                  mov dword ptr [ebp-04], ecx
:00417750 EB06                    jmp 00417758

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417748(C)
|
:00417752 8B550C                  mov edx, dword ptr [ebp+0C]
:00417755 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417750(U)
|
:00417758 8B45FC                  mov eax, dword ptr [ebp-04]
:0041775B 3B4510                  cmp eax, dword ptr [ebp+10]
:0041775E 7D1E                    jge 0041777E
:00417760 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417763 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:00417766 7E08                    jle 00417770
:00417768 8B5508                  mov edx, dword ptr [ebp+08]
:0041776B 8955F8                  mov dword ptr [ebp-08], edx
:0041776E EB06                    jmp 00417776

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417766(C)
|
:00417770 8B450C                  mov eax, dword ptr [ebp+0C]
:00417773 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041776E(U)
|
:00417776 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00417779 894DF4                  mov dword ptr [ebp-0C], ecx
:0041777C EB06                    jmp 00417784

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041775E(C)
|
:0041777E 8B5510                  mov edx, dword ptr [ebp+10]
:00417781 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041777C(U)
|
:00417784 8B45F4                  mov eax, dword ptr [ebp-0C]
:00417787 8BE5                    mov esp, ebp
:00417789 5D                      pop ebp
:0041778A C3                      ret



* Referenced by a CALL at Addresses:
|:00417851   , :0041AC11   , :0041AC40   , :0041ADA1   , :0041C166   
|:0041C195   , :0041C2EA   , :0041C72E   , :0041C75D   , :0041C8B2   
|:0045EC14   , :0045EC43   , :0045ED98   
|
:0041778B 55                      push ebp
:0041778C 8BEC                    mov ebp, esp
:0041778E 83EC08                  sub esp, 00000008
:00417791 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00417795 7E18                    jle 004177AF
:00417797 C645F82B                mov [ebp-08], 2B

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041779B 6A0A                    push 0000000A
:0041779D 8D45F9                  lea eax, dword ptr [ebp-07]
:004177A0 50                      push eax
:004177A1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004177A4 51                      push ecx
:004177A5 E8C6CC0400              call 00464470
:004177AA 83C40C                  add esp, 0000000C
:004177AD EB12                    jmp 004177C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417795(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004177AF 6A0A                    push 0000000A
:004177B1 8D55F8                  lea edx, dword ptr [ebp-08]
:004177B4 52                      push edx
:004177B5 8B450C                  mov eax, dword ptr [ebp+0C]
:004177B8 50                      push eax
:004177B9 E8B2CC0400              call 00464470
:004177BE 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004177AD(U)
|
:004177C1 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004177C5 741A                    je 004177E1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004177C7 6A05                    push 00000005
:004177C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004177CC 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004177CD FF15E4864B00            Call dword ptr [004B86E4]
:004177D3 8D55F8                  lea edx, dword ptr [ebp-08]
:004177D6 52                      push edx
:004177D7 8B4508                  mov eax, dword ptr [ebp+08]
:004177DA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004177DB FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004177C5(C)
|
:004177E1 8BE5                    mov esp, ebp
:004177E3 5D                      pop ebp
:004177E4 C3                      ret



* Referenced by a CALL at Addresses:
|:0041ACC5   , :0041AE20   , :0041AEAE   , :0041AF3C   , :0041AFC0   
|:0041B04E   , :0041C21A   , :0041C369   , :0041C3F7   , :0041C485   
|:0041C509   , :0041C597   , :0041C7E2   , :0041C931   , :0041C9BF   
|:0041CA4D   , :0041CAD1   , :0041CB5F   , :0045ECC8   , :0045EE17   
|:0045EEA5   , :0045EF33   , :0045EFB7   , :0045F045   
|
:004177E5 55                      push ebp
:004177E6 8BEC                    mov ebp, esp

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:004177E8 68A0714700              push 004771A0
:004177ED 8B4518                  mov eax, dword ptr [ebp+18]
:004177F0 50                      push eax
:004177F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004177F4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004177F5 FF15AC864B00            Call dword ptr [004B86AC]
:004177FB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004177FC FF15B0864B00            Call dword ptr [004B86B0]
:00417802 8B551C                  mov edx, dword ptr [ebp+1C]
:00417805 52                      push edx
:00417806 8B4510                  mov eax, dword ptr [ebp+10]
:00417809 50                      push eax
:0041780A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041780D 51                      push ecx
:0041780E 8B5508                  mov edx, dword ptr [ebp+08]
:00417811 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417812 FF15AC864B00            Call dword ptr [004B86AC]
:00417818 50                      push eax
:00417819 E8ECBF0400              call 0046380A
:0041781E 83C40C                  add esp, 0000000C
:00417821 837D2000                cmp dword ptr [ebp+20], 00000000
:00417825 7432                    je 00417859

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00417827 6A05                    push 00000005
:00417829 8B4514                  mov eax, dword ptr [ebp+14]
:0041782C 50                      push eax
:0041782D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417830 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417831 FF15AC864B00            Call dword ptr [004B86AC]
:00417837 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417838 FF15E4864B00            Call dword ptr [004B86E4]
:0041783E 8B5520                  mov edx, dword ptr [ebp+20]
:00417841 52                      push edx
:00417842 8B4514                  mov eax, dword ptr [ebp+14]
:00417845 50                      push eax
:00417846 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417849 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041784A FF15AC864B00            Call dword ptr [004B86AC]
:00417850 50                      push eax
:00417851 E835FFFFFF              call 0041778B
:00417856 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417825(C)
|
:00417859 5D                      pop ebp
:0041785A C3                      ret



* Referenced by a CALL at Addresses:
|:0041AB73   , :0041C0C8   , :0041C690   , :0045EB76   
|
:0041785B 55                      push ebp
:0041785C 8BEC                    mov ebp, esp
:0041785E 51                      push ecx
:0041785F 56                      push esi
:00417860 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417863 6BC970                  imul ecx, 00000070
:00417866 81C198224900            add ecx, 00492298
:0041786C E8DAAEFEFF              call 0040274B
:00417871 8945FC                  mov dword ptr [ebp-04], eax
:00417874 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0041787B 7434                    je 004178B1
:0041787D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417880 6BC970                  imul ecx, 00000070
:00417883 81C198224900            add ecx, 00492298
:00417889 E8B6ACFEFF              call 00402544
:0041788E 8BF0                    mov esi, eax
:00417890 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417893 6BC933                  imul ecx, 00000033
:00417896 81C1C8EF4800            add ecx, 0048EFC8
:0041789C E84FCEFEFF              call 004046F0
:004178A1 25FF000000              and eax, 000000FF
:004178A6 99                      cdq
:004178A7 2BC2                    sub eax, edx
:004178A9 D1F8                    sar eax, 1
:004178AB 2BF0                    sub esi, eax
:004178AD 8BC6                    mov eax, esi
:004178AF EB11                    jmp 004178C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041787B(C)
|
:004178B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004178B4 6BC970                  imul ecx, 00000070
:004178B7 81C198224900            add ecx, 00492298
:004178BD E882ACFEFF              call 00402544

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004178AF(U)
|
:004178C2 5E                      pop esi
:004178C3 8BE5                    mov esp, ebp
:004178C5 5D                      pop ebp
:004178C6 C3                      ret



* Referenced by a CALL at Addresses:
|:00416137   , :00417A36   , :00417A62   , :00417A8E   , :00417B56   
|:00417D81   , :00418680   , :00418723   , :004187C6   , :0041D6D9   
|:0041F590   , :0041FD54   , :0041FDD1   , :00453471   , :004541B2   
|:004662DF   , :00467BEB   , :00467C40   , :00467C95   , :00467CEA   
|:00467D3F   , :00467D94   , :00467DE9   , :00467E43   , :00467E9D   
|
:004178C7 55                      push ebp
:004178C8 8BEC                    mov ebp, esp
:004178CA 51                      push ecx
:004178CB 8D450C                  lea eax, dword ptr [ebp+0C]
:004178CE 8945FC                  mov dword ptr [ebp-04], eax
:004178D1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004178D4 51                      push ecx
:004178D5 8B5508                  mov edx, dword ptr [ebp+08]
:004178D8 52                      push edx
:004178D9 6838584800              push 00485838

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:004178DE FF157C874B00            Call dword ptr [004B877C]
:004178E4 B838584800              mov eax, 00485838
:004178E9 8BE5                    mov esp, ebp
:004178EB 5D                      pop ebp
:004178EC C3                      ret



* Referenced by a CALL at Addresses:
|:00418C90   , :0041B78C   , :0041F979   , :0045E159   
|
:004178ED 55                      push ebp
:004178EE 8BEC                    mov ebp, esp
:004178F0 83EC0C                  sub esp, 0000000C
:004178F3 8B4514                  mov eax, dword ptr [ebp+14]
:004178F6 8945F8                  mov dword ptr [ebp-08], eax
:004178F9 8B4D14                  mov ecx, dword ptr [ebp+14]
:004178FC 894DFC                  mov dword ptr [ebp-04], ecx
:004178FF 8B55F8                  mov edx, dword ptr [ebp-08]
:00417902 8B4208                  mov eax, dword ptr [edx+08]
:00417905 8945F4                  mov dword ptr [ebp-0C], eax
:00417908 817DF46AFFFFFF          cmp dword ptr [ebp-0C], FFFFFF6A
:0041790F 740E                    je 0041791F
:00417911 837DF494                cmp dword ptr [ebp-0C], FFFFFF94
:00417915 7431                    je 00417948
:00417917 837DF497                cmp dword ptr [ebp-0C], FFFFFF97
:0041791B 7414                    je 00417931
:0041791D EB62                    jmp 00417981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041790F(C)
|
:0041791F 8B4D18                  mov ecx, dword ptr [ebp+18]
:00417922 51                      push ecx
:00417923 8B55F8                  mov edx, dword ptr [ebp-08]
:00417926 52                      push edx
:00417927 E85B000000              call 00417987
:0041792C 83C408                  add esp, 00000008
:0041792F EB50                    jmp 00417981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041791B(C)
|
:00417931 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00417933 6AFF                    push FFFFFFFF
:00417935 6817100000              push 00001017
:0041793A 8B45F8                  mov eax, dword ptr [ebp-08]
:0041793D 8B08                    mov ecx, dword ptr [eax]
:0041793F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417940 FF15D8864B00            Call dword ptr [004B86D8]
:00417946 EB39                    jmp 00417981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417915(C)
|
:00417948 688D7D4100              push 00417D8D
:0041794D 8B55FC                  mov edx, dword ptr [ebp-04]
:00417950 8B4210                  mov eax, dword ptr [edx+10]
:00417953 50                      push eax
:00417954 6830100000              push 00001030
:00417959 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041795C 8B11                    mov edx, dword ptr [ecx]
:0041795E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041795F FF15D8864B00            Call dword ptr [004B86D8]
:00417965 B910584800              mov ecx, 00485810
:0041796A E8D1850000              call 0041FF40
:0041796F 8B45FC                  mov eax, dword ptr [ebp-04]
:00417972 8B08                    mov ecx, dword ptr [eax]
:00417974 51                      push ecx
:00417975 8B5508                  mov edx, dword ptr [ebp+08]
:00417978 52                      push edx
:00417979 E87A050000              call 00417EF8
:0041797E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041791D(U), :0041792F(U), :00417946(U)
|
:00417981 33C0                    xor eax, eax
:00417983 8BE5                    mov esp, ebp
:00417985 5D                      pop ebp
:00417986 C3                      ret



* Referenced by a CALL at Address:
|:00417927   
|
:00417987 55                      push ebp
:00417988 8BEC                    mov ebp, esp
:0041798A 83EC0C                  sub esp, 0000000C
:0041798D 8B4508                  mov eax, dword ptr [ebp+08]
:00417990 33C9                    xor ecx, ecx
:00417992 668B482C                mov cx, word ptr [eax+2C]
:00417996 894DFC                  mov dword ptr [ebp-04], ecx
:00417999 8B5508                  mov edx, dword ptr [ebp+08]
:0041799C 8B422C                  mov eax, dword ptr [edx+2C]
:0041799F C1E810                  shr eax, 10
:004179A2 25FFFF0000              and eax, 0000FFFF
:004179A7 25FFFF0000              and eax, 0000FFFF
:004179AC 8945F8                  mov dword ptr [ebp-08], eax
:004179AF 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:004179B6 720A                    jb 004179C2
:004179B8 B801000000              mov eax, 00000001
:004179BD E9DF000000              jmp 00417AA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004179B6(C)
|
:004179C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004179C5 8B5114                  mov edx, dword ptr [ecx+14]
:004179C8 8955F4                  mov dword ptr [ebp-0C], edx
:004179CB 837DF404                cmp dword ptr [ebp-0C], 00000004
:004179CF 0F87C7000000            ja 00417A9C
:004179D5 8B45F4                  mov eax, dword ptr [ebp-0C]
:004179D8 FF2485A57A4100          jmp dword ptr [4*eax+00417AA5]
:004179DF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004179E2 51                      push ecx
:004179E3 8B5508                  mov edx, dword ptr [ebp+08]
:004179E6 52                      push edx
:004179E7 E8CD000000              call 00417AB9
:004179EC 83C408                  add esp, 00000008
:004179EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004179F2 894120                  mov dword ptr [ecx+20], eax
:004179F5 E9A2000000              jmp 00417A9C
:004179FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004179FD 6BC933                  imul ecx, 00000033
:00417A00 81C1C8EF4800            add ecx, 0048EFC8
:00417A06 E890DEFEFF              call 0040589B
:00417A0B 25FF000000              and eax, 000000FF
:00417A10 8B5508                  mov edx, dword ptr [ebp+08]
:00417A13 8B0485707B4700          mov eax, dword ptr [4*eax+00477B70]
:00417A1A 894220                  mov dword ptr [edx+20], eax
:00417A1D EB7D                    jmp 00417A9C
:00417A1F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417A22 6BC933                  imul ecx, 00000033
:00417A25 81C1C8EF4800            add ecx, 0048EFC8
:00417A2B E830850000              call 0041FF60
:00417A30 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00417A31 68AC714700              push 004771AC
:00417A36 E88CFEFFFF              call 004178C7
:00417A3B 83C408                  add esp, 00000008
:00417A3E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417A41 894120                  mov dword ptr [ecx+20], eax
:00417A44 EB56                    jmp 00417A9C
:00417A46 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417A49 6BC933                  imul ecx, 00000033
:00417A4C 81C1C8EF4800            add ecx, 0048EFC8
:00417A52 E8D9850000              call 00420030
:00417A57 25FF000000              and eax, 000000FF
:00417A5C 50                      push eax

* Possible StringData Ref from Data Obj ->"+%u"
                                  |
:00417A5D 68B4714700              push 004771B4
:00417A62 E860FEFFFF              call 004178C7
:00417A67 83C408                  add esp, 00000008
:00417A6A 8B5508                  mov edx, dword ptr [ebp+08]
:00417A6D 894220                  mov dword ptr [edx+20], eax
:00417A70 EB2A                    jmp 00417A9C
:00417A72 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417A75 6BC933                  imul ecx, 00000033
:00417A78 81C1C8EF4800            add ecx, 0048EFC8
:00417A7E E8ADCCFEFF              call 00404730
:00417A83 25FF000000              and eax, 000000FF
:00417A88 50                      push eax

* Possible StringData Ref from Data Obj ->"+%u"
                                  |
:00417A89 68B8714700              push 004771B8
:00417A8E E834FEFFFF              call 004178C7
:00417A93 83C408                  add esp, 00000008
:00417A96 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417A99 894120                  mov dword ptr [ecx+20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004179CF(C), :004179F5(U), :00417A1D(U), :00417A44(U), :00417A70(U)
|
:00417A9C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004179BD(U)
|
:00417AA1 8BE5                    mov esp, ebp
:00417AA3 5D                      pop ebp
:00417AA4 C3                      ret



:00417AA5 DF794100                DWORD 004179DF
:00417AA9 FA794100                DWORD 004179FA
:00417AAD 1F7A4100                DWORD 00417A1F
:00417AB1 467A4100                DWORD 00417A46
:00417AB5 727A4100                DWORD 00417A72



* Referenced by a CALL at Address:
|:004179E7   
|
:00417AB9 55                      push ebp
:00417ABA 8BEC                    mov ebp, esp
:00417ABC 83EC08                  sub esp, 00000008
:00417ABF 8B4508                  mov eax, dword ptr [ebp+08]
:00417AC2 33C9                    xor ecx, ecx
:00417AC4 668B482C                mov cx, word ptr [eax+2C]
:00417AC8 894DFC                  mov dword ptr [ebp-04], ecx
:00417ACB 8B5508                  mov edx, dword ptr [ebp+08]
:00417ACE 817A0448040000          cmp dword ptr [edx+04], 00000448
:00417AD5 7527                    jne 00417AFE
:00417AD7 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00417ADB 7421                    je 00417AFE
:00417ADD 8B4508                  mov eax, dword ptr [ebp+08]
:00417AE0 8B08                    mov ecx, dword ptr [eax]
:00417AE2 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00417AE3 FF1584874B00            Call dword ptr [004B8784]
:00417AE9 8945F8                  mov dword ptr [ebp-08], eax
:00417AEC 8B55FC                  mov edx, dword ptr [ebp-04]
:00417AEF 52                      push edx
:00417AF0 8B45F8                  mov eax, dword ptr [ebp-08]
:00417AF3 50                      push eax
:00417AF4 E869000000              call 00417B62
:00417AF9 83C408                  add esp, 00000008
:00417AFC EB60                    jmp 00417B5E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417AD5(C), :00417ADB(C)
|
:00417AFE 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00417B02 743B                    je 00417B3F
:00417B04 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417B07 6BC933                  imul ecx, 00000033
:00417B0A 81C1C8EF4800            add ecx, 0048EFC8
:00417B10 E89BFCFEFF              call 004077B0
:00417B15 50                      push eax
:00417B16 E888AA0400              call 004625A3
:00417B1B 83C404                  add esp, 00000004
:00417B1E 83F80E                  cmp eax, 0000000E
:00417B21 721C                    jb 00417B3F
:00417B23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417B26 6BC933                  imul ecx, 00000033
:00417B29 81C1C8EF4800            add ecx, 0048EFC8
:00417B2F E87CFCFEFF              call 004077B0
:00417B34 50                      push eax
:00417B35 E8A2010000              call 00417CDC
:00417B3A 83C404                  add esp, 00000004
:00417B3D EB1F                    jmp 00417B5E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417B02(C), :00417B21(C)
|
:00417B3F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417B42 6BC933                  imul ecx, 00000033
:00417B45 81C1C8EF4800            add ecx, 0048EFC8
:00417B4B E860FCFEFF              call 004077B0
:00417B50 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00417B51 68BC714700              push 004771BC
:00417B56 E86CFDFFFF              call 004178C7
:00417B5B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417AFC(U), :00417B3D(U)
|
:00417B5E 8BE5                    mov esp, ebp
:00417B60 5D                      pop ebp
:00417B61 C3                      ret



* Referenced by a CALL at Address:
|:00417AF4   
|
:00417B62 55                      push ebp
:00417B63 8BEC                    mov ebp, esp
:00417B65 83EC20                  sub esp, 00000020
:00417B68 6A20                    push 00000020
:00417B6A 6A00                    push 00000000
:00417B6C 8D45E0                  lea eax, dword ptr [ebp-20]
:00417B6F 50                      push eax
:00417B70 E8EB5D0500              call 0046D960
:00417B75 83C40C                  add esp, 0000000C
:00417B78 6A20                    push 00000020
:00417B7A 6A00                    push 00000000
:00417B7C 68E0574800              push 004857E0
:00417B81 E8DA5D0500              call 0046D960
:00417B86 83C40C                  add esp, 0000000C
:00417B89 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417B8C 6BC933                  imul ecx, 00000033
:00417B8F 81C1C8EF4800            add ecx, 0048EFC8
:00417B95 E816FCFEFF              call 004077B0
:00417B9A 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00417B9B 68C0714700              push 004771C0
:00417BA0 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00417BA3 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00417BA4 FF1500874B00            Call dword ptr [004B8700]
:00417BAA 83C40C                  add esp, 0000000C
:00417BAD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417BB0 6BC933                  imul ecx, 00000033
:00417BB3 81C1C8EF4800            add ecx, 0048EFC8
:00417BB9 E8F2FBFEFF              call 004077B0
:00417BBE 50                      push eax
:00417BBF E8DFA90400              call 004625A3
:00417BC4 83C404                  add esp, 00000004
:00417BC7 83F80E                  cmp eax, 0000000E
:00417BCA 7217                    jb 00417BE3
:00417BCC 8B550C                  mov edx, dword ptr [ebp+0C]
:00417BCF 52                      push edx
:00417BD0 68E0574800              push 004857E0
:00417BD5 8D45E0                  lea eax, dword ptr [ebp-20]
:00417BD8 50                      push eax
:00417BD9 E837000000              call 00417C15
:00417BDE 83C40C                  add esp, 0000000C
:00417BE1 EB29                    jmp 00417C0C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417BCA(C)
|
:00417BE3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417BE6 6BC933                  imul ecx, 00000033
:00417BE9 81C1C8EF4800            add ecx, 0048EFC8
:00417BEF E86C830000              call 0041FF60
:00417BF4 50                      push eax
:00417BF5 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00417BF8 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s
%u"
                                  |
:00417BF9 68C4714700              push 004771C4
:00417BFE 68E0574800              push 004857E0

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00417C03 FF1500874B00            Call dword ptr [004B8700]
:00417C09 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417BE1(U)
|
:00417C0C B8E0574800              mov eax, 004857E0
:00417C11 8BE5                    mov esp, ebp
:00417C13 5D                      pop ebp
:00417C14 C3                      ret



* Referenced by a CALL at Address:
|:00417BD9   
|
:00417C15 55                      push ebp
:00417C16 8BEC                    mov ebp, esp
:00417C18 83EC1C                  sub esp, 0000001C

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417C1B 6A0A                    push 0000000A
:00417C1D 6A00                    push 00000000
:00417C1F 8D45F0                  lea eax, dword ptr [ebp-10]
:00417C22 50                      push eax
:00417C23 E8385D0500              call 0046D960
:00417C28 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417C2B 6A0A                    push 0000000A
:00417C2D 6A00                    push 00000000
:00417C2F 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00417C32 51                      push ecx
:00417C33 E8285D0500              call 0046D960
:00417C38 83C40C                  add esp, 0000000C
:00417C3B C745FC00000000          mov [ebp-04], 00000000
:00417C42 EB09                    jmp 00417C4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417C71(U)
|
:00417C44 8B55FC                  mov edx, dword ptr [ebp-04]
:00417C47 83C201                  add edx, 00000001
:00417C4A 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417C42(U)
|
:00417C4D 837DFC08                cmp dword ptr [ebp-04], 00000008
:00417C51 7D20                    jge 00417C73
:00417C53 8B4508                  mov eax, dword ptr [ebp+08]
:00417C56 0345FC                  add eax, dword ptr [ebp-04]
:00417C59 0FBE08                  movsx ecx, byte ptr [eax]
:00417C5C 85C9                    test ecx, ecx
:00417C5E 7502                    jne 00417C62
:00417C60 EB11                    jmp 00417C73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417C5E(C)
|
:00417C62 8B5508                  mov edx, dword ptr [ebp+08]
:00417C65 0355FC                  add edx, dword ptr [ebp-04]
:00417C68 8B45FC                  mov eax, dword ptr [ebp-04]
:00417C6B 8A0A                    mov cl, byte ptr [edx]
:00417C6D 884C05F0                mov byte ptr [ebp+eax-10], cl
:00417C71 EBD1                    jmp 00417C44

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417C51(C), :00417C60(U)
|
:00417C73 C745FC00000000          mov [ebp-04], 00000000
:00417C7A EB09                    jmp 00417C85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417CAA(U)
|
:00417C7C 8B55FC                  mov edx, dword ptr [ebp-04]
:00417C7F 83C201                  add edx, 00000001
:00417C82 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417C7A(U)
|
:00417C85 837DFC08                cmp dword ptr [ebp-04], 00000008
:00417C89 7D21                    jge 00417CAC
:00417C8B 8B4508                  mov eax, dword ptr [ebp+08]
:00417C8E 0345FC                  add eax, dword ptr [ebp-04]
:00417C91 0FBE08                  movsx ecx, byte ptr [eax]
:00417C94 85C9                    test ecx, ecx
:00417C96 7502                    jne 00417C9A
:00417C98 EB12                    jmp 00417CAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417C96(C)
|
:00417C9A 8B5508                  mov edx, dword ptr [ebp+08]
:00417C9D 0355FC                  add edx, dword ptr [ebp-04]
:00417CA0 8B45FC                  mov eax, dword ptr [ebp-04]
:00417CA3 8A4A08                  mov cl, byte ptr [edx+08]
:00417CA6 884C05E4                mov byte ptr [ebp+eax-1C], cl
:00417CAA EBD0                    jmp 00417C7C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417C89(C), :00417C98(U)
|
:00417CAC 8B4D10                  mov ecx, dword ptr [ebp+10]
:00417CAF 6BC933                  imul ecx, 00000033
:00417CB2 81C1C8EF4800            add ecx, 0048EFC8
:00417CB8 E8A3820000              call 0041FF60
:00417CBD 50                      push eax
:00417CBE 8D55E4                  lea edx, dword ptr [ebp-1C]
:00417CC1 52                      push edx
:00417CC2 8D45F0                  lea eax, dword ptr [ebp-10]
:00417CC5 50                      push eax

* Possible StringData Ref from Data Obj ->"%s
%s
%u"
                                  |
:00417CC6 68D0714700              push 004771D0
:00417CCB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417CCE 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00417CCF FF1500874B00            Call dword ptr [004B8700]
:00417CD5 83C414                  add esp, 00000014
:00417CD8 8BE5                    mov esp, ebp
:00417CDA 5D                      pop ebp
:00417CDB C3                      ret



* Referenced by a CALL at Address:
|:00417B35   
|
:00417CDC 55                      push ebp
:00417CDD 8BEC                    mov ebp, esp
:00417CDF 83EC1C                  sub esp, 0000001C

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417CE2 6A0A                    push 0000000A
:00417CE4 6A00                    push 00000000
:00417CE6 8D45F0                  lea eax, dword ptr [ebp-10]
:00417CE9 50                      push eax
:00417CEA E8715C0500              call 0046D960
:00417CEF 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417CF2 6A0A                    push 0000000A
:00417CF4 6A00                    push 00000000
:00417CF6 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00417CF9 51                      push ecx
:00417CFA E8615C0500              call 0046D960
:00417CFF 83C40C                  add esp, 0000000C
:00417D02 C745FC00000000          mov [ebp-04], 00000000
:00417D09 EB09                    jmp 00417D14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D38(U)
|
:00417D0B 8B55FC                  mov edx, dword ptr [ebp-04]
:00417D0E 83C201                  add edx, 00000001
:00417D11 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D09(U)
|
:00417D14 837DFC08                cmp dword ptr [ebp-04], 00000008
:00417D18 7D20                    jge 00417D3A
:00417D1A 8B4508                  mov eax, dword ptr [ebp+08]
:00417D1D 0345FC                  add eax, dword ptr [ebp-04]
:00417D20 0FBE08                  movsx ecx, byte ptr [eax]
:00417D23 85C9                    test ecx, ecx
:00417D25 7502                    jne 00417D29
:00417D27 EB11                    jmp 00417D3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D25(C)
|
:00417D29 8B5508                  mov edx, dword ptr [ebp+08]
:00417D2C 0355FC                  add edx, dword ptr [ebp-04]
:00417D2F 8B45FC                  mov eax, dword ptr [ebp-04]
:00417D32 8A0A                    mov cl, byte ptr [edx]
:00417D34 884C05F0                mov byte ptr [ebp+eax-10], cl
:00417D38 EBD1                    jmp 00417D0B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417D18(C), :00417D27(U)
|
:00417D3A C745FC00000000          mov [ebp-04], 00000000
:00417D41 EB09                    jmp 00417D4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D72(U)
|
:00417D43 8B55FC                  mov edx, dword ptr [ebp-04]
:00417D46 83C201                  add edx, 00000001
:00417D49 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D41(U)
|
:00417D4C 837DFC08                cmp dword ptr [ebp-04], 00000008
:00417D50 7D22                    jge 00417D74
:00417D52 8B4508                  mov eax, dword ptr [ebp+08]
:00417D55 0345FC                  add eax, dword ptr [ebp-04]
:00417D58 0FBE4808                movsx ecx, byte ptr [eax+08]
:00417D5C 85C9                    test ecx, ecx
:00417D5E 7502                    jne 00417D62
:00417D60 EB12                    jmp 00417D74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417D5E(C)
|
:00417D62 8B5508                  mov edx, dword ptr [ebp+08]
:00417D65 0355FC                  add edx, dword ptr [ebp-04]
:00417D68 8B45FC                  mov eax, dword ptr [ebp-04]
:00417D6B 8A4A08                  mov cl, byte ptr [edx+08]
:00417D6E 884C05E4                mov byte ptr [ebp+eax-1C], cl
:00417D72 EBCF                    jmp 00417D43

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417D50(C), :00417D60(U)
|
:00417D74 8D55E4                  lea edx, dword ptr [ebp-1C]
:00417D77 52                      push edx
:00417D78 8D45F0                  lea eax, dword ptr [ebp-10]
:00417D7B 50                      push eax

* Possible StringData Ref from Data Obj ->"%s
%s"
                                  |
:00417D7C 68E0714700              push 004771E0
:00417D81 E841FBFFFF              call 004178C7
:00417D86 83C40C                  add esp, 0000000C
:00417D89 8BE5                    mov esp, ebp
:00417D8B 5D                      pop ebp
:00417D8C C3                      ret


:00417D8D 55                      push ebp
:00417D8E 8BEC                    mov ebp, esp
:00417D90 83EC10                  sub esp, 00000010
:00417D93 53                      push ebx
:00417D94 56                      push esi
:00417D95 8B4508                  mov eax, dword ptr [ebp+08]
:00417D98 25FFFF0000              and eax, 0000FFFF
:00417D9D 8945F8                  mov dword ptr [ebp-08], eax
:00417DA0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417DA3 81E1FFFF0000            and ecx, 0000FFFF
:00417DA9 894DF4                  mov dword ptr [ebp-0C], ecx
:00417DAC C745FC00000000          mov [ebp-04], 00000000
:00417DB3 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:00417DBA 0F830C010000            jnb 00417ECC
:00417DC0 817DF4FF000000          cmp dword ptr [ebp-0C], 000000FF
:00417DC7 0F83FF000000            jnb 00417ECC
:00417DCD 8B5510                  mov edx, dword ptr [ebp+10]
:00417DD0 8955F0                  mov dword ptr [ebp-10], edx
:00417DD3 837DF004                cmp dword ptr [ebp-10], 00000004
:00417DD7 0F87E8000000            ja 00417EC5
:00417DDD 8B45F0                  mov eax, dword ptr [ebp-10]
:00417DE0 FF2485E47E4100          jmp dword ptr [4*eax+00417EE4]
:00417DE7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00417DEA 2B4DF4                  sub ecx, dword ptr [ebp-0C]
:00417DED 894DFC                  mov dword ptr [ebp-04], ecx
:00417DF0 E9D7000000              jmp 00417ECC
:00417DF5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00417DF8 6BC933                  imul ecx, 00000033
:00417DFB 81C1C8EF4800            add ecx, 0048EFC8
:00417E01 E88AC8FEFF              call 00404690
:00417E06 8AD8                    mov bl, al
:00417E08 81E3FF000000            and ebx, 000000FF
:00417E0E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00417E11 6BC933                  imul ecx, 00000033
:00417E14 81C1C8EF4800            add ecx, 0048EFC8
:00417E1A E871C8FEFF              call 00404690
:00417E1F 25FF000000              and eax, 000000FF
:00417E24 2BD8                    sub ebx, eax
:00417E26 895DFC                  mov dword ptr [ebp-04], ebx
:00417E29 E99E000000              jmp 00417ECC
:00417E2E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00417E31 6BC933                  imul ecx, 00000033
:00417E34 81C1C8EF4800            add ecx, 0048EFC8
:00417E3A E821810000              call 0041FF60
:00417E3F 8BF0                    mov esi, eax
:00417E41 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00417E44 6BC933                  imul ecx, 00000033
:00417E47 81C1C8EF4800            add ecx, 0048EFC8
:00417E4D E80E810000              call 0041FF60
:00417E52 2BF0                    sub esi, eax
:00417E54 8975FC                  mov dword ptr [ebp-04], esi
:00417E57 EB73                    jmp 00417ECC
:00417E59 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00417E5C 6BC933                  imul ecx, 00000033
:00417E5F 81C1C8EF4800            add ecx, 0048EFC8
:00417E65 E8C6810000              call 00420030
:00417E6A 8AD8                    mov bl, al
:00417E6C 81E3FF000000            and ebx, 000000FF
:00417E72 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00417E75 6BC933                  imul ecx, 00000033
:00417E78 81C1C8EF4800            add ecx, 0048EFC8
:00417E7E E8AD810000              call 00420030
:00417E83 25FF000000              and eax, 000000FF
:00417E88 2BD8                    sub ebx, eax
:00417E8A 895DFC                  mov dword ptr [ebp-04], ebx
:00417E8D EB3D                    jmp 00417ECC
:00417E8F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00417E92 6BC933                  imul ecx, 00000033
:00417E95 81C1C8EF4800            add ecx, 0048EFC8
:00417E9B E890C8FEFF              call 00404730
:00417EA0 8AD8                    mov bl, al
:00417EA2 81E3FF000000            and ebx, 000000FF
:00417EA8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00417EAB 6BC933                  imul ecx, 00000033
:00417EAE 81C1C8EF4800            add ecx, 0048EFC8
:00417EB4 E877C8FEFF              call 00404730
:00417EB9 25FF000000              and eax, 000000FF
:00417EBE 2BD8                    sub ebx, eax
:00417EC0 895DFC                  mov dword ptr [ebp-04], ebx
:00417EC3 EB07                    jmp 00417ECC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417DD7(C)
|
:00417EC5 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417DBA(C), :00417DC7(C), :00417DF0(U), :00417E29(U), :00417E57(U)
|:00417E8D(U), :00417EC3(U)
|
:00417ECC B910584800              mov ecx, 00485810
:00417ED1 E8AA800000              call 0041FF80
:00417ED6 8B55FC                  mov edx, dword ptr [ebp-04]
:00417ED9 0FAFC2                  imul eax, edx
:00417EDC 5E                      pop esi
:00417EDD 5B                      pop ebx
:00417EDE 8BE5                    mov esp, ebp
:00417EE0 5D                      pop ebp
:00417EE1 C20C00                  ret 000C



:00417EE4 E77D4100                DWORD 00417DE7
:00417EE8 F57D4100                DWORD 00417DF5
:00417EEC 2E7E4100                DWORD 00417E2E
:00417EF0 597E4100                DWORD 00417E59
:00417EF4 8F7E4100                DWORD 00417E8F



* Referenced by a CALL at Address:
|:00417979   
|
:00417EF8 55                      push ebp
:00417EF9 8BEC                    mov ebp, esp
:00417EFB 83EC08                  sub esp, 00000008
:00417EFE 8B450C                  mov eax, dword ptr [ebp+0C]
:00417F01 50                      push eax

* Reference To: USER32.GetDlgCtrlID, Ord:00F2h
                                  |
:00417F02 FF1568874B00            Call dword ptr [004B8768]
:00417F08 8945FC                  mov dword ptr [ebp-04], eax
:00417F0B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417F0E 894DF8                  mov dword ptr [ebp-08], ecx
:00417F11 8B55F8                  mov edx, dword ptr [ebp-08]
:00417F14 81EA1A040000            sub edx, 0000041A
:00417F1A 8955F8                  mov dword ptr [ebp-08], edx
:00417F1D 817DF891000000          cmp dword ptr [ebp-08], 00000091
:00417F24 0F8714010000            ja 0041803E
:00417F2A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00417F2D 33C0                    xor eax, eax
:00417F2F 8A8162804100            mov al, byte ptr [ecx+00418062]
:00417F35 FF248542804100          jmp dword ptr [4*eax+00418042]
:00417F3C 8B550C                  mov edx, dword ptr [ebp+0C]
:00417F3F 52                      push edx
:00417F40 8B4508                  mov eax, dword ptr [ebp+08]
:00417F43 50                      push eax
:00417F44 E8DE010000              call 00418127
:00417F49 83C408                  add esp, 00000008
:00417F4C E9ED000000              jmp 0041803E

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:00417F51 683D040000              push 0000043D
:00417F56 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417F59 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F5A FF15AC864B00            Call dword ptr [004B86AC]
:00417F60 50                      push eax
:00417F61 E88E010000              call 004180F4
:00417F66 83C404                  add esp, 00000004
:00417F69 50                      push eax
:00417F6A 8B550C                  mov edx, dword ptr [ebp+0C]
:00417F6D 52                      push edx
:00417F6E 8B4508                  mov eax, dword ptr [ebp+08]
:00417F71 50                      push eax
:00417F72 E8A5020000              call 0041821C
:00417F77 83C40C                  add esp, 0000000C
:00417F7A E9BF000000              jmp 0041803E

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00417F7F 68EA030000              push 000003EA
:00417F84 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417F87 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F88 FF15AC864B00            Call dword ptr [004B86AC]
:00417F8E 50                      push eax
:00417F8F E860010000              call 004180F4
:00417F94 83C404                  add esp, 00000004
:00417F97 50                      push eax
:00417F98 8B550C                  mov edx, dword ptr [ebp+0C]
:00417F9B 52                      push edx
:00417F9C 8B4508                  mov eax, dword ptr [ebp+08]
:00417F9F 50                      push eax
:00417FA0 E877020000              call 0041821C
:00417FA5 83C40C                  add esp, 0000000C
:00417FA8 E991000000              jmp 0041803E

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:00417FAD 68FC030000              push 000003FC
:00417FB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417FB5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417FB6 FF15AC864B00            Call dword ptr [004B86AC]
:00417FBC 50                      push eax
:00417FBD E832010000              call 004180F4
:00417FC2 83C404                  add esp, 00000004
:00417FC5 50                      push eax
:00417FC6 8B550C                  mov edx, dword ptr [ebp+0C]
:00417FC9 52                      push edx
:00417FCA 8B4508                  mov eax, dword ptr [ebp+08]
:00417FCD 50                      push eax
:00417FCE E849020000              call 0041821C
:00417FD3 83C40C                  add esp, 0000000C
:00417FD6 EB66                    jmp 0041803E
:00417FD8 68B8050000              push 000005B8
:00417FDD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417FE0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417FE1 FF15AC864B00            Call dword ptr [004B86AC]
:00417FE7 50                      push eax
:00417FE8 E875030000              call 00418362
:00417FED 83C404                  add esp, 00000004
:00417FF0 50                      push eax
:00417FF1 8B550C                  mov edx, dword ptr [ebp+0C]
:00417FF4 52                      push edx
:00417FF5 8B4508                  mov eax, dword ptr [ebp+08]
:00417FF8 50                      push eax
:00417FF9 E81E020000              call 0041821C
:00417FFE 83C40C                  add esp, 0000000C
:00418001 EB3B                    jmp 0041803E
:00418003 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418006 51                      push ecx
:00418007 8B5508                  mov edx, dword ptr [ebp+08]
:0041800A 52                      push edx
:0041800B E817010000              call 00418127
:00418010 83C408                  add esp, 00000008
:00418013 EB29                    jmp 0041803E
:00418015 68AE040000              push 000004AE
:0041801A 8B4508                  mov eax, dword ptr [ebp+08]
:0041801D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041801E FF15AC864B00            Call dword ptr [004B86AC]
:00418024 50                      push eax
:00418025 E8CA000000              call 004180F4
:0041802A 83C404                  add esp, 00000004
:0041802D 50                      push eax
:0041802E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418031 51                      push ecx
:00418032 8B5508                  mov edx, dword ptr [ebp+08]
:00418035 52                      push edx
:00418036 E8E1010000              call 0041821C
:0041803B 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00417F24(C), :00417F4C(U), :00417F7A(U), :00417FA8(U), :00417FD6(U)
|:00418001(U), :00418013(U)
|
:0041803E 8BE5                    mov esp, ebp
:00418040 5D                      pop ebp
:00418041 C3                      ret



:00418042 D87F4100                DWORD 00417FD8
:00418046 7F7F4100                DWORD 00417F7F
:0041804A AD7F4100                DWORD 00417FAD
:0041804E 517F4100                DWORD 00417F51
:00418052 3C7F4100                DWORD 00417F3C
:00418056 03804100                DWORD 00418003
:0041805A 15804100                DWORD 00418015
:0041805E 3E804100                DWORD 0041803E


:00418062 0007                    add byte ptr [edi], al
:00418064 07                      pop es
:00418065 07                      pop es
:00418066 07                      pop es
:00418067 07                      pop es
:00418068 07                      pop es
:00418069 07                      pop es
:0041806A 07                      pop es
:0041806B 07                      pop es
:0041806C 07                      pop es
:0041806D 07                      pop es
:0041806E 07                      pop es
:0041806F 07                      pop es
:00418070 07                      pop es
:00418071 07                      pop es
:00418072 07                      pop es
:00418073 07                      pop es
:00418074 07                      pop es
:00418075 07                      pop es
:00418076 07                      pop es
:00418077 07                      pop es
:00418078 07                      pop es
:00418079 07                      pop es
:0041807A 07                      pop es
:0041807B 07                      pop es
:0041807C 07                      pop es
:0041807D 0102                    add dword ptr [edx], eax
:0041807F 07                      pop es
:00418080 07                      pop es
:00418081 07                      pop es
:00418082 07                      pop es
:00418083 0307                    add eax, dword ptr [edi]
:00418085 07                      pop es
:00418086 0407                    add al, 07
:00418088 07                      pop es
:00418089 07                      pop es
:0041808A 07                      pop es
:0041808B 07                      pop es
:0041808C 07                      pop es
:0041808D 07                      pop es
:0041808E 07                      pop es
:0041808F 07                      pop es
:00418090 07                      pop es
:00418091 0507070707              add eax, 07070707
:00418096 07                      pop es
:00418097 07                      pop es
:00418098 07                      pop es
:00418099 07                      pop es
:0041809A 07                      pop es
:0041809B 07                      pop es
:0041809C 07                      pop es
:0041809D 07                      pop es
:0041809E 07                      pop es
:0041809F 07                      pop es
:004180A0 07                      pop es
:004180A1 07                      pop es
:004180A2 07                      pop es
:004180A3 07                      pop es
:004180A4 07                      pop es
:004180A5 07                      pop es
:004180A6 07                      pop es
:004180A7 07                      pop es
:004180A8 07                      pop es
:004180A9 07                      pop es
:004180AA 07                      pop es
:004180AB 07                      pop es
:004180AC 07                      pop es
:004180AD 07                      pop es
:004180AE 07                      pop es
:004180AF 07                      pop es
:004180B0 07                      pop es
:004180B1 07                      pop es
:004180B2 07                      pop es
:004180B3 07                      pop es
:004180B4 07                      pop es
:004180B5 07                      pop es
:004180B6 07                      pop es
:004180B7 07                      pop es
:004180B8 07                      pop es
:004180B9 07                      pop es
:004180BA 07                      pop es
:004180BB 07                      pop es
:004180BC 07                      pop es
:004180BD 07                      pop es
:004180BE 07                      pop es
:004180BF 07                      pop es
:004180C0 07                      pop es
:004180C1 07                      pop es
:004180C2 07                      pop es
:004180C3 07                      pop es
:004180C4 07                      pop es
:004180C5 07                      pop es
:004180C6 07                      pop es
:004180C7 07                      pop es
:004180C8 07                      pop es
:004180C9 07                      pop es
:004180CA 07                      pop es
:004180CB 07                      pop es
:004180CC 07                      pop es
:004180CD 07                      pop es
:004180CE 07                      pop es
:004180CF 07                      pop es
:004180D0 07                      pop es
:004180D1 07                      pop es
:004180D2 07                      pop es
:004180D3 07                      pop es
:004180D4 07                      pop es
:004180D5 07                      pop es
:004180D6 07                      pop es
:004180D7 07                      pop es
:004180D8 07                      pop es
:004180D9 07                      pop es
:004180DA 07                      pop es
:004180DB 07                      pop es
:004180DC 07                      pop es
:004180DD 07                      pop es
:004180DE 07                      pop es
:004180DF 07                      pop es
:004180E0 07                      pop es
:004180E1 07                      pop es
:004180E2 07                      pop es
:004180E3 07                      pop es
:004180E4 07                      pop es
:004180E5 07                      pop es
:004180E6 07                      pop es
:004180E7 07                      pop es
:004180E8 07                      pop es
:004180E9 07                      pop es
:004180EA 07                      pop es
:004180EB 07                      pop es
:004180EC 07                      pop es
:004180ED 07                      pop es
:004180EE 07                      pop es
:004180EF 07                      pop es
:004180F0 07                      pop es
:004180F1 07                      pop es
:004180F2 07                      pop es
:004180F3 06                      push es

* Referenced by a CALL at Addresses:
|:00417F61   , :00417F8F   , :00417FBD   , :00418025   , :00418997   
|:00418A4C   , :00418B77   , :00418C02   , :00419140   , :00419792   
|:004198C0   , :00419AA5   , :00419D6B   , :0041A300   , :0041A31B   
|:0041B333   , :0041B354   , :0041B65B   , :0041B6EA   , :0041B705   
|:0041BB7A   , :0041BB89   , :0041BBE1   , :0041BBF0   , :0041BE59   
|:0041BE80   , :0041CBB8   , :0041CBDB   , :0041D425   , :0041D4A7   
|:0041D4D8   
|
:004180F4 55                      push ebp
:004180F5 8BEC                    mov ebp, esp
:004180F7 51                      push ecx
:004180F8 6A00                    push 00000000
:004180FA 6A00                    push 00000000
:004180FC 6847010000              push 00000147
:00418101 8B4508                  mov eax, dword ptr [ebp+08]
:00418104 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418105 FF15D8864B00            Call dword ptr [004B86D8]
:0041810B 8945FC                  mov dword ptr [ebp-04], eax
:0041810E 6A00                    push 00000000
:00418110 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418113 51                      push ecx
:00418114 6850010000              push 00000150
:00418119 8B5508                  mov edx, dword ptr [ebp+08]
:0041811C 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041811D FF15D8864B00            Call dword ptr [004B86D8]
:00418123 8BE5                    mov esp, ebp
:00418125 5D                      pop ebp
:00418126 C3                      ret



* Referenced by a CALL at Addresses:
|:00417F44   , :0041800B   
|
:00418127 55                      push ebp
:00418128 8BEC                    mov ebp, esp
:0041812A 83EC0C                  sub esp, 0000000C
:0041812D 6A00                    push 00000000
:0041812F 6A00                    push 00000000
:00418131 6804100000              push 00001004
:00418136 8B450C                  mov eax, dword ptr [ebp+0C]
:00418139 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041813A FF15D8864B00            Call dword ptr [004B86D8]
:00418140 8945FC                  mov dword ptr [ebp-04], eax
:00418143 C745F800000000          mov [ebp-08], 00000000
:0041814A EB09                    jmp 00418155

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004181AE(U)
|
:0041814C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041814F 83C101                  add ecx, 00000001
:00418152 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041814A(U)
|
:00418155 8B55F8                  mov edx, dword ptr [ebp-08]
:00418158 3B55FC                  cmp edx, dword ptr [ebp-04]
:0041815B 7D53                    jge 004181B0
:0041815D 8B45F8                  mov eax, dword ptr [ebp-08]
:00418160 50                      push eax
:00418161 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418164 51                      push ecx
:00418165 E80CF5FFFF              call 00417676
:0041816A 83C408                  add esp, 00000008
:0041816D 25FFFF0000              and eax, 0000FFFF
:00418172 8945F4                  mov dword ptr [ebp-0C], eax
:00418175 8B55F4                  mov edx, dword ptr [ebp-0C]
:00418178 81E2FFFF0000            and edx, 0000FFFF
:0041817E 8B45F8                  mov eax, dword ptr [ebp-08]
:00418181 25FFFF0000              and eax, 0000FFFF
:00418186 C1E010                  shl eax, 10
:00418189 0BD0                    or edx, eax
:0041818B 52                      push edx
:0041818C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041818F 51                      push ecx
:00418190 8B550C                  mov edx, dword ptr [ebp+0C]
:00418193 52                      push edx
:00418194 E84A000000              call 004181E3
:00418199 83C40C                  add esp, 0000000C
:0041819C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041819F 50                      push eax
:004181A0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004181A3 51                      push ecx
:004181A4 B9C8E24A00              mov ecx, 004AE2C8
:004181A9 E8B2F5FEFF              call 00407760
:004181AE EB9C                    jmp 0041814C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041815B(C)
|
:004181B0 8B55FC                  mov edx, dword ptr [ebp-04]
:004181B3 8955F8                  mov dword ptr [ebp-08], edx
:004181B6 EB09                    jmp 004181C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004181DD(U)
|
:004181B8 8B45F8                  mov eax, dword ptr [ebp-08]
:004181BB 83C001                  add eax, 00000001
:004181BE 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004181B6(U)
|
:004181C1 817DF880000000          cmp dword ptr [ebp-08], 00000080
:004181C8 7D15                    jge 004181DF
:004181CA 68FFFF0000              push 0000FFFF
:004181CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004181D2 51                      push ecx
:004181D3 B9C8E24A00              mov ecx, 004AE2C8
:004181D8 E883F5FEFF              call 00407760
:004181DD EBD9                    jmp 004181B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004181C8(C)
|
:004181DF 8BE5                    mov esp, ebp
:004181E1 5D                      pop ebp
:004181E2 C3                      ret



* Referenced by a CALL at Addresses:
|:00418194   , :0041829E   
|
:004181E3 55                      push ebp
:004181E4 8BEC                    mov ebp, esp
:004181E6 83EC28                  sub esp, 00000028
:004181E9 8B450C                  mov eax, dword ptr [ebp+0C]
:004181EC 8945DC                  mov dword ptr [ebp-24], eax
:004181EF C745E000000000          mov [ebp-20], 00000000
:004181F6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004181F9 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004181FC C745D804000000          mov [ebp-28], 00000004
:00418203 8D55D8                  lea edx, dword ptr [ebp-28]
:00418206 52                      push edx
:00418207 6A00                    push 00000000
:00418209 6806100000              push 00001006
:0041820E 8B4508                  mov eax, dword ptr [ebp+08]
:00418211 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418212 FF15D8864B00            Call dword ptr [004B86D8]
:00418218 8BE5                    mov esp, ebp
:0041821A 5D                      pop ebp
:0041821B C3                      ret



* Referenced by a CALL at Addresses:
|:00417F72   , :00417FA0   , :00417FCE   , :00417FF9   , :00418036   
|
:0041821C 55                      push ebp
:0041821D 8BEC                    mov ebp, esp
:0041821F 83EC10                  sub esp, 00000010
:00418222 56                      push esi
:00418223 8B4D10                  mov ecx, dword ptr [ebp+10]
:00418226 6BC970                  imul ecx, 00000070
:00418229 81C198224900            add ecx, 00492298
:0041822F E817A5FEFF              call 0040274B
:00418234 8845FC                  mov byte ptr [ebp-04], al
:00418237 6A00                    push 00000000
:00418239 6A00                    push 00000000
:0041823B 6804100000              push 00001004
:00418240 8B450C                  mov eax, dword ptr [ebp+0C]
:00418243 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418244 FF15D8864B00            Call dword ptr [004B86D8]
:0041824A 8945F8                  mov dword ptr [ebp-08], eax
:0041824D C745F400000000          mov [ebp-0C], 00000000
:00418254 EB09                    jmp 0041825F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004182BF(U)
|
:00418256 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00418259 83C101                  add ecx, 00000001
:0041825C 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418254(U)
|
:0041825F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00418262 3B55F8                  cmp edx, dword ptr [ebp-08]
:00418265 7D5A                    jge 004182C1
:00418267 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041826A 50                      push eax
:0041826B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041826E 51                      push ecx
:0041826F E802F4FFFF              call 00417676
:00418274 83C408                  add esp, 00000008
:00418277 25FFFF0000              and eax, 0000FFFF
:0041827C 8945F0                  mov dword ptr [ebp-10], eax
:0041827F 8B55F0                  mov edx, dword ptr [ebp-10]
:00418282 81E2FFFF0000            and edx, 0000FFFF
:00418288 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041828B 25FFFF0000              and eax, 0000FFFF
:00418290 C1E010                  shl eax, 10
:00418293 0BD0                    or edx, eax
:00418295 52                      push edx
:00418296 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00418299 51                      push ecx
:0041829A 8B550C                  mov edx, dword ptr [ebp+0C]
:0041829D 52                      push edx
:0041829E E840FFFFFF              call 004181E3
:004182A3 83C40C                  add esp, 0000000C
:004182A6 8A45F0                  mov al, byte ptr [ebp-10]
:004182A9 50                      push eax
:004182AA 8A4DF4                  mov cl, byte ptr [ebp-0C]
:004182AD 51                      push ecx
:004182AE 8B4D10                  mov ecx, dword ptr [ebp+10]
:004182B1 6BC970                  imul ecx, 00000070
:004182B4 81C198224900            add ecx, 00492298
:004182BA E871C5FEFF              call 00404830
:004182BF EB95                    jmp 00418256

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418265(C)
|
:004182C1 8B55F8                  mov edx, dword ptr [ebp-08]
:004182C4 8955F4                  mov dword ptr [ebp-0C], edx
:004182C7 EB09                    jmp 004182D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004182F2(U)
|
:004182C9 8B45F4                  mov eax, dword ptr [ebp-0C]
:004182CC 83C001                  add eax, 00000001
:004182CF 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004182C7(U)
|
:004182D2 837DF408                cmp dword ptr [ebp-0C], 00000008
:004182D6 7D1C                    jge 004182F4

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004182D8 68FF000000              push 000000FF
:004182DD 8A4DF4                  mov cl, byte ptr [ebp-0C]
:004182E0 51                      push ecx
:004182E1 8B4D10                  mov ecx, dword ptr [ebp+10]
:004182E4 6BC970                  imul ecx, 00000070
:004182E7 81C198224900            add ecx, 00492298
:004182ED E83EC5FEFF              call 00404830
:004182F2 EBD5                    jmp 004182C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004182D6(C)
|
:004182F4 8B55FC                  mov edx, dword ptr [ebp-04]
:004182F7 81E2FF000000            and edx, 000000FF
:004182FD 81FAFF000000            cmp edx, 000000FF
:00418303 7458                    je 0041835D
:00418305 C745F400000000          mov [ebp-0C], 00000000
:0041830C EB09                    jmp 00418317

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041835B(U)
|
:0041830E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00418311 83C001                  add eax, 00000001
:00418314 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041830C(U)
|
:00418317 837DF408                cmp dword ptr [ebp-0C], 00000008
:0041831B 7D40                    jge 0041835D
:0041831D 8B75FC                  mov esi, dword ptr [ebp-04]
:00418320 81E6FF000000            and esi, 000000FF
:00418326 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00418329 51                      push ecx
:0041832A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041832D 6BC970                  imul ecx, 00000070
:00418330 81C198224900            add ecx, 00492298
:00418336 E8D5C4FEFF              call 00404810
:0041833B 25FF000000              and eax, 000000FF
:00418340 3BF0                    cmp esi, eax
:00418342 7517                    jne 0041835B
:00418344 8A55F4                  mov dl, byte ptr [ebp-0C]
:00418347 52                      push edx
:00418348 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041834B 6BC970                  imul ecx, 00000070
:0041834E 81C198224900            add ecx, 00492298
:00418354 E8089AFEFF              call 00401D61
:00418359 EB02                    jmp 0041835D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418342(C)
|
:0041835B EBB1                    jmp 0041830E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418303(C), :0041831B(C), :00418359(U)
|
:0041835D 5E                      pop esi
:0041835E 8BE5                    mov esp, ebp
:00418360 5D                      pop ebp
:00418361 C3                      ret



* Referenced by a CALL at Addresses:
|:00417FE8   , :0041D885   , :0041DF5D   , :0041E0BC   , :0041E827   
|:0041E9C5   , :0041F5D4   , :0041F8BF   , :0041F91D   
|
:00418362 55                      push ebp
:00418363 8BEC                    mov ebp, esp
:00418365 83EC08                  sub esp, 00000008
:00418368 6A00                    push 00000000
:0041836A 6A00                    push 00000000
:0041836C 6804100000              push 00001004
:00418371 8B4508                  mov eax, dword ptr [ebp+08]
:00418374 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418375 FF15D8864B00            Call dword ptr [004B86D8]
:0041837B 8945FC                  mov dword ptr [ebp-04], eax
:0041837E C745F800000000          mov [ebp-08], 00000000
:00418385 EB09                    jmp 00418390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004183C4(U)
|
:00418387 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041838A 83C101                  add ecx, 00000001
:0041838D 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418385(U)
|
:00418390 8B55F8                  mov edx, dword ptr [ebp-08]
:00418393 3B55FC                  cmp edx, dword ptr [ebp-04]
:00418396 7D2E                    jge 004183C6

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00418398 6A02                    push 00000002
:0041839A 8B45F8                  mov eax, dword ptr [ebp-08]
:0041839D 50                      push eax
:0041839E 682C100000              push 0000102C
:004183A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004183A6 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004183A7 FF15D8864B00            Call dword ptr [004B86D8]
:004183AD 83F802                  cmp eax, 00000002
:004183B0 7512                    jne 004183C4
:004183B2 8B55F8                  mov edx, dword ptr [ebp-08]
:004183B5 52                      push edx
:004183B6 8B4508                  mov eax, dword ptr [ebp+08]
:004183B9 50                      push eax
:004183BA E8B7F2FFFF              call 00417676
:004183BF 83C408                  add esp, 00000008
:004183C2 EB04                    jmp 004183C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004183B0(C)
|
:004183C4 EBC1                    jmp 00418387

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418396(C)
|
:004183C6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004183C2(U)
|
:004183C8 8BE5                    mov esp, ebp
:004183CA 5D                      pop ebp
:004183CB C3                      ret



* Referenced by a CALL at Addresses:
|:00418965   , :0041B3B5   , :0041E06A   , :00453281   , :0045BF87   
|:0045DFCE   
|
:004183CC 55                      push ebp
:004183CD 8BEC                    mov ebp, esp
:004183CF 83EC10                  sub esp, 00000010
:004183D2 8D45F0                  lea eax, dword ptr [ebp-10]
:004183D5 50                      push eax
:004183D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004183D9 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004183DA FF15C8864B00            Call dword ptr [004B86C8]
:004183E0 8B550C                  mov edx, dword ptr [ebp+0C]
:004183E3 8B45F8                  mov eax, dword ptr [ebp-08]
:004183E6 89420C                  mov dword ptr [edx+0C], eax
:004183E9 8B4D0C                  mov ecx, dword ptr [ebp+0C]

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004183EC C7411011000000          mov [ecx+10], 00000011
:004183F3 8BE5                    mov esp, ebp
:004183F5 5D                      pop ebp
:004183F6 C3                      ret



* Referenced by a CALL at Addresses:
|:004189AA   , :0041B3F4   , :0041E0CF   , :0045DFEB   
|
:004183F7 55                      push ebp
:004183F8 8BEC                    mov ebp, esp
:004183FA 83EC34                  sub esp, 00000034
:004183FD 8B450C                  mov eax, dword ptr [ebp+0C]
:00418400 8B4814                  mov ecx, dword ptr [eax+14]
:00418403 894DD0                  mov dword ptr [ebp-30], ecx
:00418406 8B550C                  mov edx, dword ptr [ebp+0C]
:00418409 8B4208                  mov eax, dword ptr [edx+08]
:0041840C 50                      push eax
:0041840D 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00418410 51                      push ecx
:00418411 E860F2FFFF              call 00417676
:00418416 83C408                  add esp, 00000008
:00418419 8945E8                  mov dword ptr [ebp-18], eax
:0041841C 8B55E8                  mov edx, dword ptr [ebp-18]
:0041841F 81E2FFFF0000            and edx, 0000FFFF
:00418425 8955FC                  mov dword ptr [ebp-04], edx
:00418428 8B45E8                  mov eax, dword ptr [ebp-18]
:0041842B C1E810                  shr eax, 10
:0041842E 25FFFF0000              and eax, 0000FFFF
:00418433 25FFFF0000              and eax, 0000FFFF
:00418438 8945E4                  mov dword ptr [ebp-1C], eax
:0041843B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041843E 83C11C                  add ecx, 0000001C
:00418441 8B11                    mov edx, dword ptr [ecx]
:00418443 8955EC                  mov dword ptr [ebp-14], edx
:00418446 8B4104                  mov eax, dword ptr [ecx+04]
:00418449 8945F0                  mov dword ptr [ebp-10], eax
:0041844C 8B5108                  mov edx, dword ptr [ecx+08]
:0041844F 8955F4                  mov dword ptr [ebp-0C], edx
:00418452 8B410C                  mov eax, dword ptr [ecx+0C]
:00418455 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00418458 6A02                    push 00000002
:0041845A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041845D 8B5108                  mov edx, dword ptr [ecx+08]
:00418460 52                      push edx
:00418461 682C100000              push 0000102C
:00418466 8B45D0                  mov eax, dword ptr [ebp-30]
:00418469 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041846A FF15D8864B00            Call dword ptr [004B86D8]
:00418470 33C9                    xor ecx, ecx
:00418472 83F802                  cmp eax, 00000002
:00418475 0F94C1                  sete cl
:00418478 894DCC                  mov dword ptr [ebp-34], ecx
:0041847B 8B55EC                  mov edx, dword ptr [ebp-14]
:0041847E 8955D4                  mov dword ptr [ebp-2C], edx
:00418481 8B45F0                  mov eax, dword ptr [ebp-10]
:00418484 8945D8                  mov dword ptr [ebp-28], eax
:00418487 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041848A 894DDC                  mov dword ptr [ebp-24], ecx
:0041848D 8B55F8                  mov edx, dword ptr [ebp-08]
:00418490 8955E0                  mov dword ptr [ebp-20], edx
:00418493 C745D400000000          mov [ebp-2C], 00000000
:0041849A 6A00                    push 00000000
:0041849C 6A00                    push 00000000
:0041849E 681D100000              push 0000101D
:004184A3 8B45D0                  mov eax, dword ptr [ebp-30]
:004184A6 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004184A7 FF15D8864B00            Call dword ptr [004B86D8]
:004184AD 8945DC                  mov dword ptr [ebp-24], eax
:004184B0 837DCC00                cmp dword ptr [ebp-34], 00000000
:004184B4 7417                    je 004184CD
:004184B6 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004184B9 51                      push ecx
:004184BA 8D55D4                  lea edx, dword ptr [ebp-2C]
:004184BD 52                      push edx
:004184BE 8B450C                  mov eax, dword ptr [ebp+0C]
:004184C1 8B4818                  mov ecx, dword ptr [eax+18]
:004184C4 51                      push ecx
:004184C5 E86B580000              call 0041DD35
:004184CA 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004184B4(C)
|
:004184CD 8B55EC                  mov edx, dword ptr [ebp-14]
:004184D0 83C202                  add edx, 00000002
:004184D3 8955EC                  mov dword ptr [ebp-14], edx
:004184D6 6A00                    push 00000000
:004184D8 8B45F0                  mov eax, dword ptr [ebp-10]
:004184DB 50                      push eax
:004184DC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004184DF 51                      push ecx
:004184E0 8B550C                  mov edx, dword ptr [ebp+0C]
:004184E3 8B4218                  mov eax, dword ptr [edx+18]
:004184E6 50                      push eax
:004184E7 8A4DE4                  mov cl, byte ptr [ebp-1C]
:004184EA 51                      push ecx
:004184EB 8B55FC                  mov edx, dword ptr [ebp-04]
:004184EE 52                      push edx
:004184EF 8B4508                  mov eax, dword ptr [ebp+08]
:004184F2 50                      push eax
:004184F3 E881ECFFFF              call 00417179
:004184F8 83C40C                  add esp, 0000000C
:004184FB 50                      push eax
:004184FC B910584800              mov ecx, 00485810
:00418501 E89AA90300              call 00452EA0
:00418506 50                      push eax

* Reference To: COMCTL32.ImageList_Draw, Ord:001Ch
                                  |
:00418507 FF1558844B00            Call dword ptr [004B8458]
:0041850D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00418510 83C112                  add ecx, 00000012
:00418513 894DEC                  mov dword ptr [ebp-14], ecx
:00418516 6A00                    push 00000000
:00418518 6A00                    push 00000000
:0041851A 681D100000              push 0000101D
:0041851F 8B55D0                  mov edx, dword ptr [ebp-30]
:00418522 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418523 FF15D8864B00            Call dword ptr [004B86D8]
:00418529 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041852C 8D5401E7                lea edx, dword ptr [ecx+eax-19]
:00418530 8955F4                  mov dword ptr [ebp-0C], edx
:00418533 6A00                    push 00000000
:00418535 6A24                    push 00000024
:00418537 8D45EC                  lea eax, dword ptr [ebp-14]
:0041853A 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041853B 6AFF                    push FFFFFFFF
:0041853D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418540 6BC933                  imul ecx, 00000033
:00418543 81C1C8EF4800            add ecx, 0048EFC8
:00418549 E862F2FEFF              call 004077B0
:0041854E 50                      push eax
:0041854F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418552 8B5118                  mov edx, dword ptr [ecx+18]
:00418555 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00418556 FF1564874B00            Call dword ptr [004B8764]
:0041855C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041855F 83C005                  add eax, 00000005
:00418562 8945F4                  mov dword ptr [ebp-0C], eax
:00418565 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00418568 894DD4                  mov dword ptr [ebp-2C], ecx
:0041856B 6A00                    push 00000000
:0041856D 6A01                    push 00000001
:0041856F 681D100000              push 0000101D
:00418574 8B55D0                  mov edx, dword ptr [ebp-30]
:00418577 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418578 FF15D8864B00            Call dword ptr [004B86D8]
:0041857E 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00418581 03C8                    add ecx, eax
:00418583 894DDC                  mov dword ptr [ebp-24], ecx
:00418586 8B55CC                  mov edx, dword ptr [ebp-34]
:00418589 52                      push edx
:0041858A 8D45D4                  lea eax, dword ptr [ebp-2C]
:0041858D 50                      push eax
:0041858E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418591 8B5118                  mov edx, dword ptr [ecx+18]
:00418594 52                      push edx
:00418595 E89B570000              call 0041DD35
:0041859A 83C40C                  add esp, 0000000C
:0041859D 8B45F4                  mov eax, dword ptr [ebp-0C]
:004185A0 83C005                  add eax, 00000005
:004185A3 8945EC                  mov dword ptr [ebp-14], eax
:004185A6 6A00                    push 00000000
:004185A8 6A01                    push 00000001
:004185AA 681D100000              push 0000101D
:004185AF 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004185B2 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004185B3 FF15D8864B00            Call dword ptr [004B86D8]
:004185B9 8B55EC                  mov edx, dword ptr [ebp-14]
:004185BC 8D4402F6                lea eax, dword ptr [edx+eax-0A]
:004185C0 8945F4                  mov dword ptr [ebp-0C], eax
:004185C3 6A00                    push 00000000
:004185C5 6A24                    push 00000024
:004185C7 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004185CA 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004185CB 6AFF                    push FFFFFFFF
:004185CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004185D0 6BC933                  imul ecx, 00000033
:004185D3 81C1C8EF4800            add ecx, 0048EFC8
:004185D9 E8BDD2FEFF              call 0040589B
:004185DE 25FF000000              and eax, 000000FF
:004185E3 8B1485707B4700          mov edx, dword ptr [4*eax+00477B70]
:004185EA 52                      push edx
:004185EB 8B450C                  mov eax, dword ptr [ebp+0C]
:004185EE 8B4818                  mov ecx, dword ptr [eax+18]
:004185F1 51                      push ecx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:004185F2 FF1564874B00            Call dword ptr [004B8764]
:004185F8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004185FB 83C205                  add edx, 00000005
:004185FE 8955F4                  mov dword ptr [ebp-0C], edx
:00418601 8B45DC                  mov eax, dword ptr [ebp-24]
:00418604 8945D4                  mov dword ptr [ebp-2C], eax
:00418607 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00418609 6A02                    push 00000002
:0041860B 681D100000              push 0000101D
:00418610 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00418613 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418614 FF15D8864B00            Call dword ptr [004B86D8]
:0041861A 8B55DC                  mov edx, dword ptr [ebp-24]
:0041861D 03D0                    add edx, eax
:0041861F 8955DC                  mov dword ptr [ebp-24], edx
:00418622 8B45CC                  mov eax, dword ptr [ebp-34]
:00418625 50                      push eax
:00418626 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00418629 51                      push ecx
:0041862A 8B550C                  mov edx, dword ptr [ebp+0C]
:0041862D 8B4218                  mov eax, dword ptr [edx+18]
:00418630 50                      push eax
:00418631 E8FF560000              call 0041DD35
:00418636 83C40C                  add esp, 0000000C
:00418639 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041863C 83C105                  add ecx, 00000005
:0041863F 894DEC                  mov dword ptr [ebp-14], ecx
:00418642 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00418644 6A02                    push 00000002
:00418646 681D100000              push 0000101D
:0041864B 8B55D0                  mov edx, dword ptr [ebp-30]
:0041864E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041864F FF15D8864B00            Call dword ptr [004B86D8]
:00418655 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00418658 8D5401F6                lea edx, dword ptr [ecx+eax-0A]
:0041865C 8955F4                  mov dword ptr [ebp-0C], edx
:0041865F 6A00                    push 00000000
:00418661 6A24                    push 00000024
:00418663 8D45EC                  lea eax, dword ptr [ebp-14]
:00418666 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00418667 6AFF                    push FFFFFFFF
:00418669 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041866C 6BC933                  imul ecx, 00000033
:0041866F 81C1C8EF4800            add ecx, 0048EFC8
:00418675 E8E6780000              call 0041FF60
:0041867A 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0041867B 68E8714700              push 004771E8
:00418680 E842F2FFFF              call 004178C7
:00418685 83C408                  add esp, 00000008
:00418688 50                      push eax
:00418689 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041868C 8B5118                  mov edx, dword ptr [ecx+18]
:0041868F 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00418690 FF1564874B00            Call dword ptr [004B8764]
:00418696 8B45F4                  mov eax, dword ptr [ebp-0C]
:00418699 83C005                  add eax, 00000005
:0041869C 8945F4                  mov dword ptr [ebp-0C], eax
:0041869F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004186A2 894DD4                  mov dword ptr [ebp-2C], ecx
:004186A5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004186A7 6A03                    push 00000003
:004186A9 681D100000              push 0000101D
:004186AE 8B55D0                  mov edx, dword ptr [ebp-30]
:004186B1 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004186B2 FF15D8864B00            Call dword ptr [004B86D8]
:004186B8 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004186BB 03C8                    add ecx, eax
:004186BD 894DDC                  mov dword ptr [ebp-24], ecx
:004186C0 8B55CC                  mov edx, dword ptr [ebp-34]
:004186C3 52                      push edx
:004186C4 8D45D4                  lea eax, dword ptr [ebp-2C]
:004186C7 50                      push eax
:004186C8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004186CB 8B5118                  mov edx, dword ptr [ecx+18]
:004186CE 52                      push edx
:004186CF E861560000              call 0041DD35
:004186D4 83C40C                  add esp, 0000000C
:004186D7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004186DA 83C005                  add eax, 00000005
:004186DD 8945EC                  mov dword ptr [ebp-14], eax
:004186E0 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004186E2 6A03                    push 00000003
:004186E4 681D100000              push 0000101D
:004186E9 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004186EC 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004186ED FF15D8864B00            Call dword ptr [004B86D8]
:004186F3 8B55EC                  mov edx, dword ptr [ebp-14]
:004186F6 8D4402F6                lea eax, dword ptr [edx+eax-0A]
:004186FA 8945F4                  mov dword ptr [ebp-0C], eax
:004186FD 6A00                    push 00000000
:004186FF 6A24                    push 00000024
:00418701 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00418704 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00418705 6AFF                    push FFFFFFFF
:00418707 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041870A 6BC933                  imul ecx, 00000033
:0041870D 81C1C8EF4800            add ecx, 0048EFC8
:00418713 E818790000              call 00420030
:00418718 25FF000000              and eax, 000000FF
:0041871D 50                      push eax

* Possible StringData Ref from Data Obj ->"+%u"
                                  |
:0041871E 68F0714700              push 004771F0
:00418723 E89FF1FFFF              call 004178C7
:00418728 83C408                  add esp, 00000008
:0041872B 50                      push eax
:0041872C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041872F 8B4218                  mov eax, dword ptr [edx+18]
:00418732 50                      push eax

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00418733 FF1564874B00            Call dword ptr [004B8764]
:00418739 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041873C 83C105                  add ecx, 00000005
:0041873F 894DF4                  mov dword ptr [ebp-0C], ecx
:00418742 8B55DC                  mov edx, dword ptr [ebp-24]
:00418745 8955D4                  mov dword ptr [ebp-2C], edx
:00418748 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041874A 6A04                    push 00000004
:0041874C 681D100000              push 0000101D
:00418751 8B45D0                  mov eax, dword ptr [ebp-30]
:00418754 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418755 FF15D8864B00            Call dword ptr [004B86D8]
:0041875B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041875E 03C8                    add ecx, eax
:00418760 894DDC                  mov dword ptr [ebp-24], ecx
:00418763 8B55CC                  mov edx, dword ptr [ebp-34]
:00418766 52                      push edx
:00418767 8D45D4                  lea eax, dword ptr [ebp-2C]
:0041876A 50                      push eax
:0041876B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041876E 8B5118                  mov edx, dword ptr [ecx+18]
:00418771 52                      push edx
:00418772 E8BE550000              call 0041DD35
:00418777 83C40C                  add esp, 0000000C
:0041877A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041877D 83C005                  add eax, 00000005
:00418780 8945EC                  mov dword ptr [ebp-14], eax
:00418783 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00418785 6A04                    push 00000004
:00418787 681D100000              push 0000101D
:0041878C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0041878F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418790 FF15D8864B00            Call dword ptr [004B86D8]
:00418796 8B55EC                  mov edx, dword ptr [ebp-14]
:00418799 8D4402F6                lea eax, dword ptr [edx+eax-0A]
:0041879D 8945F4                  mov dword ptr [ebp-0C], eax
:004187A0 6A00                    push 00000000
:004187A2 6A24                    push 00000024
:004187A4 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004187A7 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004187A8 6AFF                    push FFFFFFFF
:004187AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004187AD 6BC933                  imul ecx, 00000033
:004187B0 81C1C8EF4800            add ecx, 0048EFC8
:004187B6 E875BFFEFF              call 00404730
:004187BB 25FF000000              and eax, 000000FF
:004187C0 50                      push eax

* Possible StringData Ref from Data Obj ->"+%u"
                                  |
:004187C1 68F4714700              push 004771F4
:004187C6 E8FCF0FFFF              call 004178C7
:004187CB 83C408                  add esp, 00000008
:004187CE 50                      push eax
:004187CF 8B550C                  mov edx, dword ptr [ebp+0C]
:004187D2 8B4218                  mov eax, dword ptr [edx+18]
:004187D5 50                      push eax

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:004187D6 FF1564874B00            Call dword ptr [004B8764]
:004187DC 8BE5                    mov esp, ebp
:004187DE 5D                      pop ebp
:004187DF C3                      ret


:004187E0 55                      push ebp
:004187E1 8BEC                    mov ebp, esp
:004187E3 83EC3C                  sub esp, 0000003C
:004187E6 56                      push esi
:004187E7 57                      push edi
:004187E8 8B450C                  mov eax, dword ptr [ebp+0C]
:004187EB 8945C8                  mov dword ptr [ebp-38], eax
:004187EE 837DC805                cmp dword ptr [ebp-38], 00000005
:004187F2 7719                    ja 0041880D
:004187F4 837DC805                cmp dword ptr [ebp-38], 00000005
:004187F8 0F84A3000000            je 004188A1
:004187FE 837DC802                cmp dword ptr [ebp-38], 00000002
:00418802 0F84AF010000            je 004189B7
:00418808 E98B040000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004187F2(C)
|
:0041880D 837DC82B                cmp dword ptr [ebp-38], 0000002B
:00418811 7723                    ja 00418836
:00418813 837DC82B                cmp dword ptr [ebp-38], 0000002B
:00418817 0F845A010000            je 00418977
:0041881D 837DC80F                cmp dword ptr [ebp-38], 0000000F
:00418821 0F8415010000            je 0041893C
:00418827 837DC810                cmp dword ptr [ebp-38], 00000010
:0041882B 0F848B010000            je 004189BC
:00418831 E962040000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418811(C)
|
:00418836 837DC84E                cmp dword ptr [ebp-38], 0000004E
:0041883A 7719                    ja 00418855
:0041883C 837DC84E                cmp dword ptr [ebp-38], 0000004E
:00418840 0F846E020000            je 00418AB4
:00418846 837DC82C                cmp dword ptr [ebp-38], 0000002C
:0041884A 0F8402010000            je 00418952
:00418850 E943040000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041883A(C)
|
:00418855 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00418858 81E910010000            sub ecx, 00000110
:0041885E 894DC8                  mov dword ptr [ebp-38], ecx
:00418861 817DC8F2000000          cmp dword ptr [ebp-38], 000000F2
:00418868 0F872A040000            ja 00418C98
:0041886E 8B45C8                  mov eax, dword ptr [ebp-38]
:00418871 33D2                    xor edx, edx
:00418873 8A90B68C4100            mov dl, byte ptr [eax+00418CB6]
:00418879 FF2495A28C4100          jmp dword ptr [4*edx+00418CA2]
:00418880 B910584800              mov ecx, 00485810
:00418885 E846770000              call 0041FFD0
:0041888A 50                      push eax
:0041888B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041888E 51                      push ecx
:0041888F E87D090000              call 00419211
:00418894 83C408                  add esp, 00000008
:00418897 B801000000              mov eax, 00000001
:0041889C E9F9030000              jmp 00418C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004187F8(C)
|
:004188A1 8B5514                  mov edx, dword ptr [ebp+14]
:004188A4 81E2FFFF0000            and edx, 0000FFFF
:004188AA 8955FC                  mov dword ptr [ebp-04], edx
:004188AD 8B4514                  mov eax, dword ptr [ebp+14]
:004188B0 C1E810                  shr eax, 10
:004188B3 25FFFF0000              and eax, 0000FFFF
:004188B8 25FFFF0000              and eax, 0000FFFF
:004188BD 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004188C0 6A10                    push 00000010

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004188C2 FF1578874B00            Call dword ptr [004B8778]
:004188C8 3945FC                  cmp dword ptr [ebp-04], eax
:004188CB 7E0B                    jle 004188D8

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004188CD 6A10                    push 00000010

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004188CF FF1578874B00            Call dword ptr [004B8778]
:004188D5 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004188CB(C)
|

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004188D8 6A11                    push 00000011

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004188DA FF1578874B00            Call dword ptr [004B8778]
:004188E0 3945F8                  cmp dword ptr [ebp-08], eax
:004188E3 7E0B                    jle 004188F0

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004188E5 6A11                    push 00000011

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004188E7 FF1578874B00            Call dword ptr [004B8778]
:004188ED 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004188E3(C)
|
:004188F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004188F3 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:004188F4 FF1584874B00            Call dword ptr [004B8784]
:004188FA 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004188FD 6A02                    push 00000002
:004188FF B9C8E24A00              mov ecx, 004AE2C8
:00418904 E897760000              call 0041FFA0
:00418909 85C0                    test eax, eax
:0041890B 7416                    je 00418923
:0041890D 8B55F8                  mov edx, dword ptr [ebp-08]
:00418910 52                      push edx
:00418911 8B45FC                  mov eax, dword ptr [ebp-04]
:00418914 50                      push eax
:00418915 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418918 51                      push ecx
:00418919 E8D70C0000              call 004195F5
:0041891E 83C40C                  add esp, 0000000C
:00418921 EB14                    jmp 00418937

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041890B(C)
|
:00418923 8B55F8                  mov edx, dword ptr [ebp-08]
:00418926 52                      push edx
:00418927 8B45FC                  mov eax, dword ptr [ebp-04]
:0041892A 50                      push eax
:0041892B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041892E 51                      push ecx
:0041892F E86A0D0000              call 0041969E
:00418934 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418921(U)
|
:00418937 E95C030000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418821(C)
|
:0041893C 6842010000              push 00000142
:00418941 8B5508                  mov edx, dword ptr [ebp+08]
:00418944 52                      push edx
:00418945 E8A4240400              call 0045ADEE
:0041894A 83C408                  add esp, 00000008
:0041894D E946030000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041884A(C)
|
:00418952 8B4514                  mov eax, dword ptr [ebp+14]
:00418955 50                      push eax
:00418956 8B4D10                  mov ecx, dword ptr [ebp+10]
:00418959 51                      push ecx
:0041895A 8B5508                  mov edx, dword ptr [ebp+08]
:0041895D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041895E FF15AC864B00            Call dword ptr [004B86AC]
:00418964 50                      push eax
:00418965 E862FAFFFF              call 004183CC
:0041896A 83C408                  add esp, 00000008
:0041896D B801000000              mov eax, 00000001
:00418972 E923030000              jmp 00418C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418817(C)
|
:00418977 C745F0FFFF0000          mov [ebp-10], 0000FFFF
:0041897E 817D103B040000          cmp dword ptr [ebp+10], 0000043B
:00418985 751B                    jne 004189A2

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:00418987 683D040000              push 0000043D
:0041898C 8B4508                  mov eax, dword ptr [ebp+08]
:0041898F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418990 FF15AC864B00            Call dword ptr [004B86AC]
:00418996 50                      push eax
:00418997 E858F7FFFF              call 004180F4
:0041899C 83C404                  add esp, 00000004
:0041899F 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418985(C)
|
:004189A2 8B4D14                  mov ecx, dword ptr [ebp+14]
:004189A5 51                      push ecx
:004189A6 8B55F0                  mov edx, dword ptr [ebp-10]
:004189A9 52                      push edx
:004189AA E848FAFFFF              call 004183F7
:004189AF 83C408                  add esp, 00000008
:004189B2 E9E1020000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418802(C)
|
:004189B7 E9DC020000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041882B(C)
|
:004189BC 6A01                    push 00000001
:004189BE 8B4508                  mov eax, dword ptr [ebp+08]
:004189C1 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004189C2 FF15B0874B00            Call dword ptr [004B87B0]
:004189C8 E9CB020000              jmp 00418C98
:004189CD 833D4459480000          cmp dword ptr [00485944], 00000000
:004189D4 7418                    je 004189EE

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:004189D6 FF1564844B00            Call dword ptr [004B8464]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:004189DC FF1554874B00            Call dword ptr [004B8754]
:004189E2 C7054459480000000000    mov dword ptr [00485944], 00000000
:004189EC EB21                    jmp 00418A0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004189D4(C)
|
:004189EE 8B4D14                  mov ecx, dword ptr [ebp+14]
:004189F1 51                      push ecx
:004189F2 668B5510                mov dx, word ptr [ebp+10]
:004189F6 52                      push edx
:004189F7 8B4510                  mov eax, dword ptr [ebp+10]
:004189FA C1E810                  shr eax, 10
:004189FD 25FFFF0000              and eax, 0000FFFF
:00418A02 50                      push eax
:00418A03 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418A06 51                      push ecx
:00418A07 E83B0D0000              call 00419747
:00418A0C 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004189EC(U)
|
:00418A0F E984020000              jmp 00418C98
:00418A14 833D4459480000          cmp dword ptr [00485944], 00000000
:00418A1B 7462                    je 00418A7F
:00418A1D 8B5514                  mov edx, dword ptr [ebp+14]
:00418A20 52                      push edx
:00418A21 68B8584800              push 004858B8
:00418A26 A144594800              mov eax, dword ptr [00485944]
:00418A2B 50                      push eax
:00418A2C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418A2F 51                      push ecx
:00418A30 E8C10D0000              call 004197F6
:00418A35 83C410                  add esp, 00000010
:00418A38 85C0                    test eax, eax
:00418A3A 7421                    je 00418A5D

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:00418A3C 683D040000              push 0000043D
:00418A41 8B5508                  mov edx, dword ptr [ebp+08]
:00418A44 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418A45 FF15AC864B00            Call dword ptr [004B86AC]
:00418A4B 50                      push eax
:00418A4C E8A3F6FFFF              call 004180F4
:00418A51 83C404                  add esp, 00000004
:00418A54 50                      push eax
:00418A55 E8F6E40400              call 00466F50
:00418A5A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A3A(C)
|

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:00418A5D FF1564844B00            Call dword ptr [004B8464]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00418A63 FF1554874B00            Call dword ptr [004B8754]
:00418A69 C7054459480000000000    mov dword ptr [00485944], 00000000
:00418A73 8B4508                  mov eax, dword ptr [ebp+08]
:00418A76 50                      push eax
:00418A77 E8B0060000              call 0041912C
:00418A7C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A1B(C)
|
:00418A7F E914020000              jmp 00418C98
:00418A84 833D4459480000          cmp dword ptr [00485944], 00000000
:00418A8B 7422                    je 00418AAF
:00418A8D 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00418A90 51                      push ecx

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:00418A91 FF1560874B00            Call dword ptr [004B8760]
:00418A97 8B55EC                  mov edx, dword ptr [ebp-14]
:00418A9A 52                      push edx
:00418A9B 8B45E8                  mov eax, dword ptr [ebp-18]
:00418A9E 50                      push eax

* Reference To: COMCTL32.ImageList_DragMove, Ord:001Ah
                                  |
:00418A9F FF1560844B00            Call dword ptr [004B8460]
:00418AA5 B801000000              mov eax, 00000001
:00418AAA E9EB010000              jmp 00418C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A8B(C)
|
:00418AAF E9E4010000              jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418840(C)
|
:00418AB4 8B4D14                  mov ecx, dword ptr [ebp+14]
:00418AB7 894DE4                  mov dword ptr [ebp-1C], ecx
:00418ABA 8B55E4                  mov edx, dword ptr [ebp-1C]
:00418ABD 8B4208                  mov eax, dword ptr [edx+08]
:00418AC0 8945C4                  mov dword ptr [ebp-3C], eax
:00418AC3 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00418AC6 83C16D                  add ecx, 0000006D
:00418AC9 894DC4                  mov dword ptr [ebp-3C], ecx
:00418ACC 837DC46B                cmp dword ptr [ebp-3C], 0000006B
:00418AD0 0F8785010000            ja 00418C5B
:00418AD6 8B45C4                  mov eax, dword ptr [ebp-3C]
:00418AD9 33D2                    xor edx, edx
:00418ADB 8A90C18D4100            mov dl, byte ptr [eax+00418DC1]
:00418AE1 FF2495A98D4100          jmp dword ptr [4*edx+00418DA9]
:00418AE8 817D103E040000          cmp dword ptr [ebp+10], 0000043E
:00418AEF 7409                    je 00418AFA
:00418AF1 817D103B040000          cmp dword ptr [ebp+10], 0000043B
:00418AF8 7525                    jne 00418B1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418AEF(C)
|
:00418AFA 8B7514                  mov esi, dword ptr [ebp+14]

* Possible Reference to String Resource ID=00011: "
"
                                  |
:00418AFD B90B000000              mov ecx, 0000000B
:00418B02 BFB8584800              mov edi, 004858B8
:00418B07 F3                      repz
:00418B08 A5                      movsd
:00418B09 68B8584800              push 004858B8
:00418B0E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418B11 51                      push ecx
:00418B12 E874250000              call 0041B08B
:00418B17 83C408                  add esp, 00000008
:00418B1A A344594800              mov dword ptr [00485944], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418AF8(C)
|
:00418B1F E974010000              jmp 00418C98
:00418B24 8B55E4                  mov edx, dword ptr [ebp-1C]
:00418B27 817A043B040000          cmp dword ptr [edx+04], 0000043B
:00418B2E 740C                    je 00418B3C
:00418B30 8B45E4                  mov eax, dword ptr [ebp-1C]
:00418B33 8178043E040000          cmp dword ptr [eax+04], 0000043E
:00418B3A 7514                    jne 00418B50

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B2E(C)
|
:00418B3C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00418B3F 51                      push ecx
:00418B40 8B5510                  mov edx, dword ptr [ebp+10]
:00418B43 52                      push edx
:00418B44 8B4508                  mov eax, dword ptr [ebp+08]
:00418B47 50                      push eax
:00418B48 E8321E0000              call 0041A97F
:00418B4D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B3A(C)
|
:00418B50 E943010000              jmp 00418C98
:00418B55 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00418B58 8179043B040000          cmp dword ptr [ecx+04], 0000043B
:00418B5F 754C                    jne 00418BAD

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:00418B61 683D040000              push 0000043D
:00418B66 8B5508                  mov edx, dword ptr [ebp+08]
:00418B69 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418B6A FF15AC864B00            Call dword ptr [004B86AC]
:00418B70 8945DC                  mov dword ptr [ebp-24], eax
:00418B73 8B45DC                  mov eax, dword ptr [ebp-24]
:00418B76 50                      push eax
:00418B77 E878F5FFFF              call 004180F4
:00418B7C 83C404                  add esp, 00000004
:00418B7F 8945E0                  mov dword ptr [ebp-20], eax
:00418B82 6A00                    push 00000000
:00418B84 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00418B87 51                      push ecx
:00418B88 8B55E0                  mov edx, dword ptr [ebp-20]
:00418B8B 52                      push edx
:00418B8C 8B4508                  mov eax, dword ptr [ebp+08]
:00418B8F 50                      push eax
:00418B90 E87D160000              call 0041A212
:00418B95 83C410                  add esp, 00000010
:00418B98 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00418B9B 51                      push ecx
:00418B9C 6885020000              push 00000285
:00418BA1 8B55DC                  mov edx, dword ptr [ebp-24]
:00418BA4 52                      push edx
:00418BA5 E88AE8FFFF              call 00417434
:00418BAA 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B5F(C)
|
:00418BAD E9E6000000              jmp 00418C98
:00418BB2 8B45E4                  mov eax, dword ptr [ebp-1C]
:00418BB5 8178043B040000          cmp dword ptr [eax+04], 0000043B
:00418BBC 740C                    je 00418BCA
:00418BBE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00418BC1 8179043E040000          cmp dword ptr [ecx+04], 0000043E
:00418BC8 7510                    jne 00418BDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418BBC(C)
|
:00418BCA 8B55E4                  mov edx, dword ptr [ebp-1C]
:00418BCD 52                      push edx
:00418BCE 8B4508                  mov eax, dword ptr [ebp+08]
:00418BD1 50                      push eax
:00418BD2 E8631E0000              call 0041AA3A
:00418BD7 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418BC8(C)
|
:00418BDA E9B9000000              jmp 00418C98
:00418BDF 8B4D14                  mov ecx, dword ptr [ebp+14]
:00418BE2 894DD8                  mov dword ptr [ebp-28], ecx
:00418BE5 8B55D8                  mov edx, dword ptr [ebp-28]
:00418BE8 8B4214                  mov eax, dword ptr [edx+14]
:00418BEB 83E002                  and eax, 00000002
:00418BEE 85C0                    test eax, eax
:00418BF0 7467                    je 00418C59

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:00418BF2 683D040000              push 0000043D
:00418BF7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418BFA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418BFB FF15AC864B00            Call dword ptr [004B86AC]
:00418C01 50                      push eax
:00418C02 E8EDF4FFFF              call 004180F4
:00418C07 83C404                  add esp, 00000004
:00418C0A 8945D4                  mov dword ptr [ebp-2C], eax
:00418C0D 8B55D8                  mov edx, dword ptr [ebp-28]
:00418C10 817A043E040000          cmp dword ptr [edx+04], 0000043E
:00418C17 740C                    je 00418C25
:00418C19 8B45D8                  mov eax, dword ptr [ebp-28]
:00418C1C 8178043B040000          cmp dword ptr [eax+04], 0000043B
:00418C23 7522                    jne 00418C47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418C17(C)
|
:00418C25 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00418C28 33D2                    xor edx, edx
:00418C2A 668B5128                mov dx, word ptr [ecx+28]
:00418C2E 8955D0                  mov dword ptr [ebp-30], edx
:00418C31 8B45D0                  mov eax, dword ptr [ebp-30]
:00418C34 50                      push eax
:00418C35 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00418C38 51                      push ecx
:00418C39 8B5508                  mov edx, dword ptr [ebp+08]
:00418C3C 52                      push edx
:00418C3D E8751E0000              call 0041AAB7
:00418C42 83C40C                  add esp, 0000000C
:00418C45 EB12                    jmp 00418C59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418C23(C)
|
:00418C47 6A01                    push 00000001
:00418C49 8B45D4                  mov eax, dword ptr [ebp-2C]
:00418C4C 50                      push eax
:00418C4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418C50 51                      push ecx
:00418C51 E8D7010000              call 00418E2D
:00418C56 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418BF0(C), :00418C45(U)
|
:00418C59 EB3D                    jmp 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418AD0(C)
|
:00418C5B 817D103B040000          cmp dword ptr [ebp+10], 0000043B
:00418C62 7409                    je 00418C6D
:00418C64 817D103E040000          cmp dword ptr [ebp+10], 0000043E
:00418C6B 752B                    jne 00418C98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418C62(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00418C6D 6A02                    push 00000002
:00418C6F B9C8E24A00              mov ecx, 004AE2C8
:00418C74 E827730000              call 0041FFA0
:00418C79 8945CC                  mov dword ptr [ebp-34], eax
:00418C7C 8B55CC                  mov edx, dword ptr [ebp-34]
:00418C7F 52                      push edx
:00418C80 8B4514                  mov eax, dword ptr [ebp+14]
:00418C83 50                      push eax
:00418C84 8B4D10                  mov ecx, dword ptr [ebp+10]
:00418C87 51                      push ecx
:00418C88 8B550C                  mov edx, dword ptr [ebp+0C]
:00418C8B 52                      push edx
:00418C8C 8B4508                  mov eax, dword ptr [ebp+08]
:00418C8F 50                      push eax
:00418C90 E858ECFFFF              call 004178ED
:00418C95 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418808(U), :00418831(U), :00418850(U), :00418868(C), :00418937(U)
|:0041894D(U), :004189B2(U), :004189B7(U), :004189C8(U), :00418A0F(U)
|:00418A7F(U), :00418AAF(U), :00418B1F(U), :00418B50(U), :00418BAD(U)
|:00418BDA(U), :00418C59(U), :00418C6B(C)
|
:00418C98 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041889C(U), :00418972(U), :00418AAA(U)
|
:00418C9A 5F                      pop edi
:00418C9B 5E                      pop esi
:00418C9C 8BE5                    mov esp, ebp
:00418C9E 5D                      pop ebp
:00418C9F C21000                  ret 0010



:00418CA2 80884100                DWORD 00418880
:00418CA6 CD894100                DWORD 004189CD
:00418CAA 848A4100                DWORD 00418A84
:00418CAE 148A4100                DWORD 00418A14
:00418CB2 988C4100                DWORD 00418C98


:00418CB6 0001                    add byte ptr [ecx], al
:00418CB8 0404                    add al, 04
:00418CBA 0404                    add al, 04
:00418CBC 0404                    add al, 04
:00418CBE 0404                    add al, 04
:00418CC0 0404                    add al, 04
:00418CC2 0404                    add al, 04
:00418CC4 0404                    add al, 04
:00418CC6 0404                    add al, 04
:00418CC8 0404                    add al, 04
:00418CCA 0404                    add al, 04
:00418CCC 0404                    add al, 04
:00418CCE 0404                    add al, 04
:00418CD0 0404                    add al, 04
:00418CD2 0404                    add al, 04
:00418CD4 0404                    add al, 04
:00418CD6 0404                    add al, 04
:00418CD8 0404                    add al, 04
:00418CDA 0404                    add al, 04
:00418CDC 0404                    add al, 04
:00418CDE 0404                    add al, 04
:00418CE0 0404                    add al, 04
:00418CE2 0404                    add al, 04
:00418CE4 0404                    add al, 04
:00418CE6 0404                    add al, 04
:00418CE8 0404                    add al, 04
:00418CEA 0404                    add al, 04
:00418CEC 0404                    add al, 04
:00418CEE 0404                    add al, 04
:00418CF0 0404                    add al, 04
:00418CF2 0404                    add al, 04
:00418CF4 0404                    add al, 04
:00418CF6 0404                    add al, 04
:00418CF8 0404                    add al, 04
:00418CFA 0404                    add al, 04
:00418CFC 0404                    add al, 04
:00418CFE 0404                    add al, 04
:00418D00 0404                    add al, 04
:00418D02 0404                    add al, 04
:00418D04 0404                    add al, 04
:00418D06 0404                    add al, 04
:00418D08 0404                    add al, 04
:00418D0A 0404                    add al, 04
:00418D0C 0404                    add al, 04
:00418D0E 0404                    add al, 04
:00418D10 0404                    add al, 04
:00418D12 0404                    add al, 04
:00418D14 0404                    add al, 04
:00418D16 0404                    add al, 04
:00418D18 0404                    add al, 04
:00418D1A 0404                    add al, 04
:00418D1C 0404                    add al, 04
:00418D1E 0404                    add al, 04
:00418D20 0404                    add al, 04
:00418D22 0404                    add al, 04
:00418D24 0404                    add al, 04
:00418D26 0404                    add al, 04
:00418D28 0404                    add al, 04
:00418D2A 0404                    add al, 04
:00418D2C 0404                    add al, 04
:00418D2E 0404                    add al, 04
:00418D30 0404                    add al, 04
:00418D32 0404                    add al, 04
:00418D34 0404                    add al, 04
:00418D36 0404                    add al, 04
:00418D38 0404                    add al, 04
:00418D3A 0404                    add al, 04
:00418D3C 0404                    add al, 04
:00418D3E 0404                    add al, 04
:00418D40 0404                    add al, 04
:00418D42 0404                    add al, 04
:00418D44 0404                    add al, 04
:00418D46 0404                    add al, 04
:00418D48 0404                    add al, 04
:00418D4A 0404                    add al, 04
:00418D4C 0404                    add al, 04
:00418D4E 0404                    add al, 04
:00418D50 0404                    add al, 04
:00418D52 0404                    add al, 04
:00418D54 0404                    add al, 04
:00418D56 0404                    add al, 04
:00418D58 0404                    add al, 04
:00418D5A 0404                    add al, 04
:00418D5C 0404                    add al, 04
:00418D5E 0404                    add al, 04
:00418D60 0404                    add al, 04
:00418D62 0404                    add al, 04
:00418D64 0404                    add al, 04
:00418D66 0404                    add al, 04
:00418D68 0404                    add al, 04
:00418D6A 0404                    add al, 04
:00418D6C 0404                    add al, 04
:00418D6E 0404                    add al, 04
:00418D70 0404                    add al, 04
:00418D72 0404                    add al, 04
:00418D74 0404                    add al, 04
:00418D76 0404                    add al, 04
:00418D78 0404                    add al, 04
:00418D7A 0404                    add al, 04
:00418D7C 0404                    add al, 04
:00418D7E 0404                    add al, 04
:00418D80 0404                    add al, 04
:00418D82 0404                    add al, 04
:00418D84 0404                    add al, 04
:00418D86 0404                    add al, 04
:00418D88 0404                    add al, 04
:00418D8A 0404                    add al, 04
:00418D8C 0404                    add al, 04
:00418D8E 0404                    add al, 04
:00418D90 0404                    add al, 04
:00418D92 0404                    add al, 04
:00418D94 0404                    add al, 04
:00418D96 0404                    add al, 04
:00418D98 0404                    add al, 04
:00418D9A 0404                    add al, 04
:00418D9C 0404                    add al, 04
:00418D9E 0404                    add al, 04
:00418DA0 0404                    add al, 04
:00418DA2 0404                    add al, 04
:00418DA4 0404                    add al, 04
:00418DA6 020403                  add al, byte ptr [ebx+eax]

:00418DA9 E88A4100                DWORD 00418AE8
:00418DAD DF8B4100                DWORD 00418BDF
:00418DB1 248B4100                DWORD 00418B24
:00418DB5 558B4100                DWORD 00418B55
:00418DB9 B28B4100                DWORD 00418BB2
:00418DBD 5B8C4100                DWORD 00418C5B


:00418DC1 000505050505            add byte ptr [05050505], al
:00418DC7 0505010505              add eax, 05050105
:00418DCC 0505050505              add eax, 05050505
:00418DD1 0505050505              add eax, 05050505
:00418DD6 0505050505              add eax, 05050505
:00418DDB 0505050505              add eax, 05050505
:00418DE0 0505050505              add eax, 05050505
:00418DE5 0505050505              add eax, 05050505
:00418DEA 0505050505              add eax, 05050505
:00418DEF 0505050505              add eax, 05050505
:00418DF4 0505050505              add eax, 05050505
:00418DF9 0505050505              add eax, 05050505
:00418DFE 0505050505              add eax, 05050505
:00418E03 0505050505              add eax, 05050505
:00418E08 0505050505              add eax, 05050505
:00418E0D 0505050505              add eax, 05050505
:00418E12 0505050505              add eax, 05050505
:00418E17 0505050505              add eax, 05050505
:00418E1C 0505050505              add eax, 05050505
:00418E21 0505050505              add eax, 05050505
:00418E26 0505020205              add eax, 05020205
:00418E2B 03                      BYTE 03h
:00418E2C 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:00418C51   , :00419155   , :00419317   , :00419B87   , :00419E3E   
|:0041ACD9   , :0041B062   
|
:00418E2D 55                      push ebp
:00418E2E 8BEC                    mov ebp, esp
:00418E30 51                      push ecx
:00418E31 837D1000                cmp dword ptr [ebp+10], 00000000
:00418E35 741B                    je 00418E52

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:00418E37 68F8714700              push 004771F8
:00418E3C 68A6040000              push 000004A6
:00418E41 8B4508                  mov eax, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418E32(C)
|
:00418E44 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418E45 FF15AC864B00            Call dword ptr [004B86AC]
:00418E4B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00418E4C FF15B0864B00            Call dword ptr [004B86B0]
:00418E52 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418E55 6BC970                  imul ecx, 00000070
:00418E58 81C198224900            add ecx, 00492298
:00418E5E E88DB9FEFF              call 004047F0
:00418E63 25FF000000              and eax, 000000FF
:00418E68 8945FC                  mov dword ptr [ebp-04], eax
:00418E6B 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00418E72 744B                    je 00418EBF
:00418E74 8A4DFC                  mov cl, byte ptr [ebp-04]
:00418E77 51                      push ecx
:00418E78 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418E7B 6BC970                  imul ecx, 00000070
:00418E7E 81C198224900            add ecx, 00492298
:00418E84 E887B9FEFF              call 00404810
:00418E89 8AC8                    mov cl, al
:00418E8B 81E1FF000000            and ecx, 000000FF
:00418E91 6BC933                  imul ecx, 00000033
:00418E94 81C1C8EF4800            add ecx, 0048EFC8
:00418E9A E811E9FEFF              call 004077B0
:00418E9F 50                      push eax

* Possible StringData Ref from Data Obj ->"˳ƪZ
%s"
                                  |
:00418EA0 6804724700              push 00477204
:00418EA5 68A4040000              push 000004A4
:00418EAA 8B5508                  mov edx, dword ptr [ebp+08]
:00418EAD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418EAE FF15AC864B00            Call dword ptr [004B86AC]
:00418EB4 50                      push eax
:00418EB5 E850A90400              call 0046380A
:00418EBA 83C40C                  add esp, 0000000C
:00418EBD EB1B                    jmp 00418EDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418E72(C)
|

* Possible StringData Ref from Data Obj ->"L˳ƪZ"
                                  |
:00418EBF 6810724700              push 00477210
:00418EC4 68A4040000              push 000004A4
:00418EC9 8B4508                  mov eax, dword ptr [ebp+08]
:00418ECC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418ECD FF15AC864B00            Call dword ptr [004B86AC]
:00418ED3 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00418ED4 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418EBD(U)
|
:00418EDA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418EDD 6BC970                  imul ecx, 00000070
:00418EE0 81C198224900            add ecx, 00492298
:00418EE6 E8D594FEFF              call 004023C0
:00418EEB 50                      push eax

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:00418EEC 681C724700              push 0047721C
:00418EF1 6891040000              push 00000491
:00418EF6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418EF9 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418EFA FF15AC864B00            Call dword ptr [004B86AC]
:00418F00 50                      push eax
:00418F01 E804A90400              call 0046380A
:00418F06 83C40C                  add esp, 0000000C
:00418F09 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418F0C 6BC970                  imul ecx, 00000070
:00418F0F 81C198224900            add ecx, 00492298
:00418F15 E8D994FEFF              call 004023F3
:00418F1A 50                      push eax

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:00418F1B 6828724700              push 00477228
:00418F20 6892040000              push 00000492
:00418F25 8B5508                  mov edx, dword ptr [ebp+08]
:00418F28 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418F29 FF15AC864B00            Call dword ptr [004B86AC]
:00418F2F 50                      push eax
:00418F30 E8D5A80400              call 0046380A
:00418F35 83C40C                  add esp, 0000000C
:00418F38 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418F3B 6BC970                  imul ecx, 00000070
:00418F3E 81C198224900            add ecx, 00492298
:00418F44 E8DD94FEFF              call 00402426
:00418F49 50                      push eax

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:00418F4A 6834724700              push 00477234
:00418F4F 6893040000              push 00000493
:00418F54 8B4508                  mov eax, dword ptr [ebp+08]
:00418F57 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418F58 FF15AC864B00            Call dword ptr [004B86AC]
:00418F5E 50                      push eax
:00418F5F E8A6A80400              call 0046380A
:00418F64 83C40C                  add esp, 0000000C
:00418F67 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418F6A 6BC970                  imul ecx, 00000070
:00418F6D 81C198224900            add ecx, 00492298
:00418F73 E83595FEFF              call 004024AD
:00418F78 50                      push eax

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:00418F79 6840724700              push 00477240
:00418F7E 6894040000              push 00000494
:00418F83 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418F86 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418F87 FF15AC864B00            Call dword ptr [004B86AC]
:00418F8D 50                      push eax
:00418F8E E877A80400              call 0046380A
:00418F93 83C40C                  add esp, 0000000C
:00418F96 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418F99 6BC970                  imul ecx, 00000070
:00418F9C 81C198224900            add ecx, 00492298
:00418FA2 E83995FEFF              call 004024E0
:00418FA7 50                      push eax

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:00418FA8 684C724700              push 0047724C
:00418FAD 688A040000              push 0000048A
:00418FB2 8B5508                  mov edx, dword ptr [ebp+08]
:00418FB5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418FB6 FF15AC864B00            Call dword ptr [004B86AC]
:00418FBC 50                      push eax
:00418FBD E848A80400              call 0046380A
:00418FC2 83C40C                  add esp, 0000000C
:00418FC5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418FC8 6BC970                  imul ecx, 00000070
:00418FCB 81C198224900            add ecx, 00492298
:00418FD1 E83B95FEFF              call 00402511
:00418FD6 50                      push eax

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:00418FD7 685C724700              push 0047725C
:00418FDC 688B040000              push 0000048B
:00418FE1 8B4508                  mov eax, dword ptr [ebp+08]
:00418FE4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418FE5 FF15AC864B00            Call dword ptr [004B86AC]
:00418FEB 50                      push eax
:00418FEC E819A80400              call 0046380A
:00418FF1 83C40C                  add esp, 0000000C
:00418FF4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418FF7 6BC970                  imul ecx, 00000070
:00418FFA 81C198224900            add ecx, 00492298
:00419000 E83F95FEFF              call 00402544
:00419005 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:00419006 686C724700              push 0047726C
:0041900B 688C040000              push 0000048C
:00419010 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419013 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419014 FF15AC864B00            Call dword ptr [004B86AC]
:0041901A 50                      push eax
:0041901B E8EAA70400              call 0046380A
:00419020 83C40C                  add esp, 0000000C
:00419023 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419026 6BC970                  imul ecx, 00000070
:00419029 81C198224900            add ecx, 00492298
:0041902F E8C895FEFF              call 004025FC
:00419034 25FF000000              and eax, 000000FF
:00419039 50                      push eax

* Possible StringData Ref from Data Obj ->"ӱ@@  %3u"
                                  |
:0041903A 687C724700              push 0047727C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0041903F 6800040000              push 00000400
:00419044 8B5508                  mov edx, dword ptr [ebp+08]
:00419047 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419048 FF15AC864B00            Call dword ptr [004B86AC]
:0041904E 50                      push eax
:0041904F E8B6A70400              call 0046380A
:00419054 83C40C                  add esp, 0000000C
:00419057 8B4508                  mov eax, dword ptr [ebp+08]
:0041905A 50                      push eax
:0041905B E807000000              call 00419067
:00419060 83C404                  add esp, 00000004
:00419063 8BE5                    mov esp, ebp
:00419065 5D                      pop ebp
:00419066 C3                      ret



* Referenced by a CALL at Addresses:
|:0041905B   , :0041AAC3   
|
:00419067 55                      push ebp
:00419068 8BEC                    mov ebp, esp
:0041906A 6A00                    push 00000000
:0041906C 6890040000              push 00000490
:00419071 8B4508                  mov eax, dword ptr [ebp+08]
:00419074 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419075 FF15AC864B00            Call dword ptr [004B86AC]
:0041907B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041907C FF15E4864B00            Call dword ptr [004B86E4]
:00419082 6A00                    push 00000000
:00419084 688F040000              push 0000048F
:00419089 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041908C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041908D FF15AC864B00            Call dword ptr [004B86AC]
:00419093 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00419094 FF15E4864B00            Call dword ptr [004B86E4]
:0041909A 6A00                    push 00000000
:0041909C 688E040000              push 0000048E
:004190A1 8B5508                  mov edx, dword ptr [ebp+08]
:004190A4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004190A5 FF15AC864B00            Call dword ptr [004B86AC]
:004190AB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004190AC FF15E4864B00            Call dword ptr [004B86E4]
:004190B2 6A00                    push 00000000
:004190B4 688D040000              push 0000048D
:004190B9 8B4508                  mov eax, dword ptr [ebp+08]
:004190BC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004190BD FF15AC864B00            Call dword ptr [004B86AC]
:004190C3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004190C4 FF15E4864B00            Call dword ptr [004B86E4]
:004190CA 6A00                    push 00000000
:004190CC 6888040000              push 00000488
:004190D1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004190D4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004190D5 FF15AC864B00            Call dword ptr [004B86AC]
:004190DB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004190DC FF15E4864B00            Call dword ptr [004B86E4]
:004190E2 6A00                    push 00000000
:004190E4 6889040000              push 00000489
:004190E9 8B5508                  mov edx, dword ptr [ebp+08]
:004190EC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004190ED FF15AC864B00            Call dword ptr [004B86AC]
:004190F3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004190F4 FF15E4864B00            Call dword ptr [004B86E4]
:004190FA 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:004190FC 68FC030000              push 000003FC
:00419101 8B4508                  mov eax, dword ptr [ebp+08]
:00419104 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419105 FF15AC864B00            Call dword ptr [004B86AC]
:0041910B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041910C FF15E4864B00            Call dword ptr [004B86E4]
:00419112 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:00419114 68FE030000              push 000003FE
:00419119 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041911C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041911D FF15AC864B00            Call dword ptr [004B86AC]
:00419123 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00419124 FF15E4864B00            Call dword ptr [004B86E4]
:0041912A 5D                      pop ebp
:0041912B C3                      ret



* Referenced by a CALL at Addresses:
|:00418A77   , :004197D9   , :0041A2C2   , :0041A9DC   , :0041AA97   
|:0041D44C   
|
:0041912C 55                      push ebp
:0041912D 8BEC                    mov ebp, esp
:0041912F 51                      push ecx

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:00419130 683D040000              push 0000043D
:00419135 8B4508                  mov eax, dword ptr [ebp+08]
:00419138 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419139 FF15AC864B00            Call dword ptr [004B86AC]
:0041913F 50                      push eax
:00419140 E8AFEFFFFF              call 004180F4
:00419145 83C404                  add esp, 00000004
:00419148 8945FC                  mov dword ptr [ebp-04], eax
:0041914B 6A01                    push 00000001
:0041914D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419150 51                      push ecx
:00419151 8B5508                  mov edx, dword ptr [ebp+08]
:00419154 52                      push edx
:00419155 E8D3FCFFFF              call 00418E2D
:0041915A 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:0041915D 683B040000              push 0000043B
:00419162 8B4508                  mov eax, dword ptr [ebp+08]
:00419165 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419166 FF15AC864B00            Call dword ptr [004B86AC]
:0041916C 50                      push eax
:0041916D E81F000000              call 00419191
:00419172 83C404                  add esp, 00000004
:00419175 683E040000              push 0000043E
:0041917A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041917D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041917E FF15AC864B00            Call dword ptr [004B86AC]
:00419184 50                      push eax
:00419185 E807000000              call 00419191
:0041918A 83C404                  add esp, 00000004
:0041918D 8BE5                    mov esp, ebp
:0041918F 5D                      pop ebp
:00419190 C3                      ret



* Referenced by a CALL at Addresses:
|:0041916D   , :00419185   , :0041A35A   , :0041A372   , :0041A99F   
|:0041A9B9   , :0041AA5A   , :0041AA74   , :0041BE3F   , :0041BF46   
|:0041BF60   , :0041BFC3   , :0041BFDD   , :0041D787   , :0041D79F   
|:0041D7B7   , :0041FB34   , :0041FB4C   , :0041FB66   , :0041FB7E   
|:0041FB98   , :0041FBB0   
|
:00419191 55                      push ebp
:00419192 8BEC                    mov ebp, esp
:00419194 83EC30                  sub esp, 00000030
:00419197 6A00                    push 00000000
:00419199 6A00                    push 00000000
:0041919B 6804100000              push 00001004
:004191A0 8B4508                  mov eax, dword ptr [ebp+08]
:004191A3 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004191A4 FF15D8864B00            Call dword ptr [004B86D8]
:004191AA 8945F8                  mov dword ptr [ebp-08], eax
:004191AD C745FC00000000          mov [ebp-04], 00000000
:004191B4 EB09                    jmp 004191BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419208(U)
|
:004191B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004191B9 83C101                  add ecx, 00000001
:004191BC 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004191B4(U)
|
:004191BF 8B55FC                  mov edx, dword ptr [ebp-04]
:004191C2 3B55F8                  cmp edx, dword ptr [ebp-08]
:004191C5 7D43                    jge 0041920A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004191C7 6A02                    push 00000002
:004191C9 8B45FC                  mov eax, dword ptr [ebp-04]
:004191CC 50                      push eax
:004191CD 682C100000              push 0000102C
:004191D2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004191D5 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004191D6 FF15D8864B00            Call dword ptr [004B86D8]
:004191DC 83F802                  cmp eax, 00000002
:004191DF 7527                    jne 00419208

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004191E1 C745E002000000          mov [ebp-20], 00000002
:004191E8 C745DC00000000          mov [ebp-24], 00000000
:004191EF 8D55D0                  lea edx, dword ptr [ebp-30]
:004191F2 52                      push edx
:004191F3 8B45FC                  mov eax, dword ptr [ebp-04]
:004191F6 50                      push eax
:004191F7 682B100000              push 0000102B
:004191FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004191FF 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419200 FF15D8864B00            Call dword ptr [004B86D8]
:00419206 EB02                    jmp 0041920A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004191DF(C)
|
:00419208 EBAC                    jmp 004191B6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004191C5(C), :00419206(U)
|
:0041920A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041920D 8BE5                    mov esp, ebp
:0041920F 5D                      pop ebp
:00419210 C3                      ret



* Referenced by a CALL at Address:
|:0041888F   
|
:00419211 55                      push ebp
:00419212 8BEC                    mov ebp, esp
:00419214 83EC18                  sub esp, 00000018
:00419217 8B4508                  mov eax, dword ptr [ebp+08]
:0041921A 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0041921B FF1584874B00            Call dword ptr [004B8784]
:00419221 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00419222 FF1584874B00            Call dword ptr [004B8784]
:00419228 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041922B 6A02                    push 00000002
:0041922D B9C8E24A00              mov ecx, 004AE2C8
:00419232 E8696D0000              call 0041FFA0
:00419237 85C0                    test eax, eax
:00419239 7436                    je 00419271
:0041923B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:0041923D 683B040000              push 0000043B
:00419242 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419245 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419246 FF15AC864B00            Call dword ptr [004B86AC]
:0041924C 50                      push eax
:0041924D E8EADEFFFF              call 0041713C
:00419252 83C408                  add esp, 00000008
:00419255 6A00                    push 00000000
:00419257 683E040000              push 0000043E
:0041925C 8B5508                  mov edx, dword ptr [ebp+08]
:0041925F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419260 FF15AC864B00            Call dword ptr [004B86AC]
:00419266 50                      push eax
:00419267 E8D0DEFFFF              call 0041713C
:0041926C 83C408                  add esp, 00000008
:0041926F EB34                    jmp 004192A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419239(C)
|
:00419271 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:00419273 683B040000              push 0000043B
:00419278 8B4508                  mov eax, dword ptr [ebp+08]
:0041927B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041927C FF15AC864B00            Call dword ptr [004B86AC]
:00419282 50                      push eax
:00419283 E8B4DEFFFF              call 0041713C
:00419288 83C408                  add esp, 00000008
:0041928B 6A01                    push 00000001
:0041928D 683E040000              push 0000043E
:00419292 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419295 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419296 FF15AC864B00            Call dword ptr [004B86AC]
:0041929C 50                      push eax
:0041929D E89ADEFFFF              call 0041713C
:004192A2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041926F(U)
|

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:004192A5 683D040000              push 0000043D
:004192AA 8B5508                  mov edx, dword ptr [ebp+08]
:004192AD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004192AE FF15AC864B00            Call dword ptr [004B86AC]
:004192B4 8945E8                  mov dword ptr [ebp-18], eax
:004192B7 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004192BB 7409                    je 004192C6
:004192BD 817D0C28924900          cmp dword ptr [ebp+0C], 00499228
:004192C4 7518                    jne 004192DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004192BB(C)
|
:004192C6 6A00                    push 00000000
:004192C8 6885020000              push 00000285
:004192CD 8B45E8                  mov eax, dword ptr [ebp-18]
:004192D0 50                      push eax
:004192D1 E85EE1FFFF              call 00417434
:004192D6 83C40C                  add esp, 0000000C
:004192D9 8945F4                  mov dword ptr [ebp-0C], eax
:004192DC EB13                    jmp 004192F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004192C4(C)
|
:004192DE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004192E1 51                      push ecx
:004192E2 8B55E8                  mov edx, dword ptr [ebp-18]
:004192E5 52                      push edx
:004192E6 E8B5000000              call 004193A0
:004192EB 83C408                  add esp, 00000008
:004192EE 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004192DC(U)
|
:004192F1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004192F4 50                      push eax
:004192F5 6866040000              push 00000466
:004192FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004192FD 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004192FE FF15AC864B00            Call dword ptr [004B86AC]
:00419304 50                      push eax
:00419305 E874E2FFFF              call 0041757E
:0041930A 83C408                  add esp, 00000008
:0041930D 6A01                    push 00000001
:0041930F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00419312 52                      push edx
:00419313 8B4508                  mov eax, dword ptr [ebp+08]
:00419316 50                      push eax
:00419317 E811FBFFFF              call 00418E2D
:0041931C 83C40C                  add esp, 0000000C
:0041931F B910584800              mov ecx, 00485810
:00419324 E8779B0300              call 00452EA0
:00419329 8945F8                  mov dword ptr [ebp-08], eax
:0041932C B910584800              mov ecx, 00485810
:00419331 E85AD4FFFF              call 00416790
:00419336 8945FC                  mov dword ptr [ebp-04], eax
:00419339 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041933C 51                      push ecx
:0041933D 8B55F8                  mov edx, dword ptr [ebp-08]
:00419340 52                      push edx
:00419341 8B45F4                  mov eax, dword ptr [ebp-0C]
:00419344 50                      push eax

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:00419345 683B040000              push 0000043B
:0041934A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041934D 51                      push ecx
:0041934E E8AC000000              call 004193FF
:00419353 83C414                  add esp, 00000014
:00419356 683E040000              push 0000043E
:0041935B 8B5508                  mov edx, dword ptr [ebp+08]
:0041935E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041935F FF15AC864B00            Call dword ptr [004B86AC]
:00419365 8945EC                  mov dword ptr [ebp-14], eax
:00419368 8B45FC                  mov eax, dword ptr [ebp-04]
:0041936B 50                      push eax
:0041936C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041936F 51                      push ecx
:00419370 8B55EC                  mov edx, dword ptr [ebp-14]
:00419373 52                      push edx
:00419374 8B4508                  mov eax, dword ptr [ebp+08]
:00419377 50                      push eax
:00419378 E811010000              call 0041948E
:0041937D 83C410                  add esp, 00000010
:00419380 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00419383 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00419384 68F7030000              push 000003F7
:00419389 8B5508                  mov edx, dword ptr [ebp+08]
:0041938C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041938D FF15AC864B00            Call dword ptr [004B86AC]
:00419393 50                      push eax
:00419394 E829020000              call 004195C2
:00419399 83C408                  add esp, 00000008
:0041939C 8BE5                    mov esp, ebp
:0041939E 5D                      pop ebp
:0041939F C3                      ret



* Referenced by a CALL at Address:
|:004192E6   
|
:004193A0 55                      push ebp
:004193A1 8BEC                    mov ebp, esp
:004193A3 51                      push ecx
:004193A4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004193A7 E864B3FEFF              call 00404710
:004193AC 8945FC                  mov dword ptr [ebp-04], eax
:004193AF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004193B2 E8EBA7FEFF              call 00403BA2
:004193B7 50                      push eax
:004193B8 6A00                    push 00000000
:004193BA 6843010000              push 00000143
:004193BF 8B4508                  mov eax, dword ptr [ebp+08]
:004193C2 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004193C3 FF15D8864B00            Call dword ptr [004B86D8]
:004193C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004193CC 51                      push ecx
:004193CD 6A00                    push 00000000
:004193CF 6851010000              push 00000151
:004193D4 8B5508                  mov edx, dword ptr [ebp+08]
:004193D7 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004193D8 FF15D8864B00            Call dword ptr [004B86D8]
:004193DE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004193E1 E8BCA7FEFF              call 00403BA2
:004193E6 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004193E7 6AFF                    push FFFFFFFF

* Possible Reference to Dialog: DialogID_014D 
                                  |
:004193E9 684D010000              push 0000014D
:004193EE 8B4508                  mov eax, dword ptr [ebp+08]
:004193F1 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004193F2 FF15D8864B00            Call dword ptr [004B86D8]
:004193F8 8B45FC                  mov eax, dword ptr [ebp-04]
:004193FB 8BE5                    mov esp, ebp
:004193FD 5D                      pop ebp
:004193FE C3                      ret



* Referenced by a CALL at Addresses:
|:0041934E   , :0041BA3C   , :0041BA8D   , :0041E3E5   
|
:004193FF 55                      push ebp
:00419400 8BEC                    mov ebp, esp
:00419402 51                      push ecx
:00419403 8B450C                  mov eax, dword ptr [ebp+0C]
:00419406 50                      push eax
:00419407 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041940A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041940B FF15AC864B00            Call dword ptr [004B86AC]
:00419411 8945FC                  mov dword ptr [ebp-04], eax
:00419414 8B55FC                  mov edx, dword ptr [ebp-04]
:00419417 52                      push edx
:00419418 8B4508                  mov eax, dword ptr [ebp+08]
:0041941B 50                      push eax
:0041941C E84FDFFFFF              call 00417370
:00419421 83C408                  add esp, 00000008
:00419424 8B4D14                  mov ecx, dword ptr [ebp+14]
:00419427 51                      push ecx
:00419428 6A01                    push 00000001
:0041942A 6803100000              push 00001003
:0041942F 8B55FC                  mov edx, dword ptr [ebp-04]
:00419432 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419433 FF15D8864B00            Call dword ptr [004B86D8]
:00419439 8B4518                  mov eax, dword ptr [ebp+18]
:0041943C 50                      push eax
:0041943D 6A00                    push 00000000
:0041943F 6803100000              push 00001003
:00419444 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419447 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419448 FF15D8864B00            Call dword ptr [004B86D8]
:0041944E 8B5510                  mov edx, dword ptr [ebp+10]
:00419451 52                      push edx
:00419452 8B45FC                  mov eax, dword ptr [ebp-04]
:00419455 50                      push eax
:00419456 E853DEFFFF              call 004172AE
:0041945B 83C408                  add esp, 00000008
:0041945E 68BDBDBD02              push 02BDBDBD
:00419463 6A00                    push 00000000
:00419465 6801100000              push 00001001
:0041946A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041946D 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041946E FF15D8864B00            Call dword ptr [004B86D8]
:00419474 68BDBDBD02              push 02BDBDBD
:00419479 6A00                    push 00000000
:0041947B 6826100000              push 00001026
:00419480 8B55FC                  mov edx, dword ptr [ebp-04]
:00419483 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419484 FF15D8864B00            Call dword ptr [004B86D8]
:0041948A 8BE5                    mov esp, ebp
:0041948C 5D                      pop ebp
:0041948D C3                      ret



* Referenced by a CALL at Addresses:
|:00419378   , :0041E409   
|
:0041948E 55                      push ebp
:0041948F 8BEC                    mov ebp, esp
:00419491 8B450C                  mov eax, dword ptr [ebp+0C]
:00419494 50                      push eax
:00419495 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419498 51                      push ecx
:00419499 E8D2DEFFFF              call 00417370
:0041949E 83C408                  add esp, 00000008
:004194A1 8B5510                  mov edx, dword ptr [ebp+10]
:004194A4 52                      push edx
:004194A5 6A01                    push 00000001
:004194A7 6803100000              push 00001003
:004194AC 8B450C                  mov eax, dword ptr [ebp+0C]
:004194AF 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004194B0 FF15D8864B00            Call dword ptr [004B86D8]
:004194B6 8B4D14                  mov ecx, dword ptr [ebp+14]
:004194B9 51                      push ecx
:004194BA 6A00                    push 00000000
:004194BC 6803100000              push 00001003
:004194C1 8B550C                  mov edx, dword ptr [ebp+0C]
:004194C4 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004194C5 FF15D8864B00            Call dword ptr [004B86D8]
:004194CB 8B450C                  mov eax, dword ptr [ebp+0C]
:004194CE 50                      push eax
:004194CF E831000000              call 00419505
:004194D4 83C404                  add esp, 00000004
:004194D7 68BDBDBD02              push 02BDBDBD
:004194DC 6A00                    push 00000000
:004194DE 6801100000              push 00001001
:004194E3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004194E6 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004194E7 FF15D8864B00            Call dword ptr [004B86D8]
:004194ED 68BDBDBD02              push 02BDBDBD
:004194F2 6A00                    push 00000000
:004194F4 6826100000              push 00001026
:004194F9 8B550C                  mov edx, dword ptr [ebp+0C]
:004194FC 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004194FD FF15D8864B00            Call dword ptr [004B86D8]
:00419503 5D                      pop ebp
:00419504 C3                      ret



* Referenced by a CALL at Addresses:
|:004194CF   , :0041D5AF   
|
:00419505 55                      push ebp
:00419506 8BEC                    mov ebp, esp
:00419508 83EC30                  sub esp, 00000030

* Possible Reference to String Resource ID=00015: ""
                                  |
:0041950B C745D80F000000          mov [ebp-28], 0000000F
:00419512 C745E400000000          mov [ebp-1C], 00000000
:00419519 C745E800000000          mov [ebp-18], 00000000
:00419520 C745E000000000          mov [ebp-20], 00000000
:00419527 C745ECFFFFFFFF          mov [ebp-14], FFFFFFFF
:0041952E C745F020000000          mov [ebp-10], 00000020
:00419535 C745D400000000          mov [ebp-2C], 00000000
:0041953C EB09                    jmp 00419547

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004195BC(U)
|
:0041953E 8B45D4                  mov eax, dword ptr [ebp-2C]
:00419541 83C001                  add eax, 00000001
:00419544 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041953C(U)
|
:00419547 817DD480000000          cmp dword ptr [ebp-2C], 00000080
:0041954E 7D6E                    jge 004195BE
:00419550 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00419553 51                      push ecx
:00419554 B9C8E24A00              mov ecx, 004AE2C8
:00419559 E802690000              call 0041FE60
:0041955E 25FFFF0000              and eax, 0000FFFF
:00419563 8945D0                  mov dword ptr [ebp-30], eax
:00419566 817DD0FF000000          cmp dword ptr [ebp-30], 000000FF
:0041956D 734D                    jnb 004195BC
:0041956F 8B55D4                  mov edx, dword ptr [ebp-2C]
:00419572 8955DC                  mov dword ptr [ebp-24], edx
:00419575 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00419578 6BC933                  imul ecx, 00000033
:0041957B 81C1C8EF4800            add ecx, 0048EFC8
:00419581 E82AB1FEFF              call 004046B0
:00419586 25FF000000              and eax, 000000FF
:0041958B 8945F4                  mov dword ptr [ebp-0C], eax
:0041958E 8B45D0                  mov eax, dword ptr [ebp-30]
:00419591 25FFFF0000              and eax, 0000FFFF
:00419596 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00419599 81E1FFFF0000            and ecx, 0000FFFF
:0041959F C1E110                  shl ecx, 10
:004195A2 0BC1                    or eax, ecx
:004195A4 8945F8                  mov dword ptr [ebp-08], eax
:004195A7 8D55D8                  lea edx, dword ptr [ebp-28]
:004195AA 52                      push edx
:004195AB 6A00                    push 00000000
:004195AD 6807100000              push 00001007
:004195B2 8B4508                  mov eax, dword ptr [ebp+08]
:004195B5 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004195B6 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041956D(C)
|
:004195BC EB80                    jmp 0041953E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041954E(C)
|
:004195BE 8BE5                    mov esp, ebp
:004195C0 5D                      pop ebp
:004195C1 C3                      ret



* Referenced by a CALL at Addresses:
|:00419394   , :00419A6C   , :0041E455   , :0041EA66   
|
:004195C2 55                      push ebp
:004195C3 8BEC                    mov ebp, esp
:004195C5 51                      push ecx
:004195C6 6A00                    push 00000000
:004195C8 6A00                    push 00000000
:004195CA 6804100000              push 00001004
:004195CF 8B450C                  mov eax, dword ptr [ebp+0C]
:004195D2 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004195D3 FF15D8864B00            Call dword ptr [004B86D8]
:004195D9 8945FC                  mov dword ptr [ebp-04], eax
:004195DC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004195DF 51                      push ecx

* Possible StringData Ref from Data Obj ->"ܮwMe%uӡ128ӡf"
                                  |
:004195E0 688C724700              push 0047728C
:004195E5 8B5508                  mov edx, dword ptr [ebp+08]
:004195E8 52                      push edx
:004195E9 E81CA20400              call 0046380A
:004195EE 83C40C                  add esp, 0000000C
:004195F1 8BE5                    mov esp, ebp
:004195F3 5D                      pop ebp
:004195F4 C3                      ret



* Referenced by a CALL at Address:
|:00418919   
|
:004195F5 55                      push ebp
:004195F6 8BEC                    mov ebp, esp
:004195F8 51                      push ecx
:004195F9 C745FC01000000          mov [ebp-04], 00000001
:00419600 EB09                    jmp 0041960B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419695(U)
|
:00419602 8B45FC                  mov eax, dword ptr [ebp-04]
:00419605 83C001                  add eax, 00000001
:00419608 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419600(U)
|
:0041960B 837DFC19                cmp dword ptr [ebp-04], 00000019
:0041960F 0F8385000000            jnb 0041969A
:00419615 6A00                    push 00000000
:00419617 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041961A 6BC914                  imul ecx, 00000014
:0041961D 8B81C0684700            mov eax, dword ptr [ecx+004768C0]
:00419623 0FAF4510                imul eax, dword ptr [ebp+10]
:00419627 99                      cdq
:00419628 F73DC0684700            idiv dword ptr [004768C0]
:0041962E 50                      push eax
:0041962F 8B55FC                  mov edx, dword ptr [ebp-04]
:00419632 6BD214                  imul edx, 00000014
:00419635 8B82BC684700            mov eax, dword ptr [edx+004768BC]
:0041963B 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041963F 99                      cdq
:00419640 F73DBC684700            idiv dword ptr [004768BC]
:00419646 50                      push eax
:00419647 8B45FC                  mov eax, dword ptr [ebp-04]
:0041964A 6BC014                  imul eax, 00000014
:0041964D 8B80B8684700            mov eax, dword ptr [eax+004768B8]
:00419653 0FAF4510                imul eax, dword ptr [ebp+10]
:00419657 99                      cdq
:00419658 F73DC0684700            idiv dword ptr [004768C0]
:0041965E 50                      push eax
:0041965F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419662 6BC914                  imul ecx, 00000014
:00419665 8B81B4684700            mov eax, dword ptr [ecx+004768B4]
:0041966B 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041966F 99                      cdq
:00419670 F73DBC684700            idiv dword ptr [004768BC]
:00419676 50                      push eax
:00419677 8B55FC                  mov edx, dword ptr [ebp-04]
:0041967A 6BD214                  imul edx, 00000014
:0041967D 8B82B0684700            mov eax, dword ptr [edx+004768B0]
:00419683 50                      push eax
:00419684 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419687 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419688 FF15AC864B00            Call dword ptr [004B86AC]
:0041968E 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041968F FF15FC864B00            Call dword ptr [004B86FC]
:00419695 E968FFFFFF              jmp 00419602

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041960F(C)
|
:0041969A 8BE5                    mov esp, ebp
:0041969C 5D                      pop ebp
:0041969D C3                      ret



* Referenced by a CALL at Address:
|:0041892F   
|
:0041969E 55                      push ebp
:0041969F 8BEC                    mov ebp, esp
:004196A1 51                      push ecx
:004196A2 C745FC01000000          mov [ebp-04], 00000001
:004196A9 EB09                    jmp 004196B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041973E(U)
|
:004196AB 8B45FC                  mov eax, dword ptr [ebp-04]
:004196AE 83C001                  add eax, 00000001
:004196B1 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004196A9(U)
|
:004196B4 837DFC19                cmp dword ptr [ebp-04], 00000019
:004196B8 0F8385000000            jnb 00419743
:004196BE 6A00                    push 00000000
:004196C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004196C3 6BC914                  imul ecx, 00000014
:004196C6 8B81B86A4700            mov eax, dword ptr [ecx+00476AB8]
:004196CC 0FAF4510                imul eax, dword ptr [ebp+10]
:004196D0 99                      cdq
:004196D1 F73DB86A4700            idiv dword ptr [00476AB8]
:004196D7 50                      push eax
:004196D8 8B55FC                  mov edx, dword ptr [ebp-04]
:004196DB 6BD214                  imul edx, 00000014
:004196DE 8B82B46A4700            mov eax, dword ptr [edx+00476AB4]
:004196E4 0FAF450C                imul eax, dword ptr [ebp+0C]
:004196E8 99                      cdq
:004196E9 F73DB46A4700            idiv dword ptr [00476AB4]
:004196EF 50                      push eax
:004196F0 8B45FC                  mov eax, dword ptr [ebp-04]
:004196F3 6BC014                  imul eax, 00000014
:004196F6 8B80B06A4700            mov eax, dword ptr [eax+00476AB0]
:004196FC 0FAF4510                imul eax, dword ptr [ebp+10]
:00419700 99                      cdq
:00419701 F73DB86A4700            idiv dword ptr [00476AB8]
:00419707 50                      push eax
:00419708 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041970B 6BC914                  imul ecx, 00000014
:0041970E 8B81AC6A4700            mov eax, dword ptr [ecx+00476AAC]
:00419714 0FAF450C                imul eax, dword ptr [ebp+0C]
:00419718 99                      cdq
:00419719 F73DB46A4700            idiv dword ptr [00476AB4]
:0041971F 50                      push eax
:00419720 8B55FC                  mov edx, dword ptr [ebp-04]
:00419723 6BD214                  imul edx, 00000014
:00419726 8B82A86A4700            mov eax, dword ptr [edx+00476AA8]
:0041972C 50                      push eax
:0041972D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419730 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419731 FF15AC864B00            Call dword ptr [004B86AC]
:00419737 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00419738 FF15FC864B00            Call dword ptr [004B86FC]
:0041973E E968FFFFFF              jmp 004196AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004196B8(C)
|
:00419743 8BE5                    mov esp, ebp
:00419745 5D                      pop ebp
:00419746 C3                      ret



* Referenced by a CALL at Address:
|:00418A07   
|
:00419747 55                      push ebp
:00419748 8BEC                    mov ebp, esp
:0041974A 83EC08                  sub esp, 00000008
:0041974D 8B4510                  mov eax, dword ptr [ebp+10]
:00419750 25FFFF0000              and eax, 0000FFFF
:00419755 8945F8                  mov dword ptr [ebp-08], eax
:00419758 837DF802                cmp dword ptr [ebp-08], 00000002
:0041975C 7414                    je 00419772
:0041975E 817DF83D040000          cmp dword ptr [ebp-08], 0000043D
:00419765 7419                    je 00419780
:00419767 817DF83F040000          cmp dword ptr [ebp-08], 0000043F
:0041976E 7473                    je 004197E3
:00419770 EB7E                    jmp 004197F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041975C(C)
|
:00419772 6A01                    push 00000001
:00419774 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419777 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00419778 FF15B0874B00            Call dword ptr [004B87B0]
:0041977E EB70                    jmp 004197F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419765(C)
|
:00419780 8B550C                  mov edx, dword ptr [ebp+0C]
:00419783 81E2FFFF0000            and edx, 0000FFFF
:00419789 83FA09                  cmp edx, 00000009
:0041978C 7553                    jne 004197E1
:0041978E 8B4514                  mov eax, dword ptr [ebp+14]
:00419791 50                      push eax
:00419792 E85DE9FFFF              call 004180F4
:00419797 83C404                  add esp, 00000004
:0041979A 8945FC                  mov dword ptr [ebp-04], eax
:0041979D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004197A0 51                      push ecx

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:004197A1 683B040000              push 0000043B
:004197A6 8B5508                  mov edx, dword ptr [ebp+08]
:004197A9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004197AA FF15AC864B00            Call dword ptr [004B86AC]
:004197B0 50                      push eax
:004197B1 E8BBDAFFFF              call 00417271
:004197B6 83C408                  add esp, 00000008
:004197B9 8B45FC                  mov eax, dword ptr [ebp-04]
:004197BC 50                      push eax
:004197BD 6866040000              push 00000466
:004197C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004197C5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004197C6 FF15AC864B00            Call dword ptr [004B86AC]
:004197CC 50                      push eax
:004197CD E8ACDDFFFF              call 0041757E
:004197D2 83C408                  add esp, 00000008
:004197D5 8B5508                  mov edx, dword ptr [ebp+08]
:004197D8 52                      push edx
:004197D9 E84EF9FFFF              call 0041912C
:004197DE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041978C(C)
|
:004197E1 EB0D                    jmp 004197F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041976E(C)
|
:004197E3 682A080000              push 0000082A
:004197E8 E875A10400              call 00463962
:004197ED 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00419770(U), :0041977E(U), :004197E1(U)
|
:004197F0 33C0                    xor eax, eax
:004197F2 8BE5                    mov esp, ebp
:004197F4 5D                      pop ebp
:004197F5 C3                      ret



* Referenced by a CALL at Address:
|:00418A30   
|
:004197F6 55                      push ebp
:004197F7 8BEC                    mov ebp, esp
:004197F9 83EC24                  sub esp, 00000024
:004197FC 8B4514                  mov eax, dword ptr [ebp+14]
:004197FF 25FFFF0000              and eax, 0000FFFF
:00419804 8945F8                  mov dword ptr [ebp-08], eax
:00419807 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041980A C1E910                  shr ecx, 10
:0041980D 81E1FFFF0000            and ecx, 0000FFFF
:00419813 81E1FFFF0000            and ecx, 0000FFFF
:00419819 894DF4                  mov dword ptr [ebp-0C], ecx
:0041981C 8B5510                  mov edx, dword ptr [ebp+10]
:0041981F 8B02                    mov eax, dword ptr [edx]
:00419821 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:00419824 683D040000              push 0000043D
:00419829 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041982C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041982D FF15AC864B00            Call dword ptr [004B86AC]
:00419833 8945E4                  mov dword ptr [ebp-1C], eax
:00419836 8B5508                  mov edx, dword ptr [ebp+08]
:00419839 52                      push edx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0041983A FF1584874B00            Call dword ptr [004B8784]
:00419840 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00419841 FF1584874B00            Call dword ptr [004B8784]
:00419847 8945EC                  mov dword ptr [ebp-14], eax
:0041984A 8B4510                  mov eax, dword ptr [ebp+10]
:0041984D 8B480C                  mov ecx, dword ptr [eax+0C]
:00419850 894DE8                  mov dword ptr [ebp-18], ecx
:00419853 8B55F4                  mov edx, dword ptr [ebp-0C]
:00419856 52                      push edx
:00419857 8B45F8                  mov eax, dword ptr [ebp-08]
:0041985A 50                      push eax
:0041985B 682C050000              push 0000052C
:00419860 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00419863 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419864 FF15AC864B00            Call dword ptr [004B86AC]
:0041986A 50                      push eax
:0041986B 8B5508                  mov edx, dword ptr [ebp+08]
:0041986E 52                      push edx
:0041986F E870080000              call 0041A0E4
:00419874 83C410                  add esp, 00000010
:00419877 85C0                    test eax, eax
:00419879 7473                    je 004198EE
:0041987B 8B45E8                  mov eax, dword ptr [ebp-18]
:0041987E 50                      push eax
:0041987F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00419882 51                      push ecx
:00419883 E8EEDDFFFF              call 00417676
:00419888 83C408                  add esp, 00000008
:0041988B 8BC8                    mov ecx, eax
:0041988D 81E1FFFF0000            and ecx, 0000FFFF
:00419893 6BC933                  imul ecx, 00000033
:00419896 81C1C8EF4800            add ecx, 0048EFC8
:0041989C E80FDFFEFF              call 004077B0
:004198A1 50                      push eax

* Possible StringData Ref from Data Obj ->"˱%sܡH"
                                  |
:004198A2 68A4724700              push 004772A4

* Possible StringData Ref from Data Obj ->"_˱T{"
                                  |
:004198A7 68B0724700              push 004772B0
:004198AC 8B5508                  mov edx, dword ptr [ebp+08]
:004198AF 52                      push edx
:004198B0 E87CDDFFFF              call 00417631
:004198B5 83C410                  add esp, 00000010
:004198B8 85C0                    test eax, eax
:004198BA 742B                    je 004198E7
:004198BC 8B45E4                  mov eax, dword ptr [ebp-1C]
:004198BF 50                      push eax
:004198C0 E82FE8FFFF              call 004180F4
:004198C5 83C404                  add esp, 00000004
:004198C8 50                      push eax
:004198C9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004198CC 51                      push ecx
:004198CD 8B55F0                  mov edx, dword ptr [ebp-10]
:004198D0 52                      push edx
:004198D1 8B4508                  mov eax, dword ptr [ebp+08]
:004198D4 50                      push eax
:004198D5 E865080000              call 0041A13F
:004198DA 83C410                  add esp, 00000010
:004198DD B801000000              mov eax, 00000001
:004198E2 E992010000              jmp 00419A79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004198BA(C)
|
:004198E7 33C0                    xor eax, eax
:004198E9 E98B010000              jmp 00419A79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419879(C)
|

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:004198EE 683B040000              push 0000043B
:004198F3 683E040000              push 0000043E
:004198F8 8B4D14                  mov ecx, dword ptr [ebp+14]
:004198FB 51                      push ecx
:004198FC 8B55F0                  mov edx, dword ptr [ebp-10]
:004198FF 52                      push edx
:00419900 8B4508                  mov eax, dword ptr [ebp+08]
:00419903 50                      push eax
:00419904 E842070000              call 0041A04B
:00419909 83C414                  add esp, 00000014
:0041990C 85C0                    test eax, eax
:0041990E 7507                    jne 00419917
:00419910 33C0                    xor eax, eax
:00419912 E962010000              jmp 00419A79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041990E(C)
|
:00419917 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041991A 8179043E040000          cmp dword ptr [ecx+04], 0000043E
:00419921 0F8595000000            jne 004199BC

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:00419927 683B040000              push 0000043B
:0041992C 8B5508                  mov edx, dword ptr [ebp+08]
:0041992F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419930 FF15AC864B00            Call dword ptr [004B86AC]
:00419936 8945FC                  mov dword ptr [ebp-04], eax
:00419939 8B4510                  mov eax, dword ptr [ebp+10]
:0041993C 50                      push eax
:0041993D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419940 51                      push ecx
:00419941 8B55E4                  mov edx, dword ptr [ebp-1C]
:00419944 52                      push edx
:00419945 E833010000              call 00419A7D
:0041994A 83C40C                  add esp, 0000000C
:0041994D 85C0                    test eax, eax
:0041994F 7466                    je 004199B7
:00419951 6A00                    push 00000000
:00419953 8B45E8                  mov eax, dword ptr [ebp-18]
:00419956 50                      push eax
:00419957 6808100000              push 00001008
:0041995C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041995F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419960 FF15D8864B00            Call dword ptr [004B86D8]
:00419966 6A00                    push 00000000
:00419968 6A00                    push 00000000
:0041996A 6804100000              push 00001004
:0041996F 8B55F0                  mov edx, dword ptr [ebp-10]
:00419972 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419973 FF15D8864B00            Call dword ptr [004B86D8]
:00419979 83E801                  sub eax, 00000001
:0041997C 3B45E8                  cmp eax, dword ptr [ebp-18]
:0041997F 7D1B                    jge 0041999C
:00419981 6A00                    push 00000000
:00419983 6A00                    push 00000000
:00419985 6804100000              push 00001004
:0041998A 8B45F0                  mov eax, dword ptr [ebp-10]
:0041998D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041998E FF15D8864B00            Call dword ptr [004B86D8]
:00419994 83E801                  sub eax, 00000001
:00419997 8945E0                  mov dword ptr [ebp-20], eax
:0041999A EB06                    jmp 004199A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041997F(C)
|
:0041999C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041999F 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041999A(U)
|
:004199A2 6A00                    push 00000000
:004199A4 8B55E0                  mov edx, dword ptr [ebp-20]
:004199A7 52                      push edx
:004199A8 6813100000              push 00001013
:004199AD 8B45F0                  mov eax, dword ptr [ebp-10]
:004199B0 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004199B1 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041994F(C)
|
:004199B7 E990000000              jmp 00419A4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419921(C)
|
:004199BC 683E040000              push 0000043E
:004199C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004199C4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004199C5 FF15AC864B00            Call dword ptr [004B86AC]
:004199CB 8945FC                  mov dword ptr [ebp-04], eax
:004199CE 8B5510                  mov edx, dword ptr [ebp+10]
:004199D1 52                      push edx
:004199D2 8B45FC                  mov eax, dword ptr [ebp-04]
:004199D5 50                      push eax
:004199D6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004199D9 51                      push ecx
:004199DA E882030000              call 00419D61
:004199DF 83C40C                  add esp, 0000000C
:004199E2 85C0                    test eax, eax
:004199E4 7466                    je 00419A4C
:004199E6 6A00                    push 00000000
:004199E8 8B55E8                  mov edx, dword ptr [ebp-18]
:004199EB 52                      push edx
:004199EC 6808100000              push 00001008
:004199F1 8B45F0                  mov eax, dword ptr [ebp-10]
:004199F4 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004199F5 FF15D8864B00            Call dword ptr [004B86D8]
:004199FB 6A00                    push 00000000
:004199FD 6A00                    push 00000000
:004199FF 6804100000              push 00001004
:00419A04 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00419A07 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419A08 FF15D8864B00            Call dword ptr [004B86D8]
:00419A0E 83E801                  sub eax, 00000001
:00419A11 3B45E8                  cmp eax, dword ptr [ebp-18]
:00419A14 7D1B                    jge 00419A31
:00419A16 6A00                    push 00000000
:00419A18 6A00                    push 00000000
:00419A1A 6804100000              push 00001004
:00419A1F 8B55F0                  mov edx, dword ptr [ebp-10]
:00419A22 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419A23 FF15D8864B00            Call dword ptr [004B86D8]
:00419A29 83E801                  sub eax, 00000001
:00419A2C 8945DC                  mov dword ptr [ebp-24], eax
:00419A2F EB06                    jmp 00419A37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419A14(C)
|
:00419A31 8B45E8                  mov eax, dword ptr [ebp-18]
:00419A34 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419A2F(U)
|
:00419A37 6A00                    push 00000000
:00419A39 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00419A3C 51                      push ecx
:00419A3D 6813100000              push 00001013
:00419A42 8B55F0                  mov edx, dword ptr [ebp-10]
:00419A45 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419A46 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004199B7(U), :004199E4(C)
|
:00419A4C 683E040000              push 0000043E
:00419A51 8B4508                  mov eax, dword ptr [ebp+08]
:00419A54 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419A55 FF15AC864B00            Call dword ptr [004B86AC]
:00419A5B 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00419A5C 68F7030000              push 000003F7
:00419A61 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419A64 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419A65 FF15AC864B00            Call dword ptr [004B86AC]
:00419A6B 50                      push eax
:00419A6C E851FBFFFF              call 004195C2
:00419A71 83C408                  add esp, 00000008
:00419A74 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004198E2(U), :004198E9(U), :00419912(U)
|
:00419A79 8BE5                    mov esp, ebp
:00419A7B 5D                      pop ebp
:00419A7C C3                      ret



* Referenced by a CALL at Address:
|:00419945   
|
:00419A7D 55                      push ebp
:00419A7E 8BEC                    mov ebp, esp
:00419A80 83EC18                  sub esp, 00000018
:00419A83 8B450C                  mov eax, dword ptr [ebp+0C]
:00419A86 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00419A87 FF1584874B00            Call dword ptr [004B8784]
:00419A8D 8945FC                  mov dword ptr [ebp-04], eax
:00419A90 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419A93 8B11                    mov edx, dword ptr [ecx]
:00419A95 8955F0                  mov dword ptr [ebp-10], edx
:00419A98 8B4510                  mov eax, dword ptr [ebp+10]
:00419A9B 8B480C                  mov ecx, dword ptr [eax+0C]
:00419A9E 894DEC                  mov dword ptr [ebp-14], ecx
:00419AA1 8B5508                  mov edx, dword ptr [ebp+08]
:00419AA4 52                      push edx
:00419AA5 E84AE6FFFF              call 004180F4
:00419AAA 83C404                  add esp, 00000004
:00419AAD 8945F4                  mov dword ptr [ebp-0C], eax
:00419AB0 8B45EC                  mov eax, dword ptr [ebp-14]
:00419AB3 50                      push eax
:00419AB4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00419AB7 51                      push ecx
:00419AB8 E8B9DBFFFF              call 00417676
:00419ABD 83C408                  add esp, 00000008
:00419AC0 25FFFF0000              and eax, 0000FFFF
:00419AC5 8945F8                  mov dword ptr [ebp-08], eax
:00419AC8 6A01                    push 00000001
:00419ACA 8B55F8                  mov edx, dword ptr [ebp-08]
:00419ACD 52                      push edx
:00419ACE 8B45F4                  mov eax, dword ptr [ebp-0C]
:00419AD1 50                      push eax
:00419AD2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419AD5 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00419AD6 FF1584874B00            Call dword ptr [004B8784]
:00419ADC 50                      push eax
:00419ADD E8AB010000              call 00419C8D
:00419AE2 83C410                  add esp, 00000010
:00419AE5 85C0                    test eax, eax
:00419AE7 0F84B9000000            je 00419BA6
:00419AED 8B55F4                  mov edx, dword ptr [ebp-0C]
:00419AF0 52                      push edx
:00419AF1 E821020000              call 00419D17
:00419AF6 83C404                  add esp, 00000004
:00419AF9 8845E8                  mov byte ptr [ebp-18], al
:00419AFC 8A45F8                  mov al, byte ptr [ebp-08]
:00419AFF 50                      push eax
:00419B00 8A4DE8                  mov cl, byte ptr [ebp-18]
:00419B03 51                      push ecx
:00419B04 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00419B07 6BC970                  imul ecx, 00000070
:00419B0A 81C198224900            add ecx, 00492298
:00419B10 E81BADFEFF              call 00404830
:00419B15 68FFFF0000              push 0000FFFF
:00419B1A 8B55EC                  mov edx, dword ptr [ebp-14]
:00419B1D 52                      push edx
:00419B1E 8B45F0                  mov eax, dword ptr [ebp-10]
:00419B21 50                      push eax
:00419B22 E84FDBFFFF              call 00417676
:00419B27 83C408                  add esp, 00000008
:00419B2A C1E810                  shr eax, 10
:00419B2D 25FFFF0000              and eax, 0000FFFF
:00419B32 25FFFF0000              and eax, 0000FFFF
:00419B37 50                      push eax
:00419B38 B9C8E24A00              mov ecx, 004AE2C8
:00419B3D E81EDCFEFF              call 00407760
:00419B42 B910584800              mov ecx, 00485810
:00419B47 E884640000              call 0041FFD0
:00419B4C 85C0                    test eax, eax
:00419B4E 752D                    jne 00419B7D
:00419B50 8A4DE8                  mov cl, byte ptr [ebp-18]
:00419B53 51                      push ecx
:00419B54 8B55F4                  mov edx, dword ptr [ebp-0C]
:00419B57 52                      push edx
:00419B58 8B45FC                  mov eax, dword ptr [ebp-04]
:00419B5B 50                      push eax
:00419B5C E84B000000              call 00419BAC
:00419B61 83C40C                  add esp, 0000000C
:00419B64 85C0                    test eax, eax
:00419B66 7415                    je 00419B7D
:00419B68 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00419B6B 51                      push ecx
:00419B6C 6885020000              push 00000285
:00419B71 8B5508                  mov edx, dword ptr [ebp+08]
:00419B74 52                      push edx
:00419B75 E8BAD8FFFF              call 00417434
:00419B7A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00419B4E(C), :00419B66(C)
|
:00419B7D 6A01                    push 00000001
:00419B7F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00419B82 50                      push eax
:00419B83 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419B86 51                      push ecx
:00419B87 E8A1F2FFFF              call 00418E2D
:00419B8C 83C40C                  add esp, 0000000C
:00419B8F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00419B92 52                      push edx
:00419B93 8B450C                  mov eax, dword ptr [ebp+0C]
:00419B96 50                      push eax
:00419B97 E8D5D6FFFF              call 00417271
:00419B9C 83C408                  add esp, 00000008
:00419B9F B801000000              mov eax, 00000001
:00419BA4 EB02                    jmp 00419BA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419AE7(C)
|
:00419BA6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419BA4(U)
|
:00419BA8 8BE5                    mov esp, ebp
:00419BAA 5D                      pop ebp
:00419BAB C3                      ret



* Referenced by a CALL at Addresses:
|:00419B5C   , :0041A270   , :0041BDA9   , :0041ED24   , :0041F2A4   
|
:00419BAC 55                      push ebp
:00419BAD 8BEC                    mov ebp, esp
:00419BAF 51                      push ecx
:00419BB0 8A4510                  mov al, byte ptr [ebp+10]
:00419BB3 50                      push eax
:00419BB4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419BB7 6BC970                  imul ecx, 00000070
:00419BBA 81C198224900            add ecx, 00492298
:00419BC0 E84BACFEFF              call 00404810
:00419BC5 25FF000000              and eax, 000000FF
:00419BCA 8945FC                  mov dword ptr [ebp-04], eax
:00419BCD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419BD0 51                      push ecx
:00419BD1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419BD4 6BC970                  imul ecx, 00000070
:00419BD7 81C198224900            add ecx, 00492298
:00419BDD E8AB80FEFF              call 00401C8D
:00419BE2 85C0                    test eax, eax
:00419BE4 7423                    je 00419C09
:00419BE6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419BE9 6BC970                  imul ecx, 00000070
:00419BEC 81C198224900            add ecx, 00492298
:00419BF2 E8F9ABFEFF              call 004047F0
:00419BF7 25FF000000              and eax, 000000FF
:00419BFC 8B5510                  mov edx, dword ptr [ebp+10]
:00419BFF 81E2FF000000            and edx, 000000FF
:00419C05 3BC2                    cmp eax, edx
:00419C07 7504                    jne 00419C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419BE4(C)
|
:00419C09 33C0                    xor eax, eax
:00419C0B EB7C                    jmp 00419C89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C07(C)
|
:00419C0D E800CDFFFF              call 00416912
:00419C12 85C0                    test eax, eax
:00419C14 7417                    je 00419C2D

* Possible StringData Ref from Data Obj ->"bԳWܧ˳ơAЦb԰ηs԰}l"
                                        ->"eiC"
                                  |
:00419C16 68C0724700              push 004772C0
:00419C1B 6A00                    push 00000000
:00419C1D 8B4508                  mov eax, dword ptr [ebp+08]
:00419C20 50                      push eax
:00419C21 E839D4FFFF              call 0041705F
:00419C26 83C40C                  add esp, 0000000C
:00419C29 33C0                    xor eax, eax
:00419C2B EB5C                    jmp 00419C89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C14(C)
|
:00419C2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419C30 6BC933                  imul ecx, 00000033
:00419C33 81C1C8EF4800            add ecx, 0048EFC8
:00419C39 E872DBFEFF              call 004077B0
:00419C3E 50                      push eax
:00419C3F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419C42 6BC970                  imul ecx, 00000070
:00419C45 81C198224900            add ecx, 00492298
:00419C4B E8529FFEFF              call 00403BA2
:00419C50 50                      push eax

* Possible StringData Ref from Data Obj ->"%s˳%sܡH"
                                  |
:00419C51 68F8724700              push 004772F8

* Possible StringData Ref from Data Obj ->"_˳ƽT{"
                                  |
:00419C56 6808734700              push 00477308
:00419C5B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419C5E 51                      push ecx
:00419C5F E8CDD9FFFF              call 00417631
:00419C64 83C414                  add esp, 00000014
:00419C67 85C0                    test eax, eax
:00419C69 741C                    je 00419C87
:00419C6B 8A5510                  mov dl, byte ptr [ebp+10]
:00419C6E 52                      push edx
:00419C6F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419C72 6BC970                  imul ecx, 00000070
:00419C75 81C198224900            add ecx, 00492298
:00419C7B E8E180FEFF              call 00401D61
:00419C80 B801000000              mov eax, 00000001
:00419C85 EB02                    jmp 00419C89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C69(C)
|
:00419C87 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00419C0B(U), :00419C2B(U), :00419C85(U)
|
:00419C89 8BE5                    mov esp, ebp
:00419C8B 5D                      pop ebp
:00419C8C C3                      ret



* Referenced by a CALL at Addresses:
|:00419ADD   , :0041BD41   , :0041EB4C   , :0041EC8C   , :0041F248   
|
:00419C8D 55                      push ebp
:00419C8E 8BEC                    mov ebp, esp
:00419C90 8B450C                  mov eax, dword ptr [ebp+0C]
:00419C93 50                      push eax
:00419C94 E826000000              call 00419CBF
:00419C99 83C404                  add esp, 00000004
:00419C9C 394514                  cmp dword ptr [ebp+14], eax
:00419C9F 7F07                    jg 00419CA8
:00419CA1 B801000000              mov eax, 00000001
:00419CA6 EB15                    jmp 00419CBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C9F(C)
|

* Possible StringData Ref from Data Obj ->"ADFC"
                                  |
:00419CA8 6818734700              push 00477318
:00419CAD 6A00                    push 00000000
:00419CAF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419CB2 51                      push ecx
:00419CB3 E8A7D3FFFF              call 0041705F
:00419CB8 83C40C                  add esp, 0000000C
:00419CBB 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419CA6(U)
|
:00419CBD 5D                      pop ebp
:00419CBE C3                      ret



* Referenced by a CALL at Address:
|:00419C94   
|
:00419CBF 55                      push ebp
:00419CC0 8BEC                    mov ebp, esp
:00419CC2 83EC08                  sub esp, 00000008
:00419CC5 C745FC00000000          mov [ebp-04], 00000000
:00419CCC C745F800000000          mov [ebp-08], 00000000
:00419CD3 EB09                    jmp 00419CDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D0E(U)
|
:00419CD5 8B45F8                  mov eax, dword ptr [ebp-08]
:00419CD8 83C001                  add eax, 00000001
:00419CDB 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419CD3(U)
|
:00419CDE 837DF808                cmp dword ptr [ebp-08], 00000008
:00419CE2 7D2C                    jge 00419D10
:00419CE4 8A4DF8                  mov cl, byte ptr [ebp-08]
:00419CE7 51                      push ecx
:00419CE8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419CEB 6BC970                  imul ecx, 00000070
:00419CEE 81C198224900            add ecx, 00492298
:00419CF4 E817ABFEFF              call 00404810
:00419CF9 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00419CFE 3DFF000000              cmp eax, 000000FF
:00419D03 7C09                    jl 00419D0E
:00419D05 8B55FC                  mov edx, dword ptr [ebp-04]
:00419D08 83C201                  add edx, 00000001
:00419D0B 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D03(C)
|
:00419D0E EBC5                    jmp 00419CD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419CE2(C)
|
:00419D10 8B45FC                  mov eax, dword ptr [ebp-04]
:00419D13 8BE5                    mov esp, ebp
:00419D15 5D                      pop ebp
:00419D16 C3                      ret



* Referenced by a CALL at Addresses:
|:00419AF1   , :0041BD5F   , :0041ECBD   , :0041F25C   
|
:00419D17 55                      push ebp
:00419D18 8BEC                    mov ebp, esp
:00419D1A 51                      push ecx
:00419D1B C745FC00000000          mov [ebp-04], 00000000
:00419D22 EB09                    jmp 00419D2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D59(U)
|
:00419D24 8B45FC                  mov eax, dword ptr [ebp-04]
:00419D27 83C001                  add eax, 00000001
:00419D2A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D22(U)
|
:00419D2D 837DFC08                cmp dword ptr [ebp-04], 00000008
:00419D31 7D28                    jge 00419D5B
:00419D33 8A4DFC                  mov cl, byte ptr [ebp-04]
:00419D36 51                      push ecx
:00419D37 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419D3A 6BC970                  imul ecx, 00000070
:00419D3D 81C198224900            add ecx, 00492298
:00419D43 E8C8AAFEFF              call 00404810
:00419D48 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00419D4D 3DFF000000              cmp eax, 000000FF
:00419D52 7C05                    jl 00419D59
:00419D54 8A45FC                  mov al, byte ptr [ebp-04]
:00419D57 EB04                    jmp 00419D5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D52(C)
|
:00419D59 EBC9                    jmp 00419D24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D31(C)
|
:00419D5B 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D57(U)
|
:00419D5D 8BE5                    mov esp, ebp
:00419D5F 5D                      pop ebp
:00419D60 C3                      ret



* Referenced by a CALL at Address:
|:004199DA   
|
:00419D61 55                      push ebp
:00419D62 8BEC                    mov ebp, esp
:00419D64 83EC10                  sub esp, 00000010
:00419D67 8B4508                  mov eax, dword ptr [ebp+08]
:00419D6A 50                      push eax
:00419D6B E884E3FFFF              call 004180F4
:00419D70 83C404                  add esp, 00000004
:00419D73 8945F8                  mov dword ptr [ebp-08], eax
:00419D76 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419D79 8B510C                  mov edx, dword ptr [ecx+0C]
:00419D7C 52                      push edx
:00419D7D 8B4510                  mov eax, dword ptr [ebp+10]
:00419D80 8B08                    mov ecx, dword ptr [eax]
:00419D82 51                      push ecx
:00419D83 E8EED8FFFF              call 00417676
:00419D88 83C408                  add esp, 00000008
:00419D8B C1E810                  shr eax, 10
:00419D8E 25FFFF0000              and eax, 0000FFFF
:00419D93 25FFFF0000              and eax, 0000FFFF
:00419D98 8945F4                  mov dword ptr [ebp-0C], eax
:00419D9B 8A55F4                  mov dl, byte ptr [ebp-0C]
:00419D9E 52                      push edx
:00419D9F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00419DA2 6BC970                  imul ecx, 00000070
:00419DA5 81C198224900            add ecx, 00492298
:00419DAB E860AAFEFF              call 00404810
:00419DB0 25FF000000              and eax, 000000FF
:00419DB5 8945FC                  mov dword ptr [ebp-04], eax
:00419DB8 6A01                    push 00000001
:00419DBA 8B450C                  mov eax, dword ptr [ebp+0C]
:00419DBD 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00419DBE FF1584874B00            Call dword ptr [004B8784]
:00419DC4 50                      push eax
:00419DC5 E877010000              call 00419F41
:00419DCA 83C408                  add esp, 00000008
:00419DCD 85C0                    test eax, eax
:00419DCF 0F848C000000            je 00419E61
:00419DD5 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00419DD8 51                      push ecx
:00419DD9 8B55F8                  mov edx, dword ptr [ebp-08]
:00419DDC 52                      push edx
:00419DDD 8B450C                  mov eax, dword ptr [ebp+0C]
:00419DE0 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00419DE1 FF1584874B00            Call dword ptr [004B8784]
:00419DE7 50                      push eax
:00419DE8 E8D3010000              call 00419FC0
:00419DED 83C40C                  add esp, 0000000C
:00419DF0 85C0                    test eax, eax
:00419DF2 7C6D                    jl 00419E61
:00419DF4 E8B3D8FFFF              call 004176AC
:00419DF9 25FF000000              and eax, 000000FF
:00419DFE 8945F0                  mov dword ptr [ebp-10], eax
:00419E01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419E04 51                      push ecx
:00419E05 8B55F0                  mov edx, dword ptr [ebp-10]
:00419E08 52                      push edx
:00419E09 B9C8E24A00              mov ecx, 004AE2C8
:00419E0E E84DD9FEFF              call 00407760

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00419E13 68FF000000              push 000000FF
:00419E18 8A45F4                  mov al, byte ptr [ebp-0C]
:00419E1B 50                      push eax
:00419E1C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00419E1F 6BC970                  imul ecx, 00000070
:00419E22 81C198224900            add ecx, 00492298
:00419E28 E803AAFEFF              call 00404830
:00419E2D 6A01                    push 00000001
:00419E2F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00419E32 51                      push ecx
:00419E33 8B550C                  mov edx, dword ptr [ebp+0C]
:00419E36 52                      push edx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00419E37 FF1584874B00            Call dword ptr [004B8784]
:00419E3D 50                      push eax
:00419E3E E8EAEFFFFF              call 00418E2D
:00419E43 83C40C                  add esp, 0000000C
:00419E46 8B45F0                  mov eax, dword ptr [ebp-10]
:00419E49 50                      push eax
:00419E4A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419E4D 51                      push ecx
:00419E4E 8B550C                  mov edx, dword ptr [ebp+0C]
:00419E51 52                      push edx
:00419E52 E810000000              call 00419E67
:00419E57 83C40C                  add esp, 0000000C
:00419E5A B801000000              mov eax, 00000001
:00419E5F EB02                    jmp 00419E63

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00419DCF(C), :00419DF2(C)
|
:00419E61 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419E5F(U)
|
:00419E63 8BE5                    mov esp, ebp
:00419E65 5D                      pop ebp
:00419E66 C3                      ret



* Referenced by a CALL at Addresses:
|:00419E52   , :0041EC3D   , :0041EEE4   
|
:00419E67 55                      push ebp
:00419E68 8BEC                    mov ebp, esp
:00419E6A 83EC28                  sub esp, 00000028
:00419E6D 8B4510                  mov eax, dword ptr [ebp+10]
:00419E70 50                      push eax
:00419E71 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419E74 51                      push ecx
:00419E75 8B5508                  mov edx, dword ptr [ebp+08]
:00419E78 52                      push edx
:00419E79 8D45D8                  lea eax, dword ptr [ebp-28]
:00419E7C 50                      push eax
:00419E7D E83E000000              call 00419EC0
:00419E82 83C410                  add esp, 00000010
:00419E85 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00419E88 51                      push ecx
:00419E89 6A00                    push 00000000
:00419E8B 6807100000              push 00001007
:00419E90 8B5508                  mov edx, dword ptr [ebp+08]
:00419E93 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419E94 FF15D8864B00            Call dword ptr [004B86D8]
:00419E9A 6A00                    push 00000000

* Reference To: COMCTL32.ImageList_DragLeave, Ord:0019h
                                  |
:00419E9C FF1550844B00            Call dword ptr [004B8450]
:00419EA2 6A01                    push 00000001
:00419EA4 8B4510                  mov eax, dword ptr [ebp+10]
:00419EA7 50                      push eax
:00419EA8 6813100000              push 00001013
:00419EAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419EB0 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419EB1 FF15D8864B00            Call dword ptr [004B86D8]
:00419EB7 B801000000              mov eax, 00000001
:00419EBC 8BE5                    mov esp, ebp
:00419EBE 5D                      pop ebp
:00419EBF C3                      ret



* Referenced by a CALL at Address:
|:00419E7D   
|
:00419EC0 55                      push ebp
:00419EC1 8BEC                    mov ebp, esp
:00419EC3 8B4508                  mov eax, dword ptr [ebp+08]

* Possible Reference to String Resource ID=00015: ""
                                  |
:00419EC6 C7000F000000            mov dword ptr [eax], 0000000F
:00419ECC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419ECF C7410C00000000          mov [ecx+0C], 00000000
:00419ED6 8B5508                  mov edx, dword ptr [ebp+08]
:00419ED9 C7421000000000          mov [edx+10], 00000000
:00419EE0 8B4508                  mov eax, dword ptr [ebp+08]
:00419EE3 C7400800000000          mov [eax+08], 00000000
:00419EEA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419EED C74114FFFFFFFF          mov [ecx+14], FFFFFFFF
:00419EF4 8B5508                  mov edx, dword ptr [ebp+08]
:00419EF7 C7421820000000          mov [edx+18], 00000020
:00419EFE 8B4508                  mov eax, dword ptr [ebp+08]
:00419F01 8B4D14                  mov ecx, dword ptr [ebp+14]
:00419F04 894804                  mov dword ptr [eax+04], ecx
:00419F07 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419F0A 6BC933                  imul ecx, 00000033
:00419F0D 81C1C8EF4800            add ecx, 0048EFC8
:00419F13 E898A7FEFF              call 004046B0
:00419F18 25FF000000              and eax, 000000FF
:00419F1D 8B5508                  mov edx, dword ptr [ebp+08]
:00419F20 89421C                  mov dword ptr [edx+1C], eax
:00419F23 8B4510                  mov eax, dword ptr [ebp+10]
:00419F26 25FFFF0000              and eax, 0000FFFF
:00419F2B 8B4D14                  mov ecx, dword ptr [ebp+14]
:00419F2E 81E1FFFF0000            and ecx, 0000FFFF
:00419F34 C1E110                  shl ecx, 10
:00419F37 0BC1                    or eax, ecx
:00419F39 8B5508                  mov edx, dword ptr [ebp+08]
:00419F3C 894220                  mov dword ptr [edx+20], eax
:00419F3F 5D                      pop ebp
:00419F40 C3                      ret



* Referenced by a CALL at Addresses:
|:00419DC5   , :0041EB6B   , :0041EBE5   , :0041EE62   
|
:00419F41 55                      push ebp
:00419F42 8BEC                    mov ebp, esp
:00419F44 E823000000              call 00419F6C
:00419F49 39450C                  cmp dword ptr [ebp+0C], eax
:00419F4C 7F07                    jg 00419F55
:00419F4E B801000000              mov eax, 00000001
:00419F53 EB15                    jmp 00419F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F4C(C)
|

* Possible StringData Ref from Data Obj ->"AFC"
                                  |
:00419F55 682C734700              push 0047732C
:00419F5A 6A00                    push 00000000
:00419F5C 8B4508                  mov eax, dword ptr [ebp+08]
:00419F5F 50                      push eax
:00419F60 E8FAD0FFFF              call 0041705F
:00419F65 83C40C                  add esp, 0000000C
:00419F68 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F53(U)
|
:00419F6A 5D                      pop ebp
:00419F6B C3                      ret



* Referenced by a CALL at Address:
|:00419F44   
|
:00419F6C 55                      push ebp
:00419F6D 8BEC                    mov ebp, esp
:00419F6F 83EC08                  sub esp, 00000008
:00419F72 C745FC00000000          mov [ebp-04], 00000000
:00419F79 C745F800000000          mov [ebp-08], 00000000
:00419F80 EB09                    jmp 00419F8B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419FB7(U)
|
:00419F82 8B45F8                  mov eax, dword ptr [ebp-08]
:00419F85 83C001                  add eax, 00000001
:00419F88 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F80(U)
|
:00419F8B 817DF880000000          cmp dword ptr [ebp-08], 00000080
:00419F92 7325                    jnb 00419FB9
:00419F94 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00419F97 51                      push ecx
:00419F98 B9C8E24A00              mov ecx, 004AE2C8
:00419F9D E8BE5E0000              call 0041FE60
:00419FA2 25FFFF0000              and eax, 0000FFFF
:00419FA7 3DFFFF0000              cmp eax, 0000FFFF
:00419FAC 7509                    jne 00419FB7
:00419FAE 8B55FC                  mov edx, dword ptr [ebp-04]
:00419FB1 83C201                  add edx, 00000001
:00419FB4 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419FAC(C)
|
:00419FB7 EBC9                    jmp 00419F82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F92(C)
|
:00419FB9 8B45FC                  mov eax, dword ptr [ebp-04]
:00419FBC 8BE5                    mov esp, ebp
:00419FBE 5D                      pop ebp
:00419FBF C3                      ret



* Referenced by a CALL at Addresses:
|:00419DE8   , :0041BD28   , :0041EE7E   , :0041F04D   
|
:00419FC0 55                      push ebp
:00419FC1 8BEC                    mov ebp, esp
:00419FC3 56                      push esi
:00419FC4 8B7510                  mov esi, dword ptr [ebp+10]
:00419FC7 81E6FF000000            and esi, 000000FF
:00419FCD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419FD0 6BC970                  imul ecx, 00000070
:00419FD3 81C198224900            add ecx, 00492298
:00419FD9 E812A8FEFF              call 004047F0
:00419FDE 25FF000000              and eax, 000000FF
:00419FE3 3BF0                    cmp esi, eax
:00419FE5 755F                    jne 0041A046
:00419FE7 B910584800              mov ecx, 00485810
:00419FEC E8DF5F0000              call 0041FFD0
:00419FF1 85C0                    test eax, eax
:00419FF3 7418                    je 0041A00D

* Possible StringData Ref from Data Obj ->"ԳWѰ˳ơC"
                                  |
:00419FF5 683C734700              push 0047733C
:00419FFA 6A00                    push 00000000
:00419FFC 8B4508                  mov eax, dword ptr [ebp+08]
:00419FFF 50                      push eax
:0041A000 E85AD0FFFF              call 0041705F
:0041A005 83C40C                  add esp, 0000000C
:0041A008 83C8FF                  or eax, FFFFFFFF
:0041A00B EB3B                    jmp 0041A048

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419FF3(C)
|
:0041A00D 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"{bwg˳ơAiHܡH"
                                  |
:0041A00F 6854734700              push 00477354
:0041A014 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A017 51                      push ecx
:0041A018 E8A0D5FFFF              call 004175BD
:0041A01D 83C40C                  add esp, 0000000C
:0041A020 85C0                    test eax, eax
:0041A022 741D                    je 0041A041

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041A024 68FF000000              push 000000FF
:0041A029 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A02C 6BC970                  imul ecx, 00000070
:0041A02F 81C198224900            add ecx, 00492298
:0041A035 E8277DFEFF              call 00401D61
:0041A03A B801000000              mov eax, 00000001
:0041A03F EB07                    jmp 0041A048

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A022(C)
|
:0041A041 83C8FF                  or eax, FFFFFFFF
:0041A044 EB02                    jmp 0041A048

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419FE5(C)
|
:0041A046 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A00B(U), :0041A03F(U), :0041A044(U)
|
:0041A048 5E                      pop esi
:0041A049 5D                      pop ebp
:0041A04A C3                      ret



* Referenced by a CALL at Addresses:
|:00419904   , :0041BCCC   
|
:0041A04B 55                      push ebp
:0041A04C 8BEC                    mov ebp, esp
:0041A04E 83EC10                  sub esp, 00000010
:0041A051 8B4510                  mov eax, dword ptr [ebp+10]
:0041A054 25FFFF0000              and eax, 0000FFFF
:0041A059 8945F4                  mov dword ptr [ebp-0C], eax
:0041A05C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041A05F C1E910                  shr ecx, 10
:0041A062 81E1FFFF0000            and ecx, 0000FFFF
:0041A068 81E1FFFF0000            and ecx, 0000FFFF
:0041A06E 894DF8                  mov dword ptr [ebp-08], ecx
:0041A071 8B55F8                  mov edx, dword ptr [ebp-08]
:0041A074 52                      push edx
:0041A075 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041A078 50                      push eax
:0041A079 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A07C 51                      push ecx

* Reference To: USER32.ChildWindowFromPoint, Ord:0033h
                                  |
:0041A07D FF155C874B00            Call dword ptr [004B875C]
:0041A083 8945FC                  mov dword ptr [ebp-04], eax
:0041A086 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041A08A 7408                    je 0041A094
:0041A08C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041A08F 3B55FC                  cmp edx, dword ptr [ebp-04]
:0041A092 7504                    jne 0041A098

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A08A(C)
|
:0041A094 33C0                    xor eax, eax
:0041A096 EB48                    jmp 0041A0E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A092(C)
|
:0041A098 8B4514                  mov eax, dword ptr [ebp+14]
:0041A09B 50                      push eax
:0041A09C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A09F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A0A0 FF15AC864B00            Call dword ptr [004B86AC]
:0041A0A6 39450C                  cmp dword ptr [ebp+0C], eax
:0041A0A9 7513                    jne 0041A0BE
:0041A0AB 8B5518                  mov edx, dword ptr [ebp+18]
:0041A0AE 52                      push edx
:0041A0AF 8B4508                  mov eax, dword ptr [ebp+08]
:0041A0B2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A0B3 FF15AC864B00            Call dword ptr [004B86AC]
:0041A0B9 8945F0                  mov dword ptr [ebp-10], eax
:0041A0BC EB11                    jmp 0041A0CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A0A9(C)
|
:0041A0BE 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041A0C1 51                      push ecx
:0041A0C2 8B5508                  mov edx, dword ptr [ebp+08]
:0041A0C5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A0C6 FF15AC864B00            Call dword ptr [004B86AC]
:0041A0CC 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A0BC(U)
|
:0041A0CF 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A0D2 3B45F0                  cmp eax, dword ptr [ebp-10]
:0041A0D5 7507                    jne 0041A0DE
:0041A0D7 B801000000              mov eax, 00000001
:0041A0DC EB02                    jmp 0041A0E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A0D5(C)
|
:0041A0DE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A096(U), :0041A0DC(U)
|
:0041A0E0 8BE5                    mov esp, ebp
:0041A0E2 5D                      pop ebp
:0041A0E3 C3                      ret



* Referenced by a CALL at Addresses:
|:0041986F   , :0041BC40   
|
:0041A0E4 55                      push ebp
:0041A0E5 8BEC                    mov ebp, esp
:0041A0E7 83EC18                  sub esp, 00000018
:0041A0EA 8B4510                  mov eax, dword ptr [ebp+10]
:0041A0ED 8945E8                  mov dword ptr [ebp-18], eax
:0041A0F0 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041A0F3 894DEC                  mov dword ptr [ebp-14], ecx
:0041A0F6 8D55F0                  lea edx, dword ptr [ebp-10]
:0041A0F9 52                      push edx
:0041A0FA 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A0FD 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0041A0FE FF1558874B00            Call dword ptr [004B8758]
:0041A104 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0041A107 51                      push ecx
:0041A108 8B5508                  mov edx, dword ptr [ebp+08]
:0041A10B 52                      push edx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:0041A10C FF15F8864B00            Call dword ptr [004B86F8]
:0041A112 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A115 3B45F0                  cmp eax, dword ptr [ebp-10]
:0041A118 7C18                    jl 0041A132
:0041A11A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041A11D 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0041A120 7C10                    jl 0041A132
:0041A122 8B55E8                  mov edx, dword ptr [ebp-18]
:0041A125 3B55F8                  cmp edx, dword ptr [ebp-08]
:0041A128 7F08                    jg 0041A132
:0041A12A 8B45EC                  mov eax, dword ptr [ebp-14]
:0041A12D 3B45FC                  cmp eax, dword ptr [ebp-04]
:0041A130 7E04                    jle 0041A136

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A118(C), :0041A120(C), :0041A128(C)
|
:0041A132 33C0                    xor eax, eax
:0041A134 EB05                    jmp 0041A13B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A130(C)
|
:0041A136 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A134(U)
|
:0041A13B 8BE5                    mov esp, ebp
:0041A13D 5D                      pop ebp
:0041A13E C3                      ret



* Referenced by a CALL at Addresses:
|:004198D5   , :0041BC9D   
|
:0041A13F 55                      push ebp
:0041A140 8BEC                    mov ebp, esp
:0041A142 83EC08                  sub esp, 00000008
:0041A145 8B4510                  mov eax, dword ptr [ebp+10]
:0041A148 50                      push eax
:0041A149 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A14C 51                      push ecx
:0041A14D E824D5FFFF              call 00417676
:0041A152 83C408                  add esp, 00000008
:0041A155 C1E810                  shr eax, 10
:0041A158 25FFFF0000              and eax, 0000FFFF
:0041A15D 25FFFF0000              and eax, 0000FFFF
:0041A162 8945FC                  mov dword ptr [ebp-04], eax
:0041A165 683E040000              push 0000043E
:0041A16A 8B5508                  mov edx, dword ptr [ebp+08]
:0041A16D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A16E FF15AC864B00            Call dword ptr [004B86AC]
:0041A174 39450C                  cmp dword ptr [ebp+0C], eax
:0041A177 7515                    jne 0041A18E
:0041A179 68FFFF0000              push 0000FFFF
:0041A17E 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A181 50                      push eax
:0041A182 B9C8E24A00              mov ecx, 004AE2C8
:0041A187 E8D4D5FEFF              call 00407760
:0041A18C EB1A                    jmp 0041A1A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A177(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041A18E 68FF000000              push 000000FF
:0041A193 8A4DFC                  mov cl, byte ptr [ebp-04]
:0041A196 51                      push ecx
:0041A197 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041A19A 6BC970                  imul ecx, 00000070
:0041A19D 81C198224900            add ecx, 00492298
:0041A1A3 E888A6FEFF              call 00404830

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A18C(U)
|
:0041A1A8 6A00                    push 00000000
:0041A1AA 8B5510                  mov edx, dword ptr [ebp+10]
:0041A1AD 52                      push edx
:0041A1AE 6808100000              push 00001008
:0041A1B3 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A1B6 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041A1B7 FF15D8864B00            Call dword ptr [004B86D8]
:0041A1BD 6A00                    push 00000000
:0041A1BF 6A00                    push 00000000
:0041A1C1 6804100000              push 00001004
:0041A1C6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A1C9 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041A1CA FF15D8864B00            Call dword ptr [004B86D8]
:0041A1D0 83E801                  sub eax, 00000001
:0041A1D3 3B4510                  cmp eax, dword ptr [ebp+10]
:0041A1D6 7D1B                    jge 0041A1F3
:0041A1D8 6A00                    push 00000000
:0041A1DA 6A00                    push 00000000
:0041A1DC 6804100000              push 00001004
:0041A1E1 8B550C                  mov edx, dword ptr [ebp+0C]
:0041A1E4 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041A1E5 FF15D8864B00            Call dword ptr [004B86D8]
:0041A1EB 83E801                  sub eax, 00000001
:0041A1EE 8945F8                  mov dword ptr [ebp-08], eax
:0041A1F1 EB06                    jmp 0041A1F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A1D6(C)
|
:0041A1F3 8B4510                  mov eax, dword ptr [ebp+10]
:0041A1F6 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A1F1(U)
|
:0041A1F9 6A00                    push 00000000
:0041A1FB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041A1FE 51                      push ecx
:0041A1FF 6813100000              push 00001013
:0041A204 8B550C                  mov edx, dword ptr [ebp+0C]
:0041A207 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041A208 FF15D8864B00            Call dword ptr [004B86D8]
:0041A20E 8BE5                    mov esp, ebp
:0041A210 5D                      pop ebp
:0041A211 C3                      ret



* Referenced by a CALL at Addresses:
|:00418B90   , :0041B67D   , :0041F8D8   
|
:0041A212 55                      push ebp
:0041A213 8BEC                    mov ebp, esp
:0041A215 83EC14                  sub esp, 00000014
:0041A218 8B4510                  mov eax, dword ptr [ebp+10]
:0041A21B 8B08                    mov ecx, dword ptr [eax]
:0041A21D 894DEC                  mov dword ptr [ebp-14], ecx
:0041A220 8B55EC                  mov edx, dword ptr [ebp-14]
:0041A223 52                      push edx
:0041A224 E8C9D4FFFF              call 004176F2
:0041A229 83C404                  add esp, 00000004
:0041A22C 8945F0                  mov dword ptr [ebp-10], eax
:0041A22F 837DF000                cmp dword ptr [ebp-10], 00000000
:0041A233 7D02                    jge 0041A237
:0041A235 EB65                    jmp 0041A29C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A233(C)
|
:0041A237 8B45F0                  mov eax, dword ptr [ebp-10]
:0041A23A 50                      push eax
:0041A23B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041A23E 51                      push ecx
:0041A23F E832D4FFFF              call 00417676
:0041A244 83C408                  add esp, 00000008
:0041A247 8945F8                  mov dword ptr [ebp-08], eax
:0041A24A 8B55F8                  mov edx, dword ptr [ebp-08]
:0041A24D 81E2FFFF0000            and edx, 0000FFFF
:0041A253 8955FC                  mov dword ptr [ebp-04], edx
:0041A256 8B45F8                  mov eax, dword ptr [ebp-08]
:0041A259 C1E810                  shr eax, 10
:0041A25C 25FFFF0000              and eax, 0000FFFF
:0041A261 8845F4                  mov byte ptr [ebp-0C], al
:0041A264 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0041A267 51                      push ecx
:0041A268 8B550C                  mov edx, dword ptr [ebp+0C]
:0041A26B 52                      push edx
:0041A26C 8B4508                  mov eax, dword ptr [ebp+08]
:0041A26F 50                      push eax
:0041A270 E837F9FFFF              call 00419BAC
:0041A275 83C40C                  add esp, 0000000C
:0041A278 85C0                    test eax, eax
:0041A27A 7420                    je 0041A29C
:0041A27C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A27F 51                      push ecx
:0041A280 8B55EC                  mov edx, dword ptr [ebp-14]
:0041A283 52                      push edx
:0041A284 E8E8CFFFFF              call 00417271
:0041A289 83C408                  add esp, 00000008
:0041A28C 8B4514                  mov eax, dword ptr [ebp+14]
:0041A28F 50                      push eax
:0041A290 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A293 51                      push ecx
:0041A294 E807000000              call 0041A2A0
:0041A299 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A235(U), :0041A27A(C)
|
:0041A29C 8BE5                    mov esp, ebp
:0041A29E 5D                      pop ebp
:0041A29F C3                      ret



* Referenced by a CALL at Address:
|:0041A294   
|
:0041A2A0 55                      push ebp
:0041A2A1 8BEC                    mov ebp, esp
:0041A2A3 51                      push ecx
:0041A2A4 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A2A7 8945FC                  mov dword ptr [ebp-04], eax
:0041A2AA 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041A2AE 740E                    je 0041A2BE
:0041A2B0 837DFC01                cmp dword ptr [ebp-04], 00000001
:0041A2B4 7416                    je 0041A2CC
:0041A2B6 837DFC02                cmp dword ptr [ebp-04], 00000002
:0041A2BA 741E                    je 0041A2DA
:0041A2BC EB28                    jmp 0041A2E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A2AE(C)
|
:0041A2BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A2C1 51                      push ecx
:0041A2C2 E865EEFFFF              call 0041912C
:0041A2C7 83C404                  add esp, 00000004
:0041A2CA EB1A                    jmp 0041A2E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A2B4(C)
|
:0041A2CC 8B5508                  mov edx, dword ptr [ebp+08]
:0041A2CF 52                      push edx
:0041A2D0 E815000000              call 0041A2EA
:0041A2D5 83C404                  add esp, 00000004
:0041A2D8 EB0C                    jmp 0041A2E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A2BA(C)
|
:0041A2DA 8B4508                  mov eax, dword ptr [ebp+08]
:0041A2DD 50                      push eax
:0041A2DE E891340000              call 0041D774
:0041A2E3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A2BC(U), :0041A2CA(U), :0041A2D8(U)
|
:0041A2E6 8BE5                    mov esp, ebp
:0041A2E8 5D                      pop ebp
:0041A2E9 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A2D0   , :0041B37F   , :0041B4B8   , :0041B54C   , :0041BF83   
|:0041C000   , :0041D4FF   
|
:0041A2EA 55                      push ebp
:0041A2EB 8BEC                    mov ebp, esp
:0041A2ED 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041A2F0 68EA030000              push 000003EA
:0041A2F5 8B4508                  mov eax, dword ptr [ebp+08]
:0041A2F8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A2F9 FF15AC864B00            Call dword ptr [004B86AC]
:0041A2FF 50                      push eax
:0041A300 E8EFDDFFFF              call 004180F4
:0041A305 83C404                  add esp, 00000004
:0041A308 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041A30B 68FC030000              push 000003FC
:0041A310 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A313 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A314 FF15AC864B00            Call dword ptr [004B86AC]
:0041A31A 50                      push eax
:0041A31B E8D4DDFFFF              call 004180F4
:0041A320 83C404                  add esp, 00000004
:0041A323 8945F8                  mov dword ptr [ebp-08], eax
:0041A326 6A01                    push 00000001
:0041A328 8B55FC                  mov edx, dword ptr [ebp-04]
:0041A32B 52                      push edx
:0041A32C 8B4508                  mov eax, dword ptr [ebp+08]
:0041A32F 50                      push eax
:0041A330 E849000000              call 0041A37E
:0041A335 83C40C                  add esp, 0000000C
:0041A338 6A01                    push 00000001
:0041A33A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041A33D 51                      push ecx
:0041A33E 8B5508                  mov edx, dword ptr [ebp+08]
:0041A341 52                      push edx
:0041A342 E839030000              call 0041A680
:0041A347 83C40C                  add esp, 0000000C
:0041A34A 6835040000              push 00000435
:0041A34F 8B4508                  mov eax, dword ptr [ebp+08]
:0041A352 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A353 FF15AC864B00            Call dword ptr [004B86AC]
:0041A359 50                      push eax
:0041A35A E832EEFFFF              call 00419191
:0041A35F 83C404                  add esp, 00000004
:0041A362 6836040000              push 00000436
:0041A367 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A36A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A36B FF15AC864B00            Call dword ptr [004B86AC]
:0041A371 50                      push eax
:0041A372 E81AEEFFFF              call 00419191
:0041A377 83C404                  add esp, 00000004
:0041A37A 8BE5                    mov esp, ebp
:0041A37C 5D                      pop ebp
:0041A37D C3                      ret



* Referenced by a CALL at Addresses:
|:0041A330   , :0041BA6A   , :0041BE66   , :0041C22E   , :0041C5AB   
|
:0041A37E 55                      push ebp
:0041A37F 8BEC                    mov ebp, esp
:0041A381 51                      push ecx
:0041A382 837D1000                cmp dword ptr [ebp+10], 00000000
:0041A386 741B                    je 0041A3A3

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:0041A388 686C734700              push 0047736C
:0041A38D 68AE040000              push 000004AE
:0041A392 8B4508                  mov eax, dword ptr [ebp+08]
:0041A395 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A396 FF15AC864B00            Call dword ptr [004B86AC]
:0041A39C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041A39D FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A386(C)
|
:0041A3A3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A3A6 6BC970                  imul ecx, 00000070
:0041A3A9 81C198224900            add ecx, 00492298
:0041A3AF E83CA4FEFF              call 004047F0
:0041A3B4 8845FC                  mov byte ptr [ebp-04], al
:0041A3B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A3BA 81E1FF000000            and ecx, 000000FF
:0041A3C0 81F9FF000000            cmp ecx, 000000FF
:0041A3C6 744B                    je 0041A413
:0041A3C8 8A55FC                  mov dl, byte ptr [ebp-04]
:0041A3CB 52                      push edx
:0041A3CC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A3CF 6BC970                  imul ecx, 00000070
:0041A3D2 81C198224900            add ecx, 00492298
:0041A3D8 E833A4FEFF              call 00404810
:0041A3DD 8AC8                    mov cl, al
:0041A3DF 81E1FF000000            and ecx, 000000FF
:0041A3E5 6BC933                  imul ecx, 00000033
:0041A3E8 81C1C8EF4800            add ecx, 0048EFC8
:0041A3EE E8BDD3FEFF              call 004077B0
:0041A3F3 50                      push eax

* Possible StringData Ref from Data Obj ->"˳ƪZ: %s"
                                  |
:0041A3F4 6878734700              push 00477378

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:04A9, ""
                                  |
:0041A3F9 68A9040000              push 000004A9
:0041A3FE 8B4508                  mov eax, dword ptr [ebp+08]
:0041A401 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A402 FF15AC864B00            Call dword ptr [004B86AC]
:0041A408 50                      push eax
:0041A409 E8FC930400              call 0046380A
:0041A40E 83C40C                  add esp, 0000000C
:0041A411 EB1B                    jmp 0041A42E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A3C6(C)
|

* Possible StringData Ref from Data Obj ->"˳ƪZ:L"
                                  |
:0041A413 6888734700              push 00477388

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:04A9, ""
                                  |
:0041A418 68A9040000              push 000004A9
:0041A41D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A420 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A421 FF15AC864B00            Call dword ptr [004B86AC]
:0041A427 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041A428 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A411(U)
|
:0041A42E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A431 6BC970                  imul ecx, 00000070
:0041A434 81C198224900            add ecx, 00492298
:0041A43A E8817FFEFF              call 004023C0
:0041A43F 50                      push eax

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:0041A440 6898734700              push 00477398
:0041A445 68A8040000              push 000004A8
:0041A44A 8B5508                  mov edx, dword ptr [ebp+08]
:0041A44D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A44E FF15AC864B00            Call dword ptr [004B86AC]
:0041A454 50                      push eax
:0041A455 E8B0930400              call 0046380A
:0041A45A 83C40C                  add esp, 0000000C
:0041A45D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A460 6BC970                  imul ecx, 00000070
:0041A463 81C198224900            add ecx, 00492298
:0041A469 E8857FFEFF              call 004023F3
:0041A46E 50                      push eax

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:0041A46F 68A4734700              push 004773A4

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:0041A474 68F3030000              push 000003F3
:0041A479 8B4508                  mov eax, dword ptr [ebp+08]
:0041A47C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A47D FF15AC864B00            Call dword ptr [004B86AC]
:0041A483 50                      push eax
:0041A484 E881930400              call 0046380A
:0041A489 83C40C                  add esp, 0000000C
:0041A48C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A48F 6BC970                  imul ecx, 00000070
:0041A492 81C198224900            add ecx, 00492298
:0041A498 E8897FFEFF              call 00402426
:0041A49D 50                      push eax

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041A49E 68B0734700              push 004773B0

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:0041A4A3 68FD030000              push 000003FD
:0041A4A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A4AB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A4AC FF15AC864B00            Call dword ptr [004B86AC]
:0041A4B2 50                      push eax
:0041A4B3 E852930400              call 0046380A
:0041A4B8 83C40C                  add esp, 0000000C
:0041A4BB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A4BE 6BC970                  imul ecx, 00000070
:0041A4C1 81C198224900            add ecx, 00492298
:0041A4C7 E8E17FFEFF              call 004024AD
:0041A4CC 50                      push eax

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:0041A4CD 68BC734700              push 004773BC

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:0041A4D2 68F2030000              push 000003F2
:0041A4D7 8B5508                  mov edx, dword ptr [ebp+08]
:0041A4DA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A4DB FF15AC864B00            Call dword ptr [004B86AC]
:0041A4E1 50                      push eax
:0041A4E2 E823930400              call 0046380A
:0041A4E7 83C40C                  add esp, 0000000C
:0041A4EA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A4ED 6BC970                  imul ecx, 00000070
:0041A4F0 81C198224900            add ecx, 00492298
:0041A4F6 E8E57FFEFF              call 004024E0
:0041A4FB 50                      push eax

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:0041A4FC 68C8734700              push 004773C8
:0041A501 68A4040000              push 000004A4
:0041A506 8B4508                  mov eax, dword ptr [ebp+08]
:0041A509 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A50A FF15AC864B00            Call dword ptr [004B86AC]
:0041A510 50                      push eax
:0041A511 E8F4920400              call 0046380A
:0041A516 83C40C                  add esp, 0000000C
:0041A519 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A51C 6BC970                  imul ecx, 00000070
:0041A51F 81C198224900            add ecx, 00492298
:0041A525 E8E77FFEFF              call 00402511
:0041A52A 50                      push eax

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:0041A52B 68D8734700              push 004773D8
:0041A530 68A5040000              push 000004A5
:0041A535 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A538 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A539 FF15AC864B00            Call dword ptr [004B86AC]
:0041A53F 50                      push eax
:0041A540 E8C5920400              call 0046380A
:0041A545 83C40C                  add esp, 0000000C
:0041A548 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A54B 6BC970                  imul ecx, 00000070
:0041A54E 81C198224900            add ecx, 00492298
:0041A554 E8EB7FFEFF              call 00402544
:0041A559 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:0041A55A 68E8734700              push 004773E8
:0041A55F 68A6040000              push 000004A6
:0041A564 8B5508                  mov edx, dword ptr [ebp+08]
:0041A567 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A568 FF15AC864B00            Call dword ptr [004B86AC]
:0041A56E 50                      push eax
:0041A56F E896920400              call 0046380A
:0041A574 83C40C                  add esp, 0000000C
:0041A577 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A57A 6BC970                  imul ecx, 00000070
:0041A57D 81C198224900            add ecx, 00492298
:0041A583 E87480FEFF              call 004025FC
:0041A588 25FF000000              and eax, 000000FF
:0041A58D 50                      push eax

* Possible StringData Ref from Data Obj ->"ӱ@@  %3u"
                                  |
:0041A58E 68F8734700              push 004773F8
:0041A593 68A7040000              push 000004A7
:0041A598 8B4508                  mov eax, dword ptr [ebp+08]
:0041A59B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A59C FF15AC864B00            Call dword ptr [004B86AC]
:0041A5A2 50                      push eax
:0041A5A3 E862920400              call 0046380A
:0041A5A8 83C40C                  add esp, 0000000C
:0041A5AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A5AE 51                      push ecx
:0041A5AF E807000000              call 0041A5BB
:0041A5B4 83C404                  add esp, 00000004
:0041A5B7 8BE5                    mov esp, ebp
:0041A5B9 5D                      pop ebp
:0041A5BA C3                      ret



* Referenced by a CALL at Addresses:
|:0041A5AF   , :0041C018   
|
:0041A5BB 55                      push ebp
:0041A5BC 8BEC                    mov ebp, esp
:0041A5BE 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0041A5C0 6802040000              push 00000402
:0041A5C5 8B4508                  mov eax, dword ptr [ebp+08]
:0041A5C8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A5C9 FF15AC864B00            Call dword ptr [004B86AC]
:0041A5CF 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A5D0 FF15E4864B00            Call dword ptr [004B86E4]
:0041A5D6 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:0041A5D8 6803040000              push 00000403
:0041A5DD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A5E0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A5E1 FF15AC864B00            Call dword ptr [004B86AC]
:0041A5E7 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A5E8 FF15E4864B00            Call dword ptr [004B86E4]
:0041A5EE 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:0041A5F0 6804040000              push 00000404
:0041A5F5 8B5508                  mov edx, dword ptr [ebp+08]
:0041A5F8 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A5F9 FF15AC864B00            Call dword ptr [004B86AC]
:0041A5FF 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A600 FF15E4864B00            Call dword ptr [004B86E4]
:0041A606 6A00                    push 00000000
:0041A608 6805040000              push 00000405
:0041A60D 8B4508                  mov eax, dword ptr [ebp+08]
:0041A610 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A611 FF15AC864B00            Call dword ptr [004B86AC]
:0041A617 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A618 FF15E4864B00            Call dword ptr [004B86E4]
:0041A61E 6A00                    push 00000000
:0041A620 6806040000              push 00000406
:0041A625 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A628 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A629 FF15AC864B00            Call dword ptr [004B86AC]
:0041A62F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A630 FF15E4864B00            Call dword ptr [004B86E4]
:0041A636 6A00                    push 00000000
:0041A638 6807040000              push 00000407
:0041A63D 8B5508                  mov edx, dword ptr [ebp+08]
:0041A640 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A641 FF15AC864B00            Call dword ptr [004B86AC]
:0041A647 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A648 FF15E4864B00            Call dword ptr [004B86E4]
:0041A64E 6A00                    push 00000000
:0041A650 6808040000              push 00000408
:0041A655 8B4508                  mov eax, dword ptr [ebp+08]
:0041A658 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A659 FF15AC864B00            Call dword ptr [004B86AC]
:0041A65F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A660 FF15E4864B00            Call dword ptr [004B86E4]
:0041A666 6A00                    push 00000000
:0041A668 6809040000              push 00000409
:0041A66D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A670 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A671 FF15AC864B00            Call dword ptr [004B86AC]
:0041A677 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A678 FF15E4864B00            Call dword ptr [004B86E4]
:0041A67E 5D                      pop ebp
:0041A67F C3                      ret



* Referenced by a CALL at Addresses:
|:0041A342   , :0041BABB   , :0041BE8D   , :0041C7F6   , :0041CB73   
|
:0041A680 55                      push ebp
:0041A681 8BEC                    mov ebp, esp
:0041A683 51                      push ecx
:0041A684 837D1000                cmp dword ptr [ebp+10], 00000000
:0041A688 741B                    je 0041A6A5

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:0041A68A 6808744700              push 00477408
:0041A68F 68AD040000              push 000004AD
:0041A694 8B4508                  mov eax, dword ptr [ebp+08]
:0041A697 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A698 FF15AC864B00            Call dword ptr [004B86AC]
:0041A69E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041A69F FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A688(C)
|
:0041A6A5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A6A8 6BC970                  imul ecx, 00000070
:0041A6AB 81C198224900            add ecx, 00492298
:0041A6B1 E83AA1FEFF              call 004047F0
:0041A6B6 25FF000000              and eax, 000000FF
:0041A6BB 8945FC                  mov dword ptr [ebp-04], eax
:0041A6BE 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0041A6C5 744B                    je 0041A712
:0041A6C7 8A4DFC                  mov cl, byte ptr [ebp-04]
:0041A6CA 51                      push ecx
:0041A6CB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A6CE 6BC970                  imul ecx, 00000070
:0041A6D1 81C198224900            add ecx, 00492298
:0041A6D7 E834A1FEFF              call 00404810
:0041A6DC 8AC8                    mov cl, al
:0041A6DE 81E1FF000000            and ecx, 000000FF
:0041A6E4 6BC933                  imul ecx, 00000033
:0041A6E7 81C1C8EF4800            add ecx, 0048EFC8
:0041A6ED E8BED0FEFF              call 004077B0
:0041A6F2 50                      push eax

* Possible StringData Ref from Data Obj ->"˳ƪZ: %s"
                                  |
:0041A6F3 6814744700              push 00477414
:0041A6F8 68AB040000              push 000004AB
:0041A6FD 8B5508                  mov edx, dword ptr [ebp+08]
:0041A700 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A701 FF15AC864B00            Call dword ptr [004B86AC]
:0041A707 50                      push eax
:0041A708 E8FD900400              call 0046380A
:0041A70D 83C40C                  add esp, 0000000C
:0041A710 EB1B                    jmp 0041A72D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A6C5(C)
|

* Possible StringData Ref from Data Obj ->"˳ƪZ: L"
                                  |
:0041A712 6824744700              push 00477424
:0041A717 68AB040000              push 000004AB
:0041A71C 8B4508                  mov eax, dword ptr [ebp+08]
:0041A71F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A720 FF15AC864B00            Call dword ptr [004B86AC]
:0041A726 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041A727 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A710(U)
|
:0041A72D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A730 6BC970                  imul ecx, 00000070
:0041A733 81C198224900            add ecx, 00492298
:0041A739 E8827CFEFF              call 004023C0
:0041A73E 50                      push eax

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:0041A73F 6838744700              push 00477438
:0041A744 68A3040000              push 000004A3
:0041A749 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A74C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A74D FF15AC864B00            Call dword ptr [004B86AC]
:0041A753 50                      push eax
:0041A754 E8B1900400              call 0046380A
:0041A759 83C40C                  add esp, 0000000C
:0041A75C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A75F 6BC970                  imul ecx, 00000070
:0041A762 81C198224900            add ecx, 00492298
:0041A768 E8867CFEFF              call 004023F3
:0041A76D 50                      push eax

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:0041A76E 6844744700              push 00477444

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F1, "255"
                                  |
:0041A773 68F1030000              push 000003F1
:0041A778 8B5508                  mov edx, dword ptr [ebp+08]
:0041A77B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A77C FF15AC864B00            Call dword ptr [004B86AC]
:0041A782 50                      push eax
:0041A783 E882900400              call 0046380A
:0041A788 83C40C                  add esp, 0000000C
:0041A78B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A78E 6BC970                  imul ecx, 00000070
:0041A791 81C198224900            add ecx, 00492298
:0041A797 E88A7CFEFF              call 00402426
:0041A79C 50                      push eax

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041A79D 6850744700              push 00477450

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F5, "255"
                                  |
:0041A7A2 68F5030000              push 000003F5
:0041A7A7 8B4508                  mov eax, dword ptr [ebp+08]
:0041A7AA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A7AB FF15AC864B00            Call dword ptr [004B86AC]
:0041A7B1 50                      push eax
:0041A7B2 E853900400              call 0046380A
:0041A7B7 83C40C                  add esp, 0000000C
:0041A7BA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A7BD 6BC970                  imul ecx, 00000070
:0041A7C0 81C198224900            add ecx, 00492298
:0041A7C6 E8E27CFEFF              call 004024AD
:0041A7CB 50                      push eax

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:0041A7CC 685C744700              push 0047745C

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EF, "255"
                                  |
:0041A7D1 68EF030000              push 000003EF
:0041A7D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A7D9 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A7DA FF15AC864B00            Call dword ptr [004B86AC]
:0041A7E0 50                      push eax
:0041A7E1 E824900400              call 0046380A
:0041A7E6 83C40C                  add esp, 0000000C
:0041A7E9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A7EC 6BC970                  imul ecx, 00000070
:0041A7EF 81C198224900            add ecx, 00492298
:0041A7F5 E8E67CFEFF              call 004024E0
:0041A7FA 50                      push eax

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:0041A7FB 6868744700              push 00477468
:0041A800 689F040000              push 0000049F
:0041A805 8B5508                  mov edx, dword ptr [ebp+08]
:0041A808 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A809 FF15AC864B00            Call dword ptr [004B86AC]
:0041A80F 50                      push eax
:0041A810 E8F58F0400              call 0046380A
:0041A815 83C40C                  add esp, 0000000C
:0041A818 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A81B 6BC970                  imul ecx, 00000070
:0041A81E 81C198224900            add ecx, 00492298
:0041A824 E8E87CFEFF              call 00402511
:0041A829 50                      push eax

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:0041A82A 6878744700              push 00477478
:0041A82F 68A0040000              push 000004A0
:0041A834 8B4508                  mov eax, dword ptr [ebp+08]
:0041A837 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A838 FF15AC864B00            Call dword ptr [004B86AC]
:0041A83E 50                      push eax
:0041A83F E8C68F0400              call 0046380A
:0041A844 83C40C                  add esp, 0000000C
:0041A847 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A84A 6BC970                  imul ecx, 00000070
:0041A84D 81C198224900            add ecx, 00492298
:0041A853 E8EC7CFEFF              call 00402544
:0041A858 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:0041A859 6888744700              push 00477488
:0041A85E 68A1040000              push 000004A1
:0041A863 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A866 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A867 FF15AC864B00            Call dword ptr [004B86AC]
:0041A86D 50                      push eax
:0041A86E E8978F0400              call 0046380A
:0041A873 83C40C                  add esp, 0000000C
:0041A876 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A879 6BC970                  imul ecx, 00000070
:0041A87C 81C198224900            add ecx, 00492298
:0041A882 E8757DFEFF              call 004025FC
:0041A887 25FF000000              and eax, 000000FF
:0041A88C 50                      push eax

* Possible StringData Ref from Data Obj ->"ӱ@@  %3u"
                                  |
:0041A88D 6898744700              push 00477498
:0041A892 68A2040000              push 000004A2
:0041A897 8B5508                  mov edx, dword ptr [ebp+08]
:0041A89A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A89B FF15AC864B00            Call dword ptr [004B86AC]
:0041A8A1 50                      push eax
:0041A8A2 E8638F0400              call 0046380A
:0041A8A7 83C40C                  add esp, 0000000C
:0041A8AA 8B4508                  mov eax, dword ptr [ebp+08]
:0041A8AD 50                      push eax
:0041A8AE E807000000              call 0041A8BA
:0041A8B3 83C404                  add esp, 00000004
:0041A8B6 8BE5                    mov esp, ebp
:0041A8B8 5D                      pop ebp
:0041A8B9 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A8AE   , :0041C5E0   
|
:0041A8BA 55                      push ebp
:0041A8BB 8BEC                    mov ebp, esp
:0041A8BD 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F0, "255"
                                  |
:0041A8BF 68F0030000              push 000003F0
:0041A8C4 8B4508                  mov eax, dword ptr [ebp+08]
:0041A8C7 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A8C8 FF15AC864B00            Call dword ptr [004B86AC]
:0041A8CE 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A8CF FF15E4864B00            Call dword ptr [004B86E4]
:0041A8D5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F4, "255"
                                  |
:0041A8D7 68F4030000              push 000003F4
:0041A8DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A8DF 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A8E0 FF15AC864B00            Call dword ptr [004B86AC]
:0041A8E6 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A8E7 FF15E4864B00            Call dword ptr [004B86E4]
:0041A8ED 6A00                    push 00000000
:0041A8EF 68F6030000              push 000003F6
:0041A8F4 8B5508                  mov edx, dword ptr [ebp+08]
:0041A8F7 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A8F8 FF15AC864B00            Call dword ptr [004B86AC]
:0041A8FE 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A8FF FF15E4864B00            Call dword ptr [004B86E4]
:0041A905 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0041A907 68F9030000              push 000003F9
:0041A90C 8B4508                  mov eax, dword ptr [ebp+08]
:0041A90F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A910 FF15AC864B00            Call dword ptr [004B86AC]
:0041A916 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A917 FF15E4864B00            Call dword ptr [004B86E4]
:0041A91D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0041A91F 68FA030000              push 000003FA
:0041A924 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A927 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A928 FF15AC864B00            Call dword ptr [004B86AC]
:0041A92E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A92F FF15E4864B00            Call dword ptr [004B86E4]
:0041A935 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FB, "rubi"
                                  |
:0041A937 68FB030000              push 000003FB
:0041A93C 8B5508                  mov edx, dword ptr [ebp+08]
:0041A93F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A940 FF15AC864B00            Call dword ptr [004B86AC]
:0041A946 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A947 FF15E4864B00            Call dword ptr [004B86E4]
:0041A94D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:0041A94F 68FE030000              push 000003FE
:0041A954 8B4508                  mov eax, dword ptr [ebp+08]
:0041A957 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A958 FF15AC864B00            Call dword ptr [004B86AC]
:0041A95E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A95F FF15E4864B00            Call dword ptr [004B86E4]
:0041A965 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:0041A967 6801040000              push 00000401
:0041A96C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A96F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A970 FF15AC864B00            Call dword ptr [004B86AC]
:0041A976 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041A977 FF15E4864B00            Call dword ptr [004B86E4]
:0041A97D 5D                      pop ebp
:0041A97E C3                      ret



* Referenced by a CALL at Address:
|:00418B48   
|
:0041A97F 55                      push ebp
:0041A980 8BEC                    mov ebp, esp
:0041A982 51                      push ecx
:0041A983 8B4510                  mov eax, dword ptr [ebp+10]
:0041A986 8178043B040000          cmp dword ptr [eax+04], 0000043B
:0041A98D 751A                    jne 0041A9A9
:0041A98F 683E040000              push 0000043E
:0041A994 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A997 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A998 FF15AC864B00            Call dword ptr [004B86AC]
:0041A99E 50                      push eax
:0041A99F E8EDE7FFFF              call 00419191
:0041A9A4 83C404                  add esp, 00000004
:0041A9A7 EB18                    jmp 0041A9C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A98D(C)
|

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:0041A9A9 683B040000              push 0000043B
:0041A9AE 8B5508                  mov edx, dword ptr [ebp+08]
:0041A9B1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041A9B2 FF15AC864B00            Call dword ptr [004B86AC]
:0041A9B8 50                      push eax
:0041A9B9 E8D3E7FFFF              call 00419191
:0041A9BE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A9A7(U)
|
:0041A9C1 8B4510                  mov eax, dword ptr [ebp+10]
:0041A9C4 8B08                    mov ecx, dword ptr [eax]
:0041A9C6 51                      push ecx
:0041A9C7 E826CDFFFF              call 004176F2
:0041A9CC 83C404                  add esp, 00000004
:0041A9CF 8945FC                  mov dword ptr [ebp-04], eax
:0041A9D2 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041A9D6 7D0E                    jge 0041A9E6
:0041A9D8 8B5508                  mov edx, dword ptr [ebp+08]
:0041A9DB 52                      push edx
:0041A9DC E84BE7FFFF              call 0041912C
:0041A9E1 83C404                  add esp, 00000004
:0041A9E4 EB24                    jmp 0041AA0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A9D6(C)
|
:0041A9E6 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A9E9 50                      push eax
:0041A9EA 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041A9ED 8B11                    mov edx, dword ptr [ecx]
:0041A9EF 52                      push edx
:0041A9F0 E819000000              call 0041AA0E
:0041A9F5 83C408                  add esp, 00000008
:0041A9F8 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A9FB 50                      push eax
:0041A9FC 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041A9FF 8B11                    mov edx, dword ptr [ecx]
:0041AA01 52                      push edx
:0041AA02 E806C7FFFF              call 0041710D
:0041AA07 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A9E4(U)
|
:0041AA0A 8BE5                    mov esp, ebp
:0041AA0C 5D                      pop ebp
:0041AA0D C3                      ret



* Referenced by a CALL at Addresses:
|:0041A9F0   , :0041BF97   , :0041FAFA   
|
:0041AA0E 55                      push ebp
:0041AA0F 8BEC                    mov ebp, esp
:0041AA11 51                      push ecx
:0041AA12 8B450C                  mov eax, dword ptr [ebp+0C]
:0041AA15 50                      push eax
:0041AA16 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041AA19 51                      push ecx
:0041AA1A E857CCFFFF              call 00417676
:0041AA1F 83C408                  add esp, 00000008
:0041AA22 25FFFF0000              and eax, 0000FFFF
:0041AA27 8945FC                  mov dword ptr [ebp-04], eax
:0041AA2A 8B55FC                  mov edx, dword ptr [ebp-04]
:0041AA2D 52                      push edx
:0041AA2E E8BEB6FEFF              call 004060F1
:0041AA33 83C404                  add esp, 00000004
:0041AA36 8BE5                    mov esp, ebp
:0041AA38 5D                      pop ebp
:0041AA39 C3                      ret



* Referenced by a CALL at Address:
|:00418BD2   
|
:0041AA3A 55                      push ebp
:0041AA3B 8BEC                    mov ebp, esp
:0041AA3D 51                      push ecx
:0041AA3E 8B450C                  mov eax, dword ptr [ebp+0C]
:0041AA41 8178043B040000          cmp dword ptr [eax+04], 0000043B
:0041AA48 751A                    jne 0041AA64
:0041AA4A 683E040000              push 0000043E
:0041AA4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041AA52 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041AA53 FF15AC864B00            Call dword ptr [004B86AC]
:0041AA59 50                      push eax
:0041AA5A E832E7FFFF              call 00419191
:0041AA5F 83C404                  add esp, 00000004
:0041AA62 EB18                    jmp 0041AA7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AA48(C)
|

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:0041AA64 683B040000              push 0000043B
:0041AA69 8B5508                  mov edx, dword ptr [ebp+08]
:0041AA6C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041AA6D FF15AC864B00            Call dword ptr [004B86AC]
:0041AA73 50                      push eax
:0041AA74 E818E7FFFF              call 00419191
:0041AA79 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AA62(U)
|
:0041AA7C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041AA7F 8B08                    mov ecx, dword ptr [eax]
:0041AA81 51                      push ecx
:0041AA82 E86BCCFFFF              call 004176F2
:0041AA87 83C404                  add esp, 00000004
:0041AA8A 8945FC                  mov dword ptr [ebp-04], eax
:0041AA8D 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041AA91 7D0E                    jge 0041AAA1
:0041AA93 8B5508                  mov edx, dword ptr [ebp+08]
:0041AA96 52                      push edx
:0041AA97 E890E6FFFF              call 0041912C
:0041AA9C 83C404                  add esp, 00000004
:0041AA9F EB12                    jmp 0041AAB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AA91(C)
|
:0041AAA1 8B45FC                  mov eax, dword ptr [ebp-04]
:0041AAA4 50                      push eax
:0041AAA5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AAA8 8B11                    mov edx, dword ptr [ecx]
:0041AAAA 52                      push edx
:0041AAAB E85DC6FFFF              call 0041710D
:0041AAB0 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AA9F(U)
|
:0041AAB3 8BE5                    mov esp, ebp
:0041AAB5 5D                      pop ebp
:0041AAB6 C3                      ret



* Referenced by a CALL at Address:
|:00418C3D   
|
:0041AAB7 55                      push ebp
:0041AAB8 8BEC                    mov ebp, esp
:0041AABA 83EC14                  sub esp, 00000014
:0041AABD 53                      push ebx
:0041AABE 56                      push esi
:0041AABF 8B4508                  mov eax, dword ptr [ebp+08]
:0041AAC2 50                      push eax
:0041AAC3 E89FE5FFFF              call 00419067
:0041AAC8 83C404                  add esp, 00000004
:0041AACB 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AACE 6BC933                  imul ecx, 00000033
:0041AAD1 81C1C8EF4800            add ecx, 0048EFC8
:0041AAD7 E8B49BFEFF              call 00404690
:0041AADC 25FF000000              and eax, 000000FF
:0041AAE1 8945FC                  mov dword ptr [ebp-04], eax
:0041AAE4 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041AAE8 0F8718020000            ja 0041AD06
:0041AAEE 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AAF1 51                      push ecx
:0041AAF2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AAF5 6BC970                  imul ecx, 00000070
:0041AAF8 81C198224900            add ecx, 00492298
:0041AAFE E88A71FEFF              call 00401C8D
:0041AB03 85C0                    test eax, eax
:0041AB05 0F84C4010000            je 0041ACCF

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:0041AB0B 68A8744700              push 004774A8
:0041AB10 68A6040000              push 000004A6
:0041AB15 8B5508                  mov edx, dword ptr [ebp+08]
:0041AB18 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041AB19 FF15AC864B00            Call dword ptr [004B86AC]
:0041AB1F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041AB20 FF15B0864B00            Call dword ptr [004B86B0]
:0041AB26 68F4010000              push 000001F4
:0041AB2B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AB2E 6BC970                  imul ecx, 00000070
:0041AB31 81C198224900            add ecx, 00492298
:0041AB37 E8749BFEFF              call 004046B0
:0041AB3C 8AD8                    mov bl, al
:0041AB3E 81E3FF000000            and ebx, 000000FF
:0041AB44 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AB47 6BC933                  imul ecx, 00000033
:0041AB4A 81C1C8EF4800            add ecx, 0048EFC8
:0041AB50 E8DB540000              call 00420030
:0041AB55 25FF000000              and eax, 000000FF
:0041AB5A 03D8                    add ebx, eax
:0041AB5C 53                      push ebx
:0041AB5D 6A00                    push 00000000
:0041AB5F E8D8CBFFFF              call 0041773C
:0041AB64 83C40C                  add esp, 0000000C
:0041AB67 8945F4                  mov dword ptr [ebp-0C], eax
:0041AB6A 68F4010000              push 000001F4
:0041AB6F 8B450C                  mov eax, dword ptr [ebp+0C]
:0041AB72 50                      push eax
:0041AB73 E8E3CCFFFF              call 0041785B
:0041AB78 83C404                  add esp, 00000004
:0041AB7B 8BF0                    mov esi, eax
:0041AB7D 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AB80 6BC933                  imul ecx, 00000033
:0041AB83 81C1C8EF4800            add ecx, 0048EFC8
:0041AB89 E8629BFEFF              call 004046F0
:0041AB8E 25FF000000              and eax, 000000FF
:0041AB93 99                      cdq
:0041AB94 2BC2                    sub eax, edx
:0041AB96 D1F8                    sar eax, 1
:0041AB98 03F0                    add esi, eax
:0041AB9A 56                      push esi
:0041AB9B 6A00                    push 00000000
:0041AB9D E89ACBFFFF              call 0041773C
:0041ABA2 83C40C                  add esp, 0000000C
:0041ABA5 8945F0                  mov dword ptr [ebp-10], eax
:0041ABA8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041ABAB 51                      push ecx

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:0041ABAC 68B4744700              push 004774B4
:0041ABB1 6891040000              push 00000491
:0041ABB6 8B5508                  mov edx, dword ptr [ebp+08]
:0041ABB9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041ABBA FF15AC864B00            Call dword ptr [004B86AC]
:0041ABC0 50                      push eax
:0041ABC1 E8448C0400              call 0046380A
:0041ABC6 83C40C                  add esp, 0000000C
:0041ABC9 8B45F0                  mov eax, dword ptr [ebp-10]
:0041ABCC 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:0041ABCD 68C0744700              push 004774C0
:0041ABD2 688C040000              push 0000048C
:0041ABD7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041ABDA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041ABDB FF15AC864B00            Call dword ptr [004B86AC]
:0041ABE1 50                      push eax
:0041ABE2 E8238C0400              call 0046380A
:0041ABE7 83C40C                  add esp, 0000000C
:0041ABEA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041ABED 6BC970                  imul ecx, 00000070
:0041ABF0 81C198224900            add ecx, 00492298
:0041ABF6 E8C577FEFF              call 004023C0
:0041ABFB 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041ABFE 2BD0                    sub edx, eax
:0041AC00 52                      push edx
:0041AC01 6890040000              push 00000490
:0041AC06 8B4508                  mov eax, dword ptr [ebp+08]
:0041AC09 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041AC0A FF15AC864B00            Call dword ptr [004B86AC]
:0041AC10 50                      push eax
:0041AC11 E875CBFFFF              call 0041778B
:0041AC16 83C408                  add esp, 00000008
:0041AC19 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AC1C 6BC970                  imul ecx, 00000070
:0041AC1F 81C198224900            add ecx, 00492298
:0041AC25 E81A79FEFF              call 00402544
:0041AC2A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041AC2D 2BC8                    sub ecx, eax
:0041AC2F 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041AC30 68FC030000              push 000003FC
:0041AC35 8B5508                  mov edx, dword ptr [ebp+08]
:0041AC38 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041AC39 FF15AC864B00            Call dword ptr [004B86AC]
:0041AC3F 50                      push eax
:0041AC40 E846CBFFFF              call 0041778B
:0041AC45 83C408                  add esp, 00000008
:0041AC48 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041AC4C 757F                    jne 0041ACCD
:0041AC4E 68F4010000              push 000001F4
:0041AC53 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AC56 6BC970                  imul ecx, 00000070
:0041AC59 81C198224900            add ecx, 00492298
:0041AC5F E8AC530000              call 00420010
:0041AC64 8AD8                    mov bl, al
:0041AC66 81E3FF000000            and ebx, 000000FF
:0041AC6C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AC6F 6BC933                  imul ecx, 00000033
:0041AC72 81C1C8EF4800            add ecx, 0048EFC8
:0041AC78 E8F39AFEFF              call 00404770
:0041AC7D 25FF000000              and eax, 000000FF
:0041AC82 03D8                    add ebx, eax
:0041AC84 53                      push ebx
:0041AC85 6A00                    push 00000000
:0041AC87 E8B0CAFFFF              call 0041773C
:0041AC8C 83C40C                  add esp, 0000000C
:0041AC8F 8945F8                  mov dword ptr [ebp-08], eax
:0041AC92 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AC95 6BC970                  imul ecx, 00000070
:0041AC98 81C198224900            add ecx, 00492298
:0041AC9E E88377FEFF              call 00402426
:0041ACA3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041ACA6 2BC8                    sub ecx, eax
:0041ACA8 51                      push ecx
:0041ACA9 8B55F8                  mov edx, dword ptr [ebp-08]
:0041ACAC 52                      push edx
:0041ACAD 68A6040000              push 000004A6
:0041ACB2 688E040000              push 0000048E

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041ACB7 68D0744700              push 004774D0
:0041ACBC 6893040000              push 00000493
:0041ACC1 8B4508                  mov eax, dword ptr [ebp+08]
:0041ACC4 50                      push eax
:0041ACC5 E81BCBFFFF              call 004177E5
:0041ACCA 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AC4C(C)
|
:0041ACCD EB32                    jmp 0041AD01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AB05(C)
|
:0041ACCF 6A00                    push 00000000
:0041ACD1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041ACD4 51                      push ecx
:0041ACD5 8B5508                  mov edx, dword ptr [ebp+08]
:0041ACD8 52                      push edx
:0041ACD9 E84FE1FFFF              call 00418E2D
:0041ACDE 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Lk˳ƸӪZC"
                                  |
:0041ACE1 68DC744700              push 004774DC
:0041ACE6 68A6040000              push 000004A6
:0041ACEB 8B4508                  mov eax, dword ptr [ebp+08]
:0041ACEE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041ACEF FF15AC864B00            Call dword ptr [004B86AC]
:0041ACF5 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041ACF6 FF15B0864B00            Call dword ptr [004B86B0]
:0041ACFC E984030000              jmp 0041B085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ACCD(U)
|
:0041AD01 E97F030000              jmp 0041B085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AAE8(C)
|
:0041AD06 837DFC07                cmp dword ptr [ebp-04], 00000007
:0041AD0A 0F851D010000            jne 0041AE2D

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041AD10 68FF000000              push 000000FF
:0041AD15 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AD18 6BC970                  imul ecx, 00000070
:0041AD1B 81C198224900            add ecx, 00492298
:0041AD21 E82A530000              call 00420050
:0041AD26 8AD8                    mov bl, al
:0041AD28 81E3FF000000            and ebx, 000000FF
:0041AD2E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AD31 6BC933                  imul ecx, 00000033
:0041AD34 81C1C8EF4800            add ecx, 0048EFC8
:0041AD3A E8F199FEFF              call 00404730
:0041AD3F 25FF000000              and eax, 000000FF
:0041AD44 2BD8                    sub ebx, eax
:0041AD46 53                      push ebx
:0041AD47 6A00                    push 00000000
:0041AD49 E8EEC9FFFF              call 0041773C
:0041AD4E 83C40C                  add esp, 0000000C
:0041AD51 8945EC                  mov dword ptr [ebp-14], eax
:0041AD54 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041AD57 51                      push ecx

* Possible StringData Ref from Data Obj ->"ӱ      %3u"
                                  |
:0041AD58 68F0744700              push 004774F0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0041AD5D 6800040000              push 00000400
:0041AD62 8B5508                  mov edx, dword ptr [ebp+08]
:0041AD65 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041AD66 FF15AC864B00            Call dword ptr [004B86AC]
:0041AD6C 50                      push eax
:0041AD6D E8988A0400              call 0046380A
:0041AD72 83C40C                  add esp, 0000000C
:0041AD75 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AD78 6BC970                  imul ecx, 00000070
:0041AD7B 81C198224900            add ecx, 00492298
:0041AD81 E87678FEFF              call 004025FC
:0041AD86 25FF000000              and eax, 000000FF
:0041AD8B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041AD8E 2BC8                    sub ecx, eax
:0041AD90 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:0041AD91 68FE030000              push 000003FE
:0041AD96 8B5508                  mov edx, dword ptr [ebp+08]
:0041AD99 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041AD9A FF15AC864B00            Call dword ptr [004B86AC]
:0041ADA0 50                      push eax
:0041ADA1 E8E5C9FFFF              call 0041778B
:0041ADA6 83C408                  add esp, 00000008
:0041ADA9 68F4010000              push 000001F4
:0041ADAE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041ADB1 6BC970                  imul ecx, 00000070
:0041ADB4 81C198224900            add ecx, 00492298
:0041ADBA E831520000              call 0041FFF0
:0041ADBF 8AD8                    mov bl, al
:0041ADC1 81E3FF000000            and ebx, 000000FF
:0041ADC7 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041ADCA 6BC933                  imul ecx, 00000033
:0041ADCD 81C1C8EF4800            add ecx, 0048EFC8
:0041ADD3 E858520000              call 00420030
:0041ADD8 25FF000000              and eax, 000000FF
:0041ADDD 03D8                    add ebx, eax
:0041ADDF 53                      push ebx
:0041ADE0 6A00                    push 00000000
:0041ADE2 E855C9FFFF              call 0041773C
:0041ADE7 83C40C                  add esp, 0000000C
:0041ADEA 8945F8                  mov dword ptr [ebp-08], eax
:0041ADED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041ADF0 6BC970                  imul ecx, 00000070
:0041ADF3 81C198224900            add ecx, 00492298
:0041ADF9 E8F575FEFF              call 004023F3
:0041ADFE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041AE01 2BC8                    sub ecx, eax
:0041AE03 51                      push ecx
:0041AE04 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AE07 52                      push edx
:0041AE08 68A6040000              push 000004A6
:0041AE0D 688F040000              push 0000048F

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:0041AE12 6800754700              push 00477500
:0041AE17 6892040000              push 00000492
:0041AE1C 8B4508                  mov eax, dword ptr [ebp+08]
:0041AE1F 50                      push eax
:0041AE20 E8C0C9FFFF              call 004177E5
:0041AE25 83C41C                  add esp, 0000001C
:0041AE28 E958020000              jmp 0041B085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AD0A(C)
|
:0041AE2D 837DFC08                cmp dword ptr [ebp-04], 00000008
:0041AE31 0F8584000000            jne 0041AEBB
:0041AE37 68F4010000              push 000001F4
:0041AE3C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AE3F 6BC970                  imul ecx, 00000070
:0041AE42 81C198224900            add ecx, 00492298
:0041AE48 E8C3510000              call 00420010
:0041AE4D 8AD8                    mov bl, al
:0041AE4F 81E3FF000000            and ebx, 000000FF
:0041AE55 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AE58 6BC933                  imul ecx, 00000033
:0041AE5B 81C1C8EF4800            add ecx, 0048EFC8
:0041AE61 E8CA510000              call 00420030
:0041AE66 25FF000000              and eax, 000000FF
:0041AE6B 03D8                    add ebx, eax
:0041AE6D 53                      push ebx
:0041AE6E 6A00                    push 00000000
:0041AE70 E8C7C8FFFF              call 0041773C
:0041AE75 83C40C                  add esp, 0000000C
:0041AE78 8945F8                  mov dword ptr [ebp-08], eax
:0041AE7B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AE7E 6BC970                  imul ecx, 00000070
:0041AE81 81C198224900            add ecx, 00492298
:0041AE87 E89A75FEFF              call 00402426
:0041AE8C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041AE8F 2BC8                    sub ecx, eax
:0041AE91 51                      push ecx
:0041AE92 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AE95 52                      push edx
:0041AE96 68A6040000              push 000004A6
:0041AE9B 688E040000              push 0000048E

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041AEA0 680C754700              push 0047750C
:0041AEA5 6893040000              push 00000493
:0041AEAA 8B4508                  mov eax, dword ptr [ebp+08]
:0041AEAD 50                      push eax
:0041AEAE E832C9FFFF              call 004177E5
:0041AEB3 83C41C                  add esp, 0000001C
:0041AEB6 E9CA010000              jmp 0041B085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AE31(C)
|
:0041AEBB 837DFC09                cmp dword ptr [ebp-04], 00000009
:0041AEBF 0F8584000000            jne 0041AF49
:0041AEC5 68F4010000              push 000001F4
:0041AECA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AECD 6BC970                  imul ecx, 00000070
:0041AED0 81C198224900            add ecx, 00492298
:0041AED6 E855510000              call 00420030
:0041AEDB 8AD8                    mov bl, al
:0041AEDD 81E3FF000000            and ebx, 000000FF
:0041AEE3 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AEE6 6BC933                  imul ecx, 00000033
:0041AEE9 81C1C8EF4800            add ecx, 0048EFC8
:0041AEEF E83C510000              call 00420030
:0041AEF4 25FF000000              and eax, 000000FF
:0041AEF9 03D8                    add ebx, eax
:0041AEFB 53                      push ebx
:0041AEFC 6A00                    push 00000000
:0041AEFE E839C8FFFF              call 0041773C
:0041AF03 83C40C                  add esp, 0000000C
:0041AF06 8945F8                  mov dword ptr [ebp-08], eax
:0041AF09 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AF0C 6BC970                  imul ecx, 00000070
:0041AF0F 81C198224900            add ecx, 00492298
:0041AF15 E89375FEFF              call 004024AD
:0041AF1A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041AF1D 2BC8                    sub ecx, eax
:0041AF1F 51                      push ecx
:0041AF20 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AF23 52                      push edx
:0041AF24 68A6040000              push 000004A6
:0041AF29 688D040000              push 0000048D

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:0041AF2E 6818754700              push 00477518
:0041AF33 6894040000              push 00000494
:0041AF38 8B4508                  mov eax, dword ptr [ebp+08]
:0041AF3B 50                      push eax
:0041AF3C E8A4C8FFFF              call 004177E5
:0041AF41 83C41C                  add esp, 0000001C
:0041AF44 E93C010000              jmp 0041B085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AEBF(C)
|
:0041AF49 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0041AF4D 757E                    jne 0041AFCD
:0041AF4F 68E8030000              push 000003E8
:0041AF54 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AF57 6BC970                  imul ecx, 00000070
:0041AF5A 81C198224900            add ecx, 00492298
:0041AF60 E81B7F0300              call 00452E80
:0041AF65 8BF0                    mov esi, eax
:0041AF67 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AF6A 6BC933                  imul ecx, 00000033
:0041AF6D 81C1C8EF4800            add ecx, 0048EFC8
:0041AF73 E8B8500000              call 00420030
:0041AF78 25FF000000              and eax, 000000FF
:0041AF7D 03F0                    add esi, eax
:0041AF7F 56                      push esi
:0041AF80 6A00                    push 00000000
:0041AF82 E8B5C7FFFF              call 0041773C
:0041AF87 83C40C                  add esp, 0000000C
:0041AF8A 8945F8                  mov dword ptr [ebp-08], eax
:0041AF8D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AF90 6BC970                  imul ecx, 00000070
:0041AF93 81C198224900            add ecx, 00492298
:0041AF99 E84275FEFF              call 004024E0
:0041AF9E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041AFA1 2BC8                    sub ecx, eax
:0041AFA3 51                      push ecx
:0041AFA4 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AFA7 52                      push edx
:0041AFA8 68A6040000              push 000004A6
:0041AFAD 6888040000              push 00000488

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:0041AFB2 6824754700              push 00477524
:0041AFB7 688A040000              push 0000048A
:0041AFBC 8B4508                  mov eax, dword ptr [ebp+08]
:0041AFBF 50                      push eax
:0041AFC0 E820C8FFFF              call 004177E5
:0041AFC5 83C41C                  add esp, 0000001C
:0041AFC8 E9B8000000              jmp 0041B085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AF4D(C)
|
:0041AFCD 837DFC0B                cmp dword ptr [ebp-04], 0000000B
:0041AFD1 0F8581000000            jne 0041B058
:0041AFD7 68F4010000              push 000001F4
:0041AFDC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AFDF 6BC970                  imul ecx, 00000070
:0041AFE2 81C198224900            add ecx, 00492298
:0041AFE8 E80397FEFF              call 004046F0
:0041AFED 8AD8                    mov bl, al
:0041AFEF 81E3FF000000            and ebx, 000000FF
:0041AFF5 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041AFF8 6BC933                  imul ecx, 00000033
:0041AFFB 81C1C8EF4800            add ecx, 0048EFC8
:0041B001 E82A500000              call 00420030
:0041B006 25FF000000              and eax, 000000FF
:0041B00B 03D8                    add ebx, eax
:0041B00D 53                      push ebx
:0041B00E 6A00                    push 00000000
:0041B010 E827C7FFFF              call 0041773C
:0041B015 83C40C                  add esp, 0000000C
:0041B018 8945F8                  mov dword ptr [ebp-08], eax
:0041B01B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041B01E 6BC970                  imul ecx, 00000070
:0041B021 81C198224900            add ecx, 00492298
:0041B027 E8E574FEFF              call 00402511
:0041B02C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041B02F 2BC8                    sub ecx, eax
:0041B031 51                      push ecx
:0041B032 8B55F8                  mov edx, dword ptr [ebp-08]
:0041B035 52                      push edx
:0041B036 68A6040000              push 000004A6
:0041B03B 6889040000              push 00000489

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:0041B040 6834754700              push 00477534
:0041B045 688B040000              push 0000048B
:0041B04A 8B4508                  mov eax, dword ptr [ebp+08]
:0041B04D 50                      push eax
:0041B04E E892C7FFFF              call 004177E5
:0041B053 83C41C                  add esp, 0000001C
:0041B056 EB2D                    jmp 0041B085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AFD1(C)
|
:0041B058 6A00                    push 00000000
:0041B05A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041B05D 51                      push ecx
:0041B05E 8B5508                  mov edx, dword ptr [ebp+08]
:0041B061 52                      push edx
:0041B062 E8C6DDFFFF              call 00418E2D
:0041B067 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0041B06A 6844754700              push 00477544
:0041B06F 68A6040000              push 000004A6
:0041B074 8B4508                  mov eax, dword ptr [ebp+08]
:0041B077 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B078 FF15AC864B00            Call dword ptr [004B86AC]
:0041B07E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041B07F FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041ACFC(U), :0041AD01(U), :0041AE28(U), :0041AEB6(U), :0041AF44(U)
|:0041AFC8(U), :0041B056(U)
|
:0041B085 5E                      pop esi
:0041B086 5B                      pop ebx
:0041B087 8BE5                    mov esp, ebp
:0041B089 5D                      pop ebp
:0041B08A C3                      ret



* Referenced by a CALL at Addresses:
|:00418B12   , :0041B5B7   , :0041F878   
|
:0041B08B 55                      push ebp
:0041B08C 8BEC                    mov ebp, esp
:0041B08E 83EC74                  sub esp, 00000074
:0041B091 8B450C                  mov eax, dword ptr [ebp+0C]
:0041B094 8B08                    mov ecx, dword ptr [eax]
:0041B096 894DE4                  mov dword ptr [ebp-1C], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041B099 C745C802000000          mov [ebp-38], 00000002
:0041B0A0 C745C400000000          mov [ebp-3C], 00000000
:0041B0A7 8D55B8                  lea edx, dword ptr [ebp-48]
:0041B0AA 52                      push edx
:0041B0AB 8B450C                  mov eax, dword ptr [ebp+0C]
:0041B0AE 8B480C                  mov ecx, dword ptr [eax+0C]
:0041B0B1 51                      push ecx
:0041B0B2 682B100000              push 0000102B
:0041B0B7 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041B0BA 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041B0BB FF15D8864B00            Call dword ptr [004B86D8]
:0041B0C1 8D45F8                  lea eax, dword ptr [ebp-08]
:0041B0C4 50                      push eax
:0041B0C5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041B0C8 8B510C                  mov edx, dword ptr [ecx+0C]
:0041B0CB 52                      push edx
:0041B0CC 6821100000              push 00001021
:0041B0D1 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041B0D4 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041B0D5 FF15D8864B00            Call dword ptr [004B86D8]
:0041B0DB 8945E0                  mov dword ptr [ebp-20], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041B0DE C745A002000000          mov [ebp-60], 00000002

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041B0E5 C7459C02000000          mov [ebp-64], 00000002
:0041B0EC 8D4D90                  lea ecx, dword ptr [ebp-70]
:0041B0EF 51                      push ecx
:0041B0F0 8B550C                  mov edx, dword ptr [ebp+0C]
:0041B0F3 8B420C                  mov eax, dword ptr [edx+0C]
:0041B0F6 50                      push eax
:0041B0F7 682B100000              push 0000102B
:0041B0FC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041B0FF 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041B100 FF15D8864B00            Call dword ptr [004B86D8]
:0041B106 8D55E8                  lea edx, dword ptr [ebp-18]
:0041B109 85D2                    test edx, edx
:0041B10B 740F                    je 0041B11C
:0041B10D C745E801000000          mov [ebp-18], 00000001
:0041B114 8D45E8                  lea eax, dword ptr [ebp-18]
:0041B117 89458C                  mov dword ptr [ebp-74], eax
:0041B11A EB07                    jmp 0041B123

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B10B(C)
|
:0041B11C C7458C00000000          mov [ebp-74], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B11A(U)
|
:0041B123 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0041B126 51                      push ecx
:0041B127 8B550C                  mov edx, dword ptr [ebp+0C]
:0041B12A 8B420C                  mov eax, dword ptr [edx+0C]
:0041B12D 50                      push eax
:0041B12E 680E100000              push 0000100E
:0041B133 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041B136 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041B137 FF15D8864B00            Call dword ptr [004B86D8]
:0041B13D 8B5508                  mov edx, dword ptr [ebp+08]
:0041B140 52                      push edx

* Reference To: USER32.SetCapture, Ord:01E3h
                                  |
:0041B141 FF1548874B00            Call dword ptr [004B8748]
:0041B147 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041B14A 2B45EC                  sub eax, dword ptr [ebp-14]
:0041B14D 99                      cdq
:0041B14E 2BC2                    sub eax, edx
:0041B150 D1F8                    sar eax, 1
:0041B152 50                      push eax
:0041B153 8B45F0                  mov eax, dword ptr [ebp-10]
:0041B156 2B45E8                  sub eax, dword ptr [ebp-18]
:0041B159 99                      cdq
:0041B15A 2BC2                    sub eax, edx
:0041B15C D1F8                    sar eax, 1
:0041B15E 50                      push eax
:0041B15F 6A00                    push 00000000
:0041B161 8B45E0                  mov eax, dword ptr [ebp-20]
:0041B164 50                      push eax

* Reference To: COMCTL32.ImageList_BeginDrag, Ord:0014h
                                  |
:0041B165 FF1570844B00            Call dword ptr [004B8470]
:0041B16B 6A00                    push 00000000
:0041B16D 6A00                    push 00000000
:0041B16F 6A00                    push 00000000

* Reference To: COMCTL32.ImageList_DragEnter, Ord:0018h
                                  |
:0041B171 FF1554844B00            Call dword ptr [004B8454]
:0041B177 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041B17A 51                      push ecx

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:0041B17B FF155C844B00            Call dword ptr [004B845C]
:0041B181 B801000000              mov eax, 00000001
:0041B186 8BE5                    mov esp, ebp
:0041B188 5D                      pop ebp
:0041B189 C3                      ret


:0041B18A 55                      push ebp
:0041B18B 8BEC                    mov ebp, esp
:0041B18D 83EC50                  sub esp, 00000050
:0041B190 56                      push esi
:0041B191 57                      push edi
:0041B192 8B450C                  mov eax, dword ptr [ebp+0C]
:0041B195 8945B4                  mov dword ptr [ebp-4C], eax
:0041B198 837DB405                cmp dword ptr [ebp-4C], 00000005
:0041B19C 7719                    ja 0041B1B7
:0041B19E 837DB405                cmp dword ptr [ebp-4C], 00000005
:0041B1A2 0F84AA000000            je 0041B252
:0041B1A8 837DB402                cmp dword ptr [ebp-4C], 00000002
:0041B1AC 0F848A000000            je 0041B23C
:0041B1B2 E9DD050000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B19C(C)
|
:0041B1B7 837DB42B                cmp dword ptr [ebp-4C], 0000002B
:0041B1BB 771F                    ja 0041B1DC
:0041B1BD 837DB42B                cmp dword ptr [ebp-4C], 0000002B
:0041B1C1 0F8400020000            je 0041B3C7
:0041B1C7 837DB40F                cmp dword ptr [ebp-4C], 0000000F
:0041B1CB 0F84BB010000            je 0041B38C
:0041B1D1 837DB410                cmp dword ptr [ebp-4C], 00000010
:0041B1D5 746A                    je 0041B241
:0041B1D7 E9B8050000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1BB(C)
|
:0041B1DC 837DB44E                cmp dword ptr [ebp-4C], 0000004E
:0041B1E0 7719                    ja 0041B1FB
:0041B1E2 837DB44E                cmp dword ptr [ebp-4C], 0000004E
:0041B1E6 0F846D030000            je 0041B559
:0041B1EC 837DB42C                cmp dword ptr [ebp-4C], 0000002C
:0041B1F0 0F84AC010000            je 0041B3A2
:0041B1F6 E999050000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1E0(C)
|
:0041B1FB 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:0041B1FE 81E910010000            sub ecx, 00000110
:0041B204 894DB4                  mov dword ptr [ebp-4C], ecx
:0041B207 817DB4F2000000          cmp dword ptr [ebp-4C], 000000F2
:0041B20E 0F8780050000            ja 0041B794
:0041B214 8B45B4                  mov eax, dword ptr [ebp-4C]
:0041B217 33D2                    xor edx, edx
:0041B219 8A90B2B74100            mov dl, byte ptr [eax+0041B7B2]
:0041B21F FF24959EB74100          jmp dword ptr [4*edx+0041B79E]
:0041B226 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B229 51                      push ecx
:0041B22A E8FA060000              call 0041B929
:0041B22F 83C404                  add esp, 00000004
:0041B232 B801000000              mov eax, 00000001
:0041B237 E95A050000              jmp 0041B796

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1AC(C)
|
:0041B23C E953050000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1D5(C)
|
:0041B241 6A01                    push 00000001
:0041B243 8B5508                  mov edx, dword ptr [ebp+08]
:0041B246 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041B247 FF15B0874B00            Call dword ptr [004B87B0]
:0041B24D E942050000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1A2(C)
|
:0041B252 8B4514                  mov eax, dword ptr [ebp+14]
:0041B255 25FFFF0000              and eax, 0000FFFF
:0041B25A 8945FC                  mov dword ptr [ebp-04], eax
:0041B25D 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041B260 C1E910                  shr ecx, 10
:0041B263 81E1FFFF0000            and ecx, 0000FFFF
:0041B269 81E1FFFF0000            and ecx, 0000FFFF
:0041B26F 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0041B272 6A10                    push 00000010

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041B274 FF1578874B00            Call dword ptr [004B8778]
:0041B27A 3945FC                  cmp dword ptr [ebp-04], eax
:0041B27D 7E0B                    jle 0041B28A

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0041B27F 6A10                    push 00000010

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041B281 FF1578874B00            Call dword ptr [004B8778]
:0041B287 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B27D(C)
|

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0041B28A 6A11                    push 00000011

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041B28C FF1578874B00            Call dword ptr [004B8778]
:0041B292 3945F8                  cmp dword ptr [ebp-08], eax
:0041B295 7E0B                    jle 0041B2A2

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0041B297 6A11                    push 00000011

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041B299 FF1578874B00            Call dword ptr [004B8778]
:0041B29F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B295(C)
|
:0041B2A2 8B55F8                  mov edx, dword ptr [ebp-08]
:0041B2A5 52                      push edx
:0041B2A6 8B45FC                  mov eax, dword ptr [ebp-04]
:0041B2A9 50                      push eax
:0041B2AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B2AD 51                      push ecx
:0041B2AE E814080000              call 0041BAC7
:0041B2B3 83C40C                  add esp, 0000000C
:0041B2B6 E9D9040000              jmp 0041B794
:0041B2BB 833D4859480000          cmp dword ptr [00485948], 00000000
:0041B2C2 7422                    je 0041B2E6
:0041B2C4 8D55F0                  lea edx, dword ptr [ebp-10]
:0041B2C7 52                      push edx

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:0041B2C8 FF1560874B00            Call dword ptr [004B8760]
:0041B2CE 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041B2D1 50                      push eax
:0041B2D2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B2D5 51                      push ecx

* Reference To: COMCTL32.ImageList_DragMove, Ord:001Ah
                                  |
:0041B2D6 FF1560844B00            Call dword ptr [004B8460]
:0041B2DC B801000000              mov eax, 00000001
:0041B2E1 E9B0040000              jmp 0041B796

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B2C2(C)
|
:0041B2E6 E9A9040000              jmp 0041B794
:0041B2EB 833D4859480000          cmp dword ptr [00485948], 00000000
:0041B2F2 0F848F000000            je 0041B387
:0041B2F8 8B5514                  mov edx, dword ptr [ebp+14]
:0041B2FB 52                      push edx
:0041B2FC 83EC2C                  sub esp, 0000002C

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0041B2FF B90B000000              mov ecx, 0000000B
:0041B304 BEE8584800              mov esi, 004858E8
:0041B309 8BFC                    mov edi, esp
:0041B30B F3                      repz
:0041B30C A5                      movsd
:0041B30D A148594800              mov eax, dword ptr [00485948]
:0041B312 50                      push eax
:0041B313 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B316 51                      push ecx
:0041B317 E893080000              call 0041BBAF
:0041B31C 83C438                  add esp, 00000038
:0041B31F 85C0                    test eax, eax
:0041B321 7442                    je 0041B365

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041B323 68EA030000              push 000003EA
:0041B328 8B5508                  mov edx, dword ptr [ebp+08]
:0041B32B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B32C FF15AC864B00            Call dword ptr [004B86AC]
:0041B332 50                      push eax
:0041B333 E8BCCDFFFF              call 004180F4
:0041B338 83C404                  add esp, 00000004
:0041B33B 50                      push eax
:0041B33C E80FBC0400              call 00466F50
:0041B341 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041B344 68FC030000              push 000003FC
:0041B349 8B4508                  mov eax, dword ptr [ebp+08]
:0041B34C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B34D FF15AC864B00            Call dword ptr [004B86AC]
:0041B353 50                      push eax
:0041B354 E89BCDFFFF              call 004180F4
:0041B359 83C404                  add esp, 00000004
:0041B35C 50                      push eax
:0041B35D E8EEBB0400              call 00466F50
:0041B362 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B321(C)
|

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:0041B365 FF1564844B00            Call dword ptr [004B8464]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:0041B36B FF1554874B00            Call dword ptr [004B8754]
:0041B371 C7054859480000000000    mov dword ptr [00485948], 00000000
:0041B37B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B37E 51                      push ecx
:0041B37F E866EFFFFF              call 0041A2EA
:0041B384 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B2F2(C)
|
:0041B387 E908040000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1CB(C)
|
:0041B38C 6842010000              push 00000142
:0041B391 8B5508                  mov edx, dword ptr [ebp+08]
:0041B394 52                      push edx
:0041B395 E854FA0300              call 0045ADEE
:0041B39A 83C408                  add esp, 00000008
:0041B39D E9F2030000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1F0(C)
|
:0041B3A2 8B4514                  mov eax, dword ptr [ebp+14]
:0041B3A5 50                      push eax
:0041B3A6 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041B3A9 51                      push ecx
:0041B3AA 8B5508                  mov edx, dword ptr [ebp+08]
:0041B3AD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B3AE FF15AC864B00            Call dword ptr [004B86AC]
:0041B3B4 50                      push eax
:0041B3B5 E812D0FFFF              call 004183CC
:0041B3BA 83C408                  add esp, 00000008
:0041B3BD B801000000              mov eax, 00000001
:0041B3C2 E9CF030000              jmp 0041B796

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1C1(C)
|
:0041B3C7 8B4514                  mov eax, dword ptr [ebp+14]
:0041B3CA 8945EC                  mov dword ptr [ebp-14], eax
:0041B3CD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041B3D0 8B5104                  mov edx, dword ptr [ecx+04]
:0041B3D3 52                      push edx
:0041B3D4 8B4508                  mov eax, dword ptr [ebp+08]
:0041B3D7 50                      push eax
:0041B3D8 E8BF170000              call 0041CB9C
:0041B3DD 83C408                  add esp, 00000008
:0041B3E0 8945E8                  mov dword ptr [ebp-18], eax
:0041B3E3 817DE8FFFF0000          cmp dword ptr [ebp-18], 0000FFFF
:0041B3EA 7310                    jnb 0041B3FC
:0041B3EC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041B3EF 51                      push ecx
:0041B3F0 8B55E8                  mov edx, dword ptr [ebp-18]
:0041B3F3 52                      push edx
:0041B3F4 E8FECFFFFF              call 004183F7
:0041B3F9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B3EA(C)
|
:0041B3FC E993030000              jmp 0041B794
:0041B401 833D4859480000          cmp dword ptr [00485948], 00000000
:0041B408 741B                    je 0041B425

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:0041B40A FF1564844B00            Call dword ptr [004B8464]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:0041B410 FF1554874B00            Call dword ptr [004B8754]
:0041B416 C7054859480000000000    mov dword ptr [00485948], 00000000
:0041B420 E92F010000              jmp 0041B554

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B408(C)
|
:0041B425 8B4514                  mov eax, dword ptr [ebp+14]
:0041B428 8945E4                  mov dword ptr [ebp-1C], eax
:0041B42B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041B42E 81E1FFFF0000            and ecx, 0000FFFF
:0041B434 81F9EA030000            cmp ecx, 000003EA
:0041B43A 0F8585000000            jne 0041B4C5
:0041B440 8B5510                  mov edx, dword ptr [ebp+10]
:0041B443 C1EA10                  shr edx, 10
:0041B446 81E2FFFF0000            and edx, 0000FFFF
:0041B44C 81E2FFFF0000            and edx, 0000FFFF
:0041B452 83FA09                  cmp edx, 00000009
:0041B455 756E                    jne 0041B4C5

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041B457 68FC030000              push 000003FC
:0041B45C 8B4508                  mov eax, dword ptr [ebp+08]
:0041B45F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B460 FF15AC864B00            Call dword ptr [004B86AC]
:0041B466 8945DC                  mov dword ptr [ebp-24], eax
:0041B469 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041B46C 51                      push ecx
:0041B46D 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041B470 52                      push edx
:0041B471 E8FA060000              call 0041BB70
:0041B476 83C408                  add esp, 00000008
:0041B479 8945E0                  mov dword ptr [ebp-20], eax
:0041B47C 8B45E0                  mov eax, dword ptr [ebp-20]
:0041B47F 50                      push eax
:0041B480 6835040000              push 00000435
:0041B485 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B488 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B489 FF15AC864B00            Call dword ptr [004B86AC]
:0041B48F 50                      push eax
:0041B490 E8DCBDFFFF              call 00417271
:0041B495 83C408                  add esp, 00000008
:0041B498 8B55E0                  mov edx, dword ptr [ebp-20]
:0041B49B 52                      push edx
:0041B49C 685F040000              push 0000045F
:0041B4A1 8B4508                  mov eax, dword ptr [ebp+08]
:0041B4A4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B4A5 FF15AC864B00            Call dword ptr [004B86AC]
:0041B4AB 50                      push eax
:0041B4AC E8CDC0FFFF              call 0041757E
:0041B4B1 83C408                  add esp, 00000008
:0041B4B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B4B7 51                      push ecx
:0041B4B8 E82DEEFFFF              call 0041A2EA
:0041B4BD 83C404                  add esp, 00000004
:0041B4C0 E98F000000              jmp 0041B554

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B43A(C), :0041B455(C)
|
:0041B4C5 8B5510                  mov edx, dword ptr [ebp+10]
:0041B4C8 81E2FFFF0000            and edx, 0000FFFF
:0041B4CE 81FAFC030000            cmp edx, 000003FC
:0041B4D4 757E                    jne 0041B554
:0041B4D6 8B4510                  mov eax, dword ptr [ebp+10]
:0041B4D9 C1E810                  shr eax, 10
:0041B4DC 25FFFF0000              and eax, 0000FFFF
:0041B4E1 25FFFF0000              and eax, 0000FFFF
:0041B4E6 83F809                  cmp eax, 00000009
:0041B4E9 7569                    jne 0041B554

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041B4EB 68EA030000              push 000003EA
:0041B4F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B4F3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B4F4 FF15AC864B00            Call dword ptr [004B86AC]
:0041B4FA 8945DC                  mov dword ptr [ebp-24], eax
:0041B4FD 8B55DC                  mov edx, dword ptr [ebp-24]
:0041B500 52                      push edx
:0041B501 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041B504 50                      push eax
:0041B505 E866060000              call 0041BB70
:0041B50A 83C408                  add esp, 00000008
:0041B50D 8945E0                  mov dword ptr [ebp-20], eax
:0041B510 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041B513 51                      push ecx
:0041B514 6836040000              push 00000436
:0041B519 8B5508                  mov edx, dword ptr [ebp+08]
:0041B51C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B51D FF15AC864B00            Call dword ptr [004B86AC]
:0041B523 50                      push eax
:0041B524 E848BDFFFF              call 00417271
:0041B529 83C408                  add esp, 00000008
:0041B52C 8B45E0                  mov eax, dword ptr [ebp-20]
:0041B52F 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:0041B530 68FF030000              push 000003FF
:0041B535 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B538 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B539 FF15AC864B00            Call dword ptr [004B86AC]
:0041B53F 50                      push eax
:0041B540 E839C0FFFF              call 0041757E
:0041B545 83C408                  add esp, 00000008
:0041B548 8B5508                  mov edx, dword ptr [ebp+08]
:0041B54B 52                      push edx
:0041B54C E899EDFFFF              call 0041A2EA
:0041B551 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B420(U), :0041B4C0(U), :0041B4D4(C), :0041B4E9(C)
|
:0041B554 E93B020000              jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1E6(C)
|
:0041B559 8B4514                  mov eax, dword ptr [ebp+14]
:0041B55C 8945D8                  mov dword ptr [ebp-28], eax
:0041B55F 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0041B562 8B5108                  mov edx, dword ptr [ecx+08]
:0041B565 8955B0                  mov dword ptr [ebp-50], edx
:0041B568 8B45B0                  mov eax, dword ptr [ebp-50]
:0041B56B 83C06D                  add eax, 0000006D
:0041B56E 8945B0                  mov dword ptr [ebp-50], eax
:0041B571 837DB06B                cmp dword ptr [ebp-50], 0000006B
:0041B575 0F87DC010000            ja 0041B757
:0041B57B 8B55B0                  mov edx, dword ptr [ebp-50]
:0041B57E 33C9                    xor ecx, ecx
:0041B580 8A8ABDB84100            mov cl, byte ptr [edx+0041B8BD]
:0041B586 FF248DA5B84100          jmp dword ptr [4*ecx+0041B8A5]
:0041B58D 817D1035040000          cmp dword ptr [ebp+10], 00000435
:0041B594 7409                    je 0041B59F
:0041B596 817D1036040000          cmp dword ptr [ebp+10], 00000436
:0041B59D 7525                    jne 0041B5C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B594(C)
|
:0041B59F 8B7514                  mov esi, dword ptr [ebp+14]

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0041B5A2 B90B000000              mov ecx, 0000000B
:0041B5A7 BFE8584800              mov edi, 004858E8
:0041B5AC F3                      repz
:0041B5AD A5                      movsd
:0041B5AE 68E8584800              push 004858E8
:0041B5B3 8B4508                  mov eax, dword ptr [ebp+08]
:0041B5B6 50                      push eax
:0041B5B7 E8CFFAFFFF              call 0041B08B
:0041B5BC 83C408                  add esp, 00000008
:0041B5BF A348594800              mov dword ptr [00485948], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B59D(C)
|
:0041B5C4 E9CB010000              jmp 0041B794
:0041B5C9 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0041B5CC 81790435040000          cmp dword ptr [ecx+04], 00000435
:0041B5D3 740C                    je 0041B5E1
:0041B5D5 8B55D8                  mov edx, dword ptr [ebp-28]
:0041B5D8 817A0436040000          cmp dword ptr [edx+04], 00000436
:0041B5DF 7514                    jne 0041B5F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B5D3(C)
|
:0041B5E1 8B45D8                  mov eax, dword ptr [ebp-28]
:0041B5E4 50                      push eax
:0041B5E5 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041B5E8 51                      push ecx
:0041B5E9 8B5508                  mov edx, dword ptr [ebp+08]
:0041B5EC 52                      push edx
:0041B5ED E834090000              call 0041BF26
:0041B5F2 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B5DF(C)
|
:0041B5F5 E99A010000              jmp 0041B794
:0041B5FA C745D4FFFF0000          mov [ebp-2C], 0000FFFF
:0041B601 8B45D8                  mov eax, dword ptr [ebp-28]
:0041B604 81780435040000          cmp dword ptr [eax+04], 00000435
:0041B60B 7526                    jne 0041B633

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041B60D 68EA030000              push 000003EA
:0041B612 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B615 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B616 FF15AC864B00            Call dword ptr [004B86AC]
:0041B61C 8945D0                  mov dword ptr [ebp-30], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041B61F 68FC030000              push 000003FC
:0041B624 8B5508                  mov edx, dword ptr [ebp+08]
:0041B627 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B628 FF15AC864B00            Call dword ptr [004B86AC]
:0041B62E 8945CC                  mov dword ptr [ebp-34], eax
:0041B631 EB24                    jmp 0041B657

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B60B(C)
|

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041B633 68FC030000              push 000003FC
:0041B638 8B4508                  mov eax, dword ptr [ebp+08]
:0041B63B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B63C FF15AC864B00            Call dword ptr [004B86AC]
:0041B642 8945D0                  mov dword ptr [ebp-30], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041B645 68EA030000              push 000003EA
:0041B64A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B64D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B64E FF15AC864B00            Call dword ptr [004B86AC]
:0041B654 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B631(U)
|
:0041B657 8B55D0                  mov edx, dword ptr [ebp-30]
:0041B65A 52                      push edx
:0041B65B E894CAFFFF              call 004180F4
:0041B660 83C404                  add esp, 00000004
:0041B663 8945D4                  mov dword ptr [ebp-2C], eax
:0041B666 817DD4FFFF0000          cmp dword ptr [ebp-2C], 0000FFFF
:0041B66D 7326                    jnb 0041B695
:0041B66F 6A01                    push 00000001
:0041B671 8B45D8                  mov eax, dword ptr [ebp-28]
:0041B674 50                      push eax
:0041B675 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0041B678 51                      push ecx
:0041B679 8B5508                  mov edx, dword ptr [ebp+08]
:0041B67C 52                      push edx
:0041B67D E890EBFFFF              call 0041A212
:0041B682 83C410                  add esp, 00000010
:0041B685 8B45D0                  mov eax, dword ptr [ebp-30]
:0041B688 50                      push eax
:0041B689 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0041B68C 51                      push ecx
:0041B68D E8DE040000              call 0041BB70
:0041B692 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B66D(C)
|
:0041B695 E9FA000000              jmp 0041B794
:0041B69A 8B55D8                  mov edx, dword ptr [ebp-28]
:0041B69D 817A0435040000          cmp dword ptr [edx+04], 00000435
:0041B6A4 740C                    je 0041B6B2
:0041B6A6 8B45D8                  mov eax, dword ptr [ebp-28]
:0041B6A9 81780436040000          cmp dword ptr [eax+04], 00000436
:0041B6B0 7510                    jne 0041B6C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B6A4(C)
|
:0041B6B2 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0041B6B5 51                      push ecx
:0041B6B6 8B5508                  mov edx, dword ptr [ebp+08]
:0041B6B9 52                      push edx
:0041B6BA E8E4080000              call 0041BFA3
:0041B6BF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B6B0(C)
|
:0041B6C2 E9CD000000              jmp 0041B794
:0041B6C7 8B4514                  mov eax, dword ptr [ebp+14]
:0041B6CA 8945C8                  mov dword ptr [ebp-38], eax
:0041B6CD 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0041B6D0 8B5114                  mov edx, dword ptr [ecx+14]
:0041B6D3 83E202                  and edx, 00000002
:0041B6D6 85D2                    test edx, edx
:0041B6D8 747B                    je 0041B755

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041B6DA 68EA030000              push 000003EA
:0041B6DF 8B4508                  mov eax, dword ptr [ebp+08]
:0041B6E2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B6E3 FF15AC864B00            Call dword ptr [004B86AC]
:0041B6E9 50                      push eax
:0041B6EA E805CAFFFF              call 004180F4
:0041B6EF 83C404                  add esp, 00000004
:0041B6F2 8945C0                  mov dword ptr [ebp-40], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041B6F5 68FC030000              push 000003FC
:0041B6FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B6FD 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B6FE FF15AC864B00            Call dword ptr [004B86AC]
:0041B704 50                      push eax
:0041B705 E8EAC9FFFF              call 004180F4
:0041B70A 83C404                  add esp, 00000004
:0041B70D 8945BC                  mov dword ptr [ebp-44], eax
:0041B710 8B55C8                  mov edx, dword ptr [ebp-38]
:0041B713 8B420C                  mov eax, dword ptr [edx+0C]
:0041B716 50                      push eax
:0041B717 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0041B71A 8B11                    mov edx, dword ptr [ecx]
:0041B71C 52                      push edx
:0041B71D E854BFFFFF              call 00417676
:0041B722 83C408                  add esp, 00000008
:0041B725 25FFFF0000              and eax, 0000FFFF
:0041B72A 8945C4                  mov dword ptr [ebp-3C], eax
:0041B72D 8B45C4                  mov eax, dword ptr [ebp-3C]
:0041B730 50                      push eax
:0041B731 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0041B734 51                      push ecx
:0041B735 8B5508                  mov edx, dword ptr [ebp+08]
:0041B738 52                      push edx
:0041B739 E8CE080000              call 0041C00C
:0041B73E 83C40C                  add esp, 0000000C
:0041B741 8B45C4                  mov eax, dword ptr [ebp-3C]
:0041B744 50                      push eax
:0041B745 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0041B748 51                      push ecx
:0041B749 8B5508                  mov edx, dword ptr [ebp+08]
:0041B74C 52                      push edx
:0041B74D E8820E0000              call 0041C5D4
:0041B752 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B6D8(C)
|
:0041B755 EB3D                    jmp 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B575(C)
|
:0041B757 817D1035040000          cmp dword ptr [ebp+10], 00000435
:0041B75E 7409                    je 0041B769
:0041B760 817D1036040000          cmp dword ptr [ebp+10], 00000436
:0041B767 752B                    jne 0041B794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B75E(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041B769 6A02                    push 00000002
:0041B76B B9C8E24A00              mov ecx, 004AE2C8
:0041B770 E82B480000              call 0041FFA0
:0041B775 8945B8                  mov dword ptr [ebp-48], eax
:0041B778 8B45B8                  mov eax, dword ptr [ebp-48]
:0041B77B 50                      push eax
:0041B77C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041B77F 51                      push ecx
:0041B780 8B5510                  mov edx, dword ptr [ebp+10]
:0041B783 52                      push edx
:0041B784 8B450C                  mov eax, dword ptr [ebp+0C]
:0041B787 50                      push eax
:0041B788 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B78B 51                      push ecx
:0041B78C E85CC1FFFF              call 004178ED
:0041B791 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B1B2(U), :0041B1D7(U), :0041B1F6(U), :0041B20E(C), :0041B23C(U)
|:0041B24D(U), :0041B2B6(U), :0041B2E6(U), :0041B387(U), :0041B39D(U)
|:0041B3FC(U), :0041B554(U), :0041B5C4(U), :0041B5F5(U), :0041B695(U)
|:0041B6C2(U), :0041B755(U), :0041B767(C)
|
:0041B794 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B237(U), :0041B2E1(U), :0041B3C2(U)
|
:0041B796 5F                      pop edi
:0041B797 5E                      pop esi
:0041B798 8BE5                    mov esp, ebp
:0041B79A 5D                      pop ebp
:0041B79B C21000                  ret 0010



:0041B79E 26B24100                DWORD 0041B226
:0041B7A2 01B44100                DWORD 0041B401
:0041B7A6 BBB24100                DWORD 0041B2BB
:0041B7AA EBB24100                DWORD 0041B2EB
:0041B7AE 94B74100                DWORD 0041B794


:0041B7B2 0001                    add byte ptr [ecx], al
:0041B7B4 0404                    add al, 04
:0041B7B6 0404                    add al, 04
:0041B7B8 0404                    add al, 04
:0041B7BA 0404                    add al, 04
:0041B7BC 0404                    add al, 04
:0041B7BE 0404                    add al, 04
:0041B7C0 0404                    add al, 04
:0041B7C2 0404                    add al, 04
:0041B7C4 0404                    add al, 04
:0041B7C6 0404                    add al, 04
:0041B7C8 0404                    add al, 04
:0041B7CA 0404                    add al, 04
:0041B7CC 0404                    add al, 04
:0041B7CE 0404                    add al, 04
:0041B7D0 0404                    add al, 04
:0041B7D2 0404                    add al, 04
:0041B7D4 0404                    add al, 04
:0041B7D6 0404                    add al, 04
:0041B7D8 0404                    add al, 04
:0041B7DA 0404                    add al, 04
:0041B7DC 0404                    add al, 04
:0041B7DE 0404                    add al, 04
:0041B7E0 0404                    add al, 04
:0041B7E2 0404                    add al, 04
:0041B7E4 0404                    add al, 04
:0041B7E6 0404                    add al, 04
:0041B7E8 0404                    add al, 04
:0041B7EA 0404                    add al, 04
:0041B7EC 0404                    add al, 04
:0041B7EE 0404                    add al, 04
:0041B7F0 0404                    add al, 04
:0041B7F2 0404                    add al, 04
:0041B7F4 0404                    add al, 04
:0041B7F6 0404                    add al, 04
:0041B7F8 0404                    add al, 04
:0041B7FA 0404                    add al, 04
:0041B7FC 0404                    add al, 04
:0041B7FE 0404                    add al, 04
:0041B800 0404                    add al, 04
:0041B802 0404                    add al, 04
:0041B804 0404                    add al, 04
:0041B806 0404                    add al, 04
:0041B808 0404                    add al, 04
:0041B80A 0404                    add al, 04
:0041B80C 0404                    add al, 04
:0041B80E 0404                    add al, 04
:0041B810 0404                    add al, 04
:0041B812 0404                    add al, 04
:0041B814 0404                    add al, 04
:0041B816 0404                    add al, 04
:0041B818 0404                    add al, 04
:0041B81A 0404                    add al, 04
:0041B81C 0404                    add al, 04
:0041B81E 0404                    add al, 04
:0041B820 0404                    add al, 04
:0041B822 0404                    add al, 04
:0041B824 0404                    add al, 04
:0041B826 0404                    add al, 04
:0041B828 0404                    add al, 04
:0041B82A 0404                    add al, 04
:0041B82C 0404                    add al, 04
:0041B82E 0404                    add al, 04
:0041B830 0404                    add al, 04
:0041B832 0404                    add al, 04
:0041B834 0404                    add al, 04
:0041B836 0404                    add al, 04
:0041B838 0404                    add al, 04
:0041B83A 0404                    add al, 04
:0041B83C 0404                    add al, 04
:0041B83E 0404                    add al, 04
:0041B840 0404                    add al, 04
:0041B842 0404                    add al, 04
:0041B844 0404                    add al, 04
:0041B846 0404                    add al, 04
:0041B848 0404                    add al, 04
:0041B84A 0404                    add al, 04
:0041B84C 0404                    add al, 04
:0041B84E 0404                    add al, 04
:0041B850 0404                    add al, 04
:0041B852 0404                    add al, 04
:0041B854 0404                    add al, 04
:0041B856 0404                    add al, 04
:0041B858 0404                    add al, 04
:0041B85A 0404                    add al, 04
:0041B85C 0404                    add al, 04
:0041B85E 0404                    add al, 04
:0041B860 0404                    add al, 04
:0041B862 0404                    add al, 04
:0041B864 0404                    add al, 04
:0041B866 0404                    add al, 04
:0041B868 0404                    add al, 04
:0041B86A 0404                    add al, 04
:0041B86C 0404                    add al, 04
:0041B86E 0404                    add al, 04
:0041B870 0404                    add al, 04
:0041B872 0404                    add al, 04
:0041B874 0404                    add al, 04
:0041B876 0404                    add al, 04
:0041B878 0404                    add al, 04
:0041B87A 0404                    add al, 04
:0041B87C 0404                    add al, 04
:0041B87E 0404                    add al, 04
:0041B880 0404                    add al, 04
:0041B882 0404                    add al, 04
:0041B884 0404                    add al, 04
:0041B886 0404                    add al, 04
:0041B888 0404                    add al, 04
:0041B88A 0404                    add al, 04
:0041B88C 0404                    add al, 04
:0041B88E 0404                    add al, 04
:0041B890 0404                    add al, 04
:0041B892 0404                    add al, 04
:0041B894 0404                    add al, 04
:0041B896 0404                    add al, 04
:0041B898 0404                    add al, 04
:0041B89A 0404                    add al, 04
:0041B89C 0404                    add al, 04
:0041B89E 0404                    add al, 04
:0041B8A0 0404                    add al, 04
:0041B8A2 020403                  add al, byte ptr [ebx+eax]

:0041B8A5 8DB54100                DWORD 0041B58D
:0041B8A9 C7B64100                DWORD 0041B6C7
:0041B8AD C9B54100                DWORD 0041B5C9
:0041B8B1 FAB54100                DWORD 0041B5FA
:0041B8B5 9AB64100                DWORD 0041B69A
:0041B8B9 57B74100                DWORD 0041B757


:0041B8BD 000505050505            add byte ptr [05050505], al
:0041B8C3 0505010505              add eax, 05050105
:0041B8C8 0505050505              add eax, 05050505
:0041B8CD 0505050505              add eax, 05050505
:0041B8D2 0505050505              add eax, 05050505
:0041B8D7 0505050505              add eax, 05050505
:0041B8DC 0505050505              add eax, 05050505
:0041B8E1 0505050505              add eax, 05050505
:0041B8E6 0505050505              add eax, 05050505
:0041B8EB 0505050505              add eax, 05050505
:0041B8F0 0505050505              add eax, 05050505
:0041B8F5 0505050505              add eax, 05050505
:0041B8FA 0505050505              add eax, 05050505
:0041B8FF 0505050505              add eax, 05050505
:0041B904 0505050505              add eax, 05050505
:0041B909 0505050505              add eax, 05050505
:0041B90E 0505050505              add eax, 05050505
:0041B913 0505050505              add eax, 05050505
:0041B918 0505050505              add eax, 05050505
:0041B91D 0505050505              add eax, 05050505
:0041B922 0505050205              add eax, 05020505
:0041B927 03                      BYTE 03h
:0041B928 04                      BYTE 04h


* Referenced by a CALL at Address:
|:0041B22A   
|
:0041B929 55                      push ebp
:0041B92A 8BEC                    mov ebp, esp
:0041B92C 83EC18                  sub esp, 00000018

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041B92F 6A02                    push 00000002
:0041B931 B9C8E24A00              mov ecx, 004AE2C8
:0041B936 E865460000              call 0041FFA0
:0041B93B 85C0                    test eax, eax
:0041B93D 7436                    je 0041B975
:0041B93F 6A00                    push 00000000
:0041B941 6835040000              push 00000435
:0041B946 8B4508                  mov eax, dword ptr [ebp+08]
:0041B949 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B94A FF15AC864B00            Call dword ptr [004B86AC]
:0041B950 50                      push eax
:0041B951 E8E6B7FFFF              call 0041713C
:0041B956 83C408                  add esp, 00000008
:0041B959 6A00                    push 00000000
:0041B95B 6836040000              push 00000436
:0041B960 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B963 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B964 FF15AC864B00            Call dword ptr [004B86AC]
:0041B96A 50                      push eax
:0041B96B E8CCB7FFFF              call 0041713C
:0041B970 83C408                  add esp, 00000008
:0041B973 EB34                    jmp 0041B9A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B93D(C)
|
:0041B975 6A01                    push 00000001
:0041B977 6835040000              push 00000435
:0041B97C 8B5508                  mov edx, dword ptr [ebp+08]
:0041B97F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B980 FF15AC864B00            Call dword ptr [004B86AC]
:0041B986 50                      push eax
:0041B987 E8B0B7FFFF              call 0041713C
:0041B98C 83C408                  add esp, 00000008
:0041B98F 6A01                    push 00000001
:0041B991 6836040000              push 00000436
:0041B996 8B4508                  mov eax, dword ptr [ebp+08]
:0041B999 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B99A FF15AC864B00            Call dword ptr [004B86AC]
:0041B9A0 50                      push eax
:0041B9A1 E896B7FFFF              call 0041713C
:0041B9A6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B973(U)
|

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041B9A9 68EA030000              push 000003EA
:0041B9AE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B9B1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B9B2 FF15AC864B00            Call dword ptr [004B86AC]
:0041B9B8 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041B9BB 68FC030000              push 000003FC
:0041B9C0 8B5508                  mov edx, dword ptr [ebp+08]
:0041B9C3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041B9C4 FF15AC864B00            Call dword ptr [004B86AC]
:0041B9CA 8945F0                  mov dword ptr [ebp-10], eax
:0041B9CD 6A00                    push 00000000
:0041B9CF 6885020000              push 00000285
:0041B9D4 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041B9D7 50                      push eax
:0041B9D8 E857BAFFFF              call 00417434
:0041B9DD 83C40C                  add esp, 0000000C
:0041B9E0 8945E8                  mov dword ptr [ebp-18], eax
:0041B9E3 6A00                    push 00000000
:0041B9E5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041B9E8 51                      push ecx
:0041B9E9 8B55F0                  mov edx, dword ptr [ebp-10]
:0041B9EC 52                      push edx
:0041B9ED E842BAFFFF              call 00417434
:0041B9F2 83C40C                  add esp, 0000000C
:0041B9F5 8945EC                  mov dword ptr [ebp-14], eax
:0041B9F8 6A00                    push 00000000
:0041B9FA 8B45EC                  mov eax, dword ptr [ebp-14]
:0041B9FD 50                      push eax
:0041B9FE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BA01 51                      push ecx
:0041BA02 E82DBAFFFF              call 00417434
:0041BA07 83C40C                  add esp, 0000000C
:0041BA0A 8945E8                  mov dword ptr [ebp-18], eax
:0041BA0D B910584800              mov ecx, 00485810
:0041BA12 E889740300              call 00452EA0
:0041BA17 8945F8                  mov dword ptr [ebp-08], eax
:0041BA1A B910584800              mov ecx, 00485810
:0041BA1F E86CADFFFF              call 00416790
:0041BA24 8945FC                  mov dword ptr [ebp-04], eax
:0041BA27 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BA2A 52                      push edx
:0041BA2B 8B45F8                  mov eax, dword ptr [ebp-08]
:0041BA2E 50                      push eax
:0041BA2F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041BA32 51                      push ecx
:0041BA33 6835040000              push 00000435
:0041BA38 8B5508                  mov edx, dword ptr [ebp+08]
:0041BA3B 52                      push edx
:0041BA3C E8BED9FFFF              call 004193FF
:0041BA41 83C414                  add esp, 00000014
:0041BA44 8B45E8                  mov eax, dword ptr [ebp-18]
:0041BA47 50                      push eax
:0041BA48 685F040000              push 0000045F
:0041BA4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BA50 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BA51 FF15AC864B00            Call dword ptr [004B86AC]
:0041BA57 50                      push eax
:0041BA58 E821BBFFFF              call 0041757E
:0041BA5D 83C408                  add esp, 00000008
:0041BA60 6A01                    push 00000001
:0041BA62 8B55E8                  mov edx, dword ptr [ebp-18]
:0041BA65 52                      push edx
:0041BA66 8B4508                  mov eax, dword ptr [ebp+08]
:0041BA69 50                      push eax
:0041BA6A E80FE9FFFF              call 0041A37E
:0041BA6F 83C40C                  add esp, 0000000C
:0041BA72 837DEC19                cmp dword ptr [ebp-14], 00000019
:0041BA76 734B                    jnb 0041BAC3
:0041BA78 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BA7B 51                      push ecx
:0041BA7C 8B55F8                  mov edx, dword ptr [ebp-08]
:0041BA7F 52                      push edx
:0041BA80 8B45EC                  mov eax, dword ptr [ebp-14]
:0041BA83 50                      push eax
:0041BA84 6836040000              push 00000436
:0041BA89 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BA8C 51                      push ecx
:0041BA8D E86DD9FFFF              call 004193FF
:0041BA92 83C414                  add esp, 00000014
:0041BA95 8B55EC                  mov edx, dword ptr [ebp-14]
:0041BA98 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:0041BA99 68FF030000              push 000003FF
:0041BA9E 8B4508                  mov eax, dword ptr [ebp+08]
:0041BAA1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BAA2 FF15AC864B00            Call dword ptr [004B86AC]
:0041BAA8 50                      push eax
:0041BAA9 E8D0BAFFFF              call 0041757E
:0041BAAE 83C408                  add esp, 00000008
:0041BAB1 6A01                    push 00000001
:0041BAB3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041BAB6 51                      push ecx
:0041BAB7 8B5508                  mov edx, dword ptr [ebp+08]
:0041BABA 52                      push edx
:0041BABB E8C0EBFFFF              call 0041A680
:0041BAC0 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BA76(C)
|
:0041BAC3 8BE5                    mov esp, ebp
:0041BAC5 5D                      pop ebp
:0041BAC6 C3                      ret



* Referenced by a CALL at Address:
|:0041B2AE   
|
:0041BAC7 55                      push ebp
:0041BAC8 8BEC                    mov ebp, esp
:0041BACA 51                      push ecx
:0041BACB C745FC01000000          mov [ebp-04], 00000001
:0041BAD2 EB09                    jmp 0041BADD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BB67(U)
|
:0041BAD4 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BAD7 83C001                  add eax, 00000001
:0041BADA 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BAD2(U)
|
:0041BADD 837DFC2D                cmp dword ptr [ebp-04], 0000002D
:0041BAE1 0F8385000000            jnb 0041BB6C
:0041BAE7 6A00                    push 00000000
:0041BAE9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BAEC 6BC914                  imul ecx, 00000014
:0041BAEF 8B81B06C4700            mov eax, dword ptr [ecx+00476CB0]
:0041BAF5 0FAF4510                imul eax, dword ptr [ebp+10]
:0041BAF9 99                      cdq
:0041BAFA F73DB06C4700            idiv dword ptr [00476CB0]
:0041BB00 50                      push eax
:0041BB01 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BB04 6BD214                  imul edx, 00000014
:0041BB07 8B82AC6C4700            mov eax, dword ptr [edx+00476CAC]
:0041BB0D 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041BB11 99                      cdq
:0041BB12 F73DAC6C4700            idiv dword ptr [00476CAC]
:0041BB18 50                      push eax
:0041BB19 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BB1C 6BC014                  imul eax, 00000014
:0041BB1F 8B80A86C4700            mov eax, dword ptr [eax+00476CA8]
:0041BB25 0FAF4510                imul eax, dword ptr [ebp+10]
:0041BB29 99                      cdq
:0041BB2A F73DB06C4700            idiv dword ptr [00476CB0]
:0041BB30 50                      push eax
:0041BB31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BB34 6BC914                  imul ecx, 00000014
:0041BB37 8B81A46C4700            mov eax, dword ptr [ecx+00476CA4]
:0041BB3D 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041BB41 99                      cdq
:0041BB42 F73DAC6C4700            idiv dword ptr [00476CAC]
:0041BB48 50                      push eax
:0041BB49 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BB4C 6BD214                  imul edx, 00000014
:0041BB4F 8B82A06C4700            mov eax, dword ptr [edx+00476CA0]
:0041BB55 50                      push eax
:0041BB56 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BB59 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BB5A FF15AC864B00            Call dword ptr [004B86AC]
:0041BB60 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041BB61 FF15FC864B00            Call dword ptr [004B86FC]
:0041BB67 E968FFFFFF              jmp 0041BAD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BAE1(C)
|
:0041BB6C 8BE5                    mov esp, ebp
:0041BB6E 5D                      pop ebp
:0041BB6F C3                      ret



* Referenced by a CALL at Addresses:
|:0041B471   , :0041B505   , :0041B68D   , :0041BDBD   
|
:0041BB70 55                      push ebp
:0041BB71 8BEC                    mov ebp, esp
:0041BB73 83EC08                  sub esp, 00000008
:0041BB76 8B4508                  mov eax, dword ptr [ebp+08]
:0041BB79 50                      push eax
:0041BB7A E875C5FFFF              call 004180F4
:0041BB7F 83C404                  add esp, 00000004
:0041BB82 8945F8                  mov dword ptr [ebp-08], eax
:0041BB85 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041BB88 51                      push ecx
:0041BB89 E866C5FFFF              call 004180F4
:0041BB8E 83C404                  add esp, 00000004
:0041BB91 8945FC                  mov dword ptr [ebp-04], eax
:0041BB94 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BB97 52                      push edx
:0041BB98 8B45F8                  mov eax, dword ptr [ebp-08]
:0041BB9B 50                      push eax
:0041BB9C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041BB9F 51                      push ecx
:0041BBA0 E88FB8FFFF              call 00417434
:0041BBA5 83C40C                  add esp, 0000000C
:0041BBA8 8B45F8                  mov eax, dword ptr [ebp-08]
:0041BBAB 8BE5                    mov esp, ebp
:0041BBAD 5D                      pop ebp
:0041BBAE C3                      ret



* Referenced by a CALL at Address:
|:0041B317   
|
:0041BBAF 55                      push ebp
:0041BBB0 8BEC                    mov ebp, esp
:0041BBB2 83EC34                  sub esp, 00000034
:0041BBB5 8B4510                  mov eax, dword ptr [ebp+10]
:0041BBB8 8945EC                  mov dword ptr [ebp-14], eax
:0041BBBB 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0041BBBE 894DE4                  mov dword ptr [ebp-1C], ecx
:0041BBC1 8B5514                  mov edx, dword ptr [ebp+14]
:0041BBC4 52                      push edx
:0041BBC5 8D45FC                  lea eax, dword ptr [ebp-04]
:0041BBC8 50                      push eax
:0041BBC9 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:0041BBCC 51                      push ecx
:0041BBCD 8D55F8                  lea edx, dword ptr [ebp-08]
:0041BBD0 52                      push edx
:0041BBD1 8B4508                  mov eax, dword ptr [ebp+08]
:0041BBD4 50                      push eax
:0041BBD5 E8C4020000              call 0041BE9E
:0041BBDA 83C414                  add esp, 00000014
:0041BBDD 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0041BBE0 51                      push ecx
:0041BBE1 E80EC5FFFF              call 004180F4
:0041BBE6 83C404                  add esp, 00000004
:0041BBE9 8945F0                  mov dword ptr [ebp-10], eax
:0041BBEC 8B55F8                  mov edx, dword ptr [ebp-08]
:0041BBEF 52                      push edx
:0041BBF0 E8FFC4FFFF              call 004180F4
:0041BBF5 83C404                  add esp, 00000004
:0041BBF8 8945E8                  mov dword ptr [ebp-18], eax
:0041BBFB 8B4508                  mov eax, dword ptr [ebp+08]
:0041BBFE 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0041BBFF FF1584874B00            Call dword ptr [004B8784]
:0041BC05 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0041BC06 FF1584874B00            Call dword ptr [004B8784]
:0041BC0C 8945DC                  mov dword ptr [ebp-24], eax
:0041BC0F 8B4D3C                  mov ecx, dword ptr [ebp+3C]
:0041BC12 C1E910                  shr ecx, 10
:0041BC15 81E1FFFF0000            and ecx, 0000FFFF
:0041BC1B 81E1FFFF0000            and ecx, 0000FFFF
:0041BC21 51                      push ecx
:0041BC22 8B553C                  mov edx, dword ptr [ebp+3C]
:0041BC25 81E2FFFF0000            and edx, 0000FFFF
:0041BC2B 52                      push edx
:0041BC2C 682C050000              push 0000052C
:0041BC31 8B45DC                  mov eax, dword ptr [ebp-24]
:0041BC34 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BC35 FF15AC864B00            Call dword ptr [004B86AC]
:0041BC3B 50                      push eax
:0041BC3C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BC3F 51                      push ecx
:0041BC40 E89FE4FFFF              call 0041A0E4
:0041BC45 83C410                  add esp, 00000010
:0041BC48 85C0                    test eax, eax
:0041BC4A 746A                    je 0041BCB6
:0041BC4C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041BC4F 52                      push edx
:0041BC50 8B45EC                  mov eax, dword ptr [ebp-14]
:0041BC53 50                      push eax
:0041BC54 E81DBAFFFF              call 00417676
:0041BC59 83C408                  add esp, 00000008
:0041BC5C 8BC8                    mov ecx, eax
:0041BC5E 81E1FFFF0000            and ecx, 0000FFFF
:0041BC64 6BC933                  imul ecx, 00000033
:0041BC67 81C1C8EF4800            add ecx, 0048EFC8
:0041BC6D E83EBBFEFF              call 004077B0
:0041BC72 50                      push eax

* Possible StringData Ref from Data Obj ->"˱%sܡH"
                                  |
:0041BC73 6850754700              push 00477550

* Possible StringData Ref from Data Obj ->"_˱T{"
                                  |
:0041BC78 685C754700              push 0047755C
:0041BC7D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BC80 51                      push ecx
:0041BC81 E8ABB9FFFF              call 00417631
:0041BC86 83C410                  add esp, 00000010
:0041BC89 85C0                    test eax, eax
:0041BC8B 7422                    je 0041BCAF
:0041BC8D 8B55E8                  mov edx, dword ptr [ebp-18]
:0041BC90 52                      push edx
:0041BC91 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041BC94 50                      push eax
:0041BC95 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041BC98 51                      push ecx
:0041BC99 8B5508                  mov edx, dword ptr [ebp+08]
:0041BC9C 52                      push edx
:0041BC9D E89DE4FFFF              call 0041A13F
:0041BCA2 83C410                  add esp, 00000010
:0041BCA5 B801000000              mov eax, 00000001
:0041BCAA E9EB010000              jmp 0041BE9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC8B(C)
|
:0041BCAF 33C0                    xor eax, eax
:0041BCB1 E9E4010000              jmp 0041BE9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC4A(C)
|
:0041BCB6 6836040000              push 00000436
:0041BCBB 6835040000              push 00000435
:0041BCC0 8B453C                  mov eax, dword ptr [ebp+3C]
:0041BCC3 50                      push eax
:0041BCC4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041BCC7 51                      push ecx
:0041BCC8 8B5508                  mov edx, dword ptr [ebp+08]
:0041BCCB 52                      push edx
:0041BCCC E87AE3FFFF              call 0041A04B
:0041BCD1 83C414                  add esp, 00000014
:0041BCD4 85C0                    test eax, eax
:0041BCD6 7507                    jne 0041BCDF
:0041BCD8 33C0                    xor eax, eax
:0041BCDA E9BB010000              jmp 0041BE9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BCD6(C)
|
:0041BCDF 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041BCE2 50                      push eax
:0041BCE3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041BCE6 51                      push ecx
:0041BCE7 E88AB9FFFF              call 00417676
:0041BCEC 83C408                  add esp, 00000008
:0041BCEF C1E810                  shr eax, 10
:0041BCF2 25FFFF0000              and eax, 0000FFFF
:0041BCF7 25FFFF0000              and eax, 0000FFFF
:0041BCFC 8945D8                  mov dword ptr [ebp-28], eax
:0041BCFF 8A55D8                  mov dl, byte ptr [ebp-28]
:0041BD02 52                      push edx
:0041BD03 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041BD06 6BC970                  imul ecx, 00000070
:0041BD09 81C198224900            add ecx, 00492298
:0041BD0F E8FC8AFEFF              call 00404810
:0041BD14 25FF000000              and eax, 000000FF
:0041BD19 8945F4                  mov dword ptr [ebp-0C], eax
:0041BD1C 8A45D8                  mov al, byte ptr [ebp-28]
:0041BD1F 50                      push eax
:0041BD20 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041BD23 51                      push ecx
:0041BD24 8B5508                  mov edx, dword ptr [ebp+08]
:0041BD27 52                      push edx
:0041BD28 E893E2FFFF              call 00419FC0
:0041BD2D 83C40C                  add esp, 0000000C
:0041BD30 8945E0                  mov dword ptr [ebp-20], eax
:0041BD33 6A01                    push 00000001
:0041BD35 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041BD38 50                      push eax
:0041BD39 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041BD3C 51                      push ecx
:0041BD3D 8B5508                  mov edx, dword ptr [ebp+08]
:0041BD40 52                      push edx
:0041BD41 E847DFFFFF              call 00419C8D
:0041BD46 83C410                  add esp, 00000010
:0041BD49 85C0                    test eax, eax
:0041BD4B 0F84EA000000            je 0041BE3B
:0041BD51 837DE000                cmp dword ptr [ebp-20], 00000000
:0041BD55 0F8CE0000000            jl 0041BE3B
:0041BD5B 8B45F0                  mov eax, dword ptr [ebp-10]
:0041BD5E 50                      push eax
:0041BD5F E8B3DFFFFF              call 00419D17
:0041BD64 83C404                  add esp, 00000004
:0041BD67 8845D0                  mov byte ptr [ebp-30], al
:0041BD6A 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0041BD6D 51                      push ecx
:0041BD6E 8A55D0                  mov dl, byte ptr [ebp-30]
:0041BD71 52                      push edx
:0041BD72 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041BD75 6BC970                  imul ecx, 00000070
:0041BD78 81C198224900            add ecx, 00492298
:0041BD7E E8AD8AFEFF              call 00404830

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041BD83 68FF000000              push 000000FF
:0041BD88 8A45D8                  mov al, byte ptr [ebp-28]
:0041BD8B 50                      push eax
:0041BD8C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041BD8F 6BC970                  imul ecx, 00000070
:0041BD92 81C198224900            add ecx, 00492298
:0041BD98 E8938AFEFF              call 00404830
:0041BD9D 8A4DD0                  mov cl, byte ptr [ebp-30]
:0041BDA0 51                      push ecx
:0041BDA1 8B55F0                  mov edx, dword ptr [ebp-10]
:0041BDA4 52                      push edx
:0041BDA5 8B4508                  mov eax, dword ptr [ebp+08]
:0041BDA8 50                      push eax
:0041BDA9 E8FEDDFFFF              call 00419BAC
:0041BDAE 83C40C                  add esp, 0000000C
:0041BDB1 85C0                    test eax, eax
:0041BDB3 7410                    je 0041BDC5
:0041BDB5 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0041BDB8 51                      push ecx
:0041BDB9 8B55F8                  mov edx, dword ptr [ebp-08]
:0041BDBC 52                      push edx
:0041BDBD E8AEFDFFFF              call 0041BB70
:0041BDC2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BDB3(C)
|
:0041BDC5 8B45F0                  mov eax, dword ptr [ebp-10]
:0041BDC8 50                      push eax
:0041BDC9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BDCC 51                      push ecx
:0041BDCD E89FB4FFFF              call 00417271
:0041BDD2 83C408                  add esp, 00000008
:0041BDD5 6A00                    push 00000000
:0041BDD7 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041BDDA 52                      push edx
:0041BDDB 6808100000              push 00001008
:0041BDE0 8B45EC                  mov eax, dword ptr [ebp-14]
:0041BDE3 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041BDE4 FF15D8864B00            Call dword ptr [004B86D8]
:0041BDEA 6A00                    push 00000000
:0041BDEC 6A00                    push 00000000
:0041BDEE 6804100000              push 00001004
:0041BDF3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041BDF6 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041BDF7 FF15D8864B00            Call dword ptr [004B86D8]
:0041BDFD 83E801                  sub eax, 00000001
:0041BE00 3B45E4                  cmp eax, dword ptr [ebp-1C]
:0041BE03 7D1B                    jge 0041BE20
:0041BE05 6A00                    push 00000000
:0041BE07 6A00                    push 00000000
:0041BE09 6804100000              push 00001004
:0041BE0E 8B55EC                  mov edx, dword ptr [ebp-14]
:0041BE11 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041BE12 FF15D8864B00            Call dword ptr [004B86D8]
:0041BE18 83E801                  sub eax, 00000001
:0041BE1B 8945CC                  mov dword ptr [ebp-34], eax
:0041BE1E EB06                    jmp 0041BE26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BE03(C)
|
:0041BE20 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041BE23 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BE1E(U)
|
:0041BE26 6A00                    push 00000000
:0041BE28 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0041BE2B 51                      push ecx
:0041BE2C 6813100000              push 00001013
:0041BE31 8B55EC                  mov edx, dword ptr [ebp-14]
:0041BE34 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041BE35 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041BD4B(C), :0041BD55(C)
|
:0041BE3B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BE3E 50                      push eax
:0041BE3F E84DD3FFFF              call 00419191
:0041BE44 83C404                  add esp, 00000004
:0041BE47 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041BE49 68EA030000              push 000003EA
:0041BE4E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BE51 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BE52 FF15AC864B00            Call dword ptr [004B86AC]
:0041BE58 50                      push eax
:0041BE59 E896C2FFFF              call 004180F4
:0041BE5E 83C404                  add esp, 00000004
:0041BE61 50                      push eax
:0041BE62 8B5508                  mov edx, dword ptr [ebp+08]
:0041BE65 52                      push edx
:0041BE66 E813E5FFFF              call 0041A37E
:0041BE6B 83C40C                  add esp, 0000000C
:0041BE6E 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041BE70 68FC030000              push 000003FC
:0041BE75 8B4508                  mov eax, dword ptr [ebp+08]
:0041BE78 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BE79 FF15AC864B00            Call dword ptr [004B86AC]
:0041BE7F 50                      push eax
:0041BE80 E86FC2FFFF              call 004180F4
:0041BE85 83C404                  add esp, 00000004
:0041BE88 50                      push eax
:0041BE89 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BE8C 51                      push ecx
:0041BE8D E8EEE7FFFF              call 0041A680
:0041BE92 83C40C                  add esp, 0000000C
:0041BE95 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041BCAA(U), :0041BCB1(U), :0041BCDA(U)
|
:0041BE9A 8BE5                    mov esp, ebp
:0041BE9C 5D                      pop ebp
:0041BE9D C3                      ret



* Referenced by a CALL at Address:
|:0041BBD5   
|
:0041BE9E 55                      push ebp
:0041BE9F 8BEC                    mov ebp, esp
:0041BEA1 817D1835040000          cmp dword ptr [ebp+18], 00000435
:0041BEA8 753E                    jne 0041BEE8

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041BEAA 68EA030000              push 000003EA
:0041BEAF 8B4508                  mov eax, dword ptr [ebp+08]
:0041BEB2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BEB3 FF15AC864B00            Call dword ptr [004B86AC]
:0041BEB9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041BEBC 8901                    mov dword ptr [ecx], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041BEBE 68FC030000              push 000003FC
:0041BEC3 8B5508                  mov edx, dword ptr [ebp+08]
:0041BEC6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BEC7 FF15AC864B00            Call dword ptr [004B86AC]
:0041BECD 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041BED0 8901                    mov dword ptr [ecx], eax
:0041BED2 6836040000              push 00000436
:0041BED7 8B5508                  mov edx, dword ptr [ebp+08]
:0041BEDA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BEDB FF15AC864B00            Call dword ptr [004B86AC]
:0041BEE1 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041BEE4 8901                    mov dword ptr [ecx], eax
:0041BEE6 EB3C                    jmp 0041BF24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BEA8(C)
|

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041BEE8 68FC030000              push 000003FC
:0041BEED 8B5508                  mov edx, dword ptr [ebp+08]
:0041BEF0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BEF1 FF15AC864B00            Call dword ptr [004B86AC]
:0041BEF7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041BEFA 8901                    mov dword ptr [ecx], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041BEFC 68EA030000              push 000003EA
:0041BF01 8B5508                  mov edx, dword ptr [ebp+08]
:0041BF04 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BF05 FF15AC864B00            Call dword ptr [004B86AC]
:0041BF0B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041BF0E 8901                    mov dword ptr [ecx], eax
:0041BF10 6835040000              push 00000435
:0041BF15 8B5508                  mov edx, dword ptr [ebp+08]
:0041BF18 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BF19 FF15AC864B00            Call dword ptr [004B86AC]
:0041BF1F 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041BF22 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BEE6(U)
|
:0041BF24 5D                      pop ebp
:0041BF25 C3                      ret



* Referenced by a CALL at Address:
|:0041B5ED   
|
:0041BF26 55                      push ebp
:0041BF27 8BEC                    mov ebp, esp
:0041BF29 51                      push ecx
:0041BF2A 8B4510                  mov eax, dword ptr [ebp+10]
:0041BF2D 81780435040000          cmp dword ptr [eax+04], 00000435
:0041BF34 751A                    jne 0041BF50
:0041BF36 6836040000              push 00000436
:0041BF3B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BF3E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BF3F FF15AC864B00            Call dword ptr [004B86AC]
:0041BF45 50                      push eax
:0041BF46 E846D2FFFF              call 00419191
:0041BF4B 83C404                  add esp, 00000004
:0041BF4E EB18                    jmp 0041BF68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BF34(C)
|
:0041BF50 6835040000              push 00000435
:0041BF55 8B5508                  mov edx, dword ptr [ebp+08]
:0041BF58 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BF59 FF15AC864B00            Call dword ptr [004B86AC]
:0041BF5F 50                      push eax
:0041BF60 E82CD2FFFF              call 00419191
:0041BF65 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BF4E(U)
|
:0041BF68 8B4510                  mov eax, dword ptr [ebp+10]
:0041BF6B 8B08                    mov ecx, dword ptr [eax]
:0041BF6D 51                      push ecx
:0041BF6E E87FB7FFFF              call 004176F2
:0041BF73 83C404                  add esp, 00000004
:0041BF76 8945FC                  mov dword ptr [ebp-04], eax
:0041BF79 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041BF7D 7D0E                    jge 0041BF8D
:0041BF7F 8B5508                  mov edx, dword ptr [ebp+08]
:0041BF82 52                      push edx
:0041BF83 E862E3FFFF              call 0041A2EA
:0041BF88 83C404                  add esp, 00000004
:0041BF8B EB12                    jmp 0041BF9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BF7D(C)
|
:0041BF8D 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BF90 50                      push eax
:0041BF91 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041BF94 8B11                    mov edx, dword ptr [ecx]
:0041BF96 52                      push edx
:0041BF97 E872EAFFFF              call 0041AA0E
:0041BF9C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BF8B(U)
|
:0041BF9F 8BE5                    mov esp, ebp
:0041BFA1 5D                      pop ebp
:0041BFA2 C3                      ret



* Referenced by a CALL at Address:
|:0041B6BA   
|
:0041BFA3 55                      push ebp
:0041BFA4 8BEC                    mov ebp, esp
:0041BFA6 51                      push ecx
:0041BFA7 8B450C                  mov eax, dword ptr [ebp+0C]
:0041BFAA 81780435040000          cmp dword ptr [eax+04], 00000435
:0041BFB1 751A                    jne 0041BFCD
:0041BFB3 6836040000              push 00000436
:0041BFB8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BFBB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BFBC FF15AC864B00            Call dword ptr [004B86AC]
:0041BFC2 50                      push eax
:0041BFC3 E8C9D1FFFF              call 00419191
:0041BFC8 83C404                  add esp, 00000004
:0041BFCB EB18                    jmp 0041BFE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BFB1(C)
|
:0041BFCD 6835040000              push 00000435
:0041BFD2 8B5508                  mov edx, dword ptr [ebp+08]
:0041BFD5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041BFD6 FF15AC864B00            Call dword ptr [004B86AC]
:0041BFDC 50                      push eax
:0041BFDD E8AFD1FFFF              call 00419191
:0041BFE2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BFCB(U)
|
:0041BFE5 8B450C                  mov eax, dword ptr [ebp+0C]
:0041BFE8 8B08                    mov ecx, dword ptr [eax]
:0041BFEA 51                      push ecx
:0041BFEB E802B7FFFF              call 004176F2
:0041BFF0 83C404                  add esp, 00000004
:0041BFF3 8945FC                  mov dword ptr [ebp-04], eax
:0041BFF6 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041BFFA 7D0C                    jge 0041C008
:0041BFFC 8B5508                  mov edx, dword ptr [ebp+08]
:0041BFFF 52                      push edx
:0041C000 E8E5E2FFFF              call 0041A2EA
:0041C005 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BFFA(C)
|
:0041C008 8BE5                    mov esp, ebp
:0041C00A 5D                      pop ebp
:0041C00B C3                      ret



* Referenced by a CALL at Address:
|:0041B739   
|
:0041C00C 55                      push ebp
:0041C00D 8BEC                    mov ebp, esp
:0041C00F 83EC14                  sub esp, 00000014
:0041C012 53                      push ebx
:0041C013 56                      push esi
:0041C014 8B4508                  mov eax, dword ptr [ebp+08]
:0041C017 50                      push eax
:0041C018 E89EE5FFFF              call 0041A5BB
:0041C01D 83C404                  add esp, 00000004
:0041C020 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C023 6BC933                  imul ecx, 00000033
:0041C026 81C1C8EF4800            add ecx, 0048EFC8
:0041C02C E85F86FEFF              call 00404690
:0041C031 25FF000000              and eax, 000000FF
:0041C036 8945FC                  mov dword ptr [ebp-04], eax
:0041C039 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041C03D 0F8F18020000            jg 0041C25B
:0041C043 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C046 51                      push ecx
:0041C047 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C04A 6BC970                  imul ecx, 00000070
:0041C04D 81C198224900            add ecx, 00492298
:0041C053 E8355CFEFF              call 00401C8D
:0041C058 85C0                    test eax, eax
:0041C05A 0F84C4010000            je 0041C224

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:0041C060 686C754700              push 0047756C
:0041C065 68AE040000              push 000004AE
:0041C06A 8B5508                  mov edx, dword ptr [ebp+08]
:0041C06D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C06E FF15AC864B00            Call dword ptr [004B86AC]
:0041C074 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041C075 FF15B0864B00            Call dword ptr [004B86B0]
:0041C07B 68F4010000              push 000001F4
:0041C080 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C083 6BC970                  imul ecx, 00000070
:0041C086 81C198224900            add ecx, 00492298
:0041C08C E81F86FEFF              call 004046B0
:0041C091 8AD8                    mov bl, al
:0041C093 81E3FF000000            and ebx, 000000FF
:0041C099 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C09C 6BC933                  imul ecx, 00000033
:0041C09F 81C1C8EF4800            add ecx, 0048EFC8
:0041C0A5 E8863F0000              call 00420030
:0041C0AA 25FF000000              and eax, 000000FF
:0041C0AF 03D8                    add ebx, eax
:0041C0B1 53                      push ebx
:0041C0B2 6A00                    push 00000000
:0041C0B4 E883B6FFFF              call 0041773C
:0041C0B9 83C40C                  add esp, 0000000C
:0041C0BC 8945F4                  mov dword ptr [ebp-0C], eax
:0041C0BF 68F4010000              push 000001F4
:0041C0C4 8B450C                  mov eax, dword ptr [ebp+0C]
:0041C0C7 50                      push eax
:0041C0C8 E88EB7FFFF              call 0041785B
:0041C0CD 83C404                  add esp, 00000004
:0041C0D0 8BF0                    mov esi, eax
:0041C0D2 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C0D5 6BC933                  imul ecx, 00000033
:0041C0D8 81C1C8EF4800            add ecx, 0048EFC8
:0041C0DE E80D86FEFF              call 004046F0
:0041C0E3 25FF000000              and eax, 000000FF
:0041C0E8 99                      cdq
:0041C0E9 2BC2                    sub eax, edx
:0041C0EB D1F8                    sar eax, 1
:0041C0ED 03F0                    add esi, eax
:0041C0EF 56                      push esi
:0041C0F0 6A00                    push 00000000
:0041C0F2 E845B6FFFF              call 0041773C
:0041C0F7 83C40C                  add esp, 0000000C
:0041C0FA 8945F0                  mov dword ptr [ebp-10], eax
:0041C0FD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041C100 51                      push ecx

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:0041C101 6878754700              push 00477578
:0041C106 68A8040000              push 000004A8
:0041C10B 8B5508                  mov edx, dword ptr [ebp+08]
:0041C10E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C10F FF15AC864B00            Call dword ptr [004B86AC]
:0041C115 50                      push eax
:0041C116 E8EF760400              call 0046380A
:0041C11B 83C40C                  add esp, 0000000C
:0041C11E 8B45F0                  mov eax, dword ptr [ebp-10]
:0041C121 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:0041C122 6884754700              push 00477584
:0041C127 68A6040000              push 000004A6
:0041C12C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C12F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C130 FF15AC864B00            Call dword ptr [004B86AC]
:0041C136 50                      push eax
:0041C137 E8CE760400              call 0046380A
:0041C13C 83C40C                  add esp, 0000000C
:0041C13F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C142 6BC970                  imul ecx, 00000070
:0041C145 81C198224900            add ecx, 00492298
:0041C14B E87062FEFF              call 004023C0
:0041C150 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041C153 2BD0                    sub edx, eax
:0041C155 52                      push edx

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0041C156 6802040000              push 00000402
:0041C15B 8B4508                  mov eax, dword ptr [ebp+08]
:0041C15E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C15F FF15AC864B00            Call dword ptr [004B86AC]
:0041C165 50                      push eax
:0041C166 E820B6FFFF              call 0041778B
:0041C16B 83C408                  add esp, 00000008
:0041C16E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C171 6BC970                  imul ecx, 00000070
:0041C174 81C198224900            add ecx, 00492298
:0041C17A E8C563FEFF              call 00402544
:0041C17F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041C182 2BC8                    sub ecx, eax
:0041C184 51                      push ecx
:0041C185 6808040000              push 00000408
:0041C18A 8B5508                  mov edx, dword ptr [ebp+08]
:0041C18D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C18E FF15AC864B00            Call dword ptr [004B86AC]
:0041C194 50                      push eax
:0041C195 E8F1B5FFFF              call 0041778B
:0041C19A 83C408                  add esp, 00000008
:0041C19D 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041C1A1 757F                    jne 0041C222
:0041C1A3 68F4010000              push 000001F4
:0041C1A8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C1AB 6BC970                  imul ecx, 00000070
:0041C1AE 81C198224900            add ecx, 00492298
:0041C1B4 E8573E0000              call 00420010
:0041C1B9 8AD8                    mov bl, al
:0041C1BB 81E3FF000000            and ebx, 000000FF
:0041C1C1 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C1C4 6BC933                  imul ecx, 00000033
:0041C1C7 81C1C8EF4800            add ecx, 0048EFC8
:0041C1CD E89E85FEFF              call 00404770
:0041C1D2 25FF000000              and eax, 000000FF
:0041C1D7 03D8                    add ebx, eax
:0041C1D9 53                      push ebx
:0041C1DA 6A00                    push 00000000
:0041C1DC E85BB5FFFF              call 0041773C
:0041C1E1 83C40C                  add esp, 0000000C
:0041C1E4 8945F8                  mov dword ptr [ebp-08], eax
:0041C1E7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C1EA 6BC970                  imul ecx, 00000070
:0041C1ED 81C198224900            add ecx, 00492298
:0041C1F3 E82E62FEFF              call 00402426
:0041C1F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C1FB 2BC8                    sub ecx, eax
:0041C1FD 51                      push ecx
:0041C1FE 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C201 52                      push edx
:0041C202 68AE040000              push 000004AE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:0041C207 6804040000              push 00000404

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041C20C 6894754700              push 00477594

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:0041C211 68FD030000              push 000003FD
:0041C216 8B4508                  mov eax, dword ptr [ebp+08]
:0041C219 50                      push eax
:0041C21A E8C6B5FFFF              call 004177E5
:0041C21F 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C1A1(C)
|
:0041C222 EB32                    jmp 0041C256

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C05A(C)
|
:0041C224 6A00                    push 00000000
:0041C226 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C229 51                      push ecx
:0041C22A 8B5508                  mov edx, dword ptr [ebp+08]
:0041C22D 52                      push edx
:0041C22E E84BE1FFFF              call 0041A37E
:0041C233 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Lk˳ƸӪZC"
                                  |
:0041C236 68A0754700              push 004775A0
:0041C23B 68AE040000              push 000004AE
:0041C240 8B4508                  mov eax, dword ptr [ebp+08]
:0041C243 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C244 FF15AC864B00            Call dword ptr [004B86AC]
:0041C24A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041C24B FF15B0864B00            Call dword ptr [004B86B0]
:0041C251 E978030000              jmp 0041C5CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C222(U)
|
:0041C256 E973030000              jmp 0041C5CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C03D(C)
|
:0041C25B 837DFC07                cmp dword ptr [ebp-04], 00000007
:0041C25F 0F8511010000            jne 0041C376

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041C265 68FF000000              push 000000FF
:0041C26A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C26D 6BC970                  imul ecx, 00000070
:0041C270 81C198224900            add ecx, 00492298
:0041C276 E8D53D0000              call 00420050
:0041C27B 8AD8                    mov bl, al
:0041C27D 81E3FF000000            and ebx, 000000FF
:0041C283 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C286 6BC933                  imul ecx, 00000033
:0041C289 81C1C8EF4800            add ecx, 0048EFC8
:0041C28F E89C84FEFF              call 00404730
:0041C294 25FF000000              and eax, 000000FF
:0041C299 2BD8                    sub ebx, eax
:0041C29B 53                      push ebx
:0041C29C 6A00                    push 00000000
:0041C29E E899B4FFFF              call 0041773C
:0041C2A3 83C40C                  add esp, 0000000C
:0041C2A6 8945EC                  mov dword ptr [ebp-14], eax
:0041C2A9 6A00                    push 00000000
:0041C2AB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041C2AE 51                      push ecx
:0041C2AF 68A7040000              push 000004A7
:0041C2B4 8B5508                  mov edx, dword ptr [ebp+08]
:0041C2B7 52                      push edx

* Reference To: USER32.SetDlgItemInt, Ord:01F1h
                                  |
:0041C2B8 FF1550874B00            Call dword ptr [004B8750]
:0041C2BE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C2C1 6BC970                  imul ecx, 00000070
:0041C2C4 81C198224900            add ecx, 00492298
:0041C2CA E82D63FEFF              call 004025FC
:0041C2CF 25FF000000              and eax, 000000FF
:0041C2D4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041C2D7 2BC8                    sub ecx, eax
:0041C2D9 51                      push ecx
:0041C2DA 6809040000              push 00000409
:0041C2DF 8B5508                  mov edx, dword ptr [ebp+08]
:0041C2E2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C2E3 FF15AC864B00            Call dword ptr [004B86AC]
:0041C2E9 50                      push eax
:0041C2EA E89CB4FFFF              call 0041778B
:0041C2EF 83C408                  add esp, 00000008
:0041C2F2 68F4010000              push 000001F4
:0041C2F7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C2FA 6BC970                  imul ecx, 00000070
:0041C2FD 81C198224900            add ecx, 00492298
:0041C303 E8E83C0000              call 0041FFF0
:0041C308 8AD8                    mov bl, al
:0041C30A 81E3FF000000            and ebx, 000000FF
:0041C310 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C313 6BC933                  imul ecx, 00000033
:0041C316 81C1C8EF4800            add ecx, 0048EFC8
:0041C31C E80F3D0000              call 00420030
:0041C321 25FF000000              and eax, 000000FF
:0041C326 03D8                    add ebx, eax
:0041C328 53                      push ebx
:0041C329 6A00                    push 00000000
:0041C32B E80CB4FFFF              call 0041773C
:0041C330 83C40C                  add esp, 0000000C
:0041C333 8945F8                  mov dword ptr [ebp-08], eax
:0041C336 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C339 6BC970                  imul ecx, 00000070
:0041C33C 81C198224900            add ecx, 00492298
:0041C342 E8AC60FEFF              call 004023F3
:0041C347 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C34A 2BC8                    sub ecx, eax
:0041C34C 51                      push ecx
:0041C34D 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C350 52                      push edx
:0041C351 68AE040000              push 000004AE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:0041C356 6803040000              push 00000403

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:0041C35B 68B4754700              push 004775B4

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:0041C360 68F3030000              push 000003F3
:0041C365 8B4508                  mov eax, dword ptr [ebp+08]
:0041C368 50                      push eax
:0041C369 E877B4FFFF              call 004177E5
:0041C36E 83C41C                  add esp, 0000001C
:0041C371 E958020000              jmp 0041C5CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C25F(C)
|
:0041C376 837DFC08                cmp dword ptr [ebp-04], 00000008
:0041C37A 0F8584000000            jne 0041C404
:0041C380 68F4010000              push 000001F4
:0041C385 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C388 6BC970                  imul ecx, 00000070
:0041C38B 81C198224900            add ecx, 00492298
:0041C391 E87A3C0000              call 00420010
:0041C396 8AD8                    mov bl, al
:0041C398 81E3FF000000            and ebx, 000000FF
:0041C39E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C3A1 6BC933                  imul ecx, 00000033
:0041C3A4 81C1C8EF4800            add ecx, 0048EFC8
:0041C3AA E8813C0000              call 00420030
:0041C3AF 25FF000000              and eax, 000000FF
:0041C3B4 03D8                    add ebx, eax
:0041C3B6 53                      push ebx
:0041C3B7 6A00                    push 00000000
:0041C3B9 E87EB3FFFF              call 0041773C
:0041C3BE 83C40C                  add esp, 0000000C
:0041C3C1 8945F8                  mov dword ptr [ebp-08], eax
:0041C3C4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C3C7 6BC970                  imul ecx, 00000070
:0041C3CA 81C198224900            add ecx, 00492298
:0041C3D0 E85160FEFF              call 00402426
:0041C3D5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C3D8 2BC8                    sub ecx, eax
:0041C3DA 51                      push ecx
:0041C3DB 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C3DE 52                      push edx
:0041C3DF 68AE040000              push 000004AE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:0041C3E4 6804040000              push 00000404

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041C3E9 68C0754700              push 004775C0

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:0041C3EE 68FD030000              push 000003FD
:0041C3F3 8B4508                  mov eax, dword ptr [ebp+08]
:0041C3F6 50                      push eax
:0041C3F7 E8E9B3FFFF              call 004177E5
:0041C3FC 83C41C                  add esp, 0000001C
:0041C3FF E9CA010000              jmp 0041C5CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C37A(C)
|
:0041C404 837DFC09                cmp dword ptr [ebp-04], 00000009
:0041C408 0F8584000000            jne 0041C492
:0041C40E 68F4010000              push 000001F4
:0041C413 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C416 6BC970                  imul ecx, 00000070
:0041C419 81C198224900            add ecx, 00492298
:0041C41F E80C3C0000              call 00420030
:0041C424 8AD8                    mov bl, al
:0041C426 81E3FF000000            and ebx, 000000FF
:0041C42C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C42F 6BC933                  imul ecx, 00000033
:0041C432 81C1C8EF4800            add ecx, 0048EFC8
:0041C438 E8F33B0000              call 00420030
:0041C43D 25FF000000              and eax, 000000FF
:0041C442 03D8                    add ebx, eax
:0041C444 53                      push ebx
:0041C445 6A00                    push 00000000
:0041C447 E8F0B2FFFF              call 0041773C
:0041C44C 83C40C                  add esp, 0000000C
:0041C44F 8945F8                  mov dword ptr [ebp-08], eax
:0041C452 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C455 6BC970                  imul ecx, 00000070
:0041C458 81C198224900            add ecx, 00492298
:0041C45E E84A60FEFF              call 004024AD
:0041C463 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C466 2BC8                    sub ecx, eax
:0041C468 51                      push ecx
:0041C469 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C46C 52                      push edx
:0041C46D 68AE040000              push 000004AE
:0041C472 6805040000              push 00000405

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:0041C477 68CC754700              push 004775CC

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:0041C47C 68F2030000              push 000003F2
:0041C481 8B4508                  mov eax, dword ptr [ebp+08]
:0041C484 50                      push eax
:0041C485 E85BB3FFFF              call 004177E5
:0041C48A 83C41C                  add esp, 0000001C
:0041C48D E93C010000              jmp 0041C5CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C408(C)
|
:0041C492 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0041C496 757E                    jne 0041C516
:0041C498 68E8030000              push 000003E8
:0041C49D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C4A0 6BC970                  imul ecx, 00000070
:0041C4A3 81C198224900            add ecx, 00492298
:0041C4A9 E8D2690300              call 00452E80
:0041C4AE 8BF0                    mov esi, eax
:0041C4B0 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C4B3 6BC933                  imul ecx, 00000033
:0041C4B6 81C1C8EF4800            add ecx, 0048EFC8
:0041C4BC E86F3B0000              call 00420030
:0041C4C1 25FF000000              and eax, 000000FF
:0041C4C6 03F0                    add esi, eax
:0041C4C8 56                      push esi
:0041C4C9 6A00                    push 00000000
:0041C4CB E86CB2FFFF              call 0041773C
:0041C4D0 83C40C                  add esp, 0000000C
:0041C4D3 8945F8                  mov dword ptr [ebp-08], eax
:0041C4D6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C4D9 6BC970                  imul ecx, 00000070
:0041C4DC 81C198224900            add ecx, 00492298
:0041C4E2 E8F95FFEFF              call 004024E0
:0041C4E7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C4EA 2BC8                    sub ecx, eax
:0041C4EC 51                      push ecx
:0041C4ED 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C4F0 52                      push edx
:0041C4F1 68AE040000              push 000004AE
:0041C4F6 6806040000              push 00000406

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:0041C4FB 68D8754700              push 004775D8
:0041C500 68A4040000              push 000004A4
:0041C505 8B4508                  mov eax, dword ptr [ebp+08]
:0041C508 50                      push eax
:0041C509 E8D7B2FFFF              call 004177E5
:0041C50E 83C41C                  add esp, 0000001C
:0041C511 E9B8000000              jmp 0041C5CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C496(C)
|
:0041C516 837DFC0B                cmp dword ptr [ebp-04], 0000000B
:0041C51A 0F8581000000            jne 0041C5A1
:0041C520 68F4010000              push 000001F4
:0041C525 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C528 6BC970                  imul ecx, 00000070
:0041C52B 81C198224900            add ecx, 00492298
:0041C531 E8BA81FEFF              call 004046F0
:0041C536 8AD8                    mov bl, al
:0041C538 81E3FF000000            and ebx, 000000FF
:0041C53E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C541 6BC933                  imul ecx, 00000033
:0041C544 81C1C8EF4800            add ecx, 0048EFC8
:0041C54A E8E13A0000              call 00420030
:0041C54F 25FF000000              and eax, 000000FF
:0041C554 03D8                    add ebx, eax
:0041C556 53                      push ebx
:0041C557 6A00                    push 00000000
:0041C559 E8DEB1FFFF              call 0041773C
:0041C55E 83C40C                  add esp, 0000000C
:0041C561 8945F8                  mov dword ptr [ebp-08], eax
:0041C564 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C567 6BC970                  imul ecx, 00000070
:0041C56A 81C198224900            add ecx, 00492298
:0041C570 E89C5FFEFF              call 00402511
:0041C575 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C578 2BC8                    sub ecx, eax
:0041C57A 51                      push ecx
:0041C57B 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C57E 52                      push edx
:0041C57F 68AE040000              push 000004AE
:0041C584 6807040000              push 00000407

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:0041C589 68E8754700              push 004775E8
:0041C58E 68A5040000              push 000004A5
:0041C593 8B4508                  mov eax, dword ptr [ebp+08]
:0041C596 50                      push eax
:0041C597 E849B2FFFF              call 004177E5
:0041C59C 83C41C                  add esp, 0000001C
:0041C59F EB2D                    jmp 0041C5CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C51A(C)
|
:0041C5A1 6A00                    push 00000000
:0041C5A3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C5A6 51                      push ecx
:0041C5A7 8B5508                  mov edx, dword ptr [ebp+08]
:0041C5AA 52                      push edx
:0041C5AB E8CEDDFFFF              call 0041A37E
:0041C5B0 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0041C5B3 68F8754700              push 004775F8
:0041C5B8 68AE040000              push 000004AE
:0041C5BD 8B4508                  mov eax, dword ptr [ebp+08]
:0041C5C0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C5C1 FF15AC864B00            Call dword ptr [004B86AC]
:0041C5C7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041C5C8 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C251(U), :0041C256(U), :0041C371(U), :0041C3FF(U), :0041C48D(U)
|:0041C511(U), :0041C59F(U)
|
:0041C5CE 5E                      pop esi
:0041C5CF 5B                      pop ebx
:0041C5D0 8BE5                    mov esp, ebp
:0041C5D2 5D                      pop ebp
:0041C5D3 C3                      ret



* Referenced by a CALL at Address:
|:0041B74D   
|
:0041C5D4 55                      push ebp
:0041C5D5 8BEC                    mov ebp, esp
:0041C5D7 83EC14                  sub esp, 00000014
:0041C5DA 53                      push ebx
:0041C5DB 56                      push esi
:0041C5DC 8B4508                  mov eax, dword ptr [ebp+08]
:0041C5DF 50                      push eax
:0041C5E0 E8D5E2FFFF              call 0041A8BA
:0041C5E5 83C404                  add esp, 00000004
:0041C5E8 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C5EB 6BC933                  imul ecx, 00000033
:0041C5EE 81C1C8EF4800            add ecx, 0048EFC8
:0041C5F4 E89780FEFF              call 00404690
:0041C5F9 25FF000000              and eax, 000000FF
:0041C5FE 8945FC                  mov dword ptr [ebp-04], eax
:0041C601 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041C605 0F8F18020000            jg 0041C823
:0041C60B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C60E 51                      push ecx
:0041C60F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C612 6BC970                  imul ecx, 00000070
:0041C615 81C198224900            add ecx, 00492298
:0041C61B E86D56FEFF              call 00401C8D
:0041C620 85C0                    test eax, eax
:0041C622 0F84C4010000            je 0041C7EC

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:0041C628 6804764700              push 00477604
:0041C62D 68AD040000              push 000004AD
:0041C632 8B5508                  mov edx, dword ptr [ebp+08]
:0041C635 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C636 FF15AC864B00            Call dword ptr [004B86AC]
:0041C63C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041C63D FF15B0864B00            Call dword ptr [004B86B0]
:0041C643 68F4010000              push 000001F4
:0041C648 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C64B 6BC970                  imul ecx, 00000070
:0041C64E 81C198224900            add ecx, 00492298
:0041C654 E85780FEFF              call 004046B0
:0041C659 8AD8                    mov bl, al
:0041C65B 81E3FF000000            and ebx, 000000FF
:0041C661 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C664 6BC933                  imul ecx, 00000033
:0041C667 81C1C8EF4800            add ecx, 0048EFC8
:0041C66D E8BE390000              call 00420030
:0041C672 25FF000000              and eax, 000000FF
:0041C677 03D8                    add ebx, eax
:0041C679 53                      push ebx
:0041C67A 6A00                    push 00000000
:0041C67C E8BBB0FFFF              call 0041773C
:0041C681 83C40C                  add esp, 0000000C
:0041C684 8945F4                  mov dword ptr [ebp-0C], eax
:0041C687 68F4010000              push 000001F4
:0041C68C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041C68F 50                      push eax
:0041C690 E8C6B1FFFF              call 0041785B
:0041C695 83C404                  add esp, 00000004
:0041C698 8BF0                    mov esi, eax
:0041C69A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C69D 6BC933                  imul ecx, 00000033
:0041C6A0 81C1C8EF4800            add ecx, 0048EFC8
:0041C6A6 E84580FEFF              call 004046F0
:0041C6AB 25FF000000              and eax, 000000FF
:0041C6B0 99                      cdq
:0041C6B1 2BC2                    sub eax, edx
:0041C6B3 D1F8                    sar eax, 1
:0041C6B5 03F0                    add esi, eax
:0041C6B7 56                      push esi
:0041C6B8 6A00                    push 00000000
:0041C6BA E87DB0FFFF              call 0041773C
:0041C6BF 83C40C                  add esp, 0000000C
:0041C6C2 8945F0                  mov dword ptr [ebp-10], eax
:0041C6C5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041C6C8 51                      push ecx

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:0041C6C9 6810764700              push 00477610
:0041C6CE 68A3040000              push 000004A3
:0041C6D3 8B5508                  mov edx, dword ptr [ebp+08]
:0041C6D6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C6D7 FF15AC864B00            Call dword ptr [004B86AC]
:0041C6DD 50                      push eax
:0041C6DE E827710400              call 0046380A
:0041C6E3 83C40C                  add esp, 0000000C
:0041C6E6 8B45F0                  mov eax, dword ptr [ebp-10]
:0041C6E9 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:0041C6EA 681C764700              push 0047761C
:0041C6EF 68A1040000              push 000004A1
:0041C6F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C6F7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C6F8 FF15AC864B00            Call dword ptr [004B86AC]
:0041C6FE 50                      push eax
:0041C6FF E806710400              call 0046380A
:0041C704 83C40C                  add esp, 0000000C
:0041C707 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C70A 6BC970                  imul ecx, 00000070
:0041C70D 81C198224900            add ecx, 00492298
:0041C713 E8A85CFEFF              call 004023C0
:0041C718 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041C71B 2BD0                    sub edx, eax
:0041C71D 52                      push edx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F0, "255"
                                  |
:0041C71E 68F0030000              push 000003F0
:0041C723 8B4508                  mov eax, dword ptr [ebp+08]
:0041C726 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C727 FF15AC864B00            Call dword ptr [004B86AC]
:0041C72D 50                      push eax
:0041C72E E858B0FFFF              call 0041778B
:0041C733 83C408                  add esp, 00000008
:0041C736 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C739 6BC970                  imul ecx, 00000070
:0041C73C 81C198224900            add ecx, 00492298
:0041C742 E8FD5DFEFF              call 00402544
:0041C747 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041C74A 2BC8                    sub ecx, eax
:0041C74C 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:0041C74D 68FE030000              push 000003FE
:0041C752 8B5508                  mov edx, dword ptr [ebp+08]
:0041C755 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C756 FF15AC864B00            Call dword ptr [004B86AC]
:0041C75C 50                      push eax
:0041C75D E829B0FFFF              call 0041778B
:0041C762 83C408                  add esp, 00000008
:0041C765 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041C769 757F                    jne 0041C7EA
:0041C76B 68F4010000              push 000001F4
:0041C770 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C773 6BC970                  imul ecx, 00000070
:0041C776 81C198224900            add ecx, 00492298
:0041C77C E88F380000              call 00420010
:0041C781 8AD8                    mov bl, al
:0041C783 81E3FF000000            and ebx, 000000FF
:0041C789 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C78C 6BC933                  imul ecx, 00000033
:0041C78F 81C1C8EF4800            add ecx, 0048EFC8
:0041C795 E8D67FFEFF              call 00404770
:0041C79A 25FF000000              and eax, 000000FF
:0041C79F 03D8                    add ebx, eax
:0041C7A1 53                      push ebx
:0041C7A2 6A00                    push 00000000
:0041C7A4 E893AFFFFF              call 0041773C
:0041C7A9 83C40C                  add esp, 0000000C
:0041C7AC 8945F8                  mov dword ptr [ebp-08], eax
:0041C7AF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C7B2 6BC970                  imul ecx, 00000070
:0041C7B5 81C198224900            add ecx, 00492298
:0041C7BB E8665CFEFF              call 00402426
:0041C7C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C7C3 2BC8                    sub ecx, eax
:0041C7C5 51                      push ecx
:0041C7C6 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C7C9 52                      push edx
:0041C7CA 68AD040000              push 000004AD
:0041C7CF 68F6030000              push 000003F6

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041C7D4 682C764700              push 0047762C

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F5, "255"
                                  |
:0041C7D9 68F5030000              push 000003F5
:0041C7DE 8B4508                  mov eax, dword ptr [ebp+08]
:0041C7E1 50                      push eax
:0041C7E2 E8FEAFFFFF              call 004177E5
:0041C7E7 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C769(C)
|
:0041C7EA EB32                    jmp 0041C81E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C622(C)
|
:0041C7EC 6A00                    push 00000000
:0041C7EE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C7F1 51                      push ecx
:0041C7F2 8B5508                  mov edx, dword ptr [ebp+08]
:0041C7F5 52                      push edx
:0041C7F6 E885DEFFFF              call 0041A680
:0041C7FB 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Lk˳ƨZC"
                                  |
:0041C7FE 6838764700              push 00477638
:0041C803 68AD040000              push 000004AD
:0041C808 8B4508                  mov eax, dword ptr [ebp+08]
:0041C80B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C80C FF15AC864B00            Call dword ptr [004B86AC]
:0041C812 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041C813 FF15B0864B00            Call dword ptr [004B86B0]
:0041C819 E978030000              jmp 0041CB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C7EA(U)
|
:0041C81E E973030000              jmp 0041CB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C605(C)
|
:0041C823 837DFC07                cmp dword ptr [ebp-04], 00000007
:0041C827 0F8511010000            jne 0041C93E

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041C82D 68FF000000              push 000000FF
:0041C832 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C835 6BC970                  imul ecx, 00000070
:0041C838 81C198224900            add ecx, 00492298
:0041C83E E80D380000              call 00420050
:0041C843 8AD8                    mov bl, al
:0041C845 81E3FF000000            and ebx, 000000FF
:0041C84B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C84E 6BC933                  imul ecx, 00000033
:0041C851 81C1C8EF4800            add ecx, 0048EFC8
:0041C857 E8D47EFEFF              call 00404730
:0041C85C 25FF000000              and eax, 000000FF
:0041C861 2BD8                    sub ebx, eax
:0041C863 53                      push ebx
:0041C864 6A00                    push 00000000
:0041C866 E8D1AEFFFF              call 0041773C
:0041C86B 83C40C                  add esp, 0000000C
:0041C86E 8945EC                  mov dword ptr [ebp-14], eax
:0041C871 6A00                    push 00000000
:0041C873 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041C876 51                      push ecx
:0041C877 68A2040000              push 000004A2
:0041C87C 8B5508                  mov edx, dword ptr [ebp+08]
:0041C87F 52                      push edx

* Reference To: USER32.SetDlgItemInt, Ord:01F1h
                                  |
:0041C880 FF1550874B00            Call dword ptr [004B8750]
:0041C886 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C889 6BC970                  imul ecx, 00000070
:0041C88C 81C198224900            add ecx, 00492298
:0041C892 E8655DFEFF              call 004025FC
:0041C897 25FF000000              and eax, 000000FF
:0041C89C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041C89F 2BC8                    sub ecx, eax
:0041C8A1 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:0041C8A2 6801040000              push 00000401
:0041C8A7 8B5508                  mov edx, dword ptr [ebp+08]
:0041C8AA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041C8AB FF15AC864B00            Call dword ptr [004B86AC]
:0041C8B1 50                      push eax
:0041C8B2 E8D4AEFFFF              call 0041778B
:0041C8B7 83C408                  add esp, 00000008
:0041C8BA 68F4010000              push 000001F4
:0041C8BF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C8C2 6BC970                  imul ecx, 00000070
:0041C8C5 81C198224900            add ecx, 00492298
:0041C8CB E820370000              call 0041FFF0
:0041C8D0 8AD8                    mov bl, al
:0041C8D2 81E3FF000000            and ebx, 000000FF
:0041C8D8 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C8DB 6BC933                  imul ecx, 00000033
:0041C8DE 81C1C8EF4800            add ecx, 0048EFC8
:0041C8E4 E847370000              call 00420030
:0041C8E9 25FF000000              and eax, 000000FF
:0041C8EE 03D8                    add ebx, eax
:0041C8F0 53                      push ebx
:0041C8F1 6A00                    push 00000000
:0041C8F3 E844AEFFFF              call 0041773C
:0041C8F8 83C40C                  add esp, 0000000C
:0041C8FB 8945F8                  mov dword ptr [ebp-08], eax
:0041C8FE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C901 6BC970                  imul ecx, 00000070
:0041C904 81C198224900            add ecx, 00492298
:0041C90A E8E45AFEFF              call 004023F3
:0041C90F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C912 2BC8                    sub ecx, eax
:0041C914 51                      push ecx
:0041C915 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C918 52                      push edx
:0041C919 68AD040000              push 000004AD

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F4, "255"
                                  |
:0041C91E 68F4030000              push 000003F4

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:0041C923 684C764700              push 0047764C

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F1, "255"
                                  |
:0041C928 68F1030000              push 000003F1
:0041C92D 8B4508                  mov eax, dword ptr [ebp+08]
:0041C930 50                      push eax
:0041C931 E8AFAEFFFF              call 004177E5
:0041C936 83C41C                  add esp, 0000001C
:0041C939 E958020000              jmp 0041CB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C827(C)
|
:0041C93E 837DFC08                cmp dword ptr [ebp-04], 00000008
:0041C942 0F8584000000            jne 0041C9CC
:0041C948 68F4010000              push 000001F4
:0041C94D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C950 6BC970                  imul ecx, 00000070
:0041C953 81C198224900            add ecx, 00492298
:0041C959 E8B2360000              call 00420010
:0041C95E 8AD8                    mov bl, al
:0041C960 81E3FF000000            and ebx, 000000FF
:0041C966 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C969 6BC933                  imul ecx, 00000033
:0041C96C 81C1C8EF4800            add ecx, 0048EFC8
:0041C972 E8B9360000              call 00420030
:0041C977 25FF000000              and eax, 000000FF
:0041C97C 03D8                    add ebx, eax
:0041C97E 53                      push ebx
:0041C97F 6A00                    push 00000000
:0041C981 E8B6ADFFFF              call 0041773C
:0041C986 83C40C                  add esp, 0000000C
:0041C989 8945F8                  mov dword ptr [ebp-08], eax
:0041C98C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C98F 6BC970                  imul ecx, 00000070
:0041C992 81C198224900            add ecx, 00492298
:0041C998 E8895AFEFF              call 00402426
:0041C99D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C9A0 2BC8                    sub ecx, eax
:0041C9A2 51                      push ecx
:0041C9A3 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C9A6 52                      push edx
:0041C9A7 68AD040000              push 000004AD
:0041C9AC 68F6030000              push 000003F6

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0041C9B1 6858764700              push 00477658

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F5, "255"
                                  |
:0041C9B6 68F5030000              push 000003F5
:0041C9BB 8B4508                  mov eax, dword ptr [ebp+08]
:0041C9BE 50                      push eax
:0041C9BF E821AEFFFF              call 004177E5
:0041C9C4 83C41C                  add esp, 0000001C
:0041C9C7 E9CA010000              jmp 0041CB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C942(C)
|
:0041C9CC 837DFC09                cmp dword ptr [ebp-04], 00000009
:0041C9D0 0F8584000000            jne 0041CA5A
:0041C9D6 68F4010000              push 000001F4
:0041C9DB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C9DE 6BC970                  imul ecx, 00000070
:0041C9E1 81C198224900            add ecx, 00492298
:0041C9E7 E844360000              call 00420030
:0041C9EC 8AD8                    mov bl, al
:0041C9EE 81E3FF000000            and ebx, 000000FF
:0041C9F4 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C9F7 6BC933                  imul ecx, 00000033
:0041C9FA 81C1C8EF4800            add ecx, 0048EFC8
:0041CA00 E82B360000              call 00420030
:0041CA05 25FF000000              and eax, 000000FF
:0041CA0A 03D8                    add ebx, eax
:0041CA0C 53                      push ebx
:0041CA0D 6A00                    push 00000000
:0041CA0F E828ADFFFF              call 0041773C
:0041CA14 83C40C                  add esp, 0000000C
:0041CA17 8945F8                  mov dword ptr [ebp-08], eax
:0041CA1A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CA1D 6BC970                  imul ecx, 00000070
:0041CA20 81C198224900            add ecx, 00492298
:0041CA26 E8825AFEFF              call 004024AD
:0041CA2B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CA2E 2BC8                    sub ecx, eax
:0041CA30 51                      push ecx
:0041CA31 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CA34 52                      push edx
:0041CA35 68AD040000              push 000004AD

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0041CA3A 68F9030000              push 000003F9

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:0041CA3F 6864764700              push 00477664

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EF, "255"
                                  |
:0041CA44 68EF030000              push 000003EF
:0041CA49 8B4508                  mov eax, dword ptr [ebp+08]
:0041CA4C 50                      push eax
:0041CA4D E893ADFFFF              call 004177E5
:0041CA52 83C41C                  add esp, 0000001C
:0041CA55 E93C010000              jmp 0041CB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C9D0(C)
|
:0041CA5A 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0041CA5E 757E                    jne 0041CADE
:0041CA60 68E8030000              push 000003E8
:0041CA65 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CA68 6BC970                  imul ecx, 00000070
:0041CA6B 81C198224900            add ecx, 00492298
:0041CA71 E80A640300              call 00452E80
:0041CA76 8BF0                    mov esi, eax
:0041CA78 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041CA7B 6BC933                  imul ecx, 00000033
:0041CA7E 81C1C8EF4800            add ecx, 0048EFC8
:0041CA84 E8A7350000              call 00420030
:0041CA89 25FF000000              and eax, 000000FF
:0041CA8E 03F0                    add esi, eax
:0041CA90 56                      push esi
:0041CA91 6A00                    push 00000000
:0041CA93 E8A4ACFFFF              call 0041773C
:0041CA98 83C40C                  add esp, 0000000C
:0041CA9B 8945F8                  mov dword ptr [ebp-08], eax
:0041CA9E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CAA1 6BC970                  imul ecx, 00000070
:0041CAA4 81C198224900            add ecx, 00492298
:0041CAAA E8315AFEFF              call 004024E0
:0041CAAF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CAB2 2BC8                    sub ecx, eax
:0041CAB4 51                      push ecx
:0041CAB5 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CAB8 52                      push edx
:0041CAB9 68AD040000              push 000004AD

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0041CABE 68FA030000              push 000003FA

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:0041CAC3 6870764700              push 00477670
:0041CAC8 689F040000              push 0000049F
:0041CACD 8B4508                  mov eax, dword ptr [ebp+08]
:0041CAD0 50                      push eax
:0041CAD1 E80FADFFFF              call 004177E5
:0041CAD6 83C41C                  add esp, 0000001C
:0041CAD9 E9B8000000              jmp 0041CB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CA5E(C)
|
:0041CADE 837DFC0B                cmp dword ptr [ebp-04], 0000000B
:0041CAE2 0F8581000000            jne 0041CB69
:0041CAE8 68F4010000              push 000001F4
:0041CAED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CAF0 6BC970                  imul ecx, 00000070
:0041CAF3 81C198224900            add ecx, 00492298
:0041CAF9 E8F27BFEFF              call 004046F0
:0041CAFE 8AD8                    mov bl, al
:0041CB00 81E3FF000000            and ebx, 000000FF
:0041CB06 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041CB09 6BC933                  imul ecx, 00000033
:0041CB0C 81C1C8EF4800            add ecx, 0048EFC8
:0041CB12 E819350000              call 00420030
:0041CB17 25FF000000              and eax, 000000FF
:0041CB1C 03D8                    add ebx, eax
:0041CB1E 53                      push ebx
:0041CB1F 6A00                    push 00000000
:0041CB21 E816ACFFFF              call 0041773C
:0041CB26 83C40C                  add esp, 0000000C
:0041CB29 8945F8                  mov dword ptr [ebp-08], eax
:0041CB2C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CB2F 6BC970                  imul ecx, 00000070
:0041CB32 81C198224900            add ecx, 00492298
:0041CB38 E8D459FEFF              call 00402511
:0041CB3D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CB40 2BC8                    sub ecx, eax
:0041CB42 51                      push ecx
:0041CB43 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CB46 52                      push edx
:0041CB47 68AD040000              push 000004AD

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FB, "rubi"
                                  |
:0041CB4C 68FB030000              push 000003FB

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:0041CB51 6880764700              push 00477680
:0041CB56 68A0040000              push 000004A0
:0041CB5B 8B4508                  mov eax, dword ptr [ebp+08]
:0041CB5E 50                      push eax
:0041CB5F E881ACFFFF              call 004177E5
:0041CB64 83C41C                  add esp, 0000001C
:0041CB67 EB2D                    jmp 0041CB96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CAE2(C)
|
:0041CB69 6A00                    push 00000000
:0041CB6B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CB6E 51                      push ecx
:0041CB6F 8B5508                  mov edx, dword ptr [ebp+08]
:0041CB72 52                      push edx
:0041CB73 E808DBFFFF              call 0041A680
:0041CB78 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0041CB7B 6890764700              push 00477690
:0041CB80 68AD040000              push 000004AD
:0041CB85 8B4508                  mov eax, dword ptr [ebp+08]
:0041CB88 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CB89 FF15AC864B00            Call dword ptr [004B86AC]
:0041CB8F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041CB90 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C819(U), :0041C81E(U), :0041C939(U), :0041C9C7(U), :0041CA55(U)
|:0041CAD9(U), :0041CB67(U)
|
:0041CB96 5E                      pop esi
:0041CB97 5B                      pop ebx
:0041CB98 8BE5                    mov esp, ebp
:0041CB9A 5D                      pop ebp
:0041CB9B C3                      ret



* Referenced by a CALL at Address:
|:0041B3D8   
|
:0041CB9C 55                      push ebp
:0041CB9D 8BEC                    mov ebp, esp
:0041CB9F 817D0C35040000          cmp dword ptr [ebp+0C], 00000435
:0041CBA6 751A                    jne 0041CBC2

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041CBA8 68EA030000              push 000003EA
:0041CBAD 8B4508                  mov eax, dword ptr [ebp+08]
:0041CBB0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CBB1 FF15AC864B00            Call dword ptr [004B86AC]
:0041CBB7 50                      push eax
:0041CBB8 E837B5FFFF              call 004180F4
:0041CBBD 83C404                  add esp, 00000004
:0041CBC0 EB28                    jmp 0041CBEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CBA6(C)
|
:0041CBC2 817D0C36040000          cmp dword ptr [ebp+0C], 00000436
:0041CBC9 751A                    jne 0041CBE5

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041CBCB 68FC030000              push 000003FC
:0041CBD0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CBD3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CBD4 FF15AC864B00            Call dword ptr [004B86AC]
:0041CBDA 50                      push eax
:0041CBDB E814B5FFFF              call 004180F4
:0041CBE0 83C404                  add esp, 00000004
:0041CBE3 EB05                    jmp 0041CBEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CBC9(C)
|
:0041CBE5 B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CBC0(U), :0041CBE3(U)
|
:0041CBEA 5D                      pop ebp
:0041CBEB C3                      ret



* Referenced by a CALL at Address:
|:00453178   
|
:0041CBEC 55                      push ebp
:0041CBED 8BEC                    mov ebp, esp
:0041CBEF 8B450C                  mov eax, dword ptr [ebp+0C]
:0041CBF2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CBF5 8B10                    mov edx, dword ptr [eax]
:0041CBF7 0B5108                  or edx, dword ptr [ecx+08]
:0041CBFA 8B450C                  mov eax, dword ptr [ebp+0C]
:0041CBFD 0B5004                  or edx, dword ptr [eax+04]
:0041CC00 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CC03 0B510C                  or edx, dword ptr [ecx+0C]
:0041CC06 85D2                    test edx, edx
:0041CC08 7439                    je 0041CC43
:0041CC0A 6A01                    push 00000001
:0041CC0C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041CC0F 8B450C                  mov eax, dword ptr [ebp+0C]
:0041CC12 8B4A0C                  mov ecx, dword ptr [edx+0C]
:0041CC15 2B4804                  sub ecx, dword ptr [eax+04]
:0041CC18 51                      push ecx
:0041CC19 8B550C                  mov edx, dword ptr [ebp+0C]
:0041CC1C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041CC1F 8B4A08                  mov ecx, dword ptr [edx+08]
:0041CC22 2B08                    sub ecx, dword ptr [eax]
:0041CC24 51                      push ecx
:0041CC25 8B550C                  mov edx, dword ptr [ebp+0C]
:0041CC28 8B4204                  mov eax, dword ptr [edx+04]
:0041CC2B 50                      push eax
:0041CC2C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041CC2F 8B11                    mov edx, dword ptr [ecx]
:0041CC31 52                      push edx
:0041CC32 8B4508                  mov eax, dword ptr [ebp+08]
:0041CC35 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041CC36 FF15FC864B00            Call dword ptr [004B86FC]
:0041CC3C B801000000              mov eax, 00000001
:0041CC41 EB02                    jmp 0041CC45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC08(C)
|
:0041CC43 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC41(U)
|
:0041CC45 5D                      pop ebp
:0041CC46 C3                      ret


:0041CC47 55                      push ebp
:0041CC48 8BEC                    mov ebp, esp
:0041CC4A 83EC30                  sub esp, 00000030
:0041CC4D 8B450C                  mov eax, dword ptr [ebp+0C]
:0041CC50 8945D4                  mov dword ptr [ebp-2C], eax
:0041CC53 837DD405                cmp dword ptr [ebp-2C], 00000005
:0041CC57 7719                    ja 0041CC72
:0041CC59 837DD405                cmp dword ptr [ebp-2C], 00000005
:0041CC5D 0F8422010000            je 0041CD85
:0041CC63 837DD402                cmp dword ptr [ebp-2C], 00000002
:0041CC67 0F84D4020000            je 0041CF41
:0041CC6D E9A9040000              jmp 0041D11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC57(C)
|
:0041CC72 837DD44E                cmp dword ptr [ebp-2C], 0000004E
:0041CC76 7719                    ja 0041CC91
:0041CC78 837DD44E                cmp dword ptr [ebp-2C], 0000004E
:0041CC7C 0F8415030000            je 0041CF97
:0041CC82 837DD40F                cmp dword ptr [ebp-2C], 0000000F
:0041CC86 0F84F5020000            je 0041CF81
:0041CC8C E98A040000              jmp 0041D11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC76(C)
|
:0041CC91 817DD410010000          cmp dword ptr [ebp-2C], 00000110
:0041CC98 7412                    je 0041CCAC
:0041CC9A 817DD411010000          cmp dword ptr [ebp-2C], 00000111
:0041CCA1 0F847E010000            je 0041CE25
:0041CCA7 E96F040000              jmp 0041D11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC98(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041CCAC 6A02                    push 00000002
:0041CCAE B9C8E24A00              mov ecx, 004AE2C8
:0041CCB3 E8E8320000              call 0041FFA0
:0041CCB8 50                      push eax
:0041CCB9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CCBC 51                      push ecx
:0041CCBD E861040000              call 0041D123
:0041CCC2 83C408                  add esp, 00000008
:0041CCC5 6868050000              push 00000568
:0041CCCA 8B5508                  mov edx, dword ptr [ebp+08]
:0041CCCD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CCCE FF15AC864B00            Call dword ptr [004B86AC]
:0041CCD4 8945FC                  mov dword ptr [ebp-04], eax
:0041CCD7 6A01                    push 00000001
:0041CCD9 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CCDC 50                      push eax
:0041CCDD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CCE0 51                      push ecx
:0041CCE1 E888040000              call 0041D16E
:0041CCE6 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"s"
                                  |
:0041CCE9 689C764700              push 0047769C
:0041CCEE 8B55FC                  mov edx, dword ptr [ebp-04]
:0041CCF1 52                      push edx
:0041CCF2 E812050000              call 0041D209
:0041CCF7 83C408                  add esp, 00000008
:0041CCFA 6A00                    push 00000000
:0041CCFC 68E0874100              push 004187E0
:0041CD01 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CD04 50                      push eax

* Possible Reference to Dialog: DialogID_00EB 
                                  |
:0041CD05 68EB000000              push 000000EB
:0041CD0A 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041CD10 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0041CD11 FF15A0864B00            Call dword ptr [004B86A0]
:0041CD17 A3E4584800              mov dword ptr [004858E4], eax
:0041CD1C 8B15E4584800            mov edx, dword ptr [004858E4]
:0041CD22 52                      push edx
:0041CD23 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CD26 50                      push eax
:0041CD27 E8EF050000              call 0041D31B
:0041CD2C 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0041CD2F 6A05                    push 00000005
:0041CD31 8B0DE4584800            mov ecx, dword ptr [004858E4]
:0041CD37 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041CD38 FF15E4864B00            Call dword ptr [004B86E4]
:0041CD3E B910584800              mov ecx, 00485810
:0041CD43 E888320000              call 0041FFD0
:0041CD48 85C0                    test eax, eax
:0041CD4A 7511                    jne 0041CD5D

* Possible StringData Ref from Data Obj ->"洫"
                                  |
:0041CD4C 68A4764700              push 004776A4
:0041CD51 8B55FC                  mov edx, dword ptr [ebp-04]
:0041CD54 52                      push edx
:0041CD55 E8AF040000              call 0041D209
:0041CD5A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CD4A(C)
|
:0041CD5D 6889000000              push 00000089
:0041CD62 A1300E4B00              mov eax, dword ptr [004B0E30]
:0041CD67 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0041CD68 FF15E8864B00            Call dword ptr [004B86E8]
:0041CD6E 50                      push eax
:0041CD6F 6ADE                    push FFFFFFDE
:0041CD71 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CD74 51                      push ecx

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:0041CD75 FF15A0874B00            Call dword ptr [004B87A0]
:0041CD7B B801000000              mov eax, 00000001
:0041CD80 E998030000              jmp 0041D11D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC5D(C)
|
:0041CD85 8B5514                  mov edx, dword ptr [ebp+14]
:0041CD88 81E2FFFF0000            and edx, 0000FFFF
:0041CD8E 8955F8                  mov dword ptr [ebp-08], edx
:0041CD91 8B4514                  mov eax, dword ptr [ebp+14]
:0041CD94 C1E810                  shr eax, 10
:0041CD97 25FFFF0000              and eax, 0000FFFF
:0041CD9C 25FFFF0000              and eax, 0000FFFF
:0041CDA1 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0041CDA4 6A10                    push 00000010

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041CDA6 FF1578874B00            Call dword ptr [004B8778]
:0041CDAC 3945F8                  cmp dword ptr [ebp-08], eax
:0041CDAF 7C0B                    jl 0041CDBC

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0041CDB1 6A10                    push 00000010

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041CDB3 FF1578874B00            Call dword ptr [004B8778]
:0041CDB9 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CDAF(C)
|

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0041CDBC 6A11                    push 00000011

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041CDBE FF1578874B00            Call dword ptr [004B8778]
:0041CDC4 3945F4                  cmp dword ptr [ebp-0C], eax
:0041CDC7 7E0B                    jle 0041CDD4

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0041CDC9 6A11                    push 00000011

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0041CDCB FF1578874B00            Call dword ptr [004B8778]
:0041CDD1 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CDC7(C)
|
:0041CDD4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041CDD7 51                      push ecx
:0041CDD8 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CDDB 52                      push edx
:0041CDDC 8B4508                  mov eax, dword ptr [ebp+08]
:0041CDDF 50                      push eax
:0041CDE0 E88D040000              call 0041D272
:0041CDE5 83C40C                  add esp, 0000000C
:0041CDE8 6868050000              push 00000568
:0041CDED 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CDF0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CDF1 FF15AC864B00            Call dword ptr [004B86AC]
:0041CDF7 8945F0                  mov dword ptr [ebp-10], eax
:0041CDFA 8B15E4584800            mov edx, dword ptr [004858E4]
:0041CE00 52                      push edx
:0041CE01 8B45F0                  mov eax, dword ptr [ebp-10]
:0041CE04 50                      push eax
:0041CE05 E811050000              call 0041D31B
:0041CE0A 83C408                  add esp, 00000008
:0041CE0D 6801010000              push 00000101
:0041CE12 6A00                    push 00000000
:0041CE14 6A00                    push 00000000
:0041CE16 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CE19 51                      push ecx

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0041CE1A FF1590874B00            Call dword ptr [004B8790]
:0041CE20 E9F6020000              jmp 0041D11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CCA1(C)
|
:0041CE25 8B5510                  mov edx, dword ptr [ebp+10]
:0041CE28 C1EA10                  shr edx, 10
:0041CE2B 81E2FFFF0000            and edx, 0000FFFF
:0041CE31 81E2FFFF0000            and edx, 0000FFFF
:0041CE37 85D2                    test edx, edx
:0041CE39 0F85FD000000            jne 0041CF3C
:0041CE3F 8B4510                  mov eax, dword ptr [ebp+10]
:0041CE42 25FFFF0000              and eax, 0000FFFF
:0041CE47 8945D0                  mov dword ptr [ebp-30], eax
:0041CE4A 817DD03F040000          cmp dword ptr [ebp-30], 0000043F
:0041CE51 7F18                    jg 0041CE6B
:0041CE53 817DD03F040000          cmp dword ptr [ebp-30], 0000043F
:0041CE5A 0F849D000000            je 0041CEFD
:0041CE60 837DD002                cmp dword ptr [ebp-30], 00000002
:0041CE64 741C                    je 0041CE82
:0041CE66 E9D1000000              jmp 0041CF3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CE51(C)
|
:0041CE6B 817DD011050000          cmp dword ptr [ebp-30], 00000511
:0041CE72 741F                    je 0041CE93
:0041CE74 817DD012050000          cmp dword ptr [ebp-30], 00000512
:0041CE7B 744B                    je 0041CEC8
:0041CE7D E9BA000000              jmp 0041CF3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CE64(C)
|
:0041CE82 6A00                    push 00000000
:0041CE84 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CE87 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041CE88 FF15B0874B00            Call dword ptr [004B87B0]
:0041CE8E E9A9000000              jmp 0041CF3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CE72(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041CE93 6A02                    push 00000002
:0041CE95 B9C8E24A00              mov ecx, 004AE2C8
:0041CE9A E801310000              call 0041FFA0
:0041CE9F 85C0                    test eax, eax
:0041CEA1 7523                    jne 0041CEC6

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041CEA3 6A02                    push 00000002
:0041CEA5 6A01                    push 00000001
:0041CEA7 B9C8E24A00              mov ecx, 004AE2C8
:0041CEAC E8BF310000              call 00420070
:0041CEB1 6A00                    push 00000000
:0041CEB3 8B15E4584800            mov edx, dword ptr [004858E4]
:0041CEB9 52                      push edx
:0041CEBA 8B4508                  mov eax, dword ptr [ebp+08]
:0041CEBD 50                      push eax
:0041CEBE E807050000              call 0041D3CA
:0041CEC3 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CEA1(C)
|
:0041CEC6 EB74                    jmp 0041CF3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CE7B(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041CEC8 6A02                    push 00000002
:0041CECA B9C8E24A00              mov ecx, 004AE2C8
:0041CECF E8CC300000              call 0041FFA0
:0041CED4 85C0                    test eax, eax
:0041CED6 7423                    je 0041CEFB

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041CED8 6A02                    push 00000002
:0041CEDA 6A00                    push 00000000
:0041CEDC B9C8E24A00              mov ecx, 004AE2C8
:0041CEE1 E88A310000              call 00420070
:0041CEE6 6A01                    push 00000001
:0041CEE8 8B0DE4584800            mov ecx, dword ptr [004858E4]
:0041CEEE 51                      push ecx
:0041CEEF 8B5508                  mov edx, dword ptr [ebp+08]
:0041CEF2 52                      push edx
:0041CEF3 E8D2040000              call 0041D3CA
:0041CEF8 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CED6(C)
|
:0041CEFB EB3F                    jmp 0041CF3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CE5A(C)
|
:0041CEFD 6A00                    push 00000000
:0041CEFF 6A00                    push 00000000
:0041CF01 680B130000              push 0000130B
:0041CF06 6868050000              push 00000568
:0041CF0B 8B4508                  mov eax, dword ptr [ebp+08]
:0041CF0E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CF0F FF15AC864B00            Call dword ptr [004B86AC]
:0041CF15 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041CF16 FF15D8864B00            Call dword ptr [004B86D8]
:0041CF1C 85C0                    test eax, eax
:0041CF1E 740F                    je 0041CF2F
:0041CF20 6834080000              push 00000834
:0041CF25 E8386A0400              call 00463962
:0041CF2A 83C404                  add esp, 00000004
:0041CF2D EB0D                    jmp 0041CF3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CF1E(C)
|
:0041CF2F 6820080000              push 00000820
:0041CF34 E8296A0400              call 00463962
:0041CF39 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CE39(C), :0041CE66(U), :0041CE7D(U), :0041CE8E(U), :0041CEC6(U)
|:0041CEFB(U), :0041CF2D(U)
|
:0041CF3C E9DA010000              jmp 0041D11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC67(C)
|
:0041CF41 6A00                    push 00000000
:0041CF43 6A00                    push 00000000
:0041CF45 6802130000              push 00001302
:0041CF4A 6868050000              push 00000568
:0041CF4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CF52 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CF53 FF15AC864B00            Call dword ptr [004B86AC]
:0041CF59 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041CF5A FF15D8864B00            Call dword ptr [004B86D8]
:0041CF60 8945EC                  mov dword ptr [ebp-14], eax
:0041CF63 8B55EC                  mov edx, dword ptr [ebp-14]
:0041CF66 52                      push edx

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:0041CF67 FF155C844B00            Call dword ptr [004B845C]
:0041CF6D 6850594800              push 00485950
:0041CF72 8B4508                  mov eax, dword ptr [ebp+08]
:0041CF75 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0041CF76 FF1558874B00            Call dword ptr [004B8758]
:0041CF7C E99A010000              jmp 0041D11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC86(C)
|
:0041CF81 6842010000              push 00000142
:0041CF86 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CF89 51                      push ecx
:0041CF8A E85FDE0300              call 0045ADEE
:0041CF8F 83C408                  add esp, 00000008
:0041CF92 E984010000              jmp 0041D11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC7C(C)
|
:0041CF97 8B5514                  mov edx, dword ptr [ebp+14]
:0041CF9A 8955E8                  mov dword ptr [ebp-18], edx
:0041CF9D 8B45E8                  mov eax, dword ptr [ebp-18]
:0041CFA0 817808D9FDFFFF          cmp dword ptr [eax+08], FFFFFDD9
:0041CFA7 0F856E010000            jne 0041D11B
:0041CFAD 6A00                    push 00000000
:0041CFAF 6A00                    push 00000000
:0041CFB1 680B130000              push 0000130B
:0041CFB6 6868050000              push 00000568
:0041CFBB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CFBE 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CFBF FF15AC864B00            Call dword ptr [004B86AC]
:0041CFC5 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041CFC6 FF15D8864B00            Call dword ptr [004B86D8]
:0041CFCC 8945E4                  mov dword ptr [ebp-1C], eax
:0041CFCF 6868050000              push 00000568
:0041CFD4 8B5508                  mov edx, dword ptr [ebp+08]
:0041CFD7 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041CFD8 FF15AC864B00            Call dword ptr [004B86AC]
:0041CFDE 8945E0                  mov dword ptr [ebp-20], eax
:0041CFE1 837DE400                cmp dword ptr [ebp-1C], 00000000
:0041CFE5 7572                    jne 0041D059
:0041CFE7 6A00                    push 00000000
:0041CFE9 A1E4584800              mov eax, dword ptr [004858E4]
:0041CFEE 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041CFEF FF15B0874B00            Call dword ptr [004B87B0]
:0041CFF5 6A00                    push 00000000
:0041CFF7 6A00                    push 00000000
:0041CFF9 6802130000              push 00001302
:0041CFFE 6868050000              push 00000568
:0041D003 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D006 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D007 FF15AC864B00            Call dword ptr [004B86AC]
:0041D00D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D00E FF15D8864B00            Call dword ptr [004B86D8]
:0041D014 8945DC                  mov dword ptr [ebp-24], eax
:0041D017 8B55DC                  mov edx, dword ptr [ebp-24]
:0041D01A 52                      push edx

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:0041D01B FF155C844B00            Call dword ptr [004B845C]
:0041D021 6A01                    push 00000001
:0041D023 8B45E0                  mov eax, dword ptr [ebp-20]
:0041D026 50                      push eax
:0041D027 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D02A 51                      push ecx
:0041D02B E83E010000              call 0041D16E
:0041D030 83C40C                  add esp, 0000000C
:0041D033 6A00                    push 00000000
:0041D035 68E0874100              push 004187E0
:0041D03A 8B55E0                  mov edx, dword ptr [ebp-20]
:0041D03D 52                      push edx

* Possible Reference to Dialog: DialogID_00EB 
                                  |
:0041D03E 68EB000000              push 000000EB
:0041D043 A1300E4B00              mov eax, dword ptr [004B0E30]
:0041D048 50                      push eax

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0041D049 FF15A0864B00            Call dword ptr [004B86A0]
:0041D04F A3E4584800              mov dword ptr [004858E4], eax
:0041D054 E98E000000              jmp 0041D0E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CFE5(C)
|
:0041D059 E825030000              call 0041D383
:0041D05E 83F801                  cmp eax, 00000001
:0041D061 7E71                    jle 0041D0D4
:0041D063 6A00                    push 00000000
:0041D065 8B0DE4584800            mov ecx, dword ptr [004858E4]
:0041D06B 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041D06C FF15B0874B00            Call dword ptr [004B87B0]
:0041D072 6A00                    push 00000000
:0041D074 6A00                    push 00000000
:0041D076 6802130000              push 00001302
:0041D07B 6868050000              push 00000568
:0041D080 8B5508                  mov edx, dword ptr [ebp+08]
:0041D083 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D084 FF15AC864B00            Call dword ptr [004B86AC]
:0041D08A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D08B FF15D8864B00            Call dword ptr [004B86D8]
:0041D091 8945D8                  mov dword ptr [ebp-28], eax
:0041D094 8B45D8                  mov eax, dword ptr [ebp-28]
:0041D097 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:0041D098 FF155C844B00            Call dword ptr [004B845C]
:0041D09E 6A00                    push 00000000
:0041D0A0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041D0A3 51                      push ecx
:0041D0A4 8B5508                  mov edx, dword ptr [ebp+08]
:0041D0A7 52                      push edx
:0041D0A8 E8C1000000              call 0041D16E
:0041D0AD 83C40C                  add esp, 0000000C
:0041D0B0 6A00                    push 00000000
:0041D0B2 688AB14100              push 0041B18A
:0041D0B7 8B45E0                  mov eax, dword ptr [ebp-20]
:0041D0BA 50                      push eax

* Possible Reference to Dialog: DialogID_00DA 
                                  |
:0041D0BB 68DA000000              push 000000DA
:0041D0C0 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041D0C6 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0041D0C7 FF15A0864B00            Call dword ptr [004B86A0]
:0041D0CD A3E4584800              mov dword ptr [004858E4], eax
:0041D0D2 EB13                    jmp 0041D0E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D061(C)
|

* Possible StringData Ref from Data Obj ->"S洫HC"
                                  |
:0041D0D4 68AC764700              push 004776AC
:0041D0D9 6A00                    push 00000000
:0041D0DB 8B5508                  mov edx, dword ptr [ebp+08]
:0041D0DE 52                      push edx
:0041D0DF E87B9FFFFF              call 0041705F
:0041D0E4 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D054(U), :0041D0D2(U)
|
:0041D0E7 A1E4584800              mov eax, dword ptr [004858E4]
:0041D0EC 50                      push eax
:0041D0ED 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041D0F0 51                      push ecx
:0041D0F1 E825020000              call 0041D31B
:0041D0F6 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0041D0F9 6A05                    push 00000005
:0041D0FB 8B15E4584800            mov edx, dword ptr [004858E4]
:0041D101 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041D102 FF15E4864B00            Call dword ptr [004B86E4]
:0041D108 6801010000              push 00000101
:0041D10D 6A00                    push 00000000
:0041D10F 6A00                    push 00000000
:0041D111 8B45E0                  mov eax, dword ptr [ebp-20]
:0041D114 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0041D115 FF1590874B00            Call dword ptr [004B8790]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CC6D(U), :0041CC8C(U), :0041CCA7(U), :0041CE20(U), :0041CF3C(U)
|:0041CF7C(U), :0041CF92(U), :0041CFA7(C)
|
:0041D11B 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CD80(U)
|
:0041D11D 8BE5                    mov esp, ebp
:0041D11F 5D                      pop ebp
:0041D120 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0041CCBD   
|
:0041D123 55                      push ebp
:0041D124 8BEC                    mov ebp, esp
:0041D126 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0041D12A 7421                    je 0041D14D
:0041D12C 6A00                    push 00000000
:0041D12E 6A01                    push 00000001
:0041D130 68F1000000              push 000000F1
:0041D135 6811050000              push 00000511
:0041D13A 8B4508                  mov eax, dword ptr [ebp+08]
:0041D13D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D13E FF15AC864B00            Call dword ptr [004B86AC]
:0041D144 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D145 FF15D8864B00            Call dword ptr [004B86D8]
:0041D14B EB1F                    jmp 0041D16C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D12A(C)
|
:0041D14D 6A00                    push 00000000
:0041D14F 6A01                    push 00000001
:0041D151 68F1000000              push 000000F1
:0041D156 6812050000              push 00000512
:0041D15B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D15E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D15F FF15AC864B00            Call dword ptr [004B86AC]
:0041D165 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D166 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D14B(U)
|
:0041D16C 5D                      pop ebp
:0041D16D C3                      ret



* Referenced by a CALL at Addresses:
|:0041CCE1   , :0041D02B   , :0041D0A8   
|
:0041D16E 55                      push ebp
:0041D16F 8BEC                    mov ebp, esp
:0041D171 51                      push ecx
:0041D172 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041D174 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041D176 68FF000000              push 000000FF
:0041D17B 6A20                    push 00000020
:0041D17D 6A20                    push 00000020

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:0041D17F FF1578844B00            Call dword ptr [004B8478]
:0041D185 8945FC                  mov dword ptr [ebp-04], eax
:0041D188 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041D18C 7515                    jne 0041D1A3

* Possible StringData Ref from Data Obj ->"OεwЪѾleqC"
                                  |
:0041D18E 68BC764700              push 004776BC
:0041D193 6A00                    push 00000000
:0041D195 8B4508                  mov eax, dword ptr [ebp+08]
:0041D198 50                      push eax
:0041D199 E8C19EFFFF              call 0041705F
:0041D19E 83C40C                  add esp, 0000000C
:0041D1A1 EB62                    jmp 0041D205

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D18C(C)
|
:0041D1A3 6865010000              push 00000165
:0041D1A8 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041D1AE 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0041D1AF FF15E8864B00            Call dword ptr [004B86E8]
:0041D1B5 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041D1B6 6AFF                    push FFFFFFFF
:0041D1B8 8B55FC                  mov edx, dword ptr [ebp-04]
:0041D1BB 52                      push edx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0041D1BC FF1574844B00            Call dword ptr [004B8474]
:0041D1C2 6864010000              push 00000164
:0041D1C7 A1300E4B00              mov eax, dword ptr [004B0E30]
:0041D1CC 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0041D1CD FF15E8864B00            Call dword ptr [004B86E8]
:0041D1D3 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041D1D4 6AFF                    push FFFFFFFF
:0041D1D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D1D9 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0041D1DA FF1574844B00            Call dword ptr [004B8474]
:0041D1E0 8B55FC                  mov edx, dword ptr [ebp-04]
:0041D1E3 52                      push edx
:0041D1E4 8B4510                  mov eax, dword ptr [ebp+10]
:0041D1E7 50                      push eax
:0041D1E8 E8BE0C0400              call 0045DEAB
:0041D1ED 83C408                  add esp, 00000008
:0041D1F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D1F3 51                      push ecx
:0041D1F4 6A00                    push 00000000
:0041D1F6 6803130000              push 00001303
:0041D1FB 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D1FE 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D1FF FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D1A1(U)
|
:0041D205 8BE5                    mov esp, ebp
:0041D207 5D                      pop ebp
:0041D208 C3                      ret



* Referenced by a CALL at Addresses:
|:0041CCF2   , :0041CD55   
|
:0041D209 55                      push ebp
:0041D20A 8BEC                    mov ebp, esp
:0041D20C 83EC20                  sub esp, 00000020
:0041D20F 6A00                    push 00000000
:0041D211 6A00                    push 00000000
:0041D213 6804130000              push 00001304
:0041D218 8B4508                  mov eax, dword ptr [ebp+08]
:0041D21B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D21C FF15D8864B00            Call dword ptr [004B86D8]
:0041D222 8945FC                  mov dword ptr [ebp-04], eax
:0041D225 6A1C                    push 0000001C
:0041D227 6A00                    push 00000000
:0041D229 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0041D22C 51                      push ecx
:0041D22D E82E070500              call 0046D960
:0041D232 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0041D235 C745E003000000          mov [ebp-20], 00000003
:0041D23C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D23F 8955EC                  mov dword ptr [ebp-14], edx
:0041D242 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D245 50                      push eax
:0041D246 E858530400              call 004625A3
:0041D24B 83C404                  add esp, 00000004
:0041D24E 8945F0                  mov dword ptr [ebp-10], eax
:0041D251 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D254 894DF4                  mov dword ptr [ebp-0C], ecx
:0041D257 8D55E0                  lea edx, dword ptr [ebp-20]
:0041D25A 52                      push edx
:0041D25B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D25E 50                      push eax
:0041D25F 6807130000              push 00001307
:0041D264 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D267 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D268 FF15D8864B00            Call dword ptr [004B86D8]
:0041D26E 8BE5                    mov esp, ebp
:0041D270 5D                      pop ebp
:0041D271 C3                      ret



* Referenced by a CALL at Address:
|:0041CDE0   
|
:0041D272 55                      push ebp
:0041D273 8BEC                    mov ebp, esp
:0041D275 51                      push ecx
:0041D276 C745FC01000000          mov [ebp-04], 00000001
:0041D27D EB09                    jmp 0041D288

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D312(U)
|
:0041D27F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D282 83C001                  add eax, 00000001
:0041D285 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D27D(U)
|
:0041D288 837DFC07                cmp dword ptr [ebp-04], 00000007
:0041D28C 0F8385000000            jnb 0041D317
:0041D292 6A00                    push 00000000
:0041D294 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D297 6BC914                  imul ecx, 00000014
:0041D29A 8B8130684700            mov eax, dword ptr [ecx+00476830]
:0041D2A0 0FAF4510                imul eax, dword ptr [ebp+10]
:0041D2A4 99                      cdq
:0041D2A5 F73D30684700            idiv dword ptr [00476830]
:0041D2AB 50                      push eax
:0041D2AC 8B55FC                  mov edx, dword ptr [ebp-04]
:0041D2AF 6BD214                  imul edx, 00000014
:0041D2B2 8B822C684700            mov eax, dword ptr [edx+0047682C]
:0041D2B8 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041D2BC 99                      cdq
:0041D2BD F73D2C684700            idiv dword ptr [0047682C]
:0041D2C3 50                      push eax
:0041D2C4 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D2C7 6BC014                  imul eax, 00000014
:0041D2CA 8B8028684700            mov eax, dword ptr [eax+00476828]
:0041D2D0 0FAF4510                imul eax, dword ptr [ebp+10]
:0041D2D4 99                      cdq
:0041D2D5 F73D30684700            idiv dword ptr [00476830]
:0041D2DB 50                      push eax
:0041D2DC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D2DF 6BC914                  imul ecx, 00000014
:0041D2E2 8B8124684700            mov eax, dword ptr [ecx+00476824]
:0041D2E8 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041D2EC 99                      cdq
:0041D2ED F73D2C684700            idiv dword ptr [0047682C]
:0041D2F3 50                      push eax
:0041D2F4 8B55FC                  mov edx, dword ptr [ebp-04]
:0041D2F7 6BD214                  imul edx, 00000014
:0041D2FA 8B8220684700            mov eax, dword ptr [edx+00476820]
:0041D300 50                      push eax
:0041D301 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D304 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D305 FF15AC864B00            Call dword ptr [004B86AC]
:0041D30B 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041D30C FF15FC864B00            Call dword ptr [004B86FC]
:0041D312 E968FFFFFF              jmp 0041D27F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D28C(C)
|
:0041D317 8BE5                    mov esp, ebp
:0041D319 5D                      pop ebp
:0041D31A C3                      ret



* Referenced by a CALL at Addresses:
|:0041CD27   , :0041CE05   , :0041D0F1   
|
:0041D31B 55                      push ebp
:0041D31C 8BEC                    mov ebp, esp
:0041D31E 83EC14                  sub esp, 00000014
:0041D321 8D45F0                  lea eax, dword ptr [ebp-10]
:0041D324 50                      push eax
:0041D325 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D328 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0041D329 FF15C8864B00            Call dword ptr [004B86C8]
:0041D32F 8B45F8                  mov eax, dword ptr [ebp-08]
:0041D332 99                      cdq
:0041D333 2BC2                    sub eax, edx
:0041D335 D1F8                    sar eax, 1
:0041D337 8945EC                  mov dword ptr [ebp-14], eax
:0041D33A DB45EC                  fild dword ptr [ebp-14]
:0041D33D DC0D50404700            fmul qword ptr [00474050]
:0041D343 E8E80D0500              call 0046E130
:0041D348 25FFFF0000              and eax, 0000FFFF
:0041D34D 0D00001E00              or eax, 001E0000
:0041D352 50                      push eax
:0041D353 6A00                    push 00000000
:0041D355 6829130000              push 00001329
:0041D35A 8B5508                  mov edx, dword ptr [ebp+08]
:0041D35D 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D35E FF15D8864B00            Call dword ptr [004B86D8]
:0041D364 6A00                    push 00000000
:0041D366 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D369 83E81E                  sub eax, 0000001E
:0041D36C 50                      push eax
:0041D36D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041D370 51                      push ecx
:0041D371 6A1E                    push 0000001E
:0041D373 6A00                    push 00000000
:0041D375 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D378 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041D379 FF15FC864B00            Call dword ptr [004B86FC]
:0041D37F 8BE5                    mov esp, ebp
:0041D381 5D                      pop ebp
:0041D382 C3                      ret



* Referenced by a CALL at Address:
|:0041D059   
|
:0041D383 55                      push ebp
:0041D384 8BEC                    mov ebp, esp
:0041D386 83EC08                  sub esp, 00000008
:0041D389 C745FC00000000          mov [ebp-04], 00000000
:0041D390 C745F800000000          mov [ebp-08], 00000000
:0041D397 EB09                    jmp 0041D3A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3C1(U)
|
:0041D399 8B45F8                  mov eax, dword ptr [ebp-08]
:0041D39C 83C001                  add eax, 00000001
:0041D39F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D397(U)
|
:0041D3A2 837DF819                cmp dword ptr [ebp-08], 00000019
:0041D3A6 7D1B                    jge 0041D3C3
:0041D3A8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041D3AB 51                      push ecx
:0041D3AC E86F35FFFF              call 00410920
:0041D3B1 83C404                  add esp, 00000004
:0041D3B4 85C0                    test eax, eax
:0041D3B6 7409                    je 0041D3C1
:0041D3B8 8B55FC                  mov edx, dword ptr [ebp-04]
:0041D3BB 83C201                  add edx, 00000001
:0041D3BE 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3B6(C)
|
:0041D3C1 EBD6                    jmp 0041D399

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3A6(C)
|
:0041D3C3 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D3C6 8BE5                    mov esp, ebp
:0041D3C8 5D                      pop ebp
:0041D3C9 C3                      ret



* Referenced by a CALL at Addresses:
|:0041CEBE   , :0041CEF3   
|
:0041D3CA 55                      push ebp
:0041D3CB 8BEC                    mov ebp, esp
:0041D3CD 83EC10                  sub esp, 00000010
:0041D3D0 6A00                    push 00000000
:0041D3D2 6A00                    push 00000000
:0041D3D4 680B130000              push 0000130B
:0041D3D9 6868050000              push 00000568
:0041D3DE 8B4508                  mov eax, dword ptr [ebp+08]
:0041D3E1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D3E2 FF15AC864B00            Call dword ptr [004B86AC]
:0041D3E8 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D3E9 FF15D8864B00            Call dword ptr [004B86D8]
:0041D3EF 85C0                    test eax, eax
:0041D3F1 0F859A000000            jne 0041D491
:0041D3F7 837D1000                cmp dword ptr [ebp+10], 00000000
:0041D3FB 754B                    jne 0041D448
:0041D3FD 683E040000              push 0000043E
:0041D402 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D405 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D406 FF15AC864B00            Call dword ptr [004B86AC]
:0041D40C 50                      push eax
:0041D40D E883010000              call 0041D595
:0041D412 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:0041D415 683D040000              push 0000043D
:0041D41A 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D41D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D41E FF15AC864B00            Call dword ptr [004B86AC]
:0041D424 50                      push eax
:0041D425 E8CAACFFFF              call 004180F4
:0041D42A 83C404                  add esp, 00000004
:0041D42D 50                      push eax

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:0041D42E 683B040000              push 0000043B
:0041D433 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D436 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D437 FF15AC864B00            Call dword ptr [004B86AC]
:0041D43D 50                      push eax
:0041D43E E82E9EFFFF              call 00417271
:0041D443 83C408                  add esp, 00000008
:0041D446 EB0C                    jmp 0041D454

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3FB(C)
|
:0041D448 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D44B 51                      push ecx
:0041D44C E8DBBCFFFF              call 0041912C
:0041D451 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D446(U)
|
:0041D454 8B5510                  mov edx, dword ptr [ebp+10]
:0041D457 52                      push edx

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043B, ""
                                  |
:0041D458 683B040000              push 0000043B
:0041D45D 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D460 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D461 FF15AC864B00            Call dword ptr [004B86AC]
:0041D467 50                      push eax
:0041D468 E8CF9CFFFF              call 0041713C
:0041D46D 83C408                  add esp, 00000008
:0041D470 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041D473 51                      push ecx
:0041D474 683E040000              push 0000043E
:0041D479 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D47C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D47D FF15AC864B00            Call dword ptr [004B86AC]
:0041D483 50                      push eax
:0041D484 E8B39CFFFF              call 0041713C
:0041D489 83C408                  add esp, 00000008
:0041D48C E9AE000000              jmp 0041D53F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3F1(C)
|
:0041D491 837D1000                cmp dword ptr [ebp+10], 00000000
:0041D495 7564                    jne 0041D4FB

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041D497 68EA030000              push 000003EA
:0041D49C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D49F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D4A0 FF15AC864B00            Call dword ptr [004B86AC]
:0041D4A6 50                      push eax
:0041D4A7 E848ACFFFF              call 004180F4
:0041D4AC 83C404                  add esp, 00000004
:0041D4AF 50                      push eax
:0041D4B0 6835040000              push 00000435
:0041D4B5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D4B8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D4B9 FF15AC864B00            Call dword ptr [004B86AC]
:0041D4BF 50                      push eax
:0041D4C0 E8AC9DFFFF              call 00417271
:0041D4C5 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:0041D4C8 68FC030000              push 000003FC
:0041D4CD 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D4D0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D4D1 FF15AC864B00            Call dword ptr [004B86AC]
:0041D4D7 50                      push eax
:0041D4D8 E817ACFFFF              call 004180F4
:0041D4DD 83C404                  add esp, 00000004
:0041D4E0 50                      push eax
:0041D4E1 6836040000              push 00000436
:0041D4E6 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D4E9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D4EA FF15AC864B00            Call dword ptr [004B86AC]
:0041D4F0 50                      push eax
:0041D4F1 E87B9DFFFF              call 00417271
:0041D4F6 83C408                  add esp, 00000008
:0041D4F9 EB0C                    jmp 0041D507

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D495(C)
|
:0041D4FB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D4FE 51                      push ecx
:0041D4FF E8E6CDFFFF              call 0041A2EA
:0041D504 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D4F9(U)
|
:0041D507 8B5510                  mov edx, dword ptr [ebp+10]
:0041D50A 52                      push edx
:0041D50B 6835040000              push 00000435
:0041D510 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D513 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D514 FF15AC864B00            Call dword ptr [004B86AC]
:0041D51A 50                      push eax
:0041D51B E81C9CFFFF              call 0041713C
:0041D520 83C408                  add esp, 00000008
:0041D523 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041D526 51                      push ecx
:0041D527 6836040000              push 00000436
:0041D52C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D52F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D530 FF15AC864B00            Call dword ptr [004B86AC]
:0041D536 50                      push eax
:0041D537 E8009CFFFF              call 0041713C
:0041D53C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D48C(U)
|
:0041D53F 8D45F0                  lea eax, dword ptr [ebp-10]
:0041D542 50                      push eax
:0041D543 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D546 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0041D547 FF15C8864B00            Call dword ptr [004B86C8]
:0041D54D 8B55F8                  mov edx, dword ptr [ebp-08]
:0041D550 81E2FFFF0000            and edx, 0000FFFF
:0041D556 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D559 25FFFF0000              and eax, 0000FFFF
:0041D55E C1E010                  shl eax, 10
:0041D561 0BD0                    or edx, eax
:0041D563 52                      push edx
:0041D564 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0041D566 6A05                    push 00000005
:0041D568 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D56B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D56C FF15D8864B00            Call dword ptr [004B86D8]
:0041D572 6801010000              push 00000101
:0041D577 6A00                    push 00000000
:0041D579 6A00                    push 00000000
:0041D57B 6868050000              push 00000568
:0041D580 8B5508                  mov edx, dword ptr [ebp+08]
:0041D583 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D584 FF15AC864B00            Call dword ptr [004B86AC]
:0041D58A 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0041D58B FF1590874B00            Call dword ptr [004B8790]
:0041D591 8BE5                    mov esp, ebp
:0041D593 5D                      pop ebp
:0041D594 C3                      ret



* Referenced by a CALL at Addresses:
|:0041D40D   , :0041E80F   
|
:0041D595 55                      push ebp
:0041D596 8BEC                    mov ebp, esp
:0041D598 6A00                    push 00000000
:0041D59A 6A00                    push 00000000
:0041D59C 6809100000              push 00001009
:0041D5A1 8B4508                  mov eax, dword ptr [ebp+08]
:0041D5A4 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D5A5 FF15D8864B00            Call dword ptr [004B86D8]
:0041D5AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D5AE 51                      push ecx
:0041D5AF E851BFFFFF              call 00419505
:0041D5B4 83C404                  add esp, 00000004
:0041D5B7 5D                      pop ebp
:0041D5B8 C3                      ret



* Referenced by a CALL at Addresses:
|:00452D76   , :00452DB3   , :0045A969   
|
:0041D5B9 55                      push ebp
:0041D5BA 8BEC                    mov ebp, esp
:0041D5BC 6A00                    push 00000000
:0041D5BE 6847CC4100              push 0041CC47
:0041D5C3 A1380E4B00              mov eax, dword ptr [004B0E38]
:0041D5C8 50                      push eax

* Possible Reference to Dialog: DialogID_0134 
                                  |
:0041D5C9 6834010000              push 00000134
:0041D5CE 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041D5D4 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0041D5D5 FF1520874B00            Call dword ptr [004B8720]
:0041D5DB 5D                      pop ebp
:0041D5DC C3                      ret



* Referenced by a CALL at Addresses:
|:0041E3B0   , :0041EDF7   , :0041F0C1   , :0045C7B8   
|
:0041D5DD 55                      push ebp
:0041D5DE 8BEC                    mov ebp, esp
:0041D5E0 83EC08                  sub esp, 00000008
:0041D5E3 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D5E6 50                      push eax
:0041D5E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D5EA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D5EB FF15AC864B00            Call dword ptr [004B86AC]
:0041D5F1 8945FC                  mov dword ptr [ebp-04], eax
:0041D5F4 8B55FC                  mov edx, dword ptr [ebp-04]
:0041D5F7 52                      push edx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0041D5F8 FF15B8864B00            Call dword ptr [004B86B8]
:0041D5FE 8945F8                  mov dword ptr [ebp-08], eax
:0041D601 8B45F8                  mov eax, dword ptr [ebp-08]
:0041D604 50                      push eax
:0041D605 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D608 51                      push ecx
:0041D609 E815000000              call 0041D623
:0041D60E 83C408                  add esp, 00000008
:0041D611 8B55F8                  mov edx, dword ptr [ebp-08]
:0041D614 52                      push edx
:0041D615 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D618 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0041D619 FF15BC864B00            Call dword ptr [004B86BC]
:0041D61F 8BE5                    mov esp, ebp
:0041D621 5D                      pop ebp
:0041D622 C3                      ret



* Referenced by a CALL at Addresses:
|:0041D609   , :0041DDB3   
|
:0041D623 55                      push ebp
:0041D624 8BEC                    mov ebp, esp
:0041D626 83EC18                  sub esp, 00000018
:0041D629 B9C8E24A00              mov ecx, 004AE2C8
:0041D62E E89D200100              call 0042F6D0
:0041D633 83F864                  cmp eax, 00000064
:0041D636 7211                    jb 0041D649
:0041D638 680A0AFF02              push 02FF0A0A
:0041D63D 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D640 50                      push eax

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:0041D641 FF15B0844B00            Call dword ptr [004B84B0]
:0041D647 EB0F                    jmp 0041D658

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D636(C)
|
:0041D649 68FF0A0A02              push 020A0AFF
:0041D64E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D651 51                      push ecx

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:0041D652 FF15B0844B00            Call dword ptr [004B84B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D647(U)
|
:0041D658 6A01                    push 00000001
:0041D65A 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D65D 52                      push edx

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:0041D65E FF15AC844B00            Call dword ptr [004B84AC]

* Possible StringData Ref from Data Obj ->"ө"
                                  |
:0041D664 68DC764700              push 004776DC
:0041D669 6A00                    push 00000000
:0041D66B 6A00                    push 00000000
:0041D66D 6A00                    push 00000000
:0041D66F 6A00                    push 00000000
:0041D671 6888000000              push 00000088
:0041D676 6A00                    push 00000000
:0041D678 6A00                    push 00000000
:0041D67A 6A00                    push 00000000
:0041D67C 6858020000              push 00000258
:0041D681 6A00                    push 00000000
:0041D683 6A00                    push 00000000
:0041D685 6A00                    push 00000000

* Possible Reference to String Resource ID=00014: ""
                                  |
:0041D687 6A0E                    push 0000000E

* Reference To: GDI32.CreateFontA, Ord:002Bh
                                  |
:0041D689 FF15A8844B00            Call dword ptr [004B84A8]
:0041D68F 8945FC                  mov dword ptr [ebp-04], eax
:0041D692 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D695 50                      push eax
:0041D696 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D699 51                      push ecx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0041D69A FF159C844B00            Call dword ptr [004B849C]
:0041D6A0 8945E8                  mov dword ptr [ebp-18], eax
:0041D6A3 8D55EC                  lea edx, dword ptr [ebp-14]
:0041D6A6 52                      push edx
:0041D6A7 8B4508                  mov eax, dword ptr [ebp+08]
:0041D6AA 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0041D6AB FF15C8864B00            Call dword ptr [004B86C8]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0041D6B1 6A05                    push 00000005
:0041D6B3 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0041D6B6 51                      push ecx
:0041D6B7 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D6BA 52                      push edx

* Reference To: USER32.FillRect, Ord:00CCh
                                  |
:0041D6BB FF154C874B00            Call dword ptr [004B874C]
:0041D6C1 6A25                    push 00000025
:0041D6C3 8D45EC                  lea eax, dword ptr [ebp-14]
:0041D6C6 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041D6C7 6AFF                    push FFFFFFFF
:0041D6C9 B9C8E24A00              mov ecx, 004AE2C8
:0041D6CE E8FD1F0100              call 0042F6D0
:0041D6D3 50                      push eax

* Possible StringData Ref from Data Obj ->"ҫ %u"
                                  |
:0041D6D4 68E4764700              push 004776E4
:0041D6D9 E8E9A1FFFF              call 004178C7
:0041D6DE 83C408                  add esp, 00000008
:0041D6E1 50                      push eax
:0041D6E2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041D6E5 51                      push ecx

* Reference To: USER32.DrawTextA, Ord:00AAh
                                  |
:0041D6E6 FF1588874B00            Call dword ptr [004B8788]
:0041D6EC 8B55E8                  mov edx, dword ptr [ebp-18]
:0041D6EF 52                      push edx
:0041D6F0 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D6F3 50                      push eax

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0041D6F4 FF159C844B00            Call dword ptr [004B849C]
:0041D6FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D6FD 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0041D6FE FF158C844B00            Call dword ptr [004B848C]
:0041D704 8BE5                    mov esp, ebp
:0041D706 5D                      pop ebp
:0041D707 C3                      ret



* Referenced by a CALL at Address:
|:0041E6A0   
|
:0041D708 55                      push ebp
:0041D709 8BEC                    mov ebp, esp
:0041D70B 83EC08                  sub esp, 00000008
:0041D70E 8B4508                  mov eax, dword ptr [ebp+08]
:0041D711 8945F8                  mov dword ptr [ebp-08], eax
:0041D714 837DF800                cmp dword ptr [ebp-08], 00000000
:0041D718 7402                    je 0041D71C
:0041D71A EB09                    jmp 0041D725

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D718(C)
|
:0041D71C C745FC50000000          mov [ebp-04], 00000050
:0041D723 EB07                    jmp 0041D72C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D71A(U)
|
:0041D725 C745FC23000000          mov [ebp-04], 00000023

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D723(U)
|
:0041D72C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D72F 8BE5                    mov esp, ebp
:0041D731 5D                      pop ebp
:0041D732 C3                      ret



* Referenced by a CALL at Address:
|:004160FB   
|
:0041D733 55                      push ebp
:0041D734 8BEC                    mov ebp, esp
:0041D736 51                      push ecx
:0041D737 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D73A 25FFFF0000              and eax, 0000FFFF
:0041D73F 50                      push eax
:0041D740 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041D746 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0041D747 FF15E8864B00            Call dword ptr [004B86E8]
:0041D74D 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0041D750 6A03                    push 00000003
:0041D752 6A00                    push 00000000
:0041D754 6A00                    push 00000000
:0041D756 8B5514                  mov edx, dword ptr [ebp+14]
:0041D759 52                      push edx
:0041D75A 8B4510                  mov eax, dword ptr [ebp+10]
:0041D75D 50                      push eax
:0041D75E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D761 51                      push ecx
:0041D762 6A00                    push 00000000
:0041D764 6A00                    push 00000000
:0041D766 8B5508                  mov edx, dword ptr [ebp+08]
:0041D769 52                      push edx

* Reference To: USER32.DrawIconEx, Ord:00A5h
                                  |
:0041D76A FF153C874B00            Call dword ptr [004B873C]
:0041D770 8BE5                    mov esp, ebp
:0041D772 5D                      pop ebp
:0041D773 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A2DE   , :0041DF88   , :0041E8B2   , :0041E930   , :0041F5FF   
|:0041FAD4   , :0041FBEE   
|
:0041D774 55                      push ebp
:0041D775 8BEC                    mov ebp, esp
:0041D777 6848040000              push 00000448
:0041D77C 8B4508                  mov eax, dword ptr [ebp+08]
:0041D77F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D780 FF15AC864B00            Call dword ptr [004B86AC]
:0041D786 50                      push eax
:0041D787 E805BAFFFF              call 00419191
:0041D78C 83C404                  add esp, 00000004
:0041D78F 681A040000              push 0000041A
:0041D794 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D797 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D798 FF15AC864B00            Call dword ptr [004B86AC]
:0041D79E 50                      push eax
:0041D79F E8EDB9FFFF              call 00419191
:0041D7A4 83C404                  add esp, 00000004
:0041D7A7 6849040000              push 00000449
:0041D7AC 8B5508                  mov edx, dword ptr [ebp+08]
:0041D7AF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D7B0 FF15AC864B00            Call dword ptr [004B86AC]
:0041D7B6 50                      push eax
:0041D7B7 E8D5B9FFFF              call 00419191
:0041D7BC 83C404                  add esp, 00000004
:0041D7BF 8B4508                  mov eax, dword ptr [ebp+08]
:0041D7C2 50                      push eax
:0041D7C3 E805000000              call 0041D7CD
:0041D7C8 83C404                  add esp, 00000004
:0041D7CB 5D                      pop ebp
:0041D7CC C3                      ret



* Referenced by a CALL at Addresses:
|:0041D7C3   , :0041E490   
|
:0041D7CD 55                      push ebp
:0041D7CE 8BEC                    mov ebp, esp

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:0041D7D0 68F0764700              push 004776F0

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:04A9, ""
                                  |
:0041D7D5 68A9040000              push 000004A9
:0041D7DA 8B4508                  mov eax, dword ptr [ebp+08]
:0041D7DD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D7DE FF15AC864B00            Call dword ptr [004B86AC]
:0041D7E4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041D7E5 FF15B0864B00            Call dword ptr [004B86B0]
:0041D7EB 5D                      pop ebp
:0041D7EC C3                      ret


:0041D7ED 55                      push ebp
:0041D7EE 8BEC                    mov ebp, esp
:0041D7F0 83EC34                  sub esp, 00000034
:0041D7F3 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D7F6 8945DC                  mov dword ptr [ebp-24], eax
:0041D7F9 837DDC4E                cmp dword ptr [ebp-24], 0000004E
:0041D7FD 7719                    ja 0041D818
:0041D7FF 837DDC4E                cmp dword ptr [ebp-24], 0000004E
:0041D803 0F8475030000            je 0041DB7E
:0041D809 837DDC02                cmp dword ptr [ebp-24], 00000002
:0041D80D 0F841C020000            je 0041DA2F
:0041D813 E9DC030000              jmp 0041DBF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D7FD(C)
|
:0041D818 817DDC10010000          cmp dword ptr [ebp-24], 00000110
:0041D81F 7412                    je 0041D833
:0041D821 817DDC11010000          cmp dword ptr [ebp-24], 00000111
:0041D828 0F8419020000            je 0041DA47
:0041D82E E9C1030000              jmp 0041DBF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D81F(C)
|
:0041D833 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041D836 81E1FFFF0000            and ecx, 0000FFFF
:0041D83C 890D00584800            mov dword ptr [00485800], ecx
:0041D842 8B5514                  mov edx, dword ptr [ebp+14]
:0041D845 C1EA10                  shr edx, 10
:0041D848 81E2FFFF0000            and edx, 0000FFFF
:0041D84E 81E2FFFF0000            and edx, 0000FFFF
:0041D854 C1FA08                  sar edx, 08
:0041D857 8855E8                  mov byte ptr [ebp-18], dl
:0041D85A 8B4514                  mov eax, dword ptr [ebp+14]
:0041D85D C1E810                  shr eax, 10
:0041D860 25FFFF0000              and eax, 0000FFFF
:0041D865 8845E4                  mov byte ptr [ebp-1C], al
:0041D868 68B8050000              push 000005B8
:0041D86D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D870 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0041D871 FF1584874B00            Call dword ptr [004B8784]
:0041D877 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D878 FF15AC864B00            Call dword ptr [004B86AC]
:0041D87E 8945F0                  mov dword ptr [ebp-10], eax
:0041D881 8B55F0                  mov edx, dword ptr [ebp-10]
:0041D884 52                      push edx
:0041D885 E8D8AAFFFF              call 00418362
:0041D88A 83C404                  add esp, 00000004
:0041D88D 8945EC                  mov dword ptr [ebp-14], eax
:0041D890 8B45E8                  mov eax, dword ptr [ebp-18]
:0041D893 25FF000000              and eax, 000000FF
:0041D898 85C0                    test eax, eax
:0041D89A 7437                    je 0041D8D3
:0041D89C 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0041D89F 51                      push ecx
:0041D8A0 8B1500584800            mov edx, dword ptr [00485800]
:0041D8A6 52                      push edx
:0041D8A7 8B45EC                  mov eax, dword ptr [ebp-14]
:0041D8AA 50                      push eax
:0041D8AB E84C030000              call 0041DBFC
:0041D8B0 83C40C                  add esp, 0000000C
:0041D8B3 A260594800              mov byte ptr [00485960], al
:0041D8B8 8B0D00584800            mov ecx, dword ptr [00485800]
:0041D8BE 6BC933                  imul ecx, 00000033
:0041D8C1 81C1C8EF4800            add ecx, 0048EFC8
:0041D8C7 E894260000              call 0041FF60
:0041D8CC A308584800              mov dword ptr [00485808], eax
:0041D8D1 EB4D                    jmp 0041D920

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D89A(C)
|
:0041D8D3 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0041D8D6 51                      push ecx
:0041D8D7 8B1500584800            mov edx, dword ptr [00485800]
:0041D8DD 52                      push edx
:0041D8DE 8B45EC                  mov eax, dword ptr [ebp-14]
:0041D8E1 50                      push eax
:0041D8E2 E8AA030000              call 0041DC91
:0041D8E7 83C40C                  add esp, 0000000C
:0041D8EA A260594800              mov byte ptr [00485960], al
:0041D8EF 8B0D00584800            mov ecx, dword ptr [00485800]
:0041D8F5 6BC933                  imul ecx, 00000033
:0041D8F8 81C1C8EF4800            add ecx, 0048EFC8
:0041D8FE E85D260000              call 0041FF60
:0041D903 8945D4                  mov dword ptr [ebp-2C], eax
:0041D906 C745D800000000          mov [ebp-28], 00000000
:0041D90D DF6DD4                  fild qword ptr [ebp-2C]
:0041D910 DC0D58404700            fmul qword ptr [00474058]
:0041D916 E815080500              call 0046E130
:0041D91B A308584800              mov dword ptr [00485808], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D8D1(U)
|
:0041D920 33C9                    xor ecx, ecx
:0041D922 8A0D60594800            mov cl, byte ptr [00485960]
:0041D928 85C9                    test ecx, ecx
:0041D92A 7520                    jne 0041D94C
:0041D92C 8B55E8                  mov edx, dword ptr [ebp-18]
:0041D92F 81E2FF000000            and edx, 000000FF
:0041D935 85D2                    test edx, edx
:0041D937 7413                    je 0041D94C
:0041D939 6A00                    push 00000000
:0041D93B 8B4508                  mov eax, dword ptr [ebp+08]
:0041D93E 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041D93F FF15B0874B00            Call dword ptr [004B87B0]
:0041D945 33C0                    xor eax, eax
:0041D947 E9AA020000              jmp 0041DBF6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D92A(C), :0041D937(C)
|
:0041D94C 8B0D08584800            mov ecx, dword ptr [00485808]
:0041D952 51                      push ecx
:0041D953 8B0D00584800            mov ecx, dword ptr [00485800]
:0041D959 6BC933                  imul ecx, 00000033
:0041D95C 81C1C8EF4800            add ecx, 0048EFC8
:0041D962 E8499EFEFF              call 004077B0
:0041D967 50                      push eax

* Possible StringData Ref from Data Obj ->"1%sݭn%dAiHܡH"
                                  |
:0041D968 68FC764700              push 004776FC
:0041D96D 6841050000              push 00000541
:0041D972 8B5508                  mov edx, dword ptr [ebp+08]
:0041D975 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D976 FF15AC864B00            Call dword ptr [004B86AC]
:0041D97C 50                      push eax
:0041D97D E8885E0400              call 0046380A
:0041D982 83C410                  add esp, 00000010
:0041D985 6860050000              push 00000560
:0041D98A 8B4508                  mov eax, dword ptr [ebp+08]
:0041D98D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D98E FF15AC864B00            Call dword ptr [004B86AC]
:0041D994 8945F4                  mov dword ptr [ebp-0C], eax
:0041D997 6A00                    push 00000000
:0041D999 68F8040000              push 000004F8
:0041D99E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D9A1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041D9A2 FF15AC864B00            Call dword ptr [004B86AC]
:0041D9A8 50                      push eax
:0041D9A9 6869040000              push 00000469
:0041D9AE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041D9B1 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D9B2 FF15D8864B00            Call dword ptr [004B86D8]
:0041D9B8 33C0                    xor eax, eax
:0041D9BA A060594800              mov al, byte ptr [00485960]
:0041D9BF 0D00000100              or eax, 00010000
:0041D9C4 50                      push eax
:0041D9C5 6A00                    push 00000000
:0041D9C7 6865040000              push 00000465
:0041D9CC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041D9CF 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D9D0 FF15D8864B00            Call dword ptr [004B86D8]
:0041D9D6 6A01                    push 00000001
:0041D9D8 6A00                    push 00000000
:0041D9DA 6867040000              push 00000467
:0041D9DF 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041D9E2 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041D9E3 FF15D8864B00            Call dword ptr [004B86D8]
:0041D9E9 685E010000              push 0000015E
:0041D9EE A1300E4B00              mov eax, dword ptr [004B0E30]
:0041D9F3 50                      push eax
:0041D9F4 E8336EFFFF              call 0041482C
:0041D9F9 83C408                  add esp, 00000008
:0041D9FC A304584800              mov dword ptr [00485804], eax
:0041DA01 8B0D04584800            mov ecx, dword ptr [00485804]
:0041DA07 51                      push ecx
:0041DA08 6A00                    push 00000000
:0041DA0A 6872010000              push 00000172
:0041DA0F 6869050000              push 00000569
:0041DA14 8B5508                  mov edx, dword ptr [ebp+08]
:0041DA17 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041DA18 FF15AC864B00            Call dword ptr [004B86AC]
:0041DA1E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041DA1F FF15D8864B00            Call dword ptr [004B86D8]
:0041DA25 B801000000              mov eax, 00000001
:0041DA2A E9C7010000              jmp 0041DBF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D80D(C)
|
:0041DA2F A104584800              mov eax, dword ptr [00485804]
:0041DA34 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0041DA35 FF158C844B00            Call dword ptr [004B848C]
:0041DA3B C6056059480000          mov byte ptr [00485960], 00
:0041DA42 E9AD010000              jmp 0041DBF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D828(C)
|
:0041DA47 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041DA4A 81E1FFFF0000            and ecx, 0000FFFF
:0041DA50 894DD0                  mov dword ptr [ebp-30], ecx
:0041DA53 837DD001                cmp dword ptr [ebp-30], 00000001
:0041DA57 7414                    je 0041DA6D
:0041DA59 837DD002                cmp dword ptr [ebp-30], 00000002
:0041DA5D 743E                    je 0041DA9D
:0041DA5F 817DD0F8040000          cmp dword ptr [ebp-30], 000004F8
:0041DA66 744B                    je 0041DAB3
:0041DA68 E90F010000              jmp 0041DB7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA57(C)
|
:0041DA6D 6A00                    push 00000000
:0041DA6F 8D55FC                  lea edx, dword ptr [ebp-04]
:0041DA72 52                      push edx
:0041DA73 68F8040000              push 000004F8
:0041DA78 8B4508                  mov eax, dword ptr [ebp+08]
:0041DA7B 50                      push eax

* Reference To: USER32.GetDlgItemInt, Ord:00F4h
                                  |
:0041DA7C FF1544874B00            Call dword ptr [004B8744]
:0041DA82 8945F8                  mov dword ptr [ebp-08], eax
:0041DA85 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DA88 51                      push ecx
:0041DA89 8B5508                  mov edx, dword ptr [ebp+08]
:0041DA8C 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041DA8D FF15B0874B00            Call dword ptr [004B87B0]
:0041DA93 B801000000              mov eax, 00000001
:0041DA98 E959010000              jmp 0041DBF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA5D(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041DA9D 6AFF                    push FFFFFFFF
:0041DA9F 8B4508                  mov eax, dword ptr [ebp+08]
:0041DAA2 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041DAA3 FF15B0874B00            Call dword ptr [004B87B0]
:0041DAA9 B801000000              mov eax, 00000001
:0041DAAE E943010000              jmp 0041DBF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA66(C)
|
:0041DAB3 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041DAB6 C1E910                  shr ecx, 10
:0041DAB9 81E1FFFF0000            and ecx, 0000FFFF
:0041DABF 81E1FFFF0000            and ecx, 0000FFFF
:0041DAC5 81F900030000            cmp ecx, 00000300
:0041DACB 0F85AB000000            jne 0041DB7C
:0041DAD1 6A00                    push 00000000
:0041DAD3 8D55FC                  lea edx, dword ptr [ebp-04]
:0041DAD6 52                      push edx
:0041DAD7 68F8040000              push 000004F8
:0041DADC 8B4508                  mov eax, dword ptr [ebp+08]
:0041DADF 50                      push eax

* Reference To: USER32.GetDlgItemInt, Ord:00F4h
                                  |
:0041DAE0 FF1544874B00            Call dword ptr [004B8744]
:0041DAE6 8945F8                  mov dword ptr [ebp-08], eax
:0041DAE9 33C9                    xor ecx, ecx
:0041DAEB 8A0D60594800            mov cl, byte ptr [00485960]
:0041DAF1 394DF8                  cmp dword ptr [ebp-08], ecx
:0041DAF4 7E26                    jle 0041DB1C
:0041DAF6 33D2                    xor edx, edx
:0041DAF8 8A1560594800            mov dl, byte ptr [00485960]
:0041DAFE 8955F8                  mov dword ptr [ebp-08], edx
:0041DB01 6A00                    push 00000000
:0041DB03 33C0                    xor eax, eax
:0041DB05 A060594800              mov al, byte ptr [00485960]
:0041DB0A 50                      push eax
:0041DB0B 68F8040000              push 000004F8
:0041DB10 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DB13 51                      push ecx

* Reference To: USER32.SetDlgItemInt, Ord:01F1h
                                  |
:0041DB14 FF1550874B00            Call dword ptr [004B8750]
:0041DB1A EB20                    jmp 0041DB3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DAF4(C)
|
:0041DB1C 837DF801                cmp dword ptr [ebp-08], 00000001
:0041DB20 7D1A                    jge 0041DB3C
:0041DB22 C745F801000000          mov [ebp-08], 00000001
:0041DB29 6A00                    push 00000000
:0041DB2B 6A01                    push 00000001
:0041DB2D 68F8040000              push 000004F8
:0041DB32 8B5508                  mov edx, dword ptr [ebp+08]
:0041DB35 52                      push edx

* Reference To: USER32.SetDlgItemInt, Ord:01F1h
                                  |
:0041DB36 FF1550874B00            Call dword ptr [004B8750]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DB1A(U), :0041DB20(C)
|
:0041DB3C A108584800              mov eax, dword ptr [00485808]
:0041DB41 0FAF45F8                imul eax, dword ptr [ebp-08]
:0041DB45 50                      push eax
:0041DB46 8B0D00584800            mov ecx, dword ptr [00485800]
:0041DB4C 6BC933                  imul ecx, 00000033
:0041DB4F 81C1C8EF4800            add ecx, 0048EFC8
:0041DB55 E8569CFEFF              call 004077B0
:0041DB5A 50                      push eax
:0041DB5B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DB5E 51                      push ecx

* Possible StringData Ref from Data Obj ->"%d%sݭn%dAiHܡH"
                                  |
:0041DB5F 6818774700              push 00477718
:0041DB64 6841050000              push 00000541
:0041DB69 8B5508                  mov edx, dword ptr [ebp+08]
:0041DB6C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041DB6D FF15AC864B00            Call dword ptr [004B86AC]
:0041DB73 50                      push eax
:0041DB74 E8915C0400              call 0046380A
:0041DB79 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DA68(U), :0041DACB(C)
|
:0041DB7C EB76                    jmp 0041DBF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D803(C)
|
:0041DB7E 8B4514                  mov eax, dword ptr [ebp+14]
:0041DB81 8945E0                  mov dword ptr [ebp-20], eax
:0041DB84 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041DB87 8B510C                  mov edx, dword ptr [ecx+0C]
:0041DB8A 8B45E0                  mov eax, dword ptr [ebp-20]
:0041DB8D 035010                  add edx, dword ptr [eax+10]
:0041DB90 83FA01                  cmp edx, 00000001
:0041DB93 7D09                    jge 0041DB9E
:0041DB95 C745CC01000000          mov [ebp-34], 00000001
:0041DB9C EB0F                    jmp 0041DBAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DB93(C)
|
:0041DB9E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041DBA1 8B510C                  mov edx, dword ptr [ecx+0C]
:0041DBA4 8B45E0                  mov eax, dword ptr [ebp-20]
:0041DBA7 035010                  add edx, dword ptr [eax+10]
:0041DBAA 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DB9C(U)
|
:0041DBAD 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0041DBB0 894DF8                  mov dword ptr [ebp-08], ecx
:0041DBB3 8B1508584800            mov edx, dword ptr [00485808]
:0041DBB9 0FAF55F8                imul edx, dword ptr [ebp-08]
:0041DBBD 52                      push edx
:0041DBBE 8B0D00584800            mov ecx, dword ptr [00485800]
:0041DBC4 6BC933                  imul ecx, 00000033
:0041DBC7 81C1C8EF4800            add ecx, 0048EFC8
:0041DBCD E8DE9BFEFF              call 004077B0
:0041DBD2 50                      push eax
:0041DBD3 8B45F8                  mov eax, dword ptr [ebp-08]
:0041DBD6 50                      push eax

* Possible StringData Ref from Data Obj ->"%d%sݭn%dAiHܡH"
                                  |
:0041DBD7 6834774700              push 00477734
:0041DBDC 6841050000              push 00000541
:0041DBE1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DBE4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041DBE5 FF15AC864B00            Call dword ptr [004B86AC]
:0041DBEB 50                      push eax
:0041DBEC E8195C0400              call 0046380A
:0041DBF1 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D813(U), :0041D82E(U), :0041DA42(U), :0041DB7C(U)
|
:0041DBF4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D947(U), :0041DA2A(U), :0041DA98(U), :0041DAAE(U)
|
:0041DBF6 8BE5                    mov esp, ebp
:0041DBF8 5D                      pop ebp
:0041DBF9 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0041D8AB   
|
:0041DBFC 55                      push ebp
:0041DBFD 8BEC                    mov ebp, esp
:0041DBFF 83EC0C                  sub esp, 0000000C
:0041DC02 56                      push esi
:0041DC03 B9C8E24A00              mov ecx, 004AE2C8
:0041DC08 E8C31A0100              call 0042F6D0
:0041DC0D 8BF0                    mov esi, eax
:0041DC0F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041DC12 6BC933                  imul ecx, 00000033
:0041DC15 81C1C8EF4800            add ecx, 0048EFC8
:0041DC1B E840230000              call 0041FF60
:0041DC20 8BC8                    mov ecx, eax
:0041DC22 8BC6                    mov eax, esi
:0041DC24 33D2                    xor edx, edx
:0041DC26 F7F1                    div ecx
:0041DC28 8945F8                  mov dword ptr [ebp-08], eax
:0041DC2B 8B5510                  mov edx, dword ptr [ebp+10]
:0041DC2E 81E2FF000000            and edx, 000000FF
:0041DC34 85D2                    test edx, edx
:0041DC36 741B                    je 0041DC53
:0041DC38 B9C8E24A00              mov ecx, 004AE2C8
:0041DC3D E8E18BFEFF              call 00406823
:0041DC42 25FF000000              and eax, 000000FF
:0041DC47 B980000000              mov ecx, 00000080
:0041DC4C 2BC8                    sub ecx, eax
:0041DC4E 894DFC                  mov dword ptr [ebp-04], ecx
:0041DC51 EB20                    jmp 0041DC73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DC36(C)
|
:0041DC53 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DC56 6BC970                  imul ecx, 00000070
:0041DC59 81C198224900            add ecx, 00492298
:0041DC5F E8684DFEFF              call 004029CC
:0041DC64 25FF000000              and eax, 000000FF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0041DC69 BA08000000              mov edx, 00000008
:0041DC6E 2BD0                    sub edx, eax
:0041DC70 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DC51(U)
|
:0041DC73 8B45F8                  mov eax, dword ptr [ebp-08]
:0041DC76 3B45FC                  cmp eax, dword ptr [ebp-04]
:0041DC79 7D08                    jge 0041DC83
:0041DC7B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC7E 894DF4                  mov dword ptr [ebp-0C], ecx
:0041DC81 EB06                    jmp 0041DC89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DC79(C)
|
:0041DC83 8B55FC                  mov edx, dword ptr [ebp-04]
:0041DC86 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DC81(U)
|
:0041DC89 8A45F4                  mov al, byte ptr [ebp-0C]
:0041DC8C 5E                      pop esi
:0041DC8D 8BE5                    mov esp, ebp
:0041DC8F 5D                      pop ebp
:0041DC90 C3                      ret



* Referenced by a CALL at Address:
|:0041D8E2   
|
:0041DC91 55                      push ebp
:0041DC92 8BEC                    mov ebp, esp
:0041DC94 83EC08                  sub esp, 00000008
:0041DC97 C645FC00                mov [ebp-04], 00
:0041DC9B C745F800000000          mov [ebp-08], 00000000
:0041DCA2 8B4510                  mov eax, dword ptr [ebp+10]
:0041DCA5 25FF000000              and eax, 000000FF
:0041DCAA 85C0                    test eax, eax
:0041DCAC 743F                    je 0041DCED
:0041DCAE C745F800000000          mov [ebp-08], 00000000
:0041DCB5 EB09                    jmp 0041DCC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCE9(U)
|
:0041DCB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DCBA 83C101                  add ecx, 00000001
:0041DCBD 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCB5(U)
|
:0041DCC0 817DF880000000          cmp dword ptr [ebp-08], 00000080
:0041DCC7 7322                    jnb 0041DCEB
:0041DCC9 8B55F8                  mov edx, dword ptr [ebp-08]
:0041DCCC 52                      push edx
:0041DCCD B9C8E24A00              mov ecx, 004AE2C8
:0041DCD2 E889210000              call 0041FE60
:0041DCD7 25FFFF0000              and eax, 0000FFFF
:0041DCDC 3B450C                  cmp eax, dword ptr [ebp+0C]
:0041DCDF 7508                    jne 0041DCE9
:0041DCE1 8A45FC                  mov al, byte ptr [ebp-04]
:0041DCE4 0401                    add al, 01
:0041DCE6 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCDF(C)
|
:0041DCE9 EBCC                    jmp 0041DCB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCC7(C)
|
:0041DCEB EB41                    jmp 0041DD2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCAC(C)
|
:0041DCED C745F800000000          mov [ebp-08], 00000000
:0041DCF4 EB09                    jmp 0041DCFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DD2C(U)
|
:0041DCF6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DCF9 83C101                  add ecx, 00000001
:0041DCFC 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCF4(U)
|
:0041DCFF 837DF808                cmp dword ptr [ebp-08], 00000008
:0041DD03 7329                    jnb 0041DD2E
:0041DD05 8A55F8                  mov dl, byte ptr [ebp-08]
:0041DD08 52                      push edx
:0041DD09 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DD0C 6BC970                  imul ecx, 00000070
:0041DD0F 81C198224900            add ecx, 00492298
:0041DD15 E8F66AFEFF              call 00404810
:0041DD1A 25FF000000              and eax, 000000FF
:0041DD1F 3B450C                  cmp eax, dword ptr [ebp+0C]
:0041DD22 7508                    jne 0041DD2C
:0041DD24 8A45FC                  mov al, byte ptr [ebp-04]
:0041DD27 0401                    add al, 01
:0041DD29 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DD22(C)
|
:0041DD2C EBC8                    jmp 0041DCF6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DCEB(U), :0041DD03(C)
|
:0041DD2E 8A45FC                  mov al, byte ptr [ebp-04]
:0041DD31 8BE5                    mov esp, ebp
:0041DD33 5D                      pop ebp
:0041DD34 C3                      ret



* Referenced by a CALL at Addresses:
|:00415B63   , :004184C5   , :00418595   , :00418631   , :004186CF   
|:00418772   , :0041FC82   , :0045335B   , :0045341A   , :004534B7   
|:0045358B   , :0045DC2B   , :0045DCF1   , :00467B5B   
|
:0041DD35 55                      push ebp
:0041DD36 8BEC                    mov ebp, esp
:0041DD38 51                      push ecx
:0041DD39 837D1000                cmp dword ptr [ebp+10], 00000000
:0041DD3D 742C                    je 0041DD6B
:0041DD3F 680FC89602              push 0296C80F

* Reference To: GDI32.CreateSolidBrush, Ord:0040h
                                  |
:0041DD44 FF15D8844B00            Call dword ptr [004B84D8]
:0041DD4A 8945FC                  mov dword ptr [ebp-04], eax
:0041DD4D 8B45FC                  mov eax, dword ptr [ebp-04]
:0041DD50 50                      push eax
:0041DD51 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041DD54 51                      push ecx
:0041DD55 8B5508                  mov edx, dword ptr [ebp+08]
:0041DD58 52                      push edx

* Reference To: USER32.FillRect, Ord:00CCh
                                  |
:0041DD59 FF154C874B00            Call dword ptr [004B874C]
:0041DD5F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041DD62 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0041DD63 FF158C844B00            Call dword ptr [004B848C]
:0041DD69 EB17                    jmp 0041DD82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DD3D(C)
|
:0041DD6B 6A01                    push 00000001

* Reference To: GDI32.GetStockObject, Ord:00FAh
                                  |
:0041DD6D FF15C8844B00            Call dword ptr [004B84C8]
:0041DD73 50                      push eax
:0041DD74 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041DD77 51                      push ecx
:0041DD78 8B5508                  mov edx, dword ptr [ebp+08]
:0041DD7B 52                      push edx

* Reference To: USER32.FillRect, Ord:00CCh
                                  |
:0041DD7C FF154C874B00            Call dword ptr [004B874C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DD69(U)
|
:0041DD82 8BE5                    mov esp, ebp
:0041DD84 5D                      pop ebp
:0041DD85 C3                      ret



* Referenced by a CALL at Addresses:
|:0041DFDF   , :0045BF34   
|
:0041DD86 55                      push ebp
:0041DD87 8BEC                    mov ebp, esp
:0041DD89 83EC44                  sub esp, 00000044
:0041DD8C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041DD8F 50                      push eax
:0041DD90 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DD93 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041DD94 FF15AC864B00            Call dword ptr [004B86AC]
:0041DD9A 8945FC                  mov dword ptr [ebp-04], eax
:0041DD9D 8D55BC                  lea edx, dword ptr [ebp-44]
:0041DDA0 52                      push edx
:0041DDA1 8B45FC                  mov eax, dword ptr [ebp-04]
:0041DDA4 50                      push eax

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:0041DDA5 FF15D0864B00            Call dword ptr [004B86D0]
:0041DDAB 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0041DDAE 51                      push ecx
:0041DDAF 8B55FC                  mov edx, dword ptr [ebp-04]
:0041DDB2 52                      push edx
:0041DDB3 E86BF8FFFF              call 0041D623
:0041DDB8 83C408                  add esp, 00000008
:0041DDBB 8D45BC                  lea eax, dword ptr [ebp-44]
:0041DDBE 50                      push eax
:0041DDBF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DDC2 51                      push ecx

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:0041DDC3 FF15D4864B00            Call dword ptr [004B86D4]
:0041DDC9 8BE5                    mov esp, ebp
:0041DDCB 5D                      pop ebp
:0041DDCC C3                      ret


:0041DDCD 55                      push ebp
:0041DDCE 8BEC                    mov ebp, esp
:0041DDD0 83EC20                  sub esp, 00000020
:0041DDD3 8B450C                  mov eax, dword ptr [ebp+0C]
:0041DDD6 8945E0                  mov dword ptr [ebp-20], eax
:0041DDD9 837DE005                cmp dword ptr [ebp-20], 00000005
:0041DDDD 7719                    ja 0041DDF8
:0041DDDF 837DE005                cmp dword ptr [ebp-20], 00000005
:0041DDE3 0F84AD000000            je 0041DE96
:0041DDE9 837DE002                cmp dword ptr [ebp-20], 00000002
:0041DDED 0F84DD000000            je 0041DED0
:0041DDF3 E9E6020000              jmp 0041E0DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DDDD(C)
|
:0041DDF8 837DE02B                cmp dword ptr [ebp-20], 0000002B
:0041DDFC 7719                    ja 0041DE17
:0041DDFE 837DE02B                cmp dword ptr [ebp-20], 0000002B
:0041DE02 0F8471020000            je 0041E079
:0041DE08 837DE00F                cmp dword ptr [ebp-20], 0000000F
:0041DE0C 0F84B3010000            je 0041DFC5
:0041DE12 E9C7020000              jmp 0041E0DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DDFC(C)
|
:0041DE17 837DE04E                cmp dword ptr [ebp-20], 0000004E
:0041DE1B 7719                    ja 0041DE36
:0041DE1D 837DE04E                cmp dword ptr [ebp-20], 0000004E
:0041DE21 0F84C5010000            je 0041DFEC
:0041DE27 837DE02C                cmp dword ptr [ebp-20], 0000002C
:0041DE2B 0F8426020000            je 0041E057
:0041DE31 E9A8020000              jmp 0041E0DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DE1B(C)
|
:0041DE36 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041DE39 81E910010000            sub ecx, 00000110
:0041DE3F 894DE0                  mov dword ptr [ebp-20], ecx
:0041DE42 817DE0F2000000          cmp dword ptr [ebp-20], 000000F2
:0041DE49 0F878F020000            ja 0041E0DE
:0041DE4F 8B45E0                  mov eax, dword ptr [ebp-20]
:0041DE52 33D2                    xor edx, edx
:0041DE54 8A90FAE04100            mov dl, byte ptr [eax+0041E0FA]
:0041DE5A FF2495E6E04100          jmp dword ptr [4*edx+0041E0E6]
:0041DE61 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DE64 51                      push ecx
:0041DE65 E83F040000              call 0041E2A9
:0041DE6A 83C404                  add esp, 00000004
:0041DE6D 6889000000              push 00000089
:0041DE72 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0041DE78 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0041DE79 FF15E8864B00            Call dword ptr [004B86E8]
:0041DE7F 50                      push eax
:0041DE80 6ADE                    push FFFFFFDE
:0041DE82 8B4508                  mov eax, dword ptr [ebp+08]
:0041DE85 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:0041DE86 FF15A0874B00            Call dword ptr [004B87A0]
:0041DE8C B801000000              mov eax, 00000001
:0041DE91 E94A020000              jmp 0041E0E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DDE3(C)
|
:0041DE96 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041DE99 81E1FFFF0000            and ecx, 0000FFFF
:0041DE9F 894DFC                  mov dword ptr [ebp-04], ecx
:0041DEA2 8B5514                  mov edx, dword ptr [ebp+14]
:0041DEA5 C1EA10                  shr edx, 10
:0041DEA8 81E2FFFF0000            and edx, 0000FFFF
:0041DEAE 81E2FFFF0000            and edx, 0000FFFF
:0041DEB4 8955F8                  mov dword ptr [ebp-08], edx
:0041DEB7 8B45F8                  mov eax, dword ptr [ebp-08]
:0041DEBA 50                      push eax
:0041DEBB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DEBE 51                      push ecx
:0041DEBF 8B5508                  mov edx, dword ptr [ebp+08]
:0041DEC2 52                      push edx
:0041DEC3 E825030000              call 0041E1ED
:0041DEC8 83C40C                  add esp, 0000000C
:0041DECB E90E020000              jmp 0041E0DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DDED(C)
|
:0041DED0 6868594800              push 00485968
:0041DED5 8B4508                  mov eax, dword ptr [ebp+08]
:0041DED8 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0041DED9 FF1558874B00            Call dword ptr [004B8758]
:0041DEDF E9FA010000              jmp 0041E0DE
:0041DEE4 833D6459480000          cmp dword ptr [00485964], 00000000
:0041DEEB 7418                    je 0041DF05

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:0041DEED FF1564844B00            Call dword ptr [004B8464]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:0041DEF3 FF1554874B00            Call dword ptr [004B8754]
:0041DEF9 C7056459480000000000    mov dword ptr [00485964], 00000000
:0041DF03 EB21                    jmp 0041DF26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DEEB(C)
|
:0041DF05 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041DF08 51                      push ecx
:0041DF09 668B5510                mov dx, word ptr [ebp+10]
:0041DF0D 52                      push edx
:0041DF0E 8B4510                  mov eax, dword ptr [ebp+10]
:0041DF11 C1E810                  shr eax, 10
:0041DF14 25FFFF0000              and eax, 0000FFFF
:0041DF19 50                      push eax
:0041DF1A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DF1D 51                      push ecx
:0041DF1E E861080000              call 0041E784
:0041DF23 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DF03(U)
|
:0041DF26 E9B3010000              jmp 0041E0DE
:0041DF2B 833D6459480000          cmp dword ptr [00485964], 00000000
:0041DF32 745C                    je 0041DF90
:0041DF34 8B5514                  mov edx, dword ptr [ebp+14]
:0041DF37 52                      push edx
:0041DF38 6818594800              push 00485918
:0041DF3D 8B4508                  mov eax, dword ptr [ebp+08]
:0041DF40 50                      push eax
:0041DF41 E82B0A0000              call 0041E971
:0041DF46 83C40C                  add esp, 0000000C
:0041DF49 85C0                    test eax, eax
:0041DF4B 7421                    je 0041DF6E
:0041DF4D 68B8050000              push 000005B8
:0041DF52 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DF55 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041DF56 FF15AC864B00            Call dword ptr [004B86AC]
:0041DF5C 50                      push eax
:0041DF5D E800A4FFFF              call 00418362
:0041DF62 83C404                  add esp, 00000004
:0041DF65 50                      push eax
:0041DF66 E8E58F0400              call 00466F50
:0041DF6B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DF4B(C)
|

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:0041DF6E FF1564844B00            Call dword ptr [004B8464]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:0041DF74 FF1554874B00            Call dword ptr [004B8754]
:0041DF7A C7056459480000000000    mov dword ptr [00485964], 00000000
:0041DF84 8B5508                  mov edx, dword ptr [ebp+08]
:0041DF87 52                      push edx
:0041DF88 E8E7F7FFFF              call 0041D774
:0041DF8D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DF32(C)
|
:0041DF90 E949010000              jmp 0041E0DE
:0041DF95 833D6459480000          cmp dword ptr [00485964], 00000000
:0041DF9C 7422                    je 0041DFC0
:0041DF9E 8D45F0                  lea eax, dword ptr [ebp-10]
:0041DFA1 50                      push eax

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:0041DFA2 FF1560874B00            Call dword ptr [004B8760]
:0041DFA8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041DFAB 51                      push ecx
:0041DFAC 8B55F0                  mov edx, dword ptr [ebp-10]
:0041DFAF 52                      push edx

* Reference To: COMCTL32.ImageList_DragMove, Ord:001Ah
                                  |
:0041DFB0 FF1560844B00            Call dword ptr [004B8460]
:0041DFB6 B801000000              mov eax, 00000001
:0041DFBB E920010000              jmp 0041E0E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DF9C(C)
|
:0041DFC0 E919010000              jmp 0041E0DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DE0C(C)
|
:0041DFC5 6842010000              push 00000142
:0041DFCA 8B4508                  mov eax, dword ptr [ebp+08]
:0041DFCD 50                      push eax
:0041DFCE E81BCE0300              call 0045ADEE
:0041DFD3 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0475, ""
                                  |
:0041DFD6 6875040000              push 00000475
:0041DFDB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DFDE 51                      push ecx
:0041DFDF E8A2FDFFFF              call 0041DD86
:0041DFE4 83C408                  add esp, 00000008
:0041DFE7 E9F2000000              jmp 0041E0DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DE21(C)
|
:0041DFEC 8B5510                  mov edx, dword ptr [ebp+10]
:0041DFEF 8955EC                  mov dword ptr [ebp-14], edx
:0041DFF2 817DECB8050000          cmp dword ptr [ebp-14], 000005B8
:0041DFF9 751A                    jne 0041E015
:0041DFFB 8B4514                  mov eax, dword ptr [ebp+14]
:0041DFFE 50                      push eax
:0041DFFF 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041E002 51                      push ecx
:0041E003 8B550C                  mov edx, dword ptr [ebp+0C]
:0041E006 52                      push edx
:0041E007 8B4508                  mov eax, dword ptr [ebp+08]
:0041E00A 50                      push eax
:0041E00B E8BE140000              call 0041F4CE
:0041E010 83C410                  add esp, 00000010
:0041E013 EB3D                    jmp 0041E052

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DFF9(C)
|
:0041E015 817DEC48040000          cmp dword ptr [ebp-14], 00000448
:0041E01C 7412                    je 0041E030
:0041E01E 817DEC1A040000          cmp dword ptr [ebp-14], 0000041A
:0041E025 7409                    je 0041E030
:0041E027 817DEC49040000          cmp dword ptr [ebp-14], 00000449
:0041E02E 7522                    jne 0041E052

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E01C(C), :0041E025(C)
|
:0041E030 6864594800              push 00485964
:0041E035 6818594800              push 00485918
:0041E03A 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041E03D 51                      push ecx
:0041E03E 8B5510                  mov edx, dword ptr [ebp+10]
:0041E041 52                      push edx
:0041E042 8B450C                  mov eax, dword ptr [ebp+0C]
:0041E045 50                      push eax
:0041E046 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E049 51                      push ecx
:0041E04A E8D8170000              call 0041F827
:0041E04F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E013(U), :0041E02E(C)
|
:0041E052 E987000000              jmp 0041E0DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DE2B(C)
|
:0041E057 8B5514                  mov edx, dword ptr [ebp+14]
:0041E05A 52                      push edx
:0041E05B 8B4510                  mov eax, dword ptr [ebp+10]
:0041E05E 50                      push eax
:0041E05F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E062 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E063 FF15AC864B00            Call dword ptr [004B86AC]
:0041E069 50                      push eax
:0041E06A E85DA3FFFF              call 004183CC
:0041E06F 83C408                  add esp, 00000008
:0041E072 B801000000              mov eax, 00000001
:0041E077 EB67                    jmp 0041E0E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DE02(C)
|
:0041E079 8B5514                  mov edx, dword ptr [ebp+14]
:0041E07C 8955E8                  mov dword ptr [ebp-18], edx
:0041E07F 8B45E8                  mov eax, dword ptr [ebp-18]
:0041E082 817804B8050000          cmp dword ptr [eax+04], 000005B8
:0041E089 750E                    jne 0041E099
:0041E08B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041E08E 51                      push ecx
:0041E08F E87A1B0000              call 0041FC0E
:0041E094 83C404                  add esp, 00000004
:0041E097 EB3E                    jmp 0041E0D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E089(C)
|
:0041E099 C745E4FFFF0000          mov [ebp-1C], 0000FFFF
:0041E0A0 8B55E8                  mov edx, dword ptr [ebp-18]
:0041E0A3 817A041A040000          cmp dword ptr [edx+04], 0000041A
:0041E0AA 751B                    jne 0041E0C7
:0041E0AC 68B8050000              push 000005B8
:0041E0B1 8B4508                  mov eax, dword ptr [ebp+08]
:0041E0B4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E0B5 FF15AC864B00            Call dword ptr [004B86AC]
:0041E0BB 50                      push eax
:0041E0BC E8A1A2FFFF              call 00418362
:0041E0C1 83C404                  add esp, 00000004
:0041E0C4 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E0AA(C)
|
:0041E0C7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041E0CA 51                      push ecx
:0041E0CB 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041E0CE 52                      push edx
:0041E0CF E823A3FFFF              call 004183F7
:0041E0D4 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E097(U)
|
:0041E0D7 B801000000              mov eax, 00000001
:0041E0DC EB02                    jmp 0041E0E0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DDF3(U), :0041DE12(U), :0041DE31(U), :0041DE49(C), :0041DECB(U)
|:0041DEDF(U), :0041DF26(U), :0041DF90(U), :0041DFC0(U), :0041DFE7(U)
|:0041E052(U)
|
:0041E0DE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DE91(U), :0041DFBB(U), :0041E077(U), :0041E0DC(U)
|
:0041E0E0 8BE5                    mov esp, ebp
:0041E0E2 5D                      pop ebp
:0041E0E3 C21000                  ret 0010



:0041E0E6 61DE4100                DWORD 0041DE61
:0041E0EA E4DE4100                DWORD 0041DEE4
:0041E0EE 95DF4100                DWORD 0041DF95
:0041E0F2 2BDF4100                DWORD 0041DF2B
:0041E0F6 DEE04100                DWORD 0041E0DE


:0041E0FA 0001                    add byte ptr [ecx], al
:0041E0FC 0404                    add al, 04
:0041E0FE 0404                    add al, 04
:0041E100 0404                    add al, 04
:0041E102 0404                    add al, 04
:0041E104 0404                    add al, 04
:0041E106 0404                    add al, 04
:0041E108 0404                    add al, 04
:0041E10A 0404                    add al, 04
:0041E10C 0404                    add al, 04
:0041E10E 0404                    add al, 04
:0041E110 0404                    add al, 04
:0041E112 0404                    add al, 04
:0041E114 0404                    add al, 04
:0041E116 0404                    add al, 04
:0041E118 0404                    add al, 04
:0041E11A 0404                    add al, 04
:0041E11C 0404                    add al, 04
:0041E11E 0404                    add al, 04
:0041E120 0404                    add al, 04
:0041E122 0404                    add al, 04
:0041E124 0404                    add al, 04
:0041E126 0404                    add al, 04
:0041E128 0404                    add al, 04
:0041E12A 0404                    add al, 04
:0041E12C 0404                    add al, 04
:0041E12E 0404                    add al, 04
:0041E130 0404                    add al, 04
:0041E132 0404                    add al, 04
:0041E134 0404                    add al, 04
:0041E136 0404                    add al, 04
:0041E138 0404                    add al, 04
:0041E13A 0404                    add al, 04
:0041E13C 0404                    add al, 04
:0041E13E 0404                    add al, 04
:0041E140 0404                    add al, 04
:0041E142 0404                    add al, 04
:0041E144 0404                    add al, 04
:0041E146 0404                    add al, 04
:0041E148 0404                    add al, 04
:0041E14A 0404                    add al, 04
:0041E14C 0404                    add al, 04
:0041E14E 0404                    add al, 04
:0041E150 0404                    add al, 04
:0041E152 0404                    add al, 04
:0041E154 0404                    add al, 04
:0041E156 0404                    add al, 04
:0041E158 0404                    add al, 04
:0041E15A 0404                    add al, 04
:0041E15C 0404                    add al, 04
:0041E15E 0404                    add al, 04
:0041E160 0404                    add al, 04
:0041E162 0404                    add al, 04
:0041E164 0404                    add al, 04
:0041E166 0404                    add al, 04
:0041E168 0404                    add al, 04
:0041E16A 0404                    add al, 04
:0041E16C 0404                    add al, 04
:0041E16E 0404                    add al, 04
:0041E170 0404                    add al, 04
:0041E172 0404                    add al, 04
:0041E174 0404                    add al, 04
:0041E176 0404                    add al, 04
:0041E178 0404                    add al, 04
:0041E17A 0404                    add al, 04
:0041E17C 0404                    add al, 04
:0041E17E 0404                    add al, 04
:0041E180 0404                    add al, 04
:0041E182 0404                    add al, 04
:0041E184 0404                    add al, 04
:0041E186 0404                    add al, 04
:0041E188 0404                    add al, 04
:0041E18A 0404                    add al, 04
:0041E18C 0404                    add al, 04
:0041E18E 0404                    add al, 04
:0041E190 0404                    add al, 04
:0041E192 0404                    add al, 04
:0041E194 0404                    add al, 04
:0041E196 0404                    add al, 04
:0041E198 0404                    add al, 04
:0041E19A 0404                    add al, 04
:0041E19C 0404                    add al, 04
:0041E19E 0404                    add al, 04
:0041E1A0 0404                    add al, 04
:0041E1A2 0404                    add al, 04
:0041E1A4 0404                    add al, 04
:0041E1A6 0404                    add al, 04
:0041E1A8 0404                    add al, 04
:0041E1AA 0404                    add al, 04
:0041E1AC 0404                    add al, 04
:0041E1AE 0404                    add al, 04
:0041E1B0 0404                    add al, 04
:0041E1B2 0404                    add al, 04
:0041E1B4 0404                    add al, 04
:0041E1B6 0404                    add al, 04
:0041E1B8 0404                    add al, 04
:0041E1BA 0404                    add al, 04
:0041E1BC 0404                    add al, 04
:0041E1BE 0404                    add al, 04
:0041E1C0 0404                    add al, 04
:0041E1C2 0404                    add al, 04
:0041E1C4 0404                    add al, 04
:0041E1C6 0404                    add al, 04
:0041E1C8 0404                    add al, 04
:0041E1CA 0404                    add al, 04
:0041E1CC 0404                    add al, 04
:0041E1CE 0404                    add al, 04
:0041E1D0 0404                    add al, 04
:0041E1D2 0404                    add al, 04
:0041E1D4 0404                    add al, 04
:0041E1D6 0404                    add al, 04
:0041E1D8 0404                    add al, 04
:0041E1DA 0404                    add al, 04
:0041E1DC 0404                    add al, 04
:0041E1DE 0404                    add al, 04
:0041E1E0 0404                    add al, 04
:0041E1E2 0404                    add al, 04
:0041E1E4 0404                    add al, 04
:0041E1E6 0404                    add al, 04
:0041E1E8 0404                    add al, 04
:0041E1EA 020403                  add al, byte ptr [ebx+eax]

* Referenced by a CALL at Address:
|:0041DEC3   
|
:0041E1ED 55                      push ebp
:0041E1EE 8BEC                    mov ebp, esp
:0041E1F0 51                      push ecx
:0041E1F1 C745FC01000000          mov [ebp-04], 00000001
:0041E1F8 EB09                    jmp 0041E203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E28D(U)
|
:0041E1FA 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E1FD 83C001                  add eax, 00000001
:0041E200 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E1F8(U)
|
:0041E203 837DFC0E                cmp dword ptr [ebp-04], 0000000E
:0041E207 0F8385000000            jnb 0041E292
:0041E20D 6A00                    push 00000000
:0041E20F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E212 6BC914                  imul ecx, 00000014
:0041E215 8B8138704700            mov eax, dword ptr [ecx+00477038]
:0041E21B 0FAF4510                imul eax, dword ptr [ebp+10]
:0041E21F 99                      cdq
:0041E220 F73D38704700            idiv dword ptr [00477038]
:0041E226 50                      push eax
:0041E227 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E22A 6BD214                  imul edx, 00000014
:0041E22D 8B8234704700            mov eax, dword ptr [edx+00477034]
:0041E233 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041E237 99                      cdq
:0041E238 F73D34704700            idiv dword ptr [00477034]
:0041E23E 50                      push eax
:0041E23F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E242 6BC014                  imul eax, 00000014
:0041E245 8B8030704700            mov eax, dword ptr [eax+00477030]
:0041E24B 0FAF4510                imul eax, dword ptr [ebp+10]
:0041E24F 99                      cdq
:0041E250 F73D38704700            idiv dword ptr [00477038]
:0041E256 50                      push eax
:0041E257 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E25A 6BC914                  imul ecx, 00000014
:0041E25D 8B812C704700            mov eax, dword ptr [ecx+0047702C]
:0041E263 0FAF450C                imul eax, dword ptr [ebp+0C]
:0041E267 99                      cdq
:0041E268 F73D34704700            idiv dword ptr [00477034]
:0041E26E 50                      push eax
:0041E26F 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E272 6BD214                  imul edx, 00000014
:0041E275 8B8228704700            mov eax, dword ptr [edx+00477028]
:0041E27B 50                      push eax
:0041E27C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E27F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E280 FF15AC864B00            Call dword ptr [004B86AC]
:0041E286 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0041E287 FF15FC864B00            Call dword ptr [004B86FC]
:0041E28D E968FFFFFF              jmp 0041E1FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E207(C)
|
:0041E292 6801010000              push 00000101
:0041E297 6A00                    push 00000000
:0041E299 6A00                    push 00000000
:0041E29B 8B5508                  mov edx, dword ptr [ebp+08]
:0041E29E 52                      push edx

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0041E29F FF1590874B00            Call dword ptr [004B8790]
:0041E2A5 8BE5                    mov esp, ebp
:0041E2A7 5D                      pop ebp
:0041E2A8 C3                      ret



* Referenced by a CALL at Address:
|:0041DE65   
|
:0041E2A9 55                      push ebp
:0041E2AA 8BEC                    mov ebp, esp
:0041E2AC 83EC30                  sub esp, 00000030
:0041E2AF 6A00                    push 00000000
:0041E2B1 B9C8E24A00              mov ecx, 004AE2C8
:0041E2B6 E8E51C0000              call 0041FFA0
:0041E2BB 85C0                    test eax, eax
:0041E2BD 746F                    je 0041E32E
:0041E2BF 6A00                    push 00000000
:0041E2C1 6A01                    push 00000001
:0041E2C3 68F1000000              push 000000F1

* Possible Reference to Dialog: DialogID_00E9, CONTROL_ID:043C, "X"
                                  |
:0041E2C8 683C040000              push 0000043C
:0041E2CD 8B4508                  mov eax, dword ptr [ebp+08]
:0041E2D0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E2D1 FF15AC864B00            Call dword ptr [004B86AC]
:0041E2D7 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E2D8 FF15D8864B00            Call dword ptr [004B86D8]
:0041E2DE 6A00                    push 00000000
:0041E2E0 6848040000              push 00000448
:0041E2E5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E2E8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E2E9 FF15AC864B00            Call dword ptr [004B86AC]
:0041E2EF 50                      push eax
:0041E2F0 E8478EFFFF              call 0041713C
:0041E2F5 83C408                  add esp, 00000008
:0041E2F8 6A00                    push 00000000
:0041E2FA 681A040000              push 0000041A
:0041E2FF 8B5508                  mov edx, dword ptr [ebp+08]
:0041E302 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E303 FF15AC864B00            Call dword ptr [004B86AC]
:0041E309 50                      push eax
:0041E30A E82D8EFFFF              call 0041713C
:0041E30F 83C408                  add esp, 00000008
:0041E312 6A00                    push 00000000
:0041E314 6849040000              push 00000449
:0041E319 8B4508                  mov eax, dword ptr [ebp+08]
:0041E31C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E31D FF15AC864B00            Call dword ptr [004B86AC]
:0041E323 50                      push eax
:0041E324 E8138EFFFF              call 0041713C
:0041E329 83C408                  add esp, 00000008
:0041E32C EB6D                    jmp 0041E39B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E2BD(C)
|
:0041E32E 6A00                    push 00000000
:0041E330 6A01                    push 00000001
:0041E332 68F1000000              push 000000F1

* Possible Reference to Dialog: DialogID_00EA, CONTROL_ID:043D, ""
                                  |
:0041E337 683D040000              push 0000043D
:0041E33C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E33F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E340 FF15AC864B00            Call dword ptr [004B86AC]
:0041E346 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E347 FF15D8864B00            Call dword ptr [004B86D8]
:0041E34D 6A01                    push 00000001
:0041E34F 6848040000              push 00000448
:0041E354 8B5508                  mov edx, dword ptr [ebp+08]
:0041E357 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E358 FF15AC864B00            Call dword ptr [004B86AC]
:0041E35E 50                      push eax
:0041E35F E8D88DFFFF              call 0041713C
:0041E364 83C408                  add esp, 00000008
:0041E367 6A01                    push 00000001
:0041E369 681A040000              push 0000041A
:0041E36E 8B4508                  mov eax, dword ptr [ebp+08]
:0041E371 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E372 FF15AC864B00            Call dword ptr [004B86AC]
:0041E378 50                      push eax
:0041E379 E8BE8DFFFF              call 0041713C
:0041E37E 83C408                  add esp, 00000008
:0041E381 6A01                    push 00000001
:0041E383 6849040000              push 00000449
:0041E388 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E38B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E38C FF15AC864B00            Call dword ptr [004B86AC]
:0041E392 50                      push eax
:0041E393 E8A48DFFFF              call 0041713C
:0041E398 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E32C(U)
|
:0041E39B 8B5508                  mov edx, dword ptr [ebp+08]
:0041E39E 52                      push edx
:0041E39F E84D020000              call 0041E5F1
:0041E3A4 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0475, ""
                                  |
:0041E3A7 6875040000              push 00000475
:0041E3AC 8B4508                  mov eax, dword ptr [ebp+08]
:0041E3AF 50                      push eax
:0041E3B0 E828F2FFFF              call 0041D5DD
:0041E3B5 83C408                  add esp, 00000008
:0041E3B8 B910584800              mov ecx, 00485810
:0041E3BD E8DE4A0300              call 00452EA0
:0041E3C2 8945F8                  mov dword ptr [ebp-08], eax
:0041E3C5 B910584800              mov ecx, 00485810
:0041E3CA E8C183FFFF              call 00416790
:0041E3CF 8945FC                  mov dword ptr [ebp-04], eax
:0041E3D2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E3D5 51                      push ecx
:0041E3D6 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E3D9 52                      push edx
:0041E3DA 6A00                    push 00000000
:0041E3DC 681A040000              push 0000041A
:0041E3E1 8B4508                  mov eax, dword ptr [ebp+08]
:0041E3E4 50                      push eax
:0041E3E5 E815B0FFFF              call 004193FF
:0041E3EA 83C414                  add esp, 00000014
:0041E3ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E3F0 51                      push ecx
:0041E3F1 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E3F4 52                      push edx
:0041E3F5 6849040000              push 00000449
:0041E3FA 8B4508                  mov eax, dword ptr [ebp+08]
:0041E3FD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E3FE FF15AC864B00            Call dword ptr [004B86AC]
:0041E404 50                      push eax
:0041E405 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E408 51                      push ecx
:0041E409 E880B0FFFF              call 0041948E
:0041E40E 83C410                  add esp, 00000010
:0041E411 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E414 52                      push edx
:0041E415 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E418 50                      push eax
:0041E419 6848040000              push 00000448
:0041E41E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E421 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E422 FF15AC864B00            Call dword ptr [004B86AC]
:0041E428 50                      push eax
:0041E429 8B5508                  mov edx, dword ptr [ebp+08]
:0041E42C 52                      push edx
:0041E42D E86A000000              call 0041E49C
:0041E432 83C410                  add esp, 00000010
:0041E435 6849040000              push 00000449
:0041E43A 8B4508                  mov eax, dword ptr [ebp+08]
:0041E43D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E43E FF15AC864B00            Call dword ptr [004B86AC]
:0041E444 50                      push eax
:0041E445 686C040000              push 0000046C
:0041E44A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E44D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E44E FF15AC864B00            Call dword ptr [004B86AC]
:0041E454 50                      push eax
:0041E455 E868B1FFFF              call 004195C2
:0041E45A 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0041E45D C745E003000000          mov [ebp-20], 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0041E464 C745DC03000000          mov [ebp-24], 00000003
:0041E46B 8D55D0                  lea edx, dword ptr [ebp-30]
:0041E46E 52                      push edx
:0041E46F 6A00                    push 00000000
:0041E471 682B100000              push 0000102B
:0041E476 68B8050000              push 000005B8
:0041E47B 8B4508                  mov eax, dword ptr [ebp+08]
:0041E47E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E47F FF15AC864B00            Call dword ptr [004B86AC]
:0041E485 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E486 FF15D8864B00            Call dword ptr [004B86D8]
:0041E48C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E48F 51                      push ecx
:0041E490 E838F3FFFF              call 0041D7CD
:0041E495 83C404                  add esp, 00000004
:0041E498 8BE5                    mov esp, ebp
:0041E49A 5D                      pop ebp
:0041E49B C3                      ret



* Referenced by a CALL at Address:
|:0041E42D   
|
:0041E49C 55                      push ebp
:0041E49D 8BEC                    mov ebp, esp
:0041E49F 8B450C                  mov eax, dword ptr [ebp+0C]
:0041E4A2 50                      push eax
:0041E4A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E4A6 51                      push ecx
:0041E4A7 E8C48EFFFF              call 00417370
:0041E4AC 83C408                  add esp, 00000008
:0041E4AF 8B5510                  mov edx, dword ptr [ebp+10]
:0041E4B2 52                      push edx
:0041E4B3 6A01                    push 00000001
:0041E4B5 6803100000              push 00001003
:0041E4BA 8B450C                  mov eax, dword ptr [ebp+0C]
:0041E4BD 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E4BE FF15D8864B00            Call dword ptr [004B86D8]
:0041E4C4 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041E4C7 51                      push ecx
:0041E4C8 6A00                    push 00000000
:0041E4CA 6803100000              push 00001003
:0041E4CF 8B550C                  mov edx, dword ptr [ebp+0C]
:0041E4D2 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E4D3 FF15D8864B00            Call dword ptr [004B86D8]
:0041E4D9 8B450C                  mov eax, dword ptr [ebp+0C]
:0041E4DC 50                      push eax
:0041E4DD E831000000              call 0041E513
:0041E4E2 83C404                  add esp, 00000004
:0041E4E5 68BDBDBD02              push 02BDBDBD
:0041E4EA 6A00                    push 00000000
:0041E4EC 6801100000              push 00001001
:0041E4F1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041E4F4 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E4F5 FF15D8864B00            Call dword ptr [004B86D8]
:0041E4FB 68BDBDBD02              push 02BDBDBD
:0041E500 6A00                    push 00000000
:0041E502 6826100000              push 00001026
:0041E507 8B550C                  mov edx, dword ptr [ebp+0C]
:0041E50A 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E50B FF15D8864B00            Call dword ptr [004B86D8]
:0041E511 5D                      pop ebp
:0041E512 C3                      ret



* Referenced by a CALL at Addresses:
|:0041E4DD   , :0041E967   
|
:0041E513 55                      push ebp
:0041E514 8BEC                    mov ebp, esp
:0041E516 83EC38                  sub esp, 00000038

* Possible Reference to String Resource ID=00015: ""
                                  |
:0041E519 C745CC0F000000          mov [ebp-34], 0000000F
:0041E520 C745D800000000          mov [ebp-28], 00000000
:0041E527 C745DC00000000          mov [ebp-24], 00000000
:0041E52E C745D400000000          mov [ebp-2C], 00000000
:0041E535 C745E0FFFFFFFF          mov [ebp-20], FFFFFFFF
:0041E53C C745E420000000          mov [ebp-1C], 00000020
:0041E543 C745F800000000          mov [ebp-08], 00000000
:0041E54A B9C8E24A00              mov ecx, 004AE2C8
:0041E54F E8CC120100              call 0042F820
:0041E554 25FF000000              and eax, 000000FF
:0041E559 8945FC                  mov dword ptr [ebp-04], eax
:0041E55C C745F400000000          mov [ebp-0C], 00000000
:0041E563 EB09                    jmp 0041E56E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E5E8(U)
|
:0041E565 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E568 83C001                  add eax, 00000001
:0041E56B 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E563(U)
|
:0041E56E 837DF41C                cmp dword ptr [ebp-0C], 0000001C
:0041E572 7379                    jnb 0041E5ED
:0041E574 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041E577 33D2                    xor edx, edx
:0041E579 8A9100684700            mov dl, byte ptr [ecx+00476800]
:0041E57F 3B55FC                  cmp edx, dword ptr [ebp-04]
:0041E582 7F64                    jg 0041E5E8
:0041E584 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E587 33C9                    xor ecx, ecx
:0041E589 8A88E0674700            mov cl, byte ptr [eax+004767E0]
:0041E58F 894DC8                  mov dword ptr [ebp-38], ecx
:0041E592 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0041E595 6BC933                  imul ecx, 00000033
:0041E598 81C1C8EF4800            add ecx, 0048EFC8
:0041E59E E80D61FEFF              call 004046B0
:0041E5A3 25FF000000              and eax, 000000FF
:0041E5A8 8945E8                  mov dword ptr [ebp-18], eax
:0041E5AB 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E5AE 8955D0                  mov dword ptr [ebp-30], edx
:0041E5B1 8B45C8                  mov eax, dword ptr [ebp-38]
:0041E5B4 25FFFF0000              and eax, 0000FFFF
:0041E5B9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E5BC 81E1FFFF0000            and ecx, 0000FFFF
:0041E5C2 C1E110                  shl ecx, 10
:0041E5C5 0BC1                    or eax, ecx
:0041E5C7 8945EC                  mov dword ptr [ebp-14], eax
:0041E5CA 8D55CC                  lea edx, dword ptr [ebp-34]
:0041E5CD 52                      push edx
:0041E5CE 6A00                    push 00000000
:0041E5D0 6807100000              push 00001007
:0041E5D5 8B4508                  mov eax, dword ptr [ebp+08]
:0041E5D8 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E5D9 FF15D8864B00            Call dword ptr [004B86D8]
:0041E5DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E5E2 83C101                  add ecx, 00000001
:0041E5E5 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E582(C)
|
:0041E5E8 E978FFFFFF              jmp 0041E565

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E572(C)
|
:0041E5ED 8BE5                    mov esp, ebp
:0041E5EF 5D                      pop ebp
:0041E5F0 C3                      ret



* Referenced by a CALL at Address:
|:0041E39F   
|
:0041E5F1 55                      push ebp
:0041E5F2 8BEC                    mov ebp, esp
:0041E5F4 51                      push ecx
:0041E5F5 68B8050000              push 000005B8
:0041E5FA 8B4508                  mov eax, dword ptr [ebp+08]
:0041E5FD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E5FE FF15AC864B00            Call dword ptr [004B86AC]
:0041E604 8945FC                  mov dword ptr [ebp-04], eax
:0041E607 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E60A 51                      push ecx
:0041E60B 8B5508                  mov edx, dword ptr [ebp+08]
:0041E60E 52                      push edx
:0041E60F E83F000000              call 0041E653
:0041E614 83C408                  add esp, 00000008
:0041E617 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E61A 50                      push eax
:0041E61B E8C8000000              call 0041E6E8
:0041E620 83C404                  add esp, 00000004
:0041E623 68BDBDBD02              push 02BDBDBD
:0041E628 6A00                    push 00000000
:0041E62A 6801100000              push 00001001
:0041E62F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E632 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E633 FF15D8864B00            Call dword ptr [004B86D8]
:0041E639 68BDBDBD02              push 02BDBDBD
:0041E63E 6A00                    push 00000000
:0041E640 6826100000              push 00001026
:0041E645 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E648 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E649 FF15D8864B00            Call dword ptr [004B86D8]
:0041E64F 8BE5                    mov esp, ebp
:0041E651 5D                      pop ebp
:0041E652 C3                      ret



* Referenced by a CALL at Address:
|:0041E60F   
|
:0041E653 55                      push ebp
:0041E654 8BEC                    mov ebp, esp
:0041E656 83EC44                  sub esp, 00000044
:0041E659 6A20                    push 00000020
:0041E65B 6A00                    push 00000000
:0041E65D 8D45E0                  lea eax, dword ptr [ebp-20]
:0041E660 50                      push eax
:0041E661 E8FAF20400              call 0046D960
:0041E666 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00015: ""
                                  |
:0041E669 C745E00F000000          mov [ebp-20], 0000000F
:0041E670 C745E400000000          mov [ebp-1C], 00000000
:0041E677 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0041E67A 894DEC                  mov dword ptr [ebp-14], ecx
:0041E67D C745F020000000          mov [ebp-10], 00000020
:0041E684 C745BC00000000          mov [ebp-44], 00000000
:0041E68B EB09                    jmp 0041E696

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E6E2(U)
|
:0041E68D 8B55BC                  mov edx, dword ptr [ebp-44]
:0041E690 83C201                  add edx, 00000001
:0041E693 8955BC                  mov dword ptr [ebp-44], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E68B(U)
|
:0041E696 837DBC08                cmp dword ptr [ebp-44], 00000008
:0041E69A 7D48                    jge 0041E6E4
:0041E69C 8B45BC                  mov eax, dword ptr [ebp-44]
:0041E69F 50                      push eax
:0041E6A0 E863F0FFFF              call 0041D708
:0041E6A5 83C404                  add esp, 00000004
:0041E6A8 8945E8                  mov dword ptr [ebp-18], eax
:0041E6AB 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0041E6AE 894DF4                  mov dword ptr [ebp-0C], ecx
:0041E6B1 6A20                    push 00000020
:0041E6B3 8D55C0                  lea edx, dword ptr [ebp-40]
:0041E6B6 52                      push edx
:0041E6B7 8B45BC                  mov eax, dword ptr [ebp-44]
:0041E6BA 83C00B                  add eax, 0000000B
:0041E6BD 50                      push eax
:0041E6BE 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041E6C4 51                      push ecx

* Reference To: USER32.LoadStringA, Ord:0183h
                                  |
:0041E6C5 FF1574874B00            Call dword ptr [004B8774]
:0041E6CB 8D55E0                  lea edx, dword ptr [ebp-20]
:0041E6CE 52                      push edx
:0041E6CF 8B45BC                  mov eax, dword ptr [ebp-44]
:0041E6D2 50                      push eax
:0041E6D3 681B100000              push 0000101B
:0041E6D8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041E6DB 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E6DC FF15D8864B00            Call dword ptr [004B86D8]
:0041E6E2 EBA9                    jmp 0041E68D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E69A(C)
|
:0041E6E4 8BE5                    mov esp, ebp
:0041E6E6 5D                      pop ebp
:0041E6E7 C3                      ret



* Referenced by a CALL at Address:
|:0041E61B   
|
:0041E6E8 55                      push ebp
:0041E6E9 8BEC                    mov ebp, esp
:0041E6EB 83EC30                  sub esp, 00000030
:0041E6EE C745D80D100000          mov [ebp-28], 0000100D
:0041E6F5 C745E400000000          mov [ebp-1C], 00000000
:0041E6FC C745E800000000          mov [ebp-18], 00000000
:0041E703 C745E000000000          mov [ebp-20], 00000000
:0041E70A C745F020000000          mov [ebp-10], 00000020
:0041E711 C745D400000000          mov [ebp-2C], 00000000
:0041E718 C745D000000000          mov [ebp-30], 00000000
:0041E71F EB09                    jmp 0041E72A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E77E(U)
|
:0041E721 8B45D0                  mov eax, dword ptr [ebp-30]
:0041E724 83C001                  add eax, 00000001
:0041E727 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E71F(U)
|
:0041E72A 837DD019                cmp dword ptr [ebp-30], 00000019
:0041E72E 7350                    jnb 0041E780
:0041E730 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0041E733 51                      push ecx
:0041E734 E8E721FFFF              call 00410920
:0041E739 83C404                  add esp, 00000004
:0041E73C 85C0                    test eax, eax
:0041E73E 743E                    je 0041E77E
:0041E740 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0041E743 6BC970                  imul ecx, 00000070
:0041E746 81C198224900            add ecx, 00492298
:0041E74C E85154FEFF              call 00403BA2
:0041E751 8945EC                  mov dword ptr [ebp-14], eax
:0041E754 8B55D4                  mov edx, dword ptr [ebp-2C]
:0041E757 8955DC                  mov dword ptr [ebp-24], edx
:0041E75A 8B45D0                  mov eax, dword ptr [ebp-30]
:0041E75D 8945F8                  mov dword ptr [ebp-08], eax
:0041E760 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0041E763 51                      push ecx
:0041E764 6A00                    push 00000000
:0041E766 6807100000              push 00001007
:0041E76B 8B5508                  mov edx, dword ptr [ebp+08]
:0041E76E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E76F FF15D8864B00            Call dword ptr [004B86D8]
:0041E775 8B45D4                  mov eax, dword ptr [ebp-2C]
:0041E778 83C001                  add eax, 00000001
:0041E77B 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E73E(C)
|
:0041E77E EBA1                    jmp 0041E721

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E72E(C)
|
:0041E780 8BE5                    mov esp, ebp
:0041E782 5D                      pop ebp
:0041E783 C3                      ret



* Referenced by a CALL at Address:
|:0041DF1E   
|
:0041E784 55                      push ebp
:0041E785 8BEC                    mov ebp, esp
:0041E787 51                      push ecx
:0041E788 8B4510                  mov eax, dword ptr [ebp+10]
:0041E78B 25FFFF0000              and eax, 0000FFFF
:0041E790 8945FC                  mov dword ptr [ebp-04], eax
:0041E793 817DFC3C040000          cmp dword ptr [ebp-04], 0000043C
:0041E79A 7F1E                    jg 0041E7BA
:0041E79C 817DFC3C040000          cmp dword ptr [ebp-04], 0000043C
:0041E7A3 7438                    je 0041E7DD
:0041E7A5 837DFC02                cmp dword ptr [ebp-04], 00000002
:0041E7A9 7421                    je 0041E7CC
:0041E7AB 837DFC03                cmp dword ptr [ebp-04], 00000003
:0041E7AF 0F8485010000            je 0041E93A
:0041E7B5 E98D010000              jmp 0041E947

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E79A(C)
|
:0041E7BA 817DFC3D040000          cmp dword ptr [ebp-04], 0000043D
:0041E7C1 0F84F8000000            je 0041E8BF
:0041E7C7 E97B010000              jmp 0041E947

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E7A9(C)
|
:0041E7CC 6A01                    push 00000001
:0041E7CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E7D1 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041E7D2 FF15B0874B00            Call dword ptr [004B87B0]
:0041E7D8 E96A010000              jmp 0041E947

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E7A3(C)
|
:0041E7DD 6A00                    push 00000000
:0041E7DF B9C8E24A00              mov ecx, 004AE2C8
:0041E7E4 E8B7170000              call 0041FFA0
:0041E7E9 85C0                    test eax, eax
:0041E7EB 0F85C9000000            jne 0041E8BA
:0041E7F1 6A00                    push 00000000
:0041E7F3 6A01                    push 00000001
:0041E7F5 B9C8E24A00              mov ecx, 004AE2C8
:0041E7FA E871180000              call 00420070
:0041E7FF 6849040000              push 00000449
:0041E804 8B5508                  mov edx, dword ptr [ebp+08]
:0041E807 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E808 FF15AC864B00            Call dword ptr [004B86AC]
:0041E80E 50                      push eax
:0041E80F E881EDFFFF              call 0041D595
:0041E814 83C404                  add esp, 00000004
:0041E817 68B8050000              push 000005B8
:0041E81C 8B4508                  mov eax, dword ptr [ebp+08]
:0041E81F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E820 FF15AC864B00            Call dword ptr [004B86AC]
:0041E826 50                      push eax
:0041E827 E8369BFFFF              call 00418362
:0041E82C 83C404                  add esp, 00000004
:0041E82F 50                      push eax
:0041E830 681A040000              push 0000041A
:0041E835 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E838 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E839 FF15AC864B00            Call dword ptr [004B86AC]
:0041E83F 50                      push eax
:0041E840 E82C8AFFFF              call 00417271
:0041E845 83C408                  add esp, 00000008
:0041E848 6848040000              push 00000448
:0041E84D 8B5508                  mov edx, dword ptr [ebp+08]
:0041E850 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E851 FF15AC864B00            Call dword ptr [004B86AC]
:0041E857 50                      push eax
:0041E858 E8F0000000              call 0041E94D
:0041E85D 83C404                  add esp, 00000004
:0041E860 6A00                    push 00000000
:0041E862 6848040000              push 00000448
:0041E867 8B4508                  mov eax, dword ptr [ebp+08]
:0041E86A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E86B FF15AC864B00            Call dword ptr [004B86AC]
:0041E871 50                      push eax
:0041E872 E8C588FFFF              call 0041713C
:0041E877 83C408                  add esp, 00000008
:0041E87A 6A00                    push 00000000
:0041E87C 681A040000              push 0000041A
:0041E881 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E884 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E885 FF15AC864B00            Call dword ptr [004B86AC]
:0041E88B 50                      push eax
:0041E88C E8AB88FFFF              call 0041713C
:0041E891 83C408                  add esp, 00000008
:0041E894 6A00                    push 00000000
:0041E896 6849040000              push 00000449
:0041E89B 8B5508                  mov edx, dword ptr [ebp+08]
:0041E89E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E89F FF15AC864B00            Call dword ptr [004B86AC]
:0041E8A5 50                      push eax
:0041E8A6 E89188FFFF              call 0041713C
:0041E8AB 83C408                  add esp, 00000008
:0041E8AE 8B4508                  mov eax, dword ptr [ebp+08]
:0041E8B1 50                      push eax
:0041E8B2 E8BDEEFFFF              call 0041D774
:0041E8B7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E7EB(C)
|
:0041E8BA E988000000              jmp 0041E947

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E7C1(C)
|
:0041E8BF 6A00                    push 00000000
:0041E8C1 B9C8E24A00              mov ecx, 004AE2C8
:0041E8C6 E8D5160000              call 0041FFA0
:0041E8CB 83F801                  cmp eax, 00000001
:0041E8CE 7568                    jne 0041E938
:0041E8D0 6A00                    push 00000000
:0041E8D2 6A00                    push 00000000
:0041E8D4 B9C8E24A00              mov ecx, 004AE2C8
:0041E8D9 E892170000              call 00420070
:0041E8DE 6A01                    push 00000001
:0041E8E0 6848040000              push 00000448
:0041E8E5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E8E8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E8E9 FF15AC864B00            Call dword ptr [004B86AC]
:0041E8EF 50                      push eax
:0041E8F0 E84788FFFF              call 0041713C
:0041E8F5 83C408                  add esp, 00000008
:0041E8F8 6A01                    push 00000001
:0041E8FA 681A040000              push 0000041A
:0041E8FF 8B5508                  mov edx, dword ptr [ebp+08]
:0041E902 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E903 FF15AC864B00            Call dword ptr [004B86AC]
:0041E909 50                      push eax
:0041E90A E82D88FFFF              call 0041713C
:0041E90F 83C408                  add esp, 00000008
:0041E912 6A01                    push 00000001
:0041E914 6849040000              push 00000449
:0041E919 8B4508                  mov eax, dword ptr [ebp+08]
:0041E91C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E91D FF15AC864B00            Call dword ptr [004B86AC]
:0041E923 50                      push eax
:0041E924 E81388FFFF              call 0041713C
:0041E929 83C408                  add esp, 00000008
:0041E92C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E92F 51                      push ecx
:0041E930 E83FEEFFFF              call 0041D774
:0041E935 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E8CE(C)
|
:0041E938 EB0D                    jmp 0041E947

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E7AF(C)
|
:0041E93A 6802080000              push 00000802
:0041E93F E81E500400              call 00463962
:0041E944 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E7B5(U), :0041E7C7(U), :0041E7D8(U), :0041E8BA(U), :0041E938(U)
|
:0041E947 33C0                    xor eax, eax
:0041E949 8BE5                    mov esp, ebp
:0041E94B 5D                      pop ebp
:0041E94C C3                      ret



* Referenced by a CALL at Address:
|:0041E858   
|
:0041E94D 55                      push ebp
:0041E94E 8BEC                    mov ebp, esp
:0041E950 6A00                    push 00000000
:0041E952 6A00                    push 00000000
:0041E954 6809100000              push 00001009
:0041E959 8B4508                  mov eax, dword ptr [ebp+08]
:0041E95C 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041E95D FF15D8864B00            Call dword ptr [004B86D8]
:0041E963 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E966 51                      push ecx
:0041E967 E8A7FBFFFF              call 0041E513
:0041E96C 83C404                  add esp, 00000004
:0041E96F 5D                      pop ebp
:0041E970 C3                      ret



* Referenced by a CALL at Address:
|:0041DF41   
|
:0041E971 55                      push ebp
:0041E972 8BEC                    mov ebp, esp
:0041E974 83EC14                  sub esp, 00000014
:0041E977 8B450C                  mov eax, dword ptr [ebp+0C]
:0041E97A 8B08                    mov ecx, dword ptr [eax]
:0041E97C 894DF0                  mov dword ptr [ebp-10], ecx
:0041E97F 8B5510                  mov edx, dword ptr [ebp+10]
:0041E982 52                      push edx
:0041E983 8B45F0                  mov eax, dword ptr [ebp-10]
:0041E986 50                      push eax
:0041E987 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E98A 51                      push ecx
:0041E98B E8E7000000              call 0041EA77
:0041E990 83C40C                  add esp, 0000000C
:0041E993 8945FC                  mov dword ptr [ebp-04], eax
:0041E996 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041E99A 7507                    jne 0041E9A3
:0041E99C 33C0                    xor eax, eax
:0041E99E E9D0000000              jmp 0041EA73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E99A(C)
|
:0041E9A3 8B550C                  mov edx, dword ptr [ebp+0C]
:0041E9A6 8B4204                  mov eax, dword ptr [edx+04]
:0041E9A9 8945EC                  mov dword ptr [ebp-14], eax
:0041E9AC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041E9AF 8B510C                  mov edx, dword ptr [ecx+0C]
:0041E9B2 8955F8                  mov dword ptr [ebp-08], edx
:0041E9B5 68B8050000              push 000005B8
:0041E9BA 8B4508                  mov eax, dword ptr [ebp+08]
:0041E9BD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041E9BE FF15AC864B00            Call dword ptr [004B86AC]
:0041E9C4 50                      push eax
:0041E9C5 E89899FFFF              call 00418362
:0041E9CA 83C404                  add esp, 00000004
:0041E9CD 8945F4                  mov dword ptr [ebp-0C], eax
:0041E9D0 817DEC48040000          cmp dword ptr [ebp-14], 00000448
:0041E9D7 7522                    jne 0041E9FB
:0041E9D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E9DC 51                      push ecx
:0041E9DD 8B55EC                  mov edx, dword ptr [ebp-14]
:0041E9E0 52                      push edx
:0041E9E1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E9E4 50                      push eax
:0041E9E5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E9E8 51                      push ecx
:0041E9E9 8B55F0                  mov edx, dword ptr [ebp-10]
:0041E9EC 52                      push edx
:0041E9ED 8B4508                  mov eax, dword ptr [ebp+08]
:0041E9F0 50                      push eax
:0041E9F1 E815010000              call 0041EB0B
:0041E9F6 83C418                  add esp, 00000018
:0041E9F9 EB4B                    jmp 0041EA46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E9D7(C)
|
:0041E9FB 817DEC1A040000          cmp dword ptr [ebp-14], 0000041A
:0041EA02 7522                    jne 0041EA26
:0041EA04 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EA07 51                      push ecx
:0041EA08 8B55EC                  mov edx, dword ptr [ebp-14]
:0041EA0B 52                      push edx
:0041EA0C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041EA0F 50                      push eax
:0041EA10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EA13 51                      push ecx
:0041EA14 8B55F0                  mov edx, dword ptr [ebp-10]
:0041EA17 52                      push edx
:0041EA18 8B4508                  mov eax, dword ptr [ebp+08]
:0041EA1B 50                      push eax
:0041EA1C E8E0030000              call 0041EE01
:0041EA21 83C418                  add esp, 00000018
:0041EA24 EB20                    jmp 0041EA46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EA02(C)
|
:0041EA26 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EA29 51                      push ecx
:0041EA2A 8B55EC                  mov edx, dword ptr [ebp-14]
:0041EA2D 52                      push edx
:0041EA2E 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041EA31 50                      push eax
:0041EA32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EA35 51                      push ecx
:0041EA36 8B55F0                  mov edx, dword ptr [ebp-10]
:0041EA39 52                      push edx
:0041EA3A 8B4508                  mov eax, dword ptr [ebp+08]
:0041EA3D 50                      push eax
:0041EA3E E8A3070000              call 0041F1E6
:0041EA43 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E9F9(U), :0041EA24(U)
|
:0041EA46 6849040000              push 00000449
:0041EA4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EA4E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041EA4F FF15AC864B00            Call dword ptr [004B86AC]
:0041EA55 50                      push eax
:0041EA56 686C040000              push 0000046C
:0041EA5B 8B5508                  mov edx, dword ptr [ebp+08]
:0041EA5E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041EA5F FF15AC864B00            Call dword ptr [004B86AC]
:0041EA65 50                      push eax
:0041EA66 E857ABFFFF              call 004195C2
:0041EA6B 83C408                  add esp, 00000008
:0041EA6E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E99E(U)
|
:0041EA73 8BE5                    mov esp, ebp
:0041EA75 5D                      pop ebp
:0041EA76 C3                      ret



* Referenced by a CALL at Address:
|:0041E98B   
|
:0041EA77 55                      push ebp
:0041EA78 8BEC                    mov ebp, esp
:0041EA7A 83EC0C                  sub esp, 0000000C
:0041EA7D 8B4510                  mov eax, dword ptr [ebp+10]
:0041EA80 25FFFF0000              and eax, 0000FFFF
:0041EA85 8945F4                  mov dword ptr [ebp-0C], eax
:0041EA88 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041EA8B C1E910                  shr ecx, 10
:0041EA8E 81E1FFFF0000            and ecx, 0000FFFF
:0041EA94 81E1FFFF0000            and ecx, 0000FFFF
:0041EA9A 894DF8                  mov dword ptr [ebp-08], ecx
:0041EA9D 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EAA0 52                      push edx
:0041EAA1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041EAA4 50                      push eax
:0041EAA5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EAA8 51                      push ecx

* Reference To: USER32.ChildWindowFromPoint, Ord:0033h
                                  |
:0041EAA9 FF155C874B00            Call dword ptr [004B875C]
:0041EAAF 8945FC                  mov dword ptr [ebp-04], eax
:0041EAB2 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041EAB6 7408                    je 0041EAC0
:0041EAB8 8B550C                  mov edx, dword ptr [ebp+0C]
:0041EABB 3B55FC                  cmp edx, dword ptr [ebp-04]
:0041EABE 7504                    jne 0041EAC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EAB6(C)
|
:0041EAC0 33C0                    xor eax, eax
:0041EAC2 EB43                    jmp 0041EB07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EABE(C)
|
:0041EAC4 681A040000              push 0000041A
:0041EAC9 8B4508                  mov eax, dword ptr [ebp+08]
:0041EACC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041EACD FF15AC864B00            Call dword ptr [004B86AC]
:0041EAD3 3945FC                  cmp dword ptr [ebp-04], eax
:0041EAD6 7428                    je 0041EB00
:0041EAD8 6849040000              push 00000449
:0041EADD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EAE0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041EAE1 FF15AC864B00            Call dword ptr [004B86AC]
:0041EAE7 3945FC                  cmp dword ptr [ebp-04], eax
:0041EAEA 7414                    je 0041EB00
:0041EAEC 6848040000              push 00000448
:0041EAF1 8B5508                  mov edx, dword ptr [ebp+08]
:0041EAF4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041EAF5 FF15AC864B00            Call dword ptr [004B86AC]
:0041EAFB 3945FC                  cmp dword ptr [ebp-04], eax
:0041EAFE 7505                    jne 0041EB05

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EAD6(C), :0041EAEA(C)
|
:0041EB00 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EB03 EB02                    jmp 0041EB07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EAFE(C)
|
:0041EB05 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EAC2(U), :0041EB03(U)
|
:0041EB07 8BE5                    mov esp, ebp
:0041EB09 5D                      pop ebp
:0041EB0A C3                      ret



* Referenced by a CALL at Address:
|:0041E9F1   
|
:0041EB0B 55                      push ebp
:0041EB0C 8BEC                    mov ebp, esp
:0041EB0E 83EC14                  sub esp, 00000014
:0041EB11 56                      push esi
:0041EB12 8B451C                  mov eax, dword ptr [ebp+1C]
:0041EB15 50                      push eax
:0041EB16 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041EB19 51                      push ecx
:0041EB1A E8578BFFFF              call 00417676
:0041EB1F 83C408                  add esp, 00000008
:0041EB22 25FFFF0000              and eax, 0000FFFF
:0041EB27 8945FC                  mov dword ptr [ebp-04], eax
:0041EB2A 681A040000              push 0000041A
:0041EB2F 8B5508                  mov edx, dword ptr [ebp+08]
:0041EB32 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041EB33 FF15AC864B00            Call dword ptr [004B86AC]
:0041EB39 394510                  cmp dword ptr [ebp+10], eax
:0041EB3C 7527                    jne 0041EB65
:0041EB3E 6A01                    push 00000001
:0041EB40 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EB43 50                      push eax
:0041EB44 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041EB47 51                      push ecx
:0041EB48 8B5508                  mov edx, dword ptr [ebp+08]
:0041EB4B 52                      push edx
:0041EB4C E83CB1FFFF              call 00419C8D
:0041EB51 83C410                  add esp, 00000010
:0041EB54 85C0                    test eax, eax
:0041EB56 7507                    jne 0041EB5F
:0041EB58 33C0                    xor eax, eax
:0041EB5A E9E2010000              jmp 0041ED41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EB56(C)
|
:0041EB5F C645F000                mov [ebp-10], 00
:0041EB63 EB1D                    jmp 0041EB82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EB3C(C)
|
:0041EB65 6A01                    push 00000001
:0041EB67 8B4508                  mov eax, dword ptr [ebp+08]
:0041EB6A 50                      push eax
:0041EB6B E8D1B3FFFF              call 00419F41
:0041EB70 83C408                  add esp, 00000008
:0041EB73 85C0                    test eax, eax
:0041EB75 7507                    jne 0041EB7E
:0041EB77 33C0                    xor eax, eax
:0041EB79 E9C3010000              jmp 0041ED41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EB75(C)
|
:0041EB7E C645F001                mov [ebp-10], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EB63(U)
|
:0041EB82 6A01                    push 00000001
:0041EB84 8A4DF0                  mov cl, byte ptr [ebp-10]
:0041EB87 51                      push ecx
:0041EB88 668B55FC                mov dx, word ptr [ebp-04]
:0041EB8C 52                      push edx
:0041EB8D 8B4508                  mov eax, dword ptr [ebp+08]
:0041EB90 50                      push eax
:0041EB91 E8B0010000              call 0041ED46
:0041EB96 83C410                  add esp, 00000010
:0041EB99 8945F8                  mov dword ptr [ebp-08], eax
:0041EB9C 837DF800                cmp dword ptr [ebp-08], 00000000
:0041EBA0 7F2A                    jg 0041EBCC
:0041EBA2 837DF800                cmp dword ptr [ebp-08], 00000000
:0041EBA6 751D                    jne 0041EBC5
:0041EBA8 6A00                    push 00000000
:0041EBAA 6878594800              push 00485978

* Possible StringData Ref from Data Obj ->"nFC"
                                  |
:0041EBAF 6850774700              push 00477750

* Possible StringData Ref from Data Obj ->"b藍_A"
                                  |
:0041EBB4 6860774700              push 00477760
:0041EBB9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EBBC 51                      push ecx
:0041EBBD E88DCA0300              call 0045B64F
:0041EBC2 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EBA6(C)
|
:0041EBC5 33C0                    xor eax, eax
:0041EBC7 E975010000              jmp 0041ED41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EBA0(C)
|
:0041EBCC 8B55F0                  mov edx, dword ptr [ebp-10]
:0041EBCF 81E2FF000000            and edx, 000000FF
:0041EBD5 85D2                    test edx, edx
:0041EBD7 0F849F000000            je 0041EC7C
:0041EBDD 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EBE0 50                      push eax
:0041EBE1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EBE4 51                      push ecx
:0041EBE5 E857B3FFFF              call 00419F41
:0041EBEA 83C408                  add esp, 00000008
:0041EBED 85C0                    test eax, eax
:0041EBEF 7507                    jne 0041EBF8
:0041EBF1 33C0                    xor eax, eax
:0041EBF3 E949010000              jmp 0041ED41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EBEF(C)
|
:0041EBF8 C745F400000000          mov [ebp-0C], 00000000
:0041EBFF EB09                    jmp 0041EC0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EC45(U)
|
:0041EC01 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041EC04 83C201                  add edx, 00000001
:0041EC07 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EBFF(U)
|
:0041EC0A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041EC0D 3B45F8                  cmp eax, dword ptr [ebp-08]
:0041EC10 7D35                    jge 0041EC47
:0041EC12 E8958AFFFF              call 004176AC
:0041EC17 25FF000000              and eax, 000000FF
:0041EC1C 8945EC                  mov dword ptr [ebp-14], eax
:0041EC1F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC22 51                      push ecx
:0041EC23 8B55EC                  mov edx, dword ptr [ebp-14]
:0041EC26 52                      push edx
:0041EC27 B9C8E24A00              mov ecx, 004AE2C8
:0041EC2C E82F8BFEFF              call 00407760
:0041EC31 8B45EC                  mov eax, dword ptr [ebp-14]
:0041EC34 50                      push eax
:0041EC35 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC38 51                      push ecx
:0041EC39 8B5510                  mov edx, dword ptr [ebp+10]
:0041EC3C 52                      push edx
:0041EC3D E825B2FFFF              call 00419E67
:0041EC42 83C40C                  add esp, 0000000C
:0041EC45 EBBA                    jmp 0041EC01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EC10(C)
|
:0041EC47 B9C8E24A00              mov ecx, 004AE2C8
:0041EC4C E87F0A0100              call 0042F6D0
:0041EC51 8BF0                    mov esi, eax
:0041EC53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC56 6BC933                  imul ecx, 00000033
:0041EC59 81C1C8EF4800            add ecx, 0048EFC8
:0041EC5F E8FC120000              call 0041FF60
:0041EC64 0FAF45F8                imul eax, dword ptr [ebp-08]
:0041EC68 2BF0                    sub esi, eax
:0041EC6A 56                      push esi
:0041EC6B 8B4508                  mov eax, dword ptr [ebp+08]
:0041EC6E 50                      push eax
:0041EC6F E869010000              call 0041EDDD
:0041EC74 83C408                  add esp, 00000008
:0041EC77 E9C0000000              jmp 0041ED3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EBD7(C)
|
:0041EC7C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EC7F 51                      push ecx
:0041EC80 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EC83 52                      push edx
:0041EC84 8B4514                  mov eax, dword ptr [ebp+14]
:0041EC87 50                      push eax
:0041EC88 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EC8B 51                      push ecx
:0041EC8C E8FCAFFFFF              call 00419C8D
:0041EC91 83C410                  add esp, 00000010
:0041EC94 85C0                    test eax, eax
:0041EC96 7507                    jne 0041EC9F
:0041EC98 33C0                    xor eax, eax
:0041EC9A E9A2000000              jmp 0041ED41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EC96(C)
|
:0041EC9F C745F400000000          mov [ebp-0C], 00000000
:0041ECA6 EB09                    jmp 0041ECB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ECE6(U)
|
:0041ECA8 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041ECAB 83C201                  add edx, 00000001
:0041ECAE 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ECA6(U)
|
:0041ECB1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041ECB4 3B45F8                  cmp eax, dword ptr [ebp-08]
:0041ECB7 7D2F                    jge 0041ECE8
:0041ECB9 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041ECBC 51                      push ecx
:0041ECBD E855B0FFFF              call 00419D17
:0041ECC2 83C404                  add esp, 00000004
:0041ECC5 25FF000000              and eax, 000000FF
:0041ECCA 8945EC                  mov dword ptr [ebp-14], eax
:0041ECCD 8A55FC                  mov dl, byte ptr [ebp-04]
:0041ECD0 52                      push edx
:0041ECD1 8A45EC                  mov al, byte ptr [ebp-14]
:0041ECD4 50                      push eax
:0041ECD5 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041ECD8 6BC970                  imul ecx, 00000070
:0041ECDB 81C198224900            add ecx, 00492298
:0041ECE1 E84A5BFEFF              call 00404830
:0041ECE6 EBC0                    jmp 0041ECA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ECB7(C)
|
:0041ECE8 B9C8E24A00              mov ecx, 004AE2C8
:0041ECED E8DE090100              call 0042F6D0
:0041ECF2 8BF0                    mov esi, eax
:0041ECF4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041ECF7 6BC933                  imul ecx, 00000033
:0041ECFA 81C1C8EF4800            add ecx, 0048EFC8
:0041ED00 E85B120000              call 0041FF60
:0041ED05 0FAF45F8                imul eax, dword ptr [ebp-08]
:0041ED09 2BF0                    sub esi, eax
:0041ED0B 56                      push esi
:0041ED0C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041ED0F 51                      push ecx
:0041ED10 E8C8000000              call 0041EDDD
:0041ED15 83C408                  add esp, 00000008
:0041ED18 8A55EC                  mov dl, byte ptr [ebp-14]
:0041ED1B 52                      push edx
:0041ED1C 8B4514                  mov eax, dword ptr [ebp+14]
:0041ED1F 50                      push eax
:0041ED20 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041ED23 51                      push ecx
:0041ED24 E883AEFFFF              call 00419BAC
:0041ED29 83C40C                  add esp, 0000000C
:0041ED2C 8B5514                  mov edx, dword ptr [ebp+14]
:0041ED2F 52                      push edx
:0041ED30 8B4510                  mov eax, dword ptr [ebp+10]
:0041ED33 50                      push eax
:0041ED34 E83885FFFF              call 00417271
:0041ED39 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EC77(U)
|
:0041ED3C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EB5A(U), :0041EB79(U), :0041EBC7(U), :0041EBF3(U), :0041EC9A(U)
|
:0041ED41 5E                      pop esi
:0041ED42 8BE5                    mov esp, ebp
:0041ED44 5D                      pop ebp
:0041ED45 C3                      ret



* Referenced by a CALL at Addresses:
|:0041EB91   , :0041EFDA   
|
:0041ED46 55                      push ebp
:0041ED47 8BEC                    mov ebp, esp
:0041ED49 51                      push ecx
:0041ED4A 56                      push esi
:0041ED4B 8B450C                  mov eax, dword ptr [ebp+0C]
:0041ED4E 25FFFF0000              and eax, 0000FFFF
:0041ED53 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041ED56 81E1FF000000            and ecx, 000000FF
:0041ED5C 8B5514                  mov edx, dword ptr [ebp+14]
:0041ED5F 81E2FF000000            and edx, 000000FF
:0041ED65 C1E208                  shl edx, 08
:0041ED68 0BCA                    or ecx, edx
:0041ED6A 81E1FFFF0000            and ecx, 0000FFFF
:0041ED70 C1E110                  shl ecx, 10
:0041ED73 0BC1                    or eax, ecx
:0041ED75 50                      push eax
:0041ED76 68EDD74100              push 0041D7ED
:0041ED7B 8B4508                  mov eax, dword ptr [ebp+08]
:0041ED7E 50                      push eax

* Possible Reference to Dialog: DialogID_0129 
                                  |
:0041ED7F 6829010000              push 00000129
:0041ED84 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0041ED8A 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0041ED8B FF1520874B00            Call dword ptr [004B8720]
:0041ED91 8945FC                  mov dword ptr [ebp-04], eax
:0041ED94 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041ED98 7504                    jne 0041ED9E
:0041ED9A 33C0                    xor eax, eax
:0041ED9C EB3A                    jmp 0041EDD8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ED98(C)
|
:0041ED9E 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041EDA2 7E31                    jle 0041EDD5
:0041EDA4 B9C8E24A00              mov ecx, 004AE2C8
:0041EDA9 E822090100              call 0042F6D0
:0041EDAE 8BF0                    mov esi, eax
:0041EDB0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041EDB3 81E1FFFF0000            and ecx, 0000FFFF
:0041EDB9 6BC933                  imul ecx, 00000033
:0041EDBC 81C1C8EF4800            add ecx, 0048EFC8
:0041EDC2 E899110000              call 0041FF60
:0041EDC7 0FAF45FC                imul eax, dword ptr [ebp-04]
:0041EDCB 2BF0                    sub esi, eax
:0041EDCD 85F6                    test esi, esi
:0041EDCF 7304                    jnb 0041EDD5
:0041EDD1 33C0                    xor eax, eax
:0041EDD3 EB03                    jmp 0041EDD8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EDA2(C), :0041EDCF(C)
|
:0041EDD5 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041ED9C(U), :0041EDD3(U)
|
:0041EDD8 5E                      pop esi
:0041EDD9 8BE5                    mov esp, ebp
:0041EDDB 5D                      pop ebp
:0041EDDC C3                      ret



* Referenced by a CALL at Addresses:
|:0041EC6F   , :0041ED10   
|
:0041EDDD 55                      push ebp
:0041EDDE 8BEC                    mov ebp, esp
:0041EDE0 8B450C                  mov eax, dword ptr [ebp+0C]
:0041EDE3 50                      push eax
:0041EDE4 B9C8E24A00              mov ecx, 004AE2C8
:0041EDE9 E89289FEFF              call 00407780

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0475, ""
                                  |
:0041EDEE 6875040000              push 00000475
:0041EDF3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EDF6 51                      push ecx
:0041EDF7 E8E1E7FFFF              call 0041D5DD
:0041EDFC 83C408                  add esp, 00000008
:0041EDFF 5D                      pop ebp
:0041EE00 C3                      ret



* Referenced by a CALL at Address:
|:0041EA1C   
|
:0041EE01 55                      push ebp
:0041EE02 8BEC                    mov ebp, esp
:0041EE04 83EC14                  sub esp, 00000014
:0041EE07 8B451C                  mov eax, dword ptr [ebp+1C]
:0041EE0A 50                      push eax
:0041EE0B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041EE0E 51                      push ecx
:0041EE0F E86288FFFF              call 00417676
:0041EE14 83C408                  add esp, 00000008
:0041EE17 C1E810                  shr eax, 10
:0041EE1A 25FFFF0000              and eax, 0000FFFF
:0041EE1F 25FFFF0000              and eax, 0000FFFF
:0041EE24 8945F8                  mov dword ptr [ebp-08], eax
:0041EE27 8A55F8                  mov dl, byte ptr [ebp-08]
:0041EE2A 52                      push edx
:0041EE2B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041EE2E 6BC970                  imul ecx, 00000070
:0041EE31 81C198224900            add ecx, 00492298
:0041EE37 E8D459FEFF              call 00404810
:0041EE3C 25FF000000              and eax, 000000FF
:0041EE41 8945FC                  mov dword ptr [ebp-04], eax
:0041EE44 6849040000              push 00000449
:0041EE49 8B4508                  mov eax, dword ptr [ebp+08]
:0041EE4C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041EE4D FF15AC864B00            Call dword ptr [004B86AC]
:0041EE53 394510                  cmp dword ptr [ebp+10], eax
:0041EE56 0F859F000000            jne 0041EEFB
:0041EE5C 6A01                    push 00000001
:0041EE5E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EE61 51                      push ecx
:0041EE62 E8DAB0FFFF              call 00419F41
:0041EE67 83C408                  add esp, 00000008
:0041EE6A 85C0                    test eax, eax
:0041EE6C 0F8484000000            je 0041EEF6
:0041EE72 8A55F8                  mov dl, byte ptr [ebp-08]
:0041EE75 52                      push edx
:0041EE76 8B4514                  mov eax, dword ptr [ebp+14]
:0041EE79 50                      push eax
:0041EE7A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EE7D 51                      push ecx
:0041EE7E E83DB1FFFF              call 00419FC0
:0041EE83 83C40C                  add esp, 0000000C
:0041EE86 85C0                    test eax, eax
:0041EE88 7C6C                    jl 0041EEF6
:0041EE8A E81D88FFFF              call 004176AC
:0041EE8F 25FF000000              and eax, 000000FF
:0041EE94 8945F4                  mov dword ptr [ebp-0C], eax
:0041EE97 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EE9A 52                      push edx
:0041EE9B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041EE9E 50                      push eax
:0041EE9F B9C8E24A00              mov ecx, 004AE2C8
:0041EEA4 E8B788FEFF              call 00407760

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041EEA9 68FF000000              push 000000FF
:0041EEAE 8A4DF8                  mov cl, byte ptr [ebp-08]
:0041EEB1 51                      push ecx
:0041EEB2 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041EEB5 6BC970                  imul ecx, 00000070
:0041EEB8 81C198224900            add ecx, 00492298
:0041EEBE E86D59FEFF              call 00404830
:0041EEC3 6A00                    push 00000000
:0041EEC5 8B551C                  mov edx, dword ptr [ebp+1C]
:0041EEC8 52                      push edx
:0041EEC9 6808100000              push 00001008
:0041EECE 8B450C                  mov eax, dword ptr [ebp+0C]
:0041EED1 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041EED2 FF15D8864B00            Call dword ptr [004B86D8]
:0041EED8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EEDB 51                      push ecx
:0041EEDC 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EEDF 52                      push edx
:0041EEE0 8B4510                  mov eax, dword ptr [ebp+10]
:0041EEE3 50                      push eax
:0041EEE4 E87EAFFFFF              call 00419E67
:0041EEE9 83C40C                  add esp, 0000000C
:0041EEEC B801000000              mov eax, 00000001
:0041EEF1 E9CB000000              jmp 0041EFC1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EE6C(C), :0041EE88(C)
|
:0041EEF6 E9C4000000              jmp 0041EFBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EE56(C)
|
:0041EEFB B9C8E24A00              mov ecx, 004AE2C8
:0041EF00 E8CB070100              call 0042F6D0
:0041EF05 3D50C30000              cmp eax, 0000C350
:0041EF0A 721A                    jb 0041EF26

* Possible StringData Ref from Data Obj ->"hFC"
                                  |
:0041EF0C 6870774700              push 00477770
:0041EF11 6A00                    push 00000000
:0041EF13 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EF16 51                      push ecx
:0041EF17 E84381FFFF              call 0041705F
:0041EF1C 83C40C                  add esp, 0000000C
:0041EF1F 33C0                    xor eax, eax
:0041EF21 E99B000000              jmp 0041EFC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EF0A(C)
|
:0041EF26 6A00                    push 00000000
:0041EF28 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EF2B 52                      push edx
:0041EF2C 8B4514                  mov eax, dword ptr [ebp+14]
:0041EF2F 50                      push eax
:0041EF30 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041EF33 51                      push ecx
:0041EF34 E88C000000              call 0041EFC5
:0041EF39 83C410                  add esp, 00000010
:0041EF3C 8945F0                  mov dword ptr [ebp-10], eax
:0041EF3F 837DF000                cmp dword ptr [ebp-10], 00000000
:0041EF43 7470                    je 0041EFB5
:0041EF45 8B55F0                  mov edx, dword ptr [ebp-10]
:0041EF48 52                      push edx
:0041EF49 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EF4C 50                      push eax
:0041EF4D 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041EF50 51                      push ecx
:0041EF51 8B550C                  mov edx, dword ptr [ebp+0C]
:0041EF54 52                      push edx
:0041EF55 E876010000              call 0041F0D0
:0041EF5A 83C410                  add esp, 00000010
:0041EF5D 6A00                    push 00000000
:0041EF5F 6A00                    push 00000000
:0041EF61 6804100000              push 00001004
:0041EF66 8B450C                  mov eax, dword ptr [ebp+0C]
:0041EF69 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041EF6A FF15D8864B00            Call dword ptr [004B86D8]
:0041EF70 2B45F0                  sub eax, dword ptr [ebp-10]
:0041EF73 3B451C                  cmp eax, dword ptr [ebp+1C]
:0041EF76 7D1B                    jge 0041EF93
:0041EF78 6A00                    push 00000000
:0041EF7A 6A00                    push 00000000
:0041EF7C 6804100000              push 00001004
:0041EF81 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041EF84 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041EF85 FF15D8864B00            Call dword ptr [004B86D8]
:0041EF8B 2B45F0                  sub eax, dword ptr [ebp-10]
:0041EF8E 8945EC                  mov dword ptr [ebp-14], eax
:0041EF91 EB06                    jmp 0041EF99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EF76(C)
|
:0041EF93 8B551C                  mov edx, dword ptr [ebp+1C]
:0041EF96 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EF91(U)
|
:0041EF99 6A00                    push 00000000
:0041EF9B 8B45EC                  mov eax, dword ptr [ebp-14]
:0041EF9E 50                      push eax
:0041EF9F 6813100000              push 00001013
:0041EFA4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041EFA7 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041EFA8 FF15D8864B00            Call dword ptr [004B86D8]
:0041EFAE B801000000              mov eax, 00000001
:0041EFB3 EB0C                    jmp 0041EFC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EF43(C)
|
:0041EFB5 8B5508                  mov edx, dword ptr [ebp+08]
:0041EFB8 52                      push edx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:0041EFB9 FF15A8864B00            Call dword ptr [004B86A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EEF6(U)
|
:0041EFBF 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EEF1(U), :0041EF21(U), :0041EFB3(U)
|
:0041EFC1 8BE5                    mov esp, ebp
:0041EFC3 5D                      pop ebp
:0041EFC4 C3                      ret



* Referenced by a CALL at Addresses:
|:0041EF34   , :0041F360   
|
:0041EFC5 55                      push ebp
:0041EFC6 8BEC                    mov ebp, esp
:0041EFC8 83EC20                  sub esp, 00000020
:0041EFCB 6A00                    push 00000000
:0041EFCD 8A4514                  mov al, byte ptr [ebp+14]
:0041EFD0 50                      push eax
:0041EFD1 668B4D10                mov cx, word ptr [ebp+10]
:0041EFD5 51                      push ecx
:0041EFD6 8B5508                  mov edx, dword ptr [ebp+08]
:0041EFD9 52                      push edx
:0041EFDA E867FDFFFF              call 0041ED46
:0041EFDF 83C410                  add esp, 00000010
:0041EFE2 8945F8                  mov dword ptr [ebp-08], eax
:0041EFE5 837DF800                cmp dword ptr [ebp-08], 00000000
:0041EFE9 7F07                    jg 0041EFF2
:0041EFEB 33C0                    xor eax, eax
:0041EFED E9DA000000              jmp 0041F0CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EFE9(C)
|
:0041EFF2 8B4514                  mov eax, dword ptr [ebp+14]
:0041EFF5 25FF000000              and eax, 000000FF
:0041EFFA 85C0                    test eax, eax
:0041EFFC 755F                    jne 0041F05D
:0041EFFE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F001 6BC970                  imul ecx, 00000070
:0041F004 81C198224900            add ecx, 00492298
:0041F00A E83C37FEFF              call 0040274B
:0041F00F 3B4510                  cmp eax, dword ptr [ebp+10]
:0041F012 7549                    jne 0041F05D
:0041F014 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041F017 51                      push ecx
:0041F018 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F01B 6BC970                  imul ecx, 00000070
:0041F01E 81C198224900            add ecx, 00492298
:0041F024 E8F635FEFF              call 0040261F
:0041F029 25FF000000              and eax, 000000FF
:0041F02E 3B45F8                  cmp eax, dword ptr [ebp-08]
:0041F031 7F2A                    jg 0041F05D
:0041F033 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F036 6BC970                  imul ecx, 00000070
:0041F039 81C198224900            add ecx, 00492298
:0041F03F E8AC57FEFF              call 004047F0
:0041F044 50                      push eax
:0041F045 8B550C                  mov edx, dword ptr [ebp+0C]
:0041F048 52                      push edx
:0041F049 8B4508                  mov eax, dword ptr [ebp+08]
:0041F04C 50                      push eax
:0041F04D E86EAFFFFF              call 00419FC0
:0041F052 83C40C                  add esp, 0000000C
:0041F055 85C0                    test eax, eax
:0041F057 7D04                    jge 0041F05D
:0041F059 33C0                    xor eax, eax
:0041F05B EB6F                    jmp 0041F0CC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EFFC(C), :0041F012(C), :0041F031(C), :0041F057(C)
|
:0041F05D B9C8E24A00              mov ecx, 004AE2C8
:0041F062 E869060100              call 0042F6D0
:0041F067 8945F0                  mov dword ptr [ebp-10], eax
:0041F06A C745F400000000          mov [ebp-0C], 00000000
:0041F071 DF6DF0                  fild qword ptr [ebp-10]
:0041F074 DD5DE8                  fstp qword ptr [ebp-18]
:0041F077 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041F07A 6BC933                  imul ecx, 00000033
:0041F07D 81C1C8EF4800            add ecx, 0048EFC8
:0041F083 E8D80E0000              call 0041FF60
:0041F088 0FAF45F8                imul eax, dword ptr [ebp-08]
:0041F08C 8945E0                  mov dword ptr [ebp-20], eax
:0041F08F C745E400000000          mov [ebp-1C], 00000000
:0041F096 DF6DE0                  fild qword ptr [ebp-20]
:0041F099 DC0D58404700            fmul qword ptr [00474058]
:0041F09F DC45E8                  fadd qword ptr [ebp-18]
:0041F0A2 E889F00400              call 0046E130
:0041F0A7 8945FC                  mov dword ptr [ebp-04], eax
:0041F0AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F0AD 51                      push ecx
:0041F0AE B9C8E24A00              mov ecx, 004AE2C8
:0041F0B3 E8C886FEFF              call 00407780

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0475, ""
                                  |
:0041F0B8 6875040000              push 00000475
:0041F0BD 8B5508                  mov edx, dword ptr [ebp+08]
:0041F0C0 52                      push edx
:0041F0C1 E817E5FFFF              call 0041D5DD
:0041F0C6 83C408                  add esp, 00000008
:0041F0C9 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EFED(U), :0041F05B(U)
|
:0041F0CC 8BE5                    mov esp, ebp
:0041F0CE 5D                      pop ebp
:0041F0CF C3                      ret



* Referenced by a CALL at Address:
|:0041EF55   
|
:0041F0D0 55                      push ebp
:0041F0D1 8BEC                    mov ebp, esp
:0041F0D3 83EC0C                  sub esp, 0000000C
:0041F0D6 C745F800000000          mov [ebp-08], 00000000
:0041F0DD EB09                    jmp 0041F0E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F13A(U)
|
:0041F0DF 8B45F8                  mov eax, dword ptr [ebp-08]
:0041F0E2 83C001                  add eax, 00000001
:0041F0E5 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F0DD(U)
|
:0041F0E8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041F0EB 3B4D14                  cmp ecx, dword ptr [ebp+14]
:0041F0EE 7D4C                    jge 0041F13C
:0041F0F0 8D55FC                  lea edx, dword ptr [ebp-04]
:0041F0F3 52                      push edx
:0041F0F4 8B4510                  mov eax, dword ptr [ebp+10]
:0041F0F7 50                      push eax
:0041F0F8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F0FB 51                      push ecx
:0041F0FC 8B5508                  mov edx, dword ptr [ebp+08]
:0041F0FF 52                      push edx
:0041F100 E83B000000              call 0041F140
:0041F105 83C410                  add esp, 00000010
:0041F108 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041F10B 68FF000000              push 000000FF
:0041F110 8A45FC                  mov al, byte ptr [ebp-04]
:0041F113 50                      push eax
:0041F114 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F117 6BC970                  imul ecx, 00000070
:0041F11A 81C198224900            add ecx, 00492298
:0041F120 E80B57FEFF              call 00404830
:0041F125 6A00                    push 00000000
:0041F127 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F12A 51                      push ecx
:0041F12B 6808100000              push 00001008
:0041F130 8B5508                  mov edx, dword ptr [ebp+08]
:0041F133 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F134 FF15D8864B00            Call dword ptr [004B86D8]
:0041F13A EBA3                    jmp 0041F0DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F0EE(C)
|
:0041F13C 8BE5                    mov esp, ebp
:0041F13E 5D                      pop ebp
:0041F13F C3                      ret



* Referenced by a CALL at Address:
|:0041F100   
|
:0041F140 55                      push ebp
:0041F141 8BEC                    mov ebp, esp
:0041F143 83EC14                  sub esp, 00000014
:0041F146 6A00                    push 00000000
:0041F148 6A00                    push 00000000
:0041F14A 6804100000              push 00001004
:0041F14F 8B4508                  mov eax, dword ptr [ebp+08]
:0041F152 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F153 FF15D8864B00            Call dword ptr [004B86D8]
:0041F159 8945F8                  mov dword ptr [ebp-08], eax
:0041F15C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0041F163 C745F400000000          mov [ebp-0C], 00000000
:0041F16A EB09                    jmp 0041F175

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F1DD(U)
|
:0041F16C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F16F 83C101                  add ecx, 00000001
:0041F172 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F16A(U)
|
:0041F175 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041F178 3B55F8                  cmp edx, dword ptr [ebp-08]
:0041F17B 7D62                    jge 0041F1DF
:0041F17D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041F180 50                      push eax
:0041F181 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F184 51                      push ecx
:0041F185 E8EC84FFFF              call 00417676
:0041F18A 83C408                  add esp, 00000008
:0041F18D 8945F0                  mov dword ptr [ebp-10], eax
:0041F190 8B55F0                  mov edx, dword ptr [ebp-10]
:0041F193 C1EA10                  shr edx, 10
:0041F196 81E2FFFF0000            and edx, 0000FFFF
:0041F19C 81E2FFFF0000            and edx, 0000FFFF
:0041F1A2 8955EC                  mov dword ptr [ebp-14], edx
:0041F1A5 8B45F0                  mov eax, dword ptr [ebp-10]
:0041F1A8 25FFFF0000              and eax, 0000FFFF
:0041F1AD 3B4510                  cmp eax, dword ptr [ebp+10]
:0041F1B0 752B                    jne 0041F1DD
:0041F1B2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F1B5 6BC970                  imul ecx, 00000070
:0041F1B8 81C198224900            add ecx, 00492298
:0041F1BE E82D56FEFF              call 004047F0
:0041F1C3 25FF000000              and eax, 000000FF
:0041F1C8 3B45EC                  cmp eax, dword ptr [ebp-14]
:0041F1CB 7410                    je 0041F1DD
:0041F1CD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F1D0 894DFC                  mov dword ptr [ebp-04], ecx
:0041F1D3 8B5514                  mov edx, dword ptr [ebp+14]
:0041F1D6 8B45EC                  mov eax, dword ptr [ebp-14]
:0041F1D9 8902                    mov dword ptr [edx], eax
:0041F1DB EB02                    jmp 0041F1DF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F1B0(C), :0041F1CB(C)
|
:0041F1DD EB8D                    jmp 0041F16C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F17B(C), :0041F1DB(U)
|
:0041F1DF 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F1E2 8BE5                    mov esp, ebp
:0041F1E4 5D                      pop ebp
:0041F1E5 C3                      ret



* Referenced by a CALL at Address:
|:0041EA3E   
|
:0041F1E6 55                      push ebp
:0041F1E7 8BEC                    mov ebp, esp
:0041F1E9 83EC18                  sub esp, 00000018
:0041F1EC 8B451C                  mov eax, dword ptr [ebp+1C]
:0041F1EF 50                      push eax
:0041F1F0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F1F3 51                      push ecx
:0041F1F4 E87D84FFFF              call 00417676
:0041F1F9 83C408                  add esp, 00000008
:0041F1FC C1E810                  shr eax, 10
:0041F1FF 25FFFF0000              and eax, 0000FFFF
:0041F204 25FFFF0000              and eax, 0000FFFF
:0041F209 8945F8                  mov dword ptr [ebp-08], eax
:0041F20C 8B55F8                  mov edx, dword ptr [ebp-08]
:0041F20F 52                      push edx
:0041F210 B9C8E24A00              mov ecx, 004AE2C8
:0041F215 E8460C0000              call 0041FE60
:0041F21A 25FFFF0000              and eax, 0000FFFF
:0041F21F 8945FC                  mov dword ptr [ebp-04], eax
:0041F222 681A040000              push 0000041A
:0041F227 8B4508                  mov eax, dword ptr [ebp+08]
:0041F22A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041F22B FF15AC864B00            Call dword ptr [004B86AC]
:0041F231 394510                  cmp dword ptr [ebp+10], eax
:0041F234 0F85ED000000            jne 0041F327
:0041F23A 6A01                    push 00000001
:0041F23C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F23F 51                      push ecx
:0041F240 8B5514                  mov edx, dword ptr [ebp+14]
:0041F243 52                      push edx
:0041F244 8B4508                  mov eax, dword ptr [ebp+08]
:0041F247 50                      push eax
:0041F248 E840AAFFFF              call 00419C8D
:0041F24D 83C410                  add esp, 00000010
:0041F250 85C0                    test eax, eax
:0041F252 0F84CA000000            je 0041F322
:0041F258 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041F25B 51                      push ecx
:0041F25C E8B6AAFFFF              call 00419D17
:0041F261 83C404                  add esp, 00000004
:0041F264 25FF000000              and eax, 000000FF
:0041F269 8945F4                  mov dword ptr [ebp-0C], eax
:0041F26C 8A55FC                  mov dl, byte ptr [ebp-04]
:0041F26F 52                      push edx
:0041F270 8A45F4                  mov al, byte ptr [ebp-0C]
:0041F273 50                      push eax
:0041F274 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041F277 6BC970                  imul ecx, 00000070
:0041F27A 81C198224900            add ecx, 00492298
:0041F280 E8AB55FEFF              call 00404830
:0041F285 68FFFF0000              push 0000FFFF
:0041F28A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041F28D 51                      push ecx
:0041F28E B9C8E24A00              mov ecx, 004AE2C8
:0041F293 E8C884FEFF              call 00407760
:0041F298 8A55F4                  mov dl, byte ptr [ebp-0C]
:0041F29B 52                      push edx
:0041F29C 8B4514                  mov eax, dword ptr [ebp+14]
:0041F29F 50                      push eax
:0041F2A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F2A3 51                      push ecx
:0041F2A4 E803A9FFFF              call 00419BAC
:0041F2A9 83C40C                  add esp, 0000000C
:0041F2AC 8B5514                  mov edx, dword ptr [ebp+14]
:0041F2AF 52                      push edx
:0041F2B0 8B4510                  mov eax, dword ptr [ebp+10]
:0041F2B3 50                      push eax
:0041F2B4 E8B87FFFFF              call 00417271
:0041F2B9 83C408                  add esp, 00000008
:0041F2BC 6A00                    push 00000000
:0041F2BE 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0041F2C1 51                      push ecx
:0041F2C2 6808100000              push 00001008
:0041F2C7 8B550C                  mov edx, dword ptr [ebp+0C]
:0041F2CA 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F2CB FF15D8864B00            Call dword ptr [004B86D8]
:0041F2D1 6A00                    push 00000000
:0041F2D3 6A00                    push 00000000
:0041F2D5 6804100000              push 00001004
:0041F2DA 8B450C                  mov eax, dword ptr [ebp+0C]
:0041F2DD 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F2DE FF15D8864B00            Call dword ptr [004B86D8]
:0041F2E4 83E801                  sub eax, 00000001
:0041F2E7 3B451C                  cmp eax, dword ptr [ebp+1C]
:0041F2EA 7D1B                    jge 0041F307
:0041F2EC 6A00                    push 00000000
:0041F2EE 6A00                    push 00000000
:0041F2F0 6804100000              push 00001004
:0041F2F5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F2F8 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F2F9 FF15D8864B00            Call dword ptr [004B86D8]
:0041F2FF 83E801                  sub eax, 00000001
:0041F302 8945EC                  mov dword ptr [ebp-14], eax
:0041F305 EB06                    jmp 0041F30D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F2EA(C)
|
:0041F307 8B551C                  mov edx, dword ptr [ebp+1C]
:0041F30A 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F305(U)
|
:0041F30D 6A00                    push 00000000
:0041F30F 8B45EC                  mov eax, dword ptr [ebp-14]
:0041F312 50                      push eax
:0041F313 6813100000              push 00001013
:0041F318 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F31B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F31C FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F252(C)
|
:0041F322 E9B6000000              jmp 0041F3DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F234(C)
|
:0041F327 B9C8E24A00              mov ecx, 004AE2C8
:0041F32C E89F030100              call 0042F6D0
:0041F331 3D50C30000              cmp eax, 0000C350
:0041F336 721A                    jb 0041F352

* Possible StringData Ref from Data Obj ->"AFC"
                                  |
:0041F338 6888774700              push 00477788
:0041F33D 6A00                    push 00000000
:0041F33F 8B5508                  mov edx, dword ptr [ebp+08]
:0041F342 52                      push edx
:0041F343 E8177DFFFF              call 0041705F
:0041F348 83C40C                  add esp, 0000000C
:0041F34B 33C0                    xor eax, eax
:0041F34D E98D000000              jmp 0041F3DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F336(C)
|
:0041F352 6A01                    push 00000001
:0041F354 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F357 50                      push eax
:0041F358 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041F35B 51                      push ecx
:0041F35C 8B5508                  mov edx, dword ptr [ebp+08]
:0041F35F 52                      push edx
:0041F360 E860FCFFFF              call 0041EFC5
:0041F365 83C410                  add esp, 00000010
:0041F368 8945F0                  mov dword ptr [ebp-10], eax
:0041F36B 837DF000                cmp dword ptr [ebp-10], 00000000
:0041F36F 746C                    je 0041F3DD
:0041F371 8B45F0                  mov eax, dword ptr [ebp-10]
:0041F374 50                      push eax
:0041F375 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F378 51                      push ecx
:0041F379 8B550C                  mov edx, dword ptr [ebp+0C]
:0041F37C 52                      push edx
:0041F37D E861000000              call 0041F3E3
:0041F382 83C40C                  add esp, 0000000C
:0041F385 6A00                    push 00000000
:0041F387 6A00                    push 00000000
:0041F389 6804100000              push 00001004
:0041F38E 8B450C                  mov eax, dword ptr [ebp+0C]
:0041F391 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F392 FF15D8864B00            Call dword ptr [004B86D8]
:0041F398 2B45F0                  sub eax, dword ptr [ebp-10]
:0041F39B 3B451C                  cmp eax, dword ptr [ebp+1C]
:0041F39E 7D1B                    jge 0041F3BB
:0041F3A0 6A00                    push 00000000
:0041F3A2 6A00                    push 00000000
:0041F3A4 6804100000              push 00001004
:0041F3A9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F3AC 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F3AD FF15D8864B00            Call dword ptr [004B86D8]
:0041F3B3 2B45F0                  sub eax, dword ptr [ebp-10]
:0041F3B6 8945E8                  mov dword ptr [ebp-18], eax
:0041F3B9 EB06                    jmp 0041F3C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F39E(C)
|
:0041F3BB 8B551C                  mov edx, dword ptr [ebp+1C]
:0041F3BE 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F3B9(U)
|
:0041F3C1 6A00                    push 00000000
:0041F3C3 8B45E8                  mov eax, dword ptr [ebp-18]
:0041F3C6 50                      push eax
:0041F3C7 6813100000              push 00001013
:0041F3CC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F3CF 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F3D0 FF15D8864B00            Call dword ptr [004B86D8]
:0041F3D6 B801000000              mov eax, 00000001
:0041F3DB EB02                    jmp 0041F3DF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F322(U), :0041F36F(C)
|
:0041F3DD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F34D(U), :0041F3DB(U)
|
:0041F3DF 8BE5                    mov esp, ebp
:0041F3E1 5D                      pop ebp
:0041F3E2 C3                      ret



* Referenced by a CALL at Address:
|:0041F37D   
|
:0041F3E3 55                      push ebp
:0041F3E4 8BEC                    mov ebp, esp
:0041F3E6 83EC0C                  sub esp, 0000000C
:0041F3E9 C745F800000000          mov [ebp-08], 00000000
:0041F3F0 EB09                    jmp 0041F3FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F442(U)
|
:0041F3F2 8B45F8                  mov eax, dword ptr [ebp-08]
:0041F3F5 83C001                  add eax, 00000001
:0041F3F8 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F3F0(U)
|
:0041F3FB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041F3FE 3B4D10                  cmp ecx, dword ptr [ebp+10]
:0041F401 7D41                    jge 0041F444
:0041F403 8D55FC                  lea edx, dword ptr [ebp-04]
:0041F406 52                      push edx
:0041F407 8B450C                  mov eax, dword ptr [ebp+0C]
:0041F40A 50                      push eax
:0041F40B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F40E 51                      push ecx
:0041F40F E834000000              call 0041F448
:0041F414 83C40C                  add esp, 0000000C
:0041F417 8945F4                  mov dword ptr [ebp-0C], eax
:0041F41A 68FFFF0000              push 0000FFFF
:0041F41F 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F422 52                      push edx
:0041F423 B9C8E24A00              mov ecx, 004AE2C8
:0041F428 E83383FEFF              call 00407760
:0041F42D 6A00                    push 00000000
:0041F42F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041F432 50                      push eax
:0041F433 6808100000              push 00001008
:0041F438 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F43B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F43C FF15D8864B00            Call dword ptr [004B86D8]
:0041F442 EBAE                    jmp 0041F3F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F401(C)
|
:0041F444 8BE5                    mov esp, ebp
:0041F446 5D                      pop ebp
:0041F447 C3                      ret



* Referenced by a CALL at Address:
|:0041F40F   
|
:0041F448 55                      push ebp
:0041F449 8BEC                    mov ebp, esp
:0041F44B 83EC10                  sub esp, 00000010
:0041F44E 6A00                    push 00000000
:0041F450 6A00                    push 00000000
:0041F452 6804100000              push 00001004
:0041F457 8B4508                  mov eax, dword ptr [ebp+08]
:0041F45A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F45B FF15D8864B00            Call dword ptr [004B86D8]
:0041F461 8945F8                  mov dword ptr [ebp-08], eax
:0041F464 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0041F46B C745F400000000          mov [ebp-0C], 00000000
:0041F472 EB09                    jmp 0041F47D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F4C5(U)
|
:0041F474 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F477 83C101                  add ecx, 00000001
:0041F47A 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F472(U)
|
:0041F47D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041F480 3B55F8                  cmp edx, dword ptr [ebp-08]
:0041F483 7D42                    jge 0041F4C7
:0041F485 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041F488 50                      push eax
:0041F489 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F48C 51                      push ecx
:0041F48D E8E481FFFF              call 00417676
:0041F492 83C408                  add esp, 00000008
:0041F495 8945F0                  mov dword ptr [ebp-10], eax
:0041F498 8B55F0                  mov edx, dword ptr [ebp-10]
:0041F49B 81E2FFFF0000            and edx, 0000FFFF
:0041F4A1 3B550C                  cmp edx, dword ptr [ebp+0C]
:0041F4A4 751F                    jne 0041F4C5
:0041F4A6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041F4A9 8945FC                  mov dword ptr [ebp-04], eax
:0041F4AC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041F4AF C1E910                  shr ecx, 10
:0041F4B2 81E1FFFF0000            and ecx, 0000FFFF
:0041F4B8 81E1FFFF0000            and ecx, 0000FFFF
:0041F4BE 8B5510                  mov edx, dword ptr [ebp+10]
:0041F4C1 890A                    mov dword ptr [edx], ecx
:0041F4C3 EB02                    jmp 0041F4C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F4A4(C)
|
:0041F4C5 EBAD                    jmp 0041F474

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F483(C), :0041F4C3(U)
|
:0041F4C7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F4CA 8BE5                    mov esp, ebp
:0041F4CC 5D                      pop ebp
:0041F4CD C3                      ret



* Referenced by a CALL at Address:
|:0041E00B   
|
:0041F4CE 55                      push ebp
:0041F4CF 8BEC                    mov ebp, esp
:0041F4D1 83EC2C                  sub esp, 0000002C
:0041F4D4 8B4514                  mov eax, dword ptr [ebp+14]
:0041F4D7 8945F8                  mov dword ptr [ebp-08], eax
:0041F4DA 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041F4DD 894DFC                  mov dword ptr [ebp-04], ecx
:0041F4E0 8B55F8                  mov edx, dword ptr [ebp-08]
:0041F4E3 8B4208                  mov eax, dword ptr [edx+08]
:0041F4E6 8945D8                  mov dword ptr [ebp-28], eax
:0041F4E9 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0041F4EC 81C196000000            add ecx, 00000096
:0041F4F2 894DD8                  mov dword ptr [ebp-28], ecx
:0041F4F5 817DD894000000          cmp dword ptr [ebp-28], 00000094
:0041F4FC 0F877F010000            ja 0041F681
:0041F502 8B45D8                  mov eax, dword ptr [ebp-28]
:0041F505 33D2                    xor edx, edx
:0041F507 8A909FF64100            mov dl, byte ptr [eax+0041F69F]
:0041F50D FF249587F64100          jmp dword ptr [4*edx+0041F687]
:0041F514 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F517 8B512C                  mov edx, dword ptr [ecx+2C]
:0041F51A 8955F4                  mov dword ptr [ebp-0C], edx
:0041F51D C645F000                mov [ebp-10], 00
:0041F521 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F524 8B4814                  mov ecx, dword ptr [eax+14]
:0041F527 894DD4                  mov dword ptr [ebp-2C], ecx
:0041F52A 837DD400                cmp dword ptr [ebp-2C], 00000000
:0041F52E 740E                    je 0041F53E
:0041F530 837DD400                cmp dword ptr [ebp-2C], 00000000
:0041F534 7E76                    jle 0041F5AC
:0041F536 837DD407                cmp dword ptr [ebp-2C], 00000007
:0041F53A 7E1B                    jle 0041F557
:0041F53C EB6E                    jmp 0041F5AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F52E(C)
|
:0041F53E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F541 6BC970                  imul ecx, 00000070
:0041F544 81C198224900            add ecx, 00492298
:0041F54A E85346FEFF              call 00403BA2
:0041F54F 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F552 894220                  mov dword ptr [edx+20], eax
:0041F555 EB5F                    jmp 0041F5B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F53A(C)
|
:0041F557 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F55A 8B4814                  mov ecx, dword ptr [eax+14]
:0041F55D 83E901                  sub ecx, 00000001
:0041F560 51                      push ecx
:0041F561 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F564 6BC970                  imul ecx, 00000070
:0041F567 81C198224900            add ecx, 00492298
:0041F56D E8FEFCFEFF              call 0040F270
:0041F572 8845F0                  mov byte ptr [ebp-10], al
:0041F575 8B55F0                  mov edx, dword ptr [ebp-10]
:0041F578 81E2FF000000            and edx, 000000FF
:0041F57E 85D2                    test edx, edx
:0041F580 741E                    je 0041F5A0
:0041F582 8B45F0                  mov eax, dword ptr [ebp-10]
:0041F585 25FF000000              and eax, 000000FF
:0041F58A 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0041F58B 6898774700              push 00477798
:0041F590 E83283FFFF              call 004178C7
:0041F595 83C408                  add esp, 00000008
:0041F598 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F59B 894120                  mov dword ptr [ecx+20], eax
:0041F59E EB0A                    jmp 0041F5AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F580(C)
|
:0041F5A0 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->""
                                  |
:0041F5A3 C742209C774700          mov [edx+20], 0047779C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F59E(U)
|
:0041F5AA EB0A                    jmp 0041F5B6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F534(C), :0041F53C(U)
|
:0041F5AC 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->""
                                  |
:0041F5AF C74020A0774700          mov [eax+20], 004777A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F555(U), :0041F5AA(U)
|
:0041F5B6 E9C6000000              jmp 0041F681
:0041F5BB 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041F5BE 894DEC                  mov dword ptr [ebp-14], ecx
:0041F5C1 8B55EC                  mov edx, dword ptr [ebp-14]
:0041F5C4 8B4214                  mov eax, dword ptr [edx+14]
:0041F5C7 83E002                  and eax, 00000002
:0041F5CA 85C0                    test eax, eax
:0041F5CC 7439                    je 0041F607
:0041F5CE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041F5D1 8B11                    mov edx, dword ptr [ecx]
:0041F5D3 52                      push edx
:0041F5D4 E8898DFFFF              call 00418362
:0041F5D9 83C404                  add esp, 00000004
:0041F5DC 8945E8                  mov dword ptr [ebp-18], eax
:0041F5DF 8B45E8                  mov eax, dword ptr [ebp-18]
:0041F5E2 50                      push eax
:0041F5E3 681A040000              push 0000041A
:0041F5E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F5EB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041F5EC FF15AC864B00            Call dword ptr [004B86AC]
:0041F5F2 50                      push eax
:0041F5F3 E8797CFFFF              call 00417271
:0041F5F8 83C408                  add esp, 00000008
:0041F5FB 8B5508                  mov edx, dword ptr [ebp+08]
:0041F5FE 52                      push edx
:0041F5FF E870E1FFFF              call 0041D774
:0041F604 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F5CC(C)
|
:0041F607 EB78                    jmp 0041F681
:0041F609 8B4514                  mov eax, dword ptr [ebp+14]
:0041F60C 8945E4                  mov dword ptr [ebp-1C], eax
:0041F60F 68B8050000              push 000005B8
:0041F614 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F617 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041F618 FF15AC864B00            Call dword ptr [004B86AC]
:0041F61E 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041F621 3902                    cmp dword ptr [edx], eax
:0041F623 752D                    jne 0041F652
:0041F625 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041F628 8B08                    mov ecx, dword ptr [eax]
:0041F62A 51                      push ecx
:0041F62B E8C280FFFF              call 004176F2
:0041F630 83C404                  add esp, 00000004
:0041F633 8945E0                  mov dword ptr [ebp-20], eax
:0041F636 33D2                    xor edx, edx
:0041F638 837DE000                cmp dword ptr [ebp-20], 00000000
:0041F63C 0F9CC2                  setl dl
:0041F63F 4A                      dec edx
:0041F640 2355E0                  and edx, dword ptr [ebp-20]
:0041F643 52                      push edx
:0041F644 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041F647 8B08                    mov ecx, dword ptr [eax]
:0041F649 51                      push ecx
:0041F64A E8BE7AFFFF              call 0041710D
:0041F64F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F623(C)
|
:0041F652 EB2D                    jmp 0041F681
:0041F654 8B5514                  mov edx, dword ptr [ebp+14]
:0041F657 8955DC                  mov dword ptr [ebp-24], edx
:0041F65A 6834F74100              push 0041F734
:0041F65F 8B45DC                  mov eax, dword ptr [ebp-24]
:0041F662 8B4810                  mov ecx, dword ptr [eax+10]
:0041F665 51                      push ecx
:0041F666 6830100000              push 00001030
:0041F66B 8B55DC                  mov edx, dword ptr [ebp-24]
:0041F66E 8B02                    mov eax, dword ptr [edx]
:0041F670 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041F671 FF15D8864B00            Call dword ptr [004B86D8]
:0041F677 B910584800              mov ecx, 00485810
:0041F67C E8BF080000              call 0041FF40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F4FC(C), :0041F5B6(U), :0041F607(U), :0041F652(U)
|
:0041F681 33C0                    xor eax, eax
:0041F683 8BE5                    mov esp, ebp
:0041F685 5D                      pop ebp
:0041F686 C3                      ret



:0041F687 14F54100                DWORD 0041F514
:0041F68B 54F64100                DWORD 0041F654
:0041F68F BBF54100                DWORD 0041F5BB
:0041F693 09F64100                DWORD 0041F609
:0041F697 09F64100                DWORD 0041F609
:0041F69B 81F64100                DWORD 0041F681


:0041F69F 000505050505            add byte ptr [05050505], al
:0041F6A5 0505050505              add eax, 05050505
:0041F6AA 0505050505              add eax, 05050505
:0041F6AF 0505050505              add eax, 05050505
:0041F6B4 0505050505              add eax, 05050505
:0041F6B9 0505050505              add eax, 05050505
:0041F6BE 0505050505              add eax, 05050505
:0041F6C3 0505050505              add eax, 05050505
:0041F6C8 0501050505              add eax, 05050501
:0041F6CD 0505050205              add eax, 05020505
:0041F6D2 0505050505              add eax, 05050505
:0041F6D7 0505050505              add eax, 05050505
:0041F6DC 0505050505              add eax, 05050505
:0041F6E1 0505050505              add eax, 05050505
:0041F6E6 0505050505              add eax, 05050505
:0041F6EB 0505050505              add eax, 05050505
:0041F6F0 0505050505              add eax, 05050505
:0041F6F5 0505050505              add eax, 05050505
:0041F6FA 0505050505              add eax, 05050505
:0041F6FF 0505050505              add eax, 05050505
:0041F704 0505050505              add eax, 05050505
:0041F709 0505050505              add eax, 05050505
:0041F70E 0505050505              add eax, 05050505
:0041F713 0505050505              add eax, 05050505
:0041F718 0505050505              add eax, 05050505
:0041F71D 0505050505              add eax, 05050505
:0041F722 0505050505              add eax, 05050505
:0041F727 0505050505              add eax, 05050505
:0041F72C 0505050303              add eax, 03030505
:0041F731 050404558B              add eax, 8B550404
:0041F736 EC                      in al, dx
:0041F737 83EC1C                  sub esp, 0000001C
:0041F73A 8B4508                  mov eax, dword ptr [ebp+08]
:0041F73D 8945F8                  mov dword ptr [ebp-08], eax
:0041F740 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041F743 894DF4                  mov dword ptr [ebp-0C], ecx
:0041F746 C745FC00000000          mov [ebp-04], 00000000
:0041F74D 8B5510                  mov edx, dword ptr [ebp+10]
:0041F750 8955E4                  mov dword ptr [ebp-1C], edx
:0041F753 837DE400                cmp dword ptr [ebp-1C], 00000000
:0041F757 7415                    je 0041F76E
:0041F759 837DE400                cmp dword ptr [ebp-1C], 00000000
:0041F75D 0F8EA7000000            jle 0041F80A
:0041F763 837DE407                cmp dword ptr [ebp-1C], 00000007
:0041F767 7E13                    jle 0041F77C
:0041F769 E99C000000              jmp 0041F80A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F757(C)
|
:0041F76E 8B45F8                  mov eax, dword ptr [ebp-08]
:0041F771 2B45F4                  sub eax, dword ptr [ebp-0C]
:0041F774 8945FC                  mov dword ptr [ebp-04], eax
:0041F777 E995000000              jmp 0041F811

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F767(C)
|
:0041F77C C745EC00000000          mov [ebp-14], 00000000
:0041F783 C745E800000000          mov [ebp-18], 00000000
:0041F78A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041F78D 83E901                  sub ecx, 00000001
:0041F790 894DF0                  mov dword ptr [ebp-10], ecx
:0041F793 8A55F0                  mov dl, byte ptr [ebp-10]
:0041F796 52                      push edx
:0041F797 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041F79A 6BC970                  imul ecx, 00000070
:0041F79D 81C198224900            add ecx, 00492298
:0041F7A3 E87344FEFF              call 00403C1B
:0041F7A8 85C0                    test eax, eax
:0041F7AA 741D                    je 0041F7C9
:0041F7AC 8A45F0                  mov al, byte ptr [ebp-10]
:0041F7AF 50                      push eax
:0041F7B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041F7B3 6BC970                  imul ecx, 00000070
:0041F7B6 81C198224900            add ecx, 00492298
:0041F7BC E8AFFAFEFF              call 0040F270
:0041F7C1 25FF000000              and eax, 000000FF
:0041F7C6 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F7AA(C)
|
:0041F7C9 8A4DF0                  mov cl, byte ptr [ebp-10]
:0041F7CC 51                      push ecx
:0041F7CD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F7D0 6BC970                  imul ecx, 00000070
:0041F7D3 81C198224900            add ecx, 00492298
:0041F7D9 E83D44FEFF              call 00403C1B
:0041F7DE 85C0                    test eax, eax
:0041F7E0 741D                    je 0041F7FF
:0041F7E2 8A55F0                  mov dl, byte ptr [ebp-10]
:0041F7E5 52                      push edx
:0041F7E6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041F7E9 6BC970                  imul ecx, 00000070
:0041F7EC 81C198224900            add ecx, 00492298
:0041F7F2 E879FAFEFF              call 0040F270
:0041F7F7 25FF000000              and eax, 000000FF
:0041F7FC 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F7E0(C)
|
:0041F7FF 8B45EC                  mov eax, dword ptr [ebp-14]
:0041F802 2B45E8                  sub eax, dword ptr [ebp-18]
:0041F805 8945FC                  mov dword ptr [ebp-04], eax
:0041F808 EB07                    jmp 0041F811

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F75D(C), :0041F769(U)
|
:0041F80A C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F777(U), :0041F808(U)
|
:0041F811 B910584800              mov ecx, 00485810
:0041F816 E865070000              call 0041FF80
:0041F81B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F81E 0FAFC1                  imul eax, ecx
:0041F821 8BE5                    mov esp, ebp
:0041F823 5D                      pop ebp
:0041F824 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0041E04A   
|
:0041F827 55                      push ebp
:0041F828 8BEC                    mov ebp, esp
:0041F82A 83EC1C                  sub esp, 0000001C
:0041F82D 56                      push esi
:0041F82E 57                      push edi
:0041F82F 8B4514                  mov eax, dword ptr [ebp+14]
:0041F832 8945FC                  mov dword ptr [ebp-04], eax
:0041F835 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F838 8B5108                  mov edx, dword ptr [ecx+08]
:0041F83B 8955E4                  mov dword ptr [ebp-1C], edx
:0041F83E 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041F841 83C06D                  add eax, 0000006D
:0041F844 8945E4                  mov dword ptr [ebp-1C], eax
:0041F847 837DE46B                cmp dword ptr [ebp-1C], 0000006B
:0041F84B 0F87F9000000            ja 0041F94A
:0041F851 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041F854 33C9                    xor ecx, ecx
:0041F856 8A8AA1F94100            mov cl, byte ptr [edx+0041F9A1]
:0041F85C FF248D89F94100          jmp dword ptr [4*ecx+0041F989]
:0041F863 8B7514                  mov esi, dword ptr [ebp+14]

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0041F866 B90B000000              mov ecx, 0000000B
:0041F86B 8B7D18                  mov edi, dword ptr [ebp+18]
:0041F86E F3                      repz
:0041F86F A5                      movsd
:0041F870 8B4518                  mov eax, dword ptr [ebp+18]
:0041F873 50                      push eax
:0041F874 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F877 51                      push ecx
:0041F878 E80EB8FFFF              call 0041B08B
:0041F87D 83C408                  add esp, 00000008
:0041F880 8B551C                  mov edx, dword ptr [ebp+1C]
:0041F883 8902                    mov dword ptr [edx], eax
:0041F885 E9F7000000              jmp 0041F981
:0041F88A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F88D 50                      push eax
:0041F88E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041F891 51                      push ecx
:0041F892 8B5508                  mov edx, dword ptr [ebp+08]
:0041F895 52                      push edx
:0041F896 E807020000              call 0041FAA2
:0041F89B 83C40C                  add esp, 0000000C
:0041F89E E9DE000000              jmp 0041F981
:0041F8A3 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F8A6 8178041A040000          cmp dword ptr [eax+04], 0000041A
:0041F8AD 7531                    jne 0041F8E0
:0041F8AF 68B8050000              push 000005B8
:0041F8B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F8B7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041F8B8 FF15AC864B00            Call dword ptr [004B86AC]
:0041F8BE 50                      push eax
:0041F8BF E89E8AFFFF              call 00418362
:0041F8C4 83C404                  add esp, 00000004
:0041F8C7 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041F8CA 6A02                    push 00000002
:0041F8CC 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F8CF 52                      push edx
:0041F8D0 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041F8D3 50                      push eax
:0041F8D4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F8D7 51                      push ecx
:0041F8D8 E835A9FFFF              call 0041A212
:0041F8DD 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F8AD(C)
|
:0041F8E0 E99C000000              jmp 0041F981
:0041F8E5 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F8E8 52                      push edx
:0041F8E9 8B4508                  mov eax, dword ptr [ebp+08]
:0041F8EC 50                      push eax
:0041F8ED E8CA020000              call 0041FBBC
:0041F8F2 83C408                  add esp, 00000008
:0041F8F5 E987000000              jmp 0041F981
:0041F8FA 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041F8FD 894DF0                  mov dword ptr [ebp-10], ecx
:0041F900 8B55F0                  mov edx, dword ptr [ebp-10]
:0041F903 8B4214                  mov eax, dword ptr [edx+14]
:0041F906 83E002                  and eax, 00000002
:0041F909 85C0                    test eax, eax
:0041F90B 743B                    je 0041F948
:0041F90D 68B8050000              push 000005B8
:0041F912 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F915 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041F916 FF15AC864B00            Call dword ptr [004B86AC]
:0041F91C 50                      push eax
:0041F91D E8408AFFFF              call 00418362
:0041F922 83C404                  add esp, 00000004
:0041F925 8945E8                  mov dword ptr [ebp-18], eax
:0041F928 8B55F0                  mov edx, dword ptr [ebp-10]
:0041F92B 33C0                    xor eax, eax
:0041F92D 668B4228                mov ax, word ptr [edx+28]
:0041F931 8945EC                  mov dword ptr [ebp-14], eax
:0041F934 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041F937 51                      push ecx
:0041F938 8B55E8                  mov edx, dword ptr [ebp-18]
:0041F93B 52                      push edx
:0041F93C 8B4508                  mov eax, dword ptr [ebp+08]
:0041F93F 50                      push eax
:0041F940 E8C8000000              call 0041FA0D
:0041F945 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F90B(C)
|
:0041F948 EB37                    jmp 0041F981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F84B(C)
|
:0041F94A 6A00                    push 00000000
:0041F94C 6A00                    push 00000000
:0041F94E 68F0000000              push 000000F0

* Possible Reference to Dialog: DialogID_00E9, CONTROL_ID:043C, "X"
                                  |
:0041F953 683C040000              push 0000043C
:0041F958 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F95B 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0041F95C FF15B4864B00            Call dword ptr [004B86B4]
:0041F962 8945F8                  mov dword ptr [ebp-08], eax
:0041F965 8B55F8                  mov edx, dword ptr [ebp-08]
:0041F968 52                      push edx
:0041F969 8B4514                  mov eax, dword ptr [ebp+14]
:0041F96C 50                      push eax
:0041F96D 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041F970 51                      push ecx
:0041F971 8B550C                  mov edx, dword ptr [ebp+0C]
:0041F974 52                      push edx
:0041F975 8B4508                  mov eax, dword ptr [ebp+08]
:0041F978 50                      push eax
:0041F979 E86F7FFFFF              call 004178ED
:0041F97E 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F885(U), :0041F89E(U), :0041F8E0(U), :0041F8F5(U), :0041F948(U)
|
:0041F981 33C0                    xor eax, eax
:0041F983 5F                      pop edi
:0041F984 5E                      pop esi
:0041F985 8BE5                    mov esp, ebp
:0041F987 5D                      pop ebp
:0041F988 C3                      ret



:0041F989 63F84100                DWORD 0041F863
:0041F98D FAF84100                DWORD 0041F8FA
:0041F991 8AF84100                DWORD 0041F88A
:0041F995 A3F84100                DWORD 0041F8A3
:0041F999 E5F84100                DWORD 0041F8E5
:0041F99D 4AF94100                DWORD 0041F94A


:0041F9A1 000505050505            add byte ptr [05050505], al
:0041F9A7 0505010505              add eax, 05050105
:0041F9AC 0505050505              add eax, 05050505
:0041F9B1 0505050505              add eax, 05050505
:0041F9B6 0505050505              add eax, 05050505
:0041F9BB 0505050505              add eax, 05050505
:0041F9C0 0505050505              add eax, 05050505
:0041F9C5 0505050505              add eax, 05050505
:0041F9CA 0505050505              add eax, 05050505
:0041F9CF 0505050505              add eax, 05050505
:0041F9D4 0505050505              add eax, 05050505
:0041F9D9 0505050505              add eax, 05050505
:0041F9DE 0505050505              add eax, 05050505
:0041F9E3 0505050505              add eax, 05050505
:0041F9E8 0505050505              add eax, 05050505
:0041F9ED 0505050505              add eax, 05050505
:0041F9F2 0505050505              add eax, 05050505
:0041F9F7 0505050505              add eax, 05050505
:0041F9FC 0505050505              add eax, 05050505
:0041FA01 0505050505              add eax, 05050505
:0041FA06 0505020205              add eax, 05020205
:0041FA0B 03                      BYTE 03h
:0041FA0C 04                      BYTE 04h


* Referenced by a CALL at Address:
|:0041F940   
|
:0041FA0D 55                      push ebp
:0041FA0E 8BEC                    mov ebp, esp
:0041FA10 51                      push ecx
:0041FA11 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041FA14 6BC933                  imul ecx, 00000033
:0041FA17 81C1C8EF4800            add ecx, 0048EFC8
:0041FA1D E86E4CFEFF              call 00404690
:0041FA22 25FF000000              and eax, 000000FF
:0041FA27 8945FC                  mov dword ptr [ebp-04], eax
:0041FA2A 837DFC06                cmp dword ptr [ebp-04], 00000006
:0041FA2E 7753                    ja 0041FA83
:0041FA30 8B4510                  mov eax, dword ptr [ebp+10]
:0041FA33 50                      push eax
:0041FA34 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041FA37 6BC970                  imul ecx, 00000070
:0041FA3A 81C198224900            add ecx, 00492298
:0041FA40 E84822FEFF              call 00401C8D
:0041FA45 85C0                    test eax, eax
:0041FA47 741D                    je 0041FA66

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:0041FA49 68A4774700              push 004777A4

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:04A9, ""
                                  |
:0041FA4E 68A9040000              push 000004A9
:0041FA53 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041FA56 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FA57 FF15AC864B00            Call dword ptr [004B86AC]
:0041FA5D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041FA5E FF15B0864B00            Call dword ptr [004B86B0]
:0041FA64 EB1B                    jmp 0041FA81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FA47(C)
|

* Possible StringData Ref from Data Obj ->"Lk˳ƨZ"
                                  |
:0041FA66 68B0774700              push 004777B0

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:04A9, ""
                                  |
:0041FA6B 68A9040000              push 000004A9
:0041FA70 8B5508                  mov edx, dword ptr [ebp+08]
:0041FA73 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FA74 FF15AC864B00            Call dword ptr [004B86AC]
:0041FA7A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041FA7B FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FA64(U)
|
:0041FA81 EB1B                    jmp 0041FA9E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FA2E(C)
|

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0041FA83 68C4774700              push 004777C4

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:04A9, ""
                                  |
:0041FA88 68A9040000              push 000004A9
:0041FA8D 8B4508                  mov eax, dword ptr [ebp+08]
:0041FA90 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FA91 FF15AC864B00            Call dword ptr [004B86AC]
:0041FA97 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041FA98 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FA81(U)
|
:0041FA9E 8BE5                    mov esp, ebp
:0041FAA0 5D                      pop ebp
:0041FAA1 C3                      ret



* Referenced by a CALL at Address:
|:0041F896   
|
:0041FAA2 55                      push ebp
:0041FAA3 8BEC                    mov ebp, esp
:0041FAA5 51                      push ecx
:0041FAA6 8B4510                  mov eax, dword ptr [ebp+10]
:0041FAA9 8B4804                  mov ecx, dword ptr [eax+04]
:0041FAAC 51                      push ecx
:0041FAAD 8B5508                  mov edx, dword ptr [ebp+08]
:0041FAB0 52                      push edx
:0041FAB1 E850000000              call 0041FB06
:0041FAB6 83C408                  add esp, 00000008
:0041FAB9 8B4510                  mov eax, dword ptr [ebp+10]
:0041FABC 8B08                    mov ecx, dword ptr [eax]
:0041FABE 51                      push ecx
:0041FABF E82E7CFFFF              call 004176F2
:0041FAC4 83C404                  add esp, 00000004
:0041FAC7 8945FC                  mov dword ptr [ebp-04], eax
:0041FACA 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041FACE 7D0E                    jge 0041FADE
:0041FAD0 8B5508                  mov edx, dword ptr [ebp+08]
:0041FAD3 52                      push edx
:0041FAD4 E89BDCFFFF              call 0041D774
:0041FAD9 83C404                  add esp, 00000004
:0041FADC EB24                    jmp 0041FB02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FACE(C)
|
:0041FADE 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FAE1 50                      push eax
:0041FAE2 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041FAE5 8B11                    mov edx, dword ptr [ecx]
:0041FAE7 52                      push edx
:0041FAE8 E82076FFFF              call 0041710D
:0041FAED 83C408                  add esp, 00000008
:0041FAF0 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FAF3 50                      push eax
:0041FAF4 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041FAF7 8B11                    mov edx, dword ptr [ecx]
:0041FAF9 52                      push edx
:0041FAFA E80FAFFFFF              call 0041AA0E
:0041FAFF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FADC(U)
|
:0041FB02 8BE5                    mov esp, ebp
:0041FB04 5D                      pop ebp
:0041FB05 C3                      ret



* Referenced by a CALL at Addresses:
|:0041FAB1   , :0041FBCB   
|
:0041FB06 55                      push ebp
:0041FB07 8BEC                    mov ebp, esp
:0041FB09 51                      push ecx
:0041FB0A 8B450C                  mov eax, dword ptr [ebp+0C]
:0041FB0D 8945FC                  mov dword ptr [ebp-04], eax
:0041FB10 817DFC1A040000          cmp dword ptr [ebp-04], 0000041A
:0041FB17 743D                    je 0041FB56
:0041FB19 817DFC48040000          cmp dword ptr [ebp-04], 00000448
:0041FB20 7402                    je 0041FB24
:0041FB22 EB64                    jmp 0041FB88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FB20(C)
|
:0041FB24 681A040000              push 0000041A
:0041FB29 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041FB2C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FB2D FF15AC864B00            Call dword ptr [004B86AC]
:0041FB33 50                      push eax
:0041FB34 E85896FFFF              call 00419191
:0041FB39 83C404                  add esp, 00000004
:0041FB3C 6849040000              push 00000449
:0041FB41 8B5508                  mov edx, dword ptr [ebp+08]
:0041FB44 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FB45 FF15AC864B00            Call dword ptr [004B86AC]
:0041FB4B 50                      push eax
:0041FB4C E84096FFFF              call 00419191
:0041FB51 83C404                  add esp, 00000004
:0041FB54 EB62                    jmp 0041FBB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FB17(C)
|
:0041FB56 6848040000              push 00000448
:0041FB5B 8B4508                  mov eax, dword ptr [ebp+08]
:0041FB5E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FB5F FF15AC864B00            Call dword ptr [004B86AC]
:0041FB65 50                      push eax
:0041FB66 E82696FFFF              call 00419191
:0041FB6B 83C404                  add esp, 00000004
:0041FB6E 6849040000              push 00000449
:0041FB73 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041FB76 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FB77 FF15AC864B00            Call dword ptr [004B86AC]
:0041FB7D 50                      push eax
:0041FB7E E80E96FFFF              call 00419191
:0041FB83 83C404                  add esp, 00000004
:0041FB86 EB30                    jmp 0041FBB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FB22(U)
|
:0041FB88 6848040000              push 00000448
:0041FB8D 8B5508                  mov edx, dword ptr [ebp+08]
:0041FB90 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FB91 FF15AC864B00            Call dword ptr [004B86AC]
:0041FB97 50                      push eax
:0041FB98 E8F495FFFF              call 00419191
:0041FB9D 83C404                  add esp, 00000004
:0041FBA0 681A040000              push 0000041A
:0041FBA5 8B4508                  mov eax, dword ptr [ebp+08]
:0041FBA8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041FBA9 FF15AC864B00            Call dword ptr [004B86AC]
:0041FBAF 50                      push eax
:0041FBB0 E8DC95FFFF              call 00419191
:0041FBB5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FB54(U), :0041FB86(U)
|
:0041FBB8 8BE5                    mov esp, ebp
:0041FBBA 5D                      pop ebp
:0041FBBB C3                      ret



* Referenced by a CALL at Address:
|:0041F8ED   
|
:0041FBBC 55                      push ebp
:0041FBBD 8BEC                    mov ebp, esp
:0041FBBF 51                      push ecx
:0041FBC0 8B450C                  mov eax, dword ptr [ebp+0C]
:0041FBC3 8B4804                  mov ecx, dword ptr [eax+04]
:0041FBC6 51                      push ecx
:0041FBC7 8B5508                  mov edx, dword ptr [ebp+08]
:0041FBCA 52                      push edx
:0041FBCB E836FFFFFF              call 0041FB06
:0041FBD0 83C408                  add esp, 00000008
:0041FBD3 8B450C                  mov eax, dword ptr [ebp+0C]
:0041FBD6 8B08                    mov ecx, dword ptr [eax]
:0041FBD8 51                      push ecx
:0041FBD9 E8147BFFFF              call 004176F2
:0041FBDE 83C404                  add esp, 00000004
:0041FBE1 8945FC                  mov dword ptr [ebp-04], eax
:0041FBE4 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041FBE8 7D0E                    jge 0041FBF8
:0041FBEA 8B5508                  mov edx, dword ptr [ebp+08]
:0041FBED 52                      push edx
:0041FBEE E881DBFFFF              call 0041D774
:0041FBF3 83C404                  add esp, 00000004
:0041FBF6 EB12                    jmp 0041FC0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FBE8(C)
|
:0041FBF8 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FBFB 50                      push eax
:0041FBFC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041FBFF 8B11                    mov edx, dword ptr [ecx]
:0041FC01 52                      push edx
:0041FC02 E80675FFFF              call 0041710D
:0041FC07 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FBF6(U)
|
:0041FC0A 8BE5                    mov esp, ebp
:0041FC0C 5D                      pop ebp
:0041FC0D C3                      ret



* Referenced by a CALL at Address:
|:0041E08F   
|
:0041FC0E 55                      push ebp
:0041FC0F 8BEC                    mov ebp, esp
:0041FC11 83EC2C                  sub esp, 0000002C
:0041FC14 8B4508                  mov eax, dword ptr [ebp+08]
:0041FC17 8B4814                  mov ecx, dword ptr [eax+14]
:0041FC1A 894DE8                  mov dword ptr [ebp-18], ecx
:0041FC1D 8B5508                  mov edx, dword ptr [ebp+08]
:0041FC20 8B4208                  mov eax, dword ptr [edx+08]
:0041FC23 50                      push eax
:0041FC24 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041FC27 51                      push ecx
:0041FC28 E8497AFFFF              call 00417676
:0041FC2D 83C408                  add esp, 00000008
:0041FC30 8945EC                  mov dword ptr [ebp-14], eax
:0041FC33 8B5508                  mov edx, dword ptr [ebp+08]
:0041FC36 83C21C                  add edx, 0000001C
:0041FC39 8B02                    mov eax, dword ptr [edx]
:0041FC3B 8945F0                  mov dword ptr [ebp-10], eax
:0041FC3E 8B4A04                  mov ecx, dword ptr [edx+04]
:0041FC41 894DF4                  mov dword ptr [ebp-0C], ecx
:0041FC44 8B4208                  mov eax, dword ptr [edx+08]
:0041FC47 8945F8                  mov dword ptr [ebp-08], eax
:0041FC4A 8B4A0C                  mov ecx, dword ptr [edx+0C]
:0041FC4D 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041FC50 6A02                    push 00000002
:0041FC52 8B5508                  mov edx, dword ptr [ebp+08]
:0041FC55 8B4208                  mov eax, dword ptr [edx+08]
:0041FC58 50                      push eax
:0041FC59 682C100000              push 0000102C
:0041FC5E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041FC61 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041FC62 FF15D8864B00            Call dword ptr [004B86D8]
:0041FC68 33D2                    xor edx, edx
:0041FC6A 83F802                  cmp eax, 00000002
:0041FC6D 0F94C2                  sete dl
:0041FC70 8955E0                  mov dword ptr [ebp-20], edx
:0041FC73 8B45E0                  mov eax, dword ptr [ebp-20]
:0041FC76 50                      push eax
:0041FC77 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0041FC7A 51                      push ecx
:0041FC7B 8B5508                  mov edx, dword ptr [ebp+08]
:0041FC7E 8B4218                  mov eax, dword ptr [edx+18]
:0041FC81 50                      push eax
:0041FC82 E8AEE0FFFF              call 0041DD35
:0041FC87 83C40C                  add esp, 0000000C
:0041FC8A 6A00                    push 00000000
:0041FC8C 6A00                    push 00000000
:0041FC8E 681D100000              push 0000101D
:0041FC93 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041FC96 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041FC97 FF15D8864B00            Call dword ptr [004B86D8]
:0041FC9D 8B55F0                  mov edx, dword ptr [ebp-10]
:0041FCA0 03D0                    add edx, eax
:0041FCA2 8955F8                  mov dword ptr [ebp-08], edx
:0041FCA5 8B45F0                  mov eax, dword ptr [ebp-10]
:0041FCA8 83C002                  add eax, 00000002
:0041FCAB 8945F0                  mov dword ptr [ebp-10], eax
:0041FCAE 6A00                    push 00000000
:0041FCB0 6824800000              push 00008024
:0041FCB5 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0041FCB8 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041FCB9 6AFF                    push FFFFFFFF
:0041FCBB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041FCBE 6BC970                  imul ecx, 00000070
:0041FCC1 81C198224900            add ecx, 00492298
:0041FCC7 E8D63EFEFF              call 00403BA2
:0041FCCC 50                      push eax
:0041FCCD 8B5508                  mov edx, dword ptr [ebp+08]
:0041FCD0 8B4218                  mov eax, dword ptr [edx+18]
:0041FCD3 50                      push eax

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:0041FCD4 FF1564874B00            Call dword ptr [004B8764]
:0041FCDA C745E401000000          mov [ebp-1C], 00000001
:0041FCE1 EB09                    jmp 0041FCEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FE19(U)
|
:0041FCE3 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041FCE6 83C101                  add ecx, 00000001
:0041FCE9 894DE4                  mov dword ptr [ebp-1C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FCE1(U)
|
:0041FCEC 837DE408                cmp dword ptr [ebp-1C], 00000008
:0041FCF0 0F8D28010000            jnl 0041FE1E
:0041FCF6 6A00                    push 00000000
:0041FCF8 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041FCFB 52                      push edx
:0041FCFC 681D100000              push 0000101D
:0041FD01 8B45E8                  mov eax, dword ptr [ebp-18]
:0041FD04 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041FD05 FF15D8864B00            Call dword ptr [004B86D8]
:0041FD0B 8945DC                  mov dword ptr [ebp-24], eax
:0041FD0E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041FD11 894DF0                  mov dword ptr [ebp-10], ecx
:0041FD14 8B55F8                  mov edx, dword ptr [ebp-08]
:0041FD17 0355DC                  add edx, dword ptr [ebp-24]
:0041FD1A 8955F8                  mov dword ptr [ebp-08], edx
:0041FD1D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041FD20 83E801                  sub eax, 00000001
:0041FD23 50                      push eax
:0041FD24 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041FD27 6BC970                  imul ecx, 00000070
:0041FD2A 81C198224900            add ecx, 00492298
:0041FD30 E83BF5FEFF              call 0040F270
:0041FD35 8845D4                  mov byte ptr [ebp-2C], al
:0041FD38 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0041FD3B 81E1FF000000            and ecx, 000000FF
:0041FD41 85C9                    test ecx, ecx
:0041FD43 742E                    je 0041FD73
:0041FD45 8B55D4                  mov edx, dword ptr [ebp-2C]
:0041FD48 81E2FF000000            and edx, 000000FF
:0041FD4E 52                      push edx

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0041FD4F 68D0774700              push 004777D0
:0041FD54 E86E7BFFFF              call 004178C7
:0041FD59 83C408                  add esp, 00000008
:0041FD5C 50                      push eax
:0041FD5D 6A00                    push 00000000
:0041FD5F 6811100000              push 00001011
:0041FD64 8B45E8                  mov eax, dword ptr [ebp-18]
:0041FD67 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041FD68 FF15D8864B00            Call dword ptr [004B86D8]
:0041FD6E 8945D8                  mov dword ptr [ebp-28], eax
:0041FD71 EB19                    jmp 0041FD8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FD43(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:0041FD73 68D4774700              push 004777D4
:0041FD78 6A00                    push 00000000
:0041FD7A 6811100000              push 00001011
:0041FD7F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041FD82 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041FD83 FF15D8864B00            Call dword ptr [004B86D8]
:0041FD89 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FD71(U)
|
:0041FD8C 8B55D8                  mov edx, dword ptr [ebp-28]
:0041FD8F 3B55DC                  cmp edx, dword ptr [ebp-24]
:0041FD92 0F8D81000000            jnl 0041FE19
:0041FD98 8B45D4                  mov eax, dword ptr [ebp-2C]
:0041FD9B 25FF000000              and eax, 000000FF
:0041FDA0 85C0                    test eax, eax
:0041FDA2 7453                    je 0041FDF7
:0041FDA4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041FDA7 83E901                  sub ecx, 00000001
:0041FDAA 51                      push ecx
:0041FDAB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041FDAE 6BC970                  imul ecx, 00000070
:0041FDB1 81C198224900            add ecx, 00492298
:0041FDB7 E85F3EFEFF              call 00403C1B
:0041FDBC 85C0                    test eax, eax
:0041FDBE 7437                    je 0041FDF7

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041FDC0 6A02                    push 00000002
:0041FDC2 8B55D4                  mov edx, dword ptr [ebp-2C]
:0041FDC5 81E2FF000000            and edx, 000000FF
:0041FDCB 52                      push edx

* Possible StringData Ref from Data Obj ->"%2u"
                                  |
:0041FDCC 68D8774700              push 004777D8
:0041FDD1 E8F17AFFFF              call 004178C7
:0041FDD6 83C408                  add esp, 00000008
:0041FDD9 50                      push eax
:0041FDDA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041FDDD 83C001                  add eax, 00000001
:0041FDE0 50                      push eax
:0041FDE1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041FDE4 83C102                  add ecx, 00000002
:0041FDE7 51                      push ecx
:0041FDE8 8B5508                  mov edx, dword ptr [ebp+08]
:0041FDEB 8B4218                  mov eax, dword ptr [edx+18]
:0041FDEE 50                      push eax

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:0041FDEF FF15A4844B00            Call dword ptr [004B84A4]
:0041FDF5 EB22                    jmp 0041FE19

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FDA2(C), :0041FDBE(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0041FDF7 6A02                    push 00000002

* Possible StringData Ref from Data Obj ->""
                                  |
:0041FDF9 68DC774700              push 004777DC
:0041FDFE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041FE01 83C101                  add ecx, 00000001
:0041FE04 51                      push ecx
:0041FE05 8B55F0                  mov edx, dword ptr [ebp-10]
:0041FE08 83C202                  add edx, 00000002
:0041FE0B 52                      push edx
:0041FE0C 8B4508                  mov eax, dword ptr [ebp+08]
:0041FE0F 8B4818                  mov ecx, dword ptr [eax+18]
:0041FE12 51                      push ecx

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:0041FE13 FF15A4844B00            Call dword ptr [004B84A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FD92(C), :0041FDF5(U)
|
:0041FE19 E9C5FEFFFF              jmp 0041FCE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FCF0(C)
|
:0041FE1E 8BE5                    mov esp, ebp
:0041FE20 5D                      pop ebp
:0041FE21 C3                      ret



* Referenced by a CALL at Address:
|:00453961   
|
:0041FE22 55                      push ebp
:0041FE23 8BEC                    mov ebp, esp
:0041FE25 8B4518                  mov eax, dword ptr [ebp+18]
:0041FE28 50                      push eax
:0041FE29 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041FE2C 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041FE2D 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0041FE32 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0041FE34 6A10                    push 00000010

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:0041FE36 FF1578844B00            Call dword ptr [004B8478]
:0041FE3C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041FE3F 8902                    mov dword ptr [edx], eax
:0041FE41 8B4518                  mov eax, dword ptr [ebp+18]
:0041FE44 50                      push eax
:0041FE45 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041FE48 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0041FE49 68FF000000              push 000000FF
:0041FE4E 6A20                    push 00000020
:0041FE50 6A20                    push 00000020

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:0041FE52 FF1578844B00            Call dword ptr [004B8478]
:0041FE58 8B5510                  mov edx, dword ptr [ebp+10]
:0041FE5B 8902                    mov dword ptr [edx], eax
:0041FE5D 5D                      pop ebp
:0041FE5E C3                      ret


:0041FE5F CC                      int 03

* Referenced by a CALL at Addresses:
|:004176D4   , :00419559   , :00419F9D   , :0041DCD2   , :0041F215   
|
:0041FE60 55                      push ebp
:0041FE61 8BEC                    mov ebp, esp
:0041FE63 51                      push ecx
:0041FE64 894DFC                  mov dword ptr [ebp-04], ecx
:0041FE67 8B4508                  mov eax, dword ptr [ebp+08]
:0041FE6A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FE6D 668B444126              mov ax, word ptr [ecx+2*eax+26]
:0041FE72 8BE5                    mov esp, ebp
:0041FE74 5D                      pop ebp
:0041FE75 C20400                  ret 0004


:0041FE78 CC                      int 03
:0041FE79 CC                      int 03
:0041FE7A CC                      int 03
:0041FE7B CC                      int 03
:0041FE7C CC                      int 03
:0041FE7D CC                      int 03
:0041FE7E CC                      int 03
:0041FE7F CC                      int 03

* Referenced by a CALL at Address:
|:00417037   
|
:0041FE80 55                      push ebp
:0041FE81 8BEC                    mov ebp, esp
:0041FE83 51                      push ecx
:0041FE84 894DFC                  mov dword ptr [ebp-04], ecx
:0041FE87 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FE8A C600FF                  mov byte ptr [eax], FF
:0041FE8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FE90 C6410101                mov [ecx+01], 01

* Possible StringData Ref from Data Obj ->"ItemIcon.dll"
                                  |
:0041FE94 68C07A4700              push 00477AC0
:0041FE99 E81603FFFF              call 004101B4
:0041FE9E 83C404                  add esp, 00000004
:0041FEA1 50                      push eax

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:0041FEA2 FF1564854B00            Call dword ptr [004B8564]
:0041FEA8 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FEAB 894204                  mov dword ptr [edx+04], eax

* Possible StringData Ref from Data Obj ->"Area.dll"
                                  |
:0041FEAE 68D07A4700              push 00477AD0
:0041FEB3 E8FC02FFFF              call 004101B4
:0041FEB8 83C404                  add esp, 00000004
:0041FEBB 50                      push eax

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:0041FEBC FF1564854B00            Call dword ptr [004B8564]
:0041FEC2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FEC5 894108                  mov dword ptr [ecx+08], eax
:0041FEC8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FECB E8B9450400              call 00464489
:0041FED0 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FED3 C7421400000000          mov [edx+14], 00000000
:0041FEDA 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FEDD C7401C00000000          mov [eax+1C], 00000000
:0041FEE4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FEE7 C6412001                mov [ecx+20], 01
:0041FEEB 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FEEE C6422101                mov [edx+21], 01
:0041FEF2 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FEF5 C64022FF                mov [eax+22], FF
:0041FEF9 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FEFC 8BE5                    mov esp, ebp
:0041FEFE 5D                      pop ebp
:0041FEFF C3                      ret



* Referenced by a CALL at Address:
|:00417058   
|
:0041FF00 55                      push ebp
:0041FF01 8BEC                    mov ebp, esp
:0041FF03 51                      push ecx
:0041FF04 894DFC                  mov dword ptr [ebp-04], ecx
:0041FF07 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FF0A 8B480C                  mov ecx, dword ptr [eax+0C]
:0041FF0D 51                      push ecx

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:0041FF0E FF155C844B00            Call dword ptr [004B845C]
:0041FF14 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FF17 8B4210                  mov eax, dword ptr [edx+10]
:0041FF1A 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:0041FF1B FF155C844B00            Call dword ptr [004B845C]
:0041FF21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FF24 8B5104                  mov edx, dword ptr [ecx+04]
:0041FF27 52                      push edx

* Reference To: KERNEL32.FreeLibrary, Ord:0098h
                                  |
:0041FF28 FF1568854B00            Call dword ptr [004B8568]
:0041FF2E 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FF31 8B4808                  mov ecx, dword ptr [eax+08]
:0041FF34 51                      push ecx

* Reference To: KERNEL32.FreeLibrary, Ord:0098h
                                  |
:0041FF35 FF1568854B00            Call dword ptr [004B8568]
:0041FF3B 8BE5                    mov esp, ebp
:0041FF3D 5D                      pop ebp
:0041FF3E C3                      ret


:0041FF3F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041796A   , :0041F67C   , :0045D1A3   , :004674FC   
|
:0041FF40 55                      push ebp
:0041FF41 8BEC                    mov ebp, esp
:0041FF43 51                      push ecx
:0041FF44 894DFC                  mov dword ptr [ebp-04], ecx
:0041FF47 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FF4A 8A4001                  mov al, byte ptr [eax+01]
:0041FF4D 80C9FF                  or cl, FF
:0041FF50 F6E9                    imul cl
:0041FF52 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FF55 884201                  mov byte ptr [edx+01], al
:0041FF58 8BE5                    mov esp, ebp
:0041FF5A 5D                      pop ebp
:0041FF5B C3                      ret


:0041FF5C CC                      int 03
:0041FF5D CC                      int 03
:0041FF5E CC                      int 03
:0041FF5F CC                      int 03

* Referenced by a CALL at Addresses:
|:00417A2B   , :00417BEF   , :00417CB8   , :00417E3A   , :00417E4D   
|:00418675   , :0041D8C7   , :0041D8FE   , :0041DC1B   , :0041EC5F   
|:0041ED00   , :0041EDC2   , :0041F083   
|
:0041FF60 55                      push ebp
:0041FF61 8BEC                    mov ebp, esp
:0041FF63 51                      push ecx
:0041FF64 894DFC                  mov dword ptr [ebp-04], ecx
:0041FF67 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FF6A 33C9                    xor ecx, ecx
:0041FF6C 8A4827                  mov cl, byte ptr [eax+27]
:0041FF6F 8BC1                    mov eax, ecx
:0041FF71 6BC00A                  imul eax, 0000000A
:0041FF74 8BE5                    mov esp, ebp
:0041FF76 5D                      pop ebp
:0041FF77 C3                      ret


:0041FF78 CC                      int 03
:0041FF79 CC                      int 03
:0041FF7A CC                      int 03
:0041FF7B CC                      int 03
:0041FF7C CC                      int 03
:0041FF7D CC                      int 03
:0041FF7E CC                      int 03
:0041FF7F CC                      int 03

* Referenced by a CALL at Addresses:
|:00417ED1   , :0041F816   , :0045D375   , :0046768E   
|
:0041FF80 55                      push ebp
:0041FF81 8BEC                    mov ebp, esp
:0041FF83 51                      push ecx
:0041FF84 894DFC                  mov dword ptr [ebp-04], ecx
:0041FF87 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FF8A 0FBE4001                movsx eax, byte ptr [eax+01]
:0041FF8E 8BE5                    mov esp, ebp
:0041FF90 5D                      pop ebp
:0041FF91 C3                      ret


:0041FF92 CC                      int 03
:0041FF93 CC                      int 03
:0041FF94 CC                      int 03
:0041FF95 CC                      int 03
:0041FF96 CC                      int 03
:0041FF97 CC                      int 03
:0041FF98 CC                      int 03
:0041FF99 CC                      int 03
:0041FF9A CC                      int 03
:0041FF9B CC                      int 03
:0041FF9C CC                      int 03
:0041FF9D CC                      int 03
:0041FF9E CC                      int 03
:0041FF9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00418904   , :00418C74   , :00419232   , :0041B770   , :0041B936   
|:0041CCB3   , :0041CE9A   , :0041CECF   , :0041E2B6   , :0041E7E4   
|:0041E8C6   , :004538D4   , :00453EA1   , :00453EE0   , :0045C022   
|:0045C074   , :0045C43D   , :0045D0EF   , :0045DA9A   , :0045E2EA   
|:0045E90E   , :0045E97F   
|
:0041FFA0 55                      push ebp
:0041FFA1 8BEC                    mov ebp, esp
:0041FFA3 51                      push ecx
:0041FFA4 894DFC                  mov dword ptr [ebp-04], ecx
:0041FFA7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FFAA 33C9                    xor ecx, ecx
:0041FFAC 8A4805                  mov cl, byte ptr [eax+05]
:0041FFAF 8BC1                    mov eax, ecx
:0041FFB1 BA01000000              mov edx, 00000001
:0041FFB6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041FFB9 D3E2                    shl edx, cl
:0041FFBB 23C2                    and eax, edx
:0041FFBD F7D8                    neg eax
:0041FFBF 1BC0                    sbb eax, eax
:0041FFC1 F7D8                    neg eax
:0041FFC3 8BE5                    mov esp, ebp
:0041FFC5 5D                      pop ebp
:0041FFC6 C20400                  ret 0004


:0041FFC9 CC                      int 03
:0041FFCA CC                      int 03
:0041FFCB CC                      int 03
:0041FFCC CC                      int 03
:0041FFCD CC                      int 03
:0041FFCE CC                      int 03
:0041FFCF CC                      int 03

* Referenced by a CALL at Addresses:
|:00418885   , :00419B47   , :00419FEC   , :0041CD43   , :004531AE   
|:00453A11   
|
:0041FFD0 55                      push ebp
:0041FFD1 8BEC                    mov ebp, esp
:0041FFD3 51                      push ecx
:0041FFD4 894DFC                  mov dword ptr [ebp-04], ecx
:0041FFD7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FFDA 8B4014                  mov eax, dword ptr [eax+14]
:0041FFDD 8BE5                    mov esp, ebp
:0041FFDF 5D                      pop ebp
:0041FFE0 C3                      ret


:0041FFE1 CC                      int 03
:0041FFE2 CC                      int 03
:0041FFE3 CC                      int 03
:0041FFE4 CC                      int 03
:0041FFE5 CC                      int 03
:0041FFE6 CC                      int 03
:0041FFE7 CC                      int 03
:0041FFE8 CC                      int 03
:0041FFE9 CC                      int 03
:0041FFEA CC                      int 03
:0041FFEB CC                      int 03
:0041FFEC CC                      int 03
:0041FFED CC                      int 03
:0041FFEE CC                      int 03
:0041FFEF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041ADBA   , :0041C303   , :0041C8CB   , :0045EDB1   
|
:0041FFF0 55                      push ebp
:0041FFF1 8BEC                    mov ebp, esp
:0041FFF3 51                      push ecx
:0041FFF4 894DFC                  mov dword ptr [ebp-04], ecx
:0041FFF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FFFA 8A4029                  mov al, byte ptr [eax+29]
:0041FFFD 8BE5                    mov esp, ebp
:0041FFFF 5D                      pop ebp
:00420000 C3                      ret


:00420001 CC                      int 03
:00420002 CC                      int 03
:00420003 CC                      int 03
:00420004 CC                      int 03
:00420005 CC                      int 03
:00420006 CC                      int 03
:00420007 CC                      int 03
:00420008 CC                      int 03
:00420009 CC                      int 03
:0042000A CC                      int 03
:0042000B CC                      int 03
:0042000C CC                      int 03
:0042000D CC                      int 03
:0042000E CC                      int 03
:0042000F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041AC5F   , :0041AE48   , :0041C1B4   , :0041C391   , :0041C77C   
|:0041C959   , :0045B94E   , :0045B97C   , :0045D54E   , :0045D711   
|:0045EC62   , :0045EE3F   
|
:00420010 55                      push ebp
:00420011 8BEC                    mov ebp, esp
:00420013 51                      push ecx
:00420014 894DFC                  mov dword ptr [ebp-04], ecx
:00420017 8B45FC                  mov eax, dword ptr [ebp-04]
:0042001A 8A402A                  mov al, byte ptr [eax+2A]
:0042001D 8BE5                    mov esp, ebp
:0042001F 5D                      pop ebp
:00420020 C3                      ret


:00420021 CC                      int 03
:00420022 CC                      int 03
:00420023 CC                      int 03
:00420024 CC                      int 03
:00420025 CC                      int 03
:00420026 CC                      int 03
:00420027 CC                      int 03
:00420028 CC                      int 03
:00420029 CC                      int 03
:0042002A CC                      int 03
:0042002B CC                      int 03
:0042002C CC                      int 03
:0042002D CC                      int 03
:0042002E CC                      int 03
:0042002F CC                      int 03

* Referenced by a CALL at Addresses:
|:004022CD   , :00402368   , :00415C58   , :00417A52   , :00417E65   
|:00417E7E   , :00418713   , :0041AB50   , :0041ADD3   , :0041AE61   
|:0041AED6   , :0041AEEF   , :0041AF73   , :0041B001   , :0041C0A5   
|:0041C31C   , :0041C3AA   , :0041C41F   , :0041C438   , :0041C4BC   
|:0041C54A   , :0041C66D   , :0041C8E4   , :0041C972   , :0041C9E7   
|:0041CA00   , :0041CA84   , :0041CB12   , :00430C79   , :00430EE2   
|:00433234   , :0045B930   , :0045B9C1   , :0045EB53   , :0045EDCA   
|:0045EE58   , :0045EECD   , :0045EEE6   , :0045EF6A   , :0045EFF8   
|
:00420030 55                      push ebp
:00420031 8BEC                    mov ebp, esp
:00420033 51                      push ecx
:00420034 894DFC                  mov dword ptr [ebp-04], ecx
:00420037 8B45FC                  mov eax, dword ptr [ebp-04]
:0042003A 8A402B                  mov al, byte ptr [eax+2B]
:0042003D 8BE5                    mov esp, ebp
:0042003F 5D                      pop ebp
:00420040 C3                      ret


:00420041 CC                      int 03
:00420042 CC                      int 03
:00420043 CC                      int 03
:00420044 CC                      int 03
:00420045 CC                      int 03
:00420046 CC                      int 03
:00420047 CC                      int 03
:00420048 CC                      int 03
:00420049 CC                      int 03
:0042004A CC                      int 03
:0042004B CC                      int 03
:0042004C CC                      int 03
:0042004D CC                      int 03
:0042004E CC                      int 03
:0042004F CC                      int 03

* Referenced by a CALL at Addresses:
|:004028C5   , :0041AD21   , :0041C276   , :0041C83E   , :0042A957   
|:004323D3   , :004326A2   , :00432884   , :00432CB5   , :0043CB7E   
|:0045D03C   , :0045ED24   
|
:00420050 55                      push ebp
:00420051 8BEC                    mov ebp, esp
:00420053 51                      push ecx
:00420054 894DFC                  mov dword ptr [ebp-04], ecx
:00420057 8B45FC                  mov eax, dword ptr [ebp-04]
:0042005A 8A402F                  mov al, byte ptr [eax+2F]
:0042005D 8BE5                    mov esp, ebp
:0042005F 5D                      pop ebp
:00420060 C3                      ret


:00420061 CC                      int 03
:00420062 CC                      int 03
:00420063 CC                      int 03
:00420064 CC                      int 03
:00420065 CC                      int 03
:00420066 CC                      int 03
:00420067 CC                      int 03
:00420068 CC                      int 03
:00420069 CC                      int 03
:0042006A CC                      int 03
:0042006B CC                      int 03
:0042006C CC                      int 03
:0042006D CC                      int 03
:0042006E CC                      int 03
:0042006F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041CEAC   , :0041CEE1   , :0041E7FA   , :0041E8D9   , :00453EB3   
|:00453EF3   , :0045C034   , :0045C087   , :0045E920   , :0045E992   
|
:00420070 55                      push ebp
:00420071 8BEC                    mov ebp, esp
:00420073 83EC08                  sub esp, 00000008
:00420076 894DFC                  mov dword ptr [ebp-04], ecx
:00420079 837D0800                cmp dword ptr [ebp+08], 00000000
:0042007D 7423                    je 004200A2
:0042007F B801000000              mov eax, 00000001
:00420084 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00420087 D3E0                    shl eax, cl
:00420089 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042008C 8A5105                  mov dl, byte ptr [ecx+05]
:0042008F 0AD0                    or dl, al
:00420091 8B45FC                  mov eax, dword ptr [ebp-04]
:00420094 885005                  mov byte ptr [eax+05], dl
:00420097 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042009A 8A5105                  mov dl, byte ptr [ecx+05]
:0042009D 8855FB                  mov byte ptr [ebp-05], dl
:004200A0 EB23                    jmp 004200C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042007D(C)
|
:004200A2 B801000000              mov eax, 00000001
:004200A7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004200AA D3E0                    shl eax, cl
:004200AC F7D0                    not eax
:004200AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004200B1 8A5105                  mov dl, byte ptr [ecx+05]
:004200B4 22D0                    and dl, al
:004200B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004200B9 885005                  mov byte ptr [eax+05], dl
:004200BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004200BF 8A5105                  mov dl, byte ptr [ecx+05]
:004200C2 8855FB                  mov byte ptr [ebp-05], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004200A0(U)
|
:004200C5 8BE5                    mov esp, ebp
:004200C7 5D                      pop ebp
:004200C8 C20800                  ret 0008


:004200CB CC                      int 03
:004200CC CC                      int 03
:004200CD CC                      int 03
:004200CE CC                      int 03
:004200CF CC                      int 03
:004200D0 55                      push ebp
:004200D1 8BEC                    mov ebp, esp
:004200D3 E807000000              call 004200DF
:004200D8 E811000000              call 004200EE
:004200DD 5D                      pop ebp
:004200DE C3                      ret



* Referenced by a CALL at Address:
|:004200D3   
|
:004200DF 55                      push ebp
:004200E0 8BEC                    mov ebp, esp
:004200E2 B980594800              mov ecx, 00485980
:004200E7 E8F43FFFFF              call 004140E0
:004200EC 5D                      pop ebp
:004200ED C3                      ret



* Referenced by a CALL at Address:
|:004200D8   
|
:004200EE 55                      push ebp
:004200EF 8BEC                    mov ebp, esp
:004200F1 6800014200              push 00420100
:004200F6 E875D30400              call 0046D470
:004200FB 83C404                  add esp, 00000004
:004200FE 5D                      pop ebp
:004200FF C3                      ret


:00420100 55                      push ebp
:00420101 8BEC                    mov ebp, esp
:00420103 B980594800              mov ecx, 00485980
:00420108 E802000000              call 0042010F
:0042010D 5D                      pop ebp
:0042010E C3                      ret



* Referenced by a CALL at Addresses:
|:00413827   , :00420108   
|
:0042010F 55                      push ebp
:00420110 8BEC                    mov ebp, esp
:00420112 51                      push ecx
:00420113 894DFC                  mov dword ptr [ebp-04], ecx
:00420116 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420119 E8E4000000              call 00420202
:0042011E 8BE5                    mov esp, ebp
:00420120 5D                      pop ebp
:00420121 C3                      ret



* Referenced by a CALL at Addresses:
|:00424AF8   , :00428106   , :00428391   , :00444A62   , :0045FD8B   
|:00460CDF   , :00460E53   , :0046138F   , :00461575   
|
:00420122 55                      push ebp
:00420123 8BEC                    mov ebp, esp
:00420125 51                      push ecx
:00420126 894DFC                  mov dword ptr [ebp-04], ecx
:00420129 E820C40400              call 0046C54E
:0042012E A1380E4B00              mov eax, dword ptr [004B0E38]
:00420133 50                      push eax
:00420134 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420137 E8DF070000              call 0042091B
:0042013C 8BE5                    mov esp, ebp
:0042013E 5D                      pop ebp
:0042013F C3                      ret


:00420140 55                      push ebp
:00420141 8BEC                    mov ebp, esp
:00420143 83EC0C                  sub esp, 0000000C
:00420146 894DF4                  mov dword ptr [ebp-0C], ecx
:00420149 8B4508                  mov eax, dword ptr [ebp+08]
:0042014C 8945F8                  mov dword ptr [ebp-08], eax
:0042014F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00420152 894DFC                  mov dword ptr [ebp-04], ecx
:00420155 8D55F8                  lea edx, dword ptr [ebp-08]
:00420158 52                      push edx
:00420159 A1380E4B00              mov eax, dword ptr [004B0E38]
:0042015E 50                      push eax
:0042015F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420162 E818080000              call 0042097F
:00420167 8BE5                    mov esp, ebp
:00420169 5D                      pop ebp
:0042016A C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00426BC0   , :00426C77   , :0042809D   , :0042833D   , :004285CF   
|:00444DA1   , :00444E46   , :00444E55   , :00444FAF   , :0044553E   
|:0044D846   , :0044D8BA   , :00456082   , :00456F59   , :004571B4   
|:0045FF42   , :00460D4F   , :00460E40   , :004613BE   
|
:0042016D 55                      push ebp
:0042016E 8BEC                    mov ebp, esp
:00420170 51                      push ecx
:00420171 894DFC                  mov dword ptr [ebp-04], ecx
:00420174 A1380E4B00              mov eax, dword ptr [004B0E38]
:00420179 50                      push eax
:0042017A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042017D E881090000              call 00420B03
:00420182 8BE5                    mov esp, ebp
:00420184 5D                      pop ebp
:00420185 C3                      ret



* Referenced by a CALL at Addresses:
|:00423F51   , :00426591   , :00426D9F   , :00426E8D   , :00428110   
|:0042839B   , :00444A6C   , :0045FD95   , :00460CE9   , :00460E5D   
|:00461399   , :0046157F   
|
:00420186 55                      push ebp
:00420187 8BEC                    mov ebp, esp
:00420189 83EC08                  sub esp, 00000008
:0042018C 894DFC                  mov dword ptr [ebp-04], ecx

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:0042018F FF1540874B00            Call dword ptr [004B8740]
:00420195 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420198 3901                    cmp dword ptr [ecx], eax
:0042019A 750B                    jne 004201A7
:0042019C 8B55FC                  mov edx, dword ptr [ebp-04]
:0042019F 8B4214                  mov eax, dword ptr [edx+14]
:004201A2 8945F8                  mov dword ptr [ebp-08], eax
:004201A5 EB07                    jmp 004201AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042019A(C)
|
:004201A7 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004201A5(U)
|
:004201AE 8B45F8                  mov eax, dword ptr [ebp-08]
:004201B1 8BE5                    mov esp, ebp
:004201B3 5D                      pop ebp
:004201B4 C3                      ret



* Referenced by a CALL at Addresses:
|:00423F5F   , :0042659E   , :00426DAC   , :00426E9A   , :00428120   
|:004283AB   , :00444A7C   , :0045FDA2   , :00460CF6   , :00460E6A   
|:004613A6   , :0046158C   
|
:004201B5 55                      push ebp
:004201B6 8BEC                    mov ebp, esp
:004201B8 83EC08                  sub esp, 00000008
:004201BB 894DFC                  mov dword ptr [ebp-04], ecx

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:004201BE FF1540874B00            Call dword ptr [004B8740]
:004201C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004201C7 3901                    cmp dword ptr [ecx], eax
:004201C9 750B                    jne 004201D6
:004201CB 8B55FC                  mov edx, dword ptr [ebp-04]
:004201CE 8B4218                  mov eax, dword ptr [edx+18]
:004201D1 8945F8                  mov dword ptr [ebp-08], eax
:004201D4 EB07                    jmp 004201DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004201C9(C)
|
:004201D6 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004201D4(U)
|
:004201DD 8B45F8                  mov eax, dword ptr [ebp-08]
:004201E0 8BE5                    mov esp, ebp
:004201E2 5D                      pop ebp
:004201E3 C3                      ret



* Referenced by a CALL at Address:
|:00426A61   
|
:004201E4 55                      push ebp
:004201E5 8BEC                    mov ebp, esp
:004201E7 51                      push ecx
:004201E8 894DFC                  mov dword ptr [ebp-04], ecx
:004201EB A1380E4B00              mov eax, dword ptr [004B0E38]
:004201F0 50                      push eax
:004201F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004201F4 E832050000              call 0042072B
:004201F9 B801000000              mov eax, 00000001
:004201FE 8BE5                    mov esp, ebp
:00420200 5D                      pop ebp
:00420201 C3                      ret



* Referenced by a CALL at Addresses:
|:00420119   , :004643E6   
|
:00420202 55                      push ebp
:00420203 8BEC                    mov ebp, esp
:00420205 51                      push ecx
:00420206 894DFC                  mov dword ptr [ebp-04], ecx
:00420209 6A7B                    push 0000007B
:0042020B A1300E4B00              mov eax, dword ptr [004B0E30]
:00420210 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420211 FF15EC864B00            Call dword ptr [004B86EC]
:00420217 A3C0594800              mov dword ptr [004859C0], eax
:0042021C 833DC059480000          cmp dword ptr [004859C0], 00000000
:00420223 7507                    jne 0042022C
:00420225 33C0                    xor eax, eax
:00420227 E9C3040000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420223(C)
|
:0042022C 6A7F                    push 0000007F
:0042022E 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00420234 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420235 FF15EC864B00            Call dword ptr [004B86EC]
:0042023B A3C4594800              mov dword ptr [004859C4], eax
:00420240 833DC459480000          cmp dword ptr [004859C4], 00000000
:00420247 7507                    jne 00420250
:00420249 33C0                    xor eax, eax
:0042024B E99F040000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420247(C)
|
:00420250 6A79                    push 00000079
:00420252 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00420258 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420259 FF15EC864B00            Call dword ptr [004B86EC]
:0042025F A3C8594800              mov dword ptr [004859C8], eax
:00420264 833DC859480000          cmp dword ptr [004859C8], 00000000
:0042026B 7507                    jne 00420274
:0042026D 33C0                    xor eax, eax
:0042026F E97B040000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042026B(C)
|
:00420274 6A78                    push 00000078
:00420276 A1300E4B00              mov eax, dword ptr [004B0E30]
:0042027B 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042027C FF15EC864B00            Call dword ptr [004B86EC]
:00420282 A3CC594800              mov dword ptr [004859CC], eax
:00420287 833DCC59480000          cmp dword ptr [004859CC], 00000000
:0042028E 7507                    jne 00420297
:00420290 33C0                    xor eax, eax
:00420292 E958040000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042028E(C)
|
:00420297 6A7A                    push 0000007A
:00420299 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0042029F 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004202A0 FF15EC864B00            Call dword ptr [004B86EC]
:004202A6 A3D0594800              mov dword ptr [004859D0], eax
:004202AB 833DD059480000          cmp dword ptr [004859D0], 00000000
:004202B2 7507                    jne 004202BB
:004202B4 33C0                    xor eax, eax
:004202B6 E934040000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004202B2(C)
|
:004202BB 6A75                    push 00000075
:004202BD 8B15300E4B00            mov edx, dword ptr [004B0E30]
:004202C3 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004202C4 FF15EC864B00            Call dword ptr [004B86EC]
:004202CA A3D4594800              mov dword ptr [004859D4], eax
:004202CF 833DD459480000          cmp dword ptr [004859D4], 00000000
:004202D6 7507                    jne 004202DF
:004202D8 33C0                    xor eax, eax
:004202DA E910040000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004202D6(C)
|
:004202DF 6A76                    push 00000076
:004202E1 A1300E4B00              mov eax, dword ptr [004B0E30]
:004202E6 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004202E7 FF15EC864B00            Call dword ptr [004B86EC]
:004202ED A3D8594800              mov dword ptr [004859D8], eax
:004202F2 833DD859480000          cmp dword ptr [004859D8], 00000000
:004202F9 7507                    jne 00420302
:004202FB 33C0                    xor eax, eax
:004202FD E9ED030000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004202F9(C)
|
:00420302 6A74                    push 00000074
:00420304 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0042030A 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042030B FF15EC864B00            Call dword ptr [004B86EC]
:00420311 A3DC594800              mov dword ptr [004859DC], eax
:00420316 833DDC59480000          cmp dword ptr [004859DC], 00000000
:0042031D 7507                    jne 00420326
:0042031F 33C0                    xor eax, eax
:00420321 E9C9030000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042031D(C)
|
:00420326 6A73                    push 00000073
:00420328 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0042032E 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042032F FF15EC864B00            Call dword ptr [004B86EC]
:00420335 A3E0594800              mov dword ptr [004859E0], eax
:0042033A 833DE059480000          cmp dword ptr [004859E0], 00000000
:00420341 7507                    jne 0042034A
:00420343 33C0                    xor eax, eax
:00420345 E9A5030000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420341(C)
|
:0042034A 6A77                    push 00000077
:0042034C A1300E4B00              mov eax, dword ptr [004B0E30]
:00420351 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420352 FF15EC864B00            Call dword ptr [004B86EC]
:00420358 A3E4594800              mov dword ptr [004859E4], eax
:0042035D 833DE459480000          cmp dword ptr [004859E4], 00000000
:00420364 7507                    jne 0042036D
:00420366 33C0                    xor eax, eax
:00420368 E982030000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420364(C)
|
:0042036D 6A7D                    push 0000007D
:0042036F 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00420375 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420376 FF15EC864B00            Call dword ptr [004B86EC]
:0042037C A3E8594800              mov dword ptr [004859E8], eax
:00420381 833DE859480000          cmp dword ptr [004859E8], 00000000
:00420388 7507                    jne 00420391
:0042038A 33C0                    xor eax, eax
:0042038C E95E030000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420388(C)
|
:00420391 6A7E                    push 0000007E
:00420393 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00420399 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042039A FF15EC864B00            Call dword ptr [004B86EC]
:004203A0 A3EC594800              mov dword ptr [004859EC], eax
:004203A5 833DEC59480000          cmp dword ptr [004859EC], 00000000
:004203AC 7507                    jne 004203B5
:004203AE 33C0                    xor eax, eax
:004203B0 E93A030000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004203AC(C)
|
:004203B5 688D000000              push 0000008D
:004203BA A1300E4B00              mov eax, dword ptr [004B0E30]
:004203BF 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004203C0 FF15EC864B00            Call dword ptr [004B86EC]
:004203C6 A3F0594800              mov dword ptr [004859F0], eax
:004203CB 833DF059480000          cmp dword ptr [004859F0], 00000000
:004203D2 7507                    jne 004203DB
:004203D4 33C0                    xor eax, eax
:004203D6 E914030000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004203D2(C)
|
:004203DB 688E000000              push 0000008E
:004203E0 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004203E6 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004203E7 FF15EC864B00            Call dword ptr [004B86EC]
:004203ED A3F4594800              mov dword ptr [004859F4], eax
:004203F2 833DF459480000          cmp dword ptr [004859F4], 00000000
:004203F9 7507                    jne 00420402
:004203FB 33C0                    xor eax, eax
:004203FD E9ED020000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004203F9(C)
|
:00420402 688F000000              push 0000008F
:00420407 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0042040D 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042040E FF15EC864B00            Call dword ptr [004B86EC]
:00420414 A3F8594800              mov dword ptr [004859F8], eax
:00420419 833DF859480000          cmp dword ptr [004859F8], 00000000
:00420420 7507                    jne 00420429
:00420422 33C0                    xor eax, eax
:00420424 E9C6020000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420420(C)
|
:00420429 6890000000              push 00000090
:0042042E A1300E4B00              mov eax, dword ptr [004B0E30]
:00420433 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420434 FF15EC864B00            Call dword ptr [004B86EC]
:0042043A A3FC594800              mov dword ptr [004859FC], eax
:0042043F 833DFC59480000          cmp dword ptr [004859FC], 00000000
:00420446 7507                    jne 0042044F
:00420448 33C0                    xor eax, eax
:0042044A E9A0020000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420446(C)
|
:0042044F 6898000000              push 00000098
:00420454 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0042045A 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042045B FF15EC864B00            Call dword ptr [004B86EC]
:00420461 A3005A4800              mov dword ptr [00485A00], eax
:00420466 833D005A480000          cmp dword ptr [00485A00], 00000000
:0042046D 7507                    jne 00420476
:0042046F 33C0                    xor eax, eax
:00420471 E979020000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042046D(C)
|
:00420476 6895000000              push 00000095
:0042047B 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00420481 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420482 FF15EC864B00            Call dword ptr [004B86EC]
:00420488 A3045A4800              mov dword ptr [00485A04], eax
:0042048D 833D045A480000          cmp dword ptr [00485A04], 00000000
:00420494 7507                    jne 0042049D
:00420496 33C0                    xor eax, eax
:00420498 E952020000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420494(C)
|
:0042049D 6896000000              push 00000096
:004204A2 A1300E4B00              mov eax, dword ptr [004B0E30]
:004204A7 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004204A8 FF15EC864B00            Call dword ptr [004B86EC]
:004204AE A3085A4800              mov dword ptr [00485A08], eax
:004204B3 833D085A480000          cmp dword ptr [00485A08], 00000000
:004204BA 7507                    jne 004204C3
:004204BC 33C0                    xor eax, eax
:004204BE E92C020000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004204BA(C)
|
:004204C3 6897000000              push 00000097
:004204C8 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004204CE 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004204CF FF15EC864B00            Call dword ptr [004B86EC]
:004204D5 A30C5A4800              mov dword ptr [00485A0C], eax
:004204DA 833D0C5A480000          cmp dword ptr [00485A0C], 00000000
:004204E1 7507                    jne 004204EA
:004204E3 33C0                    xor eax, eax
:004204E5 E905020000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004204E1(C)
|
:004204EA 68F1000000              push 000000F1
:004204EF 8B15300E4B00            mov edx, dword ptr [004B0E30]
:004204F5 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004204F6 FF15EC864B00            Call dword ptr [004B86EC]
:004204FC A3105A4800              mov dword ptr [00485A10], eax
:00420501 833D105A480000          cmp dword ptr [00485A10], 00000000
:00420508 7507                    jne 00420511
:0042050A 33C0                    xor eax, eax
:0042050C E9DE010000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420508(C)
|
:00420511 68F0000000              push 000000F0
:00420516 A1300E4B00              mov eax, dword ptr [004B0E30]
:0042051B 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042051C FF15EC864B00            Call dword ptr [004B86EC]
:00420522 A3145A4800              mov dword ptr [00485A14], eax
:00420527 833D145A480000          cmp dword ptr [00485A14], 00000000
:0042052E 7507                    jne 00420537
:00420530 33C0                    xor eax, eax
:00420532 E9B8010000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042052E(C)
|
:00420537 68EF000000              push 000000EF
:0042053C 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00420542 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420543 FF15EC864B00            Call dword ptr [004B86EC]
:00420549 A3185A4800              mov dword ptr [00485A18], eax
:0042054E 833D185A480000          cmp dword ptr [00485A18], 00000000
:00420555 7507                    jne 0042055E
:00420557 33C0                    xor eax, eax
:00420559 E991010000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420555(C)
|
:0042055E 68007F0000              push 00007F00
:00420563 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420565 FF15EC864B00            Call dword ptr [004B86EC]
:0042056B A31C5A4800              mov dword ptr [00485A1C], eax
:00420570 833D1C5A480000          cmp dword ptr [00485A1C], 00000000
:00420577 7507                    jne 00420580
:00420579 33C0                    xor eax, eax
:0042057B E96F010000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420577(C)
|
:00420580 68017F0000              push 00007F01
:00420585 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420587 FF15EC864B00            Call dword ptr [004B86EC]
:0042058D A3205A4800              mov dword ptr [00485A20], eax
:00420592 833D205A480000          cmp dword ptr [00485A20], 00000000
:00420599 7507                    jne 004205A2
:0042059B 33C0                    xor eax, eax
:0042059D E94D010000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420599(C)
|
:004205A2 68027F0000              push 00007F02
:004205A7 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004205A9 FF15EC864B00            Call dword ptr [004B86EC]
:004205AF A3245A4800              mov dword ptr [00485A24], eax
:004205B4 833D245A480000          cmp dword ptr [00485A24], 00000000
:004205BB 7507                    jne 004205C4
:004205BD 33C0                    xor eax, eax
:004205BF E92B010000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004205BB(C)
|
:004205C4 68037F0000              push 00007F03
:004205C9 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004205CB FF15EC864B00            Call dword ptr [004B86EC]
:004205D1 A3285A4800              mov dword ptr [00485A28], eax
:004205D6 833D285A480000          cmp dword ptr [00485A28], 00000000
:004205DD 7507                    jne 004205E6
:004205DF 33C0                    xor eax, eax
:004205E1 E909010000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004205DD(C)
|
:004205E6 68047F0000              push 00007F04
:004205EB 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004205ED FF15EC864B00            Call dword ptr [004B86EC]
:004205F3 A32C5A4800              mov dword ptr [00485A2C], eax
:004205F8 833D2C5A480000          cmp dword ptr [00485A2C], 00000000
:004205FF 7507                    jne 00420608
:00420601 33C0                    xor eax, eax
:00420603 E9E7000000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004205FF(C)
|
:00420608 68827F0000              push 00007F82
:0042060D 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0042060F FF15EC864B00            Call dword ptr [004B86EC]
:00420615 A3305A4800              mov dword ptr [00485A30], eax
:0042061A 833D305A480000          cmp dword ptr [00485A30], 00000000
:00420621 7507                    jne 0042062A
:00420623 33C0                    xor eax, eax
:00420625 E9C5000000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420621(C)
|
:0042062A 68837F0000              push 00007F83
:0042062F 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420631 FF15EC864B00            Call dword ptr [004B86EC]
:00420637 A3345A4800              mov dword ptr [00485A34], eax
:0042063C 833D345A480000          cmp dword ptr [00485A34], 00000000
:00420643 7507                    jne 0042064C
:00420645 33C0                    xor eax, eax
:00420647 E9A3000000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420643(C)
|
:0042064C 68847F0000              push 00007F84
:00420651 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420653 FF15EC864B00            Call dword ptr [004B86EC]
:00420659 A3385A4800              mov dword ptr [00485A38], eax
:0042065E 833D385A480000          cmp dword ptr [00485A38], 00000000
:00420665 7507                    jne 0042066E
:00420667 33C0                    xor eax, eax
:00420669 E981000000              jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420665(C)
|
:0042066E 68857F0000              push 00007F85
:00420673 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420675 FF15EC864B00            Call dword ptr [004B86EC]
:0042067B A33C5A4800              mov dword ptr [00485A3C], eax
:00420680 833D3C5A480000          cmp dword ptr [00485A3C], 00000000
:00420687 7504                    jne 0042068D
:00420689 33C0                    xor eax, eax
:0042068B EB62                    jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420687(C)
|
:0042068D 68867F0000              push 00007F86
:00420692 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00420694 FF15EC864B00            Call dword ptr [004B86EC]
:0042069A A3405A4800              mov dword ptr [00485A40], eax
:0042069F 833D405A480000          cmp dword ptr [00485A40], 00000000
:004206A6 7504                    jne 004206AC
:004206A8 33C0                    xor eax, eax
:004206AA EB43                    jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004206A6(C)
|
:004206AC 68887F0000              push 00007F88
:004206B1 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004206B3 FF15EC864B00            Call dword ptr [004B86EC]
:004206B9 A3445A4800              mov dword ptr [00485A44], eax
:004206BE 833D445A480000          cmp dword ptr [00485A44], 00000000
:004206C5 7504                    jne 004206CB
:004206C7 33C0                    xor eax, eax
:004206C9 EB24                    jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004206C5(C)
|
:004206CB 688A7F0000              push 00007F8A
:004206D0 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004206D2 FF15EC864B00            Call dword ptr [004B86EC]
:004206D8 A3485A4800              mov dword ptr [00485A48], eax
:004206DD 833D485A480000          cmp dword ptr [00485A48], 00000000
:004206E4 7504                    jne 004206EA
:004206E6 33C0                    xor eax, eax
:004206E8 EB05                    jmp 004206EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004206E4(C)
|
:004206EA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420227(U), :0042024B(U), :0042026F(U), :00420292(U), :004202B6(U)
|:004202DA(U), :004202FD(U), :00420321(U), :00420345(U), :00420368(U)
|:0042038C(U), :004203B0(U), :004203D6(U), :004203FD(U), :00420424(U)
|:0042044A(U), :00420471(U), :00420498(U), :004204BE(U), :004204E5(U)
|:0042050C(U), :00420532(U), :00420559(U), :0042057B(U), :0042059D(U)
|:004205BF(U), :004205E1(U), :00420603(U), :00420625(U), :00420647(U)
|:00420669(U), :0042068B(U), :004206AA(U), :004206C9(U), :004206E8(U)
|
:004206EF 8BE5                    mov esp, ebp
:004206F1 5D                      pop ebp
:004206F2 C3                      ret



* Referenced by a CALL at Address:
|:00464462   
|
:004206F3 55                      push ebp
:004206F4 8BEC                    mov ebp, esp
:004206F6 83EC08                  sub esp, 00000008
:004206F9 894DF8                  mov dword ptr [ebp-08], ecx
:004206FC C745FC00000000          mov [ebp-04], 00000000
:00420703 EB09                    jmp 0042070E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420725(U)
|
:00420705 8B45FC                  mov eax, dword ptr [ebp-04]
:00420708 83C001                  add eax, 00000001
:0042070B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420703(U)
|
:0042070E 837DFC23                cmp dword ptr [ebp-04], 00000023
:00420712 7D13                    jge 00420727
:00420714 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420717 8B148DC0594800          mov edx, dword ptr [4*ecx+004859C0]
:0042071E 52                      push edx

* Reference To: USER32.DestroyCursor, Ord:0087h
                                  |
:0042071F FF1530874B00            Call dword ptr [004B8730]
:00420725 EBDE                    jmp 00420705

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420712(C)
|
:00420727 8BE5                    mov esp, ebp
:00420729 5D                      pop ebp
:0042072A C3                      ret



* Referenced by a CALL at Address:
|:004201F4   
|
:0042072B 55                      push ebp
:0042072C 8BEC                    mov ebp, esp
:0042072E 51                      push ecx
:0042072F 894DFC                  mov dword ptr [ebp-04], ecx
:00420732 8B45FC                  mov eax, dword ptr [ebp-04]
:00420735 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420738 8908                    mov dword ptr [eax], ecx
:0042073A 8B55FC                  mov edx, dword ptr [ebp-04]
:0042073D C7420400000000          mov [edx+04], 00000000
:00420744 8B45FC                  mov eax, dword ptr [ebp-04]
:00420747 C7400800000000          mov [eax+08], 00000000
:0042074E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420751 C7411440010000          mov [ecx+14], 00000140
:00420758 8B55FC                  mov edx, dword ptr [ebp-04]
:0042075B C74218F0000000          mov [edx+18], 000000F0
:00420762 8B45FC                  mov eax, dword ptr [ebp-04]
:00420765 C7400C40010000          mov [eax+0C], 00000140
:0042076C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042076F C74110F0000000          mov [ecx+10], 000000F0
:00420776 8B55FC                  mov edx, dword ptr [ebp-04]
:00420779 83C20C                  add edx, 0000000C
:0042077C 52                      push edx
:0042077D 8B4508                  mov eax, dword ptr [ebp+08]
:00420780 50                      push eax

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00420781 FF15F8864B00            Call dword ptr [004B86F8]
:00420787 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042078A 8B5110                  mov edx, dword ptr [ecx+10]
:0042078D 52                      push edx
:0042078E 8B45FC                  mov eax, dword ptr [ebp-04]
:00420791 8B480C                  mov ecx, dword ptr [eax+0C]
:00420794 51                      push ecx

* Reference To: USER32.SetCursorPos, Ord:01EEh
                                  |
:00420795 FF1538874B00            Call dword ptr [004B8738]
:0042079B 8B15C0594800            mov edx, dword ptr [004859C0]
:004207A1 52                      push edx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:004207A2 FF1588864B00            Call dword ptr [004B8688]
:004207A8 8BE5                    mov esp, ebp
:004207AA 5D                      pop ebp
:004207AB C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00427903   , :004279A9   , :0042803E   , :0042832A   , :0042858B   
|:00428FCC   , :00460D97   , :00460EE6   , :00460FBA   , :0046143C   
|:004615F1   
|
:004207AE 55                      push ebp
:004207AF 8BEC                    mov ebp, esp
:004207B1 51                      push ecx
:004207B2 894DFC                  mov dword ptr [ebp-04], ecx
:004207B5 8B45FC                  mov eax, dword ptr [ebp-04]
:004207B8 83780400                cmp dword ptr [eax+04], 00000000
:004207BC 7512                    jne 004207D0
:004207BE 6A01                    push 00000001

* Reference To: USER32.ShowCursor, Ord:0229h
                                  |
:004207C0 FF1534874B00            Call dword ptr [004B8734]
:004207C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004207C9 C7410401000000          mov [ecx+04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004207BC(C)
|
:004207D0 8BE5                    mov esp, ebp
:004207D2 5D                      pop ebp
:004207D3 C3                      ret


:004207D4 55                      push ebp
:004207D5 8BEC                    mov ebp, esp
:004207D7 51                      push ecx
:004207D8 894DFC                  mov dword ptr [ebp-04], ecx
:004207DB 8B45FC                  mov eax, dword ptr [ebp-04]
:004207DE 83780400                cmp dword ptr [eax+04], 00000000
:004207E2 7412                    je 004207F6
:004207E4 6A00                    push 00000000

* Reference To: USER32.ShowCursor, Ord:0229h
                                  |
:004207E6 FF1534874B00            Call dword ptr [004B8734]
:004207EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004207EF C7410400000000          mov [ecx+04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004207E2(C)
|
:004207F6 8BE5                    mov esp, ebp
:004207F8 5D                      pop ebp
:004207F9 C3                      ret



* Referenced by a CALL at Address:
|:00463E71   
|
:004207FA 55                      push ebp
:004207FB 8BEC                    mov ebp, esp
:004207FD 51                      push ecx
:004207FE 894DFC                  mov dword ptr [ebp-04], ecx
:00420801 8B45FC                  mov eax, dword ptr [ebp-04]
:00420804 83C00C                  add eax, 0000000C
:00420807 50                      push eax

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:00420808 FF1560874B00            Call dword ptr [004B8760]
:0042080E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00420811 81E1FFFF0000            and ecx, 0000FFFF
:00420817 8B55FC                  mov edx, dword ptr [ebp-04]
:0042081A 894A14                  mov dword ptr [edx+14], ecx
:0042081D 8B4510                  mov eax, dword ptr [ebp+10]
:00420820 C1E810                  shr eax, 10
:00420823 25FFFF0000              and eax, 0000FFFF
:00420828 25FFFF0000              and eax, 0000FFFF
:0042082D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420830 894118                  mov dword ptr [ecx+18], eax
:00420833 817D0C01020000          cmp dword ptr [ebp+0C], 00000201
:0042083A 751B                    jne 00420857
:0042083C 8B55FC                  mov edx, dword ptr [ebp-04]
:0042083F 8B45FC                  mov eax, dword ptr [ebp-04]
:00420842 8B4824                  mov ecx, dword ptr [eax+24]
:00420845 894A28                  mov dword ptr [edx+28], ecx
:00420848 8B55FC                  mov edx, dword ptr [ebp-04]
:0042084B C7422401000000          mov [edx+24], 00000001
:00420852 E9BE000000              jmp 00420915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042083A(C)
|
:00420857 817D0C04020000          cmp dword ptr [ebp+0C], 00000204
:0042085E 751B                    jne 0042087B
:00420860 8B45FC                  mov eax, dword ptr [ebp-04]
:00420863 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420866 8B5130                  mov edx, dword ptr [ecx+30]
:00420869 895030                  mov dword ptr [eax+30], edx
:0042086C 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042086F C7402C02000000          mov [eax+2C], 00000002
:00420876 E99A000000              jmp 00420915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042085E(C)
|
:0042087B 817D0C03020000          cmp dword ptr [ebp+0C], 00000203
:00420882 7518                    jne 0042089C
:00420884 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420887 8B55FC                  mov edx, dword ptr [ebp-04]
:0042088A 8B4224                  mov eax, dword ptr [edx+24]
:0042088D 894128                  mov dword ptr [ecx+28], eax
:00420890 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00420893 C7412405000000          mov [ecx+24], 00000005
:0042089A EB79                    jmp 00420915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420882(C)
|
:0042089C 817D0C06020000          cmp dword ptr [ebp+0C], 00000206
:004208A3 7518                    jne 004208BD
:004208A5 8B55FC                  mov edx, dword ptr [ebp-04]
:004208A8 8B45FC                  mov eax, dword ptr [ebp-04]
:004208AB 8B482C                  mov ecx, dword ptr [eax+2C]
:004208AE 894A30                  mov dword ptr [edx+30], ecx
:004208B1 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible Reference to String Resource ID=00006: ""
                                  |
:004208B4 C7422C06000000          mov [edx+2C], 00000006
:004208BB EB58                    jmp 00420915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004208A3(C)
|
:004208BD 817D0C02020000          cmp dword ptr [ebp+0C], 00000202
:004208C4 7518                    jne 004208DE
:004208C6 8B45FC                  mov eax, dword ptr [ebp-04]
:004208C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004208CC 8B5124                  mov edx, dword ptr [ecx+24]
:004208CF 895028                  mov dword ptr [eax+28], edx
:004208D2 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004208D5 C7402403000000          mov [eax+24], 00000003
:004208DC EB37                    jmp 00420915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004208C4(C)
|
:004208DE 817D0C05020000          cmp dword ptr [ebp+0C], 00000205
:004208E5 7518                    jne 004208FF
:004208E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004208EA 8B55FC                  mov edx, dword ptr [ebp-04]
:004208ED 8B422C                  mov eax, dword ptr [edx+2C]
:004208F0 894130                  mov dword ptr [ecx+30], eax
:004208F3 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004208F6 C7412C04000000          mov [ecx+2C], 00000004
:004208FD EB16                    jmp 00420915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004208E5(C)
|
:004208FF 8B55FC                  mov edx, dword ptr [ebp-04]
:00420902 8B45FC                  mov eax, dword ptr [ebp-04]
:00420905 8B482C                  mov ecx, dword ptr [eax+2C]
:00420908 894A30                  mov dword ptr [edx+30], ecx
:0042090B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042090E C7422C00000000          mov [edx+2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420852(U), :00420876(U), :0042089A(U), :004208BB(U), :004208DC(U)
|:004208FD(U)
|
:00420915 8BE5                    mov esp, ebp
:00420917 5D                      pop ebp
:00420918 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00420137   , :00420B30   , :00420C1F   , :00420C8A   , :00420CB0   
|:00469CDE   
|
:0042091B 55                      push ebp
:0042091C 8BEC                    mov ebp, esp
:0042091E 83EC08                  sub esp, 00000008
:00420921 894DF8                  mov dword ptr [ebp-08], ecx

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:00420924 FF1540874B00            Call dword ptr [004B8740]
:0042092A 8945FC                  mov dword ptr [ebp-04], eax
:0042092D 8B4508                  mov eax, dword ptr [ebp+08]
:00420930 3B45FC                  cmp eax, dword ptr [ebp-04]
:00420933 753E                    jne 00420973
:00420935 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420938 83C10C                  add ecx, 0000000C
:0042093B 51                      push ecx

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:0042093C FF1560874B00            Call dword ptr [004B8760]
:00420942 8B55F8                  mov edx, dword ptr [ebp-08]
:00420945 8B45F8                  mov eax, dword ptr [ebp-08]
:00420948 8B480C                  mov ecx, dword ptr [eax+0C]
:0042094B 894A14                  mov dword ptr [edx+14], ecx
:0042094E 8B55F8                  mov edx, dword ptr [ebp-08]
:00420951 8B45F8                  mov eax, dword ptr [ebp-08]
:00420954 8B4810                  mov ecx, dword ptr [eax+10]
:00420957 894A18                  mov dword ptr [edx+18], ecx
:0042095A 8B55F8                  mov edx, dword ptr [ebp-08]
:0042095D 83C214                  add edx, 00000014
:00420960 52                      push edx
:00420961 8B4508                  mov eax, dword ptr [ebp+08]
:00420964 50                      push eax

* Reference To: USER32.ScreenToClient, Ord:01D3h
                                  |
:00420965 FF1570874B00            Call dword ptr [004B8770]
:0042096B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042096E 83C014                  add eax, 00000014
:00420971 EB06                    jmp 00420979

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420933(C)
|
:00420973 8B45F8                  mov eax, dword ptr [ebp-08]
:00420976 83C01C                  add eax, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420971(U)
|
:00420979 8BE5                    mov esp, ebp
:0042097B 5D                      pop ebp
:0042097C C20400                  ret 0004



* Referenced by a CALL at Address:
|:00420162   
|
:0042097F 55                      push ebp
:00420980 8BEC                    mov ebp, esp
:00420982 51                      push ecx
:00420983 894DFC                  mov dword ptr [ebp-04], ecx
:00420986 8B45FC                  mov eax, dword ptr [ebp-04]
:00420989 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042098C 8B11                    mov edx, dword ptr [ecx]
:0042098E 895014                  mov dword ptr [eax+14], edx
:00420991 8B45FC                  mov eax, dword ptr [ebp-04]
:00420994 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00420997 8B5104                  mov edx, dword ptr [ecx+04]
:0042099A 895018                  mov dword ptr [eax+18], edx
:0042099D 8B45FC                  mov eax, dword ptr [ebp-04]
:004209A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004209A3 8B5114                  mov edx, dword ptr [ecx+14]
:004209A6 89500C                  mov dword ptr [eax+0C], edx
:004209A9 8B45FC                  mov eax, dword ptr [ebp-04]
:004209AC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004209AF 8B5118                  mov edx, dword ptr [ecx+18]
:004209B2 895010                  mov dword ptr [eax+10], edx
:004209B5 8B45FC                  mov eax, dword ptr [ebp-04]
:004209B8 83C00C                  add eax, 0000000C
:004209BB 50                      push eax
:004209BC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004209BF 51                      push ecx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:004209C0 FF15F8864B00            Call dword ptr [004B86F8]
:004209C6 8B55FC                  mov edx, dword ptr [ebp-04]
:004209C9 8B4210                  mov eax, dword ptr [edx+10]
:004209CC 50                      push eax
:004209CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004209D0 8B510C                  mov edx, dword ptr [ecx+0C]
:004209D3 52                      push edx

* Reference To: USER32.SetCursorPos, Ord:01EEh
                                  |
:004209D4 FF1538874B00            Call dword ptr [004B8738]
:004209DA 8BE5                    mov esp, ebp
:004209DC 5D                      pop ebp
:004209DD C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004265DC   , :00426636   , :00426663   , :00426DFF   , :00426E14   
|:00426EED   
|
:004209E0 55                      push ebp
:004209E1 8BEC                    mov ebp, esp
:004209E3 51                      push ecx
:004209E4 894DFC                  mov dword ptr [ebp-04], ecx
:004209E7 837D0C23                cmp dword ptr [ebp+0C], 00000023
:004209EB 7D0B                    jge 004209F8
:004209ED 8B45FC                  mov eax, dword ptr [ebp-04]
:004209F0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004209F3 894808                  mov dword ptr [eax+08], ecx
:004209F6 EB0A                    jmp 00420A02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004209EB(C)
|
:004209F8 8B55FC                  mov edx, dword ptr [ebp-04]
:004209FB C7420817000000          mov [edx+08], 00000017

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004209F6(U)
|
:00420A02 8B45FC                  mov eax, dword ptr [ebp-04]
:00420A05 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420A08 8908                    mov dword ptr [eax], ecx
:00420A0A 8BE5                    mov esp, ebp
:00420A0C 5D                      pop ebp
:00420A0D C20800                  ret 0008


:00420A10 55                      push ebp
:00420A11 8BEC                    mov ebp, esp
:00420A13 51                      push ecx
:00420A14 894DFC                  mov dword ptr [ebp-04], ecx
:00420A17 8B45FC                  mov eax, dword ptr [ebp-04]
:00420A1A 8B4008                  mov eax, dword ptr [eax+08]
:00420A1D 8BE5                    mov esp, ebp
:00420A1F 5D                      pop ebp
:00420A20 C3                      ret



* Referenced by a CALL at Addresses:
|:004265E6   , :00426640   , :0042666D   , :00426E1E   , :00426EF7   
|
:00420A21 55                      push ebp
:00420A22 8BEC                    mov ebp, esp
:00420A24 83EC08                  sub esp, 00000008
:00420A27 894DF8                  mov dword ptr [ebp-08], ecx

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:00420A2A FF1540874B00            Call dword ptr [004B8740]
:00420A30 8945FC                  mov dword ptr [ebp-04], eax
:00420A33 8B45F8                  mov eax, dword ptr [ebp-08]
:00420A36 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420A39 3B08                    cmp ecx, dword ptr [eax]
:00420A3B 7514                    jne 00420A51
:00420A3D 8B55F8                  mov edx, dword ptr [ebp-08]
:00420A40 8B4208                  mov eax, dword ptr [edx+08]
:00420A43 8B0C85C0594800          mov ecx, dword ptr [4*eax+004859C0]
:00420A4A 51                      push ecx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00420A4B FF1588864B00            Call dword ptr [004B8688]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420A3B(C)
|
:00420A51 8BE5                    mov esp, ebp
:00420A53 5D                      pop ebp
:00420A54 C3                      ret



* Referenced by a CALL at Addresses:
|:00420B76   , :00420C6E   
|
:00420A55 55                      push ebp
:00420A56 8BEC                    mov ebp, esp
:00420A58 51                      push ecx
:00420A59 894DFC                  mov dword ptr [ebp-04], ecx
:00420A5C 8B45FC                  mov eax, dword ptr [ebp-04]
:00420A5F 83782401                cmp dword ptr [eax+24], 00000001
:00420A63 7507                    jne 00420A6C
:00420A65 B801000000              mov eax, 00000001
:00420A6A EB02                    jmp 00420A6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420A63(C)
|
:00420A6C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420A6A(U)
|
:00420A6E 8BE5                    mov esp, ebp
:00420A70 5D                      pop ebp
:00420A71 C3                      ret



* Referenced by a CALL at Address:
|:00420BC2   
|
:00420A72 55                      push ebp
:00420A73 8BEC                    mov ebp, esp
:00420A75 51                      push ecx
:00420A76 894DFC                  mov dword ptr [ebp-04], ecx
:00420A79 8B45FC                  mov eax, dword ptr [ebp-04]
:00420A7C 83782403                cmp dword ptr [eax+24], 00000003
:00420A80 7507                    jne 00420A89
:00420A82 B801000000              mov eax, 00000001
:00420A87 EB02                    jmp 00420A8B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420A80(C)
|
:00420A89 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420A87(U)
|
:00420A8B 8BE5                    mov esp, ebp
:00420A8D 5D                      pop ebp
:00420A8E C3                      ret



* Referenced by a CALL at Addresses:
|:00420B89   , :00420C78   
|
:00420A8F 55                      push ebp
:00420A90 8BEC                    mov ebp, esp
:00420A92 51                      push ecx
:00420A93 894DFC                  mov dword ptr [ebp-04], ecx
:00420A96 8B45FC                  mov eax, dword ptr [ebp-04]
:00420A99 83782C02                cmp dword ptr [eax+2C], 00000002
:00420A9D 7507                    jne 00420AA6
:00420A9F B801000000              mov eax, 00000001
:00420AA4 EB02                    jmp 00420AA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420A9D(C)
|
:00420AA6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420AA4(U)
|
:00420AA8 8BE5                    mov esp, ebp
:00420AAA 5D                      pop ebp
:00420AAB C3                      ret



* Referenced by a CALL at Address:
|:00420BD5   
|
:00420AAC 55                      push ebp
:00420AAD 8BEC                    mov ebp, esp
:00420AAF 51                      push ecx
:00420AB0 894DFC                  mov dword ptr [ebp-04], ecx
:00420AB3 8B45FC                  mov eax, dword ptr [ebp-04]
:00420AB6 83782C04                cmp dword ptr [eax+2C], 00000004
:00420ABA 7507                    jne 00420AC3
:00420ABC B801000000              mov eax, 00000001
:00420AC1 EB02                    jmp 00420AC5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420ABA(C)
|
:00420AC3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420AC1(U)
|
:00420AC5 8BE5                    mov esp, ebp
:00420AC7 5D                      pop ebp
:00420AC8 C3                      ret



* Referenced by a CALL at Addresses:
|:00420B9C   , :00420C94   
|
:00420AC9 55                      push ebp
:00420ACA 8BEC                    mov ebp, esp
:00420ACC 51                      push ecx
:00420ACD 894DFC                  mov dword ptr [ebp-04], ecx
:00420AD0 8B45FC                  mov eax, dword ptr [ebp-04]
:00420AD3 83782405                cmp dword ptr [eax+24], 00000005
:00420AD7 7507                    jne 00420AE0
:00420AD9 B801000000              mov eax, 00000001
:00420ADE EB02                    jmp 00420AE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420AD7(C)
|
:00420AE0 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420ADE(U)
|
:00420AE2 8BE5                    mov esp, ebp
:00420AE4 5D                      pop ebp
:00420AE5 C3                      ret



* Referenced by a CALL at Addresses:
|:00420BAF   , :00420C9E   
|
:00420AE6 55                      push ebp
:00420AE7 8BEC                    mov ebp, esp
:00420AE9 51                      push ecx
:00420AEA 894DFC                  mov dword ptr [ebp-04], ecx
:00420AED 8B45FC                  mov eax, dword ptr [ebp-04]
:00420AF0 83782C06                cmp dword ptr [eax+2C], 00000006
:00420AF4 7507                    jne 00420AFD
:00420AF6 B801000000              mov eax, 00000001
:00420AFB EB02                    jmp 00420AFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420AF4(C)
|
:00420AFD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420AFB(U)
|
:00420AFF 8BE5                    mov esp, ebp
:00420B01 5D                      pop ebp
:00420B02 C3                      ret



* Referenced by a CALL at Addresses:
|:00413DEB   , :0042017D   
|
:00420B03 55                      push ebp
:00420B04 8BEC                    mov ebp, esp
:00420B06 83EC18                  sub esp, 00000018
:00420B09 894DE8                  mov dword ptr [ebp-18], ecx
:00420B0C E83DBA0400              call 0046C54E

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:00420B11 FF1540874B00            Call dword ptr [004B8740]
:00420B17 8945FC                  mov dword ptr [ebp-04], eax
:00420B1A 8B4508                  mov eax, dword ptr [ebp+08]
:00420B1D 3B45FC                  cmp eax, dword ptr [ebp-04]
:00420B20 7407                    je 00420B29
:00420B22 33C0                    xor eax, eax
:00420B24 E9BE000000              jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B20(C)
|
:00420B29 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420B2C 51                      push ecx
:00420B2D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420B30 E8E6FDFFFF              call 0042091B
:00420B35 8D55EC                  lea edx, dword ptr [ebp-14]
:00420B38 52                      push edx
:00420B39 8B4508                  mov eax, dword ptr [ebp+08]
:00420B3C 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00420B3D FF15C8864B00            Call dword ptr [004B86C8]
:00420B43 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420B46 8B5114                  mov edx, dword ptr [ecx+14]
:00420B49 3B55EC                  cmp edx, dword ptr [ebp-14]
:00420B4C 7C21                    jl 00420B6F
:00420B4E 8B45E8                  mov eax, dword ptr [ebp-18]
:00420B51 8B4818                  mov ecx, dword ptr [eax+18]
:00420B54 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00420B57 7C16                    jl 00420B6F
:00420B59 8B55E8                  mov edx, dword ptr [ebp-18]
:00420B5C 8B4214                  mov eax, dword ptr [edx+14]
:00420B5F 3B45F4                  cmp eax, dword ptr [ebp-0C]
:00420B62 7F0B                    jg 00420B6F
:00420B64 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420B67 8B5118                  mov edx, dword ptr [ecx+18]
:00420B6A 3B55F8                  cmp edx, dword ptr [ebp-08]
:00420B6D 7E04                    jle 00420B73

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420B4C(C), :00420B57(C), :00420B62(C)
|
:00420B6F 33C0                    xor eax, eax
:00420B71 EB74                    jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B6D(C)
|
:00420B73 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420B76 E8DAFEFFFF              call 00420A55
:00420B7B 85C0                    test eax, eax
:00420B7D 7407                    je 00420B86
:00420B7F B801000000              mov eax, 00000001
:00420B84 EB61                    jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B7D(C)
|
:00420B86 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420B89 E801FFFFFF              call 00420A8F
:00420B8E 85C0                    test eax, eax
:00420B90 7407                    je 00420B99

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00420B92 B802000000              mov eax, 00000002
:00420B97 EB4E                    jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B90(C)
|
:00420B99 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420B9C E828FFFFFF              call 00420AC9
:00420BA1 85C0                    test eax, eax
:00420BA3 7407                    je 00420BAC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00420BA5 B805000000              mov eax, 00000005
:00420BAA EB3B                    jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420BA3(C)
|
:00420BAC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420BAF E832FFFFFF              call 00420AE6
:00420BB4 85C0                    test eax, eax
:00420BB6 7407                    je 00420BBF

* Possible Reference to String Resource ID=00006: ""
                                  |
:00420BB8 B806000000              mov eax, 00000006
:00420BBD EB28                    jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420BB6(C)
|
:00420BBF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420BC2 E8ABFEFFFF              call 00420A72
:00420BC7 85C0                    test eax, eax
:00420BC9 7407                    je 00420BD2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00420BCB B803000000              mov eax, 00000003
:00420BD0 EB15                    jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420BC9(C)
|
:00420BD2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420BD5 E8D2FEFFFF              call 00420AAC
:00420BDA 85C0                    test eax, eax
:00420BDC 7407                    je 00420BE5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00420BDE B804000000              mov eax, 00000004
:00420BE3 EB02                    jmp 00420BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420BDC(C)
|
:00420BE5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420B24(U), :00420B71(U), :00420B84(U), :00420B97(U), :00420BAA(U)
|:00420BBD(U), :00420BD0(U), :00420BE3(U)
|
:00420BE7 8BE5                    mov esp, ebp
:00420BE9 5D                      pop ebp
:00420BEA C20400                  ret 0004


:00420BED 55                      push ebp
:00420BEE 8BEC                    mov ebp, esp
:00420BF0 83EC18                  sub esp, 00000018
:00420BF3 56                      push esi
:00420BF4 894DE8                  mov dword ptr [ebp-18], ecx
:00420BF7 E852B90400              call 0046C54E

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:00420BFC FF1540874B00            Call dword ptr [004B8740]
:00420C02 8945FC                  mov dword ptr [ebp-04], eax
:00420C05 8B4508                  mov eax, dword ptr [ebp+08]
:00420C08 3B45FC                  cmp eax, dword ptr [ebp-04]
:00420C0B 740B                    je 00420C18
:00420C0D 8B45E8                  mov eax, dword ptr [ebp-18]
:00420C10 83C01C                  add eax, 0000001C
:00420C13 E9A5000000              jmp 00420CBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420C0B(C)
|
:00420C18 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420C1B 51                      push ecx
:00420C1C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C1F E8F7FCFFFF              call 0042091B
:00420C24 8D55EC                  lea edx, dword ptr [ebp-14]
:00420C27 52                      push edx
:00420C28 8B4508                  mov eax, dword ptr [ebp+08]
:00420C2B 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00420C2C FF15C8864B00            Call dword ptr [004B86C8]
:00420C32 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C35 8B5114                  mov edx, dword ptr [ecx+14]
:00420C38 3B55EC                  cmp edx, dword ptr [ebp-14]
:00420C3B 7C21                    jl 00420C5E
:00420C3D 8B45E8                  mov eax, dword ptr [ebp-18]
:00420C40 8B4818                  mov ecx, dword ptr [eax+18]
:00420C43 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00420C46 7C16                    jl 00420C5E
:00420C48 8B55E8                  mov edx, dword ptr [ebp-18]
:00420C4B 8B4214                  mov eax, dword ptr [edx+14]
:00420C4E 3B45F4                  cmp eax, dword ptr [ebp-0C]
:00420C51 7F0B                    jg 00420C5E
:00420C53 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C56 8B5118                  mov edx, dword ptr [ecx+18]
:00420C59 3B55F8                  cmp edx, dword ptr [ebp-08]
:00420C5C 7E08                    jle 00420C66

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420C3B(C), :00420C46(C), :00420C51(C)
|
:00420C5E 8B45E8                  mov eax, dword ptr [ebp-18]
:00420C61 83C01C                  add eax, 0000001C
:00420C64 EB57                    jmp 00420CBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420C5C(C)
|
:00420C66 E8E3B80400              call 0046C54E
:00420C6B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C6E E8E2FDFFFF              call 00420A55
:00420C73 8BF0                    mov esi, eax
:00420C75 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C78 E812FEFFFF              call 00420A8F
:00420C7D 0BF0                    or esi, eax
:00420C7F 85F6                    test esi, esi
:00420C81 740E                    je 00420C91
:00420C83 8B4508                  mov eax, dword ptr [ebp+08]
:00420C86 50                      push eax
:00420C87 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C8A E88CFCFFFF              call 0042091B
:00420C8F EB2C                    jmp 00420CBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420C81(C)
|
:00420C91 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C94 E830FEFFFF              call 00420AC9
:00420C99 8BF0                    mov esi, eax
:00420C9B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420C9E E843FEFFFF              call 00420AE6
:00420CA3 0BF0                    or esi, eax
:00420CA5 85F6                    test esi, esi
:00420CA7 740E                    je 00420CB7
:00420CA9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420CAC 51                      push ecx
:00420CAD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00420CB0 E866FCFFFF              call 0042091B
:00420CB5 EB06                    jmp 00420CBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420CA7(C)
|
:00420CB7 8B45E8                  mov eax, dword ptr [ebp-18]
:00420CBA 83C01C                  add eax, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420C13(U), :00420C64(U), :00420C8F(U), :00420CB5(U)
|
:00420CBD 5E                      pop esi
:00420CBE 8BE5                    mov esp, ebp
:00420CC0 5D                      pop ebp
:00420CC1 C20400                  ret 0004


:00420CC4 CC                      int 03
:00420CC5 CC                      int 03
:00420CC6 CC                      int 03
:00420CC7 CC                      int 03
:00420CC8 CC                      int 03
:00420CC9 CC                      int 03
:00420CCA CC                      int 03
:00420CCB CC                      int 03
:00420CCC CC                      int 03
:00420CCD CC                      int 03
:00420CCE CC                      int 03
:00420CCF CC                      int 03
:00420CD0 55                      push ebp
:00420CD1 8BEC                    mov ebp, esp
:00420CD3 E807000000              call 00420CDF
:00420CD8 E811000000              call 00420CEE
:00420CDD 5D                      pop ebp
:00420CDE C3                      ret



* Referenced by a CALL at Address:
|:00420CD3   
|
:00420CDF 55                      push ebp
:00420CE0 8BEC                    mov ebp, esp
:00420CE2 B998EA4800              mov ecx, 0048EA98
:00420CE7 E854410000              call 00424E40
:00420CEC 5D                      pop ebp
:00420CED C3                      ret



* Referenced by a CALL at Address:
|:00420CD8   
|
:00420CEE 55                      push ebp
:00420CEF 8BEC                    mov ebp, esp
:00420CF1 68000D4200              push 00420D00
:00420CF6 E875C70400              call 0046D470
:00420CFB 83C404                  add esp, 00000004
:00420CFE 5D                      pop ebp
:00420CFF C3                      ret


:00420D00 55                      push ebp
:00420D01 8BEC                    mov ebp, esp
:00420D03 B998EA4800              mov ecx, 0048EA98
:00420D08 E8F3210300              call 00452F00
:00420D0D 5D                      pop ebp
:00420D0E C3                      ret


:00420D0F 55                      push ebp
:00420D10 8BEC                    mov ebp, esp
:00420D12 E807000000              call 00420D1E
:00420D17 E822000000              call 00420D3E
:00420D1C 5D                      pop ebp
:00420D1D C3                      ret



* Referenced by a CALL at Address:
|:00420D12   
|
:00420D1E 55                      push ebp
:00420D1F 8BEC                    mov ebp, esp
:00420D21 68A05C4200              push 00425CA0
:00420D26 68904E4200              push 00424E90
:00420D2B 6881000000              push 00000081
:00420D30 6A40                    push 00000040
:00420D32 68F8A84800              push 0048A8F8
:00420D37 E824D40400              call 0046E160
:00420D3C 5D                      pop ebp
:00420D3D C3                      ret



* Referenced by a CALL at Address:
|:00420D17   
|
:00420D3E 55                      push ebp
:00420D3F 8BEC                    mov ebp, esp
:00420D41 68500D4200              push 00420D50
:00420D46 E825C70400              call 0046D470
:00420D4B 83C404                  add esp, 00000004
:00420D4E 5D                      pop ebp
:00420D4F C3                      ret


:00420D50 55                      push ebp
:00420D51 8BEC                    mov ebp, esp
:00420D53 68A05C4200              push 00425CA0
:00420D58 6881000000              push 00000081
:00420D5D 6A40                    push 00000040
:00420D5F 68F8A84800              push 0048A8F8
:00420D64 E897D40400              call 0046E200
:00420D69 5D                      pop ebp
:00420D6A C3                      ret



* Referenced by a CALL at Addresses:
|:00424306   , :00424F18   
|
:00420D6B 55                      push ebp
:00420D6C 8BEC                    mov ebp, esp
:00420D6E 8B4508                  mov eax, dword ptr [ebp+08]
:00420D71 25FFFF0000              and eax, 0000FFFF
:00420D76 6BC009                  imul eax, 00000009
:00420D79 0588784700              add eax, 00477888
:00420D7E 5D                      pop ebp
:00420D7F C3                      ret



* Referenced by a CALL at Address:
|:00423054   
|
:00420D80 55                      push ebp
:00420D81 8BEC                    mov ebp, esp
:00420D83 837D0800                cmp dword ptr [ebp+08], 00000000
:00420D87 7507                    jne 00420D90
:00420D89 B801000000              mov eax, 00000001
:00420D8E EB02                    jmp 00420D92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420D87(C)
|
:00420D90 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420D8E(U)
|
:00420D92 5D                      pop ebp
:00420D93 C3                      ret



* Referenced by a CALL at Addresses:
|:00423064   , :00423188   
|
:00420D94 55                      push ebp
:00420D95 8BEC                    mov ebp, esp
:00420D97 8B4508                  mov eax, dword ptr [ebp+08]
:00420D9A 2DF8A84800              sub eax, 0048A8F8
:00420D9F C1F806                  sar eax, 06
:00420DA2 5D                      pop ebp
:00420DA3 C3                      ret



* Referenced by a CALL at Addresses:
|:00423FD8   , :00424997   
|
:00420DA4 55                      push ebp
:00420DA5 8BEC                    mov ebp, esp
:00420DA7 8B4508                  mov eax, dword ptr [ebp+08]
:00420DAA 25FFFF0000              and eax, 0000FFFF
:00420DAF 2500F00000              and eax, 0000F000
:00420DB4 5D                      pop ebp
:00420DB5 C3                      ret



* Referenced by a CALL at Addresses:
|:00423046   , :00423CCB   
|
:00420DB6 55                      push ebp
:00420DB7 8BEC                    mov ebp, esp
:00420DB9 8B4508                  mov eax, dword ptr [ebp+08]
:00420DBC 25FFFF0000              and eax, 0000FFFF
:00420DC1 80E40F                  and ah, 0F
:00420DC4 5D                      pop ebp
:00420DC5 C3                      ret



* Referenced by a CALL at Address:
|:00423309   
|
:00420DC6 55                      push ebp
:00420DC7 8BEC                    mov ebp, esp
:00420DC9 83EC0C                  sub esp, 0000000C
:00420DCC 8B4508                  mov eax, dword ptr [ebp+08]
:00420DCF 25FFFF0000              and eax, 0000FFFF
:00420DD4 2500F00000              and eax, 0000F000
:00420DD9 668945F8                mov word ptr [ebp-08], ax
:00420DDD 668B4D08                mov cx, word ptr [ebp+08]
:00420DE1 6681E1FF0F              and cx, 0FFF
:00420DE6 66894D08                mov word ptr [ebp+08], cx
:00420DEA C745FC98EA4800          mov [ebp-04], 0048EA98
:00420DF1 8B55F8                  mov edx, dword ptr [ebp-08]
:00420DF4 81E2FFFF0000            and edx, 0000FFFF
:00420DFA 8955F4                  mov dword ptr [ebp-0C], edx
:00420DFD 817DF400100000          cmp dword ptr [ebp-0C], 00001000
:00420E04 740B                    je 00420E11
:00420E06 817DF400200000          cmp dword ptr [ebp-0C], 00002000
:00420E0D 7402                    je 00420E11
:00420E0F EB14                    jmp 00420E25

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420E04(C), :00420E0D(C)
|
:00420E11 8B4508                  mov eax, dword ptr [ebp+08]
:00420E14 25FFFF0000              and eax, 0000FFFF
:00420E19 50                      push eax
:00420E1A E8945EFEFF              call 00406CB3
:00420E1F 83C404                  add esp, 00000004
:00420E22 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420E0F(U)
|
:00420E25 8B45FC                  mov eax, dword ptr [ebp-04]
:00420E28 8BE5                    mov esp, ebp
:00420E2A 5D                      pop ebp
:00420E2B C3                      ret



* Referenced by a CALL at Addresses:
|:004240BB   , :004240CD   
|
:00420E2C 55                      push ebp
:00420E2D 8BEC                    mov ebp, esp
:00420E2F 83EC08                  sub esp, 00000008
:00420E32 8B4508                  mov eax, dword ptr [ebp+08]
:00420E35 25FFFF0000              and eax, 0000FFFF
:00420E3A 2500F00000              and eax, 0000F000
:00420E3F 668945FC                mov word ptr [ebp-04], ax
:00420E43 668B4D08                mov cx, word ptr [ebp+08]
:00420E47 6681E1FF0F              and cx, 0FFF
:00420E4C 66894D08                mov word ptr [ebp+08], cx
:00420E50 8B55FC                  mov edx, dword ptr [ebp-04]
:00420E53 81E2FFFF0000            and edx, 0000FFFF
:00420E59 8955F8                  mov dword ptr [ebp-08], edx
:00420E5C 817DF800100000          cmp dword ptr [ebp-08], 00001000
:00420E63 740B                    je 00420E70
:00420E65 817DF800200000          cmp dword ptr [ebp-08], 00002000
:00420E6C 7402                    je 00420E70
:00420E6E EB1A                    jmp 00420E8A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420E63(C), :00420E6C(C)
|
:00420E70 8B4508                  mov eax, dword ptr [ebp+08]
:00420E73 25FFFF0000              and eax, 0000FFFF
:00420E78 50                      push eax
:00420E79 E8355EFEFF              call 00406CB3
:00420E7E 83C404                  add esp, 00000004
:00420E81 8BC8                    mov ecx, eax
:00420E83 E81A2DFEFF              call 00403BA2
:00420E88 EB0A                    jmp 00420E94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420E6E(U)
|
:00420E8A B998EA4800              mov ecx, 0048EA98
:00420E8F E8DC3F0000              call 00424E70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420E88(U)
|
:00420E94 8BE5                    mov esp, ebp
:00420E96 5D                      pop ebp
:00420E97 C3                      ret


:00420E98 55                      push ebp
:00420E99 8BEC                    mov ebp, esp
:00420E9B 8B450C                  mov eax, dword ptr [ebp+0C]
:00420E9E 33D2                    xor edx, edx
:00420EA0 F77508                  div [ebp+08]
:00420EA3 85D2                    test edx, edx
:00420EA5 7413                    je 00420EBA
:00420EA7 8B450C                  mov eax, dword ptr [ebp+0C]
:00420EAA 33D2                    xor edx, edx
:00420EAC F77508                  div [ebp+08]
:00420EAF 8B450C                  mov eax, dword ptr [ebp+0C]
:00420EB2 2BC2                    sub eax, edx
:00420EB4 034508                  add eax, dword ptr [ebp+08]
:00420EB7 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420EA5(C)
|
:00420EBA 8B450C                  mov eax, dword ptr [ebp+0C]
:00420EBD 5D                      pop ebp
:00420EBE C3                      ret


:00420EBF 55                      push ebp
:00420EC0 8BEC                    mov ebp, esp
:00420EC2 56                      push esi
:00420EC3 8B450C                  mov eax, dword ptr [ebp+0C]
:00420EC6 25FFFF0000              and eax, 0000FFFF
:00420ECB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420ECE 81E1FFFF0000            and ecx, 0000FFFF
:00420ED4 99                      cdq
:00420ED5 F7F9                    idiv ecx
:00420ED7 85D2                    test edx, edx
:00420ED9 742E                    je 00420F09
:00420EDB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00420EDE 81E1FFFF0000            and ecx, 0000FFFF
:00420EE4 8B450C                  mov eax, dword ptr [ebp+0C]
:00420EE7 25FFFF0000              and eax, 0000FFFF
:00420EEC 8B7508                  mov esi, dword ptr [ebp+08]
:00420EEF 81E6FFFF0000            and esi, 0000FFFF
:00420EF5 99                      cdq
:00420EF6 F7FE                    idiv esi
:00420EF8 2BCA                    sub ecx, edx
:00420EFA 8B5508                  mov edx, dword ptr [ebp+08]
:00420EFD 81E2FFFF0000            and edx, 0000FFFF
:00420F03 03CA                    add ecx, edx
:00420F05 66894D0C                mov word ptr [ebp+0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420ED9(C)
|
:00420F09 668B450C                mov ax, word ptr [ebp+0C]
:00420F0D 5E                      pop esi
:00420F0E 5D                      pop ebp
:00420F0F C3                      ret


:00420F10 55                      push ebp
:00420F11 8BEC                    mov ebp, esp
:00420F13 56                      push esi
:00420F14 8B450C                  mov eax, dword ptr [ebp+0C]
:00420F17 25FFFF0000              and eax, 0000FFFF
:00420F1C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420F1F 81E1FFFF0000            and ecx, 0000FFFF
:00420F25 99                      cdq
:00420F26 F7F9                    idiv ecx
:00420F28 85D2                    test edx, edx
:00420F2A 7423                    je 00420F4F
:00420F2C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00420F2F 81E1FFFF0000            and ecx, 0000FFFF
:00420F35 8B450C                  mov eax, dword ptr [ebp+0C]
:00420F38 25FFFF0000              and eax, 0000FFFF
:00420F3D 8B7508                  mov esi, dword ptr [ebp+08]
:00420F40 81E6FFFF0000            and esi, 0000FFFF
:00420F46 99                      cdq
:00420F47 F7FE                    idiv esi
:00420F49 2BCA                    sub ecx, edx
:00420F4B 66894D0C                mov word ptr [ebp+0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420F2A(C)
|
:00420F4F 668B450C                mov ax, word ptr [ebp+0C]
:00420F53 5E                      pop esi
:00420F54 5D                      pop ebp
:00420F55 C3                      ret



* Referenced by a CALL at Addresses:
|:004210D8   , :004210E9   , :00422B45   
|
:00420F56 55                      push ebp
:00420F57 8BEC                    mov ebp, esp
:00420F59 51                      push ecx
:00420F5A C745FC00000000          mov [ebp-04], 00000000
:00420F61 EB09                    jmp 00420F6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420F85(U)
|
:00420F63 8B45FC                  mov eax, dword ptr [ebp-04]
:00420F66 83C001                  add eax, 00000001
:00420F69 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420F61(U)
|
:00420F6C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420F6F 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:00420F72 7313                    jnb 00420F87
:00420F74 8B5508                  mov edx, dword ptr [ebp+08]
:00420F77 8A4510                  mov al, byte ptr [ebp+10]
:00420F7A 8802                    mov byte ptr [edx], al
:00420F7C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420F7F 83C101                  add ecx, 00000001
:00420F82 894D08                  mov dword ptr [ebp+08], ecx
:00420F85 EBDC                    jmp 00420F63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420F72(C)
|
:00420F87 8BE5                    mov esp, ebp
:00420F89 5D                      pop ebp
:00420F8A C3                      ret



* Referenced by a CALL at Addresses:
|:00422B85   , :00423685   
|
:00420F8B 55                      push ebp
:00420F8C 8BEC                    mov ebp, esp
:00420F8E 51                      push ecx
:00420F8F C745FC00000000          mov [ebp-04], 00000000
:00420F96 EB09                    jmp 00420FA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420FBC(U)
|
:00420F98 8B45FC                  mov eax, dword ptr [ebp-04]
:00420F9B 83C001                  add eax, 00000001
:00420F9E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420F96(U)
|
:00420FA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420FA4 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:00420FA7 7315                    jnb 00420FBE
:00420FA9 8B5508                  mov edx, dword ptr [ebp+08]
:00420FAC 668B4510                mov ax, word ptr [ebp+10]
:00420FB0 668902                  mov word ptr [edx], ax
:00420FB3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420FB6 83C102                  add ecx, 00000002
:00420FB9 894D08                  mov dword ptr [ebp+08], ecx
:00420FBC EBDA                    jmp 00420F98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420FA7(C)
|
:00420FBE 8BE5                    mov esp, ebp
:00420FC0 5D                      pop ebp
:00420FC1 C3                      ret



* Referenced by a CALL at Addresses:
|:00421001   , :00421250   , :004212C0   , :00421926   , :00422DF4   
|:00422E60   , :00422F1E   , :00422F7C   , :0042336F   , :00423524   
|:00423598   , :00423C6F   , :00423DA8   , :00423E81   , :004240F6   
|:004248B3   , :00424917   , :00424A2D   , :00424B99   , :0045AA9E   
|
:00420FC2 55                      push ebp
:00420FC3 8BEC                    mov ebp, esp
:00420FC5 8B4508                  mov eax, dword ptr [ebp+08]
:00420FC8 25FFFF0000              and eax, 0000FFFF
:00420FCD C1E006                  shl eax, 06
:00420FD0 05F8A84800              add eax, 0048A8F8
:00420FD5 5D                      pop ebp
:00420FD6 C3                      ret



* Referenced by a CALL at Addresses:
|:00414A0E   , :00414A31   , :00414A54   , :00422AF0   , :00423D19   
|:00424BA4   
|
:00420FD7 55                      push ebp
:00420FD8 8BEC                    mov ebp, esp
:00420FDA 51                      push ecx
:00420FDB 66A1E8A84800            mov ax, word ptr [0048A8E8]
:00420FE1 668945FC                mov word ptr [ebp-04], ax
:00420FE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420FE8 81E1FFFF0000            and ecx, 0000FFFF
:00420FEE 81F9FFFF0000            cmp ecx, 0000FFFF
:00420FF4 7506                    jne 00420FFC
:00420FF6 66C745FC8000            mov [ebp-04], 0080

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420FF4(C)
|
:00420FFC 668B55FC                mov dx, word ptr [ebp-04]
:00421000 52                      push edx
:00421001 E8BCFFFFFF              call 00420FC2
:00421006 83C404                  add esp, 00000004
:00421009 8BE5                    mov esp, ebp
:0042100B 5D                      pop ebp
:0042100C C3                      ret



* Referenced by a CALL at Address:
|:00423BBE   
|
:0042100D 55                      push ebp
:0042100E 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:00421010 6800040000              push 00000400
:00421015 6A00                    push 00000000
:00421017 A1380E4B00              mov eax, dword ptr [004B0E38]
:0042101C 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:0042101D FF152C874B00            Call dword ptr [004B872C]
:00421023 50                      push eax

* Reference To: USER32.GetMenuState, Ord:0112h
                                  |
:00421024 FF1524874B00            Call dword ptr [004B8724]
:0042102A 83E001                  and eax, 00000001
:0042102D 85C0                    test eax, eax
:0042102F 740A                    je 0042103B
:00421031 837D0800                cmp dword ptr [ebp+08], 00000000
:00421035 7502                    jne 00421039
:00421037 EB16                    jmp 0042104F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421035(C)
|
:00421039 EB08                    jmp 00421043

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042102F(C)
|
:0042103B 837D0801                cmp dword ptr [ebp+08], 00000001
:0042103F 7502                    jne 00421043
:00421041 EB0C                    jmp 0042104F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421039(U), :0042103F(C)
|
:00421043 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421046 51                      push ecx
:00421047 E8CC360400              call 00464718
:0042104C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421037(U), :00421041(U)
|
:0042104F 5D                      pop ebp
:00421050 C3                      ret



* Referenced by a CALL at Addresses:
|:0042155F   , :0042157F   , :0042159F   , :004215BF   , :004215D1   
|:004215EF   , :004217AC   , :0042184B   , :0042187F   , :004218B3   
|:004224EB   , :00422512   , :00422531   , :00422550   , :00422614   
|:004236AA   
|
:00421051 55                      push ebp
:00421052 8BEC                    mov ebp, esp
:00421054 8B4508                  mov eax, dword ptr [ebp+08]
:00421057 25FFFF0000              and eax, 0000FFFF
:0042105C 50                      push eax
:0042105D B930DF4A00              mov ecx, 004ADF30
:00421062 E83725FFFF              call 0041359E
:00421067 668B00                  mov ax, word ptr [eax]
:0042106A 5D                      pop ebp
:0042106B C3                      ret



* Referenced by a CALL at Addresses:
|:0040C3B1   , :004210F1   
|
:0042106C 55                      push ebp
:0042106D 8BEC                    mov ebp, esp
:0042106F 83EC08                  sub esp, 00000008
:00421072 C745FCF8A84800          mov [ebp-04], 0048A8F8
:00421079 66C745F80000            mov [ebp-08], 0000
:0042107F EB15                    jmp 00421096

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004210C3(U)
|
:00421081 668B45F8                mov ax, word ptr [ebp-08]
:00421085 66050100                add ax, 0001
:00421089 668945F8                mov word ptr [ebp-08], ax
:0042108D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421090 83C140                  add ecx, 00000040
:00421093 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042107F(U)
|
:00421096 8B55F8                  mov edx, dword ptr [ebp-08]
:00421099 81E2FFFF0000            and edx, 0000FFFF
:0042109F 81FA80000000            cmp edx, 00000080
:004210A5 7D1E                    jge 004210C5
:004210A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004210AA E8E13E0000              call 00424F90
:004210AF 6A00                    push 00000000
:004210B1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004210B4 E837430000              call 004253F0
:004210B9 6A00                    push 00000000
:004210BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004210BE E8FD1D0300              call 00452EC0
:004210C3 EBBC                    jmp 00421081

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004210A5(C)
|
:004210C5 8BE5                    mov esp, ebp
:004210C7 5D                      pop ebp
:004210C8 C3                      ret



* Referenced by a CALL at Addresses:
|:00410EE1   , :0041262F   , :004670E9   
|
:004210C9 55                      push ebp
:004210CA 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004210CC 68FF000000              push 000000FF
:004210D1 6A18                    push 00000018
:004210D3 6840C94800              push 0048C940
:004210D8 E879FEFFFF              call 00420F56
:004210DD 83C40C                  add esp, 0000000C
:004210E0 6A00                    push 00000000
:004210E2 6A18                    push 00000018
:004210E4 68605A4800              push 00485A60
:004210E9 E868FEFFFF              call 00420F56
:004210EE 83C40C                  add esp, 0000000C
:004210F1 E876FFFFFF              call 0042106C
:004210F6 66C705E8A84800FFFF      mov word ptr [0048A8E8], FFFF
:004210FF 5D                      pop ebp
:00421100 C3                      ret



* Referenced by a CALL at Address:
|:0042132E   
|
:00421101 55                      push ebp
:00421102 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00421104 6AFF                    push FFFFFFFF
:00421106 680C394700              push 0047390C
:0042110B 64A100000000            mov eax, dword ptr fs:[00000000]
:00421111 50                      push eax
:00421112 64892500000000          mov dword ptr fs:[00000000], esp
:00421119 81EC10010000            sub esp, 00000110
:0042111F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00421125 E8D665FEFF              call 00407700
:0042112A C745FC00000000          mov [ebp-04], 00000000
:00421131 8B4508                  mov eax, dword ptr [ebp+08]
:00421134 25FFFF0000              and eax, 0000FFFF
:00421139 D1E0                    shl eax, 1
:0042113B 668985E8FEFFFF          mov word ptr [ebp+FFFFFEE8], ax
:00421142 C7053C7A4700FFFF0000    mov dword ptr [00477A3C], 0000FFFF
:0042114C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042114F 81E1FFFF0000            and ecx, 0000FFFF
:00421155 6BC930                  imul ecx, 00000030
:00421158 C1E106                  shl ecx, 06
:0042115B 6BC938                  imul ecx, 00000038
:0042115E 51                      push ecx
:0042115F B908DA4A00              mov ecx, 004ADA08
:00421164 E83524FFFF              call 0041359E
:00421169 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0042116F 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00421175 81C200500100            add edx, 00015000
:0042117B 8955F0                  mov dword ptr [ebp-10], edx

* Possible StringData Ref from Data Obj ->"PMAPOBJ.E4"
                                  |
:0042117E 68607A4700              push 00477A60
:00421183 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00421189 E8A731FFFF              call 00414335
:0042118E 8B45F0                  mov eax, dword ptr [ebp-10]
:00421191 50                      push eax
:00421192 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00421198 81E1FFFF0000            and ecx, 0000FFFF
:0042119E 51                      push ecx
:0042119F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004211A5 E8DF32FFFF              call 00414489
:004211AA 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:004211B0 52                      push edx
:004211B1 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:004211B7 25FFFF0000              and eax, 0000FFFF
:004211BC 83C001                  add eax, 00000001
:004211BF 50                      push eax
:004211C0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004211C6 E8BE32FFFF              call 00414489
:004211CB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004211D1 E836F4FEFF              call 0041060C
:004211D6 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:004211DC 81C100F80100            add ecx, 0001F800
:004211E2 51                      push ecx
:004211E3 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:004211E9 52                      push edx
:004211EA 6880030000              push 00000380
:004211EF 6A30                    push 00000030
:004211F1 E84125FFFF              call 00413737
:004211F6 83C410                  add esp, 00000010
:004211F9 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:004211FF 0500A80000              add eax, 0000A800
:00421204 50                      push eax
:00421205 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00421208 51                      push ecx
:00421209 6880030000              push 00000380
:0042120E 6A30                    push 00000030
:00421210 E82225FFFF              call 00413737
:00421215 83C410                  add esp, 00000010
:00421218 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042121F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00421225 E8F664FEFF              call 00407720
:0042122A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042122D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00421234 8BE5                    mov esp, ebp
:00421236 5D                      pop ebp
:00421237 C3                      ret



* Referenced by a CALL at Addresses:
|:00421916   , :0042335F   
|
:00421238 55                      push ebp
:00421239 8BEC                    mov ebp, esp
:0042123B 83EC10                  sub esp, 00000010
:0042123E 8B450C                  mov eax, dword ptr [ebp+0C]
:00421241 25FFFF0000              and eax, 0000FFFF
:00421246 83F861                  cmp eax, 00000061
:00421249 7E12                    jle 0042125D
:0042124B 6880000000              push 00000080
:00421250 E86DFDFFFF              call 00420FC2
:00421255 83C404                  add esp, 00000004
:00421258 E919010000              jmp 00421376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421249(C)
|
:0042125D C745F8F8A84800          mov [ebp-08], 0048A8F8
:00421264 66C745F00000            mov [ebp-10], 0000
:0042126A EB15                    jmp 00421281

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004212A8(U)
|
:0042126C 668B4DF0                mov cx, word ptr [ebp-10]
:00421270 6683C101                add cx, 0001
:00421274 66894DF0                mov word ptr [ebp-10], cx
:00421278 8B55F8                  mov edx, dword ptr [ebp-08]
:0042127B 83C240                  add edx, 00000040
:0042127E 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042126A(U)
|
:00421281 8B45F0                  mov eax, dword ptr [ebp-10]
:00421284 25FFFF0000              and eax, 0000FFFF
:00421289 3D80000000              cmp eax, 00000080
:0042128E 7D1A                    jge 004212AA
:00421290 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00421293 E858E1FEFF              call 0040F3F0
:00421298 25FFFF0000              and eax, 0000FFFF
:0042129D 2500800000              and eax, 00008000
:004212A2 85C0                    test eax, eax
:004212A4 7502                    jne 004212A8
:004212A6 EB02                    jmp 004212AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004212A4(C)
|
:004212A8 EBC2                    jmp 0042126C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042128E(C), :004212A6(U)
|
:004212AA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004212AD 81E1FFFF0000            and ecx, 0000FFFF
:004212B3 81F980000000            cmp ecx, 00000080
:004212B9 7512                    jne 004212CD
:004212BB 6880000000              push 00000080
:004212C0 E8FDFCFFFF              call 00420FC2
:004212C5 83C404                  add esp, 00000004
:004212C8 E9A9000000              jmp 00421376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004212B9(C)
|
:004212CD 668B5508                mov dx, word ptr [ebp+08]
:004212D1 52                      push edx
:004212D2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004212D5 E8563D0000              call 00425030
:004212DA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004212DD E8AE3C0000              call 00424F90
:004212E2 6800800000              push 00008000
:004212E7 6800800000              push 00008000
:004212EC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004212EF E83C3F0000              call 00425230
:004212F4 668B450C                mov ax, word ptr [ebp+0C]
:004212F8 50                      push eax
:004212F9 E87C000000              call 0042137A
:004212FE 83C404                  add esp, 00000004
:00421301 668945F4                mov word ptr [ebp-0C], ax
:00421305 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421308 81E1FFFF0000            and ecx, 0000FFFF
:0042130E 83F918                  cmp ecx, 00000018
:00421311 7523                    jne 00421336
:00421313 668B550C                mov dx, word ptr [ebp+0C]
:00421317 52                      push edx
:00421318 E850010000              call 0042146D
:0042131D 83C404                  add esp, 00000004
:00421320 668945F4                mov word ptr [ebp-0C], ax
:00421324 668B45F4                mov ax, word ptr [ebp-0C]
:00421328 50                      push eax
:00421329 668B4D0C                mov cx, word ptr [ebp+0C]
:0042132D 51                      push ecx
:0042132E E8CEFDFFFF              call 00421101
:00421333 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421311(C)
|
:00421336 8B55F4                  mov edx, dword ptr [ebp-0C]
:00421339 81E2FFFF0000            and edx, 0000FFFF
:0042133F 52                      push edx
:00421340 E889000000              call 004213CE
:00421345 83C404                  add esp, 00000004
:00421348 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042134B 25FFFF0000              and eax, 0000FFFF
:00421350 6BC030                  imul eax, 00000030
:00421353 C1E006                  shl eax, 06
:00421356 6BC038                  imul eax, 00000038
:00421359 50                      push eax
:0042135A B908DA4A00              mov ecx, 004ADA08
:0042135F E83A22FFFF              call 0041359E
:00421364 8945FC                  mov dword ptr [ebp-04], eax
:00421367 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042136A 51                      push ecx
:0042136B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042136E E84D1B0300              call 00452EC0
:00421373 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421258(U), :004212C8(U)
|
:00421376 8BE5                    mov esp, ebp
:00421378 5D                      pop ebp
:00421379 C3                      ret



* Referenced by a CALL at Addresses:
|:004212F9   , :004214B2   
|
:0042137A 55                      push ebp
:0042137B 8BEC                    mov ebp, esp
:0042137D 51                      push ecx
:0042137E 66C745FC0000            mov [ebp-04], 0000
:00421384 EB0C                    jmp 00421392

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004213C4(U)
|
:00421386 668B45FC                mov ax, word ptr [ebp-04]
:0042138A 66050100                add ax, 0001
:0042138E 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421384(U)
|
:00421392 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421395 81E1FFFF0000            and ecx, 0000FFFF
:0042139B 83F918                  cmp ecx, 00000018
:0042139E 7D26                    jge 004213C6
:004213A0 8B55FC                  mov edx, dword ptr [ebp-04]
:004213A3 81E2FFFF0000            and edx, 0000FFFF
:004213A9 33C0                    xor eax, eax
:004213AB 8A8240C94800            mov al, byte ptr [edx+0048C940]
:004213B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004213B4 81E1FFFF0000            and ecx, 0000FFFF
:004213BA 3BC1                    cmp eax, ecx
:004213BC 7506                    jne 004213C4
:004213BE 668B45FC                mov ax, word ptr [ebp-04]
:004213C2 EB06                    jmp 004213CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004213BC(C)
|
:004213C4 EBC0                    jmp 00421386

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042139E(C)
|
:004213C6 668B45FC                mov ax, word ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004213C2(U)
|
:004213CA 8BE5                    mov esp, ebp
:004213CC 5D                      pop ebp
:004213CD C3                      ret



* Referenced by a CALL at Address:
|:00421340   
|
:004213CE 55                      push ebp
:004213CF 8BEC                    mov ebp, esp
:004213D1 51                      push ecx
:004213D2 66C745FC0000            mov [ebp-04], 0000
:004213D8 EB0C                    jmp 004213E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421464(U)
|
:004213DA 668B45FC                mov ax, word ptr [ebp-04]
:004213DE 66050100                add ax, 0001
:004213E2 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004213D8(U)
|
:004213E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004213E9 81E1FFFF0000            and ecx, 0000FFFF
:004213EF 83F918                  cmp ecx, 00000018
:004213F2 7D75                    jge 00421469
:004213F4 8B55FC                  mov edx, dword ptr [ebp-04]
:004213F7 81E2FFFF0000            and edx, 0000FFFF
:004213FD 3B5508                  cmp edx, dword ptr [ebp+08]
:00421400 7511                    jne 00421413
:00421402 8B45FC                  mov eax, dword ptr [ebp-04]
:00421405 25FFFF0000              and eax, 0000FFFF
:0042140A C680605A480000          mov byte ptr [eax+00485A60], 00
:00421411 EB51                    jmp 00421464

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421400(C)
|
:00421413 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421416 81E1FFFF0000            and ecx, 0000FFFF
:0042141C 33D2                    xor edx, edx
:0042141E 8A9140C94800            mov dl, byte ptr [ecx+0048C940]
:00421424 81FAFF000000            cmp edx, 000000FF
:0042142A 7438                    je 00421464
:0042142C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042142F 25FFFF0000              and eax, 0000FFFF
:00421434 33C9                    xor ecx, ecx
:00421436 8A88605A4800            mov cl, byte ptr [eax+00485A60]
:0042143C 81F9FF000000            cmp ecx, 000000FF
:00421442 7420                    je 00421464
:00421444 8B55FC                  mov edx, dword ptr [ebp-04]
:00421447 81E2FFFF0000            and edx, 0000FFFF
:0042144D 8A82605A4800            mov al, byte ptr [edx+00485A60]
:00421453 0401                    add al, 01
:00421455 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421458 81E1FFFF0000            and ecx, 0000FFFF
:0042145E 8881605A4800            mov byte ptr [ecx+00485A60], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421411(U), :0042142A(C), :00421442(C)
|
:00421464 E971FFFFFF              jmp 004213DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004213F2(C)
|
:00421469 8BE5                    mov esp, ebp
:0042146B 5D                      pop ebp
:0042146C C3                      ret



* Referenced by a CALL at Address:
|:00421318   
|
:0042146D 55                      push ebp
:0042146E 8BEC                    mov ebp, esp
:00421470 51                      push ecx
:00421471 E834000000              call 004214AA
:00421476 668945FC                mov word ptr [ebp-04], ax
:0042147A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042147D 25FFFF0000              and eax, 0000FFFF
:00421482 83F818                  cmp eax, 00000018
:00421485 7509                    jne 00421490
:00421487 E830000000              call 004214BC
:0042148C 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421485(C)
|
:00421490 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421493 81E1FFFF0000            and ecx, 0000FFFF
:00421499 8A5508                  mov dl, byte ptr [ebp+08]
:0042149C 889140C94800            mov byte ptr [ecx+0048C940], dl
:004214A2 668B45FC                mov ax, word ptr [ebp-04]
:004214A6 8BE5                    mov esp, ebp
:004214A8 5D                      pop ebp
:004214A9 C3                      ret



* Referenced by a CALL at Address:
|:00421471   
|
:004214AA 55                      push ebp
:004214AB 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004214AD 68FF000000              push 000000FF
:004214B2 E8C3FEFFFF              call 0042137A
:004214B7 83C404                  add esp, 00000004
:004214BA 5D                      pop ebp
:004214BB C3                      ret



* Referenced by a CALL at Address:
|:00421487   
|
:004214BC 55                      push ebp
:004214BD 8BEC                    mov ebp, esp
:004214BF 83EC0C                  sub esp, 0000000C
:004214C2 66C745F40000            mov [ebp-0C], 0000
:004214C8 668B45F4                mov ax, word ptr [ebp-0C]
:004214CC 668945FC                mov word ptr [ebp-04], ax
:004214D0 66C745F80000            mov [ebp-08], 0000
:004214D6 EB0C                    jmp 004214E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421545(U)
|
:004214D8 668B4DF8                mov cx, word ptr [ebp-08]
:004214DC 6683C101                add cx, 0001
:004214E0 66894DF8                mov word ptr [ebp-08], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004214D6(U)
|
:004214E4 8B55F8                  mov edx, dword ptr [ebp-08]
:004214E7 81E2FFFF0000            and edx, 0000FFFF
:004214ED 83FA18                  cmp edx, 00000018
:004214F0 7D55                    jge 00421547
:004214F2 8B45F8                  mov eax, dword ptr [ebp-08]
:004214F5 25FFFF0000              and eax, 0000FFFF
:004214FA 33C9                    xor ecx, ecx
:004214FC 8A8840C94800            mov cl, byte ptr [eax+0048C940]
:00421502 81F9FF000000            cmp ecx, 000000FF
:00421508 743B                    je 00421545
:0042150A 8B55F8                  mov edx, dword ptr [ebp-08]
:0042150D 81E2FFFF0000            and edx, 0000FFFF
:00421513 33C0                    xor eax, eax
:00421515 8A82605A4800            mov al, byte ptr [edx+00485A60]
:0042151B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042151E 81E1FFFF0000            and ecx, 0000FFFF
:00421524 3BC1                    cmp eax, ecx
:00421526 7E1D                    jle 00421545
:00421528 8B55F8                  mov edx, dword ptr [ebp-08]
:0042152B 81E2FFFF0000            and edx, 0000FFFF
:00421531 660FB682605A4800        movzx ax, byte ptr [edx+00485A60]
:00421539 668945FC                mov word ptr [ebp-04], ax
:0042153D 668B4DF8                mov cx, word ptr [ebp-08]
:00421541 66894DF4                mov word ptr [ebp-0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421508(C), :00421526(C)
|
:00421545 EB91                    jmp 004214D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004214F0(C)
|
:00421547 668B45F4                mov ax, word ptr [ebp-0C]
:0042154B 8BE5                    mov esp, ebp
:0042154D 5D                      pop ebp
:0042154E C3                      ret



* Referenced by a CALL at Addresses:
|:00421704   , :004218D7   
|
:0042154F 55                      push ebp
:00421550 8BEC                    mov ebp, esp
:00421552 51                      push ecx
:00421553 56                      push esi
:00421554 8B7510                  mov esi, dword ptr [ebp+10]
:00421557 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042155D 6A06                    push 00000006
:0042155F E8EDFAFFFF              call 00421051
:00421564 83C404                  add esp, 00000004
:00421567 25FFFF0000              and eax, 0000FFFF
:0042156C 3BF0                    cmp esi, eax
:0042156E 0F8DC2000000            jnl 00421636
:00421574 8B750C                  mov esi, dword ptr [ebp+0C]
:00421577 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042157D 6A04                    push 00000004
:0042157F E8CDFAFFFF              call 00421051
:00421584 83C404                  add esp, 00000004
:00421587 25FFFF0000              and eax, 0000FFFF
:0042158C 3BF0                    cmp esi, eax
:0042158E 0F8DA2000000            jnl 00421636
:00421594 8B7508                  mov esi, dword ptr [ebp+08]
:00421597 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042159D 6A02                    push 00000002
:0042159F E8ADFAFFFF              call 00421051
:004215A4 83C404                  add esp, 00000004
:004215A7 25FFFF0000              and eax, 0000FFFF
:004215AC 3BF0                    cmp esi, eax
:004215AE 0F8D82000000            jnl 00421636
:004215B4 8B7510                  mov esi, dword ptr [ebp+10]
:004215B7 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004215BD 6A02                    push 00000002
:004215BF E88DFAFFFF              call 00421051
:004215C4 83C404                  add esp, 00000004
:004215C7 25FFFF0000              and eax, 0000FFFF
:004215CC 0FAFF0                  imul esi, eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004215CF 6A04                    push 00000004
:004215D1 E87BFAFFFF              call 00421051
:004215D6 83C404                  add esp, 00000004
:004215D9 25FFFF0000              and eax, 0000FFFF
:004215DE 0FAFF0                  imul esi, eax
:004215E1 8975FC                  mov dword ptr [ebp-04], esi
:004215E4 8B750C                  mov esi, dword ptr [ebp+0C]
:004215E7 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004215ED 6A02                    push 00000002
:004215EF E85DFAFFFF              call 00421051
:004215F4 83C404                  add esp, 00000004
:004215F7 25FFFF0000              and eax, 0000FFFF
:004215FC 0FAFF0                  imul esi, eax
:004215FF 8B45FC                  mov eax, dword ptr [ebp-04]
:00421602 03C6                    add eax, esi
:00421604 8945FC                  mov dword ptr [ebp-04], eax
:00421607 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042160A 81E1FFFF0000            and ecx, 0000FFFF
:00421610 8B55FC                  mov edx, dword ptr [ebp-04]
:00421613 03D1                    add edx, ecx
:00421615 8955FC                  mov dword ptr [ebp-04], edx
:00421618 8B45FC                  mov eax, dword ptr [ebp-04]
:0042161B D1E0                    shl eax, 1
:0042161D 8945FC                  mov dword ptr [ebp-04], eax
:00421620 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421623 83C110                  add ecx, 00000010
:00421626 51                      push ecx
:00421627 B930DF4A00              mov ecx, 004ADF30
:0042162C E86D1FFFFF              call 0041359E
:00421631 668B00                  mov ax, word ptr [eax]
:00421634 EB04                    jmp 0042163A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042156E(C), :0042158E(C), :004215AE(C)
|
:00421636 66B800F0                mov ax, F000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421634(U)
|
:0042163A 5E                      pop esi
:0042163B 8BE5                    mov esp, ebp
:0042163D 5D                      pop ebp
:0042163E C3                      ret



* Referenced by a CALL at Addresses:
|:004225DB   , :004239B5   
|
:0042163F 55                      push ebp
:00421640 8BEC                    mov ebp, esp
:00421642 83EC10                  sub esp, 00000010
:00421645 668B4510                mov ax, word ptr [ebp+10]
:00421649 668945FC                mov word ptr [ebp-04], ax
:0042164D EB0C                    jmp 0042165B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421731(U)
|
:0042164F 668B4DFC                mov cx, word ptr [ebp-04]
:00421653 6683C101                add cx, 0001
:00421657 66894DFC                mov word ptr [ebp-04], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042164D(U)
|
:0042165B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042165E 81E2FFFF0000            and edx, 0000FFFF
:00421664 8B4510                  mov eax, dword ptr [ebp+10]
:00421667 25FFFF0000              and eax, 0000FFFF
:0042166C 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0042166F 81E1FFFF0000            and ecx, 0000FFFF
:00421675 03C1                    add eax, ecx
:00421677 3BD0                    cmp edx, eax
:00421679 0F8DB7000000            jnl 00421736
:0042167F 8B550C                  mov edx, dword ptr [ebp+0C]
:00421682 81E2FFFF0000            and edx, 0000FFFF
:00421688 8B4518                  mov eax, dword ptr [ebp+18]
:0042168B 25FFFF0000              and eax, 0000FFFF
:00421690 2BD0                    sub edx, eax
:00421692 83C201                  add edx, 00000001
:00421695 668955F0                mov word ptr [ebp-10], dx
:00421699 EB0C                    jmp 004216A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042172C(U)
|
:0042169B 668B4DF0                mov cx, word ptr [ebp-10]
:0042169F 6683C101                add cx, 0001
:004216A3 66894DF0                mov word ptr [ebp-10], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421699(U)
|
:004216A7 8B55F0                  mov edx, dword ptr [ebp-10]
:004216AA 81E2FFFF0000            and edx, 0000FFFF
:004216B0 8B450C                  mov eax, dword ptr [ebp+0C]
:004216B3 25FFFF0000              and eax, 0000FFFF
:004216B8 83C001                  add eax, 00000001
:004216BB 3BD0                    cmp edx, eax
:004216BD 7D72                    jge 00421731
:004216BF 668B4D08                mov cx, word ptr [ebp+08]
:004216C3 66894DF8                mov word ptr [ebp-08], cx
:004216C7 EB0C                    jmp 004216D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042172A(U)
|
:004216C9 668B55F8                mov dx, word ptr [ebp-08]
:004216CD 6683C201                add dx, 0001
:004216D1 668955F8                mov word ptr [ebp-08], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004216C7(U)
|
:004216D5 8B45F8                  mov eax, dword ptr [ebp-08]
:004216D8 25FFFF0000              and eax, 0000FFFF
:004216DD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004216E0 81E1FFFF0000            and ecx, 0000FFFF
:004216E6 8B5514                  mov edx, dword ptr [ebp+14]
:004216E9 81E2FFFF0000            and edx, 0000FFFF
:004216EF 03CA                    add ecx, edx
:004216F1 3BC1                    cmp eax, ecx
:004216F3 7D37                    jge 0042172C
:004216F5 668B45FC                mov ax, word ptr [ebp-04]
:004216F9 50                      push eax
:004216FA 668B4DF0                mov cx, word ptr [ebp-10]
:004216FE 51                      push ecx
:004216FF 668B55F8                mov dx, word ptr [ebp-08]
:00421703 52                      push edx
:00421704 E846FEFFFF              call 0042154F
:00421709 83C40C                  add esp, 0000000C
:0042170C 668945F4                mov word ptr [ebp-0C], ax
:00421710 8B45F4                  mov eax, dword ptr [ebp-0C]
:00421713 25FFFF0000              and eax, 0000FFFF
:00421718 2500FF0000              and eax, 0000FF00
:0042171D 3D00F00000              cmp eax, 0000F000
:00421722 7506                    jne 0042172A
:00421724 660DFFFF                or ax, FFFF
:00421728 EB0F                    jmp 00421739

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421722(C)
|
:0042172A EB9D                    jmp 004216C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004216F3(C)
|
:0042172C E96AFFFFFF              jmp 0042169B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004216BD(C)
|
:00421731 E919FFFFFF              jmp 0042164F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421679(C)
|
:00421736 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421728(U)
|
:00421739 8BE5                    mov esp, ebp
:0042173B 5D                      pop ebp
:0042173C C3                      ret



* Referenced by a CALL at Address:
|:00421DA4   
|
:0042173D 55                      push ebp
:0042173E 8BEC                    mov ebp, esp
:00421740 83EC10                  sub esp, 00000010
:00421743 56                      push esi
:00421744 8B4508                  mov eax, dword ptr [ebp+08]
:00421747 33C9                    xor ecx, ecx
:00421749 668B08                  mov cx, word ptr [eax]
:0042174C C1E103                  shl ecx, 03
:0042174F 66894DF0                mov word ptr [ebp-10], cx
:00421753 8B550C                  mov edx, dword ptr [ebp+0C]
:00421756 33C0                    xor eax, eax
:00421758 668B02                  mov ax, word ptr [edx]
:0042175B 6BC0F8                  imul eax, FFFFFFF8
:0042175E 668945FC                mov word ptr [ebp-04], ax
:00421762 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00421765 81E1FFFF0000            and ecx, 0000FFFF
:0042176B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042176E 81E2FFFF0000            and edx, 0000FFFF
:00421774 03CA                    add ecx, edx
:00421776 66894DF8                mov word ptr [ebp-08], cx
:0042177A 8B4508                  mov eax, dword ptr [ebp+08]
:0042177D 33C9                    xor ecx, ecx
:0042177F 668B08                  mov cx, word ptr [eax]
:00421782 8B550C                  mov edx, dword ptr [ebp+0C]
:00421785 33C0                    xor eax, eax
:00421787 668B02                  mov ax, word ptr [edx]
:0042178A 03C8                    add ecx, eax
:0042178C C1E102                  shl ecx, 02
:0042178F 8B5510                  mov edx, dword ptr [ebp+10]
:00421792 81E2FFFF0000            and edx, 0000FFFF
:00421798 C1E203                  shl edx, 03
:0042179B 2BCA                    sub ecx, edx
:0042179D 66894DF4                mov word ptr [ebp-0C], cx
:004217A1 8B75F8                  mov esi, dword ptr [ebp-08]
:004217A4 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00008: ""
                                  |
:004217AA 6A08                    push 00000008
:004217AC E8A0F8FFFF              call 00421051
:004217B1 83C404                  add esp, 00000004
:004217B4 25FFFF0000              and eax, 0000FFFF
:004217B9 C1E003                  shl eax, 03
:004217BC 99                      cdq
:004217BD 2BC2                    sub eax, edx
:004217BF D1F8                    sar eax, 1
:004217C1 8D4406F8                lea eax, dword ptr [esi+eax-08]
:004217C5 668945F8                mov word ptr [ebp-08], ax
:004217C9 33C9                    xor ecx, ecx
:004217CB 668B0DBCA84800          mov cx, word ptr [0048A8BC]
:004217D2 C1E103                  shl ecx, 03
:004217D5 668B55F8                mov dx, word ptr [ebp-08]
:004217D9 662BD1                  sub dx, cx
:004217DC 668955F8                mov word ptr [ebp-08], dx
:004217E0 33C0                    xor eax, eax
:004217E2 66A1BEA84800            mov ax, word ptr [0048A8BE]
:004217E8 8D0CC5F8FFFFFF          lea ecx, dword ptr [8*eax+FFFFFFF8]
:004217EF 668B55F4                mov dx, word ptr [ebp-0C]
:004217F3 662BD1                  sub dx, cx
:004217F6 668955F4                mov word ptr [ebp-0C], dx
:004217FA 8B4508                  mov eax, dword ptr [ebp+08]
:004217FD 668B4DF8                mov cx, word ptr [ebp-08]
:00421801 668908                  mov word ptr [eax], cx
:00421804 8B550C                  mov edx, dword ptr [ebp+0C]
:00421807 668B45F4                mov ax, word ptr [ebp-0C]
:0042180B 668902                  mov word ptr [edx], ax
:0042180E 5E                      pop esi
:0042180F 8BE5                    mov esp, ebp
:00421811 5D                      pop ebp
:00421812 C3                      ret



* Referenced by a CALL at Addresses:
|:00424A3F   , :00424A7A   
|
:00421813 55                      push ebp
:00421814 8BEC                    mov ebp, esp
:00421816 83EC20                  sub esp, 00000020
:00421819 56                      push esi
:0042181A 66C745E4FFFF            mov [ebp-1C], FFFF
:00421820 66C745E0FFFF            mov [ebp-20], FFFF
:00421826 66C745E8FFFF            mov [ebp-18], FFFF
:0042182C 66C745F00000            mov [ebp-10], 0000
:00421832 EB0C                    jmp 00421840

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421976(U)
|
:00421834 668B45F0                mov ax, word ptr [ebp-10]
:00421838 66050100                add ax, 0001
:0042183C 668945F0                mov word ptr [ebp-10], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421832(U)
|
:00421840 8B75F0                  mov esi, dword ptr [ebp-10]
:00421843 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00006: ""
                                  |
:00421849 6A06                    push 00000006
:0042184B E801F8FFFF              call 00421051
:00421850 83C404                  add esp, 00000004
:00421853 25FFFF0000              and eax, 0000FFFF
:00421858 3BF0                    cmp esi, eax
:0042185A 0F8D1B010000            jnl 0042197B
:00421860 66C745EC0000            mov [ebp-14], 0000
:00421866 EB0C                    jmp 00421874

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421971(U)
|
:00421868 668B4DEC                mov cx, word ptr [ebp-14]
:0042186C 6683C101                add cx, 0001
:00421870 66894DEC                mov word ptr [ebp-14], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421866(U)
|
:00421874 8B75EC                  mov esi, dword ptr [ebp-14]
:00421877 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042187D 6A04                    push 00000004
:0042187F E8CDF7FFFF              call 00421051
:00421884 83C404                  add esp, 00000004
:00421887 25FFFF0000              and eax, 0000FFFF
:0042188C 3BF0                    cmp esi, eax
:0042188E 0F8DE2000000            jnl 00421976
:00421894 66C745F40000            mov [ebp-0C], 0000
:0042189A EB0C                    jmp 004218A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042196C(U)
|
:0042189C 668B55F4                mov dx, word ptr [ebp-0C]
:004218A0 6683C201                add dx, 0001
:004218A4 668955F4                mov word ptr [ebp-0C], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042189A(U)
|
:004218A8 8B75F4                  mov esi, dword ptr [ebp-0C]
:004218AB 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004218B1 6A02                    push 00000002
:004218B3 E899F7FFFF              call 00421051
:004218B8 83C404                  add esp, 00000004
:004218BB 25FFFF0000              and eax, 0000FFFF
:004218C0 3BF0                    cmp esi, eax
:004218C2 0F8DA9000000            jnl 00421971
:004218C8 668B45F0                mov ax, word ptr [ebp-10]
:004218CC 50                      push eax
:004218CD 668B4DEC                mov cx, word ptr [ebp-14]
:004218D1 51                      push ecx
:004218D2 668B55F4                mov dx, word ptr [ebp-0C]
:004218D6 52                      push edx
:004218D7 E873FCFFFF              call 0042154F
:004218DC 83C40C                  add esp, 0000000C
:004218DF 668945F8                mov word ptr [ebp-08], ax
:004218E3 8B4508                  mov eax, dword ptr [ebp+08]
:004218E6 25FFFF0000              and eax, 0000FFFF
:004218EB 83F801                  cmp eax, 00000001
:004218EE 756F                    jne 0042195F
:004218F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004218F3 81E1FFFF0000            and ecx, 0000FFFF
:004218F9 80E500                  and ch, 00
:004218FC 81F9FF000000            cmp ecx, 000000FF
:00421902 745B                    je 0042195F
:00421904 8B55F8                  mov edx, dword ptr [ebp-08]
:00421907 81E2FFFF0000            and edx, 0000FFFF
:0042190D 80E600                  and dh, 00
:00421910 52                      push edx
:00421911 6800300000              push 00003000
:00421916 E81DF9FFFF              call 00421238
:0042191B 83C408                  add esp, 00000008
:0042191E 8945FC                  mov dword ptr [ebp-04], eax
:00421921 6880000000              push 00000080
:00421926 E897F6FFFF              call 00420FC2
:0042192B 83C404                  add esp, 00000004
:0042192E 3B45FC                  cmp eax, dword ptr [ebp-04]
:00421931 7502                    jne 00421935
:00421933 EB46                    jmp 0042197B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421931(C)
|
:00421935 8B45FC                  mov eax, dword ptr [ebp-04]
:00421938 50                      push eax
:00421939 6A00                    push 00000000
:0042193B 6A00                    push 00000000
:0042193D 6A00                    push 00000000
:0042193F 6A00                    push 00000000
:00421941 6A00                    push 00000000
:00421943 668B4DF0                mov cx, word ptr [ebp-10]
:00421947 51                      push ecx
:00421948 668B55EC                mov dx, word ptr [ebp-14]
:0042194C 52                      push edx
:0042194D 668B45F4                mov ax, word ptr [ebp-0C]
:00421951 50                      push eax
:00421952 6800300000              push 00003000
:00421957 E87D160000              call 00422FD9
:0042195C 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004218EE(C), :00421902(C)
|
:0042195F 668B4DF8                mov cx, word ptr [ebp-08]
:00421963 6681E100FF              and cx, FF00
:00421968 66894DF8                mov word ptr [ebp-08], cx
:0042196C E92BFFFFFF              jmp 0042189C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004218C2(C)
|
:00421971 E9F2FEFFFF              jmp 00421868

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042188E(C)
|
:00421976 E9B9FEFFFF              jmp 00421834

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042185A(C), :00421933(U)
|
:0042197B 5E                      pop esi
:0042197C 8BE5                    mov esp, ebp
:0042197E 5D                      pop ebp
:0042197F C3                      ret



* Referenced by a CALL at Address:
|:00422CF4   
|
:00421980 55                      push ebp
:00421981 8BEC                    mov ebp, esp
:00421983 83EC14                  sub esp, 00000014
:00421986 A1ACA84800              mov eax, dword ptr [0048A8AC]
:0042198B 8945F8                  mov dword ptr [ebp-08], eax
:0042198E 66C745FC0000            mov [ebp-04], 0000
:00421994 66C745EC0000            mov [ebp-14], 0000
:0042199A EB0C                    jmp 004219A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421A10(U)
|
:0042199C 668B4DEC                mov cx, word ptr [ebp-14]
:004219A0 6683C101                add cx, 0001
:004219A4 66894DEC                mov word ptr [ebp-14], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042199A(U)
|
:004219A8 8B55EC                  mov edx, dword ptr [ebp-14]
:004219AB 81E2FFFF0000            and edx, 0000FFFF
:004219B1 83FA32                  cmp edx, 00000032
:004219B4 7D5C                    jge 00421A12
:004219B6 8B45F8                  mov eax, dword ptr [ebp-08]
:004219B9 8945F4                  mov dword ptr [ebp-0C], eax
:004219BC 66C745F00000            mov [ebp-10], 0000
:004219C2 EB18                    jmp 004219DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004219FC(U)
|
:004219C4 668B4DF0                mov cx, word ptr [ebp-10]
:004219C8 6683C101                add cx, 0001
:004219CC 66894DF0                mov word ptr [ebp-10], cx
:004219D0 668B55FC                mov dx, word ptr [ebp-04]
:004219D4 6683C201                add dx, 0001
:004219D8 668955FC                mov word ptr [ebp-04], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004219C2(U)
|
:004219DC 8B45F0                  mov eax, dword ptr [ebp-10]
:004219DF 25FFFF0000              and eax, 0000FFFF
:004219E4 83F850                  cmp eax, 00000050
:004219E7 7D15                    jge 004219FE
:004219E9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004219EC 668B55FC                mov dx, word ptr [ebp-04]
:004219F0 668911                  mov word ptr [ecx], dx
:004219F3 8B45F8                  mov eax, dword ptr [ebp-08]
:004219F6 83C002                  add eax, 00000002
:004219F9 8945F8                  mov dword ptr [ebp-08], eax
:004219FC EBC6                    jmp 004219C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004219E7(C)
|
:004219FE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421A01 894DF8                  mov dword ptr [ebp-08], ecx
:00421A04 8B55F8                  mov edx, dword ptr [ebp-08]
:00421A07 81C290010000            add edx, 00000190
:00421A0D 8955F8                  mov dword ptr [ebp-08], edx
:00421A10 EB8A                    jmp 0042199C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004219B4(C)
|
:00421A12 8BE5                    mov esp, ebp
:00421A14 5D                      pop ebp
:00421A15 C3                      ret



* Referenced by a CALL at Address:
|:00421D11   
|
:00421A16 55                      push ebp
:00421A17 8BEC                    mov ebp, esp
:00421A19 83EC0C                  sub esp, 0000000C
:00421A1C 66C745FC0000            mov [ebp-04], 0000
:00421A22 EB0C                    jmp 00421A30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421ABB(U)
|
:00421A24 668B45FC                mov ax, word ptr [ebp-04]
:00421A28 66050100                add ax, 0001
:00421A2C 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421A22(U)
|
:00421A30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421A33 81E1FFFF0000            and ecx, 0000FFFF
:00421A39 8B5514                  mov edx, dword ptr [ebp+14]
:00421A3C 81E2FFFF0000            and edx, 0000FFFF
:00421A42 3BCA                    cmp ecx, edx
:00421A44 7D7A                    jge 00421AC0
:00421A46 C745F858CB4800          mov [ebp-08], 0048CB58
:00421A4D 8B450C                  mov eax, dword ptr [ebp+0C]
:00421A50 25FFFF0000              and eax, 0000FFFF
:00421A55 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421A58 81E1FFFF0000            and ecx, 0000FFFF
:00421A5E 03C1                    add eax, ecx
:00421A60 6BC050                  imul eax, 00000050
:00421A63 8B5508                  mov edx, dword ptr [ebp+08]
:00421A66 81E2FFFF0000            and edx, 0000FFFF
:00421A6C 03C2                    add eax, edx
:00421A6E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00421A71 8D1441                  lea edx, dword ptr [ecx+2*eax]
:00421A74 8955F8                  mov dword ptr [ebp-08], edx
:00421A77 66C745F40000            mov [ebp-0C], 0000
:00421A7D EB15                    jmp 00421A94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421AB9(U)
|
:00421A7F 668B45F4                mov ax, word ptr [ebp-0C]
:00421A83 66050100                add ax, 0001
:00421A87 668945F4                mov word ptr [ebp-0C], ax
:00421A8B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00421A8E 83C102                  add ecx, 00000002
:00421A91 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421A7D(U)
|
:00421A94 8B55F4                  mov edx, dword ptr [ebp-0C]
:00421A97 81E2FFFF0000            and edx, 0000FFFF
:00421A9D 8B4510                  mov eax, dword ptr [ebp+10]
:00421AA0 25FFFF0000              and eax, 0000FFFF
:00421AA5 3BD0                    cmp edx, eax
:00421AA7 7D12                    jge 00421ABB
:00421AA9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00421AAC 668B11                  mov dx, word ptr [ecx]
:00421AAF 660B5518                or dx, word ptr [ebp+18]
:00421AB3 8B45F8                  mov eax, dword ptr [ebp-08]
:00421AB6 668910                  mov word ptr [eax], dx
:00421AB9 EBC4                    jmp 00421A7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421AA7(C)
|
:00421ABB E964FFFFFF              jmp 00421A24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421A44(C)
|
:00421AC0 8BE5                    mov esp, ebp
:00421AC2 5D                      pop ebp
:00421AC3 C3                      ret



* Referenced by a CALL at Addresses:
|:00421CC1   , :00421CEE   
|
:00421AC4 55                      push ebp
:00421AC5 8BEC                    mov ebp, esp
:00421AC7 51                      push ecx
:00421AC8 8B4508                  mov eax, dword ptr [ebp+08]
:00421ACB 25FFFF0000              and eax, 0000FFFF
:00421AD0 99                      cdq
:00421AD1 83E207                  and edx, 00000007
:00421AD4 03C2                    add eax, edx
:00421AD6 C1F803                  sar eax, 03
:00421AD9 668945FC                mov word ptr [ebp-04], ax
:00421ADD 8B4508                  mov eax, dword ptr [ebp+08]
:00421AE0 25FFFF0000              and eax, 0000FFFF
:00421AE5 99                      cdq
:00421AE6 33C2                    xor eax, edx
:00421AE8 2BC2                    sub eax, edx
:00421AEA 83E007                  and eax, 00000007
:00421AED 33C2                    xor eax, edx
:00421AEF 2BC2                    sub eax, edx
:00421AF1 85C0                    test eax, eax
:00421AF3 740C                    je 00421B01
:00421AF5 668B45FC                mov ax, word ptr [ebp-04]
:00421AF9 66050100                add ax, 0001
:00421AFD 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421AF3(C)
|
:00421B01 668B45FC                mov ax, word ptr [ebp-04]
:00421B05 8BE5                    mov esp, ebp
:00421B07 5D                      pop ebp
:00421B08 C3                      ret


:00421B09 55                      push ebp
:00421B0A 8BEC                    mov ebp, esp
:00421B0C 51                      push ecx
:00421B0D 8B4508                  mov eax, dword ptr [ebp+08]
:00421B10 25FFFF0000              and eax, 0000FFFF
:00421B15 99                      cdq
:00421B16 83E207                  and edx, 00000007
:00421B19 03C2                    add eax, edx
:00421B1B C1F803                  sar eax, 03
:00421B1E 668945FC                mov word ptr [ebp-04], ax
:00421B22 668B45FC                mov ax, word ptr [ebp-04]
:00421B26 8BE5                    mov esp, ebp
:00421B28 5D                      pop ebp
:00421B29 C3                      ret



* Referenced by a CALL at Address:
|:0042419F   
|
:00421B2A 55                      push ebp
:00421B2B 8BEC                    mov ebp, esp
:00421B2D 83EC20                  sub esp, 00000020
:00421B30 8B4508                  mov eax, dword ptr [ebp+08]
:00421B33 25FFFF0000              and eax, 0000FFFF
:00421B38 25FFFF0000              and eax, 0000FFFF
:00421B3D 668945EC                mov word ptr [ebp-14], ax
:00421B41 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00421B44 81E1FFFF0000            and ecx, 0000FFFF
:00421B4A 83E928                  sub ecx, 00000028
:00421B4D 81E1FFFF0000            and ecx, 0000FFFF
:00421B53 66894DE4                mov word ptr [ebp-1C], cx
:00421B57 668B55EC                mov dx, word ptr [ebp-14]
:00421B5B 668955F8                mov word ptr [ebp-08], dx
:00421B5F 668B45E4                mov ax, word ptr [ebp-1C]
:00421B63 668945F0                mov word ptr [ebp-10], ax
:00421B67 0FBF4DEC                movsx ecx, word ptr [ebp-14]
:00421B6B 85C9                    test ecx, ecx
:00421B6D 7D37                    jge 00421BA6
:00421B6F 668B55EC                mov dx, word ptr [ebp-14]
:00421B73 66035510                add dx, word ptr [ebp+10]
:00421B77 668955EC                mov word ptr [ebp-14], dx
:00421B7B 0FBF45EC                movsx eax, word ptr [ebp-14]
:00421B7F 85C0                    test eax, eax
:00421B81 7F08                    jg 00421B8B
:00421B83 6633C0                  xor ax, ax
:00421B86 E992010000              jmp 00421D1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421B81(C)
|
:00421B8B 66C745F80000            mov [ebp-08], 0000
:00421B91 8B4D10                  mov ecx, dword ptr [ebp+10]
:00421B94 81E1FFFF0000            and ecx, 0000FFFF
:00421B9A 0FBF55EC                movsx edx, word ptr [ebp-14]
:00421B9E 2BCA                    sub ecx, edx
:00421BA0 66894DFC                mov word ptr [ebp-04], cx
:00421BA4 EB42                    jmp 00421BE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421B6D(C)
|
:00421BA6 0FBF45EC                movsx eax, word ptr [ebp-14]
:00421BAA 3D80020000              cmp eax, 00000280
:00421BAF 7C08                    jl 00421BB9
:00421BB1 6633C0                  xor ax, ax
:00421BB4 E964010000              jmp 00421D1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421BAF(C)
|
:00421BB9 668B4DEC                mov cx, word ptr [ebp-14]
:00421BBD 66034D10                add cx, word ptr [ebp+10]
:00421BC1 66894DEC                mov word ptr [ebp-14], cx
:00421BC5 668B55EC                mov dx, word ptr [ebp-14]
:00421BC9 6681EA8002              sub dx, 0280
:00421BCE 668955EC                mov word ptr [ebp-14], dx
:00421BD2 0FBF45EC                movsx eax, word ptr [ebp-14]
:00421BD6 85C0                    test eax, eax
:00421BD8 7D06                    jge 00421BE0
:00421BDA 66C745EC0000            mov [ebp-14], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421BD8(C)
|
:00421BE0 668B4DEC                mov cx, word ptr [ebp-14]
:00421BE4 66894DFC                mov word ptr [ebp-04], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421BA4(U)
|
:00421BE8 0FBF55E4                movsx edx, word ptr [ebp-1C]
:00421BEC 85D2                    test edx, edx
:00421BEE 7D37                    jge 00421C27
:00421BF0 668B45E4                mov ax, word ptr [ebp-1C]
:00421BF4 66034514                add ax, word ptr [ebp+14]
:00421BF8 668945E4                mov word ptr [ebp-1C], ax
:00421BFC 0FBF4DE4                movsx ecx, word ptr [ebp-1C]
:00421C00 85C9                    test ecx, ecx
:00421C02 7F08                    jg 00421C0C
:00421C04 6633C0                  xor ax, ax
:00421C07 E911010000              jmp 00421D1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421C02(C)
|
:00421C0C 66C745F00000            mov [ebp-10], 0000
:00421C12 8B5514                  mov edx, dword ptr [ebp+14]
:00421C15 81E2FFFF0000            and edx, 0000FFFF
:00421C1B 0FBF45E4                movsx eax, word ptr [ebp-1C]
:00421C1F 2BD0                    sub edx, eax
:00421C21 668955F4                mov word ptr [ebp-0C], dx
:00421C25 EB42                    jmp 00421C69

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421BEE(C)
|
:00421C27 0FBF4DE4                movsx ecx, word ptr [ebp-1C]
:00421C2B 81F990010000            cmp ecx, 00000190
:00421C31 7C08                    jl 00421C3B
:00421C33 6633C0                  xor ax, ax
:00421C36 E9E2000000              jmp 00421D1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421C31(C)
|
:00421C3B 668B55E4                mov dx, word ptr [ebp-1C]
:00421C3F 66035514                add dx, word ptr [ebp+14]
:00421C43 668955E4                mov word ptr [ebp-1C], dx
:00421C47 668B45E4                mov ax, word ptr [ebp-1C]
:00421C4B 662D9001                sub ax, 0190
:00421C4F 668945E4                mov word ptr [ebp-1C], ax
:00421C53 0FBF4DE4                movsx ecx, word ptr [ebp-1C]
:00421C57 85C9                    test ecx, ecx
:00421C59 7D06                    jge 00421C61
:00421C5B 66C745E40000            mov [ebp-1C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421C59(C)
|
:00421C61 668B55E4                mov dx, word ptr [ebp-1C]
:00421C65 668955F4                mov word ptr [ebp-0C], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421C25(U)
|
:00421C69 668B4510                mov ax, word ptr [ebp+10]
:00421C6D 662B45FC                sub ax, word ptr [ebp-04]
:00421C71 66894510                mov word ptr [ebp+10], ax
:00421C75 668B4D14                mov cx, word ptr [ebp+14]
:00421C79 662B4DF4                sub cx, word ptr [ebp-0C]
:00421C7D 66894D14                mov word ptr [ebp+14], cx
:00421C81 8B45F8                  mov eax, dword ptr [ebp-08]
:00421C84 25FFFF0000              and eax, 0000FFFF
:00421C89 99                      cdq
:00421C8A 83E207                  and edx, 00000007
:00421C8D 03C2                    add eax, edx
:00421C8F C1F803                  sar eax, 03
:00421C92 668945E8                mov word ptr [ebp-18], ax
:00421C96 8B45F0                  mov eax, dword ptr [ebp-10]
:00421C99 25FFFF0000              and eax, 0000FFFF
:00421C9E 99                      cdq
:00421C9F 83E207                  and edx, 00000007
:00421CA2 03C2                    add eax, edx
:00421CA4 C1F803                  sar eax, 03
:00421CA7 668945E0                mov word ptr [ebp-20], ax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00421CAB 6A02                    push 00000002
:00421CAD 8B55F0                  mov edx, dword ptr [ebp-10]
:00421CB0 81E2FFFF0000            and edx, 0000FFFF
:00421CB6 8B4514                  mov eax, dword ptr [ebp+14]
:00421CB9 25FFFF0000              and eax, 0000FFFF
:00421CBE 03D0                    add edx, eax
:00421CC0 52                      push edx
:00421CC1 E8FEFDFFFF              call 00421AC4
:00421CC6 83C404                  add esp, 00000004
:00421CC9 25FFFF0000              and eax, 0000FFFF
:00421CCE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00421CD1 81E1FFFF0000            and ecx, 0000FFFF
:00421CD7 2BC1                    sub eax, ecx
:00421CD9 50                      push eax
:00421CDA 8B55F8                  mov edx, dword ptr [ebp-08]
:00421CDD 81E2FFFF0000            and edx, 0000FFFF
:00421CE3 8B4510                  mov eax, dword ptr [ebp+10]
:00421CE6 25FFFF0000              and eax, 0000FFFF
:00421CEB 03D0                    add edx, eax
:00421CED 52                      push edx
:00421CEE E8D1FDFFFF              call 00421AC4
:00421CF3 83C404                  add esp, 00000004
:00421CF6 25FFFF0000              and eax, 0000FFFF
:00421CFB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00421CFE 81E1FFFF0000            and ecx, 0000FFFF
:00421D04 2BC1                    sub eax, ecx
:00421D06 50                      push eax
:00421D07 668B55E0                mov dx, word ptr [ebp-20]
:00421D0B 52                      push edx
:00421D0C 668B45E8                mov ax, word ptr [ebp-18]
:00421D10 50                      push eax
:00421D11 E800FDFFFF              call 00421A16
:00421D16 83C414                  add esp, 00000014
:00421D19 66B80100                mov ax, 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421B86(U), :00421BB4(U), :00421C07(U), :00421C36(U)
|
:00421D1D 8BE5                    mov esp, ebp
:00421D1F 5D                      pop ebp
:00421D20 C3                      ret



* Referenced by a CALL at Address:
|:004223CA   
|
:00421D21 55                      push ebp
:00421D22 8BEC                    mov ebp, esp
:00421D24 83EC10                  sub esp, 00000010
:00421D27 6A00                    push 00000000
:00421D29 E8F9890400              call 0046A727
:00421D2E 83C404                  add esp, 00000004
:00421D31 6A00                    push 00000000
:00421D33 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00421D35 6A04                    push 00000004
:00421D37 E8D4900400              call 0046AE10
:00421D3C 83C40C                  add esp, 0000000C
:00421D3F 66C745F00000            mov [ebp-10], 0000
:00421D45 EB0C                    jmp 00421D53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421DD2(U)
|
:00421D47 668B45F0                mov ax, word ptr [ebp-10]
:00421D4B 66050100                add ax, 0001
:00421D4F 668945F0                mov word ptr [ebp-10], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421D45(U)
|
:00421D53 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00421D56 81E1FFFF0000            and ecx, 0000FFFF
:00421D5C 33D2                    xor edx, edx
:00421D5E 668B157C5A4800          mov dx, word ptr [00485A7C]
:00421D65 3BCA                    cmp ecx, edx
:00421D67 7D6E                    jge 00421DD7
:00421D69 8B45F0                  mov eax, dword ptr [ebp-10]
:00421D6C 25FFFF0000              and eax, 0000FFFF
:00421D71 8B0C8558C94800          mov ecx, dword ptr [4*eax+0048C958]
:00421D78 894DF4                  mov dword ptr [ebp-0C], ecx
:00421D7B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421D7E E80D340000              call 00425190
:00421D83 668945FC                mov word ptr [ebp-04], ax
:00421D87 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421D8A E841340000              call 004251D0
:00421D8F 668945F8                mov word ptr [ebp-08], ax
:00421D93 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421D96 E875340000              call 00425210
:00421D9B 50                      push eax
:00421D9C 8D55F8                  lea edx, dword ptr [ebp-08]
:00421D9F 52                      push edx
:00421DA0 8D45FC                  lea eax, dword ptr [ebp-04]
:00421DA3 50                      push eax
:00421DA4 E894F9FFFF              call 0042173D
:00421DA9 83C40C                  add esp, 0000000C
:00421DAC 668B4DFC                mov cx, word ptr [ebp-04]
:00421DB0 66894DFC                mov word ptr [ebp-04], cx
:00421DB4 668B55F8                mov dx, word ptr [ebp-08]
:00421DB8 6683C228                add dx, 0028
:00421DBC 668955F8                mov word ptr [ebp-08], dx
:00421DC0 668B45F8                mov ax, word ptr [ebp-08]
:00421DC4 50                      push eax
:00421DC5 668B4DFC                mov cx, word ptr [ebp-04]
:00421DC9 51                      push ecx
:00421DCA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421DCD E83E230000              call 00424110
:00421DD2 E970FFFFFF              jmp 00421D47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421D67(C)
|
:00421DD7 6A00                    push 00000000
:00421DD9 6A00                    push 00000000
:00421DDB 6A00                    push 00000000
:00421DDD E82E900400              call 0046AE10
:00421DE2 83C40C                  add esp, 0000000C
:00421DE5 8BE5                    mov esp, ebp
:00421DE7 5D                      pop ebp
:00421DE8 C3                      ret



* Referenced by a CALL at Address:
|:00424D94   
|
:00421DE9 55                      push ebp
:00421DEA 8BEC                    mov ebp, esp
:00421DEC 83EC18                  sub esp, 00000018
:00421DEF 66C745EC0000            mov [ebp-14], 0000
:00421DF5 66C745E80200            mov [ebp-18], 0002
:00421DFB 66C745FC0000            mov [ebp-04], 0000
:00421E01 66C745F00000            mov [ebp-10], 0000
:00421E07 66C745F40000            mov [ebp-0C], 0000
:00421E0D EB0C                    jmp 00421E1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421EBB(U)
|
:00421E0F 668B45F4                mov ax, word ptr [ebp-0C]
:00421E13 66050100                add ax, 0001
:00421E17 668945F4                mov word ptr [ebp-0C], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421E0D(U)
|
:00421E1B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421E1E 81E1FFFF0000            and ecx, 0000FFFF
:00421E24 83F964                  cmp ecx, 00000064
:00421E27 0F8D93000000            jnl 00421EC0
:00421E2D 668B55EC                mov dx, word ptr [ebp-14]
:00421E31 668955FC                mov word ptr [ebp-04], dx
:00421E35 66C745F80000            mov [ebp-08], 0000
:00421E3B EB0C                    jmp 00421E49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421E91(U)
|
:00421E3D 668B45F8                mov ax, word ptr [ebp-08]
:00421E41 66050100                add ax, 0001
:00421E45 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421E3B(U)
|
:00421E49 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00421E4C 81E1FFFF0000            and ecx, 0000FFFF
:00421E52 83F964                  cmp ecx, 00000064
:00421E55 7D3C                    jge 00421E93
:00421E57 8B55F4                  mov edx, dword ptr [ebp-0C]
:00421E5A 81E2FFFF0000            and edx, 0000FFFF
:00421E60 6BD264                  imul edx, 00000064
:00421E63 8B45F8                  mov eax, dword ptr [ebp-08]
:00421E66 25FFFF0000              and eax, 0000FFFF
:00421E6B 03D0                    add edx, eax
:00421E6D 668B4DFC                mov cx, word ptr [ebp-04]
:00421E71 66890C55885A4800        mov word ptr [2*edx+00485A88], cx
:00421E79 668B55F0                mov dx, word ptr [ebp-10]
:00421E7D 6683C201                add dx, 0001
:00421E81 668955F0                mov word ptr [ebp-10], dx
:00421E85 668B45FC                mov ax, word ptr [ebp-04]
:00421E89 660345F0                add ax, word ptr [ebp-10]
:00421E8D 668945FC                mov word ptr [ebp-04], ax
:00421E91 EBAA                    jmp 00421E3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421E55(C)
|
:00421E93 668B4DEC                mov cx, word ptr [ebp-14]
:00421E97 66034DE8                add cx, word ptr [ebp-18]
:00421E9B 66894DEC                mov word ptr [ebp-14], cx
:00421E9F 8B55E8                  mov edx, dword ptr [ebp-18]
:00421EA2 81E2FFFF0000            and edx, 0000FFFF
:00421EA8 83EA01                  sub edx, 00000001
:00421EAB 668955F0                mov word ptr [ebp-10], dx
:00421EAF 668B45E8                mov ax, word ptr [ebp-18]
:00421EB3 66050100                add ax, 0001
:00421EB7 668945E8                mov word ptr [ebp-18], ax
:00421EBB E94FFFFFFF              jmp 00421E0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421E27(C)
|
:00421EC0 8BE5                    mov esp, ebp
:00421EC2 5D                      pop ebp
:00421EC3 C3                      ret



* Referenced by a CALL at Address:
|:0042228A   
|
:00421EC4 55                      push ebp
:00421EC5 8BEC                    mov ebp, esp
:00421EC7 83EC24                  sub esp, 00000024
:00421ECA 56                      push esi
:00421ECB 66C745EC0000            mov [ebp-14], 0000
:00421ED1 EB0C                    jmp 00421EDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F67(U)
|
:00421ED3 668B45EC                mov ax, word ptr [ebp-14]
:00421ED7 66050100                add ax, 0001
:00421EDB 668945EC                mov word ptr [ebp-14], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421ED1(U)
|
:00421EDF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00421EE2 81E1FFFF0000            and ecx, 0000FFFF
:00421EE8 33D2                    xor edx, edx
:00421EEA 668B157C5A4800          mov dx, word ptr [00485A7C]
:00421EF1 3BCA                    cmp ecx, edx
:00421EF3 7D77                    jge 00421F6C
:00421EF5 8B45EC                  mov eax, dword ptr [ebp-14]
:00421EF8 25FFFF0000              and eax, 0000FFFF
:00421EFD 8B0C8558C94800          mov ecx, dword ptr [4*eax+0048C958]
:00421F04 894DF4                  mov dword ptr [ebp-0C], ecx
:00421F07 66C745E04000            mov [ebp-20], 0040
:00421F0D 8B45E0                  mov eax, dword ptr [ebp-20]
:00421F10 25FFFF0000              and eax, 0000FFFF
:00421F15 99                      cdq
:00421F16 83E203                  and edx, 00000003
:00421F19 03C2                    add eax, edx
:00421F1B C1F802                  sar eax, 02
:00421F1E 668945F0                mov word ptr [ebp-10], ax
:00421F22 8B45E0                  mov eax, dword ptr [ebp-20]
:00421F25 25FFFF0000              and eax, 0000FFFF
:00421F2A 99                      cdq
:00421F2B 33C2                    xor eax, edx
:00421F2D 2BC2                    sub eax, edx
:00421F2F 83E003                  and eax, 00000003
:00421F32 33C2                    xor eax, edx
:00421F34 2BC2                    sub eax, edx
:00421F36 85C0                    test eax, eax
:00421F38 740C                    je 00421F46
:00421F3A 668B55F0                mov dx, word ptr [ebp-10]
:00421F3E 6683C201                add dx, 0001
:00421F42 668955F0                mov word ptr [ebp-10], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F38(C)
|
:00421F46 8B75F0                  mov esi, dword ptr [ebp-10]
:00421F49 81E6FFFF0000            and esi, 0000FFFF
:00421F4F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421F52 E8B9320000              call 00425210
:00421F57 25FFFF0000              and eax, 0000FFFF
:00421F5C 03F0                    add esi, eax
:00421F5E 56                      push esi
:00421F5F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421F62 E8C9310000              call 00425130
:00421F67 E967FFFFFF              jmp 00421ED3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421EF3(C)
|
:00421F6C 66C745EC0000            mov [ebp-14], 0000
:00421F72 EB0C                    jmp 00421F80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004220FA(U)
|
:00421F74 668B45EC                mov ax, word ptr [ebp-14]
:00421F78 66050100                add ax, 0001
:00421F7C 668945EC                mov word ptr [ebp-14], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F72(U)
|
:00421F80 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00421F83 81E1FFFF0000            and ecx, 0000FFFF
:00421F89 33D2                    xor edx, edx
:00421F8B 668B157C5A4800          mov dx, word ptr [00485A7C]
:00421F92 3BCA                    cmp ecx, edx
:00421F94 0F8D65010000            jnl 004220FF
:00421F9A 8B45EC                  mov eax, dword ptr [ebp-14]
:00421F9D 25FFFF0000              and eax, 0000FFFF
:00421FA2 8B0C8558C94800          mov ecx, dword ptr [4*eax+0048C958]
:00421FA9 894DF4                  mov dword ptr [ebp-0C], ecx
:00421FAC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421FAF E81C320000              call 004251D0
:00421FB4 668BF0                  mov si, ax
:00421FB7 81E6FFFF0000            and esi, 0000FFFF
:00421FBD 6BF664                  imul esi, 00000064
:00421FC0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421FC3 E8C8310000              call 00425190
:00421FC8 25FFFF0000              and eax, 0000FFFF
:00421FCD 03F0                    add esi, eax
:00421FCF 668B1475885A4800        mov dx, word ptr [2*esi+00485A88]
:00421FD7 668955FC                mov word ptr [ebp-04], dx
:00421FDB 8B45EC                  mov eax, dword ptr [ebp-14]
:00421FDE 25FFFF0000              and eax, 0000FFFF
:00421FE3 83C001                  add eax, 00000001
:00421FE6 668945E8                mov word ptr [ebp-18], ax
:00421FEA EB0C                    jmp 00421FF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004220F5(U)
|
:00421FEC 668B4DE8                mov cx, word ptr [ebp-18]
:00421FF0 6683C101                add cx, 0001
:00421FF4 66894DE8                mov word ptr [ebp-18], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421FEA(U)
|
:00421FF8 8B55E8                  mov edx, dword ptr [ebp-18]
:00421FFB 81E2FFFF0000            and edx, 0000FFFF
:00422001 33C0                    xor eax, eax
:00422003 66A17C5A4800            mov ax, word ptr [00485A7C]
:00422009 3BD0                    cmp edx, eax
:0042200B 0F8DE9000000            jnl 004220FA
:00422011 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00422014 81E1FFFF0000            and ecx, 0000FFFF
:0042201A 8B148D58C94800          mov edx, dword ptr [4*ecx+0048C958]
:00422021 8955DC                  mov dword ptr [ebp-24], edx
:00422024 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00422027 E8A4310000              call 004251D0
:0042202C 668BF0                  mov si, ax
:0042202F 81E6FFFF0000            and esi, 0000FFFF
:00422035 6BF664                  imul esi, 00000064
:00422038 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042203B E850310000              call 00425190
:00422040 25FFFF0000              and eax, 0000FFFF
:00422045 03F0                    add esi, eax
:00422047 668B0475885A4800        mov ax, word ptr [2*esi+00485A88]
:0042204F 668945E4                mov word ptr [ebp-1C], ax
:00422053 66C745F80000            mov [ebp-08], 0000
:00422059 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042205C 81E1FFFF0000            and ecx, 0000FFFF
:00422062 8B55E4                  mov edx, dword ptr [ebp-1C]
:00422065 81E2FFFF0000            and edx, 0000FFFF
:0042206B 3BCA                    cmp ecx, edx
:0042206D 7E08                    jle 00422077
:0042206F 66C745F80100            mov [ebp-08], 0001
:00422075 EB3D                    jmp 004220B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042206D(C)
|
:00422077 8B45FC                  mov eax, dword ptr [ebp-04]
:0042207A 25FFFF0000              and eax, 0000FFFF
:0042207F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00422082 81E1FFFF0000            and ecx, 0000FFFF
:00422088 3BC1                    cmp eax, ecx
:0042208A 7528                    jne 004220B4
:0042208C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042208F E8BC300000              call 00425150
:00422094 668BF0                  mov si, ax
:00422097 81E6FFFF0000            and esi, 0000FFFF
:0042209D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004220A0 E8AB300000              call 00425150
:004220A5 25FFFF0000              and eax, 0000FFFF
:004220AA 3BF0                    cmp esi, eax
:004220AC 7E06                    jle 004220B4
:004220AE 66C745F80100            mov [ebp-08], 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422075(U), :0042208A(C), :004220AC(C)
|
:004220B4 8B55F8                  mov edx, dword ptr [ebp-08]
:004220B7 81E2FFFF0000            and edx, 0000FFFF
:004220BD 83FA01                  cmp edx, 00000001
:004220C0 7533                    jne 004220F5
:004220C2 668B45E4                mov ax, word ptr [ebp-1C]
:004220C6 668945FC                mov word ptr [ebp-04], ax
:004220CA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004220CD 81E1FFFF0000            and ecx, 0000FFFF
:004220D3 8B55DC                  mov edx, dword ptr [ebp-24]
:004220D6 89148D58C94800          mov dword ptr [4*ecx+0048C958], edx
:004220DD 8B45E8                  mov eax, dword ptr [ebp-18]
:004220E0 25FFFF0000              and eax, 0000FFFF
:004220E5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004220E8 890C8558C94800          mov dword ptr [4*eax+0048C958], ecx
:004220EF 8B55DC                  mov edx, dword ptr [ebp-24]
:004220F2 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004220C0(C)
|
:004220F5 E9F2FEFFFF              jmp 00421FEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042200B(C)
|
:004220FA E975FEFFFF              jmp 00421F74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F94(C)
|
:004220FF 5E                      pop esi
:00422100 8BE5                    mov esp, ebp
:00422102 5D                      pop ebp
:00422103 C3                      ret



* Referenced by a CALL at Address:
|:00422285   
|
:00422104 55                      push ebp
:00422105 8BEC                    mov ebp, esp
:00422107 83EC0C                  sub esp, 0000000C
:0042210A 66C7057C5A48000000      mov word ptr [00485A7C], 0000
:00422113 C745FCF8A84800          mov [ebp-04], 0048A8F8
:0042211A 66C745F80000            mov [ebp-08], 0000
:00422120 EB15                    jmp 00422137

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042218B(U)
|
:00422122 668B45F8                mov ax, word ptr [ebp-08]
:00422126 66050100                add ax, 0001
:0042212A 668945F8                mov word ptr [ebp-08], ax
:0042212E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422131 83C140                  add ecx, 00000040
:00422134 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422120(U)
|
:00422137 8B55F8                  mov edx, dword ptr [ebp-08]
:0042213A 81E2FFFF0000            and edx, 0000FFFF
:00422140 81FA80000000            cmp edx, 00000080
:00422146 7D45                    jge 0042218D
:00422148 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042214B E8A0D2FEFF              call 0040F3F0
:00422150 668945F4                mov word ptr [ebp-0C], ax
:00422154 8B45F4                  mov eax, dword ptr [ebp-0C]
:00422157 25FFFF0000              and eax, 0000FFFF
:0042215C 2501800000              and eax, 00008001
:00422161 3D01800000              cmp eax, 00008001
:00422166 7523                    jne 0042218B
:00422168 33C9                    xor ecx, ecx
:0042216A 668B0D7C5A4800          mov cx, word ptr [00485A7C]
:00422171 8B55FC                  mov edx, dword ptr [ebp-04]
:00422174 89148D58C94800          mov dword ptr [4*ecx+0048C958], edx
:0042217B 66A17C5A4800            mov ax, word ptr [00485A7C]
:00422181 66050100                add ax, 0001
:00422185 66A37C5A4800            mov word ptr [00485A7C], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422166(C)
|
:0042218B EB95                    jmp 00422122

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422146(C)
|
:0042218D 8BE5                    mov esp, ebp
:0042218F 5D                      pop ebp
:00422190 C3                      ret



* Referenced by a CALL at Addresses:
|:004221C7   , :0042422F   
|
:00422191 55                      push ebp
:00422192 8BEC                    mov ebp, esp
:00422194 51                      push ecx
:00422195 8B4508                  mov eax, dword ptr [ebp+08]
:00422198 8A08                    mov cl, byte ptr [eax]
:0042219A 884DFC                  mov byte ptr [ebp-04], cl
:0042219D 8B55FC                  mov edx, dword ptr [ebp-04]
:004221A0 81E2FF000000            and edx, 000000FF
:004221A6 660FB68218794700        movzx ax, byte ptr [edx+00477918]
:004221AE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004221B1 668901                  mov word ptr [ecx], ax
:004221B4 8A45FC                  mov al, byte ptr [ebp-04]
:004221B7 8BE5                    mov esp, ebp
:004221B9 5D                      pop ebp
:004221BA C3                      ret



* Referenced by a CALL at Address:
|:004242CF   
|
:004221BB 55                      push ebp
:004221BC 8BEC                    mov ebp, esp
:004221BE 51                      push ecx
:004221BF 8D45FC                  lea eax, dword ptr [ebp-04]
:004221C2 50                      push eax
:004221C3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004221C6 51                      push ecx
:004221C7 E8C5FFFFFF              call 00422191
:004221CC 83C408                  add esp, 00000008
:004221CF 8B55FC                  mov edx, dword ptr [ebp-04]
:004221D2 81E2FFFF0000            and edx, 0000FFFF
:004221D8 8B4508                  mov eax, dword ptr [ebp+08]
:004221DB 03C2                    add eax, edx
:004221DD 8BE5                    mov esp, ebp
:004221DF 5D                      pop ebp
:004221E0 C3                      ret


:004221E1 55                      push ebp
:004221E2 8BEC                    mov ebp, esp
:004221E4 51                      push ecx
:004221E5 8B450C                  mov eax, dword ptr [ebp+0C]
:004221E8 25FFFF0000              and eax, 0000FFFF
:004221ED 85C0                    test eax, eax
:004221EF 7512                    jne 00422203
:004221F1 8B4508                  mov eax, dword ptr [ebp+08]
:004221F4 33D2                    xor edx, edx
:004221F6 B910270000              mov ecx, 00002710
:004221FB F7F1                    div ecx
:004221FD 668945FC                mov word ptr [ebp-04], ax
:00422201 EB10                    jmp 00422213

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004221EF(C)
|
:00422203 8B4508                  mov eax, dword ptr [ebp+08]
:00422206 33D2                    xor edx, edx
:00422208 B910270000              mov ecx, 00002710
:0042220D F7F1                    div ecx
:0042220F 668955FC                mov word ptr [ebp-04], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422201(U)
|
:00422213 668B45FC                mov ax, word ptr [ebp-04]
:00422217 8BE5                    mov esp, ebp
:00422219 5D                      pop ebp
:0042221A C3                      ret



* Referenced by a CALL at Addresses:
|:004223EF   , :00424B2F   , :0045A994   
|
:0042221B 55                      push ebp
:0042221C 8BEC                    mov ebp, esp
:0042221E 83EC0C                  sub esp, 0000000C
:00422221 C745FC58CB4800          mov [ebp-04], 0048CB58
:00422228 66C745F4A00F            mov [ebp-0C], 0FA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422279(C)
|
:0042222E 8B45FC                  mov eax, dword ptr [ebp-04]
:00422231 668B08                  mov cx, word ptr [eax]
:00422234 66894DF8                mov word ptr [ebp-08], cx
:00422238 668B55F8                mov dx, word ptr [ebp-08]
:0042223C 6683E202                and dx, 0002
:00422240 668955F8                mov word ptr [ebp-08], dx
:00422244 668B45F8                mov ax, word ptr [ebp-08]
:00422248 66D1E8                  shr ax, 1
:0042224B 668945F8                mov word ptr [ebp-08], ax
:0042224F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422252 668B55F8                mov dx, word ptr [ebp-08]
:00422256 668911                  mov word ptr [ecx], dx
:00422259 8B45FC                  mov eax, dword ptr [ebp-04]
:0042225C 83C002                  add eax, 00000002
:0042225F 8945FC                  mov dword ptr [ebp-04], eax
:00422262 668B4DF4                mov cx, word ptr [ebp-0C]
:00422266 6683E901                sub cx, 0001
:0042226A 66894DF4                mov word ptr [ebp-0C], cx
:0042226E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00422271 81E2FFFF0000            and edx, 0000FFFF
:00422277 85D2                    test edx, edx
:00422279 75B3                    jne 0042222E
:0042227B 8BE5                    mov esp, ebp
:0042227D 5D                      pop ebp
:0042227E C3                      ret



* Referenced by a CALL at Addresses:
|:00422433   , :00424B39   , :0045A99E   
|
:0042227F 55                      push ebp
:00422280 8BEC                    mov ebp, esp
:00422282 83EC20                  sub esp, 00000020
:00422285 E87AFEFFFF              call 00422104
:0042228A E835FCFFFF              call 00421EC4
:0042228F 68B8010000              push 000001B8
:00422294 6880020000              push 00000280
:00422299 6A28                    push 00000028
:0042229B 6A00                    push 00000000
:0042229D E8FE8B0400              call 0046AEA0
:004222A2 83C410                  add esp, 00000010
:004222A5 A1ACA84800              mov eax, dword ptr [0048A8AC]
:004222AA 8945F8                  mov dword ptr [ebp-08], eax
:004222AD 668B0DF4A84800          mov cx, word ptr [0048A8F4]
:004222B4 66894DF0                mov word ptr [ebp-10], cx
:004222B8 66C745EC2800            mov [ebp-14], 0028
:004222BE C745FC58CB4800          mov [ebp-04], 0048CB58
:004222C5 6A00                    push 00000000
:004222C7 E85B840400              call 0046A727
:004222CC 83C404                  add esp, 00000004
:004222CF 6A00                    push 00000000
:004222D1 6A00                    push 00000000
:004222D3 6A00                    push 00000000
:004222D5 E8368B0400              call 0046AE10
:004222DA 83C40C                  add esp, 0000000C
:004222DD 66C745E80000            mov [ebp-18], 0000
:004222E3 EB0C                    jmp 004222F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004223C5(U)
|
:004222E5 668B55E8                mov dx, word ptr [ebp-18]
:004222E9 6683C201                add dx, 0001
:004222ED 668955E8                mov word ptr [ebp-18], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004222E3(U)
|
:004222F1 8B45E8                  mov eax, dword ptr [ebp-18]
:004222F4 25FFFF0000              and eax, 0000FFFF
:004222F9 83F832                  cmp eax, 00000032
:004222FC 0F8DC8000000            jnl 004223CA
:00422302 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00422305 894DF4                  mov dword ptr [ebp-0C], ecx
:00422308 66C745E40000            mov [ebp-1C], 0000
:0042230E EB21                    jmp 00422331

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422397(U)
|
:00422310 668B55F0                mov dx, word ptr [ebp-10]
:00422314 6683C208                add dx, 0008
:00422318 668955F0                mov word ptr [ebp-10], dx
:0042231C 668B45E4                mov ax, word ptr [ebp-1C]
:00422320 66050100                add ax, 0001
:00422324 668945E4                mov word ptr [ebp-1C], ax
:00422328 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042232B 83C102                  add ecx, 00000002
:0042232E 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042230E(U)
|
:00422331 8B55E4                  mov edx, dword ptr [ebp-1C]
:00422334 81E2FFFF0000            and edx, 0000FFFF
:0042233A 83FA50                  cmp edx, 00000050
:0042233D 7D5D                    jge 0042239C
:0042233F 8B45FC                  mov eax, dword ptr [ebp-04]
:00422342 668B08                  mov cx, word ptr [eax]
:00422345 66894DE0                mov word ptr [ebp-20], cx
:00422349 8B55FC                  mov edx, dword ptr [ebp-04]
:0042234C 83C202                  add edx, 00000002
:0042234F 8955FC                  mov dword ptr [ebp-04], edx
:00422352 8B45E0                  mov eax, dword ptr [ebp-20]
:00422355 25FFFF0000              and eax, 0000FFFF
:0042235A 83E003                  and eax, 00000003
:0042235D 85C0                    test eax, eax
:0042235F 7436                    je 00422397
:00422361 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422364 33D2                    xor edx, edx
:00422366 668B11                  mov dx, word ptr [ecx]
:00422369 C1E206                  shl edx, 06
:0042236C 52                      push edx
:0042236D B920414A00              mov ecx, 004A4120
:00422372 E82712FFFF              call 0041359E
:00422377 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:00422378 6A08                    push 00000008

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042237A 6A08                    push 00000008
:0042237C 8B45EC                  mov eax, dword ptr [ebp-14]
:0042237F 25FFFF0000              and eax, 0000FFFF
:00422384 50                      push eax
:00422385 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422388 81E1FFFF0000            and ecx, 0000FFFF
:0042238E 51                      push ecx
:0042238F E853980400              call 0046BBE7
:00422394 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042235F(C)
|
:00422397 E974FFFFFF              jmp 00422310

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042233D(C)
|
:0042239C 668B15F4A84800          mov dx, word ptr [0048A8F4]
:004223A3 668955F0                mov word ptr [ebp-10], dx
:004223A7 668B45EC                mov ax, word ptr [ebp-14]
:004223AB 66050800                add ax, 0008
:004223AF 668945EC                mov word ptr [ebp-14], ax
:004223B3 33C9                    xor ecx, ecx
:004223B5 668B0DB8A84800          mov cx, word ptr [0048A8B8]
:004223BC 8B55F8                  mov edx, dword ptr [ebp-08]
:004223BF 8D044A                  lea eax, dword ptr [edx+2*ecx]
:004223C2 8945F8                  mov dword ptr [ebp-08], eax
:004223C5 E91BFFFFFF              jmp 004222E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004222FC(C)
|
:004223CA E852F9FFFF              call 00421D21
:004223CF 68B8010000              push 000001B8
:004223D4 6880020000              push 00000280
:004223D9 6A28                    push 00000028
:004223DB 6A00                    push 00000000
:004223DD E8BE8A0400              call 0046AEA0
:004223E2 83C410                  add esp, 00000010
:004223E5 8BE5                    mov esp, ebp
:004223E7 5D                      pop ebp
:004223E8 C3                      ret



* Referenced by a CALL at Address:
|:00422444   
|
:004223E9 55                      push ebp
:004223EA 8BEC                    mov ebp, esp
:004223EC 83EC08                  sub esp, 00000008
:004223EF E827FEFFFF              call 0042221B
:004223F4 C745FC58CB4800          mov [ebp-04], 0048CB58
:004223FB 66C745F80000            mov [ebp-08], 0000
:00422401 EB15                    jmp 00422418

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422431(U)
|
:00422403 668B45F8                mov ax, word ptr [ebp-08]
:00422407 66050100                add ax, 0001
:0042240B 668945F8                mov word ptr [ebp-08], ax
:0042240F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422412 83C102                  add ecx, 00000002
:00422415 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422401(U)
|
:00422418 8B55F8                  mov edx, dword ptr [ebp-08]
:0042241B 81E2FFFF0000            and edx, 0000FFFF
:00422421 81FAA00F0000            cmp edx, 00000FA0
:00422427 7D0A                    jge 00422433
:00422429 8B45FC                  mov eax, dword ptr [ebp-04]
:0042242C 66C7000900              mov word ptr [eax], 0009
:00422431 EBD0                    jmp 00422403

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422427(C)
|
:00422433 E847FEFFFF              call 0042227F
:00422438 8BE5                    mov esp, ebp
:0042243A 5D                      pop ebp
:0042243B C3                      ret



* Referenced by a CALL at Addresses:
|:00422EC9   , :00422ED5   , :00423D8E   , :00424C30   , :00424C69   
|:00424C97   , :00424DAD   
|
:0042243C 55                      push ebp
:0042243D 8BEC                    mov ebp, esp
:0042243F E8EE09FFFF              call 00412E32
:00422444 E8A0FFFFFF              call 004223E9
:00422449 E8FF09FFFF              call 00412E4D
:0042244E 5D                      pop ebp
:0042244F C3                      ret



* Referenced by a CALL at Addresses:
|:004225AD   , :00422AB8   , :004237E4   
|
:00422450 55                      push ebp
:00422451 8BEC                    mov ebp, esp
:00422453 83EC10                  sub esp, 00000010
:00422456 56                      push esi
:00422457 668B4510                mov ax, word ptr [ebp+10]
:0042245B 662D0100                sub ax, 0001
:0042245F 66894510                mov word ptr [ebp+10], ax
:00422463 668B4D14                mov cx, word ptr [ebp+14]
:00422467 6683E901                sub cx, 0001
:0042246B 66894D14                mov word ptr [ebp+14], cx
:0042246F 8B550C                  mov edx, dword ptr [ebp+0C]
:00422472 0FBF02                  movsx eax, word ptr [edx]
:00422475 8B4D18                  mov ecx, dword ptr [ebp+18]
:00422478 81E1FFFF0000            and ecx, 0000FFFF
:0042247E 0FBF144DE8774700        movsx edx, word ptr [2*ecx+004777E8]
:00422486 03C2                    add eax, edx
:00422488 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042248B 81E1FFFF0000            and ecx, 0000FFFF
:00422491 2BC1                    sub eax, ecx
:00422493 668945FC                mov word ptr [ebp-04], ax
:00422497 8B5508                  mov edx, dword ptr [ebp+08]
:0042249A 0FBF02                  movsx eax, word ptr [edx]
:0042249D 8B4D18                  mov ecx, dword ptr [ebp+18]
:004224A0 81E1FFFF0000            and ecx, 0000FFFF
:004224A6 0FBF144DF8774700        movsx edx, word ptr [2*ecx+004777F8]
:004224AE 03C2                    add eax, edx
:004224B0 668945F0                mov word ptr [ebp-10], ax
:004224B4 0FBF45F0                movsx eax, word ptr [ebp-10]
:004224B8 8B4D10                  mov ecx, dword ptr [ebp+10]
:004224BB 81E1FFFF0000            and ecx, 0000FFFF
:004224C1 03C1                    add eax, ecx
:004224C3 668945F8                mov word ptr [ebp-08], ax
:004224C7 0FBF55FC                movsx edx, word ptr [ebp-04]
:004224CB 8B4514                  mov eax, dword ptr [ebp+14]
:004224CE 25FFFF0000              and eax, 0000FFFF
:004224D3 2BD0                    sub edx, eax
:004224D5 668955F4                mov word ptr [ebp-0C], dx
:004224D9 0FBF4DF0                movsx ecx, word ptr [ebp-10]
:004224DD 85C9                    test ecx, ecx
:004224DF 0F8CA7000000            jl 0042258C
:004224E5 0FBF75F0                movsx esi, word ptr [ebp-10]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004224E9 6A02                    push 00000002
:004224EB E861EBFFFF              call 00421051
:004224F0 83C404                  add esp, 00000004
:004224F3 25FFFF0000              and eax, 0000FFFF
:004224F8 3BF0                    cmp esi, eax
:004224FA 0F8D8C000000            jnl 0042258C
:00422500 0FBF55F8                movsx edx, word ptr [ebp-08]
:00422504 85D2                    test edx, edx
:00422506 0F8C80000000            jl 0042258C
:0042250C 0FBF75F8                movsx esi, word ptr [ebp-08]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00422510 6A02                    push 00000002
:00422512 E83AEBFFFF              call 00421051
:00422517 83C404                  add esp, 00000004
:0042251A 25FFFF0000              and eax, 0000FFFF
:0042251F 3BF0                    cmp esi, eax
:00422521 7D69                    jge 0042258C
:00422523 0FBF45FC                movsx eax, word ptr [ebp-04]
:00422527 85C0                    test eax, eax
:00422529 7C61                    jl 0042258C
:0042252B 0FBF75FC                movsx esi, word ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042252F 6A04                    push 00000004
:00422531 E81BEBFFFF              call 00421051
:00422536 83C404                  add esp, 00000004
:00422539 25FFFF0000              and eax, 0000FFFF
:0042253E 3BF0                    cmp esi, eax
:00422540 7D4A                    jge 0042258C
:00422542 0FBF4DF4                movsx ecx, word ptr [ebp-0C]
:00422546 85C9                    test ecx, ecx
:00422548 7C42                    jl 0042258C
:0042254A 0FBF75F4                movsx esi, word ptr [ebp-0C]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042254E 6A04                    push 00000004
:00422550 E8FCEAFFFF              call 00421051
:00422555 83C404                  add esp, 00000004
:00422558 25FFFF0000              and eax, 0000FFFF
:0042255D 3BF0                    cmp esi, eax
:0042255F 7D2B                    jge 0042258C
:00422561 8B5508                  mov edx, dword ptr [ebp+08]
:00422564 668B45F0                mov ax, word ptr [ebp-10]
:00422568 668902                  mov word ptr [edx], ax
:0042256B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042256E 81E1FFFF0000            and ecx, 0000FFFF
:00422574 8B5514                  mov edx, dword ptr [ebp+14]
:00422577 81E2FFFF0000            and edx, 0000FFFF
:0042257D 03CA                    add ecx, edx
:0042257F 8B450C                  mov eax, dword ptr [ebp+0C]
:00422582 668908                  mov word ptr [eax], cx
:00422585 B801000000              mov eax, 00000001
:0042258A EB02                    jmp 0042258E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004224DF(C), :004224FA(C), :00422506(C), :00422521(C), :00422529(C)
|:00422540(C), :00422548(C), :0042255F(C)
|
:0042258C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042258A(U)
|
:0042258E 5E                      pop esi
:0042258F 8BE5                    mov esp, ebp
:00422591 5D                      pop ebp
:00422592 C3                      ret



* Referenced by a CALL at Addresses:
|:004226CF   , :004231F1   , :00423391   , :004244DE   
|
:00422593 55                      push ebp
:00422594 8BEC                    mov ebp, esp
:00422596 668B4518                mov ax, word ptr [ebp+18]
:0042259A 50                      push eax
:0042259B 668B4D14                mov cx, word ptr [ebp+14]
:0042259F 51                      push ecx
:004225A0 668B5510                mov dx, word ptr [ebp+10]
:004225A4 52                      push edx
:004225A5 8B450C                  mov eax, dword ptr [ebp+0C]
:004225A8 50                      push eax
:004225A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004225AC 51                      push ecx
:004225AD E89EFEFFFF              call 00422450
:004225B2 83C414                  add esp, 00000014
:004225B5 85C0                    test eax, eax
:004225B7 7506                    jne 004225BF
:004225B9 660DFFFF                or ax, FFFF
:004225BD EB36                    jmp 004225F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004225B7(C)
|
:004225BF 6A01                    push 00000001
:004225C1 668B5514                mov dx, word ptr [ebp+14]
:004225C5 52                      push edx
:004225C6 668B4510                mov ax, word ptr [ebp+10]
:004225CA 50                      push eax
:004225CB 6A00                    push 00000000
:004225CD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004225D0 668B11                  mov dx, word ptr [ecx]
:004225D3 52                      push edx
:004225D4 8B4508                  mov eax, dword ptr [ebp+08]
:004225D7 668B08                  mov cx, word ptr [eax]
:004225DA 51                      push ecx
:004225DB E85FF0FFFF              call 0042163F
:004225E0 83C418                  add esp, 00000018
:004225E3 25FFFF0000              and eax, 0000FFFF
:004225E8 85C0                    test eax, eax
:004225EA 7406                    je 004225F2
:004225EC 660DFFFF                or ax, FFFF
:004225F0 EB03                    jmp 004225F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004225EA(C)
|
:004225F2 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004225BD(U), :004225F0(U)
|
:004225F5 5D                      pop ebp
:004225F6 C3                      ret



* Referenced by a CALL at Address:
|:004229FA   
|
:004225F7 55                      push ebp
:004225F8 8BEC                    mov ebp, esp
:004225FA 83EC28                  sub esp, 00000028
:004225FD 6A00                    push 00000000
:004225FF B910414A00              mov ecx, 004A4110
:00422604 E8950FFFFF              call 0041359E
:00422609 8945EC                  mov dword ptr [ebp-14], eax
:0042260C 8B45EC                  mov eax, dword ptr [ebp-14]
:0042260F 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00422612 6A02                    push 00000002
:00422614 E838EAFFFF              call 00421051
:00422619 83C404                  add esp, 00000004
:0042261C 668945D8                mov word ptr [ebp-28], ax
:00422620 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00422623 81E1FFFF0000            and ecx, 0000FFFF
:00422629 8B55D8                  mov edx, dword ptr [ebp-28]
:0042262C 81E2FFFF0000            and edx, 0000FFFF
:00422632 0FAFCA                  imul ecx, edx
:00422635 8B45F4                  mov eax, dword ptr [ebp-0C]
:00422638 8D0C48                  lea ecx, dword ptr [eax+2*ecx]
:0042263B 8B5508                  mov edx, dword ptr [ebp+08]
:0042263E 81E2FFFF0000            and edx, 0000FFFF
:00422644 668B0451                mov ax, word ptr [ecx+2*edx]
:00422648 668945DC                mov word ptr [ebp-24], ax
:0042264C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042264F 81E1FFFF0000            and ecx, 0000FFFF
:00422655 85C9                    test ecx, ecx
:00422657 7509                    jne 00422662
:00422659 660DFFFF                or ax, FFFF
:0042265D E9DB000000              jmp 0042273D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422657(C)
|
:00422662 66C745F8FFFF            mov [ebp-08], FFFF
:00422668 66C745E40000            mov [ebp-1C], 0000
:0042266E EB0C                    jmp 0042267C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422734(U)
|
:00422670 668B55E4                mov dx, word ptr [ebp-1C]
:00422674 6683C201                add dx, 0001
:00422678 668955E4                mov word ptr [ebp-1C], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042266E(U)
|
:0042267C 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042267F 25FFFF0000              and eax, 0000FFFF
:00422684 83F804                  cmp eax, 00000004
:00422687 0F8DAC000000            jnl 00422739
:0042268D 33C9                    xor ecx, ecx
:0042268F 668B0D585A4800          mov cx, word ptr [00485A58]
:00422696 8B55E4                  mov edx, dword ptr [ebp-1C]
:00422699 81E2FFFF0000            and edx, 0000FFFF
:0042269F 03CA                    add ecx, edx
:004226A1 83E103                  and ecx, 00000003
:004226A4 66894DE0                mov word ptr [ebp-20], cx
:004226A8 668B4508                mov ax, word ptr [ebp+08]
:004226AC 668945F0                mov word ptr [ebp-10], ax
:004226B0 668B4D0C                mov cx, word ptr [ebp+0C]
:004226B4 66894DE8                mov word ptr [ebp-18], cx
:004226B8 668B55E0                mov dx, word ptr [ebp-20]
:004226BC 52                      push edx
:004226BD 668B4514                mov ax, word ptr [ebp+14]
:004226C1 50                      push eax
:004226C2 668B4D10                mov cx, word ptr [ebp+10]
:004226C6 51                      push ecx
:004226C7 8D55E8                  lea edx, dword ptr [ebp-18]
:004226CA 52                      push edx
:004226CB 8D45F0                  lea eax, dword ptr [ebp-10]
:004226CE 50                      push eax
:004226CF E8BFFEFFFF              call 00422593
:004226D4 83C414                  add esp, 00000014
:004226D7 25FFFF0000              and eax, 0000FFFF
:004226DC 3DFFFF0000              cmp eax, 0000FFFF
:004226E1 7451                    je 00422734
:004226E3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004226E6 81E1FFFF0000            and ecx, 0000FFFF
:004226EC 8B55D8                  mov edx, dword ptr [ebp-28]
:004226EF 81E2FFFF0000            and edx, 0000FFFF
:004226F5 0FAFCA                  imul ecx, edx
:004226F8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004226FB 8D0C48                  lea ecx, dword ptr [eax+2*ecx]
:004226FE 8B55F0                  mov edx, dword ptr [ebp-10]
:00422701 81E2FFFF0000            and edx, 0000FFFF
:00422707 8D0451                  lea eax, dword ptr [ecx+2*edx]
:0042270A 8945FC                  mov dword ptr [ebp-04], eax
:0042270D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00422710 81E1FFFF0000            and ecx, 0000FFFF
:00422716 8B55FC                  mov edx, dword ptr [ebp-04]
:00422719 33C0                    xor eax, eax
:0042271B 668B02                  mov ax, word ptr [edx]
:0042271E 3BC8                    cmp ecx, eax
:00422720 7E12                    jle 00422734
:00422722 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422725 668B11                  mov dx, word ptr [ecx]
:00422728 668955DC                mov word ptr [ebp-24], dx
:0042272C 668B45E0                mov ax, word ptr [ebp-20]
:00422730 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004226E1(C), :00422720(C)
|
:00422734 E937FFFFFF              jmp 00422670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422687(C)
|
:00422739 668B45F8                mov ax, word ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042265D(U)
|
:0042273D 8BE5                    mov esp, ebp
:0042273F 5D                      pop ebp
:00422740 C3                      ret


:00422741 55                      push ebp
:00422742 8BEC                    mov ebp, esp
:00422744 66B80100                mov ax, 0001
:00422748 5D                      pop ebp
:00422749 C3                      ret



* Referenced by a CALL at Address:
|:0042293F   
|
:0042274A 55                      push ebp
:0042274B 8BEC                    mov ebp, esp
:0042274D 83EC08                  sub esp, 00000008
:00422750 C745FC01000000          mov [ebp-04], 00000001
:00422757 C745F800000000          mov [ebp-08], 00000000
:0042275E EB11                    jmp 00422771

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422786(U)
|
:00422760 8B45F8                  mov eax, dword ptr [ebp-08]
:00422763 83C001                  add eax, 00000001
:00422766 8945F8                  mov dword ptr [ebp-08], eax
:00422769 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042276C D1E1                    shl ecx, 1
:0042276E 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042275E(U)
|
:00422771 837DF820                cmp dword ptr [ebp-08], 00000020
:00422775 7311                    jnb 00422788
:00422777 8B15785A4800            mov edx, dword ptr [00485A78]
:0042277D 2355FC                  and edx, dword ptr [ebp-04]
:00422780 85D2                    test edx, edx
:00422782 7502                    jne 00422786
:00422784 EB02                    jmp 00422788

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422782(C)
|
:00422786 EBD8                    jmp 00422760

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422775(C), :00422784(U)
|
:00422788 837DF820                cmp dword ptr [ebp-08], 00000020
:0042278C 7506                    jne 00422794
:0042278E 660DFFFF                or ax, FFFF
:00422792 EB1C                    jmp 004227B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042278C(C)
|
:00422794 B801000000              mov eax, 00000001
:00422799 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042279C D3E0                    shl eax, cl
:0042279E 8B0D785A4800            mov ecx, dword ptr [00485A78]
:004227A4 0BC8                    or ecx, eax
:004227A6 890D785A4800            mov dword ptr [00485A78], ecx
:004227AC 668B45F8                mov ax, word ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422792(U)
|
:004227B0 8BE5                    mov esp, ebp
:004227B2 5D                      pop ebp
:004227B3 C3                      ret



* Referenced by a CALL at Address:
|:00423BDE   
|
:004227B4 55                      push ebp
:004227B5 8BEC                    mov ebp, esp
:004227B7 8B4508                  mov eax, dword ptr [ebp+08]
:004227BA 25FFFF0000              and eax, 0000FFFF
:004227BF 83F820                  cmp eax, 00000020
:004227C2 7D1E                    jge 004227E2
:004227C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004227C7 81E1FFFF0000            and ecx, 0000FFFF
:004227CD BA01000000              mov edx, 00000001
:004227D2 D3E2                    shl edx, cl
:004227D4 F7D2                    not edx
:004227D6 A1785A4800              mov eax, dword ptr [00485A78]
:004227DB 23C2                    and eax, edx
:004227DD A3785A4800              mov dword ptr [00485A78], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004227C2(C)
|
:004227E2 5D                      pop ebp
:004227E3 C3                      ret



* Referenced by a CALL at Address:
|:004229D2   
|
:004227E4 55                      push ebp
:004227E5 8BEC                    mov ebp, esp
:004227E7 83EC08                  sub esp, 00000008
:004227EA 0FBF4510                movsx eax, word ptr [ebp+10]
:004227EE 0FBF4D08                movsx ecx, word ptr [ebp+08]
:004227F2 3BC1                    cmp eax, ecx
:004227F4 0F8E91000000            jle 0042288B
:004227FA 0FBF5514                movsx edx, word ptr [ebp+14]
:004227FE 0FBF450C                movsx eax, word ptr [ebp+0C]
:00422802 3BD0                    cmp edx, eax
:00422804 7E41                    jle 00422847
:00422806 0FBF4D10                movsx ecx, word ptr [ebp+10]
:0042280A 0FBF5508                movsx edx, word ptr [ebp+08]
:0042280E 2BCA                    sub ecx, edx
:00422810 66894DFC                mov word ptr [ebp-04], cx
:00422814 0FBF4514                movsx eax, word ptr [ebp+14]
:00422818 0FBF4D0C                movsx ecx, word ptr [ebp+0C]
:0042281C 2BC1                    sub eax, ecx
:0042281E 668945F8                mov word ptr [ebp-08], ax
:00422822 8B55FC                  mov edx, dword ptr [ebp-04]
:00422825 81E2FFFF0000            and edx, 0000FFFF
:0042282B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042282E 25FFFF0000              and eax, 0000FFFF
:00422833 3BD0                    cmp edx, eax
:00422835 7C08                    jl 0042283F
:00422837 66C745FC0100            mov [ebp-04], 0001
:0042283D EB06                    jmp 00422845

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422835(C)
|
:0042283F 66C745FC0200            mov [ebp-04], 0002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042283D(U)
|
:00422845 EB3F                    jmp 00422886

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422804(C)
|
:00422847 0FBF4D10                movsx ecx, word ptr [ebp+10]
:0042284B 0FBF5508                movsx edx, word ptr [ebp+08]
:0042284F 2BCA                    sub ecx, edx
:00422851 66894DFC                mov word ptr [ebp-04], cx
:00422855 0FBF450C                movsx eax, word ptr [ebp+0C]
:00422859 0FBF4D14                movsx ecx, word ptr [ebp+14]
:0042285D 2BC1                    sub eax, ecx
:0042285F 668945F8                mov word ptr [ebp-08], ax
:00422863 8B55FC                  mov edx, dword ptr [ebp-04]
:00422866 81E2FFFF0000            and edx, 0000FFFF
:0042286C 8B45F8                  mov eax, dword ptr [ebp-08]
:0042286F 25FFFF0000              and eax, 0000FFFF
:00422874 3BD0                    cmp edx, eax
:00422876 7C08                    jl 00422880
:00422878 66C745FC0100            mov [ebp-04], 0001
:0042287E EB06                    jmp 00422886

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422876(C)
|
:00422880 66C745FC0000            mov [ebp-04], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422845(U), :0042287E(U)
|
:00422886 E98E000000              jmp 00422919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004227F4(C)
|
:0042288B 0FBF4D14                movsx ecx, word ptr [ebp+14]
:0042288F 0FBF550C                movsx edx, word ptr [ebp+0C]
:00422893 3BCA                    cmp ecx, edx
:00422895 7E42                    jle 004228D9
:00422897 0FBF4508                movsx eax, word ptr [ebp+08]
:0042289B 0FBF4D10                movsx ecx, word ptr [ebp+10]
:0042289F 2BC1                    sub eax, ecx
:004228A1 668945FC                mov word ptr [ebp-04], ax
:004228A5 0FBF5514                movsx edx, word ptr [ebp+14]
:004228A9 0FBF450C                movsx eax, word ptr [ebp+0C]
:004228AD 2BD0                    sub edx, eax
:004228AF 668955F8                mov word ptr [ebp-08], dx
:004228B3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004228B6 81E1FFFF0000            and ecx, 0000FFFF
:004228BC 8B55F8                  mov edx, dword ptr [ebp-08]
:004228BF 81E2FFFF0000            and edx, 0000FFFF
:004228C5 3BCA                    cmp ecx, edx
:004228C7 7C08                    jl 004228D1
:004228C9 66C745FC0300            mov [ebp-04], 0003
:004228CF EB06                    jmp 004228D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004228C7(C)
|
:004228D1 66C745FC0200            mov [ebp-04], 0002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004228CF(U)
|
:004228D7 EB40                    jmp 00422919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422895(C)
|
:004228D9 0FBF4508                movsx eax, word ptr [ebp+08]
:004228DD 0FBF4D10                movsx ecx, word ptr [ebp+10]
:004228E1 2BC1                    sub eax, ecx
:004228E3 668945FC                mov word ptr [ebp-04], ax
:004228E7 0FBF550C                movsx edx, word ptr [ebp+0C]
:004228EB 0FBF4514                movsx eax, word ptr [ebp+14]
:004228EF 2BD0                    sub edx, eax
:004228F1 668955F8                mov word ptr [ebp-08], dx
:004228F5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004228F8 81E1FFFF0000            and ecx, 0000FFFF
:004228FE 8B55F8                  mov edx, dword ptr [ebp-08]
:00422901 81E2FFFF0000            and edx, 0000FFFF
:00422907 3BCA                    cmp ecx, edx
:00422909 7C08                    jl 00422913
:0042290B 66C745FC0300            mov [ebp-04], 0003
:00422911 EB06                    jmp 00422919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422909(C)
|
:00422913 66C745FC0000            mov [ebp-04], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422886(U), :004228D7(U), :00422911(U)
|
:00422919 668B45FC                mov ax, word ptr [ebp-04]
:0042291D 8BE5                    mov esp, ebp
:0042291F 5D                      pop ebp
:00422920 C3                      ret



* Referenced by a CALL at Address:
|:00423609   
|
:00422921 55                      push ebp
:00422922 8BEC                    mov ebp, esp
:00422924 83EC24                  sub esp, 00000024
:00422927 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042292A E861280000              call 00425190
:0042292F 668945F0                mov word ptr [ebp-10], ax
:00422933 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422936 E895280000              call 004251D0
:0042293B 668945EC                mov word ptr [ebp-14], ax
:0042293F E806FEFFFF              call 0042274A
:00422944 668945E0                mov word ptr [ebp-20], ax
:00422948 8B45E0                  mov eax, dword ptr [ebp-20]
:0042294B 25FFFF0000              and eax, 0000FFFF
:00422950 3DFFFF0000              cmp eax, 0000FFFF
:00422955 7509                    jne 00422960
:00422957 660DFFFF                or ax, FFFF
:0042295B E974010000              jmp 00422AD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422955(C)
|
:00422960 668B4DE0                mov cx, word ptr [ebp-20]
:00422964 51                      push ecx
:00422965 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422968 E8032A0000              call 00425370
:0042296D 8B55E0                  mov edx, dword ptr [ebp-20]
:00422970 81E2FFFF0000            and edx, 0000FFFF
:00422976 C1E20A                  shl edx, 0A
:00422979 668955F4                mov word ptr [ebp-0C], dx
:0042297D 668B45F4                mov ax, word ptr [ebp-0C]
:00422981 50                      push eax
:00422982 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422985 E8262A0000              call 004253B0
:0042298A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042298D 81E1FFFF0000            and ecx, 0000FFFF
:00422993 51                      push ecx
:00422994 B930DA4A00              mov ecx, 004ADA30
:00422999 E8000CFFFF              call 0041359E
:0042299E 8945FC                  mov dword ptr [ebp-04], eax
:004229A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004229A4 E807270000              call 004250B0
:004229A9 668945E8                mov word ptr [ebp-18], ax
:004229AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004229B0 E83B270000              call 004250F0
:004229B5 668945E4                mov word ptr [ebp-1C], ax
:004229B9 668B15F0A84800          mov dx, word ptr [0048A8F0]
:004229C0 52                      push edx
:004229C1 66A1ECA84800            mov ax, word ptr [0048A8EC]
:004229C7 50                      push eax
:004229C8 668B4DEC                mov cx, word ptr [ebp-14]
:004229CC 51                      push ecx
:004229CD 668B55F0                mov dx, word ptr [ebp-10]
:004229D1 52                      push edx
:004229D2 E80DFEFFFF              call 004227E4
:004229D7 83C410                  add esp, 00000010
:004229DA 66A3585A4800            mov word ptr [00485A58], ax
:004229E0 66C745F80000            mov [ebp-08], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422ACC(U)
|
:004229E6 668B45E4                mov ax, word ptr [ebp-1C]
:004229EA 50                      push eax
:004229EB 668B4DE8                mov cx, word ptr [ebp-18]
:004229EF 51                      push ecx
:004229F0 668B55EC                mov dx, word ptr [ebp-14]
:004229F4 52                      push edx
:004229F5 668B45F0                mov ax, word ptr [ebp-10]
:004229F9 50                      push eax
:004229FA E8F8FBFFFF              call 004225F7
:004229FF 83C410                  add esp, 00000010
:00422A02 668945DC                mov word ptr [ebp-24], ax
:00422A06 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00422A09 81E1FFFF0000            and ecx, 0000FFFF
:00422A0F 81F9FFFF0000            cmp ecx, 0000FFFF
:00422A15 756E                    jne 00422A85
:00422A17 8B550C                  mov edx, dword ptr [ebp+0C]
:00422A1A 81E2FFFF0000            and edx, 0000FFFF
:00422A20 81FAFFFF0000            cmp edx, 0000FFFF
:00422A26 741A                    je 00422A42
:00422A28 8B450C                  mov eax, dword ptr [ebp+0C]
:00422A2B 25FF000000              and eax, 000000FF
:00422A30 0C10                    or al, 10
:00422A32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422A35 8801                    mov byte ptr [ecx], al
:00422A37 8B55FC                  mov edx, dword ptr [ebp-04]
:00422A3A 83C201                  add edx, 00000001
:00422A3D 8955FC                  mov dword ptr [ebp-04], edx
:00422A40 EB3B                    jmp 00422A7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422A26(C)
|
:00422A42 8B4510                  mov eax, dword ptr [ebp+10]
:00422A45 25FFFF0000              and eax, 0000FFFF
:00422A4A 85C0                    test eax, eax
:00422A4C 742F                    je 00422A7D
:00422A4E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00422A51 81E1FFFF0000            and ecx, 0000FFFF
:00422A57 8B5510                  mov edx, dword ptr [ebp+10]
:00422A5A 81E2FFFF0000            and edx, 0000FFFF
:00422A60 3BCA                    cmp ecx, edx
:00422A62 7D08                    jge 00422A6C
:00422A64 668B45F8                mov ax, word ptr [ebp-08]
:00422A68 66894510                mov word ptr [ebp+10], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422A62(C)
|
:00422A6C 8B4D10                  mov ecx, dword ptr [ebp+10]
:00422A6F 81E1FFFF0000            and ecx, 0000FFFF
:00422A75 8B55FC                  mov edx, dword ptr [ebp-04]
:00422A78 2BD1                    sub edx, ecx
:00422A7A 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422A40(U), :00422A4C(C)
|
:00422A7D 8B45FC                  mov eax, dword ptr [ebp-04]
:00422A80 C600EF                  mov byte ptr [eax], EF
:00422A83 EB4C                    jmp 00422AD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422A15(C)
|
:00422A85 668B4DDC                mov cx, word ptr [ebp-24]
:00422A89 66890D585A4800          mov word ptr [00485A58], cx
:00422A90 8B55FC                  mov edx, dword ptr [ebp-04]
:00422A93 8A45DC                  mov al, byte ptr [ebp-24]
:00422A96 8802                    mov byte ptr [edx], al
:00422A98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422A9B 83C101                  add ecx, 00000001
:00422A9E 894DFC                  mov dword ptr [ebp-04], ecx
:00422AA1 668B55DC                mov dx, word ptr [ebp-24]
:00422AA5 52                      push edx
:00422AA6 668B45E4                mov ax, word ptr [ebp-1C]
:00422AAA 50                      push eax
:00422AAB 668B4DE8                mov cx, word ptr [ebp-18]
:00422AAF 51                      push ecx
:00422AB0 8D55EC                  lea edx, dword ptr [ebp-14]
:00422AB3 52                      push edx
:00422AB4 8D45F0                  lea eax, dword ptr [ebp-10]
:00422AB7 50                      push eax
:00422AB8 E893F9FFFF              call 00422450
:00422ABD 83C414                  add esp, 00000014
:00422AC0 668B4DF8                mov cx, word ptr [ebp-08]
:00422AC4 6683C101                add cx, 0001
:00422AC8 66894DF8                mov word ptr [ebp-08], cx
:00422ACC E915FFFFFF              jmp 004229E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422A83(U)
|
:00422AD1 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042295B(U)
|
:00422AD4 8BE5                    mov esp, ebp
:00422AD6 5D                      pop ebp
:00422AD7 C3                      ret



* Referenced by a CALL at Addresses:
|:00423B92   , :00423C87   , :00423F0E   
|
:00422AD8 55                      push ebp
:00422AD9 8BEC                    mov ebp, esp
:00422ADB 51                      push ecx
:00422ADC 33C0                    xor eax, eax
:00422ADE 66A1E8A84800            mov ax, word ptr [0048A8E8]
:00422AE4 3DFFFF0000              cmp eax, 0000FFFF
:00422AE9 7505                    jne 00422AF0
:00422AEB 6633C0                  xor ax, ax
:00422AEE EB3F                    jmp 00422B2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422AE9(C)
|
:00422AF0 E8E2E4FFFF              call 00420FD7
:00422AF5 8945FC                  mov dword ptr [ebp-04], eax
:00422AF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422AFB E8F0C8FEFF              call 0040F3F0
:00422B00 25FFFF0000              and eax, 0000FFFF
:00422B05 2500800000              and eax, 00008000
:00422B0A 85C0                    test eax, eax
:00422B0C 741D                    je 00422B2B
:00422B0E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422B11 E8FAC8FEFF              call 0040F410
:00422B16 25FFFF0000              and eax, 0000FFFF
:00422B1B 83F804                  cmp eax, 00000004
:00422B1E 7406                    je 00422B26
:00422B20 660DFFFF                or ax, FFFF
:00422B24 EB09                    jmp 00422B2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422B1E(C)
|
:00422B26 6633C0                  xor ax, ax
:00422B29 EB04                    jmp 00422B2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422B0C(C)
|
:00422B2B 660DFFFF                or ax, FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422AEE(U), :00422B24(U), :00422B29(U)
|
:00422B2F 8BE5                    mov esp, ebp
:00422B31 5D                      pop ebp
:00422B32 C3                      ret



* Referenced by a CALL at Address:
|:00424D8F   
|
:00422B33 55                      push ebp
:00422B34 8BEC                    mov ebp, esp
:00422B36 83EC0C                  sub esp, 0000000C
:00422B39 6A00                    push 00000000
:00422B3B 68401F0000              push 00001F40
:00422B40 6858CB4800              push 0048CB58
:00422B45 E80CE4FFFF              call 00420F56
:00422B4A 83C40C                  add esp, 0000000C
:00422B4D 66C705545A48000000      mov word ptr [00485A54], 0000
:00422B56 66C705505A48000000      mov word ptr [00485A50], 0000
:00422B5F 66C705F4A848000000      mov word ptr [0048A8F4], 0000
:00422B68 68509C0000              push 00009C50
:00422B6D B930DF4A00              mov ecx, 004ADF30
:00422B72 E8270AFFFF              call 0041359E
:00422B77 8945FC                  mov dword ptr [ebp-04], eax
:00422B7A 6A00                    push 00000000
:00422B7C 68204E0000              push 00004E20
:00422B81 8B45FC                  mov eax, dword ptr [ebp-04]
:00422B84 50                      push eax
:00422B85 E801E4FFFF              call 00420F8B
:00422B8A 83C40C                  add esp, 0000000C
:00422B8D 66C745F83C00            mov [ebp-08], 003C
:00422B93 66C745F41900            mov [ebp-0C], 0019
:00422B99 66C705B8A84800C800      mov word ptr [0048A8B8], 00C8
:00422BA2 66C705BAA848007800      mov word ptr [0048A8BA], 0078
:00422BAB 66C705C0A848003200      mov word ptr [0048A8C0], 0032
:00422BB4 668B4DF4                mov cx, word ptr [ebp-0C]
:00422BB8 66890DBEA84800          mov word ptr [0048A8BE], cx
:00422BBF 668B55F8                mov dx, word ptr [ebp-08]
:00422BC3 668915BCA84800          mov word ptr [0048A8BC], dx
:00422BCA 8B45FC                  mov eax, dword ptr [ebp-04]
:00422BCD A3A8A84800              mov dword ptr [0048A8A8], eax
:00422BD2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422BD5 81E1FFFF0000            and ecx, 0000FFFF
:00422BDB 69C9C8000000            imul ecx, 000000C8
:00422BE1 8B55F8                  mov edx, dword ptr [ebp-08]
:00422BE4 81E2FFFF0000            and edx, 0000FFFF
:00422BEA 03CA                    add ecx, edx
:00422BEC 8B45FC                  mov eax, dword ptr [ebp-04]
:00422BEF 8D0C48                  lea ecx, dword ptr [eax+2*ecx]
:00422BF2 890DACA84800            mov dword ptr [0048A8AC], ecx
:00422BF8 66C705C2A848000100      mov word ptr [0048A8C2], 0001
:00422C01 8B15ACA84800            mov edx, dword ptr [0048A8AC]
:00422C07 8915B4A84800            mov dword ptr [0048A8B4], edx
:00422C0D A1B4A84800              mov eax, dword ptr [0048A8B4]
:00422C12 A3B0A84800              mov dword ptr [0048A8B0], eax
:00422C17 8BE5                    mov esp, ebp
:00422C19 5D                      pop ebp
:00422C1A C3                      ret



* Referenced by a CALL at Address:
|:00424D99   
|
:00422C1B 55                      push ebp
:00422C1C 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00422C1E 6AFF                    push FFFFFFFF
:00422C20 6822394700              push 00473922
:00422C25 64A100000000            mov eax, dword ptr fs:[00000000]
:00422C2B 50                      push eax
:00422C2C 64892500000000          mov dword ptr fs:[00000000], esp
:00422C33 81EC08010000            sub esp, 00000108
:00422C39 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00422C3F E8BC4AFEFF              call 00407700
:00422C44 C745FC00000000          mov [ebp-04], 00000000
:00422C4B B918DA4A00              mov ecx, 004ADA18
:00422C50 E85BC5FEFF              call 0040F1B0
:00422C55 25FF000000              and eax, 000000FF
:00422C5A 660FB68010784700        movzx ax, byte ptr [eax+00477810]
:00422C62 668985ECFEFFFF          mov word ptr [ebp+FFFFFEEC], ax
:00422C69 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00422C6F 81E1FFFF0000            and ecx, 0000FFFF
:00422C75 83F90D                  cmp ecx, 0000000D
:00422C78 7C11                    jl 00422C8B
:00422C7A 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:00422C80 81E2FFFF0000            and edx, 0000FFFF
:00422C86 83FA77                  cmp edx, 00000077
:00422C89 7C09                    jl 00422C94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422C78(C)
|
:00422C8B 66C785ECFEFFFF0D00      mov word ptr [ebp+FFFFFEEC], 000D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422C89(C)
|

* Possible StringData Ref from Data Obj ->"PMAP.E4"
                                  |
:00422C94 68707A4700              push 00477A70
:00422C99 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00422C9F E89116FFFF              call 00414335
:00422CA4 6A00                    push 00000000
:00422CA6 B930DF4A00              mov ecx, 004ADF30
:00422CAB E8EE08FFFF              call 0041359E
:00422CB0 50                      push eax
:00422CB1 6A00                    push 00000000
:00422CB3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00422CB9 E8CB17FFFF              call 00414489
:00422CBE 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00422CC4 E843D9FEFF              call 0041060C
:00422CC9 6A00                    push 00000000
:00422CCB B930DF4A00              mov ecx, 004ADF30
:00422CD0 E8C908FFFF              call 0041359E
:00422CD5 668B8DECFEFFFF          mov cx, word ptr [ebp+FFFFFEEC]
:00422CDC 668908                  mov word ptr [eax], cx
:00422CDF 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:00422CE5 81E2FFFF0000            and edx, 0000FFFF
:00422CEB 52                      push edx
:00422CEC E8443FFFFF              call 00416C35
:00422CF1 83C404                  add esp, 00000004
:00422CF4 E887ECFFFF              call 00421980
:00422CF9 6A01                    push 00000001
:00422CFB 668B85ECFEFFFF          mov ax, word ptr [ebp+FFFFFEEC]
:00422D02 50                      push eax
:00422D03 E898FBFEFF              call 004128A0
:00422D08 83C408                  add esp, 00000008
:00422D0B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00422D12 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00422D18 E8034AFEFF              call 00407720
:00422D1D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422D20 64890D00000000          mov dword ptr fs:[00000000], ecx
:00422D27 8BE5                    mov esp, ebp
:00422D29 5D                      pop ebp
:00422D2A C3                      ret



* Referenced by a CALL at Addresses:
|:00422DC8   , :00422E40   , :00422EF5   , :00422F5A   , :004232D2   
|:004234FB   , :0042356C   , :00424099   
|
:00422D2B 55                      push ebp
:00422D2C 8BEC                    mov ebp, esp
:00422D2E 83EC08                  sub esp, 00000008
:00422D31 C745FCF8A84800          mov [ebp-04], 0048A8F8
:00422D38 66C745F80000            mov [ebp-08], 0000
:00422D3E EB15                    jmp 00422D55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422D98(U)
|
:00422D40 668B45F8                mov ax, word ptr [ebp-08]
:00422D44 66050100                add ax, 0001
:00422D48 668945F8                mov word ptr [ebp-08], ax
:00422D4C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422D4F 83C140                  add ecx, 00000040
:00422D52 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422D3E(U)
|
:00422D55 8B55F8                  mov edx, dword ptr [ebp-08]
:00422D58 81E2FFFF0000            and edx, 0000FFFF
:00422D5E 81FA80000000            cmp edx, 00000080
:00422D64 7D34                    jge 00422D9A
:00422D66 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422D69 E882C6FEFF              call 0040F3F0
:00422D6E 25FFFF0000              and eax, 0000FFFF
:00422D73 2500800000              and eax, 00008000
:00422D78 85C0                    test eax, eax
:00422D7A 741C                    je 00422D98
:00422D7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422D7F E8CC220000              call 00425050
:00422D84 25FFFF0000              and eax, 0000FFFF
:00422D89 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422D8C 81E1FFFF0000            and ecx, 0000FFFF
:00422D92 3BC1                    cmp eax, ecx
:00422D94 7502                    jne 00422D98
:00422D96 EB02                    jmp 00422D9A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422D7A(C), :00422D94(C)
|
:00422D98 EBA6                    jmp 00422D40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422D64(C), :00422D96(U)
|
:00422D9A 8B55F8                  mov edx, dword ptr [ebp-08]
:00422D9D 81E2FFFF0000            and edx, 0000FFFF
:00422DA3 81FA80000000            cmp edx, 00000080
:00422DA9 7506                    jne 00422DB1
:00422DAB 66C745F8FFFF            mov [ebp-08], FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422DA9(C)
|
:00422DB1 668B45F8                mov ax, word ptr [ebp-08]
:00422DB5 8BE5                    mov esp, ebp
:00422DB7 5D                      pop ebp
:00422DB8 C3                      ret



* Referenced by a CALL at Addresses:
|:00427381   , :00427391   , :004273A3   
|
:00422DB9 55                      push ebp
:00422DBA 8BEC                    mov ebp, esp
:00422DBC 83EC0C                  sub esp, 0000000C
:00422DBF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422DC2 E839200000              call 00424E00
:00422DC7 50                      push eax
:00422DC8 E85EFFFFFF              call 00422D2B
:00422DCD 83C404                  add esp, 00000004
:00422DD0 668945FC                mov word ptr [ebp-04], ax
:00422DD4 8B45FC                  mov eax, dword ptr [ebp-04]
:00422DD7 25FFFF0000              and eax, 0000FFFF
:00422DDC 3DFFFF0000              cmp eax, 0000FFFF
:00422DE1 7504                    jne 00422DE7
:00422DE3 33C0                    xor eax, eax
:00422DE5 EB3F                    jmp 00422E26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422DE1(C)
|
:00422DE7 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00422DEA 51                      push ecx
:00422DEB 8D55F8                  lea edx, dword ptr [ebp-08]
:00422DEE 52                      push edx
:00422DEF 668B45FC                mov ax, word ptr [ebp-04]
:00422DF3 50                      push eax
:00422DF4 E8C9E1FFFF              call 00420FC2
:00422DF9 83C404                  add esp, 00000004
:00422DFC 8BC8                    mov ecx, eax
:00422DFE E80D250000              call 00425310
:00422E03 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00422E06 81E1FFFF0000            and ecx, 0000FFFF
:00422E0C 890DE0A84800            mov dword ptr [0048A8E0], ecx
:00422E12 8B55F4                  mov edx, dword ptr [ebp-0C]
:00422E15 81E2FFFF0000            and edx, 0000FFFF
:00422E1B 8915E4A84800            mov dword ptr [0048A8E4], edx
:00422E21 B8E0A84800              mov eax, 0048A8E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422DE5(U)
|
:00422E26 8BE5                    mov esp, ebp
:00422E28 5D                      pop ebp
:00422E29 C3                      ret



* Referenced by a CALL at Address:
|:0042751A   
|
:00422E2A 55                      push ebp
:00422E2B 8BEC                    mov ebp, esp
:00422E2D 83EC0C                  sub esp, 0000000C
:00422E30 C745F801000000          mov [ebp-08], 00000001
:00422E37 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422E3A E8C11F0000              call 00424E00
:00422E3F 50                      push eax
:00422E40 E8E6FEFFFF              call 00422D2B
:00422E45 83C404                  add esp, 00000004
:00422E48 668945FC                mov word ptr [ebp-04], ax
:00422E4C 8B45FC                  mov eax, dword ptr [ebp-04]
:00422E4F 25FFFF0000              and eax, 0000FFFF
:00422E54 3DFFFF0000              cmp eax, 0000FFFF
:00422E59 744D                    je 00422EA8
:00422E5B 668B4DFC                mov cx, word ptr [ebp-04]
:00422E5F 51                      push ecx
:00422E60 E85DE1FFFF              call 00420FC2
:00422E65 83C404                  add esp, 00000004
:00422E68 8BC8                    mov ecx, eax
:00422E6A E8A1250000              call 00425410
:00422E6F 25FFFF0000              and eax, 0000FFFF
:00422E74 8945F8                  mov dword ptr [ebp-08], eax
:00422E77 8B55F8                  mov edx, dword ptr [ebp-08]
:00422E7A 8955F4                  mov dword ptr [ebp-0C], edx
:00422E7D 837DF403                cmp dword ptr [ebp-0C], 00000003
:00422E81 771C                    ja 00422E9F
:00422E83 8B45F4                  mov eax, dword ptr [ebp-0C]
:00422E86 FF2485B62E4200          jmp dword ptr [4*eax+00422EB6]
:00422E8D C745F801000000          mov [ebp-08], 00000001
:00422E94 EB10                    jmp 00422EA6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00422E96 C745F803000000          mov [ebp-08], 00000003
:00422E9D EB07                    jmp 00422EA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422E81(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00422E9F C745F8FF000000          mov [ebp-08], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422E94(U), :00422E9D(U)
|
:00422EA6 EB07                    jmp 00422EAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422E59(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00422EA8 C745F8FF000000          mov [ebp-08], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422EA6(U)
|
:00422EAF 8B45F8                  mov eax, dword ptr [ebp-08]
:00422EB2 8BE5                    mov esp, ebp
:00422EB4 5D                      pop ebp
:00422EB5 C3                      ret



:00422EB6 8D2E4200                DWORD 00422E8D
:00422EBA 8D2E4200                DWORD 00422E8D
:00422EBE 962E4200                DWORD 00422E96
:00422EC2 962E4200                DWORD 00422E96



* Referenced by a CALL at Address:
|:00422FC9   
|
:00422EC6 55                      push ebp
:00422EC7 8BEC                    mov ebp, esp
:00422EC9 E86EF5FFFF              call 0042243C
:00422ECE 33C0                    xor eax, eax
:00422ED0 5D                      pop ebp
:00422ED1 C3                      ret



* Referenced by a CALL at Address:
|:0040CA5F   
|
:00422ED2 55                      push ebp
:00422ED3 8BEC                    mov ebp, esp
:00422ED5 E862F5FFFF              call 0042243C
:00422EDA E844FFFEFF              call 00412E23
:00422EDF 33C0                    xor eax, eax
:00422EE1 5D                      pop ebp
:00422EE2 C3                      ret


:00422EE3 55                      push ebp
:00422EE4 8BEC                    mov ebp, esp
:00422EE6 33C0                    xor eax, eax
:00422EE8 5D                      pop ebp
:00422EE9 C3                      ret



* Referenced by a CALL at Addresses:
|:0040BF04   , :0045AC5F   
|
:00422EEA 55                      push ebp
:00422EEB 8BEC                    mov ebp, esp
:00422EED 83EC08                  sub esp, 00000008
:00422EF0 668B4508                mov ax, word ptr [ebp+08]
:00422EF4 50                      push eax
:00422EF5 E831FEFFFF              call 00422D2B
:00422EFA 83C404                  add esp, 00000004
:00422EFD 668945FC                mov word ptr [ebp-04], ax
:00422F01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422F04 81E1FFFF0000            and ecx, 0000FFFF
:00422F0A 81F980000000            cmp ecx, 00000080
:00422F10 7C07                    jl 00422F19
:00422F12 B8FFFF0000              mov eax, 0000FFFF
:00422F17 EB32                    jmp 00422F4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422F10(C)
|
:00422F19 668B55FC                mov dx, word ptr [ebp-04]
:00422F1D 52                      push edx
:00422F1E E89FE0FFFF              call 00420FC2
:00422F23 83C404                  add esp, 00000004
:00422F26 8945F8                  mov dword ptr [ebp-08], eax
:00422F29 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00422F2C E85F200000              call 00424F90
:00422F31 8B4508                  mov eax, dword ptr [ebp+08]
:00422F34 25FFFF0000              and eax, 0000FFFF
:00422F39 3D00100000              cmp eax, 00001000
:00422F3E 7509                    jne 00422F49
:00422F40 66C705E8A84800FFFF      mov word ptr [0048A8E8], FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422F3E(C)
|
:00422F49 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422F17(U)
|
:00422F4B 8BE5                    mov esp, ebp
:00422F4D 5D                      pop ebp
:00422F4E C3                      ret



* Referenced by a CALL at Addresses:
|:0040C129   , :0040C1A0   , :0045A894   , :0045A8D9   , :0045A916   
|:0045A961   , :0045AA34   , :0045AA55   , :0045ACDE   , :0045AD23   
|:0045AD5D   , :0045ADA3   , :0045DD98   , :0045DDDD   , :0045DE17   
|:0045DE5D   
|
:00422F4F 55                      push ebp
:00422F50 8BEC                    mov ebp, esp
:00422F52 83EC08                  sub esp, 00000008
:00422F55 668B4508                mov ax, word ptr [ebp+08]
:00422F59 50                      push eax
:00422F5A E8CCFDFFFF              call 00422D2B
:00422F5F 83C404                  add esp, 00000004
:00422F62 668945F8                mov word ptr [ebp-08], ax
:00422F66 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00422F69 81E1FFFF0000            and ecx, 0000FFFF
:00422F6F 81F980000000            cmp ecx, 00000080
:00422F75 7D5B                    jge 00422FD2
:00422F77 668B55F8                mov dx, word ptr [ebp-08]
:00422F7B 52                      push edx
:00422F7C E841E0FFFF              call 00420FC2
:00422F81 83C404                  add esp, 00000004
:00422F84 8945FC                  mov dword ptr [ebp-04], eax
:00422F87 668B450C                mov ax, word ptr [ebp+0C]
:00422F8B 50                      push eax
:00422F8C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422F8F E83C240000              call 004253D0
:00422F94 6A00                    push 00000000
:00422F96 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422F99 E8D2200000              call 00425070
:00422F9E 668B4D0C                mov cx, word ptr [ebp+0C]
:00422FA2 51                      push ecx
:00422FA3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422FA6 E84D130000              call 004242F8
:00422FAB 8B5510                  mov edx, dword ptr [ebp+10]
:00422FAE 81E2FFFF0000            and edx, 0000FFFF
:00422FB4 81FAFFFF0000            cmp edx, 0000FFFF
:00422FBA 740D                    je 00422FC9
:00422FBC 668B4510                mov ax, word ptr [ebp+10]
:00422FC0 50                      push eax
:00422FC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00422FC4 E827240000              call 004253F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422FBA(C)
|
:00422FC9 E8F8FEFFFF              call 00422EC6
:00422FCE 33C0                    xor eax, eax
:00422FD0 EB03                    jmp 00422FD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422F75(C)
|
:00422FD2 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422FD0(U)
|
:00422FD5 8BE5                    mov esp, ebp
:00422FD7 5D                      pop ebp
:00422FD8 C3                      ret



* Referenced by a CALL at Addresses:
|:00421957   , :004233E8   
|
:00422FD9 55                      push ebp
:00422FDA 8BEC                    mov ebp, esp
:00422FDC 83EC14                  sub esp, 00000014
:00422FDF 66C745FC0000            mov [ebp-04], 0000
:00422FE5 8B4508                  mov eax, dword ptr [ebp+08]
:00422FE8 25FFFF0000              and eax, 0000FFFF
:00422FED 2500F00000              and eax, 0000F000
:00422FF2 668945F8                mov word ptr [ebp-08], ax
:00422FF6 66C745F40400            mov [ebp-0C], 0004
:00422FFC 66C745F00100            mov [ebp-10], 0001
:00423002 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423005 81E1FFFF0000            and ecx, 0000FFFF
:0042300B 894DEC                  mov dword ptr [ebp-14], ecx
:0042300E 817DEC00100000          cmp dword ptr [ebp-14], 00001000
:00423015 742A                    je 00423041
:00423017 817DEC00200000          cmp dword ptr [ebp-14], 00002000
:0042301E 7402                    je 00423022
:00423020 EB68                    jmp 0042308A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042301E(C)
|
:00423022 66C745F40500            mov [ebp-0C], 0005
:00423028 6896000000              push 00000096
:0042302D E883F00300              call 004620B5
:00423032 83C404                  add esp, 00000004
:00423035 25FFFF0000              and eax, 0000FFFF
:0042303A 83C032                  add eax, 00000032
:0042303D 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423015(C)
|
:00423041 668B5508                mov dx, word ptr [ebp+08]
:00423045 52                      push edx
:00423046 E86BDDFFFF              call 00420DB6
:0042304B 83C404                  add esp, 00000004
:0042304E 25FFFF0000              and eax, 0000FFFF
:00423053 50                      push eax
:00423054 E827DDFFFF              call 00420D80
:00423059 83C404                  add esp, 00000004
:0042305C 85C0                    test eax, eax
:0042305E 741F                    je 0042307F
:00423060 8B452C                  mov eax, dword ptr [ebp+2C]
:00423063 50                      push eax
:00423064 E82BDDFFFF              call 00420D94
:00423069 83C404                  add esp, 00000004
:0042306C 66A3E8A84800            mov word ptr [0048A8E8], ax
:00423072 66C745F40300            mov [ebp-0C], 0003
:00423078 E81C010000              call 00423199
:0042307D EB0B                    jmp 0042308A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042305E(C)
|
:0042307F 668B4DF0                mov cx, word ptr [ebp-10]
:00423083 80CD40                  or ch, 40
:00423086 66894DF0                mov word ptr [ebp-10], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423020(U), :0042307D(U)
|
:0042308A 6A00                    push 00000000
:0042308C 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0042308F E83C1F0000              call 00424FD0
:00423094 668B5524                mov dx, word ptr [ebp+24]
:00423098 52                      push edx
:00423099 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0042309C E84F230000              call 004253F0
:004230A1 6A00                    push 00000000
:004230A3 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230A6 E8051F0000              call 00424FB0
:004230AB 6A00                    push 00000000
:004230AD 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230B0 E8BB1F0000              call 00425070
:004230B5 668B45FC                mov ax, word ptr [ebp-04]
:004230B9 50                      push eax
:004230BA 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230BD E82E1F0000              call 00424FF0
:004230C2 6A00                    push 00000000
:004230C4 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230C7 E8441F0000              call 00425010
:004230CC 668B4D0C                mov cx, word ptr [ebp+0C]
:004230D0 51                      push ecx
:004230D1 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230D4 E897200000              call 00425170
:004230D9 668B5510                mov dx, word ptr [ebp+10]
:004230DD 52                      push edx
:004230DE 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230E1 E8CA200000              call 004251B0
:004230E6 668B4514                mov ax, word ptr [ebp+14]
:004230EA 50                      push eax
:004230EB 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230EE E8FD200000              call 004251F0
:004230F3 668B4D18                mov cx, word ptr [ebp+18]
:004230F7 51                      push ecx
:004230F8 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:004230FB E8901F0000              call 00425090
:00423100 668B551C                mov dx, word ptr [ebp+1C]
:00423104 52                      push edx
:00423105 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423108 E8C31F0000              call 004250D0
:0042310D 668B4520                mov ax, word ptr [ebp+20]
:00423111 50                      push eax
:00423112 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423115 E8F61F0000              call 00425110
:0042311A 68FFFF0000              push 0000FFFF
:0042311F 68FFFF0000              push 0000FFFF
:00423124 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423127 E8B4210000              call 004252E0
:0042312C 68FFFF0000              push 0000FFFF
:00423131 68FFFF0000              push 0000FFFF
:00423136 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423139 E802220000              call 00425340
:0042313E 668B4DF4                mov cx, word ptr [ebp-0C]
:00423142 51                      push ecx
:00423143 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423146 E88537FFFF              call 004168D0
:0042314B 68FFFF0000              push 0000FFFF
:00423150 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423153 E818220000              call 00425370
:00423158 668B55F0                mov dx, word ptr [ebp-10]
:0042315C 52                      push edx
:0042315D 668B45F0                mov ax, word ptr [ebp-10]
:00423161 50                      push eax
:00423162 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423165 E8C6200000              call 00425230
:0042316A 668B4D28                mov cx, word ptr [ebp+28]
:0042316E 51                      push ecx
:0042316F 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:00423172 E859220000              call 004253D0
:00423177 668B5528                mov dx, word ptr [ebp+28]
:0042317B 52                      push edx
:0042317C 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0042317F E874110000              call 004242F8
:00423184 8B452C                  mov eax, dword ptr [ebp+2C]
:00423187 50                      push eax
:00423188 E807DCFFFF              call 00420D94
:0042318D 83C404                  add esp, 00000004
:00423190 25FFFF0000              and eax, 0000FFFF
:00423195 8BE5                    mov esp, ebp
:00423197 5D                      pop ebp
:00423198 C3                      ret



* Referenced by a CALL at Address:
|:00423078   
|
:00423199 55                      push ebp
:0042319A 8BEC                    mov ebp, esp
:0042319C E8E83D0000              call 00426F89
:004231A1 66A3805A4800            mov word ptr [00485A80], ax
:004231A7 6A00                    push 00000000
:004231A9 E8A63D0000              call 00426F54
:004231AE 83C404                  add esp, 00000004
:004231B1 66C70538C948000100      mov word ptr [0048C938], 0001
:004231BA 5D                      pop ebp
:004231BB C3                      ret



* Referenced by a CALL at Address:
|:004233AF   
|
:004231BC 55                      push ebp
:004231BD 8BEC                    mov ebp, esp
:004231BF 83EC08                  sub esp, 00000008
:004231C2 56                      push esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004232B7(U)
|
:004231C3 6A64                    push 00000064
:004231C5 E8EBEE0300              call 004620B5
:004231CA 83C404                  add esp, 00000004
:004231CD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004231D0 668901                  mov word ptr [ecx], ax
:004231D3 6A64                    push 00000064
:004231D5 E8DBEE0300              call 004620B5
:004231DA 83C404                  add esp, 00000004
:004231DD 8B550C                  mov edx, dword ptr [ebp+0C]
:004231E0 668902                  mov word ptr [edx], ax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004231E3 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004231E5 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004231E7 6A03                    push 00000003
:004231E9 8B450C                  mov eax, dword ptr [ebp+0C]
:004231EC 50                      push eax
:004231ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004231F0 51                      push ecx
:004231F1 E89DF3FFFF              call 00422593
:004231F6 83C414                  add esp, 00000014
:004231F9 25FFFF0000              and eax, 0000FFFF
:004231FE 3DFFFF0000              cmp eax, 0000FFFF
:00423203 0F84AE000000            je 004232B7
:00423209 8B5510                  mov edx, dword ptr [ebp+10]
:0042320C 81E2FFFF0000            and edx, 0000FFFF
:00423212 83FA01                  cmp edx, 00000001
:00423215 0F859A000000            jne 004232B5
:0042321B C745FCF8A84800          mov [ebp-04], 0048A8F8
:00423222 66C745F80000            mov [ebp-08], 0000
:00423228 EB15                    jmp 0042323F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042329E(U)
|
:0042322A 668B45F8                mov ax, word ptr [ebp-08]
:0042322E 66050100                add ax, 0001
:00423232 668945F8                mov word ptr [ebp-08], ax
:00423236 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423239 83C140                  add ecx, 00000040
:0042323C 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423228(U)
|
:0042323F 8B55F8                  mov edx, dword ptr [ebp-08]
:00423242 81E2FFFF0000            and edx, 0000FFFF
:00423248 81FA80000000            cmp edx, 00000080
:0042324E 7D50                    jge 004232A0
:00423250 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423253 E898C1FEFF              call 0040F3F0
:00423258 25FFFF0000              and eax, 0000FFFF
:0042325D 2500800000              and eax, 00008000
:00423262 85C0                    test eax, eax
:00423264 7438                    je 0042329E
:00423266 8B4508                  mov eax, dword ptr [ebp+08]
:00423269 33C9                    xor ecx, ecx
:0042326B 668B08                  mov cx, word ptr [eax]
:0042326E 8BF1                    mov esi, ecx
:00423270 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423273 E8181F0000              call 00425190
:00423278 25FFFF0000              and eax, 0000FFFF
:0042327D 3BF0                    cmp esi, eax
:0042327F 751D                    jne 0042329E
:00423281 8B550C                  mov edx, dword ptr [ebp+0C]
:00423284 33C0                    xor eax, eax
:00423286 668B02                  mov ax, word ptr [edx]
:00423289 8BF0                    mov esi, eax
:0042328B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042328E E83D1F0000              call 004251D0
:00423293 25FFFF0000              and eax, 0000FFFF
:00423298 3BF0                    cmp esi, eax
:0042329A 7502                    jne 0042329E
:0042329C EB02                    jmp 004232A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423264(C), :0042327F(C), :0042329A(C)
|
:0042329E EB8A                    jmp 0042322A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042324E(C), :0042329C(U)
|
:004232A0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004232A3 81E1FFFF0000            and ecx, 0000FFFF
:004232A9 81F980000000            cmp ecx, 00000080
:004232AF 7502                    jne 004232B3
:004232B1 EB09                    jmp 004232BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004232AF(C)
|
:004232B3 EB02                    jmp 004232B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423215(C)
|
:004232B5 EB05                    jmp 004232BC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423203(C), :004232B3(U)
|
:004232B7 E907FFFFFF              jmp 004231C3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004232B1(U), :004232B5(U)
|
:004232BC 5E                      pop esi
:004232BD 8BE5                    mov esp, ebp
:004232BF 5D                      pop ebp
:004232C0 C3                      ret



* Referenced by a CALL at Addresses:
|:00423443   , :004234A7   , :004234E1   , :00424A1C   
|
:004232C1 55                      push ebp
:004232C2 8BEC                    mov ebp, esp
:004232C4 83EC14                  sub esp, 00000014
:004232C7 66C745F80000            mov [ebp-08], 0000
:004232CD 668B4508                mov ax, word ptr [ebp+08]
:004232D1 50                      push eax
:004232D2 E854FAFFFF              call 00422D2B
:004232D7 83C404                  add esp, 00000004
:004232DA 668945F0                mov word ptr [ebp-10], ax
:004232DE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004232E1 81E1FFFF0000            and ecx, 0000FFFF
:004232E7 81F980000000            cmp ecx, 00000080
:004232ED 7D0F                    jge 004232FE
:004232EF E8F1FAFEFF              call 00412DE5
:004232F4 B880000000              mov eax, 00000080
:004232F9 E9F2000000              jmp 004233F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004232ED(C)
|
:004232FE 66C745140000            mov [ebp+14], 0000
:00423304 668B5508                mov dx, word ptr [ebp+08]
:00423308 52                      push edx
:00423309 E8B8DAFFFF              call 00420DC6
:0042330E 83C404                  add esp, 00000004
:00423311 8945EC                  mov dword ptr [ebp-14], eax
:00423314 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00423317 E8041B0000              call 00424E20
:0042331C 668945F4                mov word ptr [ebp-0C], ax
:00423320 8B45F4                  mov eax, dword ptr [ebp-0C]
:00423323 25FFFF0000              and eax, 0000FFFF
:00423328 3D00100000              cmp eax, 00001000
:0042332D 7419                    je 00423348
:0042332F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00423332 81E1FFFF0000            and ecx, 0000FFFF
:00423338 81F900200000            cmp ecx, 00002000
:0042333E 7408                    je 00423348
:00423340 83C8FF                  or eax, FFFFFFFF
:00423343 E9A8000000              jmp 004233F0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042332D(C), :0042333E(C)
|
:00423348 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042334B E840A20100              call 0043D590
:00423350 6633D2                  xor dx, dx
:00423353 8AD0                    mov dl, al
:00423355 52                      push edx
:00423356 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00423359 E8A21A0000              call 00424E00
:0042335E 50                      push eax
:0042335F E8D4DEFFFF              call 00421238
:00423364 83C408                  add esp, 00000008
:00423367 8945FC                  mov dword ptr [ebp-04], eax
:0042336A 6880000000              push 00000080
:0042336F E84EDCFFFF              call 00420FC2
:00423374 83C404                  add esp, 00000004
:00423377 3945FC                  cmp dword ptr [ebp-04], eax
:0042337A 7507                    jne 00423383
:0042337C B880000000              mov eax, 00000080
:00423381 EB6D                    jmp 004233F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042337A(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00423383 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00423385 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00423387 6A03                    push 00000003
:00423389 8D4510                  lea eax, dword ptr [ebp+10]
:0042338C 50                      push eax
:0042338D 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:00423390 51                      push ecx
:00423391 E8FDF1FFFF              call 00422593
:00423396 83C414                  add esp, 00000014
:00423399 25FFFF0000              and eax, 0000FFFF
:0042339E 3DFFFF0000              cmp eax, 0000FFFF
:004233A3 7512                    jne 004233B7
:004233A5 6A01                    push 00000001
:004233A7 8D5510                  lea edx, dword ptr [ebp+10]
:004233AA 52                      push edx
:004233AB 8D450C                  lea eax, dword ptr [ebp+0C]
:004233AE 50                      push eax
:004233AF E808FEFFFF              call 004231BC
:004233B4 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004233A3(C)
|
:004233B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004233BA 51                      push ecx
:004233BB 668B5528                mov dx, word ptr [ebp+28]
:004233BF 52                      push edx
:004233C0 668B4524                mov ax, word ptr [ebp+24]
:004233C4 50                      push eax
:004233C5 668B4D20                mov cx, word ptr [ebp+20]
:004233C9 51                      push ecx
:004233CA 668B551C                mov dx, word ptr [ebp+1C]
:004233CE 52                      push edx
:004233CF 668B4518                mov ax, word ptr [ebp+18]
:004233D3 50                      push eax
:004233D4 668B4D14                mov cx, word ptr [ebp+14]
:004233D8 51                      push ecx
:004233D9 668B5510                mov dx, word ptr [ebp+10]
:004233DD 52                      push edx
:004233DE 668B450C                mov ax, word ptr [ebp+0C]
:004233E2 50                      push eax
:004233E3 668B4D08                mov cx, word ptr [ebp+08]
:004233E7 51                      push ecx
:004233E8 E8ECFBFFFF              call 00422FD9
:004233ED 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004232F9(U), :00423343(U), :00423381(U)
|
:004233F0 8BE5                    mov esp, ebp
:004233F2 5D                      pop ebp
:004233F3 C3                      ret



* Referenced by a CALL at Addresses:
|:0040BDC3   , :0045A9C5   , :0045A9F9   
|
:004233F4 55                      push ebp
:004233F5 8BEC                    mov ebp, esp
:004233F7 668B4518                mov ax, word ptr [ebp+18]
:004233FB 66250300                and ax, 0003
:004233FF 66894518                mov word ptr [ebp+18], ax
:00423403 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00423406 81E1FFFF0000            and ecx, 0000FFFF
:0042340C 83F90D                  cmp ecx, 0000000D
:0042340F 7544                    jne 00423455
:00423411 66C7451C0100            mov [ebp+1C], 0001
:00423417 668B551C                mov dx, word ptr [ebp+1C]
:0042341B 52                      push edx
:0042341C 668B4518                mov ax, word ptr [ebp+18]
:00423420 50                      push eax
:00423421 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00423423 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00423425 6A03                    push 00000003
:00423427 668B4D14                mov cx, word ptr [ebp+14]
:0042342B 51                      push ecx
:0042342C 668B5510                mov dx, word ptr [ebp+10]
:00423430 52                      push edx
:00423431 668B450C                mov ax, word ptr [ebp+0C]
:00423435 50                      push eax
:00423436 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423439 81E1FFFF0000            and ecx, 0000FFFF
:0042343F 80CD20                  or ch, 20
:00423442 51                      push ecx
:00423443 E879FEFFFF              call 004232C1
:00423448 83C424                  add esp, 00000024
:0042344B B8FFFF0000              mov eax, 0000FFFF
:00423450 E999000000              jmp 004234EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042340F(C)
|
:00423455 8B551C                  mov edx, dword ptr [ebp+1C]
:00423458 81E2FFFF0000            and edx, 0000FFFF
:0042345E 83FA0E                  cmp edx, 0000000E
:00423461 7E06                    jle 00423469
:00423463 66C7451C0000            mov [ebp+1C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423461(C)
|
:00423469 8B451C                  mov eax, dword ptr [ebp+1C]
:0042346C 25FFFF0000              and eax, 0000FFFF
:00423471 83F80C                  cmp eax, 0000000C
:00423474 7540                    jne 004234B6
:00423476 66C7451C0000            mov [ebp+1C], 0000
:0042347C 668B4D1C                mov cx, word ptr [ebp+1C]
:00423480 51                      push ecx
:00423481 668B5518                mov dx, word ptr [ebp+18]
:00423485 52                      push edx
:00423486 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00423488 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042348A 6A03                    push 00000003
:0042348C 668B4514                mov ax, word ptr [ebp+14]
:00423490 50                      push eax
:00423491 668B4D10                mov cx, word ptr [ebp+10]
:00423495 51                      push ecx
:00423496 668B550C                mov dx, word ptr [ebp+0C]
:0042349A 52                      push edx
:0042349B 8B4508                  mov eax, dword ptr [ebp+08]
:0042349E 25FFFF0000              and eax, 0000FFFF
:004234A3 80CC20                  or ah, 20
:004234A6 50                      push eax
:004234A7 E815FEFFFF              call 004232C1
:004234AC 83C424                  add esp, 00000024
:004234AF B8FFFF0000              mov eax, 0000FFFF
:004234B4 EB38                    jmp 004234EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423474(C)
|
:004234B6 668B4D1C                mov cx, word ptr [ebp+1C]
:004234BA 51                      push ecx
:004234BB 668B5518                mov dx, word ptr [ebp+18]
:004234BF 52                      push edx
:004234C0 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004234C2 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004234C4 6A03                    push 00000003
:004234C6 668B4514                mov ax, word ptr [ebp+14]
:004234CA 50                      push eax
:004234CB 668B4D10                mov cx, word ptr [ebp+10]
:004234CF 51                      push ecx
:004234D0 668B550C                mov dx, word ptr [ebp+0C]
:004234D4 52                      push edx
:004234D5 8B4508                  mov eax, dword ptr [ebp+08]
:004234D8 25FFFF0000              and eax, 0000FFFF
:004234DD 80CC10                  or ah, 10
:004234E0 50                      push eax
:004234E1 E8DBFDFFFF              call 004232C1
:004234E6 83C424                  add esp, 00000024
:004234E9 B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423450(U), :004234B4(U)
|
:004234EE 5D                      pop ebp
:004234EF C3                      ret


:004234F0 55                      push ebp
:004234F1 8BEC                    mov ebp, esp
:004234F3 83EC08                  sub esp, 00000008
:004234F6 668B4508                mov ax, word ptr [ebp+08]
:004234FA 50                      push eax
:004234FB E82BF8FFFF              call 00422D2B
:00423500 83C404                  add esp, 00000004
:00423503 668945FC                mov word ptr [ebp-04], ax
:00423507 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042350A 81E1FFFF0000            and ecx, 0000FFFF
:00423510 81F980000000            cmp ecx, 00000080
:00423516 7C07                    jl 0042351F
:00423518 B8FFFF0000              mov eax, 0000FFFF
:0042351D EB2B                    jmp 0042354A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423516(C)
|
:0042351F 668B55FC                mov dx, word ptr [ebp-04]
:00423523 52                      push edx
:00423524 E899DAFFFF              call 00420FC2
:00423529 83C404                  add esp, 00000004
:0042352C 8945F8                  mov dword ptr [ebp-08], eax
:0042352F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423532 E8D9BEFEFF              call 0040F410
:00423537 25FFFF0000              and eax, 0000FFFF
:0042353C 83F804                  cmp eax, 00000004
:0042353F 7407                    je 00423548
:00423541 B801000000              mov eax, 00000001
:00423546 EB02                    jmp 0042354A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042353F(C)
|
:00423548 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042351D(U), :00423546(U)
|
:0042354A 8BE5                    mov esp, ebp
:0042354C 5D                      pop ebp
:0042354D C3                      ret



* Referenced by a CALL at Addresses:
|:0040C056   , :0045A9E0   , :0045AA13   , :0045AC28   , :0045AC45   
|
:0042354E 55                      push ebp
:0042354F 8BEC                    mov ebp, esp
:00423551 83EC08                  sub esp, 00000008
:00423554 8B4514                  mov eax, dword ptr [ebp+14]
:00423557 25FFFF0000              and eax, 0000FFFF
:0042355C 83F803                  cmp eax, 00000003
:0042355F 7E06                    jle 00423567
:00423561 66C745140000            mov [ebp+14], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042355F(C)
|
:00423567 668B4D08                mov cx, word ptr [ebp+08]
:0042356B 51                      push ecx
:0042356C E8BAF7FFFF              call 00422D2B
:00423571 83C404                  add esp, 00000004
:00423574 668945FC                mov word ptr [ebp-04], ax
:00423578 8B55FC                  mov edx, dword ptr [ebp-04]
:0042357B 81E2FFFF0000            and edx, 0000FFFF
:00423581 81FA80000000            cmp edx, 00000080
:00423587 7C0A                    jl 00423593
:00423589 B8FFFF0000              mov eax, 0000FFFF
:0042358E E9C4000000              jmp 00423657

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423587(C)
|
:00423593 668B45FC                mov ax, word ptr [ebp-04]
:00423597 50                      push eax
:00423598 E825DAFFFF              call 00420FC2
:0042359D 83C404                  add esp, 00000004
:004235A0 8945F8                  mov dword ptr [ebp-08], eax
:004235A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004235A6 E865BEFEFF              call 0040F410
:004235AB 25FFFF0000              and eax, 0000FFFF
:004235B0 83F804                  cmp eax, 00000004
:004235B3 740A                    je 004235BF
:004235B5 B8FFFF0000              mov eax, 0000FFFF
:004235BA E998000000              jmp 00423657

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004235B3(C)
|
:004235BF 6A00                    push 00000000
:004235C1 6A01                    push 00000001
:004235C3 668B4D10                mov cx, word ptr [ebp+10]
:004235C7 51                      push ecx
:004235C8 668B550C                mov dx, word ptr [ebp+0C]
:004235CC 52                      push edx
:004235CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004235D0 E81B1B0000              call 004250F0
:004235D5 50                      push eax
:004235D6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004235D9 E8D21A0000              call 004250B0
:004235DE 50                      push eax
:004235DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004235E2 E8E91B0000              call 004251D0
:004235E7 50                      push eax
:004235E8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004235EB E8A01B0000              call 00425190
:004235F0 50                      push eax
:004235F1 E865000000              call 0042365B
:004235F6 83C420                  add esp, 00000020
:004235F9 83F801                  cmp eax, 00000001
:004235FC 7528                    jne 00423626
:004235FE 6A00                    push 00000000
:00423600 668B4514                mov ax, word ptr [ebp+14]
:00423604 50                      push eax
:00423605 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423608 51                      push ecx
:00423609 E813F3FFFF              call 00422921
:0042360E 83C40C                  add esp, 0000000C
:00423611 25FFFF0000              and eax, 0000FFFF
:00423616 3DFFFF0000              cmp eax, 0000FFFF
:0042361B 7507                    jne 00423624
:0042361D B8FFFF0000              mov eax, 0000FFFF
:00423622 EB33                    jmp 00423657

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042361B(C)
|
:00423624 EB07                    jmp 0042362D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004235FC(C)
|
:00423626 B8FFFF0000              mov eax, 0000FFFF
:0042362B EB2A                    jmp 00423657

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423624(U)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042362D 6A02                    push 00000002
:0042362F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423632 E89932FFFF              call 004168D0
:00423637 6A00                    push 00000000
:00423639 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042363C E88F1D0000              call 004253D0
:00423641 6A00                    push 00000000
:00423643 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423646 E8AD0C0000              call 004242F8
:0042364B 6A00                    push 00000000
:0042364D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423650 E89B190000              call 00424FF0
:00423655 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042358E(U), :004235BA(U), :00423622(U), :0042362B(U)
|
:00423657 8BE5                    mov esp, ebp
:00423659 5D                      pop ebp
:0042365A C3                      ret



* Referenced by a CALL at Address:
|:004235F1   
|
:0042365B 55                      push ebp
:0042365C 8BEC                    mov ebp, esp
:0042365E 83EC44                  sub esp, 00000044
:00423661 56                      push esi
:00423662 6A00                    push 00000000
:00423664 B910414A00              mov ecx, 004A4110
:00423669 E830FFFEFF              call 0041359E
:0042366E 8945E0                  mov dword ptr [ebp-20], eax
:00423671 8B45E0                  mov eax, dword ptr [ebp-20]
:00423674 8945E8                  mov dword ptr [ebp-18], eax
:00423677 68FEFE0000              push 0000FEFE
:0042367C 68204E0000              push 00004E20
:00423681 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00423684 51                      push ecx
:00423685 E801D9FFFF              call 00420F8B
:0042368A 83C40C                  add esp, 0000000C
:0042368D 8B55E0                  mov edx, dword ptr [ebp-20]
:00423690 81C2409C0000            add edx, 00009C40
:00423696 8955F8                  mov dword ptr [ebp-08], edx
:00423699 8B45F8                  mov eax, dword ptr [ebp-08]
:0042369C 8945F0                  mov dword ptr [ebp-10], eax
:0042369F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004236A2 83C102                  add ecx, 00000002
:004236A5 894DC8                  mov dword ptr [ebp-38], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004236A8 6A02                    push 00000002
:004236AA E8A2D9FFFF              call 00421051
:004236AF 83C404                  add esp, 00000004
:004236B2 668945C4                mov word ptr [ebp-3C], ax
:004236B6 8B551C                  mov edx, dword ptr [ebp+1C]
:004236B9 81E2FFFF0000            and edx, 0000FFFF
:004236BF 8B45C4                  mov eax, dword ptr [ebp-3C]
:004236C2 25FFFF0000              and eax, 0000FFFF
:004236C7 0FAFD0                  imul edx, eax
:004236CA 8B4D18                  mov ecx, dword ptr [ebp+18]
:004236CD 81E1FFFF0000            and ecx, 0000FFFF
:004236D3 03D1                    add edx, ecx
:004236D5 8B45F0                  mov eax, dword ptr [ebp-10]
:004236D8 668910                  mov word ptr [eax], dx
:004236DB 668B4D18                mov cx, word ptr [ebp+18]
:004236DF 66890DECA84800          mov word ptr [0048A8EC], cx
:004236E6 668B551C                mov dx, word ptr [ebp+1C]
:004236EA 668915F0A84800          mov word ptr [0048A8F0], dx
:004236F1 8B45F0                  mov eax, dword ptr [ebp-10]
:004236F4 33C9                    xor ecx, ecx
:004236F6 668B08                  mov cx, word ptr [eax]
:004236F9 8B55E8                  mov edx, dword ptr [ebp-18]
:004236FC 66C7044A0000            mov word ptr [edx+2*ecx], 0000
:00423702 8B4520                  mov eax, dword ptr [ebp+20]
:00423705 25FFFF0000              and eax, 0000FFFF
:0042370A 83E001                  and eax, 00000001
:0042370D 85C0                    test eax, eax
:0042370F 7435                    je 00423746
:00423711 8B4D18                  mov ecx, dword ptr [ebp+18]
:00423714 81E1FFFF0000            and ecx, 0000FFFF
:0042371A 8B5508                  mov edx, dword ptr [ebp+08]
:0042371D 81E2FFFF0000            and edx, 0000FFFF
:00423723 3BCA                    cmp ecx, edx
:00423725 751F                    jne 00423746
:00423727 8B451C                  mov eax, dword ptr [ebp+1C]
:0042372A 25FFFF0000              and eax, 0000FFFF
:0042372F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00423732 81E1FFFF0000            and ecx, 0000FFFF
:00423738 3BC1                    cmp eax, ecx
:0042373A 750A                    jne 00423746
:0042373C B801000000              mov eax, 00000001
:00423741 E94C020000              jmp 00423992

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042370F(C), :00423725(C), :0042373A(C), :0042398B(U)
|
:00423746 8B55F0                  mov edx, dword ptr [ebp-10]
:00423749 3B55C8                  cmp edx, dword ptr [ebp-38]
:0042374C 0F843E020000            je 00423990
:00423752 8B45F0                  mov eax, dword ptr [ebp-10]
:00423755 33C9                    xor ecx, ecx
:00423757 668B08                  mov cx, word ptr [eax]
:0042375A 8BC1                    mov eax, ecx
:0042375C 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0042375F 81E1FFFF0000            and ecx, 0000FFFF
:00423765 99                      cdq
:00423766 F7F9                    idiv ecx
:00423768 668955D8                mov word ptr [ebp-28], dx
:0042376C 8B55F0                  mov edx, dword ptr [ebp-10]
:0042376F 33C0                    xor eax, eax
:00423771 668B02                  mov ax, word ptr [edx]
:00423774 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00423777 81E1FFFF0000            and ecx, 0000FFFF
:0042377D 99                      cdq
:0042377E F7F9                    idiv ecx
:00423780 668945D0                mov word ptr [ebp-30], ax
:00423784 8B55F0                  mov edx, dword ptr [ebp-10]
:00423787 33C0                    xor eax, eax
:00423789 668B02                  mov ax, word ptr [edx]
:0042378C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042378F 668B1441                mov dx, word ptr [ecx+2*eax]
:00423793 668955F4                mov word ptr [ebp-0C], dx
:00423797 66C745BC0000            mov [ebp-44], 0000
:0042379D EB0C                    jmp 004237AB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004238C4(U), :00423969(U)
|
:0042379F 668B45BC                mov ax, word ptr [ebp-44]
:004237A3 66050100                add ax, 0001
:004237A7 668945BC                mov word ptr [ebp-44], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042379D(U)
|
:004237AB 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004237AE 81E1FFFF0000            and ecx, 0000FFFF
:004237B4 83F904                  cmp ecx, 00000004
:004237B7 0F8DB1010000            jnl 0042396E
:004237BD 668B55D8                mov dx, word ptr [ebp-28]
:004237C1 668955E4                mov word ptr [ebp-1C], dx
:004237C5 668B45D0                mov ax, word ptr [ebp-30]
:004237C9 668945DC                mov word ptr [ebp-24], ax
:004237CD 668B4DBC                mov cx, word ptr [ebp-44]
:004237D1 51                      push ecx
:004237D2 668B5514                mov dx, word ptr [ebp+14]
:004237D6 52                      push edx
:004237D7 668B4510                mov ax, word ptr [ebp+10]
:004237DB 50                      push eax
:004237DC 8D4DDC                  lea ecx, dword ptr [ebp-24]
:004237DF 51                      push ecx
:004237E0 8D55E4                  lea edx, dword ptr [ebp-1C]
:004237E3 52                      push edx
:004237E4 E867ECFFFF              call 00422450
:004237E9 83C414                  add esp, 00000014
:004237EC 83F801                  cmp eax, 00000001
:004237EF 0F8574010000            jne 00423969
:004237F5 8B4520                  mov eax, dword ptr [ebp+20]
:004237F8 25FFFF0000              and eax, 0000FFFF
:004237FD 83E001                  and eax, 00000001
:00423800 85C0                    test eax, eax
:00423802 7435                    je 00423839
:00423804 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00423807 81E1FFFF0000            and ecx, 0000FFFF
:0042380D 8B5508                  mov edx, dword ptr [ebp+08]
:00423810 81E2FFFF0000            and edx, 0000FFFF
:00423816 3BCA                    cmp ecx, edx
:00423818 751F                    jne 00423839
:0042381A 8B45DC                  mov eax, dword ptr [ebp-24]
:0042381D 25FFFF0000              and eax, 0000FFFF
:00423822 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00423825 81E1FFFF0000            and ecx, 0000FFFF
:0042382B 3BC1                    cmp eax, ecx
:0042382D 750A                    jne 00423839
:0042382F B801000000              mov eax, 00000001
:00423834 E959010000              jmp 00423992

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423802(C), :00423818(C), :0042382D(C)
|
:00423839 8B55DC                  mov edx, dword ptr [ebp-24]
:0042383C 81E2FFFF0000            and edx, 0000FFFF
:00423842 8B45C4                  mov eax, dword ptr [ebp-3C]
:00423845 25FFFF0000              and eax, 0000FFFF
:0042384A 0FAFD0                  imul edx, eax
:0042384D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00423850 81E1FFFF0000            and ecx, 0000FFFF
:00423856 03D1                    add edx, ecx
:00423858 668955D4                mov word ptr [ebp-2C], dx
:0042385C 8B55D4                  mov edx, dword ptr [ebp-2C]
:0042385F 81E2FFFF0000            and edx, 0000FFFF
:00423865 8B45E8                  mov eax, dword ptr [ebp-18]
:00423868 8D0C50                  lea ecx, dword ptr [eax+2*edx]
:0042386B 894DFC                  mov dword ptr [ebp-04], ecx
:0042386E 8B55FC                  mov edx, dword ptr [ebp-04]
:00423871 33C0                    xor eax, eax
:00423873 668B02                  mov ax, word ptr [edx]
:00423876 3DFEFE0000              cmp eax, 0000FEFE
:0042387B 0F85E8000000            jne 00423969
:00423881 8B4D24                  mov ecx, dword ptr [ebp+24]
:00423884 51                      push ecx
:00423885 668B5514                mov dx, word ptr [ebp+14]
:00423889 52                      push edx
:0042388A 668B4510                mov ax, word ptr [ebp+10]
:0042388E 50                      push eax
:0042388F 668B4DDC                mov cx, word ptr [ebp-24]
:00423893 51                      push ecx
:00423894 668B55E4                mov dx, word ptr [ebp-1C]
:00423898 52                      push edx
:00423899 E8F9000000              call 00423997
:0042389E 83C414                  add esp, 00000014
:004238A1 668945C0                mov word ptr [ebp-40], ax
:004238A5 8B45C0                  mov eax, dword ptr [ebp-40]
:004238A8 25FFFF0000              and eax, 0000FFFF
:004238AD 3DFFFF0000              cmp eax, 0000FFFF
:004238B2 7515                    jne 004238C9
:004238B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004238B7 668B11                  mov dx, word ptr [ecx]
:004238BA 6683C201                add dx, 0001
:004238BE 8B45FC                  mov eax, dword ptr [ebp-04]
:004238C1 668910                  mov word ptr [eax], dx
:004238C4 E9D6FEFFFF              jmp 0042379F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238B2(C)
|
:004238C9 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004238CC 81E1FFFF0000            and ecx, 0000FFFF
:004238D2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004238D5 81E2FFFF0000            and edx, 0000FFFF
:004238DB 03CA                    add ecx, edx
:004238DD 8B45FC                  mov eax, dword ptr [ebp-04]
:004238E0 668908                  mov word ptr [eax], cx
:004238E3 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004238E6 894DEC                  mov dword ptr [ebp-14], ecx
:004238E9 8B55C8                  mov edx, dword ptr [ebp-38]
:004238EC 83EA02                  sub edx, 00000002
:004238EF 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042394A(U)
|
:004238F2 8B45CC                  mov eax, dword ptr [ebp-34]
:004238F5 3B45F8                  cmp eax, dword ptr [ebp-08]
:004238F8 730C                    jnb 00423906
:004238FA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004238FD 81C11E4E0000            add ecx, 00004E1E
:00423903 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238F8(C)
|
:00423906 8B55EC                  mov edx, dword ptr [ebp-14]
:00423909 8B45CC                  mov eax, dword ptr [ebp-34]
:0042390C 668B08                  mov cx, word ptr [eax]
:0042390F 66890A                  mov word ptr [edx], cx
:00423912 8B55FC                  mov edx, dword ptr [ebp-04]
:00423915 33C0                    xor eax, eax
:00423917 668B02                  mov ax, word ptr [edx]
:0042391A 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042391D 33D2                    xor edx, edx
:0042391F 668B11                  mov dx, word ptr [ecx]
:00423922 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00423925 33F6                    xor esi, esi
:00423927 668B3451                mov si, word ptr [ecx+2*edx]
:0042392B 3BC6                    cmp eax, esi
:0042392D 7C0C                    jl 0042393B
:0042392F 8B55EC                  mov edx, dword ptr [ebp-14]
:00423932 668B45D4                mov ax, word ptr [ebp-2C]
:00423936 668902                  mov word ptr [edx], ax
:00423939 EB11                    jmp 0042394C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042392D(C)
|
:0042393B 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042393E 894DEC                  mov dword ptr [ebp-14], ecx
:00423941 8B55CC                  mov edx, dword ptr [ebp-34]
:00423944 83EA02                  sub edx, 00000002
:00423947 8955CC                  mov dword ptr [ebp-34], edx
:0042394A EBA6                    jmp 004238F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423939(U)
|
:0042394C 8B45C8                  mov eax, dword ptr [ebp-38]
:0042394F 83C002                  add eax, 00000002
:00423952 8945C8                  mov dword ptr [ebp-38], eax
:00423955 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423958 81C1204E0000            add ecx, 00004E20
:0042395E 394DC8                  cmp dword ptr [ebp-38], ecx
:00423961 7206                    jb 00423969
:00423963 8B55F8                  mov edx, dword ptr [ebp-08]
:00423966 8955C8                  mov dword ptr [ebp-38], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004237EF(C), :0042387B(C), :00423961(C)
|
:00423969 E931FEFFFF              jmp 0042379F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004237B7(C)
|
:0042396E 8B45F0                  mov eax, dword ptr [ebp-10]
:00423971 83C002                  add eax, 00000002
:00423974 8945F0                  mov dword ptr [ebp-10], eax
:00423977 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042397A 81C1204E0000            add ecx, 00004E20
:00423980 394DF0                  cmp dword ptr [ebp-10], ecx
:00423983 7206                    jb 0042398B
:00423985 8B55F8                  mov edx, dword ptr [ebp-08]
:00423988 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423983(C)
|
:0042398B E9B6FDFFFF              jmp 00423746

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042374C(C)
|
:00423990 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423741(U), :00423834(U)
|
:00423992 5E                      pop esi
:00423993 8BE5                    mov esp, ebp
:00423995 5D                      pop ebp
:00423996 C3                      ret



* Referenced by a CALL at Address:
|:00423899   
|
:00423997 55                      push ebp
:00423998 8BEC                    mov ebp, esp
:0042399A 83EC10                  sub esp, 00000010
:0042399D 6A01                    push 00000001
:0042399F 668B4514                mov ax, word ptr [ebp+14]
:004239A3 50                      push eax
:004239A4 668B4D10                mov cx, word ptr [ebp+10]
:004239A8 51                      push ecx
:004239A9 6A00                    push 00000000
:004239AB 668B550C                mov dx, word ptr [ebp+0C]
:004239AF 52                      push edx
:004239B0 668B4508                mov ax, word ptr [ebp+08]
:004239B4 50                      push eax
:004239B5 E885DCFFFF              call 0042163F
:004239BA 83C418                  add esp, 00000018
:004239BD 25FFFF0000              and eax, 0000FFFF
:004239C2 85C0                    test eax, eax
:004239C4 7409                    je 004239CF
:004239C6 660DFFFF                or ax, FFFF
:004239CA E951010000              jmp 00423B20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004239C4(C)
|
:004239CF 837D1800                cmp dword ptr [ebp+18], 00000000
:004239D3 7509                    jne 004239DE
:004239D5 66B80100                mov ax, 0001
:004239D9 E942010000              jmp 00423B20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004239D3(C)
|
:004239DE C745FCF8A84800          mov [ebp-04], 0048A8F8
:004239E5 66C745F00000            mov [ebp-10], 0000
:004239EB EB15                    jmp 00423A02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423A40(U), :00423AAB(U), :00423B17(U)
|
:004239ED 668B4DF0                mov cx, word ptr [ebp-10]
:004239F1 6683C101                add cx, 0001
:004239F5 66894DF0                mov word ptr [ebp-10], cx
:004239F9 8B55FC                  mov edx, dword ptr [ebp-04]
:004239FC 83C240                  add edx, 00000040
:004239FF 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004239EB(U)
|
:00423A02 8B45F0                  mov eax, dword ptr [ebp-10]
:00423A05 25FFFF0000              and eax, 0000FFFF
:00423A0A 3D80000000              cmp eax, 00000080
:00423A0F 0F8D07010000            jnl 00423B1C
:00423A15 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00423A18 81E1FFFF0000            and ecx, 0000FFFF
:00423A1E 33D2                    xor edx, edx
:00423A20 668B15E8A84800          mov dx, word ptr [0048A8E8]
:00423A27 3BCA                    cmp ecx, edx
:00423A29 7415                    je 00423A40
:00423A2B 8B45F0                  mov eax, dword ptr [ebp-10]
:00423A2E 25FFFF0000              and eax, 0000FFFF
:00423A33 33C9                    xor ecx, ecx
:00423A35 668B0D845A4800          mov cx, word ptr [00485A84]
:00423A3C 3BC1                    cmp eax, ecx
:00423A3E 7502                    jne 00423A42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423A29(C)
|
:00423A40 EBAB                    jmp 004239ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423A3E(C)
|
:00423A42 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423A45 E8A6B9FEFF              call 0040F3F0
:00423A4A 25FFFF0000              and eax, 0000FFFF
:00423A4F 2500800000              and eax, 00008000
:00423A54 85C0                    test eax, eax
:00423A56 0F84BB000000            je 00423B17
:00423A5C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423A5F E82C170000              call 00425190
:00423A64 668945F8                mov word ptr [ebp-08], ax
:00423A68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423A6B E860170000              call 004251D0
:00423A70 668945F4                mov word ptr [ebp-0C], ax
:00423A74 8B55F8                  mov edx, dword ptr [ebp-08]
:00423A77 81E2FFFF0000            and edx, 0000FFFF
:00423A7D 83FA5A                  cmp edx, 0000005A
:00423A80 7F29                    jg 00423AAB
:00423A82 8B45F8                  mov eax, dword ptr [ebp-08]
:00423A85 25FFFF0000              and eax, 0000FFFF
:00423A8A 83F808                  cmp eax, 00000008
:00423A8D 7C1C                    jl 00423AAB
:00423A8F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00423A92 81E1FFFF0000            and ecx, 0000FFFF
:00423A98 83F95A                  cmp ecx, 0000005A
:00423A9B 7F0E                    jg 00423AAB
:00423A9D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00423AA0 81E2FFFF0000            and edx, 0000FFFF
:00423AA6 83FA08                  cmp edx, 00000008
:00423AA9 7D05                    jge 00423AB0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423A80(C), :00423A8D(C), :00423A9B(C)
|
:00423AAB E93DFFFFFF              jmp 004239ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423AA9(C)
|
:00423AB0 8B45F8                  mov eax, dword ptr [ebp-08]
:00423AB3 25FFFF0000              and eax, 0000FFFF
:00423AB8 83E801                  sub eax, 00000001
:00423ABB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423ABE 81E1FFFF0000            and ecx, 0000FFFF
:00423AC4 3BC1                    cmp eax, ecx
:00423AC6 7F4F                    jg 00423B17
:00423AC8 8B5508                  mov edx, dword ptr [ebp+08]
:00423ACB 81E2FFFF0000            and edx, 0000FFFF
:00423AD1 8B45F8                  mov eax, dword ptr [ebp-08]
:00423AD4 25FFFF0000              and eax, 0000FFFF
:00423AD9 83C002                  add eax, 00000002
:00423ADC 3BD0                    cmp edx, eax
:00423ADE 7D37                    jge 00423B17
:00423AE0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00423AE3 81E1FFFF0000            and ecx, 0000FFFF
:00423AE9 83E901                  sub ecx, 00000001
:00423AEC 8B550C                  mov edx, dword ptr [ebp+0C]
:00423AEF 81E2FFFF0000            and edx, 0000FFFF
:00423AF5 3BCA                    cmp ecx, edx
:00423AF7 7F1E                    jg 00423B17
:00423AF9 8B450C                  mov eax, dword ptr [ebp+0C]
:00423AFC 25FFFF0000              and eax, 0000FFFF
:00423B01 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00423B04 81E1FFFF0000            and ecx, 0000FFFF
:00423B0A 83C102                  add ecx, 00000002
:00423B0D 3BC1                    cmp eax, ecx
:00423B0F 7D06                    jge 00423B17
:00423B11 660DFFFF                or ax, FFFF
:00423B15 EB09                    jmp 00423B20

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423A56(C), :00423AC6(C), :00423ADE(C), :00423AF7(C), :00423B0F(C)
|
:00423B17 E9D1FEFFFF              jmp 004239ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423A0F(C)
|
:00423B1C 66B80100                mov ax, 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004239CA(U), :004239D9(U), :00423B15(U)
|
:00423B20 8BE5                    mov esp, ebp
:00423B22 5D                      pop ebp
:00423B23 C3                      ret



* Referenced by a CALL at Addresses:
|:00423CDE   , :00424B4A   
|
:00423B24 55                      push ebp
:00423B25 8BEC                    mov ebp, esp
:00423B27 83EC08                  sub esp, 00000008
:00423B2A 66C745FCFFFF            mov [ebp-04], FFFF
:00423B30 33C0                    xor eax, eax
:00423B32 66A138C94800            mov ax, word ptr [0048C938]
:00423B38 85C0                    test eax, eax
:00423B3A 754D                    jne 00423B89
:00423B3C 833D3C8B4A0002          cmp dword ptr [004A8B3C], 00000002
:00423B43 7444                    je 00423B89
:00423B45 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423B48 81E1FFFF0000            and ecx, 0000FFFF
:00423B4E 894DF8                  mov dword ptr [ebp-08], ecx
:00423B51 837DF800                cmp dword ptr [ebp-08], 00000000
:00423B55 7408                    je 00423B5F
:00423B57 837DF801                cmp dword ptr [ebp-08], 00000001
:00423B5B 7414                    je 00423B71
:00423B5D EB2A                    jmp 00423B89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423B55(C)
|
:00423B5F 6A00                    push 00000000
:00423B61 B9F8134800              mov ecx, 004813F8
:00423B66 E8F7B0FEFF              call 0040EC62
:00423B6B 668945FC                mov word ptr [ebp-04], ax
:00423B6F EB18                    jmp 00423B89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423B5B(C)
|
:00423B71 8B550C                  mov edx, dword ptr [ebp+0C]
:00423B74 81E2FFFF0000            and edx, 0000FFFF
:00423B7A 52                      push edx
:00423B7B B9F8134800              mov ecx, 004813F8
:00423B80 E816B0FEFF              call 0040EB9B
:00423B85 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423B3A(C), :00423B43(C), :00423B5D(U), :00423B6F(U)
|
:00423B89 33C0                    xor eax, eax
:00423B8B 8BE5                    mov esp, ebp
:00423B8D 5D                      pop ebp
:00423B8E C3                      ret



* Referenced by a CALL at Address:
|:00423BB8   
|
:00423B8F 55                      push ebp
:00423B90 8BEC                    mov ebp, esp
:00423B92 E841EFFFFF              call 00422AD8
:00423B97 25FFFF0000              and eax, 0000FFFF
:00423B9C 85C0                    test eax, eax
:00423B9E 7511                    jne 00423BB1
:00423BA0 E8E4330000              call 00426F89
:00423BA5 83F801                  cmp eax, 00000001
:00423BA8 7507                    jne 00423BB1
:00423BAA B801000000              mov eax, 00000001
:00423BAF EB02                    jmp 00423BB3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423B9E(C), :00423BA8(C)
|
:00423BB1 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423BAF(U)
|
:00423BB3 5D                      pop ebp
:00423BB4 C3                      ret



* Referenced by a CALL at Addresses:
|:00423C2A   , :00423EDD   , :00424A93   , :00424C6E   
|
:00423BB5 55                      push ebp
:00423BB6 8BEC                    mov ebp, esp
:00423BB8 E8D2FFFFFF              call 00423B8F
:00423BBD 50                      push eax
:00423BBE E84AD4FFFF              call 0042100D
:00423BC3 83C404                  add esp, 00000004
:00423BC6 5D                      pop ebp
:00423BC7 C3                      ret



* Referenced by a CALL at Addresses:
|:00423D86   , :00423E50   , :00423E68   , :00424BE8   , :00424C28   
|:00424C8F   , :00424CA2   , :0045AB3A   , :0045AB4F   
|
:00423BC8 55                      push ebp
:00423BC9 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00423BCB 6A04                    push 00000004
:00423BCD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423BD0 E8FB2CFFFF              call 004168D0
:00423BD5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423BD8 E8B3170000              call 00425390
:00423BDD 50                      push eax
:00423BDE E8D1EBFFFF              call 004227B4
:00423BE3 83C404                  add esp, 00000004
:00423BE6 68FFFF0000              push 0000FFFF
:00423BEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423BEE E87D170000              call 00425370
:00423BF3 5D                      pop ebp
:00423BF4 C3                      ret



* Referenced by a CALL at Address:
|:00424B8F   
|
:00423BF5 55                      push ebp
:00423BF6 8BEC                    mov ebp, esp
:00423BF8 E88C330000              call 00426F89
:00423BFD 83F801                  cmp eax, 00000001
:00423C00 752D                    jne 00423C2F
:00423C02 A17CDF4A00              mov eax, dword ptr [004ADF7C]
:00423C07 3B05388B4A00            cmp eax, dword ptr [004A8B38]
:00423C0D 7420                    je 00423C2F
:00423C0F 8B0D7CDF4A00            mov ecx, dword ptr [004ADF7C]
:00423C15 890D388B4A00            mov dword ptr [004A8B38], ecx
:00423C1B E811000000              call 00423C31
:00423C20 25FFFF0000              and eax, 0000FFFF
:00423C25 83F801                  cmp eax, 00000001
:00423C28 7505                    jne 00423C2F
:00423C2A E886FFFFFF              call 00423BB5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423C00(C), :00423C0D(C), :00423C28(C)
|
:00423C2F 5D                      pop ebp
:00423C30 C3                      ret



* Referenced by a CALL at Address:
|:00423C1B   
|
:00423C31 55                      push ebp
:00423C32 8BEC                    mov ebp, esp
:00423C34 83EC18                  sub esp, 00000018
:00423C37 66C745FC0000            mov [ebp-04], 0000
:00423C3D 66C745EC0000            mov [ebp-14], 0000
:00423C43 C745F800000000          mov [ebp-08], 00000000
:00423C4A 33C0                    xor eax, eax
:00423C4C 66A1845A4800            mov ax, word ptr [00485A84]
:00423C52 80E47F                  and ah, 7F
:00423C55 668945EC                mov word ptr [ebp-14], ax
:00423C59 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00423C5C 81E1FFFF0000            and ecx, 0000FFFF
:00423C62 81F980000000            cmp ecx, 00000080
:00423C68 7D10                    jge 00423C7A
:00423C6A 668B55EC                mov dx, word ptr [ebp-14]
:00423C6E 52                      push edx
:00423C6F E84ED3FFFF              call 00420FC2
:00423C74 83C404                  add esp, 00000004
:00423C77 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423C68(C)
|
:00423C7A 833D7CDF4A0001          cmp dword ptr [004ADF7C], 00000001
:00423C81 0F8585000000            jne 00423D0C
:00423C87 E84CEEFFFF              call 00422AD8
:00423C8C 25FFFF0000              and eax, 0000FFFF
:00423C91 85C0                    test eax, eax
:00423C93 7572                    jne 00423D07
:00423C95 8B45FC                  mov eax, dword ptr [ebp-04]
:00423C98 25FFFF0000              and eax, 0000FFFF
:00423C9D 83F801                  cmp eax, 00000001
:00423CA0 7509                    jne 00423CAB
:00423CA2 66B80100                mov ax, 0001
:00423CA6 E9F1000000              jmp 00423D9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423CA0(C)
|
:00423CAB 33C9                    xor ecx, ecx
:00423CAD 668B0D845A4800          mov cx, word ptr [00485A84]
:00423CB4 81F9FFFF0000            cmp ecx, 0000FFFF
:00423CBA 744B                    je 00423D07
:00423CBC 837DF800                cmp dword ptr [ebp-08], 00000000
:00423CC0 7445                    je 00423D07
:00423CC2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423CC5 E886130000              call 00425050
:00423CCA 50                      push eax
:00423CCB E8E6D0FFFF              call 00420DB6
:00423CD0 83C404                  add esp, 00000004
:00423CD3 668945F0                mov word ptr [ebp-10], ax
:00423CD7 668B55F0                mov dx, word ptr [ebp-10]
:00423CDB 52                      push edx
:00423CDC 6A01                    push 00000001
:00423CDE E841FEFFFF              call 00423B24
:00423CE3 83C408                  add esp, 00000008
:00423CE6 3DFFFF0000              cmp eax, 0000FFFF
:00423CEB 751A                    jne 00423D07
:00423CED 6A00                    push 00000000
:00423CEF 6A00                    push 00000000
:00423CF1 8B45F0                  mov eax, dword ptr [ebp-10]
:00423CF4 25FFFF0000              and eax, 0000FFFF
:00423CF9 50                      push eax

* Possible StringData Ref from Data Obj ->"KKK "
                                  |
:00423CFA 68207A4700              push 00477A20
:00423CFF E8D5340000              call 004271D9
:00423D04 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423C93(C), :00423CBA(C), :00423CC0(C), :00423CEB(C)
|
:00423D07 E98D000000              jmp 00423D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423C81(C)
|
:00423D0C 833D7CDF4A0002          cmp dword ptr [004ADF7C], 00000002
:00423D13 0F8580000000            jne 00423D99
:00423D19 E8B9D2FFFF              call 00420FD7
:00423D1E 8945F4                  mov dword ptr [ebp-0C], eax
:00423D21 837DF800                cmp dword ptr [ebp-08], 00000000
:00423D25 743D                    je 00423D64
:00423D27 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423D2A E821130000              call 00425050
:00423D2F 25FFFF0000              and eax, 0000FFFF
:00423D34 50                      push eax
:00423D35 E8EDD6FDFF              call 00401427
:00423D3A 83C404                  add esp, 00000004
:00423D3D 668945FC                mov word ptr [ebp-04], ax
:00423D41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423D44 81E1FFFF0000            and ecx, 0000FFFF
:00423D4A 81F9FF000000            cmp ecx, 000000FF
:00423D50 7D12                    jge 00423D64
:00423D52 8B55FC                  mov edx, dword ptr [ebp-04]
:00423D55 81E2FFFF0000            and edx, 0000FFFF
:00423D5B 52                      push edx
:00423D5C E89E310400              call 00466EFF
:00423D61 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423D25(C), :00423D50(C)
|
:00423D64 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00423D67 E8A4B6FEFF              call 0040F410
:00423D6C 25FFFF0000              and eax, 0000FFFF
:00423D71 8945E8                  mov dword ptr [ebp-18], eax
:00423D74 837DE800                cmp dword ptr [ebp-18], 00000000
:00423D78 7C1F                    jl 00423D99
:00423D7A 837DE801                cmp dword ptr [ebp-18], 00000001
:00423D7E 7E02                    jle 00423D82
:00423D80 EB17                    jmp 00423D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423D7E(C)
|
:00423D82 8B45F4                  mov eax, dword ptr [ebp-0C]
:00423D85 50                      push eax
:00423D86 E83DFEFFFF              call 00423BC8
:00423D8B 83C404                  add esp, 00000004
:00423D8E E8A9E6FFFF              call 0042243C
:00423D93 66B80100                mov ax, 0001
:00423D97 EB03                    jmp 00423D9C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423D07(U), :00423D13(C), :00423D78(C), :00423D80(U)
|
:00423D99 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423CA6(U), :00423D97(U)
|
:00423D9C 8BE5                    mov esp, ebp
:00423D9E 5D                      pop ebp
:00423D9F C3                      ret



* Referenced by a CALL at Address:
|:00424B2A   
|
:00423DA0 55                      push ebp
:00423DA1 8BEC                    mov ebp, esp
:00423DA3 83EC10                  sub esp, 00000010
:00423DA6 6A00                    push 00000000
:00423DA8 E815D2FFFF              call 00420FC2
:00423DAD 83C404                  add esp, 00000004
:00423DB0 8945FC                  mov dword ptr [ebp-04], eax
:00423DB3 66C745F80000            mov [ebp-08], 0000
:00423DB9 EB15                    jmp 00423DD0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423E18(U), :00423E70(U)
|
:00423DBB 668B45F8                mov ax, word ptr [ebp-08]
:00423DBF 66050100                add ax, 0001
:00423DC3 668945F8                mov word ptr [ebp-08], ax
:00423DC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423DCA 83C140                  add ecx, 00000040
:00423DCD 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423DB9(U)
|
:00423DD0 8B55F8                  mov edx, dword ptr [ebp-08]
:00423DD3 81E2FFFF0000            and edx, 0000FFFF
:00423DD9 81FA80000000            cmp edx, 00000080
:00423DDF 0F8D90000000            jnl 00423E75
:00423DE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423DE8 E803B6FEFF              call 0040F3F0
:00423DED 668945F4                mov word ptr [ebp-0C], ax
:00423DF1 8B45F4                  mov eax, dword ptr [ebp-0C]
:00423DF4 25FFFF0000              and eax, 0000FFFF
:00423DF9 2500800000              and eax, 00008000
:00423DFE 85C0                    test eax, eax
:00423E00 7416                    je 00423E18
:00423E02 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423E05 81E1FFFF0000            and ecx, 0000FFFF
:00423E0B 33D2                    xor edx, edx
:00423E0D 668B15E8A84800          mov dx, word ptr [0048A8E8]
:00423E14 3BCA                    cmp ecx, edx
:00423E16 7502                    jne 00423E1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E00(C)
|
:00423E18 EBA1                    jmp 00423DBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E16(C)
|
:00423E1A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423E1D E8EEB5FEFF              call 0040F410
:00423E22 25FFFF0000              and eax, 0000FFFF
:00423E27 8945F0                  mov dword ptr [ebp-10], eax
:00423E2A 837DF002                cmp dword ptr [ebp-10], 00000002
:00423E2E 7408                    je 00423E38
:00423E30 837DF005                cmp dword ptr [ebp-10], 00000005
:00423E34 7424                    je 00423E5A
:00423E36 EB2C                    jmp 00423E64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E2E(C)
|
:00423E38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423E3B E86D030000              call 004241AD
:00423E40 25FFFF0000              and eax, 0000FFFF
:00423E45 3DFFFF0000              cmp eax, 0000FFFF
:00423E4A 750C                    jne 00423E58
:00423E4C 8B45FC                  mov eax, dword ptr [ebp-04]
:00423E4F 50                      push eax
:00423E50 E873FDFFFF              call 00423BC8
:00423E55 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E4A(C)
|
:00423E58 EB16                    jmp 00423E70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E34(C)
|
:00423E5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423E5D E8CD040000              call 0042432F
:00423E62 EB0C                    jmp 00423E70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E36(U)
|
:00423E64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423E67 51                      push ecx
:00423E68 E85BFDFFFF              call 00423BC8
:00423E6D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423E58(U), :00423E62(U)
|
:00423E70 E946FFFFFF              jmp 00423DBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423DDF(C)
|
:00423E75 8BE5                    mov esp, ebp
:00423E77 5D                      pop ebp
:00423E78 C3                      ret



* Referenced by a CALL at Addresses:
|:00423ED8   , :00423F68   
|
:00423E79 55                      push ebp
:00423E7A 8BEC                    mov ebp, esp
:00423E7C 83EC08                  sub esp, 00000008
:00423E7F 6A00                    push 00000000
:00423E81 E83CD1FFFF              call 00420FC2
:00423E86 83C404                  add esp, 00000004
:00423E89 8945FC                  mov dword ptr [ebp-04], eax
:00423E8C 66C745F80000            mov [ebp-08], 0000
:00423E92 EB15                    jmp 00423EA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423EC9(U)
|
:00423E94 668B45F8                mov ax, word ptr [ebp-08]
:00423E98 66050100                add ax, 0001
:00423E9C 668945F8                mov word ptr [ebp-08], ax
:00423EA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423EA3 83C140                  add ecx, 00000040
:00423EA6 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E92(U)
|
:00423EA9 8B55F8                  mov edx, dword ptr [ebp-08]
:00423EAC 81E2FFFF0000            and edx, 0000FFFF
:00423EB2 81FA80000000            cmp edx, 00000080
:00423EB8 7D11                    jge 00423ECB
:00423EBA 6800200000              push 00002000
:00423EBF 6A00                    push 00000000
:00423EC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423EC4 E867130000              call 00425230
:00423EC9 EBC9                    jmp 00423E94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423EB8(C)
|
:00423ECB 8BE5                    mov esp, ebp
:00423ECD 5D                      pop ebp
:00423ECE C3                      ret



* Referenced by a CALL at Address:
|:00426F7D   
|
:00423ECF 55                      push ebp
:00423ED0 8BEC                    mov ebp, esp
:00423ED2 837D0800                cmp dword ptr [ebp+08], 00000000
:00423ED6 7505                    jne 00423EDD
:00423ED8 E89CFFFFFF              call 00423E79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423ED6(C)
|
:00423EDD E8D3FCFFFF              call 00423BB5
:00423EE2 5D                      pop ebp
:00423EE3 C3                      ret



* Referenced by a CALL at Address:
|:00424B07   
|
:00423EE4 55                      push ebp
:00423EE5 8BEC                    mov ebp, esp
:00423EE7 83EC28                  sub esp, 00000028
:00423EEA E832870400              call 0046C621
:00423EEF 50                      push eax
:00423EF0 E8A9E10300              call 0046209E
:00423EF5 83C404                  add esp, 00000004
:00423EF8 A10C784700              mov eax, dword ptr [0047780C]
:00423EFD A3A0EA4800              mov dword ptr [0048EAA0], eax
:00423F02 8B0D0C784700            mov ecx, dword ptr [0047780C]
:00423F08 890DA4EA4800            mov dword ptr [0048EAA4], ecx
:00423F0E E8C5EBFFFF              call 00422AD8
:00423F13 25FFFF0000              and eax, 0000FFFF
:00423F18 3DFFFF0000              cmp eax, 0000FFFF
:00423F1D 7409                    je 00423F28
:00423F1F E865300000              call 00426F89
:00423F24 85C0                    test eax, eax
:00423F26 751B                    jne 00423F43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423F1D(C)
|
:00423F28 8B150C784700            mov edx, dword ptr [0047780C]
:00423F2E 8915A4EA4800            mov dword ptr [0048EAA4], edx
:00423F34 B9D80C4B00              mov ecx, 004B0CD8
:00423F39 E81CC00300              call 0045FF5A
:00423F3E E9C9010000              jmp 0042410C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423F26(C)
|
:00423F43 66C705845A4800FFFF      mov word ptr [00485A84], FFFF
:00423F4C B980594800              mov ecx, 00485980
:00423F51 E830C2FFFF              call 00420186
:00423F56 668945E0                mov word ptr [ebp-20], ax
:00423F5A B980594800              mov ecx, 00485980
:00423F5F E851C2FFFF              call 004201B5
:00423F64 668945D8                mov word ptr [ebp-28], ax
:00423F68 E80CFFFFFF              call 00423E79
:00423F6D 33C0                    xor eax, eax
:00423F6F 66A17C5A4800            mov ax, word ptr [00485A7C]
:00423F75 85C0                    test eax, eax
:00423F77 0F8E8F010000            jle 0042410C
:00423F7D 668B0D7C5A4800          mov cx, word ptr [00485A7C]
:00423F84 66894DF4                mov word ptr [ebp-0C], cx
:00423F88 EB15                    jmp 00423F9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423FEC(U), :0042401E(U), :00424107(U)
|
:00423F8A 668B55F4                mov dx, word ptr [ebp-0C]
:00423F8E 6683EA01                sub dx, 0001
:00423F92 668955F4                mov word ptr [ebp-0C], dx
:00423F96 8B45FC                  mov eax, dword ptr [ebp-04]
:00423F99 83E840                  sub eax, 00000040
:00423F9C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423F88(U)
|
:00423F9F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00423FA2 81E1FFFF0000            and ecx, 0000FFFF
:00423FA8 85C9                    test ecx, ecx
:00423FAA 0F845C010000            je 0042410C
:00423FB0 8B55F4                  mov edx, dword ptr [ebp-0C]
:00423FB3 81E2FFFF0000            and edx, 0000FFFF
:00423FB9 8B049554C94800          mov eax, dword ptr [4*edx+0048C954]
:00423FC0 8945FC                  mov dword ptr [ebp-04], eax
:00423FC3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423FC6 E825B4FEFF              call 0040F3F0
:00423FCB 668945EC                mov word ptr [ebp-14], ax
:00423FCF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423FD2 E879100000              call 00425050
:00423FD7 50                      push eax
:00423FD8 E8C7CDFFFF              call 00420DA4
:00423FDD 83C404                  add esp, 00000004
:00423FE0 25FFFF0000              and eax, 0000FFFF
:00423FE5 3D00300000              cmp eax, 00003000
:00423FEA 7502                    jne 00423FEE
:00423FEC EB9C                    jmp 00423F8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423FEA(C)
|
:00423FEE 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00423FF1 51                      push ecx
:00423FF2 8D55DC                  lea edx, dword ptr [ebp-24]
:00423FF5 52                      push edx
:00423FF6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423FF9 E812130000              call 00425310
:00423FFE 8B45DC                  mov eax, dword ptr [ebp-24]
:00424001 25FFFF0000              and eax, 0000FFFF
:00424006 3DFFFF0000              cmp eax, 0000FFFF
:0042400B 7516                    jne 00424023
:0042400D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424010 81E1FFFF0000            and ecx, 0000FFFF
:00424016 81F9FFFF0000            cmp ecx, 0000FFFF
:0042401C 7505                    jne 00424023
:0042401E E967FFFFFF              jmp 00423F8A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042400B(C), :0042401C(C)
|
:00424023 66C745F03000            mov [ebp-10], 0030
:00424029 66C745E84000            mov [ebp-18], 0040
:0042402F 0FBF55E0                movsx edx, word ptr [ebp-20]
:00424033 0FBF45DC                movsx eax, word ptr [ebp-24]
:00424037 3BD0                    cmp edx, eax
:00424039 0F8CC8000000            jl 00424107
:0042403F 0FBF4DE0                movsx ecx, word ptr [ebp-20]
:00424043 8B55DC                  mov edx, dword ptr [ebp-24]
:00424046 81E2FFFF0000            and edx, 0000FFFF
:0042404C 8B45F0                  mov eax, dword ptr [ebp-10]
:0042404F 25FFFF0000              and eax, 0000FFFF
:00424054 03D0                    add edx, eax
:00424056 0FBFD2                  movsx edx, dx
:00424059 3BCA                    cmp ecx, edx
:0042405B 0F8FA6000000            jg 00424107
:00424061 0FBF45D8                movsx eax, word ptr [ebp-28]
:00424065 0FBF4DF8                movsx ecx, word ptr [ebp-08]
:00424069 3BC1                    cmp eax, ecx
:0042406B 0F8C96000000            jl 00424107
:00424071 0FBF55D8                movsx edx, word ptr [ebp-28]
:00424075 0FBF45F8                movsx eax, word ptr [ebp-08]
:00424079 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042407C 81E1FFFF0000            and ecx, 0000FFFF
:00424082 03C1                    add eax, ecx
:00424084 3BD0                    cmp edx, eax
:00424086 7F7F                    jg 00424107
:00424088 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042408B E8C00F0000              call 00425050
:00424090 668945E4                mov word ptr [ebp-1C], ax
:00424094 668B55E4                mov dx, word ptr [ebp-1C]
:00424098 52                      push edx
:00424099 E88DECFFFF              call 00422D2B
:0042409E 83C404                  add esp, 00000004
:004240A1 668945E8                mov word ptr [ebp-18], ax
:004240A5 8B45E8                  mov eax, dword ptr [ebp-18]
:004240A8 25FFFF0000              and eax, 0000FFFF
:004240AD 3DFFFF0000              cmp eax, 0000FFFF
:004240B2 7502                    jne 004240B6
:004240B4 EB56                    jmp 0042410C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004240B2(C)
|
:004240B6 668B4DE4                mov cx, word ptr [ebp-1C]
:004240BA 51                      push ecx
:004240BB E86CCDFFFF              call 00420E2C
:004240C0 83C404                  add esp, 00000004
:004240C3 A3A0EA4800              mov dword ptr [0048EAA0], eax
:004240C8 668B55E4                mov dx, word ptr [ebp-1C]
:004240CC 52                      push edx
:004240CD E85ACDFFFF              call 00420E2C
:004240D2 83C404                  add esp, 00000004
:004240D5 A3A4EA4800              mov dword ptr [0048EAA4], eax
:004240DA 668B45E8                mov ax, word ptr [ebp-18]
:004240DE 66A3845A4800            mov word ptr [00485A84], ax
:004240E4 6800200000              push 00002000
:004240E9 6800200000              push 00002000
:004240EE 668B0D845A4800          mov cx, word ptr [00485A84]
:004240F5 51                      push ecx
:004240F6 E8C7CEFFFF              call 00420FC2
:004240FB 83C404                  add esp, 00000004
:004240FE 8BC8                    mov ecx, eax
:00424100 E82B110000              call 00425230
:00424105 EB05                    jmp 0042410C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424039(C), :0042405B(C), :0042406B(C), :00424086(C)
|
:00424107 E97EFEFFFF              jmp 00423F8A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423F3E(U), :00423F77(C), :00423FAA(C), :004240B4(U), :00424105(U)
|
:0042410C 8BE5                    mov esp, ebp
:0042410E 5D                      pop ebp
:0042410F C3                      ret



* Referenced by a CALL at Address:
|:00421DCD   
|
:00424110 55                      push ebp
:00424111 8BEC                    mov ebp, esp
:00424113 83EC08                  sub esp, 00000008
:00424116 894DF8                  mov dword ptr [ebp-08], ecx
:00424119 668B450C                mov ax, word ptr [ebp+0C]
:0042411D 662D4000                sub ax, 0040
:00424121 6689450C                mov word ptr [ebp+0C], ax
:00424125 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424128 E883110000              call 004252B0
:0042412D 668B4D0C                mov cx, word ptr [ebp+0C]
:00424131 51                      push ecx
:00424132 668B5508                mov dx, word ptr [ebp+08]
:00424136 52                      push edx
:00424137 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042413A E8A1110000              call 004252E0
:0042413F 8B4508                  mov eax, dword ptr [ebp+08]
:00424142 25FFFF0000              and eax, 0000FFFF
:00424147 8945FC                  mov dword ptr [ebp-04], eax
:0042414A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042414D 81E1FFFF0000            and ecx, 0000FFFF
:00424153 81E100800000            and ecx, 00008000
:00424159 85C9                    test ecx, ecx
:0042415B 7412                    je 0042416F
:0042415D 8B5508                  mov edx, dword ptr [ebp+08]
:00424160 81E2FFFF0000            and edx, 0000FFFF
:00424166 81EAFFFF0000            sub edx, 0000FFFF
:0042416C 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042415B(C)
|
:0042416F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424172 E809110000              call 00425280
:00424177 50                      push eax
:00424178 6A40                    push 00000040
:0042417A 6A30                    push 00000030
:0042417C 8B450C                  mov eax, dword ptr [ebp+0C]
:0042417F 25FFFF0000              and eax, 0000FFFF
:00424184 50                      push eax
:00424185 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424188 51                      push ecx
:00424189 E8597A0400              call 0046BBE7
:0042418E 83C414                  add esp, 00000014
:00424191 6A40                    push 00000040
:00424193 6A30                    push 00000030
:00424195 668B550C                mov dx, word ptr [ebp+0C]
:00424199 52                      push edx
:0042419A 668B4508                mov ax, word ptr [ebp+08]
:0042419E 50                      push eax
:0042419F E886D9FFFF              call 00421B2A
:004241A4 83C410                  add esp, 00000010
:004241A7 8BE5                    mov esp, ebp
:004241A9 5D                      pop ebp
:004241AA C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00423E3B   , :00424BD3   , :00424C13   , :00424C7A   , :0045AB25   
|
:004241AD 55                      push ebp
:004241AE 8BEC                    mov ebp, esp
:004241B0 83EC28                  sub esp, 00000028
:004241B3 894DDC                  mov dword ptr [ebp-24], ecx
:004241B6 8B45DC                  mov eax, dword ptr [ebp-24]
:004241B9 33C9                    xor ecx, ecx
:004241BB 668B08                  mov cx, word ptr [eax]
:004241BE 8B55DC                  mov edx, dword ptr [ebp-24]
:004241C1 33C0                    xor eax, eax
:004241C3 668B4202                mov ax, word ptr [edx+02]
:004241C7 3BC8                    cmp ecx, eax
:004241C9 7E17                    jle 004241E2
:004241CB 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004241CE 668B5102                mov dx, word ptr [ecx+02]
:004241D2 6683C201                add dx, 0001
:004241D6 8B45DC                  mov eax, dword ptr [ebp-24]
:004241D9 66895002                mov word ptr [eax+02], dx
:004241DD E90F010000              jmp 004242F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004241C9(C)
|
:004241E2 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004241E5 66C741020000            mov [ecx+02], 0000
:004241EB 66C745F40000            mov [ebp-0C], 0000
:004241F1 8B55DC                  mov edx, dword ptr [ebp-24]
:004241F4 33C0                    xor eax, eax
:004241F6 668B423C                mov ax, word ptr [edx+3C]
:004241FA 3DFFFF0000              cmp eax, 0000FFFF
:004241FF 7509                    jne 0042420A
:00424201 660DFFFF                or ax, FFFF
:00424205 E9EA000000              jmp 004242F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004241FF(C)
|
:0042420A 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042420D 33D2                    xor edx, edx
:0042420F 668B513E                mov dx, word ptr [ecx+3E]
:00424213 52                      push edx
:00424214 B930DA4A00              mov ecx, 004ADA30
:00424219 E880F3FEFF              call 0041359E
:0042421E 8945FC                  mov dword ptr [ebp-04], eax
:00424221 8B45FC                  mov eax, dword ptr [ebp-04]
:00424224 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004242EC(U)
|
:00424227 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0042422A 51                      push ecx
:0042422B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042422E 52                      push edx
:0042422F E85DDFFFFF              call 00422191
:00424234 83C408                  add esp, 00000008
:00424237 8845E8                  mov byte ptr [ebp-18], al
:0042423A 8B45E8                  mov eax, dword ptr [ebp-18]
:0042423D 25FF000000              and eax, 000000FF
:00424242 3DEF000000              cmp eax, 000000EF
:00424247 7509                    jne 00424252
:00424249 660DFFFF                or ax, FFFF
:0042424D E9A2000000              jmp 004242F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424247(C)
|
:00424252 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424255 81E1FFFF0000            and ecx, 0000FFFF
:0042425B 83F901                  cmp ecx, 00000001
:0042425E 7505                    jne 00424265
:00424260 E98C000000              jmp 004242F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042425E(C)
|
:00424265 8B55FC                  mov edx, dword ptr [ebp-04]
:00424268 8955F0                  mov dword ptr [ebp-10], edx
:0042426B 8B45F0                  mov eax, dword ptr [ebp-10]
:0042426E 83C001                  add eax, 00000001
:00424271 8945F0                  mov dword ptr [ebp-10], eax
:00424274 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00424277 81E1FF000000            and ecx, 000000FF
:0042427D 81E1F0000000            and ecx, 000000F0
:00424283 884DE0                  mov byte ptr [ebp-20], cl
:00424286 8B55E8                  mov edx, dword ptr [ebp-18]
:00424289 81E2FF000000            and edx, 000000FF
:0042428F 80E20F                  and dl, 0F
:00424292 8855E4                  mov byte ptr [ebp-1C], dl
:00424295 66C745F40100            mov [ebp-0C], 0001
:0042429B 8A45E0                  mov al, byte ptr [ebp-20]
:0042429E 8845D8                  mov byte ptr [ebp-28], al
:004242A1 807DD800                cmp byte ptr [ebp-28], 00
:004242A5 7408                    je 004242AF
:004242A7 807DD810                cmp byte ptr [ebp-28], 10
:004242AB 7412                    je 004242BF
:004242AD EB1C                    jmp 004242CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004242A5(C)
|
:004242AF 660FB64DE4              movzx cx, byte ptr [ebp-1C]
:004242B4 51                      push ecx
:004242B5 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004242B8 E897010000              call 00424454
:004242BD EB0C                    jmp 004242CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004242AB(C)
|
:004242BF 660FB655E4              movzx dx, byte ptr [ebp-1C]
:004242C4 8B45DC                  mov eax, dword ptr [ebp-24]
:004242C7 6689502E                mov word ptr [eax+2E], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004242AD(U), :004242BD(U)
|
:004242CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004242CE 51                      push ecx
:004242CF E8E7DEFFFF              call 004221BB
:004242D4 83C404                  add esp, 00000004
:004242D7 8945FC                  mov dword ptr [ebp-04], eax
:004242DA 8B55DC                  mov edx, dword ptr [ebp-24]
:004242DD 668B423E                mov ax, word ptr [edx+3E]
:004242E1 660345F8                add ax, word ptr [ebp-08]
:004242E5 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004242E8 6689413E                mov word ptr [ecx+3E], ax
:004242EC E936FFFFFF              jmp 00424227

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004241DD(U), :00424260(U)
|
:004242F1 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424205(U), :0042424D(U)
|
:004242F4 8BE5                    mov esp, ebp
:004242F6 5D                      pop ebp
:004242F7 C3                      ret



* Referenced by a CALL at Addresses:
|:00422FA6   , :0042317F   , :00423646   
|
:004242F8 55                      push ebp
:004242F9 8BEC                    mov ebp, esp
:004242FB 83EC08                  sub esp, 00000008
:004242FE 894DF8                  mov dword ptr [ebp-08], ecx
:00424301 668B4508                mov ax, word ptr [ebp+08]
:00424305 50                      push eax
:00424306 E860CAFFFF              call 00420D6B
:0042430B 83C404                  add esp, 00000004
:0042430E 8945FC                  mov dword ptr [ebp-04], eax
:00424311 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424314 8B55FC                  mov edx, dword ptr [ebp-04]
:00424317 895134                  mov dword ptr [ecx+34], edx
:0042431A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042431D 660FB64801              movzx cx, byte ptr [eax+01]
:00424322 8B55F8                  mov edx, dword ptr [ebp-08]
:00424325 66894A2A                mov word ptr [edx+2A], cx
:00424329 8BE5                    mov esp, ebp
:0042432B 5D                      pop ebp
:0042432C C20400                  ret 0004



* Referenced by a CALL at Address:
|:00423E5D   
|
:0042432F 55                      push ebp
:00424330 8BEC                    mov ebp, esp
:00424332 83EC10                  sub esp, 00000010
:00424335 894DF8                  mov dword ptr [ebp-08], ecx
:00424338 8B45F8                  mov eax, dword ptr [ebp-08]
:0042433B 33C9                    xor ecx, ecx
:0042433D 668B08                  mov cx, word ptr [eax]
:00424340 8B55F8                  mov edx, dword ptr [ebp-08]
:00424343 33C0                    xor eax, eax
:00424345 668B4202                mov ax, word ptr [edx+02]
:00424349 3BC8                    cmp ecx, eax
:0042434B 7E1A                    jle 00424367
:0042434D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424350 668B5102                mov dx, word ptr [ecx+02]
:00424354 6683C201                add dx, 0001
:00424358 8B45F8                  mov eax, dword ptr [ebp-08]
:0042435B 66895002                mov word ptr [eax+02], dx
:0042435F 6633C0                  xor ax, ax
:00424362 E9E9000000              jmp 00424450

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042434B(C)
|
:00424367 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042436A 66C741020000            mov [ecx+02], 0000
:00424370 8B55F8                  mov edx, dword ptr [ebp-08]
:00424373 668B4216                mov ax, word ptr [edx+16]
:00424377 66050100                add ax, 0001
:0042437B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042437E 66894116                mov word ptr [ecx+16], ax
:00424382 8B55F8                  mov edx, dword ptr [ebp-08]
:00424385 33C0                    xor eax, eax
:00424387 668B4218                mov ax, word ptr [edx+18]
:0042438B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042438E 33D2                    xor edx, edx
:00424390 668B5116                mov dx, word ptr [ecx+16]
:00424394 3BC2                    cmp eax, edx
:00424396 7E08                    jle 004243A0
:00424398 6633C0                  xor ax, ax
:0042439B E9B0000000              jmp 00424450

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424396(C)
|
:004243A0 8B45F8                  mov eax, dword ptr [ebp-08]
:004243A3 66C740160000            mov [eax+16], 0000
:004243A9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004243AC 66C741180200            mov [ecx+18], 0002
:004243B2 8B55F8                  mov edx, dword ptr [ebp-08]
:004243B5 33C0                    xor eax, eax
:004243B7 668B422C                mov ax, word ptr [edx+2C]
:004243BB 85C0                    test eax, eax
:004243BD 755C                    jne 0042441B
:004243BF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004243C2 33D2                    xor edx, edx
:004243C4 668B512E                mov dx, word ptr [ecx+2E]
:004243C8 8955F4                  mov dword ptr [ebp-0C], edx
:004243CB 837DF400                cmp dword ptr [ebp-0C], 00000000
:004243CF 740E                    je 004243DF
:004243D1 837DF401                cmp dword ptr [ebp-0C], 00000001
:004243D5 7413                    je 004243EA
:004243D7 837DF402                cmp dword ptr [ebp-0C], 00000002
:004243DB 7418                    je 004243F5
:004243DD EB21                    jmp 00424400

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004243CF(C)
|
:004243DF 8B45F8                  mov eax, dword ptr [ebp-08]
:004243E2 66C7401C0200            mov [eax+1C], 0002
:004243E8 EB1F                    jmp 00424409

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004243D5(C)
|
:004243EA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004243ED 66C7411C0300            mov [ecx+1C], 0003
:004243F3 EB14                    jmp 00424409

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004243DB(C)
|
:004243F5 8B55F8                  mov edx, dword ptr [ebp-08]
:004243F8 66C7421C0000            mov [edx+1C], 0000
:004243FE EB09                    jmp 00424409

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004243DD(U)
|
:00424400 8B45F8                  mov eax, dword ptr [ebp-08]
:00424403 66C7401C0100            mov [eax+1C], 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004243E8(U), :004243F3(U), :004243FE(U)
|
:00424409 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042440C 668B511C                mov dx, word ptr [ecx+1C]
:00424410 52                      push edx
:00424411 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424414 E83B000000              call 00424454
:00424419 EB32                    jmp 0042444D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004243BD(C)
|

* Possible Reference to String Resource ID=00013: ""
                                  |
:0042441B 6A0D                    push 0000000D
:0042441D E893DC0300              call 004620B5
:00424422 83C404                  add esp, 00000004
:00424425 8845FC                  mov byte ptr [ebp-04], al
:00424428 8B45FC                  mov eax, dword ptr [ebp-04]
:0042442B 25FF000000              and eax, 000000FF
:00424430 83F808                  cmp eax, 00000008
:00424433 7D06                    jge 0042443B
:00424435 C645F303                mov [ebp-0D], 03
:00424439 EB06                    jmp 00424441

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424433(C)
|
:0042443B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042443E 884DF3                  mov byte ptr [ebp-0D], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424439(U)
|
:00424441 660FB655F3              movzx dx, byte ptr [ebp-0D]
:00424446 8B45F8                  mov eax, dword ptr [ebp-08]
:00424449 6689502A                mov word ptr [eax+2A], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424419(U)
|
:0042444D 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424362(U), :0042439B(U)
|
:00424450 8BE5                    mov esp, ebp
:00424452 5D                      pop ebp
:00424453 C3                      ret



* Referenced by a CALL at Addresses:
|:004242B8   , :00424414   
|
:00424454 55                      push ebp
:00424455 8BEC                    mov ebp, esp
:00424457 83EC0C                  sub esp, 0000000C
:0042445A 894DF4                  mov dword ptr [ebp-0C], ecx
:0042445D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00424460 668B481A                mov cx, word ptr [eax+1A]
:00424464 6683C101                add cx, 0001
:00424468 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042446B 66894A1A                mov word ptr [edx+1A], cx
:0042446F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00424472 8B4834                  mov ecx, dword ptr [eax+34]
:00424475 33D2                    xor edx, edx
:00424477 8A11                    mov dl, byte ptr [ecx]
:00424479 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042447C 33C9                    xor ecx, ecx
:0042447E 668B481A                mov cx, word ptr [eax+1A]
:00424482 3BD1                    cmp edx, ecx
:00424484 7F09                    jg 0042448F
:00424486 8B55F4                  mov edx, dword ptr [ebp-0C]
:00424489 66C7421A0000            mov [edx+1A], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424484(C)
|
:0042448F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00424492 8B4834                  mov ecx, dword ptr [eax+34]
:00424495 8B55F4                  mov edx, dword ptr [ebp-0C]
:00424498 33C0                    xor eax, eax
:0042449A 668B421A                mov ax, word ptr [edx+1A]
:0042449E 660FB64C0101            movzx cx, byte ptr [ecx+eax+01]
:004244A4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004244A7 66894A2A                mov word ptr [edx+2A], cx
:004244AB 8B45F4                  mov eax, dword ptr [ebp-0C]
:004244AE 668B4804                mov cx, word ptr [eax+04]
:004244B2 66894DFC                mov word ptr [ebp-04], cx
:004244B6 8B55F4                  mov edx, dword ptr [ebp-0C]
:004244B9 668B4206                mov ax, word ptr [edx+06]
:004244BD 668945F8                mov word ptr [ebp-08], ax
:004244C1 668B4D08                mov cx, word ptr [ebp+08]
:004244C5 51                      push ecx
:004244C6 8B55F4                  mov edx, dword ptr [ebp-0C]
:004244C9 668B420C                mov ax, word ptr [edx+0C]
:004244CD 50                      push eax
:004244CE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004244D1 668B510A                mov dx, word ptr [ecx+0A]
:004244D5 52                      push edx
:004244D6 8D45F8                  lea eax, dword ptr [ebp-08]
:004244D9 50                      push eax
:004244DA 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004244DD 51                      push ecx
:004244DE E8B0E0FFFF              call 00422593
:004244E3 83C414                  add esp, 00000014
:004244E6 25FFFF0000              and eax, 0000FFFF
:004244EB 3DFFFF0000              cmp eax, 0000FFFF
:004244F0 7428                    je 0042451A
:004244F2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004244F5 668B45FC                mov ax, word ptr [ebp-04]
:004244F9 66894204                mov word ptr [edx+04], ax
:004244FD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424500 668B55F8                mov dx, word ptr [ebp-08]
:00424504 66895106                mov word ptr [ecx+06], dx
:00424508 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042450B 668B4D08                mov cx, word ptr [ebp+08]
:0042450F 6689482E                mov word ptr [eax+2E], cx
:00424513 B801000000              mov eax, 00000001
:00424518 EB02                    jmp 0042451C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004244F0(C)
|
:0042451A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424518(U)
|
:0042451C 8BE5                    mov esp, ebp
:0042451E 5D                      pop ebp
:0042451F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004110AB   , :004248FC   
|
:00424522 55                      push ebp
:00424523 8BEC                    mov ebp, esp
:00424525 83EC08                  sub esp, 00000008
:00424528 894DF8                  mov dword ptr [ebp-08], ecx
:0042452B 8B4508                  mov eax, dword ptr [ebp+08]
:0042452E 8945FC                  mov dword ptr [ebp-04], eax
:00424531 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424534 8B55FC                  mov edx, dword ptr [ebp-04]
:00424537 668B02                  mov ax, word ptr [edx]
:0042453A 668901                  mov word ptr [ecx], ax
:0042453D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424540 83C102                  add ecx, 00000002
:00424543 894DFC                  mov dword ptr [ebp-04], ecx
:00424546 8B55F8                  mov edx, dword ptr [ebp-08]
:00424549 8B45FC                  mov eax, dword ptr [ebp-04]
:0042454C 668B08                  mov cx, word ptr [eax]
:0042454F 66894A02                mov word ptr [edx+02], cx
:00424553 8B55FC                  mov edx, dword ptr [ebp-04]
:00424556 83C202                  add edx, 00000002
:00424559 8955FC                  mov dword ptr [ebp-04], edx
:0042455C 8B45F8                  mov eax, dword ptr [ebp-08]
:0042455F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424562 668B11                  mov dx, word ptr [ecx]
:00424565 66895004                mov word ptr [eax+04], dx
:00424569 8B45FC                  mov eax, dword ptr [ebp-04]
:0042456C 83C002                  add eax, 00000002
:0042456F 8945FC                  mov dword ptr [ebp-04], eax
:00424572 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424575 8B55FC                  mov edx, dword ptr [ebp-04]
:00424578 668B02                  mov ax, word ptr [edx]
:0042457B 66894106                mov word ptr [ecx+06], ax
:0042457F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424582 83C102                  add ecx, 00000002
:00424585 894DFC                  mov dword ptr [ebp-04], ecx
:00424588 8B55F8                  mov edx, dword ptr [ebp-08]
:0042458B 8B45FC                  mov eax, dword ptr [ebp-04]
:0042458E 668B08                  mov cx, word ptr [eax]
:00424591 66894A08                mov word ptr [edx+08], cx
:00424595 8B55FC                  mov edx, dword ptr [ebp-04]
:00424598 83C202                  add edx, 00000002
:0042459B 8955FC                  mov dword ptr [ebp-04], edx
:0042459E 8B45F8                  mov eax, dword ptr [ebp-08]
:004245A1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004245A4 668B11                  mov dx, word ptr [ecx]
:004245A7 6689500A                mov word ptr [eax+0A], dx
:004245AB 8B45FC                  mov eax, dword ptr [ebp-04]
:004245AE 83C002                  add eax, 00000002
:004245B1 8945FC                  mov dword ptr [ebp-04], eax
:004245B4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004245B7 8B55FC                  mov edx, dword ptr [ebp-04]
:004245BA 668B02                  mov ax, word ptr [edx]
:004245BD 6689410C                mov word ptr [ecx+0C], ax
:004245C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004245C4 83C102                  add ecx, 00000002
:004245C7 894DFC                  mov dword ptr [ebp-04], ecx
:004245CA 8B55F8                  mov edx, dword ptr [ebp-08]
:004245CD 8B45FC                  mov eax, dword ptr [ebp-04]
:004245D0 668B08                  mov cx, word ptr [eax]
:004245D3 66894A0E                mov word ptr [edx+0E], cx
:004245D7 8B55FC                  mov edx, dword ptr [ebp-04]
:004245DA 83C202                  add edx, 00000002
:004245DD 8955FC                  mov dword ptr [ebp-04], edx
:004245E0 8B45F8                  mov eax, dword ptr [ebp-08]
:004245E3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004245E6 668B11                  mov dx, word ptr [ecx]
:004245E9 66895016                mov word ptr [eax+16], dx
:004245ED 8B45FC                  mov eax, dword ptr [ebp-04]
:004245F0 83C002                  add eax, 00000002
:004245F3 8945FC                  mov dword ptr [ebp-04], eax
:004245F6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004245F9 8B55FC                  mov edx, dword ptr [ebp-04]
:004245FC 668B02                  mov ax, word ptr [edx]
:004245FF 66894118                mov word ptr [ecx+18], ax
:00424603 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424606 83C102                  add ecx, 00000002
:00424609 894DFC                  mov dword ptr [ebp-04], ecx
:0042460C 8B55F8                  mov edx, dword ptr [ebp-08]
:0042460F 8B45FC                  mov eax, dword ptr [ebp-04]
:00424612 668B08                  mov cx, word ptr [eax]
:00424615 66894A1A                mov word ptr [edx+1A], cx
:00424619 8B55FC                  mov edx, dword ptr [ebp-04]
:0042461C 83C202                  add edx, 00000002
:0042461F 8955FC                  mov dword ptr [ebp-04], edx
:00424622 8B45F8                  mov eax, dword ptr [ebp-08]
:00424625 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424628 668B11                  mov dx, word ptr [ecx]
:0042462B 6689501C                mov word ptr [eax+1C], dx
:0042462F 8B45FC                  mov eax, dword ptr [ebp-04]
:00424632 83C002                  add eax, 00000002
:00424635 8945FC                  mov dword ptr [ebp-04], eax
:00424638 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042463B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042463E 668B02                  mov ax, word ptr [edx]
:00424641 66894128                mov word ptr [ecx+28], ax
:00424645 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424648 83C102                  add ecx, 00000002
:0042464B 894DFC                  mov dword ptr [ebp-04], ecx
:0042464E 8B55F8                  mov edx, dword ptr [ebp-08]
:00424651 8B45FC                  mov eax, dword ptr [ebp-04]
:00424654 668B08                  mov cx, word ptr [eax]
:00424657 66894A2C                mov word ptr [edx+2C], cx
:0042465B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042465E 83C202                  add edx, 00000002
:00424661 8955FC                  mov dword ptr [ebp-04], edx
:00424664 8B45F8                  mov eax, dword ptr [ebp-08]
:00424667 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042466A 668B11                  mov dx, word ptr [ecx]
:0042466D 6689502E                mov word ptr [eax+2E], dx
:00424671 8B45FC                  mov eax, dword ptr [ebp-04]
:00424674 83C002                  add eax, 00000002
:00424677 8945FC                  mov dword ptr [ebp-04], eax
:0042467A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042467D 8B55FC                  mov edx, dword ptr [ebp-04]
:00424680 668B02                  mov ax, word ptr [edx]
:00424683 66894130                mov word ptr [ecx+30], ax
:00424687 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042468A 83C102                  add ecx, 00000002
:0042468D 894DFC                  mov dword ptr [ebp-04], ecx
:00424690 8B55F8                  mov edx, dword ptr [ebp-08]
:00424693 8B45FC                  mov eax, dword ptr [ebp-04]
:00424696 668B08                  mov cx, word ptr [eax]
:00424699 66894A38                mov word ptr [edx+38], cx
:0042469D 8B55FC                  mov edx, dword ptr [ebp-04]
:004246A0 83C202                  add edx, 00000002
:004246A3 8955FC                  mov dword ptr [ebp-04], edx
:004246A6 8B45F8                  mov eax, dword ptr [ebp-08]
:004246A9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004246AC 668B11                  mov dx, word ptr [ecx]
:004246AF 6689503A                mov word ptr [eax+3A], dx
:004246B3 8B45FC                  mov eax, dword ptr [ebp-04]
:004246B6 83C002                  add eax, 00000002
:004246B9 8945FC                  mov dword ptr [ebp-04], eax
:004246BC 8B45FC                  mov eax, dword ptr [ebp-04]
:004246BF 8BE5                    mov esp, ebp
:004246C1 5D                      pop ebp
:004246C2 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004118A8   
|
:004246C5 55                      push ebp
:004246C6 8BEC                    mov ebp, esp
:004246C8 83EC08                  sub esp, 00000008
:004246CB 894DF8                  mov dword ptr [ebp-08], ecx
:004246CE 8B4508                  mov eax, dword ptr [ebp+08]
:004246D1 8945FC                  mov dword ptr [ebp-04], eax
:004246D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004246D7 8B55F8                  mov edx, dword ptr [ebp-08]
:004246DA 668B02                  mov ax, word ptr [edx]
:004246DD 668901                  mov word ptr [ecx], ax
:004246E0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004246E3 83C102                  add ecx, 00000002
:004246E6 894DFC                  mov dword ptr [ebp-04], ecx
:004246E9 8B55FC                  mov edx, dword ptr [ebp-04]
:004246EC 8B45F8                  mov eax, dword ptr [ebp-08]
:004246EF 668B4802                mov cx, word ptr [eax+02]
:004246F3 66890A                  mov word ptr [edx], cx
:004246F6 8B55FC                  mov edx, dword ptr [ebp-04]
:004246F9 83C202                  add edx, 00000002
:004246FC 8955FC                  mov dword ptr [ebp-04], edx
:004246FF 8B45FC                  mov eax, dword ptr [ebp-04]
:00424702 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424705 668B5104                mov dx, word ptr [ecx+04]
:00424709 668910                  mov word ptr [eax], dx
:0042470C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042470F 83C002                  add eax, 00000002
:00424712 8945FC                  mov dword ptr [ebp-04], eax
:00424715 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424718 8B55F8                  mov edx, dword ptr [ebp-08]
:0042471B 668B4206                mov ax, word ptr [edx+06]
:0042471F 668901                  mov word ptr [ecx], ax
:00424722 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424725 83C102                  add ecx, 00000002
:00424728 894DFC                  mov dword ptr [ebp-04], ecx
:0042472B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042472E 8B45F8                  mov eax, dword ptr [ebp-08]
:00424731 668B4808                mov cx, word ptr [eax+08]
:00424735 66890A                  mov word ptr [edx], cx
:00424738 8B55FC                  mov edx, dword ptr [ebp-04]
:0042473B 83C202                  add edx, 00000002
:0042473E 8955FC                  mov dword ptr [ebp-04], edx
:00424741 8B45FC                  mov eax, dword ptr [ebp-04]
:00424744 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424747 668B510A                mov dx, word ptr [ecx+0A]
:0042474B 668910                  mov word ptr [eax], dx
:0042474E 8B45FC                  mov eax, dword ptr [ebp-04]
:00424751 83C002                  add eax, 00000002
:00424754 8945FC                  mov dword ptr [ebp-04], eax
:00424757 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042475A 8B55F8                  mov edx, dword ptr [ebp-08]
:0042475D 668B420C                mov ax, word ptr [edx+0C]
:00424761 668901                  mov word ptr [ecx], ax
:00424764 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424767 83C102                  add ecx, 00000002
:0042476A 894DFC                  mov dword ptr [ebp-04], ecx
:0042476D 8B55FC                  mov edx, dword ptr [ebp-04]
:00424770 8B45F8                  mov eax, dword ptr [ebp-08]
:00424773 668B480E                mov cx, word ptr [eax+0E]
:00424777 66890A                  mov word ptr [edx], cx
:0042477A 8B55FC                  mov edx, dword ptr [ebp-04]
:0042477D 83C202                  add edx, 00000002
:00424780 8955FC                  mov dword ptr [ebp-04], edx
:00424783 8B45FC                  mov eax, dword ptr [ebp-04]
:00424786 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424789 668B5116                mov dx, word ptr [ecx+16]
:0042478D 668910                  mov word ptr [eax], dx
:00424790 8B45FC                  mov eax, dword ptr [ebp-04]
:00424793 83C002                  add eax, 00000002
:00424796 8945FC                  mov dword ptr [ebp-04], eax
:00424799 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042479C 8B55F8                  mov edx, dword ptr [ebp-08]
:0042479F 668B4218                mov ax, word ptr [edx+18]
:004247A3 668901                  mov word ptr [ecx], ax
:004247A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004247A9 83C102                  add ecx, 00000002
:004247AC 894DFC                  mov dword ptr [ebp-04], ecx
:004247AF 8B55FC                  mov edx, dword ptr [ebp-04]
:004247B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004247B5 668B481A                mov cx, word ptr [eax+1A]
:004247B9 66890A                  mov word ptr [edx], cx
:004247BC 8B55FC                  mov edx, dword ptr [ebp-04]
:004247BF 83C202                  add edx, 00000002
:004247C2 8955FC                  mov dword ptr [ebp-04], edx
:004247C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004247C8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004247CB 668B511C                mov dx, word ptr [ecx+1C]
:004247CF 668910                  mov word ptr [eax], dx
:004247D2 8B45FC                  mov eax, dword ptr [ebp-04]
:004247D5 83C002                  add eax, 00000002
:004247D8 8945FC                  mov dword ptr [ebp-04], eax
:004247DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004247DE 8B55F8                  mov edx, dword ptr [ebp-08]
:004247E1 668B4228                mov ax, word ptr [edx+28]
:004247E5 668901                  mov word ptr [ecx], ax
:004247E8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004247EB 83C102                  add ecx, 00000002
:004247EE 894DFC                  mov dword ptr [ebp-04], ecx
:004247F1 8B55FC                  mov edx, dword ptr [ebp-04]
:004247F4 8B45F8                  mov eax, dword ptr [ebp-08]
:004247F7 668B482C                mov cx, word ptr [eax+2C]
:004247FB 66890A                  mov word ptr [edx], cx
:004247FE 8B55FC                  mov edx, dword ptr [ebp-04]
:00424801 83C202                  add edx, 00000002
:00424804 8955FC                  mov dword ptr [ebp-04], edx
:00424807 8B45FC                  mov eax, dword ptr [ebp-04]
:0042480A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042480D 668B512E                mov dx, word ptr [ecx+2E]
:00424811 668910                  mov word ptr [eax], dx
:00424814 8B45FC                  mov eax, dword ptr [ebp-04]
:00424817 83C002                  add eax, 00000002
:0042481A 8945FC                  mov dword ptr [ebp-04], eax
:0042481D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424820 8B55F8                  mov edx, dword ptr [ebp-08]
:00424823 668B4230                mov ax, word ptr [edx+30]
:00424827 668901                  mov word ptr [ecx], ax
:0042482A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042482D 83C102                  add ecx, 00000002
:00424830 894DFC                  mov dword ptr [ebp-04], ecx
:00424833 8B55FC                  mov edx, dword ptr [ebp-04]
:00424836 8B45F8                  mov eax, dword ptr [ebp-08]
:00424839 668B4838                mov cx, word ptr [eax+38]
:0042483D 66890A                  mov word ptr [edx], cx
:00424840 8B55FC                  mov edx, dword ptr [ebp-04]
:00424843 83C202                  add edx, 00000002
:00424846 8955FC                  mov dword ptr [ebp-04], edx
:00424849 8B45FC                  mov eax, dword ptr [ebp-04]
:0042484C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042484F 668B513A                mov dx, word ptr [ecx+3A]
:00424853 668910                  mov word ptr [eax], dx
:00424856 8B45FC                  mov eax, dword ptr [ebp-04]
:00424859 83C002                  add eax, 00000002
:0042485C 8945FC                  mov dword ptr [ebp-04], eax
:0042485F 8B45FC                  mov eax, dword ptr [ebp-04]
:00424862 8BE5                    mov esp, ebp
:00424864 5D                      pop ebp
:00424865 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00424DA8   
|
:00424868 55                      push ebp
:00424869 8BEC                    mov ebp, esp
:0042486B 83EC2C                  sub esp, 0000002C
:0042486E C745F818DA4A00          mov [ebp-08], 004ADA18
:00424875 66C705805A48000100      mov word ptr [00485A80], 0001
:0042487E 66C70538C948000000      mov word ptr [0048C938], 0000
:00424887 33C0                    xor eax, eax
:00424889 A0305A4A00              mov al, byte ptr [004A5A30]
:0042488E 83F801                  cmp eax, 00000001
:00424891 0F85E1010000            jne 00424A78
:00424897 E8ED260000              call 00426F89
:0042489C 8845D4                  mov byte ptr [ebp-2C], al
:0042489F 6865010000              push 00000165
:004248A4 B960DF4A00              mov ecx, 004ADF60
:004248A9 E8F0ECFEFF              call 0041359E
:004248AE 8945FC                  mov dword ptr [ebp-04], eax
:004248B1 6A00                    push 00000000
:004248B3 E80AC7FFFF              call 00420FC2
:004248B8 83C404                  add esp, 00000004
:004248BB 8945F4                  mov dword ptr [ebp-0C], eax
:004248BE 66C745E80000            mov [ebp-18], 0000
:004248C4 EB1E                    jmp 004248E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424901(U)
|
:004248C6 668B4DE8                mov cx, word ptr [ebp-18]
:004248CA 6683C101                add cx, 0001
:004248CE 66894DE8                mov word ptr [ebp-18], cx
:004248D2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004248D5 83C240                  add edx, 00000040
:004248D8 8955F4                  mov dword ptr [ebp-0C], edx
:004248DB 8B45FC                  mov eax, dword ptr [ebp-04]
:004248DE 83C024                  add eax, 00000024
:004248E1 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004248C4(U)
|
:004248E4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004248E7 81E1FFFF0000            and ecx, 0000FFFF
:004248ED 81F980000000            cmp ecx, 00000080
:004248F3 7D0E                    jge 00424903
:004248F5 8B55FC                  mov edx, dword ptr [ebp-04]
:004248F8 52                      push edx
:004248F9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004248FC E821FCFFFF              call 00424522
:00424901 EBC3                    jmp 004248C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004248F3(C)
|
:00424903 6865010000              push 00000165
:00424908 B960DF4A00              mov ecx, 004ADF60
:0042490D E88CECFEFF              call 0041359E
:00424912 8945FC                  mov dword ptr [ebp-04], eax
:00424915 6A00                    push 00000000
:00424917 E8A6C6FFFF              call 00420FC2
:0042491C 83C404                  add esp, 00000004
:0042491F 8945F4                  mov dword ptr [ebp-0C], eax
:00424922 66C745E80000            mov [ebp-18], 0000
:00424928 EB1E                    jmp 00424948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424A38(U)
|
:0042492A 668B45E8                mov ax, word ptr [ebp-18]
:0042492E 66050100                add ax, 0001
:00424932 668945E8                mov word ptr [ebp-18], ax
:00424936 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424939 83C140                  add ecx, 00000040
:0042493C 894DF4                  mov dword ptr [ebp-0C], ecx
:0042493F 8B55FC                  mov edx, dword ptr [ebp-04]
:00424942 83C224                  add edx, 00000024
:00424945 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424928(U)
|
:00424948 8B45E8                  mov eax, dword ptr [ebp-18]
:0042494B 25FFFF0000              and eax, 0000FFFF
:00424950 3D80000000              cmp eax, 00000080
:00424955 0F8DE2000000            jnl 00424A3D
:0042495B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042495E E88DAAFEFF              call 0040F3F0
:00424963 668945DC                mov word ptr [ebp-24], ax
:00424967 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042496A E821060000              call 00424F90
:0042496F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424972 81E1FFFF0000            and ecx, 0000FFFF
:00424978 81E100800000            and ecx, 00008000
:0042497E 85C9                    test ecx, ecx
:00424980 0F84B2000000            je 00424A38
:00424986 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424989 E8C2060000              call 00425050
:0042498E 668945D8                mov word ptr [ebp-28], ax
:00424992 668B55D8                mov dx, word ptr [ebp-28]
:00424996 52                      push edx
:00424997 E808C4FFFF              call 00420DA4
:0042499C 83C404                  add esp, 00000004
:0042499F 668945EC                mov word ptr [ebp-14], ax
:004249A3 8B45EC                  mov eax, dword ptr [ebp-14]
:004249A6 25FFFF0000              and eax, 0000FFFF
:004249AB 3D00100000              cmp eax, 00001000
:004249B0 7411                    je 004249C3
:004249B2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004249B5 81E1FFFF0000            and ecx, 0000FFFF
:004249BB 81F900200000            cmp ecx, 00002000
:004249C1 7575                    jne 00424A38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004249B0(C)
|
:004249C3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004249C6 E8650A0000              call 00425430
:004249CB 668945F0                mov word ptr [ebp-10], ax
:004249CF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004249D2 E8990A0000              call 00425470
:004249D7 50                      push eax
:004249D8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004249DB E8300A0000              call 00425410
:004249E0 50                      push eax
:004249E1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004249E4 E8670A0000              call 00425450
:004249E9 50                      push eax
:004249EA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004249ED E8FE060000              call 004250F0
:004249F2 50                      push eax
:004249F3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004249F6 E8B5060000              call 004250B0
:004249FB 50                      push eax
:004249FC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004249FF E80C080000              call 00425210
:00424A04 50                      push eax
:00424A05 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424A08 E8C3070000              call 004251D0
:00424A0D 50                      push eax
:00424A0E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424A11 E87A070000              call 00425190
:00424A16 50                      push eax
:00424A17 668B55D8                mov dx, word ptr [ebp-28]
:00424A1B 52                      push edx
:00424A1C E8A0E8FFFF              call 004232C1
:00424A21 83C424                  add esp, 00000024
:00424A24 668945E0                mov word ptr [ebp-20], ax
:00424A28 668B45E0                mov ax, word ptr [ebp-20]
:00424A2C 50                      push eax
:00424A2D E890C5FFFF              call 00420FC2
:00424A32 83C404                  add esp, 00000004
:00424A35 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424980(C), :004249C1(C)
|
:00424A38 E9EDFEFFFF              jmp 0042492A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424955(C)
|
:00424A3D 6A01                    push 00000001
:00424A3F E8CFCDFFFF              call 00421813
:00424A44 83C404                  add esp, 00000004
:00424A47 C605305A4A0000          mov byte ptr [004A5A30], 00
:00424A4E 6A01                    push 00000001
:00424A50 B918DA4A00              mov ecx, 004ADA18
:00424A55 E8C6B10000              call 0042FC20
:00424A5A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00424A5D 81E1FF000000            and ecx, 000000FF
:00424A63 85C9                    test ecx, ecx
:00424A65 740A                    je 00424A71
:00424A67 B9A0574800              mov ecx, 004857A0
:00424A6C E81906FFFF              call 0041508A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424A65(C)
|
:00424A71 E8ADE3FEFF              call 00412E23
:00424A76 EB0A                    jmp 00424A82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424891(C)
|
:00424A78 6A00                    push 00000000
:00424A7A E894CDFFFF              call 00421813
:00424A7F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424A76(U)
|
:00424A82 8BE5                    mov esp, ebp
:00424A84 5D                      pop ebp
:00424A85 C3                      ret



* Referenced by a CALL at Address:
|:00424DDB   
|
:00424A86 55                      push ebp
:00424A87 8BEC                    mov ebp, esp
:00424A89 83EC0C                  sub esp, 0000000C
:00424A8C C745F818DA4A00          mov [ebp-08], 004ADA18
:00424A93 E81DF1FFFF              call 00423BB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424B7A(U)
|
:00424A98 B9C8E24A00              mov ecx, 004AE2C8
:00424A9D E88EA8FEFF              call 0040F330
:00424AA2 25FF000000              and eax, 000000FF
:00424AA7 83E801                  sub eax, 00000001
:00424AAA 83F808                  cmp eax, 00000008
:00424AAD 7E09                    jle 00424AB8

* Possible Reference to String Resource ID=00008: ""
                                  |
:00424AAF C745F408000000          mov [ebp-0C], 00000008
:00424AB6 EB15                    jmp 00424ACD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424AAD(C)
|
:00424AB8 B9C8E24A00              mov ecx, 004AE2C8
:00424ABD E86EA8FEFF              call 0040F330
:00424AC2 25FF000000              and eax, 000000FF
:00424AC7 83E801                  sub eax, 00000001
:00424ACA 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424AB6(U)
|
:00424ACD 668B45F4                mov ax, word ptr [ebp-0C]
:00424AD1 668945FC                mov word ptr [ebp-04], ax
:00424AD5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424AD8 81E1FFFF0000            and ecx, 0000FFFF
:00424ADE 51                      push ecx
:00424ADF B9F8F44A00              mov ecx, 004AF4F8
:00424AE4 E8A7090000              call 00425490
:00424AE9 C7053C8B4A0000000000    mov dword ptr [004A8B3C], 00000000
:00424AF3 B980594800              mov ecx, 00485980
:00424AF8 E825B6FFFF              call 00420122
:00424AFD E867210000              call 00426C69
:00424B02 A37CDF4A00              mov dword ptr [004ADF7C], eax
:00424B07 E8D8F3FFFF              call 00423EE4
:00424B0C 6A01                    push 00000001
:00424B0E E8AB010000              call 00424CBE
:00424B13 83C404                  add esp, 00000004
:00424B16 E86E000000              call 00424B89
:00424B1B 8B153C8B4A00            mov edx, dword ptr [004A8B3C]
:00424B21 83E26E                  and edx, 0000006E
:00424B24 85D2                    test edx, edx
:00424B26 7402                    je 00424B2A
:00424B28 EB55                    jmp 00424B7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424B26(C)
|
:00424B2A E871F2FFFF              call 00423DA0
:00424B2F E8E7D6FFFF              call 0042221B
:00424B34 E8F9E2FEFF              call 00412E32
:00424B39 E841D7FFFF              call 0042227F
:00424B3E E80AE3FEFF              call 00412E4D

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00424B43 68FF000000              push 000000FF
:00424B48 6A00                    push 00000000
:00424B4A E8D5EFFFFF              call 00423B24
:00424B4F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424B6A(U)
|
:00424B52 B9F8F44A00              mov ecx, 004AF4F8
:00424B57 E854090000              call 004254B0
:00424B5C 85C0                    test eax, eax
:00424B5E 750C                    jne 00424B6C
:00424B60 6A00                    push 00000000
:00424B62 E857010000              call 00424CBE
:00424B67 83C404                  add esp, 00000004
:00424B6A EBE6                    jmp 00424B52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424B5E(C)
|
:00424B6C A13C8B4A00              mov eax, dword ptr [004A8B3C]
:00424B71 83E06E                  and eax, 0000006E
:00424B74 85C0                    test eax, eax
:00424B76 7402                    je 00424B7A
:00424B78 EB05                    jmp 00424B7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424B76(C)
|
:00424B7A E919FFFFFF              jmp 00424A98

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424B28(U), :00424B78(U)
|
:00424B7F 66A13C8B4A00            mov ax, word ptr [004A8B3C]
:00424B85 8BE5                    mov esp, ebp
:00424B87 5D                      pop ebp
:00424B88 C3                      ret



* Referenced by a CALL at Address:
|:00424B16   
|
:00424B89 55                      push ebp
:00424B8A 8BEC                    mov ebp, esp
:00424B8C 83EC10                  sub esp, 00000010
:00424B8F E861F0FFFF              call 00423BF5
:00424B94 6880000000              push 00000080
:00424B99 E824C4FFFF              call 00420FC2
:00424B9E 83C404                  add esp, 00000004
:00424BA1 8945FC                  mov dword ptr [ebp-04], eax
:00424BA4 E82EC4FFFF              call 00420FD7
:00424BA9 8945F8                  mov dword ptr [ebp-08], eax
:00424BAC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424BAF E85CA8FEFF              call 0040F410
:00424BB4 25FFFF0000              and eax, 0000FFFF
:00424BB9 8945F4                  mov dword ptr [ebp-0C], eax
:00424BBC 837DF403                cmp dword ptr [ebp-0C], 00000003
:00424BC0 0F87D8000000            ja 00424C9E
:00424BC6 8B45F4                  mov eax, dword ptr [ebp-0C]
:00424BC9 FF2485AE4C4200          jmp dword ptr [4*eax+00424CAE]
:00424BD0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424BD3 E8D5F5FFFF              call 004241AD
:00424BD8 25FFFF0000              and eax, 0000FFFF
:00424BDD 3DFFFF0000              cmp eax, 0000FFFF
:00424BE2 7527                    jne 00424C0B
:00424BE4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424BE7 51                      push ecx
:00424BE8 E8DBEFFFFF              call 00423BC8
:00424BED 83C404                  add esp, 00000004
:00424BF0 33D2                    xor edx, edx
:00424BF2 668B15805A4800          mov dx, word ptr [00485A80]
:00424BF9 52                      push edx
:00424BFA E855230000              call 00426F54
:00424BFF 83C404                  add esp, 00000004
:00424C02 66C70538C948000000      mov word ptr [0048C938], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424BE2(C)
|
:00424C0B E99A000000              jmp 00424CAA
:00424C10 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424C13 E895F5FFFF              call 004241AD
:00424C18 25FFFF0000              and eax, 0000FFFF
:00424C1D 3DFFFF0000              cmp eax, 0000FFFF
:00424C22 754F                    jne 00424C73
:00424C24 8B45F8                  mov eax, dword ptr [ebp-08]
:00424C27 50                      push eax
:00424C28 E89BEFFFFF              call 00423BC8
:00424C2D 83C404                  add esp, 00000004
:00424C30 E807D8FFFF              call 0042243C
:00424C35 B910584800              mov ecx, 00485810
:00424C3A E891080000              call 004254D0
:00424C3F 8845F0                  mov byte ptr [ebp-10], al
:00424C42 807DF000                cmp byte ptr [ebp-10], 00
:00424C46 740E                    je 00424C56
:00424C48 807DF001                cmp byte ptr [ebp-10], 01
:00424C4C 7416                    je 00424C64
:00424C4E 807DF002                cmp byte ptr [ebp-10], 02
:00424C52 7409                    je 00424C5D
:00424C54 EB13                    jmp 00424C69

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424C46(C)
|
:00424C56 E8EF5B0300              call 0045A84A
:00424C5B EB0C                    jmp 00424C69

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424C52(C)
|
:00424C5D E832600300              call 0045AC94
:00424C62 EB05                    jmp 00424C69

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424C4C(C)
|
:00424C64 E8E3900300              call 0045DD4C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424C54(U), :00424C5B(U), :00424C62(U)
|
:00424C69 E8CED7FFFF              call 0042243C
:00424C6E E842EFFFFF              call 00423BB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424C22(C)
|
:00424C73 EB35                    jmp 00424CAA
:00424C75 EB33                    jmp 00424CAA
:00424C77 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424C7A E82EF5FFFF              call 004241AD
:00424C7F 25FFFF0000              and eax, 0000FFFF
:00424C84 3DFFFF0000              cmp eax, 0000FFFF
:00424C89 7511                    jne 00424C9C
:00424C8B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424C8E 51                      push ecx
:00424C8F E834EFFFFF              call 00423BC8
:00424C94 83C404                  add esp, 00000004
:00424C97 E8A0D7FFFF              call 0042243C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424C89(C)
|
:00424C9C EB0C                    jmp 00424CAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424BC0(C)
|
:00424C9E 8B55F8                  mov edx, dword ptr [ebp-08]
:00424CA1 52                      push edx
:00424CA2 E821EFFFFF              call 00423BC8
:00424CA7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424C0B(U), :00424C73(U), :00424C75(U), :00424C9C(U)
|
:00424CAA 8BE5                    mov esp, ebp
:00424CAC 5D                      pop ebp
:00424CAD C3                      ret



:00424CAE 104C4200                DWORD 00424C10
:00424CB2 754C4200                DWORD 00424C75
:00424CB6 774C4200                DWORD 00424C77
:00424CBA D04B4200                DWORD 00424BD0



* Referenced by a CALL at Addresses:
|:00424B0E   , :00424B62   
|
:00424CBE 55                      push ebp
:00424CBF 8BEC                    mov ebp, esp
:00424CC1 51                      push ecx
:00424CC2 E86BE1FEFF              call 00412E32
:00424CC7 837D0800                cmp dword ptr [ebp+08], 00000000
:00424CCB 740E                    je 00424CDB
:00424CCD A1A0EA4800              mov eax, dword ptr [0048EAA0]
:00424CD2 50                      push eax
:00424CD3 E81BFE0300              call 00464AF3
:00424CD8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424CCB(C)
|
:00424CDB 833DA4EA480000          cmp dword ptr [0048EAA4], 00000000
:00424CE2 7413                    je 00424CF7
:00424CE4 8B0DA4EA4800            mov ecx, dword ptr [0048EAA4]
:00424CEA 51                      push ecx
:00424CEB B9D80C4B00              mov ecx, 004B0CD8
:00424CF0 E888B00300              call 0045FD7D
:00424CF5 EB0A                    jmp 00424D01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424CE2(C)
|
:00424CF7 B9D80C4B00              mov ecx, 004B0CD8
:00424CFC E859B20300              call 0045FF5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424CF5(U)
|
:00424D01 C745FC00000000          mov [ebp-04], 00000000
:00424D08 33D2                    xor edx, edx
:00424D0A 668B15845A4800          mov dx, word ptr [00485A84]
:00424D11 81FAFFFF0000            cmp edx, 0000FFFF
:00424D17 7411                    je 00424D2A
:00424D19 E86B220000              call 00426F89
:00424D1E 83F801                  cmp eax, 00000001
:00424D21 7507                    jne 00424D2A
:00424D23 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424D17(C), :00424D21(C)
|
:00424D2A 8B45FC                  mov eax, dword ptr [ebp-04]
:00424D2D 50                      push eax
:00424D2E E845180000              call 00426578
:00424D33 83C404                  add esp, 00000004
:00424D36 E812E1FEFF              call 00412E4D
:00424D3B 8BE5                    mov esp, ebp
:00424D3D 5D                      pop ebp
:00424D3E C3                      ret



* Referenced by a CALL at Address:
|:00424D9E   
|
:00424D3F 55                      push ebp
:00424D40 8BEC                    mov ebp, esp
:00424D42 C705388B4A0000000000    mov dword ptr [004A8B38], 00000000
:00424D4C C7057CDF4A0000000000    mov dword ptr [004ADF7C], 00000000
:00424D56 66C7057C5A48000000      mov word ptr [00485A7C], 0000
:00424D5F 5D                      pop ebp
:00424D60 C3                      ret



* Referenced by a CALL at Address:
|:00424DD6   
|
:00424D61 55                      push ebp
:00424D62 8BEC                    mov ebp, esp
:00424D64 51                      push ecx
:00424D65 68027F0000              push 00007F02
:00424D6A 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00424D6C FF15EC864B00            Call dword ptr [004B86EC]
:00424D72 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00424D73 FF1588864B00            Call dword ptr [004B8688]
:00424D79 8945FC                  mov dword ptr [ebp-04], eax
:00424D7C C705785A480000000000    mov dword ptr [00485A78], 00000000
:00424D86 66C705E8A84800FFFF      mov word ptr [0048A8E8], FFFF
:00424D8F E89FDDFFFF              call 00422B33
:00424D94 E850D0FFFF              call 00421DE9
:00424D99 E87DDEFFFF              call 00422C1B
:00424D9E E89CFFFFFF              call 00424D3F
:00424DA3 E8D2DEFEFF              call 00412C7A
:00424DA8 E8BBFAFFFF              call 00424868
:00424DAD E88AD6FFFF              call 0042243C
:00424DB2 8B45FC                  mov eax, dword ptr [ebp-04]
:00424DB5 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00424DB6 FF1588864B00            Call dword ptr [004B8688]
:00424DBC 8BE5                    mov esp, ebp
:00424DBE 5D                      pop ebp
:00424DBF C3                      ret



* Referenced by a CALL at Address:
|:00426890   
|
:00424DC0 55                      push ebp
:00424DC1 8BEC                    mov ebp, esp
:00424DC3 83EC08                  sub esp, 00000008
:00424DC6 E8381BFFFF              call 00416903
:00424DCB 8845F8                  mov byte ptr [ebp-08], al
:00424DCE 807DF802                cmp byte ptr [ebp-08], 02
:00424DD2 7402                    je 00424DD6
:00424DD4 EB14                    jmp 00424DEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424DD2(C)
|
:00424DD6 E886FFFFFF              call 00424D61
:00424DDB E8A6FCFFFF              call 00424A86
:00424DE0 668945FC                mov word ptr [ebp-04], ax
:00424DE4 668B45FC                mov ax, word ptr [ebp-04]
:00424DE8 EB06                    jmp 00424DF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424DD4(U)
|
:00424DEA 66A13C8B4A00            mov ax, word ptr [004A8B3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424DE8(U)
|
:00424DF0 8BE5                    mov esp, ebp
:00424DF2 5D                      pop ebp
:00424DF3 C3                      ret


:00424DF4 CC                      int 03
:00424DF5 CC                      int 03
:00424DF6 CC                      int 03
:00424DF7 CC                      int 03
:00424DF8 CC                      int 03
:00424DF9 CC                      int 03
:00424DFA CC                      int 03
:00424DFB CC                      int 03
:00424DFC CC                      int 03
:00424DFD CC                      int 03
:00424DFE CC                      int 03
:00424DFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00422DC2   , :00422E3A   , :00423359   , :0046755D   , :00467567   
|
:00424E00 55                      push ebp
:00424E01 8BEC                    mov ebp, esp
:00424E03 51                      push ecx
:00424E04 894DFC                  mov dword ptr [ebp-04], ecx
:00424E07 8B45FC                  mov eax, dword ptr [ebp-04]
:00424E0A 33C9                    xor ecx, ecx
:00424E0C 668B08                  mov cx, word ptr [eax]
:00424E0F 8BC1                    mov eax, ecx
:00424E11 8BE5                    mov esp, ebp
:00424E13 5D                      pop ebp
:00424E14 C3                      ret


:00424E15 CC                      int 03
:00424E16 CC                      int 03
:00424E17 CC                      int 03
:00424E18 CC                      int 03
:00424E19 CC                      int 03
:00424E1A CC                      int 03
:00424E1B CC                      int 03
:00424E1C CC                      int 03
:00424E1D CC                      int 03
:00424E1E CC                      int 03
:00424E1F CC                      int 03

* Referenced by a CALL at Address:
|:00423317   
|
:00424E20 55                      push ebp
:00424E21 8BEC                    mov ebp, esp
:00424E23 51                      push ecx
:00424E24 894DFC                  mov dword ptr [ebp-04], ecx
:00424E27 8B45FC                  mov eax, dword ptr [ebp-04]
:00424E2A 33C9                    xor ecx, ecx
:00424E2C 668B08                  mov cx, word ptr [eax]
:00424E2F 8BC1                    mov eax, ecx
:00424E31 2500F00000              and eax, 0000F000
:00424E36 8BE5                    mov esp, ebp
:00424E38 5D                      pop ebp
:00424E39 C3                      ret


:00424E3A CC                      int 03
:00424E3B CC                      int 03
:00424E3C CC                      int 03
:00424E3D CC                      int 03
:00424E3E CC                      int 03
:00424E3F CC                      int 03

* Referenced by a CALL at Address:
|:00420CE7   
|
:00424E40 55                      push ebp
:00424E41 8BEC                    mov ebp, esp
:00424E43 51                      push ecx
:00424E44 894DFC                  mov dword ptr [ebp-04], ecx
:00424E47 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424E4A E8810E0000              call 00425CD0
:00424E4F 8B45FC                  mov eax, dword ptr [ebp-04]
:00424E52 C6400400                mov [eax+04], 00
:00424E56 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424E59 66C7010030              mov word ptr [ecx], 3000
:00424E5E 8B45FC                  mov eax, dword ptr [ebp-04]
:00424E61 8BE5                    mov esp, ebp
:00424E63 5D                      pop ebp
:00424E64 C3                      ret


:00424E65 CC                      int 03
:00424E66 CC                      int 03
:00424E67 CC                      int 03
:00424E68 CC                      int 03
:00424E69 CC                      int 03
:00424E6A CC                      int 03
:00424E6B CC                      int 03
:00424E6C CC                      int 03
:00424E6D CC                      int 03
:00424E6E CC                      int 03
:00424E6F CC                      int 03

* Referenced by a CALL at Address:
|:00420E8F   
|
:00424E70 55                      push ebp
:00424E71 8BEC                    mov ebp, esp
:00424E73 51                      push ecx
:00424E74 894DFC                  mov dword ptr [ebp-04], ecx
:00424E77 8B45FC                  mov eax, dword ptr [ebp-04]
:00424E7A 83C004                  add eax, 00000004
:00424E7D 8BE5                    mov esp, ebp
:00424E7F 5D                      pop ebp
:00424E80 C3                      ret


:00424E81 CC                      int 03
:00424E82 CC                      int 03
:00424E83 CC                      int 03
:00424E84 CC                      int 03
:00424E85 CC                      int 03
:00424E86 CC                      int 03
:00424E87 CC                      int 03
:00424E88 CC                      int 03
:00424E89 CC                      int 03
:00424E8A CC                      int 03
:00424E8B CC                      int 03
:00424E8C CC                      int 03
:00424E8D CC                      int 03
:00424E8E CC                      int 03
:00424E8F CC                      int 03
:00424E90 55                      push ebp
:00424E91 8BEC                    mov ebp, esp
:00424E93 51                      push ecx
:00424E94 894DFC                  mov dword ptr [ebp-04], ecx
:00424E97 8B45FC                  mov eax, dword ptr [ebp-04]
:00424E9A C7401000000000          mov [eax+10], 00000000
:00424EA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424EA4 66C741140000            mov [ecx+14], 0000
:00424EAA 8B55FC                  mov edx, dword ptr [ebp-04]
:00424EAD 66C742040000            mov [edx+04], 0000
:00424EB3 8B45FC                  mov eax, dword ptr [ebp-04]
:00424EB6 66C740060000            mov [eax+06], 0000
:00424EBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424EBF 66C741080000            mov [ecx+08], 0000
:00424EC5 8B55FC                  mov edx, dword ptr [ebp-04]
:00424EC8 66C7421E0000            mov [edx+1E], 0000
:00424ECE 8B45FC                  mov eax, dword ptr [ebp-04]
:00424ED1 66C740200000            mov [eax+20], 0000
:00424ED7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424EDA 66C741220000            mov [ecx+22], 0000
:00424EE0 8B55FC                  mov edx, dword ptr [ebp-04]
:00424EE3 66C742240000            mov [edx+24], 0000
:00424EE9 8B45FC                  mov eax, dword ptr [ebp-04]
:00424EEC 66C740260000            mov [eax+26], 0000
:00424EF2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424EF5 66C7411A0000            mov [ecx+1A], 0000
:00424EFB 8B55FC                  mov edx, dword ptr [ebp-04]
:00424EFE 66C742280000            mov [edx+28], 0000
:00424F04 8B45FC                  mov eax, dword ptr [ebp-04]
:00424F07 66C7402A0000            mov [eax+2A], 0000
:00424F0D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424F10 66C7412C0000            mov [ecx+2C], 0000
:00424F16 6A00                    push 00000000
:00424F18 E84EBEFFFF              call 00420D6B
:00424F1D 83C404                  add esp, 00000004
:00424F20 8B55FC                  mov edx, dword ptr [ebp-04]
:00424F23 894234                  mov dword ptr [edx+34], eax
:00424F26 8B45FC                  mov eax, dword ptr [ebp-04]
:00424F29 66C7402E0000            mov [eax+2E], 0000
:00424F2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424F32 66C741300400            mov [ecx+30], 0004
:00424F38 8B55FC                  mov edx, dword ptr [ebp-04]
:00424F3B 66C7423C0000            mov [edx+3C], 0000
:00424F41 8B45FC                  mov eax, dword ptr [ebp-04]
:00424F44 66C7403E0000            mov [eax+3E], 0000
:00424F4A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424F4D 66C741380000            mov [ecx+38], 0000
:00424F53 8B55FC                  mov edx, dword ptr [ebp-04]
:00424F56 66C7420A0300            mov [edx+0A], 0003
:00424F5C 8B45FC                  mov eax, dword ptr [ebp-04]
:00424F5F 66C7400C0300            mov [eax+0C], 0003
:00424F65 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424F68 66C7410E0100            mov [ecx+0E], 0001
:00424F6E 8B55FC                  mov edx, dword ptr [ebp-04]
:00424F71 66C7020000              mov word ptr [edx], 0000
:00424F76 8B45FC                  mov eax, dword ptr [ebp-04]
:00424F79 66C740020000            mov [eax+02], 0000
:00424F7F 8B45FC                  mov eax, dword ptr [ebp-04]
:00424F82 8BE5                    mov esp, ebp
:00424F84 5D                      pop ebp
:00424F85 C3                      ret


:00424F86 CC                      int 03
:00424F87 CC                      int 03
:00424F88 CC                      int 03
:00424F89 CC                      int 03
:00424F8A CC                      int 03
:00424F8B CC                      int 03
:00424F8C CC                      int 03
:00424F8D CC                      int 03
:00424F8E CC                      int 03
:00424F8F CC                      int 03

* Referenced by a CALL at Addresses:
|:004210AA   , :004212DD   , :00422F2C   , :0042496A   
|
:00424F90 55                      push ebp
:00424F91 8BEC                    mov ebp, esp
:00424F93 51                      push ecx
:00424F94 894DFC                  mov dword ptr [ebp-04], ecx
:00424F97 8B45FC                  mov eax, dword ptr [ebp-04]
:00424F9A 66C740280000            mov [eax+28], 0000
:00424FA0 8BE5                    mov esp, ebp
:00424FA2 5D                      pop ebp
:00424FA3 C3                      ret


:00424FA4 CC                      int 03
:00424FA5 CC                      int 03
:00424FA6 CC                      int 03
:00424FA7 CC                      int 03
:00424FA8 CC                      int 03
:00424FA9 CC                      int 03
:00424FAA CC                      int 03
:00424FAB CC                      int 03
:00424FAC CC                      int 03
:00424FAD CC                      int 03
:00424FAE CC                      int 03
:00424FAF CC                      int 03

* Referenced by a CALL at Address:
|:004230A6   
|
:00424FB0 55                      push ebp
:00424FB1 8BEC                    mov ebp, esp
:00424FB3 51                      push ecx
:00424FB4 894DFC                  mov dword ptr [ebp-04], ecx
:00424FB7 8B45FC                  mov eax, dword ptr [ebp-04]
:00424FBA 668B4D08                mov cx, word ptr [ebp+08]
:00424FBE 66894816                mov word ptr [eax+16], cx
:00424FC2 8BE5                    mov esp, ebp
:00424FC4 5D                      pop ebp
:00424FC5 C20400                  ret 0004


:00424FC8 CC                      int 03
:00424FC9 CC                      int 03
:00424FCA CC                      int 03
:00424FCB CC                      int 03
:00424FCC CC                      int 03
:00424FCD CC                      int 03
:00424FCE CC                      int 03
:00424FCF CC                      int 03

* Referenced by a CALL at Address:
|:0042308F   
|
:00424FD0 55                      push ebp
:00424FD1 8BEC                    mov ebp, esp
:00424FD3 51                      push ecx
:00424FD4 894DFC                  mov dword ptr [ebp-04], ecx
:00424FD7 8B45FC                  mov eax, dword ptr [ebp-04]
:00424FDA 668B4D08                mov cx, word ptr [ebp+08]
:00424FDE 66894818                mov word ptr [eax+18], cx
:00424FE2 8BE5                    mov esp, ebp
:00424FE4 5D                      pop ebp
:00424FE5 C20400                  ret 0004


:00424FE8 CC                      int 03
:00424FE9 CC                      int 03
:00424FEA CC                      int 03
:00424FEB CC                      int 03
:00424FEC CC                      int 03
:00424FED CC                      int 03
:00424FEE CC                      int 03
:00424FEF CC                      int 03

* Referenced by a CALL at Addresses:
|:004230BD   , :00423650   
|
:00424FF0 55                      push ebp
:00424FF1 8BEC                    mov ebp, esp
:00424FF3 51                      push ecx
:00424FF4 894DFC                  mov dword ptr [ebp-04], ecx
:00424FF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00424FFA 668B4D08                mov cx, word ptr [ebp+08]
:00424FFE 668908                  mov word ptr [eax], cx
:00425001 8BE5                    mov esp, ebp
:00425003 5D                      pop ebp
:00425004 C20400                  ret 0004


:00425007 CC                      int 03
:00425008 CC                      int 03
:00425009 CC                      int 03
:0042500A CC                      int 03
:0042500B CC                      int 03
:0042500C CC                      int 03
:0042500D CC                      int 03
:0042500E CC                      int 03
:0042500F CC                      int 03

* Referenced by a CALL at Address:
|:004230C7   
|
:00425010 55                      push ebp
:00425011 8BEC                    mov ebp, esp
:00425013 51                      push ecx
:00425014 894DFC                  mov dword ptr [ebp-04], ecx
:00425017 8B45FC                  mov eax, dword ptr [ebp-04]
:0042501A 668B4D08                mov cx, word ptr [ebp+08]
:0042501E 66894802                mov word ptr [eax+02], cx
:00425022 8BE5                    mov esp, ebp
:00425024 5D                      pop ebp
:00425025 C20400                  ret 0004


:00425028 CC                      int 03
:00425029 CC                      int 03
:0042502A CC                      int 03
:0042502B CC                      int 03
:0042502C CC                      int 03
:0042502D CC                      int 03
:0042502E CC                      int 03
:0042502F CC                      int 03

* Referenced by a CALL at Address:
|:004212D5   
|
:00425030 55                      push ebp
:00425031 8BEC                    mov ebp, esp
:00425033 51                      push ecx
:00425034 894DFC                  mov dword ptr [ebp-04], ecx
:00425037 8B45FC                  mov eax, dword ptr [ebp-04]
:0042503A 668B4D08                mov cx, word ptr [ebp+08]
:0042503E 6689483A                mov word ptr [eax+3A], cx
:00425042 8BE5                    mov esp, ebp
:00425044 5D                      pop ebp
:00425045 C20400                  ret 0004


:00425048 CC                      int 03
:00425049 CC                      int 03
:0042504A CC                      int 03
:0042504B CC                      int 03
:0042504C CC                      int 03
:0042504D CC                      int 03
:0042504E CC                      int 03
:0042504F CC                      int 03

* Referenced by a CALL at Addresses:
|:00422D7F   , :00423CC5   , :00423D2A   , :00423FD2   , :0042408B   
|:00424989   
|
:00425050 55                      push ebp
:00425051 8BEC                    mov ebp, esp
:00425053 51                      push ecx
:00425054 894DFC                  mov dword ptr [ebp-04], ecx
:00425057 8B45FC                  mov eax, dword ptr [ebp-04]
:0042505A 668B403A                mov ax, word ptr [eax+3A]
:0042505E 8BE5                    mov esp, ebp
:00425060 5D                      pop ebp
:00425061 C3                      ret


:00425062 CC                      int 03
:00425063 CC                      int 03
:00425064 CC                      int 03
:00425065 CC                      int 03
:00425066 CC                      int 03
:00425067 CC                      int 03
:00425068 CC                      int 03
:00425069 CC                      int 03
:0042506A CC                      int 03
:0042506B CC                      int 03
:0042506C CC                      int 03
:0042506D CC                      int 03
:0042506E CC                      int 03
:0042506F CC                      int 03

* Referenced by a CALL at Addresses:
|:00422F99   , :004230B0   
|
:00425070 55                      push ebp
:00425071 8BEC                    mov ebp, esp
:00425073 51                      push ecx
:00425074 894DFC                  mov dword ptr [ebp-04], ecx
:00425077 8B45FC                  mov eax, dword ptr [ebp-04]
:0042507A 668B4D08                mov cx, word ptr [ebp+08]
:0042507E 6689481A                mov word ptr [eax+1A], cx
:00425082 8BE5                    mov esp, ebp
:00425084 5D                      pop ebp
:00425085 C20400                  ret 0004


:00425088 CC                      int 03
:00425089 CC                      int 03
:0042508A CC                      int 03
:0042508B CC                      int 03
:0042508C CC                      int 03
:0042508D CC                      int 03
:0042508E CC                      int 03
:0042508F CC                      int 03

* Referenced by a CALL at Addresses:
|:00406A11   , :00406A39   , :0040EB79   , :0040EBBC   , :0040EBE9   
|:0040EC1E   , :0040EC55   , :004230FB   , :00442B8E   , :00442BB4   
|
:00425090 55                      push ebp
:00425091 8BEC                    mov ebp, esp
:00425093 51                      push ecx
:00425094 894DFC                  mov dword ptr [ebp-04], ecx
:00425097 8B45FC                  mov eax, dword ptr [ebp-04]
:0042509A 668B4D08                mov cx, word ptr [ebp+08]
:0042509E 6689480A                mov word ptr [eax+0A], cx
:004250A2 8BE5                    mov esp, ebp
:004250A4 5D                      pop ebp
:004250A5 C20400                  ret 0004


:004250A8 CC                      int 03
:004250A9 CC                      int 03
:004250AA CC                      int 03
:004250AB CC                      int 03
:004250AC CC                      int 03
:004250AD CC                      int 03
:004250AE CC                      int 03
:004250AF CC                      int 03

* Referenced by a CALL at Addresses:
|:004229A4   , :004235D9   , :004249F6   
|
:004250B0 55                      push ebp
:004250B1 8BEC                    mov ebp, esp
:004250B3 51                      push ecx
:004250B4 894DFC                  mov dword ptr [ebp-04], ecx
:004250B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004250BA 668B400A                mov ax, word ptr [eax+0A]
:004250BE 8BE5                    mov esp, ebp
:004250C0 5D                      pop ebp
:004250C1 C3                      ret


:004250C2 CC                      int 03
:004250C3 CC                      int 03
:004250C4 CC                      int 03
:004250C5 CC                      int 03
:004250C6 CC                      int 03
:004250C7 CC                      int 03
:004250C8 CC                      int 03
:004250C9 CC                      int 03
:004250CA CC                      int 03
:004250CB CC                      int 03
:004250CC CC                      int 03
:004250CD CC                      int 03
:004250CE CC                      int 03
:004250CF CC                      int 03

* Referenced by a CALL at Address:
|:00423108   
|
:004250D0 55                      push ebp
:004250D1 8BEC                    mov ebp, esp
:004250D3 51                      push ecx
:004250D4 894DFC                  mov dword ptr [ebp-04], ecx
:004250D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004250DA 668B4D08                mov cx, word ptr [ebp+08]
:004250DE 6689480C                mov word ptr [eax+0C], cx
:004250E2 8BE5                    mov esp, ebp
:004250E4 5D                      pop ebp
:004250E5 C20400                  ret 0004


:004250E8 CC                      int 03
:004250E9 CC                      int 03
:004250EA CC                      int 03
:004250EB CC                      int 03
:004250EC CC                      int 03
:004250ED CC                      int 03
:004250EE CC                      int 03
:004250EF CC                      int 03

* Referenced by a CALL at Addresses:
|:004229B0   , :004235D0   , :004249ED   
|
:004250F0 55                      push ebp
:004250F1 8BEC                    mov ebp, esp
:004250F3 51                      push ecx
:004250F4 894DFC                  mov dword ptr [ebp-04], ecx
:004250F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004250FA 668B400C                mov ax, word ptr [eax+0C]
:004250FE 8BE5                    mov esp, ebp
:00425100 5D                      pop ebp
:00425101 C3                      ret


:00425102 CC                      int 03
:00425103 CC                      int 03
:00425104 CC                      int 03
:00425105 CC                      int 03
:00425106 CC                      int 03
:00425107 CC                      int 03
:00425108 CC                      int 03
:00425109 CC                      int 03
:0042510A CC                      int 03
:0042510B CC                      int 03
:0042510C CC                      int 03
:0042510D CC                      int 03
:0042510E CC                      int 03
:0042510F CC                      int 03

* Referenced by a CALL at Address:
|:00423115   
|
:00425110 55                      push ebp
:00425111 8BEC                    mov ebp, esp
:00425113 51                      push ecx
:00425114 894DFC                  mov dword ptr [ebp-04], ecx
:00425117 8B45FC                  mov eax, dword ptr [ebp-04]
:0042511A 668B4D08                mov cx, word ptr [ebp+08]
:0042511E 6689480E                mov word ptr [eax+0E], cx
:00425122 8BE5                    mov esp, ebp
:00425124 5D                      pop ebp
:00425125 C20400                  ret 0004


:00425128 CC                      int 03
:00425129 CC                      int 03
:0042512A CC                      int 03
:0042512B CC                      int 03
:0042512C CC                      int 03
:0042512D CC                      int 03
:0042512E CC                      int 03
:0042512F CC                      int 03

* Referenced by a CALL at Address:
|:00421F62   
|
:00425130 55                      push ebp
:00425131 8BEC                    mov ebp, esp
:00425133 51                      push ecx
:00425134 894DFC                  mov dword ptr [ebp-04], ecx
:00425137 8B45FC                  mov eax, dword ptr [ebp-04]
:0042513A 668B4D08                mov cx, word ptr [ebp+08]
:0042513E 66894826                mov word ptr [eax+26], cx
:00425142 8BE5                    mov esp, ebp
:00425144 5D                      pop ebp
:00425145 C20400                  ret 0004


:00425148 CC                      int 03
:00425149 CC                      int 03
:0042514A CC                      int 03
:0042514B CC                      int 03
:0042514C CC                      int 03
:0042514D CC                      int 03
:0042514E CC                      int 03
:0042514F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042208F   , :004220A0   
|
:00425150 55                      push ebp
:00425151 8BEC                    mov ebp, esp
:00425153 51                      push ecx
:00425154 894DFC                  mov dword ptr [ebp-04], ecx
:00425157 8B45FC                  mov eax, dword ptr [ebp-04]
:0042515A 668B4026                mov ax, word ptr [eax+26]
:0042515E 8BE5                    mov esp, ebp
:00425160 5D                      pop ebp
:00425161 C3                      ret


:00425162 CC                      int 03
:00425163 CC                      int 03
:00425164 CC                      int 03
:00425165 CC                      int 03
:00425166 CC                      int 03
:00425167 CC                      int 03
:00425168 CC                      int 03
:00425169 CC                      int 03
:0042516A CC                      int 03
:0042516B CC                      int 03
:0042516C CC                      int 03
:0042516D CC                      int 03
:0042516E CC                      int 03
:0042516F CC                      int 03

* Referenced by a CALL at Address:
|:004230D4   
|
:00425170 55                      push ebp
:00425171 8BEC                    mov ebp, esp
:00425173 51                      push ecx
:00425174 894DFC                  mov dword ptr [ebp-04], ecx
:00425177 8B45FC                  mov eax, dword ptr [ebp-04]
:0042517A 668B4D08                mov cx, word ptr [ebp+08]
:0042517E 66894804                mov word ptr [eax+04], cx
:00425182 8BE5                    mov esp, ebp
:00425184 5D                      pop ebp
:00425185 C20400                  ret 0004


:00425188 CC                      int 03
:00425189 CC                      int 03
:0042518A CC                      int 03
:0042518B CC                      int 03
:0042518C CC                      int 03
:0042518D CC                      int 03
:0042518E CC                      int 03
:0042518F CC                      int 03

* Referenced by a CALL at Addresses:
|:00421D7E   , :00421FC3   , :0042203B   , :0042292A   , :00423273   
|:004235EB   , :00423A5F   , :00424A11   
|
:00425190 55                      push ebp
:00425191 8BEC                    mov ebp, esp
:00425193 51                      push ecx
:00425194 894DFC                  mov dword ptr [ebp-04], ecx
:00425197 8B45FC                  mov eax, dword ptr [ebp-04]
:0042519A 668B4004                mov ax, word ptr [eax+04]
:0042519E 8BE5                    mov esp, ebp
:004251A0 5D                      pop ebp
:004251A1 C3                      ret


:004251A2 CC                      int 03
:004251A3 CC                      int 03
:004251A4 CC                      int 03
:004251A5 CC                      int 03
:004251A6 CC                      int 03
:004251A7 CC                      int 03
:004251A8 CC                      int 03
:004251A9 CC                      int 03
:004251AA CC                      int 03
:004251AB CC                      int 03
:004251AC CC                      int 03
:004251AD CC                      int 03
:004251AE CC                      int 03
:004251AF CC                      int 03

* Referenced by a CALL at Address:
|:004230E1   
|
:004251B0 55                      push ebp
:004251B1 8BEC                    mov ebp, esp
:004251B3 51                      push ecx
:004251B4 894DFC                  mov dword ptr [ebp-04], ecx
:004251B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004251BA 668B4D08                mov cx, word ptr [ebp+08]
:004251BE 66894806                mov word ptr [eax+06], cx
:004251C2 8BE5                    mov esp, ebp
:004251C4 5D                      pop ebp
:004251C5 C20400                  ret 0004


:004251C8 CC                      int 03
:004251C9 CC                      int 03
:004251CA CC                      int 03
:004251CB CC                      int 03
:004251CC CC                      int 03
:004251CD CC                      int 03
:004251CE CC                      int 03
:004251CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00421D8A   , :00421FAF   , :00422027   , :00422936   , :0042328E   
|:004235E2   , :00423A6B   , :00424A08   
|
:004251D0 55                      push ebp
:004251D1 8BEC                    mov ebp, esp
:004251D3 51                      push ecx
:004251D4 894DFC                  mov dword ptr [ebp-04], ecx
:004251D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004251DA 668B4006                mov ax, word ptr [eax+06]
:004251DE 8BE5                    mov esp, ebp
:004251E0 5D                      pop ebp
:004251E1 C3                      ret


:004251E2 CC                      int 03
:004251E3 CC                      int 03
:004251E4 CC                      int 03
:004251E5 CC                      int 03
:004251E6 CC                      int 03
:004251E7 CC                      int 03
:004251E8 CC                      int 03
:004251E9 CC                      int 03
:004251EA CC                      int 03
:004251EB CC                      int 03
:004251EC CC                      int 03
:004251ED CC                      int 03
:004251EE CC                      int 03
:004251EF CC                      int 03

* Referenced by a CALL at Address:
|:004230EE   
|
:004251F0 55                      push ebp
:004251F1 8BEC                    mov ebp, esp
:004251F3 51                      push ecx
:004251F4 894DFC                  mov dword ptr [ebp-04], ecx
:004251F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004251FA 668B4D08                mov cx, word ptr [ebp+08]
:004251FE 66894808                mov word ptr [eax+08], cx
:00425202 8BE5                    mov esp, ebp
:00425204 5D                      pop ebp
:00425205 C20400                  ret 0004


:00425208 CC                      int 03
:00425209 CC                      int 03
:0042520A CC                      int 03
:0042520B CC                      int 03
:0042520C CC                      int 03
:0042520D CC                      int 03
:0042520E CC                      int 03
:0042520F CC                      int 03

* Referenced by a CALL at Addresses:
|:00421D96   , :00421F52   , :004249FF   
|
:00425210 55                      push ebp
:00425211 8BEC                    mov ebp, esp
:00425213 51                      push ecx
:00425214 894DFC                  mov dword ptr [ebp-04], ecx
:00425217 8B45FC                  mov eax, dword ptr [ebp-04]
:0042521A 668B4008                mov ax, word ptr [eax+08]
:0042521E 8BE5                    mov esp, ebp
:00425220 5D                      pop ebp
:00425221 C3                      ret


:00425222 CC                      int 03
:00425223 CC                      int 03
:00425224 CC                      int 03
:00425225 CC                      int 03
:00425226 CC                      int 03
:00425227 CC                      int 03
:00425228 CC                      int 03
:00425229 CC                      int 03
:0042522A CC                      int 03
:0042522B CC                      int 03
:0042522C CC                      int 03
:0042522D CC                      int 03
:0042522E CC                      int 03
:0042522F CC                      int 03

* Referenced by a CALL at Addresses:
|:004212EF   , :00423165   , :00423EC4   , :00424100   
|
:00425230 55                      push ebp
:00425231 8BEC                    mov ebp, esp
:00425233 51                      push ecx
:00425234 894DFC                  mov dword ptr [ebp-04], ecx
:00425237 8B450C                  mov eax, dword ptr [ebp+0C]
:0042523A 25FFFF0000              and eax, 0000FFFF
:0042523F F7D0                    not eax
:00425241 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425244 668B5128                mov dx, word ptr [ecx+28]
:00425248 6623D0                  and dx, ax
:0042524B 8B45FC                  mov eax, dword ptr [ebp-04]
:0042524E 66895028                mov word ptr [eax+28], dx
:00425252 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425255 81E1FFFF0000            and ecx, 0000FFFF
:0042525B 8B550C                  mov edx, dword ptr [ebp+0C]
:0042525E 81E2FFFF0000            and edx, 0000FFFF
:00425264 23CA                    and ecx, edx
:00425266 8B45FC                  mov eax, dword ptr [ebp-04]
:00425269 668B5028                mov dx, word ptr [eax+28]
:0042526D 660BD1                  or dx, cx
:00425270 8B45FC                  mov eax, dword ptr [ebp-04]
:00425273 66895028                mov word ptr [eax+28], dx
:00425277 8BE5                    mov esp, ebp
:00425279 5D                      pop ebp
:0042527A C20800                  ret 0008


:0042527D CC                      int 03
:0042527E CC                      int 03
:0042527F CC                      int 03

* Referenced by a CALL at Address:
|:00424172   
|
:00425280 55                      push ebp
:00425281 8BEC                    mov ebp, esp
:00425283 51                      push ecx
:00425284 894DFC                  mov dword ptr [ebp-04], ecx
:00425287 8B45FC                  mov eax, dword ptr [ebp-04]
:0042528A 33C9                    xor ecx, ecx
:0042528C 668B482E                mov cx, word ptr [eax+2E]
:00425290 6BC90E                  imul ecx, 0000000E
:00425293 8B55FC                  mov edx, dword ptr [ebp-04]
:00425296 33C0                    xor eax, eax
:00425298 668B422A                mov ax, word ptr [edx+2A]
:0042529C 03C8                    add ecx, eax
:0042529E 6BC930                  imul ecx, 00000030
:004252A1 C1E106                  shl ecx, 06
:004252A4 8B55FC                  mov edx, dword ptr [ebp-04]
:004252A7 8B4210                  mov eax, dword ptr [edx+10]
:004252AA 03C1                    add eax, ecx
:004252AC 8BE5                    mov esp, ebp
:004252AE 5D                      pop ebp
:004252AF C3                      ret



* Referenced by a CALL at Address:
|:00424128   
|
:004252B0 55                      push ebp
:004252B1 8BEC                    mov ebp, esp
:004252B3 51                      push ecx
:004252B4 894DFC                  mov dword ptr [ebp-04], ecx
:004252B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004252BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004252BD 668B511E                mov dx, word ptr [ecx+1E]
:004252C1 66895022                mov word ptr [eax+22], dx
:004252C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004252C8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004252CB 668B5120                mov dx, word ptr [ecx+20]
:004252CF 66895024                mov word ptr [eax+24], dx
:004252D3 8BE5                    mov esp, ebp
:004252D5 5D                      pop ebp
:004252D6 C3                      ret


:004252D7 CC                      int 03
:004252D8 CC                      int 03
:004252D9 CC                      int 03
:004252DA CC                      int 03
:004252DB CC                      int 03
:004252DC CC                      int 03
:004252DD CC                      int 03
:004252DE CC                      int 03
:004252DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00423127   , :0042413A   
|
:004252E0 55                      push ebp
:004252E1 8BEC                    mov ebp, esp
:004252E3 51                      push ecx
:004252E4 894DFC                  mov dword ptr [ebp-04], ecx
:004252E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004252EA 668B4D08                mov cx, word ptr [ebp+08]
:004252EE 6689481E                mov word ptr [eax+1E], cx
:004252F2 8B55FC                  mov edx, dword ptr [ebp-04]
:004252F5 668B450C                mov ax, word ptr [ebp+0C]
:004252F9 66894220                mov word ptr [edx+20], ax
:004252FD 8BE5                    mov esp, ebp
:004252FF 5D                      pop ebp
:00425300 C20800                  ret 0008


:00425303 CC                      int 03
:00425304 CC                      int 03
:00425305 CC                      int 03
:00425306 CC                      int 03
:00425307 CC                      int 03
:00425308 CC                      int 03
:00425309 CC                      int 03
:0042530A CC                      int 03
:0042530B CC                      int 03
:0042530C CC                      int 03
:0042530D CC                      int 03
:0042530E CC                      int 03
:0042530F CC                      int 03

* Referenced by a CALL at Addresses:
|:00422DFE   , :00423FF9   
|
:00425310 55                      push ebp
:00425311 8BEC                    mov ebp, esp
:00425313 51                      push ecx
:00425314 894DFC                  mov dword ptr [ebp-04], ecx
:00425317 8B4508                  mov eax, dword ptr [ebp+08]
:0042531A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042531D 668B511E                mov dx, word ptr [ecx+1E]
:00425321 668910                  mov word ptr [eax], dx
:00425324 8B450C                  mov eax, dword ptr [ebp+0C]
:00425327 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042532A 668B5120                mov dx, word ptr [ecx+20]
:0042532E 668910                  mov word ptr [eax], dx
:00425331 8BE5                    mov esp, ebp
:00425333 5D                      pop ebp
:00425334 C20800                  ret 0008


:00425337 CC                      int 03
:00425338 CC                      int 03
:00425339 CC                      int 03
:0042533A CC                      int 03
:0042533B CC                      int 03
:0042533C CC                      int 03
:0042533D CC                      int 03
:0042533E CC                      int 03
:0042533F CC                      int 03

* Referenced by a CALL at Address:
|:00423139   
|
:00425340 55                      push ebp
:00425341 8BEC                    mov ebp, esp
:00425343 51                      push ecx
:00425344 894DFC                  mov dword ptr [ebp-04], ecx
:00425347 8B45FC                  mov eax, dword ptr [ebp-04]
:0042534A 668B4D08                mov cx, word ptr [ebp+08]
:0042534E 66894822                mov word ptr [eax+22], cx
:00425352 8B55FC                  mov edx, dword ptr [ebp-04]
:00425355 668B450C                mov ax, word ptr [ebp+0C]
:00425359 66894224                mov word ptr [edx+24], ax
:0042535D 8BE5                    mov esp, ebp
:0042535F 5D                      pop ebp
:00425360 C20800                  ret 0008


:00425363 CC                      int 03
:00425364 CC                      int 03
:00425365 CC                      int 03
:00425366 CC                      int 03
:00425367 CC                      int 03
:00425368 CC                      int 03
:00425369 CC                      int 03
:0042536A CC                      int 03
:0042536B CC                      int 03
:0042536C CC                      int 03
:0042536D CC                      int 03
:0042536E CC                      int 03
:0042536F CC                      int 03

* Referenced by a CALL at Addresses:
|:00422968   , :00423153   , :00423BEE   
|
:00425370 55                      push ebp
:00425371 8BEC                    mov ebp, esp
:00425373 51                      push ecx
:00425374 894DFC                  mov dword ptr [ebp-04], ecx
:00425377 8B45FC                  mov eax, dword ptr [ebp-04]
:0042537A 668B4D08                mov cx, word ptr [ebp+08]
:0042537E 6689483C                mov word ptr [eax+3C], cx
:00425382 8BE5                    mov esp, ebp
:00425384 5D                      pop ebp
:00425385 C20400                  ret 0004


:00425388 CC                      int 03
:00425389 CC                      int 03
:0042538A CC                      int 03
:0042538B CC                      int 03
:0042538C CC                      int 03
:0042538D CC                      int 03
:0042538E CC                      int 03
:0042538F CC                      int 03

* Referenced by a CALL at Address:
|:00423BD8   
|
:00425390 55                      push ebp
:00425391 8BEC                    mov ebp, esp
:00425393 51                      push ecx
:00425394 894DFC                  mov dword ptr [ebp-04], ecx
:00425397 8B45FC                  mov eax, dword ptr [ebp-04]
:0042539A 668B403C                mov ax, word ptr [eax+3C]
:0042539E 8BE5                    mov esp, ebp
:004253A0 5D                      pop ebp
:004253A1 C3                      ret


:004253A2 CC                      int 03
:004253A3 CC                      int 03
:004253A4 CC                      int 03
:004253A5 CC                      int 03
:004253A6 CC                      int 03
:004253A7 CC                      int 03
:004253A8 CC                      int 03
:004253A9 CC                      int 03
:004253AA CC                      int 03
:004253AB CC                      int 03
:004253AC CC                      int 03
:004253AD CC                      int 03
:004253AE CC                      int 03
:004253AF CC                      int 03

* Referenced by a CALL at Address:
|:00422985   
|
:004253B0 55                      push ebp
:004253B1 8BEC                    mov ebp, esp
:004253B3 51                      push ecx
:004253B4 894DFC                  mov dword ptr [ebp-04], ecx
:004253B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004253BA 668B4D08                mov cx, word ptr [ebp+08]
:004253BE 6689483E                mov word ptr [eax+3E], cx
:004253C2 8BE5                    mov esp, ebp
:004253C4 5D                      pop ebp
:004253C5 C20400                  ret 0004


:004253C8 CC                      int 03
:004253C9 CC                      int 03
:004253CA CC                      int 03
:004253CB CC                      int 03
:004253CC CC                      int 03
:004253CD CC                      int 03
:004253CE CC                      int 03
:004253CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00422F8F   , :00423172   , :0042363C   
|
:004253D0 55                      push ebp
:004253D1 8BEC                    mov ebp, esp
:004253D3 51                      push ecx
:004253D4 894DFC                  mov dword ptr [ebp-04], ecx
:004253D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004253DA 668B4D08                mov cx, word ptr [ebp+08]
:004253DE 6689482C                mov word ptr [eax+2C], cx
:004253E2 8BE5                    mov esp, ebp
:004253E4 5D                      pop ebp
:004253E5 C20400                  ret 0004


:004253E8 CC                      int 03
:004253E9 CC                      int 03
:004253EA CC                      int 03
:004253EB CC                      int 03
:004253EC CC                      int 03
:004253ED CC                      int 03
:004253EE CC                      int 03
:004253EF CC                      int 03

* Referenced by a CALL at Addresses:
|:004210B4   , :00422FC4   , :0042309C   
|
:004253F0 55                      push ebp
:004253F1 8BEC                    mov ebp, esp
:004253F3 51                      push ecx
:004253F4 894DFC                  mov dword ptr [ebp-04], ecx
:004253F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004253FA 668B4D08                mov cx, word ptr [ebp+08]
:004253FE 6689482E                mov word ptr [eax+2E], cx
:00425402 8BE5                    mov esp, ebp
:00425404 5D                      pop ebp
:00425405 C20400                  ret 0004


:00425408 CC                      int 03
:00425409 CC                      int 03
:0042540A CC                      int 03
:0042540B CC                      int 03
:0042540C CC                      int 03
:0042540D CC                      int 03
:0042540E CC                      int 03
:0042540F CC                      int 03

* Referenced by a CALL at Addresses:
|:00422E6A   , :004249DB   
|
:00425410 55                      push ebp
:00425411 8BEC                    mov ebp, esp
:00425413 51                      push ecx
:00425414 894DFC                  mov dword ptr [ebp-04], ecx
:00425417 8B45FC                  mov eax, dword ptr [ebp-04]
:0042541A 668B402E                mov ax, word ptr [eax+2E]
:0042541E 8BE5                    mov esp, ebp
:00425420 5D                      pop ebp
:00425421 C3                      ret


:00425422 CC                      int 03
:00425423 CC                      int 03
:00425424 CC                      int 03
:00425425 CC                      int 03
:00425426 CC                      int 03
:00425427 CC                      int 03
:00425428 CC                      int 03
:00425429 CC                      int 03
:0042542A CC                      int 03
:0042542B CC                      int 03
:0042542C CC                      int 03
:0042542D CC                      int 03
:0042542E CC                      int 03
:0042542F CC                      int 03

* Referenced by a CALL at Addresses:
|:00403CAD   , :00403D16   , :004249C6   
|
:00425430 55                      push ebp
:00425431 8BEC                    mov ebp, esp
:00425433 51                      push ecx
:00425434 894DFC                  mov dword ptr [ebp-04], ecx
:00425437 8B45FC                  mov eax, dword ptr [ebp-04]
:0042543A 668B00                  mov ax, word ptr [eax]
:0042543D 8BE5                    mov esp, ebp
:0042543F 5D                      pop ebp
:00425440 C3                      ret


:00425441 CC                      int 03
:00425442 CC                      int 03
:00425443 CC                      int 03
:00425444 CC                      int 03
:00425445 CC                      int 03
:00425446 CC                      int 03
:00425447 CC                      int 03
:00425448 CC                      int 03
:00425449 CC                      int 03
:0042544A CC                      int 03
:0042544B CC                      int 03
:0042544C CC                      int 03
:0042544D CC                      int 03
:0042544E CC                      int 03
:0042544F CC                      int 03

* Referenced by a CALL at Address:
|:004249E4   
|
:00425450 55                      push ebp
:00425451 8BEC                    mov ebp, esp
:00425453 51                      push ecx
:00425454 894DFC                  mov dword ptr [ebp-04], ecx
:00425457 8B45FC                  mov eax, dword ptr [ebp-04]
:0042545A 668B400E                mov ax, word ptr [eax+0E]
:0042545E 8BE5                    mov esp, ebp
:00425460 5D                      pop ebp
:00425461 C3                      ret


:00425462 CC                      int 03
:00425463 CC                      int 03
:00425464 CC                      int 03
:00425465 CC                      int 03
:00425466 CC                      int 03
:00425467 CC                      int 03
:00425468 CC                      int 03
:00425469 CC                      int 03
:0042546A CC                      int 03
:0042546B CC                      int 03
:0042546C CC                      int 03
:0042546D CC                      int 03
:0042546E CC                      int 03
:0042546F CC                      int 03

* Referenced by a CALL at Address:
|:004249D2   
|
:00425470 55                      push ebp
:00425471 8BEC                    mov ebp, esp
:00425473 51                      push ecx
:00425474 894DFC                  mov dword ptr [ebp-04], ecx
:00425477 8B45FC                  mov eax, dword ptr [ebp-04]
:0042547A 668B402C                mov ax, word ptr [eax+2C]
:0042547E 8BE5                    mov esp, ebp
:00425480 5D                      pop ebp
:00425481 C3                      ret


:00425482 CC                      int 03
:00425483 CC                      int 03
:00425484 CC                      int 03
:00425485 CC                      int 03
:00425486 CC                      int 03
:00425487 CC                      int 03
:00425488 CC                      int 03
:00425489 CC                      int 03
:0042548A CC                      int 03
:0042548B CC                      int 03
:0042548C CC                      int 03
:0042548D CC                      int 03
:0042548E CC                      int 03
:0042548F CC                      int 03

* Referenced by a CALL at Addresses:
|:00424AE4   , :00426B89   , :0042A262   , :0042B3FA   , :0042B434   
|:0042B673   , :0042B6AD   , :0042E100   , :0042E6A7   , :0042ED10   
|:0042FFC5   , :0042FFFC   , :00430A42   , :00430A8A   , :00430E21   
|:00430E58   , :0043105C   , :00431093   , :00435832   , :0043586B   
|:00437654   , :0043769B   , :0043975D   , :00439797   , :00439FC1   
|:0043A81B   , :0043A91C   , :0043AC81   , :0043C3EF   , :0043C453   
|:0043FEF2   , :00440335   , :00440AF5   , :00440CDE   , :00440E23   
|:00440F68   , :004410AC   , :00441348   , :00441519   , :00441821   
|:0044206C   , :004420D3   , :004456A9   
|
:00425490 55                      push ebp
:00425491 8BEC                    mov ebp, esp
:00425493 51                      push ecx
:00425494 894DFC                  mov dword ptr [ebp-04], ecx
:00425497 8B4508                  mov eax, dword ptr [ebp+08]
:0042549A 50                      push eax
:0042549B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042549E E86C160000              call 00426B0F
:004254A3 8BE5                    mov esp, ebp
:004254A5 5D                      pop ebp
:004254A6 C20400                  ret 0004


:004254A9 CC                      int 03
:004254AA CC                      int 03
:004254AB CC                      int 03
:004254AC CC                      int 03
:004254AD CC                      int 03
:004254AE CC                      int 03
:004254AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00424B57   , :00426B98   , :00426BB2   , :00426F03   , :00444DC4   
|:00444E9C   , :0044641D   , :0044D85A   , :0044D8CE   , :00456DBC   
|
:004254B0 55                      push ebp
:004254B1 8BEC                    mov ebp, esp
:004254B3 51                      push ecx
:004254B4 894DFC                  mov dword ptr [ebp-04], ecx
:004254B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004254BA E86A160000              call 00426B29
:004254BF F7D8                    neg eax
:004254C1 1BC0                    sbb eax, eax
:004254C3 40                      inc eax
:004254C4 8BE5                    mov esp, ebp
:004254C6 5D                      pop ebp
:004254C7 C3                      ret


:004254C8 CC                      int 03
:004254C9 CC                      int 03
:004254CA CC                      int 03
:004254CB CC                      int 03
:004254CC CC                      int 03
:004254CD CC                      int 03
:004254CE CC                      int 03
:004254CF CC                      int 03

* Referenced by a CALL at Address:
|:00424C3A   
|
:004254D0 55                      push ebp
:004254D1 8BEC                    mov ebp, esp
:004254D3 51                      push ecx
:004254D4 894DFC                  mov dword ptr [ebp-04], ecx
:004254D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004254DA 8A4022                  mov al, byte ptr [eax+22]
:004254DD 8BE5                    mov esp, ebp
:004254DF 5D                      pop ebp
:004254E0 C3                      ret


:004254E1 CC                      int 03
:004254E2 CC                      int 03
:004254E3 CC                      int 03
:004254E4 CC                      int 03
:004254E5 CC                      int 03
:004254E6 CC                      int 03
:004254E7 CC                      int 03
:004254E8 CC                      int 03
:004254E9 CC                      int 03
:004254EA CC                      int 03
:004254EB CC                      int 03
:004254EC CC                      int 03
:004254ED CC                      int 03
:004254EE CC                      int 03
:004254EF CC                      int 03
:004254F0 55                      push ebp
:004254F1 8BEC                    mov ebp, esp
:004254F3 E807000000              call 004254FF
:004254F8 E822000000              call 0042551F
:004254FD 5D                      pop ebp
:004254FE C3                      ret



* Referenced by a CALL at Address:
|:004254F3   
|
:004254FF 55                      push ebp
:00425500 8BEC                    mov ebp, esp
:00425502 68002F4500              push 00452F00
:00425507 68F05C4200              push 00425CF0
:0042550C 6885020000              push 00000285

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:00425511 6A70                    push 00000070
:00425513 6898224900              push 00492298
:00425518 E8438C0400              call 0046E160
:0042551D 5D                      pop ebp
:0042551E C3                      ret



* Referenced by a CALL at Address:
|:004254F8   
|
:0042551F 55                      push ebp
:00425520 8BEC                    mov ebp, esp
:00425522 6831554200              push 00425531
:00425527 E8447F0400              call 0046D470
:0042552C 83C404                  add esp, 00000004
:0042552F 5D                      pop ebp
:00425530 C3                      ret


:00425531 55                      push ebp
:00425532 8BEC                    mov ebp, esp
:00425534 68002F4500              push 00452F00
:00425539 6885020000              push 00000285

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:0042553E 6A70                    push 00000070
:00425540 6898224900              push 00492298
:00425545 E8B68C0400              call 0046E200
:0042554A 5D                      pop ebp
:0042554B C3                      ret


:0042554C 55                      push ebp
:0042554D 8BEC                    mov ebp, esp
:0042554F E807000000              call 0042555B
:00425554 E81F000000              call 00425578
:00425559 5D                      pop ebp
:0042555A C3                      ret



* Referenced by a CALL at Address:
|:0042554F   
|
:0042555B 55                      push ebp
:0042555C 8BEC                    mov ebp, esp
:0042555E 68A05C4200              push 00425CA0
:00425563 68D05C4200              push 00425CD0
:00425568 6A19                    push 00000019
:0042556A 6A32                    push 00000032
:0042556C 68B0EA4800              push 0048EAB0
:00425571 E8EA8B0400              call 0046E160
:00425576 5D                      pop ebp
:00425577 C3                      ret



* Referenced by a CALL at Address:
|:00425554   
|
:00425578 55                      push ebp
:00425579 8BEC                    mov ebp, esp
:0042557B 688A554200              push 0042558A
:00425580 E8EB7E0400              call 0046D470
:00425585 83C404                  add esp, 00000004
:00425588 5D                      pop ebp
:00425589 C3                      ret


:0042558A 55                      push ebp
:0042558B 8BEC                    mov ebp, esp
:0042558D 68A05C4200              push 00425CA0
:00425592 6A19                    push 00000019
:00425594 6A32                    push 00000032
:00425596 68B0EA4800              push 0048EAB0
:0042559B E8608C0400              call 0046E200
:004255A0 5D                      pop ebp
:004255A1 C3                      ret


:004255A2 55                      push ebp
:004255A3 8BEC                    mov ebp, esp
:004255A5 E807000000              call 004255B1
:004255AA E81F000000              call 004255CE
:004255AF 5D                      pop ebp
:004255B0 C3                      ret



* Referenced by a CALL at Address:
|:004255A5   
|
:004255B1 55                      push ebp
:004255B2 8BEC                    mov ebp, esp
:004255B4 68A05C4200              push 00425CA0
:004255B9 68D05C4200              push 00425CD0
:004255BE 6A7D                    push 0000007D

* Possible Reference to String Resource ID=00012: ""
                                  |
:004255C0 6A0C                    push 0000000C
:004255C2 6848954A00              push 004A9548
:004255C7 E8948B0400              call 0046E160
:004255CC 5D                      pop ebp
:004255CD C3                      ret



* Referenced by a CALL at Address:
|:004255AA   
|
:004255CE 55                      push ebp
:004255CF 8BEC                    mov ebp, esp
:004255D1 68E0554200              push 004255E0
:004255D6 E8957E0400              call 0046D470
:004255DB 83C404                  add esp, 00000004
:004255DE 5D                      pop ebp
:004255DF C3                      ret


:004255E0 55                      push ebp
:004255E1 8BEC                    mov ebp, esp
:004255E3 68A05C4200              push 00425CA0
:004255E8 6A7D                    push 0000007D

* Possible Reference to String Resource ID=00012: ""
                                  |
:004255EA 6A0C                    push 0000000C
:004255EC 6848954A00              push 004A9548
:004255F1 E80A8C0400              call 0046E200
:004255F6 5D                      pop ebp
:004255F7 C3                      ret


:004255F8 55                      push ebp
:004255F9 8BEC                    mov ebp, esp
:004255FB E807000000              call 00425607
:00425600 E81F000000              call 00425624
:00425605 5D                      pop ebp
:00425606 C3                      ret



* Referenced by a CALL at Address:
|:004255FB   
|
:00425607 55                      push ebp
:00425608 8BEC                    mov ebp, esp
:0042560A 68A05C4200              push 00425CA0
:0042560F 68B05C4200              push 00425CB0
:00425614 6A1C                    push 0000001C
:00425616 6A27                    push 00000027
:00425618 68C83C4A00              push 004A3CC8
:0042561D E83E8B0400              call 0046E160
:00425622 5D                      pop ebp
:00425623 C3                      ret



* Referenced by a CALL at Address:
|:00425600   
|
:00425624 55                      push ebp
:00425625 8BEC                    mov ebp, esp
:00425627 6836564200              push 00425636
:0042562C E83F7E0400              call 0046D470
:00425631 83C404                  add esp, 00000004
:00425634 5D                      pop ebp
:00425635 C3                      ret


:00425636 55                      push ebp
:00425637 8BEC                    mov ebp, esp
:00425639 68A05C4200              push 00425CA0
:0042563E 6A1C                    push 0000001C
:00425640 6A27                    push 00000027
:00425642 68C83C4A00              push 004A3CC8
:00425647 E8B48B0400              call 0046E200
:0042564C 5D                      pop ebp
:0042564D C3                      ret


:0042564E 55                      push ebp
:0042564F 8BEC                    mov ebp, esp
:00425651 E807000000              call 0042565D
:00425656 E81F000000              call 0042567A
:0042565B 5D                      pop ebp
:0042565C C3                      ret



* Referenced by a CALL at Address:
|:00425651   
|
:0042565D 55                      push ebp
:0042565E 8BEC                    mov ebp, esp
:00425660 68A05C4200              push 00425CA0
:00425665 68B0774000              push 004077B0

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0042566A 6A11                    push 00000011
:0042566C 6A4A                    push 0000004A
:0042566E 6840DA4A00              push 004ADA40
:00425673 E8E88A0400              call 0046E160
:00425678 5D                      pop ebp
:00425679 C3                      ret



* Referenced by a CALL at Address:
|:00425656   
|
:0042567A 55                      push ebp
:0042567B 8BEC                    mov ebp, esp
:0042567D 688C564200              push 0042568C
:00425682 E8E97D0400              call 0046D470
:00425687 83C404                  add esp, 00000004
:0042568A 5D                      pop ebp
:0042568B C3                      ret


:0042568C 55                      push ebp
:0042568D 8BEC                    mov ebp, esp
:0042568F 68A05C4200              push 00425CA0

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00425694 6A11                    push 00000011
:00425696 6A4A                    push 0000004A
:00425698 6840DA4A00              push 004ADA40
:0042569D E85E8B0400              call 0046E200
:004256A2 5D                      pop ebp
:004256A3 C3                      ret


:004256A4 55                      push ebp
:004256A5 8BEC                    mov ebp, esp
:004256A7 E807000000              call 004256B3
:004256AC E81F000000              call 004256D0
:004256B1 5D                      pop ebp
:004256B2 C3                      ret



* Referenced by a CALL at Address:
|:004256A7   
|
:004256B3 55                      push ebp
:004256B4 8BEC                    mov ebp, esp
:004256B6 68A05C4200              push 00425CA0
:004256BB 68805B4200              push 00425B80

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004256C0 6A02                    push 00000002

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004256C2 6A0A                    push 0000000A
:004256C4 6818DA4A00              push 004ADA18
:004256C9 E8928A0400              call 0046E160
:004256CE 5D                      pop ebp
:004256CF C3                      ret



* Referenced by a CALL at Address:
|:004256AC   
|
:004256D0 55                      push ebp
:004256D1 8BEC                    mov ebp, esp
:004256D3 68E2564200              push 004256E2
:004256D8 E8937D0400              call 0046D470
:004256DD 83C404                  add esp, 00000004
:004256E0 5D                      pop ebp
:004256E1 C3                      ret


:004256E2 55                      push ebp
:004256E3 8BEC                    mov ebp, esp
:004256E5 68A05C4200              push 00425CA0

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004256EA 6A02                    push 00000002

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004256EC 6A0A                    push 0000000A
:004256EE 6818DA4A00              push 004ADA18
:004256F3 E8088B0400              call 0046E200
:004256F8 5D                      pop ebp
:004256F9 C3                      ret


:004256FA 55                      push ebp
:004256FB 8BEC                    mov ebp, esp
:004256FD E807000000              call 00425709
:00425702 E811000000              call 00425718
:00425707 5D                      pop ebp
:00425708 C3                      ret



* Referenced by a CALL at Address:
|:004256FD   
|
:00425709 55                      push ebp
:0042570A 8BEC                    mov ebp, esp
:0042570C B9C8E24A00              mov ecx, 004AE2C8
:00425711 E8AA040000              call 00425BC0
:00425716 5D                      pop ebp
:00425717 C3                      ret



* Referenced by a CALL at Address:
|:00425702   
|
:00425718 55                      push ebp
:00425719 8BEC                    mov ebp, esp
:0042571B 682A574200              push 0042572A
:00425720 E84B7D0400              call 0046D470
:00425725 83C404                  add esp, 00000004
:00425728 5D                      pop ebp
:00425729 C3                      ret


:0042572A 55                      push ebp
:0042572B 8BEC                    mov ebp, esp
:0042572D B9C8E24A00              mov ecx, 004AE2C8
:00425732 E869050000              call 00425CA0
:00425737 5D                      pop ebp
:00425738 C3                      ret


:00425739 55                      push ebp
:0042573A 8BEC                    mov ebp, esp
:0042573C E807000000              call 00425748
:00425741 E822000000              call 00425768
:00425746 5D                      pop ebp
:00425747 C3                      ret



* Referenced by a CALL at Address:
|:0042573C   
|
:00425748 55                      push ebp
:00425749 8BEC                    mov ebp, esp
:0042574B 68A05C4200              push 00425CA0
:00425750 68B05C4200              push 00425CB0

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00425755 68FF000000              push 000000FF
:0042575A 6A33                    push 00000033
:0042575C 68C8EF4800              push 0048EFC8
:00425761 E8FA890400              call 0046E160
:00425766 5D                      pop ebp
:00425767 C3                      ret



* Referenced by a CALL at Address:
|:00425741   
|
:00425768 55                      push ebp
:00425769 8BEC                    mov ebp, esp
:0042576B 687A574200              push 0042577A
:00425770 E8FB7C0400              call 0046D470
:00425775 83C404                  add esp, 00000004
:00425778 5D                      pop ebp
:00425779 C3                      ret


:0042577A 55                      push ebp
:0042577B 8BEC                    mov ebp, esp
:0042577D 68A05C4200              push 00425CA0

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00425782 68FF000000              push 000000FF
:00425787 6A33                    push 00000033
:00425789 68C8EF4800              push 0048EFC8
:0042578E E86D8A0400              call 0046E200
:00425793 5D                      pop ebp
:00425794 C3                      ret


:00425795 55                      push ebp
:00425796 8BEC                    mov ebp, esp
:00425798 E807000000              call 004257A4
:0042579D E81F000000              call 004257C1
:004257A2 5D                      pop ebp
:004257A3 C3                      ret



* Referenced by a CALL at Address:
|:00425798   
|
:004257A4 55                      push ebp
:004257A5 8BEC                    mov ebp, esp
:004257A7 68A05C4200              push 00425CA0
:004257AC 68B05C4200              push 00425CB0
:004257B1 6A34                    push 00000034

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004257B3 6A11                    push 00000011
:004257B5 68309C4A00              push 004A9C30
:004257BA E8A1890400              call 0046E160
:004257BF 5D                      pop ebp
:004257C0 C3                      ret



* Referenced by a CALL at Address:
|:0042579D   
|
:004257C1 55                      push ebp
:004257C2 8BEC                    mov ebp, esp
:004257C4 68D3574200              push 004257D3
:004257C9 E8A27C0400              call 0046D470
:004257CE 83C404                  add esp, 00000004
:004257D1 5D                      pop ebp
:004257D2 C3                      ret


:004257D3 55                      push ebp
:004257D4 8BEC                    mov ebp, esp
:004257D6 68A05C4200              push 00425CA0
:004257DB 6A34                    push 00000034

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004257DD 6A11                    push 00000011
:004257DF 68309C4A00              push 004A9C30
:004257E4 E8178A0400              call 0046E200
:004257E9 5D                      pop ebp
:004257EA C3                      ret


:004257EB 55                      push ebp
:004257EC 8BEC                    mov ebp, esp
:004257EE E807000000              call 004257FA
:004257F3 E81F000000              call 00425817
:004257F8 5D                      pop ebp
:004257F9 C3                      ret



* Referenced by a CALL at Address:
|:004257EE   
|
:004257FA 55                      push ebp
:004257FB 8BEC                    mov ebp, esp
:004257FD 68A05C4200              push 00425CA0
:00425802 68B05C4200              push 00425CB0
:00425807 6A31                    push 00000031

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00425809 6A11                    push 00000011
:0042580B 6880DF4A00              push 004ADF80
:00425810 E84B890400              call 0046E160
:00425815 5D                      pop ebp
:00425816 C3                      ret



* Referenced by a CALL at Address:
|:004257F3   
|
:00425817 55                      push ebp
:00425818 8BEC                    mov ebp, esp
:0042581A 6829584200              push 00425829
:0042581F E84C7C0400              call 0046D470
:00425824 83C404                  add esp, 00000004
:00425827 5D                      pop ebp
:00425828 C3                      ret


:00425829 55                      push ebp
:0042582A 8BEC                    mov ebp, esp
:0042582C 68A05C4200              push 00425CA0
:00425831 6A31                    push 00000031

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00425833 6A11                    push 00000011
:00425835 6880DF4A00              push 004ADF80
:0042583A E8C1890400              call 0046E200
:0042583F 5D                      pop ebp
:00425840 C3                      ret


:00425841 55                      push ebp
:00425842 8BEC                    mov ebp, esp
:00425844 E807000000              call 00425850
:00425849 E811000000              call 0042585F
:0042584E 5D                      pop ebp
:0042584F C3                      ret



* Referenced by a CALL at Address:
|:00425844   
|
:00425850 55                      push ebp
:00425851 8BEC                    mov ebp, esp
:00425853 B908DA4A00              mov ecx, 004ADA08
:00425858 E8C3040000              call 00425D20
:0042585D 5D                      pop ebp
:0042585E C3                      ret



* Referenced by a CALL at Address:
|:00425849   
|
:0042585F 55                      push ebp
:00425860 8BEC                    mov ebp, esp
:00425862 6871584200              push 00425871
:00425867 E8047C0400              call 0046D470
:0042586C 83C404                  add esp, 00000004
:0042586F 5D                      pop ebp
:00425870 C3                      ret


:00425871 55                      push ebp
:00425872 8BEC                    mov ebp, esp
:00425874 B908DA4A00              mov ecx, 004ADA08
:00425879 E862DCFEFF              call 004134E0
:0042587E 5D                      pop ebp
:0042587F C3                      ret


:00425880 55                      push ebp
:00425881 8BEC                    mov ebp, esp
:00425883 E807000000              call 0042588F
:00425888 E811000000              call 0042589E
:0042588D 5D                      pop ebp
:0042588E C3                      ret



* Referenced by a CALL at Address:
|:00425883   
|
:0042588F 55                      push ebp
:00425890 8BEC                    mov ebp, esp
:00425892 B920414A00              mov ecx, 004A4120
:00425897 E884040000              call 00425D20
:0042589C 5D                      pop ebp
:0042589D C3                      ret



* Referenced by a CALL at Address:
|:00425888   
|
:0042589E 55                      push ebp
:0042589F 8BEC                    mov ebp, esp
:004258A1 68B0584200              push 004258B0
:004258A6 E8C57B0400              call 0046D470
:004258AB 83C404                  add esp, 00000004
:004258AE 5D                      pop ebp
:004258AF C3                      ret


:004258B0 55                      push ebp
:004258B1 8BEC                    mov ebp, esp
:004258B3 B920414A00              mov ecx, 004A4120
:004258B8 E823DCFEFF              call 004134E0
:004258BD 5D                      pop ebp
:004258BE C3                      ret


:004258BF 55                      push ebp
:004258C0 8BEC                    mov ebp, esp
:004258C2 E807000000              call 004258CE
:004258C7 E811000000              call 004258DD
:004258CC 5D                      pop ebp
:004258CD C3                      ret



* Referenced by a CALL at Address:
|:004258C2   
|
:004258CE 55                      push ebp
:004258CF 8BEC                    mov ebp, esp
:004258D1 B930DF4A00              mov ecx, 004ADF30
:004258D6 E845040000              call 00425D20
:004258DB 5D                      pop ebp
:004258DC C3                      ret



* Referenced by a CALL at Address:
|:004258C7   
|
:004258DD 55                      push ebp
:004258DE 8BEC                    mov ebp, esp
:004258E0 68EF584200              push 004258EF
:004258E5 E8867B0400              call 0046D470
:004258EA 83C404                  add esp, 00000004
:004258ED 5D                      pop ebp
:004258EE C3                      ret


:004258EF 55                      push ebp
:004258F0 8BEC                    mov ebp, esp
:004258F2 B930DF4A00              mov ecx, 004ADF30
:004258F7 E8E4DBFEFF              call 004134E0
:004258FC 5D                      pop ebp
:004258FD C3                      ret


:004258FE 55                      push ebp
:004258FF 8BEC                    mov ebp, esp
:00425901 E807000000              call 0042590D
:00425906 E811000000              call 0042591C
:0042590B 5D                      pop ebp
:0042590C C3                      ret



* Referenced by a CALL at Address:
|:00425901   
|
:0042590D 55                      push ebp
:0042590E 8BEC                    mov ebp, esp
:00425910 B910414A00              mov ecx, 004A4110
:00425915 E806040000              call 00425D20
:0042591A 5D                      pop ebp
:0042591B C3                      ret



* Referenced by a CALL at Address:
|:00425906   
|
:0042591C 55                      push ebp
:0042591D 8BEC                    mov ebp, esp
:0042591F 682E594200              push 0042592E
:00425924 E8477B0400              call 0046D470
:00425929 83C404                  add esp, 00000004
:0042592C 5D                      pop ebp
:0042592D C3                      ret


:0042592E 55                      push ebp
:0042592F 8BEC                    mov ebp, esp
:00425931 B910414A00              mov ecx, 004A4110
:00425936 E8A5DBFEFF              call 004134E0
:0042593B 5D                      pop ebp
:0042593C C3                      ret


:0042593D 55                      push ebp
:0042593E 8BEC                    mov ebp, esp
:00425940 E807000000              call 0042594C
:00425945 E811000000              call 0042595B
:0042594A 5D                      pop ebp
:0042594B C3                      ret



* Referenced by a CALL at Address:
|:00425940   
|
:0042594C 55                      push ebp
:0042594D 8BEC                    mov ebp, esp
:0042594F B970DF4A00              mov ecx, 004ADF70
:00425954 E8C7030000              call 00425D20
:00425959 5D                      pop ebp
:0042595A C3                      ret



* Referenced by a CALL at Address:
|:00425945   
|
:0042595B 55                      push ebp
:0042595C 8BEC                    mov ebp, esp
:0042595E 686D594200              push 0042596D
:00425963 E8087B0400              call 0046D470
:00425968 83C404                  add esp, 00000004
:0042596B 5D                      pop ebp
:0042596C C3                      ret


:0042596D 55                      push ebp
:0042596E 8BEC                    mov ebp, esp
:00425970 B970DF4A00              mov ecx, 004ADF70
:00425975 E866DBFEFF              call 004134E0
:0042597A 5D                      pop ebp
:0042597B C3                      ret


:0042597C 55                      push ebp
:0042597D 8BEC                    mov ebp, esp
:0042597F E807000000              call 0042598B
:00425984 E811000000              call 0042599A
:00425989 5D                      pop ebp
:0042598A C3                      ret



* Referenced by a CALL at Address:
|:0042597F   
|
:0042598B 55                      push ebp
:0042598C 8BEC                    mov ebp, esp
:0042598E B930DA4A00              mov ecx, 004ADA30
:00425993 E888030000              call 00425D20
:00425998 5D                      pop ebp
:00425999 C3                      ret



* Referenced by a CALL at Address:
|:00425984   
|
:0042599A 55                      push ebp
:0042599B 8BEC                    mov ebp, esp
:0042599D 68AC594200              push 004259AC
:004259A2 E8C97A0400              call 0046D470
:004259A7 83C404                  add esp, 00000004
:004259AA 5D                      pop ebp
:004259AB C3                      ret


:004259AC 55                      push ebp
:004259AD 8BEC                    mov ebp, esp
:004259AF B930DA4A00              mov ecx, 004ADA30
:004259B4 E827DBFEFF              call 004134E0
:004259B9 5D                      pop ebp
:004259BA C3                      ret


:004259BB 55                      push ebp
:004259BC 8BEC                    mov ebp, esp
:004259BE E807000000              call 004259CA
:004259C3 E811000000              call 004259D9
:004259C8 5D                      pop ebp
:004259C9 C3                      ret



* Referenced by a CALL at Address:
|:004259BE   
|
:004259CA 55                      push ebp
:004259CB 8BEC                    mov ebp, esp
:004259CD B960DF4A00              mov ecx, 004ADF60
:004259D2 E849030000              call 00425D20
:004259D7 5D                      pop ebp
:004259D8 C3                      ret



* Referenced by a CALL at Address:
|:004259C3   
|
:004259D9 55                      push ebp
:004259DA 8BEC                    mov ebp, esp
:004259DC 68EB594200              push 004259EB
:004259E1 E88A7A0400              call 0046D470
:004259E6 83C404                  add esp, 00000004
:004259E9 5D                      pop ebp
:004259EA C3                      ret


:004259EB 55                      push ebp
:004259EC 8BEC                    mov ebp, esp
:004259EE B960DF4A00              mov ecx, 004ADF60
:004259F3 E8E8DAFEFF              call 004134E0
:004259F8 5D                      pop ebp
:004259F9 C3                      ret


:004259FA 55                      push ebp
:004259FB 8BEC                    mov ebp, esp
:004259FD E807000000              call 00425A09
:00425A02 E811000000              call 00425A18
:00425A07 5D                      pop ebp
:00425A08 C3                      ret



* Referenced by a CALL at Address:
|:004259FD   
|
:00425A09 55                      push ebp
:00425A0A 8BEC                    mov ebp, esp
:00425A0C B940DF4A00              mov ecx, 004ADF40
:00425A11 E80A030000              call 00425D20
:00425A16 5D                      pop ebp
:00425A17 C3                      ret



* Referenced by a CALL at Address:
|:00425A02   
|
:00425A18 55                      push ebp
:00425A19 8BEC                    mov ebp, esp
:00425A1B 682A5A4200              push 00425A2A
:00425A20 E84B7A0400              call 0046D470
:00425A25 83C404                  add esp, 00000004
:00425A28 5D                      pop ebp
:00425A29 C3                      ret


:00425A2A 55                      push ebp
:00425A2B 8BEC                    mov ebp, esp
:00425A2D B940DF4A00              mov ecx, 004ADF40
:00425A32 E8A9DAFEFF              call 004134E0
:00425A37 5D                      pop ebp
:00425A38 C3                      ret


:00425A39 55                      push ebp
:00425A3A 8BEC                    mov ebp, esp
:00425A3C E807000000              call 00425A48
:00425A41 E811000000              call 00425A57
:00425A46 5D                      pop ebp
:00425A47 C3                      ret



* Referenced by a CALL at Address:
|:00425A3C   
|
:00425A48 55                      push ebp
:00425A49 8BEC                    mov ebp, esp
:00425A4B B950DF4A00              mov ecx, 004ADF50
:00425A50 E8CB020000              call 00425D20
:00425A55 5D                      pop ebp
:00425A56 C3                      ret



* Referenced by a CALL at Address:
|:00425A41   
|
:00425A57 55                      push ebp
:00425A58 8BEC                    mov ebp, esp
:00425A5A 68695A4200              push 00425A69
:00425A5F E80C7A0400              call 0046D470
:00425A64 83C404                  add esp, 00000004
:00425A67 5D                      pop ebp
:00425A68 C3                      ret


:00425A69 55                      push ebp
:00425A6A 8BEC                    mov ebp, esp
:00425A6C B950DF4A00              mov ecx, 004ADF50
:00425A71 E86ADAFEFF              call 004134E0
:00425A76 5D                      pop ebp
:00425A77 C3                      ret


:00425A78 55                      push ebp
:00425A79 8BEC                    mov ebp, esp
:00425A7B E807000000              call 00425A87
:00425A80 E811000000              call 00425A96
:00425A85 5D                      pop ebp
:00425A86 C3                      ret



* Referenced by a CALL at Address:
|:00425A7B   
|
:00425A87 55                      push ebp
:00425A88 8BEC                    mov ebp, esp
:00425A8A B998EF4800              mov ecx, 0048EF98
:00425A8F E88C020000              call 00425D20
:00425A94 5D                      pop ebp
:00425A95 C3                      ret



* Referenced by a CALL at Address:
|:00425A80   
|
:00425A96 55                      push ebp
:00425A97 8BEC                    mov ebp, esp
:00425A99 68A85A4200              push 00425AA8
:00425A9E E8CD790400              call 0046D470
:00425AA3 83C404                  add esp, 00000004
:00425AA6 5D                      pop ebp
:00425AA7 C3                      ret


:00425AA8 55                      push ebp
:00425AA9 8BEC                    mov ebp, esp
:00425AAB B998EF4800              mov ecx, 0048EF98
:00425AB0 E82BDAFEFF              call 004134E0
:00425AB5 5D                      pop ebp
:00425AB6 C3                      ret


:00425AB7 55                      push ebp
:00425AB8 8BEC                    mov ebp, esp
:00425ABA E807000000              call 00425AC6
:00425ABF E811000000              call 00425AD5
:00425AC4 5D                      pop ebp
:00425AC5 C3                      ret



* Referenced by a CALL at Address:
|:00425ABA   
|
:00425AC6 55                      push ebp
:00425AC7 8BEC                    mov ebp, esp
:00425AC9 B9408B4A00              mov ecx, 004A8B40
:00425ACE E82D1CFEFF              call 00407700
:00425AD3 5D                      pop ebp
:00425AD4 C3                      ret



* Referenced by a CALL at Address:
|:00425ABF   
|
:00425AD5 55                      push ebp
:00425AD6 8BEC                    mov ebp, esp
:00425AD8 68E75A4200              push 00425AE7
:00425ADD E88E790400              call 0046D470
:00425AE2 83C404                  add esp, 00000004
:00425AE5 5D                      pop ebp
:00425AE6 C3                      ret


:00425AE7 55                      push ebp
:00425AE8 8BEC                    mov ebp, esp
:00425AEA B9408B4A00              mov ecx, 004A8B40
:00425AEF E82C1CFEFF              call 00407720
:00425AF4 5D                      pop ebp
:00425AF5 C3                      ret


:00425AF6 55                      push ebp
:00425AF7 8BEC                    mov ebp, esp
:00425AF9 E807000000              call 00425B05
:00425AFE E811000000              call 00425B14
:00425B03 5D                      pop ebp
:00425B04 C3                      ret



* Referenced by a CALL at Address:
|:00425AF9   
|
:00425B05 55                      push ebp
:00425B06 8BEC                    mov ebp, esp
:00425B08 B9289B4A00              mov ecx, 004A9B28
:00425B0D E8EE1BFEFF              call 00407700
:00425B12 5D                      pop ebp
:00425B13 C3                      ret



* Referenced by a CALL at Address:
|:00425AFE   
|
:00425B14 55                      push ebp
:00425B15 8BEC                    mov ebp, esp
:00425B17 68265B4200              push 00425B26
:00425B1C E84F790400              call 0046D470
:00425B21 83C404                  add esp, 00000004
:00425B24 5D                      pop ebp
:00425B25 C3                      ret


:00425B26 55                      push ebp
:00425B27 8BEC                    mov ebp, esp
:00425B29 B9289B4A00              mov ecx, 004A9B28
:00425B2E E8ED1BFEFF              call 00407720
:00425B33 5D                      pop ebp
:00425B34 C3                      ret


:00425B35 55                      push ebp
:00425B36 8BEC                    mov ebp, esp
:00425B38 E807000000              call 00425B44
:00425B3D E811000000              call 00425B53
:00425B42 5D                      pop ebp
:00425B43 C3                      ret



* Referenced by a CALL at Address:
|:00425B38   
|
:00425B44 55                      push ebp
:00425B45 8BEC                    mov ebp, esp
:00425B47 B914DA4A00              mov ecx, 004ADA14
:00425B4C E8EF1CFEFF              call 00407840
:00425B51 5D                      pop ebp
:00425B52 C3                      ret



* Referenced by a CALL at Address:
|:00425B3D   
|
:00425B53 55                      push ebp
:00425B54 8BEC                    mov ebp, esp
:00425B56 68655B4200              push 00425B65
:00425B5B E810790400              call 0046D470
:00425B60 83C404                  add esp, 00000004
:00425B63 5D                      pop ebp
:00425B64 C3                      ret


:00425B65 55                      push ebp
:00425B66 8BEC                    mov ebp, esp
:00425B68 B914DA4A00              mov ecx, 004ADA14
:00425B6D E8CCA6FEFF              call 0041023E
:00425B72 5D                      pop ebp
:00425B73 C3                      ret


:00425B74 CC                      int 03
:00425B75 CC                      int 03
:00425B76 CC                      int 03
:00425B77 CC                      int 03
:00425B78 CC                      int 03
:00425B79 CC                      int 03
:00425B7A CC                      int 03
:00425B7B CC                      int 03
:00425B7C CC                      int 03
:00425B7D CC                      int 03
:00425B7E CC                      int 03
:00425B7F CC                      int 03
:00425B80 55                      push ebp
:00425B81 8BEC                    mov ebp, esp
:00425B83 51                      push ecx
:00425B84 894DFC                  mov dword ptr [ebp-04], ecx
:00425B87 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425B8A E8211CFEFF              call 004077B0
:00425B8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425B92 83C102                  add ecx, 00000002
:00425B95 E8161CFEFF              call 004077B0
:00425B9A 8B45FC                  mov eax, dword ptr [ebp-04]
:00425B9D C64005FF                mov [eax+05], FF
:00425BA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425BA4 C6410700                mov [ecx+07], 00
:00425BA8 8B55FC                  mov edx, dword ptr [ebp-04]
:00425BAB C6420900                mov [edx+09], 00
:00425BAF 8B45FC                  mov eax, dword ptr [ebp-04]
:00425BB2 8BE5                    mov esp, ebp
:00425BB4 5D                      pop ebp
:00425BB5 C3                      ret


:00425BB6 CC                      int 03
:00425BB7 CC                      int 03
:00425BB8 CC                      int 03
:00425BB9 CC                      int 03
:00425BBA CC                      int 03
:00425BBB CC                      int 03
:00425BBC CC                      int 03
:00425BBD CC                      int 03
:00425BBE CC                      int 03
:00425BBF CC                      int 03

* Referenced by a CALL at Address:
|:00425711   
|
:00425BC0 55                      push ebp
:00425BC1 8BEC                    mov ebp, esp
:00425BC3 51                      push ecx
:00425BC4 894DFC                  mov dword ptr [ebp-04], ecx
:00425BC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00425BCA C6400801                mov [eax+08], 01
:00425BCE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425BD1 C701E8030000            mov dword ptr [ecx], 000003E8
:00425BD7 8B55FC                  mov edx, dword ptr [ebp-04]
:00425BDA C6421402                mov [edx+14], 02
:00425BDE 8B45FC                  mov eax, dword ptr [ebp-04]
:00425BE1 C6401502                mov [eax+15], 02
:00425BE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425BE8 C6411004                mov [ecx+10], 04
:00425BEC 8B55FC                  mov edx, dword ptr [ebp-04]
:00425BEF 66C7420A10F1            mov [edx+0A], F110
:00425BF5 8B45FC                  mov eax, dword ptr [ebp-04]
:00425BF8 66C7400C0100            mov [eax+0C], 0001
:00425BFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425C01 C6410EFF                mov [ecx+0E], FF
:00425C05 8B55FC                  mov edx, dword ptr [ebp-04]
:00425C08 C6420FFF                mov [edx+0F], FF
:00425C0C 8B45FC                  mov eax, dword ptr [ebp-04]
:00425C0F C6401200                mov [eax+12], 00
:00425C13 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425C16 C6411100                mov [ecx+11], 00
:00425C1A 8B55FC                  mov edx, dword ptr [ebp-04]
:00425C1D C6421300                mov [edx+13], 00
:00425C21 8B45FC                  mov eax, dword ptr [ebp-04]
:00425C24 C6400400                mov [eax+04], 00
:00425C28 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425C2B C64105FF                mov [ecx+05], FF
:00425C2F 8B55FC                  mov edx, dword ptr [ebp-04]
:00425C32 C6420600                mov [edx+06], 00

* Possible Reference to String Resource ID=00008: ""
                                  |
:00425C36 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00425C38 68FF000000              push 000000FF
:00425C3D 8B45FC                  mov eax, dword ptr [ebp-04]
:00425C40 83C016                  add eax, 00000016
:00425C43 50                      push eax
:00425C44 E8177D0400              call 0046D960
:00425C49 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00008: ""
                                  |
:00425C4C 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00425C4E 68FF000000              push 000000FF
:00425C53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425C56 83C11E                  add ecx, 0000001E
:00425C59 51                      push ecx
:00425C5A E8017D0400              call 0046D960
:00425C5F 83C40C                  add esp, 0000000C
:00425C62 6800010000              push 00000100

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00425C67 68FF000000              push 000000FF
:00425C6C 8B55FC                  mov edx, dword ptr [ebp-04]
:00425C6F 83C226                  add edx, 00000026
:00425C72 52                      push edx
:00425C73 E8E87C0400              call 0046D960
:00425C78 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00008: ""
                                  |
:00425C7B 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00425C7D 68FF000000              push 000000FF
:00425C82 8B45FC                  mov eax, dword ptr [ebp-04]
:00425C85 0526010000              add eax, 00000126
:00425C8A 50                      push eax
:00425C8B E8D07C0400              call 0046D960
:00425C90 83C40C                  add esp, 0000000C
:00425C93 8B45FC                  mov eax, dword ptr [ebp-04]
:00425C96 8BE5                    mov esp, ebp
:00425C98 5D                      pop ebp
:00425C99 C3                      ret


:00425C9A CC                      int 03
:00425C9B CC                      int 03
:00425C9C CC                      int 03
:00425C9D CC                      int 03
:00425C9E CC                      int 03
:00425C9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404948   , :00407384   , :004075CC   , :0040F15F   , :0040FA79   
|:0040FA94   , :004146E8   , :00425732   , :0042866F   , :00439C38   
|:0043D608   , :00441E84   , :00452F0A   , :004546D8   , :0045F428   
|:0045F467   , :004646AF   , :004737D6   , :00473833   , :0047398F   
|
:00425CA0 55                      push ebp
:00425CA1 8BEC                    mov ebp, esp
:00425CA3 51                      push ecx
:00425CA4 894DFC                  mov dword ptr [ebp-04], ecx
:00425CA7 8BE5                    mov esp, ebp
:00425CA9 5D                      pop ebp
:00425CAA C3                      ret


:00425CAB CC                      int 03
:00425CAC CC                      int 03
:00425CAD CC                      int 03
:00425CAE CC                      int 03
:00425CAF CC                      int 03
:00425CB0 55                      push ebp
:00425CB1 8BEC                    mov ebp, esp
:00425CB3 51                      push ecx
:00425CB4 894DFC                  mov dword ptr [ebp-04], ecx
:00425CB7 8B45FC                  mov eax, dword ptr [ebp-04]
:00425CBA C60000                  mov byte ptr [eax], 00
:00425CBD 8B45FC                  mov eax, dword ptr [ebp-04]
:00425CC0 8BE5                    mov esp, ebp
:00425CC2 5D                      pop ebp
:00425CC3 C3                      ret


:00425CC4 CC                      int 03
:00425CC5 CC                      int 03
:00425CC6 CC                      int 03
:00425CC7 CC                      int 03
:00425CC8 CC                      int 03
:00425CC9 CC                      int 03
:00425CCA CC                      int 03
:00425CCB CC                      int 03
:00425CCC CC                      int 03
:00425CCD CC                      int 03
:00425CCE CC                      int 03
:00425CCF CC                      int 03

* Referenced by a CALL at Addresses:
|:00424E4A   , :00425CFA   
|
:00425CD0 55                      push ebp
:00425CD1 8BEC                    mov ebp, esp
:00425CD3 51                      push ecx
:00425CD4 894DFC                  mov dword ptr [ebp-04], ecx
:00425CD7 8B45FC                  mov eax, dword ptr [ebp-04]
:00425CDA 66C700FFFF              mov word ptr [eax], FFFF
:00425CDF 8B45FC                  mov eax, dword ptr [ebp-04]
:00425CE2 8BE5                    mov esp, ebp
:00425CE4 5D                      pop ebp
:00425CE5 C3                      ret


:00425CE6 CC                      int 03
:00425CE7 CC                      int 03
:00425CE8 CC                      int 03
:00425CE9 CC                      int 03
:00425CEA CC                      int 03
:00425CEB CC                      int 03
:00425CEC CC                      int 03
:00425CED CC                      int 03
:00425CEE CC                      int 03
:00425CEF CC                      int 03
:00425CF0 55                      push ebp
:00425CF1 8BEC                    mov ebp, esp
:00425CF3 51                      push ecx
:00425CF4 894DFC                  mov dword ptr [ebp-04], ecx
:00425CF7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425CFA E8D1FFFFFF              call 00425CD0
:00425CFF 8B45FC                  mov eax, dword ptr [ebp-04]
:00425D02 C6400C00                mov [eax+0C], 00
:00425D06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425D09 C6411900                mov [ecx+19], 00
:00425D0D 8B45FC                  mov eax, dword ptr [ebp-04]
:00425D10 8BE5                    mov esp, ebp
:00425D12 5D                      pop ebp
:00425D13 C3                      ret


:00425D14 CC                      int 03
:00425D15 CC                      int 03
:00425D16 CC                      int 03
:00425D17 CC                      int 03
:00425D18 CC                      int 03
:00425D19 CC                      int 03
:00425D1A CC                      int 03
:00425D1B CC                      int 03
:00425D1C CC                      int 03
:00425D1D CC                      int 03
:00425D1E CC                      int 03
:00425D1F CC                      int 03

* Referenced by a CALL at Addresses:
|:00425858   , :00425897   , :004258D6   , :00425915   , :00425954   
|:00425993   , :004259D2   , :00425A11   , :00425A50   , :00425A8F   
|:0042A07C   , :00450DE2   , :00450DF4   
|
:00425D20 55                      push ebp
:00425D21 8BEC                    mov ebp, esp
:00425D23 51                      push ecx
:00425D24 894DFC                  mov dword ptr [ebp-04], ecx
:00425D27 8B45FC                  mov eax, dword ptr [ebp-04]
:00425D2A C70000000000            mov dword ptr [eax], 00000000
:00425D30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425D33 C7410400000000          mov [ecx+04], 00000000
:00425D3A 8B55FC                  mov edx, dword ptr [ebp-04]
:00425D3D C7420800000000          mov [edx+08], 00000000
:00425D44 8B45FC                  mov eax, dword ptr [ebp-04]
:00425D47 8BE5                    mov esp, ebp
:00425D49 5D                      pop ebp
:00425D4A C3                      ret


:00425D4B CC                      int 03
:00425D4C CC                      int 03
:00425D4D CC                      int 03
:00425D4E CC                      int 03
:00425D4F CC                      int 03

* Referenced by a CALL at Address:
|:00426A57   
|
:00425D50 55                      push ebp
:00425D51 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00425D53 6AFF                    push FFFFFFFF
:00425D55 6845394700              push 00473945
:00425D5A 64A100000000            mov eax, dword ptr fs:[00000000]
:00425D60 50                      push eax
:00425D61 64892500000000          mov dword ptr fs:[00000000], esp
:00425D68 81EC0C010000            sub esp, 0000010C
:00425D6E 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425D74 E88719FEFF              call 00407700
:00425D79 C745FC00000000          mov [ebp-04], 00000000
:00425D80 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00425D83 E8B81AFEFF              call 00407840
:00425D88 C645FC01                mov [ebp-04], 01
:00425D8C 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"MARK.E4"
                                  |
:00425D8E 68787A4700              push 00477A78
:00425D93 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00425D96 E8B6A4FEFF              call 00410251
:00425D9B 8945EC                  mov dword ptr [ebp-14], eax
:00425D9E 6800DC0000              push 0000DC00
:00425DA3 6A00                    push 00000000
:00425DA5 B940DF4A00              mov ecx, 004ADF40
:00425DAA E8EFD7FEFF              call 0041359E
:00425DAF 50                      push eax
:00425DB0 6A00                    push 00000000
:00425DB2 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00425DB5 E8F4A6FEFF              call 004104AE
:00425DBA 8945EC                  mov dword ptr [ebp-14], eax
:00425DBD 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00425DC0 E847A8FEFF              call 0041060C

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:00425DC5 68F07A4700              push 00477AF0
:00425DCA 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425DD0 E860E5FEFF              call 00414335
:00425DD5 6A00                    push 00000000
:00425DD7 B910414A00              mov ecx, 004A4110
:00425DDC E8BDD7FEFF              call 0041359E
:00425DE1 50                      push eax
:00425DE2 6A16                    push 00000016
:00425DE4 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425DEA E89AE6FEFF              call 00414489
:00425DEF 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425DF5 E812A8FEFF              call 0041060C
:00425DFA 6800120000              push 00001200
:00425DFF 6800DC0000              push 0000DC00
:00425E04 B940DF4A00              mov ecx, 004ADF40
:00425E09 E890D7FEFF              call 0041359E
:00425E0E 50                      push eax
:00425E0F 6A00                    push 00000000
:00425E11 B910414A00              mov ecx, 004A4110
:00425E16 E883D7FEFF              call 0041359E
:00425E1B 50                      push eax
:00425E1C E80ECA0300              call 0046282F
:00425E21 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:00425E24 68F07A4700              push 00477AF0
:00425E29 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425E2F E801E5FEFF              call 00414335
:00425E34 6A00                    push 00000000
:00425E36 B910414A00              mov ecx, 004A4110
:00425E3B E85ED7FEFF              call 0041359E
:00425E40 50                      push eax
:00425E41 6A21                    push 00000021
:00425E43 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425E49 E83BE6FEFF              call 00414489
:00425E4E 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425E54 E8B3A7FEFF              call 0041060C
:00425E59 6800120000              push 00001200
:00425E5E 6800EE0000              push 0000EE00
:00425E63 B940DF4A00              mov ecx, 004ADF40
:00425E68 E831D7FEFF              call 0041359E
:00425E6D 50                      push eax
:00425E6E 6A00                    push 00000000
:00425E70 B910414A00              mov ecx, 004A4110
:00425E75 E824D7FEFF              call 0041359E
:00425E7A 50                      push eax
:00425E7B E8AFC90300              call 0046282F
:00425E80 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:00425E83 68F07A4700              push 00477AF0
:00425E88 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425E8E E8A2E4FEFF              call 00414335
:00425E93 6A00                    push 00000000
:00425E95 B910414A00              mov ecx, 004A4110
:00425E9A E8FFD6FEFF              call 0041359E
:00425E9F 50                      push eax
:00425EA0 6A22                    push 00000022
:00425EA2 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425EA8 E8DCE5FEFF              call 00414489
:00425EAD 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425EB3 E854A7FEFF              call 0041060C
:00425EB8 6800120000              push 00001200
:00425EBD 6800000100              push 00010000
:00425EC2 B940DF4A00              mov ecx, 004ADF40
:00425EC7 E8D2D6FEFF              call 0041359E
:00425ECC 50                      push eax
:00425ECD 6A00                    push 00000000
:00425ECF B910414A00              mov ecx, 004A4110
:00425ED4 E8C5D6FEFF              call 0041359E
:00425ED9 50                      push eax
:00425EDA E850C90300              call 0046282F
:00425EDF 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:00425EE2 68F07A4700              push 00477AF0
:00425EE7 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425EED E843E4FEFF              call 00414335
:00425EF2 6A00                    push 00000000
:00425EF4 B910414A00              mov ecx, 004A4110
:00425EF9 E8A0D6FEFF              call 0041359E
:00425EFE 50                      push eax
:00425EFF 6A23                    push 00000023
:00425F01 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425F07 E87DE5FEFF              call 00414489
:00425F0C 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425F12 E8F5A6FEFF              call 0041060C
:00425F17 6800120000              push 00001200
:00425F1C 6800120100              push 00011200
:00425F21 B940DF4A00              mov ecx, 004ADF40
:00425F26 E873D6FEFF              call 0041359E
:00425F2B 50                      push eax
:00425F2C 6A00                    push 00000000
:00425F2E B910414A00              mov ecx, 004A4110
:00425F33 E866D6FEFF              call 0041359E
:00425F38 50                      push eax
:00425F39 E8F1C80300              call 0046282F
:00425F3E 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:00425F41 68F07A4700              push 00477AF0
:00425F46 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425F4C E8E4E3FEFF              call 00414335
:00425F51 6A00                    push 00000000
:00425F53 B910414A00              mov ecx, 004A4110
:00425F58 E841D6FEFF              call 0041359E
:00425F5D 50                      push eax
:00425F5E 6A24                    push 00000024
:00425F60 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425F66 E81EE5FEFF              call 00414489
:00425F6B 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425F71 E896A6FEFF              call 0041060C
:00425F76 6800200000              push 00002000
:00425F7B 6800240100              push 00012400
:00425F80 B940DF4A00              mov ecx, 004ADF40
:00425F85 E814D6FEFF              call 0041359E
:00425F8A 50                      push eax
:00425F8B 6A00                    push 00000000
:00425F8D B910414A00              mov ecx, 004A4110
:00425F92 E807D6FEFF              call 0041359E
:00425F97 50                      push eax
:00425F98 E892C80300              call 0046282F
:00425F9D 83C40C                  add esp, 0000000C
:00425FA0 C645FC00                mov [ebp-04], 00
:00425FA4 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00425FA7 E892A2FEFF              call 0041023E
:00425FAC C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00425FB3 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00425FB9 E86217FEFF              call 00407720
:00425FBE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425FC1 64890D00000000          mov dword ptr fs:[00000000], ecx
:00425FC8 8BE5                    mov esp, ebp
:00425FCA 5D                      pop ebp
:00425FCB C3                      ret



* Referenced by a CALL at Address:
|:00426024   
|
:00425FCC 55                      push ebp
:00425FCD 8BEC                    mov ebp, esp
:00425FCF B908DA4A00              mov ecx, 004ADA08
:00425FD4 E81AD5FEFF              call 004134F3
:00425FD9 B920414A00              mov ecx, 004A4120
:00425FDE E810D5FEFF              call 004134F3
:00425FE3 B930DF4A00              mov ecx, 004ADF30
:00425FE8 E806D5FEFF              call 004134F3
:00425FED 5D                      pop ebp
:00425FEE C3                      ret



* Referenced by a CALL at Addresses:
|:00426088   , :004264DC   
|
:00425FEF 55                      push ebp
:00425FF0 8BEC                    mov ebp, esp
:00425FF2 B950DF4A00              mov ecx, 004ADF50
:00425FF7 E8F7D4FEFF              call 004134F3
:00425FFC B998EF4800              mov ecx, 0048EF98
:00426001 E8EDD4FEFF              call 004134F3
:00426006 B930DA4A00              mov ecx, 004ADA30
:0042600B E8E3D4FEFF              call 004134F3
:00426010 B960DF4A00              mov ecx, 004ADF60
:00426015 E8D9D4FEFF              call 004134F3
:0042601A B940DF4A00              mov ecx, 004ADF40
:0042601F E8CFD4FEFF              call 004134F3
:00426024 E8A3FFFFFF              call 00425FCC
:00426029 B910414A00              mov ecx, 004A4110
:0042602E E8C0D4FEFF              call 004134F3
:00426033 B970DF4A00              mov ecx, 004ADF70
:00426038 E8B6D4FEFF              call 004134F3
:0042603D 5D                      pop ebp
:0042603E C3                      ret



* Referenced by a CALL at Addresses:
|:004260B9   , :004260D9   , :004260F9   , :0042611E   , :0042613E   
|:0042615E   , :0042617E   , :0042619E   , :004261BE   , :004261DE   
|:00450E4B   , :00450E6C   
|
:0042603F 55                      push ebp
:00426040 8BEC                    mov ebp, esp
:00426042 6A00                    push 00000000
:00426044 6A00                    push 00000000
:00426046 B9A8134800              mov ecx, 004813A8
:0042604B E85B1FFEFF              call 00407FAB
:00426050 6A4F                    push 0000004F
:00426052 B9A8134800              mov ecx, 004813A8
:00426057 E8FC1FFEFF              call 00408058
:0042605C 6A00                    push 00000000
:0042605E B9A8134800              mov ecx, 004813A8
:00426063 E82820FEFF              call 00408090
:00426068 8B4508                  mov eax, dword ptr [ebp+08]
:0042606B 50                      push eax

* Possible StringData Ref from Data Obj ->"O餣e%sfACݭn16MAЭsҰWin"
                                        ->"dows95C"
                                  |
:0042606C 68B87F4700              push 00477FB8
:00426071 68A8134800              push 004813A8
:00426076 E8FD2BFEFF              call 00408C78
:0042607B 83C40C                  add esp, 0000000C
:0042607E E8900C0000              call 00426D13
:00426083 E85ECEFEFF              call 00412EE6
:00426088 E862FFFFFF              call 00425FEF
:0042608D E8B94C0400              call 0046AD4B
:00426092 6A00                    push 00000000
:00426094 E8F56C0400              call 0046CD8E
:00426099 83C404                  add esp, 00000004
:0042609C 5D                      pop ebp
:0042609D C3                      ret



* Referenced by a CALL at Address:
|:004261E6   
|
:0042609E 55                      push ebp
:0042609F 8BEC                    mov ebp, esp
:004260A1 6800804300              push 00438000
:004260A6 B908DA4A00              mov ecx, 004ADA08
:004260AB E88ED4FEFF              call 0041353E
:004260B0 85C0                    test eax, eax
:004260B2 750D                    jne 004260C1

* Possible StringData Ref from Data Obj ->"N"
                                  |
:004260B4 68F07F4700              push 00477FF0
:004260B9 E881FFFFFF              call 0042603F
:004260BE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004260B2(C)
|
:004260C1 6800A41F00              push 001FA400
:004260C6 B920414A00              mov ecx, 004A4120
:004260CB E86ED4FEFF              call 0041353E
:004260D0 85C0                    test eax, eax
:004260D2 750D                    jne 004260E1

* Possible StringData Ref from Data Obj ->"B"
                                  |
:004260D4 68F47F4700              push 00477FF4
:004260D9 E861FFFFFF              call 0042603F
:004260DE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004260D2(C)
|
:004260E1 6800900100              push 00019000
:004260E6 B930DF4A00              mov ecx, 004ADF30
:004260EB E84ED4FEFF              call 0041353E
:004260F0 85C0                    test eax, eax
:004260F2 750D                    jne 00426101

* Possible StringData Ref from Data Obj ->"D"
                                  |
:004260F4 68F87F4700              push 00477FF8
:004260F9 E841FFFFFF              call 0042603F
:004260FE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004260F2(C)
|
:00426101 5D                      pop ebp
:00426102 C3                      ret



* Referenced by a CALL at Address:
|:00426A3C   
|
:00426103 55                      push ebp
:00426104 8BEC                    mov ebp, esp
:00426106 6800220100              push 00012200
:0042610B B950DF4A00              mov ecx, 004ADF50
:00426110 E829D4FEFF              call 0041353E
:00426115 85C0                    test eax, eax
:00426117 750D                    jne 00426126

* Possible StringData Ref from Data Obj ->"SmollMap"
                                  |
:00426119 68FC7F4700              push 00477FFC
:0042611E E81CFFFFFF              call 0042603F
:00426123 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426117(C)
|
:00426126 6800310000              push 00003100
:0042612B B998EF4800              mov ecx, 0048EF98
:00426130 E809D4FEFF              call 0041353E
:00426135 85C0                    test eax, eax
:00426137 750D                    jne 00426146

* Possible StringData Ref from Data Obj ->"SoldierFace"
                                  |
:00426139 6808804700              push 00478008
:0042613E E8FCFEFFFF              call 0042603F
:00426143 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426137(C)
|
:00426146 68004C0400              push 00044C00
:0042614B B910414A00              mov ecx, 004A4110
:00426150 E8E9D3FEFF              call 0041353E
:00426155 85C0                    test eax, eax
:00426157 750D                    jne 00426166

* Possible StringData Ref from Data Obj ->"E"
                                  |
:00426159 6814804700              push 00478014
:0042615E E8DCFEFFFF              call 0042603F
:00426163 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426157(C)
|
:00426166 6880070000              push 00000780
:0042616B B970DF4A00              mov ecx, 004ADF70
:00426170 E8C9D3FEFF              call 0041353E
:00426175 85C0                    test eax, eax
:00426177 750D                    jne 00426186

* Possible StringData Ref from Data Obj ->"F"
                                  |
:00426179 6818804700              push 00478018
:0042617E E8BCFEFFFF              call 0042603F
:00426183 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426177(C)
|
:00426186 68004C0400              push 00044C00
:0042618B B930DA4A00              mov ecx, 004ADA30
:00426190 E8A9D3FEFF              call 0041353E
:00426195 85C0                    test eax, eax
:00426197 750D                    jne 004261A6

* Possible StringData Ref from Data Obj ->"C"
                                  |
:00426199 681C804700              push 0047801C
:0042619E E89CFEFFFF              call 0042603F
:004261A3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426197(C)
|
:004261A6 6800000200              push 00020000
:004261AB B940DF4A00              mov ecx, 004ADF40
:004261B0 E889D3FEFF              call 0041353E
:004261B5 85C0                    test eax, eax
:004261B7 750D                    jne 004261C6

* Possible StringData Ref from Data Obj ->"G"
                                  |
:004261B9 6820804700              push 00478020
:004261BE E87CFEFFFF              call 0042603F
:004261C3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004261B7(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:5000, "iOl"
                                  |
:004261C6 6800500000              push 00005000
:004261CB B960DF4A00              mov ecx, 004ADF60
:004261D0 E869D3FEFF              call 0041353E
:004261D5 85C0                    test eax, eax
:004261D7 750D                    jne 004261E6

* Possible StringData Ref from Data Obj ->"H"
                                  |
:004261D9 6824804700              push 00478024
:004261DE E85CFEFFFF              call 0042603F
:004261E3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004261D7(C)
|
:004261E6 E8B3FEFFFF              call 0042609E
:004261EB 5D                      pop ebp
:004261EC C3                      ret



* Referenced by a CALL at Address:
|:00426A7A   
|
:004261ED 55                      push ebp
:004261EE 8BEC                    mov ebp, esp

* Possible StringData Ref from Data Obj ->"MMAP.E4"
                                  |
:004261F0 68487A4700              push 00477A48
:004261F5 B9289B4A00              mov ecx, 004A9B28
:004261FA E836E1FEFF              call 00414335

* Possible StringData Ref from Data Obj ->"KAO.E4"
                                  |
:004261FF 68807A4700              push 00477A80
:00426204 B9408B4A00              mov ecx, 004A8B40
:00426209 E827E1FEFF              call 00414335
:0042620E 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"IMSG.E4"
                                  |
:00426210 68887A4700              push 00477A88
:00426215 B914DA4A00              mov ecx, 004ADA14
:0042621A E832A0FEFF              call 00410251
:0042621F 5D                      pop ebp
:00426220 C3                      ret


:00426221 55                      push ebp
:00426222 8BEC                    mov ebp, esp
:00426224 B9289B4A00              mov ecx, 004A9B28
:00426229 E8DEA3FEFF              call 0041060C
:0042622E B9408B4A00              mov ecx, 004A8B40
:00426233 E8D4A3FEFF              call 0041060C
:00426238 B914DA4A00              mov ecx, 004ADA14
:0042623D E8CAA3FEFF              call 0041060C
:00426242 5D                      pop ebp
:00426243 C3                      ret



* Referenced by a CALL at Address:
|:004264BF   
|
:00426244 55                      push ebp
:00426245 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00426247 6AFF                    push FFFFFFFF
:00426249 685B394700              push 0047395B
:0042624E 64A100000000            mov eax, dword ptr fs:[00000000]
:00426254 50                      push eax
:00426255 64892500000000          mov dword ptr fs:[00000000], esp
:0042625C 81EC04010000            sub esp, 00000104
:00426262 E8C7280400              call 00468B2E
:00426267 B9880D4B00              mov ecx, 004B0D88
:0042626C E8D7B80300              call 00461B48
:00426271 E8880A0000              call 00426CFE
:00426276 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042627C E87F14FEFF              call 00407700
:00426281 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"LOGO.E4"
                                  |
:00426288 68987A4700              push 00477A98
:0042628D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00426293 E89DE0FEFF              call 00414335
:00426298 85C0                    test eax, eax
:0042629A 7517                    jne 004262B3
:0042629C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004262A3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004262A9 E87214FEFF              call 00407720
:004262AE E991000000              jmp 00426344

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042629A(C)
|
:004262B3 6A00                    push 00000000
:004262B5 B910414A00              mov ecx, 004A4110
:004262BA E8DFD2FEFF              call 0041359E
:004262BF 50                      push eax
:004262C0 6A01                    push 00000001
:004262C2 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004262C8 E8BCE1FEFF              call 00414489
:004262CD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004262D3 E834A3FEFF              call 0041060C
:004262D8 E89DC9FEFF              call 00412C7A
:004262DD E850CBFEFF              call 00412E32
:004262E2 6A00                    push 00000000
:004262E4 E83E440400              call 0046A727
:004262E9 83C404                  add esp, 00000004
:004262EC E8F5CBFEFF              call 00412EE6
:004262F1 E854C7FEFF              call 00412A4A
:004262F6 6A00                    push 00000000
:004262F8 B910414A00              mov ecx, 004A4110
:004262FD E89CD2FEFF              call 0041359E
:00426302 50                      push eax
:00426303 6890010000              push 00000190
:00426308 6880020000              push 00000280
:0042630D 6A28                    push 00000028
:0042630F 6A00                    push 00000000
:00426311 E8D1580400              call 0046BBE7
:00426316 83C414                  add esp, 00000014
:00426319 E82FCBFEFF              call 00412E4D
:0042631E E800CBFEFF              call 00412E23

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00426323 6A03                    push 00000003
:00426325 E8C6080000              call 00426BF0
:0042632A 83C404                  add esp, 00000004
:0042632D E8E2C8FEFF              call 00412C14
:00426332 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00426339 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042633F E8DC13FEFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004262AE(U)
|
:00426344 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00426347 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042634E 8BE5                    mov esp, ebp
:00426350 5D                      pop ebp
:00426351 C3                      ret



* Referenced by a CALL at Address:
|:00426561   
|
:00426352 55                      push ebp
:00426353 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00426355 6AFF                    push FFFFFFFF
:00426357 6871394700              push 00473971
:0042635C 64A100000000            mov eax, dword ptr fs:[00000000]
:00426362 50                      push eax
:00426363 64892500000000          mov dword ptr fs:[00000000], esp
:0042636A 81EC04010000            sub esp, 00000104
:00426370 E8B9270400              call 00468B2E
:00426375 E884090000              call 00426CFE
:0042637A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00426380 E87B13FEFF              call 00407700
:00426385 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"ACERTWP.E4"
                                  |
:0042638C 68A07A4700              push 00477AA0
:00426391 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00426397 E899DFFEFF              call 00414335
:0042639C 85C0                    test eax, eax
:0042639E 7517                    jne 004263B7
:004263A0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004263A7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004263AD E86E13FEFF              call 00407720
:004263B2 E996000000              jmp 0042644D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042639E(C)
|
:004263B7 6A00                    push 00000000
:004263B9 B910414A00              mov ecx, 004A4110
:004263BE E8DBD1FEFF              call 0041359E
:004263C3 50                      push eax
:004263C4 6A01                    push 00000001
:004263C6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004263CC E8B8E0FEFF              call 00414489
:004263D1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004263D7 E830A2FEFF              call 0041060C
:004263DC E899C8FEFF              call 00412C7A
:004263E1 E84CCAFEFF              call 00412E32
:004263E6 6A00                    push 00000000
:004263E8 E83A430400              call 0046A727
:004263ED 83C404                  add esp, 00000004
:004263F0 E8F1CAFEFF              call 00412EE6
:004263F5 E835C7FEFF              call 00412B2F
:004263FA 6A00                    push 00000000
:004263FC B910414A00              mov ecx, 004A4110
:00426401 E898D1FEFF              call 0041359E
:00426406 50                      push eax
:00426407 68C0000000              push 000000C0
:0042640C 6800020000              push 00000200
:00426411 6A7C                    push 0000007C
:00426413 6A40                    push 00000040
:00426415 E8CD570400              call 0046BBE7
:0042641A 83C414                  add esp, 00000014
:0042641D E82BCAFEFF              call 00412E4D
:00426422 E8FCC9FEFF              call 00412E23
:00426427 6A1E                    push 0000001E
:00426429 E8A4070000              call 00426BD2
:0042642E 83C404                  add esp, 00000004
:00426431 E8DEC7FEFF              call 00412C14
:00426436 E8ABCAFEFF              call 00412EE6
:0042643B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00426442 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00426448 E8D312FEFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004263B2(U)
|
:0042644D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00426450 64890D00000000          mov dword ptr fs:[00000000], ecx
:00426457 8BE5                    mov esp, ebp
:00426459 5D                      pop ebp
:0042645A C3                      ret



* Referenced by a CALL at Addresses:
|:00426538   , :00426679   , :004269E4   , :00469F37   , :00469F75   
|
:0042645B 55                      push ebp
:0042645C 8BEC                    mov ebp, esp
:0042645E E8AF04FFFF              call 00416912
:00426463 85C0                    test eax, eax
:00426465 741C                    je 00426483
:00426467 B9180A4B00              mov ecx, 004B0A18
:0042646C E82F060000              call 00426AA0
:00426471 85C0                    test eax, eax
:00426473 740E                    je 00426483
:00426475 6A00                    push 00000000
:00426477 6A00                    push 00000000
:00426479 B9880B4B00              mov ecx, 004B0B88
:0042647E E84D3E0300              call 0045A2D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426465(C), :00426473(C)
|
:00426483 E8A6260400              call 00468B2E
:00426488 6A00                    push 00000000
:0042648A E889E20300              call 00464718
:0042648F 83C404                  add esp, 00000004
:00426492 E85B970300              call 0045FBF2
:00426497 B9A0574800              mov ecx, 004857A0
:0042649C E84AF2FEFF              call 004156EB
:004264A1 B9880D4B00              mov ecx, 004B0D88
:004264A6 E89DB60300              call 00461B48
:004264AB B9880D4B00              mov ecx, 004B0D88
:004264B0 E8B9B40300              call 0046196E
:004264B5 B9800D4B00              mov ecx, 004B0D80
:004264BA E8C2B60300              call 00461B81
:004264BF E880FDFFFF              call 00426244
:004264C4 E8B1C7FEFF              call 00412C7A
:004264C9 E818CAFEFF              call 00412EE6
:004264CE A1380E4B00              mov eax, dword ptr [004B0E38]
:004264D3 50                      push eax
:004264D4 E830DBFEFF              call 00414009
:004264D9 83C404                  add esp, 00000004
:004264DC E80EFBFFFF              call 00425FEF
:004264E1 E865480400              call 0046AD4B
:004264E6 6A00                    push 00000000
:004264E8 E8A1680400              call 0046CD8E
:004264ED 83C404                  add esp, 00000004
:004264F0 5D                      pop ebp
:004264F1 C3                      ret



* Referenced by a CALL at Addresses:
|:0040DD7E   , :0042679C   
|
:004264F2 55                      push ebp
:004264F3 8BEC                    mov ebp, esp
:004264F5 B9800D4B00              mov ecx, 004B0D80
:004264FA E882B60300              call 00461B81
:004264FF B9880D4B00              mov ecx, 004B0D88
:00426504 E83FB60300              call 00461B48
:00426509 E8F0070000              call 00426CFE
:0042650E E867C7FEFF              call 00412C7A
:00426513 E8CEC9FEFF              call 00412EE6
:00426518 837D0800                cmp dword ptr [ebp+08], 00000000
:0042651C 741A                    je 00426538
:0042651E 6A00                    push 00000000
:00426520 6A00                    push 00000000
:00426522 6A00                    push 00000000
:00426524 6A01                    push 00000001
:00426526 E833DBFEFF              call 0041405E
:0042652B 83C410                  add esp, 00000010
:0042652E 6A01                    push 00000001
:00426530 E8BB060000              call 00426BF0
:00426535 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042651C(C)
|
:00426538 E81EFFFFFF              call 0042645B
:0042653D 5D                      pop ebp
:0042653E C3                      ret



* Referenced by a CALL at Address:
|:00426A8E   
|
:0042653F 55                      push ebp
:00426540 8BEC                    mov ebp, esp
:00426542 B9C8E24A00              mov ecx, 004AE2C8
:00426547 E8848CFEFF              call 0040F1D0
:0042654C 2500020000              and eax, 00000200
:00426551 85C0                    test eax, eax
:00426553 7402                    je 00426557
:00426555 EB1F                    jmp 00426576

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426553(C)
|
:00426557 6A00                    push 00000000
:00426559 E8BAE10300              call 00464718
:0042655E 83C404                  add esp, 00000004
:00426561 E8ECFDFFFF              call 00426352
:00426566 6A00                    push 00000000
:00426568 6A01                    push 00000001
:0042656A 6A00                    push 00000000
:0042656C 6A00                    push 00000000
:0042656E E8EBDAFEFF              call 0041405E
:00426573 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426555(U)
|
:00426576 5D                      pop ebp
:00426577 C3                      ret



* Referenced by a CALL at Addresses:
|:00411126   , :004116DC   , :00411960   , :00411A37   , :00416C19   
|:00416D78   , :00424D2E   , :00426844   , :00426A72   , :00426E5A   
|:00426F1F   , :00426F48   , :00427D5D   , :00428090   , :00428DBC   
|:00429169   , :00445222   , :00445252   , :004454E1   , :004460FB   
|:004463F3   , :00446439   , :00446473   , :0045622D   , :0045694A   
|:00456ABD   , :00456ADD   , :00456BF1   , :00456D5E   , :00457E48   
|:00458070   
|
:00426578 55                      push ebp
:00426579 8BEC                    mov ebp, esp
:0042657B 83EC1C                  sub esp, 0000001C
:0042657E E8CB5F0400              call 0046C54E

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:00426583 FF1540874B00            Call dword ptr [004B8740]
:00426589 8945FC                  mov dword ptr [ebp-04], eax
:0042658C B980594800              mov ecx, 00485980
:00426591 E8F09BFFFF              call 00420186
:00426596 8945F8                  mov dword ptr [ebp-08], eax
:00426599 B980594800              mov ecx, 00485980
:0042659E E8129CFFFF              call 004201B5
:004265A3 8945F4                  mov dword ptr [ebp-0C], eax
:004265A6 8D45E4                  lea eax, dword ptr [ebp-1C]
:004265A9 50                      push eax
:004265AA 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004265B0 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004265B1 FF15C8864B00            Call dword ptr [004B86C8]
:004265B7 8B55FC                  mov edx, dword ptr [ebp-04]
:004265BA 3B15380E4B00            cmp edx, dword ptr [004B0E38]
:004265C0 0F85AC000000            jne 00426672
:004265C6 E8FB360400              call 00469CC6
:004265CB 85C0                    test eax, eax
:004265CD 7421                    je 004265F0
:004265CF 6A17                    push 00000017
:004265D1 A1380E4B00              mov eax, dword ptr [004B0E38]
:004265D6 50                      push eax
:004265D7 B980594800              mov ecx, 00485980
:004265DC E8FFA3FFFF              call 004209E0
:004265E1 B980594800              mov ecx, 00485980
:004265E6 E836A4FFFF              call 00420A21
:004265EB E982000000              jmp 00426672

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004265CD(C)
|
:004265F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004265F3 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:004265F6 7E7A                    jle 00426672
:004265F8 8B55F8                  mov edx, dword ptr [ebp-08]
:004265FB 3B55EC                  cmp edx, dword ptr [ebp-14]
:004265FE 7D72                    jge 00426672
:00426600 8B45F4                  mov eax, dword ptr [ebp-0C]
:00426603 3B45E8                  cmp eax, dword ptr [ebp-18]
:00426606 7E6A                    jle 00426672
:00426608 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042660B 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0042660E 7D62                    jge 00426672
:00426610 837DF428                cmp dword ptr [ebp-0C], 00000028
:00426614 7E31                    jle 00426647
:00426616 8B55F8                  mov edx, dword ptr [ebp-08]
:00426619 3B55EC                  cmp edx, dword ptr [ebp-14]
:0042661C 7D29                    jge 00426647
:0042661E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00426621 3B45F0                  cmp eax, dword ptr [ebp-10]
:00426624 7D21                    jge 00426647
:00426626 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426629 51                      push ecx
:0042662A 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00426630 52                      push edx
:00426631 B980594800              mov ecx, 00485980
:00426636 E8A5A3FFFF              call 004209E0
:0042663B B980594800              mov ecx, 00485980
:00426640 E8DCA3FFFF              call 00420A21
:00426645 EB2B                    jmp 00426672

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426614(C), :0042661C(C), :00426624(C)
|
:00426647 837DF428                cmp dword ptr [ebp-0C], 00000028
:0042664B 7F25                    jg 00426672
:0042664D 8B45F8                  mov eax, dword ptr [ebp-08]
:00426650 3B45EC                  cmp eax, dword ptr [ebp-14]
:00426653 7D1D                    jge 00426672
:00426655 6A01                    push 00000001
:00426657 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0042665D 51                      push ecx
:0042665E B980594800              mov ecx, 00485980
:00426663 E878A3FFFF              call 004209E0
:00426668 B980594800              mov ecx, 00485980
:0042666D E8AFA3FFFF              call 00420A21

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004265C0(C), :004265EB(U), :004265F6(C), :004265FE(C), :00426606(C)
|:0042660E(C), :00426645(U), :0042664B(C), :00426653(C)
|
:00426672 8BE5                    mov esp, ebp
:00426674 5D                      pop ebp
:00426675 C3                      ret



* Referenced by a CALL at Addresses:
|:00412617   , :00463949   
|
:00426676 55                      push ebp
:00426677 8BEC                    mov ebp, esp
:00426679 E8DDFDFFFF              call 0042645B
:0042667E 5D                      pop ebp
:0042667F C3                      ret



* Referenced by a CALL at Address:
|:004266BF   
|
:00426680 55                      push ebp
:00426681 8BEC                    mov ebp, esp
:00426683 68DA070000              push 000007DA
:00426688 E829E00300              call 004646B6
:0042668D 83C404                  add esp, 00000004
:00426690 6A01                    push 00000001
:00426692 6A00                    push 00000000
:00426694 E807C2FEFF              call 004128A0
:00426699 83C408                  add esp, 00000008
:0042669C B9F8134800              mov ecx, 004813F8
:004266A1 E8337CFEFF              call 0040E2D9
:004266A6 B9F8134800              mov ecx, 004813F8
:004266AB E8437CFEFF              call 0040E2F3
:004266B0 5D                      pop ebp
:004266B1 C3                      ret



* Referenced by a CALL at Address:
|:004269DF   
|
:004266B2 55                      push ebp
:004266B3 8BEC                    mov ebp, esp
:004266B5 83EC08                  sub esp, 00000008
:004266B8 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426808(U)
|
:004266BF E8BCFFFFFF              call 00426680
:004266C4 E829950300              call 0045FBF2
:004266C9 B9F8134800              mov ecx, 004813F8
:004266CE E8D793FEFF              call 0040FAAA
:004266D3 E872BDFEFF              call 0041244A
:004266D8 8945FC                  mov dword ptr [ebp-04], eax
:004266DB C7053C8B4A0000000000    mov dword ptr [004A8B3C], 00000000
:004266E5 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:004266EC 0F841B010000            je 0042680D
:004266F2 B9F8134800              mov ecx, 004813F8
:004266F7 E83A82FEFF              call 0040E936
:004266FC A1380E4B00              mov eax, dword ptr [004B0E38]
:00426701 50                      push eax

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:00426702 FF1528874B00            Call dword ptr [004B8728]
:00426708 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042670C 752A                    jne 00426738
:0042670E B9F8134800              mov ecx, 004813F8
:00426713 E89293FEFF              call 0040FAAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426736(U)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00426718 68FF000000              push 000000FF
:0042671D 6A00                    push 00000000
:0042671F E88604FFFF              call 00416BAA
:00426724 83C408                  add esp, 00000008
:00426727 8B0D3C8B4A00            mov ecx, dword ptr [004A8B3C]
:0042672D 83E102                  and ecx, 00000002
:00426730 85C9                    test ecx, ecx
:00426732 7402                    je 00426736
:00426734 EB02                    jmp 00426738

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426732(C)
|
:00426736 EBE0                    jmp 00426718

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042670C(C), :00426734(U), :0042677D(U)
|
:00426738 E8D4000000              call 00426811
:0042673D 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00426740 C745FCFF000000          mov [ebp-04], 000000FF
:00426747 8B55F8                  mov edx, dword ptr [ebp-08]
:0042674A 83E244                  and edx, 00000044
:0042674D 85D2                    test edx, edx
:0042674F 7402                    je 00426753
:00426751 EB2C                    jmp 0042677F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042674F(C)
|
:00426753 8B45F8                  mov eax, dword ptr [ebp-08]
:00426756 83E020                  and eax, 00000020
:00426759 85C0                    test eax, eax
:0042675B 7402                    je 0042675F
:0042675D EB20                    jmp 0042677F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042675B(C)
|
:0042675F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00426762 83E108                  and ecx, 00000008
:00426765 85C9                    test ecx, ecx
:00426767 7414                    je 0042677D
:00426769 B9F8134800              mov ecx, 004813F8
:0042676E E8C381FEFF              call 0040E936
:00426773 B9000D4B00              mov ecx, 004B0D00
:00426778 E8E3A00300              call 00460860

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426767(C)
|
:0042677D EBB9                    jmp 00426738

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426751(U), :0042675D(U)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042677F 6AFF                    push FFFFFFFF
:00426781 E830DF0300              call 004646B6
:00426786 83C404                  add esp, 00000004
:00426789 8B55F8                  mov edx, dword ptr [ebp-08]
:0042678C 83E204                  and edx, 00000004
:0042678F 85D2                    test edx, edx
:00426791 7413                    je 004267A6
:00426793 C745FC00000000          mov [ebp-04], 00000000
:0042679A 6A01                    push 00000001
:0042679C E851FDFFFF              call 004264F2
:004267A1 83C404                  add esp, 00000004
:004267A4 EB67                    jmp 0042680D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426791(C)
|
:004267A6 8B45F8                  mov eax, dword ptr [ebp-08]
:004267A9 83E060                  and eax, 00000060
:004267AC 85C0                    test eax, eax
:004267AE 745D                    je 0042680D

* Possible StringData Ref from Data Obj ->"A@ܡH"
                                  |
:004267B0 6828804700              push 00478028

* Possible Reference to String Resource ID=00006: ""
                                  |
:004267B5 6A06                    push 00000006
:004267B7 E8B0230000              call 00428B6C
:004267BC 83C408                  add esp, 00000008
:004267BF 85C0                    test eax, eax
:004267C1 744A                    je 0042680D
:004267C3 6A00                    push 00000000
:004267C5 B9C8E24A00              mov ecx, 004AE2C8
:004267CA E8418BFEFF              call 0040F310
:004267CF 6A00                    push 00000000
:004267D1 B9C8E24A00              mov ecx, 004AE2C8
:004267D6 E8E5020000              call 00426AC0
:004267DB B9880D4B00              mov ecx, 004B0D88
:004267E0 E863B30300              call 00461B48
:004267E5 E890C4FEFF              call 00412C7A
:004267EA E8F7C6FEFF              call 00412EE6
:004267EF E83A230400              call 00468B2E
:004267F4 6A01                    push 00000001
:004267F6 E859070000              call 00426F54
:004267FB 83C404                  add esp, 00000004
:004267FE 6A00                    push 00000000
:00426800 E813DF0300              call 00464718
:00426805 83C404                  add esp, 00000004
:00426808 E9B2FEFFFF              jmp 004266BF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004266EC(C), :004267A4(U), :004267AE(C), :004267C1(C)
|
:0042680D 8BE5                    mov esp, ebp
:0042680F 5D                      pop ebp
:00426810 C3                      ret



* Referenced by a CALL at Address:
|:00426738   
|
:00426811 55                      push ebp
:00426812 8BEC                    mov ebp, esp
:00426814 83EC18                  sub esp, 00000018
:00426817 C745F418DA4A00          mov [ebp-0C], 004ADA18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004269A3(U)
|
:0042681E B9000D4B00              mov ecx, 004B0D00
:00426823 E8B8020000              call 00426AE0
:00426828 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042682B E8E0940000              call 0042FD10
:00426830 25FF000000              and eax, 000000FF
:00426835 83E00F                  and eax, 0000000F
:00426838 8845F8                  mov byte ptr [ebp-08], al
:0042683B C745F000000000          mov [ebp-10], 00000000
:00426842 6A00                    push 00000000
:00426844 E82FFDFFFF              call 00426578
:00426849 83C404                  add esp, 00000004
:0042684C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042684F E8BC940000              call 0042FD10
:00426854 8845F8                  mov byte ptr [ebp-08], al
:00426857 6A00                    push 00000000
:00426859 E8BADE0300              call 00464718
:0042685E 83C404                  add esp, 00000004
:00426861 8B45F8                  mov eax, dword ptr [ebp-08]
:00426864 25FF000000              and eax, 000000FF
:00426869 83E00F                  and eax, 0000000F
:0042686C 8945EC                  mov dword ptr [ebp-14], eax
:0042686F 837DEC03                cmp dword ptr [ebp-14], 00000003
:00426873 0F871E010000            ja 00426997
:00426879 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042687C FF248DAF694200          jmp dword ptr [4*ecx+004269AF]
:00426883 68DA070000              push 000007DA
:00426888 E829DE0300              call 004646B6
:0042688D 83C404                  add esp, 00000004
:00426890 E82BE5FFFF              call 00424DC0
:00426895 25FFFF0000              and eax, 0000FFFF
:0042689A 8945F0                  mov dword ptr [ebp-10], eax
:0042689D E9F5000000              jmp 00426997
:004268A2 68DA070000              push 000007DA
:004268A7 E80ADE0300              call 004646B6
:004268AC 83C404                  add esp, 00000004
:004268AF E82806FFFF              call 00416EDC
:004268B4 8945F0                  mov dword ptr [ebp-10], eax
:004268B7 E9DB000000              jmp 00426997
:004268BC 68DA070000              push 000007DA
:004268C1 E8F0DD0300              call 004646B6
:004268C6 83C404                  add esp, 00000004
:004268C9 E8D404FFFF              call 00416DA2
:004268CE 8945F0                  mov dword ptr [ebp-10], eax
:004268D1 E9C1000000              jmp 00426997
:004268D6 B9A0574800              mov ecx, 004857A0
:004268DB E80BEEFEFF              call 004156EB
:004268E0 C7053C8B4A0000000000    mov dword ptr [004A8B3C], 00000000
:004268EA 68D60B0000              push 00000BD6
:004268EF E8C2DD0300              call 004646B6
:004268F4 83C404                  add esp, 00000004
:004268F7 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426992(U)
|
:004268FE 6A01                    push 00000001
:00426900 E899B70300              call 0046209E
:00426905 83C404                  add esp, 00000004
:00426908 B9180A4B00              mov ecx, 004B0A18
:0042690D E8B9140300              call 00457DCB
:00426912 25FF000000              and eax, 000000FF
:00426917 8945E8                  mov dword ptr [ebp-18], eax
:0042691A 8B55E8                  mov edx, dword ptr [ebp-18]
:0042691D 83EA01                  sub edx, 00000001
:00426920 8955E8                  mov dword ptr [ebp-18], edx
:00426923 837DE804                cmp dword ptr [ebp-18], 00000004
:00426927 7744                    ja 0042696D
:00426929 8B45E8                  mov eax, dword ptr [ebp-18]
:0042692C FF2485BF694200          jmp dword ptr [4*eax+004269BF]
:00426933 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00426936 83C920                  or ecx, 00000020
:00426939 894DF0                  mov dword ptr [ebp-10], ecx
:0042693C EB39                    jmp 00426977
:0042693E C745FC01000000          mov [ebp-04], 00000001
:00426945 6A00                    push 00000000
:00426947 B9180A4B00              mov ecx, 004B0A18
:0042694C E8EFBEFEFF              call 00412840
:00426951 EB24                    jmp 00426977
:00426953 8B55F0                  mov edx, dword ptr [ebp-10]
:00426956 83CA40                  or edx, 00000040
:00426959 8955F0                  mov dword ptr [ebp-10], edx
:0042695C EB19                    jmp 00426977
:0042695E E8CB210400              call 00468B2E
:00426963 8B45F0                  mov eax, dword ptr [ebp-10]
:00426966 0C08                    or al, 08
:00426968 8945F0                  mov dword ptr [ebp-10], eax
:0042696B EB0A                    jmp 00426977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426927(C)
|
:0042696D 6A00                    push 00000000
:0042696F E8A4DD0300              call 00464718
:00426974 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042693C(U), :00426951(U), :0042695C(U), :0042696B(U)
|
:00426977 837DFC01                cmp dword ptr [ebp-04], 00000001
:0042697B 7509                    jne 00426986
:0042697D C745FC00000000          mov [ebp-04], 00000000
:00426984 EB0C                    jmp 00426992

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042697B(C)
|
:00426986 B9F8134800              mov ecx, 004813F8
:0042698B E86379FEFF              call 0040E2F3
:00426990 EB05                    jmp 00426997

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426984(U)
|
:00426992 E967FFFFFF              jmp 004268FE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426873(C), :0042689D(U), :004268B7(U), :004268D1(U), :00426990(U)
|
:00426997 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042699A 83E16C                  and ecx, 0000006C
:0042699D 85C9                    test ecx, ecx
:0042699F 7402                    je 004269A3
:004269A1 EB05                    jmp 004269A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042699F(C)
|
:004269A3 E976FEFFFF              jmp 0042681E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004269A1(U)
|
:004269A8 8B45F0                  mov eax, dword ptr [ebp-10]
:004269AB 8BE5                    mov esp, ebp
:004269AD 5D                      pop ebp
:004269AE C3                      ret



:004269AF A2684200                DWORD 004268A2
:004269B3 BC684200                DWORD 004268BC
:004269B7 83684200                DWORD 00426883
:004269BB D6684200                DWORD 004268D6
:004269BF 3E694200                DWORD 0042693E
:004269C3 6D694200                DWORD 0042696D
:004269C7 33694200                DWORD 00426933
:004269CB 53694200                DWORD 00426953
:004269CF 5E694200                DWORD 0042695E



* Referenced by a CALL at Address:
|:00464458   
|
:004269D3 55                      push ebp
:004269D4 8BEC                    mov ebp, esp
:004269D6 E810000000              call 004269EB
:004269DB 85C0                    test eax, eax
:004269DD 7405                    je 004269E4
:004269DF E8CEFCFFFF              call 004266B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004269DD(C)
|
:004269E4 E872FAFFFF              call 0042645B
:004269E9 5D                      pop ebp
:004269EA C3                      ret


:004269EB 55                      push ebp
:004269EC 8BEC                    mov ebp, esp
:004269EE 51                      push ecx
:004269EF 6A00                    push 00000000
:004269F1 E822DD0300              call 00464718
:004269F6 83C404                  add esp, 00000004
:004269F9 C745FC18DA4A00          mov [ebp-04], 004ADA18
:00426A00 6A00                    push 00000000
:00426A02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00426A05 E87605FFFF              call 00416F80
:00426A0A 6A01                    push 00000001
:00426A0C A1F8E44700              mov eax, dword ptr [0047E4F8]
:00426A11 83E828                  sub eax, 00000028
:00426A14 50                      push eax
:00426A15 8B0DF4E44700            mov ecx, dword ptr [0047E4F4]
:00426A1B 51                      push ecx
:00426A1C E8EB5C0400              call 0046C70C
:00426A21 83C40C                  add esp, 0000000C
:00426A24 E805210400              call 00468B2E
:00426A29 E82C3D0400              call 0046A75A
:00426A2E 85C0                    test eax, eax
:00426A30 7505                    jne 00426A37
:00426A32 E856410400              call 0046AB8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426A30(C)
|
:00426A37 E8CB010000              call 00426C07
:00426A3C E8C2F6FFFF              call 00426103
:00426A41 6A01                    push 00000001
:00426A43 6A00                    push 00000000
:00426A45 E856BEFEFF              call 004128A0
:00426A4A 83C408                  add esp, 00000008
:00426A4D B9880D4B00              mov ecx, 004B0D88
:00426A52 E8DAAE0300              call 00461931
:00426A57 E8F4F2FFFF              call 00425D50
:00426A5C B980594800              mov ecx, 00485980
:00426A61 E87E97FFFF              call 004201E4
:00426A66 6A01                    push 00000001
:00426A68 E8E7040000              call 00426F54
:00426A6D 83C404                  add esp, 00000004
:00426A70 6A00                    push 00000000
:00426A72 E801FBFFFF              call 00426578
:00426A77 83C404                  add esp, 00000004
:00426A7A E86EF7FFFF              call 004261ED
:00426A7F 6A00                    push 00000000
:00426A81 E818B60300              call 0046209E
:00426A86 83C404                  add esp, 00000004
:00426A89 E835DC0300              call 004646C3
:00426A8E E8ACFAFFFF              call 0042653F
:00426A93 B801000000              mov eax, 00000001
:00426A98 8BE5                    mov esp, ebp
:00426A9A 5D                      pop ebp
:00426A9B C3                      ret


:00426A9C CC                      int 03
:00426A9D CC                      int 03
:00426A9E CC                      int 03
:00426A9F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042646C   , :0045A2DE   
|
:00426AA0 55                      push ebp
:00426AA1 8BEC                    mov ebp, esp
:00426AA3 51                      push ecx
:00426AA4 894DFC                  mov dword ptr [ebp-04], ecx
:00426AA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00426AAA 8B4050                  mov eax, dword ptr [eax+50]
:00426AAD 8BE5                    mov esp, ebp
:00426AAF 5D                      pop ebp
:00426AB0 C3                      ret


:00426AB1 CC                      int 03
:00426AB2 CC                      int 03
:00426AB3 CC                      int 03
:00426AB4 CC                      int 03
:00426AB5 CC                      int 03
:00426AB6 CC                      int 03
:00426AB7 CC                      int 03
:00426AB8 CC                      int 03
:00426AB9 CC                      int 03
:00426ABA CC                      int 03
:00426ABB CC                      int 03
:00426ABC CC                      int 03
:00426ABD CC                      int 03
:00426ABE CC                      int 03
:00426ABF CC                      int 03

* Referenced by a CALL at Addresses:
|:004267D6   , :00454F6B   
|
:00426AC0 55                      push ebp
:00426AC1 8BEC                    mov ebp, esp
:00426AC3 51                      push ecx
:00426AC4 894DFC                  mov dword ptr [ebp-04], ecx
:00426AC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00426ACA 8A4D08                  mov cl, byte ptr [ebp+08]
:00426ACD 884811                  mov byte ptr [eax+11], cl
:00426AD0 8BE5                    mov esp, ebp
:00426AD2 5D                      pop ebp
:00426AD3 C20400                  ret 0004


:00426AD6 CC                      int 03
:00426AD7 CC                      int 03
:00426AD8 CC                      int 03
:00426AD9 CC                      int 03
:00426ADA CC                      int 03
:00426ADB CC                      int 03
:00426ADC CC                      int 03
:00426ADD CC                      int 03
:00426ADE CC                      int 03
:00426ADF CC                      int 03

* Referenced by a CALL at Address:
|:00426823   
|
:00426AE0 55                      push ebp
:00426AE1 8BEC                    mov ebp, esp
:00426AE3 51                      push ecx
:00426AE4 894DFC                  mov dword ptr [ebp-04], ecx
:00426AE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00426AEA C6407800                mov [eax+78], 00
:00426AEE 8BE5                    mov esp, ebp
:00426AF0 5D                      pop ebp
:00426AF1 C3                      ret


:00426AF2 CC                      int 03
:00426AF3 CC                      int 03
:00426AF4 CC                      int 03
:00426AF5 CC                      int 03
:00426AF6 CC                      int 03
:00426AF7 CC                      int 03
:00426AF8 CC                      int 03
:00426AF9 CC                      int 03
:00426AFA CC                      int 03
:00426AFB CC                      int 03
:00426AFC CC                      int 03
:00426AFD CC                      int 03
:00426AFE CC                      int 03
:00426AFF CC                      int 03
:00426B00 55                      push ebp
:00426B01 8BEC                    mov ebp, esp
:00426B03 E802000000              call 00426B0A
:00426B08 5D                      pop ebp
:00426B09 C3                      ret



* Referenced by a CALL at Address:
|:00426B03   
|
:00426B0A 55                      push ebp
:00426B0B 8BEC                    mov ebp, esp
:00426B0D 5D                      pop ebp
:00426B0E C3                      ret



* Referenced by a CALL at Address:
|:0042549E   
|
:00426B0F 55                      push ebp
:00426B10 8BEC                    mov ebp, esp
:00426B12 51                      push ecx
:00426B13 894DFC                  mov dword ptr [ebp-04], ecx
:00426B16 E8065B0400              call 0046C621
:00426B1B 034508                  add eax, dword ptr [ebp+08]
:00426B1E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00426B21 8901                    mov dword ptr [ecx], eax
:00426B23 8BE5                    mov esp, ebp
:00426B25 5D                      pop ebp
:00426B26 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004254BA   
|
:00426B29 55                      push ebp
:00426B2A 8BEC                    mov ebp, esp
:00426B2C 83EC08                  sub esp, 00000008
:00426B2F 894DFC                  mov dword ptr [ebp-04], ecx
:00426B32 E8EA5A0400              call 0046C621
:00426B37 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00426B3A 3B01                    cmp eax, dword ptr [ecx]
:00426B3C 7D0A                    jge 00426B48
:00426B3E E8DE5A0400              call 0046C621
:00426B43 8945F8                  mov dword ptr [ebp-08], eax
:00426B46 EB08                    jmp 00426B50

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426B3C(C)
|
:00426B48 8B55FC                  mov edx, dword ptr [ebp-04]
:00426B4B 8B02                    mov eax, dword ptr [edx]
:00426B4D 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426B46(U)
|
:00426B50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00426B53 8B01                    mov eax, dword ptr [ecx]
:00426B55 2B45F8                  sub eax, dword ptr [ebp-08]
:00426B58 8BE5                    mov esp, ebp
:00426B5A 5D                      pop ebp
:00426B5B C3                      ret


:00426B5C 55                      push ebp
:00426B5D 8BEC                    mov ebp, esp
:00426B5F E8BD5A0400              call 0046C621
:00426B64 A3FCF44A00              mov dword ptr [004AF4FC], eax
:00426B69 5D                      pop ebp
:00426B6A C3                      ret


:00426B6B 55                      push ebp
:00426B6C 8BEC                    mov ebp, esp
:00426B6E E8AE5A0400              call 0046C621
:00426B73 2B05FCF44A00            sub eax, dword ptr [004AF4FC]
:00426B79 5D                      pop ebp
:00426B7A C3                      ret



* Referenced by a CALL at Addresses:
|:00412CDB   , :00415223   , :00426BE1   , :00426D71   , :00426E6E   
|:00426F29   , :0043A397   , :0043D076   , :00444D94   , :00444DCF   
|:00444E39   , :00444EA7   , :00446407   , :0044645D   , :0044D839   
|:0044D890   , :0044D8AD   , :0044D904   , :00456D72   , :00456DCD   
|:004593D3   , :00461596   
|
:00426B7B 55                      push ebp
:00426B7C 8BEC                    mov ebp, esp
:00426B7E 8B4508                  mov eax, dword ptr [ebp+08]
:00426B81 D1E0                    shl eax, 1
:00426B83 50                      push eax
:00426B84 B9F8F44A00              mov ecx, 004AF4F8
:00426B89 E802E9FFFF              call 00425490
:00426B8E 5D                      pop ebp
:00426B8F C3                      ret



* Referenced by a CALL at Addresses:
|:00412D4C   , :004152F7   , :00426BE9   , :00426E23   , :0042A2CF   
|:0042B413   , :0042B456   , :0042B68C   , :0042B6CF   , :0042E58B   
|:0042EC51   , :0042F36C   , :0042FFDB   , :0043001B   , :00430A69   
|:00430B41   , :00430E37   , :00430E77   , :00431072   , :004310B2   
|:0043584A   , :00435889   , :0043767B   , :004376D1   , :00439776   
|:004397B9   , :0043A1A7   , :0043A3EF   , :0043A885   , :0043A986   
|:0043AF5B   , :0043C433   , :0043C4A9   , :0043D0C6   , :004400CE   
|:0044066E   , :00440B5F   , :00440D03   , :00440E48   , :00440F8D   
|:004410E9   , :004414E4   , :0044163D   , :00441941   , :004420BD   
|:0044211A   , :004456C8   , :0046159E   
|
:00426B90 55                      push ebp
:00426B91 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426BA6(U)
|
:00426B93 B9F8F44A00              mov ecx, 004AF4F8
:00426B98 E813E9FFFF              call 004254B0
:00426B9D 85C0                    test eax, eax
:00426B9F 7507                    jne 00426BA8
:00426BA1 E8A8590400              call 0046C54E
:00426BA6 EBEB                    jmp 00426B93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426B9F(C)
|
:00426BA8 5D                      pop ebp
:00426BA9 C3                      ret


:00426BAA 55                      push ebp
:00426BAB 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426BCE(U)
|
:00426BAD B9F8F44A00              mov ecx, 004AF4F8
:00426BB2 E8F9E8FFFF              call 004254B0
:00426BB7 85C0                    test eax, eax
:00426BB9 7515                    jne 00426BD0
:00426BBB B980594800              mov ecx, 00485980
:00426BC0 E8A895FFFF              call 0042016D
:00426BC5 85C0                    test eax, eax
:00426BC7 7507                    jne 00426BD0
:00426BC9 E880590400              call 0046C54E
:00426BCE EBDD                    jmp 00426BAD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426BB9(C), :00426BC7(C)
|
:00426BD0 5D                      pop ebp
:00426BD1 C3                      ret



* Referenced by a CALL at Addresses:
|:0040DE9B   , :00426429   , :00426CEE   , :00461E1B   
|
:00426BD2 55                      push ebp
:00426BD3 8BEC                    mov ebp, esp
:00426BD5 837D0800                cmp dword ptr [ebp+08], 00000000
:00426BD9 7502                    jne 00426BDD
:00426BDB EB11                    jmp 00426BEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426BD9(C)
|
:00426BDD 8B4508                  mov eax, dword ptr [ebp+08]
:00426BE0 50                      push eax
:00426BE1 E895FFFFFF              call 00426B7B
:00426BE6 83C404                  add esp, 00000004
:00426BE9 E8A2FFFFFF              call 00426B90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426BDB(U)
|
:00426BEE 5D                      pop ebp
:00426BEF C3                      ret



* Referenced by a CALL at Addresses:
|:00408213   , :00426325   , :00426530   , :00427990   , :0042900E   
|:004398B6   
|
:00426BF0 55                      push ebp
:00426BF1 8BEC                    mov ebp, esp
:00426BF3 8B4508                  mov eax, dword ptr [ebp+08]
:00426BF6 6BC00A                  imul eax, 0000000A
:00426BF9 6BC003                  imul eax, 00000003
:00426BFC 50                      push eax
:00426BFD E842010000              call 00426D44
:00426C02 83C404                  add esp, 00000004
:00426C05 5D                      pop ebp
:00426C06 C3                      ret



* Referenced by a CALL at Addresses:
|:00426A37   , :00426D4F   , :00426E62   
|
:00426C07 55                      push ebp
:00426C08 8BEC                    mov ebp, esp
:00426C0A 6A01                    push 00000001
:00426C0C E86E590400              call 0046C57F
:00426C11 83C404                  add esp, 00000004
:00426C14 E835590400              call 0046C54E
:00426C19 5D                      pop ebp
:00426C1A C3                      ret


:00426C1B 55                      push ebp
:00426C1C 8BEC                    mov ebp, esp
:00426C1E 83EC08                  sub esp, 00000008
:00426C21 8D45F8                  lea eax, dword ptr [ebp-08]
:00426C24 50                      push eax
:00426C25 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00426C28 51                      push ecx
:00426C29 E8D7580400              call 0046C505
:00426C2E 83C408                  add esp, 00000008
:00426C31 8B55F8                  mov edx, dword ptr [ebp-08]
:00426C34 52                      push edx
:00426C35 8B45FC                  mov eax, dword ptr [ebp-04]
:00426C38 50                      push eax
:00426C39 E8C2580400              call 0046C500
:00426C3E 83C408                  add esp, 00000008
:00426C41 8BE5                    mov esp, ebp
:00426C43 5D                      pop ebp
:00426C44 C3                      ret



* Referenced by a CALL at Addresses:
|:00426D79   , :00426F31   
|
:00426C45 55                      push ebp
:00426C46 8BEC                    mov ebp, esp
:00426C48 E8A2580400              call 0046C4EF
:00426C4D F7D8                    neg eax
:00426C4F 1BC0                    sbb eax, eax
:00426C51 F7D8                    neg eax
:00426C53 5D                      pop ebp
:00426C54 C3                      ret



* Referenced by a CALL at Addresses:
|:00413D41   , :00426D4A   , :00427461   , :00427B00   , :00428BAB   
|:00428C6B   , :004290DB   , :00429324   , :00455362   , :00458069   
|:00458F7E   
|
:00426C55 55                      push ebp
:00426C56 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00426C58 6A02                    push 00000002
:00426C5A E820590400              call 0046C57F
:00426C5F 83C404                  add esp, 00000004
:00426C62 E8E7580400              call 0046C54E
:00426C67 5D                      pop ebp
:00426C68 C3                      ret



* Referenced by a CALL at Addresses:
|:00424AFD   , :00426CD9   , :00426D01   , :00426D23   , :00426D87   
|:00426E76   , :0044640F   
|
:00426C69 55                      push ebp
:00426C6A 8BEC                    mov ebp, esp
:00426C6C 51                      push ecx
:00426C6D E8DC580400              call 0046C54E
:00426C72 B980594800              mov ecx, 00485980
:00426C77 E8F194FFFF              call 0042016D
:00426C7C 8945FC                  mov dword ptr [ebp-04], eax
:00426C7F 8B45FC                  mov eax, dword ptr [ebp-04]
:00426C82 83E801                  sub eax, 00000001
:00426C85 8945FC                  mov dword ptr [ebp-04], eax
:00426C88 837DFC05                cmp dword ptr [ebp-04], 00000005
:00426C8C 7718                    ja 00426CA6
:00426C8E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00426C91 FF248DAC6C4200          jmp dword ptr [4*ecx+00426CAC]
:00426C98 B801000000              mov eax, 00000001
:00426C9D EB09                    jmp 00426CA8

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00426C9F B802000000              mov eax, 00000002
:00426CA4 EB02                    jmp 00426CA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426C8C(C)
|
:00426CA6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426C9D(U), :00426CA4(U)
|
:00426CA8 8BE5                    mov esp, ebp
:00426CAA 5D                      pop ebp
:00426CAB C3                      ret



:00426CAC 986C4200                DWORD 00426C98
:00426CB0 9F6C4200                DWORD 00426C9F
:00426CB4 A66C4200                DWORD 00426CA6
:00426CB8 A66C4200                DWORD 00426CA6
:00426CBC 986C4200                DWORD 00426C98
:00426CC0 9F6C4200                DWORD 00426C9F


:00426CC4 55                      push ebp
:00426CC5 8BEC                    mov ebp, esp
:00426CC7 51                      push ecx
:00426CC8 EB09                    jmp 00426CD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426CF6(U)
|
:00426CCA 8B4508                  mov eax, dword ptr [ebp+08]
:00426CCD 83E801                  sub eax, 00000001
:00426CD0 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426CC8(U)
|
:00426CD3 837D0800                cmp dword ptr [ebp+08], 00000000
:00426CD7 741F                    je 00426CF8
:00426CD9 E88BFFFFFF              call 00426C69
:00426CDE 8945FC                  mov dword ptr [ebp-04], eax
:00426CE1 837DFC00                cmp dword ptr [ebp-04], 00000000
:00426CE5 7405                    je 00426CEC
:00426CE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00426CEA EB0E                    jmp 00426CFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426CE5(C)
|
:00426CEC 6A01                    push 00000001
:00426CEE E8DFFEFFFF              call 00426BD2
:00426CF3 83C404                  add esp, 00000004
:00426CF6 EBD2                    jmp 00426CCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426CD7(C)
|
:00426CF8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426CEA(U)
|
:00426CFA 8BE5                    mov esp, ebp
:00426CFC 5D                      pop ebp
:00426CFD C3                      ret



* Referenced by a CALL at Addresses:
|:00426271   , :00426375   , :00426509   , :00426D1E   , :00426D38   
|:00426E67   , :00426F41   , :00427926   , :0042804D   , :00428597   
|:004285F9   , :00428BA6   , :00429041   , :004290D6   , :004292C0   
|:00429301   , :004322FF   , :0043266F   , :00444E32   , :00444FC0   
|:004463A7   , :004463B4   , :0044DE38   , :0044DE54   , :00460D9C   
|:00460DF6   , :00460F61   , :00460FBF   , :0046156B   
|
:00426CFE 55                      push ebp
:00426CFF 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D0F(U)
|
:00426D01 E863FFFFFF              call 00426C69
:00426D06 85C0                    test eax, eax
:00426D08 7407                    je 00426D11
:00426D0A E83F580400              call 0046C54E
:00426D0F EBF0                    jmp 00426D01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D08(C)
|
:00426D11 5D                      pop ebp
:00426D12 C3                      ret



* Referenced by a CALL at Addresses:
|:004130B4   , :004130D4   , :004132B2   , :004132D2   , :0042607E   
|
:00426D13 55                      push ebp
:00426D14 8BEC                    mov ebp, esp
:00426D16 51                      push ecx
:00426D17 C745FCFFFF0000          mov [ebp-04], 0000FFFF
:00426D1E E8DBFFFFFF              call 00426CFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D36(U)
|
:00426D23 E841FFFFFF              call 00426C69
:00426D28 8945FC                  mov dword ptr [ebp-04], eax
:00426D2B 837DFC00                cmp dword ptr [ebp-04], 00000000
:00426D2F 7507                    jne 00426D38
:00426D31 E818580400              call 0046C54E
:00426D36 EBEB                    jmp 00426D23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D2F(C)
|
:00426D38 E8C1FFFFFF              call 00426CFE
:00426D3D 8B45FC                  mov eax, dword ptr [ebp-04]
:00426D40 8BE5                    mov esp, ebp
:00426D42 5D                      pop ebp
:00426D43 C3                      ret



* Referenced by a CALL at Addresses:
|:00426BFD   , :0042797B   , :00428B56   , :00429029   , :0042A2D6   
|:0042B41A   , :0042B45D   , :0042B693   , :0042B6D6   , :0042D5D3   
|:0042D5FB   , :0042FFE2   , :00430022   , :00430A70   , :00430B48   
|:00430E3E   , :00430E7E   , :00431079   , :004310B9   , :00435851   
|:00435890   , :00437682   , :004376D8   , :0043977D   , :004397C0   
|:0043A1CC   , :0043A3F6   , :0043C43A   , :0043C4B0   , :004400D5   
|:004400E4   , :00440675   , :004407B9   , :00440B66   , :00440D18   
|:00440E5D   , :00440FA1   , :004410E1   , :004414EB   , :00441644   
|:00441948   , :0044D886   , :0044D8FA   , :00450279   , :00450333   
|
:00426D44 55                      push ebp
:00426D45 8BEC                    mov ebp, esp
:00426D47 83EC1C                  sub esp, 0000001C
:00426D4A E806FFFFFF              call 00426C55
:00426D4F E8B3FEFFFF              call 00426C07
:00426D54 8B4508                  mov eax, dword ptr [ebp+08]
:00426D57 8945F4                  mov dword ptr [ebp-0C], eax
:00426D5A EB09                    jmp 00426D65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426E28(U)
|
:00426D5C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00426D5F 83E901                  sub ecx, 00000001
:00426D62 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D5A(U)
|
:00426D65 837DF400                cmp dword ptr [ebp-0C], 00000000
:00426D69 0F84BE000000            je 00426E2D
:00426D6F 6A01                    push 00000001
:00426D71 E805FEFFFF              call 00426B7B
:00426D76 83C404                  add esp, 00000004
:00426D79 E8C7FEFFFF              call 00426C45
:00426D7E 85C0                    test eax, eax
:00426D80 7405                    je 00426D87
:00426D82 E9A6000000              jmp 00426E2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D80(C)
|
:00426D87 E8DDFEFFFF              call 00426C69
:00426D8C 85C0                    test eax, eax
:00426D8E 7405                    je 00426D95
:00426D90 E998000000              jmp 00426E2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D8E(C)
|
:00426D95 E8B4570400              call 0046C54E
:00426D9A B980594800              mov ecx, 00485980
:00426D9F E8E293FFFF              call 00420186
:00426DA4 8945FC                  mov dword ptr [ebp-04], eax
:00426DA7 B980594800              mov ecx, 00485980
:00426DAC E80494FFFF              call 004201B5
:00426DB1 8945F8                  mov dword ptr [ebp-08], eax
:00426DB4 8D55E4                  lea edx, dword ptr [ebp-1C]
:00426DB7 52                      push edx
:00426DB8 A1380E4B00              mov eax, dword ptr [004B0E38]
:00426DBD 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00426DBE FF15C8864B00            Call dword ptr [004B86C8]
:00426DC4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00426DC7 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:00426DCA 7E57                    jle 00426E23
:00426DCC 8B55FC                  mov edx, dword ptr [ebp-04]
:00426DCF 3B55EC                  cmp edx, dword ptr [ebp-14]
:00426DD2 7D4F                    jge 00426E23
:00426DD4 8B45F8                  mov eax, dword ptr [ebp-08]
:00426DD7 3B45E8                  cmp eax, dword ptr [ebp-18]
:00426DDA 7E47                    jle 00426E23
:00426DDC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00426DDF 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00426DE2 7D3F                    jge 00426E23
:00426DE4 837DF828                cmp dword ptr [ebp-08], 00000028
:00426DE8 7F1C                    jg 00426E06
:00426DEA 8B55FC                  mov edx, dword ptr [ebp-04]
:00426DED 3B55EC                  cmp edx, dword ptr [ebp-14]
:00426DF0 7D14                    jge 00426E06
:00426DF2 6A01                    push 00000001
:00426DF4 A1380E4B00              mov eax, dword ptr [004B0E38]
:00426DF9 50                      push eax
:00426DFA B980594800              mov ecx, 00485980
:00426DFF E8DC9BFFFF              call 004209E0
:00426E04 EB13                    jmp 00426E19

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426DE8(C), :00426DF0(C)
|
:00426E06 6A00                    push 00000000
:00426E08 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00426E0E 51                      push ecx
:00426E0F B980594800              mov ecx, 00485980
:00426E14 E8C79BFFFF              call 004209E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426E04(U)
|
:00426E19 B980594800              mov ecx, 00485980
:00426E1E E8FE9BFFFF              call 00420A21

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426DCA(C), :00426DD2(C), :00426DDA(C), :00426DE2(C)
|
:00426E23 E868FDFFFF              call 00426B90
:00426E28 E92FFFFFFF              jmp 00426D5C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426D69(C), :00426D82(U), :00426D90(U)
|
:00426E2D 8BE5                    mov esp, ebp
:00426E2F 5D                      pop ebp
:00426E30 C3                      ret



* Referenced by a CALL at Addresses:
|:00427916   , :00429005   
|
:00426E31 55                      push ebp
:00426E32 8BEC                    mov ebp, esp
:00426E34 83EC1C                  sub esp, 0000001C
:00426E37 C645FC0A                mov [ebp-04], 0A
:00426E3B 6A00                    push 00000000
:00426E3D 6A00                    push 00000000
:00426E3F 6802020000              push 00000202
:00426E44 A1380E4B00              mov eax, dword ptr [004B0E38]
:00426E49 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00426E4A FF15D8864B00            Call dword ptr [004B86D8]
:00426E50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00426E53 81E1FF000000            and ecx, 000000FF
:00426E59 51                      push ecx
:00426E5A E819F7FFFF              call 00426578
:00426E5F 83C404                  add esp, 00000004
:00426E62 E8A0FDFFFF              call 00426C07
:00426E67 E892FEFFFF              call 00426CFE

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00426E6C 6A03                    push 00000003
:00426E6E E808FDFFFF              call 00426B7B
:00426E73 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426F3C(U)
|
:00426E76 E8EEFDFFFF              call 00426C69
:00426E7B 85C0                    test eax, eax
:00426E7D 0F85BE000000            jne 00426F41
:00426E83 E8C6560400              call 0046C54E
:00426E88 B980594800              mov ecx, 00485980
:00426E8D E8F492FFFF              call 00420186
:00426E92 8945F8                  mov dword ptr [ebp-08], eax
:00426E95 B980594800              mov ecx, 00485980
:00426E9A E81693FFFF              call 004201B5
:00426E9F 8945F4                  mov dword ptr [ebp-0C], eax
:00426EA2 8D55E4                  lea edx, dword ptr [ebp-1C]
:00426EA5 52                      push edx
:00426EA6 A1380E4B00              mov eax, dword ptr [004B0E38]
:00426EAB 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00426EAC FF15C8864B00            Call dword ptr [004B86C8]
:00426EB2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00426EB5 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:00426EB8 7E77                    jle 00426F31
:00426EBA 8B55F8                  mov edx, dword ptr [ebp-08]
:00426EBD 3B55EC                  cmp edx, dword ptr [ebp-14]
:00426EC0 7D6F                    jge 00426F31
:00426EC2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00426EC5 3B45E8                  cmp eax, dword ptr [ebp-18]
:00426EC8 7E67                    jle 00426F31
:00426ECA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00426ECD 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00426ED0 7D5F                    jge 00426F31
:00426ED2 837DF428                cmp dword ptr [ebp-0C], 00000028
:00426ED6 7F26                    jg 00426EFE
:00426ED8 8B55F8                  mov edx, dword ptr [ebp-08]
:00426EDB 3B55EC                  cmp edx, dword ptr [ebp-14]
:00426EDE 7D1E                    jge 00426EFE
:00426EE0 6A01                    push 00000001
:00426EE2 A1380E4B00              mov eax, dword ptr [004B0E38]
:00426EE7 50                      push eax
:00426EE8 B980594800              mov ecx, 00485980
:00426EED E8EE9AFFFF              call 004209E0
:00426EF2 B980594800              mov ecx, 00485980
:00426EF7 E8259BFFFF              call 00420A21
:00426EFC EB33                    jmp 00426F31

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426ED6(C), :00426EDE(C)
|
:00426EFE B9F8F44A00              mov ecx, 004AF4F8
:00426F03 E8A8E5FFFF              call 004254B0
:00426F08 85C0                    test eax, eax
:00426F0A 7425                    je 00426F31
:00426F0C 8A4DFC                  mov cl, byte ptr [ebp-04]
:00426F0F 80F101                  xor cl, 01
:00426F12 884DFC                  mov byte ptr [ebp-04], cl
:00426F15 8B55FC                  mov edx, dword ptr [ebp-04]
:00426F18 81E2FF000000            and edx, 000000FF
:00426F1E 52                      push edx
:00426F1F E854F6FFFF              call 00426578
:00426F24 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00426F27 6A03                    push 00000003
:00426F29 E84DFCFFFF              call 00426B7B
:00426F2E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426EB8(C), :00426EC0(C), :00426EC8(C), :00426ED0(C), :00426EFC(U)
|:00426F0A(C)
|
:00426F31 E80FFDFFFF              call 00426C45
:00426F36 85C0                    test eax, eax
:00426F38 7402                    je 00426F3C
:00426F3A EB05                    jmp 00426F41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426F38(C)
|
:00426F3C E935FFFFFF              jmp 00426E76

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426E7D(C), :00426F3A(U)
|
:00426F41 E8B8FDFFFF              call 00426CFE
:00426F46 6A00                    push 00000000
:00426F48 E82BF6FFFF              call 00426578
:00426F4D 83C404                  add esp, 00000004
:00426F50 8BE5                    mov esp, ebp
:00426F52 5D                      pop ebp
:00426F53 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C074   , :0040CDAD   , :0040CE10   , :004231A9   , :00424BFA   
|:004267F6   , :00426A68   
|
:00426F54 55                      push ebp
:00426F55 8BEC                    mov ebp, esp
:00426F57 8B4508                  mov eax, dword ptr [ebp+08]
:00426F5A 50                      push eax
:00426F5B B9C8E24A00              mov ecx, 004AE2C8
:00426F60 E8B1F7FDFF              call 00406716
:00426F65 B918DA4A00              mov ecx, 004ADA18
:00426F6A E8A18D0000              call 0042FD10
:00426F6F 25FF000000              and eax, 000000FF
:00426F74 83F802                  cmp eax, 00000002
:00426F77 750C                    jne 00426F85
:00426F79 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426F7C 51                      push ecx
:00426F7D E84DCFFFFF              call 00423ECF
:00426F82 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426F77(C)
|
:00426F85 33C0                    xor eax, eax
:00426F87 5D                      pop ebp
:00426F88 C3                      ret



* Referenced by a CALL at Addresses:
|:0041155F   , :004164AD   , :00416E82   , :00416F1D   , :0042319C   
|:00423BA0   , :00423BF8   , :00423F1F   , :00424897   , :00424D19   
|
:00426F89 55                      push ebp
:00426F8A 8BEC                    mov ebp, esp
:00426F8C B9C8E24A00              mov ecx, 004AE2C8
:00426F91 E86AF7FDFF              call 00406700
:00426F96 5D                      pop ebp
:00426F97 C3                      ret



* Referenced by a CALL at Address:
|:004278C7   
|
:00426F98 55                      push ebp
:00426F99 8BEC                    mov ebp, esp
:00426F9B 83EC70                  sub esp, 00000070
:00426F9E C745A800000000          mov [ebp-58], 00000000
:00426FA5 C645A400                mov [ebp-5C], 00
:00426FA9 8B4510                  mov eax, dword ptr [ebp+10]
:00426FAC 894598                  mov dword ptr [ebp-68], eax
:00426FAF 8D4DAC                  lea ecx, dword ptr [ebp-54]
:00426FB2 894DA0                  mov dword ptr [ebp-60], ecx
:00426FB5 C7459401000000          mov [ebp-6C], 00000001
:00426FBC C7459C00000000          mov [ebp-64], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427140(U)
|
:00426FC3 8B5598                  mov edx, dword ptr [ebp-68]
:00426FC6 33C0                    xor eax, eax
:00426FC8 8A02                    mov al, byte ptr [edx]
:00426FCA 83F80A                  cmp eax, 0000000A
:00426FCD 0F8472010000            je 00427145
:00426FD3 8B4D98                  mov ecx, dword ptr [ebp-68]
:00426FD6 33D2                    xor edx, edx
:00426FD8 8A11                    mov dl, byte ptr [ecx]
:00426FDA 85D2                    test edx, edx
:00426FDC 0F8463010000            je 00427145
:00426FE2 8B4598                  mov eax, dword ptr [ebp-68]
:00426FE5 33C9                    xor ecx, ecx
:00426FE7 8A08                    mov cl, byte ptr [eax]
:00426FE9 81F9A1000000            cmp ecx, 000000A1
:00426FEF 0F8CF6000000            jl 004270EB
:00426FF5 8B5598                  mov edx, dword ptr [ebp-68]
:00426FF8 33C0                    xor eax, eax
:00426FFA 8A02                    mov al, byte ptr [edx]
:00426FFC 3DFE000000              cmp eax, 000000FE
:00427001 0F8FE4000000            jg 004270EB
:00427007 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0042700A 83C102                  add ecx, 00000002
:0042700D 8B5514                  mov edx, dword ptr [ebp+14]
:00427010 81E2FF000000            and edx, 000000FF
:00427016 8B45A4                  mov eax, dword ptr [ebp-5C]
:00427019 25FF000000              and eax, 000000FF
:0042701E 03D0                    add edx, eax
:00427020 3BCA                    cmp ecx, edx
:00427022 0F8680000000            jbe 004270A8
:00427028 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042702B 33D2                    xor edx, edx
:0042702D 8A11                    mov dl, byte ptr [ecx]
:0042702F 81FAA1000000            cmp edx, 000000A1
:00427035 756A                    jne 004270A1
:00427037 8B4598                  mov eax, dword ptr [ebp-68]
:0042703A 33C9                    xor ecx, ecx
:0042703C 8A4801                  mov cl, byte ptr [eax+01]
:0042703F 83F940                  cmp ecx, 00000040
:00427042 7C5D                    jl 004270A1
:00427044 8B5598                  mov edx, dword ptr [ebp-68]
:00427047 33C0                    xor eax, eax
:00427049 8A4201                  mov al, byte ptr [edx+01]
:0042704C 83F84A                  cmp eax, 0000004A
:0042704F 7F50                    jg 004270A1
:00427051 8B4D98                  mov ecx, dword ptr [ebp-68]
:00427054 33D2                    xor edx, edx
:00427056 8A5101                  mov dl, byte ptr [ecx+01]
:00427059 83FA48                  cmp edx, 00000048
:0042705C 7443                    je 004270A1
:0042705E 8B45A0                  mov eax, dword ptr [ebp-60]
:00427061 8B4D98                  mov ecx, dword ptr [ebp-68]
:00427064 8A11                    mov dl, byte ptr [ecx]
:00427066 8810                    mov byte ptr [eax], dl
:00427068 8B45A0                  mov eax, dword ptr [ebp-60]
:0042706B 83C001                  add eax, 00000001
:0042706E 8945A0                  mov dword ptr [ebp-60], eax
:00427071 8B4D98                  mov ecx, dword ptr [ebp-68]
:00427074 83C101                  add ecx, 00000001
:00427077 894D98                  mov dword ptr [ebp-68], ecx
:0042707A 8B55A0                  mov edx, dword ptr [ebp-60]
:0042707D 8B4598                  mov eax, dword ptr [ebp-68]
:00427080 8A08                    mov cl, byte ptr [eax]
:00427082 880A                    mov byte ptr [edx], cl
:00427084 8B55A0                  mov edx, dword ptr [ebp-60]
:00427087 83C201                  add edx, 00000001
:0042708A 8955A0                  mov dword ptr [ebp-60], edx
:0042708D 8B4598                  mov eax, dword ptr [ebp-68]
:00427090 83C001                  add eax, 00000001
:00427093 894598                  mov dword ptr [ebp-68], eax
:00427096 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00427099 83C102                  add ecx, 00000002
:0042709C 894DA8                  mov dword ptr [ebp-58], ecx
:0042709F EB05                    jmp 004270A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427035(C), :00427042(C), :0042704F(C), :0042705C(C)
|
:004270A1 E99F000000              jmp 00427145

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042709F(U)
|
:004270A6 EB41                    jmp 004270E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427022(C)
|
:004270A8 8B55A0                  mov edx, dword ptr [ebp-60]
:004270AB 8B4598                  mov eax, dword ptr [ebp-68]
:004270AE 8A08                    mov cl, byte ptr [eax]
:004270B0 880A                    mov byte ptr [edx], cl
:004270B2 8B55A0                  mov edx, dword ptr [ebp-60]
:004270B5 83C201                  add edx, 00000001
:004270B8 8955A0                  mov dword ptr [ebp-60], edx
:004270BB 8B4598                  mov eax, dword ptr [ebp-68]
:004270BE 83C001                  add eax, 00000001
:004270C1 894598                  mov dword ptr [ebp-68], eax
:004270C4 8B4DA0                  mov ecx, dword ptr [ebp-60]
:004270C7 8B5598                  mov edx, dword ptr [ebp-68]
:004270CA 8A02                    mov al, byte ptr [edx]
:004270CC 8801                    mov byte ptr [ecx], al
:004270CE 8B4DA0                  mov ecx, dword ptr [ebp-60]
:004270D1 83C101                  add ecx, 00000001
:004270D4 894DA0                  mov dword ptr [ebp-60], ecx
:004270D7 8B5598                  mov edx, dword ptr [ebp-68]
:004270DA 83C201                  add edx, 00000001
:004270DD 895598                  mov dword ptr [ebp-68], edx
:004270E0 8B45A8                  mov eax, dword ptr [ebp-58]
:004270E3 83C002                  add eax, 00000002
:004270E6 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004270A6(U)
|
:004270E9 EB55                    jmp 00427140

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426FEF(C), :00427001(C)
|
:004270EB 8B4D14                  mov ecx, dword ptr [ebp+14]
:004270EE 81E1FF000000            and ecx, 000000FF
:004270F4 8B55A4                  mov edx, dword ptr [ebp-5C]
:004270F7 81E2FF000000            and edx, 000000FF
:004270FD 03CA                    add ecx, edx
:004270FF 394DA8                  cmp dword ptr [ebp-58], ecx
:00427102 7202                    jb 00427106
:00427104 EB3F                    jmp 00427145

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427102(C)
|
:00427106 8B4598                  mov eax, dword ptr [ebp-68]
:00427109 33C9                    xor ecx, ecx
:0042710B 8A08                    mov cl, byte ptr [eax]
:0042710D 83F91B                  cmp ecx, 0000001B
:00427110 7509                    jne 0042711B
:00427112 8A55A4                  mov dl, byte ptr [ebp-5C]
:00427115 80C203                  add dl, 03
:00427118 8855A4                  mov byte ptr [ebp-5C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427110(C)
|
:0042711B 8B45A0                  mov eax, dword ptr [ebp-60]
:0042711E 8B4D98                  mov ecx, dword ptr [ebp-68]
:00427121 8A11                    mov dl, byte ptr [ecx]
:00427123 8810                    mov byte ptr [eax], dl
:00427125 8B45A0                  mov eax, dword ptr [ebp-60]
:00427128 83C001                  add eax, 00000001
:0042712B 8945A0                  mov dword ptr [ebp-60], eax
:0042712E 8B4D98                  mov ecx, dword ptr [ebp-68]
:00427131 83C101                  add ecx, 00000001
:00427134 894D98                  mov dword ptr [ebp-68], ecx
:00427137 8B55A8                  mov edx, dword ptr [ebp-58]
:0042713A 83C201                  add edx, 00000001
:0042713D 8955A8                  mov dword ptr [ebp-58], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004270E9(U)
|
:00427140 E97EFEFFFF              jmp 00426FC3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426FCD(C), :00426FDC(C), :004270A1(U), :00427104(U)
|
:00427145 8B45A0                  mov eax, dword ptr [ebp-60]
:00427148 C60000                  mov byte ptr [eax], 00
:0042714B 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042714E 33D2                    xor edx, edx
:00427150 8A11                    mov dl, byte ptr [ecx]
:00427152 83FA0A                  cmp edx, 0000000A
:00427155 7509                    jne 00427160
:00427157 8B45A8                  mov eax, dword ptr [ebp-58]
:0042715A 83C001                  add eax, 00000001
:0042715D 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427155(C)
|
:00427160 8B4D98                  mov ecx, dword ptr [ebp-68]
:00427163 33D2                    xor edx, edx
:00427165 8A11                    mov dl, byte ptr [ecx]
:00427167 83FA0D                  cmp edx, 0000000D
:0042716A 7509                    jne 00427175
:0042716C 8B45A8                  mov eax, dword ptr [ebp-58]
:0042716F 83C002                  add eax, 00000002
:00427172 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042716A(C)
|
:00427175 837D1800                cmp dword ptr [ebp+18], 00000000
:00427179 742F                    je 004271AA
:0042717B 8D4DAC                  lea ecx, dword ptr [ebp-54]
:0042717E 51                      push ecx
:0042717F E81FB40300              call 004625A3
:00427184 83C404                  add esp, 00000004
:00427187 884590                  mov byte ptr [ebp-70], al
:0042718A 8B4514                  mov eax, dword ptr [ebp+14]
:0042718D 25FF000000              and eax, 000000FF
:00427192 8B5590                  mov edx, dword ptr [ebp-70]
:00427195 81E2FF000000            and edx, 000000FF
:0042719B 2BC2                    sub eax, edx
:0042719D 99                      cdq
:0042719E 2BC2                    sub eax, edx
:004271A0 D1F8                    sar eax, 1
:004271A2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004271A5 03C8                    add ecx, eax
:004271A7 894D08                  mov dword ptr [ebp+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427179(C)
|
:004271AA 8B550C                  mov edx, dword ptr [ebp+0C]
:004271AD 52                      push edx
:004271AE 8B4508                  mov eax, dword ptr [ebp+08]
:004271B1 50                      push eax
:004271B2 B9A8134800              mov ecx, 004813A8
:004271B7 E8EF0DFEFF              call 00407FAB
:004271BC 8D4DAC                  lea ecx, dword ptr [ebp-54]
:004271BF 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004271C0 683C804700              push 0047803C
:004271C5 68A8134800              push 004813A8
:004271CA E8A91AFEFF              call 00408C78
:004271CF 83C40C                  add esp, 0000000C
:004271D2 8B45A8                  mov eax, dword ptr [ebp-58]
:004271D5 8BE5                    mov esp, ebp
:004271D7 5D                      pop ebp
:004271D8 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C5AB   , :0040C5DC   , :0040C6A2   , :00423CFF   , :00427A8A   
|:0042C90B   , :004501B3   , :00458F8F   , :0045AC84   
|
:004271D9 55                      push ebp
:004271DA 8BEC                    mov ebp, esp
:004271DC 81EC68090000            sub esp, 00000968
:004271E2 56                      push esi
:004271E3 A1380E4B00              mov eax, dword ptr [004B0E38]
:004271E8 50                      push eax

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:004271E9 FF1528874B00            Call dword ptr [004B8728]
:004271EF 6A00                    push 00000000
:004271F1 B910584800              mov ecx, 00485810
:004271F6 E885210000              call 00429380
:004271FB C785ACF6FFFF00000000    mov dword ptr [ebp+FFFFF6AC], 00000000
:00427205 C745E801000000          mov [ebp-18], 00000001
:0042720C C785B0F6FFFF00000000    mov dword ptr [ebp+FFFFF6B0], 00000000
:00427216 C685C4F6FFFFFF          mov byte ptr [ebp+FFFFF6C4], FF
:0042721D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427220 894DF8                  mov dword ptr [ebp-08], ecx
:00427223 817D0C85020000          cmp dword ptr [ebp+0C], 00000285
:0042722A 7314                    jnb 00427240
:0042722C 8B550C                  mov edx, dword ptr [ebp+0C]
:0042722F 52                      push edx
:00427230 E87EFAFDFF              call 00406CB3
:00427235 83C404                  add esp, 00000004
:00427238 8985A8F6FFFF            mov dword ptr [ebp+FFFFF6A8], eax
:0042723E EB0A                    jmp 0042724A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042722A(C)
|
:00427240 C785A8F6FFFF00000000    mov dword ptr [ebp+FFFFF6A8], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042723E(U)
|
:0042724A 8B85A8F6FFFF            mov eax, dword ptr [ebp+FFFFF6A8]
:00427250 8945EC                  mov dword ptr [ebp-14], eax
:00427253 8B0D00F54A00            mov ecx, dword ptr [004AF500]
:00427259 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:0042725C 741A                    je 00427278
:0042725E 33D2                    xor edx, edx
:00427260 833D3880470000          cmp dword ptr [00478038], 00000000
:00427267 0F94C2                  sete dl
:0042726A 891538804700            mov dword ptr [00478038], edx
:00427270 8B45EC                  mov eax, dword ptr [ebp-14]
:00427273 A300F54A00              mov dword ptr [004AF500], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042725C(C)
|
:00427278 817D0C85020000          cmp dword ptr [ebp+0C], 00000285
:0042727F 1BC9                    sbb ecx, ecx
:00427281 F7D9                    neg ecx
:00427283 894DDC                  mov dword ptr [ebp-24], ecx
:00427286 B9A8034B00              mov ecx, 004B03A8
:0042728B E8F9F50100              call 00446889
:00427290 2B05F4E44700            sub eax, dword ptr [0047E4F4]
:00427296 99                      cdq
:00427297 2BC2                    sub eax, edx
:00427299 D1F8                    sar eax, 1
:0042729B 99                      cdq
:0042729C 83E207                  and edx, 00000007
:0042729F 03C2                    add eax, edx
:004272A1 C1F803                  sar eax, 03
:004272A4 C1E003                  shl eax, 03
:004272A7 8985B8F6FFFF            mov dword ptr [ebp+FFFFF6B8], eax
:004272AD B9A8034B00              mov ecx, 004B03A8
:004272B2 E8F9F50100              call 004468B0
:004272B7 2B05F8E44700            sub eax, dword ptr [0047E4F8]
:004272BD 83C028                  add eax, 00000028
:004272C0 99                      cdq
:004272C1 2BC2                    sub eax, edx
:004272C3 D1F8                    sar eax, 1
:004272C5 83C028                  add eax, 00000028
:004272C8 99                      cdq
:004272C9 83E207                  and edx, 00000007
:004272CC 03C2                    add eax, edx
:004272CE C1F803                  sar eax, 03
:004272D1 C1E003                  shl eax, 03
:004272D4 8985B4F6FFFF            mov dword ptr [ebp+FFFFF6B4], eax
:004272DA 837DDC00                cmp dword ptr [ebp-24], 00000000
:004272DE 0F8417010000            je 004273FB
:004272E4 B9A8034B00              mov ecx, 004B03A8
:004272E9 E8DAF40100              call 004467C8
:004272EE 85C0                    test eax, eax
:004272F0 0F8487000000            je 0042737D
:004272F6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004272F9 6BC970                  imul ecx, 00000070
:004272FC 81C198224900            add ecx, 00492298
:00427302 E843DF0300              call 0046524A
:00427307 8845F0                  mov byte ptr [ebp-10], al
:0042730A 8B55F0                  mov edx, dword ptr [ebp-10]
:0042730D 81E2FF000000            and edx, 000000FF
:00427313 81FAFF000000            cmp edx, 000000FF
:00427319 7459                    je 00427374
:0042731B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042731E 81E1FF000000            and ecx, 000000FF
:00427324 6BC924                  imul ecx, 00000024
:00427327 81C108F54A00            add ecx, 004AF508
:0042732D E86E200000              call 004293A0
:00427332 33C9                    xor ecx, ecx
:00427334 8A4801                  mov cl, byte ptr [eax+01]
:00427337 81F9FF000000            cmp ecx, 000000FF
:0042733D 7433                    je 00427372
:0042733F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00427342 81E1FF000000            and ecx, 000000FF
:00427348 6BC924                  imul ecx, 00000024
:0042734B 81C108F54A00            add ecx, 004AF508
:00427351 E84A200000              call 004293A0
:00427356 33D2                    xor edx, edx
:00427358 8A5001                  mov dl, byte ptr [eax+01]
:0042735B 8BF2                    mov esi, edx
:0042735D 6BF603                  imul esi, 00000003
:00427360 C1E604                  shl esi, 04
:00427363 B9A8034B00              mov ecx, 004B03A8
:00427368 E8A7F40100              call 00446814
:0042736D 2BF0                    sub esi, eax
:0042736F 8975F4                  mov dword ptr [ebp-0C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042733D(C)
|
:00427372 EB07                    jmp 0042737B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427319(C)
|
:00427374 C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427372(U)
|
:0042737B EB43                    jmp 004273C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004272F0(C)
|
:0042737D 8B45EC                  mov eax, dword ptr [ebp-14]
:00427380 50                      push eax
:00427381 E833BAFFFF              call 00422DB9
:00427386 83C404                  add esp, 00000004
:00427389 85C0                    test eax, eax
:0042738B 7425                    je 004273B2
:0042738D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00427390 51                      push ecx
:00427391 E823BAFFFF              call 00422DB9
:00427396 83C404                  add esp, 00000004
:00427399 8B5004                  mov edx, dword ptr [eax+04]
:0042739C 8955F4                  mov dword ptr [ebp-0C], edx
:0042739F 8B45EC                  mov eax, dword ptr [ebp-14]
:004273A2 50                      push eax
:004273A3 E811BAFFFF              call 00422DB9
:004273A8 83C404                  add esp, 00000004
:004273AB 8B08                    mov ecx, dword ptr [eax]
:004273AD 894DFC                  mov dword ptr [ebp-04], ecx
:004273B0 EB0E                    jmp 004273C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042738B(C)
|
:004273B2 C745F400000000          mov [ebp-0C], 00000000
:004273B9 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042737B(U), :004273B0(U)
|
:004273C0 B9A8034B00              mov ecx, 004B03A8
:004273C5 E8E6F40100              call 004468B0
:004273CA 83E828                  sub eax, 00000028
:004273CD 99                      cdq
:004273CE 2BC2                    sub eax, edx
:004273D0 D1F8                    sar eax, 1
:004273D2 3945F4                  cmp dword ptr [ebp-0C], eax
:004273D5 7E11                    jle 004273E8
:004273D7 8B95B4F6FFFF            mov edx, dword ptr [ebp+FFFFF6B4]
:004273DD 83C240                  add edx, 00000040
:004273E0 8995B4F6FFFF            mov dword ptr [ebp+FFFFF6B4], edx
:004273E6 EB11                    jmp 004273F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004273D5(C)
|
:004273E8 8B85B4F6FFFF            mov eax, dword ptr [ebp+FFFFF6B4]
:004273EE 05F0000000              add eax, 000000F0
:004273F3 8985B4F6FFFF            mov dword ptr [ebp+FFFFF6B4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004273E6(U)
|
:004273F9 EB12                    jmp 0042740D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004272DE(C)
|
:004273FB 8B8DB4F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B4]
:00427401 81C198000000            add ecx, 00000098
:00427407 898DB4F6FFFF            mov dword ptr [ebp+FFFFF6B4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004273F9(U)
|
:0042740D 8B5510                  mov edx, dword ptr [ebp+10]
:00427410 83E20F                  and edx, 0000000F
:00427413 8995C8F6FFFF            mov dword ptr [ebp+FFFFF6C8], edx
:00427419 8B4510                  mov eax, dword ptr [ebp+10]
:0042741C 83E010                  and eax, 00000010
:0042741F F7D8                    neg eax
:00427421 1BC0                    sbb eax, eax
:00427423 F7D8                    neg eax
:00427425 8985D0F6FFFF            mov dword ptr [ebp+FFFFF6D0], eax
:0042742B 83BDC8F6FFFF01          cmp dword ptr [ebp+FFFFF6C8], 00000001
:00427432 741D                    je 00427451
:00427434 B9C8E24A00              mov ecx, 004AE2C8
:00427439 E8927DFEFF              call 0040F1D0
:0042743E 2500040000              and eax, 00000400
:00427443 85C0                    test eax, eax
:00427445 740A                    je 00427451
:00427447 C785C8F6FFFF01000000    mov dword ptr [ebp+FFFFF6C8], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427432(C), :00427445(C)
|
:00427451 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00427454 F7D9                    neg ecx
:00427456 1BC9                    sbb ecx, ecx
:00427458 83C104                  add ecx, 00000004
:0042745B 898DD4F6FFFF            mov dword ptr [ebp+FFFFF6D4], ecx
:00427461 E8EFF7FFFF              call 00426C55
:00427466 E8C7B9FEFF              call 00412E32

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042746B 6A04                    push 00000004
:0042746D B9A8134800              mov ecx, 004813A8
:00427472 E87D0CFEFF              call 004080F4
:00427477 6A00                    push 00000000
:00427479 B9A8134800              mov ecx, 004813A8
:0042747E E80D0CFEFF              call 00408090
:00427483 837DDC00                cmp dword ptr [ebp-24], 00000000
:00427487 753A                    jne 004274C3

* Possible Reference to String Resource ID=00011: "
"
                                  |
:00427489 6A0B                    push 0000000B
:0042748B 8B95D4F6FFFF            mov edx, dword ptr [ebp+FFFFF6D4]
:00427491 83C202                  add edx, 00000002
:00427494 C1E204                  shl edx, 04
:00427497 83C208                  add edx, 00000008
:0042749A 52                      push edx
:0042749B 6848010000              push 00000148
:004274A0 8B85B4F6FFFF            mov eax, dword ptr [ebp+FFFFF6B4]
:004274A6 50                      push eax
:004274A7 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:004274AD 81C1A0000000            add ecx, 000000A0
:004274B3 51                      push ecx
:004274B4 B9000D4B00              mov ecx, 004B0D00
:004274B9 E8CB960300              call 00460B89
:004274BE E9AC020000              jmp 0042776F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427487(C)
|
:004274C3 833DD80C4B0000          cmp dword ptr [004B0CD8], 00000000
:004274CA 751B                    jne 004274E7
:004274CC 6A00                    push 00000000
:004274CE 8B15C80C4B00            mov edx, dword ptr [004B0CC8]
:004274D4 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004274D5 FF15E4864B00            Call dword ptr [004B86E4]
:004274DB C705D80C4B0001000000    mov dword ptr [004B0CD8], 00000001
:004274E5 EB1F                    jmp 00427506

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004274CA(C)
|
:004274E7 A1C80C4B00              mov eax, dword ptr [004B0CC8]
:004274EC 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:004274ED FF15E0864B00            Call dword ptr [004B86E0]
:004274F3 85C0                    test eax, eax
:004274F5 740F                    je 00427506
:004274F7 6A00                    push 00000000
:004274F9 8B0DC80C4B00            mov ecx, dword ptr [004B0CC8]
:004274FF 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00427500 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004274E5(U), :004274F5(C)
|
:00427506 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042750A 750A                    jne 00427516
:0042750C C7053880470001000000    mov dword ptr [00478038], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042750A(C)
|
:00427516 8B55EC                  mov edx, dword ptr [ebp-14]
:00427519 52                      push edx
:0042751A E80BB9FFFF              call 00422E2A
:0042751F 83C404                  add esp, 00000004
:00427522 8985C0F6FFFF            mov dword ptr [ebp+FFFFF6C0], eax
:00427528 81BDC0F6FFFFFF000000    cmp dword ptr [ebp+FFFFF6C0], 000000FF
:00427532 0F84B4000000            je 004275EC
:00427538 E8D5F3FEFF              call 00416912
:0042753D 85C0                    test eax, eax
:0042753F 0F85A7000000            jne 004275EC
:00427545 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00427547 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00427549 6A04                    push 00000004
:0042754B E8C0380400              call 0046AE10
:00427550 83C40C                  add esp, 0000000C
:00427553 83BDC0F6FFFF03          cmp dword ptr [ebp+FFFFF6C0], 00000003
:0042755A 750E                    jne 0042756A
:0042755C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042755F 83E810                  sub eax, 00000010
:00427562 8985A4F6FFFF            mov dword ptr [ebp+FFFFF6A4], eax
:00427568 EB0C                    jmp 00427576

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042755A(C)
|
:0042756A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042756D 83C128                  add ecx, 00000028
:00427570 898DA4F6FFFF            mov dword ptr [ebp+FFFFF6A4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427568(U)
|
:00427576 8B95A4F6FFFF            mov edx, dword ptr [ebp+FFFFF6A4]
:0042757C 8995B0F6FFFF            mov dword ptr [ebp+FFFFF6B0], edx
:00427582 8D85DCF6FFFF            lea eax, dword ptr [ebp+FFFFF6DC]
:00427588 50                      push eax
:00427589 6A18                    push 00000018
:0042758B 6A18                    push 00000018
:0042758D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00427590 83E910                  sub ecx, 00000010
:00427593 51                      push ecx
:00427594 8B95B0F6FFFF            mov edx, dword ptr [ebp+FFFFF6B0]
:0042759A 52                      push edx
:0042759B E8FD470400              call 0046BD9D
:004275A0 83C414                  add esp, 00000014
:004275A3 68802D0000              push 00002D80
:004275A8 B940DF4A00              mov ecx, 004ADF40
:004275AD E8ECBFFEFF              call 0041359E
:004275B2 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:004275B8 83E901                  sub ecx, 00000001
:004275BB F7D9                    neg ecx
:004275BD 1BC9                    sbb ecx, ecx
:004275BF 81E140020000            and ecx, 00000240
:004275C5 03C1                    add eax, ecx
:004275C7 50                      push eax
:004275C8 6A18                    push 00000018
:004275CA 6A18                    push 00000018
:004275CC 8B55F4                  mov edx, dword ptr [ebp-0C]
:004275CF 83EA10                  sub edx, 00000010
:004275D2 52                      push edx
:004275D3 8B85B0F6FFFF            mov eax, dword ptr [ebp+FFFFF6B0]
:004275D9 50                      push eax
:004275DA E808460400              call 0046BBE7
:004275DF 83C414                  add esp, 00000014
:004275E2 C785ACF6FFFF01000000    mov dword ptr [ebp+FFFFF6AC], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427532(C), :0042753F(C)
|
:004275EC 8B0D38804700            mov ecx, dword ptr [00478038]
:004275F2 F7D9                    neg ecx
:004275F4 1BC9                    sbb ecx, ecx
:004275F6 83E1E0                  and ecx, FFFFFFE0
:004275F9 81C188000000            add ecx, 00000088
:004275FF 8B95B8F6FFFF            mov edx, dword ptr [ebp+FFFFF6B8]
:00427605 03D1                    add edx, ecx
:00427607 8995B8F6FFFF            mov dword ptr [ebp+FFFFF6B8], edx
:0042760D 6A60                    push 00000060
:0042760F 6890010000              push 00000190
:00427614 8B85B4F6FFFF            mov eax, dword ptr [ebp+FFFFF6B4]
:0042761A 50                      push eax
:0042761B 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:00427621 51                      push ecx
:00427622 B9000D4B00              mov ecx, 004B0D00
:00427627 E876940300              call 00460AA2
:0042762C 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042762E 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00427630 6A04                    push 00000004
:00427632 E8D9370400              call 0046AE10
:00427637 83C40C                  add esp, 0000000C
:0042763A 6800460000              push 00004600
:0042763F B940DF4A00              mov ecx, 004ADF40
:00427644 E855BFFEFF              call 0041359E
:00427649 50                      push eax
:0042764A 6A60                    push 00000060
:0042764C 6890010000              push 00000190
:00427651 8B95B4F6FFFF            mov edx, dword ptr [ebp+FFFFF6B4]
:00427657 52                      push edx
:00427658 8B85B8F6FFFF            mov eax, dword ptr [ebp+FFFFF6B8]
:0042765E 50                      push eax
:0042765F E883450400              call 0046BBE7
:00427664 83C414                  add esp, 00000014
:00427667 6800440100              push 00014400
:0042766C B940DF4A00              mov ecx, 004ADF40
:00427671 E828BFFEFF              call 0041359E
:00427676 50                      push eax
:00427677 8B8DD4F6FFFF            mov ecx, dword ptr [ebp+FFFFF6D4]
:0042767D 6BC913                  imul ecx, 00000013
:00427680 51                      push ecx
:00427681 6828010000              push 00000128
:00427686 8B95B4F6FFFF            mov edx, dword ptr [ebp+FFFFF6B4]
:0042768C 83C220                  add edx, 00000020
:0042768F 52                      push edx
:00427690 A138804700              mov eax, dword ptr [00478038]
:00427695 F7D8                    neg eax
:00427697 1BC0                    sbb eax, eax
:00427699 83E048                  and eax, 00000048
:0042769C 83C010                  add eax, 00000010
:0042769F 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:004276A5 03C8                    add ecx, eax
:004276A7 51                      push ecx
:004276A8 E8F0460400              call 0046BD9D
:004276AD 83C414                  add esp, 00000014
:004276B0 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004276B2 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004276B4 6A04                    push 00000004
:004276B6 E855370400              call 0046AE10
:004276BB 83C40C                  add esp, 0000000C
:004276BE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004276C1 E89ACF0200              call 00454660
:004276C6 50                      push eax
:004276C7 8B95B4F6FFFF            mov edx, dword ptr [ebp+FFFFF6B4]
:004276CD 83C208                  add edx, 00000008
:004276D0 52                      push edx
:004276D1 A138804700              mov eax, dword ptr [00478038]
:004276D6 F7D8                    neg eax
:004276D8 1BC0                    sbb eax, eax
:004276DA 25C0FEFFFF              and eax, FFFFFEC0
:004276DF 0548010000              add eax, 00000148
:004276E4 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:004276EA 03C8                    add ecx, eax
:004276EC 51                      push ecx
:004276ED E851BCFEFF              call 00413343
:004276F2 83C40C                  add esp, 0000000C
:004276F5 6A49                    push 00000049
:004276F7 B9A8134800              mov ecx, 004813A8
:004276FC E85709FEFF              call 00408058
:00427701 8B95B4F6FFFF            mov edx, dword ptr [ebp+FFFFF6B4]
:00427707 83C208                  add edx, 00000008
:0042770A 52                      push edx
:0042770B A138804700              mov eax, dword ptr [00478038]
:00427710 F7D8                    neg eax
:00427712 1BC0                    sbb eax, eax
:00427714 83E048                  and eax, 00000048
:00427717 83C010                  add eax, 00000010
:0042771A 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:00427720 03C1                    add eax, ecx
:00427722 99                      cdq
:00427723 83E207                  and edx, 00000007
:00427726 03C2                    add eax, edx
:00427728 C1F803                  sar eax, 03
:0042772B 50                      push eax
:0042772C B9A8134800              mov ecx, 004813A8
:00427731 E87508FEFF              call 00407FAB
:00427736 837D1400                cmp dword ptr [ebp+14], 00000000
:0042773A 751D                    jne 00427759
:0042773C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042773F E85EC4FDFF              call 00403BA2
:00427744 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00427745 6840804700              push 00478040
:0042774A 68A8134800              push 004813A8
:0042774F E82415FEFF              call 00408C78
:00427754 83C40C                  add esp, 0000000C
:00427757 EB16                    jmp 0042776F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042773A(C)
|
:00427759 8B5514                  mov edx, dword ptr [ebp+14]
:0042775C 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042775D 6844804700              push 00478044
:00427762 68A8134800              push 004813A8
:00427767 E80C15FEFF              call 00408C78
:0042776C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004274BE(U), :00427757(U)
|
:0042776F E8D9B6FEFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042799F(U)
|
:00427774 8B45F8                  mov eax, dword ptr [ebp-08]
:00427777 33C9                    xor ecx, ecx
:00427779 8A08                    mov cl, byte ptr [eax]
:0042777B 85C9                    test ecx, ecx
:0042777D 0F8421020000            je 004279A4
:00427783 E8AAB6FEFF              call 00412E32
:00427788 8B55DC                  mov edx, dword ptr [ebp-24]
:0042778B F7DA                    neg edx
:0042778D 1BD2                    sbb edx, edx
:0042778F 83E210                  and edx, 00000010
:00427792 83C210                  add edx, 00000010
:00427795 8995BCF6FFFF            mov dword ptr [ebp+FFFFF6BC], edx
:0042779B 837DDC00                cmp dword ptr [ebp-24], 00000000
:0042779F 7417                    je 004277B8
:004277A1 A138804700              mov eax, dword ptr [00478038]
:004277A6 F7D8                    neg eax
:004277A8 1BC0                    sbb eax, eax
:004277AA 83E048                  and eax, 00000048
:004277AD 83C010                  add eax, 00000010
:004277B0 8985A0F6FFFF            mov dword ptr [ebp+FFFFF6A0], eax
:004277B6 EB0A                    jmp 004277C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042779F(C)
|
:004277B8 C785A0F6FFFFB0000000    mov dword ptr [ebp+FFFFF6A0], 000000B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004277B6(U)
|
:004277C2 8B8DA0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6A0]
:004277C8 898DCCF6FFFF            mov dword ptr [ebp+FFFFF6CC], ecx
:004277CE 837DE800                cmp dword ptr [ebp-18], 00000000
:004277D2 757F                    jne 00427853
:004277D4 837DDC00                cmp dword ptr [ebp-24], 00000000
:004277D8 7443                    je 0042781D
:004277DA 6800440100              push 00014400
:004277DF B940DF4A00              mov ecx, 004ADF40
:004277E4 E8B5BDFEFF              call 0041359E
:004277E9 50                      push eax
:004277EA 8B95D4F6FFFF            mov edx, dword ptr [ebp+FFFFF6D4]
:004277F0 6BD213                  imul edx, 00000013
:004277F3 52                      push edx
:004277F4 6828010000              push 00000128
:004277F9 8B85B4F6FFFF            mov eax, dword ptr [ebp+FFFFF6B4]
:004277FF 0385BCF6FFFF            add eax, dword ptr [ebp+FFFFF6BC]
:00427805 50                      push eax
:00427806 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:0042780C 038DCCF6FFFF            add ecx, dword ptr [ebp+FFFFF6CC]
:00427812 51                      push ecx
:00427813 E8CF430400              call 0046BBE7
:00427818 83C414                  add esp, 00000014
:0042781B EB36                    jmp 00427853

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004277D8(C)
|
:0042781D 68FFFF0000              push 0000FFFF
:00427822 8B95D4F6FFFF            mov edx, dword ptr [ebp+FFFFF6D4]
:00427828 6BD213                  imul edx, 00000013
:0042782B 52                      push edx
:0042782C 6828010000              push 00000128
:00427831 8B85B4F6FFFF            mov eax, dword ptr [ebp+FFFFF6B4]
:00427837 0385BCF6FFFF            add eax, dword ptr [ebp+FFFFF6BC]
:0042783D 50                      push eax
:0042783E 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:00427844 038DCCF6FFFF            add ecx, dword ptr [ebp+FFFFF6CC]
:0042784A 51                      push ecx
:0042784B E8C6BBFEFF              call 00413416
:00427850 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004277D2(C), :0042781B(U)
|
:00427853 6A4F                    push 0000004F
:00427855 B9A8134800              mov ecx, 004813A8
:0042785A E8F907FEFF              call 00408058
:0042785F C645E400                mov [ebp-1C], 00
:00427863 8B55E4                  mov edx, dword ptr [ebp-1C]
:00427866 81E2FF000000            and edx, 000000FF
:0042786C 8995D8F6FFFF            mov dword ptr [ebp+FFFFF6D8], edx
:00427872 EB08                    jmp 0042787C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004278F9(U)
|
:00427874 8A45E4                  mov al, byte ptr [ebp-1C]
:00427877 0401                    add al, 01
:00427879 8845E4                  mov byte ptr [ebp-1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427872(U)
|
:0042787C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042787F 33D2                    xor edx, edx
:00427881 8A11                    mov dl, byte ptr [ecx]
:00427883 85D2                    test edx, edx
:00427885 7477                    je 004278FE
:00427887 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042788A 25FF000000              and eax, 000000FF
:0042788F 3B85D4F6FFFF            cmp eax, dword ptr [ebp+FFFFF6D4]
:00427895 7D67                    jge 004278FE
:00427897 8B8DD0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6D0]
:0042789D 51                      push ecx
:0042789E 6A25                    push 00000025
:004278A0 8B55F8                  mov edx, dword ptr [ebp-08]
:004278A3 52                      push edx
:004278A4 8B85B4F6FFFF            mov eax, dword ptr [ebp+FFFFF6B4]
:004278AA 0385BCF6FFFF            add eax, dword ptr [ebp+FFFFF6BC]
:004278B0 50                      push eax
:004278B1 8B85B8F6FFFF            mov eax, dword ptr [ebp+FFFFF6B8]
:004278B7 0385CCF6FFFF            add eax, dword ptr [ebp+FFFFF6CC]
:004278BD 99                      cdq
:004278BE 83E207                  and edx, 00000007
:004278C1 03C2                    add eax, edx
:004278C3 C1F803                  sar eax, 03
:004278C6 50                      push eax
:004278C7 E8CCF6FFFF              call 00426F98
:004278CC 83C414                  add esp, 00000014
:004278CF 8945E0                  mov dword ptr [ebp-20], eax
:004278D2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004278D5 034DE0                  add ecx, dword ptr [ebp-20]
:004278D8 894DF8                  mov dword ptr [ebp-08], ecx
:004278DB 8B95D8F6FFFF            mov edx, dword ptr [ebp+FFFFF6D8]
:004278E1 0355E0                  add edx, dword ptr [ebp-20]
:004278E4 8995D8F6FFFF            mov dword ptr [ebp+FFFFF6D8], edx
:004278EA 8B85BCF6FFFF            mov eax, dword ptr [ebp+FFFFF6BC]
:004278F0 83C013                  add eax, 00000013
:004278F3 8985BCF6FFFF            mov dword ptr [ebp+FFFFF6BC], eax
:004278F9 E976FFFFFF              jmp 00427874

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427885(C), :00427895(C)
|
:004278FE B980594800              mov ecx, 00485980
:00427903 E8A68EFFFF              call 004207AE
:00427908 E840B5FEFF              call 00412E4D
:0042790D 83BDC8F6FFFF00          cmp dword ptr [ebp+FFFFF6C8], 00000000
:00427914 7507                    jne 0042791D
:00427916 E816F5FFFF              call 00426E31
:0042791B EB7B                    jmp 00427998

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427914(C)
|
:0042791D 83BDC8F6FFFF01          cmp dword ptr [ebp+FFFFF6C8], 00000001
:00427924 755F                    jne 00427985
:00427926 E8D3F3FFFF              call 00426CFE
:0042792B 81BDD8F6FFFF96000000    cmp dword ptr [ebp+FFFFF6D8], 00000096
:00427935 7E0C                    jle 00427943
:00427937 C7859CF6FFFF96000000    mov dword ptr [ebp+FFFFF69C], 00000096
:00427941 EB0C                    jmp 0042794F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427935(C)
|
:00427943 8B8DD8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6D8]
:00427949 898D9CF6FFFF            mov dword ptr [ebp+FFFFF69C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427941(U)
|
:0042794F 8B959CF6FFFF            mov edx, dword ptr [ebp+FFFFF69C]
:00427955 8955E0                  mov dword ptr [ebp-20], edx
:00427958 8B45E0                  mov eax, dword ptr [ebp-20]
:0042795B 99                      cdq

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042795C B907000000              mov ecx, 00000007
:00427961 F7F9                    idiv ecx
:00427963 8BF0                    mov esi, eax
:00427965 B9C8E24A00              mov ecx, 004AE2C8
:0042796A E871AEFEFF              call 004127E0
:0042796F 25FF000000              and eax, 000000FF
:00427974 0FAFF0                  imul esi, eax
:00427977 83C607                  add esi, 00000007
:0042797A 56                      push esi
:0042797B E8C4F3FFFF              call 00426D44
:00427980 83C404                  add esp, 00000004
:00427983 EB13                    jmp 00427998

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427924(C)
|
:00427985 83BDC8F6FFFF04          cmp dword ptr [ebp+FFFFF6C8], 00000004
:0042798C 750A                    jne 00427998

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042798E 6A02                    push 00000002
:00427990 E85BF2FFFF              call 00426BF0
:00427995 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042791B(U), :00427983(U), :0042798C(C)
|
:00427998 C745E800000000          mov [ebp-18], 00000000
:0042799F E9D0FDFFFF              jmp 00427774

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042777D(C)
|
:004279A4 B980594800              mov ecx, 00485980
:004279A9 E8008EFFFF              call 004207AE
:004279AE 83BDC8F6FFFF02          cmp dword ptr [ebp+FFFFF6C8], 00000002
:004279B5 7515                    jne 004279CC

* Possible StringData Ref from Data Obj ->"iHܡH"
                                  |
:004279B7 6848804700              push 00478048

* Possible Reference to String Resource ID=00006: ""
                                  |
:004279BC 6A06                    push 00000006
:004279BE E8A9110000              call 00428B6C
:004279C3 83C408                  add esp, 00000008
:004279C6 8885C4F6FFFF            mov byte ptr [ebp+FFFFF6C4], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004279B5(C)
|
:004279CC B9000D4B00              mov ecx, 004B0D00
:004279D1 E81B920300              call 00460BF1
:004279D6 83BDACF6FFFF00          cmp dword ptr [ebp+FFFFF6AC], 00000000
:004279DD 7421                    je 00427A00
:004279DF 8D95DCF6FFFF            lea edx, dword ptr [ebp+FFFFF6DC]
:004279E5 52                      push edx
:004279E6 6A18                    push 00000018
:004279E8 6A18                    push 00000018
:004279EA 8B45F4                  mov eax, dword ptr [ebp-0C]
:004279ED 83E810                  sub eax, 00000010
:004279F0 50                      push eax
:004279F1 8B8DB0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B0]
:004279F7 51                      push ecx
:004279F8 E8EA410400              call 0046BBE7
:004279FD 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004279DD(C)
|
:00427A00 6A01                    push 00000001
:00427A02 B910584800              mov ecx, 00485810
:00427A07 E874190000              call 00429380
:00427A0C 8B95C4F6FFFF            mov edx, dword ptr [ebp+FFFFF6C4]
:00427A12 81E2FF000000            and edx, 000000FF
:00427A18 81FAFF000000            cmp edx, 000000FF
:00427A1E 741C                    je 00427A3C
:00427A20 8B85C4F6FFFF            mov eax, dword ptr [ebp+FFFFF6C4]
:00427A26 25FF000000              and eax, 000000FF
:00427A2B 83F801                  cmp eax, 00000001
:00427A2E 740C                    je 00427A3C
:00427A30 C78598F6FFFF00000000    mov dword ptr [ebp+FFFFF698], 00000000
:00427A3A EB0A                    jmp 00427A46

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427A1E(C), :00427A2E(C)
|
:00427A3C C78598F6FFFF01000000    mov dword ptr [ebp+FFFFF698], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427A3A(U)
|
:00427A46 8B8598F6FFFF            mov eax, dword ptr [ebp+FFFFF698]
:00427A4C 5E                      pop esi
:00427A4D 8BE5                    mov esp, ebp
:00427A4F 5D                      pop ebp
:00427A50 C3                      ret


:00427A51 55                      push ebp
:00427A52 8BEC                    mov ebp, esp
:00427A54 81EC04010000            sub esp, 00000104
:00427A5A 8D4510                  lea eax, dword ptr [ebp+10]
:00427A5D 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax
:00427A63 8B8DFCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEFC]
:00427A69 51                      push ecx
:00427A6A 8B550C                  mov edx, dword ptr [ebp+0C]
:00427A6D 52                      push edx
:00427A6E 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:00427A74 50                      push eax

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:00427A75 FF157C874B00            Call dword ptr [004B877C]
:00427A7B 6A00                    push 00000000
:00427A7D 6A00                    push 00000000
:00427A7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427A82 51                      push ecx
:00427A83 8D9500FFFFFF            lea edx, dword ptr [ebp+FFFFFF00]
:00427A89 52                      push edx
:00427A8A E84AF7FFFF              call 004271D9
:00427A8F 83C410                  add esp, 00000010
:00427A92 8BE5                    mov esp, ebp
:00427A94 5D                      pop ebp
:00427A95 C3                      ret



* Referenced by a CALL at Addresses:
|:0040A68B   , :00413310   , :00446601   , :00468796   , :00468800   
|:00468872   , :004688C3   
|
:00427A96 55                      push ebp
:00427A97 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00427A99 6AFF                    push FFFFFFFF
:00427A9B 6895394700              push 00473995
:00427AA0 64A100000000            mov eax, dword ptr fs:[00000000]
:00427AA6 50                      push eax
:00427AA7 64892500000000          mov dword ptr fs:[00000000], esp
:00427AAE 81ECBC010000            sub esp, 000001BC
:00427AB4 C645DC00                mov [ebp-24], 00
:00427AB8 8B4518                  mov eax, dword ptr [ebp+18]
:00427ABB 25FF000000              and eax, 000000FF
:00427AC0 2580000000              and eax, 00000080
:00427AC5 888584FEFFFF            mov byte ptr [ebp+FFFFFE84], al
:00427ACB 8B4D18                  mov ecx, dword ptr [ebp+18]
:00427ACE 81E1FF000000            and ecx, 000000FF
:00427AD4 83E140                  and ecx, 00000040
:00427AD7 888D70FEFFFF            mov byte ptr [ebp+FFFFFE70], cl
:00427ADD C68560FEFFFF00          mov byte ptr [ebp+FFFFFE60], 00
:00427AE4 C645F014                mov [ebp-10], 14
:00427AE8 C745E800000000          mov [ebp-18], 00000000

* Possible Reference to String Resource ID=00008: ""
                                  |
:00427AEF C78568FEFFFF08000000    mov dword ptr [ebp+FFFFFE68], 00000008
:00427AF9 C745EC00000000          mov [ebp-14], 00000000
:00427B00 E850F1FFFF              call 00426C55
:00427B05 837D2400                cmp dword ptr [ebp+24], 00000000
:00427B09 741A                    je 00427B25
:00427B0B 8B5518                  mov edx, dword ptr [ebp+18]
:00427B0E 81E2FF000000            and edx, 000000FF
:00427B14 83E220                  and edx, 00000020
:00427B17 85D2                    test edx, edx
:00427B19 740A                    je 00427B25
:00427B1B 8B4524                  mov eax, dword ptr [ebp+24]
:00427B1E 33C9                    xor ecx, ecx
:00427B20 8A08                    mov cl, byte ptr [eax]
:00427B22 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427B09(C), :00427B19(C)
|
:00427B25 C68588FEFFFF00          mov byte ptr [ebp+FFFFFE88], 00
:00427B2C EB0F                    jmp 00427B3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427BD8(U)
|
:00427B2E 8A9588FEFFFF            mov dl, byte ptr [ebp+FFFFFE88]
:00427B34 80C201                  add dl, 01
:00427B37 889588FEFFFF            mov byte ptr [ebp+FFFFFE88], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427B2C(U)
|
:00427B3D 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00427B43 25FF000000              and eax, 000000FF
:00427B48 8B4D10                  mov ecx, dword ptr [ebp+10]
:00427B4B 833C8100                cmp dword ptr [ecx+4*eax], 00000000
:00427B4F 0F8488000000            je 00427BDD
:00427B55 C6857CFEFFFF00          mov byte ptr [ebp+FFFFFE7C], 00
:00427B5C EB0F                    jmp 00427B6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427B93(U)
|
:00427B5E 8A957CFEFFFF            mov dl, byte ptr [ebp+FFFFFE7C]
:00427B64 80C201                  add dl, 01
:00427B67 88957CFEFFFF            mov byte ptr [ebp+FFFFFE7C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427B5C(U)
|
:00427B6D 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00427B73 25FF000000              and eax, 000000FF
:00427B78 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:00427B7E 81E1FF000000            and ecx, 000000FF
:00427B84 8B5510                  mov edx, dword ptr [ebp+10]
:00427B87 8B0482                  mov eax, dword ptr [edx+4*eax]
:00427B8A 33D2                    xor edx, edx
:00427B8C 8A1408                  mov dl, byte ptr [eax+ecx]
:00427B8F 85D2                    test edx, edx
:00427B91 7402                    je 00427B95
:00427B93 EBC9                    jmp 00427B5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427B91(C)
|
:00427B95 8B4520                  mov eax, dword ptr [ebp+20]
:00427B98 25FF000000              and eax, 000000FF
:00427B9D 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:00427BA3 81E1FF000000            and ecx, 000000FF
:00427BA9 3BC1                    cmp eax, ecx
:00427BAB 7E11                    jle 00427BBE
:00427BAD 8B5520                  mov edx, dword ptr [ebp+20]
:00427BB0 81E2FF000000            and edx, 000000FF
:00427BB6 899540FEFFFF            mov dword ptr [ebp+FFFFFE40], edx
:00427BBC EB11                    jmp 00427BCF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427BAB(C)
|
:00427BBE 8B857CFEFFFF            mov eax, dword ptr [ebp+FFFFFE7C]
:00427BC4 25FF000000              and eax, 000000FF
:00427BC9 898540FEFFFF            mov dword ptr [ebp+FFFFFE40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427BBC(U)
|
:00427BCF 8A8D40FEFFFF            mov cl, byte ptr [ebp+FFFFFE40]
:00427BD5 884D20                  mov byte ptr [ebp+20], cl
:00427BD8 E951FFFFFF              jmp 00427B2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427B4F(C)
|
:00427BDD 8A9588FEFFFF            mov dl, byte ptr [ebp+FFFFFE88]
:00427BE3 889560FEFFFF            mov byte ptr [ebp+FFFFFE60], dl
:00427BE9 8B4520                  mov eax, dword ptr [ebp+20]
:00427BEC 25FF000000              and eax, 000000FF
:00427BF1 83F808                  cmp eax, 00000008
:00427BF4 7E11                    jle 00427C07
:00427BF6 8B4D20                  mov ecx, dword ptr [ebp+20]
:00427BF9 81E1FF000000            and ecx, 000000FF
:00427BFF 898D3CFEFFFF            mov dword ptr [ebp+FFFFFE3C], ecx
:00427C05 EB0A                    jmp 00427C11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427BF4(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:00427C07 C7853CFEFFFF08000000    mov dword ptr [ebp+FFFFFE3C], 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427C05(U)
|
:00427C11 8A953CFEFFFF            mov dl, byte ptr [ebp+FFFFFE3C]
:00427C17 885520                  mov byte ptr [ebp+20], dl
:00427C1A 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:00427C20 25FF000000              and eax, 000000FF
:00427C25 F7D8                    neg eax
:00427C27 1BC0                    sbb eax, eax
:00427C29 83E002                  and eax, 00000002
:00427C2C 8A4D20                  mov cl, byte ptr [ebp+20]
:00427C2F 02C8                    add cl, al
:00427C31 884D20                  mov byte ptr [ebp+20], cl
:00427C34 8B9584FEFFFF            mov edx, dword ptr [ebp+FFFFFE84]
:00427C3A 81E2FF000000            and edx, 000000FF
:00427C40 85D2                    test edx, edx
:00427C42 7429                    je 00427C6D
:00427C44 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:00427C4A 25FF000000              and eax, 000000FF
:00427C4F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00427C52 81E1FF000000            and ecx, 000000FF
:00427C58 3BC1                    cmp eax, ecx
:00427C5A 7E06                    jle 00427C62
:00427C5C C645DC01                mov [ebp-24], 01
:00427C60 EB09                    jmp 00427C6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427C5A(C)
|
:00427C62 8A9560FEFFFF            mov dl, byte ptr [ebp+FFFFFE60]
:00427C68 885514                  mov byte ptr [ebp+14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427C60(U)
|
:00427C6B EB21                    jmp 00427C8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427C42(C)
|
:00427C6D 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:00427C73 25FF000000              and eax, 000000FF
:00427C78 8B4D14                  mov ecx, dword ptr [ebp+14]
:00427C7B 81E1FF000000            and ecx, 000000FF
:00427C81 3BC1                    cmp eax, ecx
:00427C83 7F09                    jg 00427C8E
:00427C85 8A9560FEFFFF            mov dl, byte ptr [ebp+FFFFFE60]
:00427C8B 885514                  mov byte ptr [ebp+14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427C6B(U), :00427C83(C)
|
:00427C8E 8A4514                  mov al, byte ptr [ebp+14]
:00427C91 50                      push eax
:00427C92 8A4D20                  mov cl, byte ptr [ebp+20]
:00427C95 51                      push ecx
:00427C96 8B551C                  mov edx, dword ptr [ebp+1C]
:00427C99 52                      push edx
:00427C9A 8B4510                  mov eax, dword ptr [ebp+10]
:00427C9D 50                      push eax
:00427C9E 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00427CA4 E897170000              call 00429440
:00427CA9 C745FC00000000          mov [ebp-04], 00000000
:00427CB0 8B4D14                  mov ecx, dword ptr [ebp+14]
:00427CB3 81E1FF000000            and ecx, 000000FF
:00427CB9 8B55F0                  mov edx, dword ptr [ebp-10]
:00427CBC 81E2FF000000            and edx, 000000FF
:00427CC2 0FAFCA                  imul ecx, edx
:00427CC5 8B8568FEFFFF            mov eax, dword ptr [ebp+FFFFFE68]
:00427CCB 8D4C410F                lea ecx, dword ptr [ecx+2*eax+0F]
:00427CCF C1E904                  shr ecx, 04
:00427CD2 C1E104                  shl ecx, 04
:00427CD5 898D80FEFFFF            mov dword ptr [ebp+FFFFFE80], ecx
:00427CDB 837D0810                cmp dword ptr [ebp+08], 00000010
:00427CDF 7307                    jnb 00427CE8

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00427CE1 C7450810000000          mov [ebp+08], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427CDF(C)
|
:00427CE8 8B5520                  mov edx, dword ptr [ebp+20]
:00427CEB 81E2FF000000            and edx, 000000FF
:00427CF1 8B4508                  mov eax, dword ptr [ebp+08]
:00427CF4 8D4CD030                lea ecx, dword ptr [eax+8*edx+30]
:00427CF8 81F978020000            cmp ecx, 00000278
:00427CFE 721A                    jb 00427D1A
:00427D00 8B5520                  mov edx, dword ptr [ebp+20]
:00427D03 81E2FF000000            and edx, 000000FF
:00427D09 8D04D530000000          lea eax, dword ptr [8*edx+00000030]
:00427D10 B978020000              mov ecx, 00000278
:00427D15 2BC8                    sub ecx, eax
:00427D17 894D08                  mov dword ptr [ebp+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427CFE(C)
|
:00427D1A 837D0C30                cmp dword ptr [ebp+0C], 00000030
:00427D1E 7307                    jnb 00427D27
:00427D20 C7450C30000000          mov [ebp+0C], 00000030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427D1E(C)
|
:00427D27 8B550C                  mov edx, dword ptr [ebp+0C]
:00427D2A 039580FEFFFF            add edx, dword ptr [ebp+FFFFFE80]
:00427D30 81FAA8010000            cmp edx, 000001A8
:00427D36 720E                    jb 00427D46
:00427D38 B8A8010000              mov eax, 000001A8
:00427D3D 2B8580FEFFFF            sub eax, dword ptr [ebp+FFFFFE80]
:00427D43 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427D36(C)
|
:00427D46 E8C7EBFEFF              call 00416912
:00427D4B F7D8                    neg eax
:00427D4D 1BC0                    sbb eax, eax
:00427D4F 83E003                  and eax, 00000003
:00427D52 83C002                  add eax, 00000002
:00427D55 888588FEFFFF            mov byte ptr [ebp+FFFFFE88], al
:00427D5B 6A00                    push 00000000
:00427D5D E816E8FFFF              call 00426578
:00427D62 83C404                  add esp, 00000004
:00427D65 8B4D20                  mov ecx, dword ptr [ebp+20]
:00427D68 81E1FF000000            and ecx, 000000FF
:00427D6E 8B55DC                  mov edx, dword ptr [ebp-24]
:00427D71 81E2FF000000            and edx, 000000FF
:00427D77 83EA01                  sub edx, 00000001
:00427D7A F7DA                    neg edx
:00427D7C 1BD2                    sbb edx, edx
:00427D7E 83E2F0                  and edx, FFFFFFF0
:00427D81 83C210                  add edx, 00000010
:00427D84 8D44CA10                lea eax, dword ptr [edx+8*ecx+10]
:00427D88 8945E0                  mov dword ptr [ebp-20], eax
:00427D8B 8B8D70FEFFFF            mov ecx, dword ptr [ebp+FFFFFE70]
:00427D91 81E1FF000000            and ecx, 000000FF
:00427D97 85C9                    test ecx, ecx
:00427D99 7431                    je 00427DCC
:00427D9B 6A00                    push 00000000
:00427D9D 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:00427DA3 81E2FF000000            and edx, 000000FF
:00427DA9 52                      push edx
:00427DAA 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00427DB0 50                      push eax
:00427DB1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00427DB4 83C110                  add ecx, 00000010
:00427DB7 51                      push ecx
:00427DB8 8B550C                  mov edx, dword ptr [ebp+0C]
:00427DBB 52                      push edx
:00427DBC 8B4508                  mov eax, dword ptr [ebp+08]
:00427DBF 50                      push eax
:00427DC0 B9000D4B00              mov ecx, 004B0D00
:00427DC5 E8EF8B0300              call 004609B9
:00427DCA EB2D                    jmp 00427DF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427D99(C)
|
:00427DCC 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:00427DD2 81E1FF000000            and ecx, 000000FF
:00427DD8 51                      push ecx
:00427DD9 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:00427DDF 52                      push edx
:00427DE0 8B45E0                  mov eax, dword ptr [ebp-20]
:00427DE3 83C010                  add eax, 00000010
:00427DE6 50                      push eax
:00427DE7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00427DEA 51                      push ecx
:00427DEB 8B5508                  mov edx, dword ptr [ebp+08]
:00427DEE 52                      push edx
:00427DEF B9000D4B00              mov ecx, 004B0D00
:00427DF4 E8908D0300              call 00460B89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427DCA(U)
|
:00427DF9 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00427DFF 83E810                  sub eax, 00000010
:00427E02 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00427E05 81E1FF000000            and ecx, 000000FF
:00427E0B 8B5514                  mov edx, dword ptr [ebp+14]
:00427E0E 81E2FF000000            and edx, 000000FF
:00427E14 0FAFCA                  imul ecx, edx
:00427E17 2BC1                    sub eax, ecx
:00427E19 D1E8                    shr eax, 1
:00427E1B 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:00427E21 03C8                    add ecx, eax
:00427E23 898D68FEFFFF            mov dword ptr [ebp+FFFFFE68], ecx
:00427E29 8B5520                  mov edx, dword ptr [ebp+20]
:00427E2C 81E2FF000000            and edx, 000000FF
:00427E32 8B4508                  mov eax, dword ptr [ebp+08]
:00427E35 8D4CD010                lea ecx, dword ptr [eax+8*edx+10]
:00427E39 894DE4                  mov dword ptr [ebp-1C], ecx
:00427E3C 8B9560FEFFFF            mov edx, dword ptr [ebp+FFFFFE60]
:00427E42 81E2FF000000            and edx, 000000FF
:00427E48 52                      push edx
:00427E49 8B4514                  mov eax, dword ptr [ebp+14]
:00427E4C 25FF000000              and eax, 000000FF
:00427E51 50                      push eax
:00427E52 8B4D14                  mov ecx, dword ptr [ebp+14]
:00427E55 81E1FF000000            and ecx, 000000FF
:00427E5B 8B55F0                  mov edx, dword ptr [ebp-10]
:00427E5E 81E2FF000000            and edx, 000000FF
:00427E64 0FAFCA                  imul ecx, edx
:00427E67 51                      push ecx
:00427E68 8B450C                  mov eax, dword ptr [ebp+0C]
:00427E6B 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:00427E71 50                      push eax
:00427E72 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00427E75 C1E903                  shr ecx, 03
:00427E78 51                      push ecx
:00427E79 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00427E7C E83F150000              call 004293C0
:00427E81 C645FC01                mov [ebp-04], 01
:00427E85 8B55DC                  mov edx, dword ptr [ebp-24]
:00427E88 81E2FF000000            and edx, 000000FF
:00427E8E 83FA01                  cmp edx, 00000001
:00427E91 7529                    jne 00427EBC
:00427E93 837D2400                cmp dword ptr [ebp+24], 00000000
:00427E97 741B                    je 00427EB4
:00427E99 8B4518                  mov eax, dword ptr [ebp+18]
:00427E9C 25FF000000              and eax, 000000FF
:00427EA1 83E020                  and eax, 00000020
:00427EA4 85C0                    test eax, eax
:00427EA6 740C                    je 00427EB4
:00427EA8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00427EAB 51                      push ecx
:00427EAC 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00427EAF E85B910300              call 0046100F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427E97(C), :00427EA6(C)
|
:00427EB4 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00427EB7 E8E48D0300              call 00460CA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427E91(C)
|
:00427EBC 8B9584FEFFFF            mov edx, dword ptr [ebp+FFFFFE84]
:00427EC2 81E2FF000000            and edx, 000000FF
:00427EC8 85D2                    test edx, edx
:00427ECA 0F8446010000            je 00428016

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00427ED0 6A04                    push 00000004
:00427ED2 B9A8134800              mov ecx, 004813A8
:00427ED7 E81802FEFF              call 004080F4
:00427EDC 6A4F                    push 0000004F
:00427EDE B9A8134800              mov ecx, 004813A8
:00427EE3 E87001FEFF              call 00408058
:00427EE8 6A00                    push 00000000
:00427EEA B9A8134800              mov ecx, 004813A8
:00427EEF E89C01FEFF              call 00408090
:00427EF4 C68588FEFFFF00          mov byte ptr [ebp+FFFFFE88], 00
:00427EFB EB0E                    jmp 00427F0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428003(U)
|
:00427EFD 8A8588FEFFFF            mov al, byte ptr [ebp+FFFFFE88]
:00427F03 0401                    add al, 01
:00427F05 888588FEFFFF            mov byte ptr [ebp+FFFFFE88], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427EFB(U)
|
:00427F0B 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:00427F11 81E1FF000000            and ecx, 000000FF
:00427F17 8B5514                  mov edx, dword ptr [ebp+14]
:00427F1A 81E2FF000000            and edx, 000000FF
:00427F20 3BCA                    cmp ecx, edx
:00427F22 0F8DE0000000            jnl 00428008
:00427F28 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00427F2E 25FF000000              and eax, 000000FF
:00427F33 0345E8                  add eax, dword ptr [ebp-18]
:00427F36 8B4D10                  mov ecx, dword ptr [ebp+10]
:00427F39 8B1481                  mov edx, dword ptr [ecx+4*eax]
:00427F3C 52                      push edx
:00427F3D E861A60300              call 004625A3
:00427F42 83C404                  add esp, 00000004
:00427F45 898574FEFFFF            mov dword ptr [ebp+FFFFFE74], eax
:00427F4B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00427F4E 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00427F54 8B45F0                  mov eax, dword ptr [ebp-10]
:00427F57 25FF000000              and eax, 000000FF
:00427F5C 83E810                  sub eax, 00000010
:00427F5F 99                      cdq
:00427F60 2BC2                    sub eax, edx
:00427F62 D1F8                    sar eax, 1
:00427F64 03C8                    add ecx, eax
:00427F66 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:00427F6C 81E2FF000000            and edx, 000000FF
:00427F72 8B45F0                  mov eax, dword ptr [ebp-10]
:00427F75 25FF000000              and eax, 000000FF
:00427F7A 0FAFD0                  imul edx, eax
:00427F7D 03CA                    add ecx, edx
:00427F7F 51                      push ecx
:00427F80 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427F83 C1E903                  shr ecx, 03
:00427F86 8B5520                  mov edx, dword ptr [ebp+20]
:00427F89 81E2FF000000            and edx, 000000FF
:00427F8F 2B9574FEFFFF            sub edx, dword ptr [ebp+FFFFFE74]
:00427F95 D1EA                    shr edx, 1
:00427F97 8D441101                lea eax, dword ptr [ecx+edx+01]
:00427F9B 50                      push eax
:00427F9C B9A8134800              mov ecx, 004813A8
:00427FA1 E80500FEFF              call 00407FAB
:00427FA6 837D1C00                cmp dword ptr [ebp+1C], 00000000
:00427FAA 742F                    je 00427FDB
:00427FAC 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:00427FB2 81E1FF000000            and ecx, 000000FF
:00427FB8 034DE8                  add ecx, dword ptr [ebp-18]
:00427FBB 8B551C                  mov edx, dword ptr [ebp+1C]
:00427FBE 33C0                    xor eax, eax
:00427FC0 8A040A                  mov al, byte ptr [edx+ecx]
:00427FC3 83E801                  sub eax, 00000001
:00427FC6 F7D8                    neg eax
:00427FC8 1BC0                    sbb eax, eax
:00427FCA 83E043                  and eax, 00000043
:00427FCD 83C00C                  add eax, 0000000C
:00427FD0 50                      push eax
:00427FD1 B9A8134800              mov ecx, 004813A8
:00427FD6 E87D00FEFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427FAA(C)
|
:00427FDB 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:00427FE1 81E1FF000000            and ecx, 000000FF
:00427FE7 034DE8                  add ecx, dword ptr [ebp-18]
:00427FEA 8B5510                  mov edx, dword ptr [ebp+10]
:00427FED 8B048A                  mov eax, dword ptr [edx+4*ecx]
:00427FF0 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00427FF1 6854804700              push 00478054
:00427FF6 68A8134800              push 004813A8
:00427FFB E8780CFEFF              call 00408C78
:00428000 83C40C                  add esp, 0000000C
:00428003 E9F5FEFFFF              jmp 00427EFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427F22(C)
|
:00428008 6A4F                    push 0000004F
:0042800A B9A8134800              mov ecx, 004813A8
:0042800F E84400FEFF              call 00408058
:00428014 EB23                    jmp 00428039

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427ECA(C)
|
:00428016 6A00                    push 00000000
:00428018 6A14                    push 00000014
:0042801A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042801D 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00428023 51                      push ecx
:00428024 8B5508                  mov edx, dword ptr [ebp+08]
:00428027 C1EA03                  shr edx, 03
:0042802A 83C201                  add edx, 00000001
:0042802D 52                      push edx
:0042802E 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00428034 E8CB950300              call 00461604

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428014(U)
|
:00428039 B980594800              mov ecx, 00485980
:0042803E E86B87FFFF              call 004207AE
:00428043 C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:0042804D E8ACECFFFF              call 00426CFE
:00428052 C7856CFEFFFF01000000    mov dword ptr [ebp+FFFFFE6C], 00000001
:0042805C C745D8FEFF0000          mov [ebp-28], 0000FFFE
:00428063 C78578FEFFFF00000000    mov dword ptr [ebp+FFFFFE78], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004285F4(U)
|
:0042806D 83BD6CFEFFFF00          cmp dword ptr [ebp+FFFFFE6C], 00000000
:00428074 0F847F050000            je 004285F9
:0042807A E8CF440400              call 0046C54E
:0042807F 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:00428085 25FF000000              and eax, 000000FF
:0042808A 85C0                    test eax, eax
:0042808C 7573                    jne 00428101
:0042808E 6A00                    push 00000000
:00428090 E8E3E4FFFF              call 00426578
:00428095 83C404                  add esp, 00000004
:00428098 B980594800              mov ecx, 00485980
:0042809D E8CB80FFFF              call 0042016D
:004280A2 83F801                  cmp eax, 00000001
:004280A5 7555                    jne 004280FC
:004280A7 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:004280AD E84C960300              call 004616FE
:004280B2 25FF000000              and eax, 000000FF
:004280B7 898564FEFFFF            mov dword ptr [ebp+FFFFFE64], eax
:004280BD 81BD64FEFFFFFF000000    cmp dword ptr [ebp+FFFFFE64], 000000FF
:004280C7 7405                    je 004280CE
:004280C9 E92B050000              jmp 004285F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004280C7(C)
|
:004280CE 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:004280D4 E87D960300              call 00461756
:004280D9 85C0                    test eax, eax
:004280DB 751F                    jne 004280FC
:004280DD 8B4D18                  mov ecx, dword ptr [ebp+18]
:004280E0 81E1FF000000            and ecx, 000000FF
:004280E6 83E101                  and ecx, 00000001
:004280E9 85C9                    test ecx, ecx
:004280EB 750F                    jne 004280FC
:004280ED C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:004280F7 E9FD040000              jmp 004285F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004280A5(C), :004280DB(C), :004280EB(C)
|
:004280FC E9C9040000              jmp 004285CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042808C(C)
|
:00428101 B980594800              mov ecx, 00485980
:00428106 E81780FFFF              call 00420122
:0042810B B980594800              mov ecx, 00485980
:00428110 E87180FFFF              call 00420186
:00428115 89855CFEFFFF            mov dword ptr [ebp+FFFFFE5C], eax
:0042811B B980594800              mov ecx, 00485980
:00428120 E89080FFFF              call 004201B5
:00428125 898558FEFFFF            mov dword ptr [ebp+FFFFFE58], eax
:0042812B C78554FEFFFF00000000    mov dword ptr [ebp+FFFFFE54], 00000000
:00428135 8B955CFEFFFF            mov edx, dword ptr [ebp+FFFFFE5C]
:0042813B 3B5508                  cmp edx, dword ptr [ebp+08]
:0042813E 7267                    jb 004281A7
:00428140 8B855CFEFFFF            mov eax, dword ptr [ebp+FFFFFE5C]
:00428146 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00428149 735C                    jnb 004281A7
:0042814B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042814E 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00428154 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:0042815A 724B                    jb 004281A7
:0042815C 8B5514                  mov edx, dword ptr [ebp+14]
:0042815F 81E2FF000000            and edx, 000000FF
:00428165 8B45F0                  mov eax, dword ptr [ebp-10]
:00428168 25FF000000              and eax, 000000FF
:0042816D 0FAFD0                  imul edx, eax
:00428170 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00428173 03CA                    add ecx, edx
:00428175 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:0042817B 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:00428181 7324                    jnb 004281A7
:00428183 8B8558FEFFFF            mov eax, dword ptr [ebp+FFFFFE58]
:00428189 2B450C                  sub eax, dword ptr [ebp+0C]
:0042818C 2B8568FEFFFF            sub eax, dword ptr [ebp+FFFFFE68]
:00428192 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00428195 81E1FF000000            and ecx, 000000FF
:0042819B 33D2                    xor edx, edx
:0042819D F7F1                    div ecx
:0042819F 898564FEFFFF            mov dword ptr [ebp+FFFFFE64], eax
:004281A5 EB65                    jmp 0042820C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042813E(C), :00428149(C), :0042815A(C), :00428181(C)
|
:004281A7 C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:004281B1 8B955CFEFFFF            mov edx, dword ptr [ebp+FFFFFE5C]
:004281B7 3B55E4                  cmp edx, dword ptr [ebp-1C]
:004281BA 7250                    jb 0042820C
:004281BC 8B45E4                  mov eax, dword ptr [ebp-1C]
:004281BF 83C010                  add eax, 00000010
:004281C2 39855CFEFFFF            cmp dword ptr [ebp+FFFFFE5C], eax
:004281C8 7342                    jnb 0042820C
:004281CA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004281CD 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:004281D3 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:004281D9 7231                    jb 0042820C
:004281DB 8B5514                  mov edx, dword ptr [ebp+14]
:004281DE 81E2FF000000            and edx, 000000FF
:004281E4 8B45F0                  mov eax, dword ptr [ebp-10]
:004281E7 25FF000000              and eax, 000000FF
:004281EC 0FAFD0                  imul edx, eax
:004281EF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004281F2 03CA                    add ecx, edx
:004281F4 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:004281FA 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:00428200 730A                    jnb 0042820C
:00428202 C78554FEFFFF01000000    mov dword ptr [ebp+FFFFFE54], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004281A5(U), :004281BA(C), :004281C8(C), :004281D9(C), :00428200(C)
|
:0042820C 8B55D8                  mov edx, dword ptr [ebp-28]
:0042820F 3B9564FEFFFF            cmp edx, dword ptr [ebp+FFFFFE64]
:00428215 0F841D010000            je 00428338
:0042821B 817DD8FEFF0000          cmp dword ptr [ebp-28], 0000FFFE
:00428222 7464                    je 00428288
:00428224 83BD78FEFFFF01          cmp dword ptr [ebp+FFFFFE78], 00000001
:0042822B 7451                    je 0042827E
:0042822D 6A00                    push 00000000
:0042822F E8F3240400              call 0046A727
:00428234 83C404                  add esp, 00000004
:00428237 6A00                    push 00000000
:00428239 B960DF4A00              mov ecx, 004ADF60
:0042823E E85BB3FEFF              call 0041359E
:00428243 50                      push eax
:00428244 6A14                    push 00000014
:00428246 8B4520                  mov eax, dword ptr [ebp+20]
:00428249 25FF000000              and eax, 000000FF
:0042824E C1E003                  shl eax, 03
:00428251 50                      push eax
:00428252 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00428255 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:0042825B 8B55F0                  mov edx, dword ptr [ebp-10]
:0042825E 81E2FF000000            and edx, 000000FF
:00428264 8B45D8                  mov eax, dword ptr [ebp-28]
:00428267 0FAFC2                  imul eax, edx
:0042826A 03C8                    add ecx, eax
:0042826C 51                      push ecx
:0042826D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428270 83C108                  add ecx, 00000008
:00428273 51                      push ecx
:00428274 E86E390400              call 0046BBE7
:00428279 83C414                  add esp, 00000014
:0042827C EB0A                    jmp 00428288

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042822B(C)
|
:0042827E C78578FEFFFF00000000    mov dword ptr [ebp+FFFFFE78], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428222(C), :0042827C(U)
|
:00428288 81BD64FEFFFFFEFF0000    cmp dword ptr [ebp+FFFFFE64], 0000FFFE
:00428292 0F848D000000            je 00428325
:00428298 6A00                    push 00000000
:0042829A B960DF4A00              mov ecx, 004ADF60
:0042829F E8FAB2FEFF              call 0041359E
:004282A4 50                      push eax
:004282A5 6A14                    push 00000014
:004282A7 8B5520                  mov edx, dword ptr [ebp+20]
:004282AA 81E2FF000000            and edx, 000000FF
:004282B0 C1E203                  shl edx, 03
:004282B3 52                      push edx
:004282B4 8B450C                  mov eax, dword ptr [ebp+0C]
:004282B7 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:004282BD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004282C0 81E1FF000000            and ecx, 000000FF
:004282C6 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:004282CC 0FAFD1                  imul edx, ecx
:004282CF 03C2                    add eax, edx
:004282D1 50                      push eax
:004282D2 8B4508                  mov eax, dword ptr [ebp+08]
:004282D5 83C008                  add eax, 00000008
:004282D8 50                      push eax
:004282D9 E8BF3A0400              call 0046BD9D
:004282DE 83C414                  add esp, 00000014

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004282E1 6A07                    push 00000007
:004282E3 6A01                    push 00000001
:004282E5 6A14                    push 00000014
:004282E7 8B4D20                  mov ecx, dword ptr [ebp+20]
:004282EA 81E1FF000000            and ecx, 000000FF
:004282F0 8D14CDF8FFFFFF          lea edx, dword ptr [8*ecx+FFFFFFF8]
:004282F7 52                      push edx
:004282F8 8B450C                  mov eax, dword ptr [ebp+0C]
:004282FB 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:00428301 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00428304 81E1FF000000            and ecx, 000000FF
:0042830A 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00428310 0FAFD1                  imul edx, ecx
:00428313 03C2                    add eax, edx
:00428315 50                      push eax
:00428316 8B4508                  mov eax, dword ptr [ebp+08]
:00428319 83C00C                  add eax, 0000000C
:0042831C 50                      push eax
:0042831D E8D8ABFEFF              call 00412EFA
:00428322 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428292(C)
|
:00428325 B980594800              mov ecx, 00485980
:0042832A E87F84FFFF              call 004207AE
:0042832F 8B8D64FEFFFF            mov ecx, dword ptr [ebp+FFFFFE64]
:00428335 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428215(C)
|
:00428338 B980594800              mov ecx, 00485980
:0042833D E82B7EFFFF              call 0042016D
:00428342 83F801                  cmp eax, 00000001
:00428345 0F857F020000            jne 004285CA
:0042834B C78578FEFFFF00000000    mov dword ptr [ebp+FFFFFE78], 00000000
:00428355 8B55DC                  mov edx, dword ptr [ebp-24]
:00428358 81E2FF000000            and edx, 000000FF
:0042835E 83FA01                  cmp edx, 00000001
:00428361 7529                    jne 0042838C
:00428363 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00428366 E866890300              call 00460CD1
:0042836B 898548FEFFFF            mov dword ptr [ebp+FFFFFE48], eax
:00428371 8B8548FEFFFF            mov eax, dword ptr [ebp+FFFFFE48]
:00428377 3B45E8                  cmp eax, dword ptr [ebp-18]
:0042837A 7410                    je 0042838C
:0042837C 8B8D48FEFFFF            mov ecx, dword ptr [ebp+FFFFFE48]
:00428382 894DE8                  mov dword ptr [ebp-18], ecx
:00428385 C745EC01000000          mov [ebp-14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428361(C), :0042837A(C)
|
:0042838C B980594800              mov ecx, 00485980
:00428391 E88C7DFFFF              call 00420122
:00428396 B980594800              mov ecx, 00485980
:0042839B E8E67DFFFF              call 00420186
:004283A0 898550FEFFFF            mov dword ptr [ebp+FFFFFE50], eax
:004283A6 B980594800              mov ecx, 00485980
:004283AB E8057EFFFF              call 004201B5
:004283B0 89854CFEFFFF            mov dword ptr [ebp+FFFFFE4C], eax
:004283B6 8B9550FEFFFF            mov edx, dword ptr [ebp+FFFFFE50]
:004283BC 3B5508                  cmp edx, dword ptr [ebp+08]
:004283BF 7245                    jb 00428406
:004283C1 8B8550FEFFFF            mov eax, dword ptr [ebp+FFFFFE50]
:004283C7 3B45E4                  cmp eax, dword ptr [ebp-1C]
:004283CA 733A                    jnb 00428406
:004283CC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004283CF 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:004283D5 398D4CFEFFFF            cmp dword ptr [ebp+FFFFFE4C], ecx
:004283DB 7229                    jb 00428406
:004283DD 8B5514                  mov edx, dword ptr [ebp+14]
:004283E0 81E2FF000000            and edx, 000000FF
:004283E6 8B45F0                  mov eax, dword ptr [ebp-10]
:004283E9 25FF000000              and eax, 000000FF
:004283EE 0FAFD0                  imul edx, eax
:004283F1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004283F4 03CA                    add ecx, edx
:004283F6 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:004283FC 398D4CFEFFFF            cmp dword ptr [ebp+FFFFFE4C], ecx
:00428402 7302                    jnb 00428406
:00428404 EB0A                    jmp 00428410

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004283BF(C), :004283CA(C), :004283DB(C), :00428402(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00428406 C78564FEFFFFFF000000    mov dword ptr [ebp+FFFFFE64], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428404(U)
|
:00428410 837DEC00                cmp dword ptr [ebp-14], 00000000
:00428414 0F8482010000            je 0042859C
:0042841A C78578FEFFFF01000000    mov dword ptr [ebp+FFFFFE78], 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00428424 C745D8FF000000          mov [ebp-28], 000000FF
:0042842B 8B55D8                  mov edx, dword ptr [ebp-28]
:0042842E 899564FEFFFF            mov dword ptr [ebp+FFFFFE64], edx
:00428434 68FFFF0000              push 0000FFFF
:00428439 8B4514                  mov eax, dword ptr [ebp+14]
:0042843C 25FF000000              and eax, 000000FF
:00428441 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00428444 81E1FF000000            and ecx, 000000FF
:0042844A 0FAFC1                  imul eax, ecx
:0042844D 50                      push eax
:0042844E 8B5520                  mov edx, dword ptr [ebp+20]
:00428451 81E2FF000000            and edx, 000000FF
:00428457 C1E203                  shl edx, 03
:0042845A 52                      push edx
:0042845B 8B450C                  mov eax, dword ptr [ebp+0C]
:0042845E 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:00428464 50                      push eax
:00428465 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428468 83C108                  add ecx, 00000008
:0042846B 51                      push ecx
:0042846C E8A5AFFEFF              call 00413416
:00428471 83C414                  add esp, 00000014
:00428474 C68588FEFFFF00          mov byte ptr [ebp+FFFFFE88], 00
:0042847B EB0F                    jmp 0042848C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428581(U)
|
:0042847D 8A9588FEFFFF            mov dl, byte ptr [ebp+FFFFFE88]
:00428483 80C201                  add dl, 01
:00428486 889588FEFFFF            mov byte ptr [ebp+FFFFFE88], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042847B(U)
|
:0042848C 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00428492 25FF000000              and eax, 000000FF
:00428497 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042849A 81E1FF000000            and ecx, 000000FF
:004284A0 3BC1                    cmp eax, ecx
:004284A2 0F8DDE000000            jnl 00428586
:004284A8 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:004284AE 81E2FF000000            and edx, 000000FF
:004284B4 0355E8                  add edx, dword ptr [ebp-18]
:004284B7 8B4510                  mov eax, dword ptr [ebp+10]
:004284BA 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004284BD 51                      push ecx
:004284BE E8E0A00300              call 004625A3
:004284C3 83C404                  add esp, 00000004
:004284C6 898574FEFFFF            mov dword ptr [ebp+FFFFFE74], eax
:004284CC 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:004284D2 81E1FF000000            and ecx, 000000FF
:004284D8 8B55F0                  mov edx, dword ptr [ebp-10]
:004284DB 81E2FF000000            and edx, 000000FF
:004284E1 0FAFCA                  imul ecx, edx
:004284E4 034D0C                  add ecx, dword ptr [ebp+0C]
:004284E7 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:004284ED 8B45F0                  mov eax, dword ptr [ebp-10]
:004284F0 25FF000000              and eax, 000000FF
:004284F5 83E810                  sub eax, 00000010
:004284F8 99                      cdq
:004284F9 2BC2                    sub eax, edx
:004284FB D1F8                    sar eax, 1
:004284FD 03C8                    add ecx, eax
:004284FF 51                      push ecx
:00428500 8B4508                  mov eax, dword ptr [ebp+08]
:00428503 C1E803                  shr eax, 03
:00428506 8B4D20                  mov ecx, dword ptr [ebp+20]
:00428509 81E1FF000000            and ecx, 000000FF
:0042850F 2B8D74FEFFFF            sub ecx, dword ptr [ebp+FFFFFE74]
:00428515 D1E9                    shr ecx, 1
:00428517 8D540801                lea edx, dword ptr [eax+ecx+01]
:0042851B 52                      push edx
:0042851C B9A8134800              mov ecx, 004813A8
:00428521 E885FAFDFF              call 00407FAB
:00428526 837D1C00                cmp dword ptr [ebp+1C], 00000000
:0042852A 742E                    je 0042855A
:0042852C 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00428532 25FF000000              and eax, 000000FF
:00428537 0345E8                  add eax, dword ptr [ebp-18]
:0042853A 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0042853D 33D2                    xor edx, edx
:0042853F 8A1401                  mov dl, byte ptr [ecx+eax]
:00428542 83EA01                  sub edx, 00000001
:00428545 F7DA                    neg edx
:00428547 1BD2                    sbb edx, edx
:00428549 83E243                  and edx, 00000043
:0042854C 83C20C                  add edx, 0000000C
:0042854F 52                      push edx
:00428550 B9A8134800              mov ecx, 004813A8
:00428555 E8FEFAFDFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042852A(C)
|
:0042855A 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00428560 25FF000000              and eax, 000000FF
:00428565 0345E8                  add eax, dword ptr [ebp-18]
:00428568 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042856B 8B1481                  mov edx, dword ptr [ecx+4*eax]
:0042856E 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042856F 6858804700              push 00478058
:00428574 68A8134800              push 004813A8
:00428579 E8FA06FEFF              call 00408C78
:0042857E 83C40C                  add esp, 0000000C
:00428581 E9F7FEFFFF              jmp 0042847D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004284A2(C)
|
:00428586 B980594800              mov ecx, 00485980
:0042858B E81E82FFFF              call 004207AE
:00428590 C745EC00000000          mov [ebp-14], 00000000
:00428597 E862E7FFFF              call 00426CFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428414(C)
|
:0042859C 81BD64FEFFFFFEFF0000    cmp dword ptr [ebp+FFFFFE64], 0000FFFE
:004285A6 7417                    je 004285BF
:004285A8 81BD64FEFFFFFF000000    cmp dword ptr [ebp+FFFFFE64], 000000FF
:004285B2 740B                    je 004285BF
:004285B4 83BD78FEFFFF01          cmp dword ptr [ebp+FFFFFE78], 00000001
:004285BB 7402                    je 004285BF
:004285BD EB3A                    jmp 004285F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004285A6(C), :004285B2(C), :004285BB(C)
|
:004285BF 83BD54FEFFFF00          cmp dword ptr [ebp+FFFFFE54], 00000000
:004285C6 7502                    jne 004285CA
:004285C8 EB2F                    jmp 004285F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004280FC(U), :00428345(C), :004285C6(C)
|
:004285CA B980594800              mov ecx, 00485980
:004285CF E8997BFFFF              call 0042016D
:004285D4 83F802                  cmp eax, 00000002
:004285D7 751B                    jne 004285F4
:004285D9 8B4518                  mov eax, dword ptr [ebp+18]
:004285DC 25FF000000              and eax, 000000FF
:004285E1 83E001                  and eax, 00000001
:004285E4 85C0                    test eax, eax
:004285E6 750C                    jne 004285F4
:004285E8 C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:004285F2 EB05                    jmp 004285F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004285D7(C), :004285E6(C)
|
:004285F4 E974FAFFFF              jmp 0042806D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428074(C), :004280C9(U), :004280F7(U), :004285BD(U), :004285C8(U)
|:004285F2(U)
|
:004285F9 E800E7FFFF              call 00426CFE
:004285FE 8B8D70FEFFFF            mov ecx, dword ptr [ebp+FFFFFE70]
:00428604 81E1FF000000            and ecx, 000000FF
:0042860A 85C9                    test ecx, ecx
:0042860C 7402                    je 00428610
:0042860E EB0A                    jmp 0042861A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042860C(C)
|
:00428610 B9000D4B00              mov ecx, 004B0D00
:00428615 E8D7850300              call 00460BF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042860E(U)
|
:0042861A 837D2400                cmp dword ptr [ebp+24], 00000000
:0042861E 7418                    je 00428638
:00428620 8B5518                  mov edx, dword ptr [ebp+18]
:00428623 81E2FF000000            and edx, 000000FF
:00428629 83E220                  and edx, 00000020
:0042862C 85D2                    test edx, edx
:0042862E 7408                    je 00428638
:00428630 8B4524                  mov eax, dword ptr [ebp+24]
:00428633 8A4DE8                  mov cl, byte ptr [ebp-18]
:00428636 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042861E(C), :0042862E(C)
|
:00428638 81BD64FEFFFFFEFF0000    cmp dword ptr [ebp+FFFFFE64], 0000FFFE
:00428642 7509                    jne 0042864D
:00428644 C6853BFEFFFFFF          mov byte ptr [ebp+FFFFFE3B], FF
:0042864B EB0F                    jmp 0042865C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428642(C)
|
:0042864D 8B55E8                  mov edx, dword ptr [ebp-18]
:00428650 039564FEFFFF            add edx, dword ptr [ebp+FFFFFE64]
:00428656 88953BFEFFFF            mov byte ptr [ebp+FFFFFE3B], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042864B(U)
|
:0042865C 8A853BFEFFFF            mov al, byte ptr [ebp+FFFFFE3B]
:00428662 888544FEFFFF            mov byte ptr [ebp+FFFFFE44], al
:00428668 C645FC00                mov [ebp-04], 00
:0042866C 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0042866F E82CD6FFFF              call 00425CA0
:00428674 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042867B 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00428681 E84A0F0000              call 004295D0
:00428686 8A8544FEFFFF            mov al, byte ptr [ebp+FFFFFE44]
:0042868C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042868F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00428696 8BE5                    mov esp, ebp
:00428698 5D                      pop ebp
:00428699 C3                      ret



* Referenced by a CALL at Addresses:
|:00428730   , :00428907   , :0042979B   , :004297D5   , :004316BA   
|
:0042869A 55                      push ebp
:0042869B 8BEC                    mov ebp, esp
:0042869D 83EC0C                  sub esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004286B4(U)
|
:004286A0 8B4508                  mov eax, dword ptr [ebp+08]
:004286A3 33C9                    xor ecx, ecx
:004286A5 8A08                    mov cl, byte ptr [eax]
:004286A7 85C9                    test ecx, ecx
:004286A9 740B                    je 004286B6
:004286AB 8B5508                  mov edx, dword ptr [ebp+08]
:004286AE 83C201                  add edx, 00000001
:004286B1 895508                  mov dword ptr [ebp+08], edx
:004286B4 EBEA                    jmp 004286A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004286A9(C)
|
:004286B6 8D45F4                  lea eax, dword ptr [ebp-0C]
:004286B9 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004286EC(C)
|
:004286BC 8B450C                  mov eax, dword ptr [ebp+0C]
:004286BF 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004286C1 B90A000000              mov ecx, 0000000A
:004286C6 F7F1                    div ecx
:004286C8 83C230                  add edx, 00000030
:004286CB 8B45FC                  mov eax, dword ptr [ebp-04]
:004286CE 8810                    mov byte ptr [eax], dl
:004286D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004286D3 83C101                  add ecx, 00000001
:004286D6 894DFC                  mov dword ptr [ebp-04], ecx
:004286D9 8B450C                  mov eax, dword ptr [ebp+0C]
:004286DC 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004286DE B90A000000              mov ecx, 0000000A
:004286E3 F7F1                    div ecx
:004286E5 89450C                  mov dword ptr [ebp+0C], eax
:004286E8 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004286EC 75CE                    jne 004286BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428712(C)
|
:004286EE 8B55FC                  mov edx, dword ptr [ebp-04]
:004286F1 83EA01                  sub edx, 00000001
:004286F4 8955FC                  mov dword ptr [ebp-04], edx
:004286F7 8B4508                  mov eax, dword ptr [ebp+08]
:004286FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004286FD 8A11                    mov dl, byte ptr [ecx]
:004286FF 8810                    mov byte ptr [eax], dl
:00428701 8B4508                  mov eax, dword ptr [ebp+08]
:00428704 83C001                  add eax, 00000001
:00428707 894508                  mov dword ptr [ebp+08], eax
:0042870A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042870D 8D55F4                  lea edx, dword ptr [ebp-0C]
:00428710 3BCA                    cmp ecx, edx
:00428712 75DA                    jne 004286EE
:00428714 8B4508                  mov eax, dword ptr [ebp+08]
:00428717 C60000                  mov byte ptr [eax], 00
:0042871A 8BE5                    mov esp, ebp
:0042871C 5D                      pop ebp
:0042871D C3                      ret



* Referenced by a CALL at Addresses:
|:00428933   , :00441EFD   
|
:0042871E 55                      push ebp
:0042871F 8BEC                    mov ebp, esp
:00428721 83EC14                  sub esp, 00000014
:00428724 C645F000                mov [ebp-10], 00
:00428728 8B450C                  mov eax, dword ptr [ebp+0C]
:0042872B 50                      push eax
:0042872C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042872F 51                      push ecx
:00428730 E865FFFFFF              call 0042869A
:00428735 83C408                  add esp, 00000008
:00428738 8B5508                  mov edx, dword ptr [ebp+08]
:0042873B 8955FC                  mov dword ptr [ebp-04], edx
:0042873E C645EC00                mov [ebp-14], 00
:00428742 EB08                    jmp 0042874C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042878E(U)
|
:00428744 8A45EC                  mov al, byte ptr [ebp-14]
:00428747 0401                    add al, 01
:00428749 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428742(U)
|
:0042874C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042874F 81E1FF000000            and ecx, 000000FF
:00428755 33D2                    xor edx, edx
:00428757 8A540DF0                mov dl, byte ptr [ebp+ecx-10]
:0042875B 85D2                    test edx, edx
:0042875D 7431                    je 00428790
:0042875F 8B45FC                  mov eax, dword ptr [ebp-04]
:00428762 C600A2                  mov byte ptr [eax], A2
:00428765 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00428768 83C101                  add ecx, 00000001
:0042876B 894DFC                  mov dword ptr [ebp-04], ecx
:0042876E 8B55EC                  mov edx, dword ptr [ebp-14]
:00428771 81E2FF000000            and edx, 000000FF
:00428777 33C0                    xor eax, eax
:00428779 8A4415F0                mov al, byte ptr [ebp+edx-10]
:0042877D 83C07F                  add eax, 0000007F
:00428780 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00428783 8801                    mov byte ptr [ecx], al
:00428785 8B55FC                  mov edx, dword ptr [ebp-04]
:00428788 83C201                  add edx, 00000001
:0042878B 8955FC                  mov dword ptr [ebp-04], edx
:0042878E EBB4                    jmp 00428744

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042875D(C)
|
:00428790 8B45FC                  mov eax, dword ptr [ebp-04]
:00428793 C60000                  mov byte ptr [eax], 00
:00428796 8BE5                    mov esp, ebp
:00428798 5D                      pop ebp
:00428799 C3                      ret



* Referenced by a CALL at Addresses:
|:00428A33   , :00428B94   , :004290CE   
|
:0042879A 55                      push ebp
:0042879B 8BEC                    mov ebp, esp
:0042879D 83EC4C                  sub esp, 0000004C
:004287A0 C745F4F8F34A00          mov [ebp-0C], 004AF3F8
:004287A7 8B4508                  mov eax, dword ptr [ebp+08]
:004287AA 8B08                    mov ecx, dword ptr [eax]
:004287AC 894DC0                  mov dword ptr [ebp-40], ecx
:004287AF 8B5508                  mov edx, dword ptr [ebp+08]
:004287B2 83C204                  add edx, 00000004
:004287B5 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428A1D(U)
|
:004287B8 8B45C0                  mov eax, dword ptr [ebp-40]
:004287BB 33C9                    xor ecx, ecx
:004287BD 8A08                    mov cl, byte ptr [eax]
:004287BF 85C9                    test ecx, ecx
:004287C1 0F845B020000            je 00428A22
:004287C7 8B55C0                  mov edx, dword ptr [ebp-40]
:004287CA 33C0                    xor eax, eax
:004287CC 8A02                    mov al, byte ptr [edx]
:004287CE 3D80000000              cmp eax, 00000080
:004287D3 0F8D0C020000            jnl 004289E5
:004287D9 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004287DC 33D2                    xor edx, edx
:004287DE 8A11                    mov dl, byte ptr [ecx]
:004287E0 83FA25                  cmp edx, 00000025
:004287E3 0F85DE010000            jne 004289C7
:004287E9 8B45C0                  mov eax, dword ptr [ebp-40]
:004287EC 83C001                  add eax, 00000001
:004287EF 8945C0                  mov dword ptr [ebp-40], eax
:004287F2 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004287F5 33D2                    xor edx, edx
:004287F7 8A11                    mov dl, byte ptr [ecx]
:004287F9 83FA30                  cmp edx, 00000030
:004287FC 7E24                    jle 00428822
:004287FE 8B45C0                  mov eax, dword ptr [ebp-40]
:00428801 33C9                    xor ecx, ecx
:00428803 8A08                    mov cl, byte ptr [eax]
:00428805 83F939                  cmp ecx, 00000039
:00428808 7D18                    jge 00428822
:0042880A 8B55C0                  mov edx, dword ptr [ebp-40]
:0042880D 33C0                    xor eax, eax
:0042880F 8A02                    mov al, byte ptr [edx]
:00428811 83E830                  sub eax, 00000030
:00428814 8945FC                  mov dword ptr [ebp-04], eax
:00428817 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0042881A 83C101                  add ecx, 00000001
:0042881D 894DC0                  mov dword ptr [ebp-40], ecx
:00428820 EB07                    jmp 00428829

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004287FC(C), :00428808(C)
|
:00428822 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428820(U)
|
:00428829 8B55C0                  mov edx, dword ptr [ebp-40]
:0042882C 33C0                    xor eax, eax
:0042882E 8A02                    mov al, byte ptr [edx]
:00428830 8945B8                  mov dword ptr [ebp-48], eax
:00428833 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00428836 83C101                  add ecx, 00000001
:00428839 894DC0                  mov dword ptr [ebp-40], ecx
:0042883C 8B55B8                  mov edx, dword ptr [ebp-48]
:0042883F 8955B4                  mov dword ptr [ebp-4C], edx
:00428842 837DB473                cmp dword ptr [ebp-4C], 00000073
:00428846 7419                    je 00428861
:00428848 837DB475                cmp dword ptr [ebp-4C], 00000075
:0042884C 0F849A000000            je 004288EC
:00428852 837DB477                cmp dword ptr [ebp-4C], 00000077
:00428856 0F8490000000            je 004288EC
:0042885C E964010000              jmp 004289C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428846(C)
|
:00428861 8B45F4                  mov eax, dword ptr [ebp-0C]
:00428864 C60000                  mov byte ptr [eax], 00
:00428867 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042886A 8B11                    mov edx, dword ptr [ecx]
:0042886C 52                      push edx
:0042886D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00428870 50                      push eax
:00428871 E8A89D0300              call 0046261E
:00428876 83C408                  add esp, 00000008
:00428879 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042887C 8B11                    mov edx, dword ptr [ecx]
:0042887E 52                      push edx
:0042887F E81F9D0300              call 004625A3
:00428884 83C404                  add esp, 00000004
:00428887 8845EC                  mov byte ptr [ebp-14], al
:0042888A 8B45EC                  mov eax, dword ptr [ebp-14]
:0042888D 25FF000000              and eax, 000000FF
:00428892 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00428895 03C8                    add ecx, eax
:00428897 894DF4                  mov dword ptr [ebp-0C], ecx
:0042889A 8B55EC                  mov edx, dword ptr [ebp-14]
:0042889D 81E2FF000000            and edx, 000000FF
:004288A3 3955FC                  cmp dword ptr [ebp-04], edx
:004288A6 7636                    jbe 004288DE
:004288A8 C745F000000000          mov [ebp-10], 00000000
:004288AF EB09                    jmp 004288BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004288DC(U)
|
:004288B1 8B45F0                  mov eax, dword ptr [ebp-10]
:004288B4 83C001                  add eax, 00000001
:004288B7 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004288AF(U)
|
:004288BA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004288BD 81E1FF000000            and ecx, 000000FF
:004288C3 8B55FC                  mov edx, dword ptr [ebp-04]
:004288C6 2BD1                    sub edx, ecx
:004288C8 3955F0                  cmp dword ptr [ebp-10], edx
:004288CB 7311                    jnb 004288DE
:004288CD 8B45F4                  mov eax, dword ptr [ebp-0C]
:004288D0 C60020                  mov byte ptr [eax], 20
:004288D3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004288D6 83C101                  add ecx, 00000001
:004288D9 894DF4                  mov dword ptr [ebp-0C], ecx
:004288DC EBD3                    jmp 004288B1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004288A6(C), :004288CB(C)
|
:004288DE 8B55F8                  mov edx, dword ptr [ebp-08]
:004288E1 83C204                  add edx, 00000004
:004288E4 8955F8                  mov dword ptr [ebp-08], edx
:004288E7 E9D9000000              jmp 004289C5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042884C(C), :00428856(C)
|
:004288EC C645C400                mov [ebp-3C], 00
:004288F0 8B45C0                  mov eax, dword ptr [ebp-40]
:004288F3 33C9                    xor ecx, ecx
:004288F5 8A48FF                  mov cl, byte ptr [eax-01]
:004288F8 83F975                  cmp ecx, 00000075
:004288FB 7514                    jne 00428911
:004288FD 8B55F8                  mov edx, dword ptr [ebp-08]
:00428900 8B02                    mov eax, dword ptr [edx]
:00428902 50                      push eax
:00428903 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:00428906 51                      push ecx
:00428907 E88EFDFFFF              call 0042869A
:0042890C 83C408                  add esp, 00000008
:0042890F EB2A                    jmp 0042893B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004288FB(C)
|
:00428911 8B55FC                  mov edx, dword ptr [ebp-04]
:00428914 D1E2                    shl edx, 1
:00428916 8955FC                  mov dword ptr [ebp-04], edx
:00428919 6A00                    push 00000000
:0042891B 6A14                    push 00000014
:0042891D 8D45C4                  lea eax, dword ptr [ebp-3C]
:00428920 50                      push eax
:00428921 E8229F0300              call 00462848
:00428926 83C40C                  add esp, 0000000C
:00428929 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042892C 8B11                    mov edx, dword ptr [ecx]
:0042892E 52                      push edx
:0042892F 8D45C4                  lea eax, dword ptr [ebp-3C]
:00428932 50                      push eax
:00428933 E8E6FDFFFF              call 0042871E
:00428938 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042890F(U)
|
:0042893B 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:0042893E 51                      push ecx
:0042893F E85F9C0300              call 004625A3
:00428944 83C404                  add esp, 00000004
:00428947 8845EC                  mov byte ptr [ebp-14], al
:0042894A 8B55EC                  mov edx, dword ptr [ebp-14]
:0042894D 81E2FF000000            and edx, 000000FF
:00428953 3955FC                  cmp dword ptr [ebp-04], edx
:00428956 763A                    jbe 00428992
:00428958 C645BC00                mov [ebp-44], 00
:0042895C EB08                    jmp 00428966

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428990(U)
|
:0042895E 8A45BC                  mov al, byte ptr [ebp-44]
:00428961 0401                    add al, 01
:00428963 8845BC                  mov byte ptr [ebp-44], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042895C(U)
|
:00428966 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00428969 81E1FF000000            and ecx, 000000FF
:0042896F 8B55EC                  mov edx, dword ptr [ebp-14]
:00428972 81E2FF000000            and edx, 000000FF
:00428978 8B45FC                  mov eax, dword ptr [ebp-04]
:0042897B 2BC2                    sub eax, edx
:0042897D 3BC8                    cmp ecx, eax
:0042897F 7311                    jnb 00428992
:00428981 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00428984 C60120                  mov byte ptr [ecx], 20
:00428987 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042898A 83C201                  add edx, 00000001
:0042898D 8955F4                  mov dword ptr [ebp-0C], edx
:00428990 EBCC                    jmp 0042895E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428956(C), :0042897F(C)
|
:00428992 8B45F4                  mov eax, dword ptr [ebp-0C]
:00428995 C60000                  mov byte ptr [eax], 00
:00428998 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:0042899B 51                      push ecx
:0042899C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042899F 52                      push edx
:004289A0 E83A9C0300              call 004625DF
:004289A5 83C408                  add esp, 00000008
:004289A8 8D45C4                  lea eax, dword ptr [ebp-3C]
:004289AB 50                      push eax
:004289AC E8F29B0300              call 004625A3
:004289B1 83C404                  add esp, 00000004
:004289B4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004289B7 03C8                    add ecx, eax
:004289B9 894DF4                  mov dword ptr [ebp-0C], ecx
:004289BC 8B55F8                  mov edx, dword ptr [ebp-08]
:004289BF 83C204                  add edx, 00000004
:004289C2 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042885C(U), :004288E7(U)
|
:004289C5 EB1C                    jmp 004289E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004287E3(C)
|
:004289C7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004289CA 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004289CD 8A11                    mov dl, byte ptr [ecx]
:004289CF 8810                    mov byte ptr [eax], dl
:004289D1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004289D4 83C001                  add eax, 00000001
:004289D7 8945F4                  mov dword ptr [ebp-0C], eax
:004289DA 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004289DD 83C101                  add ecx, 00000001
:004289E0 894DC0                  mov dword ptr [ebp-40], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004289C5(U)
|
:004289E3 EB38                    jmp 00428A1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004287D3(C)
|
:004289E5 8B55F4                  mov edx, dword ptr [ebp-0C]
:004289E8 8B45C0                  mov eax, dword ptr [ebp-40]
:004289EB 8A08                    mov cl, byte ptr [eax]
:004289ED 880A                    mov byte ptr [edx], cl
:004289EF 8B55F4                  mov edx, dword ptr [ebp-0C]
:004289F2 83C201                  add edx, 00000001
:004289F5 8955F4                  mov dword ptr [ebp-0C], edx
:004289F8 8B45C0                  mov eax, dword ptr [ebp-40]
:004289FB 83C001                  add eax, 00000001
:004289FE 8945C0                  mov dword ptr [ebp-40], eax
:00428A01 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00428A04 8B55C0                  mov edx, dword ptr [ebp-40]
:00428A07 8A02                    mov al, byte ptr [edx]
:00428A09 8801                    mov byte ptr [ecx], al
:00428A0B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00428A0E 83C101                  add ecx, 00000001
:00428A11 894DF4                  mov dword ptr [ebp-0C], ecx
:00428A14 8B55C0                  mov edx, dword ptr [ebp-40]
:00428A17 83C201                  add edx, 00000001
:00428A1A 8955C0                  mov dword ptr [ebp-40], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004289E3(U)
|
:00428A1D E996FDFFFF              jmp 004287B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004287C1(C)
|
:00428A22 8B45F4                  mov eax, dword ptr [ebp-0C]
:00428A25 C60000                  mov byte ptr [eax], 00
:00428A28 8BE5                    mov esp, ebp
:00428A2A 5D                      pop ebp
:00428A2B C3                      ret


:00428A2C 55                      push ebp
:00428A2D 8BEC                    mov ebp, esp
:00428A2F 8D4508                  lea eax, dword ptr [ebp+08]
:00428A32 50                      push eax
:00428A33 E862FDFFFF              call 0042879A
:00428A38 83C404                  add esp, 00000004
:00428A3B 5D                      pop ebp
:00428A3C C3                      ret



* Referenced by a CALL at Address:
|:00428BE7   
|
:00428A3D 55                      push ebp
:00428A3E 8BEC                    mov ebp, esp
:00428A40 83EC10                  sub esp, 00000010
:00428A43 E8EAA3FEFF              call 00412E32
:00428A48 8B4508                  mov eax, dword ptr [ebp+08]
:00428A4B 50                      push eax
:00428A4C E8529B0300              call 004625A3
:00428A51 83C404                  add esp, 00000004
:00428A54 8945F4                  mov dword ptr [ebp-0C], eax
:00428A57 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00428A5A D1E9                    shr ecx, 1
:00428A5C BA28000000              mov edx, 00000028
:00428A61 2BD1                    sub edx, ecx
:00428A63 8955F8                  mov dword ptr [ebp-08], edx
:00428A66 C745F0D8000000          mov [ebp-10], 000000D8
:00428A6D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00428A70 8D0CC520000000          lea ecx, dword ptr [8*eax+00000020]
:00428A77 894DFC                  mov dword ptr [ebp-04], ecx
:00428A7A E893DEFEFF              call 00416912
:00428A7F 85C0                    test eax, eax
:00428A81 7450                    je 00428AD3
:00428A83 B9A8034B00              mov ecx, 004B03A8
:00428A88 E8FCDD0100              call 00446889
:00428A8D 2B05F4E44700            sub eax, dword ptr [0047E4F4]
:00428A93 99                      cdq
:00428A94 2BC2                    sub eax, edx
:00428A96 D1F8                    sar eax, 1
:00428A98 99                      cdq
:00428A99 83E207                  and edx, 00000007
:00428A9C 03C2                    add eax, edx
:00428A9E C1F803                  sar eax, 03
:00428AA1 8B55F8                  mov edx, dword ptr [ebp-08]
:00428AA4 03D0                    add edx, eax
:00428AA6 8955F8                  mov dword ptr [ebp-08], edx
:00428AA9 B9A8034B00              mov ecx, 004B03A8
:00428AAE E8FDDD0100              call 004468B0
:00428AB3 2B05F8E44700            sub eax, dword ptr [0047E4F8]
:00428AB9 83C028                  add eax, 00000028
:00428ABC 99                      cdq
:00428ABD 2BC2                    sub eax, edx
:00428ABF D1F8                    sar eax, 1
:00428AC1 99                      cdq
:00428AC2 83E207                  and edx, 00000007
:00428AC5 03C2                    add eax, edx
:00428AC7 C1F803                  sar eax, 03
:00428ACA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00428ACD 8D14C1                  lea edx, dword ptr [ecx+8*eax]
:00428AD0 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428A81(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00428AD3 6A03                    push 00000003
:00428AD5 6A30                    push 00000030
:00428AD7 8B45FC                  mov eax, dword ptr [ebp-04]
:00428ADA 50                      push eax
:00428ADB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00428ADE 83E910                  sub ecx, 00000010
:00428AE1 51                      push ecx
:00428AE2 8B55F8                  mov edx, dword ptr [ebp-08]
:00428AE5 8D04D5F0FFFFFF          lea eax, dword ptr [8*edx+FFFFFFF0]
:00428AEC 50                      push eax
:00428AED B9000D4B00              mov ecx, 004B0D00
:00428AF2 E892800300              call 00460B89

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428AF7 6A04                    push 00000004
:00428AF9 B9A8134800              mov ecx, 004813A8
:00428AFE E8F1F5FDFF              call 004080F4
:00428B03 6A4F                    push 0000004F
:00428B05 B9A8134800              mov ecx, 004813A8
:00428B0A E849F5FDFF              call 00408058
:00428B0F 6A00                    push 00000000
:00428B11 B9A8134800              mov ecx, 004813A8
:00428B16 E875F5FDFF              call 00408090
:00428B1B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00428B1E 51                      push ecx
:00428B1F 8B55F8                  mov edx, dword ptr [ebp-08]
:00428B22 52                      push edx
:00428B23 B9A8134800              mov ecx, 004813A8
:00428B28 E87EF4FDFF              call 00407FAB
:00428B2D 8B4508                  mov eax, dword ptr [ebp+08]
:00428B30 50                      push eax
:00428B31 68A8134800              push 004813A8
:00428B36 E8B700FEFF              call 00408BF2
:00428B3B 83C408                  add esp, 00000008
:00428B3E E80AA3FEFF              call 00412E4D
:00428B43 B9C8E24A00              mov ecx, 004AE2C8
:00428B48 E8939CFEFF              call 004127E0
:00428B4D 25FF000000              and eax, 000000FF
:00428B52 6BC007                  imul eax, 00000007
:00428B55 50                      push eax
:00428B56 E8E9E1FFFF              call 00426D44
:00428B5B 83C404                  add esp, 00000004
:00428B5E B9000D4B00              mov ecx, 004B0D00
:00428B63 E889800300              call 00460BF1
:00428B68 8BE5                    mov esp, ebp
:00428B6A 5D                      pop ebp
:00428B6B C3                      ret



* Referenced by a CALL at Addresses:
|:00402AD5   , :00402B3B   , :00402BF1   , :00402E22   , :00402EDE   
|:00402FE7   , :00403F76   , :00404148   , :00404295   , :00406A5F   
|:004098A3   , :0040CF6F   , :0040EA2D   , :00411A46   , :00414359   
|:004143AA   , :00416B5C   , :00416B72   , :00416B96   , :004267B7   
|:004279BE   , :004292E2   , :004298B3   , :004298F9   , :00429B4C   
|:00429B72   , :00429C28   , :00429C4D   , :00429C95   , :00429D26   
|:00429D84   , :00429DFE   , :00429E5C   , :00429ED6   , :00429F34   
|:00429FAE   , :0042A00C   , :0042A615   , :0042C88B   , :0042C8CB   
|:0042DA98   , :0042F5ED   , :0042F626   , :0042F678   , :00430225   
|:00430276   , :004302DD   , :0043033D   , :00430396   , :004303D7   
|:00430418   , :00430459   , :0043049C   , :004304DB   , :0043051E   
|:00430579   , :004305AF   , :0043060F   , :00430668   , :004306AB   
|:00430704   , :004307B0   , :004314D5   , :0043152D   , :0043191C   
|:00431AD6   , :00431D7C   , :00431EA0   , :00431FCF   , :00432014   
|:00432049   , :0043206C   , :004320AD   , :004322F7   , :00432667   
|:00432AD4   , :00432B0E   , :00432F47   , :00432F7A   , :00432FAA   
|:00432FDA   , :004332A1   , :004332D8   , :0043331A   , :004334B1   
|:00433521   , :00433BB7   , :00433E5A   , :00433EB4   , :00434194   
|:004343AD   , :0043461A   , :004347F7   , :00434A0F   , :00434A4D   
|:00434BC6   , :00434C04   , :00434D83   , :00434DC1   , :00434FDA   
|:00435031   , :00435241   , :00435298   , :004353E2   , :004353FF   
|:00435517   , :00435555   , :004355DB   , :004356EF   , :00435AA1   
|:00435CE4   , :00435EE4   , :00435F39   , :00435FAB   , :00436069   
|:004361DD   , :0043627F   , :0043633D   , :004364C1   , :00436698   
|:004367BC   , :00436903   , :00436941   , :00436A14   , :00436B92   
|:00436BD0   , :00436BFC   , :00436CB7   , :00436E88   , :00436EC6   
|:00436F89   , :00437029   , :00437192   , :00437275   , :00437307   
|:0043738B   , :004373C6   , :004374F8   , :004377DE   , :00437E26   
|:00437FAB   , :00437FD7   , :004382F2   , :0043831E   , :004386BA   
|:00438714   , :00438740   , :004388C6   , :00438949   , :00438966   
|:00438983   , :00438ACB   , :00438C43   , :00438D2E   , :00438EDD   
|:004398DE   , :004399C1   , :004399DE   , :00439A26   , :0043C2D2   
|:0043C357   , :0043C37C   , :0043CE02   , :00445E31   , :00445E55   
|:00445E66   , :00445F6F   , :00445FAB   , :0044600C   , :00446048   
|:0044607F   , :00446090   , :00446AC1   , :00446C45   , :00446FF7   
|:0044DCA0   , :0044E134   , :00455880   , :004558FB   , :00455FC8   
|:004560A2   , :00456D3B   , :00457263   , :00457407   , :00457548   
|:00457C1B   , :00457D1C   , :0045A33B   
|
:00428B6C 55                      push ebp
:00428B6D 8BEC                    mov ebp, esp
:00428B6F 81EC64010000            sub esp, 00000164
:00428B75 C785C4FEFFFF00000000    mov dword ptr [ebp+FFFFFEC4], 00000000
:00428B7F C785F8FEFFFF00000000    mov dword ptr [ebp+FFFFFEF8], 00000000
:00428B89 C685C8FEFFFFFF          mov byte ptr [ebp+FFFFFEC8], FF
:00428B90 8D450C                  lea eax, dword ptr [ebp+0C]
:00428B93 50                      push eax
:00428B94 E801FCFFFF              call 0042879A
:00428B99 83C404                  add esp, 00000004
:00428B9C C785CCFEFFFF01000000    mov dword ptr [ebp+FFFFFECC], 00000001
:00428BA6 E853E1FFFF              call 00426CFE
:00428BAB E8A5E0FFFF              call 00426C55
:00428BB0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428BB3 898DA4FEFFFF            mov dword ptr [ebp+FFFFFEA4], ecx
:00428BB9 8B95A4FEFFFF            mov edx, dword ptr [ebp+FFFFFEA4]
:00428BBF 83EA01                  sub edx, 00000001
:00428BC2 8995A4FEFFFF            mov dword ptr [ebp+FFFFFEA4], edx
:00428BC8 83BDA4FEFFFF05          cmp dword ptr [ebp+FFFFFEA4], 00000005
:00428BCF 0F8796000000            ja 00428C6B
:00428BD5 8B85A4FEFFFF            mov eax, dword ptr [ebp+FFFFFEA4]
:00428BDB FF248589904200          jmp dword ptr [4*eax+00429089]
:00428BE2 68F8F34A00              push 004AF3F8
:00428BE7 E851FEFFFF              call 00428A3D
:00428BEC 83C404                  add esp, 00000004
:00428BEF 6A00                    push 00000000
:00428BF1 6A00                    push 00000000
:00428BF3 6802020000              push 00000202
:00428BF8 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00428BFE 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00428BFF FF15D8864B00            Call dword ptr [004B86D8]
:00428C05 33C0                    xor eax, eax
:00428C07 E979040000              jmp 00429085
:00428C0C 68F8F34A00              push 004AF3F8
:00428C11 E84FAB0300              call 00463765
:00428C16 83C404                  add esp, 00000004
:00428C19 6A00                    push 00000000
:00428C1B 6A00                    push 00000000
:00428C1D 6802020000              push 00000202
:00428C22 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00428C28 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00428C29 FF15D8864B00            Call dword ptr [004B86D8]
:00428C2F 33C0                    xor eax, eax
:00428C31 E94F040000              jmp 00429085
:00428C36 6A00                    push 00000000
:00428C38 68F8F34A00              push 004AF3F8
:00428C3D E8EEA90300              call 00463630
:00428C42 83C408                  add esp, 00000008
:00428C45 8985CCFEFFFF            mov dword ptr [ebp+FFFFFECC], eax
:00428C4B 6A00                    push 00000000
:00428C4D 6A00                    push 00000000
:00428C4F 6802020000              push 00000202
:00428C54 A1380E4B00              mov eax, dword ptr [004B0E38]
:00428C59 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00428C5A FF15D8864B00            Call dword ptr [004B86D8]
:00428C60 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:00428C66 E91A040000              jmp 00429085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428BCF(C)
|
:00428C6B E8E5DFFFFF              call 00426C55
:00428C70 C785D0FEFFFF00000000    mov dword ptr [ebp+FFFFFED0], 00000000
:00428C7A C785C0FEFFFF00000000    mov dword ptr [ebp+FFFFFEC0], 00000000
:00428C84 C645FC00                mov [ebp-04], 00
:00428C88 EB0F                    jmp 00428C99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D18(U)
|
:00428C8A 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428C90 83C101                  add ecx, 00000001
:00428C93 898DC0FEFFFF            mov dword ptr [ebp+FFFFFEC0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428C88(U)
|
:00428C99 8B95C0FEFFFF            mov edx, dword ptr [ebp+FFFFFEC0]
:00428C9F 33C0                    xor eax, eax
:00428CA1 8A82F8F34A00            mov al, byte ptr [edx+004AF3F8]
:00428CA7 85C0                    test eax, eax
:00428CA9 7472                    je 00428D1D
:00428CAB 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428CB1 33D2                    xor edx, edx
:00428CB3 8A91F8F34A00            mov dl, byte ptr [ecx+004AF3F8]
:00428CB9 83FA0A                  cmp edx, 0000000A
:00428CBC 755A                    jne 00428D18
:00428CBE 8B45FC                  mov eax, dword ptr [ebp-04]
:00428CC1 25FF000000              and eax, 000000FF
:00428CC6 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428CCC 2B8C85D0FEFFFF          sub ecx, dword ptr [ebp+4*eax-00000130]
:00428CD3 3B8DC4FEFFFF            cmp ecx, dword ptr [ebp+FFFFFEC4]
:00428CD9 761C                    jbe 00428CF7
:00428CDB 8B55FC                  mov edx, dword ptr [ebp-04]
:00428CDE 81E2FF000000            and edx, 000000FF
:00428CE4 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:00428CEA 2B8495D0FEFFFF          sub eax, dword ptr [ebp+4*edx-00000130]
:00428CF1 8985C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428CD9(C)
|
:00428CF7 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428CFD 83C101                  add ecx, 00000001
:00428D00 8B55FC                  mov edx, dword ptr [ebp-04]
:00428D03 81E2FF000000            and edx, 000000FF
:00428D09 898C95D4FEFFFF          mov dword ptr [ebp+4*edx-0000012C], ecx
:00428D10 8A45FC                  mov al, byte ptr [ebp-04]
:00428D13 0401                    add al, 01
:00428D15 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428CBC(C)
|
:00428D18 E96DFFFFFF              jmp 00428C8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428CA9(C)
|
:00428D1D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00428D20 81E1FF000000            and ecx, 000000FF
:00428D26 8B95C0FEFFFF            mov edx, dword ptr [ebp+FFFFFEC0]
:00428D2C 89948DD4FEFFFF          mov dword ptr [ebp+4*ecx-0000012C], edx
:00428D33 8B45FC                  mov eax, dword ptr [ebp-04]
:00428D36 25FF000000              and eax, 000000FF
:00428D3B 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428D41 2B8C85D0FEFFFF          sub ecx, dword ptr [ebp+4*eax-00000130]
:00428D48 3B8DC4FEFFFF            cmp ecx, dword ptr [ebp+FFFFFEC4]
:00428D4E 761C                    jbe 00428D6C
:00428D50 8B55FC                  mov edx, dword ptr [ebp-04]
:00428D53 81E2FF000000            and edx, 000000FF
:00428D59 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:00428D5F 2B8495D0FEFFFF          sub eax, dword ptr [ebp+4*edx-00000130]
:00428D66 8985C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D4E(C)
|
:00428D6C 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00428D72 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00428D74 B902000000              mov ecx, 00000002
:00428D79 F7F1                    div ecx
:00428D7B 85D2                    test edx, edx
:00428D7D 740F                    je 00428D8E
:00428D7F 8B95C4FEFFFF            mov edx, dword ptr [ebp+FFFFFEC4]
:00428D85 83C201                  add edx, 00000001
:00428D88 8995C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D7D(C)
|
:00428D8E 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00428D94 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428D96 B904000000              mov ecx, 00000004
:00428D9B F7F1                    div ecx
:00428D9D 85D2                    test edx, edx
:00428D9F 7419                    je 00428DBA
:00428DA1 C785F8FEFFFF01000000    mov dword ptr [ebp+FFFFFEF8], 00000001
:00428DAB 8B95C4FEFFFF            mov edx, dword ptr [ebp+FFFFFEC4]
:00428DB1 83C202                  add edx, 00000002
:00428DB4 8995C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D9F(C)
|
:00428DBA 6A00                    push 00000000
:00428DBC E8B7D7FFFF              call 00426578
:00428DC1 83C404                  add esp, 00000004
:00428DC4 C785B4FEFFFF40010000    mov dword ptr [ebp+FFFFFEB4], 00000140

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00428DCE C785A8FEFFFFC8000000    mov dword ptr [ebp+FFFFFEA8], 000000C8
:00428DD8 E835DBFEFF              call 00416912
:00428DDD 85C0                    test eax, eax
:00428DDF 742A                    je 00428E0B
:00428DE1 B9A8034B00              mov ecx, 004B03A8
:00428DE6 E89EDA0100              call 00446889
:00428DEB 99                      cdq
:00428DEC 2BC2                    sub eax, edx
:00428DEE D1F8                    sar eax, 1
:00428DF0 8985B4FEFFFF            mov dword ptr [ebp+FFFFFEB4], eax
:00428DF6 B9A8034B00              mov ecx, 004B03A8
:00428DFB E8B0DA0100              call 004468B0
:00428E00 99                      cdq
:00428E01 2BC2                    sub eax, edx
:00428E03 D1F8                    sar eax, 1
:00428E05 8985A8FEFFFF            mov dword ptr [ebp+FFFFFEA8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428DDF(C)
|
:00428E0B 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00428E11 8D0CC520000000          lea ecx, dword ptr [8*eax+00000020]
:00428E18 898DB8FEFFFF            mov dword ptr [ebp+FFFFFEB8], ecx
:00428E1E 8B55FC                  mov edx, dword ptr [ebp-04]
:00428E21 81E2FF000000            and edx, 000000FF
:00428E27 83C201                  add edx, 00000001
:00428E2A C1E204                  shl edx, 04
:00428E2D 83C220                  add edx, 00000020
:00428E30 8995ACFEFFFF            mov dword ptr [ebp+FFFFFEAC], edx
:00428E36 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00428E3C C1E002                  shl eax, 02
:00428E3F 8B8DB4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB4]
:00428E45 2BC8                    sub ecx, eax
:00428E47 83E910                  sub ecx, 00000010
:00428E4A 898DB0FEFFFF            mov dword ptr [ebp+FFFFFEB0], ecx
:00428E50 E8DD9FFEFF              call 00412E32
:00428E55 837D0808                cmp dword ptr [ebp+08], 00000008
:00428E59 7428                    je 00428E83

* Possible Reference to String Resource ID=00006: ""
                                  |
:00428E5B 6A06                    push 00000006
:00428E5D 8B95ACFEFFFF            mov edx, dword ptr [ebp+FFFFFEAC]
:00428E63 52                      push edx
:00428E64 8B85B8FEFFFF            mov eax, dword ptr [ebp+FFFFFEB8]
:00428E6A 50                      push eax
:00428E6B 8B8DA8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA8]
:00428E71 51                      push ecx
:00428E72 8B95B0FEFFFF            mov edx, dword ptr [ebp+FFFFFEB0]
:00428E78 52                      push edx
:00428E79 B9000D4B00              mov ecx, 004B0D00
:00428E7E E8067D0300              call 00460B89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428E59(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428E83 6A04                    push 00000004
:00428E85 B9A8134800              mov ecx, 004813A8
:00428E8A E865F2FDFF              call 004080F4
:00428E8F 6A4F                    push 0000004F
:00428E91 B9A8134800              mov ecx, 004813A8
:00428E96 E8BDF1FDFF              call 00408058
:00428E9B 6A00                    push 00000000
:00428E9D B9A8134800              mov ecx, 004813A8
:00428EA2 E8E9F1FDFF              call 00408090
:00428EA7 C785C0FEFFFF00000000    mov dword ptr [ebp+FFFFFEC0], 00000000
:00428EB1 EB0F                    jmp 00428EC2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428FBD(U)
|
:00428EB3 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:00428EB9 83C001                  add eax, 00000001
:00428EBC 8985C0FEFFFF            mov dword ptr [ebp+FFFFFEC0], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428EB1(U)
|
:00428EC2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00428EC5 81E1FF000000            and ecx, 000000FF
:00428ECB 398DC0FEFFFF            cmp dword ptr [ebp+FFFFFEC0], ecx
:00428ED1 0F87EB000000            ja 00428FC2
:00428ED7 C785BCFEFFFF00000000    mov dword ptr [ebp+FFFFFEBC], 00000000
:00428EE1 EB0F                    jmp 00428EF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428F5B(U)
|
:00428EE3 8B95BCFEFFFF            mov edx, dword ptr [ebp+FFFFFEBC]
:00428EE9 83C201                  add edx, 00000001
:00428EEC 8995BCFEFFFF            mov dword ptr [ebp+FFFFFEBC], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428EE1(U)
|
:00428EF2 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:00428EF8 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428EFE 8B9485D4FEFFFF          mov edx, dword ptr [ebp+4*eax-0000012C]
:00428F05 2B948DD0FEFFFF          sub edx, dword ptr [ebp+4*ecx-00000130]
:00428F0C 3995BCFEFFFF            cmp dword ptr [ebp+FFFFFEBC], edx
:00428F12 7349                    jnb 00428F5D
:00428F14 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:00428F1A 8B8C85D0FEFFFF          mov ecx, dword ptr [ebp+4*eax-00000130]
:00428F21 8B95BCFEFFFF            mov edx, dword ptr [ebp+FFFFFEBC]
:00428F27 33C0                    xor eax, eax
:00428F29 8A8411F8F34A00          mov al, byte ptr [ecx+edx+004AF3F8]
:00428F30 85C0                    test eax, eax
:00428F32 7429                    je 00428F5D
:00428F34 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428F3A 8B948DD0FEFFFF          mov edx, dword ptr [ebp+4*ecx-00000130]
:00428F41 8B85BCFEFFFF            mov eax, dword ptr [ebp+FFFFFEBC]
:00428F47 8B8DBCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEBC]
:00428F4D 8A940AF8F34A00          mov dl, byte ptr [edx+ecx+004AF3F8]
:00428F54 889405FCFEFFFF          mov byte ptr [ebp+eax-00000104], dl
:00428F5B EB86                    jmp 00428EE3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428F12(C), :00428F32(C)
|
:00428F5D 8B85BCFEFFFF            mov eax, dword ptr [ebp+FFFFFEBC]
:00428F63 C68405FCFEFFFF00        mov byte ptr [ebp+eax-00000104], 00
:00428F6B 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00428F71 83C101                  add ecx, 00000001
:00428F74 C1E104                  shl ecx, 04
:00428F77 8B95A8FEFFFF            mov edx, dword ptr [ebp+FFFFFEA8]
:00428F7D 03D1                    add edx, ecx
:00428F7F 52                      push edx
:00428F80 8B85B4FEFFFF            mov eax, dword ptr [ebp+FFFFFEB4]
:00428F86 C1E803                  shr eax, 03
:00428F89 8B8DC4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC4]
:00428F8F D1E9                    shr ecx, 1
:00428F91 2BC1                    sub eax, ecx
:00428F93 0385F8FEFFFF            add eax, dword ptr [ebp+FFFFFEF8]
:00428F99 50                      push eax
:00428F9A B9A8134800              mov ecx, 004813A8
:00428F9F E807F0FDFF              call 00407FAB
:00428FA4 8D95FCFEFFFF            lea edx, dword ptr [ebp+FFFFFEFC]
:00428FAA 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00428FAB 685C804700              push 0047805C
:00428FB0 68A8134800              push 004813A8
:00428FB5 E8BEFCFDFF              call 00408C78
:00428FBA 83C40C                  add esp, 0000000C
:00428FBD E9F1FEFFFF              jmp 00428EB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428ED1(C)
|
:00428FC2 E8869EFEFF              call 00412E4D
:00428FC7 B980594800              mov ecx, 00485980
:00428FCC E8DD77FFFF              call 004207AE
:00428FD1 6A00                    push 00000000
:00428FD3 6A00                    push 00000000
:00428FD5 6802020000              push 00000202
:00428FDA A1380E4B00              mov eax, dword ptr [004B0E38]
:00428FDF 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00428FE0 FF15D8864B00            Call dword ptr [004B86D8]
:00428FE6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428FE9 898DA0FEFFFF            mov dword ptr [ebp+FFFFFEA0], ecx
:00428FEF 83BDA0FEFFFF07          cmp dword ptr [ebp+FFFFFEA0], 00000007
:00428FF6 7739                    ja 00429031
:00428FF8 8B95A0FEFFFF            mov edx, dword ptr [ebp+FFFFFEA0]
:00428FFE FF2495A1904200          jmp dword ptr [4*edx+004290A1]
:00429005 E827DEFFFF              call 00426E31
:0042900A EB25                    jmp 00429031

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042900C 6A02                    push 00000002
:0042900E E8DDDBFFFF              call 00426BF0
:00429013 83C404                  add esp, 00000004
:00429016 B9C8E24A00              mov ecx, 004AE2C8
:0042901B E8C097FEFF              call 004127E0
:00429020 25FF000000              and eax, 000000FF
:00429025 6BC007                  imul eax, 00000007
:00429028 50                      push eax
:00429029 E816DDFFFF              call 00426D44
:0042902E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428FF6(C), :0042900A(U)
|
:00429031 837D0808                cmp dword ptr [ebp+08], 00000008
:00429035 740A                    je 00429041
:00429037 B9000D4B00              mov ecx, 004B0D00
:0042903C E8B07B0300              call 00460BF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429035(C)
|
:00429041 E8B8DCFFFF              call 00426CFE
:00429046 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]
:0042904C 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429051 3DFF000000              cmp eax, 000000FF
:00429056 741D                    je 00429075
:00429058 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:0042905E 81E1FF000000            and ecx, 000000FF
:00429064 83F901                  cmp ecx, 00000001
:00429067 740C                    je 00429075
:00429069 C7859CFEFFFF00000000    mov dword ptr [ebp+FFFFFE9C], 00000000
:00429073 EB0A                    jmp 0042907F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429056(C), :00429067(C)
|
:00429075 C7859CFEFFFF01000000    mov dword ptr [ebp+FFFFFE9C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429073(U)
|
:0042907F 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428C07(U), :00428C31(U), :00428C66(U)
|
:00429085 8BE5                    mov esp, ebp
:00429087 5D                      pop ebp
:00429088 C3                      ret



:00429089 368C4200                DWORD 00428C36
:0042908D 368C4200                DWORD 00428C36
:00429091 E28B4200                DWORD 00428BE2
:00429095 6B8C4200                DWORD 00428C6B
:00429099 0C8C4200                DWORD 00428C0C
:0042909D 368C4200                DWORD 00428C36
:004290A1 16904200                DWORD 00429016
:004290A5 16904200                DWORD 00429016
:004290A9 31904200                DWORD 00429031
:004290AD 16904200                DWORD 00429016
:004290B1 05904200                DWORD 00429005
:004290B5 31904200                DWORD 00429031
:004290B9 31904200                DWORD 00429031
:004290BD 0C904200                DWORD 0042900C



* Referenced by a CALL at Address:
|:0040C43B   
|
:004290C1 55                      push ebp
:004290C2 8BEC                    mov ebp, esp
:004290C4 81EC84010000            sub esp, 00000184
:004290CA 8D4508                  lea eax, dword ptr [ebp+08]
:004290CD 50                      push eax
:004290CE E8C7F6FFFF              call 0042879A
:004290D3 83C404                  add esp, 00000004
:004290D6 E823DCFFFF              call 00426CFE
:004290DB E875DBFFFF              call 00426C55
:004290E0 C78584FEFFFF00000000    mov dword ptr [ebp+FFFFFE84], 00000000
:004290EA C78580FEFFFF00000000    mov dword ptr [ebp+FFFFFE80], 00000000
:004290F4 C645FC00                mov [ebp-04], 00
:004290F8 EB0F                    jmp 00429109

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429150(U)
|
:004290FA 8B8D80FEFFFF            mov ecx, dword ptr [ebp+FFFFFE80]
:00429100 83C101                  add ecx, 00000001
:00429103 898D80FEFFFF            mov dword ptr [ebp+FFFFFE80], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004290F8(U)
|
:00429109 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:0042910F 33C0                    xor eax, eax
:00429111 8A82F8F34A00            mov al, byte ptr [edx+004AF3F8]
:00429117 85C0                    test eax, eax
:00429119 7437                    je 00429152
:0042911B 8B8D80FEFFFF            mov ecx, dword ptr [ebp+FFFFFE80]
:00429121 33D2                    xor edx, edx
:00429123 8A91F8F34A00            mov dl, byte ptr [ecx+004AF3F8]
:00429129 83FA0A                  cmp edx, 0000000A
:0042912C 7522                    jne 00429150
:0042912E 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00429134 83C001                  add eax, 00000001
:00429137 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042913A 81E1FF000000            and ecx, 000000FF
:00429140 89848D88FEFFFF          mov dword ptr [ebp+4*ecx-00000178], eax
:00429147 8A55FC                  mov dl, byte ptr [ebp-04]
:0042914A 80C201                  add dl, 01
:0042914D 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042912C(C)
|
:00429150 EBA8                    jmp 004290FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429119(C)
|
:00429152 8B45FC                  mov eax, dword ptr [ebp-04]
:00429155 25FF000000              and eax, 000000FF
:0042915A 8B8D80FEFFFF            mov ecx, dword ptr [ebp+FFFFFE80]
:00429160 898C8588FEFFFF          mov dword ptr [ebp+4*eax-00000178], ecx
:00429167 6A00                    push 00000000
:00429169 E80AD4FFFF              call 00426578
:0042916E 83C404                  add esp, 00000004
:00429171 E8049BFEFF              call 00412C7A
:00429176 E8B79CFEFF              call 00412E32
:0042917B E8669DFEFF              call 00412EE6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429180 6A04                    push 00000004
:00429182 B9A8134800              mov ecx, 004813A8
:00429187 E868EFFDFF              call 004080F4
:0042918C 6A4F                    push 0000004F
:0042918E B9A8134800              mov ecx, 004813A8
:00429193 E8C0EEFDFF              call 00408058
:00429198 6A00                    push 00000000
:0042919A B9A8134800              mov ecx, 004813A8
:0042919F E8ECEEFDFF              call 00408090
:004291A4 C78580FEFFFF00000000    mov dword ptr [ebp+FFFFFE80], 00000000
:004291AE EB0F                    jmp 004291BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004292B6(U)
|
:004291B0 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:004291B6 83C201                  add edx, 00000001
:004291B9 899580FEFFFF            mov dword ptr [ebp+FFFFFE80], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004291AE(U)
|
:004291BF 8B45FC                  mov eax, dword ptr [ebp-04]
:004291C2 25FF000000              and eax, 000000FF
:004291C7 398580FEFFFF            cmp dword ptr [ebp+FFFFFE80], eax
:004291CD 0F87E8000000            ja 004292BB
:004291D3 C7857CFEFFFF00000000    mov dword ptr [ebp+FFFFFE7C], 00000000
:004291DD EB0F                    jmp 004291EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429257(U)
|
:004291DF 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:004291E5 83C101                  add ecx, 00000001
:004291E8 898D7CFEFFFF            mov dword ptr [ebp+FFFFFE7C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004291DD(U)
|
:004291EE 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:004291F4 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:004291FA 8B8C9588FEFFFF          mov ecx, dword ptr [ebp+4*edx-00000178]
:00429201 2B8C8584FEFFFF          sub ecx, dword ptr [ebp+4*eax-0000017C]
:00429208 398D7CFEFFFF            cmp dword ptr [ebp+FFFFFE7C], ecx
:0042920E 7349                    jnb 00429259
:00429210 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:00429216 8B849584FEFFFF          mov eax, dword ptr [ebp+4*edx-0000017C]
:0042921D 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:00429223 33D2                    xor edx, edx
:00429225 8A9408F8F34A00          mov dl, byte ptr [eax+ecx+004AF3F8]
:0042922C 85D2                    test edx, edx
:0042922E 7429                    je 00429259
:00429230 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00429236 8B8C8584FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000017C]
:0042923D 8B957CFEFFFF            mov edx, dword ptr [ebp+FFFFFE7C]
:00429243 8B857CFEFFFF            mov eax, dword ptr [ebp+FFFFFE7C]
:00429249 8A8C01F8F34A00          mov cl, byte ptr [ecx+eax+004AF3F8]
:00429250 888C15FCFEFFFF          mov byte ptr [ebp+edx-00000104], cl
:00429257 EB86                    jmp 004291DF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042920E(C), :0042922E(C)
|
:00429259 8B957CFEFFFF            mov edx, dword ptr [ebp+FFFFFE7C]
:0042925F C68415FCFEFFFF00        mov byte ptr [ebp+edx-00000104], 00
:00429267 8B45FC                  mov eax, dword ptr [ebp-04]
:0042926A 25FF000000              and eax, 000000FF
:0042926F C1E003                  shl eax, 03
:00429272 B9DC000000              mov ecx, 000000DC
:00429277 2BC8                    sub ecx, eax
:00429279 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:0042927F 83C201                  add edx, 00000001
:00429282 C1E204                  shl edx, 04
:00429285 03CA                    add ecx, edx
:00429287 51                      push ecx
:00429288 8B857CFEFFFF            mov eax, dword ptr [ebp+FFFFFE7C]
:0042928E D1E8                    shr eax, 1
:00429290 B928000000              mov ecx, 00000028
:00429295 2BC8                    sub ecx, eax
:00429297 51                      push ecx
:00429298 B9A8134800              mov ecx, 004813A8
:0042929D E809EDFDFF              call 00407FAB
:004292A2 8D95FCFEFFFF            lea edx, dword ptr [ebp+FFFFFEFC]
:004292A8 52                      push edx
:004292A9 68A8134800              push 004813A8
:004292AE E83FF9FDFF              call 00408BF2
:004292B3 83C408                  add esp, 00000008
:004292B6 E9F5FEFFFF              jmp 004291B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004291CD(C)
|
:004292BB E88D9BFEFF              call 00412E4D
:004292C0 E839DAFFFF              call 00426CFE
:004292C5 E8599BFEFF              call 00412E23
:004292CA 8BE5                    mov esp, ebp
:004292CC 5D                      pop ebp
:004292CD C3                      ret



* Referenced by a CALL at Addresses:
|:0040ACCC   , :004688E9   
|
:004292CE 55                      push ebp
:004292CF 8BEC                    mov ebp, esp
:004292D1 51                      push ecx
:004292D2 833DB4E4470000          cmp dword ptr [0047E4B4], 00000000
:004292D9 7514                    jne 004292EF

* Possible StringData Ref from Data Obj ->"ӫ"
                                  |
:004292DB 6860804700              push 00478060
:004292E0 6A01                    push 00000001
:004292E2 E885F8FFFF              call 00428B6C
:004292E7 83C408                  add esp, 00000008
:004292EA E983000000              jmp 00429372

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004292D9(C)
|
:004292EF B9C8E24A00              mov ecx, 004AE2C8
:004292F4 E8F7690000              call 0042FCF0
:004292F9 25FF000000              and eax, 000000FF
:004292FE 8945FC                  mov dword ptr [ebp-04], eax
:00429301 E8F8D9FFFF              call 00426CFE
:00429306 6A00                    push 00000000
:00429308 E80BB40300              call 00464718
:0042930D 83C404                  add esp, 00000004
:00429310 B9880D4B00              mov ecx, 004B0D88
:00429315 E82E880300              call 00461B48
:0042931A B9800D4B00              mov ecx, 004B0D80
:0042931F E85D880300              call 00461B81
:00429324 E82CD9FFFF              call 00426C55

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429329 6A04                    push 00000004
:0042932B B9A8134800              mov ecx, 004813A8
:00429330 E8BFEDFDFF              call 004080F4
:00429335 6A4F                    push 0000004F
:00429337 B9A8134800              mov ecx, 004813A8
:0042933C E817EDFDFF              call 00408058
:00429341 E83499FEFF              call 00412C7A
:00429346 E89B9BFEFF              call 00412EE6
:0042934B 837D0803                cmp dword ptr [ebp+08], 00000003
:0042934F 7313                    jnb 00429364
:00429351 6A00                    push 00000000
:00429353 6A01                    push 00000001
:00429355 6A00                    push 00000000
:00429357 668B4508                mov ax, word ptr [ebp+08]
:0042935B 50                      push eax
:0042935C E8FDACFEFF              call 0041405E
:00429361 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042934F(C)
|
:00429364 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429367 51                      push ecx
:00429368 B9880D4B00              mov ecx, 004B0D88
:0042936D E8BB870300              call 00461B2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004292EA(U)
|
:00429372 8BE5                    mov esp, ebp
:00429374 5D                      pop ebp
:00429375 C3                      ret


:00429376 CC                      int 03
:00429377 CC                      int 03
:00429378 CC                      int 03
:00429379 CC                      int 03
:0042937A CC                      int 03
:0042937B CC                      int 03
:0042937C CC                      int 03
:0042937D CC                      int 03
:0042937E CC                      int 03
:0042937F CC                      int 03

* Referenced by a CALL at Addresses:
|:004271F6   , :00427A07   
|
:00429380 55                      push ebp
:00429381 8BEC                    mov ebp, esp
:00429383 51                      push ecx
:00429384 894DFC                  mov dword ptr [ebp-04], ecx
:00429387 8B45FC                  mov eax, dword ptr [ebp-04]
:0042938A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042938D 884820                  mov byte ptr [eax+20], cl
:00429390 8BE5                    mov esp, ebp
:00429392 5D                      pop ebp
:00429393 C20400                  ret 0004


:00429396 CC                      int 03
:00429397 CC                      int 03
:00429398 CC                      int 03
:00429399 CC                      int 03
:0042939A CC                      int 03
:0042939B CC                      int 03
:0042939C CC                      int 03
:0042939D CC                      int 03
:0042939E CC                      int 03
:0042939F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042732D   , :00427351   , :00429992   , :0042A192   , :0042A627   
|:0042AA3B   , :0042F647   , :0042FDE2   , :0043011D   , :004307D2   
|:00431A73   , :00431D9F   , :00431DAB   , :004324B4   , :00432766   
|:0043294A   , :00432B68   , :00432D7B   , :00433174   , :00433B8C   
|:00433E89   , :00434169   , :00434382   , :004345E9   , :004347CC   
|:00435006   , :004352C7   , :00435375   , :00435586   , :00435717   
|:00435A76   , :00435D0E   , :00435F80   , :00435FC5   , :004361B2   
|:004361FC   , :00436254   , :00436299   , :00436496   , :004364DB   
|:004365C5   , :0043696D   , :00436C26   , :00436EF2   , :004371BC   
|:00437522   , :00437A48   , :00437BE3   , :00437E3A   , :0043814D   
|:004384FF   , :0043876A   , :004388DA   , :00438AF5   , :00438B6C   
|:00438D42   , :00438E53   , :00438F25   , :00438FEC   , :00439010   
|:004391CF   , :004392E9   , :00439E71   , :0043A0DA   , :0043A27A   
|:0043A5C1   , :0043A5D9   , :0043ABA2   , :0043ABCC   , :0043AD10   
|:0043AE9A   , :0043B0E1   , :0043B201   , :0043B2FF   , :0043B43E   
|:0043B525   , :0043B5DB   , :0043B863   , :0043CD32   , :0043CD99   
|:0043CE51   , :0043D204   , :0043DC80   , :0043E110   , :0043E12C   
|:0043E149   , :0043E165   , :0043F29B   , :0043FE3A   , :0044024F   
|:00440951   , :004409D1   , :00441277   , :004416C2   , :00441EA4   
|:00442150   , :004438BD   , :00445CA9   , :00445D68   , :00447116   
|:0044713A   , :004474C0   , :0044759A   , :004489A1   , :00449759   
|:00449F2F   , :0044A11C   , :0044A145   , :0044A2BF   , :0044A722   
|:0044B387   , :0044D723   , :0044E00B   , :00454837   , :00454861   
|:0045488A   , :004548B0   , :004552FF   , :00455DEF   , :00456D0F   
|:004576BA   , :004577ED   , :00457C7E   , :0045801B   , :00458F4A   
|:00459F15   , :0045A00C   
|
:004293A0 55                      push ebp
:004293A1 8BEC                    mov ebp, esp
:004293A3 51                      push ecx
:004293A4 894DFC                  mov dword ptr [ebp-04], ecx
:004293A7 8B45FC                  mov eax, dword ptr [ebp-04]
:004293AA 83C005                  add eax, 00000005
:004293AD 8BE5                    mov esp, ebp
:004293AF 5D                      pop ebp
:004293B0 C3                      ret


:004293B1 CC                      int 03
:004293B2 CC                      int 03
:004293B3 CC                      int 03
:004293B4 CC                      int 03
:004293B5 CC                      int 03
:004293B6 CC                      int 03
:004293B7 CC                      int 03
:004293B8 CC                      int 03
:004293B9 CC                      int 03
:004293BA CC                      int 03
:004293BB CC                      int 03
:004293BC CC                      int 03
:004293BD CC                      int 03
:004293BE CC                      int 03
:004293BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00427E7C   , :00441E63   
|
:004293C0 55                      push ebp
:004293C1 8BEC                    mov ebp, esp
:004293C3 51                      push ecx
:004293C4 894DFC                  mov dword ptr [ebp-04], ecx
:004293C7 8B4518                  mov eax, dword ptr [ebp+18]
:004293CA 50                      push eax
:004293CB 8B4D14                  mov ecx, dword ptr [ebp+14]
:004293CE 51                      push ecx
:004293CF 8B5510                  mov edx, dword ptr [ebp+10]
:004293D2 52                      push edx
:004293D3 8B450C                  mov eax, dword ptr [ebp+0C]
:004293D6 50                      push eax
:004293D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004293DA 51                      push ecx
:004293DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004293DE E80D000000              call 004293F0
:004293E3 8B45FC                  mov eax, dword ptr [ebp-04]
:004293E6 8BE5                    mov esp, ebp
:004293E8 5D                      pop ebp
:004293E9 C21400                  ret 0014


:004293EC CC                      int 03
:004293ED CC                      int 03
:004293EE CC                      int 03
:004293EF CC                      int 03

* Referenced by a CALL at Address:
|:004293DE   
|
:004293F0 55                      push ebp
:004293F1 8BEC                    mov ebp, esp
:004293F3 51                      push ecx
:004293F4 894DFC                  mov dword ptr [ebp-04], ecx
:004293F7 8B4508                  mov eax, dword ptr [ebp+08]
:004293FA C1E003                  shl eax, 03
:004293FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429400 8901                    mov dword ptr [ecx], eax
:00429402 8B55FC                  mov edx, dword ptr [ebp-04]
:00429405 8B450C                  mov eax, dword ptr [ebp+0C]
:00429408 894204                  mov dword ptr [edx+04], eax
:0042940B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042940E 8B5510                  mov edx, dword ptr [ebp+10]
:00429411 895108                  mov dword ptr [ecx+08], edx
:00429414 8B45FC                  mov eax, dword ptr [ebp-04]
:00429417 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042941A 89480C                  mov dword ptr [eax+0C], ecx
:0042941D 8B55FC                  mov edx, dword ptr [ebp-04]
:00429420 8B4518                  mov eax, dword ptr [ebp+18]
:00429423 894210                  mov dword ptr [edx+10], eax
:00429426 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429429 C7411400000000          mov [ecx+14], 00000000
:00429430 8BE5                    mov esp, ebp
:00429432 5D                      pop ebp
:00429433 C21400                  ret 0014


:00429436 CC                      int 03
:00429437 CC                      int 03
:00429438 CC                      int 03
:00429439 CC                      int 03
:0042943A CC                      int 03
:0042943B CC                      int 03
:0042943C CC                      int 03
:0042943D CC                      int 03
:0042943E CC                      int 03
:0042943F CC                      int 03

* Referenced by a CALL at Address:
|:00427CA4   
|
:00429440 55                      push ebp
:00429441 8BEC                    mov ebp, esp
:00429443 83EC18                  sub esp, 00000018
:00429446 56                      push esi
:00429447 894DF4                  mov dword ptr [ebp-0C], ecx
:0042944A 68A05C4200              push 00425CA0
:0042944F 68F0954200              push 004295F0

* Possible Reference to String Resource ID=00012: ""
                                  |
:00429454 6A0C                    push 0000000C
:00429456 6A18                    push 00000018
:00429458 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042945B 83C008                  add eax, 00000008
:0042945E 50                      push eax
:0042945F E8FC4C0400              call 0046E160
:00429464 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429467 8B5508                  mov edx, dword ptr [ebp+08]
:0042946A 895104                  mov dword ptr [ecx+04], edx
:0042946D C645FC00                mov [ebp-04], 00
:00429471 EB08                    jmp 0042947B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004294F8(U)
|
:00429473 8A45FC                  mov al, byte ptr [ebp-04]
:00429476 0401                    add al, 01
:00429478 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429471(U)
|
:0042947B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042947E 81E1FF000000            and ecx, 000000FF
:00429484 8B55F4                  mov edx, dword ptr [ebp-0C]
:00429487 8B4204                  mov eax, dword ptr [edx+04]
:0042948A 833C8800                cmp dword ptr [eax+4*ecx], 00000000
:0042948E 746D                    je 004294FD
:00429490 C645F800                mov [ebp-08], 00
:00429494 EB09                    jmp 0042949F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004294C2(U)
|
:00429496 8A4DF8                  mov cl, byte ptr [ebp-08]
:00429499 80C101                  add cl, 01
:0042949C 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429494(U)
|
:0042949F 8B55FC                  mov edx, dword ptr [ebp-04]
:004294A2 81E2FF000000            and edx, 000000FF
:004294A8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004294AB 8B4804                  mov ecx, dword ptr [eax+04]
:004294AE 8B45F8                  mov eax, dword ptr [ebp-08]
:004294B1 25FF000000              and eax, 000000FF
:004294B6 8B0C91                  mov ecx, dword ptr [ecx+4*edx]
:004294B9 33D2                    xor edx, edx
:004294BB 8A1401                  mov dl, byte ptr [ecx+eax]
:004294BE 85D2                    test edx, edx
:004294C0 7402                    je 004294C4
:004294C2 EBD2                    jmp 00429496

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004294C0(C)
|
:004294C4 8B4510                  mov eax, dword ptr [ebp+10]
:004294C7 25FF000000              and eax, 000000FF
:004294CC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004294CF 81E1FF000000            and ecx, 000000FF
:004294D5 3BC1                    cmp eax, ecx
:004294D7 7E0E                    jle 004294E7
:004294D9 8B5510                  mov edx, dword ptr [ebp+10]
:004294DC 81E2FF000000            and edx, 000000FF
:004294E2 8955F0                  mov dword ptr [ebp-10], edx
:004294E5 EB0B                    jmp 004294F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004294D7(C)
|
:004294E7 8B45F8                  mov eax, dword ptr [ebp-08]
:004294EA 25FF000000              and eax, 000000FF
:004294EF 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004294E5(U)
|
:004294F2 8A4DF0                  mov cl, byte ptr [ebp-10]
:004294F5 884D10                  mov byte ptr [ebp+10], cl
:004294F8 E976FFFFFF              jmp 00429473

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042948E(C)
|
:004294FD 8B55FC                  mov edx, dword ptr [ebp-04]
:00429500 81E2FF000000            and edx, 000000FF
:00429506 8B4514                  mov eax, dword ptr [ebp+14]
:00429509 25FF000000              and eax, 000000FF
:0042950E 3BD0                    cmp edx, eax
:00429510 7D0E                    jge 00429520
:00429512 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429515 81E1FF000000            and ecx, 000000FF
:0042951B 894DEC                  mov dword ptr [ebp-14], ecx
:0042951E EB0C                    jmp 0042952C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429510(C)
|
:00429520 8B5514                  mov edx, dword ptr [ebp+14]
:00429523 81E2FF000000            and edx, 000000FF
:00429529 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042951E(U)
|
:0042952C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042952F 8A4DEC                  mov cl, byte ptr [ebp-14]
:00429532 8808                    mov byte ptr [eax], cl
:00429534 8B5510                  mov edx, dword ptr [ebp+10]
:00429537 81E2FF000000            and edx, 000000FF
:0042953D 83FA08                  cmp edx, 00000008
:00429540 7E0D                    jle 0042954F
:00429542 8B4510                  mov eax, dword ptr [ebp+10]
:00429545 25FF000000              and eax, 000000FF
:0042954A 8945E8                  mov dword ptr [ebp-18], eax
:0042954D EB07                    jmp 00429556

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429540(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042954F C745E808000000          mov [ebp-18], 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042954D(U)
|
:00429556 8A4DE8                  mov cl, byte ptr [ebp-18]
:00429559 884D10                  mov byte ptr [ebp+10], cl
:0042955C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042955F 8A4510                  mov al, byte ptr [ebp+10]
:00429562 884201                  mov byte ptr [edx+01], al
:00429565 C645FC00                mov [ebp-04], 00
:00429569 EB09                    jmp 00429574

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004295BF(U)
|
:0042956B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042956E 80C101                  add cl, 01
:00429571 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429569(U)
|
:00429574 8B55FC                  mov edx, dword ptr [ebp-04]
:00429577 81E2FF000000            and edx, 000000FF
:0042957D 83FA0C                  cmp edx, 0000000C
:00429580 7D3F                    jge 004295C1
:00429582 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00429586 7423                    je 004295AB
:00429588 8B45FC                  mov eax, dword ptr [ebp-04]
:0042958B 25FF000000              and eax, 000000FF
:00429590 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429593 81E1FF000000            and ecx, 000000FF
:00429599 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042959C 8B750C                  mov esi, dword ptr [ebp+0C]
:0042959F 8A0406                  mov al, byte ptr [esi+eax]
:004295A2 88840A28010000          mov byte ptr [edx+ecx+00000128], al
:004295A9 EB14                    jmp 004295BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429586(C)
|
:004295AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004295AE 81E1FF000000            and ecx, 000000FF
:004295B4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004295B7 C6840A2801000000        mov byte ptr [edx+ecx+00000128], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004295A9(U)
|
:004295BF EBAA                    jmp 0042956B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429580(C)
|
:004295C1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004295C4 5E                      pop esi
:004295C5 8BE5                    mov esp, ebp
:004295C7 5D                      pop ebp
:004295C8 C21000                  ret 0010


:004295CB CC                      int 03
:004295CC CC                      int 03
:004295CD CC                      int 03
:004295CE CC                      int 03
:004295CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00428681   , :00473986   
|
:004295D0 55                      push ebp
:004295D1 8BEC                    mov ebp, esp
:004295D3 51                      push ecx
:004295D4 894DFC                  mov dword ptr [ebp-04], ecx
:004295D7 68A05C4200              push 00425CA0

* Possible Reference to String Resource ID=00012: ""
                                  |
:004295DC 6A0C                    push 0000000C
:004295DE 6A18                    push 00000018
:004295E0 8B45FC                  mov eax, dword ptr [ebp-04]
:004295E3 83C008                  add eax, 00000008
:004295E6 50                      push eax
:004295E7 E8144C0400              call 0046E200
:004295EC 8BE5                    mov esp, ebp
:004295EE 5D                      pop ebp
:004295EF C3                      ret


:004295F0 55                      push ebp
:004295F1 8BEC                    mov ebp, esp
:004295F3 51                      push ecx
:004295F4 894DFC                  mov dword ptr [ebp-04], ecx
:004295F7 6A00                    push 00000000
:004295F9 6A00                    push 00000000
:004295FB 6A00                    push 00000000
:004295FD 6A00                    push 00000000
:004295FF 6A00                    push 00000000
:00429601 6A00                    push 00000000
:00429603 6A00                    push 00000000
:00429605 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429608 E813000000              call 00429620
:0042960D 8BE5                    mov esp, ebp
:0042960F 5D                      pop ebp
:00429610 C3                      ret


:00429611 CC                      int 03
:00429612 CC                      int 03
:00429613 CC                      int 03
:00429614 CC                      int 03
:00429615 CC                      int 03
:00429616 CC                      int 03
:00429617 CC                      int 03
:00429618 CC                      int 03
:00429619 CC                      int 03
:0042961A CC                      int 03
:0042961B CC                      int 03
:0042961C CC                      int 03
:0042961D CC                      int 03
:0042961E CC                      int 03
:0042961F CC                      int 03

* Referenced by a CALL at Address:
|:00429608   
|
:00429620 55                      push ebp
:00429621 8BEC                    mov ebp, esp
:00429623 51                      push ecx
:00429624 894DFC                  mov dword ptr [ebp-04], ecx
:00429627 8A4520                  mov al, byte ptr [ebp+20]
:0042962A 50                      push eax
:0042962B 8A4D1C                  mov cl, byte ptr [ebp+1C]
:0042962E 51                      push ecx
:0042962F 8B5518                  mov edx, dword ptr [ebp+18]
:00429632 52                      push edx
:00429633 8B4514                  mov eax, dword ptr [ebp+14]
:00429636 50                      push eax
:00429637 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042963A 51                      push ecx
:0042963B 8B550C                  mov edx, dword ptr [ebp+0C]
:0042963E 52                      push edx
:0042963F 8B4508                  mov eax, dword ptr [ebp+08]
:00429642 50                      push eax
:00429643 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429646 E815000000              call 00429660
:0042964B 8B45FC                  mov eax, dword ptr [ebp-04]
:0042964E 8BE5                    mov esp, ebp
:00429650 5D                      pop ebp
:00429651 C21C00                  ret 001C


:00429654 CC                      int 03
:00429655 CC                      int 03
:00429656 CC                      int 03
:00429657 CC                      int 03
:00429658 CC                      int 03
:00429659 CC                      int 03
:0042965A CC                      int 03
:0042965B CC                      int 03
:0042965C CC                      int 03
:0042965D CC                      int 03
:0042965E CC                      int 03
:0042965F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429646   , :004616D1   
|
:00429660 55                      push ebp
:00429661 8BEC                    mov ebp, esp
:00429663 51                      push ecx
:00429664 894DFC                  mov dword ptr [ebp-04], ecx
:00429667 8B4508                  mov eax, dword ptr [ebp+08]
:0042966A C1E003                  shl eax, 03
:0042966D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429670 8901                    mov dword ptr [ecx], eax
:00429672 8B55FC                  mov edx, dword ptr [ebp-04]
:00429675 8B450C                  mov eax, dword ptr [ebp+0C]
:00429678 894204                  mov dword ptr [edx+04], eax
:0042967B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042967E C1E103                  shl ecx, 03
:00429681 8B55FC                  mov edx, dword ptr [ebp-04]
:00429684 894A08                  mov dword ptr [edx+08], ecx
:00429687 8B45FC                  mov eax, dword ptr [ebp-04]
:0042968A 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042968D 89480C                  mov dword ptr [eax+0C], ecx
:00429690 8B55FC                  mov edx, dword ptr [ebp-04]
:00429693 8B4518                  mov eax, dword ptr [ebp+18]
:00429696 894210                  mov dword ptr [edx+10], eax
:00429699 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042969C 8A551C                  mov dl, byte ptr [ebp+1C]
:0042969F 885114                  mov byte ptr [ecx+14], dl
:004296A2 8B45FC                  mov eax, dword ptr [ebp-04]
:004296A5 8A4D20                  mov cl, byte ptr [ebp+20]
:004296A8 884815                  mov byte ptr [eax+15], cl
:004296AB 8BE5                    mov esp, ebp
:004296AD 5D                      pop ebp
:004296AE C21C00                  ret 001C


:004296B1 CC                      int 03
:004296B2 CC                      int 03
:004296B3 CC                      int 03
:004296B4 CC                      int 03
:004296B5 CC                      int 03
:004296B6 CC                      int 03
:004296B7 CC                      int 03
:004296B8 CC                      int 03
:004296B9 CC                      int 03
:004296BA CC                      int 03
:004296BB CC                      int 03
:004296BC CC                      int 03
:004296BD CC                      int 03
:004296BE CC                      int 03
:004296BF CC                      int 03
:004296C0 55                      push ebp
:004296C1 8BEC                    mov ebp, esp
:004296C3 E807000000              call 004296CF
:004296C8 E81F000000              call 004296EC
:004296CD 5D                      pop ebp
:004296CE C3                      ret



* Referenced by a CALL at Address:
|:004296C3   
|
:004296CF 55                      push ebp
:004296D0 8BEC                    mov ebp, esp
:004296D2 68A05C4200              push 00425CA0
:004296D7 68A0F64200              push 0042F6A0
:004296DC 6A5A                    push 0000005A
:004296DE 6A24                    push 00000024
:004296E0 6808F54A00              push 004AF508
:004296E5 E8764A0400              call 0046E160
:004296EA 5D                      pop ebp
:004296EB C3                      ret



* Referenced by a CALL at Address:
|:004296C8   
|
:004296EC 55                      push ebp
:004296ED 8BEC                    mov ebp, esp
:004296EF 68FE964200              push 004296FE
:004296F4 E8773D0400              call 0046D470
:004296F9 83C404                  add esp, 00000004
:004296FC 5D                      pop ebp
:004296FD C3                      ret


:004296FE 55                      push ebp
:004296FF 8BEC                    mov ebp, esp
:00429701 68A05C4200              push 00425CA0
:00429706 6A5A                    push 0000005A
:00429708 6A24                    push 00000024
:0042970A 6808F54A00              push 004AF508
:0042970F E8EC4A0400              call 0046E200
:00429714 5D                      pop ebp
:00429715 C3                      ret


:00429716 55                      push ebp
:00429717 8BEC                    mov ebp, esp
:00429719 E802000000              call 00429720
:0042971E 5D                      pop ebp
:0042971F C3                      ret



* Referenced by a CALL at Address:
|:00429719   
|
:00429720 55                      push ebp
:00429721 8BEC                    mov ebp, esp
:00429723 B9B0014B00              mov ecx, 004B01B0
:00429728 E883E0FDFF              call 004077B0
:0042972D 5D                      pop ebp
:0042972E C3                      ret



* Referenced by a CALL at Addresses:
|:0042AE98   , :00459ABA   
|
:0042972F 55                      push ebp
:00429730 8BEC                    mov ebp, esp
:00429732 51                      push ecx
:00429733 C745FC00000000          mov [ebp-04], 00000000
:0042973A EB09                    jmp 00429745

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429766(U)
|
:0042973C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042973F 83C001                  add eax, 00000001
:00429742 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042973A(U)
|
:00429745 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:00429749 731D                    jnb 00429768
:0042974B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042974E 6BC924                  imul ecx, 00000024
:00429751 81C108F54A00            add ecx, 004AF508
:00429757 E8745F0000              call 0042F6D0
:0042975C 3B4508                  cmp eax, dword ptr [ebp+08]
:0042975F 7505                    jne 00429766
:00429761 8A45FC                  mov al, byte ptr [ebp-04]
:00429764 EB04                    jmp 0042976A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042975F(C)
|
:00429766 EBD4                    jmp 0042973C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429749(C)
|
:00429768 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429764(U)
|
:0042976A 8BE5                    mov esp, ebp
:0042976C 5D                      pop ebp
:0042976D C3                      ret


:0042976E 55                      push ebp
:0042976F 8BEC                    mov ebp, esp
:00429771 83EC14                  sub esp, 00000014
:00429774 8B4508                  mov eax, dword ptr [ebp+08]
:00429777 C60000                  mov byte ptr [eax], 00

* Possible StringData Ref from Data Obj ->"("
                                  |
:0042977A 681C814700              push 0047811C
:0042977F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429782 51                      push ecx
:00429783 E8578E0300              call 004625DF
:00429788 83C408                  add esp, 00000008
:0042978B C645EC00                mov [ebp-14], 00
:0042978F 8B550C                  mov edx, dword ptr [ebp+0C]
:00429792 33C0                    xor eax, eax
:00429794 8A02                    mov al, byte ptr [edx]
:00429796 50                      push eax
:00429797 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0042979A 51                      push ecx
:0042979B E8FAEEFFFF              call 0042869A
:004297A0 83C408                  add esp, 00000008
:004297A3 8D55EC                  lea edx, dword ptr [ebp-14]
:004297A6 52                      push edx
:004297A7 8B4508                  mov eax, dword ptr [ebp+08]
:004297AA 50                      push eax
:004297AB E86E8E0300              call 0046261E
:004297B0 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->","
                                  |
:004297B3 6820814700              push 00478120
:004297B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004297BB 51                      push ecx
:004297BC E85D8E0300              call 0046261E
:004297C1 83C408                  add esp, 00000008
:004297C4 C645EC00                mov [ebp-14], 00
:004297C8 8B550C                  mov edx, dword ptr [ebp+0C]
:004297CB 33C0                    xor eax, eax
:004297CD 8A4201                  mov al, byte ptr [edx+01]
:004297D0 50                      push eax
:004297D1 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004297D4 51                      push ecx
:004297D5 E8C0EEFFFF              call 0042869A
:004297DA 83C408                  add esp, 00000008
:004297DD 8D55EC                  lea edx, dword ptr [ebp-14]
:004297E0 52                      push edx
:004297E1 8B4508                  mov eax, dword ptr [ebp+08]
:004297E4 50                      push eax
:004297E5 E8348E0300              call 0046261E
:004297EA 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->")"
                                  |
:004297ED 6824814700              push 00478124
:004297F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004297F5 51                      push ecx
:004297F6 E8238E0300              call 0046261E
:004297FB 83C408                  add esp, 00000008
:004297FE 8BE5                    mov esp, ebp
:00429800 5D                      pop ebp
:00429801 C3                      ret



* Referenced by a CALL at Addresses:
|:0042C40B   , :0043B638   , :0043B84C   , :0043DD38   , :0043F27E   
|
:00429802 55                      push ebp
:00429803 8BEC                    mov ebp, esp
:00429805 83EC08                  sub esp, 00000008
:00429808 894DF8                  mov dword ptr [ebp-08], ecx
:0042980B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042980E 8B08                    mov ecx, dword ptr [eax]
:00429810 6BC970                  imul ecx, 00000070
:00429813 81C198224900            add ecx, 00492298
:00429819 E8A87BFDFF              call 004013C6
:0042981E 8845FC                  mov byte ptr [ebp-04], al
:00429821 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429824 81E1FF000000            and ecx, 000000FF
:0042982A 83F957                  cmp ecx, 00000057
:0042982D 7D13                    jge 00429842
:0042982F 8B55F8                  mov edx, dword ptr [ebp-08]
:00429832 33C0                    xor eax, eax
:00429834 8A421D                  mov al, byte ptr [edx+1D]
:00429837 6BC01C                  imul eax, 0000001C
:0042983A 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042983D 02C8                    add cl, al
:0042983F 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042982D(C)
|
:00429842 8B55FC                  mov edx, dword ptr [ebp-04]
:00429845 81E2FF000000            and edx, 000000FF
:0042984B 81FA80000000            cmp edx, 00000080
:00429851 7E04                    jle 00429857
:00429853 C645FC57                mov [ebp-04], 57

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429851(C)
|
:00429857 8A45FC                  mov al, byte ptr [ebp-04]
:0042985A 8BE5                    mov esp, ebp
:0042985C 5D                      pop ebp
:0042985D C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00446ECA   , :0045559F   , :004557DD   , :004595F4   , :00459600   
|:00459623   , :0045962F   
|
:00429860 55                      push ebp
:00429861 8BEC                    mov ebp, esp
:00429863 51                      push ecx
:00429864 894DFC                  mov dword ptr [ebp-04], ecx
:00429867 8B4508                  mov eax, dword ptr [ebp+08]
:0042986A 25FF000000              and eax, 000000FF
:0042986F 85C0                    test eax, eax
:00429871 7C19                    jl 0042988C
:00429873 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429876 81E1FF000000            and ecx, 000000FF
:0042987C 83F903                  cmp ecx, 00000003
:0042987F 7D0B                    jge 0042988C
:00429881 8B55FC                  mov edx, dword ptr [ebp-04]
:00429884 8A4508                  mov al, byte ptr [ebp+08]
:00429887 88421D                  mov byte ptr [edx+1D], al
:0042988A EB2F                    jmp 004298BB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429871(C), :0042987F(C)
|
:0042988C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042988F 81E1FF000000            and ecx, 000000FF
:00429895 83F903                  cmp ecx, 00000003
:00429898 7509                    jne 004298A3
:0042989A 8B55FC                  mov edx, dword ptr [ebp-04]
:0042989D C6421D02                mov [edx+1D], 02
:004298A1 EB18                    jmp 004298BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429898(C)
|
:004298A3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004298A6 E8355E0000              call 0042F6E0
:004298AB 50                      push eax

* Possible StringData Ref from Data Obj ->"BUTAI::SetButaiColor() : ]mC⥢ѡC(%s"
                                        ->")"
                                  |
:004298AC 6828814700              push 00478128
:004298B1 6A00                    push 00000000
:004298B3 E8B4F2FFFF              call 00428B6C
:004298B8 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042988A(U), :004298A1(U)
|
:004298BB 8BE5                    mov esp, ebp
:004298BD 5D                      pop ebp
:004298BE C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042D66D   , :004547A2   , :004547CD   , :004547F7   , :00465FFC   
|
:004298C1 55                      push ebp
:004298C2 8BEC                    mov ebp, esp
:004298C4 51                      push ecx
:004298C5 894DFC                  mov dword ptr [ebp-04], ecx
:004298C8 8B45FC                  mov eax, dword ptr [ebp-04]
:004298CB 33C9                    xor ecx, ecx
:004298CD 8A481D                  mov cl, byte ptr [eax+1D]
:004298D0 85C9                    test ecx, ecx
:004298D2 7C15                    jl 004298E9
:004298D4 8B55FC                  mov edx, dword ptr [ebp-04]
:004298D7 33C0                    xor eax, eax
:004298D9 8A421D                  mov al, byte ptr [edx+1D]
:004298DC 83F803                  cmp eax, 00000003
:004298DF 7F08                    jg 004298E9
:004298E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004298E4 8A411D                  mov al, byte ptr [ecx+1D]
:004298E7 EB1A                    jmp 00429903

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004298D2(C), :004298DF(C)
|
:004298E9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004298EC E8EF5D0000              call 0042F6E0
:004298F1 50                      push eax

* Possible StringData Ref from Data Obj ->"BUTAI::GetButaiColor() : S]mCe%s"
                                        ->"fAȥB^´ЦC"
                                  |
:004298F2 6858814700              push 00478158
:004298F7 6A00                    push 00000000
:004298F9 E86EF2FFFF              call 00428B6C
:004298FE 83C40C                  add esp, 0000000C
:00429901 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004298E7(U)
|
:00429903 8BE5                    mov esp, ebp
:00429905 5D                      pop ebp
:00429906 C3                      ret


:00429907 55                      push ebp
:00429908 8BEC                    mov ebp, esp
:0042990A 51                      push ecx
:0042990B 894DFC                  mov dword ptr [ebp-04], ecx
:0042990E 8B45FC                  mov eax, dword ptr [ebp-04]
:00429911 33C9                    xor ecx, ecx
:00429913 8A481D                  mov cl, byte ptr [eax+1D]
:00429916 8BC1                    mov eax, ecx
:00429918 8BE5                    mov esp, ebp
:0042991A 5D                      pop ebp
:0042991B C3                      ret


:0042991C 55                      push ebp
:0042991D 8BEC                    mov ebp, esp
:0042991F 51                      push ecx
:00429920 894DFC                  mov dword ptr [ebp-04], ecx
:00429923 8BE5                    mov esp, ebp
:00429925 5D                      pop ebp
:00429926 C3                      ret



* Referenced by a CALL at Address:
|:00459B1E   
|
:00429927 55                      push ebp
:00429928 8BEC                    mov ebp, esp
:0042992A 83EC28                  sub esp, 00000028
:0042992D C645E8FF                mov [ebp-18], FF
:00429931 C645F400                mov [ebp-0C], 00
:00429935 C745EC00000000          mov [ebp-14], 00000000
:0042993C 8B4508                  mov eax, dword ptr [ebp+08]
:0042993F 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429944 3DFF000000              cmp eax, 000000FF
:00429949 741C                    je 00429967
:0042994B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042994E 81E1FF000000            and ecx, 000000FF
:00429954 6BC924                  imul ecx, 00000024
:00429957 81C108F54A00            add ecx, 004AF508
:0042995D E87E5D0000              call 0042F6E0
:00429962 8945E4                  mov dword ptr [ebp-1C], eax
:00429965 EB13                    jmp 0042997A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429949(C)
|
:00429967 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042996A 81E1FF000000            and ecx, 000000FF
:00429970 8B148DC0814700          mov edx, dword ptr [4*ecx+004781C0]
:00429977 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429965(U)
|
:0042997A 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042997D 8945F8                  mov dword ptr [ebp-08], eax
:00429980 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429983 81E1FF000000            and ecx, 000000FF
:00429989 6BC924                  imul ecx, 00000024
:0042998C 81C108F54A00            add ecx, 004AF508
:00429992 E809FAFFFF              call 004293A0
:00429997 668B08                  mov cx, word ptr [eax]
:0042999A 66894DFC                mov word ptr [ebp-04], cx
:0042999E 6A00                    push 00000000
:004299A0 B9680C4B00              mov ecx, 004B0C68
:004299A5 E8565D0000              call 0042F700
:004299AA 6A00                    push 00000000
:004299AC 6A00                    push 00000000
:004299AE E891F40300              call 00468E44
:004299B3 83C408                  add esp, 00000008
:004299B6 8A55FD                  mov dl, byte ptr [ebp-03]
:004299B9 52                      push edx
:004299BA 8A45FC                  mov al, byte ptr [ebp-04]
:004299BD 50                      push eax
:004299BE B9A8034B00              mov ecx, 004B03A8
:004299C3 E86FC00100              call 00445A37
:004299C8 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004299CB 884DE0                  mov byte ptr [ebp-20], cl
:004299CE 807DE000                cmp byte ptr [ebp-20], 00
:004299D2 7415                    je 004299E9
:004299D4 807DE001                cmp byte ptr [ebp-20], 01
:004299D8 7450                    je 00429A2A
:004299DA 807DE003                cmp byte ptr [ebp-20], 03
:004299DE 0F8487000000            je 00429A6B
:004299E4 E998000000              jmp 00429A81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004299D2(C)
|
:004299E9 8B5508                  mov edx, dword ptr [ebp+08]
:004299EC 81E2FF000000            and edx, 000000FF
:004299F2 81FAFF000000            cmp edx, 000000FF
:004299F8 7421                    je 00429A1B
:004299FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004299FD 81E1FF000000            and ecx, 000000FF
:00429A03 6BC924                  imul ecx, 00000024
:00429A06 81C108F54A00            add ecx, 004AF508
:00429A0C E80F5D0000              call 0042F720
:00429A11 25FF000000              and eax, 000000FF
:00429A16 8945DC                  mov dword ptr [ebp-24], eax
:00429A19 EB07                    jmp 00429A22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004299F8(C)
|
:00429A1B C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429A19(U)
|
:00429A22 8A45DC                  mov al, byte ptr [ebp-24]
:00429A25 8845F0                  mov byte ptr [ebp-10], al
:00429A28 EB57                    jmp 00429A81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004299D8(C)
|
:00429A2A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429A2D 81E1FF000000            and ecx, 000000FF
:00429A33 81F9FF000000            cmp ecx, 000000FF
:00429A39 7421                    je 00429A5C
:00429A3B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429A3E 81E1FF000000            and ecx, 000000FF
:00429A44 6BC924                  imul ecx, 00000024
:00429A47 81C108F54A00            add ecx, 004AF508
:00429A4D E8EE5C0000              call 0042F740
:00429A52 25FF000000              and eax, 000000FF
:00429A57 8945D8                  mov dword ptr [ebp-28], eax
:00429A5A EB07                    jmp 00429A63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429A39(C)
|
:00429A5C C745D801000000          mov [ebp-28], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429A5A(U)
|
:00429A63 8A55D8                  mov dl, byte ptr [ebp-28]
:00429A66 8855F0                  mov byte ptr [ebp-10], dl
:00429A69 EB16                    jmp 00429A81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004299DE(C)
|
:00429A6B 8B4510                  mov eax, dword ptr [ebp+10]
:00429A6E 25FF000000              and eax, 000000FF
:00429A73 2580000000              and eax, 00000080
:00429A78 F7D8                    neg eax
:00429A7A 1BC0                    sbb eax, eax
:00429A7C F7D8                    neg eax
:00429A7E 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004299E4(U), :00429A28(U), :00429A69(U)
|
:00429A81 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429A84 81E1FF000000            and ecx, 000000FF
:00429A8A 83F902                  cmp ecx, 00000002
:00429A8D 7C12                    jl 00429AA1
:00429A8F 8B550C                  mov edx, dword ptr [ebp+0C]
:00429A92 81E2FF000000            and edx, 000000FF
:00429A98 83FA04                  cmp edx, 00000004
:00429A9B 0F85B9010000            jne 00429C5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429A8D(C)
|
:00429AA1 8B45F0                  mov eax, dword ptr [ebp-10]
:00429AA4 25FF000000              and eax, 000000FF
:00429AA9 8B4D10                  mov ecx, dword ptr [ebp+10]
:00429AAC 81E1FF000000            and ecx, 000000FF
:00429AB2 3BC1                    cmp eax, ecx
:00429AB4 0F8EC5000000            jle 00429B7F
:00429ABA 8B550C                  mov edx, dword ptr [ebp+0C]
:00429ABD 81E2FF000000            and edx, 000000FF
:00429AC3 85D2                    test edx, edx
:00429AC5 7506                    jne 00429ACD
:00429AC7 C645E811                mov [ebp-18], 11
:00429ACB EB17                    jmp 00429AE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429AC5(C)
|
:00429ACD 8B450C                  mov eax, dword ptr [ebp+0C]
:00429AD0 25FF000000              and eax, 000000FF
:00429AD5 83F801                  cmp eax, 00000001
:00429AD8 7506                    jne 00429AE0
:00429ADA C645E812                mov [ebp-18], 12
:00429ADE EB04                    jmp 00429AE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429AD8(C)
|
:00429AE0 C645E813                mov [ebp-18], 13

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429ACB(U), :00429ADE(U)
|
:00429AE4 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00429AE6 6A03                    push 00000003
:00429AE8 8A4DE8                  mov cl, byte ptr [ebp-18]
:00429AEB 51                      push ecx
:00429AEC 8A5508                  mov dl, byte ptr [ebp+08]
:00429AEF 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429AF0 68FF000000              push 000000FF
:00429AF5 B9A8034B00              mov ecx, 004B03A8
:00429AFA E8D7CB0100              call 004466D6
:00429AFF 8B45F0                  mov eax, dword ptr [ebp-10]
:00429B02 25FF000000              and eax, 000000FF
:00429B07 83F801                  cmp eax, 00000001
:00429B0A 7E4A                    jle 00429B56
:00429B0C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00429B0F 81E1FF000000            and ecx, 000000FF
:00429B15 33D2                    xor edx, edx
:00429B17 83F902                  cmp ecx, 00000002
:00429B1A 0F94C2                  sete dl
:00429B1D 8855F0                  mov byte ptr [ebp-10], dl
:00429B20 8B45F0                  mov eax, dword ptr [ebp-10]
:00429B23 25FF000000              and eax, 000000FF
:00429B28 8B0C85B8814700          mov ecx, dword ptr [4*eax+004781B8]
:00429B2F 51                      push ecx
:00429B30 8B550C                  mov edx, dword ptr [ebp+0C]
:00429B33 81E2FF000000            and edx, 000000FF
:00429B39 8B0495A0814700          mov eax, dword ptr [4*edx+004781A0]
:00429B40 50                      push eax
:00429B41 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429B44 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s%sUĪG%s"
                                  |
:00429B45 681C824700              push 0047821C
:00429B4A 6A00                    push 00000000
:00429B4C E81BF0FFFF              call 00428B6C
:00429B51 83C414                  add esp, 00000014
:00429B54 EB24                    jmp 00429B7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429B0A(C)
|
:00429B56 8B550C                  mov edx, dword ptr [ebp+0C]
:00429B59 81E2FF000000            and edx, 000000FF
:00429B5F 8B0495A0814700          mov eax, dword ptr [4*edx+004781A0]
:00429B66 50                      push eax
:00429B67 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429B6A 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s%sWɤFC"
                                  |
:00429B6B 6830824700              push 00478230
:00429B70 6A00                    push 00000000
:00429B72 E8F5EFFFFF              call 00428B6C
:00429B77 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429B54(U)
|
:00429B7A E9D6000000              jmp 00429C55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429AB4(C)
|
:00429B7F 8B55F0                  mov edx, dword ptr [ebp-10]
:00429B82 81E2FF000000            and edx, 000000FF
:00429B88 8B4510                  mov eax, dword ptr [ebp+10]
:00429B8B 25FF000000              and eax, 000000FF
:00429B90 3BD0                    cmp edx, eax
:00429B92 0F8DBD000000            jnl 00429C55
:00429B98 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429B9B 81E1FF000000            and ecx, 000000FF
:00429BA1 85C9                    test ecx, ecx
:00429BA3 7506                    jne 00429BAB
:00429BA5 C645E825                mov [ebp-18], 25
:00429BA9 EB18                    jmp 00429BC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429BA3(C)
|
:00429BAB 8B550C                  mov edx, dword ptr [ebp+0C]
:00429BAE 81E2FF000000            and edx, 000000FF
:00429BB4 83FA01                  cmp edx, 00000001
:00429BB7 7506                    jne 00429BBF
:00429BB9 C645E826                mov [ebp-18], 26
:00429BBD EB04                    jmp 00429BC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429BB7(C)
|
:00429BBF C645E827                mov [ebp-18], 27

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429BA9(U), :00429BBD(U)
|
:00429BC3 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00429BC5 6A03                    push 00000003
:00429BC7 8A45E8                  mov al, byte ptr [ebp-18]
:00429BCA 50                      push eax
:00429BCB 8A4D08                  mov cl, byte ptr [ebp+08]
:00429BCE 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429BCF 68FF000000              push 000000FF
:00429BD4 B9A8034B00              mov ecx, 004B03A8
:00429BD9 E8F8CA0100              call 004466D6
:00429BDE 8B55F0                  mov edx, dword ptr [ebp-10]
:00429BE1 81E2FF000000            and edx, 000000FF
:00429BE7 83FA01                  cmp edx, 00000001
:00429BEA 7D46                    jge 00429C32
:00429BEC 8B45F0                  mov eax, dword ptr [ebp-10]
:00429BEF 25FF000000              and eax, 000000FF
:00429BF4 F7D8                    neg eax
:00429BF6 1BC0                    sbb eax, eax
:00429BF8 40                      inc eax
:00429BF9 8845F0                  mov byte ptr [ebp-10], al
:00429BFC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00429BFF 81E1FF000000            and ecx, 000000FF
:00429C05 8B148DB8814700          mov edx, dword ptr [4*ecx+004781B8]
:00429C0C 52                      push edx
:00429C0D 8B450C                  mov eax, dword ptr [ebp+0C]
:00429C10 25FF000000              and eax, 000000FF
:00429C15 8B0C85A0814700          mov ecx, dword ptr [4*eax+004781A0]
:00429C1C 51                      push ecx
:00429C1D 8B55F8                  mov edx, dword ptr [ebp-08]
:00429C20 52                      push edx

* Possible StringData Ref from Data Obj ->"%s%sWɮĪG%sC"
                                  |
:00429C21 6840824700              push 00478240
:00429C26 6A00                    push 00000000
:00429C28 E83FEFFFFF              call 00428B6C
:00429C2D 83C414                  add esp, 00000014
:00429C30 EB23                    jmp 00429C55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429BEA(C)
|
:00429C32 8B450C                  mov eax, dword ptr [ebp+0C]
:00429C35 25FF000000              and eax, 000000FF
:00429C3A 8B0C85A0814700          mov ecx, dword ptr [4*eax+004781A0]
:00429C41 51                      push ecx
:00429C42 8B55F8                  mov edx, dword ptr [ebp-08]
:00429C45 52                      push edx

* Possible StringData Ref from Data Obj ->"%sD%wlC"
                                  |
:00429C46 6854824700              push 00478254
:00429C4B 6A00                    push 00000000
:00429C4D E81AEFFFFF              call 00428B6C
:00429C52 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429B7A(U), :00429B92(C), :00429C30(U)
|
:00429C55 E9BA030000              jmp 0042A014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429A9B(C)
|
:00429C5A 8B450C                  mov eax, dword ptr [ebp+0C]
:00429C5D 25FF000000              and eax, 000000FF
:00429C62 83F802                  cmp eax, 00000002
:00429C65 753B                    jne 00429CA2
:00429C67 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00429C69 6A03                    push 00000003
:00429C6B 6A28                    push 00000028
:00429C6D 8A4D08                  mov cl, byte ptr [ebp+08]
:00429C70 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429C71 68FF000000              push 000000FF
:00429C76 B9A8034B00              mov ecx, 004B03A8
:00429C7B E856CA0100              call 004466D6
:00429C80 8B5510                  mov edx, dword ptr [ebp+10]
:00429C83 81E2FF000000            and edx, 000000FF
:00429C89 52                      push edx
:00429C8A 8B45F8                  mov eax, dword ptr [ebp-08]
:00429C8D 50                      push eax

* Possible StringData Ref from Data Obj ->"%sDF%wlC"
                                  |
:00429C8E 6868824700              push 00478268
:00429C93 6A00                    push 00000000
:00429C95 E8D2EEFFFF              call 00428B6C
:00429C9A 83C410                  add esp, 00000010
:00429C9D E972030000              jmp 0042A014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429C65(C)
|
:00429CA2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429CA5 81E1FF000000            and ecx, 000000FF
:00429CAB 83F903                  cmp ecx, 00000003
:00429CAE 0F8560030000            jne 0042A014
:00429CB4 8B5510                  mov edx, dword ptr [ebp+10]
:00429CB7 81E2FF000000            and edx, 000000FF
:00429CBD 83E201                  and edx, 00000001
:00429CC0 85D2                    test edx, edx
:00429CC2 0F84C4000000            je 00429D8C
:00429CC8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429CCB 25FF000000              and eax, 000000FF
:00429CD0 85C0                    test eax, eax
:00429CD2 745C                    je 00429D30
:00429CD4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429CD7 81E1FF000000            and ecx, 000000FF
:00429CDD 81F9FF000000            cmp ecx, 000000FF
:00429CE3 741D                    je 00429D02
:00429CE5 6A01                    push 00000001
:00429CE7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429CEA 81E1FF000000            and ecx, 000000FF
:00429CF0 6BC924                  imul ecx, 00000024
:00429CF3 81C108F54A00            add ecx, 004AF508
:00429CF9 E8625A0000              call 0042F760
:00429CFE 85C0                    test eax, eax
:00429D00 742E                    je 00429D30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429CE3(C)
|
:00429D02 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00429D04 6A03                    push 00000003
:00429D06 6A14                    push 00000014
:00429D08 8A5508                  mov dl, byte ptr [ebp+08]
:00429D0B 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429D0C 68FF000000              push 000000FF
:00429D11 B9A8034B00              mov ecx, 004B03A8
:00429D16 E8BBC90100              call 004466D6
:00429D1B 8B45F8                  mov eax, dword ptr [ebp-08]
:00429D1E 50                      push eax

* Possible StringData Ref from Data Obj ->"%sqʪp_C"
                                  |
:00429D1F 687C824700              push 0047827C
:00429D24 6A00                    push 00000000
:00429D26 E841EEFFFF              call 00428B6C
:00429D2B 83C40C                  add esp, 0000000C
:00429D2E EB5C                    jmp 00429D8C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429CD2(C), :00429D00(C)
|
:00429D30 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429D33 81E1FF000000            and ecx, 000000FF
:00429D39 85C9                    test ecx, ecx
:00429D3B 754F                    jne 00429D8C
:00429D3D 8B5508                  mov edx, dword ptr [ebp+08]
:00429D40 81E2FF000000            and edx, 000000FF
:00429D46 81FAFF000000            cmp edx, 000000FF
:00429D4C 741D                    je 00429D6B
:00429D4E 6A01                    push 00000001
:00429D50 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429D53 81E1FF000000            and ecx, 000000FF
:00429D59 6BC924                  imul ecx, 00000024
:00429D5C 81C108F54A00            add ecx, 004AF508
:00429D62 E8F9590000              call 0042F760
:00429D67 85C0                    test eax, eax
:00429D69 7521                    jne 00429D8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429D4C(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00429D6B 6A0A                    push 0000000A
:00429D6D 8A4508                  mov al, byte ptr [ebp+08]
:00429D70 50                      push eax
:00429D71 E8DA020000              call 0042A050
:00429D76 83C408                  add esp, 00000008
:00429D79 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429D7C 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sJʪpC"
                                  |
:00429D7D 6890824700              push 00478290
:00429D82 6A00                    push 00000000
:00429D84 E8E3EDFFFF              call 00428B6C
:00429D89 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429CC2(C), :00429D2E(U), :00429D3B(C), :00429D69(C)
|
:00429D8C 8B5510                  mov edx, dword ptr [ebp+10]
:00429D8F 81E2FF000000            and edx, 000000FF
:00429D95 83E204                  and edx, 00000004
:00429D98 85D2                    test edx, edx
:00429D9A 0F84C4000000            je 00429E64
:00429DA0 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429DA3 25FF000000              and eax, 000000FF
:00429DA8 85C0                    test eax, eax
:00429DAA 745C                    je 00429E08
:00429DAC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429DAF 81E1FF000000            and ecx, 000000FF
:00429DB5 81F9FF000000            cmp ecx, 000000FF
:00429DBB 741D                    je 00429DDA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429DBD 6A04                    push 00000004
:00429DBF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429DC2 81E1FF000000            and ecx, 000000FF
:00429DC8 6BC924                  imul ecx, 00000024
:00429DCB 81C108F54A00            add ecx, 004AF508
:00429DD1 E88A590000              call 0042F760
:00429DD6 85C0                    test eax, eax
:00429DD8 742E                    je 00429E08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429DBB(C)
|
:00429DDA 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00429DDC 6A03                    push 00000003
:00429DDE 6A15                    push 00000015
:00429DE0 8A5508                  mov dl, byte ptr [ebp+08]
:00429DE3 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429DE4 68FF000000              push 000000FF
:00429DE9 B9A8034B00              mov ecx, 004B03A8
:00429DEE E8E3C80100              call 004466D6
:00429DF3 8B45F8                  mov eax, dword ptr [ebp-08]
:00429DF6 50                      push eax

* Possible StringData Ref from Data Obj ->"%sq檬p_C"
                                  |
:00429DF7 68A4824700              push 004782A4
:00429DFC 6A00                    push 00000000
:00429DFE E869EDFFFF              call 00428B6C
:00429E03 83C40C                  add esp, 0000000C
:00429E06 EB5C                    jmp 00429E64

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429DAA(C), :00429DD8(C)
|
:00429E08 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429E0B 81E1FF000000            and ecx, 000000FF
:00429E11 85C9                    test ecx, ecx
:00429E13 754F                    jne 00429E64
:00429E15 8B5508                  mov edx, dword ptr [ebp+08]
:00429E18 81E2FF000000            and edx, 000000FF
:00429E1E 81FAFF000000            cmp edx, 000000FF
:00429E24 741D                    je 00429E43

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429E26 6A04                    push 00000004
:00429E28 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E2B 81E1FF000000            and ecx, 000000FF
:00429E31 6BC924                  imul ecx, 00000024
:00429E34 81C108F54A00            add ecx, 004AF508
:00429E3A E821590000              call 0042F760
:00429E3F 85C0                    test eax, eax
:00429E41 7521                    jne 00429E64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429E24(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00429E43 6A09                    push 00000009
:00429E45 8A4508                  mov al, byte ptr [ebp+08]
:00429E48 50                      push eax
:00429E49 E802020000              call 0042A050
:00429E4E 83C408                  add esp, 00000008
:00429E51 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429E54 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sJ檬pC"
                                  |
:00429E55 68B8824700              push 004782B8
:00429E5A 6A00                    push 00000000
:00429E5C E80BEDFFFF              call 00428B6C
:00429E61 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429D9A(C), :00429E06(U), :00429E13(C), :00429E41(C)
|
:00429E64 8B5510                  mov edx, dword ptr [ebp+10]
:00429E67 81E2FF000000            and edx, 000000FF
:00429E6D 83E210                  and edx, 00000010
:00429E70 85D2                    test edx, edx
:00429E72 0F84C4000000            je 00429F3C
:00429E78 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429E7B 25FF000000              and eax, 000000FF
:00429E80 85C0                    test eax, eax
:00429E82 745C                    je 00429EE0
:00429E84 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E87 81E1FF000000            and ecx, 000000FF
:00429E8D 81F9FF000000            cmp ecx, 000000FF
:00429E93 741D                    je 00429EB2

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00429E95 6A10                    push 00000010
:00429E97 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E9A 81E1FF000000            and ecx, 000000FF
:00429EA0 6BC924                  imul ecx, 00000024
:00429EA3 81C108F54A00            add ecx, 004AF508
:00429EA9 E8B2580000              call 0042F760
:00429EAE 85C0                    test eax, eax
:00429EB0 742E                    je 00429EE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429E93(C)
|
:00429EB2 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00429EB4 6A03                    push 00000003
:00429EB6 6A16                    push 00000016
:00429EB8 8A5508                  mov dl, byte ptr [ebp+08]
:00429EBB 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429EBC 68FF000000              push 000000FF
:00429EC1 B9A8034B00              mov ecx, 004B03A8
:00429EC6 E80BC80100              call 004466D6
:00429ECB 8B45F8                  mov eax, dword ptr [ebp-08]
:00429ECE 50                      push eax

* Possible StringData Ref from Data Obj ->"%sqVêp_C"
                                  |
:00429ECF 68CC824700              push 004782CC
:00429ED4 6A00                    push 00000000
:00429ED6 E891ECFFFF              call 00428B6C
:00429EDB 83C40C                  add esp, 0000000C
:00429EDE EB5C                    jmp 00429F3C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429E82(C), :00429EB0(C)
|
:00429EE0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429EE3 81E1FF000000            and ecx, 000000FF
:00429EE9 85C9                    test ecx, ecx
:00429EEB 754F                    jne 00429F3C
:00429EED 8B5508                  mov edx, dword ptr [ebp+08]
:00429EF0 81E2FF000000            and edx, 000000FF
:00429EF6 81FAFF000000            cmp edx, 000000FF
:00429EFC 741D                    je 00429F1B

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00429EFE 6A10                    push 00000010
:00429F00 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429F03 81E1FF000000            and ecx, 000000FF
:00429F09 6BC924                  imul ecx, 00000024
:00429F0C 81C108F54A00            add ecx, 004AF508
:00429F12 E849580000              call 0042F760
:00429F17 85C0                    test eax, eax
:00429F19 7521                    jne 00429F3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429EFC(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:00429F1B 6A08                    push 00000008
:00429F1D 8A4508                  mov al, byte ptr [ebp+08]
:00429F20 50                      push eax
:00429F21 E82A010000              call 0042A050
:00429F26 83C408                  add esp, 00000008
:00429F29 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429F2C 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sVäFC"
                                  |
:00429F2D 68E0824700              push 004782E0
:00429F32 6A00                    push 00000000
:00429F34 E833ECFFFF              call 00428B6C
:00429F39 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429E72(C), :00429EDE(U), :00429EEB(C), :00429F19(C)
|
:00429F3C 8B5510                  mov edx, dword ptr [ebp+10]
:00429F3F 81E2FF000000            and edx, 000000FF
:00429F45 83E220                  and edx, 00000020
:00429F48 85D2                    test edx, edx
:00429F4A 0F84C4000000            je 0042A014
:00429F50 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429F53 25FF000000              and eax, 000000FF
:00429F58 85C0                    test eax, eax
:00429F5A 745C                    je 00429FB8
:00429F5C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429F5F 81E1FF000000            and ecx, 000000FF
:00429F65 81F9FF000000            cmp ecx, 000000FF
:00429F6B 741D                    je 00429F8A
:00429F6D 6A20                    push 00000020
:00429F6F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429F72 81E1FF000000            and ecx, 000000FF
:00429F78 6BC924                  imul ecx, 00000024
:00429F7B 81C108F54A00            add ecx, 004AF508
:00429F81 E8DA570000              call 0042F760
:00429F86 85C0                    test eax, eax
:00429F88 742E                    je 00429FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429F6B(C)
|
:00429F8A 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00429F8C 6A03                    push 00000003
:00429F8E 6A17                    push 00000017
:00429F90 8A5508                  mov dl, byte ptr [ebp+08]
:00429F93 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00429F94 68FF000000              push 000000FF
:00429F99 B9A8034B00              mov ecx, 004B03A8
:00429F9E E833C70100              call 004466D6
:00429FA3 8B45F8                  mov eax, dword ptr [ebp-08]
:00429FA6 50                      push eax

* Possible StringData Ref from Data Obj ->"%sq˪p_C"
                                  |
:00429FA7 68EC824700              push 004782EC
:00429FAC 6A00                    push 00000000
:00429FAE E8B9EBFFFF              call 00428B6C
:00429FB3 83C40C                  add esp, 0000000C
:00429FB6 EB5C                    jmp 0042A014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429F5A(C), :00429F88(C)
|
:00429FB8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429FBB 81E1FF000000            and ecx, 000000FF
:00429FC1 85C9                    test ecx, ecx
:00429FC3 754F                    jne 0042A014
:00429FC5 8B5508                  mov edx, dword ptr [ebp+08]
:00429FC8 81E2FF000000            and edx, 000000FF
:00429FCE 81FAFF000000            cmp edx, 000000FF
:00429FD4 741D                    je 00429FF3
:00429FD6 6A20                    push 00000020
:00429FD8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429FDB 81E1FF000000            and ecx, 000000FF
:00429FE1 6BC924                  imul ecx, 00000024
:00429FE4 81C108F54A00            add ecx, 004AF508
:00429FEA E871570000              call 0042F760
:00429FEF 85C0                    test eax, eax
:00429FF1 7521                    jne 0042A014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429FD4(C)
|

* Possible Reference to String Resource ID=00011: "
"
                                  |
:00429FF3 6A0B                    push 0000000B
:00429FF5 8A4508                  mov al, byte ptr [ebp+08]
:00429FF8 50                      push eax
:00429FF9 E852000000              call 0042A050
:00429FFE 83C408                  add esp, 00000008
:0042A001 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A004 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sJ˪pC"
                                  |
:0042A005 6800834700              push 00478300
:0042A00A 6A00                    push 00000000
:0042A00C E85BEBFFFF              call 00428B6C
:0042A011 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429C55(U), :00429C9D(U), :00429CAE(C), :00429F4A(C), :00429FB6(U)
|:00429FC3(C), :00429FF1(C)
|
:0042A014 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A017 81E1FF000000            and ecx, 000000FF
:0042A01D 6BC924                  imul ecx, 00000024
:0042A020 81C108F54A00            add ecx, 004AF508
:0042A026 E8A5560000              call 0042F6D0
:0042A02B 50                      push eax
:0042A02C E81FCF0300              call 00466F50
:0042A031 83C404                  add esp, 00000004
:0042A034 6A00                    push 00000000
:0042A036 6A01                    push 00000001
:0042A038 E807EE0300              call 00468E44
:0042A03D 83C408                  add esp, 00000008
:0042A040 6A01                    push 00000001
:0042A042 B9680C4B00              mov ecx, 004B0C68
:0042A047 E8B4560000              call 0042F700
:0042A04C 8BE5                    mov esp, ebp
:0042A04E 5D                      pop ebp
:0042A04F C3                      ret



* Referenced by a CALL at Addresses:
|:00429D71   , :00429E49   , :00429F21   , :00429FF9   
|
:0042A050 55                      push ebp
:0042A051 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042A053 6AFF                    push FFFFFFFF
:0042A055 68B5394700              push 004739B5
:0042A05A 64A100000000            mov eax, dword ptr fs:[00000000]
:0042A060 50                      push eax
:0042A061 64892500000000          mov dword ptr fs:[00000000], esp
:0042A068 81EC28010000            sub esp, 00000128
:0042A06E 8D8DD0FEFFFF            lea ecx, dword ptr [ebp+FFFFFED0]
:0042A074 E837D7FDFF              call 004077B0
:0042A079 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A07C E89FBCFFFF              call 00425D20
:0042A081 C745FC00000000          mov [ebp-04], 00000000
:0042A088 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A08E E86DD6FDFF              call 00407700
:0042A093 C645FC01                mov [ebp-04], 01
:0042A097 68001B0000              push 00001B00
:0042A09C 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A09F E89A94FEFF              call 0041353E
:0042A0A4 85C0                    test eax, eax
:0042A0A6 7523                    jne 0042A0CB
:0042A0A8 C645FC00                mov [ebp-04], 00
:0042A0AC 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A0B2 E869D6FDFF              call 00407720
:0042A0B7 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A0BE 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A0C1 E81A94FEFF              call 004134E0
:0042A0C6 E96A020000              jmp 0042A335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A0A6(C)
|

* Possible StringData Ref from Data Obj ->"SPANEL.E4"
                                  |
:0042A0CB 68E07A4700              push 00477AE0
:0042A0D0 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A0D6 E85AA2FEFF              call 00414335
:0042A0DB 85C0                    test eax, eax
:0042A0DD 7523                    jne 0042A102
:0042A0DF C645FC00                mov [ebp-04], 00
:0042A0E3 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A0E9 E832D6FDFF              call 00407720
:0042A0EE C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A0F5 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A0F8 E8E393FEFF              call 004134E0
:0042A0FD E933020000              jmp 0042A335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A0DD(C)
|
:0042A102 6A00                    push 00000000
:0042A104 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A107 E89294FEFF              call 0041359E
:0042A10C 50                      push eax
:0042A10D 8B450C                  mov eax, dword ptr [ebp+0C]
:0042A110 50                      push eax
:0042A111 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A117 E86DA3FEFF              call 00414489
:0042A11C 85C0                    test eax, eax
:0042A11E 752E                    jne 0042A14E
:0042A120 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A126 E8E164FEFF              call 0041060C
:0042A12B C645FC00                mov [ebp-04], 00
:0042A12F 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A135 E8E6D5FDFF              call 00407720
:0042A13A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A141 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A144 E89793FEFF              call 004134E0
:0042A149 E9E7010000              jmp 0042A335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A11E(C)
|
:0042A14E 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A154 E8B364FEFF              call 0041060C
:0042A159 85C0                    test eax, eax
:0042A15B 7523                    jne 0042A180
:0042A15D C645FC00                mov [ebp-04], 00
:0042A161 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A167 E8B4D5FDFF              call 00407720
:0042A16C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A173 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A176 E86593FEFF              call 004134E0
:0042A17B E9B5010000              jmp 0042A335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A15B(C)
|
:0042A180 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A183 81E1FF000000            and ecx, 000000FF
:0042A189 6BC924                  imul ecx, 00000024
:0042A18C 81C108F54A00            add ecx, 004AF508
:0042A192 E809F2FFFF              call 004293A0
:0042A197 50                      push eax
:0042A198 8D8DD0FEFFFF            lea ecx, dword ptr [ebp+FFFFFED0]
:0042A19E E8ED550000              call 0042F790
:0042A1A3 8B8DD0FEFFFF            mov ecx, dword ptr [ebp+FFFFFED0]
:0042A1A9 81E1FF000000            and ecx, 000000FF
:0042A1AF 6BC903                  imul ecx, 00000003
:0042A1B2 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:0042A1B8 8B95D1FEFFFF            mov edx, dword ptr [ebp+FFFFFED1]
:0042A1BE 81E2FF000000            and edx, 000000FF
:0042A1C4 6BD203                  imul edx, 00000003
:0042A1C7 8995D4FEFFFF            mov dword ptr [ebp+FFFFFED4], edx
:0042A1CD B9A8034B00              mov ecx, 004B03A8
:0042A1D2 E8A98B0100              call 00442D80
:0042A1D7 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:0042A1DD 2BC8                    sub ecx, eax
:0042A1DF C1E104                  shl ecx, 04
:0042A1E2 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:0042A1E8 B9A8034B00              mov ecx, 004B03A8
:0042A1ED E89F8B0100              call 00442D91
:0042A1F2 8B95D4FEFFFF            mov edx, dword ptr [ebp+FFFFFED4]
:0042A1F8 2BD0                    sub edx, eax
:0042A1FA 83C202                  add edx, 00000002
:0042A1FD C1E204                  shl edx, 04
:0042A200 83C208                  add edx, 00000008
:0042A203 8995E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], edx
:0042A209 68003D0100              push 00013D00
:0042A20E B930DA4A00              mov ecx, 004ADA30
:0042A213 E88693FEFF              call 0041359E
:0042A218 50                      push eax
:0042A219 6A30                    push 00000030
:0042A21B 6A30                    push 00000030
:0042A21D 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0042A223 50                      push eax
:0042A224 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:0042A22A 51                      push ecx
:0042A22B E8A38A0100              call 00442CD3
:0042A230 83C414                  add esp, 00000014
:0042A233 C785CCFEFFFF00000000    mov dword ptr [ebp+FFFFFECC], 00000000
:0042A23D EB0F                    jmp 0042A24E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A2DE(U)
|
:0042A23F 8B95CCFEFFFF            mov edx, dword ptr [ebp+FFFFFECC]
:0042A245 83C201                  add edx, 00000001
:0042A248 8995CCFEFFFF            mov dword ptr [ebp+FFFFFECC], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A23D(U)
|
:0042A24E 83BDCCFEFFFF03          cmp dword ptr [ebp+FFFFFECC], 00000003
:0042A255 0F8388000000            jnb 0042A2E3
:0042A25B 6A01                    push 00000001
:0042A25D B9F8F44A00              mov ecx, 004AF4F8
:0042A262 E829B2FFFF              call 00425490
:0042A267 E8C68BFEFF              call 00412E32
:0042A26C 6A00                    push 00000000
:0042A26E 68003D0100              push 00013D00
:0042A273 B930DA4A00              mov ecx, 004ADA30
:0042A278 E82193FEFF              call 0041359E
:0042A27D 50                      push eax
:0042A27E 6A30                    push 00000030
:0042A280 6A30                    push 00000030
:0042A282 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0042A288 50                      push eax
:0042A289 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:0042A28F 51                      push ecx
:0042A290 E87D890100              call 00442C12
:0042A295 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A298 6A04                    push 00000004
:0042A29A 8B95CCFEFFFF            mov edx, dword ptr [ebp+FFFFFECC]
:0042A2A0 69D200090000            imul edx, 00000900
:0042A2A6 52                      push edx
:0042A2A7 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A2AA E8EF92FEFF              call 0041359E
:0042A2AF 50                      push eax
:0042A2B0 6A30                    push 00000030
:0042A2B2 6A30                    push 00000030
:0042A2B4 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0042A2BA 50                      push eax
:0042A2BB 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:0042A2C1 51                      push ecx
:0042A2C2 E84B890100              call 00442C12
:0042A2C7 83C418                  add esp, 00000018
:0042A2CA E87E8BFEFF              call 00412E4D
:0042A2CF E8BCC8FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042A2D4 6A03                    push 00000003
:0042A2D6 E869CAFFFF              call 00426D44
:0042A2DB 83C404                  add esp, 00000004
:0042A2DE E95CFFFFFF              jmp 0042A23F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A255(C)
|
:0042A2E3 6A00                    push 00000000
:0042A2E5 68003D0100              push 00013D00
:0042A2EA B930DA4A00              mov ecx, 004ADA30
:0042A2EF E8AA92FEFF              call 0041359E
:0042A2F4 50                      push eax
:0042A2F5 6A30                    push 00000030
:0042A2F7 6A30                    push 00000030
:0042A2F9 8B95E0FEFFFF            mov edx, dword ptr [ebp+FFFFFEE0]
:0042A2FF 52                      push edx
:0042A300 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0042A306 50                      push eax
:0042A307 E806890100              call 00442C12
:0042A30C 83C418                  add esp, 00000018
:0042A30F 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A312 E8DC91FEFF              call 004134F3
:0042A317 C645FC00                mov [ebp-04], 00
:0042A31B 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:0042A321 E8FAD3FDFF              call 00407720
:0042A326 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A32D 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042A330 E8AB91FEFF              call 004134E0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A0C6(U), :0042A0FD(U), :0042A149(U), :0042A17B(U)
|
:0042A335 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A338 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042A33F 8BE5                    mov esp, ebp
:0042A341 5D                      pop ebp
:0042A342 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A425   , :0042C58B   , :00458D7B   
|
:0042A343 55                      push ebp
:0042A344 8BEC                    mov ebp, esp
:0042A346 83EC08                  sub esp, 00000008
:0042A349 33C0                    xor eax, eax
:0042A34B A0B0014B00              mov al, byte ptr [004B01B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042A350 3DFF000000              cmp eax, 000000FF
:0042A355 755B                    jne 0042A3B2
:0042A357 8D4D08                  lea ecx, dword ptr [ebp+08]
:0042A35A 51                      push ecx
:0042A35B E8B1D50100              call 00447911
:0042A360 83C404                  add esp, 00000004
:0042A363 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042A368 3DFF000000              cmp eax, 000000FF
:0042A36D 7543                    jne 0042A3B2
:0042A36F 8D5508                  lea edx, dword ptr [ebp+08]
:0042A372 52                      push edx
:0042A373 E807D60100              call 0044797F
:0042A378 83C404                  add esp, 00000004
:0042A37B 25FF000000              and eax, 000000FF
:0042A380 50                      push eax
:0042A381 33C0                    xor eax, eax
:0042A383 A0B4014B00              mov al, byte ptr [004B01B4]
:0042A388 8BC8                    mov ecx, eax
:0042A38A 6BC94A                  imul ecx, 0000004A
:0042A38D 81C140DA4A00            add ecx, 004ADA40
:0042A393 E828540000              call 0042F7C0
:0042A398 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042A39D 3DFF000000              cmp eax, 000000FF
:0042A3A2 740E                    je 0042A3B2
:0042A3A4 8D4D08                  lea ecx, dword ptr [ebp+08]
:0042A3A7 51                      push ecx
:0042A3A8 B9B0014B00              mov ecx, 004B01B0
:0042A3AD E8DE530000              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A355(C), :0042A36D(C), :0042A3A2(C)
|
:0042A3B2 8B550C                  mov edx, dword ptr [ebp+0C]
:0042A3B5 81E2FF000000            and edx, 000000FF
:0042A3BB 85D2                    test edx, edx
:0042A3BD 740E                    je 0042A3CD
:0042A3BF 33C0                    xor eax, eax
:0042A3C1 A0B0014B00              mov al, byte ptr [004B01B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042A3C6 3DFF000000              cmp eax, 000000FF
:0042A3CB 7402                    je 0042A3CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A3BD(C)
|
:0042A3CD EB72                    jmp 0042A441

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A3CB(C)
|
:0042A3CF 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0042A3D2 80E901                  sub cl, 01
:0042A3D5 884D0C                  mov byte ptr [ebp+0C], cl
:0042A3D8 C645FC00                mov [ebp-04], 00
:0042A3DC EB09                    jmp 0042A3E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A43F(U)
|
:0042A3DE 8A55FC                  mov dl, byte ptr [ebp-04]
:0042A3E1 80C201                  add dl, 01
:0042A3E4 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A3DC(U)
|
:0042A3E7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A3EA 25FF000000              and eax, 000000FF
:0042A3EF 83F804                  cmp eax, 00000004
:0042A3F2 7D4D                    jge 0042A441
:0042A3F4 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042A3F7 51                      push ecx
:0042A3F8 8D5508                  lea edx, dword ptr [ebp+08]
:0042A3FB 52                      push edx
:0042A3FC E807D60100              call 00447A08
:0042A401 83C408                  add esp, 00000008
:0042A404 668B00                  mov ax, word ptr [eax]
:0042A407 668945F8                mov word ptr [ebp-08], ax
:0042A40B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A40E 81E1FF000000            and ecx, 000000FF
:0042A414 81F9FF000000            cmp ecx, 000000FF
:0042A41A 7423                    je 0042A43F
:0042A41C 8A550C                  mov dl, byte ptr [ebp+0C]
:0042A41F 52                      push edx
:0042A420 668B45F8                mov ax, word ptr [ebp-08]
:0042A424 50                      push eax
:0042A425 E819FFFFFF              call 0042A343
:0042A42A 83C408                  add esp, 00000008
:0042A42D 33C9                    xor ecx, ecx
:0042A42F 8A0DB0014B00            mov cl, byte ptr [004B01B0]
:0042A435 81F9FF000000            cmp ecx, 000000FF
:0042A43B 7402                    je 0042A43F
:0042A43D EB02                    jmp 0042A441

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A41A(C), :0042A43B(C)
|
:0042A43F EB9D                    jmp 0042A3DE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A3CD(U), :0042A3F2(C), :0042A43D(U)
|
:0042A441 8BE5                    mov esp, ebp
:0042A443 5D                      pop ebp
:0042A444 C3                      ret



* Referenced by a CALL at Addresses:
|:0042AF08   , :00430BD2   , :00464DDB   
|
:0042A445 55                      push ebp
:0042A446 8BEC                    mov ebp, esp
:0042A448 51                      push ecx
:0042A449 894DFC                  mov dword ptr [ebp-04], ecx
:0042A44C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A44F 8A4819                  mov cl, byte ptr [eax+19]
:0042A452 51                      push ecx
:0042A453 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A456 8B0A                    mov ecx, dword ptr [edx]
:0042A458 6BC970                  imul ecx, 00000070
:0042A45B 81C198224900            add ecx, 00492298
:0042A461 E85A7FFDFF              call 004023C0
:0042A466 50                      push eax
:0042A467 E807000000              call 0042A473
:0042A46C 83C408                  add esp, 00000008
:0042A46F 8BE5                    mov esp, ebp
:0042A471 5D                      pop ebp
:0042A472 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A467   , :0042A4E3   
|
:0042A473 55                      push ebp
:0042A474 8BEC                    mov ebp, esp
:0042A476 51                      push ecx
:0042A477 8B450C                  mov eax, dword ptr [ebp+0C]
:0042A47A 25FF000000              and eax, 000000FF
:0042A47F 24BF                    and al, BF
:0042A481 8945FC                  mov dword ptr [ebp-04], eax
:0042A484 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042A488 7408                    je 0042A492
:0042A48A 837DFC02                cmp dword ptr [ebp-04], 00000002
:0042A48E 7417                    je 0042A4A7
:0042A490 EB28                    jmp 0042A4BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A488(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A492 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A494 6A05                    push 00000005
:0042A496 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A499 51                      push ecx
:0042A49A E8C17A0300              call 00461F60
:0042A49F 83C40C                  add esp, 0000000C
:0042A4A2 894508                  mov dword ptr [ebp+08], eax
:0042A4A5 EB13                    jmp 0042A4BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A48E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A4A7 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042A4A9 6A03                    push 00000003
:0042A4AB 8B5508                  mov edx, dword ptr [ebp+08]
:0042A4AE 52                      push edx
:0042A4AF E8AC7A0300              call 00461F60
:0042A4B4 83C40C                  add esp, 0000000C
:0042A4B7 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A490(U), :0042A4A5(U)
|
:0042A4BA 8B4508                  mov eax, dword ptr [ebp+08]
:0042A4BD 8BE5                    mov esp, ebp
:0042A4BF 5D                      pop ebp
:0042A4C0 C3                      ret



* Referenced by a CALL at Addresses:
|:0042AF72   , :00430BEF   , :00430C0D   , :00464DF5   
|
:0042A4C1 55                      push ebp
:0042A4C2 8BEC                    mov ebp, esp
:0042A4C4 51                      push ecx
:0042A4C5 894DFC                  mov dword ptr [ebp-04], ecx
:0042A4C8 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A4CB 8A481A                  mov cl, byte ptr [eax+1A]
:0042A4CE 51                      push ecx
:0042A4CF 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A4D2 8B0A                    mov ecx, dword ptr [edx]
:0042A4D4 6BC970                  imul ecx, 00000070
:0042A4D7 81C198224900            add ecx, 00492298
:0042A4DD E8117FFDFF              call 004023F3
:0042A4E2 50                      push eax
:0042A4E3 E88BFFFFFF              call 0042A473
:0042A4E8 83C408                  add esp, 00000008
:0042A4EB 8BE5                    mov esp, ebp
:0042A4ED 5D                      pop ebp
:0042A4EE C3                      ret



* Referenced by a CALL at Addresses:
|:0042FE39   , :004300AE   , :004300C7   , :004355FD   , :004392B4   
|:004393AD   , :004393C0   , :00439410   , :0043941A   , :00439426   
|:00439430   , :0043944D   , :00439460   , :004395A5   , :0043961C   
|:0044C60B   , :0044C682   , :00464E0F   
|
:0042A4EF 55                      push ebp
:0042A4F0 8BEC                    mov ebp, esp
:0042A4F2 51                      push ecx
:0042A4F3 894DFC                  mov dword ptr [ebp-04], ecx
:0042A4F6 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A4F9 8B08                    mov ecx, dword ptr [eax]
:0042A4FB 6BC970                  imul ecx, 00000070
:0042A4FE 81C198224900            add ecx, 00492298
:0042A504 E81D7FFDFF              call 00402426
:0042A509 8BE5                    mov esp, ebp
:0042A50B 5D                      pop ebp
:0042A50C C3                      ret



* Referenced by a CALL at Addresses:
|:0042AE4D   , :0043BD64   
|
:0042A50D 55                      push ebp
:0042A50E 8BEC                    mov ebp, esp
:0042A510 51                      push ecx
:0042A511 894DFC                  mov dword ptr [ebp-04], ecx
:0042A514 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A517 8B08                    mov ecx, dword ptr [eax]
:0042A519 6BC970                  imul ecx, 00000070
:0042A51C 81C198224900            add ecx, 00492298
:0042A522 E8D580FDFF              call 004025FC
:0042A527 8BE5                    mov esp, ebp
:0042A529 5D                      pop ebp
:0042A52A C3                      ret



* Referenced by a CALL at Addresses:
|:00438E4A   , :00446F67   , :00449FFC   , :0044DA0E   , :0044DA3B   
|
:0042A52B 55                      push ebp
:0042A52C 8BEC                    mov ebp, esp
:0042A52E 83EC08                  sub esp, 00000008
:0042A531 894DF8                  mov dword ptr [ebp-08], ecx
:0042A534 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A537 8B08                    mov ecx, dword ptr [eax]
:0042A539 6BC970                  imul ecx, 00000070
:0042A53C 81C198224900            add ecx, 00492298
:0042A542 E88D83FDFF              call 004028D4
:0042A547 8845FC                  mov byte ptr [ebp-04], al
:0042A54A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A54D 33D2                    xor edx, edx
:0042A54F 8A511C                  mov dl, byte ptr [ecx+1C]
:0042A552 83E201                  and edx, 00000001
:0042A555 85D2                    test edx, edx
:0042A557 7404                    je 0042A55D
:0042A559 C645FC00                mov [ebp-04], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A557(C)
|
:0042A55D 8A45FC                  mov al, byte ptr [ebp-04]
:0042A560 8BE5                    mov esp, ebp
:0042A562 5D                      pop ebp
:0042A563 C3                      ret



* Referenced by a CALL at Address:
|:0042C573   
|
:0042A564 55                      push ebp
:0042A565 8BEC                    mov ebp, esp
:0042A567 83EC08                  sub esp, 00000008
:0042A56A 894DF8                  mov dword ptr [ebp-08], ecx
:0042A56D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A570 E86B520000              call 0042F7E0
:0042A575 8845FC                  mov byte ptr [ebp-04], al
:0042A578 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A57B 25FF000000              and eax, 000000FF
:0042A580 83F811                  cmp eax, 00000011
:0042A583 7C04                    jl 0042A589
:0042A585 0CFF                    or al, FF
:0042A587 EB03                    jmp 0042A58C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A583(C)
|
:0042A589 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A587(U)
|
:0042A58C 8BE5                    mov esp, ebp
:0042A58E 5D                      pop ebp
:0042A58F C3                      ret



* Referenced by a CALL at Addresses:
|:0042D1D1   , :00449539   , :004499DD   , :00449BF7   
|
:0042A590 55                      push ebp
:0042A591 8BEC                    mov ebp, esp
:0042A593 83EC08                  sub esp, 00000008
:0042A596 894DF8                  mov dword ptr [ebp-08], ecx
:0042A599 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A59C E83F520000              call 0042F7E0
:0042A5A1 8845FC                  mov byte ptr [ebp-04], al
:0042A5A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A5A7 25FF000000              and eax, 000000FF
:0042A5AC 83F811                  cmp eax, 00000011
:0042A5AF 7C04                    jl 0042A5B5
:0042A5B1 0CFF                    or al, FF
:0042A5B3 EB21                    jmp 0042A5D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A5AF(C)
|
:0042A5B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A5B8 81E1FF000000            and ecx, 000000FF
:0042A5BE 51                      push ecx
:0042A5BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A5C2 81E1FF000000            and ecx, 000000FF
:0042A5C8 6BC94A                  imul ecx, 0000004A
:0042A5CB 81C140DA4A00            add ecx, 004ADA40
:0042A5D1 E8EA510000              call 0042F7C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A5B3(U)
|
:0042A5D6 8BE5                    mov esp, ebp
:0042A5D8 5D                      pop ebp
:0042A5D9 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042AEE4   , :0042AEEF   , :0042CD15   , :00449713   , :0044C8FE   
|:0044C910   
|
:0042A5DC 55                      push ebp
:0042A5DD 8BEC                    mov ebp, esp
:0042A5DF 83EC0C                  sub esp, 0000000C
:0042A5E2 894DF4                  mov dword ptr [ebp-0C], ecx
:0042A5E5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A5E8 E8F3510000              call 0042F7E0
:0042A5ED 25FF000000              and eax, 000000FF
:0042A5F2 83F811                  cmp eax, 00000011
:0042A5F5 7C2D                    jl 0042A624
:0042A5F7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A5FA E8E1510000              call 0042F7E0
:0042A5FF 25FF000000              and eax, 000000FF
:0042A604 50                      push eax
:0042A605 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A608 E8D3500000              call 0042F6E0
:0042A60D 50                      push eax

* Possible StringData Ref from Data Obj ->"oaήĪGA%s=%d"
                                  |
:0042A60E 6814834700              push 00478314

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042A613 6A02                    push 00000002
:0042A615 E852E5FFFF              call 00428B6C
:0042A61A 83C410                  add esp, 00000010
:0042A61D 32C0                    xor al, al
:0042A61F E9AF020000              jmp 0042A8D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A5F5(C)
|
:0042A624 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A627 E874EDFFFF              call 004293A0
:0042A62C 50                      push eax
:0042A62D E84DD30100              call 0044797F
:0042A632 83C404                  add esp, 00000004
:0042A635 8845FC                  mov byte ptr [ebp-04], al
:0042A638 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A63B 25FF000000              and eax, 000000FF
:0042A640 50                      push eax
:0042A641 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A644 E897510000              call 0042F7E0
:0042A649 8AC8                    mov cl, al
:0042A64B 81E1FF000000            and ecx, 000000FF
:0042A651 6BC94A                  imul ecx, 0000004A
:0042A654 81C140DA4A00            add ecx, 004ADA40
:0042A65A E8A1510000              call 0042F800
:0042A65F 8845F8                  mov byte ptr [ebp-08], al
:0042A662 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A665 81E1FF000000            and ecx, 000000FF
:0042A66B 81F9FF000000            cmp ecx, 000000FF
:0042A671 7504                    jne 0042A677
:0042A673 C645F800                mov [ebp-08], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A671(C)
|
:0042A677 6A00                    push 00000000
:0042A679 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042A67C 8B0A                    mov ecx, dword ptr [edx]
:0042A67E 6BC970                  imul ecx, 00000070
:0042A681 81C198224900            add ecx, 00492298
:0042A687 E83799FDFF              call 00403FC3
:0042A68C 85C0                    test eax, eax
:0042A68E 742D                    je 0042A6BD
:0042A690 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A693 25FF000000              and eax, 000000FF
:0042A698 83F801                  cmp eax, 00000001
:0042A69B 7520                    jne 0042A6BD
:0042A69D 8A4DF8                  mov cl, byte ptr [ebp-08]
:0042A6A0 80C102                  add cl, 02
:0042A6A3 884DF8                  mov byte ptr [ebp-08], cl
:0042A6A6 6A01                    push 00000001
:0042A6A8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A6AB E870510000              call 0042F820
:0042A6B0 50                      push eax
:0042A6B1 6A00                    push 00000000
:0042A6B3 B930024B00              mov ecx, 004B0230
:0042A6B8 E8E92D0100              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A68E(C), :0042A69B(C)
|
:0042A6BD 6A01                    push 00000001
:0042A6BF 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042A6C2 8B0A                    mov ecx, dword ptr [edx]
:0042A6C4 6BC970                  imul ecx, 00000070
:0042A6C7 81C198224900            add ecx, 00492298
:0042A6CD E8F198FDFF              call 00403FC3
:0042A6D2 85C0                    test eax, eax
:0042A6D4 742D                    je 0042A703
:0042A6D6 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A6D9 25FF000000              and eax, 000000FF
:0042A6DE 83F807                  cmp eax, 00000007
:0042A6E1 7520                    jne 0042A703
:0042A6E3 8A4DF8                  mov cl, byte ptr [ebp-08]
:0042A6E6 80C102                  add cl, 02
:0042A6E9 884DF8                  mov byte ptr [ebp-08], cl
:0042A6EC 6A01                    push 00000001
:0042A6EE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A6F1 E82A510000              call 0042F820
:0042A6F6 50                      push eax
:0042A6F7 6A01                    push 00000001
:0042A6F9 B930024B00              mov ecx, 004B0230
:0042A6FE E8A32D0100              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A6D4(C), :0042A6E1(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042A703 6A02                    push 00000002
:0042A705 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042A708 8B0A                    mov ecx, dword ptr [edx]
:0042A70A 6BC970                  imul ecx, 00000070
:0042A70D 81C198224900            add ecx, 00492298
:0042A713 E8AB98FDFF              call 00403FC3
:0042A718 85C0                    test eax, eax
:0042A71A 742D                    je 0042A749
:0042A71C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A71F 25FF000000              and eax, 000000FF
:0042A724 83F805                  cmp eax, 00000005
:0042A727 7520                    jne 0042A749
:0042A729 8A4DF8                  mov cl, byte ptr [ebp-08]
:0042A72C 80C102                  add cl, 02
:0042A72F 884DF8                  mov byte ptr [ebp-08], cl
:0042A732 6A01                    push 00000001
:0042A734 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A737 E8E4500000              call 0042F820
:0042A73C 50                      push eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042A73D 6A02                    push 00000002
:0042A73F B930024B00              mov ecx, 004B0230
:0042A744 E85D2D0100              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A71A(C), :0042A727(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042A749 6A03                    push 00000003
:0042A74B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042A74E 8B0A                    mov ecx, dword ptr [edx]
:0042A750 6BC970                  imul ecx, 00000070
:0042A753 81C198224900            add ecx, 00492298
:0042A759 E86598FDFF              call 00403FC3
:0042A75E 85C0                    test eax, eax
:0042A760 743B                    je 0042A79D
:0042A762 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A765 25FF000000              and eax, 000000FF
:0042A76A 83F80A                  cmp eax, 0000000A
:0042A76D 740E                    je 0042A77D
:0042A76F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A772 81E1FF000000            and ecx, 000000FF
:0042A778 83F90D                  cmp ecx, 0000000D
:0042A77B 7520                    jne 0042A79D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A76D(C)
|
:0042A77D 8A55F8                  mov dl, byte ptr [ebp-08]
:0042A780 80C202                  add dl, 02
:0042A783 8855F8                  mov byte ptr [ebp-08], dl
:0042A786 6A01                    push 00000001
:0042A788 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A78B E890500000              call 0042F820
:0042A790 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042A791 6A03                    push 00000003
:0042A793 B930024B00              mov ecx, 004B0230
:0042A798 E8092D0100              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A760(C), :0042A77B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A79D 6A04                    push 00000004
:0042A79F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042A7A2 8B08                    mov ecx, dword ptr [eax]
:0042A7A4 6BC970                  imul ecx, 00000070
:0042A7A7 81C198224900            add ecx, 00492298
:0042A7AD E81198FDFF              call 00403FC3
:0042A7B2 85C0                    test eax, eax
:0042A7B4 742E                    je 0042A7E4
:0042A7B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A7B9 81E1FF000000            and ecx, 000000FF
:0042A7BF 83F90B                  cmp ecx, 0000000B
:0042A7C2 7520                    jne 0042A7E4
:0042A7C4 8A55F8                  mov dl, byte ptr [ebp-08]
:0042A7C7 80C202                  add dl, 02
:0042A7CA 8855F8                  mov byte ptr [ebp-08], dl
:0042A7CD 6A01                    push 00000001
:0042A7CF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A7D2 E849500000              call 0042F820
:0042A7D7 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A7D8 6A04                    push 00000004
:0042A7DA B930024B00              mov ecx, 004B0230
:0042A7DF E8C22C0100              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A7B4(C), :0042A7C2(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A7E4 6A05                    push 00000005
:0042A7E6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042A7E9 8B08                    mov ecx, dword ptr [eax]
:0042A7EB 6BC970                  imul ecx, 00000070
:0042A7EE 81C198224900            add ecx, 00492298
:0042A7F4 E8CA97FDFF              call 00403FC3
:0042A7F9 85C0                    test eax, eax
:0042A7FB 7449                    je 0042A846
:0042A7FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A800 81E1FF000000            and ecx, 000000FF
:0042A806 83F90F                  cmp ecx, 0000000F
:0042A809 741B                    je 0042A826
:0042A80B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A80E 81E2FF000000            and edx, 000000FF
:0042A814 83FA12                  cmp edx, 00000012
:0042A817 740D                    je 0042A826
:0042A819 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A81C 25FF000000              and eax, 000000FF
:0042A821 83F822                  cmp eax, 00000022
:0042A824 7520                    jne 0042A846

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A809(C), :0042A817(C)
|
:0042A826 8A4DF8                  mov cl, byte ptr [ebp-08]
:0042A829 80C102                  add cl, 02
:0042A82C 884DF8                  mov byte ptr [ebp-08], cl
:0042A82F 6A01                    push 00000001
:0042A831 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A834 E8E74F0000              call 0042F820
:0042A839 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A83A 6A05                    push 00000005
:0042A83C B930024B00              mov ecx, 004B0230
:0042A841 E8602C0100              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A7FB(C), :0042A824(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042A846 6A06                    push 00000006
:0042A848 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042A84B 8B0A                    mov ecx, dword ptr [edx]
:0042A84D 6BC970                  imul ecx, 00000070
:0042A850 81C198224900            add ecx, 00492298
:0042A856 E86897FDFF              call 00403FC3
:0042A85B 85C0                    test eax, eax
:0042A85D 7471                    je 0042A8D0
:0042A85F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A862 25FF000000              and eax, 000000FF
:0042A867 83F810                  cmp eax, 00000010
:0042A86A 7445                    je 0042A8B1
:0042A86C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A86F 81E1FF000000            and ecx, 000000FF
:0042A875 83F911                  cmp ecx, 00000011
:0042A878 7437                    je 0042A8B1
:0042A87A 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A87D 81E2FF000000            and edx, 000000FF
:0042A883 83FA14                  cmp edx, 00000014
:0042A886 7429                    je 0042A8B1
:0042A888 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A88B 25FF000000              and eax, 000000FF
:0042A890 83F815                  cmp eax, 00000015
:0042A893 741C                    je 0042A8B1
:0042A895 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A898 81E1FF000000            and ecx, 000000FF
:0042A89E 83F916                  cmp ecx, 00000016
:0042A8A1 740E                    je 0042A8B1
:0042A8A3 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A8A6 81E2FF000000            and edx, 000000FF
:0042A8AC 83FA21                  cmp edx, 00000021
:0042A8AF 751F                    jne 0042A8D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A86A(C), :0042A878(C), :0042A886(C), :0042A893(C), :0042A8A1(C)
|
:0042A8B1 8A45F8                  mov al, byte ptr [ebp-08]
:0042A8B4 0402                    add al, 02
:0042A8B6 8845F8                  mov byte ptr [ebp-08], al
:0042A8B9 6A01                    push 00000001
:0042A8BB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A8BE E85D4F0000              call 0042F820
:0042A8C3 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042A8C4 6A06                    push 00000006
:0042A8C6 B930024B00              mov ecx, 004B0230
:0042A8CB E8D62B0100              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A85D(C), :0042A8AF(C)
|
:0042A8D0 8A45F8                  mov al, byte ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A61F(U)
|
:0042A8D3 8BE5                    mov esp, ebp
:0042A8D5 5D                      pop ebp
:0042A8D6 C3                      ret



* Referenced by a CALL at Addresses:
|:00431237   , :0043D1EE   , :004488ED   , :00448C97   , :00449E39   
|:0044D775   
|
:0042A8D7 55                      push ebp
:0042A8D8 8BEC                    mov ebp, esp
:0042A8DA 83EC0C                  sub esp, 0000000C
:0042A8DD 894DF4                  mov dword ptr [ebp-0C], ecx
:0042A8E0 C645F800                mov [ebp-08], 00
:0042A8E4 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042A8E7 8B08                    mov ecx, dword ptr [eax]
:0042A8E9 6BC970                  imul ecx, 00000070
:0042A8EC 81C198224900            add ecx, 00492298
:0042A8F2 E8F99EFDFF              call 004047F0
:0042A8F7 8845FC                  mov byte ptr [ebp-04], al
:0042A8FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A8FD 81E1FF000000            and ecx, 000000FF
:0042A903 81F9FF000000            cmp ecx, 000000FF
:0042A909 7430                    je 0042A93B
:0042A90B 8A55FC                  mov dl, byte ptr [ebp-04]
:0042A90E 52                      push edx
:0042A90F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042A912 8B08                    mov ecx, dword ptr [eax]
:0042A914 6BC970                  imul ecx, 00000070
:0042A917 81C198224900            add ecx, 00492298
:0042A91D E8EE9EFDFF              call 00404810
:0042A922 8AC8                    mov cl, al
:0042A924 81E1FF000000            and ecx, 000000FF
:0042A92A 6BC933                  imul ecx, 00000033
:0042A92D 81C1C8EF4800            add ecx, 0048EFC8
:0042A933 E8589EFDFF              call 00404790
:0042A938 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A909(C)
|
:0042A93B 8A45F8                  mov al, byte ptr [ebp-08]
:0042A93E 8BE5                    mov esp, ebp
:0042A940 5D                      pop ebp
:0042A941 C3                      ret


:0042A942 55                      push ebp
:0042A943 8BEC                    mov ebp, esp
:0042A945 51                      push ecx
:0042A946 894DFC                  mov dword ptr [ebp-04], ecx
:0042A949 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A94C 8B08                    mov ecx, dword ptr [eax]
:0042A94E 6BC970                  imul ecx, 00000070
:0042A951 81C198224900            add ecx, 00492298
:0042A957 E8F456FFFF              call 00420050
:0042A95C 8BE5                    mov esp, ebp
:0042A95E 5D                      pop ebp
:0042A95F C3                      ret



* Referenced by a CALL at Addresses:
|:00401A13   , :0040D4B7   , :0042B493   , :0042B4BA   , :0042BFF2   
|:00430B9B   , :00430BB0   , :00430EC5   , :00432179   , :0043400A   
|:0043401F   , :00434E55   , :004397F4   , :0043C517   , :0045564B   
|:00457714   , :00458BD1   , :00459835   , :00459C4B   , :0045A1F6   
|:0045A47E   
|
:0042A960 55                      push ebp
:0042A961 8BEC                    mov ebp, esp
:0042A963 83EC08                  sub esp, 00000008
:0042A966 894DF8                  mov dword ptr [ebp-08], ecx
:0042A969 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A96C 8B08                    mov ecx, dword ptr [eax]
:0042A96E 6BC970                  imul ecx, 00000070
:0042A971 81C198224900            add ecx, 00492298
:0042A977 E8647BFDFF              call 004024E0
:0042A97C 8945FC                  mov dword ptr [ebp-04], eax
:0042A97F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A982 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:0042A985 7619                    jbe 0042A9A0
:0042A987 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A98A 52                      push edx
:0042A98B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A98E 8B08                    mov ecx, dword ptr [eax]
:0042A990 6BC970                  imul ecx, 00000070
:0042A993 81C198224900            add ecx, 00492298
:0042A999 E8A24E0000              call 0042F840
:0042A99E EB17                    jmp 0042A9B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A985(C)
|
:0042A9A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A9A3 51                      push ecx
:0042A9A4 8B55F8                  mov edx, dword ptr [ebp-08]
:0042A9A7 8B0A                    mov ecx, dword ptr [edx]
:0042A9A9 6BC970                  imul ecx, 00000070
:0042A9AC 81C198224900            add ecx, 00492298
:0042A9B2 E8894E0000              call 0042F840

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A99E(U)
|
:0042A9B7 8BE5                    mov esp, ebp
:0042A9B9 5D                      pop ebp
:0042A9BA C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401A9B   , :0040D4E6   , :0042B70E   , :0042C003   , :0042F485   
|:0042F49B   , :00430059   , :00431100   , :004321B0   , :00433980   
|:004358E1   , :0043773C   , :0043776E   , :0043C540   , :00455674   
|:00457847   , :00458BEB   , :0045A213   , :0045A4F1   
|
:0042A9BD 55                      push ebp
:0042A9BE 8BEC                    mov ebp, esp
:0042A9C0 83EC08                  sub esp, 00000008
:0042A9C3 894DF8                  mov dword ptr [ebp-08], ecx
:0042A9C6 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A9C9 8B08                    mov ecx, dword ptr [eax]
:0042A9CB 6BC970                  imul ecx, 00000070
:0042A9CE 81C198224900            add ecx, 00492298
:0042A9D4 E8387BFDFF              call 00402511
:0042A9D9 8945FC                  mov dword ptr [ebp-04], eax
:0042A9DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A9DF 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:0042A9E2 7619                    jbe 0042A9FD
:0042A9E4 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A9E7 52                      push edx
:0042A9E8 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A9EB 8B08                    mov ecx, dword ptr [eax]
:0042A9ED 6BC970                  imul ecx, 00000070
:0042A9F0 81C198224900            add ecx, 00492298
:0042A9F6 E8654E0000              call 0042F860
:0042A9FB EB17                    jmp 0042AA14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A9E2(C)
|
:0042A9FD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042AA00 51                      push ecx
:0042AA01 8B55F8                  mov edx, dword ptr [ebp-08]
:0042AA04 8B0A                    mov ecx, dword ptr [edx]
:0042AA06 6BC970                  imul ecx, 00000070
:0042AA09 81C198224900            add ecx, 00492298
:0042AA0F E84C4E0000              call 0042F860

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A9FB(U)
|
:0042AA14 8BE5                    mov esp, ebp
:0042AA16 5D                      pop ebp
:0042AA17 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042AF2C   , :0042AFE3   
|
:0042AA1A 55                      push ebp
:0042AA1B 8BEC                    mov ebp, esp
:0042AA1D 83EC18                  sub esp, 00000018
:0042AA20 56                      push esi
:0042AA21 894DE8                  mov dword ptr [ebp-18], ecx
:0042AA24 8B450C                  mov eax, dword ptr [ebp+0C]
:0042AA27 25FF000000              and eax, 000000FF
:0042AA2C 83F820                  cmp eax, 00000020
:0042AA2F 7C07                    jl 0042AA38
:0042AA31 33C0                    xor eax, eax
:0042AA33 E932010000              jmp 0042AB6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AA2F(C)
|
:0042AA38 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AA3B E860E9FFFF              call 004293A0
:0042AA40 668B08                  mov cx, word ptr [eax]
:0042AA43 66894DEC                mov word ptr [ebp-14], cx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042AA47 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042AA4C 68FF000000              push 000000FF
:0042AA51 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0042AA54 E8274E0000              call 0042F880
:0042AA59 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AA5C E86F48FEFF              call 0040F2D0
:0042AA61 8945F8                  mov dword ptr [ebp-08], eax
:0042AA64 C745F400000000          mov [ebp-0C], 00000000
:0042AA6B EB09                    jmp 0042AA76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AB63(U)
|
:0042AA6D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042AA70 83C201                  add edx, 00000001
:0042AA73 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AA6B(U)
|
:0042AA76 837DF408                cmp dword ptr [ebp-0C], 00000008
:0042AA7A 0F83E8000000            jnb 0042AB68
:0042AA80 8A45F4                  mov al, byte ptr [ebp-0C]
:0042AA83 50                      push eax
:0042AA84 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0042AA87 51                      push ecx
:0042AA88 E87BCF0100              call 00447A08
:0042AA8D 83C408                  add esp, 00000008
:0042AA90 50                      push eax
:0042AA91 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0042AA94 E8F74C0000              call 0042F790
:0042AA99 8B55FC                  mov edx, dword ptr [ebp-04]
:0042AA9C 81E2FF000000            and edx, 000000FF
:0042AAA2 81FAFF000000            cmp edx, 000000FF
:0042AAA8 0F84B5000000            je 0042AB63
:0042AAAE 8D45FC                  lea eax, dword ptr [ebp-04]
:0042AAB1 50                      push eax
:0042AAB2 E85ACE0100              call 00447911
:0042AAB7 83C404                  add esp, 00000004
:0042AABA 8845F0                  mov byte ptr [ebp-10], al
:0042AABD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AAC0 81E1FF000000            and ecx, 000000FF
:0042AAC6 81F9FF000000            cmp ecx, 000000FF
:0042AACC 0F8491000000            je 0042AB63
:0042AAD2 8A550C                  mov dl, byte ptr [ebp+0C]
:0042AAD5 52                      push edx
:0042AAD6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AAD9 81E1FF000000            and ecx, 000000FF
:0042AADF 6BC924                  imul ecx, 00000024
:0042AAE2 81C108F54A00            add ecx, 004AF508
:0042AAE8 E8E34B0000              call 0042F6D0
:0042AAED 8BC8                    mov ecx, eax
:0042AAEF 6BC970                  imul ecx, 00000070
:0042AAF2 81C198224900            add ecx, 00492298
:0042AAF8 E8C694FDFF              call 00403FC3
:0042AAFD 85C0                    test eax, eax
:0042AAFF 7462                    je 0042AB63
:0042AB01 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AB04 E8C747FEFF              call 0040F2D0
:0042AB09 8BF0                    mov esi, eax
:0042AB0B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AB0E 81E1FF000000            and ecx, 000000FF
:0042AB14 6BC924                  imul ecx, 00000024
:0042AB17 81C108F54A00            add ecx, 004AF508
:0042AB1D E8AE47FEFF              call 0040F2D0
:0042AB22 3BF0                    cmp esi, eax
:0042AB24 753D                    jne 0042AB63
:0042AB26 837D0800                cmp dword ptr [ebp+08], 00000000
:0042AB2A 7430                    je 0042AB5C
:0042AB2C 6A01                    push 00000001
:0042AB2E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AB31 E8EA4C0000              call 0042F820
:0042AB36 50                      push eax
:0042AB37 8A450C                  mov al, byte ptr [ebp+0C]
:0042AB3A 50                      push eax
:0042AB3B B930024B00              mov ecx, 004B0230
:0042AB40 E861290100              call 0043D4A6
:0042AB45 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AB48 81E1FF000000            and ecx, 000000FF
:0042AB4E 6BC924                  imul ecx, 00000024
:0042AB51 81C108F54A00            add ecx, 004AF508
:0042AB57 E8E5290000              call 0042D541

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AB2A(C)
|
:0042AB5C B801000000              mov eax, 00000001
:0042AB61 EB07                    jmp 0042AB6A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AAA8(C), :0042AACC(C), :0042AAFF(C), :0042AB24(C)
|
:0042AB63 E905FFFFFF              jmp 0042AA6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AA7A(C)
|
:0042AB68 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AA33(U), :0042AB61(U)
|
:0042AB6A 5E                      pop esi
:0042AB6B 8BE5                    mov esp, ebp
:0042AB6D 5D                      pop ebp
:0042AB6E C20800                  ret 0008


:0042AB71 55                      push ebp
:0042AB72 8BEC                    mov ebp, esp
:0042AB74 51                      push ecx
:0042AB75 894DFC                  mov dword ptr [ebp-04], ecx
:0042AB78 8B45FC                  mov eax, dword ptr [ebp-04]
:0042AB7B 8B08                    mov ecx, dword ptr [eax]
:0042AB7D 6BC970                  imul ecx, 00000070
:0042AB80 81C198224900            add ecx, 00492298
:0042AB86 E8A37CFDFF              call 0040282E
:0042AB8B 8BE5                    mov esp, ebp
:0042AB8D 5D                      pop ebp
:0042AB8E C3                      ret



* Referenced by a CALL at Addresses:
|:0042B0DB   , :0044D768   
|
:0042AB8F 55                      push ebp
:0042AB90 8BEC                    mov ebp, esp
:0042AB92 51                      push ecx
:0042AB93 894DFC                  mov dword ptr [ebp-04], ecx
:0042AB96 8B45FC                  mov eax, dword ptr [ebp-04]
:0042AB99 8B08                    mov ecx, dword ptr [eax]
:0042AB9B 6BC970                  imul ecx, 00000070
:0042AB9E 81C198224900            add ecx, 00492298
:0042ABA4 E8D87CFDFF              call 00402881
:0042ABA9 8BE5                    mov esp, ebp
:0042ABAB 5D                      pop ebp
:0042ABAC C3                      ret



* Referenced by a CALL at Address:
|:0042B02D   
|
:0042ABAD 55                      push ebp
:0042ABAE 8BEC                    mov ebp, esp
:0042ABB0 83EC20                  sub esp, 00000020
:0042ABB3 56                      push esi
:0042ABB4 894DE4                  mov dword ptr [ebp-1C], ecx
:0042ABB7 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042ABBA 8B08                    mov ecx, dword ptr [eax]
:0042ABBC 6BC970                  imul ecx, 00000070
:0042ABBF 81C198224900            add ecx, 00492298
:0042ABC5 894DF0                  mov dword ptr [ebp-10], ecx
:0042ABC8 8B5508                  mov edx, dword ptr [ebp+08]
:0042ABCB 81E2FF000000            and edx, 000000FF
:0042ABD1 6BD224                  imul edx, 00000024
:0042ABD4 81C208F54A00            add edx, 004AF508
:0042ABDA 8955FC                  mov dword ptr [ebp-04], edx
:0042ABDD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042ABE0 E8EB4A0000              call 0042F6D0
:0042ABE5 6BC070                  imul eax, 00000070
:0042ABE8 0598224900              add eax, 00492298
:0042ABED 8945E8                  mov dword ptr [ebp-18], eax
:0042ABF0 C745F400000000          mov [ebp-0C], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042ABF7 C745EC05000000          mov [ebp-14], 00000005
:0042ABFE 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042AC02 7507                    jne 0042AC0B
:0042AC04 33C0                    xor eax, eax
:0042AC06 E957020000              jmp 0042AE62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AC02(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042AC0B 6A10                    push 00000010
:0042AC0D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AC10 E84B4B0000              call 0042F760
:0042AC15 85C0                    test eax, eax
:0042AC17 7407                    je 0042AC20
:0042AC19 33C0                    xor eax, eax
:0042AC1B E942020000              jmp 0042AE62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AC17(C)
|
:0042AC20 C645F8FF                mov [ebp-08], FF
:0042AC24 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AC27 E8AF7BFDFF              call 004027DB
:0042AC2C 25FF000000              and eax, 000000FF
:0042AC31 8945E0                  mov dword ptr [ebp-20], eax
:0042AC34 837DE005                cmp dword ptr [ebp-20], 00000005
:0042AC38 0F87D7000000            ja 0042AD15
:0042AC3E 8B45E0                  mov eax, dword ptr [ebp-20]
:0042AC41 FF248569AE4200          jmp dword ptr [4*eax+0042AE69]
:0042AC48 6A16                    push 00000016
:0042AC4A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AC4D E87193FDFF              call 00403FC3
:0042AC52 85C0                    test eax, eax
:0042AC54 7430                    je 0042AC86

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042AC56 6A06                    push 00000006
:0042AC58 E858740300              call 004620B5
:0042AC5D 83C404                  add esp, 00000004
:0042AC60 83F803                  cmp eax, 00000003
:0042AC63 7521                    jne 0042AC86
:0042AC65 6A01                    push 00000001
:0042AC67 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042AC6A E8B14B0000              call 0042F820
:0042AC6F 50                      push eax
:0042AC70 6A16                    push 00000016
:0042AC72 B930024B00              mov ecx, 004B0230
:0042AC77 E82A280100              call 0043D4A6
:0042AC7C B801000000              mov eax, 00000001
:0042AC81 E9DC010000              jmp 0042AE62

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AC54(C), :0042AC63(C)
|
:0042AC86 C645F813                mov [ebp-08], 13
:0042AC8A E986000000              jmp 0042AD15
:0042AC8F 6A17                    push 00000017
:0042AC91 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AC94 E82A93FDFF              call 00403FC3
:0042AC99 85C0                    test eax, eax
:0042AC9B 7430                    je 0042ACCD

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042AC9D 6A06                    push 00000006
:0042AC9F E811740300              call 004620B5
:0042ACA4 83C404                  add esp, 00000004
:0042ACA7 83F803                  cmp eax, 00000003
:0042ACAA 7521                    jne 0042ACCD
:0042ACAC 6A01                    push 00000001
:0042ACAE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042ACB1 E86A4B0000              call 0042F820
:0042ACB6 50                      push eax
:0042ACB7 6A17                    push 00000017
:0042ACB9 B930024B00              mov ecx, 004B0230
:0042ACBE E8E3270100              call 0043D4A6
:0042ACC3 B801000000              mov eax, 00000001
:0042ACC8 E995010000              jmp 0042AE62

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AC9B(C), :0042ACAA(C)
|
:0042ACCD C645F814                mov [ebp-08], 14
:0042ACD1 EB42                    jmp 0042AD15
:0042ACD3 6A18                    push 00000018
:0042ACD5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042ACD8 E8E692FDFF              call 00403FC3
:0042ACDD 85C0                    test eax, eax
:0042ACDF 7430                    je 0042AD11

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042ACE1 6A06                    push 00000006
:0042ACE3 E8CD730300              call 004620B5
:0042ACE8 83C404                  add esp, 00000004
:0042ACEB 83F803                  cmp eax, 00000003
:0042ACEE 7521                    jne 0042AD11
:0042ACF0 6A01                    push 00000001
:0042ACF2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042ACF5 E8264B0000              call 0042F820
:0042ACFA 50                      push eax
:0042ACFB 6A18                    push 00000018
:0042ACFD B930024B00              mov ecx, 004B0230
:0042AD02 E89F270100              call 0043D4A6
:0042AD07 B801000000              mov eax, 00000001
:0042AD0C E951010000              jmp 0042AE62

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042ACDF(C), :0042ACEE(C)
|
:0042AD11 C645F815                mov [ebp-08], 15

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AC38(C), :0042AC8A(U), :0042ACD1(U)
|
:0042AD15 6A19                    push 00000019
:0042AD17 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AD1A E8A492FDFF              call 00403FC3
:0042AD1F 85C0                    test eax, eax
:0042AD21 7430                    je 0042AD53

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042AD23 6A06                    push 00000006
:0042AD25 E88B730300              call 004620B5
:0042AD2A 83C404                  add esp, 00000004
:0042AD2D 83F803                  cmp eax, 00000003
:0042AD30 7521                    jne 0042AD53
:0042AD32 6A01                    push 00000001
:0042AD34 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042AD37 E8E44A0000              call 0042F820
:0042AD3C 50                      push eax
:0042AD3D 6A19                    push 00000019
:0042AD3F B930024B00              mov ecx, 004B0230
:0042AD44 E85D270100              call 0043D4A6
:0042AD49 B801000000              mov eax, 00000001
:0042AD4E E90F010000              jmp 0042AE62

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AD21(C), :0042AD30(C)
|
:0042AD53 6A1A                    push 0000001A
:0042AD55 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AD58 E86692FDFF              call 00403FC3
:0042AD5D 85C0                    test eax, eax
:0042AD5F 7452                    je 0042ADB3
:0042AD61 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AD64 E8079BFDFF              call 00404870
:0042AD69 8BF0                    mov esi, eax

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042AD6B 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042AD6D 6A02                    push 00000002
:0042AD6F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042AD72 E86977FDFF              call 004024E0
:0042AD77 50                      push eax
:0042AD78 E8E3710300              call 00461F60
:0042AD7D 83C40C                  add esp, 0000000C
:0042AD80 3BF0                    cmp esi, eax
:0042AD82 732F                    jnb 0042ADB3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042AD84 6A03                    push 00000003
:0042AD86 E82A730300              call 004620B5
:0042AD8B 83C404                  add esp, 00000004
:0042AD8E 85C0                    test eax, eax
:0042AD90 7521                    jne 0042ADB3
:0042AD92 6A01                    push 00000001
:0042AD94 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042AD97 E8844A0000              call 0042F820
:0042AD9C 50                      push eax
:0042AD9D 6A1A                    push 0000001A
:0042AD9F B930024B00              mov ecx, 004B0230
:0042ADA4 E8FD260100              call 0043D4A6
:0042ADA9 B801000000              mov eax, 00000001
:0042ADAE E9AF000000              jmp 0042AE62

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AD5F(C), :0042AD82(C), :0042AD90(C)
|
:0042ADB3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042ADB6 81E1FF000000            and ecx, 000000FF
:0042ADBC 81F9FF000000            cmp ecx, 000000FF
:0042ADC2 7432                    je 0042ADF6
:0042ADC4 8A55F8                  mov dl, byte ptr [ebp-08]
:0042ADC7 52                      push edx
:0042ADC8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042ADCB E8F391FDFF              call 00403FC3
:0042ADD0 85C0                    test eax, eax
:0042ADD2 7422                    je 0042ADF6
:0042ADD4 6A01                    push 00000001
:0042ADD6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042ADD9 E8424A0000              call 0042F820
:0042ADDE 50                      push eax
:0042ADDF 8A45F8                  mov al, byte ptr [ebp-08]
:0042ADE2 50                      push eax
:0042ADE3 B930024B00              mov ecx, 004B0230
:0042ADE8 E8B9260100              call 0043D4A6
:0042ADED 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042ADF0 83C101                  add ecx, 00000001
:0042ADF3 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042ADC2(C), :0042ADD2(C)
|
:0042ADF6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042ADF9 E8224A0000              call 0042F820
:0042ADFE 25FF000000              and eax, 000000FF
:0042AE03 85C0                    test eax, eax
:0042AE05 7412                    je 0042AE19
:0042AE07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AE0A E8114A0000              call 0042F820
:0042AE0F 25FF000000              and eax, 000000FF
:0042AE14 83F81E                  cmp eax, 0000001E
:0042AE17 7511                    jne 0042AE2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AE05(C)
|
:0042AE19 6A01                    push 00000001
:0042AE1B 8B55EC                  mov edx, dword ptr [ebp-14]
:0042AE1E 52                      push edx
:0042AE1F E8A0710300              call 00461FC4
:0042AE24 83C408                  add esp, 00000008
:0042AE27 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AE17(C)
|
:0042AE2A 837DEC00                cmp dword ptr [ebp-14], 00000000
:0042AE2E 7507                    jne 0042AE37
:0042AE30 C745EC01000000          mov [ebp-14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AE2E(C)
|
:0042AE37 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AE3A E80577FDFF              call 00402544
:0042AE3F 50                      push eax
:0042AE40 E870720300              call 004620B5
:0042AE45 83C404                  add esp, 00000004
:0042AE48 8BF0                    mov esi, eax
:0042AE4A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AE4D E8BBF6FFFF              call 0042A50D
:0042AE52 25FF000000              and eax, 000000FF
:0042AE57 33D2                    xor edx, edx
:0042AE59 F775EC                  div [ebp-14]
:0042AE5C 3BF0                    cmp esi, eax
:0042AE5E 1BC0                    sbb eax, eax
:0042AE60 F7D8                    neg eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AC06(U), :0042AC1B(U), :0042AC81(U), :0042ACC8(U), :0042AD0C(U)
|:0042AD4E(U), :0042ADAE(U)
|
:0042AE62 5E                      pop esi
:0042AE63 8BE5                    mov esp, ebp
:0042AE65 5D                      pop ebp
:0042AE66 C20C00                  ret 000C



:0042AE69 48AC4200                DWORD 0042AC48
:0042AE6D 48AC4200                DWORD 0042AC48
:0042AE71 8FAC4200                DWORD 0042AC8F
:0042AE75 D3AC4200                DWORD 0042ACD3
:0042AE79 D3AC4200                DWORD 0042ACD3
:0042AE7D 8FAC4200                DWORD 0042AC8F



* Referenced by a CALL at Addresses:
|:004390B6   , :0043BE05   , :00448E9B   , :00449173   
|
:0042AE81 55                      push ebp
:0042AE82 8BEC                    mov ebp, esp
:0042AE84 83EC34                  sub esp, 00000034
:0042AE87 56                      push esi
:0042AE88 894DCC                  mov dword ptr [ebp-34], ecx
:0042AE8B 8B4508                  mov eax, dword ptr [ebp+08]
:0042AE8E 50                      push eax
:0042AE8F E83CBEFDFF              call 00406CD0
:0042AE94 83C404                  add esp, 00000004
:0042AE97 50                      push eax
:0042AE98 E892E8FFFF              call 0042972F
:0042AE9D 83C404                  add esp, 00000004
:0042AEA0 8845D8                  mov byte ptr [ebp-28], al
:0042AEA3 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0042AEA6 81E1FF000000            and ecx, 000000FF
:0042AEAC 81F9FF000000            cmp ecx, 000000FF
:0042AEB2 7507                    jne 0042AEBB
:0042AEB4 33C0                    xor eax, eax
:0042AEB6 E96C020000              jmp 0042B127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AEB2(C)
|
:0042AEBB 8B55D8                  mov edx, dword ptr [ebp-28]
:0042AEBE 81E2FF000000            and edx, 000000FF
:0042AEC4 6BD224                  imul edx, 00000024
:0042AEC7 81C208F54A00            add edx, 004AF508
:0042AECD 8955FC                  mov dword ptr [ebp-04], edx
:0042AED0 8B45CC                  mov eax, dword ptr [ebp-34]
:0042AED3 8B08                    mov ecx, dword ptr [eax]
:0042AED5 6BC970                  imul ecx, 00000070
:0042AED8 81C198224900            add ecx, 00492298
:0042AEDE 894DEC                  mov dword ptr [ebp-14], ecx
:0042AEE1 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042AEE4 E8F3F6FFFF              call 0042A5DC
:0042AEE9 8845E8                  mov byte ptr [ebp-18], al
:0042AEEC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AEEF E8E8F6FFFF              call 0042A5DC
:0042AEF4 8845E0                  mov byte ptr [ebp-20], al
:0042AEF7 C745F800000000          mov [ebp-08], 00000000
:0042AEFE C745F400000000          mov [ebp-0C], 00000000
:0042AF05 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042AF08 E838F5FFFF              call 0042A445
:0042AF0D 8945DC                  mov dword ptr [ebp-24], eax
:0042AF10 8B550C                  mov edx, dword ptr [ebp+0C]
:0042AF13 8955F0                  mov dword ptr [ebp-10], edx
:0042AF16 837D1000                cmp dword ptr [ebp+10], 00000000
:0042AF1A 7607                    jbe 0042AF23
:0042AF1C C745F000000000          mov [ebp-10], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AF1A(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0042AF23 6A09                    push 00000009
:0042AF25 8B45F0                  mov eax, dword ptr [ebp-10]
:0042AF28 50                      push eax
:0042AF29 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042AF2C E8E9FAFFFF              call 0042AA1A
:0042AF31 85C0                    test eax, eax
:0042AF33 7413                    je 0042AF48

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042AF35 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00013: ""
                                  |
:0042AF37 6A0D                    push 0000000D
:0042AF39 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042AF3C 51                      push ecx
:0042AF3D E81E700300              call 00461F60
:0042AF42 83C40C                  add esp, 0000000C
:0042AF45 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AF33(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042AF48 6A0A                    push 0000000A
:0042AF4A 8B55E8                  mov edx, dword ptr [ebp-18]
:0042AF4D 81E2FF000000            and edx, 000000FF
:0042AF53 52                      push edx
:0042AF54 8B45DC                  mov eax, dword ptr [ebp-24]
:0042AF57 50                      push eax
:0042AF58 E803700300              call 00461F60
:0042AF5D 83C40C                  add esp, 0000000C
:0042AF60 8945DC                  mov dword ptr [ebp-24], eax

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042AF63 6A0A                    push 0000000A
:0042AF65 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0042AF68 81E1FF000000            and ecx, 000000FF
:0042AF6E 51                      push ecx
:0042AF6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AF72 E84AF5FFFF              call 0042A4C1
:0042AF77 50                      push eax
:0042AF78 E8E36F0300              call 00461F60
:0042AF7D 83C40C                  add esp, 0000000C
:0042AF80 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042AF83 6A07                    push 00000007
:0042AF85 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042AF88 E83690FDFF              call 00403FC3
:0042AF8D 85C0                    test eax, eax
:0042AF8F 7449                    je 0042AFDA
:0042AF91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AF94 E8D798FDFF              call 00404870
:0042AF99 8BF0                    mov esi, eax
:0042AF9B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042AF9E E83D75FDFF              call 004024E0
:0042AFA3 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042AFA5 B905000000              mov ecx, 00000005
:0042AFAA F7F1                    div ecx
:0042AFAC 3BF0                    cmp esi, eax
:0042AFAE 772A                    ja 0042AFDA
:0042AFB0 6A01                    push 00000001
:0042AFB2 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042AFB5 E866480000              call 0042F820
:0042AFBA 50                      push eax

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042AFBB 6A07                    push 00000007
:0042AFBD B930024B00              mov ecx, 004B0230
:0042AFC2 E8DF240100              call 0043D4A6

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042AFC7 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00013: ""
                                  |
:0042AFC9 6A0D                    push 0000000D
:0042AFCB 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042AFCE 52                      push edx
:0042AFCF E88C6F0300              call 00461F60
:0042AFD4 83C40C                  add esp, 0000000C
:0042AFD7 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AF8F(C), :0042AFAE(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042AFDA 6A08                    push 00000008
:0042AFDC 8B45F0                  mov eax, dword ptr [ebp-10]
:0042AFDF 50                      push eax
:0042AFE0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AFE3 E832FAFFFF              call 0042AA1A
:0042AFE8 85C0                    test eax, eax
:0042AFEA 7432                    je 0042B01E

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042AFEC 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00013: ""
                                  |
:0042AFEE 6A0D                    push 0000000D
:0042AFF0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042AFF3 51                      push ecx
:0042AFF4 E8676F0300              call 00461F60
:0042AFF9 83C40C                  add esp, 0000000C
:0042AFFC 8945E4                  mov dword ptr [ebp-1C], eax
:0042AFFF 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042B003 7419                    je 0042B01E
:0042B005 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B007 6A03                    push 00000003

* Possible Reference to String Resource ID=00018: "G"
                                  |
:0042B009 6A12                    push 00000012
:0042B00B 8A55D8                  mov dl, byte ptr [ebp-28]
:0042B00E 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042B00F 68FF000000              push 000000FF
:0042B014 B9A8034B00              mov ecx, 004B03A8
:0042B019 E8B8B60100              call 004466D6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AFEA(C), :0042B003(C)
|
:0042B01E 8B4510                  mov eax, dword ptr [ebp+10]
:0042B021 50                      push eax
:0042B022 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B025 51                      push ecx
:0042B026 8A55D8                  mov dl, byte ptr [ebp-28]
:0042B029 52                      push edx
:0042B02A 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042B02D E87BFBFFFF              call 0042ABAD
:0042B032 85C0                    test eax, eax
:0042B034 7409                    je 0042B03F
:0042B036 C745F800000000          mov [ebp-08], 00000000
:0042B03D EB32                    jmp 0042B071

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B034(C)
|
:0042B03F 8B45DC                  mov eax, dword ptr [ebp-24]
:0042B042 3B45E4                  cmp eax, dword ptr [ebp-1C]
:0042B045 7712                    ja 0042B059
:0042B047 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042B04A E861480000              call 0042F8B0
:0042B04F 25FF000000              and eax, 000000FF
:0042B054 8945F8                  mov dword ptr [ebp-08], eax
:0042B057 EB18                    jmp 0042B071

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B045(C)
|
:0042B059 8B75DC                  mov esi, dword ptr [ebp-24]
:0042B05C 2B75E4                  sub esi, dword ptr [ebp-1C]
:0042B05F 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042B062 E849480000              call 0042F8B0
:0042B067 25FF000000              and eax, 000000FF
:0042B06C 03F0                    add esi, eax
:0042B06E 8975F8                  mov dword ptr [ebp-08], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B03D(U), :0042B057(U)
|
:0042B071 837DF801                cmp dword ptr [ebp-08], 00000001
:0042B075 0F86A9000000            jbe 0042B124
:0042B07B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B07E E85877FDFF              call 004027DB
:0042B083 8845D0                  mov byte ptr [ebp-30], al

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B086 C745D40A000000          mov [ebp-2C], 0000000A
:0042B08D 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0042B090 81E1FF000000            and ecx, 000000FF
:0042B096 83F906                  cmp ecx, 00000006
:0042B099 7F2F                    jg 0042B0CA
:0042B09B 8A55D0                  mov dl, byte ptr [ebp-30]
:0042B09E 52                      push edx
:0042B09F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B0A2 E8C941FEFF              call 0040F270
:0042B0A7 25FF000000              and eax, 000000FF
:0042B0AC 8945D4                  mov dword ptr [ebp-2C], eax
:0042B0AF 837DD400                cmp dword ptr [ebp-2C], 00000000
:0042B0B3 7415                    je 0042B0CA

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B0B5 6A0A                    push 0000000A
:0042B0B7 8B45D4                  mov eax, dword ptr [ebp-2C]
:0042B0BA 50                      push eax
:0042B0BB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B0BE 51                      push ecx
:0042B0BF E89C6E0300              call 00461F60
:0042B0C4 83C40C                  add esp, 0000000C
:0042B0C7 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B099(C), :0042B0B3(C)
|
:0042B0CA 8B55D0                  mov edx, dword ptr [ebp-30]
:0042B0CD 81E2FF000000            and edx, 000000FF
:0042B0D3 83FA05                  cmp edx, 00000005
:0042B0D6 754C                    jne 0042B124
:0042B0D8 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042B0DB E8AFFAFFFF              call 0042AB8F
:0042B0E0 25FF000000              and eax, 000000FF
:0042B0E5 85C0                    test eax, eax
:0042B0E7 743B                    je 0042B124
:0042B0E9 B9180A4B00              mov ecx, 004B0A18
:0042B0EE E8FBD20200              call 004583EE
:0042B0F3 25FF000000              and eax, 000000FF
:0042B0F8 83F802                  cmp eax, 00000002
:0042B0FB 7414                    je 0042B111
:0042B0FD B9180A4B00              mov ecx, 004B0A18
:0042B102 E8E7D20200              call 004583EE
:0042B107 25FF000000              and eax, 000000FF
:0042B10C 83F803                  cmp eax, 00000003
:0042B10F 7513                    jne 0042B124

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B0FB(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B111 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042B113 6A05                    push 00000005
:0042B115 8B45F8                  mov eax, dword ptr [ebp-08]
:0042B118 50                      push eax
:0042B119 E8426E0300              call 00461F60
:0042B11E 83C40C                  add esp, 0000000C
:0042B121 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B075(C), :0042B0D6(C), :0042B0E7(C), :0042B10F(C)
|
:0042B124 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AEB6(U)
|
:0042B127 5E                      pop esi
:0042B128 8BE5                    mov esp, ebp
:0042B12A 5D                      pop ebp
:0042B12B C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0042B2A5   
|
:0042B12E 55                      push ebp
:0042B12F 8BEC                    mov ebp, esp
:0042B131 83EC0C                  sub esp, 0000000C
:0042B134 894DF8                  mov dword ptr [ebp-08], ecx
:0042B137 C745FC00000000          mov [ebp-04], 00000000
:0042B13E 8B45F8                  mov eax, dword ptr [ebp-08]
:0042B141 83C005                  add eax, 00000005
:0042B144 50                      push eax
:0042B145 E835C80100              call 0044797F
:0042B14A 83C404                  add esp, 00000004
:0042B14D 25FF000000              and eax, 000000FF
:0042B152 8945F4                  mov dword ptr [ebp-0C], eax
:0042B155 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042B158 83E90F                  sub ecx, 0000000F
:0042B15B 894DF4                  mov dword ptr [ebp-0C], ecx
:0042B15E 837DF410                cmp dword ptr [ebp-0C], 00000010
:0042B162 7736                    ja 0042B19A
:0042B164 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042B167 33D2                    xor edx, edx
:0042B169 8A90E2B14200            mov dl, byte ptr [eax+0042B1E2]
:0042B16F FF2495CAB14200          jmp dword ptr [4*edx+0042B1CA]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B176 C745FC0A000000          mov [ebp-04], 0000000A
:0042B17D EB22                    jmp 0042B1A1

* Possible Reference to String Resource ID=00015: ""
                                  |
:0042B17F C745FC0F000000          mov [ebp-04], 0000000F
:0042B186 EB19                    jmp 0042B1A1
:0042B188 C745FC14000000          mov [ebp-04], 00000014
:0042B18F EB10                    jmp 0042B1A1
:0042B191 C745FC19000000          mov [ebp-04], 00000019
:0042B198 EB07                    jmp 0042B1A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B162(C)
|
:0042B19A C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B17D(U), :0042B186(U), :0042B18F(U), :0042B198(U)
|

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0042B1A1 6A0B                    push 0000000B
:0042B1A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B1A6 8B09                    mov ecx, dword ptr [ecx]
:0042B1A8 6BC970                  imul ecx, 00000070
:0042B1AB 81C198224900            add ecx, 00492298
:0042B1B1 E80D8EFDFF              call 00403FC3
:0042B1B6 85C0                    test eax, eax
:0042B1B8 7409                    je 0042B1C3
:0042B1BA 8B55FC                  mov edx, dword ptr [ebp-04]
:0042B1BD 83C214                  add edx, 00000014
:0042B1C0 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B1B8(C)
|
:0042B1C3 8B45FC                  mov eax, dword ptr [ebp-04]
:0042B1C6 8BE5                    mov esp, ebp
:0042B1C8 5D                      pop ebp
:0042B1C9 C3                      ret



:0042B1CA 91B14200                DWORD 0042B191
:0042B1CE 7FB14200                DWORD 0042B17F
:0042B1D2 76B14200                DWORD 0042B176
:0042B1D6 91B14200                DWORD 0042B191
:0042B1DA 88B14200                DWORD 0042B188
:0042B1DE 9AB14200                DWORD 0042B19A


:0042B1E2 0001                    add byte ptr [ecx], al
:0042B1E4 0202                    add al, byte ptr [edx]
:0042B1E6 0505050505              add eax, 05050505
:0042B1EB 0503050505              add eax, 05050503
:0042B1F0 05                      BYTE 05h
:0042B1F1 05                      BYTE 05h
:0042B1F2 04                      BYTE 04h


* Referenced by a CALL at Address:
|:004578DA   
|
:0042B1F3 55                      push ebp
:0042B1F4 8BEC                    mov ebp, esp
:0042B1F6 83EC20                  sub esp, 00000020
:0042B1F9 56                      push esi
:0042B1FA 894DE4                  mov dword ptr [ebp-1C], ecx
:0042B1FD 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042B200 8B08                    mov ecx, dword ptr [eax]
:0042B202 6BC970                  imul ecx, 00000070
:0042B205 81C198224900            add ecx, 00492298
:0042B20B 894DF8                  mov dword ptr [ebp-08], ecx
:0042B20E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B211 E85A96FDFF              call 00404870
:0042B216 8945F4                  mov dword ptr [ebp-0C], eax
:0042B219 C745FC00000000          mov [ebp-04], 00000000
:0042B220 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B223 E8A8460000              call 0042F8D0
:0042B228 25FF000000              and eax, 000000FF
:0042B22D 83F802                  cmp eax, 00000002
:0042B230 7405                    je 0042B237
:0042B232 E9A0020000              jmp 0042B4D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B230(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042B237 6A10                    push 00000010
:0042B239 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B23C E81F450000              call 0042F760
:0042B241 85C0                    test eax, eax
:0042B243 7405                    je 0042B24A
:0042B245 E98D020000              jmp 0042B4D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B243(C)
|
:0042B24A 6A00                    push 00000000
:0042B24C B9680C4B00              mov ecx, 004B0C68
:0042B251 E8AA440000              call 0042F700
:0042B256 6A00                    push 00000000
:0042B258 6A00                    push 00000000
:0042B25A E8E5DB0300              call 00468E44
:0042B25F 83C408                  add esp, 00000008

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B262 6A0A                    push 0000000A
:0042B264 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B267 E8578DFDFF              call 00403FC3
:0042B26C 85C0                    test eax, eax
:0042B26E 741D                    je 0042B28D
:0042B270 6A64                    push 00000064

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B272 6A0A                    push 0000000A
:0042B274 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B277 E86472FDFF              call 004024E0
:0042B27C 50                      push eax
:0042B27D E8DE6C0300              call 00461F60
:0042B282 83C40C                  add esp, 0000000C
:0042B285 8B55FC                  mov edx, dword ptr [ebp-04]
:0042B288 03D0                    add edx, eax
:0042B28A 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B26E(C)
|
:0042B28D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042B290 83C005                  add eax, 00000005
:0042B293 50                      push eax
:0042B294 E8F0C40100              call 00447789
:0042B299 83C404                  add esp, 00000004
:0042B29C 85C0                    test eax, eax
:0042B29E 7424                    je 0042B2C4
:0042B2A0 6A64                    push 00000064
:0042B2A2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B2A5 E884FEFFFF              call 0042B12E
:0042B2AA 50                      push eax
:0042B2AB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B2AE E82D72FDFF              call 004024E0
:0042B2B3 50                      push eax
:0042B2B4 E8A76C0300              call 00461F60
:0042B2B9 83C40C                  add esp, 0000000C
:0042B2BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042B2BF 03C8                    add ecx, eax
:0042B2C1 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B29E(C)
|
:0042B2C4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B2C7 E8A495FDFF              call 00404870
:0042B2CC 8BF0                    mov esi, eax
:0042B2CE 0375FC                  add esi, dword ptr [ebp-04]
:0042B2D1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B2D4 E80772FDFF              call 004024E0
:0042B2D9 3BF0                    cmp esi, eax
:0042B2DB 7617                    jbe 0042B2F4
:0042B2DD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B2E0 E8FB71FDFF              call 004024E0
:0042B2E5 8BF0                    mov esi, eax
:0042B2E7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B2EA E88195FDFF              call 00404870
:0042B2EF 2BF0                    sub esi, eax
:0042B2F1 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B2DB(C)
|
:0042B2F4 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042B2F8 771D                    ja 0042B317
:0042B2FA 6A00                    push 00000000
:0042B2FC 6A01                    push 00000001
:0042B2FE E841DB0300              call 00468E44
:0042B303 83C408                  add esp, 00000008
:0042B306 6A01                    push 00000001
:0042B308 B9680C4B00              mov ecx, 004B0C68
:0042B30D E8EE430000              call 0042F700
:0042B312 E9C0010000              jmp 0042B4D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B2F8(C)
|
:0042B317 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B31A E8D1450000              call 0042F8F0
:0042B31F 25FF000000              and eax, 000000FF
:0042B324 83F807                  cmp eax, 00000007
:0042B327 0F8557010000            jne 0042B484
:0042B32D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B330 E83B95FDFF              call 00404870
:0042B335 8BF0                    mov esi, eax
:0042B337 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B33A E8A171FDFF              call 004024E0
:0042B33F 3BF0                    cmp esi, eax
:0042B341 0F833D010000            jnb 0042B484
:0042B347 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042B34A 8A4206                  mov al, byte ptr [edx+06]
:0042B34D 50                      push eax
:0042B34E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B351 8A5105                  mov dl, byte ptr [ecx+05]
:0042B354 52                      push edx
:0042B355 B9A8034B00              mov ecx, 004B03A8
:0042B35A E8D8A60100              call 00445A37
:0042B35F 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B361 6A03                    push 00000003

* Possible Reference to String Resource ID=00015: ""
                                  |
:0042B363 6A0F                    push 0000000F
:0042B365 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042B368 8A4804                  mov cl, byte ptr [eax+04]
:0042B36B 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042B36C 68FF000000              push 000000FF
:0042B371 B9A8034B00              mov ecx, 004B03A8
:0042B376 E85BB30100              call 004466D6
:0042B37B 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042B37E 8A4204                  mov al, byte ptr [edx+04]
:0042B381 50                      push eax
:0042B382 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0042B385 51                      push ecx
:0042B386 E8A56D0100              call 00442130
:0042B38B 83C408                  add esp, 00000008
:0042B38E B9A8034B00              mov ecx, 004B03A8
:0042B393 E8F1B40100              call 00446889
:0042B398 2B05F4E44700            sub eax, dword ptr [0047E4F4]
:0042B39E 83C010                  add eax, 00000010
:0042B3A1 99                      cdq
:0042B3A2 83E20F                  and edx, 0000000F
:0042B3A5 03C2                    add eax, edx
:0042B3A7 C1F804                  sar eax, 04
:0042B3AA 8945F0                  mov dword ptr [ebp-10], eax
:0042B3AD 8B55F0                  mov edx, dword ptr [ebp-10]
:0042B3B0 D1FA                    sar edx, 1
:0042B3B2 8855EC                  mov byte ptr [ebp-14], dl
:0042B3B5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B3B8 E8133FFEFF              call 0040F2D0
:0042B3BD 85C0                    test eax, eax
:0042B3BF 7411                    je 0042B3D2
:0042B3C1 8B45EC                  mov eax, dword ptr [ebp-14]
:0042B3C4 25FF000000              and eax, 000000FF
:0042B3C9 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:0042B3CD 894DE0                  mov dword ptr [ebp-20], ecx
:0042B3D0 EB10                    jmp 0042B3E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B3BF(C)
|
:0042B3D2 8B55EC                  mov edx, dword ptr [ebp-14]
:0042B3D5 81E2FF000000            and edx, 000000FF
:0042B3DB 8D44122A                lea eax, dword ptr [edx+edx+2A]
:0042B3DF 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B3D0(U)
|
:0042B3E2 8A4DE0                  mov cl, byte ptr [ebp-20]
:0042B3E5 884DE8                  mov byte ptr [ebp-18], cl
:0042B3E8 33D2                    xor edx, edx
:0042B3EA 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:0042B3F0 8D441206                lea eax, dword ptr [edx+edx+06]
:0042B3F4 50                      push eax
:0042B3F5 B9F8F44A00              mov ecx, 004AF4F8
:0042B3FA E891A0FFFF              call 00425490
:0042B3FF 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B402 8A5104                  mov dl, byte ptr [ecx+04]
:0042B405 52                      push edx
:0042B406 668B45E8                mov ax, word ptr [ebp-18]
:0042B40A 50                      push eax
:0042B40B E8CC6D0100              call 004421DC
:0042B410 83C408                  add esp, 00000008
:0042B413 E878B7FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B418 6A03                    push 00000003
:0042B41A E825B9FFFF              call 00426D44
:0042B41F 83C404                  add esp, 00000004
:0042B422 33C9                    xor ecx, ecx
:0042B424 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:0042B42A 8D540906                lea edx, dword ptr [ecx+ecx+06]
:0042B42E 52                      push edx
:0042B42F B9F8F44A00              mov ecx, 004AF4F8
:0042B434 E857A0FFFF              call 00425490
:0042B439 6880000000              push 00000080
:0042B43E 8B45FC                  mov eax, dword ptr [ebp-04]
:0042B441 50                      push eax
:0042B442 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B445 8A5104                  mov dl, byte ptr [ecx+04]
:0042B448 52                      push edx
:0042B449 668B45E8                mov ax, word ptr [ebp-18]
:0042B44D 50                      push eax
:0042B44E E839700100              call 0044248C
:0042B453 83C410                  add esp, 00000010
:0042B456 E835B7FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B45B 6A03                    push 00000003
:0042B45D E8E2B8FFFF              call 00426D44
:0042B462 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0042B465 6A09                    push 00000009
:0042B467 6A21                    push 00000021
:0042B469 8A4DE9                  mov cl, byte ptr [ebp-17]
:0042B46C 51                      push ecx
:0042B46D 8B55EC                  mov edx, dword ptr [ebp-14]
:0042B470 81E2FF000000            and edx, 000000FF
:0042B476 83C206                  add edx, 00000006
:0042B479 52                      push edx
:0042B47A B9A8034B00              mov ecx, 004B03A8
:0042B47F E842930100              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B327(C), :0042B341(C)
|
:0042B484 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B487 E8E493FDFF              call 00404870
:0042B48C 0345FC                  add eax, dword ptr [ebp-04]
:0042B48F 50                      push eax
:0042B490 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B493 E8C8F4FFFF              call 0042A960
:0042B498 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B49B E8D093FDFF              call 00404870
:0042B4A0 8BF0                    mov esi, eax
:0042B4A2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B4A5 E83670FDFF              call 004024E0
:0042B4AA 3BF0                    cmp esi, eax
:0042B4AC 7611                    jbe 0042B4BF
:0042B4AE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B4B1 E82A70FDFF              call 004024E0
:0042B4B6 50                      push eax
:0042B4B7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042B4BA E8A1F4FFFF              call 0042A960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B4AC(C)
|
:0042B4BF 6A00                    push 00000000
:0042B4C1 6A01                    push 00000001
:0042B4C3 E87CD90300              call 00468E44
:0042B4C8 83C408                  add esp, 00000008
:0042B4CB 6A01                    push 00000001
:0042B4CD B9680C4B00              mov ecx, 004B0C68
:0042B4D2 E829420000              call 0042F700

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B232(U), :0042B245(U), :0042B312(U)
|
:0042B4D7 5E                      pop esi
:0042B4D8 8BE5                    mov esp, ebp
:0042B4DA 5D                      pop ebp
:0042B4DB C3                      ret



* Referenced by a CALL at Addresses:
|:00455FFE   , :004578F1   
|
:0042B4DC 55                      push ebp
:0042B4DD 8BEC                    mov ebp, esp
:0042B4DF 83EC1C                  sub esp, 0000001C
:0042B4E2 56                      push esi
:0042B4E3 894DE8                  mov dword ptr [ebp-18], ecx
:0042B4E6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B4E9 E8E2430000              call 0042F8D0
:0042B4EE 25FF000000              and eax, 000000FF
:0042B4F3 83F802                  cmp eax, 00000002
:0042B4F6 7405                    je 0042B4FD
:0042B4F8 E916020000              jmp 0042B713

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B4F6(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042B4FD 6A10                    push 00000010
:0042B4FF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B502 E859420000              call 0042F760
:0042B507 85C0                    test eax, eax
:0042B509 7405                    je 0042B510
:0042B50B E903020000              jmp 0042B713

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B509(C)
|
:0042B510 8B45E8                  mov eax, dword ptr [ebp-18]
:0042B513 8B08                    mov ecx, dword ptr [eax]
:0042B515 6BC970                  imul ecx, 00000070
:0042B518 81C198224900            add ecx, 00492298
:0042B51E 894DEC                  mov dword ptr [ebp-14], ecx

* Possible Reference to String Resource ID=00012: ""
                                  |
:0042B521 6A0C                    push 0000000C
:0042B523 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B526 E8988AFDFF              call 00403FC3
:0042B52B 85C0                    test eax, eax
:0042B52D 7505                    jne 0042B534
:0042B52F E9DF010000              jmp 0042B713

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B52D(C)
|
:0042B534 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B537 E8D56FFDFF              call 00402511
:0042B53C 8BF0                    mov esi, eax
:0042B53E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B541 E86A93FDFF              call 004048B0
:0042B546 3BF0                    cmp esi, eax
:0042B548 7705                    ja 0042B54F
:0042B54A E9C4010000              jmp 0042B713

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B548(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B54F 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042B551 6A05                    push 00000005
:0042B553 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B556 E8B66FFDFF              call 00402511
:0042B55B 50                      push eax
:0042B55C E8FF690300              call 00461F60
:0042B561 83C40C                  add esp, 0000000C
:0042B564 8945FC                  mov dword ptr [ebp-04], eax
:0042B567 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B56A E83E6FFDFF              call 004024AD
:0042B56F 33D2                    xor edx, edx
:0042B571 B914000000              mov ecx, 00000014
:0042B576 F7F1                    div ecx
:0042B578 83C001                  add eax, 00000001
:0042B57B 50                      push eax
:0042B57C E8346B0300              call 004620B5
:0042B581 83C404                  add esp, 00000004
:0042B584 8B55FC                  mov edx, dword ptr [ebp-04]
:0042B587 03D0                    add edx, eax
:0042B589 8955FC                  mov dword ptr [ebp-04], edx
:0042B58C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B58F E87D6FFDFF              call 00402511
:0042B594 8BF0                    mov esi, eax
:0042B596 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B599 E81293FDFF              call 004048B0
:0042B59E 0345FC                  add eax, dword ptr [ebp-04]
:0042B5A1 3BF0                    cmp esi, eax
:0042B5A3 7317                    jnb 0042B5BC
:0042B5A5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B5A8 E8646FFDFF              call 00402511
:0042B5AD 8BF0                    mov esi, eax
:0042B5AF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B5B2 E8F992FDFF              call 004048B0
:0042B5B7 2BF0                    sub esi, eax
:0042B5B9 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B5A3(C)
|
:0042B5BC 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B5BE 6A03                    push 00000003

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042B5C0 6A10                    push 00000010
:0042B5C2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B5C5 E856420000              call 0042F820
:0042B5CA 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042B5CB 68FF000000              push 000000FF
:0042B5D0 B9A8034B00              mov ecx, 004B03A8
:0042B5D5 E8FCB00100              call 004466D6
:0042B5DA 8B45E8                  mov eax, dword ptr [ebp-18]
:0042B5DD 8A4806                  mov cl, byte ptr [eax+06]
:0042B5E0 51                      push ecx
:0042B5E1 8B55E8                  mov edx, dword ptr [ebp-18]
:0042B5E4 8A4205                  mov al, byte ptr [edx+05]
:0042B5E7 50                      push eax
:0042B5E8 B9A8034B00              mov ecx, 004B03A8
:0042B5ED E845A40100              call 00445A37
:0042B5F2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B5F5 E826420000              call 0042F820
:0042B5FA 50                      push eax
:0042B5FB 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042B5FE 51                      push ecx
:0042B5FF E82C6B0100              call 00442130
:0042B604 83C408                  add esp, 00000008
:0042B607 B9A8034B00              mov ecx, 004B03A8
:0042B60C E878B20100              call 00446889
:0042B611 2B05F4E44700            sub eax, dword ptr [0047E4F4]
:0042B617 83C010                  add eax, 00000010
:0042B61A 99                      cdq
:0042B61B 83E20F                  and edx, 0000000F
:0042B61E 03C2                    add eax, edx
:0042B620 C1F804                  sar eax, 04
:0042B623 8945F8                  mov dword ptr [ebp-08], eax
:0042B626 8B55F8                  mov edx, dword ptr [ebp-08]
:0042B629 D1FA                    sar edx, 1
:0042B62B 8855F4                  mov byte ptr [ebp-0C], dl
:0042B62E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B631 E89A3CFEFF              call 0040F2D0
:0042B636 85C0                    test eax, eax
:0042B638 7411                    je 0042B64B
:0042B63A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042B63D 25FF000000              and eax, 000000FF
:0042B642 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:0042B646 894DE4                  mov dword ptr [ebp-1C], ecx
:0042B649 EB10                    jmp 0042B65B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B638(C)
|
:0042B64B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042B64E 81E2FF000000            and edx, 000000FF
:0042B654 8D44122A                lea eax, dword ptr [edx+edx+2A]
:0042B658 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B649(U)
|
:0042B65B 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0042B65E 884DF0                  mov byte ptr [ebp-10], cl
:0042B661 33D2                    xor edx, edx
:0042B663 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:0042B669 8D441206                lea eax, dword ptr [edx+edx+06]
:0042B66D 50                      push eax
:0042B66E B9F8F44A00              mov ecx, 004AF4F8
:0042B673 E8189EFFFF              call 00425490
:0042B678 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B67B 8A5104                  mov dl, byte ptr [ecx+04]
:0042B67E 52                      push edx
:0042B67F 668B45F0                mov ax, word ptr [ebp-10]
:0042B683 50                      push eax
:0042B684 E8536B0100              call 004421DC
:0042B689 83C408                  add esp, 00000008
:0042B68C E8FFB4FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B691 6A03                    push 00000003
:0042B693 E8ACB6FFFF              call 00426D44
:0042B698 83C404                  add esp, 00000004
:0042B69B 33C9                    xor ecx, ecx
:0042B69D 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:0042B6A3 8D540906                lea edx, dword ptr [ecx+ecx+06]
:0042B6A7 52                      push edx
:0042B6A8 B9F8F44A00              mov ecx, 004AF4F8
:0042B6AD E8DE9DFFFF              call 00425490
:0042B6B2 6881000000              push 00000081
:0042B6B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042B6BA 50                      push eax
:0042B6BB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B6BE 8A5104                  mov dl, byte ptr [ecx+04]
:0042B6C1 52                      push edx
:0042B6C2 668B45F0                mov ax, word ptr [ebp-10]
:0042B6C6 50                      push eax
:0042B6C7 E8C06D0100              call 0044248C
:0042B6CC 83C410                  add esp, 00000010
:0042B6CF E8BCB4FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B6D4 6A03                    push 00000003
:0042B6D6 E869B6FFFF              call 00426D44
:0042B6DB 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0042B6DE 6A09                    push 00000009
:0042B6E0 6A21                    push 00000021
:0042B6E2 8A4DF1                  mov cl, byte ptr [ebp-0F]
:0042B6E5 51                      push ecx
:0042B6E6 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042B6E9 81E2FF000000            and edx, 000000FF
:0042B6EF 83C206                  add edx, 00000006
:0042B6F2 52                      push edx
:0042B6F3 B9A8034B00              mov ecx, 004B03A8
:0042B6F8 E8C9900100              call 004447C6
:0042B6FD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B700 E8AB91FDFF              call 004048B0
:0042B705 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042B708 03C8                    add ecx, eax
:0042B70A 51                      push ecx
:0042B70B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B70E E8AAF2FFFF              call 0042A9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B4F8(U), :0042B50B(U), :0042B52F(U), :0042B54A(U)
|
:0042B713 5E                      pop esi
:0042B714 8BE5                    mov esp, ebp
:0042B716 5D                      pop ebp
:0042B717 C3                      ret



* Referenced by a CALL at Addresses:
|:0042BD01   , :0042BD2A   , :0042BD4B   , :0042BD6C   
|
:0042B718 55                      push ebp
:0042B719 8BEC                    mov ebp, esp
:0042B71B 83EC0C                  sub esp, 0000000C
:0042B71E 56                      push esi
:0042B71F 894DF4                  mov dword ptr [ebp-0C], ecx
:0042B722 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042B725 8B08                    mov ecx, dword ptr [eax]
:0042B727 6BC970                  imul ecx, 00000070
:0042B72A 81C198224900            add ecx, 00492298
:0042B730 894DF8                  mov dword ptr [ebp-08], ecx
:0042B733 6A64                    push 00000064
:0042B735 E87B690300              call 004620B5
:0042B73A 83C404                  add esp, 00000004
:0042B73D 8845FC                  mov byte ptr [ebp-04], al
:0042B740 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B743 E8DE6CFDFF              call 00402426
:0042B748 8BF0                    mov esi, eax
:0042B74A C1EE02                  shr esi, 02
:0042B74D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042B750 E8BB410000              call 0042F910
:0042B755 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B757 B90A000000              mov ecx, 0000000A
:0042B75C F7F1                    div ecx
:0042B75E 8D54060A                lea edx, dword ptr [esi+eax+0A]
:0042B762 8B45FC                  mov eax, dword ptr [ebp-04]
:0042B765 25FF000000              and eax, 000000FF
:0042B76A 3BD0                    cmp edx, eax
:0042B76C 761A                    jbe 0042B788
:0042B76E 6A01                    push 00000001
:0042B770 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0042B773 51                      push ecx
:0042B774 8A5508                  mov dl, byte ptr [ebp+08]
:0042B777 52                      push edx
:0042B778 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042B77B 8B08                    mov ecx, dword ptr [eax]
:0042B77D 51                      push ecx
:0042B77E B9880B4B00              mov ecx, 004B0B88
:0042B783 E817E30200              call 00459A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B76C(C)
|
:0042B788 5E                      pop esi
:0042B789 8BE5                    mov esp, ebp
:0042B78B 5D                      pop ebp
:0042B78C C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0042BC0F   , :0042BC3B   , :0042BC93   , :0042BCBF   
|
:0042B78F 55                      push ebp
:0042B790 8BEC                    mov ebp, esp
:0042B792 83EC18                  sub esp, 00000018
:0042B795 56                      push esi
:0042B796 894DEC                  mov dword ptr [ebp-14], ecx
:0042B799 C745F400000000          mov [ebp-0C], 00000000
:0042B7A0 8B45EC                  mov eax, dword ptr [ebp-14]
:0042B7A3 8B08                    mov ecx, dword ptr [eax]
:0042B7A5 6BC970                  imul ecx, 00000070
:0042B7A8 81C198224900            add ecx, 00492298
:0042B7AE 894DF0                  mov dword ptr [ebp-10], ecx
:0042B7B1 C645F800                mov [ebp-08], 00
:0042B7B5 8B5510                  mov edx, dword ptr [ebp+10]
:0042B7B8 81E2FF000000            and edx, 000000FF
:0042B7BE 83FA01                  cmp edx, 00000001
:0042B7C1 7505                    jne 0042B7C8
:0042B7C3 E981000000              jmp 0042B849

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B7C1(C)
|
:0042B7C8 8A4510                  mov al, byte ptr [ebp+10]
:0042B7CB 8845E8                  mov byte ptr [ebp-18], al
:0042B7CE 807DE800                cmp byte ptr [ebp-18], 00
:0042B7D2 7408                    je 0042B7DC
:0042B7D4 807DE802                cmp byte ptr [ebp-18], 02
:0042B7D8 7408                    je 0042B7E2
:0042B7DA EB0C                    jmp 0042B7E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B7D2(C)
|
:0042B7DC C645F80A                mov [ebp-08], 0A
:0042B7E0 EB0A                    jmp 0042B7EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B7D8(C)
|
:0042B7E2 C645F81E                mov [ebp-08], 1E
:0042B7E6 EB04                    jmp 0042B7EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B7DA(U)
|
:0042B7E8 C645F800                mov [ebp-08], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B7E0(U), :0042B7E6(U)
|
:0042B7EC 6A64                    push 00000064
:0042B7EE E8C2680300              call 004620B5
:0042B7F3 83C404                  add esp, 00000004
:0042B7F6 8845FC                  mov byte ptr [ebp-04], al
:0042B7F9 8B75F8                  mov esi, dword ptr [ebp-08]
:0042B7FC 81E6FF000000            and esi, 000000FF
:0042B802 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042B805 E81C6CFDFF              call 00402426
:0042B80A C1E802                  shr eax, 02
:0042B80D 03F0                    add esi, eax
:0042B80F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042B812 E8F9400000              call 0042F910
:0042B817 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B819 B90A000000              mov ecx, 0000000A
:0042B81E F7F1                    div ecx
:0042B820 03F0                    add esi, eax
:0042B822 8B55FC                  mov edx, dword ptr [ebp-04]
:0042B825 81E2FF000000            and edx, 000000FF
:0042B82B 3BF2                    cmp esi, edx
:0042B82D 761A                    jbe 0042B849
:0042B82F 6A01                    push 00000001
:0042B831 8A450C                  mov al, byte ptr [ebp+0C]
:0042B834 50                      push eax
:0042B835 8A4D08                  mov cl, byte ptr [ebp+08]
:0042B838 51                      push ecx
:0042B839 8B55EC                  mov edx, dword ptr [ebp-14]
:0042B83C 8B02                    mov eax, dword ptr [edx]
:0042B83E 50                      push eax
:0042B83F B9880B4B00              mov ecx, 004B0B88
:0042B844 E856E20200              call 00459A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B7C3(U), :0042B82D(C)
|
:0042B849 5E                      pop esi
:0042B84A 8BE5                    mov esp, ebp
:0042B84C 5D                      pop ebp
:0042B84D C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0042BA74   
|
:0042B850 55                      push ebp
:0042B851 8BEC                    mov ebp, esp
:0042B853 83EC08                  sub esp, 00000008
:0042B856 894DF8                  mov dword ptr [ebp-08], ecx
:0042B859 C745FC00000000          mov [ebp-04], 00000000
:0042B860 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B863 E8E8400000              call 0042F950
:0042B868 25FF000000              and eax, 000000FF
:0042B86D 83E040                  and eax, 00000040
:0042B870 85C0                    test eax, eax
:0042B872 7472                    je 0042B8E6
:0042B874 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B877 E8A43E0000              call 0042F720
:0042B87C 25FF000000              and eax, 000000FF
:0042B881 24BF                    and al, BF
:0042B883 50                      push eax
:0042B884 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B887 E8A4400000              call 0042F930
:0042B88C 8B45F8                  mov eax, dword ptr [ebp-08]
:0042B88F 33C9                    xor ecx, ecx
:0042B891 8A4819                  mov cl, byte ptr [eax+19]
:0042B894 83F901                  cmp ecx, 00000001
:0042B897 7E27                    jle 0042B8C0
:0042B899 6A00                    push 00000000
:0042B89B 8B55F8                  mov edx, dword ptr [ebp-08]
:0042B89E 33C0                    xor eax, eax
:0042B8A0 8A4219                  mov al, byte ptr [edx+19]
:0042B8A3 83E801                  sub eax, 00000001
:0042B8A6 50                      push eax
:0042B8A7 6A00                    push 00000000
:0042B8A9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B8AC 8B11                    mov edx, dword ptr [ecx]
:0042B8AE 52                      push edx
:0042B8AF B9880B4B00              mov ecx, 004B0B88
:0042B8B4 E8E6E10200              call 00459A9F
:0042B8B9 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B897(C)
|
:0042B8C0 8B45F8                  mov eax, dword ptr [ebp-08]
:0042B8C3 33C9                    xor ecx, ecx
:0042B8C5 8A4819                  mov cl, byte ptr [eax+19]
:0042B8C8 83F901                  cmp ecx, 00000001
:0042B8CB 7D19                    jge 0042B8E6
:0042B8CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B8D0 E84B3E0000              call 0042F720
:0042B8D5 25FF000000              and eax, 000000FF
:0042B8DA 83E040                  and eax, 00000040
:0042B8DD 50                      push eax
:0042B8DE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B8E1 E84A400000              call 0042F930

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B872(C), :0042B8CB(C)
|
:0042B8E6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B8E9 E8A2400000              call 0042F990
:0042B8EE 25FF000000              and eax, 000000FF
:0042B8F3 83E040                  and eax, 00000040
:0042B8F6 85C0                    test eax, eax
:0042B8F8 7472                    je 0042B96C
:0042B8FA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B8FD E83E3E0000              call 0042F740
:0042B902 25FF000000              and eax, 000000FF
:0042B907 24BF                    and al, BF
:0042B909 50                      push eax
:0042B90A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B90D E85E400000              call 0042F970
:0042B912 8B55F8                  mov edx, dword ptr [ebp-08]
:0042B915 33C0                    xor eax, eax
:0042B917 8A421A                  mov al, byte ptr [edx+1A]
:0042B91A 83F801                  cmp eax, 00000001
:0042B91D 7E27                    jle 0042B946
:0042B91F 6A00                    push 00000000
:0042B921 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B924 33D2                    xor edx, edx
:0042B926 8A511A                  mov dl, byte ptr [ecx+1A]
:0042B929 83EA01                  sub edx, 00000001
:0042B92C 52                      push edx
:0042B92D 6A01                    push 00000001
:0042B92F 8B45F8                  mov eax, dword ptr [ebp-08]
:0042B932 8B08                    mov ecx, dword ptr [eax]
:0042B934 51                      push ecx
:0042B935 B9880B4B00              mov ecx, 004B0B88
:0042B93A E860E10200              call 00459A9F
:0042B93F C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B91D(C)
|
:0042B946 8B55F8                  mov edx, dword ptr [ebp-08]
:0042B949 33C0                    xor eax, eax
:0042B94B 8A421A                  mov al, byte ptr [edx+1A]
:0042B94E 83F801                  cmp eax, 00000001
:0042B951 7D19                    jge 0042B96C
:0042B953 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B956 E8E53D0000              call 0042F740
:0042B95B 25FF000000              and eax, 000000FF
:0042B960 83E040                  and eax, 00000040
:0042B963 50                      push eax
:0042B964 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B967 E804400000              call 0042F970

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B8F8(C), :0042B951(C)
|
:0042B96C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B96F E83C400000              call 0042F9B0
:0042B974 25FF000000              and eax, 000000FF
:0042B979 83E040                  and eax, 00000040
:0042B97C 85C0                    test eax, eax
:0042B97E 740A                    je 0042B98A
:0042B980 6A40                    push 00000040
:0042B982 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B985 E846400000              call 0042F9D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B97E(C)
|
:0042B98A 6A01                    push 00000001
:0042B98C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B98F E8CC3D0000              call 0042F760
:0042B994 85C0                    test eax, eax
:0042B996 7420                    je 0042B9B8
:0042B998 6A00                    push 00000000
:0042B99A 6881000000              push 00000081

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B99F 6A03                    push 00000003
:0042B9A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B9A4 8B11                    mov edx, dword ptr [ecx]
:0042B9A6 52                      push edx
:0042B9A7 B9880B4B00              mov ecx, 004B0B88
:0042B9AC E8EEE00200              call 00459A9F
:0042B9B1 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B996(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042B9B8 6A04                    push 00000004
:0042B9BA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B9BD E89E3D0000              call 0042F760
:0042B9C2 85C0                    test eax, eax
:0042B9C4 7420                    je 0042B9E6
:0042B9C6 6A00                    push 00000000
:0042B9C8 6884000000              push 00000084

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B9CD 6A03                    push 00000003
:0042B9CF 8B45F8                  mov eax, dword ptr [ebp-08]
:0042B9D2 8B08                    mov ecx, dword ptr [eax]
:0042B9D4 51                      push ecx
:0042B9D5 B9880B4B00              mov ecx, 004B0B88
:0042B9DA E8C0E00200              call 00459A9F
:0042B9DF C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B9C4(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042B9E6 6A10                    push 00000010
:0042B9E8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B9EB E8703D0000              call 0042F760
:0042B9F0 85C0                    test eax, eax
:0042B9F2 7428                    je 0042BA1C
:0042B9F4 6A00                    push 00000000
:0042B9F6 6890000000              push 00000090

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042B9FB 6A03                    push 00000003
:0042B9FD 8B55F8                  mov edx, dword ptr [ebp-08]
:0042BA00 8B02                    mov eax, dword ptr [edx]
:0042BA02 50                      push eax
:0042BA03 B9880B4B00              mov ecx, 004B0B88
:0042BA08 E892E00200              call 00459A9F
:0042BA0D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BA10 E833120000              call 0042CC48
:0042BA15 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B9F2(C)
|
:0042BA1C 6A20                    push 00000020
:0042BA1E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BA21 E83A3D0000              call 0042F760
:0042BA26 85C0                    test eax, eax
:0042BA28 7420                    je 0042BA4A
:0042BA2A 6A00                    push 00000000

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:0042BA2C 68A0000000              push 000000A0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BA31 6A03                    push 00000003
:0042BA33 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BA36 8B11                    mov edx, dword ptr [ecx]
:0042BA38 52                      push edx
:0042BA39 B9880B4B00              mov ecx, 004B0B88
:0042BA3E E85CE00200              call 00459A9F
:0042BA43 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BA28(C)
|
:0042BA4A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BA4D 8BE5                    mov esp, ebp
:0042BA4F 5D                      pop ebp
:0042BA50 C3                      ret



* Referenced by a CALL at Address:
|:0042BBAE   
|
:0042BA51 55                      push ebp
:0042BA52 8BEC                    mov ebp, esp
:0042BA54 51                      push ecx
:0042BA55 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to String Resource ID=00014: ""
                                  |
:0042BA58 6A0E                    push 0000000E
:0042BA5A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BA5D 8B08                    mov ecx, dword ptr [eax]
:0042BA5F 6BC970                  imul ecx, 00000070
:0042BA62 81C198224900            add ecx, 00492298
:0042BA68 E85685FDFF              call 00403FC3
:0042BA6D 85C0                    test eax, eax
:0042BA6F 7416                    je 0042BA87
:0042BA71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BA74 E8D7FDFFFF              call 0042B850
:0042BA79 85C0                    test eax, eax
:0042BA7B 740A                    je 0042BA87
:0042BA7D B801000000              mov eax, 00000001
:0042BA82 E902010000              jmp 0042BB89

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BA6F(C), :0042BA7B(C)
|

* Possible Reference to String Resource ID=00015: ""
                                  |
:0042BA87 6A0F                    push 0000000F
:0042BA89 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BA8C 8B09                    mov ecx, dword ptr [ecx]
:0042BA8E 6BC970                  imul ecx, 00000070
:0042BA91 81C198224900            add ecx, 00492298
:0042BA97 E82785FDFF              call 00403FC3
:0042BA9C 85C0                    test eax, eax
:0042BA9E 7427                    je 0042BAC7
:0042BAA0 6A01                    push 00000001
:0042BAA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BAA5 E8B63C0000              call 0042F760
:0042BAAA 85C0                    test eax, eax
:0042BAAC 7419                    je 0042BAC7
:0042BAAE 6A00                    push 00000000
:0042BAB0 6881000000              push 00000081

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BAB5 6A03                    push 00000003
:0042BAB7 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BABA 8B02                    mov eax, dword ptr [edx]
:0042BABC 50                      push eax
:0042BABD B9880B4B00              mov ecx, 004B0B88
:0042BAC2 E8D8DF0200              call 00459A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BA9E(C), :0042BAAC(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042BAC7 6A10                    push 00000010
:0042BAC9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BACC 8B09                    mov ecx, dword ptr [ecx]
:0042BACE 6BC970                  imul ecx, 00000070
:0042BAD1 81C198224900            add ecx, 00492298
:0042BAD7 E8E784FDFF              call 00403FC3
:0042BADC 85C0                    test eax, eax
:0042BADE 7427                    je 0042BB07

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042BAE0 6A10                    push 00000010
:0042BAE2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BAE5 E8763C0000              call 0042F760
:0042BAEA 85C0                    test eax, eax
:0042BAEC 7419                    je 0042BB07
:0042BAEE 6A00                    push 00000000
:0042BAF0 6890000000              push 00000090

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BAF5 6A03                    push 00000003
:0042BAF7 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BAFA 8B02                    mov eax, dword ptr [edx]
:0042BAFC 50                      push eax
:0042BAFD B9880B4B00              mov ecx, 004B0B88
:0042BB02 E898DF0200              call 00459A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BADE(C), :0042BAEC(C)
|

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0042BB07 6A11                    push 00000011
:0042BB09 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BB0C 8B09                    mov ecx, dword ptr [ecx]
:0042BB0E 6BC970                  imul ecx, 00000070
:0042BB11 81C198224900            add ecx, 00492298
:0042BB17 E8A784FDFF              call 00403FC3
:0042BB1C 85C0                    test eax, eax
:0042BB1E 7427                    je 0042BB47
:0042BB20 6A20                    push 00000020
:0042BB22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BB25 E8363C0000              call 0042F760
:0042BB2A 85C0                    test eax, eax
:0042BB2C 7419                    je 0042BB47
:0042BB2E 6A00                    push 00000000

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:0042BB30 68A0000000              push 000000A0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BB35 6A03                    push 00000003
:0042BB37 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BB3A 8B02                    mov eax, dword ptr [edx]
:0042BB3C 50                      push eax
:0042BB3D B9880B4B00              mov ecx, 004B0B88
:0042BB42 E858DF0200              call 00459A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BB1E(C), :0042BB2C(C)
|

* Possible Reference to String Resource ID=00018: "G"
                                  |
:0042BB47 6A12                    push 00000012
:0042BB49 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BB4C 8B09                    mov ecx, dword ptr [ecx]
:0042BB4E 6BC970                  imul ecx, 00000070
:0042BB51 81C198224900            add ecx, 00492298
:0042BB57 E86784FDFF              call 00403FC3
:0042BB5C 85C0                    test eax, eax
:0042BB5E 7427                    je 0042BB87

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BB60 6A04                    push 00000004
:0042BB62 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BB65 E8F63B0000              call 0042F760
:0042BB6A 85C0                    test eax, eax
:0042BB6C 7419                    je 0042BB87
:0042BB6E 6A00                    push 00000000
:0042BB70 6884000000              push 00000084

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BB75 6A03                    push 00000003
:0042BB77 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BB7A 8B02                    mov eax, dword ptr [edx]
:0042BB7C 50                      push eax
:0042BB7D B9880B4B00              mov ecx, 004B0B88
:0042BB82 E818DF0200              call 00459A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BB5E(C), :0042BB6C(C)
|
:0042BB87 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BA82(U)
|
:0042BB89 8BE5                    mov esp, ebp
:0042BB8B 5D                      pop ebp
:0042BB8C C3                      ret



* Referenced by a CALL at Addresses:
|:00456015   , :00457B31   
|
:0042BB8D 55                      push ebp
:0042BB8E 8BEC                    mov ebp, esp
:0042BB90 51                      push ecx
:0042BB91 894DFC                  mov dword ptr [ebp-04], ecx
:0042BB94 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BB97 E8343D0000              call 0042F8D0
:0042BB9C 25FF000000              and eax, 000000FF
:0042BBA1 83F802                  cmp eax, 00000002
:0042BBA4 7405                    je 0042BBAB
:0042BBA6 E9C6010000              jmp 0042BD71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BBA4(C)
|
:0042BBAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BBAE E89EFEFFFF              call 0042BA51
:0042BBB3 85C0                    test eax, eax
:0042BBB5 7405                    je 0042BBBC
:0042BBB7 E9B5010000              jmp 0042BD71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BBB5(C)
|
:0042BBBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BBBF E88C3D0000              call 0042F950
:0042BBC4 25FF000000              and eax, 000000FF
:0042BBC9 83E040                  and eax, 00000040
:0042BBCC 85C0                    test eax, eax
:0042BBCE 741A                    je 0042BBEA
:0042BBD0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BBD3 E8483B0000              call 0042F720
:0042BBD8 25FF000000              and eax, 000000FF
:0042BBDD 24BF                    and al, BF
:0042BBDF 50                      push eax
:0042BBE0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BBE3 E8483D0000              call 0042F930
:0042BBE8 EB56                    jmp 0042BC40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BBCE(C)
|
:0042BBEA 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BBED 33C9                    xor ecx, ecx
:0042BBEF 8A4819                  mov cl, byte ptr [eax+19]
:0042BBF2 83F901                  cmp ecx, 00000001
:0042BBF5 7E1F                    jle 0042BC16
:0042BBF7 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BBFA 8A4219                  mov al, byte ptr [edx+19]
:0042BBFD 50                      push eax
:0042BBFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC01 33D2                    xor edx, edx
:0042BC03 8A5119                  mov dl, byte ptr [ecx+19]
:0042BC06 83EA01                  sub edx, 00000001
:0042BC09 52                      push edx
:0042BC0A 6A00                    push 00000000
:0042BC0C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC0F E87BFBFFFF              call 0042B78F
:0042BC14 EB2A                    jmp 0042BC40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BBF5(C)
|
:0042BC16 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BC19 33C9                    xor ecx, ecx
:0042BC1B 8A4819                  mov cl, byte ptr [eax+19]
:0042BC1E 83F901                  cmp ecx, 00000001
:0042BC21 7D1D                    jge 0042BC40
:0042BC23 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BC26 8A4219                  mov al, byte ptr [edx+19]
:0042BC29 50                      push eax
:0042BC2A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC2D 33D2                    xor edx, edx
:0042BC2F 8A5119                  mov dl, byte ptr [ecx+19]
:0042BC32 83C201                  add edx, 00000001
:0042BC35 52                      push edx
:0042BC36 6A00                    push 00000000
:0042BC38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC3B E84FFBFFFF              call 0042B78F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BBE8(U), :0042BC14(U), :0042BC21(C)
|
:0042BC40 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC43 E8483D0000              call 0042F990
:0042BC48 25FF000000              and eax, 000000FF
:0042BC4D 83E040                  and eax, 00000040
:0042BC50 85C0                    test eax, eax
:0042BC52 741A                    je 0042BC6E
:0042BC54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC57 E8E43A0000              call 0042F740
:0042BC5C 25FF000000              and eax, 000000FF
:0042BC61 24BF                    and al, BF
:0042BC63 50                      push eax
:0042BC64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC67 E8043D0000              call 0042F970
:0042BC6C EB56                    jmp 0042BCC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BC52(C)
|
:0042BC6E 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BC71 33C9                    xor ecx, ecx
:0042BC73 8A481A                  mov cl, byte ptr [eax+1A]
:0042BC76 83F901                  cmp ecx, 00000001
:0042BC79 7E1F                    jle 0042BC9A
:0042BC7B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BC7E 8A421A                  mov al, byte ptr [edx+1A]
:0042BC81 50                      push eax
:0042BC82 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC85 33D2                    xor edx, edx
:0042BC87 8A511A                  mov dl, byte ptr [ecx+1A]
:0042BC8A 83EA01                  sub edx, 00000001
:0042BC8D 52                      push edx
:0042BC8E 6A01                    push 00000001
:0042BC90 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC93 E8F7FAFFFF              call 0042B78F
:0042BC98 EB2A                    jmp 0042BCC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BC79(C)
|
:0042BC9A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BC9D 33C9                    xor ecx, ecx
:0042BC9F 8A481A                  mov cl, byte ptr [eax+1A]
:0042BCA2 83F901                  cmp ecx, 00000001
:0042BCA5 7D1D                    jge 0042BCC4
:0042BCA7 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BCAA 8A421A                  mov al, byte ptr [edx+1A]
:0042BCAD 50                      push eax
:0042BCAE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BCB1 33D2                    xor edx, edx
:0042BCB3 8A511A                  mov dl, byte ptr [ecx+1A]
:0042BCB6 83C201                  add edx, 00000001
:0042BCB9 52                      push edx
:0042BCBA 6A01                    push 00000001
:0042BCBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BCBF E8CBFAFFFF              call 0042B78F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BC6C(U), :0042BC98(U), :0042BCA5(C)
|
:0042BCC4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BCC7 E8E43C0000              call 0042F9B0
:0042BCCC 25FF000000              and eax, 000000FF
:0042BCD1 83E040                  and eax, 00000040
:0042BCD4 85C0                    test eax, eax
:0042BCD6 740F                    je 0042BCE7
:0042BCD8 6A40                    push 00000040
:0042BCDA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BCDD E8EE3C0000              call 0042F9D0
:0042BCE2 E98A000000              jmp 0042BD71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BCD6(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042BCE7 6A10                    push 00000010
:0042BCE9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BCEC E86F3A0000              call 0042F760
:0042BCF1 85C0                    test eax, eax
:0042BCF3 741B                    je 0042BD10

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042BCF5 6A02                    push 00000002
:0042BCF7 6890000000              push 00000090

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BCFC 6A03                    push 00000003
:0042BCFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD01 E812FAFFFF              call 0042B718
:0042BD06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD09 E83A0F0000              call 0042CC48
:0042BD0E EB61                    jmp 0042BD71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BCF3(C)
|
:0042BD10 6A01                    push 00000001
:0042BD12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD15 E8463A0000              call 0042F760
:0042BD1A 85C0                    test eax, eax
:0042BD1C 7413                    je 0042BD31

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042BD1E 6A02                    push 00000002
:0042BD20 6881000000              push 00000081

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BD25 6A03                    push 00000003
:0042BD27 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD2A E8E9F9FFFF              call 0042B718
:0042BD2F EB40                    jmp 0042BD71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BD1C(C)
|
:0042BD31 6A20                    push 00000020
:0042BD33 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD36 E8253A0000              call 0042F760
:0042BD3B 85C0                    test eax, eax
:0042BD3D 7413                    je 0042BD52

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042BD3F 6A02                    push 00000002

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:0042BD41 68A0000000              push 000000A0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BD46 6A03                    push 00000003
:0042BD48 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD4B E8C8F9FFFF              call 0042B718
:0042BD50 EB1F                    jmp 0042BD71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BD3D(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BD52 6A04                    push 00000004
:0042BD54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD57 E8043A0000              call 0042F760
:0042BD5C 85C0                    test eax, eax
:0042BD5E 7411                    je 0042BD71

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042BD60 6A02                    push 00000002
:0042BD62 6884000000              push 00000084

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042BD67 6A03                    push 00000003
:0042BD69 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD6C E8A7F9FFFF              call 0042B718

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BBA6(U), :0042BBB7(U), :0042BCE2(U), :0042BD0E(U), :0042BD2F(U)
|:0042BD50(U), :0042BD5E(C)
|
:0042BD71 8BE5                    mov esp, ebp
:0042BD73 5D                      pop ebp
:0042BD74 C3                      ret



* Referenced by a CALL at Address:
|:0045583E   
|
:0042BD75 55                      push ebp
:0042BD76 8BEC                    mov ebp, esp
:0042BD78 83EC14                  sub esp, 00000014
:0042BD7B 53                      push ebx
:0042BD7C 56                      push esi
:0042BD7D 894DEC                  mov dword ptr [ebp-14], ecx
:0042BD80 8B45EC                  mov eax, dword ptr [ebp-14]
:0042BD83 8B08                    mov ecx, dword ptr [eax]
:0042BD85 6BC970                  imul ecx, 00000070
:0042BD88 81C198224900            add ecx, 00492298
:0042BD8E 894DFC                  mov dword ptr [ebp-04], ecx
:0042BD91 8A5508                  mov dl, byte ptr [ebp+08]
:0042BD94 52                      push edx
:0042BD95 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD98 E8138AFDFF              call 004047B0
:0042BD9D B9C8E24A00              mov ecx, 004AE2C8
:0042BDA2 E80936FEFF              call 0040F3B0
:0042BDA7 25FF000000              and eax, 000000FF
:0042BDAC 83F868                  cmp eax, 00000068
:0042BDAF 0F8525010000            jne 0042BEDA
:0042BDB5 8B45EC                  mov eax, dword ptr [ebp-14]
:0042BDB8 833801                  cmp dword ptr [eax], 00000001
:0042BDBB 0F8519010000            jne 0042BEDA
:0042BDC1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042BDC4 8B09                    mov ecx, dword ptr [ecx]
:0042BDC6 6BC970                  imul ecx, 00000070
:0042BDC9 81C198224900            add ecx, 00492298
:0042BDCF E8FC89FDFF              call 004047D0
:0042BDD4 8845F0                  mov byte ptr [ebp-10], al
:0042BDD7 C745F401000000          mov [ebp-0C], 00000001
:0042BDDE EB09                    jmp 0042BDE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BE17(U)
|
:0042BDE0 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042BDE3 83C201                  add edx, 00000001
:0042BDE6 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BDDE(U)
|
:0042BDE9 8B450C                  mov eax, dword ptr [ebp+0C]
:0042BDEC 25FF000000              and eax, 000000FF
:0042BDF1 3945F4                  cmp dword ptr [ebp-0C], eax
:0042BDF4 7723                    ja 0042BE19
:0042BDF6 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0042BDF9 51                      push ecx
:0042BDFA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BDFD E8FE3B0000              call 0042FA00
:0042BE02 6A00                    push 00000000
:0042BE04 8B55EC                  mov edx, dword ptr [ebp-14]
:0042BE07 8B0A                    mov ecx, dword ptr [edx]
:0042BE09 6BC970                  imul ecx, 00000070
:0042BE0C 81C198224900            add ecx, 00492298
:0042BE12 E84E7FFDFF              call 00403D65
:0042BE17 EBC7                    jmp 0042BDE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BDF4(C)
|
:0042BE19 8B45EC                  mov eax, dword ptr [ebp-14]
:0042BE1C 8B08                    mov ecx, dword ptr [eax]
:0042BE1E 6BC970                  imul ecx, 00000070
:0042BE21 81C198224900            add ecx, 00492298
:0042BE27 E8537EFDFF              call 00403C7F
:0042BE2C 8945F8                  mov dword ptr [ebp-08], eax
:0042BE2F 837DF800                cmp dword ptr [ebp-08], 00000000
:0042BE33 0F849F000000            je 0042BED8
:0042BE39 C745F400000000          mov [ebp-0C], 00000000
:0042BE40 EB09                    jmp 0042BE4B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BE6A(U), :0042BED3(U)
|
:0042BE42 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042BE45 83C101                  add ecx, 00000001
:0042BE48 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BE40(U)
|
:0042BE4B 837DF420                cmp dword ptr [ebp-0C], 00000020
:0042BE4F 0F8383000000            jnb 0042BED8
:0042BE55 8A55F4                  mov dl, byte ptr [ebp-0C]
:0042BE58 52                      push edx
:0042BE59 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BE5C E80F86FDFF              call 00404470
:0042BE61 25FF000000              and eax, 000000FF
:0042BE66 85C0                    test eax, eax
:0042BE68 7502                    jne 0042BE6C
:0042BE6A EBD6                    jmp 0042BE42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BE68(C)
|
:0042BE6C 8B75F0                  mov esi, dword ptr [ebp-10]
:0042BE6F 81E6FF000000            and esi, 000000FF
:0042BE75 8A45F4                  mov al, byte ptr [ebp-0C]
:0042BE78 50                      push eax
:0042BE79 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BE7C E8EF85FDFF              call 00404470
:0042BE81 25FF000000              and eax, 000000FF
:0042BE86 3BF0                    cmp esi, eax
:0042BE88 7D49                    jge 0042BED3
:0042BE8A 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0042BE8D 51                      push ecx
:0042BE8E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BE91 E8DA85FDFF              call 00404470
:0042BE96 8AD8                    mov bl, al
:0042BE98 81E3FF000000            and ebx, 000000FF
:0042BE9E 8B55EC                  mov edx, dword ptr [ebp-14]
:0042BEA1 8B0A                    mov ecx, dword ptr [edx]
:0042BEA3 6BC970                  imul ecx, 00000070
:0042BEA6 81C198224900            add ecx, 00492298
:0042BEAC E81F89FDFF              call 004047D0
:0042BEB1 25FF000000              and eax, 000000FF
:0042BEB6 3BD8                    cmp ebx, eax
:0042BEB8 7F19                    jg 0042BED3
:0042BEBA 6A00                    push 00000000
:0042BEBC 8A45F4                  mov al, byte ptr [ebp-0C]
:0042BEBF 50                      push eax
:0042BEC0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042BEC3 8B09                    mov ecx, dword ptr [ecx]
:0042BEC5 6BC970                  imul ecx, 00000070
:0042BEC8 81C198224900            add ecx, 00492298
:0042BECE E84B81FDFF              call 0040401E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BE88(C), :0042BEB8(C)
|
:0042BED3 E96AFFFFFF              jmp 0042BE42

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BE33(C), :0042BE4F(C)
|
:0042BED8 EB0C                    jmp 0042BEE6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BDAF(C), :0042BDBB(C)
|
:0042BEDA 8A550C                  mov dl, byte ptr [ebp+0C]
:0042BEDD 52                      push edx
:0042BEDE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BEE1 E81A3B0000              call 0042FA00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BED8(U)
|
:0042BEE6 8B45EC                  mov eax, dword ptr [ebp-14]
:0042BEE9 33C9                    xor ecx, ecx
:0042BEEB 8A480C                  mov cl, byte ptr [eax+0C]
:0042BEEE 83E110                  and ecx, 00000010
:0042BEF1 8B55EC                  mov edx, dword ptr [ebp-14]
:0042BEF4 884A0C                  mov byte ptr [edx+0C], cl
:0042BEF7 6A20                    push 00000020
:0042BEF9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042BEFC E818350000              call 0042F419
:0042BF01 5E                      pop esi
:0042BF02 5B                      pop ebx
:0042BF03 8BE5                    mov esp, ebp
:0042BF05 5D                      pop ebp
:0042BF06 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00446EC0   , :004555BA   , :004557BF   
|
:0042BF09 55                      push ebp
:0042BF0A 8BEC                    mov ebp, esp
:0042BF0C 51                      push ecx
:0042BF0D 894DFC                  mov dword ptr [ebp-04], ecx
:0042BF10 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BF13 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042BF16 8908                    mov dword ptr [eax], ecx
:0042BF18 6A01                    push 00000001
:0042BF1A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BF1D E8FE3A0000              call 0042FA20
:0042BF22 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BF25 C6421901                mov [edx+19], 01
:0042BF29 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BF2C C6401A01                mov [eax+1A], 01
:0042BF30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BF33 C6411C00                mov [ecx+1C], 00
:0042BF37 8BE5                    mov esp, ebp
:0042BF39 5D                      pop ebp
:0042BF3A C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00455784   , :004559D0   
|
:0042BF3D 55                      push ebp
:0042BF3E 8BEC                    mov ebp, esp
:0042BF40 83EC0C                  sub esp, 0000000C
:0042BF43 894DF4                  mov dword ptr [ebp-0C], ecx
:0042BF46 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042BF49 8B08                    mov ecx, dword ptr [eax]
:0042BF4B 6BC970                  imul ecx, 00000070
:0042BF4E 81C198224900            add ecx, 00492298
:0042BF54 894DF8                  mov dword ptr [ebp-08], ecx
:0042BF57 8B5508                  mov edx, dword ptr [ebp+08]
:0042BF5A 81E2FF000000            and edx, 000000FF
:0042BF60 85D2                    test edx, edx
:0042BF62 7546                    jne 0042BFAA
:0042BF64 C745FC00000000          mov [ebp-04], 00000000
:0042BF6B EB09                    jmp 0042BF76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BFA6(U)
|
:0042BF6D 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BF70 83C001                  add eax, 00000001
:0042BF73 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BF6B(U)
|
:0042BF76 837DFC08                cmp dword ptr [ebp-04], 00000008
:0042BF7A 732C                    jnb 0042BFA8
:0042BF7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BF7F 51                      push ecx
:0042BF80 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042BF83 8B0A                    mov ecx, dword ptr [edx]
:0042BF85 6BC970                  imul ecx, 00000070
:0042BF88 81C198224900            add ecx, 00492298
:0042BF8E E88D70FDFF              call 00403020
:0042BF93 50                      push eax
:0042BF94 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BF97 50                      push eax
:0042BF98 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042BF9B 8B11                    mov edx, dword ptr [ecx]
:0042BF9D 52                      push edx
:0042BF9E E87B5BFDFF              call 00401B1E
:0042BFA3 83C40C                  add esp, 0000000C
:0042BFA6 EBC5                    jmp 0042BF6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BF7A(C)
|
:0042BFA8 EB3C                    jmp 0042BFE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BF62(C)
|
:0042BFAA 8A4508                  mov al, byte ptr [ebp+08]
:0042BFAD 50                      push eax
:0042BFAE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BFB1 E88A3A0000              call 0042FA40
:0042BFB6 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0042BFB9 51                      push ecx
:0042BFBA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BFBD E8BE3A0000              call 0042FA80
:0042BFC2 8A5510                  mov dl, byte ptr [ebp+10]
:0042BFC5 52                      push edx
:0042BFC6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BFC9 E8923A0000              call 0042FA60
:0042BFCE 8B4514                  mov eax, dword ptr [ebp+14]
:0042BFD1 50                      push eax
:0042BFD2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BFD5 E8E6DA0000              call 00439AC0
:0042BFDA 8A4D18                  mov cl, byte ptr [ebp+18]
:0042BFDD 51                      push ecx
:0042BFDE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BFE1 E8BA3A0000              call 0042FAA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BFA8(U)
|
:0042BFE6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BFE9 E8F264FDFF              call 004024E0
:0042BFEE 50                      push eax
:0042BFEF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042BFF2 E869E9FFFF              call 0042A960
:0042BFF7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BFFA E81265FDFF              call 00402511
:0042BFFF 50                      push eax
:0042C000 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C003 E8B5E9FFFF              call 0042A9BD
:0042C008 8BE5                    mov esp, ebp
:0042C00A 5D                      pop ebp
:0042C00B C21400                  ret 0014



* Referenced by a CALL at Addresses:
|:004556ED   , :0045593A   
|
:0042C00E 55                      push ebp
:0042C00F 8BEC                    mov ebp, esp
:0042C011 83EC08                  sub esp, 00000008
:0042C014 894DF8                  mov dword ptr [ebp-08], ecx
:0042C017 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:0042C01E 7207                    jb 0042C027
:0042C020 33C0                    xor eax, eax
:0042C022 E9B5000000              jmp 0042C0DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C01E(C)
|
:0042C027 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C02A E8A1380000              call 0042F8D0
:0042C02F 25FF000000              and eax, 000000FF
:0042C034 85C0                    test eax, eax
:0042C036 7507                    jne 0042C03F
:0042C038 33C0                    xor eax, eax
:0042C03A E99D000000              jmp 0042C0DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C036(C)
|
:0042C03F 8B4508                  mov eax, dword ptr [ebp+08]
:0042C042 50                      push eax
:0042C043 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C046 8B09                    mov ecx, dword ptr [ecx]
:0042C048 6BC970                  imul ecx, 00000070
:0042C04B 81C198224900            add ecx, 00492298
:0042C051 E8375CFDFF              call 00401C8D
:0042C056 85C0                    test eax, eax
:0042C058 7504                    jne 0042C05E
:0042C05A 33C0                    xor eax, eax
:0042C05C EB7E                    jmp 0042C0DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C058(C)
|
:0042C05E 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C061 8B0A                    mov ecx, dword ptr [edx]
:0042C063 6BC970                  imul ecx, 00000070
:0042C066 81C198224900            add ecx, 00492298
:0042C06C E87F87FDFF              call 004047F0
:0042C071 8845FC                  mov byte ptr [ebp-04], al
:0042C074 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C077 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C07C 3DFF000000              cmp eax, 000000FF
:0042C081 741C                    je 0042C09F

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C083 68FF000000              push 000000FF
:0042C088 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042C08B 51                      push ecx
:0042C08C 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C08F 8B0A                    mov ecx, dword ptr [edx]
:0042C091 6BC970                  imul ecx, 00000070
:0042C094 81C198224900            add ecx, 00492298
:0042C09A E89187FDFF              call 00404830

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C081(C)
|
:0042C09F 8B4508                  mov eax, dword ptr [ebp+08]
:0042C0A2 50                      push eax
:0042C0A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C0A6 8B09                    mov ecx, dword ptr [ecx]
:0042C0A8 6BC970                  imul ecx, 00000070
:0042C0AB 81C198224900            add ecx, 00492298
:0042C0B1 E88369FDFF              call 00402A39
:0042C0B6 8845FC                  mov byte ptr [ebp-04], al
:0042C0B9 8B55FC                  mov edx, dword ptr [ebp-04]
:0042C0BC 81E2FF000000            and edx, 000000FF
:0042C0C2 83FA08                  cmp edx, 00000008
:0042C0C5 7C04                    jl 0042C0CB
:0042C0C7 33C0                    xor eax, eax
:0042C0C9 EB11                    jmp 0042C0DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C0C5(C)
|
:0042C0CB 8A45FC                  mov al, byte ptr [ebp-04]
:0042C0CE 50                      push eax
:0042C0CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C0D2 E829340000              call 0042F500
:0042C0D7 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C022(U), :0042C03A(U), :0042C05C(U), :0042C0C9(U)
|
:0042C0DC 8BE5                    mov esp, ebp
:0042C0DE 5D                      pop ebp
:0042C0DF C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00446CFA   , :0044722D   , :00455081   , :00455B9B   , :004595C8   
|
:0042C0E2 55                      push ebp
:0042C0E3 8BEC                    mov ebp, esp
:0042C0E5 51                      push ecx
:0042C0E6 894DFC                  mov dword ptr [ebp-04], ecx
:0042C0E9 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C0EC C70000000000            mov dword ptr [eax], 00000000
:0042C0F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C0F5 8A5508                  mov dl, byte ptr [ebp+08]
:0042C0F8 885104                  mov byte ptr [ecx+04], dl
:0042C0FB 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C0FE C64005FF                mov [eax+05], FF
:0042C102 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C105 C64106FF                mov [ecx+06], FF
:0042C109 8B55FC                  mov edx, dword ptr [ebp-04]
:0042C10C C64207FF                mov [edx+07], FF
:0042C110 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C113 C6400D00                mov [eax+0D], 00
:0042C117 6A00                    push 00000000
:0042C119 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C11C E8FF380000              call 0042FA20
:0042C121 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C124 C6410C00                mov [ecx+0C], 00
:0042C128 8B55FC                  mov edx, dword ptr [ebp-04]
:0042C12B C6421E00                mov [edx+1E], 00
:0042C12F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C132 C6401800                mov [eax+18], 00
:0042C136 6A20                    push 00000020
:0042C138 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C13B E8D9320000              call 0042F419
:0042C140 6A00                    push 00000000
:0042C142 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C145 E8F6B40100              call 00447640
:0042C14A 8BE5                    mov esp, ebp
:0042C14C 5D                      pop ebp
:0042C14D C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042C36A   , :0042C482   , :0042C55B   , :0042DEC2   , :004478ED   
|:00447908   
|
:0042C150 55                      push ebp
:0042C151 8BEC                    mov ebp, esp
:0042C153 83EC08                  sub esp, 00000008
:0042C156 894DF8                  mov dword ptr [ebp-08], ecx
:0042C159 8B45F8                  mov eax, dword ptr [ebp-08]
:0042C15C 33C9                    xor ecx, ecx
:0042C15E 8A480E                  mov cl, byte ptr [eax+0E]
:0042C161 85C9                    test ecx, ecx
:0042C163 740D                    je 0042C172
:0042C165 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C168 33C0                    xor eax, eax
:0042C16A 8A420E                  mov al, byte ptr [edx+0E]
:0042C16D 83F802                  cmp eax, 00000002
:0042C170 750B                    jne 0042C17D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C163(C)
|
:0042C172 837D0800                cmp dword ptr [ebp+08], 00000000
:0042C176 7505                    jne 0042C17D
:0042C178 E9E8000000              jmp 0042C265

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C170(C), :0042C176(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C17D 6A10                    push 00000010
:0042C17F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C182 E869390000              call 0042FAF0
:0042C187 394508                  cmp dword ptr [ebp+08], eax
:0042C18A 0F84D5000000            je 0042C265
:0042C190 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C193 33D2                    xor edx, edx
:0042C195 8A5104                  mov dl, byte ptr [ecx+04]
:0042C198 69D2005A0000            imul edx, 00005A00
:0042C19E 81C200120000            add edx, 00001200
:0042C1A4 52                      push edx
:0042C1A5 B920414A00              mov ecx, 004A4120
:0042C1AA E8EF73FEFF              call 0041359E
:0042C1AF 8945FC                  mov dword ptr [ebp-04], eax
:0042C1B2 6A00                    push 00000000
:0042C1B4 B960DF4A00              mov ecx, 004ADF60
:0042C1B9 E8E073FEFF              call 0041359E
:0042C1BE 50                      push eax
:0042C1BF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C1C2 50                      push eax
:0042C1C3 6A60                    push 00000060
:0042C1C5 6A30                    push 00000030
:0042C1C7 E86B75FEFF              call 00413737
:0042C1CC 83C410                  add esp, 00000010
:0042C1CF 6800120000              push 00001200
:0042C1D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C1D7 51                      push ecx
:0042C1D8 6A00                    push 00000000
:0042C1DA B960DF4A00              mov ecx, 004ADF60
:0042C1DF E8BA73FEFF              call 0041359E
:0042C1E4 50                      push eax
:0042C1E5 E845660300              call 0046282F
:0042C1EA 83C40C                  add esp, 0000000C
:0042C1ED 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C1F0 33C0                    xor eax, eax
:0042C1F2 8A4204                  mov al, byte ptr [edx+04]
:0042C1F5 69C0005A0000            imul eax, 00005A00
:0042C1FB 05003F0000              add eax, 00003F00
:0042C200 50                      push eax
:0042C201 B920414A00              mov ecx, 004A4120
:0042C206 E89373FEFF              call 0041359E
:0042C20B 8945FC                  mov dword ptr [ebp-04], eax
:0042C20E 6A00                    push 00000000
:0042C210 B960DF4A00              mov ecx, 004ADF60
:0042C215 E88473FEFF              call 0041359E
:0042C21A 50                      push eax
:0042C21B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C21E 51                      push ecx
:0042C21F 6A30                    push 00000030
:0042C221 6A30                    push 00000030
:0042C223 E80F75FEFF              call 00413737
:0042C228 83C410                  add esp, 00000010
:0042C22B 6800090000              push 00000900
:0042C230 8B55FC                  mov edx, dword ptr [ebp-04]
:0042C233 52                      push edx
:0042C234 6A00                    push 00000000
:0042C236 B960DF4A00              mov ecx, 004ADF60
:0042C23B E85E73FEFF              call 0041359E
:0042C240 50                      push eax
:0042C241 E8E9650300              call 0046282F
:0042C246 83C40C                  add esp, 0000000C
:0042C249 837D0800                cmp dword ptr [ebp+08], 00000000
:0042C24D 740C                    je 0042C25B

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C24F 6A10                    push 00000010
:0042C251 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C254 E8C0310000              call 0042F419
:0042C259 EB0A                    jmp 0042C265

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C24D(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C25B 6A10                    push 00000010
:0042C25D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C260 E85B380000              call 0042FAC0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C178(U), :0042C18A(C), :0042C259(U)
|
:0042C265 8BE5                    mov esp, ebp
:0042C267 5D                      pop ebp
:0042C268 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042C31C   , :0043B608   , :0043B887   , :0043DD59   , :0043F2C5   
|
:0042C26B 55                      push ebp
:0042C26C 8BEC                    mov ebp, esp
:0042C26E 51                      push ecx
:0042C26F 894DFC                  mov dword ptr [ebp-04], ecx
:0042C272 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C275 E85630FEFF              call 0040F2D0
:0042C27A 85C0                    test eax, eax
:0042C27C 7506                    jne 0042C284
:0042C27E 66B85500                mov ax, 0055
:0042C282 EB1F                    jmp 0042C2A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C27C(C)
|
:0042C284 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C287 E844340000              call 0042F6D0
:0042C28C 50                      push eax
:0042C28D E88E46FEFF              call 00410920
:0042C292 83C404                  add esp, 00000004
:0042C295 85C0                    test eax, eax
:0042C297 7406                    je 0042C29F
:0042C299 66B85400                mov ax, 0054
:0042C29D EB04                    jmp 0042C2A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C297(C)
|
:0042C29F 66B85600                mov ax, 0056

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C282(U), :0042C29D(U)
|
:0042C2A3 8BE5                    mov esp, ebp
:0042C2A5 5D                      pop ebp
:0042C2A6 C3                      ret



* Referenced by a CALL at Addresses:
|:0042C4AB   , :0042C4D4   , :0042CC80   , :0042DD10   , :0042E02E   
|:0042E666   , :0042ECCF   
|
:0042C2A7 55                      push ebp
:0042C2A8 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C2AA 6AFF                    push FFFFFFFF
:0042C2AC 68CB394700              push 004739CB
:0042C2B1 64A100000000            mov eax, dword ptr fs:[00000000]
:0042C2B7 50                      push eax
:0042C2B8 64892500000000          mov dword ptr fs:[00000000], esp
:0042C2BF 81EC10010000            sub esp, 00000110
:0042C2C5 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:0042C2CB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C2D1 E82AB4FDFF              call 00407700
:0042C2D6 C745FC00000000          mov [ebp-04], 00000000
:0042C2DD 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0042C2E3 33C9                    xor ecx, ecx
:0042C2E5 8A4804                  mov cl, byte ptr [eax+04]
:0042C2E8 69C9005A0000            imul ecx, 00005A00
:0042C2EE 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx

* Possible StringData Ref from Data Obj ->"CHR_BS.E4"
                                  |
:0042C2F4 68607B4700              push 00477B60
:0042C2F9 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C2FF E83180FEFF              call 00414335
:0042C304 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042C30A 52                      push edx
:0042C30B B920414A00              mov ecx, 004A4120
:0042C310 E88972FEFF              call 0041359E
:0042C315 50                      push eax
:0042C316 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0042C31C E84AFFFFFF              call 0042C26B
:0042C321 25FFFF0000              and eax, 0000FFFF
:0042C326 50                      push eax
:0042C327 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C32D E85781FEFF              call 00414489
:0042C332 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C338 E8CF42FEFF              call 0041060C

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C33D 6A10                    push 00000010
:0042C33F 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0042C345 E8A6370000              call 0042FAF0
:0042C34A 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C350 6A10                    push 00000010
:0042C352 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0042C358 E863370000              call 0042FAC0
:0042C35D 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042C363 50                      push eax
:0042C364 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0042C36A E8E1FDFFFF              call 0042C150
:0042C36F 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0042C375 C6411E01                mov [ecx+1E], 01
:0042C379 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C380 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C386 E895B3FDFF              call 00407720
:0042C38B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C38E 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042C395 8BE5                    mov esp, ebp
:0042C397 5D                      pop ebp
:0042C398 C3                      ret



* Referenced by a CALL at Addresses:
|:0042C4DE   , :0042CCA0   , :0042E041   , :0042E679   , :0042ECE2   
|:004333AE   , :00458DEE   
|
:0042C399 55                      push ebp
:0042C39A 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C39C 6AFF                    push FFFFFFFF
:0042C39E 68E1394700              push 004739E1
:0042C3A3 64A100000000            mov eax, dword ptr fs:[00000000]
:0042C3A9 50                      push eax
:0042C3AA 64892500000000          mov dword ptr fs:[00000000], esp
:0042C3B1 81EC14010000            sub esp, 00000114
:0042C3B7 898DE0FEFFFF            mov dword ptr [ebp+FFFFFEE0], ecx
:0042C3BD 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042C3C3 E8DE300000              call 0042F4A6
:0042C3C8 85C0                    test eax, eax
:0042C3CA 0F84D5000000            je 0042C4A5
:0042C3D0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042C3D6 E825B3FDFF              call 00407700
:0042C3DB C745FC00000000          mov [ebp-04], 00000000
:0042C3E2 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0042C3E8 33C9                    xor ecx, ecx
:0042C3EA 8A4804                  mov cl, byte ptr [eax+04]
:0042C3ED 69C9005A0000            imul ecx, 00005A00
:0042C3F3 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:0042C3F9 8B95E0FEFFFF            mov edx, dword ptr [ebp+FFFFFEE0]
:0042C3FF 33C0                    xor eax, eax
:0042C401 8A4204                  mov al, byte ptr [edx+04]
:0042C404 50                      push eax
:0042C405 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042C40B E8F2D3FFFF              call 00429802
:0042C410 8845F0                  mov byte ptr [ebp-10], al

* Possible StringData Ref from Data Obj ->"CHR_BS.E4"
                                  |
:0042C413 68607B4700              push 00477B60
:0042C418 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042C41E E8127FFEFF              call 00414335
:0042C423 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0042C429 51                      push ecx
:0042C42A B920414A00              mov ecx, 004A4120
:0042C42F E86A71FEFF              call 0041359E
:0042C434 50                      push eax
:0042C435 8B55F0                  mov edx, dword ptr [ebp-10]
:0042C438 81E2FF000000            and edx, 000000FF
:0042C43E 52                      push edx
:0042C43F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042C445 E83F80FEFF              call 00414489
:0042C44A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042C450 E8B741FEFF              call 0041060C

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C455 6A10                    push 00000010
:0042C457 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042C45D E88E360000              call 0042FAF0
:0042C462 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C468 6A10                    push 00000010
:0042C46A 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042C470 E84B360000              call 0042FAC0
:0042C475 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0042C47B 50                      push eax
:0042C47C 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042C482 E8C9FCFFFF              call 0042C150
:0042C487 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042C48D C6411E00                mov [ecx+1E], 00
:0042C491 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C498 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042C49E E87DB2FDFF              call 00407720
:0042C4A3 EB0B                    jmp 0042C4B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C3CA(C)
|
:0042C4A5 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042C4AB E8F7FDFFFF              call 0042C2A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C4A3(U)
|
:0042C4B0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C4B3 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042C4BA 8BE5                    mov esp, ebp
:0042C4BC 5D                      pop ebp
:0042C4BD C3                      ret



* Referenced by a CALL at Addresses:
|:0040D65B   , :0042F549   , :00446EE6   , :00455238   , :00457FBC   
|:00459637   
|
:0042C4BE 55                      push ebp
:0042C4BF 8BEC                    mov ebp, esp
:0042C4C1 51                      push ecx
:0042C4C2 894DFC                  mov dword ptr [ebp-04], ecx
:0042C4C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C4C8 E822120000              call 0042D6EF
:0042C4CD 85C0                    test eax, eax
:0042C4CF 740A                    je 0042C4DB
:0042C4D1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C4D4 E8CEFDFFFF              call 0042C2A7
:0042C4D9 EB08                    jmp 0042C4E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C4CF(C)
|
:0042C4DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C4DE E8B6FEFFFF              call 0042C399

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C4D9(U)
|
:0042C4E3 8BE5                    mov esp, ebp
:0042C4E5 5D                      pop ebp
:0042C4E6 C3                      ret



* Referenced by a CALL at Addresses:
|:0042D5DE   , :00439066   , :004471A7   , :00448C82   , :0044DF1F   
|:00459651   
|
:0042C4E7 55                      push ebp
:0042C4E8 8BEC                    mov ebp, esp
:0042C4EA 51                      push ecx
:0042C4EB 894DFC                  mov dword ptr [ebp-04], ecx
:0042C4EE 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C4F1 8A4804                  mov cl, byte ptr [eax+04]
:0042C4F4 51                      push ecx
:0042C4F5 8B55FC                  mov edx, dword ptr [ebp-04]
:0042C4F8 83C205                  add edx, 00000005
:0042C4FB 52                      push edx
:0042C4FC E8BFB50100              call 00447AC0
:0042C501 83C408                  add esp, 00000008
:0042C504 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C507 E83C070000              call 0042CC48
:0042C50C 8BE5                    mov esp, ebp
:0042C50E 5D                      pop ebp
:0042C50F C3                      ret



* Referenced by a CALL at Addresses:
|:0042D5B6   , :00438FCE   , :00448BA0   , :0044DE88   , :004595A3   
|
:0042C510 55                      push ebp
:0042C511 8BEC                    mov ebp, esp
:0042C513 51                      push ecx
:0042C514 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C517 68FF000000              push 000000FF
:0042C51C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C51F 83C005                  add eax, 00000005
:0042C522 50                      push eax
:0042C523 E898B50100              call 00447AC0
:0042C528 83C408                  add esp, 00000008
:0042C52B 8BE5                    mov esp, ebp
:0042C52D 5D                      pop ebp
:0042C52E C3                      ret



* Referenced by a CALL at Addresses:
|:00439AAB   , :00455622   , :00455AF2   , :00458AA9   , :00458C42   
|:00458CE4   
|
:0042C52F 55                      push ebp
:0042C530 8BEC                    mov ebp, esp
:0042C532 83EC08                  sub esp, 00000008
:0042C535 894DF8                  mov dword ptr [ebp-08], ecx
:0042C538 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C53B E890330000              call 0042F8D0
:0042C540 25FF000000              and eax, 000000FF
:0042C545 83F801                  cmp eax, 00000001
:0042C548 755D                    jne 0042C5A7

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042C54A 6A02                    push 00000002
:0042C54C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C54F E8CC340000              call 0042FA20
:0042C554 8B4510                  mov eax, dword ptr [ebp+10]
:0042C557 50                      push eax
:0042C558 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C55B E8F0FBFFFF              call 0042C150
:0042C560 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0042C563 51                      push ecx
:0042C564 8A5508                  mov dl, byte ptr [ebp+08]
:0042C567 52                      push edx
:0042C568 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0042C56B E810330000              call 0042F880
:0042C570 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C573 E8ECDFFFFF              call 0042A564
:0042C578 A2B4014B00              mov byte ptr [004B01B4], al
:0042C57D C605B0014B00FF          mov byte ptr [004B01B0], FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042C584 6A05                    push 00000005
:0042C586 668B45FC                mov ax, word ptr [ebp-04]
:0042C58A 50                      push eax
:0042C58B E8B3DDFFFF              call 0042A343
:0042C590 83C408                  add esp, 00000008
:0042C593 8A0DB0014B00            mov cl, byte ptr [004B01B0]
:0042C599 884D08                  mov byte ptr [ebp+08], cl
:0042C59C 8A15B1014B00            mov dl, byte ptr [004B01B1]
:0042C5A2 88550C                  mov byte ptr [ebp+0C], dl
:0042C5A5 EB2E                    jmp 0042C5D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C548(C)
|
:0042C5A7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C5AA E821330000              call 0042F8D0
:0042C5AF 25FF000000              and eax, 000000FF
:0042C5B4 83F802                  cmp eax, 00000002
:0042C5B7 751C                    jne 0042C5D5

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C5B9 68FF000000              push 000000FF
:0042C5BE 8B45F8                  mov eax, dword ptr [ebp-08]
:0042C5C1 83C005                  add eax, 00000005
:0042C5C4 50                      push eax
:0042C5C5 E8F6B40100              call 00447AC0
:0042C5CA 83C408                  add esp, 00000008
:0042C5CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C5D0 E873060000              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C5A5(U), :0042C5B7(C)
|
:0042C5D5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C5D8 8A5508                  mov dl, byte ptr [ebp+08]
:0042C5DB 885105                  mov byte ptr [ecx+05], dl
:0042C5DE 8B45F8                  mov eax, dword ptr [ebp-08]
:0042C5E1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0042C5E4 884806                  mov byte ptr [eax+06], cl
:0042C5E7 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C5EA 8A4204                  mov al, byte ptr [edx+04]
:0042C5ED 50                      push eax
:0042C5EE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C5F1 83C105                  add ecx, 00000005
:0042C5F4 51                      push ecx
:0042C5F5 E8C6B40100              call 00447AC0
:0042C5FA 83C408                  add esp, 00000008
:0042C5FD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C600 E843060000              call 0042CC48
:0042C605 B801000000              mov eax, 00000001
:0042C60A 8BE5                    mov esp, ebp
:0042C60C 5D                      pop ebp
:0042C60D C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0044703E   
|
:0042C610 55                      push ebp
:0042C611 8BEC                    mov ebp, esp
:0042C613 83EC68                  sub esp, 00000068
:0042C616 837D0819                cmp dword ptr [ebp+08], 00000019
:0042C61A 7322                    jnb 0042C63E
:0042C61C 8B4508                  mov eax, dword ptr [ebp+08]
:0042C61F 50                      push eax
:0042C620 8D4D98                  lea ecx, dword ptr [ebp-68]
:0042C623 51                      push ecx
:0042C624 E88E93FDFF              call 004059B7
:0042C629 83C408                  add esp, 00000008
:0042C62C 8B5508                  mov edx, dword ptr [ebp+08]
:0042C62F 52                      push edx
:0042C630 8D4598                  lea eax, dword ptr [ebp-68]
:0042C633 50                      push eax
:0042C634 B9880B4B00              mov ecx, 004B0B88
:0042C639 E881C80200              call 00458EBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C61A(C)
|
:0042C63E 8BE5                    mov esp, ebp
:0042C640 5D                      pop ebp
:0042C641 C3                      ret



* Referenced by a CALL at Addresses:
|:0042C861   , :0042C873   
|
:0042C642 55                      push ebp
:0042C643 8BEC                    mov ebp, esp
:0042C645 83EC68                  sub esp, 00000068
:0042C648 837D0819                cmp dword ptr [ebp+08], 00000019
:0042C64C 7322                    jnb 0042C670
:0042C64E 8B4508                  mov eax, dword ptr [ebp+08]
:0042C651 50                      push eax
:0042C652 8D4D98                  lea ecx, dword ptr [ebp-68]
:0042C655 51                      push ecx
:0042C656 E87E93FDFF              call 004059D9
:0042C65B 83C408                  add esp, 00000008
:0042C65E 8B5508                  mov edx, dword ptr [ebp+08]
:0042C661 52                      push edx
:0042C662 8D4598                  lea eax, dword ptr [ebp-68]
:0042C665 50                      push eax
:0042C666 B9880B4B00              mov ecx, 004B0B88
:0042C66B E84FC80200              call 00458EBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C64C(C)
|
:0042C670 8BE5                    mov esp, ebp
:0042C672 5D                      pop ebp
:0042C673 C3                      ret



* Referenced by a CALL at Addresses:
|:00434045   , :00434EB2   , :0043C5A6   , :00457754   , :00457CE0   
|:00459557   , :00459907   
|
:0042C674 55                      push ebp
:0042C675 8BEC                    mov ebp, esp
:0042C677 83EC1C                  sub esp, 0000001C
:0042C67A 894DE4                  mov dword ptr [ebp-1C], ecx
:0042C67D C745F400000000          mov [ebp-0C], 00000000
:0042C684 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C687 E844320000              call 0042F8D0
:0042C68C 25FF000000              and eax, 000000FF
:0042C691 83F802                  cmp eax, 00000002
:0042C694 7405                    je 0042C69B
:0042C696 E9C1020000              jmp 0042C95C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C694(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C69B 68FF000000              push 000000FF
:0042C6A0 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042C6A3 83C005                  add eax, 00000005
:0042C6A6 50                      push eax
:0042C6A7 E814B40100              call 00447AC0
:0042C6AC 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C6AF 6A04                    push 00000004
:0042C6B1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C6B4 E867330000              call 0042FA20
:0042C6B9 6A2D                    push 0000002D
:0042C6BB B9800D4B00              mov ecx, 004B0D80
:0042C6C0 E8E4540300              call 00461BA9
:0042C6C5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C6C8 E87B050000              call 0042CC48
:0042C6CD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C6D0 C6411C00                mov [ecx+1C], 00
:0042C6D4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C6D7 E8F42F0000              call 0042F6D0
:0042C6DC 50                      push eax
:0042C6DD E86EA80300              call 00466F50
:0042C6E2 83C404                  add esp, 00000004
:0042C6E5 C645FC00                mov [ebp-04], 00
:0042C6E9 EB09                    jmp 0042C6F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C7A3(U)
|
:0042C6EB 8A55FC                  mov dl, byte ptr [ebp-04]
:0042C6EE 80C201                  add dl, 01
:0042C6F1 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C6E9(U)
|
:0042C6F4 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C6F7 25FF000000              and eax, 000000FF
:0042C6FC 83F85A                  cmp eax, 0000005A
:0042C6FF 0F8DA3000000            jnl 0042C7A8
:0042C705 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C708 81E1FF000000            and ecx, 000000FF
:0042C70E 6BC924                  imul ecx, 00000024
:0042C711 81C108F54A00            add ecx, 004AF508
:0042C717 E8E4340000              call 0042FC00
:0042C71C 25FF000000              and eax, 000000FF
:0042C721 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C724 33D2                    xor edx, edx
:0042C726 8A5104                  mov dl, byte ptr [ecx+04]
:0042C729 3BC2                    cmp eax, edx
:0042C72B 7576                    jne 0042C7A3
:0042C72D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C730 81E1FF000000            and ecx, 000000FF
:0042C736 6BC924                  imul ecx, 00000024
:0042C739 81C108F54A00            add ecx, 004AF508
:0042C73F E8AC310000              call 0042F8F0
:0042C744 25FF000000              and eax, 000000FF
:0042C749 85C0                    test eax, eax
:0042C74B 7421                    je 0042C76E
:0042C74D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C750 81E1FF000000            and ecx, 000000FF
:0042C756 6BC924                  imul ecx, 00000024
:0042C759 81C108F54A00            add ecx, 004AF508
:0042C75F E88C310000              call 0042F8F0
:0042C764 25FF000000              and eax, 000000FF
:0042C769 83F804                  cmp eax, 00000004
:0042C76C 7535                    jne 0042C7A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C74B(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C76E 68FF000000              push 000000FF
:0042C773 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C776 81E1FF000000            and ecx, 000000FF
:0042C77C 6BC924                  imul ecx, 00000024
:0042C77F 81C108F54A00            add ecx, 004AF508
:0042C785 E896340000              call 0042FC20
:0042C78A 6A01                    push 00000001
:0042C78C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C78F 81E1FF000000            and ecx, 000000FF
:0042C795 6BC924                  imul ecx, 00000024
:0042C798 81C108F54A00            add ecx, 004AF508
:0042C79E E80F0B0000              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C72B(C), :0042C76C(C)
|
:0042C7A3 E943FFFFFF              jmp 0042C6EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C6FF(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C7A8 6A04                    push 00000004
:0042C7AA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C7AD E83E330000              call 0042FAF0
:0042C7B2 85C0                    test eax, eax
:0042C7B4 7405                    je 0042C7BB
:0042C7B6 E9A1010000              jmp 0042C95C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C7B4(C)
|
:0042C7BB B9180A4B00              mov ecx, 004B0A18
:0042C7C0 E87B340000              call 0042FC40
:0042C7C5 25FF000000              and eax, 000000FF
:0042C7CA 85C0                    test eax, eax
:0042C7CC 7552                    jne 0042C820
:0042C7CE 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042C7D1 8B08                    mov ecx, dword ptr [eax]
:0042C7D3 51                      push ecx
:0042C7D4 B9F8134800              mov ecx, 004813F8
:0042C7D9 E852330000              call 0042FB30
:0042C7DE 85C0                    test eax, eax
:0042C7E0 7415                    je 0042C7F7
:0042C7E2 6A01                    push 00000001
:0042C7E4 B9F8134800              mov ecx, 004813F8
:0042C7E9 E8D2330000              call 0042FBC0
:0042C7EE C745F401000000          mov [ebp-0C], 00000001
:0042C7F5 EB27                    jmp 0042C81E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C7E0(C)
|
:0042C7F7 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042C7FA 8B02                    mov eax, dword ptr [edx]
:0042C7FC 50                      push eax
:0042C7FD B9F8134800              mov ecx, 004813F8
:0042C802 E899330000              call 0042FBA0
:0042C807 85C0                    test eax, eax
:0042C809 7413                    je 0042C81E
:0042C80B 6A01                    push 00000001
:0042C80D B9F8134800              mov ecx, 004813F8
:0042C812 E8C9330000              call 0042FBE0
:0042C817 C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C7F5(U), :0042C809(C)
|
:0042C81E EB05                    jmp 0042C825

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C7CC(C)
|
:0042C820 E937010000              jmp 0042C95C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C81E(U)
|
:0042C825 C645F800                mov [ebp-08], 00
:0042C829 837DF400                cmp dword ptr [ebp-0C], 00000000
:0042C82D 0F85F4000000            jne 0042C927
:0042C833 C745EC00000000          mov [ebp-14], 00000000
:0042C83A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C83D 81E1FF000000            and ecx, 000000FF
:0042C843 85C9                    test ecx, ecx
:0042C845 7524                    jne 0042C86B
:0042C847 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042C84A 8B02                    mov eax, dword ptr [edx]
:0042C84C 50                      push eax
:0042C84D E8CE40FEFF              call 00410920
:0042C852 83C404                  add esp, 00000004
:0042C855 85C0                    test eax, eax
:0042C857 7410                    je 0042C869
:0042C859 6A00                    push 00000000
:0042C85B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C85E 8B11                    mov edx, dword ptr [ecx]
:0042C860 52                      push edx
:0042C861 E8DCFDFFFF              call 0042C642
:0042C866 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C857(C)
|
:0042C869 EB28                    jmp 0042C893

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C845(C)
|
:0042C86B 6A01                    push 00000001
:0042C86D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042C870 8B08                    mov ecx, dword ptr [eax]
:0042C872 51                      push ecx
:0042C873 E8CAFDFFFF              call 0042C642
:0042C878 83C408                  add esp, 00000008
:0042C87B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C87E E85D2E0000              call 0042F6E0
:0042C883 50                      push eax

* Possible StringData Ref from Data Obj ->"%sӥSAMhFC"
                                  |
:0042C884 6840834700              push 00478340
:0042C889 6A00                    push 00000000
:0042C88B E8DCC2FFFF              call 00428B6C
:0042C890 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C869(U)
|
:0042C893 C745F000000000          mov [ebp-10], 00000000
:0042C89A B9180A4B00              mov ecx, 004B0A18
:0042C89F E89C330000              call 0042FC40
:0042C8A4 25FF000000              and eax, 000000FF
:0042C8A9 83F801                  cmp eax, 00000001
:0042C8AC 7465                    je 0042C913
:0042C8AE 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C8B1 81E2FF000000            and edx, 000000FF
:0042C8B7 85D2                    test edx, edx
:0042C8B9 753C                    jne 0042C8F7
:0042C8BB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042C8BE E81D2E0000              call 0042F6E0
:0042C8C3 50                      push eax

* Possible StringData Ref from Data Obj ->"%sMhFI"
                                  |
:0042C8C4 6858834700              push 00478358
:0042C8C9 6A00                    push 00000000
:0042C8CB E89CC2FFFF              call 00428B6C
:0042C8D0 83C40C                  add esp, 0000000C
:0042C8D3 B9180A4B00              mov ecx, 004B0A18
:0042C8D8 E863330000              call 0042FC40
:0042C8DD 25FF000000              and eax, 000000FF
:0042C8E2 85C0                    test eax, eax
:0042C8E4 7402                    je 0042C8E8
:0042C8E6 EB74                    jmp 0042C95C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C8E4(C)
|
:0042C8E8 B9180A4B00              mov ecx, 004B0A18
:0042C8ED E898B80200              call 0045818A
:0042C8F2 8945F0                  mov dword ptr [ebp-10], eax
:0042C8F5 EB1C                    jmp 0042C913

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C8B9(C)
|
:0042C8F7 837DEC00                cmp dword ptr [ebp-14], 00000000
:0042C8FB 7416                    je 0042C913
:0042C8FD 6A00                    push 00000000

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042C8FF 6A10                    push 00000010
:0042C901 68FFFF0000              push 0000FFFF

* Possible StringData Ref from Data Obj ->"´ЪڷQ]}FKK"
                                  |
:0042C906 6864834700              push 00478364
:0042C90B E8C9A8FFFF              call 004271D9
:0042C910 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C8AC(C), :0042C8F5(U), :0042C8FB(C)
|
:0042C913 837DF000                cmp dword ptr [ebp-10], 00000000
:0042C917 750C                    jne 0042C925
:0042C919 6A00                    push 00000000
:0042C91B B9F8134800              mov ecx, 004813F8
:0042C920 E86E21FEFF              call 0040EA93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C917(C)
|
:0042C925 EB35                    jmp 0042C95C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C82D(C)
|
:0042C927 C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C94E(U)
|
:0042C92E 837DE804                cmp dword ptr [ebp-18], 00000004
:0042C932 741C                    je 0042C950
:0042C934 837DE802                cmp dword ptr [ebp-18], 00000002
:0042C938 7416                    je 0042C950
:0042C93A 6A00                    push 00000000
:0042C93C B9F8134800              mov ecx, 004813F8
:0042C941 E84D21FEFF              call 0040EA93
:0042C946 8945E8                  mov dword ptr [ebp-18], eax
:0042C949 E800FC0300              call 0046C54E
:0042C94E EBDE                    jmp 0042C92E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C932(C), :0042C938(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042C950 6A02                    push 00000002
:0042C952 B9180A4B00              mov ecx, 004B0A18
:0042C957 E8E45EFEFF              call 00412840

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C696(U), :0042C7B6(U), :0042C820(U), :0042C8E6(U), :0042C925(U)
|
:0042C95C 8BE5                    mov esp, ebp
:0042C95E 5D                      pop ebp
:0042C95F C3                      ret



* Referenced by a CALL at Address:
|:00447212   
|
:0042C960 55                      push ebp
:0042C961 8BEC                    mov ebp, esp
:0042C963 83EC0C                  sub esp, 0000000C
:0042C966 894DF4                  mov dword ptr [ebp-0C], ecx
:0042C969 C745F800000000          mov [ebp-08], 00000000
:0042C970 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C973 E8582F0000              call 0042F8D0
:0042C978 25FF000000              and eax, 000000FF
:0042C97D 83F802                  cmp eax, 00000002
:0042C980 7405                    je 0042C987
:0042C982 E922010000              jmp 0042CAA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C980(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042C987 68FF000000              push 000000FF
:0042C98C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042C98F 83C005                  add eax, 00000005
:0042C992 50                      push eax
:0042C993 E828B10100              call 00447AC0
:0042C998 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C99B 6A04                    push 00000004
:0042C99D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C9A0 E87B300000              call 0042FA20
:0042C9A5 6A2D                    push 0000002D
:0042C9A7 B9800D4B00              mov ecx, 004B0D80
:0042C9AC E8F8510300              call 00461BA9
:0042C9B1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C9B4 E88F020000              call 0042CC48
:0042C9B9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C9BC C6411C00                mov [ecx+1C], 00
:0042C9C0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C9C3 E8082D0000              call 0042F6D0
:0042C9C8 50                      push eax
:0042C9C9 E882A50300              call 00466F50
:0042C9CE 83C404                  add esp, 00000004
:0042C9D1 C645FC00                mov [ebp-04], 00
:0042C9D5 EB09                    jmp 0042C9E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CA8F(U)
|
:0042C9D7 8A55FC                  mov dl, byte ptr [ebp-04]
:0042C9DA 80C201                  add dl, 01
:0042C9DD 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C9D5(U)
|
:0042C9E0 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C9E3 25FF000000              and eax, 000000FF
:0042C9E8 83F85A                  cmp eax, 0000005A
:0042C9EB 0F8DA3000000            jnl 0042CA94
:0042C9F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C9F4 81E1FF000000            and ecx, 000000FF
:0042C9FA 6BC924                  imul ecx, 00000024
:0042C9FD 81C108F54A00            add ecx, 004AF508
:0042CA03 E8F8310000              call 0042FC00
:0042CA08 25FF000000              and eax, 000000FF
:0042CA0D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042CA10 33D2                    xor edx, edx
:0042CA12 8A5104                  mov dl, byte ptr [ecx+04]
:0042CA15 3BC2                    cmp eax, edx
:0042CA17 7576                    jne 0042CA8F
:0042CA19 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CA1C 81E1FF000000            and ecx, 000000FF
:0042CA22 6BC924                  imul ecx, 00000024
:0042CA25 81C108F54A00            add ecx, 004AF508
:0042CA2B E8C02E0000              call 0042F8F0
:0042CA30 25FF000000              and eax, 000000FF
:0042CA35 85C0                    test eax, eax
:0042CA37 7421                    je 0042CA5A
:0042CA39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CA3C 81E1FF000000            and ecx, 000000FF
:0042CA42 6BC924                  imul ecx, 00000024
:0042CA45 81C108F54A00            add ecx, 004AF508
:0042CA4B E8A02E0000              call 0042F8F0
:0042CA50 25FF000000              and eax, 000000FF
:0042CA55 83F804                  cmp eax, 00000004
:0042CA58 7535                    jne 0042CA8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CA37(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042CA5A 68FF000000              push 000000FF
:0042CA5F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CA62 81E1FF000000            and ecx, 000000FF
:0042CA68 6BC924                  imul ecx, 00000024
:0042CA6B 81C108F54A00            add ecx, 004AF508
:0042CA71 E8AA310000              call 0042FC20
:0042CA76 6A01                    push 00000001
:0042CA78 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CA7B 81E1FF000000            and ecx, 000000FF
:0042CA81 6BC924                  imul ecx, 00000024
:0042CA84 81C108F54A00            add ecx, 004AF508
:0042CA8A E823080000              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CA17(C), :0042CA58(C)
|
:0042CA8F E943FFFFFF              jmp 0042C9D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C9EB(C)
|
:0042CA94 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042CA97 8B08                    mov ecx, dword ptr [eax]
:0042CA99 51                      push ecx

* Possible StringData Ref from Data Obj ->"ȥBMhI"
                                  |
:0042CA9A 687C834700              push 0047837C
:0042CA9F B9880B4B00              mov ecx, 004B0B88
:0042CAA4 E816C40200              call 00458EBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C982(U)
|
:0042CAA9 8BE5                    mov esp, ebp
:0042CAAB 5D                      pop ebp
:0042CAAC C3                      ret



* Referenced by a CALL at Address:
|:00455A8A   
|
:0042CAAD 55                      push ebp
:0042CAAE 8BEC                    mov ebp, esp
:0042CAB0 83EC14                  sub esp, 00000014
:0042CAB3 894DEC                  mov dword ptr [ebp-14], ecx
:0042CAB6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042CAB9 E8222D0000              call 0042F7E0
:0042CABE 8845F0                  mov byte ptr [ebp-10], al
:0042CAC1 C645F4FF                mov [ebp-0C], FF
:0042CAC5 C645FCFF                mov [ebp-04], FF
:0042CAC9 C745F800000000          mov [ebp-08], 00000000
:0042CAD0 8B45EC                  mov eax, dword ptr [ebp-14]
:0042CAD3 8138C8000000            cmp dword ptr [eax], 000000C8
:0042CAD9 7305                    jnb 0042CAE0
:0042CADB E964010000              jmp 0042CC44

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CAD9(C)
|
:0042CAE0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042CAE3 E8C82D0000              call 0042F8B0
:0042CAE8 25FF000000              and eax, 000000FF
:0042CAED 83F80A                  cmp eax, 0000000A
:0042CAF0 0F8CA1000000            jl 0042CB97
:0042CAF6 C745F800000000          mov [ebp-08], 00000000
:0042CAFD EB09                    jmp 0042CB08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CB92(U)
|
:0042CAFF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CB02 83C101                  add ecx, 00000001
:0042CB05 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CAFD(U)
|
:0042CB08 837DF802                cmp dword ptr [ebp-08], 00000002
:0042CB0C 0F8385000000            jnb 0042CB97
:0042CB12 8B55F0                  mov edx, dword ptr [ebp-10]
:0042CB15 81E2FF000000            and edx, 000000FF
:0042CB1B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042CB1E 8A8C5080804700          mov cl, byte ptr [eax+2*edx+00478080]
:0042CB25 884DF4                  mov byte ptr [ebp-0C], cl
:0042CB28 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042CB2B 81E2FF000000            and edx, 000000FF
:0042CB31 81FAFF000000            cmp edx, 000000FF
:0042CB37 7419                    je 0042CB52
:0042CB39 6A00                    push 00000000
:0042CB3B 8A45F4                  mov al, byte ptr [ebp-0C]
:0042CB3E 50                      push eax
:0042CB3F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042CB42 8B09                    mov ecx, dword ptr [ecx]
:0042CB44 6BC970                  imul ecx, 00000070
:0042CB47 81C198224900            add ecx, 00492298
:0042CB4D E80873FDFF              call 00403E5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CB37(C)
|
:0042CB52 8B55F0                  mov edx, dword ptr [ebp-10]
:0042CB55 81E2FF000000            and edx, 000000FF
:0042CB5B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042CB5E 8A8C50D0804700          mov cl, byte ptr [eax+2*edx+004780D0]
:0042CB65 884DFC                  mov byte ptr [ebp-04], cl
:0042CB68 8B55FC                  mov edx, dword ptr [ebp-04]
:0042CB6B 81E2FF000000            and edx, 000000FF
:0042CB71 81FAFF000000            cmp edx, 000000FF
:0042CB77 7419                    je 0042CB92
:0042CB79 6A00                    push 00000000
:0042CB7B 8A45FC                  mov al, byte ptr [ebp-04]
:0042CB7E 50                      push eax
:0042CB7F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042CB82 8B09                    mov ecx, dword ptr [ecx]
:0042CB84 6BC970                  imul ecx, 00000070
:0042CB87 81C198224900            add ecx, 00492298
:0042CB8D E88C74FDFF              call 0040401E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CB77(C)
|
:0042CB92 E968FFFFFF              jmp 0042CAFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CAF0(C), :0042CB0C(C)
|
:0042CB97 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042CB9A E8112D0000              call 0042F8B0
:0042CB9F 25FF000000              and eax, 000000FF
:0042CBA4 83F814                  cmp eax, 00000014
:0042CBA7 0F8C97000000            jl 0042CC44
:0042CBAD C745F800000000          mov [ebp-08], 00000000
:0042CBB4 EB09                    jmp 0042CBBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CC3F(U)
|
:0042CBB6 8B55F8                  mov edx, dword ptr [ebp-08]
:0042CBB9 83C201                  add edx, 00000001
:0042CBBC 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CBB4(U)
|
:0042CBBF 837DF802                cmp dword ptr [ebp-08], 00000002
:0042CBC3 737F                    jnb 0042CC44
:0042CBC5 8B45F0                  mov eax, dword ptr [ebp-10]
:0042CBC8 25FF000000              and eax, 000000FF
:0042CBCD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CBD0 8A9441A8804700          mov dl, byte ptr [ecx+2*eax+004780A8]
:0042CBD7 8855F4                  mov byte ptr [ebp-0C], dl
:0042CBDA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042CBDD 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042CBE2 3DFF000000              cmp eax, 000000FF
:0042CBE7 7419                    je 0042CC02
:0042CBE9 6A00                    push 00000000
:0042CBEB 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0042CBEE 51                      push ecx
:0042CBEF 8B55EC                  mov edx, dword ptr [ebp-14]
:0042CBF2 8B0A                    mov ecx, dword ptr [edx]
:0042CBF4 6BC970                  imul ecx, 00000070
:0042CBF7 81C198224900            add ecx, 00492298
:0042CBFD E85872FDFF              call 00403E5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CBE7(C)
|
:0042CC02 8B45F0                  mov eax, dword ptr [ebp-10]
:0042CC05 25FF000000              and eax, 000000FF
:0042CC0A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CC0D 8A9441F8804700          mov dl, byte ptr [ecx+2*eax+004780F8]
:0042CC14 8855FC                  mov byte ptr [ebp-04], dl
:0042CC17 8B45FC                  mov eax, dword ptr [ebp-04]
:0042CC1A 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042CC1F 3DFF000000              cmp eax, 000000FF
:0042CC24 7419                    je 0042CC3F
:0042CC26 6A00                    push 00000000
:0042CC28 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042CC2B 51                      push ecx
:0042CC2C 8B55EC                  mov edx, dword ptr [ebp-14]
:0042CC2F 8B0A                    mov ecx, dword ptr [edx]
:0042CC31 6BC970                  imul ecx, 00000070
:0042CC34 81C198224900            add ecx, 00492298
:0042CC3A E8DF73FDFF              call 0040401E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CC24(C)
|
:0042CC3F E972FFFFFF              jmp 0042CBB6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CADB(U), :0042CBA7(C), :0042CBC3(C)
|
:0042CC44 8BE5                    mov esp, ebp
:0042CC46 5D                      pop ebp
:0042CC47 C3                      ret



* Referenced by a CALL at Addresses:
|:0040D672   , :0042BA10   , :0042BD09   , :0042C507   , :0042C5D0   
|:0042C600   , :0042C6C8   , :0042C9B4   , :0042F551   , :00431C74   
|:00432C43   , :00432C71   , :00432C88   , :00433093   , :004333BF   
|:00434E8C   , :00437052   , :004381ED   , :004385DC   , :0043CFB2   
|:0043D12D   , :0043D445   , :0044D87F   , :0044D8F3   , :00457CB7   
|:00458DF6   
|
:0042CC48 55                      push ebp
:0042CC49 8BEC                    mov ebp, esp
:0042CC4B 51                      push ecx
:0042CC4C 56                      push esi
:0042CC4D 894DFC                  mov dword ptr [ebp-04], ecx
:0042CC50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CC53 E8782C0000              call 0042F8D0
:0042CC58 25FF000000              and eax, 000000FF
:0042CC5D 85C0                    test eax, eax
:0042CC5F 0F8482000000            je 0042CCE7
:0042CC65 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CC68 E8820A0000              call 0042D6EF
:0042CC6D 85C0                    test eax, eax
:0042CC6F 7414                    je 0042CC85
:0042CC71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CC74 E8E72F0000              call 0042FC60
:0042CC79 85C0                    test eax, eax
:0042CC7B 7508                    jne 0042CC85
:0042CC7D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CC80 E822F6FFFF              call 0042C2A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CC6F(C), :0042CC7B(C)
|
:0042CC85 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CC88 E8620A0000              call 0042D6EF
:0042CC8D 85C0                    test eax, eax
:0042CC8F 7514                    jne 0042CCA5
:0042CC91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CC94 E8C72F0000              call 0042FC60
:0042CC99 85C0                    test eax, eax
:0042CC9B 7408                    je 0042CCA5
:0042CC9D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CCA0 E8F4F6FFFF              call 0042C399

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CC8F(C), :0042CC9B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CCA5 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CCA7 6A03                    push 00000003
:0042CCA9 8B45FC                  mov eax, dword ptr [ebp-04]
:0042CCAC 33C9                    xor ecx, ecx
:0042CCAE 8A4806                  mov cl, byte ptr [eax+06]
:0042CCB1 8BF1                    mov esi, ecx
:0042CCB3 6BF603                  imul esi, 00000003
:0042CCB6 B9A8034B00              mov ecx, 004B03A8
:0042CCBB E8D1600100              call 00442D91
:0042CCC0 2BF0                    sub esi, eax
:0042CCC2 56                      push esi
:0042CCC3 8B55FC                  mov edx, dword ptr [ebp-04]
:0042CCC6 33C0                    xor eax, eax
:0042CCC8 8A4205                  mov al, byte ptr [edx+05]
:0042CCCB 8BF0                    mov esi, eax
:0042CCCD 6BF603                  imul esi, 00000003
:0042CCD0 B9A8034B00              mov ecx, 004B03A8
:0042CCD5 E8A6600100              call 00442D80
:0042CCDA 2BF0                    sub esi, eax
:0042CCDC 56                      push esi
:0042CCDD B9A8034B00              mov ecx, 004B03A8
:0042CCE2 E857630100              call 0044303E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CC5F(C)
|
:0042CCE7 5E                      pop esi
:0042CCE8 8BE5                    mov esp, ebp
:0042CCEA 5D                      pop ebp
:0042CCEB C3                      ret



* Referenced by a CALL at Addresses:
|:00444FA5   , :00445CE1   , :00456ED7   
|
:0042CCEC 55                      push ebp
:0042CCED 8BEC                    mov ebp, esp
:0042CCEF 83EC48                  sub esp, 00000048
:0042CCF2 56                      push esi
:0042CCF3 894DB8                  mov dword ptr [ebp-48], ecx
:0042CCF6 8B45B8                  mov eax, dword ptr [ebp-48]
:0042CCF9 8B08                    mov ecx, dword ptr [eax]
:0042CCFB 6BC970                  imul ecx, 00000070
:0042CCFE 81C198224900            add ecx, 00492298
:0042CD04 894DF4                  mov dword ptr [ebp-0C], ecx
:0042CD07 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042CD0A E8712F0000              call 0042FC80
:0042CD0F 8845E8                  mov byte ptr [ebp-18], al
:0042CD12 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042CD15 E8C2D8FFFF              call 0042A5DC
:0042CD1A 8845C8                  mov byte ptr [ebp-38], al
:0042CD1D 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042CD20 E881270000              call 0042F4A6
:0042CD25 85C0                    test eax, eax
:0042CD27 7505                    jne 0042CD2E
:0042CD29 E94D040000              jmp 0042D17B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CD27(C)
|
:0042CD2E B9A8034B00              mov ecx, 004B03A8
:0042CD33 E848600100              call 00442D80
:0042CD38 8945EC                  mov dword ptr [ebp-14], eax
:0042CD3B B9A8034B00              mov ecx, 004B03A8
:0042CD40 E84C600100              call 00442D91
:0042CD45 8945FC                  mov dword ptr [ebp-04], eax
:0042CD48 B9A8034B00              mov ecx, 004B03A8
:0042CD4D E8379B0100              call 00446889
:0042CD52 99                      cdq
:0042CD53 83E20F                  and edx, 0000000F
:0042CD56 03C2                    add eax, edx
:0042CD58 C1F804                  sar eax, 04
:0042CD5B 8B55EC                  mov edx, dword ptr [ebp-14]
:0042CD5E 03D0                    add edx, eax
:0042CD60 8955E4                  mov dword ptr [ebp-1C], edx
:0042CD63 B9A8034B00              mov ecx, 004B03A8
:0042CD68 E8439B0100              call 004468B0
:0042CD6D 99                      cdq
:0042CD6E 83E20F                  and edx, 0000000F
:0042CD71 03C2                    add eax, edx
:0042CD73 C1F804                  sar eax, 04
:0042CD76 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CD79 03C8                    add ecx, eax
:0042CD7B 894DDC                  mov dword ptr [ebp-24], ecx
:0042CD7E 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042CD81 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CD82 B903000000              mov ecx, 00000003
:0042CD87 F7F9                    idiv ecx
:0042CD89 8BC8                    mov ecx, eax
:0042CD8B 8B45EC                  mov eax, dword ptr [ebp-14]
:0042CD8E 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CD8F BE03000000              mov esi, 00000003
:0042CD94 F7FE                    idiv esi
:0042CD96 2BC8                    sub ecx, eax
:0042CD98 8BC1                    mov eax, ecx
:0042CD9A 99                      cdq
:0042CD9B 2BC2                    sub eax, edx
:0042CD9D D1F8                    sar eax, 1
:0042CD9F 8845D8                  mov byte ptr [ebp-28], al
:0042CDA2 8B45DC                  mov eax, dword ptr [ebp-24]
:0042CDA5 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CDA6 B903000000              mov ecx, 00000003
:0042CDAB F7F9                    idiv ecx
:0042CDAD 8BC8                    mov ecx, eax
:0042CDAF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042CDB2 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CDB3 BE03000000              mov esi, 00000003
:0042CDB8 F7FE                    idiv esi
:0042CDBA 2BC8                    sub ecx, eax
:0042CDBC 8BC1                    mov eax, ecx
:0042CDBE 99                      cdq
:0042CDBF 2BC2                    sub eax, edx
:0042CDC1 D1F8                    sar eax, 1
:0042CDC3 8845CC                  mov byte ptr [ebp-34], al
:0042CDC6 8B55B8                  mov edx, dword ptr [ebp-48]
:0042CDC9 33C0                    xor eax, eax
:0042CDCB 8A4205                  mov al, byte ptr [edx+05]
:0042CDCE 8BC8                    mov ecx, eax
:0042CDD0 8B45EC                  mov eax, dword ptr [ebp-14]
:0042CDD3 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CDD4 BE03000000              mov esi, 00000003
:0042CDD9 F7FE                    idiv esi
:0042CDDB 2BC8                    sub ecx, eax
:0042CDDD 894DD4                  mov dword ptr [ebp-2C], ecx
:0042CDE0 8B55D4                  mov edx, dword ptr [ebp-2C]
:0042CDE3 8955D0                  mov dword ptr [ebp-30], edx
:0042CDE6 8B45B8                  mov eax, dword ptr [ebp-48]
:0042CDE9 33C9                    xor ecx, ecx
:0042CDEB 8A4806                  mov cl, byte ptr [eax+06]
:0042CDEE 8B45FC                  mov eax, dword ptr [ebp-04]
:0042CDF1 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CDF2 BE03000000              mov esi, 00000003
:0042CDF7 F7FE                    idiv esi
:0042CDF9 2BC8                    sub ecx, eax
:0042CDFB 894DC4                  mov dword ptr [ebp-3C], ecx
:0042CDFE 8B55C4                  mov edx, dword ptr [ebp-3C]
:0042CE01 8955C0                  mov dword ptr [ebp-40], edx
:0042CE04 8B45D8                  mov eax, dword ptr [ebp-28]
:0042CE07 25FF000000              and eax, 000000FF
:0042CE0C 3945D0                  cmp dword ptr [ebp-30], eax
:0042CE0F 7309                    jnb 0042CE1A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CE11 C745F803000000          mov [ebp-08], 00000003
:0042CE18 EB10                    jmp 0042CE2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CE0F(C)
|
:0042CE1A C745F800000000          mov [ebp-08], 00000000
:0042CE21 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CE24 83E907                  sub ecx, 00000007
:0042CE27 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CE18(U)
|
:0042CE2A 8B55CC                  mov edx, dword ptr [ebp-34]
:0042CE2D 81E2FF000000            and edx, 000000FF
:0042CE33 3955C0                  cmp dword ptr [ebp-40], edx
:0042CE36 7309                    jnb 0042CE41
:0042CE38 C745F000000000          mov [ebp-10], 00000000
:0042CE3F EB10                    jmp 0042CE51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CE36(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042CE41 C745F003000000          mov [ebp-10], 00000003
:0042CE48 8B45F0                  mov eax, dword ptr [ebp-10]
:0042CE4B 83E806                  sub eax, 00000006
:0042CE4E 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CE3F(U)
|
:0042CE51 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0042CE54 6BC903                  imul ecx, 00000003
:0042CE57 034DF8                  add ecx, dword ptr [ebp-08]
:0042CE5A 894DD0                  mov dword ptr [ebp-30], ecx
:0042CE5D 8B55C4                  mov edx, dword ptr [ebp-3C]
:0042CE60 6BD203                  imul edx, 00000003
:0042CE63 0355F0                  add edx, dword ptr [ebp-10]
:0042CE66 8955C0                  mov dword ptr [ebp-40], edx
:0042CE69 837DD400                cmp dword ptr [ebp-2C], 00000000
:0042CE6D 0F8208030000            jb 0042D17B
:0042CE73 837DC400                cmp dword ptr [ebp-3C], 00000000
:0042CE77 0F82FE020000            jb 0042D17B
:0042CE7D B9A8034B00              mov ecx, 004B03A8
:0042CE82 E8029A0100              call 00446889
:0042CE87 99                      cdq
:0042CE88 83E20F                  and edx, 0000000F
:0042CE8B 03C2                    add eax, edx
:0042CE8D C1F804                  sar eax, 04
:0042CE90 3945D4                  cmp dword ptr [ebp-2C], eax
:0042CE93 0F83E2020000            jnb 0042D17B
:0042CE99 B9A8034B00              mov ecx, 004B03A8
:0042CE9E E80D9A0100              call 004468B0
:0042CEA3 99                      cdq
:0042CEA4 83E20F                  and edx, 0000000F
:0042CEA7 03C2                    add eax, edx
:0042CEA9 C1F804                  sar eax, 04
:0042CEAC 3945C4                  cmp dword ptr [ebp-3C], eax
:0042CEAF 0F83C6020000            jnb 0042D17B
:0042CEB5 E8785FFEFF              call 00412E32

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042CEBA 6A06                    push 00000006

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042CEBC 6A07                    push 00000007
:0042CEBE 8A45C0                  mov al, byte ptr [ebp-40]
:0042CEC1 50                      push eax
:0042CEC2 8A4DD0                  mov cl, byte ptr [ebp-30]
:0042CEC5 51                      push ecx
:0042CEC6 B9A8034B00              mov ecx, 004B03A8
:0042CECB E8097A0100              call 004448D9
:0042CED0 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042CED2 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CED4 6A04                    push 00000004
:0042CED6 E835DF0300              call 0046AE10
:0042CEDB 83C40C                  add esp, 0000000C
:0042CEDE C745E000000000          mov [ebp-20], 00000000
:0042CEE5 EB09                    jmp 0042CEF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CF4E(U)
|
:0042CEE7 8B55E0                  mov edx, dword ptr [ebp-20]
:0042CEEA 83C201                  add edx, 00000001
:0042CEED 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CEE5(U)
|
:0042CEF0 837DE060                cmp dword ptr [ebp-20], 00000060
:0042CEF4 735A                    jnb 0042CF50
:0042CEF6 8B45E0                  mov eax, dword ptr [ebp-20]
:0042CEF9 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042CEFB B902000000              mov ecx, 00000002
:0042CF00 F7F1                    div ecx
:0042CF02 F7DA                    neg edx
:0042CF04 1BD2                    sbb edx, edx
:0042CF06 81E2ABAAFFFF            and edx, FFFFAAAB
:0042CF0C 81C2AAAA0000            add edx, 0000AAAA
:0042CF12 52                      push edx
:0042CF13 8B55C0                  mov edx, dword ptr [ebp-40]
:0042CF16 83C202                  add edx, 00000002
:0042CF19 C1E204                  shl edx, 04
:0042CF1C 8B45E0                  mov eax, dword ptr [ebp-20]
:0042CF1F 8D4C0208                lea ecx, dword ptr [edx+eax+08]
:0042CF23 51                      push ecx
:0042CF24 8B55D0                  mov edx, dword ptr [ebp-30]
:0042CF27 C1E204                  shl edx, 04
:0042CF2A 83C26F                  add edx, 0000006F
:0042CF2D 52                      push edx
:0042CF2E 8B45C0                  mov eax, dword ptr [ebp-40]
:0042CF31 83C002                  add eax, 00000002
:0042CF34 C1E004                  shl eax, 04
:0042CF37 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0042CF3A 8D540808                lea edx, dword ptr [eax+ecx+08]
:0042CF3E 52                      push edx
:0042CF3F 8B45D0                  mov eax, dword ptr [ebp-30]
:0042CF42 C1E004                  shl eax, 04
:0042CF45 50                      push eax
:0042CF46 E8BFE00300              call 0046B00A
:0042CF4B 83C414                  add esp, 00000014
:0042CF4E EB97                    jmp 0042CEE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CEF4(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042CF50 6A0A                    push 0000000A
:0042CF52 6A4F                    push 0000004F
:0042CF54 6A00                    push 00000000
:0042CF56 E8B5DE0300              call 0046AE10
:0042CF5B 83C40C                  add esp, 0000000C
:0042CF5E 6A01                    push 00000001
:0042CF60 B9A8034B00              mov ecx, 004B03A8
:0042CF65 E8C57A0100              call 00444A2F
:0042CF6A 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0042CF6D 8D540901                lea edx, dword ptr [ecx+ecx+01]
:0042CF71 8955D0                  mov dword ptr [ebp-30], edx
:0042CF74 8B45C0                  mov eax, dword ptr [ebp-40]
:0042CF77 83C002                  add eax, 00000002
:0042CF7A C1E004                  shl eax, 04
:0042CF7D 83C008                  add eax, 00000008
:0042CF80 8945C0                  mov dword ptr [ebp-40], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CF83 6A04                    push 00000004
:0042CF85 B9A8134800              mov ecx, 004813A8
:0042CF8A E865B1FDFF              call 004080F4
:0042CF8F 6A4F                    push 0000004F
:0042CF91 B9A8134800              mov ecx, 004813A8
:0042CF96 E8BDB0FDFF              call 00408058
:0042CF9B 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0042CF9E 83C102                  add ecx, 00000002
:0042CFA1 894DC0                  mov dword ptr [ebp-40], ecx
:0042CFA4 8B55C0                  mov edx, dword ptr [ebp-40]
:0042CFA7 52                      push edx
:0042CFA8 8B45D0                  mov eax, dword ptr [ebp-30]
:0042CFAB 50                      push eax
:0042CFAC B9A8134800              mov ecx, 004813A8
:0042CFB1 E8F5AFFDFF              call 00407FAB

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042CFB6 6A0A                    push 0000000A
:0042CFB8 B9A8134800              mov ecx, 004813A8
:0042CFBD E8CEB0FDFF              call 00408090
:0042CFC2 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042CFC5 E840060000              call 0042D60A

* Possible Reference to String Resource ID=00013: ""
                                  |
:0042CFCA 6A0D                    push 0000000D
:0042CFCC B9A8134800              mov ecx, 004813A8
:0042CFD1 E882B0FDFF              call 00408058
:0042CFD6 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0042CFD9 83C113                  add ecx, 00000013
:0042CFDC 894DC0                  mov dword ptr [ebp-40], ecx
:0042CFDF 8B55C0                  mov edx, dword ptr [ebp-40]
:0042CFE2 52                      push edx
:0042CFE3 8B45D0                  mov eax, dword ptr [ebp-30]
:0042CFE6 50                      push eax
:0042CFE7 B9A8134800              mov ecx, 004813A8
:0042CFEC E8BAAFFDFF              call 00407FAB
:0042CFF1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042CFF4 81E1FF000000            and ecx, 000000FF
:0042CFFA 51                      push ecx
:0042CFFB E8939CFDFF              call 00406C93
:0042D000 83C404                  add esp, 00000004
:0042D003 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042D004 6888834700              push 00478388
:0042D009 68A8134800              push 004813A8
:0042D00E E865BCFDFF              call 00408C78
:0042D013 83C40C                  add esp, 0000000C
:0042D016 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D019 E8B277FDFF              call 004047D0
:0042D01E 25FF000000              and eax, 000000FF
:0042D023 50                      push eax

* Possible StringData Ref from Data Obj ->" Lv%2u"
                                  |
:0042D024 688C834700              push 0047838C
:0042D029 68A8134800              push 004813A8
:0042D02E E845BCFDFF              call 00408C78
:0042D033 83C40C                  add esp, 0000000C
:0042D036 6A4F                    push 0000004F
:0042D038 B9A8134800              mov ecx, 004813A8
:0042D03D E816B0FDFF              call 00408058
:0042D042 6A00                    push 00000000
:0042D044 B9A8134800              mov ecx, 004813A8
:0042D049 E842B0FDFF              call 00408090
:0042D04E 8B55C0                  mov edx, dword ptr [ebp-40]
:0042D051 83C213                  add edx, 00000013
:0042D054 8955C0                  mov dword ptr [ebp-40], edx
:0042D057 8B45C0                  mov eax, dword ptr [ebp-40]
:0042D05A 50                      push eax
:0042D05B 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0042D05E 83C101                  add ecx, 00000001
:0042D061 894DD0                  mov dword ptr [ebp-30], ecx
:0042D064 8B55D0                  mov edx, dword ptr [ebp-30]
:0042D067 52                      push edx
:0042D068 B9A8134800              mov ecx, 004813A8
:0042D06D E839AFFDFF              call 00407FAB
:0042D072 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D075 E86654FDFF              call 004024E0
:0042D07A 50                      push eax
:0042D07B 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042D07E E8ED77FDFF              call 00404870
:0042D083 50                      push eax

* Possible StringData Ref from Data Obj ->"@ %4u/%3u"
                                  |
:0042D084 6894834700              push 00478394
:0042D089 68A8134800              push 004813A8
:0042D08E E8E5BBFDFF              call 00408C78
:0042D093 83C410                  add esp, 00000010
:0042D096 8B45C0                  mov eax, dword ptr [ebp-40]
:0042D099 83C013                  add eax, 00000013
:0042D09C 8945C0                  mov dword ptr [ebp-40], eax
:0042D09F 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0042D0A2 51                      push ecx
:0042D0A3 8B55D0                  mov edx, dword ptr [ebp-30]
:0042D0A6 52                      push edx
:0042D0A7 B9A8134800              mov ecx, 004813A8
:0042D0AC E8FAAEFDFF              call 00407FAB
:0042D0B1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D0B4 E85854FDFF              call 00402511
:0042D0B9 50                      push eax
:0042D0BA 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042D0BD E8EE77FDFF              call 004048B0
:0042D0C2 50                      push eax

* Possible StringData Ref from Data Obj ->" %4u/%3u"
                                  |
:0042D0C3 68A0834700              push 004783A0
:0042D0C8 68A8134800              push 004813A8
:0042D0CD E8A6BBFDFF              call 00408C78
:0042D0D2 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00014: ""
                                  |
:0042D0D5 6A0E                    push 0000000E
:0042D0D7 B9A8134800              mov ecx, 004813A8
:0042D0DC E877AFFDFF              call 00408058
:0042D0E1 8B45C0                  mov eax, dword ptr [ebp-40]
:0042D0E4 83C013                  add eax, 00000013
:0042D0E7 8945C0                  mov dword ptr [ebp-40], eax
:0042D0EA 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0042D0ED 51                      push ecx
:0042D0EE 8B55D0                  mov edx, dword ptr [ebp-30]
:0042D0F1 52                      push edx
:0042D0F2 B9A8134800              mov ecx, 004813A8
:0042D0F7 E8AFAEFDFF              call 00407FAB
:0042D0FC 8B45B8                  mov eax, dword ptr [ebp-48]
:0042D0FF 83C005                  add eax, 00000005
:0042D102 50                      push eax
:0042D103 E877A80100              call 0044797F
:0042D108 83C404                  add esp, 00000004
:0042D10B 8845BC                  mov byte ptr [ebp-44], al
:0042D10E 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0042D111 81E1FF000000            and ecx, 000000FF
:0042D117 8B148DD88D4700          mov edx, dword ptr [4*ecx+00478DD8]
:0042D11E 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042D11F 68AC834700              push 004783AC
:0042D124 68A8134800              push 004813A8
:0042D129 E84ABBFDFF              call 00408C78
:0042D12E 83C40C                  add esp, 0000000C
:0042D131 8B45C0                  mov eax, dword ptr [ebp-40]
:0042D134 50                      push eax
:0042D135 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0042D138 83C107                  add ecx, 00000007
:0042D13B 894DD0                  mov dword ptr [ebp-30], ecx
:0042D13E 8B55D0                  mov edx, dword ptr [ebp-30]
:0042D141 52                      push edx
:0042D142 B9A8134800              mov ecx, 004813A8
:0042D147 E85FAEFDFF              call 00407FAB
:0042D14C 8B45C8                  mov eax, dword ptr [ebp-38]
:0042D14F 25FF000000              and eax, 000000FF
:0042D154 6BC00A                  imul eax, 0000000A
:0042D157 50                      push eax

* Possible StringData Ref from Data Obj ->"%3d%%"
                                  |
:0042D158 68B0834700              push 004783B0
:0042D15D 68A8134800              push 004813A8
:0042D162 E811BBFDFF              call 00408C78
:0042D167 83C40C                  add esp, 0000000C
:0042D16A 6A4F                    push 0000004F
:0042D16C B9A8134800              mov ecx, 004813A8
:0042D171 E8E2AEFDFF              call 00408058
:0042D176 E8D25CFEFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CD29(U), :0042CE6D(C), :0042CE77(C), :0042CE93(C), :0042CEAF(C)
|
:0042D17B 5E                      pop esi
:0042D17C 8BE5                    mov esp, ebp
:0042D17E 5D                      pop ebp
:0042D17F C3                      ret



* Referenced by a CALL at Addresses:
|:0042F3AD   , :0044DAD4   
|
:0042D180 55                      push ebp
:0042D181 8BEC                    mov ebp, esp
:0042D183 83EC08                  sub esp, 00000008
:0042D186 894DFC                  mov dword ptr [ebp-04], ecx
:0042D189 8B4508                  mov eax, dword ptr [ebp+08]
:0042D18C 33C9                    xor ecx, ecx
:0042D18E 8A08                    mov cl, byte ptr [eax]
:0042D190 8B5508                  mov edx, dword ptr [ebp+08]
:0042D193 33C0                    xor eax, eax
:0042D195 8A4201                  mov al, byte ptr [edx+01]
:0042D198 33D2                    xor edx, edx
:0042D19A 8A15800A4B00            mov dl, byte ptr [004B0A80]
:0042D1A0 0FAFC2                  imul eax, edx
:0042D1A3 8D8401004B0000          lea eax, dword ptr [ecx+eax+00004B00]
:0042D1AA 50                      push eax
:0042D1AB B930DF4A00              mov ecx, 004ADF30
:0042D1B0 E8E963FEFF              call 0041359E
:0042D1B5 33C9                    xor ecx, ecx
:0042D1B7 8A08                    mov cl, byte ptr [eax]
:0042D1B9 81F9FF000000            cmp ecx, 000000FF
:0042D1BF 752A                    jne 0042D1EB
:0042D1C1 8B5508                  mov edx, dword ptr [ebp+08]
:0042D1C4 52                      push edx
:0042D1C5 E8B5A70100              call 0044797F
:0042D1CA 83C404                  add esp, 00000004
:0042D1CD 50                      push eax
:0042D1CE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D1D1 E8BAD3FFFF              call 0042A590
:0042D1D6 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042D1DB 3DFF000000              cmp eax, 000000FF
:0042D1E0 7409                    je 0042D1EB
:0042D1E2 C745F801000000          mov [ebp-08], 00000001
:0042D1E9 EB07                    jmp 0042D1F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D1BF(C), :0042D1E0(C)
|
:0042D1EB C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D1E9(U)
|
:0042D1F2 8B45F8                  mov eax, dword ptr [ebp-08]
:0042D1F5 8BE5                    mov esp, ebp
:0042D1F7 5D                      pop ebp
:0042D1F8 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042D2FF   
|
:0042D1FB 55                      push ebp
:0042D1FC 8BEC                    mov ebp, esp
:0042D1FE 83EC10                  sub esp, 00000010
:0042D201 894DF0                  mov dword ptr [ebp-10], ecx
:0042D204 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0042D207 E8A4A5FDFF              call 004077B0
:0042D20C 8B4508                  mov eax, dword ptr [ebp+08]
:0042D20F 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042D214 3DFF000000              cmp eax, 000000FF
:0042D219 0F848B000000            je 0042D2AA
:0042D21F C645F800                mov [ebp-08], 00
:0042D223 EB09                    jmp 0042D22E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D2A5(U)
|
:0042D225 8A4DF8                  mov cl, byte ptr [ebp-08]
:0042D228 80C101                  add cl, 01
:0042D22B 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D223(U)
|
:0042D22E 8B55F8                  mov edx, dword ptr [ebp-08]
:0042D231 81E2FF000000            and edx, 000000FF
:0042D237 83FA04                  cmp edx, 00000004
:0042D23A 7D6E                    jge 0042D2AA
:0042D23C 8A45F8                  mov al, byte ptr [ebp-08]
:0042D23F 50                      push eax
:0042D240 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042D243 83C105                  add ecx, 00000005
:0042D246 51                      push ecx
:0042D247 E8BCA70100              call 00447A08
:0042D24C 83C408                  add esp, 00000008
:0042D24F 50                      push eax
:0042D250 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0042D253 E838250000              call 0042F790
:0042D258 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D25B 81E2FF000000            and edx, 000000FF
:0042D261 81FAFF000000            cmp edx, 000000FF
:0042D267 743C                    je 0042D2A5
:0042D269 8D45FC                  lea eax, dword ptr [ebp-04]
:0042D26C 50                      push eax
:0042D26D E89FA60100              call 00447911
:0042D272 83C404                  add esp, 00000004
:0042D275 8845F4                  mov byte ptr [ebp-0C], al
:0042D278 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D27B 81E1FF000000            and ecx, 000000FF
:0042D281 81F9FF000000            cmp ecx, 000000FF
:0042D287 741C                    je 0042D2A5
:0042D289 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042D28C 81E2FF000000            and edx, 000000FF
:0042D292 8B4508                  mov eax, dword ptr [ebp+08]
:0042D295 25FF000000              and eax, 000000FF
:0042D29A 3BD0                    cmp edx, eax
:0042D29C 7507                    jne 0042D2A5
:0042D29E B801000000              mov eax, 00000001
:0042D2A3 EB07                    jmp 0042D2AC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D267(C), :0042D287(C), :0042D29C(C)
|
:0042D2A5 E97BFFFFFF              jmp 0042D225

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D219(C), :0042D23A(C)
|
:0042D2AA 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D2A3(U)
|
:0042D2AC 8BE5                    mov esp, ebp
:0042D2AE 5D                      pop ebp
:0042D2AF C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042C79E   , :0042CA8A   , :0042D365   , :0042D38E   , :00431BDE   
|:00431C1C   , :00446ED4   , :0044A076   , :00455154   , :00455160   
|:004560FE   , :00458D3C   , :00458DC0   , :00459029   , :00459668   
|
:0042D2B2 55                      push ebp
:0042D2B3 8BEC                    mov ebp, esp
:0042D2B5 51                      push ecx
:0042D2B6 894DFC                  mov dword ptr [ebp-04], ecx
:0042D2B9 8B4508                  mov eax, dword ptr [ebp+08]
:0042D2BC 25FF000000              and eax, 000000FF
:0042D2C1 83F807                  cmp eax, 00000007
:0042D2C4 7F09                    jg 0042D2CF
:0042D2C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D2C9 8A5508                  mov dl, byte ptr [ebp+08]
:0042D2CC 88510D                  mov byte ptr [ecx+0D], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D2C4(C)
|
:0042D2CF 8BE5                    mov esp, ebp
:0042D2D1 5D                      pop ebp
:0042D2D2 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044A631   , :00458E3C   
|
:0042D2D5 55                      push ebp
:0042D2D6 8BEC                    mov ebp, esp
:0042D2D8 83EC08                  sub esp, 00000008
:0042D2DB 894DF8                  mov dword ptr [ebp-08], ecx
:0042D2DE C745FC00000000          mov [ebp-04], 00000000
:0042D2E5 8B45F8                  mov eax, dword ptr [ebp-08]
:0042D2E8 33C9                    xor ecx, ecx
:0042D2EA 8A4807                  mov cl, byte ptr [eax+07]
:0042D2ED 81F9FF000000            cmp ecx, 000000FF
:0042D2F3 741C                    je 0042D311
:0042D2F5 8B55F8                  mov edx, dword ptr [ebp-08]
:0042D2F8 8A4207                  mov al, byte ptr [edx+07]
:0042D2FB 50                      push eax
:0042D2FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D2FF E8F7FEFFFF              call 0042D1FB
:0042D304 85C0                    test eax, eax
:0042D306 7407                    je 0042D30F
:0042D308 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D306(C)
|
:0042D30F EB60                    jmp 0042D371

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D2F3(C)
|
:0042D311 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D314 83C105                  add ecx, 00000005
:0042D317 51                      push ecx
:0042D318 8B55F8                  mov edx, dword ptr [ebp-08]
:0042D31B 83C208                  add edx, 00000008
:0042D31E 52                      push edx
:0042D31F E87C290000              call 0042FCA0
:0042D324 83C408                  add esp, 00000008
:0042D327 85C0                    test eax, eax
:0042D329 7446                    je 0042D371
:0042D32B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D32E E8BD250000              call 0042F8F0
:0042D333 25FF000000              and eax, 000000FF
:0042D338 85C0                    test eax, eax
:0042D33A 7412                    je 0042D34E
:0042D33C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D33F E8AC250000              call 0042F8F0
:0042D344 25FF000000              and eax, 000000FF
:0042D349 83F804                  cmp eax, 00000004
:0042D34C 751C                    jne 0042D36A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D33A(C)
|
:0042D34E 8B45F8                  mov eax, dword ptr [ebp-08]
:0042D351 83C005                  add eax, 00000005
:0042D354 50                      push eax
:0042D355 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D358 83C108                  add ecx, 00000008
:0042D35B E830240000              call 0042F790

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D360 6A03                    push 00000003
:0042D362 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D365 E848FFFFFF              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D34C(C)
|
:0042D36A C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D30F(U), :0042D329(C)
|
:0042D371 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D374 8BE5                    mov esp, ebp
:0042D376 5D                      pop ebp
:0042D377 C3                      ret


:0042D378 55                      push ebp
:0042D379 8BEC                    mov ebp, esp
:0042D37B 51                      push ecx
:0042D37C 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D37F 6A04                    push 00000004
:0042D381 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D384 E837270000              call 0042FAC0
:0042D389 6A01                    push 00000001
:0042D38B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D38E E81FFFFFFF              call 0042D2B2
:0042D393 8BE5                    mov esp, ebp
:0042D395 5D                      pop ebp
:0042D396 C3                      ret



* Referenced by a CALL at Addresses:
|:00448B98   , :00449F53   , :0044A683   
|
:0042D397 55                      push ebp
:0042D398 8BEC                    mov ebp, esp
:0042D39A 83EC30                  sub esp, 00000030
:0042D39D 894DD0                  mov dword ptr [ebp-30], ecx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042D3A0 C745D4B8834700          mov [ebp-2C], 004783B8

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042D3A7 C745D8C4834700          mov [ebp-28], 004783C4

* Possible StringData Ref from Data Obj ->"%soN"
                                  |
:0042D3AE C745DCD0834700          mov [ebp-24], 004783D0
:0042D3B5 6A20                    push 00000020
:0042D3B7 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0042D3BA E831270000              call 0042FAF0
:0042D3BF 85C0                    test eax, eax
:0042D3C1 7505                    jne 0042D3C8
:0042D3C3 E98E000000              jmp 0042D456

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D3C1(C)
|
:0042D3C8 C745F0B0000000          mov [ebp-10], 000000B0
:0042D3CF C745E428000000          mov [ebp-1C], 00000028
:0042D3D6 C745E840000000          mov [ebp-18], 00000040
:0042D3DD C745E030000000          mov [ebp-20], 00000030
:0042D3E4 B9A8034B00              mov ecx, 004B03A8
:0042D3E9 E89B940100              call 00446889
:0042D3EE 99                      cdq
:0042D3EF 2BC2                    sub eax, edx
:0042D3F1 D1F8                    sar eax, 1
:0042D3F3 83E858                  sub eax, 00000058
:0042D3F6 33D2                    xor edx, edx
:0042D3F8 B930000000              mov ecx, 00000030
:0042D3FD F7F1                    div ecx
:0042D3FF 6BC030                  imul eax, 00000030
:0042D402 8945F8                  mov dword ptr [ebp-08], eax
:0042D405 C745EC30000000          mov [ebp-14], 00000030
:0042D40C 8B55F8                  mov edx, dword ptr [ebp-08]
:0042D40F C1EA04                  shr edx, 04
:0042D412 8955FC                  mov dword ptr [ebp-04], edx
:0042D415 8B45EC                  mov eax, dword ptr [ebp-14]
:0042D418 C1E804                  shr eax, 04
:0042D41B 8945F4                  mov dword ptr [ebp-0C], eax
:0042D41E B9C8E24A00              mov ecx, 004AE2C8
:0042D423 E8A81DFEFF              call 0040F1D0
:0042D428 2500010000              and eax, 00000100
:0042D42D 85C0                    test eax, eax
:0042D42F 750D                    jne 0042D43E
:0042D431 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D434 81E1FF000000            and ecx, 000000FF
:0042D43A 85C9                    test ecx, ecx
:0042D43C 7418                    je 0042D456

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D42F(C)
|
:0042D43E 8B55D0                  mov edx, dword ptr [ebp-30]
:0042D441 8A4206                  mov al, byte ptr [edx+06]
:0042D444 50                      push eax
:0042D445 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0042D448 8A5105                  mov dl, byte ptr [ecx+05]
:0042D44B 52                      push edx
:0042D44C B9A8034B00              mov ecx, 004B03A8
:0042D451 E8E1850100              call 00445A37

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D3C3(U), :0042D43C(C)
|
:0042D456 8BE5                    mov esp, ebp
:0042D458 5D                      pop ebp
:0042D459 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045750E   , :0045960C   
|
:0042D45C 55                      push ebp
:0042D45D 8BEC                    mov ebp, esp
:0042D45F 83EC08                  sub esp, 00000008
:0042D462 894DF8                  mov dword ptr [ebp-08], ecx
:0042D465 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D468 E8631EFEFF              call 0040F2D0
:0042D46D 85C0                    test eax, eax
:0042D46F 7417                    je 0042D488
:0042D471 33C0                    xor eax, eax
:0042D473 A090D74700              mov al, byte ptr [0047D790]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042D478 3DFF000000              cmp eax, 000000FF
:0042D47D 7509                    jne 0042D488
:0042D47F C745FC00000000          mov [ebp-04], 00000000
:0042D486 EB5B                    jmp 0042D4E3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D46F(C), :0042D47D(C)
|
:0042D488 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D48B 8B09                    mov ecx, dword ptr [ecx]
:0042D48D 6BC970                  imul ecx, 00000070
:0042D490 81C198224900            add ecx, 00492298
:0042D496 E85574FDFF              call 004048F0
:0042D49B 25FF000000              and eax, 000000FF
:0042D4A0 8945FC                  mov dword ptr [ebp-04], eax
:0042D4A3 837DFC19                cmp dword ptr [ebp-04], 00000019
:0042D4A7 753A                    jne 0042D4E3
:0042D4A9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D4AC E81F1EFEFF              call 0040F2D0
:0042D4B1 8BC8                    mov ecx, eax
:0042D4B3 F7D9                    neg ecx
:0042D4B5 1BC9                    sbb ecx, ecx
:0042D4B7 83E1E2                  and ecx, FFFFFFE2
:0042D4BA 83C11E                  add ecx, 0000001E
:0042D4BD 6BC924                  imul ecx, 00000024
:0042D4C0 81C108F54A00            add ecx, 004AF508
:0042D4C6 E805220000              call 0042F6D0
:0042D4CB 8BC8                    mov ecx, eax
:0042D4CD 6BC970                  imul ecx, 00000070
:0042D4D0 81C198224900            add ecx, 00492298
:0042D4D6 E81574FDFF              call 004048F0
:0042D4DB 25FF000000              and eax, 000000FF
:0042D4E0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D486(U), :0042D4A7(C)
|
:0042D4E3 837DFC1A                cmp dword ptr [ebp-04], 0000001A
:0042D4E7 7251                    jb 0042D53A
:0042D4E9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D4EC E8DF1DFEFF              call 0040F2D0
:0042D4F1 8BC8                    mov ecx, eax
:0042D4F3 F7D9                    neg ecx
:0042D4F5 1BC9                    sbb ecx, ecx
:0042D4F7 83E1E2                  and ecx, FFFFFFE2
:0042D4FA 83C11E                  add ecx, 0000001E
:0042D4FD 6BC924                  imul ecx, 00000024
:0042D500 81C108F54A00            add ecx, 004AF508
:0042D506 E8C5210000              call 0042F6D0
:0042D50B 8BC8                    mov ecx, eax
:0042D50D 6BC970                  imul ecx, 00000070
:0042D510 81C198224900            add ecx, 00492298
:0042D516 E8D573FDFF              call 004048F0
:0042D51B 25FF000000              and eax, 000000FF
:0042D520 8945FC                  mov dword ptr [ebp-04], eax
:0042D523 8A55FC                  mov dl, byte ptr [ebp-04]
:0042D526 52                      push edx
:0042D527 8B45F8                  mov eax, dword ptr [ebp-08]
:0042D52A 8B08                    mov ecx, dword ptr [eax]
:0042D52C 6BC970                  imul ecx, 00000070
:0042D52F 81C198224900            add ecx, 00492298
:0042D535 E8C6A2FDFF              call 00407800

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D4E7(C)
|
:0042D53A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D53D 8BE5                    mov esp, ebp
:0042D53F 5D                      pop ebp
:0042D540 C3                      ret



* Referenced by a CALL at Address:
|:0042AB57   
|
:0042D541 55                      push ebp
:0042D542 8BEC                    mov ebp, esp
:0042D544 83EC10                  sub esp, 00000010
:0042D547 56                      push esi
:0042D548 894DF0                  mov dword ptr [ebp-10], ecx
:0042D54B 8B45F0                  mov eax, dword ptr [ebp-10]
:0042D54E 33C9                    xor ecx, ecx
:0042D550 8A4805                  mov cl, byte ptr [eax+05]
:0042D553 8BF1                    mov esi, ecx
:0042D555 6BF603                  imul esi, 00000003
:0042D558 B9A8034B00              mov ecx, 004B03A8
:0042D55D E81E580100              call 00442D80
:0042D562 2BF0                    sub esi, eax
:0042D564 8975FC                  mov dword ptr [ebp-04], esi
:0042D567 8B55F0                  mov edx, dword ptr [ebp-10]
:0042D56A 33C0                    xor eax, eax
:0042D56C 8A4206                  mov al, byte ptr [edx+06]
:0042D56F 8BF0                    mov esi, eax
:0042D571 6BF603                  imul esi, 00000003
:0042D574 B9A8034B00              mov ecx, 004B03A8
:0042D579 E813580100              call 00442D91
:0042D57E 2BF0                    sub esi, eax
:0042D580 8975F8                  mov dword ptr [ebp-08], esi
:0042D583 B9C8E24A00              mov ecx, 004AE2C8
:0042D588 E8431CFEFF              call 0040F1D0
:0042D58D 2500800000              and eax, 00008000
:0042D592 85C0                    test eax, eax
:0042D594 746F                    je 0042D605
:0042D596 C645F400                mov [ebp-0C], 00
:0042D59A EB09                    jmp 0042D5A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D603(U)
|
:0042D59C 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0042D59F 80C101                  add cl, 01
:0042D5A2 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D59A(U)
|
:0042D5A5 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042D5A8 81E2FF000000            and edx, 000000FF
:0042D5AE 83FA02                  cmp edx, 00000002
:0042D5B1 7D52                    jge 0042D605
:0042D5B3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042D5B6 E855EFFFFF              call 0042C510

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D5BB 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D5BD 6A03                    push 00000003
:0042D5BF 8A45F8                  mov al, byte ptr [ebp-08]
:0042D5C2 50                      push eax
:0042D5C3 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042D5C6 51                      push ecx
:0042D5C7 B9A8034B00              mov ecx, 004B03A8
:0042D5CC E8F5710100              call 004447C6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D5D1 6A03                    push 00000003
:0042D5D3 E86C97FFFF              call 00426D44
:0042D5D8 83C404                  add esp, 00000004
:0042D5DB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042D5DE E804EFFFFF              call 0042C4E7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D5E3 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D5E5 6A03                    push 00000003
:0042D5E7 8A55F8                  mov dl, byte ptr [ebp-08]
:0042D5EA 52                      push edx
:0042D5EB 8A45FC                  mov al, byte ptr [ebp-04]
:0042D5EE 50                      push eax
:0042D5EF B9A8034B00              mov ecx, 004B03A8
:0042D5F4 E8CD710100              call 004447C6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D5F9 6A03                    push 00000003
:0042D5FB E84497FFFF              call 00426D44
:0042D600 83C404                  add esp, 00000004
:0042D603 EB97                    jmp 0042D59C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D594(C), :0042D5B1(C)
|
:0042D605 5E                      pop esi
:0042D606 8BE5                    mov esp, ebp
:0042D608 5D                      pop ebp
:0042D609 C3                      ret



* Referenced by a CALL at Address:
|:0042CFC5   
|
:0042D60A 55                      push ebp
:0042D60B 8BEC                    mov ebp, esp
:0042D60D 51                      push ecx
:0042D60E 894DFC                  mov dword ptr [ebp-04], ecx
:0042D611 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D614 E8B71CFEFF              call 0040F2D0
:0042D619 85C0                    test eax, eax
:0042D61B 744D                    je 0042D66A
:0042D61D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D620 E8CB220000              call 0042F8F0
:0042D625 25FF000000              and eax, 000000FF
:0042D62A 83F807                  cmp eax, 00000007
:0042D62D 752D                    jne 0042D65C
:0042D62F 6880000000              push 00000080
:0042D634 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D637 E8B4240000              call 0042FAF0
:0042D63C 85C0                    test eax, eax
:0042D63E 740E                    je 0042D64E
:0042D640 6A30                    push 00000030
:0042D642 B9A8134800              mov ecx, 004813A8
:0042D647 E80CAAFDFF              call 00408058
:0042D64C EB0C                    jmp 0042D65A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D63E(C)
|

* Possible Reference to String Resource ID=00015: ""
                                  |
:0042D64E 6A0F                    push 0000000F
:0042D650 B9A8134800              mov ecx, 004813A8
:0042D655 E8FEA9FDFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D64C(U)
|
:0042D65A EB0C                    jmp 0042D668

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D62D(C)
|

* Possible Reference to String Resource ID=00014: ""
                                  |
:0042D65C 6A0E                    push 0000000E
:0042D65E B9A8134800              mov ecx, 004813A8
:0042D663 E8F0A9FDFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D65A(U)
|
:0042D668 EB2C                    jmp 0042D696

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D61B(C)
|
:0042D66A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D66D E84FC2FFFF              call 004298C1
:0042D672 25FF000000              and eax, 000000FF
:0042D677 83F802                  cmp eax, 00000002
:0042D67A 750E                    jne 0042D68A

* Possible Reference to String Resource ID=00012: ""
                                  |
:0042D67C 6A0C                    push 0000000C
:0042D67E B9A8134800              mov ecx, 004813A8
:0042D683 E8D0A9FDFF              call 00408058
:0042D688 EB0C                    jmp 0042D696

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D67A(C)
|

* Possible Reference to String Resource ID=00012: ""
                                  |
:0042D68A 6A0C                    push 0000000C
:0042D68C B9A8134800              mov ecx, 004813A8
:0042D691 E8C2A9FDFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D668(U), :0042D688(U)
|
:0042D696 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D699 E832220000              call 0042F8D0
:0042D69E 25FF000000              and eax, 000000FF
:0042D6A3 83F802                  cmp eax, 00000002
:0042D6A6 740E                    je 0042D6B6

* Possible Reference to String Resource ID=00012: ""
                                  |
:0042D6A8 6A0C                    push 0000000C
:0042D6AA B9A8134800              mov ecx, 004813A8
:0042D6AF E8A4A9FDFF              call 00408058
:0042D6B4 EB1A                    jmp 0042D6D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D6A6(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042D6B6 6A10                    push 00000010
:0042D6B8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D6BB E8A0200000              call 0042F760
:0042D6C0 85C0                    test eax, eax
:0042D6C2 740C                    je 0042D6D0

* Possible Reference to String Resource ID=00013: ""
                                  |
:0042D6C4 6A0D                    push 0000000D
:0042D6C6 B9A8134800              mov ecx, 004813A8
:0042D6CB E888A9FDFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D6B4(U), :0042D6C2(C)
|
:0042D6D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D6D3 E808200000              call 0042F6E0
:0042D6D8 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042D6D9 68DC834700              push 004783DC
:0042D6DE 68A8134800              push 004813A8
:0042D6E3 E890B5FDFF              call 00408C78
:0042D6E8 83C40C                  add esp, 0000000C
:0042D6EB 8BE5                    mov esp, ebp
:0042D6ED 5D                      pop ebp
:0042D6EE C3                      ret



* Referenced by a CALL at Addresses:
|:0042C4C8   , :0042CC68   , :0042CC88   
|
:0042D6EF 55                      push ebp
:0042D6F0 8BEC                    mov ebp, esp
:0042D6F2 51                      push ecx
:0042D6F3 894DFC                  mov dword ptr [ebp-04], ecx
:0042D6F6 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D6F9 83C005                  add eax, 00000005
:0042D6FC 50                      push eax
:0042D6FD E87DA20100              call 0044797F
:0042D702 83C404                  add esp, 00000004
:0042D705 25FF000000              and eax, 000000FF
:0042D70A 33C9                    xor ecx, ecx
:0042D70C 83F80A                  cmp eax, 0000000A
:0042D70F 0F94C1                  sete cl
:0042D712 8BC1                    mov eax, ecx
:0042D714 8BE5                    mov esp, ebp
:0042D716 5D                      pop ebp
:0042D717 C3                      ret



* Referenced by a CALL at Addresses:
|:0042D7E6   , :0042D7FA   
|
:0042D718 55                      push ebp
:0042D719 8BEC                    mov ebp, esp
:0042D71B 83EC08                  sub esp, 00000008
:0042D71E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D721 6BC924                  imul ecx, 00000024
:0042D724 81C108F54A00            add ecx, 004AF508
:0042D72A E8C1250000              call 0042FCF0
:0042D72F 25FF000000              and eax, 000000FF
:0042D734 8945FC                  mov dword ptr [ebp-04], eax
:0042D737 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D73A 8945F8                  mov dword ptr [ebp-08], eax
:0042D73D 837DF800                cmp dword ptr [ebp-08], 00000000
:0042D741 740E                    je 0042D751
:0042D743 837DF801                cmp dword ptr [ebp-08], 00000001
:0042D747 740F                    je 0042D758
:0042D749 837DF803                cmp dword ptr [ebp-08], 00000003
:0042D74D 7409                    je 0042D758
:0042D74F EB0E                    jmp 0042D75F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D741(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042D751 B802000000              mov eax, 00000002
:0042D756 EB09                    jmp 0042D761

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D747(C), :0042D74D(C)
|
:0042D758 B801000000              mov eax, 00000001
:0042D75D EB02                    jmp 0042D761

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D74F(U)
|
:0042D75F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D756(U), :0042D75D(U)
|
:0042D761 8BE5                    mov esp, ebp
:0042D763 5D                      pop ebp
:0042D764 C3                      ret



* Referenced by a CALL at Addresses:
|:0042D884   , :0042DBF7   , :0042DE3B   
|
:0042D765 55                      push ebp
:0042D766 8BEC                    mov ebp, esp
:0042D768 83EC0C                  sub esp, 0000000C
:0042D76B C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042D772 6A10                    push 00000010
:0042D774 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D777 6BC924                  imul ecx, 00000024
:0042D77A 81C108F54A00            add ecx, 004AF508
:0042D780 E8DB1F0000              call 0042F760
:0042D785 85C0                    test eax, eax
:0042D787 740C                    je 0042D795

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0042D789 C745FC09000000          mov [ebp-04], 00000009
:0042D790 E9C3000000              jmp 0042D858

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D787(C)
|
:0042D795 6880000000              push 00000080
:0042D79A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D79D 6BC924                  imul ecx, 00000024
:0042D7A0 81C108F54A00            add ecx, 004AF508
:0042D7A6 E845230000              call 0042FAF0
:0042D7AB 85C0                    test eax, eax
:0042D7AD 7520                    jne 0042D7CF
:0042D7AF 6A40                    push 00000040
:0042D7B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D7B4 6BC924                  imul ecx, 00000024
:0042D7B7 81C108F54A00            add ecx, 004AF508
:0042D7BD E82E230000              call 0042FAF0
:0042D7C2 85C0                    test eax, eax
:0042D7C4 7509                    jne 0042D7CF
:0042D7C6 C745F400000000          mov [ebp-0C], 00000000
:0042D7CD EB07                    jmp 0042D7D6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D7AD(C), :0042D7C4(C)
|
:0042D7CF C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D7CD(U)
|
:0042D7D6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042D7D9 8945F8                  mov dword ptr [ebp-08], eax
:0042D7DC 837DF800                cmp dword ptr [ebp-08], 00000000
:0042D7E0 7414                    je 0042D7F6
:0042D7E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D7E5 51                      push ecx
:0042D7E6 E82DFFFFFF              call 0042D718
:0042D7EB 83C404                  add esp, 00000004
:0042D7EE 83C006                  add eax, 00000006
:0042D7F1 8945FC                  mov dword ptr [ebp-04], eax
:0042D7F4 EB62                    jmp 0042D858

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D7E0(C)
|
:0042D7F6 8B5508                  mov edx, dword ptr [ebp+08]
:0042D7F9 52                      push edx
:0042D7FA E819FFFFFF              call 0042D718
:0042D7FF 83C404                  add esp, 00000004
:0042D802 D1E0                    shl eax, 1
:0042D804 8945FC                  mov dword ptr [ebp-04], eax
:0042D807 B9180A4B00              mov ecx, 004B0A18
:0042D80C E8FF240000              call 0042FD10
:0042D811 25FF000000              and eax, 000000FF
:0042D816 85C0                    test eax, eax
:0042D818 7420                    je 0042D83A
:0042D81A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D81D 6BC924                  imul ecx, 00000024
:0042D820 81C108F54A00            add ecx, 004AF508
:0042D826 E8A51AFEFF              call 0040F2D0
:0042D82B 85C0                    test eax, eax
:0042D82D 7409                    je 0042D838
:0042D82F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D832 83C001                  add eax, 00000001
:0042D835 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D82D(C)
|
:0042D838 EB1E                    jmp 0042D858

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D818(C)
|
:0042D83A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D83D 6BC924                  imul ecx, 00000024
:0042D840 81C108F54A00            add ecx, 004AF508
:0042D846 E8851AFEFF              call 0040F2D0
:0042D84B 85C0                    test eax, eax
:0042D84D 7509                    jne 0042D858
:0042D84F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D852 83C101                  add ecx, 00000001
:0042D855 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D790(U), :0042D7F4(U), :0042D838(U), :0042D84D(C)
|
:0042D858 8B5508                  mov edx, dword ptr [ebp+08]
:0042D85B 69D2005A0000            imul edx, 00005A00
:0042D861 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D864 69C000090000            imul eax, 00000900
:0042D86A 03D0                    add edx, eax
:0042D86C 52                      push edx
:0042D86D B920414A00              mov ecx, 004A4120
:0042D872 E8275DFEFF              call 0041359E
:0042D877 8BE5                    mov esp, ebp
:0042D879 5D                      pop ebp
:0042D87A C3                      ret



* Referenced by a CALL at Addresses:
|:00439EEA   , :00440419   , :004404DF   , :004438A3   
|
:0042D87B 55                      push ebp
:0042D87C 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D87E 6A04                    push 00000004
:0042D880 8B4510                  mov eax, dword ptr [ebp+10]
:0042D883 50                      push eax
:0042D884 E8DCFEFFFF              call 0042D765
:0042D889 83C404                  add esp, 00000004
:0042D88C 50                      push eax
:0042D88D 6A30                    push 00000030
:0042D88F 6A30                    push 00000030
:0042D891 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042D894 51                      push ecx
:0042D895 8B5508                  mov edx, dword ptr [ebp+08]
:0042D898 52                      push edx
:0042D899 E874530100              call 00442C12
:0042D89E 83C418                  add esp, 00000018
:0042D8A1 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D8A4 6BC924                  imul ecx, 00000024
:0042D8A7 81C108F54A00            add ecx, 004AF508
:0042D8AD E83E200000              call 0042F8F0
:0042D8B2 25FF000000              and eax, 000000FF
:0042D8B7 83F807                  cmp eax, 00000007
:0042D8BA 7546                    jne 0042D902
:0042D8BC 6880000000              push 00000080
:0042D8C1 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D8C4 6BC924                  imul ecx, 00000024
:0042D8C7 81C108F54A00            add ecx, 004AF508
:0042D8CD E81E220000              call 0042FAF0
:0042D8D2 85C0                    test eax, eax
:0042D8D4 742C                    je 0042D902

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D8D6 6A04                    push 00000004
:0042D8D8 6800440000              push 00004400
:0042D8DD B940DF4A00              mov ecx, 004ADF40
:0042D8E2 E8B75CFEFF              call 0041359E
:0042D8E7 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042D8E8 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042D8EA 6A10                    push 00000010
:0042D8EC 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D8EF 83C018                  add eax, 00000018
:0042D8F2 50                      push eax
:0042D8F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D8F6 83C120                  add ecx, 00000020
:0042D8F9 51                      push ecx
:0042D8FA E813530100              call 00442C12
:0042D8FF 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D8BA(C), :0042D8D4(C)
|
:0042D902 5D                      pop ebp
:0042D903 C3                      ret



* Referenced by a CALL at Addresses:
|:00439041   , :0044716B   , :00448C2C   , :0044DEF7   
|
:0042D904 55                      push ebp
:0042D905 8BEC                    mov ebp, esp
:0042D907 81EC18010000            sub esp, 00000118
:0042D90D 56                      push esi
:0042D90E 898D38FFFFFF            mov dword ptr [ebp+FFFFFF38], ecx
:0042D914 C645F810                mov [ebp-08], 10
:0042D918 C645F908                mov [ebp-07], 08
:0042D91C C645FA04                mov [ebp-06], 04
:0042D920 C645FB02                mov [ebp-05], 02
:0042D924 C645FC01                mov [ebp-04], 01
:0042D928 C7857CFFFFFF00000000    mov dword ptr [ebp+FFFFFF7C], 00000000
:0042D932 C78564FFFFFF00000000    mov dword ptr [ebp+FFFFFF64], 00000000
:0042D93C C7458000000000          mov [ebp-80], 00000000
:0042D943 C78568FFFFFF00000000    mov dword ptr [ebp+FFFFFF68], 00000000
:0042D94D B9A8034B00              mov ecx, 004B03A8
:0042D952 E829540100              call 00442D80
:0042D957 8945E8                  mov dword ptr [ebp-18], eax
:0042D95A B9A8034B00              mov ecx, 004B03A8
:0042D95F E82D540100              call 00442D91
:0042D964 8945C8                  mov dword ptr [ebp-38], eax
:0042D967 C7459400000000          mov [ebp-6C], 00000000
:0042D96E C745A400000000          mov [ebp-5C], 00000000

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042D975 6A10                    push 00000010
:0042D977 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042D97D E86E210000              call 0042FAF0
:0042D982 8945D0                  mov dword ptr [ebp-30], eax
:0042D985 8B8538FFFFFF            mov eax, dword ptr [ebp+FFFFFF38]
:0042D98B 33C9                    xor ecx, ecx
:0042D98D 8A4805                  mov cl, byte ptr [eax+05]
:0042D990 6BC903                  imul ecx, 00000003
:0042D993 894D88                  mov dword ptr [ebp-78], ecx
:0042D996 8B5588                  mov edx, dword ptr [ebp-78]
:0042D999 8955CC                  mov dword ptr [ebp-34], edx
:0042D99C 8B8538FFFFFF            mov eax, dword ptr [ebp+FFFFFF38]
:0042D9A2 33C9                    xor ecx, ecx
:0042D9A4 8A4806                  mov cl, byte ptr [eax+06]
:0042D9A7 6BC903                  imul ecx, 00000003
:0042D9AA 898D74FFFFFF            mov dword ptr [ebp+FFFFFF74], ecx
:0042D9B0 8B9574FFFFFF            mov edx, dword ptr [ebp+FFFFFF74]
:0042D9B6 8955C0                  mov dword ptr [ebp-40], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D9B9 C7458C03000000          mov [ebp-74], 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042D9C0 C78578FFFFFF03000000    mov dword ptr [ebp+FFFFFF78], 00000003
:0042D9CA 8B4508                  mov eax, dword ptr [ebp+08]
:0042D9CD 25FF000000              and eax, 000000FF
:0042D9D2 898534FFFFFF            mov dword ptr [ebp+FFFFFF34], eax
:0042D9D8 83BD34FFFFFF03          cmp dword ptr [ebp+FFFFFF34], 00000003
:0042D9DF 0F87AC000000            ja 0042DA91
:0042D9E5 8B8D34FFFFFF            mov ecx, dword ptr [ebp+FFFFFF34]
:0042D9EB FF248D7DF34200          jmp dword ptr [4*ecx+0042F37D]
:0042D9F2 8B9538FFFFFF            mov edx, dword ptr [ebp+FFFFFF38]
:0042D9F8 C6420E00                mov [edx+0E], 00
:0042D9FC C745B000240000          mov [ebp-50], 00002400
:0042DA03 8B45C0                  mov eax, dword ptr [ebp-40]
:0042DA06 83E803                  sub eax, 00000003
:0042DA09 8945C0                  mov dword ptr [ebp-40], eax
:0042DA0C 8B8D78FFFFFF            mov ecx, dword ptr [ebp+FFFFFF78]
:0042DA12 83C103                  add ecx, 00000003
:0042DA15 898D78FFFFFF            mov dword ptr [ebp+FFFFFF78], ecx
:0042DA1B E980000000              jmp 0042DAA0
:0042DA20 8B9538FFFFFF            mov edx, dword ptr [ebp+FFFFFF38]
:0042DA26 C6420E02                mov [edx+0E], 02
:0042DA2A C745B000000000          mov [ebp-50], 00000000
:0042DA31 8B8578FFFFFF            mov eax, dword ptr [ebp+FFFFFF78]
:0042DA37 83C003                  add eax, 00000003
:0042DA3A 898578FFFFFF            mov dword ptr [ebp+FFFFFF78], eax
:0042DA40 EB5E                    jmp 0042DAA0
:0042DA42 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042DA48 C6410E01                mov [ecx+0E], 01
:0042DA4C C745B000120000          mov [ebp-50], 00001200
:0042DA53 C745D001000000          mov [ebp-30], 00000001
:0042DA5A 8B558C                  mov edx, dword ptr [ebp-74]
:0042DA5D 83C203                  add edx, 00000003
:0042DA60 89558C                  mov dword ptr [ebp-74], edx
:0042DA63 EB3B                    jmp 0042DAA0
:0042DA65 8B8538FFFFFF            mov eax, dword ptr [ebp+FFFFFF38]
:0042DA6B C6400E03                mov [eax+0E], 03
:0042DA6F C745B000120000          mov [ebp-50], 00001200
:0042DA76 C745D000000000          mov [ebp-30], 00000000
:0042DA7D 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042DA80 83E903                  sub ecx, 00000003
:0042DA83 894DCC                  mov dword ptr [ebp-34], ecx
:0042DA86 8B558C                  mov edx, dword ptr [ebp-74]
:0042DA89 83C203                  add edx, 00000003
:0042DA8C 89558C                  mov dword ptr [ebp-74], edx
:0042DA8F EB0F                    jmp 0042DAA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D9DF(C)
|

* Possible StringData Ref from Data Obj ->"HʤVERROR!"
                                  |
:0042DA91 68E0834700              push 004783E0
:0042DA96 6A00                    push 00000000
:0042DA98 E8CFB0FFFF              call 00428B6C
:0042DA9D 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DA1B(U), :0042DA40(U), :0042DA63(U), :0042DA8F(U)
|
:0042DAA0 B9A8034B00              mov ecx, 004B03A8
:0042DAA5 E8DF8D0100              call 00446889
:0042DAAA 83C00F                  add eax, 0000000F
:0042DAAD C1E804                  shr eax, 04
:0042DAB0 89855CFFFFFF            mov dword ptr [ebp+FFFFFF5C], eax
:0042DAB6 B9A8034B00              mov ecx, 004B03A8
:0042DABB E8F08D0100              call 004468B0
:0042DAC0 83C00F                  add eax, 0000000F
:0042DAC3 C1E804                  shr eax, 04
:0042DAC6 898554FFFFFF            mov dword ptr [ebp+FFFFFF54], eax
:0042DACC 8B45CC                  mov eax, dword ptr [ebp-34]
:0042DACF 3B45E8                  cmp eax, dword ptr [ebp-18]
:0042DAD2 730C                    jnb 0042DAE0
:0042DAD4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042DAD7 2B4DCC                  sub ecx, dword ptr [ebp-34]
:0042DADA 898D7CFFFFFF            mov dword ptr [ebp+FFFFFF7C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DAD2(C)
|
:0042DAE0 8B55CC                  mov edx, dword ptr [ebp-34]
:0042DAE3 03558C                  add edx, dword ptr [ebp-74]
:0042DAE6 8B45E8                  mov eax, dword ptr [ebp-18]
:0042DAE9 03855CFFFFFF            add eax, dword ptr [ebp+FFFFFF5C]
:0042DAEF 3BD0                    cmp edx, eax
:0042DAF1 7614                    jbe 0042DB07
:0042DAF3 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0042DAF6 034D8C                  add ecx, dword ptr [ebp-74]
:0042DAF9 8B55E8                  mov edx, dword ptr [ebp-18]
:0042DAFC 03955CFFFFFF            add edx, dword ptr [ebp+FFFFFF5C]
:0042DB02 2BCA                    sub ecx, edx
:0042DB04 894D80                  mov dword ptr [ebp-80], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DAF1(C)
|
:0042DB07 8B45C0                  mov eax, dword ptr [ebp-40]
:0042DB0A 3B45C8                  cmp eax, dword ptr [ebp-38]
:0042DB0D 730C                    jnb 0042DB1B
:0042DB0F 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0042DB12 2B4DC0                  sub ecx, dword ptr [ebp-40]
:0042DB15 898D64FFFFFF            mov dword ptr [ebp+FFFFFF64], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DB0D(C)
|
:0042DB1B 8B55C0                  mov edx, dword ptr [ebp-40]
:0042DB1E 039578FFFFFF            add edx, dword ptr [ebp+FFFFFF78]
:0042DB24 8B45C8                  mov eax, dword ptr [ebp-38]
:0042DB27 038554FFFFFF            add eax, dword ptr [ebp+FFFFFF54]
:0042DB2D 3BD0                    cmp edx, eax
:0042DB2F 761A                    jbe 0042DB4B
:0042DB31 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0042DB34 038D78FFFFFF            add ecx, dword ptr [ebp+FFFFFF78]
:0042DB3A 8B55C8                  mov edx, dword ptr [ebp-38]
:0042DB3D 039554FFFFFF            add edx, dword ptr [ebp+FFFFFF54]
:0042DB43 2BCA                    sub ecx, edx
:0042DB45 898D68FFFFFF            mov dword ptr [ebp+FFFFFF68], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DB2F(C)
|
:0042DB4B 8B4508                  mov eax, dword ptr [ebp+08]
:0042DB4E 25FF000000              and eax, 000000FF
:0042DB53 83F801                  cmp eax, 00000001
:0042DB56 740E                    je 0042DB66
:0042DB58 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DB5B 81E1FF000000            and ecx, 000000FF
:0042DB61 83F903                  cmp ecx, 00000003
:0042DB64 7528                    jne 0042DB8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DB56(C)
|
:0042DB66 83BD7CFFFFFF06          cmp dword ptr [ebp+FFFFFF7C], 00000006
:0042DB6D 7318                    jnb 0042DB87
:0042DB6F 837D8006                cmp dword ptr [ebp-80], 00000006
:0042DB73 7312                    jnb 0042DB87
:0042DB75 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042DB7C 7309                    jnb 0042DB87
:0042DB7E 83BD68FFFFFF03          cmp dword ptr [ebp+FFFFFF68], 00000003
:0042DB85 7205                    jb 0042DB8C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DB6D(C), :0042DB73(C), :0042DB7C(C)
|
:0042DB87 E9EA170000              jmp 0042F376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DB85(C)
|
:0042DB8C EB26                    jmp 0042DBB4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DB64(C)
|
:0042DB8E 83BD64FFFFFF06          cmp dword ptr [ebp+FFFFFF64], 00000006
:0042DB95 7318                    jnb 0042DBAF
:0042DB97 83BD68FFFFFF06          cmp dword ptr [ebp+FFFFFF68], 00000006
:0042DB9E 730F                    jnb 0042DBAF
:0042DBA0 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042DBA7 7306                    jnb 0042DBAF
:0042DBA9 837D8003                cmp dword ptr [ebp-80], 00000003
:0042DBAD 7205                    jb 0042DBB4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DB95(C), :0042DB9E(C), :0042DBA7(C)
|
:0042DBAF E9C2170000              jmp 0042F376

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DB8C(U), :0042DBAD(C)
|
:0042DBB4 C745A800000000          mov [ebp-58], 00000000
:0042DBBB C745D400000000          mov [ebp-2C], 00000000
:0042DBC2 C745D800000000          mov [ebp-28], 00000000
:0042DBC9 8B9538FFFFFF            mov edx, dword ptr [ebp+FFFFFF38]
:0042DBCF 83C205                  add edx, 00000005
:0042DBD2 52                      push edx
:0042DBD3 E8399D0100              call 00447911
:0042DBD8 83C404                  add esp, 00000004
:0042DBDB 8845EC                  mov byte ptr [ebp-14], al
:0042DBDE 8B45EC                  mov eax, dword ptr [ebp-14]
:0042DBE1 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042DBE6 3DFF000000              cmp eax, 000000FF
:0042DBEB 7464                    je 0042DC51
:0042DBED 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042DBF0 81E1FF000000            and ecx, 000000FF
:0042DBF6 51                      push ecx
:0042DBF7 E869FBFFFF              call 0042D765
:0042DBFC 83C404                  add esp, 00000004
:0042DBFF 894584                  mov dword ptr [ebp-7C], eax
:0042DC02 C7459401000000          mov [ebp-6C], 00000001
:0042DC09 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042DC0C 81E1FF000000            and ecx, 000000FF
:0042DC12 6BC924                  imul ecx, 00000024
:0042DC15 81C108F54A00            add ecx, 004AF508
:0042DC1B E8D01C0000              call 0042F8F0
:0042DC20 25FF000000              and eax, 000000FF
:0042DC25 83F807                  cmp eax, 00000007
:0042DC28 7527                    jne 0042DC51
:0042DC2A 6880000000              push 00000080
:0042DC2F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042DC32 81E1FF000000            and ecx, 000000FF
:0042DC38 6BC924                  imul ecx, 00000024
:0042DC3B 81C108F54A00            add ecx, 004AF508
:0042DC41 E8AA1E0000              call 0042FAF0
:0042DC46 85C0                    test eax, eax
:0042DC48 7407                    je 0042DC51
:0042DC4A C745D801000000          mov [ebp-28], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DBEB(C), :0042DC28(C), :0042DC48(C)
|
:0042DC51 8A5508                  mov dl, byte ptr [ebp+08]
:0042DC54 52                      push edx
:0042DC55 8B8538FFFFFF            mov eax, dword ptr [ebp+FFFFFF38]
:0042DC5B 83C005                  add eax, 00000005
:0042DC5E 50                      push eax
:0042DC5F E8A49D0100              call 00447A08
:0042DC64 83C408                  add esp, 00000008
:0042DC67 668B08                  mov cx, word ptr [eax]
:0042DC6A 66898D60FFFFFF          mov word ptr [ebp+FFFFFF60], cx
:0042DC71 C645ECFF                mov [ebp-14], FF
:0042DC75 8B9538FFFFFF            mov edx, dword ptr [ebp+FFFFFF38]
:0042DC7B 83C205                  add edx, 00000005
:0042DC7E 52                      push edx
:0042DC7F E8FB9C0100              call 0044797F
:0042DC84 83C404                  add esp, 00000004
:0042DC87 8845DC                  mov byte ptr [ebp-24], al
:0042DC8A 8D8560FFFFFF            lea eax, dword ptr [ebp+FFFFFF60]
:0042DC90 50                      push eax
:0042DC91 E8E99C0100              call 0044797F
:0042DC96 83C404                  add esp, 00000004
:0042DC99 884590                  mov byte ptr [ebp-70], al
:0042DC9C C745B400000000          mov [ebp-4C], 00000000
:0042DCA3 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042DCA6 81E1FF000000            and ecx, 000000FF
:0042DCAC 83F90A                  cmp ecx, 0000000A
:0042DCAF 741C                    je 0042DCCD
:0042DCB1 8B5590                  mov edx, dword ptr [ebp-70]
:0042DCB4 81E2FF000000            and edx, 000000FF
:0042DCBA 83FA0A                  cmp edx, 0000000A
:0042DCBD 750E                    jne 0042DCCD
:0042DCBF C745B401000000          mov [ebp-4C], 00000001
:0042DCC6 C745A801000000          mov [ebp-58], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DCAF(C), :0042DCBD(C)
|
:0042DCCD 8B45DC                  mov eax, dword ptr [ebp-24]
:0042DCD0 25FF000000              and eax, 000000FF
:0042DCD5 83F80A                  cmp eax, 0000000A
:0042DCD8 7515                    jne 0042DCEF
:0042DCDA 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042DCDD 81E1FF000000            and ecx, 000000FF
:0042DCE3 83F90A                  cmp ecx, 0000000A
:0042DCE6 7407                    je 0042DCEF
:0042DCE8 C745B401000000          mov [ebp-4C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DCD8(C), :0042DCE6(C)
|
:0042DCEF 8B55DC                  mov edx, dword ptr [ebp-24]
:0042DCF2 81E2FF000000            and edx, 000000FF
:0042DCF8 83FA0A                  cmp edx, 0000000A
:0042DCFB 7518                    jne 0042DD15
:0042DCFD 8B4590                  mov eax, dword ptr [ebp-70]
:0042DD00 25FF000000              and eax, 000000FF
:0042DD05 83F80A                  cmp eax, 0000000A
:0042DD08 750B                    jne 0042DD15
:0042DD0A 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042DD10 E892E5FFFF              call 0042C2A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DCFB(C), :0042DD08(C)
|
:0042DD15 C645980D                mov [ebp-68], 0D
:0042DD19 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042DD1F E8BC1A0000              call 0042F7E0
:0042DD24 8845AC                  mov byte ptr [ebp-54], al
:0042DD27 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042DD2D E874170000              call 0042F4A6
:0042DD32 85C0                    test eax, eax
:0042DD34 7464                    je 0042DD9A
:0042DD36 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042DD3C E81F1F0000              call 0042FC60
:0042DD41 85C0                    test eax, eax
:0042DD43 7406                    je 0042DD4B
:0042DD45 C645980F                mov [ebp-68], 0F
:0042DD49 EB3B                    jmp 0042DD86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DD43(C)
|
:0042DD4B 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0042DD4E 81E1FF000000            and ecx, 000000FF
:0042DD54 83F901                  cmp ecx, 00000001
:0042DD57 7429                    je 0042DD82
:0042DD59 8B55AC                  mov edx, dword ptr [ebp-54]
:0042DD5C 81E2FF000000            and edx, 000000FF
:0042DD62 83FA03                  cmp edx, 00000003
:0042DD65 741B                    je 0042DD82
:0042DD67 8B45AC                  mov eax, dword ptr [ebp-54]
:0042DD6A 25FF000000              and eax, 000000FF
:0042DD6F 83F805                  cmp eax, 00000005
:0042DD72 740E                    je 0042DD82
:0042DD74 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0042DD77 81E1FF000000            and ecx, 000000FF
:0042DD7D 83F907                  cmp ecx, 00000007
:0042DD80 7504                    jne 0042DD86

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DD57(C), :0042DD65(C), :0042DD72(C)
|
:0042DD82 C645980E                mov [ebp-68], 0E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DD49(U), :0042DD80(C)
|
:0042DD86 8B5598                  mov edx, dword ptr [ebp-68]
:0042DD89 81E2FF000000            and edx, 000000FF
:0042DD8F 52                      push edx
:0042DD90 B9800D4B00              mov ecx, 004B0D80
:0042DD95 E80F3E0300              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DD34(C)
|
:0042DD9A 8B8560FFFFFF            mov eax, dword ptr [ebp+FFFFFF60]
:0042DDA0 25FF000000              and eax, 000000FF
:0042DDA5 6BC003                  imul eax, 00000003
:0042DDA8 2B45E8                  sub eax, dword ptr [ebp-18]
:0042DDAB 8945F4                  mov dword ptr [ebp-0C], eax
:0042DDAE 8B8D61FFFFFF            mov ecx, dword ptr [ebp+FFFFFF61]
:0042DDB4 81E1FF000000            and ecx, 000000FF
:0042DDBA 6BC903                  imul ecx, 00000003
:0042DDBD 2B4DC8                  sub ecx, dword ptr [ebp-38]
:0042DDC0 894DF0                  mov dword ptr [ebp-10], ecx
:0042DDC3 8B9560FFFFFF            mov edx, dword ptr [ebp+FFFFFF60]
:0042DDC9 81E2FF000000            and edx, 000000FF
:0042DDCF 81FAFF000000            cmp edx, 000000FF
:0042DDD5 7412                    je 0042DDE9
:0042DDD7 8D8560FFFFFF            lea eax, dword ptr [ebp+FFFFFF60]
:0042DDDD 50                      push eax
:0042DDDE E82E9B0100              call 00447911
:0042DDE3 83C404                  add esp, 00000004
:0042DDE6 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DDD5(C)
|
:0042DDE9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042DDEC 81E1FF000000            and ecx, 000000FF
:0042DDF2 81F9FF000000            cmp ecx, 000000FF
:0042DDF8 0F849A000000            je 0042DE98
:0042DDFE 837DF400                cmp dword ptr [ebp-0C], 00000000
:0042DE02 0F8290000000            jb 0042DE98
:0042DE08 837DF000                cmp dword ptr [ebp-10], 00000000
:0042DE0C 0F8286000000            jb 0042DE98
:0042DE12 8B955CFFFFFF            mov edx, dword ptr [ebp+FFFFFF5C]
:0042DE18 C1E204                  shl edx, 04
:0042DE1B 3955F4                  cmp dword ptr [ebp-0C], edx
:0042DE1E 7378                    jnb 0042DE98
:0042DE20 8B8554FFFFFF            mov eax, dword ptr [ebp+FFFFFF54]
:0042DE26 C1E004                  shl eax, 04
:0042DE29 83C008                  add eax, 00000008
:0042DE2C 3945F0                  cmp dword ptr [ebp-10], eax
:0042DE2F 7367                    jnb 0042DE98
:0042DE31 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042DE34 81E1FF000000            and ecx, 000000FF
:0042DE3A 51                      push ecx
:0042DE3B E825F9FFFF              call 0042D765
:0042DE40 83C404                  add esp, 00000004
:0042DE43 89856CFFFFFF            mov dword ptr [ebp+FFFFFF6C], eax
:0042DE49 C745A401000000          mov [ebp-5C], 00000001
:0042DE50 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042DE53 81E1FF000000            and ecx, 000000FF
:0042DE59 6BC924                  imul ecx, 00000024
:0042DE5C 81C108F54A00            add ecx, 004AF508
:0042DE62 E8891A0000              call 0042F8F0
:0042DE67 25FF000000              and eax, 000000FF
:0042DE6C 83F807                  cmp eax, 00000007
:0042DE6F 7527                    jne 0042DE98
:0042DE71 6880000000              push 00000080
:0042DE76 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042DE79 81E1FF000000            and ecx, 000000FF
:0042DE7F 6BC924                  imul ecx, 00000024
:0042DE82 81C108F54A00            add ecx, 004AF508
:0042DE88 E8631C0000              call 0042FAF0
:0042DE8D 85C0                    test eax, eax
:0042DE8F 7407                    je 0042DE98
:0042DE91 C745D401000000          mov [ebp-2C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DDF8(C), :0042DE02(C), :0042DE0C(C), :0042DE1E(C), :0042DE2F(C)
|:0042DE6F(C), :0042DE8F(C)
|
:0042DE98 8B9538FFFFFF            mov edx, dword ptr [ebp+FFFFFF38]
:0042DE9E 33C0                    xor eax, eax
:0042DEA0 8A420E                  mov al, byte ptr [edx+0E]
:0042DEA3 83F801                  cmp eax, 00000001
:0042DEA6 7410                    je 0042DEB8
:0042DEA8 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042DEAE 33D2                    xor edx, edx
:0042DEB0 8A510E                  mov dl, byte ptr [ecx+0E]
:0042DEB3 83FA03                  cmp edx, 00000003
:0042DEB6 750F                    jne 0042DEC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DEA6(C)
|
:0042DEB8 8B45D0                  mov eax, dword ptr [ebp-30]
:0042DEBB 50                      push eax
:0042DEBC 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042DEC2 E889E2FFFF              call 0042C150

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DEB6(C)
|
:0042DEC7 B9C8E24A00              mov ecx, 004AE2C8
:0042DECC E8FF12FEFF              call 0040F1D0
:0042DED1 2500400000              and eax, 00004000
:0042DED6 85C0                    test eax, eax
:0042DED8 7417                    je 0042DEF1
:0042DEDA B9C8E24A00              mov ecx, 004AE2C8
:0042DEDF E84C14FEFF              call 0040F330
:0042DEE4 25FF000000              and eax, 000000FF
:0042DEE9 898530FFFFFF            mov dword ptr [ebp+FFFFFF30], eax
:0042DEEF EB0A                    jmp 0042DEFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DED8(C)
|
:0042DEF1 C78530FFFFFF00000000    mov dword ptr [ebp+FFFFFF30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DEEF(U)
|
:0042DEFB 8B8D30FFFFFF            mov ecx, dword ptr [ebp+FFFFFF30]
:0042DF01 8A540DF8                mov dl, byte ptr [ebp+ecx-08]
:0042DF05 889558FFFFFF            mov byte ptr [ebp+FFFFFF58], dl
:0042DF0B 8B4508                  mov eax, dword ptr [ebp+08]
:0042DF0E 25FF000000              and eax, 000000FF
:0042DF13 83F801                  cmp eax, 00000001
:0042DF16 750C                    jne 0042DF24

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042DF18 C7852CFFFFFF03000000    mov dword ptr [ebp+FFFFFF2C], 00000003
:0042DF22 EB1C                    jmp 0042DF40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DF16(C)
|
:0042DF24 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DF27 81E1FF000000            and ecx, 000000FF
:0042DF2D 83E903                  sub ecx, 00000003
:0042DF30 F7D9                    neg ecx
:0042DF32 1BC9                    sbb ecx, ecx
:0042DF34 83E103                  and ecx, 00000003
:0042DF37 83C1FD                  add ecx, FFFFFFFD
:0042DF3A 898D2CFFFFFF            mov dword ptr [ebp+FFFFFF2C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DF22(U)
|
:0042DF40 8B952CFFFFFF            mov edx, dword ptr [ebp+FFFFFF2C]
:0042DF46 89559C                  mov dword ptr [ebp-64], edx
:0042DF49 8B4508                  mov eax, dword ptr [ebp+08]
:0042DF4C 25FF000000              and eax, 000000FF
:0042DF51 85C0                    test eax, eax
:0042DF53 750C                    jne 0042DF61
:0042DF55 C78528FFFFFFFDFFFFFF    mov dword ptr [ebp+FFFFFF28], FFFFFFFD
:0042DF5F EB1C                    jmp 0042DF7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DF53(C)
|
:0042DF61 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DF64 81E1FF000000            and ecx, 000000FF
:0042DF6A 83E902                  sub ecx, 00000002
:0042DF6D F7D9                    neg ecx
:0042DF6F 1BC9                    sbb ecx, ecx
:0042DF71 83E1FD                  and ecx, FFFFFFFD
:0042DF74 83C103                  add ecx, 00000003
:0042DF77 898D28FFFFFF            mov dword ptr [ebp+FFFFFF28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DF5F(U)
|
:0042DF7D 8B9528FFFFFF            mov edx, dword ptr [ebp+FFFFFF28]
:0042DF83 899570FFFFFF            mov dword ptr [ebp+FFFFFF70], edx
:0042DF89 C645E000                mov [ebp-20], 00
:0042DF8D 8B4588                  mov eax, dword ptr [ebp-78]
:0042DF90 2B45E8                  sub eax, dword ptr [ebp-18]
:0042DF93 C1E004                  shl eax, 04
:0042DF96 8945E4                  mov dword ptr [ebp-1C], eax
:0042DF99 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:0042DF9F 83C102                  add ecx, 00000002
:0042DFA2 2B4DC8                  sub ecx, dword ptr [ebp-38]
:0042DFA5 C1E104                  shl ecx, 04
:0042DFA8 83C108                  add ecx, 00000008
:0042DFAB 894DC4                  mov dword ptr [ebp-3C], ecx
:0042DFAE 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042DFB5 0F83DF050000            jnb 0042E59A
:0042DFBB 837D8003                cmp dword ptr [ebp-80], 00000003
:0042DFBF 0F83D5050000            jnb 0042E59A
:0042DFC5 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042DFCC 0F83C8050000            jnb 0042E59A
:0042DFD2 83BD68FFFFFF03          cmp dword ptr [ebp+FFFFFF68], 00000003
:0042DFD9 0F83BB050000            jnb 0042E59A
:0042DFDF 8B9558FFFFFF            mov edx, dword ptr [ebp+FFFFFF58]
:0042DFE5 81E2FF000000            and edx, 000000FF
:0042DFEB 8955A0                  mov dword ptr [ebp-60], edx
:0042DFEE EB1C                    jmp 0042E00C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E590(U)
|
:0042DFF0 8B8558FFFFFF            mov eax, dword ptr [ebp+FFFFFF58]
:0042DFF6 25FF000000              and eax, 000000FF
:0042DFFB 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042DFFE 03C8                    add ecx, eax
:0042E000 894DA0                  mov dword ptr [ebp-60], ecx
:0042E003 8A55E0                  mov dl, byte ptr [ebp-20]
:0042E006 80C201                  add dl, 01
:0042E009 8855E0                  mov byte ptr [ebp-20], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DFEE(U)
|
:0042E00C 837DA030                cmp dword ptr [ebp-60], 00000030
:0042E010 0F877F050000            ja 0042E595
:0042E016 837DB400                cmp dword ptr [ebp-4C], 00000000
:0042E01A 7437                    je 0042E053
:0042E01C 837DA018                cmp dword ptr [ebp-60], 00000018
:0042E020 7631                    jbe 0042E053
:0042E022 837DA800                cmp dword ptr [ebp-58], 00000000
:0042E026 7413                    je 0042E03B
:0042E028 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042E02E E874E2FFFF              call 0042C2A7
:0042E033 898524FFFFFF            mov dword ptr [ebp+FFFFFF24], eax
:0042E039 EB11                    jmp 0042E04C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E026(C)
|
:0042E03B 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042E041 E853E3FFFF              call 0042C399
:0042E046 898524FFFFFF            mov dword ptr [ebp+FFFFFF24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E039(U)
|
:0042E04C C745B400000000          mov [ebp-4C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E01A(C), :0042E020(C)
|
:0042E053 8B4508                  mov eax, dword ptr [ebp+08]
:0042E056 25FF000000              and eax, 000000FF
:0042E05B 83F801                  cmp eax, 00000001
:0042E05E 750B                    jne 0042E06B
:0042E060 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042E063 898D20FFFFFF            mov dword ptr [ebp+FFFFFF20], ecx
:0042E069 EB32                    jmp 0042E09D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E05E(C)
|
:0042E06B 8B5508                  mov edx, dword ptr [ebp+08]
:0042E06E 81E2FF000000            and edx, 000000FF
:0042E074 83FA03                  cmp edx, 00000003
:0042E077 750E                    jne 0042E087
:0042E079 8B45A0                  mov eax, dword ptr [ebp-60]
:0042E07C 6BC0FF                  imul eax, FFFFFFFF
:0042E07F 89851CFFFFFF            mov dword ptr [ebp+FFFFFF1C], eax
:0042E085 EB0A                    jmp 0042E091

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E077(C)
|
:0042E087 C7851CFFFFFF00000000    mov dword ptr [ebp+FFFFFF1C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E085(U)
|
:0042E091 8B8D1CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF1C]
:0042E097 898D20FFFFFF            mov dword ptr [ebp+FFFFFF20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E069(U)
|
:0042E09D 8B9520FFFFFF            mov edx, dword ptr [ebp+FFFFFF20]
:0042E0A3 8955BC                  mov dword ptr [ebp-44], edx
:0042E0A6 8B4508                  mov eax, dword ptr [ebp+08]
:0042E0A9 25FF000000              and eax, 000000FF
:0042E0AE 85C0                    test eax, eax
:0042E0B0 750E                    jne 0042E0C0
:0042E0B2 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042E0B5 6BC9FF                  imul ecx, FFFFFFFF
:0042E0B8 898D18FFFFFF            mov dword ptr [ebp+FFFFFF18], ecx
:0042E0BE EB1B                    jmp 0042E0DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E0B0(C)
|
:0042E0C0 8B5508                  mov edx, dword ptr [ebp+08]
:0042E0C3 81E2FF000000            and edx, 000000FF
:0042E0C9 83EA02                  sub edx, 00000002
:0042E0CC F7DA                    neg edx
:0042E0CE 1BD2                    sbb edx, edx
:0042E0D0 F7D2                    not edx
:0042E0D2 2355A0                  and edx, dword ptr [ebp-60]
:0042E0D5 899518FFFFFF            mov dword ptr [ebp+FFFFFF18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E0BE(U)
|
:0042E0DB 8B8518FFFFFF            mov eax, dword ptr [ebp+FFFFFF18]
:0042E0E1 8945B8                  mov dword ptr [ebp-48], eax
:0042E0E4 8B45E0                  mov eax, dword ptr [ebp-20]
:0042E0E7 25FF000000              and eax, 000000FF
:0042E0EC 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042E0ED B903000000              mov ecx, 00000003
:0042E0F2 F7F9                    idiv ecx
:0042E0F4 83FA02                  cmp edx, 00000002
:0042E0F7 750C                    jne 0042E105
:0042E0F9 6A01                    push 00000001
:0042E0FB B9F8F44A00              mov ecx, 004AF4F8
:0042E100 E88B73FFFF              call 00425490

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E0F7(C)
|
:0042E105 8B9574FFFFFF            mov edx, dword ptr [ebp+FFFFFF74]
:0042E10B 2B55C8                  sub edx, dword ptr [ebp-38]
:0042E10E 52                      push edx
:0042E10F 8B4588                  mov eax, dword ptr [ebp-78]
:0042E112 2B45E8                  sub eax, dword ptr [ebp-18]
:0042E115 50                      push eax
:0042E116 E847BB0000              call 00439C62
:0042E11B 83C408                  add esp, 00000008
:0042E11E 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:0042E124 2B4DC8                  sub ecx, dword ptr [ebp-38]
:0042E127 038D70FFFFFF            add ecx, dword ptr [ebp+FFFFFF70]
:0042E12D 51                      push ecx
:0042E12E 8B5588                  mov edx, dword ptr [ebp-78]
:0042E131 2B55E8                  sub edx, dword ptr [ebp-18]
:0042E134 03559C                  add edx, dword ptr [ebp-64]
:0042E137 52                      push edx
:0042E138 E825BB0000              call 00439C62
:0042E13D 83C408                  add esp, 00000008
:0042E140 837D9400                cmp dword ptr [ebp-6C], 00000000
:0042E144 0F84CA000000            je 0042E214

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E14A 6A04                    push 00000004
:0042E14C 8B4584                  mov eax, dword ptr [ebp-7C]
:0042E14F 50                      push eax
:0042E150 6A30                    push 00000030
:0042E152 6A30                    push 00000030
:0042E154 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:0042E15A 83C102                  add ecx, 00000002
:0042E15D 2B4DC8                  sub ecx, dword ptr [ebp-38]
:0042E160 C1E104                  shl ecx, 04
:0042E163 83C108                  add ecx, 00000008
:0042E166 51                      push ecx
:0042E167 8B5588                  mov edx, dword ptr [ebp-78]
:0042E16A 2B55E8                  sub edx, dword ptr [ebp-18]
:0042E16D C1E204                  shl edx, 04
:0042E170 52                      push edx
:0042E171 E89C4A0100              call 00442C12
:0042E176 83C418                  add esp, 00000018
:0042E179 837DD800                cmp dword ptr [ebp-28], 00000000
:0042E17D 743E                    je 0042E1BD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E17F 6A04                    push 00000004
:0042E181 6800440000              push 00004400
:0042E186 B940DF4A00              mov ecx, 004ADF40
:0042E18B E80E54FEFF              call 0041359E
:0042E190 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E191 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E193 6A10                    push 00000010
:0042E195 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0042E19B 83C002                  add eax, 00000002
:0042E19E 2B45C8                  sub eax, dword ptr [ebp-38]
:0042E1A1 C1E004                  shl eax, 04
:0042E1A4 83C020                  add eax, 00000020
:0042E1A7 50                      push eax
:0042E1A8 8B4D88                  mov ecx, dword ptr [ebp-78]
:0042E1AB 2B4DE8                  sub ecx, dword ptr [ebp-18]
:0042E1AE C1E104                  shl ecx, 04
:0042E1B1 83C120                  add ecx, 00000020
:0042E1B4 51                      push ecx
:0042E1B5 E8584A0100              call 00442C12
:0042E1BA 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E17D(C)
|
:0042E1BD 8B55DC                  mov edx, dword ptr [ebp-24]
:0042E1C0 81E2FF000000            and edx, 000000FF
:0042E1C6 83FA0D                  cmp edx, 0000000D
:0042E1C9 7549                    jne 0042E214

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E1CB 6A04                    push 00000004
:0042E1CD 6800120100              push 00011200
:0042E1D2 B940DF4A00              mov ecx, 004ADF40
:0042E1D7 E8C253FEFF              call 0041359E
:0042E1DC 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042E1E2 69C900090000            imul ecx, 00000900
:0042E1E8 03C1                    add eax, ecx
:0042E1EA 50                      push eax
:0042E1EB 6A30                    push 00000030
:0042E1ED 6A30                    push 00000030
:0042E1EF 8B9574FFFFFF            mov edx, dword ptr [ebp+FFFFFF74]
:0042E1F5 83C202                  add edx, 00000002
:0042E1F8 2B55C8                  sub edx, dword ptr [ebp-38]
:0042E1FB C1E204                  shl edx, 04
:0042E1FE 83C208                  add edx, 00000008
:0042E201 52                      push edx
:0042E202 8B4588                  mov eax, dword ptr [ebp-78]
:0042E205 2B45E8                  sub eax, dword ptr [ebp-18]
:0042E208 C1E004                  shl eax, 04
:0042E20B 50                      push eax
:0042E20C E8014A0100              call 00442C12
:0042E211 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E144(C), :0042E1C9(C)
|
:0042E214 837DA400                cmp dword ptr [ebp-5C], 00000000
:0042E218 0F84B1000000            je 0042E2CF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E21E 6A04                    push 00000004
:0042E220 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0042E226 51                      push ecx
:0042E227 6A30                    push 00000030
:0042E229 6A30                    push 00000030
:0042E22B 8B55F0                  mov edx, dword ptr [ebp-10]
:0042E22E 83C202                  add edx, 00000002
:0042E231 C1E204                  shl edx, 04
:0042E234 83C208                  add edx, 00000008
:0042E237 52                      push edx
:0042E238 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042E23B C1E004                  shl eax, 04
:0042E23E 50                      push eax
:0042E23F E8CE490100              call 00442C12
:0042E244 83C418                  add esp, 00000018
:0042E247 837DD400                cmp dword ptr [ebp-2C], 00000000
:0042E24B 7435                    je 0042E282

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E24D 6A04                    push 00000004
:0042E24F 6800440000              push 00004400
:0042E254 B940DF4A00              mov ecx, 004ADF40
:0042E259 E84053FEFF              call 0041359E
:0042E25E 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E25F 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E261 6A10                    push 00000010
:0042E263 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042E266 83C102                  add ecx, 00000002
:0042E269 C1E104                  shl ecx, 04
:0042E26C 83C120                  add ecx, 00000020
:0042E26F 51                      push ecx
:0042E270 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042E273 C1E204                  shl edx, 04
:0042E276 83C220                  add edx, 00000020
:0042E279 52                      push edx
:0042E27A E893490100              call 00442C12
:0042E27F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E24B(C)
|
:0042E282 8B4590                  mov eax, dword ptr [ebp-70]
:0042E285 25FF000000              and eax, 000000FF
:0042E28A 83F80D                  cmp eax, 0000000D
:0042E28D 7540                    jne 0042E2CF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E28F 6A04                    push 00000004
:0042E291 6800120100              push 00011200
:0042E296 B940DF4A00              mov ecx, 004ADF40
:0042E29B E8FE52FEFF              call 0041359E
:0042E2A0 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042E2A6 69C900090000            imul ecx, 00000900
:0042E2AC 03C1                    add eax, ecx
:0042E2AE 50                      push eax
:0042E2AF 6A30                    push 00000030
:0042E2B1 6A30                    push 00000030
:0042E2B3 8B55F0                  mov edx, dword ptr [ebp-10]
:0042E2B6 83C202                  add edx, 00000002
:0042E2B9 C1E204                  shl edx, 04
:0042E2BC 83C208                  add edx, 00000008
:0042E2BF 52                      push edx
:0042E2C0 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042E2C3 C1E004                  shl eax, 04
:0042E2C6 50                      push eax
:0042E2C7 E846490100              call 00442C12
:0042E2CC 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E218(C), :0042E28D(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E2CF 6A04                    push 00000004
:0042E2D1 6A00                    push 00000000
:0042E2D3 B920414A00              mov ecx, 004A4120
:0042E2D8 E8C152FEFF              call 0041359E
:0042E2DD 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042E2E3 33D2                    xor edx, edx
:0042E2E5 8A5104                  mov dl, byte ptr [ecx+04]
:0042E2E8 8BCA                    mov ecx, edx
:0042E2EA 69C9005A0000            imul ecx, 00005A00
:0042E2F0 0345B0                  add eax, dword ptr [ebp-50]
:0042E2F3 03C8                    add ecx, eax
:0042E2F5 8B45A0                  mov eax, dword ptr [ebp-60]
:0042E2F8 83E801                  sub eax, 00000001
:0042E2FB 33D2                    xor edx, edx
:0042E2FD BE18000000              mov esi, 00000018
:0042E302 F7F6                    div esi
:0042E304 83FA0C                  cmp edx, 0000000C
:0042E307 1BD2                    sbb edx, edx
:0042E309 42                      inc edx
:0042E30A 69D200090000            imul edx, 00000900
:0042E310 03CA                    add ecx, edx
:0042E312 51                      push ecx
:0042E313 6A30                    push 00000030
:0042E315 6A30                    push 00000030
:0042E317 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0042E31D 83C002                  add eax, 00000002
:0042E320 2B45C8                  sub eax, dword ptr [ebp-38]
:0042E323 C1E004                  shl eax, 04
:0042E326 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042E329 8D540808                lea edx, dword ptr [eax+ecx+08]
:0042E32D 52                      push edx
:0042E32E 8B4588                  mov eax, dword ptr [ebp-78]
:0042E331 2B45E8                  sub eax, dword ptr [ebp-18]
:0042E334 C1E004                  shl eax, 04
:0042E337 0345BC                  add eax, dword ptr [ebp-44]
:0042E33A 50                      push eax
:0042E33B E8D2480100              call 00442C12
:0042E340 83C418                  add esp, 00000018
:0042E343 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042E346 81E1FF000000            and ecx, 000000FF
:0042E34C 83F90D                  cmp ecx, 0000000D
:0042E34F 7563                    jne 0042E3B4
:0042E351 8B5590                  mov edx, dword ptr [ebp-70]
:0042E354 81E2FF000000            and edx, 000000FF
:0042E35A 83FA0D                  cmp edx, 0000000D
:0042E35D 7555                    jne 0042E3B4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E35F 6A04                    push 00000004
:0042E361 6800120100              push 00011200
:0042E366 B940DF4A00              mov ecx, 004ADF40
:0042E36B E82E52FEFF              call 0041359E
:0042E370 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042E376 69C900090000            imul ecx, 00000900
:0042E37C 03C1                    add eax, ecx
:0042E37E 50                      push eax
:0042E37F 6A30                    push 00000030
:0042E381 6A30                    push 00000030
:0042E383 8B9574FFFFFF            mov edx, dword ptr [ebp+FFFFFF74]
:0042E389 83C202                  add edx, 00000002
:0042E38C 2B55C8                  sub edx, dword ptr [ebp-38]
:0042E38F C1E204                  shl edx, 04
:0042E392 8B45B8                  mov eax, dword ptr [ebp-48]
:0042E395 8D4C0208                lea ecx, dword ptr [edx+eax+08]
:0042E399 51                      push ecx
:0042E39A 8B5588                  mov edx, dword ptr [ebp-78]
:0042E39D 2B55E8                  sub edx, dword ptr [ebp-18]
:0042E3A0 C1E204                  shl edx, 04
:0042E3A3 0355BC                  add edx, dword ptr [ebp-44]
:0042E3A6 52                      push edx
:0042E3A7 E866480100              call 00442C12
:0042E3AC 83C418                  add esp, 00000018
:0042E3AF E9E5000000              jmp 0042E499

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E34F(C), :0042E35D(C)
|
:0042E3B4 8B45DC                  mov eax, dword ptr [ebp-24]
:0042E3B7 25FF000000              and eax, 000000FF
:0042E3BC 83F80D                  cmp eax, 0000000D
:0042E3BF 7466                    je 0042E427
:0042E3C1 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042E3C4 81E1FF000000            and ecx, 000000FF
:0042E3CA 83F90D                  cmp ecx, 0000000D
:0042E3CD 7558                    jne 0042E427
:0042E3CF 837DA018                cmp dword ptr [ebp-60], 00000018
:0042E3D3 7650                    jbe 0042E425

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E3D5 6A04                    push 00000004
:0042E3D7 6800120100              push 00011200
:0042E3DC B940DF4A00              mov ecx, 004ADF40
:0042E3E1 E8B851FEFF              call 0041359E
:0042E3E6 8B1578044B00            mov edx, dword ptr [004B0478]
:0042E3EC 69D200090000            imul edx, 00000900
:0042E3F2 03C2                    add eax, edx
:0042E3F4 50                      push eax
:0042E3F5 6A30                    push 00000030
:0042E3F7 6A30                    push 00000030
:0042E3F9 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0042E3FF 83C002                  add eax, 00000002
:0042E402 2B45C8                  sub eax, dword ptr [ebp-38]
:0042E405 C1E004                  shl eax, 04
:0042E408 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042E40B 8D540808                lea edx, dword ptr [eax+ecx+08]
:0042E40F 52                      push edx
:0042E410 8B4588                  mov eax, dword ptr [ebp-78]
:0042E413 2B45E8                  sub eax, dword ptr [ebp-18]
:0042E416 C1E004                  shl eax, 04
:0042E419 0345BC                  add eax, dword ptr [ebp-44]
:0042E41C 50                      push eax
:0042E41D E8F0470100              call 00442C12
:0042E422 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E3D3(C)
|
:0042E425 EB72                    jmp 0042E499

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E3BF(C), :0042E3CD(C)
|
:0042E427 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042E42A 81E1FF000000            and ecx, 000000FF
:0042E430 83F90D                  cmp ecx, 0000000D
:0042E433 7564                    jne 0042E499
:0042E435 8B5590                  mov edx, dword ptr [ebp-70]
:0042E438 81E2FF000000            and edx, 000000FF
:0042E43E 83FA0D                  cmp edx, 0000000D
:0042E441 7456                    je 0042E499
:0042E443 837DA018                cmp dword ptr [ebp-60], 00000018
:0042E447 7350                    jnb 0042E499

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E449 6A04                    push 00000004
:0042E44B 6800120100              push 00011200
:0042E450 B940DF4A00              mov ecx, 004ADF40
:0042E455 E84451FEFF              call 0041359E
:0042E45A 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042E460 69C900090000            imul ecx, 00000900
:0042E466 03C1                    add eax, ecx
:0042E468 50                      push eax
:0042E469 6A30                    push 00000030
:0042E46B 6A30                    push 00000030
:0042E46D 8B9574FFFFFF            mov edx, dword ptr [ebp+FFFFFF74]
:0042E473 83C202                  add edx, 00000002
:0042E476 2B55C8                  sub edx, dword ptr [ebp-38]
:0042E479 C1E204                  shl edx, 04
:0042E47C 8B45B8                  mov eax, dword ptr [ebp-48]
:0042E47F 8D4C0208                lea ecx, dword ptr [edx+eax+08]
:0042E483 51                      push ecx
:0042E484 8B5588                  mov edx, dword ptr [ebp-78]
:0042E487 2B55E8                  sub edx, dword ptr [ebp-18]
:0042E48A C1E204                  shl edx, 04
:0042E48D 0355BC                  add edx, dword ptr [ebp-44]
:0042E490 52                      push edx
:0042E491 E87C470100              call 00442C12
:0042E496 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E3AF(U), :0042E425(U), :0042E433(C), :0042E441(C), :0042E447(C)
|
:0042E499 B9180A4B00              mov ecx, 004B0A18
:0042E49E E84B9F0200              call 004583EE
:0042E4A3 25FF000000              and eax, 000000FF
:0042E4A8 83F802                  cmp eax, 00000002
:0042E4AB 7418                    je 0042E4C5
:0042E4AD B9180A4B00              mov ecx, 004B0A18
:0042E4B2 E8379F0200              call 004583EE
:0042E4B7 25FF000000              and eax, 000000FF
:0042E4BC 83F803                  cmp eax, 00000003
:0042E4BF 0F85B1000000            jne 0042E576

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E4AB(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E4C5 6A04                    push 00000004
:0042E4C7 B9180A4B00              mov ecx, 004B0A18
:0042E4CC E85F180000              call 0042FD30
:0042E4D1 F7D8                    neg eax
:0042E4D3 1BC0                    sbb eax, eax
:0042E4D5 2500120000              and eax, 00001200
:0042E4DA 0500EE0000              add eax, 0000EE00
:0042E4DF 50                      push eax
:0042E4E0 B940DF4A00              mov ecx, 004ADF40
:0042E4E5 E8B450FEFF              call 0041359E
:0042E4EA 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042E4F0 69C900090000            imul ecx, 00000900
:0042E4F6 03C1                    add eax, ecx
:0042E4F8 50                      push eax
:0042E4F9 6A30                    push 00000030
:0042E4FB 6A30                    push 00000030
:0042E4FD 8B9574FFFFFF            mov edx, dword ptr [ebp+FFFFFF74]
:0042E503 2B55C8                  sub edx, dword ptr [ebp-38]
:0042E506 83C202                  add edx, 00000002
:0042E509 C1E204                  shl edx, 04
:0042E50C 83C208                  add edx, 00000008
:0042E50F 52                      push edx
:0042E510 8B4588                  mov eax, dword ptr [ebp-78]
:0042E513 2B45E8                  sub eax, dword ptr [ebp-18]
:0042E516 C1E004                  shl eax, 04
:0042E519 50                      push eax
:0042E51A E8F3460100              call 00442C12
:0042E51F 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E522 6A04                    push 00000004
:0042E524 B9180A4B00              mov ecx, 004B0A18
:0042E529 E802180000              call 0042FD30
:0042E52E F7D8                    neg eax
:0042E530 1BC0                    sbb eax, eax
:0042E532 2500120000              and eax, 00001200
:0042E537 0500EE0000              add eax, 0000EE00
:0042E53C 50                      push eax
:0042E53D B940DF4A00              mov ecx, 004ADF40
:0042E542 E85750FEFF              call 0041359E
:0042E547 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042E54D 69C900090000            imul ecx, 00000900
:0042E553 03C1                    add eax, ecx
:0042E555 50                      push eax
:0042E556 6A30                    push 00000030
:0042E558 6A30                    push 00000030
:0042E55A 8B55F0                  mov edx, dword ptr [ebp-10]
:0042E55D 83C202                  add edx, 00000002
:0042E560 C1E204                  shl edx, 04
:0042E563 83C208                  add edx, 00000008
:0042E566 52                      push edx
:0042E567 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042E56A C1E004                  shl eax, 04
:0042E56D 50                      push eax
:0042E56E E89F460100              call 00442C12
:0042E573 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E4BF(C)
|
:0042E576 8B45E0                  mov eax, dword ptr [ebp-20]
:0042E579 25FF000000              and eax, 000000FF
:0042E57E 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042E57F B903000000              mov ecx, 00000003
:0042E584 F7F9                    idiv ecx
:0042E586 83FA02                  cmp edx, 00000002
:0042E589 7505                    jne 0042E590
:0042E58B E80086FFFF              call 00426B90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E589(C)
|
:0042E590 E95BFAFFFF              jmp 0042DFF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E010(C)
|
:0042E595 E9DC0D0000              jmp 0042F376

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DFB5(C), :0042DFBF(C), :0042DFCC(C), :0042DFD9(C)
|
:0042E59A 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042E5A1 7406                    je 0042E5A9
:0042E5A3 837D8003                cmp dword ptr [ebp-80], 00000003
:0042E5A7 751B                    jne 0042E5C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E5A1(C)
|
:0042E5A9 8B5508                  mov edx, dword ptr [ebp+08]
:0042E5AC 81E2FF000000            and edx, 000000FF
:0042E5B2 83FA01                  cmp edx, 00000001
:0042E5B5 7442                    je 0042E5F9
:0042E5B7 8B4508                  mov eax, dword ptr [ebp+08]
:0042E5BA 25FF000000              and eax, 000000FF
:0042E5BF 83F803                  cmp eax, 00000003
:0042E5C2 7435                    je 0042E5F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E5A7(C)
|
:0042E5C4 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042E5CB 740D                    je 0042E5DA
:0042E5CD 83BD68FFFFFF03          cmp dword ptr [ebp+FFFFFF68], 00000003
:0042E5D4 0F859C0D0000            jne 0042F376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E5CB(C)
|
:0042E5DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E5DD 81E1FF000000            and ecx, 000000FF
:0042E5E3 85C9                    test ecx, ecx
:0042E5E5 7412                    je 0042E5F9
:0042E5E7 8B5508                  mov edx, dword ptr [ebp+08]
:0042E5EA 81E2FF000000            and edx, 000000FF
:0042E5F0 83FA02                  cmp edx, 00000002
:0042E5F3 0F857D0D0000            jne 0042F376

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E5B5(C), :0042E5C2(C), :0042E5E5(C)
|
:0042E5F9 8B4508                  mov eax, dword ptr [ebp+08]
:0042E5FC 25FF000000              and eax, 000000FF
:0042E601 85C0                    test eax, eax
:0042E603 7412                    je 0042E617
:0042E605 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E608 81E1FF000000            and ecx, 000000FF
:0042E60E 83F902                  cmp ecx, 00000002
:0042E611 0F8549060000            jne 0042EC60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E603(C)
|
:0042E617 8B9558FFFFFF            mov edx, dword ptr [ebp+FFFFFF58]
:0042E61D 81E2FF000000            and edx, 000000FF
:0042E623 8955A0                  mov dword ptr [ebp-60], edx
:0042E626 EB1C                    jmp 0042E644

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC56(U)
|
:0042E628 8B8558FFFFFF            mov eax, dword ptr [ebp+FFFFFF58]
:0042E62E 25FF000000              and eax, 000000FF
:0042E633 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042E636 03C8                    add ecx, eax
:0042E638 894DA0                  mov dword ptr [ebp-60], ecx
:0042E63B 8A55E0                  mov dl, byte ptr [ebp-20]
:0042E63E 80C201                  add dl, 01
:0042E641 8855E0                  mov byte ptr [ebp-20], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E626(U)
|
:0042E644 837DA030                cmp dword ptr [ebp-60], 00000030
:0042E648 0F870D060000            ja 0042EC5B
:0042E64E 837DB400                cmp dword ptr [ebp-4C], 00000000
:0042E652 7437                    je 0042E68B
:0042E654 837DA018                cmp dword ptr [ebp-60], 00000018
:0042E658 7631                    jbe 0042E68B
:0042E65A 837DA800                cmp dword ptr [ebp-58], 00000000
:0042E65E 7413                    je 0042E673
:0042E660 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042E666 E83CDCFFFF              call 0042C2A7
:0042E66B 898514FFFFFF            mov dword ptr [ebp+FFFFFF14], eax
:0042E671 EB11                    jmp 0042E684

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E65E(C)
|
:0042E673 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042E679 E81BDDFFFF              call 0042C399
:0042E67E 898514FFFFFF            mov dword ptr [ebp+FFFFFF14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E671(U)
|
:0042E684 C745B400000000          mov [ebp-4C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E652(C), :0042E658(C)
|
:0042E68B 8B45E0                  mov eax, dword ptr [ebp-20]
:0042E68E 25FF000000              and eax, 000000FF
:0042E693 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042E694 B903000000              mov ecx, 00000003
:0042E699 F7F9                    idiv ecx
:0042E69B 83FA02                  cmp edx, 00000002
:0042E69E 750C                    jne 0042E6AC
:0042E6A0 6A01                    push 00000001
:0042E6A2 B9F8F44A00              mov ecx, 004AF4F8
:0042E6A7 E8E46DFFFF              call 00425490

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E69E(C)
|
:0042E6AC E88147FEFF              call 00412E32
:0042E6B1 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042E6B8 750D                    jne 0042E6C7
:0042E6BA 8B5508                  mov edx, dword ptr [ebp+08]
:0042E6BD 81E2FF000000            and edx, 000000FF
:0042E6C3 85D2                    test edx, edx
:0042E6C5 741E                    je 0042E6E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E6B8(C)
|
:0042E6C7 83BD68FFFFFF03          cmp dword ptr [ebp+FFFFFF68], 00000003
:0042E6CE 0F85BE000000            jne 0042E792
:0042E6D4 8B4508                  mov eax, dword ptr [ebp+08]
:0042E6D7 25FF000000              and eax, 000000FF
:0042E6DC 83F802                  cmp eax, 00000002
:0042E6DF 0F85AD000000            jne 0042E792

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E6C5(C)
|
:0042E6E5 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:0042E6EB 2B4DC8                  sub ecx, dword ptr [ebp-38]
:0042E6EE 51                      push ecx
:0042E6EF 8B5588                  mov edx, dword ptr [ebp-78]
:0042E6F2 2B55E8                  sub edx, dword ptr [ebp-18]
:0042E6F5 52                      push edx
:0042E6F6 E867B50000              call 00439C62
:0042E6FB 83C408                  add esp, 00000008
:0042E6FE 837D9400                cmp dword ptr [ebp-6C], 00000000
:0042E702 744C                    je 0042E750

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E704 6A04                    push 00000004
:0042E706 8B4584                  mov eax, dword ptr [ebp-7C]
:0042E709 50                      push eax
:0042E70A 6A30                    push 00000030
:0042E70C 6A30                    push 00000030
:0042E70E 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0042E711 51                      push ecx
:0042E712 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042E715 52                      push edx
:0042E716 E8F7440100              call 00442C12
:0042E71B 83C418                  add esp, 00000018
:0042E71E 837DD800                cmp dword ptr [ebp-28], 00000000
:0042E722 742C                    je 0042E750

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E724 6A04                    push 00000004
:0042E726 6800440000              push 00004400
:0042E72B B940DF4A00              mov ecx, 004ADF40
:0042E730 E8694EFEFF              call 0041359E
:0042E735 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E736 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E738 6A10                    push 00000010
:0042E73A 8B45C4                  mov eax, dword ptr [ebp-3C]
:0042E73D 83C018                  add eax, 00000018
:0042E740 50                      push eax
:0042E741 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042E744 83C120                  add ecx, 00000020
:0042E747 51                      push ecx
:0042E748 E8C5440100              call 00442C12
:0042E74D 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E702(C), :0042E722(C)
|
:0042E750 8B55DC                  mov edx, dword ptr [ebp-24]
:0042E753 81E2FF000000            and edx, 000000FF
:0042E759 83FA0D                  cmp edx, 0000000D
:0042E75C 7534                    jne 0042E792

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E75E 6A04                    push 00000004
:0042E760 6800120100              push 00011200
:0042E765 B940DF4A00              mov ecx, 004ADF40
:0042E76A E82F4EFEFF              call 0041359E
:0042E76F 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042E775 69C900090000            imul ecx, 00000900
:0042E77B 03C1                    add eax, ecx
:0042E77D 50                      push eax
:0042E77E 6A30                    push 00000030
:0042E780 6A30                    push 00000030
:0042E782 8B55C4                  mov edx, dword ptr [ebp-3C]
:0042E785 52                      push edx
:0042E786 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042E789 50                      push eax
:0042E78A E883440100              call 00442C12
:0042E78F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E6CE(C), :0042E6DF(C), :0042E75C(C)
|
:0042E792 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042E799 750E                    jne 0042E7A9
:0042E79B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E79E 81E1FF000000            and ecx, 000000FF
:0042E7A4 83F902                  cmp ecx, 00000002
:0042E7A7 741E                    je 0042E7C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E799(C)
|
:0042E7A9 83BD68FFFFFF03          cmp dword ptr [ebp+FFFFFF68], 00000003
:0042E7B0 0F85EF000000            jne 0042E8A5
:0042E7B6 8B5508                  mov edx, dword ptr [ebp+08]
:0042E7B9 81E2FF000000            and edx, 000000FF
:0042E7BF 85D2                    test edx, edx
:0042E7C1 0F85DE000000            jne 0042E8A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E7A7(C)
|
:0042E7C7 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0042E7CD 2B45C8                  sub eax, dword ptr [ebp-38]
:0042E7D0 038570FFFFFF            add eax, dword ptr [ebp+FFFFFF70]
:0042E7D6 50                      push eax
:0042E7D7 8B4D88                  mov ecx, dword ptr [ebp-78]
:0042E7DA 2B4DE8                  sub ecx, dword ptr [ebp-18]
:0042E7DD 034D9C                  add ecx, dword ptr [ebp-64]
:0042E7E0 51                      push ecx
:0042E7E1 E87CB40000              call 00439C62
:0042E7E6 83C408                  add esp, 00000008
:0042E7E9 837DA400                cmp dword ptr [ebp-5C], 00000000
:0042E7ED 0F84B2000000            je 0042E8A5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E7F3 6A04                    push 00000004
:0042E7F5 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0042E7FB 52                      push edx
:0042E7FC 6A30                    push 00000030
:0042E7FE 6A30                    push 00000030
:0042E800 8B45F0                  mov eax, dword ptr [ebp-10]
:0042E803 83C002                  add eax, 00000002
:0042E806 C1E004                  shl eax, 04
:0042E809 83C008                  add eax, 00000008
:0042E80C 50                      push eax
:0042E80D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042E810 C1E104                  shl ecx, 04
:0042E813 51                      push ecx
:0042E814 E8F9430100              call 00442C12
:0042E819 83C418                  add esp, 00000018
:0042E81C 837DD400                cmp dword ptr [ebp-2C], 00000000
:0042E820 7435                    je 0042E857

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E822 6A04                    push 00000004
:0042E824 6800440000              push 00004400
:0042E829 B940DF4A00              mov ecx, 004ADF40
:0042E82E E86B4DFEFF              call 0041359E
:0042E833 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E834 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042E836 6A10                    push 00000010
:0042E838 8B55F0                  mov edx, dword ptr [ebp-10]
:0042E83B 83C202                  add edx, 00000002
:0042E83E C1E204                  shl edx, 04
:0042E841 83C220                  add edx, 00000020
:0042E844 52                      push edx
:0042E845 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042E848 C1E004                  shl eax, 04
:0042E84B 83C020                  add eax, 00000020
:0042E84E 50                      push eax
:0042E84F E8BE430100              call 00442C12
:0042E854 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E820(C)
|
:0042E857 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042E85A 81E1FF000000            and ecx, 000000FF
:0042E860 83F90D                  cmp ecx, 0000000D
:0042E863 7540                    jne 0042E8A5

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E865 6A04                    push 00000004
:0042E867 6800120100              push 00011200
:0042E86C B940DF4A00              mov ecx, 004ADF40
:0042E871 E8284DFEFF              call 0041359E
:0042E876 8B1578044B00            mov edx, dword ptr [004B0478]
:0042E87C 69D200090000            imul edx, 00000900
:0042E882 03C2                    add eax, edx
:0042E884 50                      push eax
:0042E885 6A30                    push 00000030
:0042E887 6A30                    push 00000030
:0042E889 8B45F0                  mov eax, dword ptr [ebp-10]
:0042E88C 83C002                  add eax, 00000002
:0042E88F C1E004                  shl eax, 04
:0042E892 83C008                  add eax, 00000008
:0042E895 50                      push eax
:0042E896 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042E899 C1E104                  shl ecx, 04
:0042E89C 51                      push ecx
:0042E89D E870430100              call 00442C12
:0042E8A2 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E7B0(C), :0042E7C1(C), :0042E7ED(C), :0042E863(C)
|
:0042E8A5 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042E8AC 720C                    jb 0042E8BA
:0042E8AE C78510FFFFFF20000000    mov dword ptr [ebp+FFFFFF10], 00000020
:0042E8B8 EB3D                    jmp 0042E8F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E8AC(C)
|
:0042E8BA 83BD68FFFFFF03          cmp dword ptr [ebp+FFFFFF68], 00000003
:0042E8C1 721C                    jb 0042E8DF
:0042E8C3 8B5508                  mov edx, dword ptr [ebp+08]
:0042E8C6 81E2FF000000            and edx, 000000FF
:0042E8CC 83FA02                  cmp edx, 00000002
:0042E8CF 750E                    jne 0042E8DF
:0042E8D1 8B45C4                  mov eax, dword ptr [ebp-3C]
:0042E8D4 0345A0                  add eax, dword ptr [ebp-60]
:0042E8D7 89850CFFFFFF            mov dword ptr [ebp+FFFFFF0C], eax
:0042E8DD EB0C                    jmp 0042E8EB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E8C1(C), :0042E8CF(C)
|
:0042E8DF 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0042E8E2 2B4DA0                  sub ecx, dword ptr [ebp-60]
:0042E8E5 898D0CFFFFFF            mov dword ptr [ebp+FFFFFF0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E8DD(U)
|
:0042E8EB 8B950CFFFFFF            mov edx, dword ptr [ebp+FFFFFF0C]
:0042E8F1 899510FFFFFF            mov dword ptr [ebp+FFFFFF10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E8B8(U)
|
:0042E8F7 8B8510FFFFFF            mov eax, dword ptr [ebp+FFFFFF10]
:0042E8FD 898540FFFFFF            mov dword ptr [ebp+FFFFFF40], eax
:0042E903 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042E90A 720E                    jb 0042E91A
:0042E90C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E90F 81E1FF000000            and ecx, 000000FF
:0042E915 83F902                  cmp ecx, 00000002
:0042E918 7426                    je 0042E940

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E90A(C)
|
:0042E91A 83BD68FFFFFF03          cmp dword ptr [ebp+FFFFFF68], 00000003
:0042E921 720D                    jb 0042E930
:0042E923 8B5508                  mov edx, dword ptr [ebp+08]
:0042E926 81E2FF000000            and edx, 000000FF
:0042E92C 85D2                    test edx, edx
:0042E92E 7410                    je 0042E940

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E921(C)
|
:0042E930 B830000000              mov eax, 00000030
:0042E935 2B45A0                  sub eax, dword ptr [ebp-60]
:0042E938 898508FFFFFF            mov dword ptr [ebp+FFFFFF08], eax
:0042E93E EB09                    jmp 0042E949

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E918(C), :0042E92E(C)
|
:0042E940 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042E943 898D08FFFFFF            mov dword ptr [ebp+FFFFFF08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E93E(U)
|
:0042E949 8B9508FFFFFF            mov edx, dword ptr [ebp+FFFFFF08]
:0042E94F 899544FFFFFF            mov dword ptr [ebp+FFFFFF44], edx
:0042E955 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042E95C 7220                    jb 0042E97E
:0042E95E 8B4508                  mov eax, dword ptr [ebp+08]
:0042E961 25FF000000              and eax, 000000FF
:0042E966 83F802                  cmp eax, 00000002
:0042E969 7513                    jne 0042E97E
:0042E96B B930000000              mov ecx, 00000030
:0042E970 2B4DA0                  sub ecx, dword ptr [ebp-60]
:0042E973 6BC930                  imul ecx, 00000030
:0042E976 898D04FFFFFF            mov dword ptr [ebp+FFFFFF04], ecx
:0042E97C EB3A                    jmp 0042E9B8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E95C(C), :0042E969(C)
|
:0042E97E 83BD64FFFFFF03          cmp dword ptr [ebp+FFFFFF64], 00000003
:0042E985 721B                    jb 0042E9A2
:0042E987 8B5508                  mov edx, dword ptr [ebp+08]
:0042E98A 81E2FF000000            and edx, 000000FF
:0042E990 85D2                    test edx, edx
:0042E992 750E                    jne 0042E9A2
:0042E994 8B45A0                  mov eax, dword ptr [ebp-60]
:0042E997 6BC030                  imul eax, 00000030
:0042E99A 898500FFFFFF            mov dword ptr [ebp+FFFFFF00], eax
:0042E9A0 EB0A                    jmp 0042E9AC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E985(C), :0042E992(C)
|
:0042E9A2 C78500FFFFFF00000000    mov dword ptr [ebp+FFFFFF00], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E9A0(U)
|
:0042E9AC 8B8D00FFFFFF            mov ecx, dword ptr [ebp+FFFFFF00]
:0042E9B2 898D04FFFFFF            mov dword ptr [ebp+FFFFFF04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E97C(U)
|
:0042E9B8 8B9504FFFFFF            mov edx, dword ptr [ebp+FFFFFF04]
:0042E9BE 899550FFFFFF            mov dword ptr [ebp+FFFFFF50], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E9C4 6A04                    push 00000004
:0042E9C6 6A00                    push 00000000
:0042E9C8 B920414A00              mov ecx, 004A4120
:0042E9CD E8CC4BFEFF              call 0041359E
:0042E9D2 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042E9D8 33D2                    xor edx, edx
:0042E9DA 8A5104                  mov dl, byte ptr [ecx+04]
:0042E9DD 8BCA                    mov ecx, edx
:0042E9DF 69C9005A0000            imul ecx, 00005A00
:0042E9E5 034DB0                  add ecx, dword ptr [ebp-50]
:0042E9E8 038550FFFFFF            add eax, dword ptr [ebp+FFFFFF50]
:0042E9EE 03C8                    add ecx, eax
:0042E9F0 8B45A0                  mov eax, dword ptr [ebp-60]
:0042E9F3 83E801                  sub eax, 00000001
:0042E9F6 33D2                    xor edx, edx
:0042E9F8 BE18000000              mov esi, 00000018
:0042E9FD F7F6                    div esi
:0042E9FF 83FA0C                  cmp edx, 0000000C
:0042EA02 1BD2                    sbb edx, edx
:0042EA04 42                      inc edx
:0042EA05 69D200090000            imul edx, 00000900
:0042EA0B 03CA                    add ecx, edx
:0042EA0D 51                      push ecx
:0042EA0E 8B8544FFFFFF            mov eax, dword ptr [ebp+FFFFFF44]
:0042EA14 50                      push eax
:0042EA15 6A30                    push 00000030
:0042EA17 8B8D40FFFFFF            mov ecx, dword ptr [ebp+FFFFFF40]
:0042EA1D 51                      push ecx
:0042EA1E 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042EA21 52                      push edx
:0042EA22 E8EB410100              call 00442C12
:0042EA27 83C418                  add esp, 00000018
:0042EA2A 8B45DC                  mov eax, dword ptr [ebp-24]
:0042EA2D 25FF000000              and eax, 000000FF
:0042EA32 83F80D                  cmp eax, 0000000D
:0042EA35 7557                    jne 0042EA8E
:0042EA37 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042EA3A 81E1FF000000            and ecx, 000000FF
:0042EA40 83F90D                  cmp ecx, 0000000D
:0042EA43 7549                    jne 0042EA8E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EA45 6A04                    push 00000004
:0042EA47 6800120100              push 00011200
:0042EA4C B940DF4A00              mov ecx, 004ADF40
:0042EA51 E8484BFEFF              call 0041359E
:0042EA56 8B1578044B00            mov edx, dword ptr [004B0478]
:0042EA5C 69D200090000            imul edx, 00000900
:0042EA62 8B8D50FFFFFF            mov ecx, dword ptr [ebp+FFFFFF50]
:0042EA68 03C8                    add ecx, eax
:0042EA6A 03D1                    add edx, ecx
:0042EA6C 52                      push edx
:0042EA6D 8B9544FFFFFF            mov edx, dword ptr [ebp+FFFFFF44]
:0042EA73 52                      push edx
:0042EA74 6A30                    push 00000030
:0042EA76 8B8540FFFFFF            mov eax, dword ptr [ebp+FFFFFF40]
:0042EA7C 50                      push eax
:0042EA7D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042EA80 51                      push ecx
:0042EA81 E88C410100              call 00442C12
:0042EA86 83C418                  add esp, 00000018
:0042EA89 E9CC000000              jmp 0042EB5A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EA35(C), :0042EA43(C)
|
:0042EA8E 8B55DC                  mov edx, dword ptr [ebp-24]
:0042EA91 81E2FF000000            and edx, 000000FF
:0042EA97 83FA0D                  cmp edx, 0000000D
:0042EA9A 7459                    je 0042EAF5
:0042EA9C 8B4590                  mov eax, dword ptr [ebp-70]
:0042EA9F 25FF000000              and eax, 000000FF
:0042EAA4 83F80D                  cmp eax, 0000000D
:0042EAA7 754C                    jne 0042EAF5
:0042EAA9 837DA018                cmp dword ptr [ebp-60], 00000018
:0042EAAD 7644                    jbe 0042EAF3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EAAF 6A04                    push 00000004
:0042EAB1 6800120100              push 00011200
:0042EAB6 B940DF4A00              mov ecx, 004ADF40
:0042EABB E8DE4AFEFF              call 0041359E
:0042EAC0 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042EAC6 69C900090000            imul ecx, 00000900
:0042EACC 8B9550FFFFFF            mov edx, dword ptr [ebp+FFFFFF50]
:0042EAD2 03D0                    add edx, eax
:0042EAD4 03CA                    add ecx, edx
:0042EAD6 51                      push ecx
:0042EAD7 8B8544FFFFFF            mov eax, dword ptr [ebp+FFFFFF44]
:0042EADD 50                      push eax
:0042EADE 6A30                    push 00000030
:0042EAE0 8B8D40FFFFFF            mov ecx, dword ptr [ebp+FFFFFF40]
:0042EAE6 51                      push ecx
:0042EAE7 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042EAEA 52                      push edx
:0042EAEB E822410100              call 00442C12
:0042EAF0 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EAAD(C)
|
:0042EAF3 EB65                    jmp 0042EB5A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EA9A(C), :0042EAA7(C)
|
:0042EAF5 8B45DC                  mov eax, dword ptr [ebp-24]
:0042EAF8 25FF000000              and eax, 000000FF
:0042EAFD 83F80D                  cmp eax, 0000000D
:0042EB00 7558                    jne 0042EB5A
:0042EB02 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042EB05 81E1FF000000            and ecx, 000000FF
:0042EB0B 83F90D                  cmp ecx, 0000000D
:0042EB0E 744A                    je 0042EB5A
:0042EB10 837DA018                cmp dword ptr [ebp-60], 00000018
:0042EB14 7344                    jnb 0042EB5A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EB16 6A04                    push 00000004
:0042EB18 6800120100              push 00011200
:0042EB1D B940DF4A00              mov ecx, 004ADF40
:0042EB22 E8774AFEFF              call 0041359E
:0042EB27 8B1578044B00            mov edx, dword ptr [004B0478]
:0042EB2D 69D200090000            imul edx, 00000900
:0042EB33 8B8D50FFFFFF            mov ecx, dword ptr [ebp+FFFFFF50]
:0042EB39 03C8                    add ecx, eax
:0042EB3B 03D1                    add edx, ecx
:0042EB3D 52                      push edx
:0042EB3E 8B9544FFFFFF            mov edx, dword ptr [ebp+FFFFFF44]
:0042EB44 52                      push edx
:0042EB45 6A30                    push 00000030
:0042EB47 8B8540FFFFFF            mov eax, dword ptr [ebp+FFFFFF40]
:0042EB4D 50                      push eax
:0042EB4E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042EB51 51                      push ecx
:0042EB52 E8BB400100              call 00442C12
:0042EB57 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EA89(U), :0042EAF3(U), :0042EB00(C), :0042EB0E(C), :0042EB14(C)
|
:0042EB5A B9180A4B00              mov ecx, 004B0A18
:0042EB5F E88A980200              call 004583EE
:0042EB64 25FF000000              and eax, 000000FF
:0042EB69 83F802                  cmp eax, 00000002
:0042EB6C 7418                    je 0042EB86
:0042EB6E B9180A4B00              mov ecx, 004B0A18
:0042EB73 E876980200              call 004583EE
:0042EB78 25FF000000              and eax, 000000FF
:0042EB7D 83F803                  cmp eax, 00000003
:0042EB80 0F85B1000000            jne 0042EC37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EB6C(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EB86 6A04                    push 00000004
:0042EB88 B9180A4B00              mov ecx, 004B0A18
:0042EB8D E89E110000              call 0042FD30
:0042EB92 F7D8                    neg eax
:0042EB94 1BC0                    sbb eax, eax
:0042EB96 2500120000              and eax, 00001200
:0042EB9B 0500EE0000              add eax, 0000EE00
:0042EBA0 50                      push eax
:0042EBA1 B940DF4A00              mov ecx, 004ADF40
:0042EBA6 E8F349FEFF              call 0041359E
:0042EBAB 8B1578044B00            mov edx, dword ptr [004B0478]
:0042EBB1 69D200090000            imul edx, 00000900
:0042EBB7 03C2                    add eax, edx
:0042EBB9 50                      push eax
:0042EBBA 6A30                    push 00000030
:0042EBBC 6A30                    push 00000030
:0042EBBE 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0042EBC4 2B45C8                  sub eax, dword ptr [ebp-38]
:0042EBC7 83C002                  add eax, 00000002
:0042EBCA C1E004                  shl eax, 04
:0042EBCD 83C008                  add eax, 00000008
:0042EBD0 50                      push eax
:0042EBD1 8B4D88                  mov ecx, dword ptr [ebp-78]
:0042EBD4 2B4DE8                  sub ecx, dword ptr [ebp-18]
:0042EBD7 C1E104                  shl ecx, 04
:0042EBDA 51                      push ecx
:0042EBDB E832400100              call 00442C12
:0042EBE0 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EBE3 6A04                    push 00000004
:0042EBE5 B9180A4B00              mov ecx, 004B0A18
:0042EBEA E841110000              call 0042FD30
:0042EBEF F7D8                    neg eax
:0042EBF1 1BC0                    sbb eax, eax
:0042EBF3 2500120000              and eax, 00001200
:0042EBF8 0500EE0000              add eax, 0000EE00
:0042EBFD 50                      push eax
:0042EBFE B940DF4A00              mov ecx, 004ADF40
:0042EC03 E89649FEFF              call 0041359E
:0042EC08 8B1578044B00            mov edx, dword ptr [004B0478]
:0042EC0E 69D200090000            imul edx, 00000900
:0042EC14 03C2                    add eax, edx
:0042EC16 50                      push eax
:0042EC17 6A30                    push 00000030
:0042EC19 6A30                    push 00000030
:0042EC1B 8B45F0                  mov eax, dword ptr [ebp-10]
:0042EC1E 83C002                  add eax, 00000002
:0042EC21 C1E004                  shl eax, 04
:0042EC24 83C008                  add eax, 00000008
:0042EC27 50                      push eax
:0042EC28 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042EC2B C1E104                  shl ecx, 04
:0042EC2E 51                      push ecx
:0042EC2F E8DE3F0100              call 00442C12
:0042EC34 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EB80(C)
|
:0042EC37 E81142FEFF              call 00412E4D
:0042EC3C 8B45E0                  mov eax, dword ptr [ebp-20]
:0042EC3F 25FF000000              and eax, 000000FF
:0042EC44 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042EC45 B903000000              mov ecx, 00000003
:0042EC4A F7F9                    idiv ecx
:0042EC4C 83FA02                  cmp edx, 00000002
:0042EC4F 7505                    jne 0042EC56
:0042EC51 E83A7FFFFF              call 00426B90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC4F(C)
|
:0042EC56 E9CDF9FFFF              jmp 0042E628

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E648(C)
|
:0042EC5B E916070000              jmp 0042F376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042E611(C)
|
:0042EC60 8B5508                  mov edx, dword ptr [ebp+08]
:0042EC63 81E2FF000000            and edx, 000000FF
:0042EC69 83FA03                  cmp edx, 00000003
:0042EC6C 7411                    je 0042EC7F
:0042EC6E 8B4508                  mov eax, dword ptr [ebp+08]
:0042EC71 25FF000000              and eax, 000000FF
:0042EC76 83F801                  cmp eax, 00000001
:0042EC79 0F85F7060000            jne 0042F376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC6C(C)
|
:0042EC7F 8B8D58FFFFFF            mov ecx, dword ptr [ebp+FFFFFF58]
:0042EC85 81E1FF000000            and ecx, 000000FF
:0042EC8B 894DA0                  mov dword ptr [ebp-60], ecx
:0042EC8E EB1D                    jmp 0042ECAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F371(U)
|
:0042EC90 8B9558FFFFFF            mov edx, dword ptr [ebp+FFFFFF58]
:0042EC96 81E2FF000000            and edx, 000000FF
:0042EC9C 8B45A0                  mov eax, dword ptr [ebp-60]
:0042EC9F 03C2                    add eax, edx
:0042ECA1 8945A0                  mov dword ptr [ebp-60], eax
:0042ECA4 8A4DE0                  mov cl, byte ptr [ebp-20]
:0042ECA7 80C101                  add cl, 01
:0042ECAA 884DE0                  mov byte ptr [ebp-20], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC8E(U)
|
:0042ECAD 837DA030                cmp dword ptr [ebp-60], 00000030
:0042ECB1 0F87BF060000            ja 0042F376
:0042ECB7 837DB400                cmp dword ptr [ebp-4C], 00000000
:0042ECBB 7437                    je 0042ECF4
:0042ECBD 837DA018                cmp dword ptr [ebp-60], 00000018
:0042ECC1 7631                    jbe 0042ECF4
:0042ECC3 837DA800                cmp dword ptr [ebp-58], 00000000
:0042ECC7 7413                    je 0042ECDC
:0042ECC9 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042ECCF E8D3D5FFFF              call 0042C2A7
:0042ECD4 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax
:0042ECDA EB11                    jmp 0042ECED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ECC7(C)
|
:0042ECDC 8B8D38FFFFFF            mov ecx, dword ptr [ebp+FFFFFF38]
:0042ECE2 E8B2D6FFFF              call 0042C399
:0042ECE7 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ECDA(U)
|
:0042ECED C745B400000000          mov [ebp-4C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042ECBB(C), :0042ECC1(C)
|
:0042ECF4 8B45E0                  mov eax, dword ptr [ebp-20]
:0042ECF7 25FF000000              and eax, 000000FF
:0042ECFC 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042ECFD B903000000              mov ecx, 00000003
:0042ED02 F7F9                    idiv ecx
:0042ED04 83FA02                  cmp edx, 00000002
:0042ED07 750C                    jne 0042ED15
:0042ED09 6A01                    push 00000001
:0042ED0B B9F8F44A00              mov ecx, 004AF4F8
:0042ED10 E87B67FFFF              call 00425490

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ED07(C)
|
:0042ED15 E81841FEFF              call 00412E32
:0042ED1A 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042ED21 750E                    jne 0042ED31
:0042ED23 8B5508                  mov edx, dword ptr [ebp+08]
:0042ED26 81E2FF000000            and edx, 000000FF
:0042ED2C 83FA03                  cmp edx, 00000003
:0042ED2F 741B                    je 0042ED4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ED21(C)
|
:0042ED31 837D8003                cmp dword ptr [ebp-80], 00000003
:0042ED35 0F85D4000000            jne 0042EE0F
:0042ED3B 8B4508                  mov eax, dword ptr [ebp+08]
:0042ED3E 25FF000000              and eax, 000000FF
:0042ED43 83F801                  cmp eax, 00000001
:0042ED46 0F85C3000000            jne 0042EE0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ED2F(C)
|
:0042ED4C B9A8034B00              mov ecx, 004B03A8
:0042ED51 E83B400100              call 00442D91
:0042ED56 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:0042ED5C 2BC8                    sub ecx, eax
:0042ED5E 51                      push ecx
:0042ED5F B9A8034B00              mov ecx, 004B03A8
:0042ED64 E817400100              call 00442D80
:0042ED69 8B5588                  mov edx, dword ptr [ebp-78]
:0042ED6C 2BD0                    sub edx, eax
:0042ED6E 52                      push edx
:0042ED6F E8EEAE0000              call 00439C62
:0042ED74 83C408                  add esp, 00000008
:0042ED77 837D9400                cmp dword ptr [ebp-6C], 00000000
:0042ED7B 0F848E000000            je 0042EE0F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042ED81 6A04                    push 00000004
:0042ED83 8B4584                  mov eax, dword ptr [ebp-7C]
:0042ED86 50                      push eax
:0042ED87 6A30                    push 00000030
:0042ED89 6A30                    push 00000030
:0042ED8B 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0042ED8E 51                      push ecx
:0042ED8F 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042ED92 52                      push edx
:0042ED93 E87A3E0100              call 00442C12
:0042ED98 83C418                  add esp, 00000018
:0042ED9B 837DD800                cmp dword ptr [ebp-28], 00000000
:0042ED9F 742C                    je 0042EDCD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EDA1 6A04                    push 00000004
:0042EDA3 6800440000              push 00004400
:0042EDA8 B940DF4A00              mov ecx, 004ADF40
:0042EDAD E8EC47FEFF              call 0041359E
:0042EDB2 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042EDB3 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042EDB5 6A10                    push 00000010
:0042EDB7 8B45C4                  mov eax, dword ptr [ebp-3C]
:0042EDBA 83C018                  add eax, 00000018
:0042EDBD 50                      push eax
:0042EDBE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042EDC1 83C120                  add ecx, 00000020
:0042EDC4 51                      push ecx
:0042EDC5 E8483E0100              call 00442C12
:0042EDCA 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ED9F(C)
|
:0042EDCD 8B5590                  mov edx, dword ptr [ebp-70]
:0042EDD0 81E2FF000000            and edx, 000000FF
:0042EDD6 83FA0D                  cmp edx, 0000000D
:0042EDD9 7534                    jne 0042EE0F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EDDB 6A04                    push 00000004
:0042EDDD 6800120100              push 00011200
:0042EDE2 B940DF4A00              mov ecx, 004ADF40
:0042EDE7 E8B247FEFF              call 0041359E
:0042EDEC 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042EDF2 69C900090000            imul ecx, 00000900
:0042EDF8 03C1                    add eax, ecx
:0042EDFA 50                      push eax
:0042EDFB 6A30                    push 00000030
:0042EDFD 6A30                    push 00000030
:0042EDFF 8B55C4                  mov edx, dword ptr [ebp-3C]
:0042EE02 52                      push edx
:0042EE03 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042EE06 50                      push eax
:0042EE07 E8063E0100              call 00442C12
:0042EE0C 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042ED35(C), :0042ED46(C), :0042ED7B(C), :0042EDD9(C)
|
:0042EE0F 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042EE16 750E                    jne 0042EE26
:0042EE18 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042EE1B 81E1FF000000            and ecx, 000000FF
:0042EE21 83F901                  cmp ecx, 00000001
:0042EE24 741C                    je 0042EE42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EE16(C)
|
:0042EE26 837D8003                cmp dword ptr [ebp-80], 00000003
:0042EE2A 0F85F0000000            jne 0042EF20
:0042EE30 8B5508                  mov edx, dword ptr [ebp+08]
:0042EE33 81E2FF000000            and edx, 000000FF
:0042EE39 83FA03                  cmp edx, 00000003
:0042EE3C 0F85DE000000            jne 0042EF20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EE24(C)
|
:0042EE42 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0042EE48 2B45C8                  sub eax, dword ptr [ebp-38]
:0042EE4B 038570FFFFFF            add eax, dword ptr [ebp+FFFFFF70]
:0042EE51 50                      push eax
:0042EE52 8B4D88                  mov ecx, dword ptr [ebp-78]
:0042EE55 2B4DE8                  sub ecx, dword ptr [ebp-18]
:0042EE58 034D9C                  add ecx, dword ptr [ebp-64]
:0042EE5B 51                      push ecx
:0042EE5C E801AE0000              call 00439C62
:0042EE61 83C408                  add esp, 00000008
:0042EE64 837DA400                cmp dword ptr [ebp-5C], 00000000
:0042EE68 0F84B2000000            je 0042EF20

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EE6E 6A04                    push 00000004
:0042EE70 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0042EE76 52                      push edx
:0042EE77 6A30                    push 00000030
:0042EE79 6A30                    push 00000030
:0042EE7B 8B45F0                  mov eax, dword ptr [ebp-10]
:0042EE7E 83C002                  add eax, 00000002
:0042EE81 C1E004                  shl eax, 04
:0042EE84 83C008                  add eax, 00000008
:0042EE87 50                      push eax
:0042EE88 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042EE8B C1E104                  shl ecx, 04
:0042EE8E 51                      push ecx
:0042EE8F E87E3D0100              call 00442C12
:0042EE94 83C418                  add esp, 00000018
:0042EE97 837DD400                cmp dword ptr [ebp-2C], 00000000
:0042EE9B 7435                    je 0042EED2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EE9D 6A04                    push 00000004
:0042EE9F 6800440000              push 00004400
:0042EEA4 B940DF4A00              mov ecx, 004ADF40
:0042EEA9 E8F046FEFF              call 0041359E
:0042EEAE 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042EEAF 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0042EEB1 6A10                    push 00000010
:0042EEB3 8B55F0                  mov edx, dword ptr [ebp-10]
:0042EEB6 83C202                  add edx, 00000002
:0042EEB9 C1E204                  shl edx, 04
:0042EEBC 83C220                  add edx, 00000020
:0042EEBF 52                      push edx
:0042EEC0 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042EEC3 C1E004                  shl eax, 04
:0042EEC6 83C020                  add eax, 00000020
:0042EEC9 50                      push eax
:0042EECA E8433D0100              call 00442C12
:0042EECF 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EE9B(C)
|
:0042EED2 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042EED5 81E1FF000000            and ecx, 000000FF
:0042EEDB 83F90D                  cmp ecx, 0000000D
:0042EEDE 7540                    jne 0042EF20

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EEE0 6A04                    push 00000004
:0042EEE2 6800120100              push 00011200
:0042EEE7 B940DF4A00              mov ecx, 004ADF40
:0042EEEC E8AD46FEFF              call 0041359E
:0042EEF1 8B1578044B00            mov edx, dword ptr [004B0478]
:0042EEF7 69D200090000            imul edx, 00000900
:0042EEFD 03C2                    add eax, edx
:0042EEFF 50                      push eax
:0042EF00 6A30                    push 00000030
:0042EF02 6A30                    push 00000030
:0042EF04 8B45F0                  mov eax, dword ptr [ebp-10]
:0042EF07 83C002                  add eax, 00000002
:0042EF0A C1E004                  shl eax, 04
:0042EF0D 83C008                  add eax, 00000008
:0042EF10 50                      push eax
:0042EF11 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042EF14 C1E104                  shl ecx, 04
:0042EF17 51                      push ecx
:0042EF18 E8F53C0100              call 00442C12
:0042EF1D 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EE2A(C), :0042EE3C(C), :0042EE68(C), :0042EEDE(C)
|
:0042EF20 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042EF27 720C                    jb 0042EF35
:0042EF29 C785F8FEFFFF00000000    mov dword ptr [ebp+FFFFFEF8], 00000000
:0042EF33 EB3A                    jmp 0042EF6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF27(C)
|
:0042EF35 837D8003                cmp dword ptr [ebp-80], 00000003
:0042EF39 721C                    jb 0042EF57
:0042EF3B 8B5508                  mov edx, dword ptr [ebp+08]
:0042EF3E 81E2FF000000            and edx, 000000FF
:0042EF44 83FA01                  cmp edx, 00000001
:0042EF47 750E                    jne 0042EF57
:0042EF49 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042EF4C 0345A0                  add eax, dword ptr [ebp-60]
:0042EF4F 8985F4FEFFFF            mov dword ptr [ebp+FFFFFEF4], eax
:0042EF55 EB0C                    jmp 0042EF63

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EF39(C), :0042EF47(C)
|
:0042EF57 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042EF5A 2B4DA0                  sub ecx, dword ptr [ebp-60]
:0042EF5D 898DF4FEFFFF            mov dword ptr [ebp+FFFFFEF4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF55(U)
|
:0042EF63 8B95F4FEFFFF            mov edx, dword ptr [ebp+FFFFFEF4]
:0042EF69 8995F8FEFFFF            mov dword ptr [ebp+FFFFFEF8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF33(U)
|
:0042EF6F 8B85F8FEFFFF            mov eax, dword ptr [ebp+FFFFFEF8]
:0042EF75 898548FFFFFF            mov dword ptr [ebp+FFFFFF48], eax
:0042EF7B 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042EF82 720E                    jb 0042EF92
:0042EF84 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042EF87 81E1FF000000            and ecx, 000000FF
:0042EF8D 83F901                  cmp ecx, 00000001
:0042EF90 7424                    je 0042EFB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF82(C)
|
:0042EF92 837D8003                cmp dword ptr [ebp-80], 00000003
:0042EF96 720E                    jb 0042EFA6
:0042EF98 8B5508                  mov edx, dword ptr [ebp+08]
:0042EF9B 81E2FF000000            and edx, 000000FF
:0042EFA1 83FA03                  cmp edx, 00000003
:0042EFA4 7410                    je 0042EFB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF96(C)
|
:0042EFA6 B830000000              mov eax, 00000030
:0042EFAB 2B45A0                  sub eax, dword ptr [ebp-60]
:0042EFAE 8985F0FEFFFF            mov dword ptr [ebp+FFFFFEF0], eax
:0042EFB4 EB09                    jmp 0042EFBF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EF90(C), :0042EFA4(C)
|
:0042EFB6 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042EFB9 898DF0FEFFFF            mov dword ptr [ebp+FFFFFEF0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EFB4(U)
|
:0042EFBF 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:0042EFC5 89954CFFFFFF            mov dword ptr [ebp+FFFFFF4C], edx
:0042EFCB 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042EFD2 721D                    jb 0042EFF1
:0042EFD4 8B4508                  mov eax, dword ptr [ebp+08]
:0042EFD7 25FF000000              and eax, 000000FF
:0042EFDC 83F801                  cmp eax, 00000001
:0042EFDF 7510                    jne 0042EFF1
:0042EFE1 B930000000              mov ecx, 00000030
:0042EFE6 2B4DA0                  sub ecx, dword ptr [ebp-60]
:0042EFE9 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0042EFEF EB38                    jmp 0042F029

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EFD2(C), :0042EFDF(C)
|
:0042EFF1 83BD7CFFFFFF03          cmp dword ptr [ebp+FFFFFF7C], 00000003
:0042EFF8 7319                    jnb 0042F013
:0042EFFA 8B5508                  mov edx, dword ptr [ebp+08]
:0042EFFD 81E2FF000000            and edx, 000000FF
:0042F003 83FA03                  cmp edx, 00000003
:0042F006 740B                    je 0042F013
:0042F008 8B45A0                  mov eax, dword ptr [ebp-60]
:0042F00B 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0042F011 EB0A                    jmp 0042F01D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EFF8(C), :0042F006(C)
|
:0042F013 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F011(U)
|
:0042F01D 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0042F023 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EFEF(U)
|
:0042F029 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042F02F 899550FFFFFF            mov dword ptr [ebp+FFFFFF50], edx
:0042F035 C6853CFFFFFF00          mov byte ptr [ebp+FFFFFF3C], 00
:0042F03C EB0E                    jmp 0042F04C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F270(U)
|
:0042F03E 8A853CFFFFFF            mov al, byte ptr [ebp+FFFFFF3C]
:0042F044 0401                    add al, 01
:0042F046 88853CFFFFFF            mov byte ptr [ebp+FFFFFF3C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F03C(U)
|
:0042F04C 8B8D3CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF3C]
:0042F052 81E1FF000000            and ecx, 000000FF
:0042F058 83F930                  cmp ecx, 00000030
:0042F05B 0F8D14020000            jnl 0042F275

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042F061 6A04                    push 00000004
:0042F063 6A00                    push 00000000
:0042F065 B920414A00              mov ecx, 004A4120
:0042F06A E82F45FEFF              call 0041359E
:0042F06F 8B9538FFFFFF            mov edx, dword ptr [ebp+FFFFFF38]
:0042F075 33C9                    xor ecx, ecx
:0042F077 8A4A04                  mov cl, byte ptr [edx+04]
:0042F07A 69C9005A0000            imul ecx, 00005A00
:0042F080 034DB0                  add ecx, dword ptr [ebp-50]
:0042F083 038550FFFFFF            add eax, dword ptr [ebp+FFFFFF50]
:0042F089 03C8                    add ecx, eax
:0042F08B 8B45A0                  mov eax, dword ptr [ebp-60]
:0042F08E 83E801                  sub eax, 00000001
:0042F091 33D2                    xor edx, edx
:0042F093 BE18000000              mov esi, 00000018
:0042F098 F7F6                    div esi
:0042F09A 83FA0C                  cmp edx, 0000000C
:0042F09D 1BD2                    sbb edx, edx
:0042F09F 42                      inc edx
:0042F0A0 69D200090000            imul edx, 00000900
:0042F0A6 03CA                    add ecx, edx
:0042F0A8 8B853CFFFFFF            mov eax, dword ptr [ebp+FFFFFF3C]
:0042F0AE 25FF000000              and eax, 000000FF
:0042F0B3 6BC030                  imul eax, 00000030
:0042F0B6 03C8                    add ecx, eax
:0042F0B8 51                      push ecx
:0042F0B9 6A01                    push 00000001
:0042F0BB 8B8D4CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF4C]
:0042F0C1 51                      push ecx
:0042F0C2 8B953CFFFFFF            mov edx, dword ptr [ebp+FFFFFF3C]
:0042F0C8 81E2FF000000            and edx, 000000FF
:0042F0CE 8B45C4                  mov eax, dword ptr [ebp-3C]
:0042F0D1 03C2                    add eax, edx
:0042F0D3 50                      push eax
:0042F0D4 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:0042F0DA 51                      push ecx
:0042F0DB E8323B0100              call 00442C12
:0042F0E0 83C418                  add esp, 00000018
:0042F0E3 8B55DC                  mov edx, dword ptr [ebp-24]
:0042F0E6 81E2FF000000            and edx, 000000FF
:0042F0EC 83FA0D                  cmp edx, 0000000D
:0042F0EF 7574                    jne 0042F165
:0042F0F1 8B4590                  mov eax, dword ptr [ebp-70]
:0042F0F4 25FF000000              and eax, 000000FF
:0042F0F9 83F80D                  cmp eax, 0000000D
:0042F0FC 7567                    jne 0042F165

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042F0FE 6A04                    push 00000004
:0042F100 6800120100              push 00011200
:0042F105 B940DF4A00              mov ecx, 004ADF40
:0042F10A E88F44FEFF              call 0041359E
:0042F10F 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042F115 69C900090000            imul ecx, 00000900
:0042F11B 8B9550FFFFFF            mov edx, dword ptr [ebp+FFFFFF50]
:0042F121 03D0                    add edx, eax
:0042F123 03CA                    add ecx, edx
:0042F125 8B853CFFFFFF            mov eax, dword ptr [ebp+FFFFFF3C]
:0042F12B 25FF000000              and eax, 000000FF
:0042F130 6BC030                  imul eax, 00000030
:0042F133 03C8                    add ecx, eax
:0042F135 51                      push ecx
:0042F136 6A01                    push 00000001
:0042F138 8B8D4CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF4C]
:0042F13E 51                      push ecx
:0042F13F 8B953CFFFFFF            mov edx, dword ptr [ebp+FFFFFF3C]
:0042F145 81E2FF000000            and edx, 000000FF
:0042F14B 8B45C4                  mov eax, dword ptr [ebp-3C]
:0042F14E 03C2                    add eax, edx
:0042F150 50                      push eax
:0042F151 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:0042F157 51                      push ecx
:0042F158 E8B53A0100              call 00442C12
:0042F15D 83C418                  add esp, 00000018
:0042F160 E90B010000              jmp 0042F270

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F0EF(C), :0042F0FC(C)
|
:0042F165 8B55DC                  mov edx, dword ptr [ebp-24]
:0042F168 81E2FF000000            and edx, 000000FF
:0042F16E 83FA0D                  cmp edx, 0000000D
:0042F171 747A                    je 0042F1ED
:0042F173 8B4590                  mov eax, dword ptr [ebp-70]
:0042F176 25FF000000              and eax, 000000FF
:0042F17B 83F80D                  cmp eax, 0000000D
:0042F17E 756D                    jne 0042F1ED
:0042F180 837DA018                cmp dword ptr [ebp-60], 00000018
:0042F184 7662                    jbe 0042F1E8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042F186 6A04                    push 00000004
:0042F188 6800120100              push 00011200
:0042F18D B940DF4A00              mov ecx, 004ADF40
:0042F192 E80744FEFF              call 0041359E
:0042F197 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042F19D 69C900090000            imul ecx, 00000900
:0042F1A3 8B9550FFFFFF            mov edx, dword ptr [ebp+FFFFFF50]
:0042F1A9 03D0                    add edx, eax
:0042F1AB 03CA                    add ecx, edx
:0042F1AD 8B853CFFFFFF            mov eax, dword ptr [ebp+FFFFFF3C]
:0042F1B3 25FF000000              and eax, 000000FF
:0042F1B8 6BC030                  imul eax, 00000030
:0042F1BB 03C8                    add ecx, eax
:0042F1BD 51                      push ecx
:0042F1BE 6A01                    push 00000001
:0042F1C0 8B8D4CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF4C]
:0042F1C6 51                      push ecx
:0042F1C7 8B953CFFFFFF            mov edx, dword ptr [ebp+FFFFFF3C]
:0042F1CD 81E2FF000000            and edx, 000000FF
:0042F1D3 8B45C4                  mov eax, dword ptr [ebp-3C]
:0042F1D6 03C2                    add eax, edx
:0042F1D8 50                      push eax
:0042F1D9 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:0042F1DF 51                      push ecx
:0042F1E0 E82D3A0100              call 00442C12
:0042F1E5 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F184(C)
|
:0042F1E8 E983000000              jmp 0042F270

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F171(C), :0042F17E(C)
|
:0042F1ED 8B55DC                  mov edx, dword ptr [ebp-24]
:0042F1F0 81E2FF000000            and edx, 000000FF
:0042F1F6 83FA0D                  cmp edx, 0000000D
:0042F1F9 7575                    jne 0042F270
:0042F1FB 8B4590                  mov eax, dword ptr [ebp-70]
:0042F1FE 25FF000000              and eax, 000000FF
:0042F203 83F80D                  cmp eax, 0000000D
:0042F206 7468                    je 0042F270
:0042F208 837DA018                cmp dword ptr [ebp-60], 00000018
:0042F20C 7362                    jnb 0042F270

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042F20E 6A04                    push 00000004
:0042F210 6800120100              push 00011200
:0042F215 B940DF4A00              mov ecx, 004ADF40
:0042F21A E87F43FEFF              call 0041359E
:0042F21F 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0042F225 69C900090000            imul ecx, 00000900
:0042F22B 8B9550FFFFFF            mov edx, dword ptr [ebp+FFFFFF50]
:0042F231 03D0                    add edx, eax
:0042F233 03CA                    add ecx, edx
:0042F235 8B853CFFFFFF            mov eax, dword ptr [ebp+FFFFFF3C]
:0042F23B 25FF000000              and eax, 000000FF
:0042F240 6BC030                  imul eax, 00000030
:0042F243 03C8                    add ecx, eax
:0042F245 51                      push ecx
:0042F246 6A01                    push 00000001
:0042F248 8B8D4CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF4C]
:0042F24E 51                      push ecx
:0042F24F 8B953CFFFFFF            mov edx, dword ptr [ebp+FFFFFF3C]
:0042F255 81E2FF000000            and edx, 000000FF
:0042F25B 8B45C4                  mov eax, dword ptr [ebp-3C]
:0042F25E 03C2                    add eax, edx
:0042F260 50                      push eax
:0042F261 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:0042F267 51                      push ecx
:0042F268 E8A5390100              call 00442C12
:0042F26D 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F160(U), :0042F1E8(U), :0042F1F9(C), :0042F206(C), :0042F20C(C)
|
:0042F270 E9C9FDFFFF              jmp 0042F03E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F05B(C)
|
:0042F275 B9180A4B00              mov ecx, 004B0A18
:0042F27A E86F910200              call 004583EE
:0042F27F 25FF000000              and eax, 000000FF
:0042F284 83F802                  cmp eax, 00000002
:0042F287 7418                    je 0042F2A1
:0042F289 B9180A4B00              mov ecx, 004B0A18
:0042F28E E85B910200              call 004583EE
:0042F293 25FF000000              and eax, 000000FF
:0042F298 83F803                  cmp eax, 00000003
:0042F29B 0F85B1000000            jne 0042F352

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F287(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042F2A1 6A04                    push 00000004
:0042F2A3 B9180A4B00              mov ecx, 004B0A18
:0042F2A8 E8830A0000              call 0042FD30
:0042F2AD F7D8                    neg eax
:0042F2AF 1BC0                    sbb eax, eax
:0042F2B1 2500120000              and eax, 00001200
:0042F2B6 0500EE0000              add eax, 0000EE00
:0042F2BB 50                      push eax
:0042F2BC B940DF4A00              mov ecx, 004ADF40
:0042F2C1 E8D842FEFF              call 0041359E
:0042F2C6 8B1578044B00            mov edx, dword ptr [004B0478]
:0042F2CC 69D200090000            imul edx, 00000900
:0042F2D2 03C2                    add eax, edx
:0042F2D4 50                      push eax
:0042F2D5 6A30                    push 00000030
:0042F2D7 6A30                    push 00000030
:0042F2D9 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0042F2DF 2B45C8                  sub eax, dword ptr [ebp-38]
:0042F2E2 83C002                  add eax, 00000002
:0042F2E5 C1E004                  shl eax, 04
:0042F2E8 83C008                  add eax, 00000008
:0042F2EB 50                      push eax
:0042F2EC 8B4D88                  mov ecx, dword ptr [ebp-78]
:0042F2EF 2B4DE8                  sub ecx, dword ptr [ebp-18]
:0042F2F2 C1E104                  shl ecx, 04
:0042F2F5 51                      push ecx
:0042F2F6 E817390100              call 00442C12
:0042F2FB 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042F2FE 6A04                    push 00000004
:0042F300 B9180A4B00              mov ecx, 004B0A18
:0042F305 E8260A0000              call 0042FD30
:0042F30A F7D8                    neg eax
:0042F30C 1BC0                    sbb eax, eax
:0042F30E 2500120000              and eax, 00001200
:0042F313 0500EE0000              add eax, 0000EE00
:0042F318 50                      push eax
:0042F319 B940DF4A00              mov ecx, 004ADF40
:0042F31E E87B42FEFF              call 0041359E
:0042F323 8B1578044B00            mov edx, dword ptr [004B0478]
:0042F329 69D200090000            imul edx, 00000900
:0042F32F 03C2                    add eax, edx
:0042F331 50                      push eax
:0042F332 6A30                    push 00000030
:0042F334 6A30                    push 00000030
:0042F336 8B45F0                  mov eax, dword ptr [ebp-10]
:0042F339 83C002                  add eax, 00000002
:0042F33C C1E004                  shl eax, 04
:0042F33F 83C008                  add eax, 00000008
:0042F342 50                      push eax
:0042F343 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042F346 C1E104                  shl ecx, 04
:0042F349 51                      push ecx
:0042F34A E8C3380100              call 00442C12
:0042F34F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F29B(C)
|
:0042F352 E8F63AFEFF              call 00412E4D
:0042F357 8B45E0                  mov eax, dword ptr [ebp-20]
:0042F35A 25FF000000              and eax, 000000FF
:0042F35F 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042F360 B903000000              mov ecx, 00000003
:0042F365 F7F9                    idiv ecx
:0042F367 83FA02                  cmp edx, 00000002
:0042F36A 7505                    jne 0042F371
:0042F36C E81F78FFFF              call 00426B90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F36A(C)
|
:0042F371 E91AF9FFFF              jmp 0042EC90

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DB87(U), :0042DBAF(U), :0042E595(U), :0042E5D4(C), :0042E5F3(C)
|:0042EC5B(U), :0042EC79(C), :0042ECB1(C)
|
:0042F376 5E                      pop esi
:0042F377 8BE5                    mov esp, ebp
:0042F379 5D                      pop ebp
:0042F37A C20400                  ret 0004



:0042F37D F2D94200                DWORD 0042D9F2
:0042F381 42DA4200                DWORD 0042DA42
:0042F385 20DA4200                DWORD 0042DA20
:0042F389 65DA4200                DWORD 0042DA65



* Referenced by a CALL at Addresses:
|:00458CD2   , :00458DA0   , :004596FC   
|
:0042F38D 55                      push ebp
:0042F38E 8BEC                    mov ebp, esp
:0042F390 83EC08                  sub esp, 00000008
:0042F393 894DF8                  mov dword ptr [ebp-08], ecx
:0042F396 8A450C                  mov al, byte ptr [ebp+0C]
:0042F399 50                      push eax
:0042F39A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F39D 51                      push ecx
:0042F39E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0042F3A1 E8DA040000              call 0042F880
:0042F3A6 8D55FC                  lea edx, dword ptr [ebp-04]
:0042F3A9 52                      push edx
:0042F3AA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F3AD E8CEDDFFFF              call 0042D180
:0042F3B2 85C0                    test eax, eax
:0042F3B4 741B                    je 0042F3D1
:0042F3B6 8B45F8                  mov eax, dword ptr [ebp-08]
:0042F3B9 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F3BC 884808                  mov byte ptr [eax+08], cl
:0042F3BF 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F3C2 8A450C                  mov al, byte ptr [ebp+0C]
:0042F3C5 884209                  mov byte ptr [edx+09], al
:0042F3C8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F3CB C64107FF                mov [ecx+07], FF
:0042F3CF EB42                    jmp 0042F413

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F3B4(C)
|
:0042F3D1 8B5508                  mov edx, dword ptr [ebp+08]
:0042F3D4 81E2FF000000            and edx, 000000FF
:0042F3DA 33C0                    xor eax, eax
:0042F3DC A0800A4B00              mov al, byte ptr [004B0A80]
:0042F3E1 3BD0                    cmp edx, eax
:0042F3E3 7D2E                    jge 0042F413
:0042F3E5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042F3E8 81E1FF000000            and ecx, 000000FF
:0042F3EE 33D2                    xor edx, edx
:0042F3F0 8A15810A4B00            mov dl, byte ptr [004B0A81]
:0042F3F6 3BCA                    cmp ecx, edx
:0042F3F8 7D19                    jge 0042F413
:0042F3FA 8B45F8                  mov eax, dword ptr [ebp-08]
:0042F3FD 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F400 884808                  mov byte ptr [eax+08], cl
:0042F403 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F406 8A450C                  mov al, byte ptr [ebp+0C]
:0042F409 884209                  mov byte ptr [edx+09], al
:0042F40C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F40F C64107FF                mov [ecx+07], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F3CF(U), :0042F3E3(C), :0042F3F8(C)
|
:0042F413 8BE5                    mov esp, ebp
:0042F415 5D                      pop ebp
:0042F416 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0042BEFC   , :0042C13B   , :0042C254   , :0043194D   , :0043195F   
|:00431C48   , :00431FDF   , :004320BD   , :0043234B   , :0043398D   
|:0044719F   , :00448C7A   , :00449F94   , :0044D7F3   , :0044DC16   
|:0044DF29   , :0045618C   , :00458D32   , :004598FF   
|
:0042F419 55                      push ebp
:0042F41A 8BEC                    mov ebp, esp
:0042F41C 51                      push ecx
:0042F41D 894DFC                  mov dword ptr [ebp-04], ecx
:0042F420 8B4508                  mov eax, dword ptr [ebp+08]
:0042F423 25FF000000              and eax, 000000FF
:0042F428 F7D0                    not eax
:0042F42A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F42D 8A510C                  mov dl, byte ptr [ecx+0C]
:0042F430 22D0                    and dl, al
:0042F432 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F435 88500C                  mov byte ptr [eax+0C], dl
:0042F438 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F43B 8A510C                  mov dl, byte ptr [ecx+0C]
:0042F43E 0A5508                  or dl, byte ptr [ebp+08]
:0042F441 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F444 88500C                  mov byte ptr [eax+0C], dl
:0042F447 8BE5                    mov esp, ebp
:0042F449 5D                      pop ebp
:0042F44A C20400                  ret 0004


:0042F44D 55                      push ebp
:0042F44E 8BEC                    mov ebp, esp
:0042F450 83EC08                  sub esp, 00000008
:0042F453 894DF8                  mov dword ptr [ebp-08], ecx
:0042F456 8B45F8                  mov eax, dword ptr [ebp-08]
:0042F459 8B08                    mov ecx, dword ptr [eax]
:0042F45B 6BC970                  imul ecx, 00000070
:0042F45E 81C198224900            add ecx, 00492298
:0042F464 E8A830FDFF              call 00402511
:0042F469 8945FC                  mov dword ptr [ebp-04], eax
:0042F46C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F46F E83C54FDFF              call 004048B0
:0042F474 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F477 03C8                    add ecx, eax
:0042F479 394DFC                  cmp dword ptr [ebp-04], ecx
:0042F47C 7D0E                    jge 0042F48C
:0042F47E 8B55FC                  mov edx, dword ptr [ebp-04]
:0042F481 52                      push edx
:0042F482 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F485 E833B5FFFF              call 0042A9BD
:0042F48A EB14                    jmp 0042F4A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F47C(C)
|
:0042F48C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F48F E81C54FDFF              call 004048B0
:0042F494 034508                  add eax, dword ptr [ebp+08]
:0042F497 50                      push eax
:0042F498 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F49B E81DB5FFFF              call 0042A9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F48A(U)
|
:0042F4A0 8BE5                    mov esp, ebp
:0042F4A2 5D                      pop ebp
:0042F4A3 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042C3C3   , :0042CD20   , :0042DD2D   , :00445175   , :00445F8F   
|:0044602C   , :004486C4   , :00448703   , :00448BA8   , :0044DCEA   
|:0044DD31   , :0044DD89   , :0044DDCD   , :0045616C   , :00456FCB   
|:0045708C   , :0045765A   , :00457780   , :00459DA2   
|
:0042F4A6 55                      push ebp
:0042F4A7 8BEC                    mov ebp, esp
:0042F4A9 83EC08                  sub esp, 00000008
:0042F4AC 894DF8                  mov dword ptr [ebp-08], ecx
:0042F4AF C745FC00000000          mov [ebp-04], 00000000
:0042F4B6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F4B9 E8C2070000              call 0042FC80
:0042F4BE 25FF000000              and eax, 000000FF
:0042F4C3 83F81C                  cmp eax, 0000001C
:0042F4C6 7D07                    jge 0042F4CF
:0042F4C8 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F4C6(C)
|
:0042F4CF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F4D2 8BE5                    mov esp, ebp
:0042F4D4 5D                      pop ebp
:0042F4D5 C3                      ret



* Referenced by a CALL at Addresses:
|:00434030   , :00434E9D   , :0043C58F   , :0045773F   
|
:0042F4D6 55                      push ebp
:0042F4D7 8BEC                    mov ebp, esp
:0042F4D9 83EC08                  sub esp, 00000008
:0042F4DC 894DF8                  mov dword ptr [ebp-08], ecx
:0042F4DF C745FC00000000          mov [ebp-04], 00000000
:0042F4E6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F4E9 E88253FDFF              call 00404870
:0042F4EE 85C0                    test eax, eax
:0042F4F0 7507                    jne 0042F4F9
:0042F4F2 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F4F0(C)
|
:0042F4F9 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F4FC 8BE5                    mov esp, ebp
:0042F4FE 5D                      pop ebp
:0042F4FF C3                      ret



* Referenced by a CALL at Addresses:
|:0042C0D2   , :0043339D   
|
:0042F500 55                      push ebp
:0042F501 8BEC                    mov ebp, esp
:0042F503 83EC08                  sub esp, 00000008
:0042F506 56                      push esi
:0042F507 894DF8                  mov dword ptr [ebp-08], ecx
:0042F50A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F50D E86E070000              call 0042FC80
:0042F512 8845FC                  mov byte ptr [ebp-04], al
:0042F515 8A4508                  mov al, byte ptr [ebp+08]
:0042F518 50                      push eax
:0042F519 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F51C 8B09                    mov ecx, dword ptr [ecx]
:0042F51E 6BC970                  imul ecx, 00000070
:0042F521 81C198224900            add ecx, 00492298
:0042F527 E83528FDFF              call 00401D61
:0042F52C 8B75FC                  mov esi, dword ptr [ebp-04]
:0042F52F 81E6FF000000            and esi, 000000FF
:0042F535 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F538 E843070000              call 0042FC80
:0042F53D 25FF000000              and eax, 000000FF
:0042F542 3BF0                    cmp esi, eax
:0042F544 7410                    je 0042F556
:0042F546 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F549 E870CFFFFF              call 0042C4BE
:0042F54E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F551 E8F2D6FFFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F544(C)
|
:0042F556 5E                      pop esi
:0042F557 8BE5                    mov esp, ebp
:0042F559 5D                      pop ebp
:0042F55A C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00431260   , :004314EA   , :00449ECF   , :0044DB7E   
|
:0042F55D 55                      push ebp
:0042F55E 8BEC                    mov ebp, esp
:0042F560 83EC0C                  sub esp, 0000000C
:0042F563 894DF8                  mov dword ptr [ebp-08], ecx
:0042F566 B9180A4B00              mov ecx, 004B0A18
:0042F56B E87E8E0200              call 004583EE
:0042F570 8845FC                  mov byte ptr [ebp-04], al
:0042F573 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F576 E8D5070000              call 0042FD50
:0042F57B 25FF000000              and eax, 000000FF
:0042F580 83F803                  cmp eax, 00000003
:0042F583 7412                    je 0042F597
:0042F585 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F588 E8C3070000              call 0042FD50
:0042F58D 25FF000000              and eax, 000000FF
:0042F592 83F804                  cmp eax, 00000004
:0042F595 7565                    jne 0042F5FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F583(C)
|
:0042F597 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F59A 25FF000000              and eax, 000000FF
:0042F59F 83F802                  cmp eax, 00000002
:0042F5A2 740E                    je 0042F5B2
:0042F5A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F5A7 81E1FF000000            and ecx, 000000FF
:0042F5AD 83F903                  cmp ecx, 00000003
:0042F5B0 754A                    jne 0042F5FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F5A2(C)
|
:0042F5B2 837D0800                cmp dword ptr [ebp+08], 00000000
:0042F5B6 743D                    je 0042F5F5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042F5B8 6A07                    push 00000007
:0042F5BA B9800D4B00              mov ecx, 004B0D80
:0042F5BF E8E5250300              call 00461BA9
:0042F5C4 8B55FC                  mov edx, dword ptr [ebp-04]
:0042F5C7 81E2FF000000            and edx, 000000FF
:0042F5CD 83FA02                  cmp edx, 00000002
:0042F5D0 7509                    jne 0042F5DB

* Possible StringData Ref from Data Obj ->"B"
                                  |
:0042F5D2 C745F4F4834700          mov [ebp-0C], 004783F4
:0042F5D9 EB07                    jmp 0042F5E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F5D0(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:0042F5DB C745F4F8834700          mov [ebp-0C], 004783F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F5D9(U)
|
:0042F5E2 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042F5E5 50                      push eax

* Possible StringData Ref from Data Obj ->"ѩѮ%sAҥHLkC"
                                  |
:0042F5E6 68FC834700              push 004783FC
:0042F5EB 6A00                    push 00000000
:0042F5ED E87A95FFFF              call 00428B6C
:0042F5F2 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F5B6(C)
|
:0042F5F5 33C0                    xor eax, eax
:0042F5F7 E98D000000              jmp 0042F689

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F595(C), :0042F5B0(C)
|
:0042F5FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F5FF E86C070000              call 0042FD70
:0042F604 25FF000000              and eax, 000000FF
:0042F609 85C0                    test eax, eax
:0042F60B 7425                    je 0042F632
:0042F60D 837D0800                cmp dword ptr [ebp+08], 00000000
:0042F611 741B                    je 0042F62E

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042F613 6A07                    push 00000007
:0042F615 B9800D4B00              mov ecx, 004B0D80
:0042F61A E88A250300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩˤġAU@^X"
                                  |
:0042F61F 681C844700              push 0047841C
:0042F624 6A00                    push 00000000
:0042F626 E84195FFFF              call 00428B6C
:0042F62B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F611(C)
|
:0042F62E 33C0                    xor eax, eax
:0042F630 EB57                    jmp 0042F689

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F60B(C)
|
:0042F632 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F635 E816070000              call 0042FD50
:0042F63A 25FF000000              and eax, 000000FF
:0042F63F 83F804                  cmp eax, 00000004
:0042F642 7540                    jne 0042F684
:0042F644 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F647 E8549DFFFF              call 004293A0
:0042F64C 50                      push eax
:0042F64D E82D830100              call 0044797F
:0042F652 83C404                  add esp, 00000004
:0042F655 25FF000000              and eax, 000000FF
:0042F65A 83F80D                  cmp eax, 0000000D
:0042F65D 7525                    jne 0042F684
:0042F65F 837D0800                cmp dword ptr [ebp+08], 00000000
:0042F663 741B                    je 0042F680

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042F665 6A07                    push 00000007
:0042F667 B9800D4B00              mov ecx, 004B0D80
:0042F66C E838250300              call 00461BA9

* Possible StringData Ref from Data Obj ->"LyLkC"
                                  |
:0042F671 683C844700              push 0047843C
:0042F676 6A00                    push 00000000
:0042F678 E8EF94FFFF              call 00428B6C
:0042F67D 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F663(C)
|
:0042F680 33C0                    xor eax, eax
:0042F682 EB05                    jmp 0042F689

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F642(C), :0042F65D(C)
|
:0042F684 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F5F7(U), :0042F630(U), :0042F682(U)
|
:0042F689 8BE5                    mov esp, ebp
:0042F68B 5D                      pop ebp
:0042F68C C20400                  ret 0004



* Referenced by a CALL at Address:
|:004556A5   
|
:0042F68F 55                      push ebp
:0042F690 8BEC                    mov ebp, esp
:0042F692 51                      push ecx
:0042F693 894DFC                  mov dword ptr [ebp-04], ecx
:0042F696 8BE5                    mov esp, ebp
:0042F698 5D                      pop ebp
:0042F699 C3                      ret


:0042F69A CC                      int 03
:0042F69B CC                      int 03
:0042F69C CC                      int 03
:0042F69D CC                      int 03
:0042F69E CC                      int 03
:0042F69F CC                      int 03
:0042F6A0 55                      push ebp
:0042F6A1 8BEC                    mov ebp, esp
:0042F6A3 51                      push ecx
:0042F6A4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F6A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F6AA 83C105                  add ecx, 00000005
:0042F6AD E8FE80FDFF              call 004077B0
:0042F6B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F6B5 83C108                  add ecx, 00000008
:0042F6B8 E8F380FDFF              call 004077B0
:0042F6BD 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042F6C0 C700FF000000            mov dword ptr [eax], 000000FF
:0042F6C6 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F6C9 8BE5                    mov esp, ebp
:0042F6CB 5D                      pop ebp
:0042F6CC C3                      ret


:0042F6CD CC                      int 03
:0042F6CE CC                      int 03
:0042F6CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00404961   , :0040496F   , :00404986   , :0040499B   , :00404A8B   
|:00404ACF   , :00404AE2   , :0040500D   , :0040501F   , :0040526C   
|:004052D7   , :004052F7   , :00406A93   , :00406AD7   , :00409A9A   
|:00414A77   , :00414A8E   , :0041D62E   , :0041D6CE   , :0041DC08   
|:0041EC4C   , :0041ECED   , :0041EDA9   , :0041EF00   , :0041F062   
|:0041F32C   , :00429757   , :0042A026   , :0042AAE8   , :0042ABE0   
|:0042C287   , :0042C6D7   , :0042C9C3   , :0042D4C6   , :0042D506   
|:0042FDCF   , :0042FE26   , :004300F9   , :00430C92   , :00430EFB   
|:00431196   , :0043175F   , :00431F42   , :004321C7   , :00432492   
|:004325C5   , :00432744   , :00432928   , :00432B55   , :00432BF3   
|:00432C32   , :00432D59   , :0043302D   , :00433152   , :00433341   
|:004358FF   , :00435936   , :0043602A   , :00436083   , :004362FE   
|:00436357   , :004366B2   , :0043676B   , :004367E5   , :00436A3C   
|:00436CD1   , :00436D68   , :00436FB1   , :00437063   , :0043728F   
|:00437330   , :0043777F   , :0043779F   , :004377F8   , :00437844   
|:004378D1   , :00437A10   , :00437A9B   , :00437BAB   , :00437D05   
|:00437E87   , :00438009   , :00438046   , :0043813A   , :00438405   
|:004384EC   , :0043858C   , :004385CB   , :004387F5   , :004389A7   
|:00438BBB   , :00438BD9   , :00438C04   , :00438C5D   , :00438DE7   
|:00439217   , :00439549   , :00439DDA   , :0043BB47   , :0043BC02   
|:0043BD90   , :0043BDAE   , :0043BF91   , :0043C0AD   , :0043C25C   
|:0043C29E   , :0043C6A3   , :0043C718   , :0043C74A   , :0043CB2D   
|:0043CF45   , :0043CF61   , :0043D142   , :004421F4   , :004424A5   
|:00446D1B   , :00446E7B   , :00447038   , :004471DD   , :00448D62   
|:00449149   , :0044A70F   , :0044AD25   , :0044B365   , :0044B5A3   
|:0044C0F7   , :0044C146   , :0044C2BB   , :0044C570   , :004504DF   
|:00450579   , :00450825   , :00450847   , :00450869   , :0045088B   
|:004508AD   , :00450ACE   , :00450AF0   , :00450B12   , :00450B34   
|:00450D17   , :00450D36   , :00450D55   , :004539CD   , :00455131   
|:004560D8   , :00457015   , :004570DB   , :0045710B   , :004571F0   
|:00457725   , :00457799   , :00457858   , :00458921   , :00458C6E   
|:00458EFD   , :00459A14   , :00459A5F   , :00459A81   , :00459CB6   
|:00459DEF   , :00459ED0   , :00459FB3   , :0045D593   , :0045D63E   
|:004651ED   , :004652AF   , :00466C78   , :00466E09   , :0046705F   
|:00467076   , :00469C79   , :00469C90   , :00469CA1   , :00469CB8   
|:00469E15   , :00469E2E   , :00469E66   , :00469E7F   
|
:0042F6D0 55                      push ebp
:0042F6D1 8BEC                    mov ebp, esp
:0042F6D3 51                      push ecx
:0042F6D4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F6D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F6DA 8B00                    mov eax, dword ptr [eax]
:0042F6DC 8BE5                    mov esp, ebp
:0042F6DE 5D                      pop ebp
:0042F6DF C3                      ret



* Referenced by a CALL at Addresses:
|:004298A6   , :004298EC   , :0042995D   , :0042A608   , :0042C87E   
|:0042C8BE   , :0042D6D3   , :00433514   , :00435F2C   , :004367AF   
|:0043701C   , :004372FA   , :0043C2C5   , :0043C36F   , :0043CDF5   
|:00442335   , :00445190   , :00455873   , :004558EE   
|
:0042F6E0 55                      push ebp
:0042F6E1 8BEC                    mov ebp, esp
:0042F6E3 51                      push ecx
:0042F6E4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F6E7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F6EA 8B08                    mov ecx, dword ptr [eax]
:0042F6EC 6BC970                  imul ecx, 00000070
:0042F6EF 81C198224900            add ecx, 00492298
:0042F6F5 E8A844FDFF              call 00403BA2
:0042F6FA 8BE5                    mov esp, ebp
:0042F6FC 5D                      pop ebp
:0042F6FD C3                      ret


:0042F6FE CC                      int 03
:0042F6FF CC                      int 03

* Referenced by a CALL at Addresses:
|:004299A5   , :0042A047   , :0042B251   , :0042B30D   , :0042B4D2   
|:0043CC56   , :0043D19C   , :004461C3   , :004463D2   , :0044DCE2   
|:0044DD09   , :0044DD29   , :0044DD50   , :0044DD81   , :0044DDA8   
|:0044DDC5   , :0044DDEC   , :00452FDE   
|
:0042F700 55                      push ebp
:0042F701 8BEC                    mov ebp, esp
:0042F703 51                      push ecx
:0042F704 894DFC                  mov dword ptr [ebp-04], ecx
:0042F707 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F70A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F70D 894804                  mov dword ptr [eax+04], ecx
:0042F710 8BE5                    mov esp, ebp
:0042F712 5D                      pop ebp
:0042F713 C20400                  ret 0004


:0042F716 CC                      int 03
:0042F717 CC                      int 03
:0042F718 CC                      int 03
:0042F719 CC                      int 03
:0042F71A CC                      int 03
:0042F71B CC                      int 03
:0042F71C CC                      int 03
:0042F71D CC                      int 03
:0042F71E CC                      int 03
:0042F71F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429A0C   , :0042B877   , :0042B8D0   , :0042BBD3   , :00432AA7   
|:00432BC7   , :00432BD8   , :0043671D   , :00436738   , :00438487   
|:00438560   , :00438571   , :00449266   , :0044A9BF   , :0044AC5A   
|:0044BEA2   , :0044BEE2   , :004656F5   
|
:0042F720 55                      push ebp
:0042F721 8BEC                    mov ebp, esp
:0042F723 51                      push ecx
:0042F724 894DFC                  mov dword ptr [ebp-04], ecx
:0042F727 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F72A 33C9                    xor ecx, ecx
:0042F72C 8A4819                  mov cl, byte ptr [eax+19]
:0042F72F 8BC1                    mov eax, ecx
:0042F731 24BF                    and al, BF
:0042F733 8BE5                    mov esp, ebp
:0042F735 5D                      pop ebp
:0042F736 C3                      ret


:0042F737 CC                      int 03
:0042F738 CC                      int 03
:0042F739 CC                      int 03
:0042F73A CC                      int 03
:0042F73B CC                      int 03
:0042F73C CC                      int 03
:0042F73D CC                      int 03
:0042F73E CC                      int 03
:0042F73F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429A4D   , :0042B8FD   , :0042B956   , :0042BC57   , :00432AE1   
|:00432C06   , :00432C17   , :00436BAE   , :00436D1A   , :00436D35   
|:004384A0   , :0043859F   , :004385B0   , :004492B3   , :004492FB   
|:0044AA01   , :0044AC8C   , :0044BF5D   , :0044BF9C   , :00465751   
|
:0042F740 55                      push ebp
:0042F741 8BEC                    mov ebp, esp
:0042F743 51                      push ecx
:0042F744 894DFC                  mov dword ptr [ebp-04], ecx
:0042F747 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F74A 33C9                    xor ecx, ecx
:0042F74C 8A481A                  mov cl, byte ptr [eax+1A]
:0042F74F 8BC1                    mov eax, ecx
:0042F751 24BF                    and al, BF
:0042F753 8BE5                    mov esp, ebp
:0042F755 5D                      pop ebp
:0042F756 C3                      ret


:0042F757 CC                      int 03
:0042F758 CC                      int 03
:0042F759 CC                      int 03
:0042F75A CC                      int 03
:0042F75B CC                      int 03
:0042F75C CC                      int 03
:0042F75D CC                      int 03
:0042F75E CC                      int 03
:0042F75F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429CF9   , :00429D62   , :00429DD1   , :00429E3A   , :00429EA9   
|:00429F12   , :00429F81   , :00429FEA   , :0042AC10   , :0042B23C   
|:0042B502   , :0042B98F   , :0042B9BD   , :0042B9EB   , :0042BA21   
|:0042BAA5   , :0042BAE5   , :0042BB25   , :0042BB65   , :0042BCEC   
|:0042BD15   , :0042BD36   , :0042BD57   , :0042D6BB   , :0042D780   
|:004304B9   , :00430557   , :00430646   , :00432F26   , :00432F59   
|:00432F89   , :00432FB9   , :00435F05   , :0043678E   , :00436FFB   
|:004372D9   , :0043736F   , :004373AA   , :004380BD   , :004380CC   
|:004380DB   , :004380EA   , :004395B8   , :0043AE3C   , :0043B3C4   
|:0043C1CF   , :00448F7A   , :0044A958   , :0044A997   , :0044AA45   
|:0044AA6F   , :0044AA99   , :0044ABA0   , :0044ABCF   , :0044ABFE   
|:0044AC2D   , :0044B853   , :0044BB4E   , :0044BB82   , :0044BBB5   
|:0044BCB7   , :0044C61E   , :0044CA96   , :0045733D   , :00457641   
|:00457767   , :004657AC   , :00465804   , :0046585C   , :004658B4   
|:0046590C   
|
:0042F760 55                      push ebp
:0042F761 8BEC                    mov ebp, esp
:0042F763 51                      push ecx
:0042F764 894DFC                  mov dword ptr [ebp-04], ecx
:0042F767 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F76A 33C9                    xor ecx, ecx
:0042F76C 8A481C                  mov cl, byte ptr [eax+1C]
:0042F76F 8BC1                    mov eax, ecx
:0042F771 8B5508                  mov edx, dword ptr [ebp+08]
:0042F774 81E2FF000000            and edx, 000000FF
:0042F77A 23C2                    and eax, edx
:0042F77C 8BE5                    mov esp, ebp
:0042F77E 5D                      pop ebp
:0042F77F C20400                  ret 0004


:0042F782 CC                      int 03
:0042F783 CC                      int 03
:0042F784 CC                      int 03
:0042F785 CC                      int 03
:0042F786 CC                      int 03
:0042F787 CC                      int 03
:0042F788 CC                      int 03
:0042F789 CC                      int 03
:0042F78A CC                      int 03
:0042F78B CC                      int 03
:0042F78C CC                      int 03
:0042F78D CC                      int 03
:0042F78E CC                      int 03
:0042F78F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042A19E   , :0042A3AD   , :0042AA94   , :0042D253   , :0042D35B   
|:0043558F   , :004365CE   , :00436976   , :00436EFB   , :00438E98   
|:00439022   , :00439BD1   , :00439E8A   , :0043ABBB   , :0043ABE5   
|:0043B0FA   , :0043B318   , :0043B53E   , :0043CA86   , :0043CD3B   
|:0043FE43   , :00440258   , :0044095A   , :004409DA   , :00441280   
|:004416CB   , :00442169   , :00442FC3   , :0044468B   , :0044473C   
|:00444B92   , :00444CF0   , :00444D84   , :00444D8D   , :00444DFC   
|:00444ED9   , :00445201   , :00445CB2   , :00445D71   , :00445E8B   
|:00446FB2   , :0044714C   , :004477E1   , :00447A48   , :00448771   
|:00448C0D   , :00448C47   , :00449403   , :004494A5   , :00449591   
|:00449B6D   , :0044A125   , :0044A14E   , :0044A2C8   , :0044A332   
|:0044A343   , :0044A534   , :0044A547   , :0044A559   , :0044A569   
|:0044A5D7   , :0044A617   , :0044B2DE   , :0044CC1D   , :0044CE72   
|:0044CF0F   , :0044CFAC   , :0044D0D8   , :0044D224   , :0044D2C1   
|:0044D72C   , :0044DAAE   , :0044DED8   , :0044DF12   , :0044E0D5   
|:00456DFC   , :004576C3   , :004577F6   , :00458F53   , :00459F27   
|:0045A015   , :0045A570   , :0045A58E   
|
:0042F790 55                      push ebp
:0042F791 8BEC                    mov ebp, esp
:0042F793 51                      push ecx
:0042F794 894DFC                  mov dword ptr [ebp-04], ecx
:0042F797 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F79A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F79D 8A11                    mov dl, byte ptr [ecx]
:0042F79F 8810                    mov byte ptr [eax], dl
:0042F7A1 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F7A4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F7A7 8A5101                  mov dl, byte ptr [ecx+01]
:0042F7AA 885001                  mov byte ptr [eax+01], dl
:0042F7AD 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F7B0 8BE5                    mov esp, ebp
:0042F7B2 5D                      pop ebp
:0042F7B3 C20400                  ret 0004


:0042F7B6 CC                      int 03
:0042F7B7 CC                      int 03
:0042F7B8 CC                      int 03
:0042F7B9 CC                      int 03
:0042F7BA CC                      int 03
:0042F7BB CC                      int 03
:0042F7BC CC                      int 03
:0042F7BD CC                      int 03
:0042F7BE CC                      int 03
:0042F7BF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042A393   , :0042A5D1   
|
:0042F7C0 55                      push ebp
:0042F7C1 8BEC                    mov ebp, esp
:0042F7C3 51                      push ecx
:0042F7C4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F7C7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F7CA 034508                  add eax, dword ptr [ebp+08]
:0042F7CD 8A00                    mov al, byte ptr [eax]
:0042F7CF 8BE5                    mov esp, ebp
:0042F7D1 5D                      pop ebp
:0042F7D2 C20400                  ret 0004


:0042F7D5 CC                      int 03
:0042F7D6 CC                      int 03
:0042F7D7 CC                      int 03
:0042F7D8 CC                      int 03
:0042F7D9 CC                      int 03
:0042F7DA CC                      int 03
:0042F7DB CC                      int 03
:0042F7DC CC                      int 03
:0042F7DD CC                      int 03
:0042F7DE CC                      int 03
:0042F7DF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042A570   , :0042A59C   , :0042A5E8   , :0042A5FA   , :0042A644   
|:0042CAB9   , :0042DD1F   , :00435E5B   , :00435E80   , :00435EA1   
|:00435EC2   , :00436B70   , :00448F47   , :00449376   , :0044A736   
|:0044B608   , :0044C055   , :0044C088   , :0044C4E8   , :0044C503   
|:0044C923   , :0044C957   
|
:0042F7E0 55                      push ebp
:0042F7E1 8BEC                    mov ebp, esp
:0042F7E3 51                      push ecx
:0042F7E4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F7E7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F7EA 8B08                    mov ecx, dword ptr [eax]
:0042F7EC 6BC970                  imul ecx, 00000070
:0042F7EF 81C198224900            add ecx, 00492298
:0042F7F5 E84224FDFF              call 00401C3C
:0042F7FA 8BE5                    mov esp, ebp
:0042F7FC 5D                      pop ebp
:0042F7FD C3                      ret


:0042F7FE CC                      int 03
:0042F7FF CC                      int 03

* Referenced by a CALL at Address:
|:0042A65A   
|
:0042F800 55                      push ebp
:0042F801 8BEC                    mov ebp, esp
:0042F803 51                      push ecx
:0042F804 894DFC                  mov dword ptr [ebp-04], ecx
:0042F807 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F80A 034508                  add eax, dword ptr [ebp+08]
:0042F80D 8A4025                  mov al, byte ptr [eax+25]
:0042F810 8BE5                    mov esp, ebp
:0042F812 5D                      pop ebp
:0042F813 C20400                  ret 0004


:0042F816 CC                      int 03
:0042F817 CC                      int 03
:0042F818 CC                      int 03
:0042F819 CC                      int 03
:0042F81A CC                      int 03
:0042F81B CC                      int 03
:0042F81C CC                      int 03
:0042F81D CC                      int 03
:0042F81E CC                      int 03
:0042F81F CC                      int 03

* Referenced by a CALL at Addresses:
|:004049AC   , :00404B9E   , :004054C2   , :00409B78   , :00416DE6   
|:0041E54F   , :0042A6AB   , :0042A6F1   , :0042A737   , :0042A78B   
|:0042A7D2   , :0042A834   , :0042A8BE   , :0042AB31   , :0042AC6A   
|:0042ACB1   , :0042ACF5   , :0042AD37   , :0042AD97   , :0042ADD9   
|:0042ADF9   , :0042AE0A   , :0042AFB5   , :0042B5C5   , :0042B5F5   
|:00431B48   , :00431BE6   , :00438919   , :00439696   , :00439ED1   
|:0043BC66   , :0043BCC0   , :0043BD30   , :0043BFEC   , :0043C0D6   
|:0043C2F9   , :0043C3C9   , :0043D21E   , :0043D2AA   , :0043D2C0   
|:0043D2E1   , :0043D2F5   , :0043D3EE   , :0043D402   , :0043D4DC   
|:0043D516   , :00440400   , :004404C6   , :00446CEB   , :00446D2E   
|:00449F75   , :0044A77E   , :0044A78F   , :0044D7D4   , :004595BF   
|:0045975B   
|
:0042F820 55                      push ebp
:0042F821 8BEC                    mov ebp, esp
:0042F823 51                      push ecx
:0042F824 894DFC                  mov dword ptr [ebp-04], ecx
:0042F827 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F82A 8A4004                  mov al, byte ptr [eax+04]
:0042F82D 8BE5                    mov esp, ebp
:0042F82F 5D                      pop ebp
:0042F830 C3                      ret


:0042F831 CC                      int 03
:0042F832 CC                      int 03
:0042F833 CC                      int 03
:0042F834 CC                      int 03
:0042F835 CC                      int 03
:0042F836 CC                      int 03
:0042F837 CC                      int 03
:0042F838 CC                      int 03
:0042F839 CC                      int 03
:0042F83A CC                      int 03
:0042F83B CC                      int 03
:0042F83C CC                      int 03
:0042F83D CC                      int 03
:0042F83E CC                      int 03
:0042F83F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042A999   , :0042A9B2   , :004551B4   , :00457A4A   , :00458150   
|
:0042F840 55                      push ebp
:0042F841 8BEC                    mov ebp, esp
:0042F843 51                      push ecx
:0042F844 894DFC                  mov dword ptr [ebp-04], ecx
:0042F847 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F84A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F84D 894868                  mov dword ptr [eax+68], ecx
:0042F850 8BE5                    mov esp, ebp
:0042F852 5D                      pop ebp
:0042F853 C20400                  ret 0004


:0042F856 CC                      int 03
:0042F857 CC                      int 03
:0042F858 CC                      int 03
:0042F859 CC                      int 03
:0042F85A CC                      int 03
:0042F85B CC                      int 03
:0042F85C CC                      int 03
:0042F85D CC                      int 03
:0042F85E CC                      int 03
:0042F85F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042A9F6   , :0042AA0F   , :004551E3   , :00457AF9   , :0045817F   
|
:0042F860 55                      push ebp
:0042F861 8BEC                    mov ebp, esp
:0042F863 51                      push ecx
:0042F864 894DFC                  mov dword ptr [ebp-04], ecx
:0042F867 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F86A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F86D 89486C                  mov dword ptr [eax+6C], ecx
:0042F870 8BE5                    mov esp, ebp
:0042F872 5D                      pop ebp
:0042F873 C20400                  ret 0004


:0042F876 CC                      int 03
:0042F877 CC                      int 03
:0042F878 CC                      int 03
:0042F879 CC                      int 03
:0042F87A CC                      int 03
:0042F87B CC                      int 03
:0042F87C CC                      int 03
:0042F87D CC                      int 03
:0042F87E CC                      int 03
:0042F87F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042AA54   , :0042C56B   , :0042F3A1   , :00444656   , :00447B84   
|:0044863E   , :0044873C   , :00449878   , :0044CD82   , :00459127   
|
:0042F880 55                      push ebp
:0042F881 8BEC                    mov ebp, esp
:0042F883 51                      push ecx
:0042F884 894DFC                  mov dword ptr [ebp-04], ecx
:0042F887 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F88A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F88D 8808                    mov byte ptr [eax], cl
:0042F88F 8B55FC                  mov edx, dword ptr [ebp-04]
:0042F892 8A450C                  mov al, byte ptr [ebp+0C]
:0042F895 884201                  mov byte ptr [edx+01], al
:0042F898 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F89B 8BE5                    mov esp, ebp
:0042F89D 5D                      pop ebp
:0042F89E C20800                  ret 0008


:0042F8A1 CC                      int 03
:0042F8A2 CC                      int 03
:0042F8A3 CC                      int 03
:0042F8A4 CC                      int 03
:0042F8A5 CC                      int 03
:0042F8A6 CC                      int 03
:0042F8A7 CC                      int 03
:0042F8A8 CC                      int 03
:0042F8A9 CC                      int 03
:0042F8AA CC                      int 03
:0042F8AB CC                      int 03
:0042F8AC CC                      int 03
:0042F8AD CC                      int 03
:0042F8AE CC                      int 03
:0042F8AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B04A   , :0042B062   , :0042CAE3   , :0042CB9A   , :004332F6   
|:004392A0   , :0045984B   
|
:0042F8B0 55                      push ebp
:0042F8B1 8BEC                    mov ebp, esp
:0042F8B3 51                      push ecx
:0042F8B4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F8B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F8BA 8B08                    mov ecx, dword ptr [eax]
:0042F8BC 6BC970                  imul ecx, 00000070
:0042F8BF 81C198224900            add ecx, 00492298
:0042F8C5 E8064FFDFF              call 004047D0
:0042F8CA 8BE5                    mov esp, ebp
:0042F8CC 5D                      pop ebp
:0042F8CD C3                      ret


:0042F8CE CC                      int 03
:0042F8CF CC                      int 03

* Referenced by a CALL at Addresses:
|:004028EE   , :0042B223   , :0042B4E9   , :0042BB97   , :0042C02A   
|:0042C53B   , :0042C5AA   , :0042C687   , :0042C973   , :0042CC53   
|:0042D699   , :0043134D   , :00431C59   , :004345B4   , :00435CAC   
|:004394FC   , :0043CBDA   , :0043CBFB   , :0043D005   , :0044387F   
|:00444F46   , :00445C88   , :00446BFA   , :00446F1A   , :004474DE   
|:004475B8   , :00447B2F   , :00448980   , :00448B27   , :0044A05B   
|:0044A0A2   , :0044A131   , :0044C303   , :0044C5A3   , :004535D2   
|:0045421C   , :0045431B   , :00454334   , :00454783   , :00455218   
|:00456CEC   , :00456E6C   , :00457352   , :004573AB   , :004574D8   
|:00457C58   , :00457CCC   , :00457FA2   , :004580E0   , :004581F1   
|:00458240   , :0045867D   , :0045893D   , :004589D8   , :00458B11   
|:00458CB8   , :00458F38   , :0045948F   , :00459527   , :00459591   
|:0045963F   , :004597D0   , :004599C8   , :00459AF6   , :00459D81   
|:00459EAA   , :00459F75   , :0045A3FF   , :0046528F   , :00466DB4   
|
:0042F8D0 55                      push ebp
:0042F8D1 8BEC                    mov ebp, esp
:0042F8D3 51                      push ecx
:0042F8D4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F8D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F8DA 8A400B                  mov al, byte ptr [eax+0B]
:0042F8DD 8BE5                    mov esp, ebp
:0042F8DF 5D                      pop ebp
:0042F8E0 C3                      ret


:0042F8E1 CC                      int 03
:0042F8E2 CC                      int 03
:0042F8E3 CC                      int 03
:0042F8E4 CC                      int 03
:0042F8E5 CC                      int 03
:0042F8E6 CC                      int 03
:0042F8E7 CC                      int 03
:0042F8E8 CC                      int 03
:0042F8E9 CC                      int 03
:0042F8EA CC                      int 03
:0042F8EB CC                      int 03
:0042F8EC CC                      int 03
:0042F8ED CC                      int 03
:0042F8EE CC                      int 03
:0042F8EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00407298   , :0042B31A   , :0042C73F   , :0042C75F   , :0042CA2B   
|:0042CA4B   , :0042D32E   , :0042D33F   , :0042D620   , :0042D8AD   
|:0042DC1B   , :0042DE62   , :00431371   , :00431A36   , :00431B84   
|:004323E7   , :004326B6   , :00432898   , :00432CC9   , :004330C2   
|:00433441   , :00433AA0   , :00433AC8   , :00433D5D   , :00433D85   
|:0043407D   , :004340A5   , :004342A3   , :004342CB   , :004344BD   
|:004344E5   , :004346EB   , :00434713   , :00434927   , :00434956   
|:00434AE5   , :00434B0D   , :00434CA2   , :00434CCA   , :00434EEA   
|:00434F12   , :00435160   , :00435188   , :00435435   , :00435449   
|:00435995   , :004359BD   , :00435BAF   , :00435BD7   , :00435D8A   
|:00435DB2   , :004360E1   , :00436109   , :004363B5   , :004363DD   
|:0043681A   , :0043684A   , :00436A9F   , :00436AC7   , :00436D9F   
|:00436DCF   , :00437098   , :004370C0   , :0043740A   , :00437432   
|:00437960   , :00437974   , :00437AFB   , :00437B0F   , :00437D69   
|:00437D7D   , :00437EE6   , :00437EFA   , :0043822D   , :00438241   
|:0043860F   , :00438840   , :00438A22   , :00438CA8   , :00439821   
|:004422CC   , :00445D2F   , :004474F9   , :004475D3   , :00448A18   
|:00448A2E   , :00448F35   , :00449E62   , :00449F0A   , :0044A279   
|:0044A2E0   , :0044A301   , :0044A655   , :0044AFC1   , :0044B3CE   
|:0044C00A   , :0044C02B   , :0044CA34   , :0044D9B0   , :00454396   
|:004561CD   , :00456CD1   , :0045736D   , :00457390   , :004574F3   
|:00458D25   
|
:0042F8F0 55                      push ebp
:0042F8F1 8BEC                    mov ebp, esp
:0042F8F3 51                      push ecx
:0042F8F4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F8F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F8FA 8A400D                  mov al, byte ptr [eax+0D]
:0042F8FD 8BE5                    mov esp, ebp
:0042F8FF 5D                      pop ebp
:0042F900 C3                      ret


:0042F901 CC                      int 03
:0042F902 CC                      int 03
:0042F903 CC                      int 03
:0042F904 CC                      int 03
:0042F905 CC                      int 03
:0042F906 CC                      int 03
:0042F907 CC                      int 03
:0042F908 CC                      int 03
:0042F909 CC                      int 03
:0042F90A CC                      int 03
:0042F90B CC                      int 03
:0042F90C CC                      int 03
:0042F90D CC                      int 03
:0042F90E CC                      int 03
:0042F90F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B750   , :0042B812   , :00430C46   , :00435617   , :004390F6   
|:004391A0   , :0043926C   , :0043937E   , :004393E1   , :004395C4   
|:0043962D   , :0044C62A   , :0044C693   
|
:0042F910 55                      push ebp
:0042F911 8BEC                    mov ebp, esp
:0042F913 51                      push ecx
:0042F914 894DFC                  mov dword ptr [ebp-04], ecx
:0042F917 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F91A 8B08                    mov ecx, dword ptr [eax]
:0042F91C 6BC970                  imul ecx, 00000070
:0042F91F 81C198224900            add ecx, 00492298
:0042F925 E8832BFDFF              call 004024AD
:0042F92A 8BE5                    mov esp, ebp
:0042F92C 5D                      pop ebp
:0042F92D C3                      ret


:0042F92E CC                      int 03
:0042F92F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B887   , :0042B8E1   , :0042BBE3   , :00432BEB   , :0043675A   
|:00438584   , :00458C0B   , :00459B65   
|
:0042F930 55                      push ebp
:0042F931 8BEC                    mov ebp, esp
:0042F933 51                      push ecx
:0042F934 894DFC                  mov dword ptr [ebp-04], ecx
:0042F937 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F93A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F93D 884819                  mov byte ptr [eax+19], cl
:0042F940 8BE5                    mov esp, ebp
:0042F942 5D                      pop ebp
:0042F943 C20400                  ret 0004


:0042F946 CC                      int 03
:0042F947 CC                      int 03
:0042F948 CC                      int 03
:0042F949 CC                      int 03
:0042F94A CC                      int 03
:0042F94B CC                      int 03
:0042F94C CC                      int 03
:0042F94D CC                      int 03
:0042F94E CC                      int 03
:0042F94F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B863   , :0042BBBF   
|
:0042F950 55                      push ebp
:0042F951 8BEC                    mov ebp, esp
:0042F953 51                      push ecx
:0042F954 894DFC                  mov dword ptr [ebp-04], ecx
:0042F957 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F95A 8A4019                  mov al, byte ptr [eax+19]
:0042F95D 8BE5                    mov esp, ebp
:0042F95F 5D                      pop ebp
:0042F960 C3                      ret


:0042F961 CC                      int 03
:0042F962 CC                      int 03
:0042F963 CC                      int 03
:0042F964 CC                      int 03
:0042F965 CC                      int 03
:0042F966 CC                      int 03
:0042F967 CC                      int 03
:0042F968 CC                      int 03
:0042F969 CC                      int 03
:0042F96A CC                      int 03
:0042F96B CC                      int 03
:0042F96C CC                      int 03
:0042F96D CC                      int 03
:0042F96E CC                      int 03
:0042F96F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B90D   , :0042B967   , :0042BC67   , :00432C2A   , :00436D57   
|:004385C3   , :00458C15   , :00459B8E   
|
:0042F970 55                      push ebp
:0042F971 8BEC                    mov ebp, esp
:0042F973 51                      push ecx
:0042F974 894DFC                  mov dword ptr [ebp-04], ecx
:0042F977 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F97A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F97D 88481A                  mov byte ptr [eax+1A], cl
:0042F980 8BE5                    mov esp, ebp
:0042F982 5D                      pop ebp
:0042F983 C20400                  ret 0004


:0042F986 CC                      int 03
:0042F987 CC                      int 03
:0042F988 CC                      int 03
:0042F989 CC                      int 03
:0042F98A CC                      int 03
:0042F98B CC                      int 03
:0042F98C CC                      int 03
:0042F98D CC                      int 03
:0042F98E CC                      int 03
:0042F98F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B8E9   , :0042BC43   
|
:0042F990 55                      push ebp
:0042F991 8BEC                    mov ebp, esp
:0042F993 51                      push ecx
:0042F994 894DFC                  mov dword ptr [ebp-04], ecx
:0042F997 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F99A 8A401A                  mov al, byte ptr [eax+1A]
:0042F99D 8BE5                    mov esp, ebp
:0042F99F 5D                      pop ebp
:0042F9A0 C3                      ret


:0042F9A1 CC                      int 03
:0042F9A2 CC                      int 03
:0042F9A3 CC                      int 03
:0042F9A4 CC                      int 03
:0042F9A5 CC                      int 03
:0042F9A6 CC                      int 03
:0042F9A7 CC                      int 03
:0042F9A8 CC                      int 03
:0042F9A9 CC                      int 03
:0042F9AA CC                      int 03
:0042F9AB CC                      int 03
:0042F9AC CC                      int 03
:0042F9AD CC                      int 03
:0042F9AE CC                      int 03
:0042F9AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B96F   , :0042BCC7   
|
:0042F9B0 55                      push ebp
:0042F9B1 8BEC                    mov ebp, esp
:0042F9B3 51                      push ecx
:0042F9B4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F9B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F9BA 8A401C                  mov al, byte ptr [eax+1C]
:0042F9BD 8BE5                    mov esp, ebp
:0042F9BF 5D                      pop ebp
:0042F9C0 C3                      ret


:0042F9C1 CC                      int 03
:0042F9C2 CC                      int 03
:0042F9C3 CC                      int 03
:0042F9C4 CC                      int 03
:0042F9C5 CC                      int 03
:0042F9C6 CC                      int 03
:0042F9C7 CC                      int 03
:0042F9C8 CC                      int 03
:0042F9C9 CC                      int 03
:0042F9CA CC                      int 03
:0042F9CB CC                      int 03
:0042F9CC CC                      int 03
:0042F9CD CC                      int 03
:0042F9CE CC                      int 03
:0042F9CF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042B985   , :0042BCDD   , :00433067   , :00433073   , :0043307F   
|:0043308B   , :004381C1   , :004381CD   , :004381D9   , :004381E5   
|:0045511C   , :00459C79   
|
:0042F9D0 55                      push ebp
:0042F9D1 8BEC                    mov ebp, esp
:0042F9D3 51                      push ecx
:0042F9D4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F9D7 8B4508                  mov eax, dword ptr [ebp+08]
:0042F9DA 25FF000000              and eax, 000000FF
:0042F9DF F7D0                    not eax
:0042F9E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F9E4 8A511C                  mov dl, byte ptr [ecx+1C]
:0042F9E7 22D0                    and dl, al
:0042F9E9 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F9EC 88501C                  mov byte ptr [eax+1C], dl
:0042F9EF 8BE5                    mov esp, ebp
:0042F9F1 5D                      pop ebp
:0042F9F2 C20400                  ret 0004


:0042F9F5 CC                      int 03
:0042F9F6 CC                      int 03
:0042F9F7 CC                      int 03
:0042F9F8 CC                      int 03
:0042F9F9 CC                      int 03
:0042F9FA CC                      int 03
:0042F9FB CC                      int 03
:0042F9FC CC                      int 03
:0042F9FD CC                      int 03
:0042F9FE CC                      int 03
:0042F9FF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042BDFD   , :0042BEE1   , :0045574A   , :00455898   
|
:0042FA00 55                      push ebp
:0042FA01 8BEC                    mov ebp, esp
:0042FA03 51                      push ecx
:0042FA04 894DFC                  mov dword ptr [ebp-04], ecx
:0042FA07 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FA0A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FA0D 884833                  mov byte ptr [eax+33], cl
:0042FA10 8BE5                    mov esp, ebp
:0042FA12 5D                      pop ebp
:0042FA13 C20400                  ret 0004


:0042FA16 CC                      int 03
:0042FA17 CC                      int 03
:0042FA18 CC                      int 03
:0042FA19 CC                      int 03
:0042FA1A CC                      int 03
:0042FA1B CC                      int 03
:0042FA1C CC                      int 03
:0042FA1D CC                      int 03
:0042FA1E CC                      int 03
:0042FA1F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042BF1D   , :0042C11C   , :0042C54F   , :0042C6B4   , :0042C9A0   
|:00446EDE   , :00447192   , :00457CA0   , :00458103   , :00458C29   
|:004595D2   
|
:0042FA20 55                      push ebp
:0042FA21 8BEC                    mov ebp, esp
:0042FA23 51                      push ecx
:0042FA24 894DFC                  mov dword ptr [ebp-04], ecx
:0042FA27 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FA2A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FA2D 88480B                  mov byte ptr [eax+0B], cl
:0042FA30 8BE5                    mov esp, ebp
:0042FA32 5D                      pop ebp
:0042FA33 C20400                  ret 0004


:0042FA36 CC                      int 03
:0042FA37 CC                      int 03
:0042FA38 CC                      int 03
:0042FA39 CC                      int 03
:0042FA3A CC                      int 03
:0042FA3B CC                      int 03
:0042FA3C CC                      int 03
:0042FA3D CC                      int 03
:0042FA3E CC                      int 03
:0042FA3F CC                      int 03

* Referenced by a CALL at Address:
|:0042BFB1   
|
:0042FA40 55                      push ebp
:0042FA41 8BEC                    mov ebp, esp
:0042FA43 51                      push ecx
:0042FA44 894DFC                  mov dword ptr [ebp-04], ecx
:0042FA47 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FA4A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FA4D 884828                  mov byte ptr [eax+28], cl
:0042FA50 8BE5                    mov esp, ebp
:0042FA52 5D                      pop ebp
:0042FA53 C20400                  ret 0004


:0042FA56 CC                      int 03
:0042FA57 CC                      int 03
:0042FA58 CC                      int 03
:0042FA59 CC                      int 03
:0042FA5A CC                      int 03
:0042FA5B CC                      int 03
:0042FA5C CC                      int 03
:0042FA5D CC                      int 03
:0042FA5E CC                      int 03
:0042FA5F CC                      int 03

* Referenced by a CALL at Address:
|:0042BFC9   
|
:0042FA60 55                      push ebp
:0042FA61 8BEC                    mov ebp, esp
:0042FA63 51                      push ecx
:0042FA64 894DFC                  mov dword ptr [ebp-04], ecx
:0042FA67 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FA6A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FA6D 884829                  mov byte ptr [eax+29], cl
:0042FA70 8BE5                    mov esp, ebp
:0042FA72 5D                      pop ebp
:0042FA73 C20400                  ret 0004


:0042FA76 CC                      int 03
:0042FA77 CC                      int 03
:0042FA78 CC                      int 03
:0042FA79 CC                      int 03
:0042FA7A CC                      int 03
:0042FA7B CC                      int 03
:0042FA7C CC                      int 03
:0042FA7D CC                      int 03
:0042FA7E CC                      int 03
:0042FA7F CC                      int 03

* Referenced by a CALL at Address:
|:0042BFBD   
|
:0042FA80 55                      push ebp
:0042FA81 8BEC                    mov ebp, esp
:0042FA83 51                      push ecx
:0042FA84 894DFC                  mov dword ptr [ebp-04], ecx
:0042FA87 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FA8A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FA8D 88482A                  mov byte ptr [eax+2A], cl
:0042FA90 8BE5                    mov esp, ebp
:0042FA92 5D                      pop ebp
:0042FA93 C20400                  ret 0004


:0042FA96 CC                      int 03
:0042FA97 CC                      int 03
:0042FA98 CC                      int 03
:0042FA99 CC                      int 03
:0042FA9A CC                      int 03
:0042FA9B CC                      int 03
:0042FA9C CC                      int 03
:0042FA9D CC                      int 03
:0042FA9E CC                      int 03
:0042FA9F CC                      int 03

* Referenced by a CALL at Address:
|:0042BFE1   
|
:0042FAA0 55                      push ebp
:0042FAA1 8BEC                    mov ebp, esp
:0042FAA3 51                      push ecx
:0042FAA4 894DFC                  mov dword ptr [ebp-04], ecx
:0042FAA7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FAAA 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FAAD 88482C                  mov byte ptr [eax+2C], cl
:0042FAB0 8BE5                    mov esp, ebp
:0042FAB2 5D                      pop ebp
:0042FAB3 C20400                  ret 0004


:0042FAB6 CC                      int 03
:0042FAB7 CC                      int 03
:0042FAB8 CC                      int 03
:0042FAB9 CC                      int 03
:0042FABA CC                      int 03
:0042FABB CC                      int 03
:0042FABC CC                      int 03
:0042FABD CC                      int 03
:0042FABE CC                      int 03
:0042FABF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042C260   , :0042C358   , :0042C470   , :0042D384   , :00431998   
|:004387DE   , :00455112   , :00457456   , :004578C3   , :00458DCD   
|:00459011   , :004596EC   , :00459753   , :00459911   
|
:0042FAC0 55                      push ebp
:0042FAC1 8BEC                    mov ebp, esp
:0042FAC3 51                      push ecx
:0042FAC4 894DFC                  mov dword ptr [ebp-04], ecx
:0042FAC7 8B4508                  mov eax, dword ptr [ebp+08]
:0042FACA 25FF000000              and eax, 000000FF
:0042FACF F7D0                    not eax
:0042FAD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042FAD4 8A510C                  mov dl, byte ptr [ecx+0C]
:0042FAD7 22D0                    and dl, al
:0042FAD9 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FADC 88500C                  mov byte ptr [eax+0C], dl
:0042FADF 8BE5                    mov esp, ebp
:0042FAE1 5D                      pop ebp
:0042FAE2 C20400                  ret 0004


:0042FAE5 CC                      int 03
:0042FAE6 CC                      int 03
:0042FAE7 CC                      int 03
:0042FAE8 CC                      int 03
:0042FAE9 CC                      int 03
:0042FAEA CC                      int 03
:0042FAEB CC                      int 03
:0042FAEC CC                      int 03
:0042FAED CC                      int 03
:0042FAEE CC                      int 03
:0042FAEF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042C182   , :0042C345   , :0042C45D   , :0042C7AD   , :0042D3BA   
|:0042D637   , :0042D7A6   , :0042D7BD   , :0042D8CD   , :0042D97D   
|:0042DC41   , :0042DE88   , :00431176   , :004311D8   , :00431397   
|:004313BA   , :0043140A   , :00431881   , :004319DD   , :00431BA5   
|:00431BC3   , :00431DD8   , :004386D8   , :004386F8   , :004387BC   
|:004387CD   , :00444F84   , :0044785D   , :00447879   , :00448C51   
|:004493C6   , :004498A0   , :00449D38   , :00449E56   , :00449EFA   
|:00449FE7   , :0044A080   , :0044A091   , :0044A0ED   , :0044A34D   
|:0044A649   , :0044ACC0   , :0044ACD1   , :0044CA24   , :0044D9A4   
|:0044D9F0   , :0044DA02   , :004561F4   , :00456214   , :00456CBC   
|:00456EAA   , :00457326   , :004574AC   , :004574C3   , :00459E5D   
|:00459F98   
|
:0042FAF0 55                      push ebp
:0042FAF1 8BEC                    mov ebp, esp
:0042FAF3 51                      push ecx
:0042FAF4 894DFC                  mov dword ptr [ebp-04], ecx
:0042FAF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FAFA 33C9                    xor ecx, ecx
:0042FAFC 8A480C                  mov cl, byte ptr [eax+0C]
:0042FAFF 8B5508                  mov edx, dword ptr [ebp+08]
:0042FB02 81E2FF000000            and edx, 000000FF
:0042FB08 23CA                    and ecx, edx
:0042FB0A 8B4508                  mov eax, dword ptr [ebp+08]
:0042FB0D 25FF000000              and eax, 000000FF
:0042FB12 33D2                    xor edx, edx
:0042FB14 3BC8                    cmp ecx, eax
:0042FB16 0F94C2                  sete dl
:0042FB19 8BC2                    mov eax, edx
:0042FB1B 8BE5                    mov esp, ebp
:0042FB1D 5D                      pop ebp
:0042FB1E C20400                  ret 0004


:0042FB21 CC                      int 03
:0042FB22 CC                      int 03
:0042FB23 CC                      int 03
:0042FB24 CC                      int 03
:0042FB25 CC                      int 03
:0042FB26 CC                      int 03
:0042FB27 CC                      int 03
:0042FB28 CC                      int 03
:0042FB29 CC                      int 03
:0042FB2A CC                      int 03
:0042FB2B CC                      int 03
:0042FB2C CC                      int 03
:0042FB2D CC                      int 03
:0042FB2E CC                      int 03
:0042FB2F CC                      int 03

* Referenced by a CALL at Address:
|:0042C7D9   
|
:0042FB30 55                      push ebp
:0042FB31 8BEC                    mov ebp, esp
:0042FB33 51                      push ecx
:0042FB34 894DFC                  mov dword ptr [ebp-04], ecx
:0042FB37 8B4508                  mov eax, dword ptr [ebp+08]
:0042FB3A 50                      push eax
:0042FB3B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042FB3E 81C15C350000            add ecx, 0000355C
:0042FB44 E807000000              call 0042FB50
:0042FB49 8BE5                    mov esp, ebp
:0042FB4B 5D                      pop ebp
:0042FB4C C20400                  ret 0004


:0042FB4F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042FB44   , :0042FBB4   
|
:0042FB50 55                      push ebp
:0042FB51 8BEC                    mov ebp, esp
:0042FB53 83EC08                  sub esp, 00000008
:0042FB56 894DFC                  mov dword ptr [ebp-04], ecx
:0042FB59 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FB5C 33C9                    xor ecx, ecx
:0042FB5E 668B08                  mov cx, word ptr [eax]
:0042FB61 83E101                  and ecx, 00000001
:0042FB64 85C9                    test ecx, ecx
:0042FB66 741F                    je 0042FB87
:0042FB68 8B5508                  mov edx, dword ptr [ebp+08]
:0042FB6B 81E2FFFF0000            and edx, 0000FFFF
:0042FB71 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FB74 33C9                    xor ecx, ecx
:0042FB76 668B4802                mov cx, word ptr [eax+02]
:0042FB7A 3BD1                    cmp edx, ecx
:0042FB7C 7509                    jne 0042FB87
:0042FB7E C745F801000000          mov [ebp-08], 00000001
:0042FB85 EB07                    jmp 0042FB8E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042FB66(C), :0042FB7C(C)
|
:0042FB87 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FB85(U)
|
:0042FB8E 8B45F8                  mov eax, dword ptr [ebp-08]
:0042FB91 8BE5                    mov esp, ebp
:0042FB93 5D                      pop ebp
:0042FB94 C20400                  ret 0004


:0042FB97 CC                      int 03
:0042FB98 CC                      int 03
:0042FB99 CC                      int 03
:0042FB9A CC                      int 03
:0042FB9B CC                      int 03
:0042FB9C CC                      int 03
:0042FB9D CC                      int 03
:0042FB9E CC                      int 03
:0042FB9F CC                      int 03

* Referenced by a CALL at Address:
|:0042C802   
|
:0042FBA0 55                      push ebp
:0042FBA1 8BEC                    mov ebp, esp
:0042FBA3 51                      push ecx
:0042FBA4 894DFC                  mov dword ptr [ebp-04], ecx
:0042FBA7 8B4508                  mov eax, dword ptr [ebp+08]
:0042FBAA 50                      push eax
:0042FBAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042FBAE 81C160350000            add ecx, 00003560
:0042FBB4 E897FFFFFF              call 0042FB50
:0042FBB9 8BE5                    mov esp, ebp
:0042FBBB 5D                      pop ebp
:0042FBBC C20400                  ret 0004


:0042FBBF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042C7E9   , :00458280   
|
:0042FBC0 55                      push ebp
:0042FBC1 8BEC                    mov ebp, esp
:0042FBC3 51                      push ecx
:0042FBC4 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FBC7 6A04                    push 00000004
:0042FBC9 8D4508                  lea eax, dword ptr [ebp+08]
:0042FBCC 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042FBCD 6A05                    push 00000005
:0042FBCF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042FBD2 E80EFDFDFF              call 0040F8E5
:0042FBD7 8BE5                    mov esp, ebp
:0042FBD9 5D                      pop ebp
:0042FBDA C20400                  ret 0004


:0042FBDD CC                      int 03
:0042FBDE CC                      int 03
:0042FBDF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042C812   , :0045828E   
|
:0042FBE0 55                      push ebp
:0042FBE1 8BEC                    mov ebp, esp
:0042FBE3 51                      push ecx
:0042FBE4 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FBE7 6A04                    push 00000004
:0042FBE9 8D4508                  lea eax, dword ptr [ebp+08]
:0042FBEC 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042FBED 6A06                    push 00000006
:0042FBEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042FBF2 E8EEFCFDFF              call 0040F8E5
:0042FBF7 8BE5                    mov esp, ebp
:0042FBF9 5D                      pop ebp
:0042FBFA C20400                  ret 0004


:0042FBFD CC                      int 03
:0042FBFE CC                      int 03
:0042FBFF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042C717   , :0042CA03   , :0044911B   , :0045C7D0   , :0045C808   
|:0045D5D0   , :0045D656   
|
:0042FC00 55                      push ebp
:0042FC01 8BEC                    mov ebp, esp
:0042FC03 51                      push ecx
:0042FC04 894DFC                  mov dword ptr [ebp-04], ecx
:0042FC07 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FC0A 8A4007                  mov al, byte ptr [eax+07]
:0042FC0D 8BE5                    mov esp, ebp
:0042FC0F 5D                      pop ebp
:0042FC10 C3                      ret


:0042FC11 CC                      int 03
:0042FC12 CC                      int 03
:0042FC13 CC                      int 03
:0042FC14 CC                      int 03
:0042FC15 CC                      int 03
:0042FC16 CC                      int 03
:0042FC17 CC                      int 03
:0042FC18 CC                      int 03
:0042FC19 CC                      int 03
:0042FC1A CC                      int 03
:0042FC1B CC                      int 03
:0042FC1C CC                      int 03
:0042FC1D CC                      int 03
:0042FC1E CC                      int 03
:0042FC1F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C392   , :0040C913   , :0040DF36   , :00424A55   , :0042C785   
|:0042CA71   , :00431BF8   , :00431C32   , :00459764   , :0045D669   
|
:0042FC20 55                      push ebp
:0042FC21 8BEC                    mov ebp, esp
:0042FC23 51                      push ecx
:0042FC24 894DFC                  mov dword ptr [ebp-04], ecx
:0042FC27 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FC2A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FC2D 884807                  mov byte ptr [eax+07], cl
:0042FC30 8BE5                    mov esp, ebp
:0042FC32 5D                      pop ebp
:0042FC33 C20400                  ret 0004


:0042FC36 CC                      int 03
:0042FC37 CC                      int 03
:0042FC38 CC                      int 03
:0042FC39 CC                      int 03
:0042FC3A CC                      int 03
:0042FC3B CC                      int 03
:0042FC3C CC                      int 03
:0042FC3D CC                      int 03
:0042FC3E CC                      int 03
:0042FC3F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042C7C0   , :0042C89F   , :0042C8D8   , :00431C8C   , :00431CA6   
|:0043455A   , :0043CBB5   , :0043D01B   , :00446D43   , :00454701   
|:00457036   , :0045716A   , :00457216   , :004572B0   , :004582C1   
|:00459E6B   , :00459E84   , :00459FDE   
|
:0042FC40 55                      push ebp
:0042FC41 8BEC                    mov ebp, esp
:0042FC43 51                      push ecx
:0042FC44 894DFC                  mov dword ptr [ebp-04], ecx
:0042FC47 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FC4A 8A4001                  mov al, byte ptr [eax+01]
:0042FC4D 8BE5                    mov esp, ebp
:0042FC4F 5D                      pop ebp
:0042FC50 C3                      ret


:0042FC51 CC                      int 03
:0042FC52 CC                      int 03
:0042FC53 CC                      int 03
:0042FC54 CC                      int 03
:0042FC55 CC                      int 03
:0042FC56 CC                      int 03
:0042FC57 CC                      int 03
:0042FC58 CC                      int 03
:0042FC59 CC                      int 03
:0042FC5A CC                      int 03
:0042FC5B CC                      int 03
:0042FC5C CC                      int 03
:0042FC5D CC                      int 03
:0042FC5E CC                      int 03
:0042FC5F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042CC74   , :0042CC94   , :0042DD3C   
|
:0042FC60 55                      push ebp
:0042FC61 8BEC                    mov ebp, esp
:0042FC63 51                      push ecx
:0042FC64 894DFC                  mov dword ptr [ebp-04], ecx
:0042FC67 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FC6A 33C9                    xor ecx, ecx
:0042FC6C 8A481E                  mov cl, byte ptr [eax+1E]
:0042FC6F 8BC1                    mov eax, ecx
:0042FC71 83E801                  sub eax, 00000001
:0042FC74 F7D8                    neg eax
:0042FC76 1BC0                    sbb eax, eax
:0042FC78 40                      inc eax
:0042FC79 8BE5                    mov esp, ebp
:0042FC7B 5D                      pop ebp
:0042FC7C C3                      ret


:0042FC7D CC                      int 03
:0042FC7E CC                      int 03
:0042FC7F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042CD0A   , :0042F4B9   , :0042F50D   , :0042F538   , :004311F1   
|:00433192   , :0043326A   , :00442383   , :0044978E   , :004497AF   
|:00449E2A   , :00455A06   , :00455A27   , :00455A53   
|
:0042FC80 55                      push ebp
:0042FC81 8BEC                    mov ebp, esp
:0042FC83 51                      push ecx
:0042FC84 894DFC                  mov dword ptr [ebp-04], ecx
:0042FC87 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FC8A 8B08                    mov ecx, dword ptr [eax]
:0042FC8C 6BC970                  imul ecx, 00000070
:0042FC8F 81C198224900            add ecx, 00492298
:0042FC95 E8D64AFDFF              call 00404770
:0042FC9A 8BE5                    mov esp, ebp
:0042FC9C 5D                      pop ebp
:0042FC9D C3                      ret


:0042FC9E CC                      int 03
:0042FC9F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042D31F   , :00438FF2   , :00444B7D   , :00444CC3   , :00444E14   
|:0044711C   , :004474C6   , :004475A0   , :00448B50   , :00448BDB   
|:00449428   , :004494D5   , :00449763   , :004498B0   , :00449B06   
|:00449D70   , :0044CA0F   , :0044CA76   , :0044CB3C   , :0044CBA6   
|:0044DEAA   
|
:0042FCA0 55                      push ebp
:0042FCA1 8BEC                    mov ebp, esp
:0042FCA3 51                      push ecx
:0042FCA4 8B4508                  mov eax, dword ptr [ebp+08]
:0042FCA7 33C9                    xor ecx, ecx
:0042FCA9 8A08                    mov cl, byte ptr [eax]
:0042FCAB 8B550C                  mov edx, dword ptr [ebp+0C]
:0042FCAE 33C0                    xor eax, eax
:0042FCB0 8A02                    mov al, byte ptr [edx]
:0042FCB2 3BC8                    cmp ecx, eax
:0042FCB4 751D                    jne 0042FCD3
:0042FCB6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042FCB9 33D2                    xor edx, edx
:0042FCBB 8A5101                  mov dl, byte ptr [ecx+01]
:0042FCBE 8B450C                  mov eax, dword ptr [ebp+0C]
:0042FCC1 33C9                    xor ecx, ecx
:0042FCC3 8A4801                  mov cl, byte ptr [eax+01]
:0042FCC6 3BD1                    cmp edx, ecx
:0042FCC8 7509                    jne 0042FCD3
:0042FCCA C745FC01000000          mov [ebp-04], 00000001
:0042FCD1 EB07                    jmp 0042FCDA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042FCB4(C), :0042FCC8(C)
|
:0042FCD3 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FCD1(U)
|
:0042FCDA 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FCDD 8BE5                    mov esp, ebp
:0042FCDF 5D                      pop ebp
:0042FCE0 C3                      ret


:0042FCE1 CC                      int 03
:0042FCE2 CC                      int 03
:0042FCE3 CC                      int 03
:0042FCE4 CC                      int 03
:0042FCE5 CC                      int 03
:0042FCE6 CC                      int 03
:0042FCE7 CC                      int 03
:0042FCE8 CC                      int 03
:0042FCE9 CC                      int 03
:0042FCEA CC                      int 03
:0042FCEB CC                      int 03
:0042FCEC CC                      int 03
:0042FCED CC                      int 03
:0042FCEE CC                      int 03
:0042FCEF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040703D   , :00407080   , :00411276   , :00412177   , :004292F4   
|:0042D72A   , :0043016C   , :004316A8   , :00433490   , :0043395A   
|:0043A355   , :0043B6B2   , :0043B89E   , :0043E07B   , :0043E0B3   
|:0043E0E9   , :0043F3E1   , :00453461   , :004541A2   , :004542AF   
|:004542C8   , :004544AF   , :004544D4   , :00458001   
|
:0042FCF0 55                      push ebp
:0042FCF1 8BEC                    mov ebp, esp
:0042FCF3 51                      push ecx
:0042FCF4 894DFC                  mov dword ptr [ebp-04], ecx
:0042FCF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FCFA 8A400E                  mov al, byte ptr [eax+0E]
:0042FCFD 8BE5                    mov esp, ebp
:0042FCFF 5D                      pop ebp
:0042FD00 C3                      ret


:0042FD01 CC                      int 03
:0042FD02 CC                      int 03
:0042FD03 CC                      int 03
:0042FD04 CC                      int 03
:0042FD05 CC                      int 03
:0042FD06 CC                      int 03
:0042FD07 CC                      int 03
:0042FD08 CC                      int 03
:0042FD09 CC                      int 03
:0042FD0A CC                      int 03
:0042FD0B CC                      int 03
:0042FD0C CC                      int 03
:0042FD0D CC                      int 03
:0042FD0E CC                      int 03
:0042FD0F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041171D   , :0041690B   , :0042682B   , :0042684F   , :00426F6A   
|:0042D80C   , :004432B5   , :00443716   
|
:0042FD10 55                      push ebp
:0042FD11 8BEC                    mov ebp, esp
:0042FD13 51                      push ecx
:0042FD14 894DFC                  mov dword ptr [ebp-04], ecx
:0042FD17 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FD1A 8A4005                  mov al, byte ptr [eax+05]
:0042FD1D 8BE5                    mov esp, ebp
:0042FD1F 5D                      pop ebp
:0042FD20 C3                      ret


:0042FD21 CC                      int 03
:0042FD22 CC                      int 03
:0042FD23 CC                      int 03
:0042FD24 CC                      int 03
:0042FD25 CC                      int 03
:0042FD26 CC                      int 03
:0042FD27 CC                      int 03
:0042FD28 CC                      int 03
:0042FD29 CC                      int 03
:0042FD2A CC                      int 03
:0042FD2B CC                      int 03
:0042FD2C CC                      int 03
:0042FD2D CC                      int 03
:0042FD2E CC                      int 03
:0042FD2F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042E4CC   , :0042E529   , :0042EB8D   , :0042EBEA   , :0042F2A8   
|:0042F305   , :0043A15B   , :0043A2FB   , :0043AD8B   , :0043AF15   
|:0043B27F   , :0043B4B9   , :00440088   , :00440627   , :0044076B   
|:0044149E   , :004415F7   , :004418FB   , :004439ED   , :00443A3A   
|:004583F8   
|
:0042FD30 55                      push ebp
:0042FD31 8BEC                    mov ebp, esp
:0042FD33 51                      push ecx
:0042FD34 894DFC                  mov dword ptr [ebp-04], ecx
:0042FD37 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FD3A 8B404C                  mov eax, dword ptr [eax+4C]
:0042FD3D 8BE5                    mov esp, ebp
:0042FD3F 5D                      pop ebp
:0042FD40 C3                      ret


:0042FD41 CC                      int 03
:0042FD42 CC                      int 03
:0042FD43 CC                      int 03
:0042FD44 CC                      int 03
:0042FD45 CC                      int 03
:0042FD46 CC                      int 03
:0042FD47 CC                      int 03
:0042FD48 CC                      int 03
:0042FD49 CC                      int 03
:0042FD4A CC                      int 03
:0042FD4B CC                      int 03
:0042FD4C CC                      int 03
:0042FD4D CC                      int 03
:0042FD4E CC                      int 03
:0042FD4F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042F576   , :0042F588   , :0042F635   , :0043C075   , :0043C1FA   
|:0043C22B   , :0043C77C   , :0043C792   , :00448DA7   , :00448DB9   
|:00448E06   , :00449FA6   , :00449FB8   , :0044D805   , :0044D817   
|:0044DC2C   , :0044DC3E   
|
:0042FD50 55                      push ebp
:0042FD51 8BEC                    mov ebp, esp
:0042FD53 51                      push ecx
:0042FD54 894DFC                  mov dword ptr [ebp-04], ecx
:0042FD57 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FD5A 8B08                    mov ecx, dword ptr [eax]
:0042FD5C 6BC970                  imul ecx, 00000070
:0042FD5F 81C198224900            add ecx, 00492298
:0042FD65 E8712AFDFF              call 004027DB
:0042FD6A 8BE5                    mov esp, ebp
:0042FD6C 5D                      pop ebp
:0042FD6D C3                      ret


:0042FD6E CC                      int 03
:0042FD6F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042F5FF   , :0043020A   , :0043025B   , :00448DEE   , :0045790A   
|
:0042FD70 55                      push ebp
:0042FD71 8BEC                    mov ebp, esp
:0042FD73 51                      push ecx
:0042FD74 894DFC                  mov dword ptr [ebp-04], ecx
:0042FD77 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FD7A 8A4018                  mov al, byte ptr [eax+18]
:0042FD7D 8BE5                    mov esp, ebp
:0042FD7F 5D                      pop ebp
:0042FD80 C3                      ret


:0042FD81 CC                      int 03
:0042FD82 CC                      int 03
:0042FD83 CC                      int 03
:0042FD84 CC                      int 03
:0042FD85 CC                      int 03
:0042FD86 CC                      int 03
:0042FD87 CC                      int 03
:0042FD88 CC                      int 03
:0042FD89 CC                      int 03
:0042FD8A CC                      int 03
:0042FD8B CC                      int 03
:0042FD8C CC                      int 03
:0042FD8D CC                      int 03
:0042FD8E CC                      int 03
:0042FD8F CC                      int 03
:0042FD90 55                      push ebp
:0042FD91 8BEC                    mov ebp, esp
:0042FD93 E802000000              call 0042FD9A
:0042FD98 5D                      pop ebp
:0042FD99 C3                      ret



* Referenced by a CALL at Address:
|:0042FD93   
|
:0042FD9A 55                      push ebp
:0042FD9B 8BEC                    mov ebp, esp
:0042FD9D 68B0774000              push 004077B0

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042FDA2 6A06                    push 00000006

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042FDA4 6A02                    push 00000002
:0042FDA6 6810024B00              push 004B0210
:0042FDAB E820F2FDFF              call 0040EFD0
:0042FDB0 5D                      pop ebp
:0042FDB1 C3                      ret



* Referenced by a CALL at Addresses:
|:0044C45C   , :0044C7B9   
|
:0042FDB2 55                      push ebp
:0042FDB3 8BEC                    mov ebp, esp
:0042FDB5 83EC28                  sub esp, 00000028
:0042FDB8 56                      push esi
:0042FDB9 8B4508                  mov eax, dword ptr [ebp+08]
:0042FDBC 25FF000000              and eax, 000000FF
:0042FDC1 6BC024                  imul eax, 00000024
:0042FDC4 0508F54A00              add eax, 004AF508
:0042FDC9 8945F0                  mov dword ptr [ebp-10], eax
:0042FDCC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042FDCF E8FCF8FFFF              call 0042F6D0
:0042FDD4 6BC070                  imul eax, 00000070
:0042FDD7 0598224900              add eax, 00492298
:0042FDDC 8945F4                  mov dword ptr [ebp-0C], eax
:0042FDDF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042FDE2 E8B995FFFF              call 004293A0
:0042FDE7 668B08                  mov cx, word ptr [eax]
:0042FDEA 66894DFC                mov word ptr [ebp-04], cx
:0042FDEE 8B5518                  mov edx, dword ptr [ebp+18]
:0042FDF1 81E2FF000000            and edx, 000000FF
:0042FDF7 81FAFF000000            cmp edx, 000000FF
:0042FDFD 7450                    je 0042FE4F
:0042FDFF 8B4514                  mov eax, dword ptr [ebp+14]
:0042FE02 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042FE07 3DFF000000              cmp eax, 000000FF
:0042FE0C 7441                    je 0042FE4F
:0042FE0E 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042FE11 81E1FF000000            and ecx, 000000FF
:0042FE17 6BC924                  imul ecx, 00000024
:0042FE1A 81C108F54A00            add ecx, 004AF508
:0042FE20 894DEC                  mov dword ptr [ebp-14], ecx
:0042FE23 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042FE26 E8A5F8FFFF              call 0042F6D0
:0042FE2B 6BC070                  imul eax, 00000070
:0042FE2E 0598224900              add eax, 00492298
:0042FE33 8945E8                  mov dword ptr [ebp-18], eax
:0042FE36 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042FE39 E8B1A6FFFF              call 0042A4EF
:0042FE3E 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042FE40 B90A000000              mov ecx, 0000000A
:0042FE45 F7F1                    div ecx
:0042FE47 83C014                  add eax, 00000014
:0042FE4A 8945F8                  mov dword ptr [ebp-08], eax
:0042FE4D EB34                    jmp 0042FE83

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042FDFD(C), :0042FE0C(C)
|
:0042FE4F 8B550C                  mov edx, dword ptr [ebp+0C]
:0042FE52 81E2FF000000            and edx, 000000FF
:0042FE58 85D2                    test edx, edx
:0042FE5A 7509                    jne 0042FE65
:0042FE5C C745DC14000000          mov [ebp-24], 00000014
:0042FE63 EB18                    jmp 0042FE7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FE5A(C)
|
:0042FE65 8B450C                  mov eax, dword ptr [ebp+0C]
:0042FE68 25FF000000              and eax, 000000FF
:0042FE6D 83E801                  sub eax, 00000001
:0042FE70 F7D8                    neg eax
:0042FE72 1BC0                    sbb eax, eax
:0042FE74 83E028                  and eax, 00000028
:0042FE77 83C028                  add eax, 00000028
:0042FE7A 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FE63(U)
|
:0042FE7D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042FE80 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FE4D(U)
|
:0042FE83 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042FE86 E8254AFDFF              call 004048B0
:0042FE8B 8B75F8                  mov esi, dword ptr [ebp-08]
:0042FE8E 03F0                    add esi, eax
:0042FE90 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042FE93 E87926FDFF              call 00402511
:0042FE98 3BF0                    cmp esi, eax
:0042FE9A 7617                    jbe 0042FEB3
:0042FE9C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042FE9F E86D26FDFF              call 00402511
:0042FEA4 8BF0                    mov esi, eax
:0042FEA6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042FEA9 E8024AFDFF              call 004048B0
:0042FEAE 2BF0                    sub esi, eax
:0042FEB0 8975F8                  mov dword ptr [ebp-08], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FE9A(C)
|
:0042FEB3 8B5510                  mov edx, dword ptr [ebp+10]
:0042FEB6 81E2FF000000            and edx, 000000FF
:0042FEBC 85D2                    test edx, edx
:0042FEBE 0F849A010000            je 0043005E
:0042FEC4 8B4510                  mov eax, dword ptr [ebp+10]
:0042FEC7 25FF000000              and eax, 000000FF
:0042FECC 85C0                    test eax, eax
:0042FECE 7448                    je 0042FF18
:0042FED0 8B4D18                  mov ecx, dword ptr [ebp+18]
:0042FED3 81E1FF000000            and ecx, 000000FF
:0042FED9 81F9FF000000            cmp ecx, 000000FF
:0042FEDF 751D                    jne 0042FEFE
:0042FEE1 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042FEE3 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0042FEE5 68FF000000              push 000000FF
:0042FEEA 8A5508                  mov dl, byte ptr [ebp+08]
:0042FEED 52                      push edx
:0042FEEE 8A4514                  mov al, byte ptr [ebp+14]
:0042FEF1 50                      push eax
:0042FEF2 B9A8034B00              mov ecx, 004B03A8
:0042FEF7 E8DA670100              call 004466D6
:0042FEFC EB1A                    jmp 0042FF18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FEDF(C)
|
:0042FEFE 6A01                    push 00000001

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0042FF00 6A02                    push 00000002
:0042FF02 8A4D18                  mov cl, byte ptr [ebp+18]
:0042FF05 51                      push ecx
:0042FF06 8A5508                  mov dl, byte ptr [ebp+08]
:0042FF09 52                      push edx
:0042FF0A 8A4514                  mov al, byte ptr [ebp+14]
:0042FF0D 50                      push eax
:0042FF0E B9A8034B00              mov ecx, 004B03A8
:0042FF13 E8BE670100              call 004466D6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042FECE(C), :0042FEFC(U)
|
:0042FF18 B9C8E24A00              mov ecx, 004AE2C8
:0042FF1D E8AEF2FDFF              call 0040F1D0
:0042FF22 83E010                  and eax, 00000010
:0042FF25 85C0                    test eax, eax
:0042FF27 7536                    jne 0042FF5F
:0042FF29 C645E400                mov [ebp-1C], 00
:0042FF2D EB09                    jmp 0042FF38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FF58(U)
|
:0042FF2F 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0042FF32 80C101                  add cl, 01
:0042FF35 884DE4                  mov byte ptr [ebp-1C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FF2D(U)
|
:0042FF38 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042FF3B 81E2FF000000            and edx, 000000FF
:0042FF41 83FA03                  cmp edx, 00000003
:0042FF44 7D14                    jge 0042FF5A

* Possible Reference to String Resource ID=00015: ""
                                  |
:0042FF46 6A0F                    push 0000000F
:0042FF48 8B45F8                  mov eax, dword ptr [ebp-08]
:0042FF4B 50                      push eax
:0042FF4C 8A4D08                  mov cl, byte ptr [ebp+08]
:0042FF4F 51                      push ecx
:0042FF50 E8361F0100              call 00441E8B
:0042FF55 83C40C                  add esp, 0000000C
:0042FF58 EBD5                    jmp 0042FF2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FF44(C)
|
:0042FF5A E9E9000000              jmp 00430048

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FF27(C)
|
:0042FF5F 8A5508                  mov dl, byte ptr [ebp+08]
:0042FF62 52                      push edx
:0042FF63 8D45E0                  lea eax, dword ptr [ebp-20]
:0042FF66 50                      push eax
:0042FF67 E8C4210100              call 00442130
:0042FF6C 83C408                  add esp, 00000008
:0042FF6F E8F2000000              call 00430066
:0042FF74 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042FF77 81E1FF000000            and ecx, 000000FF
:0042FF7D 6BC924                  imul ecx, 00000024
:0042FF80 81C108F54A00            add ecx, 004AF508
:0042FF86 E845F3FDFF              call 0040F2D0
:0042FF8B 85C0                    test eax, eax
:0042FF8D 7411                    je 0042FFA0
:0042FF8F 33C9                    xor ecx, ecx
:0042FF91 8A0D1C024B00            mov cl, byte ptr [004B021C]
:0042FF97 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:0042FF9B 8955D8                  mov dword ptr [ebp-28], edx
:0042FF9E EB0E                    jmp 0042FFAE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FF8D(C)
|
:0042FFA0 33C0                    xor eax, eax
:0042FFA2 A01C024B00              mov al, byte ptr [004B021C]
:0042FFA7 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:0042FFAB 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FF9E(U)
|
:0042FFAE 8A55D8                  mov dl, byte ptr [ebp-28]
:0042FFB1 8855E0                  mov byte ptr [ebp-20], dl
:0042FFB4 33C0                    xor eax, eax
:0042FFB6 A03D0A4B00              mov al, byte ptr [004B0A3D]
:0042FFBB 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:0042FFBF 51                      push ecx
:0042FFC0 B9F8F44A00              mov ecx, 004AF4F8
:0042FFC5 E8C654FFFF              call 00425490
:0042FFCA 8A5508                  mov dl, byte ptr [ebp+08]
:0042FFCD 52                      push edx
:0042FFCE 668B45E0                mov ax, word ptr [ebp-20]
:0042FFD2 50                      push eax
:0042FFD3 E804220100              call 004421DC
:0042FFD8 83C408                  add esp, 00000008
:0042FFDB E8B06BFFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0042FFE0 6A03                    push 00000003
:0042FFE2 E85D6DFFFF              call 00426D44
:0042FFE7 83C404                  add esp, 00000004
:0042FFEA 33C9                    xor ecx, ecx
:0042FFEC 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:0042FFF2 8D540906                lea edx, dword ptr [ecx+ecx+06]
:0042FFF6 52                      push edx
:0042FFF7 B9F8F44A00              mov ecx, 004AF4F8
:0042FFFC E88F54FFFF              call 00425490
:00430001 6881000000              push 00000081
:00430006 8B45F8                  mov eax, dword ptr [ebp-08]
:00430009 50                      push eax
:0043000A 8A4D08                  mov cl, byte ptr [ebp+08]
:0043000D 51                      push ecx
:0043000E 668B55E0                mov dx, word ptr [ebp-20]
:00430012 52                      push edx
:00430013 E874240100              call 0044248C
:00430018 83C410                  add esp, 00000010
:0043001B E8706BFFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00430020 6A03                    push 00000003
:00430022 E81D6DFFFF              call 00426D44
:00430027 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0043002A 6A09                    push 00000009
:0043002C 6A21                    push 00000021
:0043002E 8A45E1                  mov al, byte ptr [ebp-1F]
:00430031 50                      push eax
:00430032 33C9                    xor ecx, ecx
:00430034 8A0D1C024B00            mov cl, byte ptr [004B021C]
:0043003A 83C106                  add ecx, 00000006
:0043003D 51                      push ecx
:0043003E B9A8034B00              mov ecx, 004B03A8
:00430043 E87E470100              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FF5A(U)
|
:00430048 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043004B E86048FDFF              call 004048B0
:00430050 8B55F8                  mov edx, dword ptr [ebp-08]
:00430053 03D0                    add edx, eax
:00430055 52                      push edx
:00430056 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00430059 E85FA9FFFF              call 0042A9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FEBE(C)
|
:0043005E 8A45F8                  mov al, byte ptr [ebp-08]
:00430061 5E                      pop esi
:00430062 8BE5                    mov esp, ebp
:00430064 5D                      pop ebp
:00430065 C3                      ret



* Referenced by a CALL at Addresses:
|:0042FF6F   , :004309B4   , :00430DCF   , :0043100C   , :004357DB   
|:004375BF   , :00439706   
|
:00430066 55                      push ebp
:00430067 8BEC                    mov ebp, esp
:00430069 51                      push ecx
:0043006A B9A8034B00              mov ecx, 004B03A8
:0043006F E815680100              call 00446889
:00430074 2B05F4E44700            sub eax, dword ptr [0047E4F4]
:0043007A 83C010                  add eax, 00000010
:0043007D 99                      cdq
:0043007E 83E20F                  and edx, 0000000F
:00430081 03C2                    add eax, edx
:00430083 C1F804                  sar eax, 04
:00430086 8945FC                  mov dword ptr [ebp-04], eax
:00430089 8B45FC                  mov eax, dword ptr [ebp-04]
:0043008C D1F8                    sar eax, 1
:0043008E A21C024B00              mov byte ptr [004B021C], al
:00430093 8BE5                    mov esp, ebp
:00430095 5D                      pop ebp
:00430096 C3                      ret



* Referenced by a CALL at Addresses:
|:0043559E   , :00435F4E   , :00436222   , :00436501   , :004365EF   
|:00436997   , :00436C4C   , :00436F1C   , :004371E2   , :00437548   
|:00438B1B   , :0044BCCB   , :0044C112   
|
:00430097 55                      push ebp
:00430098 8BEC                    mov ebp, esp
:0043009A 51                      push ecx
:0043009B 56                      push esi
:0043009C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043009F 81E1FF000000            and ecx, 000000FF
:004300A5 6BC924                  imul ecx, 00000024
:004300A8 81C108F54A00            add ecx, 004AF508
:004300AE E83CA4FFFF              call 0042A4EF
:004300B3 8BF0                    mov esi, eax
:004300B5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004300B8 81E1FF000000            and ecx, 000000FF
:004300BE 6BC924                  imul ecx, 00000024
:004300C1 81C108F54A00            add ecx, 004AF508
:004300C7 E823A4FFFF              call 0042A4EF
:004300CC 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004300CE B903000000              mov ecx, 00000003
:004300D3 F7F1                    div ecx
:004300D5 3BC6                    cmp eax, esi
:004300D7 1BD2                    sbb edx, edx
:004300D9 F7DA                    neg edx
:004300DB 8955FC                  mov dword ptr [ebp-04], edx
:004300DE 8B45FC                  mov eax, dword ptr [ebp-04]
:004300E1 5E                      pop esi
:004300E2 8BE5                    mov esp, ebp
:004300E4 5D                      pop ebp
:004300E5 C3                      ret



* Referenced by a CALL at Addresses:
|:004317B2   , :00433B0D   , :00433DCA   , :004340EA   , :00434310   
|:00434531   , :00434758   , :0043499B   , :00434B52   , :00434D0F   
|:00434F57   , :004351CD   , :004354A3   , :00435A02   , :00435C1C   
|:00435DF7   , :0043614E   , :00436422   , :0043688F   , :00436B0C   
|:00436E14   , :00437105   , :00437477   , :004379B8   , :00437B53   
|:00437DC1   , :00437F3E   , :00438285   , :00438653   , :00438884   
|:00438A66   , :00438CEC   , :0044A6E6   
|
:004300E6 55                      push ebp
:004300E7 8BEC                    mov ebp, esp
:004300E9 83EC18                  sub esp, 00000018
:004300EC 56                      push esi
:004300ED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004300F0 6BC924                  imul ecx, 00000024
:004300F3 81C108F54A00            add ecx, 004AF508
:004300F9 E8D2F5FFFF              call 0042F6D0
:004300FE 8BC8                    mov ecx, eax
:00430100 6BC970                  imul ecx, 00000070
:00430103 81C198224900            add ecx, 00492298
:00430109 E83D26FDFF              call 0040274B
:0043010E 8845F4                  mov byte ptr [ebp-0C], al
:00430111 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430114 6BC924                  imul ecx, 00000024
:00430117 81C108F54A00            add ecx, 004AF508
:0043011D E87E92FFFF              call 004293A0
:00430122 50                      push eax
:00430123 E857780100              call 0044797F
:00430128 83C404                  add esp, 00000004
:0043012B 8845EC                  mov byte ptr [ebp-14], al
:0043012E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00430131 6BC911                  imul ecx, 00000011
:00430134 81C180DF4A00            add ecx, 004ADF80
:0043013A E86126FEFF              call 004127A0
:0043013F 8845F0                  mov byte ptr [ebp-10], al
:00430142 C645F8FF                mov [ebp-08], FF
:00430146 C745FC00000000          mov [ebp-04], 00000000
:0043014D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430150 6BC924                  imul ecx, 00000024
:00430153 81C108F54A00            add ecx, 004AF508
:00430159 E85247FDFF              call 004048B0
:0043015E 8BF0                    mov esi, eax
:00430160 8B4D08                  mov ecx, dword ptr [ebp+08]
:00430163 6BC911                  imul ecx, 00000011
:00430166 81C180DF4A00            add ecx, 004ADF80
:0043016C E87FFBFFFF              call 0042FCF0
:00430171 25FF000000              and eax, 000000FF
:00430176 3BF0                    cmp esi, eax
:00430178 7307                    jnb 00430181
:0043017A 33C0                    xor eax, eax
:0043017C E994050000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430178(C)
|
:00430181 8B45F4                  mov eax, dword ptr [ebp-0C]
:00430184 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00430189 3DFF000000              cmp eax, 000000FF
:0043018E 741A                    je 004301AA
:00430190 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00430193 81E1FF000000            and ecx, 000000FF
:00430199 6BC933                  imul ecx, 00000033
:0043019C 81C1C8EF4800            add ecx, 0048EFC8
:004301A2 E8F456FDFF              call 0040589B
:004301A7 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043018E(C)
|
:004301AA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004301AD 81E1FF000000            and ecx, 000000FF
:004301B3 81F9FF000000            cmp ecx, 000000FF
:004301B9 7427                    je 004301E2
:004301BB 8B55F8                  mov edx, dword ptr [ebp-08]
:004301BE 81E2FF000000            and edx, 000000FF
:004301C4 8B45F0                  mov eax, dword ptr [ebp-10]
:004301C7 25FF000000              and eax, 000000FF
:004301CC 3BD0                    cmp edx, eax
:004301CE 7412                    je 004301E2
:004301D0 837D1000                cmp dword ptr [ebp+10], 00000000
:004301D4 7405                    je 004301DB
:004301D6 E8BF050000              call 0043079A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004301D4(C)
|
:004301DB 33C0                    xor eax, eax
:004301DD E933050000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004301B9(C), :004301CE(C)
|
:004301E2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004301E5 81E1FF000000            and ecx, 000000FF
:004301EB 83F903                  cmp ecx, 00000003
:004301EE 7544                    jne 00430234
:004301F0 8B55F8                  mov edx, dword ptr [ebp-08]
:004301F3 81E2FF000000            and edx, 000000FF
:004301F9 83FA03                  cmp edx, 00000003
:004301FC 7536                    jne 00430234
:004301FE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430201 6BC924                  imul ecx, 00000024
:00430204 81C108F54A00            add ecx, 004AF508
:0043020A E861FBFFFF              call 0042FD70
:0043020F 25FF000000              and eax, 000000FF
:00430214 85C0                    test eax, eax
:00430216 741C                    je 00430234
:00430218 837D1000                cmp dword ptr [ebp+10], 00000000
:0043021C 740F                    je 0043022D

* Possible StringData Ref from Data Obj ->"ѩ󥿦bˤġALkC"
                                  |
:0043021E 680C854700              push 0047850C
:00430223 6A00                    push 00000000
:00430225 E84289FFFF              call 00428B6C
:0043022A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043021C(C)
|
:0043022D 33C0                    xor eax, eax
:0043022F E9E1040000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004301EE(C), :004301FC(C), :00430216(C)
|
:00430234 8B45F0                  mov eax, dword ptr [ebp-10]
:00430237 25FF000000              and eax, 000000FF
:0043023C 83F804                  cmp eax, 00000004
:0043023F 7544                    jne 00430285
:00430241 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430244 81E1FF000000            and ecx, 000000FF
:0043024A 83F904                  cmp ecx, 00000004
:0043024D 7536                    jne 00430285
:0043024F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430252 6BC924                  imul ecx, 00000024
:00430255 81C108F54A00            add ecx, 004AF508
:0043025B E810FBFFFF              call 0042FD70
:00430260 25FF000000              and eax, 000000FF
:00430265 85C0                    test eax, eax
:00430267 741C                    je 00430285
:00430269 837D1000                cmp dword ptr [ebp+10], 00000000
:0043026D 740F                    je 0043027E

* Possible StringData Ref from Data Obj ->"ѩ󥿦bˤġALkC"
                                  |
:0043026F 6828854700              push 00478528
:00430274 6A00                    push 00000000
:00430276 E8F188FFFF              call 00428B6C
:0043027B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043026D(C)
|
:0043027E 33C0                    xor eax, eax
:00430280 E990040000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043023F(C), :0043024D(C), :00430267(C)
|
:00430285 8B5508                  mov edx, dword ptr [ebp+08]
:00430288 8955E8                  mov dword ptr [ebp-18], edx
:0043028B 8B45E8                  mov eax, dword ptr [ebp-18]
:0043028E 83E801                  sub eax, 00000001
:00430291 8945E8                  mov dword ptr [ebp-18], eax
:00430294 837DE82F                cmp dword ptr [ebp-18], 0000002F
:00430298 0F8772040000            ja 00430710
:0043029E 8B55E8                  mov edx, dword ptr [ebp-18]
:004302A1 33C9                    xor ecx, ecx
:004302A3 8A8A6A074300            mov cl, byte ptr [edx+0043076A]
:004302A9 FF248D1A074300          jmp dword ptr [4*ecx+0043071A]
:004302B0 B9180A4B00              mov ecx, 004B0A18
:004302B5 E834810200              call 004583EE
:004302BA 25FF000000              and eax, 000000FF
:004302BF 83F802                  cmp eax, 00000002
:004302C2 7428                    je 004302EC
:004302C4 837D1000                cmp dword ptr [ebp+10], 00000000
:004302C8 741B                    je 004302E5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004302CA 6A07                    push 00000007
:004302CC B9800D4B00              mov ecx, 004B0D80
:004302D1 E8D3180300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩSUBAҥHLkϥΡC"
                                  |
:004302D6 6844854700              push 00478544
:004302DB 6A00                    push 00000000
:004302DD E88A88FFFF              call 00428B6C
:004302E2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004302C8(C)
|
:004302E5 33C0                    xor eax, eax
:004302E7 E929040000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004302C2(C)
|
:004302EC E91F040000              jmp 00430710
:004302F1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004302F4 6BC924                  imul ecx, 00000024
:004302F7 81C108F54A00            add ecx, 004AF508
:004302FD E86E970000              call 00439A70
:00430302 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00430304 B90A000000              mov ecx, 0000000A
:00430309 F7F1                    div ecx
:0043030B 8945FC                  mov dword ptr [ebp-04], eax
:0043030E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430311 6BC924                  imul ecx, 00000024
:00430314 81C108F54A00            add ecx, 004AF508
:0043031A E85145FDFF              call 00404870
:0043031F 3B45FC                  cmp eax, dword ptr [ebp-04]
:00430322 7328                    jnb 0043034C
:00430324 837D1000                cmp dword ptr [ebp+10], 00000000
:00430328 741B                    je 00430345

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043032A 6A07                    push 00000007
:0043032C B9800D4B00              mov ecx, 004B0D80
:00430331 E873180300              call 00461BA9

* Possible StringData Ref from Data Obj ->"۳@[OC"
                                  |
:00430336 6864854700              push 00478564
:0043033B 6A00                    push 00000000
:0043033D E82A88FFFF              call 00428B6C
:00430342 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430328(C)
|
:00430345 33C0                    xor eax, eax
:00430347 E9C9030000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430322(C)
|
:0043034C E9BF030000              jmp 00430710
:00430351 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430354 6BC924                  imul ecx, 00000024
:00430357 81C108F54A00            add ecx, 004AF508
:0043035D E80E970000              call 00439A70
:00430362 D1E8                    shr eax, 1
:00430364 8945FC                  mov dword ptr [ebp-04], eax
:00430367 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043036A 6BC924                  imul ecx, 00000024
:0043036D 81C108F54A00            add ecx, 004AF508
:00430373 E8F844FDFF              call 00404870
:00430378 3B45FC                  cmp eax, dword ptr [ebp-04]
:0043037B 7328                    jnb 004303A5
:0043037D 837D1000                cmp dword ptr [ebp+10], 00000000
:00430381 741B                    je 0043039E

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430383 6A07                    push 00000007
:00430385 B9800D4B00              mov ecx, 004B0D80
:0043038A E81A180300              call 00461BA9

* Possible StringData Ref from Data Obj ->"۳@[OC"
                                  |
:0043038F 687C854700              push 0047857C
:00430394 6A00                    push 00000000
:00430396 E8D187FFFF              call 00428B6C
:0043039B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430381(C)
|
:0043039E 33C0                    xor eax, eax
:004303A0 E970030000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043037B(C)
|
:004303A5 E966030000              jmp 00430710
:004303AA B9180A4B00              mov ecx, 004B0A18
:004303AF E83A800200              call 004583EE
:004303B4 25FF000000              and eax, 000000FF
:004303B9 83F802                  cmp eax, 00000002
:004303BC 7528                    jne 004303E6
:004303BE 837D1000                cmp dword ptr [ebp+10], 00000000
:004303C2 741B                    je 004303DF

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004303C4 6A07                    push 00000007
:004303C6 B9800D4B00              mov ecx, 004B0D80
:004303CB E8D9170300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩUBAҥHLkϥΡC"
                                  |
:004303D0 6894854700              push 00478594
:004303D5 6A00                    push 00000000
:004303D7 E89087FFFF              call 00428B6C
:004303DC 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004303C2(C)
|
:004303DF 33C0                    xor eax, eax
:004303E1 E92F030000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004303BC(C)
|
:004303E6 E925030000              jmp 00430710
:004303EB B9180A4B00              mov ecx, 004B0A18
:004303F0 E8F97F0200              call 004583EE
:004303F5 25FF000000              and eax, 000000FF
:004303FA 83F802                  cmp eax, 00000002
:004303FD 7528                    jne 00430427
:004303FF 837D1000                cmp dword ptr [ebp+10], 00000000
:00430403 741B                    je 00430420

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430405 6A07                    push 00000007
:00430407 B9800D4B00              mov ecx, 004B0D80
:0043040C E898170300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩUBAҥHLkϥΡC"
                                  |
:00430411 68B0854700              push 004785B0
:00430416 6A00                    push 00000000
:00430418 E84F87FFFF              call 00428B6C
:0043041D 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430403(C)
|
:00430420 33C0                    xor eax, eax
:00430422 E9EE020000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004303FD(C)
|
:00430427 E9E4020000              jmp 00430710
:0043042C B9180A4B00              mov ecx, 004B0A18
:00430431 E8B87F0200              call 004583EE
:00430436 25FF000000              and eax, 000000FF
:0043043B 83F802                  cmp eax, 00000002
:0043043E 7528                    jne 00430468
:00430440 837D1000                cmp dword ptr [ebp+10], 00000000
:00430444 741B                    je 00430461

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430446 6A07                    push 00000007
:00430448 B9800D4B00              mov ecx, 004B0D80
:0043044D E857170300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩUBAҥHLkϥΡC"
                                  |
:00430452 68CC854700              push 004785CC
:00430457 6A00                    push 00000000
:00430459 E80E87FFFF              call 00428B6C
:0043045E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430444(C)
|
:00430461 33C0                    xor eax, eax
:00430463 E9AD020000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043043E(C)
|
:00430468 E9A3020000              jmp 00430710
:0043046D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430470 6BC924                  imul ecx, 00000024
:00430473 81C108F54A00            add ecx, 004AF508
:00430479 E8F243FDFF              call 00404870
:0043047E 83F832                  cmp eax, 00000032
:00430481 7328                    jnb 004304AB
:00430483 837D1000                cmp dword ptr [ebp+10], 00000000
:00430487 741B                    je 004304A4

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430489 6A07                    push 00000007
:0043048B B9800D4B00              mov ecx, 004B0D80
:00430490 E814170300              call 00461BA9

* Possible StringData Ref from Data Obj ->"۳@[OC"
                                  |
:00430495 68E8854700              push 004785E8
:0043049A 6A00                    push 00000000
:0043049C E8CB86FFFF              call 00428B6C
:004304A1 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430487(C)
|
:004304A4 33C0                    xor eax, eax
:004304A6 E96A020000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430481(C)
|
:004304AB 6A20                    push 00000020
:004304AD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004304B0 6BC924                  imul ecx, 00000024
:004304B3 81C108F54A00            add ecx, 004AF508
:004304B9 E8A2F2FFFF              call 0042F760
:004304BE 85C0                    test eax, eax
:004304C0 7428                    je 004304EA
:004304C2 837D1000                cmp dword ptr [ebp+10], 00000000
:004304C6 741B                    je 004304E3

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004304C8 6A07                    push 00000007
:004304CA B9800D4B00              mov ecx, 004B0D80
:004304CF E8D5160300              call 00461BA9

* Possible StringData Ref from Data Obj ->"˪pLkϥΡC"
                                  |
:004304D4 6800864700              push 00478600
:004304D9 6A00                    push 00000000
:004304DB E88C86FFFF              call 00428B6C
:004304E0 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004304C6(C)
|
:004304E3 33C0                    xor eax, eax
:004304E5 E92B020000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004304C0(C)
|
:004304EA E921020000              jmp 00430710
:004304EF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004304F2 6BC924                  imul ecx, 00000024
:004304F5 81C108F54A00            add ecx, 004AF508
:004304FB E8B043FDFF              call 004048B0
:00430500 83F828                  cmp eax, 00000028
:00430503 7628                    jbe 0043052D
:00430505 837D1000                cmp dword ptr [ebp+10], 00000000
:00430509 741B                    je 00430526

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043050B 6A07                    push 00000007
:0043050D B9800D4B00              mov ecx, 004B0D80
:00430512 E892160300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩ۳ޯȤjAҥHLkϥΡC"
                                  |
:00430517 6818864700              push 00478618
:0043051C 6A00                    push 00000000
:0043051E E84986FFFF              call 00428B6C
:00430523 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430509(C)
|
:00430526 33C0                    xor eax, eax
:00430528 E9E8010000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430503(C)
|
:0043052D E9DE010000              jmp 00430710
:00430532 8B5514                  mov edx, dword ptr [ebp+14]
:00430535 81E2FF000000            and edx, 000000FF
:0043053B 81FAFF000000            cmp edx, 000000FF
:00430541 7406                    je 00430549
:00430543 8A4514                  mov al, byte ptr [ebp+14]
:00430546 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430541(C)
|
:00430549 6A01                    push 00000001
:0043054B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043054E 6BC924                  imul ecx, 00000024
:00430551 81C108F54A00            add ecx, 004AF508
:00430557 E804F2FFFF              call 0042F760
:0043055C 85C0                    test eax, eax
:0043055E 7428                    je 00430588
:00430560 837D1000                cmp dword ptr [ebp+10], 00000000
:00430564 741B                    je 00430581

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430566 6A07                    push 00000007
:00430568 B9800D4B00              mov ecx, 004B0D80
:0043056D E837160300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ʪɭԵLkC"
                                  |
:00430572 6840864700              push 00478640
:00430577 6A00                    push 00000000
:00430579 E8EE85FFFF              call 00428B6C
:0043057E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430564(C)
|
:00430581 33C0                    xor eax, eax
:00430583 E98D010000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043055E(C)
|
:00430588 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043058B 81E1FF000000            and ecx, 000000FF
:00430591 83F90A                  cmp ecx, 0000000A
:00430594 7428                    je 004305BE
:00430596 837D1000                cmp dword ptr [ebp+10], 00000000
:0043059A 741B                    je 004305B7

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043059C 6A07                    push 00000007
:0043059E B9800D4B00              mov ecx, 004B0D80
:004305A3 E801160300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ubWϥΡC"
                                  |
:004305A8 6858864700              push 00478658
:004305AD 6A00                    push 00000000
:004305AF E8B885FFFF              call 00428B6C
:004305B4 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043059A(C)
|
:004305B7 33C0                    xor eax, eax
:004305B9 E957010000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430594(C)
|
:004305BE E94D010000              jmp 00430710
:004305C3 8B5514                  mov edx, dword ptr [ebp+14]
:004305C6 81E2FF000000            and edx, 000000FF
:004305CC 81FAFF000000            cmp edx, 000000FF
:004305D2 7406                    je 004305DA
:004305D4 8A4514                  mov al, byte ptr [ebp+14]
:004305D7 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004305D2(C)
|
:004305DA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004305DD 81E1FF000000            and ecx, 000000FF
:004305E3 83F90A                  cmp ecx, 0000000A
:004305E6 740E                    je 004305F6
:004305E8 8B55EC                  mov edx, dword ptr [ebp-14]
:004305EB 81E2FF000000            and edx, 000000FF
:004305F1 83FA0D                  cmp edx, 0000000D
:004305F4 7528                    jne 0043061E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004305E6(C)
|
:004305F6 837D1000                cmp dword ptr [ebp+10], 00000000
:004305FA 741B                    je 00430617

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004305FC 6A07                    push 00000007
:004305FE B9800D4B00              mov ecx, 004B0D80
:00430603 E8A1150300              call 00461BA9

* Possible StringData Ref from Data Obj ->"bNLyWLkϥΡC"
                                  |
:00430608 686C864700              push 0047866C
:0043060D 6A00                    push 00000000
:0043060F E85885FFFF              call 00428B6C
:00430614 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004305FA(C)
|
:00430617 33C0                    xor eax, eax
:00430619 E9F7000000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004305F4(C)
|
:0043061E E9ED000000              jmp 00430710
:00430623 8B4514                  mov eax, dword ptr [ebp+14]
:00430626 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043062B 3DFF000000              cmp eax, 000000FF
:00430630 7406                    je 00430638
:00430632 8A4D14                  mov cl, byte ptr [ebp+14]
:00430635 884DEC                  mov byte ptr [ebp-14], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430630(C)
|
:00430638 6A01                    push 00000001
:0043063A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043063D 6BC924                  imul ecx, 00000024
:00430640 81C108F54A00            add ecx, 004AF508
:00430646 E815F1FFFF              call 0042F760
:0043064B 85C0                    test eax, eax
:0043064D 7428                    je 00430677
:0043064F 837D1000                cmp dword ptr [ebp+10], 00000000
:00430653 741B                    je 00430670

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430655 6A07                    push 00000007
:00430657 B9800D4B00              mov ecx, 004B0D80
:0043065C E848150300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ʪɭԵLkC"
                                  |
:00430661 6884864700              push 00478684
:00430666 6A00                    push 00000000
:00430668 E8FF84FFFF              call 00428B6C
:0043066D 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430653(C)
|
:00430670 33C0                    xor eax, eax
:00430672 E99E000000              jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043064D(C)
|
:00430677 8B55EC                  mov edx, dword ptr [ebp-14]
:0043067A 81E2FF000000            and edx, 000000FF
:00430680 83FA0A                  cmp edx, 0000000A
:00430683 740D                    je 00430692
:00430685 8B45EC                  mov eax, dword ptr [ebp-14]
:00430688 25FF000000              and eax, 000000FF
:0043068D 83F80D                  cmp eax, 0000000D
:00430690 7525                    jne 004306B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430683(C)
|
:00430692 837D1000                cmp dword ptr [ebp+10], 00000000
:00430696 741B                    je 004306B3

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430698 6A07                    push 00000007
:0043069A B9800D4B00              mov ecx, 004B0D80
:0043069F E805150300              call 00461BA9

* Possible StringData Ref from Data Obj ->"bNLyWLkϥΡC"
                                  |
:004306A4 689C864700              push 0047869C
:004306A9 6A00                    push 00000000
:004306AB E8BC84FFFF              call 00428B6C
:004306B0 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430696(C)
|
:004306B3 33C0                    xor eax, eax
:004306B5 EB5E                    jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430690(C)
|
:004306B7 EB57                    jmp 00430710
:004306B9 8B4D14                  mov ecx, dword ptr [ebp+14]
:004306BC 81E1FF000000            and ecx, 000000FF
:004306C2 81F9FF000000            cmp ecx, 000000FF
:004306C8 7406                    je 004306D0
:004306CA 8A5514                  mov dl, byte ptr [ebp+14]
:004306CD 8855EC                  mov byte ptr [ebp-14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004306C8(C)
|
:004306D0 8B45EC                  mov eax, dword ptr [ebp-14]
:004306D3 25FF000000              and eax, 000000FF
:004306D8 83F807                  cmp eax, 00000007
:004306DB 7433                    je 00430710
:004306DD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004306E0 81E1FF000000            and ecx, 000000FF
:004306E6 83F905                  cmp ecx, 00000005
:004306E9 7425                    je 00430710
:004306EB 837D1000                cmp dword ptr [ebp+10], 00000000
:004306EF 741B                    je 0043070C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004306F1 6A07                    push 00000007
:004306F3 B9800D4B00              mov ecx, 004B0D80
:004306F8 E8AC140300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ubsaNϥΡC"
                                  |
:004306FD 68B4864700              push 004786B4
:00430702 6A00                    push 00000000
:00430704 E86384FFFF              call 00428B6C
:00430709 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004306EF(C)
|
:0043070C 33C0                    xor eax, eax
:0043070E EB05                    jmp 00430715

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430298(C), :004302EC(U), :0043034C(U), :004303A5(U), :004303E6(U)
|:00430427(U), :00430468(U), :004304EA(U), :0043052D(U), :004305BE(U)
|:0043061E(U), :004306B7(U), :004306DB(C), :004306E9(C)
|
:00430710 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043017C(U), :004301DD(U), :0043022F(U), :00430280(U), :004302E7(U)
|:00430347(U), :004303A0(U), :004303E1(U), :00430422(U), :00430463(U)
|:004304A6(U), :004304E5(U), :00430528(U), :00430583(U), :004305B9(U)
|:00430619(U), :00430672(U), :004306B5(U), :0043070E(U)
|
:00430715 5E                      pop esi
:00430716 8BE5                    mov esp, ebp
:00430718 5D                      pop ebp
:00430719 C3                      ret



:0043071A B0024300                DWORD 004302B0
:0043071E F1024300                DWORD 004302F1
:00430722 51034300                DWORD 00430351
:00430726 AA034300                DWORD 004303AA
:0043072A EB034300                DWORD 004303EB
:0043072E 2C044300                DWORD 0043042C
:00430732 C3054300                DWORD 004305C3
:00430736 C3054300                DWORD 004305C3
:0043073A 6D044300                DWORD 0043046D
:0043073E C3054300                DWORD 004305C3
:00430742 C3054300                DWORD 004305C3
:00430746 C3054300                DWORD 004305C3
:0043074A C3054300                DWORD 004305C3
:0043074E C3054300                DWORD 004305C3
:00430752 EF044300                DWORD 004304EF
:00430756 B9064300                DWORD 004306B9
:0043075A C3054300                DWORD 004305C3
:0043075E 23064300                DWORD 00430623
:00430762 32054300                DWORD 00430532
:00430766 10074300                DWORD 00430710


:0043076A 0001                    add byte ptr [ecx], al
:0043076C 0213                    add dl, byte ptr [ebx]
:0043076E 1303                    adc eax, dword ptr [ebx]
:00430770 0413                    add al, 13
:00430772 0506130708              add eax, 08071306
:00430777 0913                    or dword ptr [ebx], edx
:00430779 0A0A                    or cl, byte ptr [edx]
:0043077B 130B                    adc ecx, dword ptr [ebx]
:0043077D 130C0C                  adc ecx, dword ptr [esp+ecx]
:00430780 130D13131313            adc ecx, dword ptr [13131313]
:00430786 1313                    adc edx, dword ptr [ebx]
:00430788 130E                    adc ecx, dword ptr [esi]
:0043078A 1313                    adc edx, dword ptr [ebx]
:0043078C 1313                    adc edx, dword ptr [ebx]
:0043078E 0F                      BYTE 0fh
:0043078F 1313                    adc edx, dword ptr [ebx]
:00430791 1313                    adc edx, dword ptr [ebx]
:00430793 1313                    adc edx, dword ptr [ebx]
:00430795 1313                    adc edx, dword ptr [ebx]
:00430797 1011                    adc byte ptr [ecx], dl
:00430799 12                      BYTE 12h


* Referenced by a CALL at Address:
|:004301D6   
|
:0043079A 55                      push ebp
:0043079B 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043079D 6A07                    push 00000007
:0043079F B9800D4B00              mov ecx, 004B0D80
:004307A4 E800140300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩS˳ƥnZAҥHLkϥΡC"
                                  |
:004307A9 68CC864700              push 004786CC
:004307AE 6A00                    push 00000000
:004307B0 E8B783FFFF              call 00428B6C
:004307B5 83C408                  add esp, 00000008
:004307B8 5D                      pop ebp
:004307B9 C3                      ret



* Referenced by a CALL at Addresses:
|:00434FBB   , :004350D6   
|
:004307BA 55                      push ebp
:004307BB 8BEC                    mov ebp, esp
:004307BD 83EC0C                  sub esp, 0000000C
:004307C0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004307C3 81E1FF000000            and ecx, 000000FF
:004307C9 6BC924                  imul ecx, 00000024
:004307CC 81C108F54A00            add ecx, 004AF508
:004307D2 E8C98BFFFF              call 004293A0
:004307D7 50                      push eax
:004307D8 E8A2710100              call 0044797F
:004307DD 83C404                  add esp, 00000004
:004307E0 8845F8                  mov byte ptr [ebp-08], al
:004307E3 C745FC00000000          mov [ebp-04], 00000000
:004307EA 8B450C                  mov eax, dword ptr [ebp+0C]
:004307ED 25FF000000              and eax, 000000FF
:004307F2 8945F4                  mov dword ptr [ebp-0C], eax
:004307F5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004307F8 83E90E                  sub ecx, 0000000E
:004307FB 894DF4                  mov dword ptr [ebp-0C], ecx
:004307FE 837DF404                cmp dword ptr [ebp-0C], 00000004
:00430802 0F87AF000000            ja 004308B7
:00430808 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043080B FF2495BE084300          jmp dword ptr [4*edx+004308BE]
:00430812 8B45F8                  mov eax, dword ptr [ebp-08]
:00430815 25FF000000              and eax, 000000FF
:0043081A 85C0                    test eax, eax
:0043081C 741C                    je 0043083A
:0043081E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430821 81E1FF000000            and ecx, 000000FF
:00430827 83F901                  cmp ecx, 00000001
:0043082A 740E                    je 0043083A
:0043082C 8B55F8                  mov edx, dword ptr [ebp-08]
:0043082F 81E2FF000000            and edx, 000000FF
:00430835 83FA05                  cmp edx, 00000005
:00430838 7507                    jne 00430841

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043081C(C), :0043082A(C)
|
:0043083A C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430838(C)
|
:00430841 EB74                    jmp 004308B7
:00430843 8B45F8                  mov eax, dword ptr [ebp-08]
:00430846 25FF000000              and eax, 000000FF
:0043084B 83F80A                  cmp eax, 0000000A
:0043084E 741C                    je 0043086C
:00430850 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430853 81E1FF000000            and ecx, 000000FF
:00430859 83F90D                  cmp ecx, 0000000D
:0043085C 740E                    je 0043086C
:0043085E 8B55F8                  mov edx, dword ptr [ebp-08]
:00430861 81E2FF000000            and edx, 000000FF
:00430867 83FA0E                  cmp edx, 0000000E
:0043086A 7507                    jne 00430873

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043084E(C), :0043085C(C)
|
:0043086C C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043086A(C)
|
:00430873 EB42                    jmp 004308B7
:00430875 8B45F8                  mov eax, dword ptr [ebp-08]
:00430878 25FF000000              and eax, 000000FF
:0043087D 83F805                  cmp eax, 00000005
:00430880 7507                    jne 00430889
:00430882 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430880(C)
|
:00430889 EB2C                    jmp 004308B7
:0043088B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043088E 81E1FF000000            and ecx, 000000FF
:00430894 83F907                  cmp ecx, 00000007
:00430897 7507                    jne 004308A0
:00430899 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430897(C)
|
:004308A0 EB15                    jmp 004308B7
:004308A2 8B55F8                  mov edx, dword ptr [ebp-08]
:004308A5 81E2FF000000            and edx, 000000FF
:004308AB 83FA0A                  cmp edx, 0000000A
:004308AE 7507                    jne 004308B7
:004308B0 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430802(C), :00430841(U), :00430873(U), :00430889(U), :004308A0(U)
|:004308AE(C)
|
:004308B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004308BA 8BE5                    mov esp, ebp
:004308BC 5D                      pop ebp
:004308BD C3                      ret



:004308BE 12084300                DWORD 00430812
:004308C2 43084300                DWORD 00430843
:004308C6 75084300                DWORD 00430875
:004308CA 8B084300                DWORD 0043088B
:004308CE A2084300                DWORD 004308A2


:004308D2 55                      push ebp
:004308D3 8BEC                    mov ebp, esp
:004308D5 83EC1C                  sub esp, 0000001C
:004308D8 56                      push esi
:004308D9 C745F800000000          mov [ebp-08], 00000000
:004308E0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004308E3 6BC924                  imul ecx, 00000024
:004308E6 81C108F54A00            add ecx, 004AF508
:004308EC E87F3FFDFF              call 00404870
:004308F1 8BF0                    mov esi, eax
:004308F3 8B4D10                  mov ecx, dword ptr [ebp+10]
:004308F6 6BC924                  imul ecx, 00000024
:004308F9 81C108F54A00            add ecx, 004AF508
:004308FF E86C3FFDFF              call 00404870
:00430904 3BF0                    cmp esi, eax
:00430906 7309                    jnb 00430911
:00430908 C745F800000000          mov [ebp-08], 00000000
:0043090F EB07                    jmp 00430918

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430906(C)
|
:00430911 C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043090F(U)
|
:00430918 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043091B 6BC924                  imul ecx, 00000024
:0043091E 81C108F54A00            add ecx, 004AF508
:00430924 E8473FFDFF              call 00404870
:00430929 8945EC                  mov dword ptr [ebp-14], eax
:0043092C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043092F 6BC924                  imul ecx, 00000024
:00430932 81C108F54A00            add ecx, 004AF508
:00430938 E8333FFDFF              call 00404870
:0043093D 8945F4                  mov dword ptr [ebp-0C], eax
:00430940 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430943 6BC924                  imul ecx, 00000024
:00430946 81C108F54A00            add ecx, 004AF508
:0043094C E81F910000              call 00439A70
:00430951 3B45EC                  cmp eax, dword ptr [ebp-14]
:00430954 7314                    jnb 0043096A
:00430956 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430959 6BC924                  imul ecx, 00000024
:0043095C 81C108F54A00            add ecx, 004AF508
:00430962 E809910000              call 00439A70
:00430967 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430954(C)
|
:0043096A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043096D 6BC924                  imul ecx, 00000024
:00430970 81C108F54A00            add ecx, 004AF508
:00430976 E8F5900000              call 00439A70
:0043097B 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0043097E 7314                    jnb 00430994
:00430980 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430983 6BC924                  imul ecx, 00000024
:00430986 81C108F54A00            add ecx, 004AF508
:0043098C E8DF900000              call 00439A70
:00430991 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043097E(C)
|
:00430994 8A4510                  mov al, byte ptr [ebp+10]
:00430997 50                      push eax
:00430998 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0043099B 51                      push ecx
:0043099C E88F170100              call 00442130
:004309A1 83C408                  add esp, 00000008
:004309A4 8A550C                  mov dl, byte ptr [ebp+0C]
:004309A7 52                      push edx
:004309A8 8D45FC                  lea eax, dword ptr [ebp-04]
:004309AB 50                      push eax
:004309AC E87F170100              call 00442130
:004309B1 83C408                  add esp, 00000008
:004309B4 E8ADF6FFFF              call 00430066
:004309B9 8B4D10                  mov ecx, dword ptr [ebp+10]
:004309BC 6BC924                  imul ecx, 00000024
:004309BF 81C108F54A00            add ecx, 004AF508
:004309C5 E806E9FDFF              call 0040F2D0
:004309CA 85C0                    test eax, eax
:004309CC 7411                    je 004309DF
:004309CE 33C9                    xor ecx, ecx
:004309D0 8A0D1C024B00            mov cl, byte ptr [004B021C]
:004309D6 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:004309DA 8955E8                  mov dword ptr [ebp-18], edx
:004309DD EB0E                    jmp 004309ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004309CC(C)
|
:004309DF 33C0                    xor eax, eax
:004309E1 A01C024B00              mov al, byte ptr [004B021C]
:004309E6 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:004309EA 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004309DD(U)
|
:004309ED 8A55E8                  mov dl, byte ptr [ebp-18]
:004309F0 8855F0                  mov byte ptr [ebp-10], dl
:004309F3 8B45F0                  mov eax, dword ptr [ebp-10]
:004309F6 25FF000000              and eax, 000000FF
:004309FB 33C9                    xor ecx, ecx
:004309FD 8A0D1C024B00            mov cl, byte ptr [004B021C]
:00430A03 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:00430A07 3BC2                    cmp eax, edx
:00430A09 7510                    jne 00430A1B
:00430A0B 33C0                    xor eax, eax
:00430A0D A01C024B00              mov al, byte ptr [004B021C]
:00430A12 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:00430A16 894DE4                  mov dword ptr [ebp-1C], ecx
:00430A19 EB0F                    jmp 00430A2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430A09(C)
|
:00430A1B 33D2                    xor edx, edx
:00430A1D 8A151C024B00            mov dl, byte ptr [004B021C]
:00430A23 8D44120E                lea eax, dword ptr [edx+edx+0E]
:00430A27 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430A19(U)
|
:00430A2A 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00430A2D 884DFC                  mov byte ptr [ebp-04], cl
:00430A30 33D2                    xor edx, edx
:00430A32 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:00430A38 8D441206                lea eax, dword ptr [edx+edx+06]
:00430A3C 50                      push eax
:00430A3D B9F8F44A00              mov ecx, 004AF4F8
:00430A42 E8494AFFFF              call 00425490
:00430A47 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00430A4A 51                      push ecx
:00430A4B 668B55FC                mov dx, word ptr [ebp-04]
:00430A4F 52                      push edx
:00430A50 E887170100              call 004421DC
:00430A55 83C408                  add esp, 00000008
:00430A58 8A4510                  mov al, byte ptr [ebp+10]
:00430A5B 50                      push eax
:00430A5C 668B4DF0                mov cx, word ptr [ebp-10]
:00430A60 51                      push ecx
:00430A61 E876170100              call 004421DC
:00430A66 83C408                  add esp, 00000008
:00430A69 E82261FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00430A6E 6A03                    push 00000003
:00430A70 E8CF62FFFF              call 00426D44
:00430A75 83C404                  add esp, 00000004
:00430A78 33D2                    xor edx, edx
:00430A7A 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:00430A80 8D441206                lea eax, dword ptr [edx+edx+06]
:00430A84 50                      push eax
:00430A85 B9F8F44A00              mov ecx, 004AF4F8
:00430A8A E8014AFFFF              call 00425490
:00430A8F 837DF800                cmp dword ptr [ebp-08], 00000000
:00430A93 7557                    jne 00430AEC
:00430A95 6A00                    push 00000000
:00430A97 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430A9A 6BC924                  imul ecx, 00000024
:00430A9D 81C108F54A00            add ecx, 004AF508
:00430AA3 E8C83DFDFF              call 00404870
:00430AA8 2B45F4                  sub eax, dword ptr [ebp-0C]
:00430AAB 50                      push eax
:00430AAC 8A4D10                  mov cl, byte ptr [ebp+10]
:00430AAF 51                      push ecx
:00430AB0 668B55F0                mov dx, word ptr [ebp-10]
:00430AB4 52                      push edx
:00430AB5 E8D2190100              call 0044248C
:00430ABA 83C410                  add esp, 00000010
:00430ABD 6880000000              push 00000080
:00430AC2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430AC5 6BC924                  imul ecx, 00000024
:00430AC8 81C108F54A00            add ecx, 004AF508
:00430ACE E89D3DFDFF              call 00404870
:00430AD3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00430AD6 2BC8                    sub ecx, eax
:00430AD8 51                      push ecx
:00430AD9 8A550C                  mov dl, byte ptr [ebp+0C]
:00430ADC 52                      push edx
:00430ADD 668B45FC                mov ax, word ptr [ebp-04]
:00430AE1 50                      push eax
:00430AE2 E8A5190100              call 0044248C
:00430AE7 83C410                  add esp, 00000010
:00430AEA EB55                    jmp 00430B41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430A93(C)
|
:00430AEC 6880000000              push 00000080
:00430AF1 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430AF4 6BC924                  imul ecx, 00000024
:00430AF7 81C108F54A00            add ecx, 004AF508
:00430AFD E86E3DFDFF              call 00404870
:00430B02 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00430B05 2BC8                    sub ecx, eax
:00430B07 51                      push ecx
:00430B08 8A5510                  mov dl, byte ptr [ebp+10]
:00430B0B 52                      push edx
:00430B0C 668B45F0                mov ax, word ptr [ebp-10]
:00430B10 50                      push eax
:00430B11 E876190100              call 0044248C
:00430B16 83C410                  add esp, 00000010
:00430B19 6A00                    push 00000000
:00430B1B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430B1E 6BC924                  imul ecx, 00000024
:00430B21 81C108F54A00            add ecx, 004AF508
:00430B27 E8443DFDFF              call 00404870
:00430B2C 2B45EC                  sub eax, dword ptr [ebp-14]
:00430B2F 50                      push eax
:00430B30 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00430B33 51                      push ecx
:00430B34 668B55FC                mov dx, word ptr [ebp-04]
:00430B38 52                      push edx
:00430B39 E84E190100              call 0044248C
:00430B3E 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430AEA(U)
|
:00430B41 E84A60FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00430B46 6A03                    push 00000003
:00430B48 E8F761FFFF              call 00426D44
:00430B4D 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00430B50 6A09                    push 00000009
:00430B52 6A21                    push 00000021
:00430B54 8A45F1                  mov al, byte ptr [ebp-0F]
:00430B57 50                      push eax
:00430B58 33C9                    xor ecx, ecx
:00430B5A 8A0D1C024B00            mov cl, byte ptr [004B021C]
:00430B60 83C106                  add ecx, 00000006
:00430B63 51                      push ecx
:00430B64 B9A8034B00              mov ecx, 004B03A8
:00430B69 E8583C0100              call 004447C6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00430B6E 6A09                    push 00000009
:00430B70 6A21                    push 00000021
:00430B72 8A55FD                  mov dl, byte ptr [ebp-03]
:00430B75 52                      push edx
:00430B76 33C0                    xor eax, eax
:00430B78 A01C024B00              mov al, byte ptr [004B021C]
:00430B7D 83C006                  add eax, 00000006
:00430B80 50                      push eax
:00430B81 B9A8034B00              mov ecx, 004B03A8
:00430B86 E83B3C0100              call 004447C6
:00430B8B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00430B8E 51                      push ecx
:00430B8F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430B92 6BC924                  imul ecx, 00000024
:00430B95 81C108F54A00            add ecx, 004AF508
:00430B9B E8C09DFFFF              call 0042A960
:00430BA0 8B55F4                  mov edx, dword ptr [ebp-0C]
:00430BA3 52                      push edx
:00430BA4 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430BA7 6BC924                  imul ecx, 00000024
:00430BAA 81C108F54A00            add ecx, 004AF508
:00430BB0 E8AB9DFFFF              call 0042A960
:00430BB5 5E                      pop esi
:00430BB6 8BE5                    mov esp, ebp
:00430BB8 5D                      pop ebp
:00430BB9 C3                      ret



* Referenced by a CALL at Addresses:
|:00438B4F   , :0044C132   
|
:00430BBA 55                      push ebp
:00430BBB 8BEC                    mov ebp, esp
:00430BBD 83EC08                  sub esp, 00000008
:00430BC0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00430BC3 81E1FF000000            and ecx, 000000FF
:00430BC9 6BC924                  imul ecx, 00000024
:00430BCC 81C108F54A00            add ecx, 004AF508
:00430BD2 E86E98FFFF              call 0042A445
:00430BD7 83C032                  add eax, 00000032
:00430BDA 8945FC                  mov dword ptr [ebp-04], eax
:00430BDD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430BE0 81E1FF000000            and ecx, 000000FF
:00430BE6 6BC924                  imul ecx, 00000024
:00430BE9 81C108F54A00            add ecx, 004AF508
:00430BEF E8CD98FFFF              call 0042A4C1

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00430BF4 3DFF000000              cmp eax, 000000FF
:00430BF9 731C                    jnb 00430C17
:00430BFB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430BFE 81E1FF000000            and ecx, 000000FF
:00430C04 6BC924                  imul ecx, 00000024
:00430C07 81C108F54A00            add ecx, 004AF508
:00430C0D E8AF98FFFF              call 0042A4C1
:00430C12 8945F8                  mov dword ptr [ebp-08], eax
:00430C15 EB07                    jmp 00430C1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430BF9(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00430C17 C745F8FF000000          mov [ebp-08], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430C15(U)
|
:00430C1E 8B45F8                  mov eax, dword ptr [ebp-08]
:00430C21 C1E803                  shr eax, 03
:00430C24 50                      push eax
:00430C25 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00430C28 51                      push ecx
:00430C29 E896130300              call 00461FC4
:00430C2E 83C408                  add esp, 00000008
:00430C31 8945FC                  mov dword ptr [ebp-04], eax
:00430C34 8B4D08                  mov ecx, dword ptr [ebp+08]
:00430C37 81E1FF000000            and ecx, 000000FF
:00430C3D 6BC924                  imul ecx, 00000024
:00430C40 81C108F54A00            add ecx, 004AF508
:00430C46 E8C5ECFFFF              call 0042F910
:00430C4B C1E803                  shr eax, 03
:00430C4E 50                      push eax
:00430C4F E861140300              call 004620B5
:00430C54 83C404                  add esp, 00000004
:00430C57 8B55FC                  mov edx, dword ptr [ebp-04]
:00430C5A 03D0                    add edx, eax
:00430C5C 8955FC                  mov dword ptr [ebp-04], edx
:00430C5F 8B45FC                  mov eax, dword ptr [ebp-04]
:00430C62 8BE5                    mov esp, ebp
:00430C64 5D                      pop ebp
:00430C65 C3                      ret



* Referenced by a CALL at Addresses:
|:004324E4   , :0043258B   
|
:00430C66 55                      push ebp
:00430C67 8BEC                    mov ebp, esp
:00430C69 83EC1C                  sub esp, 0000001C
:00430C6C 56                      push esi
:00430C6D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430C70 6BC933                  imul ecx, 00000033
:00430C73 81C1C8EF4800            add ecx, 0048EFC8
:00430C79 E8B2F3FEFF              call 00420030
:00430C7E 25FF000000              and eax, 000000FF
:00430C83 8945FC                  mov dword ptr [ebp-04], eax
:00430C86 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430C89 6BC924                  imul ecx, 00000024
:00430C8C 81C108F54A00            add ecx, 004AF508
:00430C92 E839EAFFFF              call 0042F6D0
:00430C97 6BC070                  imul eax, 00000070
:00430C9A 0598224900              add eax, 00492298
:00430C9F 8945F8                  mov dword ptr [ebp-08], eax
:00430CA2 C745F400000000          mov [ebp-0C], 00000000
:00430CA9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430CAC 6BC924                  imul ecx, 00000024
:00430CAF 81C108F54A00            add ecx, 004AF508
:00430CB5 E8B63BFDFF              call 00404870
:00430CBA 8BF0                    mov esi, eax
:00430CBC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430CBF E81C18FDFF              call 004024E0
:00430CC4 3BF0                    cmp esi, eax
:00430CC6 7205                    jb 00430CCD
:00430CC8 E9FD010000              jmp 00430ECA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430CC6(C)
|
:00430CCD 817DFCE7030000          cmp dword ptr [ebp-04], 000003E7
:00430CD4 7522                    jne 00430CF8
:00430CD6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430CD9 E80218FDFF              call 004024E0
:00430CDE 8BF0                    mov esi, eax
:00430CE0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430CE3 6BC924                  imul ecx, 00000024
:00430CE6 81C108F54A00            add ecx, 004AF508
:00430CEC E87F3BFDFF              call 00404870
:00430CF1 2BF0                    sub esi, eax
:00430CF3 8975F4                  mov dword ptr [ebp-0C], esi
:00430CF6 EB59                    jmp 00430D51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430CD4(C)
|
:00430CF8 8B45FC                  mov eax, dword ptr [ebp-04]
:00430CFB 6BC00A                  imul eax, 0000000A
:00430CFE 8945FC                  mov dword ptr [ebp-04], eax
:00430D01 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430D04 E8D717FDFF              call 004024E0
:00430D09 8BF0                    mov esi, eax
:00430D0B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430D0E 6BC924                  imul ecx, 00000024
:00430D11 81C108F54A00            add ecx, 004AF508
:00430D17 E8543BFDFF              call 00404870
:00430D1C 2BF0                    sub esi, eax
:00430D1E 3B75FC                  cmp esi, dword ptr [ebp-04]
:00430D21 7322                    jnb 00430D45
:00430D23 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430D26 E8B517FDFF              call 004024E0
:00430D2B 8BF0                    mov esi, eax
:00430D2D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430D30 6BC924                  imul ecx, 00000024
:00430D33 81C108F54A00            add ecx, 004AF508
:00430D39 E8323BFDFF              call 00404870
:00430D3E 2BF0                    sub esi, eax
:00430D40 8975E8                  mov dword ptr [ebp-18], esi
:00430D43 EB06                    jmp 00430D4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430D21(C)
|
:00430D45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00430D48 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430D43(U)
|
:00430D4B 8B55E8                  mov edx, dword ptr [ebp-18]
:00430D4E 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430CF6(U)
|
:00430D51 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00430D53 6A03                    push 00000003
:00430D55 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430D58 6BC933                  imul ecx, 00000033
:00430D5B 81C1C8EF4800            add ecx, 0048EFC8
:00430D61 E82A39FDFF              call 00404690
:00430D66 50                      push eax
:00430D67 8A450C                  mov al, byte ptr [ebp+0C]
:00430D6A 50                      push eax
:00430D6B 8A4D08                  mov cl, byte ptr [ebp+08]
:00430D6E 51                      push ecx
:00430D6F B9A8034B00              mov ecx, 004B03A8
:00430D74 E85D590100              call 004466D6
:00430D79 B9C8E24A00              mov ecx, 004AE2C8
:00430D7E E84DE4FDFF              call 0040F1D0
:00430D83 83E010                  and eax, 00000010
:00430D86 85C0                    test eax, eax
:00430D88 7535                    jne 00430DBF
:00430D8A C645F000                mov [ebp-10], 00
:00430D8E EB09                    jmp 00430D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430DB8(U)
|
:00430D90 8A55F0                  mov dl, byte ptr [ebp-10]
:00430D93 80C201                  add dl, 01
:00430D96 8855F0                  mov byte ptr [ebp-10], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430D8E(U)
|
:00430D99 8B45F0                  mov eax, dword ptr [ebp-10]
:00430D9C 25FF000000              and eax, 000000FF
:00430DA1 83F803                  cmp eax, 00000003
:00430DA4 7D14                    jge 00430DBA

* Possible Reference to String Resource ID=00014: ""
                                  |
:00430DA6 6A0E                    push 0000000E
:00430DA8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00430DAB 51                      push ecx
:00430DAC 8A550C                  mov dl, byte ptr [ebp+0C]
:00430DAF 52                      push edx
:00430DB0 E8D6100100              call 00441E8B
:00430DB5 83C40C                  add esp, 0000000C
:00430DB8 EBD6                    jmp 00430D90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430DA4(C)
|
:00430DBA E9E5000000              jmp 00430EA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430D88(C)
|
:00430DBF 8A450C                  mov al, byte ptr [ebp+0C]
:00430DC2 50                      push eax
:00430DC3 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00430DC6 51                      push ecx
:00430DC7 E864130100              call 00442130
:00430DCC 83C408                  add esp, 00000008
:00430DCF E892F2FFFF              call 00430066
:00430DD4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430DD7 6BC924                  imul ecx, 00000024
:00430DDA 81C108F54A00            add ecx, 004AF508
:00430DE0 E8EBE4FDFF              call 0040F2D0
:00430DE5 85C0                    test eax, eax
:00430DE7 7411                    je 00430DFA
:00430DE9 33D2                    xor edx, edx
:00430DEB 8A151C024B00            mov dl, byte ptr [004B021C]
:00430DF1 8D44120E                lea eax, dword ptr [edx+edx+0E]
:00430DF5 8945E4                  mov dword ptr [ebp-1C], eax
:00430DF8 EB0F                    jmp 00430E09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430DE7(C)
|
:00430DFA 33C9                    xor ecx, ecx
:00430DFC 8A0D1C024B00            mov cl, byte ptr [004B021C]
:00430E02 8D54092A                lea edx, dword ptr [ecx+ecx+2A]
:00430E06 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430DF8(U)
|
:00430E09 8A45E4                  mov al, byte ptr [ebp-1C]
:00430E0C 8845EC                  mov byte ptr [ebp-14], al
:00430E0F 33C9                    xor ecx, ecx
:00430E11 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:00430E17 8D540906                lea edx, dword ptr [ecx+ecx+06]
:00430E1B 52                      push edx
:00430E1C B9F8F44A00              mov ecx, 004AF4F8
:00430E21 E86A46FFFF              call 00425490
:00430E26 8A450C                  mov al, byte ptr [ebp+0C]
:00430E29 50                      push eax
:00430E2A 668B4DEC                mov cx, word ptr [ebp-14]
:00430E2E 51                      push ecx
:00430E2F E8A8130100              call 004421DC
:00430E34 83C408                  add esp, 00000008
:00430E37 E8545DFFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00430E3C 6A03                    push 00000003
:00430E3E E8015FFFFF              call 00426D44
:00430E43 83C404                  add esp, 00000004
:00430E46 33D2                    xor edx, edx
:00430E48 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:00430E4E 8D441206                lea eax, dword ptr [edx+edx+06]
:00430E52 50                      push eax
:00430E53 B9F8F44A00              mov ecx, 004AF4F8
:00430E58 E83346FFFF              call 00425490
:00430E5D 6880000000              push 00000080
:00430E62 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00430E65 51                      push ecx
:00430E66 8A550C                  mov dl, byte ptr [ebp+0C]
:00430E69 52                      push edx
:00430E6A 668B45EC                mov ax, word ptr [ebp-14]
:00430E6E 50                      push eax
:00430E6F E818160100              call 0044248C
:00430E74 83C410                  add esp, 00000010
:00430E77 E8145DFFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00430E7C 6A03                    push 00000003
:00430E7E E8C15EFFFF              call 00426D44
:00430E83 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00430E86 6A09                    push 00000009
:00430E88 6A21                    push 00000021
:00430E8A 8A4DED                  mov cl, byte ptr [ebp-13]
:00430E8D 51                      push ecx
:00430E8E 33D2                    xor edx, edx
:00430E90 8A151C024B00            mov dl, byte ptr [004B021C]
:00430E96 83C206                  add edx, 00000006
:00430E99 52                      push edx
:00430E9A B9A8034B00              mov ecx, 004B03A8
:00430E9F E822390100              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430DBA(U)
|
:00430EA4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430EA7 6BC924                  imul ecx, 00000024
:00430EAA 81C108F54A00            add ecx, 004AF508
:00430EB0 E8BB39FDFF              call 00404870
:00430EB5 0345F4                  add eax, dword ptr [ebp-0C]
:00430EB8 50                      push eax
:00430EB9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430EBC 6BC924                  imul ecx, 00000024
:00430EBF 81C108F54A00            add ecx, 004AF508
:00430EC5 E8969AFFFF              call 0042A960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430CC8(U)
|
:00430ECA 5E                      pop esi
:00430ECB 8BE5                    mov esp, ebp
:00430ECD 5D                      pop ebp
:00430ECE C3                      ret



* Referenced by a CALL at Addresses:
|:00432796   , :0043283D   
|
:00430ECF 55                      push ebp
:00430ED0 8BEC                    mov ebp, esp
:00430ED2 83EC1C                  sub esp, 0000001C
:00430ED5 56                      push esi
:00430ED6 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430ED9 6BC933                  imul ecx, 00000033
:00430EDC 81C1C8EF4800            add ecx, 0048EFC8
:00430EE2 E849F1FEFF              call 00420030
:00430EE7 25FF000000              and eax, 000000FF
:00430EEC 8945FC                  mov dword ptr [ebp-04], eax
:00430EEF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430EF2 6BC924                  imul ecx, 00000024
:00430EF5 81C108F54A00            add ecx, 004AF508
:00430EFB E8D0E7FFFF              call 0042F6D0
:00430F00 6BC070                  imul eax, 00000070
:00430F03 0598224900              add eax, 00492298
:00430F08 8945F8                  mov dword ptr [ebp-08], eax
:00430F0B C745F400000000          mov [ebp-0C], 00000000
:00430F12 817DFCE7030000          cmp dword ptr [ebp-04], 000003E7
:00430F19 7522                    jne 00430F3D
:00430F1B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430F1E E8EE15FDFF              call 00402511
:00430F23 8BF0                    mov esi, eax
:00430F25 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430F28 6BC924                  imul ecx, 00000024
:00430F2B 81C108F54A00            add ecx, 004AF508
:00430F31 E87A39FDFF              call 004048B0
:00430F36 2BF0                    sub esi, eax
:00430F38 8975F4                  mov dword ptr [ebp-0C], esi
:00430F3B EB50                    jmp 00430F8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F19(C)
|
:00430F3D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430F40 E8CC15FDFF              call 00402511
:00430F45 8BF0                    mov esi, eax
:00430F47 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430F4A 6BC924                  imul ecx, 00000024
:00430F4D 81C108F54A00            add ecx, 004AF508
:00430F53 E85839FDFF              call 004048B0
:00430F58 2BF0                    sub esi, eax
:00430F5A 3B75FC                  cmp esi, dword ptr [ebp-04]
:00430F5D 7322                    jnb 00430F81
:00430F5F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00430F62 E8AA15FDFF              call 00402511
:00430F67 8BF0                    mov esi, eax
:00430F69 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430F6C 6BC924                  imul ecx, 00000024
:00430F6F 81C108F54A00            add ecx, 004AF508
:00430F75 E83639FDFF              call 004048B0
:00430F7A 2BF0                    sub esi, eax
:00430F7C 8975E8                  mov dword ptr [ebp-18], esi
:00430F7F EB06                    jmp 00430F87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F5D(C)
|
:00430F81 8B45FC                  mov eax, dword ptr [ebp-04]
:00430F84 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F7F(U)
|
:00430F87 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00430F8A 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F3B(U)
|
:00430F8D 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00430F8F 6A03                    push 00000003
:00430F91 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430F94 6BC933                  imul ecx, 00000033
:00430F97 81C1C8EF4800            add ecx, 0048EFC8
:00430F9D E8EE36FDFF              call 00404690
:00430FA2 50                      push eax
:00430FA3 8A550C                  mov dl, byte ptr [ebp+0C]
:00430FA6 52                      push edx
:00430FA7 8A4508                  mov al, byte ptr [ebp+08]
:00430FAA 50                      push eax
:00430FAB B9A8034B00              mov ecx, 004B03A8
:00430FB0 E821570100              call 004466D6
:00430FB5 B9C8E24A00              mov ecx, 004AE2C8
:00430FBA E811E2FDFF              call 0040F1D0
:00430FBF 83E010                  and eax, 00000010
:00430FC2 85C0                    test eax, eax
:00430FC4 7536                    jne 00430FFC
:00430FC6 C645F000                mov [ebp-10], 00
:00430FCA EB09                    jmp 00430FD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430FF5(U)
|
:00430FCC 8A4DF0                  mov cl, byte ptr [ebp-10]
:00430FCF 80C101                  add cl, 01
:00430FD2 884DF0                  mov byte ptr [ebp-10], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430FCA(U)
|
:00430FD5 8B55F0                  mov edx, dword ptr [ebp-10]
:00430FD8 81E2FF000000            and edx, 000000FF
:00430FDE 83FA03                  cmp edx, 00000003
:00430FE1 7D14                    jge 00430FF7

* Possible Reference to String Resource ID=00014: ""
                                  |
:00430FE3 6A0E                    push 0000000E
:00430FE5 8B45F4                  mov eax, dword ptr [ebp-0C]
:00430FE8 50                      push eax
:00430FE9 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00430FEC 51                      push ecx
:00430FED E8990E0100              call 00441E8B
:00430FF2 83C40C                  add esp, 0000000C
:00430FF5 EBD5                    jmp 00430FCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430FE1(C)
|
:00430FF7 E9E3000000              jmp 004310DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430FC4(C)
|
:00430FFC 8A550C                  mov dl, byte ptr [ebp+0C]
:00430FFF 52                      push edx
:00431000 8D45EC                  lea eax, dword ptr [ebp-14]
:00431003 50                      push eax
:00431004 E827110100              call 00442130
:00431009 83C408                  add esp, 00000008
:0043100C E855F0FFFF              call 00430066
:00431011 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00431014 6BC924                  imul ecx, 00000024
:00431017 81C108F54A00            add ecx, 004AF508
:0043101D E8AEE2FDFF              call 0040F2D0
:00431022 85C0                    test eax, eax
:00431024 7411                    je 00431037
:00431026 33C9                    xor ecx, ecx
:00431028 8A0D1C024B00            mov cl, byte ptr [004B021C]
:0043102E 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:00431032 8955E4                  mov dword ptr [ebp-1C], edx
:00431035 EB0E                    jmp 00431045

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431024(C)
|
:00431037 33C0                    xor eax, eax
:00431039 A01C024B00              mov al, byte ptr [004B021C]
:0043103E 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:00431042 894DE4                  mov dword ptr [ebp-1C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431035(U)
|
:00431045 8A55E4                  mov dl, byte ptr [ebp-1C]
:00431048 8855EC                  mov byte ptr [ebp-14], dl
:0043104B 33C0                    xor eax, eax
:0043104D A03D0A4B00              mov al, byte ptr [004B0A3D]
:00431052 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:00431056 51                      push ecx
:00431057 B9F8F44A00              mov ecx, 004AF4F8
:0043105C E82F44FFFF              call 00425490
:00431061 8A550C                  mov dl, byte ptr [ebp+0C]
:00431064 52                      push edx
:00431065 668B45EC                mov ax, word ptr [ebp-14]
:00431069 50                      push eax
:0043106A E86D110100              call 004421DC
:0043106F 83C408                  add esp, 00000008
:00431072 E8195BFFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00431077 6A03                    push 00000003
:00431079 E8C65CFFFF              call 00426D44
:0043107E 83C404                  add esp, 00000004
:00431081 33C9                    xor ecx, ecx
:00431083 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:00431089 8D540906                lea edx, dword ptr [ecx+ecx+06]
:0043108D 52                      push edx
:0043108E B9F8F44A00              mov ecx, 004AF4F8
:00431093 E8F843FFFF              call 00425490
:00431098 6881000000              push 00000081
:0043109D 8B45F4                  mov eax, dword ptr [ebp-0C]
:004310A0 50                      push eax
:004310A1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004310A4 51                      push ecx
:004310A5 668B55EC                mov dx, word ptr [ebp-14]
:004310A9 52                      push edx
:004310AA E8DD130100              call 0044248C
:004310AF 83C410                  add esp, 00000010
:004310B2 E8D95AFFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004310B7 6A03                    push 00000003
:004310B9 E8865CFFFF              call 00426D44
:004310BE 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:004310C1 6A09                    push 00000009
:004310C3 6A21                    push 00000021
:004310C5 8A45ED                  mov al, byte ptr [ebp-13]
:004310C8 50                      push eax
:004310C9 33C9                    xor ecx, ecx
:004310CB 8A0D1C024B00            mov cl, byte ptr [004B021C]
:004310D1 83C106                  add ecx, 00000006
:004310D4 51                      push ecx
:004310D5 B9A8034B00              mov ecx, 004B03A8
:004310DA E8E7360100              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430FF7(U)
|
:004310DF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004310E2 6BC924                  imul ecx, 00000024
:004310E5 81C108F54A00            add ecx, 004AF508
:004310EB E8C037FDFF              call 004048B0
:004310F0 0345F4                  add eax, dword ptr [ebp-0C]
:004310F3 50                      push eax
:004310F4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004310F7 6BC924                  imul ecx, 00000024
:004310FA 81C108F54A00            add ecx, 004AF508
:00431100 E8B898FFFF              call 0042A9BD
:00431105 5E                      pop esi
:00431106 8BE5                    mov esp, ebp
:00431108 5D                      pop ebp
:00431109 C3                      ret



* Referenced by a CALL at Addresses:
|:00456FE6   , :004570AB   
|
:0043110A 55                      push ebp
:0043110B 8BEC                    mov ebp, esp
:0043110D 81ECA8050000            sub esp, 000005A8
:00431113 898D60FAFFFF            mov dword ptr [ebp+FFFFFA60], ecx
:00431119 8B8560FAFFFF            mov eax, dword ptr [ebp+FFFFFA60]
:0043111F 668B4805                mov cx, word ptr [eax+05]
:00431123 66898DBCFEFFFF          mov word ptr [ebp+FFFFFEBC], cx
:0043112A C785ACFEFFFF00000000    mov dword ptr [ebp+FFFFFEAC], 00000000
:00431134 C785B4FEFFFF00000000    mov dword ptr [ebp+FFFFFEB4], 00000000
:0043113E 8B9560FAFFFF            mov edx, dword ptr [ebp+FFFFFA60]
:00431144 33C0                    xor eax, eax
:00431146 8A420E                  mov al, byte ptr [edx+0E]
:00431149 898584FEFFFF            mov dword ptr [ebp+FFFFFE84], eax
:0043114F C685B0FEFFFF00          mov byte ptr [ebp+FFFFFEB0], 00
:00431156 C6852CFFFFFF00          mov byte ptr [ebp+FFFFFF2C], 00
:0043115D C685A4FEFFFF04          mov byte ptr [ebp+FFFFFEA4], 04
:00431164 B9A8034B00              mov ecx, 004B03A8
:00431169 E872380100              call 004449E0
:0043116E 6A20                    push 00000020
:00431170 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431176 E875E9FFFF              call 0042FAF0
:0043117B 85C0                    test eax, eax
:0043117D 743B                    je 004311BA
:0043117F 8B0D700E4B00            mov ecx, dword ptr [004B0E70]
:00431185 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00431186 FF15E0864B00            Call dword ptr [004B86E0]
:0043118C 85C0                    test eax, eax
:0043118E 7414                    je 004311A4
:00431190 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431196 E835E5FFFF              call 0042F6D0
:0043119B 50                      push eax
:0043119C E83F5B0300              call 00466CE0
:004311A1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043118E(C)
|
:004311A4 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004311AA E86DC70100              call 0044D91C
:004311AF 85C0                    test eax, eax
:004311B1 7507                    jne 004311BA
:004311B3 33C0                    xor eax, eax
:004311B5 E948080000              jmp 00431A02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043117D(C), :004311B1(C)
|
:004311BA 8B9560FAFFFF            mov edx, dword ptr [ebp+FFFFFA60]
:004311C0 8B02                    mov eax, dword ptr [edx]
:004311C2 50                      push eax
:004311C3 B9880B4B00              mov ecx, 004B0B88
:004311C8 E8F3880000              call 00439AC0
:004311CD 6880000000              push 00000080
:004311D2 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004311D8 E813E9FFFF              call 0042FAF0
:004311DD 85C0                    test eax, eax
:004311DF 740A                    je 004311EB
:004311E1 B801000000              mov eax, 00000001
:004311E6 E917080000              jmp 00431A02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004311DF(C)
|
:004311EB 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004311F1 E88AEAFFFF              call 0042FC80
:004311F6 8885A8FEFFFF            mov byte ptr [ebp+FFFFFEA8], al
:004311FC C68530FFFFFF00          mov byte ptr [ebp+FFFFFF30], 00
:00431203 C68588FEFFFFFF          mov byte ptr [ebp+FFFFFE88], FF
:0043120A C68580FEFFFF00          mov byte ptr [ebp+FFFFFE80], 00
:00431211 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431217 8A5106                  mov dl, byte ptr [ecx+06]
:0043121A 52                      push edx
:0043121B 8B8560FAFFFF            mov eax, dword ptr [ebp+FFFFFA60]
:00431221 8A4805                  mov cl, byte ptr [eax+05]
:00431224 51                      push ecx
:00431225 B9B8084B00              mov ecx, 004B08B8
:0043122A E897F60100              call 004508C6
:0043122F 6A00                    push 00000000
:00431231 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431237 E89B96FFFF              call 0042A8D7
:0043123C 50                      push eax
:0043123D 8B9560FAFFFF            mov edx, dword ptr [ebp+FFFFFA60]
:00431243 8A4204                  mov al, byte ptr [edx+04]
:00431246 50                      push eax
:00431247 E8D2070000              call 00431A1E
:0043124C 83C40C                  add esp, 0000000C
:0043124F 25FF000000              and eax, 000000FF
:00431254 85C0                    test eax, eax
:00431256 741D                    je 00431275
:00431258 6A00                    push 00000000
:0043125A 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431260 E8F8E2FFFF              call 0042F55D
:00431265 85C0                    test eax, eax
:00431267 740C                    je 00431275
:00431269 6A01                    push 00000001
:0043126B B9B8084B00              mov ecx, 004B08B8
:00431270 E8CB1B0200              call 00452E40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431256(C), :00431267(C)
|
:00431275 C685A0FEFFFF00          mov byte ptr [ebp+FFFFFEA0], 00
:0043127C EB0F                    jmp 0043128D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004312D5(U)
|
:0043127E 8A8DA0FEFFFF            mov cl, byte ptr [ebp+FFFFFEA0]
:00431284 80C101                  add cl, 01
:00431287 888DA0FEFFFF            mov byte ptr [ebp+FFFFFEA0], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043127C(U)
|
:0043128D 8B95A0FEFFFF            mov edx, dword ptr [ebp+FFFFFEA0]
:00431293 81E2FF000000            and edx, 000000FF
:00431299 83FA08                  cmp edx, 00000008
:0043129C 7D39                    jge 004312D7
:0043129E 8A85A0FEFFFF            mov al, byte ptr [ebp+FFFFFEA0]
:004312A4 50                      push eax
:004312A5 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004312AB 8B09                    mov ecx, dword ptr [ecx]
:004312AD 6BC970                  imul ecx, 00000070
:004312B0 81C198224900            add ecx, 00492298
:004312B6 E8DA2CFDFF              call 00403F95
:004312BB 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004312C0 3DFF000000              cmp eax, 000000FF
:004312C5 740E                    je 004312D5
:004312C7 6A01                    push 00000001
:004312C9 B9B8084B00              mov ecx, 004B08B8
:004312CE E82D630100              call 00447600
:004312D3 EB02                    jmp 004312D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004312C5(C)
|
:004312D5 EBA7                    jmp 0043127E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043129C(C), :004312D3(U)
|
:004312D7 8B9560FAFFFF            mov edx, dword ptr [ebp+FFFFFA60]
:004312DD 8B0A                    mov ecx, dword ptr [edx]
:004312DF 6BC970                  imul ecx, 00000070
:004312E2 81C198224900            add ecx, 00492298
:004312E8 E8DF16FDFF              call 004029CC
:004312ED 25FF000000              and eax, 000000FF
:004312F2 85C0                    test eax, eax
:004312F4 740C                    je 00431302
:004312F6 6A01                    push 00000001
:004312F8 B9B8084B00              mov ecx, 004B08B8
:004312FD E81E630100              call 00447620

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004312F4(C)
|
:00431302 C78528FFFFFF00000000    mov dword ptr [ebp+FFFFFF28], 00000000
:0043130C C685A0FEFFFF01          mov byte ptr [ebp+FFFFFEA0], 01
:00431313 EB0E                    jmp 00431323

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004313D2(U)
|
:00431315 8A85A0FEFFFF            mov al, byte ptr [ebp+FFFFFEA0]
:0043131B 0401                    add al, 01
:0043131D 8885A0FEFFFF            mov byte ptr [ebp+FFFFFEA0], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431313(U)
|
:00431323 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:00431329 81E1FF000000            and ecx, 000000FF
:0043132F 83F91E                  cmp ecx, 0000001E
:00431332 0F8D9F000000            jnl 004313D7
:00431338 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:0043133E 81E1FF000000            and ecx, 000000FF
:00431344 6BC924                  imul ecx, 00000024
:00431347 81C108F54A00            add ecx, 004AF508
:0043134D E87EE5FFFF              call 0042F8D0
:00431352 25FF000000              and eax, 000000FF
:00431357 83F802                  cmp eax, 00000002
:0043135A 7576                    jne 004313D2
:0043135C 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:00431362 81E1FF000000            and ecx, 000000FF
:00431368 6BC924                  imul ecx, 00000024
:0043136B 81C108F54A00            add ecx, 004AF508
:00431371 E87AE5FFFF              call 0042F8F0
:00431376 25FF000000              and eax, 000000FF
:0043137B 83F807                  cmp eax, 00000007
:0043137E 7552                    jne 004313D2
:00431380 6A40                    push 00000040
:00431382 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:00431388 81E1FF000000            and ecx, 000000FF
:0043138E 6BC924                  imul ecx, 00000024
:00431391 81C108F54A00            add ecx, 004AF508
:00431397 E854E7FFFF              call 0042FAF0
:0043139C 85C0                    test eax, eax
:0043139E 7532                    jne 004313D2
:004313A0 6880000000              push 00000080
:004313A5 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:004313AB 81E1FF000000            and ecx, 000000FF
:004313B1 6BC924                  imul ecx, 00000024
:004313B4 81C108F54A00            add ecx, 004AF508
:004313BA E831E7FFFF              call 0042FAF0
:004313BF 85C0                    test eax, eax
:004313C1 750F                    jne 004313D2
:004313C3 8B9528FFFFFF            mov edx, dword ptr [ebp+FFFFFF28]
:004313C9 83C201                  add edx, 00000001
:004313CC 899528FFFFFF            mov dword ptr [ebp+FFFFFF28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043135A(C), :0043137E(C), :0043139E(C), :004313C1(C)
|
:004313D2 E93EFFFFFF              jmp 00431315

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431332(C)
|
:004313D7 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:004313DE 760C                    jbe 004313EC
:004313E0 6A01                    push 00000001
:004313E2 B9B8084B00              mov ecx, 004B08B8
:004313E7 E854620100              call 00447640

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004313DE(C)
|
:004313EC 6A01                    push 00000001
:004313EE B9B8084B00              mov ecx, 004B08B8
:004313F3 E8E8860000              call 00439AE0
:004313F8 C68534FFFFFF00          mov byte ptr [ebp+FFFFFF34], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431977(U)
|
:004313FF 6880000000              push 00000080
:00431404 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:0043140A E8E1E6FFFF              call 0042FAF0
:0043140F 85C0                    test eax, eax
:00431411 0F8565050000            jne 0043197C
:00431417 8B8534FFFFFF            mov eax, dword ptr [ebp+FFFFFF34]
:0043141D 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00431422 3DFF000000              cmp eax, 000000FF
:00431427 0F844F050000            je 0043197C
:0043142D E8DE0D0200              call 00452210
:00431432 888534FFFFFF            mov byte ptr [ebp+FFFFFF34], al
:00431438 6A00                    push 00000000
:0043143A 6A00                    push 00000000
:0043143C 6802020000              push 00000202
:00431441 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00431447 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00431448 FF15D8864B00            Call dword ptr [004B86D8]
:0043144E 8B9534FFFFFF            mov edx, dword ptr [ebp+FFFFFF34]
:00431454 81E2FF000000            and edx, 000000FF
:0043145A 81FAFF000000            cmp edx, 000000FF
:00431460 0F8411050000            je 00431977
:00431466 8B8534FFFFFF            mov eax, dword ptr [ebp+FFFFFF34]
:0043146C 25FF000000              and eax, 000000FF
:00431471 89855CFAFFFF            mov dword ptr [ebp+FFFFFA5C], eax
:00431477 8B8D5CFAFFFF            mov ecx, dword ptr [ebp+FFFFFA5C]
:0043147D 83E901                  sub ecx, 00000001
:00431480 898D5CFAFFFF            mov dword ptr [ebp+FFFFFA5C], ecx
:00431486 83BD5CFAFFFF05          cmp dword ptr [ebp+FFFFFA5C], 00000005
:0043148D 0F87E4040000            ja 00431977
:00431493 8B955CFAFFFF            mov edx, dword ptr [ebp+FFFFFA5C]
:00431499 FF2495061A4300          jmp dword ptr [4*edx+00431A06]
:004314A0 8B8560FAFFFF            mov eax, dword ptr [ebp+FFFFFA60]
:004314A6 8B08                    mov ecx, dword ptr [eax]
:004314A8 6BC970                  imul ecx, 00000070
:004314AB 81C198224900            add ecx, 00492298
:004314B1 E83A33FDFF              call 004047F0
:004314B6 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004314BB 3DFF000000              cmp eax, 000000FF
:004314C0 7520                    jne 004314E2

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004314C2 6A07                    push 00000007
:004314C4 B9800D4B00              mov ecx, 004B0D80
:004314C9 E8DB060300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ZS˳ơALkC"
                                  |
:004314CE 68F8864700              push 004786F8
:004314D3 6A00                    push 00000000
:004314D5 E89276FFFF              call 00428B6C
:004314DA 83C408                  add esp, 00000008
:004314DD E995040000              jmp 00431977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004314C0(C)
|
:004314E2 6A01                    push 00000001
:004314E4 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004314EA E86EE0FFFF              call 0042F55D
:004314EF 85C0                    test eax, eax
:004314F1 7505                    jne 004314F8
:004314F3 E97F040000              jmp 00431977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004314F1(C)
|
:004314F8 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004314FE E855C20100              call 0044D758
:00431503 E96F040000              jmp 00431977
:00431508 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:0043150E 33D2                    xor edx, edx
:00431510 8A511C                  mov dl, byte ptr [ecx+1C]
:00431513 83E204                  and edx, 00000004
:00431516 85D2                    test edx, edx
:00431518 7420                    je 0043153A

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043151A 6A07                    push 00000007
:0043151C B9800D4B00              mov ecx, 004B0D80
:00431521 E883060300              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩBb檬pAϥαoNޡC"
                                  |
:00431526 6814874700              push 00478714
:0043152B 6A00                    push 00000000
:0043152D E83A76FFFF              call 00428B6C
:00431532 83C408                  add esp, 00000008
:00431535 E93D040000              jmp 00431977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431518(C)
|
:0043153A 8D8538FFFFFF            lea eax, dword ptr [ebp+FFFFFF38]
:00431540 8985B8FEFFFF            mov dword ptr [ebp+FFFFFEB8], eax
:00431546 C68530FFFFFF00          mov byte ptr [ebp+FFFFFF30], 00
:0043154D 8D8DF4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF4]
:00431553 898D8CFEFFFF            mov dword ptr [ebp+FFFFFE8C], ecx
:00431559 C6859CFEFFFF00          mov byte ptr [ebp+FFFFFE9C], 00
:00431560 EB0F                    jmp 00431571

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431720(U)
|
:00431562 8A959CFEFFFF            mov dl, byte ptr [ebp+FFFFFE9C]
:00431568 80C201                  add dl, 01
:0043156B 88959CFEFFFF            mov byte ptr [ebp+FFFFFE9C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431560(U)
|
:00431571 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]
:00431577 25FF000000              and eax, 000000FF
:0043157C 83F831                  cmp eax, 00000031
:0043157F 0F8DA0010000            jnl 00431725
:00431585 8B8D9CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE9C]
:0043158B 81E1FF000000            and ecx, 000000FF
:00431591 6BC911                  imul ecx, 00000011
:00431594 81C180DF4A00            add ecx, 004ADF80
:0043159A E81162FDFF              call 004077B0
:0043159F 50                      push eax
:004315A0 E8FE0F0300              call 004625A3
:004315A5 83C404                  add esp, 00000004
:004315A8 888590FEFFFF            mov byte ptr [ebp+FFFFFE90], al
:004315AE 8B8D9CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE9C]
:004315B4 81E1FF000000            and ecx, 000000FF
:004315BA 6BC915                  imul ecx, 00000015
:004315BD C6840D64FAFFFF00        mov byte ptr [ebp+ecx-0000059C], 00
:004315C5 8B9590FEFFFF            mov edx, dword ptr [ebp+FFFFFE90]
:004315CB 81E2FF000000            and edx, 000000FF
:004315D1 83FA04                  cmp edx, 00000004
:004315D4 7523                    jne 004315F9

* Possible StringData Ref from Data Obj ->" "
                                  |
:004315D6 6838874700              push 00478738
:004315DB 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]
:004315E1 25FF000000              and eax, 000000FF
:004315E6 6BC015                  imul eax, 00000015
:004315E9 8D8C0564FAFFFF          lea ecx, dword ptr [ebp+eax-0000059C]
:004315F0 51                      push ecx
:004315F1 E8E90F0300              call 004625DF
:004315F6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004315D4(C)
|
:004315F9 8B8D9CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE9C]
:004315FF 81E1FF000000            and ecx, 000000FF
:00431605 6BC911                  imul ecx, 00000011
:00431608 81C180DF4A00            add ecx, 004ADF80
:0043160E E89D61FDFF              call 004077B0
:00431613 50                      push eax
:00431614 8B959CFEFFFF            mov edx, dword ptr [ebp+FFFFFE9C]
:0043161A 81E2FF000000            and edx, 000000FF
:00431620 6BD215                  imul edx, 00000015
:00431623 8D841564FAFFFF          lea eax, dword ptr [ebp+edx-0000059C]
:0043162A 50                      push eax
:0043162B E8EE0F0300              call 0046261E
:00431630 83C408                  add esp, 00000008
:00431633 8B8D90FEFFFF            mov ecx, dword ptr [ebp+FFFFFE90]
:00431639 81E1FF000000            and ecx, 000000FF
:0043163F 83F904                  cmp ecx, 00000004
:00431642 7524                    jne 00431668

* Possible StringData Ref from Data Obj ->" "
                                  |
:00431644 683C874700              push 0047873C
:00431649 8B959CFEFFFF            mov edx, dword ptr [ebp+FFFFFE9C]
:0043164F 81E2FF000000            and edx, 000000FF
:00431655 6BD215                  imul edx, 00000015
:00431658 8D841564FAFFFF          lea eax, dword ptr [ebp+edx-0000059C]
:0043165F 50                      push eax
:00431660 E8B90F0300              call 0046261E
:00431665 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431642(C)
|

* Possible StringData Ref from Data Obj ->" "
                                  |
:00431668 6840874700              push 00478740
:0043166D 8B8D9CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE9C]
:00431673 81E1FF000000            and ecx, 000000FF
:00431679 6BC915                  imul ecx, 00000015
:0043167C 8D940D64FAFFFF          lea edx, dword ptr [ebp+ecx-0000059C]
:00431683 52                      push edx
:00431684 E8950F0300              call 0046261E
:00431689 83C408                  add esp, 00000008
:0043168C C68594FEFFFF00          mov byte ptr [ebp+FFFFFE94], 00
:00431693 8B8D9CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE9C]
:00431699 81E1FF000000            and ecx, 000000FF
:0043169F 6BC911                  imul ecx, 00000011
:004316A2 81C180DF4A00            add ecx, 004ADF80
:004316A8 E843E6FFFF              call 0042FCF0
:004316AD 25FF000000              and eax, 000000FF
:004316B2 50                      push eax
:004316B3 8D8594FEFFFF            lea eax, dword ptr [ebp+FFFFFE94]
:004316B9 50                      push eax
:004316BA E8DB6FFFFF              call 0042869A
:004316BF 83C408                  add esp, 00000008
:004316C2 8D8D94FEFFFF            lea ecx, dword ptr [ebp+FFFFFE94]
:004316C8 51                      push ecx
:004316C9 E8D50E0300              call 004625A3
:004316CE 83C404                  add esp, 00000004
:004316D1 83F801                  cmp eax, 00000001
:004316D4 7524                    jne 004316FA

* Possible StringData Ref from Data Obj ->" "
                                  |
:004316D6 6844874700              push 00478744
:004316DB 8B959CFEFFFF            mov edx, dword ptr [ebp+FFFFFE9C]
:004316E1 81E2FF000000            and edx, 000000FF
:004316E7 6BD215                  imul edx, 00000015
:004316EA 8D841564FAFFFF          lea eax, dword ptr [ebp+edx-0000059C]
:004316F1 50                      push eax
:004316F2 E8270F0300              call 0046261E
:004316F7 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004316D4(C)
|
:004316FA 8D8D94FEFFFF            lea ecx, dword ptr [ebp+FFFFFE94]
:00431700 51                      push ecx
:00431701 8B959CFEFFFF            mov edx, dword ptr [ebp+FFFFFE9C]
:00431707 81E2FF000000            and edx, 000000FF
:0043170D 6BD215                  imul edx, 00000015
:00431710 8D841564FAFFFF          lea eax, dword ptr [ebp+edx-0000059C]
:00431717 50                      push eax
:00431718 E8010F0300              call 0046261E
:0043171D 83C408                  add esp, 00000008
:00431720 E93DFEFFFF              jmp 00431562

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043157F(C)
|
:00431725 C6859CFEFFFF00          mov byte ptr [ebp+FFFFFE9C], 00
:0043172C EB0F                    jmp 0043173D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043184F(U)
|
:0043172E 8A8D9CFEFFFF            mov cl, byte ptr [ebp+FFFFFE9C]
:00431734 80C101                  add cl, 01
:00431737 888D9CFEFFFF            mov byte ptr [ebp+FFFFFE9C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043172C(U)
|
:0043173D 8B959CFEFFFF            mov edx, dword ptr [ebp+FFFFFE9C]
:00431743 81E2FF000000            and edx, 000000FF
:00431749 83FA08                  cmp edx, 00000008
:0043174C 0F8D02010000            jnl 00431854
:00431752 8A859CFEFFFF            mov al, byte ptr [ebp+FFFFFE9C]
:00431758 50                      push eax
:00431759 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:0043175F E86CDFFFFF              call 0042F6D0
:00431764 8BC8                    mov ecx, eax
:00431766 6BC970                  imul ecx, 00000070
:00431769 81C198224900            add ecx, 00492298
:0043176F E82128FDFF              call 00403F95
:00431774 888588FEFFFF            mov byte ptr [ebp+FFFFFE88], al
:0043177A 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:00431780 81E1FF000000            and ecx, 000000FF
:00431786 81F9FF000000            cmp ecx, 000000FF
:0043178C 0F84B1000000            je 00431843

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00431792 68FF000000              push 000000FF
:00431797 6A00                    push 00000000
:00431799 8B9560FAFFFF            mov edx, dword ptr [ebp+FFFFFA60]
:0043179F 33C0                    xor eax, eax
:004317A1 8A4204                  mov al, byte ptr [edx+04]
:004317A4 50                      push eax
:004317A5 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:004317AB 81E1FF000000            and ecx, 000000FF
:004317B1 51                      push ecx
:004317B2 E82FE9FFFF              call 004300E6
:004317B7 83C410                  add esp, 00000010
:004317BA 85C0                    test eax, eax
:004317BC 741A                    je 004317D8
:004317BE 8B958CFEFFFF            mov edx, dword ptr [ebp+FFFFFE8C]
:004317C4 C60201                  mov byte ptr [edx], 01
:004317C7 8B858CFEFFFF            mov eax, dword ptr [ebp+FFFFFE8C]
:004317CD 83C001                  add eax, 00000001
:004317D0 89858CFEFFFF            mov dword ptr [ebp+FFFFFE8C], eax
:004317D6 EB18                    jmp 004317F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004317BC(C)
|
:004317D8 8B8D8CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE8C]
:004317DE C60100                  mov byte ptr [ecx], 00
:004317E1 8B958CFEFFFF            mov edx, dword ptr [ebp+FFFFFE8C]
:004317E7 83C201                  add edx, 00000001
:004317EA 89958CFEFFFF            mov dword ptr [ebp+FFFFFE8C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004317D6(U)
|
:004317F0 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:004317F6 25FF000000              and eax, 000000FF
:004317FB 6BC015                  imul eax, 00000015
:004317FE 8D8C0564FAFFFF          lea ecx, dword ptr [ebp+eax-0000059C]
:00431805 8B95B8FEFFFF            mov edx, dword ptr [ebp+FFFFFEB8]
:0043180B 890A                    mov dword ptr [edx], ecx
:0043180D 8B85B8FEFFFF            mov eax, dword ptr [ebp+FFFFFEB8]
:00431813 83C004                  add eax, 00000004
:00431816 8985B8FEFFFF            mov dword ptr [ebp+FFFFFEB8], eax
:0043181C 8B8D30FFFFFF            mov ecx, dword ptr [ebp+FFFFFF30]
:00431822 81E1FF000000            and ecx, 000000FF
:00431828 8A9588FEFFFF            mov dl, byte ptr [ebp+FFFFFE88]
:0043182E 88940DC0FEFFFF          mov byte ptr [ebp+ecx-00000140], dl
:00431835 8A8530FFFFFF            mov al, byte ptr [ebp+FFFFFF30]
:0043183B 0401                    add al, 01
:0043183D 888530FFFFFF            mov byte ptr [ebp+FFFFFF30], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043178C(C)
|
:00431843 8B8DB8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB8]
:00431849 C70100000000            mov dword ptr [ecx], 00000000
:0043184F E9DAFEFFFF              jmp 0043172E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043174C(C)
|
:00431854 8B9530FFFFFF            mov edx, dword ptr [ebp+FFFFFF30]
:0043185A 81E2FF000000            and edx, 000000FF
:00431860 85D2                    test edx, edx
:00431862 0F8EA1000000            jle 00431909
:00431868 C685B0FEFFFF00          mov byte ptr [ebp+FFFFFEB0], 00
:0043186F C6852CFFFFFF00          mov byte ptr [ebp+FFFFFF2C], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431902(U)
|
:00431876 6880000000              push 00000080
:0043187B 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431881 E86AE2FFFF              call 0042FAF0
:00431886 85C0                    test eax, eax
:00431888 757D                    jne 00431907
:0043188A 8B85B0FEFFFF            mov eax, dword ptr [ebp+FFFFFEB0]
:00431890 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00431895 3DFF000000              cmp eax, 000000FF
:0043189A 746B                    je 00431907
:0043189C 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004318A2 8B11                    mov edx, dword ptr [ecx]
:004318A4 6BD270                  imul edx, 00000070
:004318A7 81C298224900            add edx, 00492298
:004318AD 52                      push edx
:004318AE 8D85F4FEFFFF            lea eax, dword ptr [ebp+FFFFFEF4]
:004318B4 50                      push eax
:004318B5 8D8DC0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEC0]
:004318BB 51                      push ecx
:004318BC 8D9538FFFFFF            lea edx, dword ptr [ebp+FFFFFF38]
:004318C2 52                      push edx
:004318C3 E8F7160200              call 00452FBF
:004318C8 83C410                  add esp, 00000010
:004318CB 8885B0FEFFFF            mov byte ptr [ebp+FFFFFEB0], al
:004318D1 8B85B0FEFFFF            mov eax, dword ptr [ebp+FFFFFEB0]
:004318D7 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004318DC 3DFF000000              cmp eax, 000000FF
:004318E1 741F                    je 00431902
:004318E3 8B8DB0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB0]
:004318E9 81E1FF000000            and ecx, 000000FF
:004318EF 8A940DC0FEFFFF          mov dl, byte ptr [ebp+ecx-00000140]
:004318F6 52                      push edx
:004318F7 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004318FD E8321B0000              call 00433434

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004318E1(C)
|
:00431902 E96FFFFFFF              jmp 00431876

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431888(C), :0043189A(C)
|
:00431907 EB1B                    jmp 00431924

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431862(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00431909 6A07                    push 00000007
:0043190B B9800D4B00              mov ecx, 004B0D80
:00431910 E894020300              call 00461BA9

* Possible StringData Ref from Data Obj ->"SiH檺oNޡI"
                                  |
:00431915 6848874700              push 00478748
:0043191A 6A00                    push 00000000
:0043191C E84B72FFFF              call 00428B6C
:00431921 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431907(U)
|
:00431924 EB51                    jmp 00431977
:00431926 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:0043192C E812040000              call 00431D43
:00431931 EB44                    jmp 00431977
:00431933 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431939 E888010000              call 00431AC6
:0043193E 85C0                    test eax, eax
:00431940 7410                    je 00431952
:00431942 6880000000              push 00000080
:00431947 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:0043194D E8C7DAFFFF              call 0042F419

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431940(C)
|
:00431952 EB23                    jmp 00431977
:00431954 6880000000              push 00000080
:00431959 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:0043195F E8B5DAFFFF              call 0042F419
:00431964 EB11                    jmp 00431977
:00431966 8B8560FAFFFF            mov eax, dword ptr [ebp+FFFFFA60]
:0043196C 8B08                    mov ecx, dword ptr [eax]
:0043196E 51                      push ecx
:0043196F E86C530300              call 00466CE0
:00431974 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431460(C), :0043148D(C), :004314DD(U), :004314F3(U), :00431503(U)
|:00431535(U), :00431924(U), :00431931(U), :00431952(U), :00431964(U)
|
:00431977 E983FAFFFF              jmp 004313FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431411(C), :00431427(C)
|
:0043197C 8B9534FFFFFF            mov edx, dword ptr [ebp+FFFFFF34]
:00431982 81E2FF000000            and edx, 000000FF
:00431988 81FAFF000000            cmp edx, 000000FF
:0043198E 7530                    jne 004319C0
:00431990 6A40                    push 00000040
:00431992 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:00431998 E823E1FFFF              call 0042FAC0
:0043199D 6A00                    push 00000000
:0043199F 8D85BCFEFFFF            lea eax, dword ptr [ebp+FFFFFEBC]
:004319A5 50                      push eax
:004319A6 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004319AC E8DF800000              call 00439A90
:004319B1 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004319B7 8A9584FEFFFF            mov dl, byte ptr [ebp+FFFFFE84]
:004319BD 88510E                  mov byte ptr [ecx+0E], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043198E(C)
|
:004319C0 8B8534FFFFFF            mov eax, dword ptr [ebp+FFFFFF34]
:004319C6 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004319CB 3DFF000000              cmp eax, 000000FF
:004319D0 7420                    je 004319F2
:004319D2 6880000000              push 00000080
:004319D7 8B8D60FAFFFF            mov ecx, dword ptr [ebp+FFFFFA60]
:004319DD E80EE1FFFF              call 0042FAF0
:004319E2 85C0                    test eax, eax
:004319E4 740C                    je 004319F2
:004319E6 C78558FAFFFF01000000    mov dword ptr [ebp+FFFFFA58], 00000001
:004319F0 EB0A                    jmp 004319FC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004319D0(C), :004319E4(C)
|
:004319F2 C78558FAFFFF00000000    mov dword ptr [ebp+FFFFFA58], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004319F0(U)
|
:004319FC 8B8558FAFFFF            mov eax, dword ptr [ebp+FFFFFA58]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004311B5(U), :004311E6(U)
|
:00431A02 8BE5                    mov esp, ebp
:00431A04 5D                      pop ebp
:00431A05 C3                      ret



:00431A06 A0144300                DWORD 004314A0
:00431A0A 08154300                DWORD 00431508
:00431A0E 26194300                DWORD 00431926
:00431A12 33194300                DWORD 00431933
:00431A16 66194300                DWORD 00431966
:00431A1A 54194300                DWORD 00431954



* Referenced by a CALL at Address:
|:00431247   
|
:00431A1E 55                      push ebp
:00431A1F 8BEC                    mov ebp, esp
:00431A21 83EC0C                  sub esp, 0000000C
:00431A24 8B4D08                  mov ecx, dword ptr [ebp+08]
:00431A27 81E1FF000000            and ecx, 000000FF
:00431A2D 6BC924                  imul ecx, 00000024
:00431A30 81C108F54A00            add ecx, 004AF508
:00431A36 E8B5DEFFFF              call 0042F8F0
:00431A3B 25FF000000              and eax, 000000FF
:00431A40 83F807                  cmp eax, 00000007
:00431A43 7415                    je 00431A5A
:00431A45 33C0                    xor eax, eax
:00431A47 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00431A4C 83E004                  and eax, 00000004
:00431A4F 85C0                    test eax, eax
:00431A51 7507                    jne 00431A5A
:00431A53 A0AC044B00              mov al, byte ptr [004B04AC]
:00431A58 EB68                    jmp 00431AC2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431A43(C), :00431A51(C)
|
:00431A5A C745FC01000000          mov [ebp-04], 00000001
:00431A61 8B4D08                  mov ecx, dword ptr [ebp+08]
:00431A64 81E1FF000000            and ecx, 000000FF
:00431A6A 6BC924                  imul ecx, 00000024
:00431A6D 81C108F54A00            add ecx, 004AF508
:00431A73 E82879FFFF              call 004293A0
:00431A78 668B08                  mov cx, word ptr [eax]
:00431A7B 66894DF4                mov word ptr [ebp-0C], cx
:00431A7F 6A00                    push 00000000
:00431A81 8A5510                  mov dl, byte ptr [ebp+10]
:00431A84 52                      push edx
:00431A85 8A450C                  mov al, byte ptr [ebp+0C]
:00431A88 50                      push eax
:00431A89 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00431A8C 51                      push ecx
:00431A8D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00431A90 81E1FF000000            and ecx, 000000FF
:00431A96 6BC924                  imul ecx, 00000024
:00431A99 81C108F54A00            add ecx, 004AF508
:00431A9F E8C6600100              call 00447B6A
:00431AA4 8845F8                  mov byte ptr [ebp-08], al
:00431AA7 8B55F8                  mov edx, dword ptr [ebp-08]
:00431AAA 81E2FF000000            and edx, 000000FF
:00431AB0 81FAFF000000            cmp edx, 000000FF
:00431AB6 7507                    jne 00431ABF
:00431AB8 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431AB6(C)
|
:00431ABF 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431A58(U)
|
:00431AC2 8BE5                    mov esp, ebp
:00431AC4 5D                      pop ebp
:00431AC5 C3                      ret



* Referenced by a CALL at Address:
|:00431939   
|
:00431AC6 55                      push ebp
:00431AC7 8BEC                    mov ebp, esp
:00431AC9 83EC0C                  sub esp, 0000000C
:00431ACC 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible StringData Ref from Data Obj ->"涰XܡH"
                                  |
:00431ACF 6860874700              push 00478760

* Possible Reference to String Resource ID=00006: ""
                                  |
:00431AD4 6A06                    push 00000006
:00431AD6 E89170FFFF              call 00428B6C
:00431ADB 83C408                  add esp, 00000008
:00431ADE 85C0                    test eax, eax
:00431AE0 7507                    jne 00431AE9
:00431AE2 33C0                    xor eax, eax
:00431AE4 E9FC010000              jmp 00431CE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431AE0(C)
|
:00431AE9 6A00                    push 00000000
:00431AEB E8282C0300              call 00464718
:00431AF0 83C404                  add esp, 00000004
:00431AF3 C705600A4B0000000000    mov dword ptr [004B0A60], 00000000
:00431AFD 6A00                    push 00000000
:00431AFF A1600A4B00              mov eax, dword ptr [004B0A60]
:00431B04 50                      push eax
:00431B05 E83A730300              call 00468E44
:00431B0A 83C408                  add esp, 00000008
:00431B0D C745FC00000000          mov [ebp-04], 00000000
:00431B14 EB09                    jmp 00431B1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431CB6(U)
|
:00431B16 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431B19 83C101                  add ecx, 00000001
:00431B1C 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431B14(U)
|
:00431B1F 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:00431B23 0F8392010000            jnb 00431CBB
:00431B29 C745F801000000          mov [ebp-08], 00000001
:00431B30 EB09                    jmp 00431B3B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431B57(U), :00431C9C(U)
|
:00431B32 8B55F8                  mov edx, dword ptr [ebp-08]
:00431B35 83C201                  add edx, 00000001
:00431B38 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431B30(U)
|
:00431B3B 837DF81E                cmp dword ptr [ebp-08], 0000001E
:00431B3F 0F835C010000            jnb 00431CA1
:00431B45 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00431B48 E8D3DCFFFF              call 0042F820
:00431B4D 25FF000000              and eax, 000000FF
:00431B52 3B45F8                  cmp eax, dword ptr [ebp-08]
:00431B55 7502                    jne 00431B59
:00431B57 EBD9                    jmp 00431B32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431B55(C)
|
:00431B59 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431B5C 6BC924                  imul ecx, 00000024
:00431B5F 81C108F54A00            add ecx, 004AF508
:00431B65 E8967F0000              call 00439B00
:00431B6A 25FF000000              and eax, 000000FF
:00431B6F 3B45FC                  cmp eax, dword ptr [ebp-04]
:00431B72 0F8524010000            jne 00431C9C
:00431B78 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431B7B 6BC924                  imul ecx, 00000024
:00431B7E 81C108F54A00            add ecx, 004AF508
:00431B84 E867DDFFFF              call 0042F8F0
:00431B89 25FF000000              and eax, 000000FF
:00431B8E 83F807                  cmp eax, 00000007
:00431B91 0F8505010000            jne 00431C9C
:00431B97 6A40                    push 00000040
:00431B99 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431B9C 6BC924                  imul ecx, 00000024
:00431B9F 81C108F54A00            add ecx, 004AF508
:00431BA5 E846DFFFFF              call 0042FAF0
:00431BAA 85C0                    test eax, eax
:00431BAC 0F85EA000000            jne 00431C9C
:00431BB2 6880000000              push 00000080
:00431BB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431BBA 6BC924                  imul ecx, 00000024
:00431BBD 81C108F54A00            add ecx, 004AF508
:00431BC3 E828DFFFFF              call 0042FAF0
:00431BC8 85C0                    test eax, eax
:00431BCA 0F85CC000000            jne 00431C9C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00431BD0 6A04                    push 00000004
:00431BD2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431BD5 6BC924                  imul ecx, 00000024
:00431BD8 81C108F54A00            add ecx, 004AF508
:00431BDE E8CFB6FFFF              call 0042D2B2
:00431BE3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00431BE6 E835DCFFFF              call 0042F820
:00431BEB 50                      push eax
:00431BEC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431BEF 6BC924                  imul ecx, 00000024
:00431BF2 81C108F54A00            add ecx, 004AF508
:00431BF8 E823E0FFFF              call 0042FC20
:00431BFD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431C00 6BC924                  imul ecx, 00000024
:00431C03 81C108F54A00            add ecx, 004AF508
:00431C09 E8C7830100              call 00449FD5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00431C0E 6A07                    push 00000007
:00431C10 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431C13 6BC924                  imul ecx, 00000024
:00431C16 81C108F54A00            add ecx, 004AF508
:00431C1C E891B6FFFF              call 0042D2B2

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00431C21 68FF000000              push 000000FF
:00431C26 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431C29 6BC924                  imul ecx, 00000024
:00431C2C 81C108F54A00            add ecx, 004AF508
:00431C32 E8E9DFFFFF              call 0042FC20
:00431C37 6880000000              push 00000080
:00431C3C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431C3F 6BC924                  imul ecx, 00000024
:00431C42 81C108F54A00            add ecx, 004AF508
:00431C48 E8CCD7FFFF              call 0042F419
:00431C4D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431C50 6BC924                  imul ecx, 00000024
:00431C53 81C108F54A00            add ecx, 004AF508
:00431C59 E872DCFFFF              call 0042F8D0
:00431C5E 25FF000000              and eax, 000000FF
:00431C63 83F804                  cmp eax, 00000004
:00431C66 7411                    je 00431C79
:00431C68 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431C6B 6BC924                  imul ecx, 00000024
:00431C6E 81C108F54A00            add ecx, 004AF508
:00431C74 E8CFAFFFFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431C66(C)
|
:00431C79 8A45F8                  mov al, byte ptr [ebp-08]
:00431C7C 50                      push eax
:00431C7D B9880B4B00              mov ecx, 004B0B88
:00431C82 E8B1810200              call 00459E38
:00431C87 B9180A4B00              mov ecx, 004B0A18
:00431C8C E8AFDFFFFF              call 0042FC40
:00431C91 25FF000000              and eax, 000000FF
:00431C96 85C0                    test eax, eax
:00431C98 7402                    je 00431C9C
:00431C9A EB05                    jmp 00431CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431B72(C), :00431B91(C), :00431BAC(C), :00431BCA(C), :00431C98(C)
|
:00431C9C E991FEFFFF              jmp 00431B32

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431B3F(C), :00431C9A(U)
|
:00431CA1 B9180A4B00              mov ecx, 004B0A18
:00431CA6 E895DFFFFF              call 0042FC40
:00431CAB 25FF000000              and eax, 000000FF
:00431CB0 85C0                    test eax, eax
:00431CB2 7402                    je 00431CB6
:00431CB4 EB05                    jmp 00431CBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431CB2(C)
|
:00431CB6 E95BFEFFFF              jmp 00431B16

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431B23(C), :00431CB4(U)
|
:00431CBB C705600A4B0001000000    mov dword ptr [004B0A60], 00000001
:00431CC5 6A00                    push 00000000
:00431CC7 8B0D600A4B00            mov ecx, dword ptr [004B0A60]
:00431CCD 51                      push ecx
:00431CCE E871710300              call 00468E44
:00431CD3 83C408                  add esp, 00000008
:00431CD6 6A01                    push 00000001
:00431CD8 E83B2A0300              call 00464718
:00431CDD 83C404                  add esp, 00000004
:00431CE0 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431AE4(U)
|
:00431CE5 8BE5                    mov esp, ebp
:00431CE7 5D                      pop ebp
:00431CE8 C3                      ret



* Referenced by a CALL at Addresses:
|:00431E1C   , :00451F53   
|
:00431CE9 55                      push ebp
:00431CEA 8BEC                    mov ebp, esp
:00431CEC 83EC08                  sub esp, 00000008
:00431CEF 8B450C                  mov eax, dword ptr [ebp+0C]
:00431CF2 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00431CF3 FF1584874B00            Call dword ptr [004B8784]
:00431CF9 8945FC                  mov dword ptr [ebp-04], eax
:00431CFC 837DFC00                cmp dword ptr [ebp-04], 00000000
:00431D00 741F                    je 00431D21
:00431D02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431D05 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00431D06 FF1584874B00            Call dword ptr [004B8784]
:00431D0C 8945F8                  mov dword ptr [ebp-08], eax
:00431D0F 8B55F8                  mov edx, dword ptr [ebp-08]
:00431D12 52                      push edx
:00431D13 8B4508                  mov eax, dword ptr [ebp+08]
:00431D16 50                      push eax
:00431D17 E866D30200              call 0045F082
:00431D1C 83C408                  add esp, 00000008
:00431D1F EB1E                    jmp 00431D3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D00(C)
|
:00431D21 8B4D08                  mov ecx, dword ptr [ebp+08]
:00431D24 51                      push ecx
:00431D25 68E2DE4500              push 0045DEE2
:00431D2A 8B550C                  mov edx, dword ptr [ebp+0C]
:00431D2D 52                      push edx

* Possible Reference to Dialog: DialogID_00F2 
                                  |
:00431D2E 68F2000000              push 000000F2
:00431D33 A1300E4B00              mov eax, dword ptr [004B0E30]
:00431D38 50                      push eax

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00431D39 FF1520874B00            Call dword ptr [004B8720]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D1F(U)
|
:00431D3F 8BE5                    mov esp, ebp
:00431D41 5D                      pop ebp
:00431D42 C3                      ret



* Referenced by a CALL at Address:
|:0043192C   
|
:00431D43 55                      push ebp
:00431D44 8BEC                    mov ebp, esp
:00431D46 83EC20                  sub esp, 00000020
:00431D49 56                      push esi
:00431D4A 894DE4                  mov dword ptr [ebp-1C], ecx
:00431D4D 8B45E4                  mov eax, dword ptr [ebp-1C]
:00431D50 8B08                    mov ecx, dword ptr [eax]
:00431D52 6BC970                  imul ecx, 00000070
:00431D55 81C198224900            add ecx, 00492298
:00431D5B E86C0CFDFF              call 004029CC
:00431D60 25FF000000              and eax, 000000FF
:00431D65 85C0                    test eax, eax
:00431D67 7520                    jne 00431D89

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00431D69 6A07                    push 00000007
:00431D6B B9800D4B00              mov ecx, 004B0D80
:00431D70 E834FE0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"Sa۹DC"
                                  |
:00431D75 6870874700              push 00478770
:00431D7A 6A00                    push 00000000
:00431D7C E8EB6DFFFF              call 00428B6C
:00431D81 83C408                  add esp, 00000008
:00431D84 E96D030000              jmp 004320F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D67(C)
|
:00431D89 C645F4FF                mov [ebp-0C], FF
:00431D8D C645E800                mov [ebp-18], 00
:00431D91 C745F800000000          mov [ebp-08], 00000000
:00431D98 C645F0FF                mov [ebp-10], FF
:00431D9C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431D9F E8FC75FFFF              call 004293A0
:00431DA4 8A4801                  mov cl, byte ptr [eax+01]
:00431DA7 51                      push ecx
:00431DA8 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431DAB E8F075FFFF              call 004293A0
:00431DB0 8A10                    mov dl, byte ptr [eax]
:00431DB2 52                      push edx
:00431DB3 B958084B00              mov ecx, 004B0858
:00431DB8 E8B1EF0100              call 00450D6E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431E30(U), :00431EA8(U), :004320E7(U)
|
:00431DBD 8B45E8                  mov eax, dword ptr [ebp-18]
:00431DC0 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00431DC5 3DFF000000              cmp eax, 000000FF
:00431DCA 0F841C030000            je 004320EC
:00431DD0 6880000000              push 00000080
:00431DD5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431DD8 E813DDFFFF              call 0042FAF0
:00431DDD 85C0                    test eax, eax
:00431DDF 0F8507030000            jne 004320EC
:00431DE5 E835040200              call 0045221F
:00431DEA 8845E8                  mov byte ptr [ebp-18], al
:00431DED 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00431DF0 81E1FF000000            and ecx, 000000FF
:00431DF6 81F9FF000000            cmp ecx, 000000FF
:00431DFC 7505                    jne 00431E03
:00431DFE E9E9020000              jmp 004320EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431DFC(C)
|
:00431E03 6A00                    push 00000000
:00431E05 B9800D4B00              mov ecx, 004B0D80
:00431E0A E89AFD0200              call 00461BA9
:00431E0F 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00431E15 52                      push edx
:00431E16 8B45E4                  mov eax, dword ptr [ebp-1C]
:00431E19 8B08                    mov ecx, dword ptr [eax]
:00431E1B 51                      push ecx
:00431E1C E8C8FEFFFF              call 00431CE9
:00431E21 83C408                  add esp, 00000008
:00431E24 8945FC                  mov dword ptr [ebp-04], eax
:00431E27 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00431E2E 7502                    jne 00431E32
:00431E30 EB8B                    jmp 00431DBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431E2E(C)
|
:00431E32 8B55FC                  mov edx, dword ptr [ebp-04]
:00431E35 52                      push edx
:00431E36 8B45E4                  mov eax, dword ptr [ebp-1C]
:00431E39 8B08                    mov ecx, dword ptr [eax]
:00431E3B 6BC970                  imul ecx, 00000070
:00431E3E 81C198224900            add ecx, 00492298
:00431E44 E82A08FDFF              call 00402673
:00431E49 8845F0                  mov byte ptr [ebp-10], al
:00431E4C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00431E4F 81E1FF000000            and ecx, 000000FF
:00431E55 83F901                  cmp ecx, 00000001
:00431E58 740E                    je 00431E68
:00431E5A 8B55E8                  mov edx, dword ptr [ebp-18]
:00431E5D 81E2FF000000            and edx, 000000FF
:00431E63 83FA02                  cmp edx, 00000002
:00431E66 7545                    jne 00431EAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431E58(C)
|
:00431E68 8B75F0                  mov esi, dword ptr [ebp-10]
:00431E6B 81E6FF000000            and esi, 000000FF
:00431E71 8B45E4                  mov eax, dword ptr [ebp-1C]
:00431E74 8B08                    mov ecx, dword ptr [eax]
:00431E76 6BC970                  imul ecx, 00000070
:00431E79 81C198224900            add ecx, 00492298
:00431E7F E86C29FDFF              call 004047F0
:00431E84 25FF000000              and eax, 000000FF
:00431E89 3BF0                    cmp esi, eax
:00431E8B 7520                    jne 00431EAD

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00431E8D 6A07                    push 00000007
:00431E8F B9800D4B00              mov ecx, 004B0D80
:00431E94 E810FD0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"ԳWѰ˳ơC"
                                  |
:00431E99 6880874700              push 00478780
:00431E9E 6A00                    push 00000000
:00431EA0 E8C76CFFFF              call 00428B6C
:00431EA5 83C408                  add esp, 00000008
:00431EA8 E910FFFFFF              jmp 00431DBD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431E66(C), :00431E8B(C)
|
:00431EAD 6A00                    push 00000000
:00431EAF B9800D4B00              mov ecx, 004B0D80
:00431EB4 E8F0FC0200              call 00461BA9
:00431EB9 8A4DE8                  mov cl, byte ptr [ebp-18]
:00431EBC 884DE0                  mov byte ptr [ebp-20], cl
:00431EBF 807DE000                cmp byte ptr [ebp-20], 00
:00431EC3 7415                    je 00431EDA
:00431EC5 807DE001                cmp byte ptr [ebp-20], 01
:00431EC9 7420                    je 00431EEB
:00431ECB 807DE002                cmp byte ptr [ebp-20], 02
:00431ECF 0F8483010000            je 00432058
:00431ED5 E9F9010000              jmp 004320D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431EC3(C)
|
:00431EDA 8A55FC                  mov dl, byte ptr [ebp-04]
:00431EDD 52                      push edx
:00431EDE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431EE1 E8F3020000              call 004321D9
:00431EE6 E9EA010000              jmp 004320D5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431EC9(C), :0043201C(U), :00432051(U)
|
:00431EEB 6A01                    push 00000001
:00431EED 6A01                    push 00000001
:00431EEF 8B45E4                  mov eax, dword ptr [ebp-1C]
:00431EF2 8A4804                  mov cl, byte ptr [eax+04]
:00431EF5 51                      push ecx
:00431EF6 B9A8034B00              mov ecx, 004B03A8
:00431EFB E8F83D0100              call 00445CF8
:00431F00 8845F4                  mov byte ptr [ebp-0C], al
:00431F03 8B55F4                  mov edx, dword ptr [ebp-0C]
:00431F06 81E2FF000000            and edx, 000000FF
:00431F0C 81FAFF000000            cmp edx, 000000FF
:00431F12 0F8409010000            je 00432021
:00431F18 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431F1B 25FF000000              and eax, 000000FF
:00431F20 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431F23 33D2                    xor edx, edx
:00431F25 8A5104                  mov dl, byte ptr [ecx+04]
:00431F28 3BC2                    cmp eax, edx
:00431F2A 0F84F1000000            je 00432021
:00431F30 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00431F33 81E1FF000000            and ecx, 000000FF
:00431F39 6BC924                  imul ecx, 00000024
:00431F3C 81C108F54A00            add ecx, 004AF508
:00431F42 E889D7FFFF              call 0042F6D0
:00431F47 8945EC                  mov dword ptr [ebp-14], eax
:00431F4A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00431F4D 6BC970                  imul ecx, 00000070
:00431F50 81C198224900            add ecx, 00492298
:00431F56 E8BC0AFDFF              call 00402A17
:00431F5B 85C0                    test eax, eax
:00431F5D 0F849E000000            je 00432001
:00431F63 8B45FC                  mov eax, dword ptr [ebp-04]
:00431F66 50                      push eax
:00431F67 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431F6A 8B09                    mov ecx, dword ptr [ecx]
:00431F6C 6BC970                  imul ecx, 00000070
:00431F6F 81C198224900            add ecx, 00492298
:00431F75 E8F906FDFF              call 00402673
:00431F7A 8845F0                  mov byte ptr [ebp-10], al
:00431F7D 8B55FC                  mov edx, dword ptr [ebp-04]
:00431F80 52                      push edx
:00431F81 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00431F84 6BC970                  imul ecx, 00000070
:00431F87 81C198224900            add ecx, 00492298
:00431F8D E8A70AFDFF              call 00402A39

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00431F92 68FF000000              push 000000FF
:00431F97 8A45F0                  mov al, byte ptr [ebp-10]
:00431F9A 50                      push eax
:00431F9B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431F9E 8B09                    mov ecx, dword ptr [ecx]
:00431FA0 6BC970                  imul ecx, 00000070
:00431FA3 81C198224900            add ecx, 00492298
:00431FA9 E88228FDFF              call 00404830
:00431FAE 8B55EC                  mov edx, dword ptr [ebp-14]
:00431FB1 52                      push edx
:00431FB2 E84DF4FCFF              call 00401404
:00431FB7 83C404                  add esp, 00000004
:00431FBA 50                      push eax
:00431FBB 8B45FC                  mov eax, dword ptr [ebp-04]
:00431FBE 50                      push eax
:00431FBF E8B438FDFF              call 00405878
:00431FC4 83C404                  add esp, 00000004
:00431FC7 50                      push eax

* Possible StringData Ref from Data Obj ->"N%s浹%sFC"
                                  |
:00431FC8 6898874700              push 00478798
:00431FCD 6A00                    push 00000000
:00431FCF E8986BFFFF              call 00428B6C
:00431FD4 83C410                  add esp, 00000010
:00431FD7 6880000000              push 00000080
:00431FDC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431FDF E835D4FFFF              call 0042F419
:00431FE4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00431FE7 8A5104                  mov dl, byte ptr [ecx+04]
:00431FEA 52                      push edx
:00431FEB E80B010000              call 004320FB
:00431FF0 83C404                  add esp, 00000004
:00431FF3 8A45F4                  mov al, byte ptr [ebp-0C]
:00431FF6 50                      push eax
:00431FF7 E8FF000000              call 004320FB
:00431FFC 83C404                  add esp, 00000004
:00431FFF EB20                    jmp 00432021

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431F5D(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432001 6A07                    push 00000007
:00432003 B9800D4B00              mov ecx, 004B0D80
:00432008 E89CFB0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡ADFC"
                                  |
:0043200D 68AC874700              push 004787AC
:00432012 6A00                    push 00000000
:00432014 E8536BFFFF              call 00428B6C
:00432019 83C408                  add esp, 00000008
:0043201C E9CAFEFFFF              jmp 00431EEB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431F12(C), :00431F2A(C), :00431FFF(U)
|
:00432021 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432024 81E1FF000000            and ecx, 000000FF
:0043202A 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043202D 33C0                    xor eax, eax
:0043202F 8A4204                  mov al, byte ptr [edx+04]
:00432032 3BC8                    cmp ecx, eax
:00432034 7520                    jne 00432056

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432036 6A07                    push 00000007
:00432038 B9800D4B00              mov ecx, 004B0D80
:0043203D E867FB0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"ಾ浹۳C"
                                  |
:00432042 68C8874700              push 004787C8
:00432047 6A00                    push 00000000
:00432049 E81E6BFFFF              call 00428B6C
:0043204E 83C408                  add esp, 00000008
:00432051 E995FEFFFF              jmp 00431EEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432034(C)
|
:00432056 EB7D                    jmp 004320D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431ECF(C)
|
:00432058 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043205B 51                      push ecx
:0043205C E81738FDFF              call 00405878
:00432061 83C404                  add esp, 00000004
:00432064 50                      push eax

* Possible StringData Ref from Data Obj ->"a%sܡH"
                                  |
:00432065 68DC874700              push 004787DC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043206A 6A02                    push 00000002
:0043206C E8FB6AFFFF              call 00428B6C
:00432071 83C40C                  add esp, 0000000C
:00432074 8945F8                  mov dword ptr [ebp-08], eax
:00432077 837DF800                cmp dword ptr [ebp-08], 00000000
:0043207B 7454                    je 004320D1

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043207D 68FF000000              push 000000FF
:00432082 8B55FC                  mov edx, dword ptr [ebp-04]
:00432085 52                      push edx
:00432086 8B45E4                  mov eax, dword ptr [ebp-1C]
:00432089 8B08                    mov ecx, dword ptr [eax]
:0043208B 6BC970                  imul ecx, 00000070
:0043208E 81C198224900            add ecx, 00492298
:00432094 E8E108FDFF              call 0040297A
:00432099 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043209C 51                      push ecx
:0043209D E8D637FDFF              call 00405878
:004320A2 83C404                  add esp, 00000004
:004320A5 50                      push eax

* Possible StringData Ref from Data Obj ->"aF%sC"
                                  |
:004320A6 68E8874700              push 004787E8
:004320AB 6A00                    push 00000000
:004320AD E8BA6AFFFF              call 00428B6C
:004320B2 83C40C                  add esp, 0000000C
:004320B5 6880000000              push 00000080
:004320BA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004320BD E857D3FFFF              call 0042F419
:004320C2 8B55E4                  mov edx, dword ptr [ebp-1C]
:004320C5 8A4204                  mov al, byte ptr [edx+04]
:004320C8 50                      push eax
:004320C9 E82D000000              call 004320FB
:004320CE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043207B(C)
|
:004320D1 EB02                    jmp 004320D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431ED5(U)
|
:004320D3 EB21                    jmp 004320F6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431EE6(U), :00432056(U), :004320D1(U)
|
:004320D5 6A18                    push 00000018
:004320D7 6A27                    push 00000027
:004320D9 6A00                    push 00000000
:004320DB 6A00                    push 00000000
:004320DD B9A8034B00              mov ecx, 004B03A8
:004320E2 E8DF260100              call 004447C6
:004320E7 E9D1FCFFFF              jmp 00431DBD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431DCA(C), :00431DDF(C), :00431DFE(U)
|
:004320EC B9180A4B00              mov ecx, 004B0A18
:004320F1 E83B620200              call 00458331

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431D84(U), :004320D3(U)
|
:004320F6 5E                      pop esi
:004320F7 8BE5                    mov esp, ebp
:004320F9 5D                      pop ebp
:004320FA C3                      ret



* Referenced by a CALL at Addresses:
|:00431FEB   , :00431FF7   , :004320C9   
|
:004320FB 55                      push ebp
:004320FC 8BEC                    mov ebp, esp
:004320FE 83EC08                  sub esp, 00000008
:00432101 8B4508                  mov eax, dword ptr [ebp+08]
:00432104 25FF000000              and eax, 000000FF
:00432109 83F85A                  cmp eax, 0000005A
:0043210C 7C05                    jl 00432113
:0043210E E9C2000000              jmp 004321D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043210C(C)
|
:00432113 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432116 81E1FF000000            and ecx, 000000FF
:0043211C 6BC924                  imul ecx, 00000024
:0043211F 81C108F54A00            add ecx, 004AF508
:00432125 E846790000              call 00439A70
:0043212A 8945F8                  mov dword ptr [ebp-08], eax
:0043212D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432130 81E1FF000000            and ecx, 000000FF
:00432136 6BC924                  imul ecx, 00000024
:00432139 81C108F54A00            add ecx, 004AF508
:0043213F E8DC790000              call 00439B20
:00432144 8945FC                  mov dword ptr [ebp-04], eax
:00432147 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043214A 81E1FF000000            and ecx, 000000FF
:00432150 6BC924                  imul ecx, 00000024
:00432153 81C108F54A00            add ecx, 004AF508
:00432159 E81227FDFF              call 00404870
:0043215E 3B45F8                  cmp eax, dword ptr [ebp-08]
:00432161 761B                    jbe 0043217E
:00432163 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432166 51                      push ecx
:00432167 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043216A 81E1FF000000            and ecx, 000000FF
:00432170 6BC924                  imul ecx, 00000024
:00432173 81C108F54A00            add ecx, 004AF508
:00432179 E8E287FFFF              call 0042A960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432161(C)
|
:0043217E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432181 81E1FF000000            and ecx, 000000FF
:00432187 6BC924                  imul ecx, 00000024
:0043218A 81C108F54A00            add ecx, 004AF508
:00432190 E81B27FDFF              call 004048B0
:00432195 3B45FC                  cmp eax, dword ptr [ebp-04]
:00432198 761B                    jbe 004321B5
:0043219A 8B55FC                  mov edx, dword ptr [ebp-04]
:0043219D 52                      push edx
:0043219E 8B4D08                  mov ecx, dword ptr [ebp+08]
:004321A1 81E1FF000000            and ecx, 000000FF
:004321A7 6BC924                  imul ecx, 00000024
:004321AA 81C108F54A00            add ecx, 004AF508
:004321B0 E80888FFFF              call 0042A9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432198(C)
|
:004321B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004321B8 81E1FF000000            and ecx, 000000FF
:004321BE 6BC924                  imul ecx, 00000024
:004321C1 81C108F54A00            add ecx, 004AF508
:004321C7 E804D5FFFF              call 0042F6D0
:004321CC 50                      push eax
:004321CD E87E4D0300              call 00466F50
:004321D2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043210E(U)
|
:004321D5 8BE5                    mov esp, ebp
:004321D7 5D                      pop ebp
:004321D8 C3                      ret



* Referenced by a CALL at Address:
|:00431EE1   
|
:004321D9 55                      push ebp
:004321DA 8BEC                    mov ebp, esp
:004321DC 83EC0C                  sub esp, 0000000C
:004321DF 894DF8                  mov dword ptr [ebp-08], ecx
:004321E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004321E5 81E1FF000000            and ecx, 000000FF
:004321EB 6BC933                  imul ecx, 00000033
:004321EE 81C1C8EF4800            add ecx, 0048EFC8
:004321F4 E89724FDFF              call 00404690
:004321F9 25FF000000              and eax, 000000FF
:004321FE 8945FC                  mov dword ptr [ebp-04], eax
:00432201 C70520024B0000000000    mov dword ptr [004B0220], 00000000
:0043220B C705600A4B0000000000    mov dword ptr [004B0A60], 00000000
:00432215 6A00                    push 00000000
:00432217 A1600A4B00              mov eax, dword ptr [004B0A60]
:0043221C 50                      push eax
:0043221D E8226C0300              call 00468E44
:00432222 83C408                  add esp, 00000008
:00432225 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432228 894DF4                  mov dword ptr [ebp-0C], ecx
:0043222B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043222E 83EA0C                  sub edx, 0000000C
:00432231 8955F4                  mov dword ptr [ebp-0C], edx
:00432234 837DF40B                cmp dword ptr [ebp-0C], 0000000B
:00432238 0F87A6000000            ja 004322E4
:0043223E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432241 33C0                    xor eax, eax
:00432243 8A81A1234300            mov al, byte ptr [ecx+004323A1]
:00432249 FF248589234300          jmp dword ptr [4*eax+00432389]
:00432250 8B55F8                  mov edx, dword ptr [ebp-08]
:00432253 33C0                    xor eax, eax
:00432255 8A4204                  mov al, byte ptr [edx+04]
:00432258 50                      push eax
:00432259 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043225C 81E1FF000000            and ecx, 000000FF
:00432262 51                      push ecx
:00432263 E845010000              call 004323AD
:00432268 83C408                  add esp, 00000008
:0043226B E994000000              jmp 00432304
:00432270 8B55F8                  mov edx, dword ptr [ebp-08]
:00432273 33C0                    xor eax, eax
:00432275 8A4204                  mov al, byte ptr [edx+04]
:00432278 50                      push eax
:00432279 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043227C 81E1FF000000            and ecx, 000000FF
:00432282 51                      push ecx
:00432283 E8F4030000              call 0043267C
:00432288 83C408                  add esp, 00000008
:0043228B EB77                    jmp 00432304
:0043228D 8B55F8                  mov edx, dword ptr [ebp-08]
:00432290 33C0                    xor eax, eax
:00432292 8A4204                  mov al, byte ptr [edx+04]
:00432295 50                      push eax
:00432296 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432299 81E1FF000000            and ecx, 000000FF
:0043229F 51                      push ecx
:004322A0 E8B9050000              call 0043285E
:004322A5 83C408                  add esp, 00000008
:004322A8 EB5A                    jmp 00432304
:004322AA 8B55F8                  mov edx, dword ptr [ebp-08]
:004322AD 33C0                    xor eax, eax
:004322AF 8A4204                  mov al, byte ptr [edx+04]
:004322B2 50                      push eax
:004322B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004322B6 81E1FF000000            and ecx, 000000FF
:004322BC 51                      push ecx
:004322BD E8CD090000              call 00432C8F
:004322C2 83C408                  add esp, 00000008
:004322C5 EB3D                    jmp 00432304
:004322C7 8B55F8                  mov edx, dword ptr [ebp-08]
:004322CA 33C0                    xor eax, eax
:004322CC 8A4204                  mov al, byte ptr [edx+04]
:004322CF 50                      push eax
:004322D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004322D3 81E1FF000000            and ecx, 000000FF
:004322D9 51                      push ecx
:004322DA E8CD0D0000              call 004330AC
:004322DF 83C408                  add esp, 00000008
:004322E2 EB20                    jmp 00432304

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432238(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004322E4 6A07                    push 00000007
:004322E6 B9800D4B00              mov ecx, 004B0D80
:004322EB E8B9F80200              call 00461BA9

* Possible StringData Ref from Data Obj ->"SiHϥΪDC"
                                  |
:004322F0 68F4874700              push 004787F4
:004322F5 6A00                    push 00000000
:004322F7 E87068FFFF              call 00428B6C
:004322FC 83C408                  add esp, 00000008
:004322FF E8FA49FFFF              call 00426CFE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043226B(U), :0043228B(U), :004322A8(U), :004322C5(U), :004322E2(U)
|
:00432304 833D20024B0000          cmp dword ptr [004B0220], 00000000
:0043230B 745B                    je 00432368

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043230D 68FF000000              push 000000FF
:00432312 8B5508                  mov edx, dword ptr [ebp+08]
:00432315 81E2FF000000            and edx, 000000FF
:0043231B 52                      push edx
:0043231C 8B45F8                  mov eax, dword ptr [ebp-08]
:0043231F 8B08                    mov ecx, dword ptr [eax]
:00432321 6BC970                  imul ecx, 00000070
:00432324 81C198224900            add ecx, 00492298
:0043232A E80006FDFF              call 0040292F
:0043232F 50                      push eax
:00432330 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432333 8B09                    mov ecx, dword ptr [ecx]
:00432335 6BC970                  imul ecx, 00000070
:00432338 81C198224900            add ecx, 00492298
:0043233E E8ED24FDFF              call 00404830
:00432343 6880000000              push 00000080
:00432348 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043234B E8C9D0FFFF              call 0042F419
:00432350 C70520024B0000000000    mov dword ptr [004B0220], 00000000
:0043235A 8B55F8                  mov edx, dword ptr [ebp-08]
:0043235D 8B02                    mov eax, dword ptr [edx]
:0043235F 50                      push eax
:00432360 E8EB4B0300              call 00466F50
:00432365 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043230B(C)
|
:00432368 C705600A4B0001000000    mov dword ptr [004B0A60], 00000001
:00432372 6A00                    push 00000000
:00432374 8B0D600A4B00            mov ecx, dword ptr [004B0A60]
:0043237A 51                      push ecx
:0043237B E8C46A0300              call 00468E44
:00432380 83C408                  add esp, 00000008
:00432383 8BE5                    mov esp, ebp
:00432385 5D                      pop ebp
:00432386 C20400                  ret 0004



:00432389 C7224300                DWORD 004322C7
:0043238D 50224300                DWORD 00432250
:00432391 70224300                DWORD 00432270
:00432395 8D224300                DWORD 0043228D
:00432399 AA224300                DWORD 004322AA
:0043239D E4224300                DWORD 004322E4


:004323A1 000505010203            add byte ptr [03020105], al
:004323A7 0303                    add eax, dword ptr [ebx]
:004323A9 0404                    add al, 04
:004323AB 0404                    add al, 04

* Referenced by a CALL at Address:
|:00432263   
|
:004323AD 55                      push ebp
:004323AE 8BEC                    mov ebp, esp
:004323B0 83EC20                  sub esp, 00000020
:004323B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004323B6 6BC933                  imul ecx, 00000033
:004323B9 81C1C8EF4800            add ecx, 0048EFC8
:004323BF E8CC23FDFF              call 00404790
:004323C4 8845F0                  mov byte ptr [ebp-10], al
:004323C7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004323CA 6BC933                  imul ecx, 00000033
:004323CD 81C1C8EF4800            add ecx, 0048EFC8
:004323D3 E878DCFEFF              call 00420050
:004323D8 8845EC                  mov byte ptr [ebp-14], al
:004323DB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004323DE 6BC924                  imul ecx, 00000024
:004323E1 81C108F54A00            add ecx, 004AF508
:004323E7 E804D5FFFF              call 0042F8F0
:004323EC 25FF000000              and eax, 000000FF
:004323F1 83F807                  cmp eax, 00000007
:004323F4 7417                    je 0043240D
:004323F6 33C0                    xor eax, eax
:004323F8 A07C0B4B00              mov al, byte ptr [004B0B7C]
:004323FD 83E004                  and eax, 00000004
:00432400 85C0                    test eax, eax
:00432402 7509                    jne 0043240D
:00432404 C745E000000000          mov [ebp-20], 00000000
:0043240B EB07                    jmp 00432414

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004323F4(C), :00432402(C)
|
:0043240D C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043240B(U)
|
:00432414 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00432417 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043246A(U), :0043247E(U)
|
:0043241A 6A01                    push 00000001
:0043241C 8B55F0                  mov edx, dword ptr [ebp-10]
:0043241F 81E2FF000000            and edx, 000000FF
:00432425 80CA80                  or dl, 80
:00432428 52                      push edx
:00432429 8A450C                  mov al, byte ptr [ebp+0C]
:0043242C 50                      push eax
:0043242D B9A8034B00              mov ecx, 004B03A8
:00432432 E8C1380100              call 00445CF8
:00432437 8845FC                  mov byte ptr [ebp-04], al
:0043243A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043243D 81E1FF000000            and ecx, 000000FF
:00432443 81F9FF000000            cmp ecx, 000000FF
:00432449 0F8459010000            je 004325A8
:0043244F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432452 81E1FF000000            and ecx, 000000FF
:00432458 6BC924                  imul ecx, 00000024
:0043245B 81C108F54A00            add ecx, 004AF508
:00432461 E86ACEFDFF              call 0040F2D0
:00432466 85C0                    test eax, eax
:00432468 7502                    jne 0043246C
:0043246A EBAE                    jmp 0043241A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432468(C)
|
:0043246C 6A00                    push 00000000
:0043246E 8A55FC                  mov dl, byte ptr [ebp-04]
:00432471 52                      push edx
:00432472 E835010000              call 004325AC
:00432477 83C408                  add esp, 00000008
:0043247A 85C0                    test eax, eax
:0043247C 7502                    jne 00432480
:0043247E EB9A                    jmp 0043241A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043247C(C)
|
:00432480 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432483 81E1FF000000            and ecx, 000000FF
:00432489 6BC924                  imul ecx, 00000024
:0043248C 81C108F54A00            add ecx, 004AF508
:00432492 E839D2FFFF              call 0042F6D0
:00432497 6BC070                  imul eax, 00000070
:0043249A 0598224900              add eax, 00492298
:0043249F 8945F8                  mov dword ptr [ebp-08], eax
:004324A2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004324A5 81E1FF000000            and ecx, 000000FF
:004324AB 6BC924                  imul ecx, 00000024
:004324AE 81C108F54A00            add ecx, 004AF508
:004324B4 E8E76EFFFF              call 004293A0
:004324B9 668B00                  mov ax, word ptr [eax]
:004324BC 668945E8                mov word ptr [ebp-18], ax
:004324C0 8A4DE9                  mov cl, byte ptr [ebp-17]
:004324C3 51                      push ecx
:004324C4 8A55E8                  mov dl, byte ptr [ebp-18]
:004324C7 52                      push edx
:004324C8 B9A8034B00              mov ecx, 004B03A8
:004324CD E865350100              call 00445A37
:004324D2 8B4508                  mov eax, dword ptr [ebp+08]
:004324D5 50                      push eax
:004324D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004324D9 81E1FF000000            and ecx, 000000FF
:004324DF 51                      push ecx
:004324E0 8B550C                  mov edx, dword ptr [ebp+0C]
:004324E3 52                      push edx
:004324E4 E87DE7FFFF              call 00430C66
:004324E9 83C40C                  add esp, 0000000C
:004324EC 8B45EC                  mov eax, dword ptr [ebp-14]
:004324EF 25FF000000              and eax, 000000FF
:004324F4 85C0                    test eax, eax
:004324F6 0F84A2000000            je 0043259E

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004324FC 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00432501 6A11                    push 00000011
:00432503 68B8014B00              push 004B01B8
:00432508 E83B030300              call 00462848
:0043250D 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432510 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432515 68FF000000              push 000000FF
:0043251A 6A01                    push 00000001
:0043251C 68B8014B00              push 004B01B8
:00432521 8A4DEC                  mov cl, byte ptr [ebp-14]
:00432524 51                      push ecx
:00432525 8A55FC                  mov dl, byte ptr [ebp-04]
:00432528 52                      push edx
:00432529 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043252C 6BC924                  imul ecx, 00000024
:0043252F 81C108F54A00            add ecx, 004AF508
:00432535 E8C6B10100              call 0044D700
:0043253A 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043259C(U)
|
:0043253D 8B45E4                  mov eax, dword ptr [ebp-1C]
:00432540 33C9                    xor ecx, ecx
:00432542 8A08                    mov cl, byte ptr [eax]
:00432544 81F9FF000000            cmp ecx, 000000FF
:0043254A 7452                    je 0043259E
:0043254C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043254F 33C0                    xor eax, eax
:00432551 8A02                    mov al, byte ptr [edx]
:00432553 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432556 81E1FF000000            and ecx, 000000FF
:0043255C 3BC1                    cmp eax, ecx
:0043255E 7433                    je 00432593
:00432560 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432563 33C0                    xor eax, eax
:00432565 8A02                    mov al, byte ptr [edx]
:00432567 8BC8                    mov ecx, eax
:00432569 6BC924                  imul ecx, 00000024
:0043256C 81C108F54A00            add ecx, 004AF508
:00432572 E859CDFDFF              call 0040F2D0
:00432577 85C0                    test eax, eax
:00432579 7418                    je 00432593
:0043257B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043257E 51                      push ecx
:0043257F 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432582 33C0                    xor eax, eax
:00432584 8A02                    mov al, byte ptr [edx]
:00432586 50                      push eax
:00432587 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043258A 51                      push ecx
:0043258B E8D6E6FFFF              call 00430C66
:00432590 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043255E(C), :00432579(C)
|
:00432593 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432596 83C201                  add edx, 00000001
:00432599 8955E4                  mov dword ptr [ebp-1C], edx
:0043259C EB9F                    jmp 0043253D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004324F6(C), :0043254A(C)
|
:0043259E C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432449(C)
|
:004325A8 8BE5                    mov esp, ebp
:004325AA 5D                      pop ebp
:004325AB C3                      ret



* Referenced by a CALL at Addresses:
|:00432472   , :00432724   , :00437A26   , :00437BC1   , :00437DE5   
|
:004325AC 55                      push ebp
:004325AD 8BEC                    mov ebp, esp
:004325AF 83EC08                  sub esp, 00000008
:004325B2 56                      push esi
:004325B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004325B6 81E1FF000000            and ecx, 000000FF
:004325BC 6BC924                  imul ecx, 00000024
:004325BF 81C108F54A00            add ecx, 004AF508
:004325C5 E806D1FFFF              call 0042F6D0
:004325CA 6BC070                  imul eax, 00000070
:004325CD 0598224900              add eax, 00492298
:004325D2 8945F8                  mov dword ptr [ebp-08], eax
:004325D5 C745FC01000000          mov [ebp-04], 00000001
:004325DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004325DF 81E1FF000000            and ecx, 000000FF
:004325E5 6BC924                  imul ecx, 00000024
:004325E8 81C108F54A00            add ecx, 004AF508
:004325EE E87D22FDFF              call 00404870
:004325F3 8BF0                    mov esi, eax
:004325F5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004325F8 E8E3FEFCFF              call 004024E0
:004325FD 3BF0                    cmp esi, eax
:004325FF 7513                    jne 00432614
:00432601 8B450C                  mov eax, dword ptr [ebp+0C]
:00432604 25FF000000              and eax, 000000FF
:00432609 85C0                    test eax, eax
:0043260B 7507                    jne 00432614
:0043260D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004325FF(C), :0043260B(C)
|
:00432614 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432617 81E1FF000000            and ecx, 000000FF
:0043261D 6BC924                  imul ecx, 00000024
:00432620 81C108F54A00            add ecx, 004AF508
:00432626 E88522FDFF              call 004048B0
:0043262B 8BF0                    mov esi, eax
:0043262D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432630 E8DCFEFCFF              call 00402511
:00432635 3BF0                    cmp esi, eax
:00432637 7515                    jne 0043264E
:00432639 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043263C 81E1FF000000            and ecx, 000000FF
:00432642 83F901                  cmp ecx, 00000001
:00432645 7507                    jne 0043264E
:00432647 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432637(C), :00432645(C)
|
:0043264E 837DFC00                cmp dword ptr [ebp-04], 00000000
:00432652 7520                    jne 00432674

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432654 6A07                    push 00000007
:00432656 B9800D4B00              mov ecx, 004B0D80
:0043265B E849F50200              call 00461BA9

* Possible StringData Ref from Data Obj ->"Sno䳡_C"
                                  |
:00432660 680C884700              push 0047880C
:00432665 6A00                    push 00000000
:00432667 E80065FFFF              call 00428B6C
:0043266C 83C408                  add esp, 00000008
:0043266F E88A46FFFF              call 00426CFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432652(C)
|
:00432674 8B45FC                  mov eax, dword ptr [ebp-04]
:00432677 5E                      pop esi
:00432678 8BE5                    mov esp, ebp
:0043267A 5D                      pop ebp
:0043267B C3                      ret



* Referenced by a CALL at Address:
|:00432283   
|
:0043267C 55                      push ebp
:0043267D 8BEC                    mov ebp, esp
:0043267F 83EC20                  sub esp, 00000020
:00432682 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432685 6BC933                  imul ecx, 00000033
:00432688 81C1C8EF4800            add ecx, 0048EFC8
:0043268E E8FD20FDFF              call 00404790
:00432693 8845F0                  mov byte ptr [ebp-10], al
:00432696 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432699 6BC933                  imul ecx, 00000033
:0043269C 81C1C8EF4800            add ecx, 0048EFC8
:004326A2 E8A9D9FEFF              call 00420050
:004326A7 8845EC                  mov byte ptr [ebp-14], al
:004326AA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004326AD 6BC924                  imul ecx, 00000024
:004326B0 81C108F54A00            add ecx, 004AF508
:004326B6 E835D2FFFF              call 0042F8F0
:004326BB 25FF000000              and eax, 000000FF
:004326C0 83F807                  cmp eax, 00000007
:004326C3 7417                    je 004326DC
:004326C5 33C0                    xor eax, eax
:004326C7 A07C0B4B00              mov al, byte ptr [004B0B7C]
:004326CC 83E004                  and eax, 00000004
:004326CF 85C0                    test eax, eax
:004326D1 7509                    jne 004326DC
:004326D3 C745E000000000          mov [ebp-20], 00000000
:004326DA EB07                    jmp 004326E3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004326C3(C), :004326D1(C)
|
:004326DC C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004326DA(U)
|
:004326E3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004326E6 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432730(U)
|
:004326E9 6A01                    push 00000001
:004326EB 8B55F0                  mov edx, dword ptr [ebp-10]
:004326EE 81E2FF000000            and edx, 000000FF
:004326F4 80CA80                  or dl, 80
:004326F7 52                      push edx
:004326F8 8A450C                  mov al, byte ptr [ebp+0C]
:004326FB 50                      push eax
:004326FC B9A8034B00              mov ecx, 004B03A8
:00432701 E8F2350100              call 00445CF8
:00432706 8845FC                  mov byte ptr [ebp-04], al
:00432709 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043270C 81E1FF000000            and ecx, 000000FF
:00432712 81F9FF000000            cmp ecx, 000000FF
:00432718 0F843C010000            je 0043285A
:0043271E 6A01                    push 00000001
:00432720 8A55FC                  mov dl, byte ptr [ebp-04]
:00432723 52                      push edx
:00432724 E883FEFFFF              call 004325AC
:00432729 83C408                  add esp, 00000008
:0043272C 85C0                    test eax, eax
:0043272E 7502                    jne 00432732
:00432730 EBB7                    jmp 004326E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043272E(C)
|
:00432732 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432735 81E1FF000000            and ecx, 000000FF
:0043273B 6BC924                  imul ecx, 00000024
:0043273E 81C108F54A00            add ecx, 004AF508
:00432744 E887CFFFFF              call 0042F6D0
:00432749 6BC070                  imul eax, 00000070
:0043274C 0598224900              add eax, 00492298
:00432751 8945F8                  mov dword ptr [ebp-08], eax
:00432754 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432757 81E1FF000000            and ecx, 000000FF
:0043275D 6BC924                  imul ecx, 00000024
:00432760 81C108F54A00            add ecx, 004AF508
:00432766 E8356CFFFF              call 004293A0
:0043276B 668B00                  mov ax, word ptr [eax]
:0043276E 668945E8                mov word ptr [ebp-18], ax
:00432772 8A4DE9                  mov cl, byte ptr [ebp-17]
:00432775 51                      push ecx
:00432776 8A55E8                  mov dl, byte ptr [ebp-18]
:00432779 52                      push edx
:0043277A B9A8034B00              mov ecx, 004B03A8
:0043277F E8B3320100              call 00445A37
:00432784 8B4508                  mov eax, dword ptr [ebp+08]
:00432787 50                      push eax
:00432788 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043278B 81E1FF000000            and ecx, 000000FF
:00432791 51                      push ecx
:00432792 8B550C                  mov edx, dword ptr [ebp+0C]
:00432795 52                      push edx
:00432796 E834E7FFFF              call 00430ECF
:0043279B 83C40C                  add esp, 0000000C
:0043279E 8B45EC                  mov eax, dword ptr [ebp-14]
:004327A1 25FF000000              and eax, 000000FF
:004327A6 85C0                    test eax, eax
:004327A8 0F84A2000000            je 00432850

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004327AE 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004327B3 6A11                    push 00000011
:004327B5 68B8014B00              push 004B01B8
:004327BA E889000300              call 00462848
:004327BF 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004327C2 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004327C7 68FF000000              push 000000FF
:004327CC 6A01                    push 00000001
:004327CE 68B8014B00              push 004B01B8
:004327D3 8A4DEC                  mov cl, byte ptr [ebp-14]
:004327D6 51                      push ecx
:004327D7 8A55FC                  mov dl, byte ptr [ebp-04]
:004327DA 52                      push edx
:004327DB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004327DE 6BC924                  imul ecx, 00000024
:004327E1 81C108F54A00            add ecx, 004AF508
:004327E7 E814AF0100              call 0044D700
:004327EC 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043284E(U)
|
:004327EF 8B45E4                  mov eax, dword ptr [ebp-1C]
:004327F2 33C9                    xor ecx, ecx
:004327F4 8A08                    mov cl, byte ptr [eax]
:004327F6 81F9FF000000            cmp ecx, 000000FF
:004327FC 7452                    je 00432850
:004327FE 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432801 33C0                    xor eax, eax
:00432803 8A02                    mov al, byte ptr [edx]
:00432805 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432808 81E1FF000000            and ecx, 000000FF
:0043280E 3BC1                    cmp eax, ecx
:00432810 7433                    je 00432845
:00432812 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432815 33C0                    xor eax, eax
:00432817 8A02                    mov al, byte ptr [edx]
:00432819 8BC8                    mov ecx, eax
:0043281B 6BC924                  imul ecx, 00000024
:0043281E 81C108F54A00            add ecx, 004AF508
:00432824 E8A7CAFDFF              call 0040F2D0
:00432829 85C0                    test eax, eax
:0043282B 7418                    je 00432845
:0043282D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432830 51                      push ecx
:00432831 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432834 33C0                    xor eax, eax
:00432836 8A02                    mov al, byte ptr [edx]
:00432838 50                      push eax
:00432839 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043283C 51                      push ecx
:0043283D E88DE6FFFF              call 00430ECF
:00432842 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432810(C), :0043282B(C)
|
:00432845 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432848 83C201                  add edx, 00000001
:0043284B 8955E4                  mov dword ptr [ebp-1C], edx
:0043284E EB9F                    jmp 004327EF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004327A8(C), :004327FC(C)
|
:00432850 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432718(C)
|
:0043285A 8BE5                    mov esp, ebp
:0043285C 5D                      pop ebp
:0043285D C3                      ret



* Referenced by a CALL at Address:
|:004322A0   
|
:0043285E 55                      push ebp
:0043285F 8BEC                    mov ebp, esp
:00432861 83EC20                  sub esp, 00000020
:00432864 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432867 6BC933                  imul ecx, 00000033
:0043286A 81C1C8EF4800            add ecx, 0048EFC8
:00432870 E81B1FFDFF              call 00404790
:00432875 8845F0                  mov byte ptr [ebp-10], al
:00432878 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043287B 6BC933                  imul ecx, 00000033
:0043287E 81C1C8EF4800            add ecx, 0048EFC8
:00432884 E8C7D7FEFF              call 00420050
:00432889 8845EC                  mov byte ptr [ebp-14], al
:0043288C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043288F 6BC924                  imul ecx, 00000024
:00432892 81C108F54A00            add ecx, 004AF508
:00432898 E853D0FFFF              call 0042F8F0
:0043289D 25FF000000              and eax, 000000FF
:004328A2 83F807                  cmp eax, 00000007
:004328A5 7417                    je 004328BE
:004328A7 33C0                    xor eax, eax
:004328A9 A07C0B4B00              mov al, byte ptr [004B0B7C]
:004328AE 83E004                  and eax, 00000004
:004328B1 85C0                    test eax, eax
:004328B3 7509                    jne 004328BE
:004328B5 C745E000000000          mov [ebp-20], 00000000
:004328BC EB07                    jmp 004328C5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004328A5(C), :004328B3(C)
|
:004328BE C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004328BC(U)
|
:004328C5 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004328C8 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432914(U)
|
:004328CB 6A01                    push 00000001
:004328CD 8B55F0                  mov edx, dword ptr [ebp-10]
:004328D0 81E2FF000000            and edx, 000000FF
:004328D6 80CA80                  or dl, 80
:004328D9 52                      push edx
:004328DA 8A450C                  mov al, byte ptr [ebp+0C]
:004328DD 50                      push eax
:004328DE B9A8034B00              mov ecx, 004B03A8
:004328E3 E810340100              call 00445CF8
:004328E8 8845FC                  mov byte ptr [ebp-04], al
:004328EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004328EE 81E1FF000000            and ecx, 000000FF
:004328F4 81F9FF000000            cmp ecx, 000000FF
:004328FA 0F843D010000            je 00432A3D
:00432900 8A55FC                  mov dl, byte ptr [ebp-04]
:00432903 52                      push edx
:00432904 8A4508                  mov al, byte ptr [ebp+08]
:00432907 50                      push eax
:00432908 E834010000              call 00432A41
:0043290D 83C408                  add esp, 00000008
:00432910 85C0                    test eax, eax
:00432912 7502                    jne 00432916
:00432914 EBB5                    jmp 004328CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432912(C)
|
:00432916 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432919 81E1FF000000            and ecx, 000000FF
:0043291F 6BC924                  imul ecx, 00000024
:00432922 81C108F54A00            add ecx, 004AF508
:00432928 E8A3CDFFFF              call 0042F6D0
:0043292D 6BC070                  imul eax, 00000070
:00432930 0598224900              add eax, 00492298
:00432935 8945F8                  mov dword ptr [ebp-08], eax
:00432938 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043293B 81E1FF000000            and ecx, 000000FF
:00432941 6BC924                  imul ecx, 00000024
:00432944 81C108F54A00            add ecx, 004AF508
:0043294A E8516AFFFF              call 004293A0
:0043294F 668B08                  mov cx, word ptr [eax]
:00432952 66894DE8                mov word ptr [ebp-18], cx
:00432956 8A55E9                  mov dl, byte ptr [ebp-17]
:00432959 52                      push edx
:0043295A 8A45E8                  mov al, byte ptr [ebp-18]
:0043295D 50                      push eax
:0043295E B9A8034B00              mov ecx, 004B03A8
:00432963 E8CF300100              call 00445A37
:00432968 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043296B 51                      push ecx
:0043296C 8B55FC                  mov edx, dword ptr [ebp-04]
:0043296F 81E2FF000000            and edx, 000000FF
:00432975 52                      push edx
:00432976 8B450C                  mov eax, dword ptr [ebp+0C]
:00432979 50                      push eax
:0043297A E89E010000              call 00432B1D
:0043297F 83C40C                  add esp, 0000000C
:00432982 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00432985 81E1FF000000            and ecx, 000000FF
:0043298B 85C9                    test ecx, ecx
:0043298D 0F84A0000000            je 00432A33

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432993 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00432998 6A11                    push 00000011
:0043299A 68B8014B00              push 004B01B8
:0043299F E8A4FE0200              call 00462848
:004329A4 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004329A7 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004329AC 68FF000000              push 000000FF
:004329B1 6A01                    push 00000001
:004329B3 68B8014B00              push 004B01B8
:004329B8 8A55EC                  mov dl, byte ptr [ebp-14]
:004329BB 52                      push edx
:004329BC 8A45FC                  mov al, byte ptr [ebp-04]
:004329BF 50                      push eax
:004329C0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004329C3 6BC924                  imul ecx, 00000024
:004329C6 81C108F54A00            add ecx, 004AF508
:004329CC E82FAD0100              call 0044D700
:004329D1 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432A31(U)
|
:004329D4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004329D7 33D2                    xor edx, edx
:004329D9 8A11                    mov dl, byte ptr [ecx]
:004329DB 81FAFF000000            cmp edx, 000000FF
:004329E1 7450                    je 00432A33
:004329E3 8B45E4                  mov eax, dword ptr [ebp-1C]
:004329E6 33C9                    xor ecx, ecx
:004329E8 8A08                    mov cl, byte ptr [eax]
:004329EA 8B55FC                  mov edx, dword ptr [ebp-04]
:004329ED 81E2FF000000            and edx, 000000FF
:004329F3 3BCA                    cmp ecx, edx
:004329F5 7431                    je 00432A28
:004329F7 8B45E4                  mov eax, dword ptr [ebp-1C]
:004329FA 33C9                    xor ecx, ecx
:004329FC 8A08                    mov cl, byte ptr [eax]
:004329FE 6BC924                  imul ecx, 00000024
:00432A01 81C108F54A00            add ecx, 004AF508
:00432A07 E8C4C8FDFF              call 0040F2D0
:00432A0C 85C0                    test eax, eax
:00432A0E 7418                    je 00432A28
:00432A10 8B5508                  mov edx, dword ptr [ebp+08]
:00432A13 52                      push edx
:00432A14 8B45E4                  mov eax, dword ptr [ebp-1C]
:00432A17 33C9                    xor ecx, ecx
:00432A19 8A08                    mov cl, byte ptr [eax]
:00432A1B 51                      push ecx
:00432A1C 8B550C                  mov edx, dword ptr [ebp+0C]
:00432A1F 52                      push edx
:00432A20 E8F8000000              call 00432B1D
:00432A25 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004329F5(C), :00432A0E(C)
|
:00432A28 8B45E4                  mov eax, dword ptr [ebp-1C]
:00432A2B 83C001                  add eax, 00000001
:00432A2E 8945E4                  mov dword ptr [ebp-1C], eax
:00432A31 EBA1                    jmp 004329D4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043298D(C), :004329E1(C)
|
:00432A33 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004328FA(C)
|
:00432A3D 8BE5                    mov esp, ebp
:00432A3F 5D                      pop ebp
:00432A40 C3                      ret



* Referenced by a CALL at Address:
|:00432908   
|
:00432A41 55                      push ebp
:00432A42 8BEC                    mov ebp, esp
:00432A44 83EC10                  sub esp, 00000010
:00432A47 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432A4A 81E1FF000000            and ecx, 000000FF
:00432A50 6BC933                  imul ecx, 00000033
:00432A53 81C1C8EF4800            add ecx, 0048EFC8
:00432A59 E8321CFDFF              call 00404690
:00432A5E 8845FC                  mov byte ptr [ebp-04], al
:00432A61 C745F801000000          mov [ebp-08], 00000001
:00432A68 8B450C                  mov eax, dword ptr [ebp+0C]
:00432A6B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432A70 3DFF000000              cmp eax, 000000FF
:00432A75 0F849B000000            je 00432B16
:00432A7B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432A7E 81E1FF000000            and ecx, 000000FF
:00432A84 6BC924                  imul ecx, 00000024
:00432A87 81C108F54A00            add ecx, 004AF508
:00432A8D 894DF4                  mov dword ptr [ebp-0C], ecx
:00432A90 8A55FC                  mov dl, byte ptr [ebp-04]
:00432A93 8855F0                  mov byte ptr [ebp-10], dl
:00432A96 807DF011                cmp byte ptr [ebp-10], 11
:00432A9A 7408                    je 00432AA4
:00432A9C 807DF012                cmp byte ptr [ebp-10], 12
:00432AA0 743C                    je 00432ADE
:00432AA2 EB72                    jmp 00432B16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432A9A(C)
|
:00432AA4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432AA7 E874CCFFFF              call 0042F720
:00432AAC 25FF000000              and eax, 000000FF
:00432AB1 33C9                    xor ecx, ecx
:00432AB3 85C0                    test eax, eax
:00432AB5 0F9FC1                  setg cl
:00432AB8 894DF8                  mov dword ptr [ebp-08], ecx
:00432ABB 837DF800                cmp dword ptr [ebp-08], 00000000
:00432ABF 751B                    jne 00432ADC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432AC1 6A07                    push 00000007
:00432AC3 B9800D4B00              mov ecx, 004B0D80
:00432AC8 E8DCF00200              call 00461BA9

* Possible StringData Ref from Data Obj ->"o䳡OAWɤFC"
                                  |
:00432ACD 6828884700              push 00478828
:00432AD2 6A00                    push 00000000
:00432AD4 E89360FFFF              call 00428B6C
:00432AD9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432ABF(C)
|
:00432ADC EB38                    jmp 00432B16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432AA0(C)
|
:00432ADE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432AE1 E85ACCFFFF              call 0042F740
:00432AE6 25FF000000              and eax, 000000FF
:00432AEB 33D2                    xor edx, edx
:00432AED 85C0                    test eax, eax
:00432AEF 0F9FC2                  setg dl
:00432AF2 8955F8                  mov dword ptr [ebp-08], edx
:00432AF5 837DF800                cmp dword ptr [ebp-08], 00000000
:00432AF9 751B                    jne 00432B16

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432AFB 6A07                    push 00000007
:00432AFD B9800D4B00              mov ecx, 004B0D80
:00432B02 E8A2F00200              call 00461BA9

* Possible StringData Ref from Data Obj ->"o䳡mOAWɤFC"
                                  |
:00432B07 6848884700              push 00478848
:00432B0C 6A00                    push 00000000
:00432B0E E85960FFFF              call 00428B6C
:00432B13 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432A75(C), :00432AA2(U), :00432ADC(U), :00432AF9(C)
|
:00432B16 8B45F8                  mov eax, dword ptr [ebp-08]
:00432B19 8BE5                    mov esp, ebp
:00432B1B 5D                      pop ebp
:00432B1C C3                      ret



* Referenced by a CALL at Addresses:
|:0043297A   , :00432A20   
|
:00432B1D 55                      push ebp
:00432B1E 8BEC                    mov ebp, esp
:00432B20 83EC14                  sub esp, 00000014
:00432B23 8B4D10                  mov ecx, dword ptr [ebp+10]
:00432B26 6BC933                  imul ecx, 00000033
:00432B29 81C1C8EF4800            add ecx, 0048EFC8
:00432B2F E85C1BFDFF              call 00404690
:00432B34 8845FC                  mov byte ptr [ebp-04], al
:00432B37 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:00432B3E 0F8404010000            je 00432C48
:00432B44 8B450C                  mov eax, dword ptr [ebp+0C]
:00432B47 6BC024                  imul eax, 00000024
:00432B4A 0508F54A00              add eax, 004AF508
:00432B4F 8945F8                  mov dword ptr [ebp-08], eax
:00432B52 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432B55 E876CBFFFF              call 0042F6D0
:00432B5A 6BC070                  imul eax, 00000070
:00432B5D 0598224900              add eax, 00492298
:00432B62 8945F0                  mov dword ptr [ebp-10], eax
:00432B65 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432B68 E83368FFFF              call 004293A0
:00432B6D 668B08                  mov cx, word ptr [eax]
:00432B70 66894DF4                mov word ptr [ebp-0C], cx
:00432B74 8A55F5                  mov dl, byte ptr [ebp-0B]
:00432B77 52                      push edx
:00432B78 8A45F4                  mov al, byte ptr [ebp-0C]
:00432B7B 50                      push eax
:00432B7C B9A8034B00              mov ecx, 004B03A8
:00432B81 E8B12E0100              call 00445A37
:00432B86 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00432B89 51                      push ecx
:00432B8A 8A5508                  mov dl, byte ptr [ebp+08]
:00432B8D 52                      push edx
:00432B8E E8B9000000              call 00432C4C
:00432B93 83C408                  add esp, 00000008
:00432B96 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00432B98 6A03                    push 00000003
:00432B9A 8A45FC                  mov al, byte ptr [ebp-04]
:00432B9D 50                      push eax
:00432B9E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00432BA1 51                      push ecx
:00432BA2 8A5508                  mov dl, byte ptr [ebp+08]
:00432BA5 52                      push edx
:00432BA6 B9A8034B00              mov ecx, 004B03A8
:00432BAB E8263B0100              call 004466D6
:00432BB0 8A45FC                  mov al, byte ptr [ebp-04]
:00432BB3 8845EC                  mov byte ptr [ebp-14], al
:00432BB6 807DEC11                cmp byte ptr [ebp-14], 11
:00432BBA 7408                    je 00432BC4
:00432BBC 807DEC12                cmp byte ptr [ebp-14], 12
:00432BC0 7441                    je 00432C03
:00432BC2 EB7C                    jmp 00432C40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432BBA(C)
|
:00432BC4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432BC7 E854CBFFFF              call 0042F720
:00432BCC 25FF000000              and eax, 000000FF
:00432BD1 85C0                    test eax, eax
:00432BD3 7E2C                    jle 00432C01
:00432BD5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432BD8 E843CBFFFF              call 0042F720
:00432BDD 25FF000000              and eax, 000000FF
:00432BE2 83E801                  sub eax, 00000001
:00432BE5 0C40                    or al, 40
:00432BE7 50                      push eax
:00432BE8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432BEB E840CDFFFF              call 0042F930
:00432BF0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432BF3 E8D8CAFFFF              call 0042F6D0
:00432BF8 50                      push eax
:00432BF9 E852430300              call 00466F50
:00432BFE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432BD3(C)
|
:00432C01 EB3D                    jmp 00432C40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432BC0(C)
|
:00432C03 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432C06 E835CBFFFF              call 0042F740
:00432C0B 25FF000000              and eax, 000000FF
:00432C10 85C0                    test eax, eax
:00432C12 7E2C                    jle 00432C40
:00432C14 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432C17 E824CBFFFF              call 0042F740
:00432C1C 25FF000000              and eax, 000000FF
:00432C21 83E801                  sub eax, 00000001
:00432C24 0C40                    or al, 40
:00432C26 50                      push eax
:00432C27 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432C2A E841CDFFFF              call 0042F970
:00432C2F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432C32 E899CAFFFF              call 0042F6D0
:00432C37 50                      push eax
:00432C38 E813430300              call 00466F50
:00432C3D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432BC2(U), :00432C01(U), :00432C12(C)
|
:00432C40 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432C43 E800A0FFFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432B3E(C)
|
:00432C48 8BE5                    mov esp, ebp
:00432C4A 5D                      pop ebp
:00432C4B C3                      ret



* Referenced by a CALL at Addresses:
|:00432B8E   , :00432DA1   , :004331C3   , :00433B72   , :00433E6F   
|:0043414F   , :00434368   , :004345CF   , :004347B2   , :00434FEC   
|:00435A5C   , :00435CF4   , :00435F66   , :0043623A   , :0043647C   
|:00436C0C   , :004371A2   , :004374D1   , :00437508   , :00438173   
|:00438525   , :00438750   , :00438ADB   
|
:00432C4C 55                      push ebp
:00432C4D 8BEC                    mov ebp, esp
:00432C4F 8A450C                  mov al, byte ptr [ebp+0C]
:00432C52 50                      push eax
:00432C53 8A4D08                  mov cl, byte ptr [ebp+08]
:00432C56 51                      push ecx
:00432C57 E8E74B0100              call 00447843
:00432C5C 83C408                  add esp, 00000008
:00432C5F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432C62 81E1FF000000            and ecx, 000000FF
:00432C68 6BC924                  imul ecx, 00000024
:00432C6B 81C108F54A00            add ecx, 004AF508
:00432C71 E8D29FFFFF              call 0042CC48
:00432C76 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432C79 81E1FF000000            and ecx, 000000FF
:00432C7F 6BC924                  imul ecx, 00000024
:00432C82 81C108F54A00            add ecx, 004AF508
:00432C88 E8BB9FFFFF              call 0042CC48
:00432C8D 5D                      pop ebp
:00432C8E C3                      ret



* Referenced by a CALL at Address:
|:004322BD   
|
:00432C8F 55                      push ebp
:00432C90 8BEC                    mov ebp, esp
:00432C92 83EC20                  sub esp, 00000020
:00432C95 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432C98 6BC933                  imul ecx, 00000033
:00432C9B 81C1C8EF4800            add ecx, 0048EFC8
:00432CA1 E8EA1AFDFF              call 00404790
:00432CA6 8845F0                  mov byte ptr [ebp-10], al
:00432CA9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432CAC 6BC933                  imul ecx, 00000033
:00432CAF 81C1C8EF4800            add ecx, 0048EFC8
:00432CB5 E896D3FEFF              call 00420050
:00432CBA 8845EC                  mov byte ptr [ebp-14], al
:00432CBD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432CC0 6BC924                  imul ecx, 00000024
:00432CC3 81C108F54A00            add ecx, 004AF508
:00432CC9 E822CCFFFF              call 0042F8F0
:00432CCE 25FF000000              and eax, 000000FF
:00432CD3 83F807                  cmp eax, 00000007
:00432CD6 7417                    je 00432CEF
:00432CD8 33C0                    xor eax, eax
:00432CDA A07C0B4B00              mov al, byte ptr [004B0B7C]
:00432CDF 83E004                  and eax, 00000004
:00432CE2 85C0                    test eax, eax
:00432CE4 7509                    jne 00432CEF
:00432CE6 C745E000000000          mov [ebp-20], 00000000
:00432CED EB07                    jmp 00432CF6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432CD6(C), :00432CE4(C)
|
:00432CEF C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432CED(U)
|
:00432CF6 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00432CF9 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432D45(U)
|
:00432CFC 6A01                    push 00000001
:00432CFE 8B55F0                  mov edx, dword ptr [ebp-10]
:00432D01 81E2FF000000            and edx, 000000FF
:00432D07 80CA80                  or dl, 80
:00432D0A 52                      push edx
:00432D0B 8A450C                  mov al, byte ptr [ebp+0C]
:00432D0E 50                      push eax
:00432D0F B9A8034B00              mov ecx, 004B03A8
:00432D14 E8DF2F0100              call 00445CF8
:00432D19 8845FC                  mov byte ptr [ebp-04], al
:00432D1C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432D1F 81E1FF000000            and ecx, 000000FF
:00432D25 81F9FF000000            cmp ecx, 000000FF
:00432D2B 0F8474010000            je 00432EA5
:00432D31 8A55FC                  mov dl, byte ptr [ebp-04]
:00432D34 52                      push edx
:00432D35 8A4508                  mov al, byte ptr [ebp+08]
:00432D38 50                      push eax
:00432D39 E86B010000              call 00432EA9
:00432D3E 83C408                  add esp, 00000008
:00432D41 85C0                    test eax, eax
:00432D43 7502                    jne 00432D47
:00432D45 EBB5                    jmp 00432CFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432D43(C)
|
:00432D47 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432D4A 81E1FF000000            and ecx, 000000FF
:00432D50 6BC924                  imul ecx, 00000024
:00432D53 81C108F54A00            add ecx, 004AF508
:00432D59 E872C9FFFF              call 0042F6D0
:00432D5E 6BC070                  imul eax, 00000070
:00432D61 0598224900              add eax, 00492298
:00432D66 8945F8                  mov dword ptr [ebp-08], eax
:00432D69 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432D6C 81E1FF000000            and ecx, 000000FF
:00432D72 6BC924                  imul ecx, 00000024
:00432D75 81C108F54A00            add ecx, 004AF508
:00432D7B E82066FFFF              call 004293A0
:00432D80 668B08                  mov cx, word ptr [eax]
:00432D83 66894DE8                mov word ptr [ebp-18], cx
:00432D87 8A55E9                  mov dl, byte ptr [ebp-17]
:00432D8A 52                      push edx
:00432D8B 8A45E8                  mov al, byte ptr [ebp-18]
:00432D8E 50                      push eax
:00432D8F B9A8034B00              mov ecx, 004B03A8
:00432D94 E89E2C0100              call 00445A37
:00432D99 8A4DFC                  mov cl, byte ptr [ebp-04]
:00432D9C 51                      push ecx
:00432D9D 8A550C                  mov dl, byte ptr [ebp+0C]
:00432DA0 52                      push edx
:00432DA1 E8A6FEFFFF              call 00432C4C
:00432DA6 83C408                  add esp, 00000008
:00432DA9 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00432DAB 6A03                    push 00000003
:00432DAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432DB0 6BC933                  imul ecx, 00000033
:00432DB3 81C1C8EF4800            add ecx, 0048EFC8
:00432DB9 E8D218FDFF              call 00404690
:00432DBE 50                      push eax
:00432DBF 8A45FC                  mov al, byte ptr [ebp-04]
:00432DC2 50                      push eax
:00432DC3 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00432DC6 51                      push ecx
:00432DC7 B9A8034B00              mov ecx, 004B03A8
:00432DCC E805390100              call 004466D6
:00432DD1 8B5508                  mov edx, dword ptr [ebp+08]
:00432DD4 52                      push edx
:00432DD5 8B45FC                  mov eax, dword ptr [ebp-04]
:00432DD8 25FF000000              and eax, 000000FF
:00432DDD 50                      push eax
:00432DDE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432DE1 51                      push ecx
:00432DE2 E812020000              call 00432FF9
:00432DE7 83C40C                  add esp, 0000000C
:00432DEA 8B55EC                  mov edx, dword ptr [ebp-14]
:00432DED 81E2FF000000            and edx, 000000FF
:00432DF3 85D2                    test edx, edx
:00432DF5 0F84A0000000            je 00432E9B

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432DFB 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00432E00 6A11                    push 00000011
:00432E02 68B8014B00              push 004B01B8
:00432E07 E83CFA0200              call 00462848
:00432E0C 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432E0F 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432E14 68FF000000              push 000000FF
:00432E19 6A01                    push 00000001
:00432E1B 68B8014B00              push 004B01B8
:00432E20 8A45EC                  mov al, byte ptr [ebp-14]
:00432E23 50                      push eax
:00432E24 8A4DFC                  mov cl, byte ptr [ebp-04]
:00432E27 51                      push ecx
:00432E28 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432E2B 6BC924                  imul ecx, 00000024
:00432E2E 81C108F54A00            add ecx, 004AF508
:00432E34 E8C7A80100              call 0044D700
:00432E39 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432E99(U)
|
:00432E3C 8B55E4                  mov edx, dword ptr [ebp-1C]
:00432E3F 33C0                    xor eax, eax
:00432E41 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432E43 3DFF000000              cmp eax, 000000FF
:00432E48 7451                    je 00432E9B
:00432E4A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00432E4D 33D2                    xor edx, edx
:00432E4F 8A11                    mov dl, byte ptr [ecx]
:00432E51 8B45FC                  mov eax, dword ptr [ebp-04]
:00432E54 25FF000000              and eax, 000000FF
:00432E59 3BD0                    cmp edx, eax
:00432E5B 7433                    je 00432E90
:00432E5D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00432E60 33D2                    xor edx, edx
:00432E62 8A11                    mov dl, byte ptr [ecx]
:00432E64 8BCA                    mov ecx, edx
:00432E66 6BC924                  imul ecx, 00000024
:00432E69 81C108F54A00            add ecx, 004AF508
:00432E6F E85CC4FDFF              call 0040F2D0
:00432E74 85C0                    test eax, eax
:00432E76 7418                    je 00432E90
:00432E78 8B4508                  mov eax, dword ptr [ebp+08]
:00432E7B 50                      push eax
:00432E7C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00432E7F 33D2                    xor edx, edx
:00432E81 8A11                    mov dl, byte ptr [ecx]
:00432E83 52                      push edx
:00432E84 8B450C                  mov eax, dword ptr [ebp+0C]
:00432E87 50                      push eax
:00432E88 E86C010000              call 00432FF9
:00432E8D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432E5B(C), :00432E76(C)
|
:00432E90 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00432E93 83C101                  add ecx, 00000001
:00432E96 894DE4                  mov dword ptr [ebp-1C], ecx
:00432E99 EBA1                    jmp 00432E3C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432DF5(C), :00432E48(C)
|
:00432E9B C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432D2B(C)
|
:00432EA5 8BE5                    mov esp, ebp
:00432EA7 5D                      pop ebp
:00432EA8 C3                      ret



* Referenced by a CALL at Address:
|:00432D39   
|
:00432EA9 55                      push ebp
:00432EAA 8BEC                    mov ebp, esp
:00432EAC 83EC10                  sub esp, 00000010
:00432EAF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432EB2 81E1FF000000            and ecx, 000000FF
:00432EB8 6BC933                  imul ecx, 00000033
:00432EBB 81C1C8EF4800            add ecx, 0048EFC8
:00432EC1 E8CA17FDFF              call 00404690
:00432EC6 8845FC                  mov byte ptr [ebp-04], al
:00432EC9 C745F801000000          mov [ebp-08], 00000001
:00432ED0 8B450C                  mov eax, dword ptr [ebp+0C]
:00432ED3 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00432ED8 3DFF000000              cmp eax, 000000FF
:00432EDD 0F84FF000000            je 00432FE2
:00432EE3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432EE6 81E1FF000000            and ecx, 000000FF
:00432EEC 6BC924                  imul ecx, 00000024
:00432EEF 81C108F54A00            add ecx, 004AF508
:00432EF5 894DF4                  mov dword ptr [ebp-0C], ecx
:00432EF8 8B55FC                  mov edx, dword ptr [ebp-04]
:00432EFB 81E2FF000000            and edx, 000000FF
:00432F01 8955F0                  mov dword ptr [ebp-10], edx
:00432F04 8B45F0                  mov eax, dword ptr [ebp-10]
:00432F07 83E814                  sub eax, 00000014
:00432F0A 8945F0                  mov dword ptr [ebp-10], eax
:00432F0D 837DF003                cmp dword ptr [ebp-10], 00000003
:00432F11 0F87CB000000            ja 00432FE2
:00432F17 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00432F1A FF248DE92F4300          jmp dword ptr [4*ecx+00432FE9]

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00432F21 6A10                    push 00000010
:00432F23 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432F26 E835C8FFFF              call 0042F760
:00432F2B 8945F8                  mov dword ptr [ebp-08], eax
:00432F2E 837DF800                cmp dword ptr [ebp-08], 00000000
:00432F32 751B                    jne 00432F4F

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432F34 6A07                    push 00000007
:00432F36 B9800D4B00              mov ecx, 004B0D80
:00432F3B E869EC0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡èSVáC"
                                  |
:00432F40 6868884700              push 00478868
:00432F45 6A00                    push 00000000
:00432F47 E8205CFFFF              call 00428B6C
:00432F4C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432F32(C)
|
:00432F4F E98E000000              jmp 00432FE2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00432F54 6A04                    push 00000004
:00432F56 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432F59 E802C8FFFF              call 0042F760
:00432F5E 8945F8                  mov dword ptr [ebp-08], eax
:00432F61 837DF800                cmp dword ptr [ebp-08], 00000000
:00432F65 751B                    jne 00432F82

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432F67 6A07                    push 00000007
:00432F69 B9800D4B00              mov ecx, 004B0D80
:00432F6E E836EC0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡èSB檬AC"
                                  |
:00432F73 6880884700              push 00478880
:00432F78 6A00                    push 00000000
:00432F7A E8ED5BFFFF              call 00428B6C
:00432F7F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432F65(C)
|
:00432F82 EB5E                    jmp 00432FE2
:00432F84 6A01                    push 00000001
:00432F86 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432F89 E8D2C7FFFF              call 0042F760
:00432F8E 8945F8                  mov dword ptr [ebp-08], eax
:00432F91 837DF800                cmp dword ptr [ebp-08], 00000000
:00432F95 751B                    jne 00432FB2

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432F97 6A07                    push 00000007
:00432F99 B9800D4B00              mov ecx, 004B0D80
:00432F9E E806EC0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡èSB󤣰ʪAC"
                                  |
:00432FA3 68A0884700              push 004788A0
:00432FA8 6A00                    push 00000000
:00432FAA E8BD5BFFFF              call 00428B6C
:00432FAF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432F95(C)
|
:00432FB2 EB2E                    jmp 00432FE2
:00432FB4 6A20                    push 00000020
:00432FB6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432FB9 E8A2C7FFFF              call 0042F760
:00432FBE 8945F8                  mov dword ptr [ebp-08], eax
:00432FC1 837DF800                cmp dword ptr [ebp-08], 00000000
:00432FC5 751B                    jne 00432FE2

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00432FC7 6A07                    push 00000007
:00432FC9 B9800D4B00              mov ecx, 004B0D80
:00432FCE E8D6EB0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡èStˡC"
                                  |
:00432FD3 68C0884700              push 004788C0
:00432FD8 6A00                    push 00000000
:00432FDA E88D5BFFFF              call 00428B6C
:00432FDF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432EDD(C), :00432F11(C), :00432F4F(U), :00432F82(U), :00432FB2(U)
|:00432FC5(C)
|
:00432FE2 8B45F8                  mov eax, dword ptr [ebp-08]
:00432FE5 8BE5                    mov esp, ebp
:00432FE7 5D                      pop ebp
:00432FE8 C3                      ret



:00432FE9 842F4300                DWORD 00432F84
:00432FED 542F4300                DWORD 00432F54
:00432FF1 212F4300                DWORD 00432F21
:00432FF5 B42F4300                DWORD 00432FB4



* Referenced by a CALL at Addresses:
|:00432DE2   , :00432E88   
|
:00432FF9 55                      push ebp
:00432FFA 8BEC                    mov ebp, esp
:00432FFC 83EC10                  sub esp, 00000010
:00432FFF 8B4D10                  mov ecx, dword ptr [ebp+10]
:00433002 6BC933                  imul ecx, 00000033
:00433005 81C1C8EF4800            add ecx, 0048EFC8
:0043300B E88016FDFF              call 00404690
:00433010 8845FC                  mov byte ptr [ebp-04], al
:00433013 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:0043301A 747C                    je 00433098
:0043301C 8B450C                  mov eax, dword ptr [ebp+0C]
:0043301F 6BC024                  imul eax, 00000024
:00433022 0508F54A00              add eax, 004AF508
:00433027 8945F8                  mov dword ptr [ebp-08], eax
:0043302A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043302D E89EC6FFFF              call 0042F6D0
:00433032 6BC070                  imul eax, 00000070
:00433035 0598224900              add eax, 00492298
:0043303A 8945F4                  mov dword ptr [ebp-0C], eax
:0043303D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433040 81E1FF000000            and ecx, 000000FF
:00433046 894DF0                  mov dword ptr [ebp-10], ecx
:00433049 8B55F0                  mov edx, dword ptr [ebp-10]
:0043304C 83EA14                  sub edx, 00000014
:0043304F 8955F0                  mov dword ptr [ebp-10], edx
:00433052 837DF003                cmp dword ptr [ebp-10], 00000003
:00433056 7738                    ja 00433090
:00433058 8B45F0                  mov eax, dword ptr [ebp-10]
:0043305B FF24859C304300          jmp dword ptr [4*eax+0043309C]

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00433062 6A10                    push 00000010
:00433064 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433067 E864C9FFFF              call 0042F9D0
:0043306C EB22                    jmp 00433090

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043306E 6A04                    push 00000004
:00433070 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433073 E858C9FFFF              call 0042F9D0
:00433078 EB16                    jmp 00433090
:0043307A 6A01                    push 00000001
:0043307C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043307F E84CC9FFFF              call 0042F9D0
:00433084 EB0A                    jmp 00433090
:00433086 6A20                    push 00000020
:00433088 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043308B E840C9FFFF              call 0042F9D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433056(C), :0043306C(U), :00433078(U), :00433084(U)
|
:00433090 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433093 E8B09BFFFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043301A(C)
|
:00433098 8BE5                    mov esp, ebp
:0043309A 5D                      pop ebp
:0043309B C3                      ret



:0043309C 7A304300                DWORD 0043307A
:004330A0 6E304300                DWORD 0043306E
:004330A4 62304300                DWORD 00433062
:004330A8 86304300                DWORD 00433086



* Referenced by a CALL at Address:
|:004322DA   
|
:004330AC 55                      push ebp
:004330AD 8BEC                    mov ebp, esp
:004330AF 83EC20                  sub esp, 00000020
:004330B2 C645F000                mov [ebp-10], 00
:004330B6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004330B9 6BC924                  imul ecx, 00000024
:004330BC 81C108F54A00            add ecx, 004AF508
:004330C2 E829C8FFFF              call 0042F8F0
:004330C7 25FF000000              and eax, 000000FF
:004330CC 83F807                  cmp eax, 00000007
:004330CF 7417                    je 004330E8
:004330D1 33C0                    xor eax, eax
:004330D3 A07C0B4B00              mov al, byte ptr [004B0B7C]
:004330D8 83E004                  and eax, 00000004
:004330DB 85C0                    test eax, eax
:004330DD 7509                    jne 004330E8
:004330DF C745E000000000          mov [ebp-20], 00000000
:004330E6 EB07                    jmp 004330EF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004330CF(C), :004330DD(C)
|
:004330E8 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004330E6(U)
|
:004330EF 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004330F2 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043313E(U)
|
:004330F5 6A01                    push 00000001
:004330F7 8B55F0                  mov edx, dword ptr [ebp-10]
:004330FA 81E2FF000000            and edx, 000000FF
:00433100 80CA80                  or dl, 80
:00433103 52                      push edx
:00433104 8A450C                  mov al, byte ptr [ebp+0C]
:00433107 50                      push eax
:00433108 B9A8034B00              mov ecx, 004B03A8
:0043310D E8E62B0100              call 00445CF8
:00433112 8845FC                  mov byte ptr [ebp-04], al
:00433115 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433118 81E1FF000000            and ecx, 000000FF
:0043311E 81F9FF000000            cmp ecx, 000000FF
:00433124 0F84EE000000            je 00433218
:0043312A 8A55FC                  mov dl, byte ptr [ebp-04]
:0043312D 52                      push edx
:0043312E 8A4508                  mov al, byte ptr [ebp+08]
:00433131 50                      push eax
:00433132 E8E5000000              call 0043321C
:00433137 83C408                  add esp, 00000008
:0043313A 85C0                    test eax, eax
:0043313C 7502                    jne 00433140
:0043313E EBB5                    jmp 004330F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043313C(C)
|
:00433140 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433143 81E1FF000000            and ecx, 000000FF
:00433149 6BC924                  imul ecx, 00000024
:0043314C 81C108F54A00            add ecx, 004AF508
:00433152 E879C5FFFF              call 0042F6D0
:00433157 6BC070                  imul eax, 00000070
:0043315A 0598224900              add eax, 00492298
:0043315F 8945F8                  mov dword ptr [ebp-08], eax
:00433162 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433165 81E1FF000000            and ecx, 000000FF
:0043316B 6BC924                  imul ecx, 00000024
:0043316E 81C108F54A00            add ecx, 004AF508
:00433174 E82762FFFF              call 004293A0
:00433179 668B08                  mov cx, word ptr [eax]
:0043317C 66894DEC                mov word ptr [ebp-14], cx
:00433180 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433183 81E1FF000000            and ecx, 000000FF
:00433189 6BC924                  imul ecx, 00000024
:0043318C 81C108F54A00            add ecx, 004AF508
:00433192 E8E9CAFFFF              call 0042FC80
:00433197 8845E8                  mov byte ptr [ebp-18], al
:0043319A 8B55E8                  mov edx, dword ptr [ebp-18]
:0043319D 81E2FF000000            and edx, 000000FF
:004331A3 83C201                  add edx, 00000001
:004331A6 8855E4                  mov byte ptr [ebp-1C], dl
:004331A9 8A45ED                  mov al, byte ptr [ebp-13]
:004331AC 50                      push eax
:004331AD 8A4DEC                  mov cl, byte ptr [ebp-14]
:004331B0 51                      push ecx
:004331B1 B9A8034B00              mov ecx, 004B03A8
:004331B6 E87C280100              call 00445A37
:004331BB 8A55FC                  mov dl, byte ptr [ebp-04]
:004331BE 52                      push edx
:004331BF 8A450C                  mov al, byte ptr [ebp+0C]
:004331C2 50                      push eax
:004331C3 E884FAFFFF              call 00432C4C
:004331C8 83C408                  add esp, 00000008
:004331CB 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004331CD 6A03                    push 00000003
:004331CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004331D2 6BC933                  imul ecx, 00000033
:004331D5 81C1C8EF4800            add ecx, 0048EFC8
:004331DB E8B014FDFF              call 00404690
:004331E0 50                      push eax
:004331E1 8A4DFC                  mov cl, byte ptr [ebp-04]
:004331E4 51                      push ecx
:004331E5 8A550C                  mov dl, byte ptr [ebp+0C]
:004331E8 52                      push edx
:004331E9 B9A8034B00              mov ecx, 004B03A8
:004331EE E8E3340100              call 004466D6
:004331F3 8B45E4                  mov eax, dword ptr [ebp-1C]
:004331F6 25FF000000              and eax, 000000FF
:004331FB 50                      push eax
:004331FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004331FF 81E1FF000000            and ecx, 000000FF
:00433205 51                      push ecx
:00433206 E824010000              call 0043332F
:0043320B 83C408                  add esp, 00000008
:0043320E C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433124(C)
|
:00433218 8BE5                    mov esp, ebp
:0043321A 5D                      pop ebp
:0043321B C3                      ret



* Referenced by a CALL at Address:
|:00433132   
|
:0043321C 55                      push ebp
:0043321D 8BEC                    mov ebp, esp
:0043321F 83EC14                  sub esp, 00000014
:00433222 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433225 81E1FF000000            and ecx, 000000FF
:0043322B 6BC933                  imul ecx, 00000033
:0043322E 81C1C8EF4800            add ecx, 0048EFC8
:00433234 E8F7CDFEFF              call 00420030
:00433239 8845EC                  mov byte ptr [ebp-14], al
:0043323C 8B45EC                  mov eax, dword ptr [ebp-14]
:0043323F 25FF000000              and eax, 000000FF
:00433244 D1E0                    shl eax, 1
:00433246 8845F8                  mov byte ptr [ebp-08], al
:00433249 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043324C 81E1FF000000            and ecx, 000000FF
:00433252 83C101                  add ecx, 00000001
:00433255 884DF4                  mov byte ptr [ebp-0C], cl
:00433258 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043325B 81E1FF000000            and ecx, 000000FF
:00433261 6BC924                  imul ecx, 00000024
:00433264 81C108F54A00            add ecx, 004AF508
:0043326A E811CAFFFF              call 0042FC80
:0043326F 8845F0                  mov byte ptr [ebp-10], al
:00433272 8B55F0                  mov edx, dword ptr [ebp-10]
:00433275 81E2FF000000            and edx, 000000FF
:0043327B 83C201                  add edx, 00000001
:0043327E 8855FC                  mov byte ptr [ebp-04], dl
:00433281 8B45F0                  mov eax, dword ptr [ebp-10]
:00433284 25FF000000              and eax, 000000FF
:00433289 83F816                  cmp eax, 00000016
:0043328C 7C1F                    jl 004332AD

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043328E 6A07                    push 00000007
:00433290 B9800D4B00              mov ecx, 004B0D80
:00433295 E80FE90200              call 00461BA9

* Possible StringData Ref from Data Obj ->"LkšC"
                                  |
:0043329A 68D8884700              push 004788D8
:0043329F 6A00                    push 00000000
:004332A1 E8C658FFFF              call 00428B6C
:004332A6 83C408                  add esp, 00000008
:004332A9 33C0                    xor eax, eax
:004332AB EB7E                    jmp 0043332B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043328C(C)
|
:004332AD 8B45F0                  mov eax, dword ptr [ebp-10]
:004332B0 25FF000000              and eax, 000000FF
:004332B5 99                      cdq
:004332B6 33C2                    xor eax, edx
:004332B8 2BC2                    sub eax, edx
:004332BA 83E001                  and eax, 00000001
:004332BD 33C2                    xor eax, edx
:004332BF 2BC2                    sub eax, edx
:004332C1 85C0                    test eax, eax
:004332C3 741F                    je 004332E4

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004332C5 6A07                    push 00000007
:004332C7 B9800D4B00              mov ecx, 004B0D80
:004332CC E8D8E80200              call 00461BA9

* Possible StringData Ref from Data Obj ->"AŤFC"
                                  |
:004332D1 68E8884700              push 004788E8
:004332D6 6A00                    push 00000000
:004332D8 E88F58FFFF              call 00428B6C
:004332DD 83C408                  add esp, 00000008
:004332E0 33C0                    xor eax, eax
:004332E2 EB47                    jmp 0043332B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004332C3(C)
|
:004332E4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004332E7 81E1FF000000            and ecx, 000000FF
:004332ED 6BC924                  imul ecx, 00000024
:004332F0 81C108F54A00            add ecx, 004AF508
:004332F6 E8B5C5FFFF              call 0042F8B0
:004332FB 25FF000000              and eax, 000000FF
:00433300 83F814                  cmp eax, 00000014
:00433303 7D21                    jge 00433326

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00433305 6A07                    push 00000007
:00433307 B9800D4B00              mov ecx, 004B0D80
:0043330C E898E80200              call 00461BA9
:00433311 6A14                    push 00000014

* Possible StringData Ref from Data Obj ->"Ťb%wHWLkšC"
                                  |
:00433313 68FC884700              push 004788FC
:00433318 6A00                    push 00000000
:0043331A E84D58FFFF              call 00428B6C
:0043331F 83C40C                  add esp, 0000000C
:00433322 33C0                    xor eax, eax
:00433324 EB05                    jmp 0043332B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433303(C)
|
:00433326 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004332AB(U), :004332E2(U), :00433324(U)
|
:0043332B 8BE5                    mov esp, ebp
:0043332D 5D                      pop ebp
:0043332E C3                      ret



* Referenced by a CALL at Address:
|:00433206   
|
:0043332F 55                      push ebp
:00433330 8BEC                    mov ebp, esp
:00433332 83EC08                  sub esp, 00000008
:00433335 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433338 6BC924                  imul ecx, 00000024
:0043333B 81C108F54A00            add ecx, 004AF508
:00433341 E88AC3FFFF              call 0042F6D0
:00433346 8945FC                  mov dword ptr [ebp-04], eax
:00433349 C745F800000000          mov [ebp-08], 00000000
:00433350 8A450C                  mov al, byte ptr [ebp+0C]
:00433353 50                      push eax
:00433354 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433357 6BC970                  imul ecx, 00000070
:0043335A 81C198224900            add ecx, 00492298
:00433360 E84B14FDFF              call 004047B0
:00433365 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433368 6BC970                  imul ecx, 00000070
:0043336B 81C198224900            add ecx, 00492298
:00433371 E8D5F3FCFF              call 0040274B
:00433376 50                      push eax
:00433377 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043337A 6BC970                  imul ecx, 00000070
:0043337D 81C198224900            add ecx, 00492298
:00433383 E805E9FCFF              call 00401C8D
:00433388 85C0                    test eax, eax
:0043338A 7516                    jne 004333A2

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043338C 68FF000000              push 000000FF
:00433391 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433394 6BC924                  imul ecx, 00000024
:00433397 81C108F54A00            add ecx, 004AF508
:0043339D E85EC1FFFF              call 0042F500

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043338A(C)
|
:004333A2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004333A5 6BC924                  imul ecx, 00000024
:004333A8 81C108F54A00            add ecx, 004AF508
:004333AE E8E68FFFFF              call 0042C399
:004333B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004333B6 6BC924                  imul ecx, 00000024
:004333B9 81C108F54A00            add ecx, 004AF508
:004333BF E88498FFFF              call 0042CC48
:004333C4 C745F800000000          mov [ebp-08], 00000000
:004333CB EB09                    jmp 004333D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433422(U)
|
:004333CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004333D0 83C101                  add ecx, 00000001
:004333D3 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004333CB(U)
|
:004333D6 837DF808                cmp dword ptr [ebp-08], 00000008
:004333DA 7348                    jnb 00433424
:004333DC 837DF804                cmp dword ptr [ebp-08], 00000004
:004333E0 7514                    jne 004333F6
:004333E2 6A32                    push 00000032
:004333E4 8B55F8                  mov edx, dword ptr [ebp-08]
:004333E7 52                      push edx
:004333E8 8B45FC                  mov eax, dword ptr [ebp-04]
:004333EB 50                      push eax
:004333EC E82DE7FCFF              call 00401B1E
:004333F1 83C40C                  add esp, 0000000C
:004333F4 EB2C                    jmp 00433422

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004333E0(C)
|
:004333F6 837DF805                cmp dword ptr [ebp-08], 00000005
:004333FA 7514                    jne 00433410
:004333FC 6A1E                    push 0000001E
:004333FE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433401 51                      push ecx
:00433402 8B55FC                  mov edx, dword ptr [ebp-04]
:00433405 52                      push edx
:00433406 E813E7FCFF              call 00401B1E
:0043340B 83C40C                  add esp, 0000000C
:0043340E EB12                    jmp 00433422

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004333FA(C)
|

* Possible Reference to String Resource ID=00015: ""
                                  |
:00433410 6A0F                    push 0000000F
:00433412 8B45F8                  mov eax, dword ptr [ebp-08]
:00433415 50                      push eax
:00433416 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433419 51                      push ecx
:0043341A E8FFE6FCFF              call 00401B1E
:0043341F 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004333F4(U), :0043340E(U)
|
:00433422 EBA9                    jmp 004333CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004333DA(C)
|
:00433424 8B55FC                  mov edx, dword ptr [ebp-04]
:00433427 52                      push edx
:00433428 E8233B0300              call 00466F50
:0043342D 83C404                  add esp, 00000004
:00433430 8BE5                    mov esp, ebp
:00433432 5D                      pop ebp
:00433433 C3                      ret



* Referenced by a CALL at Addresses:
|:004318FD   , :0044A691   
|
:00433434 55                      push ebp
:00433435 8BEC                    mov ebp, esp
:00433437 83EC14                  sub esp, 00000014
:0043343A 56                      push esi
:0043343B 894DF4                  mov dword ptr [ebp-0C], ecx
:0043343E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433441 E8AAC4FFFF              call 0042F8F0
:00433446 25FF000000              and eax, 000000FF
:0043344B 83F807                  cmp eax, 00000007
:0043344E 7417                    je 00433467
:00433450 33C0                    xor eax, eax
:00433452 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00433457 83E004                  and eax, 00000004
:0043345A 85C0                    test eax, eax
:0043345C 7509                    jne 00433467
:0043345E C745F000000000          mov [ebp-10], 00000000
:00433465 EB07                    jmp 0043346E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043344E(C), :0043345C(C)
|
:00433467 C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433465(U)
|
:0043346E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433471 894DFC                  mov dword ptr [ebp-04], ecx
:00433474 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433477 E83414FDFF              call 004048B0
:0043347C 8BF0                    mov esi, eax
:0043347E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433481 81E1FF000000            and ecx, 000000FF
:00433487 6BC911                  imul ecx, 00000011
:0043348A 81C180DF4A00            add ecx, 004ADF80
:00433490 E85BC8FFFF              call 0042FCF0
:00433495 25FF000000              and eax, 000000FF
:0043349A 3BF0                    cmp esi, eax
:0043349C 7332                    jnb 004334D0

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043349E 6A07                    push 00000007
:004334A0 B9800D4B00              mov ecx, 004B0D80
:004334A5 E8FFE60200              call 00461BA9

* Possible StringData Ref from Data Obj ->"ޯȤC"
                                  |
:004334AA 681C894700              push 0047891C
:004334AF 6A00                    push 00000000
:004334B1 E8B656FFFF              call 00428B6C
:004334B6 83C408                  add esp, 00000008
:004334B9 6A18                    push 00000018
:004334BB 6A27                    push 00000027
:004334BD 6A00                    push 00000000
:004334BF 6A00                    push 00000000
:004334C1 B9A8034B00              mov ecx, 004B03A8
:004334C6 E8FB120100              call 004447C6
:004334CB E9F3040000              jmp 004339C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043349C(C)
|
:004334D0 8A5508                  mov dl, byte ptr [ebp+08]
:004334D3 80E27F                  and dl, 7F
:004334D6 885508                  mov byte ptr [ebp+08], dl
:004334D9 C705600A4B0000000000    mov dword ptr [004B0A60], 00000000
:004334E3 6A00                    push 00000000
:004334E5 A1600A4B00              mov eax, dword ptr [004B0A60]
:004334EA 50                      push eax
:004334EB E854590300              call 00468E44
:004334F0 83C408                  add esp, 00000008
:004334F3 837DFC00                cmp dword ptr [ebp-04], 00000000
:004334F7 7530                    jne 00433529
:004334F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004334FC 81E1FF000000            and ecx, 000000FF
:00433502 6BC911                  imul ecx, 00000011
:00433505 81C180DF4A00            add ecx, 004ADF80
:0043350B E8A042FDFF              call 004077B0
:00433510 50                      push eax
:00433511 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433514 E8C7C1FFFF              call 0042F6E0
:00433519 50                      push eax

* Possible StringData Ref from Data Obj ->"%sϥΤF%sC"
                                  |
:0043351A 682C894700              push 0047892C
:0043351F 6A00                    push 00000000
:00433521 E84656FFFF              call 00428B6C
:00433526 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004334F7(C)
|
:00433529 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043352C 81E1FF000000            and ecx, 000000FF
:00433532 894DEC                  mov dword ptr [ebp-14], ecx
:00433535 837DEC30                cmp dword ptr [ebp-14], 00000030
:00433539 0F8700040000            ja 0043393F
:0043353F 8B45EC                  mov eax, dword ptr [ebp-14]
:00433542 33D2                    xor edx, edx
:00433544 8A904A3A4300            mov dl, byte ptr [eax+00433A4A]
:0043354A FF2495CA394300          jmp dword ptr [4*edx+004339CA]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433551 6A02                    push 00000002
:00433553 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433556 33D2                    xor edx, edx
:00433558 8A5104                  mov dl, byte ptr [ecx+04]
:0043355B 52                      push edx
:0043355C 8B4508                  mov eax, dword ptr [ebp+08]
:0043355F 25FF000000              and eax, 000000FF
:00433564 50                      push eax
:00433565 E811050000              call 00433A7B
:0043356A 83C40C                  add esp, 0000000C
:0043356D E9CD030000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433572 6A02                    push 00000002
:00433574 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433577 33D2                    xor edx, edx
:00433579 8A5104                  mov dl, byte ptr [ecx+04]
:0043357C 52                      push edx
:0043357D 8B4508                  mov eax, dword ptr [ebp+08]
:00433580 25FF000000              and eax, 000000FF
:00433585 50                      push eax
:00433586 E8AD070000              call 00433D38
:0043358B 83C40C                  add esp, 0000000C
:0043358E E9AC030000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433593 6A02                    push 00000002
:00433595 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433598 33D2                    xor edx, edx
:0043359A 8A5104                  mov dl, byte ptr [ecx+04]
:0043359D 52                      push edx
:0043359E 8B4508                  mov eax, dword ptr [ebp+08]
:004335A1 25FF000000              and eax, 000000FF
:004335A6 50                      push eax
:004335A7 E8AC0A0000              call 00434058
:004335AC 83C40C                  add esp, 0000000C
:004335AF E98B030000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004335B4 6A02                    push 00000002
:004335B6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004335B9 33D2                    xor edx, edx
:004335BB 8A5104                  mov dl, byte ptr [ecx+04]
:004335BE 52                      push edx
:004335BF 8B4508                  mov eax, dword ptr [ebp+08]
:004335C2 25FF000000              and eax, 000000FF
:004335C7 50                      push eax
:004335C8 E8B10C0000              call 0043427E
:004335CD 83C40C                  add esp, 0000000C
:004335D0 E96A030000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004335D5 6A02                    push 00000002
:004335D7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004335DA 33D2                    xor edx, edx
:004335DC 8A5104                  mov dl, byte ptr [ecx+04]
:004335DF 52                      push edx
:004335E0 8B4508                  mov eax, dword ptr [ebp+08]
:004335E3 25FF000000              and eax, 000000FF
:004335E8 50                      push eax
:004335E9 E8AA0E0000              call 00434498
:004335EE 83C40C                  add esp, 0000000C
:004335F1 E949030000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004335F6 6A02                    push 00000002
:004335F8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004335FB 33D2                    xor edx, edx
:004335FD 8A5104                  mov dl, byte ptr [ecx+04]
:00433600 52                      push edx
:00433601 8B4508                  mov eax, dword ptr [ebp+08]
:00433604 25FF000000              and eax, 000000FF
:00433609 50                      push eax
:0043360A E8B7100000              call 004346C6
:0043360F 83C40C                  add esp, 0000000C
:00433612 E928030000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433617 6A02                    push 00000002
:00433619 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043361C 33D2                    xor edx, edx
:0043361E 8A5104                  mov dl, byte ptr [ecx+04]
:00433621 52                      push edx
:00433622 8B4508                  mov eax, dword ptr [ebp+08]
:00433625 25FF000000              and eax, 000000FF
:0043362A 50                      push eax
:0043362B E8D2120000              call 00434902
:00433630 83C40C                  add esp, 0000000C
:00433633 E907030000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433638 6A02                    push 00000002
:0043363A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043363D 33D2                    xor edx, edx
:0043363F 8A5104                  mov dl, byte ptr [ecx+04]
:00433642 52                      push edx
:00433643 8B4508                  mov eax, dword ptr [ebp+08]
:00433646 25FF000000              and eax, 000000FF
:0043364B 50                      push eax
:0043364C E86F140000              call 00434AC0
:00433651 83C40C                  add esp, 0000000C
:00433654 E9E6020000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433659 6A02                    push 00000002
:0043365B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043365E 33D2                    xor edx, edx
:00433660 8A5104                  mov dl, byte ptr [ecx+04]
:00433663 52                      push edx
:00433664 8B4508                  mov eax, dword ptr [ebp+08]
:00433667 25FF000000              and eax, 000000FF
:0043366C 50                      push eax
:0043366D E80B160000              call 00434C7D
:00433672 83C40C                  add esp, 0000000C
:00433675 E9C5020000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043367A 6A02                    push 00000002
:0043367C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043367F 33D2                    xor edx, edx
:00433681 8A5104                  mov dl, byte ptr [ecx+04]
:00433684 52                      push edx
:00433685 8B4508                  mov eax, dword ptr [ebp+08]
:00433688 25FF000000              and eax, 000000FF
:0043368D 50                      push eax
:0043368E E832180000              call 00434EC5
:00433693 83C40C                  add esp, 0000000C
:00433696 E9A4020000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043369B 6A02                    push 00000002
:0043369D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004336A0 33D2                    xor edx, edx
:004336A2 8A5104                  mov dl, byte ptr [ecx+04]
:004336A5 52                      push edx
:004336A6 8B4508                  mov eax, dword ptr [ebp+08]
:004336A9 25FF000000              and eax, 000000FF
:004336AE 50                      push eax
:004336AF E8871A0000              call 0043513B
:004336B4 83C40C                  add esp, 0000000C
:004336B7 E983020000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004336BC 6A02                    push 00000002
:004336BE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004336C1 33D2                    xor edx, edx
:004336C3 8A5104                  mov dl, byte ptr [ecx+04]
:004336C6 52                      push edx
:004336C7 8B4508                  mov eax, dword ptr [ebp+08]
:004336CA 25FF000000              and eax, 000000FF
:004336CF 50                      push eax
:004336D0 E8391D0000              call 0043540E
:004336D5 83C40C                  add esp, 0000000C
:004336D8 E962020000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004336DD 6A02                    push 00000002
:004336DF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004336E2 33D2                    xor edx, edx
:004336E4 8A5104                  mov dl, byte ptr [ecx+04]
:004336E7 52                      push edx
:004336E8 8B4508                  mov eax, dword ptr [ebp+08]
:004336EB 25FF000000              and eax, 000000FF
:004336F0 50                      push eax
:004336F1 E87A220000              call 00435970
:004336F6 83C40C                  add esp, 0000000C
:004336F9 E941020000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004336FE 6A02                    push 00000002
:00433700 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433703 33D2                    xor edx, edx
:00433705 8A5104                  mov dl, byte ptr [ecx+04]
:00433708 52                      push edx
:00433709 8B4508                  mov eax, dword ptr [ebp+08]
:0043370C 25FF000000              and eax, 000000FF
:00433711 50                      push eax
:00433712 E873240000              call 00435B8A
:00433717 83C40C                  add esp, 0000000C
:0043371A E920020000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043371F 6A02                    push 00000002
:00433721 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433724 33D2                    xor edx, edx
:00433726 8A5104                  mov dl, byte ptr [ecx+04]
:00433729 52                      push edx
:0043372A 8B4508                  mov eax, dword ptr [ebp+08]
:0043372D 25FF000000              and eax, 000000FF
:00433732 50                      push eax
:00433733 E82D260000              call 00435D65
:00433738 83C40C                  add esp, 0000000C
:0043373B E9FF010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433740 6A02                    push 00000002
:00433742 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433745 33D2                    xor edx, edx
:00433747 8A5104                  mov dl, byte ptr [ecx+04]
:0043374A 52                      push edx
:0043374B 8B4508                  mov eax, dword ptr [ebp+08]
:0043374E 25FF000000              and eax, 000000FF
:00433753 50                      push eax
:00433754 E863290000              call 004360BC
:00433759 83C40C                  add esp, 0000000C
:0043375C E9DE010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433761 6A02                    push 00000002
:00433763 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433766 33D2                    xor edx, edx
:00433768 8A5104                  mov dl, byte ptr [ecx+04]
:0043376B 52                      push edx
:0043376C 8B4508                  mov eax, dword ptr [ebp+08]
:0043376F 25FF000000              and eax, 000000FF
:00433774 50                      push eax
:00433775 E8162C0000              call 00436390
:0043377A 83C40C                  add esp, 0000000C
:0043377D E9BD010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433782 6A02                    push 00000002
:00433784 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433787 33D2                    xor edx, edx
:00433789 8A5104                  mov dl, byte ptr [ecx+04]
:0043378C 52                      push edx
:0043378D 8B4508                  mov eax, dword ptr [ebp+08]
:00433790 25FF000000              and eax, 000000FF
:00433795 50                      push eax
:00433796 E85A300000              call 004367F5
:0043379B 83C40C                  add esp, 0000000C
:0043379E E99C010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004337A3 6A02                    push 00000002
:004337A5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004337A8 33D2                    xor edx, edx
:004337AA 8A5104                  mov dl, byte ptr [ecx+04]
:004337AD 52                      push edx
:004337AE 8B4508                  mov eax, dword ptr [ebp+08]
:004337B1 25FF000000              and eax, 000000FF
:004337B6 50                      push eax
:004337B7 E8BE320000              call 00436A7A
:004337BC 83C40C                  add esp, 0000000C
:004337BF E97B010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004337C4 6A02                    push 00000002
:004337C6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004337C9 33D2                    xor edx, edx
:004337CB 8A5104                  mov dl, byte ptr [ecx+04]
:004337CE 52                      push edx
:004337CF 8B4508                  mov eax, dword ptr [ebp+08]
:004337D2 25FF000000              and eax, 000000FF
:004337D7 50                      push eax
:004337D8 E89D350000              call 00436D7A
:004337DD 83C40C                  add esp, 0000000C
:004337E0 E95A010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004337E5 6A02                    push 00000002
:004337E7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004337EA 33D2                    xor edx, edx
:004337EC 8A5104                  mov dl, byte ptr [ecx+04]
:004337EF 52                      push edx
:004337F0 8B4508                  mov eax, dword ptr [ebp+08]
:004337F3 25FF000000              and eax, 000000FF
:004337F8 50                      push eax
:004337F9 E875380000              call 00437073
:004337FE 83C40C                  add esp, 0000000C
:00433801 E939010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433806 6A02                    push 00000002
:00433808 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043380B 33D2                    xor edx, edx
:0043380D 8A5104                  mov dl, byte ptr [ecx+04]
:00433810 52                      push edx
:00433811 8B4508                  mov eax, dword ptr [ebp+08]
:00433814 25FF000000              and eax, 000000FF
:00433819 50                      push eax
:0043381A E8C63B0000              call 004373E5
:0043381F 83C40C                  add esp, 0000000C
:00433822 E918010000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433827 6A02                    push 00000002
:00433829 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043382C 33D2                    xor edx, edx
:0043382E 8A5104                  mov dl, byte ptr [ecx+04]
:00433831 52                      push edx
:00433832 8B4508                  mov eax, dword ptr [ebp+08]
:00433835 25FF000000              and eax, 000000FF
:0043383A 50                      push eax
:0043383B E8FA400000              call 0043793A
:00433840 83C40C                  add esp, 0000000C
:00433843 E9F7000000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433848 6A02                    push 00000002
:0043384A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043384D 33D2                    xor edx, edx
:0043384F 8A5104                  mov dl, byte ptr [ecx+04]
:00433852 52                      push edx
:00433853 8B4508                  mov eax, dword ptr [ebp+08]
:00433856 25FF000000              and eax, 000000FF
:0043385B 50                      push eax
:0043385C E873420000              call 00437AD4
:00433861 83C40C                  add esp, 0000000C
:00433864 E9D6000000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433869 6A02                    push 00000002
:0043386B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043386E 33D2                    xor edx, edx
:00433870 8A5104                  mov dl, byte ptr [ecx+04]
:00433873 52                      push edx
:00433874 8B4508                  mov eax, dword ptr [ebp+08]
:00433877 25FF000000              and eax, 000000FF
:0043387C 50                      push eax
:0043387D E8BD440000              call 00437D3F
:00433882 83C40C                  add esp, 0000000C
:00433885 E9B5000000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043388A 6A02                    push 00000002
:0043388C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043388F 33D2                    xor edx, edx
:00433891 8A5104                  mov dl, byte ptr [ecx+04]
:00433894 52                      push edx
:00433895 8B4508                  mov eax, dword ptr [ebp+08]
:00433898 25FF000000              and eax, 000000FF
:0043389D 50                      push eax
:0043389E E81D460000              call 00437EC0
:004338A3 83C40C                  add esp, 0000000C
:004338A6 E994000000              jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004338AB 6A02                    push 00000002
:004338AD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004338B0 33D2                    xor edx, edx
:004338B2 8A5104                  mov dl, byte ptr [ecx+04]
:004338B5 52                      push edx
:004338B6 8B4508                  mov eax, dword ptr [ebp+08]
:004338B9 25FF000000              and eax, 000000FF
:004338BE 50                      push eax
:004338BF E842490000              call 00438206
:004338C4 83C40C                  add esp, 0000000C
:004338C7 EB76                    jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004338C9 6A02                    push 00000002
:004338CB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004338CE 33D2                    xor edx, edx
:004338D0 8A5104                  mov dl, byte ptr [ecx+04]
:004338D3 52                      push edx
:004338D4 8B4508                  mov eax, dword ptr [ebp+08]
:004338D7 25FF000000              and eax, 000000FF
:004338DC 50                      push eax
:004338DD E8034D0000              call 004385E5
:004338E2 83C40C                  add esp, 0000000C
:004338E5 EB58                    jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004338E7 6A02                    push 00000002
:004338E9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004338EC 33D2                    xor edx, edx
:004338EE 8A5104                  mov dl, byte ptr [ecx+04]
:004338F1 52                      push edx
:004338F2 8B4508                  mov eax, dword ptr [ebp+08]
:004338F5 25FF000000              and eax, 000000FF
:004338FA 50                      push eax
:004338FB E82E4F0000              call 0043882E
:00433900 83C40C                  add esp, 0000000C
:00433903 EB3A                    jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433905 6A02                    push 00000002
:00433907 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043390A 33D2                    xor edx, edx
:0043390C 8A5104                  mov dl, byte ptr [ecx+04]
:0043390F 52                      push edx
:00433910 8B4508                  mov eax, dword ptr [ebp+08]
:00433913 25FF000000              and eax, 000000FF
:00433918 50                      push eax
:00433919 E8DA500000              call 004389F8
:0043391E 83C40C                  add esp, 0000000C
:00433921 EB1C                    jmp 0043393F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433923 6A02                    push 00000002
:00433925 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433928 33D2                    xor edx, edx
:0043392A 8A5104                  mov dl, byte ptr [ecx+04]
:0043392D 52                      push edx
:0043392E 8B4508                  mov eax, dword ptr [ebp+08]
:00433931 25FF000000              and eax, 000000FF
:00433936 50                      push eax
:00433937 E85A530000              call 00438C96
:0043393C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433539(C), :0043356D(U), :0043358E(U), :004335AF(U), :004335D0(U)
|:004335F1(U), :00433612(U), :00433633(U), :00433654(U), :00433675(U)
|:00433696(U), :004336B7(U), :004336D8(U), :004336F9(U), :0043371A(U)
|:0043373B(U), :0043375C(U), :0043377D(U), :0043379E(U), :004337BF(U)
|:004337E0(U), :00433801(U), :00433822(U), :00433843(U), :00433864(U)
|:00433885(U), :004338A6(U), :004338C7(U), :004338E5(U), :00433903(U)
|:00433921(U)
|
:0043393F 833D20024B0000          cmp dword ptr [004B0220], 00000000
:00433946 7460                    je 004339A8
:00433948 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043394B 81E1FF000000            and ecx, 000000FF
:00433951 6BC911                  imul ecx, 00000011
:00433954 81C180DF4A00            add ecx, 004ADF80
:0043395A E891C3FFFF              call 0042FCF0
:0043395F 25FF000000              and eax, 000000FF
:00433964 50                      push eax
:00433965 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433968 E8430FFDFF              call 004048B0
:0043396D 50                      push eax
:0043396E E851E60200              call 00461FC4
:00433973 83C408                  add esp, 00000008
:00433976 8945F8                  mov dword ptr [ebp-08], eax
:00433979 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043397C 51                      push ecx
:0043397D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433980 E83870FFFF              call 0042A9BD
:00433985 6880000000              push 00000080
:0043398A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043398D E887BAFFFF              call 0042F419
:00433992 C70520024B0000000000    mov dword ptr [004B0220], 00000000
:0043399C 6A00                    push 00000000
:0043399E B9A8034B00              mov ecx, 004B03A8
:004339A3 E8F42D0100              call 0044679C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433946(C)
|
:004339A8 C705600A4B0001000000    mov dword ptr [004B0A60], 00000001
:004339B2 6A00                    push 00000000
:004339B4 8B15600A4B00            mov edx, dword ptr [004B0A60]
:004339BA 52                      push edx
:004339BB E884540300              call 00468E44
:004339C0 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004334CB(U)
|
:004339C3 5E                      pop esi
:004339C4 8BE5                    mov esp, ebp
:004339C6 5D                      pop ebp
:004339C7 C20400                  ret 0004



:004339CA 51354300                DWORD 00433551
:004339CE 72354300                DWORD 00433572
:004339D2 93354300                DWORD 00433593
:004339D6 B4354300                DWORD 004335B4
:004339DA D5354300                DWORD 004335D5
:004339DE F6354300                DWORD 004335F6
:004339E2 17364300                DWORD 00433617
:004339E6 38364300                DWORD 00433638
:004339EA 59364300                DWORD 00433659
:004339EE 7A364300                DWORD 0043367A
:004339F2 9B364300                DWORD 0043369B
:004339F6 BC364300                DWORD 004336BC
:004339FA DD364300                DWORD 004336DD
:004339FE FE364300                DWORD 004336FE
:00433A02 1F374300                DWORD 0043371F
:00433A06 40374300                DWORD 00433740
:00433A0A 61374300                DWORD 00433761
:00433A0E 82374300                DWORD 00433782
:00433A12 A3374300                DWORD 004337A3
:00433A16 C4374300                DWORD 004337C4
:00433A1A E5374300                DWORD 004337E5
:00433A1E 06384300                DWORD 00433806
:00433A22 27384300                DWORD 00433827
:00433A26 48384300                DWORD 00433848
:00433A2A 69384300                DWORD 00433869
:00433A2E 8A384300                DWORD 0043388A
:00433A32 AB384300                DWORD 004338AB
:00433A36 C9384300                DWORD 004338C9
:00433A3A E7384300                DWORD 004338E7
:00433A3E 05394300                DWORD 00433905
:00433A42 23394300                DWORD 00433923
:00433A46 3F394300                DWORD 0043393F


:00433A4A 0000                    add byte ptr [eax], al
:00433A4C 0101                    add dword ptr [ecx], eax
:00433A4E 0203                    add al, byte ptr [ebx]
:00433A50 030404                  add eax, dword ptr [esp+eax]
:00433A53 0506070708              add eax, 08070706
:00433A58 0909                    or dword ptr [ecx], ecx
:00433A5A 0909                    or dword ptr [ecx], ecx
:00433A5C 090A                    or dword ptr [edx], ecx
:00433A5E 0B0C0C                  or ecx, dword ptr [esp+ecx]
:00433A61 0D0E0F1011              or eax, 11100F0E
:00433A66 1213                    adc dl, byte ptr [ebx]
:00433A68 1414                    adc al, 14
:00433A6A 1516161717              adc eax, 17171616
:00433A6F 1819                    sbb byte ptr [ecx], bl
:00433A71 1919                    sbb dword ptr [ecx], ebx
:00433A73 191A                    sbb dword ptr [edx], ebx
:00433A75 1A1B                    sbb bl, byte ptr [ebx]
:00433A77 1C1D                    sbb al, 1D
:00433A79 1E                      push ds
:00433A7A 1E                      push ds

* Referenced by a CALL at Address:
|:00433565   
|
:00433A7B 55                      push ebp
:00433A7C 8BEC                    mov ebp, esp
:00433A7E 83EC20                  sub esp, 00000020
:00433A81 C645FCFF                mov [ebp-04], FF
:00433A85 8B4508                  mov eax, dword ptr [ebp+08]
:00433A88 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00433A8A B906000000              mov ecx, 00000006
:00433A8F F7F1                    div ecx
:00433A91 8845F4                  mov byte ptr [ebp-0C], al
:00433A94 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433A97 6BC911                  imul ecx, 00000011
:00433A9A 81C180DF4A00            add ecx, 004ADF80
:00433AA0 E84BBEFFFF              call 0042F8F0
:00433AA5 8845EC                  mov byte ptr [ebp-14], al
:00433AA8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433AAB 6BC911                  imul ecx, 00000011
:00433AAE 81C180DF4A00            add ecx, 004ADF80
:00433AB4 E8273DFDFF              call 004077E0
:00433AB9 8845F0                  mov byte ptr [ebp-10], al
:00433ABC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433ABF 6BC924                  imul ecx, 00000024
:00433AC2 81C108F54A00            add ecx, 004AF508
:00433AC8 E823BEFFFF              call 0042F8F0
:00433ACD 25FF000000              and eax, 000000FF
:00433AD2 83F807                  cmp eax, 00000007
:00433AD5 7418                    je 00433AEF
:00433AD7 33D2                    xor edx, edx
:00433AD9 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00433ADF 83E204                  and edx, 00000004
:00433AE2 85D2                    test edx, edx
:00433AE4 7509                    jne 00433AEF
:00433AE6 C745E000000000          mov [ebp-20], 00000000
:00433AED EB07                    jmp 00433AF6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433AD5(C), :00433AE4(C)
|
:00433AEF C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433AED(U)
|
:00433AF6 8B45E0                  mov eax, dword ptr [ebp-20]
:00433AF9 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433AFC 68FF000000              push 000000FF
:00433B01 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433B04 51                      push ecx
:00433B05 8B550C                  mov edx, dword ptr [ebp+0C]
:00433B08 52                      push edx
:00433B09 8B4508                  mov eax, dword ptr [ebp+08]
:00433B0C 50                      push eax
:00433B0D E8D4C5FFFF              call 004300E6
:00433B12 83C410                  add esp, 00000010
:00433B15 85C0                    test eax, eax
:00433B17 7505                    jne 00433B1E
:00433B19 E998010000              jmp 00433CB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433B17(C)
|
:00433B1E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00433B21 81E1FF000000            and ecx, 000000FF
:00433B27 85C9                    test ecx, ecx
:00433B29 740C                    je 00433B37
:00433B2B 8A55EC                  mov dl, byte ptr [ebp-14]
:00433B2E 52                      push edx
:00433B2F E886010000              call 00433CBA
:00433B34 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433B29(C)
|
:00433B37 6A00                    push 00000000
:00433B39 8B45F0                  mov eax, dword ptr [ebp-10]
:00433B3C 25FF000000              and eax, 000000FF
:00433B41 0C80                    or al, 80
:00433B43 50                      push eax
:00433B44 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00433B47 51                      push ecx
:00433B48 B9A8034B00              mov ecx, 004B03A8
:00433B4D E8A6210100              call 00445CF8
:00433B52 8845FC                  mov byte ptr [ebp-04], al
:00433B55 8B55FC                  mov edx, dword ptr [ebp-04]
:00433B58 81E2FF000000            and edx, 000000FF
:00433B5E 81FAFF000000            cmp edx, 000000FF
:00433B64 0F844C010000            je 00433CB6
:00433B6A 8A45FC                  mov al, byte ptr [ebp-04]
:00433B6D 50                      push eax
:00433B6E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00433B71 51                      push ecx
:00433B72 E8D5F0FFFF              call 00432C4C
:00433B77 83C408                  add esp, 00000008
:00433B7A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433B7D 81E1FF000000            and ecx, 000000FF
:00433B83 6BC924                  imul ecx, 00000024
:00433B86 81C108F54A00            add ecx, 004AF508
:00433B8C E80F58FFFF              call 004293A0
:00433B91 668B10                  mov dx, word ptr [eax]
:00433B94 668955E8                mov word ptr [ebp-18], dx
:00433B98 837DF800                cmp dword ptr [ebp-08], 00000000
:00433B9C 7421                    je 00433BBF
:00433B9E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433BA1 6BC911                  imul ecx, 00000011
:00433BA4 81C180DF4A00            add ecx, 004ADF80
:00433BAA E8013CFDFF              call 004077B0
:00433BAF 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00433BB0 683C894700              push 0047893C
:00433BB5 6A00                    push 00000000
:00433BB7 E8B04FFFFF              call 00428B6C
:00433BBC 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433B9C(C)
|
:00433BBF 6A00                    push 00000000
:00433BC1 8A4508                  mov al, byte ptr [ebp+08]
:00433BC4 50                      push eax
:00433BC5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433BC8 81E1FF000000            and ecx, 000000FF
:00433BCE C1E104                  shl ecx, 04
:00433BD1 8B55F0                  mov edx, dword ptr [ebp-10]
:00433BD4 81E2FF000000            and edx, 000000FF
:00433BDA 0BCA                    or ecx, edx
:00433BDC 51                      push ecx
:00433BDD 8A4510                  mov al, byte ptr [ebp+10]
:00433BE0 50                      push eax
:00433BE1 8A4DFC                  mov cl, byte ptr [ebp-04]
:00433BE4 51                      push ecx
:00433BE5 8A550C                  mov dl, byte ptr [ebp+0C]
:00433BE8 52                      push edx
:00433BE9 B930024B00              mov ecx, 004B0230
:00433BEE E8AB8F0000              call 0043CB9E
:00433BF3 8B45EC                  mov eax, dword ptr [ebp-14]
:00433BF6 25FF000000              and eax, 000000FF
:00433BFB 85C0                    test eax, eax
:00433BFD 0F8490000000            je 00433C93

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433C03 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00433C08 6A11                    push 00000011
:00433C0A 68B8014B00              push 004B01B8
:00433C0F E834EC0200              call 00462848
:00433C14 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433C17 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433C1C 68FF000000              push 000000FF
:00433C21 6A00                    push 00000000
:00433C23 68B8014B00              push 004B01B8
:00433C28 8A4DEC                  mov cl, byte ptr [ebp-14]
:00433C2B 51                      push ecx
:00433C2C 8A55FC                  mov dl, byte ptr [ebp-04]
:00433C2F 52                      push edx
:00433C30 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433C33 6BC924                  imul ecx, 00000024
:00433C36 81C108F54A00            add ecx, 004AF508
:00433C3C E8BF9A0100              call 0044D700
:00433C41 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433C91(U)
|
:00433C44 8B45E4                  mov eax, dword ptr [ebp-1C]
:00433C47 33C9                    xor ecx, ecx
:00433C49 8A08                    mov cl, byte ptr [eax]
:00433C4B 81F9FF000000            cmp ecx, 000000FF
:00433C51 7440                    je 00433C93
:00433C53 6A01                    push 00000001
:00433C55 8A5508                  mov dl, byte ptr [ebp+08]
:00433C58 52                      push edx
:00433C59 8B45F4                  mov eax, dword ptr [ebp-0C]
:00433C5C 25FF000000              and eax, 000000FF
:00433C61 C1E004                  shl eax, 04
:00433C64 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433C67 81E1FF000000            and ecx, 000000FF
:00433C6D 0BC1                    or eax, ecx
:00433C6F 50                      push eax
:00433C70 8A5510                  mov dl, byte ptr [ebp+10]
:00433C73 52                      push edx
:00433C74 8B45E4                  mov eax, dword ptr [ebp-1C]
:00433C77 8A08                    mov cl, byte ptr [eax]
:00433C79 51                      push ecx
:00433C7A 8A550C                  mov dl, byte ptr [ebp+0C]
:00433C7D 52                      push edx
:00433C7E B930024B00              mov ecx, 004B0230
:00433C83 E8168F0000              call 0043CB9E
:00433C88 8B45E4                  mov eax, dword ptr [ebp-1C]
:00433C8B 83C001                  add eax, 00000001
:00433C8E 8945E4                  mov dword ptr [ebp-1C], eax
:00433C91 EBB1                    jmp 00433C44

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433BFD(C), :00433C51(C)
|
:00433C93 C70520024B0001000000    mov dword ptr [004B0220], 00000001
:00433C9D 837D0801                cmp dword ptr [ebp+08], 00000001
:00433CA1 7513                    jne 00433CB6

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433CA3 6A02                    push 00000002
:00433CA5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433CA8 6BC924                  imul ecx, 00000024
:00433CAB 81C108F54A00            add ecx, 004AF508
:00433CB1 E88A5E0000              call 00439B40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433B19(U), :00433B64(C), :00433CA1(C)
|
:00433CB6 8BE5                    mov esp, ebp
:00433CB8 5D                      pop ebp
:00433CB9 C3                      ret



* Referenced by a CALL at Addresses:
|:00433B2F   , :00433DEC   , :0043410C   , :00434546   , :0043476D   
|:00434F6C   , :00434F78   , :00435A17   , :00435C5F   , :00435E0C   
|:00436163   , :00436437   , :00436B21   , :0043711A   , :0043748C   
|
:00433CBA 55                      push ebp
:00433CBB 8BEC                    mov ebp, esp
:00433CBD 51                      push ecx
:00433CBE 8B4508                  mov eax, dword ptr [ebp+08]
:00433CC1 25FF000000              and eax, 000000FF
:00433CC6 8945FC                  mov dword ptr [ebp-04], eax
:00433CC9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433CCC 83E901                  sub ecx, 00000001
:00433CCF 894DFC                  mov dword ptr [ebp-04], ecx
:00433CD2 837DFC06                cmp dword ptr [ebp-04], 00000006
:00433CD6 7734                    ja 00433D0C
:00433CD8 8B55FC                  mov edx, dword ptr [ebp-04]
:00433CDB FF24951C3D4300          jmp dword ptr [4*edx+00433D1C]
:00433CE2 6A01                    push 00000001
:00433CE4 B9A8034B00              mov ecx, 004B03A8
:00433CE9 E8AE2A0100              call 0044679C
:00433CEE EB28                    jmp 00433D18

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00433CF0 6A02                    push 00000002
:00433CF2 B9A8034B00              mov ecx, 004B03A8
:00433CF7 E8A02A0100              call 0044679C
:00433CFC EB1A                    jmp 00433D18

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00433CFE 6A03                    push 00000003
:00433D00 B9A8034B00              mov ecx, 004B03A8
:00433D05 E8922A0100              call 0044679C
:00433D0A EB0C                    jmp 00433D18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433CD6(C)
|
:00433D0C 6A00                    push 00000000
:00433D0E B9A8034B00              mov ecx, 004B03A8
:00433D13 E8842A0100              call 0044679C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433CEE(U), :00433CFC(U), :00433D0A(U)
|
:00433D18 8BE5                    mov esp, ebp
:00433D1A 5D                      pop ebp
:00433D1B C3                      ret



:00433D1C E23C4300                DWORD 00433CE2
:00433D20 F03C4300                DWORD 00433CF0
:00433D24 E23C4300                DWORD 00433CE2
:00433D28 F03C4300                DWORD 00433CF0
:00433D2C FE3C4300                DWORD 00433CFE
:00433D30 FE3C4300                DWORD 00433CFE
:00433D34 FE3C4300                DWORD 00433CFE



* Referenced by a CALL at Address:
|:00433586   
|
:00433D38 55                      push ebp
:00433D39 8BEC                    mov ebp, esp
:00433D3B 83EC24                  sub esp, 00000024
:00433D3E C645FCFF                mov [ebp-04], FF
:00433D42 8B4508                  mov eax, dword ptr [ebp+08]
:00433D45 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00433D47 B906000000              mov ecx, 00000006
:00433D4C F7F1                    div ecx
:00433D4E 8845F4                  mov byte ptr [ebp-0C], al
:00433D51 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433D54 6BC911                  imul ecx, 00000011
:00433D57 81C180DF4A00            add ecx, 004ADF80
:00433D5D E88EBBFFFF              call 0042F8F0
:00433D62 8845EC                  mov byte ptr [ebp-14], al
:00433D65 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433D68 6BC911                  imul ecx, 00000011
:00433D6B 81C180DF4A00            add ecx, 004ADF80
:00433D71 E86A3AFDFF              call 004077E0
:00433D76 8845F0                  mov byte ptr [ebp-10], al
:00433D79 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433D7C 6BC924                  imul ecx, 00000024
:00433D7F 81C108F54A00            add ecx, 004AF508
:00433D85 E866BBFFFF              call 0042F8F0
:00433D8A 25FF000000              and eax, 000000FF
:00433D8F 83F807                  cmp eax, 00000007
:00433D92 7418                    je 00433DAC
:00433D94 33D2                    xor edx, edx
:00433D96 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00433D9C 83E204                  and edx, 00000004
:00433D9F 85D2                    test edx, edx
:00433DA1 7509                    jne 00433DAC
:00433DA3 C745DC00000000          mov [ebp-24], 00000000
:00433DAA EB07                    jmp 00433DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433D92(C), :00433DA1(C)
|
:00433DAC C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433DAA(U)
|
:00433DB3 8B45DC                  mov eax, dword ptr [ebp-24]
:00433DB6 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433DB9 68FF000000              push 000000FF
:00433DBE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433DC1 51                      push ecx
:00433DC2 8B550C                  mov edx, dword ptr [ebp+0C]
:00433DC5 52                      push edx
:00433DC6 8B4508                  mov eax, dword ptr [ebp+08]
:00433DC9 50                      push eax
:00433DCA E817C3FFFF              call 004300E6
:00433DCF 83C410                  add esp, 00000010
:00433DD2 85C0                    test eax, eax
:00433DD4 7505                    jne 00433DDB
:00433DD6 E979020000              jmp 00434054

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433DD4(C), :00433E62(U)
|
:00433DDB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00433DDE 81E1FF000000            and ecx, 000000FF
:00433DE4 85C9                    test ecx, ecx
:00433DE6 740C                    je 00433DF4
:00433DE8 8A55EC                  mov dl, byte ptr [ebp-14]
:00433DEB 52                      push edx
:00433DEC E8C9FEFFFF              call 00433CBA
:00433DF1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433DE6(C)
|
:00433DF4 6A00                    push 00000000
:00433DF6 8B45F0                  mov eax, dword ptr [ebp-10]
:00433DF9 25FF000000              and eax, 000000FF
:00433DFE 0C80                    or al, 80
:00433E00 50                      push eax
:00433E01 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00433E04 51                      push ecx
:00433E05 B9A8034B00              mov ecx, 004B03A8
:00433E0A E8E91E0100              call 00445CF8
:00433E0F 8845FC                  mov byte ptr [ebp-04], al
:00433E12 8B55FC                  mov edx, dword ptr [ebp-04]
:00433E15 81E2FF000000            and edx, 000000FF
:00433E1B 81FAFF000000            cmp edx, 000000FF
:00433E21 0F842D020000            je 00434054
:00433E27 837D0803                cmp dword ptr [ebp+08], 00000003
:00433E2B 753A                    jne 00433E67
:00433E2D 8B45FC                  mov eax, dword ptr [ebp-04]
:00433E30 25FF000000              and eax, 000000FF
:00433E35 85C0                    test eax, eax
:00433E37 740E                    je 00433E47
:00433E39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E3C 81E1FF000000            and ecx, 000000FF
:00433E42 83F91E                  cmp ecx, 0000001E
:00433E45 7520                    jne 00433E67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433E37(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00433E47 6A07                    push 00000007
:00433E49 B9800D4B00              mov ecx, 004B0D80
:00433E4E E856DD0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oرoNޤjNC"
                                  |
:00433E53 6840894700              push 00478940
:00433E58 6A00                    push 00000000
:00433E5A E80D4DFFFF              call 00428B6C
:00433E5F 83C408                  add esp, 00000008
:00433E62 E974FFFFFF              jmp 00433DDB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433E2B(C), :00433E45(C)
|
:00433E67 8A55FC                  mov dl, byte ptr [ebp-04]
:00433E6A 52                      push edx
:00433E6B 8A450C                  mov al, byte ptr [ebp+0C]
:00433E6E 50                      push eax
:00433E6F E8D8EDFFFF              call 00432C4C
:00433E74 83C408                  add esp, 00000008
:00433E77 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E7A 81E1FF000000            and ecx, 000000FF
:00433E80 6BC924                  imul ecx, 00000024
:00433E83 81C108F54A00            add ecx, 004AF508
:00433E89 E81255FFFF              call 004293A0
:00433E8E 668B08                  mov cx, word ptr [eax]
:00433E91 66894DE8                mov word ptr [ebp-18], cx
:00433E95 837DF800                cmp dword ptr [ebp-08], 00000000
:00433E99 7421                    je 00433EBC
:00433E9B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433E9E 6BC911                  imul ecx, 00000011
:00433EA1 81C180DF4A00            add ecx, 004ADF80
:00433EA7 E80439FDFF              call 004077B0
:00433EAC 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00433EAD 685C894700              push 0047895C
:00433EB2 6A00                    push 00000000
:00433EB4 E8B34CFFFF              call 00428B6C
:00433EB9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433E99(C)
|
:00433EBC 6A00                    push 00000000
:00433EBE 8A5508                  mov dl, byte ptr [ebp+08]
:00433EC1 52                      push edx
:00433EC2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00433EC5 25FF000000              and eax, 000000FF
:00433ECA C1E004                  shl eax, 04
:00433ECD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433ED0 81E1FF000000            and ecx, 000000FF
:00433ED6 0BC1                    or eax, ecx
:00433ED8 50                      push eax
:00433ED9 8A5510                  mov dl, byte ptr [ebp+10]
:00433EDC 52                      push edx
:00433EDD 8A45FC                  mov al, byte ptr [ebp-04]
:00433EE0 50                      push eax
:00433EE1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00433EE4 51                      push ecx
:00433EE5 B930024B00              mov ecx, 004B0230
:00433EEA E8AF8C0000              call 0043CB9E
:00433EEF 8B55EC                  mov edx, dword ptr [ebp-14]
:00433EF2 81E2FF000000            and edx, 000000FF
:00433EF8 85D2                    test edx, edx
:00433EFA 0F848F000000            je 00433F8F

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433F00 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00433F05 6A11                    push 00000011
:00433F07 68B8014B00              push 004B01B8
:00433F0C E837E90200              call 00462848
:00433F11 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433F14 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433F19 68FF000000              push 000000FF
:00433F1E 6A00                    push 00000000
:00433F20 68B8014B00              push 004B01B8
:00433F25 8A45EC                  mov al, byte ptr [ebp-14]
:00433F28 50                      push eax
:00433F29 8A4DFC                  mov cl, byte ptr [ebp-04]
:00433F2C 51                      push ecx
:00433F2D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433F30 6BC924                  imul ecx, 00000024
:00433F33 81C108F54A00            add ecx, 004AF508
:00433F39 E8C2970100              call 0044D700
:00433F3E 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433F8D(U)
|
:00433F41 8B55E4                  mov edx, dword ptr [ebp-1C]
:00433F44 33C0                    xor eax, eax
:00433F46 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00433F48 3DFF000000              cmp eax, 000000FF
:00433F4D 7440                    je 00433F8F
:00433F4F 6A01                    push 00000001
:00433F51 8A4D08                  mov cl, byte ptr [ebp+08]
:00433F54 51                      push ecx
:00433F55 8B55F4                  mov edx, dword ptr [ebp-0C]
:00433F58 81E2FF000000            and edx, 000000FF
:00433F5E C1E204                  shl edx, 04
:00433F61 8B45F0                  mov eax, dword ptr [ebp-10]
:00433F64 25FF000000              and eax, 000000FF
:00433F69 0BD0                    or edx, eax
:00433F6B 52                      push edx
:00433F6C 8A4D10                  mov cl, byte ptr [ebp+10]
:00433F6F 51                      push ecx
:00433F70 8B55E4                  mov edx, dword ptr [ebp-1C]
:00433F73 8A02                    mov al, byte ptr [edx]
:00433F75 50                      push eax
:00433F76 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00433F79 51                      push ecx
:00433F7A B930024B00              mov ecx, 004B0230
:00433F7F E81A8C0000              call 0043CB9E
:00433F84 8B55E4                  mov edx, dword ptr [ebp-1C]
:00433F87 83C201                  add edx, 00000001
:00433F8A 8955E4                  mov dword ptr [ebp-1C], edx
:00433F8D EBB2                    jmp 00433F41

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433EFA(C), :00433F4D(C)
|
:00433F8F 837D0802                cmp dword ptr [ebp+08], 00000002
:00433F93 757C                    jne 00434011
:00433F95 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433F98 6BC924                  imul ecx, 00000024
:00433F9B 81C108F54A00            add ecx, 004AF508
:00433FA1 E8CA5A0000              call 00439A70
:00433FA6 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00433FA8 B90A000000              mov ecx, 0000000A
:00433FAD F7F1                    div ecx
:00433FAF 8945E0                  mov dword ptr [ebp-20], eax
:00433FB2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433FB5 6BC924                  imul ecx, 00000024
:00433FB8 81C108F54A00            add ecx, 004AF508
:00433FBE E8AD08FDFF              call 00404870
:00433FC3 3B45E0                  cmp eax, dword ptr [ebp-20]
:00433FC6 7717                    ja 00433FDF
:00433FC8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433FCB 6BC924                  imul ecx, 00000024
:00433FCE 81C108F54A00            add ecx, 004AF508
:00433FD4 E89708FDFF              call 00404870
:00433FD9 83E801                  sub eax, 00000001
:00433FDC 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433FC6(C)
|
:00433FDF 8B55E0                  mov edx, dword ptr [ebp-20]
:00433FE2 52                      push edx
:00433FE3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00433FE6 6BC924                  imul ecx, 00000024
:00433FE9 81C108F54A00            add ecx, 004AF508
:00433FEF E87C08FDFF              call 00404870
:00433FF4 50                      push eax
:00433FF5 E8CADF0200              call 00461FC4
:00433FFA 83C408                  add esp, 00000008
:00433FFD 50                      push eax
:00433FFE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434001 6BC924                  imul ecx, 00000024
:00434004 81C108F54A00            add ecx, 004AF508
:0043400A E85169FFFF              call 0042A960
:0043400F EB13                    jmp 00434024

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433F93(C)
|
:00434011 6A00                    push 00000000
:00434013 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434016 6BC924                  imul ecx, 00000024
:00434019 81C108F54A00            add ecx, 004AF508
:0043401F E83C69FFFF              call 0042A960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043400F(U)
|
:00434024 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434027 6BC924                  imul ecx, 00000024
:0043402A 81C108F54A00            add ecx, 004AF508
:00434030 E8A1B4FFFF              call 0042F4D6
:00434035 85C0                    test eax, eax
:00434037 7411                    je 0043404A
:00434039 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043403C 6BC924                  imul ecx, 00000024
:0043403F 81C108F54A00            add ecx, 004AF508
:00434045 E82A86FFFF              call 0042C674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434037(C)
|
:0043404A C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433DD6(U), :00433E21(C)
|
:00434054 8BE5                    mov esp, ebp
:00434056 5D                      pop ebp
:00434057 C3                      ret



* Referenced by a CALL at Address:
|:004335A7   
|
:00434058 55                      push ebp
:00434059 8BEC                    mov ebp, esp
:0043405B 83EC20                  sub esp, 00000020
:0043405E C645FCFF                mov [ebp-04], FF
:00434062 8B4508                  mov eax, dword ptr [ebp+08]
:00434065 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00434067 B906000000              mov ecx, 00000006
:0043406C F7F1                    div ecx
:0043406E 8845F4                  mov byte ptr [ebp-0C], al
:00434071 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434074 6BC911                  imul ecx, 00000011
:00434077 81C180DF4A00            add ecx, 004ADF80
:0043407D E86EB8FFFF              call 0042F8F0
:00434082 8845EC                  mov byte ptr [ebp-14], al
:00434085 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434088 6BC911                  imul ecx, 00000011
:0043408B 81C180DF4A00            add ecx, 004ADF80
:00434091 E84A37FDFF              call 004077E0
:00434096 8845F0                  mov byte ptr [ebp-10], al
:00434099 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043409C 6BC924                  imul ecx, 00000024
:0043409F 81C108F54A00            add ecx, 004AF508
:004340A5 E846B8FFFF              call 0042F8F0
:004340AA 25FF000000              and eax, 000000FF
:004340AF 83F807                  cmp eax, 00000007
:004340B2 7418                    je 004340CC
:004340B4 33D2                    xor edx, edx
:004340B6 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:004340BC 83E204                  and edx, 00000004
:004340BF 85D2                    test edx, edx
:004340C1 7509                    jne 004340CC
:004340C3 C745E000000000          mov [ebp-20], 00000000
:004340CA EB07                    jmp 004340D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004340B2(C), :004340C1(C)
|
:004340CC C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004340CA(U)
|
:004340D3 8B45E0                  mov eax, dword ptr [ebp-20]
:004340D6 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004340D9 68FF000000              push 000000FF
:004340DE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004340E1 51                      push ecx
:004340E2 8B550C                  mov edx, dword ptr [ebp+0C]
:004340E5 52                      push edx
:004340E6 8B4508                  mov eax, dword ptr [ebp+08]
:004340E9 50                      push eax
:004340EA E8F7BFFFFF              call 004300E6
:004340EF 83C410                  add esp, 00000010
:004340F2 85C0                    test eax, eax
:004340F4 7505                    jne 004340FB
:004340F6 E97F010000              jmp 0043427A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004340F4(C)
|
:004340FB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004340FE 81E1FF000000            and ecx, 000000FF
:00434104 85C9                    test ecx, ecx
:00434106 740C                    je 00434114
:00434108 8A55EC                  mov dl, byte ptr [ebp-14]
:0043410B 52                      push edx
:0043410C E8A9FBFFFF              call 00433CBA
:00434111 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434106(C)
|
:00434114 6A00                    push 00000000
:00434116 8B45F0                  mov eax, dword ptr [ebp-10]
:00434119 25FF000000              and eax, 000000FF
:0043411E 0C80                    or al, 80
:00434120 50                      push eax
:00434121 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00434124 51                      push ecx
:00434125 B9A8034B00              mov ecx, 004B03A8
:0043412A E8C91B0100              call 00445CF8
:0043412F 8845FC                  mov byte ptr [ebp-04], al
:00434132 8B55FC                  mov edx, dword ptr [ebp-04]
:00434135 81E2FF000000            and edx, 000000FF
:0043413B 81FAFF000000            cmp edx, 000000FF
:00434141 0F8433010000            je 0043427A
:00434147 8A45FC                  mov al, byte ptr [ebp-04]
:0043414A 50                      push eax
:0043414B 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043414E 51                      push ecx
:0043414F E8F8EAFFFF              call 00432C4C
:00434154 83C408                  add esp, 00000008
:00434157 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043415A 81E1FF000000            and ecx, 000000FF
:00434160 6BC924                  imul ecx, 00000024
:00434163 81C108F54A00            add ecx, 004AF508
:00434169 E83252FFFF              call 004293A0
:0043416E 668B10                  mov dx, word ptr [eax]
:00434171 668955E8                mov word ptr [ebp-18], dx
:00434175 837DF800                cmp dword ptr [ebp-08], 00000000
:00434179 7421                    je 0043419C
:0043417B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043417E 6BC911                  imul ecx, 00000011
:00434181 81C180DF4A00            add ecx, 004ADF80
:00434187 E82436FDFF              call 004077B0
:0043418C 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043418D 6860894700              push 00478960
:00434192 6A00                    push 00000000
:00434194 E8D349FFFF              call 00428B6C
:00434199 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434179(C)
|
:0043419C 6A00                    push 00000000
:0043419E 8A4508                  mov al, byte ptr [ebp+08]
:004341A1 50                      push eax
:004341A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004341A5 81E1FF000000            and ecx, 000000FF
:004341AB C1E104                  shl ecx, 04
:004341AE 8B55F0                  mov edx, dword ptr [ebp-10]
:004341B1 81E2FF000000            and edx, 000000FF
:004341B7 0BCA                    or ecx, edx
:004341B9 51                      push ecx
:004341BA 8A4510                  mov al, byte ptr [ebp+10]
:004341BD 50                      push eax
:004341BE 8A4DFC                  mov cl, byte ptr [ebp-04]
:004341C1 51                      push ecx
:004341C2 8A550C                  mov dl, byte ptr [ebp+0C]
:004341C5 52                      push edx
:004341C6 B930024B00              mov ecx, 004B0230
:004341CB E8CE890000              call 0043CB9E
:004341D0 8B45EC                  mov eax, dword ptr [ebp-14]
:004341D3 25FF000000              and eax, 000000FF
:004341D8 85C0                    test eax, eax
:004341DA 0F8490000000            je 00434270

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004341E0 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004341E5 6A11                    push 00000011
:004341E7 68B8014B00              push 004B01B8
:004341EC E857E60200              call 00462848
:004341F1 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004341F4 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004341F9 68FF000000              push 000000FF
:004341FE 6A00                    push 00000000
:00434200 68B8014B00              push 004B01B8
:00434205 8A4DEC                  mov cl, byte ptr [ebp-14]
:00434208 51                      push ecx
:00434209 8A55FC                  mov dl, byte ptr [ebp-04]
:0043420C 52                      push edx
:0043420D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434210 6BC924                  imul ecx, 00000024
:00434213 81C108F54A00            add ecx, 004AF508
:00434219 E8E2940100              call 0044D700
:0043421E 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043426E(U)
|
:00434221 8B45E4                  mov eax, dword ptr [ebp-1C]
:00434224 33C9                    xor ecx, ecx
:00434226 8A08                    mov cl, byte ptr [eax]
:00434228 81F9FF000000            cmp ecx, 000000FF
:0043422E 7440                    je 00434270
:00434230 6A01                    push 00000001
:00434232 8A5508                  mov dl, byte ptr [ebp+08]
:00434235 52                      push edx
:00434236 8B45F4                  mov eax, dword ptr [ebp-0C]
:00434239 25FF000000              and eax, 000000FF
:0043423E C1E004                  shl eax, 04
:00434241 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00434244 81E1FF000000            and ecx, 000000FF
:0043424A 0BC1                    or eax, ecx
:0043424C 50                      push eax
:0043424D 8A5510                  mov dl, byte ptr [ebp+10]
:00434250 52                      push edx
:00434251 8B45E4                  mov eax, dword ptr [ebp-1C]
:00434254 8A08                    mov cl, byte ptr [eax]
:00434256 51                      push ecx
:00434257 8A550C                  mov dl, byte ptr [ebp+0C]
:0043425A 52                      push edx
:0043425B B930024B00              mov ecx, 004B0230
:00434260 E839890000              call 0043CB9E
:00434265 8B45E4                  mov eax, dword ptr [ebp-1C]
:00434268 83C001                  add eax, 00000001
:0043426B 8945E4                  mov dword ptr [ebp-1C], eax
:0043426E EBB1                    jmp 00434221

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004341DA(C), :0043422E(C)
|
:00434270 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004340F6(U), :00434141(C)
|
:0043427A 8BE5                    mov esp, ebp
:0043427C 5D                      pop ebp
:0043427D C3                      ret



* Referenced by a CALL at Address:
|:004335C8   
|
:0043427E 55                      push ebp
:0043427F 8BEC                    mov ebp, esp
:00434281 83EC20                  sub esp, 00000020
:00434284 C645FCFF                mov [ebp-04], FF
:00434288 8B4508                  mov eax, dword ptr [ebp+08]
:0043428B 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043428D B906000000              mov ecx, 00000006
:00434292 F7F1                    div ecx
:00434294 8845F4                  mov byte ptr [ebp-0C], al
:00434297 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043429A 6BC911                  imul ecx, 00000011
:0043429D 81C180DF4A00            add ecx, 004ADF80
:004342A3 E848B6FFFF              call 0042F8F0
:004342A8 8845EC                  mov byte ptr [ebp-14], al
:004342AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004342AE 6BC911                  imul ecx, 00000011
:004342B1 81C180DF4A00            add ecx, 004ADF80
:004342B7 E82435FDFF              call 004077E0
:004342BC 8845F0                  mov byte ptr [ebp-10], al
:004342BF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004342C2 6BC924                  imul ecx, 00000024
:004342C5 81C108F54A00            add ecx, 004AF508
:004342CB E820B6FFFF              call 0042F8F0
:004342D0 25FF000000              and eax, 000000FF
:004342D5 83F807                  cmp eax, 00000007
:004342D8 7418                    je 004342F2
:004342DA 33D2                    xor edx, edx
:004342DC 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:004342E2 83E204                  and edx, 00000004
:004342E5 85D2                    test edx, edx
:004342E7 7509                    jne 004342F2
:004342E9 C745E000000000          mov [ebp-20], 00000000
:004342F0 EB07                    jmp 004342F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004342D8(C), :004342E7(C)
|
:004342F2 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004342F0(U)
|
:004342F9 8B45E0                  mov eax, dword ptr [ebp-20]
:004342FC 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004342FF 68FF000000              push 000000FF
:00434304 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434307 51                      push ecx
:00434308 8B550C                  mov edx, dword ptr [ebp+0C]
:0043430B 52                      push edx
:0043430C 8B4508                  mov eax, dword ptr [ebp+08]
:0043430F 50                      push eax
:00434310 E8D1BDFFFF              call 004300E6
:00434315 83C410                  add esp, 00000010
:00434318 85C0                    test eax, eax
:0043431A 7505                    jne 00434321
:0043431C E973010000              jmp 00434494

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043431A(C)
|
:00434321 6A00                    push 00000000
:00434323 B9A8034B00              mov ecx, 004B03A8
:00434328 E86F240100              call 0044679C
:0043432D 6A00                    push 00000000
:0043432F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00434332 81E1FF000000            and ecx, 000000FF
:00434338 80C980                  or cl, 80
:0043433B 51                      push ecx
:0043433C 8A550C                  mov dl, byte ptr [ebp+0C]
:0043433F 52                      push edx
:00434340 B9A8034B00              mov ecx, 004B03A8
:00434345 E8AE190100              call 00445CF8
:0043434A 8845FC                  mov byte ptr [ebp-04], al
:0043434D 8B45FC                  mov eax, dword ptr [ebp-04]
:00434350 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434355 3DFF000000              cmp eax, 000000FF
:0043435A 0F8434010000            je 00434494
:00434360 8A4DFC                  mov cl, byte ptr [ebp-04]
:00434363 51                      push ecx
:00434364 8A550C                  mov dl, byte ptr [ebp+0C]
:00434367 52                      push edx
:00434368 E8DFE8FFFF              call 00432C4C
:0043436D 83C408                  add esp, 00000008
:00434370 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434373 81E1FF000000            and ecx, 000000FF
:00434379 6BC924                  imul ecx, 00000024
:0043437C 81C108F54A00            add ecx, 004AF508
:00434382 E81950FFFF              call 004293A0
:00434387 668B00                  mov ax, word ptr [eax]
:0043438A 668945E8                mov word ptr [ebp-18], ax
:0043438E 837DF800                cmp dword ptr [ebp-08], 00000000
:00434392 7421                    je 004343B5
:00434394 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434397 6BC911                  imul ecx, 00000011
:0043439A 81C180DF4A00            add ecx, 004ADF80
:004343A0 E80B34FDFF              call 004077B0
:004343A5 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004343A6 6864894700              push 00478964
:004343AB 6A00                    push 00000000
:004343AD E8BA47FFFF              call 00428B6C
:004343B2 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434392(C)
|
:004343B5 6A00                    push 00000000
:004343B7 8A4D08                  mov cl, byte ptr [ebp+08]
:004343BA 51                      push ecx
:004343BB 8B55F4                  mov edx, dword ptr [ebp-0C]
:004343BE 81E2FF000000            and edx, 000000FF
:004343C4 C1E204                  shl edx, 04
:004343C7 8B45F0                  mov eax, dword ptr [ebp-10]
:004343CA 25FF000000              and eax, 000000FF
:004343CF 0BD0                    or edx, eax
:004343D1 52                      push edx
:004343D2 8A4D10                  mov cl, byte ptr [ebp+10]
:004343D5 51                      push ecx
:004343D6 8A55FC                  mov dl, byte ptr [ebp-04]
:004343D9 52                      push edx
:004343DA 8A450C                  mov al, byte ptr [ebp+0C]
:004343DD 50                      push eax
:004343DE B930024B00              mov ecx, 004B0230
:004343E3 E8B6870000              call 0043CB9E
:004343E8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004343EB 81E1FF000000            and ecx, 000000FF
:004343F1 85C9                    test ecx, ecx
:004343F3 0F8491000000            je 0043448A

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004343F9 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004343FE 6A11                    push 00000011
:00434400 68B8014B00              push 004B01B8
:00434405 E83EE40200              call 00462848
:0043440A 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043440D 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434412 68FF000000              push 000000FF
:00434417 6A00                    push 00000000
:00434419 68B8014B00              push 004B01B8
:0043441E 8A55EC                  mov dl, byte ptr [ebp-14]
:00434421 52                      push edx
:00434422 8A45FC                  mov al, byte ptr [ebp-04]
:00434425 50                      push eax
:00434426 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434429 6BC924                  imul ecx, 00000024
:0043442C 81C108F54A00            add ecx, 004AF508
:00434432 E8C9920100              call 0044D700
:00434437 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434488(U)
|
:0043443A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043443D 33D2                    xor edx, edx
:0043443F 8A11                    mov dl, byte ptr [ecx]
:00434441 81FAFF000000            cmp edx, 000000FF
:00434447 7441                    je 0043448A
:00434449 6A01                    push 00000001
:0043444B 8A4508                  mov al, byte ptr [ebp+08]
:0043444E 50                      push eax
:0043444F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434452 81E1FF000000            and ecx, 000000FF
:00434458 C1E104                  shl ecx, 04
:0043445B 8B55F0                  mov edx, dword ptr [ebp-10]
:0043445E 81E2FF000000            and edx, 000000FF
:00434464 0BCA                    or ecx, edx
:00434466 51                      push ecx
:00434467 8A4510                  mov al, byte ptr [ebp+10]
:0043446A 50                      push eax
:0043446B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043446E 8A11                    mov dl, byte ptr [ecx]
:00434470 52                      push edx
:00434471 8A450C                  mov al, byte ptr [ebp+0C]
:00434474 50                      push eax
:00434475 B930024B00              mov ecx, 004B0230
:0043447A E81F870000              call 0043CB9E
:0043447F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434482 83C101                  add ecx, 00000001
:00434485 894DE4                  mov dword ptr [ebp-1C], ecx
:00434488 EBB0                    jmp 0043443A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004343F3(C), :00434447(C)
|
:0043448A C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043431C(U), :0043435A(C)
|
:00434494 8BE5                    mov esp, ebp
:00434496 5D                      pop ebp
:00434497 C3                      ret



* Referenced by a CALL at Address:
|:004335E9   
|
:00434498 55                      push ebp
:00434499 8BEC                    mov ebp, esp
:0043449B 83EC24                  sub esp, 00000024
:0043449E C645F8FF                mov [ebp-08], FF
:004344A2 8B4508                  mov eax, dword ptr [ebp+08]
:004344A5 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:004344A7 B906000000              mov ecx, 00000006
:004344AC F7F1                    div ecx
:004344AE 8845F0                  mov byte ptr [ebp-10], al
:004344B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004344B4 6BC911                  imul ecx, 00000011
:004344B7 81C180DF4A00            add ecx, 004ADF80
:004344BD E82EB4FFFF              call 0042F8F0
:004344C2 8845E4                  mov byte ptr [ebp-1C], al
:004344C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004344C8 6BC911                  imul ecx, 00000011
:004344CB 81C180DF4A00            add ecx, 004ADF80
:004344D1 E80A33FDFF              call 004077E0
:004344D6 8845E8                  mov byte ptr [ebp-18], al
:004344D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004344DC 6BC924                  imul ecx, 00000024
:004344DF 81C108F54A00            add ecx, 004AF508
:004344E5 E806B4FFFF              call 0042F8F0
:004344EA 25FF000000              and eax, 000000FF
:004344EF 83F807                  cmp eax, 00000007
:004344F2 7418                    je 0043450C
:004344F4 33D2                    xor edx, edx
:004344F6 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:004344FC 83E204                  and edx, 00000004
:004344FF 85D2                    test edx, edx
:00434501 7509                    jne 0043450C
:00434503 C745DC00000000          mov [ebp-24], 00000000
:0043450A EB07                    jmp 00434513

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004344F2(C), :00434501(C)
|
:0043450C C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043450A(U)
|
:00434513 8B45DC                  mov eax, dword ptr [ebp-24]
:00434516 8945F4                  mov dword ptr [ebp-0C], eax
:00434519 C745EC00000000          mov [ebp-14], 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434520 68FF000000              push 000000FF
:00434525 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434528 51                      push ecx
:00434529 8B550C                  mov edx, dword ptr [ebp+0C]
:0043452C 52                      push edx
:0043452D 8B4508                  mov eax, dword ptr [ebp+08]
:00434530 50                      push eax
:00434531 E8B0BBFFFF              call 004300E6
:00434536 83C410                  add esp, 00000010
:00434539 85C0                    test eax, eax
:0043453B 7505                    jne 00434542
:0043453D E980010000              jmp 004346C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043453B(C)
|
:00434542 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00434545 51                      push ecx
:00434546 E86FF7FFFF              call 00433CBA
:0043454B 83C404                  add esp, 00000004
:0043454E C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043469B(U)
|
:00434555 B9180A4B00              mov ecx, 004B0A18
:0043455A E8E1B6FFFF              call 0042FC40
:0043455F 25FF000000              and eax, 000000FF
:00434564 85C0                    test eax, eax
:00434566 7405                    je 0043456D
:00434568 E933010000              jmp 004346A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434566(C)
|
:0043456D 6A00                    push 00000000
:0043456F 8B55E8                  mov edx, dword ptr [ebp-18]
:00434572 81E2FF000000            and edx, 000000FF
:00434578 80CA80                  or dl, 80
:0043457B 52                      push edx
:0043457C 8A450C                  mov al, byte ptr [ebp+0C]
:0043457F 50                      push eax
:00434580 B9A8034B00              mov ecx, 004B03A8
:00434585 E86E170100              call 00445CF8
:0043458A 8845F8                  mov byte ptr [ebp-08], al
:0043458D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434590 81E1FF000000            and ecx, 000000FF
:00434596 81F9FF000000            cmp ecx, 000000FF
:0043459C 0F84BF000000            je 00434661
:004345A2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004345A5 81E1FF000000            and ecx, 000000FF
:004345AB 6BC924                  imul ecx, 00000024
:004345AE 81C108F54A00            add ecx, 004AF508
:004345B4 E817B3FFFF              call 0042F8D0
:004345B9 25FF000000              and eax, 000000FF
:004345BE 83F802                  cmp eax, 00000002
:004345C1 0F8598000000            jne 0043465F
:004345C7 8A55F8                  mov dl, byte ptr [ebp-08]
:004345CA 52                      push edx
:004345CB 8A450C                  mov al, byte ptr [ebp+0C]
:004345CE 50                      push eax
:004345CF E878E6FFFF              call 00432C4C
:004345D4 83C408                  add esp, 00000008
:004345D7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004345DA 81E1FF000000            and ecx, 000000FF
:004345E0 6BC924                  imul ecx, 00000024
:004345E3 81C108F54A00            add ecx, 004AF508
:004345E9 E8B24DFFFF              call 004293A0
:004345EE 668B08                  mov cx, word ptr [eax]
:004345F1 66894DE0                mov word ptr [ebp-20], cx
:004345F5 837DF400                cmp dword ptr [ebp-0C], 00000000
:004345F9 7427                    je 00434622
:004345FB 837DFC00                cmp dword ptr [ebp-04], 00000000
:004345FF 7521                    jne 00434622
:00434601 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434604 6BC911                  imul ecx, 00000011
:00434607 81C180DF4A00            add ecx, 004ADF80
:0043460D E89E31FDFF              call 004077B0
:00434612 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00434613 6868894700              push 00478968
:00434618 6A00                    push 00000000
:0043461A E84D45FFFF              call 00428B6C
:0043461F 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004345F9(C), :004345FF(C)
|
:00434622 6A00                    push 00000000
:00434624 8A5508                  mov dl, byte ptr [ebp+08]
:00434627 52                      push edx
:00434628 8B45F0                  mov eax, dword ptr [ebp-10]
:0043462B 25FF000000              and eax, 000000FF
:00434630 C1E004                  shl eax, 04
:00434633 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00434636 81E1FF000000            and ecx, 000000FF
:0043463C 0BC1                    or eax, ecx
:0043463E 50                      push eax
:0043463F 8A5510                  mov dl, byte ptr [ebp+10]
:00434642 52                      push edx
:00434643 8A45F8                  mov al, byte ptr [ebp-08]
:00434646 50                      push eax
:00434647 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043464A 51                      push ecx
:0043464B B930024B00              mov ecx, 004B0230
:00434650 E849850000              call 0043CB9E
:00434655 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004345C1(C)
|
:0043465F EB02                    jmp 00434663

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043459C(C)
|
:00434661 EB3D                    jmp 004346A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043465F(U)
|
:00434663 8B55FC                  mov edx, dword ptr [ebp-04]
:00434666 83C201                  add edx, 00000001
:00434669 8955FC                  mov dword ptr [ebp-04], edx
:0043466C 837D0807                cmp dword ptr [ebp+08], 00000007
:00434670 7508                    jne 0043467A
:00434672 837DFC01                cmp dword ptr [ebp-04], 00000001
:00434676 7602                    jbe 0043467A
:00434678 EB26                    jmp 004346A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434670(C), :00434676(C)
|
:0043467A 6A1E                    push 0000001E
:0043467C E834DA0200              call 004620B5
:00434681 83C404                  add esp, 00000004
:00434684 8945EC                  mov dword ptr [ebp-14], eax
:00434687 837D0808                cmp dword ptr [ebp+08], 00000008
:0043468B 750E                    jne 0043469B
:0043468D 837DFC05                cmp dword ptr [ebp-04], 00000005
:00434691 7306                    jnb 00434699
:00434693 837DEC0A                cmp dword ptr [ebp-14], 0000000A
:00434697 7202                    jb 0043469B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434691(C)
|
:00434699 EB05                    jmp 004346A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043468B(C), :00434697(C)
|
:0043469B E9B5FEFFFF              jmp 00434555

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434568(U), :00434661(U), :00434678(U), :00434699(U)
|
:004346A0 833D20024B0000          cmp dword ptr [004B0220], 00000000
:004346A7 7419                    je 004346C2
:004346A9 837D0807                cmp dword ptr [ebp+08], 00000007
:004346AD 7513                    jne 004346C2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004346AF 6A02                    push 00000002
:004346B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004346B4 6BC924                  imul ecx, 00000024
:004346B7 81C108F54A00            add ecx, 004AF508
:004346BD E87E540000              call 00439B40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043453D(U), :004346A7(C), :004346AD(C)
|
:004346C2 8BE5                    mov esp, ebp
:004346C4 5D                      pop ebp
:004346C5 C3                      ret



* Referenced by a CALL at Address:
|:0043360A   
|
:004346C6 55                      push ebp
:004346C7 8BEC                    mov ebp, esp
:004346C9 83EC20                  sub esp, 00000020
:004346CC C645FCFF                mov [ebp-04], FF
:004346D0 8B4508                  mov eax, dword ptr [ebp+08]
:004346D3 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:004346D5 B906000000              mov ecx, 00000006
:004346DA F7F1                    div ecx
:004346DC 8845F4                  mov byte ptr [ebp-0C], al
:004346DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004346E2 6BC911                  imul ecx, 00000011
:004346E5 81C180DF4A00            add ecx, 004ADF80
:004346EB E800B2FFFF              call 0042F8F0
:004346F0 8845EC                  mov byte ptr [ebp-14], al
:004346F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004346F6 6BC911                  imul ecx, 00000011
:004346F9 81C180DF4A00            add ecx, 004ADF80
:004346FF E8DC30FDFF              call 004077E0
:00434704 8845F0                  mov byte ptr [ebp-10], al
:00434707 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043470A 6BC924                  imul ecx, 00000024
:0043470D 81C108F54A00            add ecx, 004AF508
:00434713 E8D8B1FFFF              call 0042F8F0
:00434718 25FF000000              and eax, 000000FF
:0043471D 83F807                  cmp eax, 00000007
:00434720 7418                    je 0043473A
:00434722 33D2                    xor edx, edx
:00434724 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:0043472A 83E204                  and edx, 00000004
:0043472D 85D2                    test edx, edx
:0043472F 7509                    jne 0043473A
:00434731 C745E000000000          mov [ebp-20], 00000000
:00434738 EB07                    jmp 00434741

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434720(C), :0043472F(C)
|
:0043473A C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434738(U)
|
:00434741 8B45E0                  mov eax, dword ptr [ebp-20]
:00434744 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434747 68FF000000              push 000000FF
:0043474C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043474F 51                      push ecx
:00434750 8B550C                  mov edx, dword ptr [ebp+0C]
:00434753 52                      push edx
:00434754 8B4508                  mov eax, dword ptr [ebp+08]
:00434757 50                      push eax
:00434758 E889B9FFFF              call 004300E6
:0043475D 83C410                  add esp, 00000010
:00434760 85C0                    test eax, eax
:00434762 7505                    jne 00434769
:00434764 E995010000              jmp 004348FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434762(C)
|
:00434769 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043476C 51                      push ecx
:0043476D E848F5FFFF              call 00433CBA
:00434772 83C404                  add esp, 00000004
:00434775 6A00                    push 00000000
:00434777 8B55F0                  mov edx, dword ptr [ebp-10]
:0043477A 81E2FF000000            and edx, 000000FF
:00434780 80CA80                  or dl, 80
:00434783 52                      push edx
:00434784 8A450C                  mov al, byte ptr [ebp+0C]
:00434787 50                      push eax
:00434788 B9A8034B00              mov ecx, 004B03A8
:0043478D E866150100              call 00445CF8
:00434792 8845FC                  mov byte ptr [ebp-04], al
:00434795 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434798 81E1FF000000            and ecx, 000000FF
:0043479E 81F9FF000000            cmp ecx, 000000FF
:004347A4 0F8432010000            je 004348DC
:004347AA 8A55FC                  mov dl, byte ptr [ebp-04]
:004347AD 52                      push edx
:004347AE 8A450C                  mov al, byte ptr [ebp+0C]
:004347B1 50                      push eax
:004347B2 E895E4FFFF              call 00432C4C
:004347B7 83C408                  add esp, 00000008
:004347BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004347BD 81E1FF000000            and ecx, 000000FF
:004347C3 6BC924                  imul ecx, 00000024
:004347C6 81C108F54A00            add ecx, 004AF508
:004347CC E8CF4BFFFF              call 004293A0
:004347D1 668B08                  mov cx, word ptr [eax]
:004347D4 66894DE8                mov word ptr [ebp-18], cx
:004347D8 837DF800                cmp dword ptr [ebp-08], 00000000
:004347DC 7421                    je 004347FF
:004347DE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004347E1 6BC911                  imul ecx, 00000011
:004347E4 81C180DF4A00            add ecx, 004ADF80
:004347EA E8C12FFDFF              call 004077B0
:004347EF 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004347F0 686C894700              push 0047896C
:004347F5 6A00                    push 00000000
:004347F7 E87043FFFF              call 00428B6C
:004347FC 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004347DC(C)
|
:004347FF 6A00                    push 00000000
:00434801 8A5508                  mov dl, byte ptr [ebp+08]
:00434804 52                      push edx
:00434805 8B45F4                  mov eax, dword ptr [ebp-0C]
:00434808 25FF000000              and eax, 000000FF
:0043480D C1E004                  shl eax, 04
:00434810 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00434813 81E1FF000000            and ecx, 000000FF
:00434819 0BC1                    or eax, ecx
:0043481B 50                      push eax
:0043481C 8A5510                  mov dl, byte ptr [ebp+10]
:0043481F 52                      push edx
:00434820 8A45FC                  mov al, byte ptr [ebp-04]
:00434823 50                      push eax
:00434824 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00434827 51                      push ecx
:00434828 B930024B00              mov ecx, 004B0230
:0043482D E86C830000              call 0043CB9E
:00434832 8B55EC                  mov edx, dword ptr [ebp-14]
:00434835 81E2FF000000            and edx, 000000FF
:0043483B 85D2                    test edx, edx
:0043483D 0F848F000000            je 004348D2

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434843 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00434848 6A11                    push 00000011
:0043484A 68B8014B00              push 004B01B8
:0043484F E8F4DF0200              call 00462848
:00434854 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434857 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043485C 68FF000000              push 000000FF
:00434861 6A01                    push 00000001
:00434863 68B8014B00              push 004B01B8
:00434868 8A45EC                  mov al, byte ptr [ebp-14]
:0043486B 50                      push eax
:0043486C 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043486F 51                      push ecx
:00434870 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434873 6BC924                  imul ecx, 00000024
:00434876 81C108F54A00            add ecx, 004AF508
:0043487C E87F8E0100              call 0044D700
:00434881 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004348D0(U)
|
:00434884 8B55E4                  mov edx, dword ptr [ebp-1C]
:00434887 33C0                    xor eax, eax
:00434889 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043488B 3DFF000000              cmp eax, 000000FF
:00434890 7440                    je 004348D2
:00434892 6A00                    push 00000000
:00434894 8A4D08                  mov cl, byte ptr [ebp+08]
:00434897 51                      push ecx
:00434898 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043489B 81E2FF000000            and edx, 000000FF
:004348A1 C1E204                  shl edx, 04
:004348A4 8B45F0                  mov eax, dword ptr [ebp-10]
:004348A7 25FF000000              and eax, 000000FF
:004348AC 0BD0                    or edx, eax
:004348AE 52                      push edx
:004348AF 8A4D10                  mov cl, byte ptr [ebp+10]
:004348B2 51                      push ecx
:004348B3 8B55E4                  mov edx, dword ptr [ebp-1C]
:004348B6 8A02                    mov al, byte ptr [edx]
:004348B8 50                      push eax
:004348B9 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004348BC 51                      push ecx
:004348BD B930024B00              mov ecx, 004B0230
:004348C2 E8D7820000              call 0043CB9E
:004348C7 8B55E4                  mov edx, dword ptr [ebp-1C]
:004348CA 83C201                  add edx, 00000001
:004348CD 8955E4                  mov dword ptr [ebp-1C], edx
:004348D0 EBB2                    jmp 00434884

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043483D(C), :00434890(C)
|
:004348D2 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004347A4(C)
|
:004348DC 833D20024B0000          cmp dword ptr [004B0220], 00000000
:004348E3 7419                    je 004348FE
:004348E5 837D0809                cmp dword ptr [ebp+08], 00000009
:004348E9 7513                    jne 004348FE

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004348EB 6A02                    push 00000002
:004348ED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004348F0 6BC924                  imul ecx, 00000024
:004348F3 81C108F54A00            add ecx, 004AF508
:004348F9 E842520000              call 00439B40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434764(U), :004348E3(C), :004348E9(C)
|
:004348FE 8BE5                    mov esp, ebp
:00434900 5D                      pop ebp
:00434901 C3                      ret



* Referenced by a CALL at Address:
|:0043362B   
|
:00434902 55                      push ebp
:00434903 8BEC                    mov ebp, esp
:00434905 83EC20                  sub esp, 00000020
:00434908 C645F8FF                mov [ebp-08], FF
:0043490C 8B4508                  mov eax, dword ptr [ebp+08]
:0043490F 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00434911 B906000000              mov ecx, 00000006
:00434916 F7F1                    div ecx
:00434918 8845F0                  mov byte ptr [ebp-10], al
:0043491B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043491E 6BC911                  imul ecx, 00000011
:00434921 81C180DF4A00            add ecx, 004ADF80
:00434927 E8C4AFFFFF              call 0042F8F0
:0043492C 8845E4                  mov byte ptr [ebp-1C], al
:0043492F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434932 6BC911                  imul ecx, 00000011
:00434935 81C180DF4A00            add ecx, 004ADF80
:0043493B E8A02EFDFF              call 004077E0
:00434940 8845E8                  mov byte ptr [ebp-18], al
:00434943 C745FC00000000          mov [ebp-04], 00000000
:0043494A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043494D 6BC924                  imul ecx, 00000024
:00434950 81C108F54A00            add ecx, 004AF508
:00434956 E895AFFFFF              call 0042F8F0
:0043495B 25FF000000              and eax, 000000FF
:00434960 83F807                  cmp eax, 00000007
:00434963 7418                    je 0043497D
:00434965 33D2                    xor edx, edx
:00434967 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:0043496D 83E204                  and edx, 00000004
:00434970 85D2                    test edx, edx
:00434972 7509                    jne 0043497D
:00434974 C745E000000000          mov [ebp-20], 00000000
:0043497B EB07                    jmp 00434984

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434963(C), :00434972(C)
|
:0043497D C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043497B(U)
|
:00434984 8B45E0                  mov eax, dword ptr [ebp-20]
:00434987 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043498A 68FF000000              push 000000FF
:0043498F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434992 51                      push ecx
:00434993 8B550C                  mov edx, dword ptr [ebp+0C]
:00434996 52                      push edx
:00434997 8B4508                  mov eax, dword ptr [ebp+08]
:0043499A 50                      push eax
:0043499B E846B7FFFF              call 004300E6
:004349A0 83C410                  add esp, 00000010
:004349A3 85C0                    test eax, eax
:004349A5 7505                    jne 004349AC
:004349A7 E910010000              jmp 00434ABC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004349A5(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004349AC 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004349B1 6A11                    push 00000011
:004349B3 68B8014B00              push 004B01B8
:004349B8 E88BDE0200              call 00462848
:004349BD 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004349C0 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004349C5 68FF000000              push 000000FF
:004349CA 6A01                    push 00000001
:004349CC 68B8014B00              push 004B01B8
:004349D1 8A4DE4                  mov cl, byte ptr [ebp-1C]
:004349D4 51                      push ecx
:004349D5 8A550C                  mov dl, byte ptr [ebp+0C]
:004349D8 52                      push edx
:004349D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004349DC 6BC924                  imul ecx, 00000024
:004349DF 81C108F54A00            add ecx, 004AF508
:004349E5 E8168D0100              call 0044D700
:004349EA 8945EC                  mov dword ptr [ebp-14], eax
:004349ED 8B45EC                  mov eax, dword ptr [ebp-14]
:004349F0 33C9                    xor ecx, ecx
:004349F2 8A08                    mov cl, byte ptr [eax]
:004349F4 81F9FF000000            cmp ecx, 000000FF
:004349FA 7520                    jne 00434A1C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004349FC 6A07                    push 00000007
:004349FE B9800D4B00              mov ecx, 004B0D80
:00434A03 E8A1D10200              call 00461BA9

* Possible StringData Ref from Data Obj ->"vTd򤺨SHC"
                                  |
:00434A08 6870894700              push 00478970
:00434A0D 6A00                    push 00000000
:00434A0F E85841FFFF              call 00428B6C
:00434A14 83C408                  add esp, 00000008
:00434A17 E9A0000000              jmp 00434ABC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004349FA(C)
|
:00434A1C 6A18                    push 00000018
:00434A1E 6A27                    push 00000027
:00434A20 6A00                    push 00000000
:00434A22 6A00                    push 00000000
:00434A24 B9A8034B00              mov ecx, 004B03A8
:00434A29 E898FD0000              call 004447C6
:00434A2E 837DF400                cmp dword ptr [ebp-0C], 00000000
:00434A32 7421                    je 00434A55
:00434A34 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434A37 6BC911                  imul ecx, 00000011
:00434A3A 81C180DF4A00            add ecx, 004ADF80
:00434A40 E86B2DFDFF              call 004077B0
:00434A45 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00434A46 688C894700              push 0047898C
:00434A4B 6A00                    push 00000000
:00434A4D E81A41FFFF              call 00428B6C
:00434A52 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434A32(C), :00434A6F(U), :00434AB0(U)
|
:00434A55 8B55EC                  mov edx, dword ptr [ebp-14]
:00434A58 33C0                    xor eax, eax
:00434A5A 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434A5C 3DFF000000              cmp eax, 000000FF
:00434A61 744F                    je 00434AB2
:00434A63 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00434A66 33D2                    xor edx, edx
:00434A68 8A11                    mov dl, byte ptr [ecx]
:00434A6A 83FA5A                  cmp edx, 0000005A
:00434A6D 7E02                    jle 00434A71
:00434A6F EBE4                    jmp 00434A55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434A6D(C)
|
:00434A71 6A00                    push 00000000
:00434A73 8A4508                  mov al, byte ptr [ebp+08]
:00434A76 50                      push eax
:00434A77 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00434A7A 81E1FF000000            and ecx, 000000FF
:00434A80 C1E104                  shl ecx, 04
:00434A83 8B55E8                  mov edx, dword ptr [ebp-18]
:00434A86 81E2FF000000            and edx, 000000FF
:00434A8C 0BCA                    or ecx, edx
:00434A8E 51                      push ecx
:00434A8F 8A4510                  mov al, byte ptr [ebp+10]
:00434A92 50                      push eax
:00434A93 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00434A96 8A11                    mov dl, byte ptr [ecx]
:00434A98 52                      push edx
:00434A99 8A450C                  mov al, byte ptr [ebp+0C]
:00434A9C 50                      push eax
:00434A9D B930024B00              mov ecx, 004B0230
:00434AA2 E8F7800000              call 0043CB9E
:00434AA7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00434AAA 83C101                  add ecx, 00000001
:00434AAD 894DEC                  mov dword ptr [ebp-14], ecx
:00434AB0 EBA3                    jmp 00434A55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434A61(C)
|
:00434AB2 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004349A7(U), :00434A17(U)
|
:00434ABC 8BE5                    mov esp, ebp
:00434ABE 5D                      pop ebp
:00434ABF C3                      ret



* Referenced by a CALL at Address:
|:0043364C   
|
:00434AC0 55                      push ebp
:00434AC1 8BEC                    mov ebp, esp
:00434AC3 83EC20                  sub esp, 00000020
:00434AC6 C645FCFF                mov [ebp-04], FF
:00434ACA 8B4508                  mov eax, dword ptr [ebp+08]
:00434ACD 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00434ACF B906000000              mov ecx, 00000006
:00434AD4 F7F1                    div ecx
:00434AD6 8845F4                  mov byte ptr [ebp-0C], al
:00434AD9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434ADC 6BC911                  imul ecx, 00000011
:00434ADF 81C180DF4A00            add ecx, 004ADF80
:00434AE5 E806AEFFFF              call 0042F8F0
:00434AEA 8845E4                  mov byte ptr [ebp-1C], al
:00434AED 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434AF0 6BC911                  imul ecx, 00000011
:00434AF3 81C180DF4A00            add ecx, 004ADF80
:00434AF9 E8E22CFDFF              call 004077E0
:00434AFE 8845E8                  mov byte ptr [ebp-18], al
:00434B01 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434B04 6BC924                  imul ecx, 00000024
:00434B07 81C108F54A00            add ecx, 004AF508
:00434B0D E8DEADFFFF              call 0042F8F0
:00434B12 25FF000000              and eax, 000000FF
:00434B17 83F807                  cmp eax, 00000007
:00434B1A 7418                    je 00434B34
:00434B1C 33D2                    xor edx, edx
:00434B1E 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00434B24 83E204                  and edx, 00000004
:00434B27 85D2                    test edx, edx
:00434B29 7509                    jne 00434B34
:00434B2B C745E000000000          mov [ebp-20], 00000000
:00434B32 EB07                    jmp 00434B3B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434B1A(C), :00434B29(C)
|
:00434B34 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434B32(U)
|
:00434B3B 8B45E0                  mov eax, dword ptr [ebp-20]
:00434B3E 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434B41 68FF000000              push 000000FF
:00434B46 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434B49 51                      push ecx
:00434B4A 8B550C                  mov edx, dword ptr [ebp+0C]
:00434B4D 52                      push edx
:00434B4E 8B4508                  mov eax, dword ptr [ebp+08]
:00434B51 50                      push eax
:00434B52 E88FB5FFFF              call 004300E6
:00434B57 83C410                  add esp, 00000010
:00434B5A 85C0                    test eax, eax
:00434B5C 7505                    jne 00434B63
:00434B5E E916010000              jmp 00434C79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434B5C(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434B63 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00434B68 6A11                    push 00000011
:00434B6A 68B8014B00              push 004B01B8
:00434B6F E8D4DC0200              call 00462848
:00434B74 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434B77 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434B7C 68FF000000              push 000000FF
:00434B81 6A00                    push 00000000
:00434B83 68B8014B00              push 004B01B8
:00434B88 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00434B8B 51                      push ecx
:00434B8C 8A550C                  mov dl, byte ptr [ebp+0C]
:00434B8F 52                      push edx
:00434B90 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434B93 6BC924                  imul ecx, 00000024
:00434B96 81C108F54A00            add ecx, 004AF508
:00434B9C E85F8B0100              call 0044D700
:00434BA1 8945F0                  mov dword ptr [ebp-10], eax
:00434BA4 8B45F0                  mov eax, dword ptr [ebp-10]
:00434BA7 33C9                    xor ecx, ecx
:00434BA9 8A08                    mov cl, byte ptr [eax]
:00434BAB 81F9FF000000            cmp ecx, 000000FF
:00434BB1 7520                    jne 00434BD3

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00434BB3 6A07                    push 00000007
:00434BB5 B9800D4B00              mov ecx, 004B0D80
:00434BBA E8EACF0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"vTd򤺨SHC"
                                  |
:00434BBF 6890894700              push 00478990
:00434BC4 6A00                    push 00000000
:00434BC6 E8A13FFFFF              call 00428B6C
:00434BCB 83C408                  add esp, 00000008
:00434BCE E9A6000000              jmp 00434C79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434BB1(C)
|
:00434BD3 6A18                    push 00000018
:00434BD5 6A27                    push 00000027
:00434BD7 6A00                    push 00000000
:00434BD9 6A00                    push 00000000
:00434BDB B9A8034B00              mov ecx, 004B03A8
:00434BE0 E8E1FB0000              call 004447C6
:00434BE5 837DF800                cmp dword ptr [ebp-08], 00000000
:00434BE9 7421                    je 00434C0C
:00434BEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434BEE 6BC911                  imul ecx, 00000011
:00434BF1 81C180DF4A00            add ecx, 004ADF80
:00434BF7 E8B42BFDFF              call 004077B0
:00434BFC 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00434BFD 68AC894700              push 004789AC
:00434C02 6A00                    push 00000000
:00434C04 E8633FFFFF              call 00428B6C
:00434C09 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434BE9(C)
|
:00434C0C C645EC00                mov [ebp-14], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434C6D(U)
|
:00434C10 8B55F0                  mov edx, dword ptr [ebp-10]
:00434C13 33C0                    xor eax, eax
:00434C15 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434C17 3DFF000000              cmp eax, 000000FF
:00434C1C 7451                    je 00434C6F
:00434C1E 8A4DEC                  mov cl, byte ptr [ebp-14]
:00434C21 51                      push ecx
:00434C22 8A5508                  mov dl, byte ptr [ebp+08]
:00434C25 52                      push edx
:00434C26 8B45F4                  mov eax, dword ptr [ebp-0C]
:00434C29 25FF000000              and eax, 000000FF
:00434C2E C1E004                  shl eax, 04
:00434C31 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00434C34 81E1FF000000            and ecx, 000000FF
:00434C3A 0BC1                    or eax, ecx
:00434C3C 50                      push eax
:00434C3D 8A5510                  mov dl, byte ptr [ebp+10]
:00434C40 52                      push edx
:00434C41 8B45F0                  mov eax, dword ptr [ebp-10]
:00434C44 8A08                    mov cl, byte ptr [eax]
:00434C46 51                      push ecx
:00434C47 8A550C                  mov dl, byte ptr [ebp+0C]
:00434C4A 52                      push edx
:00434C4B B930024B00              mov ecx, 004B0230
:00434C50 E8497F0000              call 0043CB9E
:00434C55 8B45F0                  mov eax, dword ptr [ebp-10]
:00434C58 83C001                  add eax, 00000001
:00434C5B 8945F0                  mov dword ptr [ebp-10], eax
:00434C5E 837D080B                cmp dword ptr [ebp+08], 0000000B
:00434C62 7409                    je 00434C6D
:00434C64 8A4DEC                  mov cl, byte ptr [ebp-14]
:00434C67 80C101                  add cl, 01
:00434C6A 884DEC                  mov byte ptr [ebp-14], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434C62(C)
|
:00434C6D EBA1                    jmp 00434C10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434C1C(C)
|
:00434C6F C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434B5E(U), :00434BCE(U)
|
:00434C79 8BE5                    mov esp, ebp
:00434C7B 5D                      pop ebp
:00434C7C C3                      ret



* Referenced by a CALL at Address:
|:0043366D   
|
:00434C7D 55                      push ebp
:00434C7E 8BEC                    mov ebp, esp
:00434C80 83EC20                  sub esp, 00000020
:00434C83 C645FCFF                mov [ebp-04], FF
:00434C87 8B4508                  mov eax, dword ptr [ebp+08]
:00434C8A 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00434C8C B906000000              mov ecx, 00000006
:00434C91 F7F1                    div ecx
:00434C93 8845F4                  mov byte ptr [ebp-0C], al
:00434C96 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434C99 6BC911                  imul ecx, 00000011
:00434C9C 81C180DF4A00            add ecx, 004ADF80
:00434CA2 E849ACFFFF              call 0042F8F0
:00434CA7 8845E4                  mov byte ptr [ebp-1C], al
:00434CAA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434CAD 6BC911                  imul ecx, 00000011
:00434CB0 81C180DF4A00            add ecx, 004ADF80
:00434CB6 E8252BFDFF              call 004077E0
:00434CBB 8845E8                  mov byte ptr [ebp-18], al
:00434CBE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434CC1 6BC924                  imul ecx, 00000024
:00434CC4 81C108F54A00            add ecx, 004AF508
:00434CCA E821ACFFFF              call 0042F8F0
:00434CCF 25FF000000              and eax, 000000FF
:00434CD4 83F807                  cmp eax, 00000007
:00434CD7 7418                    je 00434CF1
:00434CD9 33D2                    xor edx, edx
:00434CDB 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00434CE1 83E204                  and edx, 00000004
:00434CE4 85D2                    test edx, edx
:00434CE6 7509                    jne 00434CF1
:00434CE8 C745E000000000          mov [ebp-20], 00000000
:00434CEF EB07                    jmp 00434CF8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434CD7(C), :00434CE6(C)
|
:00434CF1 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434CEF(U)
|
:00434CF8 8B45E0                  mov eax, dword ptr [ebp-20]
:00434CFB 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434CFE 68FF000000              push 000000FF
:00434D03 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434D06 51                      push ecx
:00434D07 8B550C                  mov edx, dword ptr [ebp+0C]
:00434D0A 52                      push edx
:00434D0B 8B4508                  mov eax, dword ptr [ebp+08]
:00434D0E 50                      push eax
:00434D0F E8D2B3FFFF              call 004300E6
:00434D14 83C410                  add esp, 00000010
:00434D17 85C0                    test eax, eax
:00434D19 7505                    jne 00434D20
:00434D1B E9A1010000              jmp 00434EC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434D19(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434D20 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00434D25 6A11                    push 00000011
:00434D27 68B8014B00              push 004B01B8
:00434D2C E817DB0200              call 00462848
:00434D31 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434D34 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434D39 68FF000000              push 000000FF
:00434D3E 6A00                    push 00000000
:00434D40 68B8014B00              push 004B01B8
:00434D45 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00434D48 51                      push ecx
:00434D49 8A550C                  mov dl, byte ptr [ebp+0C]
:00434D4C 52                      push edx
:00434D4D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434D50 6BC924                  imul ecx, 00000024
:00434D53 81C108F54A00            add ecx, 004AF508
:00434D59 E8A2890100              call 0044D700
:00434D5E 8945F0                  mov dword ptr [ebp-10], eax
:00434D61 8B45F0                  mov eax, dword ptr [ebp-10]
:00434D64 33C9                    xor ecx, ecx
:00434D66 8A08                    mov cl, byte ptr [eax]
:00434D68 81F9FF000000            cmp ecx, 000000FF
:00434D6E 7520                    jne 00434D90

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00434D70 6A07                    push 00000007
:00434D72 B9800D4B00              mov ecx, 004B0D80
:00434D77 E82DCE0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"vTd򤺨SHC"
                                  |
:00434D7C 68B0894700              push 004789B0
:00434D81 6A00                    push 00000000
:00434D83 E8E43DFFFF              call 00428B6C
:00434D88 83C408                  add esp, 00000008
:00434D8B E931010000              jmp 00434EC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434D6E(C)
|
:00434D90 6A18                    push 00000018
:00434D92 6A27                    push 00000027
:00434D94 6A00                    push 00000000
:00434D96 6A00                    push 00000000
:00434D98 B9A8034B00              mov ecx, 004B03A8
:00434D9D E824FA0000              call 004447C6
:00434DA2 837DF800                cmp dword ptr [ebp-08], 00000000
:00434DA6 7421                    je 00434DC9
:00434DA8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434DAB 6BC911                  imul ecx, 00000011
:00434DAE 81C180DF4A00            add ecx, 004ADF80
:00434DB4 E8F729FDFF              call 004077B0
:00434DB9 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00434DBA 68CC894700              push 004789CC
:00434DBF 6A00                    push 00000000
:00434DC1 E8A63DFFFF              call 00428B6C
:00434DC6 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434DA6(C)
|
:00434DC9 C645EC00                mov [ebp-14], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434E24(U)
|
:00434DCD 8B55F0                  mov edx, dword ptr [ebp-10]
:00434DD0 33C0                    xor eax, eax
:00434DD2 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434DD4 3DFF000000              cmp eax, 000000FF
:00434DD9 744B                    je 00434E26
:00434DDB 8A4DEC                  mov cl, byte ptr [ebp-14]
:00434DDE 51                      push ecx
:00434DDF 8A5508                  mov dl, byte ptr [ebp+08]
:00434DE2 52                      push edx
:00434DE3 8B45F4                  mov eax, dword ptr [ebp-0C]
:00434DE6 25FF000000              and eax, 000000FF
:00434DEB C1E004                  shl eax, 04
:00434DEE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00434DF1 81E1FF000000            and ecx, 000000FF
:00434DF7 0BC1                    or eax, ecx
:00434DF9 50                      push eax
:00434DFA 8A5510                  mov dl, byte ptr [ebp+10]
:00434DFD 52                      push edx
:00434DFE 8B45F0                  mov eax, dword ptr [ebp-10]
:00434E01 8A08                    mov cl, byte ptr [eax]
:00434E03 51                      push ecx
:00434E04 8A550C                  mov dl, byte ptr [ebp+0C]
:00434E07 52                      push edx
:00434E08 B930024B00              mov ecx, 004B0230
:00434E0D E88C7D0000              call 0043CB9E
:00434E12 8B45F0                  mov eax, dword ptr [ebp-10]
:00434E15 83C001                  add eax, 00000001
:00434E18 8945F0                  mov dword ptr [ebp-10], eax
:00434E1B 8A4DEC                  mov cl, byte ptr [ebp-14]
:00434E1E 80C101                  add cl, 01
:00434E21 884DEC                  mov byte ptr [ebp-14], cl
:00434E24 EBA7                    jmp 00434DCD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434DD9(C)
|
:00434E26 837D080D                cmp dword ptr [ebp+08], 0000000D
:00434E2A 7565                    jne 00434E91
:00434E2C 6A32                    push 00000032
:00434E2E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434E31 6BC924                  imul ecx, 00000024
:00434E34 81C108F54A00            add ecx, 004AF508
:00434E3A E831FAFCFF              call 00404870
:00434E3F 50                      push eax
:00434E40 E87FD10200              call 00461FC4
:00434E45 83C408                  add esp, 00000008
:00434E48 50                      push eax
:00434E49 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434E4C 6BC924                  imul ecx, 00000024
:00434E4F 81C108F54A00            add ecx, 004AF508
:00434E55 E8065BFFFF              call 0042A960
:00434E5A 6A20                    push 00000020
:00434E5C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434E5F 6BC924                  imul ecx, 00000024
:00434E62 81C108F54A00            add ecx, 004AF508
:00434E68 E8F34C0000              call 00439B60

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00434E6D 6A10                    push 00000010
:00434E6F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434E72 6BC924                  imul ecx, 00000024
:00434E75 81C108F54A00            add ecx, 004AF508
:00434E7B E8E04C0000              call 00439B60
:00434E80 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434E83 6BC924                  imul ecx, 00000024
:00434E86 81C108F54A00            add ecx, 004AF508
:00434E8C E8B77DFFFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434E2A(C)
|
:00434E91 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434E94 6BC924                  imul ecx, 00000024
:00434E97 81C108F54A00            add ecx, 004AF508
:00434E9D E834A6FFFF              call 0042F4D6
:00434EA2 85C0                    test eax, eax
:00434EA4 7411                    je 00434EB7
:00434EA6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434EA9 6BC924                  imul ecx, 00000024
:00434EAC 81C108F54A00            add ecx, 004AF508
:00434EB2 E8BD77FFFF              call 0042C674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434EA4(C)
|
:00434EB7 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434D1B(U), :00434D8B(U)
|
:00434EC1 8BE5                    mov esp, ebp
:00434EC3 5D                      pop ebp
:00434EC4 C3                      ret



* Referenced by a CALL at Address:
|:0043368E   
|
:00434EC5 55                      push ebp
:00434EC6 8BEC                    mov ebp, esp
:00434EC8 83EC20                  sub esp, 00000020
:00434ECB C645FCFF                mov [ebp-04], FF
:00434ECF 8B4508                  mov eax, dword ptr [ebp+08]
:00434ED2 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00434ED4 B906000000              mov ecx, 00000006
:00434ED9 F7F1                    div ecx
:00434EDB 8845F4                  mov byte ptr [ebp-0C], al
:00434EDE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434EE1 6BC911                  imul ecx, 00000011
:00434EE4 81C180DF4A00            add ecx, 004ADF80
:00434EEA E801AAFFFF              call 0042F8F0
:00434EEF 8845EC                  mov byte ptr [ebp-14], al
:00434EF2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00434EF5 6BC911                  imul ecx, 00000011
:00434EF8 81C180DF4A00            add ecx, 004ADF80
:00434EFE E8DD28FDFF              call 004077E0
:00434F03 8845F0                  mov byte ptr [ebp-10], al
:00434F06 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00434F09 6BC924                  imul ecx, 00000024
:00434F0C 81C108F54A00            add ecx, 004AF508
:00434F12 E8D9A9FFFF              call 0042F8F0
:00434F17 25FF000000              and eax, 000000FF
:00434F1C 83F807                  cmp eax, 00000007
:00434F1F 7418                    je 00434F39
:00434F21 33D2                    xor edx, edx
:00434F23 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00434F29 83E204                  and edx, 00000004
:00434F2C 85D2                    test edx, edx
:00434F2E 7509                    jne 00434F39
:00434F30 C745E000000000          mov [ebp-20], 00000000
:00434F37 EB07                    jmp 00434F40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434F1F(C), :00434F2E(C)
|
:00434F39 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434F37(U)
|
:00434F40 8B45E0                  mov eax, dword ptr [ebp-20]
:00434F43 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00434F46 68FF000000              push 000000FF
:00434F4B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434F4E 51                      push ecx
:00434F4F 8B550C                  mov edx, dword ptr [ebp+0C]
:00434F52 52                      push edx
:00434F53 8B4508                  mov eax, dword ptr [ebp+08]
:00434F56 50                      push eax
:00434F57 E88AB1FFFF              call 004300E6
:00434F5C 83C410                  add esp, 00000010
:00434F5F 85C0                    test eax, eax
:00434F61 7505                    jne 00434F68
:00434F63 E9CF010000              jmp 00435137

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434F61(C)
|
:00434F68 8A4DEC                  mov cl, byte ptr [ebp-14]
:00434F6B 51                      push ecx
:00434F6C E849EDFFFF              call 00433CBA
:00434F71 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434FE2(U)
|
:00434F74 8A55EC                  mov dl, byte ptr [ebp-14]
:00434F77 52                      push edx
:00434F78 E83DEDFFFF              call 00433CBA
:00434F7D 83C404                  add esp, 00000004
:00434F80 6A00                    push 00000000
:00434F82 8B45F0                  mov eax, dword ptr [ebp-10]
:00434F85 25FF000000              and eax, 000000FF
:00434F8A 0C80                    or al, 80
:00434F8C 50                      push eax
:00434F8D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00434F90 51                      push ecx
:00434F91 B9A8034B00              mov ecx, 004B03A8
:00434F96 E85D0D0100              call 00445CF8
:00434F9B 8845FC                  mov byte ptr [ebp-04], al
:00434F9E 8B55FC                  mov edx, dword ptr [ebp-04]
:00434FA1 81E2FF000000            and edx, 000000FF
:00434FA7 81FAFF000000            cmp edx, 000000FF
:00434FAD 0F8484010000            je 00435137
:00434FB3 8A4508                  mov al, byte ptr [ebp+08]
:00434FB6 50                      push eax
:00434FB7 8A4DFC                  mov cl, byte ptr [ebp-04]
:00434FBA 51                      push ecx
:00434FBB E8FAB7FFFF              call 004307BA
:00434FC0 83C408                  add esp, 00000008
:00434FC3 85C0                    test eax, eax
:00434FC5 751D                    jne 00434FE4

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00434FC7 6A07                    push 00000007
:00434FC9 B9800D4B00              mov ecx, 004B0D80
:00434FCE E8D6CB0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"o̵LkC"
                                  |
:00434FD3 68D0894700              push 004789D0
:00434FD8 6A00                    push 00000000
:00434FDA E88D3BFFFF              call 00428B6C
:00434FDF 83C408                  add esp, 00000008
:00434FE2 EB90                    jmp 00434F74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434FC5(C)
|
:00434FE4 8A55FC                  mov dl, byte ptr [ebp-04]
:00434FE7 52                      push edx
:00434FE8 8A450C                  mov al, byte ptr [ebp+0C]
:00434FEB 50                      push eax
:00434FEC E85BDCFFFF              call 00432C4C
:00434FF1 83C408                  add esp, 00000008
:00434FF4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434FF7 81E1FF000000            and ecx, 000000FF
:00434FFD 6BC924                  imul ecx, 00000024
:00435000 81C108F54A00            add ecx, 004AF508
:00435006 E89543FFFF              call 004293A0
:0043500B 668B08                  mov cx, word ptr [eax]
:0043500E 66894DE8                mov word ptr [ebp-18], cx
:00435012 837DF800                cmp dword ptr [ebp-08], 00000000
:00435016 7421                    je 00435039
:00435018 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043501B 6BC911                  imul ecx, 00000011
:0043501E 81C180DF4A00            add ecx, 004ADF80
:00435024 E88727FDFF              call 004077B0
:00435029 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043502A 68E0894700              push 004789E0
:0043502F 6A00                    push 00000000
:00435031 E8363BFFFF              call 00428B6C
:00435036 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435016(C)
|
:00435039 6A00                    push 00000000
:0043503B 8A5508                  mov dl, byte ptr [ebp+08]
:0043503E 52                      push edx
:0043503F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00435042 25FF000000              and eax, 000000FF
:00435047 C1E004                  shl eax, 04
:0043504A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043504D 81E1FF000000            and ecx, 000000FF
:00435053 0BC1                    or eax, ecx
:00435055 50                      push eax
:00435056 8A5510                  mov dl, byte ptr [ebp+10]
:00435059 52                      push edx
:0043505A 8A45FC                  mov al, byte ptr [ebp-04]
:0043505D 50                      push eax
:0043505E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00435061 51                      push ecx
:00435062 B930024B00              mov ecx, 004B0230
:00435067 E8327B0000              call 0043CB9E
:0043506C 8B55EC                  mov edx, dword ptr [ebp-14]
:0043506F 81E2FF000000            and edx, 000000FF
:00435075 85D2                    test edx, edx
:00435077 0F84B0000000            je 0043512D

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043507D 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00435082 6A11                    push 00000011
:00435084 68B8014B00              push 004B01B8
:00435089 E8BAD70200              call 00462848
:0043508E 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435091 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435096 68FF000000              push 000000FF
:0043509B 6A00                    push 00000000
:0043509D 68B8014B00              push 004B01B8
:004350A2 8A45EC                  mov al, byte ptr [ebp-14]
:004350A5 50                      push eax
:004350A6 8A4DFC                  mov cl, byte ptr [ebp-04]
:004350A9 51                      push ecx
:004350AA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004350AD 6BC924                  imul ecx, 00000024
:004350B0 81C108F54A00            add ecx, 004AF508
:004350B6 E845860100              call 0044D700
:004350BB 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004350EB(U), :0043512B(U)
|
:004350BE 8B55E4                  mov edx, dword ptr [ebp-1C]
:004350C1 33C0                    xor eax, eax
:004350C3 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004350C5 3DFF000000              cmp eax, 000000FF
:004350CA 7461                    je 0043512D
:004350CC 8A4D08                  mov cl, byte ptr [ebp+08]
:004350CF 51                      push ecx
:004350D0 8B55E4                  mov edx, dword ptr [ebp-1C]
:004350D3 8A02                    mov al, byte ptr [edx]
:004350D5 50                      push eax
:004350D6 E8DFB6FFFF              call 004307BA
:004350DB 83C408                  add esp, 00000008
:004350DE 85C0                    test eax, eax
:004350E0 750B                    jne 004350ED
:004350E2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004350E5 83C101                  add ecx, 00000001
:004350E8 894DE4                  mov dword ptr [ebp-1C], ecx
:004350EB EBD1                    jmp 004350BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004350E0(C)
|
:004350ED 6A01                    push 00000001
:004350EF 8A5508                  mov dl, byte ptr [ebp+08]
:004350F2 52                      push edx
:004350F3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004350F6 25FF000000              and eax, 000000FF
:004350FB C1E004                  shl eax, 04
:004350FE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00435101 81E1FF000000            and ecx, 000000FF
:00435107 0BC1                    or eax, ecx
:00435109 50                      push eax
:0043510A 8A5510                  mov dl, byte ptr [ebp+10]
:0043510D 52                      push edx
:0043510E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00435111 8A08                    mov cl, byte ptr [eax]
:00435113 51                      push ecx
:00435114 8A550C                  mov dl, byte ptr [ebp+0C]
:00435117 52                      push edx
:00435118 B930024B00              mov ecx, 004B0230
:0043511D E87C7A0000              call 0043CB9E
:00435122 8B45E4                  mov eax, dword ptr [ebp-1C]
:00435125 83C001                  add eax, 00000001
:00435128 8945E4                  mov dword ptr [ebp-1C], eax
:0043512B EB91                    jmp 004350BE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435077(C), :004350CA(C)
|
:0043512D C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434F63(U), :00434FAD(C)
|
:00435137 8BE5                    mov esp, ebp
:00435139 5D                      pop ebp
:0043513A C3                      ret



* Referenced by a CALL at Address:
|:004336AF   
|
:0043513B 55                      push ebp
:0043513C 8BEC                    mov ebp, esp
:0043513E 83EC24                  sub esp, 00000024
:00435141 C645F8FF                mov [ebp-08], FF
:00435145 8B4508                  mov eax, dword ptr [ebp+08]
:00435148 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043514A B906000000              mov ecx, 00000006
:0043514F F7F1                    div ecx
:00435151 8845F0                  mov byte ptr [ebp-10], al
:00435154 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435157 6BC911                  imul ecx, 00000011
:0043515A 81C180DF4A00            add ecx, 004ADF80
:00435160 E88BA7FFFF              call 0042F8F0
:00435165 8845E0                  mov byte ptr [ebp-20], al
:00435168 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043516B 6BC911                  imul ecx, 00000011
:0043516E 81C180DF4A00            add ecx, 004ADF80
:00435174 E86726FDFF              call 004077E0
:00435179 8845E4                  mov byte ptr [ebp-1C], al
:0043517C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043517F 6BC924                  imul ecx, 00000024
:00435182 81C108F54A00            add ecx, 004AF508
:00435188 E863A7FFFF              call 0042F8F0
:0043518D 25FF000000              and eax, 000000FF
:00435192 83F807                  cmp eax, 00000007
:00435195 7418                    je 004351AF
:00435197 33D2                    xor edx, edx
:00435199 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:0043519F 83E204                  and edx, 00000004
:004351A2 85D2                    test edx, edx
:004351A4 7509                    jne 004351AF
:004351A6 C745DC00000000          mov [ebp-24], 00000000
:004351AD EB07                    jmp 004351B6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435195(C), :004351A4(C)
|
:004351AF C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004351AD(U)
|
:004351B6 8B45DC                  mov eax, dword ptr [ebp-24]
:004351B9 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004351BC 68FF000000              push 000000FF
:004351C1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004351C4 51                      push ecx
:004351C5 8B550C                  mov edx, dword ptr [ebp+0C]
:004351C8 52                      push edx
:004351C9 8B4508                  mov eax, dword ptr [ebp+08]
:004351CC 50                      push eax
:004351CD E814AFFFFF              call 004300E6
:004351D2 83C410                  add esp, 00000010
:004351D5 85C0                    test eax, eax
:004351D7 7505                    jne 004351DE
:004351D9 E965010000              jmp 00435343

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004351D7(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004351DE 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004351E3 6A11                    push 00000011
:004351E5 68B8014B00              push 004B01B8
:004351EA E859D60200              call 00462848
:004351EF 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004351F2 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004351F7 68FF000000              push 000000FF
:004351FC 6A00                    push 00000000
:004351FE 68B8014B00              push 004B01B8
:00435203 8A4DE0                  mov cl, byte ptr [ebp-20]
:00435206 51                      push ecx
:00435207 8A550C                  mov dl, byte ptr [ebp+0C]
:0043520A 52                      push edx
:0043520B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043520E 6BC924                  imul ecx, 00000024
:00435211 81C108F54A00            add ecx, 004AF508
:00435217 E8E4840100              call 0044D700
:0043521C 8945EC                  mov dword ptr [ebp-14], eax
:0043521F 8B45EC                  mov eax, dword ptr [ebp-14]
:00435222 33C9                    xor ecx, ecx
:00435224 8A08                    mov cl, byte ptr [eax]
:00435226 81F9FF000000            cmp ecx, 000000FF
:0043522C 7520                    jne 0043524E

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043522E 6A07                    push 00000007
:00435230 B9800D4B00              mov ecx, 004B0D80
:00435235 E86FC90200              call 00461BA9

* Possible StringData Ref from Data Obj ->"vTd򤺨SĳC"
                                  |
:0043523A 68E4894700              push 004789E4
:0043523F 6A00                    push 00000000
:00435241 E82639FFFF              call 00428B6C
:00435246 83C408                  add esp, 00000008
:00435249 E9F5000000              jmp 00435343

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043522C(C)
|
:0043524E 8B55EC                  mov edx, dword ptr [ebp-14]
:00435251 52                      push edx
:00435252 8B4508                  mov eax, dword ptr [ebp+08]
:00435255 50                      push eax
:00435256 E8EC000000              call 00435347
:0043525B 83C408                  add esp, 00000008
:0043525E 85C0                    test eax, eax
:00435260 7505                    jne 00435267
:00435262 E9DC000000              jmp 00435343

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435260(C)
|
:00435267 6A18                    push 00000018
:00435269 6A27                    push 00000027
:0043526B 6A00                    push 00000000
:0043526D 6A00                    push 00000000
:0043526F B9A8034B00              mov ecx, 004B03A8
:00435274 E84DF50000              call 004447C6
:00435279 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043527D 7421                    je 004352A0
:0043527F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435282 6BC911                  imul ecx, 00000011
:00435285 81C180DF4A00            add ecx, 004ADF80
:0043528B E82025FDFF              call 004077B0
:00435290 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00435291 68FC894700              push 004789FC
:00435296 6A00                    push 00000000
:00435298 E8CF38FFFF              call 00428B6C
:0043529D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043527D(C)
|
:004352A0 C645FC00                mov [ebp-04], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435334(U)
|
:004352A4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004352A7 33D2                    xor edx, edx
:004352A9 8A11                    mov dl, byte ptr [ecx]
:004352AB 81FAFF000000            cmp edx, 000000FF
:004352B1 0F8482000000            je 00435339
:004352B7 8B45EC                  mov eax, dword ptr [ebp-14]
:004352BA 33C9                    xor ecx, ecx
:004352BC 8A08                    mov cl, byte ptr [eax]
:004352BE 6BC924                  imul ecx, 00000024
:004352C1 81C108F54A00            add ecx, 004AF508
:004352C7 E8D440FFFF              call 004293A0
:004352CC 50                      push eax
:004352CD E8AD260100              call 0044797F
:004352D2 83C404                  add esp, 00000004
:004352D5 8845E8                  mov byte ptr [ebp-18], al
:004352D8 837D0813                cmp dword ptr [ebp+08], 00000013
:004352DC 7544                    jne 00435322
:004352DE 8B55E8                  mov edx, dword ptr [ebp-18]
:004352E1 81E2FF000000            and edx, 000000FF
:004352E7 83FA07                  cmp edx, 00000007
:004352EA 7536                    jne 00435322
:004352EC 6A00                    push 00000000
:004352EE 8A4508                  mov al, byte ptr [ebp+08]
:004352F1 50                      push eax
:004352F2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004352F5 81E1FF000000            and ecx, 000000FF
:004352FB C1E104                  shl ecx, 04
:004352FE 8B55E4                  mov edx, dword ptr [ebp-1C]
:00435301 81E2FF000000            and edx, 000000FF
:00435307 0BCA                    or ecx, edx
:00435309 51                      push ecx
:0043530A 8A4510                  mov al, byte ptr [ebp+10]
:0043530D 50                      push eax
:0043530E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00435311 8A11                    mov dl, byte ptr [ecx]
:00435313 52                      push edx
:00435314 8A450C                  mov al, byte ptr [ebp+0C]
:00435317 50                      push eax
:00435318 B930024B00              mov ecx, 004B0230
:0043531D E87C780000              call 0043CB9E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004352DC(C), :004352EA(C)
|
:00435322 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00435325 83C101                  add ecx, 00000001
:00435328 894DEC                  mov dword ptr [ebp-14], ecx
:0043532B 8A55FC                  mov dl, byte ptr [ebp-04]
:0043532E 80C201                  add dl, 01
:00435331 8855FC                  mov byte ptr [ebp-04], dl
:00435334 E96BFFFFFF              jmp 004352A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004352B1(C)
|
:00435339 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004351D9(U), :00435249(U), :00435262(U)
|
:00435343 8BE5                    mov esp, ebp
:00435345 5D                      pop ebp
:00435346 C3                      ret



* Referenced by a CALL at Address:
|:00435256   
|
:00435347 55                      push ebp
:00435348 8BEC                    mov ebp, esp
:0043534A 83EC08                  sub esp, 00000008
:0043534D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004353C1(U)
|
:00435354 8B450C                  mov eax, dword ptr [ebp+0C]
:00435357 33C9                    xor ecx, ecx
:00435359 8A08                    mov cl, byte ptr [eax]
:0043535B 81F9FF000000            cmp ecx, 000000FF
:00435361 7460                    je 004353C3
:00435363 8B550C                  mov edx, dword ptr [ebp+0C]
:00435366 33C0                    xor eax, eax
:00435368 8A02                    mov al, byte ptr [edx]
:0043536A 8BC8                    mov ecx, eax
:0043536C 6BC924                  imul ecx, 00000024
:0043536F 81C108F54A00            add ecx, 004AF508
:00435375 E82640FFFF              call 004293A0
:0043537A 50                      push eax
:0043537B E8FF250100              call 0044797F
:00435380 83C404                  add esp, 00000004
:00435383 8845F8                  mov byte ptr [ebp-08], al
:00435386 837D0813                cmp dword ptr [ebp+08], 00000013
:0043538A 7517                    jne 004353A3
:0043538C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043538F 81E1FF000000            and ecx, 000000FF
:00435395 83F907                  cmp ecx, 00000007
:00435398 7507                    jne 004353A1
:0043539A C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435398(C)
|
:004353A1 EB15                    jmp 004353B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043538A(C)
|
:004353A3 8B55F8                  mov edx, dword ptr [ebp-08]
:004353A6 81E2FF000000            and edx, 000000FF
:004353AC 83FA0A                  cmp edx, 0000000A
:004353AF 7507                    jne 004353B8
:004353B1 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004353A1(U), :004353AF(C)
|
:004353B8 8B450C                  mov eax, dword ptr [ebp+0C]
:004353BB 83C001                  add eax, 00000001
:004353BE 89450C                  mov dword ptr [ebp+0C], eax
:004353C1 EB91                    jmp 00435354

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435361(C)
|
:004353C3 837DFC00                cmp dword ptr [ebp-04], 00000000
:004353C7 753E                    jne 00435407
:004353C9 837D0813                cmp dword ptr [ebp+08], 00000013
:004353CD 751D                    jne 004353EC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004353CF 6A07                    push 00000007
:004353D1 B9800D4B00              mov ecx, 004B0D80
:004353D6 E8CEC70200              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩĤHbsWAҥHLkϥΡC"
                                  |
:004353DB 68008A4700              push 00478A00
:004353E0 6A00                    push 00000000
:004353E2 E88537FFFF              call 00428B6C
:004353E7 83C408                  add esp, 00000008
:004353EA EB1B                    jmp 00435407

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004353CD(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004353EC 6A07                    push 00000007
:004353EE B9800D4B00              mov ecx, 004B0D80
:004353F3 E8B1C70200              call 00461BA9

* Possible StringData Ref from Data Obj ->"ѩĤHbWAҥHLkϥΡC"
                                  |
:004353F8 68248A4700              push 00478A24
:004353FD 6A00                    push 00000000
:004353FF E86837FFFF              call 00428B6C
:00435404 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004353C7(C), :004353EA(U)
|
:00435407 8B45FC                  mov eax, dword ptr [ebp-04]
:0043540A 8BE5                    mov esp, ebp
:0043540C 5D                      pop ebp
:0043540D C3                      ret



* Referenced by a CALL at Address:
|:004336D0   
|
:0043540E 55                      push ebp
:0043540F 8BEC                    mov ebp, esp
:00435411 83EC38                  sub esp, 00000038
:00435414 56                      push esi
:00435415 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435418 6BC911                  imul ecx, 00000011
:0043541B 81C180DF4A00            add ecx, 004ADF80
:00435421 E8BA23FDFF              call 004077E0
:00435426 8845E0                  mov byte ptr [ebp-20], al
:00435429 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043542C 6BC911                  imul ecx, 00000011
:0043542F 81C180DF4A00            add ecx, 004ADF80
:00435435 E8B6A4FFFF              call 0042F8F0
:0043543A 8845E4                  mov byte ptr [ebp-1C], al
:0043543D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00435440 6BC924                  imul ecx, 00000024
:00435443 81C108F54A00            add ecx, 004AF508
:00435449 E8A2A4FFFF              call 0042F8F0
:0043544E 25FF000000              and eax, 000000FF
:00435453 83F807                  cmp eax, 00000007
:00435456 7417                    je 0043546F
:00435458 33C0                    xor eax, eax
:0043545A A07C0B4B00              mov al, byte ptr [004B0B7C]
:0043545F 83E004                  and eax, 00000004
:00435462 85C0                    test eax, eax
:00435464 7509                    jne 0043546F
:00435466 C745CC00000000          mov [ebp-34], 00000000
:0043546D EB07                    jmp 00435476

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435456(C), :00435464(C)
|
:0043546F C745CC01000000          mov [ebp-34], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043546D(U)
|
:00435476 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00435479 894DF8                  mov dword ptr [ebp-08], ecx
:0043547C C745FC00000000          mov [ebp-04], 00000000
:00435483 C745E800000000          mov [ebp-18], 00000000
:0043548A 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0043548D E81E23FDFF              call 004077B0

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435492 68FF000000              push 000000FF
:00435497 8B55F8                  mov edx, dword ptr [ebp-08]
:0043549A 52                      push edx
:0043549B 8B450C                  mov eax, dword ptr [ebp+0C]
:0043549E 50                      push eax
:0043549F 8B4D08                  mov ecx, dword ptr [ebp+08]
:004354A2 51                      push ecx
:004354A3 E83EACFFFF              call 004300E6
:004354A8 83C410                  add esp, 00000010
:004354AB 85C0                    test eax, eax
:004354AD 7505                    jne 004354B4
:004354AF E9B7040000              jmp 0043596B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004354AD(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004354B4 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004354B9 6A11                    push 00000011
:004354BB 68B8014B00              push 004B01B8
:004354C0 E883D30200              call 00462848
:004354C5 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004354C8 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004354CD 68FF000000              push 000000FF
:004354D2 6A00                    push 00000000
:004354D4 68B8014B00              push 004B01B8
:004354D9 8A55E4                  mov dl, byte ptr [ebp-1C]
:004354DC 52                      push edx
:004354DD 8A450C                  mov al, byte ptr [ebp+0C]
:004354E0 50                      push eax
:004354E1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004354E4 6BC924                  imul ecx, 00000024
:004354E7 81C108F54A00            add ecx, 004AF508
:004354ED E80E820100              call 0044D700
:004354F2 8945F0                  mov dword ptr [ebp-10], eax
:004354F5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004354F8 33D2                    xor edx, edx
:004354FA 8A11                    mov dl, byte ptr [ecx]
:004354FC 81FAFF000000            cmp edx, 000000FF
:00435502 7520                    jne 00435524

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00435504 6A07                    push 00000007
:00435506 B9800D4B00              mov ecx, 004B0D80
:0043550B E899C60200              call 00461BA9

* Possible StringData Ref from Data Obj ->"vTd򤺨SĳC"
                                  |
:00435510 68488A4700              push 00478A48
:00435515 6A00                    push 00000000
:00435517 E85036FFFF              call 00428B6C
:0043551C 83C408                  add esp, 00000008
:0043551F E947040000              jmp 0043596B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435502(C)
|
:00435524 6A18                    push 00000018
:00435526 6A27                    push 00000027
:00435528 6A00                    push 00000000
:0043552A 6A00                    push 00000000
:0043552C B9A8034B00              mov ecx, 004B03A8
:00435531 E890F20000              call 004447C6
:00435536 837DF800                cmp dword ptr [ebp-08], 00000000
:0043553A 7421                    je 0043555D
:0043553C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043553F 6BC911                  imul ecx, 00000011
:00435542 81C180DF4A00            add ecx, 004ADF80
:00435548 E86322FDFF              call 004077B0
:0043554D 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043554E 68608A4700              push 00478A60
:00435553 6A00                    push 00000000
:00435555 E81236FFFF              call 00428B6C
:0043555A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043553A(C)
|
:0043555D C645EC00                mov [ebp-14], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004355EC(U), :00435700(U), :0043591F(U)
|
:00435561 8B45F0                  mov eax, dword ptr [ebp-10]
:00435564 33C9                    xor ecx, ecx
:00435566 8A08                    mov cl, byte ptr [eax]
:00435568 81F9FF000000            cmp ecx, 000000FF
:0043556E 0F84B0030000            je 00435924
:00435574 8B55F0                  mov edx, dword ptr [ebp-10]
:00435577 33C0                    xor eax, eax
:00435579 8A02                    mov al, byte ptr [edx]
:0043557B 8BC8                    mov ecx, eax
:0043557D 6BC924                  imul ecx, 00000024
:00435580 81C108F54A00            add ecx, 004AF508
:00435586 E8153EFFFF              call 004293A0
:0043558B 50                      push eax
:0043558C 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0043558F E8FCA1FFFF              call 0042F790
:00435594 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00435597 8A11                    mov dl, byte ptr [ecx]
:00435599 52                      push edx
:0043559A 8A450C                  mov al, byte ptr [ebp+0C]
:0043559D 50                      push eax
:0043559E E8F4AAFFFF              call 00430097
:004355A3 83C408                  add esp, 00000008
:004355A6 85C0                    test eax, eax
:004355A8 7547                    jne 004355F1
:004355AA 6A00                    push 00000000
:004355AC 8A4D10                  mov cl, byte ptr [ebp+10]
:004355AF 51                      push ecx
:004355B0 8A5508                  mov dl, byte ptr [ebp+08]
:004355B3 52                      push edx
:004355B4 8B45F0                  mov eax, dword ptr [ebp-10]
:004355B7 8A08                    mov cl, byte ptr [eax]
:004355B9 51                      push ecx
:004355BA 8A550C                  mov dl, byte ptr [ebp+0C]
:004355BD 52                      push edx
:004355BE B9A8034B00              mov ecx, 004B03A8
:004355C3 E80E110100              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004355C8 6A07                    push 00000007
:004355CA B9800D4B00              mov ecx, 004B0D80
:004355CF E8D5C50200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:004355D4 68648A4700              push 00478A64
:004355D9 6A00                    push 00000000
:004355DB E88C35FFFF              call 00428B6C
:004355E0 83C408                  add esp, 00000008
:004355E3 8B45F0                  mov eax, dword ptr [ebp-10]
:004355E6 83C001                  add eax, 00000001
:004355E9 8945F0                  mov dword ptr [ebp-10], eax
:004355EC E970FFFFFF              jmp 00435561

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004355A8(C)
|
:004355F1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004355F4 6BC924                  imul ecx, 00000024
:004355F7 81C108F54A00            add ecx, 004AF508
:004355FD E8ED4EFFFF              call 0042A4EF
:00435602 C1E803                  shr eax, 03
:00435605 83C014                  add eax, 00000014
:00435608 8945E8                  mov dword ptr [ebp-18], eax
:0043560B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043560E 6BC924                  imul ecx, 00000024
:00435611 81C108F54A00            add ecx, 004AF508
:00435617 E8F4A2FFFF              call 0042F910
:0043561C 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0043561E 68C8000000              push 000000C8
:00435623 E88DCA0200              call 004620B5
:00435628 83C404                  add esp, 00000004
:0043562B 3BF0                    cmp esi, eax
:0043562D 7614                    jbe 00435643

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043562F 6A06                    push 00000006
:00435631 E87FCA0200              call 004620B5
:00435636 83C404                  add esp, 00000004
:00435639 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043563C 8D540105                lea edx, dword ptr [ecx+eax+05]
:00435640 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043562D(C)
|
:00435643 8B45F0                  mov eax, dword ptr [ebp-10]
:00435646 33C9                    xor ecx, ecx
:00435648 8A08                    mov cl, byte ptr [eax]
:0043564A 6BC924                  imul ecx, 00000024
:0043564D 81C108F54A00            add ecx, 004AF508
:00435653 E858F2FCFF              call 004048B0
:00435658 85C0                    test eax, eax
:0043565A 7507                    jne 00435663
:0043565C C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043565A(C)
|
:00435663 8B55F0                  mov edx, dword ptr [ebp-10]
:00435666 33C0                    xor eax, eax
:00435668 8A02                    mov al, byte ptr [edx]
:0043566A 8BC8                    mov ecx, eax
:0043566C 6BC924                  imul ecx, 00000024
:0043566F 81C108F54A00            add ecx, 004AF508
:00435675 E836F2FCFF              call 004048B0
:0043567A 85C0                    test eax, eax
:0043567C 743A                    je 004356B8
:0043567E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00435681 33D2                    xor edx, edx
:00435683 8A11                    mov dl, byte ptr [ecx]
:00435685 8BCA                    mov ecx, edx
:00435687 6BC924                  imul ecx, 00000024
:0043568A 81C108F54A00            add ecx, 004AF508
:00435690 E81BF2FCFF              call 004048B0
:00435695 83E801                  sub eax, 00000001
:00435698 3B45E8                  cmp eax, dword ptr [ebp-18]
:0043569B 731B                    jnb 004356B8
:0043569D 8B45F0                  mov eax, dword ptr [ebp-10]
:004356A0 33C9                    xor ecx, ecx
:004356A2 8A08                    mov cl, byte ptr [eax]
:004356A4 6BC924                  imul ecx, 00000024
:004356A7 81C108F54A00            add ecx, 004AF508
:004356AD E8FEF1FCFF              call 004048B0
:004356B2 83E801                  sub eax, 00000001
:004356B5 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043567C(C), :0043569B(C)
|
:004356B8 837DE800                cmp dword ptr [ebp-18], 00000000
:004356BC 7547                    jne 00435705
:004356BE 6A00                    push 00000000
:004356C0 8A5510                  mov dl, byte ptr [ebp+10]
:004356C3 52                      push edx
:004356C4 8A4508                  mov al, byte ptr [ebp+08]
:004356C7 50                      push eax
:004356C8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004356CB 8A11                    mov dl, byte ptr [ecx]
:004356CD 52                      push edx
:004356CE 8A450C                  mov al, byte ptr [ebp+0C]
:004356D1 50                      push eax
:004356D2 B9A8034B00              mov ecx, 004B03A8
:004356D7 E8FA0F0100              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004356DC 6A07                    push 00000007
:004356DE B9800D4B00              mov ecx, 004B0D80
:004356E3 E8C1C40200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:004356E8 68748A4700              push 00478A74
:004356ED 6A00                    push 00000000
:004356EF E87834FFFF              call 00428B6C
:004356F4 83C408                  add esp, 00000008
:004356F7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004356FA 83C101                  add ecx, 00000001
:004356FD 894DF0                  mov dword ptr [ebp-10], ecx
:00435700 E95CFEFFFF              jmp 00435561

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004356BC(C)
|
:00435705 8B55F0                  mov edx, dword ptr [ebp-10]
:00435708 33C0                    xor eax, eax
:0043570A 8A02                    mov al, byte ptr [edx]
:0043570C 8BC8                    mov ecx, eax
:0043570E 6BC924                  imul ecx, 00000024
:00435711 81C108F54A00            add ecx, 004AF508
:00435717 E8843CFFFF              call 004293A0
:0043571C 668B08                  mov cx, word ptr [eax]
:0043571F 66894DDC                mov word ptr [ebp-24], cx
:00435723 8A55DD                  mov dl, byte ptr [ebp-23]
:00435726 52                      push edx
:00435727 8A45DC                  mov al, byte ptr [ebp-24]
:0043572A 50                      push eax
:0043572B B9A8034B00              mov ecx, 004B03A8
:00435730 E802030100              call 00445A37
:00435735 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00435738 81E1FF000000            and ecx, 000000FF
:0043573E 85C9                    test ecx, ecx
:00435740 7421                    je 00435763
:00435742 6A01                    push 00000001
:00435744 8A5510                  mov dl, byte ptr [ebp+10]
:00435747 52                      push edx
:00435748 8A4508                  mov al, byte ptr [ebp+08]
:0043574B 50                      push eax
:0043574C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043574F 8A11                    mov dl, byte ptr [ecx]
:00435751 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435752 68FF000000              push 000000FF
:00435757 B9A8034B00              mov ecx, 004B03A8
:0043575C E8750F0100              call 004466D6
:00435761 EB1E                    jmp 00435781

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435740(C)
|
:00435763 6A01                    push 00000001
:00435765 8A4510                  mov al, byte ptr [ebp+10]
:00435768 50                      push eax
:00435769 8A4D08                  mov cl, byte ptr [ebp+08]
:0043576C 51                      push ecx
:0043576D 8B55F0                  mov edx, dword ptr [ebp-10]
:00435770 8A02                    mov al, byte ptr [edx]
:00435772 50                      push eax
:00435773 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00435776 51                      push ecx
:00435777 B9A8034B00              mov ecx, 004B03A8
:0043577C E8550F0100              call 004466D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435761(U)
|
:00435781 B9C8E24A00              mov ecx, 004AE2C8
:00435786 E8459AFDFF              call 0040F1D0
:0043578B 83E010                  and eax, 00000010
:0043578E 85C0                    test eax, eax
:00435790 7537                    jne 004357C9
:00435792 C645D800                mov [ebp-28], 00
:00435796 EB09                    jmp 004357A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004357C2(U)
|
:00435798 8A55D8                  mov dl, byte ptr [ebp-28]
:0043579B 80C201                  add dl, 01
:0043579E 8855D8                  mov byte ptr [ebp-28], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435796(U)
|
:004357A1 8B45D8                  mov eax, dword ptr [ebp-28]
:004357A4 25FF000000              and eax, 000000FF
:004357A9 83F803                  cmp eax, 00000003
:004357AC 7D16                    jge 004357C4

* Possible Reference to String Resource ID=00012: ""
                                  |
:004357AE 6A0C                    push 0000000C
:004357B0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004357B3 51                      push ecx
:004357B4 8B55F0                  mov edx, dword ptr [ebp-10]
:004357B7 8A02                    mov al, byte ptr [edx]
:004357B9 50                      push eax
:004357BA E8CCC60000              call 00441E8B
:004357BF 83C40C                  add esp, 0000000C
:004357C2 EBD4                    jmp 00435798

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004357AC(C)
|
:004357C4 E9ED000000              jmp 004358B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435790(C)
|
:004357C9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004357CC 8A11                    mov dl, byte ptr [ecx]
:004357CE 52                      push edx
:004357CF 8D45D4                  lea eax, dword ptr [ebp-2C]
:004357D2 50                      push eax
:004357D3 E858C90000              call 00442130
:004357D8 83C408                  add esp, 00000008
:004357DB E886A8FFFF              call 00430066
:004357E0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004357E3 33D2                    xor edx, edx
:004357E5 8A11                    mov dl, byte ptr [ecx]
:004357E7 8BCA                    mov ecx, edx
:004357E9 6BC924                  imul ecx, 00000024
:004357EC 81C108F54A00            add ecx, 004AF508
:004357F2 E8D99AFDFF              call 0040F2D0
:004357F7 85C0                    test eax, eax
:004357F9 7410                    je 0043580B
:004357FB 33C0                    xor eax, eax
:004357FD A01C024B00              mov al, byte ptr [004B021C]
:00435802 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:00435806 894DC8                  mov dword ptr [ebp-38], ecx
:00435809 EB0F                    jmp 0043581A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004357F9(C)
|
:0043580B 33D2                    xor edx, edx
:0043580D 8A151C024B00            mov dl, byte ptr [004B021C]
:00435813 8D44122A                lea eax, dword ptr [edx+edx+2A]
:00435817 8945C8                  mov dword ptr [ebp-38], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435809(U)
|
:0043581A 8A4DC8                  mov cl, byte ptr [ebp-38]
:0043581D 884DD4                  mov byte ptr [ebp-2C], cl
:00435820 33D2                    xor edx, edx
:00435822 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:00435828 8D441206                lea eax, dword ptr [edx+edx+06]
:0043582C 50                      push eax
:0043582D B9F8F44A00              mov ecx, 004AF4F8
:00435832 E859FCFEFF              call 00425490
:00435837 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043583A 8A11                    mov dl, byte ptr [ecx]
:0043583C 52                      push edx
:0043583D 668B45D4                mov ax, word ptr [ebp-2C]
:00435841 50                      push eax
:00435842 E895C90000              call 004421DC
:00435847 83C408                  add esp, 00000008
:0043584A E84113FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043584F 6A03                    push 00000003
:00435851 E8EE14FFFF              call 00426D44
:00435856 83C404                  add esp, 00000004
:00435859 33C9                    xor ecx, ecx
:0043585B 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:00435861 8D540906                lea edx, dword ptr [ecx+ecx+06]
:00435865 52                      push edx
:00435866 B9F8F44A00              mov ecx, 004AF4F8
:0043586B E820FCFEFF              call 00425490
:00435870 6A01                    push 00000001
:00435872 8B45E8                  mov eax, dword ptr [ebp-18]
:00435875 50                      push eax
:00435876 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00435879 8A11                    mov dl, byte ptr [ecx]
:0043587B 52                      push edx
:0043587C 668B45D4                mov ax, word ptr [ebp-2C]
:00435880 50                      push eax
:00435881 E806CC0000              call 0044248C
:00435886 83C410                  add esp, 00000010
:00435889 E80213FFFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043588E 6A03                    push 00000003
:00435890 E8AF14FFFF              call 00426D44
:00435895 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00435898 6A09                    push 00000009
:0043589A 6A21                    push 00000021
:0043589C 8A4DD5                  mov cl, byte ptr [ebp-2B]
:0043589F 51                      push ecx
:004358A0 33D2                    xor edx, edx
:004358A2 8A151C024B00            mov dl, byte ptr [004B021C]
:004358A8 83C206                  add edx, 00000006
:004358AB 52                      push edx
:004358AC B9A8034B00              mov ecx, 004B03A8
:004358B1 E810EF0000              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004357C4(U)
|
:004358B6 8B45F0                  mov eax, dword ptr [ebp-10]
:004358B9 33C9                    xor ecx, ecx
:004358BB 8A08                    mov cl, byte ptr [eax]
:004358BD 6BC924                  imul ecx, 00000024
:004358C0 81C108F54A00            add ecx, 004AF508
:004358C6 E8E5EFFCFF              call 004048B0
:004358CB 2B45E8                  sub eax, dword ptr [ebp-18]
:004358CE 50                      push eax
:004358CF 8B55F0                  mov edx, dword ptr [ebp-10]
:004358D2 33C0                    xor eax, eax
:004358D4 8A02                    mov al, byte ptr [edx]
:004358D6 8BC8                    mov ecx, eax
:004358D8 6BC924                  imul ecx, 00000024
:004358DB 81C108F54A00            add ecx, 004AF508
:004358E1 E8D750FFFF              call 0042A9BD
:004358E6 C745FC01000000          mov [ebp-04], 00000001
:004358ED 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004358F0 33D2                    xor edx, edx
:004358F2 8A11                    mov dl, byte ptr [ecx]
:004358F4 8BCA                    mov ecx, edx
:004358F6 6BC924                  imul ecx, 00000024
:004358F9 81C108F54A00            add ecx, 004AF508
:004358FF E8CC9DFFFF              call 0042F6D0
:00435904 50                      push eax
:00435905 E846160300              call 00466F50
:0043590A 83C404                  add esp, 00000004
:0043590D 8B45F0                  mov eax, dword ptr [ebp-10]
:00435910 83C001                  add eax, 00000001
:00435913 8945F0                  mov dword ptr [ebp-10], eax
:00435916 8A4DEC                  mov cl, byte ptr [ebp-14]
:00435919 80C101                  add cl, 01
:0043591C 884DEC                  mov byte ptr [ebp-14], cl
:0043591F E93DFCFFFF              jmp 00435561

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043556E(C)
|
:00435924 837DF800                cmp dword ptr [ebp-08], 00000000
:00435928 7437                    je 00435961
:0043592A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043592D 6BC924                  imul ecx, 00000024
:00435930 81C108F54A00            add ecx, 004AF508
:00435936 E8959DFFFF              call 0042F6D0
:0043593B 6BC070                  imul eax, 00000070
:0043593E 0598224900              add eax, 00492298
:00435943 8945D0                  mov dword ptr [ebp-30], eax
:00435946 6A01                    push 00000001
:00435948 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0043594B E830420000              call 00439B80
:00435950 25FF000000              and eax, 000000FF
:00435955 83C00A                  add eax, 0000000A
:00435958 50                      push eax
:00435959 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0043595C E8A7D2FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435928(C)
|
:00435961 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004354AF(U), :0043551F(U)
|
:0043596B 5E                      pop esi
:0043596C 8BE5                    mov esp, ebp
:0043596E 5D                      pop ebp
:0043596F C3                      ret



* Referenced by a CALL at Address:
|:004336F1   
|
:00435970 55                      push ebp
:00435971 8BEC                    mov ebp, esp
:00435973 83EC20                  sub esp, 00000020
:00435976 C645FCFF                mov [ebp-04], FF
:0043597A 8B4508                  mov eax, dword ptr [ebp+08]
:0043597D 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043597F B906000000              mov ecx, 00000006
:00435984 F7F1                    div ecx
:00435986 8845F4                  mov byte ptr [ebp-0C], al
:00435989 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043598C 6BC911                  imul ecx, 00000011
:0043598F 81C180DF4A00            add ecx, 004ADF80
:00435995 E8569FFFFF              call 0042F8F0
:0043599A 8845EC                  mov byte ptr [ebp-14], al
:0043599D 8B4D08                  mov ecx, dword ptr [ebp+08]
:004359A0 6BC911                  imul ecx, 00000011
:004359A3 81C180DF4A00            add ecx, 004ADF80
:004359A9 E8321EFDFF              call 004077E0
:004359AE 8845F0                  mov byte ptr [ebp-10], al
:004359B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004359B4 6BC924                  imul ecx, 00000024
:004359B7 81C108F54A00            add ecx, 004AF508
:004359BD E82E9FFFFF              call 0042F8F0
:004359C2 25FF000000              and eax, 000000FF
:004359C7 83F807                  cmp eax, 00000007
:004359CA 7418                    je 004359E4
:004359CC 33D2                    xor edx, edx
:004359CE 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:004359D4 83E204                  and edx, 00000004
:004359D7 85D2                    test edx, edx
:004359D9 7509                    jne 004359E4
:004359DB C745E000000000          mov [ebp-20], 00000000
:004359E2 EB07                    jmp 004359EB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004359CA(C), :004359D9(C)
|
:004359E4 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004359E2(U)
|
:004359EB 8B45E0                  mov eax, dword ptr [ebp-20]
:004359EE 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004359F1 68FF000000              push 000000FF
:004359F6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004359F9 51                      push ecx
:004359FA 8B550C                  mov edx, dword ptr [ebp+0C]
:004359FD 52                      push edx
:004359FE 8B4508                  mov eax, dword ptr [ebp+08]
:00435A01 50                      push eax
:00435A02 E8DFA6FFFF              call 004300E6
:00435A07 83C410                  add esp, 00000010
:00435A0A 85C0                    test eax, eax
:00435A0C 7505                    jne 00435A13
:00435A0E E973010000              jmp 00435B86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435A0C(C)
|
:00435A13 8A4DEC                  mov cl, byte ptr [ebp-14]
:00435A16 51                      push ecx
:00435A17 E89EE2FFFF              call 00433CBA
:00435A1C 83C404                  add esp, 00000004
:00435A1F 6A00                    push 00000000
:00435A21 8B55F0                  mov edx, dword ptr [ebp-10]
:00435A24 81E2FF000000            and edx, 000000FF
:00435A2A 80CA80                  or dl, 80
:00435A2D 52                      push edx
:00435A2E 8A450C                  mov al, byte ptr [ebp+0C]
:00435A31 50                      push eax
:00435A32 B9A8034B00              mov ecx, 004B03A8
:00435A37 E8BC020100              call 00445CF8
:00435A3C 8845FC                  mov byte ptr [ebp-04], al
:00435A3F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435A42 81E1FF000000            and ecx, 000000FF
:00435A48 81F9FF000000            cmp ecx, 000000FF
:00435A4E 0F8432010000            je 00435B86
:00435A54 8A55FC                  mov dl, byte ptr [ebp-04]
:00435A57 52                      push edx
:00435A58 8A450C                  mov al, byte ptr [ebp+0C]
:00435A5B 50                      push eax
:00435A5C E8EBD1FFFF              call 00432C4C
:00435A61 83C408                  add esp, 00000008
:00435A64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435A67 81E1FF000000            and ecx, 000000FF
:00435A6D 6BC924                  imul ecx, 00000024
:00435A70 81C108F54A00            add ecx, 004AF508
:00435A76 E82539FFFF              call 004293A0
:00435A7B 668B08                  mov cx, word ptr [eax]
:00435A7E 66894DE8                mov word ptr [ebp-18], cx
:00435A82 837DF800                cmp dword ptr [ebp-08], 00000000
:00435A86 7421                    je 00435AA9
:00435A88 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435A8B 6BC911                  imul ecx, 00000011
:00435A8E 81C180DF4A00            add ecx, 004ADF80
:00435A94 E8171DFDFF              call 004077B0
:00435A99 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00435A9A 68848A4700              push 00478A84
:00435A9F 6A00                    push 00000000
:00435AA1 E8C630FFFF              call 00428B6C
:00435AA6 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435A86(C)
|
:00435AA9 6A00                    push 00000000
:00435AAB 8A5508                  mov dl, byte ptr [ebp+08]
:00435AAE 52                      push edx
:00435AAF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00435AB2 25FF000000              and eax, 000000FF
:00435AB7 C1E004                  shl eax, 04
:00435ABA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00435ABD 81E1FF000000            and ecx, 000000FF
:00435AC3 0BC1                    or eax, ecx
:00435AC5 50                      push eax
:00435AC6 8A5510                  mov dl, byte ptr [ebp+10]
:00435AC9 52                      push edx
:00435ACA 8A45FC                  mov al, byte ptr [ebp-04]
:00435ACD 50                      push eax
:00435ACE 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00435AD1 51                      push ecx
:00435AD2 B930024B00              mov ecx, 004B0230
:00435AD7 E8C2700000              call 0043CB9E
:00435ADC 8B55EC                  mov edx, dword ptr [ebp-14]
:00435ADF 81E2FF000000            and edx, 000000FF
:00435AE5 85D2                    test edx, edx
:00435AE7 0F848F000000            je 00435B7C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435AED 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00435AF2 6A11                    push 00000011
:00435AF4 68B8014B00              push 004B01B8
:00435AF9 E84ACD0200              call 00462848
:00435AFE 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435B01 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435B06 68FF000000              push 000000FF
:00435B0B 6A00                    push 00000000
:00435B0D 68B8014B00              push 004B01B8
:00435B12 8A45EC                  mov al, byte ptr [ebp-14]
:00435B15 50                      push eax
:00435B16 8A4DFC                  mov cl, byte ptr [ebp-04]
:00435B19 51                      push ecx
:00435B1A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00435B1D 6BC924                  imul ecx, 00000024
:00435B20 81C108F54A00            add ecx, 004AF508
:00435B26 E8D57B0100              call 0044D700
:00435B2B 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435B7A(U)
|
:00435B2E 8B55E4                  mov edx, dword ptr [ebp-1C]
:00435B31 33C0                    xor eax, eax
:00435B33 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435B35 3DFF000000              cmp eax, 000000FF
:00435B3A 7440                    je 00435B7C
:00435B3C 6A01                    push 00000001
:00435B3E 8A4D08                  mov cl, byte ptr [ebp+08]
:00435B41 51                      push ecx
:00435B42 8B55F4                  mov edx, dword ptr [ebp-0C]
:00435B45 81E2FF000000            and edx, 000000FF
:00435B4B C1E204                  shl edx, 04
:00435B4E 8B45F0                  mov eax, dword ptr [ebp-10]
:00435B51 25FF000000              and eax, 000000FF
:00435B56 0BD0                    or edx, eax
:00435B58 52                      push edx
:00435B59 8A4D10                  mov cl, byte ptr [ebp+10]
:00435B5C 51                      push ecx
:00435B5D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00435B60 8A02                    mov al, byte ptr [edx]
:00435B62 50                      push eax
:00435B63 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00435B66 51                      push ecx
:00435B67 B930024B00              mov ecx, 004B0230
:00435B6C E82D700000              call 0043CB9E
:00435B71 8B55E4                  mov edx, dword ptr [ebp-1C]
:00435B74 83C201                  add edx, 00000001
:00435B77 8955E4                  mov dword ptr [ebp-1C], edx
:00435B7A EBB2                    jmp 00435B2E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435AE7(C), :00435B3A(C)
|
:00435B7C C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435A0E(U), :00435A4E(C)
|
:00435B86 8BE5                    mov esp, ebp
:00435B88 5D                      pop ebp
:00435B89 C3                      ret



* Referenced by a CALL at Address:
|:00433712   
|
:00435B8A 55                      push ebp
:00435B8B 8BEC                    mov ebp, esp
:00435B8D 83EC20                  sub esp, 00000020
:00435B90 C645F8FF                mov [ebp-08], FF
:00435B94 8B4508                  mov eax, dword ptr [ebp+08]
:00435B97 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00435B99 B906000000              mov ecx, 00000006
:00435B9E F7F1                    div ecx
:00435BA0 8845F0                  mov byte ptr [ebp-10], al
:00435BA3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435BA6 6BC911                  imul ecx, 00000011
:00435BA9 81C180DF4A00            add ecx, 004ADF80
:00435BAF E83C9DFFFF              call 0042F8F0
:00435BB4 8845E8                  mov byte ptr [ebp-18], al
:00435BB7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435BBA 6BC911                  imul ecx, 00000011
:00435BBD 81C180DF4A00            add ecx, 004ADF80
:00435BC3 E8181CFDFF              call 004077E0
:00435BC8 8845EC                  mov byte ptr [ebp-14], al
:00435BCB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00435BCE 6BC924                  imul ecx, 00000024
:00435BD1 81C108F54A00            add ecx, 004AF508
:00435BD7 E8149DFFFF              call 0042F8F0
:00435BDC 25FF000000              and eax, 000000FF
:00435BE1 83F807                  cmp eax, 00000007
:00435BE4 7418                    je 00435BFE
:00435BE6 33D2                    xor edx, edx
:00435BE8 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00435BEE 83E204                  and edx, 00000004
:00435BF1 85D2                    test edx, edx
:00435BF3 7509                    jne 00435BFE
:00435BF5 C745E000000000          mov [ebp-20], 00000000
:00435BFC EB07                    jmp 00435C05

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435BE4(C), :00435BF3(C)
|
:00435BFE C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435BFC(U)
|
:00435C05 8B45E0                  mov eax, dword ptr [ebp-20]
:00435C08 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435C0B 68FF000000              push 000000FF
:00435C10 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00435C13 51                      push ecx
:00435C14 8B550C                  mov edx, dword ptr [ebp+0C]
:00435C17 52                      push edx
:00435C18 8B4508                  mov eax, dword ptr [ebp+08]
:00435C1B 50                      push eax
:00435C1C E8C5A4FFFF              call 004300E6
:00435C21 83C410                  add esp, 00000010
:00435C24 85C0                    test eax, eax
:00435C26 7505                    jne 00435C2D
:00435C28 E934010000              jmp 00435D61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435C26(C)
|
:00435C2D 6A18                    push 00000018
:00435C2F 6A27                    push 00000027
:00435C31 6A00                    push 00000000
:00435C33 6A00                    push 00000000
:00435C35 B9A8034B00              mov ecx, 004B03A8
:00435C3A E887EB0000              call 004447C6
:00435C3F C745FC00000000          mov [ebp-04], 00000000
:00435C46 EB09                    jmp 00435C51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435D5C(U)
|
:00435C48 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435C4B 83C101                  add ecx, 00000001
:00435C4E 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435C46(U)
|
:00435C51 837DFC02                cmp dword ptr [ebp-04], 00000002
:00435C55 0F8306010000            jnb 00435D61
:00435C5B 8A55E8                  mov dl, byte ptr [ebp-18]
:00435C5E 52                      push edx
:00435C5F E856E0FFFF              call 00433CBA
:00435C64 83C404                  add esp, 00000004
:00435C67 6A00                    push 00000000
:00435C69 8B45EC                  mov eax, dword ptr [ebp-14]
:00435C6C 25FF000000              and eax, 000000FF
:00435C71 0C80                    or al, 80
:00435C73 50                      push eax
:00435C74 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00435C77 51                      push ecx
:00435C78 B9A8034B00              mov ecx, 004B03A8
:00435C7D E876000100              call 00445CF8
:00435C82 8845F8                  mov byte ptr [ebp-08], al
:00435C85 8B55F8                  mov edx, dword ptr [ebp-08]
:00435C88 81E2FF000000            and edx, 000000FF
:00435C8E 81FAFF000000            cmp edx, 000000FF
:00435C94 0F84C0000000            je 00435D5A
:00435C9A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00435C9D 81E1FF000000            and ecx, 000000FF
:00435CA3 6BC924                  imul ecx, 00000024
:00435CA6 81C108F54A00            add ecx, 004AF508
:00435CAC E81F9CFFFF              call 0042F8D0
:00435CB1 25FF000000              and eax, 000000FF
:00435CB6 83F802                  cmp eax, 00000002
:00435CB9 0F8599000000            jne 00435D58
:00435CBF 837DF400                cmp dword ptr [ebp-0C], 00000000
:00435CC3 7427                    je 00435CEC
:00435CC5 837DFC00                cmp dword ptr [ebp-04], 00000000
:00435CC9 7521                    jne 00435CEC
:00435CCB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435CCE 6BC911                  imul ecx, 00000011
:00435CD1 81C180DF4A00            add ecx, 004ADF80
:00435CD7 E8D41AFDFF              call 004077B0
:00435CDC 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00435CDD 68888A4700              push 00478A88
:00435CE2 6A00                    push 00000000
:00435CE4 E8832EFFFF              call 00428B6C
:00435CE9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435CC3(C), :00435CC9(C)
|
:00435CEC 8A45F8                  mov al, byte ptr [ebp-08]
:00435CEF 50                      push eax
:00435CF0 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00435CF3 51                      push ecx
:00435CF4 E853CFFFFF              call 00432C4C
:00435CF9 83C408                  add esp, 00000008
:00435CFC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00435CFF 81E1FF000000            and ecx, 000000FF
:00435D05 6BC924                  imul ecx, 00000024
:00435D08 81C108F54A00            add ecx, 004AF508
:00435D0E E88D36FFFF              call 004293A0
:00435D13 668B10                  mov dx, word ptr [eax]
:00435D16 668955E4                mov word ptr [ebp-1C], dx
:00435D1A 6A00                    push 00000000
:00435D1C 8A4508                  mov al, byte ptr [ebp+08]
:00435D1F 50                      push eax
:00435D20 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00435D23 81E1FF000000            and ecx, 000000FF
:00435D29 C1E104                  shl ecx, 04
:00435D2C 8B55EC                  mov edx, dword ptr [ebp-14]
:00435D2F 81E2FF000000            and edx, 000000FF
:00435D35 0BCA                    or ecx, edx
:00435D37 51                      push ecx
:00435D38 8A4510                  mov al, byte ptr [ebp+10]
:00435D3B 50                      push eax
:00435D3C 8A4DF8                  mov cl, byte ptr [ebp-08]
:00435D3F 51                      push ecx
:00435D40 8A550C                  mov dl, byte ptr [ebp+0C]
:00435D43 52                      push edx
:00435D44 B930024B00              mov ecx, 004B0230
:00435D49 E8506E0000              call 0043CB9E
:00435D4E C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435CB9(C)
|
:00435D58 EB02                    jmp 00435D5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435C94(C)
|
:00435D5A EB05                    jmp 00435D61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435D58(U)
|
:00435D5C E9E7FEFFFF              jmp 00435C48

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435C28(U), :00435C55(C), :00435D5A(U)
|
:00435D61 8BE5                    mov esp, ebp
:00435D63 5D                      pop ebp
:00435D64 C3                      ret



* Referenced by a CALL at Address:
|:00433733   
|
:00435D65 55                      push ebp
:00435D66 8BEC                    mov ebp, esp
:00435D68 83EC24                  sub esp, 00000024
:00435D6B C645FCFF                mov [ebp-04], FF
:00435D6F 8B4508                  mov eax, dword ptr [ebp+08]
:00435D72 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00435D74 B906000000              mov ecx, 00000006
:00435D79 F7F1                    div ecx
:00435D7B 8845F4                  mov byte ptr [ebp-0C], al
:00435D7E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435D81 6BC911                  imul ecx, 00000011
:00435D84 81C180DF4A00            add ecx, 004ADF80
:00435D8A E8619BFFFF              call 0042F8F0
:00435D8F 8845EC                  mov byte ptr [ebp-14], al
:00435D92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435D95 6BC911                  imul ecx, 00000011
:00435D98 81C180DF4A00            add ecx, 004ADF80
:00435D9E E83D1AFDFF              call 004077E0
:00435DA3 8845F0                  mov byte ptr [ebp-10], al
:00435DA6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00435DA9 6BC924                  imul ecx, 00000024
:00435DAC 81C108F54A00            add ecx, 004AF508
:00435DB2 E8399BFFFF              call 0042F8F0
:00435DB7 25FF000000              and eax, 000000FF
:00435DBC 83F807                  cmp eax, 00000007
:00435DBF 7418                    je 00435DD9
:00435DC1 33D2                    xor edx, edx
:00435DC3 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00435DC9 83E204                  and edx, 00000004
:00435DCC 85D2                    test edx, edx
:00435DCE 7509                    jne 00435DD9
:00435DD0 C745DC00000000          mov [ebp-24], 00000000
:00435DD7 EB07                    jmp 00435DE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435DBF(C), :00435DCE(C)
|
:00435DD9 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435DD7(U)
|
:00435DE0 8B45DC                  mov eax, dword ptr [ebp-24]
:00435DE3 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00435DE6 68FF000000              push 000000FF
:00435DEB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00435DEE 51                      push ecx
:00435DEF 8B550C                  mov edx, dword ptr [ebp+0C]
:00435DF2 52                      push edx
:00435DF3 8B4508                  mov eax, dword ptr [ebp+08]
:00435DF6 50                      push eax
:00435DF7 E8EAA2FFFF              call 004300E6
:00435DFC 83C410                  add esp, 00000010
:00435DFF 85C0                    test eax, eax
:00435E01 7505                    jne 00435E08
:00435E03 E9B0020000              jmp 004360B8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435E01(C), :00435EEC(U), :00435F41(U)
|
:00435E08 8A4DEC                  mov cl, byte ptr [ebp-14]
:00435E0B 51                      push ecx
:00435E0C E8A9DEFFFF              call 00433CBA
:00435E11 83C404                  add esp, 00000004
:00435E14 6A00                    push 00000000
:00435E16 8B55F0                  mov edx, dword ptr [ebp-10]
:00435E19 81E2FF000000            and edx, 000000FF
:00435E1F 80CA80                  or dl, 80
:00435E22 52                      push edx
:00435E23 8A450C                  mov al, byte ptr [ebp+0C]
:00435E26 50                      push eax
:00435E27 B9A8034B00              mov ecx, 004B03A8
:00435E2C E8C7FE0000              call 00445CF8
:00435E31 8845FC                  mov byte ptr [ebp-04], al
:00435E34 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435E37 81E1FF000000            and ecx, 000000FF
:00435E3D 81F9FF000000            cmp ecx, 000000FF
:00435E43 0F846F020000            je 004360B8
:00435E49 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435E4C 81E1FF000000            and ecx, 000000FF
:00435E52 6BC924                  imul ecx, 00000024
:00435E55 81C108F54A00            add ecx, 004AF508
:00435E5B E88099FFFF              call 0042F7E0
:00435E60 25FF000000              and eax, 000000FF
:00435E65 83F801                  cmp eax, 00000001
:00435E68 0F8483000000            je 00435EF1
:00435E6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435E71 81E1FF000000            and ecx, 000000FF
:00435E77 6BC924                  imul ecx, 00000024
:00435E7A 81C108F54A00            add ecx, 004AF508
:00435E80 E85B99FFFF              call 0042F7E0
:00435E85 25FF000000              and eax, 000000FF
:00435E8A 83F803                  cmp eax, 00000003
:00435E8D 7462                    je 00435EF1
:00435E8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435E92 81E1FF000000            and ecx, 000000FF
:00435E98 6BC924                  imul ecx, 00000024
:00435E9B 81C108F54A00            add ecx, 004AF508
:00435EA1 E83A99FFFF              call 0042F7E0
:00435EA6 25FF000000              and eax, 000000FF
:00435EAB 83F805                  cmp eax, 00000005
:00435EAE 7441                    je 00435EF1
:00435EB0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435EB3 81E1FF000000            and ecx, 000000FF
:00435EB9 6BC924                  imul ecx, 00000024
:00435EBC 81C108F54A00            add ecx, 004AF508
:00435EC2 E81999FFFF              call 0042F7E0
:00435EC7 25FF000000              and eax, 000000FF
:00435ECC 83F807                  cmp eax, 00000007
:00435ECF 7420                    je 00435EF1

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00435ED1 6A07                    push 00000007
:00435ED3 B9800D4B00              mov ecx, 004B0D80
:00435ED8 E8CCBC0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"MH"
                                  |
:00435EDD 688C8A4700              push 00478A8C
:00435EE2 6A00                    push 00000000
:00435EE4 E8832CFFFF              call 00428B6C
:00435EE9 83C408                  add esp, 00000008
:00435EEC E917FFFFFF              jmp 00435E08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435E68(C), :00435E8D(C), :00435EAE(C), :00435ECF(C)
|
:00435EF1 6A01                    push 00000001
:00435EF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435EF6 81E1FF000000            and ecx, 000000FF
:00435EFC 6BC924                  imul ecx, 00000024
:00435EFF 81C108F54A00            add ecx, 004AF508
:00435F05 E85698FFFF              call 0042F760
:00435F0A 85C0                    test eax, eax
:00435F0C 7438                    je 00435F46

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00435F0E 6A07                    push 00000007
:00435F10 B9800D4B00              mov ecx, 004B0D80
:00435F15 E88FBC0200              call 00461BA9
:00435F1A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435F1D 81E1FF000000            and ecx, 000000FF
:00435F23 6BC924                  imul ecx, 00000024
:00435F26 81C108F54A00            add ecx, 004AF508
:00435F2C E8AF97FFFF              call 0042F6E0
:00435F31 50                      push eax

* Possible StringData Ref from Data Obj ->"%swgʤFC"
                                  |
:00435F32 68A48A4700              push 00478AA4
:00435F37 6A00                    push 00000000
:00435F39 E82E2CFFFF              call 00428B6C
:00435F3E 83C40C                  add esp, 0000000C
:00435F41 E9C2FEFFFF              jmp 00435E08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F0C(C)
|
:00435F46 8A55FC                  mov dl, byte ptr [ebp-04]
:00435F49 52                      push edx
:00435F4A 8A450C                  mov al, byte ptr [ebp+0C]
:00435F4D 50                      push eax
:00435F4E E844A1FFFF              call 00430097
:00435F53 83C408                  add esp, 00000008
:00435F56 85C0                    test eax, eax
:00435F58 0F84DC000000            je 0043603A
:00435F5E 8A4DFC                  mov cl, byte ptr [ebp-04]
:00435F61 51                      push ecx
:00435F62 8A550C                  mov dl, byte ptr [ebp+0C]
:00435F65 52                      push edx
:00435F66 E8E1CCFFFF              call 00432C4C
:00435F6B 83C408                  add esp, 00000008
:00435F6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435F71 81E1FF000000            and ecx, 000000FF
:00435F77 6BC924                  imul ecx, 00000024
:00435F7A 81C108F54A00            add ecx, 004AF508
:00435F80 E81B34FFFF              call 004293A0
:00435F85 668B00                  mov ax, word ptr [eax]
:00435F88 668945E8                mov word ptr [ebp-18], ax
:00435F8C 837DF800                cmp dword ptr [ebp-08], 00000000
:00435F90 7421                    je 00435FB3
:00435F92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435F95 6BC911                  imul ecx, 00000011
:00435F98 81C180DF4A00            add ecx, 004ADF80
:00435F9E E80D18FDFF              call 004077B0
:00435FA3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00435FA4 68B48A4700              push 00478AB4
:00435FA9 6A00                    push 00000000
:00435FAB E8BC2BFFFF              call 00428B6C
:00435FB0 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F90(C)
|
:00435FB3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435FB6 81E1FF000000            and ecx, 000000FF
:00435FBC 6BC924                  imul ecx, 00000024
:00435FBF 81C108F54A00            add ecx, 004AF508
:00435FC5 E8D633FFFF              call 004293A0
:00435FCA 668B08                  mov cx, word ptr [eax]
:00435FCD 66894DE4                mov word ptr [ebp-1C], cx
:00435FD1 8A55E5                  mov dl, byte ptr [ebp-1B]
:00435FD4 52                      push edx
:00435FD5 8A45E4                  mov al, byte ptr [ebp-1C]
:00435FD8 50                      push eax
:00435FD9 B9A8034B00              mov ecx, 004B03A8
:00435FDE E854FA0000              call 00445A37
:00435FE3 6A01                    push 00000001
:00435FE5 8A4D10                  mov cl, byte ptr [ebp+10]
:00435FE8 51                      push ecx
:00435FE9 8A5508                  mov dl, byte ptr [ebp+08]
:00435FEC 52                      push edx
:00435FED 8A45FC                  mov al, byte ptr [ebp-04]
:00435FF0 50                      push eax
:00435FF1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00435FF4 51                      push ecx
:00435FF5 B9A8034B00              mov ecx, 004B03A8
:00435FFA E8D7060100              call 004466D6
:00435FFF 6A41                    push 00000041
:00436001 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436004 81E1FF000000            and ecx, 000000FF
:0043600A 6BC924                  imul ecx, 00000024
:0043600D 81C108F54A00            add ecx, 004AF508
:00436013 E8483B0000              call 00439B60
:00436018 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043601B 81E1FF000000            and ecx, 000000FF
:00436021 6BC924                  imul ecx, 00000024
:00436024 81C108F54A00            add ecx, 004AF508
:0043602A E8A196FFFF              call 0042F6D0
:0043602F 50                      push eax
:00436030 E81B0F0300              call 00466F50
:00436035 83C404                  add esp, 00000004
:00436038 EB37                    jmp 00436071

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F58(C)
|
:0043603A 6A00                    push 00000000
:0043603C 8A5510                  mov dl, byte ptr [ebp+10]
:0043603F 52                      push edx
:00436040 8A4508                  mov al, byte ptr [ebp+08]
:00436043 50                      push eax
:00436044 8A4DFC                  mov cl, byte ptr [ebp-04]
:00436047 51                      push ecx
:00436048 8A550C                  mov dl, byte ptr [ebp+0C]
:0043604B 52                      push edx
:0043604C B9A8034B00              mov ecx, 004B03A8
:00436051 E880060100              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436056 6A07                    push 00000007
:00436058 B9800D4B00              mov ecx, 004B0D80
:0043605D E847BB0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:00436062 68B88A4700              push 00478AB8
:00436067 6A00                    push 00000000
:00436069 E8FE2AFFFF              call 00428B6C
:0043606E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436038(U)
|
:00436071 837DF800                cmp dword ptr [ebp-08], 00000000
:00436075 7437                    je 004360AE
:00436077 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043607A 6BC924                  imul ecx, 00000024
:0043607D 81C108F54A00            add ecx, 004AF508
:00436083 E84896FFFF              call 0042F6D0
:00436088 6BC070                  imul eax, 00000070
:0043608B 0598224900              add eax, 00492298
:00436090 8945E0                  mov dword ptr [ebp-20], eax
:00436093 6A01                    push 00000001
:00436095 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00436098 E8E33A0000              call 00439B80
:0043609D 25FF000000              and eax, 000000FF
:004360A2 83C014                  add eax, 00000014
:004360A5 50                      push eax
:004360A6 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004360A9 E85ACBFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436075(C)
|
:004360AE C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435E03(U), :00435E43(C)
|
:004360B8 8BE5                    mov esp, ebp
:004360BA 5D                      pop ebp
:004360BB C3                      ret



* Referenced by a CALL at Address:
|:00433754   
|
:004360BC 55                      push ebp
:004360BD 8BEC                    mov ebp, esp
:004360BF 83EC28                  sub esp, 00000028
:004360C2 C645FCFF                mov [ebp-04], FF
:004360C6 8B4508                  mov eax, dword ptr [ebp+08]
:004360C9 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:004360CB B906000000              mov ecx, 00000006
:004360D0 F7F1                    div ecx
:004360D2 8845F4                  mov byte ptr [ebp-0C], al
:004360D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004360D8 6BC911                  imul ecx, 00000011
:004360DB 81C180DF4A00            add ecx, 004ADF80
:004360E1 E80A98FFFF              call 0042F8F0
:004360E6 8845EC                  mov byte ptr [ebp-14], al
:004360E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004360EC 6BC911                  imul ecx, 00000011
:004360EF 81C180DF4A00            add ecx, 004ADF80
:004360F5 E8E616FDFF              call 004077E0
:004360FA 8845F0                  mov byte ptr [ebp-10], al
:004360FD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436100 6BC924                  imul ecx, 00000024
:00436103 81C108F54A00            add ecx, 004AF508
:00436109 E8E297FFFF              call 0042F8F0
:0043610E 25FF000000              and eax, 000000FF
:00436113 83F807                  cmp eax, 00000007
:00436116 7418                    je 00436130
:00436118 33D2                    xor edx, edx
:0043611A 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00436120 83E204                  and edx, 00000004
:00436123 85D2                    test edx, edx
:00436125 7509                    jne 00436130
:00436127 C745D800000000          mov [ebp-28], 00000000
:0043612E EB07                    jmp 00436137

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436116(C), :00436125(C)
|
:00436130 C745D801000000          mov [ebp-28], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043612E(U)
|
:00436137 8B45D8                  mov eax, dword ptr [ebp-28]
:0043613A 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043613D 68FF000000              push 000000FF
:00436142 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436145 51                      push ecx
:00436146 8B550C                  mov edx, dword ptr [ebp+0C]
:00436149 52                      push edx
:0043614A 8B4508                  mov eax, dword ptr [ebp+08]
:0043614D 50                      push eax
:0043614E E8939FFFFF              call 004300E6
:00436153 83C410                  add esp, 00000010
:00436156 85C0                    test eax, eax
:00436158 7505                    jne 0043615F
:0043615A E92D020000              jmp 0043638C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436158(C), :004361E5(U)
|
:0043615F 8A4DEC                  mov cl, byte ptr [ebp-14]
:00436162 51                      push ecx
:00436163 E852DBFFFF              call 00433CBA
:00436168 83C404                  add esp, 00000004
:0043616B 6A00                    push 00000000
:0043616D 8B55F0                  mov edx, dword ptr [ebp-10]
:00436170 81E2FF000000            and edx, 000000FF
:00436176 80CA80                  or dl, 80
:00436179 52                      push edx
:0043617A 8A450C                  mov al, byte ptr [ebp+0C]
:0043617D 50                      push eax
:0043617E B9A8034B00              mov ecx, 004B03A8
:00436183 E870FB0000              call 00445CF8
:00436188 8845FC                  mov byte ptr [ebp-04], al
:0043618B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043618E 81E1FF000000            and ecx, 000000FF
:00436194 81F9FF000000            cmp ecx, 000000FF
:0043619A 0F84EC010000            je 0043638C
:004361A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004361A3 81E1FF000000            and ecx, 000000FF
:004361A9 6BC924                  imul ecx, 00000024
:004361AC 81C108F54A00            add ecx, 004AF508
:004361B2 E8E931FFFF              call 004293A0
:004361B7 50                      push eax
:004361B8 E8C2170100              call 0044797F
:004361BD 83C404                  add esp, 00000004
:004361C0 25FF000000              and eax, 000000FF
:004361C5 83F80A                  cmp eax, 0000000A
:004361C8 7420                    je 004361EA

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004361CA 6A07                    push 00000007
:004361CC B9800D4B00              mov ecx, 004B0D80
:004361D1 E8D3B90200              call 00461BA9

* Possible StringData Ref from Data Obj ->"ĤHbWɵLkC"
                                  |
:004361D6 68C88A4700              push 00478AC8
:004361DB 6A00                    push 00000000
:004361DD E88A29FFFF              call 00428B6C
:004361E2 83C408                  add esp, 00000008
:004361E5 E975FFFFFF              jmp 0043615F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004361C8(C)
|
:004361EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004361ED 81E1FF000000            and ecx, 000000FF
:004361F3 6BC924                  imul ecx, 00000024
:004361F6 81C108F54A00            add ecx, 004AF508
:004361FC E89F31FFFF              call 004293A0
:00436201 668B10                  mov dx, word ptr [eax]
:00436204 668955E8                mov word ptr [ebp-18], dx
:00436208 8A45E9                  mov al, byte ptr [ebp-17]
:0043620B 50                      push eax
:0043620C 8A4DE8                  mov cl, byte ptr [ebp-18]
:0043620F 51                      push ecx
:00436210 B9A8034B00              mov ecx, 004B03A8
:00436215 E81DF80000              call 00445A37
:0043621A 8A55FC                  mov dl, byte ptr [ebp-04]
:0043621D 52                      push edx
:0043621E 8A450C                  mov al, byte ptr [ebp+0C]
:00436221 50                      push eax
:00436222 E8709EFFFF              call 00430097
:00436227 83C408                  add esp, 00000008
:0043622A 85C0                    test eax, eax
:0043622C 0F84DC000000            je 0043630E
:00436232 8A4DFC                  mov cl, byte ptr [ebp-04]
:00436235 51                      push ecx
:00436236 8A550C                  mov dl, byte ptr [ebp+0C]
:00436239 52                      push edx
:0043623A E80DCAFFFF              call 00432C4C
:0043623F 83C408                  add esp, 00000008
:00436242 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436245 81E1FF000000            and ecx, 000000FF
:0043624B 6BC924                  imul ecx, 00000024
:0043624E 81C108F54A00            add ecx, 004AF508
:00436254 E84731FFFF              call 004293A0
:00436259 668B00                  mov ax, word ptr [eax]
:0043625C 668945E4                mov word ptr [ebp-1C], ax
:00436260 837DF800                cmp dword ptr [ebp-08], 00000000
:00436264 7421                    je 00436287
:00436266 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436269 6BC911                  imul ecx, 00000011
:0043626C 81C180DF4A00            add ecx, 004ADF80
:00436272 E83915FDFF              call 004077B0
:00436277 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00436278 68E48A4700              push 00478AE4
:0043627D 6A00                    push 00000000
:0043627F E8E828FFFF              call 00428B6C
:00436284 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436264(C)
|
:00436287 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043628A 81E1FF000000            and ecx, 000000FF
:00436290 6BC924                  imul ecx, 00000024
:00436293 81C108F54A00            add ecx, 004AF508
:00436299 E80231FFFF              call 004293A0
:0043629E 668B08                  mov cx, word ptr [eax]
:004362A1 66894DE0                mov word ptr [ebp-20], cx
:004362A5 8A55E1                  mov dl, byte ptr [ebp-1F]
:004362A8 52                      push edx
:004362A9 8A45E0                  mov al, byte ptr [ebp-20]
:004362AC 50                      push eax
:004362AD B9A8034B00              mov ecx, 004B03A8
:004362B2 E880F70000              call 00445A37
:004362B7 6A01                    push 00000001
:004362B9 8A4D10                  mov cl, byte ptr [ebp+10]
:004362BC 51                      push ecx
:004362BD 8A5508                  mov dl, byte ptr [ebp+08]
:004362C0 52                      push edx
:004362C1 8A45FC                  mov al, byte ptr [ebp-04]
:004362C4 50                      push eax
:004362C5 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004362C8 51                      push ecx
:004362C9 B9A8034B00              mov ecx, 004B03A8
:004362CE E803040100              call 004466D6
:004362D3 6A41                    push 00000041
:004362D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004362D8 81E1FF000000            and ecx, 000000FF
:004362DE 6BC924                  imul ecx, 00000024
:004362E1 81C108F54A00            add ecx, 004AF508
:004362E7 E874380000              call 00439B60
:004362EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004362EF 81E1FF000000            and ecx, 000000FF
:004362F5 6BC924                  imul ecx, 00000024
:004362F8 81C108F54A00            add ecx, 004AF508
:004362FE E8CD93FFFF              call 0042F6D0
:00436303 50                      push eax
:00436304 E8470C0300              call 00466F50
:00436309 83C404                  add esp, 00000004
:0043630C EB37                    jmp 00436345

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043622C(C)
|
:0043630E 6A00                    push 00000000
:00436310 8A5510                  mov dl, byte ptr [ebp+10]
:00436313 52                      push edx
:00436314 8A4508                  mov al, byte ptr [ebp+08]
:00436317 50                      push eax
:00436318 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043631B 51                      push ecx
:0043631C 8A550C                  mov dl, byte ptr [ebp+0C]
:0043631F 52                      push edx
:00436320 B9A8034B00              mov ecx, 004B03A8
:00436325 E8AC030100              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043632A 6A07                    push 00000007
:0043632C B9800D4B00              mov ecx, 004B0D80
:00436331 E873B80200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:00436336 68E88A4700              push 00478AE8
:0043633B 6A00                    push 00000000
:0043633D E82A28FFFF              call 00428B6C
:00436342 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043630C(U)
|
:00436345 837DF800                cmp dword ptr [ebp-08], 00000000
:00436349 7437                    je 00436382
:0043634B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043634E 6BC924                  imul ecx, 00000024
:00436351 81C108F54A00            add ecx, 004AF508
:00436357 E87493FFFF              call 0042F6D0
:0043635C 6BC070                  imul eax, 00000070
:0043635F 0598224900              add eax, 00492298
:00436364 8945DC                  mov dword ptr [ebp-24], eax
:00436367 6A01                    push 00000001
:00436369 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043636C E80F380000              call 00439B80
:00436371 25FF000000              and eax, 000000FF
:00436376 83C014                  add eax, 00000014
:00436379 50                      push eax
:0043637A 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043637D E886C8FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436349(C)
|
:00436382 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043615A(U), :0043619A(C)
|
:0043638C 8BE5                    mov esp, ebp
:0043638E 5D                      pop ebp
:0043638F C3                      ret



* Referenced by a CALL at Address:
|:00433775   
|
:00436390 55                      push ebp
:00436391 8BEC                    mov ebp, esp
:00436393 83EC28                  sub esp, 00000028
:00436396 C645FCFF                mov [ebp-04], FF
:0043639A 8B4508                  mov eax, dword ptr [ebp+08]
:0043639D 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043639F B906000000              mov ecx, 00000006
:004363A4 F7F1                    div ecx
:004363A6 8845F4                  mov byte ptr [ebp-0C], al
:004363A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004363AC 6BC911                  imul ecx, 00000011
:004363AF 81C180DF4A00            add ecx, 004ADF80
:004363B5 E83695FFFF              call 0042F8F0
:004363BA 8845EC                  mov byte ptr [ebp-14], al
:004363BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004363C0 6BC911                  imul ecx, 00000011
:004363C3 81C180DF4A00            add ecx, 004ADF80
:004363C9 E81214FDFF              call 004077E0
:004363CE 8845F0                  mov byte ptr [ebp-10], al
:004363D1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004363D4 6BC924                  imul ecx, 00000024
:004363D7 81C108F54A00            add ecx, 004AF508
:004363DD E80E95FFFF              call 0042F8F0
:004363E2 25FF000000              and eax, 000000FF
:004363E7 83F807                  cmp eax, 00000007
:004363EA 7418                    je 00436404
:004363EC 33D2                    xor edx, edx
:004363EE 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:004363F4 83E204                  and edx, 00000004
:004363F7 85D2                    test edx, edx
:004363F9 7509                    jne 00436404
:004363FB C745D800000000          mov [ebp-28], 00000000
:00436402 EB07                    jmp 0043640B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004363EA(C), :004363F9(C)
|
:00436404 C745D801000000          mov [ebp-28], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436402(U)
|
:0043640B 8B45D8                  mov eax, dword ptr [ebp-28]
:0043640E 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436411 68FF000000              push 000000FF
:00436416 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436419 51                      push ecx
:0043641A 8B550C                  mov edx, dword ptr [ebp+0C]
:0043641D 52                      push edx
:0043641E 8B4508                  mov eax, dword ptr [ebp+08]
:00436421 50                      push eax
:00436422 E8BF9CFFFF              call 004300E6
:00436427 83C410                  add esp, 00000010
:0043642A 85C0                    test eax, eax
:0043642C 7505                    jne 00436433
:0043642E E9D6020000              jmp 00436709

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043642C(C)
|
:00436433 8A4DEC                  mov cl, byte ptr [ebp-14]
:00436436 51                      push ecx
:00436437 E87ED8FFFF              call 00433CBA
:0043643C 83C404                  add esp, 00000004
:0043643F 6A00                    push 00000000
:00436441 8B55F0                  mov edx, dword ptr [ebp-10]
:00436444 81E2FF000000            and edx, 000000FF
:0043644A 80CA80                  or dl, 80
:0043644D 52                      push edx
:0043644E 8A450C                  mov al, byte ptr [ebp+0C]
:00436451 50                      push eax
:00436452 B9A8034B00              mov ecx, 004B03A8
:00436457 E89CF80000              call 00445CF8
:0043645C 8845FC                  mov byte ptr [ebp-04], al
:0043645F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436462 81E1FF000000            and ecx, 000000FF
:00436468 81F9FF000000            cmp ecx, 000000FF
:0043646E 0F8473020000            je 004366E7
:00436474 8A55FC                  mov dl, byte ptr [ebp-04]
:00436477 52                      push edx
:00436478 8A450C                  mov al, byte ptr [ebp+0C]
:0043647B 50                      push eax
:0043647C E8CBC7FFFF              call 00432C4C
:00436481 83C408                  add esp, 00000008
:00436484 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436487 81E1FF000000            and ecx, 000000FF
:0043648D 6BC924                  imul ecx, 00000024
:00436490 81C108F54A00            add ecx, 004AF508
:00436496 E8052FFFFF              call 004293A0
:0043649B 668B08                  mov cx, word ptr [eax]
:0043649E 66894DE8                mov word ptr [ebp-18], cx
:004364A2 837DF800                cmp dword ptr [ebp-08], 00000000
:004364A6 7421                    je 004364C9
:004364A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004364AB 6BC911                  imul ecx, 00000011
:004364AE 81C180DF4A00            add ecx, 004ADF80
:004364B4 E8F712FDFF              call 004077B0
:004364B9 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004364BA 68F88A4700              push 00478AF8
:004364BF 6A00                    push 00000000
:004364C1 E8A626FFFF              call 00428B6C
:004364C6 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004364A6(C)
|
:004364C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004364CC 81E1FF000000            and ecx, 000000FF
:004364D2 6BC924                  imul ecx, 00000024
:004364D5 81C108F54A00            add ecx, 004AF508
:004364DB E8C02EFFFF              call 004293A0
:004364E0 668B10                  mov dx, word ptr [eax]
:004364E3 668955E4                mov word ptr [ebp-1C], dx
:004364E7 8A45E5                  mov al, byte ptr [ebp-1B]
:004364EA 50                      push eax
:004364EB 8A4DE4                  mov cl, byte ptr [ebp-1C]
:004364EE 51                      push ecx
:004364EF B9A8034B00              mov ecx, 004B03A8
:004364F4 E83EF50000              call 00445A37
:004364F9 8A55FC                  mov dl, byte ptr [ebp-04]
:004364FC 52                      push edx
:004364FD 8A450C                  mov al, byte ptr [ebp+0C]
:00436500 50                      push eax
:00436501 E8919BFFFF              call 00430097
:00436506 83C408                  add esp, 00000008
:00436509 85C0                    test eax, eax
:0043650B 0F8458010000            je 00436669
:00436511 6A01                    push 00000001
:00436513 8A4D10                  mov cl, byte ptr [ebp+10]
:00436516 51                      push ecx
:00436517 8A5508                  mov dl, byte ptr [ebp+08]
:0043651A 52                      push edx
:0043651B 8A45FC                  mov al, byte ptr [ebp-04]
:0043651E 50                      push eax
:0043651F 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00436522 51                      push ecx
:00436523 B9A8034B00              mov ecx, 004B03A8
:00436528 E8A9010100              call 004466D6
:0043652D 8B55FC                  mov edx, dword ptr [ebp-04]
:00436530 81E2FF000000            and edx, 000000FF
:00436536 52                      push edx
:00436537 E8D1010000              call 0043670D
:0043653C 83C404                  add esp, 00000004
:0043653F 8B45FC                  mov eax, dword ptr [ebp-04]
:00436542 25FF000000              and eax, 000000FF
:00436547 50                      push eax
:00436548 E830020000              call 0043677D
:0043654D 83C404                  add esp, 00000004
:00436550 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00436553 81E1FF000000            and ecx, 000000FF
:00436559 85C9                    test ecx, ecx
:0043655B 0F8406010000            je 00436667

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436561 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00436566 6A11                    push 00000011
:00436568 68B8014B00              push 004B01B8
:0043656D E8D6C20200              call 00462848
:00436572 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436575 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043657A 68FF000000              push 000000FF
:0043657F 6A00                    push 00000000
:00436581 68B8014B00              push 004B01B8
:00436586 8A55EC                  mov dl, byte ptr [ebp-14]
:00436589 52                      push edx
:0043658A 8A45FC                  mov al, byte ptr [ebp-04]
:0043658D 50                      push eax
:0043658E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436591 6BC924                  imul ecx, 00000024
:00436594 81C108F54A00            add ecx, 004AF508
:0043659A E861710100              call 0044D700
:0043659F 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436662(U)
|
:004365A2 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004365A5 33D2                    xor edx, edx
:004365A7 8A11                    mov dl, byte ptr [ecx]
:004365A9 81FAFF000000            cmp edx, 000000FF
:004365AF 0F84B2000000            je 00436667
:004365B5 8B45E0                  mov eax, dword ptr [ebp-20]
:004365B8 33C9                    xor ecx, ecx
:004365BA 8A08                    mov cl, byte ptr [eax]
:004365BC 6BC924                  imul ecx, 00000024
:004365BF 81C108F54A00            add ecx, 004AF508
:004365C5 E8D62DFFFF              call 004293A0
:004365CA 50                      push eax
:004365CB 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:004365CE E8BD91FFFF              call 0042F790
:004365D3 8A55E5                  mov dl, byte ptr [ebp-1B]
:004365D6 52                      push edx
:004365D7 8A45E4                  mov al, byte ptr [ebp-1C]
:004365DA 50                      push eax
:004365DB B9A8034B00              mov ecx, 004B03A8
:004365E0 E852F40000              call 00445A37
:004365E5 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004365E8 8A11                    mov dl, byte ptr [ecx]
:004365EA 52                      push edx
:004365EB 8A450C                  mov al, byte ptr [ebp+0C]
:004365EE 50                      push eax
:004365EF E8A39AFFFF              call 00430097
:004365F4 83C408                  add esp, 00000008
:004365F7 85C0                    test eax, eax
:004365F9 7440                    je 0043663B
:004365FB 6A01                    push 00000001
:004365FD 8A4D10                  mov cl, byte ptr [ebp+10]
:00436600 51                      push ecx
:00436601 8A5508                  mov dl, byte ptr [ebp+08]
:00436604 52                      push edx
:00436605 8B45E0                  mov eax, dword ptr [ebp-20]
:00436608 8A08                    mov cl, byte ptr [eax]
:0043660A 51                      push ecx
:0043660B 8A550C                  mov dl, byte ptr [ebp+0C]
:0043660E 52                      push edx
:0043660F B9A8034B00              mov ecx, 004B03A8
:00436614 E8BD000100              call 004466D6
:00436619 8B45E0                  mov eax, dword ptr [ebp-20]
:0043661C 33C9                    xor ecx, ecx
:0043661E 8A08                    mov cl, byte ptr [eax]
:00436620 51                      push ecx
:00436621 E8E7000000              call 0043670D
:00436626 83C404                  add esp, 00000004
:00436629 8B55E0                  mov edx, dword ptr [ebp-20]
:0043662C 33C0                    xor eax, eax
:0043662E 8A02                    mov al, byte ptr [edx]
:00436630 50                      push eax
:00436631 E847010000              call 0043677D
:00436636 83C404                  add esp, 00000004
:00436639 EB1E                    jmp 00436659

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004365F9(C)
|
:0043663B 6A00                    push 00000000
:0043663D 8A4D10                  mov cl, byte ptr [ebp+10]
:00436640 51                      push ecx
:00436641 8A5508                  mov dl, byte ptr [ebp+08]
:00436644 52                      push edx
:00436645 8B45E0                  mov eax, dword ptr [ebp-20]
:00436648 8A08                    mov cl, byte ptr [eax]
:0043664A 51                      push ecx
:0043664B 8A550C                  mov dl, byte ptr [ebp+0C]
:0043664E 52                      push edx
:0043664F B9A8034B00              mov ecx, 004B03A8
:00436654 E87D000100              call 004466D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436639(U)
|
:00436659 8B45E0                  mov eax, dword ptr [ebp-20]
:0043665C 83C001                  add eax, 00000001
:0043665F 8945E0                  mov dword ptr [ebp-20], eax
:00436662 E93BFFFFFF              jmp 004365A2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043655B(C), :004365AF(C)
|
:00436667 EB37                    jmp 004366A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043650B(C)
|
:00436669 6A00                    push 00000000
:0043666B 8A4D10                  mov cl, byte ptr [ebp+10]
:0043666E 51                      push ecx
:0043666F 8A5508                  mov dl, byte ptr [ebp+08]
:00436672 52                      push edx
:00436673 8A45FC                  mov al, byte ptr [ebp-04]
:00436676 50                      push eax
:00436677 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043667A 51                      push ecx
:0043667B B9A8034B00              mov ecx, 004B03A8
:00436680 E851000100              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436685 6A07                    push 00000007
:00436687 B9800D4B00              mov ecx, 004B0D80
:0043668C E818B50200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:00436691 68FC8A4700              push 00478AFC
:00436696 6A00                    push 00000000
:00436698 E8CF24FFFF              call 00428B6C
:0043669D 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436667(U)
|
:004366A0 837DF800                cmp dword ptr [ebp-08], 00000000
:004366A4 7437                    je 004366DD
:004366A6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004366A9 6BC924                  imul ecx, 00000024
:004366AC 81C108F54A00            add ecx, 004AF508
:004366B2 E81990FFFF              call 0042F6D0
:004366B7 6BC070                  imul eax, 00000070
:004366BA 0598224900              add eax, 00492298
:004366BF 8945DC                  mov dword ptr [ebp-24], eax
:004366C2 6A01                    push 00000001
:004366C4 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004366C7 E8B4340000              call 00439B80
:004366CC 25FF000000              and eax, 000000FF
:004366D1 83C014                  add eax, 00000014
:004366D4 50                      push eax
:004366D5 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004366D8 E82BC5FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004366A4(C)
|
:004366DD C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043646E(C)
|
:004366E7 833D20024B0000          cmp dword ptr [004B0220], 00000000
:004366EE 7419                    je 00436709
:004366F0 837D081A                cmp dword ptr [ebp+08], 0000001A
:004366F4 7513                    jne 00436709

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004366F6 6A02                    push 00000002
:004366F8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004366FB 6BC924                  imul ecx, 00000024
:004366FE 81C108F54A00            add ecx, 004AF508
:00436704 E837340000              call 00439B40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043642E(U), :004366EE(C), :004366F4(C)
|
:00436709 8BE5                    mov esp, ebp
:0043670B 5D                      pop ebp
:0043670C C3                      ret



* Referenced by a CALL at Addresses:
|:00436537   , :00436621   , :004369C9   
|
:0043670D 55                      push ebp
:0043670E 8BEC                    mov ebp, esp
:00436710 51                      push ecx
:00436711 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436714 6BC924                  imul ecx, 00000024
:00436717 81C108F54A00            add ecx, 004AF508
:0043671D E8FE8FFFFF              call 0042F720
:00436722 25FF000000              and eax, 000000FF
:00436727 83F802                  cmp eax, 00000002
:0043672A 7D33                    jge 0043675F
:0043672C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043672F 6BC924                  imul ecx, 00000024
:00436732 81C108F54A00            add ecx, 004AF508
:00436738 E8E38FFFFF              call 0042F720
:0043673D 8845FC                  mov byte ptr [ebp-04], al
:00436740 8B45FC                  mov eax, dword ptr [ebp-04]
:00436743 25FF000000              and eax, 000000FF
:00436748 83C001                  add eax, 00000001
:0043674B 0C40                    or al, 40
:0043674D 50                      push eax
:0043674E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436751 6BC924                  imul ecx, 00000024
:00436754 81C108F54A00            add ecx, 004AF508
:0043675A E8D191FFFF              call 0042F930

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043672A(C)
|
:0043675F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436762 6BC924                  imul ecx, 00000024
:00436765 81C108F54A00            add ecx, 004AF508
:0043676B E8608FFFFF              call 0042F6D0
:00436770 50                      push eax
:00436771 E8DA070300              call 00466F50
:00436776 83C404                  add esp, 00000004
:00436779 8BE5                    mov esp, ebp
:0043677B 5D                      pop ebp
:0043677C C3                      ret



* Referenced by a CALL at Addresses:
|:00436548   , :00436631   , :0043723C   
|
:0043677D 55                      push ebp
:0043677E 8BEC                    mov ebp, esp
:00436780 6A01                    push 00000001
:00436782 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436785 6BC924                  imul ecx, 00000024
:00436788 81C108F54A00            add ecx, 004AF508
:0043678E E8CD8FFFFF              call 0042F760
:00436793 85C0                    test eax, eax
:00436795 742F                    je 004367C6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436797 6A07                    push 00000007
:00436799 B9800D4B00              mov ecx, 004B0D80
:0043679E E806B40200              call 00461BA9
:004367A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004367A6 6BC924                  imul ecx, 00000024
:004367A9 81C108F54A00            add ecx, 004AF508
:004367AF E82C8FFFFF              call 0042F6E0
:004367B4 50                      push eax

* Possible StringData Ref from Data Obj ->"%swgʤFC"
                                  |
:004367B5 680C8B4700              push 00478B0C
:004367BA 6A00                    push 00000000
:004367BC E8AB23FFFF              call 00428B6C
:004367C1 83C40C                  add esp, 0000000C
:004367C4 EB2D                    jmp 004367F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436795(C)
|
:004367C6 6A41                    push 00000041
:004367C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004367CB 6BC924                  imul ecx, 00000024
:004367CE 81C108F54A00            add ecx, 004AF508
:004367D4 E887330000              call 00439B60
:004367D9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004367DC 6BC924                  imul ecx, 00000024
:004367DF 81C108F54A00            add ecx, 004AF508
:004367E5 E8E68EFFFF              call 0042F6D0
:004367EA 50                      push eax
:004367EB E860070300              call 00466F50
:004367F0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004367C4(U)
|
:004367F3 5D                      pop ebp
:004367F4 C3                      ret



* Referenced by a CALL at Address:
|:00433796   
|
:004367F5 55                      push ebp
:004367F6 8BEC                    mov ebp, esp
:004367F8 83EC24                  sub esp, 00000024
:004367FB C645F8FF                mov [ebp-08], FF
:004367FF 8B4508                  mov eax, dword ptr [ebp+08]
:00436802 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00436804 B906000000              mov ecx, 00000006
:00436809 F7F1                    div ecx
:0043680B 8845F0                  mov byte ptr [ebp-10], al
:0043680E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436811 6BC911                  imul ecx, 00000011
:00436814 81C180DF4A00            add ecx, 004ADF80
:0043681A E8D190FFFF              call 0042F8F0
:0043681F 8845E4                  mov byte ptr [ebp-1C], al
:00436822 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436825 6BC911                  imul ecx, 00000011
:00436828 81C180DF4A00            add ecx, 004ADF80
:0043682E E8AD0FFDFF              call 004077E0
:00436833 8845E8                  mov byte ptr [ebp-18], al
:00436836 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00436839 E8720FFDFF              call 004077B0
:0043683E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436841 6BC924                  imul ecx, 00000024
:00436844 81C108F54A00            add ecx, 004AF508
:0043684A E8A190FFFF              call 0042F8F0
:0043684F 25FF000000              and eax, 000000FF
:00436854 83F807                  cmp eax, 00000007
:00436857 7418                    je 00436871
:00436859 33D2                    xor edx, edx
:0043685B 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00436861 83E204                  and edx, 00000004
:00436864 85D2                    test edx, edx
:00436866 7509                    jne 00436871
:00436868 C745DC00000000          mov [ebp-24], 00000000
:0043686F EB07                    jmp 00436878

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436857(C), :00436866(C)
|
:00436871 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043686F(U)
|
:00436878 8B45DC                  mov eax, dword ptr [ebp-24]
:0043687B 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043687E 68FF000000              push 000000FF
:00436883 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00436886 51                      push ecx
:00436887 8B550C                  mov edx, dword ptr [ebp+0C]
:0043688A 52                      push edx
:0043688B 8B4508                  mov eax, dword ptr [ebp+08]
:0043688E 50                      push eax
:0043688F E85298FFFF              call 004300E6
:00436894 83C410                  add esp, 00000010
:00436897 85C0                    test eax, eax
:00436899 7505                    jne 004368A0
:0043689B E9D1010000              jmp 00436A71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436899(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004368A0 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:004368A5 6A11                    push 00000011
:004368A7 68B8014B00              push 004B01B8
:004368AC E897BF0200              call 00462848
:004368B1 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004368B4 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004368B9 68FF000000              push 000000FF
:004368BE 6A00                    push 00000000
:004368C0 68B8014B00              push 004B01B8
:004368C5 8A4DE4                  mov cl, byte ptr [ebp-1C]
:004368C8 51                      push ecx
:004368C9 8A550C                  mov dl, byte ptr [ebp+0C]
:004368CC 52                      push edx
:004368CD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004368D0 6BC924                  imul ecx, 00000024
:004368D3 81C108F54A00            add ecx, 004AF508
:004368D9 E8226E0100              call 0044D700
:004368DE 8945EC                  mov dword ptr [ebp-14], eax
:004368E1 8B45EC                  mov eax, dword ptr [ebp-14]
:004368E4 33C9                    xor ecx, ecx
:004368E6 8A08                    mov cl, byte ptr [eax]
:004368E8 81F9FF000000            cmp ecx, 000000FF
:004368EE 7520                    jne 00436910

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004368F0 6A07                    push 00000007
:004368F2 B9800D4B00              mov ecx, 004B0D80
:004368F7 E8ADB20200              call 00461BA9

* Possible StringData Ref from Data Obj ->"vTd򤺨SĳC"
                                  |
:004368FC 681C8B4700              push 00478B1C
:00436901 6A00                    push 00000000
:00436903 E86422FFFF              call 00428B6C
:00436908 83C408                  add esp, 00000008
:0043690B E961010000              jmp 00436A71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004368EE(C)
|
:00436910 6A18                    push 00000018
:00436912 6A27                    push 00000027
:00436914 6A00                    push 00000000
:00436916 6A00                    push 00000000
:00436918 B9A8034B00              mov ecx, 004B03A8
:0043691D E8A4DE0000              call 004447C6
:00436922 837DF400                cmp dword ptr [ebp-0C], 00000000
:00436926 7421                    je 00436949
:00436928 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043692B 6BC911                  imul ecx, 00000011
:0043692E 81C180DF4A00            add ecx, 004ADF80
:00436934 E8770EFDFF              call 004077B0
:00436939 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043693A 68348B4700              push 00478B34
:0043693F 6A00                    push 00000000
:00436941 E82622FFFF              call 00428B6C
:00436946 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436926(C), :00436A25(U)
|
:00436949 8B55EC                  mov edx, dword ptr [ebp-14]
:0043694C 33C0                    xor eax, eax
:0043694E 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436950 3DFF000000              cmp eax, 000000FF
:00436955 0F84CF000000            je 00436A2A
:0043695B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043695E 33D2                    xor edx, edx
:00436960 8A11                    mov dl, byte ptr [ecx]
:00436962 8BCA                    mov ecx, edx
:00436964 6BC924                  imul ecx, 00000024
:00436967 81C108F54A00            add ecx, 004AF508
:0043696D E82E2AFFFF              call 004293A0
:00436972 50                      push eax
:00436973 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00436976 E8158EFFFF              call 0042F790
:0043697B 8A45FD                  mov al, byte ptr [ebp-03]
:0043697E 50                      push eax
:0043697F 8A4DFC                  mov cl, byte ptr [ebp-04]
:00436982 51                      push ecx
:00436983 B9A8034B00              mov ecx, 004B03A8
:00436988 E8AAF00000              call 00445A37
:0043698D 8B55EC                  mov edx, dword ptr [ebp-14]
:00436990 8A02                    mov al, byte ptr [edx]
:00436992 50                      push eax
:00436993 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00436996 51                      push ecx
:00436997 E8FB96FFFF              call 00430097
:0043699C 83C408                  add esp, 00000008
:0043699F 85C0                    test eax, eax
:004369A1 7440                    je 004369E3
:004369A3 6A01                    push 00000001
:004369A5 8A5510                  mov dl, byte ptr [ebp+10]
:004369A8 52                      push edx
:004369A9 8A4508                  mov al, byte ptr [ebp+08]
:004369AC 50                      push eax
:004369AD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004369B0 8A11                    mov dl, byte ptr [ecx]
:004369B2 52                      push edx
:004369B3 8A450C                  mov al, byte ptr [ebp+0C]
:004369B6 50                      push eax
:004369B7 B9A8034B00              mov ecx, 004B03A8
:004369BC E815FD0000              call 004466D6
:004369C1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004369C4 33D2                    xor edx, edx
:004369C6 8A11                    mov dl, byte ptr [ecx]
:004369C8 52                      push edx
:004369C9 E83FFDFFFF              call 0043670D
:004369CE 83C404                  add esp, 00000004
:004369D1 8B45EC                  mov eax, dword ptr [ebp-14]
:004369D4 33C9                    xor ecx, ecx
:004369D6 8A08                    mov cl, byte ptr [eax]
:004369D8 51                      push ecx
:004369D9 E897000000              call 00436A75
:004369DE 83C404                  add esp, 00000004
:004369E1 EB39                    jmp 00436A1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004369A1(C)
|
:004369E3 6A00                    push 00000000
:004369E5 8A5510                  mov dl, byte ptr [ebp+10]
:004369E8 52                      push edx
:004369E9 8A4508                  mov al, byte ptr [ebp+08]
:004369EC 50                      push eax
:004369ED 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004369F0 8A11                    mov dl, byte ptr [ecx]
:004369F2 52                      push edx
:004369F3 8A450C                  mov al, byte ptr [ebp+0C]
:004369F6 50                      push eax
:004369F7 B9A8034B00              mov ecx, 004B03A8
:004369FC E8D5FC0000              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436A01 6A07                    push 00000007
:00436A03 B9800D4B00              mov ecx, 004B0D80
:00436A08 E89CB10200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:00436A0D 68388B4700              push 00478B38
:00436A12 6A00                    push 00000000
:00436A14 E85321FFFF              call 00428B6C
:00436A19 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004369E1(U)
|
:00436A1C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00436A1F 83C101                  add ecx, 00000001
:00436A22 894DEC                  mov dword ptr [ebp-14], ecx
:00436A25 E91FFFFFFF              jmp 00436949

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436955(C)
|
:00436A2A 837DF400                cmp dword ptr [ebp-0C], 00000000
:00436A2E 7437                    je 00436A67
:00436A30 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436A33 6BC924                  imul ecx, 00000024
:00436A36 81C108F54A00            add ecx, 004AF508
:00436A3C E88F8CFFFF              call 0042F6D0
:00436A41 6BC070                  imul eax, 00000070
:00436A44 0598224900              add eax, 00492298
:00436A49 8945E0                  mov dword ptr [ebp-20], eax
:00436A4C 6A01                    push 00000001
:00436A4E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00436A51 E82A310000              call 00439B80
:00436A56 25FF000000              and eax, 000000FF
:00436A5B 83C014                  add eax, 00000014
:00436A5E 50                      push eax
:00436A5F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00436A62 E8A1C1FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436A2E(C)
|
:00436A67 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043689B(U), :0043690B(U)
|
:00436A71 8BE5                    mov esp, ebp
:00436A73 5D                      pop ebp
:00436A74 C3                      ret



* Referenced by a CALL at Address:
|:004369D9   
|
:00436A75 55                      push ebp
:00436A76 8BEC                    mov ebp, esp
:00436A78 5D                      pop ebp
:00436A79 C3                      ret



* Referenced by a CALL at Address:
|:004337B7   
|
:00436A7A 55                      push ebp
:00436A7B 8BEC                    mov ebp, esp
:00436A7D 83EC20                  sub esp, 00000020
:00436A80 C645FCFF                mov [ebp-04], FF
:00436A84 8B4508                  mov eax, dword ptr [ebp+08]
:00436A87 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00436A89 B906000000              mov ecx, 00000006
:00436A8E F7F1                    div ecx
:00436A90 8845F4                  mov byte ptr [ebp-0C], al
:00436A93 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436A96 6BC911                  imul ecx, 00000011
:00436A99 81C180DF4A00            add ecx, 004ADF80
:00436A9F E84C8EFFFF              call 0042F8F0
:00436AA4 8845EC                  mov byte ptr [ebp-14], al
:00436AA7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436AAA 6BC911                  imul ecx, 00000011
:00436AAD 81C180DF4A00            add ecx, 004ADF80
:00436AB3 E8280DFDFF              call 004077E0
:00436AB8 8845F0                  mov byte ptr [ebp-10], al
:00436ABB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436ABE 6BC924                  imul ecx, 00000024
:00436AC1 81C108F54A00            add ecx, 004AF508
:00436AC7 E8248EFFFF              call 0042F8F0
:00436ACC 25FF000000              and eax, 000000FF
:00436AD1 83F807                  cmp eax, 00000007
:00436AD4 7418                    je 00436AEE
:00436AD6 33D2                    xor edx, edx
:00436AD8 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00436ADE 83E204                  and edx, 00000004
:00436AE1 85D2                    test edx, edx
:00436AE3 7509                    jne 00436AEE
:00436AE5 C745E000000000          mov [ebp-20], 00000000
:00436AEC EB07                    jmp 00436AF5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436AD4(C), :00436AE3(C)
|
:00436AEE C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436AEC(U)
|
:00436AF5 8B45E0                  mov eax, dword ptr [ebp-20]
:00436AF8 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436AFB 68FF000000              push 000000FF
:00436B00 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436B03 51                      push ecx
:00436B04 8B550C                  mov edx, dword ptr [ebp+0C]
:00436B07 52                      push edx
:00436B08 8B4508                  mov eax, dword ptr [ebp+08]
:00436B0B 50                      push eax
:00436B0C E8D595FFFF              call 004300E6
:00436B11 83C410                  add esp, 00000010
:00436B14 85C0                    test eax, eax
:00436B16 7505                    jne 00436B1D
:00436B18 E9E9010000              jmp 00436D06

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436B16(C), :00436B9A(U), :00436BD8(U)
|
:00436B1D 8A4DEC                  mov cl, byte ptr [ebp-14]
:00436B20 51                      push ecx
:00436B21 E894D1FFFF              call 00433CBA
:00436B26 83C404                  add esp, 00000004
:00436B29 6A00                    push 00000000
:00436B2B 8B55F0                  mov edx, dword ptr [ebp-10]
:00436B2E 81E2FF000000            and edx, 000000FF
:00436B34 80CA80                  or dl, 80
:00436B37 52                      push edx
:00436B38 8A450C                  mov al, byte ptr [ebp+0C]
:00436B3B 50                      push eax
:00436B3C B9A8034B00              mov ecx, 004B03A8
:00436B41 E8B2F10000              call 00445CF8
:00436B46 8845FC                  mov byte ptr [ebp-04], al
:00436B49 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436B4C 81E1FF000000            and ecx, 000000FF
:00436B52 81F9FF000000            cmp ecx, 000000FF
:00436B58 0F84A8010000            je 00436D06
:00436B5E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436B61 81E1FF000000            and ecx, 000000FF
:00436B67 6BC924                  imul ecx, 00000024
:00436B6A 81C108F54A00            add ecx, 004AF508
:00436B70 E86B8CFFFF              call 0042F7E0
:00436B75 25FF000000              and eax, 000000FF
:00436B7A 83F809                  cmp eax, 00000009
:00436B7D 751D                    jne 00436B9C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436B7F 6A07                    push 00000007
:00436B81 B9800D4B00              mov ecx, 004B0D80
:00436B86 E81EB00200              call 00461BA9

* Possible StringData Ref from Data Obj ->"LkwԪC"
                                  |
:00436B8B 68488B4700              push 00478B48
:00436B90 6A00                    push 00000000
:00436B92 E8D51FFFFF              call 00428B6C
:00436B97 83C408                  add esp, 00000008
:00436B9A EB81                    jmp 00436B1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436B7D(C)
|
:00436B9C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436B9F 81E1FF000000            and ecx, 000000FF
:00436BA5 6BC924                  imul ecx, 00000024
:00436BA8 81C108F54A00            add ecx, 004AF508
:00436BAE E88D8BFFFF              call 0042F740
:00436BB3 25FF000000              and eax, 000000FF
:00436BB8 83F802                  cmp eax, 00000002
:00436BBB 7520                    jne 00436BDD

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436BBD 6A07                    push 00000007
:00436BBF B9800D4B00              mov ecx, 004B0D80
:00436BC4 E8E0AF0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"LkACo䳡mOFC"
                                  |
:00436BC9 685C8B4700              push 00478B5C
:00436BCE 6A00                    push 00000000
:00436BD0 E8971FFFFF              call 00428B6C
:00436BD5 83C408                  add esp, 00000008
:00436BD8 E940FFFFFF              jmp 00436B1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436BBB(C)
|
:00436BDD 837DF800                cmp dword ptr [ebp-08], 00000000
:00436BE1 7421                    je 00436C04
:00436BE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436BE6 6BC911                  imul ecx, 00000011
:00436BE9 81C180DF4A00            add ecx, 004ADF80
:00436BEF E8BC0BFDFF              call 004077B0
:00436BF4 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00436BF5 687C8B4700              push 00478B7C
:00436BFA 6A00                    push 00000000
:00436BFC E86B1FFFFF              call 00428B6C
:00436C01 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436BE1(C)
|
:00436C04 8A55FC                  mov dl, byte ptr [ebp-04]
:00436C07 52                      push edx
:00436C08 8A450C                  mov al, byte ptr [ebp+0C]
:00436C0B 50                      push eax
:00436C0C E83BC0FFFF              call 00432C4C
:00436C11 83C408                  add esp, 00000008
:00436C14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436C17 81E1FF000000            and ecx, 000000FF
:00436C1D 6BC924                  imul ecx, 00000024
:00436C20 81C108F54A00            add ecx, 004AF508
:00436C26 E87527FFFF              call 004293A0
:00436C2B 668B08                  mov cx, word ptr [eax]
:00436C2E 66894DE8                mov word ptr [ebp-18], cx
:00436C32 8A55E9                  mov dl, byte ptr [ebp-17]
:00436C35 52                      push edx
:00436C36 8A45E8                  mov al, byte ptr [ebp-18]
:00436C39 50                      push eax
:00436C3A B9A8034B00              mov ecx, 004B03A8
:00436C3F E8F3ED0000              call 00445A37
:00436C44 8A4DFC                  mov cl, byte ptr [ebp-04]
:00436C47 51                      push ecx
:00436C48 8A550C                  mov dl, byte ptr [ebp+0C]
:00436C4B 52                      push edx
:00436C4C E84694FFFF              call 00430097
:00436C51 83C408                  add esp, 00000008
:00436C54 85C0                    test eax, eax
:00436C56 7430                    je 00436C88
:00436C58 6A01                    push 00000001
:00436C5A 8A4510                  mov al, byte ptr [ebp+10]
:00436C5D 50                      push eax
:00436C5E 8A4D08                  mov cl, byte ptr [ebp+08]
:00436C61 51                      push ecx
:00436C62 8A55FC                  mov dl, byte ptr [ebp-04]
:00436C65 52                      push edx
:00436C66 8A450C                  mov al, byte ptr [ebp+0C]
:00436C69 50                      push eax
:00436C6A B9A8034B00              mov ecx, 004B03A8
:00436C6F E862FA0000              call 004466D6
:00436C74 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436C77 81E1FF000000            and ecx, 000000FF
:00436C7D 51                      push ecx
:00436C7E E887000000              call 00436D0A
:00436C83 83C404                  add esp, 00000004
:00436C86 EB37                    jmp 00436CBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436C56(C)
|
:00436C88 6A00                    push 00000000
:00436C8A 8A5510                  mov dl, byte ptr [ebp+10]
:00436C8D 52                      push edx
:00436C8E 8A4508                  mov al, byte ptr [ebp+08]
:00436C91 50                      push eax
:00436C92 8A4DFC                  mov cl, byte ptr [ebp-04]
:00436C95 51                      push ecx
:00436C96 8A550C                  mov dl, byte ptr [ebp+0C]
:00436C99 52                      push edx
:00436C9A B9A8034B00              mov ecx, 004B03A8
:00436C9F E832FA0000              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436CA4 6A07                    push 00000007
:00436CA6 B9800D4B00              mov ecx, 004B0D80
:00436CAB E8F9AE0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:00436CB0 68808B4700              push 00478B80
:00436CB5 6A00                    push 00000000
:00436CB7 E8B01EFFFF              call 00428B6C
:00436CBC 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436C86(U)
|
:00436CBF 837DF800                cmp dword ptr [ebp-08], 00000000
:00436CC3 7437                    je 00436CFC
:00436CC5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436CC8 6BC924                  imul ecx, 00000024
:00436CCB 81C108F54A00            add ecx, 004AF508
:00436CD1 E8FA89FFFF              call 0042F6D0
:00436CD6 6BC070                  imul eax, 00000070
:00436CD9 0598224900              add eax, 00492298
:00436CDE 8945E4                  mov dword ptr [ebp-1C], eax
:00436CE1 6A01                    push 00000001
:00436CE3 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00436CE6 E8952E0000              call 00439B80
:00436CEB 25FF000000              and eax, 000000FF
:00436CF0 83C014                  add eax, 00000014
:00436CF3 50                      push eax
:00436CF4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00436CF7 E80CBFFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436CC3(C)
|
:00436CFC C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436B18(U), :00436B58(C)
|
:00436D06 8BE5                    mov esp, ebp
:00436D08 5D                      pop ebp
:00436D09 C3                      ret



* Referenced by a CALL at Address:
|:00436C7E   
|
:00436D0A 55                      push ebp
:00436D0B 8BEC                    mov ebp, esp
:00436D0D 51                      push ecx
:00436D0E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436D11 6BC924                  imul ecx, 00000024
:00436D14 81C108F54A00            add ecx, 004AF508
:00436D1A E8218AFFFF              call 0042F740
:00436D1F 25FF000000              and eax, 000000FF
:00436D24 83F802                  cmp eax, 00000002
:00436D27 7D33                    jge 00436D5C
:00436D29 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436D2C 6BC924                  imul ecx, 00000024
:00436D2F 81C108F54A00            add ecx, 004AF508
:00436D35 E8068AFFFF              call 0042F740
:00436D3A 8845FC                  mov byte ptr [ebp-04], al
:00436D3D 8B45FC                  mov eax, dword ptr [ebp-04]
:00436D40 25FF000000              and eax, 000000FF
:00436D45 83C001                  add eax, 00000001
:00436D48 0C40                    or al, 40
:00436D4A 50                      push eax
:00436D4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436D4E 6BC924                  imul ecx, 00000024
:00436D51 81C108F54A00            add ecx, 004AF508
:00436D57 E8148CFFFF              call 0042F970

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436D27(C)
|
:00436D5C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436D5F 6BC924                  imul ecx, 00000024
:00436D62 81C108F54A00            add ecx, 004AF508
:00436D68 E86389FFFF              call 0042F6D0
:00436D6D 50                      push eax
:00436D6E E8DD010300              call 00466F50
:00436D73 83C404                  add esp, 00000004
:00436D76 8BE5                    mov esp, ebp
:00436D78 5D                      pop ebp
:00436D79 C3                      ret



* Referenced by a CALL at Address:
|:004337D8   
|
:00436D7A 55                      push ebp
:00436D7B 8BEC                    mov ebp, esp
:00436D7D 83EC24                  sub esp, 00000024
:00436D80 C645F8FF                mov [ebp-08], FF
:00436D84 8B4508                  mov eax, dword ptr [ebp+08]
:00436D87 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00436D89 B906000000              mov ecx, 00000006
:00436D8E F7F1                    div ecx
:00436D90 8845F0                  mov byte ptr [ebp-10], al
:00436D93 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436D96 6BC911                  imul ecx, 00000011
:00436D99 81C180DF4A00            add ecx, 004ADF80
:00436D9F E84C8BFFFF              call 0042F8F0
:00436DA4 8845E4                  mov byte ptr [ebp-1C], al
:00436DA7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436DAA 6BC911                  imul ecx, 00000011
:00436DAD 81C180DF4A00            add ecx, 004ADF80
:00436DB3 E8280AFDFF              call 004077E0
:00436DB8 8845E8                  mov byte ptr [ebp-18], al
:00436DBB 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00436DBE E8ED09FDFF              call 004077B0
:00436DC3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436DC6 6BC924                  imul ecx, 00000024
:00436DC9 81C108F54A00            add ecx, 004AF508
:00436DCF E81C8BFFFF              call 0042F8F0
:00436DD4 25FF000000              and eax, 000000FF
:00436DD9 83F807                  cmp eax, 00000007
:00436DDC 7418                    je 00436DF6
:00436DDE 33D2                    xor edx, edx
:00436DE0 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00436DE6 83E204                  and edx, 00000004
:00436DE9 85D2                    test edx, edx
:00436DEB 7509                    jne 00436DF6
:00436DED C745DC00000000          mov [ebp-24], 00000000
:00436DF4 EB07                    jmp 00436DFD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436DDC(C), :00436DEB(C)
|
:00436DF6 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436DF4(U)
|
:00436DFD 8B45DC                  mov eax, dword ptr [ebp-24]
:00436E00 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436E03 68FF000000              push 000000FF
:00436E08 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00436E0B 51                      push ecx
:00436E0C 8B550C                  mov edx, dword ptr [ebp+0C]
:00436E0F 52                      push edx
:00436E10 8B4508                  mov eax, dword ptr [ebp+08]
:00436E13 50                      push eax
:00436E14 E8CD92FFFF              call 004300E6
:00436E19 83C410                  add esp, 00000010
:00436E1C 85C0                    test eax, eax
:00436E1E 7505                    jne 00436E25
:00436E20 E9C1010000              jmp 00436FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436E1E(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436E25 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00436E2A 6A11                    push 00000011
:00436E2C 68B8014B00              push 004B01B8
:00436E31 E812BA0200              call 00462848
:00436E36 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436E39 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436E3E 68FF000000              push 000000FF
:00436E43 6A00                    push 00000000
:00436E45 68B8014B00              push 004B01B8
:00436E4A 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00436E4D 51                      push ecx
:00436E4E 8A550C                  mov dl, byte ptr [ebp+0C]
:00436E51 52                      push edx
:00436E52 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436E55 6BC924                  imul ecx, 00000024
:00436E58 81C108F54A00            add ecx, 004AF508
:00436E5E E89D680100              call 0044D700
:00436E63 8945EC                  mov dword ptr [ebp-14], eax
:00436E66 8B45EC                  mov eax, dword ptr [ebp-14]
:00436E69 33C9                    xor ecx, ecx
:00436E6B 8A08                    mov cl, byte ptr [eax]
:00436E6D 81F9FF000000            cmp ecx, 000000FF
:00436E73 7520                    jne 00436E95

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436E75 6A07                    push 00000007
:00436E77 B9800D4B00              mov ecx, 004B0D80
:00436E7C E828AD0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"vTd򤺨SĳC"
                                  |
:00436E81 68908B4700              push 00478B90
:00436E86 6A00                    push 00000000
:00436E88 E8DF1CFFFF              call 00428B6C
:00436E8D 83C408                  add esp, 00000008
:00436E90 E951010000              jmp 00436FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436E73(C)
|
:00436E95 6A18                    push 00000018
:00436E97 6A27                    push 00000027
:00436E99 6A00                    push 00000000
:00436E9B 6A00                    push 00000000
:00436E9D B9A8034B00              mov ecx, 004B03A8
:00436EA2 E81FD90000              call 004447C6
:00436EA7 837DF400                cmp dword ptr [ebp-0C], 00000000
:00436EAB 7421                    je 00436ECE
:00436EAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436EB0 6BC911                  imul ecx, 00000011
:00436EB3 81C180DF4A00            add ecx, 004ADF80
:00436EB9 E8F208FDFF              call 004077B0
:00436EBE 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00436EBF 68A88B4700              push 00478BA8
:00436EC4 6A00                    push 00000000
:00436EC6 E8A11CFFFF              call 00428B6C
:00436ECB 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436EAB(C), :00436F9A(U)
|
:00436ECE 8B55EC                  mov edx, dword ptr [ebp-14]
:00436ED1 33C0                    xor eax, eax
:00436ED3 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00436ED5 3DFF000000              cmp eax, 000000FF
:00436EDA 0F84BF000000            je 00436F9F
:00436EE0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00436EE3 33D2                    xor edx, edx
:00436EE5 8A11                    mov dl, byte ptr [ecx]
:00436EE7 8BCA                    mov ecx, edx
:00436EE9 6BC924                  imul ecx, 00000024
:00436EEC 81C108F54A00            add ecx, 004AF508
:00436EF2 E8A924FFFF              call 004293A0
:00436EF7 50                      push eax
:00436EF8 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00436EFB E89088FFFF              call 0042F790
:00436F00 8A45FD                  mov al, byte ptr [ebp-03]
:00436F03 50                      push eax
:00436F04 8A4DFC                  mov cl, byte ptr [ebp-04]
:00436F07 51                      push ecx
:00436F08 B9A8034B00              mov ecx, 004B03A8
:00436F0D E825EB0000              call 00445A37
:00436F12 8B55EC                  mov edx, dword ptr [ebp-14]
:00436F15 8A02                    mov al, byte ptr [edx]
:00436F17 50                      push eax
:00436F18 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00436F1B 51                      push ecx
:00436F1C E87691FFFF              call 00430097
:00436F21 83C408                  add esp, 00000008
:00436F24 85C0                    test eax, eax
:00436F26 7430                    je 00436F58
:00436F28 6A01                    push 00000001
:00436F2A 8A5510                  mov dl, byte ptr [ebp+10]
:00436F2D 52                      push edx
:00436F2E 8A4508                  mov al, byte ptr [ebp+08]
:00436F31 50                      push eax
:00436F32 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00436F35 8A11                    mov dl, byte ptr [ecx]
:00436F37 52                      push edx
:00436F38 8A450C                  mov al, byte ptr [ebp+0C]
:00436F3B 50                      push eax
:00436F3C B9A8034B00              mov ecx, 004B03A8
:00436F41 E890F70000              call 004466D6
:00436F46 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00436F49 33D2                    xor edx, edx
:00436F4B 8A11                    mov dl, byte ptr [ecx]
:00436F4D 52                      push edx
:00436F4E E897000000              call 00436FEA
:00436F53 83C404                  add esp, 00000004
:00436F56 EB39                    jmp 00436F91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436F26(C)
|
:00436F58 6A00                    push 00000000
:00436F5A 8A4510                  mov al, byte ptr [ebp+10]
:00436F5D 50                      push eax
:00436F5E 8A4D08                  mov cl, byte ptr [ebp+08]
:00436F61 51                      push ecx
:00436F62 8B55EC                  mov edx, dword ptr [ebp-14]
:00436F65 8A02                    mov al, byte ptr [edx]
:00436F67 50                      push eax
:00436F68 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00436F6B 51                      push ecx
:00436F6C B9A8034B00              mov ecx, 004B03A8
:00436F71 E860F70000              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00436F76 6A07                    push 00000007
:00436F78 B9800D4B00              mov ecx, 004B0D80
:00436F7D E827AC0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:00436F82 68AC8B4700              push 00478BAC
:00436F87 6A00                    push 00000000
:00436F89 E8DE1BFFFF              call 00428B6C
:00436F8E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436F56(U)
|
:00436F91 8B55EC                  mov edx, dword ptr [ebp-14]
:00436F94 83C201                  add edx, 00000001
:00436F97 8955EC                  mov dword ptr [ebp-14], edx
:00436F9A E92FFFFFFF              jmp 00436ECE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436EDA(C)
|
:00436F9F 837DF400                cmp dword ptr [ebp-0C], 00000000
:00436FA3 7437                    je 00436FDC
:00436FA5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00436FA8 6BC924                  imul ecx, 00000024
:00436FAB 81C108F54A00            add ecx, 004AF508
:00436FB1 E81A87FFFF              call 0042F6D0
:00436FB6 6BC070                  imul eax, 00000070
:00436FB9 0598224900              add eax, 00492298
:00436FBE 8945E0                  mov dword ptr [ebp-20], eax
:00436FC1 6A01                    push 00000001
:00436FC3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00436FC6 E8B52B0000              call 00439B80
:00436FCB 25FF000000              and eax, 000000FF
:00436FD0 83C014                  add eax, 00000014
:00436FD3 50                      push eax
:00436FD4 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00436FD7 E82CBCFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436FA3(C)
|
:00436FDC C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436E20(U), :00436E90(U)
|
:00436FE6 8BE5                    mov esp, ebp
:00436FE8 5D                      pop ebp
:00436FE9 C3                      ret



* Referenced by a CALL at Address:
|:00436F4E   
|
:00436FEA 55                      push ebp
:00436FEB 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00436FED 6A10                    push 00000010
:00436FEF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436FF2 6BC924                  imul ecx, 00000024
:00436FF5 81C108F54A00            add ecx, 004AF508
:00436FFB E86087FFFF              call 0042F760
:00437000 85C0                    test eax, eax
:00437002 742F                    je 00437033

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437004 6A07                    push 00000007
:00437006 B9800D4B00              mov ecx, 004B0D80
:0043700B E899AB0200              call 00461BA9
:00437010 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437013 6BC924                  imul ecx, 00000024
:00437016 81C108F54A00            add ecx, 004AF508
:0043701C E8BF86FFFF              call 0042F6E0
:00437021 50                      push eax

* Possible StringData Ref from Data Obj ->"%swgVäFC"
                                  |
:00437022 68BC8B4700              push 00478BBC
:00437027 6A00                    push 00000000
:00437029 E83E1BFFFF              call 00428B6C
:0043702E 83C40C                  add esp, 0000000C
:00437031 EB3E                    jmp 00437071

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437002(C)
|
:00437033 6A50                    push 00000050
:00437035 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437038 6BC924                  imul ecx, 00000024
:0043703B 81C108F54A00            add ecx, 004AF508
:00437041 E81A2B0000              call 00439B60
:00437046 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437049 6BC924                  imul ecx, 00000024
:0043704C 81C108F54A00            add ecx, 004AF508
:00437052 E8F15BFFFF              call 0042CC48
:00437057 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043705A 6BC924                  imul ecx, 00000024
:0043705D 81C108F54A00            add ecx, 004AF508
:00437063 E86886FFFF              call 0042F6D0
:00437068 50                      push eax
:00437069 E8E2FE0200              call 00466F50
:0043706E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437031(U)
|
:00437071 5D                      pop ebp
:00437072 C3                      ret



* Referenced by a CALL at Address:
|:004337F9   
|
:00437073 55                      push ebp
:00437074 8BEC                    mov ebp, esp
:00437076 83EC24                  sub esp, 00000024
:00437079 C645FCFF                mov [ebp-04], FF
:0043707D 8B4508                  mov eax, dword ptr [ebp+08]
:00437080 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00437082 B906000000              mov ecx, 00000006
:00437087 F7F1                    div ecx
:00437089 8845F4                  mov byte ptr [ebp-0C], al
:0043708C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043708F 6BC911                  imul ecx, 00000011
:00437092 81C180DF4A00            add ecx, 004ADF80
:00437098 E85388FFFF              call 0042F8F0
:0043709D 8845EC                  mov byte ptr [ebp-14], al
:004370A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004370A3 6BC911                  imul ecx, 00000011
:004370A6 81C180DF4A00            add ecx, 004ADF80
:004370AC E82F07FDFF              call 004077E0
:004370B1 8845F0                  mov byte ptr [ebp-10], al
:004370B4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004370B7 6BC924                  imul ecx, 00000024
:004370BA 81C108F54A00            add ecx, 004AF508
:004370C0 E82B88FFFF              call 0042F8F0
:004370C5 25FF000000              and eax, 000000FF
:004370CA 83F807                  cmp eax, 00000007
:004370CD 7418                    je 004370E7
:004370CF 33D2                    xor edx, edx
:004370D1 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:004370D7 83E204                  and edx, 00000004
:004370DA 85D2                    test edx, edx
:004370DC 7509                    jne 004370E7
:004370DE C745E000000000          mov [ebp-20], 00000000
:004370E5 EB07                    jmp 004370EE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004370CD(C), :004370DC(C)
|
:004370E7 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004370E5(U)
|
:004370EE 8B45E0                  mov eax, dword ptr [ebp-20]
:004370F1 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004370F4 68FF000000              push 000000FF
:004370F9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004370FC 51                      push ecx
:004370FD 8B550C                  mov edx, dword ptr [ebp+0C]
:00437100 52                      push edx
:00437101 8B4508                  mov eax, dword ptr [ebp+08]
:00437104 50                      push eax
:00437105 E8DC8FFFFF              call 004300E6
:0043710A 83C410                  add esp, 00000010
:0043710D 85C0                    test eax, eax
:0043710F 7505                    jne 00437116
:00437111 E9AE010000              jmp 004372C4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043710F(C), :00437171(U)
|
:00437116 8A4DEC                  mov cl, byte ptr [ebp-14]
:00437119 51                      push ecx
:0043711A E89BCBFFFF              call 00433CBA
:0043711F 83C404                  add esp, 00000004
:00437122 6A00                    push 00000000
:00437124 8B55F0                  mov edx, dword ptr [ebp-10]
:00437127 81E2FF000000            and edx, 000000FF
:0043712D 80CA80                  or dl, 80
:00437130 52                      push edx
:00437131 8A450C                  mov al, byte ptr [ebp+0C]
:00437134 50                      push eax
:00437135 B9A8034B00              mov ecx, 004B03A8
:0043713A E8B9EB0000              call 00445CF8
:0043713F 8845FC                  mov byte ptr [ebp-04], al
:00437142 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437145 81E1FF000000            and ecx, 000000FF
:0043714B 81F9FF000000            cmp ecx, 000000FF
:00437151 0F846D010000            je 004372C4
:00437157 8B55FC                  mov edx, dword ptr [ebp-04]
:0043715A 81E2FF000000            and edx, 000000FF
:00437160 52                      push edx
:00437161 8B4508                  mov eax, dword ptr [ebp+08]
:00437164 50                      push eax
:00437165 E8D6010000              call 00437340
:0043716A 83C408                  add esp, 00000008
:0043716D 85C0                    test eax, eax
:0043716F 7502                    jne 00437173
:00437171 EBA3                    jmp 00437116

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043716F(C)
|
:00437173 837DF800                cmp dword ptr [ebp-08], 00000000
:00437177 7421                    je 0043719A
:00437179 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043717C 6BC911                  imul ecx, 00000011
:0043717F 81C180DF4A00            add ecx, 004ADF80
:00437185 E82606FDFF              call 004077B0
:0043718A 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043718B 68CC8B4700              push 00478BCC
:00437190 6A00                    push 00000000
:00437192 E8D519FFFF              call 00428B6C
:00437197 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437177(C)
|
:0043719A 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043719D 51                      push ecx
:0043719E 8A550C                  mov dl, byte ptr [ebp+0C]
:004371A1 52                      push edx
:004371A2 E8A5BAFFFF              call 00432C4C
:004371A7 83C408                  add esp, 00000008
:004371AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004371AD 81E1FF000000            and ecx, 000000FF
:004371B3 6BC924                  imul ecx, 00000024
:004371B6 81C108F54A00            add ecx, 004AF508
:004371BC E8DF21FFFF              call 004293A0
:004371C1 668B00                  mov ax, word ptr [eax]
:004371C4 668945E8                mov word ptr [ebp-18], ax
:004371C8 8A4DE9                  mov cl, byte ptr [ebp-17]
:004371CB 51                      push ecx
:004371CC 8A55E8                  mov dl, byte ptr [ebp-18]
:004371CF 52                      push edx
:004371D0 B9A8034B00              mov ecx, 004B03A8
:004371D5 E85DE80000              call 00445A37
:004371DA 8A45FC                  mov al, byte ptr [ebp-04]
:004371DD 50                      push eax
:004371DE 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004371E1 51                      push ecx
:004371E2 E8B08EFFFF              call 00430097
:004371E7 83C408                  add esp, 00000008
:004371EA 85C0                    test eax, eax
:004371EC 7458                    je 00437246
:004371EE 6A01                    push 00000001
:004371F0 8A5510                  mov dl, byte ptr [ebp+10]
:004371F3 52                      push edx
:004371F4 8A4508                  mov al, byte ptr [ebp+08]
:004371F7 50                      push eax
:004371F8 8A4DFC                  mov cl, byte ptr [ebp-04]
:004371FB 51                      push ecx
:004371FC 8A550C                  mov dl, byte ptr [ebp+0C]
:004371FF 52                      push edx
:00437200 B9A8034B00              mov ecx, 004B03A8
:00437205 E8CCF40000              call 004466D6
:0043720A 8B4508                  mov eax, dword ptr [ebp+08]
:0043720D 8945DC                  mov dword ptr [ebp-24], eax
:00437210 837DDC1E                cmp dword ptr [ebp-24], 0000001E
:00437214 7408                    je 0043721E
:00437216 837DDC1F                cmp dword ptr [ebp-24], 0000001F
:0043721A 7416                    je 00437232
:0043721C EB26                    jmp 00437244

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437214(C)
|
:0043721E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437221 81E1FF000000            and ecx, 000000FF
:00437227 51                      push ecx
:00437228 E89B000000              call 004372C8
:0043722D 83C404                  add esp, 00000004
:00437230 EB12                    jmp 00437244

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043721A(C)
|
:00437232 8B55FC                  mov edx, dword ptr [ebp-04]
:00437235 81E2FF000000            and edx, 000000FF
:0043723B 52                      push edx
:0043723C E83CF5FFFF              call 0043677D
:00437241 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043721C(U), :00437230(U)
|
:00437244 EB37                    jmp 0043727D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004371EC(C)
|
:00437246 6A00                    push 00000000
:00437248 8A4510                  mov al, byte ptr [ebp+10]
:0043724B 50                      push eax
:0043724C 8A4D08                  mov cl, byte ptr [ebp+08]
:0043724F 51                      push ecx
:00437250 8A55FC                  mov dl, byte ptr [ebp-04]
:00437253 52                      push edx
:00437254 8A450C                  mov al, byte ptr [ebp+0C]
:00437257 50                      push eax
:00437258 B9A8034B00              mov ecx, 004B03A8
:0043725D E874F40000              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437262 6A07                    push 00000007
:00437264 B9800D4B00              mov ecx, 004B0D80
:00437269 E83BA90200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:0043726E 68D08B4700              push 00478BD0
:00437273 6A00                    push 00000000
:00437275 E8F218FFFF              call 00428B6C
:0043727A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437244(U)
|
:0043727D 837DF800                cmp dword ptr [ebp-08], 00000000
:00437281 7437                    je 004372BA
:00437283 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437286 6BC924                  imul ecx, 00000024
:00437289 81C108F54A00            add ecx, 004AF508
:0043728F E83C84FFFF              call 0042F6D0
:00437294 6BC070                  imul eax, 00000070
:00437297 0598224900              add eax, 00492298
:0043729C 8945E4                  mov dword ptr [ebp-1C], eax
:0043729F 6A01                    push 00000001
:004372A1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004372A4 E8D7280000              call 00439B80
:004372A9 25FF000000              and eax, 000000FF
:004372AE 83C014                  add eax, 00000014
:004372B1 50                      push eax
:004372B2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004372B5 E84EB9FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437281(C)
|
:004372BA C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437111(U), :00437151(C)
|
:004372C4 8BE5                    mov esp, ebp
:004372C6 5D                      pop ebp
:004372C7 C3                      ret



* Referenced by a CALL at Address:
|:00437228   
|
:004372C8 55                      push ebp
:004372C9 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004372CB 6A04                    push 00000004
:004372CD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004372D0 6BC924                  imul ecx, 00000024
:004372D3 81C108F54A00            add ecx, 004AF508
:004372D9 E88284FFFF              call 0042F760
:004372DE 85C0                    test eax, eax
:004372E0 742F                    je 00437311

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004372E2 6A07                    push 00000007
:004372E4 B9800D4B00              mov ecx, 004B0D80
:004372E9 E8BBA80200              call 00461BA9
:004372EE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004372F1 6BC924                  imul ecx, 00000024
:004372F4 81C108F54A00            add ecx, 004AF508
:004372FA E8E183FFFF              call 0042F6E0
:004372FF 50                      push eax

* Possible StringData Ref from Data Obj ->"%swgB檬AC"
                                  |
:00437300 68E08B4700              push 00478BE0
:00437305 6A00                    push 00000000
:00437307 E86018FFFF              call 00428B6C
:0043730C 83C40C                  add esp, 0000000C
:0043730F EB2D                    jmp 0043733E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004372E0(C)
|
:00437311 6A44                    push 00000044
:00437313 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437316 6BC924                  imul ecx, 00000024
:00437319 81C108F54A00            add ecx, 004AF508
:0043731F E83C280000              call 00439B60
:00437324 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437327 6BC924                  imul ecx, 00000024
:0043732A 81C108F54A00            add ecx, 004AF508
:00437330 E89B83FFFF              call 0042F6D0
:00437335 50                      push eax
:00437336 E815FC0200              call 00466F50
:0043733B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043730F(U)
|
:0043733E 5D                      pop ebp
:0043733F C3                      ret



* Referenced by a CALL at Address:
|:00437165   
|
:00437340 55                      push ebp
:00437341 8BEC                    mov ebp, esp
:00437343 83EC08                  sub esp, 00000008
:00437346 C745FC01000000          mov [ebp-04], 00000001
:0043734D 8B4508                  mov eax, dword ptr [ebp+08]
:00437350 8945F8                  mov dword ptr [ebp-08], eax
:00437353 837DF81E                cmp dword ptr [ebp-08], 0000001E
:00437357 7408                    je 00437361
:00437359 837DF81F                cmp dword ptr [ebp-08], 0000001F
:0043735D 743D                    je 0043739C
:0043735F EB76                    jmp 004373D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437357(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00437361 6A04                    push 00000004
:00437363 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437366 6BC924                  imul ecx, 00000024
:00437369 81C108F54A00            add ecx, 004AF508
:0043736F E8EC83FFFF              call 0042F760
:00437374 85C0                    test eax, eax
:00437376 7422                    je 0043739A

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437378 6A07                    push 00000007
:0043737A B9800D4B00              mov ecx, 004B0D80
:0043737F E825A80200              call 00461BA9

* Possible StringData Ref from Data Obj ->"o䳡wgB檬pC"
                                  |
:00437384 68F88B4700              push 00478BF8
:00437389 6A00                    push 00000000
:0043738B E8DC17FFFF              call 00428B6C
:00437390 83C408                  add esp, 00000008
:00437393 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437376(C)
|
:0043739A EB42                    jmp 004373DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043735D(C)
|
:0043739C 6A01                    push 00000001
:0043739E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004373A1 6BC924                  imul ecx, 00000024
:004373A4 81C108F54A00            add ecx, 004AF508
:004373AA E8B183FFFF              call 0042F760
:004373AF 85C0                    test eax, eax
:004373B1 7422                    je 004373D5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004373B3 6A07                    push 00000007
:004373B5 B9800D4B00              mov ecx, 004B0D80
:004373BA E8EAA70200              call 00461BA9

* Possible StringData Ref from Data Obj ->"o䳡wgB󤣰ʪpC"
                                  |
:004373BF 68148C4700              push 00478C14
:004373C4 6A00                    push 00000000
:004373C6 E8A117FFFF              call 00428B6C
:004373CB 83C408                  add esp, 00000008
:004373CE C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004373B1(C)
|
:004373D5 EB07                    jmp 004373DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043735F(U)
|
:004373D7 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043739A(U), :004373D5(U)
|
:004373DE 8B45FC                  mov eax, dword ptr [ebp-04]
:004373E1 8BE5                    mov esp, ebp
:004373E3 5D                      pop ebp
:004373E4 C3                      ret



* Referenced by a CALL at Address:
|:0043381A   
|
:004373E5 55                      push ebp
:004373E6 8BEC                    mov ebp, esp
:004373E8 83EC38                  sub esp, 00000038
:004373EB C645FCFF                mov [ebp-04], FF
:004373EF 8B4508                  mov eax, dword ptr [ebp+08]
:004373F2 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:004373F4 B906000000              mov ecx, 00000006
:004373F9 F7F1                    div ecx
:004373FB 8845F4                  mov byte ptr [ebp-0C], al
:004373FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437401 6BC911                  imul ecx, 00000011
:00437404 81C180DF4A00            add ecx, 004ADF80
:0043740A E8E184FFFF              call 0042F8F0
:0043740F 8845EC                  mov byte ptr [ebp-14], al
:00437412 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437415 6BC911                  imul ecx, 00000011
:00437418 81C180DF4A00            add ecx, 004ADF80
:0043741E E8BD03FDFF              call 004077E0
:00437423 8845F0                  mov byte ptr [ebp-10], al
:00437426 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437429 6BC924                  imul ecx, 00000024
:0043742C 81C108F54A00            add ecx, 004AF508
:00437432 E8B984FFFF              call 0042F8F0
:00437437 25FF000000              and eax, 000000FF
:0043743C 83F807                  cmp eax, 00000007
:0043743F 7418                    je 00437459
:00437441 33D2                    xor edx, edx
:00437443 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00437449 83E204                  and edx, 00000004
:0043744C 85D2                    test edx, edx
:0043744E 7509                    jne 00437459
:00437450 C745D000000000          mov [ebp-30], 00000000
:00437457 EB07                    jmp 00437460

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043743F(C), :0043744E(C)
|
:00437459 C745D001000000          mov [ebp-30], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437457(U)
|
:00437460 8B45D0                  mov eax, dword ptr [ebp-30]
:00437463 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00437466 68FF000000              push 000000FF
:0043746B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043746E 51                      push ecx
:0043746F 8B550C                  mov edx, dword ptr [ebp+0C]
:00437472 52                      push edx
:00437473 8B4508                  mov eax, dword ptr [ebp+08]
:00437476 50                      push eax
:00437477 E86A8CFFFF              call 004300E6
:0043747C 83C410                  add esp, 00000010
:0043747F 85C0                    test eax, eax
:00437481 7505                    jne 00437488
:00437483 E9A5030000              jmp 0043782D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437481(C)
|
:00437488 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043748B 51                      push ecx
:0043748C E829C8FFFF              call 00433CBA
:00437491 83C404                  add esp, 00000004
:00437494 6A00                    push 00000000
:00437496 8B55F0                  mov edx, dword ptr [ebp-10]
:00437499 81E2FF000000            and edx, 000000FF
:0043749F 80CA80                  or dl, 80
:004374A2 52                      push edx
:004374A3 8A450C                  mov al, byte ptr [ebp+0C]
:004374A6 50                      push eax
:004374A7 B9A8034B00              mov ecx, 004B03A8
:004374AC E847E80000              call 00445CF8
:004374B1 8845FC                  mov byte ptr [ebp-04], al
:004374B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004374B7 81E1FF000000            and ecx, 000000FF
:004374BD 81F9FF000000            cmp ecx, 000000FF
:004374C3 0F8464030000            je 0043782D
:004374C9 8A55FC                  mov dl, byte ptr [ebp-04]
:004374CC 52                      push edx
:004374CD 8A450C                  mov al, byte ptr [ebp+0C]
:004374D0 50                      push eax
:004374D1 E876B7FFFF              call 00432C4C
:004374D6 83C408                  add esp, 00000008
:004374D9 837DF800                cmp dword ptr [ebp-08], 00000000
:004374DD 7421                    je 00437500
:004374DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004374E2 6BC911                  imul ecx, 00000011
:004374E5 81C180DF4A00            add ecx, 004ADF80
:004374EB E8C002FDFF              call 004077B0
:004374F0 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004374F1 68308C4700              push 00478C30
:004374F6 6A00                    push 00000000
:004374F8 E86F16FFFF              call 00428B6C
:004374FD 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004374DD(C)
|
:00437500 8A4DFC                  mov cl, byte ptr [ebp-04]
:00437503 51                      push ecx
:00437504 8A550C                  mov dl, byte ptr [ebp+0C]
:00437507 52                      push edx
:00437508 E83FB7FFFF              call 00432C4C
:0043750D 83C408                  add esp, 00000008
:00437510 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437513 81E1FF000000            and ecx, 000000FF
:00437519 6BC924                  imul ecx, 00000024
:0043751C 81C108F54A00            add ecx, 004AF508
:00437522 E8791EFFFF              call 004293A0
:00437527 668B00                  mov ax, word ptr [eax]
:0043752A 668945E8                mov word ptr [ebp-18], ax
:0043752E 8A4DE9                  mov cl, byte ptr [ebp-17]
:00437531 51                      push ecx
:00437532 8A55E8                  mov dl, byte ptr [ebp-18]
:00437535 52                      push edx
:00437536 B9A8034B00              mov ecx, 004B03A8
:0043753B E8F7E40000              call 00445A37
:00437540 8A45FC                  mov al, byte ptr [ebp-04]
:00437543 50                      push eax
:00437544 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00437547 51                      push ecx
:00437548 E84A8BFFFF              call 00430097
:0043754D 83C408                  add esp, 00000008
:00437550 85C0                    test eax, eax
:00437552 0F8457020000            je 004377AF
:00437558 6A01                    push 00000001
:0043755A 8A5510                  mov dl, byte ptr [ebp+10]
:0043755D 52                      push edx
:0043755E 8A4508                  mov al, byte ptr [ebp+08]
:00437561 50                      push eax
:00437562 8A4DFC                  mov cl, byte ptr [ebp-04]
:00437565 51                      push ecx
:00437566 8A550C                  mov dl, byte ptr [ebp+0C]
:00437569 52                      push edx
:0043756A B9A8034B00              mov ecx, 004B03A8
:0043756F E862F10000              call 004466D6
:00437574 8B45FC                  mov eax, dword ptr [ebp-04]
:00437577 25FF000000              and eax, 000000FF
:0043757C 50                      push eax
:0043757D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437580 51                      push ecx
:00437581 E8AB020000              call 00437831
:00437586 83C408                  add esp, 00000008
:00437589 8945DC                  mov dword ptr [ebp-24], eax
:0043758C 8B55DC                  mov edx, dword ptr [ebp-24]
:0043758F 52                      push edx
:00437590 8B450C                  mov eax, dword ptr [ebp+0C]
:00437593 50                      push eax
:00437594 E825030000              call 004378BE
:00437599 83C408                  add esp, 00000008
:0043759C 8945E0                  mov dword ptr [ebp-20], eax
:0043759F 8A4DFC                  mov cl, byte ptr [ebp-04]
:004375A2 51                      push ecx
:004375A3 8D55D8                  lea edx, dword ptr [ebp-28]
:004375A6 52                      push edx
:004375A7 E884AB0000              call 00442130
:004375AC 83C408                  add esp, 00000008
:004375AF 8A450C                  mov al, byte ptr [ebp+0C]
:004375B2 50                      push eax
:004375B3 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:004375B6 51                      push ecx
:004375B7 E874AB0000              call 00442130
:004375BC 83C408                  add esp, 00000008
:004375BF E8A28AFFFF              call 00430066
:004375C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004375C7 81E1FF000000            and ecx, 000000FF
:004375CD 6BC924                  imul ecx, 00000024
:004375D0 81C108F54A00            add ecx, 004AF508
:004375D6 E8F57CFDFF              call 0040F2D0
:004375DB 85C0                    test eax, eax
:004375DD 7411                    je 004375F0
:004375DF 33D2                    xor edx, edx
:004375E1 8A151C024B00            mov dl, byte ptr [004B021C]
:004375E7 8D44120E                lea eax, dword ptr [edx+edx+0E]
:004375EB 8945CC                  mov dword ptr [ebp-34], eax
:004375EE EB0F                    jmp 004375FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004375DD(C)
|
:004375F0 33C9                    xor ecx, ecx
:004375F2 8A0D1C024B00            mov cl, byte ptr [004B021C]
:004375F8 8D54092A                lea edx, dword ptr [ecx+ecx+2A]
:004375FC 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004375EE(U)
|
:004375FF 8A45CC                  mov al, byte ptr [ebp-34]
:00437602 8845D8                  mov byte ptr [ebp-28], al
:00437605 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00437608 81E1FF000000            and ecx, 000000FF
:0043760E 33D2                    xor edx, edx
:00437610 8A151C024B00            mov dl, byte ptr [004B021C]
:00437616 8D44120E                lea eax, dword ptr [edx+edx+0E]
:0043761A 3BC8                    cmp ecx, eax
:0043761C 7511                    jne 0043762F
:0043761E 33C9                    xor ecx, ecx
:00437620 8A0D1C024B00            mov cl, byte ptr [004B021C]
:00437626 8D54092A                lea edx, dword ptr [ecx+ecx+2A]
:0043762A 8955C8                  mov dword ptr [ebp-38], edx
:0043762D EB0E                    jmp 0043763D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043761C(C)
|
:0043762F 33C0                    xor eax, eax
:00437631 A01C024B00              mov al, byte ptr [004B021C]
:00437636 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:0043763A 894DC8                  mov dword ptr [ebp-38], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043762D(U)
|
:0043763D 8A55C8                  mov dl, byte ptr [ebp-38]
:00437640 8855E4                  mov byte ptr [ebp-1C], dl
:00437643 33C0                    xor eax, eax
:00437645 A03D0A4B00              mov al, byte ptr [004B0A3D]
:0043764A 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:0043764E 51                      push ecx
:0043764F B9F8F44A00              mov ecx, 004AF4F8
:00437654 E837DEFEFF              call 00425490
:00437659 8A550C                  mov dl, byte ptr [ebp+0C]
:0043765C 52                      push edx
:0043765D 668B45E4                mov ax, word ptr [ebp-1C]
:00437661 50                      push eax
:00437662 E875AB0000              call 004421DC
:00437667 83C408                  add esp, 00000008
:0043766A 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043766D 51                      push ecx
:0043766E 668B55D8                mov dx, word ptr [ebp-28]
:00437672 52                      push edx
:00437673 E864AB0000              call 004421DC
:00437678 83C408                  add esp, 00000008
:0043767B E810F5FEFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00437680 6A03                    push 00000003
:00437682 E8BDF6FEFF              call 00426D44
:00437687 83C404                  add esp, 00000004
:0043768A 33C0                    xor eax, eax
:0043768C A03D0A4B00              mov al, byte ptr [004B0A3D]
:00437691 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:00437695 51                      push ecx
:00437696 B9F8F44A00              mov ecx, 004AF4F8
:0043769B E8F0DDFEFF              call 00425490
:004376A0 6A01                    push 00000001
:004376A2 8B55DC                  mov edx, dword ptr [ebp-24]
:004376A5 52                      push edx
:004376A6 8A45FC                  mov al, byte ptr [ebp-04]
:004376A9 50                      push eax
:004376AA 668B4DD8                mov cx, word ptr [ebp-28]
:004376AE 51                      push ecx
:004376AF E8D8AD0000              call 0044248C
:004376B4 83C410                  add esp, 00000010
:004376B7 6881000000              push 00000081
:004376BC 8B55E0                  mov edx, dword ptr [ebp-20]
:004376BF 52                      push edx
:004376C0 8A45FC                  mov al, byte ptr [ebp-04]
:004376C3 50                      push eax
:004376C4 668B4DE4                mov cx, word ptr [ebp-1C]
:004376C8 51                      push ecx
:004376C9 E8BEAD0000              call 0044248C
:004376CE 83C410                  add esp, 00000010
:004376D1 E8BAF4FEFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004376D6 6A03                    push 00000003
:004376D8 E867F6FEFF              call 00426D44
:004376DD 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:004376E0 6A09                    push 00000009
:004376E2 6A21                    push 00000021
:004376E4 8A55D9                  mov dl, byte ptr [ebp-27]
:004376E7 52                      push edx
:004376E8 33C0                    xor eax, eax
:004376EA A01C024B00              mov al, byte ptr [004B021C]
:004376EF 83C006                  add eax, 00000006
:004376F2 50                      push eax
:004376F3 B9A8034B00              mov ecx, 004B03A8
:004376F8 E8C9D00000              call 004447C6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:004376FD 6A09                    push 00000009
:004376FF 6A21                    push 00000021
:00437701 8A4DE5                  mov cl, byte ptr [ebp-1B]
:00437704 51                      push ecx
:00437705 33D2                    xor edx, edx
:00437707 8A151C024B00            mov dl, byte ptr [004B021C]
:0043770D 83C206                  add edx, 00000006
:00437710 52                      push edx
:00437711 B9A8034B00              mov ecx, 004B03A8
:00437716 E8ABD00000              call 004447C6
:0043771B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043771E 6BC924                  imul ecx, 00000024
:00437721 81C108F54A00            add ecx, 004AF508
:00437727 E884D1FCFF              call 004048B0
:0043772C 0345E0                  add eax, dword ptr [ebp-20]
:0043772F 50                      push eax
:00437730 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437733 6BC924                  imul ecx, 00000024
:00437736 81C108F54A00            add ecx, 004AF508
:0043773C E87C32FFFF              call 0042A9BD
:00437741 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437744 81E1FF000000            and ecx, 000000FF
:0043774A 6BC924                  imul ecx, 00000024
:0043774D 81C108F54A00            add ecx, 004AF508
:00437753 E858D1FCFF              call 004048B0
:00437758 2B45DC                  sub eax, dword ptr [ebp-24]
:0043775B 50                      push eax
:0043775C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043775F 81E1FF000000            and ecx, 000000FF
:00437765 6BC924                  imul ecx, 00000024
:00437768 81C108F54A00            add ecx, 004AF508
:0043776E E84A32FFFF              call 0042A9BD
:00437773 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437776 6BC924                  imul ecx, 00000024
:00437779 81C108F54A00            add ecx, 004AF508
:0043777F E84C7FFFFF              call 0042F6D0
:00437784 50                      push eax
:00437785 E8C6F70200              call 00466F50
:0043778A 83C404                  add esp, 00000004
:0043778D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437790 81E1FF000000            and ecx, 000000FF
:00437796 6BC924                  imul ecx, 00000024
:00437799 81C108F54A00            add ecx, 004AF508
:0043779F E82C7FFFFF              call 0042F6D0
:004377A4 50                      push eax
:004377A5 E8A6F70200              call 00466F50
:004377AA 83C404                  add esp, 00000004
:004377AD EB37                    jmp 004377E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437552(C)
|
:004377AF 6A00                    push 00000000
:004377B1 8A4510                  mov al, byte ptr [ebp+10]
:004377B4 50                      push eax
:004377B5 8A4D08                  mov cl, byte ptr [ebp+08]
:004377B8 51                      push ecx
:004377B9 8A55FC                  mov dl, byte ptr [ebp-04]
:004377BC 52                      push edx
:004377BD 8A450C                  mov al, byte ptr [ebp+0C]
:004377C0 50                      push eax
:004377C1 B9A8034B00              mov ecx, 004B03A8
:004377C6 E80BEF0000              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004377CB 6A07                    push 00000007
:004377CD B9800D4B00              mov ecx, 004B0D80
:004377D2 E8D2A30200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:004377D7 68348C4700              push 00478C34
:004377DC 6A00                    push 00000000
:004377DE E88913FFFF              call 00428B6C
:004377E3 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004377AD(U)
|
:004377E6 837DF800                cmp dword ptr [ebp-08], 00000000
:004377EA 7437                    je 00437823
:004377EC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004377EF 6BC924                  imul ecx, 00000024
:004377F2 81C108F54A00            add ecx, 004AF508
:004377F8 E8D37EFFFF              call 0042F6D0
:004377FD 6BC070                  imul eax, 00000070
:00437800 0598224900              add eax, 00492298
:00437805 8945D4                  mov dword ptr [ebp-2C], eax
:00437808 6A01                    push 00000001
:0043780A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043780D E86E230000              call 00439B80
:00437812 25FF000000              and eax, 000000FF
:00437817 83C014                  add eax, 00000014
:0043781A 50                      push eax
:0043781B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043781E E8E5B3FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004377EA(C)
|
:00437823 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437483(U), :004374C3(C)
|
:0043782D 8BE5                    mov esp, ebp
:0043782F 5D                      pop ebp
:00437830 C3                      ret



* Referenced by a CALL at Address:
|:00437581   
|
:00437831 55                      push ebp
:00437832 8BEC                    mov ebp, esp
:00437834 83EC08                  sub esp, 00000008
:00437837 56                      push esi
:00437838 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043783B 6BC924                  imul ecx, 00000024
:0043783E 81C108F54A00            add ecx, 004AF508
:00437844 E8877EFFFF              call 0042F6D0
:00437849 6BC070                  imul eax, 00000070
:0043784C 0598224900              add eax, 00492298
:00437851 8945F8                  mov dword ptr [ebp-08], eax
:00437854 C745FC00000000          mov [ebp-04], 00000000
:0043785B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043785E 6BC924                  imul ecx, 00000024
:00437861 81C108F54A00            add ecx, 004AF508
:00437867 E844D0FCFF              call 004048B0
:0043786C 8BF0                    mov esi, eax
:0043786E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437871 E89BACFCFF              call 00402511
:00437876 C1E003                  shl eax, 03
:00437879 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043787B B90A000000              mov ecx, 0000000A
:00437880 F7F1                    div ecx
:00437882 3BF0                    cmp esi, eax
:00437884 7619                    jbe 0043789F
:00437886 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437889 E883ACFCFF              call 00402511
:0043788E C1E003                  shl eax, 03
:00437891 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00437893 B90A000000              mov ecx, 0000000A
:00437898 F7F1                    div ecx
:0043789A 8945FC                  mov dword ptr [ebp-04], eax
:0043789D EB17                    jmp 004378B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437884(C)
|
:0043789F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004378A2 6BC924                  imul ecx, 00000024
:004378A5 81C108F54A00            add ecx, 004AF508
:004378AB E800D0FCFF              call 004048B0
:004378B0 83E801                  sub eax, 00000001
:004378B3 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043789D(U)
|
:004378B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004378B9 5E                      pop esi
:004378BA 8BE5                    mov esp, ebp
:004378BC 5D                      pop ebp
:004378BD C3                      ret



* Referenced by a CALL at Address:
|:00437594   
|
:004378BE 55                      push ebp
:004378BF 8BEC                    mov ebp, esp
:004378C1 83EC08                  sub esp, 00000008
:004378C4 56                      push esi
:004378C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004378C8 6BC924                  imul ecx, 00000024
:004378CB 81C108F54A00            add ecx, 004AF508
:004378D1 E8FA7DFFFF              call 0042F6D0
:004378D6 6BC070                  imul eax, 00000070
:004378D9 0598224900              add eax, 00492298
:004378DE 8945FC                  mov dword ptr [ebp-04], eax
:004378E1 C745F800000000          mov [ebp-08], 00000000
:004378E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004378EB 6BC924                  imul ecx, 00000024
:004378EE 81C108F54A00            add ecx, 004AF508
:004378F4 E8B7CFFCFF              call 004048B0
:004378F9 8BF0                    mov esi, eax
:004378FB 03750C                  add esi, dword ptr [ebp+0C]
:004378FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437901 E80BACFCFF              call 00402511
:00437906 3BF0                    cmp esi, eax
:00437908 7622                    jbe 0043792C
:0043790A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043790D E8FFABFCFF              call 00402511
:00437912 8BF0                    mov esi, eax
:00437914 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437917 6BC924                  imul ecx, 00000024
:0043791A 81C108F54A00            add ecx, 004AF508
:00437920 E88BCFFCFF              call 004048B0
:00437925 2BF0                    sub esi, eax
:00437927 8975F8                  mov dword ptr [ebp-08], esi
:0043792A EB06                    jmp 00437932

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437908(C)
|
:0043792C 8B450C                  mov eax, dword ptr [ebp+0C]
:0043792F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043792A(U)
|
:00437932 8B45F8                  mov eax, dword ptr [ebp-08]
:00437935 5E                      pop esi
:00437936 8BE5                    mov esp, ebp
:00437938 5D                      pop ebp
:00437939 C3                      ret



* Referenced by a CALL at Address:
|:0043383B   
|
:0043793A 55                      push ebp
:0043793B 8BEC                    mov ebp, esp
:0043793D 83EC20                  sub esp, 00000020
:00437940 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437943 6BC911                  imul ecx, 00000011
:00437946 81C180DF4A00            add ecx, 004ADF80
:0043794C E88FFEFCFF              call 004077E0
:00437951 8845F0                  mov byte ptr [ebp-10], al
:00437954 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437957 6BC911                  imul ecx, 00000011
:0043795A 81C180DF4A00            add ecx, 004ADF80
:00437960 E88B7FFFFF              call 0042F8F0
:00437965 8845EC                  mov byte ptr [ebp-14], al
:00437968 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043796B 6BC924                  imul ecx, 00000024
:0043796E 81C108F54A00            add ecx, 004AF508
:00437974 E8777FFFFF              call 0042F8F0
:00437979 25FF000000              and eax, 000000FF
:0043797E 83F807                  cmp eax, 00000007
:00437981 7417                    je 0043799A
:00437983 33C0                    xor eax, eax
:00437985 A07C0B4B00              mov al, byte ptr [004B0B7C]
:0043798A 83E004                  and eax, 00000004
:0043798D 85C0                    test eax, eax
:0043798F 7509                    jne 0043799A
:00437991 C745E000000000          mov [ebp-20], 00000000
:00437998 EB07                    jmp 004379A1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437981(C), :0043798F(C)
|
:0043799A C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437998(U)
|
:004379A1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004379A4 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004379A7 68FF000000              push 000000FF
:004379AC 8B55F4                  mov edx, dword ptr [ebp-0C]
:004379AF 52                      push edx
:004379B0 8B450C                  mov eax, dword ptr [ebp+0C]
:004379B3 50                      push eax
:004379B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004379B7 51                      push ecx
:004379B8 E82987FFFF              call 004300E6
:004379BD 83C410                  add esp, 00000010
:004379C0 85C0                    test eax, eax
:004379C2 7505                    jne 004379C9
:004379C4 E907010000              jmp 00437AD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004379C2(C)
|
:004379C9 6A01                    push 00000001
:004379CB 8B55F0                  mov edx, dword ptr [ebp-10]
:004379CE 81E2FF000000            and edx, 000000FF
:004379D4 80CA80                  or dl, 80
:004379D7 52                      push edx
:004379D8 8A450C                  mov al, byte ptr [ebp+0C]
:004379DB 50                      push eax
:004379DC B9A8034B00              mov ecx, 004B03A8
:004379E1 E812E30000              call 00445CF8
:004379E6 8845FC                  mov byte ptr [ebp-04], al
:004379E9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004379EC 81E1FF000000            and ecx, 000000FF
:004379F2 81F9FF000000            cmp ecx, 000000FF
:004379F8 0F84D2000000            je 00437AD0
:004379FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437A01 81E1FF000000            and ecx, 000000FF
:00437A07 6BC924                  imul ecx, 00000024
:00437A0A 81C108F54A00            add ecx, 004AF508
:00437A10 E8BB7CFFFF              call 0042F6D0
:00437A15 6BC070                  imul eax, 00000070
:00437A18 0598224900              add eax, 00492298
:00437A1D 8945F8                  mov dword ptr [ebp-08], eax
:00437A20 6A00                    push 00000000
:00437A22 8A55FC                  mov dl, byte ptr [ebp-04]
:00437A25 52                      push edx
:00437A26 E881ABFFFF              call 004325AC
:00437A2B 83C408                  add esp, 00000008
:00437A2E 85C0                    test eax, eax
:00437A30 0F849A000000            je 00437AD0
:00437A36 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437A39 81E1FF000000            and ecx, 000000FF
:00437A3F 6BC924                  imul ecx, 00000024
:00437A42 81C108F54A00            add ecx, 004AF508
:00437A48 E85319FFFF              call 004293A0
:00437A4D 668B00                  mov ax, word ptr [eax]
:00437A50 668945E8                mov word ptr [ebp-18], ax
:00437A54 8A4DE9                  mov cl, byte ptr [ebp-17]
:00437A57 51                      push ecx
:00437A58 8A55E8                  mov dl, byte ptr [ebp-18]
:00437A5B 52                      push edx
:00437A5C B9A8034B00              mov ecx, 004B03A8
:00437A61 E8D1DF0000              call 00445A37
:00437A66 8A4510                  mov al, byte ptr [ebp+10]
:00437A69 50                      push eax
:00437A6A 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00437A6D 51                      push ecx
:00437A6E 8A5508                  mov dl, byte ptr [ebp+08]
:00437A71 52                      push edx
:00437A72 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437A75 81E1FF000000            and ecx, 000000FF
:00437A7B 6BC924                  imul ecx, 00000024
:00437A7E 81C108F54A00            add ecx, 004AF508
:00437A84 E84E1A0000              call 004394D7
:00437A89 837DF400                cmp dword ptr [ebp-0C], 00000000
:00437A8D 7437                    je 00437AC6
:00437A8F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437A92 6BC924                  imul ecx, 00000024
:00437A95 81C108F54A00            add ecx, 004AF508
:00437A9B E8307CFFFF              call 0042F6D0
:00437AA0 6BC070                  imul eax, 00000070
:00437AA3 0598224900              add eax, 00492298
:00437AA8 8945E4                  mov dword ptr [ebp-1C], eax
:00437AAB 6A01                    push 00000001
:00437AAD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00437AB0 E8CB200000              call 00439B80
:00437AB5 25FF000000              and eax, 000000FF
:00437ABA 83C014                  add eax, 00000014
:00437ABD 50                      push eax
:00437ABE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00437AC1 E842B1FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437A8D(C)
|
:00437AC6 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004379C4(U), :004379F8(C), :00437A30(C)
|
:00437AD0 8BE5                    mov esp, ebp
:00437AD2 5D                      pop ebp
:00437AD3 C3                      ret



* Referenced by a CALL at Address:
|:0043385C   
|
:00437AD4 55                      push ebp
:00437AD5 8BEC                    mov ebp, esp
:00437AD7 83EC24                  sub esp, 00000024
:00437ADA 56                      push esi
:00437ADB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437ADE 6BC911                  imul ecx, 00000011
:00437AE1 81C180DF4A00            add ecx, 004ADF80
:00437AE7 E8F4FCFCFF              call 004077E0
:00437AEC 8845F0                  mov byte ptr [ebp-10], al
:00437AEF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437AF2 6BC911                  imul ecx, 00000011
:00437AF5 81C180DF4A00            add ecx, 004ADF80
:00437AFB E8F07DFFFF              call 0042F8F0
:00437B00 8845EC                  mov byte ptr [ebp-14], al
:00437B03 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437B06 6BC924                  imul ecx, 00000024
:00437B09 81C108F54A00            add ecx, 004AF508
:00437B0F E8DC7DFFFF              call 0042F8F0
:00437B14 25FF000000              and eax, 000000FF
:00437B19 83F807                  cmp eax, 00000007
:00437B1C 7417                    je 00437B35
:00437B1E 33C0                    xor eax, eax
:00437B20 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00437B25 83E004                  and eax, 00000004
:00437B28 85C0                    test eax, eax
:00437B2A 7509                    jne 00437B35
:00437B2C C745DC00000000          mov [ebp-24], 00000000
:00437B33 EB07                    jmp 00437B3C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437B1C(C), :00437B2A(C)
|
:00437B35 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437B33(U)
|
:00437B3C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00437B3F 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00437B42 68FF000000              push 000000FF
:00437B47 8B55F4                  mov edx, dword ptr [ebp-0C]
:00437B4A 52                      push edx
:00437B4B 8B450C                  mov eax, dword ptr [ebp+0C]
:00437B4E 50                      push eax
:00437B4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437B52 51                      push ecx
:00437B53 E88E85FFFF              call 004300E6
:00437B58 83C410                  add esp, 00000010
:00437B5B 85C0                    test eax, eax
:00437B5D 7505                    jne 00437B64
:00437B5F E9D6010000              jmp 00437D3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437B5D(C)
|
:00437B64 6A01                    push 00000001
:00437B66 8B55F0                  mov edx, dword ptr [ebp-10]
:00437B69 81E2FF000000            and edx, 000000FF
:00437B6F 80CA80                  or dl, 80
:00437B72 52                      push edx
:00437B73 8A450C                  mov al, byte ptr [ebp+0C]
:00437B76 50                      push eax
:00437B77 B9A8034B00              mov ecx, 004B03A8
:00437B7C E877E10000              call 00445CF8
:00437B81 8845FC                  mov byte ptr [ebp-04], al
:00437B84 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437B87 81E1FF000000            and ecx, 000000FF
:00437B8D 81F9FF000000            cmp ecx, 000000FF
:00437B93 0F84A1010000            je 00437D3A
:00437B99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437B9C 81E1FF000000            and ecx, 000000FF
:00437BA2 6BC924                  imul ecx, 00000024
:00437BA5 81C108F54A00            add ecx, 004AF508
:00437BAB E8207BFFFF              call 0042F6D0
:00437BB0 6BC070                  imul eax, 00000070
:00437BB3 0598224900              add eax, 00492298
:00437BB8 8945F8                  mov dword ptr [ebp-08], eax
:00437BBB 6A00                    push 00000000
:00437BBD 8A55FC                  mov dl, byte ptr [ebp-04]
:00437BC0 52                      push edx
:00437BC1 E8E6A9FFFF              call 004325AC
:00437BC6 83C408                  add esp, 00000008
:00437BC9 85C0                    test eax, eax
:00437BCB 0F8469010000            je 00437D3A
:00437BD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437BD4 81E1FF000000            and ecx, 000000FF
:00437BDA 6BC924                  imul ecx, 00000024
:00437BDD 81C108F54A00            add ecx, 004AF508
:00437BE3 E8B817FFFF              call 004293A0
:00437BE8 668B00                  mov ax, word ptr [eax]
:00437BEB 668945E8                mov word ptr [ebp-18], ax
:00437BEF 8A4DE9                  mov cl, byte ptr [ebp-17]
:00437BF2 51                      push ecx
:00437BF3 8A55E8                  mov dl, byte ptr [ebp-18]
:00437BF6 52                      push edx
:00437BF7 B9A8034B00              mov ecx, 004B03A8
:00437BFC E836DE0000              call 00445A37
:00437C01 8A4510                  mov al, byte ptr [ebp+10]
:00437C04 50                      push eax
:00437C05 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00437C08 51                      push ecx
:00437C09 8A5508                  mov dl, byte ptr [ebp+08]
:00437C0C 52                      push edx
:00437C0D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437C10 81E1FF000000            and ecx, 000000FF
:00437C16 6BC924                  imul ecx, 00000024
:00437C19 81C108F54A00            add ecx, 004AF508
:00437C1F E8B3180000              call 004394D7
:00437C24 8B45EC                  mov eax, dword ptr [ebp-14]
:00437C27 25FF000000              and eax, 000000FF
:00437C2C 85C0                    test eax, eax
:00437C2E 0F84BF000000            je 00437CF3

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00437C34 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00437C39 6A11                    push 00000011
:00437C3B 68B8014B00              push 004B01B8
:00437C40 E803AC0200              call 00462848
:00437C45 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00437C48 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00437C4D 68FF000000              push 000000FF
:00437C52 6A01                    push 00000001
:00437C54 68B8014B00              push 004B01B8
:00437C59 8A4DEC                  mov cl, byte ptr [ebp-14]
:00437C5C 51                      push ecx
:00437C5D 8A55FC                  mov dl, byte ptr [ebp-04]
:00437C60 52                      push edx
:00437C61 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437C64 6BC924                  imul ecx, 00000024
:00437C67 81C108F54A00            add ecx, 004AF508
:00437C6D E88E5A0100              call 0044D700
:00437C72 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437CF1(U)
|
:00437C75 8B45E4                  mov eax, dword ptr [ebp-1C]
:00437C78 33C9                    xor ecx, ecx
:00437C7A 8A08                    mov cl, byte ptr [eax]
:00437C7C 81F9FF000000            cmp ecx, 000000FF
:00437C82 746F                    je 00437CF3
:00437C84 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437C87 6BC924                  imul ecx, 00000024
:00437C8A 81C108F54A00            add ecx, 004AF508
:00437C90 E83B76FDFF              call 0040F2D0
:00437C95 8BF0                    mov esi, eax
:00437C97 8B55E4                  mov edx, dword ptr [ebp-1C]
:00437C9A 33C0                    xor eax, eax
:00437C9C 8A02                    mov al, byte ptr [edx]
:00437C9E 8BC8                    mov ecx, eax
:00437CA0 6BC924                  imul ecx, 00000024
:00437CA3 81C108F54A00            add ecx, 004AF508
:00437CA9 E82276FDFF              call 0040F2D0
:00437CAE 3BF0                    cmp esi, eax
:00437CB0 7536                    jne 00437CE8
:00437CB2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00437CB5 33D2                    xor edx, edx
:00437CB7 8A11                    mov dl, byte ptr [ecx]
:00437CB9 8B45FC                  mov eax, dword ptr [ebp-04]
:00437CBC 25FF000000              and eax, 000000FF
:00437CC1 3BD0                    cmp edx, eax
:00437CC3 7423                    je 00437CE8
:00437CC5 8A4D10                  mov cl, byte ptr [ebp+10]
:00437CC8 51                      push ecx
:00437CC9 8A550C                  mov dl, byte ptr [ebp+0C]
:00437CCC 52                      push edx
:00437CCD 8A4508                  mov al, byte ptr [ebp+08]
:00437CD0 50                      push eax
:00437CD1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00437CD4 33D2                    xor edx, edx
:00437CD6 8A11                    mov dl, byte ptr [ecx]
:00437CD8 8BCA                    mov ecx, edx
:00437CDA 6BC924                  imul ecx, 00000024
:00437CDD 81C108F54A00            add ecx, 004AF508
:00437CE3 E8EF170000              call 004394D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437CB0(C), :00437CC3(C)
|
:00437CE8 8B45E4                  mov eax, dword ptr [ebp-1C]
:00437CEB 83C001                  add eax, 00000001
:00437CEE 8945E4                  mov dword ptr [ebp-1C], eax
:00437CF1 EB82                    jmp 00437C75

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437C2E(C), :00437C82(C)
|
:00437CF3 837DF400                cmp dword ptr [ebp-0C], 00000000
:00437CF7 7437                    je 00437D30
:00437CF9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437CFC 6BC924                  imul ecx, 00000024
:00437CFF 81C108F54A00            add ecx, 004AF508
:00437D05 E8C679FFFF              call 0042F6D0
:00437D0A 6BC070                  imul eax, 00000070
:00437D0D 0598224900              add eax, 00492298
:00437D12 8945E0                  mov dword ptr [ebp-20], eax
:00437D15 6A01                    push 00000001
:00437D17 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00437D1A E8611E0000              call 00439B80
:00437D1F 25FF000000              and eax, 000000FF
:00437D24 83C014                  add eax, 00000014
:00437D27 50                      push eax
:00437D28 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00437D2B E8D8AEFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437CF7(C)
|
:00437D30 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437B5F(U), :00437B93(C), :00437BCB(C)
|
:00437D3A 5E                      pop esi
:00437D3B 8BE5                    mov esp, ebp
:00437D3D 5D                      pop ebp
:00437D3E C3                      ret



* Referenced by a CALL at Address:
|:0043387D   
|
:00437D3F 55                      push ebp
:00437D40 8BEC                    mov ebp, esp
:00437D42 83EC1C                  sub esp, 0000001C
:00437D45 C645FCFF                mov [ebp-04], FF
:00437D49 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437D4C 6BC911                  imul ecx, 00000011
:00437D4F 81C180DF4A00            add ecx, 004ADF80
:00437D55 E886FAFCFF              call 004077E0
:00437D5A 8845F4                  mov byte ptr [ebp-0C], al
:00437D5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437D60 6BC911                  imul ecx, 00000011
:00437D63 81C180DF4A00            add ecx, 004ADF80
:00437D69 E8827BFFFF              call 0042F8F0
:00437D6E 8845F0                  mov byte ptr [ebp-10], al
:00437D71 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437D74 6BC924                  imul ecx, 00000024
:00437D77 81C108F54A00            add ecx, 004AF508
:00437D7D E86E7BFFFF              call 0042F8F0
:00437D82 25FF000000              and eax, 000000FF
:00437D87 83F807                  cmp eax, 00000007
:00437D8A 7417                    je 00437DA3
:00437D8C 33C0                    xor eax, eax
:00437D8E A07C0B4B00              mov al, byte ptr [004B0B7C]
:00437D93 83E004                  and eax, 00000004
:00437D96 85C0                    test eax, eax
:00437D98 7509                    jne 00437DA3
:00437D9A C745E400000000          mov [ebp-1C], 00000000
:00437DA1 EB07                    jmp 00437DAA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437D8A(C), :00437D98(C)
|
:00437DA3 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437DA1(U)
|
:00437DAA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00437DAD 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00437DB0 68FF000000              push 000000FF
:00437DB5 8B55F8                  mov edx, dword ptr [ebp-08]
:00437DB8 52                      push edx
:00437DB9 8B450C                  mov eax, dword ptr [ebp+0C]
:00437DBC 50                      push eax
:00437DBD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437DC0 51                      push ecx
:00437DC1 E82083FFFF              call 004300E6
:00437DC6 83C410                  add esp, 00000010
:00437DC9 85C0                    test eax, eax
:00437DCB 7505                    jne 00437DD2
:00437DCD E9EA000000              jmp 00437EBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437DCB(C)
|
:00437DD2 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:00437DD9 0F84DD000000            je 00437EBC
:00437DDF 6A00                    push 00000000
:00437DE1 8A550C                  mov dl, byte ptr [ebp+0C]
:00437DE4 52                      push edx
:00437DE5 E8C2A7FFFF              call 004325AC
:00437DEA 83C408                  add esp, 00000008
:00437DED 85C0                    test eax, eax
:00437DEF 0F84C7000000            je 00437EBC
:00437DF5 6A18                    push 00000018
:00437DF7 6A27                    push 00000027
:00437DF9 6A00                    push 00000000
:00437DFB 6A00                    push 00000000
:00437DFD B9A8034B00              mov ecx, 004B03A8
:00437E02 E8BFC90000              call 004447C6
:00437E07 837DF800                cmp dword ptr [ebp-08], 00000000
:00437E0B 7421                    je 00437E2E
:00437E0D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437E10 6BC911                  imul ecx, 00000011
:00437E13 81C180DF4A00            add ecx, 004ADF80
:00437E19 E892F9FCFF              call 004077B0
:00437E1E 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00437E1F 68448C4700              push 00478C44
:00437E24 6A00                    push 00000000
:00437E26 E8410DFFFF              call 00428B6C
:00437E2B 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437E0B(C)
|
:00437E2E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437E31 6BC924                  imul ecx, 00000024
:00437E34 81C108F54A00            add ecx, 004AF508
:00437E3A E86115FFFF              call 004293A0
:00437E3F 668B00                  mov ax, word ptr [eax]
:00437E42 668945EC                mov word ptr [ebp-14], ax
:00437E46 8A4DED                  mov cl, byte ptr [ebp-13]
:00437E49 51                      push ecx
:00437E4A 8A55EC                  mov dl, byte ptr [ebp-14]
:00437E4D 52                      push edx
:00437E4E B9A8034B00              mov ecx, 004B03A8
:00437E53 E8DFDB0000              call 00445A37
:00437E58 8A4510                  mov al, byte ptr [ebp+10]
:00437E5B 50                      push eax
:00437E5C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00437E5F 51                      push ecx
:00437E60 8A5508                  mov dl, byte ptr [ebp+08]
:00437E63 52                      push edx
:00437E64 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437E67 6BC924                  imul ecx, 00000024
:00437E6A 81C108F54A00            add ecx, 004AF508
:00437E70 E862160000              call 004394D7
:00437E75 837DF800                cmp dword ptr [ebp-08], 00000000
:00437E79 7437                    je 00437EB2
:00437E7B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437E7E 6BC924                  imul ecx, 00000024
:00437E81 81C108F54A00            add ecx, 004AF508
:00437E87 E84478FFFF              call 0042F6D0
:00437E8C 6BC070                  imul eax, 00000070
:00437E8F 0598224900              add eax, 00492298
:00437E94 8945E8                  mov dword ptr [ebp-18], eax
:00437E97 6A01                    push 00000001
:00437E99 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00437E9C E8DF1C0000              call 00439B80
:00437EA1 25FF000000              and eax, 000000FF
:00437EA6 83C014                  add eax, 00000014
:00437EA9 50                      push eax
:00437EAA 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00437EAD E856ADFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437E79(C)
|
:00437EB2 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437DCD(U), :00437DD9(C), :00437DEF(C)
|
:00437EBC 8BE5                    mov esp, ebp
:00437EBE 5D                      pop ebp
:00437EBF C3                      ret



* Referenced by a CALL at Address:
|:0043389E   
|
:00437EC0 55                      push ebp
:00437EC1 8BEC                    mov ebp, esp
:00437EC3 83EC18                  sub esp, 00000018
:00437EC6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437EC9 6BC911                  imul ecx, 00000011
:00437ECC 81C180DF4A00            add ecx, 004ADF80
:00437ED2 E809F9FCFF              call 004077E0
:00437ED7 8845F4                  mov byte ptr [ebp-0C], al
:00437EDA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437EDD 6BC911                  imul ecx, 00000011
:00437EE0 81C180DF4A00            add ecx, 004ADF80
:00437EE6 E8057AFFFF              call 0042F8F0
:00437EEB 8845F0                  mov byte ptr [ebp-10], al
:00437EEE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437EF1 6BC924                  imul ecx, 00000024
:00437EF4 81C108F54A00            add ecx, 004AF508
:00437EFA E8F179FFFF              call 0042F8F0
:00437EFF 25FF000000              and eax, 000000FF
:00437F04 83F807                  cmp eax, 00000007
:00437F07 7417                    je 00437F20
:00437F09 33C0                    xor eax, eax
:00437F0B A07C0B4B00              mov al, byte ptr [004B0B7C]
:00437F10 83E004                  and eax, 00000004
:00437F13 85C0                    test eax, eax
:00437F15 7509                    jne 00437F20
:00437F17 C745E800000000          mov [ebp-18], 00000000
:00437F1E EB07                    jmp 00437F27

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437F07(C), :00437F15(C)
|
:00437F20 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437F1E(U)
|
:00437F27 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00437F2A 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00437F2D 68FF000000              push 000000FF
:00437F32 8B55F8                  mov edx, dword ptr [ebp-08]
:00437F35 52                      push edx
:00437F36 8B450C                  mov eax, dword ptr [ebp+0C]
:00437F39 50                      push eax
:00437F3A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437F3D 51                      push ecx
:00437F3E E8A381FFFF              call 004300E6
:00437F43 83C410                  add esp, 00000010
:00437F46 85C0                    test eax, eax
:00437F48 7505                    jne 00437F4F
:00437F4A E90F010000              jmp 0043805E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437F48(C)
|
:00437F4F 6A01                    push 00000001
:00437F51 8B55F4                  mov edx, dword ptr [ebp-0C]
:00437F54 81E2FF000000            and edx, 000000FF
:00437F5A 80CA80                  or dl, 80
:00437F5D 52                      push edx
:00437F5E 8A450C                  mov al, byte ptr [ebp+0C]
:00437F61 50                      push eax
:00437F62 B9A8034B00              mov ecx, 004B03A8
:00437F67 E88CDD0000              call 00445CF8
:00437F6C 8845FC                  mov byte ptr [ebp-04], al
:00437F6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00437F72 81E1FF000000            and ecx, 000000FF
:00437F78 81F9FF000000            cmp ecx, 000000FF
:00437F7E 0F84DA000000            je 0043805E
:00437F84 8A55FC                  mov dl, byte ptr [ebp-04]
:00437F87 52                      push edx
:00437F88 8A4508                  mov al, byte ptr [ebp+08]
:00437F8B 50                      push eax
:00437F8C E8D1000000              call 00438062
:00437F91 83C408                  add esp, 00000008
:00437F94 85C0                    test eax, eax
:00437F96 7520                    jne 00437FB8

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437F98 6A07                    push 00000007
:00437F9A B9800D4B00              mov ecx, 004B0D80
:00437F9F E8059C0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"Sn䳡_C"
                                  |
:00437FA4 68488C4700              push 00478C48
:00437FA9 6A00                    push 00000000
:00437FAB E8BC0BFFFF              call 00428B6C
:00437FB0 83C408                  add esp, 00000008
:00437FB3 E9A6000000              jmp 0043805E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437F96(C)
|
:00437FB8 837DF800                cmp dword ptr [ebp-08], 00000000
:00437FBC 7421                    je 00437FDF
:00437FBE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437FC1 6BC911                  imul ecx, 00000011
:00437FC4 81C180DF4A00            add ecx, 004ADF80
:00437FCA E8E1F7FCFF              call 004077B0
:00437FCF 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00437FD0 68648C4700              push 00478C64
:00437FD5 6A00                    push 00000000
:00437FD7 E8900BFFFF              call 00428B6C
:00437FDC 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437FBC(C)
|
:00437FDF 8A4D10                  mov cl, byte ptr [ebp+10]
:00437FE2 51                      push ecx
:00437FE3 8A550C                  mov dl, byte ptr [ebp+0C]
:00437FE6 52                      push edx
:00437FE7 8A45FC                  mov al, byte ptr [ebp-04]
:00437FEA 50                      push eax
:00437FEB 8A4D08                  mov cl, byte ptr [ebp+08]
:00437FEE 51                      push ecx
:00437FEF E815010000              call 00438109
:00437FF4 83C410                  add esp, 00000010
:00437FF7 837DF800                cmp dword ptr [ebp-08], 00000000
:00437FFB 7437                    je 00438034
:00437FFD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438000 6BC924                  imul ecx, 00000024
:00438003 81C108F54A00            add ecx, 004AF508
:00438009 E8C276FFFF              call 0042F6D0
:0043800E 6BC070                  imul eax, 00000070
:00438011 0598224900              add eax, 00492298
:00438016 8945EC                  mov dword ptr [ebp-14], eax
:00438019 6A01                    push 00000001
:0043801B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043801E E85D1B0000              call 00439B80
:00438023 25FF000000              and eax, 000000FF
:00438028 83C014                  add eax, 00000014
:0043802B 50                      push eax
:0043802C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043802F E8D4ABFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437FFB(C)
|
:00438034 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438037 81E1FF000000            and ecx, 000000FF
:0043803D 6BC924                  imul ecx, 00000024
:00438040 81C108F54A00            add ecx, 004AF508
:00438046 E88576FFFF              call 0042F6D0
:0043804B 50                      push eax
:0043804C E8FFEE0200              call 00466F50
:00438051 83C404                  add esp, 00000004
:00438054 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437F4A(U), :00437F7E(C), :00437FB3(U)
|
:0043805E 8BE5                    mov esp, ebp
:00438060 5D                      pop ebp
:00438061 C3                      ret



* Referenced by a CALL at Address:
|:00437F8C   
|
:00438062 55                      push ebp
:00438063 8BEC                    mov ebp, esp
:00438065 83EC0C                  sub esp, 0000000C
:00438068 C745FC00000000          mov [ebp-04], 00000000
:0043806F 8B450C                  mov eax, dword ptr [ebp+0C]
:00438072 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438077 3DFF000000              cmp eax, 000000FF
:0043807C 7474                    je 004380F2
:0043807E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438081 81E1FF000000            and ecx, 000000FF
:00438087 6BC924                  imul ecx, 00000024
:0043808A 81C108F54A00            add ecx, 004AF508
:00438090 894DF8                  mov dword ptr [ebp-08], ecx
:00438093 8B5508                  mov edx, dword ptr [ebp+08]
:00438096 81E2FF000000            and edx, 000000FF
:0043809C 8955F4                  mov dword ptr [ebp-0C], edx
:0043809F 8B45F4                  mov eax, dword ptr [ebp-0C]
:004380A2 83E826                  sub eax, 00000026
:004380A5 8945F4                  mov dword ptr [ebp-0C], eax
:004380A8 837DF403                cmp dword ptr [ebp-0C], 00000003
:004380AC 7744                    ja 004380F2
:004380AE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004380B1 FF248DF9804300          jmp dword ptr [4*ecx+004380F9]

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004380B8 6A10                    push 00000010
:004380BA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004380BD E89E76FFFF              call 0042F760
:004380C2 8945FC                  mov dword ptr [ebp-04], eax
:004380C5 EB2B                    jmp 004380F2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004380C7 6A04                    push 00000004
:004380C9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004380CC E88F76FFFF              call 0042F760
:004380D1 8945FC                  mov dword ptr [ebp-04], eax
:004380D4 EB1C                    jmp 004380F2
:004380D6 6A01                    push 00000001
:004380D8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004380DB E88076FFFF              call 0042F760
:004380E0 8945FC                  mov dword ptr [ebp-04], eax
:004380E3 EB0D                    jmp 004380F2
:004380E5 6A20                    push 00000020
:004380E7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004380EA E87176FFFF              call 0042F760
:004380EF 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043807C(C), :004380AC(C), :004380C5(U), :004380D4(U), :004380E3(U)
|
:004380F2 8B45FC                  mov eax, dword ptr [ebp-04]
:004380F5 8BE5                    mov esp, ebp
:004380F7 5D                      pop ebp
:004380F8 C3                      ret



:004380F9 B8804300                DWORD 004380B8
:004380FD C7804300                DWORD 004380C7
:00438101 D6804300                DWORD 004380D6
:00438105 E5804300                DWORD 004380E5



* Referenced by a CALL at Address:
|:00437FEF   
|
:00438109 55                      push ebp
:0043810A 8BEC                    mov ebp, esp
:0043810C 83EC10                  sub esp, 00000010
:0043810F 8B450C                  mov eax, dword ptr [ebp+0C]
:00438112 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438117 3DFF000000              cmp eax, 000000FF
:0043811C 0F84D0000000            je 004381F2
:00438122 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438125 81E1FF000000            and ecx, 000000FF
:0043812B 6BC924                  imul ecx, 00000024
:0043812E 81C108F54A00            add ecx, 004AF508
:00438134 894DFC                  mov dword ptr [ebp-04], ecx
:00438137 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043813A E89175FFFF              call 0042F6D0
:0043813F 6BC070                  imul eax, 00000070
:00438142 0598224900              add eax, 00492298
:00438147 8945F4                  mov dword ptr [ebp-0C], eax
:0043814A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043814D E84E12FFFF              call 004293A0
:00438152 668B10                  mov dx, word ptr [eax]
:00438155 668955F8                mov word ptr [ebp-08], dx
:00438159 8A45F9                  mov al, byte ptr [ebp-07]
:0043815C 50                      push eax
:0043815D 8A4DF8                  mov cl, byte ptr [ebp-08]
:00438160 51                      push ecx
:00438161 B9A8034B00              mov ecx, 004B03A8
:00438166 E8CCD80000              call 00445A37
:0043816B 8A550C                  mov dl, byte ptr [ebp+0C]
:0043816E 52                      push edx
:0043816F 8A4510                  mov al, byte ptr [ebp+10]
:00438172 50                      push eax
:00438173 E8D4AAFFFF              call 00432C4C
:00438178 83C408                  add esp, 00000008
:0043817B 6A01                    push 00000001
:0043817D 8A4D14                  mov cl, byte ptr [ebp+14]
:00438180 51                      push ecx
:00438181 8A5508                  mov dl, byte ptr [ebp+08]
:00438184 52                      push edx
:00438185 8A450C                  mov al, byte ptr [ebp+0C]
:00438188 50                      push eax
:00438189 8A4D10                  mov cl, byte ptr [ebp+10]
:0043818C 51                      push ecx
:0043818D B9A8034B00              mov ecx, 004B03A8
:00438192 E83FE50000              call 004466D6
:00438197 8B5508                  mov edx, dword ptr [ebp+08]
:0043819A 81E2FF000000            and edx, 000000FF
:004381A0 8955F0                  mov dword ptr [ebp-10], edx
:004381A3 8B45F0                  mov eax, dword ptr [ebp-10]
:004381A6 83E826                  sub eax, 00000026
:004381A9 8945F0                  mov dword ptr [ebp-10], eax
:004381AC 837DF003                cmp dword ptr [ebp-10], 00000003
:004381B0 7738                    ja 004381EA
:004381B2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004381B5 FF248DF6814300          jmp dword ptr [4*ecx+004381F6]

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004381BC 6A10                    push 00000010
:004381BE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004381C1 E80A78FFFF              call 0042F9D0
:004381C6 EB22                    jmp 004381EA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004381C8 6A04                    push 00000004
:004381CA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004381CD E8FE77FFFF              call 0042F9D0
:004381D2 EB16                    jmp 004381EA
:004381D4 6A01                    push 00000001
:004381D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004381D9 E8F277FFFF              call 0042F9D0
:004381DE EB0A                    jmp 004381EA
:004381E0 6A20                    push 00000020
:004381E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004381E5 E8E677FFFF              call 0042F9D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004381B0(C), :004381C6(U), :004381D2(U), :004381DE(U)
|
:004381EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004381ED E8564AFFFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043811C(C)
|
:004381F2 8BE5                    mov esp, ebp
:004381F4 5D                      pop ebp
:004381F5 C3                      ret



:004381F6 BC814300                DWORD 004381BC
:004381FA C8814300                DWORD 004381C8
:004381FE D4814300                DWORD 004381D4
:00438202 E0814300                DWORD 004381E0



* Referenced by a CALL at Address:
|:004338BF   
|
:00438206 55                      push ebp
:00438207 8BEC                    mov ebp, esp
:00438209 83EC1C                  sub esp, 0000001C
:0043820C 56                      push esi
:0043820D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438210 6BC911                  imul ecx, 00000011
:00438213 81C180DF4A00            add ecx, 004ADF80
:00438219 E8C2F5FCFF              call 004077E0
:0043821E 8845F4                  mov byte ptr [ebp-0C], al
:00438221 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438224 6BC911                  imul ecx, 00000011
:00438227 81C180DF4A00            add ecx, 004ADF80
:0043822D E8BE76FFFF              call 0042F8F0
:00438232 8845F0                  mov byte ptr [ebp-10], al
:00438235 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438238 6BC924                  imul ecx, 00000024
:0043823B 81C108F54A00            add ecx, 004AF508
:00438241 E8AA76FFFF              call 0042F8F0
:00438246 25FF000000              and eax, 000000FF
:0043824B 83F807                  cmp eax, 00000007
:0043824E 7417                    je 00438267
:00438250 33C0                    xor eax, eax
:00438252 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00438257 83E004                  and eax, 00000004
:0043825A 85C0                    test eax, eax
:0043825C 7509                    jne 00438267
:0043825E C745E400000000          mov [ebp-1C], 00000000
:00438265 EB07                    jmp 0043826E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043824E(C), :0043825C(C)
|
:00438267 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438265(U)
|
:0043826E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00438271 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438274 68FF000000              push 000000FF
:00438279 8B55F8                  mov edx, dword ptr [ebp-08]
:0043827C 52                      push edx
:0043827D 8B450C                  mov eax, dword ptr [ebp+0C]
:00438280 50                      push eax
:00438281 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438284 51                      push ecx
:00438285 E85C7EFFFF              call 004300E6
:0043828A 83C410                  add esp, 00000010
:0043828D 85C0                    test eax, eax
:0043828F 7505                    jne 00438296
:00438291 E9A4010000              jmp 0043843A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043828F(C)
|
:00438296 6A01                    push 00000001
:00438298 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043829B 81E2FF000000            and edx, 000000FF
:004382A1 80CA80                  or dl, 80
:004382A4 52                      push edx
:004382A5 8A450C                  mov al, byte ptr [ebp+0C]
:004382A8 50                      push eax
:004382A9 B9A8034B00              mov ecx, 004B03A8
:004382AE E845DA0000              call 00445CF8
:004382B3 8845FC                  mov byte ptr [ebp-04], al
:004382B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004382B9 81E1FF000000            and ecx, 000000FF
:004382BF 81F9FF000000            cmp ecx, 000000FF
:004382C5 0F846F010000            je 0043843A
:004382CB 8A55FC                  mov dl, byte ptr [ebp-04]
:004382CE 52                      push edx
:004382CF 8A4508                  mov al, byte ptr [ebp+08]
:004382D2 50                      push eax
:004382D3 E867010000              call 0043843F
:004382D8 83C408                  add esp, 00000008
:004382DB 85C0                    test eax, eax
:004382DD 7520                    jne 004382FF

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004382DF 6A07                    push 00000007
:004382E1 B9800D4B00              mov ecx, 004B0D80
:004382E6 E8BE980200              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡AWɤFC"
                                  |
:004382EB 68688C4700              push 00478C68
:004382F0 6A00                    push 00000000
:004382F2 E87508FFFF              call 00428B6C
:004382F7 83C408                  add esp, 00000008
:004382FA E93B010000              jmp 0043843A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004382DD(C)
|
:004382FF 837DF800                cmp dword ptr [ebp-08], 00000000
:00438303 7421                    je 00438326
:00438305 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438308 6BC911                  imul ecx, 00000011
:0043830B 81C180DF4A00            add ecx, 004ADF80
:00438311 E89AF4FCFF              call 004077B0
:00438316 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00438317 68808C4700              push 00478C80
:0043831C 6A00                    push 00000000
:0043831E E84908FFFF              call 00428B6C
:00438323 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438303(C)
|
:00438326 8A4D10                  mov cl, byte ptr [ebp+10]
:00438329 51                      push ecx
:0043832A 8A550C                  mov dl, byte ptr [ebp+0C]
:0043832D 52                      push edx
:0043832E 8A45FC                  mov al, byte ptr [ebp-04]
:00438331 50                      push eax
:00438332 8A4D08                  mov cl, byte ptr [ebp+08]
:00438335 51                      push ecx
:00438336 E880010000              call 004384BB
:0043833B 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043833E 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00438343 6A11                    push 00000011
:00438345 68B8014B00              push 004B01B8
:0043834A E8F9A40200              call 00462848
:0043834F 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438352 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438357 68FF000000              push 000000FF
:0043835C 6A01                    push 00000001
:0043835E 68B8014B00              push 004B01B8
:00438363 8A55F0                  mov dl, byte ptr [ebp-10]
:00438366 52                      push edx
:00438367 8A45FC                  mov al, byte ptr [ebp-04]
:0043836A 50                      push eax
:0043836B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043836E 6BC924                  imul ecx, 00000024
:00438371 81C108F54A00            add ecx, 004AF508
:00438377 E884530100              call 0044D700
:0043837C 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004383F1(U)
|
:0043837F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00438382 33D2                    xor edx, edx
:00438384 8A11                    mov dl, byte ptr [ecx]
:00438386 81FAFF000000            cmp edx, 000000FF
:0043838C 7465                    je 004383F3
:0043838E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438391 6BC924                  imul ecx, 00000024
:00438394 81C108F54A00            add ecx, 004AF508
:0043839A E8316FFDFF              call 0040F2D0
:0043839F 8BF0                    mov esi, eax
:004383A1 8B45EC                  mov eax, dword ptr [ebp-14]
:004383A4 33C9                    xor ecx, ecx
:004383A6 8A08                    mov cl, byte ptr [eax]
:004383A8 6BC924                  imul ecx, 00000024
:004383AB 81C108F54A00            add ecx, 004AF508
:004383B1 E81A6FFDFF              call 0040F2D0
:004383B6 3BF0                    cmp esi, eax
:004383B8 752E                    jne 004383E8
:004383BA 8B55EC                  mov edx, dword ptr [ebp-14]
:004383BD 33C0                    xor eax, eax
:004383BF 8A02                    mov al, byte ptr [edx]
:004383C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004383C4 81E1FF000000            and ecx, 000000FF
:004383CA 3BC1                    cmp eax, ecx
:004383CC 741A                    je 004383E8
:004383CE 8A5510                  mov dl, byte ptr [ebp+10]
:004383D1 52                      push edx
:004383D2 8A450C                  mov al, byte ptr [ebp+0C]
:004383D5 50                      push eax
:004383D6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004383D9 8A11                    mov dl, byte ptr [ecx]
:004383DB 52                      push edx
:004383DC 8A4508                  mov al, byte ptr [ebp+08]
:004383DF 50                      push eax
:004383E0 E8D6000000              call 004384BB
:004383E5 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004383B8(C), :004383CC(C)
|
:004383E8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004383EB 83C101                  add ecx, 00000001
:004383EE 894DEC                  mov dword ptr [ebp-14], ecx
:004383F1 EB8C                    jmp 0043837F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043838C(C)
|
:004383F3 837DF800                cmp dword ptr [ebp-08], 00000000
:004383F7 7437                    je 00438430
:004383F9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004383FC 6BC924                  imul ecx, 00000024
:004383FF 81C108F54A00            add ecx, 004AF508
:00438405 E8C672FFFF              call 0042F6D0
:0043840A 6BC070                  imul eax, 00000070
:0043840D 0598224900              add eax, 00492298
:00438412 8945E8                  mov dword ptr [ebp-18], eax
:00438415 6A01                    push 00000001
:00438417 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043841A E861170000              call 00439B80
:0043841F 25FF000000              and eax, 000000FF
:00438424 83C014                  add eax, 00000014
:00438427 50                      push eax
:00438428 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043842B E8D8A7FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004383F7(C)
|
:00438430 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438291(U), :004382C5(C), :004382FA(U)
|
:0043843A 5E                      pop esi
:0043843B 8BE5                    mov esp, ebp
:0043843D 5D                      pop ebp
:0043843E C3                      ret



* Referenced by a CALL at Address:
|:004382D3   
|
:0043843F 55                      push ebp
:00438440 8BEC                    mov ebp, esp
:00438442 83EC0C                  sub esp, 0000000C
:00438445 C745FC01000000          mov [ebp-04], 00000001
:0043844C 8B450C                  mov eax, dword ptr [ebp+0C]
:0043844F 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438454 3DFF000000              cmp eax, 000000FF
:00438459 7459                    je 004384B4
:0043845B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043845E 81E1FF000000            and ecx, 000000FF
:00438464 6BC924                  imul ecx, 00000024
:00438467 81C108F54A00            add ecx, 004AF508
:0043846D 894DF8                  mov dword ptr [ebp-08], ecx
:00438470 8A5508                  mov dl, byte ptr [ebp+08]
:00438473 8855F4                  mov byte ptr [ebp-0C], dl
:00438476 807DF42A                cmp byte ptr [ebp-0C], 2A
:0043847A 7408                    je 00438484
:0043847C 807DF42B                cmp byte ptr [ebp-0C], 2B
:00438480 741B                    je 0043849D
:00438482 EB30                    jmp 004384B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043847A(C)
|
:00438484 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00438487 E89472FFFF              call 0042F720
:0043848C 25FF000000              and eax, 000000FF
:00438491 33C9                    xor ecx, ecx
:00438493 85C0                    test eax, eax
:00438495 0F9FC1                  setg cl
:00438498 894DFC                  mov dword ptr [ebp-04], ecx
:0043849B EB17                    jmp 004384B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438480(C)
|
:0043849D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004384A0 E89B72FFFF              call 0042F740
:004384A5 25FF000000              and eax, 000000FF
:004384AA 33D2                    xor edx, edx
:004384AC 85C0                    test eax, eax
:004384AE 0F9FC2                  setg dl
:004384B1 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438459(C), :00438482(U), :0043849B(U)
|
:004384B4 8B45FC                  mov eax, dword ptr [ebp-04]
:004384B7 8BE5                    mov esp, ebp
:004384B9 5D                      pop ebp
:004384BA C3                      ret



* Referenced by a CALL at Addresses:
|:00438336   , :004383E0   
|
:004384BB 55                      push ebp
:004384BC 8BEC                    mov ebp, esp
:004384BE 83EC10                  sub esp, 00000010
:004384C1 8B450C                  mov eax, dword ptr [ebp+0C]
:004384C4 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004384C9 3DFF000000              cmp eax, 000000FF
:004384CE 0F840D010000            je 004385E1
:004384D4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004384D7 81E1FF000000            and ecx, 000000FF
:004384DD 6BC924                  imul ecx, 00000024
:004384E0 81C108F54A00            add ecx, 004AF508
:004384E6 894DFC                  mov dword ptr [ebp-04], ecx
:004384E9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004384EC E8DF71FFFF              call 0042F6D0
:004384F1 6BC070                  imul eax, 00000070
:004384F4 0598224900              add eax, 00492298
:004384F9 8945F4                  mov dword ptr [ebp-0C], eax
:004384FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004384FF E89C0EFFFF              call 004293A0
:00438504 668B10                  mov dx, word ptr [eax]
:00438507 668955F8                mov word ptr [ebp-08], dx
:0043850B 8A45F9                  mov al, byte ptr [ebp-07]
:0043850E 50                      push eax
:0043850F 8A4DF8                  mov cl, byte ptr [ebp-08]
:00438512 51                      push ecx
:00438513 B9A8034B00              mov ecx, 004B03A8
:00438518 E81AD50000              call 00445A37
:0043851D 8A550C                  mov dl, byte ptr [ebp+0C]
:00438520 52                      push edx
:00438521 8A4510                  mov al, byte ptr [ebp+10]
:00438524 50                      push eax
:00438525 E822A7FFFF              call 00432C4C
:0043852A 83C408                  add esp, 00000008
:0043852D 6A01                    push 00000001
:0043852F 8A4D14                  mov cl, byte ptr [ebp+14]
:00438532 51                      push ecx
:00438533 8A5508                  mov dl, byte ptr [ebp+08]
:00438536 52                      push edx
:00438537 8A450C                  mov al, byte ptr [ebp+0C]
:0043853A 50                      push eax
:0043853B 8A4D10                  mov cl, byte ptr [ebp+10]
:0043853E 51                      push ecx
:0043853F B9A8034B00              mov ecx, 004B03A8
:00438544 E88DE10000              call 004466D6
:00438549 8A5508                  mov dl, byte ptr [ebp+08]
:0043854C 8855F0                  mov byte ptr [ebp-10], dl
:0043854F 807DF02A                cmp byte ptr [ebp-10], 2A
:00438553 7408                    je 0043855D
:00438555 807DF02B                cmp byte ptr [ebp-10], 2B
:00438559 7441                    je 0043859C
:0043855B EB7C                    jmp 004385D9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438553(C)
|
:0043855D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438560 E8BB71FFFF              call 0042F720
:00438565 25FF000000              and eax, 000000FF
:0043856A 85C0                    test eax, eax
:0043856C 7E2C                    jle 0043859A
:0043856E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438571 E8AA71FFFF              call 0042F720
:00438576 25FF000000              and eax, 000000FF
:0043857B 83E801                  sub eax, 00000001
:0043857E 0C40                    or al, 40
:00438580 50                      push eax
:00438581 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438584 E8A773FFFF              call 0042F930
:00438589 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043858C E83F71FFFF              call 0042F6D0
:00438591 50                      push eax
:00438592 E8B9E90200              call 00466F50
:00438597 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043856C(C)
|
:0043859A EB3D                    jmp 004385D9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438559(C)
|
:0043859C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043859F E89C71FFFF              call 0042F740
:004385A4 25FF000000              and eax, 000000FF
:004385A9 85C0                    test eax, eax
:004385AB 7E2C                    jle 004385D9
:004385AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004385B0 E88B71FFFF              call 0042F740
:004385B5 25FF000000              and eax, 000000FF
:004385BA 83E801                  sub eax, 00000001
:004385BD 0C40                    or al, 40
:004385BF 50                      push eax
:004385C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004385C3 E8A873FFFF              call 0042F970
:004385C8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004385CB E80071FFFF              call 0042F6D0
:004385D0 50                      push eax
:004385D1 E87AE90200              call 00466F50
:004385D6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043855B(U), :0043859A(U), :004385AB(C)
|
:004385D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004385DC E86746FFFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004384CE(C)
|
:004385E1 8BE5                    mov esp, ebp
:004385E3 5D                      pop ebp
:004385E4 C3                      ret



* Referenced by a CALL at Address:
|:004338DD   
|
:004385E5 55                      push ebp
:004385E6 8BEC                    mov ebp, esp
:004385E8 83EC1C                  sub esp, 0000001C
:004385EB C645FCFF                mov [ebp-04], FF
:004385EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004385F2 6BC911                  imul ecx, 00000011
:004385F5 81C180DF4A00            add ecx, 004ADF80
:004385FB E8E0F1FCFF              call 004077E0
:00438600 8845F4                  mov byte ptr [ebp-0C], al
:00438603 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438606 6BC924                  imul ecx, 00000024
:00438609 81C108F54A00            add ecx, 004AF508
:0043860F E8DC72FFFF              call 0042F8F0
:00438614 25FF000000              and eax, 000000FF
:00438619 83F807                  cmp eax, 00000007
:0043861C 7417                    je 00438635
:0043861E 33C0                    xor eax, eax
:00438620 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00438625 83E004                  and eax, 00000004
:00438628 85C0                    test eax, eax
:0043862A 7509                    jne 00438635
:0043862C C745E400000000          mov [ebp-1C], 00000000
:00438633 EB07                    jmp 0043863C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043861C(C), :0043862A(C)
|
:00438635 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438633(U)
|
:0043863C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043863F 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438642 68FF000000              push 000000FF
:00438647 8B55F8                  mov edx, dword ptr [ebp-08]
:0043864A 52                      push edx
:0043864B 8B450C                  mov eax, dword ptr [ebp+0C]
:0043864E 50                      push eax
:0043864F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438652 51                      push ecx
:00438653 E88E7AFFFF              call 004300E6
:00438658 83C410                  add esp, 00000010
:0043865B 85C0                    test eax, eax
:0043865D 7505                    jne 00438664
:0043865F E9C6010000              jmp 0043882A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043865D(C), :004386C2(U), :0043871C(U)
|
:00438664 6A01                    push 00000001
:00438666 8B55F4                  mov edx, dword ptr [ebp-0C]
:00438669 81E2FF000000            and edx, 000000FF
:0043866F 80CA80                  or dl, 80
:00438672 52                      push edx
:00438673 8A450C                  mov al, byte ptr [ebp+0C]
:00438676 50                      push eax
:00438677 B9A8034B00              mov ecx, 004B03A8
:0043867C E877D60000              call 00445CF8
:00438681 8845FC                  mov byte ptr [ebp-04], al
:00438684 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438687 81E1FF000000            and ecx, 000000FF
:0043868D 81F9FF000000            cmp ecx, 000000FF
:00438693 0F8491010000            je 0043882A
:00438699 8B55FC                  mov edx, dword ptr [ebp-04]
:0043869C 81E2FF000000            and edx, 000000FF
:004386A2 3B550C                  cmp edx, dword ptr [ebp+0C]
:004386A5 751D                    jne 004386C4

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004386A7 6A07                    push 00000007
:004386A9 B9800D4B00              mov ecx, 004B0D80
:004386AE E8F6940200              call 00461BA9

* Possible StringData Ref from Data Obj ->"Lk۳C"
                                  |
:004386B3 68848C4700              push 00478C84
:004386B8 6A00                    push 00000000
:004386BA E8AD04FFFF              call 00428B6C
:004386BF 83C408                  add esp, 00000008
:004386C2 EBA0                    jmp 00438664

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004386A5(C)
|
:004386C4 6A40                    push 00000040
:004386C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004386C9 81E1FF000000            and ecx, 000000FF
:004386CF 6BC924                  imul ecx, 00000024
:004386D2 81C108F54A00            add ecx, 004AF508
:004386D8 E81374FFFF              call 0042FAF0
:004386DD 85C0                    test eax, eax
:004386DF 7540                    jne 00438721
:004386E1 6880000000              push 00000080
:004386E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004386E9 81E1FF000000            and ecx, 000000FF
:004386EF 6BC924                  imul ecx, 00000024
:004386F2 81C108F54A00            add ecx, 004AF508
:004386F8 E8F373FFFF              call 0042FAF0
:004386FD 85C0                    test eax, eax
:004386FF 7520                    jne 00438721

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00438701 6A07                    push 00000007
:00438703 B9800D4B00              mov ecx, 004B0D80
:00438708 E89C940200              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡٨SOC"
                                  |
:0043870D 68988C4700              push 00478C98
:00438712 6A00                    push 00000000
:00438714 E85304FFFF              call 00428B6C
:00438719 83C408                  add esp, 00000008
:0043871C E943FFFFFF              jmp 00438664

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004386DF(C), :004386FF(C)
|
:00438721 837DF800                cmp dword ptr [ebp-08], 00000000
:00438725 7421                    je 00438748
:00438727 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043872A 6BC911                  imul ecx, 00000011
:0043872D 81C180DF4A00            add ecx, 004ADF80
:00438733 E878F0FCFF              call 004077B0
:00438738 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00438739 68B48C4700              push 00478CB4
:0043873E 6A00                    push 00000000
:00438740 E82704FFFF              call 00428B6C
:00438745 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438725(C)
|
:00438748 8A45FC                  mov al, byte ptr [ebp-04]
:0043874B 50                      push eax
:0043874C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043874F 51                      push ecx
:00438750 E8F7A4FFFF              call 00432C4C
:00438755 83C408                  add esp, 00000008
:00438758 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043875B 81E1FF000000            and ecx, 000000FF
:00438761 6BC924                  imul ecx, 00000024
:00438764 81C108F54A00            add ecx, 004AF508
:0043876A E8310CFFFF              call 004293A0
:0043876F 668B10                  mov dx, word ptr [eax]
:00438772 668955F0                mov word ptr [ebp-10], dx
:00438776 8A45F1                  mov al, byte ptr [ebp-0F]
:00438779 50                      push eax
:0043877A 8A4DF0                  mov cl, byte ptr [ebp-10]
:0043877D 51                      push ecx
:0043877E B9A8034B00              mov ecx, 004B03A8
:00438783 E8AFD20000              call 00445A37
:00438788 6A01                    push 00000001
:0043878A 8A5510                  mov dl, byte ptr [ebp+10]
:0043878D 52                      push edx
:0043878E 8A4508                  mov al, byte ptr [ebp+08]
:00438791 50                      push eax
:00438792 8A4DFC                  mov cl, byte ptr [ebp-04]
:00438795 51                      push ecx
:00438796 8A550C                  mov dl, byte ptr [ebp+0C]
:00438799 52                      push edx
:0043879A B9A8034B00              mov ecx, 004B03A8
:0043879F E832DF0000              call 004466D6
:004387A4 8B45FC                  mov eax, dword ptr [ebp-04]
:004387A7 25FF000000              and eax, 000000FF
:004387AC 6BC024                  imul eax, 00000024
:004387AF 0508F54A00              add eax, 004AF508
:004387B4 8945EC                  mov dword ptr [ebp-14], eax
:004387B7 6A40                    push 00000040
:004387B9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004387BC E82F73FFFF              call 0042FAF0
:004387C1 85C0                    test eax, eax
:004387C3 7511                    jne 004387D6
:004387C5 6880000000              push 00000080
:004387CA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004387CD E81E73FFFF              call 0042FAF0
:004387D2 85C0                    test eax, eax
:004387D4 740D                    je 004387E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004387C3(C)
|
:004387D6 68C0000000              push 000000C0
:004387DB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004387DE E8DD72FFFF              call 0042FAC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004387D4(C)
|
:004387E3 837DF800                cmp dword ptr [ebp-08], 00000000
:004387E7 7437                    je 00438820
:004387E9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004387EC 6BC924                  imul ecx, 00000024
:004387EF 81C108F54A00            add ecx, 004AF508
:004387F5 E8D66EFFFF              call 0042F6D0
:004387FA 6BC070                  imul eax, 00000070
:004387FD 0598224900              add eax, 00492298
:00438802 8945E8                  mov dword ptr [ebp-18], eax
:00438805 6A01                    push 00000001
:00438807 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043880A E871130000              call 00439B80
:0043880F 25FF000000              and eax, 000000FF
:00438814 83C00A                  add eax, 0000000A
:00438817 50                      push eax
:00438818 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043881B E8E8A3FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004387E7(C)
|
:00438820 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043865F(U), :00438693(C)
|
:0043882A 8BE5                    mov esp, ebp
:0043882C 5D                      pop ebp
:0043882D C3                      ret



* Referenced by a CALL at Address:
|:004338FB   
|
:0043882E 55                      push ebp
:0043882F 8BEC                    mov ebp, esp
:00438831 83EC14                  sub esp, 00000014
:00438834 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438837 6BC924                  imul ecx, 00000024
:0043883A 81C108F54A00            add ecx, 004AF508
:00438840 E8AB70FFFF              call 0042F8F0
:00438845 25FF000000              and eax, 000000FF
:0043884A 83F807                  cmp eax, 00000007
:0043884D 7417                    je 00438866
:0043884F 33C0                    xor eax, eax
:00438851 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00438856 83E004                  and eax, 00000004
:00438859 85C0                    test eax, eax
:0043885B 7509                    jne 00438866
:0043885D C745F000000000          mov [ebp-10], 00000000
:00438864 EB07                    jmp 0043886D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043884D(C), :0043885B(C)
|
:00438866 C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438864(U)
|
:0043886D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00438870 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438873 68FF000000              push 000000FF
:00438878 8B55F8                  mov edx, dword ptr [ebp-08]
:0043887B 52                      push edx
:0043887C 8B450C                  mov eax, dword ptr [ebp+0C]
:0043887F 50                      push eax
:00438880 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438883 51                      push ecx
:00438884 E85D78FFFF              call 004300E6
:00438889 83C410                  add esp, 00000010
:0043888C 85C0                    test eax, eax
:0043888E 7505                    jne 00438895
:00438890 E947010000              jmp 004389DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043888E(C)
|
:00438895 6A18                    push 00000018
:00438897 6A27                    push 00000027
:00438899 6A00                    push 00000000
:0043889B 6A00                    push 00000000
:0043889D B9A8034B00              mov ecx, 004B03A8
:004388A2 E81FBF0000              call 004447C6
:004388A7 837DF800                cmp dword ptr [ebp-08], 00000000
:004388AB 7421                    je 004388CE
:004388AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004388B0 6BC911                  imul ecx, 00000011
:004388B3 81C180DF4A00            add ecx, 004ADF80
:004388B9 E8F2EEFCFF              call 004077B0
:004388BE 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004388BF 68B88C4700              push 00478CB8
:004388C4 6A00                    push 00000000
:004388C6 E8A102FFFF              call 00428B6C
:004388CB 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004388AB(C)
|
:004388CE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004388D1 6BC924                  imul ecx, 00000024
:004388D4 81C108F54A00            add ecx, 004AF508
:004388DA E8C10AFFFF              call 004293A0
:004388DF 668B10                  mov dx, word ptr [eax]
:004388E2 668955FC                mov word ptr [ebp-04], dx
:004388E6 8A45FD                  mov al, byte ptr [ebp-03]
:004388E9 50                      push eax
:004388EA 8A4DFC                  mov cl, byte ptr [ebp-04]
:004388ED 51                      push ecx
:004388EE B9A8034B00              mov ecx, 004B03A8
:004388F3 E83FD10000              call 00445A37
:004388F8 6A01                    push 00000001
:004388FA 8A5510                  mov dl, byte ptr [ebp+10]
:004388FD 52                      push edx
:004388FE 8A4508                  mov al, byte ptr [ebp+08]
:00438901 50                      push eax
:00438902 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00438905 51                      push ecx
:00438906 8A550C                  mov dl, byte ptr [ebp+0C]
:00438909 52                      push edx
:0043890A B9A8034B00              mov ecx, 004B03A8
:0043890F E8C2DD0000              call 004466D6
:00438914 B9180A4B00              mov ecx, 004B0A18
:00438919 E8026FFFFF              call 0042F820
:0043891E 25FF000000              and eax, 000000FF
:00438923 8945EC                  mov dword ptr [ebp-14], eax
:00438926 837DEC05                cmp dword ptr [ebp-14], 00000005
:0043892A 775F                    ja 0043898B
:0043892C 8B45EC                  mov eax, dword ptr [ebp-14]
:0043892F FF2485E0894300          jmp dword ptr [4*eax+004389E0]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00438936 6A04                    push 00000004
:00438938 B9180A4B00              mov ecx, 004B0A18
:0043893D E85E120000              call 00439BA0

* Possible StringData Ref from Data Obj ->"UBFC"
                                  |
:00438942 68BC8C4700              push 00478CBC
:00438947 6A00                    push 00000000
:00438949 E81E02FFFF              call 00428B6C
:0043894E 83C408                  add esp, 00000008
:00438951 EB38                    jmp 0043898B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00438953 6A05                    push 00000005
:00438955 B9180A4B00              mov ecx, 004B0A18
:0043895A E841120000              call 00439BA0

* Possible StringData Ref from Data Obj ->"UBFC"
                                  |
:0043895F 68C88C4700              push 00478CC8
:00438964 6A00                    push 00000000
:00438966 E80102FFFF              call 00428B6C
:0043896B 83C408                  add esp, 00000008
:0043896E EB1B                    jmp 0043898B
:00438970 6A00                    push 00000000
:00438972 B9180A4B00              mov ecx, 004B0A18
:00438977 E824120000              call 00439BA0

* Possible StringData Ref from Data Obj ->"񴸤FC"
                                  |
:0043897C 68D48C4700              push 00478CD4
:00438981 6A00                    push 00000000
:00438983 E8E401FFFF              call 00428B6C
:00438988 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043892A(C), :00438951(U), :0043896E(U)
|
:0043898B B9180A4B00              mov ecx, 004B0A18
:00438990 E80BFD0100              call 004586A0
:00438995 837DF800                cmp dword ptr [ebp-08], 00000000
:00438999 7437                    je 004389D2
:0043899B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043899E 6BC924                  imul ecx, 00000024
:004389A1 81C108F54A00            add ecx, 004AF508
:004389A7 E8246DFFFF              call 0042F6D0
:004389AC 6BC070                  imul eax, 00000070
:004389AF 0598224900              add eax, 00492298
:004389B4 8945F4                  mov dword ptr [ebp-0C], eax
:004389B7 6A01                    push 00000001
:004389B9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004389BC E8BF110000              call 00439B80
:004389C1 25FF000000              and eax, 000000FF
:004389C6 83C00A                  add eax, 0000000A
:004389C9 50                      push eax
:004389CA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004389CD E836A2FCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438999(C)
|
:004389D2 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438890(U)
|
:004389DC 8BE5                    mov esp, ebp
:004389DE 5D                      pop ebp
:004389DF C3                      ret



:004389E0 36894300                DWORD 00438936
:004389E4 36894300                DWORD 00438936
:004389E8 53894300                DWORD 00438953
:004389EC 53894300                DWORD 00438953
:004389F0 70894300                DWORD 00438970
:004389F4 70894300                DWORD 00438970



* Referenced by a CALL at Address:
|:00433919   
|
:004389F8 55                      push ebp
:004389F9 8BEC                    mov ebp, esp
:004389FB 83EC20                  sub esp, 00000020
:004389FE C645FCFF                mov [ebp-04], FF
:00438A02 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438A05 6BC911                  imul ecx, 00000011
:00438A08 81C180DF4A00            add ecx, 004ADF80
:00438A0E E8CDEDFCFF              call 004077E0
:00438A13 8845F4                  mov byte ptr [ebp-0C], al
:00438A16 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438A19 6BC924                  imul ecx, 00000024
:00438A1C 81C108F54A00            add ecx, 004AF508
:00438A22 E8C96EFFFF              call 0042F8F0
:00438A27 25FF000000              and eax, 000000FF
:00438A2C 83F807                  cmp eax, 00000007
:00438A2F 7417                    je 00438A48
:00438A31 33C0                    xor eax, eax
:00438A33 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00438A38 83E004                  and eax, 00000004
:00438A3B 85C0                    test eax, eax
:00438A3D 7509                    jne 00438A48
:00438A3F C745E000000000          mov [ebp-20], 00000000
:00438A46 EB07                    jmp 00438A4F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438A2F(C), :00438A3D(C)
|
:00438A48 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438A46(U)
|
:00438A4F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00438A52 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438A55 68FF000000              push 000000FF
:00438A5A 8B55F8                  mov edx, dword ptr [ebp-08]
:00438A5D 52                      push edx
:00438A5E 8B450C                  mov eax, dword ptr [ebp+0C]
:00438A61 50                      push eax
:00438A62 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438A65 51                      push ecx
:00438A66 E87B76FFFF              call 004300E6
:00438A6B 83C410                  add esp, 00000010
:00438A6E 85C0                    test eax, eax
:00438A70 7505                    jne 00438A77
:00438A72 E91B020000              jmp 00438C92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438A70(C)
|
:00438A77 6A00                    push 00000000
:00438A79 8B55F4                  mov edx, dword ptr [ebp-0C]
:00438A7C 81E2FF000000            and edx, 000000FF
:00438A82 80CA80                  or dl, 80
:00438A85 52                      push edx
:00438A86 8A450C                  mov al, byte ptr [ebp+0C]
:00438A89 50                      push eax
:00438A8A B9A8034B00              mov ecx, 004B03A8
:00438A8F E864D20000              call 00445CF8
:00438A94 8845FC                  mov byte ptr [ebp-04], al
:00438A97 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438A9A 81E1FF000000            and ecx, 000000FF
:00438AA0 81F9FF000000            cmp ecx, 000000FF
:00438AA6 0F84E6010000            je 00438C92
:00438AAC 837DF800                cmp dword ptr [ebp-08], 00000000
:00438AB0 7421                    je 00438AD3
:00438AB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438AB5 6BC911                  imul ecx, 00000011
:00438AB8 81C180DF4A00            add ecx, 004ADF80
:00438ABE E8EDECFCFF              call 004077B0
:00438AC3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00438AC4 68E08C4700              push 00478CE0
:00438AC9 6A00                    push 00000000
:00438ACB E89C00FFFF              call 00428B6C
:00438AD0 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438AB0(C)
|
:00438AD3 8A55FC                  mov dl, byte ptr [ebp-04]
:00438AD6 52                      push edx
:00438AD7 8A450C                  mov al, byte ptr [ebp+0C]
:00438ADA 50                      push eax
:00438ADB E86CA1FFFF              call 00432C4C
:00438AE0 83C408                  add esp, 00000008
:00438AE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438AE6 81E1FF000000            and ecx, 000000FF
:00438AEC 6BC924                  imul ecx, 00000024
:00438AEF 81C108F54A00            add ecx, 004AF508
:00438AF5 E8A608FFFF              call 004293A0
:00438AFA 668B08                  mov cx, word ptr [eax]
:00438AFD 66894DF0                mov word ptr [ebp-10], cx
:00438B01 8A55F1                  mov dl, byte ptr [ebp-0F]
:00438B04 52                      push edx
:00438B05 8A45F0                  mov al, byte ptr [ebp-10]
:00438B08 50                      push eax
:00438B09 B9A8034B00              mov ecx, 004B03A8
:00438B0E E824CF0000              call 00445A37
:00438B13 8A4DFC                  mov cl, byte ptr [ebp-04]
:00438B16 51                      push ecx
:00438B17 8A550C                  mov dl, byte ptr [ebp+0C]
:00438B1A 52                      push edx
:00438B1B E87775FFFF              call 00430097
:00438B20 83C408                  add esp, 00000008
:00438B23 85C0                    test eax, eax
:00438B25 0F84E9000000            je 00438C14
:00438B2B 6A01                    push 00000001
:00438B2D 8A4510                  mov al, byte ptr [ebp+10]
:00438B30 50                      push eax
:00438B31 8A4D08                  mov cl, byte ptr [ebp+08]
:00438B34 51                      push ecx
:00438B35 8A55FC                  mov dl, byte ptr [ebp-04]
:00438B38 52                      push edx
:00438B39 8A450C                  mov al, byte ptr [ebp+0C]
:00438B3C 50                      push eax
:00438B3D B9A8034B00              mov ecx, 004B03A8
:00438B42 E88FDB0000              call 004466D6
:00438B47 8A4DFC                  mov cl, byte ptr [ebp-04]
:00438B4A 51                      push ecx
:00438B4B 8A550C                  mov dl, byte ptr [ebp+0C]
:00438B4E 52                      push edx
:00438B4F E86680FFFF              call 00430BBA
:00438B54 83C408                  add esp, 00000008
:00438B57 8945EC                  mov dword ptr [ebp-14], eax
:00438B5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438B5D 81E1FF000000            and ecx, 000000FF
:00438B63 6BC924                  imul ecx, 00000024
:00438B66 81C108F54A00            add ecx, 004AF508
:00438B6C E82F08FFFF              call 004293A0
:00438B71 50                      push eax
:00438B72 E808EE0000              call 0044797F
:00438B77 83C404                  add esp, 00000004
:00438B7A 8845E8                  mov byte ptr [ebp-18], al
:00438B7D 8B45E8                  mov eax, dword ptr [ebp-18]
:00438B80 25FF000000              and eax, 000000FF
:00438B85 83F805                  cmp eax, 00000005
:00438B88 740E                    je 00438B98
:00438B8A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00438B8D 81E1FF000000            and ecx, 000000FF
:00438B93 83F907                  cmp ecx, 00000007
:00438B96 7509                    jne 00438BA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438B88(C)
|
:00438B98 8B55EC                  mov edx, dword ptr [ebp-14]
:00438B9B 83C20A                  add edx, 0000000A
:00438B9E 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438B96(C)
|
:00438BA1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438BA4 6BC924                  imul ecx, 00000024
:00438BA7 81C108F54A00            add ecx, 004AF508
:00438BAD E81E67FDFF              call 0040F2D0
:00438BB2 85C0                    test eax, eax
:00438BB4 741A                    je 00438BD0
:00438BB6 B9C8E24A00              mov ecx, 004AE2C8
:00438BBB E8106BFFFF              call 0042F6D0
:00438BC0 0345EC                  add eax, dword ptr [ebp-14]
:00438BC3 50                      push eax
:00438BC4 B9C8E24A00              mov ecx, 004AE2C8
:00438BC9 E8B2EBFCFF              call 00407780
:00438BCE EB22                    jmp 00438BF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438BB4(C)
|
:00438BD0 8B45EC                  mov eax, dword ptr [ebp-14]
:00438BD3 50                      push eax
:00438BD4 B9C8E24A00              mov ecx, 004AE2C8
:00438BD9 E8F26AFFFF              call 0042F6D0
:00438BDE 50                      push eax
:00438BDF E8E0930200              call 00461FC4
:00438BE4 83C408                  add esp, 00000008
:00438BE7 50                      push eax
:00438BE8 B9C8E24A00              mov ecx, 004AE2C8
:00438BED E88EEBFCFF              call 00407780

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438BCE(U)
|
:00438BF2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00438BF5 81E1FF000000            and ecx, 000000FF
:00438BFB 6BC924                  imul ecx, 00000024
:00438BFE 81C108F54A00            add ecx, 004AF508
:00438C04 E8C76AFFFF              call 0042F6D0
:00438C09 50                      push eax
:00438C0A E841E30200              call 00466F50
:00438C0F 83C404                  add esp, 00000004
:00438C12 EB37                    jmp 00438C4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438B25(C)
|
:00438C14 6A00                    push 00000000
:00438C16 8A4D10                  mov cl, byte ptr [ebp+10]
:00438C19 51                      push ecx
:00438C1A 8A5508                  mov dl, byte ptr [ebp+08]
:00438C1D 52                      push edx
:00438C1E 8A45FC                  mov al, byte ptr [ebp-04]
:00438C21 50                      push eax
:00438C22 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00438C25 51                      push ecx
:00438C26 B9A8034B00              mov ecx, 004B03A8
:00438C2B E8A6DA0000              call 004466D6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00438C30 6A07                    push 00000007
:00438C32 B9800D4B00              mov ecx, 004B0D80
:00438C37 E86D8F0200              call 00461BA9

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:00438C3C 68E48C4700              push 00478CE4
:00438C41 6A00                    push 00000000
:00438C43 E824FFFEFF              call 00428B6C
:00438C48 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438C12(U)
|
:00438C4B 837DF800                cmp dword ptr [ebp-08], 00000000
:00438C4F 7437                    je 00438C88
:00438C51 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438C54 6BC924                  imul ecx, 00000024
:00438C57 81C108F54A00            add ecx, 004AF508
:00438C5D E86E6AFFFF              call 0042F6D0
:00438C62 6BC070                  imul eax, 00000070
:00438C65 0598224900              add eax, 00492298
:00438C6A 8945E4                  mov dword ptr [ebp-1C], eax
:00438C6D 6A01                    push 00000001
:00438C6F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00438C72 E8090F0000              call 00439B80
:00438C77 25FF000000              and eax, 000000FF
:00438C7C 83C00A                  add eax, 0000000A
:00438C7F 50                      push eax
:00438C80 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00438C83 E8809FFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438C4F(C)
|
:00438C88 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438A72(U), :00438AA6(C)
|
:00438C92 8BE5                    mov esp, ebp
:00438C94 5D                      pop ebp
:00438C95 C3                      ret



* Referenced by a CALL at Address:
|:00433937   
|
:00438C96 55                      push ebp
:00438C97 8BEC                    mov ebp, esp
:00438C99 83EC10                  sub esp, 00000010
:00438C9C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438C9F 6BC924                  imul ecx, 00000024
:00438CA2 81C108F54A00            add ecx, 004AF508
:00438CA8 E8436CFFFF              call 0042F8F0
:00438CAD 25FF000000              and eax, 000000FF
:00438CB2 83F807                  cmp eax, 00000007
:00438CB5 7417                    je 00438CCE
:00438CB7 33C0                    xor eax, eax
:00438CB9 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00438CBE 83E004                  and eax, 00000004
:00438CC1 85C0                    test eax, eax
:00438CC3 7509                    jne 00438CCE
:00438CC5 C745F000000000          mov [ebp-10], 00000000
:00438CCC EB07                    jmp 00438CD5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438CB5(C), :00438CC3(C)
|
:00438CCE C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438CCC(U)
|
:00438CD5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00438CD8 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438CDB 68FF000000              push 000000FF
:00438CE0 8B55F8                  mov edx, dword ptr [ebp-08]
:00438CE3 52                      push edx
:00438CE4 8B450C                  mov eax, dword ptr [ebp+0C]
:00438CE7 50                      push eax
:00438CE8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438CEB 51                      push ecx
:00438CEC E8F573FFFF              call 004300E6
:00438CF1 83C410                  add esp, 00000010
:00438CF4 85C0                    test eax, eax
:00438CF6 7505                    jne 00438CFD
:00438CF8 E91F010000              jmp 00438E1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438CF6(C)
|
:00438CFD 6A18                    push 00000018
:00438CFF 6A27                    push 00000027
:00438D01 6A00                    push 00000000
:00438D03 6A00                    push 00000000
:00438D05 B9A8034B00              mov ecx, 004B03A8
:00438D0A E8B7BA0000              call 004447C6
:00438D0F 837DF800                cmp dword ptr [ebp-08], 00000000
:00438D13 7421                    je 00438D36
:00438D15 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438D18 6BC911                  imul ecx, 00000011
:00438D1B 81C180DF4A00            add ecx, 004ADF80
:00438D21 E88AEAFCFF              call 004077B0
:00438D26 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00438D27 68F48C4700              push 00478CF4
:00438D2C 6A00                    push 00000000
:00438D2E E839FEFEFF              call 00428B6C
:00438D33 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438D13(C)
|
:00438D36 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438D39 6BC924                  imul ecx, 00000024
:00438D3C 81C108F54A00            add ecx, 004AF508
:00438D42 E85906FFFF              call 004293A0
:00438D47 668B10                  mov dx, word ptr [eax]
:00438D4A 668955FC                mov word ptr [ebp-04], dx
:00438D4E 8A45FD                  mov al, byte ptr [ebp-03]
:00438D51 50                      push eax
:00438D52 8A4DFC                  mov cl, byte ptr [ebp-04]
:00438D55 51                      push ecx
:00438D56 B9A8034B00              mov ecx, 004B03A8
:00438D5B E8D7CC0000              call 00445A37
:00438D60 6A01                    push 00000001
:00438D62 8A5510                  mov dl, byte ptr [ebp+10]
:00438D65 52                      push edx
:00438D66 8A4508                  mov al, byte ptr [ebp+08]
:00438D69 50                      push eax
:00438D6A 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00438D6D 51                      push ecx
:00438D6E 8A550C                  mov dl, byte ptr [ebp+0C]
:00438D71 52                      push edx
:00438D72 B9A8034B00              mov ecx, 004B03A8
:00438D77 E85AD90000              call 004466D6
:00438D7C 837DF800                cmp dword ptr [ebp-08], 00000000
:00438D80 7539                    jne 00438DBB
:00438D82 6A01                    push 00000001
:00438D84 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438D87 6BC924                  imul ecx, 00000024
:00438D8A 81C108F54A00            add ecx, 004AF508
:00438D90 E8ABE80000              call 00447640
:00438D95 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438D98 6BC924                  imul ecx, 00000024
:00438D9B 81C108F54A00            add ecx, 004AF508
:00438DA1 E82F120100              call 00449FD5
:00438DA6 6A00                    push 00000000
:00438DA8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438DAB 6BC924                  imul ecx, 00000024
:00438DAE 81C108F54A00            add ecx, 004AF508
:00438DB4 E887E80000              call 00447640
:00438DB9 EB1A                    jmp 00438DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438D80(C)
|
:00438DBB 8B450C                  mov eax, dword ptr [ebp+0C]
:00438DBE 6BC024                  imul eax, 00000024
:00438DC1 0508F54A00              add eax, 004AF508
:00438DC6 50                      push eax
:00438DC7 E854000000              call 00438E20
:00438DCC 83C404                  add esp, 00000004
:00438DCF 85C0                    test eax, eax
:00438DD1 7502                    jne 00438DD5
:00438DD3 EB47                    jmp 00438E1C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438DB9(U), :00438DD1(C)
|
:00438DD5 837DF800                cmp dword ptr [ebp-08], 00000000
:00438DD9 7437                    je 00438E12
:00438DDB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438DDE 6BC924                  imul ecx, 00000024
:00438DE1 81C108F54A00            add ecx, 004AF508
:00438DE7 E8E468FFFF              call 0042F6D0
:00438DEC 6BC070                  imul eax, 00000070
:00438DEF 0598224900              add eax, 00492298
:00438DF4 8945F4                  mov dword ptr [ebp-0C], eax
:00438DF7 6A01                    push 00000001
:00438DF9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00438DFC E87F0D0000              call 00439B80
:00438E01 25FF000000              and eax, 000000FF
:00438E06 83C001                  add eax, 00000001
:00438E09 50                      push eax
:00438E0A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00438E0D E8F69DFCFF              call 00402C08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438DD9(C)
|
:00438E12 C70520024B0001000000    mov dword ptr [004B0220], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438CF8(U), :00438DD3(U)
|
:00438E1C 8BE5                    mov esp, ebp
:00438E1E 5D                      pop ebp
:00438E1F C3                      ret



* Referenced by a CALL at Address:
|:00438DC7   
|
:00438E20 55                      push ebp
:00438E21 8BEC                    mov ebp, esp
:00438E23 83EC10                  sub esp, 00000010
:00438E26 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00438E29 E882E9FCFF              call 004077B0
:00438E2E C745F400000000          mov [ebp-0C], 00000000
:00438E35 C645FCFF                mov [ebp-04], FF
:00438E39 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438E3B 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438E40 68FF000000              push 000000FF
:00438E45 6A00                    push 00000000
:00438E47 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438E4A E8DC16FFFF              call 0042A52B
:00438E4F 50                      push eax
:00438E50 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438E53 E84805FFFF              call 004293A0
:00438E58 50                      push eax
:00438E59 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438E5C E8DE090100              call 0044983F
:00438E61 6A01                    push 00000001
:00438E63 B9A8034B00              mov ecx, 004B03A8
:00438E68 E8BAA00000              call 00442F27
:00438E6D B9A8034B00              mov ecx, 004B03A8
:00438E72 E807B90000              call 0044477E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438EE5(U), :00438F06(U)
|
:00438E77 8B45FC                  mov eax, dword ptr [ebp-04]
:00438E7A 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438E7F 3DFF000000              cmp eax, 000000FF
:00438E84 0F8581000000            jne 00438F0B
:00438E8A B9A8034B00              mov ecx, 004B03A8
:00438E8F E886BE0000              call 00444D1A
:00438E94 50                      push eax
:00438E95 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00438E98 E8F368FFFF              call 0042F790
:00438E9D B9A8034B00              mov ecx, 004B03A8
:00438EA2 E84BC20000              call 004450F2
:00438EA7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00438EAA 81E1FF000000            and ecx, 000000FF
:00438EB0 81F9FF000000            cmp ecx, 000000FF
:00438EB6 7506                    jne 00438EBE
:00438EB8 C645FC00                mov [ebp-04], 00
:00438EBC EB4D                    jmp 00438F0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438EB6(C)
|
:00438EBE 8D55F8                  lea edx, dword ptr [ebp-08]
:00438EC1 52                      push edx
:00438EC2 E84AEA0000              call 00447911
:00438EC7 83C404                  add esp, 00000004
:00438ECA 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438ECF 3DFF000000              cmp eax, 000000FF
:00438ED4 7411                    je 00438EE7

* Possible StringData Ref from Data Obj ->"bʽd򤺡C"
                                  |
:00438ED6 68F88C4700              push 00478CF8
:00438EDB 6A00                    push 00000000
:00438EDD E88AFCFEFF              call 00428B6C
:00438EE2 83C408                  add esp, 00000008
:00438EE5 EB90                    jmp 00438E77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438ED4(C)
|
:00438EE7 668B45F8                mov ax, word ptr [ebp-08]
:00438EEB 50                      push eax
:00438EEC E87D000000              call 00438F6E
:00438EF1 83C404                  add esp, 00000004
:00438EF4 33C9                    xor ecx, ecx
:00438EF6 8A08                    mov cl, byte ptr [eax]
:00438EF8 81F9FF000000            cmp ecx, 000000FF
:00438EFE 7406                    je 00438F06
:00438F00 C645FC01                mov [ebp-04], 01
:00438F04 EB05                    jmp 00438F0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438EFE(C)
|
:00438F06 E96CFFFFFF              jmp 00438E77

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438E84(C), :00438EBC(U), :00438F04(U)
|
:00438F0B 8A55FC                  mov dl, byte ptr [ebp-04]
:00438F0E 8855F0                  mov byte ptr [ebp-10], dl
:00438F11 807DF001                cmp byte ptr [ebp-10], 01
:00438F15 7402                    je 00438F19
:00438F17 EB38                    jmp 00438F51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438F15(C)
|
:00438F19 8B4508                  mov eax, dword ptr [ebp+08]
:00438F1C 50                      push eax
:00438F1D 668B4DF8                mov cx, word ptr [ebp-08]
:00438F21 51                      push ecx
:00438F22 8B4D08                  mov ecx, dword ptr [ebp+08]
:00438F25 E87604FFFF              call 004293A0
:00438F2A 668B10                  mov dx, word ptr [eax]
:00438F2D 52                      push edx
:00438F2E E870000000              call 00438FA3
:00438F33 83C40C                  add esp, 0000000C
:00438F36 B9180A4B00              mov ecx, 004B0A18
:00438F3B E8FEB70100              call 0045473E
:00438F40 B9A8034B00              mov ecx, 004B03A8
:00438F45 E8A8C10000              call 004450F2
:00438F4A C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438F17(U)
|
:00438F51 6A00                    push 00000000
:00438F53 B9A8034B00              mov ecx, 004B03A8
:00438F58 E8CA9F0000              call 00442F27
:00438F5D B9A8034B00              mov ecx, 004B03A8
:00438F62 E817B80000              call 0044477E
:00438F67 8B45F4                  mov eax, dword ptr [ebp-0C]
:00438F6A 8BE5                    mov esp, ebp
:00438F6C 5D                      pop ebp
:00438F6D C3                      ret



* Referenced by a CALL at Address:
|:00438EEC   
|
:00438F6E 55                      push ebp
:00438F6F 8BEC                    mov ebp, esp
:00438F71 6800960000              push 00009600
:00438F76 B930DF4A00              mov ecx, 004ADF30
:00438F7B E81EA6FDFF              call 0041359E
:00438F80 8B4D09                  mov ecx, dword ptr [ebp+09]
:00438F83 81E1FF000000            and ecx, 000000FF
:00438F89 33D2                    xor edx, edx
:00438F8B 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00438F91 0FAFCA                  imul ecx, edx
:00438F94 8B5508                  mov edx, dword ptr [ebp+08]
:00438F97 81E2FF000000            and edx, 000000FF
:00438F9D 03CA                    add ecx, edx
:00438F9F 03C1                    add eax, ecx
:00438FA1 5D                      pop ebp
:00438FA2 C3                      ret



* Referenced by a CALL at Address:
|:00438F2E   
|
:00438FA3 55                      push ebp
:00438FA4 8BEC                    mov ebp, esp
:00438FA6 83EC10                  sub esp, 00000010
:00438FA9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00438FAB 68FF000000              push 000000FF
:00438FB0 8D450C                  lea eax, dword ptr [ebp+0C]
:00438FB3 50                      push eax
:00438FB4 8D4D08                  lea ecx, dword ptr [ebp+08]
:00438FB7 51                      push ecx
:00438FB8 8B4D10                  mov ecx, dword ptr [ebp+10]
:00438FBB E8E0030100              call 004493A0
:00438FC0 8945F4                  mov dword ptr [ebp-0C], eax
:00438FC3 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00438FC6 E8E5E7FCFF              call 004077B0
:00438FCB 8B4D10                  mov ecx, dword ptr [ebp+10]
:00438FCE E83D35FFFF              call 0042C510
:00438FD3 C745F800000000          mov [ebp-08], 00000000
:00438FDA EB09                    jmp 00438FE5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439038(U), :0043905E(U)
|
:00438FDC 8B55F8                  mov edx, dword ptr [ebp-08]
:00438FDF 83C201                  add edx, 00000001
:00438FE2 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438FDA(U)
|
:00438FE5 8D450C                  lea eax, dword ptr [ebp+0C]
:00438FE8 50                      push eax
:00438FE9 8B4D10                  mov ecx, dword ptr [ebp+10]
:00438FEC E8AF03FFFF              call 004293A0
:00438FF1 50                      push eax
:00438FF2 E8A96CFFFF              call 0042FCA0
:00438FF7 83C408                  add esp, 00000008
:00438FFA 85C0                    test eax, eax
:00438FFC 7565                    jne 00439063
:00438FFE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439001 034DF8                  add ecx, dword ptr [ebp-08]
:00439004 8A11                    mov dl, byte ptr [ecx]
:00439006 8855FC                  mov byte ptr [ebp-04], dl
:00439009 8A45FC                  mov al, byte ptr [ebp-04]
:0043900C 50                      push eax
:0043900D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00439010 E88B03FFFF              call 004293A0
:00439015 50                      push eax
:00439016 E8EDE90000              call 00447A08
:0043901B 83C408                  add esp, 00000008
:0043901E 50                      push eax
:0043901F 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00439022 E86967FFFF              call 0042F790
:00439027 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043902A 81E1FF000000            and ecx, 000000FF
:00439030 81F9FF000000            cmp ecx, 000000FF
:00439036 7502                    jne 0043903A
:00439038 EBA2                    jmp 00438FDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439036(C)
|
:0043903A 8A55FC                  mov dl, byte ptr [ebp-04]
:0043903D 52                      push edx
:0043903E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00439041 E8BE48FFFF              call 0042D904
:00439046 8D45F0                  lea eax, dword ptr [ebp-10]
:00439049 50                      push eax
:0043904A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043904D E86E0B0000              call 00439BC0
:00439052 8A4DFC                  mov cl, byte ptr [ebp-04]
:00439055 51                      push ecx
:00439056 8B4D10                  mov ecx, dword ptr [ebp+10]
:00439059 E8820B0000              call 00439BE0
:0043905E E979FFFFFF              jmp 00438FDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438FFC(C)
|
:00439063 8B4D10                  mov ecx, dword ptr [ebp+10]
:00439066 E87C34FFFF              call 0042C4E7
:0043906B 8BE5                    mov esp, ebp
:0043906D 5D                      pop ebp
:0043906E C3                      ret



* Referenced by a CALL at Addresses:
|:0043BEAD   , :0044B675   , :0044B940   , :0044B9FA   
|
:0043906F 55                      push ebp
:00439070 8BEC                    mov ebp, esp
:00439072 83EC10                  sub esp, 00000010
:00439075 53                      push ebx
:00439076 56                      push esi
:00439077 894DF8                  mov dword ptr [ebp-08], ecx
:0043907A 8B4514                  mov eax, dword ptr [ebp+14]
:0043907D 25FF000000              and eax, 000000FF
:00439082 83F813                  cmp eax, 00000013
:00439085 7E24                    jle 004390AB
:00439087 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043908A 81E1FF000000            and ecx, 000000FF
:00439090 83F915                  cmp ecx, 00000015
:00439093 0F8CE5030000            jl 0043947E
:00439099 8B5514                  mov edx, dword ptr [ebp+14]
:0043909C 81E2FF000000            and edx, 000000FF
:004390A2 83FA17                  cmp edx, 00000017
:004390A5 0F8FD3030000            jg 0043947E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439085(C)
|
:004390AB 6A00                    push 00000000
:004390AD 6A00                    push 00000000
:004390AF 8B450C                  mov eax, dword ptr [ebp+0C]
:004390B2 50                      push eax
:004390B3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004390B6 E8C61DFFFF              call 0042AE81
:004390BB 8945FC                  mov dword ptr [ebp-04], eax
:004390BE 8B4D14                  mov ecx, dword ptr [ebp+14]
:004390C1 81E1FF000000            and ecx, 000000FF
:004390C7 894DF4                  mov dword ptr [ebp-0C], ecx
:004390CA 837DF416                cmp dword ptr [ebp-0C], 00000016
:004390CE 0F87A5030000            ja 00439479
:004390D4 8B45F4                  mov eax, dword ptr [ebp-0C]
:004390D7 33D2                    xor edx, edx
:004390D9 8A90C0944300            mov dl, byte ptr [eax+004394C0]
:004390DF FF249588944300          jmp dword ptr [4*edx+00439488]
:004390E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004390E9 D1E1                    shl ecx, 1
:004390EB 894DFC                  mov dword ptr [ebp-04], ecx
:004390EE E986030000              jmp 00439479
:004390F3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004390F6 E81568FFFF              call 0042F910
:004390FB 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004390FD 68C8000000              push 000000C8
:00439102 E8AE8F0200              call 004620B5
:00439107 83C404                  add esp, 00000004
:0043910A 3BF0                    cmp esi, eax
:0043910C 7614                    jbe 00439122

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043910E 6A06                    push 00000006
:00439110 E8A08F0200              call 004620B5
:00439115 83C404                  add esp, 00000004
:00439118 8B55FC                  mov edx, dword ptr [ebp-04]
:0043911B 8D440205                lea eax, dword ptr [edx+eax+05]
:0043911F 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043910C(C)
|
:00439122 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439125 C1E102                  shl ecx, 02
:00439128 894DFC                  mov dword ptr [ebp-04], ecx
:0043912B E949030000              jmp 00439479
:00439130 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439133 E838B7FCFF              call 00404870
:00439138 3B45FC                  cmp eax, dword ptr [ebp-04]
:0043913B 730D                    jnb 0043914A
:0043913D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439140 E82BB7FCFF              call 00404870
:00439145 8945F0                  mov dword ptr [ebp-10], eax
:00439148 EB06                    jmp 00439150

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043913B(C)
|
:0043914A 8B55FC                  mov edx, dword ptr [ebp-04]
:0043914D 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439148(U)
|
:00439150 8B45F0                  mov eax, dword ptr [ebp-10]
:00439153 8945FC                  mov dword ptr [ebp-04], eax
:00439156 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439159 E812B7FCFF              call 00404870
:0043915E 2B45FC                  sub eax, dword ptr [ebp-04]
:00439161 83F80A                  cmp eax, 0000000A
:00439164 730E                    jnb 00439174
:00439166 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439169 E802B7FCFF              call 00404870
:0043916E 83E80A                  sub eax, 0000000A
:00439171 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439164(C)
|
:00439174 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439177 E8F4B6FCFF              call 00404870
:0043917C 83F80A                  cmp eax, 0000000A
:0043917F 7707                    ja 00439188
:00439181 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043917F(C)
|
:00439188 E9EC020000              jmp 00439479
:0043918D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439190 E8DBB6FCFF              call 00404870
:00439195 8945FC                  mov dword ptr [ebp-04], eax
:00439198 E9DC020000              jmp 00439479
:0043919D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004391A0 E86B67FFFF              call 0042F910
:004391A5 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004391A7 68C8000000              push 000000C8
:004391AC E8048F0200              call 004620B5
:004391B1 83C404                  add esp, 00000004
:004391B4 3BF0                    cmp esi, eax
:004391B6 7614                    jbe 004391CC

* Possible Reference to String Resource ID=00006: ""
                                  |
:004391B8 6A06                    push 00000006
:004391BA E8F68E0200              call 004620B5
:004391BF 83C404                  add esp, 00000004
:004391C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004391C5 8D540105                lea edx, dword ptr [ecx+eax+05]
:004391C9 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004391B6(C)
|
:004391CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004391CF E8CC01FFFF              call 004293A0
:004391D4 50                      push eax
:004391D5 E8A5E70000              call 0044797F
:004391DA 83C404                  add esp, 00000004
:004391DD 25FF000000              and eax, 000000FF
:004391E2 83F805                  cmp eax, 00000005
:004391E5 7509                    jne 004391F0
:004391E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004391EA C1E002                  shl eax, 02
:004391ED 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004391E5(C)
|
:004391F0 E984020000              jmp 00439479

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004391F5 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00012: ""
                                  |
:004391F7 6A0C                    push 0000000C
:004391F9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004391FC 51                      push ecx
:004391FD E85E8D0200              call 00461F60
:00439202 83C40C                  add esp, 0000000C
:00439205 8945FC                  mov dword ptr [ebp-04], eax
:00439208 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043920B E8C060FDFF              call 0040F2D0
:00439210 85C0                    test eax, eax
:00439212 7450                    je 00439264
:00439214 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439217 E8B464FFFF              call 0042F6D0
:0043921C 85C0                    test eax, eax
:0043921E 7544                    jne 00439264
:00439220 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439223 E848B6FCFF              call 00404870
:00439228 3B45FC                  cmp eax, dword ptr [ebp-04]
:0043922B 7737                    ja 00439264
:0043922D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439230 E83BB6FCFF              call 00404870
:00439235 8945FC                  mov dword ptr [ebp-04], eax
:00439238 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043923B E830B6FCFF              call 00404870
:00439240 83F80A                  cmp eax, 0000000A
:00439243 7709                    ja 0043924E
:00439245 C745FC00000000          mov [ebp-04], 00000000
:0043924C EB16                    jmp 00439264

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439243(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043924E 6A0A                    push 0000000A
:00439250 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439253 E818B6FCFF              call 00404870
:00439258 50                      push eax
:00439259 E8668D0200              call 00461FC4
:0043925E 83C408                  add esp, 00000008
:00439261 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439212(C), :0043921E(C), :0043922B(C), :0043924C(U)
|
:00439264 E910020000              jmp 00439479
:00439269 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043926C E89F66FFFF              call 0042F910
:00439271 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00439273 68C8000000              push 000000C8
:00439278 E8388E0200              call 004620B5
:0043927D 83C404                  add esp, 00000004
:00439280 3BF0                    cmp esi, eax
:00439282 7614                    jbe 00439298

* Possible Reference to String Resource ID=00006: ""
                                  |
:00439284 6A06                    push 00000006
:00439286 E82A8E0200              call 004620B5
:0043928B 83C404                  add esp, 00000004
:0043928E 8B55FC                  mov edx, dword ptr [ebp-04]
:00439291 8D440205                lea eax, dword ptr [edx+eax+05]
:00439295 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439282(C)
|
:00439298 E9DC010000              jmp 00439479
:0043929D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004392A0 E80B66FFFF              call 0042F8B0
:004392A5 8AD8                    mov bl, al
:004392A7 81E3FF000000            and ebx, 000000FF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004392AD 6A02                    push 00000002
:004392AF 6A01                    push 00000001
:004392B1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004392B4 E83612FFFF              call 0042A4EF
:004392B9 50                      push eax
:004392BA E8A18C0200              call 00461F60
:004392BF 83C40C                  add esp, 0000000C
:004392C2 8D4C031E                lea ecx, dword ptr [ebx+eax+1E]
:004392C6 D1E9                    shr ecx, 1
:004392C8 894DFC                  mov dword ptr [ebp-04], ecx
:004392CB 8B5514                  mov edx, dword ptr [ebp+14]
:004392CE 81E2FF000000            and edx, 000000FF
:004392D4 83FA0C                  cmp edx, 0000000C
:004392D7 740D                    je 004392E6
:004392D9 8B4514                  mov eax, dword ptr [ebp+14]
:004392DC 25FF000000              and eax, 000000FF
:004392E1 83F80E                  cmp eax, 0000000E
:004392E4 7523                    jne 00439309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004392D7(C)
|
:004392E6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004392E9 E8B200FFFF              call 004293A0
:004392EE 50                      push eax
:004392EF E88BE60000              call 0044797F
:004392F4 83C404                  add esp, 00000004
:004392F7 25FF000000              and eax, 000000FF
:004392FC 83F801                  cmp eax, 00000001
:004392FF 7508                    jne 00439309
:00439301 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439304 D1E1                    shl ecx, 1
:00439306 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004392E4(C), :004392FF(C)
|
:00439309 B9180A4B00              mov ecx, 004B0A18
:0043930E E8DBF00100              call 004583EE
:00439313 25FF000000              and eax, 000000FF
:00439318 83F802                  cmp eax, 00000002
:0043931B 755E                    jne 0043937B
:0043931D 8B5514                  mov edx, dword ptr [ebp+14]
:00439320 81E2FF000000            and edx, 000000FF
:00439326 83FA0C                  cmp edx, 0000000C
:00439329 740D                    je 00439338
:0043932B 8B4514                  mov eax, dword ptr [ebp+14]
:0043932E 25FF000000              and eax, 000000FF
:00439333 83F80E                  cmp eax, 0000000E
:00439336 7515                    jne 0043934D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439329(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00439338 6A03                    push 00000003

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043933A 6A02                    push 00000002
:0043933C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043933F 51                      push ecx
:00439340 E81B8C0200              call 00461F60
:00439345 83C40C                  add esp, 0000000C
:00439348 8945FC                  mov dword ptr [ebp-04], eax
:0043934B EB2E                    jmp 0043937B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439336(C)
|
:0043934D 8B5514                  mov edx, dword ptr [ebp+14]
:00439350 81E2FF000000            and edx, 000000FF
:00439356 83FA0F                  cmp edx, 0000000F
:00439359 740D                    je 00439368
:0043935B 8B4514                  mov eax, dword ptr [ebp+14]
:0043935E 25FF000000              and eax, 000000FF
:00439363 83F812                  cmp eax, 00000012
:00439366 7513                    jne 0043937B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439359(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00439368 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043936A 6A04                    push 00000004
:0043936C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043936F 51                      push ecx
:00439370 E8EB8B0200              call 00461F60
:00439375 83C40C                  add esp, 0000000C
:00439378 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043931B(C), :0043934B(U), :00439366(C)
|
:0043937B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043937E E88D65FFFF              call 0042F910
:00439383 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00439385 68C8000000              push 000000C8
:0043938A E8268D0200              call 004620B5
:0043938F 83C404                  add esp, 00000004
:00439392 3BF0                    cmp esi, eax
:00439394 7614                    jbe 004393AA

* Possible Reference to String Resource ID=00006: ""
                                  |
:00439396 6A06                    push 00000006
:00439398 E8188D0200              call 004620B5
:0043939D 83C404                  add esp, 00000004
:004393A0 8B55FC                  mov edx, dword ptr [ebp-04]
:004393A3 8D440205                lea eax, dword ptr [edx+eax+05]
:004393A7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439394(C)
|
:004393AA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004393AD E83D11FFFF              call 0042A4EF
:004393B2 50                      push eax
:004393B3 E8FD8C0200              call 004620B5
:004393B8 83C404                  add esp, 00000004
:004393BB 8BF0                    mov esi, eax
:004393BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004393C0 E82A11FFFF              call 0042A4EF
:004393C5 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004393C7 B903000000              mov ecx, 00000003
:004393CC F7F1                    div ecx
:004393CE 3BF0                    cmp esi, eax
:004393D0 7307                    jnb 004393D9
:004393D2 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004393D0(C)
|
:004393D9 E99B000000              jmp 00439479
:004393DE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004393E1 E82A65FFFF              call 0042F910
:004393E6 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004393E8 68C8000000              push 000000C8
:004393ED E8C38C0200              call 004620B5
:004393F2 83C404                  add esp, 00000004
:004393F5 3BF0                    cmp esi, eax
:004393F7 7614                    jbe 0043940D

* Possible Reference to String Resource ID=00006: ""
                                  |
:004393F9 6A06                    push 00000006
:004393FB E8B58C0200              call 004620B5
:00439400 83C404                  add esp, 00000004
:00439403 8B55FC                  mov edx, dword ptr [ebp-04]
:00439406 8D440205                lea eax, dword ptr [edx+eax+05]
:0043940A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004393F7(C)
|
:0043940D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439410 E8DA10FFFF              call 0042A4EF
:00439415 8BF0                    mov esi, eax
:00439417 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043941A E8D010FFFF              call 0042A4EF
:0043941F 3BF0                    cmp esi, eax
:00439421 7227                    jb 0043944A
:00439423 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439426 E8C410FFFF              call 0042A4EF
:0043942B 8BF0                    mov esi, eax
:0043942D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439430 E8BA10FFFF              call 0042A4EF
:00439435 2BF0                    sub esi, eax
:00439437 8BC6                    mov eax, esi
:00439439 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0043943B B905000000              mov ecx, 00000005
:00439440 F7F1                    div ecx
:00439442 8B55FC                  mov edx, dword ptr [ebp-04]
:00439445 03D0                    add edx, eax
:00439447 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439421(C)
|
:0043944A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043944D E89D10FFFF              call 0042A4EF
:00439452 50                      push eax
:00439453 E85D8C0200              call 004620B5
:00439458 83C404                  add esp, 00000004
:0043945B 8BF0                    mov esi, eax
:0043945D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439460 E88A10FFFF              call 0042A4EF
:00439465 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00439467 B903000000              mov ecx, 00000003
:0043946C F7F1                    div ecx
:0043946E 3BF0                    cmp esi, eax
:00439470 7307                    jnb 00439479
:00439472 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004390CE(C), :004390EE(U), :0043912B(U), :00439188(U), :00439198(U)
|:004391F0(U), :00439264(U), :00439298(U), :004393D9(U), :00439470(C)
|
:00439479 8B45FC                  mov eax, dword ptr [ebp-04]
:0043947C EB02                    jmp 00439480

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439093(C), :004390A5(C)
|
:0043947E 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043947C(U)
|
:00439480 5E                      pop esi
:00439481 5B                      pop ebx
:00439482 8BE5                    mov esp, ebp
:00439484 5D                      pop ebp
:00439485 C21000                  ret 0010



:00439488 30914300                DWORD 00439130
:0043948C E6904300                DWORD 004390E6
:00439490 8D914300                DWORD 0043918D
:00439494 69924300                DWORD 00439269
:00439498 9D914300                DWORD 0043919D
:0043949C 69924300                DWORD 00439269
:004394A0 F5914300                DWORD 004391F5
:004394A4 69924300                DWORD 00439269
:004394A8 9D924300                DWORD 0043929D
:004394AC F3904300                DWORD 004390F3
:004394B0 9D924300                DWORD 0043929D
:004394B4 DE934300                DWORD 004393DE
:004394B8 69924300                DWORD 00439269
:004394BC 79944300                DWORD 00439479


:004394C0 000D01020303            add byte ptr [03030201], cl
:004394C6 0405                    add al, 05
:004394C8 0505060708              add eax, 08070605
:004394CD 090A                    or dword ptr [edx], ecx
:004394CF 0A0A                    or cl, byte ptr [edx]
:004394D1 0A0A                    or cl, byte ptr [edx]
:004394D3 0B                      BYTE 0bh
:004394D4 0D                      BYTE 0dh
:004394D5 0C                      BYTE 0ch
:004394D6 0C                      BYTE 0ch


* Referenced by a CALL at Addresses:
|:00437A84   , :00437C1F   , :00437CE3   , :00437E70   , :0043998D   
|
:004394D7 55                      push ebp
:004394D8 8BEC                    mov ebp, esp
:004394DA 83EC20                  sub esp, 00000020
:004394DD 56                      push esi
:004394DE 894DE8                  mov dword ptr [ebp-18], ecx
:004394E1 8B45E8                  mov eax, dword ptr [ebp-18]
:004394E4 8B08                    mov ecx, dword ptr [eax]
:004394E6 6BC970                  imul ecx, 00000070
:004394E9 81C198224900            add ecx, 00492298
:004394EF 894DF4                  mov dword ptr [ebp-0C], ecx
:004394F2 C745FC00000000          mov [ebp-04], 00000000
:004394F9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004394FC E8CF63FFFF              call 0042F8D0
:00439501 25FF000000              and eax, 000000FF
:00439506 83F802                  cmp eax, 00000002
:00439509 7516                    jne 00439521
:0043950B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043950E E85DB3FCFF              call 00404870
:00439513 8BF0                    mov esi, eax
:00439515 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439518 E8C38FFCFF              call 004024E0
:0043951D 3BF0                    cmp esi, eax
:0043951F 7505                    jne 00439526

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439509(C)
|
:00439521 E9D3020000              jmp 004397F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043951F(C)
|
:00439526 8B550C                  mov edx, dword ptr [ebp+0C]
:00439529 81E2FF000000            and edx, 000000FF
:0043952F 81FAFF000000            cmp edx, 000000FF
:00439535 7422                    je 00439559
:00439537 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043953A 81E1FF000000            and ecx, 000000FF
:00439540 6BC924                  imul ecx, 00000024
:00439543 81C108F54A00            add ecx, 004AF508
:00439549 E88261FFFF              call 0042F6D0
:0043954E 6BC070                  imul eax, 00000070
:00439551 0598224900              add eax, 00492298
:00439556 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439535(C)
|
:00439559 8B4510                  mov eax, dword ptr [ebp+10]
:0043955C 25FF000000              and eax, 000000FF
:00439561 83F803                  cmp eax, 00000003
:00439564 0F84EF000000            je 00439659
:0043956A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043956D 81E1FF000000            and ecx, 000000FF
:00439573 894DE4                  mov dword ptr [ebp-1C], ecx
:00439576 8B55E4                  mov edx, dword ptr [ebp-1C]
:00439579 83EA21                  sub edx, 00000021
:0043957C 8955E4                  mov dword ptr [ebp-1C], edx
:0043957F 837DE404                cmp dword ptr [ebp-1C], 00000004
:00439583 0F87D0000000            ja 00439659
:00439589 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043958C FF248500984300          jmp dword ptr [4*eax+00439800]
:00439593 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439596 81E1FF000000            and ecx, 000000FF
:0043959C 6BC924                  imul ecx, 00000024
:0043959F 81C108F54A00            add ecx, 004AF508
:004395A5 E8450FFFFF              call 0042A4EF
:004395AA C1E803                  shr eax, 03
:004395AD 83C028                  add eax, 00000028
:004395B0 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004395B3 6A02                    push 00000002
:004395B5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004395B8 E8A361FFFF              call 0042F760
:004395BD 85C0                    test eax, eax
:004395BF 752F                    jne 004395F0
:004395C1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004395C4 E84763FFFF              call 0042F910
:004395C9 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004395CB 68C8000000              push 000000C8
:004395D0 E8E08A0200              call 004620B5
:004395D5 83C404                  add esp, 00000004
:004395D8 3BF0                    cmp esi, eax
:004395DA 7614                    jbe 004395F0

* Possible Reference to String Resource ID=00006: ""
                                  |
:004395DC 6A06                    push 00000006
:004395DE E8D28A0200              call 004620B5
:004395E3 83C404                  add esp, 00000004
:004395E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004395E9 8D540105                lea edx, dword ptr [ecx+eax+05]
:004395ED 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004395BF(C), :004395DA(C)
|
:004395F0 EB67                    jmp 00439659
:004395F2 8B45E8                  mov eax, dword ptr [ebp-18]
:004395F5 8B08                    mov ecx, dword ptr [eax]
:004395F7 6BC970                  imul ecx, 00000070
:004395FA 81C198224900            add ecx, 00492298
:00439600 E8DB8EFCFF              call 004024E0
:00439605 8945FC                  mov dword ptr [ebp-04], eax
:00439608 EB4F                    jmp 00439659
:0043960A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043960D 81E1FF000000            and ecx, 000000FF
:00439613 6BC924                  imul ecx, 00000024
:00439616 81C108F54A00            add ecx, 004AF508
:0043961C E8CE0EFFFF              call 0042A4EF
:00439621 C1E803                  shr eax, 03
:00439624 83C028                  add eax, 00000028
:00439627 8945FC                  mov dword ptr [ebp-04], eax
:0043962A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043962D E8DE62FFFF              call 0042F910
:00439632 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00439634 68C8000000              push 000000C8
:00439639 E8778A0200              call 004620B5
:0043963E 83C404                  add esp, 00000004
:00439641 3BF0                    cmp esi, eax
:00439643 7614                    jbe 00439659

* Possible Reference to String Resource ID=00006: ""
                                  |
:00439645 6A06                    push 00000006
:00439647 E8698A0200              call 004620B5
:0043964C 83C404                  add esp, 00000004
:0043964F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439652 8D540105                lea edx, dword ptr [ecx+eax+05]
:00439656 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439564(C), :00439583(C), :004395F0(U), :00439608(U), :00439643(C)
|
:00439659 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043965C E80FB2FCFF              call 00404870
:00439661 8B75FC                  mov esi, dword ptr [ebp-04]
:00439664 03F0                    add esi, eax
:00439666 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439669 E8728EFCFF              call 004024E0
:0043966E 3BF0                    cmp esi, eax
:00439670 7617                    jbe 00439689
:00439672 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439675 E8668EFCFF              call 004024E0
:0043967A 8BF0                    mov esi, eax
:0043967C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043967F E8ECB1FCFF              call 00404870
:00439684 2BF0                    sub esi, eax
:00439686 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439670(C)
|
:00439689 6A01                    push 00000001
:0043968B 8A4510                  mov al, byte ptr [ebp+10]
:0043968E 50                      push eax
:0043968F 8A4D08                  mov cl, byte ptr [ebp+08]
:00439692 51                      push ecx
:00439693 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00439696 E88561FFFF              call 0042F820
:0043969B 50                      push eax
:0043969C 8A550C                  mov dl, byte ptr [ebp+0C]
:0043969F 52                      push edx
:004396A0 B9A8034B00              mov ecx, 004B03A8
:004396A5 E82CD00000              call 004466D6
:004396AA B9C8E24A00              mov ecx, 004AE2C8
:004396AF E81C5BFDFF              call 0040F1D0
:004396B4 83E010                  and eax, 00000010
:004396B7 85C0                    test eax, eax
:004396B9 7538                    jne 004396F3
:004396BB C645F000                mov [ebp-10], 00
:004396BF EB08                    jmp 004396C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004396EC(U)
|
:004396C1 8A45F0                  mov al, byte ptr [ebp-10]
:004396C4 0401                    add al, 01
:004396C6 8845F0                  mov byte ptr [ebp-10], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004396BF(U)
|
:004396C9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004396CC 81E1FF000000            and ecx, 000000FF
:004396D2 83F903                  cmp ecx, 00000003
:004396D5 7D17                    jge 004396EE

* Possible Reference to String Resource ID=00014: ""
                                  |
:004396D7 6A0E                    push 0000000E
:004396D9 8B55FC                  mov edx, dword ptr [ebp-04]
:004396DC 52                      push edx
:004396DD 8B45E8                  mov eax, dword ptr [ebp-18]
:004396E0 8A4804                  mov cl, byte ptr [eax+04]
:004396E3 51                      push ecx
:004396E4 E8A2870000              call 00441E8B
:004396E9 83C40C                  add esp, 0000000C
:004396EC EBD3                    jmp 004396C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004396D5(C)
|
:004396EE E9F2000000              jmp 004397E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004396B9(C)
|
:004396F3 8B55E8                  mov edx, dword ptr [ebp-18]
:004396F6 8A4204                  mov al, byte ptr [edx+04]
:004396F9 50                      push eax
:004396FA 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004396FD 51                      push ecx
:004396FE E82D8A0000              call 00442130
:00439703 83C408                  add esp, 00000008
:00439706 E85B69FFFF              call 00430066
:0043970B 8B55E8                  mov edx, dword ptr [ebp-18]
:0043970E 33C0                    xor eax, eax
:00439710 8A4204                  mov al, byte ptr [edx+04]
:00439713 8BC8                    mov ecx, eax
:00439715 6BC924                  imul ecx, 00000024
:00439718 81C108F54A00            add ecx, 004AF508
:0043971E E8AD5BFDFF              call 0040F2D0
:00439723 85C0                    test eax, eax
:00439725 7411                    je 00439738
:00439727 33C9                    xor ecx, ecx
:00439729 8A0D1C024B00            mov cl, byte ptr [004B021C]
:0043972F 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:00439733 8955E0                  mov dword ptr [ebp-20], edx
:00439736 EB0E                    jmp 00439746

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439725(C)
|
:00439738 33C0                    xor eax, eax
:0043973A A01C024B00              mov al, byte ptr [004B021C]
:0043973F 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:00439743 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439736(U)
|
:00439746 8A55E0                  mov dl, byte ptr [ebp-20]
:00439749 8855EC                  mov byte ptr [ebp-14], dl
:0043974C 33C0                    xor eax, eax
:0043974E A03D0A4B00              mov al, byte ptr [004B0A3D]
:00439753 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:00439757 51                      push ecx
:00439758 B9F8F44A00              mov ecx, 004AF4F8
:0043975D E82EBDFEFF              call 00425490
:00439762 8B55E8                  mov edx, dword ptr [ebp-18]
:00439765 8A4204                  mov al, byte ptr [edx+04]
:00439768 50                      push eax
:00439769 668B4DEC                mov cx, word ptr [ebp-14]
:0043976D 51                      push ecx
:0043976E E8698A0000              call 004421DC
:00439773 83C408                  add esp, 00000008
:00439776 E815D4FEFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043977B 6A03                    push 00000003
:0043977D E8C2D5FEFF              call 00426D44
:00439782 83C404                  add esp, 00000004
:00439785 33D2                    xor edx, edx
:00439787 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:0043978D 8D441206                lea eax, dword ptr [edx+edx+06]
:00439791 50                      push eax
:00439792 B9F8F44A00              mov ecx, 004AF4F8
:00439797 E8F4BCFEFF              call 00425490
:0043979C 6880000000              push 00000080
:004397A1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004397A4 51                      push ecx
:004397A5 8B55E8                  mov edx, dword ptr [ebp-18]
:004397A8 8A4204                  mov al, byte ptr [edx+04]
:004397AB 50                      push eax
:004397AC 668B4DEC                mov cx, word ptr [ebp-14]
:004397B0 51                      push ecx
:004397B1 E8D68C0000              call 0044248C
:004397B6 83C410                  add esp, 00000010
:004397B9 E8D2D3FEFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004397BE 6A03                    push 00000003
:004397C0 E87FD5FEFF              call 00426D44
:004397C5 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:004397C8 6A09                    push 00000009
:004397CA 6A21                    push 00000021
:004397CC 8A55ED                  mov dl, byte ptr [ebp-13]
:004397CF 52                      push edx
:004397D0 33C0                    xor eax, eax
:004397D2 A01C024B00              mov al, byte ptr [004B021C]
:004397D7 83C006                  add eax, 00000006
:004397DA 50                      push eax
:004397DB B9A8034B00              mov ecx, 004B03A8
:004397E0 E8E1AF0000              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004396EE(U)
|
:004397E5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004397E8 E883B0FCFF              call 00404870
:004397ED 0345FC                  add eax, dword ptr [ebp-04]
:004397F0 50                      push eax
:004397F1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004397F4 E86711FFFF              call 0042A960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439521(U)
|
:004397F9 5E                      pop esi
:004397FA 8BE5                    mov esp, ebp
:004397FC 5D                      pop ebp
:004397FD C20C00                  ret 000C



:00439800 F2954300                DWORD 004395F2
:00439804 0A964300                DWORD 0043960A
:00439808 F2954300                DWORD 004395F2
:0043980C 0A964300                DWORD 0043960A
:00439810 93954300                DWORD 00439593


:00439814 55                      push ebp
:00439815 8BEC                    mov ebp, esp
:00439817 83EC24                  sub esp, 00000024
:0043981A 56                      push esi
:0043981B 894DE4                  mov dword ptr [ebp-1C], ecx
:0043981E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00439821 E8CA60FFFF              call 0042F8F0
:00439826 25FF000000              and eax, 000000FF
:0043982B 83F807                  cmp eax, 00000007
:0043982E 7417                    je 00439847
:00439830 33C0                    xor eax, eax
:00439832 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00439837 83E004                  and eax, 00000004
:0043983A 85C0                    test eax, eax
:0043983C 7509                    jne 00439847
:0043983E C745E000000000          mov [ebp-20], 00000000
:00439845 EB07                    jmp 0043984E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043982E(C), :0043983C(C)
|
:00439847 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439845(U)
|
:0043984E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00439851 894DF4                  mov dword ptr [ebp-0C], ecx
:00439854 C745F800000000          mov [ebp-08], 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043985B 68FF000000              push 000000FF
:00439860 6880070000              push 00000780
:00439865 6800960000              push 00009600
:0043986A B930DF4A00              mov ecx, 004ADF30
:0043986F E82A9DFDFF              call 0041359E
:00439874 50                      push eax
:00439875 E8CE8F0200              call 00462848
:0043987A 83C40C                  add esp, 0000000C
:0043987D 6A00                    push 00000000
:0043987F 6A01                    push 00000001
:00439881 6880000000              push 00000080
:00439886 8B55E4                  mov edx, dword ptr [ebp-1C]
:00439889 83C205                  add edx, 00000005
:0043988C 52                      push edx
:0043988D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00439890 E8D5E20000              call 00447B6A
:00439895 8845FC                  mov byte ptr [ebp-04], al
:00439898 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043989C 7420                    je 004398BE
:0043989E 6A01                    push 00000001
:004398A0 B9A8034B00              mov ecx, 004B03A8
:004398A5 E87D960000              call 00442F27
:004398AA B9A8034B00              mov ecx, 004B03A8
:004398AF E8CAAE0000              call 0044477E

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004398B4 6A02                    push 00000002
:004398B6 E835D3FEFF              call 00426BF0
:004398BB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043989C(C)
|
:004398BE 8B45FC                  mov eax, dword ptr [ebp-04]
:004398C1 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004398C6 3DFF000000              cmp eax, 000000FF
:004398CB 0F8442010000            je 00439A13
:004398D1 837DF400                cmp dword ptr [ebp-0C], 00000000
:004398D5 7414                    je 004398EB

* Possible StringData Ref from Data Obj ->"_d򤺳@[OC"
                                  |
:004398D7 680C8D4700              push 00478D0C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004398DC 6A02                    push 00000002
:004398DE E889F2FEFF              call 00428B6C
:004398E3 83C408                  add esp, 00000008
:004398E6 8945F0                  mov dword ptr [ebp-10], eax
:004398E9 EB07                    jmp 004398F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004398D5(C)
|
:004398EB C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004398E9(U)
|
:004398F2 837DF000                cmp dword ptr [ebp-10], 00000000
:004398F6 0F8415010000            je 00439A11
:004398FC C745EC00000000          mov [ebp-14], 00000000
:00439903 6A18                    push 00000018
:00439905 6A27                    push 00000027
:00439907 6A00                    push 00000000
:00439909 6A00                    push 00000000
:0043990B B9A8034B00              mov ecx, 004B03A8
:00439910 E8B1AE0000              call 004447C6
:00439915 C745E8A89F4A00          mov [ebp-18], 004A9FA8
:0043991C EB09                    jmp 00439927

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439992(U)
|
:0043991E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00439921 83C101                  add ecx, 00000001
:00439924 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043991C(U)
|
:00439927 8B55E8                  mov edx, dword ptr [ebp-18]
:0043992A 33C0                    xor eax, eax
:0043992C 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043992E 3DFF000000              cmp eax, 000000FF
:00439933 745F                    je 00439994
:00439935 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00439938 33D2                    xor edx, edx
:0043993A 8A11                    mov dl, byte ptr [ecx]
:0043993C 8BCA                    mov ecx, edx
:0043993E 6BC924                  imul ecx, 00000024
:00439941 81C108F54A00            add ecx, 004AF508
:00439947 E824AFFCFF              call 00404870
:0043994C 8BF0                    mov esi, eax
:0043994E 8B45E8                  mov eax, dword ptr [ebp-18]
:00439951 33C9                    xor ecx, ecx
:00439953 8A08                    mov cl, byte ptr [eax]
:00439955 6BC924                  imul ecx, 00000024
:00439958 81C108F54A00            add ecx, 004AF508
:0043995E E80D010000              call 00439A70
:00439963 3BF0                    cmp esi, eax
:00439965 732B                    jnb 00439992
:00439967 C745EC01000000          mov [ebp-14], 00000001
:0043996E 8A550C                  mov dl, byte ptr [ebp+0C]
:00439971 52                      push edx
:00439972 8B45E4                  mov eax, dword ptr [ebp-1C]
:00439975 8A4804                  mov cl, byte ptr [eax+04]
:00439978 51                      push ecx
:00439979 8A5508                  mov dl, byte ptr [ebp+08]
:0043997C 52                      push edx
:0043997D 8B45E8                  mov eax, dword ptr [ebp-18]
:00439980 33C9                    xor ecx, ecx
:00439982 8A08                    mov cl, byte ptr [eax]
:00439984 6BC924                  imul ecx, 00000024
:00439987 81C108F54A00            add ecx, 004AF508
:0043998D E845FBFFFF              call 004394D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439965(C)
|
:00439992 EB8A                    jmp 0043991E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439933(C)
|
:00439994 837DEC00                cmp dword ptr [ebp-14], 00000000
:00439998 7431                    je 004399CB
:0043999A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043999D E82E59FDFF              call 0040F2D0
:004399A2 85C0                    test eax, eax
:004399A4 7409                    je 004399AF

* Possible StringData Ref from Data Obj ->""
                                  |
:004399A6 C745DC288D4700          mov [ebp-24], 00478D28
:004399AD EB07                    jmp 004399B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004399A4(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:004399AF C745DC2C8D4700          mov [ebp-24], 00478D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004399AD(U)
|
:004399B6 8B55DC                  mov edx, dword ptr [ebp-24]
:004399B9 52                      push edx

* Possible StringData Ref from Data Obj ->"%sx@[O_FC"
                                  |
:004399BA 68308D4700              push 00478D30
:004399BF 6A00                    push 00000000
:004399C1 E8A6F1FEFF              call 00428B6C
:004399C6 83C40C                  add esp, 0000000C
:004399C9 EB35                    jmp 00439A00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439998(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004399CB 6A07                    push 00000007
:004399CD B9800D4B00              mov ecx, 004B0D80
:004399D2 E8D2810200              call 00461BA9

* Possible StringData Ref from Data Obj ->"Sn_C"
                                  |
:004399D7 68488D4700              push 00478D48
:004399DC 6A00                    push 00000000
:004399DE E889F1FEFF              call 00428B6C
:004399E3 83C408                  add esp, 00000008
:004399E6 6A00                    push 00000000
:004399E8 B9A8034B00              mov ecx, 004B03A8
:004399ED E835950000              call 00442F27
:004399F2 B9A8034B00              mov ecx, 004B03A8
:004399F7 E882AD0000              call 0044477E
:004399FC 33C0                    xor eax, eax
:004399FE EB63                    jmp 00439A63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004399C9(U)
|
:00439A00 B9800D4B00              mov ecx, 004B0D80
:00439A05 E877810200              call 00461B81
:00439A0A C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004398F6(C)
|
:00439A11 EB31                    jmp 00439A44

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004398CB(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00439A13 6A07                    push 00000007
:00439A15 B9800D4B00              mov ecx, 004B0D80
:00439A1A E88A810200              call 00461BA9

* Possible StringData Ref from Data Obj ->"d򤺨Sv賡C"
                                  |
:00439A1F 685C8D4700              push 00478D5C
:00439A24 6A00                    push 00000000
:00439A26 E841F1FEFF              call 00428B6C
:00439A2B 83C408                  add esp, 00000008
:00439A2E 6A00                    push 00000000
:00439A30 B9A8034B00              mov ecx, 004B03A8
:00439A35 E8ED940000              call 00442F27
:00439A3A B9A8034B00              mov ecx, 004B03A8
:00439A3F E83AAD0000              call 0044477E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439A11(U)
|
:00439A44 837DF400                cmp dword ptr [ebp-0C], 00000000
:00439A48 7416                    je 00439A60
:00439A4A 6A00                    push 00000000
:00439A4C B9A8034B00              mov ecx, 004B03A8
:00439A51 E8D1940000              call 00442F27
:00439A56 B9A8034B00              mov ecx, 004B03A8
:00439A5B E81EAD0000              call 0044477E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439A48(C)
|
:00439A60 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004399FE(U)
|
:00439A63 5E                      pop esi
:00439A64 8BE5                    mov esp, ebp
:00439A66 5D                      pop ebp
:00439A67 C20800                  ret 0008


:00439A6A CC                      int 03
:00439A6B CC                      int 03
:00439A6C CC                      int 03
:00439A6D CC                      int 03
:00439A6E CC                      int 03
:00439A6F CC                      int 03

* Referenced by a CALL at Addresses:
|:004302FD   , :0043035D   , :0043094C   , :00430962   , :00430976   
|:0043098C   , :00432125   , :00433FA1   , :0043995E   , :004491FC   
|:0044B5DF   , :00457673   , :0045A41C   , :0045A447   
|
:00439A70 55                      push ebp
:00439A71 8BEC                    mov ebp, esp
:00439A73 51                      push ecx
:00439A74 894DFC                  mov dword ptr [ebp-04], ecx
:00439A77 8B45FC                  mov eax, dword ptr [ebp-04]
:00439A7A 8B08                    mov ecx, dword ptr [eax]
:00439A7C 6BC970                  imul ecx, 00000070
:00439A7F 81C198224900            add ecx, 00492298
:00439A85 E8568AFCFF              call 004024E0
:00439A8A 8BE5                    mov esp, ebp
:00439A8C 5D                      pop ebp
:00439A8D C3                      ret


:00439A8E CC                      int 03
:00439A8F CC                      int 03

* Referenced by a CALL at Address:
|:004319AC   
|
:00439A90 55                      push ebp
:00439A91 8BEC                    mov ebp, esp
:00439A93 51                      push ecx
:00439A94 894DFC                  mov dword ptr [ebp-04], ecx
:00439A97 8B450C                  mov eax, dword ptr [ebp+0C]
:00439A9A 50                      push eax
:00439A9B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439A9E 8A5101                  mov dl, byte ptr [ecx+01]
:00439AA1 52                      push edx
:00439AA2 8B4508                  mov eax, dword ptr [ebp+08]
:00439AA5 8A08                    mov cl, byte ptr [eax]
:00439AA7 51                      push ecx
:00439AA8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439AAB E87F2AFFFF              call 0042C52F
:00439AB0 8BE5                    mov esp, ebp
:00439AB2 5D                      pop ebp
:00439AB3 C20800                  ret 0008


:00439AB6 CC                      int 03
:00439AB7 CC                      int 03
:00439AB8 CC                      int 03
:00439AB9 CC                      int 03
:00439ABA CC                      int 03
:00439ABB CC                      int 03
:00439ABC CC                      int 03
:00439ABD CC                      int 03
:00439ABE CC                      int 03
:00439ABF CC                      int 03

* Referenced by a CALL at Addresses:
|:004073D4   , :0042BFD5   , :004311C8   , :00446D26   , :0044A033   
|:0044DBC4   , :00452FEC   , :00457020   , :004570E6   
|
:00439AC0 55                      push ebp
:00439AC1 8BEC                    mov ebp, esp
:00439AC3 51                      push ecx
:00439AC4 894DFC                  mov dword ptr [ebp-04], ecx
:00439AC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00439ACA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439ACD 894808                  mov dword ptr [eax+08], ecx
:00439AD0 8BE5                    mov esp, ebp
:00439AD2 5D                      pop ebp
:00439AD3 C20400                  ret 0004


:00439AD6 CC                      int 03
:00439AD7 CC                      int 03
:00439AD8 CC                      int 03
:00439AD9 CC                      int 03
:00439ADA CC                      int 03
:00439ADB CC                      int 03
:00439ADC CC                      int 03
:00439ADD CC                      int 03
:00439ADE CC                      int 03
:00439ADF CC                      int 03

* Referenced by a CALL at Address:
|:004313F3   
|
:00439AE0 55                      push ebp
:00439AE1 8BEC                    mov ebp, esp
:00439AE3 51                      push ecx
:00439AE4 894DFC                  mov dword ptr [ebp-04], ecx
:00439AE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00439AEA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439AED 894824                  mov dword ptr [eax+24], ecx
:00439AF0 8BE5                    mov esp, ebp
:00439AF2 5D                      pop ebp
:00439AF3 C20400                  ret 0004


:00439AF6 CC                      int 03
:00439AF7 CC                      int 03
:00439AF8 CC                      int 03
:00439AF9 CC                      int 03
:00439AFA CC                      int 03
:00439AFB CC                      int 03
:00439AFC CC                      int 03
:00439AFD CC                      int 03
:00439AFE CC                      int 03
:00439AFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00431B65   , :00455E1D   , :00455EAF   , :00455F27   , :004561A5   
|
:00439B00 55                      push ebp
:00439B01 8BEC                    mov ebp, esp
:00439B03 51                      push ecx
:00439B04 894DFC                  mov dword ptr [ebp-04], ecx
:00439B07 8B45FC                  mov eax, dword ptr [ebp-04]
:00439B0A 8A400A                  mov al, byte ptr [eax+0A]
:00439B0D 8BE5                    mov esp, ebp
:00439B0F 5D                      pop ebp
:00439B10 C3                      ret


:00439B11 CC                      int 03
:00439B12 CC                      int 03
:00439B13 CC                      int 03
:00439B14 CC                      int 03
:00439B15 CC                      int 03
:00439B16 CC                      int 03
:00439B17 CC                      int 03
:00439B18 CC                      int 03
:00439B19 CC                      int 03
:00439B1A CC                      int 03
:00439B1B CC                      int 03
:00439B1C CC                      int 03
:00439B1D CC                      int 03
:00439B1E CC                      int 03
:00439B1F CC                      int 03

* Referenced by a CALL at Addresses:
|:0043213F   , :0045A48F   , :0045A4BA   
|
:00439B20 55                      push ebp
:00439B21 8BEC                    mov ebp, esp
:00439B23 51                      push ecx
:00439B24 894DFC                  mov dword ptr [ebp-04], ecx
:00439B27 8B45FC                  mov eax, dword ptr [ebp-04]
:00439B2A 8B08                    mov ecx, dword ptr [eax]
:00439B2C 6BC970                  imul ecx, 00000070
:00439B2F 81C198224900            add ecx, 00492298
:00439B35 E8D789FCFF              call 00402511
:00439B3A 8BE5                    mov esp, ebp
:00439B3C 5D                      pop ebp
:00439B3D C3                      ret


:00439B3E CC                      int 03
:00439B3F CC                      int 03

* Referenced by a CALL at Addresses:
|:004116EE   , :00411A55   , :00433CB1   , :004346BD   , :004348F9   
|:00436704   , :00449FCC   , :0044D82B   , :0044DC52   , :0045792B   
|
:00439B40 55                      push ebp
:00439B41 8BEC                    mov ebp, esp
:00439B43 51                      push ecx
:00439B44 894DFC                  mov dword ptr [ebp-04], ecx
:00439B47 8B45FC                  mov eax, dword ptr [ebp-04]
:00439B4A 8A4D08                  mov cl, byte ptr [ebp+08]
:00439B4D 884818                  mov byte ptr [eax+18], cl
:00439B50 8BE5                    mov esp, ebp
:00439B52 5D                      pop ebp
:00439B53 C20400                  ret 0004


:00439B56 CC                      int 03
:00439B57 CC                      int 03
:00439B58 CC                      int 03
:00439B59 CC                      int 03
:00439B5A CC                      int 03
:00439B5B CC                      int 03
:00439B5C CC                      int 03
:00439B5D CC                      int 03
:00439B5E CC                      int 03
:00439B5F CC                      int 03

* Referenced by a CALL at Addresses:
|:00434E68   , :00434E7B   , :00436013   , :004362E7   , :004367D4   
|:00437041   , :0043731F   , :0043BB34   , :0043CF1A   , :00458C1F   
|:004598C7   , :00459C9F   
|
:00439B60 55                      push ebp
:00439B61 8BEC                    mov ebp, esp
:00439B63 51                      push ecx
:00439B64 894DFC                  mov dword ptr [ebp-04], ecx
:00439B67 8B45FC                  mov eax, dword ptr [ebp-04]
:00439B6A 8A481C                  mov cl, byte ptr [eax+1C]
:00439B6D 0A4D08                  or cl, byte ptr [ebp+08]
:00439B70 8B55FC                  mov edx, dword ptr [ebp-04]
:00439B73 884A1C                  mov byte ptr [edx+1C], cl
:00439B76 8BE5                    mov esp, ebp
:00439B78 5D                      pop ebp
:00439B79 C20400                  ret 0004


:00439B7C CC                      int 03
:00439B7D CC                      int 03
:00439B7E CC                      int 03
:00439B7F CC                      int 03

* Referenced by a CALL at Addresses:
|:0043594B   , :00436098   , :0043636C   , :004366C7   , :00436A51   
|:00436CE6   , :00436FC6   , :004372A4   , :0043780D   , :00437AB0   
|:00437D1A   , :00437E9C   , :0043801E   , :0043841A   , :0043880A   
|:004389BC   , :00438C72   , :00438DFC   , :0043C556   
|
:00439B80 55                      push ebp
:00439B81 8BEC                    mov ebp, esp
:00439B83 51                      push ecx
:00439B84 894DFC                  mov dword ptr [ebp-04], ecx
:00439B87 8B45FC                  mov eax, dword ptr [ebp-04]
:00439B8A 8A4034                  mov al, byte ptr [eax+34]
:00439B8D 8BE5                    mov esp, ebp
:00439B8F 5D                      pop ebp
:00439B90 C3                      ret


:00439B91 CC                      int 03
:00439B92 CC                      int 03
:00439B93 CC                      int 03
:00439B94 CC                      int 03
:00439B95 CC                      int 03
:00439B96 CC                      int 03
:00439B97 CC                      int 03
:00439B98 CC                      int 03
:00439B99 CC                      int 03
:00439B9A CC                      int 03
:00439B9B CC                      int 03
:00439B9C CC                      int 03
:00439B9D CC                      int 03
:00439B9E CC                      int 03
:00439B9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405291   , :0040565D   , :0040C3A0   , :0040C921   , :0040E1E1   
|:00416978   , :004169BA   , :004169FD   , :00416A40   , :0043893D   
|:0043895A   , :00438977   , :0045A359   
|
:00439BA0 55                      push ebp
:00439BA1 8BEC                    mov ebp, esp
:00439BA3 51                      push ecx
:00439BA4 894DFC                  mov dword ptr [ebp-04], ecx
:00439BA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00439BAA 8A4D08                  mov cl, byte ptr [ebp+08]
:00439BAD 884804                  mov byte ptr [eax+04], cl
:00439BB0 8BE5                    mov esp, ebp
:00439BB2 5D                      pop ebp
:00439BB3 C20400                  ret 0004


:00439BB6 CC                      int 03
:00439BB7 CC                      int 03
:00439BB8 CC                      int 03
:00439BB9 CC                      int 03
:00439BBA CC                      int 03
:00439BBB CC                      int 03
:00439BBC CC                      int 03
:00439BBD CC                      int 03
:00439BBE CC                      int 03
:00439BBF CC                      int 03

* Referenced by a CALL at Addresses:
|:0043904D   , :004470F8   , :00447177   
|
:00439BC0 55                      push ebp
:00439BC1 8BEC                    mov ebp, esp
:00439BC3 51                      push ecx
:00439BC4 894DFC                  mov dword ptr [ebp-04], ecx
:00439BC7 8B4508                  mov eax, dword ptr [ebp+08]
:00439BCA 50                      push eax
:00439BCB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439BCE 83C105                  add ecx, 00000005
:00439BD1 E8BA5BFFFF              call 0042F790
:00439BD6 8BE5                    mov esp, ebp
:00439BD8 5D                      pop ebp
:00439BD9 C20400                  ret 0004


:00439BDC CC                      int 03
:00439BDD CC                      int 03
:00439BDE CC                      int 03
:00439BDF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040DD0E   , :00439059   , :0043E1D0   , :0043E1E9   , :0043E259   
|:0043E272   , :0043E29D   , :0043E2B6   , :0043E30D   , :0043E326   
|:0043E351   , :0043E36A   , :0043E3D4   , :0043E3ED   , :0043E460   
|:0043E479   , :0043E4A4   , :0043E4BD   , :0043E516   , :0043E52F   
|:0043E55A   , :0043E573   , :0043E5AD   , :0043E5C6   , :0043E5E8   
|:0043E601   , :00447183   , :00448C38   , :0044DF03   , :004555EF   
|:00455ABF   , :00458A90   , :00458C01   , :00458DE6   , :00461AFD   
|
:00439BE0 55                      push ebp
:00439BE1 8BEC                    mov ebp, esp
:00439BE3 51                      push ecx
:00439BE4 894DFC                  mov dword ptr [ebp-04], ecx
:00439BE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00439BEA 8A4D08                  mov cl, byte ptr [ebp+08]
:00439BED 88480E                  mov byte ptr [eax+0E], cl
:00439BF0 8BE5                    mov esp, ebp
:00439BF2 5D                      pop ebp
:00439BF3 C20400                  ret 0004


:00439BF6 CC                      int 03
:00439BF7 CC                      int 03
:00439BF8 CC                      int 03
:00439BF9 CC                      int 03
:00439BFA CC                      int 03
:00439BFB CC                      int 03
:00439BFC CC                      int 03
:00439BFD CC                      int 03
:00439BFE CC                      int 03
:00439BFF CC                      int 03
:00439C00 55                      push ebp
:00439C01 8BEC                    mov ebp, esp
:00439C03 E807000000              call 00439C0F
:00439C08 E811000000              call 00439C1E
:00439C0D 5D                      pop ebp
:00439C0E C3                      ret



* Referenced by a CALL at Address:
|:00439C03   
|
:00439C0F 55                      push ebp
:00439C10 8BEC                    mov ebp, esp
:00439C12 B930024B00              mov ecx, 004B0230
:00439C17 E894DBFCFF              call 004077B0
:00439C1C 5D                      pop ebp
:00439C1D C3                      ret



* Referenced by a CALL at Address:
|:00439C08   
|
:00439C1E 55                      push ebp
:00439C1F 8BEC                    mov ebp, esp
:00439C21 68309C4300              push 00439C30
:00439C26 E845380300              call 0046D470
:00439C2B 83C404                  add esp, 00000004
:00439C2E 5D                      pop ebp
:00439C2F C3                      ret


:00439C30 55                      push ebp
:00439C31 8BEC                    mov ebp, esp
:00439C33 B930024B00              mov ecx, 004B0230
:00439C38 E863C0FEFF              call 00425CA0
:00439C3D 5D                      pop ebp
:00439C3E C3                      ret


:00439C3F 55                      push ebp
:00439C40 8BEC                    mov ebp, esp
:00439C42 E802000000              call 00439C49
:00439C47 5D                      pop ebp
:00439C48 C3                      ret



* Referenced by a CALL at Address:
|:00439C42   
|
:00439C49 55                      push ebp
:00439C4A 8BEC                    mov ebp, esp
:00439C4C B990034B00              mov ecx, 004B0390
:00439C51 E85ADBFCFF              call 004077B0
:00439C56 B92C024B00              mov ecx, 004B022C
:00439C5B E850DBFCFF              call 004077B0
:00439C60 5D                      pop ebp
:00439C61 C3                      ret



* Referenced by a CALL at Addresses:
|:0042E116   , :0042E138   , :0042E6F6   , :0042E7E1   , :0042ED6F   
|:0042EE5C   , :00439EA2   , :0043ACAC   , :0043ADED   , :0043B140   
|:0043B35E   , :0044036A   , :004406B7   , :00441382   
|
:00439C62 55                      push ebp
:00439C63 8BEC                    mov ebp, esp
:00439C65 83EC18                  sub esp, 00000018
:00439C68 56                      push esi
:00439C69 B9A8034B00              mov ecx, 004B03A8
:00439C6E E80D910000              call 00442D80
:00439C73 8BF0                    mov esi, eax
:00439C75 037508                  add esi, dword ptr [ebp+08]
:00439C78 B9A8034B00              mov ecx, 004B03A8
:00439C7D E80F910000              call 00442D91
:00439C82 03450C                  add eax, dword ptr [ebp+0C]
:00439C85 33C9                    xor ecx, ecx
:00439C87 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:00439C8D 0FAFC1                  imul eax, ecx
:00439C90 6BC003                  imul eax, 00000003
:00439C93 03F0                    add esi, eax
:00439C95 8975F4                  mov dword ptr [ebp-0C], esi
:00439C98 6A00                    push 00000000
:00439C9A B930DF4A00              mov ecx, 004ADF30
:00439C9F E8FA98FDFF              call 0041359E
:00439CA4 0345F4                  add eax, dword ptr [ebp-0C]
:00439CA7 8945F0                  mov dword ptr [ebp-10], eax
:00439CAA 33D2                    xor edx, edx
:00439CAC 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00439CB2 6BD203                  imul edx, 00000003
:00439CB5 83EA03                  sub edx, 00000003
:00439CB8 8955FC                  mov dword ptr [ebp-04], edx
:00439CBB 8B4508                  mov eax, dword ptr [ebp+08]
:00439CBE C1E004                  shl eax, 04
:00439CC1 894508                  mov dword ptr [ebp+08], eax
:00439CC4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439CC7 C1E104                  shl ecx, 04
:00439CCA 894D0C                  mov dword ptr [ebp+0C], ecx
:00439CCD 8B5508                  mov edx, dword ptr [ebp+08]
:00439CD0 895508                  mov dword ptr [ebp+08], edx
:00439CD3 8B450C                  mov eax, dword ptr [ebp+0C]
:00439CD6 83C028                  add eax, 00000028
:00439CD9 89450C                  mov dword ptr [ebp+0C], eax
:00439CDC B9A8034B00              mov ecx, 004B03A8
:00439CE1 E8CACB0000              call 004468B0
:00439CE6 50                      push eax
:00439CE7 B9A8034B00              mov ecx, 004B03A8
:00439CEC E898CB0000              call 00446889
:00439CF1 50                      push eax
:00439CF2 6A20                    push 00000020
:00439CF4 6A00                    push 00000000
:00439CF6 E8A5110300              call 0046AEA0
:00439CFB 83C410                  add esp, 00000010
:00439CFE E82F91FDFF              call 00412E32
:00439D03 C745F800000000          mov [ebp-08], 00000000
:00439D0A EB1B                    jmp 00439D27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439D97(U)
|
:00439D0C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439D0F 83C101                  add ecx, 00000001
:00439D12 894DF8                  mov dword ptr [ebp-08], ecx
:00439D15 8B55F0                  mov edx, dword ptr [ebp-10]
:00439D18 0355FC                  add edx, dword ptr [ebp-04]
:00439D1B 8955F0                  mov dword ptr [ebp-10], edx
:00439D1E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00439D21 0345FC                  add eax, dword ptr [ebp-04]
:00439D24 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439D0A(U)
|
:00439D27 837DF803                cmp dword ptr [ebp-08], 00000003
:00439D2B 736F                    jnb 00439D9C
:00439D2D C745E800000000          mov [ebp-18], 00000000
:00439D34 EB1B                    jmp 00439D51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439D95(U)
|
:00439D36 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00439D39 83C101                  add ecx, 00000001
:00439D3C 894DE8                  mov dword ptr [ebp-18], ecx
:00439D3F 8B55F0                  mov edx, dword ptr [ebp-10]
:00439D42 83C201                  add edx, 00000001
:00439D45 8955F0                  mov dword ptr [ebp-10], edx
:00439D48 8B45F4                  mov eax, dword ptr [ebp-0C]
:00439D4B 83C001                  add eax, 00000001
:00439D4E 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439D34(U)
|
:00439D51 837DE803                cmp dword ptr [ebp-18], 00000003
:00439D55 7340                    jnb 00439D97
:00439D57 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439D5A C1E108                  shl ecx, 08
:00439D5D 51                      push ecx
:00439D5E B908DA4A00              mov ecx, 004ADA08
:00439D63 E83698FDFF              call 0041359E
:00439D68 8945EC                  mov dword ptr [ebp-14], eax
:00439D6B 6A00                    push 00000000
:00439D6D 8B55EC                  mov edx, dword ptr [ebp-14]
:00439D70 52                      push edx

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00439D71 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00439D73 6A10                    push 00000010
:00439D75 8B45F8                  mov eax, dword ptr [ebp-08]
:00439D78 C1E004                  shl eax, 04
:00439D7B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439D7E 03C8                    add ecx, eax
:00439D80 51                      push ecx
:00439D81 8B55E8                  mov edx, dword ptr [ebp-18]
:00439D84 C1E204                  shl edx, 04
:00439D87 8B4508                  mov eax, dword ptr [ebp+08]
:00439D8A 03C2                    add eax, edx
:00439D8C 50                      push eax
:00439D8D E8808E0000              call 00442C12
:00439D92 83C418                  add esp, 00000018
:00439D95 EB9F                    jmp 00439D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439D55(C)
|
:00439D97 E970FFFFFF              jmp 00439D0C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439D2B(C)
|
:00439D9C E8AC90FDFF              call 00412E4D
:00439DA1 B9A8034B00              mov ecx, 004B03A8
:00439DA6 E805CB0000              call 004468B0
:00439DAB 50                      push eax
:00439DAC B9A8034B00              mov ecx, 004B03A8
:00439DB1 E8D3CA0000              call 00446889
:00439DB6 50                      push eax
:00439DB7 6A28                    push 00000028
:00439DB9 6A00                    push 00000000
:00439DBB E8E0100300              call 0046AEA0
:00439DC0 83C410                  add esp, 00000010
:00439DC3 5E                      pop esi
:00439DC4 8BE5                    mov esp, ebp
:00439DC6 5D                      pop ebp
:00439DC7 C3                      ret



* Referenced by a CALL at Address:
|:0043C9D9   
|
:00439DC8 55                      push ebp
:00439DC9 8BEC                    mov ebp, esp
:00439DCB 83EC0C                  sub esp, 0000000C
:00439DCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439DD1 6BC924                  imul ecx, 00000024
:00439DD4 81C108F54A00            add ecx, 004AF508
:00439DDA E8F158FFFF              call 0042F6D0
:00439DDF 8BC8                    mov ecx, eax
:00439DE1 6BC970                  imul ecx, 00000070
:00439DE4 81C198224900            add ecx, 00492298
:00439DEA E85C89FCFF              call 0040274B
:00439DEF 8845F8                  mov byte ptr [ebp-08], al
:00439DF2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439DF5 81E1FF000000            and ecx, 000000FF
:00439DFB 6BC933                  imul ecx, 00000033
:00439DFE 81C1C8EF4800            add ecx, 0048EFC8
:00439E04 E887A8FCFF              call 00404690
:00439E09 8845FC                  mov byte ptr [ebp-04], al
:00439E0C 8B45FC                  mov eax, dword ptr [ebp-04]
:00439E0F 25FF000000              and eax, 000000FF
:00439E14 8945F4                  mov dword ptr [ebp-0C], eax
:00439E17 837DF405                cmp dword ptr [ebp-0C], 00000005
:00439E1B 7722                    ja 00439E3F
:00439E1D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439E20 FF248D459E4300          jmp dword ptr [4*ecx+00439E45]
:00439E27 B009                    mov al, 09
:00439E29 EB16                    jmp 00439E41
:00439E2B B00A                    mov al, 0A
:00439E2D EB12                    jmp 00439E41
:00439E2F 32C0                    xor al, al
:00439E31 EB0E                    jmp 00439E41
:00439E33 B003                    mov al, 03
:00439E35 EB0A                    jmp 00439E41
:00439E37 B004                    mov al, 04
:00439E39 EB06                    jmp 00439E41
:00439E3B B005                    mov al, 05
:00439E3D EB02                    jmp 00439E41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439E1B(C)
|
:00439E3F B008                    mov al, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439E29(U), :00439E2D(U), :00439E31(U), :00439E35(U), :00439E39(U)
|:00439E3D(U)
|
:00439E41 8BE5                    mov esp, ebp
:00439E43 5D                      pop ebp
:00439E44 C3                      ret



:00439E45 279E4300                DWORD 00439E27
:00439E49 2B9E4300                DWORD 00439E2B
:00439E4D 2F9E4300                DWORD 00439E2F
:00439E51 339E4300                DWORD 00439E33
:00439E55 379E4300                DWORD 00439E37
:00439E59 3B9E4300                DWORD 00439E3B



* Referenced by a CALL at Addresses:
|:0043A0B9   , :0043A259   , :0043ACFF   , :0043AE57   , :0044051A   
|:004406E7   
|
:00439E5D 55                      push ebp
:00439E5E 8BEC                    mov ebp, esp
:00439E60 83EC18                  sub esp, 00000018
:00439E63 894DE8                  mov dword ptr [ebp-18], ecx
:00439E66 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00439E69 E842D9FCFF              call 004077B0
:00439E6E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439E71 E82AF5FEFF              call 004293A0
:00439E76 668B00                  mov ax, word ptr [eax]
:00439E79 50                      push eax
:00439E7A 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00439E7D 51                      push ecx
:00439E7E E83A8D0000              call 00442BBD
:00439E83 83C408                  add esp, 00000008
:00439E86 50                      push eax
:00439E87 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00439E8A E80159FFFF              call 0042F790
:00439E8F 8B55FD                  mov edx, dword ptr [ebp-03]
:00439E92 81E2FF000000            and edx, 000000FF
:00439E98 52                      push edx
:00439E99 8B45FC                  mov eax, dword ptr [ebp-04]
:00439E9C 25FF000000              and eax, 000000FF
:00439EA1 50                      push eax
:00439EA2 E8BBFDFFFF              call 00439C62
:00439EA7 83C408                  add esp, 00000008
:00439EAA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439EAD 81E1FF000000            and ecx, 000000FF
:00439EB3 C1E104                  shl ecx, 04
:00439EB6 894DF4                  mov dword ptr [ebp-0C], ecx
:00439EB9 8B55FD                  mov edx, dword ptr [ebp-03]
:00439EBC 81E2FF000000            and edx, 000000FF
:00439EC2 83C202                  add edx, 00000002
:00439EC5 C1E204                  shl edx, 04
:00439EC8 83C208                  add edx, 00000008
:00439ECB 8955F0                  mov dword ptr [ebp-10], edx
:00439ECE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439ED1 E84A59FFFF              call 0042F820
:00439ED6 25FF000000              and eax, 000000FF
:00439EDB 8945F8                  mov dword ptr [ebp-08], eax
:00439EDE 8B45F8                  mov eax, dword ptr [ebp-08]
:00439EE1 50                      push eax
:00439EE2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00439EE5 51                      push ecx
:00439EE6 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439EE9 52                      push edx
:00439EEA E88C39FFFF              call 0042D87B
:00439EEF 83C40C                  add esp, 0000000C
:00439EF2 8BE5                    mov esp, ebp
:00439EF4 5D                      pop ebp
:00439EF5 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0043B57E   
|
:00439EF8 55                      push ebp
:00439EF9 8BEC                    mov ebp, esp
:00439EFB 83EC0C                  sub esp, 0000000C
:00439EFE 894DF4                  mov dword ptr [ebp-0C], ecx
:00439F01 8B45F4                  mov eax, dword ptr [ebp-0C]
:00439F04 83C048                  add eax, 00000048
:00439F07 8945FC                  mov dword ptr [ebp-04], eax
:00439F0A 68006B0100              push 00016B00
:00439F0F B930DA4A00              mov ecx, 004ADA30
:00439F14 E88596FDFF              call 0041359E
:00439F19 50                      push eax
:00439F1A 6A40                    push 00000040
:00439F1C 6A40                    push 00000040
:00439F1E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439F21 51                      push ecx
:00439F22 8B5508                  mov edx, dword ptr [ebp+08]
:00439F25 52                      push edx
:00439F26 E8A88D0000              call 00442CD3
:00439F2B 83C414                  add esp, 00000014
:00439F2E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00439F31 33C9                    xor ecx, ecx
:00439F33 8A4816                  mov cl, byte ptr [eax+16]
:00439F36 83F908                  cmp ecx, 00000008
:00439F39 741A                    je 00439F55
:00439F3B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439F3E 33C0                    xor eax, eax
:00439F40 8A4216                  mov al, byte ptr [edx+16]
:00439F43 83F809                  cmp eax, 00000009
:00439F46 740D                    je 00439F55
:00439F48 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439F4B 33D2                    xor edx, edx
:00439F4D 8A5116                  mov dl, byte ptr [ecx+16]
:00439F50 83FA0A                  cmp edx, 0000000A
:00439F53 7513                    jne 00439F68

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439F39(C), :00439F46(C)
|
:00439F55 6A00                    push 00000000
:00439F57 8B45F4                  mov eax, dword ptr [ebp-0C]
:00439F5A 33C9                    xor ecx, ecx
:00439F5C 8A4816                  mov cl, byte ptr [eax+16]
:00439F5F 51                      push ecx
:00439F60 E8E4040000              call 0043A449
:00439F65 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439F53(C)
|
:00439F68 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439F6B 33C0                    xor eax, eax
:00439F6D 8A4211                  mov al, byte ptr [edx+11]
:00439F70 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439F73 33D2                    xor edx, edx
:00439F75 8A540146                mov dl, byte ptr [ecx+eax+46]
:00439F79 52                      push edx
:00439F7A 8B45F4                  mov eax, dword ptr [ebp-0C]
:00439F7D 33C9                    xor ecx, ecx
:00439F7F 8A4810                  mov cl, byte ptr [eax+10]
:00439F82 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439F85 33C0                    xor eax, eax
:00439F87 8A440A46                mov al, byte ptr [edx+ecx+46]
:00439F8B 50                      push eax
:00439F8C E8EF0B0000              call 0043AB80
:00439F91 83C408                  add esp, 00000008
:00439F94 C745F800000000          mov [ebp-08], 00000000
:00439F9B EB09                    jmp 00439FA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A43E(U)
|
:00439F9D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439FA0 83C101                  add ecx, 00000001
:00439FA3 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439F9B(U)
|
:00439FA6 837DF804                cmp dword ptr [ebp-08], 00000004
:00439FAA 0F8393040000            jnb 0043A443
:00439FB0 33D2                    xor edx, edx
:00439FB2 8A153D0A4B00            mov dl, byte ptr [004B0A3D]
:00439FB8 83C203                  add edx, 00000003
:00439FBB 52                      push edx
:00439FBC B9F8F44A00              mov ecx, 004AF4F8
:00439FC1 E8CAB4FEFF              call 00425490
:00439FC6 E8678EFDFF              call 00412E32
:00439FCB 6A00                    push 00000000
:00439FCD 68006B0100              push 00016B00
:00439FD2 B930DA4A00              mov ecx, 004ADA30
:00439FD7 E8C295FDFF              call 0041359E
:00439FDC 50                      push eax
:00439FDD 6A40                    push 00000040
:00439FDF 6A40                    push 00000040
:00439FE1 8B450C                  mov eax, dword ptr [ebp+0C]
:00439FE4 50                      push eax
:00439FE5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439FE8 51                      push ecx
:00439FE9 E8248C0000              call 00442C12
:00439FEE 83C418                  add esp, 00000018
:00439FF1 837DF802                cmp dword ptr [ebp-08], 00000002
:00439FF5 0F8283000000            jb 0043A07E
:00439FFB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439FFE 33C0                    xor eax, eax
:0043A000 8A4216                  mov al, byte ptr [edx+16]
:0043A003 83F808                  cmp eax, 00000008
:0043A006 741A                    je 0043A022
:0043A008 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A00B 33D2                    xor edx, edx
:0043A00D 8A5116                  mov dl, byte ptr [ecx+16]
:0043A010 83FA09                  cmp edx, 00000009
:0043A013 740D                    je 0043A022
:0043A015 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A018 33C9                    xor ecx, ecx
:0043A01A 8A4816                  mov cl, byte ptr [eax+16]
:0043A01D 83F90A                  cmp ecx, 0000000A
:0043A020 755C                    jne 0043A07E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A006(C), :0043A013(C)
|
:0043A022 8B55F8                  mov edx, dword ptr [ebp-08]
:0043A025 83EA02                  sub edx, 00000002
:0043A028 52                      push edx
:0043A029 6A00                    push 00000000
:0043A02B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A02E 33C9                    xor ecx, ecx
:0043A030 8A4811                  mov cl, byte ptr [eax+11]
:0043A033 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A036 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043A03A 50                      push eax
:0043A03B E884120000              call 0043B2C4
:0043A040 83C40C                  add esp, 0000000C
:0043A043 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A046 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043A048 B903000000              mov ecx, 00000003
:0043A04D F7F1                    div ecx
:0043A04F 83FA02                  cmp edx, 00000002
:0043A052 752A                    jne 0043A07E
:0043A054 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A057 837A3400                cmp dword ptr [edx+34], 00000000
:0043A05B 7415                    je 0043A072
:0043A05D 6A01                    push 00000001
:0043A05F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A062 33C9                    xor ecx, ecx
:0043A064 8A4816                  mov cl, byte ptr [eax+16]
:0043A067 51                      push ecx
:0043A068 E8DC030000              call 0043A449
:0043A06D 83C408                  add esp, 00000008
:0043A070 EB0C                    jmp 0043A07E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A05B(C)
|
:0043A072 6A22                    push 00000022
:0043A074 B9800D4B00              mov ecx, 004B0D80
:0043A079 E82B7B0200              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439FF5(C), :0043A020(C), :0043A052(C), :0043A070(U)
|
:0043A07E 837DF803                cmp dword ptr [ebp-08], 00000003
:0043A082 7323                    jnb 0043A0A7
:0043A084 8B55F8                  mov edx, dword ptr [ebp-08]
:0043A087 52                      push edx
:0043A088 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A08B 33C9                    xor ecx, ecx
:0043A08D 8A4810                  mov cl, byte ptr [eax+10]
:0043A090 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A093 33C0                    xor eax, eax
:0043A095 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043A099 50                      push eax
:0043A09A E828100000              call 0043B0C7
:0043A09F 83C408                  add esp, 00000008
:0043A0A2 E9FB000000              jmp 0043A1A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A082(C)
|
:0043A0A7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A0AA 33D2                    xor edx, edx
:0043A0AC 8A5110                  mov dl, byte ptr [ecx+10]
:0043A0AF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A0B2 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043A0B5 51                      push ecx
:0043A0B6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A0B9 E89FFDFFFF              call 00439E5D
:0043A0BE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A0C1 33C0                    xor eax, eax
:0043A0C3 8A4210                  mov al, byte ptr [edx+10]
:0043A0C6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A0C9 33D2                    xor edx, edx
:0043A0CB 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043A0CF 8BCA                    mov ecx, edx
:0043A0D1 6BC924                  imul ecx, 00000024
:0043A0D4 81C108F54A00            add ecx, 004AF508
:0043A0DA E8C1F2FEFF              call 004293A0
:0043A0DF 50                      push eax
:0043A0E0 E89AD80000              call 0044797F
:0043A0E5 83C404                  add esp, 00000004
:0043A0E8 25FF000000              and eax, 000000FF
:0043A0ED 83F80D                  cmp eax, 0000000D
:0043A0F0 753A                    jne 0043A12C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A0F2 6A04                    push 00000004
:0043A0F4 6800120100              push 00011200
:0043A0F9 B940DF4A00              mov ecx, 004ADF40
:0043A0FE E89B94FDFF              call 0041359E
:0043A103 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043A109 69C900090000            imul ecx, 00000900
:0043A10F 03C1                    add eax, ecx
:0043A111 50                      push eax
:0043A112 6A30                    push 00000030
:0043A114 6A30                    push 00000030
:0043A116 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A119 83C208                  add edx, 00000008
:0043A11C 52                      push edx
:0043A11D 8B4508                  mov eax, dword ptr [ebp+08]
:0043A120 83C008                  add eax, 00000008
:0043A123 50                      push eax
:0043A124 E8E98A0000              call 00442C12
:0043A129 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A0F0(C)
|
:0043A12C B9180A4B00              mov ecx, 004B0A18
:0043A131 E8B8E20100              call 004583EE
:0043A136 25FF000000              and eax, 000000FF
:0043A13B 83F802                  cmp eax, 00000002
:0043A13E 7414                    je 0043A154
:0043A140 B9180A4B00              mov ecx, 004B0A18
:0043A145 E8A4E20100              call 004583EE
:0043A14A 25FF000000              and eax, 000000FF
:0043A14F 83F803                  cmp eax, 00000003
:0043A152 754E                    jne 0043A1A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A13E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A154 6A04                    push 00000004
:0043A156 B9180A4B00              mov ecx, 004B0A18
:0043A15B E8D05BFFFF              call 0042FD30
:0043A160 F7D8                    neg eax
:0043A162 1BC0                    sbb eax, eax
:0043A164 2500120000              and eax, 00001200
:0043A169 0500EE0000              add eax, 0000EE00
:0043A16E 50                      push eax
:0043A16F B940DF4A00              mov ecx, 004ADF40
:0043A174 E82594FDFF              call 0041359E
:0043A179 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043A17F 69C900090000            imul ecx, 00000900
:0043A185 03C1                    add eax, ecx
:0043A187 50                      push eax
:0043A188 6A30                    push 00000030
:0043A18A 6A30                    push 00000030
:0043A18C 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A18F 83C208                  add edx, 00000008
:0043A192 52                      push edx
:0043A193 8B4508                  mov eax, dword ptr [ebp+08]
:0043A196 83C008                  add eax, 00000008
:0043A199 50                      push eax
:0043A19A E8738A0000              call 00442C12
:0043A19F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A0A2(U), :0043A152(C)
|
:0043A1A2 E8A68CFDFF              call 00412E4D
:0043A1A7 E8E4C9FEFF              call 00426B90
:0043A1AC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A1AF 33D2                    xor edx, edx
:0043A1B1 8A5116                  mov dl, byte ptr [ecx+16]
:0043A1B4 83FA08                  cmp edx, 00000008
:0043A1B7 751B                    jne 0043A1D4
:0043A1B9 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A1BC 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043A1BE B903000000              mov ecx, 00000003
:0043A1C3 F7F1                    div ecx
:0043A1C5 83FA02                  cmp edx, 00000002
:0043A1C8 750A                    jne 0043A1D4

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043A1CA 6A06                    push 00000006
:0043A1CC E873CBFEFF              call 00426D44
:0043A1D1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A1B7(C), :0043A1C8(C)
|
:0043A1D4 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A1D7 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043A1D9 B903000000              mov ecx, 00000003
:0043A1DE F7F1                    div ecx
:0043A1E0 83FA02                  cmp edx, 00000002
:0043A1E3 0F8555020000            jne 0043A43E
:0043A1E9 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A1EC 33C0                    xor eax, eax
:0043A1EE 8A4216                  mov al, byte ptr [edx+16]
:0043A1F1 83F808                  cmp eax, 00000008
:0043A1F4 0F8444020000            je 0043A43E
:0043A1FA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A1FD 33D2                    xor edx, edx
:0043A1FF 8A5116                  mov dl, byte ptr [ecx+16]
:0043A202 83FA09                  cmp edx, 00000009
:0043A205 0F8433020000            je 0043A43E
:0043A20B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A20E 33C9                    xor ecx, ecx
:0043A210 8A4816                  mov cl, byte ptr [eax+16]
:0043A213 83F90A                  cmp ecx, 0000000A
:0043A216 0F8422020000            je 0043A43E
:0043A21C E8118CFDFF              call 00412E32
:0043A221 6A00                    push 00000000
:0043A223 68006B0100              push 00016B00
:0043A228 B930DA4A00              mov ecx, 004ADA30
:0043A22D E86C93FDFF              call 0041359E
:0043A232 50                      push eax
:0043A233 6A40                    push 00000040
:0043A235 6A40                    push 00000040
:0043A237 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A23A 52                      push edx
:0043A23B 8B4508                  mov eax, dword ptr [ebp+08]
:0043A23E 50                      push eax
:0043A23F E8CE890000              call 00442C12
:0043A244 83C418                  add esp, 00000018
:0043A247 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A24A 33D2                    xor edx, edx
:0043A24C 8A5110                  mov dl, byte ptr [ecx+10]
:0043A24F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A252 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043A255 51                      push ecx
:0043A256 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A259 E8FFFBFFFF              call 00439E5D
:0043A25E 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A261 33C0                    xor eax, eax
:0043A263 8A4210                  mov al, byte ptr [edx+10]
:0043A266 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A269 33D2                    xor edx, edx
:0043A26B 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043A26F 8BCA                    mov ecx, edx
:0043A271 6BC924                  imul ecx, 00000024
:0043A274 81C108F54A00            add ecx, 004AF508
:0043A27A E821F1FEFF              call 004293A0
:0043A27F 50                      push eax
:0043A280 E8FAD60000              call 0044797F
:0043A285 83C404                  add esp, 00000004
:0043A288 25FF000000              and eax, 000000FF
:0043A28D 83F80D                  cmp eax, 0000000D
:0043A290 753A                    jne 0043A2CC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A292 6A04                    push 00000004
:0043A294 6800120100              push 00011200
:0043A299 B940DF4A00              mov ecx, 004ADF40
:0043A29E E8FB92FDFF              call 0041359E
:0043A2A3 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043A2A9 69C900090000            imul ecx, 00000900
:0043A2AF 03C1                    add eax, ecx
:0043A2B1 50                      push eax
:0043A2B2 6A30                    push 00000030
:0043A2B4 6A30                    push 00000030
:0043A2B6 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A2B9 83C208                  add edx, 00000008
:0043A2BC 52                      push edx
:0043A2BD 8B4508                  mov eax, dword ptr [ebp+08]
:0043A2C0 83C008                  add eax, 00000008
:0043A2C3 50                      push eax
:0043A2C4 E849890000              call 00442C12
:0043A2C9 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A290(C)
|
:0043A2CC B9180A4B00              mov ecx, 004B0A18
:0043A2D1 E818E10100              call 004583EE
:0043A2D6 25FF000000              and eax, 000000FF
:0043A2DB 83F802                  cmp eax, 00000002
:0043A2DE 7414                    je 0043A2F4
:0043A2E0 B9180A4B00              mov ecx, 004B0A18
:0043A2E5 E804E10100              call 004583EE
:0043A2EA 25FF000000              and eax, 000000FF
:0043A2EF 83F803                  cmp eax, 00000003
:0043A2F2 754E                    jne 0043A342

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A2DE(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A2F4 6A04                    push 00000004
:0043A2F6 B9180A4B00              mov ecx, 004B0A18
:0043A2FB E8305AFFFF              call 0042FD30
:0043A300 F7D8                    neg eax
:0043A302 1BC0                    sbb eax, eax
:0043A304 2500120000              and eax, 00001200
:0043A309 0500EE0000              add eax, 0000EE00
:0043A30E 50                      push eax
:0043A30F B940DF4A00              mov ecx, 004ADF40
:0043A314 E88592FDFF              call 0041359E
:0043A319 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043A31F 69C900090000            imul ecx, 00000900
:0043A325 03C1                    add eax, ecx
:0043A327 50                      push eax
:0043A328 6A30                    push 00000030
:0043A32A 6A30                    push 00000030
:0043A32C 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A32F 83C208                  add edx, 00000008
:0043A332 52                      push edx
:0043A333 8B4508                  mov eax, dword ptr [ebp+08]
:0043A336 83C008                  add eax, 00000008
:0043A339 50                      push eax
:0043A33A E8D3880000              call 00442C12
:0043A33F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A2F2(C)
|
:0043A342 E8068BFDFF              call 00412E4D
:0043A347 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A34A 33D2                    xor edx, edx
:0043A34C 8A5110                  mov dl, byte ptr [ecx+10]
:0043A34F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A352 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043A355 E89659FFFF              call 0042FCF0
:0043A35A 25FF000000              and eax, 000000FF
:0043A35F 50                      push eax
:0043A360 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A363 33D2                    xor edx, edx
:0043A365 8A5116                  mov dl, byte ptr [ecx+16]
:0043A368 52                      push edx
:0043A369 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A36C 33C9                    xor ecx, ecx
:0043A36E 8A4811                  mov cl, byte ptr [eax+11]
:0043A371 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A374 33C0                    xor eax, eax
:0043A376 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043A37A 50                      push eax
:0043A37B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A37E 33D2                    xor edx, edx
:0043A380 8A5110                  mov dl, byte ptr [ecx+10]
:0043A383 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A386 33C9                    xor ecx, ecx
:0043A388 8A4C1046                mov cl, byte ptr [eax+edx+46]
:0043A38C 51                      push ecx
:0043A38D E80C020000              call 0043A59E
:0043A392 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043A395 6A06                    push 00000006
:0043A397 E8DFC7FEFF              call 00426B7B
:0043A39C 83C404                  add esp, 00000004
:0043A39F E88E8AFDFF              call 00412E32
:0043A3A4 6A00                    push 00000000
:0043A3A6 6A00                    push 00000000
:0043A3A8 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A3AB 33C0                    xor eax, eax
:0043A3AD 8A4211                  mov al, byte ptr [edx+11]
:0043A3B0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A3B3 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043A3B7 52                      push edx
:0043A3B8 E8070F0000              call 0043B2C4
:0043A3BD 83C40C                  add esp, 0000000C
:0043A3C0 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A3C3 83783400                cmp dword ptr [eax+34], 00000000
:0043A3C7 7415                    je 0043A3DE
:0043A3C9 6A01                    push 00000001
:0043A3CB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A3CE 33D2                    xor edx, edx
:0043A3D0 8A5116                  mov dl, byte ptr [ecx+16]
:0043A3D3 52                      push edx
:0043A3D4 E870000000              call 0043A449
:0043A3D9 83C408                  add esp, 00000008
:0043A3DC EB0C                    jmp 0043A3EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A3C7(C)
|
:0043A3DE 6A22                    push 00000022
:0043A3E0 B9800D4B00              mov ecx, 004B0D80
:0043A3E5 E8BF770200              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A3DC(U)
|
:0043A3EA E85E8AFDFF              call 00412E4D
:0043A3EF E89CC7FEFF              call 00426B90

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043A3F4 6A06                    push 00000006
:0043A3F6 E849C9FEFF              call 00426D44
:0043A3FB 83C404                  add esp, 00000004
:0043A3FE 6A01                    push 00000001
:0043A400 6A00                    push 00000000
:0043A402 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A405 33C9                    xor ecx, ecx
:0043A407 8A4811                  mov cl, byte ptr [eax+11]
:0043A40A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043A40D 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043A411 50                      push eax
:0043A412 E8AD0E0000              call 0043B2C4
:0043A417 83C40C                  add esp, 0000000C
:0043A41A 68006B0100              push 00016B00
:0043A41F B930DA4A00              mov ecx, 004ADA30
:0043A424 E87591FDFF              call 0041359E
:0043A429 50                      push eax
:0043A42A 6A40                    push 00000040
:0043A42C 6A40                    push 00000040
:0043A42E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A431 51                      push ecx
:0043A432 8B5508                  mov edx, dword ptr [ebp+08]
:0043A435 52                      push edx
:0043A436 E898880000              call 00442CD3
:0043A43B 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A1E3(C), :0043A1F4(C), :0043A205(C), :0043A216(C)
|
:0043A43E E95AFBFFFF              jmp 00439F9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439FAA(C)
|
:0043A443 8BE5                    mov esp, ebp
:0043A445 5D                      pop ebp
:0043A446 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00439F60   , :0043A068   , :0043A3D4   , :0043A747   , :0043CD81   
|:0043D0AB   , :0043D0F5   
|
:0043A449 55                      push ebp
:0043A44A 8BEC                    mov ebp, esp
:0043A44C 83EC08                  sub esp, 00000008
:0043A44F 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0043A453 756D                    jne 0043A4C2
:0043A455 8B4508                  mov eax, dword ptr [ebp+08]
:0043A458 8945FC                  mov dword ptr [ebp-04], eax
:0043A45B 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0043A45F 775C                    ja 0043A4BD
:0043A461 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A464 FF248D46A54300          jmp dword ptr [4*ecx+0043A546]
:0043A46B 6A19                    push 00000019
:0043A46D B9800D4B00              mov ecx, 004B0D80
:0043A472 E832770200              call 00461BA9
:0043A477 EB44                    jmp 0043A4BD
:0043A479 6A1A                    push 0000001A
:0043A47B B9800D4B00              mov ecx, 004B0D80
:0043A480 E824770200              call 00461BA9
:0043A485 EB36                    jmp 0043A4BD
:0043A487 6A1B                    push 0000001B
:0043A489 B9800D4B00              mov ecx, 004B0D80
:0043A48E E816770200              call 00461BA9
:0043A493 EB28                    jmp 0043A4BD
:0043A495 6A1C                    push 0000001C
:0043A497 B9800D4B00              mov ecx, 004B0D80
:0043A49C E808770200              call 00461BA9
:0043A4A1 EB1A                    jmp 0043A4BD
:0043A4A3 6A1D                    push 0000001D
:0043A4A5 B9800D4B00              mov ecx, 004B0D80
:0043A4AA E8FA760200              call 00461BA9
:0043A4AF EB0C                    jmp 0043A4BD
:0043A4B1 6A1E                    push 0000001E
:0043A4B3 B9800D4B00              mov ecx, 004B0D80
:0043A4B8 E8EC760200              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A45F(C), :0043A477(U), :0043A485(U), :0043A493(U), :0043A4A1(U)
|:0043A4AF(U)
|
:0043A4BD E980000000              jmp 0043A542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A453(C)
|
:0043A4C2 B9800D4B00              mov ecx, 004B0D80
:0043A4C7 E8B5760200              call 00461B81
:0043A4CC 8B5508                  mov edx, dword ptr [ebp+08]
:0043A4CF 8955F8                  mov dword ptr [ebp-08], edx
:0043A4D2 837DF80A                cmp dword ptr [ebp-08], 0000000A
:0043A4D6 776A                    ja 0043A542
:0043A4D8 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A4DB FF248572A54300          jmp dword ptr [4*eax+0043A572]
:0043A4E2 6A26                    push 00000026
:0043A4E4 B9800D4B00              mov ecx, 004B0D80
:0043A4E9 E8BB760200              call 00461BA9
:0043A4EE EB52                    jmp 0043A542
:0043A4F0 6A28                    push 00000028
:0043A4F2 B9800D4B00              mov ecx, 004B0D80
:0043A4F7 E8AD760200              call 00461BA9
:0043A4FC EB44                    jmp 0043A542
:0043A4FE 6A24                    push 00000024
:0043A500 B9800D4B00              mov ecx, 004B0D80
:0043A505 E89F760200              call 00461BA9
:0043A50A EB36                    jmp 0043A542
:0043A50C 6A23                    push 00000023
:0043A50E B9800D4B00              mov ecx, 004B0D80
:0043A513 E891760200              call 00461BA9
:0043A518 EB28                    jmp 0043A542
:0043A51A 6A29                    push 00000029
:0043A51C B9800D4B00              mov ecx, 004B0D80
:0043A521 E883760200              call 00461BA9
:0043A526 EB1A                    jmp 0043A542
:0043A528 6A2A                    push 0000002A
:0043A52A B9800D4B00              mov ecx, 004B0D80
:0043A52F E875760200              call 00461BA9
:0043A534 EB0C                    jmp 0043A542
:0043A536 6A2B                    push 0000002B
:0043A538 B9800D4B00              mov ecx, 004B0D80
:0043A53D E867760200              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A4BD(U), :0043A4D6(C), :0043A4EE(U), :0043A4FC(U), :0043A50A(U)
|:0043A518(U), :0043A526(U), :0043A534(U)
|
:0043A542 8BE5                    mov esp, ebp
:0043A544 5D                      pop ebp
:0043A545 C3                      ret



:0043A546 87A44300                DWORD 0043A487
:0043A54A 87A44300                DWORD 0043A487
:0043A54E 87A44300                DWORD 0043A487
:0043A552 95A44300                DWORD 0043A495
:0043A556 A3A44300                DWORD 0043A4A3
:0043A55A B1A44300                DWORD 0043A4B1
:0043A55E BDA44300                DWORD 0043A4BD
:0043A562 BDA44300                DWORD 0043A4BD
:0043A566 6BA44300                DWORD 0043A46B
:0043A56A 6BA44300                DWORD 0043A46B
:0043A56E 79A44300                DWORD 0043A479
:0043A572 FEA44300                DWORD 0043A4FE
:0043A576 0CA54300                DWORD 0043A50C
:0043A57A 0CA54300                DWORD 0043A50C
:0043A57E 1AA54300                DWORD 0043A51A
:0043A582 28A54300                DWORD 0043A528
:0043A586 36A54300                DWORD 0043A536
:0043A58A 42A54300                DWORD 0043A542
:0043A58E 42A54300                DWORD 0043A542
:0043A592 E2A44300                DWORD 0043A4E2
:0043A596 E2A44300                DWORD 0043A4E2
:0043A59A F0A44300                DWORD 0043A4F0



* Referenced by a CALL at Address:
|:0043A38D   
|
:0043A59E 55                      push ebp
:0043A59F 8BEC                    mov ebp, esp
:0043A5A1 83EC38                  sub esp, 00000038
:0043A5A4 56                      push esi
:0043A5A5 8B4514                  mov eax, dword ptr [ebp+14]
:0043A5A8 50                      push eax
:0043A5A9 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043A5AC 51                      push ecx
:0043A5AD E80B040000              call 0043A9BD
:0043A5B2 83C408                  add esp, 00000008
:0043A5B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A5B8 6BC924                  imul ecx, 00000024
:0043A5BB 81C108F54A00            add ecx, 004AF508
:0043A5C1 E8DAEDFEFF              call 004293A0
:0043A5C6 668B10                  mov dx, word ptr [eax]
:0043A5C9 668955F4                mov word ptr [ebp-0C], dx
:0043A5CD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A5D0 6BC924                  imul ecx, 00000024
:0043A5D3 81C108F54A00            add ecx, 004AF508
:0043A5D9 E8C2EDFEFF              call 004293A0
:0043A5DE 668B00                  mov ax, word ptr [eax]
:0043A5E1 668945E0                mov word ptr [ebp-20], ax
:0043A5E5 837D1401                cmp dword ptr [ebp+14], 00000001
:0043A5E9 7509                    jne 0043A5F4
:0043A5EB C745CC01000000          mov [ebp-34], 00000001
:0043A5F2 EB0D                    jmp 0043A601

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A5E9(C)
|
:0043A5F4 33C9                    xor ecx, ecx
:0043A5F6 837D1403                cmp dword ptr [ebp+14], 00000003
:0043A5FA 0F95C1                  setne cl
:0043A5FD 49                      dec ecx
:0043A5FE 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A5F2(U)
|
:0043A601 8B55CC                  mov edx, dword ptr [ebp-34]
:0043A604 8955E4                  mov dword ptr [ebp-1C], edx
:0043A607 837D1402                cmp dword ptr [ebp+14], 00000002
:0043A60B 7509                    jne 0043A616
:0043A60D C745C801000000          mov [ebp-38], 00000001
:0043A614 EB0D                    jmp 0043A623

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A60B(C)
|
:0043A616 8B4514                  mov eax, dword ptr [ebp+14]
:0043A619 F7D8                    neg eax
:0043A61B 1BC0                    sbb eax, eax
:0043A61D F7D8                    neg eax
:0043A61F 48                      dec eax
:0043A620 8945C8                  mov dword ptr [ebp-38], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A614(U)
|
:0043A623 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0043A626 894DF8                  mov dword ptr [ebp-08], ecx
:0043A629 8B75F4                  mov esi, dword ptr [ebp-0C]
:0043A62C 81E6FF000000            and esi, 000000FF
:0043A632 6BF603                  imul esi, 00000003
:0043A635 B9A8034B00              mov ecx, 004B03A8
:0043A63A E841870000              call 00442D80
:0043A63F 2BF0                    sub esi, eax
:0043A641 0375E4                  add esi, dword ptr [ebp-1C]
:0043A644 C1E604                  shl esi, 04
:0043A647 8975FC                  mov dword ptr [ebp-04], esi
:0043A64A 8B75F5                  mov esi, dword ptr [ebp-0B]
:0043A64D 81E6FF000000            and esi, 000000FF
:0043A653 6BF603                  imul esi, 00000003
:0043A656 83C602                  add esi, 00000002
:0043A659 B9A8034B00              mov ecx, 004B03A8
:0043A65E E82E870000              call 00442D91
:0043A663 2BF0                    sub esi, eax
:0043A665 0375F8                  add esi, dword ptr [ebp-08]
:0043A668 C1E604                  shl esi, 04
:0043A66B 83C608                  add esi, 00000008
:0043A66E 8975DC                  mov dword ptr [ebp-24], esi
:0043A671 8B75E0                  mov esi, dword ptr [ebp-20]
:0043A674 81E6FF000000            and esi, 000000FF
:0043A67A 6BF603                  imul esi, 00000003
:0043A67D B9A8034B00              mov ecx, 004B03A8
:0043A682 E8F9860000              call 00442D80
:0043A687 2BF0                    sub esi, eax
:0043A689 2B75E4                  sub esi, dword ptr [ebp-1C]
:0043A68C C1E604                  shl esi, 04
:0043A68F 8975EC                  mov dword ptr [ebp-14], esi
:0043A692 8B75E1                  mov esi, dword ptr [ebp-1F]
:0043A695 81E6FF000000            and esi, 000000FF
:0043A69B 6BF603                  imul esi, 00000003
:0043A69E 83C602                  add esi, 00000002
:0043A6A1 B9A8034B00              mov ecx, 004B03A8
:0043A6A6 E8E6860000              call 00442D91
:0043A6AB 2BF0                    sub esi, eax
:0043A6AD 2B75F8                  sub esi, dword ptr [ebp-08]
:0043A6B0 C1E604                  shl esi, 04
:0043A6B3 83C608                  add esi, 00000008
:0043A6B6 8975D4                  mov dword ptr [ebp-2C], esi

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A6B9 6A08                    push 00000008
:0043A6BB E8F5790200              call 004620B5
:0043A6C0 83C404                  add esp, 00000004
:0043A6C3 8BF0                    mov esi, eax
:0043A6C5 C1EE02                  shr esi, 02
:0043A6C8 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A6CB 6A08                    push 00000008
:0043A6CD E8E3790200              call 004620B5
:0043A6D2 83C404                  add esp, 00000004
:0043A6D5 0FAFF0                  imul esi, eax
:0043A6D8 8975F0                  mov dword ptr [ebp-10], esi

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A6DB 6A08                    push 00000008
:0043A6DD E8D3790200              call 004620B5
:0043A6E2 83C404                  add esp, 00000004
:0043A6E5 8BF0                    mov esi, eax
:0043A6E7 C1EE02                  shr esi, 02
:0043A6EA 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A6ED 6A08                    push 00000008
:0043A6EF E8C1790200              call 004620B5
:0043A6F4 83C404                  add esp, 00000004
:0043A6F7 0FAFF0                  imul esi, eax
:0043A6FA 8975D8                  mov dword ptr [ebp-28], esi

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A6FD 6A08                    push 00000008
:0043A6FF E8B1790200              call 004620B5
:0043A704 83C404                  add esp, 00000004
:0043A707 8BF0                    mov esi, eax
:0043A709 C1EE02                  shr esi, 02
:0043A70C 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A70F 6A08                    push 00000008
:0043A711 E89F790200              call 004620B5
:0043A716 83C404                  add esp, 00000004
:0043A719 0FAFF0                  imul esi, eax
:0043A71C 8975E8                  mov dword ptr [ebp-18], esi

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A71F 6A08                    push 00000008
:0043A721 E88F790200              call 004620B5
:0043A726 83C404                  add esp, 00000004
:0043A729 8BF0                    mov esi, eax
:0043A72B C1EE02                  shr esi, 02
:0043A72E 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0043A731 6A08                    push 00000008
:0043A733 E87D790200              call 004620B5
:0043A738 83C404                  add esp, 00000004
:0043A73B 0FAFF0                  imul esi, eax
:0043A73E 8975D0                  mov dword ptr [ebp-30], esi
:0043A741 6A00                    push 00000000
:0043A743 8B5510                  mov edx, dword ptr [ebp+10]
:0043A746 52                      push edx
:0043A747 E8FDFCFFFF              call 0043A449
:0043A74C 83C408                  add esp, 00000008
:0043A74F 8B4510                  mov eax, dword ptr [ebp+10]
:0043A752 50                      push eax
:0043A753 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043A756 034DD0                  add ecx, dword ptr [ebp-30]
:0043A759 51                      push ecx
:0043A75A 8B55EC                  mov edx, dword ptr [ebp-14]
:0043A75D 0355E8                  add edx, dword ptr [ebp-18]
:0043A760 52                      push edx
:0043A761 8B45DC                  mov eax, dword ptr [ebp-24]
:0043A764 0345D8                  add eax, dword ptr [ebp-28]
:0043A767 50                      push eax
:0043A768 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A76B 034DF0                  add ecx, dword ptr [ebp-10]
:0043A76E 51                      push ecx
:0043A76F E808000000              call 0043A77C
:0043A774 83C414                  add esp, 00000014
:0043A777 5E                      pop esi
:0043A778 8BE5                    mov esp, ebp
:0043A77A 5D                      pop ebp
:0043A77B C3                      ret



* Referenced by a CALL at Address:
|:0043A76F   
|
:0043A77C 55                      push ebp
:0043A77D 8BEC                    mov ebp, esp
:0043A77F 83EC24                  sub esp, 00000024
:0043A782 8B4510                  mov eax, dword ptr [ebp+10]
:0043A785 2B4508                  sub eax, dword ptr [ebp+08]
:0043A788 8945E8                  mov dword ptr [ebp-18], eax
:0043A78B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043A78E 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:0043A791 894DE4                  mov dword ptr [ebp-1C], ecx
:0043A794 6800300000              push 00003000
:0043A799 B930DA4A00              mov ecx, 004ADA30
:0043A79E E8FB8DFDFF              call 0041359E
:0043A7A3 8945EC                  mov dword ptr [ebp-14], eax
:0043A7A6 8B55E8                  mov edx, dword ptr [ebp-18]
:0043A7A9 0FAF55E8                imul edx, dword ptr [ebp-18]
:0043A7AD 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043A7B0 0FAF45E4                imul eax, dword ptr [ebp-1C]
:0043A7B4 3BD0                    cmp edx, eax
:0043A7B6 0F8E01010000            jle 0043A8BD
:0043A7BC 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043A7BF 6BC064                  imul eax, 00000064
:0043A7C2 99                      cdq
:0043A7C3 F77DE8                  idiv [ebp-18]
:0043A7C6 8945F4                  mov dword ptr [ebp-0C], eax
:0043A7C9 33C9                    xor ecx, ecx
:0043A7CB 837DE800                cmp dword ptr [ebp-18], 00000000
:0043A7CF 0F9EC1                  setle cl
:0043A7D2 49                      dec ecx
:0043A7D3 83E110                  and ecx, 00000010
:0043A7D6 83C1F8                  add ecx, FFFFFFF8
:0043A7D9 894DF0                  mov dword ptr [ebp-10], ecx
:0043A7DC C745E000000000          mov [ebp-20], 00000000
:0043A7E3 EB09                    jmp 0043A7EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A8B3(U)
|
:0043A7E5 8B55E0                  mov edx, dword ptr [ebp-20]
:0043A7E8 0355F0                  add edx, dword ptr [ebp-10]
:0043A7EB 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A7E3(U)
|
:0043A7EE 837DF000                cmp dword ptr [ebp-10], 00000000
:0043A7F2 7E0D                    jle 0043A801
:0043A7F4 8B45E0                  mov eax, dword ptr [ebp-20]
:0043A7F7 3B45E8                  cmp eax, dword ptr [ebp-18]
:0043A7FA 7E05                    jle 0043A801
:0043A7FC E9B7000000              jmp 0043A8B8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A7F2(C), :0043A7FA(C)
|
:0043A801 837DF000                cmp dword ptr [ebp-10], 00000000
:0043A805 7D0D                    jge 0043A814
:0043A807 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043A80A 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:0043A80D 7D05                    jge 0043A814
:0043A80F E9A4000000              jmp 0043A8B8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A805(C), :0043A80D(C)
|
:0043A814 6A01                    push 00000001
:0043A816 B9F8F44A00              mov ecx, 004AF4F8
:0043A81B E870ACFEFF              call 00425490
:0043A820 E80D86FDFF              call 00412E32
:0043A825 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A828 0FAF45E0                imul eax, dword ptr [ebp-20]
:0043A82C 99                      cdq
:0043A82D B964000000              mov ecx, 00000064
:0043A832 F7F9                    idiv ecx
:0043A834 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A837 03D0                    add edx, eax
:0043A839 8955F8                  mov dword ptr [ebp-08], edx
:0043A83C 6800E70100              push 0001E700
:0043A841 B930DA4A00              mov ecx, 004ADA30
:0043A846 E8538DFDFF              call 0041359E
:0043A84B 50                      push eax
:0043A84C 6A30                    push 00000030
:0043A84E 6A30                    push 00000030
:0043A850 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A853 50                      push eax
:0043A854 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A857 034DE0                  add ecx, dword ptr [ebp-20]
:0043A85A 51                      push ecx
:0043A85B E873840000              call 00442CD3
:0043A860 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A863 6A04                    push 00000004
:0043A865 8B55EC                  mov edx, dword ptr [ebp-14]
:0043A868 52                      push edx
:0043A869 6A30                    push 00000030
:0043A86B 6A30                    push 00000030
:0043A86D 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A870 50                      push eax
:0043A871 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A874 034DE0                  add ecx, dword ptr [ebp-20]
:0043A877 51                      push ecx
:0043A878 E895830000              call 00442C12
:0043A87D 83C418                  add esp, 00000018
:0043A880 E8C885FDFF              call 00412E4D
:0043A885 E806C3FEFF              call 00426B90
:0043A88A 6A00                    push 00000000
:0043A88C 6800E70100              push 0001E700
:0043A891 B930DA4A00              mov ecx, 004ADA30
:0043A896 E8038DFDFF              call 0041359E
:0043A89B 50                      push eax
:0043A89C 6A30                    push 00000030
:0043A89E 6A30                    push 00000030
:0043A8A0 8B55F8                  mov edx, dword ptr [ebp-08]
:0043A8A3 52                      push edx
:0043A8A4 8B4508                  mov eax, dword ptr [ebp+08]
:0043A8A7 0345E0                  add eax, dword ptr [ebp-20]
:0043A8AA 50                      push eax
:0043A8AB E862830000              call 00442C12
:0043A8B0 83C418                  add esp, 00000018
:0043A8B3 E92DFFFFFF              jmp 0043A7E5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A7FC(U), :0043A80F(U)
|
:0043A8B8 E9FC000000              jmp 0043A9B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A7B6(C)
|
:0043A8BD 8B45E8                  mov eax, dword ptr [ebp-18]
:0043A8C0 6BC064                  imul eax, 00000064
:0043A8C3 99                      cdq
:0043A8C4 F77DE4                  idiv [ebp-1C]
:0043A8C7 8945F4                  mov dword ptr [ebp-0C], eax
:0043A8CA 33C9                    xor ecx, ecx
:0043A8CC 837DE400                cmp dword ptr [ebp-1C], 00000000
:0043A8D0 0F9EC1                  setle cl
:0043A8D3 49                      dec ecx
:0043A8D4 83E110                  and ecx, 00000010
:0043A8D7 83C1F8                  add ecx, FFFFFFF8
:0043A8DA 894DF0                  mov dword ptr [ebp-10], ecx
:0043A8DD C745DC00000000          mov [ebp-24], 00000000
:0043A8E4 EB09                    jmp 0043A8EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A9B4(U)
|
:0043A8E6 8B55DC                  mov edx, dword ptr [ebp-24]
:0043A8E9 0355F0                  add edx, dword ptr [ebp-10]
:0043A8EC 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A8E4(U)
|
:0043A8EF 837DF000                cmp dword ptr [ebp-10], 00000000
:0043A8F3 7E0D                    jle 0043A902
:0043A8F5 8B45DC                  mov eax, dword ptr [ebp-24]
:0043A8F8 3B45E4                  cmp eax, dword ptr [ebp-1C]
:0043A8FB 7E05                    jle 0043A902
:0043A8FD E9B7000000              jmp 0043A9B9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A8F3(C), :0043A8FB(C)
|
:0043A902 837DF000                cmp dword ptr [ebp-10], 00000000
:0043A906 7D0D                    jge 0043A915
:0043A908 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043A90B 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0043A90E 7D05                    jge 0043A915
:0043A910 E9A4000000              jmp 0043A9B9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A906(C), :0043A90E(C)
|
:0043A915 6A01                    push 00000001
:0043A917 B9F8F44A00              mov ecx, 004AF4F8
:0043A91C E86FABFEFF              call 00425490
:0043A921 E80C85FDFF              call 00412E32
:0043A926 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043A929 0FAF45DC                imul eax, dword ptr [ebp-24]
:0043A92D 99                      cdq
:0043A92E B964000000              mov ecx, 00000064
:0043A933 F7F9                    idiv ecx
:0043A935 8B5508                  mov edx, dword ptr [ebp+08]
:0043A938 03D0                    add edx, eax
:0043A93A 8955FC                  mov dword ptr [ebp-04], edx
:0043A93D 6800E70100              push 0001E700
:0043A942 B930DA4A00              mov ecx, 004ADA30
:0043A947 E8528CFDFF              call 0041359E
:0043A94C 50                      push eax
:0043A94D 6A30                    push 00000030
:0043A94F 6A30                    push 00000030
:0043A951 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A954 0345DC                  add eax, dword ptr [ebp-24]
:0043A957 50                      push eax
:0043A958 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A95B 51                      push ecx
:0043A95C E872830000              call 00442CD3
:0043A961 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A964 6A04                    push 00000004
:0043A966 8B55EC                  mov edx, dword ptr [ebp-14]
:0043A969 52                      push edx
:0043A96A 6A30                    push 00000030
:0043A96C 6A30                    push 00000030
:0043A96E 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A971 0345DC                  add eax, dword ptr [ebp-24]
:0043A974 50                      push eax
:0043A975 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A978 51                      push ecx
:0043A979 E894820000              call 00442C12
:0043A97E 83C418                  add esp, 00000018
:0043A981 E8C784FDFF              call 00412E4D
:0043A986 E805C2FEFF              call 00426B90
:0043A98B 6A00                    push 00000000
:0043A98D 6800E70100              push 0001E700
:0043A992 B930DA4A00              mov ecx, 004ADA30
:0043A997 E8028CFDFF              call 0041359E
:0043A99C 50                      push eax
:0043A99D 6A30                    push 00000030
:0043A99F 6A30                    push 00000030
:0043A9A1 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A9A4 0355DC                  add edx, dword ptr [ebp-24]
:0043A9A7 52                      push edx
:0043A9A8 8B45FC                  mov eax, dword ptr [ebp-04]
:0043A9AB 50                      push eax
:0043A9AC E861820000              call 00442C12
:0043A9B1 83C418                  add esp, 00000018
:0043A9B4 E92DFFFFFF              jmp 0043A8E6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A8B8(U), :0043A8FD(U), :0043A910(U)
|
:0043A9B9 8BE5                    mov esp, ebp
:0043A9BB 5D                      pop ebp
:0043A9BC C3                      ret



* Referenced by a CALL at Address:
|:0043A5AD   
|
:0043A9BD 55                      push ebp
:0043A9BE 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043A9C0 6AFF                    push FFFFFFFF
:0043A9C2 68FC394700              push 004739FC
:0043A9C7 64A100000000            mov eax, dword ptr fs:[00000000]
:0043A9CD 50                      push eax
:0043A9CE 64892500000000          mov dword ptr fs:[00000000], esp
:0043A9D5 81EC18010000            sub esp, 00000118
:0043A9DB C745F000000000          mov [ebp-10], 00000000
:0043A9E2 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:0043A9EC C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:0043A9F6 8B4508                  mov eax, dword ptr [ebp+08]
:0043A9F9 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0043A9FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AA02 898DE0FEFFFF            mov dword ptr [ebp+FFFFFEE0], ecx
:0043AA08 83BDE0FEFFFF05          cmp dword ptr [ebp+FFFFFEE0], 00000005
:0043AA0F 7763                    ja 0043AA74
:0043AA11 8B95E0FEFFFF            mov edx, dword ptr [ebp+FFFFFEE0]
:0043AA17 FF249558AB4300          jmp dword ptr [4*edx+0043AB58]
:0043AA1E 8B450C                  mov eax, dword ptr [ebp+0C]
:0043AA21 8985DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], eax
:0043AA27 83BDDCFEFFFF03          cmp dword ptr [ebp+FFFFFEDC], 00000003
:0043AA2E 7736                    ja 0043AA66
:0043AA30 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:0043AA36 FF248D70AB4300          jmp dword ptr [4*ecx+0043AB70]
:0043AA3D C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:0043AA47 EB1D                    jmp 0043AA66
:0043AA49 C745F001000000          mov [ebp-10], 00000001
:0043AA50 C785E4FEFFFF00120000    mov dword ptr [ebp+FFFFFEE4], 00001200
:0043AA5A EB0A                    jmp 0043AA66
:0043AA5C C785E4FEFFFF00090000    mov dword ptr [ebp+FFFFFEE4], 00000900

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043AA2E(C), :0043AA47(U), :0043AA5A(U)
|
:0043AA66 EB11                    jmp 0043AA79
:0043AA68 C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:0043AA72 EB05                    jmp 0043AA79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AA0F(C)
|
:0043AA74 E9D1000000              jmp 0043AB4A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043AA66(U), :0043AA72(U)
|
:0043AA79 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043AA7F E87CCCFCFF              call 00407700
:0043AA84 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"SARM.E4"
                                  |
:0043AA8B 68F87A4700              push 00477AF8
:0043AA90 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043AA96 E89A98FDFF              call 00414335
:0043AA9B 6800E70100              push 0001E700
:0043AAA0 B930DA4A00              mov ecx, 004ADA30
:0043AAA5 E8F48AFDFF              call 0041359E
:0043AAAA 50                      push eax
:0043AAAB 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0043AAB1 52                      push edx
:0043AAB2 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043AAB8 E8CC99FDFF              call 00414489
:0043AABD 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043AAC3 E8445BFDFF              call 0041060C
:0043AAC8 837DF000                cmp dword ptr [ebp-10], 00000000
:0043AACC 7435                    je 0043AB03
:0043AACE 6800300000              push 00003000
:0043AAD3 B930DA4A00              mov ecx, 004ADA30
:0043AAD8 E8C18AFDFF              call 0041359E
:0043AADD 50                      push eax
:0043AADE 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0043AAE4 0500E70100              add eax, 0001E700
:0043AAE9 50                      push eax
:0043AAEA B930DA4A00              mov ecx, 004ADA30
:0043AAEF E8AA8AFDFF              call 0041359E
:0043AAF4 50                      push eax
:0043AAF5 6A30                    push 00000030
:0043AAF7 6A30                    push 00000030
:0043AAF9 E8398CFDFF              call 00413737
:0043AAFE 83C410                  add esp, 00000010
:0043AB01 EB35                    jmp 0043AB38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AACC(C)
|
:0043AB03 6800090000              push 00000900
:0043AB08 6800300000              push 00003000
:0043AB0D B930DA4A00              mov ecx, 004ADA30
:0043AB12 E8878AFDFF              call 0041359E
:0043AB17 50                      push eax
:0043AB18 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0043AB1E 81C100E70100            add ecx, 0001E700
:0043AB24 51                      push ecx
:0043AB25 B930DA4A00              mov ecx, 004ADA30
:0043AB2A E86F8AFDFF              call 0041359E
:0043AB2F 50                      push eax
:0043AB30 E8FA7C0200              call 0046282F
:0043AB35 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AB01(U)
|
:0043AB38 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043AB3F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043AB45 E8D6CBFCFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AA74(U)
|
:0043AB4A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043AB4D 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043AB54 8BE5                    mov esp, ebp
:0043AB56 5D                      pop ebp
:0043AB57 C3                      ret



:0043AB58 1EAA4300                DWORD 0043AA1E
:0043AB5C 1EAA4300                DWORD 0043AA1E
:0043AB60 1EAA4300                DWORD 0043AA1E
:0043AB64 68AA4300                DWORD 0043AA68
:0043AB68 68AA4300                DWORD 0043AA68
:0043AB6C 68AA4300                DWORD 0043AA68
:0043AB70 3DAA4300                DWORD 0043AA3D
:0043AB74 49AA4300                DWORD 0043AA49
:0043AB78 5CAA4300                DWORD 0043AA5C
:0043AB7C 50AA4300                DWORD 0043AA50



* Referenced by a CALL at Address:
|:00439F8C   
|
:0043AB80 55                      push ebp
:0043AB81 8BEC                    mov ebp, esp
:0043AB83 83EC2C                  sub esp, 0000002C
:0043AB86 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0043AB89 E822CCFCFF              call 004077B0
:0043AB8E 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0043AB91 E81ACCFCFF              call 004077B0
:0043AB96 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AB99 6BC924                  imul ecx, 00000024
:0043AB9C 81C108F54A00            add ecx, 004AF508
:0043ABA2 E8F9E7FEFF              call 004293A0
:0043ABA7 668B00                  mov ax, word ptr [eax]
:0043ABAA 50                      push eax
:0043ABAB 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0043ABAE 51                      push ecx
:0043ABAF E809800000              call 00442BBD
:0043ABB4 83C408                  add esp, 00000008
:0043ABB7 50                      push eax
:0043ABB8 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0043ABBB E8D04BFFFF              call 0042F790
:0043ABC0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043ABC3 6BC924                  imul ecx, 00000024
:0043ABC6 81C108F54A00            add ecx, 004AF508
:0043ABCC E8CFE7FEFF              call 004293A0
:0043ABD1 668B10                  mov dx, word ptr [eax]
:0043ABD4 52                      push edx
:0043ABD5 8D45D4                  lea eax, dword ptr [ebp-2C]
:0043ABD8 50                      push eax
:0043ABD9 E8DF7F0000              call 00442BBD
:0043ABDE 83C408                  add esp, 00000008
:0043ABE1 50                      push eax
:0043ABE2 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0043ABE5 E8A64BFFFF              call 0042F790
:0043ABEA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043ABED 81E1FF000000            and ecx, 000000FF
:0043ABF3 C1E104                  shl ecx, 04
:0043ABF6 894DE8                  mov dword ptr [ebp-18], ecx
:0043ABF9 8B55F1                  mov edx, dword ptr [ebp-0F]
:0043ABFC 81E2FF000000            and edx, 000000FF
:0043AC02 C1E204                  shl edx, 04
:0043AC05 83C228                  add edx, 00000028
:0043AC08 8955E4                  mov dword ptr [ebp-1C], edx
:0043AC0B 8B45F0                  mov eax, dword ptr [ebp-10]
:0043AC0E 25FF000000              and eax, 000000FF
:0043AC13 C1E004                  shl eax, 04
:0043AC16 8945FC                  mov dword ptr [ebp-04], eax
:0043AC19 8B4DF1                  mov ecx, dword ptr [ebp-0F]
:0043AC1C 81E1FF000000            and ecx, 000000FF
:0043AC22 C1E104                  shl ecx, 04
:0043AC25 83C128                  add ecx, 00000028
:0043AC28 894DF4                  mov dword ptr [ebp-0C], ecx
:0043AC2B 6A01                    push 00000001
:0043AC2D E837030000              call 0043AF69
:0043AC32 83C404                  add esp, 00000004
:0043AC35 8945EC                  mov dword ptr [ebp-14], eax
:0043AC38 6A00                    push 00000000
:0043AC3A E82A030000              call 0043AF69
:0043AC3F 83C404                  add esp, 00000004
:0043AC42 8945F8                  mov dword ptr [ebp-08], eax
:0043AC45 837DEC00                cmp dword ptr [ebp-14], 00000000
:0043AC49 750A                    jne 0043AC55
:0043AC4B 837DF800                cmp dword ptr [ebp-08], 00000000
:0043AC4F 0F8410030000            je 0043AF65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AC49(C)
|
:0043AC55 C745DC00000000          mov [ebp-24], 00000000
:0043AC5C EB09                    jmp 0043AC67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AF60(U)
|
:0043AC5E 8B55DC                  mov edx, dword ptr [ebp-24]
:0043AC61 83C201                  add edx, 00000001
:0043AC64 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AC5C(U)
|
:0043AC67 837DDC03                cmp dword ptr [ebp-24], 00000003
:0043AC6B 0F87F4020000            ja 0043AF65
:0043AC71 33C0                    xor eax, eax
:0043AC73 A03D0A4B00              mov al, byte ptr [004B0A3D]
:0043AC78 83C003                  add eax, 00000003
:0043AC7B 50                      push eax
:0043AC7C B9F8F44A00              mov ecx, 004AF4F8
:0043AC81 E80AA8FEFF              call 00425490
:0043AC86 E8A781FDFF              call 00412E32
:0043AC8B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043AC8E 83E108                  and ecx, 00000008
:0043AC91 85C9                    test ecx, ecx
:0043AC93 0F8433010000            je 0043ADCC
:0043AC99 8B55F1                  mov edx, dword ptr [ebp-0F]
:0043AC9C 81E2FF000000            and edx, 000000FF
:0043ACA2 52                      push edx
:0043ACA3 8B45F0                  mov eax, dword ptr [ebp-10]
:0043ACA6 25FF000000              and eax, 000000FF
:0043ACAB 50                      push eax
:0043ACAC E8B1EFFFFF              call 00439C62
:0043ACB1 83C408                  add esp, 00000008
:0043ACB4 837DDC03                cmp dword ptr [ebp-24], 00000003
:0043ACB8 7433                    je 0043ACED

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043ACBA 6A04                    push 00000004
:0043ACBC 6A00                    push 00000000
:0043ACBE B930DA4A00              mov ecx, 004ADA30
:0043ACC3 E8D688FDFF              call 0041359E
:0043ACC8 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043ACCB 69C900090000            imul ecx, 00000900
:0043ACD1 8D940800CC0100          lea edx, dword ptr [eax+ecx+0001CC00]
:0043ACD8 52                      push edx
:0043ACD9 6A30                    push 00000030
:0043ACDB 6A30                    push 00000030
:0043ACDD 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043ACE0 50                      push eax
:0043ACE1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043ACE4 51                      push ecx
:0043ACE5 E8287F0000              call 00442C12
:0043ACEA 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ACB8(C)
|
:0043ACED 8B5508                  mov edx, dword ptr [ebp+08]
:0043ACF0 6BD224                  imul edx, 00000024
:0043ACF3 81C208F54A00            add edx, 004AF508
:0043ACF9 52                      push edx
:0043ACFA B930024B00              mov ecx, 004B0230
:0043ACFF E859F1FFFF              call 00439E5D
:0043AD04 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AD07 6BC924                  imul ecx, 00000024
:0043AD0A 81C108F54A00            add ecx, 004AF508
:0043AD10 E88BE6FEFF              call 004293A0
:0043AD15 50                      push eax
:0043AD16 E864CC0000              call 0044797F
:0043AD1B 83C404                  add esp, 00000004
:0043AD1E 25FF000000              and eax, 000000FF
:0043AD23 83F80D                  cmp eax, 0000000D
:0043AD26 7534                    jne 0043AD5C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043AD28 6A04                    push 00000004
:0043AD2A 6800120100              push 00011200
:0043AD2F B940DF4A00              mov ecx, 004ADF40
:0043AD34 E86588FDFF              call 0041359E
:0043AD39 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043AD3F 69C900090000            imul ecx, 00000900
:0043AD45 03C1                    add eax, ecx
:0043AD47 50                      push eax
:0043AD48 6A30                    push 00000030
:0043AD4A 6A30                    push 00000030
:0043AD4C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043AD4F 52                      push edx
:0043AD50 8B45E8                  mov eax, dword ptr [ebp-18]
:0043AD53 50                      push eax
:0043AD54 E8B97E0000              call 00442C12
:0043AD59 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AD26(C)
|
:0043AD5C B9180A4B00              mov ecx, 004B0A18
:0043AD61 E888D60100              call 004583EE
:0043AD66 25FF000000              and eax, 000000FF
:0043AD6B 83F802                  cmp eax, 00000002
:0043AD6E 7414                    je 0043AD84
:0043AD70 B9180A4B00              mov ecx, 004B0A18
:0043AD75 E874D60100              call 004583EE
:0043AD7A 25FF000000              and eax, 000000FF
:0043AD7F 83F803                  cmp eax, 00000003
:0043AD82 7548                    jne 0043ADCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AD6E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043AD84 6A04                    push 00000004
:0043AD86 B9180A4B00              mov ecx, 004B0A18
:0043AD8B E8A04FFFFF              call 0042FD30
:0043AD90 F7D8                    neg eax
:0043AD92 1BC0                    sbb eax, eax
:0043AD94 2500120000              and eax, 00001200
:0043AD99 0500EE0000              add eax, 0000EE00
:0043AD9E 50                      push eax
:0043AD9F B940DF4A00              mov ecx, 004ADF40
:0043ADA4 E8F587FDFF              call 0041359E
:0043ADA9 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043ADAF 69C900090000            imul ecx, 00000900
:0043ADB5 03C1                    add eax, ecx
:0043ADB7 50                      push eax
:0043ADB8 6A30                    push 00000030
:0043ADBA 6A30                    push 00000030
:0043ADBC 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043ADBF 52                      push edx
:0043ADC0 8B45E8                  mov eax, dword ptr [ebp-18]
:0043ADC3 50                      push eax
:0043ADC4 E8497E0000              call 00442C12
:0043ADC9 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043AC93(C), :0043AD82(C)
|
:0043ADCC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043ADCF 83E108                  and ecx, 00000008
:0043ADD2 85C9                    test ecx, ecx
:0043ADD4 0F847C010000            je 0043AF56
:0043ADDA 8B55E1                  mov edx, dword ptr [ebp-1F]
:0043ADDD 81E2FF000000            and edx, 000000FF
:0043ADE3 52                      push edx
:0043ADE4 8B45E0                  mov eax, dword ptr [ebp-20]
:0043ADE7 25FF000000              and eax, 000000FF
:0043ADEC 50                      push eax
:0043ADED E870EEFFFF              call 00439C62
:0043ADF2 83C408                  add esp, 00000008
:0043ADF5 837DDC03                cmp dword ptr [ebp-24], 00000003
:0043ADF9 7433                    je 0043AE2E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043ADFB 6A04                    push 00000004
:0043ADFD 6A00                    push 00000000
:0043ADFF B930DA4A00              mov ecx, 004ADA30
:0043AE04 E89587FDFF              call 0041359E
:0043AE09 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043AE0C 69C900090000            imul ecx, 00000900
:0043AE12 8D940800CC0100          lea edx, dword ptr [eax+ecx+0001CC00]
:0043AE19 52                      push edx
:0043AE1A 6A30                    push 00000030
:0043AE1C 6A30                    push 00000030
:0043AE1E 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043AE21 50                      push eax
:0043AE22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AE25 51                      push ecx
:0043AE26 E8E77D0000              call 00442C12
:0043AE2B 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ADF9(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0043AE2E 6A10                    push 00000010
:0043AE30 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043AE33 6BC924                  imul ecx, 00000024
:0043AE36 81C108F54A00            add ecx, 004AF508
:0043AE3C E81F49FFFF              call 0042F760
:0043AE41 85C0                    test eax, eax
:0043AE43 7519                    jne 0043AE5E
:0043AE45 8B550C                  mov edx, dword ptr [ebp+0C]
:0043AE48 6BD224                  imul edx, 00000024
:0043AE4B 81C208F54A00            add edx, 004AF508
:0043AE51 52                      push edx
:0043AE52 B930024B00              mov ecx, 004B0230
:0043AE57 E801F0FFFF              call 00439E5D
:0043AE5C EB30                    jmp 0043AE8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AE43(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043AE5E 6A04                    push 00000004
:0043AE60 8B450C                  mov eax, dword ptr [ebp+0C]
:0043AE63 69C0005A0000            imul eax, 00005A00
:0043AE69 0500510000              add eax, 00005100
:0043AE6E 50                      push eax
:0043AE6F B920414A00              mov ecx, 004A4120
:0043AE74 E82587FDFF              call 0041359E
:0043AE79 50                      push eax
:0043AE7A 6A30                    push 00000030
:0043AE7C 6A30                    push 00000030
:0043AE7E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043AE81 51                      push ecx
:0043AE82 8B55FC                  mov edx, dword ptr [ebp-04]
:0043AE85 52                      push edx
:0043AE86 E8877D0000              call 00442C12
:0043AE8B 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AE5C(U)
|
:0043AE8E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043AE91 6BC924                  imul ecx, 00000024
:0043AE94 81C108F54A00            add ecx, 004AF508
:0043AE9A E801E5FEFF              call 004293A0
:0043AE9F 50                      push eax
:0043AEA0 E8DACA0000              call 0044797F
:0043AEA5 83C404                  add esp, 00000004
:0043AEA8 25FF000000              and eax, 000000FF
:0043AEAD 83F80D                  cmp eax, 0000000D
:0043AEB0 7534                    jne 0043AEE6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043AEB2 6A04                    push 00000004
:0043AEB4 6800120100              push 00011200
:0043AEB9 B940DF4A00              mov ecx, 004ADF40
:0043AEBE E8DB86FDFF              call 0041359E
:0043AEC3 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043AEC9 69C900090000            imul ecx, 00000900
:0043AECF 03C1                    add eax, ecx
:0043AED1 50                      push eax
:0043AED2 6A30                    push 00000030
:0043AED4 6A30                    push 00000030
:0043AED6 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043AED9 52                      push edx
:0043AEDA 8B45FC                  mov eax, dword ptr [ebp-04]
:0043AEDD 50                      push eax
:0043AEDE E82F7D0000              call 00442C12
:0043AEE3 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AEB0(C)
|
:0043AEE6 B9180A4B00              mov ecx, 004B0A18
:0043AEEB E8FED40100              call 004583EE
:0043AEF0 25FF000000              and eax, 000000FF
:0043AEF5 83F802                  cmp eax, 00000002
:0043AEF8 7414                    je 0043AF0E
:0043AEFA B9180A4B00              mov ecx, 004B0A18
:0043AEFF E8EAD40100              call 004583EE
:0043AF04 25FF000000              and eax, 000000FF
:0043AF09 83F803                  cmp eax, 00000003
:0043AF0C 7548                    jne 0043AF56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AEF8(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043AF0E 6A04                    push 00000004
:0043AF10 B9180A4B00              mov ecx, 004B0A18
:0043AF15 E8164EFFFF              call 0042FD30
:0043AF1A F7D8                    neg eax
:0043AF1C 1BC0                    sbb eax, eax
:0043AF1E 2500120000              and eax, 00001200
:0043AF23 0500EE0000              add eax, 0000EE00
:0043AF28 50                      push eax
:0043AF29 B940DF4A00              mov ecx, 004ADF40
:0043AF2E E86B86FDFF              call 0041359E
:0043AF33 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043AF39 69C900090000            imul ecx, 00000900
:0043AF3F 03C1                    add eax, ecx
:0043AF41 50                      push eax
:0043AF42 6A30                    push 00000030
:0043AF44 6A30                    push 00000030
:0043AF46 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043AF49 52                      push edx
:0043AF4A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043AF4D 50                      push eax
:0043AF4E E8BF7C0000              call 00442C12
:0043AF53 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043ADD4(C), :0043AF0C(C)
|
:0043AF56 E8F27EFDFF              call 00412E4D
:0043AF5B E830BCFEFF              call 00426B90
:0043AF60 E9F9FCFFFF              jmp 0043AC5E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043AC4F(C), :0043AC6B(C)
|
:0043AF65 8BE5                    mov esp, ebp
:0043AF67 5D                      pop ebp
:0043AF68 C3                      ret



* Referenced by a CALL at Addresses:
|:0043AC2D   , :0043AC3A   , :0043B121   , :0043B33F   
|
:0043AF69 55                      push ebp
:0043AF6A 8BEC                    mov ebp, esp
:0043AF6C 83EC10                  sub esp, 00000010
:0043AF6F C745F400000000          mov [ebp-0C], 00000000
:0043AF76 C645F800                mov [ebp-08], 00
:0043AF7A EB08                    jmp 0043AF84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B074(U)
|
:0043AF7C 8A45F8                  mov al, byte ptr [ebp-08]
:0043AF7F 0401                    add al, 01
:0043AF81 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AF7A(U)
|
:0043AF84 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043AF87 81E1FF000000            and ecx, 000000FF
:0043AF8D 83F920                  cmp ecx, 00000020
:0043AF90 0F8DE3000000            jnl 0043B079
:0043AF96 837D0800                cmp dword ptr [ebp+08], 00000000
:0043AF9A 7413                    je 0043AFAF
:0043AF9C 8A55F8                  mov dl, byte ptr [ebp-08]
:0043AF9F 52                      push edx
:0043AFA0 B930024B00              mov ecx, 004B0230
:0043AFA5 E8A6250000              call 0043D550
:0043AFAA 8945FC                  mov dword ptr [ebp-04], eax
:0043AFAD EB11                    jmp 0043AFC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AF9A(C)
|
:0043AFAF 8A45F8                  mov al, byte ptr [ebp-08]
:0043AFB2 50                      push eax
:0043AFB3 B930024B00              mov ecx, 004B0230
:0043AFB8 E8B3250000              call 0043D570
:0043AFBD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AFAD(U)
|
:0043AFC0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043AFC3 81E1FF000000            and ecx, 000000FF
:0043AFC9 894DF0                  mov dword ptr [ebp-10], ecx
:0043AFCC 837DF01E                cmp dword ptr [ebp-10], 0000001E
:0043AFD0 0F879E000000            ja 0043B074
:0043AFD6 8B45F0                  mov eax, dword ptr [ebp-10]
:0043AFD9 33D2                    xor edx, edx
:0043AFDB 8A90A8B04300            mov dl, byte ptr [eax+0043B0A8]
:0043AFE1 FF249580B04300          jmp dword ptr [4*edx+0043B080]
:0043AFE8 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043AFEC 7415                    je 0043B003
:0043AFEE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AFF1 F7D9                    neg ecx
:0043AFF3 1BC9                    sbb ecx, ecx
:0043AFF5 83E103                  and ecx, 00000003
:0043AFF8 83C101                  add ecx, 00000001
:0043AFFB 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043AFFE 0BD1                    or edx, ecx
:0043B000 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AFEC(C)
|
:0043B003 EB6F                    jmp 0043B074
:0043B005 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043B009 740E                    je 0043B019
:0043B00B 837D0800                cmp dword ptr [ebp+08], 00000000
:0043B00F 7508                    jne 0043B019
:0043B011 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043B014 0C01                    or al, 01
:0043B016 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B009(C), :0043B00F(C)
|
:0043B019 EB59                    jmp 0043B074
:0043B01B 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043B01F 740F                    je 0043B030
:0043B021 837D0800                cmp dword ptr [ebp+08], 00000000
:0043B025 7409                    je 0043B030
:0043B027 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B02A 83C904                  or ecx, 00000004
:0043B02D 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B01F(C), :0043B025(C)
|
:0043B030 EB42                    jmp 0043B074
:0043B032 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043B036 740F                    je 0043B047
:0043B038 837D0800                cmp dword ptr [ebp+08], 00000000
:0043B03C 7409                    je 0043B047
:0043B03E 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043B041 83CA02                  or edx, 00000002
:0043B044 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B036(C), :0043B03C(C)
|
:0043B047 EB2B                    jmp 0043B074
:0043B049 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043B04D 740E                    je 0043B05D
:0043B04F 837D0800                cmp dword ptr [ebp+08], 00000000
:0043B053 7408                    je 0043B05D
:0043B055 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043B058 0C08                    or al, 08
:0043B05A 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B04D(C), :0043B053(C)
|
:0043B05D EB15                    jmp 0043B074
:0043B05F 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043B063 740F                    je 0043B074
:0043B065 837D0800                cmp dword ptr [ebp+08], 00000000
:0043B069 7509                    jne 0043B074
:0043B06B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B06E 83C908                  or ecx, 00000008
:0043B071 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043AFD0(C), :0043B003(U), :0043B019(U), :0043B030(U), :0043B047(U)
|:0043B05D(U), :0043B063(C), :0043B069(C)
|
:0043B074 E903FFFFFF              jmp 0043AF7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AF90(C)
|
:0043B079 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043B07C 8BE5                    mov esp, ebp
:0043B07E 5D                      pop ebp
:0043B07F C3                      ret



:0043B080 E8AF4300                DWORD 0043AFE8
:0043B084 05B04300                DWORD 0043B005
:0043B088 1BB04300                DWORD 0043B01B
:0043B08C 32B04300                DWORD 0043B032
:0043B090 49B04300                DWORD 0043B049
:0043B094 5FB04300                DWORD 0043B05F
:0043B098 E8AF4300                DWORD 0043AFE8
:0043B09C 1BB04300                DWORD 0043B01B
:0043B0A0 5FB04300                DWORD 0043B05F
:0043B0A4 74B04300                DWORD 0043B074


:0043B0A8 00000000000000          BYTE  7 DUP(0)


:0043B0AF 0101                    add dword ptr [ecx], eax
:0043B0B1 0209                    add cl, byte ptr [ecx]
:0043B0B3 0909                    or dword ptr [ecx], ecx
:0043B0B5 0309                    add ecx, dword ptr [ecx]
:0043B0B7 0909                    or dword ptr [ecx], ecx
:0043B0B9 0909                    or dword ptr [ecx], ecx
:0043B0BB 0404                    add al, 04
:0043B0BD 0405                    add al, 05
:0043B0BF 0505050506              add eax, 06050505
:0043B0C4 06                      push es
:0043B0C5 07                      pop es
:0043B0C6 08                      BYTE 08h


* Referenced by a CALL at Address:
|:0043A09A   
|
:0043B0C7 55                      push ebp
:0043B0C8 8BEC                    mov ebp, esp
:0043B0CA 83EC14                  sub esp, 00000014
:0043B0CD 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043B0D0 E8DBC6FCFF              call 004077B0
:0043B0D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B0D8 6BC924                  imul ecx, 00000024
:0043B0DB 81C108F54A00            add ecx, 004AF508
:0043B0E1 E8BAE2FEFF              call 004293A0
:0043B0E6 668B00                  mov ax, word ptr [eax]
:0043B0E9 50                      push eax
:0043B0EA 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0043B0ED 51                      push ecx
:0043B0EE E8CA7A0000              call 00442BBD
:0043B0F3 83C408                  add esp, 00000008
:0043B0F6 50                      push eax
:0043B0F7 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043B0FA E89146FFFF              call 0042F790
:0043B0FF 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B102 81E2FF000000            and edx, 000000FF
:0043B108 C1E204                  shl edx, 04
:0043B10B 8955F4                  mov dword ptr [ebp-0C], edx
:0043B10E 8B45FD                  mov eax, dword ptr [ebp-03]
:0043B111 25FF000000              and eax, 000000FF
:0043B116 C1E004                  shl eax, 04
:0043B119 83C028                  add eax, 00000028
:0043B11C 8945F0                  mov dword ptr [ebp-10], eax
:0043B11F 6A01                    push 00000001
:0043B121 E843FEFFFF              call 0043AF69
:0043B126 83C404                  add esp, 00000004
:0043B129 8945F8                  mov dword ptr [ebp-08], eax
:0043B12C 8B4DFD                  mov ecx, dword ptr [ebp-03]
:0043B12F 81E1FF000000            and ecx, 000000FF
:0043B135 51                      push ecx
:0043B136 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B139 81E2FF000000            and edx, 000000FF
:0043B13F 52                      push edx
:0043B140 E81DEBFFFF              call 00439C62
:0043B145 83C408                  add esp, 00000008
:0043B148 8B45F8                  mov eax, dword ptr [ebp-08]
:0043B14B 83E002                  and eax, 00000002
:0043B14E 85C0                    test eax, eax
:0043B150 7438                    je 0043B18A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B152 6A04                    push 00000004
:0043B154 6A00                    push 00000000
:0043B156 B930DA4A00              mov ecx, 004ADA30
:0043B15B E83E84FDFF              call 0041359E
:0043B160 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B163 69C900090000            imul ecx, 00000900
:0043B169 8D940800960100          lea edx, dword ptr [eax+ecx+00019600]
:0043B170 52                      push edx
:0043B171 6A30                    push 00000030
:0043B173 6A30                    push 00000030
:0043B175 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B178 83E808                  sub eax, 00000008
:0043B17B 50                      push eax
:0043B17C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B17F 51                      push ecx
:0043B180 E88D7A0000              call 00442C12
:0043B185 83C418                  add esp, 00000018
:0043B188 EB3D                    jmp 0043B1C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B150(C)
|
:0043B18A 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B18D 83E204                  and edx, 00000004
:0043B190 85D2                    test edx, edx
:0043B192 7433                    je 0043B1C7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B194 6A04                    push 00000004
:0043B196 6A00                    push 00000000
:0043B198 B930DA4A00              mov ecx, 004ADA30
:0043B19D E8FC83FDFF              call 0041359E
:0043B1A2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B1A5 69C900090000            imul ecx, 00000900
:0043B1AB 8D940800B10100          lea edx, dword ptr [eax+ecx+0001B100]
:0043B1B2 52                      push edx
:0043B1B3 6A30                    push 00000030
:0043B1B5 6A30                    push 00000030
:0043B1B7 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B1BA 50                      push eax
:0043B1BB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B1BE 51                      push ecx
:0043B1BF E84E7A0000              call 00442C12
:0043B1C4 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B188(U), :0043B192(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B1C7 6A04                    push 00000004
:0043B1C9 8B550C                  mov edx, dword ptr [ebp+0C]
:0043B1CC C1E20C                  shl edx, 0C
:0043B1CF 52                      push edx
:0043B1D0 B930DA4A00              mov ecx, 004ADA30
:0043B1D5 E8C483FDFF              call 0041359E
:0043B1DA 50                      push eax
:0043B1DB 6A40                    push 00000040
:0043B1DD 6A40                    push 00000040
:0043B1DF 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B1E2 83E808                  sub eax, 00000008
:0043B1E5 50                      push eax
:0043B1E6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B1E9 83E908                  sub ecx, 00000008
:0043B1EC 51                      push ecx
:0043B1ED E8207A0000              call 00442C12
:0043B1F2 83C418                  add esp, 00000018
:0043B1F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B1F8 6BC924                  imul ecx, 00000024
:0043B1FB 81C108F54A00            add ecx, 004AF508
:0043B201 E89AE1FEFF              call 004293A0
:0043B206 50                      push eax
:0043B207 E873C70000              call 0044797F
:0043B20C 83C404                  add esp, 00000004
:0043B20F 25FF000000              and eax, 000000FF
:0043B214 83F80D                  cmp eax, 0000000D
:0043B217 7537                    jne 0043B250

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B219 6A04                    push 00000004
:0043B21B 6800240100              push 00012400
:0043B220 B940DF4A00              mov ecx, 004ADF40
:0043B225 E87483FDFF              call 0041359E
:0043B22A 8B1578044B00            mov edx, dword ptr [004B0478]
:0043B230 C1E206                  shl edx, 06
:0043B233 03C2                    add eax, edx
:0043B235 50                      push eax
:0043B236 6A40                    push 00000040
:0043B238 6A40                    push 00000040
:0043B23A 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B23D 83E808                  sub eax, 00000008
:0043B240 50                      push eax
:0043B241 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B244 83E908                  sub ecx, 00000008
:0043B247 51                      push ecx
:0043B248 E8C5790000              call 00442C12
:0043B24D 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B217(C)
|
:0043B250 B9180A4B00              mov ecx, 004B0A18
:0043B255 E894D10100              call 004583EE
:0043B25A 25FF000000              and eax, 000000FF
:0043B25F 83F802                  cmp eax, 00000002
:0043B262 7414                    je 0043B278
:0043B264 B9180A4B00              mov ecx, 004B0A18
:0043B269 E880D10100              call 004583EE
:0043B26E 25FF000000              and eax, 000000FF
:0043B273 83F803                  cmp eax, 00000003
:0043B276 7548                    jne 0043B2C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B262(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B278 6A04                    push 00000004
:0043B27A B9180A4B00              mov ecx, 004B0A18
:0043B27F E8AC4AFFFF              call 0042FD30
:0043B284 F7D8                    neg eax
:0043B286 1BC0                    sbb eax, eax
:0043B288 2500120000              and eax, 00001200
:0043B28D 0500EE0000              add eax, 0000EE00
:0043B292 50                      push eax
:0043B293 B940DF4A00              mov ecx, 004ADF40
:0043B298 E80183FDFF              call 0041359E
:0043B29D 8B1578044B00            mov edx, dword ptr [004B0478]
:0043B2A3 69D200090000            imul edx, 00000900
:0043B2A9 03C2                    add eax, edx
:0043B2AB 50                      push eax
:0043B2AC 6A30                    push 00000030
:0043B2AE 6A30                    push 00000030
:0043B2B0 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B2B3 50                      push eax
:0043B2B4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B2B7 51                      push ecx
:0043B2B8 E855790000              call 00442C12
:0043B2BD 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B276(C)
|
:0043B2C0 8BE5                    mov esp, ebp
:0043B2C2 5D                      pop ebp
:0043B2C3 C3                      ret



* Referenced by a CALL at Addresses:
|:0043A03B   , :0043A3B8   , :0043A412   , :0043D08F   , :0043D0D7   
|
:0043B2C4 55                      push ebp
:0043B2C5 8BEC                    mov ebp, esp
:0043B2C7 8B4510                  mov eax, dword ptr [ebp+10]
:0043B2CA 50                      push eax
:0043B2CB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B2CE D1E1                    shl ecx, 1
:0043B2D0 51                      push ecx
:0043B2D1 8B5508                  mov edx, dword ptr [ebp+08]
:0043B2D4 81E2FF000000            and edx, 000000FF
:0043B2DA 52                      push edx
:0043B2DB E805000000              call 0043B2E5
:0043B2E0 83C40C                  add esp, 0000000C
:0043B2E3 5D                      pop ebp
:0043B2E4 C3                      ret



* Referenced by a CALL at Address:
|:0043B2DB   
|
:0043B2E5 55                      push ebp
:0043B2E6 8BEC                    mov ebp, esp
:0043B2E8 83EC18                  sub esp, 00000018
:0043B2EB 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043B2EE E8BDC4FCFF              call 004077B0
:0043B2F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B2F6 6BC924                  imul ecx, 00000024
:0043B2F9 81C108F54A00            add ecx, 004AF508
:0043B2FF E89CE0FEFF              call 004293A0
:0043B304 668B00                  mov ax, word ptr [eax]
:0043B307 50                      push eax
:0043B308 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0043B30B 51                      push ecx
:0043B30C E8AC780000              call 00442BBD
:0043B311 83C408                  add esp, 00000008
:0043B314 50                      push eax
:0043B315 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043B318 E87344FFFF              call 0042F790
:0043B31D 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B320 81E2FF000000            and edx, 000000FF
:0043B326 C1E204                  shl edx, 04
:0043B329 8955F0                  mov dword ptr [ebp-10], edx
:0043B32C 8B45FD                  mov eax, dword ptr [ebp-03]
:0043B32F 25FF000000              and eax, 000000FF
:0043B334 C1E004                  shl eax, 04
:0043B337 83C028                  add eax, 00000028
:0043B33A 8945EC                  mov dword ptr [ebp-14], eax
:0043B33D 6A00                    push 00000000
:0043B33F E825FCFFFF              call 0043AF69
:0043B344 83C404                  add esp, 00000004
:0043B347 8945F8                  mov dword ptr [ebp-08], eax
:0043B34A 8B4DFD                  mov ecx, dword ptr [ebp-03]
:0043B34D 81E1FF000000            and ecx, 000000FF
:0043B353 51                      push ecx
:0043B354 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B357 81E2FF000000            and edx, 000000FF
:0043B35D 52                      push edx
:0043B35E E8FFE8FFFF              call 00439C62
:0043B363 83C408                  add esp, 00000008

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043B366 6A02                    push 00000002
:0043B368 6A01                    push 00000001
:0043B36A 8B4510                  mov eax, dword ptr [ebp+10]
:0043B36D 50                      push eax
:0043B36E E81F6C0200              call 00461F92
:0043B373 83C40C                  add esp, 0000000C
:0043B376 8945F4                  mov dword ptr [ebp-0C], eax
:0043B379 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043B37C 83E101                  and ecx, 00000001
:0043B37F 85C9                    test ecx, ecx
:0043B381 7433                    je 0043B3B6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B383 6A04                    push 00000004
:0043B385 6A00                    push 00000000
:0043B387 B930DA4A00              mov ecx, 004ADA30
:0043B38C E80D82FDFF              call 0041359E
:0043B391 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043B394 69D200090000            imul edx, 00000900
:0043B39A 8D8410007B0100          lea eax, dword ptr [eax+edx+00017B00]
:0043B3A1 50                      push eax
:0043B3A2 6A30                    push 00000030
:0043B3A4 6A30                    push 00000030
:0043B3A6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B3A9 51                      push ecx
:0043B3AA 8B55F0                  mov edx, dword ptr [ebp-10]
:0043B3AD 52                      push edx
:0043B3AE E85F780000              call 00442C12
:0043B3B3 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B381(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0043B3B6 6A10                    push 00000010
:0043B3B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B3BB 6BC924                  imul ecx, 00000024
:0043B3BE 81C108F54A00            add ecx, 004AF508
:0043B3C4 E89743FFFF              call 0042F760
:0043B3C9 85C0                    test eax, eax
:0043B3CB 7535                    jne 0043B402

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B3CD 6A04                    push 00000004
:0043B3CF 8B450C                  mov eax, dword ptr [ebp+0C]
:0043B3D2 034510                  add eax, dword ptr [ebp+10]
:0043B3D5 69C000090000            imul eax, 00000900
:0043B3DB 0500390000              add eax, 00003900
:0043B3E0 50                      push eax
:0043B3E1 B930DA4A00              mov ecx, 004ADA30
:0043B3E6 E8B381FDFF              call 0041359E
:0043B3EB 50                      push eax
:0043B3EC 6A30                    push 00000030
:0043B3EE 6A30                    push 00000030
:0043B3F0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B3F3 51                      push ecx
:0043B3F4 8B55F0                  mov edx, dword ptr [ebp-10]
:0043B3F7 52                      push edx
:0043B3F8 E815780000              call 00442C12
:0043B3FD 83C418                  add esp, 00000018
:0043B400 EB30                    jmp 0043B432

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B3CB(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B402 6A04                    push 00000004
:0043B404 8B4508                  mov eax, dword ptr [ebp+08]
:0043B407 69C0005A0000            imul eax, 00005A00
:0043B40D 0500510000              add eax, 00005100
:0043B412 50                      push eax
:0043B413 B920414A00              mov ecx, 004A4120
:0043B418 E88181FDFF              call 0041359E
:0043B41D 50                      push eax
:0043B41E 6A30                    push 00000030
:0043B420 6A30                    push 00000030
:0043B422 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B425 51                      push ecx
:0043B426 8B55F0                  mov edx, dword ptr [ebp-10]
:0043B429 52                      push edx
:0043B42A E8E3770000              call 00442C12
:0043B42F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B400(U)
|
:0043B432 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B435 6BC924                  imul ecx, 00000024
:0043B438 81C108F54A00            add ecx, 004AF508
:0043B43E E85DDFFEFF              call 004293A0
:0043B443 50                      push eax
:0043B444 E836C50000              call 0044797F
:0043B449 83C404                  add esp, 00000004
:0043B44C 25FF000000              and eax, 000000FF
:0043B451 83F80D                  cmp eax, 0000000D
:0043B454 7534                    jne 0043B48A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B456 6A04                    push 00000004
:0043B458 6800120100              push 00011200
:0043B45D B940DF4A00              mov ecx, 004ADF40
:0043B462 E83781FDFF              call 0041359E
:0043B467 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043B46D 69C900090000            imul ecx, 00000900
:0043B473 03C1                    add eax, ecx
:0043B475 50                      push eax
:0043B476 6A30                    push 00000030
:0043B478 6A30                    push 00000030
:0043B47A 8B55EC                  mov edx, dword ptr [ebp-14]
:0043B47D 52                      push edx
:0043B47E 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B481 50                      push eax
:0043B482 E88B770000              call 00442C12
:0043B487 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B454(C)
|
:0043B48A B9180A4B00              mov ecx, 004B0A18
:0043B48F E85ACF0100              call 004583EE
:0043B494 25FF000000              and eax, 000000FF
:0043B499 83F802                  cmp eax, 00000002
:0043B49C 7414                    je 0043B4B2
:0043B49E B9180A4B00              mov ecx, 004B0A18
:0043B4A3 E846CF0100              call 004583EE
:0043B4A8 25FF000000              and eax, 000000FF
:0043B4AD 83F803                  cmp eax, 00000003
:0043B4B0 7548                    jne 0043B4FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B49C(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043B4B2 6A04                    push 00000004
:0043B4B4 B9180A4B00              mov ecx, 004B0A18
:0043B4B9 E87248FFFF              call 0042FD30
:0043B4BE F7D8                    neg eax
:0043B4C0 1BC0                    sbb eax, eax
:0043B4C2 2500120000              and eax, 00001200
:0043B4C7 0500EE0000              add eax, 0000EE00
:0043B4CC 50                      push eax
:0043B4CD B940DF4A00              mov ecx, 004ADF40
:0043B4D2 E8C780FDFF              call 0041359E
:0043B4D7 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0043B4DD 69C900090000            imul ecx, 00000900
:0043B4E3 03C1                    add eax, ecx
:0043B4E5 50                      push eax
:0043B4E6 6A30                    push 00000030
:0043B4E8 6A30                    push 00000030
:0043B4EA 8B55EC                  mov edx, dword ptr [ebp-14]
:0043B4ED 52                      push edx
:0043B4EE 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B4F1 50                      push eax
:0043B4F2 E81B770000              call 00442C12
:0043B4F7 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B4B0(C)
|
:0043B4FA 8BE5                    mov esp, ebp
:0043B4FC 5D                      pop ebp
:0043B4FD C3                      ret



* Referenced by a CALL at Address:
|:00446734   
|
:0043B4FE 55                      push ebp
:0043B4FF 8BEC                    mov ebp, esp
:0043B501 83EC14                  sub esp, 00000014
:0043B504 894DEC                  mov dword ptr [ebp-14], ecx
:0043B507 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043B50A E8A1C2FCFF              call 004077B0
:0043B50F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B512 E8EC040000              call 0043BA03
:0043B517 8B45EC                  mov eax, dword ptr [ebp-14]
:0043B51A 33C9                    xor ecx, ecx
:0043B51C 8A4810                  mov cl, byte ptr [eax+10]
:0043B51F 8B55EC                  mov edx, dword ptr [ebp-14]
:0043B522 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043B525 E876DEFEFF              call 004293A0
:0043B52A 668B00                  mov ax, word ptr [eax]
:0043B52D 50                      push eax
:0043B52E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0043B531 51                      push ecx
:0043B532 E886760000              call 00442BBD
:0043B537 83C408                  add esp, 00000008
:0043B53A 50                      push eax
:0043B53B 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043B53E E84D42FFFF              call 0042F790
:0043B543 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B546 81E2FF000000            and edx, 000000FF
:0043B54C C1E204                  shl edx, 04
:0043B54F 83EA08                  sub edx, 00000008
:0043B552 8955F8                  mov dword ptr [ebp-08], edx
:0043B555 8B45FD                  mov eax, dword ptr [ebp-03]
:0043B558 25FF000000              and eax, 000000FF
:0043B55D 83C002                  add eax, 00000002
:0043B560 C1E004                  shl eax, 04
:0043B563 8945F4                  mov dword ptr [ebp-0C], eax
:0043B566 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B569 33D2                    xor edx, edx
:0043B56B 8A5112                  mov dl, byte ptr [ecx+12]
:0043B56E 83FA01                  cmp edx, 00000001
:0043B571 7510                    jne 0043B583
:0043B573 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043B576 50                      push eax
:0043B577 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043B57A 51                      push ecx
:0043B57B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B57E E875E9FFFF              call 00439EF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B571(C)
|
:0043B583 8BE5                    mov esp, ebp
:0043B585 5D                      pop ebp
:0043B586 C3                      ret



* Referenced by a CALL at Address:
|:00446719   
|
:0043B587 55                      push ebp
:0043B588 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043B58A 6AFF                    push FFFFFFFF
:0043B58C 68123A4700              push 00473A12
:0043B591 64A100000000            mov eax, dword ptr fs:[00000000]
:0043B597 50                      push eax
:0043B598 64892500000000          mov dword ptr fs:[00000000], esp
:0043B59F 81EC1C010000            sub esp, 0000011C
:0043B5A5 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:0043B5AB 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0043B5B1 33C9                    xor ecx, ecx
:0043B5B3 8A4810                  mov cl, byte ptr [eax+10]
:0043B5B6 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:0043B5BC 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043B5C0 8885E8FEFFFF            mov byte ptr [ebp+FFFFFEE8], al
:0043B5C6 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0043B5CC 81E1FF000000            and ecx, 000000FF
:0043B5D2 6BC924                  imul ecx, 00000024
:0043B5D5 81C108F54A00            add ecx, 004AF508
:0043B5DB E8C0DDFEFF              call 004293A0
:0043B5E0 50                      push eax
:0043B5E1 E899C30000              call 0044797F
:0043B5E6 83C404                  add esp, 00000004
:0043B5E9 25FF000000              and eax, 000000FF
:0043B5EE 83F80A                  cmp eax, 0000000A
:0043B5F1 7523                    jne 0043B616
:0043B5F3 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0043B5F9 81E1FF000000            and ecx, 000000FF
:0043B5FF 6BC924                  imul ecx, 00000024
:0043B602 81C108F54A00            add ecx, 004AF508
:0043B608 E85E0CFFFF              call 0042C26B
:0043B60D 668985E0FEFFFF          mov word ptr [ebp+FFFFFEE0], ax
:0043B614 EB33                    jmp 0043B649

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B5F1(C)
|
:0043B616 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0043B61C 81E1FF000000            and ecx, 000000FF
:0043B622 51                      push ecx
:0043B623 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0043B629 81E1FF000000            and ecx, 000000FF
:0043B62F 6BC924                  imul ecx, 00000024
:0043B632 81C108F54A00            add ecx, 004AF508
:0043B638 E8C5E1FEFF              call 00429802
:0043B63D 6633D2                  xor dx, dx
:0043B640 8AD0                    mov dl, al
:0043B642 668995E0FEFFFF          mov word ptr [ebp+FFFFFEE0], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B614(U)
|
:0043B649 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B64F E8ACC0FCFF              call 00407700
:0043B654 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_ATK.E4"
                                  |
:0043B65B 68407B4700              push 00477B40
:0043B660 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B666 E8CA8CFDFF              call 00414335
:0043B66B 6800E70100              push 0001E700
:0043B670 B930DA4A00              mov ecx, 004ADA30
:0043B675 E8247FFDFF              call 0041359E
:0043B67A 50                      push eax
:0043B67B 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0043B681 25FFFF0000              and eax, 0000FFFF
:0043B686 50                      push eax
:0043B687 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B68D E8F78DFDFF              call 00414489
:0043B692 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B698 E86F4FFDFF              call 0041060C
:0043B69D 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0043B6A3 81E1FF000000            and ecx, 000000FF
:0043B6A9 6BC924                  imul ecx, 00000024
:0043B6AC 81C108F54A00            add ecx, 004AF508
:0043B6B2 E83946FFFF              call 0042FCF0
:0043B6B7 25FF000000              and eax, 000000FF
:0043B6BC 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0043B6C2 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0043B6C8 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:0043B6CE 83BDD8FEFFFF03          cmp dword ptr [ebp+FFFFFED8], 00000003
:0043B6D5 0F87D8000000            ja 0043B7B3
:0043B6DB 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:0043B6E1 FF2495D3B74300          jmp dword ptr [4*edx+0043B7D3]
:0043B6E8 6800470200              push 00024700
:0043B6ED B930DA4A00              mov ecx, 004ADA30
:0043B6F2 E8A77EFDFF              call 0041359E
:0043B6F7 8945F0                  mov dword ptr [ebp-10], eax
:0043B6FA 6800300000              push 00003000
:0043B6FF 6A00                    push 00000000
:0043B701 B930DA4A00              mov ecx, 004ADA30
:0043B706 E8937EFDFF              call 0041359E
:0043B70B 50                      push eax
:0043B70C 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B70F 50                      push eax
:0043B710 E81A710200              call 0046282F
:0043B715 83C40C                  add esp, 0000000C
:0043B718 E996000000              jmp 0043B7B3
:0043B71D 6800170200              push 00021700
:0043B722 B930DA4A00              mov ecx, 004ADA30
:0043B727 E8727EFDFF              call 0041359E
:0043B72C 8945F0                  mov dword ptr [ebp-10], eax
:0043B72F 6A00                    push 00000000
:0043B731 B930DA4A00              mov ecx, 004ADA30
:0043B736 E8637EFDFF              call 0041359E
:0043B73B 50                      push eax
:0043B73C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043B73F 51                      push ecx
:0043B740 68C0000000              push 000000C0
:0043B745 6A40                    push 00000040
:0043B747 E8EB7FFDFF              call 00413737
:0043B74C 83C410                  add esp, 00000010
:0043B74F EB62                    jmp 0043B7B3
:0043B751 6800170200              push 00021700
:0043B756 B930DA4A00              mov ecx, 004ADA30
:0043B75B E83E7EFDFF              call 0041359E
:0043B760 8945F0                  mov dword ptr [ebp-10], eax
:0043B763 6800300000              push 00003000
:0043B768 6A00                    push 00000000
:0043B76A B930DA4A00              mov ecx, 004ADA30
:0043B76F E82A7EFDFF              call 0041359E
:0043B774 50                      push eax
:0043B775 8B55F0                  mov edx, dword ptr [ebp-10]
:0043B778 52                      push edx
:0043B779 E8B1700200              call 0046282F
:0043B77E 83C40C                  add esp, 0000000C
:0043B781 EB30                    jmp 0043B7B3
:0043B783 6800E70100              push 0001E700
:0043B788 B930DA4A00              mov ecx, 004ADA30
:0043B78D E80C7EFDFF              call 0041359E
:0043B792 8945F0                  mov dword ptr [ebp-10], eax
:0043B795 6800300000              push 00003000
:0043B79A 6A00                    push 00000000
:0043B79C B930DA4A00              mov ecx, 004ADA30
:0043B7A1 E8F87DFDFF              call 0041359E
:0043B7A6 50                      push eax
:0043B7A7 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B7AA 50                      push eax
:0043B7AB E87F700200              call 0046282F
:0043B7B0 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B6D5(C), :0043B718(U), :0043B74F(U), :0043B781(U)
|
:0043B7B3 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043B7BA 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B7C0 E85BBFFCFF              call 00407720
:0043B7C5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B7C8 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043B7CF 8BE5                    mov esp, ebp
:0043B7D1 5D                      pop ebp
:0043B7D2 C3                      ret



:0043B7D3 E8B64300                DWORD 0043B6E8
:0043B7D7 1DB74300                DWORD 0043B71D
:0043B7DB 83B74300                DWORD 0043B783
:0043B7DF 51B74300                DWORD 0043B751



* Referenced by a CALL at Addresses:
|:0043CD0B   , :0044672A   
|
:0043B7E3 55                      push ebp
:0043B7E4 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043B7E6 6AFF                    push FFFFFFFF
:0043B7E8 68283A4700              push 00473A28
:0043B7ED 64A100000000            mov eax, dword ptr fs:[00000000]
:0043B7F3 50                      push eax
:0043B7F4 64892500000000          mov dword ptr fs:[00000000], esp
:0043B7FB 81EC1C010000            sub esp, 0000011C
:0043B801 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:0043B807 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B80D E8EEBEFCFF              call 00407700
:0043B812 C745FC00000000          mov [ebp-04], 00000000
:0043B819 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:0043B820 751A                    jne 0043B83C
:0043B822 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0043B828 33C9                    xor ecx, ecx
:0043B82A 8A4811                  mov cl, byte ptr [eax+11]
:0043B82D 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:0043B833 33C0                    xor eax, eax
:0043B835 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043B839 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B820(C)
|
:0043B83C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B83F 51                      push ecx
:0043B840 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B843 6BC924                  imul ecx, 00000024
:0043B846 81C108F54A00            add ecx, 004AF508
:0043B84C E8B1DFFEFF              call 00429802
:0043B851 8885E0FEFFFF            mov byte ptr [ebp+FFFFFEE0], al
:0043B857 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B85A 6BC924                  imul ecx, 00000024
:0043B85D 81C108F54A00            add ecx, 004AF508
:0043B863 E838DBFEFF              call 004293A0
:0043B868 50                      push eax
:0043B869 E811C10000              call 0044797F
:0043B86E 83C404                  add esp, 00000004
:0043B871 25FF000000              and eax, 000000FF
:0043B876 83F80A                  cmp eax, 0000000A
:0043B879 7517                    jne 0043B892
:0043B87B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B87E 6BC924                  imul ecx, 00000024
:0043B881 81C108F54A00            add ecx, 004AF508
:0043B887 E8DF09FFFF              call 0042C26B
:0043B88C 8885E0FEFFFF            mov byte ptr [ebp+FFFFFEE0], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B879(C)
|
:0043B892 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B895 6BC924                  imul ecx, 00000024
:0043B898 81C108F54A00            add ecx, 004AF508
:0043B89E E84D44FFFF              call 0042FCF0
:0043B8A3 25FF000000              and eax, 000000FF
:0043B8A8 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax

* Possible StringData Ref from Data Obj ->"CHR_DEF.E4"
                                  |
:0043B8AE 68507B4700              push 00477B50
:0043B8B3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B8B9 E8778AFDFF              call 00414335
:0043B8BE 6800E70100              push 0001E700
:0043B8C3 B930DA4A00              mov ecx, 004ADA30
:0043B8C8 E8D17CFDFF              call 0041359E
:0043B8CD 50                      push eax
:0043B8CE 8B95E0FEFFFF            mov edx, dword ptr [ebp+FFFFFEE0]
:0043B8D4 81E2FF000000            and edx, 000000FF
:0043B8DA 52                      push edx
:0043B8DB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B8E1 E8A38BFDFF              call 00414489
:0043B8E6 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B8EC E81B4DFDFF              call 0041060C
:0043B8F1 6800F90100              push 0001F900
:0043B8F6 B930DA4A00              mov ecx, 004ADA30
:0043B8FB E89E7CFDFF              call 0041359E
:0043B900 8945F0                  mov dword ptr [ebp-10], eax
:0043B903 8B450C                  mov eax, dword ptr [ebp+0C]
:0043B906 69C000120000            imul eax, 00001200
:0043B90C 0500390000              add eax, 00003900
:0043B911 50                      push eax
:0043B912 B930DA4A00              mov ecx, 004ADA30
:0043B917 E8827CFDFF              call 0041359E
:0043B91C 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0043B922 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0043B928 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:0043B92E 83BDD8FEFFFF03          cmp dword ptr [ebp+FFFFFED8], 00000003
:0043B935 0F8796000000            ja 0043B9D1
:0043B93B 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:0043B941 FF2495F3B94300          jmp dword ptr [4*edx+0043B9F3]
:0043B948 68000B0200              push 00020B00
:0043B94D B930DA4A00              mov ecx, 004ADA30
:0043B952 E8477CFDFF              call 0041359E
:0043B957 8945F0                  mov dword ptr [ebp-10], eax
:0043B95A 6800120000              push 00001200
:0043B95F 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0043B965 50                      push eax
:0043B966 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043B969 51                      push ecx
:0043B96A E8C06E0200              call 0046282F
:0043B96F 83C40C                  add esp, 0000000C
:0043B972 EB5D                    jmp 0043B9D1
:0043B974 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0043B97A 52                      push edx
:0043B97B 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B97E 50                      push eax
:0043B97F 6A60                    push 00000060
:0043B981 6A30                    push 00000030
:0043B983 E8AF7DFDFF              call 00413737
:0043B988 83C410                  add esp, 00000010
:0043B98B EB44                    jmp 0043B9D1
:0043B98D 6800120000              push 00001200
:0043B992 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0043B998 51                      push ecx
:0043B999 8B55F0                  mov edx, dword ptr [ebp-10]
:0043B99C 52                      push edx
:0043B99D E88D6E0200              call 0046282F
:0043B9A2 83C40C                  add esp, 0000000C
:0043B9A5 EB2A                    jmp 0043B9D1
:0043B9A7 6800E70100              push 0001E700
:0043B9AC B930DA4A00              mov ecx, 004ADA30
:0043B9B1 E8E87BFDFF              call 0041359E
:0043B9B6 8945F0                  mov dword ptr [ebp-10], eax
:0043B9B9 6800120000              push 00001200
:0043B9BE 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0043B9C4 50                      push eax
:0043B9C5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043B9C8 51                      push ecx
:0043B9C9 E8616E0200              call 0046282F
:0043B9CE 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B935(C), :0043B972(U), :0043B98B(U), :0043B9A5(U)
|
:0043B9D1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043B9D8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043B9DE E83DBDFCFF              call 00407720
:0043B9E3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B9E6 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043B9ED 8BE5                    mov esp, ebp
:0043B9EF 5D                      pop ebp
:0043B9F0 C20800                  ret 0008



:0043B9F3 48B94300                DWORD 0043B948
:0043B9F7 74B94300                DWORD 0043B974
:0043B9FB A7B94300                DWORD 0043B9A7
:0043B9FF 8DB94300                DWORD 0043B98D



* Referenced by a CALL at Address:
|:0043B512   
|
:0043BA03 55                      push ebp
:0043BA04 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043BA06 6AFF                    push FFFFFFFF
:0043BA08 683E3A4700              push 00473A3E
:0043BA0D 64A100000000            mov eax, dword ptr fs:[00000000]
:0043BA13 50                      push eax
:0043BA14 64892500000000          mov dword ptr fs:[00000000], esp
:0043BA1B 81EC08010000            sub esp, 00000108
:0043BA21 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0043BA27 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BA2D E8CEBCFCFF              call 00407700
:0043BA32 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:0043BA39 68F07A4700              push 00477AF0
:0043BA3E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BA44 E8EC88FDFF              call 00414335
:0043BA49 6A00                    push 00000000
:0043BA4B B930DA4A00              mov ecx, 004ADA30
:0043BA50 E8497BFDFF              call 0041359E
:0043BA55 05007B0100              add eax, 00017B00
:0043BA5A 50                      push eax
:0043BA5B 6A1F                    push 0000001F
:0043BA5D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BA63 E8218AFDFF              call 00414489
:0043BA68 6A00                    push 00000000
:0043BA6A B930DA4A00              mov ecx, 004ADA30
:0043BA6F E82A7BFDFF              call 0041359E
:0043BA74 0500960100              add eax, 00019600
:0043BA79 50                      push eax
:0043BA7A 6A20                    push 00000020
:0043BA7C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BA82 E8028AFDFF              call 00414489
:0043BA87 6A00                    push 00000000
:0043BA89 B930DA4A00              mov ecx, 004ADA30
:0043BA8E E80B7BFDFF              call 0041359E
:0043BA93 0500B10100              add eax, 0001B100
:0043BA98 50                      push eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043BA99 6A02                    push 00000002
:0043BA9B 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BAA1 E8E389FDFF              call 00414489
:0043BAA6 6A00                    push 00000000
:0043BAA8 B930DA4A00              mov ecx, 004ADA30
:0043BAAD E8EC7AFDFF              call 0041359E
:0043BAB2 0500CC0100              add eax, 0001CC00
:0043BAB7 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0043BAB8 6A10                    push 00000010
:0043BABA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BAC0 E8C489FDFF              call 00414489
:0043BAC5 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BACB E83C4BFDFF              call 0041060C
:0043BAD0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043BAD7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043BADD E83EBCFCFF              call 00407720
:0043BAE2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043BAE5 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043BAEC 8BE5                    mov esp, ebp
:0043BAEE 5D                      pop ebp
:0043BAEF C3                      ret



* Referenced by a CALL at Address:
|:0043BE2E   
|
:0043BAF0 55                      push ebp
:0043BAF1 8BEC                    mov ebp, esp
:0043BAF3 51                      push ecx
:0043BAF4 894DFC                  mov dword ptr [ebp-04], ecx
:0043BAF7 8BE5                    mov esp, ebp
:0043BAF9 5D                      pop ebp
:0043BAFA C3                      ret



* Referenced by a CALL at Address:
|:0043BF00   
|
:0043BAFB 55                      push ebp
:0043BAFC 8BEC                    mov ebp, esp
:0043BAFE 83EC08                  sub esp, 00000008
:0043BB01 894DFC                  mov dword ptr [ebp-04], ecx
:0043BB04 8B45FC                  mov eax, dword ptr [ebp-04]
:0043BB07 33C9                    xor ecx, ecx
:0043BB09 8A4812                  mov cl, byte ptr [eax+12]
:0043BB0C 83F902                  cmp ecx, 00000002
:0043BB0F 7402                    je 0043BB13
:0043BB11 EB42                    jmp 0043BB55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BB0F(C)
|
:0043BB13 8B55FC                  mov edx, dword ptr [ebp-04]
:0043BB16 8A4214                  mov al, byte ptr [edx+14]
:0043BB19 8845F8                  mov byte ptr [ebp-08], al
:0043BB1C 807DF805                cmp byte ptr [ebp-08], 05
:0043BB20 7402                    je 0043BB24
:0043BB22 EB31                    jmp 0043BB55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BB20(C)
|
:0043BB24 6A20                    push 00000020
:0043BB26 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BB29 33D2                    xor edx, edx
:0043BB2B 8A5111                  mov dl, byte ptr [ecx+11]
:0043BB2E 8B45FC                  mov eax, dword ptr [ebp-04]
:0043BB31 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043BB34 E827E0FFFF              call 00439B60
:0043BB39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BB3C 33D2                    xor edx, edx
:0043BB3E 8A5111                  mov dl, byte ptr [ecx+11]
:0043BB41 8B45FC                  mov eax, dword ptr [ebp-04]
:0043BB44 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043BB47 E8843BFFFF              call 0042F6D0
:0043BB4C 50                      push eax
:0043BB4D E8FEB30200              call 00466F50
:0043BB52 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BB11(U), :0043BB22(U)
|
:0043BB55 8BE5                    mov esp, ebp
:0043BB57 5D                      pop ebp
:0043BB58 C3                      ret



* Referenced by a CALL at Address:
|:0043BEBE   
|
:0043BB59 55                      push ebp
:0043BB5A 8BEC                    mov ebp, esp
:0043BB5C 83EC08                  sub esp, 00000008
:0043BB5F 894DF8                  mov dword ptr [ebp-08], ecx
:0043BB62 C745FC00000000          mov [ebp-04], 00000000
:0043BB69 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BB6C 33C9                    xor ecx, ecx
:0043BB6E 8A4812                  mov cl, byte ptr [eax+12]
:0043BB71 83F902                  cmp ecx, 00000002
:0043BB74 7405                    je 0043BB7B
:0043BB76 8B45FC                  mov eax, dword ptr [ebp-04]
:0043BB79 EB6B                    jmp 0043BBE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BB74(C)
|
:0043BB7B 8B55F8                  mov edx, dword ptr [ebp-08]
:0043BB7E 33C0                    xor eax, eax
:0043BB80 8A4214                  mov al, byte ptr [edx+14]
:0043BB83 83F804                  cmp eax, 00000004
:0043BB86 755B                    jne 0043BBE3
:0043BB88 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BB8B 33D2                    xor edx, edx
:0043BB8D 8A5111                  mov dl, byte ptr [ecx+11]
:0043BB90 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BB93 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043BB96 E8158DFCFF              call 004048B0
:0043BB9B 83F80A                  cmp eax, 0000000A
:0043BB9E 7609                    jbe 0043BBA9

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043BBA0 C745FC0A000000          mov [ebp-04], 0000000A
:0043BBA7 EB3A                    jmp 0043BBE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BB9E(C)
|
:0043BBA9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BBAC 33D2                    xor edx, edx
:0043BBAE 8A5111                  mov dl, byte ptr [ecx+11]
:0043BBB1 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BBB4 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043BBB7 E8F48CFCFF              call 004048B0
:0043BBBC 83F801                  cmp eax, 00000001
:0043BBBF 7709                    ja 0043BBCA
:0043BBC1 C745FC00000000          mov [ebp-04], 00000000
:0043BBC8 EB19                    jmp 0043BBE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BBBF(C)
|
:0043BBCA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BBCD 33D2                    xor edx, edx
:0043BBCF 8A5111                  mov dl, byte ptr [ecx+11]
:0043BBD2 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BBD5 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043BBD8 E8D38CFCFF              call 004048B0
:0043BBDD 83E801                  sub eax, 00000001
:0043BBE0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BB86(C), :0043BBA7(U), :0043BBC8(U)
|
:0043BBE3 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BB79(U)
|
:0043BBE6 8BE5                    mov esp, ebp
:0043BBE8 5D                      pop ebp
:0043BBE9 C3                      ret



* Referenced by a CALL at Address:
|:0043BE3C   
|
:0043BBEA 55                      push ebp
:0043BBEB 8BEC                    mov ebp, esp
:0043BBED 83EC08                  sub esp, 00000008
:0043BBF0 56                      push esi
:0043BBF1 894DF8                  mov dword ptr [ebp-08], ecx
:0043BBF4 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BBF7 33C9                    xor ecx, ecx
:0043BBF9 8A4810                  mov cl, byte ptr [eax+10]
:0043BBFC 8B55F8                  mov edx, dword ptr [ebp-08]
:0043BBFF 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BC02 E8C93AFFFF              call 0042F6D0
:0043BC07 6BC070                  imul eax, 00000070
:0043BC0A 0598224900              add eax, 00492298
:0043BC0F 8945FC                  mov dword ptr [ebp-04], eax
:0043BC12 6A1B                    push 0000001B
:0043BC14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BC17 E8A783FCFF              call 00403FC3
:0043BC1C 85C0                    test eax, eax
:0043BC1E 7460                    je 0043BC80
:0043BC20 B9180A4B00              mov ecx, 004B0A18
:0043BC25 E8C4C70100              call 004583EE
:0043BC2A 25FF000000              and eax, 000000FF
:0043BC2F 83F802                  cmp eax, 00000002
:0043BC32 7414                    je 0043BC48
:0043BC34 B9180A4B00              mov ecx, 004B0A18
:0043BC39 E8B0C70100              call 004583EE
:0043BC3E 25FF000000              and eax, 000000FF
:0043BC43 83F803                  cmp eax, 00000003
:0043BC46 7538                    jne 0043BC80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BC32(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043BC48 6A03                    push 00000003
:0043BC4A E866640200              call 004620B5
:0043BC4F 83C404                  add esp, 00000004
:0043BC52 85C0                    test eax, eax
:0043BC54 752A                    jne 0043BC80
:0043BC56 6A01                    push 00000001
:0043BC58 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BC5B 33C9                    xor ecx, ecx
:0043BC5D 8A4810                  mov cl, byte ptr [eax+10]
:0043BC60 8B55F8                  mov edx, dword ptr [ebp-08]
:0043BC63 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BC66 E8B53BFFFF              call 0042F820
:0043BC6B 50                      push eax
:0043BC6C 6A1B                    push 0000001B
:0043BC6E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BC71 E830180000              call 0043D4A6
:0043BC76 B801000000              mov eax, 00000001
:0043BC7B E9F4000000              jmp 0043BD74

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BC1E(C), :0043BC46(C), :0043BC54(C)
|
:0043BC80 6A1C                    push 0000001C
:0043BC82 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BC85 E83983FCFF              call 00403FC3
:0043BC8A 85C0                    test eax, eax
:0043BC8C 744C                    je 0043BCDA
:0043BC8E B9180A4B00              mov ecx, 004B0A18
:0043BC93 E8F8180000              call 0043D590
:0043BC98 25FF000000              and eax, 000000FF
:0043BC9D 83F81E                  cmp eax, 0000001E
:0043BCA0 7E38                    jle 0043BCDA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043BCA2 6A03                    push 00000003
:0043BCA4 E80C640200              call 004620B5
:0043BCA9 83C404                  add esp, 00000004
:0043BCAC 85C0                    test eax, eax
:0043BCAE 752A                    jne 0043BCDA
:0043BCB0 6A01                    push 00000001
:0043BCB2 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BCB5 33C9                    xor ecx, ecx
:0043BCB7 8A4810                  mov cl, byte ptr [eax+10]
:0043BCBA 8B55F8                  mov edx, dword ptr [ebp-08]
:0043BCBD 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BCC0 E85B3BFFFF              call 0042F820
:0043BCC5 50                      push eax
:0043BCC6 6A1C                    push 0000001C
:0043BCC8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BCCB E8D6170000              call 0043D4A6
:0043BCD0 B801000000              mov eax, 00000001
:0043BCD5 E99A000000              jmp 0043BD74

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BC8C(C), :0043BCA0(C), :0043BCAE(C)
|
:0043BCDA 6A1D                    push 0000001D
:0043BCDC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BCDF E8DF82FCFF              call 00403FC3
:0043BCE4 85C0                    test eax, eax
:0043BCE6 745F                    je 0043BD47
:0043BCE8 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BCEB 33C9                    xor ecx, ecx
:0043BCED 8A4810                  mov cl, byte ptr [eax+10]
:0043BCF0 8B55F8                  mov edx, dword ptr [ebp-08]
:0043BCF3 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BCF6 E8758BFCFF              call 00404870
:0043BCFB 8BF0                    mov esi, eax
:0043BCFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BD00 E8DB67FCFF              call 004024E0
:0043BD05 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0043BD07 B905000000              mov ecx, 00000005
:0043BD0C F7F1                    div ecx
:0043BD0E 3BF0                    cmp esi, eax
:0043BD10 7735                    ja 0043BD47

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043BD12 6A03                    push 00000003
:0043BD14 E89C630200              call 004620B5
:0043BD19 83C404                  add esp, 00000004
:0043BD1C 85C0                    test eax, eax
:0043BD1E 7527                    jne 0043BD47
:0043BD20 6A01                    push 00000001
:0043BD22 8B55F8                  mov edx, dword ptr [ebp-08]
:0043BD25 33C0                    xor eax, eax
:0043BD27 8A4210                  mov al, byte ptr [edx+10]
:0043BD2A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BD2D 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043BD30 E8EB3AFFFF              call 0042F820
:0043BD35 50                      push eax
:0043BD36 6A1D                    push 0000001D
:0043BD38 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BD3B E866170000              call 0043D4A6
:0043BD40 B801000000              mov eax, 00000001
:0043BD45 EB2D                    jmp 0043BD74

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BCE6(C), :0043BD10(C), :0043BD1E(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043BD47 68FF000000              push 000000FF
:0043BD4C E864630200              call 004620B5
:0043BD51 83C404                  add esp, 00000004
:0043BD54 8BF0                    mov esi, eax
:0043BD56 8B55F8                  mov edx, dword ptr [ebp-08]
:0043BD59 33C0                    xor eax, eax
:0043BD5B 8A4210                  mov al, byte ptr [edx+10]
:0043BD5E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BD61 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043BD64 E8A4E7FEFF              call 0042A50D
:0043BD69 25FF000000              and eax, 000000FF
:0043BD6E 3BF0                    cmp esi, eax
:0043BD70 1BC0                    sbb eax, eax
:0043BD72 F7D8                    neg eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BC7B(U), :0043BCD5(U), :0043BD45(U)
|
:0043BD74 5E                      pop esi
:0043BD75 8BE5                    mov esp, ebp
:0043BD77 5D                      pop ebp
:0043BD78 C3                      ret



* Referenced by a CALL at Addresses:
|:0043CD17   , :0043D054   
|
:0043BD79 55                      push ebp
:0043BD7A 8BEC                    mov ebp, esp
:0043BD7C 83EC24                  sub esp, 00000024
:0043BD7F 894DE4                  mov dword ptr [ebp-1C], ecx
:0043BD82 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BD85 33C9                    xor ecx, ecx
:0043BD87 8A4810                  mov cl, byte ptr [eax+10]
:0043BD8A 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BD8D 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BD90 E83B39FFFF              call 0042F6D0
:0043BD95 6BC070                  imul eax, 00000070
:0043BD98 0598224900              add eax, 00492298
:0043BD9D 8945F0                  mov dword ptr [ebp-10], eax
:0043BDA0 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BDA3 33C9                    xor ecx, ecx
:0043BDA5 8A4811                  mov cl, byte ptr [eax+11]
:0043BDA8 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BDAB 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BDAE E81D39FFFF              call 0042F6D0
:0043BDB3 6BC070                  imul eax, 00000070
:0043BDB6 0598224900              add eax, 00492298
:0043BDBB 8945EC                  mov dword ptr [ebp-14], eax
:0043BDBE C745F800000000          mov [ebp-08], 00000000
:0043BDC5 C745F400000000          mov [ebp-0C], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043BDCC 6A06                    push 00000006
:0043BDCE E8E2620200              call 004620B5
:0043BDD3 83C404                  add esp, 00000004
:0043BDD6 83C00F                  add eax, 0000000F
:0043BDD9 8945FC                  mov dword ptr [ebp-04], eax
:0043BDDC 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BDDF 33C9                    xor ecx, ecx
:0043BDE1 8A4812                  mov cl, byte ptr [eax+12]
:0043BDE4 83F901                  cmp ecx, 00000001
:0043BDE7 0F8580000000            jne 0043BE6D
:0043BDED 8B5508                  mov edx, dword ptr [ebp+08]
:0043BDF0 52                      push edx
:0043BDF1 6A01                    push 00000001
:0043BDF3 8B45EC                  mov eax, dword ptr [ebp-14]
:0043BDF6 50                      push eax
:0043BDF7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BDFA 33D2                    xor edx, edx
:0043BDFC 8A5110                  mov dl, byte ptr [ecx+10]
:0043BDFF 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BE02 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043BE05 E877F0FEFF              call 0042AE81
:0043BE0A 8945F8                  mov dword ptr [ebp-08], eax
:0043BE0D 837D0801                cmp dword ptr [ebp+08], 00000001
:0043BE11 730D                    jnb 0043BE20
:0043BE13 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BE16 33D2                    xor edx, edx
:0043BE18 8A5113                  mov dl, byte ptr [ecx+13]
:0043BE1B 83FA01                  cmp edx, 00000001
:0043BE1E 750B                    jne 0043BE2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BE11(C)
|
:0043BE20 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BE23 99                      cdq
:0043BE24 2BC2                    sub eax, edx
:0043BE26 D1F8                    sar eax, 1
:0043BE28 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BE1E(C)
|
:0043BE2B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BE2E E8BDFCFFFF              call 0043BAF0
:0043BE33 837DF800                cmp dword ptr [ebp-08], 00000000
:0043BE37 7E2F                    jle 0043BE68
:0043BE39 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BE3C E8A9FDFFFF              call 0043BBEA
:0043BE41 85C0                    test eax, eax
:0043BE43 7423                    je 0043BE68

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043BE45 6A0A                    push 0000000A
:0043BE47 8B45FC                  mov eax, dword ptr [ebp-04]
:0043BE4A 50                      push eax
:0043BE4B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BE4E 51                      push ecx
:0043BE4F E80C610200              call 00461F60
:0043BE54 83C40C                  add esp, 0000000C
:0043BE57 8945F8                  mov dword ptr [ebp-08], eax
:0043BE5A C745F401000000          mov [ebp-0C], 00000001
:0043BE61 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BE64 C6421901                mov [edx+19], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BE37(C), :0043BE43(C)
|
:0043BE68 E998000000              jmp 0043BF05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BDE7(C)
|
:0043BE6D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BE70 33C9                    xor ecx, ecx
:0043BE72 8A4812                  mov cl, byte ptr [eax+12]
:0043BE75 83F902                  cmp ecx, 00000002
:0043BE78 0F8587000000            jne 0043BF05
:0043BE7E 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BE81 8A4214                  mov al, byte ptr [edx+14]
:0043BE84 50                      push eax
:0043BE85 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BE88 8A5113                  mov dl, byte ptr [ecx+13]
:0043BE8B 52                      push edx
:0043BE8C 8B45EC                  mov eax, dword ptr [ebp-14]
:0043BE8F 50                      push eax
:0043BE90 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BE93 33D2                    xor edx, edx
:0043BE95 8A5111                  mov dl, byte ptr [ecx+11]
:0043BE98 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BE9B 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043BE9E 51                      push ecx
:0043BE9F 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BEA2 33C0                    xor eax, eax
:0043BEA4 8A4210                  mov al, byte ptr [edx+10]
:0043BEA7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BEAA 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043BEAD E8BDD1FFFF              call 0043906F
:0043BEB2 8945F8                  mov dword ptr [ebp-08], eax
:0043BEB5 837DF800                cmp dword ptr [ebp-08], 00000000
:0043BEB9 7E4A                    jle 0043BF05
:0043BEBB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BEBE E896FCFFFF              call 0043BB59
:0043BEC3 8945E8                  mov dword ptr [ebp-18], eax
:0043BEC6 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BEC9 33C0                    xor eax, eax
:0043BECB 8A4211                  mov al, byte ptr [edx+11]
:0043BECE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BED1 8B548124                mov edx, dword ptr [ecx+4*eax+24]
:0043BED5 3B55E8                  cmp edx, dword ptr [ebp-18]
:0043BED8 7314                    jnb 0043BEEE
:0043BEDA 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BEDD 33C9                    xor ecx, ecx
:0043BEDF 8A4811                  mov cl, byte ptr [eax+11]
:0043BEE2 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BEE5 8B448A24                mov eax, dword ptr [edx+4*ecx+24]
:0043BEE9 8945E0                  mov dword ptr [ebp-20], eax
:0043BEEC EB06                    jmp 0043BEF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BED8(C)
|
:0043BEEE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043BEF1 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BEEC(U)
|
:0043BEF4 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BEF7 8B45E0                  mov eax, dword ptr [ebp-20]
:0043BEFA 894238                  mov dword ptr [edx+38], eax
:0043BEFD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BF00 E8F6FBFFFF              call 0043BAFB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BE68(U), :0043BE78(C), :0043BEB9(C)
|
:0043BF05 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BF08 33D2                    xor edx, edx
:0043BF0A 8A5111                  mov dl, byte ptr [ecx+11]
:0043BF0D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BF10 8B4C901C                mov ecx, dword ptr [eax+4*edx+1C]
:0043BF14 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0043BF17 7D14                    jge 0043BF2D
:0043BF19 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043BF1C 33C0                    xor eax, eax
:0043BF1E 8A4211                  mov al, byte ptr [edx+11]
:0043BF21 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BF24 8B54811C                mov edx, dword ptr [ecx+4*eax+1C]
:0043BF28 8955DC                  mov dword ptr [ebp-24], edx
:0043BF2B EB06                    jmp 0043BF33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BF17(C)
|
:0043BF2D 8B45F8                  mov eax, dword ptr [ebp-08]
:0043BF30 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BF2B(U)
|
:0043BF33 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BF36 8B55DC                  mov edx, dword ptr [ebp-24]
:0043BF39 895134                  mov dword ptr [ecx+34], edx
:0043BF3C 8BE5                    mov esp, ebp
:0043BF3E 5D                      pop ebp
:0043BF3F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043CF22   , :0043D05C   
|
:0043BF42 55                      push ebp
:0043BF43 8BEC                    mov ebp, esp
:0043BF45 83EC10                  sub esp, 00000010
:0043BF48 894DF0                  mov dword ptr [ebp-10], ecx
:0043BF4B 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BF4E 33C9                    xor ecx, ecx
:0043BF50 8A4810                  mov cl, byte ptr [eax+10]
:0043BF53 8B55F0                  mov edx, dword ptr [ebp-10]
:0043BF56 8B4C8A08                mov ecx, dword ptr [edx+4*ecx+08]
:0043BF5A E87188FCFF              call 004047D0
:0043BF5F 25FF000000              and eax, 000000FF
:0043BF64 8945F8                  mov dword ptr [ebp-08], eax
:0043BF67 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BF6A 33C9                    xor ecx, ecx
:0043BF6C 8A4811                  mov cl, byte ptr [eax+11]
:0043BF6F 8B55F0                  mov edx, dword ptr [ebp-10]
:0043BF72 8B4C8A08                mov ecx, dword ptr [edx+4*ecx+08]
:0043BF76 E85588FCFF              call 004047D0
:0043BF7B 25FF000000              and eax, 000000FF
:0043BF80 8945F4                  mov dword ptr [ebp-0C], eax
:0043BF83 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BF86 33C9                    xor ecx, ecx
:0043BF88 8A4810                  mov cl, byte ptr [eax+10]
:0043BF8B 8B55F0                  mov edx, dword ptr [ebp-10]
:0043BF8E 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BF91 E83A37FFFF              call 0042F6D0
:0043BF96 8BC8                    mov ecx, eax
:0043BF98 6BC970                  imul ecx, 00000070
:0043BF9B 81C198224900            add ecx, 00492298
:0043BFA1 E84A89FCFF              call 004048F0
:0043BFA6 25FF000000              and eax, 000000FF
:0043BFAB 85C0                    test eax, eax
:0043BFAD 7405                    je 0043BFB4
:0043BFAF E94B010000              jmp 0043C0FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BFAD(C)
|
:0043BFB4 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BFB7 C7403C00000000          mov [eax+3C], 00000000
:0043BFBE C745FC00000000          mov [ebp-04], 00000000
:0043BFC5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043BFC8 33D2                    xor edx, edx
:0043BFCA 8A5111                  mov dl, byte ptr [ecx+11]
:0043BFCD 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BFD0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043BFD3 8B54901C                mov edx, dword ptr [eax+4*edx+1C]
:0043BFD7 2B5134                  sub edx, dword ptr [ecx+34]
:0043BFDA 85D2                    test edx, edx
:0043BFDC 754E                    jne 0043C02C
:0043BFDE 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BFE1 33C9                    xor ecx, ecx
:0043BFE3 8A4811                  mov cl, byte ptr [eax+11]
:0043BFE6 8B55F0                  mov edx, dword ptr [ebp-10]
:0043BFE9 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043BFEC E82F38FFFF              call 0042F820
:0043BFF1 25FF000000              and eax, 000000FF
:0043BFF6 83F81E                  cmp eax, 0000001E
:0043BFF9 7509                    jne 0043C004
:0043BFFB C745FC30000000          mov [ebp-04], 00000030
:0043C002 EB26                    jmp 0043C02A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BFF9(C)
|
:0043C004 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C007 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0043C00A 7309                    jnb 0043C015
:0043C00C C745FC20000000          mov [ebp-04], 00000020
:0043C013 EB15                    jmp 0043C02A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C00A(C)
|
:0043C015 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C018 2B4DF4                  sub ecx, dword ptr [ebp-0C]
:0043C01B 83C102                  add ecx, 00000002
:0043C01E B840000000              mov eax, 00000040
:0043C023 33D2                    xor edx, edx
:0043C025 F7F1                    div ecx
:0043C027 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C002(U), :0043C013(U)
|
:0043C02A EB32                    jmp 0043C05E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BFDC(C)
|
:0043C02C 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C02F 83C205                  add edx, 00000005
:0043C032 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0043C035 7709                    ja 0043C040

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0043C037 C745FC10000000          mov [ebp-04], 00000010
:0043C03E EB1E                    jmp 0043C05E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C035(C)
|
:0043C040 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C043 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0043C046 7609                    jbe 0043C051

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043C048 C745FC04000000          mov [ebp-04], 00000004
:0043C04F EB0D                    jmp 0043C05E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C046(C)
|
:0043C051 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043C054 2B4DF8                  sub ecx, dword ptr [ebp-08]
:0043C057 8D540906                lea edx, dword ptr [ecx+ecx+06]
:0043C05B 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C02A(U), :0043C03E(U), :0043C04F(U)
|
:0043C05E 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C061 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C064 894840                  mov dword ptr [eax+40], ecx
:0043C067 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C06A 33C0                    xor eax, eax
:0043C06C 8A4210                  mov al, byte ptr [edx+10]
:0043C06F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C072 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C075 E8D63CFFFF              call 0042FD50
:0043C07A 25FF000000              and eax, 000000FF
:0043C07F 83F803                  cmp eax, 00000003
:0043C082 7519                    jne 0043C09D

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043C084 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00015: ""
                                  |
:0043C086 6A0F                    push 0000000F
:0043C088 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C08B 8B4240                  mov eax, dword ptr [edx+40]
:0043C08E 50                      push eax
:0043C08F E8CC5E0200              call 00461F60
:0043C094 83C40C                  add esp, 0000000C
:0043C097 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C09A 894140                  mov dword ptr [ecx+40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C082(C)
|

* Possible Reference to String Resource ID=00013: ""
                                  |
:0043C09D 6A0D                    push 0000000D
:0043C09F 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C0A2 33C0                    xor eax, eax
:0043C0A4 8A4210                  mov al, byte ptr [edx+10]
:0043C0A7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C0AA 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C0AD E81E36FFFF              call 0042F6D0
:0043C0B2 8BC8                    mov ecx, eax
:0043C0B4 6BC970                  imul ecx, 00000070
:0043C0B7 81C198224900            add ecx, 00492298
:0043C0BD E8017FFCFF              call 00403FC3
:0043C0C2 85C0                    test eax, eax
:0043C0C4 7439                    je 0043C0FF
:0043C0C6 6A01                    push 00000001
:0043C0C8 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C0CB 33C0                    xor eax, eax
:0043C0CD 8A4210                  mov al, byte ptr [edx+10]
:0043C0D0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C0D3 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C0D6 E84537FFFF              call 0042F820
:0043C0DB 50                      push eax

* Possible Reference to String Resource ID=00013: ""
                                  |
:0043C0DC 6A0D                    push 0000000D
:0043C0DE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C0E1 E8C0130000              call 0043D4A6

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043C0E6 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00013: ""
                                  |
:0043C0E8 6A0D                    push 0000000D
:0043C0EA 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C0ED 8B4240                  mov eax, dword ptr [edx+40]
:0043C0F0 50                      push eax
:0043C0F1 E86A5E0200              call 00461F60
:0043C0F6 83C40C                  add esp, 0000000C
:0043C0F9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C0FC 894140                  mov dword ptr [ecx+40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BFAF(U), :0043C0C4(C)
|
:0043C0FF 8BE5                    mov esp, ebp
:0043C101 5D                      pop ebp
:0043C102 C3                      ret



* Referenced by a CALL at Address:
|:0043D175   
|
:0043C103 55                      push ebp
:0043C104 8BEC                    mov ebp, esp
:0043C106 51                      push ecx
:0043C107 894DFC                  mov dword ptr [ebp-04], ecx
:0043C10A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C10D 33C9                    xor ecx, ecx
:0043C10F 8A4813                  mov cl, byte ptr [eax+13]
:0043C112 83F901                  cmp ecx, 00000001
:0043C115 7510                    jne 0043C127
:0043C117 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C11A 8A4215                  mov al, byte ptr [edx+15]
:0043C11D 24BF                    and al, BF
:0043C11F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C122 884115                  mov byte ptr [ecx+15], al
:0043C125 EB57                    jmp 0043C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C115(C)
|
:0043C127 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C12A 33C0                    xor eax, eax
:0043C12C 8A4213                  mov al, byte ptr [edx+13]
:0043C12F 83F802                  cmp eax, 00000002
:0043C132 7511                    jne 0043C145
:0043C134 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C137 8A5115                  mov dl, byte ptr [ecx+15]
:0043C13A 80E2BF                  and dl, BF
:0043C13D 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C140 885015                  mov byte ptr [eax+15], dl
:0043C143 EB39                    jmp 0043C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C132(C)
|
:0043C145 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C148 33D2                    xor edx, edx
:0043C14A 8A5112                  mov dl, byte ptr [ecx+12]
:0043C14D 83FA01                  cmp edx, 00000001
:0043C150 7511                    jne 0043C163
:0043C152 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C155 8A4815                  mov cl, byte ptr [eax+15]
:0043C158 80C940                  or cl, 40
:0043C15B 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C15E 884A15                  mov byte ptr [edx+15], cl
:0043C161 EB1B                    jmp 0043C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C150(C)
|
:0043C163 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C166 33C9                    xor ecx, ecx
:0043C168 8A4812                  mov cl, byte ptr [eax+12]
:0043C16B 83F902                  cmp ecx, 00000002
:0043C16E 750E                    jne 0043C17E
:0043C170 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C173 8A4215                  mov al, byte ptr [edx+15]
:0043C176 24BF                    and al, BF
:0043C178 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C17B 884115                  mov byte ptr [ecx+15], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C125(U), :0043C143(U), :0043C161(U), :0043C16E(C)
|
:0043C17E 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C181 33C0                    xor eax, eax
:0043C183 8A4215                  mov al, byte ptr [edx+15]
:0043C186 83E040                  and eax, 00000040
:0043C189 85C0                    test eax, eax
:0043C18B 7505                    jne 0043C192
:0043C18D E977010000              jmp 0043C309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C18B(C)
|
:0043C192 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C195 33D2                    xor edx, edx
:0043C197 8A5111                  mov dl, byte ptr [ecx+11]
:0043C19A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C19D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C1A0 8B54901C                mov edx, dword ptr [eax+4*edx+1C]
:0043C1A4 2B5134                  sub edx, dword ptr [ecx+34]
:0043C1A7 85D2                    test edx, edx
:0043C1A9 7514                    jne 0043C1BF
:0043C1AB 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C1AE 8A4815                  mov cl, byte ptr [eax+15]
:0043C1B1 80E1BF                  and cl, BF
:0043C1B4 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C1B7 884A15                  mov byte ptr [edx+15], cl
:0043C1BA E94A010000              jmp 0043C309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C1A9(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0043C1BF 6A10                    push 00000010
:0043C1C1 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C1C4 33C9                    xor ecx, ecx
:0043C1C6 8A4811                  mov cl, byte ptr [eax+11]
:0043C1C9 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C1CC 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C1CF E88C35FFFF              call 0042F760
:0043C1D4 85C0                    test eax, eax
:0043C1D6 7414                    je 0043C1EC
:0043C1D8 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C1DB 8A4815                  mov cl, byte ptr [eax+15]
:0043C1DE 80E1BF                  and cl, BF
:0043C1E1 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C1E4 884A15                  mov byte ptr [edx+15], cl
:0043C1E7 E91D010000              jmp 0043C309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C1D6(C)
|
:0043C1EC 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C1EF 33C9                    xor ecx, ecx
:0043C1F1 8A4811                  mov cl, byte ptr [eax+11]
:0043C1F4 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C1F7 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C1FA E8513BFFFF              call 0042FD50
:0043C1FF 25FF000000              and eax, 000000FF
:0043C204 83F803                  cmp eax, 00000003
:0043C207 7514                    jne 0043C21D
:0043C209 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C20C 8A4815                  mov cl, byte ptr [eax+15]
:0043C20F 80E1BF                  and cl, BF
:0043C212 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C215 884A15                  mov byte ptr [edx+15], cl
:0043C218 E9EC000000              jmp 0043C309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C207(C)
|
:0043C21D 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C220 33C9                    xor ecx, ecx
:0043C222 8A4811                  mov cl, byte ptr [eax+11]
:0043C225 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C228 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C22B E8203BFFFF              call 0042FD50
:0043C230 25FF000000              and eax, 000000FF
:0043C235 83F804                  cmp eax, 00000004
:0043C238 7514                    jne 0043C24E
:0043C23A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C23D 8A4815                  mov cl, byte ptr [eax+15]
:0043C240 80E1BF                  and cl, BF
:0043C243 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C246 884A15                  mov byte ptr [edx+15], cl
:0043C249 E9BB000000              jmp 0043C309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C238(C)
|
:0043C24E 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C251 33C9                    xor ecx, ecx
:0043C253 8A4811                  mov cl, byte ptr [eax+11]
:0043C256 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C259 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C25C E86F34FFFF              call 0042F6D0
:0043C261 8BC8                    mov ecx, eax
:0043C263 6BC970                  imul ecx, 00000070
:0043C266 81C198224900            add ecx, 00492298
:0043C26C E87F85FCFF              call 004047F0
:0043C271 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043C276 3DFF000000              cmp eax, 000000FF
:0043C27B 7511                    jne 0043C28E
:0043C27D 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C280 8A4815                  mov cl, byte ptr [eax+15]
:0043C283 80E1BF                  and cl, BF
:0043C286 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C289 884A15                  mov byte ptr [edx+15], cl
:0043C28C EB7B                    jmp 0043C309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C27B(C)
|
:0043C28E 6A1E                    push 0000001E
:0043C290 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C293 33C9                    xor ecx, ecx
:0043C295 8A4810                  mov cl, byte ptr [eax+10]
:0043C298 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C29B 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C29E E82D34FFFF              call 0042F6D0
:0043C2A3 8BC8                    mov ecx, eax
:0043C2A5 6BC970                  imul ecx, 00000070
:0043C2A8 81C198224900            add ecx, 00492298
:0043C2AE E8107DFCFF              call 00403FC3
:0043C2B3 85C0                    test eax, eax
:0043C2B5 7452                    je 0043C309
:0043C2B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C2BA 33C9                    xor ecx, ecx
:0043C2BC 8A4810                  mov cl, byte ptr [eax+10]
:0043C2BF 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C2C2 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C2C5 E81634FFFF              call 0042F6E0
:0043C2CA 50                      push eax

* Possible StringData Ref from Data Obj ->"%sSDI"
                                  |
:0043C2CB 68748D4700              push 00478D74
:0043C2D0 6A00                    push 00000000
:0043C2D2 E895C8FEFF              call 00428B6C
:0043C2D7 83C40C                  add esp, 0000000C
:0043C2DA 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C2DD 8A4815                  mov cl, byte ptr [eax+15]
:0043C2E0 80E1BF                  and cl, BF
:0043C2E3 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C2E6 884A15                  mov byte ptr [edx+15], cl
:0043C2E9 6A01                    push 00000001
:0043C2EB 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C2EE 33C9                    xor ecx, ecx
:0043C2F0 8A4810                  mov cl, byte ptr [eax+10]
:0043C2F3 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C2F6 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C2F9 E82235FFFF              call 0042F820
:0043C2FE 50                      push eax
:0043C2FF 6A1E                    push 0000001E
:0043C301 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C304 E89D110000              call 0043D4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C18D(U), :0043C1BA(U), :0043C1E7(U), :0043C218(U), :0043C249(U)
|:0043C28C(U), :0043C2B5(C)
|
:0043C309 8BE5                    mov esp, ebp
:0043C30B 5D                      pop ebp
:0043C30C C3                      ret



* Referenced by a CALL at Addresses:
|:0043CF2A   , :0043D10E   
|
:0043C30D 55                      push ebp
:0043C30E 8BEC                    mov ebp, esp
:0043C310 83EC08                  sub esp, 00000008
:0043C313 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043C316 6A04                    push 00000004
:0043C318 B9A8134800              mov ecx, 004813A8
:0043C31D E8D2BDFCFF              call 004080F4
:0043C322 6A4F                    push 0000004F
:0043C324 B9A8134800              mov ecx, 004813A8
:0043C329 E82ABDFCFF              call 00408058
:0043C32E 6A00                    push 00000000
:0043C330 B9A8134800              mov ecx, 004813A8
:0043C335 E856BDFCFF              call 00408090
:0043C33A 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C33D 83783400                cmp dword ptr [eax+34], 00000000
:0043C341 7546                    jne 0043C389
:0043C343 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C346 33D2                    xor edx, edx
:0043C348 8A5112                  mov dl, byte ptr [ecx+12]
:0043C34B 83FA02                  cmp edx, 00000002
:0043C34E 7511                    jne 0043C361

* Possible StringData Ref from Data Obj ->"oNޥѤFC"
                                  |
:0043C350 68888D4700              push 00478D88
:0043C355 6A00                    push 00000000
:0043C357 E810C8FEFF              call 00428B6C
:0043C35C 83C408                  add esp, 00000008
:0043C35F EB23                    jmp 0043C384

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C34E(C)
|
:0043C361 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C364 33C9                    xor ecx, ecx
:0043C366 8A4811                  mov cl, byte ptr [eax+11]
:0043C369 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C36C 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C36F E86C33FFFF              call 0042F6E0
:0043C374 50                      push eax

* Possible StringData Ref from Data Obj ->"%s}FC"
                                  |
:0043C375 68988D4700              push 00478D98
:0043C37A 6A00                    push 00000000
:0043C37C E8EBC7FEFF              call 00428B6C
:0043C381 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C35F(U)
|
:0043C384 E955010000              jmp 0043C4DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C341(C)
|
:0043C389 B9C8E24A00              mov ecx, 004AE2C8
:0043C38E E83D2EFDFF              call 0040F1D0
:0043C393 83E010                  and eax, 00000010
:0043C396 85C0                    test eax, eax
:0043C398 7544                    jne 0043C3DE
:0043C39A C745FC00000000          mov [ebp-04], 00000000
:0043C3A1 EB09                    jmp 0043C3AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C3D7(U)
|
:0043C3A3 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C3A6 83C001                  add eax, 00000001
:0043C3A9 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C3A1(U)
|
:0043C3AC 837DFC03                cmp dword ptr [ebp-04], 00000003
:0043C3B0 7327                    jnb 0043C3D9
:0043C3B2 6A4F                    push 0000004F
:0043C3B4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C3B7 8B5134                  mov edx, dword ptr [ecx+34]
:0043C3BA 52                      push edx
:0043C3BB 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C3BE 33C9                    xor ecx, ecx
:0043C3C0 8A4811                  mov cl, byte ptr [eax+11]
:0043C3C3 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C3C6 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C3C9 E85234FFFF              call 0042F820
:0043C3CE 50                      push eax
:0043C3CF E8B75A0000              call 00441E8B
:0043C3D4 83C40C                  add esp, 0000000C
:0043C3D7 EBCA                    jmp 0043C3A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C3B0(C)
|
:0043C3D9 E900010000              jmp 0043C4DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C398(C)
|
:0043C3DE 33C0                    xor eax, eax
:0043C3E0 A03D0A4B00              mov al, byte ptr [004B0A3D]
:0043C3E5 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:0043C3E9 51                      push ecx
:0043C3EA B9F8F44A00              mov ecx, 004AF4F8
:0043C3EF E89C90FEFF              call 00425490
:0043C3F4 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C3F7 33C0                    xor eax, eax
:0043C3F9 8A4210                  mov al, byte ptr [edx+10]
:0043C3FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C3FF 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043C403 52                      push edx
:0043C404 66A190034B00            mov ax, word ptr [004B0390]
:0043C40A 50                      push eax
:0043C40B E8CC5D0000              call 004421DC
:0043C410 83C408                  add esp, 00000008
:0043C413 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C416 33D2                    xor edx, edx
:0043C418 8A5111                  mov dl, byte ptr [ecx+11]
:0043C41B 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C41E 8A4C1046                mov cl, byte ptr [eax+edx+46]
:0043C422 51                      push ecx
:0043C423 668B152C024B00          mov dx, word ptr [004B022C]
:0043C42A 52                      push edx
:0043C42B E8AC5D0000              call 004421DC
:0043C430 83C408                  add esp, 00000008
:0043C433 E858A7FEFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043C438 6A03                    push 00000003
:0043C43A E805A9FEFF              call 00426D44
:0043C43F 83C404                  add esp, 00000004
:0043C442 33C0                    xor eax, eax
:0043C444 A03D0A4B00              mov al, byte ptr [004B0A3D]
:0043C449 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:0043C44D 51                      push ecx
:0043C44E B9F8F44A00              mov ecx, 004AF4F8
:0043C453 E83890FEFF              call 00425490
:0043C458 6A00                    push 00000000
:0043C45A 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C45D 8B4234                  mov eax, dword ptr [edx+34]
:0043C460 50                      push eax
:0043C461 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C464 33D2                    xor edx, edx
:0043C466 8A5111                  mov dl, byte ptr [ecx+11]
:0043C469 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C46C 8A4C1046                mov cl, byte ptr [eax+edx+46]
:0043C470 51                      push ecx
:0043C471 668B152C024B00          mov dx, word ptr [004B022C]
:0043C478 52                      push edx
:0043C479 E80E600000              call 0044248C
:0043C47E 83C410                  add esp, 00000010
:0043C481 6A01                    push 00000001
:0043C483 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C486 8B4838                  mov ecx, dword ptr [eax+38]
:0043C489 51                      push ecx
:0043C48A 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C48D 33C0                    xor eax, eax
:0043C48F 8A4211                  mov al, byte ptr [edx+11]
:0043C492 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C495 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043C499 52                      push edx
:0043C49A 66A12C024B00            mov ax, word ptr [004B022C]
:0043C4A0 50                      push eax
:0043C4A1 E8E65F0000              call 0044248C
:0043C4A6 83C410                  add esp, 00000010
:0043C4A9 E8E2A6FEFF              call 00426B90

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043C4AE 6A03                    push 00000003
:0043C4B0 E88FA8FEFF              call 00426D44
:0043C4B5 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0043C4B8 6A09                    push 00000009
:0043C4BA 6A21                    push 00000021
:0043C4BC 33C9                    xor ecx, ecx
:0043C4BE 8A0D2D024B00            mov cl, byte ptr [004B022D]
:0043C4C4 83C102                  add ecx, 00000002
:0043C4C7 51                      push ecx
:0043C4C8 33D2                    xor edx, edx
:0043C4CA 8A1528024B00            mov dl, byte ptr [004B0228]
:0043C4D0 83C206                  add edx, 00000006
:0043C4D3 52                      push edx
:0043C4D4 B9A8034B00              mov ecx, 004B03A8
:0043C4D9 E8E8820000              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C384(U), :0043C3D9(U)
|
:0043C4DE B9800D4B00              mov ecx, 004B0D80
:0043C4E3 E899560200              call 00461B81
:0043C4E8 8BE5                    mov esp, ebp
:0043C4EA 5D                      pop ebp
:0043C4EB C3                      ret



* Referenced by a CALL at Addresses:
|:0043CF32   , :0043D116   
|
:0043C4EC 55                      push ebp
:0043C4ED 8BEC                    mov ebp, esp
:0043C4EF 51                      push ecx
:0043C4F0 894DFC                  mov dword ptr [ebp-04], ecx
:0043C4F3 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C4F6 33C9                    xor ecx, ecx
:0043C4F8 8A4811                  mov cl, byte ptr [eax+11]
:0043C4FB 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C4FE 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C501 8B4C8A1C                mov ecx, dword ptr [edx+4*ecx+1C]
:0043C505 2B4834                  sub ecx, dword ptr [eax+34]
:0043C508 51                      push ecx
:0043C509 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C50C 33C0                    xor eax, eax
:0043C50E 8A4211                  mov al, byte ptr [edx+11]
:0043C511 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C514 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C517 E844E4FEFF              call 0042A960
:0043C51C 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C51F 33C0                    xor eax, eax
:0043C521 8A4211                  mov al, byte ptr [edx+11]
:0043C524 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C527 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C52A 8B448124                mov eax, dword ptr [ecx+4*eax+24]
:0043C52E 2B4238                  sub eax, dword ptr [edx+38]
:0043C531 50                      push eax
:0043C532 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C535 33D2                    xor edx, edx
:0043C537 8A5111                  mov dl, byte ptr [ecx+11]
:0043C53A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C53D 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043C540 E878E4FEFF              call 0042A9BD
:0043C545 6A01                    push 00000001
:0043C547 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C54A 33D2                    xor edx, edx
:0043C54C 8A5110                  mov dl, byte ptr [ecx+10]
:0043C54F 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C552 8B4C9008                mov ecx, dword ptr [eax+4*edx+08]
:0043C556 E825D6FFFF              call 00439B80
:0043C55B 25FF000000              and eax, 000000FF
:0043C560 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C563 03413C                  add eax, dword ptr [ecx+3C]
:0043C566 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C569 034240                  add eax, dword ptr [edx+40]
:0043C56C 50                      push eax
:0043C56D 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C570 33C9                    xor ecx, ecx
:0043C572 8A4810                  mov cl, byte ptr [eax+10]
:0043C575 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C578 8B4C8A08                mov ecx, dword ptr [edx+4*ecx+08]
:0043C57C E88766FCFF              call 00402C08
:0043C581 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C584 33C9                    xor ecx, ecx
:0043C586 8A4811                  mov cl, byte ptr [eax+11]
:0043C589 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C58C 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C58F E8422FFFFF              call 0042F4D6
:0043C594 85C0                    test eax, eax
:0043C596 7413                    je 0043C5AB
:0043C598 8B45FC                  mov eax, dword ptr [ebp-04]
:0043C59B 33C9                    xor ecx, ecx
:0043C59D 8A4811                  mov cl, byte ptr [eax+11]
:0043C5A0 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C5A3 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C5A6 E8C900FFFF              call 0042C674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C596(C)
|
:0043C5AB 8BE5                    mov esp, ebp
:0043C5AD 5D                      pop ebp
:0043C5AE C3                      ret



* Referenced by a CALL at Addresses:
|:0043CC26   , :0043D048   , :0043D16D   , :0043D317   
|
:0043C5AF 55                      push ebp
:0043C5B0 8BEC                    mov ebp, esp
:0043C5B2 83EC14                  sub esp, 00000014
:0043C5B5 894DF0                  mov dword ptr [ebp-10], ecx
:0043C5B8 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C5BB 8A4D10                  mov cl, byte ptr [ebp+10]
:0043C5BE 884812                  mov byte ptr [eax+12], cl
:0043C5C1 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C5C4 8A4514                  mov al, byte ptr [ebp+14]
:0043C5C7 884213                  mov byte ptr [edx+13], al
:0043C5CA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C5CD 8A5518                  mov dl, byte ptr [ebp+18]
:0043C5D0 885114                  mov byte ptr [ecx+14], dl
:0043C5D3 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C5D6 C6401501                mov [eax+15], 01
:0043C5DA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C5DD C6411900                mov [ecx+19], 00
:0043C5E1 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C5E4 C7425C00000000          mov [edx+5C], 00000000
:0043C5EB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C5EE E86D0E0000              call 0043D460
:0043C5F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C5F6 81E1FF000000            and ecx, 000000FF
:0043C5FC 6BC924                  imul ecx, 00000024
:0043C5FF 81C108F54A00            add ecx, 004AF508
:0043C605 E8C62CFDFF              call 0040F2D0
:0043C60A 85C0                    test eax, eax
:0043C60C 743B                    je 0043C649
:0043C60E 8B4508                  mov eax, dword ptr [ebp+08]
:0043C611 25FF000000              and eax, 000000FF
:0043C616 6BC024                  imul eax, 00000024
:0043C619 0508F54A00              add eax, 004AF508
:0043C61E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C621 8901                    mov dword ptr [ecx], eax
:0043C623 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C626 C6421000                mov [edx+10], 00
:0043C62A 8B450C                  mov eax, dword ptr [ebp+0C]
:0043C62D 25FF000000              and eax, 000000FF
:0043C632 6BC024                  imul eax, 00000024
:0043C635 0508F54A00              add eax, 004AF508
:0043C63A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C63D 894104                  mov dword ptr [ecx+04], eax
:0043C640 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C643 C6421101                mov [edx+11], 01
:0043C647 EB39                    jmp 0043C682

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C60C(C)
|
:0043C649 8B4508                  mov eax, dword ptr [ebp+08]
:0043C64C 25FF000000              and eax, 000000FF
:0043C651 6BC024                  imul eax, 00000024
:0043C654 0508F54A00              add eax, 004AF508
:0043C659 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C65C 894104                  mov dword ptr [ecx+04], eax
:0043C65F 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C662 C6421001                mov [edx+10], 01
:0043C666 8B450C                  mov eax, dword ptr [ebp+0C]
:0043C669 25FF000000              and eax, 000000FF
:0043C66E 6BC024                  imul eax, 00000024
:0043C671 0508F54A00              add eax, 004AF508
:0043C676 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C679 8901                    mov dword ptr [ecx], eax
:0043C67B 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C67E C6421100                mov [edx+11], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C647(U)
|
:0043C682 C745F800000000          mov [ebp-08], 00000000
:0043C689 EB09                    jmp 0043C694

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C708(U)
|
:0043C68B 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C68E 83C001                  add eax, 00000001
:0043C691 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C689(U)
|
:0043C694 837DF802                cmp dword ptr [ebp-08], 00000002
:0043C698 7370                    jnb 0043C70A
:0043C69A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C69D 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C6A0 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C6A3 E82830FFFF              call 0042F6D0
:0043C6A8 6BC070                  imul eax, 00000070
:0043C6AB 0598224900              add eax, 00492298
:0043C6B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C6B3 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C6B6 89448A08                mov dword ptr [edx+4*ecx+08], eax
:0043C6BA 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C6BD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C6C0 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C6C3 E8A881FCFF              call 00404870
:0043C6C8 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C6CB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C6CE 8944911C                mov dword ptr [ecx+4*edx+1C], eax
:0043C6D2 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C6D5 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C6D8 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043C6DB E8D081FCFF              call 004048B0
:0043C6E0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C6E3 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C6E6 89448A24                mov dword ptr [edx+4*ecx+24], eax
:0043C6EA 8B45F8                  mov eax, dword ptr [ebp-08]
:0043C6ED 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C6F0 8B4C8108                mov ecx, dword ptr [ecx+4*eax+08]
:0043C6F4 E87780FCFF              call 00404770
:0043C6F9 25FF000000              and eax, 000000FF
:0043C6FE 8B55F8                  mov edx, dword ptr [ebp-08]
:0043C701 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C704 8944912C                mov dword ptr [ecx+4*edx+2C], eax
:0043C708 EB81                    jmp 0043C68B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C698(C)
|
:0043C70A 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C70D 33C0                    xor eax, eax
:0043C70F 8A4210                  mov al, byte ptr [edx+10]
:0043C712 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C715 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C718 E8B32FFFFF              call 0042F6D0
:0043C71D 8BC8                    mov ecx, eax
:0043C71F 6BC970                  imul ecx, 00000070
:0043C722 81C198224900            add ecx, 00492298
:0043C728 E8CF5EFCFF              call 004025FC
:0043C72D 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C730 33C9                    xor ecx, ecx
:0043C732 8A4A10                  mov cl, byte ptr [edx+10]
:0043C735 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C738 88440A44                mov byte ptr [edx+ecx+44], al
:0043C73C 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C73F 33C9                    xor ecx, ecx
:0043C741 8A4811                  mov cl, byte ptr [eax+11]
:0043C744 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C747 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043C74A E8812FFFFF              call 0042F6D0
:0043C74F 8BC8                    mov ecx, eax
:0043C751 6BC970                  imul ecx, 00000070
:0043C754 81C198224900            add ecx, 00492298
:0043C75A E89D5EFCFF              call 004025FC
:0043C75F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C762 33D2                    xor edx, edx
:0043C764 8A5111                  mov dl, byte ptr [ecx+11]
:0043C767 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C76A 88441144                mov byte ptr [ecx+edx+44], al
:0043C76E 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C771 33C0                    xor eax, eax
:0043C773 8A4210                  mov al, byte ptr [edx+10]
:0043C776 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C779 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C77C E8CF35FFFF              call 0042FD50
:0043C781 8845FC                  mov byte ptr [ebp-04], al
:0043C784 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C787 33C0                    xor eax, eax
:0043C789 8A4211                  mov al, byte ptr [edx+11]
:0043C78C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C78F 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043C792 E8B935FFFF              call 0042FD50
:0043C797 8845F4                  mov byte ptr [ebp-0C], al
:0043C79A 8A55FC                  mov dl, byte ptr [ebp-04]
:0043C79D 8855EC                  mov byte ptr [ebp-14], dl
:0043C7A0 807DEC00                cmp byte ptr [ebp-14], 00
:0043C7A4 7419                    je 0043C7BF
:0043C7A6 807DEC01                cmp byte ptr [ebp-14], 01
:0043C7AA 0F84A4000000            je 0043C854
:0043C7B0 807DEC02                cmp byte ptr [ebp-14], 02
:0043C7B4 0F842E010000            je 0043C8E8
:0043C7BA E9BA010000              jmp 0043C979

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C7A4(C)
|
:0043C7BF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C7C2 25FF000000              and eax, 000000FF
:0043C7C7 83F802                  cmp eax, 00000002
:0043C7CA 753B                    jne 0043C807

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043C7CC 68FF000000              push 000000FF
:0043C7D1 6880000000              push 00000080
:0043C7D6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C7D9 33D2                    xor edx, edx
:0043C7DB 8A5110                  mov dl, byte ptr [ecx+10]
:0043C7DE 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C7E1 8A4C1044                mov cl, byte ptr [eax+edx+44]
:0043C7E5 51                      push ecx
:0043C7E6 E8FE570200              call 00461FE9
:0043C7EB 83C40C                  add esp, 0000000C
:0043C7EE 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C7F1 33C9                    xor ecx, ecx
:0043C7F3 8A4A10                  mov cl, byte ptr [edx+10]
:0043C7F6 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C7F9 88440A44                mov byte ptr [edx+ecx+44], al
:0043C7FD 6A01                    push 00000001
:0043C7FF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C802 E8A90D0000              call 0043D5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C7CA(C)
|
:0043C807 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C80A 25FF000000              and eax, 000000FF
:0043C80F 83F801                  cmp eax, 00000001
:0043C812 753B                    jne 0043C84F

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043C814 68FF000000              push 000000FF
:0043C819 6880000000              push 00000080
:0043C81E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C821 33D2                    xor edx, edx
:0043C823 8A5111                  mov dl, byte ptr [ecx+11]
:0043C826 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C829 8A4C1044                mov cl, byte ptr [eax+edx+44]
:0043C82D 51                      push ecx
:0043C82E E8B6570200              call 00461FE9
:0043C833 83C40C                  add esp, 0000000C
:0043C836 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C839 33C9                    xor ecx, ecx
:0043C83B 8A4A11                  mov cl, byte ptr [edx+11]
:0043C83E 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C841 88440A44                mov byte ptr [edx+ecx+44], al
:0043C845 6A01                    push 00000001
:0043C847 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C84A E8610D0000              call 0043D5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C812(C)
|
:0043C84F E92F010000              jmp 0043C983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C7AA(C)
|
:0043C854 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C857 25FF000000              and eax, 000000FF
:0043C85C 85C0                    test eax, eax
:0043C85E 753B                    jne 0043C89B

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043C860 68FF000000              push 000000FF
:0043C865 6880000000              push 00000080
:0043C86A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C86D 33D2                    xor edx, edx
:0043C86F 8A5110                  mov dl, byte ptr [ecx+10]
:0043C872 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C875 8A4C1044                mov cl, byte ptr [eax+edx+44]
:0043C879 51                      push ecx
:0043C87A E86A570200              call 00461FE9
:0043C87F 83C40C                  add esp, 0000000C
:0043C882 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C885 33C9                    xor ecx, ecx
:0043C887 8A4A10                  mov cl, byte ptr [edx+10]
:0043C88A 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C88D 88440A44                mov byte ptr [edx+ecx+44], al
:0043C891 6A01                    push 00000001
:0043C893 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C896 E8150D0000              call 0043D5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C85E(C)
|
:0043C89B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C89E 25FF000000              and eax, 000000FF
:0043C8A3 83F802                  cmp eax, 00000002
:0043C8A6 753B                    jne 0043C8E3

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043C8A8 68FF000000              push 000000FF
:0043C8AD 6880000000              push 00000080
:0043C8B2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C8B5 33D2                    xor edx, edx
:0043C8B7 8A5111                  mov dl, byte ptr [ecx+11]
:0043C8BA 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C8BD 8A4C1044                mov cl, byte ptr [eax+edx+44]
:0043C8C1 51                      push ecx
:0043C8C2 E822570200              call 00461FE9
:0043C8C7 83C40C                  add esp, 0000000C
:0043C8CA 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C8CD 33C9                    xor ecx, ecx
:0043C8CF 8A4A11                  mov cl, byte ptr [edx+11]
:0043C8D2 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C8D5 88440A44                mov byte ptr [edx+ecx+44], al
:0043C8D9 6A01                    push 00000001
:0043C8DB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C8DE E8CD0C0000              call 0043D5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C8A6(C)
|
:0043C8E3 E99B000000              jmp 0043C983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C7B4(C)
|
:0043C8E8 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C8EB 25FF000000              and eax, 000000FF
:0043C8F0 83F801                  cmp eax, 00000001
:0043C8F3 753B                    jne 0043C930

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043C8F5 68FF000000              push 000000FF
:0043C8FA 6880000000              push 00000080
:0043C8FF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C902 33D2                    xor edx, edx
:0043C904 8A5110                  mov dl, byte ptr [ecx+10]
:0043C907 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C90A 8A4C1044                mov cl, byte ptr [eax+edx+44]
:0043C90E 51                      push ecx
:0043C90F E8D5560200              call 00461FE9
:0043C914 83C40C                  add esp, 0000000C
:0043C917 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C91A 33C9                    xor ecx, ecx
:0043C91C 8A4A10                  mov cl, byte ptr [edx+10]
:0043C91F 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C922 88440A44                mov byte ptr [edx+ecx+44], al
:0043C926 6A01                    push 00000001
:0043C928 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C92B E8800C0000              call 0043D5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C8F3(C)
|
:0043C930 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C933 25FF000000              and eax, 000000FF
:0043C938 85C0                    test eax, eax
:0043C93A 753B                    jne 0043C977

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043C93C 68FF000000              push 000000FF
:0043C941 6880000000              push 00000080
:0043C946 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C949 33D2                    xor edx, edx
:0043C94B 8A5111                  mov dl, byte ptr [ecx+11]
:0043C94E 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C951 8A4C1044                mov cl, byte ptr [eax+edx+44]
:0043C955 51                      push ecx
:0043C956 E88E560200              call 00461FE9
:0043C95B 83C40C                  add esp, 0000000C
:0043C95E 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C961 33C9                    xor ecx, ecx
:0043C963 8A4A11                  mov cl, byte ptr [edx+11]
:0043C966 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C969 88440A44                mov byte ptr [edx+ecx+44], al
:0043C96D 6A01                    push 00000001
:0043C96F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C972 E8390C0000              call 0043D5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C93A(C)
|
:0043C977 EB0A                    jmp 0043C983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C7BA(U)
|
:0043C979 6A00                    push 00000000
:0043C97B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C97E E82D0C0000              call 0043D5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C84F(U), :0043C8E3(U), :0043C977(U)
|
:0043C983 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C986 33C9                    xor ecx, ecx
:0043C988 8A4810                  mov cl, byte ptr [eax+10]
:0043C98B 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C98E 8A4508                  mov al, byte ptr [ebp+08]
:0043C991 88440A46                mov byte ptr [edx+ecx+46], al
:0043C995 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C998 33D2                    xor edx, edx
:0043C99A 8A5111                  mov dl, byte ptr [ecx+11]
:0043C99D 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C9A0 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043C9A3 884C1046                mov byte ptr [eax+edx+46], cl
:0043C9A7 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C9AA 33C0                    xor eax, eax
:0043C9AC 8A4210                  mov al, byte ptr [edx+10]
:0043C9AF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C9B2 33D2                    xor edx, edx
:0043C9B4 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043C9B8 52                      push edx
:0043C9B9 E859010000              call 0043CB17
:0043C9BE 83C404                  add esp, 00000004
:0043C9C1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C9C4 884118                  mov byte ptr [ecx+18], al
:0043C9C7 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C9CA 33C0                    xor eax, eax
:0043C9CC 8A4210                  mov al, byte ptr [edx+10]
:0043C9CF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C9D2 33D2                    xor edx, edx
:0043C9D4 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043C9D8 52                      push edx
:0043C9D9 E8EAD3FFFF              call 00439DC8
:0043C9DE 83C404                  add esp, 00000004
:0043C9E1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C9E4 884116                  mov byte ptr [ecx+16], al
:0043C9E7 B9C8E24A00              mov ecx, 004AE2C8
:0043C9EC E8DF27FDFF              call 0040F1D0
:0043C9F1 83E010                  and eax, 00000010
:0043C9F4 85C0                    test eax, eax
:0043C9F6 741B                    je 0043CA13
:0043C9F8 8B550C                  mov edx, dword ptr [ebp+0C]
:0043C9FB 81E2FF000000            and edx, 000000FF
:0043CA01 52                      push edx
:0043CA02 8B4508                  mov eax, dword ptr [ebp+08]
:0043CA05 25FF000000              and eax, 000000FF
:0043CA0A 50                      push eax
:0043CA0B E831000000              call 0043CA41
:0043CA10 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C9F6(C)
|
:0043CA13 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043CA16 C7413400000000          mov [ecx+34], 00000000
:0043CA1D 8B55F0                  mov edx, dword ptr [ebp-10]
:0043CA20 C7423800000000          mov [edx+38], 00000000
:0043CA27 8B45F0                  mov eax, dword ptr [ebp-10]
:0043CA2A C7403C00000000          mov [eax+3C], 00000000
:0043CA31 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043CA34 C7414000000000          mov [ecx+40], 00000000
:0043CA3B 8BE5                    mov esp, ebp
:0043CA3D 5D                      pop ebp
:0043CA3E C21400                  ret 0014



* Referenced by a CALL at Address:
|:0043CA0B   
|
:0043CA41 55                      push ebp
:0043CA42 8BEC                    mov ebp, esp
:0043CA44 83EC10                  sub esp, 00000010
:0043CA47 B9A8034B00              mov ecx, 004B03A8
:0043CA4C E8389E0000              call 00446889
:0043CA51 2B05F4E44700            sub eax, dword ptr [0047E4F4]
:0043CA57 83C010                  add eax, 00000010
:0043CA5A 99                      cdq
:0043CA5B 83E20F                  and edx, 0000000F
:0043CA5E 03C2                    add eax, edx
:0043CA60 C1F804                  sar eax, 04
:0043CA63 8945FC                  mov dword ptr [ebp-04], eax
:0043CA66 8B45FC                  mov eax, dword ptr [ebp-04]
:0043CA69 D1F8                    sar eax, 1
:0043CA6B A228024B00              mov byte ptr [004B0228], al
:0043CA70 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043CA73 51                      push ecx
:0043CA74 8D55F8                  lea edx, dword ptr [ebp-08]
:0043CA77 52                      push edx
:0043CA78 E8B3560000              call 00442130
:0043CA7D 83C408                  add esp, 00000008
:0043CA80 50                      push eax
:0043CA81 B92C024B00              mov ecx, 004B022C
:0043CA86 E8052DFFFF              call 0042F790
:0043CA8B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CA8E 6BC924                  imul ecx, 00000024
:0043CA91 81C108F54A00            add ecx, 004AF508
:0043CA97 E83428FDFF              call 0040F2D0
:0043CA9C 85C0                    test eax, eax
:0043CA9E 7410                    je 0043CAB0
:0043CAA0 8B45FC                  mov eax, dword ptr [ebp-04]
:0043CAA3 25FF000000              and eax, 000000FF
:0043CAA8 83C00E                  add eax, 0000000E
:0043CAAB 8945F4                  mov dword ptr [ebp-0C], eax
:0043CAAE EB0F                    jmp 0043CABF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CA9E(C)
|
:0043CAB0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043CAB3 81E1FF000000            and ecx, 000000FF
:0043CAB9 83C12A                  add ecx, 0000002A
:0043CABC 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CAAE(U)
|
:0043CABF 8A55F4                  mov dl, byte ptr [ebp-0C]
:0043CAC2 88152C024B00            mov byte ptr [004B022C], dl
:0043CAC8 33C0                    xor eax, eax
:0043CACA A02C024B00              mov al, byte ptr [004B022C]
:0043CACF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043CAD2 81E1FF000000            and ecx, 000000FF
:0043CAD8 83C12A                  add ecx, 0000002A
:0043CADB 3BC1                    cmp eax, ecx
:0043CADD 7511                    jne 0043CAF0
:0043CADF 8B55FC                  mov edx, dword ptr [ebp-04]
:0043CAE2 81E2FF000000            and edx, 000000FF
:0043CAE8 83C20E                  add edx, 0000000E
:0043CAEB 8955F0                  mov dword ptr [ebp-10], edx
:0043CAEE EB0E                    jmp 0043CAFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CADD(C)
|
:0043CAF0 8B45FC                  mov eax, dword ptr [ebp-04]
:0043CAF3 25FF000000              and eax, 000000FF
:0043CAF8 83C02A                  add eax, 0000002A
:0043CAFB 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CAEE(U)
|
:0043CAFE 8A4DF0                  mov cl, byte ptr [ebp-10]
:0043CB01 880D90034B00            mov byte ptr [004B0390], cl
:0043CB07 8A152D024B00            mov dl, byte ptr [004B022D]
:0043CB0D 881591034B00            mov byte ptr [004B0391], dl
:0043CB13 8BE5                    mov esp, ebp
:0043CB15 5D                      pop ebp
:0043CB16 C3                      ret



* Referenced by a CALL at Address:
|:0043C9B9   
|
:0043CB17 55                      push ebp
:0043CB18 8BEC                    mov ebp, esp
:0043CB1A 83EC0C                  sub esp, 0000000C
:0043CB1D C645F400                mov [ebp-0C], 00
:0043CB21 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CB24 6BC924                  imul ecx, 00000024
:0043CB27 81C108F54A00            add ecx, 004AF508
:0043CB2D E89E2BFFFF              call 0042F6D0
:0043CB32 8945FC                  mov dword ptr [ebp-04], eax
:0043CB35 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043CB38 6BC970                  imul ecx, 00000070
:0043CB3B 81C198224900            add ecx, 00492298
:0043CB41 E8AA7CFCFF              call 004047F0
:0043CB46 8845F8                  mov byte ptr [ebp-08], al
:0043CB49 8B45F8                  mov eax, dword ptr [ebp-08]
:0043CB4C 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043CB51 3DFF000000              cmp eax, 000000FF
:0043CB56 742E                    je 0043CB86
:0043CB58 8A4DF8                  mov cl, byte ptr [ebp-08]
:0043CB5B 51                      push ecx
:0043CB5C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043CB5F 6BC970                  imul ecx, 00000070
:0043CB62 81C198224900            add ecx, 00492298
:0043CB68 E8A37CFCFF              call 00404810
:0043CB6D 8AC8                    mov cl, al
:0043CB6F 81E1FF000000            and ecx, 000000FF
:0043CB75 6BC933                  imul ecx, 00000033
:0043CB78 81C1C8EF4800            add ecx, 0048EFC8
:0043CB7E E8CD34FEFF              call 00420050
:0043CB83 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CB56(C)
|
:0043CB86 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043CB89 81E2FF000000            and edx, 000000FF
:0043CB8F 85D2                    test edx, edx
:0043CB91 7504                    jne 0043CB97
:0043CB93 C645F4FF                mov [ebp-0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CB91(C)
|
:0043CB97 8A45F4                  mov al, byte ptr [ebp-0C]
:0043CB9A 8BE5                    mov esp, ebp
:0043CB9C 5D                      pop ebp
:0043CB9D C3                      ret



* Referenced by a CALL at Addresses:
|:00433BEE   , :00433C83   , :00433EEA   , :00433F7F   , :004341CB   
|:00434260   , :004343E3   , :0043447A   , :00434650   , :0043482D   
|:004348C2   , :00434AA2   , :00434C50   , :00434E0D   , :00435067   
|:0043511D   , :0043531D   , :00435AD7   , :00435B6C   , :00435D49   
|:0043D2FE   , :0043D40B   , :00449F87   , :0044D7E6   , :0044DC09   
|
:0043CB9E 55                      push ebp
:0043CB9F 8BEC                    mov ebp, esp
:0043CBA1 83EC2C                  sub esp, 0000002C
:0043CBA4 894DD4                  mov dword ptr [ebp-2C], ecx
:0043CBA7 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CBAA 83C048                  add eax, 00000048
:0043CBAD 8945F4                  mov dword ptr [ebp-0C], eax
:0043CBB0 B9180A4B00              mov ecx, 004B0A18
:0043CBB5 E88630FFFF              call 0042FC40
:0043CBBA 25FF000000              and eax, 000000FF
:0043CBBF 85C0                    test eax, eax
:0043CBC1 7405                    je 0043CBC8
:0043CBC3 E9D9050000              jmp 0043D1A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CBC1(C)
|
:0043CBC8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CBCB 81E1FF000000            and ecx, 000000FF
:0043CBD1 6BC924                  imul ecx, 00000024
:0043CBD4 81C108F54A00            add ecx, 004AF508
:0043CBDA E8F12CFFFF              call 0042F8D0
:0043CBDF 25FF000000              and eax, 000000FF
:0043CBE4 83F802                  cmp eax, 00000002
:0043CBE7 7521                    jne 0043CC0A
:0043CBE9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CBEC 81E1FF000000            and ecx, 000000FF
:0043CBF2 6BC924                  imul ecx, 00000024
:0043CBF5 81C108F54A00            add ecx, 004AF508
:0043CBFB E8D02CFFFF              call 0042F8D0
:0043CC00 25FF000000              and eax, 000000FF
:0043CC05 83F802                  cmp eax, 00000002
:0043CC08 7405                    je 0043CC0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CBE7(C)
|
:0043CC0A E992050000              jmp 0043D1A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CC08(C)
|
:0043CC0F 8A4D18                  mov cl, byte ptr [ebp+18]
:0043CC12 51                      push ecx
:0043CC13 8A5514                  mov dl, byte ptr [ebp+14]
:0043CC16 52                      push edx
:0043CC17 8A4510                  mov al, byte ptr [ebp+10]
:0043CC1A 50                      push eax
:0043CC1B 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043CC1E 51                      push ecx
:0043CC1F 8A5508                  mov dl, byte ptr [ebp+08]
:0043CC22 52                      push edx
:0043CC23 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CC26 E884F9FFFF              call 0043C5AF
:0043CC2B C745F800000000          mov [ebp-08], 00000000
:0043CC32 EB09                    jmp 0043CC3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CC4D(U)
|
:0043CC34 8B45F8                  mov eax, dword ptr [ebp-08]
:0043CC37 83C001                  add eax, 00000001
:0043CC3A 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CC32(U)
|
:0043CC3D 837DF811                cmp dword ptr [ebp-08], 00000011
:0043CC41 730C                    jnb 0043CC4F
:0043CC43 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CC46 034DF8                  add ecx, dword ptr [ebp-08]
:0043CC49 C64148FF                mov [ecx+48], FF
:0043CC4D EBE5                    jmp 0043CC34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CC41(C)
|
:0043CC4F 6A00                    push 00000000
:0043CC51 B9680C4B00              mov ecx, 004B0C68
:0043CC56 E8A52AFFFF              call 0042F700
:0043CC5B 6A00                    push 00000000
:0043CC5D 6A00                    push 00000000
:0043CC5F E8E0C10200              call 00468E44
:0043CC64 83C408                  add esp, 00000008
:0043CC67 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CC6A 33C0                    xor eax, eax
:0043CC6C 8A4218                  mov al, byte ptr [edx+18]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043CC6F 3DFF000000              cmp eax, 000000FF
:0043CC74 0F8498000000            je 0043CD12
:0043CC7A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CC7D 33D2                    xor edx, edx
:0043CC7F 8A5112                  mov dl, byte ptr [ecx+12]
:0043CC82 83FA01                  cmp edx, 00000001
:0043CC85 0F8587000000            jne 0043CD12
:0043CC8B 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CC8E 33C9                    xor ecx, ecx
:0043CC90 8A4813                  mov cl, byte ptr [eax+13]
:0043CC93 83F901                  cmp ecx, 00000001
:0043CC96 747A                    je 0043CD12

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043CC98 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043CC9D 68FF000000              push 000000FF
:0043CCA2 6A00                    push 00000000
:0043CCA4 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CCA7 83C248                  add edx, 00000048
:0043CCAA 52                      push edx
:0043CCAB 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CCAE 8A4818                  mov cl, byte ptr [eax+18]
:0043CCB1 51                      push ecx
:0043CCB2 8A550C                  mov dl, byte ptr [ebp+0C]
:0043CCB5 52                      push edx
:0043CCB6 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CCB9 33C9                    xor ecx, ecx
:0043CCBB 8A4810                  mov cl, byte ptr [eax+10]
:0043CCBE 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CCC1 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043CCC4 E8370A0100              call 0044D700
:0043CCC9 8945F4                  mov dword ptr [ebp-0C], eax
:0043CCCC 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043CCCF 8945EC                  mov dword ptr [ebp-14], eax
:0043CCD2 C745F001000000          mov [ebp-10], 00000001
:0043CCD9 EB12                    jmp 0043CCED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CD10(U)
|
:0043CCDB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043CCDE 83C101                  add ecx, 00000001
:0043CCE1 894DEC                  mov dword ptr [ebp-14], ecx
:0043CCE4 8B55F0                  mov edx, dword ptr [ebp-10]
:0043CCE7 83C201                  add edx, 00000001
:0043CCEA 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CCD9(U)
|
:0043CCED 8B45EC                  mov eax, dword ptr [ebp-14]
:0043CCF0 33C9                    xor ecx, ecx
:0043CCF2 8A08                    mov cl, byte ptr [eax]
:0043CCF4 81F9FF000000            cmp ecx, 000000FF
:0043CCFA 7416                    je 0043CD12
:0043CCFC 8B55F0                  mov edx, dword ptr [ebp-10]
:0043CCFF 52                      push edx
:0043CD00 8B45EC                  mov eax, dword ptr [ebp-14]
:0043CD03 33C9                    xor ecx, ecx
:0043CD05 8A08                    mov cl, byte ptr [eax]
:0043CD07 51                      push ecx
:0043CD08 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CD0B E8D3EAFFFF              call 0043B7E3
:0043CD10 EBC9                    jmp 0043CCDB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CC74(C), :0043CC85(C), :0043CC96(C), :0043CCFA(C)
|
:0043CD12 6A00                    push 00000000
:0043CD14 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CD17 E85DF0FFFF              call 0043BD79
:0043CD1C 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043CD1F E88CAAFCFF              call 004077B0
:0043CD24 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CD27 33C0                    xor eax, eax
:0043CD29 8A4211                  mov al, byte ptr [edx+11]
:0043CD2C 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CD2F 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043CD32 E869C6FEFF              call 004293A0
:0043CD37 50                      push eax
:0043CD38 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043CD3B E8502AFFFF              call 0042F790
:0043CD40 8A55FD                  mov dl, byte ptr [ebp-03]
:0043CD43 52                      push edx
:0043CD44 8A45FC                  mov al, byte ptr [ebp-04]
:0043CD47 50                      push eax
:0043CD48 B9A8034B00              mov ecx, 004B03A8
:0043CD4D E8E58C0000              call 00445A37
:0043CD52 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CD55 33D2                    xor edx, edx
:0043CD57 8A5112                  mov dl, byte ptr [ecx+12]
:0043CD5A 83FA01                  cmp edx, 00000001
:0043CD5D 0F85B3000000            jne 0043CE16
:0043CD63 B9C8E24A00              mov ecx, 004AE2C8
:0043CD68 E86324FDFF              call 0040F1D0
:0043CD6D 2500800000              and eax, 00008000
:0043CD72 85C0                    test eax, eax
:0043CD74 7515                    jne 0043CD8B
:0043CD76 6A00                    push 00000000
:0043CD78 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CD7B 33C9                    xor ecx, ecx
:0043CD7D 8A4816                  mov cl, byte ptr [eax+16]
:0043CD80 51                      push ecx
:0043CD81 E8C3D6FFFF              call 0043A449
:0043CD86 83C408                  add esp, 00000008
:0043CD89 EB4F                    jmp 0043CDDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CD74(C)
|
:0043CD8B 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CD8E 33C0                    xor eax, eax
:0043CD90 8A4210                  mov al, byte ptr [edx+10]
:0043CD93 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CD96 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043CD99 E802C6FEFF              call 004293A0
:0043CD9E 668B10                  mov dx, word ptr [eax]
:0043CDA1 668955E8                mov word ptr [ebp-18], dx
:0043CDA5 6A00                    push 00000000
:0043CDA7 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CDAA 8A4812                  mov cl, byte ptr [eax+12]
:0043CDAD 51                      push ecx
:0043CDAE 6A00                    push 00000000
:0043CDB0 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CDB3 33C0                    xor eax, eax
:0043CDB5 8A4211                  mov al, byte ptr [edx+11]
:0043CDB8 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CDBB 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043CDBF 52                      push edx
:0043CDC0 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CDC3 33C9                    xor ecx, ecx
:0043CDC5 8A4810                  mov cl, byte ptr [eax+10]
:0043CDC8 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CDCB 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043CDCF 50                      push eax
:0043CDD0 B9A8034B00              mov ecx, 004B03A8
:0043CDD5 E8FC980000              call 004466D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CD89(U)
|
:0043CDDA 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CDDD 33D2                    xor edx, edx
:0043CDDF 8A5119                  mov dl, byte ptr [ecx+19]
:0043CDE2 83FA01                  cmp edx, 00000001
:0043CDE5 752A                    jne 0043CE11
:0043CDE7 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CDEA 33C9                    xor ecx, ecx
:0043CDEC 8A4810                  mov cl, byte ptr [eax+10]
:0043CDEF 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CDF2 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043CDF5 E8E628FFFF              call 0042F6E0
:0043CDFA 50                      push eax

* Possible StringData Ref from Data Obj ->"%soXPR@I"
                                  |
:0043CDFB 68A88D4700              push 00478DA8
:0043CE00 6A00                    push 00000000
:0043CE02 E865BDFEFF              call 00428B6C
:0043CE07 83C40C                  add esp, 0000000C
:0043CE0A 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CE0D C6401900                mov [eax+19], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CDE5(C)
|
:0043CE11 E909010000              jmp 0043CF1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CD5D(C)
|
:0043CE16 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CE19 33D2                    xor edx, edx
:0043CE1B 8A5112                  mov dl, byte ptr [ecx+12]
:0043CE1E 83FA02                  cmp edx, 00000002
:0043CE21 7411                    je 0043CE34
:0043CE23 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CE26 33C9                    xor ecx, ecx
:0043CE28 8A4812                  mov cl, byte ptr [eax+12]
:0043CE2B 83F903                  cmp ecx, 00000003
:0043CE2E 0F85EB000000            jne 0043CF1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CE21(C)
|
:0043CE34 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CE37 33C0                    xor eax, eax
:0043CE39 3B4234                  cmp eax, dword ptr [edx+34]
:0043CE3C 1BC9                    sbb ecx, ecx
:0043CE3E F7D9                    neg ecx
:0043CE40 894DDC                  mov dword ptr [ebp-24], ecx
:0043CE43 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CE46 33C0                    xor eax, eax
:0043CE48 8A4211                  mov al, byte ptr [edx+11]
:0043CE4B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CE4E 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043CE51 E84AC5FEFF              call 004293A0
:0043CE56 668B10                  mov dx, word ptr [eax]
:0043CE59 668955E0                mov word ptr [ebp-20], dx
:0043CE5D 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CE60 33C9                    xor ecx, ecx
:0043CE62 8A4813                  mov cl, byte ptr [eax+13]
:0043CE65 C1F904                  sar ecx, 04
:0043CE68 83E101                  and ecx, 00000001
:0043CE6B 884DE4                  mov byte ptr [ebp-1C], cl
:0043CE6E 8B551C                  mov edx, dword ptr [ebp+1C]
:0043CE71 81E2FF000000            and edx, 000000FF
:0043CE77 85D2                    test edx, edx
:0043CE79 753E                    jne 0043CEB9
:0043CE7B 8B45DC                  mov eax, dword ptr [ebp-24]
:0043CE7E 50                      push eax
:0043CE7F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CE82 8A5112                  mov dl, byte ptr [ecx+12]
:0043CE85 52                      push edx
:0043CE86 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CE89 8A4814                  mov cl, byte ptr [eax+14]
:0043CE8C 51                      push ecx
:0043CE8D 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CE90 33C0                    xor eax, eax
:0043CE92 8A4211                  mov al, byte ptr [edx+11]
:0043CE95 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CE98 8A540146                mov dl, byte ptr [ecx+eax+46]
:0043CE9C 52                      push edx
:0043CE9D 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CEA0 33C9                    xor ecx, ecx
:0043CEA2 8A4810                  mov cl, byte ptr [eax+10]
:0043CEA5 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CEA8 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043CEAC 50                      push eax
:0043CEAD B9A8034B00              mov ecx, 004B03A8
:0043CEB2 E81F980000              call 004466D6
:0043CEB7 EB31                    jmp 0043CEEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CE79(C)
|
:0043CEB9 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043CEBC 51                      push ecx
:0043CEBD 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CEC0 8A4212                  mov al, byte ptr [edx+12]
:0043CEC3 50                      push eax
:0043CEC4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CEC7 8A5114                  mov dl, byte ptr [ecx+14]
:0043CECA 52                      push edx
:0043CECB 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CECE 33C9                    xor ecx, ecx
:0043CED0 8A4811                  mov cl, byte ptr [eax+11]
:0043CED3 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CED6 8A440A46                mov al, byte ptr [edx+ecx+46]
:0043CEDA 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043CEDB 68FF000000              push 000000FF
:0043CEE0 B9A8034B00              mov ecx, 004B03A8
:0043CEE5 E8EC970000              call 004466D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CEB7(U)
|
:0043CEEA 837DDC00                cmp dword ptr [ebp-24], 00000000
:0043CEEE 742F                    je 0043CF1F
:0043CEF0 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CEF3 33D2                    xor edx, edx
:0043CEF5 8A5114                  mov dl, byte ptr [ecx+14]
:0043CEF8 83FA06                  cmp edx, 00000006
:0043CEFB 740D                    je 0043CF0A
:0043CEFD 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CF00 33C9                    xor ecx, ecx
:0043CF02 8A4814                  mov cl, byte ptr [eax+14]
:0043CF05 83F913                  cmp ecx, 00000013
:0043CF08 7515                    jne 0043CF1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CEFB(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0043CF0A 6A10                    push 00000010
:0043CF0C 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CF0F 33C0                    xor eax, eax
:0043CF11 8A4211                  mov al, byte ptr [edx+11]
:0043CF14 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CF17 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043CF1A E841CCFFFF              call 00439B60

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CE11(U), :0043CE2E(C), :0043CEEE(C), :0043CF08(C)
|
:0043CF1F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CF22 E81BF0FFFF              call 0043BF42
:0043CF27 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CF2A E8DEF3FFFF              call 0043C30D
:0043CF2F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CF32 E8B5F5FFFF              call 0043C4EC
:0043CF37 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CF3A 33C0                    xor eax, eax
:0043CF3C 8A4210                  mov al, byte ptr [edx+10]
:0043CF3F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CF42 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043CF45 E88627FFFF              call 0042F6D0
:0043CF4A 50                      push eax
:0043CF4B E800A00200              call 00466F50
:0043CF50 83C404                  add esp, 00000004
:0043CF53 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CF56 33C0                    xor eax, eax
:0043CF58 8A4211                  mov al, byte ptr [edx+11]
:0043CF5B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CF5E 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043CF61 E86A27FFFF              call 0042F6D0
:0043CF66 50                      push eax
:0043CF67 E8E49F0200              call 00466F50
:0043CF6C 83C404                  add esp, 00000004
:0043CF6F 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CF72 33C0                    xor eax, eax
:0043CF74 8A4218                  mov al, byte ptr [edx+18]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043CF77 3DFF000000              cmp eax, 000000FF
:0043CF7C 0F84F0010000            je 0043D172
:0043CF82 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CF85 33D2                    xor edx, edx
:0043CF87 8A5112                  mov dl, byte ptr [ecx+12]
:0043CF8A 83FA01                  cmp edx, 00000001
:0043CF8D 0F85DF010000            jne 0043D172
:0043CF93 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043CF96 33C9                    xor ecx, ecx
:0043CF98 8A4813                  mov cl, byte ptr [eax+13]
:0043CF9B 83F901                  cmp ecx, 00000001
:0043CF9E 0F84CE010000            je 0043D172
:0043CFA4 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043CFA7 33C0                    xor eax, eax
:0043CFA9 8A4211                  mov al, byte ptr [edx+11]
:0043CFAC 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043CFAF 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043CFB2 E891FCFEFF              call 0042CC48
:0043CFB7 C745D801000000          mov [ebp-28], 00000001
:0043CFBE EB12                    jmp 0043CFD2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CFF1(U), :0043D014(U), :0043D150(U)
|
:0043CFC0 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043CFC3 83C201                  add edx, 00000001
:0043CFC6 8955F4                  mov dword ptr [ebp-0C], edx
:0043CFC9 8B45D8                  mov eax, dword ptr [ebp-28]
:0043CFCC 83C001                  add eax, 00000001
:0043CFCF 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CFBE(U)
|
:0043CFD2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043CFD5 33D2                    xor edx, edx
:0043CFD7 8A11                    mov dl, byte ptr [ecx]
:0043CFD9 81FAFF000000            cmp edx, 000000FF
:0043CFDF 0F8470010000            je 0043D155
:0043CFE5 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043CFE8 33C9                    xor ecx, ecx
:0043CFEA 8A08                    mov cl, byte ptr [eax]
:0043CFEC 83F95A                  cmp ecx, 0000005A
:0043CFEF 7E02                    jle 0043CFF3
:0043CFF1 EBCD                    jmp 0043CFC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CFEF(C)
|
:0043CFF3 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043CFF6 33C0                    xor eax, eax
:0043CFF8 8A02                    mov al, byte ptr [edx]
:0043CFFA 8BC8                    mov ecx, eax
:0043CFFC 6BC924                  imul ecx, 00000024
:0043CFFF 81C108F54A00            add ecx, 004AF508
:0043D005 E8C628FFFF              call 0042F8D0
:0043D00A 25FF000000              and eax, 000000FF
:0043D00F 83F802                  cmp eax, 00000002
:0043D012 7402                    je 0043D016
:0043D014 EBAA                    jmp 0043CFC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D012(C)
|
:0043D016 B9180A4B00              mov ecx, 004B0A18
:0043D01B E8202CFFFF              call 0042FC40
:0043D020 25FF000000              and eax, 000000FF
:0043D025 85C0                    test eax, eax
:0043D027 7405                    je 0043D02E
:0043D029 E927010000              jmp 0043D155

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D027(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043D02E 68FF000000              push 000000FF
:0043D033 8A4D14                  mov cl, byte ptr [ebp+14]
:0043D036 51                      push ecx
:0043D037 8A5510                  mov dl, byte ptr [ebp+10]
:0043D03A 52                      push edx
:0043D03B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043D03E 8A08                    mov cl, byte ptr [eax]
:0043D040 51                      push ecx
:0043D041 8A5508                  mov dl, byte ptr [ebp+08]
:0043D044 52                      push edx
:0043D045 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D048 E862F5FFFF              call 0043C5AF
:0043D04D 8B45D8                  mov eax, dword ptr [ebp-28]
:0043D050 50                      push eax
:0043D051 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D054 E820EDFFFF              call 0043BD79
:0043D059 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D05C E8E1EEFFFF              call 0043BF42
:0043D061 B9C8E24A00              mov ecx, 004AE2C8
:0043D066 E86521FDFF              call 0040F1D0
:0043D06B 2500800000              and eax, 00008000
:0043D070 85C0                    test eax, eax
:0043D072 746D                    je 0043D0E1

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043D074 6A06                    push 00000006
:0043D076 E8009BFEFF              call 00426B7B
:0043D07B 83C404                  add esp, 00000004
:0043D07E E8AF5DFDFF              call 00412E32
:0043D083 6A00                    push 00000000
:0043D085 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0043D088 51                      push ecx
:0043D089 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043D08C 8A02                    mov al, byte ptr [edx]
:0043D08E 50                      push eax
:0043D08F E830E2FFFF              call 0043B2C4
:0043D094 83C40C                  add esp, 0000000C
:0043D097 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D09A 83793400                cmp dword ptr [ecx+34], 00000000
:0043D09E 7415                    je 0043D0B5
:0043D0A0 6A01                    push 00000001
:0043D0A2 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043D0A5 33C0                    xor eax, eax
:0043D0A7 8A4216                  mov al, byte ptr [edx+16]
:0043D0AA 50                      push eax
:0043D0AB E899D3FFFF              call 0043A449
:0043D0B0 83C408                  add esp, 00000008
:0043D0B3 EB0C                    jmp 0043D0C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D09E(C)
|
:0043D0B5 6A22                    push 00000022
:0043D0B7 B9800D4B00              mov ecx, 004B0D80
:0043D0BC E8E84A0200              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D0B3(U)
|
:0043D0C1 E8875DFDFF              call 00412E4D
:0043D0C6 E8C59AFEFF              call 00426B90
:0043D0CB 6A01                    push 00000001
:0043D0CD 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0043D0D0 51                      push ecx
:0043D0D1 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043D0D4 8A02                    mov al, byte ptr [edx]
:0043D0D6 50                      push eax
:0043D0D7 E8E8E1FFFF              call 0043B2C4
:0043D0DC 83C40C                  add esp, 0000000C
:0043D0DF EB2A                    jmp 0043D10B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D072(C)
|
:0043D0E1 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D0E4 83793400                cmp dword ptr [ecx+34], 00000000
:0043D0E8 7415                    je 0043D0FF
:0043D0EA 6A01                    push 00000001
:0043D0EC 8B55D4                  mov edx, dword ptr [ebp-2C]
:0043D0EF 33C0                    xor eax, eax
:0043D0F1 8A4216                  mov al, byte ptr [edx+16]
:0043D0F4 50                      push eax
:0043D0F5 E84FD3FFFF              call 0043A449
:0043D0FA 83C408                  add esp, 00000008
:0043D0FD EB0C                    jmp 0043D10B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D0E8(C)
|
:0043D0FF 6A22                    push 00000022
:0043D101 B9800D4B00              mov ecx, 004B0D80
:0043D106 E89E4A0200              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D0DF(U), :0043D0FD(U)
|
:0043D10B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D10E E8FAF1FFFF              call 0043C30D
:0043D113 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D116 E8D1F3FFFF              call 0043C4EC
:0043D11B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043D11E 33D2                    xor edx, edx
:0043D120 8A11                    mov dl, byte ptr [ecx]
:0043D122 8BCA                    mov ecx, edx
:0043D124 6BC924                  imul ecx, 00000024
:0043D127 81C108F54A00            add ecx, 004AF508
:0043D12D E816FBFEFF              call 0042CC48
:0043D132 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043D135 33C9                    xor ecx, ecx
:0043D137 8A08                    mov cl, byte ptr [eax]
:0043D139 6BC924                  imul ecx, 00000024
:0043D13C 81C108F54A00            add ecx, 004AF508
:0043D142 E88925FFFF              call 0042F6D0
:0043D147 50                      push eax
:0043D148 E8039E0200              call 00466F50
:0043D14D 83C404                  add esp, 00000004
:0043D150 E96BFEFFFF              jmp 0043CFC0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CFDF(C), :0043D029(U)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043D155 68FF000000              push 000000FF
:0043D15A 8A5514                  mov dl, byte ptr [ebp+14]
:0043D15D 52                      push edx
:0043D15E 8A4510                  mov al, byte ptr [ebp+10]
:0043D161 50                      push eax
:0043D162 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D165 51                      push ecx
:0043D166 8A5508                  mov dl, byte ptr [ebp+08]
:0043D169 52                      push edx
:0043D16A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D16D E83DF4FFFF              call 0043C5AF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CF7C(C), :0043CF8D(C), :0043CF9E(C)
|
:0043D172 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D175 E889EFFFFF              call 0043C103
:0043D17A 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043D17D 8A4812                  mov cl, byte ptr [eax+12]
:0043D180 51                      push ecx
:0043D181 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043D184 E81E000000              call 0043D1A7
:0043D189 6A00                    push 00000000
:0043D18B 6A01                    push 00000001
:0043D18D E8B2BC0200              call 00468E44
:0043D192 83C408                  add esp, 00000008
:0043D195 6A01                    push 00000001
:0043D197 B9680C4B00              mov ecx, 004B0C68
:0043D19C E85F25FFFF              call 0042F700

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CBC3(U), :0043CC0A(U)
|
:0043D1A1 8BE5                    mov esp, ebp
:0043D1A3 5D                      pop ebp
:0043D1A4 C21800                  ret 0018



* Referenced by a CALL at Address:
|:0043D184   
|
:0043D1A7 55                      push ebp
:0043D1A8 8BEC                    mov ebp, esp
:0043D1AA 83EC20                  sub esp, 00000020
:0043D1AD 53                      push ebx
:0043D1AE 56                      push esi
:0043D1AF 894DE0                  mov dword ptr [ebp-20], ecx
:0043D1B2 8B4508                  mov eax, dword ptr [ebp+08]
:0043D1B5 25FF000000              and eax, 000000FF
:0043D1BA 83F801                  cmp eax, 00000001
:0043D1BD 0F8559020000            jne 0043D41C
:0043D1C3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D1C6 33D2                    xor edx, edx
:0043D1C8 8A5111                  mov dl, byte ptr [ecx+11]
:0043D1CB 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D1CE 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043D1D1 E8FA20FDFF              call 0040F2D0
:0043D1D6 8945F8                  mov dword ptr [ebp-08], eax
:0043D1D9 C745FC00000000          mov [ebp-04], 00000000
:0043D1E0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D1E3 33D2                    xor edx, edx
:0043D1E5 8A5111                  mov dl, byte ptr [ecx+11]
:0043D1E8 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D1EB 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043D1EE E8E4D6FEFF              call 0042A8D7
:0043D1F3 8845F0                  mov byte ptr [ebp-10], al
:0043D1F6 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D1F9 33D2                    xor edx, edx
:0043D1FB 8A5111                  mov dl, byte ptr [ecx+11]
:0043D1FE 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D201 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043D204 E897C1FEFF              call 004293A0
:0043D209 668B08                  mov cx, word ptr [eax]
:0043D20C 66894DEC                mov word ptr [ebp-14], cx
:0043D210 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D213 33C0                    xor eax, eax
:0043D215 8A4210                  mov al, byte ptr [edx+10]
:0043D218 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D21B 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043D21E E8FD25FFFF              call 0042F820
:0043D223 A2AC044B00              mov byte ptr [004B04AC], al
:0043D228 6A00                    push 00000000
:0043D22A 8B55F8                  mov edx, dword ptr [ebp-08]
:0043D22D F7D2                    not edx
:0043D22F 52                      push edx
:0043D230 8A45F0                  mov al, byte ptr [ebp-10]
:0043D233 50                      push eax
:0043D234 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0043D237 51                      push ecx
:0043D238 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D23B 33C0                    xor eax, eax
:0043D23D 8A4211                  mov al, byte ptr [edx+11]
:0043D240 8BC8                    mov ecx, eax
:0043D242 6BC924                  imul ecx, 00000024
:0043D245 81C108F54A00            add ecx, 004AF508
:0043D24B E81AA90000              call 00447B6A
:0043D250 8845F4                  mov byte ptr [ebp-0C], al
:0043D253 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043D256 81E1FF000000            and ecx, 000000FF
:0043D25C 33D2                    xor edx, edx
:0043D25E 8A15AC044B00            mov dl, byte ptr [004B04AC]
:0043D264 3BCA                    cmp ecx, edx
:0043D266 7507                    jne 0043D26F
:0043D268 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D266(C)
|
:0043D26F 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D272 33C9                    xor ecx, ecx
:0043D274 8A4815                  mov cl, byte ptr [eax+15]
:0043D277 83E140                  and ecx, 00000040
:0043D27A 85C9                    test ecx, ecx
:0043D27C 0F849A000000            je 0043D31C
:0043D282 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D285 33C0                    xor eax, eax
:0043D287 8A4213                  mov al, byte ptr [edx+13]
:0043D28A 85C0                    test eax, eax
:0043D28C 0F858A000000            jne 0043D31C
:0043D292 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043D296 0F8480000000            je 0043D31C
:0043D29C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D29F 33D2                    xor edx, edx
:0043D2A1 8A5110                  mov dl, byte ptr [ecx+10]
:0043D2A4 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D2A7 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043D2AA E87125FFFF              call 0042F820
:0043D2AF 8845E4                  mov byte ptr [ebp-1C], al
:0043D2B2 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D2B5 33D2                    xor edx, edx
:0043D2B7 8A5111                  mov dl, byte ptr [ecx+11]
:0043D2BA 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D2BD 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043D2C0 E85B25FFFF              call 0042F820
:0043D2C5 8845E8                  mov byte ptr [ebp-18], al
:0043D2C8 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043D2CA 68FF000000              push 000000FF
:0043D2CF 6A01                    push 00000001
:0043D2D1 6A01                    push 00000001
:0043D2D3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D2D6 33D2                    xor edx, edx
:0043D2D8 8A5110                  mov dl, byte ptr [ecx+10]
:0043D2DB 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D2DE 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043D2E1 E83A25FFFF              call 0042F820
:0043D2E6 50                      push eax
:0043D2E7 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D2EA 33D2                    xor edx, edx
:0043D2EC 8A5111                  mov dl, byte ptr [ecx+11]
:0043D2EF 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D2F2 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0043D2F5 E82625FFFF              call 0042F820
:0043D2FA 50                      push eax
:0043D2FB 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D2FE E89BF8FFFF              call 0043CB9E

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043D303 68FF000000              push 000000FF
:0043D308 6A00                    push 00000000
:0043D30A 6A01                    push 00000001
:0043D30C 8A4DE8                  mov cl, byte ptr [ebp-18]
:0043D30F 51                      push ecx
:0043D310 8A55E4                  mov dl, byte ptr [ebp-1C]
:0043D313 52                      push edx
:0043D314 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D317 E893F2FFFF              call 0043C5AF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D27C(C), :0043D28C(C), :0043D296(C)
|
:0043D31C 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D31F 33C9                    xor ecx, ecx
:0043D321 8A4813                  mov cl, byte ptr [eax+13]
:0043D324 85C9                    test ecx, ecx
:0043D326 0F85E4000000            jne 0043D410
:0043D32C 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D32F 33C0                    xor eax, eax
:0043D331 8A4210                  mov al, byte ptr [edx+10]
:0043D334 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D337 33D2                    xor edx, edx
:0043D339 8A540144                mov dl, byte ptr [ecx+eax+44]
:0043D33D 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D340 33C9                    xor ecx, ecx
:0043D342 8A4811                  mov cl, byte ptr [eax+11]
:0043D345 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D348 33DB                    xor ebx, ebx
:0043D34A 8A5C0844                mov bl, byte ptr [eax+ecx+44]
:0043D34E 3BD3                    cmp edx, ebx
:0043D350 0F8CBA000000            jl 0043D410
:0043D356 833D94034B0000          cmp dword ptr [004B0394], 00000000
:0043D35D 0F85AD000000            jne 0043D410

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043D363 68FF000000              push 000000FF
:0043D368 E8484D0200              call 004620B5
:0043D36D 83C404                  add esp, 00000004
:0043D370 8BF0                    mov esi, eax
:0043D372 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D375 33D2                    xor edx, edx
:0043D377 8A5110                  mov dl, byte ptr [ecx+10]
:0043D37A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D37D 33DB                    xor ebx, ebx
:0043D37F 8A5C1144                mov bl, byte ptr [ecx+edx+44]
:0043D383 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D386 33C9                    xor ecx, ecx
:0043D388 8A4A11                  mov cl, byte ptr [edx+11]
:0043D38B 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D38E 33C0                    xor eax, eax
:0043D390 8A440A44                mov al, byte ptr [edx+ecx+44]
:0043D394 2BD8                    sub ebx, eax
:0043D396 83C301                  add ebx, 00000001
:0043D399 3BF3                    cmp esi, ebx
:0043D39B 7373                    jnb 0043D410
:0043D39D C70594034B0001000000    mov dword ptr [004B0394], 00000001
:0043D3A7 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D3AA 33C9                    xor ecx, ecx
:0043D3AC 8A4810                  mov cl, byte ptr [eax+10]
:0043D3AF 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D3B2 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043D3B5 E8B674FCFF              call 00404870
:0043D3BA 85C0                    test eax, eax
:0043D3BC 7452                    je 0043D410
:0043D3BE 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D3C1 33C9                    xor ecx, ecx
:0043D3C3 8A4811                  mov cl, byte ptr [eax+11]
:0043D3C6 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D3C9 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043D3CC E89F74FCFF              call 00404870
:0043D3D1 85C0                    test eax, eax
:0043D3D3 743B                    je 0043D410
:0043D3D5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043D3D7 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D3DC 6A02                    push 00000002
:0043D3DE 6A01                    push 00000001
:0043D3E0 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D3E3 33C9                    xor ecx, ecx
:0043D3E5 8A4811                  mov cl, byte ptr [eax+11]
:0043D3E8 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D3EB 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043D3EE E82D24FFFF              call 0042F820
:0043D3F3 50                      push eax
:0043D3F4 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D3F7 33C9                    xor ecx, ecx
:0043D3F9 8A4810                  mov cl, byte ptr [eax+10]
:0043D3FC 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D3FF 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043D402 E81924FFFF              call 0042F820
:0043D407 50                      push eax
:0043D408 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D40B E88EF7FFFF              call 0043CB9E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D326(C), :0043D350(C), :0043D35D(C), :0043D39B(C), :0043D3BC(C)
|:0043D3D3(C)
|
:0043D410 C70594034B0000000000    mov dword ptr [004B0394], 00000000
:0043D41A EB2E                    jmp 0043D44A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D1BD(C)
|
:0043D41C 8B4508                  mov eax, dword ptr [ebp+08]
:0043D41F 25FF000000              and eax, 000000FF
:0043D424 83F802                  cmp eax, 00000002
:0043D427 740E                    je 0043D437
:0043D429 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D42C 81E1FF000000            and ecx, 000000FF
:0043D432 83F903                  cmp ecx, 00000003
:0043D435 7513                    jne 0043D44A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D427(C)
|
:0043D437 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D43A 33C0                    xor eax, eax
:0043D43C 8A4211                  mov al, byte ptr [edx+11]
:0043D43F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D442 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043D445 E8FEF7FEFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D41A(U), :0043D435(C)
|
:0043D44A 8B55E0                  mov edx, dword ptr [ebp-20]
:0043D44D 8A4215                  mov al, byte ptr [edx+15]
:0043D450 24FE                    and al, FE
:0043D452 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D455 884115                  mov byte ptr [ecx+15], al
:0043D458 5E                      pop esi
:0043D459 5B                      pop ebx
:0043D45A 8BE5                    mov esp, ebp
:0043D45C 5D                      pop ebp
:0043D45D C20400                  ret 0004



* Referenced by a CALL at Address:
|:0043C5EE   
|
:0043D460 55                      push ebp
:0043D461 8BEC                    mov ebp, esp
:0043D463 83EC08                  sub esp, 00000008
:0043D466 894DF8                  mov dword ptr [ebp-08], ecx
:0043D469 C745FC00000000          mov [ebp-04], 00000000
:0043D470 EB09                    jmp 0043D47B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D4A0(U)
|
:0043D472 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D475 83C001                  add eax, 00000001
:0043D478 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D470(U)
|
:0043D47B 837DFC20                cmp dword ptr [ebp-04], 00000020
:0043D47F 7321                    jnb 0043D4A2
:0043D481 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D484 8B55F8                  mov edx, dword ptr [ebp-08]
:0043D487 C7448A6000000000        mov [edx+4*ecx+60], 00000000
:0043D48F 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D492 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043D495 C78481E000000000000000  mov dword ptr [ecx+4*eax+000000E0], 00000000
:0043D4A0 EBD0                    jmp 0043D472

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D47F(C)
|
:0043D4A2 8BE5                    mov esp, ebp
:0043D4A4 5D                      pop ebp
:0043D4A5 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A6B8   , :0042A6FE   , :0042A744   , :0042A798   , :0042A7DF   
|:0042A841   , :0042A8CB   , :0042AB40   , :0042AC77   , :0042ACBE   
|:0042AD02   , :0042AD44   , :0042ADA4   , :0042ADE8   , :0042AFC2   
|:0043BC71   , :0043BCCB   , :0043BD3B   , :0043C0E1   , :0043C304   
|
:0043D4A6 55                      push ebp
:0043D4A7 8BEC                    mov ebp, esp
:0043D4A9 51                      push ecx
:0043D4AA 894DFC                  mov dword ptr [ebp-04], ecx
:0043D4AD 8B4508                  mov eax, dword ptr [ebp+08]
:0043D4B0 25FF000000              and eax, 000000FF
:0043D4B5 83F820                  cmp eax, 00000020
:0043D4B8 7E05                    jle 0043D4BF
:0043D4BA E983000000              jmp 0043D542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D4B8(C)
|
:0043D4BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D4C2 33D2                    xor edx, edx
:0043D4C4 8A5112                  mov dl, byte ptr [ecx+12]
:0043D4C7 83FA01                  cmp edx, 00000001
:0043D4CA 7402                    je 0043D4CE
:0043D4CC EB74                    jmp 0043D542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D4CA(C)
|
:0043D4CE 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D4D1 33C9                    xor ecx, ecx
:0043D4D3 8A4810                  mov cl, byte ptr [eax+10]
:0043D4D6 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D4D9 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0043D4DC E83F23FFFF              call 0042F820
:0043D4E1 25FF000000              and eax, 000000FF
:0043D4E6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D4E9 81E1FF000000            and ecx, 000000FF
:0043D4EF 3BC1                    cmp eax, ecx
:0043D4F1 7515                    jne 0043D508
:0043D4F3 8B5508                  mov edx, dword ptr [ebp+08]
:0043D4F6 81E2FF000000            and edx, 000000FF
:0043D4FC 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D4FF 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043D502 894C9060                mov dword ptr [eax+4*edx+60], ecx
:0043D506 EB3A                    jmp 0043D542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D4F1(C)
|
:0043D508 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D50B 33C0                    xor eax, eax
:0043D50D 8A4211                  mov al, byte ptr [edx+11]
:0043D510 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D513 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0043D516 E80523FFFF              call 0042F820
:0043D51B 25FF000000              and eax, 000000FF
:0043D520 8B550C                  mov edx, dword ptr [ebp+0C]
:0043D523 81E2FF000000            and edx, 000000FF
:0043D529 3BC2                    cmp eax, edx
:0043D52B 7515                    jne 0043D542
:0043D52D 8B4508                  mov eax, dword ptr [ebp+08]
:0043D530 25FF000000              and eax, 000000FF
:0043D535 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D538 8B5510                  mov edx, dword ptr [ebp+10]
:0043D53B 899481E0000000          mov dword ptr [ecx+4*eax+000000E0], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D4BA(U), :0043D4CC(U), :0043D506(U), :0043D52B(C)
|
:0043D542 8BE5                    mov esp, ebp
:0043D544 5D                      pop ebp
:0043D545 C20C00                  ret 000C


:0043D548 CC                      int 03
:0043D549 CC                      int 03
:0043D54A CC                      int 03
:0043D54B CC                      int 03
:0043D54C CC                      int 03
:0043D54D CC                      int 03
:0043D54E CC                      int 03
:0043D54F CC                      int 03

* Referenced by a CALL at Address:
|:0043AFA5   
|
:0043D550 55                      push ebp
:0043D551 8BEC                    mov ebp, esp
:0043D553 51                      push ecx
:0043D554 894DFC                  mov dword ptr [ebp-04], ecx
:0043D557 8B4508                  mov eax, dword ptr [ebp+08]
:0043D55A 25FF000000              and eax, 000000FF
:0043D55F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D562 8B448160                mov eax, dword ptr [ecx+4*eax+60]
:0043D566 8BE5                    mov esp, ebp
:0043D568 5D                      pop ebp
:0043D569 C20400                  ret 0004


:0043D56C CC                      int 03
:0043D56D CC                      int 03
:0043D56E CC                      int 03
:0043D56F CC                      int 03

* Referenced by a CALL at Address:
|:0043AFB8   
|
:0043D570 55                      push ebp
:0043D571 8BEC                    mov ebp, esp
:0043D573 51                      push ecx
:0043D574 894DFC                  mov dword ptr [ebp-04], ecx
:0043D577 8B4508                  mov eax, dword ptr [ebp+08]
:0043D57A 25FF000000              and eax, 000000FF
:0043D57F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D582 8B8481E0000000          mov eax, dword ptr [ecx+4*eax+000000E0]
:0043D589 8BE5                    mov esp, ebp
:0043D58B 5D                      pop ebp
:0043D58C C20400                  ret 0004


:0043D58F CC                      int 03

* Referenced by a CALL at Addresses:
|:00403D40   , :0042334B   , :0043BC93   , :004573E5   
|
:0043D590 55                      push ebp
:0043D591 8BEC                    mov ebp, esp
:0043D593 51                      push ecx
:0043D594 894DFC                  mov dword ptr [ebp-04], ecx
:0043D597 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D59A 8A4002                  mov al, byte ptr [eax+02]
:0043D59D 8BE5                    mov esp, ebp
:0043D59F 5D                      pop ebp
:0043D5A0 C3                      ret


:0043D5A1 CC                      int 03
:0043D5A2 CC                      int 03
:0043D5A3 CC                      int 03
:0043D5A4 CC                      int 03
:0043D5A5 CC                      int 03
:0043D5A6 CC                      int 03
:0043D5A7 CC                      int 03
:0043D5A8 CC                      int 03
:0043D5A9 CC                      int 03
:0043D5AA CC                      int 03
:0043D5AB CC                      int 03
:0043D5AC CC                      int 03
:0043D5AD CC                      int 03
:0043D5AE CC                      int 03
:0043D5AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0043C802   , :0043C84A   , :0043C896   , :0043C8DE   , :0043C92B   
|:0043C972   , :0043C97E   
|
:0043D5B0 55                      push ebp
:0043D5B1 8BEC                    mov ebp, esp
:0043D5B3 51                      push ecx
:0043D5B4 894DFC                  mov dword ptr [ebp-04], ecx
:0043D5B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D5BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D5BD 89485C                  mov dword ptr [eax+5C], ecx
:0043D5C0 8BE5                    mov esp, ebp
:0043D5C2 5D                      pop ebp
:0043D5C3 C20400                  ret 0004


:0043D5C6 CC                      int 03
:0043D5C7 CC                      int 03
:0043D5C8 CC                      int 03
:0043D5C9 CC                      int 03
:0043D5CA CC                      int 03
:0043D5CB CC                      int 03
:0043D5CC CC                      int 03
:0043D5CD CC                      int 03
:0043D5CE CC                      int 03
:0043D5CF CC                      int 03
:0043D5D0 55                      push ebp
:0043D5D1 8BEC                    mov ebp, esp
:0043D5D3 E807000000              call 0043D5DF
:0043D5D8 E811000000              call 0043D5EE
:0043D5DD 5D                      pop ebp
:0043D5DE C3                      ret



* Referenced by a CALL at Address:
|:0043D5D3   
|
:0043D5DF 55                      push ebp
:0043D5E0 8BEC                    mov ebp, esp
:0043D5E2 B99C034B00              mov ecx, 004B039C
:0043D5E7 E854A2FCFF              call 00407840
:0043D5EC 5D                      pop ebp
:0043D5ED C3                      ret



* Referenced by a CALL at Address:
|:0043D5D8   
|
:0043D5EE 55                      push ebp
:0043D5EF 8BEC                    mov ebp, esp
:0043D5F1 6800D64300              push 0043D600
:0043D5F6 E875FE0200              call 0046D470
:0043D5FB 83C404                  add esp, 00000004
:0043D5FE 5D                      pop ebp
:0043D5FF C3                      ret


:0043D600 55                      push ebp
:0043D601 8BEC                    mov ebp, esp
:0043D603 B99C034B00              mov ecx, 004B039C
:0043D608 E89386FEFF              call 00425CA0
:0043D60D 5D                      pop ebp
:0043D60E C3                      ret



* Referenced by a CALL at Address:
|:00446784   
|
:0043D60F 55                      push ebp
:0043D610 8BEC                    mov ebp, esp
:0043D612 51                      push ecx
:0043D613 894DFC                  mov dword ptr [ebp-04], ecx
:0043D616 8B4514                  mov eax, dword ptr [ebp+14]
:0043D619 50                      push eax
:0043D61A 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D61D 51                      push ecx
:0043D61E 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D621 52                      push edx
:0043D622 8A4508                  mov al, byte ptr [ebp+08]
:0043D625 50                      push eax
:0043D626 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D629 E80A030000              call 0043D938
:0043D62E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D631 8B11                    mov edx, dword ptr [ecx]
:0043D633 83E201                  and edx, 00000001
:0043D636 85D2                    test edx, edx
:0043D638 7416                    je 0043D650
:0043D63A 6A00                    push 00000000
:0043D63C 8A4510                  mov al, byte ptr [ebp+10]
:0043D63F 50                      push eax
:0043D640 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D643 51                      push ecx
:0043D644 8A5508                  mov dl, byte ptr [ebp+08]
:0043D647 52                      push edx
:0043D648 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D64B E8A7270000              call 0043FDF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D638(C)
|
:0043D650 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D653 8B08                    mov ecx, dword ptr [eax]
:0043D655 83E102                  and ecx, 00000002
:0043D658 85C9                    test ecx, ecx
:0043D65A 740E                    je 0043D66A
:0043D65C 6A00                    push 00000000
:0043D65E 8A5510                  mov dl, byte ptr [ebp+10]
:0043D661 52                      push edx
:0043D662 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D665 E80E270000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D65A(C)
|
:0043D66A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D66D 8B08                    mov ecx, dword ptr [eax]
:0043D66F 83E104                  and ecx, 00000004
:0043D672 85C9                    test ecx, ecx
:0043D674 7418                    je 0043D68E
:0043D676 8B5514                  mov edx, dword ptr [ebp+14]
:0043D679 52                      push edx
:0043D67A 8A4510                  mov al, byte ptr [ebp+10]
:0043D67D 50                      push eax
:0043D67E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D681 51                      push ecx
:0043D682 8A5508                  mov dl, byte ptr [ebp+08]
:0043D685 52                      push edx
:0043D686 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D689 E89E2B0000              call 0044022C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D674(C)
|
:0043D68E 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D691 8B08                    mov ecx, dword ptr [eax]
:0043D693 83E110                  and ecx, 00000010
:0043D696 85C9                    test ecx, ecx
:0043D698 740E                    je 0043D6A8

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D69A 6A02                    push 00000002
:0043D69C 8A5510                  mov dl, byte ptr [ebp+10]
:0043D69F 52                      push edx
:0043D6A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D6A3 E8D0260000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D698(C)
|
:0043D6A8 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D6AB 8B08                    mov ecx, dword ptr [eax]
:0043D6AD 83E120                  and ecx, 00000020
:0043D6B0 85C9                    test ecx, ecx
:0043D6B2 7418                    je 0043D6CC
:0043D6B4 8B5514                  mov edx, dword ptr [ebp+14]
:0043D6B7 52                      push edx
:0043D6B8 8A4510                  mov al, byte ptr [ebp+10]
:0043D6BB 50                      push eax
:0043D6BC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D6BF 51                      push ecx
:0043D6C0 8A5508                  mov dl, byte ptr [ebp+08]
:0043D6C3 52                      push edx
:0043D6C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D6C7 E82F320000              call 004408FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D6B2(C)
|
:0043D6CC 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D6CF 8B08                    mov ecx, dword ptr [eax]
:0043D6D1 83E140                  and ecx, 00000040
:0043D6D4 85C9                    test ecx, ecx
:0043D6D6 740E                    je 0043D6E6
:0043D6D8 6A01                    push 00000001
:0043D6DA 8A5510                  mov dl, byte ptr [ebp+10]
:0043D6DD 52                      push edx
:0043D6DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D6E1 E892260000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D6D6(C)
|
:0043D6E6 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D6E9 8B08                    mov ecx, dword ptr [eax]
:0043D6EB 81E180000000            and ecx, 00000080
:0043D6F1 85C9                    test ecx, ecx
:0043D6F3 741A                    je 0043D70F
:0043D6F5 8B5514                  mov edx, dword ptr [ebp+14]
:0043D6F8 52                      push edx
:0043D6F9 8A4510                  mov al, byte ptr [ebp+10]
:0043D6FC 50                      push eax
:0043D6FD 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D700 51                      push ecx
:0043D701 8A5508                  mov dl, byte ptr [ebp+08]
:0043D704 52                      push edx
:0043D705 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D708 E8473B0000              call 00441254
:0043D70D EB1B                    jmp 0043D72A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D6F3(C)
|
:0043D70F 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D712 8B08                    mov ecx, dword ptr [eax]
:0043D714 81E100010000            and ecx, 00000100
:0043D71A 85C9                    test ecx, ecx
:0043D71C 740C                    je 0043D72A
:0043D71E 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D721 52                      push edx
:0043D722 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D725 E85A3F0000              call 00441684

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D70D(U), :0043D71C(C)
|
:0043D72A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D72D 8B08                    mov ecx, dword ptr [eax]
:0043D72F 81E100020000            and ecx, 00000200
:0043D735 85C9                    test ecx, ecx
:0043D737 7416                    je 0043D74F
:0043D739 6A01                    push 00000001
:0043D73B 8A5510                  mov dl, byte ptr [ebp+10]
:0043D73E 52                      push edx
:0043D73F 8A450C                  mov al, byte ptr [ebp+0C]
:0043D742 50                      push eax
:0043D743 8A4D08                  mov cl, byte ptr [ebp+08]
:0043D746 51                      push ecx
:0043D747 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D74A E8A8260000              call 0043FDF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D737(C)
|
:0043D74F 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D752 8B02                    mov eax, dword ptr [edx]
:0043D754 83E040                  and eax, 00000040
:0043D757 85C0                    test eax, eax
:0043D759 7436                    je 0043D791
:0043D75B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043D75E 81E1FF000000            and ecx, 000000FF
:0043D764 83F91A                  cmp ecx, 0000001A
:0043D767 750C                    jne 0043D775
:0043D769 6A01                    push 00000001
:0043D76B 6A1F                    push 0000001F
:0043D76D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D770 E803260000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D767(C)
|
:0043D775 8B5510                  mov edx, dword ptr [ebp+10]
:0043D778 81E2FF000000            and edx, 000000FF
:0043D77E 83FA1B                  cmp edx, 0000001B
:0043D781 750E                    jne 0043D791
:0043D783 6A01                    push 00000001
:0043D785 8A4510                  mov al, byte ptr [ebp+10]
:0043D788 50                      push eax
:0043D789 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D78C E8E7250000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D759(C), :0043D781(C)
|
:0043D791 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D794 8B11                    mov edx, dword ptr [ecx]
:0043D796 81E200020000            and edx, 00000200
:0043D79C 85D2                    test edx, edx
:0043D79E 7433                    je 0043D7D3
:0043D7A0 8B4510                  mov eax, dword ptr [ebp+10]
:0043D7A3 25FF000000              and eax, 000000FF
:0043D7A8 83F81A                  cmp eax, 0000001A
:0043D7AB 740E                    je 0043D7BB
:0043D7AD 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043D7B0 81E1FF000000            and ecx, 000000FF
:0043D7B6 83F91B                  cmp ecx, 0000001B
:0043D7B9 7518                    jne 0043D7D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D7AB(C)
|
:0043D7BB 6A00                    push 00000000
:0043D7BD 6A01                    push 00000001
:0043D7BF 8A5510                  mov dl, byte ptr [ebp+10]
:0043D7C2 52                      push edx
:0043D7C3 8A450C                  mov al, byte ptr [ebp+0C]
:0043D7C6 50                      push eax
:0043D7C7 8A4D08                  mov cl, byte ptr [ebp+08]
:0043D7CA 51                      push ecx
:0043D7CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D7CE E845290000              call 00440118

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D79E(C), :0043D7B9(C)
|
:0043D7D3 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D7D6 8B02                    mov eax, dword ptr [edx]
:0043D7D8 2500040000              and eax, 00000400
:0043D7DD 85C0                    test eax, eax
:0043D7DF 740E                    je 0043D7EF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D7E1 6A02                    push 00000002
:0043D7E3 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D7E6 51                      push ecx
:0043D7E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D7EA E889250000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D7DF(C)
|
:0043D7EF 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D7F2 8B02                    mov eax, dword ptr [edx]
:0043D7F4 2500100000              and eax, 00001000
:0043D7F9 85C0                    test eax, eax
:0043D7FB 740E                    je 0043D80B

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D7FD 6A02                    push 00000002
:0043D7FF 8A4D08                  mov cl, byte ptr [ebp+08]
:0043D802 51                      push ecx
:0043D803 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D806 E8943E0000              call 0044169F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D7FB(C)
|
:0043D80B 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D80E 8B02                    mov eax, dword ptr [edx]
:0043D810 2500200000              and eax, 00002000
:0043D815 85C0                    test eax, eax
:0043D817 7416                    je 0043D82F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D819 6A02                    push 00000002
:0043D81B 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D81E 51                      push ecx
:0043D81F 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D822 52                      push edx
:0043D823 8A4508                  mov al, byte ptr [ebp+08]
:0043D826 50                      push eax
:0043D827 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D82A E8C8250000              call 0043FDF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D817(C)
|
:0043D82F 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043D832 81E1FF000000            and ecx, 000000FF
:0043D838 83F90D                  cmp ecx, 0000000D
:0043D83B 0F85DB000000            jne 0043D91C
:0043D841 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D844 8B02                    mov eax, dword ptr [edx]
:0043D846 2500040000              and eax, 00000400
:0043D84B 85C0                    test eax, eax
:0043D84D 740C                    je 0043D85B
:0043D84F 6A01                    push 00000001
:0043D851 6A1A                    push 0000001A
:0043D853 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D856 E81D250000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D84D(C)
|
:0043D85B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D85E 8B11                    mov edx, dword ptr [ecx]
:0043D860 81E200100000            and edx, 00001000
:0043D866 85D2                    test edx, edx
:0043D868 741E                    je 0043D888

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D86A 6A02                    push 00000002
:0043D86C 6A1A                    push 0000001A
:0043D86E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D871 E8AF110000              call 0043EA25
:0043D876 85C0                    test eax, eax
:0043D878 740E                    je 0043D888

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D87A 6A02                    push 00000002
:0043D87C 8A4508                  mov al, byte ptr [ebp+08]
:0043D87F 50                      push eax
:0043D880 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D883 E8173E0000              call 0044169F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D868(C), :0043D878(C)
|
:0043D888 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D88B 8B11                    mov edx, dword ptr [ecx]
:0043D88D 81E200200000            and edx, 00002000
:0043D893 85D2                    test edx, edx
:0043D895 7418                    je 0043D8AF
:0043D897 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D899 6A02                    push 00000002
:0043D89B 8A4510                  mov al, byte ptr [ebp+10]
:0043D89E 50                      push eax
:0043D89F 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D8A2 51                      push ecx
:0043D8A3 8A5508                  mov dl, byte ptr [ebp+08]
:0043D8A6 52                      push edx
:0043D8A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D8AA E869280000              call 00440118

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D895(C)
|
:0043D8AF 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D8B2 8B08                    mov ecx, dword ptr [eax]
:0043D8B4 81E100040000            and ecx, 00000400
:0043D8BA 85C9                    test ecx, ecx
:0043D8BC 740C                    je 0043D8CA
:0043D8BE 6A01                    push 00000001
:0043D8C0 6A1D                    push 0000001D
:0043D8C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D8C5 E8AE240000              call 0043FD78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D8BC(C)
|
:0043D8CA 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D8CD 8B02                    mov eax, dword ptr [edx]
:0043D8CF 2500100000              and eax, 00001000
:0043D8D4 85C0                    test eax, eax
:0043D8D6 741E                    je 0043D8F6

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D8D8 6A02                    push 00000002
:0043D8DA 6A1A                    push 0000001A
:0043D8DC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D8DF E841110000              call 0043EA25
:0043D8E4 85C0                    test eax, eax
:0043D8E6 740E                    je 0043D8F6

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D8E8 6A02                    push 00000002
:0043D8EA 8A4D08                  mov cl, byte ptr [ebp+08]
:0043D8ED 51                      push ecx
:0043D8EE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D8F1 E8A93D0000              call 0044169F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D8D6(C), :0043D8E6(C)
|
:0043D8F6 8B55FC                  mov edx, dword ptr [ebp-04]
:0043D8F9 8B02                    mov eax, dword ptr [edx]
:0043D8FB 2500200000              and eax, 00002000
:0043D900 85C0                    test eax, eax
:0043D902 7418                    je 0043D91C
:0043D904 6A01                    push 00000001

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043D906 6A02                    push 00000002
:0043D908 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D90B 51                      push ecx
:0043D90C 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D90F 52                      push edx
:0043D910 8A4508                  mov al, byte ptr [ebp+08]
:0043D913 50                      push eax
:0043D914 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D917 E8FC270000              call 00440118

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D83B(C), :0043D902(C)
|
:0043D91C 6A00                    push 00000000
:0043D91E 6A00                    push 00000000
:0043D920 6802020000              push 00000202
:0043D925 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0043D92B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0043D92C FF15D8864B00            Call dword ptr [004B86D8]
:0043D932 8BE5                    mov esp, ebp
:0043D934 5D                      pop ebp
:0043D935 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0043D629   
|
:0043D938 55                      push ebp
:0043D939 8BEC                    mov ebp, esp
:0043D93B 51                      push ecx
:0043D93C 894DFC                  mov dword ptr [ebp-04], ecx
:0043D93F 8B45FC                  mov eax, dword ptr [ebp-04]
:0043D942 C70000000000            mov dword ptr [eax], 00000000
:0043D948 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D94B 81E1FF000000            and ecx, 000000FF
:0043D951 81F9FF000000            cmp ecx, 000000FF
:0043D957 7409                    je 0043D962
:0043D959 8A5508                  mov dl, byte ptr [ebp+08]
:0043D95C 881598034B00            mov byte ptr [004B0398], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D957(C)
|
:0043D962 8B4508                  mov eax, dword ptr [ebp+08]
:0043D965 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043D96A 3DFF000000              cmp eax, 000000FF
:0043D96F 0F8498000000            je 0043DA0D
:0043D975 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D978 51                      push ecx
:0043D979 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D97C E853010000              call 0043DAD4
:0043D981 85C0                    test eax, eax
:0043D983 7507                    jne 0043D98C
:0043D985 33C0                    xor eax, eax
:0043D987 E942010000              jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D983(C)
|
:0043D98C 8A5510                  mov dl, byte ptr [ebp+10]
:0043D98F 52                      push edx
:0043D990 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D993 E8B3020000              call 0043DC4B
:0043D998 8A4510                  mov al, byte ptr [ebp+10]
:0043D99B 50                      push eax
:0043D99C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D99F 51                      push ecx
:0043D9A0 8A5508                  mov dl, byte ptr [ebp+08]
:0043D9A3 52                      push edx
:0043D9A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D9A7 E8B9020000              call 0043DC65
:0043D9AC 85C0                    test eax, eax
:0043D9AE 7507                    jne 0043D9B7
:0043D9B0 33C0                    xor eax, eax
:0043D9B2 E917010000              jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D9AE(C)
|
:0043D9B7 8B4514                  mov eax, dword ptr [ebp+14]
:0043D9BA 50                      push eax
:0043D9BB 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D9BE 51                      push ecx
:0043D9BF 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D9C2 52                      push edx
:0043D9C3 8A4508                  mov al, byte ptr [ebp+08]
:0043D9C6 50                      push eax
:0043D9C7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D9CA E8400C0000              call 0043E60F
:0043D9CF 85C0                    test eax, eax
:0043D9D1 7507                    jne 0043D9DA
:0043D9D3 33C0                    xor eax, eax
:0043D9D5 E9F4000000              jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D9D1(C)
|
:0043D9DA 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D9DD 51                      push ecx
:0043D9DE 8A5508                  mov dl, byte ptr [ebp+08]
:0043D9E1 52                      push edx
:0043D9E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D9E5 E895110000              call 0043EB7F
:0043D9EA 8B4514                  mov eax, dword ptr [ebp+14]
:0043D9ED 50                      push eax
:0043D9EE 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D9F1 51                      push ecx
:0043D9F2 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D9F5 52                      push edx
:0043D9F6 8A4508                  mov al, byte ptr [ebp+08]
:0043D9F9 50                      push eax
:0043D9FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D9FD E8A4110000              call 0043EBA6
:0043DA02 85C0                    test eax, eax
:0043DA04 7507                    jne 0043DA0D
:0043DA06 33C0                    xor eax, eax
:0043DA08 E9C1000000              jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D96F(C), :0043DA04(C)
|
:0043DA0D 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043DA10 51                      push ecx
:0043DA11 8A5510                  mov dl, byte ptr [ebp+10]
:0043DA14 52                      push edx
:0043DA15 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DA18 E81A170000              call 0043F137
:0043DA1D 8B4514                  mov eax, dword ptr [ebp+14]
:0043DA20 50                      push eax
:0043DA21 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DA24 51                      push ecx
:0043DA25 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DA28 52                      push edx
:0043DA29 8A4508                  mov al, byte ptr [ebp+08]
:0043DA2C 50                      push eax
:0043DA2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DA30 E897170000              call 0043F1CC
:0043DA35 85C0                    test eax, eax
:0043DA37 7507                    jne 0043DA40
:0043DA39 33C0                    xor eax, eax
:0043DA3B E98E000000              jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DA37(C)
|
:0043DA40 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043DA43 51                      push ecx
:0043DA44 8A5510                  mov dl, byte ptr [ebp+10]
:0043DA47 52                      push edx
:0043DA48 8A450C                  mov al, byte ptr [ebp+0C]
:0043DA4B 50                      push eax
:0043DA4C 8A4D08                  mov cl, byte ptr [ebp+08]
:0043DA4F 51                      push ecx
:0043DA50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DA53 E8E51A0000              call 0043F53D
:0043DA58 85C0                    test eax, eax
:0043DA5A 7504                    jne 0043DA60
:0043DA5C 33C0                    xor eax, eax
:0043DA5E EB6E                    jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DA5A(C)
|
:0043DA60 8B5514                  mov edx, dword ptr [ebp+14]
:0043DA63 52                      push edx
:0043DA64 8A4510                  mov al, byte ptr [ebp+10]
:0043DA67 50                      push eax
:0043DA68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DA6B E8B81E0000              call 0043F928
:0043DA70 85C0                    test eax, eax
:0043DA72 7504                    jne 0043DA78
:0043DA74 33C0                    xor eax, eax
:0043DA76 EB56                    jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DA72(C)
|
:0043DA78 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DA7B 81E1FF000000            and ecx, 000000FF
:0043DA81 81F9FF000000            cmp ecx, 000000FF
:0043DA87 7440                    je 0043DAC9
:0043DA89 8B5514                  mov edx, dword ptr [ebp+14]
:0043DA8C 52                      push edx
:0043DA8D 8A4510                  mov al, byte ptr [ebp+10]
:0043DA90 50                      push eax
:0043DA91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DA94 E859200000              call 0043FAF2
:0043DA99 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043DA9C 51                      push ecx
:0043DA9D 8A5510                  mov dl, byte ptr [ebp+10]
:0043DAA0 52                      push edx
:0043DAA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DAA4 E8EB200000              call 0043FB94
:0043DAA9 85C0                    test eax, eax
:0043DAAB 7504                    jne 0043DAB1
:0043DAAD 33C0                    xor eax, eax
:0043DAAF EB1D                    jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DAAB(C)
|
:0043DAB1 8B4514                  mov eax, dword ptr [ebp+14]
:0043DAB4 50                      push eax
:0043DAB5 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DAB8 51                      push ecx
:0043DAB9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DABC E8C5210000              call 0043FC86
:0043DAC1 85C0                    test eax, eax
:0043DAC3 7504                    jne 0043DAC9
:0043DAC5 33C0                    xor eax, eax
:0043DAC7 EB05                    jmp 0043DACE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DA87(C), :0043DAC3(C)
|
:0043DAC9 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D987(U), :0043D9B2(U), :0043D9D5(U), :0043DA08(U), :0043DA3B(U)
|:0043DA5E(U), :0043DA76(U), :0043DAAF(U), :0043DAC7(U)
|
:0043DACE 8BE5                    mov esp, ebp
:0043DAD0 5D                      pop ebp
:0043DAD1 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0043D97C   
|
:0043DAD4 55                      push ebp
:0043DAD5 8BEC                    mov ebp, esp
:0043DAD7 51                      push ecx
:0043DAD8 894DFC                  mov dword ptr [ebp-04], ecx
:0043DADB B801000000              mov eax, 00000001
:0043DAE0 8BE5                    mov esp, ebp
:0043DAE2 5D                      pop ebp
:0043DAE3 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043FA50   , :0043FD0E   , :004401D2   , :00441C23   
|
:0043DAE6 55                      push ebp
:0043DAE7 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043DAE9 6AFF                    push FFFFFFFF
:0043DAEB 685C3A4700              push 00473A5C
:0043DAF0 64A100000000            mov eax, dword ptr fs:[00000000]
:0043DAF6 50                      push eax
:0043DAF7 64892500000000          mov dword ptr fs:[00000000], esp
:0043DAFE 81EC1C010000            sub esp, 0000011C
:0043DB04 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:0043DB0A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DB10 E8EB9BFCFF              call 00407700
:0043DB15 C745FC00000000          mov [ebp-04], 00000000
:0043DB1C 8B450C                  mov eax, dword ptr [ebp+0C]
:0043DB1F 25FF000000              and eax, 000000FF
:0043DB24 83F805                  cmp eax, 00000005
:0043DB27 741D                    je 0043DB46
:0043DB29 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043DB2C 81E1FF000000            and ecx, 000000FF
:0043DB32 69C9001B0000            imul ecx, 00001B00
:0043DB38 81C100600000            add ecx, 00006000
:0043DB3E 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0043DB44 EB0A                    jmp 0043DB50

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DB27(C)
|
:0043DB46 C785ECFEFFFF00020200    mov dword ptr [ebp+FFFFFEEC], 00020200

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DB44(U)
|

* Possible StringData Ref from Data Obj ->"SPANEL.E4"
                                  |
:0043DB50 68E07A4700              push 00477AE0
:0043DB55 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DB5B E8D567FDFF              call 00414335
:0043DB60 85C0                    test eax, eax
:0043DB62 7527                    jne 0043DB8B
:0043DB64 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:0043DB6E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DB75 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DB7B E8A09BFCFF              call 00407720
:0043DB80 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0043DB86 E9B0000000              jmp 0043DC3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DB62(C)
|
:0043DB8B 6A00                    push 00000000
:0043DB8D B930DA4A00              mov ecx, 004ADA30
:0043DB92 E8075AFDFF              call 0041359E
:0043DB97 0385ECFEFFFF            add eax, dword ptr [ebp+FFFFFEEC]
:0043DB9D 50                      push eax
:0043DB9E 8B5508                  mov edx, dword ptr [ebp+08]
:0043DBA1 81E2FF000000            and edx, 000000FF
:0043DBA7 52                      push edx
:0043DBA8 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DBAE E8D668FDFF              call 00414489
:0043DBB3 85C0                    test eax, eax
:0043DBB5 752F                    jne 0043DBE6
:0043DBB7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DBBD E84A2AFDFF              call 0041060C
:0043DBC2 C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:0043DBCC C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DBD3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DBD9 E8429BFCFF              call 00407720
:0043DBDE 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0043DBE4 EB55                    jmp 0043DC3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DBB5(C)
|
:0043DBE6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DBEC E81B2AFDFF              call 0041060C
:0043DBF1 85C0                    test eax, eax
:0043DBF3 7524                    jne 0043DC19
:0043DBF5 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:0043DBFF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DC06 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DC0C E80F9BFCFF              call 00407720
:0043DC11 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0043DC17 EB22                    jmp 0043DC3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DBF3(C)
|
:0043DC19 C785DCFEFFFF01000000    mov dword ptr [ebp+FFFFFEDC], 00000001
:0043DC23 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DC2A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043DC30 E8EB9AFCFF              call 00407720
:0043DC35 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DB86(U), :0043DBE4(U), :0043DC17(U)
|
:0043DC3B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043DC3E 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043DC45 8BE5                    mov esp, ebp
:0043DC47 5D                      pop ebp
:0043DC48 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0043D993   
|
:0043DC4B 55                      push ebp
:0043DC4C 8BEC                    mov ebp, esp
:0043DC4E 51                      push ecx
:0043DC4F 894DFC                  mov dword ptr [ebp-04], ecx
:0043DC52 8B45FC                  mov eax, dword ptr [ebp-04]
:0043DC55 8B08                    mov ecx, dword ptr [eax]
:0043DC57 83C902                  or ecx, 00000002
:0043DC5A 8B55FC                  mov edx, dword ptr [ebp-04]
:0043DC5D 890A                    mov dword ptr [edx], ecx
:0043DC5F 8BE5                    mov esp, ebp
:0043DC61 5D                      pop ebp
:0043DC62 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0043D9A7   
|
:0043DC65 55                      push ebp
:0043DC66 8BEC                    mov ebp, esp
:0043DC68 83EC0C                  sub esp, 0000000C
:0043DC6B 894DF4                  mov dword ptr [ebp-0C], ecx
:0043DC6E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DC71 81E1FF000000            and ecx, 000000FF
:0043DC77 6BC924                  imul ecx, 00000024
:0043DC7A 81C108F54A00            add ecx, 004AF508
:0043DC80 E81BB7FEFF              call 004293A0
:0043DC85 50                      push eax
:0043DC86 E8F49C0000              call 0044797F
:0043DC8B 83C404                  add esp, 00000004
:0043DC8E 25FF000000              and eax, 000000FF
:0043DC93 83F80A                  cmp eax, 0000000A
:0043DC96 7409                    je 0043DCA1
:0043DC98 C745F800000000          mov [ebp-08], 00000000
:0043DC9F EB07                    jmp 0043DCA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DC96(C)
|
:0043DCA1 C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DC9F(U)
|
:0043DCA8 8B45F8                  mov eax, dword ptr [ebp-08]
:0043DCAB 50                      push eax
:0043DCAC 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DCAF 51                      push ecx
:0043DCB0 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DCB3 52                      push edx
:0043DCB4 8A4508                  mov al, byte ptr [ebp+08]
:0043DCB7 50                      push eax
:0043DCB8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043DCBB E847000000              call 0043DD07
:0043DCC0 8945FC                  mov dword ptr [ebp-04], eax
:0043DCC3 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0043DCC7 7507                    jne 0043DCD0
:0043DCC9 B801000000              mov eax, 00000001
:0043DCCE EB31                    jmp 0043DD01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DCC7(C)
|
:0043DCD0 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DCD3 51                      push ecx
:0043DCD4 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DCD7 52                      push edx
:0043DCD8 8A4508                  mov al, byte ptr [ebp+08]
:0043DCDB 50                      push eax
:0043DCDC 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043DCDF 51                      push ecx
:0043DCE0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043DCE3 E899000000              call 0043DD81
:0043DCE8 85C0                    test eax, eax
:0043DCEA 7504                    jne 0043DCF0
:0043DCEC 33C0                    xor eax, eax
:0043DCEE EB11                    jmp 0043DD01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DCEA(C)
|
:0043DCF0 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043DCF3 8B02                    mov eax, dword ptr [edx]
:0043DCF5 0C04                    or al, 04
:0043DCF7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043DCFA 8901                    mov dword ptr [ecx], eax
:0043DCFC B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DCCE(U), :0043DCEE(U)
|
:0043DD01 8BE5                    mov esp, ebp
:0043DD03 5D                      pop ebp
:0043DD04 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0043DCBB   
|
:0043DD07 55                      push ebp
:0043DD08 8BEC                    mov ebp, esp
:0043DD0A 83EC08                  sub esp, 00000008
:0043DD0D 894DF8                  mov dword ptr [ebp-08], ecx
:0043DD10 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DD17 837D1400                cmp dword ptr [ebp+14], 00000000
:0043DD1B 752A                    jne 0043DD47
:0043DD1D 8B4508                  mov eax, dword ptr [ebp+08]
:0043DD20 25FF000000              and eax, 000000FF
:0043DD25 50                      push eax
:0043DD26 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DD29 81E1FF000000            and ecx, 000000FF
:0043DD2F 6BC924                  imul ecx, 00000024
:0043DD32 81C108F54A00            add ecx, 004AF508
:0043DD38 E8C5BAFEFF              call 00429802
:0043DD3D 25FF000000              and eax, 000000FF
:0043DD42 8945FC                  mov dword ptr [ebp-04], eax
:0043DD45 EB1F                    jmp 0043DD66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DD1B(C)
|
:0043DD47 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DD4A 81E1FF000000            and ecx, 000000FF
:0043DD50 6BC924                  imul ecx, 00000024
:0043DD53 81C108F54A00            add ecx, 004AF508
:0043DD59 E80DE5FEFF              call 0042C26B
:0043DD5E 25FFFF0000              and eax, 0000FFFF
:0043DD63 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DD45(U)
|
:0043DD66 8B45FC                  mov eax, dword ptr [ebp-04]
:0043DD69 8BE5                    mov esp, ebp
:0043DD6B 5D                      pop ebp
:0043DD6C C21000                  ret 0010



* Referenced by a CALL at Address:
|:0043DDC9   
|
:0043DD6F 55                      push ebp
:0043DD70 8BEC                    mov ebp, esp
:0043DD72 51                      push ecx
:0043DD73 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043DD76 B803000000              mov eax, 00000003
:0043DD7B 8BE5                    mov esp, ebp
:0043DD7D 5D                      pop ebp
:0043DD7E C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0043DCE3   
|
:0043DD81 55                      push ebp
:0043DD82 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043DD84 6AFF                    push FFFFFFFF
:0043DD86 68723A4700              push 00473A72
:0043DD8B 64A100000000            mov eax, dword ptr fs:[00000000]
:0043DD91 50                      push eax
:0043DD92 64892500000000          mov dword ptr fs:[00000000], esp
:0043DD99 81EC30010000            sub esp, 00000130
:0043DD9F 898DC8FEFFFF            mov dword ptr [ebp+FFFFFEC8], ecx
:0043DDA5 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DDAB E85099FCFF              call 00407700
:0043DDB0 C745FC00000000          mov [ebp-04], 00000000
:0043DDB7 8A4514                  mov al, byte ptr [ebp+14]
:0043DDBA 50                      push eax
:0043DDBB 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DDBE 51                      push ecx
:0043DDBF 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DDC2 52                      push edx
:0043DDC3 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:0043DDC9 E8A1FFFFFF              call 0043DD6F
:0043DDCE 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax
:0043DDD4 83BDE0FEFFFF03          cmp dword ptr [ebp+FFFFFEE0], 00000003
:0043DDDB 0F85D9000000            jne 0043DEBA

* Possible StringData Ref from Data Obj ->"CHR_ATK.E4"
                                  |
:0043DDE1 68407B4700              push 00477B40
:0043DDE6 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DDEC E84465FDFF              call 00414335
:0043DDF1 85C0                    test eax, eax
:0043DDF3 7527                    jne 0043DE1C
:0043DDF5 C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:0043DDFF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DE06 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DE0C E80F99FCFF              call 00407720
:0043DE11 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0043DE17 E90F020000              jmp 0043E02B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DDF3(C)
|
:0043DE1C 6A00                    push 00000000
:0043DE1E B930DA4A00              mov ecx, 004ADA30
:0043DE23 E87657FDFF              call 0041359E
:0043DE28 05003D0100              add eax, 00013D00
:0043DE2D 50                      push eax
:0043DE2E 8B4508                  mov eax, dword ptr [ebp+08]
:0043DE31 25FF000000              and eax, 000000FF
:0043DE36 50                      push eax
:0043DE37 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DE3D E84766FDFF              call 00414489
:0043DE42 85C0                    test eax, eax
:0043DE44 7532                    jne 0043DE78
:0043DE46 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DE4C E8BB27FDFF              call 0041060C
:0043DE51 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0043DE5B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DE62 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DE68 E8B398FCFF              call 00407720
:0043DE6D 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0043DE73 E9B3010000              jmp 0043E02B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DE44(C)
|
:0043DE78 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DE7E E88927FDFF              call 0041060C
:0043DE83 85C0                    test eax, eax
:0043DE85 7527                    jne 0043DEAE
:0043DE87 C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:0043DE91 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DE98 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DE9E E87D98FCFF              call 00407720
:0043DEA3 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:0043DEA9 E97D010000              jmp 0043E02B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DE85(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043DEAE C785E8FEFFFF03000000    mov dword ptr [ebp+FFFFFEE8], 00000003
:0043DEB8 EB27                    jmp 0043DEE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DDDB(C)
|
:0043DEBA C785D0FEFFFF01000000    mov dword ptr [ebp+FFFFFED0], 00000001
:0043DEC4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043DECB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043DED1 E84A98FCFF              call 00407720
:0043DED6 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]
:0043DEDC E94A010000              jmp 0043E02B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DEB8(U)
|
:0043DEE1 6A00                    push 00000000
:0043DEE3 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DEE6 51                      push ecx
:0043DEE7 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DEEA 52                      push edx
:0043DEEB 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:0043DEF1 E855010000              call 0043E04B
:0043DEF6 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0043DEFC 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0043DF02 8985C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], eax
:0043DF08 83BDC4FEFFFF03          cmp dword ptr [ebp+FFFFFEC4], 00000003
:0043DF0F 0F87F4000000            ja 0043E009
:0043DF15 8B8DC4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC4]
:0043DF1B FF248D3BE04300          jmp dword ptr [4*ecx+0043E03B]
:0043DF22 6A00                    push 00000000
:0043DF24 B930DA4A00              mov ecx, 004ADA30
:0043DF29 E87056FDFF              call 0041359E
:0043DF2E 05009D0100              add eax, 00019D00
:0043DF33 8945F0                  mov dword ptr [ebp-10], eax
:0043DF36 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0043DF3C C1E20C                  shl edx, 0C
:0043DF3F 52                      push edx
:0043DF40 6A00                    push 00000000
:0043DF42 B930DA4A00              mov ecx, 004ADA30
:0043DF47 E85256FDFF              call 0041359E
:0043DF4C 50                      push eax
:0043DF4D 8B45F0                  mov eax, dword ptr [ebp-10]
:0043DF50 50                      push eax
:0043DF51 E8D9480200              call 0046282F
:0043DF56 83C40C                  add esp, 0000000C
:0043DF59 E9AB000000              jmp 0043E009
:0043DF5E 6A00                    push 00000000
:0043DF60 B930DA4A00              mov ecx, 004ADA30
:0043DF65 E83456FDFF              call 0041359E
:0043DF6A 05006D0100              add eax, 00016D00
:0043DF6F 8945F0                  mov dword ptr [ebp-10], eax
:0043DF72 6A00                    push 00000000
:0043DF74 B930DA4A00              mov ecx, 004ADA30
:0043DF79 E82056FDFF              call 0041359E
:0043DF7E 50                      push eax
:0043DF7F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043DF82 51                      push ecx
:0043DF83 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0043DF89 C1E206                  shl edx, 06
:0043DF8C 52                      push edx
:0043DF8D 6A40                    push 00000040
:0043DF8F E8A357FDFF              call 00413737
:0043DF94 83C410                  add esp, 00000010
:0043DF97 EB70                    jmp 0043E009
:0043DF99 6A00                    push 00000000
:0043DF9B B930DA4A00              mov ecx, 004ADA30
:0043DFA0 E8F955FDFF              call 0041359E
:0043DFA5 05006D0100              add eax, 00016D00
:0043DFAA 8945F0                  mov dword ptr [ebp-10], eax
:0043DFAD 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0043DFB3 C1E00C                  shl eax, 0C
:0043DFB6 50                      push eax
:0043DFB7 6A00                    push 00000000
:0043DFB9 B930DA4A00              mov ecx, 004ADA30
:0043DFBE E8DB55FDFF              call 0041359E
:0043DFC3 50                      push eax
:0043DFC4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043DFC7 51                      push ecx
:0043DFC8 E862480200              call 0046282F
:0043DFCD 83C40C                  add esp, 0000000C
:0043DFD0 EB37                    jmp 0043E009
:0043DFD2 6A00                    push 00000000
:0043DFD4 B930DA4A00              mov ecx, 004ADA30
:0043DFD9 E8C055FDFF              call 0041359E
:0043DFDE 05003D0100              add eax, 00013D00
:0043DFE3 8945F0                  mov dword ptr [ebp-10], eax
:0043DFE6 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0043DFEC C1E20C                  shl edx, 0C
:0043DFEF 52                      push edx
:0043DFF0 6A00                    push 00000000
:0043DFF2 B930DA4A00              mov ecx, 004ADA30
:0043DFF7 E8A255FDFF              call 0041359E
:0043DFFC 50                      push eax
:0043DFFD 8B45F0                  mov eax, dword ptr [ebp-10]
:0043E000 50                      push eax
:0043E001 E829480200              call 0046282F
:0043E006 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DF0F(C), :0043DF59(U), :0043DF97(U), :0043DFD0(U)
|
:0043E009 C785CCFEFFFF01000000    mov dword ptr [ebp+FFFFFECC], 00000001
:0043E013 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E01A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043E020 E8FB96FCFF              call 00407720
:0043E025 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DE17(U), :0043DE73(U), :0043DEA9(U), :0043DEDC(U)
|
:0043E02B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043E02E 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043E035 8BE5                    mov esp, ebp
:0043E037 5D                      pop ebp
:0043E038 C21000                  ret 0010



:0043E03B 22DF4300                DWORD 0043DF22
:0043E03F 5EDF4300                DWORD 0043DF5E
:0043E043 D2DF4300                DWORD 0043DFD2
:0043E047 99DF4300                DWORD 0043DF99



* Referenced by a CALL at Addresses:
|:0043DEF1   , :0043E79D   , :0043EFA4   , :0043F3C2   , :0043F5E1   
|:0043F5FE   , :00440308   , :00440BB7   , :00447890   , :004478A7   
|
:0043E04B 55                      push ebp
:0043E04C 8BEC                    mov ebp, esp
:0043E04E 83EC20                  sub esp, 00000020
:0043E051 894DE0                  mov dword ptr [ebp-20], ecx
:0043E054 8B4508                  mov eax, dword ptr [ebp+08]
:0043E057 25FF000000              and eax, 000000FF
:0043E05C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E05F 81E1FF000000            and ecx, 000000FF
:0043E065 3BC1                    cmp eax, ecx
:0043E067 7527                    jne 0043E090
:0043E069 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E06C 81E1FF000000            and ecx, 000000FF
:0043E072 6BC924                  imul ecx, 00000024
:0043E075 81C108F54A00            add ecx, 004AF508
:0043E07B E8701CFFFF              call 0042FCF0
:0043E080 25FF000000              and eax, 000000FF
:0043E085 8945F4                  mov dword ptr [ebp-0C], eax
:0043E088 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043E08B E979050000              jmp 0043E609

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E067(C)
|
:0043E090 8B5508                  mov edx, dword ptr [ebp+08]
:0043E093 81E2FF000000            and edx, 000000FF
:0043E099 81FAFF000000            cmp edx, 000000FF
:0043E09F 7527                    jne 0043E0C8
:0043E0A1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E0A4 81E1FF000000            and ecx, 000000FF
:0043E0AA 6BC924                  imul ecx, 00000024
:0043E0AD 81C108F54A00            add ecx, 004AF508
:0043E0B3 E8381CFFFF              call 0042FCF0
:0043E0B8 25FF000000              and eax, 000000FF
:0043E0BD 8945F4                  mov dword ptr [ebp-0C], eax
:0043E0C0 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043E0C3 E941050000              jmp 0043E609

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E09F(C)
|
:0043E0C8 8B450C                  mov eax, dword ptr [ebp+0C]
:0043E0CB 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043E0D0 3DFF000000              cmp eax, 000000FF
:0043E0D5 7527                    jne 0043E0FE
:0043E0D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E0DA 81E1FF000000            and ecx, 000000FF
:0043E0E0 6BC924                  imul ecx, 00000024
:0043E0E3 81C108F54A00            add ecx, 004AF508
:0043E0E9 E8021CFFFF              call 0042FCF0
:0043E0EE 25FF000000              and eax, 000000FF
:0043E0F3 8945F4                  mov dword ptr [ebp-0C], eax
:0043E0F6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043E0F9 E90B050000              jmp 0043E609

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E0D5(C)
|
:0043E0FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E101 81E1FF000000            and ecx, 000000FF
:0043E107 6BC924                  imul ecx, 00000024
:0043E10A 81C108F54A00            add ecx, 004AF508
:0043E110 E88BB2FEFF              call 004293A0
:0043E115 8A08                    mov cl, byte ptr [eax]
:0043E117 884DEC                  mov byte ptr [ebp-14], cl
:0043E11A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E11D 81E1FF000000            and ecx, 000000FF
:0043E123 6BC924                  imul ecx, 00000024
:0043E126 81C108F54A00            add ecx, 004AF508
:0043E12C E86FB2FEFF              call 004293A0
:0043E131 8A5001                  mov dl, byte ptr [eax+01]
:0043E134 8855FC                  mov byte ptr [ebp-04], dl
:0043E137 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E13A 81E1FF000000            and ecx, 000000FF
:0043E140 6BC924                  imul ecx, 00000024
:0043E143 81C108F54A00            add ecx, 004AF508
:0043E149 E852B2FEFF              call 004293A0
:0043E14E 8A00                    mov al, byte ptr [eax]
:0043E150 8845E8                  mov byte ptr [ebp-18], al
:0043E153 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E156 81E1FF000000            and ecx, 000000FF
:0043E15C 6BC924                  imul ecx, 00000024
:0043E15F 81C108F54A00            add ecx, 004AF508
:0043E165 E836B2FEFF              call 004293A0
:0043E16A 8A4801                  mov cl, byte ptr [eax+01]
:0043E16D 884DE4                  mov byte ptr [ebp-1C], cl
:0043E170 8B55FC                  mov edx, dword ptr [ebp-04]
:0043E173 81E2FF000000            and edx, 000000FF
:0043E179 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043E17C 25FF000000              and eax, 000000FF
:0043E181 3BD0                    cmp edx, eax
:0043E183 0F8EEB010000            jle 0043E374
:0043E189 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E18C 81E1FF000000            and ecx, 000000FF
:0043E192 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043E195 81E2FF000000            and edx, 000000FF
:0043E19B 2BCA                    sub ecx, edx
:0043E19D 884DF0                  mov byte ptr [ebp-10], cl
:0043E1A0 8B45EC                  mov eax, dword ptr [ebp-14]
:0043E1A3 25FF000000              and eax, 000000FF
:0043E1A8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043E1AB 81E1FF000000            and ecx, 000000FF
:0043E1B1 3BC1                    cmp eax, ecx
:0043E1B3 753E                    jne 0043E1F3
:0043E1B5 C745F400000000          mov [ebp-0C], 00000000
:0043E1BC 6A00                    push 00000000
:0043E1BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E1C1 81E1FF000000            and ecx, 000000FF
:0043E1C7 6BC924                  imul ecx, 00000024
:0043E1CA 81C108F54A00            add ecx, 004AF508
:0043E1D0 E80BBAFFFF              call 00439BE0

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043E1D5 6A02                    push 00000002
:0043E1D7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E1DA 81E1FF000000            and ecx, 000000FF
:0043E1E0 6BC924                  imul ecx, 00000024
:0043E1E3 81C108F54A00            add ecx, 004AF508
:0043E1E9 E8F2B9FFFF              call 00439BE0
:0043E1EE E97C010000              jmp 0043E36F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E1B3(C)
|
:0043E1F3 8B55EC                  mov edx, dword ptr [ebp-14]
:0043E1F6 81E2FF000000            and edx, 000000FF
:0043E1FC 8B45E8                  mov eax, dword ptr [ebp-18]
:0043E1FF 25FF000000              and eax, 000000FF
:0043E204 3BD0                    cmp edx, eax
:0043E206 0F8EB4000000            jle 0043E2C0
:0043E20C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E20F 81E1FF000000            and ecx, 000000FF
:0043E215 8B55E8                  mov edx, dword ptr [ebp-18]
:0043E218 81E2FF000000            and edx, 000000FF
:0043E21E 2BCA                    sub ecx, edx
:0043E220 884DF8                  mov byte ptr [ebp-08], cl
:0043E223 8B45F0                  mov eax, dword ptr [ebp-10]
:0043E226 25FF000000              and eax, 000000FF
:0043E22B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043E22E 81E1FF000000            and ecx, 000000FF
:0043E234 3BC1                    cmp eax, ecx
:0043E236 7E41                    jle 0043E279
:0043E238 8B5510                  mov edx, dword ptr [ebp+10]
:0043E23B F7DA                    neg edx
:0043E23D 1BD2                    sbb edx, edx
:0043E23F 83E207                  and edx, 00000007
:0043E242 8955F4                  mov dword ptr [ebp-0C], edx
:0043E245 6A00                    push 00000000
:0043E247 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E24A 81E1FF000000            and ecx, 000000FF
:0043E250 6BC924                  imul ecx, 00000024
:0043E253 81C108F54A00            add ecx, 004AF508
:0043E259 E882B9FFFF              call 00439BE0

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043E25E 6A02                    push 00000002
:0043E260 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E263 81E1FF000000            and ecx, 000000FF
:0043E269 6BC924                  imul ecx, 00000024
:0043E26C 81C108F54A00            add ecx, 004AF508
:0043E272 E869B9FFFF              call 00439BE0
:0043E277 EB42                    jmp 0043E2BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E236(C)
|
:0043E279 8B4510                  mov eax, dword ptr [ebp+10]
:0043E27C F7D8                    neg eax
:0043E27E 1BC0                    sbb eax, eax
:0043E280 83E004                  and eax, 00000004
:0043E283 83C003                  add eax, 00000003
:0043E286 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043E289 6A03                    push 00000003
:0043E28B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E28E 81E1FF000000            and ecx, 000000FF
:0043E294 6BC924                  imul ecx, 00000024
:0043E297 81C108F54A00            add ecx, 004AF508
:0043E29D E83EB9FFFF              call 00439BE0
:0043E2A2 6A01                    push 00000001
:0043E2A4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E2A7 81E1FF000000            and ecx, 000000FF
:0043E2AD 6BC924                  imul ecx, 00000024
:0043E2B0 81C108F54A00            add ecx, 004AF508
:0043E2B6 E825B9FFFF              call 00439BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E277(U)
|
:0043E2BB E9AF000000              jmp 0043E36F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E206(C)
|
:0043E2C0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043E2C3 81E1FF000000            and ecx, 000000FF
:0043E2C9 8B55EC                  mov edx, dword ptr [ebp-14]
:0043E2CC 81E2FF000000            and edx, 000000FF
:0043E2D2 2BCA                    sub ecx, edx
:0043E2D4 884DF8                  mov byte ptr [ebp-08], cl
:0043E2D7 8B45F0                  mov eax, dword ptr [ebp-10]
:0043E2DA 25FF000000              and eax, 000000FF
:0043E2DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043E2E2 81E1FF000000            and ecx, 000000FF
:0043E2E8 3BC1                    cmp eax, ecx
:0043E2EA 7E41                    jle 0043E32D
:0043E2EC 8B5510                  mov edx, dword ptr [ebp+10]
:0043E2EF F7DA                    neg edx
:0043E2F1 1BD2                    sbb edx, edx
:0043E2F3 83E204                  and edx, 00000004
:0043E2F6 8955F4                  mov dword ptr [ebp-0C], edx
:0043E2F9 6A00                    push 00000000
:0043E2FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E2FE 81E1FF000000            and ecx, 000000FF
:0043E304 6BC924                  imul ecx, 00000024
:0043E307 81C108F54A00            add ecx, 004AF508
:0043E30D E8CEB8FFFF              call 00439BE0

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043E312 6A02                    push 00000002
:0043E314 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E317 81E1FF000000            and ecx, 000000FF
:0043E31D 6BC924                  imul ecx, 00000024
:0043E320 81C108F54A00            add ecx, 004AF508
:0043E326 E8B5B8FFFF              call 00439BE0
:0043E32B EB42                    jmp 0043E36F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E2EA(C)
|
:0043E32D 8B4510                  mov eax, dword ptr [ebp+10]
:0043E330 F7D8                    neg eax
:0043E332 1BC0                    sbb eax, eax
:0043E334 83E003                  and eax, 00000003
:0043E337 83C001                  add eax, 00000001
:0043E33A 8945F4                  mov dword ptr [ebp-0C], eax
:0043E33D 6A01                    push 00000001
:0043E33F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E342 81E1FF000000            and ecx, 000000FF
:0043E348 6BC924                  imul ecx, 00000024
:0043E34B 81C108F54A00            add ecx, 004AF508
:0043E351 E88AB8FFFF              call 00439BE0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043E356 6A03                    push 00000003
:0043E358 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E35B 81E1FF000000            and ecx, 000000FF
:0043E361 6BC924                  imul ecx, 00000024
:0043E364 81C108F54A00            add ecx, 004AF508
:0043E36A E871B8FFFF              call 00439BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E1EE(U), :0043E2BB(U), :0043E32B(U)
|
:0043E36F E992020000              jmp 0043E606

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E183(C)
|
:0043E374 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E377 81E1FF000000            and ecx, 000000FF
:0043E37D 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043E380 81E2FF000000            and edx, 000000FF
:0043E386 3BCA                    cmp ecx, edx
:0043E388 0F8DEF010000            jnl 0043E57D
:0043E38E 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043E391 25FF000000              and eax, 000000FF
:0043E396 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E399 81E1FF000000            and ecx, 000000FF
:0043E39F 2BC1                    sub eax, ecx
:0043E3A1 8845F0                  mov byte ptr [ebp-10], al
:0043E3A4 8B55EC                  mov edx, dword ptr [ebp-14]
:0043E3A7 81E2FF000000            and edx, 000000FF
:0043E3AD 8B45E8                  mov eax, dword ptr [ebp-18]
:0043E3B0 25FF000000              and eax, 000000FF
:0043E3B5 3BD0                    cmp edx, eax
:0043E3B7 753E                    jne 0043E3F7

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043E3B9 C745F402000000          mov [ebp-0C], 00000002

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043E3C0 6A02                    push 00000002
:0043E3C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E3C5 81E1FF000000            and ecx, 000000FF
:0043E3CB 6BC924                  imul ecx, 00000024
:0043E3CE 81C108F54A00            add ecx, 004AF508
:0043E3D4 E807B8FFFF              call 00439BE0
:0043E3D9 6A00                    push 00000000
:0043E3DB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E3DE 81E1FF000000            and ecx, 000000FF
:0043E3E4 6BC924                  imul ecx, 00000024
:0043E3E7 81C108F54A00            add ecx, 004AF508
:0043E3ED E8EEB7FFFF              call 00439BE0
:0043E3F2 E981010000              jmp 0043E578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E3B7(C)
|
:0043E3F7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E3FA 81E1FF000000            and ecx, 000000FF
:0043E400 8B55E8                  mov edx, dword ptr [ebp-18]
:0043E403 81E2FF000000            and edx, 000000FF
:0043E409 3BCA                    cmp ecx, edx
:0043E40B 0F8EB6000000            jle 0043E4C7
:0043E411 8B45EC                  mov eax, dword ptr [ebp-14]
:0043E414 25FF000000              and eax, 000000FF
:0043E419 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043E41C 81E1FF000000            and ecx, 000000FF
:0043E422 2BC1                    sub eax, ecx
:0043E424 8845F8                  mov byte ptr [ebp-08], al
:0043E427 8B55F0                  mov edx, dword ptr [ebp-10]
:0043E42A 81E2FF000000            and edx, 000000FF
:0043E430 8B45F8                  mov eax, dword ptr [ebp-08]
:0043E433 25FF000000              and eax, 000000FF
:0043E438 3BD0                    cmp edx, eax
:0043E43A 7E44                    jle 0043E480
:0043E43C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043E43F F7D9                    neg ecx
:0043E441 1BC9                    sbb ecx, ecx
:0043E443 83E104                  and ecx, 00000004
:0043E446 83C102                  add ecx, 00000002
:0043E449 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043E44C 6A02                    push 00000002
:0043E44E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E451 81E1FF000000            and ecx, 000000FF
:0043E457 6BC924                  imul ecx, 00000024
:0043E45A 81C108F54A00            add ecx, 004AF508
:0043E460 E87BB7FFFF              call 00439BE0
:0043E465 6A00                    push 00000000
:0043E467 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E46A 81E1FF000000            and ecx, 000000FF
:0043E470 6BC924                  imul ecx, 00000024
:0043E473 81C108F54A00            add ecx, 004AF508
:0043E479 E862B7FFFF              call 00439BE0
:0043E47E EB42                    jmp 0043E4C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E43A(C)
|
:0043E480 8B5510                  mov edx, dword ptr [ebp+10]
:0043E483 F7DA                    neg edx
:0043E485 1BD2                    sbb edx, edx
:0043E487 83E203                  and edx, 00000003
:0043E48A 83C203                  add edx, 00000003
:0043E48D 8955F4                  mov dword ptr [ebp-0C], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043E490 6A03                    push 00000003
:0043E492 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E495 81E1FF000000            and ecx, 000000FF
:0043E49B 6BC924                  imul ecx, 00000024
:0043E49E 81C108F54A00            add ecx, 004AF508
:0043E4A4 E837B7FFFF              call 00439BE0
:0043E4A9 6A01                    push 00000001
:0043E4AB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E4AE 81E1FF000000            and ecx, 000000FF
:0043E4B4 6BC924                  imul ecx, 00000024
:0043E4B7 81C108F54A00            add ecx, 004AF508
:0043E4BD E81EB7FFFF              call 00439BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E47E(U)
|
:0043E4C2 E9B1000000              jmp 0043E578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E40B(C)
|
:0043E4C7 8B45E8                  mov eax, dword ptr [ebp-18]
:0043E4CA 25FF000000              and eax, 000000FF
:0043E4CF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E4D2 81E1FF000000            and ecx, 000000FF
:0043E4D8 2BC1                    sub eax, ecx
:0043E4DA 8845F8                  mov byte ptr [ebp-08], al
:0043E4DD 8B55F0                  mov edx, dword ptr [ebp-10]
:0043E4E0 81E2FF000000            and edx, 000000FF
:0043E4E6 8B45F8                  mov eax, dword ptr [ebp-08]
:0043E4E9 25FF000000              and eax, 000000FF
:0043E4EE 3BD0                    cmp edx, eax
:0043E4F0 7E44                    jle 0043E536
:0043E4F2 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043E4F5 F7D9                    neg ecx
:0043E4F7 1BC9                    sbb ecx, ecx
:0043E4F9 83E103                  and ecx, 00000003
:0043E4FC 83C102                  add ecx, 00000002
:0043E4FF 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043E502 6A02                    push 00000002
:0043E504 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E507 81E1FF000000            and ecx, 000000FF
:0043E50D 6BC924                  imul ecx, 00000024
:0043E510 81C108F54A00            add ecx, 004AF508
:0043E516 E8C5B6FFFF              call 00439BE0
:0043E51B 6A00                    push 00000000
:0043E51D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E520 81E1FF000000            and ecx, 000000FF
:0043E526 6BC924                  imul ecx, 00000024
:0043E529 81C108F54A00            add ecx, 004AF508
:0043E52F E8ACB6FFFF              call 00439BE0
:0043E534 EB42                    jmp 0043E578

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E4F0(C)
|
:0043E536 8B5510                  mov edx, dword ptr [ebp+10]
:0043E539 F7DA                    neg edx
:0043E53B 1BD2                    sbb edx, edx
:0043E53D 83E204                  and edx, 00000004
:0043E540 83C201                  add edx, 00000001
:0043E543 8955F4                  mov dword ptr [ebp-0C], edx
:0043E546 6A01                    push 00000001
:0043E548 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E54B 81E1FF000000            and ecx, 000000FF
:0043E551 6BC924                  imul ecx, 00000024
:0043E554 81C108F54A00            add ecx, 004AF508
:0043E55A E881B6FFFF              call 00439BE0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043E55F 6A03                    push 00000003
:0043E561 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E564 81E1FF000000            and ecx, 000000FF
:0043E56A 6BC924                  imul ecx, 00000024
:0043E56D 81C108F54A00            add ecx, 004AF508
:0043E573 E868B6FFFF              call 00439BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E3F2(U), :0043E4C2(U), :0043E534(U)
|
:0043E578 E989000000              jmp 0043E606

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E388(C)
|
:0043E57D 8B45EC                  mov eax, dword ptr [ebp-14]
:0043E580 25FF000000              and eax, 000000FF
:0043E585 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043E588 81E1FF000000            and ecx, 000000FF
:0043E58E 3BC1                    cmp eax, ecx
:0043E590 7E3B                    jle 0043E5CD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043E592 C745F403000000          mov [ebp-0C], 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043E599 6A03                    push 00000003
:0043E59B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E59E 81E1FF000000            and ecx, 000000FF
:0043E5A4 6BC924                  imul ecx, 00000024
:0043E5A7 81C108F54A00            add ecx, 004AF508
:0043E5AD E82EB6FFFF              call 00439BE0
:0043E5B2 6A01                    push 00000001
:0043E5B4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E5B7 81E1FF000000            and ecx, 000000FF
:0043E5BD 6BC924                  imul ecx, 00000024
:0043E5C0 81C108F54A00            add ecx, 004AF508
:0043E5C6 E815B6FFFF              call 00439BE0
:0043E5CB EB39                    jmp 0043E606

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E590(C)
|
:0043E5CD C745F401000000          mov [ebp-0C], 00000001
:0043E5D4 6A01                    push 00000001
:0043E5D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E5D9 81E1FF000000            and ecx, 000000FF
:0043E5DF 6BC924                  imul ecx, 00000024
:0043E5E2 81C108F54A00            add ecx, 004AF508
:0043E5E8 E8F3B5FFFF              call 00439BE0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043E5ED 6A03                    push 00000003
:0043E5EF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E5F2 81E1FF000000            and ecx, 000000FF
:0043E5F8 6BC924                  imul ecx, 00000024
:0043E5FB 81C108F54A00            add ecx, 004AF508
:0043E601 E8DAB5FFFF              call 00439BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E36F(U), :0043E578(U), :0043E5CB(U)
|
:0043E606 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E08B(U), :0043E0C3(U), :0043E0F9(U)
|
:0043E609 8BE5                    mov esp, ebp
:0043E60B 5D                      pop ebp
:0043E60C C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0043D9CA   
|
:0043E60F 55                      push ebp
:0043E610 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043E612 6AFF                    push FFFFFFFF
:0043E614 68883A4700              push 00473A88
:0043E619 64A100000000            mov eax, dword ptr fs:[00000000]
:0043E61F 50                      push eax
:0043E620 64892500000000          mov dword ptr fs:[00000000], esp
:0043E627 81EC30010000            sub esp, 00000130
:0043E62D 898DC8FEFFFF            mov dword ptr [ebp+FFFFFEC8], ecx
:0043E633 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E639 E8C290FCFF              call 00407700
:0043E63E C745FC00000000          mov [ebp-04], 00000000
:0043E645 8B4510                  mov eax, dword ptr [ebp+10]
:0043E648 25FF000000              and eax, 000000FF
:0043E64D 8985C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], eax
:0043E653 83BDC4FEFFFF30          cmp dword ptr [ebp+FFFFFEC4], 00000030
:0043E65A 0F87CF000000            ja 0043E72F
:0043E660 8B95C4FEFFFF            mov edx, dword ptr [ebp+FFFFFEC4]
:0043E666 33C9                    xor ecx, ecx
:0043E668 8A8AF4E94300            mov cl, byte ptr [edx+0043E9F4]
:0043E66E FF248D74E94300          jmp dword ptr [4*ecx+0043E974]
:0043E675 C685ECFEFFFF00          mov byte ptr [ebp+FFFFFEEC], 00
:0043E67C E9D5000000              jmp 0043E756
:0043E681 C685ECFEFFFF01          mov byte ptr [ebp+FFFFFEEC], 01
:0043E688 E9C9000000              jmp 0043E756
:0043E68D C685ECFEFFFF02          mov byte ptr [ebp+FFFFFEEC], 02
:0043E694 E9BD000000              jmp 0043E756
:0043E699 C685ECFEFFFF03          mov byte ptr [ebp+FFFFFEEC], 03
:0043E6A0 E9B1000000              jmp 0043E756
:0043E6A5 C685ECFEFFFF04          mov byte ptr [ebp+FFFFFEEC], 04
:0043E6AC E9A5000000              jmp 0043E756
:0043E6B1 C685ECFEFFFF05          mov byte ptr [ebp+FFFFFEEC], 05
:0043E6B8 E999000000              jmp 0043E756
:0043E6BD C685ECFEFFFF06          mov byte ptr [ebp+FFFFFEEC], 06
:0043E6C4 E98D000000              jmp 0043E756
:0043E6C9 C685ECFEFFFF07          mov byte ptr [ebp+FFFFFEEC], 07
:0043E6D0 E981000000              jmp 0043E756
:0043E6D5 C685ECFEFFFF08          mov byte ptr [ebp+FFFFFEEC], 08
:0043E6DC EB78                    jmp 0043E756
:0043E6DE C685ECFEFFFF09          mov byte ptr [ebp+FFFFFEEC], 09
:0043E6E5 EB6F                    jmp 0043E756
:0043E6E7 C685ECFEFFFF0A          mov byte ptr [ebp+FFFFFEEC], 0A
:0043E6EE EB66                    jmp 0043E756
:0043E6F0 C685ECFEFFFF0B          mov byte ptr [ebp+FFFFFEEC], 0B
:0043E6F7 EB5D                    jmp 0043E756
:0043E6F9 C685ECFEFFFF0C          mov byte ptr [ebp+FFFFFEEC], 0C
:0043E700 EB54                    jmp 0043E756
:0043E702 C685ECFEFFFF0E          mov byte ptr [ebp+FFFFFEEC], 0E
:0043E709 EB4B                    jmp 0043E756
:0043E70B C685ECFEFFFF0F          mov byte ptr [ebp+FFFFFEEC], 0F
:0043E712 EB42                    jmp 0043E756
:0043E714 C685ECFEFFFF0D          mov byte ptr [ebp+FFFFFEEC], 0D
:0043E71B EB39                    jmp 0043E756
:0043E71D C685ECFEFFFF11          mov byte ptr [ebp+FFFFFEEC], 11
:0043E724 EB30                    jmp 0043E756
:0043E726 C685ECFEFFFF10          mov byte ptr [ebp+FFFFFEEC], 10
:0043E72D EB27                    jmp 0043E756

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E65A(C)
|
:0043E72F C785E4FEFFFF01000000    mov dword ptr [ebp+FFFFFEE4], 00000001
:0043E739 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E740 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E746 E8D58FFCFF              call 00407720
:0043E74B 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0043E751 E90E020000              jmp 0043E964

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E67C(U), :0043E688(U), :0043E694(U), :0043E6A0(U), :0043E6AC(U)
|:0043E6B8(U), :0043E6C4(U), :0043E6D0(U), :0043E6DC(U), :0043E6E5(U)
|:0043E6EE(U), :0043E6F7(U), :0043E700(U), :0043E709(U), :0043E712(U)
|:0043E71B(U), :0043E724(U), :0043E72D(U)
|
:0043E756 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:0043E75C 25FF000000              and eax, 000000FF
:0043E761 83F8FF                  cmp eax, FFFFFFFF
:0043E764 7527                    jne 0043E78D
:0043E766 C785E0FEFFFF01000000    mov dword ptr [ebp+FFFFFEE0], 00000001
:0043E770 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E777 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E77D E89E8FFCFF              call 00407720
:0043E782 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0043E788 E9D7010000              jmp 0043E964

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E764(C)
|
:0043E78D 6A00                    push 00000000
:0043E78F 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043E792 51                      push ecx
:0043E793 8A5508                  mov dl, byte ptr [ebp+08]
:0043E796 52                      push edx
:0043E797 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:0043E79D E8A9F8FFFF              call 0043E04B
:0043E7A2 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0043E7A8 8B4510                  mov eax, dword ptr [ebp+10]
:0043E7AB 25FF000000              and eax, 000000FF
:0043E7B0 83F80F                  cmp eax, 0000000F
:0043E7B3 742D                    je 0043E7E2
:0043E7B5 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043E7B8 81E1FF000000            and ecx, 000000FF
:0043E7BE 83F910                  cmp ecx, 00000010
:0043E7C1 741F                    je 0043E7E2
:0043E7C3 8B5510                  mov edx, dword ptr [ebp+10]
:0043E7C6 81E2FF000000            and edx, 000000FF
:0043E7CC 83FA11                  cmp edx, 00000011
:0043E7CF 7411                    je 0043E7E2
:0043E7D1 8B4510                  mov eax, dword ptr [ebp+10]
:0043E7D4 25FF000000              and eax, 000000FF
:0043E7D9 83F812                  cmp eax, 00000012
:0043E7DC 0F8511010000            jne 0043E8F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E7B3(C), :0043E7C1(C), :0043E7CF(C)
|
:0043E7E2 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:0043E7E9 740D                    je 0043E7F8
:0043E7EB 83BDE8FEFFFF00          cmp dword ptr [ebp+FFFFFEE8], 00000000
:0043E7F2 0F85FB000000            jne 0043E8F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E7E9(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:0043E7F8 68F07A4700              push 00477AF0
:0043E7FD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E803 E82D5BFDFF              call 00414335
:0043E808 85C0                    test eax, eax
:0043E80A 7527                    jne 0043E833
:0043E80C C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:0043E816 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E81D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E823 E8F88EFCFF              call 00407720
:0043E828 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0043E82E E931010000              jmp 0043E964

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E80A(C)
|
:0043E833 6A00                    push 00000000
:0043E835 B930DA4A00              mov ecx, 004ADA30
:0043E83A E85F4DFDFF              call 0041359E
:0043E83F 05003D0100              add eax, 00013D00
:0043E844 50                      push eax
:0043E845 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0043E84B 81E1FF000000            and ecx, 000000FF
:0043E851 51                      push ecx
:0043E852 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E858 E82C5CFDFF              call 00414489
:0043E85D 85C0                    test eax, eax
:0043E85F 7527                    jne 0043E888
:0043E861 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0043E86B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E872 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E878 E8A38EFCFF              call 00407720
:0043E87D 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0043E883 E9DC000000              jmp 0043E964

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E85F(C)
|
:0043E888 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E88E E8791DFDFF              call 0041060C
:0043E893 85C0                    test eax, eax
:0043E895 7527                    jne 0043E8BE
:0043E897 C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:0043E8A1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E8A8 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E8AE E86D8EFCFF              call 00407720
:0043E8B3 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:0043E8B9 E9A6000000              jmp 0043E964

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E895(C)
|
:0043E8BE 6A00                    push 00000000
:0043E8C0 B930DA4A00              mov ecx, 004ADA30
:0043E8C5 E8D44CFDFF              call 0041359E
:0043E8CA 0500CC0000              add eax, 0000CC00
:0043E8CF 50                      push eax
:0043E8D0 6A00                    push 00000000
:0043E8D2 B930DA4A00              mov ecx, 004ADA30
:0043E8D7 E8C24CFDFF              call 0041359E
:0043E8DC 05003D0100              add eax, 00013D00
:0043E8E1 50                      push eax
:0043E8E2 6890000000              push 00000090
:0043E8E7 6A30                    push 00000030
:0043E8E9 E8494EFDFF              call 00413737
:0043E8EE 83C410                  add esp, 00000010
:0043E8F1 EB3C                    jmp 0043E92F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E7DC(C), :0043E7F2(C)
|
:0043E8F3 6A00                    push 00000000
:0043E8F5 8A95ECFEFFFF            mov dl, byte ptr [ebp+FFFFFEEC]
:0043E8FB 52                      push edx
:0043E8FC 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:0043E902 E81E010000              call 0043EA25
:0043E907 85C0                    test eax, eax
:0043E909 7524                    jne 0043E92F
:0043E90B C785D0FEFFFF00000000    mov dword ptr [ebp+FFFFFED0], 00000000
:0043E915 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E91C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E922 E8F98DFCFF              call 00407720
:0043E927 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]
:0043E92D EB35                    jmp 0043E964

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E8F1(U), :0043E909(C)
|
:0043E92F 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]
:0043E935 8B08                    mov ecx, dword ptr [eax]
:0043E937 83C908                  or ecx, 00000008
:0043E93A 8B95C8FEFFFF            mov edx, dword ptr [ebp+FFFFFEC8]
:0043E940 890A                    mov dword ptr [edx], ecx
:0043E942 C785CCFEFFFF01000000    mov dword ptr [ebp+FFFFFECC], 00000001
:0043E94C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043E953 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043E959 E8C28DFCFF              call 00407720
:0043E95E 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E751(U), :0043E788(U), :0043E82E(U), :0043E883(U), :0043E8B9(U)
|:0043E92D(U)
|
:0043E964 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043E967 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043E96E 8BE5                    mov esp, ebp
:0043E970 5D                      pop ebp
:0043E971 C21000                  ret 0010



:0043E974 75E64300                DWORD 0043E675
:0043E978 81E64300                DWORD 0043E681
:0043E97C 8DE64300                DWORD 0043E68D
:0043E980 99E64300                DWORD 0043E699
:0043E984 8DE64300                DWORD 0043E68D
:0043E988 A5E64300                DWORD 0043E6A5
:0043E98C B1E64300                DWORD 0043E6B1
:0043E990 8DE64300                DWORD 0043E68D
:0043E994 BDE64300                DWORD 0043E6BD
:0043E998 B1E64300                DWORD 0043E6B1
:0043E99C C9E64300                DWORD 0043E6C9
:0043E9A0 B1E64300                DWORD 0043E6B1
:0043E9A4 D5E64300                DWORD 0043E6D5
:0043E9A8 DEE64300                DWORD 0043E6DE
:0043E9AC E7E64300                DWORD 0043E6E7
:0043E9B0 D5E64300                DWORD 0043E6D5
:0043E9B4 F0E64300                DWORD 0043E6F0
:0043E9B8 F9E64300                DWORD 0043E6F9
:0043E9BC BDE64300                DWORD 0043E6BD
:0043E9C0 8DE64300                DWORD 0043E68D
:0043E9C4 F9E64300                DWORD 0043E6F9
:0043E9C8 14E74300                DWORD 0043E714
:0043E9CC F9E64300                DWORD 0043E6F9
:0043E9D0 02E74300                DWORD 0043E702
:0043E9D4 0BE74300                DWORD 0043E70B
:0043E9D8 14E74300                DWORD 0043E714
:0043E9DC 26E74300                DWORD 0043E726
:0043E9E0 14E74300                DWORD 0043E714
:0043E9E4 1DE74300                DWORD 0043E71D
:0043E9E8 99E64300                DWORD 0043E699
:0043E9EC 26E74300                DWORD 0043E726
:0043E9F0 2FE74300                DWORD 0043E72F


:0043E9F4 0001                    add byte ptr [ecx], al
:0043E9F6 0203                    add al, byte ptr [ebx]
:0043E9F8 0405                    add al, 05
:0043E9FA 06                      push es
:0043E9FB 07                      pop es
:0043E9FC 07                      pop es
:0043E9FD 0808                    or byte ptr [eax], cl
:0043E9FF 0809                    or byte ptr [ecx], cl
:0043EA01 0A0B                    or cl, byte ptr [ebx]
:0043EA03 0C0D                    or al, 0D
:0043EA05 0E                      push cs
:0043EA06 0F                      BYTE 0fh
:0043EA07 1011                    adc byte ptr [ecx], dl
:0043EA09 1212                    adc dl, byte ptr [edx]
:0043EA0B 131414                  adc edx, dword ptr [esp+edx]
:0043EA0E 1415                    adc al, 15
:0043EA10 16                      push ss
:0043EA11 16                      push ss
:0043EA12 16                      push ss
:0043EA13 16                      push ss
:0043EA14 16                      push ss
:0043EA15 17                      pop ss
:0043EA16 17                      pop ss
:0043EA17 17                      pop ss
:0043EA18 17                      pop ss
:0043EA19 1819                    sbb byte ptr [ecx], bl
:0043EA1B 1919                    sbb dword ptr [ecx], ebx
:0043EA1D 1A1A                    sbb bl, byte ptr [edx]
:0043EA1F 1A1B                    sbb bl, byte ptr [ebx]
:0043EA21 1C1D                    sbb al, 1D
:0043EA23 1E                      push ds
:0043EA24 1E                      push ds

* Referenced by a CALL at Addresses:
|:0043D871   , :0043D8DF   , :0043E902   , :0043F74A   , :0043FC1C   
|:00441A80   
|
:0043EA25 55                      push ebp
:0043EA26 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043EA28 6AFF                    push FFFFFFFF
:0043EA2A 689E3A4700              push 00473A9E
:0043EA2F 64A100000000            mov eax, dword ptr fs:[00000000]
:0043EA35 50                      push eax
:0043EA36 64892500000000          mov dword ptr fs:[00000000], esp
:0043EA3D 81EC1C010000            sub esp, 0000011C
:0043EA43 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:0043EA49 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EA4F E8AC8CFCFF              call 00407700
:0043EA54 C745FC00000000          mov [ebp-04], 00000000
:0043EA5B 8B450C                  mov eax, dword ptr [ebp+0C]
:0043EA5E 25FF000000              and eax, 000000FF
:0043EA63 83F805                  cmp eax, 00000005
:0043EA66 741D                    je 0043EA85
:0043EA68 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043EA6B 81E1FF000000            and ecx, 000000FF
:0043EA71 69C9001B0000            imul ecx, 00001B00
:0043EA77 81C100CC0000            add ecx, 0000CC00
:0043EA7D 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0043EA83 EB0A                    jmp 0043EA8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EA66(C)
|
:0043EA85 C785ECFEFFFF00E70100    mov dword ptr [ebp+FFFFFEEC], 0001E700

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EA83(U)
|

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:0043EA8F 68F07A4700              push 00477AF0
:0043EA94 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EA9A E89658FDFF              call 00414335
:0043EA9F 85C0                    test eax, eax
:0043EAA1 7527                    jne 0043EACA
:0043EAA3 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:0043EAAD C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EAB4 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EABA E8618CFCFF              call 00407720
:0043EABF 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0043EAC5 E9A5000000              jmp 0043EB6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EAA1(C)
|
:0043EACA 6A00                    push 00000000
:0043EACC B930DA4A00              mov ecx, 004ADA30
:0043EAD1 E8C84AFDFF              call 0041359E
:0043EAD6 0385ECFEFFFF            add eax, dword ptr [ebp+FFFFFEEC]
:0043EADC 50                      push eax
:0043EADD 8B5508                  mov edx, dword ptr [ebp+08]
:0043EAE0 81E2FF000000            and edx, 000000FF
:0043EAE6 52                      push edx
:0043EAE7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EAED E89759FDFF              call 00414489
:0043EAF2 85C0                    test eax, eax
:0043EAF4 7524                    jne 0043EB1A
:0043EAF6 C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:0043EB00 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EB07 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EB0D E80E8CFCFF              call 00407720
:0043EB12 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0043EB18 EB55                    jmp 0043EB6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EAF4(C)
|
:0043EB1A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EB20 E8E71AFDFF              call 0041060C
:0043EB25 85C0                    test eax, eax
:0043EB27 7524                    jne 0043EB4D
:0043EB29 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:0043EB33 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EB3A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EB40 E8DB8BFCFF              call 00407720
:0043EB45 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0043EB4B EB22                    jmp 0043EB6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EB27(C)
|
:0043EB4D C785DCFEFFFF01000000    mov dword ptr [ebp+FFFFFEDC], 00000001
:0043EB57 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EB5E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043EB64 E8B78BFCFF              call 00407720
:0043EB69 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EAC5(U), :0043EB18(U), :0043EB4B(U)
|
:0043EB6F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043EB72 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043EB79 8BE5                    mov esp, ebp
:0043EB7B 5D                      pop ebp
:0043EB7C C20800                  ret 0008



* Referenced by a CALL at Address:
|:0043D9E5   
|
:0043EB7F 55                      push ebp
:0043EB80 8BEC                    mov ebp, esp
:0043EB82 51                      push ecx
:0043EB83 894DFC                  mov dword ptr [ebp-04], ecx
:0043EB86 8B450C                  mov eax, dword ptr [ebp+0C]
:0043EB89 25FF000000              and eax, 000000FF
:0043EB8E 83F813                  cmp eax, 00000013
:0043EB91 750D                    jne 0043EBA0
:0043EB93 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043EB96 8B11                    mov edx, dword ptr [ecx]
:0043EB98 83CA10                  or edx, 00000010
:0043EB9B 8B45FC                  mov eax, dword ptr [ebp-04]
:0043EB9E 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EB91(C)
|
:0043EBA0 8BE5                    mov esp, ebp
:0043EBA2 5D                      pop ebp
:0043EBA3 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0043D9FD   
|
:0043EBA6 55                      push ebp
:0043EBA7 8BEC                    mov ebp, esp
:0043EBA9 83EC0C                  sub esp, 0000000C
:0043EBAC 894DF8                  mov dword ptr [ebp-08], ecx
:0043EBAF 8B4510                  mov eax, dword ptr [ebp+10]
:0043EBB2 25FF000000              and eax, 000000FF
:0043EBB7 8945F4                  mov dword ptr [ebp-0C], eax
:0043EBBA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043EBBD 83E901                  sub ecx, 00000001
:0043EBC0 894DF4                  mov dword ptr [ebp-0C], ecx
:0043EBC3 837DF42C                cmp dword ptr [ebp-0C], 0000002C
:0043EBC7 7748                    ja 0043EC11
:0043EBC9 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043EBCC 33D2                    xor edx, edx
:0043EBCE 8A9080EC4300            mov dl, byte ptr [eax+0043EC80]
:0043EBD4 FF24955CEC4300          jmp dword ptr [4*edx+0043EC5C]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043EBDB C745FC03000000          mov [ebp-04], 00000003
:0043EBE2 EB34                    jmp 0043EC18
:0043EBE4 C745FC01000000          mov [ebp-04], 00000001
:0043EBEB EB2B                    jmp 0043EC18

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043EBED C745FC02000000          mov [ebp-04], 00000002
:0043EBF4 EB22                    jmp 0043EC18

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043EBF6 C745FC06000000          mov [ebp-04], 00000006
:0043EBFD EB19                    jmp 0043EC18
:0043EBFF C745FC00000000          mov [ebp-04], 00000000
:0043EC06 EB10                    jmp 0043EC18

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043EC08 C745FC07000000          mov [ebp-04], 00000007
:0043EC0F EB07                    jmp 0043EC18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EBC7(C)
|
:0043EC11 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EBE2(U), :0043EBEB(U), :0043EBF4(U), :0043EBFD(U), :0043EC06(U)
|:0043EC0F(U)
|
:0043EC18 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0043EC1C 7507                    jne 0043EC25
:0043EC1E B801000000              mov eax, 00000001
:0043EC23 EB31                    jmp 0043EC56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC1C(C)
|
:0043EC25 8A4D10                  mov cl, byte ptr [ebp+10]
:0043EC28 51                      push ecx
:0043EC29 8A550C                  mov dl, byte ptr [ebp+0C]
:0043EC2C 52                      push edx
:0043EC2D 8A4508                  mov al, byte ptr [ebp+08]
:0043EC30 50                      push eax
:0043EC31 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043EC34 51                      push ecx
:0043EC35 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043EC38 E870000000              call 0043ECAD
:0043EC3D 85C0                    test eax, eax
:0043EC3F 7504                    jne 0043EC45
:0043EC41 33C0                    xor eax, eax
:0043EC43 EB11                    jmp 0043EC56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC3F(C)
|
:0043EC45 8B55F8                  mov edx, dword ptr [ebp-08]
:0043EC48 8B02                    mov eax, dword ptr [edx]
:0043EC4A 0C20                    or al, 20
:0043EC4C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043EC4F 8901                    mov dword ptr [ecx], eax
:0043EC51 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EC23(U), :0043EC43(U)
|
:0043EC56 8BE5                    mov esp, ebp
:0043EC58 5D                      pop ebp
:0043EC59 C21000                  ret 0010



:0043EC5C DBEB4300                DWORD 0043EBDB
:0043EC60 E4EB4300                DWORD 0043EBE4
:0043EC64 EDEB4300                DWORD 0043EBED
:0043EC68 DBEB4300                DWORD 0043EBDB
:0043EC6C DBEB4300                DWORD 0043EBDB
:0043EC70 F6EB4300                DWORD 0043EBF6
:0043EC74 FFEB4300                DWORD 0043EBFF
:0043EC78 08EC4300                DWORD 0043EC08
:0043EC7C 11EC4300                DWORD 0043EC11


:0043EC80 0008                    add byte ptr [eax], cl
:0043EC82 0808                    or byte ptr [eax], cl
:0043EC84 0102                    add dword ptr [edx], eax
:0043EC86 0308                    add ecx, dword ptr [eax]
:0043EC88 0408                    add al, 08
:0043EC8A 0808                    or byte ptr [eax], cl
:0043EC8C 0808                    or byte ptr [eax], cl
:0043EC8E 0808                    or byte ptr [eax], cl
:0043EC90 0808                    or byte ptr [eax], cl
:0043EC92 0508080806              add eax, 06080808
:0043EC97 0808                    or byte ptr [eax], cl
:0043EC99 0808                    or byte ptr [eax], cl
:0043EC9B 0808                    or byte ptr [eax], cl
:0043EC9D 0808                    or byte ptr [eax], cl
:0043EC9F 0808                    or byte ptr [eax], cl
:0043ECA1 0808                    or byte ptr [eax], cl
:0043ECA3 0808                    or byte ptr [eax], cl
:0043ECA5 0808                    or byte ptr [eax], cl
:0043ECA7 0808                    or byte ptr [eax], cl
:0043ECA9 0808                    or byte ptr [eax], cl
:0043ECAB 0807                    or byte ptr [edi], al

* Referenced by a CALL at Address:
|:0043EC38   
|
:0043ECAD 55                      push ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC69(U)
|
:0043ECAE 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043ECB0 6AFF                    push FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC6D(U)
|
:0043ECB2 68B43A4700              push 00473AB4
:0043ECB7 64A100000000            mov eax, dword ptr fs:[00000000]
:0043ECBD 50                      push eax
:0043ECBE 64892500000000          mov dword ptr fs:[00000000], esp
:0043ECC5 81EC3C010000            sub esp, 0000013C
:0043ECCB 898DB8FEFFFF            mov dword ptr [ebp+FFFFFEB8], ecx
:0043ECD1 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043ECD7 E8248AFCFF              call 00407700
:0043ECDC C745FC00000000          mov [ebp-04], 00000000
:0043ECE3 8B4514                  mov eax, dword ptr [ebp+14]
:0043ECE6 25FF000000              and eax, 000000FF
:0043ECEB 83F82D                  cmp eax, 0000002D
:0043ECEE 0F85D3000000            jne 0043EDC7

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:0043ECF4 68F07A4700              push 00477AF0
:0043ECF9 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043ECFF E83156FDFF              call 00414335
:0043ED04 85C0                    test eax, eax
:0043ED06 7527                    jne 0043ED2F
:0043ED08 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:0043ED12 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043ED19 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043ED1F E8FC89FCFF              call 00407720
:0043ED24 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0043ED2A E9F8030000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ED06(C)
|
:0043ED2F 6A00                    push 00000000
:0043ED31 B930DA4A00              mov ecx, 004ADA30
:0043ED36 E86348FDFF              call 0041359E
:0043ED3B 0500B10000              add eax, 0000B100
:0043ED40 50                      push eax
:0043ED41 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043ED44 81E1FF000000            and ecx, 000000FF
:0043ED4A 51                      push ecx
:0043ED4B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043ED51 E83357FDFF              call 00414489
:0043ED56 85C0                    test eax, eax
:0043ED58 7532                    jne 0043ED8C
:0043ED5A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043ED60 E8A718FDFF              call 0041060C
:0043ED65 C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:0043ED6F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043ED76 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043ED7C E89F89FCFF              call 00407720
:0043ED81 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0043ED87 E99B030000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ED58(C)
|
:0043ED8C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043ED92 E87518FDFF              call 0041060C
:0043ED97 85C0                    test eax, eax
:0043ED99 7527                    jne 0043EDC2
:0043ED9B C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0043EDA5 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EDAC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EDB2 E86989FCFF              call 00407720
:0043EDB7 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0043EDBD E965030000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ED99(C)
|
:0043EDC2 E93E030000              jmp 0043F105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ECEE(C)
|
:0043EDC7 8B5514                  mov edx, dword ptr [ebp+14]
:0043EDCA 81E2FF000000            and edx, 000000FF
:0043EDD0 83FA01                  cmp edx, 00000001
:0043EDD3 741F                    je 0043EDF4
:0043EDD5 8B4514                  mov eax, dword ptr [ebp+14]
:0043EDD8 25FF000000              and eax, 000000FF
:0043EDDD 83F807                  cmp eax, 00000007
:0043EDE0 7412                    je 0043EDF4
:0043EDE2 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043EDE5 81E1FF000000            and ecx, 000000FF
:0043EDEB 83F909                  cmp ecx, 00000009
:0043EDEE 0F85D3000000            jne 0043EEC7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EDD3(C), :0043EDE0(C)
|

* Possible StringData Ref from Data Obj ->"SARM.E4"
                                  |
:0043EDF4 68F87A4700              push 00477AF8
:0043EDF9 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EDFF E83155FDFF              call 00414335
:0043EE04 85C0                    test eax, eax
:0043EE06 7527                    jne 0043EE2F
:0043EE08 C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:0043EE12 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EE19 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EE1F E8FC88FCFF              call 00407720
:0043EE24 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:0043EE2A E9F8020000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EE06(C)
|
:0043EE2F 6A00                    push 00000000
:0043EE31 B930DA4A00              mov ecx, 004ADA30
:0043EE36 E86347FDFF              call 0041359E
:0043EE3B 0500B10000              add eax, 0000B100
:0043EE40 50                      push eax
:0043EE41 8B5508                  mov edx, dword ptr [ebp+08]
:0043EE44 81E2FF000000            and edx, 000000FF
:0043EE4A 52                      push edx
:0043EE4B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EE51 E83356FDFF              call 00414489
:0043EE56 85C0                    test eax, eax
:0043EE58 7532                    jne 0043EE8C
:0043EE5A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EE60 E8A717FDFF              call 0041060C
:0043EE65 C785D0FEFFFF00000000    mov dword ptr [ebp+FFFFFED0], 00000000
:0043EE6F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EE76 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EE7C E89F88FCFF              call 00407720
:0043EE81 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]
:0043EE87 E99B020000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EE58(C)
|
:0043EE8C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EE92 E87517FDFF              call 0041060C
:0043EE97 85C0                    test eax, eax
:0043EE99 7527                    jne 0043EEC2
:0043EE9B C785CCFEFFFF00000000    mov dword ptr [ebp+FFFFFECC], 00000000
:0043EEA5 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EEAC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EEB2 E86988FCFF              call 00407720
:0043EEB7 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:0043EEBD E965020000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EE99(C)
|
:0043EEC2 E93E020000              jmp 0043F105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EDEE(C)
|

* Possible StringData Ref from Data Obj ->"SARM.E4"
                                  |
:0043EEC7 68F87A4700              push 00477AF8
:0043EECC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EED2 E85E54FDFF              call 00414335
:0043EED7 85C0                    test eax, eax
:0043EED9 7527                    jne 0043EF02
:0043EEDB C785C8FEFFFF00000000    mov dword ptr [ebp+FFFFFEC8], 00000000
:0043EEE5 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EEEC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EEF2 E82988FCFF              call 00407720
:0043EEF7 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]
:0043EEFD E925020000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EED9(C)
|
:0043EF02 6A00                    push 00000000
:0043EF04 B930DA4A00              mov ecx, 004ADA30
:0043EF09 E89046FDFF              call 0041359E
:0043EF0E 05003D0100              add eax, 00013D00
:0043EF13 50                      push eax
:0043EF14 8B4508                  mov eax, dword ptr [ebp+08]
:0043EF17 25FF000000              and eax, 000000FF
:0043EF1C 50                      push eax
:0043EF1D 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EF23 E86155FDFF              call 00414489
:0043EF28 85C0                    test eax, eax
:0043EF2A 7532                    jne 0043EF5E
:0043EF2C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EF32 E8D516FDFF              call 0041060C
:0043EF37 C785C4FEFFFF00000000    mov dword ptr [ebp+FFFFFEC4], 00000000
:0043EF41 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EF48 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EF4E E8CD87FCFF              call 00407720
:0043EF53 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:0043EF59 E9C9010000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EF2A(C)
|
:0043EF5E 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EF64 E8A316FDFF              call 0041060C
:0043EF69 85C0                    test eax, eax
:0043EF6B 7527                    jne 0043EF94
:0043EF6D C785C0FEFFFF00000000    mov dword ptr [ebp+FFFFFEC0], 00000000
:0043EF77 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043EF7E 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043EF84 E89787FCFF              call 00407720
:0043EF89 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:0043EF8F E993010000              jmp 0043F127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EF6B(C)
|
:0043EF94 6A00                    push 00000000
:0043EF96 8A4D10                  mov cl, byte ptr [ebp+10]
:0043EF99 51                      push ecx
:0043EF9A 8A550C                  mov dl, byte ptr [ebp+0C]
:0043EF9D 52                      push edx
:0043EF9E 8B8DB8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB8]
:0043EFA4 E8A2F0FFFF              call 0043E04B
:0043EFA9 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0043EFAF 83BDE8FEFFFF03          cmp dword ptr [ebp+FFFFFEE8], 00000003
:0043EFB6 7409                    je 0043EFC1
:0043EFB8 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:0043EFBF 7523                    jne 0043EFE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EFB6(C)
|
:0043EFC1 8B4514                  mov eax, dword ptr [ebp+14]
:0043EFC4 25FF000000              and eax, 000000FF
:0043EFC9 83E813                  sub eax, 00000013
:0043EFCC F7D8                    neg eax
:0043EFCE 1BC0                    sbb eax, eax
:0043EFD0 2500EEFFFF              and eax, FFFFEE00
:0043EFD5 05001B0000              add eax, 00001B00
:0043EFDA D1E0                    shl eax, 1
:0043EFDC 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0043EFE2 EB37                    jmp 0043F01B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EFBF(C)
|
:0043EFE4 83BDE8FEFFFF02          cmp dword ptr [ebp+FFFFFEE8], 00000002
:0043EFEB 7524                    jne 0043F011
:0043EFED 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043EFF0 81E1FF000000            and ecx, 000000FF
:0043EFF6 83E913                  sub ecx, 00000013
:0043EFF9 F7D9                    neg ecx
:0043EFFB 1BC9                    sbb ecx, ecx
:0043EFFD 81E100EEFFFF            and ecx, FFFFEE00
:0043F003 81C1001B0000            add ecx, 00001B00
:0043F009 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:0043F00F EB0A                    jmp 0043F01B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EFEB(C)
|
:0043F011 C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EFE2(U), :0043F00F(U)
|
:0043F01B 6A00                    push 00000000
:0043F01D B930DA4A00              mov ecx, 004ADA30
:0043F022 E87745FDFF              call 0041359E
:0043F027 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0043F02D 8D8410003D0100          lea eax, dword ptr [eax+edx+00013D00]
:0043F034 8945F0                  mov dword ptr [ebp-10], eax
:0043F037 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043F03A 81E1FF000000            and ecx, 000000FF
:0043F040 83F905                  cmp ecx, 00000005
:0043F043 741B                    je 0043F060
:0043F045 8B5514                  mov edx, dword ptr [ebp+14]
:0043F048 81E2FF000000            and edx, 000000FF
:0043F04E 83FA06                  cmp edx, 00000006
:0043F051 740D                    je 0043F060
:0043F053 8B4514                  mov eax, dword ptr [ebp+14]
:0043F056 25FF000000              and eax, 000000FF
:0043F05B 83F817                  cmp eax, 00000017
:0043F05E 7552                    jne 0043F0B2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F043(C), :0043F051(C)
|
:0043F060 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:0043F067 7524                    jne 0043F08D
:0043F069 6A00                    push 00000000
:0043F06B B930DA4A00              mov ecx, 004ADA30
:0043F070 E82945FDFF              call 0041359E
:0043F075 0500B10000              add eax, 0000B100
:0043F07A 50                      push eax
:0043F07B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043F07E 51                      push ecx
:0043F07F 6A30                    push 00000030
:0043F081 6A30                    push 00000030
:0043F083 E8AF46FDFF              call 00413737
:0043F088 83C410                  add esp, 00000010
:0043F08B EB23                    jmp 0043F0B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F067(C)
|
:0043F08D 6800090000              push 00000900
:0043F092 6A00                    push 00000000
:0043F094 B930DA4A00              mov ecx, 004ADA30
:0043F099 E80045FDFF              call 0041359E
:0043F09E 0500B10000              add eax, 0000B100
:0043F0A3 50                      push eax
:0043F0A4 8B55F0                  mov edx, dword ptr [ebp-10]
:0043F0A7 52                      push edx
:0043F0A8 E882370200              call 0046282F
:0043F0AD 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F08B(U)
|
:0043F0B0 EB53                    jmp 0043F105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F05E(C)
|
:0043F0B2 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:0043F0B9 7527                    jne 0043F0E2
:0043F0BB 6A00                    push 00000000
:0043F0BD B930DA4A00              mov ecx, 004ADA30
:0043F0C2 E8D744FDFF              call 0041359E
:0043F0C7 0500B10000              add eax, 0000B100
:0043F0CC 50                      push eax
:0043F0CD 8B45F0                  mov eax, dword ptr [ebp-10]
:0043F0D0 50                      push eax
:0043F0D1 6890000000              push 00000090
:0043F0D6 6A30                    push 00000030
:0043F0D8 E85A46FDFF              call 00413737
:0043F0DD 83C410                  add esp, 00000010
:0043F0E0 EB23                    jmp 0043F105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F0B9(C)
|
:0043F0E2 68001B0000              push 00001B00
:0043F0E7 6A00                    push 00000000
:0043F0E9 B930DA4A00              mov ecx, 004ADA30
:0043F0EE E8AB44FDFF              call 0041359E
:0043F0F3 0500B10000              add eax, 0000B100
:0043F0F8 50                      push eax
:0043F0F9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043F0FC 51                      push ecx
:0043F0FD E82D370200              call 0046282F
:0043F102 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EDC2(U), :0043EEC2(U), :0043F0B0(U), :0043F0E0(U)
|
:0043F105 C785BCFEFFFF01000000    mov dword ptr [ebp+FFFFFEBC], 00000001
:0043F10F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F116 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F11C E8FF85FCFF              call 00407720
:0043F121 8B85BCFEFFFF            mov eax, dword ptr [ebp+FFFFFEBC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043ED2A(U), :0043ED87(U), :0043EDBD(U), :0043EE2A(U), :0043EE87(U)
|:0043EEBD(U), :0043EEFD(U), :0043EF59(U), :0043EF8F(U)
|
:0043F127 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043F12A 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043F131 8BE5                    mov esp, ebp
:0043F133 5D                      pop ebp
:0043F134 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0043DA18   
|
:0043F137 55                      push ebp
:0043F138 8BEC                    mov ebp, esp
:0043F13A 83EC08                  sub esp, 00000008
:0043F13D 894DFC                  mov dword ptr [ebp-04], ecx
:0043F140 8B4508                  mov eax, dword ptr [ebp+08]
:0043F143 25FF000000              and eax, 000000FF
:0043F148 8945F8                  mov dword ptr [ebp-08], eax
:0043F14B 837DF82C                cmp dword ptr [ebp-08], 0000002C
:0043F14F 7734                    ja 0043F185
:0043F151 8B55F8                  mov edx, dword ptr [ebp-08]
:0043F154 33C9                    xor ecx, ecx
:0043F156 8A8A9FF14300            mov cl, byte ptr [edx+0043F19F]
:0043F15C FF248D8BF14300          jmp dword ptr [4*ecx+0043F18B]
:0043F163 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0043F167 740D                    je 0043F176
:0043F169 8B45FC                  mov eax, dword ptr [ebp-04]
:0043F16C 8B08                    mov ecx, dword ptr [eax]
:0043F16E 83C940                  or ecx, 00000040
:0043F171 8B55FC                  mov edx, dword ptr [ebp-04]
:0043F174 890A                    mov dword ptr [edx], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F167(C)
|
:0043F176 EB0D                    jmp 0043F185
:0043F178 8B45FC                  mov eax, dword ptr [ebp-04]
:0043F17B 8B08                    mov ecx, dword ptr [eax]
:0043F17D 83C940                  or ecx, 00000040
:0043F180 8B55FC                  mov edx, dword ptr [ebp-04]
:0043F183 890A                    mov dword ptr [edx], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F14F(C), :0043F176(U)
|
:0043F185 8BE5                    mov esp, ebp
:0043F187 5D                      pop ebp
:0043F188 C20800                  ret 0008



:0043F18B 63F14300                DWORD 0043F163
:0043F18F 63F14300                DWORD 0043F163
:0043F193 78F14300                DWORD 0043F178
:0043F197 78F14300                DWORD 0043F178
:0043F19B 85F14300                DWORD 0043F185


:0043F19F 000000                  BYTE  3 DUP(0)


:0043F1A2 0401                    add al, 01
:0043F1A4 0101                    add dword ptr [ecx], eax
:0043F1A6 0101                    add dword ptr [ecx], eax
:0043F1A8 0101                    add dword ptr [ecx], eax
:0043F1AA 0101                    add dword ptr [ecx], eax
:0043F1AC 0101                    add dword ptr [ecx], eax
:0043F1AE 0101                    add dword ptr [ecx], eax
:0043F1B0 0101                    add dword ptr [ecx], eax
:0043F1B2 0101                    add dword ptr [ecx], eax
:0043F1B4 0101                    add dword ptr [ecx], eax
:0043F1B6 0101                    add dword ptr [ecx], eax
:0043F1B8 0101                    add dword ptr [ecx], eax
:0043F1BA 0101                    add dword ptr [ecx], eax
:0043F1BC 0101                    add dword ptr [ecx], eax
:0043F1BE 0101                    add dword ptr [ecx], eax
:0043F1C0 0202                    add al, byte ptr [edx]
:0043F1C2 0202                    add al, byte ptr [edx]
:0043F1C4 0403                    add al, 03
:0043F1C6 0303                    add eax, dword ptr [ebx]
:0043F1C8 0303                    add eax, dword ptr [ebx]
:0043F1CA 0303                    add eax, dword ptr [ebx]

* Referenced by a CALL at Address:
|:0043DA30   
|
:0043F1CC 55                      push ebp
:0043F1CD 8BEC                    mov ebp, esp
:0043F1CF 83EC08                  sub esp, 00000008
:0043F1D2 894DFC                  mov dword ptr [ebp-04], ecx
:0043F1D5 837D1400                cmp dword ptr [ebp+14], 00000000
:0043F1D9 7507                    jne 0043F1E2
:0043F1DB B801000000              mov eax, 00000001
:0043F1E0 EB45                    jmp 0043F227

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F1D9(C)
|
:0043F1E2 8A4510                  mov al, byte ptr [ebp+10]
:0043F1E5 8845F8                  mov byte ptr [ebp-08], al
:0043F1E8 807DF821                cmp byte ptr [ebp-08], 21
:0043F1EC 720F                    jb 0043F1FD
:0043F1EE 807DF830                cmp byte ptr [ebp-08], 30
:0043F1F2 7602                    jbe 0043F1F6
:0043F1F4 EB07                    jmp 0043F1FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F1F2(C)
|
:0043F1F6 B801000000              mov eax, 00000001
:0043F1FB EB2A                    jmp 0043F227

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F1EC(C), :0043F1F4(U)
|
:0043F1FD 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043F200 51                      push ecx
:0043F201 8A5508                  mov dl, byte ptr [ebp+08]
:0043F204 52                      push edx
:0043F205 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F208 E820000000              call 0043F22D
:0043F20D 85C0                    test eax, eax
:0043F20F 7504                    jne 0043F215
:0043F211 33C0                    xor eax, eax
:0043F213 EB12                    jmp 0043F227

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F20F(C)
|
:0043F215 8B45FC                  mov eax, dword ptr [ebp-04]
:0043F218 8B08                    mov ecx, dword ptr [eax]
:0043F21A 80C980                  or cl, 80
:0043F21D 8B55FC                  mov edx, dword ptr [ebp-04]
:0043F220 890A                    mov dword ptr [edx], ecx
:0043F222 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F1E0(U), :0043F1FB(U), :0043F213(U)
|
:0043F227 8BE5                    mov esp, ebp
:0043F229 5D                      pop ebp
:0043F22A C21000                  ret 0010



* Referenced by a CALL at Address:
|:0043F208   
|
:0043F22D 55                      push ebp
:0043F22E 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043F230 6AFF                    push FFFFFFFF
:0043F232 68CA3A4700              push 00473ACA
:0043F237 64A100000000            mov eax, dword ptr fs:[00000000]
:0043F23D 50                      push eax
:0043F23E 64892500000000          mov dword ptr fs:[00000000], esp
:0043F245 81EC28010000            sub esp, 00000128
:0043F24B 898DD0FEFFFF            mov dword ptr [ebp+FFFFFED0], ecx
:0043F251 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F257 E8A484FCFF              call 00407700
:0043F25C C745FC00000000          mov [ebp-04], 00000000
:0043F263 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F266 25FF000000              and eax, 000000FF
:0043F26B 50                      push eax
:0043F26C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F26F 81E1FF000000            and ecx, 000000FF
:0043F275 6BC924                  imul ecx, 00000024
:0043F278 81C108F54A00            add ecx, 004AF508
:0043F27E E87FA5FEFF              call 00429802
:0043F283 8885E8FEFFFF            mov byte ptr [ebp+FFFFFEE8], al
:0043F289 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F28C 81E1FF000000            and ecx, 000000FF
:0043F292 6BC924                  imul ecx, 00000024
:0043F295 81C108F54A00            add ecx, 004AF508
:0043F29B E800A1FEFF              call 004293A0
:0043F2A0 50                      push eax
:0043F2A1 E8D9860000              call 0044797F
:0043F2A6 83C404                  add esp, 00000004
:0043F2A9 25FF000000              and eax, 000000FF
:0043F2AE 83F80A                  cmp eax, 0000000A
:0043F2B1 751D                    jne 0043F2D0
:0043F2B3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F2B6 81E1FF000000            and ecx, 000000FF
:0043F2BC 6BC924                  imul ecx, 00000024
:0043F2BF 81C108F54A00            add ecx, 004AF508
:0043F2C5 E8A1CFFEFF              call 0042C26B
:0043F2CA 8885E8FEFFFF            mov byte ptr [ebp+FFFFFEE8], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F2B1(C)
|

* Possible StringData Ref from Data Obj ->"CHR_DEF.E4"
                                  |
:0043F2D0 68507B4700              push 00477B50
:0043F2D5 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F2DB E85550FDFF              call 00414335
:0043F2E0 85C0                    test eax, eax
:0043F2E2 7527                    jne 0043F30B
:0043F2E4 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:0043F2EE C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F2F5 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F2FB E82084FCFF              call 00407720
:0043F300 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0043F306 E912020000              jmp 0043F51D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F2E2(C)
|
:0043F30B 6A00                    push 00000000
:0043F30D B930DA4A00              mov ecx, 004ADA30
:0043F312 E88742FDFF              call 0041359E
:0043F317 05003D0100              add eax, 00013D00
:0043F31C 50                      push eax
:0043F31D 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0043F323 81E1FF000000            and ecx, 000000FF
:0043F329 51                      push ecx
:0043F32A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F330 E85451FDFF              call 00414489
:0043F335 85C0                    test eax, eax
:0043F337 7532                    jne 0043F36B
:0043F339 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F33F E8C812FDFF              call 0041060C
:0043F344 C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:0043F34E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F355 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F35B E8C083FCFF              call 00407720
:0043F360 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0043F366 E9B2010000              jmp 0043F51D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F337(C)
|
:0043F36B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F371 E89612FDFF              call 0041060C
:0043F376 85C0                    test eax, eax
:0043F378 7527                    jne 0043F3A1
:0043F37A C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0043F384 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F38B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F391 E88A83FCFF              call 00407720
:0043F396 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0043F39C E97C010000              jmp 0043F51D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F378(C)
|
:0043F3A1 8B5508                  mov edx, dword ptr [ebp+08]
:0043F3A4 81E2FF000000            and edx, 000000FF
:0043F3AA 81FAFF000000            cmp edx, 000000FF
:0043F3B0 741D                    je 0043F3CF
:0043F3B2 6A00                    push 00000000
:0043F3B4 8A4508                  mov al, byte ptr [ebp+08]
:0043F3B7 50                      push eax
:0043F3B8 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043F3BB 51                      push ecx
:0043F3BC 8B8DD0FEFFFF            mov ecx, dword ptr [ebp+FFFFFED0]
:0043F3C2 E884ECFFFF              call 0043E04B
:0043F3C7 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0043F3CD EB22                    jmp 0043F3F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F3B0(C)
|
:0043F3CF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F3D2 81E1FF000000            and ecx, 000000FF
:0043F3D8 6BC924                  imul ecx, 00000024
:0043F3DB 81C108F54A00            add ecx, 004AF508
:0043F3E1 E80A09FFFF              call 0042FCF0
:0043F3E6 25FF000000              and eax, 000000FF
:0043F3EB 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F3CD(U)
|
:0043F3F1 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0043F3F7 8995CCFEFFFF            mov dword ptr [ebp+FFFFFECC], edx
:0043F3FD 83BDCCFEFFFF03          cmp dword ptr [ebp+FFFFFECC], 00000003
:0043F404 0F87F1000000            ja 0043F4FB
:0043F40A 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:0043F410 FF24852DF54300          jmp dword ptr [4*eax+0043F52D]
:0043F417 6A00                    push 00000000
:0043F419 B930DA4A00              mov ecx, 004ADA30
:0043F41E E87B41FDFF              call 0041359E
:0043F423 0500610100              add eax, 00016100
:0043F428 8945F0                  mov dword ptr [ebp-10], eax
:0043F42B 6800120000              push 00001200
:0043F430 6A00                    push 00000000
:0043F432 B930DA4A00              mov ecx, 004ADA30
:0043F437 E86241FDFF              call 0041359E
:0043F43C 0500300000              add eax, 00003000
:0043F441 50                      push eax
:0043F442 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043F445 51                      push ecx
:0043F446 E8E4330200              call 0046282F
:0043F44B 83C40C                  add esp, 0000000C
:0043F44E E9A8000000              jmp 0043F4FB
:0043F453 6A00                    push 00000000
:0043F455 B930DA4A00              mov ecx, 004ADA30
:0043F45A E83F41FDFF              call 0041359E
:0043F45F 05004F0100              add eax, 00014F00
:0043F464 8945F0                  mov dword ptr [ebp-10], eax
:0043F467 6A00                    push 00000000
:0043F469 B930DA4A00              mov ecx, 004ADA30
:0043F46E E82B41FDFF              call 0041359E
:0043F473 0500300000              add eax, 00003000
:0043F478 50                      push eax
:0043F479 8B55F0                  mov edx, dword ptr [ebp-10]
:0043F47C 52                      push edx
:0043F47D 6A60                    push 00000060
:0043F47F 6A30                    push 00000030
:0043F481 E8B142FDFF              call 00413737
:0043F486 83C410                  add esp, 00000010
:0043F489 EB70                    jmp 0043F4FB
:0043F48B 6A00                    push 00000000
:0043F48D B930DA4A00              mov ecx, 004ADA30
:0043F492 E80741FDFF              call 0041359E
:0043F497 05004F0100              add eax, 00014F00
:0043F49C 8945F0                  mov dword ptr [ebp-10], eax
:0043F49F 6800120000              push 00001200
:0043F4A4 6A00                    push 00000000
:0043F4A6 B930DA4A00              mov ecx, 004ADA30
:0043F4AB E8EE40FDFF              call 0041359E
:0043F4B0 0500300000              add eax, 00003000
:0043F4B5 50                      push eax
:0043F4B6 8B45F0                  mov eax, dword ptr [ebp-10]
:0043F4B9 50                      push eax
:0043F4BA E870330200              call 0046282F
:0043F4BF 83C40C                  add esp, 0000000C
:0043F4C2 EB37                    jmp 0043F4FB
:0043F4C4 6A00                    push 00000000
:0043F4C6 B930DA4A00              mov ecx, 004ADA30
:0043F4CB E8CE40FDFF              call 0041359E
:0043F4D0 05003D0100              add eax, 00013D00
:0043F4D5 8945F0                  mov dword ptr [ebp-10], eax
:0043F4D8 6800120000              push 00001200
:0043F4DD 6A00                    push 00000000
:0043F4DF B930DA4A00              mov ecx, 004ADA30
:0043F4E4 E8B540FDFF              call 0041359E
:0043F4E9 0500300000              add eax, 00003000
:0043F4EE 50                      push eax
:0043F4EF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043F4F2 51                      push ecx
:0043F4F3 E837330200              call 0046282F
:0043F4F8 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F404(C), :0043F44E(U), :0043F489(U), :0043F4C2(U)
|
:0043F4FB C785D4FEFFFF01000000    mov dword ptr [ebp+FFFFFED4], 00000001
:0043F505 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F50C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F512 E80982FCFF              call 00407720
:0043F517 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F306(U), :0043F366(U), :0043F39C(U)
|
:0043F51D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043F520 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043F527 8BE5                    mov esp, ebp
:0043F529 5D                      pop ebp
:0043F52A C20800                  ret 0008



:0043F52D 17F44300                DWORD 0043F417
:0043F531 53F44300                DWORD 0043F453
:0043F535 C4F44300                DWORD 0043F4C4
:0043F539 8BF44300                DWORD 0043F48B



* Referenced by a CALL at Address:
|:0043DA53   
|
:0043F53D 55                      push ebp
:0043F53E 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0043F540 6AFF                    push FFFFFFFF
:0043F542 68E03A4700              push 00473AE0
:0043F547 64A100000000            mov eax, dword ptr fs:[00000000]
:0043F54D 50                      push eax
:0043F54E 64892500000000          mov dword ptr fs:[00000000], esp
:0043F555 81EC28010000            sub esp, 00000128
:0043F55B 898DCCFEFFFF            mov dword ptr [ebp+FFFFFECC], ecx
:0043F561 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F567 E89481FCFF              call 00407700
:0043F56C C745FC00000000          mov [ebp-04], 00000000
:0043F573 8B4514                  mov eax, dword ptr [ebp+14]
:0043F576 50                      push eax
:0043F577 8A4D10                  mov cl, byte ptr [ebp+10]
:0043F57A 51                      push ecx
:0043F57B 8A550C                  mov dl, byte ptr [ebp+0C]
:0043F57E 52                      push edx
:0043F57F 8A4508                  mov al, byte ptr [ebp+08]
:0043F582 50                      push eax
:0043F583 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:0043F589 E82E020000              call 0043F7BC
:0043F58E 8945F0                  mov dword ptr [ebp-10], eax
:0043F591 837DF0FF                cmp dword ptr [ebp-10], FFFFFFFF
:0043F595 7527                    jne 0043F5BE
:0043F597 C785E4FEFFFF01000000    mov dword ptr [ebp+FFFFFEE4], 00000001
:0043F5A1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F5A8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F5AE E86D81FCFF              call 00407720
:0043F5B3 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0043F5B9 E9EE010000              jmp 0043F7AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F595(C)
|
:0043F5BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F5C1 81E1FF000000            and ecx, 000000FF
:0043F5C7 81F9FF000000            cmp ecx, 000000FF
:0043F5CD 751F                    jne 0043F5EE
:0043F5CF 6A00                    push 00000000
:0043F5D1 8A550C                  mov dl, byte ptr [ebp+0C]
:0043F5D4 52                      push edx
:0043F5D5 A098034B00              mov al, byte ptr [004B0398]
:0043F5DA 50                      push eax
:0043F5DB 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:0043F5E1 E865EAFFFF              call 0043E04B
:0043F5E6 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0043F5EC EB1B                    jmp 0043F609

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F5CD(C)
|
:0043F5EE 6A00                    push 00000000
:0043F5F0 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043F5F3 51                      push ecx
:0043F5F4 8A5508                  mov dl, byte ptr [ebp+08]
:0043F5F7 52                      push edx
:0043F5F8 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:0043F5FE E848EAFFFF              call 0043E04B
:0043F603 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F5EC(U)
|
:0043F609 8B4510                  mov eax, dword ptr [ebp+10]
:0043F60C 25FF000000              and eax, 000000FF
:0043F611 83F80F                  cmp eax, 0000000F
:0043F614 7420                    je 0043F636
:0043F616 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043F619 81E1FF000000            and ecx, 000000FF
:0043F61F 83F910                  cmp ecx, 00000010
:0043F622 7412                    je 0043F636
:0043F624 8B5510                  mov edx, dword ptr [ebp+10]
:0043F627 81E2FF000000            and edx, 000000FF
:0043F62D 83FA12                  cmp edx, 00000012
:0043F630 0F8508010000            jne 0043F73E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F614(C), :0043F622(C)
|
:0043F636 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:0043F63D 740D                    je 0043F64C
:0043F63F 83BDE8FEFFFF00          cmp dword ptr [ebp+FFFFFEE8], 00000000
:0043F646 0F85F2000000            jne 0043F73E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F63D(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E4"
                                  |
:0043F64C 68F07A4700              push 00477AF0
:0043F651 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F657 E8D94CFDFF              call 00414335
:0043F65C 85C0                    test eax, eax
:0043F65E 7527                    jne 0043F687
:0043F660 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:0043F66A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F671 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F677 E8A480FCFF              call 00407720
:0043F67C 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0043F682 E925010000              jmp 0043F7AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F65E(C)
|
:0043F687 6A00                    push 00000000
:0043F689 B930DA4A00              mov ecx, 004ADA30
:0043F68E E80B3FFDFF              call 0041359E
:0043F693 05003D0100              add eax, 00013D00
:0043F698 50                      push eax
:0043F699 8B45F0                  mov eax, dword ptr [ebp-10]
:0043F69C 50                      push eax
:0043F69D 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F6A3 E8E14DFDFF              call 00414489
:0043F6A8 85C0                    test eax, eax
:0043F6AA 7527                    jne 0043F6D3
:0043F6AC C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:0043F6B6 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F6BD 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F6C3 E85880FCFF              call 00407720
:0043F6C8 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0043F6CE E9D9000000              jmp 0043F7AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F6AA(C)
|
:0043F6D3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F6D9 E82E0FFDFF              call 0041060C
:0043F6DE 85C0                    test eax, eax
:0043F6E0 7527                    jne 0043F709
:0043F6E2 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0043F6EC C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F6F3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F6F9 E82280FCFF              call 00407720
:0043F6FE 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0043F704 E9A3000000              jmp 0043F7AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F6E0(C)
|
:0043F709 6A00                    push 00000000
:0043F70B B930DA4A00              mov ecx, 004ADA30
:0043F710 E8893EFDFF              call 0041359E
:0043F715 0500E70000              add eax, 0000E700
:0043F71A 50                      push eax
:0043F71B 6A00                    push 00000000
:0043F71D B930DA4A00              mov ecx, 004ADA30
:0043F722 E8773EFDFF              call 0041359E
:0043F727 05003D0100              add eax, 00013D00
:0043F72C 50                      push eax
:0043F72D 6890000000              push 00000090
:0043F732 6A30                    push 00000030
:0043F734 E8FE3FFDFF              call 00413737
:0043F739 83C410                  add esp, 00000010
:0043F73C EB39                    jmp 0043F777

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F630(C), :0043F646(C)
|
:0043F73E 6A01                    push 00000001
:0043F740 8A4DF0                  mov cl, byte ptr [ebp-10]
:0043F743 51                      push ecx
:0043F744 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:0043F74A E8D6F2FFFF              call 0043EA25
:0043F74F 85C0                    test eax, eax
:0043F751 7524                    jne 0043F777
:0043F753 C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:0043F75D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F764 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F76A E8B17FFCFF              call 00407720
:0043F76F 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:0043F775 EB35                    jmp 0043F7AC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F73C(U), :0043F751(C)
|
:0043F777 8B95CCFEFFFF            mov edx, dword ptr [ebp+FFFFFECC]
:0043F77D 8B02                    mov eax, dword ptr [edx]
:0043F77F 80CC01                  or ah, 01
:0043F782 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:0043F788 8901                    mov dword ptr [ecx], eax
:0043F78A C785D0FEFFFF01000000    mov dword ptr [ebp+FFFFFED0], 00000001
:0043F794 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0043F79B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043F7A1 E87A7FFCFF              call 00407720
:0043F7A6 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F5B9(U), :0043F682(U), :0043F6CE(U), :0043F704(U), :0043F775(U)
|
:0043F7AC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043F7AF 64890D00000000          mov dword ptr fs:[00000000], ecx
:0043F7B6 8BE5                    mov esp, ebp
:0043F7B8 5D                      pop ebp
:0043F7B9 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0043F589   
|
:0043F7BC 55                      push ebp
:0043F7BD 8BEC                    mov ebp, esp
:0043F7BF 83EC08                  sub esp, 00000008
:0043F7C2 894DFC                  mov dword ptr [ebp-04], ecx
:0043F7C5 8B4510                  mov eax, dword ptr [ebp+10]
:0043F7C8 25FF000000              and eax, 000000FF
:0043F7CD 8945F8                  mov dword ptr [ebp-08], eax
:0043F7D0 837DF82C                cmp dword ptr [ebp-08], 0000002C
:0043F7D4 0F87BC000000            ja 0043F896
:0043F7DA 8B55F8                  mov edx, dword ptr [ebp-08]
:0043F7DD 33C9                    xor ecx, ecx
:0043F7DF 8A8AFBF84300            mov cl, byte ptr [edx+0043F8FB]
:0043F7E5 FF248D9FF84300          jmp dword ptr [4*ecx+0043F89F]
:0043F7EC 8B4514                  mov eax, dword ptr [ebp+14]
:0043F7EF F7D8                    neg eax
:0043F7F1 1BC0                    sbb eax, eax
:0043F7F3 83E013                  and eax, 00000013
:0043F7F6 83C0FF                  add eax, FFFFFFFF
:0043F7F9 E99B000000              jmp 0043F899
:0043F7FE 8B4514                  mov eax, dword ptr [ebp+14]
:0043F801 F7D8                    neg eax
:0043F803 1BC0                    sbb eax, eax
:0043F805 83E014                  and eax, 00000014
:0043F808 83C0FF                  add eax, FFFFFFFF
:0043F80B E989000000              jmp 0043F899
:0043F810 8B4514                  mov eax, dword ptr [ebp+14]
:0043F813 F7D8                    neg eax
:0043F815 1BC0                    sbb eax, eax
:0043F817 83E015                  and eax, 00000015
:0043F81A 83C0FF                  add eax, FFFFFFFF
:0043F81D EB7A                    jmp 0043F899
:0043F81F 8B4514                  mov eax, dword ptr [ebp+14]
:0043F822 F7D8                    neg eax
:0043F824 1BC0                    sbb eax, eax
:0043F826 83E016                  and eax, 00000016
:0043F829 83C0FF                  add eax, FFFFFFFF
:0043F82C EB6B                    jmp 0043F899
:0043F82E 8B4514                  mov eax, dword ptr [ebp+14]
:0043F831 F7D8                    neg eax
:0043F833 1BC0                    sbb eax, eax
:0043F835 83E017                  and eax, 00000017
:0043F838 83C0FF                  add eax, FFFFFFFF
:0043F83B EB5C                    jmp 0043F899
:0043F83D 8B4514                  mov eax, dword ptr [ebp+14]
:0043F840 F7D8                    neg eax
:0043F842 1BC0                    sbb eax, eax
:0043F844 83E008                  and eax, 00000008
:0043F847 83C0FF                  add eax, FFFFFFFF
:0043F84A EB4D                    jmp 0043F899
:0043F84C 8B4514                  mov eax, dword ptr [ebp+14]
:0043F84F F7D8                    neg eax
:0043F851 1BC0                    sbb eax, eax
:0043F853 83E019                  and eax, 00000019
:0043F856 83C0FF                  add eax, FFFFFFFF
:0043F859 EB3E                    jmp 0043F899
:0043F85B 8B4514                  mov eax, dword ptr [ebp+14]
:0043F85E F7D8                    neg eax
:0043F860 1BC0                    sbb eax, eax
:0043F862 83E01A                  and eax, 0000001A
:0043F865 83C0FF                  add eax, FFFFFFFF
:0043F868 EB2F                    jmp 0043F899
:0043F86A 8B4514                  mov eax, dword ptr [ebp+14]
:0043F86D F7D8                    neg eax
:0043F86F 1BC0                    sbb eax, eax
:0043F871 83E018                  and eax, 00000018
:0043F874 83C0FF                  add eax, FFFFFFFF
:0043F877 EB20                    jmp 0043F899
:0043F879 8B4514                  mov eax, dword ptr [ebp+14]
:0043F87C F7D8                    neg eax
:0043F87E 1BC0                    sbb eax, eax
:0043F880 83E01B                  and eax, 0000001B
:0043F883 83C0FF                  add eax, FFFFFFFF
:0043F886 EB11                    jmp 0043F899
:0043F888 B81B000000              mov eax, 0000001B
:0043F88D EB0A                    jmp 0043F899
:0043F88F B81C000000              mov eax, 0000001C
:0043F894 EB03                    jmp 0043F899

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F7D4(C)
|
:0043F896 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F7F9(U), :0043F80B(U), :0043F81D(U), :0043F82C(U), :0043F83B(U)
|:0043F84A(U), :0043F859(U), :0043F868(U), :0043F877(U), :0043F886(U)
|:0043F88D(U), :0043F894(U)
|
:0043F899 8BE5                    mov esp, ebp
:0043F89B 5D                      pop ebp
:0043F89C C21000                  ret 0010



:0043F89F ECF74300                DWORD 0043F7EC
:0043F8A3 ECF74300                DWORD 0043F7EC
:0043F8A7 ECF74300                DWORD 0043F7EC
:0043F8AB FEF74300                DWORD 0043F7FE
:0043F8AF 10F84300                DWORD 0043F810
:0043F8B3 1FF84300                DWORD 0043F81F
:0043F8B7 ECF74300                DWORD 0043F7EC
:0043F8BB 1FF84300                DWORD 0043F81F
:0043F8BF 2EF84300                DWORD 0043F82E
:0043F8C3 3DF84300                DWORD 0043F83D
:0043F8C7 2EF84300                DWORD 0043F82E
:0043F8CB 6AF84300                DWORD 0043F86A
:0043F8CF 4CF84300                DWORD 0043F84C
:0043F8D3 5BF84300                DWORD 0043F85B
:0043F8D7 6AF84300                DWORD 0043F86A
:0043F8DB 79F84300                DWORD 0043F879
:0043F8DF ECF74300                DWORD 0043F7EC
:0043F8E3 79F84300                DWORD 0043F879
:0043F8E7 10F84300                DWORD 0043F810
:0043F8EB 79F84300                DWORD 0043F879
:0043F8EF 88F84300                DWORD 0043F888
:0043F8F3 8FF84300                DWORD 0043F88F
:0043F8F7 96F84300                DWORD 0043F896


:0043F8FB 0016                    add byte ptr [esi], dl
:0043F8FD 0116                    add dword ptr [esi], edx
:0043F8FF 0203                    add al, byte ptr [ebx]
:0043F901 0416                    add al, 16
:0043F903 0516060708              add eax, 08070616
:0043F908 090A                    or dword ptr [edx], ecx
:0043F90A 0B0C0D0E0F0F10          or ecx, dword ptr [ecx+100F0F0E]
:0043F911 1016                    adc byte ptr [esi], dl
:0043F913 1111                    adc dword ptr [ecx], edx
:0043F915 1111                    adc dword ptr [ecx], edx
:0043F917 1112                    adc dword ptr [edx], edx
:0043F919 1313                    adc edx, dword ptr [ebx]
:0043F91B 131414                  adc edx, dword ptr [esp+edx]
:0043F91E 1414                    adc al, 14
:0043F920 16                      push ss
:0043F921 1515151515              adc eax, 15151515
:0043F926 15                      BYTE 15h
:0043F927 15                      BYTE 15h


* Referenced by a CALL at Address:
|:0043DA6B   
|
:0043F928 55                      push ebp
:0043F929 8BEC                    mov ebp, esp
:0043F92B 83EC0C                  sub esp, 0000000C
:0043F92E 894DF8                  mov dword ptr [ebp-08], ecx
:0043F931 8B4508                  mov eax, dword ptr [ebp+08]
:0043F934 25FF000000              and eax, 000000FF
:0043F939 8945F4                  mov dword ptr [ebp-0C], eax
:0043F93C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043F93F 83E904                  sub ecx, 00000004
:0043F942 894DF4                  mov dword ptr [ebp-0C], ecx
:0043F945 837DF428                cmp dword ptr [ebp-0C], 00000028
:0043F949 0F87E4000000            ja 0043FA33
:0043F94F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043F952 33D2                    xor edx, edx
:0043F954 8A90C9FA4300            mov dl, byte ptr [eax+0043FAC9]
:0043F95A FF249575FA4300          jmp dword ptr [4*edx+0043FA75]
:0043F961 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F964 F7D9                    neg ecx
:0043F966 1BC9                    sbb ecx, ecx
:0043F968 83E103                  and ecx, 00000003
:0043F96B 83C1FF                  add ecx, FFFFFFFF
:0043F96E 894DFC                  mov dword ptr [ebp-04], ecx
:0043F971 E9C4000000              jmp 0043FA3A
:0043F976 8B550C                  mov edx, dword ptr [ebp+0C]
:0043F979 F7DA                    neg edx
:0043F97B 1BD2                    sbb edx, edx
:0043F97D 83E20C                  and edx, 0000000C
:0043F980 83C2FF                  add edx, FFFFFFFF
:0043F983 8955FC                  mov dword ptr [ebp-04], edx
:0043F986 E9AF000000              jmp 0043FA3A
:0043F98B 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F98E F7D8                    neg eax
:0043F990 1BC0                    sbb eax, eax
:0043F992 83E009                  and eax, 00000009
:0043F995 83C0FF                  add eax, FFFFFFFF
:0043F998 8945FC                  mov dword ptr [ebp-04], eax
:0043F99B E99A000000              jmp 0043FA3A
:0043F9A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F9A3 F7D9                    neg ecx
:0043F9A5 1BC9                    sbb ecx, ecx
:0043F9A7 83E10B                  and ecx, 0000000B
:0043F9AA 83C1FF                  add ecx, FFFFFFFF
:0043F9AD 894DFC                  mov dword ptr [ebp-04], ecx
:0043F9B0 E985000000              jmp 0043FA3A
:0043F9B5 8B550C                  mov edx, dword ptr [ebp+0C]
:0043F9B8 F7DA                    neg edx
:0043F9BA 1BD2                    sbb edx, edx
:0043F9BC 83E20D                  and edx, 0000000D
:0043F9BF 83C2FF                  add edx, FFFFFFFF
:0043F9C2 8955FC                  mov dword ptr [ebp-04], edx
:0043F9C5 EB73                    jmp 0043FA3A
:0043F9C7 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F9CA F7D8                    neg eax
:0043F9CC 1BC0                    sbb eax, eax
:0043F9CE 83E00A                  and eax, 0000000A
:0043F9D1 83C0FF                  add eax, FFFFFFFF
:0043F9D4 8945FC                  mov dword ptr [ebp-04], eax
:0043F9D7 EB61                    jmp 0043FA3A
:0043F9D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F9DC F7D9                    neg ecx
:0043F9DE 1BC9                    sbb ecx, ecx
:0043F9E0 83E10E                  and ecx, 0000000E
:0043F9E3 83C1FF                  add ecx, FFFFFFFF
:0043F9E6 894DFC                  mov dword ptr [ebp-04], ecx
:0043F9E9 EB4F                    jmp 0043FA3A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043F9EB C745FC03000000          mov [ebp-04], 00000003
:0043F9F2 EB46                    jmp 0043FA3A

* Possible Reference to String Resource ID=00015: ""
                                  |
:0043F9F4 C745FC0F000000          mov [ebp-04], 0000000F
:0043F9FB EB3D                    jmp 0043FA3A

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0043F9FD C745FC10000000          mov [ebp-04], 00000010
:0043FA04 EB34                    jmp 0043FA3A

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0043FA06 C745FC11000000          mov [ebp-04], 00000011
:0043FA0D EB2B                    jmp 0043FA3A

* Possible Reference to String Resource ID=00018: "G"
                                  |
:0043FA0F C745FC12000000          mov [ebp-04], 00000012
:0043FA16 EB22                    jmp 0043FA3A
:0043FA18 C745FC13000000          mov [ebp-04], 00000013
:0043FA1F EB19                    jmp 0043FA3A
:0043FA21 C745FC14000000          mov [ebp-04], 00000014
:0043FA28 EB10                    jmp 0043FA3A
:0043FA2A C745FC16000000          mov [ebp-04], 00000016
:0043FA31 EB07                    jmp 0043FA3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F949(C)
|
:0043FA33 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F971(U), :0043F986(U), :0043F99B(U), :0043F9B0(U), :0043F9C5(U)
|:0043F9D7(U), :0043F9E9(U), :0043F9F2(U), :0043F9FB(U), :0043FA04(U)
|:0043FA0D(U), :0043FA16(U), :0043FA1F(U), :0043FA28(U), :0043FA31(U)
|
:0043FA3A 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0043FA3E 7507                    jne 0043FA47
:0043FA40 B801000000              mov eax, 00000001
:0043FA45 EB28                    jmp 0043FA6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FA3E(C)
|
:0043FA47 6A01                    push 00000001
:0043FA49 8A55FC                  mov dl, byte ptr [ebp-04]
:0043FA4C 52                      push edx
:0043FA4D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FA50 E891E0FFFF              call 0043DAE6
:0043FA55 85C0                    test eax, eax
:0043FA57 7504                    jne 0043FA5D
:0043FA59 33C0                    xor eax, eax
:0043FA5B EB12                    jmp 0043FA6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FA57(C)
|
:0043FA5D 8B45F8                  mov eax, dword ptr [ebp-08]
:0043FA60 8B08                    mov ecx, dword ptr [eax]
:0043FA62 80CD02                  or ch, 02
:0043FA65 8B55F8                  mov edx, dword ptr [ebp-08]
:0043FA68 890A                    mov dword ptr [edx], ecx
:0043FA6A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FA45(U), :0043FA5B(U)
|
:0043FA6F 8BE5                    mov esp, ebp
:0043FA71 5D                      pop ebp
:0043FA72 C20800                  ret 0008



:0043FA75 61F94300                DWORD 0043F961
:0043FA79 76F94300                DWORD 0043F976
:0043FA7D 8BF94300                DWORD 0043F98B
:0043FA81 8BF94300                DWORD 0043F98B
:0043FA85 61F94300                DWORD 0043F961
:0043FA89 A0F94300                DWORD 0043F9A0
:0043FA8D B5F94300                DWORD 0043F9B5
:0043FA91 D9F94300                DWORD 0043F9D9
:0043FA95 8BF94300                DWORD 0043F98B
:0043FA99 C7F94300                DWORD 0043F9C7
:0043FA9D A0F94300                DWORD 0043F9A0
:0043FAA1 61F94300                DWORD 0043F961
:0043FAA5 EBF94300                DWORD 0043F9EB
:0043FAA9 F4F94300                DWORD 0043F9F4
:0043FAAD FDF94300                DWORD 0043F9FD
:0043FAB1 06FA4300                DWORD 0043FA06
:0043FAB5 0FFA4300                DWORD 0043FA0F
:0043FAB9 18FA4300                DWORD 0043FA18
:0043FABD 21FA4300                DWORD 0043FA21
:0043FAC1 2AFA4300                DWORD 0043FA2A
:0043FAC5 33FA4300                DWORD 0043FA33


:0043FAC9 0001                    add byte ptr [ecx], al
:0043FACB 021414                  add dl, byte ptr [esp+edx]
:0043FACE 1414                    adc al, 14
:0043FAD0 1414                    adc al, 14
:0043FAD2 1414                    adc al, 14
:0043FAD4 1414                    adc al, 14
:0043FAD6 1414                    adc al, 14
:0043FAD8 030414                  add eax, dword ptr [esp+edx]
:0043FADB 1414                    adc al, 14
:0043FADD 0505060607              add eax, 07060605
:0043FAE2 0809                    or byte ptr [ecx], cl
:0043FAE4 0A0B                    or cl, byte ptr [ebx]
:0043FAE6 0C0C                    or al, 0C
:0043FAE8 0C0C                    or al, 0C
:0043FAEA 140D                    adc al, 0D
:0043FAEC 0E                      push cs
:0043FAED 0F                      BYTE 0fh
:0043FAEE 1011                    adc byte ptr [ecx], dl
:0043FAF0 1213                    adc dl, byte ptr [ebx]

* Referenced by a CALL at Address:
|:0043DA94   
|
:0043FAF2 55                      push ebp
:0043FAF3 8BEC                    mov ebp, esp
:0043FAF5 83EC08                  sub esp, 00000008
:0043FAF8 894DFC                  mov dword ptr [ebp-04], ecx
:0043FAFB 8B4508                  mov eax, dword ptr [ebp+08]
:0043FAFE 25FF000000              and eax, 000000FF
:0043FB03 8945F8                  mov dword ptr [ebp-08], eax
:0043FB06 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FB09 83E902                  sub ecx, 00000002
:0043FB0C 894DF8                  mov dword ptr [ebp-08], ecx
:0043FB0F 837DF82C                cmp dword ptr [ebp-08], 0000002C
:0043FB13 7734                    ja 0043FB49
:0043FB15 8B45F8                  mov eax, dword ptr [ebp-08]
:0043FB18 33D2                    xor edx, edx
:0043FB1A 8A9067FB4300            mov dl, byte ptr [eax+0043FB67]
:0043FB20 FF24954FFB4300          jmp dword ptr [4*edx+0043FB4F]
:0043FB27 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FB2A 8B11                    mov edx, dword ptr [ecx]
:0043FB2C 80CE04                  or dh, 04
:0043FB2F 8B45FC                  mov eax, dword ptr [ebp-04]
:0043FB32 8910                    mov dword ptr [eax], edx
:0043FB34 EB13                    jmp 0043FB49
:0043FB36 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0043FB3A 740D                    je 0043FB49
:0043FB3C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FB3F 8B11                    mov edx, dword ptr [ecx]
:0043FB41 80CE04                  or dh, 04
:0043FB44 8B45FC                  mov eax, dword ptr [ebp-04]
:0043FB47 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FB13(C), :0043FB34(U), :0043FB3A(C)
|
:0043FB49 8BE5                    mov esp, ebp
:0043FB4B 5D                      pop ebp
:0043FB4C C20800                  ret 0008



:0043FB4F 27FB4300                DWORD 0043FB27
:0043FB53 27FB4300                DWORD 0043FB27
:0043FB57 36FB4300                DWORD 0043FB36
:0043FB5B 27FB4300                DWORD 0043FB27
:0043FB5F 36FB4300                DWORD 0043FB36
:0043FB63 49FB4300                DWORD 0043FB49


:0043FB67 000505050505            add byte ptr [05050505], al
:0043FB6D 0505050505              add eax, 05050505
:0043FB72 010505050505            add dword ptr [05050505], eax
:0043FB78 0505050505              add eax, 05050505
:0043FB7D 0505050505              add eax, 05050505
:0043FB82 0505050205              add eax, 05020505
:0043FB87 0505050305              add eax, 05030505
:0043FB8C 0505050505              add eax, 05050505
:0043FB91 05                      BYTE 05h
:0043FB92 05                      BYTE 05h
:0043FB93 04                      BYTE 04h


* Referenced by a CALL at Address:
|:0043DAA4   
|
:0043FB94 55                      push ebp
:0043FB95 8BEC                    mov ebp, esp
:0043FB97 83EC0C                  sub esp, 0000000C
:0043FB9A 894DF8                  mov dword ptr [ebp-08], ecx
:0043FB9D 8B4508                  mov eax, dword ptr [ebp+08]
:0043FBA0 25FF000000              and eax, 000000FF
:0043FBA5 8945F4                  mov dword ptr [ebp-0C], eax
:0043FBA8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043FBAB 83E902                  sub ecx, 00000002
:0043FBAE 894DF4                  mov dword ptr [ebp-0C], ecx
:0043FBB1 837DF42C                cmp dword ptr [ebp-0C], 0000002C
:0043FBB5 7748                    ja 0043FBFF
:0043FBB7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043FBBA 33D2                    xor edx, edx
:0043FBBC 8A9059FC4300            mov dl, byte ptr [eax+0043FC59]
:0043FBC2 FF249541FC4300          jmp dword ptr [4*edx+0043FC41]
:0043FBC9 C745FC1D000000          mov [ebp-04], 0000001D
:0043FBD0 EB34                    jmp 0043FC06
:0043FBD2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FBD5 F7D9                    neg ecx
:0043FBD7 1BC9                    sbb ecx, ecx
:0043FBD9 83E11D                  and ecx, 0000001D
:0043FBDC 83C1FF                  add ecx, FFFFFFFF
:0043FBDF 894DFC                  mov dword ptr [ebp-04], ecx
:0043FBE2 EB22                    jmp 0043FC06
:0043FBE4 C745FC1B000000          mov [ebp-04], 0000001B
:0043FBEB EB19                    jmp 0043FC06
:0043FBED 8B550C                  mov edx, dword ptr [ebp+0C]
:0043FBF0 F7DA                    neg edx
:0043FBF2 1BD2                    sbb edx, edx
:0043FBF4 83E21F                  and edx, 0000001F
:0043FBF7 83C2FF                  add edx, FFFFFFFF
:0043FBFA 8955FC                  mov dword ptr [ebp-04], edx
:0043FBFD EB07                    jmp 0043FC06

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FBB5(C)
|
:0043FBFF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FBD0(U), :0043FBE2(U), :0043FBEB(U), :0043FBFD(U)
|
:0043FC06 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0043FC0A 7507                    jne 0043FC13
:0043FC0C B801000000              mov eax, 00000001
:0043FC11 EB28                    jmp 0043FC3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FC0A(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043FC13 6A02                    push 00000002
:0043FC15 8A45FC                  mov al, byte ptr [ebp-04]
:0043FC18 50                      push eax
:0043FC19 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FC1C E804EEFFFF              call 0043EA25
:0043FC21 85C0                    test eax, eax
:0043FC23 7504                    jne 0043FC29
:0043FC25 33C0                    xor eax, eax
:0043FC27 EB12                    jmp 0043FC3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FC23(C)
|
:0043FC29 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FC2C 8B11                    mov edx, dword ptr [ecx]
:0043FC2E 80CE10                  or dh, 10
:0043FC31 8B45F8                  mov eax, dword ptr [ebp-08]
:0043FC34 8910                    mov dword ptr [eax], edx
:0043FC36 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FC11(U), :0043FC27(U)
|
:0043FC3B 8BE5                    mov esp, ebp
:0043FC3D 5D                      pop ebp
:0043FC3E C20800                  ret 0008



:0043FC41 C9FB4300                DWORD 0043FBC9
:0043FC45 C9FB4300                DWORD 0043FBC9
:0043FC49 D2FB4300                DWORD 0043FBD2
:0043FC4D E4FB4300                DWORD 0043FBE4
:0043FC51 EDFB4300                DWORD 0043FBED
:0043FC55 FFFB4300                DWORD 0043FBFF


:0043FC59 000505050505            add byte ptr [05050505], al
:0043FC5F 0505050505              add eax, 05050505
:0043FC64 010505050505            add dword ptr [05050505], eax
:0043FC6A 0505050505              add eax, 05050505
:0043FC6F 0505050505              add eax, 05050505
:0043FC74 0505050205              add eax, 05020505
:0043FC79 0505050305              add eax, 05030505
:0043FC7E 0505050505              add eax, 05050505
:0043FC83 05                      BYTE 05h
:0043FC84 05                      BYTE 05h
:0043FC85 04                      BYTE 04h


* Referenced by a CALL at Address:
|:0043DABC   
|
:0043FC86 55                      push ebp
:0043FC87 8BEC                    mov ebp, esp
:0043FC89 83EC0C                  sub esp, 0000000C
:0043FC8C 894DF8                  mov dword ptr [ebp-08], ecx
:0043FC8F 8B4508                  mov eax, dword ptr [ebp+08]
:0043FC92 25FF000000              and eax, 000000FF
:0043FC97 8945F4                  mov dword ptr [ebp-0C], eax
:0043FC9A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043FC9D 83E902                  sub ecx, 00000002
:0043FCA0 894DF4                  mov dword ptr [ebp-0C], ecx
:0043FCA3 837DF42C                cmp dword ptr [ebp-0C], 0000002C
:0043FCA7 7748                    ja 0043FCF1
:0043FCA9 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043FCAC 33D2                    xor edx, edx
:0043FCAE 8A904BFD4300            mov dl, byte ptr [eax+0043FD4B]
:0043FCB4 FF249533FD4300          jmp dword ptr [4*edx+0043FD33]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043FCBB C745FC04000000          mov [ebp-04], 00000004
:0043FCC2 EB34                    jmp 0043FCF8
:0043FCC4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FCC7 F7D9                    neg ecx
:0043FCC9 1BC9                    sbb ecx, ecx
:0043FCCB 83E102                  and ecx, 00000002
:0043FCCE 83C1FF                  add ecx, FFFFFFFF
:0043FCD1 894DFC                  mov dword ptr [ebp-04], ecx
:0043FCD4 EB22                    jmp 0043FCF8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0043FCD6 C745FC03000000          mov [ebp-04], 00000003
:0043FCDD EB19                    jmp 0043FCF8
:0043FCDF 8B550C                  mov edx, dword ptr [ebp+0C]
:0043FCE2 F7DA                    neg edx
:0043FCE4 1BD2                    sbb edx, edx
:0043FCE6 83E206                  and edx, 00000006
:0043FCE9 83C2FF                  add edx, FFFFFFFF
:0043FCEC 8955FC                  mov dword ptr [ebp-04], edx
:0043FCEF EB07                    jmp 0043FCF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FCA7(C)
|
:0043FCF1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FCC2(U), :0043FCD4(U), :0043FCDD(U), :0043FCEF(U)
|
:0043FCF8 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0043FCFC 7507                    jne 0043FD05
:0043FCFE B801000000              mov eax, 00000001
:0043FD03 EB28                    jmp 0043FD2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FCFC(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043FD05 6A02                    push 00000002
:0043FD07 8A45FC                  mov al, byte ptr [ebp-04]
:0043FD0A 50                      push eax
:0043FD0B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FD0E E8D3DDFFFF              call 0043DAE6
:0043FD13 85C0                    test eax, eax
:0043FD15 7504                    jne 0043FD1B
:0043FD17 33C0                    xor eax, eax
:0043FD19 EB12                    jmp 0043FD2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FD15(C)
|
:0043FD1B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FD1E 8B11                    mov edx, dword ptr [ecx]
:0043FD20 80CE20                  or dh, 20
:0043FD23 8B45F8                  mov eax, dword ptr [ebp-08]
:0043FD26 8910                    mov dword ptr [eax], edx
:0043FD28 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FD03(U), :0043FD19(U)
|
:0043FD2D 8BE5                    mov esp, ebp
:0043FD2F 5D                      pop ebp
:0043FD30 C20800                  ret 0008



:0043FD33 BBFC4300                DWORD 0043FCBB
:0043FD37 BBFC4300                DWORD 0043FCBB
:0043FD3B C4FC4300                DWORD 0043FCC4
:0043FD3F D6FC4300                DWORD 0043FCD6
:0043FD43 DFFC4300                DWORD 0043FCDF
:0043FD47 F1FC4300                DWORD 0043FCF1


:0043FD4B 000505050505            add byte ptr [05050505], al
:0043FD51 0505050505              add eax, 05050505
:0043FD56 010505050505            add dword ptr [05050505], eax
:0043FD5C 0505050505              add eax, 05050505
:0043FD61 0505050505              add eax, 05050505
:0043FD66 0505050205              add eax, 05020505
:0043FD6B 0505050305              add eax, 05030505
:0043FD70 0505050505              add eax, 05050505
:0043FD75 05                      BYTE 05h
:0043FD76 05                      BYTE 05h
:0043FD77 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:0043D665   , :0043D6A3   , :0043D6E1   , :0043D770   , :0043D78C   
|:0043D7EA   , :0043D856   , :0043D8C5   
|
:0043FD78 55                      push ebp
:0043FD79 8BEC                    mov ebp, esp
:0043FD7B 51                      push ecx
:0043FD7C 894DFC                  mov dword ptr [ebp-04], ecx
:0043FD7F 8B450C                  mov eax, dword ptr [ebp+0C]
:0043FD82 25FF000000              and eax, 000000FF
:0043FD87 85C0                    test eax, eax
:0043FD89 7C66                    jl 0043FDF1
:0043FD8B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FD8E 81E1FF000000            and ecx, 000000FF
:0043FD94 83F903                  cmp ecx, 00000003
:0043FD97 7F58                    jg 0043FDF1
:0043FD99 8B5508                  mov edx, dword ptr [ebp+08]
:0043FD9C 81E2FF000000            and edx, 000000FF
:0043FDA2 83FA31                  cmp edx, 00000031
:0043FDA5 7D4A                    jge 0043FDF1
:0043FDA7 8B450C                  mov eax, dword ptr [ebp+0C]
:0043FDAA 25FF000000              and eax, 000000FF
:0043FDAF 69C0C8000000            imul eax, 000000C8
:0043FDB5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FDB8 81E1FF000000            and ecx, 000000FF
:0043FDBE 83BC8860404700FF        cmp dword ptr [eax+4*ecx+00474060], FFFFFFFF
:0043FDC6 7429                    je 0043FDF1
:0043FDC8 8B550C                  mov edx, dword ptr [ebp+0C]
:0043FDCB 81E2FF000000            and edx, 000000FF
:0043FDD1 69D2C8000000            imul edx, 000000C8
:0043FDD7 8B4508                  mov eax, dword ptr [ebp+08]
:0043FDDA 25FF000000              and eax, 000000FF
:0043FDDF 8B8C8260404700          mov ecx, dword ptr [edx+4*eax+00474060]
:0043FDE6 51                      push ecx
:0043FDE7 B9800D4B00              mov ecx, 004B0D80
:0043FDEC E8B81D0200              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FD89(C), :0043FD97(C), :0043FDA5(C), :0043FDC6(C)
|
:0043FDF1 8BE5                    mov esp, ebp
:0043FDF3 5D                      pop ebp
:0043FDF4 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0043D64B   , :0043D74A   , :0043D82A   , :00440205   , :004419F7   
|
:0043FDF7 55                      push ebp
:0043FDF8 8BEC                    mov ebp, esp
:0043FDFA 83EC28                  sub esp, 00000028
:0043FDFD 894DDC                  mov dword ptr [ebp-24], ecx
:0043FE00 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0043FE03 E8A879FCFF              call 004077B0
:0043FE08 837D1401                cmp dword ptr [ebp+14], 00000001
:0043FE0C 740E                    je 0043FE1C
:0043FE0E 837D1405                cmp dword ptr [ebp+14], 00000005
:0043FE12 7408                    je 0043FE1C
:0043FE14 8A4508                  mov al, byte ptr [ebp+08]
:0043FE17 8845DB                  mov byte ptr [ebp-25], al
:0043FE1A EB06                    jmp 0043FE22

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FE0C(C), :0043FE12(C)
|
:0043FE1C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043FE1F 884DDB                  mov byte ptr [ebp-25], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FE1A(U)
|
:0043FE22 8A55DB                  mov dl, byte ptr [ebp-25]
:0043FE25 8855FC                  mov byte ptr [ebp-04], dl
:0043FE28 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FE2B 81E1FF000000            and ecx, 000000FF
:0043FE31 6BC924                  imul ecx, 00000024
:0043FE34 81C108F54A00            add ecx, 004AF508
:0043FE3A E86195FEFF              call 004293A0
:0043FE3F 50                      push eax
:0043FE40 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0043FE43 E848F9FEFF              call 0042F790
:0043FE48 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043FE4B 25FF000000              and eax, 000000FF
:0043FE50 6BC003                  imul eax, 00000003
:0043FE53 8945F4                  mov dword ptr [ebp-0C], eax
:0043FE56 8B4DE5                  mov ecx, dword ptr [ebp-1B]
:0043FE59 81E1FF000000            and ecx, 000000FF
:0043FE5F 6BC903                  imul ecx, 00000003
:0043FE62 894DE8                  mov dword ptr [ebp-18], ecx
:0043FE65 B9A8034B00              mov ecx, 004B03A8
:0043FE6A E8112F0000              call 00442D80
:0043FE6F 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043FE72 2BD0                    sub edx, eax
:0043FE74 C1E204                  shl edx, 04
:0043FE77 8955EC                  mov dword ptr [ebp-14], edx
:0043FE7A B9A8034B00              mov ecx, 004B03A8
:0043FE7F E80D2F0000              call 00442D91
:0043FE84 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043FE87 2BC8                    sub ecx, eax
:0043FE89 83C102                  add ecx, 00000002
:0043FE8C C1E104                  shl ecx, 04
:0043FE8F 83C108                  add ecx, 00000008
:0043FE92 894DF8                  mov dword ptr [ebp-08], ecx
:0043FE95 837D1405                cmp dword ptr [ebp+14], 00000005
:0043FE99 7409                    je 0043FEA4
:0043FE9B C745F0003D0100          mov [ebp-10], 00013D00
:0043FEA2 EB07                    jmp 0043FEAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FE99(C)
|
:0043FEA4 C745F0006B0100          mov [ebp-10], 00016B00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FEA2(U)
|
:0043FEAB 6A00                    push 00000000
:0043FEAD B930DA4A00              mov ecx, 004ADA30
:0043FEB2 E8E736FDFF              call 0041359E
:0043FEB7 0345F0                  add eax, dword ptr [ebp-10]
:0043FEBA 50                      push eax
:0043FEBB 6A30                    push 00000030
:0043FEBD 6A30                    push 00000030
:0043FEBF 8B55F8                  mov edx, dword ptr [ebp-08]
:0043FEC2 52                      push edx
:0043FEC3 8B45EC                  mov eax, dword ptr [ebp-14]
:0043FEC6 50                      push eax
:0043FEC7 E8072E0000              call 00442CD3
:0043FECC 83C414                  add esp, 00000014
:0043FECF C745E000000000          mov [ebp-20], 00000000
:0043FED6 EB09                    jmp 0043FEE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004400DD(U)
|
:0043FED8 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043FEDB 83C101                  add ecx, 00000001
:0043FEDE 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FED6(U)
|
:0043FEE1 837DE003                cmp dword ptr [ebp-20], 00000003
:0043FEE5 0F83F7010000            jnb 004400E2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0043FEEB 6A02                    push 00000002
:0043FEED B9F8F44A00              mov ecx, 004AF4F8
:0043FEF2 E89955FEFF              call 00425490
:0043FEF7 E8362FFDFF              call 00412E32
:0043FEFC 6A00                    push 00000000
:0043FEFE 6A00                    push 00000000
:0043FF00 B930DA4A00              mov ecx, 004ADA30
:0043FF05 E89436FDFF              call 0041359E
:0043FF0A 0345F0                  add eax, dword ptr [ebp-10]
:0043FF0D 50                      push eax
:0043FF0E 6A30                    push 00000030
:0043FF10 6A30                    push 00000030
:0043FF12 8B55F8                  mov edx, dword ptr [ebp-08]
:0043FF15 52                      push edx
:0043FF16 8B45EC                  mov eax, dword ptr [ebp-14]
:0043FF19 50                      push eax
:0043FF1A E8F32C0000              call 00442C12
:0043FF1F 83C418                  add esp, 00000018
:0043FF22 837D1400                cmp dword ptr [ebp+14], 00000000
:0043FF26 7538                    jne 0043FF60

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043FF28 6A04                    push 00000004
:0043FF2A 6A00                    push 00000000
:0043FF2C B930DA4A00              mov ecx, 004ADA30
:0043FF31 E86836FDFF              call 0041359E
:0043FF36 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043FF39 69C900090000            imul ecx, 00000900
:0043FF3F 8D940800600000          lea edx, dword ptr [eax+ecx+00006000]
:0043FF46 52                      push edx
:0043FF47 6A30                    push 00000030
:0043FF49 6A30                    push 00000030
:0043FF4B 8B45F8                  mov eax, dword ptr [ebp-08]
:0043FF4E 50                      push eax
:0043FF4F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043FF52 51                      push ecx
:0043FF53 E8BA2C0000              call 00442C12
:0043FF58 83C418                  add esp, 00000018
:0043FF5B E9AF000000              jmp 0044000F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FF26(C)
|
:0043FF60 837D1401                cmp dword ptr [ebp+14], 00000001
:0043FF64 7535                    jne 0043FF9B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043FF66 6A04                    push 00000004
:0043FF68 6A00                    push 00000000
:0043FF6A B930DA4A00              mov ecx, 004ADA30
:0043FF6F E82A36FDFF              call 0041359E
:0043FF74 8B55E0                  mov edx, dword ptr [ebp-20]
:0043FF77 69D200090000            imul edx, 00000900
:0043FF7D 8D8410007B0000          lea eax, dword ptr [eax+edx+00007B00]
:0043FF84 50                      push eax
:0043FF85 6A30                    push 00000030
:0043FF87 6A30                    push 00000030
:0043FF89 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FF8C 51                      push ecx
:0043FF8D 8B55EC                  mov edx, dword ptr [ebp-14]
:0043FF90 52                      push edx
:0043FF91 E87C2C0000              call 00442C12
:0043FF96 83C418                  add esp, 00000018
:0043FF99 EB74                    jmp 0044000F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FF64(C)
|
:0043FF9B 837D1402                cmp dword ptr [ebp+14], 00000002
:0043FF9F 7535                    jne 0043FFD6

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043FFA1 6A04                    push 00000004
:0043FFA3 6A00                    push 00000000
:0043FFA5 B930DA4A00              mov ecx, 004ADA30
:0043FFAA E8EF35FDFF              call 0041359E
:0043FFAF 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043FFB2 69C900090000            imul ecx, 00000900
:0043FFB8 8D940800960000          lea edx, dword ptr [eax+ecx+00009600]
:0043FFBF 52                      push edx
:0043FFC0 6A30                    push 00000030
:0043FFC2 6A30                    push 00000030
:0043FFC4 8B45F8                  mov eax, dword ptr [ebp-08]
:0043FFC7 50                      push eax
:0043FFC8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043FFCB 51                      push ecx
:0043FFCC E8412C0000              call 00442C12
:0043FFD1 83C418                  add esp, 00000018
:0043FFD4 EB39                    jmp 0044000F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FF9F(C)
|
:0043FFD6 837D1405                cmp dword ptr [ebp+14], 00000005
:0043FFDA 7533                    jne 0044000F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043FFDC 6A04                    push 00000004
:0043FFDE 6A00                    push 00000000
:0043FFE0 B930DA4A00              mov ecx, 004ADA30
:0043FFE5 E8B435FDFF              call 0041359E
:0043FFEA 8B55E0                  mov edx, dword ptr [ebp-20]
:0043FFED 69D200090000            imul edx, 00000900
:0043FFF3 8D841000020200          lea eax, dword ptr [eax+edx+00020200]
:0043FFFA 50                      push eax
:0043FFFB 6A30                    push 00000030
:0043FFFD 6A30                    push 00000030
:0043FFFF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440002 51                      push ecx
:00440003 8B55EC                  mov edx, dword ptr [ebp-14]
:00440006 52                      push edx
:00440007 E8062C0000              call 00442C12
:0044000C 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FF5B(U), :0043FF99(U), :0043FFD4(U), :0043FFDA(C)
|
:0044000F 8D45E4                  lea eax, dword ptr [ebp-1C]
:00440012 50                      push eax
:00440013 E867790000              call 0044797F
:00440018 83C404                  add esp, 00000004
:0044001B 25FF000000              and eax, 000000FF
:00440020 83F80D                  cmp eax, 0000000D
:00440023 7534                    jne 00440059

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440025 6A04                    push 00000004
:00440027 6800120100              push 00011200
:0044002C B940DF4A00              mov ecx, 004ADF40
:00440031 E86835FDFF              call 0041359E
:00440036 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0044003C 69C900090000            imul ecx, 00000900
:00440042 03C1                    add eax, ecx
:00440044 50                      push eax
:00440045 6A30                    push 00000030
:00440047 6A30                    push 00000030
:00440049 8B55F8                  mov edx, dword ptr [ebp-08]
:0044004C 52                      push edx
:0044004D 8B45EC                  mov eax, dword ptr [ebp-14]
:00440050 50                      push eax
:00440051 E8BC2B0000              call 00442C12
:00440056 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440023(C)
|
:00440059 B9180A4B00              mov ecx, 004B0A18
:0044005E E88B830100              call 004583EE
:00440063 25FF000000              and eax, 000000FF
:00440068 83F802                  cmp eax, 00000002
:0044006B 7414                    je 00440081
:0044006D B9180A4B00              mov ecx, 004B0A18
:00440072 E877830100              call 004583EE
:00440077 25FF000000              and eax, 000000FF
:0044007C 83F803                  cmp eax, 00000003
:0044007F 7548                    jne 004400C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044006B(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440081 6A04                    push 00000004
:00440083 B9180A4B00              mov ecx, 004B0A18
:00440088 E8A3FCFEFF              call 0042FD30
:0044008D F7D8                    neg eax
:0044008F 1BC0                    sbb eax, eax
:00440091 2500120000              and eax, 00001200
:00440096 0500EE0000              add eax, 0000EE00
:0044009B 50                      push eax
:0044009C B940DF4A00              mov ecx, 004ADF40
:004400A1 E8F834FDFF              call 0041359E
:004400A6 8B0D78044B00            mov ecx, dword ptr [004B0478]
:004400AC 69C900090000            imul ecx, 00000900
:004400B2 03C1                    add eax, ecx
:004400B4 50                      push eax
:004400B5 6A30                    push 00000030
:004400B7 6A30                    push 00000030
:004400B9 8B55F8                  mov edx, dword ptr [ebp-08]
:004400BC 52                      push edx
:004400BD 8B45EC                  mov eax, dword ptr [ebp-14]
:004400C0 50                      push eax
:004400C1 E84C2B0000              call 00442C12
:004400C6 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044007F(C)
|
:004400C9 E87F2DFDFF              call 00412E4D
:004400CE E8BD6AFEFF              call 00426B90

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004400D3 6A02                    push 00000002
:004400D5 E86A6CFEFF              call 00426D44
:004400DA 83C404                  add esp, 00000004
:004400DD E9F6FDFFFF              jmp 0043FED8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FEE5(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004400E2 6A04                    push 00000004
:004400E4 E85B6CFEFF              call 00426D44
:004400E9 83C404                  add esp, 00000004
:004400EC 6A00                    push 00000000
:004400EE 6A00                    push 00000000
:004400F0 B930DA4A00              mov ecx, 004ADA30
:004400F5 E8A434FDFF              call 0041359E
:004400FA 0345F0                  add eax, dword ptr [ebp-10]
:004400FD 50                      push eax
:004400FE 6A30                    push 00000030
:00440100 6A30                    push 00000030
:00440102 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440105 51                      push ecx
:00440106 8B55EC                  mov edx, dword ptr [ebp-14]
:00440109 52                      push edx
:0044010A E8032B0000              call 00442C12
:0044010F 83C418                  add esp, 00000018
:00440112 8BE5                    mov esp, ebp
:00440114 5D                      pop ebp
:00440115 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0043D7CE   , :0043D8AA   , :0043D917   
|
:00440118 55                      push ebp
:00440119 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044011B 6AFF                    push FFFFFFFF
:0044011D 68F63A4700              push 00473AF6
:00440122 64A100000000            mov eax, dword ptr fs:[00000000]
:00440128 50                      push eax
:00440129 64892500000000          mov dword ptr fs:[00000000], esp
:00440130 81EC0C010000            sub esp, 0000010C
:00440136 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:0044013C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00440142 E8B975FCFF              call 00407700
:00440147 C745FC00000000          mov [ebp-04], 00000000
:0044014E 8B4510                  mov eax, dword ptr [ebp+10]
:00440151 25FF000000              and eax, 000000FF
:00440156 83F81A                  cmp eax, 0000001A
:00440159 750C                    jne 00440167

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044015B C785ECFEFFFF0A000000    mov dword ptr [ebp+FFFFFEEC], 0000000A
:00440165 EB5A                    jmp 004401C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440159(C)
|
:00440167 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044016A 81E1FF000000            and ecx, 000000FF
:00440170 83F91B                  cmp ecx, 0000001B
:00440173 750C                    jne 00440181

* Possible Reference to String Resource ID=00014: ""
                                  |
:00440175 C785ECFEFFFF0E000000    mov dword ptr [ebp+FFFFFEEC], 0000000E
:0044017F EB40                    jmp 004401C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440173(C)
|
:00440181 8B5510                  mov edx, dword ptr [ebp+10]
:00440184 81E2FF000000            and edx, 000000FF
:0044018A 83FA0D                  cmp edx, 0000000D
:0044018D 751E                    jne 004401AD
:0044018F 837D1800                cmp dword ptr [ebp+18], 00000000
:00440193 750C                    jne 004401A1

* Possible Reference to String Resource ID=00011: "
"
                                  |
:00440195 C785ECFEFFFF0B000000    mov dword ptr [ebp+FFFFFEEC], 0000000B
:0044019F EB0A                    jmp 004401AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440193(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:004401A1 C785ECFEFFFF08000000    mov dword ptr [ebp+FFFFFEEC], 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044019F(U)
|
:004401AB EB14                    jmp 004401C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044018D(C)
|
:004401AD C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004401B4 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004401BA E86175FCFF              call 00407720
:004401BF EB5B                    jmp 0044021C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440165(U), :0044017F(U), :004401AB(U)
|
:004401C1 8A4514                  mov al, byte ptr [ebp+14]
:004401C4 50                      push eax
:004401C5 8A8DECFEFFFF            mov cl, byte ptr [ebp+FFFFFEEC]
:004401CB 51                      push ecx
:004401CC 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:004401D2 E80FD9FFFF              call 0043DAE6
:004401D7 85C0                    test eax, eax
:004401D9 7514                    jne 004401EF
:004401DB C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004401E2 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004401E8 E83375FCFF              call 00407720
:004401ED EB2D                    jmp 0044021C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004401D9(C)
|
:004401EF 8B5514                  mov edx, dword ptr [ebp+14]
:004401F2 52                      push edx
:004401F3 8A4510                  mov al, byte ptr [ebp+10]
:004401F6 50                      push eax
:004401F7 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004401FA 51                      push ecx
:004401FB 8A5508                  mov dl, byte ptr [ebp+08]
:004401FE 52                      push edx
:004401FF 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00440205 E8EDFBFFFF              call 0043FDF7
:0044020A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00440211 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00440217 E80475FCFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004401BF(U), :004401ED(U)
|
:0044021C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044021F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00440226 8BE5                    mov esp, ebp
:00440228 5D                      pop ebp
:00440229 C21400                  ret 0014



* Referenced by a CALL at Address:
|:0043D689   
|
:0044022C 55                      push ebp
:0044022D 8BEC                    mov ebp, esp
:0044022F 83EC2C                  sub esp, 0000002C
:00440232 894DD4                  mov dword ptr [ebp-2C], ecx
:00440235 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00440238 E87375FCFF              call 004077B0
:0044023D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440240 81E1FF000000            and ecx, 000000FF
:00440246 6BC924                  imul ecx, 00000024
:00440249 81C108F54A00            add ecx, 004AF508
:0044024F E84C91FEFF              call 004293A0
:00440254 50                      push eax
:00440255 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00440258 E833F5FEFF              call 0042F790
:0044025D 8B45E0                  mov eax, dword ptr [ebp-20]
:00440260 25FF000000              and eax, 000000FF
:00440265 6BC003                  imul eax, 00000003
:00440268 8945F0                  mov dword ptr [ebp-10], eax
:0044026B 8B4DE1                  mov ecx, dword ptr [ebp-1F]
:0044026E 81E1FF000000            and ecx, 000000FF
:00440274 6BC903                  imul ecx, 00000003
:00440277 894DDC                  mov dword ptr [ebp-24], ecx
:0044027A B9A8034B00              mov ecx, 004B03A8
:0044027F E8FC2A0000              call 00442D80
:00440284 8B55F0                  mov edx, dword ptr [ebp-10]
:00440287 2BD0                    sub edx, eax
:00440289 C1E204                  shl edx, 04
:0044028C 83EA08                  sub edx, 00000008
:0044028F 8955E8                  mov dword ptr [ebp-18], edx
:00440292 B9A8034B00              mov ecx, 004B03A8
:00440297 E8F52A0000              call 00442D91
:0044029C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044029F 2BC8                    sub ecx, eax
:004402A1 83C102                  add ecx, 00000002
:004402A4 C1E104                  shl ecx, 04
:004402A7 894DF4                  mov dword ptr [ebp-0C], ecx
:004402AA B9A8034B00              mov ecx, 004B03A8
:004402AF E8CC2A0000              call 00442D80
:004402B4 8B55F0                  mov edx, dword ptr [ebp-10]
:004402B7 2BD0                    sub edx, eax
:004402B9 8955F8                  mov dword ptr [ebp-08], edx
:004402BC B9A8034B00              mov ecx, 004B03A8
:004402C1 E8CB2A0000              call 00442D91
:004402C6 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004402C9 2BC8                    sub ecx, eax
:004402CB 894DFC                  mov dword ptr [ebp-04], ecx
:004402CE 6A00                    push 00000000
:004402D0 B930DA4A00              mov ecx, 004ADA30
:004402D5 E8C432FDFF              call 0041359E
:004402DA 05001D0100              add eax, 00011D00
:004402DF 50                      push eax
:004402E0 6A40                    push 00000040
:004402E2 6A40                    push 00000040
:004402E4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004402E7 52                      push edx
:004402E8 8B45E8                  mov eax, dword ptr [ebp-18]
:004402EB 50                      push eax
:004402EC E8E2290000              call 00442CD3
:004402F1 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004402F4 C745D803000000          mov [ebp-28], 00000003
:004402FB 6A00                    push 00000000
:004402FD 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00440300 51                      push ecx
:00440301 8A5508                  mov dl, byte ptr [ebp+08]
:00440304 52                      push edx
:00440305 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00440308 E83EDDFFFF              call 0043E04B
:0044030D 8945E4                  mov dword ptr [ebp-1C], eax
:00440310 C745EC00000000          mov [ebp-14], 00000000
:00440317 EB09                    jmp 00440322

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044067D(U)
|
:00440319 8B45EC                  mov eax, dword ptr [ebp-14]
:0044031C 83C001                  add eax, 00000001
:0044031F 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440317(U)
|
:00440322 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00440325 3B4DD8                  cmp ecx, dword ptr [ebp-28]
:00440328 0F8354030000            jnb 00440682

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044032E 6A02                    push 00000002
:00440330 B9F8F44A00              mov ecx, 004AF4F8
:00440335 E85651FEFF              call 00425490
:0044033A 6A00                    push 00000000
:0044033C 6A00                    push 00000000
:0044033E B930DA4A00              mov ecx, 004ADA30
:00440343 E85632FDFF              call 0041359E
:00440348 05001D0100              add eax, 00011D00
:0044034D 50                      push eax
:0044034E 6A40                    push 00000040
:00440350 6A40                    push 00000040
:00440352 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440355 52                      push edx
:00440356 8B45E8                  mov eax, dword ptr [ebp-18]
:00440359 50                      push eax
:0044035A E8B3280000              call 00442C12
:0044035F 83C418                  add esp, 00000018
:00440362 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440365 51                      push ecx
:00440366 8B55F8                  mov edx, dword ptr [ebp-08]
:00440369 52                      push edx
:0044036A E8F398FFFF              call 00439C62
:0044036F 83C408                  add esp, 00000008
:00440372 8A4510                  mov al, byte ptr [ebp+10]
:00440375 50                      push eax
:00440376 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00440379 E849040000              call 004407C7
:0044037E 85C0                    test eax, eax
:00440380 0F8408010000            je 0044048E
:00440386 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00440389 8B11                    mov edx, dword ptr [ecx]
:0044038B 83E208                  and edx, 00000008
:0044038E 85D2                    test edx, edx
:00440390 7436                    je 004403C8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440392 6A04                    push 00000004
:00440394 6A00                    push 00000000
:00440396 B930DA4A00              mov ecx, 004ADA30
:0044039B E8FE31FDFF              call 0041359E
:004403A0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004403A3 69C900090000            imul ecx, 00000900
:004403A9 8D940800CC0000          lea edx, dword ptr [eax+ecx+0000CC00]
:004403B0 52                      push edx
:004403B1 6A30                    push 00000030
:004403B3 6A30                    push 00000030
:004403B5 8B45F4                  mov eax, dword ptr [ebp-0C]
:004403B8 50                      push eax
:004403B9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004403BC 83C108                  add ecx, 00000008
:004403BF 51                      push ecx
:004403C0 E84D280000              call 00442C12
:004403C5 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440390(C)
|
:004403C8 8A5510                  mov dl, byte ptr [ebp+10]
:004403CB 52                      push edx
:004403CC 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004403CF E888040000              call 0044085C
:004403D4 85C0                    test eax, eax
:004403D6 754B                    jne 00440423
:004403D8 837DEC01                cmp dword ptr [ebp-14], 00000001
:004403DC 7545                    jne 00440423
:004403DE 8A450C                  mov al, byte ptr [ebp+0C]
:004403E1 50                      push eax
:004403E2 8A4D08                  mov cl, byte ptr [ebp+08]
:004403E5 51                      push ecx
:004403E6 E858740000              call 00447843
:004403EB 83C408                  add esp, 00000008
:004403EE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004403F1 81E1FF000000            and ecx, 000000FF
:004403F7 6BC924                  imul ecx, 00000024
:004403FA 81C108F54A00            add ecx, 004AF508
:00440400 E81BF4FEFF              call 0042F820
:00440405 25FF000000              and eax, 000000FF
:0044040A 50                      push eax
:0044040B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044040E 83C208                  add edx, 00000008
:00440411 52                      push edx
:00440412 8B45E8                  mov eax, dword ptr [ebp-18]
:00440415 83C008                  add eax, 00000008
:00440418 50                      push eax
:00440419 E85DD4FEFF              call 0042D87B
:0044041E 83C40C                  add esp, 0000000C
:00440421 EB66                    jmp 00440489

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004403D6(C), :004403DC(C)
|
:00440423 8A4D10                  mov cl, byte ptr [ebp+10]
:00440426 51                      push ecx
:00440427 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044042A E82D040000              call 0044085C
:0044042F 85C0                    test eax, eax
:00440431 752B                    jne 0044045E
:00440433 837DEC02                cmp dword ptr [ebp-14], 00000002
:00440437 7525                    jne 0044045E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440439 6A04                    push 00000004
:0044043B 6A00                    push 00000000
:0044043D B930DA4A00              mov ecx, 004ADA30
:00440442 E85731FDFF              call 0041359E
:00440447 50                      push eax
:00440448 6A40                    push 00000040
:0044044A 6A40                    push 00000040
:0044044C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044044F 52                      push edx
:00440450 8B45E8                  mov eax, dword ptr [ebp-18]
:00440453 50                      push eax
:00440454 E8B9270000              call 00442C12
:00440459 83C418                  add esp, 00000018
:0044045C EB2B                    jmp 00440489

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440431(C), :00440437(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044045E 6A04                    push 00000004
:00440460 6A00                    push 00000000
:00440462 B930DA4A00              mov ecx, 004ADA30
:00440467 E83231FDFF              call 0041359E
:0044046C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044046F C1E10C                  shl ecx, 0C
:00440472 03C1                    add eax, ecx
:00440474 50                      push eax
:00440475 6A40                    push 00000040
:00440477 6A40                    push 00000040
:00440479 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044047C 52                      push edx
:0044047D 8B45E8                  mov eax, dword ptr [ebp-18]
:00440480 50                      push eax
:00440481 E88C270000              call 00442C12
:00440486 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440421(U), :0044045C(U)
|
:00440489 E923010000              jmp 004405B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440380(C)
|
:0044048E 8A4D10                  mov cl, byte ptr [ebp+10]
:00440491 51                      push ecx
:00440492 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00440495 E8C2030000              call 0044085C
:0044049A 85C0                    test eax, eax
:0044049C 754E                    jne 004404EC
:0044049E 837DEC01                cmp dword ptr [ebp-14], 00000001
:004404A2 7548                    jne 004404EC
:004404A4 8A550C                  mov dl, byte ptr [ebp+0C]
:004404A7 52                      push edx
:004404A8 8A4508                  mov al, byte ptr [ebp+08]
:004404AB 50                      push eax
:004404AC E892730000              call 00447843
:004404B1 83C408                  add esp, 00000008
:004404B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004404B7 81E1FF000000            and ecx, 000000FF
:004404BD 6BC924                  imul ecx, 00000024
:004404C0 81C108F54A00            add ecx, 004AF508
:004404C6 E855F3FEFF              call 0042F820
:004404CB 25FF000000              and eax, 000000FF
:004404D0 50                      push eax
:004404D1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004404D4 83C108                  add ecx, 00000008
:004404D7 51                      push ecx
:004404D8 8B55E8                  mov edx, dword ptr [ebp-18]
:004404DB 83C208                  add edx, 00000008
:004404DE 52                      push edx
:004404DF E897D3FEFF              call 0042D87B
:004404E4 83C40C                  add esp, 0000000C
:004404E7 E983000000              jmp 0044056F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044049C(C), :004404A2(C)
|
:004404EC 8A4510                  mov al, byte ptr [ebp+10]
:004404EF 50                      push eax
:004404F0 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004404F3 E864030000              call 0044085C
:004404F8 85C0                    test eax, eax
:004404FA 7548                    jne 00440544
:004404FC 837DEC02                cmp dword ptr [ebp-14], 00000002
:00440500 7542                    jne 00440544
:00440502 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440505 81E1FF000000            and ecx, 000000FF
:0044050B 6BC924                  imul ecx, 00000024
:0044050E 81C108F54A00            add ecx, 004AF508
:00440514 51                      push ecx
:00440515 B930024B00              mov ecx, 004B0230
:0044051A E83E99FFFF              call 00439E5D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044051F 6A04                    push 00000004
:00440521 6A00                    push 00000000
:00440523 B930DA4A00              mov ecx, 004ADA30
:00440528 E87130FDFF              call 0041359E
:0044052D 50                      push eax
:0044052E 6A40                    push 00000040
:00440530 6A40                    push 00000040
:00440532 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440535 52                      push edx
:00440536 8B45E8                  mov eax, dword ptr [ebp-18]
:00440539 50                      push eax
:0044053A E8D3260000              call 00442C12
:0044053F 83C418                  add esp, 00000018
:00440542 EB2B                    jmp 0044056F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004404FA(C), :00440500(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440544 6A04                    push 00000004
:00440546 6A00                    push 00000000
:00440548 B930DA4A00              mov ecx, 004ADA30
:0044054D E84C30FDFF              call 0041359E
:00440552 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00440555 C1E10C                  shl ecx, 0C
:00440558 03C1                    add eax, ecx
:0044055A 50                      push eax
:0044055B 6A40                    push 00000040
:0044055D 6A40                    push 00000040
:0044055F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440562 52                      push edx
:00440563 8B45E8                  mov eax, dword ptr [ebp-18]
:00440566 50                      push eax
:00440567 E8A6260000              call 00442C12
:0044056C 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004404E7(U), :00440542(U)
|
:0044056F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00440572 8B11                    mov edx, dword ptr [ecx]
:00440574 83E208                  and edx, 00000008
:00440577 85D2                    test edx, edx
:00440579 7436                    je 004405B1

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044057B 6A04                    push 00000004
:0044057D 6A00                    push 00000000
:0044057F B930DA4A00              mov ecx, 004ADA30
:00440584 E81530FDFF              call 0041359E
:00440589 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044058C 69C900090000            imul ecx, 00000900
:00440592 8D940800CC0000          lea edx, dword ptr [eax+ecx+0000CC00]
:00440599 52                      push edx
:0044059A 6A30                    push 00000030
:0044059C 6A30                    push 00000030
:0044059E 8B45F4                  mov eax, dword ptr [ebp-0C]
:004405A1 50                      push eax
:004405A2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004405A5 83C108                  add ecx, 00000008
:004405A8 51                      push ecx
:004405A9 E864260000              call 00442C12
:004405AE 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440489(U), :00440579(C)
|
:004405B1 8D55E0                  lea edx, dword ptr [ebp-20]
:004405B4 52                      push edx
:004405B5 E8C5730000              call 0044797F
:004405BA 83C404                  add esp, 00000004
:004405BD 25FF000000              and eax, 000000FF
:004405C2 83F80D                  cmp eax, 0000000D
:004405C5 7531                    jne 004405F8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004405C7 6A04                    push 00000004
:004405C9 6800240100              push 00012400
:004405CE B940DF4A00              mov ecx, 004ADF40
:004405D3 E8C62FFDFF              call 0041359E
:004405D8 8B0D78044B00            mov ecx, dword ptr [004B0478]
:004405DE C1E10C                  shl ecx, 0C
:004405E1 03C1                    add eax, ecx
:004405E3 50                      push eax
:004405E4 6A40                    push 00000040
:004405E6 6A40                    push 00000040
:004405E8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004405EB 52                      push edx
:004405EC 8B45E8                  mov eax, dword ptr [ebp-18]
:004405EF 50                      push eax
:004405F0 E81D260000              call 00442C12
:004405F5 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004405C5(C)
|
:004405F8 B9180A4B00              mov ecx, 004B0A18
:004405FD E8EC7D0100              call 004583EE
:00440602 25FF000000              and eax, 000000FF
:00440607 83F802                  cmp eax, 00000002
:0044060A 7414                    je 00440620
:0044060C B9180A4B00              mov ecx, 004B0A18
:00440611 E8D87D0100              call 004583EE
:00440616 25FF000000              and eax, 000000FF
:0044061B 83F803                  cmp eax, 00000003
:0044061E 754E                    jne 0044066E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044060A(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440620 6A04                    push 00000004
:00440622 B9180A4B00              mov ecx, 004B0A18
:00440627 E804F7FEFF              call 0042FD30
:0044062C F7D8                    neg eax
:0044062E 1BC0                    sbb eax, eax
:00440630 2500120000              and eax, 00001200
:00440635 0500EE0000              add eax, 0000EE00
:0044063A 50                      push eax
:0044063B B940DF4A00              mov ecx, 004ADF40
:00440640 E8592FFDFF              call 0041359E
:00440645 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0044064B 69C900090000            imul ecx, 00000900
:00440651 03C1                    add eax, ecx
:00440653 50                      push eax
:00440654 6A30                    push 00000030
:00440656 6A30                    push 00000030
:00440658 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044065B 83C208                  add edx, 00000008
:0044065E 52                      push edx
:0044065F 8B45E8                  mov eax, dword ptr [ebp-18]
:00440662 83C008                  add eax, 00000008
:00440665 50                      push eax
:00440666 E8A7250000              call 00442C12
:0044066B 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044061E(C)
|
:0044066E E81D65FEFF              call 00426B90

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00440673 6A02                    push 00000002
:00440675 E8CA66FEFF              call 00426D44
:0044067A 83C404                  add esp, 00000004
:0044067D E997FCFFFF              jmp 00440319

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440328(C)
|
:00440682 E8AB27FDFF              call 00412E32
:00440687 6A00                    push 00000000
:00440689 6A00                    push 00000000
:0044068B B930DA4A00              mov ecx, 004ADA30
:00440690 E8092FFDFF              call 0041359E
:00440695 05001D0100              add eax, 00011D00
:0044069A 50                      push eax
:0044069B 6A40                    push 00000040
:0044069D 6A40                    push 00000040
:0044069F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004406A2 51                      push ecx
:004406A3 8B55E8                  mov edx, dword ptr [ebp-18]
:004406A6 52                      push edx
:004406A7 E866250000              call 00442C12
:004406AC 83C418                  add esp, 00000018
:004406AF 8B45FC                  mov eax, dword ptr [ebp-04]
:004406B2 50                      push eax
:004406B3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004406B6 51                      push ecx
:004406B7 E8A695FFFF              call 00439C62
:004406BC 83C408                  add esp, 00000008
:004406BF 8A550C                  mov dl, byte ptr [ebp+0C]
:004406C2 52                      push edx
:004406C3 8A4508                  mov al, byte ptr [ebp+08]
:004406C6 50                      push eax
:004406C7 E877710000              call 00447843
:004406CC 83C408                  add esp, 00000008
:004406CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004406D2 81E1FF000000            and ecx, 000000FF
:004406D8 6BC924                  imul ecx, 00000024
:004406DB 81C108F54A00            add ecx, 004AF508
:004406E1 51                      push ecx
:004406E2 B930024B00              mov ecx, 004B0230
:004406E7 E87197FFFF              call 00439E5D
:004406EC 8D55E0                  lea edx, dword ptr [ebp-20]
:004406EF 52                      push edx
:004406F0 E88A720000              call 0044797F
:004406F5 83C404                  add esp, 00000004
:004406F8 25FF000000              and eax, 000000FF
:004406FD 83F80D                  cmp eax, 0000000D
:00440700 753A                    jne 0044073C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440702 6A04                    push 00000004
:00440704 6800120100              push 00011200
:00440709 B940DF4A00              mov ecx, 004ADF40
:0044070E E88B2EFDFF              call 0041359E
:00440713 8B0D78044B00            mov ecx, dword ptr [004B0478]
:00440719 69C900090000            imul ecx, 00000900
:0044071F 03C1                    add eax, ecx
:00440721 50                      push eax
:00440722 6A30                    push 00000030
:00440724 6A30                    push 00000030
:00440726 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440729 83C208                  add edx, 00000008
:0044072C 52                      push edx
:0044072D 8B45E8                  mov eax, dword ptr [ebp-18]
:00440730 83C008                  add eax, 00000008
:00440733 50                      push eax
:00440734 E8D9240000              call 00442C12
:00440739 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440700(C)
|
:0044073C B9180A4B00              mov ecx, 004B0A18
:00440741 E8A87C0100              call 004583EE
:00440746 25FF000000              and eax, 000000FF
:0044074B 83F802                  cmp eax, 00000002
:0044074E 7414                    je 00440764
:00440750 B9180A4B00              mov ecx, 004B0A18
:00440755 E8947C0100              call 004583EE
:0044075A 25FF000000              and eax, 000000FF
:0044075F 83F803                  cmp eax, 00000003
:00440762 754E                    jne 004407B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044074E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440764 6A04                    push 00000004
:00440766 B9180A4B00              mov ecx, 004B0A18
:0044076B E8C0F5FEFF              call 0042FD30
:00440770 F7D8                    neg eax
:00440772 1BC0                    sbb eax, eax
:00440774 2500120000              and eax, 00001200
:00440779 0500EE0000              add eax, 0000EE00
:0044077E 50                      push eax
:0044077F B940DF4A00              mov ecx, 004ADF40
:00440784 E8152EFDFF              call 0041359E
:00440789 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0044078F 69C900090000            imul ecx, 00000900
:00440795 03C1                    add eax, ecx
:00440797 50                      push eax
:00440798 6A30                    push 00000030
:0044079A 6A30                    push 00000030
:0044079C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044079F 83C208                  add edx, 00000008
:004407A2 52                      push edx
:004407A3 8B45E8                  mov eax, dword ptr [ebp-18]
:004407A6 83C008                  add eax, 00000008
:004407A9 50                      push eax
:004407AA E863240000              call 00442C12
:004407AF 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440762(C)
|
:004407B2 E89626FDFF              call 00412E4D

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004407B7 6A02                    push 00000002
:004407B9 E88665FEFF              call 00426D44
:004407BE 83C404                  add esp, 00000004
:004407C1 8BE5                    mov esp, ebp
:004407C3 5D                      pop ebp
:004407C4 C21000                  ret 0010



* Referenced by a CALL at Address:
|:00440379   
|
:004407C7 55                      push ebp
:004407C8 8BEC                    mov ebp, esp
:004407CA 83EC08                  sub esp, 00000008
:004407CD 894DFC                  mov dword ptr [ebp-04], ecx
:004407D0 8B4508                  mov eax, dword ptr [ebp+08]
:004407D3 25FF000000              and eax, 000000FF
:004407D8 8945F8                  mov dword ptr [ebp-08], eax
:004407DB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004407DE 83E901                  sub ecx, 00000001
:004407E1 894DF8                  mov dword ptr [ebp-08], ecx
:004407E4 837DF82C                cmp dword ptr [ebp-08], 0000002C
:004407E8 7716                    ja 00440800
:004407EA 8B45F8                  mov eax, dword ptr [ebp-08]
:004407ED 33D2                    xor edx, edx
:004407EF 8A902F084400            mov dl, byte ptr [eax+0044082F]
:004407F5 FF24950B084400          jmp dword ptr [4*edx+0044080B]
:004407FC 33C0                    xor eax, eax
:004407FE EB05                    jmp 00440805

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004407E8(C)
|
:00440800 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004407FE(U)
|
:00440805 8BE5                    mov esp, ebp
:00440807 5D                      pop ebp
:00440808 C20400                  ret 0004



:0044080B FC074400                DWORD 004407FC
:0044080F FC074400                DWORD 004407FC
:00440813 FC074400                DWORD 004407FC
:00440817 FC074400                DWORD 004407FC
:0044081B FC074400                DWORD 004407FC
:0044081F FC074400                DWORD 004407FC
:00440823 FC074400                DWORD 004407FC
:00440827 FC074400                DWORD 004407FC
:0044082B 00084400                DWORD 00440800


:0044082F 0008                    add byte ptr [eax], cl
:00440831 0808                    or byte ptr [eax], cl
:00440833 0101                    add dword ptr [ecx], eax
:00440835 0808                    or byte ptr [eax], cl
:00440837 0808                    or byte ptr [eax], cl
:00440839 0802                    or byte ptr [edx], al
:0044083B 0803                    or byte ptr [ebx], al
:0044083D 080404                  or byte ptr [esp+eax], al
:00440840 0808                    or byte ptr [eax], cl
:00440842 0808                    or byte ptr [eax], cl
:00440844 0808                    or byte ptr [eax], cl
:00440846 0808                    or byte ptr [eax], cl
:00440848 080508080808            or byte ptr [08080808], al
:0044084E 0808                    or byte ptr [eax], cl
:00440850 0808                    or byte ptr [eax], cl
:00440852 0806                    or byte ptr [esi], al
:00440854 06                      push es
:00440855 06                      push es
:00440856 06                      push es
:00440857 0808                    or byte ptr [eax], cl
:00440859 0807                    or byte ptr [edi], al
:0044085B 07                      pop es

* Referenced by a CALL at Addresses:
|:004403CF   , :0044042A   , :00440495   , :004404F3   
|
:0044085C 55                      push ebp
:0044085D 8BEC                    mov ebp, esp
:0044085F 83EC08                  sub esp, 00000008
:00440862 894DFC                  mov dword ptr [ebp-04], ecx
:00440865 8B4508                  mov eax, dword ptr [ebp+08]
:00440868 25FF000000              and eax, 000000FF
:0044086D 8945F8                  mov dword ptr [ebp-08], eax
:00440870 837DF830                cmp dword ptr [ebp-08], 00000030
:00440874 771D                    ja 00440893
:00440876 8B55F8                  mov edx, dword ptr [ebp-08]
:00440879 33C9                    xor ecx, ecx
:0044087B 8A8ACA084400            mov cl, byte ptr [edx+004408CA]
:00440881 FF248D9E084400          jmp dword ptr [4*ecx+0044089E]
:00440888 B801000000              mov eax, 00000001
:0044088D EB09                    jmp 00440898
:0044088F 33C0                    xor eax, eax
:00440891 EB05                    jmp 00440898

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440874(C)
|
:00440893 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044088D(U), :00440891(U)
|
:00440898 8BE5                    mov esp, ebp
:0044089A 5D                      pop ebp
:0044089B C20400                  ret 0004



:0044089E 88084400                DWORD 00440888
:004408A2 88084400                DWORD 00440888
:004408A6 8F084400                DWORD 0044088F
:004408AA 88084400                DWORD 00440888
:004408AE 8F084400                DWORD 0044088F
:004408B2 88084400                DWORD 00440888
:004408B6 8F084400                DWORD 0044088F
:004408BA 88084400                DWORD 00440888
:004408BE 8F084400                DWORD 0044088F
:004408C2 8F084400                DWORD 0044088F
:004408C6 93084400                DWORD 00440893


:004408CA 000000                  BYTE  3 DUP(0)


:004408CD 0A01                    or al, byte ptr [ecx]
:004408CF 0101                    add dword ptr [ecx], eax
:004408D1 0101                    add dword ptr [ecx], eax
:004408D3 0101                    add dword ptr [ecx], eax
:004408D5 0102                    add dword ptr [edx], eax
:004408D7 030404                  add eax, dword ptr [esp+eax]
:004408DA 0404                    add al, 04
:004408DC 0404                    add al, 04
:004408DE 0405                    add al, 05
:004408E0 0505060607              add eax, 07060605
:004408E5 0808                    or byte ptr [eax], cl
:004408E7 0808                    or byte ptr [eax], cl
:004408E9 0808                    or byte ptr [eax], cl
:004408EB 0808                    or byte ptr [eax], cl
:004408ED 0808                    or byte ptr [eax], cl
:004408EF 0A09                    or cl, byte ptr [ecx]
:004408F1 0909                    or dword ptr [ecx], ecx
:004408F3 0909                    or dword ptr [ecx], ecx
:004408F5 0909                    or dword ptr [ecx], ecx
:004408F7 0909                    or dword ptr [ecx], ecx
:004408F9 0909                    or dword ptr [ecx], ecx

* Referenced by a CALL at Address:
|:0043D6C7   
|
:004408FB 55                      push ebp
:004408FC 8BEC                    mov ebp, esp
:004408FE 83EC64                  sub esp, 00000064
:00440901 894DA4                  mov dword ptr [ebp-5C], ecx
:00440904 8D4DBC                  lea ecx, dword ptr [ebp-44]
:00440907 E8A46EFCFF              call 004077B0
:0044090C 8D4DC8                  lea ecx, dword ptr [ebp-38]
:0044090F E89C6EFCFF              call 004077B0
:00440914 8B4510                  mov eax, dword ptr [ebp+10]
:00440917 25FF000000              and eax, 000000FF
:0044091C 83F813                  cmp eax, 00000013
:0044091F 7410                    je 00440931
:00440921 C745E001000000          mov [ebp-20], 00000001

* Possible Reference to String Resource ID=00008: ""
                                  |
:00440928 C745E408000000          mov [ebp-1C], 00000008
:0044092F EB0E                    jmp 0044093F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044091F(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00440931 C745E005000000          mov [ebp-20], 00000005

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440938 C745E404000000          mov [ebp-1C], 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044092F(U)
|
:0044093F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440942 81E1FF000000            and ecx, 000000FF
:00440948 6BC924                  imul ecx, 00000024
:0044094B 81C108F54A00            add ecx, 004AF508
:00440951 E84A8AFEFF              call 004293A0
:00440956 50                      push eax
:00440957 8D4DBC                  lea ecx, dword ptr [ebp-44]
:0044095A E831EEFEFF              call 0042F790
:0044095F 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00440962 81E1FF000000            and ecx, 000000FF
:00440968 6BC903                  imul ecx, 00000003
:0044096B 894DE8                  mov dword ptr [ebp-18], ecx
:0044096E 8B5510                  mov edx, dword ptr [ebp+10]
:00440971 81E2FF000000            and edx, 000000FF
:00440977 83FA2D                  cmp edx, 0000002D
:0044097A 7534                    jne 004409B0
:0044097C 8B45BD                  mov eax, dword ptr [ebp-43]
:0044097F 25FF000000              and eax, 000000FF
:00440984 85C0                    test eax, eax
:00440986 750E                    jne 00440996
:00440988 8B4DBD                  mov ecx, dword ptr [ebp-43]
:0044098B 81E1FF000000            and ecx, 000000FF
:00440991 894DA0                  mov dword ptr [ebp-60], ecx
:00440994 EB0F                    jmp 004409A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440986(C)
|
:00440996 8B55BD                  mov edx, dword ptr [ebp-43]
:00440999 81E2FF000000            and edx, 000000FF
:0044099F 83EA01                  sub edx, 00000001
:004409A2 8955A0                  mov dword ptr [ebp-60], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440994(U)
|
:004409A5 8B45A0                  mov eax, dword ptr [ebp-60]
:004409A8 6BC003                  imul eax, 00000003
:004409AB 8945DC                  mov dword ptr [ebp-24], eax
:004409AE EB0F                    jmp 004409BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044097A(C)
|
:004409B0 8B4DBD                  mov ecx, dword ptr [ebp-43]
:004409B3 81E1FF000000            and ecx, 000000FF
:004409B9 6BC903                  imul ecx, 00000003
:004409BC 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004409AE(U)
|
:004409BF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004409C2 81E1FF000000            and ecx, 000000FF
:004409C8 6BC924                  imul ecx, 00000024
:004409CB 81C108F54A00            add ecx, 004AF508
:004409D1 E8CA89FEFF              call 004293A0
:004409D6 50                      push eax
:004409D7 8D4DC8                  lea ecx, dword ptr [ebp-38]
:004409DA E8B1EDFEFF              call 0042F790
:004409DF 8B55C8                  mov edx, dword ptr [ebp-38]
:004409E2 81E2FF000000            and edx, 000000FF
:004409E8 6BD203                  imul edx, 00000003
:004409EB 8955B8                  mov dword ptr [ebp-48], edx
:004409EE 8B45C9                  mov eax, dword ptr [ebp-37]
:004409F1 25FF000000              and eax, 000000FF
:004409F6 6BC003                  imul eax, 00000003
:004409F9 8945C0                  mov dword ptr [ebp-40], eax
:004409FC B9A8034B00              mov ecx, 004B03A8
:00440A01 E87A230000              call 00442D80
:00440A06 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00440A09 2BC8                    sub ecx, eax
:00440A0B C1E104                  shl ecx, 04
:00440A0E 894DD8                  mov dword ptr [ebp-28], ecx
:00440A11 B9A8034B00              mov ecx, 004B03A8
:00440A16 E876230000              call 00442D91
:00440A1B 8B55DC                  mov edx, dword ptr [ebp-24]
:00440A1E 2BD0                    sub edx, eax
:00440A20 83C202                  add edx, 00000002
:00440A23 C1E204                  shl edx, 04
:00440A26 83C208                  add edx, 00000008
:00440A29 8955D0                  mov dword ptr [ebp-30], edx
:00440A2C B9A8034B00              mov ecx, 004B03A8
:00440A31 E84A230000              call 00442D80
:00440A36 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00440A39 2BC8                    sub ecx, eax
:00440A3B C1E104                  shl ecx, 04
:00440A3E 894DF0                  mov dword ptr [ebp-10], ecx
:00440A41 B9A8034B00              mov ecx, 004B03A8
:00440A46 E846230000              call 00442D91
:00440A4B 8B55C0                  mov edx, dword ptr [ebp-40]
:00440A4E 2BD0                    sub edx, eax
:00440A50 83C202                  add edx, 00000002
:00440A53 C1E204                  shl edx, 04
:00440A56 83C208                  add edx, 00000008
:00440A59 8955D4                  mov dword ptr [ebp-2C], edx
:00440A5C 8B4510                  mov eax, dword ptr [ebp+10]
:00440A5F 25FF000000              and eax, 000000FF
:00440A64 83F82D                  cmp eax, 0000002D
:00440A67 0F853D010000            jne 00440BAA
:00440A6D 6A00                    push 00000000
:00440A6F B930DA4A00              mov ecx, 004ADA30
:00440A74 E8252BFDFF              call 0041359E
:00440A79 05003D0100              add eax, 00013D00
:00440A7E 50                      push eax
:00440A7F 6A30                    push 00000030
:00440A81 6A30                    push 00000030
:00440A83 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440A86 51                      push ecx
:00440A87 8B55D8                  mov edx, dword ptr [ebp-28]
:00440A8A 52                      push edx
:00440A8B E843220000              call 00442CD3
:00440A90 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00440A93 C745CC03000000          mov [ebp-34], 00000003
:00440A9A 8B45A4                  mov eax, dword ptr [ebp-5C]
:00440A9D 8B08                    mov ecx, dword ptr [eax]
:00440A9F 83E120                  and ecx, 00000020
:00440AA2 85C9                    test ecx, ecx
:00440AA4 0F84C9000000            je 00440B73
:00440AAA 6A00                    push 00000000
:00440AAC B930DA4A00              mov ecx, 004ADA30
:00440AB1 E8E82AFDFF              call 0041359E
:00440AB6 0500B10000              add eax, 0000B100
:00440ABB 50                      push eax
:00440ABC 6A30                    push 00000030
:00440ABE 6A30                    push 00000030
:00440AC0 8B55D0                  mov edx, dword ptr [ebp-30]
:00440AC3 52                      push edx
:00440AC4 8B45D8                  mov eax, dword ptr [ebp-28]
:00440AC7 50                      push eax
:00440AC8 E806220000              call 00442CD3
:00440ACD 83C414                  add esp, 00000014
:00440AD0 C745EC00000000          mov [ebp-14], 00000000
:00440AD7 EB09                    jmp 00440AE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440B6E(U)
|
:00440AD9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00440ADC 83C101                  add ecx, 00000001
:00440ADF 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440AD7(U)
|
:00440AE2 8B55EC                  mov edx, dword ptr [ebp-14]
:00440AE5 3B55CC                  cmp edx, dword ptr [ebp-34]
:00440AE8 0F8385000000            jnb 00440B73

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00440AEE 6A02                    push 00000002
:00440AF0 B9F8F44A00              mov ecx, 004AF4F8
:00440AF5 E89649FEFF              call 00425490
:00440AFA E83323FDFF              call 00412E32
:00440AFF 6A00                    push 00000000
:00440B01 6A00                    push 00000000
:00440B03 B930DA4A00              mov ecx, 004ADA30
:00440B08 E8912AFDFF              call 0041359E
:00440B0D 05003D0100              add eax, 00013D00
:00440B12 50                      push eax
:00440B13 6A30                    push 00000030
:00440B15 6A30                    push 00000030
:00440B17 8B45D0                  mov eax, dword ptr [ebp-30]
:00440B1A 50                      push eax
:00440B1B 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00440B1E 51                      push ecx
:00440B1F E8EE200000              call 00442C12
:00440B24 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00440B27 6A04                    push 00000004
:00440B29 6A00                    push 00000000
:00440B2B B930DA4A00              mov ecx, 004ADA30
:00440B30 E8692AFDFF              call 0041359E
:00440B35 8B55EC                  mov edx, dword ptr [ebp-14]
:00440B38 69D200090000            imul edx, 00000900
:00440B3E 8D841000B10000          lea eax, dword ptr [eax+edx+0000B100]
:00440B45 50                      push eax
:00440B46 6A30                    push 00000030
:00440B48 6A30                    push 00000030
:00440B4A 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440B4D 51                      push ecx
:00440B4E 8B55D8                  mov edx, dword ptr [ebp-28]
:00440B51 52                      push edx
:00440B52 E8BB200000              call 00442C12
:00440B57 83C418                  add esp, 00000018
:00440B5A E8EE22FDFF              call 00412E4D
:00440B5F E82C60FEFF              call 00426B90

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00440B64 6A02                    push 00000002
:00440B66 E8D961FEFF              call 00426D44
:00440B6B 83C404                  add esp, 00000004
:00440B6E E966FFFFFF              jmp 00440AD9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440AA4(C), :00440AE8(C)
|
:00440B73 E8BA22FDFF              call 00412E32
:00440B78 6A00                    push 00000000
:00440B7A 6A00                    push 00000000
:00440B7C B930DA4A00              mov ecx, 004ADA30
:00440B81 E8182AFDFF              call 0041359E
:00440B86 05003D0100              add eax, 00013D00
:00440B8B 50                      push eax
:00440B8C 6A30                    push 00000030
:00440B8E 6A30                    push 00000030
:00440B90 8B45D0                  mov eax, dword ptr [ebp-30]
:00440B93 50                      push eax
:00440B94 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00440B97 51                      push ecx
:00440B98 E875200000              call 00442C12
:00440B9D 83C418                  add esp, 00000018
:00440BA0 E8A822FDFF              call 00412E4D
:00440BA5 E971050000              jmp 0044111B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440A67(C)
|
:00440BAA 6A00                    push 00000000
:00440BAC 8A550C                  mov dl, byte ptr [ebp+0C]
:00440BAF 52                      push edx
:00440BB0 8A4508                  mov al, byte ptr [ebp+08]
:00440BB3 50                      push eax
:00440BB4 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00440BB7 E88FD4FFFF              call 0043E04B
:00440BBC 8945FC                  mov dword ptr [ebp-04], eax
:00440BBF 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00440BC2 894DF4                  mov dword ptr [ebp-0C], ecx
:00440BC5 8B55D0                  mov edx, dword ptr [ebp-30]
:00440BC8 8955F8                  mov dword ptr [ebp-08], edx
:00440BCB 8B45FC                  mov eax, dword ptr [ebp-04]
:00440BCE 89459C                  mov dword ptr [ebp-64], eax
:00440BD1 837D9C03                cmp dword ptr [ebp-64], 00000003
:00440BD5 0F8718050000            ja 004410F3
:00440BDB 8B4D9C                  mov ecx, dword ptr [ebp-64]
:00440BDE FF248D21114400          jmp dword ptr [4*ecx+00441121]
:00440BE5 8B55D8                  mov edx, dword ptr [ebp-28]
:00440BE8 3B55F0                  cmp edx, dword ptr [ebp-10]
:00440BEB 720B                    jb 00440BF8
:00440BED 8B45D8                  mov eax, dword ptr [ebp-28]
:00440BF0 2B45F0                  sub eax, dword ptr [ebp-10]
:00440BF3 8945A8                  mov dword ptr [ebp-58], eax
:00440BF6 EB09                    jmp 00440C01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440BEB(C)
|
:00440BF8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00440BFB 2B4DD8                  sub ecx, dword ptr [ebp-28]
:00440BFE 894DA8                  mov dword ptr [ebp-58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440BF6(U)
|
:00440C01 8B55D0                  mov edx, dword ptr [ebp-30]
:00440C04 2B55D4                  sub edx, dword ptr [ebp-2C]
:00440C07 8955AC                  mov dword ptr [ebp-54], edx
:00440C0A 8B45D8                  mov eax, dword ptr [ebp-28]
:00440C0D 3B45F0                  cmp eax, dword ptr [ebp-10]
:00440C10 7214                    jb 00440C26
:00440C12 8B45A8                  mov eax, dword ptr [ebp-58]
:00440C15 C1E004                  shl eax, 04
:00440C18 99                      cdq
:00440C19 F77DAC                  idiv [ebp-54]
:00440C1C 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00440C1F 2BC8                    sub ecx, eax
:00440C21 894DF4                  mov dword ptr [ebp-0C], ecx
:00440C24 EB12                    jmp 00440C38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440C10(C)
|
:00440C26 8B45A8                  mov eax, dword ptr [ebp-58]
:00440C29 C1E004                  shl eax, 04
:00440C2C 99                      cdq
:00440C2D F77DAC                  idiv [ebp-54]
:00440C30 8B55D8                  mov edx, dword ptr [ebp-28]
:00440C33 03D0                    add edx, eax
:00440C35 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440C24(U)
|
:00440C38 8B45D0                  mov eax, dword ptr [ebp-30]
:00440C3B 83E810                  sub eax, 00000010
:00440C3E 8945F8                  mov dword ptr [ebp-08], eax
:00440C41 6A00                    push 00000000
:00440C43 B930DA4A00              mov ecx, 004ADA30
:00440C48 E85129FDFF              call 0041359E
:00440C4D 05003D0100              add eax, 00013D00
:00440C52 50                      push eax
:00440C53 6A30                    push 00000030
:00440C55 6A30                    push 00000030
:00440C57 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440C5A 51                      push ecx
:00440C5B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440C5E 52                      push edx
:00440C5F E86F200000              call 00442CD3
:00440C64 83C414                  add esp, 00000014
:00440C67 C745C400000000          mov [ebp-3C], 00000000
:00440C6E EB09                    jmp 00440C79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D20(U)
|
:00440C70 8B45C4                  mov eax, dword ptr [ebp-3C]
:00440C73 83C001                  add eax, 00000001
:00440C76 8945C4                  mov dword ptr [ebp-3C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440C6E(U)
|
:00440C79 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00440C7C 0FAF4DE4                imul ecx, dword ptr [ebp-1C]
:00440C80 8B55AC                  mov edx, dword ptr [ebp-54]
:00440C83 83EA20                  sub edx, 00000020
:00440C86 3BCA                    cmp ecx, edx
:00440C88 0F8397000000            jnb 00440D25
:00440C8E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00440C91 8945B0                  mov dword ptr [ebp-50], eax
:00440C94 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440C97 894DB4                  mov dword ptr [ebp-4C], ecx
:00440C9A 8B55D8                  mov edx, dword ptr [ebp-28]
:00440C9D 3B55F0                  cmp edx, dword ptr [ebp-10]
:00440CA0 7216                    jb 00440CB8
:00440CA2 8B45E4                  mov eax, dword ptr [ebp-1C]
:00440CA5 0FAF45A8                imul eax, dword ptr [ebp-58]
:00440CA9 33D2                    xor edx, edx
:00440CAB F775AC                  div [ebp-54]
:00440CAE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00440CB1 2BC8                    sub ecx, eax
:00440CB3 894DF4                  mov dword ptr [ebp-0C], ecx
:00440CB6 EB14                    jmp 00440CCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440CA0(C)
|
:00440CB8 8B45E4                  mov eax, dword ptr [ebp-1C]
:00440CBB 0FAF45A8                imul eax, dword ptr [ebp-58]
:00440CBF 33D2                    xor edx, edx
:00440CC1 F775AC                  div [ebp-54]
:00440CC4 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440CC7 03D0                    add edx, eax
:00440CC9 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440CB6(U)
|
:00440CCC 8B45F8                  mov eax, dword ptr [ebp-08]
:00440CCF 2B45E4                  sub eax, dword ptr [ebp-1C]
:00440CD2 8945F8                  mov dword ptr [ebp-08], eax
:00440CD5 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00440CD8 51                      push ecx
:00440CD9 B9F8F44A00              mov ecx, 004AF4F8
:00440CDE E8AD47FEFF              call 00425490
:00440CE3 8A5510                  mov dl, byte ptr [ebp+10]
:00440CE6 52                      push edx
:00440CE7 8B45C4                  mov eax, dword ptr [ebp-3C]
:00440CEA 50                      push eax
:00440CEB 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00440CEE 51                      push ecx
:00440CEF 8B55B0                  mov edx, dword ptr [ebp-50]
:00440CF2 52                      push edx
:00440CF3 8B45F8                  mov eax, dword ptr [ebp-08]
:00440CF6 50                      push eax
:00440CF7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00440CFA 51                      push ecx
:00440CFB 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00440CFE E82E040000              call 00441131
:00440D03 E8885EFEFF              call 00426B90
:00440D08 8B5510                  mov edx, dword ptr [ebp+10]
:00440D0B 81E2FF000000            and edx, 000000FF
:00440D11 83FA13                  cmp edx, 00000013
:00440D14 750A                    jne 00440D20

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00440D16 6A02                    push 00000002
:00440D18 E82760FEFF              call 00426D44
:00440D1D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D14(C)
|
:00440D20 E94BFFFFFF              jmp 00440C70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440C88(C)
|
:00440D25 E9C9030000              jmp 004410F3
:00440D2A 8B45D8                  mov eax, dword ptr [ebp-28]
:00440D2D 2B45F0                  sub eax, dword ptr [ebp-10]
:00440D30 8945A8                  mov dword ptr [ebp-58], eax
:00440D33 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440D36 3B4DD4                  cmp ecx, dword ptr [ebp-2C]
:00440D39 720B                    jb 00440D46
:00440D3B 8B55D0                  mov edx, dword ptr [ebp-30]
:00440D3E 2B55D4                  sub edx, dword ptr [ebp-2C]
:00440D41 8955AC                  mov dword ptr [ebp-54], edx
:00440D44 EB09                    jmp 00440D4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D39(C)
|
:00440D46 8B45D4                  mov eax, dword ptr [ebp-2C]
:00440D49 2B45D0                  sub eax, dword ptr [ebp-30]
:00440D4C 8945AC                  mov dword ptr [ebp-54], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D44(U)
|
:00440D4F 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00440D52 83E910                  sub ecx, 00000010
:00440D55 894DF4                  mov dword ptr [ebp-0C], ecx
:00440D58 8B55D0                  mov edx, dword ptr [ebp-30]
:00440D5B 3B55D4                  cmp edx, dword ptr [ebp-2C]
:00440D5E 7214                    jb 00440D74
:00440D60 8B45AC                  mov eax, dword ptr [ebp-54]
:00440D63 C1E004                  shl eax, 04
:00440D66 99                      cdq
:00440D67 F77DA8                  idiv [ebp-58]
:00440D6A 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440D6D 2BC8                    sub ecx, eax
:00440D6F 894DF8                  mov dword ptr [ebp-08], ecx
:00440D72 EB12                    jmp 00440D86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D5E(C)
|
:00440D74 8B45AC                  mov eax, dword ptr [ebp-54]
:00440D77 C1E004                  shl eax, 04
:00440D7A 99                      cdq
:00440D7B F77DA8                  idiv [ebp-58]
:00440D7E 8B55D0                  mov edx, dword ptr [ebp-30]
:00440D81 03D0                    add edx, eax
:00440D83 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D72(U)
|
:00440D86 6A00                    push 00000000
:00440D88 B930DA4A00              mov ecx, 004ADA30
:00440D8D E80C28FDFF              call 0041359E
:00440D92 05003D0100              add eax, 00013D00
:00440D97 50                      push eax
:00440D98 6A30                    push 00000030
:00440D9A 6A30                    push 00000030
:00440D9C 8B45F8                  mov eax, dword ptr [ebp-08]
:00440D9F 50                      push eax
:00440DA0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00440DA3 51                      push ecx
:00440DA4 E82A1F0000              call 00442CD3
:00440DA9 83C414                  add esp, 00000014
:00440DAC C745C400000000          mov [ebp-3C], 00000000
:00440DB3 EB09                    jmp 00440DBE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E65(U)
|
:00440DB5 8B55C4                  mov edx, dword ptr [ebp-3C]
:00440DB8 83C201                  add edx, 00000001
:00440DBB 8955C4                  mov dword ptr [ebp-3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440DB3(U)
|
:00440DBE 8B45C4                  mov eax, dword ptr [ebp-3C]
:00440DC1 0FAF45E4                imul eax, dword ptr [ebp-1C]
:00440DC5 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00440DC8 83E920                  sub ecx, 00000020
:00440DCB 3BC1                    cmp eax, ecx
:00440DCD 0F8397000000            jnb 00440E6A
:00440DD3 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440DD6 8955B0                  mov dword ptr [ebp-50], edx
:00440DD9 8B45F8                  mov eax, dword ptr [ebp-08]
:00440DDC 8945B4                  mov dword ptr [ebp-4C], eax
:00440DDF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00440DE2 2B4DE4                  sub ecx, dword ptr [ebp-1C]
:00440DE5 894DF4                  mov dword ptr [ebp-0C], ecx
:00440DE8 8B55D0                  mov edx, dword ptr [ebp-30]
:00440DEB 3B55D4                  cmp edx, dword ptr [ebp-2C]
:00440DEE 7216                    jb 00440E06
:00440DF0 8B45E4                  mov eax, dword ptr [ebp-1C]
:00440DF3 0FAF45AC                imul eax, dword ptr [ebp-54]
:00440DF7 33D2                    xor edx, edx
:00440DF9 F775A8                  div [ebp-58]
:00440DFC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440DFF 2BC8                    sub ecx, eax
:00440E01 894DF8                  mov dword ptr [ebp-08], ecx
:00440E04 EB14                    jmp 00440E1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440DEE(C)
|
:00440E06 8B45E4                  mov eax, dword ptr [ebp-1C]
:00440E09 0FAF45AC                imul eax, dword ptr [ebp-54]
:00440E0D 33D2                    xor edx, edx
:00440E0F F775A8                  div [ebp-58]
:00440E12 8B55F8                  mov edx, dword ptr [ebp-08]
:00440E15 03D0                    add edx, eax
:00440E17 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E04(U)
|
:00440E1A 8B45E0                  mov eax, dword ptr [ebp-20]
:00440E1D 50                      push eax
:00440E1E B9F8F44A00              mov ecx, 004AF4F8
:00440E23 E86846FEFF              call 00425490
:00440E28 8A4D10                  mov cl, byte ptr [ebp+10]
:00440E2B 51                      push ecx
:00440E2C 8B55C4                  mov edx, dword ptr [ebp-3C]
:00440E2F 52                      push edx
:00440E30 8B45B4                  mov eax, dword ptr [ebp-4C]
:00440E33 50                      push eax
:00440E34 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00440E37 51                      push ecx
:00440E38 8B55F8                  mov edx, dword ptr [ebp-08]
:00440E3B 52                      push edx
:00440E3C 8B45F4                  mov eax, dword ptr [ebp-0C]
:00440E3F 50                      push eax
:00440E40 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00440E43 E8E9020000              call 00441131
:00440E48 E8435DFEFF              call 00426B90
:00440E4D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00440E50 81E1FF000000            and ecx, 000000FF
:00440E56 83F913                  cmp ecx, 00000013
:00440E59 750A                    jne 00440E65

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00440E5B 6A02                    push 00000002
:00440E5D E8E25EFEFF              call 00426D44
:00440E62 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E59(C)
|
:00440E65 E94BFFFFFF              jmp 00440DB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440DCD(C)
|
:00440E6A E984020000              jmp 004410F3
:00440E6F 8B55F0                  mov edx, dword ptr [ebp-10]
:00440E72 2B55D8                  sub edx, dword ptr [ebp-28]
:00440E75 8955A8                  mov dword ptr [ebp-58], edx
:00440E78 8B45D0                  mov eax, dword ptr [ebp-30]
:00440E7B 3B45D4                  cmp eax, dword ptr [ebp-2C]
:00440E7E 720B                    jb 00440E8B
:00440E80 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440E83 2B4DD4                  sub ecx, dword ptr [ebp-2C]
:00440E86 894DAC                  mov dword ptr [ebp-54], ecx
:00440E89 EB09                    jmp 00440E94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E7E(C)
|
:00440E8B 8B55D4                  mov edx, dword ptr [ebp-2C]
:00440E8E 2B55D0                  sub edx, dword ptr [ebp-30]
:00440E91 8955AC                  mov dword ptr [ebp-54], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E89(U)
|
:00440E94 8B45D8                  mov eax, dword ptr [ebp-28]
:00440E97 83C010                  add eax, 00000010
:00440E9A 8945F4                  mov dword ptr [ebp-0C], eax
:00440E9D 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440EA0 3B4DD4                  cmp ecx, dword ptr [ebp-2C]
:00440EA3 7214                    jb 00440EB9
:00440EA5 8B45AC                  mov eax, dword ptr [ebp-54]
:00440EA8 C1E004                  shl eax, 04
:00440EAB 99                      cdq
:00440EAC F77DA8                  idiv [ebp-58]
:00440EAF 8B55D0                  mov edx, dword ptr [ebp-30]
:00440EB2 2BD0                    sub edx, eax
:00440EB4 8955F8                  mov dword ptr [ebp-08], edx
:00440EB7 EB12                    jmp 00440ECB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440EA3(C)
|
:00440EB9 8B45AC                  mov eax, dword ptr [ebp-54]
:00440EBC C1E004                  shl eax, 04
:00440EBF 99                      cdq
:00440EC0 F77DA8                  idiv [ebp-58]
:00440EC3 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440EC6 03C8                    add ecx, eax
:00440EC8 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440EB7(U)
|
:00440ECB 6A00                    push 00000000
:00440ECD B930DA4A00              mov ecx, 004ADA30
:00440ED2 E8C726FDFF              call 0041359E
:00440ED7 05003D0100              add eax, 00013D00
:00440EDC 50                      push eax
:00440EDD 6A30                    push 00000030
:00440EDF 6A30                    push 00000030
:00440EE1 8B55F8                  mov edx, dword ptr [ebp-08]
:00440EE4 52                      push edx
:00440EE5 8B45F4                  mov eax, dword ptr [ebp-0C]
:00440EE8 50                      push eax
:00440EE9 E8E51D0000              call 00442CD3
:00440EEE 83C414                  add esp, 00000014
:00440EF1 C745C400000000          mov [ebp-3C], 00000000
:00440EF8 EB09                    jmp 00440F03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440FA9(U)
|
:00440EFA 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00440EFD 83C101                  add ecx, 00000001
:00440F00 894DC4                  mov dword ptr [ebp-3C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440EF8(U)
|
:00440F03 8B55C4                  mov edx, dword ptr [ebp-3C]
:00440F06 0FAF55E4                imul edx, dword ptr [ebp-1C]
:00440F0A 8B45A8                  mov eax, dword ptr [ebp-58]
:00440F0D 83E820                  sub eax, 00000020
:00440F10 3BD0                    cmp edx, eax
:00440F12 0F8396000000            jnb 00440FAE
:00440F18 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00440F1B 894DB0                  mov dword ptr [ebp-50], ecx
:00440F1E 8B55F8                  mov edx, dword ptr [ebp-08]
:00440F21 8955B4                  mov dword ptr [ebp-4C], edx
:00440F24 8B45F4                  mov eax, dword ptr [ebp-0C]
:00440F27 0345E4                  add eax, dword ptr [ebp-1C]
:00440F2A 8945F4                  mov dword ptr [ebp-0C], eax
:00440F2D 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00440F30 3B4DD4                  cmp ecx, dword ptr [ebp-2C]
:00440F33 7216                    jb 00440F4B
:00440F35 8B45E4                  mov eax, dword ptr [ebp-1C]
:00440F38 0FAF45AC                imul eax, dword ptr [ebp-54]
:00440F3C 33D2                    xor edx, edx
:00440F3E F775A8                  div [ebp-58]
:00440F41 8B55F8                  mov edx, dword ptr [ebp-08]
:00440F44 2BD0                    sub edx, eax
:00440F46 8955F8                  mov dword ptr [ebp-08], edx
:00440F49 EB14                    jmp 00440F5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440F33(C)
|
:00440F4B 8B45E4                  mov eax, dword ptr [ebp-1C]
:00440F4E 0FAF45AC                imul eax, dword ptr [ebp-54]
:00440F52 33D2                    xor edx, edx
:00440F54 F775A8                  div [ebp-58]
:00440F57 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440F5A 03C8                    add ecx, eax
:00440F5C 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440F49(U)
|
:00440F5F 8B55E0                  mov edx, dword ptr [ebp-20]
:00440F62 52                      push edx
:00440F63 B9F8F44A00              mov ecx, 004AF4F8
:00440F68 E82345FEFF              call 00425490
:00440F6D 8A4510                  mov al, byte ptr [ebp+10]
:00440F70 50                      push eax
:00440F71 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00440F74 51                      push ecx
:00440F75 8B55B4                  mov edx, dword ptr [ebp-4C]
:00440F78 52                      push edx
:00440F79 8B45B0                  mov eax, dword ptr [ebp-50]
:00440F7C 50                      push eax
:00440F7D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440F80 51                      push ecx
:00440F81 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440F84 52                      push edx
:00440F85 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00440F88 E8A4010000              call 00441131
:00440F8D E8FE5BFEFF              call 00426B90
:00440F92 8B4510                  mov eax, dword ptr [ebp+10]
:00440F95 25FF000000              and eax, 000000FF
:00440F9A 83F813                  cmp eax, 00000013
:00440F9D 750A                    jne 00440FA9

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00440F9F 6A02                    push 00000002
:00440FA1 E89E5DFEFF              call 00426D44
:00440FA6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440F9D(C)
|
:00440FA9 E94CFFFFFF              jmp 00440EFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440F12(C)
|
:00440FAE E940010000              jmp 004410F3
:00440FB3 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00440FB6 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00440FB9 720B                    jb 00440FC6
:00440FBB 8B55D8                  mov edx, dword ptr [ebp-28]
:00440FBE 2B55F0                  sub edx, dword ptr [ebp-10]
:00440FC1 8955A8                  mov dword ptr [ebp-58], edx
:00440FC4 EB09                    jmp 00440FCF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440FB9(C)
|
:00440FC6 8B45F0                  mov eax, dword ptr [ebp-10]
:00440FC9 2B45D8                  sub eax, dword ptr [ebp-28]
:00440FCC 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440FC4(U)
|
:00440FCF 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00440FD2 2B4DD0                  sub ecx, dword ptr [ebp-30]
:00440FD5 894DAC                  mov dword ptr [ebp-54], ecx
:00440FD8 8B55D8                  mov edx, dword ptr [ebp-28]
:00440FDB 3B55F0                  cmp edx, dword ptr [ebp-10]
:00440FDE 7214                    jb 00440FF4
:00440FE0 8B45A8                  mov eax, dword ptr [ebp-58]
:00440FE3 C1E004                  shl eax, 04
:00440FE6 99                      cdq
:00440FE7 F77DAC                  idiv [ebp-54]
:00440FEA 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00440FED 2BC8                    sub ecx, eax
:00440FEF 894DF4                  mov dword ptr [ebp-0C], ecx
:00440FF2 EB12                    jmp 00441006

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440FDE(C)
|
:00440FF4 8B45A8                  mov eax, dword ptr [ebp-58]
:00440FF7 C1E004                  shl eax, 04
:00440FFA 99                      cdq
:00440FFB F77DAC                  idiv [ebp-54]
:00440FFE 8B55D8                  mov edx, dword ptr [ebp-28]
:00441001 03D0                    add edx, eax
:00441003 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440FF2(U)
|
:00441006 8B45D0                  mov eax, dword ptr [ebp-30]
:00441009 83C010                  add eax, 00000010
:0044100C 8945F8                  mov dword ptr [ebp-08], eax
:0044100F 6A00                    push 00000000
:00441011 B930DA4A00              mov ecx, 004ADA30
:00441016 E88325FDFF              call 0041359E
:0044101B 05003D0100              add eax, 00013D00
:00441020 50                      push eax
:00441021 6A30                    push 00000030
:00441023 6A30                    push 00000030
:00441025 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441028 51                      push ecx
:00441029 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044102C 52                      push edx
:0044102D E8A11C0000              call 00442CD3
:00441032 83C414                  add esp, 00000014
:00441035 C745C400000000          mov [ebp-3C], 00000000
:0044103C EB09                    jmp 00441047

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004410EE(U)
|
:0044103E 8B45C4                  mov eax, dword ptr [ebp-3C]
:00441041 83C001                  add eax, 00000001
:00441044 8945C4                  mov dword ptr [ebp-3C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044103C(U)
|
:00441047 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044104A 0FAF4DE4                imul ecx, dword ptr [ebp-1C]
:0044104E 8B55AC                  mov edx, dword ptr [ebp-54]
:00441051 83EA20                  sub edx, 00000020
:00441054 3BCA                    cmp ecx, edx
:00441056 0F8397000000            jnb 004410F3
:0044105C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044105F 8945B0                  mov dword ptr [ebp-50], eax
:00441062 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441065 894DB4                  mov dword ptr [ebp-4C], ecx
:00441068 8B55D8                  mov edx, dword ptr [ebp-28]
:0044106B 3B55F0                  cmp edx, dword ptr [ebp-10]
:0044106E 7216                    jb 00441086
:00441070 8B45E4                  mov eax, dword ptr [ebp-1C]
:00441073 0FAF45A8                imul eax, dword ptr [ebp-58]
:00441077 33D2                    xor edx, edx
:00441079 F775AC                  div [ebp-54]
:0044107C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044107F 2BC8                    sub ecx, eax
:00441081 894DF4                  mov dword ptr [ebp-0C], ecx
:00441084 EB14                    jmp 0044109A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044106E(C)
|
:00441086 8B45E4                  mov eax, dword ptr [ebp-1C]
:00441089 0FAF45A8                imul eax, dword ptr [ebp-58]
:0044108D 33D2                    xor edx, edx
:0044108F F775AC                  div [ebp-54]
:00441092 8B55F4                  mov edx, dword ptr [ebp-0C]
:00441095 03D0                    add edx, eax
:00441097 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441084(U)
|
:0044109A 8B45F8                  mov eax, dword ptr [ebp-08]
:0044109D 0345E4                  add eax, dword ptr [ebp-1C]
:004410A0 8945F8                  mov dword ptr [ebp-08], eax
:004410A3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004410A6 51                      push ecx
:004410A7 B9F8F44A00              mov ecx, 004AF4F8
:004410AC E8DF43FEFF              call 00425490
:004410B1 8A5510                  mov dl, byte ptr [ebp+10]
:004410B4 52                      push edx
:004410B5 8B45C4                  mov eax, dword ptr [ebp-3C]
:004410B8 50                      push eax
:004410B9 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:004410BC 51                      push ecx
:004410BD 8B55B0                  mov edx, dword ptr [ebp-50]
:004410C0 52                      push edx
:004410C1 8B45F8                  mov eax, dword ptr [ebp-08]
:004410C4 50                      push eax
:004410C5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004410C8 51                      push ecx
:004410C9 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:004410CC E860000000              call 00441131
:004410D1 8B5510                  mov edx, dword ptr [ebp+10]
:004410D4 81E2FF000000            and edx, 000000FF
:004410DA 83FA13                  cmp edx, 00000013
:004410DD 750A                    jne 004410E9

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004410DF 6A02                    push 00000002
:004410E1 E85E5CFEFF              call 00426D44
:004410E6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004410DD(C)
|
:004410E9 E8A25AFEFF              call 00426B90
:004410EE E94BFFFFFF              jmp 0044103E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440BD5(C), :00440D25(U), :00440E6A(U), :00440FAE(U), :00441056(C)
|
:004410F3 6A00                    push 00000000
:004410F5 6A00                    push 00000000
:004410F7 B930DA4A00              mov ecx, 004ADA30
:004410FC E89D24FDFF              call 0041359E
:00441101 05003D0100              add eax, 00013D00
:00441106 50                      push eax
:00441107 6A30                    push 00000030
:00441109 6A30                    push 00000030
:0044110B 8B45F8                  mov eax, dword ptr [ebp-08]
:0044110E 50                      push eax
:0044110F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00441112 51                      push ecx
:00441113 E8FA1A0000              call 00442C12
:00441118 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440BA5(U)
|
:0044111B 8BE5                    mov esp, ebp
:0044111D 5D                      pop ebp
:0044111E C21000                  ret 0010



:00441121 E50B4400                DWORD 00440BE5
:00441125 6F0E4400                DWORD 00440E6F
:00441129 B30F4400                DWORD 00440FB3
:0044112D 2A0D4400                DWORD 00440D2A



* Referenced by a CALL at Addresses:
|:00440CFE   , :00440E43   , :00440F88   , :004410CC   
|
:00441131 55                      push ebp
:00441132 8BEC                    mov ebp, esp
:00441134 51                      push ecx
:00441135 56                      push esi
:00441136 894DFC                  mov dword ptr [ebp-04], ecx
:00441139 8B451C                  mov eax, dword ptr [ebp+1C]
:0044113C 25FF000000              and eax, 000000FF
:00441141 83F813                  cmp eax, 00000013
:00441144 747B                    je 004411C1
:00441146 6A00                    push 00000000
:00441148 6A00                    push 00000000
:0044114A B930DA4A00              mov ecx, 004ADA30
:0044114F E84A24FDFF              call 0041359E
:00441154 05003D0100              add eax, 00013D00
:00441159 50                      push eax
:0044115A 6A30                    push 00000030
:0044115C 6A30                    push 00000030
:0044115E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00441161 51                      push ecx
:00441162 8B5510                  mov edx, dword ptr [ebp+10]
:00441165 52                      push edx
:00441166 E8A71A0000              call 00442C12
:0044116B 83C418                  add esp, 00000018
:0044116E 6A00                    push 00000000
:00441170 B930DA4A00              mov ecx, 004ADA30
:00441175 E82424FDFF              call 0041359E
:0044117A 05003D0100              add eax, 00013D00
:0044117F 50                      push eax
:00441180 6A30                    push 00000030
:00441182 6A30                    push 00000030
:00441184 8B450C                  mov eax, dword ptr [ebp+0C]
:00441187 50                      push eax
:00441188 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044118B 51                      push ecx
:0044118C E8421B0000              call 00442CD3
:00441191 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441194 6A04                    push 00000004
:00441196 6A00                    push 00000000
:00441198 B930DA4A00              mov ecx, 004ADA30
:0044119D E8FC23FDFF              call 0041359E
:004411A2 0500B10000              add eax, 0000B100
:004411A7 50                      push eax
:004411A8 6A30                    push 00000030
:004411AA 6A30                    push 00000030
:004411AC 8B550C                  mov edx, dword ptr [ebp+0C]
:004411AF 52                      push edx
:004411B0 8B4508                  mov eax, dword ptr [ebp+08]
:004411B3 50                      push eax
:004411B4 E8591A0000              call 00442C12
:004411B9 83C418                  add esp, 00000018
:004411BC E98C000000              jmp 0044124D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441144(C)
|
:004411C1 6A00                    push 00000000
:004411C3 6A00                    push 00000000
:004411C5 B930DA4A00              mov ecx, 004ADA30
:004411CA E8CF23FDFF              call 0041359E
:004411CF 05003D0100              add eax, 00013D00
:004411D4 50                      push eax
:004411D5 6A30                    push 00000030
:004411D7 6A30                    push 00000030
:004411D9 8B4D14                  mov ecx, dword ptr [ebp+14]
:004411DC 51                      push ecx
:004411DD 8B5510                  mov edx, dword ptr [ebp+10]
:004411E0 52                      push edx
:004411E1 E82C1A0000              call 00442C12
:004411E6 83C418                  add esp, 00000018
:004411E9 6A00                    push 00000000
:004411EB B930DA4A00              mov ecx, 004ADA30
:004411F0 E8A923FDFF              call 0041359E
:004411F5 05003D0100              add eax, 00013D00
:004411FA 50                      push eax
:004411FB 6A30                    push 00000030
:004411FD 6A30                    push 00000030
:004411FF 8B450C                  mov eax, dword ptr [ebp+0C]
:00441202 50                      push eax
:00441203 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441206 51                      push ecx
:00441207 E8C71A0000              call 00442CD3
:0044120C 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044120F 6A04                    push 00000004
:00441211 6A00                    push 00000000
:00441213 B930DA4A00              mov ecx, 004ADA30
:00441218 E88123FDFF              call 0041359E
:0044121D 8BC8                    mov ecx, eax
:0044121F 8B4518                  mov eax, dword ptr [ebp+18]
:00441222 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00441224 BE03000000              mov esi, 00000003
:00441229 F7F6                    div esi
:0044122B 69D200090000            imul edx, 00000900
:00441231 8D941100B10000          lea edx, dword ptr [ecx+edx+0000B100]
:00441238 52                      push edx
:00441239 6A30                    push 00000030
:0044123B 6A30                    push 00000030
:0044123D 8B450C                  mov eax, dword ptr [ebp+0C]
:00441240 50                      push eax
:00441241 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441244 51                      push ecx
:00441245 E8C8190000              call 00442C12
:0044124A 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004411BC(U)
|
:0044124D 5E                      pop esi
:0044124E 8BE5                    mov esp, ebp
:00441250 5D                      pop ebp
:00441251 C21800                  ret 0018



* Referenced by a CALL at Address:
|:0043D708   
|
:00441254 55                      push ebp
:00441255 8BEC                    mov ebp, esp
:00441257 83EC28                  sub esp, 00000028
:0044125A 894DD8                  mov dword ptr [ebp-28], ecx
:0044125D 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00441260 E84B65FCFF              call 004077B0
:00441265 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00441268 81E1FF000000            and ecx, 000000FF
:0044126E 6BC924                  imul ecx, 00000024
:00441271 81C108F54A00            add ecx, 004AF508
:00441277 E82481FEFF              call 004293A0
:0044127C 50                      push eax
:0044127D 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00441280 E80BE5FEFF              call 0042F790
:00441285 8B45E4                  mov eax, dword ptr [ebp-1C]
:00441288 25FF000000              and eax, 000000FF
:0044128D 6BC003                  imul eax, 00000003
:00441290 8945F0                  mov dword ptr [ebp-10], eax
:00441293 8B4DE5                  mov ecx, dword ptr [ebp-1B]
:00441296 81E1FF000000            and ecx, 000000FF
:0044129C 6BC903                  imul ecx, 00000003
:0044129F 894DE0                  mov dword ptr [ebp-20], ecx
:004412A2 B9A8034B00              mov ecx, 004B03A8
:004412A7 E8D41A0000              call 00442D80
:004412AC 8B55F0                  mov edx, dword ptr [ebp-10]
:004412AF 2BD0                    sub edx, eax
:004412B1 C1E204                  shl edx, 04
:004412B4 8955E8                  mov dword ptr [ebp-18], edx
:004412B7 B9A8034B00              mov ecx, 004B03A8
:004412BC E8D01A0000              call 00442D91
:004412C1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004412C4 2BC8                    sub ecx, eax
:004412C6 83C102                  add ecx, 00000002
:004412C9 C1E104                  shl ecx, 04
:004412CC 83C108                  add ecx, 00000008
:004412CF 894DF4                  mov dword ptr [ebp-0C], ecx
:004412D2 B9A8034B00              mov ecx, 004B03A8
:004412D7 E8A41A0000              call 00442D80
:004412DC 8B55F0                  mov edx, dword ptr [ebp-10]
:004412DF 2BD0                    sub edx, eax
:004412E1 8955F8                  mov dword ptr [ebp-08], edx
:004412E4 B9A8034B00              mov ecx, 004B03A8
:004412E9 E8A31A0000              call 00442D91
:004412EE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004412F1 2BC8                    sub ecx, eax
:004412F3 894DFC                  mov dword ptr [ebp-04], ecx
:004412F6 6A00                    push 00000000
:004412F8 B930DA4A00              mov ecx, 004ADA30
:004412FD E89C22FDFF              call 0041359E
:00441302 05002D0100              add eax, 00012D00
:00441307 50                      push eax
:00441308 6A30                    push 00000030
:0044130A 6A30                    push 00000030
:0044130C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044130F 52                      push edx
:00441310 8B45E8                  mov eax, dword ptr [ebp-18]
:00441313 50                      push eax
:00441314 E8BA190000              call 00442CD3
:00441319 83C414                  add esp, 00000014

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044131C C745DC02000000          mov [ebp-24], 00000002
:00441323 C745EC00000000          mov [ebp-14], 00000000
:0044132A EB09                    jmp 00441335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004414F3(U)
|
:0044132C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044132F 83C101                  add ecx, 00000001
:00441332 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044132A(U)
|
:00441335 8B55EC                  mov edx, dword ptr [ebp-14]
:00441338 3B55DC                  cmp edx, dword ptr [ebp-24]
:0044133B 0F83B7010000            jnb 004414F8

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00441341 6A02                    push 00000002
:00441343 B9F8F44A00              mov ecx, 004AF4F8
:00441348 E84341FEFF              call 00425490
:0044134D E8E01AFDFF              call 00412E32
:00441352 6A00                    push 00000000
:00441354 6A00                    push 00000000
:00441356 B930DA4A00              mov ecx, 004ADA30
:0044135B E83E22FDFF              call 0041359E
:00441360 05002D0100              add eax, 00012D00
:00441365 50                      push eax
:00441366 6A30                    push 00000030
:00441368 6A30                    push 00000030
:0044136A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044136D 50                      push eax
:0044136E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441371 51                      push ecx
:00441372 E89B180000              call 00442C12
:00441377 83C418                  add esp, 00000018
:0044137A 8B55FC                  mov edx, dword ptr [ebp-04]
:0044137D 52                      push edx
:0044137E 8B45F8                  mov eax, dword ptr [ebp-08]
:00441381 50                      push eax
:00441382 E8DB88FFFF              call 00439C62
:00441387 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044138A 6A04                    push 00000004
:0044138C 6A00                    push 00000000
:0044138E B930DA4A00              mov ecx, 004ADA30
:00441393 E80622FDFF              call 0041359E
:00441398 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044139B 69C900090000            imul ecx, 00000900
:004413A1 8D940800300000          lea edx, dword ptr [eax+ecx+00003000]
:004413A8 52                      push edx
:004413A9 6A30                    push 00000030
:004413AB 6A30                    push 00000030
:004413AD 8B45F4                  mov eax, dword ptr [ebp-0C]
:004413B0 50                      push eax
:004413B1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004413B4 51                      push ecx
:004413B5 E858180000              call 00442C12
:004413BA 83C418                  add esp, 00000018
:004413BD 6A00                    push 00000000
:004413BF B930DA4A00              mov ecx, 004ADA30
:004413C4 E8D521FDFF              call 0041359E
:004413C9 05003D0100              add eax, 00013D00
:004413CE 50                      push eax
:004413CF 6A30                    push 00000030
:004413D1 6A30                    push 00000030
:004413D3 8B55F4                  mov edx, dword ptr [ebp-0C]
:004413D6 52                      push edx
:004413D7 8B45E8                  mov eax, dword ptr [ebp-18]
:004413DA 50                      push eax
:004413DB E8F3180000              call 00442CD3
:004413E0 83C414                  add esp, 00000014
:004413E3 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004413E6 8B11                    mov edx, dword ptr [ecx]
:004413E8 81E200010000            and edx, 00000100
:004413EE 85D2                    test edx, edx
:004413F0 7433                    je 00441425

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004413F2 6A04                    push 00000004
:004413F4 6A00                    push 00000000
:004413F6 B930DA4A00              mov ecx, 004ADA30
:004413FB E89E21FDFF              call 0041359E
:00441400 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00441403 69C900090000            imul ecx, 00000900
:00441409 8D940800E70000          lea edx, dword ptr [eax+ecx+0000E700]
:00441410 52                      push edx
:00441411 6A30                    push 00000030
:00441413 6A30                    push 00000030
:00441415 8B45F4                  mov eax, dword ptr [ebp-0C]
:00441418 50                      push eax
:00441419 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044141C 51                      push ecx
:0044141D E8F0170000              call 00442C12
:00441422 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004413F0(C)
|
:00441425 8D55E4                  lea edx, dword ptr [ebp-1C]
:00441428 52                      push edx
:00441429 E851650000              call 0044797F
:0044142E 83C404                  add esp, 00000004
:00441431 25FF000000              and eax, 000000FF
:00441436 83F80D                  cmp eax, 0000000D
:00441439 7534                    jne 0044146F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044143B 6A04                    push 00000004
:0044143D 6800120100              push 00011200
:00441442 B940DF4A00              mov ecx, 004ADF40
:00441447 E85221FDFF              call 0041359E
:0044144C 8B0D78044B00            mov ecx, dword ptr [004B0478]
:00441452 69C900090000            imul ecx, 00000900
:00441458 03C1                    add eax, ecx
:0044145A 50                      push eax
:0044145B 6A30                    push 00000030
:0044145D 6A30                    push 00000030
:0044145F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00441462 52                      push edx
:00441463 8B45E8                  mov eax, dword ptr [ebp-18]
:00441466 50                      push eax
:00441467 E8A6170000              call 00442C12
:0044146C 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441439(C)
|
:0044146F B9180A4B00              mov ecx, 004B0A18
:00441474 E8756F0100              call 004583EE
:00441479 25FF000000              and eax, 000000FF
:0044147E 83F802                  cmp eax, 00000002
:00441481 7414                    je 00441497
:00441483 B9180A4B00              mov ecx, 004B0A18
:00441488 E8616F0100              call 004583EE
:0044148D 25FF000000              and eax, 000000FF
:00441492 83F803                  cmp eax, 00000003
:00441495 7548                    jne 004414DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441481(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441497 6A04                    push 00000004
:00441499 B9180A4B00              mov ecx, 004B0A18
:0044149E E88DE8FEFF              call 0042FD30
:004414A3 F7D8                    neg eax
:004414A5 1BC0                    sbb eax, eax
:004414A7 2500120000              and eax, 00001200
:004414AC 0500EE0000              add eax, 0000EE00
:004414B1 50                      push eax
:004414B2 B940DF4A00              mov ecx, 004ADF40
:004414B7 E8E220FDFF              call 0041359E
:004414BC 8B0D78044B00            mov ecx, dword ptr [004B0478]
:004414C2 69C900090000            imul ecx, 00000900
:004414C8 03C1                    add eax, ecx
:004414CA 50                      push eax
:004414CB 6A30                    push 00000030
:004414CD 6A30                    push 00000030
:004414CF 8B55F4                  mov edx, dword ptr [ebp-0C]
:004414D2 52                      push edx
:004414D3 8B45E8                  mov eax, dword ptr [ebp-18]
:004414D6 50                      push eax
:004414D7 E836170000              call 00442C12
:004414DC 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441495(C)
|
:004414DF E86919FDFF              call 00412E4D
:004414E4 E8A756FEFF              call 00426B90

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004414E9 6A02                    push 00000002
:004414EB E85458FEFF              call 00426D44
:004414F0 83C404                  add esp, 00000004
:004414F3 E934FEFFFF              jmp 0044132C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044133B(C)
|
:004414F8 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004414FB 8B11                    mov edx, dword ptr [ecx]
:004414FD 81E200010000            and edx, 00000100
:00441503 85D2                    test edx, edx
:00441505 0F8441010000            je 0044164C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044150B C745EC02000000          mov [ebp-14], 00000002

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00441512 6A02                    push 00000002
:00441514 B9F8F44A00              mov ecx, 004AF4F8
:00441519 E8723FFEFF              call 00425490
:0044151E E80F19FDFF              call 00412E32
:00441523 6A00                    push 00000000
:00441525 6A00                    push 00000000
:00441527 B930DA4A00              mov ecx, 004ADA30
:0044152C E86D20FDFF              call 0041359E
:00441531 05003D0100              add eax, 00013D00
:00441536 50                      push eax
:00441537 6A30                    push 00000030
:00441539 6A30                    push 00000030
:0044153B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044153E 50                      push eax
:0044153F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441542 51                      push ecx
:00441543 E8CA160000              call 00442C12
:00441548 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044154B 6A04                    push 00000004
:0044154D 6A00                    push 00000000
:0044154F B930DA4A00              mov ecx, 004ADA30
:00441554 E84520FDFF              call 0041359E
:00441559 8B55EC                  mov edx, dword ptr [ebp-14]
:0044155C 69D200090000            imul edx, 00000900
:00441562 8D841000E70000          lea eax, dword ptr [eax+edx+0000E700]
:00441569 50                      push eax
:0044156A 6A30                    push 00000030
:0044156C 6A30                    push 00000030
:0044156E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00441571 51                      push ecx
:00441572 8B55E8                  mov edx, dword ptr [ebp-18]
:00441575 52                      push edx
:00441576 E897160000              call 00442C12
:0044157B 83C418                  add esp, 00000018
:0044157E 8D45E4                  lea eax, dword ptr [ebp-1C]
:00441581 50                      push eax
:00441582 E8F8630000              call 0044797F
:00441587 83C404                  add esp, 00000004
:0044158A 25FF000000              and eax, 000000FF
:0044158F 83F80D                  cmp eax, 0000000D
:00441592 7534                    jne 004415C8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441594 6A04                    push 00000004
:00441596 6800120100              push 00011200
:0044159B B940DF4A00              mov ecx, 004ADF40
:004415A0 E8F91FFDFF              call 0041359E
:004415A5 8B0D78044B00            mov ecx, dword ptr [004B0478]
:004415AB 69C900090000            imul ecx, 00000900
:004415B1 03C1                    add eax, ecx
:004415B3 50                      push eax
:004415B4 6A30                    push 00000030
:004415B6 6A30                    push 00000030
:004415B8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004415BB 52                      push edx
:004415BC 8B45E8                  mov eax, dword ptr [ebp-18]
:004415BF 50                      push eax
:004415C0 E84D160000              call 00442C12
:004415C5 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441592(C)
|
:004415C8 B9180A4B00              mov ecx, 004B0A18
:004415CD E81C6E0100              call 004583EE
:004415D2 25FF000000              and eax, 000000FF
:004415D7 83F802                  cmp eax, 00000002
:004415DA 7414                    je 004415F0
:004415DC B9180A4B00              mov ecx, 004B0A18
:004415E1 E8086E0100              call 004583EE
:004415E6 25FF000000              and eax, 000000FF
:004415EB 83F803                  cmp eax, 00000003
:004415EE 7548                    jne 00441638

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004415DA(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004415F0 6A04                    push 00000004
:004415F2 B9180A4B00              mov ecx, 004B0A18
:004415F7 E834E7FEFF              call 0042FD30
:004415FC F7D8                    neg eax
:004415FE 1BC0                    sbb eax, eax
:00441600 2500120000              and eax, 00001200
:00441605 0500EE0000              add eax, 0000EE00
:0044160A 50                      push eax
:0044160B B940DF4A00              mov ecx, 004ADF40
:00441610 E8891FFDFF              call 0041359E
:00441615 8B0D78044B00            mov ecx, dword ptr [004B0478]
:0044161B 69C900090000            imul ecx, 00000900
:00441621 03C1                    add eax, ecx
:00441623 50                      push eax
:00441624 6A30                    push 00000030
:00441626 6A30                    push 00000030
:00441628 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044162B 52                      push edx
:0044162C 8B45E8                  mov eax, dword ptr [ebp-18]
:0044162F 50                      push eax
:00441630 E8DD150000              call 00442C12
:00441635 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004415EE(C)
|
:00441638 E81018FDFF              call 00412E4D
:0044163D E84E55FEFF              call 00426B90

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00441642 6A02                    push 00000002
:00441644 E8FB56FEFF              call 00426D44
:00441649 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441505(C)
|
:0044164C E8E117FDFF              call 00412E32
:00441651 6A00                    push 00000000
:00441653 6A00                    push 00000000
:00441655 B930DA4A00              mov ecx, 004ADA30
:0044165A E83F1FFDFF              call 0041359E
:0044165F 05002D0100              add eax, 00012D00
:00441664 50                      push eax
:00441665 6A30                    push 00000030
:00441667 6A30                    push 00000030
:00441669 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044166C 51                      push ecx
:0044166D 8B55E8                  mov edx, dword ptr [ebp-18]
:00441670 52                      push edx
:00441671 E89C150000              call 00442C12
:00441676 83C418                  add esp, 00000018
:00441679 E8CF17FDFF              call 00412E4D
:0044167E 8BE5                    mov esp, ebp
:00441680 5D                      pop ebp
:00441681 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0043D725   
|
:00441684 55                      push ebp
:00441685 8BEC                    mov ebp, esp
:00441687 51                      push ecx
:00441688 894DFC                  mov dword ptr [ebp-04], ecx
:0044168B 6A01                    push 00000001
:0044168D 8A4508                  mov al, byte ptr [ebp+08]
:00441690 50                      push eax
:00441691 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441694 E806000000              call 0044169F
:00441699 8BE5                    mov esp, ebp
:0044169B 5D                      pop ebp
:0044169C C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043D806   , :0043D883   , :0043D8F1   , :00441694   , :00441DEB   
|
:0044169F 55                      push ebp
:004416A0 8BEC                    mov ebp, esp
:004416A2 83EC34                  sub esp, 00000034
:004416A5 894DCC                  mov dword ptr [ebp-34], ecx
:004416A8 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004416AB E80061FCFF              call 004077B0
:004416B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004416B3 81E1FF000000            and ecx, 000000FF
:004416B9 6BC924                  imul ecx, 00000024
:004416BC 81C108F54A00            add ecx, 004AF508
:004416C2 E8D97CFEFF              call 004293A0
:004416C7 50                      push eax
:004416C8 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004416CB E8C0E0FEFF              call 0042F790
:004416D0 8B45D8                  mov eax, dword ptr [ebp-28]
:004416D3 25FF000000              and eax, 000000FF
:004416D8 6BC003                  imul eax, 00000003
:004416DB 8945EC                  mov dword ptr [ebp-14], eax
:004416DE 8B4DD9                  mov ecx, dword ptr [ebp-27]
:004416E1 81E1FF000000            and ecx, 000000FF
:004416E7 6BC903                  imul ecx, 00000003
:004416EA 894DD4                  mov dword ptr [ebp-2C], ecx
:004416ED B9A8034B00              mov ecx, 004B03A8
:004416F2 E889160000              call 00442D80
:004416F7 8B55EC                  mov edx, dword ptr [ebp-14]
:004416FA 2BD0                    sub edx, eax
:004416FC C1E204                  shl edx, 04
:004416FF 8955E4                  mov dword ptr [ebp-1C], edx
:00441702 B9A8034B00              mov ecx, 004B03A8
:00441707 E885160000              call 00442D91
:0044170C 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044170F 2BC8                    sub ecx, eax
:00441711 83C102                  add ecx, 00000002
:00441714 C1E104                  shl ecx, 04
:00441717 83C108                  add ecx, 00000008
:0044171A 894DF0                  mov dword ptr [ebp-10], ecx
:0044171D B9A8034B00              mov ecx, 004B03A8
:00441722 E859160000              call 00442D80
:00441727 8B55EC                  mov edx, dword ptr [ebp-14]
:0044172A 2BD0                    sub edx, eax
:0044172C 8955F8                  mov dword ptr [ebp-08], edx
:0044172F B9A8034B00              mov ecx, 004B03A8
:00441734 E858160000              call 00442D91
:00441739 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044173C 2BC8                    sub ecx, eax
:0044173E 894DFC                  mov dword ptr [ebp-04], ecx
:00441741 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00441745 7517                    jne 0044175E
:00441747 C745DC002D0100          mov [ebp-24], 00012D00
:0044174E C745F400E70000          mov [ebp-0C], 0000E700
:00441755 C745E000010000          mov [ebp-20], 00000100
:0044175C EB3F                    jmp 0044179D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441745(C)
|
:0044175E 837D0C02                cmp dword ptr [ebp+0C], 00000002
:00441762 7517                    jne 0044177B
:00441764 C745DC001D0100          mov [ebp-24], 00011D00
:0044176B C745F400020100          mov [ebp-0C], 00010200
:00441772 C745E000100000          mov [ebp-20], 00001000
:00441779 EB22                    jmp 0044179D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441762(C)
|
:0044177B 837D0C05                cmp dword ptr [ebp+0C], 00000005
:0044177F 7517                    jne 00441798
:00441781 C745DC006B0100          mov [ebp-24], 00016B00
:00441788 C745F400E70100          mov [ebp-0C], 0001E700
:0044178F C745E000400000          mov [ebp-20], 00004000
:00441796 EB05                    jmp 0044179D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044177F(C)
|
:00441798 E9E8010000              jmp 00441985

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044175C(U), :00441779(U), :00441796(U)
|
:0044179D 6A00                    push 00000000
:0044179F B930DA4A00              mov ecx, 004ADA30
:004417A4 E8F51DFDFF              call 0041359E
:004417A9 0345DC                  add eax, dword ptr [ebp-24]
:004417AC 50                      push eax
:004417AD 6A30                    push 00000030
:004417AF 6A30                    push 00000030
:004417B1 8B55F0                  mov edx, dword ptr [ebp-10]
:004417B4 52                      push edx
:004417B5 8B45E4                  mov eax, dword ptr [ebp-1C]
:004417B8 50                      push eax
:004417B9 E815150000              call 00442CD3
:004417BE 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004417C1 C745D003000000          mov [ebp-30], 00000003
:004417C8 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004417CB 8B11                    mov edx, dword ptr [ecx]
:004417CD 2355E0                  and edx, dword ptr [ebp-20]
:004417D0 85D2                    test edx, edx
:004417D2 0F847D010000            je 00441955
:004417D8 6A00                    push 00000000
:004417DA B930DA4A00              mov ecx, 004ADA30
:004417DF E8BA1DFDFF              call 0041359E
:004417E4 0345DC                  add eax, dword ptr [ebp-24]
:004417E7 50                      push eax
:004417E8 6A30                    push 00000030
:004417EA 6A30                    push 00000030
:004417EC 8B45F0                  mov eax, dword ptr [ebp-10]
:004417EF 50                      push eax
:004417F0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004417F3 51                      push ecx
:004417F4 E8DA140000              call 00442CD3
:004417F9 83C414                  add esp, 00000014
:004417FC C745E800000000          mov [ebp-18], 00000000
:00441803 EB09                    jmp 0044180E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441950(U)
|
:00441805 8B55E8                  mov edx, dword ptr [ebp-18]
:00441808 83C201                  add edx, 00000001
:0044180B 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441803(U)
|
:0044180E 8B45E8                  mov eax, dword ptr [ebp-18]
:00441811 3B45D0                  cmp eax, dword ptr [ebp-30]
:00441814 0F833B010000            jnb 00441955

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044181A 6A02                    push 00000002
:0044181C B9F8F44A00              mov ecx, 004AF4F8
:00441821 E86A3CFEFF              call 00425490
:00441826 E80716FDFF              call 00412E32
:0044182B 6A00                    push 00000000
:0044182D 6A00                    push 00000000
:0044182F B930DA4A00              mov ecx, 004ADA30
:00441834 E8651DFDFF              call 0041359E
:00441839 0345DC                  add eax, dword ptr [ebp-24]
:0044183C 50                      push eax
:0044183D 6A30                    push 00000030
:0044183F 6A30                    push 00000030
:00441841 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00441844 51                      push ecx
:00441845 8B55E4                  mov edx, dword ptr [ebp-1C]
:00441848 52                      push edx
:00441849 E8C4130000              call 00442C12
:0044184E 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441851 6A04                    push 00000004
:00441853 6A00                    push 00000000
:00441855 B930DA4A00              mov ecx, 004ADA30
:0044185A E83F1DFDFF              call 0041359E
:0044185F 0345F4                  add eax, dword ptr [ebp-0C]
:00441862 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441865 69C900090000            imul ecx, 00000900
:0044186B 03C1                    add eax, ecx
:0044186D 50                      push eax
:0044186E 6A30                    push 00000030
:00441870 6A30                    push 00000030
:00441872 8B55F0                  mov edx, dword ptr [ebp-10]
:00441875 52                      push edx
:00441876 8B45E4                  mov eax, dword ptr [ebp-1C]
:00441879 50                      push eax
:0044187A E893130000              call 00442C12
:0044187F 83C418                  add esp, 00000018
:00441882 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00441885 51                      push ecx
:00441886 E8F4600000              call 0044797F
:0044188B 83C404                  add esp, 00000004
:0044188E 25FF000000              and eax, 000000FF
:00441893 83F80D                  cmp eax, 0000000D
:00441896 7534                    jne 004418CC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441898 6A04                    push 00000004
:0044189A 6800120100              push 00011200
:0044189F B940DF4A00              mov ecx, 004ADF40
:004418A4 E8F51CFDFF              call 0041359E
:004418A9 8B1578044B00            mov edx, dword ptr [004B0478]
:004418AF 69D200090000            imul edx, 00000900
:004418B5 03C2                    add eax, edx
:004418B7 50                      push eax
:004418B8 6A30                    push 00000030
:004418BA 6A30                    push 00000030
:004418BC 8B45F0                  mov eax, dword ptr [ebp-10]
:004418BF 50                      push eax
:004418C0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004418C3 51                      push ecx
:004418C4 E849130000              call 00442C12
:004418C9 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441896(C)
|
:004418CC B9180A4B00              mov ecx, 004B0A18
:004418D1 E8186B0100              call 004583EE
:004418D6 25FF000000              and eax, 000000FF
:004418DB 83F802                  cmp eax, 00000002
:004418DE 7414                    je 004418F4
:004418E0 B9180A4B00              mov ecx, 004B0A18
:004418E5 E8046B0100              call 004583EE
:004418EA 25FF000000              and eax, 000000FF
:004418EF 83F803                  cmp eax, 00000003
:004418F2 7548                    jne 0044193C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004418DE(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004418F4 6A04                    push 00000004
:004418F6 B9180A4B00              mov ecx, 004B0A18
:004418FB E830E4FEFF              call 0042FD30
:00441900 F7D8                    neg eax
:00441902 1BC0                    sbb eax, eax
:00441904 2500120000              and eax, 00001200
:00441909 0500EE0000              add eax, 0000EE00
:0044190E 50                      push eax
:0044190F B940DF4A00              mov ecx, 004ADF40
:00441914 E8851CFDFF              call 0041359E
:00441919 8B1578044B00            mov edx, dword ptr [004B0478]
:0044191F 69D200090000            imul edx, 00000900
:00441925 03C2                    add eax, edx
:00441927 50                      push eax
:00441928 6A30                    push 00000030
:0044192A 6A30                    push 00000030
:0044192C 8B45F0                  mov eax, dword ptr [ebp-10]
:0044192F 50                      push eax
:00441930 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00441933 51                      push ecx
:00441934 E8D9120000              call 00442C12
:00441939 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004418F2(C)
|
:0044193C E80C15FDFF              call 00412E4D
:00441941 E84A52FEFF              call 00426B90

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00441946 6A02                    push 00000002
:00441948 E8F753FEFF              call 00426D44
:0044194D 83C404                  add esp, 00000004
:00441950 E9B0FEFFFF              jmp 00441805

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004417D2(C), :00441814(C)
|
:00441955 E8D814FDFF              call 00412E32
:0044195A 6A00                    push 00000000
:0044195C 6A00                    push 00000000
:0044195E B930DA4A00              mov ecx, 004ADA30
:00441963 E8361CFDFF              call 0041359E
:00441968 0345DC                  add eax, dword ptr [ebp-24]
:0044196B 50                      push eax
:0044196C 6A30                    push 00000030
:0044196E 6A30                    push 00000030
:00441970 8B55F0                  mov edx, dword ptr [ebp-10]
:00441973 52                      push edx
:00441974 8B45E4                  mov eax, dword ptr [ebp-1C]
:00441977 50                      push eax
:00441978 E895120000              call 00442C12
:0044197D 83C418                  add esp, 00000018
:00441980 E8C814FDFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441798(U)
|
:00441985 8BE5                    mov esp, ebp
:00441987 5D                      pop ebp
:00441988 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0044675A   
|
:0044198B 55                      push ebp
:0044198C 8BEC                    mov ebp, esp
:0044198E 51                      push ecx
:0044198F 894DFC                  mov dword ptr [ebp-04], ecx
:00441992 8A4510                  mov al, byte ptr [ebp+10]
:00441995 50                      push eax
:00441996 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441999 E864000000              call 00441A02
:0044199E 85C0                    test eax, eax
:004419A0 7502                    jne 004419A4
:004419A2 EB58                    jmp 004419FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004419A0(C)
|
:004419A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004419A7 8B11                    mov edx, dword ptr [ecx]
:004419A9 83E240                  and edx, 00000040
:004419AC 85D2                    test edx, edx
:004419AE 740C                    je 004419BC
:004419B0 8A4510                  mov al, byte ptr [ebp+10]
:004419B3 50                      push eax
:004419B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004419B7 E8EF020000              call 00441CAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004419AE(C)
|
:004419BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004419BF 8B11                    mov edx, dword ptr [ecx]
:004419C1 81E200400000            and edx, 00004000
:004419C7 85D2                    test edx, edx
:004419C9 740C                    je 004419D7
:004419CB 8A450C                  mov al, byte ptr [ebp+0C]
:004419CE 50                      push eax
:004419CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004419D2 E804040000              call 00441DDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004419C9(C)
|
:004419D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004419DA 8B11                    mov edx, dword ptr [ecx]
:004419DC 81E200800000            and edx, 00008000
:004419E2 85D2                    test edx, edx
:004419E4 7416                    je 004419FC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004419E6 6A05                    push 00000005
:004419E8 8A4510                  mov al, byte ptr [ebp+10]
:004419EB 50                      push eax
:004419EC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004419EF 51                      push ecx
:004419F0 8A5508                  mov dl, byte ptr [ebp+08]
:004419F3 52                      push edx
:004419F4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004419F7 E8FBE3FFFF              call 0043FDF7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004419A2(U), :004419E4(C)
|
:004419FC 8BE5                    mov esp, ebp
:004419FE 5D                      pop ebp
:004419FF C20C00                  ret 000C



* Referenced by a CALL at Address:
|:00441999   
|
:00441A02 55                      push ebp
:00441A03 8BEC                    mov ebp, esp
:00441A05 51                      push ecx
:00441A06 894DFC                  mov dword ptr [ebp-04], ecx
:00441A09 8B45FC                  mov eax, dword ptr [ebp-04]
:00441A0C C70000000000            mov dword ptr [eax], 00000000
:00441A12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441A15 8B11                    mov edx, dword ptr [ecx]
:00441A17 83CA40                  or edx, 00000040
:00441A1A 8B45FC                  mov eax, dword ptr [ebp-04]
:00441A1D 8910                    mov dword ptr [eax], edx
:00441A1F 8A4D08                  mov cl, byte ptr [ebp+08]
:00441A22 51                      push ecx
:00441A23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441A26 E827000000              call 00441A52
:00441A2B 85C0                    test eax, eax
:00441A2D 7504                    jne 00441A33
:00441A2F 33C0                    xor eax, eax
:00441A31 EB19                    jmp 00441A4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441A2D(C)
|
:00441A33 8A5508                  mov dl, byte ptr [ebp+08]
:00441A36 52                      push edx
:00441A37 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441A3A E8F8000000              call 00441B37
:00441A3F 85C0                    test eax, eax
:00441A41 7504                    jne 00441A47
:00441A43 33C0                    xor eax, eax
:00441A45 EB05                    jmp 00441A4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441A41(C)
|
:00441A47 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441A31(U), :00441A45(U)
|
:00441A4C 8BE5                    mov esp, ebp
:00441A4E 5D                      pop ebp
:00441A4F C20400                  ret 0004



* Referenced by a CALL at Address:
|:00441A26   
|
:00441A52 55                      push ebp
:00441A53 8BEC                    mov ebp, esp
:00441A55 83EC08                  sub esp, 00000008
:00441A58 894DF8                  mov dword ptr [ebp-08], ecx
:00441A5B 8A4508                  mov al, byte ptr [ebp+08]
:00441A5E 50                      push eax
:00441A5F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441A62 E83E000000              call 00441AA5
:00441A67 8945FC                  mov dword ptr [ebp-04], eax
:00441A6A 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00441A6E 7507                    jne 00441A77
:00441A70 B801000000              mov eax, 00000001
:00441A75 EB28                    jmp 00441A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441A6E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00441A77 6A05                    push 00000005
:00441A79 8A4DFC                  mov cl, byte ptr [ebp-04]
:00441A7C 51                      push ecx
:00441A7D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441A80 E8A0CFFFFF              call 0043EA25
:00441A85 85C0                    test eax, eax
:00441A87 7504                    jne 00441A8D
:00441A89 33C0                    xor eax, eax
:00441A8B EB12                    jmp 00441A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441A87(C)
|
:00441A8D 8B55F8                  mov edx, dword ptr [ebp-08]
:00441A90 8B02                    mov eax, dword ptr [edx]
:00441A92 80CC40                  or ah, 40
:00441A95 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441A98 8901                    mov dword ptr [ecx], eax
:00441A9A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441A75(U), :00441A8B(U)
|
:00441A9F 8BE5                    mov esp, ebp
:00441AA1 5D                      pop ebp
:00441AA2 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00441A62   
|
:00441AA5 55                      push ebp
:00441AA6 8BEC                    mov ebp, esp
:00441AA8 83EC08                  sub esp, 00000008
:00441AAB 894DFC                  mov dword ptr [ebp-04], ecx
:00441AAE 8B4508                  mov eax, dword ptr [ebp+08]
:00441AB1 25FF000000              and eax, 000000FF
:00441AB6 8945F8                  mov dword ptr [ebp-08], eax
:00441AB9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441ABC 83E90F                  sub ecx, 0000000F
:00441ABF 894DF8                  mov dword ptr [ebp-08], ecx
:00441AC2 837DF81B                cmp dword ptr [ebp-08], 0000001B
:00441AC6 772E                    ja 00441AF6
:00441AC8 8B45F8                  mov eax, dword ptr [ebp-08]
:00441ACB 33D2                    xor edx, edx
:00441ACD 8A901B1B4400            mov dl, byte ptr [eax+00441B1B]
:00441AD3 FF2495FF1A4400          jmp dword ptr [4*edx+00441AFF]
:00441ADA B81B000000              mov eax, 0000001B
:00441ADF EB18                    jmp 00441AF9
:00441AE1 B81C000000              mov eax, 0000001C
:00441AE6 EB11                    jmp 00441AF9
:00441AE8 B81A000000              mov eax, 0000001A
:00441AED EB0A                    jmp 00441AF9
:00441AEF B81D000000              mov eax, 0000001D
:00441AF4 EB03                    jmp 00441AF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441AC6(C)
|
:00441AF6 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441ADF(U), :00441AE6(U), :00441AED(U), :00441AF4(U)
|
:00441AF9 8BE5                    mov esp, ebp
:00441AFB 5D                      pop ebp
:00441AFC C20400                  ret 0004



:00441AFF DA1A4400                DWORD 00441ADA
:00441B03 E11A4400                DWORD 00441AE1
:00441B07 E81A4400                DWORD 00441AE8
:00441B0B EF1A4400                DWORD 00441AEF
:00441B0F E11A4400                DWORD 00441AE1
:00441B13 EF1A4400                DWORD 00441AEF
:00441B17 F61A4400                DWORD 00441AF6


:00441B1B 0001                    add byte ptr [ecx], al
:00441B1D 0101                    add dword ptr [ecx], eax
:00441B1F 0101                    add dword ptr [ecx], eax
:00441B21 0101                    add dword ptr [ecx], eax
:00441B23 0106                    add dword ptr [esi], eax
:00441B25 06                      push es
:00441B26 06                      push es
:00441B27 06                      push es
:00441B28 06                      push es
:00441B29 06                      push es
:00441B2A 06                      push es
:00441B2B 06                      push es
:00441B2C 06                      push es
:00441B2D 06                      push es
:00441B2E 06                      push es
:00441B2F 06                      push es
:00441B30 06                      push es
:00441B31 0202                    add al, byte ptr [edx]
:00441B33 0203                    add al, byte ptr [ebx]
:00441B35 0405                    add al, 05

* Referenced by a CALL at Address:
|:00441A3A   
|
:00441B37 55                      push ebp
:00441B38 8BEC                    mov ebp, esp
:00441B3A 83EC0C                  sub esp, 0000000C
:00441B3D 894DF8                  mov dword ptr [ebp-08], ecx
:00441B40 8B4508                  mov eax, dword ptr [ebp+08]
:00441B43 25FF000000              and eax, 000000FF
:00441B48 8945F4                  mov dword ptr [ebp-0C], eax
:00441B4B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00441B4E 83E90C                  sub ecx, 0000000C
:00441B51 894DF4                  mov dword ptr [ebp-0C], ecx
:00441B54 837DF41E                cmp dword ptr [ebp-0C], 0000001E
:00441B58 0F87A8000000            ja 00441C06
:00441B5E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00441B61 33D2                    xor edx, edx
:00441B63 8A908C1C4400            mov dl, byte ptr [eax+00441C8C]
:00441B69 FF2495481C4400          jmp dword ptr [4*edx+00441C48]

* Possible Reference to String Resource ID=00006: ""
                                  |
:00441B70 C745FC06000000          mov [ebp-04], 00000006
:00441B77 E991000000              jmp 00441C0D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00441B7C C745FC03000000          mov [ebp-04], 00000003
:00441B83 E985000000              jmp 00441C0D
:00441B88 C745FC01000000          mov [ebp-04], 00000001
:00441B8F EB7C                    jmp 00441C0D
:00441B91 C745FC13000000          mov [ebp-04], 00000013
:00441B98 EB73                    jmp 00441C0D
:00441B9A C745FC14000000          mov [ebp-04], 00000014
:00441BA1 EB6A                    jmp 00441C0D
:00441BA3 C745FC15000000          mov [ebp-04], 00000015
:00441BAA EB61                    jmp 00441C0D

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00441BAC C745FC11000000          mov [ebp-04], 00000011
:00441BB3 EB58                    jmp 00441C0D

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00441BB5 C745FC10000000          mov [ebp-04], 00000010
:00441BBC EB4F                    jmp 00441C0D

* Possible Reference to String Resource ID=00015: ""
                                  |
:00441BBE C745FC0F000000          mov [ebp-04], 0000000F
:00441BC5 EB46                    jmp 00441C0D

* Possible Reference to String Resource ID=00018: "G"
                                  |
:00441BC7 C745FC12000000          mov [ebp-04], 00000012
:00441BCE EB3D                    jmp 00441C0D

* Possible Reference to String Resource ID=00012: ""
                                  |
:00441BD0 C745FC0C000000          mov [ebp-04], 0000000C
:00441BD7 EB34                    jmp 00441C0D

* Possible Reference to String Resource ID=00013: ""
                                  |
:00441BD9 C745FC0D000000          mov [ebp-04], 0000000D
:00441BE0 EB2B                    jmp 00441C0D

* Possible Reference to String Resource ID=00014: ""
                                  |
:00441BE2 C745FC0E000000          mov [ebp-04], 0000000E
:00441BE9 EB22                    jmp 00441C0D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441BEB C745FC04000000          mov [ebp-04], 00000004
:00441BF2 EB19                    jmp 00441C0D
:00441BF4 C745FC17000000          mov [ebp-04], 00000017
:00441BFB EB10                    jmp 00441C0D

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00441BFD C745FC02000000          mov [ebp-04], 00000002
:00441C04 EB07                    jmp 00441C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441B58(C)
|
:00441C06 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441B77(U), :00441B83(U), :00441B8F(U), :00441B98(U), :00441BA1(U)
|:00441BAA(U), :00441BB3(U), :00441BBC(U), :00441BC5(U), :00441BCE(U)
|:00441BD7(U), :00441BE0(U), :00441BE9(U), :00441BF2(U), :00441BFB(U)
|:00441C04(U)
|
:00441C0D 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00441C11 7507                    jne 00441C1A
:00441C13 B801000000              mov eax, 00000001
:00441C18 EB28                    jmp 00441C42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441C11(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00441C1A 6A05                    push 00000005
:00441C1C 8A4DFC                  mov cl, byte ptr [ebp-04]
:00441C1F 51                      push ecx
:00441C20 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441C23 E8BEBEFFFF              call 0043DAE6
:00441C28 85C0                    test eax, eax
:00441C2A 7504                    jne 00441C30
:00441C2C 33C0                    xor eax, eax
:00441C2E EB12                    jmp 00441C42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441C2A(C)
|
:00441C30 8B55F8                  mov edx, dword ptr [ebp-08]
:00441C33 8B02                    mov eax, dword ptr [edx]
:00441C35 80CC80                  or ah, 80
:00441C38 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441C3B 8901                    mov dword ptr [ecx], eax
:00441C3D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441C18(U), :00441C2E(U)
|
:00441C42 8BE5                    mov esp, ebp
:00441C44 5D                      pop ebp
:00441C45 C20400                  ret 0004



:00441C48 701B4400                DWORD 00441B70
:00441C4C 7C1B4400                DWORD 00441B7C
:00441C50 881B4400                DWORD 00441B88
:00441C54 911B4400                DWORD 00441B91
:00441C58 9A1B4400                DWORD 00441B9A
:00441C5C A31B4400                DWORD 00441BA3
:00441C60 AC1B4400                DWORD 00441BAC
:00441C64 B51B4400                DWORD 00441BB5
:00441C68 BE1B4400                DWORD 00441BBE
:00441C6C C71B4400                DWORD 00441BC7
:00441C70 D01B4400                DWORD 00441BD0
:00441C74 D91B4400                DWORD 00441BD9
:00441C78 E21B4400                DWORD 00441BE2
:00441C7C EB1B4400                DWORD 00441BEB
:00441C80 F41B4400                DWORD 00441BF4
:00441C84 FD1B4400                DWORD 00441BFD
:00441C88 061C4400                DWORD 00441C06


:00441C8C 0010                    add byte ptr [eax], dl
:00441C8E 1001                    adc byte ptr [ecx], al
:00441C90 0203                    add al, byte ptr [ebx]
:00441C92 0405                    add al, 05
:00441C94 06                      push es
:00441C95 07                      pop es
:00441C96 0809                    or byte ptr [ecx], cl
:00441C98 1010                    adc byte ptr [eax], dl
:00441C9A 1010                    adc byte ptr [eax], dl
:00441C9C 1010                    adc byte ptr [eax], dl
:00441C9E 1010                    adc byte ptr [eax], dl
:00441CA0 1010                    adc byte ptr [eax], dl
:00441CA2 1010                    adc byte ptr [eax], dl
:00441CA4 100A                    adc byte ptr [edx], cl
:00441CA6 0B                      BYTE 0bh
:00441CA7 0C                      BYTE 0ch
:00441CA8 0D                      BYTE 0dh
:00441CA9 0E                      BYTE 0eh
:00441CAA 0F                      BYTE 0fh


* Referenced by a CALL at Address:
|:004419B7   
|
:00441CAB 55                      push ebp
:00441CAC 8BEC                    mov ebp, esp
:00441CAE 51                      push ecx
:00441CAF 894DFC                  mov dword ptr [ebp-04], ecx
:00441CB2 8B4508                  mov eax, dword ptr [ebp+08]
:00441CB5 25FF000000              and eax, 000000FF
:00441CBA 83F80F                  cmp eax, 0000000F
:00441CBD 7516                    jne 00441CD5
:00441CBF 8B0DB0414700            mov ecx, dword ptr [004741B0]
:00441CC5 51                      push ecx
:00441CC6 B9800D4B00              mov ecx, 004B0D80
:00441CCB E8D9FE0100              call 00461BA9
:00441CD0 E900010000              jmp 00441DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441CBD(C)
|
:00441CD5 8B5508                  mov edx, dword ptr [ebp+08]
:00441CD8 81E2FF000000            and edx, 000000FF
:00441CDE 83FA10                  cmp edx, 00000010
:00441CE1 7C23                    jl 00441D06
:00441CE3 8B4508                  mov eax, dword ptr [ebp+08]
:00441CE6 25FF000000              and eax, 000000FF
:00441CEB 83F817                  cmp eax, 00000017
:00441CEE 7F16                    jg 00441D06
:00441CF0 8B0DC0414700            mov ecx, dword ptr [004741C0]
:00441CF6 51                      push ecx
:00441CF7 B9800D4B00              mov ecx, 004B0D80
:00441CFC E8A8FE0100              call 00461BA9
:00441D01 E9CF000000              jmp 00441DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441CE1(C), :00441CEE(C)
|
:00441D06 8B5508                  mov edx, dword ptr [ebp+08]
:00441D09 81E2FF000000            and edx, 000000FF
:00441D0F 83FA0C                  cmp edx, 0000000C
:00441D12 7515                    jne 00441D29
:00441D14 A1EC414700              mov eax, dword ptr [004741EC]
:00441D19 50                      push eax
:00441D1A B9800D4B00              mov ecx, 004B0D80
:00441D1F E885FE0100              call 00461BA9
:00441D24 E9AC000000              jmp 00441DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D12(C)
|
:00441D29 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441D2C 81E1FF000000            and ecx, 000000FF
:00441D32 83F925                  cmp ecx, 00000025
:00441D35 7516                    jne 00441D4D
:00441D37 8B15C0414700            mov edx, dword ptr [004741C0]
:00441D3D 52                      push edx
:00441D3E B9800D4B00              mov ecx, 004B0D80
:00441D43 E861FE0100              call 00461BA9
:00441D48 E988000000              jmp 00441DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D35(C)
|
:00441D4D 8B4508                  mov eax, dword ptr [ebp+08]
:00441D50 25FF000000              and eax, 000000FF
:00441D55 83F826                  cmp eax, 00000026
:00441D58 7513                    jne 00441D6D
:00441D5A 8B0DC0414700            mov ecx, dword ptr [004741C0]
:00441D60 51                      push ecx
:00441D61 B9800D4B00              mov ecx, 004B0D80
:00441D66 E83EFE0100              call 00461BA9
:00441D6B EB68                    jmp 00441DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D58(C)
|
:00441D6D 8B5508                  mov edx, dword ptr [ebp+08]
:00441D70 81E2FF000000            and edx, 000000FF
:00441D76 83FA27                  cmp edx, 00000027
:00441D79 7512                    jne 00441D8D
:00441D7B A1C0414700              mov eax, dword ptr [004741C0]
:00441D80 50                      push eax
:00441D81 B9800D4B00              mov ecx, 004B0D80
:00441D86 E81EFE0100              call 00461BA9
:00441D8B EB48                    jmp 00441DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D79(C)
|
:00441D8D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441D90 81E1FF000000            and ecx, 000000FF
:00441D96 83F928                  cmp ecx, 00000028
:00441D99 740E                    je 00441DA9
:00441D9B 8B5508                  mov edx, dword ptr [ebp+08]
:00441D9E 81E2FF000000            and edx, 000000FF
:00441DA4 83FA2A                  cmp edx, 0000002A
:00441DA7 750E                    jne 00441DB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D99(C)
|
:00441DA9 6A18                    push 00000018
:00441DAB B9800D4B00              mov ecx, 004B0D80
:00441DB0 E8F4FD0100              call 00461BA9
:00441DB5 EB1E                    jmp 00441DD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441DA7(C)
|
:00441DB7 8B4508                  mov eax, dword ptr [ebp+08]
:00441DBA 25FF000000              and eax, 000000FF
:00441DBF 83F829                  cmp eax, 00000029
:00441DC2 7511                    jne 00441DD5
:00441DC4 8B0DC0414700            mov ecx, dword ptr [004741C0]
:00441DCA 51                      push ecx
:00441DCB B9800D4B00              mov ecx, 004B0D80
:00441DD0 E8D4FD0100              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441CD0(U), :00441D01(U), :00441D24(U), :00441D48(U), :00441D6B(U)
|:00441D8B(U), :00441DB5(U), :00441DC2(C)
|
:00441DD5 8BE5                    mov esp, ebp
:00441DD7 5D                      pop ebp
:00441DD8 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004419D2   
|
:00441DDB 55                      push ebp
:00441DDC 8BEC                    mov ebp, esp
:00441DDE 51                      push ecx
:00441DDF 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00441DE2 6A05                    push 00000005
:00441DE4 8A4508                  mov al, byte ptr [ebp+08]
:00441DE7 50                      push eax
:00441DE8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441DEB E8AFF8FFFF              call 0044169F
:00441DF0 8BE5                    mov esp, ebp
:00441DF2 5D                      pop ebp
:00441DF3 C20400                  ret 0004


:00441DF6 CC                      int 03
:00441DF7 CC                      int 03
:00441DF8 CC                      int 03
:00441DF9 CC                      int 03
:00441DFA CC                      int 03
:00441DFB CC                      int 03
:00441DFC CC                      int 03
:00441DFD CC                      int 03
:00441DFE CC                      int 03
:00441DFF CC                      int 03
:00441E00 55                      push ebp
:00441E01 8BEC                    mov ebp, esp
:00441E03 E807000000              call 00441E0F
:00441E08 E811000000              call 00441E1E
:00441E0D 5D                      pop ebp
:00441E0E C3                      ret



* Referenced by a CALL at Address:
|:00441E03   
|
:00441E0F 55                      push ebp
:00441E10 8BEC                    mov ebp, esp
:00441E12 B9A8034B00              mov ecx, 004B03A8
:00441E17 E8D80E0000              call 00442CF4
:00441E1C 5D                      pop ebp
:00441E1D C3                      ret



* Referenced by a CALL at Address:
|:00441E08   
|
:00441E1E 55                      push ebp
:00441E1F 8BEC                    mov ebp, esp
:00441E21 68301E4400              push 00441E30
:00441E26 E845B60200              call 0046D470
:00441E2B 83C404                  add esp, 00000004
:00441E2E 5D                      pop ebp
:00441E2F C3                      ret


:00441E30 55                      push ebp
:00441E31 8BEC                    mov ebp, esp
:00441E33 B9A8034B00              mov ecx, 004B03A8
:00441E38 E8F40E0000              call 00442D31
:00441E3D 5D                      pop ebp
:00441E3E C3                      ret


:00441E3F 55                      push ebp
:00441E40 8BEC                    mov ebp, esp
:00441E42 E807000000              call 00441E4E
:00441E47 E81E000000              call 00441E6A
:00441E4C 5D                      pop ebp
:00441E4D C3                      ret



* Referenced by a CALL at Address:
|:00441E42   
|
:00441E4E 55                      push ebp
:00441E4F 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00015: ""
                                  |
:00441E51 6A0F                    push 0000000F

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00441E53 6A0A                    push 0000000A
:00441E55 68F8000000              push 000000F8
:00441E5A 6A58                    push 00000058
:00441E5C 6A4C                    push 0000004C
:00441E5E B958044B00              mov ecx, 004B0458
:00441E63 E85875FEFF              call 004293C0
:00441E68 5D                      pop ebp
:00441E69 C3                      ret



* Referenced by a CALL at Address:
|:00441E47   
|
:00441E6A 55                      push ebp
:00441E6B 8BEC                    mov ebp, esp
:00441E6D 687C1E4400              push 00441E7C
:00441E72 E8F9B50200              call 0046D470
:00441E77 83C404                  add esp, 00000004
:00441E7A 5D                      pop ebp
:00441E7B C3                      ret


:00441E7C 55                      push ebp
:00441E7D 8BEC                    mov ebp, esp
:00441E7F B958044B00              mov ecx, 004B0458
:00441E84 E8173EFEFF              call 00425CA0
:00441E89 5D                      pop ebp
:00441E8A C3                      ret



* Referenced by a CALL at Addresses:
|:0042FF50   , :00430DB0   , :00430FED   , :004357BA   , :004396E4   
|:0043C3CF   
|
:00441E8B 55                      push ebp
:00441E8C 8BEC                    mov ebp, esp
:00441E8E 83EC2C                  sub esp, 0000002C
:00441E91 56                      push esi
:00441E92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441E95 81E1FF000000            and ecx, 000000FF
:00441E9B 6BC924                  imul ecx, 00000024
:00441E9E 81C108F54A00            add ecx, 004AF508
:00441EA4 E8F774FEFF              call 004293A0
:00441EA9 668B00                  mov ax, word ptr [eax]
:00441EAC 668945D4                mov word ptr [ebp-2C], ax
:00441EB0 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00441EB3 51                      push ecx
:00441EB4 E8EA060200              call 004625A3
:00441EB9 83C404                  add esp, 00000004
:00441EBC 8845D8                  mov byte ptr [ebp-28], al
:00441EBF 8B75D4                  mov esi, dword ptr [ebp-2C]
:00441EC2 81E6FF000000            and esi, 000000FF
:00441EC8 6BF603                  imul esi, 00000003
:00441ECB B9A8034B00              mov ecx, 004B03A8
:00441ED0 E8AB0E0000              call 00442D80
:00441ED5 2BF0                    sub esi, eax
:00441ED7 8975FC                  mov dword ptr [ebp-04], esi
:00441EDA 8B75D5                  mov esi, dword ptr [ebp-2B]
:00441EDD 81E6FF000000            and esi, 000000FF
:00441EE3 6BF603                  imul esi, 00000003
:00441EE6 B9A8034B00              mov ecx, 004B03A8
:00441EEB E8A10E0000              call 00442D91
:00441EF0 2BF0                    sub esi, eax
:00441EF2 8975E0                  mov dword ptr [ebp-20], esi
:00441EF5 8B550C                  mov edx, dword ptr [ebp+0C]
:00441EF8 52                      push edx
:00441EF9 8D45E8                  lea eax, dword ptr [ebp-18]
:00441EFC 50                      push eax
:00441EFD E81C68FEFF              call 0042871E
:00441F02 83C408                  add esp, 00000008
:00441F05 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00441F09 7505                    jne 00441F10
:00441F0B E91B020000              jmp 0044212B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441F09(C)
|
:00441F10 837DFC00                cmp dword ptr [ebp-04], 00000000
:00441F14 7C36                    jl 00441F4C
:00441F16 837DE000                cmp dword ptr [ebp-20], 00000000
:00441F1A 7C30                    jl 00441F4C
:00441F1C B9A8034B00              mov ecx, 004B03A8
:00441F21 E863490000              call 00446889
:00441F26 99                      cdq
:00441F27 83E20F                  and edx, 0000000F
:00441F2A 03C2                    add eax, edx
:00441F2C C1F804                  sar eax, 04
:00441F2F 3945FC                  cmp dword ptr [ebp-04], eax
:00441F32 7D18                    jge 00441F4C
:00441F34 B9A8034B00              mov ecx, 004B03A8
:00441F39 E872490000              call 004468B0
:00441F3E 99                      cdq
:00441F3F 83E20F                  and edx, 0000000F
:00441F42 03C2                    add eax, edx
:00441F44 C1F804                  sar eax, 04
:00441F47 3945E0                  cmp dword ptr [ebp-20], eax
:00441F4A 7C05                    jl 00441F51

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441F14(C), :00441F1A(C), :00441F32(C)
|
:00441F4C E9DA010000              jmp 0044212B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441F4A(C)
|
:00441F51 8B75D4                  mov esi, dword ptr [ebp-2C]
:00441F54 81E6FF000000            and esi, 000000FF
:00441F5A 6BF603                  imul esi, 00000003
:00441F5D B9A8034B00              mov ecx, 004B03A8
:00441F62 E8190E0000              call 00442D80
:00441F67 83C001                  add eax, 00000001
:00441F6A 3BF0                    cmp esi, eax
:00441F6C 7D09                    jge 00441F77
:00441F6E C745FC00000000          mov [ebp-04], 00000000
:00441F75 EB1E                    jmp 00441F95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441F6C(C)
|
:00441F77 8B75D4                  mov esi, dword ptr [ebp-2C]
:00441F7A 81E6FF000000            and esi, 000000FF
:00441F80 6BF603                  imul esi, 00000003
:00441F83 B9A8034B00              mov ecx, 004B03A8
:00441F88 E8F30D0000              call 00442D80
:00441F8D 2BF0                    sub esi, eax
:00441F8F 83EE01                  sub esi, 00000001
:00441F92 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441F75(U)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441F95 6A04                    push 00000004
:00441F97 B9A8134800              mov ecx, 004813A8
:00441F9C E85361FCFF              call 004080F4
:00441FA1 8B4D10                  mov ecx, dword ptr [ebp+10]
:00441FA4 81E1FF000000            and ecx, 000000FF
:00441FAA 51                      push ecx
:00441FAB B9A8134800              mov ecx, 004813A8
:00441FB0 E8A360FCFF              call 00408058
:00441FB5 6A00                    push 00000000
:00441FB7 B9A8134800              mov ecx, 004813A8
:00441FBC E8CF60FCFF              call 00408090
:00441FC1 6A01                    push 00000001
:00441FC3 B9A8134800              mov ecx, 004813A8
:00441FC8 E81161FCFF              call 004080DE
:00441FCD 6A00                    push 00000000
:00441FCF B9A8134800              mov ecx, 004813A8
:00441FD4 E8EF60FCFF              call 004080C8
:00441FD9 8B55D8                  mov edx, dword ptr [ebp-28]
:00441FDC 81E2FF000000            and edx, 000000FF

* Possible Reference to String Resource ID=00008: ""
                                  |
:00441FE2 B808000000              mov eax, 00000008
:00441FE7 2BC2                    sub eax, edx
:00441FE9 99                      cdq
:00441FEA 2BC2                    sub eax, edx
:00441FEC D1F8                    sar eax, 1
:00441FEE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441FF1 8D544801                lea edx, dword ptr [eax+2*ecx+01]
:00441FF5 8955E4                  mov dword ptr [ebp-1C], edx
:00441FF8 8B45E0                  mov eax, dword ptr [ebp-20]
:00441FFB 83C002                  add eax, 00000002
:00441FFE C1E004                  shl eax, 04
:00442001 83C008                  add eax, 00000008
:00442004 8945DC                  mov dword ptr [ebp-24], eax
:00442007 837DE402                cmp dword ptr [ebp-1C], 00000002
:0044200B 7307                    jnb 00442014
:0044200D C745E400000000          mov [ebp-1C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044200B(C)
|
:00442014 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00442017 81E1FF000000            and ecx, 000000FF
:0044201D 8B75E4                  mov esi, dword ptr [ebp-1C]
:00442020 03F1                    add esi, ecx
:00442022 B9A8034B00              mov ecx, 004B03A8
:00442027 E85D480000              call 00446889
:0044202C C1E804                  shr eax, 04
:0044202F D1E0                    shl eax, 1
:00442031 3BF0                    cmp esi, eax
:00442033 7226                    jb 0044205B
:00442035 B9A8034B00              mov ecx, 004B03A8
:0044203A E84A480000              call 00446889
:0044203F C1E804                  shr eax, 04
:00442042 D1E0                    shl eax, 1
:00442044 8B55D8                  mov edx, dword ptr [ebp-28]
:00442047 81E2FF000000            and edx, 000000FF
:0044204D 2BC2                    sub eax, edx
:0044204F 8945E4                  mov dword ptr [ebp-1C], eax
:00442052 8B45FC                  mov eax, dword ptr [ebp-04]
:00442055 83E801                  sub eax, 00000001
:00442058 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442033(C)
|
:0044205B 33C9                    xor ecx, ecx
:0044205D 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:00442063 83C104                  add ecx, 00000004
:00442066 51                      push ecx
:00442067 B9F8F44A00              mov ecx, 004AF4F8
:0044206C E81F34FEFF              call 00425490
:00442071 8B55DC                  mov edx, dword ptr [ebp-24]
:00442074 52                      push edx
:00442075 8B45E4                  mov eax, dword ptr [ebp-1C]
:00442078 50                      push eax
:00442079 B9A8134800              mov ecx, 004813A8
:0044207E E8285FFCFF              call 00407FAB
:00442083 6A00                    push 00000000
:00442085 B930DA4A00              mov ecx, 004ADA30
:0044208A E80F15FDFF              call 0041359E
:0044208F 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00442090 6A10                    push 00000010
:00442092 6A40                    push 00000040
:00442094 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00442097 51                      push ecx
:00442098 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044209B C1E203                  shl edx, 03
:0044209E 52                      push edx
:0044209F E82F0C0000              call 00442CD3
:004420A4 83C414                  add esp, 00000014
:004420A7 8D45E8                  lea eax, dword ptr [ebp-18]
:004420AA 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004420AB 68948F4700              push 00478F94
:004420B0 68A8134800              push 004813A8
:004420B5 E8BE6BFCFF              call 00408C78
:004420BA 83C40C                  add esp, 0000000C
:004420BD E8CE4AFEFF              call 00426B90
:004420C2 33C9                    xor ecx, ecx
:004420C4 8A0D3D0A4B00            mov cl, byte ptr [004B0A3D]
:004420CA 83C104                  add ecx, 00000004
:004420CD 51                      push ecx
:004420CE B9F8F44A00              mov ecx, 004AF4F8
:004420D3 E8B833FEFF              call 00425490
:004420D8 8B45FC                  mov eax, dword ptr [ebp-04]
:004420DB 99                      cdq
:004420DC 33C2                    xor eax, edx
:004420DE 2BC2                    sub eax, edx
:004420E0 83E001                  and eax, 00000001
:004420E3 33C2                    xor eax, edx
:004420E5 2BC2                    sub eax, edx
:004420E7 85C0                    test eax, eax
:004420E9 7409                    je 004420F4
:004420EB 8B55FC                  mov edx, dword ptr [ebp-04]
:004420EE 83EA01                  sub edx, 00000001
:004420F1 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004420E9(C)
|
:004420F4 6A00                    push 00000000
:004420F6 6A00                    push 00000000
:004420F8 B930DA4A00              mov ecx, 004ADA30
:004420FD E89C14FDFF              call 0041359E
:00442102 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00442103 6A10                    push 00000010
:00442105 6A40                    push 00000040
:00442107 8B45DC                  mov eax, dword ptr [ebp-24]
:0044210A 50                      push eax
:0044210B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044210E C1E103                  shl ecx, 03
:00442111 51                      push ecx
:00442112 E8FB0A0000              call 00442C12
:00442117 83C418                  add esp, 00000018
:0044211A E8714AFEFF              call 00426B90
:0044211F 6A00                    push 00000000
:00442121 B9A8134800              mov ecx, 004813A8
:00442126 E8B35FFCFF              call 004080DE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441F0B(U), :00441F4C(U)
|
:0044212B 5E                      pop esi
:0044212C 8BE5                    mov esp, ebp
:0044212E 5D                      pop ebp
:0044212F C3                      ret



* Referenced by a CALL at Addresses:
|:0042B386   , :0042B5FF   , :0042FF67   , :0043099C   , :004309AC   
|:00430DC7   , :00431004   , :004357D3   , :004375A7   , :004375B7   
|:004396FE   , :0043CA78   
|
:00442130 55                      push ebp
:00442131 8BEC                    mov ebp, esp
:00442133 83EC0C                  sub esp, 0000000C
:00442136 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00442139 E87256FCFF              call 004077B0
:0044213E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442141 81E1FF000000            and ecx, 000000FF
:00442147 6BC924                  imul ecx, 00000024
:0044214A 81C108F54A00            add ecx, 004AF508
:00442150 E84B72FEFF              call 004293A0
:00442155 668B00                  mov ax, word ptr [eax]
:00442158 50                      push eax
:00442159 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044215C 51                      push ecx
:0044215D E85B0A0000              call 00442BBD
:00442162 83C408                  add esp, 00000008
:00442165 50                      push eax
:00442166 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00442169 E822D6FEFF              call 0042F790
:0044216E B9A8034B00              mov ecx, 004B03A8
:00442173 E838470000              call 004468B0
:00442178 99                      cdq
:00442179 83E20F                  and edx, 0000000F
:0044217C 03C2                    add eax, edx
:0044217E C1F804                  sar eax, 04
:00442181 99                      cdq
:00442182 2BC2                    sub eax, edx
:00442184 D1F8                    sar eax, 1
:00442186 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00442187 B903000000              mov ecx, 00000003
:0044218C F7F9                    idiv ecx
:0044218E 6BC003                  imul eax, 00000003
:00442191 8945FC                  mov dword ptr [ebp-04], eax
:00442194 8B55F9                  mov edx, dword ptr [ebp-07]
:00442197 81E2FF000000            and edx, 000000FF
:0044219D 8B45FC                  mov eax, dword ptr [ebp-04]
:004421A0 25FF000000              and eax, 000000FF
:004421A5 3BD0                    cmp edx, eax
:004421A7 7D19                    jge 004421C2
:004421A9 B9A8034B00              mov ecx, 004B03A8
:004421AE E8DE0B0000              call 00442D91
:004421B3 85C0                    test eax, eax
:004421B5 750B                    jne 004421C2
:004421B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004421BA 83C103                  add ecx, 00000003
:004421BD 884DF9                  mov byte ptr [ebp-07], cl
:004421C0 EB09                    jmp 004421CB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004421A7(C), :004421B5(C)
|
:004421C2 8B55FC                  mov edx, dword ptr [ebp-04]
:004421C5 83EA09                  sub edx, 00000009
:004421C8 8855F9                  mov byte ptr [ebp-07], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004421C0(U)
|
:004421CB 8B4508                  mov eax, dword ptr [ebp+08]
:004421CE 668B4DF8                mov cx, word ptr [ebp-08]
:004421D2 668908                  mov word ptr [eax], cx
:004421D5 8B4508                  mov eax, dword ptr [ebp+08]
:004421D8 8BE5                    mov esp, ebp
:004421DA 5D                      pop ebp
:004421DB C3                      ret



* Referenced by a CALL at Addresses:
|:0042B40B   , :0042B684   , :0042FFD3   , :00430A50   , :00430A61   
|:00430E2F   , :0043106A   , :00435842   , :00437662   , :00437673   
|:0043976E   , :0043C40B   , :0043C42B   
|
:004421DC 55                      push ebp
:004421DD 8BEC                    mov ebp, esp
:004421DF 83EC14                  sub esp, 00000014
:004421E2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004421E5 81E1FF000000            and ecx, 000000FF
:004421EB 6BC924                  imul ecx, 00000024
:004421EE 81C108F54A00            add ecx, 004AF508
:004421F4 E8D7D4FEFF              call 0042F6D0
:004421F9 6BC070                  imul eax, 00000070
:004421FC 0598224900              add eax, 00492298
:00442201 8945FC                  mov dword ptr [ebp-04], eax
:00442204 8B4508                  mov eax, dword ptr [ebp+08]
:00442207 25FF000000              and eax, 000000FF
:0044220C 8945F0                  mov dword ptr [ebp-10], eax
:0044220F 8B4D09                  mov ecx, dword ptr [ebp+09]
:00442212 81E1FF000000            and ecx, 000000FF
:00442218 83C102                  add ecx, 00000002
:0044221B C1E104                  shl ecx, 04
:0044221E 83C108                  add ecx, 00000008
:00442221 894DEC                  mov dword ptr [ebp-14], ecx
:00442224 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442227 81E1FF000000            and ecx, 000000FF
:0044222D 6BC924                  imul ecx, 00000024
:00442230 81C108F54A00            add ecx, 004AF508
:00442236 E895D0FCFF              call 0040F2D0
:0044223B F7D8                    neg eax
:0044223D 1BC0                    sbb eax, eax
:0044223F 2540E7FFFF              and eax, FFFFE740
:00442244 05C0180000              add eax, 000018C0
:00442249 8945F8                  mov dword ptr [ebp-08], eax
:0044224C E8E10BFDFF              call 00412E32
:00442251 6A60                    push 00000060
:00442253 68C0000000              push 000000C0
:00442258 8B55EC                  mov edx, dword ptr [ebp-14]
:0044225B 52                      push edx
:0044225C 8B45F0                  mov eax, dword ptr [ebp-10]
:0044225F C1E003                  shl eax, 03
:00442262 50                      push eax
:00442263 E847050000              call 004427AF
:00442268 83C410                  add esp, 00000010
:0044226B 6800E70100              push 0001E700
:00442270 B930DA4A00              mov ecx, 004ADA30
:00442275 E82413FDFF              call 0041359E
:0044227A 0345F8                  add eax, dword ptr [ebp-08]
:0044227D 50                      push eax
:0044227E 6A30                    push 00000030
:00442280 6884000000              push 00000084
:00442285 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00442288 83C120                  add ecx, 00000020
:0044228B 51                      push ecx
:0044228C 8B55F0                  mov edx, dword ptr [ebp-10]
:0044228F 8D04D528000000          lea eax, dword ptr [8*edx+00000028]
:00442296 50                      push eax
:00442297 E8370A0000              call 00442CD3
:0044229C 83C414                  add esp, 00000014
:0044229F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004422A2 81E1FF000000            and ecx, 000000FF
:004422A8 6BC924                  imul ecx, 00000024
:004422AB 81C108F54A00            add ecx, 004AF508
:004422B1 E81AD0FCFF              call 0040F2D0
:004422B6 85C0                    test eax, eax
:004422B8 742D                    je 004422E7
:004422BA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004422BD 81E1FF000000            and ecx, 000000FF
:004422C3 6BC924                  imul ecx, 00000024
:004422C6 81C108F54A00            add ecx, 004AF508
:004422CC E81FD6FEFF              call 0042F8F0
:004422D1 25FF000000              and eax, 000000FF
:004422D6 83F807                  cmp eax, 00000007
:004422D9 7506                    jne 004422E1
:004422DB C645F40F                mov [ebp-0C], 0F
:004422DF EB04                    jmp 004422E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004422D9(C)
|
:004422E1 C645F40E                mov [ebp-0C], 0E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004422DF(U)
|
:004422E5 EB04                    jmp 004422EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004422B8(C)
|
:004422E7 C645F40C                mov [ebp-0C], 0C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004422E5(U)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004422EB 6A04                    push 00000004
:004422ED B9A8134800              mov ecx, 004813A8
:004422F2 E8FD5DFCFF              call 004080F4
:004422F7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004422FA 81E1FF000000            and ecx, 000000FF
:00442300 51                      push ecx
:00442301 B9A8134800              mov ecx, 004813A8
:00442306 E84D5DFCFF              call 00408058
:0044230B 8B55EC                  mov edx, dword ptr [ebp-14]
:0044230E 83C208                  add edx, 00000008
:00442311 52                      push edx
:00442312 8B45F0                  mov eax, dword ptr [ebp-10]
:00442315 83C001                  add eax, 00000001
:00442318 50                      push eax
:00442319 B9A8134800              mov ecx, 004813A8
:0044231E E8885CFCFF              call 00407FAB
:00442323 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442326 81E1FF000000            and ecx, 000000FF
:0044232C 6BC924                  imul ecx, 00000024
:0044232F 81C108F54A00            add ecx, 004AF508
:00442335 E8A6D3FEFF              call 0042F6E0
:0044233A 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0044233B 68988F4700              push 00478F98
:00442340 68A8134800              push 004813A8
:00442345 E82E69FCFF              call 00408C78
:0044234A 83C40C                  add esp, 0000000C
:0044234D 6A4F                    push 0000004F
:0044234F B9A8134800              mov ecx, 004813A8
:00442354 E8FF5CFCFF              call 00408058
:00442359 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044235C 83C108                  add ecx, 00000008
:0044235F 51                      push ecx
:00442360 8B55F0                  mov edx, dword ptr [ebp-10]
:00442363 83C20E                  add edx, 0000000E
:00442366 52                      push edx
:00442367 B9A8134800              mov ecx, 004813A8
:0044236C E83A5CFCFF              call 00407FAB
:00442371 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442374 81E1FF000000            and ecx, 000000FF
:0044237A 6BC924                  imul ecx, 00000024
:0044237D 81C108F54A00            add ecx, 004AF508
:00442383 E8F8D8FEFF              call 0042FC80
:00442388 25FF000000              and eax, 000000FF
:0044238D 50                      push eax
:0044238E E80049FCFF              call 00406C93
:00442393 83C404                  add esp, 00000004
:00442396 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00442397 689C8F4700              push 00478F9C
:0044239C 68A8134800              push 004813A8
:004423A1 E8D268FCFF              call 00408C78
:004423A6 83C40C                  add esp, 0000000C
:004423A9 6880000000              push 00000080
:004423AE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004423B1 81E1FF000000            and ecx, 000000FF
:004423B7 6BC924                  imul ecx, 00000024
:004423BA 81C108F54A00            add ecx, 004AF508
:004423C0 E8AB24FCFF              call 00404870
:004423C5 50                      push eax
:004423C6 8B45FC                  mov eax, dword ptr [ebp-04]
:004423C9 50                      push eax
:004423CA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004423CD 83C120                  add ecx, 00000020
:004423D0 51                      push ecx
:004423D1 8B55F0                  mov edx, dword ptr [ebp-10]
:004423D4 8D04D528000000          lea eax, dword ptr [8*edx+00000028]
:004423DB 50                      push eax

* Possible Reference to String Resource ID=00013: ""
                                  |
:004423DC 6A0D                    push 0000000D
:004423DE E8A2050000              call 00442985
:004423E3 83C418                  add esp, 00000018
:004423E6 6880000000              push 00000080
:004423EB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004423EE 81E1FF000000            and ecx, 000000FF
:004423F4 6BC924                  imul ecx, 00000024
:004423F7 81C108F54A00            add ecx, 004AF508
:004423FD E8AE24FCFF              call 004048B0
:00442402 50                      push eax
:00442403 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442406 51                      push ecx
:00442407 8B55EC                  mov edx, dword ptr [ebp-14]
:0044240A 83C238                  add edx, 00000038
:0044240D 52                      push edx
:0044240E 8B45F0                  mov eax, dword ptr [ebp-10]
:00442411 8D0CC528000000          lea ecx, dword ptr [8*eax+00000028]
:00442418 51                      push ecx

* Possible Reference to String Resource ID=00014: ""
                                  |
:00442419 6A0E                    push 0000000E
:0044241B E865050000              call 00442985
:00442420 83C418                  add esp, 00000018
:00442423 6A00                    push 00000000
:00442425 6800190000              push 00001900
:0044242A B940DF4A00              mov ecx, 004ADF40
:0044242F E86A11FDFF              call 0041359E
:00442434 50                      push eax
:00442435 6A18                    push 00000018
:00442437 6A18                    push 00000018
:00442439 8B55EC                  mov edx, dword ptr [ebp-14]
:0044243C 83C220                  add edx, 00000020
:0044243F 52                      push edx
:00442440 8B45F0                  mov eax, dword ptr [ebp-10]
:00442443 8D0CC508000000          lea ecx, dword ptr [8*eax+00000008]
:0044244A 51                      push ecx
:0044244B E8C2070000              call 00442C12
:00442450 83C418                  add esp, 00000018
:00442453 6A00                    push 00000000
:00442455 68401B0000              push 00001B40
:0044245A B940DF4A00              mov ecx, 004ADF40
:0044245F E83A11FDFF              call 0041359E
:00442464 50                      push eax
:00442465 6A18                    push 00000018
:00442467 6A18                    push 00000018
:00442469 8B55EC                  mov edx, dword ptr [ebp-14]
:0044246C 83C238                  add edx, 00000038
:0044246F 52                      push edx
:00442470 8B45F0                  mov eax, dword ptr [ebp-10]
:00442473 8D0CC508000000          lea ecx, dword ptr [8*eax+00000008]
:0044247A 51                      push ecx
:0044247B E892070000              call 00442C12
:00442480 83C418                  add esp, 00000018
:00442483 E8C509FDFF              call 00412E4D
:00442488 8BE5                    mov esp, ebp
:0044248A 5D                      pop ebp
:0044248B C3                      ret



* Referenced by a CALL at Addresses:
|:0042B44E   , :0042B6C7   , :00430013   , :00430AB5   , :00430AE2   
|:00430B11   , :00430B39   , :00430E6F   , :004310AA   , :00435881   
|:004376AF   , :004376C9   , :004397B1   , :0043C479   , :0043C4A1   
|
:0044248C 55                      push ebp
:0044248D 8BEC                    mov ebp, esp
:0044248F 83EC28                  sub esp, 00000028
:00442492 56                      push esi
:00442493 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442496 81E1FF000000            and ecx, 000000FF
:0044249C 6BC924                  imul ecx, 00000024
:0044249F 81C108F54A00            add ecx, 004AF508
:004424A5 E826D2FEFF              call 0042F6D0
:004424AA 6BC070                  imul eax, 00000070
:004424AD 0598224900              add eax, 00492298
:004424B2 8945FC                  mov dword ptr [ebp-04], eax
:004424B5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004424B8 81E1FF000000            and ecx, 000000FF
:004424BE 6BC924                  imul ecx, 00000024
:004424C1 81C108F54A00            add ecx, 004AF508
:004424C7 E8A423FCFF              call 00404870
:004424CC 8945E8                  mov dword ptr [ebp-18], eax
:004424CF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004424D2 81E1FF000000            and ecx, 000000FF
:004424D8 6BC924                  imul ecx, 00000024
:004424DB 81C108F54A00            add ecx, 004AF508
:004424E1 E8CA23FCFF              call 004048B0
:004424E6 8945F4                  mov dword ptr [ebp-0C], eax
:004424E9 8B4508                  mov eax, dword ptr [ebp+08]
:004424EC 25FF000000              and eax, 000000FF
:004424F1 8945F0                  mov dword ptr [ebp-10], eax
:004424F4 8B4D09                  mov ecx, dword ptr [ebp+09]
:004424F7 81E1FF000000            and ecx, 000000FF
:004424FD 83C102                  add ecx, 00000002
:00442500 C1E104                  shl ecx, 04
:00442503 83C108                  add ecx, 00000008
:00442506 894DEC                  mov dword ptr [ebp-14], ecx
:00442509 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044250C 81E1FF000000            and ecx, 000000FF
:00442512 6BC924                  imul ecx, 00000024
:00442515 81C108F54A00            add ecx, 004AF508
:0044251B E8B0CDFCFF              call 0040F2D0
:00442520 F7D8                    neg eax
:00442522 1BC0                    sbb eax, eax
:00442524 2540E7FFFF              and eax, FFFFE740
:00442529 05C0180000              add eax, 000018C0
:0044252E 8945F8                  mov dword ptr [ebp-08], eax
:00442531 8B5514                  mov edx, dword ptr [ebp+14]
:00442534 81E2FF000000            and edx, 000000FF
:0044253A 83E201                  and edx, 00000001
:0044253D F7DA                    neg edx
:0044253F 1BD2                    sbb edx, edx
:00442541 81E2600C0000            and edx, 00000C60
:00442547 8B45F8                  mov eax, dword ptr [ebp-08]
:0044254A 03C2                    add eax, edx
:0044254C 8945F8                  mov dword ptr [ebp-08], eax
:0044254F E8DE08FDFF              call 00412E32
:00442554 8B4D14                  mov ecx, dword ptr [ebp+14]
:00442557 81E1FF000000            and ecx, 000000FF
:0044255D 83E101                  and ecx, 00000001
:00442560 85C9                    test ecx, ecx
:00442562 0F851B010000            jne 00442683
:00442568 6A00                    push 00000000
:0044256A 6800E70100              push 0001E700
:0044256F B930DA4A00              mov ecx, 004ADA30
:00442574 E82510FDFF              call 0041359E
:00442579 0345F8                  add eax, dword ptr [ebp-08]
:0044257C 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044257D 6A08                    push 00000008
:0044257F 6884000000              push 00000084
:00442584 8B55EC                  mov edx, dword ptr [ebp-14]
:00442587 83C220                  add edx, 00000020
:0044258A 52                      push edx
:0044258B 8B45F0                  mov eax, dword ptr [ebp-10]
:0044258E 8D0CC528000000          lea ecx, dword ptr [8*eax+00000028]
:00442595 51                      push ecx
:00442596 E877060000              call 00442C12
:0044259B 83C418                  add esp, 00000018
:0044259E 8B5514                  mov edx, dword ptr [ebp+14]
:004425A1 81E2FF000000            and edx, 000000FF
:004425A7 81E280000000            and edx, 00000080
:004425AD 85D2                    test edx, edx
:004425AF 745A                    je 0044260B
:004425B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004425B4 81E1FF000000            and ecx, 000000FF
:004425BA 6BC924                  imul ecx, 00000024
:004425BD 81C108F54A00            add ecx, 004AF508
:004425C3 E8A822FCFF              call 00404870
:004425C8 8BF0                    mov esi, eax
:004425CA 037510                  add esi, dword ptr [ebp+10]
:004425CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004425D0 E80BFFFBFF              call 004024E0
:004425D5 3BF0                    cmp esi, eax
:004425D7 7D1F                    jge 004425F8
:004425D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004425DC 81E1FF000000            and ecx, 000000FF
:004425E2 6BC924                  imul ecx, 00000024
:004425E5 81C108F54A00            add ecx, 004AF508
:004425EB E88022FCFF              call 00404870
:004425F0 034510                  add eax, dword ptr [ebp+10]
:004425F3 8945E4                  mov dword ptr [ebp-1C], eax
:004425F6 EB0B                    jmp 00442603

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004425D7(C)
|
:004425F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004425FB E8E0FEFBFF              call 004024E0
:00442600 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004425F6(U)
|
:00442603 8B45E4                  mov eax, dword ptr [ebp-1C]
:00442606 8945E8                  mov dword ptr [ebp-18], eax
:00442609 EB4A                    jmp 00442655

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004425AF(C)
|
:0044260B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044260E 81E1FF000000            and ecx, 000000FF
:00442614 6BC924                  imul ecx, 00000024
:00442617 81C108F54A00            add ecx, 004AF508
:0044261D E84E22FCFF              call 00404870
:00442622 2B4510                  sub eax, dword ptr [ebp+10]
:00442625 85C0                    test eax, eax
:00442627 7E1F                    jle 00442648
:00442629 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044262C 81E1FF000000            and ecx, 000000FF
:00442632 6BC924                  imul ecx, 00000024
:00442635 81C108F54A00            add ecx, 004AF508
:0044263B E83022FCFF              call 00404870
:00442640 2B4510                  sub eax, dword ptr [ebp+10]
:00442643 8945E0                  mov dword ptr [ebp-20], eax
:00442646 EB07                    jmp 0044264F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442627(C)
|
:00442648 C745E000000000          mov [ebp-20], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442646(U)
|
:0044264F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00442652 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442609(U)
|
:00442655 6880000000              push 00000080
:0044265A 8B55E8                  mov edx, dword ptr [ebp-18]
:0044265D 52                      push edx
:0044265E 8B45FC                  mov eax, dword ptr [ebp-04]
:00442661 50                      push eax
:00442662 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00442665 83C120                  add ecx, 00000020
:00442668 51                      push ecx
:00442669 8B55F0                  mov edx, dword ptr [ebp-10]
:0044266C 8D04D528000000          lea eax, dword ptr [8*edx+00000028]
:00442673 50                      push eax

* Possible Reference to String Resource ID=00013: ""
                                  |
:00442674 6A0D                    push 0000000D
:00442676 E80A030000              call 00442985
:0044267B 83C418                  add esp, 00000018
:0044267E E922010000              jmp 004427A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442562(C)
|
:00442683 6A00                    push 00000000
:00442685 6800E70100              push 0001E700
:0044268A B930DA4A00              mov ecx, 004ADA30
:0044268F E80A0FFDFF              call 0041359E
:00442694 0345F8                  add eax, dword ptr [ebp-08]
:00442697 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:00442698 6A08                    push 00000008
:0044269A 6884000000              push 00000084
:0044269F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004426A2 83C138                  add ecx, 00000038
:004426A5 51                      push ecx
:004426A6 8B55F0                  mov edx, dword ptr [ebp-10]
:004426A9 8D04D528000000          lea eax, dword ptr [8*edx+00000028]
:004426B0 50                      push eax
:004426B1 E85C050000              call 00442C12
:004426B6 83C418                  add esp, 00000018
:004426B9 8B4D14                  mov ecx, dword ptr [ebp+14]
:004426BC 81E1FF000000            and ecx, 000000FF
:004426C2 81E180000000            and ecx, 00000080
:004426C8 85C9                    test ecx, ecx
:004426CA 7466                    je 00442732
:004426CC 6A13                    push 00000013
:004426CE B9800D4B00              mov ecx, 004B0D80
:004426D3 E8D1F40100              call 00461BA9
:004426D8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004426DB 81E1FF000000            and ecx, 000000FF
:004426E1 6BC924                  imul ecx, 00000024
:004426E4 81C108F54A00            add ecx, 004AF508
:004426EA E8C121FCFF              call 004048B0
:004426EF 8BF0                    mov esi, eax
:004426F1 037510                  add esi, dword ptr [ebp+10]
:004426F4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004426F7 E815FEFBFF              call 00402511
:004426FC 3BF0                    cmp esi, eax
:004426FE 7D1F                    jge 0044271F
:00442700 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442703 81E1FF000000            and ecx, 000000FF
:00442709 6BC924                  imul ecx, 00000024
:0044270C 81C108F54A00            add ecx, 004AF508
:00442712 E89921FCFF              call 004048B0
:00442717 034510                  add eax, dword ptr [ebp+10]
:0044271A 8945DC                  mov dword ptr [ebp-24], eax
:0044271D EB0B                    jmp 0044272A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004426FE(C)
|
:0044271F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442722 E8EAFDFBFF              call 00402511
:00442727 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044271D(U)
|
:0044272A 8B55DC                  mov edx, dword ptr [ebp-24]
:0044272D 8955F4                  mov dword ptr [ebp-0C], edx
:00442730 EB4A                    jmp 0044277C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004426CA(C)
|
:00442732 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442735 81E1FF000000            and ecx, 000000FF
:0044273B 6BC924                  imul ecx, 00000024
:0044273E 81C108F54A00            add ecx, 004AF508
:00442744 E86721FCFF              call 004048B0
:00442749 2B4510                  sub eax, dword ptr [ebp+10]
:0044274C 85C0                    test eax, eax
:0044274E 7E1F                    jle 0044276F
:00442750 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442753 81E1FF000000            and ecx, 000000FF
:00442759 6BC924                  imul ecx, 00000024
:0044275C 81C108F54A00            add ecx, 004AF508
:00442762 E84921FCFF              call 004048B0
:00442767 2B4510                  sub eax, dword ptr [ebp+10]
:0044276A 8945D8                  mov dword ptr [ebp-28], eax
:0044276D EB07                    jmp 00442776

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044274E(C)
|
:0044276F C745D800000000          mov [ebp-28], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044276D(U)
|
:00442776 8B45D8                  mov eax, dword ptr [ebp-28]
:00442779 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442730(U)
|
:0044277C 6880000000              push 00000080
:00442781 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442784 51                      push ecx
:00442785 8B55FC                  mov edx, dword ptr [ebp-04]
:00442788 52                      push edx
:00442789 8B45EC                  mov eax, dword ptr [ebp-14]
:0044278C 83C038                  add eax, 00000038
:0044278F 50                      push eax
:00442790 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00442793 8D14CD28000000          lea edx, dword ptr [8*ecx+00000028]
:0044279A 52                      push edx

* Possible Reference to String Resource ID=00014: ""
                                  |
:0044279B 6A0E                    push 0000000E
:0044279D E8E3010000              call 00442985
:004427A2 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044267E(U)
|
:004427A5 E8A306FDFF              call 00412E4D
:004427AA 5E                      pop esi
:004427AB 8BE5                    mov esp, ebp
:004427AD 5D                      pop ebp
:004427AE C3                      ret



* Referenced by a CALL at Addresses:
|:00442263   , :00446288   
|
:004427AF 55                      push ebp
:004427B0 8BEC                    mov ebp, esp
:004427B2 81EC10010000            sub esp, 00000110
:004427B8 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:004427BE 8945FC                  mov dword ptr [ebp-04], eax
:004427C1 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:004427CB EB18                    jmp 004427E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044281C(U)
|
:004427CD 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:004427D3 83C101                  add ecx, 00000001
:004427D6 898DF4FEFFFF            mov dword ptr [ebp+FFFFFEF4], ecx
:004427DC 8B55FC                  mov edx, dword ptr [ebp-04]
:004427DF 83C201                  add edx, 00000001
:004427E2 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004427CB(U)
|
:004427E5 81BDF4FEFFFF00010000    cmp dword ptr [ebp+FFFFFEF4], 00000100
:004427EF 732D                    jnb 0044281E
:004427F1 8B85F4FEFFFF            mov eax, dword ptr [ebp+FFFFFEF4]
:004427F7 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004427F9 B902000000              mov ecx, 00000002
:004427FE F7F1                    div ecx
:00442800 F7DA                    neg edx
:00442802 1BD2                    sbb edx, edx
:00442804 80E201                  and dl, 01
:00442807 81C2FF000000            add edx, 000000FF
:0044280D 52                      push edx
:0044280E 6A01                    push 00000001
:00442810 8B55FC                  mov edx, dword ptr [ebp-04]
:00442813 52                      push edx
:00442814 E82F000200              call 00462848
:00442819 83C40C                  add esp, 0000000C
:0044281C EBAF                    jmp 004427CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004427EF(C)
|
:0044281E E80F06FDFF              call 00412E32
:00442823 8B450C                  mov eax, dword ptr [ebp+0C]
:00442826 8985F0FEFFFF            mov dword ptr [ebp+FFFFFEF0], eax
:0044282C EB0F                    jmp 0044283D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442898(U)
|
:0044282E 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00442834 83C110                  add ecx, 00000010
:00442837 898DF0FEFFFF            mov dword ptr [ebp+FFFFFEF0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044282C(U)
|
:0044283D 8B550C                  mov edx, dword ptr [ebp+0C]
:00442840 035514                  add edx, dword ptr [ebp+14]
:00442843 3995F0FEFFFF            cmp dword ptr [ebp+FFFFFEF0], edx
:00442849 734F                    jnb 0044289A
:0044284B 8B4508                  mov eax, dword ptr [ebp+08]
:0044284E 8985F8FEFFFF            mov dword ptr [ebp+FFFFFEF8], eax
:00442854 EB0F                    jmp 00442865

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442896(U)
|
:00442856 8B8DF8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF8]
:0044285C 83C110                  add ecx, 00000010
:0044285F 898DF8FEFFFF            mov dword ptr [ebp+FFFFFEF8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442854(U)
|
:00442865 8B5508                  mov edx, dword ptr [ebp+08]
:00442868 035510                  add edx, dword ptr [ebp+10]
:0044286B 3995F8FEFFFF            cmp dword ptr [ebp+FFFFFEF8], edx
:00442871 7325                    jnb 00442898

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00442873 6A02                    push 00000002
:00442875 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:0044287B 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044287C 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044287E 6A10                    push 00000010
:00442880 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00442886 51                      push ecx
:00442887 8B95F8FEFFFF            mov edx, dword ptr [ebp+FFFFFEF8]
:0044288D 52                      push edx
:0044288E E87F030000              call 00442C12
:00442893 83C418                  add esp, 00000018
:00442896 EBBE                    jmp 00442856

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442871(C)
|
:00442898 EB94                    jmp 0044282E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442849(C)
|
:0044289A E8AE05FDFF              call 00412E4D
:0044289F 8BE5                    mov esp, ebp
:004428A1 5D                      pop ebp
:004428A2 C3                      ret



* Referenced by a CALL at Addresses:
|:004429B2   , :00442A0B   , :00442B34   
|
:004428A3 55                      push ebp
:004428A4 8BEC                    mov ebp, esp
:004428A6 83EC14                  sub esp, 00000014
:004428A9 8B4514                  mov eax, dword ptr [ebp+14]
:004428AC 8945FC                  mov dword ptr [ebp-04], eax
:004428AF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004428B2 894DF0                  mov dword ptr [ebp-10], ecx
:004428B5 837DF00D                cmp dword ptr [ebp-10], 0000000D
:004428B9 7408                    je 004428C3
:004428BB 837DF00E                cmp dword ptr [ebp-10], 0000000E
:004428BF 7415                    je 004428D6
:004428C1 EB26                    jmp 004428E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004428B9(C)
|
:004428C3 8B5514                  mov edx, dword ptr [ebp+14]
:004428C6 8955F8                  mov dword ptr [ebp-08], edx
:004428C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004428CC E80FFCFBFF              call 004024E0
:004428D1 8945FC                  mov dword ptr [ebp-04], eax
:004428D4 EB35                    jmp 0044290B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004428BF(C)
|
:004428D6 8B4514                  mov eax, dword ptr [ebp+14]
:004428D9 8945F8                  mov dword ptr [ebp-08], eax
:004428DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004428DF E82DFCFBFF              call 00402511
:004428E4 8945FC                  mov dword ptr [ebp-04], eax
:004428E7 EB22                    jmp 0044290B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004428C1(U)
|
:004428E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004428EC 51                      push ecx
:004428ED E8DE43FCFF              call 00406CD0
:004428F2 83C404                  add esp, 00000004
:004428F5 8945F4                  mov dword ptr [ebp-0C], eax
:004428F8 8B550C                  mov edx, dword ptr [ebp+0C]
:004428FB 52                      push edx
:004428FC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004428FF 50                      push eax
:00442900 E8D1ECFBFF              call 004015D6
:00442905 83C408                  add esp, 00000008
:00442908 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004428D4(U), :004428E7(U)
|
:0044290B 837D1002                cmp dword ptr [ebp+10], 00000002
:0044290F 7426                    je 00442937
:00442911 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00442918 741D                    je 00442937
:0044291A 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044291E 7417                    je 00442937
:00442920 837DF800                cmp dword ptr [ebp-08], 00000000
:00442924 7411                    je 00442937
:00442926 8B45F8                  mov eax, dword ptr [ebp-08]
:00442929 69C0FF000000            imul eax, 000000FF
:0044292F 33D2                    xor edx, edx
:00442931 F775FC                  div [ebp-04]
:00442934 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044290F(C), :00442918(C), :0044291E(C), :00442924(C)
|
:00442937 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044293A 894DEC                  mov dword ptr [ebp-14], ecx
:0044293D 837DEC00                cmp dword ptr [ebp-14], 00000000
:00442941 7408                    je 0044294B
:00442943 837DEC01                cmp dword ptr [ebp-14], 00000001
:00442947 7423                    je 0044296C
:00442949 EB33                    jmp 0044297E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442941(C)
|
:0044294B 817DF8A1000000          cmp dword ptr [ebp-08], 000000A1
:00442952 7204                    jb 00442958
:00442954 33C0                    xor eax, eax
:00442956 EB29                    jmp 00442981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442952(C)
|
:00442958 837DF851                cmp dword ptr [ebp-08], 00000051
:0044295C 7207                    jb 00442965
:0044295E B801000000              mov eax, 00000001
:00442963 EB1C                    jmp 00442981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044295C(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00442965 B802000000              mov eax, 00000002
:0044296A EB15                    jmp 00442981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442947(C)
|
:0044296C 8B4518                  mov eax, dword ptr [ebp+18]
:0044296F 0FAF45F8                imul eax, dword ptr [ebp-08]
:00442973 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00442975 B9FF000000              mov ecx, 000000FF
:0044297A F7F1                    div ecx
:0044297C EB03                    jmp 00442981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442949(U)
|
:0044297E 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442956(U), :00442963(U), :0044296A(U), :0044297C(U)
|
:00442981 8BE5                    mov esp, ebp
:00442983 5D                      pop ebp
:00442984 C3                      ret



* Referenced by a CALL at Addresses:
|:004423DE   , :0044241B   , :00442676   , :0044279D   
|
:00442985 55                      push ebp
:00442986 8BEC                    mov ebp, esp
:00442988 83EC10                  sub esp, 00000010
:0044298B 8B4510                  mov eax, dword ptr [ebp+10]
:0044298E 8D0CC540000000          lea ecx, dword ptr [8*eax+00000040]
:00442995 C1E903                  shr ecx, 03
:00442998 894DF8                  mov dword ptr [ebp-08], ecx
:0044299B E89204FDFF              call 00412E32
:004429A0 8B551C                  mov edx, dword ptr [ebp+1C]
:004429A3 52                      push edx
:004429A4 8B4518                  mov eax, dword ptr [ebp+18]
:004429A7 50                      push eax
:004429A8 6A00                    push 00000000
:004429AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004429AD 51                      push ecx
:004429AE 8B5514                  mov edx, dword ptr [ebp+14]
:004429B1 52                      push edx
:004429B2 E8ECFEFFFF              call 004428A3
:004429B7 83C414                  add esp, 00000014
:004429BA 8B0485708E4700          mov eax, dword ptr [4*eax+00478E70]
:004429C1 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004429C4 6A0A                    push 0000000A
:004429C6 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004429C8 6A0A                    push 0000000A
:004429CA 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:004429CD 51                      push ecx
:004429CE 8B55F8                  mov edx, dword ptr [ebp-08]
:004429D1 52                      push edx
:004429D2 8B450C                  mov eax, dword ptr [ebp+0C]
:004429D5 50                      push eax
:004429D6 E81F05FDFF              call 00412EFA
:004429DB 83C418                  add esp, 00000018
:004429DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004429E1 51                      push ecx
:004429E2 B940DF4A00              mov ecx, 004ADF40
:004429E7 E8B20BFDFF              call 0041359E
:004429EC 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:004429ED 6A08                    push 00000008

* Possible Reference to String Resource ID=00008: ""
                                  |
:004429EF 6A08                    push 00000008
:004429F1 E8B6850200              call 0046AFAC
:004429F6 83C40C                  add esp, 0000000C
:004429F9 8B551C                  mov edx, dword ptr [ebp+1C]
:004429FC 52                      push edx
:004429FD 8B4518                  mov eax, dword ptr [ebp+18]
:00442A00 50                      push eax
:00442A01 6A01                    push 00000001
:00442A03 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442A06 51                      push ecx
:00442A07 8B5514                  mov edx, dword ptr [ebp+14]
:00442A0A 52                      push edx
:00442A0B E893FEFFFF              call 004428A3
:00442A10 83C414                  add esp, 00000014
:00442A13 8945F4                  mov dword ptr [ebp-0C], eax
:00442A16 837DF400                cmp dword ptr [ebp-0C], 00000000
:00442A1A 7427                    je 00442A43

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00442A1C 6A02                    push 00000002
:00442A1E 8B45F8                  mov eax, dword ptr [ebp-08]
:00442A21 83C008                  add eax, 00000008
:00442A24 50                      push eax
:00442A25 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442A28 8B550C                  mov edx, dword ptr [ebp+0C]
:00442A2B 8D440AFF                lea eax, dword ptr [edx+ecx-01]
:00442A2F 50                      push eax
:00442A30 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00442A33 83C101                  add ecx, 00000001
:00442A36 51                      push ecx
:00442A37 8B550C                  mov edx, dword ptr [ebp+0C]
:00442A3A 52                      push edx
:00442A3B E8CF8C0200              call 0046B70F
:00442A40 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442A1A(C)
|
:00442A43 E80504FDFF              call 00412E4D
:00442A48 6A00                    push 00000000
:00442A4A B9A8134800              mov ecx, 004813A8
:00442A4F E83C56FCFF              call 00408090

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442A54 6A04                    push 00000004
:00442A56 B9A8134800              mov ecx, 004813A8
:00442A5B E89456FCFF              call 004080F4
:00442A60 6A01                    push 00000001
:00442A62 B9A8134800              mov ecx, 004813A8
:00442A67 E87256FCFF              call 004080DE
:00442A6C 6A00                    push 00000000
:00442A6E B9A8134800              mov ecx, 004813A8
:00442A73 E85056FCFF              call 004080C8
:00442A78 6A4F                    push 0000004F
:00442A7A B9A8134800              mov ecx, 004813A8
:00442A7F E8D455FCFF              call 00408058
:00442A84 8B4508                  mov eax, dword ptr [ebp+08]
:00442A87 8945F0                  mov dword ptr [ebp-10], eax
:00442A8A 837DF00D                cmp dword ptr [ebp-10], 0000000D
:00442A8E 7408                    je 00442A98
:00442A90 837DF00E                cmp dword ptr [ebp-10], 0000000E
:00442A94 743B                    je 00442AD1
:00442A96 EB72                    jmp 00442B0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442A8E(C)
|
:00442A98 8B4D10                  mov ecx, dword ptr [ebp+10]
:00442A9B 51                      push ecx
:00442A9C 8B550C                  mov edx, dword ptr [ebp+0C]
:00442A9F C1EA03                  shr edx, 03
:00442AA2 83C203                  add edx, 00000003
:00442AA5 52                      push edx
:00442AA6 B9A8134800              mov ecx, 004813A8
:00442AAB E8FB54FCFF              call 00407FAB
:00442AB0 8B4D14                  mov ecx, dword ptr [ebp+14]
:00442AB3 E828FAFBFF              call 004024E0
:00442AB8 50                      push eax
:00442AB9 8B4518                  mov eax, dword ptr [ebp+18]
:00442ABC 50                      push eax

* Possible StringData Ref from Data Obj ->"%4u /%4u"
                                  |
:00442ABD 68A08F4700              push 00478FA0
:00442AC2 68A8134800              push 004813A8
:00442AC7 E8AC61FCFF              call 00408C78
:00442ACC 83C410                  add esp, 00000010
:00442ACF EB7E                    jmp 00442B4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442A94(C)
|
:00442AD1 8B4D10                  mov ecx, dword ptr [ebp+10]
:00442AD4 51                      push ecx
:00442AD5 8B550C                  mov edx, dword ptr [ebp+0C]
:00442AD8 C1EA03                  shr edx, 03
:00442ADB 83C203                  add edx, 00000003
:00442ADE 52                      push edx
:00442ADF B9A8134800              mov ecx, 004813A8
:00442AE4 E8C254FCFF              call 00407FAB
:00442AE9 8B4D14                  mov ecx, dword ptr [ebp+14]
:00442AEC E820FAFBFF              call 00402511
:00442AF1 50                      push eax
:00442AF2 8B4518                  mov eax, dword ptr [ebp+18]
:00442AF5 50                      push eax

* Possible StringData Ref from Data Obj ->"%4u /%4u"
                                  |
:00442AF6 68AC8F4700              push 00478FAC
:00442AFB 68A8134800              push 004813A8
:00442B00 E87361FCFF              call 00408C78
:00442B05 83C410                  add esp, 00000010
:00442B08 EB45                    jmp 00442B4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442A96(U)
|
:00442B0A 8B4D10                  mov ecx, dword ptr [ebp+10]
:00442B0D 51                      push ecx
:00442B0E 8B550C                  mov edx, dword ptr [ebp+0C]
:00442B11 C1EA03                  shr edx, 03
:00442B14 83C205                  add edx, 00000005
:00442B17 52                      push edx
:00442B18 B9A8134800              mov ecx, 004813A8
:00442B1D E88954FCFF              call 00407FAB
:00442B22 8B451C                  mov eax, dword ptr [ebp+1C]
:00442B25 50                      push eax
:00442B26 8B4D18                  mov ecx, dword ptr [ebp+18]
:00442B29 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00442B2A 6A02                    push 00000002
:00442B2C 8B5508                  mov edx, dword ptr [ebp+08]
:00442B2F 52                      push edx
:00442B30 8B4514                  mov eax, dword ptr [ebp+14]
:00442B33 50                      push eax
:00442B34 E86AFDFFFF              call 004428A3
:00442B39 83C414                  add esp, 00000014
:00442B3C 50                      push eax

* Possible StringData Ref from Data Obj ->"%4u"
                                  |
:00442B3D 68B88F4700              push 00478FB8
:00442B42 68A8134800              push 004813A8
:00442B47 E82C61FCFF              call 00408C78
:00442B4C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442ACF(U), :00442B08(U)
|
:00442B4F 6A00                    push 00000000
:00442B51 B9A8134800              mov ecx, 004813A8
:00442B56 E88355FCFF              call 004080DE
:00442B5B 8BE5                    mov esp, ebp
:00442B5D 5D                      pop ebp
:00442B5E C3                      ret


:00442B5F 55                      push ebp
:00442B60 8BEC                    mov ebp, esp
:00442B62 51                      push ecx
:00442B63 B9C8E24A00              mov ecx, 004AE2C8
:00442B68 E863C6FCFF              call 0040F1D0
:00442B6D 8945FC                  mov dword ptr [ebp-04], eax
:00442B70 8B45FC                  mov eax, dword ptr [ebp-04]
:00442B73 2500400000              and eax, 00004000
:00442B78 85C0                    test eax, eax
:00442B7A 7419                    je 00442B95
:00442B7C 837D0800                cmp dword ptr [ebp+08], 00000000
:00442B80 7513                    jne 00442B95
:00442B82 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442B85 80E5BF                  and ch, BF
:00442B88 51                      push ecx
:00442B89 B9C8E24A00              mov ecx, 004AE2C8
:00442B8E E8FD24FEFF              call 00425090
:00442B93 EB24                    jmp 00442BB9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442B7A(C), :00442B80(C)
|
:00442B95 8B55FC                  mov edx, dword ptr [ebp-04]
:00442B98 81E200400000            and edx, 00004000
:00442B9E 85D2                    test edx, edx
:00442BA0 7517                    jne 00442BB9
:00442BA2 837D0800                cmp dword ptr [ebp+08], 00000000
:00442BA6 7411                    je 00442BB9
:00442BA8 8B45FC                  mov eax, dword ptr [ebp-04]
:00442BAB 80CC40                  or ah, 40
:00442BAE 50                      push eax
:00442BAF B9C8E24A00              mov ecx, 004AE2C8
:00442BB4 E8D724FEFF              call 00425090

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442B93(U), :00442BA0(C), :00442BA6(C)
|
:00442BB9 8BE5                    mov esp, ebp
:00442BBB 5D                      pop ebp
:00442BBC C3                      ret



* Referenced by a CALL at Addresses:
|:00439E7E   , :0043ABAF   , :0043ABD9   , :0043B0EE   , :0043B30C   
|:0043B532   , :0044215D   
|
:00442BBD 55                      push ebp
:00442BBE 8BEC                    mov ebp, esp
:00442BC0 51                      push ecx
:00442BC1 53                      push ebx
:00442BC2 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00442BC5 E8E64BFCFF              call 004077B0
:00442BCA 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:00442BCD 81E3FF000000            and ebx, 000000FF
:00442BD3 6BDB03                  imul ebx, 00000003
:00442BD6 B9A8034B00              mov ecx, 004B03A8
:00442BDB E8A0010000              call 00442D80
:00442BE0 2BD8                    sub ebx, eax
:00442BE2 885DFC                  mov byte ptr [ebp-04], bl
:00442BE5 8B5D0D                  mov ebx, dword ptr [ebp+0D]
:00442BE8 81E3FF000000            and ebx, 000000FF
:00442BEE 6BDB03                  imul ebx, 00000003
:00442BF1 B9A8034B00              mov ecx, 004B03A8
:00442BF6 E896010000              call 00442D91
:00442BFB 2BD8                    sub ebx, eax
:00442BFD 885DFD                  mov byte ptr [ebp-03], bl
:00442C00 8B4508                  mov eax, dword ptr [ebp+08]
:00442C03 668B4DFC                mov cx, word ptr [ebp-04]
:00442C07 668908                  mov word ptr [eax], cx
:00442C0A 8B4508                  mov eax, dword ptr [ebp+08]
:00442C0D 5B                      pop ebx
:00442C0E 8BE5                    mov esp, ebp
:00442C10 5D                      pop ebp
:00442C11 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A290   , :0042A2C2   , :0042A307   , :0042D899   , :0042D8FA   
|:0042E171   , :0042E1B5   , :0042E20C   , :0042E23F   , :0042E27A   
|:0042E2C7   , :0042E33B   , :0042E3A7   , :0042E41D   , :0042E491   
|:0042E51A   , :0042E56E   , :0042E716   , :0042E748   , :0042E78A   
|:0042E814   , :0042E84F   , :0042E89D   , :0042EA22   , :0042EA81   
|:0042EAEB   , :0042EB52   , :0042EBDB   , :0042EC2F   , :0042ED93   
|:0042EDC5   , :0042EE07   , :0042EE8F   , :0042EECA   , :0042EF18   
|:0042F0DB   , :0042F158   , :0042F1E0   , :0042F268   , :0042F2F6   
|:0042F34A   , :00439D8D   , :00439FE9   , :0043A124   , :0043A19A   
|:0043A23F   , :0043A2C4   , :0043A33A   , :0043A878   , :0043A8AB   
|:0043A979   , :0043A9AC   , :0043ACE5   , :0043AD54   , :0043ADC4   
|:0043AE26   , :0043AE86   , :0043AEDE   , :0043AF4E   , :0043B180   
|:0043B1BF   , :0043B1ED   , :0043B248   , :0043B2B8   , :0043B3AE   
|:0043B3F8   , :0043B42A   , :0043B482   , :0043B4F2   , :0043FF1A   
|:0043FF53   , :0043FF91   , :0043FFCC   , :00440007   , :00440051   
|:004400C1   , :0044010A   , :0044035A   , :004403C0   , :00440454   
|:00440481   , :0044053A   , :00440567   , :004405A9   , :004405F0   
|:00440666   , :004406A7   , :00440734   , :004407AA   , :00440B1F   
|:00440B52   , :00440B98   , :00441113   , :00441166   , :004411B4   
|:004411E1   , :00441245   , :00441372   , :004413B5   , :0044141D   
|:00441467   , :004414D7   , :00441543   , :00441576   , :004415C0   
|:00441630   , :00441671   , :00441849   , :0044187A   , :004418C4   
|:00441934   , :00441978   , :00442112   , :0044244B   , :0044247B   
|:00442596   , :004426B1   , :0044288E   , :00443777   , :004437DC   
|:00443840   , :00443904   , :00443A29   , :00443A76   , :00443AC0   
|:00443C47   , :004462B7   
|
:00442C12 55                      push ebp
:00442C13 8BEC                    mov ebp, esp
:00442C15 B9A8034B00              mov ecx, 004B03A8
:00442C1A E8913C0000              call 004468B0
:00442C1F 83C007                  add eax, 00000007
:00442C22 99                      cdq
:00442C23 B930000000              mov ecx, 00000030
:00442C28 F7F9                    idiv ecx
:00442C2A 6BC030                  imul eax, 00000030
:00442C2D 83C028                  add eax, 00000028
:00442C30 50                      push eax
:00442C31 B9A8034B00              mov ecx, 004B03A8
:00442C36 E84E3C0000              call 00446889
:00442C3B 83C02F                  add eax, 0000002F
:00442C3E 99                      cdq
:00442C3F B930000000              mov ecx, 00000030
:00442C44 F7F9                    idiv ecx
:00442C46 6BC030                  imul eax, 00000030
:00442C49 50                      push eax
:00442C4A 6A28                    push 00000028
:00442C4C 6A00                    push 00000000
:00442C4E E84D820200              call 0046AEA0
:00442C53 83C410                  add esp, 00000010
:00442C56 6A00                    push 00000000
:00442C58 6A00                    push 00000000
:00442C5A 8B551C                  mov edx, dword ptr [ebp+1C]
:00442C5D 52                      push edx
:00442C5E E8AD810200              call 0046AE10
:00442C63 83C40C                  add esp, 0000000C
:00442C66 8B4518                  mov eax, dword ptr [ebp+18]
:00442C69 50                      push eax
:00442C6A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00442C6D 51                      push ecx
:00442C6E 8B5510                  mov edx, dword ptr [ebp+10]
:00442C71 52                      push edx
:00442C72 8B450C                  mov eax, dword ptr [ebp+0C]
:00442C75 50                      push eax
:00442C76 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442C79 51                      push ecx
:00442C7A E8688F0200              call 0046BBE7
:00442C7F 83C414                  add esp, 00000014
:00442C82 6A00                    push 00000000
:00442C84 6A00                    push 00000000
:00442C86 6A00                    push 00000000
:00442C88 E883810200              call 0046AE10
:00442C8D 83C40C                  add esp, 0000000C
:00442C90 B9A8034B00              mov ecx, 004B03A8
:00442C95 E8163C0000              call 004468B0
:00442C9A 83C007                  add eax, 00000007
:00442C9D 99                      cdq
:00442C9E B930000000              mov ecx, 00000030
:00442CA3 F7F9                    idiv ecx
:00442CA5 6BC030                  imul eax, 00000030
:00442CA8 83C028                  add eax, 00000028
:00442CAB 50                      push eax
:00442CAC B9A8034B00              mov ecx, 004B03A8
:00442CB1 E8D33B0000              call 00446889
:00442CB6 83C02F                  add eax, 0000002F
:00442CB9 99                      cdq
:00442CBA B930000000              mov ecx, 00000030
:00442CBF F7F9                    idiv ecx
:00442CC1 6BC030                  imul eax, 00000030
:00442CC4 50                      push eax
:00442CC5 6A28                    push 00000028
:00442CC7 6A00                    push 00000000
:00442CC9 E8D2810200              call 0046AEA0
:00442CCE 83C410                  add esp, 00000010
:00442CD1 5D                      pop ebp
:00442CD2 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A22B   , :00439F26   , :0043A436   , :0043A85B   , :0043A95C   
|:0043FEC7   , :004402EC   , :00440A8B   , :00440AC8   , :00440C5F   
|:00440DA4   , :00440EE9   , :0044102D   , :0044118C   , :00441207   
|:00441314   , :004413DB   , :004417B9   , :004417F4   , :0044209F   
|:00442297   
|
:00442CD3 55                      push ebp
:00442CD4 8BEC                    mov ebp, esp
:00442CD6 8B4518                  mov eax, dword ptr [ebp+18]
:00442CD9 50                      push eax
:00442CDA 8B4D14                  mov ecx, dword ptr [ebp+14]
:00442CDD 51                      push ecx
:00442CDE 8B5510                  mov edx, dword ptr [ebp+10]
:00442CE1 52                      push edx
:00442CE2 8B450C                  mov eax, dword ptr [ebp+0C]
:00442CE5 50                      push eax
:00442CE6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442CE9 51                      push ecx
:00442CEA E8AE900200              call 0046BD9D
:00442CEF 83C414                  add esp, 00000014
:00442CF2 5D                      pop ebp
:00442CF3 C3                      ret



* Referenced by a CALL at Address:
|:00441E17   
|
:00442CF4 55                      push ebp
:00442CF5 8BEC                    mov ebp, esp
:00442CF7 51                      push ecx
:00442CF8 894DFC                  mov dword ptr [ebp-04], ecx
:00442CFB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442CFE 83C144                  add ecx, 00000044
:00442D01 E8AA4AFCFF              call 004077B0
:00442D06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442D09 83C146                  add ecx, 00000046
:00442D0C E89F4AFCFF              call 004077B0
:00442D11 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442D14 83C154                  add ecx, 00000054
:00442D17 E8944AFCFF              call 004077B0
:00442D1C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442D1F 81C182000000            add ecx, 00000082
:00442D25 E8864AFCFF              call 004077B0
:00442D2A 8B45FC                  mov eax, dword ptr [ebp-04]
:00442D2D 8BE5                    mov esp, ebp
:00442D2F 5D                      pop ebp
:00442D30 C3                      ret



* Referenced by a CALL at Address:
|:00441E38   
|
:00442D31 55                      push ebp
:00442D32 8BEC                    mov ebp, esp
:00442D34 51                      push ecx
:00442D35 894DFC                  mov dword ptr [ebp-04], ecx
:00442D38 8BE5                    mov esp, ebp
:00442D3A 5D                      pop ebp
:00442D3B C3                      ret



* Referenced by a CALL at Addresses:
|:00443D3D   , :00443D67   , :004464BE   , :004503CF   
|
:00442D3C 55                      push ebp
:00442D3D 8BEC                    mov ebp, esp
:00442D3F 51                      push ecx
:00442D40 894DFC                  mov dword ptr [ebp-04], ecx
:00442D43 8B45FC                  mov eax, dword ptr [ebp-04]
:00442D46 8B403C                  mov eax, dword ptr [eax+3C]
:00442D49 8BE5                    mov esp, ebp
:00442D4B 5D                      pop ebp
:00442D4C C3                      ret



* Referenced by a CALL at Addresses:
|:00443D52   , :00443D7C   , :004464F1   , :00450406   
|
:00442D4D 55                      push ebp
:00442D4E 8BEC                    mov ebp, esp
:00442D50 51                      push ecx
:00442D51 894DFC                  mov dword ptr [ebp-04], ecx
:00442D54 8B45FC                  mov eax, dword ptr [ebp-04]
:00442D57 8B4040                  mov eax, dword ptr [eax+40]
:00442D5A 8BE5                    mov esp, ebp
:00442D5C 5D                      pop ebp
:00442D5D C3                      ret


:00442D5E 55                      push ebp
:00442D5F 8BEC                    mov ebp, esp
:00442D61 51                      push ecx
:00442D62 894DFC                  mov dword ptr [ebp-04], ecx
:00442D65 8B45FC                  mov eax, dword ptr [ebp-04]
:00442D68 83C044                  add eax, 00000044
:00442D6B 8BE5                    mov esp, ebp
:00442D6D 5D                      pop ebp
:00442D6E C3                      ret


:00442D6F 55                      push ebp
:00442D70 8BEC                    mov ebp, esp
:00442D72 51                      push ecx
:00442D73 894DFC                  mov dword ptr [ebp-04], ecx
:00442D76 8B45FC                  mov eax, dword ptr [ebp-04]
:00442D79 83C046                  add eax, 00000046
:00442D7C 8BE5                    mov esp, ebp
:00442D7E 5D                      pop ebp
:00442D7F C3                      ret



* Referenced by a CALL at Addresses:
|:0042A1D2   , :0042CCD5   , :0042CD33   , :0042D55D   , :0042D952   
|:0042ED64   , :00439C6E   , :0043A63A   , :0043A682   , :0043FE6A   
|:0044027F   , :004402AF   , :00440A01   , :00440A31   , :004412A7   
|:004412D7   , :004416F2   , :00441722   , :00441ED0   , :00441F62   
|:00441F88   , :00442BDB   , :00445912   , :004464D1   , :004503E4   
|:00459268   , :0045939D   
|
:00442D80 55                      push ebp
:00442D81 8BEC                    mov ebp, esp
:00442D83 51                      push ecx
:00442D84 894DFC                  mov dword ptr [ebp-04], ecx
:00442D87 8B45FC                  mov eax, dword ptr [ebp-04]
:00442D8A 8B4004                  mov eax, dword ptr [eax+04]
:00442D8D 8BE5                    mov esp, ebp
:00442D8F 5D                      pop ebp
:00442D90 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A1ED   , :0042CCBB   , :0042CD40   , :0042D579   , :0042D95F   
|:0042ED51   , :00439C7D   , :0043A65E   , :0043A6A6   , :0043FE7F   
|:00440297   , :004402C1   , :00440A16   , :00440A46   , :004412BC   
|:004412E9   , :00441707   , :00441734   , :00441EEB   , :004421AE   
|:00442BF6   , :0044591D   , :00446504   , :0045041B   , :0045924F   
|:00459384   
|
:00442D91 55                      push ebp
:00442D92 8BEC                    mov ebp, esp
:00442D94 51                      push ecx
:00442D95 894DFC                  mov dword ptr [ebp-04], ecx
:00442D98 8B45FC                  mov eax, dword ptr [ebp-04]
:00442D9B 8B4008                  mov eax, dword ptr [eax+08]
:00442D9E 8BE5                    mov esp, ebp
:00442DA0 5D                      pop ebp
:00442DA1 C3                      ret



* Referenced by a CALL at Addresses:
|:0045503C   , :00457FD6   
|
:00442DA2 55                      push ebp
:00442DA3 8BEC                    mov ebp, esp
:00442DA5 83EC0C                  sub esp, 0000000C
:00442DA8 894DFC                  mov dword ptr [ebp-04], ecx
:00442DAB 8B45FC                  mov eax, dword ptr [ebp-04]
:00442DAE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442DB1 89483C                  mov dword ptr [eax+3C], ecx
:00442DB4 8B55FC                  mov edx, dword ptr [ebp-04]
:00442DB7 8B450C                  mov eax, dword ptr [ebp+0C]
:00442DBA 894240                  mov dword ptr [edx+40], eax
:00442DBD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442DC0 8B5510                  mov edx, dword ptr [ebp+10]
:00442DC3 895114                  mov dword ptr [ecx+14], edx
:00442DC6 8B45FC                  mov eax, dword ptr [ebp-04]
:00442DC9 8B4D14                  mov ecx, dword ptr [ebp+14]
:00442DCC 894818                  mov dword ptr [eax+18], ecx
:00442DCF 8B55FC                  mov edx, dword ptr [ebp-04]
:00442DD2 C7420400000000          mov [edx+04], 00000000
:00442DD9 8B45FC                  mov eax, dword ptr [ebp-04]
:00442DDC C7400800000000          mov [eax+08], 00000000
:00442DE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442DE6 C7414800000000          mov [ecx+48], 00000000
:00442DED 8B55FC                  mov edx, dword ptr [ebp-04]
:00442DF0 C7424C00000000          mov [edx+4C], 00000000
:00442DF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00442DFA C7405000000000          mov [eax+50], 00000000
:00442E01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442E04 C64154FF                mov [ecx+54], FF
:00442E08 8B55FC                  mov edx, dword ptr [ebp-04]
:00442E0B C64255FF                mov [edx+55], FF
:00442E0F 8B45FC                  mov eax, dword ptr [ebp-04]
:00442E12 C74058FFFF0000          mov [eax+58], 0000FFFF
:00442E19 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442E1C C7415CFFFF0000          mov [ecx+5C], 0000FFFF
:00442E23 8B55FC                  mov edx, dword ptr [ebp-04]
:00442E26 C6426000                mov [edx+60], 00
:00442E2A 8B45FC                  mov eax, dword ptr [ebp-04]
:00442E2D C6406100                mov [eax+61], 00
:00442E31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442E34 C70101000000            mov dword ptr [ecx], 00000001
:00442E3A 33D2                    xor edx, edx
:00442E3C 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00442E42 6BD203                  imul edx, 00000003
:00442E45 C1E204                  shl edx, 04
:00442E48 8B45FC                  mov eax, dword ptr [ebp-04]
:00442E4B 895034                  mov dword ptr [eax+34], edx
:00442E4E 33C9                    xor ecx, ecx
:00442E50 8A0D810A4B00            mov cl, byte ptr [004B0A81]
:00442E56 6BC903                  imul ecx, 00000003
:00442E59 C1E104                  shl ecx, 04
:00442E5C 8B55FC                  mov edx, dword ptr [ebp-04]
:00442E5F 894A38                  mov dword ptr [edx+38], ecx
:00442E62 8B45FC                  mov eax, dword ptr [ebp-04]
:00442E65 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442E68 8B502C                  mov edx, dword ptr [eax+2C]
:00442E6B 3B5134                  cmp edx, dword ptr [ecx+34]
:00442E6E 7D0B                    jge 00442E7B
:00442E70 8B45FC                  mov eax, dword ptr [ebp-04]
:00442E73 8B482C                  mov ecx, dword ptr [eax+2C]
:00442E76 894DF8                  mov dword ptr [ebp-08], ecx
:00442E79 EB09                    jmp 00442E84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442E6E(C)
|
:00442E7B 8B55FC                  mov edx, dword ptr [ebp-04]
:00442E7E 8B4234                  mov eax, dword ptr [edx+34]
:00442E81 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442E79(U)
|
:00442E84 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442E87 8B55F8                  mov edx, dword ptr [ebp-08]
:00442E8A 895124                  mov dword ptr [ecx+24], edx
:00442E8D 8B45FC                  mov eax, dword ptr [ebp-04]
:00442E90 8B4838                  mov ecx, dword ptr [eax+38]
:00442E93 83C128                  add ecx, 00000028
:00442E96 8B55FC                  mov edx, dword ptr [ebp-04]
:00442E99 394A30                  cmp dword ptr [edx+30], ecx
:00442E9C 7D0B                    jge 00442EA9
:00442E9E 8B45FC                  mov eax, dword ptr [ebp-04]
:00442EA1 8B4830                  mov ecx, dword ptr [eax+30]
:00442EA4 894DF4                  mov dword ptr [ebp-0C], ecx
:00442EA7 EB0C                    jmp 00442EB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442E9C(C)
|
:00442EA9 8B55FC                  mov edx, dword ptr [ebp-04]
:00442EAC 8B4238                  mov eax, dword ptr [edx+38]
:00442EAF 83C028                  add eax, 00000028
:00442EB2 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442EA7(U)
|
:00442EB5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442EB8 8B55F4                  mov edx, dword ptr [ebp-0C]
:00442EBB 895128                  mov dword ptr [ecx+28], edx
:00442EBE 6A01                    push 00000001
:00442EC0 B9180A4B00              mov ecx, 004B0A18
:00442EC5 E8463B0000              call 00446A10
:00442ECA 50                      push eax
:00442ECB E8745F0200              call 00468E44
:00442ED0 83C408                  add esp, 00000008
:00442ED3 8B45FC                  mov eax, dword ptr [ebp-04]
:00442ED6 C68081000000FF          mov byte ptr [eax+00000081], FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00442EDD 68FF000000              push 000000FF
:00442EE2 6880070000              push 00000780
:00442EE7 6880520000              push 00005280
:00442EEC B930DF4A00              mov ecx, 004ADF30
:00442EF1 E8A806FDFF              call 0041359E
:00442EF6 50                      push eax
:00442EF7 E84CF90100              call 00462848
:00442EFC 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00442EFF 68FF000000              push 000000FF
:00442F04 6880430000              push 00004380
:00442F09 6800A50000              push 0000A500
:00442F0E B930DF4A00              mov ecx, 004ADF30
:00442F13 E88606FDFF              call 0041359E
:00442F18 50                      push eax
:00442F19 E82AF90100              call 00462848
:00442F1E 83C40C                  add esp, 0000000C
:00442F21 8BE5                    mov esp, ebp
:00442F23 5D                      pop ebp
:00442F24 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00438E68   , :00438F58   , :004398A5   , :004399ED   , :00439A35   
|:00439A51   , :00445DC5   , :004460A2   , :00446F80   , :0044707E   
|:0044DA57   , :0044DB93   , :0044DDF8   
|
:00442F27 55                      push ebp
:00442F28 8BEC                    mov ebp, esp
:00442F2A 51                      push ecx
:00442F2B 894DFC                  mov dword ptr [ebp-04], ecx
:00442F2E 8B45FC                  mov eax, dword ptr [ebp-04]
:00442F31 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442F34 894864                  mov dword ptr [eax+64], ecx
:00442F37 8B55FC                  mov edx, dword ptr [ebp-04]
:00442F3A 8B4218                  mov eax, dword ptr [edx+18]
:00442F3D 99                      cdq
:00442F3E 83E20F                  and edx, 0000000F
:00442F41 03C2                    add eax, edx
:00442F43 C1F804                  sar eax, 04
:00442F46 50                      push eax
:00442F47 8B45FC                  mov eax, dword ptr [ebp-04]
:00442F4A 8B4014                  mov eax, dword ptr [eax+14]
:00442F4D 99                      cdq
:00442F4E 83E20F                  and edx, 0000000F
:00442F51 03C2                    add eax, edx
:00442F53 C1F804                  sar eax, 04
:00442F56 50                      push eax
:00442F57 6A00                    push 00000000
:00442F59 6A00                    push 00000000
:00442F5B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442F5E E8520E0000              call 00443DB5
:00442F63 8BE5                    mov esp, ebp
:00442F65 5D                      pop ebp
:00442F66 C20400                  ret 0004


:00442F69 55                      push ebp
:00442F6A 8BEC                    mov ebp, esp
:00442F6C 51                      push ecx
:00442F6D 894DFC                  mov dword ptr [ebp-04], ecx
:00442F70 8B45FC                  mov eax, dword ptr [ebp-04]
:00442F73 8B4064                  mov eax, dword ptr [eax+64]
:00442F76 8BE5                    mov esp, ebp
:00442F78 5D                      pop ebp
:00442F79 C3                      ret


:00442F7A 55                      push ebp
:00442F7B 8BEC                    mov ebp, esp
:00442F7D 51                      push ecx
:00442F7E 894DFC                  mov dword ptr [ebp-04], ecx
:00442F81 8B45FC                  mov eax, dword ptr [ebp-04]
:00442F84 8A4D08                  mov cl, byte ptr [ebp+08]
:00442F87 884868                  mov byte ptr [eax+68], cl
:00442F8A 8BE5                    mov esp, ebp
:00442F8C 5D                      pop ebp
:00442F8D C20400                  ret 0004


:00442F90 55                      push ebp
:00442F91 8BEC                    mov ebp, esp
:00442F93 51                      push ecx
:00442F94 894DFC                  mov dword ptr [ebp-04], ecx
:00442F97 8B45FC                  mov eax, dword ptr [ebp-04]
:00442F9A 8A4068                  mov al, byte ptr [eax+68]
:00442F9D 8BE5                    mov esp, ebp
:00442F9F 5D                      pop ebp
:00442FA0 C3                      ret



* Referenced by a CALL at Address:
|:0044368C   
|
:00442FA1 55                      push ebp
:00442FA2 8BEC                    mov ebp, esp
:00442FA4 83EC18                  sub esp, 00000018
:00442FA7 894DEC                  mov dword ptr [ebp-14], ecx
:00442FAA C745FC00000000          mov [ebp-04], 00000000
:00442FB1 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00442FB4 E8F747FCFF              call 004077B0
:00442FB9 8B45EC                  mov eax, dword ptr [ebp-14]
:00442FBC 83C054                  add eax, 00000054
:00442FBF 50                      push eax
:00442FC0 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00442FC3 E8C8C7FEFF              call 0042F790
:00442FC8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442FCB C1E904                  shr ecx, 04
:00442FCE 894DF4                  mov dword ptr [ebp-0C], ecx
:00442FD1 8B550C                  mov edx, dword ptr [ebp+0C]
:00442FD4 C1EA04                  shr edx, 04
:00442FD7 8955F0                  mov dword ptr [ebp-10], edx
:00442FDA 8B45EC                  mov eax, dword ptr [ebp-14]
:00442FDD 8A4861                  mov cl, byte ptr [eax+61]
:00442FE0 884DE8                  mov byte ptr [ebp-18], cl
:00442FE3 807DE800                cmp byte ptr [ebp-18], 00
:00442FE7 724C                    jb 00443035
:00442FE9 807DE804                cmp byte ptr [ebp-18], 04
:00442FED 7602                    jbe 00442FF1
:00442FEF EB44                    jmp 00443035

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442FED(C)
|
:00442FF1 8B55F8                  mov edx, dword ptr [ebp-08]
:00442FF4 81E2FF000000            and edx, 000000FF
:00442FFA 3955F4                  cmp dword ptr [ebp-0C], edx
:00442FFD 7236                    jb 00443035
:00442FFF 8B45F8                  mov eax, dword ptr [ebp-08]
:00443002 25FF000000              and eax, 000000FF
:00443007 83C003                  add eax, 00000003
:0044300A 3945F4                  cmp dword ptr [ebp-0C], eax
:0044300D 7326                    jnb 00443035
:0044300F 8B4DF9                  mov ecx, dword ptr [ebp-07]
:00443012 81E1FF000000            and ecx, 000000FF
:00443018 394DF0                  cmp dword ptr [ebp-10], ecx
:0044301B 7218                    jb 00443035
:0044301D 8B55F9                  mov edx, dword ptr [ebp-07]
:00443020 81E2FF000000            and edx, 000000FF
:00443026 83C203                  add edx, 00000003
:00443029 3955F0                  cmp dword ptr [ebp-10], edx
:0044302C 7307                    jnb 00443035
:0044302E C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442FE7(C), :00442FEF(U), :00442FFD(C), :0044300D(C), :0044301B(C)
|:0044302C(C)
|
:00443035 8B45FC                  mov eax, dword ptr [ebp-04]
:00443038 8BE5                    mov esp, ebp
:0044303A 5D                      pop ebp
:0044303B C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0042CCE2   , :004447BD   , :004448B6   , :00459275   , :004593AA   
|
:0044303E 55                      push ebp
:0044303F 8BEC                    mov ebp, esp
:00443041 81ECA0000000            sub esp, 000000A0
:00443047 53                      push ebx
:00443048 56                      push esi
:00443049 898D6CFFFFFF            mov dword ptr [ebp+FFFFFF6C], ecx
:0044304F 8B4508                  mov eax, dword ptr [ebp+08]
:00443052 25FF000000              and eax, 000000FF
:00443057 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044305D 8B5104                  mov edx, dword ptr [ecx+04]
:00443060 03D0                    add edx, eax
:00443062 8B450C                  mov eax, dword ptr [ebp+0C]
:00443065 25FF000000              and eax, 000000FF
:0044306A 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:00443070 8B4908                  mov ecx, dword ptr [ecx+08]
:00443073 03C8                    add ecx, eax
:00443075 33C0                    xor eax, eax
:00443077 A0800A4B00              mov al, byte ptr [004B0A80]
:0044307C 0FAFC8                  imul ecx, eax
:0044307F 6BC903                  imul ecx, 00000003
:00443082 03D1                    add edx, ecx
:00443084 895590                  mov dword ptr [ebp-70], edx
:00443087 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044308A 81E1FF000000            and ecx, 000000FF
:00443090 8B750C                  mov esi, dword ptr [ebp+0C]
:00443093 81E6FF000000            and esi, 000000FF
:00443099 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044309F 8B4214                  mov eax, dword ptr [edx+14]
:004430A2 99                      cdq
:004430A3 83E20F                  and edx, 0000000F
:004430A6 03C2                    add eax, edx
:004430A8 C1F804                  sar eax, 04
:004430AB 0FAFF0                  imul esi, eax
:004430AE 03CE                    add ecx, esi
:004430B0 894DE8                  mov dword ptr [ebp-18], ecx
:004430B3 6A00                    push 00000000
:004430B5 B930DF4A00              mov ecx, 004ADF30
:004430BA E8DF04FDFF              call 0041359E
:004430BF 034590                  add eax, dword ptr [ebp-70]
:004430C2 89458C                  mov dword ptr [ebp-74], eax
:004430C5 6A00                    push 00000000
:004430C7 B930DF4A00              mov ecx, 004ADF30
:004430CC E8CD04FDFF              call 0041359E
:004430D1 8BC8                    mov ecx, eax
:004430D3 8B5508                  mov edx, dword ptr [ebp+08]
:004430D6 81E2FF000000            and edx, 000000FF
:004430DC 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004430E2 8B4004                  mov eax, dword ptr [eax+04]
:004430E5 03C2                    add eax, edx
:004430E7 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004430E8 BE03000000              mov esi, 00000003
:004430ED F7FE                    idiv esi
:004430EF 8D8C0100960000          lea ecx, dword ptr [ecx+eax+00009600]
:004430F6 8B550C                  mov edx, dword ptr [ebp+0C]
:004430F9 81E2FF000000            and edx, 000000FF
:004430FF 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00443105 8B4008                  mov eax, dword ptr [eax+08]
:00443108 03C2                    add eax, edx
:0044310A 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044310B BE03000000              mov esi, 00000003
:00443110 F7FE                    idiv esi
:00443112 33D2                    xor edx, edx
:00443114 8A15800A4B00            mov dl, byte ptr [004B0A80]
:0044311A 0FAFC2                  imul eax, edx
:0044311D 03C8                    add ecx, eax
:0044311F 894DA8                  mov dword ptr [ebp-58], ecx
:00443122 6A00                    push 00000000
:00443124 B930DF4A00              mov ecx, 004ADF30
:00443129 E87004FDFF              call 0041359E
:0044312E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443131 8D940880520000          lea edx, dword ptr [eax+ecx+00005280]
:00443138 89559C                  mov dword ptr [ebp-64], edx
:0044313B 6A00                    push 00000000
:0044313D B930DF4A00              mov ecx, 004ADF30
:00443142 E85704FDFF              call 0041359E
:00443147 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044314A 8D940800A50000          lea edx, dword ptr [eax+ecx+0000A500]
:00443151 8955D8                  mov dword ptr [ebp-28], edx
:00443154 6A00                    push 00000000
:00443156 B930DF4A00              mov ecx, 004ADF30
:0044315B E83E04FDFF              call 0041359E
:00443160 8BC8                    mov ecx, eax
:00443162 8B5508                  mov edx, dword ptr [ebp+08]
:00443165 81E2FF000000            and edx, 000000FF
:0044316B 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00443171 8B4004                  mov eax, dword ptr [eax+04]
:00443174 03C2                    add eax, edx
:00443176 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443177 BE03000000              mov esi, 00000003
:0044317C F7FE                    idiv esi
:0044317E 8D8C01004B0000          lea ecx, dword ptr [ecx+eax+00004B00]
:00443185 8B550C                  mov edx, dword ptr [ebp+0C]
:00443188 81E2FF000000            and edx, 000000FF
:0044318E 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00443194 8B4008                  mov eax, dword ptr [eax+08]
:00443197 03C2                    add eax, edx
:00443199 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044319A BE03000000              mov esi, 00000003
:0044319F F7FE                    idiv esi
:004431A1 33D2                    xor edx, edx
:004431A3 8A15800A4B00            mov dl, byte ptr [004B0A80]
:004431A9 0FAFC2                  imul eax, edx
:004431AC 03C8                    add ecx, eax
:004431AE 898D70FFFFFF            mov dword ptr [ebp+FFFFFF70], ecx
:004431B4 6A00                    push 00000000
:004431B6 B970DF4A00              mov ecx, 004ADF70
:004431BB E8DE03FDFF              call 0041359E
:004431C0 8BC8                    mov ecx, eax
:004431C2 8B5508                  mov edx, dword ptr [ebp+08]
:004431C5 81E2FF000000            and edx, 000000FF
:004431CB 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004431D1 8B4004                  mov eax, dword ptr [eax+04]
:004431D4 03C2                    add eax, edx
:004431D6 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004431D7 BE03000000              mov esi, 00000003
:004431DC F7FE                    idiv esi
:004431DE 03C8                    add ecx, eax
:004431E0 8B550C                  mov edx, dword ptr [ebp+0C]
:004431E3 81E2FF000000            and edx, 000000FF
:004431E9 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004431EF 8B4008                  mov eax, dword ptr [eax+08]
:004431F2 03C2                    add eax, edx
:004431F4 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004431F5 BE03000000              mov esi, 00000003
:004431FA F7FE                    idiv esi
:004431FC 33D2                    xor edx, edx
:004431FE 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00443204 0FAFC2                  imul eax, edx
:00443207 03C8                    add ecx, eax
:00443209 894DB4                  mov dword ptr [ebp-4C], ecx
:0044320C 33C0                    xor eax, eax
:0044320E A0800A4B00              mov al, byte ptr [004B0A80]
:00443213 83E801                  sub eax, 00000001
:00443216 6BC003                  imul eax, 00000003
:00443219 8945E4                  mov dword ptr [ebp-1C], eax
:0044321C 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:00443222 8B4114                  mov eax, dword ptr [ecx+14]
:00443225 99                      cdq
:00443226 83E20F                  and edx, 0000000F
:00443229 03C2                    add eax, edx
:0044322B C1F804                  sar eax, 04
:0044322E 83E803                  sub eax, 00000003
:00443231 8945B8                  mov dword ptr [ebp-48], eax
:00443234 33D2                    xor edx, edx
:00443236 8A15800A4B00            mov dl, byte ptr [004B0A80]
:0044323C 8BCA                    mov ecx, edx
:0044323E 8B4510                  mov eax, dword ptr [ebp+10]
:00443241 25FF000000              and eax, 000000FF
:00443246 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443247 BE03000000              mov esi, 00000003
:0044324C F7FE                    idiv esi
:0044324E 2BC8                    sub ecx, eax
:00443250 894DBC                  mov dword ptr [ebp-44], ecx
:00443253 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:00443259 8B4214                  mov eax, dword ptr [edx+14]
:0044325C 99                      cdq
:0044325D 83E20F                  and edx, 0000000F
:00443260 03C2                    add eax, edx
:00443262 8BC8                    mov ecx, eax
:00443264 C1F904                  sar ecx, 04
:00443267 8B5510                  mov edx, dword ptr [ebp+10]
:0044326A 81E2FF000000            and edx, 000000FF
:00443270 2BCA                    sub ecx, edx
:00443272 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00443278 8B4014                  mov eax, dword ptr [eax+14]
:0044327B 99                      cdq
:0044327C 83E20F                  and edx, 0000000F
:0044327F 03C2                    add eax, edx
:00443281 C1F804                  sar eax, 04
:00443284 8D0C41                  lea ecx, dword ptr [ecx+2*eax]
:00443287 894DA0                  mov dword ptr [ebp-60], ecx
:0044328A 33D2                    xor edx, edx
:0044328C 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00443292 6BD203                  imul edx, 00000003
:00443295 8B4510                  mov eax, dword ptr [ebp+10]
:00443298 25FF000000              and eax, 000000FF
:0044329D 2BD0                    sub edx, eax
:0044329F 33C9                    xor ecx, ecx
:004432A1 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:004432A7 6BC903                  imul ecx, 00000003
:004432AA 8D144A                  lea edx, dword ptr [edx+2*ecx]
:004432AD 8955EC                  mov dword ptr [ebp-14], edx
:004432B0 B9180A4B00              mov ecx, 004B0A18
:004432B5 E856CAFEFF              call 0042FD10
:004432BA 25FF000000              and eax, 000000FF
:004432BF F7D8                    neg eax
:004432C1 1BC0                    sbb eax, eax
:004432C3 F7D8                    neg eax
:004432C5 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:004432CB 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004432D1 33C9                    xor ecx, ecx
:004432D3 8A4844                  mov cl, byte ptr [eax+44]
:004432D6 894DDC                  mov dword ptr [ebp-24], ecx
:004432D9 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:004432DF 33C0                    xor eax, eax
:004432E1 8A4245                  mov al, byte ptr [edx+45]
:004432E4 8945C8                  mov dword ptr [ebp-38], eax
:004432E7 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:004432ED 33D2                    xor edx, edx
:004432EF 8A5144                  mov dl, byte ptr [ecx+44]
:004432F2 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004432F8 33C9                    xor ecx, ecx
:004432FA 8A4846                  mov cl, byte ptr [eax+46]
:004432FD 03D1                    add edx, ecx
:004432FF 8955D4                  mov dword ptr [ebp-2C], edx
:00443302 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:00443308 33C0                    xor eax, eax
:0044330A 8A4245                  mov al, byte ptr [edx+45]
:0044330D 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:00443313 33D2                    xor edx, edx
:00443315 8A5147                  mov dl, byte ptr [ecx+47]
:00443318 03C2                    add eax, edx
:0044331A 8945C0                  mov dword ptr [ebp-40], eax
:0044331D 8B4508                  mov eax, dword ptr [ebp+08]
:00443320 25FF000000              and eax, 000000FF
:00443325 C1E004                  shl eax, 04
:00443328 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044332E 03413C                  add eax, dword ptr [ecx+3C]
:00443331 8945B0                  mov dword ptr [ebp-50], eax
:00443334 8B550C                  mov edx, dword ptr [ebp+0C]
:00443337 81E2FF000000            and edx, 000000FF
:0044333D C1E204                  shl edx, 04
:00443340 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00443346 035040                  add edx, dword ptr [eax+40]
:00443349 8955A4                  mov dword ptr [ebp-5C], edx
:0044334C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044334F 81E1FF000000            and ecx, 000000FF
:00443355 C1E104                  shl ecx, 04
:00443358 8B55B0                  mov edx, dword ptr [ebp-50]
:0044335B 03D1                    add edx, ecx
:0044335D 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00443363 8B483C                  mov ecx, dword ptr [eax+3C]
:00443366 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044336C 034814                  add ecx, dword ptr [eax+14]
:0044336F 3BD1                    cmp edx, ecx
:00443371 7D19                    jge 0044338C
:00443373 8B4D10                  mov ecx, dword ptr [ebp+10]
:00443376 81E1FF000000            and ecx, 000000FF
:0044337C C1E104                  shl ecx, 04
:0044337F 8B55B0                  mov edx, dword ptr [ebp-50]
:00443382 03D1                    add edx, ecx
:00443384 899568FFFFFF            mov dword ptr [ebp+FFFFFF68], edx
:0044338A EB18                    jmp 004433A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443371(C)
|
:0044338C 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:00443392 8B483C                  mov ecx, dword ptr [eax+3C]
:00443395 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044339B 034A14                  add ecx, dword ptr [edx+14]
:0044339E 898D68FFFFFF            mov dword ptr [ebp+FFFFFF68], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044338A(U)
|
:004433A4 8B8568FFFFFF            mov eax, dword ptr [ebp+FFFFFF68]
:004433AA 894598                  mov dword ptr [ebp-68], eax
:004433AD 8B4D14                  mov ecx, dword ptr [ebp+14]
:004433B0 81E1FF000000            and ecx, 000000FF
:004433B6 C1E104                  shl ecx, 04
:004433B9 8B55A4                  mov edx, dword ptr [ebp-5C]
:004433BC 03D1                    add edx, ecx
:004433BE 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004433C4 8B4840                  mov ecx, dword ptr [eax+40]
:004433C7 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004433CD 034818                  add ecx, dword ptr [eax+18]
:004433D0 3BD1                    cmp edx, ecx
:004433D2 7D19                    jge 004433ED
:004433D4 8B4D14                  mov ecx, dword ptr [ebp+14]
:004433D7 81E1FF000000            and ecx, 000000FF
:004433DD C1E104                  shl ecx, 04
:004433E0 8B55A4                  mov edx, dword ptr [ebp-5C]
:004433E3 03D1                    add edx, ecx
:004433E5 899564FFFFFF            mov dword ptr [ebp+FFFFFF64], edx
:004433EB EB18                    jmp 00443405

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004433D2(C)
|
:004433ED 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004433F3 8B4840                  mov ecx, dword ptr [eax+40]
:004433F6 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:004433FC 034A18                  add ecx, dword ptr [edx+18]
:004433FF 898D64FFFFFF            mov dword ptr [ebp+FFFFFF64], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004433EB(U)
|
:00443405 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0044340B 894588                  mov dword ptr [ebp-78], eax
:0044340E 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:00443414 E83D160000              call 00444A56
:00443419 E814FAFCFF              call 00412E32
:0044341E 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00443421 894D84                  mov dword ptr [ebp-7C], ecx
:00443424 EB45                    jmp 0044346B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443ACD(U)
|
:00443426 8B5584                  mov edx, dword ptr [ebp-7C]
:00443429 83C230                  add edx, 00000030
:0044342C 895584                  mov dword ptr [ebp-7C], edx
:0044342F 8B8570FFFFFF            mov eax, dword ptr [ebp+FFFFFF70]
:00443435 0345BC                  add eax, dword ptr [ebp-44]
:00443438 898570FFFFFF            mov dword ptr [ebp+FFFFFF70], eax
:0044343E 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00443441 034DBC                  add ecx, dword ptr [ebp-44]
:00443444 894DA8                  mov dword ptr [ebp-58], ecx
:00443447 8B55B4                  mov edx, dword ptr [ebp-4C]
:0044344A 0355BC                  add edx, dword ptr [ebp-44]
:0044344D 8955B4                  mov dword ptr [ebp-4C], edx
:00443450 8B458C                  mov eax, dword ptr [ebp-74]
:00443453 0345EC                  add eax, dword ptr [ebp-14]
:00443456 89458C                  mov dword ptr [ebp-74], eax
:00443459 8B4D9C                  mov ecx, dword ptr [ebp-64]
:0044345C 034DA0                  add ecx, dword ptr [ebp-60]
:0044345F 894D9C                  mov dword ptr [ebp-64], ecx
:00443462 8B55D8                  mov edx, dword ptr [ebp-28]
:00443465 0355A0                  add edx, dword ptr [ebp-60]
:00443468 8955D8                  mov dword ptr [ebp-28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443424(U)
|
:0044346B 8B4584                  mov eax, dword ptr [ebp-7C]
:0044346E 3B4588                  cmp eax, dword ptr [ebp-78]
:00443471 0F835B060000            jnb 00443AD2
:00443477 E8D2900200              call 0046C54E
:0044347C 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044347F 894DAC                  mov dword ptr [ebp-54], ecx
:00443482 EB45                    jmp 004434C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443AC8(U)
|
:00443484 8B55AC                  mov edx, dword ptr [ebp-54]
:00443487 83C230                  add edx, 00000030
:0044348A 8955AC                  mov dword ptr [ebp-54], edx
:0044348D 8B8570FFFFFF            mov eax, dword ptr [ebp+FFFFFF70]
:00443493 83C001                  add eax, 00000001
:00443496 898570FFFFFF            mov dword ptr [ebp+FFFFFF70], eax
:0044349C 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0044349F 83C101                  add ecx, 00000001
:004434A2 894DA8                  mov dword ptr [ebp-58], ecx
:004434A5 8B55B4                  mov edx, dword ptr [ebp-4C]
:004434A8 83C201                  add edx, 00000001
:004434AB 8955B4                  mov dword ptr [ebp-4C], edx
:004434AE 8B458C                  mov eax, dword ptr [ebp-74]
:004434B1 83C003                  add eax, 00000003
:004434B4 89458C                  mov dword ptr [ebp-74], eax
:004434B7 8B4D9C                  mov ecx, dword ptr [ebp-64]
:004434BA 83C103                  add ecx, 00000003
:004434BD 894D9C                  mov dword ptr [ebp-64], ecx
:004434C0 8B55D8                  mov edx, dword ptr [ebp-28]
:004434C3 83C203                  add edx, 00000003
:004434C6 8955D8                  mov dword ptr [ebp-28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443482(U)
|
:004434C9 8B45AC                  mov eax, dword ptr [ebp-54]
:004434CC 3B4598                  cmp eax, dword ptr [ebp-68]
:004434CF 0F83F8050000            jnb 00443ACD
:004434D5 C645FC04                mov [ebp-04], 04
:004434D9 8B8D70FFFFFF            mov ecx, dword ptr [ebp+FFFFFF70]
:004434DF 8A11                    mov dl, byte ptr [ecx]
:004434E1 8855F4                  mov byte ptr [ebp-0C], dl
:004434E4 8B458C                  mov eax, dword ptr [ebp-74]
:004434E7 8945E0                  mov dword ptr [ebp-20], eax
:004434EA 8B4D9C                  mov ecx, dword ptr [ebp-64]
:004434ED 898D78FFFFFF            mov dword ptr [ebp+FFFFFF78], ecx
:004434F3 8B55D8                  mov edx, dword ptr [ebp-28]
:004434F6 8955CC                  mov dword ptr [ebp-34], edx
:004434F9 8B4584                  mov eax, dword ptr [ebp-7C]
:004434FC 894580                  mov dword ptr [ebp-80], eax
:004434FF EB33                    jmp 00443534

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004437A0(U)
|
:00443501 8B4D80                  mov ecx, dword ptr [ebp-80]
:00443504 83C110                  add ecx, 00000010
:00443507 894D80                  mov dword ptr [ebp-80], ecx
:0044350A 8B55E0                  mov edx, dword ptr [ebp-20]
:0044350D 0355E4                  add edx, dword ptr [ebp-1C]
:00443510 8955E0                  mov dword ptr [ebp-20], edx
:00443513 8B4590                  mov eax, dword ptr [ebp-70]
:00443516 0345E4                  add eax, dword ptr [ebp-1C]
:00443519 894590                  mov dword ptr [ebp-70], eax
:0044351C 8B8D78FFFFFF            mov ecx, dword ptr [ebp+FFFFFF78]
:00443522 034DB8                  add ecx, dword ptr [ebp-48]
:00443525 898D78FFFFFF            mov dword ptr [ebp+FFFFFF78], ecx
:0044352B 8B55CC                  mov edx, dword ptr [ebp-34]
:0044352E 0355B8                  add edx, dword ptr [ebp-48]
:00443531 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004434FF(U)
|
:00443534 8B4584                  mov eax, dword ptr [ebp-7C]
:00443537 83C030                  add eax, 00000030
:0044353A 394580                  cmp dword ptr [ebp-80], eax
:0044353D 0F8362020000            jnb 004437A5
:00443543 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00443546 894D94                  mov dword ptr [ebp-6C], ecx
:00443549 EB33                    jmp 0044357E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004435F9(U), :00443639(U), :0044379B(U)
|
:0044354B 8B5594                  mov edx, dword ptr [ebp-6C]
:0044354E 83C210                  add edx, 00000010
:00443551 895594                  mov dword ptr [ebp-6C], edx
:00443554 8B45E0                  mov eax, dword ptr [ebp-20]
:00443557 83C001                  add eax, 00000001
:0044355A 8945E0                  mov dword ptr [ebp-20], eax
:0044355D 8B4D90                  mov ecx, dword ptr [ebp-70]
:00443560 83C101                  add ecx, 00000001
:00443563 894D90                  mov dword ptr [ebp-70], ecx
:00443566 8B9578FFFFFF            mov edx, dword ptr [ebp+FFFFFF78]
:0044356C 83C201                  add edx, 00000001
:0044356F 899578FFFFFF            mov dword ptr [ebp+FFFFFF78], edx
:00443575 8B45CC                  mov eax, dword ptr [ebp-34]
:00443578 83C001                  add eax, 00000001
:0044357B 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443549(U)
|
:0044357E 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00443581 83C130                  add ecx, 00000030
:00443584 394D94                  cmp dword ptr [ebp-6C], ecx
:00443587 0F8313020000            jnb 004437A0
:0044358D 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:00443593 837A5000                cmp dword ptr [edx+50], 00000000
:00443597 0F84A1000000            je 0044363E
:0044359D 8B45F4                  mov eax, dword ptr [ebp-0C]
:004435A0 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004435A5 3DFF000000              cmp eax, 000000FF
:004435AA 7452                    je 004435FE
:004435AC 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:004435B2 33D2                    xor edx, edx
:004435B4 8A5147                  mov dl, byte ptr [ecx+47]
:004435B7 52                      push edx
:004435B8 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:004435BE 33C9                    xor ecx, ecx
:004435C0 8A4846                  mov cl, byte ptr [eax+46]
:004435C3 51                      push ecx
:004435C4 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:004435CA 33C0                    xor eax, eax
:004435CC 8A4245                  mov al, byte ptr [edx+45]
:004435CF 50                      push eax
:004435D0 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:004435D6 33D2                    xor edx, edx
:004435D8 8A5144                  mov dl, byte ptr [ecx+44]
:004435DB 52                      push edx
:004435DC 8B4580                  mov eax, dword ptr [ebp-80]
:004435DF 50                      push eax
:004435E0 8B4D94                  mov ecx, dword ptr [ebp-6C]
:004435E3 51                      push ecx
:004435E4 E86A060000              call 00443C53
:004435E9 83C418                  add esp, 00000018
:004435EC 85C0                    test eax, eax
:004435EE 740E                    je 004435FE
:004435F0 8A55FC                  mov dl, byte ptr [ebp-04]
:004435F3 80E2FB                  and dl, FB
:004435F6 8855FC                  mov byte ptr [ebp-04], dl
:004435F9 E94DFFFFFF              jmp 0044354B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004435AA(C), :004435EE(C)
|
:004435FE 8B45DC                  mov eax, dword ptr [ebp-24]
:00443601 C1E004                  shl eax, 04
:00443604 394594                  cmp dword ptr [ebp-6C], eax
:00443607 7235                    jb 0044363E
:00443609 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044360C C1E104                  shl ecx, 04
:0044360F 394D94                  cmp dword ptr [ebp-6C], ecx
:00443612 732A                    jnb 0044363E
:00443614 8B55C8                  mov edx, dword ptr [ebp-38]
:00443617 C1E204                  shl edx, 04
:0044361A 83C220                  add edx, 00000020
:0044361D 395580                  cmp dword ptr [ebp-80], edx
:00443620 721C                    jb 0044363E
:00443622 8B45C0                  mov eax, dword ptr [ebp-40]
:00443625 C1E004                  shl eax, 04
:00443628 83C020                  add eax, 00000020
:0044362B 394580                  cmp dword ptr [ebp-80], eax
:0044362E 730E                    jnb 0044363E
:00443630 8A4DFC                  mov cl, byte ptr [ebp-04]
:00443633 80E1FB                  and cl, FB
:00443636 884DFC                  mov byte ptr [ebp-04], cl
:00443639 E90DFFFFFF              jmp 0044354B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443597(C), :00443607(C), :00443612(C), :00443620(C), :0044362E(C)
|
:0044363E 8B55E0                  mov edx, dword ptr [ebp-20]
:00443641 8A02                    mov al, byte ptr [edx]
:00443643 8845C4                  mov byte ptr [ebp-3C], al
:00443646 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044364C 83796400                cmp dword ptr [ecx+64], 00000000
:00443650 7419                    je 0044366B
:00443652 8B55A8                  mov edx, dword ptr [ebp-58]
:00443655 33C0                    xor eax, eax
:00443657 8A02                    mov al, byte ptr [edx]
:00443659 33C9                    xor ecx, ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044365B 3DFF000000              cmp eax, 000000FF
:00443660 0F94C1                  sete cl
:00443663 898D60FFFFFF            mov dword ptr [ebp+FFFFFF60], ecx
:00443669 EB0A                    jmp 00443675

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443650(C)
|
:0044366B C78560FFFFFF00000000    mov dword ptr [ebp+FFFFFF60], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443669(U)
|
:00443675 8A9560FFFFFF            mov dl, byte ptr [ebp+FFFFFF60]
:0044367B 8855F0                  mov byte ptr [ebp-10], dl
:0044367E 8B4580                  mov eax, dword ptr [ebp-80]
:00443681 50                      push eax
:00443682 8B4D94                  mov ecx, dword ptr [ebp-6C]
:00443685 51                      push ecx
:00443686 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044368C E810F9FFFF              call 00442FA1
:00443691 85C0                    test eax, eax
:00443693 741B                    je 004436B0
:00443695 8A55FC                  mov dl, byte ptr [ebp-04]
:00443698 80CA01                  or dl, 01
:0044369B 8855FC                  mov byte ptr [ebp-04], dl
:0044369E 68003B0000              push 00003B00
:004436A3 B940DF4A00              mov ecx, 004ADF40
:004436A8 E8F1FEFCFF              call 0041359E
:004436AD 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443693(C)
|
:004436B0 6A00                    push 00000000
:004436B2 B930DF4A00              mov ecx, 004ADF30
:004436B7 E8E2FEFCFF              call 0041359E
:004436BC 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004436BF 2BC8                    sub ecx, eax
:004436C1 894DD0                  mov dword ptr [ebp-30], ecx
:004436C4 8B55D0                  mov edx, dword ptr [ebp-30]
:004436C7 C1E208                  shl edx, 08
:004436CA 52                      push edx
:004436CB B908DA4A00              mov ecx, 004ADA08
:004436D0 E8C9FEFCFF              call 0041359E
:004436D5 898574FFFFFF            mov dword ptr [ebp+FFFFFF74], eax
:004436DB 8B45F4                  mov eax, dword ptr [ebp-0C]
:004436DE 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004436E3 3DFF000000              cmp eax, 000000FF
:004436E8 7455                    je 0044373F
:004436EA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004436ED 81E1FF000000            and ecx, 000000FF
:004436F3 83F95A                  cmp ecx, 0000005A
:004436F6 7C19                    jl 00443711
:004436F8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004436FB 81E2FF000000            and edx, 000000FF
:00443701 81FAFF000000            cmp edx, 000000FF
:00443707 7408                    je 00443711
:00443709 8A45FC                  mov al, byte ptr [ebp-04]
:0044370C 0C02                    or al, 02
:0044370E 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004436F6(C), :00443707(C)
|
:00443711 B9180A4B00              mov ecx, 004B0A18
:00443716 E8F5C5FEFF              call 0042FD10
:0044371B 25FF000000              and eax, 000000FF
:00443720 F7D8                    neg eax
:00443722 1BC0                    sbb eax, eax
:00443724 F7D8                    neg eax
:00443726 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:0044372C 8B8D78FFFFFF            mov ecx, dword ptr [ebp+FFFFFF78]
:00443732 C601FF                  mov byte ptr [ecx], FF
:00443735 8B55CC                  mov edx, dword ptr [ebp-34]
:00443738 8A45F0                  mov al, byte ptr [ebp-10]
:0044373B 8802                    mov byte ptr [edx], al
:0044373D EB13                    jmp 00443752

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004436E8(C)
|
:0044373F 8B8D78FFFFFF            mov ecx, dword ptr [ebp+FFFFFF78]
:00443745 8A55C4                  mov dl, byte ptr [ebp-3C]
:00443748 8811                    mov byte ptr [ecx], dl
:0044374A 8B45CC                  mov eax, dword ptr [ebp-34]
:0044374D 8A4DF0                  mov cl, byte ptr [ebp-10]
:00443750 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044373D(U)
|
:00443752 8B55F0                  mov edx, dword ptr [ebp-10]
:00443755 81E2FF000000            and edx, 000000FF
:0044375B 85D2                    test edx, edx
:0044375D 7522                    jne 00443781
:0044375F 6A00                    push 00000000
:00443761 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:00443767 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00443768 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044376A 6A10                    push 00000010
:0044376C 8B4D80                  mov ecx, dword ptr [ebp-80]
:0044376F 83C108                  add ecx, 00000008
:00443772 51                      push ecx
:00443773 8B5594                  mov edx, dword ptr [ebp-6C]
:00443776 52                      push edx
:00443777 E896F4FFFF              call 00442C12
:0044377C 83C418                  add esp, 00000018
:0044377F EB1A                    jmp 0044379B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044375D(C)
|
:00443781 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:00443787 50                      push eax
:00443788 8B4D80                  mov ecx, dword ptr [ebp-80]
:0044378B 83C108                  add ecx, 00000008
:0044378E 51                      push ecx
:0044378F 8B5594                  mov edx, dword ptr [ebp-6C]
:00443792 52                      push edx
:00443793 E847030000              call 00443ADF
:00443798 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044377F(U)
|
:0044379B E9ABFDFFFF              jmp 0044354B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443587(C)
|
:004437A0 E95CFDFFFF              jmp 00443501

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044353D(C)
|
:004437A5 8B857CFFFFFF            mov eax, dword ptr [ebp+FFFFFF7C]
:004437AB 69C000090000            imul eax, 00000900
:004437B1 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:004437B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004437BA 81E1FF000000            and ecx, 000000FF
:004437C0 83E101                  and ecx, 00000001
:004437C3 85C9                    test ecx, ecx
:004437C5 741D                    je 004437E4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004437C7 6A04                    push 00000004
:004437C9 8B55F8                  mov edx, dword ptr [ebp-08]
:004437CC 52                      push edx
:004437CD 6A30                    push 00000030
:004437CF 6A30                    push 00000030
:004437D1 8B4584                  mov eax, dword ptr [ebp-7C]
:004437D4 83C008                  add eax, 00000008
:004437D7 50                      push eax
:004437D8 8B4DAC                  mov ecx, dword ptr [ebp-54]
:004437DB 51                      push ecx
:004437DC E831F4FFFF              call 00442C12
:004437E1 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004437C5(C)
|
:004437E4 8B55FC                  mov edx, dword ptr [ebp-04]
:004437E7 81E2FF000000            and edx, 000000FF
:004437ED 83E202                  and edx, 00000002
:004437F0 85D2                    test edx, edx
:004437F2 7454                    je 00443848
:004437F4 8B45FC                  mov eax, dword ptr [ebp-04]
:004437F7 25FF000000              and eax, 000000FF
:004437FC 83E004                  and eax, 00000004
:004437FF 85C0                    test eax, eax
:00443801 7445                    je 00443848

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443803 6A04                    push 00000004
:00443805 6800DC0000              push 0000DC00
:0044380A B940DF4A00              mov ecx, 004ADF40
:0044380F E88AFDFCFF              call 0041359E
:00443814 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00443817 81E1FF000000            and ecx, 000000FF
:0044381D 83E95A                  sub ecx, 0000005A
:00443820 69C900090000            imul ecx, 00000900
:00443826 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:0044382C 03D0                    add edx, eax
:0044382E 03CA                    add ecx, edx
:00443830 51                      push ecx
:00443831 6A30                    push 00000030
:00443833 6A30                    push 00000030
:00443835 8B4584                  mov eax, dword ptr [ebp-7C]
:00443838 83C008                  add eax, 00000008
:0044383B 50                      push eax
:0044383C 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044383F 51                      push ecx
:00443840 E8CDF3FFFF              call 00442C12
:00443845 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004437F2(C), :00443801(C)
|
:00443848 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044384B 81E2FF000000            and edx, 000000FF
:00443851 83FA5A                  cmp edx, 0000005A
:00443854 0F8DB2000000            jnl 0044390C
:0044385A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044385D 25FF000000              and eax, 000000FF
:00443862 83E004                  and eax, 00000004
:00443865 85C0                    test eax, eax
:00443867 0F849F000000            je 0044390C
:0044386D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00443870 81E1FF000000            and ecx, 000000FF
:00443876 6BC924                  imul ecx, 00000024
:00443879 81C108F54A00            add ecx, 004AF508
:0044387F E84CC0FEFF              call 0042F8D0
:00443884 25FF000000              and eax, 000000FF
:00443889 83F802                  cmp eax, 00000002
:0044388C 757E                    jne 0044390C
:0044388E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00443891 81E1FF000000            and ecx, 000000FF
:00443897 51                      push ecx
:00443898 8B5584                  mov edx, dword ptr [ebp-7C]
:0044389B 83C208                  add edx, 00000008
:0044389E 52                      push edx
:0044389F 8B45AC                  mov eax, dword ptr [ebp-54]
:004438A2 50                      push eax
:004438A3 E8D39FFEFF              call 0042D87B
:004438A8 83C40C                  add esp, 0000000C
:004438AB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004438AE 81E1FF000000            and ecx, 000000FF
:004438B4 6BC924                  imul ecx, 00000024
:004438B7 81C108F54A00            add ecx, 004AF508
:004438BD E8DE5AFEFF              call 004293A0
:004438C2 50                      push eax
:004438C3 E8B7400000              call 0044797F
:004438C8 83C404                  add esp, 00000004
:004438CB 25FF000000              and eax, 000000FF
:004438D0 83F80D                  cmp eax, 0000000D
:004438D3 7537                    jne 0044390C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004438D5 6A04                    push 00000004
:004438D7 6800120100              push 00011200
:004438DC B940DF4A00              mov ecx, 004ADF40
:004438E1 E8B8FCFCFF              call 0041359E
:004438E6 8B0D78044B00            mov ecx, dword ptr [004B0478]
:004438EC 69C900090000            imul ecx, 00000900
:004438F2 03C1                    add eax, ecx
:004438F4 50                      push eax
:004438F5 6A30                    push 00000030
:004438F7 6A30                    push 00000030
:004438F9 8B5584                  mov edx, dword ptr [ebp-7C]
:004438FC 83C208                  add edx, 00000008
:004438FF 52                      push edx
:00443900 8B45AC                  mov eax, dword ptr [ebp-54]
:00443903 50                      push eax
:00443904 E809F3FFFF              call 00442C12
:00443909 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443854(C), :00443867(C), :0044388C(C), :004438D3(C)
|
:0044390C B9180A4B00              mov ecx, 004B0A18
:00443911 E8D84A0100              call 004583EE
:00443916 25FF000000              and eax, 000000FF
:0044391B 83F802                  cmp eax, 00000002
:0044391E 7418                    je 00443938
:00443920 B9180A4B00              mov ecx, 004B0A18
:00443925 E8C44A0100              call 004583EE
:0044392A 25FF000000              and eax, 000000FF
:0044392F 83F803                  cmp eax, 00000003
:00443932 0F8546010000            jne 00443A7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044391E(C)
|
:00443938 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044393E 83795000                cmp dword ptr [ecx+50], 00000000
:00443942 0F84EB000000            je 00443A33
:00443948 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044394B C1E904                  shr ecx, 04
:0044394E 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:00443954 33C0                    xor eax, eax
:00443956 8A4244                  mov al, byte ptr [edx+44]
:00443959 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044395B BE03000000              mov esi, 00000003
:00443960 F7F6                    div esi
:00443962 6BC003                  imul eax, 00000003
:00443965 3BC8                    cmp ecx, eax
:00443967 727D                    jb 004439E6
:00443969 8B4D84                  mov ecx, dword ptr [ebp-7C]
:0044396C C1E904                  shr ecx, 04
:0044396F 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:00443975 33C0                    xor eax, eax
:00443977 8A4245                  mov al, byte ptr [edx+45]
:0044397A 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044397C BE03000000              mov esi, 00000003
:00443981 F7F6                    div esi
:00443983 6BC003                  imul eax, 00000003
:00443986 3BC8                    cmp ecx, eax
:00443988 725C                    jb 004439E6
:0044398A 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044398D C1E904                  shr ecx, 04
:00443990 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:00443996 33C0                    xor eax, eax
:00443998 8A4244                  mov al, byte ptr [edx+44]
:0044399B 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044399D BE03000000              mov esi, 00000003
:004439A2 F7F6                    div esi
:004439A4 6BC003                  imul eax, 00000003
:004439A7 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:004439AD 33DB                    xor ebx, ebx
:004439AF 8A5A46                  mov bl, byte ptr [edx+46]
:004439B2 03C3                    add eax, ebx
:004439B4 3BC8                    cmp ecx, eax
:004439B6 732E                    jnb 004439E6
:004439B8 8B4D84                  mov ecx, dword ptr [ebp-7C]
:004439BB C1E904                  shr ecx, 04
:004439BE 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:004439C4 33C0                    xor eax, eax
:004439C6 8A4245                  mov al, byte ptr [edx+45]
:004439C9 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004439CB BE03000000              mov esi, 00000003
:004439D0 F7F6                    div esi
:004439D2 6BC003                  imul eax, 00000003
:004439D5 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:004439DB 33DB                    xor ebx, ebx
:004439DD 8A5A47                  mov bl, byte ptr [edx+47]
:004439E0 03C3                    add eax, ebx
:004439E2 3BC8                    cmp ecx, eax
:004439E4 724B                    jb 00443A31

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443967(C), :00443988(C), :004439B6(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004439E6 6A04                    push 00000004
:004439E8 B9180A4B00              mov ecx, 004B0A18
:004439ED E83EC3FEFF              call 0042FD30
:004439F2 F7D8                    neg eax
:004439F4 1BC0                    sbb eax, eax
:004439F6 2500120000              and eax, 00001200
:004439FB 0500EE0000              add eax, 0000EE00
:00443A00 50                      push eax
:00443A01 B940DF4A00              mov ecx, 004ADF40
:00443A06 E893FBFCFF              call 0041359E
:00443A0B 8B0D78044B00            mov ecx, dword ptr [004B0478]
:00443A11 69C900090000            imul ecx, 00000900
:00443A17 03C1                    add eax, ecx
:00443A19 50                      push eax
:00443A1A 6A30                    push 00000030
:00443A1C 6A30                    push 00000030
:00443A1E 8B5584                  mov edx, dword ptr [ebp-7C]
:00443A21 83C208                  add edx, 00000008
:00443A24 52                      push edx
:00443A25 8B45AC                  mov eax, dword ptr [ebp-54]
:00443A28 50                      push eax
:00443A29 E8E4F1FFFF              call 00442C12
:00443A2E 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004439E4(C)
|
:00443A31 EB4B                    jmp 00443A7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443942(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443A33 6A04                    push 00000004
:00443A35 B9180A4B00              mov ecx, 004B0A18
:00443A3A E8F1C2FEFF              call 0042FD30
:00443A3F F7D8                    neg eax
:00443A41 1BC0                    sbb eax, eax
:00443A43 2500120000              and eax, 00001200
:00443A48 0500EE0000              add eax, 0000EE00
:00443A4D 50                      push eax
:00443A4E B940DF4A00              mov ecx, 004ADF40
:00443A53 E846FBFCFF              call 0041359E
:00443A58 8B0D78044B00            mov ecx, dword ptr [004B0478]
:00443A5E 69C900090000            imul ecx, 00000900
:00443A64 03C1                    add eax, ecx
:00443A66 50                      push eax
:00443A67 6A30                    push 00000030
:00443A69 6A30                    push 00000030
:00443A6B 8B5584                  mov edx, dword ptr [ebp-7C]
:00443A6E 83C208                  add edx, 00000008
:00443A71 52                      push edx
:00443A72 8B45AC                  mov eax, dword ptr [ebp-54]
:00443A75 50                      push eax
:00443A76 E897F1FFFF              call 00442C12
:00443A7B 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443932(C), :00443A31(U)
|
:00443A7E 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:00443A84 33D2                    xor edx, edx
:00443A86 8A9181000000            mov dl, byte ptr [ecx+00000081]
:00443A8C 81FAFF000000            cmp edx, 000000FF
:00443A92 7434                    je 00443AC8
:00443A94 8B45B4                  mov eax, dword ptr [ebp-4C]
:00443A97 33C9                    xor ecx, ecx
:00443A99 8A08                    mov cl, byte ptr [eax]
:00443A9B 85C9                    test ecx, ecx
:00443A9D 7429                    je 00443AC8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443A9F 6A04                    push 00000004
:00443AA1 6800320000              push 00003200
:00443AA6 B940DF4A00              mov ecx, 004ADF40
:00443AAB E8EEFAFCFF              call 0041359E
:00443AB0 50                      push eax
:00443AB1 6A30                    push 00000030
:00443AB3 6A30                    push 00000030
:00443AB5 8B5584                  mov edx, dword ptr [ebp-7C]
:00443AB8 83C208                  add edx, 00000008
:00443ABB 52                      push edx
:00443ABC 8B45AC                  mov eax, dword ptr [ebp-54]
:00443ABF 50                      push eax
:00443AC0 E84DF1FFFF              call 00442C12
:00443AC5 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443A92(C), :00443A9D(C)
|
:00443AC8 E9B7F9FFFF              jmp 00443484

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004434CF(C)
|
:00443ACD E954F9FFFF              jmp 00443426

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443471(C)
|
:00443AD2 E876F3FCFF              call 00412E4D
:00443AD7 5E                      pop esi
:00443AD8 5B                      pop ebx
:00443AD9 8BE5                    mov esp, ebp
:00443ADB 5D                      pop ebp
:00443ADC C21000                  ret 0010



* Referenced by a CALL at Address:
|:00443793   
|
:00443ADF 55                      push ebp
:00443AE0 8BEC                    mov ebp, esp
:00443AE2 81EC0C010000            sub esp, 0000010C
:00443AE8 6800010000              push 00000100
:00443AED 8D85F8FEFFFF            lea eax, dword ptr [ebp+FFFFFEF8]
:00443AF3 50                      push eax
:00443AF4 8B4D10                  mov ecx, dword ptr [ebp+10]
:00443AF7 51                      push ecx
:00443AF8 E832ED0100              call 0046282F
:00443AFD 83C40C                  add esp, 0000000C
:00443B00 8D95F8FEFFFF            lea edx, dword ptr [ebp+FFFFFEF8]
:00443B06 8955FC                  mov dword ptr [ebp-04], edx
:00443B09 C745F800000000          mov [ebp-08], 00000000
:00443B10 EB09                    jmp 00443B1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443C2D(U)
|
:00443B12 8B45F8                  mov eax, dword ptr [ebp-08]
:00443B15 83C001                  add eax, 00000001
:00443B18 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B10(U)
|
:00443B1B 837DF808                cmp dword ptr [ebp-08], 00000008
:00443B1F 0F830D010000            jnb 00443C32
:00443B25 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:00443B2F EB0F                    jmp 00443B40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B65(U)
|
:00443B31 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:00443B37 83C101                  add ecx, 00000001
:00443B3A 898DF4FEFFFF            mov dword ptr [ebp+FFFFFEF4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B2F(U)
|
:00443B40 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:00443B47 731E                    jnb 00443B67
:00443B49 8B55FC                  mov edx, dword ptr [ebp-04]
:00443B4C 668B02                  mov ax, word ptr [edx]
:00443B4F 662305C08D4700          and ax, word ptr [00478DC0]
:00443B56 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443B59 668901                  mov word ptr [ecx], ax
:00443B5C 8B55FC                  mov edx, dword ptr [ebp-04]
:00443B5F 83C202                  add edx, 00000002
:00443B62 8955FC                  mov dword ptr [ebp-04], edx
:00443B65 EBCA                    jmp 00443B31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B47(C)
|
:00443B67 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:00443B71 EB0F                    jmp 00443B82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BA7(U)
|
:00443B73 8B85F4FEFFFF            mov eax, dword ptr [ebp+FFFFFEF4]
:00443B79 83C001                  add eax, 00000001
:00443B7C 8985F4FEFFFF            mov dword ptr [ebp+FFFFFEF4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B71(U)
|
:00443B82 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:00443B89 731E                    jnb 00443BA9
:00443B8B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443B8E 668B11                  mov dx, word ptr [ecx]
:00443B91 662315C48D4700          and dx, word ptr [00478DC4]
:00443B98 8B45FC                  mov eax, dword ptr [ebp-04]
:00443B9B 668910                  mov word ptr [eax], dx
:00443B9E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443BA1 83C102                  add ecx, 00000002
:00443BA4 894DFC                  mov dword ptr [ebp-04], ecx
:00443BA7 EBCA                    jmp 00443B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B89(C)
|
:00443BA9 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:00443BB3 EB0F                    jmp 00443BC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BE9(U)
|
:00443BB5 8B95F4FEFFFF            mov edx, dword ptr [ebp+FFFFFEF4]
:00443BBB 83C201                  add edx, 00000001
:00443BBE 8995F4FEFFFF            mov dword ptr [ebp+FFFFFEF4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BB3(U)
|
:00443BC4 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:00443BCB 731E                    jnb 00443BEB
:00443BCD 8B45FC                  mov eax, dword ptr [ebp-04]
:00443BD0 668B08                  mov cx, word ptr [eax]
:00443BD3 66230DC88D4700          and cx, word ptr [00478DC8]
:00443BDA 8B55FC                  mov edx, dword ptr [ebp-04]
:00443BDD 66890A                  mov word ptr [edx], cx
:00443BE0 8B45FC                  mov eax, dword ptr [ebp-04]
:00443BE3 83C002                  add eax, 00000002
:00443BE6 8945FC                  mov dword ptr [ebp-04], eax
:00443BE9 EBCA                    jmp 00443BB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BCB(C)
|
:00443BEB C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:00443BF5 EB0F                    jmp 00443C06

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443C2B(U)
|
:00443BF7 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:00443BFD 83C101                  add ecx, 00000001
:00443C00 898DF4FEFFFF            mov dword ptr [ebp+FFFFFEF4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BF5(U)
|
:00443C06 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:00443C0D 731E                    jnb 00443C2D
:00443C0F 8B55FC                  mov edx, dword ptr [ebp-04]
:00443C12 668B02                  mov ax, word ptr [edx]
:00443C15 662305CC8D4700          and ax, word ptr [00478DCC]
:00443C1C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443C1F 668901                  mov word ptr [ecx], ax
:00443C22 8B55FC                  mov edx, dword ptr [ebp-04]
:00443C25 83C202                  add edx, 00000002
:00443C28 8955FC                  mov dword ptr [ebp-04], edx
:00443C2B EBCA                    jmp 00443BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443C0D(C)
|
:00443C2D E9E0FEFFFF              jmp 00443B12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B1F(C)
|
:00443C32 6A00                    push 00000000
:00443C34 8D85F8FEFFFF            lea eax, dword ptr [ebp+FFFFFEF8]
:00443C3A 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00443C3B 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00443C3D 6A10                    push 00000010
:00443C3F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00443C42 51                      push ecx
:00443C43 8B5508                  mov edx, dword ptr [ebp+08]
:00443C46 52                      push edx
:00443C47 E8C6EFFFFF              call 00442C12
:00443C4C 83C418                  add esp, 00000018
:00443C4F 8BE5                    mov esp, ebp
:00443C51 5D                      pop ebp
:00443C52 C3                      ret



* Referenced by a CALL at Address:
|:004435E4   
|
:00443C53 55                      push ebp
:00443C54 8BEC                    mov ebp, esp
:00443C56 83EC14                  sub esp, 00000014
:00443C59 56                      push esi
:00443C5A C745FC00000000          mov [ebp-04], 00000000
:00443C61 8B4510                  mov eax, dword ptr [ebp+10]
:00443C64 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443C66 B903000000              mov ecx, 00000003
:00443C6B F7F1                    div ecx
:00443C6D 8855F8                  mov byte ptr [ebp-08], dl
:00443C70 8B4514                  mov eax, dword ptr [ebp+14]
:00443C73 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443C75 B903000000              mov ecx, 00000003
:00443C7A F7F1                    div ecx
:00443C7C 8855F4                  mov byte ptr [ebp-0C], dl
:00443C7F 8B55F8                  mov edx, dword ptr [ebp-08]
:00443C82 81E2FF000000            and edx, 000000FF
:00443C88 8B4510                  mov eax, dword ptr [ebp+10]
:00443C8B 2BC2                    sub eax, edx
:00443C8D 894510                  mov dword ptr [ebp+10], eax
:00443C90 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00443C93 81E1FF000000            and ecx, 000000FF
:00443C99 8B5514                  mov edx, dword ptr [ebp+14]
:00443C9C 2BD1                    sub edx, ecx
:00443C9E 895514                  mov dword ptr [ebp+14], edx
:00443CA1 8B45F8                  mov eax, dword ptr [ebp-08]
:00443CA4 25FF000000              and eax, 000000FF
:00443CA9 8B4D18                  mov ecx, dword ptr [ebp+18]
:00443CAC 03C8                    add ecx, eax
:00443CAE 894D18                  mov dword ptr [ebp+18], ecx
:00443CB1 8B55F4                  mov edx, dword ptr [ebp-0C]
:00443CB4 81E2FF000000            and edx, 000000FF
:00443CBA 8B451C                  mov eax, dword ptr [ebp+1C]
:00443CBD 03C2                    add eax, edx
:00443CBF 89451C                  mov dword ptr [ebp+1C], eax
:00443CC2 8B4518                  mov eax, dword ptr [ebp+18]
:00443CC5 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443CC7 B903000000              mov ecx, 00000003
:00443CCC F7F1                    div ecx
:00443CCE 85D2                    test edx, edx
:00443CD0 7509                    jne 00443CDB
:00443CD2 C745F000000000          mov [ebp-10], 00000000
:00443CD9 EB16                    jmp 00443CF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443CD0(C)
|
:00443CDB 8B4518                  mov eax, dword ptr [ebp+18]
:00443CDE 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443CE0 B903000000              mov ecx, 00000003
:00443CE5 F7F1                    div ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443CE7 B803000000              mov eax, 00000003
:00443CEC 2BC2                    sub eax, edx
:00443CEE 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443CD9(U)
|
:00443CF1 8B4D18                  mov ecx, dword ptr [ebp+18]
:00443CF4 034DF0                  add ecx, dword ptr [ebp-10]
:00443CF7 894D18                  mov dword ptr [ebp+18], ecx
:00443CFA 8B451C                  mov eax, dword ptr [ebp+1C]
:00443CFD 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443CFF B903000000              mov ecx, 00000003
:00443D04 F7F1                    div ecx
:00443D06 85D2                    test edx, edx
:00443D08 7509                    jne 00443D13
:00443D0A C745EC00000000          mov [ebp-14], 00000000
:00443D11 EB16                    jmp 00443D29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443D08(C)
|
:00443D13 8B451C                  mov eax, dword ptr [ebp+1C]
:00443D16 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443D18 B903000000              mov ecx, 00000003
:00443D1D F7F1                    div ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00443D1F B803000000              mov eax, 00000003
:00443D24 2BC2                    sub eax, edx
:00443D26 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443D11(U)
|
:00443D29 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00443D2C 034DEC                  add ecx, dword ptr [ebp-14]
:00443D2F 894D1C                  mov dword ptr [ebp+1C], ecx
:00443D32 8B7510                  mov esi, dword ptr [ebp+10]
:00443D35 C1E604                  shl esi, 04
:00443D38 B9A8034B00              mov ecx, 004B03A8
:00443D3D E8FAEFFFFF              call 00442D3C
:00443D42 03F0                    add esi, eax
:00443D44 897510                  mov dword ptr [ebp+10], esi
:00443D47 8B7514                  mov esi, dword ptr [ebp+14]
:00443D4A C1E604                  shl esi, 04
:00443D4D B9A8034B00              mov ecx, 004B03A8
:00443D52 E8F6EFFFFF              call 00442D4D
:00443D57 03F0                    add esi, eax
:00443D59 897514                  mov dword ptr [ebp+14], esi
:00443D5C 8B7518                  mov esi, dword ptr [ebp+18]
:00443D5F C1E604                  shl esi, 04
:00443D62 B9A8034B00              mov ecx, 004B03A8
:00443D67 E8D0EFFFFF              call 00442D3C
:00443D6C 03F0                    add esi, eax
:00443D6E 897518                  mov dword ptr [ebp+18], esi
:00443D71 8B751C                  mov esi, dword ptr [ebp+1C]
:00443D74 C1E604                  shl esi, 04
:00443D77 B9A8034B00              mov ecx, 004B03A8
:00443D7C E8CCEFFFFF              call 00442D4D
:00443D81 03F0                    add esi, eax
:00443D83 89751C                  mov dword ptr [ebp+1C], esi
:00443D86 8B5508                  mov edx, dword ptr [ebp+08]
:00443D89 3B5510                  cmp edx, dword ptr [ebp+10]
:00443D8C 721F                    jb 00443DAD
:00443D8E 8B4508                  mov eax, dword ptr [ebp+08]
:00443D91 3B4518                  cmp eax, dword ptr [ebp+18]
:00443D94 7317                    jnb 00443DAD
:00443D96 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00443D99 3B4D14                  cmp ecx, dword ptr [ebp+14]
:00443D9C 720F                    jb 00443DAD
:00443D9E 8B550C                  mov edx, dword ptr [ebp+0C]
:00443DA1 3B551C                  cmp edx, dword ptr [ebp+1C]
:00443DA4 7307                    jnb 00443DAD
:00443DA6 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443D8C(C), :00443D94(C), :00443D9C(C), :00443DA4(C)
|
:00443DAD 8B45FC                  mov eax, dword ptr [ebp-04]
:00443DB0 5E                      pop esi
:00443DB1 8BE5                    mov esp, ebp
:00443DB3 5D                      pop ebp
:00443DB4 C3                      ret



* Referenced by a CALL at Addresses:
|:00442F5E   , :004448CE   
|
:00443DB5 55                      push ebp
:00443DB6 8BEC                    mov ebp, esp
:00443DB8 83EC20                  sub esp, 00000020
:00443DBB 894DE8                  mov dword ptr [ebp-18], ecx
:00443DBE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00443DC1 81E1FF000000            and ecx, 000000FF
:00443DC7 8B55E8                  mov edx, dword ptr [ebp-18]
:00443DCA 8B4214                  mov eax, dword ptr [edx+14]
:00443DCD 99                      cdq
:00443DCE 83E20F                  and edx, 0000000F
:00443DD1 03C2                    add eax, edx
:00443DD3 C1F804                  sar eax, 04
:00443DD6 3BC8                    cmp ecx, eax
:00443DD8 7D1C                    jge 00443DF6
:00443DDA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00443DDD 81E1FF000000            and ecx, 000000FF
:00443DE3 8B55E8                  mov edx, dword ptr [ebp-18]
:00443DE6 8B4218                  mov eax, dword ptr [edx+18]
:00443DE9 99                      cdq
:00443DEA 83E20F                  and edx, 0000000F
:00443DED 03C2                    add eax, edx
:00443DEF C1F804                  sar eax, 04
:00443DF2 3BC8                    cmp ecx, eax
:00443DF4 7C05                    jl 00443DFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443DD8(C)
|
:00443DF6 E902010000              jmp 00443EFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443DF4(C)
|
:00443DFB 8B4508                  mov eax, dword ptr [ebp+08]
:00443DFE 25FF000000              and eax, 000000FF
:00443E03 8B4D10                  mov ecx, dword ptr [ebp+10]
:00443E06 81E1FF000000            and ecx, 000000FF
:00443E0C 03C1                    add eax, ecx
:00443E0E 8B55E8                  mov edx, dword ptr [ebp-18]
:00443E11 8B4A14                  mov ecx, dword ptr [edx+14]
:00443E14 C1E904                  shr ecx, 04
:00443E17 3BC1                    cmp eax, ecx
:00443E19 7318                    jnb 00443E33
:00443E1B 8B5508                  mov edx, dword ptr [ebp+08]
:00443E1E 81E2FF000000            and edx, 000000FF
:00443E24 8B4510                  mov eax, dword ptr [ebp+10]
:00443E27 25FF000000              and eax, 000000FF
:00443E2C 03D0                    add edx, eax
:00443E2E 8955E4                  mov dword ptr [ebp-1C], edx
:00443E31 EB0C                    jmp 00443E3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E19(C)
|
:00443E33 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443E36 8B5114                  mov edx, dword ptr [ecx+14]
:00443E39 C1EA04                  shr edx, 04
:00443E3C 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E31(U)
|
:00443E3F 8B45E4                  mov eax, dword ptr [ebp-1C]
:00443E42 8945F4                  mov dword ptr [ebp-0C], eax
:00443E45 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00443E48 81E1FF000000            and ecx, 000000FF
:00443E4E 8B5514                  mov edx, dword ptr [ebp+14]
:00443E51 81E2FF000000            and edx, 000000FF
:00443E57 03CA                    add ecx, edx
:00443E59 8B45E8                  mov eax, dword ptr [ebp-18]
:00443E5C 8B5018                  mov edx, dword ptr [eax+18]
:00443E5F C1EA04                  shr edx, 04
:00443E62 3BCA                    cmp ecx, edx
:00443E64 7318                    jnb 00443E7E
:00443E66 8B450C                  mov eax, dword ptr [ebp+0C]
:00443E69 25FF000000              and eax, 000000FF
:00443E6E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00443E71 81E1FF000000            and ecx, 000000FF
:00443E77 03C1                    add eax, ecx
:00443E79 8945E0                  mov dword ptr [ebp-20], eax
:00443E7C EB0C                    jmp 00443E8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E64(C)
|
:00443E7E 8B55E8                  mov edx, dword ptr [ebp-18]
:00443E81 8B4218                  mov eax, dword ptr [edx+18]
:00443E84 C1E804                  shr eax, 04
:00443E87 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E7C(U)
|
:00443E8A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00443E8D 894DF0                  mov dword ptr [ebp-10], ecx
:00443E90 8B550C                  mov edx, dword ptr [ebp+0C]
:00443E93 81E2FF000000            and edx, 000000FF
:00443E99 8955F8                  mov dword ptr [ebp-08], edx
:00443E9C EB09                    jmp 00443EA7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443EFB(U)
|
:00443E9E 8B45F8                  mov eax, dword ptr [ebp-08]
:00443EA1 83C001                  add eax, 00000001
:00443EA4 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E9C(U)
|
:00443EA7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443EAA 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00443EAD 734E                    jnb 00443EFD
:00443EAF 8B55E8                  mov edx, dword ptr [ebp-18]
:00443EB2 8B45F8                  mov eax, dword ptr [ebp-08]
:00443EB5 0FAF4214                imul eax, dword ptr [edx+14]
:00443EB9 C1E804                  shr eax, 04
:00443EBC 8945EC                  mov dword ptr [ebp-14], eax
:00443EBF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00443EC2 81E1FF000000            and ecx, 000000FF
:00443EC8 894DFC                  mov dword ptr [ebp-04], ecx
:00443ECB EB09                    jmp 00443ED6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443EF9(U)
|
:00443ECD 8B55FC                  mov edx, dword ptr [ebp-04]
:00443ED0 83C201                  add edx, 00000001
:00443ED3 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443ECB(U)
|
:00443ED6 8B45FC                  mov eax, dword ptr [ebp-04]
:00443ED9 3B45F4                  cmp eax, dword ptr [ebp-0C]
:00443EDC 731D                    jnb 00443EFB
:00443EDE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00443EE1 8B55FC                  mov edx, dword ptr [ebp-04]
:00443EE4 8D840A80520000          lea eax, dword ptr [edx+ecx+00005280]
:00443EEB 50                      push eax
:00443EEC B930DF4A00              mov ecx, 004ADF30
:00443EF1 E8A8F6FCFF              call 0041359E
:00443EF6 C600FF                  mov byte ptr [eax], FF
:00443EF9 EBD2                    jmp 00443ECD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443EDC(C)
|
:00443EFB EBA1                    jmp 00443E9E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443DF6(U), :00443EAD(C)
|
:00443EFD 8BE5                    mov esp, ebp
:00443EFF 5D                      pop ebp
:00443F00 C21000                  ret 0010



* Referenced by a CALL at Address:
|:00444773   
|
:00443F03 55                      push ebp
:00443F04 8BEC                    mov ebp, esp
:00443F06 83EC0C                  sub esp, 0000000C
:00443F09 894DF8                  mov dword ptr [ebp-08], ecx
:00443F0C C745FC00000000          mov [ebp-04], 00000000
:00443F13 8B45F8                  mov eax, dword ptr [ebp-08]
:00443F16 33C9                    xor ecx, ecx
:00443F18 8A8881000000            mov cl, byte ptr [eax+00000081]
:00443F1E 894DF4                  mov dword ptr [ebp-0C], ecx
:00443F21 837DF40A                cmp dword ptr [ebp-0C], 0000000A
:00443F25 0F878D060000            ja 004445B8
:00443F2B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00443F2E FF2495BC454400          jmp dword ptr [4*edx+004445BC]
:00443F35 8B45F8                  mov eax, dword ptr [ebp-08]
:00443F38 668B8882000000          mov cx, word ptr [eax+00000082]
:00443F3F 51                      push ecx
:00443F40 E8FE060000              call 00444643
:00443F45 83C404                  add esp, 00000004
:00443F48 E96B060000              jmp 004445B8
:00443F4D 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F50 668B8282000000          mov ax, word ptr [edx+00000082]
:00443F57 50                      push eax
:00443F58 E8E6060000              call 00444643
:00443F5D 83C404                  add esp, 00000004
:00443F60 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443F63 668B9182000000          mov dx, word ptr [ecx+00000082]
:00443F6A 52                      push edx
:00443F6B E847070000              call 004446B7
:00443F70 83C404                  add esp, 00000004
:00443F73 E940060000              jmp 004445B8
:00443F78 8B45F8                  mov eax, dword ptr [ebp-08]
:00443F7B 8A8883000000            mov cl, byte ptr [eax+00000083]
:00443F81 51                      push ecx
:00443F82 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F85 33C0                    xor eax, eax
:00443F87 8A8282000000            mov al, byte ptr [edx+00000082]
:00443F8D 83E802                  sub eax, 00000002
:00443F90 50                      push eax
:00443F91 E852060000              call 004445E8
:00443F96 83C408                  add esp, 00000008
:00443F99 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443F9C 8A9183000000            mov dl, byte ptr [ecx+00000083]
:00443FA2 52                      push edx
:00443FA3 8B45F8                  mov eax, dword ptr [ebp-08]
:00443FA6 33C9                    xor ecx, ecx
:00443FA8 8A8882000000            mov cl, byte ptr [eax+00000082]
:00443FAE 83C102                  add ecx, 00000002
:00443FB1 51                      push ecx
:00443FB2 E831060000              call 004445E8
:00443FB7 83C408                  add esp, 00000008
:00443FBA 8B55F8                  mov edx, dword ptr [ebp-08]
:00443FBD 33C0                    xor eax, eax
:00443FBF 8A8283000000            mov al, byte ptr [edx+00000083]
:00443FC5 83E802                  sub eax, 00000002
:00443FC8 50                      push eax
:00443FC9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443FCC 8A9182000000            mov dl, byte ptr [ecx+00000082]
:00443FD2 52                      push edx
:00443FD3 E810060000              call 004445E8
:00443FD8 83C408                  add esp, 00000008
:00443FDB 8B45F8                  mov eax, dword ptr [ebp-08]
:00443FDE 33C9                    xor ecx, ecx
:00443FE0 8A8883000000            mov cl, byte ptr [eax+00000083]
:00443FE6 83C102                  add ecx, 00000002
:00443FE9 51                      push ecx
:00443FEA 8B55F8                  mov edx, dword ptr [ebp-08]
:00443FED 8A8282000000            mov al, byte ptr [edx+00000082]
:00443FF3 50                      push eax
:00443FF4 E8EF050000              call 004445E8
:00443FF9 83C408                  add esp, 00000008
:00443FFC E9B7050000              jmp 004445B8
:00444001 C745FC00000000          mov [ebp-04], 00000000
:00444008 EB09                    jmp 00444013

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004440B1(U)
|
:0044400A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044400D 83C101                  add ecx, 00000001
:00444010 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444008(U)
|
:00444013 837DFC02                cmp dword ptr [ebp-04], 00000002
:00444017 0F8399000000            jnb 004440B6
:0044401D 8B55F8                  mov edx, dword ptr [ebp-08]
:00444020 33C0                    xor eax, eax
:00444022 8A8283000000            mov al, byte ptr [edx+00000083]
:00444028 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044402B 8D5408FD                lea edx, dword ptr [eax+ecx-03]
:0044402F 52                      push edx
:00444030 8B45F8                  mov eax, dword ptr [ebp-08]
:00444033 8A8882000000            mov cl, byte ptr [eax+00000082]
:00444039 51                      push ecx
:0044403A E8A9050000              call 004445E8
:0044403F 83C408                  add esp, 00000008
:00444042 8B55F8                  mov edx, dword ptr [ebp-08]
:00444045 33C0                    xor eax, eax
:00444047 8A8283000000            mov al, byte ptr [edx+00000083]
:0044404D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444050 8D540802                lea edx, dword ptr [eax+ecx+02]
:00444054 52                      push edx
:00444055 8B45F8                  mov eax, dword ptr [ebp-08]
:00444058 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044405E 51                      push ecx
:0044405F E884050000              call 004445E8
:00444064 83C408                  add esp, 00000008
:00444067 8B55F8                  mov edx, dword ptr [ebp-08]
:0044406A 8A8283000000            mov al, byte ptr [edx+00000083]
:00444070 50                      push eax
:00444071 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444074 33D2                    xor edx, edx
:00444076 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044407C 8B45FC                  mov eax, dword ptr [ebp-04]
:0044407F 8D4C02FD                lea ecx, dword ptr [edx+eax-03]
:00444083 51                      push ecx
:00444084 E85F050000              call 004445E8
:00444089 83C408                  add esp, 00000008
:0044408C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044408F 8A8283000000            mov al, byte ptr [edx+00000083]
:00444095 50                      push eax
:00444096 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444099 33D2                    xor edx, edx
:0044409B 8A9182000000            mov dl, byte ptr [ecx+00000082]
:004440A1 8B45FC                  mov eax, dword ptr [ebp-04]
:004440A4 8D4C0202                lea ecx, dword ptr [edx+eax+02]
:004440A8 51                      push ecx
:004440A9 E83A050000              call 004445E8
:004440AE 83C408                  add esp, 00000008
:004440B1 E954FFFFFF              jmp 0044400A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444017(C)
|
:004440B6 E9FD040000              jmp 004445B8
:004440BB C745FC00000000          mov [ebp-04], 00000000
:004440C2 EB09                    jmp 004440CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044416B(U)
|
:004440C4 8B55FC                  mov edx, dword ptr [ebp-04]
:004440C7 83C201                  add edx, 00000001
:004440CA 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004440C2(U)
|
:004440CD 837DFC03                cmp dword ptr [ebp-04], 00000003
:004440D1 0F8399000000            jnb 00444170
:004440D7 8B45F8                  mov eax, dword ptr [ebp-08]
:004440DA 33C9                    xor ecx, ecx
:004440DC 8A8883000000            mov cl, byte ptr [eax+00000083]
:004440E2 8B55FC                  mov edx, dword ptr [ebp-04]
:004440E5 8D4411FC                lea eax, dword ptr [ecx+edx-04]
:004440E9 50                      push eax
:004440EA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004440ED 8A9182000000            mov dl, byte ptr [ecx+00000082]
:004440F3 52                      push edx
:004440F4 E8EF040000              call 004445E8
:004440F9 83C408                  add esp, 00000008
:004440FC 8B45F8                  mov eax, dword ptr [ebp-08]
:004440FF 33C9                    xor ecx, ecx
:00444101 8A8883000000            mov cl, byte ptr [eax+00000083]
:00444107 8B55FC                  mov edx, dword ptr [ebp-04]
:0044410A 8D441102                lea eax, dword ptr [ecx+edx+02]
:0044410E 50                      push eax
:0044410F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444112 8A9182000000            mov dl, byte ptr [ecx+00000082]
:00444118 52                      push edx
:00444119 E8CA040000              call 004445E8
:0044411E 83C408                  add esp, 00000008
:00444121 8B45F8                  mov eax, dword ptr [ebp-08]
:00444124 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044412A 51                      push ecx
:0044412B 8B55F8                  mov edx, dword ptr [ebp-08]
:0044412E 33C0                    xor eax, eax
:00444130 8A8282000000            mov al, byte ptr [edx+00000082]
:00444136 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444139 8D5408FC                lea edx, dword ptr [eax+ecx-04]
:0044413D 52                      push edx
:0044413E E8A5040000              call 004445E8
:00444143 83C408                  add esp, 00000008
:00444146 8B45F8                  mov eax, dword ptr [ebp-08]
:00444149 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044414F 51                      push ecx
:00444150 8B55F8                  mov edx, dword ptr [ebp-08]
:00444153 33C0                    xor eax, eax
:00444155 8A8282000000            mov al, byte ptr [edx+00000082]
:0044415B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044415E 8D540802                lea edx, dword ptr [eax+ecx+02]
:00444162 52                      push edx
:00444163 E880040000              call 004445E8
:00444168 83C408                  add esp, 00000008
:0044416B E954FFFFFF              jmp 004440C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004440D1(C)
|
:00444170 E943040000              jmp 004445B8
:00444175 8B45F8                  mov eax, dword ptr [ebp-08]
:00444178 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044417E 51                      push ecx
:0044417F 8B55F8                  mov edx, dword ptr [ebp-08]
:00444182 33C0                    xor eax, eax
:00444184 8A8282000000            mov al, byte ptr [edx+00000082]
:0044418A 83E803                  sub eax, 00000003
:0044418D 50                      push eax
:0044418E E855040000              call 004445E8
:00444193 83C408                  add esp, 00000008
:00444196 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444199 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044419F 52                      push edx
:004441A0 8B45F8                  mov eax, dword ptr [ebp-08]
:004441A3 33C9                    xor ecx, ecx
:004441A5 8A8882000000            mov cl, byte ptr [eax+00000082]
:004441AB 83C103                  add ecx, 00000003
:004441AE 51                      push ecx
:004441AF E834040000              call 004445E8
:004441B4 83C408                  add esp, 00000008
:004441B7 8B55F8                  mov edx, dword ptr [ebp-08]
:004441BA 33C0                    xor eax, eax
:004441BC 8A8283000000            mov al, byte ptr [edx+00000083]
:004441C2 83E803                  sub eax, 00000003
:004441C5 50                      push eax
:004441C6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004441C9 8A9182000000            mov dl, byte ptr [ecx+00000082]
:004441CF 52                      push edx
:004441D0 E813040000              call 004445E8
:004441D5 83C408                  add esp, 00000008
:004441D8 8B45F8                  mov eax, dword ptr [ebp-08]
:004441DB 33C9                    xor ecx, ecx
:004441DD 8A8883000000            mov cl, byte ptr [eax+00000083]
:004441E3 83C103                  add ecx, 00000003
:004441E6 51                      push ecx
:004441E7 8B55F8                  mov edx, dword ptr [ebp-08]
:004441EA 8A8282000000            mov al, byte ptr [edx+00000082]
:004441F0 50                      push eax
:004441F1 E8F2030000              call 004445E8
:004441F6 83C408                  add esp, 00000008
:004441F9 E9BA030000              jmp 004445B8
:004441FE C745FC00000000          mov [ebp-04], 00000000
:00444205 EB09                    jmp 00444210

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004442AE(U)
|
:00444207 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044420A 83C101                  add ecx, 00000001
:0044420D 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444205(U)
|
:00444210 837DFC02                cmp dword ptr [ebp-04], 00000002
:00444214 0F8399000000            jnb 004442B3
:0044421A 8B55F8                  mov edx, dword ptr [ebp-08]
:0044421D 33C0                    xor eax, eax
:0044421F 8A8283000000            mov al, byte ptr [edx+00000083]
:00444225 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444228 8D5408FC                lea edx, dword ptr [eax+ecx-04]
:0044422C 52                      push edx
:0044422D 8B45F8                  mov eax, dword ptr [ebp-08]
:00444230 8A8882000000            mov cl, byte ptr [eax+00000082]
:00444236 51                      push ecx
:00444237 E8AC030000              call 004445E8
:0044423C 83C408                  add esp, 00000008
:0044423F 8B55F8                  mov edx, dword ptr [ebp-08]
:00444242 33C0                    xor eax, eax
:00444244 8A8283000000            mov al, byte ptr [edx+00000083]
:0044424A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044424D 8D540803                lea edx, dword ptr [eax+ecx+03]
:00444251 52                      push edx
:00444252 8B45F8                  mov eax, dword ptr [ebp-08]
:00444255 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044425B 51                      push ecx
:0044425C E887030000              call 004445E8
:00444261 83C408                  add esp, 00000008
:00444264 8B55F8                  mov edx, dword ptr [ebp-08]
:00444267 8A8283000000            mov al, byte ptr [edx+00000083]
:0044426D 50                      push eax
:0044426E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444271 33D2                    xor edx, edx
:00444273 8A9182000000            mov dl, byte ptr [ecx+00000082]
:00444279 8B45FC                  mov eax, dword ptr [ebp-04]
:0044427C 8D4C02FC                lea ecx, dword ptr [edx+eax-04]
:00444280 51                      push ecx
:00444281 E862030000              call 004445E8
:00444286 83C408                  add esp, 00000008
:00444289 8B55F8                  mov edx, dword ptr [ebp-08]
:0044428C 8A8283000000            mov al, byte ptr [edx+00000083]
:00444292 50                      push eax
:00444293 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444296 33D2                    xor edx, edx
:00444298 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044429E 8B45FC                  mov eax, dword ptr [ebp-04]
:004442A1 8D4C0203                lea ecx, dword ptr [edx+eax+03]
:004442A5 51                      push ecx
:004442A6 E83D030000              call 004445E8
:004442AB 83C408                  add esp, 00000008
:004442AE E954FFFFFF              jmp 00444207

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444214(C)
|
:004442B3 E900030000              jmp 004445B8
:004442B8 C745FC00000000          mov [ebp-04], 00000000
:004442BF EB09                    jmp 004442CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444368(U)
|
:004442C1 8B55FC                  mov edx, dword ptr [ebp-04]
:004442C4 83C201                  add edx, 00000001
:004442C7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004442BF(U)
|
:004442CA 837DFC02                cmp dword ptr [ebp-04], 00000002
:004442CE 0F8399000000            jnb 0044436D
:004442D4 8B45F8                  mov eax, dword ptr [ebp-08]
:004442D7 33C9                    xor ecx, ecx
:004442D9 8A8883000000            mov cl, byte ptr [eax+00000083]
:004442DF 8B55FC                  mov edx, dword ptr [ebp-04]
:004442E2 8D4411FB                lea eax, dword ptr [ecx+edx-05]
:004442E6 50                      push eax
:004442E7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004442EA 8A9182000000            mov dl, byte ptr [ecx+00000082]
:004442F0 52                      push edx
:004442F1 E8F2020000              call 004445E8
:004442F6 83C408                  add esp, 00000008
:004442F9 8B45F8                  mov eax, dword ptr [ebp-08]
:004442FC 33C9                    xor ecx, ecx
:004442FE 8A8883000000            mov cl, byte ptr [eax+00000083]
:00444304 8B55FC                  mov edx, dword ptr [ebp-04]
:00444307 8D441104                lea eax, dword ptr [ecx+edx+04]
:0044430B 50                      push eax
:0044430C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044430F 8A9182000000            mov dl, byte ptr [ecx+00000082]
:00444315 52                      push edx
:00444316 E8CD020000              call 004445E8
:0044431B 83C408                  add esp, 00000008
:0044431E 8B45F8                  mov eax, dword ptr [ebp-08]
:00444321 8A8883000000            mov cl, byte ptr [eax+00000083]
:00444327 51                      push ecx
:00444328 8B55F8                  mov edx, dword ptr [ebp-08]
:0044432B 33C0                    xor eax, eax
:0044432D 8A8282000000            mov al, byte ptr [edx+00000082]
:00444333 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444336 8D5408FB                lea edx, dword ptr [eax+ecx-05]
:0044433A 52                      push edx
:0044433B E8A8020000              call 004445E8
:00444340 83C408                  add esp, 00000008
:00444343 8B45F8                  mov eax, dword ptr [ebp-08]
:00444346 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044434C 51                      push ecx
:0044434D 8B55F8                  mov edx, dword ptr [ebp-08]
:00444350 33C0                    xor eax, eax
:00444352 8A8282000000            mov al, byte ptr [edx+00000082]
:00444358 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044435B 8D540804                lea edx, dword ptr [eax+ecx+04]
:0044435F 52                      push edx
:00444360 E883020000              call 004445E8
:00444365 83C408                  add esp, 00000008
:00444368 E954FFFFFF              jmp 004442C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004442CE(C)
|
:0044436D E946020000              jmp 004445B8
:00444372 8B45F8                  mov eax, dword ptr [ebp-08]
:00444375 668B8882000000          mov cx, word ptr [eax+00000082]
:0044437C 51                      push ecx
:0044437D E835030000              call 004446B7
:00444382 83C404                  add esp, 00000004
:00444385 8B55F8                  mov edx, dword ptr [ebp-08]
:00444388 8A8283000000            mov al, byte ptr [edx+00000083]
:0044438E 50                      push eax
:0044438F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444392 33D2                    xor edx, edx
:00444394 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044439A 83EA02                  sub edx, 00000002
:0044439D 52                      push edx
:0044439E E845020000              call 004445E8
:004443A3 83C408                  add esp, 00000008
:004443A6 8B45F8                  mov eax, dword ptr [ebp-08]
:004443A9 8A8883000000            mov cl, byte ptr [eax+00000083]
:004443AF 51                      push ecx
:004443B0 8B55F8                  mov edx, dword ptr [ebp-08]
:004443B3 33C0                    xor eax, eax
:004443B5 8A8282000000            mov al, byte ptr [edx+00000082]
:004443BB 83C002                  add eax, 00000002
:004443BE 50                      push eax
:004443BF E824020000              call 004445E8
:004443C4 83C408                  add esp, 00000008
:004443C7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004443CA 33D2                    xor edx, edx
:004443CC 8A9183000000            mov dl, byte ptr [ecx+00000083]
:004443D2 83EA02                  sub edx, 00000002
:004443D5 52                      push edx
:004443D6 8B45F8                  mov eax, dword ptr [ebp-08]
:004443D9 8A8882000000            mov cl, byte ptr [eax+00000082]
:004443DF 51                      push ecx
:004443E0 E803020000              call 004445E8
:004443E5 83C408                  add esp, 00000008
:004443E8 8B55F8                  mov edx, dword ptr [ebp-08]
:004443EB 33C0                    xor eax, eax
:004443ED 8A8283000000            mov al, byte ptr [edx+00000083]
:004443F3 83C002                  add eax, 00000002
:004443F6 50                      push eax
:004443F7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004443FA 8A9182000000            mov dl, byte ptr [ecx+00000082]
:00444400 52                      push edx
:00444401 E8E2010000              call 004445E8
:00444406 83C408                  add esp, 00000008
:00444409 E9AA010000              jmp 004445B8
:0044440E 8B45F8                  mov eax, dword ptr [ebp-08]
:00444411 668B8882000000          mov cx, word ptr [eax+00000082]
:00444418 51                      push ecx
:00444419 E899020000              call 004446B7
:0044441E 83C404                  add esp, 00000004
:00444421 C745FC00000000          mov [ebp-04], 00000000
:00444428 EB09                    jmp 00444433

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004444E5(U)
|
:0044442A 8B55FC                  mov edx, dword ptr [ebp-04]
:0044442D 83C201                  add edx, 00000001
:00444430 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444428(U)
|
:00444433 837DFC03                cmp dword ptr [ebp-04], 00000003
:00444437 0F83AD000000            jnb 004444EA
:0044443D 8B45F8                  mov eax, dword ptr [ebp-08]
:00444440 33C9                    xor ecx, ecx
:00444442 8A8883000000            mov cl, byte ptr [eax+00000083]
:00444448 83E902                  sub ecx, 00000002
:0044444B 51                      push ecx
:0044444C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044444F 33C0                    xor eax, eax
:00444451 8A8282000000            mov al, byte ptr [edx+00000082]
:00444457 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044445A 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:0044445E 52                      push edx
:0044445F E884010000              call 004445E8
:00444464 83C408                  add esp, 00000008
:00444467 8B45F8                  mov eax, dword ptr [ebp-08]
:0044446A 33C9                    xor ecx, ecx
:0044446C 8A8883000000            mov cl, byte ptr [eax+00000083]
:00444472 83C102                  add ecx, 00000002
:00444475 51                      push ecx
:00444476 8B55F8                  mov edx, dword ptr [ebp-08]
:00444479 33C0                    xor eax, eax
:0044447B 8A8282000000            mov al, byte ptr [edx+00000082]
:00444481 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444484 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:00444488 52                      push edx
:00444489 E85A010000              call 004445E8
:0044448E 83C408                  add esp, 00000008
:00444491 8B45F8                  mov eax, dword ptr [ebp-08]
:00444494 33C9                    xor ecx, ecx
:00444496 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044449C 8B55FC                  mov edx, dword ptr [ebp-04]
:0044449F 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:004444A3 50                      push eax
:004444A4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004444A7 33D2                    xor edx, edx
:004444A9 8A9182000000            mov dl, byte ptr [ecx+00000082]
:004444AF 83C202                  add edx, 00000002
:004444B2 52                      push edx
:004444B3 E830010000              call 004445E8
:004444B8 83C408                  add esp, 00000008
:004444BB 8B45F8                  mov eax, dword ptr [ebp-08]
:004444BE 33C9                    xor ecx, ecx
:004444C0 8A8883000000            mov cl, byte ptr [eax+00000083]
:004444C6 8B55FC                  mov edx, dword ptr [ebp-04]
:004444C9 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:004444CD 50                      push eax
:004444CE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004444D1 33D2                    xor edx, edx
:004444D3 8A9182000000            mov dl, byte ptr [ecx+00000082]
:004444D9 83EA02                  sub edx, 00000002
:004444DC 52                      push edx
:004444DD E806010000              call 004445E8
:004444E2 83C408                  add esp, 00000008
:004444E5 E940FFFFFF              jmp 0044442A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444437(C)
|
:004444EA E9C9000000              jmp 004445B8
:004444EF C745FC00000000          mov [ebp-04], 00000000
:004444F6 EB09                    jmp 00444501

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004445B3(U)
|
:004444F8 8B45FC                  mov eax, dword ptr [ebp-04]
:004444FB 83C001                  add eax, 00000001
:004444FE 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004444F6(U)
|
:00444501 837DFC03                cmp dword ptr [ebp-04], 00000003
:00444505 0F83AD000000            jnb 004445B8
:0044450B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044450E 33D2                    xor edx, edx
:00444510 8A9183000000            mov dl, byte ptr [ecx+00000083]
:00444516 83EA02                  sub edx, 00000002
:00444519 52                      push edx
:0044451A 8B45F8                  mov eax, dword ptr [ebp-08]
:0044451D 33C9                    xor ecx, ecx
:0044451F 8A8882000000            mov cl, byte ptr [eax+00000082]
:00444525 8B55FC                  mov edx, dword ptr [ebp-04]
:00444528 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044452C 50                      push eax
:0044452D E8B6000000              call 004445E8
:00444532 83C408                  add esp, 00000008
:00444535 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444538 33D2                    xor edx, edx
:0044453A 8A9183000000            mov dl, byte ptr [ecx+00000083]
:00444540 83C202                  add edx, 00000002
:00444543 52                      push edx
:00444544 8B45F8                  mov eax, dword ptr [ebp-08]
:00444547 33C9                    xor ecx, ecx
:00444549 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044454F 8B55FC                  mov edx, dword ptr [ebp-04]
:00444552 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:00444556 50                      push eax
:00444557 E88C000000              call 004445E8
:0044455C 83C408                  add esp, 00000008
:0044455F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444562 33D2                    xor edx, edx
:00444564 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044456A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044456D 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:00444571 51                      push ecx
:00444572 8B55F8                  mov edx, dword ptr [ebp-08]
:00444575 33C0                    xor eax, eax
:00444577 8A8282000000            mov al, byte ptr [edx+00000082]
:0044457D 83C002                  add eax, 00000002
:00444580 50                      push eax
:00444581 E862000000              call 004445E8
:00444586 83C408                  add esp, 00000008
:00444589 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044458C 33D2                    xor edx, edx
:0044458E 8A9183000000            mov dl, byte ptr [ecx+00000083]
:00444594 8B45FC                  mov eax, dword ptr [ebp-04]
:00444597 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044459B 51                      push ecx
:0044459C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044459F 33C0                    xor eax, eax
:004445A1 8A8282000000            mov al, byte ptr [edx+00000082]
:004445A7 83E802                  sub eax, 00000002
:004445AA 50                      push eax
:004445AB E838000000              call 004445E8
:004445B0 83C408                  add esp, 00000008
:004445B3 E940FFFFFF              jmp 004444F8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443F25(C), :00443F48(U), :00443F73(U), :00443FFC(U), :004440B6(U)
|:00444170(U), :004441F9(U), :004442B3(U), :0044436D(U), :00444409(U)
|:004444EA(U), :00444505(C)
|
:004445B8 8BE5                    mov esp, ebp
:004445BA 5D                      pop ebp
:004445BB C3                      ret



:004445BC 353F4400                DWORD 00443F35
:004445C0 4D3F4400                DWORD 00443F4D
:004445C4 783F4400                DWORD 00443F78
:004445C8 01404400                DWORD 00444001
:004445CC BB404400                DWORD 004440BB
:004445D0 75414400                DWORD 00444175
:004445D4 FE414400                DWORD 004441FE
:004445D8 B8424400                DWORD 004442B8
:004445DC 72434400                DWORD 00444372
:004445E0 0E444400                DWORD 0044440E
:004445E4 EF444400                DWORD 004444EF



* Referenced by a CALL at Addresses:
|:00443F91   , :00443FB2   , :00443FD3   , :00443FF4   , :0044403A   
|:0044405F   , :00444084   , :004440A9   , :004440F4   , :00444119   
|:0044413E   , :00444163   , :0044418E   , :004441AF   , :004441D0   
|:004441F1   , :00444237   , :0044425C   , :00444281   , :004442A6   
|:004442F1   , :00444316   , :0044433B   , :00444360   , :0044439E   
|:004443BF   , :004443E0   , :00444401   , :0044445F   , :00444489   
|:004444B3   , :004444DD   , :0044452D   , :00444557   , :00444581   
|:004445AB   , :004446A9   , :0044470E   
|
:004445E8 55                      push ebp
:004445E9 8BEC                    mov ebp, esp
:004445EB 8B4508                  mov eax, dword ptr [ebp+08]
:004445EE 25FF000000              and eax, 000000FF
:004445F3 33C9                    xor ecx, ecx
:004445F5 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:004445FB 3BC1                    cmp eax, ecx
:004445FD 7D14                    jge 00444613
:004445FF 8B550C                  mov edx, dword ptr [ebp+0C]
:00444602 81E2FF000000            and edx, 000000FF
:00444608 33C0                    xor eax, eax
:0044460A A0810A4B00              mov al, byte ptr [004B0A81]
:0044460F 3BD0                    cmp edx, eax
:00444611 7C02                    jl 00444615

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004445FD(C)
|
:00444613 EB2C                    jmp 00444641

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444611(C)
|
:00444615 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00444618 81E1FF000000            and ecx, 000000FF
:0044461E 33D2                    xor edx, edx
:00444620 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00444626 0FAFCA                  imul ecx, edx
:00444629 8B4508                  mov eax, dword ptr [ebp+08]
:0044462C 25FF000000              and eax, 000000FF
:00444631 03C8                    add ecx, eax
:00444633 51                      push ecx
:00444634 B970DF4A00              mov ecx, 004ADF70
:00444639 E860EFFCFF              call 0041359E
:0044463E C60001                  mov byte ptr [eax], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444613(U)
|
:00444641 5D                      pop ebp
:00444642 C3                      ret



* Referenced by a CALL at Addresses:
|:00443F40   , :00443F58   
|
:00444643 55                      push ebp
:00444644 8BEC                    mov ebp, esp
:00444646 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00444649 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044464E 68FF000000              push 000000FF
:00444653 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00444656 E825B2FEFF              call 0042F880
:0044465B C645F800                mov [ebp-08], 00
:0044465F EB08                    jmp 00444669

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004446B1(U)
|
:00444661 8A45F8                  mov al, byte ptr [ebp-08]
:00444664 0401                    add al, 01
:00444666 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044465F(U)
|
:00444669 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044466C 81E1FF000000            and ecx, 000000FF
:00444672 83F904                  cmp ecx, 00000004
:00444675 7D3C                    jge 004446B3
:00444677 8A55F8                  mov dl, byte ptr [ebp-08]
:0044467A 52                      push edx
:0044467B 8D4508                  lea eax, dword ptr [ebp+08]
:0044467E 50                      push eax
:0044467F E884330000              call 00447A08
:00444684 83C408                  add esp, 00000008
:00444687 50                      push eax
:00444688 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044468B E800B1FEFF              call 0042F790
:00444690 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444693 81E1FF000000            and ecx, 000000FF
:00444699 81F9FF000000            cmp ecx, 000000FF
:0044469F 7410                    je 004446B1
:004446A1 8A55FD                  mov dl, byte ptr [ebp-03]
:004446A4 52                      push edx
:004446A5 8A45FC                  mov al, byte ptr [ebp-04]
:004446A8 50                      push eax
:004446A9 E83AFFFFFF              call 004445E8
:004446AE 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044469F(C)
|
:004446B1 EBAE                    jmp 00444661

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444675(C)
|
:004446B3 8BE5                    mov esp, ebp
:004446B5 5D                      pop ebp
:004446B6 C3                      ret



* Referenced by a CALL at Addresses:
|:00443F6B   , :0044437D   , :00444419   
|
:004446B7 55                      push ebp
:004446B8 8BEC                    mov ebp, esp
:004446BA 51                      push ecx
:004446BB C645FC00                mov [ebp-04], 00
:004446BF EB08                    jmp 004446C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444716(U)
|
:004446C1 8A45FC                  mov al, byte ptr [ebp-04]
:004446C4 0401                    add al, 01
:004446C6 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004446BF(U)
|
:004446C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004446CC 81E1FF000000            and ecx, 000000FF
:004446D2 83F904                  cmp ecx, 00000004
:004446D5 7D41                    jge 00444718
:004446D7 8B5509                  mov edx, dword ptr [ebp+09]
:004446DA 81E2FF000000            and edx, 000000FF
:004446E0 8B45FC                  mov eax, dword ptr [ebp-04]
:004446E3 25FF000000              and eax, 000000FF
:004446E8 D1E0                    shl eax, 1
:004446EA 031485848E4700          add edx, dword ptr [4*eax+00478E84]
:004446F1 52                      push edx
:004446F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004446F5 81E1FF000000            and ecx, 000000FF
:004446FB 8B55FC                  mov edx, dword ptr [ebp-04]
:004446FE 81E2FF000000            and edx, 000000FF
:00444704 D1E2                    shl edx, 1
:00444706 030C95808E4700          add ecx, dword ptr [4*edx+00478E80]
:0044470D 51                      push ecx
:0044470E E8D5FEFFFF              call 004445E8
:00444713 83C408                  add esp, 00000008
:00444716 EBA9                    jmp 004446C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004446D5(C)
|
:00444718 8BE5                    mov esp, ebp
:0044471A 5D                      pop ebp
:0044471B C3                      ret



* Referenced by a CALL at Addresses:
|:00445DF7   , :004460B6   , :0044DA7E   , :0044DBAA   , :0044DE0F   
|
:0044471C 55                      push ebp
:0044471D 8BEC                    mov ebp, esp
:0044471F 51                      push ecx
:00444720 894DFC                  mov dword ptr [ebp-04], ecx
:00444723 8B45FC                  mov eax, dword ptr [ebp-04]
:00444726 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444729 888881000000            mov byte ptr [eax+00000081], cl
:0044472F 8D5508                  lea edx, dword ptr [ebp+08]
:00444732 52                      push edx
:00444733 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444736 81C182000000            add ecx, 00000082
:0044473C E84FB0FEFF              call 0042F790
:00444741 6A00                    push 00000000
:00444743 6880070000              push 00000780
:00444748 6A00                    push 00000000
:0044474A B970DF4A00              mov ecx, 004ADF70
:0044474F E84AEEFCFF              call 0041359E
:00444754 50                      push eax
:00444755 E8EEE00100              call 00462848
:0044475A 83C40C                  add esp, 0000000C
:0044475D 8B45FC                  mov eax, dword ptr [ebp-04]
:00444760 33C9                    xor ecx, ecx
:00444762 8A8881000000            mov cl, byte ptr [eax+00000081]
:00444768 81F9FF000000            cmp ecx, 000000FF
:0044476E 7408                    je 00444778
:00444770 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444773 E88BF7FFFF              call 00443F03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044476E(C)
|
:00444778 8BE5                    mov esp, ebp
:0044477A 5D                      pop ebp
:0044477B C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00438E72   , :00438F62   , :004398AF   , :004399F7   , :00439A3F   
|:00439A5B   , :00444DE4   , :00444EC1   , :004458AF   , :00445DFF   
|:004460C6   , :00446456   , :00446F8A   , :00447088   , :00449F9E   
|:0044D7FD   , :0044DA88   , :0044DBB4   , :0044DC20   , :0044DE19   
|:00455263   , :004552F5   , :00456DE9   , :00457462   , :00458048   
|:0045A363   
|
:0044477E 55                      push ebp
:0044477F 8BEC                    mov ebp, esp
:00444781 51                      push ecx
:00444782 894DFC                  mov dword ptr [ebp-04], ecx
:00444785 33C0                    xor eax, eax
:00444787 833D78044B0000          cmp dword ptr [004B0478], 00000000
:0044478E 0F94C0                  sete al
:00444791 A378044B00              mov dword ptr [004B0478], eax
:00444796 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444799 8B4118                  mov eax, dword ptr [ecx+18]
:0044479C 99                      cdq
:0044479D 83E20F                  and edx, 0000000F
:004447A0 03C2                    add eax, edx
:004447A2 C1F804                  sar eax, 04
:004447A5 50                      push eax
:004447A6 8B55FC                  mov edx, dword ptr [ebp-04]
:004447A9 8B4214                  mov eax, dword ptr [edx+14]
:004447AC 99                      cdq
:004447AD 83E20F                  and edx, 0000000F
:004447B0 03C2                    add eax, edx
:004447B2 C1F804                  sar eax, 04
:004447B5 50                      push eax
:004447B6 6A00                    push 00000000
:004447B8 6A00                    push 00000000
:004447BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004447BD E87CE8FFFF              call 0044303E
:004447C2 8BE5                    mov esp, ebp
:004447C4 5D                      pop ebp
:004447C5 C3                      ret



* Referenced by a CALL at Addresses:
|:0042B47F   , :0042B6F8   , :0042D5CC   , :0042D5F4   , :00430043   
|:00430B69   , :00430B86   , :00430E9F   , :004310DA   , :004320E2   
|:004334C6   , :00434A29   , :00434BE0   , :00434D9D   , :00435274   
|:00435531   , :004358B1   , :00435C3A   , :0043691D   , :00436EA2   
|:004376F8   , :00437716   , :00437E02   , :004388A2   , :00438D0A   
|:004397E0   , :00439910   , :0043C4D9   , :00444A21   , :00445081   
|:0044512F   , :004466C0   , :00446B21   , :00446D98   
|
:004447C6 55                      push ebp
:004447C7 8BEC                    mov ebp, esp
:004447C9 83EC14                  sub esp, 00000014
:004447CC 894DF4                  mov dword ptr [ebp-0C], ecx
:004447CF 8B4508                  mov eax, dword ptr [ebp+08]
:004447D2 25FF000000              and eax, 000000FF
:004447D7 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004447D8 B903000000              mov ecx, 00000003
:004447DD F7F9                    idiv ecx
:004447DF 8855FC                  mov byte ptr [ebp-04], dl
:004447E2 8B450C                  mov eax, dword ptr [ebp+0C]
:004447E5 25FF000000              and eax, 000000FF
:004447EA 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004447EB B903000000              mov ecx, 00000003
:004447F0 F7F9                    idiv ecx
:004447F2 8855F8                  mov byte ptr [ebp-08], dl
:004447F5 8A5508                  mov dl, byte ptr [ebp+08]
:004447F8 2A55FC                  sub dl, byte ptr [ebp-04]
:004447FB 885508                  mov byte ptr [ebp+08], dl
:004447FE 8A450C                  mov al, byte ptr [ebp+0C]
:00444801 2A45F8                  sub al, byte ptr [ebp-08]
:00444804 88450C                  mov byte ptr [ebp+0C], al
:00444807 8A4D10                  mov cl, byte ptr [ebp+10]
:0044480A 024DFC                  add cl, byte ptr [ebp-04]
:0044480D 884D10                  mov byte ptr [ebp+10], cl
:00444810 8A5514                  mov dl, byte ptr [ebp+14]
:00444813 0255F8                  add dl, byte ptr [ebp-08]
:00444816 885514                  mov byte ptr [ebp+14], dl
:00444819 8B4510                  mov eax, dword ptr [ebp+10]
:0044481C 25FF000000              and eax, 000000FF
:00444821 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444822 B903000000              mov ecx, 00000003
:00444827 F7F9                    idiv ecx
:00444829 85D2                    test edx, edx
:0044482B 7509                    jne 00444836
:0044482D C745F000000000          mov [ebp-10], 00000000
:00444834 EB1F                    jmp 00444855

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044482B(C)
|
:00444836 8B4510                  mov eax, dword ptr [ebp+10]
:00444839 25FF000000              and eax, 000000FF
:0044483E 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044483F B903000000              mov ecx, 00000003
:00444844 F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444846 B803000000              mov eax, 00000003
:0044484B 2BC2                    sub eax, edx
:0044484D 25FF000000              and eax, 000000FF
:00444852 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444834(U)
|
:00444855 8A4D10                  mov cl, byte ptr [ebp+10]
:00444858 024DF0                  add cl, byte ptr [ebp-10]
:0044485B 884D10                  mov byte ptr [ebp+10], cl
:0044485E 8B4514                  mov eax, dword ptr [ebp+14]
:00444861 25FF000000              and eax, 000000FF
:00444866 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444867 B903000000              mov ecx, 00000003
:0044486C F7F9                    idiv ecx
:0044486E 85D2                    test edx, edx
:00444870 7509                    jne 0044487B
:00444872 C745EC00000000          mov [ebp-14], 00000000
:00444879 EB1F                    jmp 0044489A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444870(C)
|
:0044487B 8B4514                  mov eax, dword ptr [ebp+14]
:0044487E 25FF000000              and eax, 000000FF
:00444883 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444884 B903000000              mov ecx, 00000003
:00444889 F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044488B B803000000              mov eax, 00000003
:00444890 2BC2                    sub eax, edx
:00444892 25FF000000              and eax, 000000FF
:00444897 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444879(U)
|
:0044489A 8A4D14                  mov cl, byte ptr [ebp+14]
:0044489D 024DEC                  add cl, byte ptr [ebp-14]
:004448A0 884D14                  mov byte ptr [ebp+14], cl
:004448A3 8A5514                  mov dl, byte ptr [ebp+14]
:004448A6 52                      push edx
:004448A7 8A4510                  mov al, byte ptr [ebp+10]
:004448AA 50                      push eax
:004448AB 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004448AE 51                      push ecx
:004448AF 8A5508                  mov dl, byte ptr [ebp+08]
:004448B2 52                      push edx
:004448B3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004448B6 E883E7FFFF              call 0044303E
:004448BB 8A4514                  mov al, byte ptr [ebp+14]
:004448BE 50                      push eax
:004448BF 8A4D10                  mov cl, byte ptr [ebp+10]
:004448C2 51                      push ecx
:004448C3 8A550C                  mov dl, byte ptr [ebp+0C]
:004448C6 52                      push edx
:004448C7 8A4508                  mov al, byte ptr [ebp+08]
:004448CA 50                      push eax
:004448CB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004448CE E8E2F4FFFF              call 00443DB5
:004448D3 8BE5                    mov esp, ebp
:004448D5 5D                      pop ebp
:004448D6 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0042CECB   , :0044626B   
|
:004448D9 55                      push ebp
:004448DA 8BEC                    mov ebp, esp
:004448DC 83EC14                  sub esp, 00000014
:004448DF 894DF4                  mov dword ptr [ebp-0C], ecx
:004448E2 8B4508                  mov eax, dword ptr [ebp+08]
:004448E5 25FF000000              and eax, 000000FF
:004448EA 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004448EB B903000000              mov ecx, 00000003
:004448F0 F7F9                    idiv ecx
:004448F2 8855FC                  mov byte ptr [ebp-04], dl
:004448F5 8B450C                  mov eax, dword ptr [ebp+0C]
:004448F8 25FF000000              and eax, 000000FF
:004448FD 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004448FE B903000000              mov ecx, 00000003
:00444903 F7F9                    idiv ecx
:00444905 8855F8                  mov byte ptr [ebp-08], dl
:00444908 8A5508                  mov dl, byte ptr [ebp+08]
:0044490B 2A55FC                  sub dl, byte ptr [ebp-04]
:0044490E 885508                  mov byte ptr [ebp+08], dl
:00444911 8A450C                  mov al, byte ptr [ebp+0C]
:00444914 2A45F8                  sub al, byte ptr [ebp-08]
:00444917 88450C                  mov byte ptr [ebp+0C], al
:0044491A 8A4D10                  mov cl, byte ptr [ebp+10]
:0044491D 024DFC                  add cl, byte ptr [ebp-04]
:00444920 884D10                  mov byte ptr [ebp+10], cl
:00444923 8A5514                  mov dl, byte ptr [ebp+14]
:00444926 0255F8                  add dl, byte ptr [ebp-08]
:00444929 885514                  mov byte ptr [ebp+14], dl
:0044492C 8B4510                  mov eax, dword ptr [ebp+10]
:0044492F 25FF000000              and eax, 000000FF
:00444934 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444935 B903000000              mov ecx, 00000003
:0044493A F7F9                    idiv ecx
:0044493C 85D2                    test edx, edx
:0044493E 7509                    jne 00444949
:00444940 C745F000000000          mov [ebp-10], 00000000
:00444947 EB1F                    jmp 00444968

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044493E(C)
|
:00444949 8B4510                  mov eax, dword ptr [ebp+10]
:0044494C 25FF000000              and eax, 000000FF
:00444951 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444952 B903000000              mov ecx, 00000003
:00444957 F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444959 B803000000              mov eax, 00000003
:0044495E 2BC2                    sub eax, edx
:00444960 25FF000000              and eax, 000000FF
:00444965 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444947(U)
|
:00444968 8A4D10                  mov cl, byte ptr [ebp+10]
:0044496B 024DF0                  add cl, byte ptr [ebp-10]
:0044496E 884D10                  mov byte ptr [ebp+10], cl
:00444971 8B4514                  mov eax, dword ptr [ebp+14]
:00444974 25FF000000              and eax, 000000FF
:00444979 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044497A B903000000              mov ecx, 00000003
:0044497F F7F9                    idiv ecx
:00444981 85D2                    test edx, edx
:00444983 7509                    jne 0044498E
:00444985 C745EC00000000          mov [ebp-14], 00000000
:0044498C EB1F                    jmp 004449AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444983(C)
|
:0044498E 8B4514                  mov eax, dword ptr [ebp+14]
:00444991 25FF000000              and eax, 000000FF
:00444996 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444997 B903000000              mov ecx, 00000003
:0044499C F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044499E B803000000              mov eax, 00000003
:004449A3 2BC2                    sub eax, edx
:004449A5 25FF000000              and eax, 000000FF
:004449AA 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044498C(U)
|
:004449AD 8A4D14                  mov cl, byte ptr [ebp+14]
:004449B0 024DEC                  add cl, byte ptr [ebp-14]
:004449B3 884D14                  mov byte ptr [ebp+14], cl
:004449B6 8B55F4                  mov edx, dword ptr [ebp-0C]
:004449B9 8A4508                  mov al, byte ptr [ebp+08]
:004449BC 884244                  mov byte ptr [edx+44], al
:004449BF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004449C2 8A550C                  mov dl, byte ptr [ebp+0C]
:004449C5 885145                  mov byte ptr [ecx+45], dl
:004449C8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004449CB 8A4D10                  mov cl, byte ptr [ebp+10]
:004449CE 884846                  mov byte ptr [eax+46], cl
:004449D1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004449D4 8A4514                  mov al, byte ptr [ebp+14]
:004449D7 884247                  mov byte ptr [edx+47], al
:004449DA 8BE5                    mov esp, ebp
:004449DC 5D                      pop ebp
:004449DD C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00431169   , :00444E23   , :00444F1A   , :00444FCF   , :004456B1   
|:004463C6   , :00456C22   , :00456E3C   , :00456F2A   , :00456FA0   
|:0045723D   , :004575BF   , :00467EF8   , :004680AF   , :004693FB   
|:00469802   , :00469A09   
|
:004449E0 55                      push ebp
:004449E1 8BEC                    mov ebp, esp
:004449E3 51                      push ecx
:004449E4 894DFC                  mov dword ptr [ebp-04], ecx
:004449E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004449EA E856000000              call 00444A45
:004449EF 85C0                    test eax, eax
:004449F1 7438                    je 00444A2B
:004449F3 E83AE4FCFF              call 00412E32
:004449F8 6A00                    push 00000000
:004449FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004449FD E82D000000              call 00444A2F
:00444A02 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A05 8A4847                  mov cl, byte ptr [eax+47]
:00444A08 51                      push ecx
:00444A09 8B55FC                  mov edx, dword ptr [ebp-04]
:00444A0C 8A4246                  mov al, byte ptr [edx+46]
:00444A0F 50                      push eax
:00444A10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444A13 8A5145                  mov dl, byte ptr [ecx+45]
:00444A16 52                      push edx
:00444A17 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A1A 8A4844                  mov cl, byte ptr [eax+44]
:00444A1D 51                      push ecx
:00444A1E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444A21 E8A0FDFFFF              call 004447C6
:00444A26 E822E4FCFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004449F1(C)
|
:00444A2B 8BE5                    mov esp, ebp
:00444A2D 5D                      pop ebp
:00444A2E C3                      ret



* Referenced by a CALL at Addresses:
|:0042CF65   , :004449FD   , :004463BE   , :00446400   , :0044646C   
|
:00444A2F 55                      push ebp
:00444A30 8BEC                    mov ebp, esp
:00444A32 51                      push ecx
:00444A33 894DFC                  mov dword ptr [ebp-04], ecx
:00444A36 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00444A3C 894850                  mov dword ptr [eax+50], ecx
:00444A3F 8BE5                    mov esp, ebp
:00444A41 5D                      pop ebp
:00444A42 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004449EA   , :00444F0C   , :00456E2E   , :00456F1C   , :004693ED   
|:004697F4   , :004699FB   
|
:00444A45 55                      push ebp
:00444A46 8BEC                    mov ebp, esp
:00444A48 51                      push ecx
:00444A49 894DFC                  mov dword ptr [ebp-04], ecx
:00444A4C 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A4F 8B4050                  mov eax, dword ptr [eax+50]
:00444A52 8BE5                    mov esp, ebp
:00444A54 5D                      pop ebp
:00444A55 C3                      ret



* Referenced by a CALL at Addresses:
|:00443414   , :00444D71   , :00444DAE   , :00444E86   , :00446444   
|:00456DA5   
|
:00444A56 55                      push ebp
:00444A57 8BEC                    mov ebp, esp
:00444A59 51                      push ecx
:00444A5A 894DFC                  mov dword ptr [ebp-04], ecx
:00444A5D B980594800              mov ecx, 00485980
:00444A62 E8BBB6FDFF              call 00420122
:00444A67 B980594800              mov ecx, 00485980
:00444A6C E815B7FDFF              call 00420186
:00444A71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444A74 89416C                  mov dword ptr [ecx+6C], eax
:00444A77 B980594800              mov ecx, 00485980
:00444A7C E834B7FDFF              call 004201B5
:00444A81 8B55FC                  mov edx, dword ptr [ebp-04]
:00444A84 894270                  mov dword ptr [edx+70], eax
:00444A87 8BE5                    mov esp, ebp
:00444A89 5D                      pop ebp
:00444A8A C3                      ret


:00444A8B 55                      push ebp
:00444A8C 8BEC                    mov ebp, esp
:00444A8E 83EC10                  sub esp, 00000010
:00444A91 894DF0                  mov dword ptr [ebp-10], ecx
:00444A94 33C0                    xor eax, eax
:00444A96 A050044B00              mov al, byte ptr [004B0450]
:00444A9B 83E001                  and eax, 00000001
:00444A9E 85C0                    test eax, eax
:00444AA0 7526                    jne 00444AC8
:00444AA2 8A0D50044B00            mov cl, byte ptr [004B0450]
:00444AA8 80C901                  or cl, 01
:00444AAB 880D50044B00            mov byte ptr [004B0450], cl
:00444AB1 B944044B00              mov ecx, 004B0444
:00444AB6 E8F52CFCFF              call 004077B0
:00444ABB 68A04B4400              push 00444BA0
:00444AC0 E8AB890200              call 0046D470
:00444AC5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444AA0(C)
|
:00444AC8 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00444ACB E8E02CFCFF              call 004077B0
:00444AD0 8B55F0                  mov edx, dword ptr [ebp-10]
:00444AD3 8B426C                  mov eax, dword ptr [edx+6C]
:00444AD6 8945F8                  mov dword ptr [ebp-08], eax
:00444AD9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444ADC 8B5170                  mov edx, dword ptr [ecx+70]
:00444ADF 8955F4                  mov dword ptr [ebp-0C], edx
:00444AE2 8B45F0                  mov eax, dword ptr [ebp-10]
:00444AE5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444AE8 3B483C                  cmp ecx, dword ptr [eax+3C]
:00444AEB 7C2D                    jl 00444B1A
:00444AED 8B55F0                  mov edx, dword ptr [ebp-10]
:00444AF0 8B45F4                  mov eax, dword ptr [ebp-0C]
:00444AF3 3B4240                  cmp eax, dword ptr [edx+40]
:00444AF6 7C22                    jl 00444B1A
:00444AF8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444AFB 8B513C                  mov edx, dword ptr [ecx+3C]
:00444AFE 8B45F0                  mov eax, dword ptr [ebp-10]
:00444B01 035014                  add edx, dword ptr [eax+14]
:00444B04 3955F8                  cmp dword ptr [ebp-08], edx
:00444B07 7D11                    jge 00444B1A
:00444B09 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444B0C 8B5140                  mov edx, dword ptr [ecx+40]
:00444B0F 8B45F0                  mov eax, dword ptr [ebp-10]
:00444B12 035018                  add edx, dword ptr [eax+18]
:00444B15 3955F4                  cmp dword ptr [ebp-0C], edx
:00444B18 7C0A                    jl 00444B24

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444AEB(C), :00444AF6(C), :00444B07(C)
|
:00444B1A C645FCFF                mov [ebp-04], FF
:00444B1E C645FDFF                mov [ebp-03], FF
:00444B22 EB3A                    jmp 00444B5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444B18(C)
|
:00444B24 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444B27 8B45F8                  mov eax, dword ptr [ebp-08]
:00444B2A 2B413C                  sub eax, dword ptr [ecx+3C]
:00444B2D 99                      cdq
:00444B2E 83E20F                  and edx, 0000000F
:00444B31 03C2                    add eax, edx
:00444B33 C1F804                  sar eax, 04
:00444B36 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444B37 B903000000              mov ecx, 00000003
:00444B3C F7F9                    idiv ecx
:00444B3E 8845FC                  mov byte ptr [ebp-04], al
:00444B41 8B55F0                  mov edx, dword ptr [ebp-10]
:00444B44 8B45F4                  mov eax, dword ptr [ebp-0C]
:00444B47 2B4240                  sub eax, dword ptr [edx+40]
:00444B4A 99                      cdq
:00444B4B 83E20F                  and edx, 0000000F
:00444B4E 03C2                    add eax, edx
:00444B50 C1F804                  sar eax, 04
:00444B53 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444B54 B903000000              mov ecx, 00000003
:00444B59 F7F9                    idiv ecx
:00444B5B 8845FD                  mov byte ptr [ebp-03], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444B22(U)
|
:00444B5E 8B55F0                  mov edx, dword ptr [ebp-10]
:00444B61 33C0                    xor eax, eax
:00444B63 8A4254                  mov al, byte ptr [edx+54]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00444B66 3DFF000000              cmp eax, 000000FF
:00444B6B 7507                    jne 00444B74
:00444B6D C60544044B00FF          mov byte ptr [004B0444], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444B6B(C)
|
:00444B74 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00444B77 51                      push ecx
:00444B78 6844044B00              push 004B0444
:00444B7D E81EB1FEFF              call 0042FCA0
:00444B82 83C408                  add esp, 00000008
:00444B85 85C0                    test eax, eax
:00444B87 750E                    jne 00444B97
:00444B89 8D55FC                  lea edx, dword ptr [ebp-04]
:00444B8C 52                      push edx
:00444B8D B944044B00              mov ecx, 004B0444
:00444B92 E8F9ABFEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444B87(C)
|
:00444B97 B844044B00              mov eax, 004B0444
:00444B9C 8BE5                    mov esp, ebp
:00444B9E 5D                      pop ebp
:00444B9F C3                      ret


:00444BA0 55                      push ebp
:00444BA1 8BEC                    mov ebp, esp
:00444BA3 5D                      pop ebp
:00444BA4 C3                      ret



* Referenced by a CALL at Addresses:
|:00444D79   , :00444DF1   , :00444ECE   , :004451F8   , :00456DF3   
|
:00444BA5 55                      push ebp
:00444BA6 8BEC                    mov ebp, esp
:00444BA8 83EC20                  sub esp, 00000020
:00444BAB 894DE0                  mov dword ptr [ebp-20], ecx
:00444BAE 33C0                    xor eax, eax
:00444BB0 A04C044B00              mov al, byte ptr [004B044C]
:00444BB5 83E001                  and eax, 00000001
:00444BB8 85C0                    test eax, eax
:00444BBA 7526                    jne 00444BE2
:00444BBC 8A0D4C044B00            mov cl, byte ptr [004B044C]
:00444BC2 80C901                  or cl, 01
:00444BC5 880D4C044B00            mov byte ptr [004B044C], cl
:00444BCB B9A0034B00              mov ecx, 004B03A0
:00444BD0 E8DB2BFCFF              call 004077B0
:00444BD5 68154D4400              push 00444D15
:00444BDA E891880200              call 0046D470
:00444BDF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444BBA(C)
|
:00444BE2 8B55E0                  mov edx, dword ptr [ebp-20]
:00444BE5 8B426C                  mov eax, dword ptr [edx+6C]
:00444BE8 8945E8                  mov dword ptr [ebp-18], eax
:00444BEB 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00444BEE 8B5170                  mov edx, dword ptr [ecx+70]
:00444BF1 8955E4                  mov dword ptr [ebp-1C], edx
:00444BF4 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00444BF7 E8B42BFCFF              call 004077B0
:00444BFC 8D45F0                  lea eax, dword ptr [ebp-10]
:00444BFF 50                      push eax
:00444C00 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00444C06 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00444C07 FF15C8864B00            Call dword ptr [004B86C8]
:00444C0D 8B55E0                  mov edx, dword ptr [ebp-20]
:00444C10 8B45E8                  mov eax, dword ptr [ebp-18]
:00444C13 3B423C                  cmp eax, dword ptr [edx+3C]
:00444C16 7C25                    jl 00444C3D
:00444C18 837DE428                cmp dword ptr [ebp-1C], 00000028
:00444C1C 7C1F                    jl 00444C3D
:00444C1E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00444C21 8B513C                  mov edx, dword ptr [ecx+3C]
:00444C24 8B45E0                  mov eax, dword ptr [ebp-20]
:00444C27 035014                  add edx, dword ptr [eax+14]
:00444C2A 3955E8                  cmp dword ptr [ebp-18], edx
:00444C2D 7D0E                    jge 00444C3D
:00444C2F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00444C32 8B5118                  mov edx, dword ptr [ecx+18]
:00444C35 83C228                  add edx, 00000028
:00444C38 3955E4                  cmp dword ptr [ebp-1C], edx
:00444C3B 7C0A                    jl 00444C47

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444C16(C), :00444C1C(C), :00444C2D(C)
|
:00444C3D C645ECFF                mov [ebp-14], FF
:00444C41 C645EDFF                mov [ebp-13], FF
:00444C45 EB5D                    jmp 00444CA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444C3B(C)
|
:00444C47 8B45E8                  mov eax, dword ptr [ebp-18]
:00444C4A 3B45F8                  cmp eax, dword ptr [ebp-08]
:00444C4D 7D08                    jge 00444C57
:00444C4F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00444C52 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00444C55 7C0A                    jl 00444C61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444C4D(C)
|
:00444C57 C645ECFF                mov [ebp-14], FF
:00444C5B C645EDFF                mov [ebp-13], FF
:00444C5F EB43                    jmp 00444CA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444C55(C)
|
:00444C61 8B55E0                  mov edx, dword ptr [ebp-20]
:00444C64 8B45E8                  mov eax, dword ptr [ebp-18]
:00444C67 2B423C                  sub eax, dword ptr [edx+3C]
:00444C6A 99                      cdq
:00444C6B 83E20F                  and edx, 0000000F
:00444C6E 03C2                    add eax, edx
:00444C70 C1F804                  sar eax, 04
:00444C73 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00444C76 034104                  add eax, dword ptr [ecx+04]
:00444C79 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444C7A B903000000              mov ecx, 00000003
:00444C7F F7F9                    idiv ecx
:00444C81 8845EC                  mov byte ptr [ebp-14], al
:00444C84 8B45E4                  mov eax, dword ptr [ebp-1C]
:00444C87 83E828                  sub eax, 00000028
:00444C8A 99                      cdq
:00444C8B 83E20F                  and edx, 0000000F
:00444C8E 03C2                    add eax, edx
:00444C90 C1F804                  sar eax, 04
:00444C93 8B55E0                  mov edx, dword ptr [ebp-20]
:00444C96 034208                  add eax, dword ptr [edx+08]
:00444C99 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00444C9A B903000000              mov ecx, 00000003
:00444C9F F7F9                    idiv ecx
:00444CA1 8845ED                  mov byte ptr [ebp-13], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444C45(U), :00444C5F(U)
|
:00444CA4 8B55E0                  mov edx, dword ptr [ebp-20]
:00444CA7 33C0                    xor eax, eax
:00444CA9 8A4254                  mov al, byte ptr [edx+54]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00444CAC 3DFF000000              cmp eax, 000000FF
:00444CB1 7507                    jne 00444CBA
:00444CB3 C605A0034B00FF          mov byte ptr [004B03A0], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444CB1(C)
|
:00444CBA 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00444CBD 51                      push ecx
:00444CBE 68A0034B00              push 004B03A0
:00444CC3 E8D8AFFEFF              call 0042FCA0
:00444CC8 83C408                  add esp, 00000008
:00444CCB 85C0                    test eax, eax
:00444CCD 753D                    jne 00444D0C
:00444CCF 33D2                    xor edx, edx
:00444CD1 8A15A0034B00            mov dl, byte ptr [004B03A0]
:00444CD7 81FAFF000000            cmp edx, 000000FF
:00444CDD 7408                    je 00444CE7
:00444CDF 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00444CE2 E80B040000              call 004450F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444CDD(C)
|
:00444CE7 8D45EC                  lea eax, dword ptr [ebp-14]
:00444CEA 50                      push eax
:00444CEB B9A0034B00              mov ecx, 004B03A0
:00444CF0 E89BAAFEFF              call 0042F790
:00444CF5 E838E1FCFF              call 00412E32
:00444CFA 68A0034B00              push 004B03A0
:00444CFF 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00444D02 E8E8020000              call 00444FEF
:00444D07 E841E1FCFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444CCD(C)
|
:00444D0C B8A0034B00              mov eax, 004B03A0
:00444D11 8BE5                    mov esp, ebp
:00444D13 5D                      pop ebp
:00444D14 C3                      ret


:00444D15 55                      push ebp
:00444D16 8BEC                    mov ebp, esp
:00444D18 5D                      pop ebp
:00444D19 C3                      ret



* Referenced by a CALL at Addresses:
|:00438E8F   , :00445E82   , :00446FA9   , :0044DAA5   
|
:00444D1A 55                      push ebp
:00444D1B 8BEC                    mov ebp, esp
:00444D1D 83EC14                  sub esp, 00000014
:00444D20 894DEC                  mov dword ptr [ebp-14], ecx
:00444D23 33C0                    xor eax, eax
:00444D25 A038044B00              mov al, byte ptr [004B0438]
:00444D2A 83E001                  and eax, 00000001
:00444D2D 85C0                    test eax, eax
:00444D2F 7526                    jne 00444D57
:00444D31 8A0D38044B00            mov cl, byte ptr [004B0438]
:00444D37 80C901                  or cl, 01
:00444D3A 880D38044B00            mov byte ptr [004B0438], cl
:00444D40 B948044B00              mov ecx, 004B0448
:00444D45 E8662AFCFF              call 004077B0
:00444D4A 68EA4F4400              push 00444FEA
:00444D4F E81C870200              call 0046D470
:00444D54 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444D2F(C)
|
:00444D57 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00444D5A E8512AFCFF              call 004077B0
:00444D5F C745F801000000          mov [ebp-08], 00000001
:00444D66 C645F0FF                mov [ebp-10], FF
:00444D6A C645F4FF                mov [ebp-0C], FF
:00444D6E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444D71 E8E0FCFFFF              call 00444A56
:00444D76 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444D79 E827FEFFFF              call 00444BA5
:00444D7E 50                      push eax
:00444D7F B948044B00              mov ecx, 004B0448
:00444D84 E807AAFEFF              call 0042F790
:00444D89 50                      push eax
:00444D8A 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00444D8D E8FEA9FEFF              call 0042F790

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00444D92 6A10                    push 00000010
:00444D94 E8E21DFEFF              call 00426B7B
:00444D99 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444E09(U)
|
:00444D9C B980594800              mov ecx, 00485980
:00444DA1 E8C7B3FDFF              call 0042016D
:00444DA6 83F801                  cmp eax, 00000001
:00444DA9 7560                    jne 00444E0B
:00444DAB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444DAE E8A3FCFFFF              call 00444A56
:00444DB3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444DB6 E8F4030000              call 004451AF
:00444DBB 85C0                    test eax, eax
:00444DBD 752A                    jne 00444DE9
:00444DBF B9F8F44A00              mov ecx, 004AF4F8
:00444DC4 E8E706FEFF              call 004254B0
:00444DC9 85C0                    test eax, eax
:00444DCB 741C                    je 00444DE9

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00444DCD 6A10                    push 00000010
:00444DCF E8A71DFEFF              call 00426B7B
:00444DD4 83C404                  add esp, 00000004
:00444DD7 B9180A4B00              mov ecx, 004B0A18
:00444DDC E84F1C0000              call 00446A30
:00444DE1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444DE4 E895F9FFFF              call 0044477E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444DBD(C), :00444DCB(C)
|
:00444DE9 E860770200              call 0046C54E
:00444DEE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444DF1 E8AFFDFFFF              call 00444BA5
:00444DF6 50                      push eax
:00444DF7 B948044B00              mov ecx, 004B0448
:00444DFC E88FA9FEFF              call 0042F790
:00444E01 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444E04 E8A6030000              call 004451AF
:00444E09 EB91                    jmp 00444D9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444DA9(C)
|
:00444E0B 8D55FC                  lea edx, dword ptr [ebp-04]
:00444E0E 52                      push edx
:00444E0F 6848044B00              push 004B0448
:00444E14 E887AEFEFF              call 0042FCA0
:00444E19 83C408                  add esp, 00000008
:00444E1C 85C0                    test eax, eax
:00444E1E 7512                    jne 00444E32
:00444E20 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444E23 E8B8FBFFFF              call 004449E0
:00444E28 B848044B00              mov eax, 004B0448
:00444E2D E9B4010000              jmp 00444FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444E1E(C)
|
:00444E32 E8C71EFEFF              call 00426CFE

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00444E37 6A10                    push 00000010
:00444E39 E83D1DFEFF              call 00426B7B
:00444E3E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444FC7(U)
|
:00444E41 B980594800              mov ecx, 00485980
:00444E46 E822B3FDFF              call 0042016D
:00444E4B 83F801                  cmp eax, 00000001
:00444E4E 752E                    jne 00444E7E
:00444E50 B980594800              mov ecx, 00485980
:00444E55 E813B3FDFF              call 0042016D
:00444E5A 83F801                  cmp eax, 00000001
:00444E5D 751F                    jne 00444E7E
:00444E5F 33C0                    xor eax, eax
:00444E61 A0800B4B00              mov al, byte ptr [004B0B80]
:00444E66 85C0                    test eax, eax
:00444E68 7514                    jne 00444E7E
:00444E6A 33C9                    xor ecx, ecx
:00444E6C 8A0D48044B00            mov cl, byte ptr [004B0448]
:00444E72 81F9FF000000            cmp ecx, 000000FF
:00444E78 0F854E010000            jne 00444FCC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444E4E(C), :00444E5D(C), :00444E68(C)
|
:00444E7E E8CB760200              call 0046C54E
:00444E83 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444E86 E8CBFBFFFF              call 00444A56
:00444E8B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444E8E E81C030000              call 004451AF
:00444E93 85C0                    test eax, eax
:00444E95 7534                    jne 00444ECB
:00444E97 B9F8F44A00              mov ecx, 004AF4F8
:00444E9C E80F06FEFF              call 004254B0
:00444EA1 85C0                    test eax, eax
:00444EA3 7426                    je 00444ECB

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00444EA5 6A10                    push 00000010
:00444EA7 E8CF1CFEFF              call 00426B7B
:00444EAC 83C404                  add esp, 00000004
:00444EAF E87EDFFCFF              call 00412E32
:00444EB4 B9180A4B00              mov ecx, 004B0A18
:00444EB9 E8721B0000              call 00446A30
:00444EBE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444EC1 E8B8F8FFFF              call 0044477E
:00444EC6 E882DFFCFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444E95(C), :00444EA3(C)
|
:00444ECB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444ECE E8D2FCFFFF              call 00444BA5
:00444ED3 50                      push eax
:00444ED4 B948044B00              mov ecx, 004B0448
:00444ED9 E8B2A8FEFF              call 0042F790
:00444EDE 6848044B00              push 004B0448
:00444EE3 E8292A0000              call 00447911
:00444EE8 83C404                  add esp, 00000004
:00444EEB 8845F0                  mov byte ptr [ebp-10], al
:00444EEE 8B55F4                  mov edx, dword ptr [ebp-0C]
:00444EF1 81E2FF000000            and edx, 000000FF
:00444EF7 8B45F0                  mov eax, dword ptr [ebp-10]
:00444EFA 25FF000000              and eax, 000000FF
:00444EFF 3BD0                    cmp edx, eax
:00444F01 0F84A3000000            je 00444FAA
:00444F07 B9A8034B00              mov ecx, 004B03A8
:00444F0C E834FBFFFF              call 00444A45
:00444F11 85C0                    test eax, eax
:00444F13 740E                    je 00444F23
:00444F15 B9A8034B00              mov ecx, 004B03A8
:00444F1A E8C1FAFFFF              call 004449E0
:00444F1F C645F4FF                mov [ebp-0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444F13(C)
|
:00444F23 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444F26 81E1FF000000            and ecx, 000000FF
:00444F2C 81F9FF000000            cmp ecx, 000000FF
:00444F32 7476                    je 00444FAA
:00444F34 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444F37 81E1FF000000            and ecx, 000000FF
:00444F3D 6BC924                  imul ecx, 00000024
:00444F40 81C108F54A00            add ecx, 004AF508
:00444F46 E885A9FEFF              call 0042F8D0
:00444F4B 25FF000000              and eax, 000000FF
:00444F50 83F802                  cmp eax, 00000002
:00444F53 7555                    jne 00444FAA
:00444F55 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444F58 81E1FF000000            and ecx, 000000FF
:00444F5E 6BC924                  imul ecx, 00000024
:00444F61 81C108F54A00            add ecx, 004AF508
:00444F67 E864A3FCFF              call 0040F2D0
:00444F6C 85C0                    test eax, eax
:00444F6E 751D                    jne 00444F8D
:00444F70 6A20                    push 00000020
:00444F72 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444F75 81E1FF000000            and ecx, 000000FF
:00444F7B 6BC924                  imul ecx, 00000024
:00444F7E 81C108F54A00            add ecx, 004AF508
:00444F84 E867ABFEFF              call 0042FAF0
:00444F89 85C0                    test eax, eax
:00444F8B 741D                    je 00444FAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444F6E(C)
|
:00444F8D 8A55F0                  mov dl, byte ptr [ebp-10]
:00444F90 8855F4                  mov byte ptr [ebp-0C], dl
:00444F93 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00444F96 81E1FF000000            and ecx, 000000FF
:00444F9C 6BC924                  imul ecx, 00000024
:00444F9F 81C108F54A00            add ecx, 004AF508
:00444FA5 E8427DFEFF              call 0042CCEC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444F01(C), :00444F32(C), :00444F53(C), :00444F8B(C)
|
:00444FAA B980594800              mov ecx, 00485980
:00444FAF E8B9B1FDFF              call 0042016D
:00444FB4 83F802                  cmp eax, 00000002
:00444FB7 750E                    jne 00444FC7
:00444FB9 C745F800000000          mov [ebp-08], 00000000
:00444FC0 E8391DFEFF              call 00426CFE
:00444FC5 EB05                    jmp 00444FCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444FB7(C)
|
:00444FC7 E975FEFFFF              jmp 00444E41

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444E78(C), :00444FC5(U)
|
:00444FCC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00444FCF E80CFAFFFF              call 004449E0
:00444FD4 837DF800                cmp dword ptr [ebp-08], 00000000
:00444FD8 7507                    jne 00444FE1
:00444FDA C60548044B00FF          mov byte ptr [004B0448], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444FD8(C)
|
:00444FE1 B848044B00              mov eax, 004B0448

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444E2D(U)
|
:00444FE6 8BE5                    mov esp, ebp
:00444FE8 5D                      pop ebp
:00444FE9 C3                      ret


:00444FEA 55                      push ebp
:00444FEB 8BEC                    mov ebp, esp
:00444FED 5D                      pop ebp
:00444FEE C3                      ret



* Referenced by a CALL at Addresses:
|:00444D02   , :00445CED   , :00458F73   
|
:00444FEF 55                      push ebp
:00444FF0 8BEC                    mov ebp, esp
:00444FF2 83EC14                  sub esp, 00000014
:00444FF5 894DEC                  mov dword ptr [ebp-14], ecx
:00444FF8 8B4508                  mov eax, dword ptr [ebp+08]
:00444FFB 33C9                    xor ecx, ecx
:00444FFD 8A08                    mov cl, byte ptr [eax]
:00444FFF 6BC903                  imul ecx, 00000003
:00445002 8B55EC                  mov edx, dword ptr [ebp-14]
:00445005 2B4A04                  sub ecx, dword ptr [edx+04]
:00445008 894DFC                  mov dword ptr [ebp-04], ecx
:0044500B 8B4508                  mov eax, dword ptr [ebp+08]
:0044500E 33C9                    xor ecx, ecx
:00445010 8A4801                  mov cl, byte ptr [eax+01]
:00445013 6BC903                  imul ecx, 00000003
:00445016 83C102                  add ecx, 00000002
:00445019 8B55EC                  mov edx, dword ptr [ebp-14]
:0044501C 2B4A08                  sub ecx, dword ptr [edx+08]
:0044501F 894DF8                  mov dword ptr [ebp-08], ecx
:00445022 837DFC00                cmp dword ptr [ebp-04], 00000000
:00445026 0F82C0000000            jb 004450EC
:0044502C 8B45EC                  mov eax, dword ptr [ebp-14]
:0044502F 8B4814                  mov ecx, dword ptr [eax+14]
:00445032 C1E904                  shr ecx, 04
:00445035 394DFC                  cmp dword ptr [ebp-04], ecx
:00445038 0F83AE000000            jnb 004450EC
:0044503E 837DF800                cmp dword ptr [ebp-08], 00000000
:00445042 0F82A4000000            jb 004450EC
:00445048 8B55EC                  mov edx, dword ptr [ebp-14]
:0044504B 8B4218                  mov eax, dword ptr [edx+18]
:0044504E 83C00F                  add eax, 0000000F
:00445051 C1E804                  shr eax, 04
:00445054 3945F8                  cmp dword ptr [ebp-08], eax
:00445057 0F838F000000            jnb 004450EC
:0044505D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445060 8A55FC                  mov dl, byte ptr [ebp-04]
:00445063 885154                  mov byte ptr [ecx+54], dl
:00445066 8B45EC                  mov eax, dword ptr [ebp-14]
:00445069 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044506C 884855                  mov byte ptr [eax+55], cl

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044506F 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00445071 6A03                    push 00000003
:00445073 8B55F8                  mov edx, dword ptr [ebp-08]
:00445076 83EA02                  sub edx, 00000002
:00445079 52                      push edx
:0044507A 8A45FC                  mov al, byte ptr [ebp-04]
:0044507D 50                      push eax
:0044507E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445081 E840F7FFFF              call 004447C6
:00445086 6A00                    push 00000000
:00445088 B930DF4A00              mov ecx, 004ADF30
:0044508D E80CE5FCFF              call 0041359E
:00445092 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445095 33D2                    xor edx, edx
:00445097 8A11                    mov dl, byte ptr [ecx]
:00445099 8D8410004B0000          lea eax, dword ptr [eax+edx+00004B00]
:004450A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004450A3 33D2                    xor edx, edx
:004450A5 8A5101                  mov dl, byte ptr [ecx+01]
:004450A8 33C9                    xor ecx, ecx
:004450AA 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:004450B0 0FAFD1                  imul edx, ecx
:004450B3 8A1410                  mov dl, byte ptr [eax+edx]
:004450B6 8855F0                  mov byte ptr [ebp-10], dl
:004450B9 8A45F0                  mov al, byte ptr [ebp-10]
:004450BC 50                      push eax
:004450BD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004450C0 E878000000              call 0044513D
:004450C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004450C8 51                      push ecx
:004450C9 E8B1280000              call 0044797F
:004450CE 83C404                  add esp, 00000004
:004450D1 25FF000000              and eax, 000000FF
:004450D6 8B1485D88D4700          mov edx, dword ptr [4*eax+00478DD8]
:004450DD 8955F4                  mov dword ptr [ebp-0C], edx
:004450E0 8B45F4                  mov eax, dword ptr [ebp-0C]
:004450E3 50                      push eax
:004450E4 E82CFA0100              call 00464B15
:004450E9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445026(C), :00445038(C), :00445042(C), :00445057(C)
|
:004450EC 8BE5                    mov esp, ebp
:004450EE 5D                      pop ebp
:004450EF C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00438EA2   , :00438F45   , :00444CE2   , :00445928   , :00445CBA   
|:004460BE   , :004465D1   , :00446FBC   , :0044706B   , :00457255   
|:004573F9   , :00457428   , :00458F9C   , :00460539   , :004697EA   
|:004699F1   
|
:004450F2 55                      push ebp
:004450F3 8BEC                    mov ebp, esp
:004450F5 83EC0C                  sub esp, 0000000C
:004450F8 894DF4                  mov dword ptr [ebp-0C], ecx
:004450FB 8B45F4                  mov eax, dword ptr [ebp-0C]
:004450FE 8A4854                  mov cl, byte ptr [eax+54]
:00445101 884DFC                  mov byte ptr [ebp-04], cl
:00445104 8B55F4                  mov edx, dword ptr [ebp-0C]
:00445107 33C0                    xor eax, eax
:00445109 8A4255                  mov al, byte ptr [edx+55]
:0044510C 83E802                  sub eax, 00000002
:0044510F 8845F8                  mov byte ptr [ebp-08], al
:00445112 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00445115 C64154FF                mov [ecx+54], FF
:00445119 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044511C C64255FF                mov [edx+55], FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00445120 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00445122 6A03                    push 00000003
:00445124 8A45F8                  mov al, byte ptr [ebp-08]
:00445127 50                      push eax
:00445128 8A4DFC                  mov cl, byte ptr [ebp-04]
:0044512B 51                      push ecx
:0044512C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044512F E892F6FFFF              call 004447C6
:00445134 E810FA0100              call 00464B49
:00445139 8BE5                    mov esp, ebp
:0044513B 5D                      pop ebp
:0044513C C3                      ret



* Referenced by a CALL at Address:
|:004450C0   
|
:0044513D 55                      push ebp
:0044513E 8BEC                    mov ebp, esp
:00445140 83EC08                  sub esp, 00000008
:00445143 894DF8                  mov dword ptr [ebp-08], ecx
:00445146 8B4508                  mov eax, dword ptr [ebp+08]
:00445149 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044514E 3DFF000000              cmp eax, 000000FF
:00445153 7454                    je 004451A9
:00445155 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445158 81E1FF000000            and ecx, 000000FF
:0044515E 83F95A                  cmp ecx, 0000005A
:00445161 7D46                    jge 004451A9
:00445163 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445166 81E1FF000000            and ecx, 000000FF
:0044516C 6BC924                  imul ecx, 00000024
:0044516F 81C108F54A00            add ecx, 004AF508
:00445175 E82CA3FEFF              call 0042F4A6
:0044517A 85C0                    test eax, eax
:0044517C 742B                    je 004451A9
:0044517E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445181 81E1FF000000            and ecx, 000000FF
:00445187 6BC924                  imul ecx, 00000024
:0044518A 81C108F54A00            add ecx, 004AF508
:00445190 E84BA5FEFF              call 0042F6E0
:00445195 8945FC                  mov dword ptr [ebp-04], eax
:00445198 E8ACF90100              call 00464B49
:0044519D 8B55FC                  mov edx, dword ptr [ebp-04]
:004451A0 52                      push edx
:004451A1 E84DF90100              call 00464AF3
:004451A6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445153(C), :00445161(C), :0044517C(C)
|
:004451A9 8BE5                    mov esp, ebp
:004451AB 5D                      pop ebp
:004451AC C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00444DB6   , :00444E04   , :00444E8E   , :00456DAF   
|
:004451AF 55                      push ebp
:004451B0 8BEC                    mov ebp, esp
:004451B2 83EC40                  sub esp, 00000040
:004451B5 56                      push esi
:004451B6 57                      push edi
:004451B7 894DC4                  mov dword ptr [ebp-3C], ecx
:004451BA 8B45C4                  mov eax, dword ptr [ebp-3C]
:004451BD 8B486C                  mov ecx, dword ptr [eax+6C]
:004451C0 894DD0                  mov dword ptr [ebp-30], ecx
:004451C3 8B55C4                  mov edx, dword ptr [ebp-3C]
:004451C6 8B4270                  mov eax, dword ptr [edx+70]
:004451C9 8945C8                  mov dword ptr [ebp-38], eax
:004451CC C745D400000000          mov [ebp-2C], 00000000
:004451D3 C745CC00000000          mov [ebp-34], 00000000
:004451DA C745E400000000          mov [ebp-1C], 00000000
:004451E1 C645E800                mov [ebp-18], 00
:004451E5 C645E000                mov [ebp-20], 00
:004451E9 C645DC00                mov [ebp-24], 00
:004451ED 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004451F0 E8BB25FCFF              call 004077B0
:004451F5 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004451F8 E8A8F9FFFF              call 00444BA5
:004451FD 50                      push eax
:004451FE 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00445201 E88AA5FEFF              call 0042F790
:00445206 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00445209 51                      push ecx
:0044520A 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00445210 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00445211 FF15C8864B00            Call dword ptr [004B86C8]
:00445217 E8AA4A0200              call 00469CC6
:0044521C 85C0                    test eax, eax
:0044521E 7414                    je 00445234
:00445220 6A17                    push 00000017
:00445222 E85113FEFF              call 00426578
:00445227 83C404                  add esp, 00000004
:0044522A B801000000              mov eax, 00000001
:0044522F E99C040000              jmp 004456D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044521E(C)
|
:00445234 8B45D0                  mov eax, dword ptr [ebp-30]
:00445237 3B45F0                  cmp eax, dword ptr [ebp-10]
:0044523A 7E28                    jle 00445264
:0044523C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0044523F 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:00445242 7D20                    jge 00445264
:00445244 837DC804                cmp dword ptr [ebp-38], 00000004
:00445248 7C1A                    jl 00445264
:0044524A 837DC828                cmp dword ptr [ebp-38], 00000028
:0044524E 7D14                    jge 00445264
:00445250 6A01                    push 00000001
:00445252 E82113FEFF              call 00426578
:00445257 83C404                  add esp, 00000004
:0044525A B801000000              mov eax, 00000001
:0044525F E96C040000              jmp 004456D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044523A(C), :00445242(C), :00445248(C), :0044524E(C)
|
:00445264 8B55C4                  mov edx, dword ptr [ebp-3C]
:00445267 8B45D0                  mov eax, dword ptr [ebp-30]
:0044526A 3B423C                  cmp eax, dword ptr [edx+3C]
:0044526D 7C40                    jl 004452AF
:0044526F 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00445272 8B513C                  mov edx, dword ptr [ecx+3C]
:00445275 83C230                  add edx, 00000030
:00445278 3955D0                  cmp dword ptr [ebp-30], edx
:0044527B 7D32                    jge 004452AF
:0044527D 8B45C4                  mov eax, dword ptr [ebp-3C]
:00445280 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00445283 3B4840                  cmp ecx, dword ptr [eax+40]
:00445286 7C27                    jl 004452AF
:00445288 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044528B 8B4240                  mov eax, dword ptr [edx+40]
:0044528E 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00445291 034114                  add eax, dword ptr [ecx+14]
:00445294 3945C8                  cmp dword ptr [ebp-38], eax
:00445297 7D16                    jge 004452AF
:00445299 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044529C 8B4204                  mov eax, dword ptr [edx+04]
:0044529F 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004452A0 B903000000              mov ecx, 00000003
:004452A5 F7F9                    idiv ecx
:004452A7 85C0                    test eax, eax
:004452A9 7404                    je 004452AF
:004452AB C645E006                mov [ebp-20], 06

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044526D(C), :0044527B(C), :00445286(C), :00445297(C), :004452A9(C)
|
:004452AF 8B55C4                  mov edx, dword ptr [ebp-3C]
:004452B2 8B423C                  mov eax, dword ptr [edx+3C]
:004452B5 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004452B8 8B5114                  mov edx, dword ptr [ecx+14]
:004452BB 8D4410D0                lea eax, dword ptr [eax+edx-30]
:004452BF 3945D0                  cmp dword ptr [ebp-30], eax
:004452C2 7C5F                    jl 00445323
:004452C4 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004452C7 8B513C                  mov edx, dword ptr [ecx+3C]
:004452CA 8B45C4                  mov eax, dword ptr [ebp-3C]
:004452CD 035014                  add edx, dword ptr [eax+14]
:004452D0 3955D0                  cmp dword ptr [ebp-30], edx
:004452D3 7D4E                    jge 00445323
:004452D5 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004452D8 8B55C8                  mov edx, dword ptr [ebp-38]
:004452DB 3B5140                  cmp edx, dword ptr [ecx+40]
:004452DE 7C43                    jl 00445323
:004452E0 8B45C4                  mov eax, dword ptr [ebp-3C]
:004452E3 8B4840                  mov ecx, dword ptr [eax+40]
:004452E6 8B55C4                  mov edx, dword ptr [ebp-3C]
:004452E9 034A18                  add ecx, dword ptr [edx+18]
:004452EC 394DC8                  cmp dword ptr [ebp-38], ecx
:004452EF 7D32                    jge 00445323
:004452F1 8B45C4                  mov eax, dword ptr [ebp-3C]
:004452F4 8B4004                  mov eax, dword ptr [eax+04]
:004452F7 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004452F8 B903000000              mov ecx, 00000003
:004452FD F7F9                    idiv ecx
:004452FF 8BC8                    mov ecx, eax
:00445301 33D2                    xor edx, edx
:00445303 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00445309 8BF2                    mov esi, edx
:0044530B 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044530E 8B4014                  mov eax, dword ptr [eax+14]
:00445311 99                      cdq
:00445312 BF30000000              mov edi, 00000030
:00445317 F7FF                    idiv edi
:00445319 2BF0                    sub esi, eax
:0044531B 3BCE                    cmp ecx, esi
:0044531D 7404                    je 00445323
:0044531F C645E002                mov [ebp-20], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004452C2(C), :004452D3(C), :004452DE(C), :004452EF(C), :0044531D(C)
|
:00445323 837DC828                cmp dword ptr [ebp-38], 00000028
:00445327 7C38                    jl 00445361
:00445329 837DC858                cmp dword ptr [ebp-38], 00000058
:0044532D 7D32                    jge 00445361
:0044532F 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00445332 8B55D0                  mov edx, dword ptr [ebp-30]
:00445335 3B513C                  cmp edx, dword ptr [ecx+3C]
:00445338 7C27                    jl 00445361
:0044533A 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044533D 8B483C                  mov ecx, dword ptr [eax+3C]
:00445340 8B55C4                  mov edx, dword ptr [ebp-3C]
:00445343 034A14                  add ecx, dword ptr [edx+14]
:00445346 394DD0                  cmp dword ptr [ebp-30], ecx
:00445349 7D16                    jge 00445361
:0044534B 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044534E 8B4008                  mov eax, dword ptr [eax+08]
:00445351 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00445352 B903000000              mov ecx, 00000003
:00445357 F7F9                    idiv ecx
:00445359 85C0                    test eax, eax
:0044535B 7404                    je 00445361
:0044535D C645DC04                mov [ebp-24], 04

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445327(C), :0044532D(C), :00445338(C), :00445349(C), :0044535B(C)
|
:00445361 8B55C4                  mov edx, dword ptr [ebp-3C]
:00445364 8B4218                  mov eax, dword ptr [edx+18]
:00445367 83E801                  sub eax, 00000001
:0044536A 99                      cdq
:0044536B B930000000              mov ecx, 00000030
:00445370 F7F9                    idiv ecx
:00445372 6BC030                  imul eax, 00000030
:00445375 83C028                  add eax, 00000028
:00445378 3945C8                  cmp dword ptr [ebp-38], eax
:0044537B 7C5F                    jl 004453DC
:0044537D 8B55C4                  mov edx, dword ptr [ebp-3C]
:00445380 8B4218                  mov eax, dword ptr [edx+18]
:00445383 83C028                  add eax, 00000028
:00445386 3945C8                  cmp dword ptr [ebp-38], eax
:00445389 7D51                    jge 004453DC
:0044538B 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044538E 8B55D0                  mov edx, dword ptr [ebp-30]
:00445391 3B513C                  cmp edx, dword ptr [ecx+3C]
:00445394 7C46                    jl 004453DC
:00445396 8B45C4                  mov eax, dword ptr [ebp-3C]
:00445399 8B483C                  mov ecx, dword ptr [eax+3C]
:0044539C 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044539F 034A14                  add ecx, dword ptr [edx+14]
:004453A2 394DD0                  cmp dword ptr [ebp-30], ecx
:004453A5 7D35                    jge 004453DC
:004453A7 8B45C4                  mov eax, dword ptr [ebp-3C]
:004453AA 8B4008                  mov eax, dword ptr [eax+08]
:004453AD 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004453AE B903000000              mov ecx, 00000003
:004453B3 F7F9                    idiv ecx
:004453B5 8BC8                    mov ecx, eax
:004453B7 33D2                    xor edx, edx
:004453B9 8A15810A4B00            mov dl, byte ptr [004B0A81]
:004453BF 8BF2                    mov esi, edx
:004453C1 8B45C4                  mov eax, dword ptr [ebp-3C]
:004453C4 8B4018                  mov eax, dword ptr [eax+18]
:004453C7 83C02F                  add eax, 0000002F
:004453CA 99                      cdq
:004453CB BF30000000              mov edi, 00000030
:004453D0 F7FF                    idiv edi
:004453D2 2BF0                    sub esi, eax
:004453D4 3BCE                    cmp ecx, esi
:004453D6 7404                    je 004453DC
:004453D8 C645DC08                mov [ebp-24], 08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044537B(C), :00445389(C), :00445394(C), :004453A5(C), :004453D6(C)
|
:004453DC 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004453DF 81E1FF000000            and ecx, 000000FF
:004453E5 85C9                    test ecx, ecx
:004453E7 7508                    jne 004453F1
:004453E9 8A55DC                  mov dl, byte ptr [ebp-24]
:004453EC 8855E8                  mov byte ptr [ebp-18], dl
:004453EF EB50                    jmp 00445441

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004453E7(C)
|
:004453F1 8B45DC                  mov eax, dword ptr [ebp-24]
:004453F4 25FF000000              and eax, 000000FF
:004453F9 85C0                    test eax, eax
:004453FB 7508                    jne 00445405
:004453FD 8A4DE0                  mov cl, byte ptr [ebp-20]
:00445400 884DE8                  mov byte ptr [ebp-18], cl
:00445403 EB3C                    jmp 00445441

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004453FB(C)
|
:00445405 8B55DC                  mov edx, dword ptr [ebp-24]
:00445408 81E2FF000000            and edx, 000000FF
:0044540E 83FA08                  cmp edx, 00000008
:00445411 7513                    jne 00445426
:00445413 8B45E0                  mov eax, dword ptr [ebp-20]
:00445416 25FF000000              and eax, 000000FF
:0044541B 83F802                  cmp eax, 00000002
:0044541E 7506                    jne 00445426
:00445420 C645E809                mov [ebp-18], 09
:00445424 EB1B                    jmp 00445441

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445411(C), :0044541E(C)
|
:00445426 8B45E0                  mov eax, dword ptr [ebp-20]
:00445429 25FF000000              and eax, 000000FF
:0044542E 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00445431 81E1FF000000            and ecx, 000000FF
:00445437 03C1                    add eax, ecx
:00445439 99                      cdq
:0044543A 2BC2                    sub eax, edx
:0044543C D1F8                    sar eax, 1
:0044543E 8845E8                  mov byte ptr [ebp-18], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004453EF(U), :00445403(U), :00445424(U)
|
:00445441 8B55C4                  mov edx, dword ptr [ebp-3C]
:00445444 33C0                    xor eax, eax
:00445446 8A4261                  mov al, byte ptr [edx+61]
:00445449 85C0                    test eax, eax
:0044544B 0F8487000000            je 004454D8
:00445451 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00445454 51                      push ecx
:00445455 E8B7240000              call 00447911
:0044545A 83C404                  add esp, 00000004
:0044545D 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00445462 3DFF000000              cmp eax, 000000FF
:00445467 746F                    je 004454D8
:00445469 668B55D8                mov dx, word ptr [ebp-28]
:0044546D 52                      push edx
:0044546E E863020000              call 004456D6
:00445473 83C404                  add esp, 00000004
:00445476 25FF000000              and eax, 000000FF
:0044547B 85C0                    test eax, eax
:0044547D 7459                    je 004454D8
:0044547F 8B45E8                  mov eax, dword ptr [ebp-18]
:00445482 25FF000000              and eax, 000000FF
:00445487 83F802                  cmp eax, 00000002
:0044548A 7C0E                    jl 0044549A
:0044548C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044548F 81E1FF000000            and ecx, 000000FF
:00445495 83F909                  cmp ecx, 00000009
:00445498 7E3E                    jle 004454D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044548A(C)
|
:0044549A 8D55D8                  lea edx, dword ptr [ebp-28]
:0044549D 52                      push edx
:0044549E E86E240000              call 00447911
:004454A3 83C404                  add esp, 00000004
:004454A6 8AC8                    mov cl, al
:004454A8 81E1FF000000            and ecx, 000000FF
:004454AE 6BC924                  imul ecx, 00000024
:004454B1 81C108F54A00            add ecx, 004AF508
:004454B7 E8149EFCFF              call 0040F2D0
:004454BC 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004454BF 3B4174                  cmp eax, dword ptr [ecx+74]
:004454C2 7514                    jne 004454D8
:004454C4 668B55D8                mov dx, word ptr [ebp-28]
:004454C8 52                      push edx
:004454C9 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004454CC E8BE120000              call 0044678F
:004454D1 33C0                    xor eax, eax
:004454D3 E9F8010000              jmp 004456D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044544B(C), :00445467(C), :0044547D(C), :00445498(C), :004454C2(C)
|
:004454D8 8B45E8                  mov eax, dword ptr [ebp-18]
:004454DB 25FF000000              and eax, 000000FF
:004454E0 50                      push eax
:004454E1 E89210FEFF              call 00426578
:004454E6 83C404                  add esp, 00000004
:004454E9 8A4DE8                  mov cl, byte ptr [ebp-18]
:004454EC 880D800B4B00            mov byte ptr [004B0B80], cl
:004454F2 B9C8E24A00              mov ecx, 004AE2C8
:004454F7 E884F10000              call 00454680
:004454FC 25FF000000              and eax, 000000FF
:00445501 85C0                    test eax, eax
:00445503 7D09                    jge 0044550E
:00445505 C745C000000000          mov [ebp-40], 00000000
:0044550C EB12                    jmp 00445520

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445503(C)
|
:0044550E B9C8E24A00              mov ecx, 004AE2C8
:00445513 E868F10000              call 00454680
:00445518 25FF000000              and eax, 000000FF
:0044551D 8945C0                  mov dword ptr [ebp-40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044550C(U)
|
:00445520 8A55C0                  mov dl, byte ptr [ebp-40]
:00445523 8855EC                  mov byte ptr [ebp-14], dl
:00445526 8B45EC                  mov eax, dword ptr [ebp-14]
:00445529 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044552E 3DFF000000              cmp eax, 000000FF
:00445533 0F8494010000            je 004456CD
:00445539 B980594800              mov ecx, 00485980
:0044553E E82AACFDFF              call 0042016D
:00445543 83F801                  cmp eax, 00000001
:00445546 0F8581010000            jne 004456CD
:0044554C 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044554F 8B5104                  mov edx, dword ptr [ecx+04]
:00445552 8955D4                  mov dword ptr [ebp-2C], edx
:00445555 8B45C4                  mov eax, dword ptr [ebp-3C]
:00445558 8B4808                  mov ecx, dword ptr [eax+08]
:0044555B 894DCC                  mov dword ptr [ebp-34], ecx
:0044555E 8B55E8                  mov edx, dword ptr [ebp-18]
:00445561 81E2FF000000            and edx, 000000FF
:00445567 85D2                    test edx, edx
:00445569 0F842D010000            je 0044569C
:0044556F 8B45E0                  mov eax, dword ptr [ebp-20]
:00445572 25FF000000              and eax, 000000FF
:00445577 83F802                  cmp eax, 00000002
:0044557A 7558                    jne 004455D4
:0044557C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044557F 81E1FF000000            and ecx, 000000FF
:00445585 6BC903                  imul ecx, 00000003
:00445588 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044558B 03D1                    add edx, ecx
:0044558D 8955D4                  mov dword ptr [ebp-2C], edx
:00445590 33C0                    xor eax, eax
:00445592 A0800A4B00              mov al, byte ptr [004B0A80]
:00445597 8BC8                    mov ecx, eax
:00445599 6BC903                  imul ecx, 00000003
:0044559C 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044559F 8B4214                  mov eax, dword ptr [edx+14]
:004455A2 99                      cdq
:004455A3 83E20F                  and edx, 0000000F
:004455A6 03C2                    add eax, edx
:004455A8 C1F804                  sar eax, 04
:004455AB 2BC8                    sub ecx, eax
:004455AD 394DD4                  cmp dword ptr [ebp-2C], ecx
:004455B0 7E20                    jle 004455D2
:004455B2 33C0                    xor eax, eax
:004455B4 A0800A4B00              mov al, byte ptr [004B0A80]
:004455B9 8BC8                    mov ecx, eax
:004455BB 6BC903                  imul ecx, 00000003
:004455BE 8B55C4                  mov edx, dword ptr [ebp-3C]
:004455C1 8B4214                  mov eax, dword ptr [edx+14]
:004455C4 99                      cdq
:004455C5 83E20F                  and edx, 0000000F
:004455C8 03C2                    add eax, edx
:004455CA C1F804                  sar eax, 04
:004455CD 2BC8                    sub ecx, eax
:004455CF 894DD4                  mov dword ptr [ebp-2C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004455B0(C)
|
:004455D2 EB2E                    jmp 00445602

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044557A(C)
|
:004455D4 8B45E0                  mov eax, dword ptr [ebp-20]
:004455D7 25FF000000              and eax, 000000FF
:004455DC 83F806                  cmp eax, 00000006
:004455DF 7521                    jne 00445602
:004455E1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004455E4 81E1FF000000            and ecx, 000000FF
:004455EA 6BC903                  imul ecx, 00000003
:004455ED 8B55D4                  mov edx, dword ptr [ebp-2C]
:004455F0 2BD1                    sub edx, ecx
:004455F2 8955D4                  mov dword ptr [ebp-2C], edx
:004455F5 837DD400                cmp dword ptr [ebp-2C], 00000000
:004455F9 7D07                    jge 00445602
:004455FB C745D400000000          mov [ebp-2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004455D2(U), :004455DF(C), :004455F9(C)
|
:00445602 8B45DC                  mov eax, dword ptr [ebp-24]
:00445605 25FF000000              and eax, 000000FF
:0044560A 83F808                  cmp eax, 00000008
:0044560D 7558                    jne 00445667
:0044560F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445612 81E1FF000000            and ecx, 000000FF
:00445618 6BC903                  imul ecx, 00000003
:0044561B 8B55CC                  mov edx, dword ptr [ebp-34]
:0044561E 03D1                    add edx, ecx
:00445620 8955CC                  mov dword ptr [ebp-34], edx
:00445623 33C0                    xor eax, eax
:00445625 A0810A4B00              mov al, byte ptr [004B0A81]
:0044562A 8BC8                    mov ecx, eax
:0044562C 6BC903                  imul ecx, 00000003
:0044562F 8B55C4                  mov edx, dword ptr [ebp-3C]
:00445632 8B4218                  mov eax, dword ptr [edx+18]
:00445635 99                      cdq
:00445636 83E20F                  and edx, 0000000F
:00445639 03C2                    add eax, edx
:0044563B C1F804                  sar eax, 04
:0044563E 2BC8                    sub ecx, eax
:00445640 394DCC                  cmp dword ptr [ebp-34], ecx
:00445643 7E20                    jle 00445665
:00445645 33C0                    xor eax, eax
:00445647 A0810A4B00              mov al, byte ptr [004B0A81]
:0044564C 8BC8                    mov ecx, eax
:0044564E 6BC903                  imul ecx, 00000003
:00445651 8B55C4                  mov edx, dword ptr [ebp-3C]
:00445654 8B4218                  mov eax, dword ptr [edx+18]
:00445657 99                      cdq
:00445658 83E20F                  and edx, 0000000F
:0044565B 03C2                    add eax, edx
:0044565D C1F804                  sar eax, 04
:00445660 2BC8                    sub ecx, eax
:00445662 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445643(C)
|
:00445665 EB2E                    jmp 00445695

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044560D(C)
|
:00445667 8B45DC                  mov eax, dword ptr [ebp-24]
:0044566A 25FF000000              and eax, 000000FF
:0044566F 83F804                  cmp eax, 00000004
:00445672 7521                    jne 00445695
:00445674 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445677 81E1FF000000            and ecx, 000000FF
:0044567D 6BC903                  imul ecx, 00000003
:00445680 8B55CC                  mov edx, dword ptr [ebp-34]
:00445683 2BD1                    sub edx, ecx
:00445685 8955CC                  mov dword ptr [ebp-34], edx
:00445688 837DCC00                cmp dword ptr [ebp-34], 00000000
:0044568C 7D07                    jge 00445695
:0044568E C745CC00000000          mov [ebp-34], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445665(U), :00445672(C), :0044568C(C)
|
:00445695 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445569(C)
|
:0044569C 837DE400                cmp dword ptr [ebp-1C], 00000000
:004456A0 742B                    je 004456CD

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004456A2 6A02                    push 00000002
:004456A4 B9F8F44A00              mov ecx, 004AF4F8
:004456A9 E8E2FDFDFF              call 00425490
:004456AE 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004456B1 E82AF3FFFF              call 004449E0
:004456B6 6A00                    push 00000000
:004456B8 8B45CC                  mov eax, dword ptr [ebp-34]
:004456BB 50                      push eax
:004456BC 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004456BF 51                      push ecx
:004456C0 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004456C3 E85C000000              call 00445724
:004456C8 E8C314FEFF              call 00426B90

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445533(C), :00445546(C), :004456A0(C)
|
:004456CD 8B45E4                  mov eax, dword ptr [ebp-1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044522F(U), :0044525F(U), :004454D3(U)
|
:004456D0 5F                      pop edi
:004456D1 5E                      pop esi
:004456D2 8BE5                    mov esp, ebp
:004456D4 5D                      pop ebp
:004456D5 C3                      ret



* Referenced by a CALL at Address:
|:0044546E   
|
:004456D6 55                      push ebp
:004456D7 8BEC                    mov ebp, esp
:004456D9 51                      push ecx
:004456DA C645FC00                mov [ebp-04], 00
:004456DE 6800960000              push 00009600
:004456E3 B930DF4A00              mov ecx, 004ADF30
:004456E8 E8B1DEFCFF              call 0041359E
:004456ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004456F0 81E1FF000000            and ecx, 000000FF
:004456F6 03C1                    add eax, ecx
:004456F8 8B5509                  mov edx, dword ptr [ebp+09]
:004456FB 81E2FF000000            and edx, 000000FF
:00445701 33C9                    xor ecx, ecx
:00445703 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:00445709 0FAFD1                  imul edx, ecx
:0044570C 33C9                    xor ecx, ecx
:0044570E 8A0C10                  mov cl, byte ptr [eax+edx]
:00445711 81F9FF000000            cmp ecx, 000000FF
:00445717 7404                    je 0044571D
:00445719 C645FC01                mov [ebp-04], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445717(C)
|
:0044571D 8A45FC                  mov al, byte ptr [ebp-04]
:00445720 8BE5                    mov esp, ebp
:00445722 5D                      pop ebp
:00445723 C3                      ret



* Referenced by a CALL at Addresses:
|:004456C3   , :00445A27   , :0046977D   
|
:00445724 55                      push ebp
:00445725 8BEC                    mov ebp, esp
:00445727 83EC14                  sub esp, 00000014
:0044572A 894DEC                  mov dword ptr [ebp-14], ecx
:0044572D 8B4508                  mov eax, dword ptr [ebp+08]
:00445730 8945F4                  mov dword ptr [ebp-0C], eax
:00445733 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00445736 894DF0                  mov dword ptr [ebp-10], ecx
:00445739 8B5510                  mov edx, dword ptr [ebp+10]
:0044573C 81E2FF000000            and edx, 000000FF
:00445742 83FA01                  cmp edx, 00000001
:00445745 0F85DE000000            jne 00445829
:0044574B 8B45EC                  mov eax, dword ptr [ebp-14]
:0044574E 8B4014                  mov eax, dword ptr [eax+14]
:00445751 99                      cdq
:00445752 83E20F                  and edx, 0000000F
:00445755 03C2                    add eax, edx
:00445757 C1F804                  sar eax, 04
:0044575A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044575D 2BC8                    sub ecx, eax
:0044575F 894DF4                  mov dword ptr [ebp-0C], ecx
:00445762 8B55EC                  mov edx, dword ptr [ebp-14]
:00445765 8B4218                  mov eax, dword ptr [edx+18]
:00445768 99                      cdq
:00445769 83E20F                  and edx, 0000000F
:0044576C 03C2                    add eax, edx
:0044576E C1F804                  sar eax, 04
:00445771 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00445774 2BC8                    sub ecx, eax
:00445776 894DF0                  mov dword ptr [ebp-10], ecx
:00445779 837DF400                cmp dword ptr [ebp-0C], 00000000
:0044577D 7D07                    jge 00445786
:0044577F C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044577D(C)
|
:00445786 837DF000                cmp dword ptr [ebp-10], 00000000
:0044578A 7D07                    jge 00445793
:0044578C C745F000000000          mov [ebp-10], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044578A(C)
|
:00445793 8B55EC                  mov edx, dword ptr [ebp-14]
:00445796 8B4214                  mov eax, dword ptr [edx+14]
:00445799 99                      cdq
:0044579A 83E20F                  and edx, 0000000F
:0044579D 03C2                    add eax, edx
:0044579F C1F804                  sar eax, 04
:004457A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004457A5 03C8                    add ecx, eax
:004457A7 33D2                    xor edx, edx
:004457A9 8A15800A4B00            mov dl, byte ptr [004B0A80]
:004457AF 6BD203                  imul edx, 00000003
:004457B2 3BCA                    cmp ecx, edx
:004457B4 7E29                    jle 004457DF
:004457B6 8B45EC                  mov eax, dword ptr [ebp-14]
:004457B9 8B4014                  mov eax, dword ptr [eax+14]
:004457BC 99                      cdq
:004457BD 83E20F                  and edx, 0000000F
:004457C0 03C2                    add eax, edx
:004457C2 C1F804                  sar eax, 04
:004457C5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004457C8 03C8                    add ecx, eax
:004457CA 33D2                    xor edx, edx
:004457CC 8A15800A4B00            mov dl, byte ptr [004B0A80]
:004457D2 6BD203                  imul edx, 00000003
:004457D5 2BCA                    sub ecx, edx
:004457D7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004457DA 2BC1                    sub eax, ecx
:004457DC 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004457B4(C)
|
:004457DF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004457E2 8B4118                  mov eax, dword ptr [ecx+18]
:004457E5 99                      cdq
:004457E6 83E20F                  and edx, 0000000F
:004457E9 03C2                    add eax, edx
:004457EB C1F804                  sar eax, 04
:004457EE 8B55F0                  mov edx, dword ptr [ebp-10]
:004457F1 03D0                    add edx, eax
:004457F3 33C0                    xor eax, eax
:004457F5 A0810A4B00              mov al, byte ptr [004B0A81]
:004457FA 6BC003                  imul eax, 00000003
:004457FD 3BD0                    cmp edx, eax
:004457FF 7E28                    jle 00445829
:00445801 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445804 8B4118                  mov eax, dword ptr [ecx+18]
:00445807 99                      cdq
:00445808 83E20F                  and edx, 0000000F
:0044580B 03C2                    add eax, edx
:0044580D C1F804                  sar eax, 04
:00445810 8B55F0                  mov edx, dword ptr [ebp-10]
:00445813 03D0                    add edx, eax
:00445815 33C0                    xor eax, eax
:00445817 A0810A4B00              mov al, byte ptr [004B0A81]
:0044581C 6BC003                  imul eax, 00000003
:0044581F 2BD0                    sub edx, eax
:00445821 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00445824 2BCA                    sub ecx, edx
:00445826 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445745(C), :004457FF(C)
|
:00445829 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044582C 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044582D B903000000              mov ecx, 00000003
:00445832 F7F9                    idiv ecx
:00445834 6BC003                  imul eax, 00000003
:00445837 8945F8                  mov dword ptr [ebp-08], eax
:0044583A 8B45F0                  mov eax, dword ptr [ebp-10]
:0044583D 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044583E B903000000              mov ecx, 00000003
:00445843 F7F9                    idiv ecx
:00445845 6BC003                  imul eax, 00000003
:00445848 8945FC                  mov dword ptr [ebp-04], eax
:0044584B 8B55EC                  mov edx, dword ptr [ebp-14]
:0044584E 8B4204                  mov eax, dword ptr [edx+04]
:00445851 3B45F8                  cmp eax, dword ptr [ebp-08]
:00445854 750B                    jne 00445861
:00445856 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445859 8B5108                  mov edx, dword ptr [ecx+08]
:0044585C 3B55FC                  cmp edx, dword ptr [ebp-04]
:0044585F 7458                    je 004458B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445854(C)
|
:00445861 E8CCD5FCFF              call 00412E32
:00445866 8B45EC                  mov eax, dword ptr [ebp-14]
:00445869 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044586C 894804                  mov dword ptr [eax+04], ecx
:0044586F 8B55EC                  mov edx, dword ptr [ebp-14]
:00445872 8B45FC                  mov eax, dword ptr [ebp-04]
:00445875 894208                  mov dword ptr [edx+08], eax
:00445878 6A01                    push 00000001
:0044587A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044587D 8B5104                  mov edx, dword ptr [ecx+04]
:00445880 C1E204                  shl edx, 04
:00445883 52                      push edx
:00445884 6A00                    push 00000000
:00445886 A1380E4B00              mov eax, dword ptr [004B0E38]
:0044588B 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:0044588C FF15C4864B00            Call dword ptr [004B86C4]
:00445892 6A01                    push 00000001
:00445894 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445897 8B5108                  mov edx, dword ptr [ecx+08]
:0044589A C1E204                  shl edx, 04
:0044589D 52                      push edx
:0044589E 6A01                    push 00000001
:004458A0 A1380E4B00              mov eax, dword ptr [004B0E38]
:004458A5 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:004458A6 FF15C4864B00            Call dword ptr [004B86C4]
:004458AC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004458AF E8CAEEFFFF              call 0044477E
:004458B4 E894D5FCFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044585F(C)
|
:004458B9 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:004458BF 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:004458C0 FF15E0864B00            Call dword ptr [004B86E0]
:004458C6 85C0                    test eax, eax
:004458C8 740A                    je 004458D4
:004458CA B9180A4B00              mov ecx, 004B0A18
:004458CF E823F00000              call 004548F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004458C8(C)
|
:004458D4 8BE5                    mov esp, ebp
:004458D6 5D                      pop ebp
:004458D7 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00445C5A   , :00446148   
|
:004458DA 55                      push ebp
:004458DB 8BEC                    mov ebp, esp
:004458DD 83EC2C                  sub esp, 0000002C
:004458E0 894DEC                  mov dword ptr [ebp-14], ecx
:004458E3 8B4508                  mov eax, dword ptr [ebp+08]
:004458E6 25FF000000              and eax, 000000FF
:004458EB 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004458EC B903000000              mov ecx, 00000003
:004458F1 F7F9                    idiv ecx
:004458F3 6BC003                  imul eax, 00000003
:004458F6 884508                  mov byte ptr [ebp+08], al
:004458F9 8B450C                  mov eax, dword ptr [ebp+0C]
:004458FC 25FF000000              and eax, 000000FF
:00445901 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00445902 B903000000              mov ecx, 00000003
:00445907 F7F9                    idiv ecx
:00445909 6BC003                  imul eax, 00000003
:0044590C 88450C                  mov byte ptr [ebp+0C], al
:0044590F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445912 E869D4FFFF              call 00442D80
:00445917 8945FC                  mov dword ptr [ebp-04], eax
:0044591A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044591D E86FD4FFFF              call 00442D91
:00445922 8945F4                  mov dword ptr [ebp-0C], eax
:00445925 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445928 E8C5F7FFFF              call 004450F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445A2C(U)
|
:0044592D 8B5508                  mov edx, dword ptr [ebp+08]
:00445930 81E2FF000000            and edx, 000000FF
:00445936 8B45EC                  mov eax, dword ptr [ebp-14]
:00445939 395004                  cmp dword ptr [eax+04], edx
:0044593C 7515                    jne 00445953
:0044593E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00445941 81E1FF000000            and ecx, 000000FF
:00445947 8B55EC                  mov edx, dword ptr [ebp-14]
:0044594A 394A08                  cmp dword ptr [edx+08], ecx
:0044594D 0F84DE000000            je 00445A31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044593C(C)
|
:00445953 8B4508                  mov eax, dword ptr [ebp+08]
:00445956 25FF000000              and eax, 000000FF
:0044595B 2B45FC                  sub eax, dword ptr [ebp-04]
:0044595E 8945F8                  mov dword ptr [ebp-08], eax
:00445961 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00445964 81E1FF000000            and ecx, 000000FF
:0044596A 2B4DF4                  sub ecx, dword ptr [ebp-0C]
:0044596D 894DF0                  mov dword ptr [ebp-10], ecx
:00445970 837DF800                cmp dword ptr [ebp-08], 00000000
:00445974 7509                    jne 0044597F
:00445976 C745E800000000          mov [ebp-18], 00000000
:0044597D EB3D                    jmp 004459BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445974(C)
|
:0044597F 837DF80C                cmp dword ptr [ebp-08], 0000000C
:00445983 7C09                    jl 0044598E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00445985 C745E409000000          mov [ebp-1C], 00000009
:0044598C EB28                    jmp 004459B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445983(C)
|
:0044598E 837DF8F4                cmp dword ptr [ebp-08], FFFFFFF4
:00445992 7F09                    jg 0044599D
:00445994 C745E0F7FFFFFF          mov [ebp-20], FFFFFFF7
:0044599B EB13                    jmp 004459B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445992(C)
|
:0044599D 33D2                    xor edx, edx
:0044599F 837DF800                cmp dword ptr [ebp-08], 00000000
:004459A3 0F9EC2                  setle dl
:004459A6 4A                      dec edx
:004459A7 83E206                  and edx, 00000006
:004459AA 83C2FD                  add edx, FFFFFFFD
:004459AD 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044599B(U)
|
:004459B0 8B45E0                  mov eax, dword ptr [ebp-20]
:004459B3 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044598C(U)
|
:004459B6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004459B9 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044597D(U)
|
:004459BC 8B55FC                  mov edx, dword ptr [ebp-04]
:004459BF 0355E8                  add edx, dword ptr [ebp-18]
:004459C2 8955FC                  mov dword ptr [ebp-04], edx
:004459C5 837DF000                cmp dword ptr [ebp-10], 00000000
:004459C9 7509                    jne 004459D4
:004459CB C745DC00000000          mov [ebp-24], 00000000
:004459D2 EB3D                    jmp 00445A11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459C9(C)
|
:004459D4 837DF00C                cmp dword ptr [ebp-10], 0000000C
:004459D8 7C09                    jl 004459E3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:004459DA C745D809000000          mov [ebp-28], 00000009
:004459E1 EB28                    jmp 00445A0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459D8(C)
|
:004459E3 837DF0F4                cmp dword ptr [ebp-10], FFFFFFF4
:004459E7 7F09                    jg 004459F2
:004459E9 C745D4F7FFFFFF          mov [ebp-2C], FFFFFFF7
:004459F0 EB13                    jmp 00445A05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459E7(C)
|
:004459F2 33C0                    xor eax, eax
:004459F4 837DF000                cmp dword ptr [ebp-10], 00000000
:004459F8 0F9EC0                  setle al
:004459FB 48                      dec eax
:004459FC 83E006                  and eax, 00000006
:004459FF 83C0FD                  add eax, FFFFFFFD
:00445A02 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459F0(U)
|
:00445A05 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00445A08 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459E1(U)
|
:00445A0B 8B55D8                  mov edx, dword ptr [ebp-28]
:00445A0E 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459D2(U)
|
:00445A11 8B45F4                  mov eax, dword ptr [ebp-0C]
:00445A14 0345DC                  add eax, dword ptr [ebp-24]
:00445A17 8945F4                  mov dword ptr [ebp-0C], eax
:00445A1A 6A00                    push 00000000
:00445A1C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00445A1F 51                      push ecx
:00445A20 8B55FC                  mov edx, dword ptr [ebp-04]
:00445A23 52                      push edx
:00445A24 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445A27 E8F8FCFFFF              call 00445724
:00445A2C E9FCFEFFFF              jmp 0044592D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044594D(C)
|
:00445A31 8BE5                    mov esp, ebp
:00445A33 5D                      pop ebp
:00445A34 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040CB6D   , :004299C3   , :0042B35A   , :0042B5ED   , :0042D451   
|:004324CD   , :0043277F   , :00432963   , :00432B81   , :00432D94   
|:004331B6   , :00435730   , :00435FDE   , :00436215   , :004362B2   
|:004364F4   , :004365E0   , :00436988   , :00436C3F   , :00436F0D   
|:004371D5   , :0043753B   , :00437A61   , :00437BFC   , :00437E53   
|:00438166   , :00438518   , :00438783   , :004388F3   , :00438B0E   
|:00438D5B   , :0043CD4D   , :00445CCA   , :00455318   , :00456D28   
|:004576D5   , :00457808   , :00458034   , :00458A7A   , :00458BB7   
|:00458F65   , :00459147   
|
:00445A37 55                      push ebp
:00445A38 8BEC                    mov ebp, esp
:00445A3A 83EC30                  sub esp, 00000030
:00445A3D 894DD8                  mov dword ptr [ebp-28], ecx
:00445A40 8B4508                  mov eax, dword ptr [ebp+08]
:00445A43 25FF000000              and eax, 000000FF
:00445A48 25FF000000              and eax, 000000FF
:00445A4D 8945DC                  mov dword ptr [ebp-24], eax
:00445A50 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00445A53 81E1FF000000            and ecx, 000000FF
:00445A59 81E1FF000000            and ecx, 000000FF
:00445A5F 894DFC                  mov dword ptr [ebp-04], ecx
:00445A62 C745E800000000          mov [ebp-18], 00000000
:00445A69 C745E000000000          mov [ebp-20], 00000000
:00445A70 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00445A73 6BC903                  imul ecx, 00000003
:00445A76 8B55D8                  mov edx, dword ptr [ebp-28]
:00445A79 8B4214                  mov eax, dword ptr [edx+14]
:00445A7C 99                      cdq
:00445A7D 83E20F                  and edx, 0000000F
:00445A80 03C2                    add eax, edx
:00445A82 C1F804                  sar eax, 04
:00445A85 99                      cdq
:00445A86 2BC2                    sub eax, edx
:00445A88 D1F8                    sar eax, 1
:00445A8A 2BC8                    sub ecx, eax
:00445A8C 894DF8                  mov dword ptr [ebp-08], ecx
:00445A8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00445A92 6BC903                  imul ecx, 00000003
:00445A95 8B55D8                  mov edx, dword ptr [ebp-28]
:00445A98 8B4218                  mov eax, dword ptr [edx+18]
:00445A9B 99                      cdq
:00445A9C 83E20F                  and edx, 0000000F
:00445A9F 03C2                    add eax, edx
:00445AA1 C1F804                  sar eax, 04
:00445AA4 99                      cdq
:00445AA5 2BC2                    sub eax, edx
:00445AA7 D1F8                    sar eax, 1
:00445AA9 2BC8                    sub ecx, eax
:00445AAB 894DF4                  mov dword ptr [ebp-0C], ecx
:00445AAE 8B45D8                  mov eax, dword ptr [ebp-28]
:00445AB1 8B4804                  mov ecx, dword ptr [eax+04]
:00445AB4 2B4DF8                  sub ecx, dword ptr [ebp-08]
:00445AB7 894DEC                  mov dword ptr [ebp-14], ecx
:00445ABA 8B55D8                  mov edx, dword ptr [ebp-28]
:00445ABD 8B4208                  mov eax, dword ptr [edx+08]
:00445AC0 2B45F4                  sub eax, dword ptr [ebp-0C]
:00445AC3 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00445AC6 C745F009000000          mov [ebp-10], 00000009
:00445ACD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445AD0 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00445AD3 7D24                    jge 00445AF9
:00445AD5 8B55F0                  mov edx, dword ptr [ebp-10]
:00445AD8 83EA02                  sub edx, 00000002
:00445ADB 3955E4                  cmp dword ptr [ebp-1C], edx
:00445ADE 7D19                    jge 00445AF9
:00445AE0 8B45F0                  mov eax, dword ptr [ebp-10]
:00445AE3 F7D8                    neg eax
:00445AE5 3945EC                  cmp dword ptr [ebp-14], eax
:00445AE8 7E0F                    jle 00445AF9
:00445AEA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00445AED F7D9                    neg ecx
:00445AEF 394DE4                  cmp dword ptr [ebp-1C], ecx
:00445AF2 7E05                    jle 00445AF9
:00445AF4 E966010000              jmp 00445C5F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445AD3(C), :00445ADE(C), :00445AE8(C), :00445AF2(C)
|
:00445AF9 837DF800                cmp dword ptr [ebp-08], 00000000
:00445AFD 7C0B                    jl 00445B0A
:00445AFF 8B55DC                  mov edx, dword ptr [ebp-24]
:00445B02 6BD203                  imul edx, 00000003
:00445B05 3B55F0                  cmp edx, dword ptr [ebp-10]
:00445B08 7D07                    jge 00445B11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445AFD(C)
|
:00445B0A C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B08(C)
|
:00445B11 837DF400                cmp dword ptr [ebp-0C], 00000000
:00445B15 7C0B                    jl 00445B22
:00445B17 8B45FC                  mov eax, dword ptr [ebp-04]
:00445B1A 6BC003                  imul eax, 00000003
:00445B1D 3B45F0                  cmp eax, dword ptr [ebp-10]
:00445B20 7D07                    jge 00445B29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B15(C)
|
:00445B22 C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B20(C)
|
:00445B29 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00445B2C 8B4114                  mov eax, dword ptr [ecx+14]
:00445B2F 99                      cdq
:00445B30 83E20F                  and edx, 0000000F
:00445B33 03C2                    add eax, edx
:00445B35 C1F804                  sar eax, 04
:00445B38 8B55F8                  mov edx, dword ptr [ebp-08]
:00445B3B 03D0                    add edx, eax
:00445B3D 33C0                    xor eax, eax
:00445B3F A0800A4B00              mov al, byte ptr [004B0A80]
:00445B44 6BC003                  imul eax, 00000003
:00445B47 3BD0                    cmp edx, eax
:00445B49 7F21                    jg 00445B6C
:00445B4B 33C9                    xor ecx, ecx
:00445B4D 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:00445B53 6BC903                  imul ecx, 00000003
:00445B56 8B55D8                  mov edx, dword ptr [ebp-28]
:00445B59 8B4214                  mov eax, dword ptr [edx+14]
:00445B5C 99                      cdq
:00445B5D 83E20F                  and edx, 0000000F
:00445B60 03C2                    add eax, edx
:00445B62 C1F804                  sar eax, 04
:00445B65 2BC8                    sub ecx, eax
:00445B67 394DF8                  cmp dword ptr [ebp-08], ecx
:00445B6A 7E50                    jle 00445BBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B49(C)
|
:00445B6C 33C0                    xor eax, eax
:00445B6E A0800A4B00              mov al, byte ptr [004B0A80]
:00445B73 8BC8                    mov ecx, eax
:00445B75 6BC903                  imul ecx, 00000003
:00445B78 8B55D8                  mov edx, dword ptr [ebp-28]
:00445B7B 8B4214                  mov eax, dword ptr [edx+14]
:00445B7E 99                      cdq
:00445B7F 83E20F                  and edx, 0000000F
:00445B82 03C2                    add eax, edx
:00445B84 C1F804                  sar eax, 04
:00445B87 2BC8                    sub ecx, eax
:00445B89 85C9                    test ecx, ecx
:00445B8B 7D09                    jge 00445B96
:00445B8D C745D400000000          mov [ebp-2C], 00000000
:00445B94 EB20                    jmp 00445BB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B8B(C)
|
:00445B96 33C0                    xor eax, eax
:00445B98 A0800A4B00              mov al, byte ptr [004B0A80]
:00445B9D 8BC8                    mov ecx, eax
:00445B9F 6BC903                  imul ecx, 00000003
:00445BA2 8B55D8                  mov edx, dword ptr [ebp-28]
:00445BA5 8B4214                  mov eax, dword ptr [edx+14]
:00445BA8 99                      cdq
:00445BA9 83E20F                  and edx, 0000000F
:00445BAC 03C2                    add eax, edx
:00445BAE C1F804                  sar eax, 04
:00445BB1 2BC8                    sub ecx, eax
:00445BB3 894DD4                  mov dword ptr [ebp-2C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B94(U)
|
:00445BB6 8B45D4                  mov eax, dword ptr [ebp-2C]
:00445BB9 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B6A(C)
|
:00445BBC 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00445BBF 8B4118                  mov eax, dword ptr [ecx+18]
:00445BC2 99                      cdq
:00445BC3 83E20F                  and edx, 0000000F
:00445BC6 03C2                    add eax, edx
:00445BC8 C1F804                  sar eax, 04
:00445BCB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00445BCE 03D0                    add edx, eax
:00445BD0 33C0                    xor eax, eax
:00445BD2 A0810A4B00              mov al, byte ptr [004B0A81]
:00445BD7 6BC003                  imul eax, 00000003
:00445BDA 3BD0                    cmp edx, eax
:00445BDC 7F21                    jg 00445BFF
:00445BDE 33C9                    xor ecx, ecx
:00445BE0 8A0D810A4B00            mov cl, byte ptr [004B0A81]
:00445BE6 6BC903                  imul ecx, 00000003
:00445BE9 8B55D8                  mov edx, dword ptr [ebp-28]
:00445BEC 8B4218                  mov eax, dword ptr [edx+18]
:00445BEF 99                      cdq
:00445BF0 83E20F                  and edx, 0000000F
:00445BF3 03C2                    add eax, edx
:00445BF5 C1F804                  sar eax, 04
:00445BF8 2BC8                    sub ecx, eax
:00445BFA 394DF4                  cmp dword ptr [ebp-0C], ecx
:00445BFD 7E50                    jle 00445C4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445BDC(C)
|
:00445BFF 33C0                    xor eax, eax
:00445C01 A0810A4B00              mov al, byte ptr [004B0A81]
:00445C06 8BC8                    mov ecx, eax
:00445C08 6BC903                  imul ecx, 00000003
:00445C0B 8B55D8                  mov edx, dword ptr [ebp-28]
:00445C0E 8B4218                  mov eax, dword ptr [edx+18]
:00445C11 99                      cdq
:00445C12 83E20F                  and edx, 0000000F
:00445C15 03C2                    add eax, edx
:00445C17 C1F804                  sar eax, 04
:00445C1A 2BC8                    sub ecx, eax
:00445C1C 85C9                    test ecx, ecx
:00445C1E 7D09                    jge 00445C29
:00445C20 C745D000000000          mov [ebp-30], 00000000
:00445C27 EB20                    jmp 00445C49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445C1E(C)
|
:00445C29 33C0                    xor eax, eax
:00445C2B A0810A4B00              mov al, byte ptr [004B0A81]
:00445C30 8BC8                    mov ecx, eax
:00445C32 6BC903                  imul ecx, 00000003
:00445C35 8B55D8                  mov edx, dword ptr [ebp-28]
:00445C38 8B4218                  mov eax, dword ptr [edx+18]
:00445C3B 99                      cdq
:00445C3C 83E20F                  and edx, 0000000F
:00445C3F 03C2                    add eax, edx
:00445C41 C1F804                  sar eax, 04
:00445C44 2BC8                    sub ecx, eax
:00445C46 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445C27(U)
|
:00445C49 8B45D0                  mov eax, dword ptr [ebp-30]
:00445C4C 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445BFD(C)
|
:00445C4F 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00445C52 51                      push ecx
:00445C53 8A55F8                  mov dl, byte ptr [ebp-08]
:00445C56 52                      push edx
:00445C57 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00445C5A E87BFCFFFF              call 004458DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445AF4(U)
|
:00445C5F 8BE5                    mov esp, ebp
:00445C61 5D                      pop ebp
:00445C62 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004575D6   , :00467F06   
|
:00445C65 55                      push ebp
:00445C66 8BEC                    mov ebp, esp
:00445C68 83EC08                  sub esp, 00000008
:00445C6B 894DF8                  mov dword ptr [ebp-08], ecx
:00445C6E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00445C71 E83A1BFCFF              call 004077B0
:00445C76 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445C79 81E1FF000000            and ecx, 000000FF
:00445C7F 6BC924                  imul ecx, 00000024
:00445C82 81C108F54A00            add ecx, 004AF508
:00445C88 E8439CFEFF              call 0042F8D0
:00445C8D 25FF000000              and eax, 000000FF
:00445C92 83F804                  cmp eax, 00000004
:00445C95 745B                    je 00445CF2
:00445C97 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445C9A 81E1FF000000            and ecx, 000000FF
:00445CA0 6BC924                  imul ecx, 00000024
:00445CA3 81C108F54A00            add ecx, 004AF508
:00445CA9 E8F236FEFF              call 004293A0
:00445CAE 50                      push eax
:00445CAF 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00445CB2 E8D99AFEFF              call 0042F790
:00445CB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00445CBA E833F4FFFF              call 004450F2
:00445CBF 8A45FD                  mov al, byte ptr [ebp-03]
:00445CC2 50                      push eax
:00445CC3 8A4DFC                  mov cl, byte ptr [ebp-04]
:00445CC6 51                      push ecx
:00445CC7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00445CCA E868FDFFFF              call 00445A37
:00445CCF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445CD2 81E1FF000000            and ecx, 000000FF
:00445CD8 6BC924                  imul ecx, 00000024
:00445CDB 81C108F54A00            add ecx, 004AF508
:00445CE1 E80670FEFF              call 0042CCEC
:00445CE6 8D55FC                  lea edx, dword ptr [ebp-04]
:00445CE9 52                      push edx
:00445CEA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00445CED E8FDF2FFFF              call 00444FEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445C95(C)
|
:00445CF2 8BE5                    mov esp, ebp
:00445CF4 5D                      pop ebp
:00445CF5 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00431EFB   , :00432432   , :00432701   , :004328E3   , :00432D14   
|:0043310D   , :00433B4D   , :00433E0A   , :0043412A   , :00434345   
|:00434585   , :0043478D   , :00434F96   , :00435A37   , :00435C7D   
|:00435E2C   , :00436183   , :00436457   , :00436B41   , :0043713A   
|:004374AC   , :004379E1   , :00437B7C   , :00437F67   , :004382AE   
|:0043867C   , :00438A8F   , :0044D787   
|
:00445CF8 55                      push ebp
:00445CF9 8BEC                    mov ebp, esp
:00445CFB 83EC18                  sub esp, 00000018
:00445CFE 56                      push esi
:00445CFF 894DE8                  mov dword ptr [ebp-18], ecx
:00445D02 C745F801000000          mov [ebp-08], 00000001
:00445D09 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00445D0C E89F1AFCFF              call 004077B0
:00445D11 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00445D14 E8971AFCFF              call 004077B0
:00445D19 C645FCFF                mov [ebp-04], FF
:00445D1D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445D20 81E1FF000000            and ecx, 000000FF
:00445D26 6BC924                  imul ecx, 00000024
:00445D29 81C108F54A00            add ecx, 004AF508
:00445D2F E8BC9BFEFF              call 0042F8F0
:00445D34 25FF000000              and eax, 000000FF
:00445D39 83F807                  cmp eax, 00000007
:00445D3C 7418                    je 00445D56
:00445D3E 33C0                    xor eax, eax
:00445D40 A07C0B4B00              mov al, byte ptr [004B0B7C]
:00445D45 83E004                  and eax, 00000004
:00445D48 85C0                    test eax, eax
:00445D4A 750A                    jne 00445D56
:00445D4C A0AC044B00              mov al, byte ptr [004B04AC]
:00445D51 E9B0030000              jmp 00446106

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445D3C(C), :00445D4A(C)
|
:00445D56 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445D59 81E1FF000000            and ecx, 000000FF
:00445D5F 6BC924                  imul ecx, 00000024
:00445D62 81C108F54A00            add ecx, 004AF508
:00445D68 E83336FEFF              call 004293A0
:00445D6D 50                      push eax
:00445D6E 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00445D71 E81A9AFEFF              call 0042F790

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00445D76 68FF000000              push 000000FF
:00445D7B 6880070000              push 00000780
:00445D80 6800960000              push 00009600
:00445D85 B930DF4A00              mov ecx, 004ADF30
:00445D8A E80FD8FCFF              call 0041359E
:00445D8F 50                      push eax
:00445D90 E8B3CA0100              call 00462848
:00445D95 83C40C                  add esp, 0000000C
:00445D98 6A00                    push 00000000
:00445D9A 8A4D10                  mov cl, byte ptr [ebp+10]
:00445D9D 51                      push ecx
:00445D9E 8A550C                  mov dl, byte ptr [ebp+0C]
:00445DA1 52                      push edx
:00445DA2 8D45EC                  lea eax, dword ptr [ebp-14]
:00445DA5 50                      push eax
:00445DA6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445DA9 81E1FF000000            and ecx, 000000FF
:00445DAF 6BC924                  imul ecx, 00000024
:00445DB2 81C108F54A00            add ecx, 004AF508
:00445DB8 E8AD1D0000              call 00447B6A
:00445DBD 8845F4                  mov byte ptr [ebp-0C], al
:00445DC0 6A01                    push 00000001
:00445DC2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00445DC5 E85DD1FFFF              call 00442F27
:00445DCA 8B4D10                  mov ecx, dword ptr [ebp+10]
:00445DCD 81E1FF000000            and ecx, 000000FF
:00445DD3 83F901                  cmp ecx, 00000001
:00445DD6 7424                    je 00445DFC
:00445DD8 8B550C                  mov edx, dword ptr [ebp+0C]
:00445DDB 81E2FF000000            and edx, 000000FF
:00445DE1 81FAFF000000            cmp edx, 000000FF
:00445DE7 7413                    je 00445DFC
:00445DE9 8A450C                  mov al, byte ptr [ebp+0C]
:00445DEC 50                      push eax
:00445DED 668B4DEC                mov cx, word ptr [ebp-14]
:00445DF1 51                      push ecx
:00445DF2 B9A8034B00              mov ecx, 004B03A8
:00445DF7 E820E9FFFF              call 0044471C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445DD6(C), :00445DE7(C)
|
:00445DFC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00445DFF E87AE9FFFF              call 0044477E
:00445E04 8A5508                  mov dl, byte ptr [ebp+08]
:00445E07 88152C044B00            mov byte ptr [004B042C], dl
:00445E0D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00445E10 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00445E15 3DFF000000              cmp eax, 000000FF
:00445E1A 7559                    jne 00445E75
:00445E1C 8B4D10                  mov ecx, dword ptr [ebp+10]
:00445E1F 81E1FF000000            and ecx, 000000FF
:00445E25 83F901                  cmp ecx, 00000001
:00445E28 7511                    jne 00445E3B

* Possible StringData Ref from Data Obj ->"d򤺨SڭxC"
                                  |
:00445E2A 68BC8F4700              push 00478FBC
:00445E2F 6A00                    push 00000000
:00445E31 E8362DFEFF              call 00428B6C
:00445E36 83C408                  add esp, 00000008
:00445E39 EB33                    jmp 00445E6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445E28(C)
|
:00445E3B 8B550C                  mov edx, dword ptr [ebp+0C]
:00445E3E 81E2FF000000            and edx, 000000FF
:00445E44 81E280000000            and edx, 00000080
:00445E4A 85D2                    test edx, edx
:00445E4C 7411                    je 00445E5F

* Possible StringData Ref from Data Obj ->"d򤺨SiHoNުĭxC"
                                  |
:00445E4E 68D48F4700              push 00478FD4
:00445E53 6A00                    push 00000000
:00445E55 E8122DFEFF              call 00428B6C
:00445E5A 83C408                  add esp, 00000008
:00445E5D EB0F                    jmp 00445E6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445E4C(C)
|

* Possible StringData Ref from Data Obj ->"d򤺨SĭxC"
                                  |
:00445E5F 68FC8F4700              push 00478FFC
:00445E64 6A00                    push 00000000
:00445E66 E8012DFEFF              call 00428B6C
:00445E6B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445E39(U), :00445E5D(U)
|
:00445E6E C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445E1A(C), :00446098(U)
|
:00445E75 837DF800                cmp dword ptr [ebp-08], 00000000
:00445E79 0F841E020000            je 0044609D
:00445E7F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00445E82 E893EEFFFF              call 00444D1A
:00445E87 50                      push eax
:00445E88 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00445E8B E80099FEFF              call 0042F790
:00445E90 E8B9660200              call 0046C54E
:00445E95 8B45F0                  mov eax, dword ptr [ebp-10]
:00445E98 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00445E9D 3DFF000000              cmp eax, 000000FF
:00445EA2 7510                    jne 00445EB4
:00445EA4 C745F800000000          mov [ebp-08], 00000000
:00445EAB C645FCFF                mov [ebp-04], FF
:00445EAF E9E9010000              jmp 0044609D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445EA2(C)
|
:00445EB4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00445EB7 81E1FF000000            and ecx, 000000FF
:00445EBD 8B55F1                  mov edx, dword ptr [ebp-0F]
:00445EC0 81E2FF000000            and edx, 000000FF
:00445EC6 33C0                    xor eax, eax
:00445EC8 A0800A4B00              mov al, byte ptr [004B0A80]
:00445ECD 0FAFD0                  imul edx, eax
:00445ED0 8D8C1100960000          lea ecx, dword ptr [ecx+edx+00009600]
:00445ED7 51                      push ecx
:00445ED8 B930DF4A00              mov ecx, 004ADF30
:00445EDD E8BCD6FCFF              call 0041359E
:00445EE2 33D2                    xor edx, edx
:00445EE4 8A10                    mov dl, byte ptr [eax]
:00445EE6 81FAFF000000            cmp edx, 000000FF
:00445EEC 0F846D010000            je 0044605F
:00445EF2 8D45F0                  lea eax, dword ptr [ebp-10]
:00445EF5 50                      push eax
:00445EF6 E8161A0000              call 00447911
:00445EFB 83C404                  add esp, 00000004
:00445EFE 8845FC                  mov byte ptr [ebp-04], al
:00445F01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00445F04 81E1FF000000            and ecx, 000000FF
:00445F0A 81F9FF000000            cmp ecx, 000000FF
:00445F10 0F8447010000            je 0044605D
:00445F16 8B5510                  mov edx, dword ptr [ebp+10]
:00445F19 81E2FF000000            and edx, 000000FF
:00445F1F 83FA01                  cmp edx, 00000001
:00445F22 0F859D000000            jne 00445FC5
:00445F28 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445F2B 81E1FF000000            and ecx, 000000FF
:00445F31 6BC924                  imul ecx, 00000024
:00445F34 81C108F54A00            add ecx, 004AF508
:00445F3A E89193FCFF              call 0040F2D0
:00445F3F 8BF0                    mov esi, eax
:00445F41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00445F44 81E1FF000000            and ecx, 000000FF
:00445F4A 6BC924                  imul ecx, 00000024
:00445F4D 81C108F54A00            add ecx, 004AF508
:00445F53 E87893FCFF              call 0040F2D0
:00445F58 3BF0                    cmp esi, eax
:00445F5A 7421                    je 00445F7D

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00445F5C 6A07                    push 00000007
:00445F5E B9800D4B00              mov ecx, 004B0D80
:00445F63 E841BC0100              call 00461BA9

* Possible StringData Ref from Data Obj ->"OĭxC"
                                  |
:00445F68 6818904700              push 00479018
:00445F6D 6A00                    push 00000000
:00445F6F E8F82BFEFF              call 00428B6C
:00445F74 83C408                  add esp, 00000008
:00445F77 C645FCFF                mov [ebp-04], FF
:00445F7B EB43                    jmp 00445FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445F5A(C)
|
:00445F7D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00445F80 81E1FF000000            and ecx, 000000FF
:00445F86 6BC924                  imul ecx, 00000024
:00445F89 81C108F54A00            add ecx, 004AF508
:00445F8F E81295FEFF              call 0042F4A6
:00445F94 85C0                    test eax, eax
:00445F96 7521                    jne 00445FB9

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00445F98 6A07                    push 00000007
:00445F9A B9800D4B00              mov ecx, 004B0D80
:00445F9F E805BC0100              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡ܡC"
                                  |
:00445FA4 6828904700              push 00479028
:00445FA9 6A00                    push 00000000
:00445FAB E8BC2BFEFF              call 00428B6C
:00445FB0 83C408                  add esp, 00000008
:00445FB3 C645FCFF                mov [ebp-04], FF
:00445FB7 EB07                    jmp 00445FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445F96(C)
|
:00445FB9 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445F7B(U), :00445FB7(U)
|
:00445FC0 E998000000              jmp 0044605D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445F22(C)
|
:00445FC5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445FC8 81E1FF000000            and ecx, 000000FF
:00445FCE 6BC924                  imul ecx, 00000024
:00445FD1 81C108F54A00            add ecx, 004AF508
:00445FD7 E8F492FCFF              call 0040F2D0
:00445FDC 8BF0                    mov esi, eax
:00445FDE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00445FE1 81E1FF000000            and ecx, 000000FF
:00445FE7 6BC924                  imul ecx, 00000024
:00445FEA 81C108F54A00            add ecx, 004AF508
:00445FF0 E8DB92FCFF              call 0040F2D0
:00445FF5 3BF0                    cmp esi, eax
:00445FF7 7521                    jne 0044601A

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00445FF9 6A07                    push 00000007
:00445FFB B9800D4B00              mov ecx, 004B0D80
:00446000 E8A4BB0100              call 00461BA9

* Possible StringData Ref from Data Obj ->"ڭxC"
                                  |
:00446005 683C904700              push 0047903C
:0044600A 6A00                    push 00000000
:0044600C E85B2BFEFF              call 00428B6C
:00446011 83C408                  add esp, 00000008
:00446014 C645FCFF                mov [ebp-04], FF
:00446018 EB43                    jmp 0044605D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445FF7(C)
|
:0044601A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044601D 81E1FF000000            and ecx, 000000FF
:00446023 6BC924                  imul ecx, 00000024
:00446026 81C108F54A00            add ecx, 004AF508
:0044602C E87594FEFF              call 0042F4A6
:00446031 85C0                    test eax, eax
:00446033 7521                    jne 00446056

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00446035 6A07                    push 00000007
:00446037 B9800D4B00              mov ecx, 004B0D80
:0044603C E868BB0100              call 00461BA9

* Possible StringData Ref from Data Obj ->"䳡ܡC"
                                  |
:00446041 6850904700              push 00479050
:00446046 6A00                    push 00000000
:00446048 E81F2BFEFF              call 00428B6C
:0044604D 83C408                  add esp, 00000008
:00446050 C645FCFF                mov [ebp-04], FF
:00446054 EB07                    jmp 0044605D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446033(C)
|
:00446056 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445F10(C), :00445FC0(U), :00446018(U), :00446054(U)
|
:0044605D EB39                    jmp 00446098

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445EEC(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044605F 6A07                    push 00000007
:00446061 B9800D4B00              mov ecx, 004B0D80
:00446066 E83EBB0100              call 00461BA9
:0044606B 8B4510                  mov eax, dword ptr [ebp+10]
:0044606E 25FF000000              and eax, 000000FF
:00446073 83F801                  cmp eax, 00000001
:00446076 7511                    jne 00446089

* Possible StringData Ref from Data Obj ->"bd򤺡C"
                                  |
:00446078 6864904700              push 00479064
:0044607D 6A00                    push 00000000
:0044607F E8E82AFEFF              call 00428B6C
:00446084 83C408                  add esp, 00000008
:00446087 EB0F                    jmp 00446098

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446076(C)
|

* Possible StringData Ref from Data Obj ->"bd򤺡C"
                                  |
:00446089 6874904700              push 00479074
:0044608E 6A00                    push 00000000
:00446090 E8D72AFEFF              call 00428B6C
:00446095 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044605D(U), :00446087(U)
|
:00446098 E9D8FDFFFF              jmp 00445E75

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445E79(C), :00445EAF(U)
|
:0044609D 6A00                    push 00000000
:0044609F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004460A2 E880CEFFFF              call 00442F27

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004460A7 68FF000000              push 000000FF
:004460AC 668B4DEC                mov cx, word ptr [ebp-14]
:004460B0 51                      push ecx
:004460B1 B9A8034B00              mov ecx, 004B03A8
:004460B6 E861E6FFFF              call 0044471C
:004460BB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004460BE E82FF0FFFF              call 004450F2
:004460C3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004460C6 E8B3E6FFFF              call 0044477E
:004460CB 8B55FC                  mov edx, dword ptr [ebp-04]
:004460CE 81E2FF000000            and edx, 000000FF
:004460D4 81FAFF000000            cmp edx, 000000FF
:004460DA 750C                    jne 004460E8
:004460DC 6A01                    push 00000001
:004460DE B9800D4B00              mov ecx, 004B0D80
:004460E3 E8C1BA0100              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004460DA(C)
|
:004460E8 8B45E8                  mov eax, dword ptr [ebp-18]
:004460EB C6406100                mov [eax+61], 00
:004460EF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004460F2 C7417400000000          mov [ecx+74], 00000000
:004460F9 6A00                    push 00000000
:004460FB E87804FEFF              call 00426578
:00446100 83C404                  add esp, 00000004
:00446103 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445D51(U)
|
:00446106 5E                      pop esi
:00446107 8BE5                    mov esp, ebp
:00446109 5D                      pop ebp
:0044610A C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00455322   , :0045746C   , :0045803E   
|
:0044610D 55                      push ebp
:0044610E 8BEC                    mov ebp, esp
:00446110 51                      push ecx
:00446111 894DFC                  mov dword ptr [ebp-04], ecx
:00446114 8B45FC                  mov eax, dword ptr [ebp-04]
:00446117 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044611A 8B5104                  mov edx, dword ptr [ecx+04]
:0044611D 895048                  mov dword ptr [eax+48], edx
:00446120 8B45FC                  mov eax, dword ptr [ebp-04]
:00446123 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446126 8B5108                  mov edx, dword ptr [ecx+08]
:00446129 89504C                  mov dword ptr [eax+4C], edx
:0044612C 8BE5                    mov esp, ebp
:0044612E 5D                      pop ebp
:0044612F C3                      ret



* Referenced by a CALL at Address:
|:00457B4C   
|
:00446130 55                      push ebp
:00446131 8BEC                    mov ebp, esp
:00446133 51                      push ecx
:00446134 894DFC                  mov dword ptr [ebp-04], ecx
:00446137 8B45FC                  mov eax, dword ptr [ebp-04]
:0044613A 8A484C                  mov cl, byte ptr [eax+4C]
:0044613D 51                      push ecx
:0044613E 8B55FC                  mov edx, dword ptr [ebp-04]
:00446141 8A4248                  mov al, byte ptr [edx+48]
:00446144 50                      push eax
:00446145 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446148 E88DF7FFFF              call 004458DA
:0044614D 8BE5                    mov esp, ebp
:0044614F 5D                      pop ebp
:00446150 C3                      ret



* Referenced by a CALL at Address:
|:00457158   
|
:00446151 55                      push ebp
:00446152 8BEC                    mov ebp, esp
:00446154 83EC18                  sub esp, 00000018
:00446157 894DE8                  mov dword ptr [ebp-18], ecx
:0044615A 8B4508                  mov eax, dword ptr [ebp+08]
:0044615D 33C9                    xor ecx, ecx
:0044615F 8A08                    mov cl, byte ptr [eax]
:00446161 6BC903                  imul ecx, 00000003
:00446164 8B55E8                  mov edx, dword ptr [ebp-18]
:00446167 2B4A04                  sub ecx, dword ptr [edx+04]
:0044616A 894DF0                  mov dword ptr [ebp-10], ecx
:0044616D 8B4508                  mov eax, dword ptr [ebp+08]
:00446170 33C9                    xor ecx, ecx
:00446172 8A4801                  mov cl, byte ptr [eax+01]
:00446175 6BC903                  imul ecx, 00000003
:00446178 8B55E8                  mov edx, dword ptr [ebp-18]
:0044617B 2B4A08                  sub ecx, dword ptr [edx+08]
:0044617E 83C102                  add ecx, 00000002
:00446181 894DEC                  mov dword ptr [ebp-14], ecx
:00446184 8B4508                  mov eax, dword ptr [ebp+08]
:00446187 33C9                    xor ecx, ecx
:00446189 8A08                    mov cl, byte ptr [eax]
:0044618B 81F9FF000000            cmp ecx, 000000FF
:00446191 7514                    jne 004461A7
:00446193 8B5508                  mov edx, dword ptr [ebp+08]
:00446196 33C0                    xor eax, eax
:00446198 8A4201                  mov al, byte ptr [edx+01]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044619B 3DFF000000              cmp eax, 000000FF
:004461A0 7505                    jne 004461A7
:004461A2 E930020000              jmp 004463D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446191(C), :004461A0(C)
|
:004461A7 6A00                    push 00000000
:004461A9 B9180A4B00              mov ecx, 004B0A18
:004461AE E85D080000              call 00446A10
:004461B3 50                      push eax
:004461B4 E88B2C0200              call 00468E44
:004461B9 83C408                  add esp, 00000008
:004461BC 6A00                    push 00000000
:004461BE B9680C4B00              mov ecx, 004B0C68
:004461C3 E83895FEFF              call 0042F700
:004461C8 6A00                    push 00000000
:004461CA B930DA4A00              mov ecx, 004ADA30
:004461CF E8CAD3FCFF              call 0041359E
:004461D4 50                      push eax
:004461D5 6A30                    push 00000030
:004461D7 6A30                    push 00000030
:004461D9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004461DC C1E104                  shl ecx, 04
:004461DF 83C108                  add ecx, 00000008
:004461E2 51                      push ecx
:004461E3 8B55F0                  mov edx, dword ptr [ebp-10]
:004461E6 C1E204                  shl edx, 04
:004461E9 52                      push edx
:004461EA E8AE5B0200              call 0046BD9D
:004461EF 83C414                  add esp, 00000014
:004461F2 837DF00E                cmp dword ptr [ebp-10], 0000000E
:004461F6 7D09                    jge 00446201

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004461F8 C745FC03000000          mov [ebp-04], 00000003
:004461FF EB07                    jmp 00446208

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004461F6(C)
|
:00446201 C745FCF7FFFFFF          mov [ebp-04], FFFFFFF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004461FF(U)
|
:00446208 837DEC0C                cmp dword ptr [ebp-14], 0000000C
:0044620C 7D09                    jge 00446217
:0044620E C745F800000000          mov [ebp-08], 00000000
:00446215 EB07                    jmp 0044621E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044620C(C)
|
:00446217 C745F8FDFFFFFF          mov [ebp-08], FFFFFFFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446215(U)
|
:0044621E 8B45F0                  mov eax, dword ptr [ebp-10]
:00446221 0345FC                  add eax, dword ptr [ebp-04]
:00446224 8945F0                  mov dword ptr [ebp-10], eax
:00446227 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044622A 034DF8                  add ecx, dword ptr [ebp-08]
:0044622D 894DEC                  mov dword ptr [ebp-14], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00446230 6A04                    push 00000004
:00446232 B9A8134800              mov ecx, 004813A8
:00446237 E8B81EFCFF              call 004080F4
:0044623C 6A4F                    push 0000004F
:0044623E B9A8134800              mov ecx, 004813A8
:00446243 E8101EFCFF              call 00408058
:00446248 6A00                    push 00000000
:0044624A B9A8134800              mov ecx, 004813A8
:0044624F E83C1EFCFF              call 00408090
:00446254 E8D9CBFCFF              call 00412E32

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00446259 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0044625B 6A09                    push 00000009
:0044625D 8B55EC                  mov edx, dword ptr [ebp-14]
:00446260 83EA02                  sub edx, 00000002
:00446263 52                      push edx
:00446264 8A45F0                  mov al, byte ptr [ebp-10]
:00446267 50                      push eax
:00446268 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044626B E869E6FFFF              call 004448D9
:00446270 6A50                    push 00000050
:00446272 6890000000              push 00000090
:00446277 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044627A C1E104                  shl ecx, 04
:0044627D 83C108                  add ecx, 00000008
:00446280 51                      push ecx
:00446281 8B55F0                  mov edx, dword ptr [ebp-10]
:00446284 C1E204                  shl edx, 04
:00446287 52                      push edx
:00446288 E822C5FFFF              call 004427AF
:0044628D 83C410                  add esp, 00000010
:00446290 6A00                    push 00000000
:00446292 6A00                    push 00000000
:00446294 B930DA4A00              mov ecx, 004ADA30
:00446299 E800D3FCFF              call 0041359E
:0044629E 50                      push eax
:0044629F 6A30                    push 00000030
:004462A1 6A30                    push 00000030
:004462A3 8B45EC                  mov eax, dword ptr [ebp-14]
:004462A6 C1E004                  shl eax, 04
:004462A9 83C018                  add eax, 00000018
:004462AC 50                      push eax
:004462AD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004462B0 C1E104                  shl ecx, 04
:004462B3 83C108                  add ecx, 00000008
:004462B6 51                      push ecx
:004462B7 E856C9FFFF              call 00442C12
:004462BC 83C418                  add esp, 00000018
:004462BF 8B5508                  mov edx, dword ptr [ebp+08]
:004462C2 52                      push edx
:004462C3 E8B7160000              call 0044797F
:004462C8 83C404                  add esp, 00000004
:004462CB 8845F4                  mov byte ptr [ebp-0C], al
:004462CE 8B45F4                  mov eax, dword ptr [ebp-0C]
:004462D1 25FF000000              and eax, 000000FF
:004462D6 83F825                  cmp eax, 00000025
:004462D9 7C26                    jl 00446301
:004462DB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004462DE 81E1FF000000            and ecx, 000000FF
:004462E4 51                      push ecx

* Possible StringData Ref from Data Obj ->"aΧǸ%d"
                                  |
:004462E5 6888904700              push 00479088
:004462EA 68A8134800              push 004813A8
:004462EF E88429FCFF              call 00408C78
:004462F4 83C40C                  add esp, 0000000C
:004462F7 E851CBFCFF              call 00412E4D
:004462FC E9D6000000              jmp 004463D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004462D9(C)
|
:00446301 8B55EC                  mov edx, dword ptr [ebp-14]
:00446304 C1E204                  shl edx, 04
:00446307 83C210                  add edx, 00000010
:0044630A 52                      push edx
:0044630B 8B45F0                  mov eax, dword ptr [ebp-10]
:0044630E 8D4C000A                lea ecx, dword ptr [eax+eax+0A]
:00446312 51                      push ecx
:00446313 B9A8134800              mov ecx, 004813A8
:00446318 E88E1CFCFF              call 00407FAB
:0044631D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00446320 81E2FF000000            and edx, 000000FF
:00446326 8B0495D88D4700          mov eax, dword ptr [4*edx+00478DD8]
:0044632D 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0044632E 6894904700              push 00479094
:00446333 68A8134800              push 004813A8
:00446338 E83B29FCFF              call 00408C78
:0044633D 83C40C                  add esp, 0000000C
:00446340 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00446343 C1E104                  shl ecx, 04
:00446346 83C130                  add ecx, 00000030
:00446349 51                      push ecx
:0044634A 8B55F0                  mov edx, dword ptr [ebp-10]
:0044634D 8D441208                lea eax, dword ptr [edx+edx+08]
:00446351 50                      push eax
:00446352 B9A8134800              mov ecx, 004813A8
:00446357 E84F1CFCFF              call 00407FAB
:0044635C 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0044635F 51                      push ecx
:00446360 E8AF130000              call 00447714
:00446365 83C404                  add esp, 00000004
:00446368 85C0                    test eax, eax
:0044636A 7414                    je 00446380

* Possible StringData Ref from Data Obj ->"iH_"
                                  |
:0044636C 6898904700              push 00479098
:00446371 68A8134800              push 004813A8
:00446376 E8FD28FCFF              call 00408C78
:0044637B 83C408                  add esp, 00000008
:0044637E EB22                    jmp 004463A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044636A(C)
|
:00446380 8A55F4                  mov dl, byte ptr [ebp-0C]
:00446383 52                      push edx
:00446384 E809130000              call 00447692
:00446389 83C404                  add esp, 00000004
:0044638C 85C0                    test eax, eax
:0044638E 7412                    je 004463A2

* Possible StringData Ref from Data Obj ->"ಾ"
                                  |
:00446390 68A4904700              push 004790A4
:00446395 68A8134800              push 004813A8
:0044639A E8D928FCFF              call 00408C78
:0044639F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044637E(U), :0044638E(C)
|
:004463A2 E8A6CAFCFF              call 00412E4D
:004463A7 E85209FEFF              call 00426CFE
:004463AC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004463AF E829000000              call 004463DD
:004463B4 E84509FEFF              call 00426CFE
:004463B9 6A01                    push 00000001
:004463BB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004463BE E86CE6FFFF              call 00444A2F
:004463C3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004463C6 E815E6FFFF              call 004449E0
:004463CB 6A01                    push 00000001
:004463CD B9680C4B00              mov ecx, 004B0C68
:004463D2 E82993FEFF              call 0042F700

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004461A2(U), :004462FC(U)
|
:004463D7 8BE5                    mov esp, ebp
:004463D9 5D                      pop ebp
:004463DA C20400                  ret 0004



* Referenced by a CALL at Address:
|:004463AF   
|
:004463DD 55                      push ebp
:004463DE 8BEC                    mov ebp, esp
:004463E0 83EC08                  sub esp, 00000008
:004463E3 894DF8                  mov dword ptr [ebp-08], ecx
:004463E6 C645FC0A                mov [ebp-04], 0A
:004463EA 8B45FC                  mov eax, dword ptr [ebp-04]
:004463ED 25FF000000              and eax, 000000FF
:004463F2 50                      push eax
:004463F3 E88001FEFF              call 00426578
:004463F8 83C404                  add esp, 00000004
:004463FB 6A01                    push 00000001
:004463FD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446400 E82AE6FFFF              call 00444A2F

* Possible Reference to String Resource ID=00008: ""
                                  |
:00446405 6A08                    push 00000008
:00446407 E86F07FEFF              call 00426B7B
:0044640C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446465(U)
|
:0044640F E85508FEFF              call 00426C69
:00446414 85C0                    test eax, eax
:00446416 754F                    jne 00446467
:00446418 B9F8F44A00              mov ecx, 004AF4F8
:0044641D E88EF0FDFF              call 004254B0
:00446422 85C0                    test eax, eax
:00446424 743F                    je 00446465
:00446426 8A4DFC                  mov cl, byte ptr [ebp-04]
:00446429 80F101                  xor cl, 01
:0044642C 884DFC                  mov byte ptr [ebp-04], cl
:0044642F 8B55FC                  mov edx, dword ptr [ebp-04]
:00446432 81E2FF000000            and edx, 000000FF
:00446438 52                      push edx
:00446439 E83A01FEFF              call 00426578
:0044643E 83C404                  add esp, 00000004
:00446441 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446444 E80DE6FFFF              call 00444A56
:00446449 B9180A4B00              mov ecx, 004B0A18
:0044644E E8DD050000              call 00446A30
:00446453 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446456 E823E3FFFF              call 0044477E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044645B 6A04                    push 00000004
:0044645D E81907FEFF              call 00426B7B
:00446462 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446424(C)
|
:00446465 EBA8                    jmp 0044640F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446416(C)
|
:00446467 6A00                    push 00000000
:00446469 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044646C E8BEE5FFFF              call 00444A2F
:00446471 6A00                    push 00000000
:00446473 E80001FEFF              call 00426578
:00446478 83C404                  add esp, 00000004
:0044647B 8BE5                    mov esp, ebp
:0044647D 5D                      pop ebp
:0044647E C3                      ret



* Referenced by a CALL at Address:
|:00446A76   
|
:0044647F 55                      push ebp
:00446480 8BEC                    mov ebp, esp
:00446482 83EC08                  sub esp, 00000008
:00446485 56                      push esi
:00446486 57                      push edi
:00446487 894DF8                  mov dword ptr [ebp-08], ecx
:0044648A 8B45F8                  mov eax, dword ptr [ebp-08]
:0044648D C6406000                mov [eax+60], 00
:00446491 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446494 81E1FF000000            and ecx, 000000FF
:0044649A 81F9FF000000            cmp ecx, 000000FF
:004464A0 7519                    jne 004464BB
:004464A2 8B55F8                  mov edx, dword ptr [ebp-08]
:004464A5 C7425830000000          mov [edx+58], 00000030
:004464AC 8B45F8                  mov eax, dword ptr [ebp-08]
:004464AF C7405C30000000          mov [eax+5C], 00000030
:004464B6 E902010000              jmp 004465BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004464A0(C)
|
:004464BB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004464BE E879C8FFFF              call 00442D3C
:004464C3 8BF0                    mov esi, eax
:004464C5 8B7D08                  mov edi, dword ptr [ebp+08]
:004464C8 81E7FF000000            and edi, 000000FF
:004464CE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004464D1 E8AAC8FFFF              call 00442D80
:004464D6 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004464D7 B903000000              mov ecx, 00000003
:004464DC F7F9                    idiv ecx
:004464DE 2BF8                    sub edi, eax
:004464E0 6BFF03                  imul edi, 00000003
:004464E3 C1E704                  shl edi, 04
:004464E6 03F7                    add esi, edi
:004464E8 8B55F8                  mov edx, dword ptr [ebp-08]
:004464EB 897258                  mov dword ptr [edx+58], esi
:004464EE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004464F1 E857C8FFFF              call 00442D4D
:004464F6 8BF0                    mov esi, eax
:004464F8 8B7D0C                  mov edi, dword ptr [ebp+0C]
:004464FB 81E7FF000000            and edi, 000000FF
:00446501 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446504 E888C8FFFF              call 00442D91
:00446509 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044650A B903000000              mov ecx, 00000003
:0044650F F7F9                    idiv ecx
:00446511 2BF8                    sub edi, eax
:00446513 6BFF03                  imul edi, 00000003
:00446516 C1E704                  shl edi, 04
:00446519 03F7                    add esi, edi
:0044651B 8B55F8                  mov edx, dword ptr [ebp-08]
:0044651E 89725C                  mov dword ptr [edx+5C], esi
:00446521 8B45F8                  mov eax, dword ptr [ebp-08]
:00446524 8B405C                  mov eax, dword ptr [eax+5C]
:00446527 99                      cdq
:00446528 83E20F                  and edx, 0000000F
:0044652B 03C2                    add eax, edx
:0044652D C1F804                  sar eax, 04
:00446530 83E813                  sub eax, 00000013
:00446533 8945FC                  mov dword ptr [ebp-04], eax
:00446536 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044653A 7C20                    jl 0044655C
:0044653C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044653F C1E104                  shl ecx, 04
:00446542 8B55F8                  mov edx, dword ptr [ebp-08]
:00446545 8B425C                  mov eax, dword ptr [edx+5C]
:00446548 2BC1                    sub eax, ecx
:0044654A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044654D 89415C                  mov dword ptr [ecx+5C], eax
:00446550 C70534044B00F0FFFFFF    mov dword ptr [004B0434], FFFFFFF0
:0044655A EB0A                    jmp 00446566

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044653A(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044655C C70534044B0010000000    mov dword ptr [004B0434], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044655A(U)
|
:00446566 8B55F8                  mov edx, dword ptr [ebp-08]
:00446569 8B4258                  mov eax, dword ptr [edx+58]
:0044656C 99                      cdq
:0044656D 83E20F                  and edx, 0000000F
:00446570 03C2                    add eax, edx
:00446572 8BC8                    mov ecx, eax
:00446574 C1F904                  sar ecx, 04
:00446577 8B55F8                  mov edx, dword ptr [ebp-08]
:0044657A 8B4214                  mov eax, dword ptr [edx+14]
:0044657D 99                      cdq
:0044657E BE30000000              mov esi, 00000030
:00446583 F7FE                    idiv esi
:00446585 3BC8                    cmp ecx, eax
:00446587 7C1B                    jl 004465A4
:00446589 8B45F8                  mov eax, dword ptr [ebp-08]
:0044658C 8B4858                  mov ecx, dword ptr [eax+58]
:0044658F 83E970                  sub ecx, 00000070
:00446592 8B55F8                  mov edx, dword ptr [ebp-08]
:00446595 894A58                  mov dword ptr [edx+58], ecx
:00446598 C70530044B00F0FFFFFF    mov dword ptr [004B0430], FFFFFFF0
:004465A2 EB19                    jmp 004465BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446587(C)
|
:004465A4 8B45F8                  mov eax, dword ptr [ebp-08]
:004465A7 8B4858                  mov ecx, dword ptr [eax+58]
:004465AA 83C150                  add ecx, 00000050
:004465AD 8B55F8                  mov edx, dword ptr [ebp-08]
:004465B0 894A58                  mov dword ptr [edx+58], ecx

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004465B3 C70530044B0010000000    mov dword ptr [004B0430], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004464B6(U), :004465A2(U)
|
:004465BD 5F                      pop edi
:004465BE 5E                      pop esi
:004465BF 8BE5                    mov esp, ebp
:004465C1 5D                      pop ebp
:004465C2 C20800                  ret 0008


:004465C5 55                      push ebp
:004465C6 8BEC                    mov ebp, esp
:004465C8 83EC08                  sub esp, 00000008
:004465CB 894DF8                  mov dword ptr [ebp-08], ecx
:004465CE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004465D1 E81CEBFFFF              call 004450F2
:004465D6 8B4514                  mov eax, dword ptr [ebp+14]
:004465D9 50                      push eax
:004465DA 6A00                    push 00000000
:004465DC 8B4D10                  mov ecx, dword ptr [ebp+10]
:004465DF 51                      push ecx
:004465E0 8B550C                  mov edx, dword ptr [ebp+0C]
:004465E3 81E2FF000000            and edx, 000000FF
:004465E9 83CA40                  or edx, 00000040
:004465EC 52                      push edx

* Possible Reference to String Resource ID=00008: ""
                                  |
:004465ED 6A08                    push 00000008
:004465EF 8B4508                  mov eax, dword ptr [ebp+08]
:004465F2 50                      push eax
:004465F3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004465F6 8B515C                  mov edx, dword ptr [ecx+5C]
:004465F9 52                      push edx
:004465FA 8B45F8                  mov eax, dword ptr [ebp-08]
:004465FD 8B4858                  mov ecx, dword ptr [eax+58]
:00446600 51                      push ecx
:00446601 E89014FEFF              call 00427A96
:00446606 83C420                  add esp, 00000020
:00446609 8845FC                  mov byte ptr [ebp-04], al
:0044660C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044660F 8A4260                  mov al, byte ptr [edx+60]
:00446612 0401                    add al, 01
:00446614 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446617 884160                  mov byte ptr [ecx+60], al
:0044661A 8B55F8                  mov edx, dword ptr [ebp-08]
:0044661D 8B4258                  mov eax, dword ptr [edx+58]
:00446620 030530044B00            add eax, dword ptr [004B0430]
:00446626 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446629 894158                  mov dword ptr [ecx+58], eax
:0044662C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044662F 8B425C                  mov eax, dword ptr [edx+5C]
:00446632 030534044B00            add eax, dword ptr [004B0434]
:00446638 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044663B 89415C                  mov dword ptr [ecx+5C], eax
:0044663E 8A45FC                  mov al, byte ptr [ebp-04]
:00446641 8BE5                    mov esp, ebp
:00446643 5D                      pop ebp
:00446644 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00446B9E   , :00446D62   
|
:00446647 55                      push ebp
:00446648 8BEC                    mov ebp, esp
:0044664A 51                      push ecx
:0044664B 894DFC                  mov dword ptr [ebp-04], ecx
:0044664E 6A01                    push 00000001
:00446650 B9800D4B00              mov ecx, 004B0D80
:00446655 E84FB50100              call 00461BA9
:0044665A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044665D 8A4860                  mov cl, byte ptr [eax+60]
:00446660 80E901                  sub cl, 01
:00446663 8B55FC                  mov edx, dword ptr [ebp-04]
:00446666 884A60                  mov byte ptr [edx+60], cl
:00446669 8B45FC                  mov eax, dword ptr [ebp-04]
:0044666C 8B4858                  mov ecx, dword ptr [eax+58]
:0044666F 2B0D30044B00            sub ecx, dword ptr [004B0430]
:00446675 8B55FC                  mov edx, dword ptr [ebp-04]
:00446678 894A58                  mov dword ptr [edx+58], ecx
:0044667B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044667E 8B485C                  mov ecx, dword ptr [eax+5C]
:00446681 2B0D34044B00            sub ecx, dword ptr [004B0434]
:00446687 8B55FC                  mov edx, dword ptr [ebp-04]
:0044668A 894A5C                  mov dword ptr [edx+5C], ecx
:0044668D 8B45FC                  mov eax, dword ptr [ebp-04]
:00446690 33C9                    xor ecx, ecx
:00446692 8A4860                  mov cl, byte ptr [eax+60]
:00446695 85C9                    test ecx, ecx
:00446697 752C                    jne 004466C5
:00446699 8B55FC                  mov edx, dword ptr [ebp-04]
:0044669C 8B4218                  mov eax, dword ptr [edx+18]
:0044669F 99                      cdq
:004466A0 83E20F                  and edx, 0000000F
:004466A3 03C2                    add eax, edx
:004466A5 C1F804                  sar eax, 04
:004466A8 50                      push eax
:004466A9 8B45FC                  mov eax, dword ptr [ebp-04]
:004466AC 8B4014                  mov eax, dword ptr [eax+14]
:004466AF 99                      cdq
:004466B0 83E20F                  and edx, 0000000F
:004466B3 03C2                    add eax, edx
:004466B5 C1F804                  sar eax, 04
:004466B8 50                      push eax
:004466B9 6A00                    push 00000000
:004466BB 6A00                    push 00000000
:004466BD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004466C0 E801E1FFFF              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446697(C)
|
:004466C5 8BE5                    mov esp, ebp
:004466C7 5D                      pop ebp
:004466C8 C3                      ret


:004466C9 55                      push ebp
:004466CA 8BEC                    mov ebp, esp
:004466CC 51                      push ecx
:004466CD 894DFC                  mov dword ptr [ebp-04], ecx
:004466D0 8BE5                    mov esp, ebp
:004466D2 5D                      pop ebp
:004466D3 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00429AFA   , :00429BD9   , :00429C7B   , :00429D16   , :00429DEE   
|:00429EC6   , :00429F9E   , :0042B019   , :0042B376   , :0042B5D5   
|:0042FEF7   , :0042FF13   , :00430D74   , :00430FB0   , :00432BAB   
|:00432DCC   , :004331EE   , :004355C3   , :004356D7   , :0043575C   
|:0043577C   , :00435FFA   , :00436051   , :004362CE   , :00436325   
|:00436528   , :00436614   , :00436654   , :00436680   , :004369BC   
|:004369FC   , :00436C6F   , :00436C9F   , :00436F41   , :00436F71   
|:00437205   , :0043725D   , :0043756F   , :004377C6   , :00438192   
|:00438544   , :0043879F   , :0043890F   , :00438B42   , :00438C2B   
|:00438D77   , :004396A5   , :0043CDD5   , :0043CEB2   , :0043CEE5   
|:004576EE   , :00457821   
|
:004466D6 55                      push ebp
:004466D7 8BEC                    mov ebp, esp
:004466D9 51                      push ecx
:004466DA 894DFC                  mov dword ptr [ebp-04], ecx
:004466DD B9C8E24A00              mov ecx, 004AE2C8
:004466E2 E8E98AFCFF              call 0040F1D0
:004466E7 2500800000              and eax, 00008000
:004466EC 85C0                    test eax, eax
:004466EE 0F8495000000            je 00446789
:004466F4 8B4514                  mov eax, dword ptr [ebp+14]
:004466F7 25FF000000              and eax, 000000FF
:004466FC 83F801                  cmp eax, 00000001
:004466FF 753A                    jne 0044673B
:00446701 B9C8E24A00              mov ecx, 004AE2C8
:00446706 E8C58AFCFF              call 0040F1D0
:0044670B 2500800000              and eax, 00008000
:00446710 85C0                    test eax, eax
:00446712 7425                    je 00446739
:00446714 B930024B00              mov ecx, 004B0230
:00446719 E8694EFFFF              call 0043B587
:0044671E 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00446720 68FF000000              push 000000FF
:00446725 B930024B00              mov ecx, 004B0230
:0044672A E8B450FFFF              call 0043B7E3
:0044672F B930024B00              mov ecx, 004B0230
:00446734 E8C54DFFFF              call 0043B4FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446712(C)
|
:00446739 EB4E                    jmp 00446789

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004466FF(C)
|
:0044673B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044673E 81E1FF000000            and ecx, 000000FF
:00446744 83F903                  cmp ecx, 00000003
:00446747 7518                    jne 00446761
:00446749 8A5510                  mov dl, byte ptr [ebp+10]
:0044674C 52                      push edx
:0044674D 8A450C                  mov al, byte ptr [ebp+0C]
:00446750 50                      push eax
:00446751 8A4D08                  mov cl, byte ptr [ebp+08]
:00446754 51                      push ecx
:00446755 B99C034B00              mov ecx, 004B039C
:0044675A E82CB2FFFF              call 0044198B
:0044675F EB28                    jmp 00446789

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446747(C)
|
:00446761 8B5514                  mov edx, dword ptr [ebp+14]
:00446764 81E2FF000000            and edx, 000000FF
:0044676A 83FA02                  cmp edx, 00000002
:0044676D 751A                    jne 00446789
:0044676F 8B4518                  mov eax, dword ptr [ebp+18]
:00446772 50                      push eax
:00446773 8A4D10                  mov cl, byte ptr [ebp+10]
:00446776 51                      push ecx
:00446777 8A550C                  mov dl, byte ptr [ebp+0C]
:0044677A 52                      push edx
:0044677B 8A4508                  mov al, byte ptr [ebp+08]
:0044677E 50                      push eax
:0044677F B99C034B00              mov ecx, 004B039C
:00446784 E8866EFFFF              call 0043D60F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004466EE(C), :00446739(U), :0044675F(U), :0044676D(C)
|
:00446789 8BE5                    mov esp, ebp
:0044678B 5D                      pop ebp
:0044678C C21400                  ret 0014



* Referenced by a CALL at Address:
|:004454CC   
|
:0044678F 55                      push ebp
:00446790 8BEC                    mov ebp, esp
:00446792 51                      push ecx
:00446793 894DFC                  mov dword ptr [ebp-04], ecx
:00446796 8BE5                    mov esp, ebp
:00446798 5D                      pop ebp
:00446799 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004339A3   , :00433CE9   , :00433CF7   , :00433D05   , :00433D13   
|:00434328   
|
:0044679C 55                      push ebp
:0044679D 8BEC                    mov ebp, esp
:0044679F 51                      push ecx
:004467A0 894DFC                  mov dword ptr [ebp-04], ecx
:004467A3 8B45FC                  mov eax, dword ptr [ebp-04]
:004467A6 8A4D08                  mov cl, byte ptr [ebp+08]
:004467A9 884861                  mov byte ptr [eax+61], cl
:004467AC 8BE5                    mov esp, ebp
:004467AE 5D                      pop ebp
:004467AF C20400                  ret 0004


:004467B2 55                      push ebp
:004467B3 8BEC                    mov ebp, esp
:004467B5 51                      push ecx
:004467B6 894DFC                  mov dword ptr [ebp-04], ecx
:004467B9 8B45FC                  mov eax, dword ptr [ebp-04]
:004467BC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004467BF 894874                  mov dword ptr [eax+74], ecx
:004467C2 8BE5                    mov esp, ebp
:004467C4 5D                      pop ebp
:004467C5 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004272E9   , :00469125   , :004693DB   
|
:004467C8 55                      push ebp
:004467C9 8BEC                    mov ebp, esp
:004467CB 51                      push ecx
:004467CC 894DFC                  mov dword ptr [ebp-04], ecx
:004467CF 8B45FC                  mov eax, dword ptr [ebp-04]
:004467D2 8B00                    mov eax, dword ptr [eax]
:004467D4 8BE5                    mov esp, ebp
:004467D6 5D                      pop ebp
:004467D7 C3                      ret



* Referenced by a CALL at Addresses:
|:00468AE8   , :00468C32   
|
:004467D8 55                      push ebp
:004467D9 8BEC                    mov ebp, esp
:004467DB 51                      push ecx
:004467DC 894DFC                  mov dword ptr [ebp-04], ecx
:004467DF 8B45FC                  mov eax, dword ptr [ebp-04]
:004467E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004467E5 8908                    mov dword ptr [eax], ecx
:004467E7 8BE5                    mov esp, ebp
:004467E9 5D                      pop ebp
:004467EA C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00454962   , :004605A3   , :0046954C   , :00469602   , :00469772   
|:004697CE   
|
:004467ED 55                      push ebp
:004467EE 8BEC                    mov ebp, esp
:004467F0 51                      push ecx
:004467F1 894DFC                  mov dword ptr [ebp-04], ecx
:004467F4 8B45FC                  mov eax, dword ptr [ebp-04]
:004467F7 8B4004                  mov eax, dword ptr [eax+04]
:004467FA 8BE5                    mov esp, ebp
:004467FC 5D                      pop ebp
:004467FD C3                      ret



* Referenced by a CALL at Addresses:
|:00460570   , :00468B65   , :0046965B   , :00469955   
|
:004467FE 55                      push ebp
:004467FF 8BEC                    mov ebp, esp
:00446801 51                      push ecx
:00446802 894DFC                  mov dword ptr [ebp-04], ecx
:00446805 8B45FC                  mov eax, dword ptr [ebp-04]
:00446808 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044680B 894804                  mov dword ptr [eax+04], ecx
:0044680E 8BE5                    mov esp, ebp
:00446810 5D                      pop ebp
:00446811 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00427368   , :0045497D   , :004605C1   , :0046955C   , :00469665   
|:00469767   , :004699D5   
|
:00446814 55                      push ebp
:00446815 8BEC                    mov ebp, esp
:00446817 51                      push ecx
:00446818 894DFC                  mov dword ptr [ebp-04], ecx
:0044681B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044681E 8B4008                  mov eax, dword ptr [eax+08]
:00446821 8BE5                    mov esp, ebp
:00446823 5D                      pop ebp
:00446824 C3                      ret



* Referenced by a CALL at Addresses:
|:00460597   , :00468B71   , :004696BE   , :00469B5C   
|
:00446825 55                      push ebp
:00446826 8BEC                    mov ebp, esp
:00446828 51                      push ecx
:00446829 894DFC                  mov dword ptr [ebp-04], ecx
:0044682C 8B45FC                  mov eax, dword ptr [ebp-04]
:0044682F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446832 894808                  mov dword ptr [eax+08], ecx
:00446835 8BE5                    mov esp, ebp
:00446837 5D                      pop ebp
:00446838 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00469853   , :00469875   , :004698E0   , :00469902   
|
:0044683B 55                      push ebp
:0044683C 8BEC                    mov ebp, esp
:0044683E 51                      push ecx
:0044683F 894DFC                  mov dword ptr [ebp-04], ecx
:00446842 8B45FC                  mov eax, dword ptr [ebp-04]
:00446845 8B400C                  mov eax, dword ptr [eax+0C]
:00446848 8BE5                    mov esp, ebp
:0044684A 5D                      pop ebp
:0044684B C3                      ret



* Referenced by a CALL at Addresses:
|:00468AD0   , :00468D9B   , :00469534   
|
:0044684C 55                      push ebp
:0044684D 8BEC                    mov ebp, esp
:0044684F 51                      push ecx
:00446850 894DFC                  mov dword ptr [ebp-04], ecx
:00446853 8B45FC                  mov eax, dword ptr [ebp-04]
:00446856 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446859 89480C                  mov dword ptr [eax+0C], ecx
:0044685C 8BE5                    mov esp, ebp
:0044685E 5D                      pop ebp
:0044685F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00469A5A   , :00469A7C   , :00469AE7   , :00469B09   
|
:00446862 55                      push ebp
:00446863 8BEC                    mov ebp, esp
:00446865 51                      push ecx
:00446866 894DFC                  mov dword ptr [ebp-04], ecx
:00446869 8B45FC                  mov eax, dword ptr [ebp-04]
:0044686C 8B4010                  mov eax, dword ptr [eax+10]
:0044686F 8BE5                    mov esp, ebp
:00446871 5D                      pop ebp
:00446872 C3                      ret



* Referenced by a CALL at Addresses:
|:00468ADC   , :00468DA9   , :00469542   
|
:00446873 55                      push ebp
:00446874 8BEC                    mov ebp, esp
:00446876 51                      push ecx
:00446877 894DFC                  mov dword ptr [ebp-04], ecx
:0044687A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044687D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446880 894810                  mov dword ptr [eax+10], ecx
:00446883 8BE5                    mov esp, ebp
:00446885 5D                      pop ebp
:00446886 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042728B   , :00428A88   , :00428DE6   , :0042B393   , :0042B60C   
|:0042CD4D   , :0042CE82   , :0042D3E9   , :0042DAA5   , :0043006F   
|:00439CEC   , :00439DB1   , :0043CA4C   , :00441F21   , :00442027   
|:0044203A   , :00442C36   , :00442CB1   , :00446B09   , :00446D80   
|:00450496   , :00452B13   , :00454998   , :00455376   , :0045844B   
|:0045FEA8   , :00468CE1   , :00468D12   , :00468DE6   , :00469046   
|:0046907F   , :00469137   , :00469898   , :004698C5   
|
:00446889 55                      push ebp
:0044688A 8BEC                    mov ebp, esp
:0044688C 51                      push ecx
:0044688D 894DFC                  mov dword ptr [ebp-04], ecx
:00446890 8B45FC                  mov eax, dword ptr [ebp-04]
:00446893 8B4014                  mov eax, dword ptr [eax+14]
:00446896 8BE5                    mov esp, ebp
:00446898 5D                      pop ebp
:00446899 C3                      ret



* Referenced by a CALL at Addresses:
|:00468AF9   , :00468C13   , :004690CC   , :00469482   
|
:0044689A 55                      push ebp
:0044689B 8BEC                    mov ebp, esp
:0044689D 51                      push ecx
:0044689E 894DFC                  mov dword ptr [ebp-04], ecx
:004468A1 8B45FC                  mov eax, dword ptr [ebp-04]
:004468A4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004468A7 894814                  mov dword ptr [eax+14], ecx
:004468AA 8BE5                    mov esp, ebp
:004468AC 5D                      pop ebp
:004468AD C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004272B2   , :004273C5   , :00428AAE   , :00428DFB   , :0042CD68   
|:0042CE9E   , :0042DABB   , :00439CE1   , :00439DA6   , :00441F39   
|:00442173   , :00442C1A   , :00442C95   , :00446AF5   , :00446D6C   
|:00450451   , :00452AF7   , :004549BB   , :0045538B   , :00468D3F   
|:00468D73   , :00468DDB   , :0046905B   , :00469094   , :00469147   
|:00469A9F   , :00469ACC   
|
:004468B0 55                      push ebp
:004468B1 8BEC                    mov ebp, esp
:004468B3 51                      push ecx
:004468B4 894DFC                  mov dword ptr [ebp-04], ecx
:004468B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004468BA 8B4018                  mov eax, dword ptr [eax+18]
:004468BD 8BE5                    mov esp, ebp
:004468BF 5D                      pop ebp
:004468C0 C3                      ret



* Referenced by a CALL at Addresses:
|:00468B25   , :00468C26   , :004690E1   , :00469490   
|
:004468C1 55                      push ebp
:004468C2 8BEC                    mov ebp, esp
:004468C4 51                      push ecx
:004468C5 894DFC                  mov dword ptr [ebp-04], ecx
:004468C8 8B45FC                  mov eax, dword ptr [ebp-04]
:004468CB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004468CE 894818                  mov dword ptr [eax+18], ecx
:004468D1 8BE5                    mov esp, ebp
:004468D3 5D                      pop ebp
:004468D4 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004690C1   
|
:004468D7 55                      push ebp
:004468D8 8BEC                    mov ebp, esp
:004468DA 51                      push ecx
:004468DB 894DFC                  mov dword ptr [ebp-04], ecx
:004468DE 8B45FC                  mov eax, dword ptr [ebp-04]
:004468E1 8B401C                  mov eax, dword ptr [eax+1C]
:004468E4 8BE5                    mov esp, ebp
:004468E6 5D                      pop ebp
:004468E7 C3                      ret



* Referenced by a CALL at Addresses:
|:00455381   , :00469051   , :0046908A   
|
:004468E8 55                      push ebp
:004468E9 8BEC                    mov ebp, esp
:004468EB 51                      push ecx
:004468EC 894DFC                  mov dword ptr [ebp-04], ecx
:004468EF 8B45FC                  mov eax, dword ptr [ebp-04]
:004468F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004468F5 89481C                  mov dword ptr [eax+1C], ecx
:004468F8 8BE5                    mov esp, ebp
:004468FA 5D                      pop ebp
:004468FB C20400                  ret 0004



* Referenced by a CALL at Address:
|:004690D6   
|
:004468FE 55                      push ebp
:004468FF 8BEC                    mov ebp, esp
:00446901 51                      push ecx
:00446902 894DFC                  mov dword ptr [ebp-04], ecx
:00446905 8B45FC                  mov eax, dword ptr [ebp-04]
:00446908 8B4020                  mov eax, dword ptr [eax+20]
:0044690B 8BE5                    mov esp, ebp
:0044690D 5D                      pop ebp
:0044690E C3                      ret



* Referenced by a CALL at Addresses:
|:00455396   , :00469066   , :0046909F   
|
:0044690F 55                      push ebp
:00446910 8BEC                    mov ebp, esp
:00446912 51                      push ecx
:00446913 894DFC                  mov dword ptr [ebp-04], ecx
:00446916 8B45FC                  mov eax, dword ptr [ebp-04]
:00446919 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044691C 894820                  mov dword ptr [eax+20], ecx
:0044691F 8BE5                    mov esp, ebp
:00446921 5D                      pop ebp
:00446922 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00468CA4   , :004691F3   , :00469213   
|
:00446925 55                      push ebp
:00446926 8BEC                    mov ebp, esp
:00446928 51                      push ecx
:00446929 894DFC                  mov dword ptr [ebp-04], ecx
:0044692C 8B45FC                  mov eax, dword ptr [ebp-04]
:0044692F 8B4024                  mov eax, dword ptr [eax+24]
:00446932 8BE5                    mov esp, ebp
:00446934 5D                      pop ebp
:00446935 C3                      ret



* Referenced by a CALL at Addresses:
|:00468A8C   , :00468BA9   
|
:00446936 55                      push ebp
:00446937 8BEC                    mov ebp, esp
:00446939 51                      push ecx
:0044693A 894DFC                  mov dword ptr [ebp-04], ecx
:0044693D 8B45FC                  mov eax, dword ptr [ebp-04]
:00446940 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446943 894824                  mov dword ptr [eax+24], ecx
:00446946 8BE5                    mov esp, ebp
:00446948 5D                      pop ebp
:00446949 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00468CB4   , :0046923B   , :0046925B   , :004692B5   , :004692D2   
|
:0044694C 55                      push ebp
:0044694D 8BEC                    mov ebp, esp
:0044694F 51                      push ecx
:00446950 894DFC                  mov dword ptr [ebp-04], ecx
:00446953 8B45FC                  mov eax, dword ptr [ebp-04]
:00446956 8B4028                  mov eax, dword ptr [eax+28]
:00446959 8BE5                    mov esp, ebp
:0044695B 5D                      pop ebp
:0044695C C3                      ret



* Referenced by a CALL at Addresses:
|:00468AB6   , :00468BE1   
|
:0044695D 55                      push ebp
:0044695E 8BEC                    mov ebp, esp
:00446960 51                      push ecx
:00446961 894DFC                  mov dword ptr [ebp-04], ecx
:00446964 8B45FC                  mov eax, dword ptr [ebp-04]
:00446967 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044696A 894828                  mov dword ptr [eax+28], ecx
:0044696D 8BE5                    mov esp, ebp
:0044696F 5D                      pop ebp
:00446970 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00468B7B   , :00468B98   
|
:00446973 55                      push ebp
:00446974 8BEC                    mov ebp, esp
:00446976 51                      push ecx
:00446977 894DFC                  mov dword ptr [ebp-04], ecx
:0044697A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044697D 8B402C                  mov eax, dword ptr [eax+2C]
:00446980 8BE5                    mov esp, ebp
:00446982 5D                      pop ebp
:00446983 C3                      ret



* Referenced by a CALL at Address:
|:00468A7E   
|
:00446984 55                      push ebp
:00446985 8BEC                    mov ebp, esp
:00446987 51                      push ecx
:00446988 894DFC                  mov dword ptr [ebp-04], ecx
:0044698B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044698E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446991 89482C                  mov dword ptr [eax+2C], ecx
:00446994 8BE5                    mov esp, ebp
:00446996 5D                      pop ebp
:00446997 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00468BB3   , :00468BD0   
|
:0044699A 55                      push ebp
:0044699B 8BEC                    mov ebp, esp
:0044699D 51                      push ecx
:0044699E 894DFC                  mov dword ptr [ebp-04], ecx
:004469A1 8B45FC                  mov eax, dword ptr [ebp-04]
:004469A4 8B4030                  mov eax, dword ptr [eax+30]
:004469A7 8BE5                    mov esp, ebp
:004469A9 5D                      pop ebp
:004469AA C3                      ret



* Referenced by a CALL at Address:
|:00468AA8   
|
:004469AB 55                      push ebp
:004469AC 8BEC                    mov ebp, esp
:004469AE 51                      push ecx
:004469AF 894DFC                  mov dword ptr [ebp-04], ecx
:004469B2 8B45FC                  mov eax, dword ptr [ebp-04]
:004469B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004469B8 894830                  mov dword ptr [eax+30], ecx
:004469BB 8BE5                    mov esp, ebp
:004469BD 5D                      pop ebp
:004469BE C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045847D   , :0045850F   , :004587C2   , :0046023E   , :00468CD5   
|:00468D06   , :00468F27   , :00468F60   , :00469202   , :00469225   
|:0046949A   , :004696DC   
|
:004469C1 55                      push ebp
:004469C2 8BEC                    mov ebp, esp
:004469C4 51                      push ecx
:004469C5 894DFC                  mov dword ptr [ebp-04], ecx
:004469C8 8B45FC                  mov eax, dword ptr [ebp-04]
:004469CB 8B4034                  mov eax, dword ptr [eax+34]
:004469CE 8BE5                    mov esp, ebp
:004469D0 5D                      pop ebp
:004469D1 C3                      ret



* Referenced by a CALL at Addresses:
|:00468A9A   , :00468BF1   
|
:004469D2 55                      push ebp
:004469D3 8BEC                    mov ebp, esp
:004469D5 51                      push ecx
:004469D6 894DFC                  mov dword ptr [ebp-04], ecx
:004469D9 8B45FC                  mov eax, dword ptr [ebp-04]
:004469DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004469DF 894834                  mov dword ptr [eax+34], ecx
:004469E2 8BE5                    mov esp, ebp
:004469E4 5D                      pop ebp
:004469E5 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00458496   , :004584FB   , :00458582   , :004587AE   , :00460261   
|:00468D33   , :00468D67   , :00468F35   , :00468F91   , :0046924A   
|:0046926D   , :004694A7   , :00469748   
|
:004469E8 55                      push ebp
:004469E9 8BEC                    mov ebp, esp
:004469EB 51                      push ecx
:004469EC 894DFC                  mov dword ptr [ebp-04], ecx
:004469EF 8B45FC                  mov eax, dword ptr [ebp-04]
:004469F2 8B4038                  mov eax, dword ptr [eax+38]
:004469F5 8BE5                    mov esp, ebp
:004469F7 5D                      pop ebp
:004469F8 C3                      ret



* Referenced by a CALL at Addresses:
|:00468AC4   , :00468C02   
|
:004469F9 55                      push ebp
:004469FA 8BEC                    mov ebp, esp
:004469FC 51                      push ecx
:004469FD 894DFC                  mov dword ptr [ebp-04], ecx
:00446A00 8B45FC                  mov eax, dword ptr [ebp-04]
:00446A03 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446A06 894838                  mov dword ptr [eax+38], ecx
:00446A09 8BE5                    mov esp, ebp
:00446A0B 5D                      pop ebp
:00446A0C C20400                  ret 0004


:00446A0F CC                      int 03

* Referenced by a CALL at Addresses:
|:00442EC5   , :004461AE   , :00455250   , :004552E2   , :0045FB09   
|:004691CF   , :004697AA   , :004699B1   
|
:00446A10 55                      push ebp
:00446A11 8BEC                    mov ebp, esp
:00446A13 51                      push ecx
:00446A14 894DFC                  mov dword ptr [ebp-04], ecx
:00446A17 8B45FC                  mov eax, dword ptr [ebp-04]
:00446A1A 8B4048                  mov eax, dword ptr [eax+48]
:00446A1D 8BE5                    mov esp, ebp
:00446A1F 5D                      pop ebp
:00446A20 C3                      ret


:00446A21 CC                      int 03
:00446A22 CC                      int 03
:00446A23 CC                      int 03
:00446A24 CC                      int 03
:00446A25 CC                      int 03
:00446A26 CC                      int 03
:00446A27 CC                      int 03
:00446A28 CC                      int 03
:00446A29 CC                      int 03
:00446A2A CC                      int 03
:00446A2B CC                      int 03
:00446A2C CC                      int 03
:00446A2D CC                      int 03
:00446A2E CC                      int 03
:00446A2F CC                      int 03

* Referenced by a CALL at Addresses:
|:00444DDC   , :00444EB9   , :0044644E   , :0044D868   , :0044D8DC   
|
:00446A30 55                      push ebp
:00446A31 8BEC                    mov ebp, esp
:00446A33 51                      push ecx
:00446A34 894DFC                  mov dword ptr [ebp-04], ecx
:00446A37 8B45FC                  mov eax, dword ptr [ebp-04]
:00446A3A 8A4805                  mov cl, byte ptr [eax+05]
:00446A3D 80F101                  xor cl, 01
:00446A40 8B55FC                  mov edx, dword ptr [ebp-04]
:00446A43 884A05                  mov byte ptr [edx+05], cl
:00446A46 8BE5                    mov esp, ebp
:00446A48 5D                      pop ebp
:00446A49 C3                      ret


:00446A4A CC                      int 03
:00446A4B CC                      int 03
:00446A4C CC                      int 03
:00446A4D CC                      int 03
:00446A4E CC                      int 03
:00446A4F CC                      int 03

* Referenced by a CALL at Address:
|:00456FB0   
|
:00446A50 55                      push ebp
:00446A51 8BEC                    mov ebp, esp
:00446A53 83EC10                  sub esp, 00000010
:00446A56 894DF4                  mov dword ptr [ebp-0C], ecx
:00446A59 C645FC00                mov [ebp-04], 00
:00446A5D C745F800000000          mov [ebp-08], 00000000
:00446A64 8B4508                  mov eax, dword ptr [ebp+08]
:00446A67 8A4801                  mov cl, byte ptr [eax+01]
:00446A6A 51                      push ecx
:00446A6B 8B5508                  mov edx, dword ptr [ebp+08]
:00446A6E 8A02                    mov al, byte ptr [edx]
:00446A70 50                      push eax
:00446A71 B9A8034B00              mov ecx, 004B03A8
:00446A76 E804FAFFFF              call 0044647F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446BAB(U)
|
:00446A7B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446A7E 81E1FF000000            and ecx, 000000FF
:00446A84 81F9FF000000            cmp ecx, 000000FF
:00446A8A 0F8420010000            je 00446BB0
:00446A90 8B5508                  mov edx, dword ptr [ebp+08]
:00446A93 8A4201                  mov al, byte ptr [edx+01]
:00446A96 50                      push eax
:00446A97 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446A9A 8A11                    mov dl, byte ptr [ecx]
:00446A9C 52                      push edx
:00446A9D B990084B00              mov ecx, 004B0890
:00446AA2 E8A6A00000              call 00450B4D
:00446AA7 8B4508                  mov eax, dword ptr [ebp+08]
:00446AAA 668B08                  mov cx, word ptr [eax]
:00446AAD 51                      push ecx
:00446AAE E881070000              call 00447234
:00446AB3 83C404                  add esp, 00000004
:00446AB6 85C0                    test eax, eax
:00446AB8 7514                    jne 00446ACE

* Possible StringData Ref from Data Obj ->"oӥDŵL@HC"
                                  |
:00446ABA 68E0904700              push 004790E0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00446ABF 6A05                    push 00000005
:00446AC1 E8A620FEFF              call 00428B6C
:00446AC6 83C408                  add esp, 00000008
:00446AC9 E9E2000000              jmp 00446BB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446AB8(C)
|
:00446ACE E810B70000              call 004521E3
:00446AD3 8845FC                  mov byte ptr [ebp-04], al
:00446AD6 E8735A0200              call 0046C54E
:00446ADB 8B55FC                  mov edx, dword ptr [ebp-04]
:00446ADE 81E2FF000000            and edx, 000000FF
:00446AE4 81FAFF000000            cmp edx, 000000FF
:00446AEA 0F84A9000000            je 00446B99
:00446AF0 B9A8034B00              mov ecx, 004B03A8
:00446AF5 E8B6FDFFFF              call 004468B0
:00446AFA 99                      cdq
:00446AFB 83E20F                  and edx, 0000000F
:00446AFE 03C2                    add eax, edx
:00446B00 C1F804                  sar eax, 04
:00446B03 50                      push eax
:00446B04 B9A8034B00              mov ecx, 004B03A8
:00446B09 E87BFDFFFF              call 00446889
:00446B0E 99                      cdq
:00446B0F 83E20F                  and edx, 0000000F
:00446B12 03C2                    add eax, edx
:00446B14 C1F804                  sar eax, 04
:00446B17 50                      push eax
:00446B18 6A00                    push 00000000
:00446B1A 6A00                    push 00000000
:00446B1C B9A8034B00              mov ecx, 004B03A8
:00446B21 E8A0DCFFFF              call 004447C6
:00446B26 8B45FC                  mov eax, dword ptr [ebp-04]
:00446B29 25FF000000              and eax, 000000FF
:00446B2E 8945F0                  mov dword ptr [ebp-10], eax
:00446B31 837DF003                cmp dword ptr [ebp-10], 00000003
:00446B35 775E                    ja 00446B95
:00446B37 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00446B3A FF248DB96B4400          jmp dword ptr [4*ecx+00446BB9]
:00446B41 8B5508                  mov edx, dword ptr [ebp+08]
:00446B44 668B02                  mov ax, word ptr [edx]
:00446B47 50                      push eax
:00446B48 E8CD000000              call 00446C1A
:00446B4D 83C404                  add esp, 00000004
:00446B50 C645FCFF                mov [ebp-04], FF
:00446B54 EB43                    jmp 00446B99
:00446B56 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00446B59 51                      push ecx
:00446B5A 8B5508                  mov edx, dword ptr [ebp+08]
:00446B5D 668B02                  mov ax, word ptr [edx]
:00446B60 50                      push eax
:00446B61 E84A060000              call 004471B0
:00446B66 83C408                  add esp, 00000008
:00446B69 C645FCFF                mov [ebp-04], FF
:00446B6D EB2A                    jmp 00446B99
:00446B6F C745F801000000          mov [ebp-08], 00000001
:00446B76 C645FCFF                mov [ebp-04], FF
:00446B7A EB1D                    jmp 00446B99
:00446B7C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00446B7F 51                      push ecx
:00446B80 8B5508                  mov edx, dword ptr [ebp+08]
:00446B83 668B02                  mov ax, word ptr [edx]
:00446B86 50                      push eax
:00446B87 E871060000              call 004471FD
:00446B8C 83C408                  add esp, 00000008
:00446B8F C645FCFF                mov [ebp-04], FF
:00446B93 EB04                    jmp 00446B99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446B35(C)
|
:00446B95 C645FCFF                mov [ebp-04], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446AEA(C), :00446B54(U), :00446B6D(U), :00446B7A(U), :00446B93(U)
|
:00446B99 B9A8034B00              mov ecx, 004B03A8
:00446B9E E8A4FAFFFF              call 00446647
:00446BA3 837DF800                cmp dword ptr [ebp-08], 00000000
:00446BA7 7402                    je 00446BAB
:00446BA9 EB05                    jmp 00446BB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446BA7(C)
|
:00446BAB E9CBFEFFFF              jmp 00446A7B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446A8A(C), :00446AC9(U), :00446BA9(U)
|
:00446BB0 8B45F8                  mov eax, dword ptr [ebp-08]
:00446BB3 8BE5                    mov esp, ebp
:00446BB5 5D                      pop ebp
:00446BB6 C20800                  ret 0008



:00446BB9 416B4400                DWORD 00446B41
:00446BBD 566B4400                DWORD 00446B56
:00446BC1 6F6B4400                DWORD 00446B6F
:00446BC5 7C6B4400                DWORD 00446B7C



* Referenced by a CALL at Addresses:
|:00446C35   , :004510C4   
|
:00446BC9 55                      push ebp
:00446BCA 8BEC                    mov ebp, esp
:00446BCC 83EC08                  sub esp, 00000008
:00446BCF C745F800000000          mov [ebp-08], 00000000
:00446BD6 C745FC00000000          mov [ebp-04], 00000000
:00446BDD EB09                    jmp 00446BE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446C11(U)
|
:00446BDF 8B45FC                  mov eax, dword ptr [ebp-04]
:00446BE2 83C001                  add eax, 00000001
:00446BE5 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446BDD(U)
|
:00446BE8 837DFC1E                cmp dword ptr [ebp-04], 0000001E
:00446BEC 7325                    jnb 00446C13
:00446BEE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446BF1 6BC924                  imul ecx, 00000024
:00446BF4 81C108F54A00            add ecx, 004AF508
:00446BFA E8D18CFEFF              call 0042F8D0
:00446BFF 25FF000000              and eax, 000000FF
:00446C04 85C0                    test eax, eax
:00446C06 7509                    jne 00446C11
:00446C08 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446C0B 83C101                  add ecx, 00000001
:00446C0E 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446C06(C)
|
:00446C11 EBCC                    jmp 00446BDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446BEC(C)
|
:00446C13 8B45F8                  mov eax, dword ptr [ebp-08]
:00446C16 8BE5                    mov esp, ebp
:00446C18 5D                      pop ebp
:00446C19 C3                      ret



* Referenced by a CALL at Address:
|:00446B48   
|
:00446C1A 55                      push ebp
:00446C1B 8BEC                    mov ebp, esp
:00446C1D 83EC1C                  sub esp, 0000001C
:00446C20 C745F000000000          mov [ebp-10], 00000000
:00446C27 C745FC00000000          mov [ebp-04], 00000000
:00446C2E C745EC00000000          mov [ebp-14], 00000000
:00446C35 E88FFFFFFF              call 00446BC9
:00446C3A 85C0                    test eax, eax
:00446C3C 7514                    jne 00446C52

* Possible StringData Ref from Data Obj ->"AW}FC"
                                  |
:00446C3E 68F4904700              push 004790F4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00446C43 6A05                    push 00000005
:00446C45 E8221FFEFF              call 00428B6C
:00446C4A 83C408                  add esp, 00000008
:00446C4D E94B010000              jmp 00446D9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446C3C(C)
|
:00446C52 668B4508                mov ax, word ptr [ebp+08]
:00446C56 50                      push eax
:00446C57 E845010000              call 00446DA1
:00446C5C 83C404                  add esp, 00000004
:00446C5F 8945F0                  mov dword ptr [ebp-10], eax
:00446C62 837DF000                cmp dword ptr [ebp-10], 00000000
:00446C66 7705                    ja 00446C6D
:00446C68 E930010000              jmp 00446D9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446C66(C)
|
:00446C6D 68E0084B00              push 004B08E0
:00446C72 E8B7B50000              call 0045222E
:00446C77 83C404                  add esp, 00000004
:00446C7A 8945F4                  mov dword ptr [ebp-0C], eax
:00446C7D C745E400000000          mov [ebp-1C], 00000000
:00446C84 C745F800000000          mov [ebp-08], 00000000
:00446C8B C645E8FF                mov [ebp-18], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446D53(U)
|
:00446C8F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00446C92 833900                  cmp dword ptr [ecx], 00000000
:00446C95 0F84BD000000            je 00446D58
:00446C9B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00446C9E 8B02                    mov eax, dword ptr [edx]
:00446CA0 8945E4                  mov dword ptr [ebp-1C], eax
:00446CA3 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00446CA6 51                      push ecx
:00446CA7 E8F2010000              call 00446E9E
:00446CAC 83C404                  add esp, 00000004
:00446CAF 8945F8                  mov dword ptr [ebp-08], eax
:00446CB2 837DF800                cmp dword ptr [ebp-08], 00000000
:00446CB6 7505                    jne 00446CBD
:00446CB8 E9E0000000              jmp 00446D9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446CB6(C)
|
:00446CBD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00446CC0 E84BDAFBFF              call 00404710
:00446CC5 50                      push eax
:00446CC6 E834020200              call 00466EFF
:00446CCB 83C404                  add esp, 00000004
:00446CCE 8B55F8                  mov edx, dword ptr [ebp-08]
:00446CD1 52                      push edx
:00446CD2 668B4508                mov ax, word ptr [ebp+08]
:00446CD6 50                      push eax
:00446CD7 E861020000              call 00446F3D
:00446CDC 83C408                  add esp, 00000008
:00446CDF 8945EC                  mov dword ptr [ebp-14], eax
:00446CE2 837DEC00                cmp dword ptr [ebp-14], 00000000
:00446CE6 7517                    jne 00446CFF
:00446CE8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446CEB E8308BFEFF              call 0042F820
:00446CF0 8845E8                  mov byte ptr [ebp-18], al
:00446CF3 8A4DE8                  mov cl, byte ptr [ebp-18]
:00446CF6 51                      push ecx
:00446CF7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446CFA E8E353FEFF              call 0042C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446CE6(C)
|
:00446CFF 8B55F4                  mov edx, dword ptr [ebp-0C]
:00446D02 83C204                  add edx, 00000004
:00446D05 8955F4                  mov dword ptr [ebp-0C], edx
:00446D08 B9500E4B00              mov ecx, 004B0E50
:00446D0D E81CD90100              call 0046462E
:00446D12 837DEC00                cmp dword ptr [ebp-14], 00000000
:00446D16 743B                    je 00446D53
:00446D18 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446D1B E8B089FEFF              call 0042F6D0
:00446D20 50                      push eax
:00446D21 B9880B4B00              mov ecx, 004B0B88
:00446D26 E8952DFFFF              call 00439AC0
:00446D2B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446D2E E8ED8AFEFF              call 0042F820
:00446D33 50                      push eax
:00446D34 B9880B4B00              mov ecx, 004B0B88
:00446D39 E8FA300100              call 00459E38
:00446D3E B9180A4B00              mov ecx, 004B0A18
:00446D43 E8F88EFEFF              call 0042FC40
:00446D48 25FF000000              and eax, 000000FF
:00446D4D 85C0                    test eax, eax
:00446D4F 7402                    je 00446D53
:00446D51 EB05                    jmp 00446D58

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446D16(C), :00446D4F(C)
|
:00446D53 E937FFFFFF              jmp 00446C8F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446C95(C), :00446D51(U)
|
:00446D58 E8D0000200              call 00466E2D
:00446D5D B9A8034B00              mov ecx, 004B03A8
:00446D62 E8E0F8FFFF              call 00446647
:00446D67 B9A8034B00              mov ecx, 004B03A8
:00446D6C E83FFBFFFF              call 004468B0
:00446D71 99                      cdq
:00446D72 83E20F                  and edx, 0000000F
:00446D75 03C2                    add eax, edx
:00446D77 C1F804                  sar eax, 04
:00446D7A 50                      push eax
:00446D7B B9A8034B00              mov ecx, 004B03A8
:00446D80 E804FBFFFF              call 00446889
:00446D85 99                      cdq
:00446D86 83E20F                  and edx, 0000000F
:00446D89 03C2                    add eax, edx
:00446D8B C1F804                  sar eax, 04
:00446D8E 50                      push eax
:00446D8F 6A00                    push 00000000
:00446D91 6A00                    push 00000000
:00446D93 B9A8034B00              mov ecx, 004B03A8
:00446D98 E829DAFFFF              call 004447C6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446C4D(U), :00446C68(U), :00446CB8(U)
|
:00446D9D 8BE5                    mov esp, ebp
:00446D9F 5D                      pop ebp
:00446DA0 C3                      ret



* Referenced by a CALL at Address:
|:00446C57   
|
:00446DA1 55                      push ebp
:00446DA2 8BEC                    mov ebp, esp
:00446DA4 83EC08                  sub esp, 00000008
:00446DA7 C745F800000000          mov [ebp-08], 00000000
:00446DAE C745FC00000000          mov [ebp-04], 00000000
:00446DB5 EB09                    jmp 00446DC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E38(U)
|
:00446DB7 8B45FC                  mov eax, dword ptr [ebp-04]
:00446DBA 83C001                  add eax, 00000001
:00446DBD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446DB5(U)
|
:00446DC0 817DFCC8000000          cmp dword ptr [ebp-04], 000000C8
:00446DC7 7374                    jnb 00446E3D
:00446DC9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446DCC 6BC970                  imul ecx, 00000070
:00446DCF 81C198224900            add ecx, 00492298
:00446DD5 E816DBFBFF              call 004048F0
:00446DDA 25FF000000              and eax, 000000FF
:00446DDF 85C0                    test eax, eax
:00446DE1 754D                    jne 00446E30
:00446DE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446DE6 6BC970                  imul ecx, 00000070
:00446DE9 81C198224900            add ecx, 00492298
:00446DEF E89CDAFBFF              call 00404890
:00446DF4 85C0                    test eax, eax
:00446DF6 7638                    jbe 00446E30
:00446DF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446DFB 6BC970                  imul ecx, 00000070
:00446DFE 81C198224900            add ecx, 00492298
:00446E04 51                      push ecx
:00446E05 E848000000              call 00446E52
:00446E0A 83C404                  add esp, 00000004
:00446E0D 85C0                    test eax, eax
:00446E0F 751F                    jne 00446E30
:00446E11 8B55FC                  mov edx, dword ptr [ebp-04]
:00446E14 6BD270                  imul edx, 00000070
:00446E17 81C298224900            add edx, 00492298
:00446E1D 8B45F8                  mov eax, dword ptr [ebp-08]
:00446E20 891485E0084B00          mov dword ptr [4*eax+004B08E0], edx
:00446E27 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446E2A 83C101                  add ecx, 00000001
:00446E2D 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446DE1(C), :00446DF6(C), :00446E0F(C)
|
:00446E30 837DF830                cmp dword ptr [ebp-08], 00000030
:00446E34 7202                    jb 00446E38
:00446E36 EB05                    jmp 00446E3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E34(C)
|
:00446E38 E97AFFFFFF              jmp 00446DB7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446DC7(C), :00446E36(U)
|
:00446E3D 8B55F8                  mov edx, dword ptr [ebp-08]
:00446E40 C70495E0084B0000000000  mov dword ptr [4*edx+004B08E0], 00000000
:00446E4B 8B45F8                  mov eax, dword ptr [ebp-08]
:00446E4E 8BE5                    mov esp, ebp
:00446E50 5D                      pop ebp
:00446E51 C3                      ret



* Referenced by a CALL at Addresses:
|:00446E05   , :00447429   
|
:00446E52 55                      push ebp
:00446E53 8BEC                    mov ebp, esp
:00446E55 51                      push ecx
:00446E56 56                      push esi
:00446E57 C745FC00000000          mov [ebp-04], 00000000
:00446E5E EB09                    jmp 00446E69

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E95(U)
|
:00446E60 8B45FC                  mov eax, dword ptr [ebp-04]
:00446E63 83C001                  add eax, 00000001
:00446E66 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E5E(U)
|
:00446E69 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:00446E6D 7328                    jnb 00446E97
:00446E6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446E72 6BC924                  imul ecx, 00000024
:00446E75 81C108F54A00            add ecx, 004AF508
:00446E7B E85088FEFF              call 0042F6D0
:00446E80 8BF0                    mov esi, eax
:00446E82 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446E85 E886D8FBFF              call 00404710
:00446E8A 3BF0                    cmp esi, eax
:00446E8C 7507                    jne 00446E95
:00446E8E B801000000              mov eax, 00000001
:00446E93 EB04                    jmp 00446E99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E8C(C)
|
:00446E95 EBC9                    jmp 00446E60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E6D(C)
|
:00446E97 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E93(U)
|
:00446E99 5E                      pop esi
:00446E9A 8BE5                    mov esp, ebp
:00446E9C 5D                      pop ebp
:00446E9D C3                      ret



* Referenced by a CALL at Address:
|:00446CA7   
|
:00446E9E 55                      push ebp
:00446E9F 8BEC                    mov ebp, esp
:00446EA1 51                      push ecx
:00446EA2 E84B000000              call 00446EF2
:00446EA7 8945FC                  mov dword ptr [ebp-04], eax
:00446EAA 837DFC00                cmp dword ptr [ebp-04], 00000000
:00446EAE 7504                    jne 00446EB4
:00446EB0 33C0                    xor eax, eax
:00446EB2 EB3A                    jmp 00446EEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446EAE(C)
|
:00446EB4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446EB7 E854D8FBFF              call 00404710
:00446EBC 50                      push eax
:00446EBD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446EC0 E84450FEFF              call 0042BF09
:00446EC5 6A00                    push 00000000
:00446EC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446ECA E89129FEFF              call 00429860

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00446ECF 6A07                    push 00000007
:00446ED1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446ED4 E8D963FEFF              call 0042D2B2
:00446ED9 6A01                    push 00000001
:00446EDB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446EDE E83D8BFEFF              call 0042FA20
:00446EE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446EE6 E8D355FEFF              call 0042C4BE
:00446EEB 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446EB2(U)
|
:00446EEE 8BE5                    mov esp, ebp
:00446EF0 5D                      pop ebp
:00446EF1 C3                      ret



* Referenced by a CALL at Address:
|:00446EA2   
|
:00446EF2 55                      push ebp
:00446EF3 8BEC                    mov ebp, esp
:00446EF5 51                      push ecx
:00446EF6 C745FC00000000          mov [ebp-04], 00000000
:00446EFD EB09                    jmp 00446F08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446F35(U)
|
:00446EFF 8B45FC                  mov eax, dword ptr [ebp-04]
:00446F02 83C001                  add eax, 00000001
:00446F05 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446EFD(U)
|
:00446F08 837DFC1E                cmp dword ptr [ebp-04], 0000001E
:00446F0C 7329                    jnb 00446F37
:00446F0E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446F11 6BC924                  imul ecx, 00000024
:00446F14 81C108F54A00            add ecx, 004AF508
:00446F1A E8B189FEFF              call 0042F8D0
:00446F1F 25FF000000              and eax, 000000FF
:00446F24 85C0                    test eax, eax
:00446F26 750D                    jne 00446F35
:00446F28 8B45FC                  mov eax, dword ptr [ebp-04]
:00446F2B 6BC024                  imul eax, 00000024
:00446F2E 0508F54A00              add eax, 004AF508
:00446F33 EB04                    jmp 00446F39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446F26(C)
|
:00446F35 EBC8                    jmp 00446EFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446F0C(C)
|
:00446F37 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446F33(U)
|
:00446F39 8BE5                    mov esp, ebp
:00446F3B 5D                      pop ebp
:00446F3C C3                      ret



* Referenced by a CALL at Address:
|:00446CD7   
|
:00446F3D 55                      push ebp
:00446F3E 8BEC                    mov ebp, esp
:00446F40 83EC10                  sub esp, 00000010
:00446F43 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00446F46 E86508FCFF              call 004077B0
:00446F4B C745F400000000          mov [ebp-0C], 00000000
:00446F52 C645FCFF                mov [ebp-04], FF
:00446F56 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00446F58 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00446F5D 68FF000000              push 000000FF
:00446F62 6A00                    push 00000000
:00446F64 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446F67 E8BF35FEFF              call 0042A52B
:00446F6C 50                      push eax
:00446F6D 8D4508                  lea eax, dword ptr [ebp+08]
:00446F70 50                      push eax
:00446F71 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446F74 E8C6280000              call 0044983F
:00446F79 6A01                    push 00000001
:00446F7B B9A8034B00              mov ecx, 004B03A8
:00446F80 E8A2BFFFFF              call 00442F27
:00446F85 B9A8034B00              mov ecx, 004B03A8
:00446F8A E8EFD7FFFF              call 0044477E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446FFF(U), :00447020(U)
|
:00446F8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446F92 81E1FF000000            and ecx, 000000FF
:00446F98 81F9FF000000            cmp ecx, 000000FF
:00446F9E 0F8581000000            jne 00447025
:00446FA4 B9A8034B00              mov ecx, 004B03A8
:00446FA9 E86CDDFFFF              call 00444D1A
:00446FAE 50                      push eax
:00446FAF 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00446FB2 E8D987FEFF              call 0042F790
:00446FB7 B9A8034B00              mov ecx, 004B03A8
:00446FBC E831E1FFFF              call 004450F2
:00446FC1 8B55F8                  mov edx, dword ptr [ebp-08]
:00446FC4 81E2FF000000            and edx, 000000FF
:00446FCA 81FAFF000000            cmp edx, 000000FF
:00446FD0 7506                    jne 00446FD8
:00446FD2 C645FC00                mov [ebp-04], 00
:00446FD6 EB4D                    jmp 00447025

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446FD0(C)
|
:00446FD8 8D45F8                  lea eax, dword ptr [ebp-08]
:00446FDB 50                      push eax
:00446FDC E830090000              call 00447911
:00446FE1 83C404                  add esp, 00000004
:00446FE4 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00446FE9 3DFF000000              cmp eax, 000000FF
:00446FEE 7411                    je 00447001

* Possible StringData Ref from Data Obj ->"OʽdC"
                                  |
:00446FF0 6804914700              push 00479104
:00446FF5 6A00                    push 00000000
:00446FF7 E8701BFEFF              call 00428B6C
:00446FFC 83C408                  add esp, 00000008
:00446FFF EB8E                    jmp 00446F8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446FEE(C)
|
:00447001 668B4DF8                mov cx, word ptr [ebp-08]
:00447005 51                      push ecx
:00447006 E889000000              call 00447094
:0044700B 83C404                  add esp, 00000004
:0044700E 33D2                    xor edx, edx
:00447010 8A10                    mov dl, byte ptr [eax]
:00447012 81FAFF000000            cmp edx, 000000FF
:00447018 7406                    je 00447020
:0044701A C645FC01                mov [ebp-04], 01
:0044701E EB05                    jmp 00447025

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447018(C)
|
:00447020 E96AFFFFFF              jmp 00446F8F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446F9E(C), :00446FD6(U), :0044701E(U)
|
:00447025 8A45FC                  mov al, byte ptr [ebp-04]
:00447028 8845F0                  mov byte ptr [ebp-10], al
:0044702B 807DF001                cmp byte ptr [ebp-10], 01
:0044702F 7402                    je 00447033
:00447031 EB44                    jmp 00447077

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044702F(C)
|
:00447033 6A00                    push 00000000
:00447035 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447038 E89386FEFF              call 0042F6D0
:0044703D 50                      push eax
:0044703E E8CD55FEFF              call 0042C610
:00447043 83C408                  add esp, 00000008
:00447046 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447049 51                      push ecx
:0044704A 668B55F8                mov dx, word ptr [ebp-08]
:0044704E 52                      push edx
:0044704F 668B4508                mov ax, word ptr [ebp+08]
:00447053 50                      push eax
:00447054 E870000000              call 004470C9
:00447059 83C40C                  add esp, 0000000C
:0044705C B9180A4B00              mov ecx, 004B0A18
:00447061 E8D8D60000              call 0045473E
:00447066 B9A8034B00              mov ecx, 004B03A8
:0044706B E882E0FFFF              call 004450F2
:00447070 C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447031(U)
|
:00447077 6A00                    push 00000000
:00447079 B9A8034B00              mov ecx, 004B03A8
:0044707E E8A4BEFFFF              call 00442F27
:00447083 B9A8034B00              mov ecx, 004B03A8
:00447088 E8F1D6FFFF              call 0044477E
:0044708D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00447090 8BE5                    mov esp, ebp
:00447092 5D                      pop ebp
:00447093 C3                      ret



* Referenced by a CALL at Address:
|:00447006   
|
:00447094 55                      push ebp
:00447095 8BEC                    mov ebp, esp
:00447097 6800960000              push 00009600
:0044709C B930DF4A00              mov ecx, 004ADF30
:004470A1 E8F8C4FCFF              call 0041359E
:004470A6 8B4D09                  mov ecx, dword ptr [ebp+09]
:004470A9 81E1FF000000            and ecx, 000000FF
:004470AF 33D2                    xor edx, edx
:004470B1 8A15800A4B00            mov dl, byte ptr [004B0A80]
:004470B7 0FAFCA                  imul ecx, edx
:004470BA 8B5508                  mov edx, dword ptr [ebp+08]
:004470BD 81E2FF000000            and edx, 000000FF
:004470C3 03CA                    add ecx, edx
:004470C5 03C1                    add eax, ecx
:004470C7 5D                      pop ebp
:004470C8 C3                      ret



* Referenced by a CALL at Address:
|:00447054   
|
:004470C9 55                      push ebp
:004470CA 8BEC                    mov ebp, esp
:004470CC 83EC10                  sub esp, 00000010
:004470CF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004470D1 68FF000000              push 000000FF
:004470D6 8D450C                  lea eax, dword ptr [ebp+0C]
:004470D9 50                      push eax
:004470DA 8D4D08                  lea ecx, dword ptr [ebp+08]
:004470DD 51                      push ecx
:004470DE 8B4D10                  mov ecx, dword ptr [ebp+10]
:004470E1 E8BA220000              call 004493A0
:004470E6 8945F4                  mov dword ptr [ebp-0C], eax
:004470E9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004470EC E8BF06FCFF              call 004077B0
:004470F1 8D5508                  lea edx, dword ptr [ebp+08]
:004470F4 52                      push edx
:004470F5 8B4D10                  mov ecx, dword ptr [ebp+10]
:004470F8 E8C32AFFFF              call 00439BC0
:004470FD C745F800000000          mov [ebp-08], 00000000
:00447104 EB09                    jmp 0044710F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447162(U), :00447188(U)
|
:00447106 8B45F8                  mov eax, dword ptr [ebp-08]
:00447109 83C001                  add eax, 00000001
:0044710C 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447104(U)
|
:0044710F 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:00447112 51                      push ecx
:00447113 8B4D10                  mov ecx, dword ptr [ebp+10]
:00447116 E88522FEFF              call 004293A0
:0044711B 50                      push eax
:0044711C E87F8BFEFF              call 0042FCA0
:00447121 83C408                  add esp, 00000008
:00447124 85C0                    test eax, eax
:00447126 7565                    jne 0044718D
:00447128 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044712B 0355F8                  add edx, dword ptr [ebp-08]
:0044712E 8A02                    mov al, byte ptr [edx]
:00447130 8845FC                  mov byte ptr [ebp-04], al
:00447133 8A4DFC                  mov cl, byte ptr [ebp-04]
:00447136 51                      push ecx
:00447137 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044713A E86122FEFF              call 004293A0
:0044713F 50                      push eax
:00447140 E8C3080000              call 00447A08
:00447145 83C408                  add esp, 00000008
:00447148 50                      push eax
:00447149 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044714C E83F86FEFF              call 0042F790
:00447151 8B55F0                  mov edx, dword ptr [ebp-10]
:00447154 81E2FF000000            and edx, 000000FF
:0044715A 81FAFF000000            cmp edx, 000000FF
:00447160 7502                    jne 00447164
:00447162 EBA2                    jmp 00447106

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447160(C)
|
:00447164 8A45FC                  mov al, byte ptr [ebp-04]
:00447167 50                      push eax
:00447168 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044716B E89467FEFF              call 0042D904
:00447170 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00447173 51                      push ecx
:00447174 8B4D10                  mov ecx, dword ptr [ebp+10]
:00447177 E8442AFFFF              call 00439BC0
:0044717C 8A55FC                  mov dl, byte ptr [ebp-04]
:0044717F 52                      push edx
:00447180 8B4D10                  mov ecx, dword ptr [ebp+10]
:00447183 E8582AFFFF              call 00439BE0
:00447188 E979FFFFFF              jmp 00447106

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447126(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044718D 6A02                    push 00000002
:0044718F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00447192 E88988FEFF              call 0042FA20
:00447197 68C0000000              push 000000C0
:0044719C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044719F E87582FEFF              call 0042F419
:004471A4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004471A7 E83B53FEFF              call 0042C4E7
:004471AC 8BE5                    mov esp, ebp
:004471AE 5D                      pop ebp
:004471AF C3                      ret



* Referenced by a CALL at Address:
|:00446B61   
|
:004471B0 55                      push ebp
:004471B1 8BEC                    mov ebp, esp
:004471B3 83EC08                  sub esp, 00000008
:004471B6 8B450C                  mov eax, dword ptr [ebp+0C]
:004471B9 25FF000000              and eax, 000000FF
:004471BE 83F81E                  cmp eax, 0000001E
:004471C1 7E02                    jle 004471C5
:004471C3 EB34                    jmp 004471F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004471C1(C)
|
:004471C5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004471C8 81E1FF000000            and ecx, 000000FF
:004471CE 6BC924                  imul ecx, 00000024
:004471D1 81C108F54A00            add ecx, 004AF508
:004471D7 894DF8                  mov dword ptr [ebp-08], ecx
:004471DA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004471DD E8EE84FEFF              call 0042F6D0
:004471E2 6BC070                  imul eax, 00000070
:004471E5 0598224900              add eax, 00492298
:004471EA 8945FC                  mov dword ptr [ebp-04], eax
:004471ED 8B55FC                  mov edx, dword ptr [ebp-04]
:004471F0 52                      push edx
:004471F1 E86FBB0000              call 00452D65
:004471F6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004471C3(U)
|
:004471F9 8BE5                    mov esp, ebp
:004471FB 5D                      pop ebp
:004471FC C3                      ret



* Referenced by a CALL at Address:
|:00446B87   
|
:004471FD 55                      push ebp
:004471FE 8BEC                    mov ebp, esp
:00447200 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447203 81E1FF000000            and ecx, 000000FF
:00447209 6BC924                  imul ecx, 00000024
:0044720C 81C108F54A00            add ecx, 004AF508
:00447212 E84957FEFF              call 0042C960
:00447217 8A450C                  mov al, byte ptr [ebp+0C]
:0044721A 50                      push eax
:0044721B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044721E 81E1FF000000            and ecx, 000000FF
:00447224 6BC924                  imul ecx, 00000024
:00447227 81C108F54A00            add ecx, 004AF508
:0044722D E8B04EFEFF              call 0042C0E2
:00447232 5D                      pop ebp
:00447233 C3                      ret



* Referenced by a CALL at Address:
|:00446AAE   
|
:00447234 55                      push ebp
:00447235 8BEC                    mov ebp, esp
:00447237 83EC08                  sub esp, 00000008
:0044723A C645F800                mov [ebp-08], 00
:0044723E 668B4508                mov ax, word ptr [ebp+08]
:00447242 50                      push eax
:00447243 E8FF010000              call 00447447
:00447248 83C404                  add esp, 00000004
:0044724B 85C0                    test eax, eax
:0044724D 7425                    je 00447274
:0044724F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447252 81E1FF000000            and ecx, 000000FF
:00447258 C68180044B0002          mov byte ptr [ecx+004B0480], 02
:0044725F 8A55F8                  mov dl, byte ptr [ebp-08]
:00447262 80C201                  add dl, 01
:00447265 8855F8                  mov byte ptr [ebp-08], dl
:00447268 6A01                    push 00000001
:0044726A B990084B00              mov ecx, 004B0890
:0044726F E8CCBB0000              call 00452E40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044724D(C)
|
:00447274 668B4508                mov ax, word ptr [ebp+08]
:00447278 50                      push eax
:00447279 E803010000              call 00447381
:0044727E 83C404                  add esp, 00000004
:00447281 85C0                    test eax, eax
:00447283 7425                    je 004472AA
:00447285 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447288 81E1FF000000            and ecx, 000000FF
:0044728E C68180044B0000          mov byte ptr [ecx+004B0480], 00
:00447295 8A55F8                  mov dl, byte ptr [ebp-08]
:00447298 80C201                  add dl, 01
:0044729B 8855F8                  mov byte ptr [ebp-08], dl
:0044729E 6A01                    push 00000001
:004472A0 B990084B00              mov ecx, 004B0890
:004472A5 E856030000              call 00447600

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447283(C)
|
:004472AA 668B4508                mov ax, word ptr [ebp+08]
:004472AE 50                      push eax
:004472AF E866020000              call 0044751A
:004472B4 83C404                  add esp, 00000004
:004472B7 85C0                    test eax, eax
:004472B9 7425                    je 004472E0
:004472BB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004472BE 81E1FF000000            and ecx, 000000FF
:004472C4 C68180044B0001          mov byte ptr [ecx+004B0480], 01
:004472CB 8A55F8                  mov dl, byte ptr [ebp-08]
:004472CE 80C201                  add dl, 01
:004472D1 8855F8                  mov byte ptr [ebp-08], dl
:004472D4 6A01                    push 00000001
:004472D6 B990084B00              mov ecx, 004B0890
:004472DB E840030000              call 00447620

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004472B9(C)
|
:004472E0 668B4508                mov ax, word ptr [ebp+08]
:004472E4 50                      push eax
:004472E5 E85A020000              call 00447544
:004472EA 83C404                  add esp, 00000004
:004472ED 85C0                    test eax, eax
:004472EF 7425                    je 00447316
:004472F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004472F4 81E1FF000000            and ecx, 000000FF
:004472FA C68180044B0003          mov byte ptr [ecx+004B0480], 03
:00447301 8A55F8                  mov dl, byte ptr [ebp-08]
:00447304 80C201                  add dl, 01
:00447307 8855F8                  mov byte ptr [ebp-08], dl
:0044730A 6A01                    push 00000001
:0044730C B990084B00              mov ecx, 004B0890
:00447311 E82A030000              call 00447640

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004472EF(C)
|
:00447316 8B45F8                  mov eax, dword ptr [ebp-08]
:00447319 25FF000000              and eax, 000000FF
:0044731E C68080044B00FF          mov byte ptr [eax+004B0480], FF
:00447325 C745FC00000000          mov [ebp-04], 00000000
:0044732C EB09                    jmp 00447337

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447365(U)
|
:0044732E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00447331 83C101                  add ecx, 00000001
:00447334 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044732C(U)
|
:00447337 8B55FC                  mov edx, dword ptr [ebp-04]
:0044733A 33C0                    xor eax, eax
:0044733C 8A8280044B00            mov al, byte ptr [edx+004B0480]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00447342 3DFF000000              cmp eax, 000000FF
:00447347 741E                    je 00447367
:00447349 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044734C 33D2                    xor edx, edx
:0044734E 8A9180044B00            mov dl, byte ptr [ecx+004B0480]
:00447354 8B45FC                  mov eax, dword ptr [ebp-04]
:00447357 8B0C95B0904700          mov ecx, dword ptr [4*edx+004790B0]
:0044735E 890C8588044B00          mov dword ptr [4*eax+004B0488], ecx
:00447365 EBC7                    jmp 0044732E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447347(C)
|
:00447367 8B55FC                  mov edx, dword ptr [ebp-04]
:0044736A C7049588044B0000000000  mov dword ptr [4*edx+004B0488], 00000000
:00447375 8B45F8                  mov eax, dword ptr [ebp-08]
:00447378 25FF000000              and eax, 000000FF
:0044737D 8BE5                    mov esp, ebp
:0044737F 5D                      pop ebp
:00447380 C3                      ret



* Referenced by a CALL at Address:
|:00447279   
|
:00447381 55                      push ebp
:00447382 8BEC                    mov ebp, esp
:00447384 51                      push ecx
:00447385 C745FC00000000          mov [ebp-04], 00000000
:0044738C 668B4508                mov ax, word ptr [ebp+08]
:00447390 50                      push eax
:00447391 E815000000              call 004473AB
:00447396 83C404                  add esp, 00000004
:00447399 85C0                    test eax, eax
:0044739B 7607                    jbe 004473A4
:0044739D C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044739B(C)
|
:004473A4 8B45FC                  mov eax, dword ptr [ebp-04]
:004473A7 8BE5                    mov esp, ebp
:004473A9 5D                      pop ebp
:004473AA C3                      ret



* Referenced by a CALL at Address:
|:00447391   
|
:004473AB 55                      push ebp
:004473AC 8BEC                    mov ebp, esp
:004473AE 83EC08                  sub esp, 00000008
:004473B1 C745FC00000000          mov [ebp-04], 00000000
:004473B8 8D4508                  lea eax, dword ptr [ebp+08]
:004473BB 50                      push eax
:004473BC E8BE050000              call 0044797F
:004473C1 83C404                  add esp, 00000004
:004473C4 25FF000000              and eax, 000000FF
:004473C9 83F81F                  cmp eax, 0000001F
:004473CC 7404                    je 004473D2
:004473CE 33C0                    xor eax, eax
:004473D0 EB71                    jmp 00447443

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004473CC(C)
|
:004473D2 C745F800000000          mov [ebp-08], 00000000
:004473D9 EB09                    jmp 004473E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044743E(U)
|
:004473DB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004473DE 83C101                  add ecx, 00000001
:004473E1 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004473D9(U)
|
:004473E4 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:004473EB 7353                    jnb 00447440
:004473ED 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004473F0 6BC970                  imul ecx, 00000070
:004473F3 81C198224900            add ecx, 00492298
:004473F9 E8F2D4FBFF              call 004048F0
:004473FE 25FF000000              and eax, 000000FF
:00447403 85C0                    test eax, eax
:00447405 7537                    jne 0044743E
:00447407 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044740A 6BC970                  imul ecx, 00000070
:0044740D 81C198224900            add ecx, 00492298
:00447413 E878D4FBFF              call 00404890
:00447418 85C0                    test eax, eax
:0044741A 7622                    jbe 0044743E
:0044741C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044741F 6BD270                  imul edx, 00000070
:00447422 81C298224900            add edx, 00492298
:00447428 52                      push edx
:00447429 E824FAFFFF              call 00446E52
:0044742E 83C404                  add esp, 00000004
:00447431 85C0                    test eax, eax
:00447433 7509                    jne 0044743E
:00447435 8B45FC                  mov eax, dword ptr [ebp-04]
:00447438 83C001                  add eax, 00000001
:0044743B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447405(C), :0044741A(C), :00447433(C)
|
:0044743E EB9B                    jmp 004473DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004473EB(C)
|
:00447440 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004473D0(U)
|
:00447443 8BE5                    mov esp, ebp
:00447445 5D                      pop ebp
:00447446 C3                      ret



* Referenced by a CALL at Address:
|:00447243   
|
:00447447 55                      push ebp
:00447448 8BEC                    mov ebp, esp
:0044744A 51                      push ecx
:0044744B C745FC00000000          mov [ebp-04], 00000000
:00447452 668B4508                mov ax, word ptr [ebp+08]
:00447456 50                      push eax
:00447457 E815000000              call 00447471
:0044745C 83C404                  add esp, 00000004
:0044745F 85C0                    test eax, eax
:00447461 7607                    jbe 0044746A
:00447463 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447461(C)
|
:0044746A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044746D 8BE5                    mov esp, ebp
:0044746F 5D                      pop ebp
:00447470 C3                      ret



* Referenced by a CALL at Addresses:
|:00447457   , :0044752A   
|
:00447471 55                      push ebp
:00447472 8BEC                    mov ebp, esp
:00447474 83EC08                  sub esp, 00000008
:00447477 C745F800000000          mov [ebp-08], 00000000
:0044747E 8D4508                  lea eax, dword ptr [ebp+08]
:00447481 50                      push eax
:00447482 E8F8040000              call 0044797F
:00447487 83C404                  add esp, 00000004
:0044748A 25FF000000              and eax, 000000FF
:0044748F 83F81F                  cmp eax, 0000001F
:00447492 7404                    je 00447498
:00447494 33C0                    xor eax, eax
:00447496 EB7E                    jmp 00447516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447492(C)
|
:00447498 C745FC00000000          mov [ebp-04], 00000000
:0044749F EB09                    jmp 004474AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447511(U)
|
:004474A1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004474A4 83C101                  add ecx, 00000001
:004474A7 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044749F(U)
|
:004474AA 837DFC1E                cmp dword ptr [ebp-04], 0000001E
:004474AE 7363                    jnb 00447513
:004474B0 8D5508                  lea edx, dword ptr [ebp+08]
:004474B3 52                      push edx
:004474B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004474B7 6BC924                  imul ecx, 00000024
:004474BA 81C108F54A00            add ecx, 004AF508
:004474C0 E8DB1EFEFF              call 004293A0
:004474C5 50                      push eax
:004474C6 E8D587FEFF              call 0042FCA0
:004474CB 83C408                  add esp, 00000008
:004474CE 85C0                    test eax, eax
:004474D0 743F                    je 00447511
:004474D2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004474D5 6BC924                  imul ecx, 00000024
:004474D8 81C108F54A00            add ecx, 004AF508
:004474DE E8ED83FEFF              call 0042F8D0
:004474E3 25FF000000              and eax, 000000FF
:004474E8 83F802                  cmp eax, 00000002
:004474EB 7524                    jne 00447511
:004474ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004474F0 6BC924                  imul ecx, 00000024
:004474F3 81C108F54A00            add ecx, 004AF508
:004474F9 E8F283FEFF              call 0042F8F0
:004474FE 25FF000000              and eax, 000000FF
:00447503 83F807                  cmp eax, 00000007
:00447506 7509                    jne 00447511
:00447508 8B45F8                  mov eax, dword ptr [ebp-08]
:0044750B 83C001                  add eax, 00000001
:0044750E 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004474D0(C), :004474EB(C), :00447506(C)
|
:00447511 EB8E                    jmp 004474A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004474AE(C)
|
:00447513 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447496(U)
|
:00447516 8BE5                    mov esp, ebp
:00447518 5D                      pop ebp
:00447519 C3                      ret



* Referenced by a CALL at Address:
|:004472AF   
|
:0044751A 55                      push ebp
:0044751B 8BEC                    mov ebp, esp
:0044751D 51                      push ecx
:0044751E C745FC00000000          mov [ebp-04], 00000000
:00447525 668B4508                mov ax, word ptr [ebp+08]
:00447529 50                      push eax
:0044752A E842FFFFFF              call 00447471
:0044752F 83C404                  add esp, 00000004
:00447532 85C0                    test eax, eax
:00447534 7607                    jbe 0044753D
:00447536 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447534(C)
|
:0044753D 8B45FC                  mov eax, dword ptr [ebp-04]
:00447540 8BE5                    mov esp, ebp
:00447542 5D                      pop ebp
:00447543 C3                      ret



* Referenced by a CALL at Address:
|:004472E5   
|
:00447544 55                      push ebp
:00447545 8BEC                    mov ebp, esp
:00447547 83EC0C                  sub esp, 0000000C
:0044754A C745FC00000000          mov [ebp-04], 00000000
:00447551 C745F400000000          mov [ebp-0C], 00000000
:00447558 8D4508                  lea eax, dword ptr [ebp+08]
:0044755B 50                      push eax
:0044755C E81E040000              call 0044797F
:00447561 83C404                  add esp, 00000004
:00447564 25FF000000              and eax, 000000FF
:00447569 83F81F                  cmp eax, 0000001F
:0044756C 7404                    je 00447572
:0044756E 33C0                    xor eax, eax
:00447570 EB7C                    jmp 004475EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044756C(C)
|
:00447572 C745F801000000          mov [ebp-08], 00000001
:00447579 EB09                    jmp 00447584

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004475E9(U)
|
:0044757B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044757E 83C101                  add ecx, 00000001
:00447581 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447579(U)
|
:00447584 837DF81E                cmp dword ptr [ebp-08], 0000001E
:00447588 7361                    jnb 004475EB
:0044758A 8D5508                  lea edx, dword ptr [ebp+08]
:0044758D 52                      push edx
:0044758E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447591 6BC924                  imul ecx, 00000024
:00447594 81C108F54A00            add ecx, 004AF508
:0044759A E8011EFEFF              call 004293A0
:0044759F 50                      push eax
:004475A0 E8FB86FEFF              call 0042FCA0
:004475A5 83C408                  add esp, 00000008
:004475A8 85C0                    test eax, eax
:004475AA 743D                    je 004475E9
:004475AC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004475AF 6BC924                  imul ecx, 00000024
:004475B2 81C108F54A00            add ecx, 004AF508
:004475B8 E81383FEFF              call 0042F8D0
:004475BD 25FF000000              and eax, 000000FF
:004475C2 83F802                  cmp eax, 00000002
:004475C5 7522                    jne 004475E9
:004475C7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004475CA 6BC924                  imul ecx, 00000024
:004475CD 81C108F54A00            add ecx, 004AF508
:004475D3 E81883FEFF              call 0042F8F0
:004475D8 25FF000000              and eax, 000000FF
:004475DD 83F807                  cmp eax, 00000007
:004475E0 7507                    jne 004475E9
:004475E2 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004475AA(C), :004475C5(C), :004475E0(C)
|
:004475E9 EB90                    jmp 0044757B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447588(C)
|
:004475EB 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447570(U)
|
:004475EE 8BE5                    mov esp, ebp
:004475F0 5D                      pop ebp
:004475F1 C3                      ret


:004475F2 CC                      int 03
:004475F3 CC                      int 03
:004475F4 CC                      int 03
:004475F5 CC                      int 03
:004475F6 CC                      int 03
:004475F7 CC                      int 03
:004475F8 CC                      int 03
:004475F9 CC                      int 03
:004475FA CC                      int 03
:004475FB CC                      int 03
:004475FC CC                      int 03
:004475FD CC                      int 03
:004475FE CC                      int 03
:004475FF CC                      int 03

* Referenced by a CALL at Addresses:
|:004312CE   , :004472A5   , :0045311B   , :00453FAB   
|
:00447600 55                      push ebp
:00447601 8BEC                    mov ebp, esp
:00447603 51                      push ecx
:00447604 894DFC                  mov dword ptr [ebp-04], ecx
:00447607 8B45FC                  mov eax, dword ptr [ebp-04]
:0044760A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044760D 894818                  mov dword ptr [eax+18], ecx
:00447610 8BE5                    mov esp, ebp
:00447612 5D                      pop ebp
:00447613 C20400                  ret 0004


:00447616 CC                      int 03
:00447617 CC                      int 03
:00447618 CC                      int 03
:00447619 CC                      int 03
:0044761A CC                      int 03
:0044761B CC                      int 03
:0044761C CC                      int 03
:0044761D CC                      int 03
:0044761E CC                      int 03
:0044761F CC                      int 03

* Referenced by a CALL at Addresses:
|:004312FD   , :004472DB   
|
:00447620 55                      push ebp
:00447621 8BEC                    mov ebp, esp
:00447623 51                      push ecx
:00447624 894DFC                  mov dword ptr [ebp-04], ecx
:00447627 8B45FC                  mov eax, dword ptr [ebp-04]
:0044762A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044762D 89481C                  mov dword ptr [eax+1C], ecx
:00447630 8BE5                    mov esp, ebp
:00447632 5D                      pop ebp
:00447633 C20400                  ret 0004


:00447636 CC                      int 03
:00447637 CC                      int 03
:00447638 CC                      int 03
:00447639 CC                      int 03
:0044763A CC                      int 03
:0044763B CC                      int 03
:0044763C CC                      int 03
:0044763D CC                      int 03
:0044763E CC                      int 03
:0044763F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042C145   , :004313E7   , :00438D90   , :00438DB4   , :00447311   
|
:00447640 55                      push ebp
:00447641 8BEC                    mov ebp, esp
:00447643 51                      push ecx
:00447644 894DFC                  mov dword ptr [ebp-04], ecx
:00447647 8B45FC                  mov eax, dword ptr [ebp-04]
:0044764A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044764D 894820                  mov dword ptr [eax+20], ecx
:00447650 8BE5                    mov esp, ebp
:00447652 5D                      pop ebp
:00447653 C20400                  ret 0004


:00447656 CC                      int 03
:00447657 CC                      int 03
:00447658 CC                      int 03
:00447659 CC                      int 03
:0044765A CC                      int 03
:0044765B CC                      int 03
:0044765C CC                      int 03
:0044765D CC                      int 03
:0044765E CC                      int 03
:0044765F CC                      int 03
:00447660 55                      push ebp
:00447661 8BEC                    mov ebp, esp
:00447663 E802000000              call 0044766A
:00447668 5D                      pop ebp
:00447669 C3                      ret



* Referenced by a CALL at Address:
|:00447663   
|
:0044766A 55                      push ebp
:0044766B 8BEC                    mov ebp, esp
:0044766D B9A0044B00              mov ecx, 004B04A0
:00447672 E83901FCFF              call 004077B0
:00447677 5D                      pop ebp
:00447678 C3                      ret


:00447679 55                      push ebp
:0044767A 8BEC                    mov ebp, esp
:0044767C E802000000              call 00447683
:00447681 5D                      pop ebp
:00447682 C3                      ret



* Referenced by a CALL at Address:
|:0044767C   
|
:00447683 55                      push ebp
:00447684 8BEC                    mov ebp, esp
:00447686 B9BC044B00              mov ecx, 004B04BC
:0044768B E82001FCFF              call 004077B0
:00447690 5D                      pop ebp
:00447691 C3                      ret



* Referenced by a CALL at Address:
|:00446384   
|
:00447692 55                      push ebp
:00447693 8BEC                    mov ebp, esp
:00447695 83EC08                  sub esp, 00000008
:00447698 8B4508                  mov eax, dword ptr [ebp+08]
:0044769B 25FF000000              and eax, 000000FF
:004476A0 8945F8                  mov dword ptr [ebp-08], eax
:004476A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004476A6 83E908                  sub ecx, 00000008
:004476A9 894DF8                  mov dword ptr [ebp-08], ecx
:004476AC 837DF81C                cmp dword ptr [ebp-08], 0000001C
:004476B0 771B                    ja 004476CD
:004476B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004476B5 33D2                    xor edx, edx
:004476B7 8A90F7764400            mov dl, byte ptr [eax+004476F7]
:004476BD FF2495DB764400          jmp dword ptr [4*edx+004476DB]
:004476C4 C745FC01000000          mov [ebp-04], 00000001
:004476CB EB07                    jmp 004476D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004476B0(C)
|
:004476CD C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004476CB(U)
|
:004476D4 8B45FC                  mov eax, dword ptr [ebp-04]
:004476D7 8BE5                    mov esp, ebp
:004476D9 5D                      pop ebp
:004476DA C3                      ret



:004476DB C4764400                DWORD 004476C4
:004476DF C4764400                DWORD 004476C4
:004476E3 C4764400                DWORD 004476C4
:004476E7 C4764400                DWORD 004476C4
:004476EB C4764400                DWORD 004476C4
:004476EF C4764400                DWORD 004476C4
:004476F3 CD764400                DWORD 004476CD


:004476F7 0000                    add byte ptr [eax], al
:004476F9 06                      push es
:004476FA 0101                    add dword ptr [ecx], eax
:004476FC 06                      push es
:004476FD 06                      push es
:004476FE 06                      push es
:004476FF 06                      push es
:00447700 06                      push es
:00447701 06                      push es
:00447702 06                      push es
:00447703 06                      push es
:00447704 06                      push es
:00447705 06                      push es
:00447706 06                      push es
:00447707 0206                    add al, byte ptr [esi]
:00447709 0303                    add eax, dword ptr [ebx]
:0044770B 0306                    add eax, dword ptr [esi]
:0044770D 0406                    add al, 06
:0044770F 06                      push es
:00447710 06                      push es
:00447711 06                      push es
:00447712 05                      BYTE 05h
:00447713 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:00446360   , :00447799   
|
:00447714 55                      push ebp
:00447715 8BEC                    mov ebp, esp
:00447717 83EC08                  sub esp, 00000008
:0044771A 8B4508                  mov eax, dword ptr [ebp+08]
:0044771D 25FF000000              and eax, 000000FF
:00447722 83F811                  cmp eax, 00000011
:00447725 744E                    je 00447775
:00447727 8B4D08                  mov ecx, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004476E4(C)
|
:0044772A 81E1FF000000            and ecx, 000000FF
:00447730 83F912                  cmp ecx, 00000012
:00447733 7440                    je 00447775
:00447735 8B5508                  mov edx, dword ptr [ebp+08]
:00447738 81E2FF000000            and edx, 000000FF
:0044773E 83FA10                  cmp edx, 00000010
:00447741 7432                    je 00447775
:00447743 8B4508                  mov eax, dword ptr [ebp+08]
:00447746 25FF000000              and eax, 000000FF
:0044774B 83F80F                  cmp eax, 0000000F
:0044774E 7425                    je 00447775
:00447750 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447753 81E1FF000000            and ecx, 000000FF
:00447759 83F919                  cmp ecx, 00000019
:0044775C 7417                    je 00447775
:0044775E 8B5508                  mov edx, dword ptr [ebp+08]
:00447761 81E2FF000000            and edx, 000000FF
:00447767 83FA1F                  cmp edx, 0000001F
:0044776A 7409                    je 00447775
:0044776C C745F800000000          mov [ebp-08], 00000000
:00447773 EB07                    jmp 0044777C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447725(C), :00447733(C), :00447741(C), :0044774E(C), :0044775C(C)
|:0044776A(C)
|
:00447775 C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447773(U)
|
:0044777C 8B45F8                  mov eax, dword ptr [ebp-08]
:0044777F 8945FC                  mov dword ptr [ebp-04], eax
:00447782 8B45FC                  mov eax, dword ptr [ebp-04]
:00447785 8BE5                    mov esp, ebp
:00447787 5D                      pop ebp
:00447788 C3                      ret



* Referenced by a CALL at Addresses:
|:0042B294   , :00448A96   , :00455DFF   
|
:00447789 55                      push ebp
:0044778A 8BEC                    mov ebp, esp
:0044778C 8B4508                  mov eax, dword ptr [ebp+08]
:0044778F 50                      push eax
:00447790 E8EA010000              call 0044797F
:00447795 83C404                  add esp, 00000004
:00447798 50                      push eax
:00447799 E876FFFFFF              call 00447714
:0044779E 83C404                  add esp, 00000004
:004477A1 5D                      pop ebp
:004477A2 C3                      ret



* Referenced by a CALL at Addresses:
|:004494C1   , :00449B2C   , :00449CB2   
|
:004477A3 55                      push ebp
:004477A4 8BEC                    mov ebp, esp
:004477A6 83EC0C                  sub esp, 0000000C
:004477A9 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004477AC E8FFFFFBFF              call 004077B0
:004477B1 C645F800                mov [ebp-08], 00
:004477B5 EB08                    jmp 004477BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447838(U)
|
:004477B7 8A45F8                  mov al, byte ptr [ebp-08]
:004477BA 0401                    add al, 01
:004477BC 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004477B5(U)
|
:004477BF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004477C2 81E1FF000000            and ecx, 000000FF
:004477C8 83F904                  cmp ecx, 00000004
:004477CB 7D70                    jge 0044783D
:004477CD 8A55F8                  mov dl, byte ptr [ebp-08]
:004477D0 52                      push edx
:004477D1 8B4508                  mov eax, dword ptr [ebp+08]
:004477D4 50                      push eax
:004477D5 E82E020000              call 00447A08
:004477DA 83C408                  add esp, 00000008
:004477DD 50                      push eax
:004477DE 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004477E1 E8AA7FFEFF              call 0042F790
:004477E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004477E9 81E1FF000000            and ecx, 000000FF
:004477EF 81F9FF000000            cmp ecx, 000000FF
:004477F5 7441                    je 00447838
:004477F7 8D55FC                  lea edx, dword ptr [ebp-04]
:004477FA 52                      push edx
:004477FB E811010000              call 00447911
:00447800 83C404                  add esp, 00000004
:00447803 8845F4                  mov byte ptr [ebp-0C], al
:00447806 8B45F4                  mov eax, dword ptr [ebp-0C]
:00447809 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044780E 3DFF000000              cmp eax, 000000FF
:00447813 7423                    je 00447838
:00447815 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00447818 81E1FF000000            and ecx, 000000FF
:0044781E 6BC924                  imul ecx, 00000024
:00447821 81C108F54A00            add ecx, 004AF508
:00447827 E8A47AFCFF              call 0040F2D0
:0044782C 3B450C                  cmp eax, dword ptr [ebp+0C]
:0044782F 7407                    je 00447838
:00447831 B801000000              mov eax, 00000001
:00447836 EB07                    jmp 0044783F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004477F5(C), :00447813(C), :0044782F(C)
|
:00447838 E97AFFFFFF              jmp 004477B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004477CB(C)
|
:0044783D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447836(U)
|
:0044783F 8BE5                    mov esp, ebp
:00447841 5D                      pop ebp
:00447842 C3                      ret



* Referenced by a CALL at Addresses:
|:00432C57   , :004403E6   , :004404AC   , :004406C7   , :00449F46   
|:0044D7AF   , :0044DBDD   
|
:00447843 55                      push ebp
:00447844 8BEC                    mov ebp, esp
:00447846 83EC10                  sub esp, 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00447849 6A10                    push 00000010
:0044784B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044784E 81E1FF000000            and ecx, 000000FF
:00447854 6BC924                  imul ecx, 00000024
:00447857 81C108F54A00            add ecx, 004AF508
:0044785D E88E82FEFF              call 0042FAF0
:00447862 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00447865 6A10                    push 00000010
:00447867 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044786A 81E1FF000000            and ecx, 000000FF
:00447870 6BC924                  imul ecx, 00000024
:00447873 81C108F54A00            add ecx, 004AF508
:00447879 E87282FEFF              call 0042FAF0
:0044787E 8945F0                  mov dword ptr [ebp-10], eax
:00447881 6A00                    push 00000000
:00447883 8A450C                  mov al, byte ptr [ebp+0C]
:00447886 50                      push eax
:00447887 8A4D08                  mov cl, byte ptr [ebp+08]
:0044788A 51                      push ecx
:0044788B B99C034B00              mov ecx, 004B039C
:00447890 E8B667FFFF              call 0043E04B
:00447895 8945F4                  mov dword ptr [ebp-0C], eax
:00447898 6A00                    push 00000000
:0044789A 8A5508                  mov dl, byte ptr [ebp+08]
:0044789D 52                      push edx
:0044789E 8A450C                  mov al, byte ptr [ebp+0C]
:004478A1 50                      push eax
:004478A2 B99C034B00              mov ecx, 004B039C
:004478A7 E89F67FFFF              call 0043E04B
:004478AC 8945FC                  mov dword ptr [ebp-04], eax
:004478AF 837DF401                cmp dword ptr [ebp-0C], 00000001
:004478B3 750E                    jne 004478C3
:004478B5 C745F801000000          mov [ebp-08], 00000001
:004478BC C745F000000000          mov [ebp-10], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004478B3(C)
|
:004478C3 837DFC01                cmp dword ptr [ebp-04], 00000001
:004478C7 750E                    jne 004478D7
:004478C9 C745F800000000          mov [ebp-08], 00000000
:004478D0 C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004478C7(C)
|
:004478D7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004478DA 51                      push ecx
:004478DB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004478DE 81E1FF000000            and ecx, 000000FF
:004478E4 6BC924                  imul ecx, 00000024
:004478E7 81C108F54A00            add ecx, 004AF508
:004478ED E85E48FEFF              call 0042C150
:004478F2 8B55F0                  mov edx, dword ptr [ebp-10]
:004478F5 52                      push edx
:004478F6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004478F9 81E1FF000000            and ecx, 000000FF
:004478FF 6BC924                  imul ecx, 00000024
:00447902 81C108F54A00            add ecx, 004AF508
:00447908 E84348FEFF              call 0042C150
:0044790D 8BE5                    mov esp, ebp
:0044790F 5D                      pop ebp
:00447910 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A35B   , :0042AAB2   , :0042D26D   , :0042DBD3   , :0042DDDE   
|:00438EC2   , :00444EE3   , :00445455   , :0044549E   , :00445EF6   
|:00446FDC   , :004477FB   , :00448647   , :004493F1   , :004495CF   
|:00449733   , :0044B2F8   , :0044C9F0   , :0044CCD9   , :0044CD9B   
|:0044CE7B   , :0044CF18   , :0044CFB5   , :0044D0E1   , :0044D22D   
|:0044D2CA   , :0044DB13   , :0044DB53   , :0044DBCD   , :0044DBF4   
|:0044DC5D   , :00456E05   , :004571C2   , :00458D59   , :0045909A   
|:00459150   , :00459996   , :00459D4F   , :00459F45   
|
:00447911 55                      push ebp
:00447912 8BEC                    mov ebp, esp
:00447914 51                      push ecx
:00447915 56                      push esi
:00447916 8B4508                  mov eax, dword ptr [ebp+08]
:00447919 33C9                    xor ecx, ecx
:0044791B 8A08                    mov cl, byte ptr [eax]
:0044791D 33D2                    xor edx, edx
:0044791F 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00447925 3BCA                    cmp ecx, edx
:00447927 7D4F                    jge 00447978
:00447929 8B4508                  mov eax, dword ptr [ebp+08]
:0044792C 33C9                    xor ecx, ecx
:0044792E 8A4801                  mov cl, byte ptr [eax+01]
:00447931 33D2                    xor edx, edx
:00447933 8A15810A4B00            mov dl, byte ptr [004B0A81]
:00447939 3BCA                    cmp ecx, edx
:0044793B 7D3B                    jge 00447978
:0044793D 68004B0000              push 00004B00
:00447942 B930DF4A00              mov ecx, 004ADF30
:00447947 E852BCFCFF              call 0041359E
:0044794C 8BF0                    mov esi, eax
:0044794E 68800A4B00              push 004B0A80
:00447953 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447956 E832FDFBFF              call 0040768D
:0044795B 8A0406                  mov al, byte ptr [esi+eax]
:0044795E 8845FC                  mov byte ptr [ebp-04], al
:00447961 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00447964 81E1FF000000            and ecx, 000000FF
:0044796A 83F95A                  cmp ecx, 0000005A
:0044796D 7D05                    jge 00447974
:0044796F 8A45FC                  mov al, byte ptr [ebp-04]
:00447972 EB06                    jmp 0044797A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044796D(C)
|
:00447974 0CFF                    or al, FF
:00447976 EB02                    jmp 0044797A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447927(C), :0044793B(C)
|
:00447978 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447972(U), :00447976(U)
|
:0044797A 5E                      pop esi
:0044797B 8BE5                    mov esp, ebp
:0044797D 5D                      pop ebp
:0044797E C3                      ret



* Referenced by a CALL at Addresses:
|:0042A373   , :0042A62D   , :0042B145   , :0042D103   , :0042D1C5   
|:0042D6FD   , :0042DC7F   , :0042DC91   , :0042F64D   , :00430123   
|:004307D8   , :004352CD   , :0043537B   , :004361B8   , :00438B72   
|:004391D5   , :004392EF   , :0043A0E0   , :0043A280   , :0043AD16   
|:0043AEA0   , :0043B207   , :0043B444   , :0043B5E1   , :0043B869   
|:0043DC86   , :0043F2A1   , :00440013   , :004405B5   , :004406F0   
|:00441429   , :00441582   , :00441886   , :004438C3   , :004450C9   
|:004462C3   , :004473BC   , :00447482   , :0044755C   , :00447790   
|:00448E19   , :00449527   , :004496D3   , :004499CB   , :00449BE5   
|:0044A728   , :0044B020   , :0044B12B   , :0044B397   , :0044C898   
|:00456F85   
|
:0044797F 55                      push ebp
:00447980 8BEC                    mov ebp, esp
:00447982 56                      push esi
:00447983 8B4508                  mov eax, dword ptr [ebp+08]
:00447986 33C9                    xor ecx, ecx
:00447988 8A08                    mov cl, byte ptr [eax]
:0044798A 33D2                    xor edx, edx
:0044798C 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00447992 3BCA                    cmp ecx, edx
:00447994 7D38                    jge 004479CE
:00447996 8B4508                  mov eax, dword ptr [ebp+08]
:00447999 33C9                    xor ecx, ecx
:0044799B 8A4801                  mov cl, byte ptr [eax+01]
:0044799E 33D2                    xor edx, edx
:004479A0 8A15810A4B00            mov dl, byte ptr [004B0A81]
:004479A6 3BCA                    cmp ecx, edx
:004479A8 7D24                    jge 004479CE
:004479AA 6A00                    push 00000000
:004479AC B930DF4A00              mov ecx, 004ADF30
:004479B1 E8E8BBFCFF              call 0041359E
:004479B6 8BF0                    mov esi, eax
:004479B8 68800A4B00              push 004B0A80
:004479BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004479C0 E8C8FCFBFF              call 0040768D
:004479C5 8A840680430000          mov al, byte ptr [esi+eax+00004380]
:004479CC EB02                    jmp 004479D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447994(C), :004479A8(C)
|
:004479CE 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004479CC(U)
|
:004479D0 5E                      pop esi
:004479D1 5D                      pop ebp
:004479D2 C3                      ret



* Referenced by a CALL at Address:
|:0044CD8B   
|
:004479D3 55                      push ebp
:004479D4 8BEC                    mov ebp, esp
:004479D6 8B4508                  mov eax, dword ptr [ebp+08]
:004479D9 33C9                    xor ecx, ecx
:004479DB 8A08                    mov cl, byte ptr [eax]
:004479DD 33D2                    xor edx, edx
:004479DF 8A15800A4B00            mov dl, byte ptr [004B0A80]
:004479E5 3BCA                    cmp ecx, edx
:004479E7 7D14                    jge 004479FD
:004479E9 8B4508                  mov eax, dword ptr [ebp+08]
:004479EC 33C9                    xor ecx, ecx
:004479EE 8A4801                  mov cl, byte ptr [eax+01]
:004479F1 33D2                    xor edx, edx
:004479F3 8A15810A4B00            mov dl, byte ptr [004B0A81]
:004479F9 3BCA                    cmp ecx, edx
:004479FB 7C04                    jl 00447A01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004479E7(C)
|
:004479FD 33C0                    xor eax, eax
:004479FF EB05                    jmp 00447A06

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004479FB(C)
|
:00447A01 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004479FF(U)
|
:00447A06 5D                      pop ebp
:00447A07 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A3FC   , :0042AA88   , :0042D247   , :0042DC5F   , :00439016   
|:0044467F   , :00447140   , :004477D5   , :00448765   , :00448C01   
|:00449499   , :00449585   , :004497E2   , :00449B61   , :0044B2D2   
|:0044CE66   , :0044CF03   , :0044CFA0   , :0044D0CC   , :0044D218   
|:0044D2B5   , :0044DECC   , :00459F1B   
|
:00447A08 55                      push ebp
:00447A09 8BEC                    mov ebp, esp
:00447A0B 33C0                    xor eax, eax
:00447A0D A0A8044B00              mov al, byte ptr [004B04A8]
:00447A12 83E001                  and eax, 00000001
:00447A15 85C0                    test eax, eax
:00447A17 7526                    jne 00447A3F
:00447A19 8A0DA8044B00            mov cl, byte ptr [004B04A8]
:00447A1F 80C901                  or cl, 01
:00447A22 880DA8044B00            mov byte ptr [004B04A8], cl
:00447A28 B9C0044B00              mov ecx, 004B04C0
:00447A2D E87EFDFBFF              call 004077B0
:00447A32 68BB7A4400              push 00447ABB
:00447A37 E8345A0200              call 0046D470
:00447A3C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447A17(C)
|
:00447A3F 8B5508                  mov edx, dword ptr [ebp+08]
:00447A42 52                      push edx
:00447A43 B9C0044B00              mov ecx, 004B04C0
:00447A48 E8437DFEFF              call 0042F790
:00447A4D 8B450C                  mov eax, dword ptr [ebp+0C]
:00447A50 25FF000000              and eax, 000000FF
:00447A55 D1E0                    shl eax, 1
:00447A57 8A0DC0044B00            mov cl, byte ptr [004B04C0]
:00447A5D 020C8518914700          add cl, byte ptr [4*eax+00479118]
:00447A64 880DC0044B00            mov byte ptr [004B04C0], cl
:00447A6A 8B550C                  mov edx, dword ptr [ebp+0C]
:00447A6D 81E2FF000000            and edx, 000000FF
:00447A73 D1E2                    shl edx, 1
:00447A75 A0C1044B00              mov al, byte ptr [004B04C1]
:00447A7A 0204951C914700          add al, byte ptr [4*edx+0047911C]
:00447A81 A2C1044B00              mov byte ptr [004B04C1], al
:00447A86 33C9                    xor ecx, ecx
:00447A88 8A0DC0044B00            mov cl, byte ptr [004B04C0]
:00447A8E 33D2                    xor edx, edx
:00447A90 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00447A96 3BCA                    cmp ecx, edx
:00447A98 7D13                    jge 00447AAD
:00447A9A 33C0                    xor eax, eax
:00447A9C A0C1044B00              mov al, byte ptr [004B04C1]
:00447AA1 33C9                    xor ecx, ecx
:00447AA3 8A0D810A4B00            mov cl, byte ptr [004B0A81]
:00447AA9 3BC1                    cmp eax, ecx
:00447AAB 7C07                    jl 00447AB4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447A98(C)
|
:00447AAD C605C0044B00FF          mov byte ptr [004B04C0], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447AAB(C)
|
:00447AB4 B8C0044B00              mov eax, 004B04C0
:00447AB9 5D                      pop ebp
:00447ABA C3                      ret


:00447ABB 55                      push ebp
:00447ABC 8BEC                    mov ebp, esp
:00447ABE 5D                      pop ebp
:00447ABF C3                      ret



* Referenced by a CALL at Addresses:
|:0042C4FC   , :0042C523   , :0042C5C5   , :0042C5F5   , :0042C6A7   
|:0042C993   , :00457C84   , :004590C5   , :0045918A   , :00459315   
|
:00447AC0 55                      push ebp
:00447AC1 8BEC                    mov ebp, esp
:00447AC3 56                      push esi
:00447AC4 8B4508                  mov eax, dword ptr [ebp+08]
:00447AC7 33C9                    xor ecx, ecx
:00447AC9 8A08                    mov cl, byte ptr [eax]
:00447ACB 33D2                    xor edx, edx
:00447ACD 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00447AD3 3BCA                    cmp ecx, edx
:00447AD5 7D14                    jge 00447AEB
:00447AD7 8B4508                  mov eax, dword ptr [ebp+08]
:00447ADA 33C9                    xor ecx, ecx
:00447ADC 8A4801                  mov cl, byte ptr [eax+01]
:00447ADF 33D2                    xor edx, edx
:00447AE1 8A15810A4B00            mov dl, byte ptr [004B0A81]
:00447AE7 3BCA                    cmp ecx, edx
:00447AE9 7C02                    jl 00447AED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447AD5(C)
|
:00447AEB EB7A                    jmp 00447B67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447AE9(C)
|
:00447AED 8B450C                  mov eax, dword ptr [ebp+0C]
:00447AF0 25FF000000              and eax, 000000FF
:00447AF5 83F85C                  cmp eax, 0000005C
:00447AF8 7C04                    jl 00447AFE
:00447AFA C6450CFF                mov [ebp+0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447AF8(C)
|
:00447AFE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447B01 81E1FF000000            and ecx, 000000FF
:00447B07 83F95A                  cmp ecx, 0000005A
:00447B0A 7D36                    jge 00447B42
:00447B0C 8B550C                  mov edx, dword ptr [ebp+0C]
:00447B0F 81E2FF000000            and edx, 000000FF
:00447B15 81FAFF000000            cmp edx, 000000FF
:00447B1B 7425                    je 00447B42
:00447B1D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447B20 81E1FF000000            and ecx, 000000FF
:00447B26 6BC924                  imul ecx, 00000024
:00447B29 81C108F54A00            add ecx, 004AF508
:00447B2F E89C7DFEFF              call 0042F8D0
:00447B34 25FF000000              and eax, 000000FF
:00447B39 83F804                  cmp eax, 00000004
:00447B3C 7504                    jne 00447B42
:00447B3E C6450CFF                mov [ebp+0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447B0A(C), :00447B1B(C), :00447B3C(C)
|
:00447B42 6A00                    push 00000000
:00447B44 B930DF4A00              mov ecx, 004ADF30
:00447B49 E850BAFCFF              call 0041359E
:00447B4E 8BF0                    mov esi, eax
:00447B50 68800A4B00              push 004B0A80
:00447B55 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447B58 E830FBFBFF              call 0040768D
:00447B5D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00447B60 888C06004B0000          mov byte ptr [esi+eax+00004B00], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447AEB(U)
|
:00447B67 5E                      pop esi
:00447B68 5D                      pop ebp
:00447B69 C3                      ret



* Referenced by a CALL at Addresses:
|:00431A9F   , :00439890   , :0043D24B   , :00445DB8   , :004489CB   
|:00448CC0   , :00449E49   , :0044B0FD   
|
:00447B6A 55                      push ebp
:00447B6B 8BEC                    mov ebp, esp
:00447B6D 83EC1C                  sub esp, 0000001C
:00447B70 894DE8                  mov dword ptr [ebp-18], ecx
:00447B73 C645ECFF                mov [ebp-14], FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00447B77 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00447B7C 68FF000000              push 000000FF
:00447B81 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00447B84 E8F77CFEFF              call 0042F880
:00447B89 8B450C                  mov eax, dword ptr [ebp+0C]
:00447B8C 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00447B91 3DFF000000              cmp eax, 000000FF
:00447B96 7507                    jne 00447B9F
:00447B98 0CFF                    or al, FF
:00447B9A E96E090000              jmp 0044850D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447B96(C)
|
:00447B9F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447BA2 81E1FF000000            and ecx, 000000FF
:00447BA8 81E180000000            and ecx, 00000080
:00447BAE 894DF0                  mov dword ptr [ebp-10], ecx
:00447BB1 8A550C                  mov dl, byte ptr [ebp+0C]
:00447BB4 80E27F                  and dl, 7F
:00447BB7 88550C                  mov byte ptr [ebp+0C], dl
:00447BBA 8B4514                  mov eax, dword ptr [ebp+14]
:00447BBD 25FF000000              and eax, 000000FF
:00447BC2 85C0                    test eax, eax
:00447BC4 750A                    jne 00447BD0
:00447BC6 C705B8044B00A89F4A00    mov dword ptr [004B04B8], 004A9FA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447BC4(C)
|
:00447BD0 8B4D10                  mov ecx, dword ptr [ebp+10]
:00447BD3 81E1FF000000            and ecx, 000000FF
:00447BD9 83E101                  and ecx, 00000001
:00447BDC 85C9                    test ecx, ecx
:00447BDE 7424                    je 00447C04
:00447BE0 8A5514                  mov dl, byte ptr [ebp+14]
:00447BE3 52                      push edx
:00447BE4 8A4510                  mov al, byte ptr [ebp+10]
:00447BE7 50                      push eax
:00447BE8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00447BEB 8A5104                  mov dl, byte ptr [ecx+04]
:00447BEE 52                      push edx
:00447BEF 8B4508                  mov eax, dword ptr [ebp+08]
:00447BF2 8A4801                  mov cl, byte ptr [eax+01]
:00447BF5 51                      push ecx
:00447BF6 8B5508                  mov edx, dword ptr [ebp+08]
:00447BF9 8A02                    mov al, byte ptr [edx]
:00447BFB 50                      push eax
:00447BFC E83E090000              call 0044853F
:00447C01 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447BDE(C)
|
:00447C04 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447C07 81E1FF000000            and ecx, 000000FF
:00447C0D 894DE4                  mov dword ptr [ebp-1C], ecx
:00447C10 837DE40A                cmp dword ptr [ebp-1C], 0000000A
:00447C14 0F8779080000            ja 00448493
:00447C1A 8B55E4                  mov edx, dword ptr [ebp-1C]
:00447C1D FF249513854400          jmp dword ptr [4*edx+00448513]
:00447C24 8B45E8                  mov eax, dword ptr [ebp-18]
:00447C27 8A4804                  mov cl, byte ptr [eax+04]
:00447C2A 51                      push ecx
:00447C2B 8A5514                  mov dl, byte ptr [ebp+14]
:00447C2E 52                      push edx
:00447C2F 8A4510                  mov al, byte ptr [ebp+10]
:00447C32 50                      push eax
:00447C33 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447C36 51                      push ecx
:00447C37 E8ED0A0000              call 00448729
:00447C3C 83C410                  add esp, 00000010
:00447C3F E94F080000              jmp 00448493
:00447C44 8B55E8                  mov edx, dword ptr [ebp-18]
:00447C47 8A4204                  mov al, byte ptr [edx+04]
:00447C4A 50                      push eax
:00447C4B 8A4D14                  mov cl, byte ptr [ebp+14]
:00447C4E 51                      push ecx
:00447C4F 8A5510                  mov dl, byte ptr [ebp+10]
:00447C52 52                      push edx
:00447C53 8B4508                  mov eax, dword ptr [ebp+08]
:00447C56 50                      push eax
:00447C57 E8CD0A0000              call 00448729
:00447C5C 83C410                  add esp, 00000010
:00447C5F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00447C62 8A5104                  mov dl, byte ptr [ecx+04]
:00447C65 52                      push edx
:00447C66 8A4514                  mov al, byte ptr [ebp+14]
:00447C69 50                      push eax
:00447C6A 8A4D10                  mov cl, byte ptr [ebp+10]
:00447C6D 51                      push ecx
:00447C6E 8B5508                  mov edx, dword ptr [ebp+08]
:00447C71 52                      push edx
:00447C72 E8320B0000              call 004487A9
:00447C77 83C410                  add esp, 00000010
:00447C7A E914080000              jmp 00448493
:00447C7F 8A4514                  mov al, byte ptr [ebp+14]
:00447C82 50                      push eax
:00447C83 8A4D10                  mov cl, byte ptr [ebp+10]
:00447C86 51                      push ecx
:00447C87 8B55E8                  mov edx, dword ptr [ebp-18]
:00447C8A 8A4204                  mov al, byte ptr [edx+04]
:00447C8D 50                      push eax
:00447C8E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447C91 8A5101                  mov dl, byte ptr [ecx+01]
:00447C94 52                      push edx
:00447C95 8B4508                  mov eax, dword ptr [ebp+08]
:00447C98 33C9                    xor ecx, ecx
:00447C9A 8A08                    mov cl, byte ptr [eax]
:00447C9C 83E902                  sub ecx, 00000002
:00447C9F 51                      push ecx
:00447CA0 E89A080000              call 0044853F
:00447CA5 83C414                  add esp, 00000014
:00447CA8 8A5514                  mov dl, byte ptr [ebp+14]
:00447CAB 52                      push edx
:00447CAC 8A4510                  mov al, byte ptr [ebp+10]
:00447CAF 50                      push eax
:00447CB0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00447CB3 8A5104                  mov dl, byte ptr [ecx+04]
:00447CB6 52                      push edx
:00447CB7 8B4508                  mov eax, dword ptr [ebp+08]
:00447CBA 8A4801                  mov cl, byte ptr [eax+01]
:00447CBD 51                      push ecx
:00447CBE 8B5508                  mov edx, dword ptr [ebp+08]
:00447CC1 33C0                    xor eax, eax
:00447CC3 8A02                    mov al, byte ptr [edx]
:00447CC5 83C002                  add eax, 00000002
:00447CC8 50                      push eax
:00447CC9 E871080000              call 0044853F
:00447CCE 83C414                  add esp, 00000014
:00447CD1 8A4D14                  mov cl, byte ptr [ebp+14]
:00447CD4 51                      push ecx
:00447CD5 8A5510                  mov dl, byte ptr [ebp+10]
:00447CD8 52                      push edx
:00447CD9 8B45E8                  mov eax, dword ptr [ebp-18]
:00447CDC 8A4804                  mov cl, byte ptr [eax+04]
:00447CDF 51                      push ecx
:00447CE0 8B5508                  mov edx, dword ptr [ebp+08]
:00447CE3 33C0                    xor eax, eax
:00447CE5 8A4201                  mov al, byte ptr [edx+01]
:00447CE8 83E802                  sub eax, 00000002
:00447CEB 50                      push eax
:00447CEC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447CEF 8A11                    mov dl, byte ptr [ecx]
:00447CF1 52                      push edx
:00447CF2 E848080000              call 0044853F
:00447CF7 83C414                  add esp, 00000014
:00447CFA 8A4514                  mov al, byte ptr [ebp+14]
:00447CFD 50                      push eax
:00447CFE 8A4D10                  mov cl, byte ptr [ebp+10]
:00447D01 51                      push ecx
:00447D02 8B55E8                  mov edx, dword ptr [ebp-18]
:00447D05 8A4204                  mov al, byte ptr [edx+04]
:00447D08 50                      push eax
:00447D09 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447D0C 33D2                    xor edx, edx
:00447D0E 8A5101                  mov dl, byte ptr [ecx+01]
:00447D11 83C202                  add edx, 00000002
:00447D14 52                      push edx
:00447D15 8B4508                  mov eax, dword ptr [ebp+08]
:00447D18 8A08                    mov cl, byte ptr [eax]
:00447D1A 51                      push ecx
:00447D1B E81F080000              call 0044853F
:00447D20 83C414                  add esp, 00000014
:00447D23 E96B070000              jmp 00448493
:00447D28 C645F800                mov [ebp-08], 00
:00447D2C EB09                    jmp 00447D37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447E13(U)
|
:00447D2E 8A55F8                  mov dl, byte ptr [ebp-08]
:00447D31 80C201                  add dl, 01
:00447D34 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447D2C(U)
|
:00447D37 8B45F8                  mov eax, dword ptr [ebp-08]
:00447D3A 25FF000000              and eax, 000000FF
:00447D3F 83F802                  cmp eax, 00000002
:00447D42 0F8DD0000000            jnl 00447E18
:00447D48 8A4D14                  mov cl, byte ptr [ebp+14]
:00447D4B 51                      push ecx
:00447D4C 8A5510                  mov dl, byte ptr [ebp+10]
:00447D4F 52                      push edx
:00447D50 8B45E8                  mov eax, dword ptr [ebp-18]
:00447D53 8A4804                  mov cl, byte ptr [eax+04]
:00447D56 51                      push ecx
:00447D57 8B5508                  mov edx, dword ptr [ebp+08]
:00447D5A 33C0                    xor eax, eax
:00447D5C 8A4201                  mov al, byte ptr [edx+01]
:00447D5F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447D62 81E1FF000000            and ecx, 000000FF
:00447D68 8D5408FD                lea edx, dword ptr [eax+ecx-03]
:00447D6C 52                      push edx
:00447D6D 8B4508                  mov eax, dword ptr [ebp+08]
:00447D70 8A08                    mov cl, byte ptr [eax]
:00447D72 51                      push ecx
:00447D73 E8C7070000              call 0044853F
:00447D78 83C414                  add esp, 00000014
:00447D7B 8A5514                  mov dl, byte ptr [ebp+14]
:00447D7E 52                      push edx
:00447D7F 8A4510                  mov al, byte ptr [ebp+10]
:00447D82 50                      push eax
:00447D83 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00447D86 8A5104                  mov dl, byte ptr [ecx+04]
:00447D89 52                      push edx
:00447D8A 8B4508                  mov eax, dword ptr [ebp+08]
:00447D8D 33C9                    xor ecx, ecx
:00447D8F 8A4801                  mov cl, byte ptr [eax+01]
:00447D92 8B55F8                  mov edx, dword ptr [ebp-08]
:00447D95 81E2FF000000            and edx, 000000FF
:00447D9B 8D441102                lea eax, dword ptr [ecx+edx+02]
:00447D9F 50                      push eax
:00447DA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447DA3 8A11                    mov dl, byte ptr [ecx]
:00447DA5 52                      push edx
:00447DA6 E894070000              call 0044853F
:00447DAB 83C414                  add esp, 00000014
:00447DAE 8A4514                  mov al, byte ptr [ebp+14]
:00447DB1 50                      push eax
:00447DB2 8A4D10                  mov cl, byte ptr [ebp+10]
:00447DB5 51                      push ecx
:00447DB6 8B55E8                  mov edx, dword ptr [ebp-18]
:00447DB9 8A4204                  mov al, byte ptr [edx+04]
:00447DBC 50                      push eax
:00447DBD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447DC0 8A5101                  mov dl, byte ptr [ecx+01]
:00447DC3 52                      push edx
:00447DC4 8B4508                  mov eax, dword ptr [ebp+08]
:00447DC7 33C9                    xor ecx, ecx
:00447DC9 8A08                    mov cl, byte ptr [eax]
:00447DCB 8B55F8                  mov edx, dword ptr [ebp-08]
:00447DCE 81E2FF000000            and edx, 000000FF
:00447DD4 8D4411FD                lea eax, dword ptr [ecx+edx-03]
:00447DD8 50                      push eax
:00447DD9 E861070000              call 0044853F
:00447DDE 83C414                  add esp, 00000014
:00447DE1 8A4D14                  mov cl, byte ptr [ebp+14]
:00447DE4 51                      push ecx
:00447DE5 8A5510                  mov dl, byte ptr [ebp+10]
:00447DE8 52                      push edx
:00447DE9 8B45E8                  mov eax, dword ptr [ebp-18]
:00447DEC 8A4804                  mov cl, byte ptr [eax+04]
:00447DEF 51                      push ecx
:00447DF0 8B5508                  mov edx, dword ptr [ebp+08]
:00447DF3 8A4201                  mov al, byte ptr [edx+01]
:00447DF6 50                      push eax
:00447DF7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447DFA 33D2                    xor edx, edx
:00447DFC 8A11                    mov dl, byte ptr [ecx]
:00447DFE 8B45F8                  mov eax, dword ptr [ebp-08]
:00447E01 25FF000000              and eax, 000000FF
:00447E06 8D4C0202                lea ecx, dword ptr [edx+eax+02]
:00447E0A 51                      push ecx
:00447E0B E82F070000              call 0044853F
:00447E10 83C414                  add esp, 00000014
:00447E13 E916FFFFFF              jmp 00447D2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447D42(C)
|
:00447E18 E976060000              jmp 00448493
:00447E1D C645F800                mov [ebp-08], 00
:00447E21 EB09                    jmp 00447E2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447F08(U)
|
:00447E23 8A55F8                  mov dl, byte ptr [ebp-08]
:00447E26 80C201                  add dl, 01
:00447E29 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447E21(U)
|
:00447E2C 8B45F8                  mov eax, dword ptr [ebp-08]
:00447E2F 25FF000000              and eax, 000000FF
:00447E34 83F803                  cmp eax, 00000003
:00447E37 0F8DD0000000            jnl 00447F0D
:00447E3D 8A4D14                  mov cl, byte ptr [ebp+14]
:00447E40 51                      push ecx
:00447E41 8A5510                  mov dl, byte ptr [ebp+10]
:00447E44 52                      push edx
:00447E45 8B45E8                  mov eax, dword ptr [ebp-18]
:00447E48 8A4804                  mov cl, byte ptr [eax+04]
:00447E4B 51                      push ecx
:00447E4C 8B5508                  mov edx, dword ptr [ebp+08]
:00447E4F 33C0                    xor eax, eax
:00447E51 8A4201                  mov al, byte ptr [edx+01]
:00447E54 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447E57 81E1FF000000            and ecx, 000000FF
:00447E5D 8D5408FC                lea edx, dword ptr [eax+ecx-04]
:00447E61 52                      push edx
:00447E62 8B4508                  mov eax, dword ptr [ebp+08]
:00447E65 8A08                    mov cl, byte ptr [eax]
:00447E67 51                      push ecx
:00447E68 E8D2060000              call 0044853F
:00447E6D 83C414                  add esp, 00000014
:00447E70 8A5514                  mov dl, byte ptr [ebp+14]
:00447E73 52                      push edx
:00447E74 8A4510                  mov al, byte ptr [ebp+10]
:00447E77 50                      push eax
:00447E78 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00447E7B 8A5104                  mov dl, byte ptr [ecx+04]
:00447E7E 52                      push edx
:00447E7F 8B4508                  mov eax, dword ptr [ebp+08]
:00447E82 33C9                    xor ecx, ecx
:00447E84 8A4801                  mov cl, byte ptr [eax+01]
:00447E87 8B55F8                  mov edx, dword ptr [ebp-08]
:00447E8A 81E2FF000000            and edx, 000000FF
:00447E90 8D441102                lea eax, dword ptr [ecx+edx+02]
:00447E94 50                      push eax
:00447E95 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447E98 8A11                    mov dl, byte ptr [ecx]
:00447E9A 52                      push edx
:00447E9B E89F060000              call 0044853F
:00447EA0 83C414                  add esp, 00000014
:00447EA3 8A4514                  mov al, byte ptr [ebp+14]
:00447EA6 50                      push eax
:00447EA7 8A4D10                  mov cl, byte ptr [ebp+10]
:00447EAA 51                      push ecx
:00447EAB 8B55E8                  mov edx, dword ptr [ebp-18]
:00447EAE 8A4204                  mov al, byte ptr [edx+04]
:00447EB1 50                      push eax
:00447EB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447EB5 8A5101                  mov dl, byte ptr [ecx+01]
:00447EB8 52                      push edx
:00447EB9 8B4508                  mov eax, dword ptr [ebp+08]
:00447EBC 33C9                    xor ecx, ecx
:00447EBE 8A08                    mov cl, byte ptr [eax]
:00447EC0 8B55F8                  mov edx, dword ptr [ebp-08]
:00447EC3 81E2FF000000            and edx, 000000FF
:00447EC9 8D4411FC                lea eax, dword ptr [ecx+edx-04]
:00447ECD 50                      push eax
:00447ECE E86C060000              call 0044853F
:00447ED3 83C414                  add esp, 00000014
:00447ED6 8A4D14                  mov cl, byte ptr [ebp+14]
:00447ED9 51                      push ecx
:00447EDA 8A5510                  mov dl, byte ptr [ebp+10]
:00447EDD 52                      push edx
:00447EDE 8B45E8                  mov eax, dword ptr [ebp-18]
:00447EE1 8A4804                  mov cl, byte ptr [eax+04]
:00447EE4 51                      push ecx
:00447EE5 8B5508                  mov edx, dword ptr [ebp+08]
:00447EE8 8A4201                  mov al, byte ptr [edx+01]
:00447EEB 50                      push eax
:00447EEC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447EEF 33D2                    xor edx, edx
:00447EF1 8A11                    mov dl, byte ptr [ecx]
:00447EF3 8B45F8                  mov eax, dword ptr [ebp-08]
:00447EF6 25FF000000              and eax, 000000FF
:00447EFB 8D4C0202                lea ecx, dword ptr [edx+eax+02]
:00447EFF 51                      push ecx
:00447F00 E83A060000              call 0044853F
:00447F05 83C414                  add esp, 00000014
:00447F08 E916FFFFFF              jmp 00447E23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447E37(C)
|
:00447F0D E981050000              jmp 00448493
:00447F12 8A5514                  mov dl, byte ptr [ebp+14]
:00447F15 52                      push edx
:00447F16 8A4510                  mov al, byte ptr [ebp+10]
:00447F19 50                      push eax
:00447F1A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00447F1D 8A5104                  mov dl, byte ptr [ecx+04]
:00447F20 52                      push edx
:00447F21 8B4508                  mov eax, dword ptr [ebp+08]
:00447F24 8A4801                  mov cl, byte ptr [eax+01]
:00447F27 51                      push ecx
:00447F28 8B5508                  mov edx, dword ptr [ebp+08]
:00447F2B 33C0                    xor eax, eax
:00447F2D 8A02                    mov al, byte ptr [edx]
:00447F2F 83E803                  sub eax, 00000003
:00447F32 50                      push eax
:00447F33 E807060000              call 0044853F
:00447F38 83C414                  add esp, 00000014
:00447F3B 8A4D14                  mov cl, byte ptr [ebp+14]
:00447F3E 51                      push ecx
:00447F3F 8A5510                  mov dl, byte ptr [ebp+10]
:00447F42 52                      push edx
:00447F43 8B45E8                  mov eax, dword ptr [ebp-18]
:00447F46 8A4804                  mov cl, byte ptr [eax+04]
:00447F49 51                      push ecx
:00447F4A 8B5508                  mov edx, dword ptr [ebp+08]
:00447F4D 8A4201                  mov al, byte ptr [edx+01]
:00447F50 50                      push eax
:00447F51 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447F54 33D2                    xor edx, edx
:00447F56 8A11                    mov dl, byte ptr [ecx]
:00447F58 83C203                  add edx, 00000003
:00447F5B 52                      push edx
:00447F5C E8DE050000              call 0044853F
:00447F61 83C414                  add esp, 00000014
:00447F64 8A4514                  mov al, byte ptr [ebp+14]
:00447F67 50                      push eax
:00447F68 8A4D10                  mov cl, byte ptr [ebp+10]
:00447F6B 51                      push ecx
:00447F6C 8B55E8                  mov edx, dword ptr [ebp-18]
:00447F6F 8A4204                  mov al, byte ptr [edx+04]
:00447F72 50                      push eax
:00447F73 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447F76 33D2                    xor edx, edx
:00447F78 8A5101                  mov dl, byte ptr [ecx+01]
:00447F7B 83EA03                  sub edx, 00000003
:00447F7E 52                      push edx
:00447F7F 8B4508                  mov eax, dword ptr [ebp+08]
:00447F82 8A08                    mov cl, byte ptr [eax]
:00447F84 51                      push ecx
:00447F85 E8B5050000              call 0044853F
:00447F8A 83C414                  add esp, 00000014
:00447F8D 8A5514                  mov dl, byte ptr [ebp+14]
:00447F90 52                      push edx
:00447F91 8A4510                  mov al, byte ptr [ebp+10]
:00447F94 50                      push eax
:00447F95 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00447F98 8A5104                  mov dl, byte ptr [ecx+04]
:00447F9B 52                      push edx
:00447F9C 8B4508                  mov eax, dword ptr [ebp+08]
:00447F9F 33C9                    xor ecx, ecx
:00447FA1 8A4801                  mov cl, byte ptr [eax+01]
:00447FA4 83C103                  add ecx, 00000003
:00447FA7 51                      push ecx
:00447FA8 8B5508                  mov edx, dword ptr [ebp+08]
:00447FAB 8A02                    mov al, byte ptr [edx]
:00447FAD 50                      push eax
:00447FAE E88C050000              call 0044853F
:00447FB3 83C414                  add esp, 00000014
:00447FB6 E9D8040000              jmp 00448493
:00447FBB C645F800                mov [ebp-08], 00
:00447FBF EB09                    jmp 00447FCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004480A7(U)
|
:00447FC1 8A4DF8                  mov cl, byte ptr [ebp-08]
:00447FC4 80C101                  add cl, 01
:00447FC7 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447FBF(U)
|
:00447FCA 8B55F8                  mov edx, dword ptr [ebp-08]
:00447FCD 81E2FF000000            and edx, 000000FF
:00447FD3 83FA02                  cmp edx, 00000002
:00447FD6 0F8DD0000000            jnl 004480AC
:00447FDC 8A4514                  mov al, byte ptr [ebp+14]
:00447FDF 50                      push eax
:00447FE0 8A4D10                  mov cl, byte ptr [ebp+10]
:00447FE3 51                      push ecx
:00447FE4 8B55E8                  mov edx, dword ptr [ebp-18]
:00447FE7 8A4204                  mov al, byte ptr [edx+04]
:00447FEA 50                      push eax
:00447FEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447FEE 33D2                    xor edx, edx
:00447FF0 8A5101                  mov dl, byte ptr [ecx+01]
:00447FF3 8B45F8                  mov eax, dword ptr [ebp-08]
:00447FF6 25FF000000              and eax, 000000FF
:00447FFB 8D4C02FC                lea ecx, dword ptr [edx+eax-04]
:00447FFF 51                      push ecx
:00448000 8B5508                  mov edx, dword ptr [ebp+08]
:00448003 8A02                    mov al, byte ptr [edx]
:00448005 50                      push eax
:00448006 E834050000              call 0044853F
:0044800B 83C414                  add esp, 00000014
:0044800E 8A4D14                  mov cl, byte ptr [ebp+14]
:00448011 51                      push ecx
:00448012 8A5510                  mov dl, byte ptr [ebp+10]
:00448015 52                      push edx
:00448016 8B45E8                  mov eax, dword ptr [ebp-18]
:00448019 8A4804                  mov cl, byte ptr [eax+04]
:0044801C 51                      push ecx
:0044801D 8B5508                  mov edx, dword ptr [ebp+08]
:00448020 33C0                    xor eax, eax
:00448022 8A4201                  mov al, byte ptr [edx+01]
:00448025 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448028 81E1FF000000            and ecx, 000000FF
:0044802E 8D540803                lea edx, dword ptr [eax+ecx+03]
:00448032 52                      push edx
:00448033 8B4508                  mov eax, dword ptr [ebp+08]
:00448036 8A08                    mov cl, byte ptr [eax]
:00448038 51                      push ecx
:00448039 E801050000              call 0044853F
:0044803E 83C414                  add esp, 00000014
:00448041 8A5514                  mov dl, byte ptr [ebp+14]
:00448044 52                      push edx
:00448045 8A4510                  mov al, byte ptr [ebp+10]
:00448048 50                      push eax
:00448049 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044804C 8A5104                  mov dl, byte ptr [ecx+04]
:0044804F 52                      push edx
:00448050 8B4508                  mov eax, dword ptr [ebp+08]
:00448053 8A4801                  mov cl, byte ptr [eax+01]
:00448056 51                      push ecx
:00448057 8B5508                  mov edx, dword ptr [ebp+08]
:0044805A 33C0                    xor eax, eax
:0044805C 8A02                    mov al, byte ptr [edx]
:0044805E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448061 81E1FF000000            and ecx, 000000FF
:00448067 8D5408FC                lea edx, dword ptr [eax+ecx-04]
:0044806B 52                      push edx
:0044806C E8CE040000              call 0044853F
:00448071 83C414                  add esp, 00000014
:00448074 8A4514                  mov al, byte ptr [ebp+14]
:00448077 50                      push eax
:00448078 8A4D10                  mov cl, byte ptr [ebp+10]
:0044807B 51                      push ecx
:0044807C 8B55E8                  mov edx, dword ptr [ebp-18]
:0044807F 8A4204                  mov al, byte ptr [edx+04]
:00448082 50                      push eax
:00448083 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448086 8A5101                  mov dl, byte ptr [ecx+01]
:00448089 52                      push edx
:0044808A 8B4508                  mov eax, dword ptr [ebp+08]
:0044808D 33C9                    xor ecx, ecx
:0044808F 8A08                    mov cl, byte ptr [eax]
:00448091 8B55F8                  mov edx, dword ptr [ebp-08]
:00448094 81E2FF000000            and edx, 000000FF
:0044809A 8D441103                lea eax, dword ptr [ecx+edx+03]
:0044809E 50                      push eax
:0044809F E89B040000              call 0044853F
:004480A4 83C414                  add esp, 00000014
:004480A7 E915FFFFFF              jmp 00447FC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447FD6(C)
|
:004480AC E9E2030000              jmp 00448493
:004480B1 C645F800                mov [ebp-08], 00
:004480B5 EB09                    jmp 004480C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044819D(U)
|
:004480B7 8A4DF8                  mov cl, byte ptr [ebp-08]
:004480BA 80C101                  add cl, 01
:004480BD 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004480B5(U)
|
:004480C0 8B55F8                  mov edx, dword ptr [ebp-08]
:004480C3 81E2FF000000            and edx, 000000FF
:004480C9 83FA02                  cmp edx, 00000002
:004480CC 0F8DD0000000            jnl 004481A2
:004480D2 8A4514                  mov al, byte ptr [ebp+14]
:004480D5 50                      push eax
:004480D6 8A4D10                  mov cl, byte ptr [ebp+10]
:004480D9 51                      push ecx
:004480DA 8B55E8                  mov edx, dword ptr [ebp-18]
:004480DD 8A4204                  mov al, byte ptr [edx+04]
:004480E0 50                      push eax
:004480E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004480E4 33D2                    xor edx, edx
:004480E6 8A5101                  mov dl, byte ptr [ecx+01]
:004480E9 8B45F8                  mov eax, dword ptr [ebp-08]
:004480EC 25FF000000              and eax, 000000FF
:004480F1 8D4C02FB                lea ecx, dword ptr [edx+eax-05]
:004480F5 51                      push ecx
:004480F6 8B5508                  mov edx, dword ptr [ebp+08]
:004480F9 8A02                    mov al, byte ptr [edx]
:004480FB 50                      push eax
:004480FC E83E040000              call 0044853F
:00448101 83C414                  add esp, 00000014
:00448104 8A4D14                  mov cl, byte ptr [ebp+14]
:00448107 51                      push ecx
:00448108 8A5510                  mov dl, byte ptr [ebp+10]
:0044810B 52                      push edx
:0044810C 8B45E8                  mov eax, dword ptr [ebp-18]
:0044810F 8A4804                  mov cl, byte ptr [eax+04]
:00448112 51                      push ecx
:00448113 8B5508                  mov edx, dword ptr [ebp+08]
:00448116 33C0                    xor eax, eax
:00448118 8A4201                  mov al, byte ptr [edx+01]
:0044811B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044811E 81E1FF000000            and ecx, 000000FF
:00448124 8D540804                lea edx, dword ptr [eax+ecx+04]
:00448128 52                      push edx
:00448129 8B4508                  mov eax, dword ptr [ebp+08]
:0044812C 8A08                    mov cl, byte ptr [eax]
:0044812E 51                      push ecx
:0044812F E80B040000              call 0044853F
:00448134 83C414                  add esp, 00000014
:00448137 8A5514                  mov dl, byte ptr [ebp+14]
:0044813A 52                      push edx
:0044813B 8A4510                  mov al, byte ptr [ebp+10]
:0044813E 50                      push eax
:0044813F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448142 8A5104                  mov dl, byte ptr [ecx+04]
:00448145 52                      push edx
:00448146 8B4508                  mov eax, dword ptr [ebp+08]
:00448149 8A4801                  mov cl, byte ptr [eax+01]
:0044814C 51                      push ecx
:0044814D 8B5508                  mov edx, dword ptr [ebp+08]
:00448150 33C0                    xor eax, eax
:00448152 8A02                    mov al, byte ptr [edx]
:00448154 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448157 81E1FF000000            and ecx, 000000FF
:0044815D 8D5408FB                lea edx, dword ptr [eax+ecx-05]
:00448161 52                      push edx
:00448162 E8D8030000              call 0044853F
:00448167 83C414                  add esp, 00000014
:0044816A 8A4514                  mov al, byte ptr [ebp+14]
:0044816D 50                      push eax
:0044816E 8A4D10                  mov cl, byte ptr [ebp+10]
:00448171 51                      push ecx
:00448172 8B55E8                  mov edx, dword ptr [ebp-18]
:00448175 8A4204                  mov al, byte ptr [edx+04]
:00448178 50                      push eax
:00448179 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044817C 8A5101                  mov dl, byte ptr [ecx+01]
:0044817F 52                      push edx
:00448180 8B4508                  mov eax, dword ptr [ebp+08]
:00448183 33C9                    xor ecx, ecx
:00448185 8A08                    mov cl, byte ptr [eax]
:00448187 8B55F8                  mov edx, dword ptr [ebp-08]
:0044818A 81E2FF000000            and edx, 000000FF
:00448190 8D441104                lea eax, dword ptr [ecx+edx+04]
:00448194 50                      push eax
:00448195 E8A5030000              call 0044853F
:0044819A 83C414                  add esp, 00000014
:0044819D E915FFFFFF              jmp 004480B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004480CC(C)
|
:004481A2 E9EC020000              jmp 00448493
:004481A7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004481AA 8A5104                  mov dl, byte ptr [ecx+04]
:004481AD 52                      push edx
:004481AE 8A4514                  mov al, byte ptr [ebp+14]
:004481B1 50                      push eax
:004481B2 8A4D10                  mov cl, byte ptr [ebp+10]
:004481B5 51                      push ecx
:004481B6 8B5508                  mov edx, dword ptr [ebp+08]
:004481B9 52                      push edx
:004481BA E8EA050000              call 004487A9
:004481BF 83C410                  add esp, 00000010
:004481C2 8A4514                  mov al, byte ptr [ebp+14]
:004481C5 50                      push eax
:004481C6 8A4D10                  mov cl, byte ptr [ebp+10]
:004481C9 51                      push ecx
:004481CA 8B55E8                  mov edx, dword ptr [ebp-18]
:004481CD 8A4204                  mov al, byte ptr [edx+04]
:004481D0 50                      push eax
:004481D1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004481D4 8A5101                  mov dl, byte ptr [ecx+01]
:004481D7 52                      push edx
:004481D8 8B4508                  mov eax, dword ptr [ebp+08]
:004481DB 33C9                    xor ecx, ecx
:004481DD 8A08                    mov cl, byte ptr [eax]
:004481DF 83E902                  sub ecx, 00000002
:004481E2 51                      push ecx
:004481E3 E857030000              call 0044853F
:004481E8 83C414                  add esp, 00000014
:004481EB 8A5514                  mov dl, byte ptr [ebp+14]
:004481EE 52                      push edx
:004481EF 8A4510                  mov al, byte ptr [ebp+10]
:004481F2 50                      push eax
:004481F3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004481F6 8A5104                  mov dl, byte ptr [ecx+04]
:004481F9 52                      push edx
:004481FA 8B4508                  mov eax, dword ptr [ebp+08]
:004481FD 8A4801                  mov cl, byte ptr [eax+01]
:00448200 51                      push ecx
:00448201 8B5508                  mov edx, dword ptr [ebp+08]
:00448204 33C0                    xor eax, eax
:00448206 8A02                    mov al, byte ptr [edx]
:00448208 83C002                  add eax, 00000002
:0044820B 50                      push eax
:0044820C E82E030000              call 0044853F
:00448211 83C414                  add esp, 00000014
:00448214 8A4D14                  mov cl, byte ptr [ebp+14]
:00448217 51                      push ecx
:00448218 8A5510                  mov dl, byte ptr [ebp+10]
:0044821B 52                      push edx
:0044821C 8B45E8                  mov eax, dword ptr [ebp-18]
:0044821F 8A4804                  mov cl, byte ptr [eax+04]
:00448222 51                      push ecx
:00448223 8B5508                  mov edx, dword ptr [ebp+08]
:00448226 33C0                    xor eax, eax
:00448228 8A4201                  mov al, byte ptr [edx+01]
:0044822B 83E802                  sub eax, 00000002
:0044822E 50                      push eax
:0044822F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448232 8A11                    mov dl, byte ptr [ecx]
:00448234 52                      push edx
:00448235 E805030000              call 0044853F
:0044823A 83C414                  add esp, 00000014
:0044823D 8A4514                  mov al, byte ptr [ebp+14]
:00448240 50                      push eax
:00448241 8A4D10                  mov cl, byte ptr [ebp+10]
:00448244 51                      push ecx
:00448245 8B55E8                  mov edx, dword ptr [ebp-18]
:00448248 8A4204                  mov al, byte ptr [edx+04]
:0044824B 50                      push eax
:0044824C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044824F 33D2                    xor edx, edx
:00448251 8A5101                  mov dl, byte ptr [ecx+01]
:00448254 83C202                  add edx, 00000002
:00448257 52                      push edx
:00448258 8B4508                  mov eax, dword ptr [ebp+08]
:0044825B 8A08                    mov cl, byte ptr [eax]
:0044825D 51                      push ecx
:0044825E E8DC020000              call 0044853F
:00448263 83C414                  add esp, 00000014
:00448266 E928020000              jmp 00448493
:0044826B 8B55E8                  mov edx, dword ptr [ebp-18]
:0044826E 8A4204                  mov al, byte ptr [edx+04]
:00448271 50                      push eax
:00448272 8A4D14                  mov cl, byte ptr [ebp+14]
:00448275 51                      push ecx
:00448276 8A5510                  mov dl, byte ptr [ebp+10]
:00448279 52                      push edx
:0044827A 8B4508                  mov eax, dword ptr [ebp+08]
:0044827D 50                      push eax
:0044827E E826050000              call 004487A9
:00448283 83C410                  add esp, 00000010
:00448286 C645F800                mov [ebp-08], 00
:0044828A EB09                    jmp 00448295

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448385(U)
|
:0044828C 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044828F 80C101                  add cl, 01
:00448292 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044828A(U)
|
:00448295 8B55F8                  mov edx, dword ptr [ebp-08]
:00448298 81E2FF000000            and edx, 000000FF
:0044829E 83FA03                  cmp edx, 00000003
:004482A1 0F8DE3000000            jnl 0044838A
:004482A7 8A4514                  mov al, byte ptr [ebp+14]
:004482AA 50                      push eax
:004482AB 8A4D10                  mov cl, byte ptr [ebp+10]
:004482AE 51                      push ecx
:004482AF 8B55E8                  mov edx, dword ptr [ebp-18]
:004482B2 8A4204                  mov al, byte ptr [edx+04]
:004482B5 50                      push eax
:004482B6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004482B9 33D2                    xor edx, edx
:004482BB 8A5101                  mov dl, byte ptr [ecx+01]
:004482BE 83EA02                  sub edx, 00000002
:004482C1 52                      push edx
:004482C2 8B4508                  mov eax, dword ptr [ebp+08]
:004482C5 33C9                    xor ecx, ecx
:004482C7 8A08                    mov cl, byte ptr [eax]
:004482C9 8B55F8                  mov edx, dword ptr [ebp-08]
:004482CC 81E2FF000000            and edx, 000000FF
:004482D2 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:004482D6 50                      push eax
:004482D7 E863020000              call 0044853F
:004482DC 83C414                  add esp, 00000014
:004482DF 8A4D14                  mov cl, byte ptr [ebp+14]
:004482E2 51                      push ecx
:004482E3 8A5510                  mov dl, byte ptr [ebp+10]
:004482E6 52                      push edx
:004482E7 8B45E8                  mov eax, dword ptr [ebp-18]
:004482EA 8A4804                  mov cl, byte ptr [eax+04]
:004482ED 51                      push ecx
:004482EE 8B5508                  mov edx, dword ptr [ebp+08]
:004482F1 33C0                    xor eax, eax
:004482F3 8A4201                  mov al, byte ptr [edx+01]
:004482F6 83C002                  add eax, 00000002
:004482F9 50                      push eax
:004482FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004482FD 33D2                    xor edx, edx
:004482FF 8A11                    mov dl, byte ptr [ecx]
:00448301 8B45F8                  mov eax, dword ptr [ebp-08]
:00448304 25FF000000              and eax, 000000FF
:00448309 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044830D 51                      push ecx
:0044830E E82C020000              call 0044853F
:00448313 83C414                  add esp, 00000014
:00448316 8A5514                  mov dl, byte ptr [ebp+14]
:00448319 52                      push edx
:0044831A 8A4510                  mov al, byte ptr [ebp+10]
:0044831D 50                      push eax
:0044831E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448321 8A5104                  mov dl, byte ptr [ecx+04]
:00448324 52                      push edx
:00448325 8B4508                  mov eax, dword ptr [ebp+08]
:00448328 33C9                    xor ecx, ecx
:0044832A 8A4801                  mov cl, byte ptr [eax+01]
:0044832D 8B55F8                  mov edx, dword ptr [ebp-08]
:00448330 81E2FF000000            and edx, 000000FF
:00448336 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044833A 50                      push eax
:0044833B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044833E 33D2                    xor edx, edx
:00448340 8A11                    mov dl, byte ptr [ecx]
:00448342 83C202                  add edx, 00000002
:00448345 52                      push edx
:00448346 E8F4010000              call 0044853F
:0044834B 83C414                  add esp, 00000014
:0044834E 8A4514                  mov al, byte ptr [ebp+14]
:00448351 50                      push eax
:00448352 8A4D10                  mov cl, byte ptr [ebp+10]
:00448355 51                      push ecx
:00448356 8B55E8                  mov edx, dword ptr [ebp-18]
:00448359 8A4204                  mov al, byte ptr [edx+04]
:0044835C 50                      push eax
:0044835D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448360 33D2                    xor edx, edx
:00448362 8A5101                  mov dl, byte ptr [ecx+01]
:00448365 8B45F8                  mov eax, dword ptr [ebp-08]
:00448368 25FF000000              and eax, 000000FF
:0044836D 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:00448371 51                      push ecx
:00448372 8B5508                  mov edx, dword ptr [ebp+08]
:00448375 33C0                    xor eax, eax
:00448377 8A02                    mov al, byte ptr [edx]
:00448379 83E802                  sub eax, 00000002
:0044837C 50                      push eax
:0044837D E8BD010000              call 0044853F
:00448382 83C414                  add esp, 00000014
:00448385 E902FFFFFF              jmp 0044828C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004482A1(C)
|
:0044838A E904010000              jmp 00448493
:0044838F C645F800                mov [ebp-08], 00
:00448393 EB09                    jmp 0044839E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044848E(U)
|
:00448395 8A4DF8                  mov cl, byte ptr [ebp-08]
:00448398 80C101                  add cl, 01
:0044839B 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448393(U)
|
:0044839E 8B55F8                  mov edx, dword ptr [ebp-08]
:004483A1 81E2FF000000            and edx, 000000FF
:004483A7 83FA03                  cmp edx, 00000003
:004483AA 0F8DE3000000            jnl 00448493
:004483B0 8A4514                  mov al, byte ptr [ebp+14]
:004483B3 50                      push eax
:004483B4 8A4D10                  mov cl, byte ptr [ebp+10]
:004483B7 51                      push ecx
:004483B8 8B55E8                  mov edx, dword ptr [ebp-18]
:004483BB 8A4204                  mov al, byte ptr [edx+04]
:004483BE 50                      push eax
:004483BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004483C2 33D2                    xor edx, edx
:004483C4 8A5101                  mov dl, byte ptr [ecx+01]
:004483C7 83EA02                  sub edx, 00000002
:004483CA 52                      push edx
:004483CB 8B4508                  mov eax, dword ptr [ebp+08]
:004483CE 33C9                    xor ecx, ecx
:004483D0 8A08                    mov cl, byte ptr [eax]
:004483D2 8B55F8                  mov edx, dword ptr [ebp-08]
:004483D5 81E2FF000000            and edx, 000000FF
:004483DB 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:004483DF 50                      push eax
:004483E0 E85A010000              call 0044853F
:004483E5 83C414                  add esp, 00000014
:004483E8 8A4D14                  mov cl, byte ptr [ebp+14]
:004483EB 51                      push ecx
:004483EC 8A5510                  mov dl, byte ptr [ebp+10]
:004483EF 52                      push edx
:004483F0 8B45E8                  mov eax, dword ptr [ebp-18]
:004483F3 8A4804                  mov cl, byte ptr [eax+04]
:004483F6 51                      push ecx
:004483F7 8B5508                  mov edx, dword ptr [ebp+08]
:004483FA 33C0                    xor eax, eax
:004483FC 8A4201                  mov al, byte ptr [edx+01]
:004483FF 83C002                  add eax, 00000002
:00448402 50                      push eax
:00448403 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448406 33D2                    xor edx, edx
:00448408 8A11                    mov dl, byte ptr [ecx]
:0044840A 8B45F8                  mov eax, dword ptr [ebp-08]
:0044840D 25FF000000              and eax, 000000FF
:00448412 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:00448416 51                      push ecx
:00448417 E823010000              call 0044853F
:0044841C 83C414                  add esp, 00000014
:0044841F 8A5514                  mov dl, byte ptr [ebp+14]
:00448422 52                      push edx
:00448423 8A4510                  mov al, byte ptr [ebp+10]
:00448426 50                      push eax
:00448427 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044842A 8A5104                  mov dl, byte ptr [ecx+04]
:0044842D 52                      push edx
:0044842E 8B4508                  mov eax, dword ptr [ebp+08]
:00448431 33C9                    xor ecx, ecx
:00448433 8A4801                  mov cl, byte ptr [eax+01]
:00448436 8B55F8                  mov edx, dword ptr [ebp-08]
:00448439 81E2FF000000            and edx, 000000FF
:0044843F 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:00448443 50                      push eax
:00448444 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448447 33D2                    xor edx, edx
:00448449 8A11                    mov dl, byte ptr [ecx]
:0044844B 83C202                  add edx, 00000002
:0044844E 52                      push edx
:0044844F E8EB000000              call 0044853F
:00448454 83C414                  add esp, 00000014
:00448457 8A4514                  mov al, byte ptr [ebp+14]
:0044845A 50                      push eax
:0044845B 8A4D10                  mov cl, byte ptr [ebp+10]
:0044845E 51                      push ecx
:0044845F 8B55E8                  mov edx, dword ptr [ebp-18]
:00448462 8A4204                  mov al, byte ptr [edx+04]
:00448465 50                      push eax
:00448466 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448469 33D2                    xor edx, edx
:0044846B 8A5101                  mov dl, byte ptr [ecx+01]
:0044846E 8B45F8                  mov eax, dword ptr [ebp-08]
:00448471 25FF000000              and eax, 000000FF
:00448476 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044847A 51                      push ecx
:0044847B 8B5508                  mov edx, dword ptr [ebp+08]
:0044847E 33C0                    xor eax, eax
:00448480 8A02                    mov al, byte ptr [edx]
:00448482 83E802                  sub eax, 00000002
:00448485 50                      push eax
:00448486 E8B4000000              call 0044853F
:0044848B 83C414                  add esp, 00000014
:0044848E E902FFFFFF              jmp 00448395

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447C14(C), :00447C3F(U), :00447C7A(U), :00447D23(U), :00447E18(U)
|:00447F0D(U), :00447FB6(U), :004480AC(U), :004481A2(U), :00448266(U)
|:0044838A(U), :004483AA(C)
|
:00448493 8B4D14                  mov ecx, dword ptr [ebp+14]
:00448496 81E1FF000000            and ecx, 000000FF
:0044849C 85C9                    test ecx, ecx
:0044849E 7404                    je 004484A4
:004484A0 0CFF                    or al, FF
:004484A2 EB69                    jmp 0044850D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044849E(C)
|
:004484A4 8B15B8044B00            mov edx, dword ptr [004B04B8]
:004484AA C602FF                  mov byte ptr [edx], FF
:004484AD A1B8044B00              mov eax, dword ptr [004B04B8]
:004484B2 83C001                  add eax, 00000001
:004484B5 A3B8044B00              mov dword ptr [004B04B8], eax
:004484BA C745F4A89F4A00          mov [ebp-0C], 004A9FA8
:004484C1 EB09                    jmp 004484CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448508(U)
|
:004484C3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004484C6 83C101                  add ecx, 00000001
:004484C9 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004484C1(U)
|
:004484CC 8B55F4                  mov edx, dword ptr [ebp-0C]
:004484CF 33C0                    xor eax, eax
:004484D1 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004484D3 3DFF000000              cmp eax, 000000FF
:004484D8 7430                    je 0044850A
:004484DA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004484DD 8A11                    mov dl, byte ptr [ecx]
:004484DF 8855EC                  mov byte ptr [ebp-14], dl
:004484E2 8B45EC                  mov eax, dword ptr [ebp-14]
:004484E5 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004484EA 3DFF000000              cmp eax, 000000FF
:004484EF 7417                    je 00448508
:004484F1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004484F4 81E1FF000000            and ecx, 000000FF
:004484FA 33D2                    xor edx, edx
:004484FC 8A15AC044B00            mov dl, byte ptr [004B04AC]
:00448502 3BCA                    cmp ecx, edx
:00448504 7502                    jne 00448508
:00448506 EB02                    jmp 0044850A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004484EF(C), :00448504(C)
|
:00448508 EBB9                    jmp 004484C3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004484D8(C), :00448506(U)
|
:0044850A 8A45EC                  mov al, byte ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447B9A(U), :004484A2(U)
|
:0044850D 8BE5                    mov esp, ebp
:0044850F 5D                      pop ebp
:00448510 C21000                  ret 0010



:00448513 247C4400                DWORD 00447C24
:00448517 447C4400                DWORD 00447C44
:0044851B 7F7C4400                DWORD 00447C7F
:0044851F 287D4400                DWORD 00447D28
:00448523 1D7E4400                DWORD 00447E1D
:00448527 127F4400                DWORD 00447F12
:0044852B BB7F4400                DWORD 00447FBB
:0044852F B1804400                DWORD 004480B1
:00448533 A7814400                DWORD 004481A7
:00448537 6B824400                DWORD 0044826B
:0044853B 8F834400                DWORD 0044838F



* Referenced by a CALL at Addresses:
|:00447BFC   , :00447CA0   , :00447CC9   , :00447CF2   , :00447D1B   
|:00447D73   , :00447DA6   , :00447DD9   , :00447E0B   , :00447E68   
|:00447E9B   , :00447ECE   , :00447F00   , :00447F33   , :00447F5C   
|:00447F85   , :00447FAE   , :00448006   , :00448039   , :0044806C   
|:0044809F   , :004480FC   , :0044812F   , :00448162   , :00448195   
|:004481E3   , :0044820C   , :00448235   , :0044825E   , :004482D7   
|:0044830E   , :00448346   , :0044837D   , :004483E0   , :00448417   
|:0044844F   , :00448486   , :0044879B   , :0044880A   
|
:0044853F 55                      push ebp
:00448540 8BEC                    mov ebp, esp
:00448542 83EC10                  sub esp, 00000010
:00448545 8B4508                  mov eax, dword ptr [ebp+08]
:00448548 25FF000000              and eax, 000000FF
:0044854D 33C9                    xor ecx, ecx
:0044854F 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:00448555 3BC1                    cmp eax, ecx
:00448557 0F8DC8010000            jnl 00448725
:0044855D 8B550C                  mov edx, dword ptr [ebp+0C]
:00448560 81E2FF000000            and edx, 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448520(C)
|
:00448566 33C0                    xor eax, eax
:00448568 A0810A4B00              mov al, byte ptr [004B0A81]
:0044856D 3BD0                    cmp edx, eax
:0044856F 0F8DB0010000            jnl 00448725
:00448575 8B4D14                  mov ecx, dword ptr [ebp+14]
:00448578 81E1FF000000            and ecx, 000000FF
:0044857E 81E180000000            and ecx, 00000080
:00448584 85C9                    test ecx, ecx
:00448586 7567                    jne 004485EF
:00448588 6A00                    push 00000000
:0044858A B930DF4A00              mov ecx, 004ADF30
:0044858F E80AB0FCFF              call 0041359E
:00448594 8B5508                  mov edx, dword ptr [ebp+08]
:00448597 81E2FF000000            and edx, 000000FF
:0044859D 8D841000960000          lea eax, dword ptr [eax+edx+00009600]
:004485A4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004485A7 81E1FF000000            and ecx, 000000FF
:004485AD 33D2                    xor edx, edx
:004485AF 8A15800A4B00            mov dl, byte ptr [004B0A80]
:004485B5 0FAFCA                  imul ecx, edx
:004485B8 8A5510                  mov dl, byte ptr [ebp+10]
:004485BB 881408                  mov byte ptr [eax+ecx], dl
:004485BE 6A00                    push 00000000
:004485C0 B910414A00              mov ecx, 004A4110
:004485C5 E8D4AFFCFF              call 0041359E
:004485CA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004485CD 81E1FF000000            and ecx, 000000FF
:004485D3 03C1                    add eax, ecx
:004485D5 8B550C                  mov edx, dword ptr [ebp+0C]
:004485D8 81E2FF000000            and edx, 000000FF
:004485DE 33C9                    xor ecx, ecx
:004485E0 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:004485E6 0FAFD1                  imul edx, ecx
:004485E9 8A4D10                  mov cl, byte ptr [ebp+10]
:004485EC 880C10                  mov byte ptr [eax+edx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448586(C)
|
:004485EF 8B5518                  mov edx, dword ptr [ebp+18]
:004485F2 81E2FF000000            and edx, 000000FF
:004485F8 85D2                    test edx, edx
:004485FA 7437                    je 00448633
:004485FC 68000F0000              push 00000F00
:00448601 B910414A00              mov ecx, 004A4110
:00448606 E893AFFCFF              call 0041359E
:0044860B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044860E 81E1FF000000            and ecx, 000000FF
:00448614 03C1                    add eax, ecx
:00448616 8B550C                  mov edx, dword ptr [ebp+0C]
:00448619 81E2FF000000            and edx, 000000FF
:0044861F 33C9                    xor ecx, ecx
:00448621 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:00448627 0FAFD1                  imul edx, ecx
:0044862A C6041001                mov byte ptr [eax+edx], 01
:0044862E E9F2000000              jmp 00448725

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004485FA(C)
|
:00448633 8A550C                  mov dl, byte ptr [ebp+0C]
:00448636 52                      push edx
:00448637 8A4508                  mov al, byte ptr [ebp+08]
:0044863A 50                      push eax
:0044863B 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044863E E83D72FEFF              call 0042F880
:00448643 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00448646 51                      push ecx
:00448647 E8C5F2FFFF              call 00447911
:0044864C 83C404                  add esp, 00000004
:0044864F 8845FC                  mov byte ptr [ebp-04], al
:00448652 8B55FC                  mov edx, dword ptr [ebp-04]
:00448655 81E2FF000000            and edx, 000000FF
:0044865B 81FAFF000000            cmp edx, 000000FF
:00448661 0F84BE000000            je 00448725
:00448667 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044866A 81E1FF000000            and ecx, 000000FF
:00448670 6BC924                  imul ecx, 00000024
:00448673 81C108F54A00            add ecx, 004AF508
:00448679 E8526CFCFF              call 0040F2D0
:0044867E 8945F4                  mov dword ptr [ebp-0C], eax
:00448681 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00448684 81E1FF000000            and ecx, 000000FF
:0044868A 6BC924                  imul ecx, 00000024
:0044868D 81C108F54A00            add ecx, 004AF508
:00448693 E8386CFCFF              call 0040F2D0
:00448698 8945F0                  mov dword ptr [ebp-10], eax
:0044869B 8B4514                  mov eax, dword ptr [ebp+14]
:0044869E 25FF000000              and eax, 000000FF
:004486A3 83E001                  and eax, 00000001
:004486A6 85C0                    test eax, eax
:004486A8 743F                    je 004486E9
:004486AA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004486AD 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:004486B0 7535                    jne 004486E7
:004486B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004486B5 81E1FF000000            and ecx, 000000FF
:004486BB 6BC924                  imul ecx, 00000024
:004486BE 81C108F54A00            add ecx, 004AF508
:004486C4 E8DD6DFEFF              call 0042F4A6
:004486C9 85C0                    test eax, eax
:004486CB 741A                    je 004486E7
:004486CD 8B15B8044B00            mov edx, dword ptr [004B04B8]
:004486D3 8A45FC                  mov al, byte ptr [ebp-04]
:004486D6 8802                    mov byte ptr [edx], al
:004486D8 8B0DB8044B00            mov ecx, dword ptr [004B04B8]
:004486DE 83C101                  add ecx, 00000001
:004486E1 890DB8044B00            mov dword ptr [004B04B8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004486B0(C), :004486CB(C)
|
:004486E7 EB3C                    jmp 00448725

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004486A8(C)
|
:004486E9 8B55F4                  mov edx, dword ptr [ebp-0C]
:004486EC 3B55F0                  cmp edx, dword ptr [ebp-10]
:004486EF 7434                    je 00448725
:004486F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004486F4 81E1FF000000            and ecx, 000000FF
:004486FA 6BC924                  imul ecx, 00000024
:004486FD 81C108F54A00            add ecx, 004AF508
:00448703 E89E6DFEFF              call 0042F4A6
:00448708 85C0                    test eax, eax
:0044870A 7419                    je 00448725
:0044870C A1B8044B00              mov eax, dword ptr [004B04B8]
:00448711 8A4DFC                  mov cl, byte ptr [ebp-04]
:00448714 8808                    mov byte ptr [eax], cl
:00448716 8B15B8044B00            mov edx, dword ptr [004B04B8]
:0044871C 83C201                  add edx, 00000001
:0044871F 8915B8044B00            mov dword ptr [004B04B8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448557(C), :0044856F(C), :0044862E(U), :00448661(C), :004486E7(U)
|:004486EF(C), :0044870A(C)
|
:00448725 8BE5                    mov esp, ebp
:00448727 5D                      pop ebp
:00448728 C3                      ret



* Referenced by a CALL at Addresses:
|:00447C37   , :00447C57   
|
:00448729 55                      push ebp
:0044872A 8BEC                    mov ebp, esp
:0044872C 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044872F 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00448734 68FF000000              push 000000FF
:00448739 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044873C E83F71FEFF              call 0042F880
:00448741 C645F800                mov [ebp-08], 00
:00448745 EB08                    jmp 0044874F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004487A3(U)
|
:00448747 8A45F8                  mov al, byte ptr [ebp-08]
:0044874A 0401                    add al, 01
:0044874C 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448745(U)
|
:0044874F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448752 81E1FF000000            and ecx, 000000FF
:00448758 83F904                  cmp ecx, 00000004
:0044875B 7D48                    jge 004487A5
:0044875D 8A55F8                  mov dl, byte ptr [ebp-08]
:00448760 52                      push edx
:00448761 8B4508                  mov eax, dword ptr [ebp+08]
:00448764 50                      push eax
:00448765 E89EF2FFFF              call 00447A08
:0044876A 83C408                  add esp, 00000008
:0044876D 50                      push eax
:0044876E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00448771 E81A70FEFF              call 0042F790
:00448776 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00448779 81E1FF000000            and ecx, 000000FF
:0044877F 81F9FF000000            cmp ecx, 000000FF
:00448785 741C                    je 004487A3
:00448787 8A5510                  mov dl, byte ptr [ebp+10]
:0044878A 52                      push edx
:0044878B 8A450C                  mov al, byte ptr [ebp+0C]
:0044878E 50                      push eax
:0044878F 8A4D14                  mov cl, byte ptr [ebp+14]
:00448792 51                      push ecx
:00448793 8A55FD                  mov dl, byte ptr [ebp-03]
:00448796 52                      push edx
:00448797 8A45FC                  mov al, byte ptr [ebp-04]
:0044879A 50                      push eax
:0044879B E89FFDFFFF              call 0044853F
:004487A0 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448785(C)
|
:004487A3 EBA2                    jmp 00448747

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044875B(C)
|
:004487A5 8BE5                    mov esp, ebp
:004487A7 5D                      pop ebp
:004487A8 C3                      ret



* Referenced by a CALL at Addresses:
|:00447C72   , :004481BA   , :0044827E   
|
:004487A9 55                      push ebp
:004487AA 8BEC                    mov ebp, esp
:004487AC 51                      push ecx
:004487AD C645FC00                mov [ebp-04], 00
:004487B1 EB08                    jmp 004487BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448812(U)
|
:004487B3 8A45FC                  mov al, byte ptr [ebp-04]
:004487B6 0401                    add al, 01
:004487B8 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004487B1(U)
|
:004487BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004487BE 81E1FF000000            and ecx, 000000FF
:004487C4 83F904                  cmp ecx, 00000004
:004487C7 7D4B                    jge 00448814
:004487C9 8A5510                  mov dl, byte ptr [ebp+10]
:004487CC 52                      push edx
:004487CD 8A450C                  mov al, byte ptr [ebp+0C]
:004487D0 50                      push eax
:004487D1 8A4D14                  mov cl, byte ptr [ebp+14]
:004487D4 51                      push ecx
:004487D5 8B5508                  mov edx, dword ptr [ebp+08]
:004487D8 33C0                    xor eax, eax
:004487DA 8A4201                  mov al, byte ptr [edx+01]
:004487DD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004487E0 81E1FF000000            and ecx, 000000FF
:004487E6 D1E1                    shl ecx, 1
:004487E8 03048D5C914700          add eax, dword ptr [4*ecx+0047915C]
:004487EF 50                      push eax
:004487F0 8B5508                  mov edx, dword ptr [ebp+08]
:004487F3 33C0                    xor eax, eax
:004487F5 8A02                    mov al, byte ptr [edx]
:004487F7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004487FA 81E1FF000000            and ecx, 000000FF
:00448800 D1E1                    shl ecx, 1
:00448802 03048D58914700          add eax, dword ptr [4*ecx+00479158]
:00448809 50                      push eax
:0044880A E830FDFFFF              call 0044853F
:0044880F 83C414                  add esp, 00000014
:00448812 EB9F                    jmp 004487B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004487C7(C)
|
:00448814 8BE5                    mov esp, ebp
:00448816 5D                      pop ebp
:00448817 C3                      ret



* Referenced by a CALL at Addresses:
|:00448A08   , :0044B9CB   , :0044BCFE   , :0044BD2E   , :0044BDB3   
|:0044C779   , :00455E94   
|
:00448818 55                      push ebp
:00448819 8BEC                    mov ebp, esp
:0044881B 83EC18                  sub esp, 00000018
:0044881E 894DEC                  mov dword ptr [ebp-14], ecx
:00448821 8B45EC                  mov eax, dword ptr [ebp-14]
:00448824 8B08                    mov ecx, dword ptr [eax]
:00448826 6BC970                  imul ecx, 00000070
:00448829 81C198224900            add ecx, 00492298
:0044882F 894DF4                  mov dword ptr [ebp-0C], ecx
:00448832 C745F800000000          mov [ebp-08], 00000000
:00448839 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044883C E88F6AFCFF              call 0040F2D0
:00448841 F7D8                    neg eax
:00448843 1BC0                    sbb eax, eax
:00448845 83C002                  add eax, 00000002
:00448848 8845FC                  mov byte ptr [ebp-04], al
:0044884B 6A64                    push 00000064
:0044884D E863980100              call 004620B5
:00448852 83C404                  add esp, 00000004
:00448855 83F832                  cmp eax, 00000032
:00448858 1BD2                    sbb edx, edx
:0044885A F7DA                    neg edx
:0044885C 8955F0                  mov dword ptr [ebp-10], edx
:0044885F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448862 E809C0FBFF              call 00404870
:00448867 85C0                    test eax, eax
:00448869 7504                    jne 0044886F
:0044886B 33C0                    xor eax, eax
:0044886D EB6D                    jmp 004488DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448869(C)
|
:0044886F 8A45FC                  mov al, byte ptr [ebp-04]
:00448872 50                      push eax
:00448873 B9180A4B00              mov ecx, 004B0A18
:00448878 E876FD0000              call 004585F3
:0044887D 25FF000000              and eax, 000000FF
:00448882 83F805                  cmp eax, 00000005
:00448885 7D0A                    jge 00448891
:00448887 837DF000                cmp dword ptr [ebp-10], 00000000
:0044888B 7404                    je 00448891
:0044888D 33C0                    xor eax, eax
:0044888F EB4B                    jmp 004488DC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448885(C), :0044888B(C)
|
:00448891 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448894 8139C8000000            cmp dword ptr [ecx], 000000C8
:0044889A 7718                    ja 004488B4
:0044889C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044889F E83C9CFBFF              call 004024E0
:004488A4 D1E0                    shl eax, 1
:004488A6 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004488A8 B905000000              mov ecx, 00000005
:004488AD F7F1                    div ecx
:004488AF 8945E8                  mov dword ptr [ebp-18], eax
:004488B2 EB14                    jmp 004488C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044889A(C)
|
:004488B4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004488B7 E8249CFBFF              call 004024E0
:004488BC 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004488BE B905000000              mov ecx, 00000005
:004488C3 F7F1                    div ecx
:004488C5 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004488B2(U)
|
:004488C8 8B55E8                  mov edx, dword ptr [ebp-18]
:004488CB 8955F8                  mov dword ptr [ebp-08], edx
:004488CE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004488D1 E89ABFFBFF              call 00404870
:004488D6 3945F8                  cmp dword ptr [ebp-08], eax
:004488D9 1BC0                    sbb eax, eax
:004488DB 40                      inc eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044886D(U), :0044888F(U)
|
:004488DC 8BE5                    mov esp, ebp
:004488DE 5D                      pop ebp
:004488DF C3                      ret



* Referenced by a CALL at Address:
|:0044A0D0   
|
:004488E0 55                      push ebp
:004488E1 8BEC                    mov ebp, esp
:004488E3 83EC20                  sub esp, 00000020
:004488E6 56                      push esi
:004488E7 894DE4                  mov dword ptr [ebp-1C], ecx
:004488EA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004488ED E8E51FFEFF              call 0042A8D7
:004488F2 8845F8                  mov byte ptr [ebp-08], al
:004488F5 C605A4044B0000          mov byte ptr [004B04A4], 00

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004488FC 68FF000000              push 000000FF
:00448901 33C0                    xor eax, eax
:00448903 A0800A4B00              mov al, byte ptr [004B0A80]
:00448908 33C9                    xor ecx, ecx
:0044890A 8A0D810A4B00            mov cl, byte ptr [004B0A81]
:00448910 0FAFC1                  imul eax, ecx
:00448913 50                      push eax
:00448914 6A00                    push 00000000
:00448916 B910414A00              mov ecx, 004A4110
:0044891B E87EACFCFF              call 0041359E
:00448920 50                      push eax
:00448921 E8229F0100              call 00462848
:00448926 83C40C                  add esp, 0000000C
:00448929 C645FC00                mov [ebp-04], 00
:0044892D EB09                    jmp 00448938

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004489D0(U)
|
:0044892F 8A55FC                  mov dl, byte ptr [ebp-04]
:00448932 80C201                  add dl, 01
:00448935 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044892D(U)
|
:00448938 8B45FC                  mov eax, dword ptr [ebp-04]
:0044893B 25FF000000              and eax, 000000FF
:00448940 83F85A                  cmp eax, 0000005A
:00448943 0F8D8C000000            jnl 004489D5
:00448949 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044894C 81E1FF000000            and ecx, 000000FF
:00448952 6BC924                  imul ecx, 00000024
:00448955 81C108F54A00            add ecx, 004AF508
:0044895B E87069FCFF              call 0040F2D0
:00448960 8BF0                    mov esi, eax
:00448962 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00448965 E86669FCFF              call 0040F2D0
:0044896A 3BF0                    cmp esi, eax
:0044896C 7462                    je 004489D0
:0044896E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00448971 81E1FF000000            and ecx, 000000FF
:00448977 6BC924                  imul ecx, 00000024
:0044897A 81C108F54A00            add ecx, 004AF508
:00448980 E84B6FFEFF              call 0042F8D0
:00448985 25FF000000              and eax, 000000FF
:0044898A 83F802                  cmp eax, 00000002
:0044898D 7541                    jne 004489D0
:0044898F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00448992 81E1FF000000            and ecx, 000000FF
:00448998 6BC924                  imul ecx, 00000024
:0044899B 81C108F54A00            add ecx, 004AF508
:004489A1 E8FA09FEFF              call 004293A0
:004489A6 668B08                  mov cx, word ptr [eax]
:004489A9 66894DF4                mov word ptr [ebp-0C], cx
:004489AD 6A00                    push 00000000
:004489AF 6A00                    push 00000000
:004489B1 8A55F8                  mov dl, byte ptr [ebp-08]
:004489B4 52                      push edx
:004489B5 8D45F4                  lea eax, dword ptr [ebp-0C]
:004489B8 50                      push eax
:004489B9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004489BC 81E1FF000000            and ecx, 000000FF
:004489C2 6BC924                  imul ecx, 00000024
:004489C5 81C108F54A00            add ecx, 004AF508
:004489CB E89AF1FFFF              call 00447B6A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044896C(C), :0044898D(C)
|
:004489D0 E95AFFFFFF              jmp 0044892F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448943(C)
|
:004489D5 6A00                    push 00000000
:004489D7 33C9                    xor ecx, ecx
:004489D9 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:004489DF 33D2                    xor edx, edx
:004489E1 8A15810A4B00            mov dl, byte ptr [004B0A81]
:004489E7 0FAFCA                  imul ecx, edx
:004489EA 51                      push ecx
:004489EB 6A00                    push 00000000
:004489ED B910414A00              mov ecx, 004A4110
:004489F2 E8A7ABFCFF              call 0041359E
:004489F7 0580070000              add eax, 00000780
:004489FC 50                      push eax
:004489FD E8469E0100              call 00462848
:00448A02 83C40C                  add esp, 0000000C
:00448A05 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00448A08 E80BFEFFFF              call 00448818
:00448A0D 85C0                    test eax, eax
:00448A0F 0F84D7000000            je 00448AEC
:00448A15 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00448A18 E8D36EFEFF              call 0042F8F0
:00448A1D 25FF000000              and eax, 000000FF
:00448A22 83F802                  cmp eax, 00000002
:00448A25 0F84C1000000            je 00448AEC
:00448A2B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00448A2E E8BD6EFEFF              call 0042F8F0
:00448A33 25FF000000              and eax, 000000FF
:00448A38 83F804                  cmp eax, 00000004
:00448A3B 0F84AB000000            je 00448AEC
:00448A41 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00448A44 E867EDFBFF              call 004077B0
:00448A49 C745EC00000000          mov [ebp-14], 00000000
:00448A50 EB09                    jmp 00448A5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448AD8(U)
|
:00448A52 8B45EC                  mov eax, dword ptr [ebp-14]
:00448A55 83C001                  add eax, 00000001
:00448A58 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A50(U)
|
:00448A5B 33C9                    xor ecx, ecx
:00448A5D 8A0D810A4B00            mov cl, byte ptr [004B0A81]
:00448A63 394DEC                  cmp dword ptr [ebp-14], ecx
:00448A66 7375                    jnb 00448ADD
:00448A68 C745E800000000          mov [ebp-18], 00000000
:00448A6F EB09                    jmp 00448A7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448AD6(U)
|
:00448A71 8B55E8                  mov edx, dword ptr [ebp-18]
:00448A74 83C201                  add edx, 00000001
:00448A77 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A6F(U)
|
:00448A7A 33C0                    xor eax, eax
:00448A7C A0800A4B00              mov al, byte ptr [004B0A80]
:00448A81 3945E8                  cmp dword ptr [ebp-18], eax
:00448A84 7352                    jnb 00448AD8
:00448A86 8A4DE8                  mov cl, byte ptr [ebp-18]
:00448A89 884DF0                  mov byte ptr [ebp-10], cl
:00448A8C 8A55EC                  mov dl, byte ptr [ebp-14]
:00448A8F 8855F1                  mov byte ptr [ebp-0F], dl
:00448A92 8D45F0                  lea eax, dword ptr [ebp-10]
:00448A95 50                      push eax
:00448A96 E8EEECFFFF              call 00447789
:00448A9B 83C404                  add esp, 00000004
:00448A9E 85C0                    test eax, eax
:00448AA0 7434                    je 00448AD6
:00448AA2 6A00                    push 00000000
:00448AA4 B910414A00              mov ecx, 004A4110
:00448AA9 E8F0AAFCFF              call 0041359E
:00448AAE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448AB1 8D940880070000          lea edx, dword ptr [eax+ecx+00000780]
:00448AB8 33C0                    xor eax, eax
:00448ABA A0800A4B00              mov al, byte ptr [004B0A80]
:00448ABF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448AC2 0FAFC8                  imul ecx, eax
:00448AC5 03D1                    add edx, ecx
:00448AC7 8955E0                  mov dword ptr [ebp-20], edx
:00448ACA 8B55E0                  mov edx, dword ptr [ebp-20]
:00448ACD 8A02                    mov al, byte ptr [edx]
:00448ACF 0414                    add al, 14
:00448AD1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00448AD4 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448AA0(C)
|
:00448AD6 EB99                    jmp 00448A71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A84(C)
|
:00448AD8 E975FFFFFF              jmp 00448A52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A66(C)
|
:00448ADD 8A15A4044B00            mov dl, byte ptr [004B04A4]
:00448AE3 80CA01                  or dl, 01
:00448AE6 8815A4044B00            mov byte ptr [004B04A4], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448A0F(C), :00448A25(C), :00448A3B(C)
|
:00448AEC C605CC044B0000          mov byte ptr [004B04CC], 00
:00448AF3 C605AC044B00FF          mov byte ptr [004B04AC], FF
:00448AFA C605A0044B00FF          mov byte ptr [004B04A0], FF
:00448B01 C605C8044B00FF          mov byte ptr [004B04C8], FF
:00448B08 5E                      pop esi
:00448B09 8BE5                    mov esp, ebp
:00448B0B 5D                      pop ebp
:00448B0C C20400                  ret 0004



* Referenced by a CALL at Address:
|:0044A629   
|
:00448B0F 55                      push ebp
:00448B10 8BEC                    mov ebp, esp
:00448B12 83EC18                  sub esp, 00000018
:00448B15 894DE8                  mov dword ptr [ebp-18], ecx
:00448B18 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00448B1B E890ECFBFF              call 004077B0
:00448B20 C645FC00                mov [ebp-04], 00
:00448B24 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448B27 E8A46DFEFF              call 0042F8D0
:00448B2C 25FF000000              and eax, 000000FF
:00448B31 83F802                  cmp eax, 00000002
:00448B34 7526                    jne 00448B5C
:00448B36 33C0                    xor eax, eax
:00448B38 A0A0044B00              mov al, byte ptr [004B04A0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00448B3D 3DFF000000              cmp eax, 000000FF
:00448B42 7418                    je 00448B5C
:00448B44 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448B47 83C105                  add ecx, 00000005
:00448B4A 51                      push ecx
:00448B4B 68A0044B00              push 004B04A0
:00448B50 E84B71FEFF              call 0042FCA0
:00448B55 83C408                  add esp, 00000008
:00448B58 85C0                    test eax, eax
:00448B5A 7405                    je 00448B61

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448B34(C), :00448B42(C)
|
:00448B5C E926010000              jmp 00448C87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448B5A(C)
|
:00448B61 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00448B63 68FF000000              push 000000FF
:00448B68 68A0044B00              push 004B04A0
:00448B6D 8B55E8                  mov edx, dword ptr [ebp-18]
:00448B70 83C205                  add edx, 00000005
:00448B73 52                      push edx
:00448B74 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448B77 E824080000              call 004493A0
:00448B7C 8945F0                  mov dword ptr [ebp-10], eax
:00448B7F 8B45F0                  mov eax, dword ptr [ebp-10]
:00448B82 33C9                    xor ecx, ecx
:00448B84 8A08                    mov cl, byte ptr [eax]
:00448B86 81F9FF000000            cmp ecx, 000000FF
:00448B8C 7505                    jne 00448B93
:00448B8E E9F4000000              jmp 00448C87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448B8C(C)
|
:00448B93 6A00                    push 00000000
:00448B95 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448B98 E8FA47FEFF              call 0042D397
:00448B9D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448BA0 E86B39FEFF              call 0042C510
:00448BA5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448BA8 E8F968FEFF              call 0042F4A6
:00448BAD 85C0                    test eax, eax
:00448BAF 750C                    jne 00448BBD

* Possible Reference to String Resource ID=00008: ""
                                  |
:00448BB1 6A08                    push 00000008
:00448BB3 B9800D4B00              mov ecx, 004B0D80
:00448BB8 E8EC8F0100              call 00461BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448BAF(C)
|
:00448BBD C745F400000000          mov [ebp-0C], 00000000
:00448BC4 EB09                    jmp 00448BCF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448C23(U), :00448C70(U)
|
:00448BC6 8B55F4                  mov edx, dword ptr [ebp-0C]
:00448BC9 83C201                  add edx, 00000001
:00448BCC 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448BC4(U)
|
:00448BCF 8B45E8                  mov eax, dword ptr [ebp-18]
:00448BD2 83C005                  add eax, 00000005
:00448BD5 50                      push eax
:00448BD6 68A0044B00              push 004B04A0
:00448BDB E8C070FEFF              call 0042FCA0
:00448BE0 83C408                  add esp, 00000008
:00448BE3 85C0                    test eax, eax
:00448BE5 0F858A000000            jne 00448C75
:00448BEB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00448BEE 034DF4                  add ecx, dword ptr [ebp-0C]
:00448BF1 8A11                    mov dl, byte ptr [ecx]
:00448BF3 8855F8                  mov byte ptr [ebp-08], dl
:00448BF6 8A45F8                  mov al, byte ptr [ebp-08]
:00448BF9 50                      push eax
:00448BFA 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448BFD 83C105                  add ecx, 00000005
:00448C00 51                      push ecx
:00448C01 E802EEFFFF              call 00447A08
:00448C06 83C408                  add esp, 00000008
:00448C09 50                      push eax
:00448C0A 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00448C0D E87E6BFEFF              call 0042F790
:00448C12 8B55EC                  mov edx, dword ptr [ebp-14]
:00448C15 81E2FF000000            and edx, 000000FF
:00448C1B 81FAFF000000            cmp edx, 000000FF
:00448C21 7502                    jne 00448C25
:00448C23 EBA1                    jmp 00448BC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448C21(C)
|
:00448C25 8A45F8                  mov al, byte ptr [ebp-08]
:00448C28 50                      push eax
:00448C29 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448C2C E8D34CFEFF              call 0042D904
:00448C31 8A4DF8                  mov cl, byte ptr [ebp-08]
:00448C34 51                      push ecx
:00448C35 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448C38 E8A30FFFFF              call 00439BE0
:00448C3D 8D55EC                  lea edx, dword ptr [ebp-14]
:00448C40 52                      push edx
:00448C41 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448C44 83C105                  add ecx, 00000005
:00448C47 E8446BFEFF              call 0042F790

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448C4C 6A04                    push 00000004
:00448C4E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448C51 E89A6EFEFF              call 0042FAF0
:00448C56 85C0                    test eax, eax
:00448C58 7516                    jne 00448C70
:00448C5A 8B45FC                  mov eax, dword ptr [ebp-04]
:00448C5D 25FF000000              and eax, 000000FF
:00448C62 83F864                  cmp eax, 00000064
:00448C65 7C09                    jl 00448C70
:00448C67 8A4DFC                  mov cl, byte ptr [ebp-04]
:00448C6A 80C101                  add cl, 01
:00448C6D 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448C58(C), :00448C65(C)
|
:00448C70 E951FFFFFF              jmp 00448BC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448BE5(C)
|
:00448C75 6A40                    push 00000040
:00448C77 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448C7A E89A67FEFF              call 0042F419
:00448C7F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448C82 E86038FEFF              call 0042C4E7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448B5C(U), :00448B8E(U)
|
:00448C87 8BE5                    mov esp, ebp
:00448C89 5D                      pop ebp
:00448C8A C3                      ret



* Referenced by a CALL at Address:
|:0044CA89   
|
:00448C8B 55                      push ebp
:00448C8C 8BEC                    mov ebp, esp
:00448C8E 83EC14                  sub esp, 00000014
:00448C91 894DEC                  mov dword ptr [ebp-14], ecx
:00448C94 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448C97 E83B1CFEFF              call 0042A8D7
:00448C9C 8845F8                  mov byte ptr [ebp-08], al
:00448C9F C645FC00                mov [ebp-04], 00
:00448CA3 C645F400                mov [ebp-0C], 00
:00448CA7 C605B4044B00FF          mov byte ptr [004B04B4], FF
:00448CAE 6A00                    push 00000000
:00448CB0 6880000000              push 00000080
:00448CB5 8A45F8                  mov al, byte ptr [ebp-08]
:00448CB8 50                      push eax
:00448CB9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448CBC 51                      push ecx
:00448CBD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448CC0 E8A5EEFFFF              call 00447B6A
:00448CC5 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00448CCA 3DFF000000              cmp eax, 000000FF
:00448CCF 746C                    je 00448D3D
:00448CD1 C745F0A89F4A00          mov [ebp-10], 004A9FA8
:00448CD8 EB09                    jmp 00448CE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448D3B(U)
|
:00448CDA 8B55F0                  mov edx, dword ptr [ebp-10]
:00448CDD 83C201                  add edx, 00000001
:00448CE0 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448CD8(U)
|
:00448CE3 8B45F0                  mov eax, dword ptr [ebp-10]
:00448CE6 33C9                    xor ecx, ecx
:00448CE8 8A08                    mov cl, byte ptr [eax]
:00448CEA 81F9FF000000            cmp ecx, 000000FF
:00448CF0 744B                    je 00448D3D
:00448CF2 8B55F0                  mov edx, dword ptr [ebp-10]
:00448CF5 33C0                    xor eax, eax
:00448CF7 8A02                    mov al, byte ptr [edx]
:00448CF9 83F85A                  cmp eax, 0000005A
:00448CFC 7D3F                    jge 00448D3D
:00448CFE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448D01 668B11                  mov dx, word ptr [ecx]
:00448D04 52                      push edx
:00448D05 8B45F0                  mov eax, dword ptr [ebp-10]
:00448D08 8A08                    mov cl, byte ptr [eax]
:00448D0A 51                      push ecx
:00448D0B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448D0E E833000000              call 00448D46
:00448D13 8845FC                  mov byte ptr [ebp-04], al
:00448D16 8B55F4                  mov edx, dword ptr [ebp-0C]
:00448D19 81E2FF000000            and edx, 000000FF
:00448D1F 8B45FC                  mov eax, dword ptr [ebp-04]
:00448D22 25FF000000              and eax, 000000FF
:00448D27 3BD0                    cmp edx, eax
:00448D29 7D10                    jge 00448D3B
:00448D2B 8A4DFC                  mov cl, byte ptr [ebp-04]
:00448D2E 884DF4                  mov byte ptr [ebp-0C], cl
:00448D31 8B55F0                  mov edx, dword ptr [ebp-10]
:00448D34 8A02                    mov al, byte ptr [edx]
:00448D36 A2B4044B00              mov byte ptr [004B04B4], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448D29(C)
|
:00448D3B EB9D                    jmp 00448CDA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448CCF(C), :00448CF0(C), :00448CFC(C)
|
:00448D3D 8A45F4                  mov al, byte ptr [ebp-0C]
:00448D40 8BE5                    mov esp, ebp
:00448D42 5D                      pop ebp
:00448D43 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00448D0E   
|
:00448D46 55                      push ebp
:00448D47 8BEC                    mov ebp, esp
:00448D49 83EC34                  sub esp, 00000034
:00448D4C 56                      push esi
:00448D4D 894DCC                  mov dword ptr [ebp-34], ecx
:00448D50 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448D53 81E1FF000000            and ecx, 000000FF
:00448D59 6BC924                  imul ecx, 00000024
:00448D5C 81C108F54A00            add ecx, 004AF508
:00448D62 E86969FEFF              call 0042F6D0
:00448D67 8945F4                  mov dword ptr [ebp-0C], eax
:00448D6A C745F000000000          mov [ebp-10], 00000000
:00448D71 B9180A4B00              mov ecx, 004B0A18
:00448D76 E873F60000              call 004583EE
:00448D7B 8845F8                  mov byte ptr [ebp-08], al
:00448D7E 8B45CC                  mov eax, dword ptr [ebp-34]
:00448D81 8B08                    mov ecx, dword ptr [eax]
:00448D83 6BC970                  imul ecx, 00000070
:00448D86 81C198224900            add ecx, 00492298
:00448D8C E85FBAFBFF              call 004047F0
:00448D91 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00448D96 3DFF000000              cmp eax, 000000FF
:00448D9B 7507                    jne 00448DA4
:00448D9D 33C0                    xor eax, eax
:00448D9F E9A1020000              jmp 00449045

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448D9B(C)
|
:00448DA4 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448DA7 E8A46FFEFF              call 0042FD50
:00448DAC 25FF000000              and eax, 000000FF
:00448DB1 83F803                  cmp eax, 00000003
:00448DB4 7412                    je 00448DC8
:00448DB6 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448DB9 E8926FFEFF              call 0042FD50
:00448DBE 25FF000000              and eax, 000000FF
:00448DC3 83F804                  cmp eax, 00000004
:00448DC6 7523                    jne 00448DEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448DB4(C)
|
:00448DC8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448DCB 81E1FF000000            and ecx, 000000FF
:00448DD1 83F902                  cmp ecx, 00000002
:00448DD4 740E                    je 00448DE4
:00448DD6 8B55F8                  mov edx, dword ptr [ebp-08]
:00448DD9 81E2FF000000            and edx, 000000FF
:00448DDF 83FA03                  cmp edx, 00000003
:00448DE2 7507                    jne 00448DEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448DD4(C)
|
:00448DE4 33C0                    xor eax, eax
:00448DE6 E95A020000              jmp 00449045

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448DC6(C), :00448DE2(C)
|
:00448DEB 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448DEE E87D6FFEFF              call 0042FD70
:00448DF3 25FF000000              and eax, 000000FF
:00448DF8 85C0                    test eax, eax
:00448DFA 7407                    je 00448E03
:00448DFC 33C0                    xor eax, eax
:00448DFE E942020000              jmp 00449045

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448DFA(C)
|
:00448E03 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448E06 E8456FFEFF              call 0042FD50
:00448E0B 25FF000000              and eax, 000000FF
:00448E10 83F804                  cmp eax, 00000004
:00448E13 751D                    jne 00448E32
:00448E15 8D450C                  lea eax, dword ptr [ebp+0C]
:00448E18 50                      push eax
:00448E19 E861EBFFFF              call 0044797F
:00448E1E 83C404                  add esp, 00000004
:00448E21 25FF000000              and eax, 000000FF
:00448E26 83F80D                  cmp eax, 0000000D
:00448E29 7507                    jne 00448E32
:00448E2B 33C0                    xor eax, eax
:00448E2D E913020000              jmp 00449045

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448E13(C), :00448E29(C)
|
:00448E32 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448E35 81E1FF000000            and ecx, 000000FF
:00448E3B 81F9FF000000            cmp ecx, 000000FF
:00448E41 0F841F010000            je 00448F66
:00448E47 8B5508                  mov edx, dword ptr [ebp+08]
:00448E4A 81E2FF000000            and edx, 000000FF
:00448E50 83FA5A                  cmp edx, 0000005A
:00448E53 0F8D0D010000            jnl 00448F66
:00448E59 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448E5C 81E1FF000000            and ecx, 000000FF
:00448E62 6BC924                  imul ecx, 00000024
:00448E65 81C108F54A00            add ecx, 004AF508
:00448E6B E86064FCFF              call 0040F2D0
:00448E70 8BF0                    mov esi, eax
:00448E72 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448E75 E85664FCFF              call 0040F2D0
:00448E7A 3BF0                    cmp esi, eax
:00448E7C 0F84E4000000            je 00448F66
:00448E82 8B45F4                  mov eax, dword ptr [ebp-0C]
:00448E85 6BC070                  imul eax, 00000070
:00448E88 0598224900              add eax, 00492298
:00448E8D 8945EC                  mov dword ptr [ebp-14], eax
:00448E90 6A00                    push 00000000
:00448E92 6A00                    push 00000000
:00448E94 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448E97 51                      push ecx
:00448E98 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448E9B E8E11FFEFF              call 0042AE81
:00448EA0 8945E8                  mov dword ptr [ebp-18], eax
:00448EA3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448EA6 81E1FF000000            and ecx, 000000FF
:00448EAC 6BC924                  imul ecx, 00000024
:00448EAF 81C108F54A00            add ecx, 004AF508
:00448EB5 E8B6B9FBFF              call 00404870
:00448EBA 3945E8                  cmp dword ptr [ebp-18], eax
:00448EBD 720C                    jb 00448ECB
:00448EBF C745F050000000          mov [ebp-10], 00000050
:00448EC6 E99B000000              jmp 00448F66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448EBD(C)
|
:00448ECB 8B75E8                  mov esi, dword ptr [ebp-18]
:00448ECE 6BF60A                  imul esi, 0000000A
:00448ED1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448ED4 E80796FBFF              call 004024E0
:00448ED9 8BC8                    mov ecx, eax
:00448EDB 8BC6                    mov eax, esi
:00448EDD 33D2                    xor edx, edx
:00448EDF F7F1                    div ecx
:00448EE1 83F801                  cmp eax, 00000001
:00448EE4 7209                    jb 00448EEF

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00448EE6 C745F010000000          mov [ebp-10], 00000010
:00448EED EB77                    jmp 00448F66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448EE4(C)
|
:00448EEF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448EF2 81E1FF000000            and ecx, 000000FF
:00448EF8 6BC924                  imul ecx, 00000024
:00448EFB 81C108F54A00            add ecx, 004AF508
:00448F01 E86AB9FBFF              call 00404870
:00448F06 8BF0                    mov esi, eax
:00448F08 6BF664                  imul esi, 00000064
:00448F0B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00448F0E 6BC970                  imul ecx, 00000070
:00448F11 81C198224900            add ecx, 00492298
:00448F17 E8C495FBFF              call 004024E0
:00448F1C 8BC8                    mov ecx, eax
:00448F1E 8BC6                    mov eax, esi
:00448F20 33D2                    xor edx, edx
:00448F22 F7F1                    div ecx
:00448F24 83F828                  cmp eax, 00000028
:00448F27 7709                    ja 00448F32

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00448F29 C745F010000000          mov [ebp-10], 00000010
:00448F30 EB34                    jmp 00448F66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448F27(C)
|
:00448F32 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448F35 E8B669FEFF              call 0042F8F0
:00448F3A 25FF000000              and eax, 000000FF
:00448F3F 83F801                  cmp eax, 00000001
:00448F42 751B                    jne 00448F5F
:00448F44 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448F47 E89468FEFF              call 0042F7E0
:00448F4C 25FF000000              and eax, 000000FF
:00448F51 83F80A                  cmp eax, 0000000A
:00448F54 7409                    je 00448F5F

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00448F56 C745F00A000000          mov [ebp-10], 0000000A
:00448F5D EB07                    jmp 00448F66

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448F42(C), :00448F54(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00448F5F C745F002000000          mov [ebp-10], 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448E41(C), :00448E53(C), :00448E7C(C), :00448EC6(U), :00448EED(U)
|:00448F30(U), :00448F5D(U)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00448F66 6A10                    push 00000010
:00448F68 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448F6B 81E1FF000000            and ecx, 000000FF
:00448F71 6BC924                  imul ecx, 00000024
:00448F74 81C108F54A00            add ecx, 004AF508
:00448F7A E8E167FEFF              call 0042F760
:00448F7F 85C0                    test eax, eax
:00448F81 7409                    je 00448F8C
:00448F83 8B55F0                  mov edx, dword ptr [ebp-10]
:00448F86 83C208                  add edx, 00000008
:00448F89 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448F81(C)
|
:00448F8C 837DF000                cmp dword ptr [ebp-10], 00000000
:00448F90 7612                    jbe 00448FA4
:00448F92 817DF4C8000000          cmp dword ptr [ebp-0C], 000000C8
:00448F99 7309                    jnb 00448FA4
:00448F9B 8B45F0                  mov eax, dword ptr [ebp-10]
:00448F9E 83C004                  add eax, 00000004
:00448FA1 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448F90(C), :00448F99(C)
|
:00448FA4 837DF04B                cmp dword ptr [ebp-10], 0000004B
:00448FA8 731A                    jnb 00448FC4
:00448FAA 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00448FAD 8A5104                  mov dl, byte ptr [ecx+04]
:00448FB0 52                      push edx
:00448FB1 E8A8030000              call 0044935E
:00448FB6 83C404                  add esp, 00000004
:00448FB9 85C0                    test eax, eax
:00448FBB 7407                    je 00448FC4
:00448FBD 33C0                    xor eax, eax
:00448FBF E981000000              jmp 00449045

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448FA8(C), :00448FBB(C)
|
:00448FC4 8B45CC                  mov eax, dword ptr [ebp-34]
:00448FC7 8B08                    mov ecx, dword ptr [eax]
:00448FC9 6BC970                  imul ecx, 00000070
:00448FCC 81C198224900            add ecx, 00492298
:00448FD2 E8AA98FBFF              call 00402881
:00448FD7 8845FC                  mov byte ptr [ebp-04], al
:00448FDA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00448FDD 81E1FF000000            and ecx, 000000FF
:00448FE3 81F9FF000000            cmp ecx, 000000FF
:00448FE9 7457                    je 00449042
:00448FEB 8B55FC                  mov edx, dword ptr [ebp-04]
:00448FEE 81E2FF000000            and edx, 000000FF
:00448FF4 85D2                    test edx, edx
:00448FF6 744A                    je 00449042
:00448FF8 8D45D4                  lea eax, dword ptr [ebp-2C]
:00448FFB 8945D0                  mov dword ptr [ebp-30], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00448FFE 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449003 68FF000000              push 000000FF
:00449008 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:0044900B 51                      push ecx
:0044900C 8A55FC                  mov dl, byte ptr [ebp-04]
:0044900F 52                      push edx
:00449010 6A01                    push 00000001
:00449012 8A4508                  mov al, byte ptr [ebp+08]
:00449015 50                      push eax
:00449016 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00449019 E80A3C0000              call 0044CC28
:0044901E 8945D0                  mov dword ptr [ebp-30], eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449021 68FF000000              push 000000FF
:00449026 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00449029 8A5104                  mov dl, byte ptr [ecx+04]
:0044902C 52                      push edx
:0044902D 6A00                    push 00000000
:0044902F 8B45F0                  mov eax, dword ptr [ebp-10]
:00449032 50                      push eax
:00449033 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00449036 51                      push ecx
:00449037 E810000000              call 0044904C
:0044903C 83C414                  add esp, 00000014
:0044903F 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448FE9(C), :00448FF6(C)
|
:00449042 8B45F0                  mov eax, dword ptr [ebp-10]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448D9F(U), :00448DE6(U), :00448DFE(U), :00448E2D(U), :00448FBF(U)
|
:00449045 5E                      pop esi
:00449046 8BE5                    mov esp, ebp
:00449048 5D                      pop ebp
:00449049 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00449037   , :0044B6EF   , :0044B819   , :0044BD69   
|
:0044904C 55                      push ebp
:0044904D 8BEC                    mov ebp, esp
:0044904F 83EC14                  sub esp, 00000014
:00449052 56                      push esi
:00449053 C745FC00000000          mov [ebp-04], 00000000
:0044905A C745F400000000          mov [ebp-0C], 00000000
:00449061 C745F800000000          mov [ebp-08], 00000000
:00449068 8B4508                  mov eax, dword ptr [ebp+08]
:0044906B 33C9                    xor ecx, ecx
:0044906D 8A08                    mov cl, byte ptr [eax]
:0044906F 81F9FF000000            cmp ecx, 000000FF
:00449075 751D                    jne 00449094
:00449077 837D0C04                cmp dword ptr [ebp+0C], 00000004
:0044907B 7E0B                    jle 00449088
:0044907D 8B550C                  mov edx, dword ptr [ebp+0C]
:00449080 83EA04                  sub edx, 00000004
:00449083 89550C                  mov dword ptr [ebp+0C], edx
:00449086 EB07                    jmp 0044908F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044907B(C)
|
:00449088 C7450C00000000          mov [ebp+0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449086(U)
|
:0044908F E98C020000              jmp 00449320

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449075(C), :0044931B(U)
|
:00449094 8B4508                  mov eax, dword ptr [ebp+08]
:00449097 33C9                    xor ecx, ecx
:00449099 8A08                    mov cl, byte ptr [eax]
:0044909B 81F9FF000000            cmp ecx, 000000FF
:004490A1 0F8479020000            je 00449320
:004490A7 8B5510                  mov edx, dword ptr [ebp+10]
:004490AA 81E2FF000000            and edx, 000000FF
:004490B0 8955F0                  mov dword ptr [ebp-10], edx
:004490B3 837DF004                cmp dword ptr [ebp-10], 00000004
:004490B7 0F8755020000            ja 00449312
:004490BD 8B45F0                  mov eax, dword ptr [ebp-10]
:004490C0 FF24854A934400          jmp dword ptr [4*eax+0044934A]
:004490C7 8B4D18                  mov ecx, dword ptr [ebp+18]
:004490CA 81E1FF000000            and ecx, 000000FF
:004490D0 81F9FF000000            cmp ecx, 000000FF
:004490D6 745F                    je 00449137

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004490D8 68FF000000              push 000000FF
:004490DD 8A5518                  mov dl, byte ptr [ebp+18]
:004490E0 52                      push edx
:004490E1 8B4508                  mov eax, dword ptr [ebp+08]
:004490E4 8A08                    mov cl, byte ptr [eax]
:004490E6 51                      push ecx
:004490E7 8A5514                  mov dl, byte ptr [ebp+14]
:004490EA 52                      push edx
:004490EB E8D5150000              call 0044A6C5
:004490F0 83C410                  add esp, 00000010
:004490F3 85C0                    test eax, eax
:004490F5 743B                    je 00449132
:004490F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004490FA 83C003                  add eax, 00000003
:004490FD 8945FC                  mov dword ptr [ebp-04], eax
:00449100 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449103 33D2                    xor edx, edx
:00449105 8A11                    mov dl, byte ptr [ecx]
:00449107 8BF2                    mov esi, edx
:00449109 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044910C 81E1FF000000            and ecx, 000000FF
:00449112 6BC924                  imul ecx, 00000024
:00449115 81C108F54A00            add ecx, 004AF508
:0044911B E8E06AFEFF              call 0042FC00
:00449120 25FF000000              and eax, 000000FF
:00449125 3BF0                    cmp esi, eax
:00449127 7509                    jne 00449132
:00449129 8B45FC                  mov eax, dword ptr [ebp-04]
:0044912C 83C003                  add eax, 00000003
:0044912F 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004490F5(C), :00449127(C)
|
:00449132 E98F000000              jmp 004491C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004490D6(C)
|
:00449137 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044913A 33D2                    xor edx, edx
:0044913C 8A11                    mov dl, byte ptr [ecx]
:0044913E 8BCA                    mov ecx, edx
:00449140 6BC924                  imul ecx, 00000024
:00449143 81C108F54A00            add ecx, 004AF508
:00449149 E88265FEFF              call 0042F6D0
:0044914E 6BC070                  imul eax, 00000070
:00449151 0598224900              add eax, 00492298
:00449156 8945F8                  mov dword ptr [ebp-08], eax
:00449159 6A00                    push 00000000
:0044915B 6A00                    push 00000000
:0044915D 8B45F8                  mov eax, dword ptr [ebp-08]
:00449160 50                      push eax
:00449161 8B4D14                  mov ecx, dword ptr [ebp+14]
:00449164 81E1FF000000            and ecx, 000000FF
:0044916A 6BC924                  imul ecx, 00000024
:0044916D 81C108F54A00            add ecx, 004AF508
:00449173 E8091DFEFF              call 0042AE81
:00449178 8945F4                  mov dword ptr [ebp-0C], eax
:0044917B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044917E 33D2                    xor edx, edx
:00449180 8A11                    mov dl, byte ptr [ecx]
:00449182 8BCA                    mov ecx, edx
:00449184 6BC924                  imul ecx, 00000024
:00449187 81C108F54A00            add ecx, 004AF508
:0044918D E8DEB6FBFF              call 00404870
:00449192 3945F4                  cmp dword ptr [ebp-0C], eax
:00449195 720B                    jb 004491A2
:00449197 8B45FC                  mov eax, dword ptr [ebp-04]
:0044919A 83C00A                  add eax, 0000000A
:0044919D 8945FC                  mov dword ptr [ebp-04], eax
:004491A0 EB24                    jmp 004491C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449195(C)
|
:004491A2 8B75F4                  mov esi, dword ptr [ebp-0C]
:004491A5 6BF60A                  imul esi, 0000000A
:004491A8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004491AB E83093FBFF              call 004024E0
:004491B0 8BC8                    mov ecx, eax
:004491B2 8BC6                    mov eax, esi
:004491B4 33D2                    xor edx, edx
:004491B6 F7F1                    div ecx
:004491B8 83F801                  cmp eax, 00000001
:004491BB 7209                    jb 004491C6
:004491BD 8B55FC                  mov edx, dword ptr [ebp-04]
:004491C0 83C204                  add edx, 00000004
:004491C3 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449132(U), :004491A0(U), :004491BB(C)
|
:004491C6 E947010000              jmp 00449312

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004491CB 68FF000000              push 000000FF
:004491D0 8A4518                  mov al, byte ptr [ebp+18]
:004491D3 50                      push eax
:004491D4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004491D7 8A11                    mov dl, byte ptr [ecx]
:004491D9 52                      push edx
:004491DA 8A4514                  mov al, byte ptr [ebp+14]
:004491DD 50                      push eax
:004491DE E8E2140000              call 0044A6C5
:004491E3 83C410                  add esp, 00000010
:004491E6 85C0                    test eax, eax
:004491E8 7446                    je 00449230
:004491EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004491ED 33D2                    xor edx, edx
:004491EF 8A11                    mov dl, byte ptr [ecx]
:004491F1 8BCA                    mov ecx, edx
:004491F3 6BC924                  imul ecx, 00000024
:004491F6 81C108F54A00            add ecx, 004AF508
:004491FC E86F08FFFF              call 00439A70
:00449201 50                      push eax
:00449202 6A64                    push 00000064
:00449204 8B4508                  mov eax, dword ptr [ebp+08]
:00449207 33C9                    xor ecx, ecx
:00449209 8A08                    mov cl, byte ptr [eax]
:0044920B 6BC924                  imul ecx, 00000024
:0044920E 81C108F54A00            add ecx, 004AF508
:00449214 E857B6FBFF              call 00404870
:00449219 50                      push eax
:0044921A E8418D0100              call 00461F60
:0044921F 83C40C                  add esp, 0000000C
:00449222 83F83C                  cmp eax, 0000003C
:00449225 7309                    jnb 00449230
:00449227 8B55FC                  mov edx, dword ptr [ebp-04]
:0044922A 83C205                  add edx, 00000005
:0044922D 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004491E8(C), :00449225(C)
|
:00449230 E9DD000000              jmp 00449312

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449235 68FF000000              push 000000FF
:0044923A 8A4518                  mov al, byte ptr [ebp+18]
:0044923D 50                      push eax
:0044923E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449241 8A11                    mov dl, byte ptr [ecx]
:00449243 52                      push edx
:00449244 8A4514                  mov al, byte ptr [ebp+14]
:00449247 50                      push eax
:00449248 E878140000              call 0044A6C5
:0044924D 83C410                  add esp, 00000010
:00449250 85C0                    test eax, eax
:00449252 7429                    je 0044927D
:00449254 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449257 33D2                    xor edx, edx
:00449259 8A11                    mov dl, byte ptr [ecx]
:0044925B 8BCA                    mov ecx, edx
:0044925D 6BC924                  imul ecx, 00000024
:00449260 81C108F54A00            add ecx, 004AF508
:00449266 E8B564FEFF              call 0042F720
:0044926B 25FF000000              and eax, 000000FF
:00449270 85C0                    test eax, eax
:00449272 7409                    je 0044927D
:00449274 8B45FC                  mov eax, dword ptr [ebp-04]
:00449277 83C003                  add eax, 00000003
:0044927A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449252(C), :00449272(C)
|
:0044927D E990000000              jmp 00449312

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449282 68FF000000              push 000000FF
:00449287 8A4D18                  mov cl, byte ptr [ebp+18]
:0044928A 51                      push ecx
:0044928B 8B5508                  mov edx, dword ptr [ebp+08]
:0044928E 8A02                    mov al, byte ptr [edx]
:00449290 50                      push eax
:00449291 8A4D14                  mov cl, byte ptr [ebp+14]
:00449294 51                      push ecx
:00449295 E82B140000              call 0044A6C5
:0044929A 83C410                  add esp, 00000010
:0044929D 85C0                    test eax, eax
:0044929F 7429                    je 004492CA
:004492A1 8B5508                  mov edx, dword ptr [ebp+08]
:004492A4 33C0                    xor eax, eax
:004492A6 8A02                    mov al, byte ptr [edx]
:004492A8 8BC8                    mov ecx, eax
:004492AA 6BC924                  imul ecx, 00000024
:004492AD 81C108F54A00            add ecx, 004AF508
:004492B3 E88864FEFF              call 0042F740
:004492B8 25FF000000              and eax, 000000FF
:004492BD 85C0                    test eax, eax
:004492BF 7409                    je 004492CA
:004492C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004492C4 83C103                  add ecx, 00000003
:004492C7 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044929F(C), :004492BF(C)
|
:004492CA EB46                    jmp 00449312

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004492CC 68FF000000              push 000000FF
:004492D1 8A5518                  mov dl, byte ptr [ebp+18]
:004492D4 52                      push edx
:004492D5 8B4508                  mov eax, dword ptr [ebp+08]
:004492D8 8A08                    mov cl, byte ptr [eax]
:004492DA 51                      push ecx
:004492DB 8A5514                  mov dl, byte ptr [ebp+14]
:004492DE 52                      push edx
:004492DF E8E1130000              call 0044A6C5
:004492E4 83C410                  add esp, 00000010
:004492E7 85C0                    test eax, eax
:004492E9 7427                    je 00449312
:004492EB 8B4508                  mov eax, dword ptr [ebp+08]
:004492EE 33C9                    xor ecx, ecx
:004492F0 8A08                    mov cl, byte ptr [eax]
:004492F2 6BC924                  imul ecx, 00000024
:004492F5 81C108F54A00            add ecx, 004AF508
:004492FB E84064FEFF              call 0042F740
:00449300 25FF000000              and eax, 000000FF
:00449305 85C0                    test eax, eax
:00449307 7409                    je 00449312
:00449309 8B55FC                  mov edx, dword ptr [ebp-04]
:0044930C 83C203                  add edx, 00000003
:0044930F 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004490B7(C), :004491C6(U), :00449230(U), :0044927D(U), :004492CA(U)
|:004492E9(C), :00449307(C)
|
:00449312 8B4508                  mov eax, dword ptr [ebp+08]
:00449315 83C001                  add eax, 00000001
:00449318 894508                  mov dword ptr [ebp+08], eax
:0044931B E974FDFFFF              jmp 00449094

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044908F(U), :004490A1(C)
|
:00449320 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00449323 034DFC                  add ecx, dword ptr [ebp-04]
:00449326 85C9                    test ecx, ecx
:00449328 7E0B                    jle 00449335
:0044932A 8B550C                  mov edx, dword ptr [ebp+0C]
:0044932D 0355FC                  add edx, dword ptr [ebp-04]
:00449330 8955EC                  mov dword ptr [ebp-14], edx
:00449333 EB07                    jmp 0044933C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449328(C)
|
:00449335 C745EC00000000          mov [ebp-14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449333(U)
|
:0044933C 8B45EC                  mov eax, dword ptr [ebp-14]
:0044933F 8945FC                  mov dword ptr [ebp-04], eax
:00449342 8B45FC                  mov eax, dword ptr [ebp-04]
:00449345 5E                      pop esi
:00449346 8BE5                    mov esp, ebp
:00449348 5D                      pop ebp
:00449349 C3                      ret



:0044934A C7904400                DWORD 004490C7
:0044934E CB914400                DWORD 004491CB
:00449352 35924400                DWORD 00449235
:00449356 82924400                DWORD 00449282
:0044935A CC924400                DWORD 004492CC



* Referenced by a CALL at Addresses:
|:00448FB1   , :0044C253   
|
:0044935E 55                      push ebp
:0044935F 8BEC                    mov ebp, esp
:00449361 83EC08                  sub esp, 00000008
:00449364 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449367 81E1FF000000            and ecx, 000000FF
:0044936D 6BC924                  imul ecx, 00000024
:00449370 81C108F54A00            add ecx, 004AF508
:00449376 E86564FEFF              call 0042F7E0
:0044937B 8845F8                  mov byte ptr [ebp-08], al
:0044937E C745FC00000000          mov [ebp-04], 00000000
:00449385 8B45F8                  mov eax, dword ptr [ebp-08]
:00449388 25FF000000              and eax, 000000FF
:0044938D 83F80A                  cmp eax, 0000000A
:00449390 7507                    jne 00449399
:00449392 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449390(C)
|
:00449399 8B45FC                  mov eax, dword ptr [ebp-04]
:0044939C 8BE5                    mov esp, ebp
:0044939E 5D                      pop ebp
:0044939F C3                      ret



* Referenced by a CALL at Addresses:
|:00438FBB   , :004470E1   , :00448B77   , :0044A1F3   , :0044A23D   
|:0044A463   , :0044A4AD   , :0044DE75   , :0044E0A1   
|
:004493A0 55                      push ebp
:004493A1 8BEC                    mov ebp, esp
:004493A3 83EC50                  sub esp, 00000050
:004493A6 56                      push esi
:004493A7 894DB0                  mov dword ptr [ebp-50], ecx
:004493AA 8D4DDC                  lea ecx, dword ptr [ebp-24]
:004493AD E8FEE3FBFF              call 004077B0
:004493B2 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004493B5 E8F6E3FBFF              call 004077B0
:004493BA C745E001000000          mov [ebp-20], 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004493C1 6A04                    push 00000004
:004493C3 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004493C6 E82567FEFF              call 0042FAF0
:004493CB 8945F8                  mov dword ptr [ebp-08], eax
:004493CE 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004493D1 E8FA5EFCFF              call 0040F2D0
:004493D6 8945EC                  mov dword ptr [ebp-14], eax
:004493D9 6A00                    push 00000000
:004493DB B930DF4A00              mov ecx, 004ADF30
:004493E0 E8B9A1FCFF              call 0041359E
:004493E5 05809D0000              add eax, 00009D80
:004493EA 8945E4                  mov dword ptr [ebp-1C], eax
:004493ED 8B4508                  mov eax, dword ptr [ebp+08]
:004493F0 50                      push eax
:004493F1 E81BE5FFFF              call 00447911
:004493F6 83C404                  add esp, 00000004
:004493F9 8845F0                  mov byte ptr [ebp-10], al
:004493FC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004493FF 51                      push ecx
:00449400 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00449403 E88863FEFF              call 0042F790
:00449408 8A5510                  mov dl, byte ptr [ebp+10]
:0044940B 8855E8                  mov byte ptr [ebp-18], dl
:0044940E C745FC00000000          mov [ebp-04], 00000000
:00449415 EB09                    jmp 00449420

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004495B3(U)
|
:00449417 8B45FC                  mov eax, dword ptr [ebp-04]
:0044941A 83C001                  add eax, 00000001
:0044941D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449415(U)
|
:00449420 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449423 51                      push ecx
:00449424 8D55DC                  lea edx, dword ptr [ebp-24]
:00449427 52                      push edx
:00449428 E87368FEFF              call 0042FCA0
:0044942D 83C408                  add esp, 00000008
:00449430 85C0                    test eax, eax
:00449432 0F8580010000            jne 004495B8
:00449438 837DE000                cmp dword ptr [ebp-20], 00000000
:0044943C 0F8476010000            je 004495B8
:00449442 6A00                    push 00000000
:00449444 B930DF4A00              mov ecx, 004ADF30
:00449449 E850A1FCFF              call 0041359E
:0044944E 8BF0                    mov esi, eax
:00449450 68800A4B00              push 004B0A80
:00449455 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00449458 E830E2FBFF              call 0040768D
:0044945D 8A840600960000          mov al, byte ptr [esi+eax+00009600]
:00449464 8845CC                  mov byte ptr [ebp-34], al
:00449467 C645D4FF                mov [ebp-2C], FF
:0044946B 8A4DCC                  mov cl, byte ptr [ebp-34]
:0044946E 884DC0                  mov byte ptr [ebp-40], cl
:00449471 C645C400                mov [ebp-3C], 00
:00449475 EB09                    jmp 00449480

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004494E7(U), :00449569(U)
|
:00449477 8A55C4                  mov dl, byte ptr [ebp-3C]
:0044947A 80C201                  add dl, 01
:0044947D 8855C4                  mov byte ptr [ebp-3C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449475(U)
|
:00449480 8B45C4                  mov eax, dword ptr [ebp-3C]
:00449483 25FF000000              and eax, 000000FF
:00449488 83F804                  cmp eax, 00000004
:0044948B 0F8DDD000000            jnl 0044956E
:00449491 8A4DC4                  mov cl, byte ptr [ebp-3C]
:00449494 51                      push ecx
:00449495 8D55DC                  lea edx, dword ptr [ebp-24]
:00449498 52                      push edx
:00449499 E86AE5FFFF              call 00447A08
:0044949E 83C408                  add esp, 00000008
:004494A1 50                      push eax
:004494A2 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004494A5 E8E662FEFF              call 0042F790
:004494AA 8B45D8                  mov eax, dword ptr [ebp-28]
:004494AD 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004494B2 3DFF000000              cmp eax, 000000FF
:004494B7 742E                    je 004494E7
:004494B9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004494BC 51                      push ecx
:004494BD 8D55D8                  lea edx, dword ptr [ebp-28]
:004494C0 52                      push edx
:004494C1 E8DDE2FFFF              call 004477A3
:004494C6 83C408                  add esp, 00000008
:004494C9 85C0                    test eax, eax
:004494CB 741C                    je 004494E9
:004494CD 8B4508                  mov eax, dword ptr [ebp+08]
:004494D0 50                      push eax
:004494D1 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004494D4 51                      push ecx
:004494D5 E8C667FEFF              call 0042FCA0
:004494DA 83C408                  add esp, 00000008
:004494DD 85C0                    test eax, eax
:004494DF 7508                    jne 004494E9
:004494E1 837DF800                cmp dword ptr [ebp-08], 00000000
:004494E5 7502                    jne 004494E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004494B7(C)
|
:004494E7 EB8E                    jmp 00449477

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004494CB(C), :004494DF(C), :004494E5(C)
|
:004494E9 6A00                    push 00000000
:004494EB B930DF4A00              mov ecx, 004ADF30
:004494F0 E8A9A0FCFF              call 0041359E
:004494F5 8BF0                    mov esi, eax
:004494F7 68800A4B00              push 004B0A80
:004494FC 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004494FF E889E1FBFF              call 0040768D
:00449504 8A940600960000          mov dl, byte ptr [esi+eax+00009600]
:0044950B 8855C8                  mov byte ptr [ebp-38], dl
:0044950E 8B45CC                  mov eax, dword ptr [ebp-34]
:00449511 25FF000000              and eax, 000000FF
:00449516 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00449519 81E1FF000000            and ecx, 000000FF
:0044951F 3BC1                    cmp eax, ecx
:00449521 7E46                    jle 00449569
:00449523 8D55D8                  lea edx, dword ptr [ebp-28]
:00449526 52                      push edx
:00449527 E853E4FFFF              call 0044797F
:0044952C 83C404                  add esp, 00000004
:0044952F 8845B8                  mov byte ptr [ebp-48], al
:00449532 8A45B8                  mov al, byte ptr [ebp-48]
:00449535 50                      push eax
:00449536 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00449539 E85210FEFF              call 0042A590
:0044953E 8845BC                  mov byte ptr [ebp-44], al
:00449541 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00449544 81E1FF000000            and ecx, 000000FF
:0044954A 8B55BC                  mov edx, dword ptr [ebp-44]
:0044954D 81E2FF000000            and edx, 000000FF
:00449553 3BCA                    cmp ecx, edx
:00449555 7C12                    jl 00449569
:00449557 8A45C8                  mov al, byte ptr [ebp-38]
:0044955A 8845CC                  mov byte ptr [ebp-34], al
:0044955D 8A4DC4                  mov cl, byte ptr [ebp-3C]
:00449560 884DD4                  mov byte ptr [ebp-2C], cl
:00449563 8A55BC                  mov dl, byte ptr [ebp-44]
:00449566 8855D0                  mov byte ptr [ebp-30], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449521(C), :00449555(C)
|
:00449569 E909FFFFFF              jmp 00449477

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044948B(C)
|
:0044956E 8B45D4                  mov eax, dword ptr [ebp-2C]
:00449571 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449576 3DFF000000              cmp eax, 000000FF
:0044957B 742F                    je 004495AC
:0044957D 8A4DD4                  mov cl, byte ptr [ebp-2C]
:00449580 51                      push ecx
:00449581 8D55DC                  lea edx, dword ptr [ebp-24]
:00449584 52                      push edx
:00449585 E87EE4FFFF              call 00447A08
:0044958A 83C408                  add esp, 00000008
:0044958D 50                      push eax
:0044958E 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00449591 E8FA61FEFF              call 0042F790
:00449596 8A45E8                  mov al, byte ptr [ebp-18]
:00449599 2A45D0                  sub al, byte ptr [ebp-30]
:0044959C 8845E8                  mov byte ptr [ebp-18], al
:0044959F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004495A2 034DFC                  add ecx, dword ptr [ebp-04]
:004495A5 8A55D4                  mov dl, byte ptr [ebp-2C]
:004495A8 8811                    mov byte ptr [ecx], dl
:004495AA EB07                    jmp 004495B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044957B(C)
|
:004495AC C745E000000000          mov [ebp-20], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004495AA(U)
|
:004495B3 E95FFEFFFF              jmp 00449417

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449432(C), :0044943C(C)
|
:004495B8 837DE000                cmp dword ptr [ebp-20], 00000000
:004495BC 7551                    jne 0044960F
:004495BE 8B4514                  mov eax, dword ptr [ebp+14]
:004495C1 25FF000000              and eax, 000000FF
:004495C6 83F801                  cmp eax, 00000001
:004495C9 7544                    jne 0044960F
:004495CB 8D4DDC                  lea ecx, dword ptr [ebp-24]
:004495CE 51                      push ecx
:004495CF E83DE3FFFF              call 00447911
:004495D4 83C404                  add esp, 00000004
:004495D7 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004495DC 3DFF000000              cmp eax, 000000FF
:004495E1 7417                    je 004495FA
:004495E3 8B55B0                  mov edx, dword ptr [ebp-50]
:004495E6 8A4204                  mov al, byte ptr [edx+04]
:004495E9 50                      push eax
:004495EA 6A14                    push 00000014
:004495EC 8D4DDC                  lea ecx, dword ptr [ebp-24]
:004495EF 51                      push ecx
:004495F0 E8C9000000              call 004496BE
:004495F5 83C40C                  add esp, 0000000C
:004495F8 EB15                    jmp 0044960F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004495E1(C)
|
:004495FA 8B55B0                  mov edx, dword ptr [ebp-50]
:004495FD 8A4204                  mov al, byte ptr [edx+04]
:00449600 50                      push eax

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00449601 6A0A                    push 0000000A
:00449603 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00449606 51                      push ecx
:00449607 E8B2000000              call 004496BE
:0044960C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004495BC(C), :004495C9(C), :004495F8(U)
|
:0044960F 8B55FC                  mov edx, dword ptr [ebp-04]
:00449612 83EA01                  sub edx, 00000001
:00449615 8955FC                  mov dword ptr [ebp-04], edx
:00449618 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044961C 0F8C8C000000            jl 004496AE
:00449622 C645B400                mov [ebp-4C], 00
:00449626 EB11                    jmp 00449639

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004496A7(U)
|
:00449628 8A45B4                  mov al, byte ptr [ebp-4C]
:0044962B 0401                    add al, 01
:0044962D 8845B4                  mov byte ptr [ebp-4C], al
:00449630 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449633 83E901                  sub ecx, 00000001
:00449636 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449626(U)
|
:00449639 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044963D 7C6D                    jl 004496AC
:0044963F 8B55B4                  mov edx, dword ptr [ebp-4C]
:00449642 81E2FF000000            and edx, 000000FF
:00449648 3B55FC                  cmp edx, dword ptr [ebp-04]
:0044964B 7F5F                    jg 004496AC
:0044964D 8B45B4                  mov eax, dword ptr [ebp-4C]
:00449650 25FF000000              and eax, 000000FF
:00449655 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00449658 8A1401                  mov dl, byte ptr [ecx+eax]
:0044965B 8855F4                  mov byte ptr [ebp-0C], dl
:0044965E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00449661 0345FC                  add eax, dword ptr [ebp-04]
:00449664 33C9                    xor ecx, ecx
:00449666 8A08                    mov cl, byte ptr [eax]
:00449668 8BC1                    mov eax, ecx
:0044966A 83C002                  add eax, 00000002
:0044966D 99                      cdq
:0044966E 33C2                    xor eax, edx
:00449670 2BC2                    sub eax, edx
:00449672 83E003                  and eax, 00000003
:00449675 33C2                    xor eax, edx
:00449677 2BC2                    sub eax, edx
:00449679 8B55B4                  mov edx, dword ptr [ebp-4C]
:0044967C 81E2FF000000            and edx, 000000FF
:00449682 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00449685 880411                  mov byte ptr [ecx+edx], al
:00449688 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044968B 25FF000000              and eax, 000000FF
:00449690 83C002                  add eax, 00000002
:00449693 99                      cdq
:00449694 33C2                    xor eax, edx
:00449696 2BC2                    sub eax, edx
:00449698 83E003                  and eax, 00000003
:0044969B 33C2                    xor eax, edx
:0044969D 2BC2                    sub eax, edx
:0044969F 8B55E4                  mov edx, dword ptr [ebp-1C]
:004496A2 0355FC                  add edx, dword ptr [ebp-04]
:004496A5 8802                    mov byte ptr [edx], al
:004496A7 E97CFFFFFF              jmp 00449628

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044963D(C), :0044964B(C)
|
:004496AC EB06                    jmp 004496B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044961C(C)
|
:004496AE 8B45E4                  mov eax, dword ptr [ebp-1C]
:004496B1 C600FF                  mov byte ptr [eax], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004496AC(U)
|
:004496B4 8B45E4                  mov eax, dword ptr [ebp-1C]
:004496B7 5E                      pop esi
:004496B8 8BE5                    mov esp, ebp
:004496BA 5D                      pop ebp
:004496BB C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004495F0   , :00449607   , :00449817   , :00449830   , :0044A17B   
|:0044A3B0   , :0044A3EB   
|
:004496BE 55                      push ebp
:004496BF 8BEC                    mov ebp, esp
:004496C1 83EC10                  sub esp, 00000010
:004496C4 56                      push esi
:004496C5 837D0C09                cmp dword ptr [ebp+0C], 00000009
:004496C9 0F8C6B010000            jl 0044983A
:004496CF 8B4508                  mov eax, dword ptr [ebp+08]
:004496D2 50                      push eax
:004496D3 E8A7E2FFFF              call 0044797F
:004496D8 83C404                  add esp, 00000004
:004496DB 8845F8                  mov byte ptr [ebp-08], al
:004496DE 6880070000              push 00000780
:004496E3 B910414A00              mov ecx, 004A4110
:004496E8 E8B19EFCFF              call 0041359E
:004496ED 8BF0                    mov esi, eax
:004496EF 68800A4B00              push 004B0A80
:004496F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004496F7 E891DFFBFF              call 0040768D
:004496FC 03F0                    add esi, eax
:004496FE 8975FC                  mov dword ptr [ebp-04], esi
:00449701 8B4D10                  mov ecx, dword ptr [ebp+10]
:00449704 81E1FF000000            and ecx, 000000FF
:0044970A 6BC924                  imul ecx, 00000024
:0044970D 81C108F54A00            add ecx, 004AF508
:00449713 E8C40EFEFF              call 0042A5DC
:00449718 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044971D 3DFF000000              cmp eax, 000000FF
:00449722 7458                    je 0044977C
:00449724 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449727 33D2                    xor edx, edx
:00449729 8A11                    mov dl, byte ptr [ecx]
:0044972B 85D2                    test edx, edx
:0044972D 754D                    jne 0044977C
:0044972F 8B4508                  mov eax, dword ptr [ebp+08]
:00449732 50                      push eax
:00449733 E8D9E1FFFF              call 00447911
:00449738 83C404                  add esp, 00000004
:0044973B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449740 3DFF000000              cmp eax, 000000FF
:00449745 7428                    je 0044976F
:00449747 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044974A 81E1FF000000            and ecx, 000000FF
:00449750 6BC924                  imul ecx, 00000024
:00449753 81C108F54A00            add ecx, 004AF508
:00449759 E842FCFDFF              call 004293A0
:0044975E 50                      push eax
:0044975F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449762 51                      push ecx
:00449763 E83865FEFF              call 0042FCA0
:00449768 83C408                  add esp, 00000008
:0044976B 85C0                    test eax, eax
:0044976D 740D                    je 0044977C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449745(C)
|
:0044976F 8B55FC                  mov edx, dword ptr [ebp-04]
:00449772 8A02                    mov al, byte ptr [edx]
:00449774 02450C                  add al, byte ptr [ebp+0C]
:00449777 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044977A 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449722(C), :0044972D(C), :0044976D(C)
|
:0044977C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044977F 81E1FF000000            and ecx, 000000FF
:00449785 6BC924                  imul ecx, 00000024
:00449788 81C108F54A00            add ecx, 004AF508
:0044978E E8ED64FEFF              call 0042FC80
:00449793 25FF000000              and eax, 000000FF
:00449798 83F810                  cmp eax, 00000010
:0044979B 7C21                    jl 004497BE
:0044979D 8B4D10                  mov ecx, dword ptr [ebp+10]
:004497A0 81E1FF000000            and ecx, 000000FF
:004497A6 6BC924                  imul ecx, 00000024
:004497A9 81C108F54A00            add ecx, 004AF508
:004497AF E8CC64FEFF              call 0042FC80
:004497B4 25FF000000              and eax, 000000FF
:004497B9 83F811                  cmp eax, 00000011
:004497BC 7E7C                    jle 0044983A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044979B(C)
|
:004497BE C645F400                mov [ebp-0C], 00
:004497C2 EB09                    jmp 004497CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449838(U)
|
:004497C4 8A55F4                  mov dl, byte ptr [ebp-0C]
:004497C7 80C201                  add dl, 01
:004497CA 8855F4                  mov byte ptr [ebp-0C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004497C2(U)
|
:004497CD 8B45F4                  mov eax, dword ptr [ebp-0C]
:004497D0 25FF000000              and eax, 000000FF
:004497D5 83F804                  cmp eax, 00000004
:004497D8 7D60                    jge 0044983A
:004497DA 8A4DF4                  mov cl, byte ptr [ebp-0C]
:004497DD 51                      push ecx
:004497DE 8B5508                  mov edx, dword ptr [ebp+08]
:004497E1 52                      push edx
:004497E2 E821E2FFFF              call 00447A08
:004497E7 83C408                  add esp, 00000008
:004497EA 668B00                  mov ax, word ptr [eax]
:004497ED 668945F0                mov word ptr [ebp-10], ax
:004497F1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004497F4 81E1FF000000            and ecx, 000000FF
:004497FA 81F9FF000000            cmp ecx, 000000FF
:00449800 7436                    je 00449838
:00449802 837D0C0A                cmp dword ptr [ebp+0C], 0000000A
:00449806 7E19                    jle 00449821
:00449808 8A5510                  mov dl, byte ptr [ebp+10]
:0044980B 52                      push edx
:0044980C 8B450C                  mov eax, dword ptr [ebp+0C]
:0044980F 83E80A                  sub eax, 0000000A
:00449812 50                      push eax
:00449813 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00449816 51                      push ecx
:00449817 E8A2FEFFFF              call 004496BE
:0044981C 83C40C                  add esp, 0000000C
:0044981F EB17                    jmp 00449838

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449806(C)
|
:00449821 8A5510                  mov dl, byte ptr [ebp+10]
:00449824 52                      push edx
:00449825 8B450C                  mov eax, dword ptr [ebp+0C]
:00449828 83E801                  sub eax, 00000001
:0044982B 50                      push eax
:0044982C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044982F 51                      push ecx
:00449830 E889FEFFFF              call 004496BE
:00449835 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449800(C), :0044981F(U)
|
:00449838 EB8A                    jmp 004497C4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004496C9(C), :004497BC(C), :004497D8(C)
|
:0044983A 5E                      pop esi
:0044983B 8BE5                    mov esp, ebp
:0044983D 5D                      pop ebp
:0044983E C3                      ret



* Referenced by a CALL at Addresses:
|:00438E5C   , :00446F74   , :0044A1A1   , :0044A1CE   , :0044A214   
|:0044A25E   , :0044A376   , :0044A3D4   , :0044A411   , :0044A43E   
|:0044A484   , :0044A4CE   , :0044A4F3   , :0044A51D   , :0044A58F   
|:0044A5C4   , :0044A606   , :0044DA4B   , :0044DF78   , :0044DFB7   
|:0044DFDE   , :0044E039   , :0044E066   , :0044E0C2   
|
:0044983F 55                      push ebp
:00449840 8BEC                    mov ebp, esp
:00449842 83EC68                  sub esp, 00000068
:00449845 56                      push esi
:00449846 894D98                  mov dword ptr [ebp-68], ecx
:00449849 6A00                    push 00000000
:0044984B B930DF4A00              mov ecx, 004ADF30
:00449850 E8499DFCFF              call 0041359E
:00449855 0500960000              add eax, 00009600
:0044985A 8945B0                  mov dword ptr [ebp-50], eax
:0044985D 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00449860 E84BDFFBFF              call 004077B0
:00449865 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:00449868 E843DFFBFF              call 004077B0
:0044986D 8A4518                  mov al, byte ptr [ebp+18]
:00449870 50                      push eax
:00449871 8A4D14                  mov cl, byte ptr [ebp+14]
:00449874 51                      push ecx
:00449875 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00449878 E80360FEFF              call 0042F880
:0044987D 8B4D98                  mov ecx, dword ptr [ebp-68]
:00449880 E84B5AFCFF              call 0040F2D0
:00449885 8845BC                  mov byte ptr [ebp-44], al
:00449888 C645B8FF                mov [ebp-48], FF
:0044988C C645FCFF                mov [ebp-04], FF
:00449890 C645F0FF                mov [ebp-10], FF
:00449894 C745E801000000          mov [ebp-18], 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044989B 6A04                    push 00000004
:0044989D 8B4D98                  mov ecx, dword ptr [ebp-68]
:004498A0 E84B62FEFF              call 0042FAF0
:004498A5 8945F4                  mov dword ptr [ebp-0C], eax
:004498A8 8D55EC                  lea edx, dword ptr [ebp-14]
:004498AB 52                      push edx
:004498AC 8B4508                  mov eax, dword ptr [ebp+08]
:004498AF 50                      push eax
:004498B0 E8EB63FEFF              call 0042FCA0
:004498B5 83C408                  add esp, 00000008
:004498B8 85C0                    test eax, eax
:004498BA 7407                    je 004498C3
:004498BC 0CFF                    or al, FF
:004498BE E930050000              jmp 00449DF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004498BA(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004498C3 68FF000000              push 000000FF
:004498C8 33C9                    xor ecx, ecx
:004498CA 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:004498D0 33D2                    xor edx, edx
:004498D2 8A15810A4B00            mov dl, byte ptr [004B0A81]
:004498D8 0FAFCA                  imul ecx, edx
:004498DB 51                      push ecx
:004498DC 8B45B0                  mov eax, dword ptr [ebp-50]
:004498DF 50                      push eax
:004498E0 E8638F0100              call 00462848
:004498E5 83C40C                  add esp, 0000000C
:004498E8 6A00                    push 00000000
:004498EA B930DF4A00              mov ecx, 004ADF30
:004498EF E8AA9CFCFF              call 0041359E
:004498F4 C680809D0000FF          mov byte ptr [eax+00009D80], FF
:004498FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004498FE 33D2                    xor edx, edx
:00449900 8A5101                  mov dl, byte ptr [ecx+01]
:00449903 33C0                    xor eax, eax
:00449905 A0800A4B00              mov al, byte ptr [004B0A80]
:0044990A 0FAFD0                  imul edx, eax
:0044990D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449910 33C0                    xor eax, eax
:00449912 8A01                    mov al, byte ptr [ecx]
:00449914 0345B0                  add eax, dword ptr [ebp-50]
:00449917 C6041000                mov byte ptr [eax+edx], 00
:0044991B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044991E 81E1FF000000            and ecx, 000000FF
:00449924 83E104                  and ecx, 00000004
:00449927 85C9                    test ecx, ecx
:00449929 0F8498000000            je 004499C7
:0044992F C605CC044B0000          mov byte ptr [004B04CC], 00
:00449936 C605AC044B00FF          mov byte ptr [004B04AC], FF
:0044993D C605A0044B00FF          mov byte ptr [004B04A0], FF
:00449944 C605C8044B00FF          mov byte ptr [004B04C8], FF
:0044994B 8B5598                  mov edx, dword ptr [ebp-68]
:0044994E 8B02                    mov eax, dword ptr [edx]
:00449950 6BC070                  imul eax, 00000070
:00449953 0598224900              add eax, 00492298
:00449958 8945A4                  mov dword ptr [ebp-5C], eax
:0044995B C745AC0CA04A00          mov [ebp-54], 004AA00C
:00449962 C645A8FF                mov [ebp-58], FF
:00449966 C745C800000000          mov [ebp-38], 00000000
:0044996D EB09                    jmp 00449978

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004499AD(U)
|
:0044996F 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00449972 83C101                  add ecx, 00000001
:00449975 894DC8                  mov dword ptr [ebp-38], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044996D(U)
|
:00449978 837DC808                cmp dword ptr [ebp-38], 00000008
:0044997C 7331                    jnb 004499AF
:0044997E 8A55C8                  mov dl, byte ptr [ebp-38]
:00449981 52                      push edx
:00449982 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00449985 E80BA6FBFF              call 00403F95
:0044998A 8845A8                  mov byte ptr [ebp-58], al
:0044998D 8B45A8                  mov eax, dword ptr [ebp-58]
:00449990 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449995 3DFF000000              cmp eax, 000000FF
:0044999A 7411                    je 004499AD
:0044999C 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044999F 8A55A8                  mov dl, byte ptr [ebp-58]
:004499A2 8811                    mov byte ptr [ecx], dl
:004499A4 8B45AC                  mov eax, dword ptr [ebp-54]
:004499A7 83C001                  add eax, 00000001
:004499AA 8945AC                  mov dword ptr [ebp-54], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044999A(C)
|
:004499AD EBC0                    jmp 0044996F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044997C(C)
|
:004499AF 8B4DAC                  mov ecx, dword ptr [ebp-54]
:004499B2 C601FF                  mov byte ptr [ecx], FF
:004499B5 837DF400                cmp dword ptr [ebp-0C], 00000000
:004499B9 750C                    jne 004499C7
:004499BB 8B5508                  mov edx, dword ptr [ebp+08]
:004499BE 52                      push edx
:004499BF 8B4D98                  mov ecx, dword ptr [ebp-68]
:004499C2 E8F42F0000              call 0044C9BB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449929(C), :004499B9(C)
|
:004499C7 8B4508                  mov eax, dword ptr [ebp+08]
:004499CA 50                      push eax
:004499CB E8AFDFFFFF              call 0044797F
:004499D0 83C404                  add esp, 00000004
:004499D3 8845C4                  mov byte ptr [ebp-3C], al
:004499D6 8A4DC4                  mov cl, byte ptr [ebp-3C]
:004499D9 51                      push ecx
:004499DA 8B4D98                  mov ecx, dword ptr [ebp-68]
:004499DD E8AE0BFEFF              call 0042A590
:004499E2 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004499E7 3DFF000000              cmp eax, 000000FF
:004499EC 7507                    jne 004499F5
:004499EE 0CFF                    or al, FF
:004499F0 E9FE030000              jmp 00449DF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004499EC(C)
|
:004499F5 C645D800                mov [ebp-28], 00
:004499F9 C645E000                mov [ebp-20], 00
:004499FD EB06                    jmp 00449A05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449DEC(U)
|
:004499FF 8A55B8                  mov dl, byte ptr [ebp-48]
:00449A02 8855E0                  mov byte ptr [ebp-20], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004499FD(U)
|
:00449A05 837DE800                cmp dword ptr [ebp-18], 00000000
:00449A09 0F84E2030000            je 00449DF1
:00449A0F 8B45E0                  mov eax, dword ptr [ebp-20]
:00449A12 25FF000000              and eax, 000000FF
:00449A17 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00449A1A 81E1FF000000            and ecx, 000000FF
:00449A20 3BC1                    cmp eax, ecx
:00449A22 0F8DC9030000            jnl 00449DF1
:00449A28 C745E800000000          mov [ebp-18], 00000000
:00449A2F C645B8FF                mov [ebp-48], FF
:00449A33 C645FCFF                mov [ebp-04], FF
:00449A37 C745CC00000000          mov [ebp-34], 00000000
:00449A3E EB09                    jmp 00449A49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449DE7(U)
|
:00449A40 8B55CC                  mov edx, dword ptr [ebp-34]
:00449A43 83C201                  add edx, 00000001
:00449A46 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A3E(U)
|
:00449A49 33C0                    xor eax, eax
:00449A4B A0810A4B00              mov al, byte ptr [004B0A81]
:00449A50 3945CC                  cmp dword ptr [ebp-34], eax
:00449A53 0F8393030000            jnb 00449DEC
:00449A59 C745DC00000000          mov [ebp-24], 00000000
:00449A60 EB09                    jmp 00449A6B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449AED(U), :00449B38(U), :00449DA1(U)
|
:00449A62 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00449A65 83C101                  add ecx, 00000001
:00449A68 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A60(U)
|
:00449A6B 33D2                    xor edx, edx
:00449A6D 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00449A73 3955DC                  cmp dword ptr [ebp-24], edx
:00449A76 0F832A030000            jnb 00449DA6
:00449A7C 8B45B0                  mov eax, dword ptr [ebp-50]
:00449A7F 0345DC                  add eax, dword ptr [ebp-24]
:00449A82 33C9                    xor ecx, ecx
:00449A84 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:00449A8A 8B55CC                  mov edx, dword ptr [ebp-34]
:00449A8D 0FAFD1                  imul edx, ecx
:00449A90 8A0410                  mov al, byte ptr [eax+edx]
:00449A93 8845D8                  mov byte ptr [ebp-28], al
:00449A96 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00449A99 81E1FF000000            and ecx, 000000FF
:00449A9F 8B55E0                  mov edx, dword ptr [ebp-20]
:00449AA2 81E2FF000000            and edx, 000000FF
:00449AA8 3BCA                    cmp ecx, edx
:00449AAA 7E2B                    jle 00449AD7
:00449AAC 8B45D8                  mov eax, dword ptr [ebp-28]
:00449AAF 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449AB4 3DFF000000              cmp eax, 000000FF
:00449AB9 741C                    je 00449AD7
:00449ABB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449ABE 81E1FF000000            and ecx, 000000FF
:00449AC4 8B55D8                  mov edx, dword ptr [ebp-28]
:00449AC7 81E2FF000000            and edx, 000000FF
:00449ACD 3BCA                    cmp ecx, edx
:00449ACF 7E06                    jle 00449AD7
:00449AD1 8A45D8                  mov al, byte ptr [ebp-28]
:00449AD4 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449AAA(C), :00449AB9(C), :00449ACF(C)
|
:00449AD7 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00449ADA 81E1FF000000            and ecx, 000000FF
:00449AE0 8B55E0                  mov edx, dword ptr [ebp-20]
:00449AE3 81E2FF000000            and edx, 000000FF
:00449AE9 3BCA                    cmp ecx, edx
:00449AEB 7405                    je 00449AF2
:00449AED E970FFFFFF              jmp 00449A62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449AEB(C)
|
:00449AF2 8A45DC                  mov al, byte ptr [ebp-24]
:00449AF5 8845C0                  mov byte ptr [ebp-40], al
:00449AF8 8A4DCC                  mov cl, byte ptr [ebp-34]
:00449AFB 884DC1                  mov byte ptr [ebp-3F], cl
:00449AFE 8D55C0                  lea edx, dword ptr [ebp-40]
:00449B01 52                      push edx
:00449B02 8B4508                  mov eax, dword ptr [ebp+08]
:00449B05 50                      push eax
:00449B06 E89561FEFF              call 0042FCA0
:00449B0B 83C408                  add esp, 00000008
:00449B0E 85C0                    test eax, eax
:00449B10 752B                    jne 00449B3D
:00449B12 837D1C00                cmp dword ptr [ebp+1C], 00000000
:00449B16 7425                    je 00449B3D
:00449B18 837DF400                cmp dword ptr [ebp-0C], 00000000
:00449B1C 751F                    jne 00449B3D
:00449B1E 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00449B21 81E1FF000000            and ecx, 000000FF
:00449B27 51                      push ecx
:00449B28 8D55C0                  lea edx, dword ptr [ebp-40]
:00449B2B 52                      push edx
:00449B2C E872DCFFFF              call 004477A3
:00449B31 83C408                  add esp, 00000008
:00449B34 85C0                    test eax, eax
:00449B36 7405                    je 00449B3D
:00449B38 E925FFFFFF              jmp 00449A62

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449B10(C), :00449B16(C), :00449B1C(C), :00449B36(C)
|
:00449B3D C745C800000000          mov [ebp-38], 00000000
:00449B44 EB09                    jmp 00449B4F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449B81(U), :00449C62(U), :00449D9C(U)
|
:00449B46 8B45C8                  mov eax, dword ptr [ebp-38]
:00449B49 83C001                  add eax, 00000001
:00449B4C 8945C8                  mov dword ptr [ebp-38], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449B44(U)
|
:00449B4F 837DC804                cmp dword ptr [ebp-38], 00000004
:00449B53 0F8348020000            jnb 00449DA1
:00449B59 8A4DC8                  mov cl, byte ptr [ebp-38]
:00449B5C 51                      push ecx
:00449B5D 8D55C0                  lea edx, dword ptr [ebp-40]
:00449B60 52                      push edx
:00449B61 E8A2DEFFFF              call 00447A08
:00449B66 83C408                  add esp, 00000008
:00449B69 50                      push eax
:00449B6A 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:00449B6D E81E5CFEFF              call 0042F790
:00449B72 8B45B4                  mov eax, dword ptr [ebp-4C]
:00449B75 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449B7A 3DFF000000              cmp eax, 000000FF
:00449B7F 7502                    jne 00449B83
:00449B81 EBC3                    jmp 00449B46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449B7F(C)
|
:00449B83 68800A4B00              push 004B0A80
:00449B88 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:00449B8B E8FDDAFBFF              call 0040768D
:00449B90 8945E4                  mov dword ptr [ebp-1C], eax
:00449B93 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00449B96 034DE4                  add ecx, dword ptr [ebp-1C]
:00449B99 894DD0                  mov dword ptr [ebp-30], ecx
:00449B9C 6A00                    push 00000000
:00449B9E B930DF4A00              mov ecx, 004ADF30
:00449BA3 E8F699FCFF              call 0041359E
:00449BA8 8B55E4                  mov edx, dword ptr [ebp-1C]
:00449BAB 8D8410004B0000          lea eax, dword ptr [eax+edx+00004B00]
:00449BB2 8945D4                  mov dword ptr [ebp-2C], eax
:00449BB5 6A00                    push 00000000
:00449BB7 B910414A00              mov ecx, 004A4110
:00449BBC E8DD99FCFF              call 0041359E
:00449BC1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00449BC4 8D940880070000          lea edx, dword ptr [eax+ecx+00000780]
:00449BCB 8955F8                  mov dword ptr [ebp-08], edx
:00449BCE 8B45D0                  mov eax, dword ptr [ebp-30]
:00449BD1 33C9                    xor ecx, ecx
:00449BD3 8A08                    mov cl, byte ptr [eax]
:00449BD5 81F9FF000000            cmp ecx, 000000FF
:00449BDB 0F85BB010000            jne 00449D9C
:00449BE1 8D55B4                  lea edx, dword ptr [ebp-4C]
:00449BE4 52                      push edx
:00449BE5 E895DDFFFF              call 0044797F
:00449BEA 83C404                  add esp, 00000004
:00449BED 88459C                  mov byte ptr [ebp-64], al
:00449BF0 8A459C                  mov al, byte ptr [ebp-64]
:00449BF3 50                      push eax
:00449BF4 8B4D98                  mov ecx, dword ptr [ebp-68]
:00449BF7 E89409FEFF              call 0042A590
:00449BFC 8845A0                  mov byte ptr [ebp-60], al
:00449BFF 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00449C02 81E1FF000000            and ecx, 000000FF
:00449C08 81F9FF000000            cmp ecx, 000000FF
:00449C0E 7452                    je 00449C62
:00449C10 8B55A0                  mov edx, dword ptr [ebp-60]
:00449C13 81E2FF000000            and edx, 000000FF
:00449C19 8B45D8                  mov eax, dword ptr [ebp-28]
:00449C1C 25FF000000              and eax, 000000FF
:00449C21 03D0                    add edx, eax
:00449C23 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00449C26 81E1FF000000            and ecx, 000000FF
:00449C2C 3BD1                    cmp edx, ecx
:00449C2E 7F32                    jg 00449C62
:00449C30 8B55D4                  mov edx, dword ptr [ebp-2C]
:00449C33 33C0                    xor eax, eax
:00449C35 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449C37 3DFF000000              cmp eax, 000000FF
:00449C3C 7429                    je 00449C67
:00449C3E 8B75BC                  mov esi, dword ptr [ebp-44]
:00449C41 81E6FF000000            and esi, 000000FF
:00449C47 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00449C4A 33D2                    xor edx, edx
:00449C4C 8A11                    mov dl, byte ptr [ecx]
:00449C4E 8BCA                    mov ecx, edx
:00449C50 6BC924                  imul ecx, 00000024
:00449C53 81C108F54A00            add ecx, 004AF508
:00449C59 E87256FCFF              call 0040F2D0
:00449C5E 3BF0                    cmp esi, eax
:00449C60 7405                    je 00449C67

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449C0E(C), :00449C2E(C)
|
:00449C62 E9DFFEFFFF              jmp 00449B46

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449C3C(C), :00449C60(C)
|
:00449C67 8B45D8                  mov eax, dword ptr [ebp-28]
:00449C6A 25FF000000              and eax, 000000FF
:00449C6F 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00449C72 81E1FF000000            and ecx, 000000FF
:00449C78 03C1                    add eax, ecx
:00449C7A 8B55D0                  mov edx, dword ptr [ebp-30]
:00449C7D 8802                    mov byte ptr [edx], al
:00449C7F C745E801000000          mov [ebp-18], 00000001
:00449C86 8B45B8                  mov eax, dword ptr [ebp-48]
:00449C89 25FF000000              and eax, 000000FF
:00449C8E 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00449C91 33D2                    xor edx, edx
:00449C93 8A11                    mov dl, byte ptr [ecx]
:00449C95 3BC2                    cmp eax, edx
:00449C97 7E53                    jle 00449CEC
:00449C99 837D1C00                cmp dword ptr [ebp+1C], 00000000
:00449C9D 7445                    je 00449CE4
:00449C9F 837DF400                cmp dword ptr [ebp-0C], 00000000
:00449CA3 753F                    jne 00449CE4
:00449CA5 8B45BC                  mov eax, dword ptr [ebp-44]
:00449CA8 25FF000000              and eax, 000000FF
:00449CAD 50                      push eax
:00449CAE 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:00449CB1 51                      push ecx
:00449CB2 E8ECDAFFFF              call 004477A3
:00449CB7 83C408                  add esp, 00000008
:00449CBA 85C0                    test eax, eax
:00449CBC 7524                    jne 00449CE2
:00449CBE 8B55D0                  mov edx, dword ptr [ebp-30]
:00449CC1 8A02                    mov al, byte ptr [edx]
:00449CC3 8845B8                  mov byte ptr [ebp-48], al
:00449CC6 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00449CC9 81E1FF000000            and ecx, 000000FF
:00449CCF 8B55FC                  mov edx, dword ptr [ebp-04]
:00449CD2 81E2FF000000            and edx, 000000FF
:00449CD8 3BCA                    cmp ecx, edx
:00449CDA 7E06                    jle 00449CE2
:00449CDC 8A45FC                  mov al, byte ptr [ebp-04]
:00449CDF 8845B8                  mov byte ptr [ebp-48], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449CBC(C), :00449CDA(C)
|
:00449CE2 EB08                    jmp 00449CEC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449C9D(C), :00449CA3(C)
|
:00449CE4 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00449CE7 8A11                    mov dl, byte ptr [ecx]
:00449CE9 8855B8                  mov byte ptr [ebp-48], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449C97(C), :00449CE2(U)
|
:00449CEC 8B4510                  mov eax, dword ptr [ebp+10]
:00449CEF 25FF000000              and eax, 000000FF
:00449CF4 83E008                  and eax, 00000008
:00449CF7 85C0                    test eax, eax
:00449CF9 745D                    je 00449D58
:00449CFB 6A00                    push 00000000
:00449CFD B910414A00              mov ecx, 004A4110
:00449D02 E89798FCFF              call 0041359E
:00449D07 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00449D0A 33D2                    xor edx, edx
:00449D0C 8A1408                  mov dl, byte ptr [eax+ecx]
:00449D0F 81FAFF000000            cmp edx, 000000FF
:00449D15 7441                    je 00449D58
:00449D17 6A20                    push 00000020
:00449D19 6A00                    push 00000000
:00449D1B B910414A00              mov ecx, 004A4110
:00449D20 E87998FCFF              call 0041359E
:00449D25 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00449D28 33D2                    xor edx, edx
:00449D2A 8A1408                  mov dl, byte ptr [eax+ecx]
:00449D2D 8BCA                    mov ecx, edx
:00449D2F 6BC924                  imul ecx, 00000024
:00449D32 81C108F54A00            add ecx, 004AF508
:00449D38 E8B35DFEFF              call 0042FAF0
:00449D3D 85C0                    test eax, eax
:00449D3F 7417                    je 00449D58
:00449D41 6A00                    push 00000000
:00449D43 B910414A00              mov ecx, 004A4110
:00449D48 E85198FCFF              call 0041359E
:00449D4D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00449D50 8A0408                  mov al, byte ptr [eax+ecx]
:00449D53 E99B000000              jmp 00449DF3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449CF9(C), :00449D15(C), :00449D3F(C)
|
:00449D58 8B5510                  mov edx, dword ptr [ebp+10]
:00449D5B 81E2FF000000            and edx, 000000FF
:00449D61 83E202                  and edx, 00000002
:00449D64 85D2                    test edx, edx
:00449D66 7418                    je 00449D80
:00449D68 8D45EC                  lea eax, dword ptr [ebp-14]
:00449D6B 50                      push eax
:00449D6C 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:00449D6F 51                      push ecx
:00449D70 E82B5FFEFF              call 0042FCA0
:00449D75 83C408                  add esp, 00000008
:00449D78 85C0                    test eax, eax
:00449D7A 7404                    je 00449D80
:00449D7C B001                    mov al, 01
:00449D7E EB73                    jmp 00449DF3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449D66(C), :00449D7A(C)
|
:00449D80 8B5510                  mov edx, dword ptr [ebp+10]
:00449D83 81E2FF000000            and edx, 000000FF
:00449D89 83E204                  and edx, 00000004
:00449D8C 85D2                    test edx, edx
:00449D8E 740C                    je 00449D9C
:00449D90 8D45B4                  lea eax, dword ptr [ebp-4C]
:00449D93 50                      push eax
:00449D94 8B4D98                  mov ecx, dword ptr [ebp-68]
:00449D97 E81F2C0000              call 0044C9BB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449BDB(C), :00449D8E(C)
|
:00449D9C E9A5FDFFFF              jmp 00449B46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449B53(C)
|
:00449DA1 E9BCFCFFFF              jmp 00449A62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A76(C)
|
:00449DA6 837DE800                cmp dword ptr [ebp-18], 00000000
:00449DAA 7520                    jne 00449DCC
:00449DAC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449DAF 81E1FF000000            and ecx, 000000FF
:00449DB5 81F9FF000000            cmp ecx, 000000FF
:00449DBB 740D                    je 00449DCA
:00449DBD 8A55FC                  mov dl, byte ptr [ebp-04]
:00449DC0 8855B8                  mov byte ptr [ebp-48], dl
:00449DC3 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449DBB(C)
|
:00449DCA EB1B                    jmp 00449DE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449DAA(C)
|
:00449DCC 8B45B8                  mov eax, dword ptr [ebp-48]
:00449DCF 25FF000000              and eax, 000000FF
:00449DD4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449DD7 81E1FF000000            and ecx, 000000FF
:00449DDD 3BC1                    cmp eax, ecx
:00449DDF 7E06                    jle 00449DE7
:00449DE1 8A55FC                  mov dl, byte ptr [ebp-04]
:00449DE4 8855B8                  mov byte ptr [ebp-48], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449DCA(U), :00449DDF(C)
|
:00449DE7 E954FCFFFF              jmp 00449A40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A53(C)
|
:00449DEC E90EFCFFFF              jmp 004499FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449A09(C), :00449A22(C)
|
:00449DF1 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004498BE(U), :004499F0(U), :00449D53(U), :00449D7E(U)
|
:00449DF3 5E                      pop esi
:00449DF4 8BE5                    mov esp, ebp
:00449DF6 5D                      pop ebp
:00449DF7 C21800                  ret 0018



* Referenced by a CALL at Address:
|:0044A677   
|
:00449DFA 55                      push ebp
:00449DFB 8BEC                    mov ebp, esp
:00449DFD 83EC10                  sub esp, 00000010
:00449E00 894DF0                  mov dword ptr [ebp-10], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449E03 68FF000000              push 000000FF
:00449E08 6880070000              push 00000780
:00449E0D 6A00                    push 00000000
:00449E0F B930DF4A00              mov ecx, 004ADF30
:00449E14 E88597FCFF              call 0041359E
:00449E19 0500960000              add eax, 00009600
:00449E1E 50                      push eax
:00449E1F E8248A0100              call 00462848
:00449E24 83C40C                  add esp, 0000000C
:00449E27 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449E2A E8515EFEFF              call 0042FC80
:00449E2F 8845FC                  mov byte ptr [ebp-04], al
:00449E32 6A00                    push 00000000
:00449E34 6A00                    push 00000000
:00449E36 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449E39 E8990AFEFF              call 0042A8D7
:00449E3E 50                      push eax
:00449E3F 8B45F0                  mov eax, dword ptr [ebp-10]
:00449E42 83C005                  add eax, 00000005
:00449E45 50                      push eax
:00449E46 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449E49 E81CDDFFFF              call 00447B6A
:00449E4E 8845F8                  mov byte ptr [ebp-08], al

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449E51 6A04                    push 00000004
:00449E53 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449E56 E8955CFEFF              call 0042FAF0
:00449E5B 85C0                    test eax, eax
:00449E5D 7512                    jne 00449E71
:00449E5F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449E62 E8895AFEFF              call 0042F8F0
:00449E67 25FF000000              and eax, 000000FF
:00449E6C 83F804                  cmp eax, 00000004
:00449E6F 7505                    jne 00449E76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449E5D(C)
|
:00449E71 E95B010000              jmp 00449FD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449E6F(C)
|
:00449E76 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449E79 8B09                    mov ecx, dword ptr [ecx]
:00449E7B 6BC970                  imul ecx, 00000070
:00449E7E 81C198224900            add ecx, 00492298
:00449E84 E867A9FBFF              call 004047F0
:00449E89 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449E8E 3DFF000000              cmp eax, 000000FF
:00449E93 7505                    jne 00449E9A
:00449E95 E937010000              jmp 00449FD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449E93(C)
|
:00449E9A 8B55F0                  mov edx, dword ptr [ebp-10]
:00449E9D 8B0A                    mov ecx, dword ptr [edx]
:00449E9F 6BC970                  imul ecx, 00000070
:00449EA2 81C198224900            add ecx, 00492298
:00449EA8 E89E88FBFF              call 0040274B
:00449EAD 50                      push eax
:00449EAE 8B45F0                  mov eax, dword ptr [ebp-10]
:00449EB1 8B08                    mov ecx, dword ptr [eax]
:00449EB3 6BC970                  imul ecx, 00000070
:00449EB6 81C198224900            add ecx, 00492298
:00449EBC E8CC7DFBFF              call 00401C8D
:00449EC1 85C0                    test eax, eax
:00449EC3 7505                    jne 00449ECA
:00449EC5 E907010000              jmp 00449FD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449EC3(C)
|
:00449ECA 6A00                    push 00000000
:00449ECC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449ECF E88956FEFF              call 0042F55D
:00449ED4 85C0                    test eax, eax
:00449ED6 7505                    jne 00449EDD
:00449ED8 E9F4000000              jmp 00449FD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449ED6(C)
|
:00449EDD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449EE0 81E1FF000000            and ecx, 000000FF
:00449EE6 81F9FF000000            cmp ecx, 000000FF
:00449EEC 0F84DF000000            je 00449FD1
:00449EF2 6880000000              push 00000080
:00449EF7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449EFA E8F15BFEFF              call 0042FAF0
:00449EFF 85C0                    test eax, eax
:00449F01 0F85CA000000            jne 00449FD1
:00449F07 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449F0A E8E159FEFF              call 0042F8F0
:00449F0F 25FF000000              and eax, 000000FF
:00449F14 83F804                  cmp eax, 00000004
:00449F17 0F84B4000000            je 00449FD1
:00449F1D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449F20 81E1FF000000            and ecx, 000000FF
:00449F26 6BC924                  imul ecx, 00000024
:00449F29 81C108F54A00            add ecx, 004AF508
:00449F2F E86CF4FDFF              call 004293A0
:00449F34 668B10                  mov dx, word ptr [eax]
:00449F37 668955F4                mov word ptr [ebp-0C], dx
:00449F3B 8A45F8                  mov al, byte ptr [ebp-08]
:00449F3E 50                      push eax
:00449F3F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449F42 8A5104                  mov dl, byte ptr [ecx+04]
:00449F45 52                      push edx
:00449F46 E8F8D8FFFF              call 00447843
:00449F4B 83C408                  add esp, 00000008
:00449F4E 6A01                    push 00000001
:00449F50 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449F53 E83F34FEFF              call 0042D397
:00449F58 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00449F5A 68FF000000              push 000000FF
:00449F5F 6A00                    push 00000000
:00449F61 6A01                    push 00000001
:00449F63 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449F66 81E1FF000000            and ecx, 000000FF
:00449F6C 6BC924                  imul ecx, 00000024
:00449F6F 81C108F54A00            add ecx, 004AF508
:00449F75 E8A658FEFF              call 0042F820
:00449F7A 50                      push eax
:00449F7B 8B45F0                  mov eax, dword ptr [ebp-10]
:00449F7E 8A4804                  mov cl, byte ptr [eax+04]
:00449F81 51                      push ecx
:00449F82 B930024B00              mov ecx, 004B0230
:00449F87 E8122CFFFF              call 0043CB9E
:00449F8C 6880000000              push 00000080
:00449F91 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449F94 E88054FEFF              call 0042F419
:00449F99 B9A8034B00              mov ecx, 004B03A8
:00449F9E E8DBA7FFFF              call 0044477E
:00449FA3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449FA6 E8A55DFEFF              call 0042FD50
:00449FAB 25FF000000              and eax, 000000FF
:00449FB0 83F803                  cmp eax, 00000003
:00449FB3 7412                    je 00449FC7
:00449FB5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449FB8 E8935DFEFF              call 0042FD50
:00449FBD 25FF000000              and eax, 000000FF
:00449FC2 83F804                  cmp eax, 00000004
:00449FC5 750A                    jne 00449FD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449FB3(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00449FC7 6A02                    push 00000002
:00449FC9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449FCC E86FFBFEFF              call 00439B40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449E71(U), :00449E95(U), :00449EC5(U), :00449ED8(U), :00449EEC(C)
|:00449F01(C), :00449F17(C), :00449FC5(C)
|
:00449FD1 8BE5                    mov esp, ebp
:00449FD3 5D                      pop ebp
:00449FD4 C3                      ret



* Referenced by a CALL at Addresses:
|:00431C09   , :00438DA1   , :00456247   , :00458DA8   
|
:00449FD5 55                      push ebp
:00449FD6 8BEC                    mov ebp, esp
:00449FD8 83EC1C                  sub esp, 0000001C
:00449FDB 894DEC                  mov dword ptr [ebp-14], ecx
:00449FDE C645FCFF                mov [ebp-04], FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449FE2 6A04                    push 00000004
:00449FE4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00449FE7 E8045BFEFF              call 0042FAF0
:00449FEC 85C0                    test eax, eax
:00449FEE 7409                    je 00449FF9
:00449FF0 C745E864000000          mov [ebp-18], 00000064
:00449FF7 EB10                    jmp 0044A009

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449FEE(C)
|
:00449FF9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00449FFC E82A05FEFF              call 0042A52B
:0044A001 25FF000000              and eax, 000000FF
:0044A006 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449FF7(U)
|
:0044A009 8A45E8                  mov al, byte ptr [ebp-18]
:0044A00C 8845F8                  mov byte ptr [ebp-08], al
:0044A00F 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A012 E899D7FBFF              call 004077B0
:0044A017 C605BC044B00FF          mov byte ptr [004B04BC], FF
:0044A01E C7059C044B0000000000    mov dword ptr [004B049C], 00000000
:0044A028 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A02B 8B11                    mov edx, dword ptr [ecx]
:0044A02D 52                      push edx
:0044A02E B9880B4B00              mov ecx, 004B0B88
:0044A033 E888FAFEFF              call 00439AC0
:0044A038 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A03B 33C9                    xor ecx, ecx
:0044A03D 8A4807                  mov cl, byte ptr [eax+07]
:0044A040 81F9FF000000            cmp ecx, 000000FF
:0044A046 7433                    je 0044A07B
:0044A048 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A04B 33C0                    xor eax, eax
:0044A04D 8A4207                  mov al, byte ptr [edx+07]
:0044A050 8BC8                    mov ecx, eax
:0044A052 6BC924                  imul ecx, 00000024
:0044A055 81C108F54A00            add ecx, 004AF508
:0044A05B E87058FEFF              call 0042F8D0
:0044A060 25FF000000              and eax, 000000FF
:0044A065 83F802                  cmp eax, 00000002
:0044A068 7411                    je 0044A07B
:0044A06A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A06D C64107FF                mov [ecx+07], FF
:0044A071 6A01                    push 00000001
:0044A073 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A076 E83732FEFF              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A046(C), :0044A068(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A07B 6A04                    push 00000004
:0044A07D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A080 E86B5AFEFF              call 0042FAF0
:0044A085 85C0                    test eax, eax
:0044A087 7516                    jne 0044A09F
:0044A089 6880000000              push 00000080
:0044A08E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A091 E85A5AFEFF              call 0042FAF0
:0044A096 85C0                    test eax, eax
:0044A098 7405                    je 0044A09F
:0044A09A E90E060000              jmp 0044A6AD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A087(C), :0044A098(C)
|
:0044A09F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A0A2 E82958FEFF              call 0042F8D0
:0044A0A7 25FF000000              and eax, 000000FF
:0044A0AC 83F802                  cmp eax, 00000002
:0044A0AF 0F85F8050000            jne 0044A6AD
:0044A0B5 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A0B8 33C0                    xor eax, eax
:0044A0BA 8A421C                  mov al, byte ptr [edx+1C]
:0044A0BD 83E010                  and eax, 00000010
:0044A0C0 85C0                    test eax, eax
:0044A0C2 0F85E5050000            jne 0044A6AD

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A0C8 68FF000000              push 000000FF
:0044A0CD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A0D0 E80BE8FFFF              call 004488E0
:0044A0D5 33C9                    xor ecx, ecx
:0044A0D7 8A0DA4044B00            mov cl, byte ptr [004B04A4]
:0044A0DD 83E101                  and ecx, 00000001
:0044A0E0 85C9                    test ecx, ecx
:0044A0E2 0F848E010000            je 0044A276

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A0E8 6A04                    push 00000004
:0044A0EA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A0ED E8FE59FEFF              call 0042FAF0
:0044A0F2 85C0                    test eax, eax
:0044A0F4 0F857C010000            jne 0044A276
:0044A0FA 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A0FD 33C0                    xor eax, eax
:0044A0FF 8A4204                  mov al, byte ptr [edx+04]
:0044A102 83F81E                  cmp eax, 0000001E
:0044A105 0F846B010000            je 0044A276
:0044A10B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A10E E8BD51FCFF              call 0040F2D0
:0044A113 85C0                    test eax, eax
:0044A115 7415                    je 0044A12C
:0044A117 B908F54A00              mov ecx, 004AF508
:0044A11C E87FF2FDFF              call 004293A0
:0044A121 50                      push eax
:0044A122 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A125 E86656FEFF              call 0042F790
:0044A12A EB2D                    jmp 0044A159

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A115(C)
|
:0044A12C B940F94A00              mov ecx, 004AF940
:0044A131 E89A57FEFF              call 0042F8D0
:0044A136 25FF000000              and eax, 000000FF
:0044A13B 83F802                  cmp eax, 00000002
:0044A13E 7515                    jne 0044A155
:0044A140 B940F94A00              mov ecx, 004AF940
:0044A145 E856F2FDFF              call 004293A0
:0044A14A 50                      push eax
:0044A14B 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A14E E83D56FEFF              call 0042F790
:0044A153 EB04                    jmp 0044A159

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A13E(C)
|
:0044A155 C645F4FF                mov [ebp-0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A12A(U), :0044A153(U)
|
:0044A159 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044A15C 81E1FF000000            and ecx, 000000FF
:0044A162 81F9FF000000            cmp ecx, 000000FF
:0044A168 0F84F7000000            je 0044A265
:0044A16E 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A171 8A4204                  mov al, byte ptr [edx+04]
:0044A174 50                      push eax

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044A175 6A0A                    push 0000000A
:0044A177 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A17A 51                      push ecx
:0044A17B E83EF5FFFF              call 004496BE
:0044A180 83C40C                  add esp, 0000000C
:0044A183 6A01                    push 00000001
:0044A185 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A188 8A4206                  mov al, byte ptr [edx+06]
:0044A18B 50                      push eax
:0044A18C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A18F 8A5105                  mov dl, byte ptr [ecx+05]
:0044A192 52                      push edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044A193 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A195 68FF000000              push 000000FF
:0044A19A 8D45F4                  lea eax, dword ptr [ebp-0C]
:0044A19D 50                      push eax
:0044A19E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A1A1 E899F6FFFF              call 0044983F
:0044A1A6 25FF000000              and eax, 000000FF
:0044A1AB 83F801                  cmp eax, 00000001
:0044A1AE 7479                    je 0044A229
:0044A1B0 6A00                    push 00000000
:0044A1B2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A1B5 8A5106                  mov dl, byte ptr [ecx+06]
:0044A1B8 52                      push edx
:0044A1B9 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A1BC 8A4805                  mov cl, byte ptr [eax+05]
:0044A1BF 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044A1C0 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A1C2 68FF000000              push 000000FF
:0044A1C7 8D55F4                  lea edx, dword ptr [ebp-0C]
:0044A1CA 52                      push edx
:0044A1CB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A1CE E86CF6FFFF              call 0044983F
:0044A1D3 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A1D8 3DFF000000              cmp eax, 000000FF
:0044A1DD 743C                    je 0044A21B
:0044A1DF 6A01                    push 00000001
:0044A1E1 8A45F8                  mov al, byte ptr [ebp-08]
:0044A1E4 50                      push eax
:0044A1E5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A1E8 83C105                  add ecx, 00000005
:0044A1EB 51                      push ecx
:0044A1EC 8D55F4                  lea edx, dword ptr [ebp-0C]
:0044A1EF 52                      push edx
:0044A1F0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A1F3 E8A8F1FFFF              call 004493A0
:0044A1F8 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A1FA 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A1FF 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A204 6A04                    push 00000004
:0044A206 8A45F8                  mov al, byte ptr [ebp-08]
:0044A209 50                      push eax
:0044A20A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A20D 83C105                  add ecx, 00000005
:0044A210 51                      push ecx
:0044A211 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A214 E826F6FFFF              call 0044983F
:0044A219 EB0C                    jmp 0044A227

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A1DD(C)
|
:0044A21B 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A21E 52                      push edx
:0044A21F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A222 E82C3D0000              call 0044DF53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A219(U)
|
:0044A227 EB3A                    jmp 0044A263

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A1AE(C)
|
:0044A229 6A01                    push 00000001
:0044A22B 8A45F8                  mov al, byte ptr [ebp-08]
:0044A22E 50                      push eax
:0044A22F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A232 83C105                  add ecx, 00000005
:0044A235 51                      push ecx
:0044A236 8D55F4                  lea edx, dword ptr [ebp-0C]
:0044A239 52                      push edx
:0044A23A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A23D E85EF1FFFF              call 004493A0
:0044A242 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A244 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A249 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A24E 6A04                    push 00000004
:0044A250 8A45F8                  mov al, byte ptr [ebp-08]
:0044A253 50                      push eax
:0044A254 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A257 83C105                  add ecx, 00000005
:0044A25A 51                      push ecx
:0044A25B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A25E E8DCF5FFFF              call 0044983F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A227(U)
|
:0044A263 EB0C                    jmp 0044A271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A168(C)
|
:0044A265 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A268 52                      push edx
:0044A269 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A26C E8E23C0000              call 0044DF53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A263(U)
|
:0044A271 E9B0030000              jmp 0044A626

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A0E2(C), :0044A0F4(C), :0044A105(C)
|
:0044A276 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A279 E87256FEFF              call 0042F8F0
:0044A27E 25FF000000              and eax, 000000FF
:0044A283 8945E4                  mov dword ptr [ebp-1C], eax
:0044A286 837DE404                cmp dword ptr [ebp-1C], 00000004
:0044A28A 0F878C030000            ja 0044A61C
:0044A290 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044A293 FF2485B1A64400          jmp dword ptr [4*eax+0044A6B1]
:0044A29A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A29D 33D2                    xor edx, edx
:0044A29F 8A5107                  mov dl, byte ptr [ecx+07]
:0044A2A2 81FAFF000000            cmp edx, 000000FF
:0044A2A8 0F848B000000            je 0044A339
:0044A2AE 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A2B1 33C9                    xor ecx, ecx
:0044A2B3 8A4807                  mov cl, byte ptr [eax+07]
:0044A2B6 6BC924                  imul ecx, 00000024
:0044A2B9 81C108F54A00            add ecx, 004AF508
:0044A2BF E8DCF0FDFF              call 004293A0
:0044A2C4 50                      push eax
:0044A2C5 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A2C8 E8C354FEFF              call 0042F790
:0044A2CD 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A2D0 33C0                    xor eax, eax
:0044A2D2 8A4207                  mov al, byte ptr [edx+07]
:0044A2D5 8BC8                    mov ecx, eax
:0044A2D7 6BC924                  imul ecx, 00000024
:0044A2DA 81C108F54A00            add ecx, 004AF508
:0044A2E0 E80B56FEFF              call 0042F8F0
:0044A2E5 25FF000000              and eax, 000000FF
:0044A2EA 85C0                    test eax, eax
:0044A2EC 7422                    je 0044A310
:0044A2EE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A2F1 33D2                    xor edx, edx
:0044A2F3 8A5107                  mov dl, byte ptr [ecx+07]
:0044A2F6 8BCA                    mov ecx, edx
:0044A2F8 6BC924                  imul ecx, 00000024
:0044A2FB 81C108F54A00            add ecx, 004AF508
:0044A301 E8EA55FEFF              call 0042F8F0
:0044A306 25FF000000              and eax, 000000FF
:0044A30B 83F804                  cmp eax, 00000004
:0044A30E 7527                    jne 0044A337

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A2EC(C)
|
:0044A310 8D45F0                  lea eax, dword ptr [ebp-10]
:0044A313 50                      push eax
:0044A314 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A317 33D2                    xor edx, edx
:0044A319 8A5107                  mov dl, byte ptr [ecx+07]
:0044A31C 8BCA                    mov ecx, edx
:0044A31E 6BC924                  imul ecx, 00000024
:0044A321 81C108F54A00            add ecx, 004AF508
:0044A327 E8B43D0000              call 0044E0E0
:0044A32C 50                      push eax
:0044A32D B9BC044B00              mov ecx, 004B04BC
:0044A332 E85954FEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A30E(C)
|
:0044A337 EB0F                    jmp 0044A348

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A2A8(C)
|
:0044A339 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A33C 83C008                  add eax, 00000008
:0044A33F 50                      push eax
:0044A340 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A343 E84854FEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A337(U)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A348 6A04                    push 00000004
:0044A34A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A34D E89E57FEFF              call 0042FAF0
:0044A352 85C0                    test eax, eax
:0044A354 0F857E010000            jne 0044A4D8
:0044A35A 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A35C 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A361 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044A366 6A08                    push 00000008
:0044A368 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044A36B 51                      push ecx
:0044A36C 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A36F 83C205                  add edx, 00000005
:0044A372 52                      push edx
:0044A373 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A376 E8C4F4FFFF              call 0044983F
:0044A37B 8845FC                  mov byte ptr [ebp-04], al
:0044A37E 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A381 33C9                    xor ecx, ecx
:0044A383 8A4807                  mov cl, byte ptr [eax+07]
:0044A386 81F9FF000000            cmp ecx, 000000FF
:0044A38C 7450                    je 0044A3DE
:0044A38E 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A391 81E2FF000000            and edx, 000000FF
:0044A397 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A39A 33C9                    xor ecx, ecx
:0044A39C 8A4807                  mov cl, byte ptr [eax+07]
:0044A39F 3BD1                    cmp edx, ecx
:0044A3A1 753B                    jne 0044A3DE
:0044A3A3 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A3A6 8A4204                  mov al, byte ptr [edx+04]
:0044A3A9 50                      push eax
:0044A3AA 6A14                    push 00000014
:0044A3AC 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A3AF 51                      push ecx
:0044A3B0 E809F3FFFF              call 004496BE
:0044A3B5 83C40C                  add esp, 0000000C
:0044A3B8 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A3BA 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A3BF 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A3C4 6A04                    push 00000004
:0044A3C6 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A3C9 52                      push edx
:0044A3CA 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A3CD 83C005                  add eax, 00000005
:0044A3D0 50                      push eax
:0044A3D1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A3D4 E866F4FFFF              call 0044983F
:0044A3D9 E9F5000000              jmp 0044A4D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A38C(C), :0044A3A1(C)
|
:0044A3DE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A3E1 8A5104                  mov dl, byte ptr [ecx+04]
:0044A3E4 52                      push edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044A3E5 6A0A                    push 0000000A
:0044A3E7 8D45F4                  lea eax, dword ptr [ebp-0C]
:0044A3EA 50                      push eax
:0044A3EB E8CEF2FFFF              call 004496BE
:0044A3F0 83C40C                  add esp, 0000000C
:0044A3F3 6A01                    push 00000001
:0044A3F5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A3F8 8A5106                  mov dl, byte ptr [ecx+06]
:0044A3FB 52                      push edx
:0044A3FC 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A3FF 8A4805                  mov cl, byte ptr [eax+05]
:0044A402 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044A403 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A405 68FF000000              push 000000FF
:0044A40A 8D55F4                  lea edx, dword ptr [ebp-0C]
:0044A40D 52                      push edx
:0044A40E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A411 E829F4FFFF              call 0044983F
:0044A416 25FF000000              and eax, 000000FF
:0044A41B 83F801                  cmp eax, 00000001
:0044A41E 7479                    je 0044A499
:0044A420 6A00                    push 00000000
:0044A422 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A425 8A4806                  mov cl, byte ptr [eax+06]
:0044A428 51                      push ecx
:0044A429 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A42C 8A4205                  mov al, byte ptr [edx+05]
:0044A42F 50                      push eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044A430 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A432 68FF000000              push 000000FF
:0044A437 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A43A 51                      push ecx
:0044A43B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A43E E8FCF3FFFF              call 0044983F
:0044A443 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A448 3DFF000000              cmp eax, 000000FF
:0044A44D 743C                    je 0044A48B
:0044A44F 6A01                    push 00000001
:0044A451 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A454 52                      push edx
:0044A455 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A458 83C005                  add eax, 00000005
:0044A45B 50                      push eax
:0044A45C 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A45F 51                      push ecx
:0044A460 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A463 E838EFFFFF              call 004493A0
:0044A468 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A46A 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A46F 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A474 6A04                    push 00000004
:0044A476 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A479 52                      push edx
:0044A47A 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A47D 83C005                  add eax, 00000005
:0044A480 50                      push eax
:0044A481 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A484 E8B6F3FFFF              call 0044983F
:0044A489 EB0C                    jmp 0044A497

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A44D(C)
|
:0044A48B 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044A48E 51                      push ecx
:0044A48F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A492 E8BC3A0000              call 0044DF53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A489(U)
|
:0044A497 EB3A                    jmp 0044A4D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A41E(C)
|
:0044A499 6A01                    push 00000001
:0044A49B 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A49E 52                      push edx
:0044A49F 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A4A2 83C005                  add eax, 00000005
:0044A4A5 50                      push eax
:0044A4A6 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A4A9 51                      push ecx
:0044A4AA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A4AD E8EEEEFFFF              call 004493A0
:0044A4B2 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A4B4 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A4B9 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A4BE 6A04                    push 00000004
:0044A4C0 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A4C3 52                      push edx
:0044A4C4 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A4C7 83C005                  add eax, 00000005
:0044A4CA 50                      push eax
:0044A4CB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A4CE E86CF3FFFF              call 0044983F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A3D9(U), :0044A497(U)
|
:0044A4D3 E996000000              jmp 0044A56E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A354(C)
|
:0044A4D8 6A01                    push 00000001
:0044A4DA 8A4DF5                  mov cl, byte ptr [ebp-0B]
:0044A4DD 51                      push ecx
:0044A4DE 8A55F4                  mov dl, byte ptr [ebp-0C]
:0044A4E1 52                      push edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044A4E2 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A4E4 68FF000000              push 000000FF
:0044A4E9 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A4EC 83C005                  add eax, 00000005
:0044A4EF 50                      push eax
:0044A4F0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A4F3 E847F3FFFF              call 0044983F
:0044A4F8 25FF000000              and eax, 000000FF
:0044A4FD 83F801                  cmp eax, 00000001
:0044A500 745E                    je 0044A560
:0044A502 6A00                    push 00000000
:0044A504 8A4DF5                  mov cl, byte ptr [ebp-0B]
:0044A507 51                      push ecx
:0044A508 8A55F4                  mov dl, byte ptr [ebp-0C]
:0044A50B 52                      push edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044A50C 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A50E 68FF000000              push 000000FF
:0044A513 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A516 83C005                  add eax, 00000005
:0044A519 50                      push eax
:0044A51A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A51D E81DF3FFFF              call 0044983F
:0044A522 25FF000000              and eax, 000000FF
:0044A527 85C0                    test eax, eax
:0044A529 7410                    je 0044A53B
:0044A52B 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A52E 51                      push ecx
:0044A52F B9A0044B00              mov ecx, 004B04A0
:0044A534 E85752FEFF              call 0042F790
:0044A539 EB23                    jmp 0044A55E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A529(C)
|
:0044A53B 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A53E 83C205                  add edx, 00000005
:0044A541 52                      push edx
:0044A542 B9A0044B00              mov ecx, 004B04A0
:0044A547 E84452FEFF              call 0042F790
:0044A54C 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A54F 83C005                  add eax, 00000005
:0044A552 50                      push eax
:0044A553 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A556 83C108                  add ecx, 00000008
:0044A559 E83252FEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A539(U)
|
:0044A55E EB0E                    jmp 0044A56E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A500(C)
|
:0044A560 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A563 51                      push ecx
:0044A564 B9A0044B00              mov ecx, 004B04A0
:0044A569 E82252FEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A4D3(U), :0044A55E(U)
|
:0044A56E E9A9000000              jmp 0044A61C
:0044A573 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A575 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A57A 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044A57F 6A08                    push 00000008
:0044A581 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A584 52                      push edx
:0044A585 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A588 83C005                  add eax, 00000005
:0044A58B 50                      push eax
:0044A58C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A58F E8ABF2FFFF              call 0044983F
:0044A594 8845FC                  mov byte ptr [ebp-04], al
:0044A597 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A59A 81E1FF000000            and ecx, 000000FF
:0044A5A0 81F9FF000000            cmp ecx, 000000FF
:0044A5A6 7423                    je 0044A5CB
:0044A5A8 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A5AA 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A5AF 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A5B4 6A04                    push 00000004
:0044A5B6 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A5B9 52                      push edx
:0044A5BA 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A5BD 83C005                  add eax, 00000005
:0044A5C0 50                      push eax
:0044A5C1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A5C4 E876F2FFFF              call 0044983F
:0044A5C9 EB11                    jmp 0044A5DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A5A6(C)
|
:0044A5CB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A5CE 83C105                  add ecx, 00000005
:0044A5D1 51                      push ecx
:0044A5D2 B9A0044B00              mov ecx, 004B04A0
:0044A5D7 E8B451FEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A5C9(U)
|
:0044A5DC EB3E                    jmp 0044A61C
:0044A5DE 8A55F8                  mov dl, byte ptr [ebp-08]
:0044A5E1 52                      push edx
:0044A5E2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A5E5 E869390000              call 0044DF53
:0044A5EA EB30                    jmp 0044A61C
:0044A5EC 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A5EE 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044A5F3 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A5F8 6A04                    push 00000004
:0044A5FA 6A00                    push 00000000
:0044A5FC 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A5FF 83C005                  add eax, 00000005
:0044A602 50                      push eax
:0044A603 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A606 E834F2FFFF              call 0044983F
:0044A60B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A60E 83C105                  add ecx, 00000005
:0044A611 51                      push ecx
:0044A612 B9A0044B00              mov ecx, 004B04A0
:0044A617 E87451FEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A28A(C), :0044A56E(U), :0044A5DC(U), :0044A5EA(U)
|
:0044A61C B9180A4B00              mov ecx, 004B0A18
:0044A621 E87AE00000              call 004586A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A271(U)
|
:0044A626 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A629 E8E1E4FFFF              call 00448B0F
:0044A62E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A631 E89F2CFEFF              call 0042D2D5
:0044A636 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A639 E8C23A0000              call 0044E100
:0044A63E 85C0                    test eax, eax
:0044A640 7402                    je 0044A644
:0044A642 EB69                    jmp 0044A6AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A640(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A644 6A04                    push 00000004
:0044A646 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A649 E8A254FEFF              call 0042FAF0
:0044A64E 85C0                    test eax, eax
:0044A650 755B                    jne 0044A6AD
:0044A652 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A655 E89652FEFF              call 0042F8F0
:0044A65A 25FF000000              and eax, 000000FF
:0044A65F 83F804                  cmp eax, 00000004
:0044A662 7449                    je 0044A6AD
:0044A664 33D2                    xor edx, edx
:0044A666 8A15C8044B00            mov dl, byte ptr [004B04C8]
:0044A66C 81FAFF000000            cmp edx, 000000FF
:0044A672 750A                    jne 0044A67E
:0044A674 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A677 E87EF7FFFF              call 00449DFA
:0044A67C EB2F                    jmp 0044A6AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A672(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044A67E 6A02                    push 00000002
:0044A680 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A683 E80F2DFEFF              call 0042D397
:0044A688 A0C8044B00              mov al, byte ptr [004B04C8]
:0044A68D 50                      push eax
:0044A68E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A691 E89E8DFEFF              call 00433434
:0044A696 33C9                    xor ecx, ecx
:0044A698 8A0DC8044B00            mov cl, byte ptr [004B04C8]
:0044A69E 83F92C                  cmp ecx, 0000002C
:0044A6A1 750A                    jne 0044A6AD
:0044A6A3 C705440A4B0001000000    mov dword ptr [004B0A44], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A09A(U), :0044A0AF(C), :0044A0C2(C), :0044A642(U), :0044A650(C)
|:0044A662(C), :0044A67C(U), :0044A6A1(C)
|
:0044A6AD 8BE5                    mov esp, ebp
:0044A6AF 5D                      pop ebp
:0044A6B0 C3                      ret



:0044A6B1 9AA24400                DWORD 0044A29A
:0044A6B5 DEA54400                DWORD 0044A5DE
:0044A6B9 ECA54400                DWORD 0044A5EC
:0044A6BD 73A54400                DWORD 0044A573
:0044A6C1 9AA24400                DWORD 0044A29A



* Referenced by a CALL at Addresses:
|:004490EB   , :004491DE   , :00449248   , :00449295   , :004492DF   
|:0044B4F3   , :0044B54E   , :0044B580   , :0044B63B   , :0044B791   
|:0044B895   , :0044B909   , :0044B9B0   , :0044BAA6   , :0044BB14   
|:0044BBE6   , :0044BC54   , :0044BD8C   , :0044BE04   , :0044BE3B   
|:0044BE7F   , :0044BF3A   , :0044BFE0   , :0044C0DA   
|
:0044A6C5 55                      push ebp
:0044A6C6 8BEC                    mov ebp, esp
:0044A6C8 83EC14                  sub esp, 00000014
:0044A6CB 56                      push esi
:0044A6CC 8A4514                  mov al, byte ptr [ebp+14]
:0044A6CF 50                      push eax
:0044A6D0 6A00                    push 00000000
:0044A6D2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044A6D5 81E1FF000000            and ecx, 000000FF
:0044A6DB 51                      push ecx
:0044A6DC 8B5510                  mov edx, dword ptr [ebp+10]
:0044A6DF 81E2FF000000            and edx, 000000FF
:0044A6E5 52                      push edx
:0044A6E6 E8FB59FEFF              call 004300E6
:0044A6EB 83C410                  add esp, 00000010
:0044A6EE 85C0                    test eax, eax
:0044A6F0 7507                    jne 0044A6F9
:0044A6F2 33C0                    xor eax, eax
:0044A6F4 E975060000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A6F0(C)
|
:0044A6F9 8B450C                  mov eax, dword ptr [ebp+0C]
:0044A6FC 25FF000000              and eax, 000000FF
:0044A701 6BC024                  imul eax, 00000024
:0044A704 0508F54A00              add eax, 004AF508
:0044A709 8945F0                  mov dword ptr [ebp-10], eax
:0044A70C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A70F E8BC4FFEFF              call 0042F6D0
:0044A714 6BC070                  imul eax, 00000070
:0044A717 0598224900              add eax, 00492298
:0044A71C 8945F8                  mov dword ptr [ebp-08], eax
:0044A71F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A722 E879ECFDFF              call 004293A0
:0044A727 50                      push eax
:0044A728 E852D2FFFF              call 0044797F
:0044A72D 83C404                  add esp, 00000004
:0044A730 8845FC                  mov byte ptr [ebp-04], al
:0044A733 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A736 E8A550FEFF              call 0042F7E0
:0044A73B 8845F4                  mov byte ptr [ebp-0C], al
:0044A73E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044A741 81E1FF000000            and ecx, 000000FF
:0044A747 894DEC                  mov dword ptr [ebp-14], ecx
:0044A74A 837DEC30                cmp dword ptr [ebp-14], 00000030
:0044A74E 0F8718060000            ja 0044AD6C
:0044A754 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A757 33D2                    xor edx, edx
:0044A759 8A90EFAD4400            mov dl, byte ptr [eax+0044ADEF]
:0044A75F FF249573AD4400          jmp dword ptr [4*edx+0044AD73]
:0044A766 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044A769 51                      push ecx
:0044A76A 8A5508                  mov dl, byte ptr [ebp+08]
:0044A76D 52                      push edx
:0044A76E E8AD060000              call 0044AE20
:0044A773 83C408                  add esp, 00000008
:0044A776 E9F3050000              jmp 0044AD6E
:0044A77B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A77E E89D50FEFF              call 0042F820
:0044A783 25FF000000              and eax, 000000FF
:0044A788 85C0                    test eax, eax
:0044A78A 7412                    je 0044A79E
:0044A78C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A78F E88C50FEFF              call 0042F820
:0044A794 25FF000000              and eax, 000000FF
:0044A799 83F81E                  cmp eax, 0000001E
:0044A79C 7507                    jne 0044A7A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A78A(C)
|
:0044A79E 33C0                    xor eax, eax
:0044A7A0 E9C9050000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A79C(C)
|
:0044A7A5 8A450C                  mov al, byte ptr [ebp+0C]
:0044A7A8 50                      push eax
:0044A7A9 8A4D08                  mov cl, byte ptr [ebp+08]
:0044A7AC 51                      push ecx
:0044A7AD E86E060000              call 0044AE20
:0044A7B2 83C408                  add esp, 00000008
:0044A7B5 E9B4050000              jmp 0044AD6E
:0044A7BA 8A550C                  mov dl, byte ptr [ebp+0C]
:0044A7BD 52                      push edx
:0044A7BE 8A4508                  mov al, byte ptr [ebp+08]
:0044A7C1 50                      push eax
:0044A7C2 E859060000              call 0044AE20
:0044A7C7 83C408                  add esp, 00000008
:0044A7CA E99F050000              jmp 0044AD6E
:0044A7CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A7D2 81E1FF000000            and ecx, 000000FF
:0044A7D8 83F905                  cmp ecx, 00000005
:0044A7DB 7421                    je 0044A7FE
:0044A7DD 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A7E0 81E2FF000000            and edx, 000000FF
:0044A7E6 83FA01                  cmp edx, 00000001
:0044A7E9 7413                    je 0044A7FE
:0044A7EB 8B45FC                  mov eax, dword ptr [ebp-04]
:0044A7EE 25FF000000              and eax, 000000FF
:0044A7F3 85C0                    test eax, eax
:0044A7F5 7407                    je 0044A7FE
:0044A7F7 33C0                    xor eax, eax
:0044A7F9 E970050000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A7DB(C), :0044A7E9(C), :0044A7F5(C)
|
:0044A7FE 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044A801 51                      push ecx
:0044A802 8A5508                  mov dl, byte ptr [ebp+08]
:0044A805 52                      push edx
:0044A806 E815060000              call 0044AE20
:0044A80B 83C408                  add esp, 00000008
:0044A80E E95B050000              jmp 0044AD6E
:0044A813 8B45FC                  mov eax, dword ptr [ebp-04]
:0044A816 25FF000000              and eax, 000000FF
:0044A81B 83F80A                  cmp eax, 0000000A
:0044A81E 7423                    je 0044A843
:0044A820 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A823 81E1FF000000            and ecx, 000000FF
:0044A829 83F90D                  cmp ecx, 0000000D
:0044A82C 7415                    je 0044A843
:0044A82E 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A831 81E2FF000000            and edx, 000000FF
:0044A837 83FA0E                  cmp edx, 0000000E
:0044A83A 7407                    je 0044A843
:0044A83C 33C0                    xor eax, eax
:0044A83E E92B050000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A81E(C), :0044A82C(C), :0044A83A(C)
|
:0044A843 8A450C                  mov al, byte ptr [ebp+0C]
:0044A846 50                      push eax
:0044A847 8A4D08                  mov cl, byte ptr [ebp+08]
:0044A84A 51                      push ecx
:0044A84B E8D0050000              call 0044AE20
:0044A850 83C408                  add esp, 00000008
:0044A853 E916050000              jmp 0044AD6E
:0044A858 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A85B 81E2FF000000            and edx, 000000FF
:0044A861 83FA05                  cmp edx, 00000005
:0044A864 7407                    je 0044A86D
:0044A866 33C0                    xor eax, eax
:0044A868 E901050000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A864(C)
|
:0044A86D 8A450C                  mov al, byte ptr [ebp+0C]
:0044A870 50                      push eax
:0044A871 8A4D08                  mov cl, byte ptr [ebp+08]
:0044A874 51                      push ecx
:0044A875 E8A6050000              call 0044AE20
:0044A87A 83C408                  add esp, 00000008
:0044A87D E9EC040000              jmp 0044AD6E
:0044A882 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A885 81E2FF000000            and edx, 000000FF
:0044A88B 83FA07                  cmp edx, 00000007
:0044A88E 7407                    je 0044A897
:0044A890 33C0                    xor eax, eax
:0044A892 E9D7040000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A88E(C)
|
:0044A897 8A450C                  mov al, byte ptr [ebp+0C]
:0044A89A 50                      push eax
:0044A89B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044A89E 51                      push ecx
:0044A89F E87C050000              call 0044AE20
:0044A8A4 83C408                  add esp, 00000008
:0044A8A7 E9C2040000              jmp 0044AD6E
:0044A8AC 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A8AF 81E2FF000000            and edx, 000000FF
:0044A8B5 83FA0A                  cmp edx, 0000000A
:0044A8B8 7407                    je 0044A8C1
:0044A8BA 33C0                    xor eax, eax
:0044A8BC E9AD040000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A8B8(C)
|
:0044A8C1 8A450C                  mov al, byte ptr [ebp+0C]
:0044A8C4 50                      push eax
:0044A8C5 8A4D08                  mov cl, byte ptr [ebp+08]
:0044A8C8 51                      push ecx
:0044A8C9 E852050000              call 0044AE20
:0044A8CE 83C408                  add esp, 00000008
:0044A8D1 E998040000              jmp 0044AD6E
:0044A8D6 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A8D9 81E2FF000000            and edx, 000000FF
:0044A8DF 83FA07                  cmp edx, 00000007
:0044A8E2 7407                    je 0044A8EB
:0044A8E4 33C0                    xor eax, eax
:0044A8E6 E983040000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A8E2(C)
|
:0044A8EB 8A450C                  mov al, byte ptr [ebp+0C]
:0044A8EE 50                      push eax
:0044A8EF 8A4D08                  mov cl, byte ptr [ebp+08]
:0044A8F2 51                      push ecx
:0044A8F3 E828050000              call 0044AE20
:0044A8F8 83C408                  add esp, 00000008
:0044A8FB E96E040000              jmp 0044AD6E
:0044A900 8A550C                  mov dl, byte ptr [ebp+0C]
:0044A903 52                      push edx
:0044A904 8A4508                  mov al, byte ptr [ebp+08]
:0044A907 50                      push eax
:0044A908 E813050000              call 0044AE20
:0044A90D 83C408                  add esp, 00000008
:0044A910 E959040000              jmp 0044AD6E
:0044A915 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044A918 81E1FF000000            and ecx, 000000FF
:0044A91E 83F901                  cmp ecx, 00000001
:0044A921 7430                    je 0044A953
:0044A923 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044A926 81E2FF000000            and edx, 000000FF
:0044A92C 83FA03                  cmp edx, 00000003
:0044A92F 7422                    je 0044A953
:0044A931 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044A934 25FF000000              and eax, 000000FF
:0044A939 83F805                  cmp eax, 00000005
:0044A93C 7415                    je 0044A953
:0044A93E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044A941 81E1FF000000            and ecx, 000000FF
:0044A947 83F907                  cmp ecx, 00000007
:0044A94A 7407                    je 0044A953
:0044A94C 33C0                    xor eax, eax
:0044A94E E91B040000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A921(C), :0044A92F(C), :0044A93C(C), :0044A94A(C)
|
:0044A953 6A01                    push 00000001
:0044A955 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A958 E8034EFEFF              call 0042F760
:0044A95D 85C0                    test eax, eax
:0044A95F 7407                    je 0044A968
:0044A961 33C0                    xor eax, eax
:0044A963 E906040000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A95F(C)
|
:0044A968 8A550C                  mov dl, byte ptr [ebp+0C]
:0044A96B 52                      push edx
:0044A96C 8A4508                  mov al, byte ptr [ebp+08]
:0044A96F 50                      push eax
:0044A970 E8AB040000              call 0044AE20
:0044A975 83C408                  add esp, 00000008
:0044A978 E9F1030000              jmp 0044AD6E
:0044A97D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A980 81E1FF000000            and ecx, 000000FF
:0044A986 83F90A                  cmp ecx, 0000000A
:0044A989 7407                    je 0044A992
:0044A98B 33C0                    xor eax, eax
:0044A98D E9DC030000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A989(C)
|
:0044A992 6A01                    push 00000001
:0044A994 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A997 E8C44DFEFF              call 0042F760
:0044A99C 85C0                    test eax, eax
:0044A99E 7407                    je 0044A9A7
:0044A9A0 33C0                    xor eax, eax
:0044A9A2 E9C7030000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A99E(C)
|
:0044A9A7 8A550C                  mov dl, byte ptr [ebp+0C]
:0044A9AA 52                      push edx
:0044A9AB 8A4508                  mov al, byte ptr [ebp+08]
:0044A9AE 50                      push eax
:0044A9AF E86C040000              call 0044AE20
:0044A9B4 83C408                  add esp, 00000008
:0044A9B7 E9B2030000              jmp 0044AD6E
:0044A9BC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A9BF E85C4DFEFF              call 0042F720
:0044A9C4 25FF000000              and eax, 000000FF
:0044A9C9 83F802                  cmp eax, 00000002
:0044A9CC 7507                    jne 0044A9D5
:0044A9CE 33C0                    xor eax, eax
:0044A9D0 E999030000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A9CC(C)
|
:0044A9D5 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044A9D8 51                      push ecx
:0044A9D9 8A5508                  mov dl, byte ptr [ebp+08]
:0044A9DC 52                      push edx
:0044A9DD E83E040000              call 0044AE20
:0044A9E2 83C408                  add esp, 00000008
:0044A9E5 E984030000              jmp 0044AD6E
:0044A9EA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044A9ED 25FF000000              and eax, 000000FF
:0044A9F2 83F809                  cmp eax, 00000009
:0044A9F5 7507                    jne 0044A9FE
:0044A9F7 33C0                    xor eax, eax
:0044A9F9 E970030000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A9F5(C)
|
:0044A9FE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AA01 E83A4DFEFF              call 0042F740
:0044AA06 25FF000000              and eax, 000000FF
:0044AA0B 83F802                  cmp eax, 00000002
:0044AA0E 7507                    jne 0044AA17
:0044AA10 33C0                    xor eax, eax
:0044AA12 E957030000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AA0E(C)
|
:0044AA17 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044AA1A 51                      push ecx
:0044AA1B 8A5508                  mov dl, byte ptr [ebp+08]
:0044AA1E 52                      push edx
:0044AA1F E8FC030000              call 0044AE20
:0044AA24 83C408                  add esp, 00000008
:0044AA27 E942030000              jmp 0044AD6E
:0044AA2C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044AA2F 25FF000000              and eax, 000000FF
:0044AA34 83F809                  cmp eax, 00000009
:0044AA37 7507                    jne 0044AA40
:0044AA39 33C0                    xor eax, eax
:0044AA3B E92E030000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AA37(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044AA40 6A10                    push 00000010
:0044AA42 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AA45 E8164DFEFF              call 0042F760
:0044AA4A 85C0                    test eax, eax
:0044AA4C 7407                    je 0044AA55
:0044AA4E 33C0                    xor eax, eax
:0044AA50 E919030000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AA4C(C)
|
:0044AA55 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044AA58 51                      push ecx
:0044AA59 8A5508                  mov dl, byte ptr [ebp+08]
:0044AA5C 52                      push edx
:0044AA5D E8BE030000              call 0044AE20
:0044AA62 83C408                  add esp, 00000008
:0044AA65 E904030000              jmp 0044AD6E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044AA6A 6A04                    push 00000004
:0044AA6C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AA6F E8EC4CFEFF              call 0042F760
:0044AA74 85C0                    test eax, eax
:0044AA76 7407                    je 0044AA7F
:0044AA78 33C0                    xor eax, eax
:0044AA7A E9EF020000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AA76(C)
|
:0044AA7F 8A450C                  mov al, byte ptr [ebp+0C]
:0044AA82 50                      push eax
:0044AA83 8A4D08                  mov cl, byte ptr [ebp+08]
:0044AA86 51                      push ecx
:0044AA87 E894030000              call 0044AE20
:0044AA8C 83C408                  add esp, 00000008
:0044AA8F E9DA020000              jmp 0044AD6E
:0044AA94 6A01                    push 00000001
:0044AA96 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AA99 E8C24CFEFF              call 0042F760
:0044AA9E 85C0                    test eax, eax
:0044AAA0 7407                    je 0044AAA9
:0044AAA2 33C0                    xor eax, eax
:0044AAA4 E9C5020000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AAA0(C)
|
:0044AAA9 8A550C                  mov dl, byte ptr [ebp+0C]
:0044AAAC 52                      push edx
:0044AAAD 8A4508                  mov al, byte ptr [ebp+08]
:0044AAB0 50                      push eax
:0044AAB1 E86A030000              call 0044AE20
:0044AAB6 83C408                  add esp, 00000008
:0044AAB9 E9B0020000              jmp 0044AD6E
:0044AABE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044AAC1 E84B7AFBFF              call 00402511
:0044AAC6 83F80A                  cmp eax, 0000000A
:0044AAC9 7307                    jnb 0044AAD2
:0044AACB 33C0                    xor eax, eax
:0044AACD E99C020000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AAC9(C)
|
:0044AAD2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AAD5 E8D69DFBFF              call 004048B0
:0044AADA 8BF0                    mov esi, eax
:0044AADC 6A1E                    push 0000001E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044AADE 6A05                    push 00000005
:0044AAE0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044AAE3 E8297AFBFF              call 00402511
:0044AAE8 50                      push eax
:0044AAE9 E872740100              call 00461F60
:0044AAEE 83C40C                  add esp, 0000000C
:0044AAF1 3BF0                    cmp esi, eax
:0044AAF3 7707                    ja 0044AAFC
:0044AAF5 33C0                    xor eax, eax
:0044AAF7 E972020000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AAF3(C)
|
:0044AAFC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044AAFF 51                      push ecx
:0044AB00 8A5508                  mov dl, byte ptr [ebp+08]
:0044AB03 52                      push edx
:0044AB04 E817030000              call 0044AE20
:0044AB09 83C408                  add esp, 00000008
:0044AB0C E95D020000              jmp 0044AD6E
:0044AB11 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AB14 E8579DFBFF              call 00404870
:0044AB19 8BF0                    mov esi, eax
:0044AB1B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044AB1E E8BD79FBFF              call 004024E0
:0044AB23 3BF0                    cmp esi, eax
:0044AB25 7507                    jne 0044AB2E
:0044AB27 33C0                    xor eax, eax
:0044AB29 E940020000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AB25(C)
|
:0044AB2E 8A450C                  mov al, byte ptr [ebp+0C]
:0044AB31 50                      push eax
:0044AB32 8A4D08                  mov cl, byte ptr [ebp+08]
:0044AB35 51                      push ecx
:0044AB36 E8E5020000              call 0044AE20
:0044AB3B 83C408                  add esp, 00000008
:0044AB3E F7D8                    neg eax
:0044AB40 1BC0                    sbb eax, eax
:0044AB42 40                      inc eax
:0044AB43 E926020000              jmp 0044AD6E
:0044AB48 8B5508                  mov edx, dword ptr [ebp+08]
:0044AB4B 81E2FF000000            and edx, 000000FF
:0044AB51 8B450C                  mov eax, dword ptr [ebp+0C]
:0044AB54 25FF000000              and eax, 000000FF
:0044AB59 3BD0                    cmp edx, eax
:0044AB5B 7407                    je 0044AB64
:0044AB5D 33C0                    xor eax, eax
:0044AB5F E90A020000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AB5B(C)
|
:0044AB64 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AB67 E8049DFBFF              call 00404870
:0044AB6C 8BF0                    mov esi, eax
:0044AB6E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044AB71 E86A79FBFF              call 004024E0
:0044AB76 3BF0                    cmp esi, eax
:0044AB78 7507                    jne 0044AB81
:0044AB7A 33C0                    xor eax, eax
:0044AB7C E9ED010000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AB78(C)
|
:0044AB81 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044AB84 51                      push ecx
:0044AB85 8A5508                  mov dl, byte ptr [ebp+08]
:0044AB88 52                      push edx
:0044AB89 E892020000              call 0044AE20
:0044AB8E 83C408                  add esp, 00000008
:0044AB91 F7D8                    neg eax
:0044AB93 1BC0                    sbb eax, eax
:0044AB95 40                      inc eax
:0044AB96 E9D3010000              jmp 0044AD6E

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044AB9B 6A10                    push 00000010
:0044AB9D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044ABA0 E8BB4BFEFF              call 0042F760
:0044ABA5 85C0                    test eax, eax
:0044ABA7 7507                    jne 0044ABB0
:0044ABA9 33C0                    xor eax, eax
:0044ABAB E9BE010000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ABA7(C)
|
:0044ABB0 8A450C                  mov al, byte ptr [ebp+0C]
:0044ABB3 50                      push eax
:0044ABB4 8A4D08                  mov cl, byte ptr [ebp+08]
:0044ABB7 51                      push ecx
:0044ABB8 E863020000              call 0044AE20
:0044ABBD 83C408                  add esp, 00000008
:0044ABC0 F7D8                    neg eax
:0044ABC2 1BC0                    sbb eax, eax
:0044ABC4 40                      inc eax
:0044ABC5 E9A4010000              jmp 0044AD6E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044ABCA 6A04                    push 00000004
:0044ABCC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044ABCF E88C4BFEFF              call 0042F760
:0044ABD4 85C0                    test eax, eax
:0044ABD6 7507                    jne 0044ABDF
:0044ABD8 33C0                    xor eax, eax
:0044ABDA E98F010000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ABD6(C)
|
:0044ABDF 8A550C                  mov dl, byte ptr [ebp+0C]
:0044ABE2 52                      push edx
:0044ABE3 8A4508                  mov al, byte ptr [ebp+08]
:0044ABE6 50                      push eax
:0044ABE7 E834020000              call 0044AE20
:0044ABEC 83C408                  add esp, 00000008
:0044ABEF F7D8                    neg eax
:0044ABF1 1BC0                    sbb eax, eax
:0044ABF3 40                      inc eax
:0044ABF4 E975010000              jmp 0044AD6E
:0044ABF9 6A01                    push 00000001
:0044ABFB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044ABFE E85D4BFEFF              call 0042F760
:0044AC03 85C0                    test eax, eax
:0044AC05 7507                    jne 0044AC0E
:0044AC07 33C0                    xor eax, eax
:0044AC09 E960010000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AC05(C)
|
:0044AC0E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044AC11 51                      push ecx
:0044AC12 8A5508                  mov dl, byte ptr [ebp+08]
:0044AC15 52                      push edx
:0044AC16 E805020000              call 0044AE20
:0044AC1B 83C408                  add esp, 00000008
:0044AC1E F7D8                    neg eax
:0044AC20 1BC0                    sbb eax, eax
:0044AC22 40                      inc eax
:0044AC23 E946010000              jmp 0044AD6E
:0044AC28 6A20                    push 00000020
:0044AC2A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AC2D E82E4BFEFF              call 0042F760
:0044AC32 85C0                    test eax, eax
:0044AC34 7507                    jne 0044AC3D
:0044AC36 33C0                    xor eax, eax
:0044AC38 E931010000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AC34(C)
|
:0044AC3D 8A450C                  mov al, byte ptr [ebp+0C]
:0044AC40 50                      push eax
:0044AC41 8A4D08                  mov cl, byte ptr [ebp+08]
:0044AC44 51                      push ecx
:0044AC45 E8D6010000              call 0044AE20
:0044AC4A 83C408                  add esp, 00000008
:0044AC4D F7D8                    neg eax
:0044AC4F 1BC0                    sbb eax, eax
:0044AC51 40                      inc eax
:0044AC52 E917010000              jmp 0044AD6E
:0044AC57 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AC5A E8C14AFEFF              call 0042F720
:0044AC5F 25FF000000              and eax, 000000FF
:0044AC64 85C0                    test eax, eax
:0044AC66 7507                    jne 0044AC6F
:0044AC68 33C0                    xor eax, eax
:0044AC6A E9FF000000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AC66(C)
|
:0044AC6F 8A550C                  mov dl, byte ptr [ebp+0C]
:0044AC72 52                      push edx
:0044AC73 8A4508                  mov al, byte ptr [ebp+08]
:0044AC76 50                      push eax
:0044AC77 E8A4010000              call 0044AE20
:0044AC7C 83C408                  add esp, 00000008
:0044AC7F F7D8                    neg eax
:0044AC81 1BC0                    sbb eax, eax
:0044AC83 40                      inc eax
:0044AC84 E9E5000000              jmp 0044AD6E
:0044AC89 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044AC8C E8AF4AFEFF              call 0042F740
:0044AC91 25FF000000              and eax, 000000FF
:0044AC96 85C0                    test eax, eax
:0044AC98 7507                    jne 0044ACA1
:0044AC9A 33C0                    xor eax, eax
:0044AC9C E9CD000000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AC98(C)
|
:0044ACA1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044ACA4 51                      push ecx
:0044ACA5 8A5508                  mov dl, byte ptr [ebp+08]
:0044ACA8 52                      push edx
:0044ACA9 E872010000              call 0044AE20
:0044ACAE 83C408                  add esp, 00000008
:0044ACB1 F7D8                    neg eax
:0044ACB3 1BC0                    sbb eax, eax
:0044ACB5 40                      inc eax
:0044ACB6 E9B3000000              jmp 0044AD6E
:0044ACBB 6A40                    push 00000040
:0044ACBD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044ACC0 E82B4EFEFF              call 0042FAF0
:0044ACC5 85C0                    test eax, eax
:0044ACC7 7411                    je 0044ACDA
:0044ACC9 6880000000              push 00000080
:0044ACCE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044ACD1 E81A4EFEFF              call 0042FAF0
:0044ACD6 85C0                    test eax, eax
:0044ACD8 7507                    jne 0044ACE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ACC7(C)
|
:0044ACDA 33C0                    xor eax, eax
:0044ACDC E98D000000              jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ACD8(C)
|
:0044ACE1 8A450C                  mov al, byte ptr [ebp+0C]
:0044ACE4 50                      push eax
:0044ACE5 8A4D08                  mov cl, byte ptr [ebp+08]
:0044ACE8 51                      push ecx
:0044ACE9 E832010000              call 0044AE20
:0044ACEE 83C408                  add esp, 00000008
:0044ACF1 F7D8                    neg eax
:0044ACF3 1BC0                    sbb eax, eax
:0044ACF5 40                      inc eax
:0044ACF6 EB76                    jmp 0044AD6E
:0044ACF8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044ACFB 81E1FF000000            and ecx, 000000FF
:0044AD01 6BC924                  imul ecx, 00000024
:0044AD04 81C108F54A00            add ecx, 004AF508
:0044AD0A E8C145FCFF              call 0040F2D0
:0044AD0F 85C0                    test eax, eax
:0044AD11 7528                    jne 0044AD3B
:0044AD13 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044AD16 81E1FF000000            and ecx, 000000FF
:0044AD1C 6BC924                  imul ecx, 00000024
:0044AD1F 81C108F54A00            add ecx, 004AF508
:0044AD25 E8A649FEFF              call 0042F6D0
:0044AD2A 50                      push eax
:0044AD2B E8F05BFCFF              call 00410920
:0044AD30 83C404                  add esp, 00000004
:0044AD33 85C0                    test eax, eax
:0044AD35 7504                    jne 0044AD3B
:0044AD37 33C0                    xor eax, eax
:0044AD39 EB33                    jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044AD11(C), :0044AD35(C)
|
:0044AD3B 8A550C                  mov dl, byte ptr [ebp+0C]
:0044AD3E 52                      push edx
:0044AD3F 8A4508                  mov al, byte ptr [ebp+08]
:0044AD42 50                      push eax
:0044AD43 E8D8000000              call 0044AE20
:0044AD48 83C408                  add esp, 00000008
:0044AD4B EB21                    jmp 0044AD6E
:0044AD4D 33C0                    xor eax, eax
:0044AD4F EB1D                    jmp 0044AD6E
:0044AD51 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AD54 81E1FF000000            and ecx, 000000FF
:0044AD5A 8B550C                  mov edx, dword ptr [ebp+0C]
:0044AD5D 81E2FF000000            and edx, 000000FF
:0044AD63 33C0                    xor eax, eax
:0044AD65 3BCA                    cmp ecx, edx
:0044AD67 0F94C0                  sete al
:0044AD6A EB02                    jmp 0044AD6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A74E(C)
|
:0044AD6C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A6F4(U), :0044A776(U), :0044A7A0(U), :0044A7B5(U), :0044A7CA(U)
|:0044A7F9(U), :0044A80E(U), :0044A83E(U), :0044A853(U), :0044A868(U)
|:0044A87D(U), :0044A892(U), :0044A8A7(U), :0044A8BC(U), :0044A8D1(U)
|:0044A8E6(U), :0044A8FB(U), :0044A910(U), :0044A94E(U), :0044A963(U)
|:0044A978(U), :0044A98D(U), :0044A9A2(U), :0044A9B7(U), :0044A9D0(U)
|:0044A9E5(U), :0044A9F9(U), :0044AA12(U), :0044AA27(U), :0044AA3B(U)
|:0044AA50(U), :0044AA65(U), :0044AA7A(U), :0044AA8F(U), :0044AAA4(U)
|:0044AAB9(U), :0044AACD(U), :0044AAF7(U), :0044AB0C(U), :0044AB29(U)
|:0044AB43(U), :0044AB5F(U), :0044AB7C(U), :0044AB96(U), :0044ABAB(U)
|:0044ABC5(U), :0044ABDA(U), :0044ABF4(U), :0044AC09(U), :0044AC23(U)
|:0044AC38(U), :0044AC52(U), :0044AC6A(U), :0044AC84(U), :0044AC9C(U)
|:0044ACB6(U), :0044ACDC(U), :0044ACF6(U), :0044AD39(U), :0044AD4B(U)
|:0044AD4F(U), :0044AD6A(U)
|
:0044AD6E 5E                      pop esi
:0044AD6F 8BE5                    mov esp, ebp
:0044AD71 5D                      pop ebp
:0044AD72 C3                      ret



:0044AD73 66A74400                DWORD 0044A766
:0044AD77 7BA74400                DWORD 0044A77B
:0044AD7B BAA74400                DWORD 0044A7BA
:0044AD7F CFA74400                DWORD 0044A7CF
:0044AD83 13A84400                DWORD 0044A813
:0044AD87 58A84400                DWORD 0044A858
:0044AD8B 82A84400                DWORD 0044A882
:0044AD8F ACA84400                DWORD 0044A8AC
:0044AD93 D6A84400                DWORD 0044A8D6
:0044AD97 00A94400                DWORD 0044A900
:0044AD9B 15A94400                DWORD 0044A915
:0044AD9F 7DA94400                DWORD 0044A97D
:0044ADA3 BCA94400                DWORD 0044A9BC
:0044ADA7 EAA94400                DWORD 0044A9EA
:0044ADAB 2CAA4400                DWORD 0044AA2C
:0044ADAF 6AAA4400                DWORD 0044AA6A
:0044ADB3 94AA4400                DWORD 0044AA94
:0044ADB7 BEAA4400                DWORD 0044AABE
:0044ADBB 11AB4400                DWORD 0044AB11
:0044ADBF 48AB4400                DWORD 0044AB48
:0044ADC3 9BAB4400                DWORD 0044AB9B
:0044ADC7 CAAB4400                DWORD 0044ABCA
:0044ADCB F9AB4400                DWORD 0044ABF9
:0044ADCF 28AC4400                DWORD 0044AC28
:0044ADD3 57AC4400                DWORD 0044AC57
:0044ADD7 89AC4400                DWORD 0044AC89
:0044ADDB BBAC4400                DWORD 0044ACBB
:0044ADDF 4DAD4400                DWORD 0044AD4D
:0044ADE3 F8AC4400                DWORD 0044ACF8
:0044ADE7 51AD4400                DWORD 0044AD51
:0044ADEB 6CAD4400                DWORD 0044AD6C


:0044ADEF 000000                  BYTE  3 DUP(0)


:0044ADF2 0102                    add dword ptr [edx], eax
:0044ADF4 0202                    add al, byte ptr [edx]
:0044ADF6 0202                    add al, byte ptr [edx]
:0044ADF8 0202                    add al, byte ptr [edx]
:0044ADFA 0202                    add al, byte ptr [edx]
:0044ADFC 0203                    add al, byte ptr [ebx]
:0044ADFE 0405                    add al, 05
:0044AE00 06                      push es
:0044AE01 07                      pop es
:0044AE02 0809                    or byte ptr [ecx], cl
:0044AE04 0909                    or dword ptr [ecx], ecx
:0044AE06 090A                    or dword ptr [edx], ecx
:0044AE08 0B0C0C                  or ecx, dword ptr [esp+ecx]
:0044AE0B 0D0E0F1011              or eax, 11100F0E
:0044AE10 1212                    adc dl, byte ptr [edx]
:0044AE12 1212                    adc dl, byte ptr [edx]
:0044AE14 13141516171819          adc edx, dword ptr [edx+19181716]
:0044AE1B 1A1B                    sbb bl, byte ptr [ebx]
:0044AE1D 1C1D                    sbb al, 1D
:0044AE1F 1D                      BYTE 1dh


* Referenced by a CALL at Addresses:
|:0044A76E   , :0044A7AD   , :0044A7C2   , :0044A806   , :0044A84B   
|:0044A875   , :0044A89F   , :0044A8C9   , :0044A8F3   , :0044A908   
|:0044A970   , :0044A9AF   , :0044A9DD   , :0044AA1F   , :0044AA5D   
|:0044AA87   , :0044AAB1   , :0044AB04   , :0044AB36   , :0044AB89   
|:0044ABB8   , :0044ABE7   , :0044AC16   , :0044AC45   , :0044AC77   
|:0044ACA9   , :0044ACE9   , :0044AD43   
|
:0044AE20 55                      push ebp
:0044AE21 8BEC                    mov ebp, esp
:0044AE23 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AE26 81E1FF000000            and ecx, 000000FF
:0044AE2C 6BC924                  imul ecx, 00000024
:0044AE2F 81C108F54A00            add ecx, 004AF508
:0044AE35 E89644FCFF              call 0040F2D0
:0044AE3A 85C0                    test eax, eax
:0044AE3C 741E                    je 0044AE5C
:0044AE3E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044AE41 81E1FF000000            and ecx, 000000FF
:0044AE47 6BC924                  imul ecx, 00000024
:0044AE4A 81C108F54A00            add ecx, 004AF508
:0044AE50 E87B44FCFF              call 0040F2D0
:0044AE55 F7D8                    neg eax
:0044AE57 1BC0                    sbb eax, eax
:0044AE59 40                      inc eax
:0044AE5A EB17                    jmp 0044AE73
:0044AE5C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044AE5F 81E1FF000000            and ecx, 000000FF
:0044AE65 6BC924                  imul ecx, 00000024
:0044AE68 81C108F54A00            add ecx, 004AF508
:0044AE6E E85D44FCFF              call 0040F2D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AE5A(U)
|
:0044AE73 5D                      pop ebp
:0044AE74 C3                      ret



* Referenced by a CALL at Address:
|:0044AF77   
|
:0044AE75 55                      push ebp
:0044AE76 8BEC                    mov ebp, esp
:0044AE78 8B4508                  mov eax, dword ptr [ebp+08]
:0044AE7B 25FF000000              and eax, 000000FF
:0044AE80 83F820                  cmp eax, 00000020
:0044AE83 7F04                    jg 0044AE89
:0044AE85 32C0                    xor al, al
:0044AE87 EB5B                    jmp 0044AEE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AE83(C)
|
:0044AE89 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AE8C 81E1FF000000            and ecx, 000000FF
:0044AE92 83F92D                  cmp ecx, 0000002D
:0044AE95 7F04                    jg 0044AE9B
:0044AE97 B001                    mov al, 01
:0044AE99 EB49                    jmp 0044AEE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AE95(C)
|
:0044AE9B 8B5508                  mov edx, dword ptr [ebp+08]
:0044AE9E 81E2FF000000            and edx, 000000FF
:0044AEA4 83FA2E                  cmp edx, 0000002E
:0044AEA7 7504                    jne 0044AEAD
:0044AEA9 32C0                    xor al, al
:0044AEAB EB37                    jmp 0044AEE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AEA7(C)
|
:0044AEAD 8B4508                  mov eax, dword ptr [ebp+08]
:0044AEB0 25FF000000              and eax, 000000FF
:0044AEB5 83F82C                  cmp eax, 0000002C
:0044AEB8 7504                    jne 0044AEBE
:0044AEBA B001                    mov al, 01
:0044AEBC EB26                    jmp 0044AEE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AEB8(C)
|
:0044AEBE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AEC1 81E1FF000000            and ecx, 000000FF
:0044AEC7 83F92F                  cmp ecx, 0000002F
:0044AECA 7504                    jne 0044AED0
:0044AECC B001                    mov al, 01
:0044AECE EB14                    jmp 0044AEE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AECA(C)
|
:0044AED0 8B5508                  mov edx, dword ptr [ebp+08]
:0044AED3 81E2FF000000            and edx, 000000FF
:0044AED9 83FA30                  cmp edx, 00000030
:0044AEDC 7504                    jne 0044AEE2
:0044AEDE B001                    mov al, 01
:0044AEE0 EB02                    jmp 0044AEE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AEDC(C)
|
:0044AEE2 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044AE87(U), :0044AE99(U), :0044AEAB(U), :0044AEBC(U), :0044AECE(U)
|:0044AEE0(U)
|
:0044AEE4 5D                      pop ebp
:0044AEE5 C3                      ret



* Referenced by a CALL at Address:
|:0044CAA6   
|
:0044AEE6 55                      push ebp
:0044AEE7 8BEC                    mov ebp, esp
:0044AEE9 83EC4C                  sub esp, 0000004C
:0044AEEC 894DB8                  mov dword ptr [ebp-48], ecx
:0044AEEF C645D400                mov [ebp-2C], 00
:0044AEF3 C645D8FF                mov [ebp-28], FF
:0044AEF7 C645E400                mov [ebp-1C], 00
:0044AEFB C605B0044B00FF          mov byte ptr [004B04B0], FF
:0044AF02 C605C4044B00FF          mov byte ptr [004B04C4], FF
:0044AF09 C745DC00000000          mov [ebp-24], 00000000
:0044AF10 C745E000000000          mov [ebp-20], 00000000
:0044AF17 EB09                    jmp 0044AF22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AF30(U)
|
:0044AF19 8B45E0                  mov eax, dword ptr [ebp-20]
:0044AF1C 83C001                  add eax, 00000001
:0044AF1F 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AF17(U)
|
:0044AF22 837DE011                cmp dword ptr [ebp-20], 00000011
:0044AF26 730A                    jnb 0044AF32
:0044AF28 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044AF2B C6440DECFF              mov [ebp+ecx-14], FF
:0044AF30 EBE7                    jmp 0044AF19

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AF26(C)
|
:0044AF32 C745E80CA04A00          mov [ebp-18], 004AA00C
:0044AF39 EB09                    jmp 0044AF44

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044AF91(U), :0044B206(U)
|
:0044AF3B 8B55E8                  mov edx, dword ptr [ebp-18]
:0044AF3E 83C201                  add edx, 00000001
:0044AF41 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AF39(U)
|
:0044AF44 8B45E8                  mov eax, dword ptr [ebp-18]
:0044AF47 33C9                    xor ecx, ecx
:0044AF49 8A08                    mov cl, byte ptr [eax]
:0044AF4B 81F9FF000000            cmp ecx, 000000FF
:0044AF51 0F84B4020000            je 0044B20B
:0044AF57 8B55E8                  mov edx, dword ptr [ebp-18]
:0044AF5A 33C0                    xor eax, eax
:0044AF5C 8A02                    mov al, byte ptr [edx]
:0044AF5E 8BC8                    mov ecx, eax
:0044AF60 6BC911                  imul ecx, 00000011
:0044AF63 81C180DF4A00            add ecx, 004ADF80
:0044AF69 E872C8FBFF              call 004077E0
:0044AF6E 8845D8                  mov byte ptr [ebp-28], al
:0044AF71 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044AF74 8A11                    mov dl, byte ptr [ecx]
:0044AF76 52                      push edx
:0044AF77 E8F9FEFFFF              call 0044AE75
:0044AF7C 83C404                  add esp, 00000004
:0044AF7F 8845E4                  mov byte ptr [ebp-1C], al
:0044AF82 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044AF85 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044AF8A 3DFF000000              cmp eax, 000000FF
:0044AF8F 7502                    jne 0044AF93
:0044AF91 EBA8                    jmp 0044AF3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AF8F(C)
|
:0044AF93 C745D000000000          mov [ebp-30], 00000000
:0044AF9A 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044AF9D 81E1FF000000            and ecx, 000000FF
:0044AFA3 81F9FF000000            cmp ecx, 000000FF
:0044AFA9 0F852D010000            jne 0044B0DC
:0044AFAF 8B55E8                  mov edx, dword ptr [ebp-18]
:0044AFB2 33C0                    xor eax, eax
:0044AFB4 8A02                    mov al, byte ptr [edx]
:0044AFB6 8BC8                    mov ecx, eax
:0044AFB8 6BC911                  imul ecx, 00000011
:0044AFBB 81C180DF4A00            add ecx, 004ADF80
:0044AFC1 E82A49FEFF              call 0042F8F0
:0044AFC6 8845CC                  mov byte ptr [ebp-34], al
:0044AFC9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044AFCC 8A11                    mov dl, byte ptr [ecx]
:0044AFCE 52                      push edx
:0044AFCF E840020000              call 0044B214
:0044AFD4 83C404                  add esp, 00000004
:0044AFD7 8845C8                  mov byte ptr [ebp-38], al

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044AFDA 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044AFDF 68FF000000              push 000000FF
:0044AFE4 8D45EC                  lea eax, dword ptr [ebp-14]
:0044AFE7 50                      push eax
:0044AFE8 8A4DCC                  mov cl, byte ptr [ebp-34]
:0044AFEB 51                      push ecx
:0044AFEC 8A55C8                  mov dl, byte ptr [ebp-38]
:0044AFEF 52                      push edx
:0044AFF0 8B4508                  mov eax, dword ptr [ebp+08]
:0044AFF3 668B08                  mov cx, word ptr [eax]
:0044AFF6 51                      push ecx
:0044AFF7 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044AFFA E8BA1C0000              call 0044CCB9
:0044AFFF 8945C4                  mov dword ptr [ebp-3C], eax
:0044B002 EB09                    jmp 0044B00D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B06E(U)
|
:0044B004 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044B007 83C201                  add edx, 00000001
:0044B00A 8955C4                  mov dword ptr [ebp-3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B002(U)
|
:0044B00D 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044B010 33C9                    xor ecx, ecx
:0044B012 8A08                    mov cl, byte ptr [eax]
:0044B014 81F9FF000000            cmp ecx, 000000FF
:0044B01A 7454                    je 0044B070
:0044B01C 8B5508                  mov edx, dword ptr [ebp+08]
:0044B01F 52                      push edx
:0044B020 E85AC9FFFF              call 0044797F
:0044B025 83C404                  add esp, 00000004
:0044B028 50                      push eax
:0044B029 8B4508                  mov eax, dword ptr [ebp+08]
:0044B02C 668B08                  mov cx, word ptr [eax]
:0044B02F 51                      push ecx
:0044B030 8B55E8                  mov edx, dword ptr [ebp-18]
:0044B033 8A02                    mov al, byte ptr [edx]
:0044B035 50                      push eax
:0044B036 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044B039 8A11                    mov dl, byte ptr [ecx]
:0044B03B 52                      push edx
:0044B03C 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044B03F E8F4020000              call 0044B338
:0044B044 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0044B047 03C8                    add ecx, eax
:0044B049 894DD0                  mov dword ptr [ebp-30], ecx
:0044B04C 837DD000                cmp dword ptr [ebp-30], 00000000
:0044B050 761C                    jbe 0044B06E
:0044B052 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044B055 33C0                    xor eax, eax
:0044B057 8A02                    mov al, byte ptr [edx]
:0044B059 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044B05C 33D2                    xor edx, edx
:0044B05E 8A5107                  mov dl, byte ptr [ecx+07]
:0044B061 3BC2                    cmp eax, edx
:0044B063 7509                    jne 0044B06E
:0044B065 8B45D0                  mov eax, dword ptr [ebp-30]
:0044B068 83C00A                  add eax, 0000000A
:0044B06B 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B050(C), :0044B063(C)
|
:0044B06E EB94                    jmp 0044B004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B01A(C)
|
:0044B070 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044B073 8139C8000000            cmp dword ptr [ecx], 000000C8
:0044B079 7236                    jb 0044B0B1
:0044B07B 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044B07E E84D42FCFF              call 0040F2D0
:0044B083 85C0                    test eax, eax
:0044B085 752A                    jne 0044B0B1
:0044B087 6A64                    push 00000064
:0044B089 E827700100              call 004620B5
:0044B08E 83C404                  add esp, 00000004
:0044B091 83F846                  cmp eax, 00000046
:0044B094 731B                    jnb 0044B0B1
:0044B096 8B55E8                  mov edx, dword ptr [ebp-18]
:0044B099 33C0                    xor eax, eax
:0044B09B 8A02                    mov al, byte ptr [edx]
:0044B09D 83F820                  cmp eax, 00000020
:0044B0A0 7F0F                    jg 0044B0B1
:0044B0A2 8B45D0                  mov eax, dword ptr [ebp-30]
:0044B0A5 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044B0A7 B90A000000              mov ecx, 0000000A
:0044B0AC F7F1                    div ecx
:0044B0AE 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B079(C), :0044B085(C), :0044B094(C), :0044B0A0(C)
|
:0044B0B1 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044B0B4 81E2FF000000            and edx, 000000FF
:0044B0BA 3B55D0                  cmp edx, dword ptr [ebp-30]
:0044B0BD 7318                    jnb 0044B0D7
:0044B0BF 8A45D0                  mov al, byte ptr [ebp-30]
:0044B0C2 8845D4                  mov byte ptr [ebp-2C], al
:0044B0C5 C605B0044B00FF          mov byte ptr [004B04B0], FF
:0044B0CC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044B0CF 8A11                    mov dl, byte ptr [ecx]
:0044B0D1 8815C4044B00            mov byte ptr [004B04C4], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B0BD(C)
|
:0044B0D7 E92A010000              jmp 0044B206

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AFA9(C)
|
:0044B0DC 6A00                    push 00000000
:0044B0DE 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044B0E1 25FF000000              and eax, 000000FF
:0044B0E6 0C80                    or al, 80
:0044B0E8 50                      push eax
:0044B0E9 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044B0EC 81E1FF000000            and ecx, 000000FF
:0044B0F2 80C980                  or cl, 80
:0044B0F5 51                      push ecx
:0044B0F6 8B5508                  mov edx, dword ptr [ebp+08]
:0044B0F9 52                      push edx
:0044B0FA 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044B0FD E868CAFFFF              call 00447B6A
:0044B102 C745C0A89F4A00          mov [ebp-40], 004A9FA8
:0044B109 EB09                    jmp 0044B114

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B201(U)
|
:0044B10B 8B45C0                  mov eax, dword ptr [ebp-40]
:0044B10E 83C001                  add eax, 00000001
:0044B111 8945C0                  mov dword ptr [ebp-40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B109(U)
|
:0044B114 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0044B117 33D2                    xor edx, edx
:0044B119 8A11                    mov dl, byte ptr [ecx]
:0044B11B 81FAFF000000            cmp edx, 000000FF
:0044B121 0F84DF000000            je 0044B206
:0044B127 8B4508                  mov eax, dword ptr [ebp+08]
:0044B12A 50                      push eax
:0044B12B E84FC8FFFF              call 0044797F
:0044B130 83C404                  add esp, 00000004
:0044B133 50                      push eax
:0044B134 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B137 668B11                  mov dx, word ptr [ecx]
:0044B13A 52                      push edx
:0044B13B 8B45E8                  mov eax, dword ptr [ebp-18]
:0044B13E 8A08                    mov cl, byte ptr [eax]
:0044B140 51                      push ecx
:0044B141 8B55C0                  mov edx, dword ptr [ebp-40]
:0044B144 8A02                    mov al, byte ptr [edx]
:0044B146 50                      push eax
:0044B147 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044B14A E8E9010000              call 0044B338
:0044B14F 8945BC                  mov dword ptr [ebp-44], eax
:0044B152 817DBCFF000000          cmp dword ptr [ebp-44], 000000FF
:0044B159 7E09                    jle 0044B164

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044B15B C745B4FF000000          mov [ebp-4C], 000000FF
:0044B162 EB06                    jmp 0044B16A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B159(C)
|
:0044B164 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0044B167 894DB4                  mov dword ptr [ebp-4C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B162(U)
|
:0044B16A 8B55B4                  mov edx, dword ptr [ebp-4C]
:0044B16D 8955BC                  mov dword ptr [ebp-44], edx
:0044B170 837DBC00                cmp dword ptr [ebp-44], 00000000
:0044B174 761C                    jbe 0044B192
:0044B176 8B45C0                  mov eax, dword ptr [ebp-40]
:0044B179 33C9                    xor ecx, ecx
:0044B17B 8A08                    mov cl, byte ptr [eax]
:0044B17D 8B55B8                  mov edx, dword ptr [ebp-48]
:0044B180 33C0                    xor eax, eax
:0044B182 8A4207                  mov al, byte ptr [edx+07]
:0044B185 3BC8                    cmp ecx, eax
:0044B187 7509                    jne 0044B192
:0044B189 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0044B18C 83C10A                  add ecx, 0000000A
:0044B18F 894DBC                  mov dword ptr [ebp-44], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B174(C), :0044B187(C)
|
:0044B192 8B55B8                  mov edx, dword ptr [ebp-48]
:0044B195 813AC8000000            cmp dword ptr [edx], 000000C8
:0044B19B 723A                    jb 0044B1D7
:0044B19D 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0044B1A0 E82B41FCFF              call 0040F2D0
:0044B1A5 85C0                    test eax, eax
:0044B1A7 752E                    jne 0044B1D7
:0044B1A9 6A64                    push 00000064
:0044B1AB E8056F0100              call 004620B5
:0044B1B0 83C404                  add esp, 00000004
:0044B1B3 8945DC                  mov dword ptr [ebp-24], eax
:0044B1B6 837DDC3C                cmp dword ptr [ebp-24], 0000003C
:0044B1BA 731B                    jnb 0044B1D7
:0044B1BC 8B45E8                  mov eax, dword ptr [ebp-18]
:0044B1BF 33C9                    xor ecx, ecx
:0044B1C1 8A08                    mov cl, byte ptr [eax]
:0044B1C3 83F920                  cmp ecx, 00000020
:0044B1C6 7F0F                    jg 0044B1D7
:0044B1C8 8B45BC                  mov eax, dword ptr [ebp-44]
:0044B1CB 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044B1CD B90A000000              mov ecx, 0000000A
:0044B1D2 F7F1                    div ecx
:0044B1D4 8945BC                  mov dword ptr [ebp-44], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B19B(C), :0044B1A7(C), :0044B1BA(C), :0044B1C6(C)
|
:0044B1D7 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044B1DA 81E2FF000000            and edx, 000000FF
:0044B1E0 3B55BC                  cmp edx, dword ptr [ebp-44]
:0044B1E3 731C                    jnb 0044B201
:0044B1E5 8A45BC                  mov al, byte ptr [ebp-44]
:0044B1E8 8845D4                  mov byte ptr [ebp-2C], al
:0044B1EB 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0044B1EE 8A11                    mov dl, byte ptr [ecx]
:0044B1F0 8815B0044B00            mov byte ptr [004B04B0], dl
:0044B1F6 8B45E8                  mov eax, dword ptr [ebp-18]
:0044B1F9 8A08                    mov cl, byte ptr [eax]
:0044B1FB 880DC4044B00            mov byte ptr [004B04C4], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B1E3(C)
|
:0044B201 E905FFFFFF              jmp 0044B10B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B0D7(U), :0044B121(C)
|
:0044B206 E930FDFFFF              jmp 0044AF3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AF51(C)
|
:0044B20B 8A45D4                  mov al, byte ptr [ebp-2C]
:0044B20E 8BE5                    mov esp, ebp
:0044B210 5D                      pop ebp
:0044B211 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044AFCF   , :0044B3E0   
|
:0044B214 55                      push ebp
:0044B215 8BEC                    mov ebp, esp
:0044B217 51                      push ecx
:0044B218 C645FC00                mov [ebp-04], 00
:0044B21C 8B4508                  mov eax, dword ptr [ebp+08]
:0044B21F 25FF000000              and eax, 000000FF
:0044B224 83F809                  cmp eax, 00000009
:0044B227 7C0E                    jl 0044B237
:0044B229 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B22C 81E1FF000000            and ecx, 000000FF
:0044B232 83F917                  cmp ecx, 00000017
:0044B235 7E29                    jle 0044B260

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B227(C)
|
:0044B237 8B5508                  mov edx, dword ptr [ebp+08]
:0044B23A 81E2FF000000            and edx, 000000FF
:0044B240 83FA1A                  cmp edx, 0000001A
:0044B243 7C0D                    jl 0044B252
:0044B245 8B4508                  mov eax, dword ptr [ebp+08]
:0044B248 25FF000000              and eax, 000000FF
:0044B24D 83F81B                  cmp eax, 0000001B
:0044B250 7E0E                    jle 0044B260

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B243(C)
|
:0044B252 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B255 81E1FF000000            and ecx, 000000FF
:0044B25B 83F91D                  cmp ecx, 0000001D
:0044B25E 7506                    jne 0044B266

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B235(C), :0044B250(C)
|
:0044B260 C645FC01                mov [ebp-04], 01
:0044B264 EB1F                    jmp 0044B285

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B25E(C)
|
:0044B266 8B5508                  mov edx, dword ptr [ebp+08]
:0044B269 81E2FF000000            and edx, 000000FF
:0044B26F 83FA23                  cmp edx, 00000023
:0044B272 7C11                    jl 0044B285
:0044B274 8B4508                  mov eax, dword ptr [ebp+08]
:0044B277 25FF000000              and eax, 000000FF
:0044B27C 83F824                  cmp eax, 00000024
:0044B27F 7F04                    jg 0044B285
:0044B281 C645FC02                mov [ebp-04], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B264(U), :0044B272(C), :0044B27F(C)
|
:0044B285 8A45FC                  mov al, byte ptr [ebp-04]
:0044B288 8BE5                    mov esp, ebp
:0044B28A 5D                      pop ebp
:0044B28B C3                      ret


:0044B28C 55                      push ebp
:0044B28D 8BEC                    mov ebp, esp
:0044B28F 83EC0C                  sub esp, 0000000C
:0044B292 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044B295 E816C5FBFF              call 004077B0
:0044B29A 8B4508                  mov eax, dword ptr [ebp+08]
:0044B29D 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044B2A2 3DFF000000              cmp eax, 000000FF
:0044B2A7 0F8485000000            je 0044B332
:0044B2AD C645F800                mov [ebp-08], 00
:0044B2B1 EB09                    jmp 0044B2BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B330(U)
|
:0044B2B3 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044B2B6 80C101                  add cl, 01
:0044B2B9 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B2B1(U)
|
:0044B2BC 8B55F8                  mov edx, dword ptr [ebp-08]
:0044B2BF 81E2FF000000            and edx, 000000FF
:0044B2C5 83FA04                  cmp edx, 00000004
:0044B2C8 7D68                    jge 0044B332
:0044B2CA 8A45F8                  mov al, byte ptr [ebp-08]
:0044B2CD 50                      push eax
:0044B2CE 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:0044B2D1 51                      push ecx
:0044B2D2 E831C7FFFF              call 00447A08
:0044B2D7 83C408                  add esp, 00000008
:0044B2DA 50                      push eax
:0044B2DB 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044B2DE E8AD44FEFF              call 0042F790
:0044B2E3 8B55FC                  mov edx, dword ptr [ebp-04]
:0044B2E6 81E2FF000000            and edx, 000000FF
:0044B2EC 81FAFF000000            cmp edx, 000000FF
:0044B2F2 743C                    je 0044B330
:0044B2F4 8D45FC                  lea eax, dword ptr [ebp-04]
:0044B2F7 50                      push eax
:0044B2F8 E814C6FFFF              call 00447911
:0044B2FD 83C404                  add esp, 00000004
:0044B300 8845F4                  mov byte ptr [ebp-0C], al
:0044B303 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044B306 81E1FF000000            and ecx, 000000FF
:0044B30C 81F9FF000000            cmp ecx, 000000FF
:0044B312 741C                    je 0044B330
:0044B314 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044B317 81E2FF000000            and edx, 000000FF
:0044B31D 8B4508                  mov eax, dword ptr [ebp+08]
:0044B320 25FF000000              and eax, 000000FF
:0044B325 3BD0                    cmp edx, eax
:0044B327 7507                    jne 0044B330
:0044B329 B801000000              mov eax, 00000001
:0044B32E EB04                    jmp 0044B334

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B2F2(C), :0044B312(C), :0044B327(C)
|
:0044B330 EB81                    jmp 0044B2B3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B2A7(C), :0044B2C8(C)
|
:0044B332 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B32E(U)
|
:0044B334 8BE5                    mov esp, ebp
:0044B336 5D                      pop ebp
:0044B337 C3                      ret



* Referenced by a CALL at Addresses:
|:0044B03F   , :0044B14A   
|
:0044B338 55                      push ebp
:0044B339 8BEC                    mov ebp, esp
:0044B33B 83EC58                  sub esp, 00000058
:0044B33E 56                      push esi
:0044B33F 894DB0                  mov dword ptr [ebp-50], ecx
:0044B342 8B45B0                  mov eax, dword ptr [ebp-50]
:0044B345 8B08                    mov ecx, dword ptr [eax]
:0044B347 6BC970                  imul ecx, 00000070
:0044B34A 81C198224900            add ecx, 00492298
:0044B350 894DB4                  mov dword ptr [ebp-4C], ecx
:0044B353 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B356 81E1FF000000            and ecx, 000000FF
:0044B35C 6BC924                  imul ecx, 00000024
:0044B35F 81C108F54A00            add ecx, 004AF508
:0044B365 E86643FEFF              call 0042F6D0
:0044B36A 6BC070                  imul eax, 00000070
:0044B36D 0598224900              add eax, 00492298
:0044B372 8945D4                  mov dword ptr [ebp-2C], eax
:0044B375 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B378 81E1FF000000            and ecx, 000000FF
:0044B37E 6BC924                  imul ecx, 00000024
:0044B381 81C108F54A00            add ecx, 004AF508
:0044B387 E814E0FDFF              call 004293A0
:0044B38C 668B10                  mov dx, word ptr [eax]
:0044B38F 668955C8                mov word ptr [ebp-38], dx
:0044B393 8D45C8                  lea eax, dword ptr [ebp-38]
:0044B396 50                      push eax
:0044B397 E8E3C5FFFF              call 0044797F
:0044B39C 83C404                  add esp, 00000004
:0044B39F 8845BC                  mov byte ptr [ebp-44], al
:0044B3A2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044B3A5 81E1FF000000            and ecx, 000000FF
:0044B3AB 6BC911                  imul ecx, 00000011
:0044B3AE 81C180DF4A00            add ecx, 004ADF80
:0044B3B4 E827C4FBFF              call 004077E0
:0044B3B9 8845D0                  mov byte ptr [ebp-30], al
:0044B3BC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044B3BF 81E1FF000000            and ecx, 000000FF
:0044B3C5 6BC911                  imul ecx, 00000011
:0044B3C8 81C180DF4A00            add ecx, 004ADF80
:0044B3CE E81D45FEFF              call 0042F8F0
:0044B3D3 8845F8                  mov byte ptr [ebp-08], al
:0044B3D6 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0044B3D9 894DC0                  mov dword ptr [ebp-40], ecx
:0044B3DC 8A550C                  mov dl, byte ptr [ebp+0C]
:0044B3DF 52                      push edx
:0044B3E0 E82FFEFFFF              call 0044B214
:0044B3E5 83C404                  add esp, 00000004
:0044B3E8 8845C4                  mov byte ptr [ebp-3C], al
:0044B3EB C645B800                mov [ebp-48], 00
:0044B3EF C745CC00000000          mov [ebp-34], 00000000
:0044B3F6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B3F9 81E1FF000000            and ecx, 000000FF
:0044B3FF 6BC924                  imul ecx, 00000024
:0044B402 81C108F54A00            add ecx, 004AF508
:0044B408 E86394FBFF              call 00404870
:0044B40D 8BF0                    mov esi, eax
:0044B40F 6BF664                  imul esi, 00000064
:0044B412 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044B415 E8C670FBFF              call 004024E0
:0044B41A 8BC8                    mov ecx, eax
:0044B41C 8BC6                    mov eax, esi
:0044B41E 33D2                    xor edx, edx
:0044B420 F7F1                    div ecx
:0044B422 8845E0                  mov byte ptr [ebp-20], al
:0044B425 C745D800000000          mov [ebp-28], 00000000
:0044B42C C745CC00000000          mov [ebp-34], 00000000
:0044B433 EB09                    jmp 0044B43E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B44C(U)
|
:0044B435 8B55CC                  mov edx, dword ptr [ebp-34]
:0044B438 83C201                  add edx, 00000001
:0044B43B 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B433(U)
|
:0044B43E 837DCC11                cmp dword ptr [ebp-34], 00000011
:0044B442 730A                    jnb 0044B44E
:0044B444 8B45CC                  mov eax, dword ptr [ebp-34]
:0044B447 C64405E4FF              mov [ebp+eax-1C], FF
:0044B44C EBE7                    jmp 0044B435

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B442(C)
|
:0044B44E 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0044B451 81E1FF000000            and ecx, 000000FF
:0044B457 81F9FF000000            cmp ecx, 000000FF
:0044B45D 7472                    je 0044B4D1
:0044B45F 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044B462 81E2FF000000            and edx, 000000FF
:0044B468 85D2                    test edx, edx
:0044B46A 7465                    je 0044B4D1
:0044B46C 8B450C                  mov eax, dword ptr [ebp+0C]
:0044B46F 25FF000000              and eax, 000000FF
:0044B474 83F815                  cmp eax, 00000015
:0044B477 740E                    je 0044B487
:0044B479 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044B47C 81E1FF000000            and ecx, 000000FF
:0044B482 83F916                  cmp ecx, 00000016
:0044B485 7525                    jne 0044B4AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B477(C)
|
:0044B487 8A5511                  mov dl, byte ptr [ebp+11]
:0044B48A 52                      push edx
:0044B48B 8A4510                  mov al, byte ptr [ebp+10]
:0044B48E 50                      push eax
:0044B48F 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0044B492 51                      push ecx
:0044B493 8A55F8                  mov dl, byte ptr [ebp-08]
:0044B496 52                      push edx
:0044B497 8A45C4                  mov al, byte ptr [ebp-3C]
:0044B49A 50                      push eax
:0044B49B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044B49E 51                      push ecx
:0044B49F 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B4A2 E881170000              call 0044CC28
:0044B4A7 8945C0                  mov dword ptr [ebp-40], eax
:0044B4AA EB25                    jmp 0044B4D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B485(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044B4AC 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044B4B1 68FF000000              push 000000FF
:0044B4B6 8D55E4                  lea edx, dword ptr [ebp-1C]
:0044B4B9 52                      push edx
:0044B4BA 8A45F8                  mov al, byte ptr [ebp-08]
:0044B4BD 50                      push eax
:0044B4BE 8A4DC4                  mov cl, byte ptr [ebp-3C]
:0044B4C1 51                      push ecx
:0044B4C2 8A5508                  mov dl, byte ptr [ebp+08]
:0044B4C5 52                      push edx
:0044B4C6 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B4C9 E85A170000              call 0044CC28
:0044B4CE 8945C0                  mov dword ptr [ebp-40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B45D(C), :0044B46A(C), :0044B4AA(U)
|
:0044B4D1 8B45D0                  mov eax, dword ptr [ebp-30]
:0044B4D4 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044B4D9 3DFF000000              cmp eax, 000000FF
:0044B4DE 7426                    je 0044B506
:0044B4E0 8A4D14                  mov cl, byte ptr [ebp+14]
:0044B4E3 51                      push ecx
:0044B4E4 8A550C                  mov dl, byte ptr [ebp+0C]
:0044B4E7 52                      push edx
:0044B4E8 8A4508                  mov al, byte ptr [ebp+08]
:0044B4EB 50                      push eax
:0044B4EC 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B4EF 8A5104                  mov dl, byte ptr [ecx+04]
:0044B4F2 52                      push edx
:0044B4F3 E8CDF1FFFF              call 0044A6C5
:0044B4F8 83C410                  add esp, 00000010
:0044B4FB 85C0                    test eax, eax
:0044B4FD 7507                    jne 0044B506
:0044B4FF 33C0                    xor eax, eax
:0044B501 E97B0C0000              jmp 0044C181

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B4DE(C), :0044B4FD(C)
|
:0044B506 C745DC00000000          mov [ebp-24], 00000000
:0044B50D C745FC00000000          mov [ebp-04], 00000000
:0044B514 8B450C                  mov eax, dword ptr [ebp+0C]
:0044B517 25FF000000              and eax, 000000FF
:0044B51C 8945AC                  mov dword ptr [ebp-54], eax
:0044B51F 837DAC30                cmp dword ptr [ebp-54], 00000030
:0044B523 0F87550C0000            ja 0044C17E
:0044B529 8B55AC                  mov edx, dword ptr [ebp-54]
:0044B52C 33C9                    xor ecx, ecx
:0044B52E 8A8AF8C14400            mov cl, byte ptr [edx+0044C1F8]
:0044B534 FF248D88C14400          jmp dword ptr [4*ecx+0044C188]
:0044B53B 8A4514                  mov al, byte ptr [ebp+14]
:0044B53E 50                      push eax
:0044B53F 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044B542 51                      push ecx
:0044B543 8A5508                  mov dl, byte ptr [ebp+08]
:0044B546 52                      push edx
:0044B547 8B45B0                  mov eax, dword ptr [ebp-50]
:0044B54A 8A4804                  mov cl, byte ptr [eax+04]
:0044B54D 51                      push ecx
:0044B54E E872F1FFFF              call 0044A6C5
:0044B553 83C410                  add esp, 00000010
:0044B556 85C0                    test eax, eax
:0044B558 7407                    je 0044B561

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044B55A C745DC05000000          mov [ebp-24], 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B558(C)
|
:0044B561 E9180C0000              jmp 0044C17E
:0044B566 C745DC00000000          mov [ebp-24], 00000000
:0044B56D 8A5514                  mov dl, byte ptr [ebp+14]
:0044B570 52                      push edx
:0044B571 8A450C                  mov al, byte ptr [ebp+0C]
:0044B574 50                      push eax
:0044B575 8A4D08                  mov cl, byte ptr [ebp+08]
:0044B578 51                      push ecx
:0044B579 8B55B0                  mov edx, dword ptr [ebp-50]
:0044B57C 8A4204                  mov al, byte ptr [edx+04]
:0044B57F 50                      push eax
:0044B580 E840F1FFFF              call 0044A6C5
:0044B585 83C410                  add esp, 00000010
:0044B588 85C0                    test eax, eax
:0044B58A 7505                    jne 0044B591
:0044B58C E9ED0B0000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B58A(C)
|
:0044B591 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B594 81E1FF000000            and ecx, 000000FF
:0044B59A 6BC924                  imul ecx, 00000024
:0044B59D 81C108F54A00            add ecx, 004AF508
:0044B5A3 E82841FEFF              call 0042F6D0

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0044B5A8 3DC8000000              cmp eax, 000000C8
:0044B5AD 7605                    jbe 0044B5B4
:0044B5AF E9CA0B0000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B5AD(C)
|
:0044B5B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B5B7 81E1FF000000            and ecx, 000000FF
:0044B5BD 6BC924                  imul ecx, 00000024
:0044B5C0 81C108F54A00            add ecx, 004AF508
:0044B5C6 E8A592FBFF              call 00404870
:0044B5CB 8BF0                    mov esi, eax
:0044B5CD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B5D0 81E1FF000000            and ecx, 000000FF
:0044B5D6 6BC924                  imul ecx, 00000024
:0044B5D9 81C108F54A00            add ecx, 004AF508
:0044B5DF E88CE4FEFF              call 00439A70
:0044B5E4 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044B5E6 B903000000              mov ecx, 00000003
:0044B5EB F7F1                    div ecx
:0044B5ED 3BF0                    cmp esi, eax
:0044B5EF 7305                    jnb 0044B5F6
:0044B5F1 E9880B0000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B5EF(C)
|
:0044B5F6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B5F9 81E1FF000000            and ecx, 000000FF
:0044B5FF 6BC924                  imul ecx, 00000024
:0044B602 81C108F54A00            add ecx, 004AF508
:0044B608 E8D341FEFF              call 0042F7E0
:0044B60D 25FF000000              and eax, 000000FF
:0044B612 83F80A                  cmp eax, 0000000A
:0044B615 750C                    jne 0044B623

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044B617 C745DC0A000000          mov [ebp-24], 0000000A
:0044B61E E95B0B0000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B615(C)
|
:0044B623 E9560B0000              jmp 0044C17E
:0044B628 8A5514                  mov dl, byte ptr [ebp+14]
:0044B62B 52                      push edx
:0044B62C 8A450C                  mov al, byte ptr [ebp+0C]
:0044B62F 50                      push eax
:0044B630 8A4D08                  mov cl, byte ptr [ebp+08]
:0044B633 51                      push ecx
:0044B634 8B55B0                  mov edx, dword ptr [ebp-50]
:0044B637 8A4204                  mov al, byte ptr [edx+04]
:0044B63A 50                      push eax
:0044B63B E885F0FFFF              call 0044A6C5
:0044B640 83C410                  add esp, 00000010
:0044B643 85C0                    test eax, eax
:0044B645 750C                    jne 0044B653
:0044B647 C745DC00000000          mov [ebp-24], 00000000
:0044B64E E926010000              jmp 0044B779

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B645(C)
|
:0044B653 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044B656 51                      push ecx
:0044B657 8A550C                  mov dl, byte ptr [ebp+0C]
:0044B65A 52                      push edx
:0044B65B 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044B65E 50                      push eax
:0044B65F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B662 81E1FF000000            and ecx, 000000FF
:0044B668 6BC924                  imul ecx, 00000024
:0044B66B 81C108F54A00            add ecx, 004AF508
:0044B671 51                      push ecx
:0044B672 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B675 E8F5D9FEFF              call 0043906F
:0044B67A 8945FC                  mov dword ptr [ebp-04], eax
:0044B67D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B680 81E1FF000000            and ecx, 000000FF
:0044B686 6BC924                  imul ecx, 00000024
:0044B689 81C108F54A00            add ecx, 004AF508
:0044B68F E8DC91FBFF              call 00404870
:0044B694 3945FC                  cmp dword ptr [ebp-04], eax
:0044B697 7209                    jb 0044B6A2
:0044B699 C745DC4C000000          mov [ebp-24], 0000004C
:0044B6A0 EB2C                    jmp 0044B6CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B697(C)
|
:0044B6A2 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044B6A5 E8366EFBFF              call 004024E0
:0044B6AA 50                      push eax

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044B6AB 6A0A                    push 0000000A
:0044B6AD 8B55FC                  mov edx, dword ptr [ebp-04]
:0044B6B0 52                      push edx
:0044B6B1 E8AA680100              call 00461F60
:0044B6B6 83C40C                  add esp, 0000000C
:0044B6B9 83F801                  cmp eax, 00000001
:0044B6BC 7209                    jb 0044B6C7

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044B6BE C745DC0A000000          mov [ebp-24], 0000000A
:0044B6C5 EB07                    jmp 0044B6CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B6BC(C)
|
:0044B6C7 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B6A0(U), :0044B6C5(U)
|
:0044B6CE 8B45F8                  mov eax, dword ptr [ebp-08]
:0044B6D1 25FF000000              and eax, 000000FF
:0044B6D6 85C0                    test eax, eax
:0044B6D8 7420                    je 0044B6FA
:0044B6DA 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044B6DD 51                      push ecx
:0044B6DE 8B55B0                  mov edx, dword ptr [ebp-50]
:0044B6E1 8A4204                  mov al, byte ptr [edx+04]
:0044B6E4 50                      push eax
:0044B6E5 6A00                    push 00000000
:0044B6E7 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044B6EA 51                      push ecx
:0044B6EB 8B55C0                  mov edx, dword ptr [ebp-40]
:0044B6EE 52                      push edx
:0044B6EF E858D9FFFF              call 0044904C
:0044B6F4 83C414                  add esp, 00000014
:0044B6F7 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B6D8(C)
|
:0044B6FA 8B450C                  mov eax, dword ptr [ebp+0C]
:0044B6FD 25FF000000              and eax, 000000FF
:0044B702 8945A8                  mov dword ptr [ebp-58], eax
:0044B705 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0044B708 83E902                  sub ecx, 00000002
:0044B70B 894DA8                  mov dword ptr [ebp-58], ecx
:0044B70E 837DA806                cmp dword ptr [ebp-58], 00000006
:0044B712 7765                    ja 0044B779
:0044B714 8B55A8                  mov edx, dword ptr [ebp-58]
:0044B717 FF249529C24400          jmp dword ptr [4*edx+0044C229]
:0044B71E 837DDC4B                cmp dword ptr [ebp-24], 0000004B
:0044B722 7309                    jnb 0044B72D
:0044B724 8B45DC                  mov eax, dword ptr [ebp-24]
:0044B727 83C005                  add eax, 00000005
:0044B72A 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B722(C)
|
:0044B72D EB4A                    jmp 0044B779
:0044B72F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044B732 83C10A                  add ecx, 0000000A
:0044B735 894DDC                  mov dword ptr [ebp-24], ecx
:0044B738 EB3F                    jmp 0044B779
:0044B73A 8B55DC                  mov edx, dword ptr [ebp-24]
:0044B73D 83C205                  add edx, 00000005
:0044B740 8955DC                  mov dword ptr [ebp-24], edx
:0044B743 EB34                    jmp 0044B779
:0044B745 8B45DC                  mov eax, dword ptr [ebp-24]
:0044B748 83C002                  add eax, 00000002
:0044B74B 8945DC                  mov dword ptr [ebp-24], eax
:0044B74E EB29                    jmp 0044B779
:0044B750 837DDC03                cmp dword ptr [ebp-24], 00000003
:0044B754 760B                    jbe 0044B761
:0044B756 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044B759 83E903                  sub ecx, 00000003
:0044B75C 894DDC                  mov dword ptr [ebp-24], ecx
:0044B75F EB07                    jmp 0044B768

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B754(C)
|
:0044B761 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B75F(U)
|
:0044B768 EB0F                    jmp 0044B779
:0044B76A 837DDC4B                cmp dword ptr [ebp-24], 0000004B
:0044B76E 7309                    jnb 0044B779
:0044B770 8B55DC                  mov edx, dword ptr [ebp-24]
:0044B773 83C20A                  add edx, 0000000A
:0044B776 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B64E(U), :0044B712(C), :0044B72D(U), :0044B738(U), :0044B743(U)
|:0044B74E(U), :0044B768(U), :0044B76E(C)
|
:0044B779 E9000A0000              jmp 0044C17E
:0044B77E 8A4514                  mov al, byte ptr [ebp+14]
:0044B781 50                      push eax
:0044B782 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044B785 51                      push ecx
:0044B786 8A5508                  mov dl, byte ptr [ebp+08]
:0044B789 52                      push edx
:0044B78A 8B45B0                  mov eax, dword ptr [ebp-50]
:0044B78D 8A4804                  mov cl, byte ptr [eax+04]
:0044B790 51                      push ecx
:0044B791 E82FEFFFFF              call 0044A6C5
:0044B796 83C410                  add esp, 00000010
:0044B799 85C0                    test eax, eax
:0044B79B 750C                    jne 0044B7A9
:0044B79D C745DC00000000          mov [ebp-24], 00000000
:0044B7A4 E9D5090000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B79B(C)
|
:0044B7A9 8B55E0                  mov edx, dword ptr [ebp-20]
:0044B7AC 81E2FF000000            and edx, 000000FF
:0044B7B2 83FA14                  cmp edx, 00000014
:0044B7B5 7F0C                    jg 0044B7C3
:0044B7B7 C745DC00000000          mov [ebp-24], 00000000
:0044B7BE E9BB090000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B7B5(C)
|
:0044B7C3 8B45E0                  mov eax, dword ptr [ebp-20]
:0044B7C6 25FF000000              and eax, 000000FF
:0044B7CB 83F832                  cmp eax, 00000032
:0044B7CE 7F09                    jg 0044B7D9

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044B7D0 C745DC07000000          mov [ebp-24], 00000007
:0044B7D7 EB1E                    jmp 0044B7F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B7CE(C)
|
:0044B7D9 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044B7DC 81E1FF000000            and ecx, 000000FF
:0044B7E2 83F950                  cmp ecx, 00000050
:0044B7E5 7F09                    jg 0044B7F0

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0044B7E7 C745DC0B000000          mov [ebp-24], 0000000B
:0044B7EE EB07                    jmp 0044B7F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B7E5(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044B7F0 C745DC10000000          mov [ebp-24], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B7D7(U), :0044B7EE(U)
|
:0044B7F7 8B55F8                  mov edx, dword ptr [ebp-08]
:0044B7FA 81E2FF000000            and edx, 000000FF
:0044B800 85D2                    test edx, edx
:0044B802 7420                    je 0044B824
:0044B804 8A450C                  mov al, byte ptr [ebp+0C]
:0044B807 50                      push eax
:0044B808 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B80B 8A5104                  mov dl, byte ptr [ecx+04]
:0044B80E 52                      push edx
:0044B80F 6A00                    push 00000000
:0044B811 8B45DC                  mov eax, dword ptr [ebp-24]
:0044B814 50                      push eax
:0044B815 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0044B818 51                      push ecx
:0044B819 E82ED8FFFF              call 0044904C
:0044B81E 83C414                  add esp, 00000014
:0044B821 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B802(C)
|
:0044B824 8B550C                  mov edx, dword ptr [ebp+0C]
:0044B827 81E2FF000000            and edx, 000000FF
:0044B82D 83FA1A                  cmp edx, 0000001A
:0044B830 740D                    je 0044B83F
:0044B832 8B450C                  mov eax, dword ptr [ebp+0C]
:0044B835 25FF000000              and eax, 000000FF
:0044B83A 83F818                  cmp eax, 00000018
:0044B83D 753E                    jne 0044B87D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B830(C)
|
:0044B83F 6A01                    push 00000001
:0044B841 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B844 81E1FF000000            and ecx, 000000FF
:0044B84A 6BC924                  imul ecx, 00000024
:0044B84D 81C108F54A00            add ecx, 004AF508
:0044B853 E8083FFEFF              call 0042F760
:0044B858 85C0                    test eax, eax
:0044B85A 751A                    jne 0044B876
:0044B85C 6A64                    push 00000064
:0044B85E E852680100              call 004620B5
:0044B863 83C404                  add esp, 00000004
:0044B866 83F832                  cmp eax, 00000032
:0044B869 7309                    jnb 0044B874
:0044B86B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044B86E 83C10F                  add ecx, 0000000F
:0044B871 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B869(C)
|
:0044B874 EB07                    jmp 0044B87D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B85A(C)
|
:0044B876 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B83D(C), :0044B874(U)
|
:0044B87D E9FC080000              jmp 0044C17E
:0044B882 8A5514                  mov dl, byte ptr [ebp+14]
:0044B885 52                      push edx
:0044B886 8A450C                  mov al, byte ptr [ebp+0C]
:0044B889 50                      push eax
:0044B88A 8A4D08                  mov cl, byte ptr [ebp+08]
:0044B88D 51                      push ecx
:0044B88E 8B55B0                  mov edx, dword ptr [ebp-50]
:0044B891 8A4204                  mov al, byte ptr [edx+04]
:0044B894 50                      push eax
:0044B895 E82BEEFFFF              call 0044A6C5
:0044B89A 83C410                  add esp, 00000010
:0044B89D 85C0                    test eax, eax
:0044B89F 7509                    jne 0044B8AA
:0044B8A1 C745DC00000000          mov [ebp-24], 00000000
:0044B8A8 EB47                    jmp 0044B8F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B89F(C)
|
:0044B8AA 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B8AD 33D2                    xor edx, edx
:0044B8AF 8A5104                  mov dl, byte ptr [ecx+04]
:0044B8B2 8BCA                    mov ecx, edx
:0044B8B4 6BC924                  imul ecx, 00000024
:0044B8B7 81C108F54A00            add ecx, 004AF508
:0044B8BD E8EE8FFBFF              call 004048B0
:0044B8C2 8BF0                    mov esi, eax
:0044B8C4 D1E6                    shl esi, 1
:0044B8C6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B8C9 81E1FF000000            and ecx, 000000FF
:0044B8CF 6BC924                  imul ecx, 00000024
:0044B8D2 81C108F54A00            add ecx, 004AF508
:0044B8D8 E8D38FFBFF              call 004048B0
:0044B8DD 3BF0                    cmp esi, eax
:0044B8DF 7709                    ja 0044B8EA
:0044B8E1 C745DC50000000          mov [ebp-24], 00000050
:0044B8E8 EB07                    jmp 0044B8F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B8DF(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044B8EA C745DC07000000          mov [ebp-24], 00000007

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B8A8(U), :0044B8E8(U)
|
:0044B8F1 E988080000              jmp 0044C17E
:0044B8F6 8A4514                  mov al, byte ptr [ebp+14]
:0044B8F9 50                      push eax
:0044B8FA 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044B8FD 51                      push ecx
:0044B8FE 8A5508                  mov dl, byte ptr [ebp+08]
:0044B901 52                      push edx
:0044B902 8B45B0                  mov eax, dword ptr [ebp-50]
:0044B905 8A4804                  mov cl, byte ptr [eax+04]
:0044B908 51                      push ecx
:0044B909 E8B7EDFFFF              call 0044A6C5
:0044B90E 83C410                  add esp, 00000010
:0044B911 85C0                    test eax, eax
:0044B913 7509                    jne 0044B91E
:0044B915 C745DC00000000          mov [ebp-24], 00000000
:0044B91C EB7A                    jmp 0044B998

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B913(C)
|
:0044B91E 8A550C                  mov dl, byte ptr [ebp+0C]
:0044B921 52                      push edx
:0044B922 8A450C                  mov al, byte ptr [ebp+0C]
:0044B925 50                      push eax
:0044B926 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044B929 51                      push ecx
:0044B92A 8B5508                  mov edx, dword ptr [ebp+08]
:0044B92D 81E2FF000000            and edx, 000000FF
:0044B933 6BD224                  imul edx, 00000024
:0044B936 81C208F54A00            add edx, 004AF508
:0044B93C 52                      push edx
:0044B93D 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B940 E82AD7FEFF              call 0043906F
:0044B945 8945FC                  mov dword ptr [ebp-04], eax
:0044B948 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B94B 81E1FF000000            and ecx, 000000FF
:0044B951 6BC924                  imul ecx, 00000024
:0044B954 81C108F54A00            add ecx, 004AF508
:0044B95A E8118FFBFF              call 00404870
:0044B95F 3945FC                  cmp dword ptr [ebp-04], eax
:0044B962 7209                    jb 0044B96D
:0044B964 C745DC1E000000          mov [ebp-24], 0000001E
:0044B96B EB2B                    jmp 0044B998

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B962(C)
|
:0044B96D 8B75FC                  mov esi, dword ptr [ebp-04]
:0044B970 6BF60A                  imul esi, 0000000A
:0044B973 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044B976 E8656BFBFF              call 004024E0
:0044B97B 8BC8                    mov ecx, eax
:0044B97D 8BC6                    mov eax, esi
:0044B97F 33D2                    xor edx, edx
:0044B981 F7F1                    div ecx
:0044B983 83F801                  cmp eax, 00000001
:0044B986 7209                    jb 0044B991

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044B988 C745DC03000000          mov [ebp-24], 00000003
:0044B98F EB07                    jmp 0044B998

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B986(C)
|
:0044B991 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B91C(U), :0044B96B(U), :0044B98F(U)
|
:0044B998 E9E1070000              jmp 0044C17E
:0044B99D 8A5514                  mov dl, byte ptr [ebp+14]
:0044B9A0 52                      push edx
:0044B9A1 8A450C                  mov al, byte ptr [ebp+0C]
:0044B9A4 50                      push eax
:0044B9A5 8A4D08                  mov cl, byte ptr [ebp+08]
:0044B9A8 51                      push ecx
:0044B9A9 8B55B0                  mov edx, dword ptr [ebp-50]
:0044B9AC 8A4204                  mov al, byte ptr [edx+04]
:0044B9AF 50                      push eax
:0044B9B0 E810EDFFFF              call 0044A6C5
:0044B9B5 83C410                  add esp, 00000010
:0044B9B8 85C0                    test eax, eax
:0044B9BA 750C                    jne 0044B9C8
:0044B9BC C745DC00000000          mov [ebp-24], 00000000
:0044B9C3 E9C6000000              jmp 0044BA8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B9BA(C)
|
:0044B9C8 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B9CB E848CEFFFF              call 00448818
:0044B9D0 85C0                    test eax, eax
:0044B9D2 0F84AF000000            je 0044BA87
:0044B9D8 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044B9DB 51                      push ecx
:0044B9DC 8A550C                  mov dl, byte ptr [ebp+0C]
:0044B9DF 52                      push edx
:0044B9E0 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044B9E3 50                      push eax
:0044B9E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B9E7 81E1FF000000            and ecx, 000000FF
:0044B9ED 6BC924                  imul ecx, 00000024
:0044B9F0 81C108F54A00            add ecx, 004AF508
:0044B9F6 51                      push ecx
:0044B9F7 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B9FA E870D6FEFF              call 0043906F
:0044B9FF 8945FC                  mov dword ptr [ebp-04], eax
:0044BA02 C745DC00000000          mov [ebp-24], 00000000
:0044BA09 8B5508                  mov edx, dword ptr [ebp+08]
:0044BA0C 81E2FF000000            and edx, 000000FF
:0044BA12 85D2                    test edx, edx
:0044BA14 7568                    jne 0044BA7E

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044BA16 C745DC07000000          mov [ebp-24], 00000007
:0044BA1D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BA20 81E1FF000000            and ecx, 000000FF
:0044BA26 6BC924                  imul ecx, 00000024
:0044BA29 81C108F54A00            add ecx, 004AF508
:0044BA2F E83C8EFBFF              call 00404870
:0044BA34 3945FC                  cmp dword ptr [ebp-04], eax
:0044BA37 7209                    jb 0044BA42
:0044BA39 C745DC1E000000          mov [ebp-24], 0000001E
:0044BA40 EB22                    jmp 0044BA64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BA37(C)
|
:0044BA42 8B75FC                  mov esi, dword ptr [ebp-04]
:0044BA45 6BF60A                  imul esi, 0000000A
:0044BA48 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044BA4B E8906AFBFF              call 004024E0
:0044BA50 8BC8                    mov ecx, eax
:0044BA52 8BC6                    mov eax, esi
:0044BA54 33D2                    xor edx, edx
:0044BA56 F7F1                    div ecx
:0044BA58 83F806                  cmp eax, 00000006
:0044BA5B 7207                    jb 0044BA64

* Possible Reference to String Resource ID=00015: ""
                                  |
:0044BA5D C745DC0F000000          mov [ebp-24], 0000000F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BA40(U), :0044BA5B(C)
|
:0044BA64 6A32                    push 00000032
:0044BA66 E84A660100              call 004620B5
:0044BA6B 83C404                  add esp, 00000004
:0044BA6E 83F802                  cmp eax, 00000002
:0044BA71 7309                    jnb 0044BA7C
:0044BA73 8B55DC                  mov edx, dword ptr [ebp-24]
:0044BA76 83C20A                  add edx, 0000000A
:0044BA79 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BA71(C)
|
:0044BA7C EB07                    jmp 0044BA85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BA14(C)
|
:0044BA7E C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BA7C(U)
|
:0044BA85 EB07                    jmp 0044BA8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B9D2(C)
|
:0044BA87 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B9C3(U), :0044BA85(U)
|
:0044BA8E E9EB060000              jmp 0044C17E
:0044BA93 8A4514                  mov al, byte ptr [ebp+14]
:0044BA96 50                      push eax
:0044BA97 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044BA9A 51                      push ecx
:0044BA9B 8A5508                  mov dl, byte ptr [ebp+08]
:0044BA9E 52                      push edx
:0044BA9F 8B45B0                  mov eax, dword ptr [ebp-50]
:0044BAA2 8A4804                  mov cl, byte ptr [eax+04]
:0044BAA5 51                      push ecx
:0044BAA6 E81AECFFFF              call 0044A6C5
:0044BAAB 83C410                  add esp, 00000010
:0044BAAE 85C0                    test eax, eax
:0044BAB0 7509                    jne 0044BABB
:0044BAB2 C745DC00000000          mov [ebp-24], 00000000
:0044BAB9 EB41                    jmp 0044BAFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BAB0(C)
|
:0044BABB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BABE 81E1FF000000            and ecx, 000000FF
:0044BAC4 6BC924                  imul ecx, 00000024
:0044BAC7 81C108F54A00            add ecx, 004AF508
:0044BACD E8DE8DFBFF              call 004048B0
:0044BAD2 8BF0                    mov esi, eax
:0044BAD4 6BF664                  imul esi, 00000064
:0044BAD7 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044BADA E8326AFBFF              call 00402511
:0044BADF 8BC8                    mov ecx, eax
:0044BAE1 8BC6                    mov eax, esi
:0044BAE3 33D2                    xor edx, edx
:0044BAE5 F7F1                    div ecx
:0044BAE7 83F832                  cmp eax, 00000032
:0044BAEA 7309                    jnb 0044BAF5
:0044BAEC C745DC00000000          mov [ebp-24], 00000000
:0044BAF3 EB07                    jmp 0044BAFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BAEA(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044BAF5 C745DC05000000          mov [ebp-24], 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BAB9(U), :0044BAF3(U)
|
:0044BAFC E97D060000              jmp 0044C17E
:0044BB01 8A5514                  mov dl, byte ptr [ebp+14]
:0044BB04 52                      push edx
:0044BB05 8A450C                  mov al, byte ptr [ebp+0C]
:0044BB08 50                      push eax
:0044BB09 8A4D08                  mov cl, byte ptr [ebp+08]
:0044BB0C 51                      push ecx
:0044BB0D 8B55B0                  mov edx, dword ptr [ebp-50]
:0044BB10 8A4204                  mov al, byte ptr [edx+04]
:0044BB13 50                      push eax
:0044BB14 E8ACEBFFFF              call 0044A6C5
:0044BB19 83C410                  add esp, 00000010
:0044BB1C 85C0                    test eax, eax
:0044BB1E 750C                    jne 0044BB2C
:0044BB20 C745DC00000000          mov [ebp-24], 00000000
:0044BB27 E9A2000000              jmp 0044BBCE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BB1E(C)
|
:0044BB2C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044BB2F 81E1FF000000            and ecx, 000000FF
:0044BB35 83F950                  cmp ecx, 00000050
:0044BB38 7E26                    jle 0044BB60

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044BB3A 6A10                    push 00000010
:0044BB3C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BB3F 81E1FF000000            and ecx, 000000FF
:0044BB45 6BC924                  imul ecx, 00000024
:0044BB48 81C108F54A00            add ecx, 004AF508
:0044BB4E E80D3CFEFF              call 0042F760
:0044BB53 85C0                    test eax, eax
:0044BB55 7509                    jne 0044BB60
:0044BB57 C745DC16000000          mov [ebp-24], 00000016
:0044BB5E EB6E                    jmp 0044BBCE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BB38(C), :0044BB55(C)
|
:0044BB60 8B55E0                  mov edx, dword ptr [ebp-20]
:0044BB63 81E2FF000000            and edx, 000000FF
:0044BB69 83FA3C                  cmp edx, 0000003C
:0044BB6C 7E26                    jle 0044BB94

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044BB6E 6A10                    push 00000010
:0044BB70 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BB73 81E1FF000000            and ecx, 000000FF
:0044BB79 6BC924                  imul ecx, 00000024
:0044BB7C 81C108F54A00            add ecx, 004AF508
:0044BB82 E8D93BFEFF              call 0042F760
:0044BB87 85C0                    test eax, eax
:0044BB89 7509                    jne 0044BB94

* Possible Reference to String Resource ID=00018: "G"
                                  |
:0044BB8B C745DC12000000          mov [ebp-24], 00000012
:0044BB92 EB3A                    jmp 0044BBCE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BB6C(C), :0044BB89(C)
|
:0044BB94 8B45E0                  mov eax, dword ptr [ebp-20]
:0044BB97 25FF000000              and eax, 000000FF
:0044BB9C 83F828                  cmp eax, 00000028
:0044BB9F 7E26                    jle 0044BBC7

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044BBA1 6A10                    push 00000010
:0044BBA3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BBA6 81E1FF000000            and ecx, 000000FF
:0044BBAC 6BC924                  imul ecx, 00000024
:0044BBAF 81C108F54A00            add ecx, 004AF508
:0044BBB5 E8A63BFEFF              call 0042F760
:0044BBBA 85C0                    test eax, eax
:0044BBBC 7509                    jne 0044BBC7

* Possible Reference to String Resource ID=00012: ""
                                  |
:0044BBBE C745DC0C000000          mov [ebp-24], 0000000C
:0044BBC5 EB07                    jmp 0044BBCE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BB9F(C), :0044BBBC(C)
|
:0044BBC7 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BB27(U), :0044BB5E(U), :0044BB92(U), :0044BBC5(U)
|
:0044BBCE E9AB050000              jmp 0044C17E
:0044BBD3 8A4D14                  mov cl, byte ptr [ebp+14]
:0044BBD6 51                      push ecx
:0044BBD7 8A550C                  mov dl, byte ptr [ebp+0C]
:0044BBDA 52                      push edx
:0044BBDB 8A4508                  mov al, byte ptr [ebp+08]
:0044BBDE 50                      push eax
:0044BBDF 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044BBE2 8A5104                  mov dl, byte ptr [ecx+04]
:0044BBE5 52                      push edx
:0044BBE6 E8DAEAFFFF              call 0044A6C5
:0044BBEB 83C410                  add esp, 00000010
:0044BBEE 85C0                    test eax, eax
:0044BBF0 7509                    jne 0044BBFB
:0044BBF2 C745DC00000000          mov [ebp-24], 00000000
:0044BBF9 EB41                    jmp 0044BC3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BBF0(C)
|
:0044BBFB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BBFE 81E1FF000000            and ecx, 000000FF
:0044BC04 6BC924                  imul ecx, 00000024
:0044BC07 81C108F54A00            add ecx, 004AF508
:0044BC0D E85E8CFBFF              call 00404870
:0044BC12 8BF0                    mov esi, eax
:0044BC14 6BF664                  imul esi, 00000064
:0044BC17 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044BC1A E8C168FBFF              call 004024E0
:0044BC1F 8BC8                    mov ecx, eax
:0044BC21 8BC6                    mov eax, esi
:0044BC23 33D2                    xor edx, edx
:0044BC25 F7F1                    div ecx
:0044BC27 83F828                  cmp eax, 00000028
:0044BC2A 7309                    jnb 0044BC35
:0044BC2C C745DC00000000          mov [ebp-24], 00000000
:0044BC33 EB07                    jmp 0044BC3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BC2A(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044BC35 C745DC0A000000          mov [ebp-24], 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BBF9(U), :0044BC33(U)
|
:0044BC3C E93D050000              jmp 0044C17E
:0044BC41 8A5514                  mov dl, byte ptr [ebp+14]
:0044BC44 52                      push edx
:0044BC45 8A450C                  mov al, byte ptr [ebp+0C]
:0044BC48 50                      push eax
:0044BC49 8A4D08                  mov cl, byte ptr [ebp+08]
:0044BC4C 51                      push ecx
:0044BC4D 8B55B0                  mov edx, dword ptr [ebp-50]
:0044BC50 8A4204                  mov al, byte ptr [edx+04]
:0044BC53 50                      push eax
:0044BC54 E86CEAFFFF              call 0044A6C5
:0044BC59 83C410                  add esp, 00000010
:0044BC5C 85C0                    test eax, eax
:0044BC5E 7509                    jne 0044BC69
:0044BC60 C745DC00000000          mov [ebp-24], 00000000
:0044BC67 EB7E                    jmp 0044BCE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BC5E(C)
|
:0044BC69 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BC6C 81E1FF000000            and ecx, 000000FF
:0044BC72 6BC924                  imul ecx, 00000024
:0044BC75 81C108F54A00            add ecx, 004AF508
:0044BC7B E8F08BFBFF              call 00404870
:0044BC80 8BF0                    mov esi, eax
:0044BC82 6BF664                  imul esi, 00000064
:0044BC85 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044BC88 E85368FBFF              call 004024E0
:0044BC8D 8BC8                    mov ecx, eax
:0044BC8F 8BC6                    mov eax, esi
:0044BC91 33D2                    xor edx, edx
:0044BC93 F7F1                    div ecx
:0044BC95 83F828                  cmp eax, 00000028
:0044BC98 7309                    jnb 0044BCA3
:0044BC9A C745DC00000000          mov [ebp-24], 00000000
:0044BCA1 EB44                    jmp 0044BCE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BC98(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044BCA3 6A10                    push 00000010
:0044BCA5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BCA8 81E1FF000000            and ecx, 000000FF
:0044BCAE 6BC924                  imul ecx, 00000024
:0044BCB1 81C108F54A00            add ecx, 004AF508
:0044BCB7 E8A43AFEFF              call 0042F760
:0044BCBC 85C0                    test eax, eax
:0044BCBE 7520                    jne 0044BCE0
:0044BCC0 8A5508                  mov dl, byte ptr [ebp+08]
:0044BCC3 52                      push edx
:0044BCC4 8B45B0                  mov eax, dword ptr [ebp-50]
:0044BCC7 8A4804                  mov cl, byte ptr [eax+04]
:0044BCCA 51                      push ecx
:0044BCCB E8C743FEFF              call 00430097
:0044BCD0 83C408                  add esp, 00000008
:0044BCD3 85C0                    test eax, eax
:0044BCD5 7409                    je 0044BCE0
:0044BCD7 C745DC19000000          mov [ebp-24], 00000019
:0044BCDE EB07                    jmp 0044BCE7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BCBE(C), :0044BCD5(C)
|
:0044BCE0 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BC67(U), :0044BCA1(U), :0044BCDE(U)
|
:0044BCE7 E992040000              jmp 0044C17E
:0044BCEC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BCEF 81E1FF000000            and ecx, 000000FF
:0044BCF5 6BC924                  imul ecx, 00000024
:0044BCF8 81C108F54A00            add ecx, 004AF508
:0044BCFE E815CBFFFF              call 00448818
:0044BD03 85C0                    test eax, eax
:0044BD05 7409                    je 0044BD10
:0044BD07 C745DC14000000          mov [ebp-24], 00000014
:0044BD0E EB07                    jmp 0044BD17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BD05(C)
|
:0044BD10 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BD0E(U)
|
:0044BD17 E962040000              jmp 0044C17E
:0044BD1C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BD1F 81E1FF000000            and ecx, 000000FF
:0044BD25 6BC924                  imul ecx, 00000024
:0044BD28 81C108F54A00            add ecx, 004AF508
:0044BD2E E8E5CAFFFF              call 00448818
:0044BD33 85C0                    test eax, eax
:0044BD35 7409                    je 0044BD40
:0044BD37 C745DC14000000          mov [ebp-24], 00000014
:0044BD3E EB07                    jmp 0044BD47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BD35(C)
|
:0044BD40 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BD3E(U)
|
:0044BD47 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BD4A 81E2FF000000            and edx, 000000FF
:0044BD50 85D2                    test edx, edx
:0044BD52 7420                    je 0044BD74
:0044BD54 8A450C                  mov al, byte ptr [ebp+0C]
:0044BD57 50                      push eax
:0044BD58 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044BD5B 8A5104                  mov dl, byte ptr [ecx+04]
:0044BD5E 52                      push edx
:0044BD5F 6A01                    push 00000001
:0044BD61 8B45DC                  mov eax, dword ptr [ebp-24]
:0044BD64 50                      push eax
:0044BD65 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0044BD68 51                      push ecx
:0044BD69 E8DED2FFFF              call 0044904C
:0044BD6E 83C414                  add esp, 00000014
:0044BD71 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BD52(C)
|
:0044BD74 E905040000              jmp 0044C17E
:0044BD79 8A5514                  mov dl, byte ptr [ebp+14]
:0044BD7C 52                      push edx
:0044BD7D 8A450C                  mov al, byte ptr [ebp+0C]
:0044BD80 50                      push eax
:0044BD81 8A4D08                  mov cl, byte ptr [ebp+08]
:0044BD84 51                      push ecx
:0044BD85 8B55B0                  mov edx, dword ptr [ebp-50]
:0044BD88 8A4204                  mov al, byte ptr [edx+04]
:0044BD8B 50                      push eax
:0044BD8C E834E9FFFF              call 0044A6C5
:0044BD91 83C410                  add esp, 00000010
:0044BD94 85C0                    test eax, eax
:0044BD96 7509                    jne 0044BDA1
:0044BD98 C745DC00000000          mov [ebp-24], 00000000
:0044BD9F EB4B                    jmp 0044BDEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BD96(C)
|
:0044BDA1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BDA4 81E1FF000000            and ecx, 000000FF
:0044BDAA 6BC924                  imul ecx, 00000024
:0044BDAD 81C108F54A00            add ecx, 004AF508
:0044BDB3 E860CAFFFF              call 00448818
:0044BDB8 85C0                    test eax, eax
:0044BDBA 7429                    je 0044BDE5
:0044BDBC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044BDBF 51                      push ecx
:0044BDC0 8B55B0                  mov edx, dword ptr [ebp-50]
:0044BDC3 8A4204                  mov al, byte ptr [edx+04]
:0044BDC6 50                      push eax
:0044BDC7 6A00                    push 00000000
:0044BDC9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BDCC 81E1FF000000            and ecx, 000000FF
:0044BDD2 6BC924                  imul ecx, 00000024
:0044BDD5 81C108F54A00            add ecx, 004AF508
:0044BDDB E863070000              call 0044C543
:0044BDE0 8945DC                  mov dword ptr [ebp-24], eax
:0044BDE3 EB07                    jmp 0044BDEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BDBA(C)
|
:0044BDE5 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BD9F(U), :0044BDE3(U)
|
:0044BDEC E98D030000              jmp 0044C17E
:0044BDF1 8A4D14                  mov cl, byte ptr [ebp+14]
:0044BDF4 51                      push ecx
:0044BDF5 8A550C                  mov dl, byte ptr [ebp+0C]
:0044BDF8 52                      push edx
:0044BDF9 8A4508                  mov al, byte ptr [ebp+08]
:0044BDFC 50                      push eax
:0044BDFD 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044BE00 8A5104                  mov dl, byte ptr [ecx+04]
:0044BE03 52                      push edx
:0044BE04 E8BCE8FFFF              call 0044A6C5
:0044BE09 83C410                  add esp, 00000010
:0044BE0C 85C0                    test eax, eax
:0044BE0E 750C                    jne 0044BE1C
:0044BE10 C745DC00000000          mov [ebp-24], 00000000
:0044BE17 E962030000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BE0E(C)
|
:0044BE1C C745DC28000000          mov [ebp-24], 00000028
:0044BE23 E956030000              jmp 0044C17E
:0044BE28 8A4514                  mov al, byte ptr [ebp+14]
:0044BE2B 50                      push eax
:0044BE2C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044BE2F 51                      push ecx
:0044BE30 8A5508                  mov dl, byte ptr [ebp+08]
:0044BE33 52                      push edx
:0044BE34 8B45B0                  mov eax, dword ptr [ebp-50]
:0044BE37 8A4804                  mov cl, byte ptr [eax+04]
:0044BE3A 51                      push ecx
:0044BE3B E885E8FFFF              call 0044A6C5
:0044BE40 83C410                  add esp, 00000010
:0044BE43 85C0                    test eax, eax
:0044BE45 750C                    jne 0044BE53
:0044BE47 C745DC00000000          mov [ebp-24], 00000000
:0044BE4E E92B030000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BE45(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044BE53 6A0A                    push 0000000A
:0044BE55 E85B620100              call 004620B5
:0044BE5A 83C404                  add esp, 00000004
:0044BE5D 8945DC                  mov dword ptr [ebp-24], eax
:0044BE60 E919030000              jmp 0044C17E
:0044BE65 C745DC00000000          mov [ebp-24], 00000000
:0044BE6C 8A5514                  mov dl, byte ptr [ebp+14]
:0044BE6F 52                      push edx
:0044BE70 8A450C                  mov al, byte ptr [ebp+0C]
:0044BE73 50                      push eax
:0044BE74 8A4D08                  mov cl, byte ptr [ebp+08]
:0044BE77 51                      push ecx
:0044BE78 8B55B0                  mov edx, dword ptr [ebp-50]
:0044BE7B 8A4204                  mov al, byte ptr [edx+04]
:0044BE7E 50                      push eax
:0044BE7F E841E8FFFF              call 0044A6C5
:0044BE84 83C410                  add esp, 00000010
:0044BE87 85C0                    test eax, eax
:0044BE89 7505                    jne 0044BE90
:0044BE8B E9EE020000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BE89(C)
|
:0044BE90 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BE93 81E1FF000000            and ecx, 000000FF
:0044BE99 6BC924                  imul ecx, 00000024
:0044BE9C 81C108F54A00            add ecx, 004AF508
:0044BEA2 E87938FEFF              call 0042F720
:0044BEA7 50                      push eax
:0044BEA8 8A4D08                  mov cl, byte ptr [ebp+08]
:0044BEAB 51                      push ecx
:0044BEAC E894030000              call 0044C245
:0044BEB1 83C408                  add esp, 00000008
:0044BEB4 25FF000000              and eax, 000000FF
:0044BEB9 8B55DC                  mov edx, dword ptr [ebp-24]
:0044BEBC 03D0                    add edx, eax
:0044BEBE 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BF0C(U)
|
:0044BEC1 8B45C0                  mov eax, dword ptr [ebp-40]
:0044BEC4 33C9                    xor ecx, ecx
:0044BEC6 8A08                    mov cl, byte ptr [eax]
:0044BEC8 81F9FF000000            cmp ecx, 000000FF
:0044BECE 743E                    je 0044BF0E
:0044BED0 8B55C0                  mov edx, dword ptr [ebp-40]
:0044BED3 33C0                    xor eax, eax
:0044BED5 8A02                    mov al, byte ptr [edx]
:0044BED7 8BC8                    mov ecx, eax
:0044BED9 6BC924                  imul ecx, 00000024
:0044BEDC 81C108F54A00            add ecx, 004AF508
:0044BEE2 E83938FEFF              call 0042F720
:0044BEE7 50                      push eax
:0044BEE8 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0044BEEB 8A11                    mov dl, byte ptr [ecx]
:0044BEED 52                      push edx
:0044BEEE E852030000              call 0044C245
:0044BEF3 83C408                  add esp, 00000008
:0044BEF6 25FF000000              and eax, 000000FF
:0044BEFB 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044BEFE 03C8                    add ecx, eax
:0044BF00 894DDC                  mov dword ptr [ebp-24], ecx
:0044BF03 8B55C0                  mov edx, dword ptr [ebp-40]
:0044BF06 83C201                  add edx, 00000001
:0044BF09 8955C0                  mov dword ptr [ebp-40], edx
:0044BF0C EBB3                    jmp 0044BEC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BECE(C)
|
:0044BF0E 837DDC0A                cmp dword ptr [ebp-24], 0000000A
:0044BF12 7307                    jnb 0044BF1B
:0044BF14 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BF12(C)
|
:0044BF1B E95E020000              jmp 0044C17E
:0044BF20 C745DC00000000          mov [ebp-24], 00000000
:0044BF27 8A4514                  mov al, byte ptr [ebp+14]
:0044BF2A 50                      push eax
:0044BF2B 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044BF2E 51                      push ecx
:0044BF2F 8A5508                  mov dl, byte ptr [ebp+08]
:0044BF32 52                      push edx
:0044BF33 8B45B0                  mov eax, dword ptr [ebp-50]
:0044BF36 8A4804                  mov cl, byte ptr [eax+04]
:0044BF39 51                      push ecx
:0044BF3A E886E7FFFF              call 0044A6C5
:0044BF3F 83C410                  add esp, 00000010
:0044BF42 85C0                    test eax, eax
:0044BF44 7505                    jne 0044BF4B
:0044BF46 E933020000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BF44(C)
|
:0044BF4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BF4E 81E1FF000000            and ecx, 000000FF
:0044BF54 6BC924                  imul ecx, 00000024
:0044BF57 81C108F54A00            add ecx, 004AF508
:0044BF5D E8DE37FEFF              call 0042F740
:0044BF62 50                      push eax
:0044BF63 8A5508                  mov dl, byte ptr [ebp+08]
:0044BF66 52                      push edx
:0044BF67 E8D9020000              call 0044C245
:0044BF6C 83C408                  add esp, 00000008
:0044BF6F 25FF000000              and eax, 000000FF
:0044BF74 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044BF77 03C8                    add ecx, eax
:0044BF79 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BFC6(U)
|
:0044BF7C 8B55C0                  mov edx, dword ptr [ebp-40]
:0044BF7F 33C0                    xor eax, eax
:0044BF81 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044BF83 3DFF000000              cmp eax, 000000FF
:0044BF88 743E                    je 0044BFC8
:0044BF8A 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0044BF8D 33D2                    xor edx, edx
:0044BF8F 8A11                    mov dl, byte ptr [ecx]
:0044BF91 8BCA                    mov ecx, edx
:0044BF93 6BC924                  imul ecx, 00000024
:0044BF96 81C108F54A00            add ecx, 004AF508
:0044BF9C E89F37FEFF              call 0042F740
:0044BFA1 50                      push eax
:0044BFA2 8B45C0                  mov eax, dword ptr [ebp-40]
:0044BFA5 8A08                    mov cl, byte ptr [eax]
:0044BFA7 51                      push ecx
:0044BFA8 E898020000              call 0044C245
:0044BFAD 83C408                  add esp, 00000008
:0044BFB0 25FF000000              and eax, 000000FF
:0044BFB5 8B55DC                  mov edx, dword ptr [ebp-24]
:0044BFB8 03D0                    add edx, eax
:0044BFBA 8955DC                  mov dword ptr [ebp-24], edx
:0044BFBD 8B45C0                  mov eax, dword ptr [ebp-40]
:0044BFC0 83C001                  add eax, 00000001
:0044BFC3 8945C0                  mov dword ptr [ebp-40], eax
:0044BFC6 EBB4                    jmp 0044BF7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BF88(C)
|
:0044BFC8 E9B1010000              jmp 0044C17E
:0044BFCD 8A4D14                  mov cl, byte ptr [ebp+14]
:0044BFD0 51                      push ecx
:0044BFD1 8A550C                  mov dl, byte ptr [ebp+0C]
:0044BFD4 52                      push edx
:0044BFD5 8A4508                  mov al, byte ptr [ebp+08]
:0044BFD8 50                      push eax
:0044BFD9 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044BFDC 8A5104                  mov dl, byte ptr [ecx+04]
:0044BFDF 52                      push edx
:0044BFE0 E8E0E6FFFF              call 0044A6C5
:0044BFE5 83C410                  add esp, 00000010
:0044BFE8 85C0                    test eax, eax
:0044BFEA 750C                    jne 0044BFF8
:0044BFEC C745DC00000000          mov [ebp-24], 00000000
:0044BFF3 E9BE000000              jmp 0044C0B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BFEA(C)
|
:0044BFF8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BFFB 81E1FF000000            and ecx, 000000FF
:0044C001 6BC924                  imul ecx, 00000024
:0044C004 81C108F54A00            add ecx, 004AF508
:0044C00A E8E138FEFF              call 0042F8F0
:0044C00F 25FF000000              and eax, 000000FF
:0044C014 83F803                  cmp eax, 00000003
:0044C017 7421                    je 0044C03A
:0044C019 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044C01C 81E1FF000000            and ecx, 000000FF
:0044C022 6BC924                  imul ecx, 00000024
:0044C025 81C108F54A00            add ecx, 004AF508
:0044C02B E8C038FEFF              call 0042F8F0
:0044C030 25FF000000              and eax, 000000FF
:0044C035 83F802                  cmp eax, 00000002
:0044C038 7509                    jne 0044C043

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C017(C)
|
:0044C03A C745DC00000000          mov [ebp-24], 00000000
:0044C041 EB73                    jmp 0044C0B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C038(C)
|
:0044C043 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044C046 81E1FF000000            and ecx, 000000FF
:0044C04C 6BC924                  imul ecx, 00000024
:0044C04F 81C108F54A00            add ecx, 004AF508
:0044C055 E88637FEFF              call 0042F7E0
:0044C05A 25FF000000              and eax, 000000FF
:0044C05F 83F806                  cmp eax, 00000006
:0044C062 7512                    jne 0044C076

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044C064 6A04                    push 00000004
:0044C066 E84A600100              call 004620B5
:0044C06B 83C404                  add esp, 00000004
:0044C06E 83C00A                  add eax, 0000000A
:0044C071 8945DC                  mov dword ptr [ebp-24], eax
:0044C074 EB40                    jmp 0044C0B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C062(C)
|
:0044C076 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044C079 81E1FF000000            and ecx, 000000FF
:0044C07F 6BC924                  imul ecx, 00000024
:0044C082 81C108F54A00            add ecx, 004AF508
:0044C088 E85337FEFF              call 0042F7E0
:0044C08D 25FF000000              and eax, 000000FF
:0044C092 83F808                  cmp eax, 00000008
:0044C095 7512                    jne 0044C0A9

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044C097 6A04                    push 00000004
:0044C099 E817600100              call 004620B5
:0044C09E 83C404                  add esp, 00000004
:0044C0A1 83C00A                  add eax, 0000000A
:0044C0A4 8945DC                  mov dword ptr [ebp-24], eax
:0044C0A7 EB0D                    jmp 0044C0B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C095(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044C0A9 6A05                    push 00000005
:0044C0AB E805600100              call 004620B5
:0044C0B0 83C404                  add esp, 00000004
:0044C0B3 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BFF3(U), :0044C041(U), :0044C074(U), :0044C0A7(U)
|
:0044C0B6 E9C3000000              jmp 0044C17E
:0044C0BB C745DC00000000          mov [ebp-24], 00000000
:0044C0C2 E9B7000000              jmp 0044C17E
:0044C0C7 8A4514                  mov al, byte ptr [ebp+14]
:0044C0CA 50                      push eax
:0044C0CB 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044C0CE 51                      push ecx
:0044C0CF 8A5508                  mov dl, byte ptr [ebp+08]
:0044C0D2 52                      push edx
:0044C0D3 8B45B0                  mov eax, dword ptr [ebp-50]
:0044C0D6 8A4804                  mov cl, byte ptr [eax+04]
:0044C0D9 51                      push ecx
:0044C0DA E8E6E5FFFF              call 0044A6C5
:0044C0DF 83C410                  add esp, 00000010
:0044C0E2 85C0                    test eax, eax
:0044C0E4 750C                    jne 0044C0F2
:0044C0E6 C745DC00000000          mov [ebp-24], 00000000
:0044C0ED E98C000000              jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C0E4(C)
|
:0044C0F2 B9C8E24A00              mov ecx, 004AE2C8
:0044C0F7 E8D435FEFF              call 0042F6D0
:0044C0FC 85C0                    test eax, eax
:0044C0FE 7707                    ja 0044C107
:0044C100 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C0FE(C)
|
:0044C107 8A5508                  mov dl, byte ptr [ebp+08]
:0044C10A 52                      push edx
:0044C10B 8B45B0                  mov eax, dword ptr [ebp-50]
:0044C10E 8A4804                  mov cl, byte ptr [eax+04]
:0044C111 51                      push ecx
:0044C112 E8803FFEFF              call 00430097
:0044C117 83C408                  add esp, 00000008
:0044C11A 85C0                    test eax, eax
:0044C11C 7509                    jne 0044C127
:0044C11E C745DC00000000          mov [ebp-24], 00000000
:0044C125 EB57                    jmp 0044C17E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C11C(C)
|
:0044C127 8A5508                  mov dl, byte ptr [ebp+08]
:0044C12A 52                      push edx
:0044C12B 8B45B0                  mov eax, dword ptr [ebp-50]
:0044C12E 8A4804                  mov cl, byte ptr [eax+04]
:0044C131 51                      push ecx
:0044C132 E8834AFEFF              call 00430BBA
:0044C137 83C408                  add esp, 00000008
:0044C13A 8945D8                  mov dword ptr [ebp-28], eax
:0044C13D 6A64                    push 00000064

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044C13F 6A05                    push 00000005
:0044C141 B9C8E24A00              mov ecx, 004AE2C8
:0044C146 E88535FEFF              call 0042F6D0
:0044C14B 50                      push eax
:0044C14C E80F5E0100              call 00461F60
:0044C151 83C40C                  add esp, 0000000C
:0044C154 3945D8                  cmp dword ptr [ebp-28], eax
:0044C157 760F                    jbe 0044C168
:0044C159 6A14                    push 00000014
:0044C15B E8555F0100              call 004620B5
:0044C160 83C404                  add esp, 00000004
:0044C163 8945DC                  mov dword ptr [ebp-24], eax
:0044C166 EB0D                    jmp 0044C175

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C157(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044C168 6A08                    push 00000008
:0044C16A E8465F0100              call 004620B5
:0044C16F 83C404                  add esp, 00000004
:0044C172 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C166(U)
|
:0044C175 EB07                    jmp 0044C17E
:0044C177 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B523(C), :0044B561(U), :0044B58C(U), :0044B5AF(U), :0044B5F1(U)
|:0044B61E(U), :0044B623(U), :0044B779(U), :0044B7A4(U), :0044B7BE(U)
|:0044B87D(U), :0044B8F1(U), :0044B998(U), :0044BA8E(U), :0044BAFC(U)
|:0044BBCE(U), :0044BC3C(U), :0044BCE7(U), :0044BD17(U), :0044BD74(U)
|:0044BDEC(U), :0044BE17(U), :0044BE23(U), :0044BE4E(U), :0044BE60(U)
|:0044BE8B(U), :0044BF1B(U), :0044BF46(U), :0044BFC8(U), :0044C0B6(U)
|:0044C0C2(U), :0044C0ED(U), :0044C125(U), :0044C175(U)
|
:0044C17E 8B45DC                  mov eax, dword ptr [ebp-24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B501(U)
|
:0044C181 5E                      pop esi
:0044C182 8BE5                    mov esp, ebp
:0044C184 5D                      pop ebp
:0044C185 C21000                  ret 0010



:0044C188 28B64400                DWORD 0044B628
:0044C18C 66B54400                DWORD 0044B566
:0044C190 28B64400                DWORD 0044B628
:0044C194 F6B84400                DWORD 0044B8F6
:0044C198 9DB94400                DWORD 0044B99D
:0044C19C 28B64400                DWORD 0044B628
:0044C1A0 01BB4400                DWORD 0044BB01
:0044C1A4 93BA4400                DWORD 0044BA93
:0044C1A8 28B64400                DWORD 0044B628
:0044C1AC 3BB54400                DWORD 0044B53B
:0044C1B0 7EB74400                DWORD 0044B77E
:0044C1B4 D3BB4400                DWORD 0044BBD3
:0044C1B8 7EB74400                DWORD 0044B77E
:0044C1BC 41BC4400                DWORD 0044BC41
:0044C1C0 7EB74400                DWORD 0044B77E
:0044C1C4 82B84400                DWORD 0044B882
:0044C1C8 ECBC4400                DWORD 0044BCEC
:0044C1CC 1CBD4400                DWORD 0044BD1C
:0044C1D0 79BD4400                DWORD 0044BD79
:0044C1D4 F1BD4400                DWORD 0044BDF1
:0044C1D8 28BE4400                DWORD 0044BE28
:0044C1DC 65BE4400                DWORD 0044BE65
:0044C1E0 20BF4400                DWORD 0044BF20
:0044C1E4 CDBF4400                DWORD 0044BFCD
:0044C1E8 77C14400                DWORD 0044C177
:0044C1EC C7C04400                DWORD 0044C0C7
:0044C1F0 BBC04400                DWORD 0044C0BB
:0044C1F4 7EC14400                DWORD 0044C17E


:0044C1F8 000000                  BYTE  3 DUP(0)


:0044C1FB 0102                    add dword ptr [edx], eax
:0044C1FD 0202                    add al, byte ptr [edx]
:0044C1FF 0202                    add al, byte ptr [edx]
:0044C201 0203                    add al, byte ptr [ebx]
:0044C203 0303                    add eax, dword ptr [ebx]
:0044C205 0405                    add al, 05
:0044C207 0505050506              add eax, 06050505
:0044C20C 07                      pop es
:0044C20D 0808                    or byte ptr [eax], cl
:0044C20F 090A                    or dword ptr [edx], ecx
:0044C211 0A0A                    or cl, byte ptr [edx]
:0044C213 0B0C0D0E0E0F10          or ecx, dword ptr [ecx+100F0E0E]
:0044C21A 1011                    adc byte ptr [ecx], dl
:0044C21C 1112                    adc dword ptr [edx], edx
:0044C21E 1313                    adc edx, dword ptr [ebx]
:0044C220 13141516171819          adc edx, dword ptr [edx+19181716]
:0044C227 1A1A                    sbb bl, byte ptr [edx]

:0044C229 50B74400                DWORD 0044B750
:0044C22D 79B74400                DWORD 0044B779
:0044C231 1EB74400                DWORD 0044B71E
:0044C235 45B74400                DWORD 0044B745
:0044C239 2FB74400                DWORD 0044B72F
:0044C23D 3AB74400                DWORD 0044B73A
:0044C241 6AB74400                DWORD 0044B76A



* Referenced by a CALL at Addresses:
|:0044BEAC   , :0044BEEE   , :0044BF67   , :0044BFA8   
|
:0044C245 55                      push ebp
:0044C246 8BEC                    mov ebp, esp
:0044C248 83EC08                  sub esp, 00000008
:0044C24B C645FC00                mov [ebp-04], 00
:0044C24F 8A4508                  mov al, byte ptr [ebp+08]
:0044C252 50                      push eax
:0044C253 E806D1FFFF              call 0044935E
:0044C258 83C404                  add esp, 00000004
:0044C25B 85C0                    test eax, eax
:0044C25D 7404                    je 0044C263
:0044C25F 32C0                    xor al, al
:0044C261 EB27                    jmp 0044C28A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C25D(C)
|
:0044C263 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044C266 884DF8                  mov byte ptr [ebp-08], cl
:0044C269 807DF800                cmp byte ptr [ebp-08], 00
:0044C26D 7218                    jb 0044C287
:0044C26F 807DF801                cmp byte ptr [ebp-08], 01
:0044C273 7608                    jbe 0044C27D
:0044C275 807DF802                cmp byte ptr [ebp-08], 02
:0044C279 7408                    je 0044C283
:0044C27B EB0A                    jmp 0044C287

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C273(C)
|
:0044C27D C645FC00                mov [ebp-04], 00
:0044C281 EB04                    jmp 0044C287

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C279(C)
|
:0044C283 C645FC03                mov [ebp-04], 03

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C26D(C), :0044C27B(U), :0044C281(U)
|
:0044C287 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C261(U)
|
:0044C28A 8BE5                    mov esp, ebp
:0044C28C 5D                      pop ebp
:0044C28D C3                      ret


:0044C28E 55                      push ebp
:0044C28F 8BEC                    mov ebp, esp
:0044C291 83EC24                  sub esp, 00000024
:0044C294 56                      push esi
:0044C295 894DE0                  mov dword ptr [ebp-20], ecx
:0044C298 8B45E0                  mov eax, dword ptr [ebp-20]
:0044C29B 8B08                    mov ecx, dword ptr [eax]
:0044C29D 6BC970                  imul ecx, 00000070
:0044C2A0 81C198224900            add ecx, 00492298
:0044C2A6 894DE8                  mov dword ptr [ebp-18], ecx
:0044C2A9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044C2AC 81E1FF000000            and ecx, 000000FF
:0044C2B2 6BC924                  imul ecx, 00000024
:0044C2B5 81C108F54A00            add ecx, 004AF508
:0044C2BB E81034FEFF              call 0042F6D0
:0044C2C0 6BC070                  imul eax, 00000070
:0044C2C3 0598224900              add eax, 00492298
:0044C2C8 8945F0                  mov dword ptr [ebp-10], eax
:0044C2CB 8B5508                  mov edx, dword ptr [ebp+08]
:0044C2CE 81E2FF000000            and edx, 000000FF
:0044C2D4 81E2F0000000            and edx, 000000F0
:0044C2DA C1FA04                  sar edx, 04
:0044C2DD 8855F8                  mov byte ptr [ebp-08], dl
:0044C2E0 C745F400000000          mov [ebp-0C], 00000000
:0044C2E7 C745E400000000          mov [ebp-1C], 00000000
:0044C2EE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044C2F1 E87A84FBFF              call 00404770
:0044C2F6 8845EC                  mov byte ptr [ebp-14], al
:0044C2F9 C745FC00000000          mov [ebp-04], 00000000
:0044C300 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C303 E8C835FEFF              call 0042F8D0
:0044C308 25FF000000              and eax, 000000FF
:0044C30D 83F802                  cmp eax, 00000002
:0044C310 7407                    je 0044C319
:0044C312 33C0                    xor eax, eax
:0044C314 E923020000              jmp 0044C53C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C310(C)
|
:0044C319 8B4508                  mov eax, dword ptr [ebp+08]
:0044C31C 25FF000000              and eax, 000000FF
:0044C321 83E001                  and eax, 00000001
:0044C324 85C0                    test eax, eax
:0044C326 0F84FF000000            je 0044C42B
:0044C32C C745FC1E000000          mov [ebp-04], 0000001E
:0044C333 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C336 81E1FF000000            and ecx, 000000FF
:0044C33C 83F903                  cmp ecx, 00000003
:0044C33F 750D                    jne 0044C34E
:0044C341 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C344 E89761FBFF              call 004024E0
:0044C349 8945F4                  mov dword ptr [ebp-0C], eax
:0044C34C EB26                    jmp 0044C374

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C33F(C)
|
:0044C34E 8B75F8                  mov esi, dword ptr [ebp-08]
:0044C351 81E6FF000000            and esi, 000000FF
:0044C357 69F6C8000000            imul esi, 000000C8
:0044C35D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044C360 E86B84FBFF              call 004047D0
:0044C365 25FF000000              and eax, 000000FF
:0044C36A 8D9406C8000000          lea edx, dword ptr [esi+eax+000000C8]
:0044C371 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C34C(U)
|
:0044C374 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C377 E86461FBFF              call 004024E0
:0044C37C 8BF0                    mov esi, eax
:0044C37E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C381 E8EA84FBFF              call 00404870
:0044C386 2BF0                    sub esi, eax
:0044C388 3975F4                  cmp dword ptr [ebp-0C], esi
:0044C38B 7D08                    jge 0044C395
:0044C38D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044C390 8945DC                  mov dword ptr [ebp-24], eax
:0044C393 EB17                    jmp 0044C3AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C38B(C)
|
:0044C395 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C398 E84361FBFF              call 004024E0
:0044C39D 8BF0                    mov esi, eax
:0044C39F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C3A2 E8C984FBFF              call 00404870
:0044C3A7 2BF0                    sub esi, eax
:0044C3A9 8975DC                  mov dword ptr [ebp-24], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C393(U)
|
:0044C3AC 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044C3AF 894DF4                  mov dword ptr [ebp-0C], ecx
:0044C3B2 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C3B5 E8B684FBFF              call 00404870
:0044C3BA 8B75F4                  mov esi, dword ptr [ebp-0C]
:0044C3BD 03F0                    add esi, eax
:0044C3BF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C3C2 E81961FBFF              call 004024E0
:0044C3C7 3BF0                    cmp esi, eax
:0044C3C9 7209                    jb 0044C3D4
:0044C3CB 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C3CE 83C202                  add edx, 00000002
:0044C3D1 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C3C9(C)
|
:0044C3D4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C3D7 E80461FBFF              call 004024E0
:0044C3DC 8BF0                    mov esi, eax
:0044C3DE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C3E1 E88A84FBFF              call 00404870
:0044C3E6 2BF0                    sub esi, eax
:0044C3E8 6BF605                  imul esi, 00000005
:0044C3EB 8BC6                    mov eax, esi
:0044C3ED 33D2                    xor edx, edx
:0044C3EF F775F4                  div [ebp-0C]
:0044C3F2 83F803                  cmp eax, 00000003
:0044C3F5 7709                    ja 0044C400
:0044C3F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C3FA 83E804                  sub eax, 00000004
:0044C3FD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C3F5(C)
|
:0044C400 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C403 E86884FBFF              call 00404870
:0044C408 8BF0                    mov esi, eax
:0044C40A 6BF60A                  imul esi, 0000000A
:0044C40D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C410 E8CB60FBFF              call 004024E0
:0044C415 8BC8                    mov ecx, eax
:0044C417 8BC6                    mov eax, esi
:0044C419 33D2                    xor edx, edx
:0044C41B F7F1                    div ecx
:0044C41D 83F802                  cmp eax, 00000002
:0044C420 7709                    ja 0044C42B
:0044C422 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C425 83C205                  add edx, 00000005
:0044C428 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C326(C), :0044C420(C)
|
:0044C42B 8B4508                  mov eax, dword ptr [ebp+08]
:0044C42E 25FF000000              and eax, 000000FF
:0044C433 83E002                  and eax, 00000002
:0044C436 85C0                    test eax, eax
:0044C438 0F84DD000000            je 0044C51B
:0044C43E C745FC1C000000          mov [ebp-04], 0000001C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044C445 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044C44A 68FF000000              push 000000FF
:0044C44F 6A00                    push 00000000
:0044C451 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044C454 51                      push ecx
:0044C455 8B55E0                  mov edx, dword ptr [ebp-20]
:0044C458 8A4204                  mov al, byte ptr [edx+04]
:0044C45B 50                      push eax
:0044C45C E85139FEFF              call 0042FDB2
:0044C461 83C414                  add esp, 00000014
:0044C464 25FF000000              and eax, 000000FF
:0044C469 8945E4                  mov dword ptr [ebp-1C], eax
:0044C46C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C46F E83C84FBFF              call 004048B0
:0044C474 8B75E4                  mov esi, dword ptr [ebp-1C]
:0044C477 03F0                    add esi, eax
:0044C479 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C47C E89060FBFF              call 00402511
:0044C481 3BF0                    cmp esi, eax
:0044C483 7209                    jb 0044C48E
:0044C485 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C488 83C102                  add ecx, 00000002
:0044C48B 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C483(C)
|
:0044C48E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C491 E87B60FBFF              call 00402511
:0044C496 8BF0                    mov esi, eax
:0044C498 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C49B E81084FBFF              call 004048B0
:0044C4A0 2BF0                    sub esi, eax
:0044C4A2 6BF605                  imul esi, 00000005
:0044C4A5 8BC6                    mov eax, esi
:0044C4A7 33D2                    xor edx, edx
:0044C4A9 F775E4                  div [ebp-1C]
:0044C4AC 83F803                  cmp eax, 00000003
:0044C4AF 7709                    ja 0044C4BA
:0044C4B1 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C4B4 83EA04                  sub edx, 00000004
:0044C4B7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C4AF(C)
|
:0044C4BA 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C4BD E8EE83FBFF              call 004048B0
:0044C4C2 8BF0                    mov esi, eax
:0044C4C4 6BF60A                  imul esi, 0000000A
:0044C4C7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044C4CA E84260FBFF              call 00402511
:0044C4CF 8BC8                    mov ecx, eax
:0044C4D1 8BC6                    mov eax, esi
:0044C4D3 33D2                    xor edx, edx
:0044C4D5 F7F1                    div ecx
:0044C4D7 83F802                  cmp eax, 00000002
:0044C4DA 7709                    ja 0044C4E5
:0044C4DC 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C4DF 83C204                  add edx, 00000004
:0044C4E2 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C4DA(C)
|
:0044C4E5 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C4E8 E8F332FEFF              call 0042F7E0
:0044C4ED 25FF000000              and eax, 000000FF
:0044C4F2 83F80A                  cmp eax, 0000000A
:0044C4F5 7509                    jne 0044C500
:0044C4F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C4FA 83C005                  add eax, 00000005
:0044C4FD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C4F5(C)
|
:0044C500 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C503 E8D832FEFF              call 0042F7E0
:0044C508 25FF000000              and eax, 000000FF
:0044C50D 83F80D                  cmp eax, 0000000D
:0044C510 7509                    jne 0044C51B
:0044C512 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C515 83C105                  add ecx, 00000005
:0044C518 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C438(C), :0044C510(C)
|
:0044C51B 8B55E0                  mov edx, dword ptr [ebp-20]
:0044C51E 33C0                    xor eax, eax
:0044C520 8A4204                  mov al, byte ptr [edx+04]
:0044C523 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044C526 81E1FF000000            and ecx, 000000FF
:0044C52C 3BC1                    cmp eax, ecx
:0044C52E 7509                    jne 0044C539
:0044C530 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C533 83C201                  add edx, 00000001
:0044C536 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C52E(C)
|
:0044C539 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C314(U)
|
:0044C53C 5E                      pop esi
:0044C53D 8BE5                    mov esp, ebp
:0044C53F 5D                      pop ebp
:0044C540 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0044BDDB   
|
:0044C543 55                      push ebp
:0044C544 8BEC                    mov ebp, esp
:0044C546 83EC24                  sub esp, 00000024
:0044C549 56                      push esi
:0044C54A 894DE4                  mov dword ptr [ebp-1C], ecx
:0044C54D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044C550 8B08                    mov ecx, dword ptr [eax]
:0044C552 6BC970                  imul ecx, 00000070
:0044C555 81C198224900            add ecx, 00492298
:0044C55B 894DEC                  mov dword ptr [ebp-14], ecx
:0044C55E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044C561 81E1FF000000            and ecx, 000000FF
:0044C567 6BC924                  imul ecx, 00000024
:0044C56A 81C108F54A00            add ecx, 004AF508
:0044C570 E85B31FEFF              call 0042F6D0
:0044C575 6BC070                  imul eax, 00000070
:0044C578 0598224900              add eax, 00492298
:0044C57D 8945F4                  mov dword ptr [ebp-0C], eax
:0044C580 C745F800000000          mov [ebp-08], 00000000
:0044C587 C745E800000000          mov [ebp-18], 00000000
:0044C58E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044C591 E8DA81FBFF              call 00404770
:0044C596 8845F0                  mov byte ptr [ebp-10], al
:0044C599 C745FC00000000          mov [ebp-04], 00000000
:0044C5A0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C5A3 E82833FEFF              call 0042F8D0
:0044C5A8 25FF000000              and eax, 000000FF
:0044C5AD 83F802                  cmp eax, 00000002
:0044C5B0 7407                    je 0044C5B9
:0044C5B2 33C0                    xor eax, eax
:0044C5B4 E9B7020000              jmp 0044C870

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C5B0(C)
|
:0044C5B9 8B5508                  mov edx, dword ptr [ebp+08]
:0044C5BC 81E2FF000000            and edx, 000000FF
:0044C5C2 85D2                    test edx, edx
:0044C5C4 0F85C6010000            jne 0044C790
:0044C5CA C745FC1E000000          mov [ebp-04], 0000001E
:0044C5D1 8B4510                  mov eax, dword ptr [ebp+10]
:0044C5D4 25FF000000              and eax, 000000FF
:0044C5D9 8945E0                  mov dword ptr [ebp-20], eax
:0044C5DC 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044C5DF 83E921                  sub ecx, 00000021
:0044C5E2 894DE0                  mov dword ptr [ebp-20], ecx
:0044C5E5 837DE004                cmp dword ptr [ebp-20], 00000004
:0044C5E9 0F87D0000000            ja 0044C6BF
:0044C5EF 8B55E0                  mov edx, dword ptr [ebp-20]
:0044C5F2 FF249577C84400          jmp dword ptr [4*edx+0044C877]
:0044C5F9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044C5FC 81E1FF000000            and ecx, 000000FF
:0044C602 6BC924                  imul ecx, 00000024
:0044C605 81C108F54A00            add ecx, 004AF508
:0044C60B E8DFDEFDFF              call 0042A4EF
:0044C610 C1E803                  shr eax, 03
:0044C613 83C028                  add eax, 00000028
:0044C616 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044C619 6A02                    push 00000002
:0044C61B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C61E E83D31FEFF              call 0042F760
:0044C623 85C0                    test eax, eax
:0044C625 752F                    jne 0044C656
:0044C627 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C62A E8E132FEFF              call 0042F910
:0044C62F 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0044C631 68C8000000              push 000000C8
:0044C636 E87A5A0100              call 004620B5
:0044C63B 83C404                  add esp, 00000004
:0044C63E 3BF0                    cmp esi, eax
:0044C640 7614                    jbe 0044C656

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044C642 6A06                    push 00000006
:0044C644 E86C5A0100              call 004620B5
:0044C649 83C404                  add esp, 00000004
:0044C64C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C64F 8D540105                lea edx, dword ptr [ecx+eax+05]
:0044C653 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C625(C), :0044C640(C)
|
:0044C656 EB67                    jmp 0044C6BF
:0044C658 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044C65B 8B08                    mov ecx, dword ptr [eax]
:0044C65D 6BC970                  imul ecx, 00000070
:0044C660 81C198224900            add ecx, 00492298
:0044C666 E8755EFBFF              call 004024E0
:0044C66B 8945F8                  mov dword ptr [ebp-08], eax
:0044C66E EB4F                    jmp 0044C6BF
:0044C670 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044C673 81E1FF000000            and ecx, 000000FF
:0044C679 6BC924                  imul ecx, 00000024
:0044C67C 81C108F54A00            add ecx, 004AF508
:0044C682 E868DEFDFF              call 0042A4EF
:0044C687 C1E803                  shr eax, 03
:0044C68A 83C028                  add eax, 00000028
:0044C68D 8945F8                  mov dword ptr [ebp-08], eax
:0044C690 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C693 E87832FEFF              call 0042F910
:0044C698 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0044C69A 68C8000000              push 000000C8
:0044C69F E8115A0100              call 004620B5
:0044C6A4 83C404                  add esp, 00000004
:0044C6A7 3BF0                    cmp esi, eax
:0044C6A9 7614                    jbe 0044C6BF

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044C6AB 6A06                    push 00000006
:0044C6AD E8035A0100              call 004620B5
:0044C6B2 83C404                  add esp, 00000004
:0044C6B5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C6B8 8D540105                lea edx, dword ptr [ecx+eax+05]
:0044C6BC 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C5E9(C), :0044C656(U), :0044C66E(U), :0044C6A9(C)
|
:0044C6BF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C6C2 E8195EFBFF              call 004024E0
:0044C6C7 8BF0                    mov esi, eax
:0044C6C9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C6CC E89F81FBFF              call 00404870
:0044C6D1 2BF0                    sub esi, eax
:0044C6D3 3975F8                  cmp dword ptr [ebp-08], esi
:0044C6D6 7D08                    jge 0044C6E0
:0044C6D8 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C6DB 8945DC                  mov dword ptr [ebp-24], eax
:0044C6DE EB17                    jmp 0044C6F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C6D6(C)
|
:0044C6E0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C6E3 E8F85DFBFF              call 004024E0
:0044C6E8 8BF0                    mov esi, eax
:0044C6EA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C6ED E87E81FBFF              call 00404870
:0044C6F2 2BF0                    sub esi, eax
:0044C6F4 8975DC                  mov dword ptr [ebp-24], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C6DE(U)
|
:0044C6F7 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044C6FA 894DF8                  mov dword ptr [ebp-08], ecx
:0044C6FD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C700 E86B81FBFF              call 00404870
:0044C705 8B75F8                  mov esi, dword ptr [ebp-08]
:0044C708 03F0                    add esi, eax
:0044C70A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C70D E8CE5DFBFF              call 004024E0
:0044C712 3BF0                    cmp esi, eax
:0044C714 7209                    jb 0044C71F
:0044C716 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C719 83C202                  add edx, 00000002
:0044C71C 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C714(C)
|
:0044C71F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C722 E8B95DFBFF              call 004024E0
:0044C727 8BF0                    mov esi, eax
:0044C729 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C72C E83F81FBFF              call 00404870
:0044C731 2BF0                    sub esi, eax
:0044C733 6BF605                  imul esi, 00000005
:0044C736 8BC6                    mov eax, esi
:0044C738 33D2                    xor edx, edx
:0044C73A F775F8                  div [ebp-08]
:0044C73D 83F803                  cmp eax, 00000003
:0044C740 7709                    ja 0044C74B
:0044C742 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C745 83E804                  sub eax, 00000004
:0044C748 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C740(C)
|
:0044C74B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C74E E81D81FBFF              call 00404870
:0044C753 8BF0                    mov esi, eax
:0044C755 6BF60A                  imul esi, 0000000A
:0044C758 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C75B E8805DFBFF              call 004024E0
:0044C760 8BC8                    mov ecx, eax
:0044C762 8BC6                    mov eax, esi
:0044C764 33D2                    xor edx, edx
:0044C766 F7F1                    div ecx
:0044C768 83F802                  cmp eax, 00000002
:0044C76B 7709                    ja 0044C776
:0044C76D 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C770 83C204                  add edx, 00000004
:0044C773 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C76B(C)
|
:0044C776 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C779 E89AC0FFFF              call 00448818
:0044C77E 85C0                    test eax, eax
:0044C780 7409                    je 0044C78B
:0044C782 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C785 83C004                  add eax, 00000004
:0044C788 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C780(C)
|
:0044C78B E9BF000000              jmp 0044C84F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C5C4(C)
|
:0044C790 C745FC1C000000          mov [ebp-04], 0000001C
:0044C797 8A4D10                  mov cl, byte ptr [ebp+10]
:0044C79A 51                      push ecx
:0044C79B 8A550C                  mov dl, byte ptr [ebp+0C]
:0044C79E 52                      push edx
:0044C79F 6A00                    push 00000000
:0044C7A1 8B4510                  mov eax, dword ptr [ebp+10]
:0044C7A4 25FF000000              and eax, 000000FF
:0044C7A9 99                      cdq
:0044C7AA B921000000              mov ecx, 00000021
:0044C7AF F7F9                    idiv ecx
:0044C7B1 52                      push edx
:0044C7B2 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044C7B5 8A4204                  mov al, byte ptr [edx+04]
:0044C7B8 50                      push eax
:0044C7B9 E8F435FEFF              call 0042FDB2
:0044C7BE 83C414                  add esp, 00000014
:0044C7C1 25FF000000              and eax, 000000FF
:0044C7C6 8945E8                  mov dword ptr [ebp-18], eax
:0044C7C9 837DE800                cmp dword ptr [ebp-18], 00000000
:0044C7CD 7507                    jne 0044C7D6
:0044C7CF 33C0                    xor eax, eax
:0044C7D1 E99A000000              jmp 0044C870

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C7CD(C)
|
:0044C7D6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C7D9 E8D280FBFF              call 004048B0
:0044C7DE 8B75E8                  mov esi, dword ptr [ebp-18]
:0044C7E1 03F0                    add esi, eax
:0044C7E3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C7E6 E8265DFBFF              call 00402511
:0044C7EB 3BF0                    cmp esi, eax
:0044C7ED 7209                    jb 0044C7F8
:0044C7EF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C7F2 83C102                  add ecx, 00000002
:0044C7F5 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C7ED(C)
|
:0044C7F8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C7FB E8115DFBFF              call 00402511
:0044C800 8BF0                    mov esi, eax
:0044C802 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C805 E8A680FBFF              call 004048B0
:0044C80A 2BF0                    sub esi, eax
:0044C80C 6BF605                  imul esi, 00000005
:0044C80F 8BC6                    mov eax, esi
:0044C811 33D2                    xor edx, edx
:0044C813 F775E8                  div [ebp-18]
:0044C816 83F803                  cmp eax, 00000003
:0044C819 7709                    ja 0044C824
:0044C81B 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C81E 83EA04                  sub edx, 00000004
:0044C821 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C819(C)
|
:0044C824 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044C827 E88480FBFF              call 004048B0
:0044C82C 8BF0                    mov esi, eax
:0044C82E 6BF60A                  imul esi, 0000000A
:0044C831 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044C834 E8D85CFBFF              call 00402511
:0044C839 8BC8                    mov ecx, eax
:0044C83B 8BC6                    mov eax, esi
:0044C83D 33D2                    xor edx, edx
:0044C83F F7F1                    div ecx
:0044C841 83F802                  cmp eax, 00000002
:0044C844 7709                    ja 0044C84F
:0044C846 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C849 83C228                  add edx, 00000028
:0044C84C 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C78B(U), :0044C844(C)
|
:0044C84F 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044C852 33C9                    xor ecx, ecx
:0044C854 8A4804                  mov cl, byte ptr [eax+04]
:0044C857 8B550C                  mov edx, dword ptr [ebp+0C]
:0044C85A 81E2FF000000            and edx, 000000FF
:0044C860 3BCA                    cmp ecx, edx
:0044C862 7509                    jne 0044C86D
:0044C864 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C867 83C001                  add eax, 00000001
:0044C86A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C862(C)
|
:0044C86D 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C5B4(U), :0044C7D1(U)
|
:0044C870 5E                      pop esi
:0044C871 8BE5                    mov esp, ebp
:0044C873 5D                      pop ebp
:0044C874 C20C00                  ret 000C



:0044C877 58C64400                DWORD 0044C658
:0044C87B 70C64400                DWORD 0044C670
:0044C87F 58C64400                DWORD 0044C658
:0044C883 70C64400                DWORD 0044C670
:0044C887 F9C54400                DWORD 0044C5F9



* Referenced by a CALL at Address:
|:0044CAF0   
|
:0044C88B 55                      push ebp
:0044C88C 8BEC                    mov ebp, esp
:0044C88E 83EC10                  sub esp, 00000010
:0044C891 894DF4                  mov dword ptr [ebp-0C], ecx
:0044C894 8B4508                  mov eax, dword ptr [ebp+08]
:0044C897 50                      push eax
:0044C898 E8E2B0FFFF              call 0044797F
:0044C89D 83C404                  add esp, 00000004
:0044C8A0 8845F8                  mov byte ptr [ebp-08], al
:0044C8A3 C745FC00000000          mov [ebp-04], 00000000
:0044C8AA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C8AD 81E1FF000000            and ecx, 000000FF
:0044C8B3 894DF0                  mov dword ptr [ebp-10], ecx
:0044C8B6 8B55F0                  mov edx, dword ptr [ebp-10]
:0044C8B9 83EA0F                  sub edx, 0000000F
:0044C8BC 8955F0                  mov dword ptr [ebp-10], edx
:0044C8BF 837DF010                cmp dword ptr [ebp-10], 00000010
:0044C8C3 7736                    ja 0044C8FB
:0044C8C5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044C8C8 33C0                    xor eax, eax
:0044C8CA 8A81AAC94400            mov al, byte ptr [ecx+0044C9AA]
:0044C8D0 FF248592C94400          jmp dword ptr [4*eax+0044C992]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044C8D7 C745FC04000000          mov [ebp-04], 00000004
:0044C8DE E9A6000000              jmp 0044C989

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044C8E3 C745FC02000000          mov [ebp-04], 00000002
:0044C8EA E99A000000              jmp 0044C989
:0044C8EF C745FC01000000          mov [ebp-04], 00000001
:0044C8F6 E98E000000              jmp 0044C989

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C8C3(C)
|
:0044C8FB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044C8FE E8D9DCFDFF              call 0042A5DC
:0044C903 25FF000000              and eax, 000000FF
:0044C908 83F80A                  cmp eax, 0000000A
:0044C90B 7E13                    jle 0044C920
:0044C90D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044C910 E8C7DCFDFF              call 0042A5DC
:0044C915 25FF000000              and eax, 000000FF
:0044C91A 83E80A                  sub eax, 0000000A
:0044C91D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C90B(C)
|
:0044C920 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044C923 E8B82EFEFF              call 0042F7E0
:0044C928 25FF000000              and eax, 000000FF
:0044C92D 83F80C                  cmp eax, 0000000C
:0044C930 7522                    jne 0044C954
:0044C932 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C935 81E2FF000000            and edx, 000000FF
:0044C93B 83FA0A                  cmp edx, 0000000A
:0044C93E 740D                    je 0044C94D
:0044C940 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C943 25FF000000              and eax, 000000FF
:0044C948 83F80D                  cmp eax, 0000000D
:0044C94B 7507                    jne 0044C954

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C93E(C)
|
:0044C94D C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C930(C), :0044C94B(C)
|
:0044C954 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044C957 E8842EFEFF              call 0042F7E0
:0044C95C 25FF000000              and eax, 000000FF
:0044C961 83F80B                  cmp eax, 0000000B
:0044C964 7523                    jne 0044C989
:0044C966 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C969 81E1FF000000            and ecx, 000000FF
:0044C96F 83F905                  cmp ecx, 00000005
:0044C972 740E                    je 0044C982
:0044C974 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C977 81E2FF000000            and edx, 000000FF
:0044C97D 83FA07                  cmp edx, 00000007
:0044C980 7507                    jne 0044C989

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C972(C)
|
:0044C982 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044C8DE(U), :0044C8EA(U), :0044C8F6(U), :0044C964(C), :0044C980(C)
|
:0044C989 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C98C 8BE5                    mov esp, ebp
:0044C98E 5D                      pop ebp
:0044C98F C20400                  ret 0004



:0044C992 D7C84400                DWORD 0044C8D7
:0044C996 E3C84400                DWORD 0044C8E3
:0044C99A EFC84400                DWORD 0044C8EF
:0044C99E E3C84400                DWORD 0044C8E3
:0044C9A2 E3C84400                DWORD 0044C8E3
:0044C9A6 FBC84400                DWORD 0044C8FB


:0044C9AA 0001                    add byte ptr [ecx], al
:0044C9AC 0203                    add al, byte ptr [ebx]
:0044C9AE 0505050505              add eax, 05050505
:0044C9B3 0505050505              add eax, 05050505
:0044C9B8 05                      BYTE 05h
:0044C9B9 05                      BYTE 05h
:0044C9BA 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:004499C2   , :00449D97   
|
:0044C9BB 55                      push ebp
:0044C9BC 8BEC                    mov ebp, esp
:0044C9BE 83EC20                  sub esp, 00000020
:0044C9C1 894DEC                  mov dword ptr [ebp-14], ecx
:0044C9C4 68800A4B00              push 004B0A80
:0044C9C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044C9CC E8BCACFBFF              call 0040768D
:0044C9D1 0580070000              add eax, 00000780
:0044C9D6 50                      push eax
:0044C9D7 B910414A00              mov ecx, 004A4110
:0044C9DC E8BD6BFCFF              call 0041359E
:0044C9E1 8945F8                  mov dword ptr [ebp-08], eax
:0044C9E4 C645F400                mov [ebp-0C], 00
:0044C9E8 C645FC00                mov [ebp-04], 00
:0044C9EC 8B4508                  mov eax, dword ptr [ebp+08]
:0044C9EF 50                      push eax
:0044C9F0 E81CAFFFFF              call 00447911
:0044C9F5 83C404                  add esp, 00000004
:0044C9F8 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044C9FD 3DFF000000              cmp eax, 000000FF
:0044CA02 741B                    je 0044CA1F
:0044CA04 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044CA07 83C105                  add ecx, 00000005
:0044CA0A 51                      push ecx
:0044CA0B 8B5508                  mov edx, dword ptr [ebp+08]
:0044CA0E 52                      push edx
:0044CA0F E88C32FEFF              call 0042FCA0
:0044CA14 83C408                  add esp, 00000008
:0044CA17 85C0                    test eax, eax
:0044CA19 0F8403020000            je 0044CC22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CA02(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044CA1F 6A04                    push 00000004
:0044CA21 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044CA24 E8C730FEFF              call 0042FAF0
:0044CA29 85C0                    test eax, eax
:0044CA2B 0F855E010000            jne 0044CB8F
:0044CA31 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044CA34 E8B72EFEFF              call 0042F8F0
:0044CA39 25FF000000              and eax, 000000FF
:0044CA3E 83F804                  cmp eax, 00000004
:0044CA41 0F84A2000000            je 0044CAE9
:0044CA47 68800A4B00              push 004B0A80
:0044CA4C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044CA4F E839ACFBFF              call 0040768D
:0044CA54 50                      push eax
:0044CA55 B910414A00              mov ecx, 004A4110
:0044CA5A E83F6BFCFF              call 0041359E
:0044CA5F 33C9                    xor ecx, ecx
:0044CA61 8A08                    mov cl, byte ptr [eax]
:0044CA63 81F9FF000000            cmp ecx, 000000FF
:0044CA69 7517                    jne 0044CA82
:0044CA6B 8B55EC                  mov edx, dword ptr [ebp-14]
:0044CA6E 83C205                  add edx, 00000005
:0044CA71 52                      push edx
:0044CA72 8B4508                  mov eax, dword ptr [ebp+08]
:0044CA75 50                      push eax
:0044CA76 E82532FEFF              call 0042FCA0
:0044CA7B 83C408                  add esp, 00000008
:0044CA7E 85C0                    test eax, eax
:0044CA80 740F                    je 0044CA91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CA69(C)
|
:0044CA82 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044CA85 51                      push ecx
:0044CA86 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044CA89 E8FDC1FFFF              call 00448C8B
:0044CA8E 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CA80(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044CA91 6A04                    push 00000004
:0044CA93 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044CA96 E8C52CFEFF              call 0042F760
:0044CA9B 85C0                    test eax, eax
:0044CA9D 750F                    jne 0044CAAE
:0044CA9F 8B5508                  mov edx, dword ptr [ebp+08]
:0044CAA2 52                      push edx
:0044CAA3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044CAA6 E83BE4FFFF              call 0044AEE6
:0044CAAB 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CA9D(C)
|
:0044CAAE 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CAB1 25FF000000              and eax, 000000FF
:0044CAB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CAB9 81E1FF000000            and ecx, 000000FF
:0044CABF 3BC1                    cmp eax, ecx
:0044CAC1 7E0E                    jle 0044CAD1
:0044CAC3 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044CAC6 81E2FF000000            and edx, 000000FF
:0044CACC 8955E8                  mov dword ptr [ebp-18], edx
:0044CACF EB0B                    jmp 0044CADC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CAC1(C)
|
:0044CAD1 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CAD4 25FF000000              and eax, 000000FF
:0044CAD9 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CACF(U)
|
:0044CADC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CADF 8A11                    mov dl, byte ptr [ecx]
:0044CAE1 0255E8                  add dl, byte ptr [ebp-18]
:0044CAE4 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CAE7 8810                    mov byte ptr [eax], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CA41(C)
|
:0044CAE9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044CAEC 51                      push ecx
:0044CAED 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044CAF0 E896FDFFFF              call 0044C88B
:0044CAF5 8945F0                  mov dword ptr [ebp-10], eax
:0044CAF8 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CAFB 33C0                    xor eax, eax
:0044CAFD 8A02                    mov al, byte ptr [edx]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CAFF B9FF000000              mov ecx, 000000FF
:0044CB04 2BC8                    sub ecx, eax
:0044CB06 394DF0                  cmp dword ptr [ebp-10], ecx
:0044CB09 7D08                    jge 0044CB13
:0044CB0B 8B55F0                  mov edx, dword ptr [ebp-10]
:0044CB0E 8955E4                  mov dword ptr [ebp-1C], edx
:0044CB11 EB11                    jmp 0044CB24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CB09(C)
|
:0044CB13 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CB16 33C9                    xor ecx, ecx
:0044CB18 8A08                    mov cl, byte ptr [eax]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CB1A BAFF000000              mov edx, 000000FF
:0044CB1F 2BD1                    sub edx, ecx
:0044CB21 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CB11(U)
|
:0044CB24 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CB27 8A08                    mov cl, byte ptr [eax]
:0044CB29 024DE4                  add cl, byte ptr [ebp-1C]
:0044CB2C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CB2F 880A                    mov byte ptr [edx], cl
:0044CB31 8B45EC                  mov eax, dword ptr [ebp-14]
:0044CB34 83C005                  add eax, 00000005
:0044CB37 50                      push eax
:0044CB38 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044CB3B 51                      push ecx
:0044CB3C E85F31FEFF              call 0042FCA0
:0044CB41 83C408                  add esp, 00000008
:0044CB44 85C0                    test eax, eax
:0044CB46 7447                    je 0044CB8F
:0044CB48 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044CB4B 81E2FF000000            and edx, 000000FF
:0044CB51 85D2                    test edx, edx
:0044CB53 753A                    jne 0044CB8F
:0044CB55 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CB58 33C9                    xor ecx, ecx
:0044CB5A 8A08                    mov cl, byte ptr [eax]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CB5C BAFF000000              mov edx, 000000FF
:0044CB61 2BD1                    sub edx, ecx
:0044CB63 83FA01                  cmp edx, 00000001
:0044CB66 7E09                    jle 0044CB71
:0044CB68 C745E001000000          mov [ebp-20], 00000001
:0044CB6F EB11                    jmp 0044CB82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CB66(C)
|
:0044CB71 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CB74 33C9                    xor ecx, ecx
:0044CB76 8A08                    mov cl, byte ptr [eax]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CB78 BAFF000000              mov edx, 000000FF
:0044CB7D 2BD1                    sub edx, ecx
:0044CB7F 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CB6F(U)
|
:0044CB82 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CB85 8A08                    mov cl, byte ptr [eax]
:0044CB87 024DE0                  add cl, byte ptr [ebp-20]
:0044CB8A 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CB8D 880A                    mov byte ptr [edx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CA2B(C), :0044CB46(C), :0044CB53(C)
|
:0044CB8F 33C0                    xor eax, eax
:0044CB91 A0BC044B00              mov al, byte ptr [004B04BC]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CB96 3DFF000000              cmp eax, 000000FF
:0044CB9B 741B                    je 0044CBB8
:0044CB9D 68BC044B00              push 004B04BC
:0044CBA2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044CBA5 51                      push ecx
:0044CBA6 E8F530FEFF              call 0042FCA0
:0044CBAB 83C408                  add esp, 00000008
:0044CBAE 85C0                    test eax, eax
:0044CBB0 7406                    je 0044CBB8
:0044CBB2 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CBB5 C60200                  mov byte ptr [edx], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CB9B(C), :0044CBB0(C)
|
:0044CBB8 33C0                    xor eax, eax
:0044CBBA A0CC044B00              mov al, byte ptr [004B04CC]
:0044CBBF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CBC2 33D2                    xor edx, edx
:0044CBC4 8A11                    mov dl, byte ptr [ecx]
:0044CBC6 3BC2                    cmp eax, edx
:0044CBC8 7D58                    jge 0044CC22
:0044CBCA 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CBCD 25FF000000              and eax, 000000FF
:0044CBD2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CBD5 81E1FF000000            and ecx, 000000FF
:0044CBDB 3BC1                    cmp eax, ecx
:0044CBDD 7E18                    jle 0044CBF7
:0044CBDF 8A15C4044B00            mov dl, byte ptr [004B04C4]
:0044CBE5 8815C8044B00            mov byte ptr [004B04C8], dl
:0044CBEB A0B0044B00              mov al, byte ptr [004B04B0]
:0044CBF0 A2AC044B00              mov byte ptr [004B04AC], al
:0044CBF5 EB13                    jmp 0044CC0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CBDD(C)
|
:0044CBF7 C605C8044B00FF          mov byte ptr [004B04C8], FF
:0044CBFE 8A0DB4044B00            mov cl, byte ptr [004B04B4]
:0044CC04 880DAC044B00            mov byte ptr [004B04AC], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CBF5(U)
|
:0044CC0A 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CC0D 8A02                    mov al, byte ptr [edx]
:0044CC0F A2CC044B00              mov byte ptr [004B04CC], al
:0044CC14 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044CC17 51                      push ecx
:0044CC18 B9A0044B00              mov ecx, 004B04A0
:0044CC1D E86E2BFEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CA19(C), :0044CBC8(C)
|
:0044CC22 8BE5                    mov esp, ebp
:0044CC24 5D                      pop ebp
:0044CC25 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00449019   , :0044B4A2   , :0044B4C9   
|
:0044CC28 55                      push ebp
:0044CC29 8BEC                    mov ebp, esp
:0044CC2B 83EC08                  sub esp, 00000008
:0044CC2E 894DF8                  mov dword ptr [ebp-08], ecx
:0044CC31 8B4514                  mov eax, dword ptr [ebp+14]
:0044CC34 8945FC                  mov dword ptr [ebp-04], eax
:0044CC37 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044CC3A 81E1FF000000            and ecx, 000000FF
:0044CC40 85C9                    test ecx, ecx
:0044CC42 7519                    jne 0044CC5D
:0044CC44 8B5514                  mov edx, dword ptr [ebp+14]
:0044CC47 8A4508                  mov al, byte ptr [ebp+08]
:0044CC4A 8802                    mov byte ptr [edx], al
:0044CC4C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044CC4F 83C101                  add ecx, 00000001
:0044CC52 894D14                  mov dword ptr [ebp+14], ecx
:0044CC55 8B5514                  mov edx, dword ptr [ebp+14]
:0044CC58 C602FF                  mov byte ptr [edx], FF
:0044CC5B EB53                    jmp 0044CCB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CC42(C)
|
:0044CC5D 8B450C                  mov eax, dword ptr [ebp+0C]
:0044CC60 25FF000000              and eax, 000000FF
:0044CC65 83F801                  cmp eax, 00000001
:0044CC68 7523                    jne 0044CC8D
:0044CC6A 8A4D1C                  mov cl, byte ptr [ebp+1C]
:0044CC6D 51                      push ecx
:0044CC6E 8A5518                  mov dl, byte ptr [ebp+18]
:0044CC71 52                      push edx
:0044CC72 6A00                    push 00000000
:0044CC74 8B4514                  mov eax, dword ptr [ebp+14]
:0044CC77 50                      push eax
:0044CC78 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CC7B 51                      push ecx
:0044CC7C 8A5508                  mov dl, byte ptr [ebp+08]
:0044CC7F 52                      push edx
:0044CC80 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CC83 E8780A0000              call 0044D700
:0044CC88 8945FC                  mov dword ptr [ebp-04], eax
:0044CC8B EB23                    jmp 0044CCB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CC68(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CC8D 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CC92 68FF000000              push 000000FF
:0044CC97 6A01                    push 00000001
:0044CC99 8B4514                  mov eax, dword ptr [ebp+14]
:0044CC9C 50                      push eax
:0044CC9D 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CCA0 51                      push ecx
:0044CCA1 8A5508                  mov dl, byte ptr [ebp+08]
:0044CCA4 52                      push edx
:0044CCA5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CCA8 E8530A0000              call 0044D700
:0044CCAD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CC5B(U), :0044CC8B(U)
|
:0044CCB0 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CCB3 8BE5                    mov esp, ebp
:0044CCB5 5D                      pop ebp
:0044CCB6 C21800                  ret 0018



* Referenced by a CALL at Address:
|:0044AFFA   
|
:0044CCB9 55                      push ebp
:0044CCBA 8BEC                    mov ebp, esp
:0044CCBC 83EC0C                  sub esp, 0000000C
:0044CCBF 894DF4                  mov dword ptr [ebp-0C], ecx
:0044CCC2 8B4514                  mov eax, dword ptr [ebp+14]
:0044CCC5 8945FC                  mov dword ptr [ebp-04], eax
:0044CCC8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044CCCB 81E1FF000000            and ecx, 000000FF
:0044CCD1 85C9                    test ecx, ecx
:0044CCD3 753A                    jne 0044CD0F
:0044CCD5 8D5508                  lea edx, dword ptr [ebp+08]
:0044CCD8 52                      push edx
:0044CCD9 E833ACFFFF              call 00447911
:0044CCDE 83C404                  add esp, 00000004
:0044CCE1 8845F8                  mov byte ptr [ebp-08], al
:0044CCE4 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CCE7 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CCEC 3DFF000000              cmp eax, 000000FF
:0044CCF1 7514                    jne 0044CD07
:0044CCF3 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044CCF6 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044CCF9 8A4204                  mov al, byte ptr [edx+04]
:0044CCFC 8801                    mov byte ptr [ecx], al
:0044CCFE 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044CD01 83C101                  add ecx, 00000001
:0044CD04 894D14                  mov dword ptr [ebp+14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CCF1(C)
|
:0044CD07 8B5514                  mov edx, dword ptr [ebp+14]
:0044CD0A C602FF                  mov byte ptr [edx], FF
:0044CD0D EB55                    jmp 0044CD64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CCD3(C)
|
:0044CD0F 8B450C                  mov eax, dword ptr [ebp+0C]
:0044CD12 25FF000000              and eax, 000000FF
:0044CD17 83F801                  cmp eax, 00000001
:0044CD1A 7524                    jne 0044CD40
:0044CD1C 8A4D1C                  mov cl, byte ptr [ebp+1C]
:0044CD1F 51                      push ecx
:0044CD20 8A5518                  mov dl, byte ptr [ebp+18]
:0044CD23 52                      push edx
:0044CD24 6A00                    push 00000000
:0044CD26 8B4514                  mov eax, dword ptr [ebp+14]
:0044CD29 50                      push eax
:0044CD2A 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CD2D 51                      push ecx
:0044CD2E 668B5508                mov dx, word ptr [ebp+08]
:0044CD32 52                      push edx
:0044CD33 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CD36 E8C2000000              call 0044CDFD
:0044CD3B 8945FC                  mov dword ptr [ebp-04], eax
:0044CD3E EB24                    jmp 0044CD64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CD1A(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CD40 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044CD45 68FF000000              push 000000FF
:0044CD4A 6A01                    push 00000001
:0044CD4C 8B4514                  mov eax, dword ptr [ebp+14]
:0044CD4F 50                      push eax
:0044CD50 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CD53 51                      push ecx
:0044CD54 668B5508                mov dx, word ptr [ebp+08]
:0044CD58 52                      push edx
:0044CD59 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CD5C E89C000000              call 0044CDFD
:0044CD61 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CD0D(U), :0044CD3E(U)
|
:0044CD64 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CD67 8BE5                    mov esp, ebp
:0044CD69 5D                      pop ebp
:0044CD6A C21800                  ret 0018



* Referenced by a CALL at Addresses:
|:0044D02D   , :0044D051   , :0044D075   , :0044D099   , :0044D160   
|:0044D18D   , :0044D1B9   , :0044D1E5   , :0044D343   , :0044D366   
|:0044D389   , :0044D3AD   , :0044D401   , :0044D432   , :0044D47D   
|:0044D4AE   , :0044D598   , :0044D680   , :0044D6C4   
|
:0044CD6D 55                      push ebp
:0044CD6E 8BEC                    mov ebp, esp
:0044CD70 83EC0C                  sub esp, 0000000C
:0044CD73 56                      push esi
:0044CD74 894DF4                  mov dword ptr [ebp-0C], ecx
:0044CD77 8A450C                  mov al, byte ptr [ebp+0C]
:0044CD7A 50                      push eax
:0044CD7B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044CD7E 51                      push ecx
:0044CD7F 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044CD82 E8F92AFEFF              call 0042F880
:0044CD87 8D55F8                  lea edx, dword ptr [ebp-08]
:0044CD8A 52                      push edx
:0044CD8B E843ACFFFF              call 004479D3
:0044CD90 83C404                  add esp, 00000004
:0044CD93 85C0                    test eax, eax
:0044CD95 745C                    je 0044CDF3
:0044CD97 8D45F8                  lea eax, dword ptr [ebp-08]
:0044CD9A 50                      push eax
:0044CD9B E871ABFFFF              call 00447911
:0044CDA0 83C404                  add esp, 00000004
:0044CDA3 8845FC                  mov byte ptr [ebp-04], al
:0044CDA6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CDA9 81E1FF000000            and ecx, 000000FF
:0044CDAF 81F9FF000000            cmp ecx, 000000FF
:0044CDB5 743C                    je 0044CDF3
:0044CDB7 837D1400                cmp dword ptr [ebp+14], 00000000
:0044CDBB 7525                    jne 0044CDE2
:0044CDBD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CDC0 81E1FF000000            and ecx, 000000FF
:0044CDC6 6BC924                  imul ecx, 00000024
:0044CDC9 81C108F54A00            add ecx, 004AF508
:0044CDCF E8FC24FCFF              call 0040F2D0
:0044CDD4 8BF0                    mov esi, eax
:0044CDD6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CDD9 E8F224FCFF              call 0040F2D0
:0044CDDE 3BF0                    cmp esi, eax
:0044CDE0 7411                    je 0044CDF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CDBB(C)
|
:0044CDE2 8B5510                  mov edx, dword ptr [ebp+10]
:0044CDE5 8A45FC                  mov al, byte ptr [ebp-04]
:0044CDE8 8802                    mov byte ptr [edx], al
:0044CDEA 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044CDED 83C101                  add ecx, 00000001
:0044CDF0 894D10                  mov dword ptr [ebp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CD95(C), :0044CDB5(C), :0044CDE0(C)
|
:0044CDF3 8B4510                  mov eax, dword ptr [ebp+10]
:0044CDF6 5E                      pop esi
:0044CDF7 8BE5                    mov esp, ebp
:0044CDF9 5D                      pop ebp
:0044CDFA C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0044CD36   , :0044CD5C   , :0044D74D   
|
:0044CDFD 55                      push ebp
:0044CDFE 8BEC                    mov ebp, esp
:0044CE00 83EC20                  sub esp, 00000020
:0044CE03 56                      push esi
:0044CE04 894DE4                  mov dword ptr [ebp-1C], ecx
:0044CE07 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CE0A E8A1A9FBFF              call 004077B0
:0044CE0F C645EC00                mov [ebp-14], 00
:0044CE13 C645E800                mov [ebp-18], 00
:0044CE17 8B4510                  mov eax, dword ptr [ebp+10]
:0044CE1A 8945F4                  mov dword ptr [ebp-0C], eax
:0044CE1D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044CE20 81E1FF000000            and ecx, 000000FF
:0044CE26 894DE0                  mov dword ptr [ebp-20], ecx
:0044CE29 8B55E0                  mov edx, dword ptr [ebp-20]
:0044CE2C 83EA01                  sub edx, 00000001
:0044CE2F 8955E0                  mov dword ptr [ebp-20], edx
:0044CE32 837DE008                cmp dword ptr [ebp-20], 00000008
:0044CE36 0F8796080000            ja 0044D6D2
:0044CE3C 8B45E0                  mov eax, dword ptr [ebp-20]
:0044CE3F FF2485DCD64400          jmp dword ptr [4*eax+0044D6DC]
:0044CE46 C745F000000000          mov [ebp-10], 00000000
:0044CE4D EB09                    jmp 0044CE58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CED3(U)
|
:0044CE4F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044CE52 83C101                  add ecx, 00000001
:0044CE55 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CE4D(U)
|
:0044CE58 837DF004                cmp dword ptr [ebp-10], 00000004
:0044CE5C 737A                    jnb 0044CED8
:0044CE5E 8A55F0                  mov dl, byte ptr [ebp-10]
:0044CE61 52                      push edx
:0044CE62 8D4508                  lea eax, dword ptr [ebp+08]
:0044CE65 50                      push eax
:0044CE66 E89DABFFFF              call 00447A08
:0044CE6B 83C408                  add esp, 00000008
:0044CE6E 50                      push eax
:0044CE6F 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CE72 E81929FEFF              call 0042F790
:0044CE77 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CE7A 51                      push ecx
:0044CE7B E891AAFFFF              call 00447911
:0044CE80 83C404                  add esp, 00000004
:0044CE83 8845F8                  mov byte ptr [ebp-08], al
:0044CE86 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CE89 81E2FF000000            and edx, 000000FF
:0044CE8F 81FAFF000000            cmp edx, 000000FF
:0044CE95 743C                    je 0044CED3
:0044CE97 837D1400                cmp dword ptr [ebp+14], 00000000
:0044CE9B 7525                    jne 0044CEC2
:0044CE9D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CEA0 81E1FF000000            and ecx, 000000FF
:0044CEA6 6BC924                  imul ecx, 00000024
:0044CEA9 81C108F54A00            add ecx, 004AF508
:0044CEAF E81C24FCFF              call 0040F2D0
:0044CEB4 8BF0                    mov esi, eax
:0044CEB6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044CEB9 E81224FCFF              call 0040F2D0
:0044CEBE 3BF0                    cmp esi, eax
:0044CEC0 7411                    je 0044CED3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CE9B(C)
|
:0044CEC2 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CEC5 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044CEC8 8808                    mov byte ptr [eax], cl
:0044CECA 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044CECD 83C201                  add edx, 00000001
:0044CED0 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CE95(C), :0044CEC0(C)
|
:0044CED3 E977FFFFFF              jmp 0044CE4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CE5C(C)
|
:0044CED8 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CEDB C600FF                  mov byte ptr [eax], FF
:0044CEDE E9EF070000              jmp 0044D6D2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044CEE3 C745F004000000          mov [ebp-10], 00000004
:0044CEEA EB09                    jmp 0044CEF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CF70(U)
|
:0044CEEC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044CEEF 83C101                  add ecx, 00000001
:0044CEF2 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CEEA(U)
|
:0044CEF5 837DF008                cmp dword ptr [ebp-10], 00000008
:0044CEF9 737A                    jnb 0044CF75
:0044CEFB 8A55F0                  mov dl, byte ptr [ebp-10]
:0044CEFE 52                      push edx
:0044CEFF 8D4508                  lea eax, dword ptr [ebp+08]
:0044CF02 50                      push eax
:0044CF03 E800ABFFFF              call 00447A08
:0044CF08 83C408                  add esp, 00000008
:0044CF0B 50                      push eax
:0044CF0C 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CF0F E87C28FEFF              call 0042F790
:0044CF14 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CF17 51                      push ecx
:0044CF18 E8F4A9FFFF              call 00447911
:0044CF1D 83C404                  add esp, 00000004
:0044CF20 8845F8                  mov byte ptr [ebp-08], al
:0044CF23 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CF26 81E2FF000000            and edx, 000000FF
:0044CF2C 81FAFF000000            cmp edx, 000000FF
:0044CF32 743C                    je 0044CF70
:0044CF34 837D1400                cmp dword ptr [ebp+14], 00000000
:0044CF38 7525                    jne 0044CF5F
:0044CF3A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CF3D 81E1FF000000            and ecx, 000000FF
:0044CF43 6BC924                  imul ecx, 00000024
:0044CF46 81C108F54A00            add ecx, 004AF508
:0044CF4C E87F23FCFF              call 0040F2D0
:0044CF51 8BF0                    mov esi, eax
:0044CF53 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044CF56 E87523FCFF              call 0040F2D0
:0044CF5B 3BF0                    cmp esi, eax
:0044CF5D 7411                    je 0044CF70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CF38(C)
|
:0044CF5F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CF62 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044CF65 8808                    mov byte ptr [eax], cl
:0044CF67 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044CF6A 83C201                  add edx, 00000001
:0044CF6D 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CF32(C), :0044CF5D(C)
|
:0044CF70 E977FFFFFF              jmp 0044CEEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CEF9(C)
|
:0044CF75 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CF78 C600FF                  mov byte ptr [eax], FF
:0044CF7B E952070000              jmp 0044D6D2
:0044CF80 C745F000000000          mov [ebp-10], 00000000
:0044CF87 EB09                    jmp 0044CF92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D00D(U)
|
:0044CF89 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044CF8C 83C101                  add ecx, 00000001
:0044CF8F 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CF87(U)
|
:0044CF92 837DF004                cmp dword ptr [ebp-10], 00000004
:0044CF96 737A                    jnb 0044D012
:0044CF98 8A55F0                  mov dl, byte ptr [ebp-10]
:0044CF9B 52                      push edx
:0044CF9C 8D4508                  lea eax, dword ptr [ebp+08]
:0044CF9F 50                      push eax
:0044CFA0 E863AAFFFF              call 00447A08
:0044CFA5 83C408                  add esp, 00000008
:0044CFA8 50                      push eax
:0044CFA9 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CFAC E8DF27FEFF              call 0042F790
:0044CFB1 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CFB4 51                      push ecx
:0044CFB5 E857A9FFFF              call 00447911
:0044CFBA 83C404                  add esp, 00000004
:0044CFBD 8845F8                  mov byte ptr [ebp-08], al
:0044CFC0 8B55F8                  mov edx, dword ptr [ebp-08]
:0044CFC3 81E2FF000000            and edx, 000000FF
:0044CFC9 81FAFF000000            cmp edx, 000000FF
:0044CFCF 743C                    je 0044D00D
:0044CFD1 837D1400                cmp dword ptr [ebp+14], 00000000
:0044CFD5 7525                    jne 0044CFFC
:0044CFD7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CFDA 81E1FF000000            and ecx, 000000FF
:0044CFE0 6BC924                  imul ecx, 00000024
:0044CFE3 81C108F54A00            add ecx, 004AF508
:0044CFE9 E8E222FCFF              call 0040F2D0
:0044CFEE 8BF0                    mov esi, eax
:0044CFF0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044CFF3 E8D822FCFF              call 0040F2D0
:0044CFF8 3BF0                    cmp esi, eax
:0044CFFA 7411                    je 0044D00D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CFD5(C)
|
:0044CFFC 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CFFF 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044D002 8808                    mov byte ptr [eax], cl
:0044D004 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D007 83C201                  add edx, 00000001
:0044D00A 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CFCF(C), :0044CFFA(C)
|
:0044D00D E977FFFFFF              jmp 0044CF89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CF96(C)
|
:0044D012 8B4514                  mov eax, dword ptr [ebp+14]
:0044D015 50                      push eax
:0044D016 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D019 51                      push ecx
:0044D01A 8A5509                  mov dl, byte ptr [ebp+09]
:0044D01D 52                      push edx
:0044D01E 8B4508                  mov eax, dword ptr [ebp+08]
:0044D021 25FF000000              and eax, 000000FF
:0044D026 83C002                  add eax, 00000002
:0044D029 50                      push eax
:0044D02A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D02D E83BFDFFFF              call 0044CD6D
:0044D032 8945F4                  mov dword ptr [ebp-0C], eax
:0044D035 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044D038 51                      push ecx
:0044D039 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D03C 52                      push edx
:0044D03D 8A4509                  mov al, byte ptr [ebp+09]
:0044D040 50                      push eax
:0044D041 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D044 81E1FF000000            and ecx, 000000FF
:0044D04A 83E902                  sub ecx, 00000002
:0044D04D 51                      push ecx
:0044D04E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D051 E817FDFFFF              call 0044CD6D
:0044D056 8945F4                  mov dword ptr [ebp-0C], eax
:0044D059 8B5514                  mov edx, dword ptr [ebp+14]
:0044D05C 52                      push edx
:0044D05D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D060 50                      push eax
:0044D061 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D064 81E1FF000000            and ecx, 000000FF
:0044D06A 83C102                  add ecx, 00000002
:0044D06D 51                      push ecx
:0044D06E 8A5508                  mov dl, byte ptr [ebp+08]
:0044D071 52                      push edx
:0044D072 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D075 E8F3FCFFFF              call 0044CD6D
:0044D07A 8945F4                  mov dword ptr [ebp-0C], eax
:0044D07D 8B4514                  mov eax, dword ptr [ebp+14]
:0044D080 50                      push eax
:0044D081 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D084 51                      push ecx
:0044D085 8B5509                  mov edx, dword ptr [ebp+09]
:0044D088 81E2FF000000            and edx, 000000FF
:0044D08E 83EA02                  sub edx, 00000002
:0044D091 52                      push edx
:0044D092 8A4508                  mov al, byte ptr [ebp+08]
:0044D095 50                      push eax
:0044D096 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D099 E8CFFCFFFF              call 0044CD6D
:0044D09E 8945F4                  mov dword ptr [ebp-0C], eax
:0044D0A1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D0A4 C601FF                  mov byte ptr [ecx], FF
:0044D0A7 E926060000              jmp 0044D6D2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D0AC C745F004000000          mov [ebp-10], 00000004
:0044D0B3 EB09                    jmp 0044D0BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D137(U)
|
:0044D0B5 8B55F0                  mov edx, dword ptr [ebp-10]
:0044D0B8 83C201                  add edx, 00000001
:0044D0BB 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D0B3(U)
|
:0044D0BE 837DF008                cmp dword ptr [ebp-10], 00000008
:0044D0C2 7378                    jnb 0044D13C
:0044D0C4 8A45F0                  mov al, byte ptr [ebp-10]
:0044D0C7 50                      push eax
:0044D0C8 8D4D08                  lea ecx, dword ptr [ebp+08]
:0044D0CB 51                      push ecx
:0044D0CC E837A9FFFF              call 00447A08
:0044D0D1 83C408                  add esp, 00000008
:0044D0D4 50                      push eax
:0044D0D5 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044D0D8 E8B326FEFF              call 0042F790
:0044D0DD 8D55FC                  lea edx, dword ptr [ebp-04]
:0044D0E0 52                      push edx
:0044D0E1 E82BA8FFFF              call 00447911
:0044D0E6 83C404                  add esp, 00000004
:0044D0E9 8845F8                  mov byte ptr [ebp-08], al
:0044D0EC 8B45F8                  mov eax, dword ptr [ebp-08]
:0044D0EF 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044D0F4 3DFF000000              cmp eax, 000000FF
:0044D0F9 743C                    je 0044D137
:0044D0FB 837D1400                cmp dword ptr [ebp+14], 00000000
:0044D0FF 7525                    jne 0044D126
:0044D101 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D104 81E1FF000000            and ecx, 000000FF
:0044D10A 6BC924                  imul ecx, 00000024
:0044D10D 81C108F54A00            add ecx, 004AF508
:0044D113 E8B821FCFF              call 0040F2D0
:0044D118 8BF0                    mov esi, eax
:0044D11A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D11D E8AE21FCFF              call 0040F2D0
:0044D122 3BF0                    cmp esi, eax
:0044D124 7411                    je 0044D137

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D0FF(C)
|
:0044D126 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D129 8A55F8                  mov dl, byte ptr [ebp-08]
:0044D12C 8811                    mov byte ptr [ecx], dl
:0044D12E 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D131 83C001                  add eax, 00000001
:0044D134 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D0F9(C), :0044D124(C)
|
:0044D137 E979FFFFFF              jmp 0044D0B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D0C2(C)
|
:0044D13C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044D13F 51                      push ecx
:0044D140 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D143 52                      push edx
:0044D144 8B4509                  mov eax, dword ptr [ebp+09]
:0044D147 25FF000000              and eax, 000000FF
:0044D14C 83C002                  add eax, 00000002
:0044D14F 50                      push eax
:0044D150 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D153 81E1FF000000            and ecx, 000000FF
:0044D159 83C102                  add ecx, 00000002
:0044D15C 51                      push ecx
:0044D15D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D160 E808FCFFFF              call 0044CD6D
:0044D165 8945F4                  mov dword ptr [ebp-0C], eax
:0044D168 8B5514                  mov edx, dword ptr [ebp+14]
:0044D16B 52                      push edx
:0044D16C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D16F 50                      push eax
:0044D170 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D173 81E1FF000000            and ecx, 000000FF
:0044D179 83E902                  sub ecx, 00000002
:0044D17C 51                      push ecx
:0044D17D 8B5508                  mov edx, dword ptr [ebp+08]
:0044D180 81E2FF000000            and edx, 000000FF
:0044D186 83C202                  add edx, 00000002
:0044D189 52                      push edx
:0044D18A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D18D E8DBFBFFFF              call 0044CD6D
:0044D192 8945F4                  mov dword ptr [ebp-0C], eax
:0044D195 8B4514                  mov eax, dword ptr [ebp+14]
:0044D198 50                      push eax
:0044D199 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D19C 51                      push ecx
:0044D19D 8B5509                  mov edx, dword ptr [ebp+09]
:0044D1A0 81E2FF000000            and edx, 000000FF
:0044D1A6 83C202                  add edx, 00000002
:0044D1A9 52                      push edx
:0044D1AA 8B4508                  mov eax, dword ptr [ebp+08]
:0044D1AD 25FF000000              and eax, 000000FF
:0044D1B2 83E802                  sub eax, 00000002
:0044D1B5 50                      push eax
:0044D1B6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D1B9 E8AFFBFFFF              call 0044CD6D
:0044D1BE 8945F4                  mov dword ptr [ebp-0C], eax
:0044D1C1 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044D1C4 51                      push ecx
:0044D1C5 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D1C8 52                      push edx
:0044D1C9 8B4509                  mov eax, dword ptr [ebp+09]
:0044D1CC 25FF000000              and eax, 000000FF
:0044D1D1 83E802                  sub eax, 00000002
:0044D1D4 50                      push eax
:0044D1D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D1D8 81E1FF000000            and ecx, 000000FF
:0044D1DE 83E902                  sub ecx, 00000002
:0044D1E1 51                      push ecx
:0044D1E2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D1E5 E883FBFFFF              call 0044CD6D
:0044D1EA 8945F4                  mov dword ptr [ebp-0C], eax
:0044D1ED 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D1F0 C602FF                  mov byte ptr [edx], FF
:0044D1F3 E9DA040000              jmp 0044D6D2
:0044D1F8 C745F000000000          mov [ebp-10], 00000000
:0044D1FF EB09                    jmp 0044D20A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D285(U)
|
:0044D201 8B45F0                  mov eax, dword ptr [ebp-10]
:0044D204 83C001                  add eax, 00000001
:0044D207 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D1FF(U)
|
:0044D20A 837DF008                cmp dword ptr [ebp-10], 00000008
:0044D20E 737A                    jnb 0044D28A
:0044D210 8A4DF0                  mov cl, byte ptr [ebp-10]
:0044D213 51                      push ecx
:0044D214 8D5508                  lea edx, dword ptr [ebp+08]
:0044D217 52                      push edx
:0044D218 E8EBA7FFFF              call 00447A08
:0044D21D 83C408                  add esp, 00000008
:0044D220 50                      push eax
:0044D221 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044D224 E86725FEFF              call 0042F790
:0044D229 8D45FC                  lea eax, dword ptr [ebp-04]
:0044D22C 50                      push eax
:0044D22D E8DFA6FFFF              call 00447911
:0044D232 83C404                  add esp, 00000004
:0044D235 8845F8                  mov byte ptr [ebp-08], al
:0044D238 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D23B 81E1FF000000            and ecx, 000000FF
:0044D241 81F9FF000000            cmp ecx, 000000FF
:0044D247 743C                    je 0044D285
:0044D249 837D1400                cmp dword ptr [ebp+14], 00000000
:0044D24D 7525                    jne 0044D274
:0044D24F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D252 81E1FF000000            and ecx, 000000FF
:0044D258 6BC924                  imul ecx, 00000024
:0044D25B 81C108F54A00            add ecx, 004AF508
:0044D261 E86A20FCFF              call 0040F2D0
:0044D266 8BF0                    mov esi, eax
:0044D268 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D26B E86020FCFF              call 0040F2D0
:0044D270 3BF0                    cmp esi, eax
:0044D272 7411                    je 0044D285

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D24D(C)
|
:0044D274 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D277 8A45F8                  mov al, byte ptr [ebp-08]
:0044D27A 8802                    mov byte ptr [edx], al
:0044D27C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D27F 83C101                  add ecx, 00000001
:0044D282 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D247(C), :0044D272(C)
|
:0044D285 E977FFFFFF              jmp 0044D201

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D20E(C)
|
:0044D28A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D28D C602FF                  mov byte ptr [edx], FF
:0044D290 E93D040000              jmp 0044D6D2
:0044D295 C745F000000000          mov [ebp-10], 00000000
:0044D29C EB09                    jmp 0044D2A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D322(U)
|
:0044D29E 8B45F0                  mov eax, dword ptr [ebp-10]
:0044D2A1 83C001                  add eax, 00000001
:0044D2A4 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D29C(U)
|
:0044D2A7 837DF008                cmp dword ptr [ebp-10], 00000008
:0044D2AB 737A                    jnb 0044D327
:0044D2AD 8A4DF0                  mov cl, byte ptr [ebp-10]
:0044D2B0 51                      push ecx
:0044D2B1 8D5508                  lea edx, dword ptr [ebp+08]
:0044D2B4 52                      push edx
:0044D2B5 E84EA7FFFF              call 00447A08
:0044D2BA 83C408                  add esp, 00000008
:0044D2BD 50                      push eax
:0044D2BE 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044D2C1 E8CA24FEFF              call 0042F790
:0044D2C6 8D45FC                  lea eax, dword ptr [ebp-04]
:0044D2C9 50                      push eax
:0044D2CA E842A6FFFF              call 00447911
:0044D2CF 83C404                  add esp, 00000004
:0044D2D2 8845F8                  mov byte ptr [ebp-08], al
:0044D2D5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D2D8 81E1FF000000            and ecx, 000000FF
:0044D2DE 81F9FF000000            cmp ecx, 000000FF
:0044D2E4 743C                    je 0044D322
:0044D2E6 837D1400                cmp dword ptr [ebp+14], 00000000
:0044D2EA 7525                    jne 0044D311
:0044D2EC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D2EF 81E1FF000000            and ecx, 000000FF
:0044D2F5 6BC924                  imul ecx, 00000024
:0044D2F8 81C108F54A00            add ecx, 004AF508
:0044D2FE E8CD1FFCFF              call 0040F2D0
:0044D303 8BF0                    mov esi, eax
:0044D305 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D308 E8C31FFCFF              call 0040F2D0
:0044D30D 3BF0                    cmp esi, eax
:0044D30F 7411                    je 0044D322

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D2EA(C)
|
:0044D311 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D314 8A45F8                  mov al, byte ptr [ebp-08]
:0044D317 8802                    mov byte ptr [edx], al
:0044D319 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D31C 83C101                  add ecx, 00000001
:0044D31F 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D2E4(C), :0044D30F(C)
|
:0044D322 E977FFFFFF              jmp 0044D29E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D2AB(C)
|
:0044D327 8B5514                  mov edx, dword ptr [ebp+14]
:0044D32A 52                      push edx
:0044D32B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D32E 50                      push eax
:0044D32F 8A4D09                  mov cl, byte ptr [ebp+09]
:0044D332 51                      push ecx
:0044D333 8B5508                  mov edx, dword ptr [ebp+08]
:0044D336 81E2FF000000            and edx, 000000FF
:0044D33C 83C202                  add edx, 00000002
:0044D33F 52                      push edx
:0044D340 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D343 E825FAFFFF              call 0044CD6D
:0044D348 8945F4                  mov dword ptr [ebp-0C], eax
:0044D34B 8B4514                  mov eax, dword ptr [ebp+14]
:0044D34E 50                      push eax
:0044D34F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D352 51                      push ecx
:0044D353 8A5509                  mov dl, byte ptr [ebp+09]
:0044D356 52                      push edx
:0044D357 8B4508                  mov eax, dword ptr [ebp+08]
:0044D35A 25FF000000              and eax, 000000FF
:0044D35F 83E802                  sub eax, 00000002
:0044D362 50                      push eax
:0044D363 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D366 E802FAFFFF              call 0044CD6D
:0044D36B 8945F4                  mov dword ptr [ebp-0C], eax
:0044D36E 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044D371 51                      push ecx
:0044D372 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D375 52                      push edx
:0044D376 8B4509                  mov eax, dword ptr [ebp+09]
:0044D379 25FF000000              and eax, 000000FF
:0044D37E 83C002                  add eax, 00000002
:0044D381 50                      push eax
:0044D382 8A4D08                  mov cl, byte ptr [ebp+08]
:0044D385 51                      push ecx
:0044D386 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D389 E8DFF9FFFF              call 0044CD6D
:0044D38E 8945F4                  mov dword ptr [ebp-0C], eax
:0044D391 8B5514                  mov edx, dword ptr [ebp+14]
:0044D394 52                      push edx
:0044D395 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D398 50                      push eax
:0044D399 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D39C 81E1FF000000            and ecx, 000000FF
:0044D3A2 83E902                  sub ecx, 00000002
:0044D3A5 51                      push ecx
:0044D3A6 8A5508                  mov dl, byte ptr [ebp+08]
:0044D3A9 52                      push edx
:0044D3AA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D3AD E8BBF9FFFF              call 0044CD6D
:0044D3B2 8945F4                  mov dword ptr [ebp-0C], eax
:0044D3B5 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D3B8 C600FF                  mov byte ptr [eax], FF
:0044D3BB E912030000              jmp 0044D6D2
:0044D3C0 C745F000000000          mov [ebp-10], 00000000
:0044D3C7 EB09                    jmp 0044D3D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D43A(U)
|
:0044D3C9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044D3CC 83C101                  add ecx, 00000001
:0044D3CF 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D3C7(U)
|
:0044D3D2 837DF005                cmp dword ptr [ebp-10], 00000005
:0044D3D6 7364                    jnb 0044D43C
:0044D3D8 8B5514                  mov edx, dword ptr [ebp+14]
:0044D3DB 52                      push edx
:0044D3DC 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D3DF 50                      push eax
:0044D3E0 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D3E3 81E1FF000000            and ecx, 000000FF
:0044D3E9 83E902                  sub ecx, 00000002
:0044D3EC 51                      push ecx
:0044D3ED 8B5508                  mov edx, dword ptr [ebp+08]
:0044D3F0 81E2FF000000            and edx, 000000FF
:0044D3F6 8B45F0                  mov eax, dword ptr [ebp-10]
:0044D3F9 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:0044D3FD 51                      push ecx
:0044D3FE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D401 E867F9FFFF              call 0044CD6D
:0044D406 8945F4                  mov dword ptr [ebp-0C], eax
:0044D409 8B5514                  mov edx, dword ptr [ebp+14]
:0044D40C 52                      push edx
:0044D40D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D410 50                      push eax
:0044D411 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D414 81E1FF000000            and ecx, 000000FF
:0044D41A 83C102                  add ecx, 00000002
:0044D41D 51                      push ecx
:0044D41E 8B5508                  mov edx, dword ptr [ebp+08]
:0044D421 81E2FF000000            and edx, 000000FF
:0044D427 8B45F0                  mov eax, dword ptr [ebp-10]
:0044D42A 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:0044D42E 51                      push ecx
:0044D42F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D432 E836F9FFFF              call 0044CD6D
:0044D437 8945F4                  mov dword ptr [ebp-0C], eax
:0044D43A EB8D                    jmp 0044D3C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D3D6(C)
|
:0044D43C C745F000000000          mov [ebp-10], 00000000
:0044D443 EB09                    jmp 0044D44E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D4B6(U)
|
:0044D445 8B55F0                  mov edx, dword ptr [ebp-10]
:0044D448 83C201                  add edx, 00000001
:0044D44B 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D443(U)
|
:0044D44E 837DF003                cmp dword ptr [ebp-10], 00000003
:0044D452 7364                    jnb 0044D4B8
:0044D454 8B4514                  mov eax, dword ptr [ebp+14]
:0044D457 50                      push eax
:0044D458 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D45B 51                      push ecx
:0044D45C 8B5509                  mov edx, dword ptr [ebp+09]
:0044D45F 81E2FF000000            and edx, 000000FF
:0044D465 8B45F0                  mov eax, dword ptr [ebp-10]
:0044D468 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044D46C 51                      push ecx
:0044D46D 8B5508                  mov edx, dword ptr [ebp+08]
:0044D470 81E2FF000000            and edx, 000000FF
:0044D476 83EA02                  sub edx, 00000002
:0044D479 52                      push edx
:0044D47A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D47D E8EBF8FFFF              call 0044CD6D
:0044D482 8945F4                  mov dword ptr [ebp-0C], eax
:0044D485 8B4514                  mov eax, dword ptr [ebp+14]
:0044D488 50                      push eax
:0044D489 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D48C 51                      push ecx
:0044D48D 8B5509                  mov edx, dword ptr [ebp+09]
:0044D490 81E2FF000000            and edx, 000000FF
:0044D496 8B45F0                  mov eax, dword ptr [ebp-10]
:0044D499 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044D49D 51                      push ecx
:0044D49E 8B5508                  mov edx, dword ptr [ebp+08]
:0044D4A1 81E2FF000000            and edx, 000000FF
:0044D4A7 83C202                  add edx, 00000002
:0044D4AA 52                      push edx
:0044D4AB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D4AE E8BAF8FFFF              call 0044CD6D
:0044D4B3 8945F4                  mov dword ptr [ebp-0C], eax
:0044D4B6 EB8D                    jmp 0044D445

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D452(C)
|
:0044D4B8 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D4BB C600FF                  mov byte ptr [eax], FF
:0044D4BE E90F020000              jmp 0044D6D2
:0044D4C3 8B4D18                  mov ecx, dword ptr [ebp+18]
:0044D4C6 81E1FF000000            and ecx, 000000FF
:0044D4CC 81F9FF000000            cmp ecx, 000000FF
:0044D4D2 7509                    jne 0044D4DD
:0044D4D4 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044D4D7 8A4205                  mov al, byte ptr [edx+05]
:0044D4DA 884518                  mov byte ptr [ebp+18], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D4D2(C)
|
:0044D4DD 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0044D4E0 81E1FF000000            and ecx, 000000FF
:0044D4E6 81F9FF000000            cmp ecx, 000000FF
:0044D4EC 7509                    jne 0044D4F7
:0044D4EE 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044D4F1 8A4206                  mov al, byte ptr [edx+06]
:0044D4F4 88451C                  mov byte ptr [ebp+1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D4EC(C)
|
:0044D4F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D4FA 81E1FF000000            and ecx, 000000FF
:0044D500 8B5518                  mov edx, dword ptr [ebp+18]
:0044D503 81E2FF000000            and edx, 000000FF
:0044D509 3BCA                    cmp ecx, edx
:0044D50B 7506                    jne 0044D513
:0044D50D C645EC00                mov [ebp-14], 00
:0044D511 EB1F                    jmp 0044D532

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D50B(C)
|
:0044D513 8B4508                  mov eax, dword ptr [ebp+08]
:0044D516 25FF000000              and eax, 000000FF
:0044D51B 8B4D18                  mov ecx, dword ptr [ebp+18]
:0044D51E 81E1FF000000            and ecx, 000000FF
:0044D524 3BC1                    cmp eax, ecx
:0044D526 7E06                    jle 0044D52E
:0044D528 C645EC01                mov [ebp-14], 01
:0044D52C EB04                    jmp 0044D532

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D526(C)
|
:0044D52E C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D511(U), :0044D52C(U)
|
:0044D532 8B5509                  mov edx, dword ptr [ebp+09]
:0044D535 81E2FF000000            and edx, 000000FF
:0044D53B 8B451C                  mov eax, dword ptr [ebp+1C]
:0044D53E 25FF000000              and eax, 000000FF
:0044D543 3BD0                    cmp edx, eax
:0044D545 7506                    jne 0044D54D
:0044D547 C645E800                mov [ebp-18], 00
:0044D54B EB20                    jmp 0044D56D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D545(C)
|
:0044D54D 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D550 81E1FF000000            and ecx, 000000FF
:0044D556 8B551C                  mov edx, dword ptr [ebp+1C]
:0044D559 81E2FF000000            and edx, 000000FF
:0044D55F 3BCA                    cmp ecx, edx
:0044D561 7E06                    jle 0044D569
:0044D563 C645E801                mov [ebp-18], 01
:0044D567 EB04                    jmp 0044D56D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D561(C)
|
:0044D569 C645E8FF                mov [ebp-18], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D54B(U), :0044D567(U)
|
:0044D56D 8B4514                  mov eax, dword ptr [ebp+14]
:0044D570 50                      push eax
:0044D571 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D574 51                      push ecx
:0044D575 8B5509                  mov edx, dword ptr [ebp+09]
:0044D578 81E2FF000000            and edx, 000000FF
:0044D57E 0FBE45E8                movsx eax, byte ptr [ebp-18]
:0044D582 03D0                    add edx, eax
:0044D584 52                      push edx
:0044D585 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D588 81E1FF000000            and ecx, 000000FF
:0044D58E 0FBE55EC                movsx edx, byte ptr [ebp-14]
:0044D592 03CA                    add ecx, edx
:0044D594 51                      push ecx
:0044D595 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D598 E8D0F7FFFF              call 0044CD6D
:0044D59D 8945F4                  mov dword ptr [ebp-0C], eax
:0044D5A0 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D5A3 C600FF                  mov byte ptr [eax], FF
:0044D5A6 E927010000              jmp 0044D6D2
:0044D5AB 8B4D18                  mov ecx, dword ptr [ebp+18]
:0044D5AE 81E1FF000000            and ecx, 000000FF
:0044D5B4 81F9FF000000            cmp ecx, 000000FF
:0044D5BA 7509                    jne 0044D5C5
:0044D5BC 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044D5BF 8A4205                  mov al, byte ptr [edx+05]
:0044D5C2 884518                  mov byte ptr [ebp+18], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D5BA(C)
|
:0044D5C5 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0044D5C8 81E1FF000000            and ecx, 000000FF
:0044D5CE 81F9FF000000            cmp ecx, 000000FF
:0044D5D4 7509                    jne 0044D5DF
:0044D5D6 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044D5D9 8A4206                  mov al, byte ptr [edx+06]
:0044D5DC 88451C                  mov byte ptr [ebp+1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D5D4(C)
|
:0044D5DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D5E2 81E1FF000000            and ecx, 000000FF
:0044D5E8 8B5518                  mov edx, dword ptr [ebp+18]
:0044D5EB 81E2FF000000            and edx, 000000FF
:0044D5F1 3BCA                    cmp ecx, edx
:0044D5F3 7506                    jne 0044D5FB
:0044D5F5 C645EC00                mov [ebp-14], 00
:0044D5F9 EB1F                    jmp 0044D61A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D5F3(C)
|
:0044D5FB 8B4508                  mov eax, dword ptr [ebp+08]
:0044D5FE 25FF000000              and eax, 000000FF
:0044D603 8B4D18                  mov ecx, dword ptr [ebp+18]
:0044D606 81E1FF000000            and ecx, 000000FF
:0044D60C 3BC1                    cmp eax, ecx
:0044D60E 7E06                    jle 0044D616
:0044D610 C645EC01                mov [ebp-14], 01
:0044D614 EB04                    jmp 0044D61A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D60E(C)
|
:0044D616 C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D5F9(U), :0044D614(U)
|
:0044D61A 8B5509                  mov edx, dword ptr [ebp+09]
:0044D61D 81E2FF000000            and edx, 000000FF
:0044D623 8B451C                  mov eax, dword ptr [ebp+1C]
:0044D626 25FF000000              and eax, 000000FF
:0044D62B 3BD0                    cmp edx, eax
:0044D62D 7506                    jne 0044D635
:0044D62F C645E800                mov [ebp-18], 00
:0044D633 EB20                    jmp 0044D655

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D62D(C)
|
:0044D635 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D638 81E1FF000000            and ecx, 000000FF
:0044D63E 8B551C                  mov edx, dword ptr [ebp+1C]
:0044D641 81E2FF000000            and edx, 000000FF
:0044D647 3BCA                    cmp ecx, edx
:0044D649 7E06                    jle 0044D651
:0044D64B C645E801                mov [ebp-18], 01
:0044D64F EB04                    jmp 0044D655

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D649(C)
|
:0044D651 C645E8FF                mov [ebp-18], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D633(U), :0044D64F(U)
|
:0044D655 8B4514                  mov eax, dword ptr [ebp+14]
:0044D658 50                      push eax
:0044D659 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D65C 51                      push ecx
:0044D65D 8B5509                  mov edx, dword ptr [ebp+09]
:0044D660 81E2FF000000            and edx, 000000FF
:0044D666 0FBE45E8                movsx eax, byte ptr [ebp-18]
:0044D66A 03D0                    add edx, eax
:0044D66C 52                      push edx
:0044D66D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D670 81E1FF000000            and ecx, 000000FF
:0044D676 0FBE55EC                movsx edx, byte ptr [ebp-14]
:0044D67A 03CA                    add ecx, edx
:0044D67C 51                      push ecx
:0044D67D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D680 E8E8F6FFFF              call 0044CD6D
:0044D685 8945F4                  mov dword ptr [ebp-0C], eax
:0044D688 8A4508                  mov al, byte ptr [ebp+08]
:0044D68B 0245EC                  add al, byte ptr [ebp-14]
:0044D68E 884508                  mov byte ptr [ebp+08], al
:0044D691 8A4D09                  mov cl, byte ptr [ebp+09]
:0044D694 024DE8                  add cl, byte ptr [ebp-18]
:0044D697 884D09                  mov byte ptr [ebp+09], cl
:0044D69A 8B5514                  mov edx, dword ptr [ebp+14]
:0044D69D 52                      push edx
:0044D69E 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D6A1 50                      push eax
:0044D6A2 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044D6A5 81E1FF000000            and ecx, 000000FF
:0044D6AB 0FBE55E8                movsx edx, byte ptr [ebp-18]
:0044D6AF 03CA                    add ecx, edx
:0044D6B1 51                      push ecx
:0044D6B2 8B4508                  mov eax, dword ptr [ebp+08]
:0044D6B5 25FF000000              and eax, 000000FF
:0044D6BA 0FBE4DEC                movsx ecx, byte ptr [ebp-14]
:0044D6BE 03C1                    add eax, ecx
:0044D6C0 50                      push eax
:0044D6C1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044D6C4 E8A4F6FFFF              call 0044CD6D
:0044D6C9 8945F4                  mov dword ptr [ebp-0C], eax
:0044D6CC 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D6CF C602FF                  mov byte ptr [edx], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CE36(C), :0044CEDE(U), :0044CF7B(U), :0044D0A7(U), :0044D1F3(U)
|:0044D290(U), :0044D3BB(U), :0044D4BE(U), :0044D5A6(U)
|
:0044D6D2 8B4510                  mov eax, dword ptr [ebp+10]
:0044D6D5 5E                      pop esi
:0044D6D6 8BE5                    mov esp, ebp
:0044D6D8 5D                      pop ebp
:0044D6D9 C21800                  ret 0018



:0044D6DC 46CE4400                DWORD 0044CE46
:0044D6E0 E3CE4400                DWORD 0044CEE3
:0044D6E4 80CF4400                DWORD 0044CF80
:0044D6E8 ACD04400                DWORD 0044D0AC
:0044D6EC F8D14400                DWORD 0044D1F8
:0044D6F0 95D24400                DWORD 0044D295
:0044D6F4 C0D34400                DWORD 0044D3C0
:0044D6F8 C3D44400                DWORD 0044D4C3
:0044D6FC ABD54400                DWORD 0044D5AB



* Referenced by a CALL at Addresses:
|:00432535   , :004327E7   , :004329CC   , :00432E34   , :00433C3C   
|:00433F39   , :00434219   , :00434432   , :0043487C   , :004349E5   
|:00434B9C   , :00434D59   , :004350B6   , :00435217   , :004354ED   
|:00435B26   , :0043659A   , :004368D9   , :00436E5E   , :00437C6D   
|:00438377   , :0043CCC4   , :0044CC83   , :0044CCA8   
|
:0044D700 55                      push ebp
:0044D701 8BEC                    mov ebp, esp
:0044D703 83EC08                  sub esp, 00000008
:0044D706 894DF8                  mov dword ptr [ebp-08], ecx
:0044D709 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044D70C E89FA0FBFF              call 004077B0
:0044D711 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D714 81E1FF000000            and ecx, 000000FF
:0044D71A 6BC924                  imul ecx, 00000024
:0044D71D 81C108F54A00            add ecx, 004AF508
:0044D723 E878BCFDFF              call 004293A0
:0044D728 50                      push eax
:0044D729 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044D72C E85F20FEFF              call 0042F790
:0044D731 8A451C                  mov al, byte ptr [ebp+1C]
:0044D734 50                      push eax
:0044D735 8A4D18                  mov cl, byte ptr [ebp+18]
:0044D738 51                      push ecx
:0044D739 8B5514                  mov edx, dword ptr [ebp+14]
:0044D73C 52                      push edx
:0044D73D 8B4510                  mov eax, dword ptr [ebp+10]
:0044D740 50                      push eax
:0044D741 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044D744 51                      push ecx
:0044D745 668B55FC                mov dx, word ptr [ebp-04]
:0044D749 52                      push edx
:0044D74A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D74D E8ABF6FFFF              call 0044CDFD
:0044D752 8BE5                    mov esp, ebp
:0044D754 5D                      pop ebp
:0044D755 C21800                  ret 0018



* Referenced by a CALL at Address:
|:004314FE   
|
:0044D758 55                      push ebp
:0044D759 8BEC                    mov ebp, esp
:0044D75B 83EC0C                  sub esp, 0000000C
:0044D75E 894DF4                  mov dword ptr [ebp-0C], ecx
:0044D761 C645F8FF                mov [ebp-08], FF
:0044D765 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D768 E822D4FDFF              call 0042AB8F
:0044D76D 8845FC                  mov byte ptr [ebp-04], al
:0044D770 6A00                    push 00000000
:0044D772 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D775 E85DD1FDFF              call 0042A8D7
:0044D77A 50                      push eax
:0044D77B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D77E 8A4804                  mov cl, byte ptr [eax+04]
:0044D781 51                      push ecx
:0044D782 B9A8034B00              mov ecx, 004B03A8
:0044D787 E86C85FFFF              call 00445CF8
:0044D78C 8845F8                  mov byte ptr [ebp-08], al
:0044D78F 8B55F8                  mov edx, dword ptr [ebp-08]
:0044D792 81E2FF000000            and edx, 000000FF
:0044D798 81FAFF000000            cmp edx, 000000FF
:0044D79E 0F848C000000            je 0044D830
:0044D7A4 8A45F8                  mov al, byte ptr [ebp-08]
:0044D7A7 50                      push eax
:0044D7A8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D7AB 8A5104                  mov dl, byte ptr [ecx+04]
:0044D7AE 52                      push edx
:0044D7AF E88FA0FFFF              call 00447843
:0044D7B4 83C408                  add esp, 00000008
:0044D7B7 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044D7B9 68FF000000              push 000000FF
:0044D7BE 6A00                    push 00000000
:0044D7C0 6A01                    push 00000001
:0044D7C2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D7C5 81E1FF000000            and ecx, 000000FF
:0044D7CB 6BC924                  imul ecx, 00000024
:0044D7CE 81C108F54A00            add ecx, 004AF508
:0044D7D4 E84720FEFF              call 0042F820
:0044D7D9 50                      push eax
:0044D7DA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D7DD 8A4804                  mov cl, byte ptr [eax+04]
:0044D7E0 51                      push ecx
:0044D7E1 B930024B00              mov ecx, 004B0230
:0044D7E6 E8B3F3FEFF              call 0043CB9E
:0044D7EB 6880000000              push 00000080
:0044D7F0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D7F3 E8211CFEFF              call 0042F419
:0044D7F8 B9A8034B00              mov ecx, 004B03A8
:0044D7FD E87C6FFFFF              call 0044477E
:0044D802 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D805 E84625FEFF              call 0042FD50
:0044D80A 25FF000000              and eax, 000000FF
:0044D80F 83F803                  cmp eax, 00000003
:0044D812 7412                    je 0044D826
:0044D814 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D817 E83425FEFF              call 0042FD50
:0044D81C 25FF000000              and eax, 000000FF
:0044D821 83F804                  cmp eax, 00000004
:0044D824 750A                    jne 0044D830

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D812(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044D826 6A02                    push 00000002
:0044D828 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D82B E810C3FEFF              call 00439B40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D79E(C), :0044D824(C)
|
:0044D830 8BE5                    mov esp, ebp
:0044D832 5D                      pop ebp
:0044D833 C3                      ret



* Referenced by a CALL at Addresses:
|:0044DCD3   , :0044DD1A   , :0044DD72   , :0044DDB6   
|
:0044D834 55                      push ebp
:0044D835 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D837 6A04                    push 00000004
:0044D839 E83D93FDFF              call 00426B7B
:0044D83E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D898(U)
|
:0044D841 B980594800              mov ecx, 00485980
:0044D846 E82229FDFF              call 0042016D
:0044D84B 83F801                  cmp eax, 00000001
:0044D84E 754A                    jne 0044D89A
:0044D850 E8F9EC0100              call 0046C54E
:0044D855 B9F8F44A00              mov ecx, 004AF4F8
:0044D85A E8517CFDFF              call 004254B0
:0044D85F 85C0                    test eax, eax
:0044D861 7435                    je 0044D898
:0044D863 B9180A4B00              mov ecx, 004B0A18
:0044D868 E8C391FFFF              call 00446A30
:0044D86D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D870 81E1FF000000            and ecx, 000000FF
:0044D876 6BC924                  imul ecx, 00000024
:0044D879 81C108F54A00            add ecx, 004AF508
:0044D87F E8C4F3FDFF              call 0042CC48

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044D884 6A05                    push 00000005
:0044D886 E8B994FDFF              call 00426D44
:0044D88B 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D88E 6A04                    push 00000004
:0044D890 E8E692FDFF              call 00426B7B
:0044D895 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D861(C)
|
:0044D898 EBA7                    jmp 0044D841

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D84E(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044D89A 6A07                    push 00000007
:0044D89C B9800D4B00              mov ecx, 004B0D80
:0044D8A1 E803430100              call 00461BA9
:0044D8A6 5D                      pop ebp
:0044D8A7 C3                      ret



* Referenced by a CALL at Addresses:
|:0044DCFA   , :0044DD41   , :0044DD99   , :0044DDDD   
|
:0044D8A8 55                      push ebp
:0044D8A9 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D8AB 6A04                    push 00000004
:0044D8AD E8C992FDFF              call 00426B7B
:0044D8B2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D90C(U)
|
:0044D8B5 B980594800              mov ecx, 00485980
:0044D8BA E8AE28FDFF              call 0042016D
:0044D8BF 83F802                  cmp eax, 00000002
:0044D8C2 744A                    je 0044D90E
:0044D8C4 E885EC0100              call 0046C54E
:0044D8C9 B9F8F44A00              mov ecx, 004AF4F8
:0044D8CE E8DD7BFDFF              call 004254B0
:0044D8D3 85C0                    test eax, eax
:0044D8D5 7435                    je 0044D90C
:0044D8D7 B9180A4B00              mov ecx, 004B0A18
:0044D8DC E84F91FFFF              call 00446A30
:0044D8E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D8E4 81E1FF000000            and ecx, 000000FF
:0044D8EA 6BC924                  imul ecx, 00000024
:0044D8ED 81C108F54A00            add ecx, 004AF508
:0044D8F3 E850F3FDFF              call 0042CC48

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044D8F8 6A05                    push 00000005
:0044D8FA E84594FDFF              call 00426D44
:0044D8FF 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D902 6A04                    push 00000004
:0044D904 E87292FDFF              call 00426B7B
:0044D909 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D8D5(C)
|
:0044D90C EBA7                    jmp 0044D8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D8C2(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044D90E 6A07                    push 00000007
:0044D910 B9800D4B00              mov ecx, 004B0D80
:0044D915 E88F420100              call 00461BA9
:0044D91A 5D                      pop ebp
:0044D91B C3                      ret



* Referenced by a CALL at Address:
|:004311AA   
|
:0044D91C 55                      push ebp
:0044D91D 8BEC                    mov ebp, esp
:0044D91F 83EC34                  sub esp, 00000034
:0044D922 894DD4                  mov dword ptr [ebp-2C], ecx
:0044D925 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044D928 E8839EFBFF              call 004077B0
:0044D92D 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0044D930 E87B9EFBFF              call 004077B0
:0044D935 C645FCFF                mov [ebp-04], FF
:0044D939 C645DCFF                mov [ebp-24], FF
:0044D93D 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044D940 8B08                    mov ecx, dword ptr [eax]
:0044D942 6BC970                  imul ecx, 00000070
:0044D945 81C198224900            add ecx, 00492298
:0044D94B E8FB4DFBFF              call 0040274B
:0044D950 8845F4                  mov byte ptr [ebp-0C], al
:0044D953 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D956 81E1FF000000            and ecx, 000000FF
:0044D95C 81F9FF000000            cmp ecx, 000000FF
:0044D962 741A                    je 0044D97E
:0044D964 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D967 81E1FF000000            and ecx, 000000FF
:0044D96D 6BC933                  imul ecx, 00000033
:0044D970 81C1C8EF4800            add ecx, 0048EFC8
:0044D976 E8156EFBFF              call 00404790
:0044D97B 8845DC                  mov byte ptr [ebp-24], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D962(C)
|
:0044D97E 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044D981 E84A19FCFF              call 0040F2D0
:0044D986 85C0                    test eax, eax
:0044D988 7515                    jne 0044D99F
:0044D98A 33D2                    xor edx, edx
:0044D98C 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:0044D992 83E204                  and edx, 00000004
:0044D995 85D2                    test edx, edx
:0044D997 7506                    jne 0044D99F
:0044D999 C645FC00                mov [ebp-04], 00
:0044D99D EB5E                    jmp 0044D9FD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D988(C), :0044D997(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D99F 6A04                    push 00000004
:0044D9A1 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044D9A4 E84721FEFF              call 0042FAF0
:0044D9A9 85C0                    test eax, eax
:0044D9AB 7512                    jne 0044D9BF
:0044D9AD 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044D9B0 E83B1FFEFF              call 0042F8F0
:0044D9B5 25FF000000              and eax, 000000FF
:0044D9BA 83F807                  cmp eax, 00000007
:0044D9BD 7414                    je 0044D9D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D9AB(C)
|
:0044D9BF 33C0                    xor eax, eax
:0044D9C1 A07C0B4B00              mov al, byte ptr [004B0B7C]
:0044D9C6 83E004                  and eax, 00000004
:0044D9C9 85C0                    test eax, eax
:0044D9CB 7506                    jne 0044D9D3
:0044D9CD C645FC01                mov [ebp-04], 01
:0044D9D1 EB2A                    jmp 0044D9FD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D9BD(C), :0044D9CB(C)
|
:0044D9D3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044D9D6 33D2                    xor edx, edx
:0044D9D8 8A511C                  mov dl, byte ptr [ecx+1C]
:0044D9DB 83E210                  and edx, 00000010
:0044D9DE 85D2                    test edx, edx
:0044D9E0 7406                    je 0044D9E8
:0044D9E2 C645FC05                mov [ebp-04], 05
:0044D9E6 EB15                    jmp 0044D9FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D9E0(C)
|
:0044D9E8 6880000000              push 00000080
:0044D9ED 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044D9F0 E8FB20FEFF              call 0042FAF0
:0044D9F5 85C0                    test eax, eax
:0044D9F7 7404                    je 0044D9FD
:0044D9F9 C645FC06                mov [ebp-04], 06

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D99D(U), :0044D9D1(U), :0044D9E6(U), :0044D9F7(C)
|
:0044D9FD 6A20                    push 00000020
:0044D9FF 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DA02 E8E920FEFF              call 0042FAF0
:0044DA07 85C0                    test eax, eax
:0044DA09 7412                    je 0044DA1D
:0044DA0B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DA0E E818CBFDFF              call 0042A52B
:0044DA13 25FF000000              and eax, 000000FF
:0044DA18 8945D0                  mov dword ptr [ebp-30], eax
:0044DA1B EB07                    jmp 0044DA24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA09(C)
|
:0044DA1D C745D000000000          mov [ebp-30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA1B(U)
|
:0044DA24 8A45D0                  mov al, byte ptr [ebp-30]
:0044DA27 8845F0                  mov byte ptr [ebp-10], al
:0044DA2A 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DA2C 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DA31 68FF000000              push 000000FF
:0044DA36 6A00                    push 00000000
:0044DA38 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DA3B E8EBCAFDFF              call 0042A52B
:0044DA40 50                      push eax
:0044DA41 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DA44 83C105                  add ecx, 00000005
:0044DA47 51                      push ecx
:0044DA48 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DA4B E8EFBDFFFF              call 0044983F
:0044DA50 6A01                    push 00000001
:0044DA52 B9A8034B00              mov ecx, 004B03A8
:0044DA57 E8CB54FFFF              call 00442F27
:0044DA5C 8B55DC                  mov edx, dword ptr [ebp-24]
:0044DA5F 81E2FF000000            and edx, 000000FF
:0044DA65 81FAFF000000            cmp edx, 000000FF
:0044DA6B 7416                    je 0044DA83
:0044DA6D 8A45DC                  mov al, byte ptr [ebp-24]
:0044DA70 50                      push eax
:0044DA71 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DA74 668B5105                mov dx, word ptr [ecx+05]
:0044DA78 52                      push edx
:0044DA79 B9A8034B00              mov ecx, 004B03A8
:0044DA7E E8996CFFFF              call 0044471C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA6B(C)
|
:0044DA83 B9A8034B00              mov ecx, 004B03A8
:0044DA88 E8F16CFFFF              call 0044477E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DB87(U), :0044DCA8(U)
|
:0044DA8D 8B45FC                  mov eax, dword ptr [ebp-04]
:0044DA90 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DA95 3DFF000000              cmp eax, 000000FF
:0044DA9A 0F850D020000            jne 0044DCAD
:0044DAA0 B9A8034B00              mov ecx, 004B03A8
:0044DAA5 E87072FFFF              call 00444D1A
:0044DAAA 50                      push eax
:0044DAAB 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DAAE E8DD1CFEFF              call 0042F790
:0044DAB3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044DAB6 81E1FF000000            and ecx, 000000FF
:0044DABC 81F9FF000000            cmp ecx, 000000FF
:0044DAC2 7509                    jne 0044DACD
:0044DAC4 C645FC02                mov [ebp-04], 02
:0044DAC8 E9E0010000              jmp 0044DCAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DAC2(C)
|
:0044DACD 8D55E0                  lea edx, dword ptr [ebp-20]
:0044DAD0 52                      push edx
:0044DAD1 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DAD4 E8A7F6FDFF              call 0042D180
:0044DAD9 85C0                    test eax, eax
:0044DADB 7432                    je 0044DB0F
:0044DADD 68800A4B00              push 004B0A80
:0044DAE2 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DAE5 E8A39BFBFF              call 0040768D
:0044DAEA 0500960000              add eax, 00009600
:0044DAEF 50                      push eax
:0044DAF0 B930DF4A00              mov ecx, 004ADF30
:0044DAF5 E8A45AFCFF              call 0041359E
:0044DAFA 33C9                    xor ecx, ecx
:0044DAFC 8A08                    mov cl, byte ptr [eax]
:0044DAFE 81F9FF000000            cmp ecx, 000000FF
:0044DB04 7409                    je 0044DB0F
:0044DB06 C645FC04                mov [ebp-04], 04
:0044DB0A E99E010000              jmp 0044DCAD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DADB(C), :0044DB04(C)
|
:0044DB0F 8D55E0                  lea edx, dword ptr [ebp-20]
:0044DB12 52                      push edx
:0044DB13 E8F99DFFFF              call 00447911
:0044DB18 83C404                  add esp, 00000004
:0044DB1B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DB20 3DFF000000              cmp eax, 000000FF
:0044DB25 0F842E010000            je 0044DC59
:0044DB2B 68800A4B00              push 004B0A80
:0044DB30 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DB33 E8559BFBFF              call 0040768D
:0044DB38 50                      push eax
:0044DB39 B970DF4A00              mov ecx, 004ADF70
:0044DB3E E85B5AFCFF              call 0041359E
:0044DB43 33C9                    xor ecx, ecx
:0044DB45 8A08                    mov cl, byte ptr [eax]
:0044DB47 85C9                    test ecx, ecx
:0044DB49 0F840A010000            je 0044DC59
:0044DB4F 8D55E0                  lea edx, dword ptr [ebp-20]
:0044DB52 52                      push edx
:0044DB53 E8B99DFFFF              call 00447911
:0044DB58 83C404                  add esp, 00000004
:0044DB5B 8AC8                    mov cl, al
:0044DB5D 81E1FF000000            and ecx, 000000FF
:0044DB63 6BC924                  imul ecx, 00000024
:0044DB66 81C108F54A00            add ecx, 004AF508
:0044DB6C E85F17FCFF              call 0040F2D0
:0044DB71 85C0                    test eax, eax
:0044DB73 0F85E0000000            jne 0044DC59
:0044DB79 6A01                    push 00000001
:0044DB7B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DB7E E8DA19FEFF              call 0042F55D
:0044DB83 85C0                    test eax, eax
:0044DB85 7505                    jne 0044DB8C
:0044DB87 E901FFFFFF              jmp 0044DA8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DB85(C)
|
:0044DB8C 6A00                    push 00000000
:0044DB8E B9A8034B00              mov ecx, 004B03A8
:0044DB93 E88F53FFFF              call 00442F27

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DB98 68FF000000              push 000000FF
:0044DB9D 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044DBA0 668B4805                mov cx, word ptr [eax+05]
:0044DBA4 51                      push ecx
:0044DBA5 B9A8034B00              mov ecx, 004B03A8
:0044DBAA E86D6BFFFF              call 0044471C
:0044DBAF B9A8034B00              mov ecx, 004B03A8
:0044DBB4 E8C56BFFFF              call 0044477E
:0044DBB9 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DBBC 8B02                    mov eax, dword ptr [edx]
:0044DBBE 50                      push eax
:0044DBBF B9880B4B00              mov ecx, 004B0B88
:0044DBC4 E8F7BEFEFF              call 00439AC0
:0044DBC9 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DBCC 51                      push ecx
:0044DBCD E83F9DFFFF              call 00447911
:0044DBD2 83C404                  add esp, 00000004
:0044DBD5 50                      push eax
:0044DBD6 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DBD9 8A4204                  mov al, byte ptr [edx+04]
:0044DBDC 50                      push eax
:0044DBDD E8619CFFFF              call 00447843
:0044DBE2 83C408                  add esp, 00000008
:0044DBE5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DBE7 68FF000000              push 000000FF
:0044DBEC 6A00                    push 00000000
:0044DBEE 6A01                    push 00000001
:0044DBF0 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DBF3 51                      push ecx
:0044DBF4 E8189DFFFF              call 00447911
:0044DBF9 83C404                  add esp, 00000004
:0044DBFC 50                      push eax
:0044DBFD 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DC00 8A4204                  mov al, byte ptr [edx+04]
:0044DC03 50                      push eax
:0044DC04 B930024B00              mov ecx, 004B0230
:0044DC09 E890EFFEFF              call 0043CB9E
:0044DC0E 6880000000              push 00000080
:0044DC13 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DC16 E8FE17FEFF              call 0042F419
:0044DC1B B9A8034B00              mov ecx, 004B03A8
:0044DC20 E8596BFFFF              call 0044477E
:0044DC25 C645FC03                mov [ebp-04], 03
:0044DC29 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DC2C E81F21FEFF              call 0042FD50
:0044DC31 25FF000000              and eax, 000000FF
:0044DC36 83F803                  cmp eax, 00000003
:0044DC39 7412                    je 0044DC4D
:0044DC3B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DC3E E80D21FEFF              call 0042FD50
:0044DC43 25FF000000              and eax, 000000FF
:0044DC48 83F804                  cmp eax, 00000004
:0044DC4B 750A                    jne 0044DC57

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC39(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044DC4D 6A02                    push 00000002
:0044DC4F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DC52 E8E9BEFEFF              call 00439B40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC4B(C)
|
:0044DC57 EB54                    jmp 0044DCAD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DB25(C), :0044DB49(C), :0044DB73(C)
|
:0044DC59 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DC5C 51                      push ecx
:0044DC5D E8AF9CFFFF              call 00447911
:0044DC62 83C404                  add esp, 00000004
:0044DC65 25FF000000              and eax, 000000FF
:0044DC6A 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DC6D 33C9                    xor ecx, ecx
:0044DC6F 8A4A04                  mov cl, byte ptr [edx+04]
:0044DC72 3BC1                    cmp eax, ecx
:0044DC74 7506                    jne 0044DC7C
:0044DC76 C645FC03                mov [ebp-04], 03
:0044DC7A EB31                    jmp 0044DCAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC74(C)
|
:0044DC7C 33D2                    xor edx, edx
:0044DC7E 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:0044DC84 83E208                  and edx, 00000008
:0044DC87 85D2                    test edx, edx
:0044DC89 7402                    je 0044DC8D
:0044DC8B EB1B                    jmp 0044DCA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC89(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044DC8D 6A07                    push 00000007
:0044DC8F B9800D4B00              mov ecx, 004B0D80
:0044DC94 E8103F0100              call 00461BA9
:0044DC99 6898914700              push 00479198
:0044DC9E 6A00                    push 00000000
:0044DCA0 E8C7AEFDFF              call 00428B6C
:0044DCA5 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC8B(U)
|
:0044DCA8 E9E0FDFFFF              jmp 0044DA8D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DA9A(C), :0044DAC8(U), :0044DB0A(U), :0044DC57(U), :0044DC7A(U)
|
:0044DCAD 8B45FC                  mov eax, dword ptr [ebp-04]
:0044DCB0 25FF000000              and eax, 000000FF
:0044DCB5 8945CC                  mov dword ptr [ebp-34], eax
:0044DCB8 837DCC06                cmp dword ptr [ebp-34], 00000006
:0044DCBC 0F872F010000            ja 0044DDF1
:0044DCC2 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0044DCC5 FF248D37DF4400          jmp dword ptr [4*ecx+0044DF37]
:0044DCCC 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DCCF 8A4204                  mov al, byte ptr [edx+04]
:0044DCD2 50                      push eax
:0044DCD3 E85CFBFFFF              call 0044D834
:0044DCD8 83C404                  add esp, 00000004
:0044DCDB 6A00                    push 00000000
:0044DCDD B9680C4B00              mov ecx, 004B0C68
:0044DCE2 E8191AFEFF              call 0042F700
:0044DCE7 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DCEA E8B717FEFF              call 0042F4A6
:0044DCEF 85C0                    test eax, eax
:0044DCF1 740F                    je 0044DD02
:0044DCF3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DCF6 8A5104                  mov dl, byte ptr [ecx+04]
:0044DCF9 52                      push edx
:0044DCFA E8A9FBFFFF              call 0044D8A8
:0044DCFF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DCF1(C)
|
:0044DD02 6A01                    push 00000001
:0044DD04 B9680C4B00              mov ecx, 004B0C68
:0044DD09 E8F219FEFF              call 0042F700
:0044DD0E E9DE000000              jmp 0044DDF1
:0044DD13 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044DD16 8A4804                  mov cl, byte ptr [eax+04]
:0044DD19 51                      push ecx
:0044DD1A E815FBFFFF              call 0044D834
:0044DD1F 83C404                  add esp, 00000004
:0044DD22 6A00                    push 00000000
:0044DD24 B9680C4B00              mov ecx, 004B0C68
:0044DD29 E8D219FEFF              call 0042F700
:0044DD2E 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DD31 E87017FEFF              call 0042F4A6
:0044DD36 85C0                    test eax, eax
:0044DD38 740F                    je 0044DD49
:0044DD3A 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DD3D 8A4204                  mov al, byte ptr [edx+04]
:0044DD40 50                      push eax
:0044DD41 E862FBFFFF              call 0044D8A8
:0044DD46 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DD38(C)
|
:0044DD49 6A01                    push 00000001
:0044DD4B B9680C4B00              mov ecx, 004B0C68
:0044DD50 E8AB19FEFF              call 0042F700
:0044DD55 E997000000              jmp 0044DDF1
:0044DD5A 6A01                    push 00000001
:0044DD5C B9800D4B00              mov ecx, 004B0D80
:0044DD61 E8433E0100              call 00461BA9
:0044DD66 E986000000              jmp 0044DDF1
:0044DD6B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DD6E 8A5104                  mov dl, byte ptr [ecx+04]
:0044DD71 52                      push edx
:0044DD72 E8BDFAFFFF              call 0044D834
:0044DD77 83C404                  add esp, 00000004
:0044DD7A 6A00                    push 00000000
:0044DD7C B9680C4B00              mov ecx, 004B0C68
:0044DD81 E87A19FEFF              call 0042F700
:0044DD86 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DD89 E81817FEFF              call 0042F4A6
:0044DD8E 85C0                    test eax, eax
:0044DD90 740F                    je 0044DDA1
:0044DD92 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044DD95 8A4804                  mov cl, byte ptr [eax+04]
:0044DD98 51                      push ecx
:0044DD99 E80AFBFFFF              call 0044D8A8
:0044DD9E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DD90(C)
|
:0044DDA1 6A01                    push 00000001
:0044DDA3 B9680C4B00              mov ecx, 004B0C68
:0044DDA8 E85319FEFF              call 0042F700
:0044DDAD EB42                    jmp 0044DDF1
:0044DDAF 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DDB2 8A4204                  mov al, byte ptr [edx+04]
:0044DDB5 50                      push eax
:0044DDB6 E879FAFFFF              call 0044D834
:0044DDBB 83C404                  add esp, 00000004
:0044DDBE 6A00                    push 00000000
:0044DDC0 B9680C4B00              mov ecx, 004B0C68
:0044DDC5 E83619FEFF              call 0042F700
:0044DDCA 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DDCD E8D416FEFF              call 0042F4A6
:0044DDD2 85C0                    test eax, eax
:0044DDD4 740F                    je 0044DDE5
:0044DDD6 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DDD9 8A5104                  mov dl, byte ptr [ecx+04]
:0044DDDC 52                      push edx
:0044DDDD E8C6FAFFFF              call 0044D8A8
:0044DDE2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DDD4(C)
|
:0044DDE5 6A01                    push 00000001
:0044DDE7 B9680C4B00              mov ecx, 004B0C68
:0044DDEC E80F19FEFF              call 0042F700

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DCBC(C), :0044DD0E(U), :0044DD55(U), :0044DD66(U), :0044DDAD(U)
|
:0044DDF1 6A00                    push 00000000
:0044DDF3 B9A8034B00              mov ecx, 004B03A8
:0044DDF8 E82A51FFFF              call 00442F27

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DDFD 68FF000000              push 000000FF
:0044DE02 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044DE05 668B4805                mov cx, word ptr [eax+05]
:0044DE09 51                      push ecx
:0044DE0A B9A8034B00              mov ecx, 004B03A8
:0044DE0F E80869FFFF              call 0044471C
:0044DE14 B9A8034B00              mov ecx, 004B03A8
:0044DE19 E86069FFFF              call 0044477E
:0044DE1E 8B55FC                  mov edx, dword ptr [ebp-04]
:0044DE21 81E2FF000000            and edx, 000000FF
:0044DE27 83FA03                  cmp edx, 00000003
:0044DE2A 751B                    jne 0044DE47
:0044DE2C 6A00                    push 00000000
:0044DE2E B9800D4B00              mov ecx, 004B0D80
:0044DE33 E8713D0100              call 00461BA9
:0044DE38 E8C18EFDFF              call 00426CFE
:0044DE3D B801000000              mov eax, 00000001
:0044DE42 E9EC000000              jmp 0044DF33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DE2A(C)
|
:0044DE47 8B45FC                  mov eax, dword ptr [ebp-04]
:0044DE4A 25FF000000              and eax, 000000FF
:0044DE4F 83F804                  cmp eax, 00000004
:0044DE52 740C                    je 0044DE60
:0044DE54 E8A58EFDFF              call 00426CFE
:0044DE59 33C0                    xor eax, eax
:0044DE5B E9D3000000              jmp 0044DF33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DE52(C)
|
:0044DE60 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DE62 68FF000000              push 000000FF
:0044DE67 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DE6A 51                      push ecx
:0044DE6B 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DE6E 83C205                  add edx, 00000005
:0044DE71 52                      push edx
:0044DE72 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DE75 E826B5FFFF              call 004493A0
:0044DE7A 8945E4                  mov dword ptr [ebp-1C], eax
:0044DE7D 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0044DE80 E82B99FBFF              call 004077B0
:0044DE85 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DE88 E883E6FDFF              call 0042C510
:0044DE8D C745E800000000          mov [ebp-18], 00000000
:0044DE94 EB09                    jmp 0044DE9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DEEE(U), :0044DF17(U)
|
:0044DE96 8B45E8                  mov eax, dword ptr [ebp-18]
:0044DE99 83C001                  add eax, 00000001
:0044DE9C 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DE94(U)
|
:0044DE9F 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0044DEA2 51                      push ecx
:0044DEA3 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044DEA6 83C205                  add edx, 00000005
:0044DEA9 52                      push edx
:0044DEAA E8F11DFEFF              call 0042FCA0
:0044DEAF 83C408                  add esp, 00000008
:0044DEB2 85C0                    test eax, eax
:0044DEB4 7566                    jne 0044DF1C
:0044DEB6 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044DEB9 0345E8                  add eax, dword ptr [ebp-18]
:0044DEBC 8A08                    mov cl, byte ptr [eax]
:0044DEBE 884DF8                  mov byte ptr [ebp-08], cl
:0044DEC1 8A55F8                  mov dl, byte ptr [ebp-08]
:0044DEC4 52                      push edx
:0044DEC5 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044DEC8 83C005                  add eax, 00000005
:0044DECB 50                      push eax
:0044DECC E8379BFFFF              call 00447A08
:0044DED1 83C408                  add esp, 00000008
:0044DED4 50                      push eax
:0044DED5 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0044DED8 E8B318FEFF              call 0042F790
:0044DEDD 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044DEE0 81E1FF000000            and ecx, 000000FF
:0044DEE6 81F9FF000000            cmp ecx, 000000FF
:0044DEEC 7502                    jne 0044DEF0
:0044DEEE EBA6                    jmp 0044DE96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DEEC(C)
|
:0044DEF0 8A55F8                  mov dl, byte ptr [ebp-08]
:0044DEF3 52                      push edx
:0044DEF4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DEF7 E808FAFDFF              call 0042D904
:0044DEFC 8A45F8                  mov al, byte ptr [ebp-08]
:0044DEFF 50                      push eax
:0044DF00 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DF03 E8D8BCFEFF              call 00439BE0
:0044DF08 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0044DF0B 51                      push ecx
:0044DF0C 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DF0F 83C105                  add ecx, 00000005
:0044DF12 E87918FEFF              call 0042F790
:0044DF17 E97AFFFFFF              jmp 0044DE96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DEB4(C)
|
:0044DF1C 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DF1F E8C3E5FDFF              call 0042C4E7
:0044DF24 6A40                    push 00000040
:0044DF26 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DF29 E8EB14FEFF              call 0042F419
:0044DF2E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DE42(U), :0044DE5B(U)
|
:0044DF33 8BE5                    mov esp, ebp
:0044DF35 5D                      pop ebp
:0044DF36 C3                      ret



:0044DF37 CCDC4400                DWORD 0044DCCC
:0044DF3B 13DD4400                DWORD 0044DD13
:0044DF3F 5ADD4400                DWORD 0044DD5A
:0044DF43 F1DD4400                DWORD 0044DDF1
:0044DF47 F1DD4400                DWORD 0044DDF1
:0044DF4B 6BDD4400                DWORD 0044DD6B
:0044DF4F AFDD4400                DWORD 0044DDAF



* Referenced by a CALL at Addresses:
|:0044A222   , :0044A26C   , :0044A492   , :0044A5E5   
|
:0044DF53 55                      push ebp
:0044DF54 8BEC                    mov ebp, esp
:0044DF56 83EC10                  sub esp, 00000010
:0044DF59 894DF0                  mov dword ptr [ebp-10], ecx
:0044DF5C 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DF5E 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DF63 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044DF68 6A08                    push 00000008
:0044DF6A 8A4508                  mov al, byte ptr [ebp+08]
:0044DF6D 50                      push eax
:0044DF6E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044DF71 83C105                  add ecx, 00000005
:0044DF74 51                      push ecx
:0044DF75 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044DF78 E8C2B8FFFF              call 0044983F
:0044DF7D 8845FC                  mov byte ptr [ebp-04], al
:0044DF80 8B55FC                  mov edx, dword ptr [ebp-04]
:0044DF83 81E2FF000000            and edx, 000000FF
:0044DF89 81FAFF000000            cmp edx, 000000FF
:0044DF8F 7430                    je 0044DFC1
:0044DF91 C7059C044B0001000000    mov dword ptr [004B049C], 00000001
:0044DF9B 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DF9D 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DFA2 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044DFA7 6A04                    push 00000004
:0044DFA9 8A4508                  mov al, byte ptr [ebp+08]
:0044DFAC 50                      push eax
:0044DFAD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044DFB0 83C105                  add ecx, 00000005
:0044DFB3 51                      push ecx
:0044DFB4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044DFB7 E883B8FFFF              call 0044983F
:0044DFBC E919010000              jmp 0044E0DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DF8F(C)
|
:0044DFC1 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DFC3 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DFC8 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044DFCD 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DFCF 68FF000000              push 000000FF
:0044DFD4 8B55F0                  mov edx, dword ptr [ebp-10]
:0044DFD7 83C205                  add edx, 00000005
:0044DFDA 52                      push edx
:0044DFDB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044DFDE E85CB8FFFF              call 0044983F
:0044DFE3 8845FC                  mov byte ptr [ebp-04], al
:0044DFE6 8B45FC                  mov eax, dword ptr [ebp-04]
:0044DFE9 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044DFEE 3DFF000000              cmp eax, 000000FF
:0044DFF3 0F84D0000000            je 0044E0C9
:0044DFF9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044DFFC 81E1FF000000            and ecx, 000000FF
:0044E002 6BC924                  imul ecx, 00000024
:0044E005 81C108F54A00            add ecx, 004AF508
:0044E00B E890B3FDFF              call 004293A0
:0044E010 668B08                  mov cx, word ptr [eax]
:0044E013 66894DF4                mov word ptr [ebp-0C], cx
:0044E017 C645F800                mov [ebp-08], 00
:0044E01B 6A01                    push 00000001
:0044E01D 8B55F0                  mov edx, dword ptr [ebp-10]
:0044E020 8A4206                  mov al, byte ptr [edx+06]
:0044E023 50                      push eax
:0044E024 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044E027 8A5105                  mov dl, byte ptr [ecx+05]
:0044E02A 52                      push edx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E02B 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044E02D 68FF000000              push 000000FF
:0044E032 8D45F4                  lea eax, dword ptr [ebp-0C]
:0044E035 50                      push eax
:0044E036 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044E039 E801B8FFFF              call 0044983F
:0044E03E 25FF000000              and eax, 000000FF
:0044E043 83F801                  cmp eax, 00000001
:0044E046 7435                    je 0044E07D
:0044E048 6A00                    push 00000000
:0044E04A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044E04D 8A5106                  mov dl, byte ptr [ecx+06]
:0044E050 52                      push edx
:0044E051 8B45F0                  mov eax, dword ptr [ebp-10]
:0044E054 8A4805                  mov cl, byte ptr [eax+05]
:0044E057 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E058 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044E05A 68FF000000              push 000000FF
:0044E05F 8D55F4                  lea edx, dword ptr [ebp-0C]
:0044E062 52                      push edx
:0044E063 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044E066 E8D4B7FFFF              call 0044983F
:0044E06B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044E070 3DFF000000              cmp eax, 000000FF
:0044E075 7404                    je 0044E07B
:0044E077 C645F801                mov [ebp-08], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E075(C)
|
:0044E07B EB04                    jmp 0044E081

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E046(C)
|
:0044E07D C645F801                mov [ebp-08], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E07B(U)
|
:0044E081 8B45F8                  mov eax, dword ptr [ebp-08]
:0044E084 25FF000000              and eax, 000000FF
:0044E089 85C0                    test eax, eax
:0044E08B 743A                    je 0044E0C7
:0044E08D 6A01                    push 00000001
:0044E08F 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E092 51                      push ecx
:0044E093 8B55F0                  mov edx, dword ptr [ebp-10]
:0044E096 83C205                  add edx, 00000005
:0044E099 52                      push edx
:0044E09A 8D45F4                  lea eax, dword ptr [ebp-0C]
:0044E09D 50                      push eax
:0044E09E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044E0A1 E8FAB2FFFF              call 004493A0
:0044E0A6 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044E0A8 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0044E0AD 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E0B2 6A04                    push 00000004
:0044E0B4 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E0B7 51                      push ecx
:0044E0B8 8B55F0                  mov edx, dword ptr [ebp-10]
:0044E0BB 83C205                  add edx, 00000005
:0044E0BE 52                      push edx
:0044E0BF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044E0C2 E878B7FFFF              call 0044983F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E08B(C)
|
:0044E0C7 EB11                    jmp 0044E0DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DFF3(C)
|
:0044E0C9 8B45F0                  mov eax, dword ptr [ebp-10]
:0044E0CC 83C005                  add eax, 00000005
:0044E0CF 50                      push eax
:0044E0D0 B9A0044B00              mov ecx, 004B04A0
:0044E0D5 E8B616FEFF              call 0042F790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DFBC(U), :0044E0C7(U)
|
:0044E0DA 8BE5                    mov esp, ebp
:0044E0DC 5D                      pop ebp
:0044E0DD C20400                  ret 0004



* Referenced by a CALL at Address:
|:0044A327   
|
:0044E0E0 55                      push ebp
:0044E0E1 8BEC                    mov ebp, esp
:0044E0E3 51                      push ecx
:0044E0E4 894DFC                  mov dword ptr [ebp-04], ecx
:0044E0E7 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E0EA 668B4808                mov cx, word ptr [eax+08]
:0044E0EE 8B5508                  mov edx, dword ptr [ebp+08]
:0044E0F1 66890A                  mov word ptr [edx], cx
:0044E0F4 8B4508                  mov eax, dword ptr [ebp+08]
:0044E0F7 8BE5                    mov esp, ebp
:0044E0F9 5D                      pop ebp
:0044E0FA C20400                  ret 0004


:0044E0FD CC                      int 03
:0044E0FE CC                      int 03
:0044E0FF CC                      int 03

* Referenced by a CALL at Address:
|:0044A639   
|
:0044E100 55                      push ebp
:0044E101 8BEC                    mov ebp, esp
:0044E103 51                      push ecx
:0044E104 894DFC                  mov dword ptr [ebp-04], ecx
:0044E107 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E10A 8B4020                  mov eax, dword ptr [eax+20]
:0044E10D 8BE5                    mov esp, ebp
:0044E10F 5D                      pop ebp
:0044E110 C3                      ret


:0044E111 CC                      int 03
:0044E112 CC                      int 03
:0044E113 CC                      int 03
:0044E114 CC                      int 03
:0044E115 CC                      int 03
:0044E116 CC                      int 03
:0044E117 CC                      int 03
:0044E118 CC                      int 03
:0044E119 CC                      int 03
:0044E11A CC                      int 03
:0044E11B CC                      int 03
:0044E11C CC                      int 03
:0044E11D CC                      int 03
:0044E11E CC                      int 03
:0044E11F CC                      int 03

* Referenced by a CALL at Address:
|:004550B6   
|
:0044E120 55                      push ebp
:0044E121 8BEC                    mov ebp, esp
:0044E123 51                      push ecx
:0044E124 894DFC                  mov dword ptr [ebp-04], ecx
:0044E127 B9180A4B00              mov ecx, 004B0A18
:0044E12C E83F220000              call 00450370
:0044E131 50                      push eax
:0044E132 6A00                    push 00000000
:0044E134 E833AAFDFF              call 00428B6C
:0044E139 83C408                  add esp, 00000008
:0044E13C 8B4508                  mov eax, dword ptr [ebp+08]
:0044E13F 25FF000000              and eax, 000000FF
:0044E144 85C0                    test eax, eax
:0044E146 753E                    jne 0044E186
:0044E148 6A00                    push 00000000
:0044E14A 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E14D 51                      push ecx
:0044E14E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E151 E834200000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E156 6840CB4700              push 0047CB40
:0044E15B 6A00                    push 00000000
:0044E15D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E160 E887200000              call 004501EC
:0044E165 6A00                    push 00000000
:0044E167 8A5508                  mov dl, byte ptr [ebp+08]
:0044E16A 52                      push edx
:0044E16B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E16E E83F210000              call 004502B2
:0044E173 6A01                    push 00000001
:0044E175 8A4508                  mov al, byte ptr [ebp+08]
:0044E178 50                      push eax
:0044E179 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E17C E809200000              call 0045018A
:0044E181 E9CA1E0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E146(C)
|
:0044E186 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E189 81E1FF000000            and ecx, 000000FF
:0044E18F 83F901                  cmp ecx, 00000001
:0044E192 740E                    je 0044E1A2
:0044E194 8B5508                  mov edx, dword ptr [ebp+08]
:0044E197 81E2FF000000            and edx, 000000FF
:0044E19D 83FA16                  cmp edx, 00000016
:0044E1A0 7578                    jne 0044E21A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E192(C)
|
:0044E1A2 6A00                    push 00000000
:0044E1A4 8A4508                  mov al, byte ptr [ebp+08]
:0044E1A7 50                      push eax
:0044E1A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1AB E8DA1F0000              call 0045018A

* Possible StringData Ref from Data Obj ->"j"
                                  |
:0044E1B0 684CCB4700              push 0047CB4C
:0044E1B5 6A01                    push 00000001
:0044E1B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1BA E82D200000              call 004501EC
:0044E1BF 6A01                    push 00000001
:0044E1C1 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E1C4 51                      push ecx
:0044E1C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1C8 E8E5200000              call 004502B2
:0044E1CD 6A01                    push 00000001
:0044E1CF 8A5508                  mov dl, byte ptr [ebp+08]
:0044E1D2 52                      push edx
:0044E1D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1D6 E8AF1F0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E1DB 6A02                    push 00000002
:0044E1DD 8A4508                  mov al, byte ptr [ebp+08]
:0044E1E0 50                      push eax
:0044E1E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1E4 E8A11F0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E1E9 6858CB4700              push 0047CB58

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E1EE 6A02                    push 00000002
:0044E1F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1F3 E8F41F0000              call 004501EC

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E1F8 6864CB4700              push 0047CB64

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E1FD 6A03                    push 00000003
:0044E1FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E202 E8E51F0000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E207 6A02                    push 00000002
:0044E209 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E20C 51                      push ecx
:0044E20D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E210 E89D200000              call 004502B2
:0044E215 E9361E0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E1A0(C)
|
:0044E21A 8B5508                  mov edx, dword ptr [ebp+08]
:0044E21D 81E2FF000000            and edx, 000000FF
:0044E223 83FA02                  cmp edx, 00000002
:0044E226 0F8587000000            jne 0044E2B3

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E22C 6870CB4700              push 0047CB70

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E231 6A04                    push 00000004
:0044E233 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E236 E8B11F0000              call 004501EC

* Possible StringData Ref from Data Obj ->"j"
                                  |
:0044E23B 687CCB4700              push 0047CB7C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E240 6A05                    push 00000005
:0044E242 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E245 E8A21F0000              call 004501EC
:0044E24A 6A00                    push 00000000
:0044E24C 8A4508                  mov al, byte ptr [ebp+08]
:0044E24F 50                      push eax
:0044E250 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E253 E8321F0000              call 0045018A
:0044E258 6A01                    push 00000001
:0044E25A 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E25D 51                      push ecx
:0044E25E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E261 E8241F0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E266 6A02                    push 00000002
:0044E268 8A5508                  mov dl, byte ptr [ebp+08]
:0044E26B 52                      push edx
:0044E26C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E26F E8161F0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E274 6A03                    push 00000003
:0044E276 8A4508                  mov al, byte ptr [ebp+08]
:0044E279 50                      push eax
:0044E27A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E27D E8081F0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E282 6888CB4700              push 0047CB88

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044E287 6A06                    push 00000006
:0044E289 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E28C E85B1F0000              call 004501EC

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E291 6894CB4700              push 0047CB94

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044E296 6A07                    push 00000007
:0044E298 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E29B E84C1F0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E2A0 6A03                    push 00000003
:0044E2A2 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E2A5 51                      push ecx
:0044E2A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E2A9 E804200000              call 004502B2
:0044E2AE E99D1D0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E226(C)
|
:0044E2B3 8B5508                  mov edx, dword ptr [ebp+08]
:0044E2B6 81E2FF000000            and edx, 000000FF
:0044E2BC 83FA03                  cmp edx, 00000003
:0044E2BF 0F8594000000            jne 0044E359
:0044E2C5 6A00                    push 00000000
:0044E2C7 8A4508                  mov al, byte ptr [ebp+08]
:0044E2CA 50                      push eax
:0044E2CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E2CE E8B71E0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Nøqs"
                                  |
:0044E2D3 68A0CB4700              push 0047CBA0

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044E2D8 6A08                    push 00000008
:0044E2DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E2DD E80A1F0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E2E2 6A04                    push 00000004
:0044E2E4 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E2E7 51                      push ecx
:0044E2E8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E2EB E8C21F0000              call 004502B2
:0044E2F0 6A01                    push 00000001
:0044E2F2 8A5508                  mov dl, byte ptr [ebp+08]
:0044E2F5 52                      push edx
:0044E2F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E2F9 E88C1E0000              call 0045018A

* Possible StringData Ref from Data Obj ->"NùDT"
                                  |
:0044E2FE 68ACCB4700              push 0047CBAC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0044E303 6A09                    push 00000009
:0044E305 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E308 E8DF1E0000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E30D 6A02                    push 00000002
:0044E30F 8A4508                  mov al, byte ptr [ebp+08]
:0044E312 50                      push eax
:0044E313 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E316 E86F1E0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E31B 68B8CB4700              push 0047CBB8

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044E320 6A0A                    push 0000000A
:0044E322 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E325 E8C21E0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E32A 6A05                    push 00000005
:0044E32C 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E32F 51                      push ecx
:0044E330 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E333 E87A1F0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E338 6A03                    push 00000003
:0044E33A 8A5508                  mov dl, byte ptr [ebp+08]
:0044E33D 52                      push edx
:0044E33E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E341 E8441E0000              call 0045018A

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044E346 6A06                    push 00000006
:0044E348 8A4508                  mov al, byte ptr [ebp+08]
:0044E34B 50                      push eax
:0044E34C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E34F E85E1F0000              call 004502B2
:0044E354 E9F71C0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E2BF(C)
|
:0044E359 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E35C 81E1FF000000            and ecx, 000000FF
:0044E362 83F904                  cmp ecx, 00000004
:0044E365 0F8587000000            jne 0044E3F2
:0044E36B 6A00                    push 00000000
:0044E36D 8A5508                  mov dl, byte ptr [ebp+08]
:0044E370 52                      push edx
:0044E371 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E374 E8111E0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Lqs"
                                  |
:0044E379 68C4CB4700              push 0047CBC4

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0044E37E 6A0B                    push 0000000B
:0044E380 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E383 E8641E0000              call 004501EC

* Possible StringData Ref from Data Obj ->"гӮa"
                                  |
:0044E388 68CCCB4700              push 0047CBCC

* Possible Reference to String Resource ID=00012: ""
                                  |
:0044E38D 6A0C                    push 0000000C
:0044E38F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E392 E8551E0000              call 004501EC

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E397 68D8CB4700              push 0047CBD8

* Possible Reference to String Resource ID=00013: ""
                                  |
:0044E39C 6A0D                    push 0000000D
:0044E39E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E3A1 E8461E0000              call 004501EC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044E3A6 6A07                    push 00000007
:0044E3A8 8A4508                  mov al, byte ptr [ebp+08]
:0044E3AB 50                      push eax
:0044E3AC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E3AF E8FE1E0000              call 004502B2
:0044E3B4 6A01                    push 00000001
:0044E3B6 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E3B9 51                      push ecx
:0044E3BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E3BD E8C81D0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E3C2 68E4CB4700              push 0047CBE4

* Possible Reference to String Resource ID=00014: ""
                                  |
:0044E3C7 6A0E                    push 0000000E
:0044E3C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E3CC E81B1E0000              call 004501EC

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044E3D1 6A08                    push 00000008
:0044E3D3 8A5508                  mov dl, byte ptr [ebp+08]
:0044E3D6 52                      push edx
:0044E3D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E3DA E8D31E0000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E3DF 6A02                    push 00000002
:0044E3E1 8A4508                  mov al, byte ptr [ebp+08]
:0044E3E4 50                      push eax
:0044E3E5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E3E8 E89D1D0000              call 0045018A
:0044E3ED E95E1C0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E365(C)
|
:0044E3F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E3F5 81E1FF000000            and ecx, 000000FF
:0044E3FB 83F905                  cmp ecx, 00000005
:0044E3FE 7412                    je 0044E412
:0044E400 8B5508                  mov edx, dword ptr [ebp+08]
:0044E403 81E2FF000000            and edx, 000000FF
:0044E409 83FA18                  cmp edx, 00000018
:0044E40C 0F85A6000000            jne 0044E4B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E3FE(C)
|
:0044E412 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E414 6A05                    push 00000005
:0044E416 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E419 E86C1D0000              call 0045018A
:0044E41E 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E420 6A05                    push 00000005
:0044E422 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E425 E8601D0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E42A 68F0CB4700              push 0047CBF0

* Possible Reference to String Resource ID=00015: ""
                                  |
:0044E42F 6A0F                    push 0000000F
:0044E431 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E434 E8B31D0000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E439 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E43B 6A05                    push 00000005
:0044E43D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E440 E8451D0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E445 68FCCB4700              push 0047CBFC

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044E44A 6A10                    push 00000010
:0044E44C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E44F E8981D0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0044E454 6A09                    push 00000009

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E456 6A05                    push 00000005
:0044E458 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E45B E8521E0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E460 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E462 6A05                    push 00000005
:0044E464 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E467 E81E1D0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Nøqs"
                                  |
:0044E46C 6808CC4700              push 0047CC08

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0044E471 6A11                    push 00000011
:0044E473 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E476 E8711D0000              call 004501EC
:0044E47B 8B4508                  mov eax, dword ptr [ebp+08]
:0044E47E 25FF000000              and eax, 000000FF
:0044E483 83F818                  cmp eax, 00000018
:0044E486 752B                    jne 0044E4B3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E488 6A04                    push 00000004
:0044E48A 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E48D 51                      push ecx
:0044E48E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E491 E8F41C0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E496 6A05                    push 00000005
:0044E498 8A5508                  mov dl, byte ptr [ebp+08]
:0044E49B 52                      push edx
:0044E49C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E49F E8E61C0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E4A4 6814CC4700              push 0047CC14
:0044E4A9 6A44                    push 00000044
:0044E4AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E4AE E8391D0000              call 004501EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E486(C)
|
:0044E4B3 E9981B0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E40C(C)
|
:0044E4B8 8B4508                  mov eax, dword ptr [ebp+08]
:0044E4BB 25FF000000              and eax, 000000FF
:0044E4C0 83F806                  cmp eax, 00000006
:0044E4C3 0F8587000000            jne 0044E550

* Possible StringData Ref from Data Obj ->"tq"
                                  |
:0044E4C9 6820CC4700              push 0047CC20

* Possible Reference to String Resource ID=00018: "G"
                                  |
:0044E4CE 6A12                    push 00000012
:0044E4D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E4D3 E8141D0000              call 004501EC

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044E4D8 6A0A                    push 0000000A
:0044E4DA 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E4DD 51                      push ecx
:0044E4DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E4E1 E8CC1D0000              call 004502B2
:0044E4E6 6A00                    push 00000000
:0044E4E8 8A5508                  mov dl, byte ptr [ebp+08]
:0044E4EB 52                      push edx
:0044E4EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E4EF E8961C0000              call 0045018A
:0044E4F4 6A01                    push 00000001
:0044E4F6 8A4508                  mov al, byte ptr [ebp+08]
:0044E4F9 50                      push eax
:0044E4FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E4FD E8881C0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Qd"
                                  |
:0044E502 682CCC4700              push 0047CC2C
:0044E507 6A13                    push 00000013
:0044E509 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E50C E8DB1C0000              call 004501EC

* Possible StringData Ref from Data Obj ->"¤`"
                                  |
:0044E511 6838CC4700              push 0047CC38
:0044E516 6A14                    push 00000014
:0044E518 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E51B E8CC1C0000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E520 6A02                    push 00000002
:0044E522 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E525 51                      push ecx
:0044E526 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E529 E85C1C0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E52E 6844CC4700              push 0047CC44
:0044E533 6A15                    push 00000015
:0044E535 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E538 E8AF1C0000              call 004501EC

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0044E53D 6A0B                    push 0000000B
:0044E53F 8A5508                  mov dl, byte ptr [ebp+08]
:0044E542 52                      push edx
:0044E543 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E546 E8671D0000              call 004502B2
:0044E54B E9001B0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E4C3(C)
|
:0044E550 8B4508                  mov eax, dword ptr [ebp+08]
:0044E553 25FF000000              and eax, 000000FF
:0044E558 83F807                  cmp eax, 00000007
:0044E55B 0F85A4000000            jne 0044E605

* Possible StringData Ref from Data Obj ->"Ns"
                                  |
:0044E561 6850CC4700              push 0047CC50
:0044E566 6A16                    push 00000016
:0044E568 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E56B E87C1C0000              call 004501EC
:0044E570 6A00                    push 00000000
:0044E572 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E575 51                      push ecx
:0044E576 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E579 E80C1C0000              call 0045018A
:0044E57E 6A01                    push 00000001
:0044E580 8A5508                  mov dl, byte ptr [ebp+08]
:0044E583 52                      push edx
:0044E584 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E587 E8FE1B0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E58C 6A02                    push 00000002
:0044E58E 8A4508                  mov al, byte ptr [ebp+08]
:0044E591 50                      push eax
:0044E592 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E595 E8F01B0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E59A 6A03                    push 00000003
:0044E59C 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E59F 51                      push ecx
:0044E5A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5A3 E8E21B0000              call 0045018A

* Possible StringData Ref from Data Obj ->"_@K"
                                  |
:0044E5A8 685CCC4700              push 0047CC5C
:0044E5AD 6A17                    push 00000017
:0044E5AF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5B2 E8351C0000              call 004501EC

* Possible StringData Ref from Data Obj ->"aR"
                                  |
:0044E5B7 6868CC4700              push 0047CC68
:0044E5BC 6A18                    push 00000018
:0044E5BE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5C1 E8261C0000              call 004501EC

* Possible StringData Ref from Data Obj ->"wæuN"
                                  |
:0044E5C6 6874CC4700              push 0047CC74
:0044E5CB 6A19                    push 00000019
:0044E5CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5D0 E8171C0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E5D5 6A04                    push 00000004
:0044E5D7 8A5508                  mov dl, byte ptr [ebp+08]
:0044E5DA 52                      push edx
:0044E5DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5DE E8A71B0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E5E3 6880CC4700              push 0047CC80
:0044E5E8 6A1A                    push 0000001A
:0044E5EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5ED E8FA1B0000              call 004501EC

* Possible Reference to String Resource ID=00012: ""
                                  |
:0044E5F2 6A0C                    push 0000000C
:0044E5F4 8A4508                  mov al, byte ptr [ebp+08]
:0044E5F7 50                      push eax
:0044E5F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5FB E8B21C0000              call 004502B2
:0044E600 E94B1A0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E55B(C)
|
:0044E605 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E608 81E1FF000000            and ecx, 000000FF
:0044E60E 83F908                  cmp ecx, 00000008
:0044E611 0F8595000000            jne 0044E6AC
:0044E617 6A00                    push 00000000
:0044E619 8A5508                  mov dl, byte ptr [ebp+08]
:0044E61C 52                      push edx
:0044E61D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E620 E8651B0000              call 0045018A
:0044E625 6A01                    push 00000001
:0044E627 8A4508                  mov al, byte ptr [ebp+08]
:0044E62A 50                      push eax
:0044E62B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E62E E8571B0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E633 6A02                    push 00000002
:0044E635 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E638 51                      push ecx
:0044E639 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E63C E8491B0000              call 0045018A

* Possible StringData Ref from Data Obj ->"q"
                                  |
:0044E641 688CCC4700              push 0047CC8C
:0044E646 6A1B                    push 0000001B
:0044E648 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E64B E89C1B0000              call 004501EC

* Possible StringData Ref from Data Obj ->"Zͽq"
                                  |
:0044E650 6898CC4700              push 0047CC98
:0044E655 6A1C                    push 0000001C
:0044E657 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E65A E88D1B0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E65F 6A03                    push 00000003
:0044E661 8A5508                  mov dl, byte ptr [ebp+08]
:0044E664 52                      push edx
:0044E665 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E668 E81D1B0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E66D 68A4CC4700              push 0047CCA4
:0044E672 6A1D                    push 0000001D
:0044E674 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E677 E8701B0000              call 004501EC

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044E67C 68B0CC4700              push 0047CCB0
:0044E681 6A1E                    push 0000001E
:0044E683 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E686 E8611B0000              call 004501EC

* Possible Reference to String Resource ID=00013: ""
                                  |
:0044E68B 6A0D                    push 0000000D
:0044E68D 8A4508                  mov al, byte ptr [ebp+08]
:0044E690 50                      push eax
:0044E691 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E694 E8191C0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E699 6A04                    push 00000004
:0044E69B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E69E 51                      push ecx
:0044E69F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E6A2 E8E31A0000              call 0045018A
:0044E6A7 E9A4190000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E611(C)
|
:0044E6AC 8B5508                  mov edx, dword ptr [ebp+08]
:0044E6AF 81E2FF000000            and edx, 000000FF
:0044E6B5 83FA09                  cmp edx, 00000009
:0044E6B8 7411                    je 0044E6CB
:0044E6BA 8B4508                  mov eax, dword ptr [ebp+08]
:0044E6BD 25FF000000              and eax, 000000FF
:0044E6C2 83F81A                  cmp eax, 0000001A
:0044E6C5 0F8587000000            jne 0044E752

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E6B8(C)
|
:0044E6CB 6A00                    push 00000000
:0044E6CD 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E6D0 51                      push ecx
:0044E6D1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E6D4 E8B11A0000              call 0045018A
:0044E6D9 6A01                    push 00000001
:0044E6DB 8A5508                  mov dl, byte ptr [ebp+08]
:0044E6DE 52                      push edx
:0044E6DF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E6E2 E8A31A0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E6E7 6A02                    push 00000002
:0044E6E9 8A4508                  mov al, byte ptr [ebp+08]
:0044E6EC 50                      push eax
:0044E6ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E6F0 E8951A0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Tnh"
                                  |
:0044E6F5 68BCCC4700              push 0047CCBC
:0044E6FA 6A1F                    push 0000001F
:0044E6FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E6FF E8E81A0000              call 004501EC

* Possible StringData Ref from Data Obj ->"TnFd"
                                  |
:0044E704 68C8CC4700              push 0047CCC8
:0044E709 6A20                    push 00000020
:0044E70B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E70E E8D91A0000              call 004501EC

* Possible StringData Ref from Data Obj ->"ͳq"
                                  |
:0044E713 68D4CC4700              push 0047CCD4
:0044E718 6A21                    push 00000021
:0044E71A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E71D E8CA1A0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E722 6A03                    push 00000003
:0044E724 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E727 51                      push ecx
:0044E728 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E72B E85A1A0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E730 68E0CC4700              push 0047CCE0
:0044E735 6A22                    push 00000022
:0044E737 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E73A E8AD1A0000              call 004501EC

* Possible Reference to String Resource ID=00014: ""
                                  |
:0044E73F 6A0E                    push 0000000E
:0044E741 8A5508                  mov dl, byte ptr [ebp+08]
:0044E744 52                      push edx
:0044E745 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E748 E8651B0000              call 004502B2
:0044E74D E9FE180000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E6C5(C)
|
:0044E752 8B4508                  mov eax, dword ptr [ebp+08]
:0044E755 25FF000000              and eax, 000000FF
:0044E75A 83F80A                  cmp eax, 0000000A
:0044E75D 755C                    jne 0044E7BB

* Possible StringData Ref from Data Obj ->"_Ш"
                                  |
:0044E75F 68ECCC4700              push 0047CCEC
:0044E764 6A23                    push 00000023
:0044E766 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E769 E87E1A0000              call 004501EC
:0044E76E 6A00                    push 00000000
:0044E770 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E773 51                      push ecx
:0044E774 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E777 E80E1A0000              call 0045018A

* Possible StringData Ref from Data Obj ->"yF"
                                  |
:0044E77C 68F8CC4700              push 0047CCF8
:0044E781 6A24                    push 00000024
:0044E783 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E786 E8611A0000              call 004501EC
:0044E78B 6A01                    push 00000001
:0044E78D 8A5508                  mov dl, byte ptr [ebp+08]
:0044E790 52                      push edx
:0044E791 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E794 E8F1190000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E799 6804CD4700              push 0047CD04
:0044E79E 6A25                    push 00000025
:0044E7A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E7A3 E8441A0000              call 004501EC

* Possible Reference to String Resource ID=00015: ""
                                  |
:0044E7A8 6A0F                    push 0000000F
:0044E7AA 8A4508                  mov al, byte ptr [ebp+08]
:0044E7AD 50                      push eax
:0044E7AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E7B1 E8FC1A0000              call 004502B2
:0044E7B6 E995180000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E75D(C)
|
:0044E7BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E7BE 81E1FF000000            and ecx, 000000FF
:0044E7C4 83F90B                  cmp ecx, 0000000B
:0044E7C7 755B                    jne 0044E824
:0044E7C9 6A00                    push 00000000
:0044E7CB 8A5508                  mov dl, byte ptr [ebp+08]
:0044E7CE 52                      push edx
:0044E7CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E7D2 E8B3190000              call 0045018A

* Possible StringData Ref from Data Obj ->"­ܸq"
                                  |
:0044E7D7 6810CD4700              push 0047CD10
:0044E7DC 6A26                    push 00000026
:0044E7DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E7E1 E8061A0000              call 004501EC
:0044E7E6 6A01                    push 00000001
:0044E7E8 8A4508                  mov al, byte ptr [ebp+08]
:0044E7EB 50                      push eax
:0044E7EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E7EF E896190000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E7F4 681CCD4700              push 0047CD1C
:0044E7F9 6A27                    push 00000027
:0044E7FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E7FE E8E9190000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E803 6A02                    push 00000002
:0044E805 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E808 51                      push ecx
:0044E809 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E80C E879190000              call 0045018A

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044E811 6A10                    push 00000010
:0044E813 8A5508                  mov dl, byte ptr [ebp+08]
:0044E816 52                      push edx
:0044E817 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E81A E8931A0000              call 004502B2
:0044E81F E92C180000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E7C7(C)
|
:0044E824 8B4508                  mov eax, dword ptr [ebp+08]
:0044E827 25FF000000              and eax, 000000FF
:0044E82C 83F80C                  cmp eax, 0000000C
:0044E82F 0F85BF000000            jne 0044E8F4
:0044E835 6A00                    push 00000000
:0044E837 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E83A 51                      push ecx
:0044E83B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E83E E847190000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E843 6828CD4700              push 0047CD28
:0044E848 6A28                    push 00000028
:0044E84A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E84D E89A190000              call 004501EC

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0044E852 6A11                    push 00000011
:0044E854 8A5508                  mov dl, byte ptr [ebp+08]
:0044E857 52                      push edx
:0044E858 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E85B E8521A0000              call 004502B2
:0044E860 6A01                    push 00000001
:0044E862 8A4508                  mov al, byte ptr [ebp+08]
:0044E865 50                      push eax
:0044E866 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E869 E81C190000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E86E 6A02                    push 00000002
:0044E870 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E873 51                      push ecx
:0044E874 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E877 E80E190000              call 0045018A

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044E87C 6834CD4700              push 0047CD34
:0044E881 6A29                    push 00000029
:0044E883 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E886 E861190000              call 004501EC

* Possible Reference to String Resource ID=00018: "G"
                                  |
:0044E88B 6A12                    push 00000012
:0044E88D 8A5508                  mov dl, byte ptr [ebp+08]
:0044E890 52                      push edx
:0044E891 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E894 E8191A0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E899 6A03                    push 00000003
:0044E89B 8A4508                  mov al, byte ptr [ebp+08]
:0044E89E 50                      push eax
:0044E89F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E8A2 E8E3180000              call 0045018A

* Possible StringData Ref from Data Obj ->"­ܸq"
                                  |
:0044E8A7 6840CD4700              push 0047CD40
:0044E8AC 6A2A                    push 0000002A
:0044E8AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E8B1 E836190000              call 004501EC
:0044E8B6 6A13                    push 00000013
:0044E8B8 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E8BB 51                      push ecx
:0044E8BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E8BF E8EE190000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E8C4 6A04                    push 00000004
:0044E8C6 8A5508                  mov dl, byte ptr [ebp+08]
:0044E8C9 52                      push edx
:0044E8CA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E8CD E8B8180000              call 0045018A

* Possible StringData Ref from Data Obj ->"LF"
                                  |
:0044E8D2 684CCD4700              push 0047CD4C
:0044E8D7 6A2B                    push 0000002B
:0044E8D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E8DC E80B190000              call 004501EC
:0044E8E1 6A14                    push 00000014
:0044E8E3 8A4508                  mov al, byte ptr [ebp+08]
:0044E8E6 50                      push eax
:0044E8E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E8EA E8C3190000              call 004502B2
:0044E8EF E95C170000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E82F(C)
|
:0044E8F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E8F7 81E1FF000000            and ecx, 000000FF
:0044E8FD 83F90D                  cmp ecx, 0000000D
:0044E900 7579                    jne 0044E97B
:0044E902 6A00                    push 00000000
:0044E904 8A5508                  mov dl, byte ptr [ebp+08]
:0044E907 52                      push edx
:0044E908 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E90B E87A180000              call 0045018A

* Possible StringData Ref from Data Obj ->"Tnh"
                                  |
:0044E910 6858CD4700              push 0047CD58
:0044E915 6A2C                    push 0000002C
:0044E917 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E91A E8CD180000              call 004501EC

* Possible StringData Ref from Data Obj ->"TnFd"
                                  |
:0044E91F 6864CD4700              push 0047CD64
:0044E924 6A2D                    push 0000002D
:0044E926 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E929 E8BE180000              call 004501EC

* Possible StringData Ref from Data Obj ->"ͳq"
                                  |
:0044E92E 6870CD4700              push 0047CD70
:0044E933 6A2E                    push 0000002E
:0044E935 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E938 E8AF180000              call 004501EC
:0044E93D 6A15                    push 00000015
:0044E93F 8A4508                  mov al, byte ptr [ebp+08]
:0044E942 50                      push eax
:0044E943 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E946 E867190000              call 004502B2
:0044E94B 6A01                    push 00000001
:0044E94D 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E950 51                      push ecx
:0044E951 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E954 E831180000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E959 687CCD4700              push 0047CD7C
:0044E95E 6A2F                    push 0000002F
:0044E960 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E963 E884180000              call 004501EC
:0044E968 6A16                    push 00000016
:0044E96A 8A5508                  mov dl, byte ptr [ebp+08]
:0044E96D 52                      push edx
:0044E96E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E971 E83C190000              call 004502B2
:0044E976 E9D5160000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E900(C)
|
:0044E97B 8B4508                  mov eax, dword ptr [ebp+08]
:0044E97E 25FF000000              and eax, 000000FF
:0044E983 83F80E                  cmp eax, 0000000E
:0044E986 740E                    je 0044E996
:0044E988 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E98B 81E1FF000000            and ecx, 000000FF
:0044E991 83F91C                  cmp ecx, 0000001C
:0044E994 7569                    jne 0044E9FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E986(C)
|
:0044E996 6A00                    push 00000000
:0044E998 8A5508                  mov dl, byte ptr [ebp+08]
:0044E99B 52                      push edx
:0044E99C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E99F E8E6170000              call 0045018A
:0044E9A4 6A01                    push 00000001
:0044E9A6 8A4508                  mov al, byte ptr [ebp+08]
:0044E9A9 50                      push eax
:0044E9AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E9AD E8D8170000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044E9B2 6A02                    push 00000002
:0044E9B4 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E9B7 51                      push ecx
:0044E9B8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E9BB E8CA170000              call 0045018A

* Possible StringData Ref from Data Obj ->"QqL"
                                  |
:0044E9C0 6888CD4700              push 0047CD88
:0044E9C5 6A30                    push 00000030
:0044E9C7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E9CA E81D180000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044E9CF 6A03                    push 00000003
:0044E9D1 8A5508                  mov dl, byte ptr [ebp+08]
:0044E9D4 52                      push edx
:0044E9D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E9D8 E8AD170000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044E9DD 6894CD4700              push 0047CD94
:0044E9E2 6A31                    push 00000031
:0044E9E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E9E7 E800180000              call 004501EC
:0044E9EC 6A17                    push 00000017
:0044E9EE 8A4508                  mov al, byte ptr [ebp+08]
:0044E9F1 50                      push eax
:0044E9F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E9F5 E8B8180000              call 004502B2
:0044E9FA E951160000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E994(C)
|
:0044E9FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EA02 81E1FF000000            and ecx, 000000FF
:0044EA08 83F90F                  cmp ecx, 0000000F
:0044EA0B 740E                    je 0044EA1B
:0044EA0D 8B5508                  mov edx, dword ptr [ebp+08]
:0044EA10 81E2FF000000            and edx, 000000FF
:0044EA16 83FA1D                  cmp edx, 0000001D
:0044EA19 7578                    jne 0044EA93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EA0B(C)
|
:0044EA1B 6A00                    push 00000000
:0044EA1D 8A4508                  mov al, byte ptr [ebp+08]
:0044EA20 50                      push eax
:0044EA21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA24 E861170000              call 0045018A

* Possible StringData Ref from Data Obj ->"LF"
                                  |
:0044EA29 68A0CD4700              push 0047CDA0
:0044EA2E 6A32                    push 00000032
:0044EA30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA33 E8B4170000              call 004501EC

* Possible StringData Ref from Data Obj ->"­ܸq"
                                  |
:0044EA38 68ACCD4700              push 0047CDAC
:0044EA3D 6A33                    push 00000033
:0044EA3F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA42 E8A5170000              call 004501EC
:0044EA47 6A01                    push 00000001
:0044EA49 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EA4C 51                      push ecx
:0044EA4D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA50 E835170000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EA55 68B8CD4700              push 0047CDB8
:0044EA5A 6A34                    push 00000034
:0044EA5C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA5F E888170000              call 004501EC
:0044EA64 6A18                    push 00000018
:0044EA66 8A5508                  mov dl, byte ptr [ebp+08]
:0044EA69 52                      push edx
:0044EA6A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA6D E840180000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044EA72 6A02                    push 00000002
:0044EA74 8A4508                  mov al, byte ptr [ebp+08]
:0044EA77 50                      push eax
:0044EA78 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA7B E80A170000              call 0045018A
:0044EA80 6A19                    push 00000019
:0044EA82 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EA85 51                      push ecx
:0044EA86 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EA89 E824180000              call 004502B2
:0044EA8E E9BD150000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EA19(C)
|
:0044EA93 8B5508                  mov edx, dword ptr [ebp+08]
:0044EA96 81E2FF000000            and edx, 000000FF
:0044EA9C 83FA10                  cmp edx, 00000010
:0044EA9F 740D                    je 0044EAAE
:0044EAA1 8B4508                  mov eax, dword ptr [ebp+08]
:0044EAA4 25FF000000              and eax, 000000FF
:0044EAA9 83F81E                  cmp eax, 0000001E
:0044EAAC 756A                    jne 0044EB18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EA9F(C)
|
:0044EAAE 6A00                    push 00000000
:0044EAB0 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EAB3 51                      push ecx
:0044EAB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EAB7 E8CE160000              call 0045018A

* Possible StringData Ref from Data Obj ->"Zгӿ"
                                  |
:0044EABC 68C4CD4700              push 0047CDC4
:0044EAC1 6A35                    push 00000035
:0044EAC3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EAC6 E821170000              call 004501EC
:0044EACB 6A01                    push 00000001
:0044EACD 8A5508                  mov dl, byte ptr [ebp+08]
:0044EAD0 52                      push edx
:0044EAD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EAD4 E8B1160000              call 0045018A

* Possible StringData Ref from Data Obj ->"@}1"
                                  |
:0044EAD9 68D0CD4700              push 0047CDD0
:0044EADE 6A36                    push 00000036
:0044EAE0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EAE3 E804170000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044EAE8 6A02                    push 00000002
:0044EAEA 8A4508                  mov al, byte ptr [ebp+08]
:0044EAED 50                      push eax
:0044EAEE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EAF1 E894160000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EAF6 68D8CD4700              push 0047CDD8
:0044EAFB 6A37                    push 00000037
:0044EAFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB00 E8E7160000              call 004501EC
:0044EB05 6A1A                    push 0000001A
:0044EB07 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EB0A 51                      push ecx
:0044EB0B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB0E E89F170000              call 004502B2
:0044EB13 E938150000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EAAC(C)
|
:0044EB18 8B5508                  mov edx, dword ptr [ebp+08]
:0044EB1B 81E2FF000000            and edx, 000000FF
:0044EB21 83FA11                  cmp edx, 00000011
:0044EB24 7411                    je 0044EB37
:0044EB26 8B4508                  mov eax, dword ptr [ebp+08]
:0044EB29 25FF000000              and eax, 000000FF
:0044EB2E 83F81F                  cmp eax, 0000001F
:0044EB31 0F85B0000000            jne 0044EBE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EB24(C)
|
:0044EB37 6A00                    push 00000000
:0044EB39 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EB3C 51                      push ecx
:0044EB3D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB40 E845160000              call 0045018A

* Possible StringData Ref from Data Obj ->"Zгӿ"
                                  |
:0044EB45 68E4CD4700              push 0047CDE4
:0044EB4A 6A38                    push 00000038
:0044EB4C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB4F E898160000              call 004501EC
:0044EB54 6A1B                    push 0000001B
:0044EB56 8A5508                  mov dl, byte ptr [ebp+08]
:0044EB59 52                      push edx
:0044EB5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB5D E850170000              call 004502B2
:0044EB62 6A01                    push 00000001
:0044EB64 8A4508                  mov al, byte ptr [ebp+08]
:0044EB67 50                      push eax
:0044EB68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB6B E81A160000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044EB70 6A02                    push 00000002
:0044EB72 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EB75 51                      push ecx
:0044EB76 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB79 E80C160000              call 0045018A

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044EB7E 68F0CD4700              push 0047CDF0
:0044EB83 6A39                    push 00000039
:0044EB85 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB88 E85F160000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044EB8D 6A03                    push 00000003
:0044EB8F 8A5508                  mov dl, byte ptr [ebp+08]
:0044EB92 52                      push edx
:0044EB93 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB96 E8EF150000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EB9B 68FCCD4700              push 0047CDFC
:0044EBA0 6A3A                    push 0000003A
:0044EBA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EBA5 E842160000              call 004501EC
:0044EBAA 6A1C                    push 0000001C
:0044EBAC 8A4508                  mov al, byte ptr [ebp+08]
:0044EBAF 50                      push eax
:0044EBB0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EBB3 E8FA160000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044EBB8 6A04                    push 00000004
:0044EBBA 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EBBD 51                      push ecx
:0044EBBE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EBC1 E8C4150000              call 0045018A
:0044EBC6 8B5508                  mov edx, dword ptr [ebp+08]
:0044EBC9 81E2FF000000            and edx, 000000FF
:0044EBCF 83FA11                  cmp edx, 00000011
:0044EBD2 750E                    jne 0044EBE2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044EBD4 6A05                    push 00000005
:0044EBD6 8A4508                  mov al, byte ptr [ebp+08]
:0044EBD9 50                      push eax
:0044EBDA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EBDD E8A8150000              call 0045018A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EBD2(C)
|
:0044EBE2 E969140000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EB31(C)
|
:0044EBE7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EBEA 81E1FF000000            and ecx, 000000FF
:0044EBF0 83F912                  cmp ecx, 00000012
:0044EBF3 0F8595000000            jne 0044EC8E
:0044EBF9 6A00                    push 00000000
:0044EBFB 8A5508                  mov dl, byte ptr [ebp+08]
:0044EBFE 52                      push edx
:0044EBFF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC02 E883150000              call 0045018A

* Possible StringData Ref from Data Obj ->"p"
                                  |
:0044EC07 6808CE4700              push 0047CE08
:0044EC0C 6A3B                    push 0000003B
:0044EC0E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC11 E8D6150000              call 004501EC

* Possible StringData Ref from Data Obj ->"Цp"
                                  |
:0044EC16 6810CE4700              push 0047CE10
:0044EC1B 6A3C                    push 0000003C
:0044EC1D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC20 E8C7150000              call 004501EC
:0044EC25 6A01                    push 00000001
:0044EC27 8A4508                  mov al, byte ptr [ebp+08]
:0044EC2A 50                      push eax
:0044EC2B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC2E E857150000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EC33 6818CE4700              push 0047CE18
:0044EC38 6A3D                    push 0000003D
:0044EC3A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC3D E8AA150000              call 004501EC
:0044EC42 6A1D                    push 0000001D
:0044EC44 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EC47 51                      push ecx
:0044EC48 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC4B E862160000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044EC50 6A02                    push 00000002
:0044EC52 8A5508                  mov dl, byte ptr [ebp+08]
:0044EC55 52                      push edx
:0044EC56 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC59 E82C150000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044EC5E 6A03                    push 00000003
:0044EC60 8A4508                  mov al, byte ptr [ebp+08]
:0044EC63 50                      push eax
:0044EC64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC67 E81E150000              call 0045018A

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:0044EC6C 6824CE4700              push 0047CE24
:0044EC71 6A3E                    push 0000003E
:0044EC73 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC76 E871150000              call 004501EC
:0044EC7B 6A1E                    push 0000001E
:0044EC7D 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EC80 51                      push ecx
:0044EC81 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC84 E829160000              call 004502B2
:0044EC89 E9C2130000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EBF3(C)
|
:0044EC8E 8B5508                  mov edx, dword ptr [ebp+08]
:0044EC91 81E2FF000000            and edx, 000000FF
:0044EC97 83FA13                  cmp edx, 00000013
:0044EC9A 7569                    jne 0044ED05
:0044EC9C 6A00                    push 00000000
:0044EC9E 8A4508                  mov al, byte ptr [ebp+08]
:0044ECA1 50                      push eax
:0044ECA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ECA5 E8E0140000              call 0045018A

* Possible StringData Ref from Data Obj ->"Qä[q"
                                  |
:0044ECAA 6830CE4700              push 0047CE30
:0044ECAF 6A3F                    push 0000003F
:0044ECB1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ECB4 E833150000              call 004501EC
:0044ECB9 6A01                    push 00000001
:0044ECBB 8A4D08                  mov cl, byte ptr [ebp+08]
:0044ECBE 51                      push ecx
:0044ECBF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ECC2 E8C3140000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044ECC7 683CCE4700              push 0047CE3C
:0044ECCC 6A40                    push 00000040
:0044ECCE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ECD1 E816150000              call 004501EC
:0044ECD6 6A1F                    push 0000001F
:0044ECD8 8A5508                  mov dl, byte ptr [ebp+08]
:0044ECDB 52                      push edx
:0044ECDC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ECDF E8CE150000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044ECE4 6A02                    push 00000002
:0044ECE6 8A4508                  mov al, byte ptr [ebp+08]
:0044ECE9 50                      push eax
:0044ECEA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ECED E898140000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044ECF2 6A03                    push 00000003
:0044ECF4 8A4D08                  mov cl, byte ptr [ebp+08]
:0044ECF7 51                      push ecx
:0044ECF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ECFB E88A140000              call 0045018A
:0044ED00 E94B130000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EC9A(C)
|
:0044ED05 8B5508                  mov edx, dword ptr [ebp+08]
:0044ED08 81E2FF000000            and edx, 000000FF
:0044ED0E 83FA14                  cmp edx, 00000014
:0044ED11 7569                    jne 0044ED7C
:0044ED13 6A00                    push 00000000
:0044ED15 8A4508                  mov al, byte ptr [ebp+08]
:0044ED18 50                      push eax
:0044ED19 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED1C E869140000              call 0045018A

* Possible StringData Ref from Data Obj ->""
                                  |
:0044ED21 6848CE4700              push 0047CE48
:0044ED26 6A41                    push 00000041
:0044ED28 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED2B E8BC140000              call 004501EC
:0044ED30 6A01                    push 00000001
:0044ED32 8A4D08                  mov cl, byte ptr [ebp+08]
:0044ED35 51                      push ecx
:0044ED36 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED39 E84C140000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044ED3E 6854CE4700              push 0047CE54
:0044ED43 6A42                    push 00000042
:0044ED45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED48 E89F140000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044ED4D 6A02                    push 00000002
:0044ED4F 8A5508                  mov dl, byte ptr [ebp+08]
:0044ED52 52                      push edx
:0044ED53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED56 E82F140000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044ED5B 6A03                    push 00000003
:0044ED5D 8A4508                  mov al, byte ptr [ebp+08]
:0044ED60 50                      push eax
:0044ED61 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED64 E821140000              call 0045018A
:0044ED69 6A20                    push 00000020
:0044ED6B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044ED6E 51                      push ecx
:0044ED6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED72 E83B150000              call 004502B2
:0044ED77 E9D4120000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ED11(C)
|
:0044ED7C 8B5508                  mov edx, dword ptr [ebp+08]
:0044ED7F 81E2FF000000            and edx, 000000FF
:0044ED85 83FA15                  cmp edx, 00000015
:0044ED88 753E                    jne 0044EDC8
:0044ED8A 6A00                    push 00000000
:0044ED8C 8A4508                  mov al, byte ptr [ebp+08]
:0044ED8F 50                      push eax
:0044ED90 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ED93 E8F2130000              call 0045018A
:0044ED98 6A01                    push 00000001
:0044ED9A 8A4D08                  mov cl, byte ptr [ebp+08]
:0044ED9D 51                      push ecx
:0044ED9E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EDA1 E8E4130000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EDA6 6860CE4700              push 0047CE60
:0044EDAB 6A43                    push 00000043
:0044EDAD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EDB0 E837140000              call 004501EC
:0044EDB5 6A21                    push 00000021
:0044EDB7 8A5508                  mov dl, byte ptr [ebp+08]
:0044EDBA 52                      push edx
:0044EDBB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EDBE E8EF140000              call 004502B2
:0044EDC3 E988120000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ED88(C)
|
:0044EDC8 8B4508                  mov eax, dword ptr [ebp+08]
:0044EDCB 25FF000000              and eax, 000000FF
:0044EDD0 83F817                  cmp eax, 00000017
:0044EDD3 0F8595000000            jne 0044EE6E

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EDD9 686CCE4700              push 0047CE6C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044EDDE 6A04                    push 00000004
:0044EDE0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EDE3 E804140000              call 004501EC

* Possible StringData Ref from Data Obj ->"j"
                                  |
:0044EDE8 6878CE4700              push 0047CE78

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044EDED 6A05                    push 00000005
:0044EDEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EDF2 E8F5130000              call 004501EC
:0044EDF7 6A00                    push 00000000
:0044EDF9 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EDFC 51                      push ecx
:0044EDFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE00 E885130000              call 0045018A
:0044EE05 6A01                    push 00000001
:0044EE07 8A5508                  mov dl, byte ptr [ebp+08]
:0044EE0A 52                      push edx
:0044EE0B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE0E E877130000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044EE13 6A02                    push 00000002
:0044EE15 8A4508                  mov al, byte ptr [ebp+08]
:0044EE18 50                      push eax
:0044EE19 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE1C E869130000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044EE21 6A03                    push 00000003
:0044EE23 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EE26 51                      push ecx
:0044EE27 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE2A E85B130000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044EE2F 6A04                    push 00000004
:0044EE31 8A5508                  mov dl, byte ptr [ebp+08]
:0044EE34 52                      push edx
:0044EE35 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE38 E84D130000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EE3D 6884CE4700              push 0047CE84

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044EE42 6A06                    push 00000006
:0044EE44 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE47 E8A0130000              call 004501EC

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EE4C 6890CE4700              push 0047CE90

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044EE51 6A07                    push 00000007
:0044EE53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE56 E891130000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044EE5B 6A03                    push 00000003
:0044EE5D 8A4508                  mov al, byte ptr [ebp+08]
:0044EE60 50                      push eax
:0044EE61 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE64 E849140000              call 004502B2
:0044EE69 E9E2110000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EDD3(C)
|
:0044EE6E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EE71 81E1FF000000            and ecx, 000000FF
:0044EE77 83F919                  cmp ecx, 00000019
:0044EE7A 755B                    jne 0044EED7
:0044EE7C 6A00                    push 00000000
:0044EE7E 8A5508                  mov dl, byte ptr [ebp+08]
:0044EE81 52                      push edx
:0044EE82 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE85 E800130000              call 0045018A
:0044EE8A 6A01                    push 00000001
:0044EE8C 8A4508                  mov al, byte ptr [ebp+08]
:0044EE8F 50                      push eax
:0044EE90 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE93 E8F2120000              call 0045018A

* Possible StringData Ref from Data Obj ->"­ܸq"
                                  |
:0044EE98 689CCE4700              push 0047CE9C
:0044EE9D 6A26                    push 00000026
:0044EE9F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EEA2 E845130000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044EEA7 6A02                    push 00000002
:0044EEA9 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EEAC 51                      push ecx
:0044EEAD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EEB0 E8D5120000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EEB5 68A8CE4700              push 0047CEA8
:0044EEBA 6A27                    push 00000027
:0044EEBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EEBF E828130000              call 004501EC

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0044EEC4 6A10                    push 00000010
:0044EEC6 8A5508                  mov dl, byte ptr [ebp+08]
:0044EEC9 52                      push edx
:0044EECA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EECD E8E0130000              call 004502B2
:0044EED2 E979110000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EE7A(C)
|
:0044EED7 8B4508                  mov eax, dword ptr [ebp+08]
:0044EEDA 25FF000000              and eax, 000000FF
:0044EEDF 83F820                  cmp eax, 00000020
:0044EEE2 0F8595000000            jne 0044EF7D
:0044EEE8 6A00                    push 00000000
:0044EEEA 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EEED 51                      push ecx
:0044EEEE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EEF1 E894120000              call 0045018A

* Possible StringData Ref from Data Obj ->"p"
                                  |
:0044EEF6 68B4CE4700              push 0047CEB4
:0044EEFB 6A3B                    push 0000003B
:0044EEFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF00 E8E7120000              call 004501EC

* Possible StringData Ref from Data Obj ->"Цp"
                                  |
:0044EF05 68BCCE4700              push 0047CEBC
:0044EF0A 6A3C                    push 0000003C
:0044EF0C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF0F E8D8120000              call 004501EC
:0044EF14 6A01                    push 00000001
:0044EF16 8A5508                  mov dl, byte ptr [ebp+08]
:0044EF19 52                      push edx
:0044EF1A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF1D E868120000              call 0045018A

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:0044EF22 68C4CE4700              push 0047CEC4
:0044EF27 6A3E                    push 0000003E
:0044EF29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF2C E8BB120000              call 004501EC
:0044EF31 6A1E                    push 0000001E
:0044EF33 8A4508                  mov al, byte ptr [ebp+08]
:0044EF36 50                      push eax
:0044EF37 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF3A E873130000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044EF3F 6A02                    push 00000002
:0044EF41 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EF44 51                      push ecx
:0044EF45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF48 E83D120000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EF4D 68D0CE4700              push 0047CED0
:0044EF52 6A3D                    push 0000003D
:0044EF54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF57 E890120000              call 004501EC
:0044EF5C 6A1D                    push 0000001D
:0044EF5E 8A5508                  mov dl, byte ptr [ebp+08]
:0044EF61 52                      push edx
:0044EF62 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF65 E848130000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044EF6A 6A03                    push 00000003
:0044EF6C 8A4508                  mov al, byte ptr [ebp+08]
:0044EF6F 50                      push eax
:0044EF70 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF73 E812120000              call 0045018A
:0044EF78 E9D3100000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EEE2(C)
|
:0044EF7D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EF80 81E1FF000000            and ecx, 000000FF
:0044EF86 83F921                  cmp ecx, 00000021
:0044EF89 0F8598000000            jne 0044F027

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044EF8F 68DCCE4700              push 0047CEDC
:0044EF94 6881000000              push 00000081
:0044EF99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF9C E84B120000              call 004501EC

* Possible StringData Ref from Data Obj ->"tq"
                                  |
:0044EFA1 68E8CE4700              push 0047CEE8
:0044EFA6 6A45                    push 00000045
:0044EFA8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EFAB E83C120000              call 004501EC
:0044EFB0 6A22                    push 00000022
:0044EFB2 8A5508                  mov dl, byte ptr [ebp+08]
:0044EFB5 52                      push edx
:0044EFB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EFB9 E8F4120000              call 004502B2
:0044EFBE 6A00                    push 00000000
:0044EFC0 8A4508                  mov al, byte ptr [ebp+08]
:0044EFC3 50                      push eax
:0044EFC4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EFC7 E8BE110000              call 0045018A

* Possible StringData Ref from Data Obj ->"Qd"
                                  |
:0044EFCC 68F4CE4700              push 0047CEF4
:0044EFD1 6A46                    push 00000046
:0044EFD3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EFD6 E811120000              call 004501EC

* Possible StringData Ref from Data Obj ->"¤`"
                                  |
:0044EFDB 6800CF4700              push 0047CF00
:0044EFE0 6A47                    push 00000047
:0044EFE2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EFE5 E802120000              call 004501EC
:0044EFEA 6A01                    push 00000001
:0044EFEC 8A4D08                  mov cl, byte ptr [ebp+08]
:0044EFEF 51                      push ecx
:0044EFF0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EFF3 E892110000              call 0045018A
:0044EFF8 6A23                    push 00000023
:0044EFFA 8A5508                  mov dl, byte ptr [ebp+08]
:0044EFFD 52                      push edx
:0044EFFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F001 E8AC120000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F006 6A02                    push 00000002
:0044F008 8A4508                  mov al, byte ptr [ebp+08]
:0044F00B 50                      push eax
:0044F00C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F00F E876110000              call 0045018A
:0044F014 6A24                    push 00000024
:0044F016 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F019 51                      push ecx
:0044F01A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F01D E890120000              call 004502B2
:0044F022 E929100000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EF89(C)
|
:0044F027 8B5508                  mov edx, dword ptr [ebp+08]
:0044F02A 81E2FF000000            and edx, 000000FF
:0044F030 83FA22                  cmp edx, 00000022
:0044F033 0F8586000000            jne 0044F0BF

* Possible StringData Ref from Data Obj ->"ZЫH"
                                  |
:0044F039 680CCF4700              push 0047CF0C
:0044F03E 6A48                    push 00000048
:0044F040 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F043 E8A4110000              call 004501EC
:0044F048 6A00                    push 00000000
:0044F04A 8A4508                  mov al, byte ptr [ebp+08]
:0044F04D 50                      push eax
:0044F04E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F051 E834110000              call 0045018A
:0044F056 6A01                    push 00000001
:0044F058 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F05B 51                      push ecx
:0044F05C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F05F E826110000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F064 6A02                    push 00000002
:0044F066 8A5508                  mov dl, byte ptr [ebp+08]
:0044F069 52                      push edx
:0044F06A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F06D E818110000              call 0045018A

* Possible StringData Ref from Data Obj ->"Ns"
                                  |
:0044F072 6818CF4700              push 0047CF18
:0044F077 6A49                    push 00000049
:0044F079 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F07C E86B110000              call 004501EC

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F081 6824CF4700              push 0047CF24
:0044F086 6A4A                    push 0000004A
:0044F088 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F08B E85C110000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F090 6A03                    push 00000003
:0044F092 8A4508                  mov al, byte ptr [ebp+08]
:0044F095 50                      push eax
:0044F096 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F099 E8EC100000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F09E 6A04                    push 00000004
:0044F0A0 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F0A3 51                      push ecx
:0044F0A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F0A7 E8DE100000              call 0045018A
:0044F0AC 6A25                    push 00000025
:0044F0AE 8A5508                  mov dl, byte ptr [ebp+08]
:0044F0B1 52                      push edx
:0044F0B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F0B5 E8F8110000              call 004502B2
:0044F0BA E9910F0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F033(C)
|
:0044F0BF 8B4508                  mov eax, dword ptr [ebp+08]
:0044F0C2 25FF000000              and eax, 000000FF
:0044F0C7 83F824                  cmp eax, 00000024
:0044F0CA 0F85A3000000            jne 0044F173
:0044F0D0 6A00                    push 00000000
:0044F0D2 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F0D5 51                      push ecx
:0044F0D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F0D9 E8AC100000              call 0045018A
:0044F0DE 6A01                    push 00000001
:0044F0E0 8A5508                  mov dl, byte ptr [ebp+08]
:0044F0E3 52                      push edx
:0044F0E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F0E7 E89E100000              call 0045018A

* Possible StringData Ref from Data Obj ->"QqL"
                                  |
:0044F0EC 6830CF4700              push 0047CF30
:0044F0F1 6A4B                    push 0000004B
:0044F0F3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F0F6 E8F1100000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F0FB 6A02                    push 00000002
:0044F0FD 8A4508                  mov al, byte ptr [ebp+08]
:0044F100 50                      push eax
:0044F101 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F104 E881100000              call 0045018A

* Possible StringData Ref from Data Obj ->"ZЫH"
                                  |
:0044F109 683CCF4700              push 0047CF3C
:0044F10E 6A4C                    push 0000004C
:0044F110 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F113 E8D4100000              call 004501EC
:0044F118 6A26                    push 00000026
:0044F11A 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F11D 51                      push ecx
:0044F11E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F121 E88C110000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F126 6A03                    push 00000003
:0044F128 8A5508                  mov dl, byte ptr [ebp+08]
:0044F12B 52                      push edx
:0044F12C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F12F E856100000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F134 6848CF4700              push 0047CF48
:0044F139 6A4D                    push 0000004D
:0044F13B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F13E E8A9100000              call 004501EC

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044F143 6854CF4700              push 0047CF54
:0044F148 6A4E                    push 0000004E
:0044F14A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F14D E89A100000              call 004501EC
:0044F152 6A27                    push 00000027
:0044F154 8A4508                  mov al, byte ptr [ebp+08]
:0044F157 50                      push eax
:0044F158 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F15B E852110000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F160 6A04                    push 00000004
:0044F162 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F165 51                      push ecx
:0044F166 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F169 E81C100000              call 0045018A
:0044F16E E9DD0E0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F0CA(C)
|
:0044F173 8B5508                  mov edx, dword ptr [ebp+08]
:0044F176 81E2FF000000            and edx, 000000FF
:0044F17C 83FA27                  cmp edx, 00000027
:0044F17F 0F85A4000000            jne 0044F229
:0044F185 6A00                    push 00000000
:0044F187 8A4508                  mov al, byte ptr [ebp+08]
:0044F18A 50                      push eax
:0044F18B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F18E E8F70F0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F193 6860CF4700              push 0047CF60
:0044F198 6A4F                    push 0000004F
:0044F19A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F19D E84A100000              call 004501EC
:0044F1A2 6A28                    push 00000028
:0044F1A4 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F1A7 51                      push ecx
:0044F1A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F1AB E802110000              call 004502B2
:0044F1B0 6A01                    push 00000001
:0044F1B2 8A5508                  mov dl, byte ptr [ebp+08]
:0044F1B5 52                      push edx
:0044F1B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F1B9 E8CC0F0000              call 0045018A

* Possible StringData Ref from Data Obj ->"ZЫH"
                                  |
:0044F1BE 686CCF4700              push 0047CF6C
:0044F1C3 6A50                    push 00000050
:0044F1C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F1C8 E81F100000              call 004501EC
:0044F1CD 6A29                    push 00000029
:0044F1CF 8A4508                  mov al, byte ptr [ebp+08]
:0044F1D2 50                      push eax
:0044F1D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F1D6 E8D7100000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F1DB 6A02                    push 00000002
:0044F1DD 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F1E0 51                      push ecx
:0044F1E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F1E4 E8A10F0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Tnh"
                                  |
:0044F1E9 6878CF4700              push 0047CF78
:0044F1EE 6A51                    push 00000051
:0044F1F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F1F3 E8F40F0000              call 004501EC

* Possible StringData Ref from Data Obj ->"TnFd"
                                  |
:0044F1F8 6884CF4700              push 0047CF84
:0044F1FD 6A52                    push 00000052
:0044F1FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F202 E8E50F0000              call 004501EC

* Possible StringData Ref from Data Obj ->"ͳq"
                                  |
:0044F207 6890CF4700              push 0047CF90
:0044F20C 6A53                    push 00000053
:0044F20E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F211 E8D60F0000              call 004501EC
:0044F216 6A2A                    push 0000002A
:0044F218 8A5508                  mov dl, byte ptr [ebp+08]
:0044F21B 52                      push edx
:0044F21C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F21F E88E100000              call 004502B2
:0044F224 E9270E0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F17F(C)
|
:0044F229 8B4508                  mov eax, dword ptr [ebp+08]
:0044F22C 25FF000000              and eax, 000000FF
:0044F231 83F829                  cmp eax, 00000029
:0044F234 0F8594000000            jne 0044F2CE

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F23A 689CCF4700              push 0047CF9C
:0044F23F 6A34                    push 00000034
:0044F241 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F244 E8A30F0000              call 004501EC
:0044F249 6A18                    push 00000018
:0044F24B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F24E 51                      push ecx
:0044F24F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F252 E85B100000              call 004502B2
:0044F257 6A00                    push 00000000
:0044F259 8A5508                  mov dl, byte ptr [ebp+08]
:0044F25C 52                      push edx
:0044F25D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F260 E8250F0000              call 0045018A
:0044F265 6A01                    push 00000001
:0044F267 8A4508                  mov al, byte ptr [ebp+08]
:0044F26A 50                      push eax
:0044F26B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F26E E8170F0000              call 0045018A

* Possible StringData Ref from Data Obj ->"LF"
                                  |
:0044F273 68A8CF4700              push 0047CFA8
:0044F278 6A32                    push 00000032
:0044F27A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F27D E86A0F0000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F282 6A02                    push 00000002
:0044F284 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F287 51                      push ecx
:0044F288 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F28B E8FA0E0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F290 6A03                    push 00000003
:0044F292 8A5508                  mov dl, byte ptr [ebp+08]
:0044F295 52                      push edx
:0044F296 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F299 E8EC0E0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F29E 6A04                    push 00000004
:0044F2A0 8A4508                  mov al, byte ptr [ebp+08]
:0044F2A3 50                      push eax
:0044F2A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F2A7 E8DE0E0000              call 0045018A

* Possible StringData Ref from Data Obj ->"­ܸq"
                                  |
:0044F2AC 68B4CF4700              push 0047CFB4
:0044F2B1 6A33                    push 00000033
:0044F2B3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F2B6 E8310F0000              call 004501EC
:0044F2BB 6A19                    push 00000019
:0044F2BD 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F2C0 51                      push ecx
:0044F2C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F2C4 E8E90F0000              call 004502B2
:0044F2C9 E9820D0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F234(C)
|
:0044F2CE 8B5508                  mov edx, dword ptr [ebp+08]
:0044F2D1 81E2FF000000            and edx, 000000FF
:0044F2D7 83FA2A                  cmp edx, 0000002A
:0044F2DA 0F85BF000000            jne 0044F39F
:0044F2E0 6A00                    push 00000000
:0044F2E2 8A4508                  mov al, byte ptr [ebp+08]
:0044F2E5 50                      push eax
:0044F2E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F2E9 E89C0E0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F2EE 68C0CF4700              push 0047CFC0
:0044F2F3 6A54                    push 00000054
:0044F2F5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F2F8 E8EF0E0000              call 004501EC

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044F2FD 68CCCF4700              push 0047CFCC
:0044F302 6A55                    push 00000055
:0044F304 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F307 E8E00E0000              call 004501EC
:0044F30C 6A2B                    push 0000002B
:0044F30E 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F311 51                      push ecx
:0044F312 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F315 E8980F0000              call 004502B2
:0044F31A 6A2C                    push 0000002C
:0044F31C 8A5508                  mov dl, byte ptr [ebp+08]
:0044F31F 52                      push edx
:0044F320 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F323 E88A0F0000              call 004502B2

* Possible StringData Ref from Data Obj ->"LF"
                                  |
:0044F328 68D8CF4700              push 0047CFD8
:0044F32D 6A56                    push 00000056
:0044F32F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F332 E8B50E0000              call 004501EC
:0044F337 6A01                    push 00000001
:0044F339 8A4508                  mov al, byte ptr [ebp+08]
:0044F33C 50                      push eax
:0044F33D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F340 E8450E0000              call 0045018A
:0044F345 6A2D                    push 0000002D
:0044F347 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F34A 51                      push ecx
:0044F34B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F34E E85F0F0000              call 004502B2
:0044F353 6A2E                    push 0000002E
:0044F355 8A5508                  mov dl, byte ptr [ebp+08]
:0044F358 52                      push edx
:0044F359 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F35C E8510F0000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F361 6A02                    push 00000002
:0044F363 8A4508                  mov al, byte ptr [ebp+08]
:0044F366 50                      push eax
:0044F367 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F36A E81B0E0000              call 0045018A

* Possible StringData Ref from Data Obj ->"q"
                                  |
:0044F36F 68E4CF4700              push 0047CFE4
:0044F374 6A57                    push 00000057
:0044F376 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F379 E86E0E0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F37E 6A03                    push 00000003
:0044F380 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F383 51                      push ecx
:0044F384 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F387 E8FE0D0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F38C 6A04                    push 00000004
:0044F38E 8A5508                  mov dl, byte ptr [ebp+08]
:0044F391 52                      push edx
:0044F392 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F395 E8F00D0000              call 0045018A
:0044F39A E9B10C0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F2DA(C)
|
:0044F39F 8B4508                  mov eax, dword ptr [ebp+08]
:0044F3A2 25FF000000              and eax, 000000FF
:0044F3A7 83F82B                  cmp eax, 0000002B
:0044F3AA 0F8595000000            jne 0044F445

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F3B0 68F0CF4700              push 0047CFF0
:0044F3B5 6A58                    push 00000058
:0044F3B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F3BA E82D0E0000              call 004501EC
:0044F3BF 6A2F                    push 0000002F
:0044F3C1 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F3C4 51                      push ecx
:0044F3C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F3C8 E8E50E0000              call 004502B2
:0044F3CD 6A00                    push 00000000
:0044F3CF 8A5508                  mov dl, byte ptr [ebp+08]
:0044F3D2 52                      push edx
:0044F3D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F3D6 E8AF0D0000              call 0045018A
:0044F3DB 6A01                    push 00000001
:0044F3DD 8A4508                  mov al, byte ptr [ebp+08]
:0044F3E0 50                      push eax
:0044F3E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F3E4 E8A10D0000              call 0045018A

* Possible StringData Ref from Data Obj ->"p"
                                  |
:0044F3E9 68FCCF4700              push 0047CFFC
:0044F3EE 6A59                    push 00000059
:0044F3F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F3F3 E8F40D0000              call 004501EC

* Possible StringData Ref from Data Obj ->"LF"
                                  |
:0044F3F8 6804D04700              push 0047D004
:0044F3FD 6A5A                    push 0000005A
:0044F3FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F402 E8E50D0000              call 004501EC

* Possible StringData Ref from Data Obj ->"­ܸq"
                                  |
:0044F407 6810D04700              push 0047D010
:0044F40C 6A5B                    push 0000005B
:0044F40E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F411 E8D60D0000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F416 6A02                    push 00000002
:0044F418 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F41B 51                      push ecx
:0044F41C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F41F E8660D0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F424 6A03                    push 00000003
:0044F426 8A5508                  mov dl, byte ptr [ebp+08]
:0044F429 52                      push edx
:0044F42A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F42D E8580D0000              call 0045018A
:0044F432 6A30                    push 00000030
:0044F434 8A4508                  mov al, byte ptr [ebp+08]
:0044F437 50                      push eax
:0044F438 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F43B E8720E0000              call 004502B2
:0044F440 E90B0C0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F3AA(C)
|
:0044F445 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F448 81E1FF000000            and ecx, 000000FF
:0044F44E 83F92C                  cmp ecx, 0000002C
:0044F451 0F8594000000            jne 0044F4EB

* Possible StringData Ref from Data Obj ->"ZЫH"
                                  |
:0044F457 681CD04700              push 0047D01C
:0044F45C 6A5C                    push 0000005C
:0044F45E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F461 E8860D0000              call 004501EC
:0044F466 6A31                    push 00000031
:0044F468 8A5508                  mov dl, byte ptr [ebp+08]
:0044F46B 52                      push edx
:0044F46C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F46F E83E0E0000              call 004502B2
:0044F474 6A00                    push 00000000
:0044F476 8A4508                  mov al, byte ptr [ebp+08]
:0044F479 50                      push eax
:0044F47A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F47D E8080D0000              call 0045018A
:0044F482 6A01                    push 00000001
:0044F484 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F487 51                      push ecx
:0044F488 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F48B E8FA0C0000              call 0045018A

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044F490 6828D04700              push 0047D028
:0044F495 6A5D                    push 0000005D
:0044F497 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F49A E84D0D0000              call 004501EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F49F 6A02                    push 00000002
:0044F4A1 8A5508                  mov dl, byte ptr [ebp+08]
:0044F4A4 52                      push edx
:0044F4A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F4A8 E8DD0C0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F4AD 6834D04700              push 0047D034
:0044F4B2 6A5E                    push 0000005E
:0044F4B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F4B7 E8300D0000              call 004501EC
:0044F4BC 6A32                    push 00000032
:0044F4BE 8A4508                  mov al, byte ptr [ebp+08]
:0044F4C1 50                      push eax
:0044F4C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F4C5 E8E80D0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F4CA 6A03                    push 00000003
:0044F4CC 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F4CF 51                      push ecx
:0044F4D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F4D3 E8B20C0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F4D8 6A04                    push 00000004
:0044F4DA 8A5508                  mov dl, byte ptr [ebp+08]
:0044F4DD 52                      push edx
:0044F4DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F4E1 E8A40C0000              call 0045018A
:0044F4E6 E9650B0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F451(C)
|
:0044F4EB 8B4508                  mov eax, dword ptr [ebp+08]
:0044F4EE 25FF000000              and eax, 000000FF
:0044F4F3 83F82D                  cmp eax, 0000002D
:0044F4F6 0F8586000000            jne 0044F582

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F4FC 6840D04700              push 0047D040
:0044F501 6A5F                    push 0000005F
:0044F503 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F506 E8E10C0000              call 004501EC

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044F50B 684CD04700              push 0047D04C
:0044F510 6A60                    push 00000060
:0044F512 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F515 E8D20C0000              call 004501EC
:0044F51A 6A33                    push 00000033
:0044F51C 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F51F 51                      push ecx
:0044F520 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F523 E88A0D0000              call 004502B2
:0044F528 6A00                    push 00000000
:0044F52A 8A5508                  mov dl, byte ptr [ebp+08]
:0044F52D 52                      push edx
:0044F52E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F531 E8540C0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Zгӿ"
                                  |
:0044F536 6858D04700              push 0047D058
:0044F53B 6A61                    push 00000061
:0044F53D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F540 E8A70C0000              call 004501EC
:0044F545 6A34                    push 00000034
:0044F547 8A4508                  mov al, byte ptr [ebp+08]
:0044F54A 50                      push eax
:0044F54B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F54E E85F0D0000              call 004502B2
:0044F553 6A01                    push 00000001
:0044F555 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F558 51                      push ecx
:0044F559 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F55C E8290C0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F561 6A02                    push 00000002
:0044F563 8A5508                  mov dl, byte ptr [ebp+08]
:0044F566 52                      push edx
:0044F567 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F56A E81B0C0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F56F 6A03                    push 00000003
:0044F571 8A4508                  mov al, byte ptr [ebp+08]
:0044F574 50                      push eax
:0044F575 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F578 E80D0C0000              call 0045018A
:0044F57D E9CE0A0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F4F6(C)
|
:0044F582 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F585 81E1FF000000            and ecx, 000000FF
:0044F58B 83F92E                  cmp ecx, 0000002E
:0044F58E 0F85A2000000            jne 0044F636
:0044F594 6A00                    push 00000000
:0044F596 8A5508                  mov dl, byte ptr [ebp+08]
:0044F599 52                      push edx
:0044F59A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F59D E8E80B0000              call 0045018A

* Possible StringData Ref from Data Obj ->"WH"
                                  |
:0044F5A2 6864D04700              push 0047D064
:0044F5A7 6A62                    push 00000062
:0044F5A9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F5AC E83B0C0000              call 004501EC
:0044F5B1 6A35                    push 00000035
:0044F5B3 8A4508                  mov al, byte ptr [ebp+08]
:0044F5B6 50                      push eax
:0044F5B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F5BA E8F30C0000              call 004502B2
:0044F5BF 6A01                    push 00000001
:0044F5C1 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F5C4 51                      push ecx
:0044F5C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F5C8 E8BD0B0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F5CD 6A02                    push 00000002
:0044F5CF 8A5508                  mov dl, byte ptr [ebp+08]
:0044F5D2 52                      push edx
:0044F5D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F5D6 E8AF0B0000              call 0045018A

* Possible StringData Ref from Data Obj ->"гӮa"
                                  |
:0044F5DB 6870D04700              push 0047D070
:0044F5E0 6A63                    push 00000063
:0044F5E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F5E5 E8020C0000              call 004501EC

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F5EA 687CD04700              push 0047D07C
:0044F5EF 6A64                    push 00000064
:0044F5F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F5F4 E8F30B0000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F5F9 6A03                    push 00000003
:0044F5FB 8A4508                  mov al, byte ptr [ebp+08]
:0044F5FE 50                      push eax
:0044F5FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F602 E8830B0000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F607 6A04                    push 00000004
:0044F609 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F60C 51                      push ecx
:0044F60D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F610 E8750B0000              call 0045018A
:0044F615 6A36                    push 00000036
:0044F617 8A5508                  mov dl, byte ptr [ebp+08]
:0044F61A 52                      push edx
:0044F61B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F61E E88F0C0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044F623 6A05                    push 00000005
:0044F625 8A4508                  mov al, byte ptr [ebp+08]
:0044F628 50                      push eax
:0044F629 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F62C E8590B0000              call 0045018A
:0044F631 E91A0A0000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F58E(C)
|
:0044F636 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F639 81E1FF000000            and ecx, 000000FF
:0044F63F 83F92F                  cmp ecx, 0000002F
:0044F642 0F85CE000000            jne 0044F716

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F648 6888D04700              push 0047D088

* Possible Ref to Menu: APPMENU, Item: "2X(S)"
                                  |
:0044F64D 6A65                    push 00000065
:0044F64F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F652 E8950B0000              call 004501EC

* Possible StringData Ref from Data Obj ->"p"
                                  |
:0044F657 6894D04700              push 0047D094

* Possible Ref to Menu: APPMENU, Item: "   e(L)"
                                  |
:0044F65C 6A66                    push 00000066
:0044F65E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F661 E8860B0000              call 004501EC
:0044F666 6A00                    push 00000000
:0044F668 8A5508                  mov dl, byte ptr [ebp+08]
:0044F66B 52                      push edx
:0044F66C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F66F E8160B0000              call 0045018A

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:0044F674 689CD04700              push 0047D09C
:0044F679 6A67                    push 00000067
:0044F67B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F67E E8690B0000              call 004501EC
:0044F683 6A01                    push 00000001
:0044F685 8A4508                  mov al, byte ptr [ebp+08]
:0044F688 50                      push eax
:0044F689 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F68C E8F90A0000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F691 6A02                    push 00000002
:0044F693 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F696 51                      push ecx
:0044F697 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F69A E8EB0A0000              call 0045018A
:0044F69F 6A37                    push 00000037
:0044F6A1 8A5508                  mov dl, byte ptr [ebp+08]
:0044F6A4 52                      push edx
:0044F6A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6A8 E8050C0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F6AD 6A03                    push 00000003
:0044F6AF 8A4508                  mov al, byte ptr [ebp+08]
:0044F6B2 50                      push eax
:0044F6B3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6B6 E8CF0A0000              call 0045018A

* Possible StringData Ref from Data Obj ->"NtK"
                                  |
:0044F6BB 68A8D04700              push 0047D0A8

* Possible Ref to Menu: APPMENU, Item: "J2P_(X)"
                                  |
:0044F6C0 6A68                    push 00000068
:0044F6C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6C5 E8220B0000              call 004501EC
:0044F6CA 6A38                    push 00000038
:0044F6CC 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F6CF 51                      push ecx
:0044F6D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6D3 E8DA0B0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F6D8 6A04                    push 00000004
:0044F6DA 8A5508                  mov dl, byte ptr [ebp+08]
:0044F6DD 52                      push edx
:0044F6DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6E1 E8A40A0000              call 0045018A

* Possible StringData Ref from Data Obj ->"WZN"
                                  |
:0044F6E6 68B4D04700              push 0047D0B4

* Possible Ref to Menu: APPMENU, Item: "f1(B)"
                                  |
:0044F6EB 6A69                    push 00000069
:0044F6ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6F0 E8F70A0000              call 004501EC
:0044F6F5 6A39                    push 00000039
:0044F6F7 8A4508                  mov al, byte ptr [ebp+08]
:0044F6FA 50                      push eax
:0044F6FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6FE E8AF0B0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044F703 6A05                    push 00000005
:0044F705 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F708 51                      push ecx
:0044F709 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F70C E8790A0000              call 0045018A
:0044F711 E93A090000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F642(C)
|
:0044F716 8B5508                  mov edx, dword ptr [ebp+08]
:0044F719 81E2FF000000            and edx, 000000FF
:0044F71F 83FA30                  cmp edx, 00000030
:0044F722 7569                    jne 0044F78D
:0044F724 6A00                    push 00000000
:0044F726 8A4508                  mov al, byte ptr [ebp+08]
:0044F729 50                      push eax
:0044F72A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F72D E8580A0000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F732 68C0D04700              push 0047D0C0

* Possible Ref to Menu: APPMENU, Item: ")(T)"
                                  |
:0044F737 6A6A                    push 0000006A
:0044F739 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F73C E8AB0A0000              call 004501EC
:0044F741 6A3A                    push 0000003A
:0044F743 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F746 51                      push ecx
:0044F747 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F74A E8630B0000              call 004502B2
:0044F74F 6A01                    push 00000001
:0044F751 8A5508                  mov dl, byte ptr [ebp+08]
:0044F754 52                      push edx
:0044F755 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F758 E82D0A0000              call 0045018A

* Possible StringData Ref from Data Obj ->"q"
                                  |
:0044F75D 68CCD04700              push 0047D0CC

* Possible Ref to Menu: APPMENU, Item: "-(K)"
                                  |
:0044F762 6A6B                    push 0000006B
:0044F764 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F767 E8800A0000              call 004501EC
:0044F76C 6A3B                    push 0000003B
:0044F76E 8A4508                  mov al, byte ptr [ebp+08]
:0044F771 50                      push eax
:0044F772 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F775 E8380B0000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F77A 6A02                    push 00000002
:0044F77C 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F77F 51                      push ecx
:0044F780 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F783 E8020A0000              call 0045018A
:0044F788 E9C3080000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F722(C)
|
:0044F78D 8B5508                  mov edx, dword ptr [ebp+08]
:0044F790 81E2FF000000            and edx, 000000FF
:0044F796 83FA31                  cmp edx, 00000031
:0044F799 0F85A2000000            jne 0044F841
:0044F79F 6A00                    push 00000000
:0044F7A1 8A4508                  mov al, byte ptr [ebp+08]
:0044F7A4 50                      push eax
:0044F7A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F7A8 E8DD090000              call 0045018A

* Possible StringData Ref from Data Obj ->"ЮqN"
                                  |
:0044F7AD 68D8D04700              push 0047D0D8

* Possible Ref to Menu: APPMENU, Item: "04.(J)"
                                  |
:0044F7B2 6A6C                    push 0000006C
:0044F7B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F7B7 E8300A0000              call 004501EC
:0044F7BC 6A3C                    push 0000003C
:0044F7BE 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F7C1 51                      push ecx
:0044F7C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F7C5 E8E80A0000              call 004502B2
:0044F7CA 6A01                    push 00000001
:0044F7CC 8A5508                  mov dl, byte ptr [ebp+08]
:0044F7CF 52                      push edx
:0044F7D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F7D3 E8B2090000              call 0045018A

* Possible StringData Ref from Data Obj ->"q"
                                  |
:0044F7D8 68E4D04700              push 0047D0E4

* Possible Ref to Menu: APPMENU, Item: "   P_(E)"
                                  |
:0044F7DD 6A6D                    push 0000006D
:0044F7DF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F7E2 E8050A0000              call 004501EC
:0044F7E7 6A3D                    push 0000003D
:0044F7E9 8A4508                  mov al, byte ptr [ebp+08]
:0044F7EC 50                      push eax
:0044F7ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F7F0 E8BD0A0000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F7F5 6A02                    push 00000002
:0044F7F7 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F7FA 51                      push ecx
:0044F7FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F7FE E887090000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F803 68F0D04700              push 0047D0F0
:0044F808 6A6E                    push 0000006E
:0044F80A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F80D E8DA090000              call 004501EC
:0044F812 6A3E                    push 0000003E
:0044F814 8A5508                  mov dl, byte ptr [ebp+08]
:0044F817 52                      push edx
:0044F818 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F81B E8920A0000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044F820 6A03                    push 00000003
:0044F822 8A4508                  mov al, byte ptr [ebp+08]
:0044F825 50                      push eax
:0044F826 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F829 E85C090000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F82E 6A04                    push 00000004
:0044F830 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F833 51                      push ecx
:0044F834 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F837 E84E090000              call 0045018A
:0044F83C E90F080000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F799(C)
|
:0044F841 8B5508                  mov edx, dword ptr [ebp+08]
:0044F844 81E2FF000000            and edx, 000000FF
:0044F84A 83FA32                  cmp edx, 00000032
:0044F84D 0F8587000000            jne 0044F8DA
:0044F853 6A00                    push 00000000
:0044F855 8A4508                  mov al, byte ptr [ebp+08]
:0044F858 50                      push eax
:0044F859 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F85C E829090000              call 0045018A

* Possible StringData Ref from Data Obj ->"[F"
                                  |
:0044F861 68FCD04700              push 0047D0FC
:0044F866 6A6F                    push 0000006F
:0044F868 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F86B E87C090000              call 004501EC

* Possible StringData Ref from Data Obj ->"гӮa"
                                  |
:0044F870 6808D14700              push 0047D108

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:0044F875 6A70                    push 00000070
:0044F877 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F87A E86D090000              call 004501EC
:0044F87F 6A01                    push 00000001
:0044F881 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F884 51                      push ecx
:0044F885 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F888 E8FD080000              call 0045018A

* Possible StringData Ref from Data Obj ->"ЮqN"
                                  |
:0044F88D 6814D14700              push 0047D114
:0044F892 6A71                    push 00000071
:0044F894 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F897 E850090000              call 004501EC
:0044F89C 6A3F                    push 0000003F
:0044F89E 8A5508                  mov dl, byte ptr [ebp+08]
:0044F8A1 52                      push edx
:0044F8A2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F8A5 E8080A0000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F8AA 6A02                    push 00000002
:0044F8AC 8A4508                  mov al, byte ptr [ebp+08]
:0044F8AF 50                      push eax
:0044F8B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F8B3 E8D2080000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F8B8 6820D14700              push 0047D120
:0044F8BD 6A72                    push 00000072
:0044F8BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F8C2 E825090000              call 004501EC
:0044F8C7 6A40                    push 00000040
:0044F8C9 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F8CC 51                      push ecx
:0044F8CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F8D0 E8DD090000              call 004502B2
:0044F8D5 E976070000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F84D(C)
|
:0044F8DA 8B5508                  mov edx, dword ptr [ebp+08]
:0044F8DD 81E2FF000000            and edx, 000000FF
:0044F8E3 83FA33                  cmp edx, 00000033
:0044F8E6 7569                    jne 0044F951
:0044F8E8 6A00                    push 00000000
:0044F8EA 8A4508                  mov al, byte ptr [ebp+08]
:0044F8ED 50                      push eax
:0044F8EE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F8F1 E894080000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F8F6 682CD14700              push 0047D12C
:0044F8FB 6A73                    push 00000073
:0044F8FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F900 E8E7080000              call 004501EC
:0044F905 6A41                    push 00000041
:0044F907 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F90A 51                      push ecx
:0044F90B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F90E E89F090000              call 004502B2
:0044F913 6A01                    push 00000001
:0044F915 8A5508                  mov dl, byte ptr [ebp+08]
:0044F918 52                      push edx
:0044F919 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F91C E869080000              call 0045018A

* Possible StringData Ref from Data Obj ->"vڳ"
                                  |
:0044F921 6838D14700              push 0047D138
:0044F926 6A74                    push 00000074
:0044F928 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F92B E8BC080000              call 004501EC
:0044F930 6A42                    push 00000042
:0044F932 8A4508                  mov al, byte ptr [ebp+08]
:0044F935 50                      push eax
:0044F936 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F939 E874090000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F93E 6A02                    push 00000002
:0044F940 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F943 51                      push ecx
:0044F944 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F947 E83E080000              call 0045018A
:0044F94C E9FF060000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F8E6(C)
|
:0044F951 8B5508                  mov edx, dword ptr [ebp+08]
:0044F954 81E2FF000000            and edx, 000000FF
:0044F95A 83FA34                  cmp edx, 00000034
:0044F95D 7569                    jne 0044F9C8
:0044F95F 6A00                    push 00000000
:0044F961 8A4508                  mov al, byte ptr [ebp+08]
:0044F964 50                      push eax
:0044F965 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F968 E81D080000              call 0045018A

* Possible StringData Ref from Data Obj ->"vڳ"
                                  |
:0044F96D 6848D14700              push 0047D148
:0044F972 6A74                    push 00000074
:0044F974 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F977 E870080000              call 004501EC
:0044F97C 6A43                    push 00000043
:0044F97E 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F981 51                      push ecx
:0044F982 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F985 E828090000              call 004502B2
:0044F98A 6A01                    push 00000001
:0044F98C 8A5508                  mov dl, byte ptr [ebp+08]
:0044F98F 52                      push edx
:0044F990 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F993 E8F2070000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044F998 6858D14700              push 0047D158
:0044F99D 6A73                    push 00000073
:0044F99F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F9A2 E845080000              call 004501EC
:0044F9A7 6A41                    push 00000041
:0044F9A9 8A4508                  mov al, byte ptr [ebp+08]
:0044F9AC 50                      push eax
:0044F9AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F9B0 E8FD080000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044F9B5 6A02                    push 00000002
:0044F9B7 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F9BA 51                      push ecx
:0044F9BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F9BE E8C7070000              call 0045018A
:0044F9C3 E988060000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F95D(C)
|
:0044F9C8 8B5508                  mov edx, dword ptr [ebp+08]
:0044F9CB 81E2FF000000            and edx, 000000FF
:0044F9D1 83FA35                  cmp edx, 00000035
:0044F9D4 7411                    je 0044F9E7
:0044F9D6 8B4508                  mov eax, dword ptr [ebp+08]
:0044F9D9 25FF000000              and eax, 000000FF
:0044F9DE 83F836                  cmp eax, 00000036
:0044F9E1 0F85BF000000            jne 0044FAA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F9D4(C)
|
:0044F9E7 6A00                    push 00000000
:0044F9E9 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F9EC 51                      push ecx
:0044F9ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F9F0 E895070000              call 0045018A
:0044F9F5 6A01                    push 00000001
:0044F9F7 8A5508                  mov dl, byte ptr [ebp+08]
:0044F9FA 52                      push edx
:0044F9FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F9FE E887070000              call 0045018A

* Possible StringData Ref from Data Obj ->"гӮa"
                                  |
:0044FA03 6864D14700              push 0047D164
:0044FA08 6A75                    push 00000075
:0044FA0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA0D E8DA070000              call 004501EC
:0044FA12 6A44                    push 00000044
:0044FA14 8A4508                  mov al, byte ptr [ebp+08]
:0044FA17 50                      push eax
:0044FA18 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA1B E892080000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FA20 6A02                    push 00000002
:0044FA22 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FA25 51                      push ecx
:0044FA26 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA29 E85C070000              call 0045018A

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044FA2E 6870D14700              push 0047D170
:0044FA33 6A76                    push 00000076
:0044FA35 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA38 E8AF070000              call 004501EC
:0044FA3D 6A45                    push 00000045
:0044FA3F 8A5508                  mov dl, byte ptr [ebp+08]
:0044FA42 52                      push edx
:0044FA43 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA46 E867080000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044FA4B 6A03                    push 00000003
:0044FA4D 8A4508                  mov al, byte ptr [ebp+08]
:0044FA50 50                      push eax
:0044FA51 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA54 E831070000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FA59 687CD14700              push 0047D17C
:0044FA5E 6A77                    push 00000077
:0044FA60 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA63 E884070000              call 004501EC
:0044FA68 6A46                    push 00000046
:0044FA6A 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FA6D 51                      push ecx
:0044FA6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA71 E83C080000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044FA76 6A04                    push 00000004
:0044FA78 8A5508                  mov dl, byte ptr [ebp+08]
:0044FA7B 52                      push edx
:0044FA7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA7F E806070000              call 0045018A

* Possible StringData Ref from Data Obj ->"_F"
                                  |
:0044FA84 6888D14700              push 0047D188
:0044FA89 6A78                    push 00000078
:0044FA8B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA8E E859070000              call 004501EC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044FA93 6A05                    push 00000005
:0044FA95 8A4508                  mov al, byte ptr [ebp+08]
:0044FA98 50                      push eax
:0044FA99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FA9C E8E9060000              call 0045018A
:0044FAA1 E9AA050000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F9E1(C)
|
:0044FAA6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FAA9 81E1FF000000            and ecx, 000000FF
:0044FAAF 83F937                  cmp ecx, 00000037
:0044FAB2 0F8594000000            jne 0044FB4C
:0044FAB8 6A00                    push 00000000
:0044FABA 8A5508                  mov dl, byte ptr [ebp+08]
:0044FABD 52                      push edx
:0044FABE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FAC1 E8C4060000              call 0045018A

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044FAC6 6894D14700              push 0047D194
:0044FACB 6A79                    push 00000079
:0044FACD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FAD0 E817070000              call 004501EC
:0044FAD5 6A01                    push 00000001
:0044FAD7 8A4508                  mov al, byte ptr [ebp+08]
:0044FADA 50                      push eax
:0044FADB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FADE E8A7060000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FAE3 68A0D14700              push 0047D1A0
:0044FAE8 6A7A                    push 0000007A
:0044FAEA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FAED E8FA060000              call 004501EC
:0044FAF2 6A47                    push 00000047
:0044FAF4 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FAF7 51                      push ecx
:0044FAF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FAFB E8B2070000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FB00 6A02                    push 00000002
:0044FB02 8A5508                  mov dl, byte ptr [ebp+08]
:0044FB05 52                      push edx
:0044FB06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB09 E87C060000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044FB0E 6A03                    push 00000003
:0044FB10 8A4508                  mov al, byte ptr [ebp+08]
:0044FB13 50                      push eax
:0044FB14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB17 E86E060000              call 0045018A

* Possible StringData Ref from Data Obj ->"ЮqN"
                                  |
:0044FB1C 68ACD14700              push 0047D1AC
:0044FB21 6A7B                    push 0000007B
:0044FB23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB26 E8C1060000              call 004501EC
:0044FB2B 6A48                    push 00000048
:0044FB2D 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FB30 51                      push ecx
:0044FB31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB34 E879070000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044FB39 6A04                    push 00000004
:0044FB3B 8A5508                  mov dl, byte ptr [ebp+08]
:0044FB3E 52                      push edx
:0044FB3F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB42 E843060000              call 0045018A
:0044FB47 E904050000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FAB2(C)
|
:0044FB4C 8B4508                  mov eax, dword ptr [ebp+08]
:0044FB4F 25FF000000              and eax, 000000FF
:0044FB54 83F838                  cmp eax, 00000038
:0044FB57 7577                    jne 0044FBD0
:0044FB59 6A00                    push 00000000
:0044FB5B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FB5E 51                      push ecx
:0044FB5F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB62 E823060000              call 0045018A

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044FB67 68B8D14700              push 0047D1B8
:0044FB6C 6A7C                    push 0000007C
:0044FB6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB71 E876060000              call 004501EC
:0044FB76 6A01                    push 00000001
:0044FB78 8A5508                  mov dl, byte ptr [ebp+08]
:0044FB7B 52                      push edx
:0044FB7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB7F E806060000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FB84 6A02                    push 00000002
:0044FB86 8A4508                  mov al, byte ptr [ebp+08]
:0044FB89 50                      push eax
:0044FB8A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB8D E8F8050000              call 0045018A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044FB92 6A03                    push 00000003
:0044FB94 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FB97 51                      push ecx
:0044FB98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FB9B E8EA050000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FBA0 68C4D14700              push 0047D1C4
:0044FBA5 6A7D                    push 0000007D
:0044FBA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FBAA E83D060000              call 004501EC
:0044FBAF 6A49                    push 00000049
:0044FBB1 8A5508                  mov dl, byte ptr [ebp+08]
:0044FBB4 52                      push edx
:0044FBB5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FBB8 E8F5060000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044FBBD 6A04                    push 00000004
:0044FBBF 8A4508                  mov al, byte ptr [ebp+08]
:0044FBC2 50                      push eax
:0044FBC3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FBC6 E8BF050000              call 0045018A
:0044FBCB E980040000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FB57(C)
|
:0044FBD0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FBD3 81E1FF000000            and ecx, 000000FF
:0044FBD9 83F939                  cmp ecx, 00000039
:0044FBDC 756D                    jne 0044FC4B
:0044FBDE 6A00                    push 00000000
:0044FBE0 8A5508                  mov dl, byte ptr [ebp+08]
:0044FBE3 52                      push edx
:0044FBE4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FBE7 E89E050000              call 0045018A
:0044FBEC 6A01                    push 00000001
:0044FBEE 8A4508                  mov al, byte ptr [ebp+08]
:0044FBF1 50                      push eax
:0044FBF2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FBF5 E890050000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FBFA 68D0D14700              push 0047D1D0
:0044FBFF 6A7E                    push 0000007E
:0044FC01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC04 E8E3050000              call 004501EC

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:0044FC09 68DCD14700              push 0047D1DC
:0044FC0E 6A7F                    push 0000007F
:0044FC10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC13 E8D4050000              call 004501EC

* Possible StringData Ref from Data Obj ->"_F"
                                  |
:0044FC18 68E8D14700              push 0047D1E8
:0044FC1D 6880000000              push 00000080
:0044FC22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC25 E8C2050000              call 004501EC
:0044FC2A 6A4A                    push 0000004A
:0044FC2C 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FC2F 51                      push ecx
:0044FC30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC33 E87A060000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FC38 6A02                    push 00000002
:0044FC3A 8A5508                  mov dl, byte ptr [ebp+08]
:0044FC3D 52                      push edx
:0044FC3E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC41 E844050000              call 0045018A
:0044FC46 E905040000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FBDC(C)
|
:0044FC4B 8B4508                  mov eax, dword ptr [ebp+08]
:0044FC4E 25FF000000              and eax, 000000FF
:0044FC53 83F83A                  cmp eax, 0000003A
:0044FC56 0F85A6000000            jne 0044FD02

* Possible StringData Ref from Data Obj ->"tq"
                                  |
:0044FC5C 68F4D14700              push 0047D1F4
:0044FC61 6A45                    push 00000045
:0044FC63 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC66 E881050000              call 004501EC

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FC6B 6800D24700              push 0047D200
:0044FC70 6881000000              push 00000081
:0044FC75 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC78 E86F050000              call 004501EC
:0044FC7D 6A4B                    push 0000004B
:0044FC7F 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FC82 51                      push ecx
:0044FC83 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC86 E827060000              call 004502B2
:0044FC8B 6A00                    push 00000000
:0044FC8D 8A5508                  mov dl, byte ptr [ebp+08]
:0044FC90 52                      push edx
:0044FC91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FC94 E8F1040000              call 0045018A

* Possible StringData Ref from Data Obj ->"Qd"
                                  |
:0044FC99 680CD24700              push 0047D20C
:0044FC9E 6A46                    push 00000046
:0044FCA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FCA3 E844050000              call 004501EC

* Possible StringData Ref from Data Obj ->"¤`"
                                  |
:0044FCA8 6818D24700              push 0047D218
:0044FCAD 6A47                    push 00000047
:0044FCAF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FCB2 E835050000              call 004501EC
:0044FCB7 6A01                    push 00000001
:0044FCB9 8A4508                  mov al, byte ptr [ebp+08]
:0044FCBC 50                      push eax
:0044FCBD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FCC0 E8C5040000              call 0045018A
:0044FCC5 6A23                    push 00000023
:0044FCC7 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FCCA 51                      push ecx
:0044FCCB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FCCE E8DF050000              call 004502B2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FCD3 6A02                    push 00000002
:0044FCD5 8A5508                  mov dl, byte ptr [ebp+08]
:0044FCD8 52                      push edx
:0044FCD9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FCDC E8A9040000              call 0045018A
:0044FCE1 6A24                    push 00000024
:0044FCE3 8A4508                  mov al, byte ptr [ebp+08]
:0044FCE6 50                      push eax
:0044FCE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FCEA E8C3050000              call 004502B2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0044FCEF 6A03                    push 00000003
:0044FCF1 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FCF4 51                      push ecx
:0044FCF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FCF8 E88D040000              call 0045018A
:0044FCFD E94E030000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FC56(C)
|
:0044FD02 8B5508                  mov edx, dword ptr [ebp+08]
:0044FD05 81E2FF000000            and edx, 000000FF
:0044FD0B 83FA3B                  cmp edx, 0000003B
:0044FD0E 7541                    jne 0044FD51
:0044FD10 6A00                    push 00000000
:0044FD12 8A4508                  mov al, byte ptr [ebp+08]
:0044FD15 50                      push eax
:0044FD16 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD19 E86C040000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FD1E 6824D24700              push 0047D224
:0044FD23 6882000000              push 00000082
:0044FD28 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD2B E8BC040000              call 004501EC
:0044FD30 6A01                    push 00000001
:0044FD32 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FD35 51                      push ecx
:0044FD36 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD39 E84C040000              call 0045018A
:0044FD3E 6A4C                    push 0000004C
:0044FD40 8A5508                  mov dl, byte ptr [ebp+08]
:0044FD43 52                      push edx
:0044FD44 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD47 E866050000              call 004502B2
:0044FD4C E9FF020000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FD0E(C)
|
:0044FD51 8B4508                  mov eax, dword ptr [ebp+08]
:0044FD54 25FF000000              and eax, 000000FF
:0044FD59 83F83C                  cmp eax, 0000003C
:0044FD5C 7541                    jne 0044FD9F
:0044FD5E 6A00                    push 00000000
:0044FD60 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FD63 51                      push ecx
:0044FD64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD67 E81E040000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FD6C 6830D24700              push 0047D230
:0044FD71 6883000000              push 00000083
:0044FD76 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD79 E86E040000              call 004501EC
:0044FD7E 6A4D                    push 0000004D
:0044FD80 8A5508                  mov dl, byte ptr [ebp+08]
:0044FD83 52                      push edx
:0044FD84 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD87 E826050000              call 004502B2
:0044FD8C 6A01                    push 00000001
:0044FD8E 8A4508                  mov al, byte ptr [ebp+08]
:0044FD91 50                      push eax
:0044FD92 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FD95 E8F0030000              call 0045018A
:0044FD9A E9B1020000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FD5C(C)
|
:0044FD9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FDA2 81E1FF000000            and ecx, 000000FF
:0044FDA8 83F93D                  cmp ecx, 0000003D
:0044FDAB 7541                    jne 0044FDEE
:0044FDAD 6A00                    push 00000000
:0044FDAF 8A5508                  mov dl, byte ptr [ebp+08]
:0044FDB2 52                      push edx
:0044FDB3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FDB6 E8CF030000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FDBB 683CD24700              push 0047D23C
:0044FDC0 6884000000              push 00000084
:0044FDC5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FDC8 E81F040000              call 004501EC
:0044FDCD 6A4E                    push 0000004E
:0044FDCF 8A4508                  mov al, byte ptr [ebp+08]
:0044FDD2 50                      push eax
:0044FDD3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FDD6 E8D7040000              call 004502B2
:0044FDDB 6A01                    push 00000001
:0044FDDD 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FDE0 51                      push ecx
:0044FDE1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FDE4 E8A1030000              call 0045018A
:0044FDE9 E962020000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FDAB(C)
|
:0044FDEE 8B5508                  mov edx, dword ptr [ebp+08]
:0044FDF1 81E2FF000000            and edx, 000000FF
:0044FDF7 83FA3E                  cmp edx, 0000003E
:0044FDFA 754F                    jne 0044FE4B
:0044FDFC 6A00                    push 00000000
:0044FDFE 8A4508                  mov al, byte ptr [ebp+08]
:0044FE01 50                      push eax
:0044FE02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE05 E880030000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FE0A 6848D24700              push 0047D248
:0044FE0F 6885000000              push 00000085
:0044FE14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE17 E8D0030000              call 004501EC
:0044FE1C 6A4F                    push 0000004F
:0044FE1E 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FE21 51                      push ecx
:0044FE22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE25 E888040000              call 004502B2
:0044FE2A 6A01                    push 00000001
:0044FE2C 8A5508                  mov dl, byte ptr [ebp+08]
:0044FE2F 52                      push edx
:0044FE30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE33 E852030000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FE38 6A02                    push 00000002
:0044FE3A 8A4508                  mov al, byte ptr [ebp+08]
:0044FE3D 50                      push eax
:0044FE3E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE41 E844030000              call 0045018A
:0044FE46 E905020000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FDFA(C)
|
:0044FE4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FE4E 81E1FF000000            and ecx, 000000FF
:0044FE54 83F93F                  cmp ecx, 0000003F
:0044FE57 754F                    jne 0044FEA8
:0044FE59 6A00                    push 00000000
:0044FE5B 8A5508                  mov dl, byte ptr [ebp+08]
:0044FE5E 52                      push edx
:0044FE5F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE62 E823030000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FE67 6854D24700              push 0047D254
:0044FE6C 6886000000              push 00000086
:0044FE71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE74 E873030000              call 004501EC
:0044FE79 6A50                    push 00000050
:0044FE7B 8A4508                  mov al, byte ptr [ebp+08]
:0044FE7E 50                      push eax
:0044FE7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE82 E82B040000              call 004502B2
:0044FE87 6A01                    push 00000001
:0044FE89 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FE8C 51                      push ecx
:0044FE8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE90 E8F5020000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FE95 6A02                    push 00000002
:0044FE97 8A5508                  mov dl, byte ptr [ebp+08]
:0044FE9A 52                      push edx
:0044FE9B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FE9E E8E7020000              call 0045018A
:0044FEA3 E9A8010000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FE57(C)
|
:0044FEA8 8B4508                  mov eax, dword ptr [ebp+08]
:0044FEAB 25FF000000              and eax, 000000FF
:0044FEB0 83F840                  cmp eax, 00000040
:0044FEB3 754F                    jne 0044FF04
:0044FEB5 6A00                    push 00000000
:0044FEB7 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FEBA 51                      push ecx
:0044FEBB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FEBE E8C7020000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FEC3 6860D24700              push 0047D260
:0044FEC8 6887000000              push 00000087
:0044FECD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FED0 E817030000              call 004501EC
:0044FED5 6A51                    push 00000051
:0044FED7 8A5508                  mov dl, byte ptr [ebp+08]
:0044FEDA 52                      push edx
:0044FEDB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FEDE E8CF030000              call 004502B2
:0044FEE3 6A01                    push 00000001
:0044FEE5 8A4508                  mov al, byte ptr [ebp+08]
:0044FEE8 50                      push eax
:0044FEE9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FEEC E899020000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FEF1 6A02                    push 00000002
:0044FEF3 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FEF6 51                      push ecx
:0044FEF7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FEFA E88B020000              call 0045018A
:0044FEFF E94C010000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FEB3(C)
|
:0044FF04 8B5508                  mov edx, dword ptr [ebp+08]
:0044FF07 81E2FF000000            and edx, 000000FF
:0044FF0D 83FA41                  cmp edx, 00000041
:0044FF10 754F                    jne 0044FF61
:0044FF12 6A00                    push 00000000
:0044FF14 8A4508                  mov al, byte ptr [ebp+08]
:0044FF17 50                      push eax
:0044FF18 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF1B E86A020000              call 0045018A
:0044FF20 6A01                    push 00000001
:0044FF22 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FF25 51                      push ecx
:0044FF26 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF29 E85C020000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FF2E 6A02                    push 00000002
:0044FF30 8A5508                  mov dl, byte ptr [ebp+08]
:0044FF33 52                      push edx
:0044FF34 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF37 E84E020000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FF3C 686CD24700              push 0047D26C
:0044FF41 6888000000              push 00000088
:0044FF46 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF49 E89E020000              call 004501EC
:0044FF4E 6A52                    push 00000052
:0044FF50 8A4508                  mov al, byte ptr [ebp+08]
:0044FF53 50                      push eax
:0044FF54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF57 E856030000              call 004502B2
:0044FF5C E9EF000000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FF10(C)
|
:0044FF61 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FF64 81E1FF000000            and ecx, 000000FF
:0044FF6A 83F942                  cmp ecx, 00000042
:0044FF6D 754C                    jne 0044FFBB
:0044FF6F 6A00                    push 00000000
:0044FF71 8A5508                  mov dl, byte ptr [ebp+08]
:0044FF74 52                      push edx
:0044FF75 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF78 E80D020000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FF7D 6878D24700              push 0047D278
:0044FF82 6A28                    push 00000028
:0044FF84 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF87 E860020000              call 004501EC

* Possible Reference to String Resource ID=00017: "w"
                                  |
:0044FF8C 6A11                    push 00000011
:0044FF8E 8A4508                  mov al, byte ptr [ebp+08]
:0044FF91 50                      push eax
:0044FF92 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FF95 E818030000              call 004502B2
:0044FF9A 6A01                    push 00000001
:0044FF9C 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FF9F 51                      push ecx
:0044FFA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FFA3 E8E2010000              call 0045018A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0044FFA8 6A02                    push 00000002
:0044FFAA 8A5508                  mov dl, byte ptr [ebp+08]
:0044FFAD 52                      push edx
:0044FFAE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FFB1 E8D4010000              call 0045018A
:0044FFB6 E995000000              jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FF6D(C)
|
:0044FFBB 8B4508                  mov eax, dword ptr [ebp+08]
:0044FFBE 25FF000000              and eax, 000000FF
:0044FFC3 83F843                  cmp eax, 00000043
:0044FFC6 753E                    jne 00450006
:0044FFC8 6A00                    push 00000000
:0044FFCA 8A4D08                  mov cl, byte ptr [ebp+08]
:0044FFCD 51                      push ecx
:0044FFCE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FFD1 E8B4010000              call 0045018A
:0044FFD6 6A01                    push 00000001
:0044FFD8 8A5508                  mov dl, byte ptr [ebp+08]
:0044FFDB 52                      push edx
:0044FFDC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FFDF E8A6010000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0044FFE4 6884D24700              push 0047D284
:0044FFE9 6889000000              push 00000089
:0044FFEE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FFF1 E8F6010000              call 004501EC
:0044FFF6 6A53                    push 00000053
:0044FFF8 8A4508                  mov al, byte ptr [ebp+08]
:0044FFFB 50                      push eax
:0044FFFC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044FFFF E8AE020000              call 004502B2
:00450004 EB4A                    jmp 00450050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FFC6(C)
|
:00450006 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450009 81E1FF000000            and ecx, 000000FF
:0045000F 83F944                  cmp ecx, 00000044
:00450012 753C                    jne 00450050
:00450014 6A00                    push 00000000
:00450016 8A5508                  mov dl, byte ptr [ebp+08]
:00450019 52                      push edx
:0045001A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045001D E868010000              call 0045018A
:00450022 6A01                    push 00000001
:00450024 8A4508                  mov al, byte ptr [ebp+08]
:00450027 50                      push eax
:00450028 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045002B E85A010000              call 0045018A

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:00450030 6890D24700              push 0047D290
:00450035 688A000000              push 0000008A
:0045003A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045003D E8AA010000              call 004501EC
:00450042 6A54                    push 00000054
:00450044 8A4D08                  mov cl, byte ptr [ebp+08]
:00450047 51                      push ecx
:00450048 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045004B E862020000              call 004502B2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E181(U), :0044E215(U), :0044E2AE(U), :0044E354(U), :0044E3ED(U)
|:0044E4B3(U), :0044E54B(U), :0044E600(U), :0044E6A7(U), :0044E74D(U)
|:0044E7B6(U), :0044E81F(U), :0044E8EF(U), :0044E976(U), :0044E9FA(U)
|:0044EA8E(U), :0044EB13(U), :0044EBE2(U), :0044EC89(U), :0044ED00(U)
|:0044ED77(U), :0044EDC3(U), :0044EE69(U), :0044EED2(U), :0044EF78(U)
|:0044F022(U), :0044F0BA(U), :0044F16E(U), :0044F224(U), :0044F2C9(U)
|:0044F39A(U), :0044F440(U), :0044F4E6(U), :0044F57D(U), :0044F631(U)
|:0044F711(U), :0044F788(U), :0044F83C(U), :0044F8D5(U), :0044F94C(U)
|:0044F9C3(U), :0044FAA1(U), :0044FB47(U), :0044FBCB(U), :0044FC46(U)
|:0044FCFD(U), :0044FD4C(U), :0044FD9A(U), :0044FDE9(U), :0044FE46(U)
|:0044FEA3(U), :0044FEFF(U), :0044FF5C(U), :0044FFB6(U), :00450004(U)
|:00450012(C)
|
:00450050 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00450054 7408                    je 0045005E
:00450056 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450059 E84A4E0000              call 00454EA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450054(C)
|
:0045005E 8BE5                    mov esp, ebp
:00450060 5D                      pop ebp
:00450061 C20800                  ret 0008



* Referenced by a CALL at Address:
|:004502CE   
|
:00450064 55                      push ebp
:00450065 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450067 6AFF                    push FFFFFFFF
:00450069 680C3B4700              push 00473B0C
:0045006E 64A100000000            mov eax, dword ptr fs:[00000000]
:00450074 50                      push eax
:00450075 64892500000000          mov dword ptr fs:[00000000], esp
:0045007C 81EC18010000            sub esp, 00000118
:00450082 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:00450088 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045008E E86D76FBFF              call 00407700
:00450093 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"ARROW.E4"
                                  |
:0045009A A120984700              mov eax, dword ptr [00479820]
:0045009F 50                      push eax
:004500A0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004500A6 E88A42FCFF              call 00414335
:004500AB 85C0                    test eax, eax
:004500AD 7527                    jne 004500D6
:004500AF C785ECFEFFFF00000000    mov dword ptr [ebp+FFFFFEEC], 00000000
:004500B9 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004500C0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004500C6 E85576FBFF              call 00407720
:004500CB 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:004500D1 E9A4000000              jmp 0045017A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004500AD(C)
|
:004500D6 6A00                    push 00000000
:004500D8 B930DA4A00              mov ecx, 004ADA30
:004500DD E8BC34FCFF              call 0041359E
:004500E2 50                      push eax
:004500E3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004500E6 51                      push ecx
:004500E7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004500ED E89743FCFF              call 00414489
:004500F2 85C0                    test eax, eax
:004500F4 752F                    jne 00450125
:004500F6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004500FC E80B05FCFF              call 0041060C
:00450101 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:0045010B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00450112 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00450118 E80376FBFF              call 00407720
:0045011D 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00450123 EB55                    jmp 0045017A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004500F4(C)
|
:00450125 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045012B E8DC04FCFF              call 0041060C
:00450130 85C0                    test eax, eax
:00450132 7524                    jne 00450158
:00450134 C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:0045013E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00450145 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045014B E8D075FBFF              call 00407720
:00450150 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00450156 EB22                    jmp 0045017A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450132(C)
|
:00450158 C785E0FEFFFF01000000    mov dword ptr [ebp+FFFFFEE0], 00000001
:00450162 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00450169 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045016F E8AC75FBFF              call 00407720
:00450174 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004500D1(U), :00450123(U), :00450156(U)
|
:0045017A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045017D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00450184 8BE5                    mov esp, ebp
:00450186 5D                      pop ebp
:00450187 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044E151   , :0044E17C   , :0044E1AB   , :0044E1D6   , :0044E1E4   
|:0044E253   , :0044E261   , :0044E26F   , :0044E27D   , :0044E2CE   
|:0044E2F9   , :0044E316   , :0044E341   , :0044E374   , :0044E3BD   
|:0044E3E8   , :0044E419   , :0044E425   , :0044E440   , :0044E467   
|:0044E491   , :0044E49F   , :0044E4EF   , :0044E4FD   , :0044E529   
|:0044E579   , :0044E587   , :0044E595   , :0044E5A3   , :0044E5DE   
|:0044E620   , :0044E62E   , :0044E63C   , :0044E668   , :0044E6A2   
|:0044E6D4   , :0044E6E2   , :0044E6F0   , :0044E72B   , :0044E777   
|:0044E794   , :0044E7D2   , :0044E7EF   , :0044E80C   , :0044E83E   
|:0044E869   , :0044E877   , :0044E8A2   , :0044E8CD   , :0044E90B   
|:0044E954   , :0044E99F   , :0044E9AD   , :0044E9BB   , :0044E9D8   
|:0044EA24   , :0044EA50   , :0044EA7B   , :0044EAB7   , :0044EAD4   
|:0044EAF1   , :0044EB40   , :0044EB6B   , :0044EB79   , :0044EB96   
|:0044EBC1   , :0044EBDD   , :0044EC02   , :0044EC2E   , :0044EC59   
|:0044EC67   , :0044ECA5   , :0044ECC2   , :0044ECED   , :0044ECFB   
|:0044ED1C   , :0044ED39   , :0044ED56   , :0044ED64   , :0044ED93   
|:0044EDA1   , :0044EE00   , :0044EE0E   , :0044EE1C   , :0044EE2A   
|:0044EE38   , :0044EE85   , :0044EE93   , :0044EEB0   , :0044EEF1   
|:0044EF1D   , :0044EF48   , :0044EF73   , :0044EFC7   , :0044EFF3   
|:0044F00F   , :0044F051   , :0044F05F   , :0044F06D   , :0044F099   
|:0044F0A7   , :0044F0D9   , :0044F0E7   , :0044F104   , :0044F12F   
|:0044F169   , :0044F18E   , :0044F1B9   , :0044F1E4   , :0044F260   
|:0044F26E   , :0044F28B   , :0044F299   , :0044F2A7   , :0044F2E9   
|:0044F340   , :0044F36A   , :0044F387   , :0044F395   , :0044F3D6   
|:0044F3E4   , :0044F41F   , :0044F42D   , :0044F47D   , :0044F48B   
|:0044F4A8   , :0044F4D3   , :0044F4E1   , :0044F531   , :0044F55C   
|:0044F56A   , :0044F578   , :0044F59D   , :0044F5C8   , :0044F5D6   
|:0044F602   , :0044F610   , :0044F62C   , :0044F66F   , :0044F68C   
|:0044F69A   , :0044F6B6   , :0044F6E1   , :0044F70C   , :0044F72D   
|:0044F758   , :0044F783   , :0044F7A8   , :0044F7D3   , :0044F7FE   
|:0044F829   , :0044F837   , :0044F85C   , :0044F888   , :0044F8B3   
|:0044F8F1   , :0044F91C   , :0044F947   , :0044F968   , :0044F993   
|:0044F9BE   , :0044F9F0   , :0044F9FE   , :0044FA29   , :0044FA54   
|:0044FA7F   , :0044FA9C   , :0044FAC1   , :0044FADE   , :0044FB09   
|:0044FB17   , :0044FB42   , :0044FB62   , :0044FB7F   , :0044FB8D   
|:0044FB9B   , :0044FBC6   , :0044FBE7   , :0044FBF5   , :0044FC41   
|:0044FC94   , :0044FCC0   , :0044FCDC   , :0044FCF8   , :0044FD19   
|:0044FD39   , :0044FD67   , :0044FD95   , :0044FDB6   , :0044FDE4   
|:0044FE05   , :0044FE33   , :0044FE41   , :0044FE62   , :0044FE90   
|:0044FE9E   , :0044FEBE   , :0044FEEC   , :0044FEFA   , :0044FF1B   
|:0044FF29   , :0044FF37   , :0044FF78   , :0044FFA3   , :0044FFB1   
|:0044FFD1   , :0044FFDF   , :0045001D   , :0045002B   
|
:0045018A 55                      push ebp
:0045018B 8BEC                    mov ebp, esp
:0045018D 51                      push ecx
:0045018E 894DFC                  mov dword ptr [ebp-04], ecx
:00450191 6884074B00              push 004B0784

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450196 6A04                    push 00000004
:00450198 68FFFF0000              push 0000FFFF
:0045019D 8B4508                  mov eax, dword ptr [ebp+08]
:004501A0 25FF000000              and eax, 000000FF
:004501A5 6BC018                  imul eax, 00000018
:004501A8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004501AB 8B9488A8914700          mov edx, dword ptr [eax+4*ecx+004791A8]
:004501B2 52                      push edx
:004501B3 E82170FDFF              call 004271D9
:004501B8 83C410                  add esp, 00000010
:004501BB 6A00                    push 00000000
:004501BD 6A00                    push 00000000
:004501BF 6801020000              push 00000201
:004501C4 A1380E4B00              mov eax, dword ptr [004B0E38]
:004501C9 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004501CA FF15D8864B00            Call dword ptr [004B86D8]
:004501D0 6A00                    push 00000000
:004501D2 6A00                    push 00000000
:004501D4 6802020000              push 00000202
:004501D9 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004501DF 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004501E0 FF15D8864B00            Call dword ptr [004B86D8]
:004501E6 8BE5                    mov esp, ebp
:004501E8 5D                      pop ebp
:004501E9 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0044E160   , :0044E1BA   , :0044E1F3   , :0044E202   , :0044E236   
|:0044E245   , :0044E28C   , :0044E29B   , :0044E2DD   , :0044E308   
|:0044E325   , :0044E383   , :0044E392   , :0044E3A1   , :0044E3CC   
|:0044E434   , :0044E44F   , :0044E476   , :0044E4AE   , :0044E4D3   
|:0044E50C   , :0044E51B   , :0044E538   , :0044E56B   , :0044E5B2   
|:0044E5C1   , :0044E5D0   , :0044E5ED   , :0044E64B   , :0044E65A   
|:0044E677   , :0044E686   , :0044E6FF   , :0044E70E   , :0044E71D   
|:0044E73A   , :0044E769   , :0044E786   , :0044E7A3   , :0044E7E1   
|:0044E7FE   , :0044E84D   , :0044E886   , :0044E8B1   , :0044E8DC   
|:0044E91A   , :0044E929   , :0044E938   , :0044E963   , :0044E9CA   
|:0044E9E7   , :0044EA33   , :0044EA42   , :0044EA5F   , :0044EAC6   
|:0044EAE3   , :0044EB00   , :0044EB4F   , :0044EB88   , :0044EBA5   
|:0044EC11   , :0044EC20   , :0044EC3D   , :0044EC76   , :0044ECB4   
|:0044ECD1   , :0044ED2B   , :0044ED48   , :0044EDB0   , :0044EDE3   
|:0044EDF2   , :0044EE47   , :0044EE56   , :0044EEA2   , :0044EEBF   
|:0044EF00   , :0044EF0F   , :0044EF2C   , :0044EF57   , :0044EF9C   
|:0044EFAB   , :0044EFD6   , :0044EFE5   , :0044F043   , :0044F07C   
|:0044F08B   , :0044F0F6   , :0044F113   , :0044F13E   , :0044F14D   
|:0044F19D   , :0044F1C8   , :0044F1F3   , :0044F202   , :0044F211   
|:0044F244   , :0044F27D   , :0044F2B6   , :0044F2F8   , :0044F307   
|:0044F332   , :0044F379   , :0044F3BA   , :0044F3F3   , :0044F402   
|:0044F411   , :0044F461   , :0044F49A   , :0044F4B7   , :0044F506   
|:0044F515   , :0044F540   , :0044F5AC   , :0044F5E5   , :0044F5F4   
|:0044F652   , :0044F661   , :0044F67E   , :0044F6C5   , :0044F6F0   
|:0044F73C   , :0044F767   , :0044F7B7   , :0044F7E2   , :0044F80D   
|:0044F86B   , :0044F87A   , :0044F897   , :0044F8C2   , :0044F900   
|:0044F92B   , :0044F977   , :0044F9A2   , :0044FA0D   , :0044FA38   
|:0044FA63   , :0044FA8E   , :0044FAD0   , :0044FAED   , :0044FB26   
|:0044FB71   , :0044FBAA   , :0044FC04   , :0044FC13   , :0044FC25   
|:0044FC66   , :0044FC78   , :0044FCA3   , :0044FCB2   , :0044FD2B   
|:0044FD79   , :0044FDC8   , :0044FE17   , :0044FE74   , :0044FED0   
|:0044FF49   , :0044FF87   , :0044FFF1   , :0045003D   
|
:004501EC 55                      push ebp
:004501ED 8BEC                    mov ebp, esp
:004501EF 83EC08                  sub esp, 00000008
:004501F2 894DF8                  mov dword ptr [ebp-08], ecx
:004501F5 6A00                    push 00000000
:004501F7 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004501F9 6A04                    push 00000004
:004501FB E810AC0100              call 0046AE10
:00450200 83C40C                  add esp, 0000000C
:00450203 8B450C                  mov eax, dword ptr [ebp+0C]
:00450206 50                      push eax
:00450207 E85D32FCFF              call 00413469
:0045020C 83C404                  add esp, 00000004
:0045020F 668945FC                mov word ptr [ebp-04], ax
:00450213 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450216 81E1FFFF0000            and ecx, 0000FFFF
:0045021C 81F9FFFF0000            cmp ecx, 0000FFFF
:00450222 7445                    je 00450269
:00450224 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450227 81E1FFFF0000            and ecx, 0000FFFF
:0045022D 6BC970                  imul ecx, 00000070
:00450230 81C198224900            add ecx, 00492298
:00450236 E825440000              call 00454660
:0045023B 50                      push eax
:0045023C 8B5508                  mov edx, dword ptr [ebp+08]
:0045023F 81E2FF000000            and edx, 000000FF
:00450245 8B04D50C484700          mov eax, dword ptr [8*edx+0047480C]
:0045024C 83C028                  add eax, 00000028
:0045024F 50                      push eax
:00450250 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450253 81E1FF000000            and ecx, 000000FF
:00450259 8B14CD08484700          mov edx, dword ptr [8*ecx+00474808]
:00450260 52                      push edx
:00450261 E8DD30FCFF              call 00413343
:00450266 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450222(C)
|
:00450269 6A00                    push 00000000
:0045026B 6A4F                    push 0000004F
:0045026D 6A00                    push 00000000
:0045026F E89CAB0100              call 0046AE10
:00450274 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00450277 6A05                    push 00000005
:00450279 E8C66AFDFF              call 00426D44
:0045027E 83C404                  add esp, 00000004
:00450281 6A00                    push 00000000
:00450283 6A00                    push 00000000
:00450285 6801020000              push 00000201
:0045028A A1380E4B00              mov eax, dword ptr [004B0E38]
:0045028F 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00450290 FF15D8864B00            Call dword ptr [004B86D8]
:00450296 6A00                    push 00000000
:00450298 6A00                    push 00000000
:0045029A 6802020000              push 00000202
:0045029F 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004502A5 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004502A6 FF15D8864B00            Call dword ptr [004B86D8]
:004502AC 8BE5                    mov esp, ebp
:004502AE 5D                      pop ebp
:004502AF C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0044E16E   , :0044E1C8   , :0044E210   , :0044E2A9   , :0044E2EB   
|:0044E333   , :0044E34F   , :0044E3AF   , :0044E3DA   , :0044E45B   
|:0044E4E1   , :0044E546   , :0044E5FB   , :0044E694   , :0044E748   
|:0044E7B1   , :0044E81A   , :0044E85B   , :0044E894   , :0044E8BF   
|:0044E8EA   , :0044E946   , :0044E971   , :0044E9F5   , :0044EA6D   
|:0044EA89   , :0044EB0E   , :0044EB5D   , :0044EBB3   , :0044EC4B   
|:0044EC84   , :0044ECDF   , :0044ED72   , :0044EDBE   , :0044EE64   
|:0044EECD   , :0044EF3A   , :0044EF65   , :0044EFB9   , :0044F001   
|:0044F01D   , :0044F0B5   , :0044F121   , :0044F15B   , :0044F1AB   
|:0044F1D6   , :0044F21F   , :0044F252   , :0044F2C4   , :0044F315   
|:0044F323   , :0044F34E   , :0044F35C   , :0044F3C8   , :0044F43B   
|:0044F46F   , :0044F4C5   , :0044F523   , :0044F54E   , :0044F5BA   
|:0044F61E   , :0044F6A8   , :0044F6D3   , :0044F6FE   , :0044F74A   
|:0044F775   , :0044F7C5   , :0044F7F0   , :0044F81B   , :0044F8A5   
|:0044F8D0   , :0044F90E   , :0044F939   , :0044F985   , :0044F9B0   
|:0044FA1B   , :0044FA46   , :0044FA71   , :0044FAFB   , :0044FB34   
|:0044FBB8   , :0044FC33   , :0044FC86   , :0044FCCE   , :0044FCEA   
|:0044FD47   , :0044FD87   , :0044FDD6   , :0044FE25   , :0044FE82   
|:0044FEDE   , :0044FF57   , :0044FF95   , :0044FFFF   , :0045004B   
|
:004502B2 55                      push ebp
:004502B3 8BEC                    mov ebp, esp
:004502B5 51                      push ecx
:004502B6 894DFC                  mov dword ptr [ebp-04], ecx
:004502B9 6A00                    push 00000000
:004502BB 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004502BD 6A04                    push 00000004
:004502BF E84CAB0100              call 0046AE10
:004502C4 83C40C                  add esp, 0000000C
:004502C7 8B450C                  mov eax, dword ptr [ebp+0C]
:004502CA 50                      push eax
:004502CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004502CE E891FDFFFF              call 00450064
:004502D3 85C0                    test eax, eax
:004502D5 744C                    je 00450323
:004502D7 6A00                    push 00000000
:004502D9 B930DA4A00              mov ecx, 004ADA30
:004502DE E8BB32FCFF              call 0041359E
:004502E3 50                      push eax
:004502E4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004502E7 C1E104                  shl ecx, 04
:004502EA 8B91C4424700            mov edx, dword ptr [ecx+004742C4]
:004502F0 52                      push edx
:004502F1 8B450C                  mov eax, dword ptr [ebp+0C]
:004502F4 C1E004                  shl eax, 04
:004502F7 8B88C0424700            mov ecx, dword ptr [eax+004742C0]
:004502FD 51                      push ecx
:004502FE 8B550C                  mov edx, dword ptr [ebp+0C]
:00450301 C1E204                  shl edx, 04
:00450304 8B82BC424700            mov eax, dword ptr [edx+004742BC]
:0045030A 83C028                  add eax, 00000028
:0045030D 50                      push eax
:0045030E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00450311 C1E104                  shl ecx, 04
:00450314 8B91B8424700            mov edx, dword ptr [ecx+004742B8]
:0045031A 52                      push edx
:0045031B E8C7B80100              call 0046BBE7
:00450320 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004502D5(C)
|
:00450323 6A00                    push 00000000
:00450325 6A4F                    push 0000004F
:00450327 6A00                    push 00000000
:00450329 E8E2AA0100              call 0046AE10
:0045032E 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00450331 6A05                    push 00000005
:00450333 E80C6AFDFF              call 00426D44
:00450338 83C404                  add esp, 00000004
:0045033B 6A00                    push 00000000
:0045033D 6A00                    push 00000000
:0045033F 6801020000              push 00000201
:00450344 A1380E4B00              mov eax, dword ptr [004B0E38]
:00450349 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045034A FF15D8864B00            Call dword ptr [004B86D8]
:00450350 6A00                    push 00000000
:00450352 6A00                    push 00000000
:00450354 6802020000              push 00000202
:00450359 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045035F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00450360 FF15D8864B00            Call dword ptr [004B86D8]
:00450366 8BE5                    mov esp, ebp
:00450368 5D                      pop ebp
:00450369 C20800                  ret 0008


:0045036C CC                      int 03
:0045036D CC                      int 03
:0045036E CC                      int 03
:0045036F CC                      int 03

* Referenced by a CALL at Addresses:
|:0044E12C   , :00457EBA   , :00457F33   , :00458340   
|
:00450370 55                      push ebp
:00450371 8BEC                    mov ebp, esp
:00450373 51                      push ecx
:00450374 894DFC                  mov dword ptr [ebp-04], ecx
:00450377 8B45FC                  mov eax, dword ptr [ebp-04]
:0045037A 83C006                  add eax, 00000006
:0045037D 8BE5                    mov esp, ebp
:0045037F 5D                      pop ebp
:00450380 C3                      ret


:00450381 CC                      int 03
:00450382 CC                      int 03
:00450383 CC                      int 03
:00450384 CC                      int 03
:00450385 CC                      int 03
:00450386 CC                      int 03
:00450387 CC                      int 03
:00450388 CC                      int 03
:00450389 CC                      int 03
:0045038A CC                      int 03
:0045038B CC                      int 03
:0045038C CC                      int 03
:0045038D CC                      int 03
:0045038E CC                      int 03
:0045038F CC                      int 03

* Referenced by a CALL at Addresses:
|:00450921   , :00450B9E   , :00450DB5   
|
:00450390 55                      push ebp
:00450391 8BEC                    mov ebp, esp
:00450393 83EC08                  sub esp, 00000008
:00450396 56                      push esi
:00450397 57                      push edi
:00450398 894DF8                  mov dword ptr [ebp-08], ecx
:0045039B C745FC00000000          mov [ebp-04], 00000000
:004503A2 8B4508                  mov eax, dword ptr [ebp+08]
:004503A5 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004503AA 3DFF000000              cmp eax, 000000FF
:004503AF 7519                    jne 004503CA
:004503B1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004503B4 C7410830000000          mov [ecx+08], 00000030
:004503BB 8B55F8                  mov edx, dword ptr [ebp-08]
:004503BE C7420C30000000          mov [edx+0C], 00000030
:004503C5 E9FD000000              jmp 004504C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004503AF(C)
|
:004503CA B9A8034B00              mov ecx, 004B03A8
:004503CF E86829FFFF              call 00442D3C
:004503D4 8BF0                    mov esi, eax
:004503D6 8B7D08                  mov edi, dword ptr [ebp+08]
:004503D9 81E7FF000000            and edi, 000000FF
:004503DF B9A8034B00              mov ecx, 004B03A8
:004503E4 E89729FFFF              call 00442D80
:004503E9 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004503EA B903000000              mov ecx, 00000003
:004503EF F7F9                    idiv ecx
:004503F1 2BF8                    sub edi, eax
:004503F3 6BFF03                  imul edi, 00000003
:004503F6 C1E704                  shl edi, 04
:004503F9 03F7                    add esi, edi
:004503FB 8B55F8                  mov edx, dword ptr [ebp-08]
:004503FE 897208                  mov dword ptr [edx+08], esi
:00450401 B9A8034B00              mov ecx, 004B03A8
:00450406 E84229FFFF              call 00442D4D
:0045040B 8BF0                    mov esi, eax
:0045040D 8B7D0C                  mov edi, dword ptr [ebp+0C]
:00450410 81E7FF000000            and edi, 000000FF
:00450416 B9A8034B00              mov ecx, 004B03A8
:0045041B E87129FFFF              call 00442D91
:00450420 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00450421 B903000000              mov ecx, 00000003
:00450426 F7F9                    idiv ecx
:00450428 2BF8                    sub edi, eax
:0045042A 6BFF03                  imul edi, 00000003
:0045042D C1E704                  shl edi, 04
:00450430 03F7                    add esi, edi
:00450432 8B55F8                  mov edx, dword ptr [ebp-08]
:00450435 89720C                  mov dword ptr [edx+0C], esi
:00450438 8B45F8                  mov eax, dword ptr [ebp-08]
:0045043B 8B400C                  mov eax, dword ptr [eax+0C]
:0045043E 99                      cdq
:0045043F 83E20F                  and edx, 0000000F
:00450442 03C2                    add eax, edx
:00450444 8BF0                    mov esi, eax
:00450446 C1FE04                  sar esi, 04
:00450449 83C607                  add esi, 00000007
:0045044C B9A8034B00              mov ecx, 004B03A8
:00450451 E85A64FFFF              call 004468B0
:00450456 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00450457 B903000000              mov ecx, 00000003
:0045045C F7F9                    idiv ecx
:0045045E C1E004                  shl eax, 04
:00450461 2BF0                    sub esi, eax
:00450463 8975FC                  mov dword ptr [ebp-04], esi
:00450466 837DFC00                cmp dword ptr [ebp-04], 00000000
:0045046A 7C14                    jl 00450480
:0045046C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045046F C1E204                  shl edx, 04
:00450472 8B45F8                  mov eax, dword ptr [ebp-08]
:00450475 8B480C                  mov ecx, dword ptr [eax+0C]
:00450478 2BCA                    sub ecx, edx
:0045047A 8B55F8                  mov edx, dword ptr [ebp-08]
:0045047D 894A0C                  mov dword ptr [edx+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045046A(C)
|
:00450480 8B45F8                  mov eax, dword ptr [ebp-08]
:00450483 8B4008                  mov eax, dword ptr [eax+08]
:00450486 99                      cdq
:00450487 83E20F                  and edx, 0000000F
:0045048A 03C2                    add eax, edx
:0045048C 8BF0                    mov esi, eax
:0045048E C1FE04                  sar esi, 04
:00450491 B9A8034B00              mov ecx, 004B03A8
:00450496 E8EE63FFFF              call 00446889
:0045049B 99                      cdq
:0045049C B930000000              mov ecx, 00000030
:004504A1 F7F9                    idiv ecx
:004504A3 3BF0                    cmp esi, eax
:004504A5 7C11                    jl 004504B8
:004504A7 8B55F8                  mov edx, dword ptr [ebp-08]
:004504AA 8B4208                  mov eax, dword ptr [edx+08]
:004504AD 83E870                  sub eax, 00000070
:004504B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004504B3 894108                  mov dword ptr [ecx+08], eax
:004504B6 EB0F                    jmp 004504C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004504A5(C)
|
:004504B8 8B55F8                  mov edx, dword ptr [ebp-08]
:004504BB 8B4208                  mov eax, dword ptr [edx+08]
:004504BE 83C050                  add eax, 00000050
:004504C1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004504C4 894108                  mov dword ptr [ecx+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004503C5(U), :004504B6(U)
|
:004504C7 5F                      pop edi
:004504C8 5E                      pop esi
:004504C9 8BE5                    mov esp, ebp
:004504CB 5D                      pop ebp
:004504CC C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00450807   , :00450ABA   , :00450D06   
|
:004504CF 55                      push ebp
:004504D0 8BEC                    mov ebp, esp
:004504D2 83EC40                  sub esp, 00000040
:004504D5 894DC0                  mov dword ptr [ebp-40], ecx
:004504D8 8D45C8                  lea eax, dword ptr [ebp-38]
:004504DB 50                      push eax
:004504DC 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004504DF E8ECF1FDFF              call 0042F6D0
:004504E4 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004504E5 FF1558874B00            Call dword ptr [004B8758]
:004504EB 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004504EE E88D290000              call 00452E80
:004504F3 8945FC                  mov dword ptr [ebp-04], eax
:004504F6 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004504F9 E8A2290000              call 00452EA0
:004504FE 8945F8                  mov dword ptr [ebp-08], eax
:00450501 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00450504 034DFC                  add ecx, dword ptr [ebp-04]
:00450507 894DD8                  mov dword ptr [ebp-28], ecx
:0045050A 8B55D0                  mov edx, dword ptr [ebp-30]
:0045050D 0355FC                  add edx, dword ptr [ebp-04]
:00450510 8955E0                  mov dword ptr [ebp-20], edx
:00450513 8B45CC                  mov eax, dword ptr [ebp-34]
:00450516 0345F8                  add eax, dword ptr [ebp-08]
:00450519 8945DC                  mov dword ptr [ebp-24], eax
:0045051C 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045051F 034DF8                  add ecx, dword ptr [ebp-08]
:00450522 894DE4                  mov dword ptr [ebp-1C], ecx
:00450525 8D55E8                  lea edx, dword ptr [ebp-18]
:00450528 52                      push edx
:00450529 A1380E4B00              mov eax, dword ptr [004B0E38]
:0045052E 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0045052F FF1558874B00            Call dword ptr [004B8758]
:00450535 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00450538 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0045053B 7D1B                    jge 00450558
:0045053D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00450540 2B55F4                  sub edx, dword ptr [ebp-0C]
:00450543 8955C4                  mov dword ptr [ebp-3C], edx
:00450546 8B45DC                  mov eax, dword ptr [ebp-24]
:00450549 2B45C4                  sub eax, dword ptr [ebp-3C]
:0045054C 8945DC                  mov dword ptr [ebp-24], eax
:0045054F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450552 2B4DC4                  sub ecx, dword ptr [ebp-3C]
:00450555 894DE4                  mov dword ptr [ebp-1C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045053B(C)
|
:00450558 6A01                    push 00000001
:0045055A 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045055D 2B55DC                  sub edx, dword ptr [ebp-24]
:00450560 83C201                  add edx, 00000001
:00450563 52                      push edx
:00450564 8B45E0                  mov eax, dword ptr [ebp-20]
:00450567 2B45D8                  sub eax, dword ptr [ebp-28]
:0045056A 83C001                  add eax, 00000001
:0045056D 50                      push eax
:0045056E 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00450571 51                      push ecx
:00450572 8B55D8                  mov edx, dword ptr [ebp-28]
:00450575 52                      push edx
:00450576 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00450579 E852F1FDFF              call 0042F6D0
:0045057E 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045057F FF15FC864B00            Call dword ptr [004B86FC]
:00450585 8BE5                    mov esp, ebp
:00450587 5D                      pop ebp
:00450588 C3                      ret



* Referenced by a CALL at Addresses:
|:0045079A   , :00450A4D   , :00450C99   
|
:00450589 55                      push ebp
:0045058A 8BEC                    mov ebp, esp
:0045058C 83EC2C                  sub esp, 0000002C
:0045058F 894DD4                  mov dword ptr [ebp-2C], ecx
:00450592 8D45D8                  lea eax, dword ptr [ebp-28]
:00450595 50                      push eax
:00450596 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045059C 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0045059D FF1558874B00            Call dword ptr [004B8758]
:004505A3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004505A6 E8D5280000              call 00452E80
:004505AB 8945FC                  mov dword ptr [ebp-04], eax
:004505AE 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004505B1 E8EA280000              call 00452EA0
:004505B6 8945F8                  mov dword ptr [ebp-08], eax
:004505B9 8B55D8                  mov edx, dword ptr [ebp-28]
:004505BC 0355FC                  add edx, dword ptr [ebp-04]
:004505BF 8955E8                  mov dword ptr [ebp-18], edx
:004505C2 8B45DC                  mov eax, dword ptr [ebp-24]
:004505C5 0345F8                  add eax, dword ptr [ebp-08]
:004505C8 8945EC                  mov dword ptr [ebp-14], eax
:004505CB 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004505CE 034DFC                  add ecx, dword ptr [ebp-04]
:004505D1 894DF0                  mov dword ptr [ebp-10], ecx
:004505D4 8B55E4                  mov edx, dword ptr [ebp-1C]
:004505D7 0355F8                  add edx, dword ptr [ebp-08]
:004505DA 8955F4                  mov dword ptr [ebp-0C], edx
:004505DD 8B4508                  mov eax, dword ptr [ebp+08]
:004505E0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004505E3 8908                    mov dword ptr [eax], ecx
:004505E5 8B55EC                  mov edx, dword ptr [ebp-14]
:004505E8 895004                  mov dword ptr [eax+04], edx
:004505EB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004505EE 894808                  mov dword ptr [eax+08], ecx
:004505F1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004505F4 89500C                  mov dword ptr [eax+0C], edx
:004505F7 8B4508                  mov eax, dword ptr [ebp+08]
:004505FA 8BE5                    mov esp, ebp
:004505FC 5D                      pop ebp
:004505FD C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00450624   , :00450911   , :00450B8E   , :00450DA5   
|
:00450600 55                      push ebp
:00450601 8BEC                    mov ebp, esp
:00450603 51                      push ecx
:00450604 894DFC                  mov dword ptr [ebp-04], ecx
:00450607 8B45FC                  mov eax, dword ptr [ebp-04]
:0045060A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045060D 884804                  mov byte ptr [eax+04], cl
:00450610 8BE5                    mov esp, ebp
:00450612 5D                      pop ebp
:00450613 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045241F   , :0045243A   , :00452457   , :00452474   , :0045248F   
|:004524AC   , :00452505   , :00452520   , :0045253D   , :0045255A   
|:00452576   , :004525C6   , :004525DF   , :004525F9   , :00452616   
|
:00450616 55                      push ebp
:00450617 8BEC                    mov ebp, esp
:00450619 51                      push ecx
:0045061A 894DFC                  mov dword ptr [ebp-04], ecx
:0045061D 8A4508                  mov al, byte ptr [ebp+08]
:00450620 50                      push eax
:00450621 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450624 E8D7FFFFFF              call 00450600
:00450629 6A00                    push 00000000
:0045062B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045062E 8B11                    mov edx, dword ptr [ecx]
:00450630 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00450631 FF15B0874B00            Call dword ptr [004B87B0]
:00450637 8BE5                    mov esp, ebp
:00450639 5D                      pop ebp
:0045063A C20400                  ret 0004



* Referenced by a CALL at Address:
|:00452218   
|
:0045063D 55                      push ebp
:0045063E 8BEC                    mov ebp, esp
:00450640 83EC20                  sub esp, 00000020
:00450643 894DE0                  mov dword ptr [ebp-20], ecx
:00450646 8B45E0                  mov eax, dword ptr [ebp-20]
:00450649 C7402401000000          mov [eax+24], 00000001

* Reference To: USER32.CreatePopupMenu, Ord:0054h
                                  |
:00450650 FF1518874B00            Call dword ptr [004B8718]
:00450656 8945F8                  mov dword ptr [ebp-08], eax
:00450659 837DF800                cmp dword ptr [ebp-08], 00000000
:0045065D 7520                    jne 0045067F
:0045065F 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"O"
                                  |
:00450661 68ACD24700              push 0047D2AC

* Possible StringData Ref from Data Obj ->"Lki泡Oǳ"
                                  |
:00450666 68BCD24700              push 0047D2BC
:0045066B 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00450671 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00450672 FF1598864B00            Call dword ptr [004B8698]
:00450678 0CFF                    or al, FF
:0045067A E96E010000              jmp 004507ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045065D(C)
|
:0045067F 8B55F8                  mov edx, dword ptr [ebp-08]
:00450682 52                      push edx
:00450683 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00450686 E835280000              call 00452EC0
:0045068B 8B45E0                  mov eax, dword ptr [ebp-20]
:0045068E 83781400                cmp dword ptr [eax+14], 00000000
:00450692 7415                    je 004506A9

* Possible StringData Ref from Data Obj ->"e&1f"
                                  |
:00450694 68D4D24700              push 0047D2D4
:00450699 6A01                    push 00000001
:0045069B 6A00                    push 00000000
:0045069D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004506A0 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004506A1 FF151C874B00            Call dword ptr [004B871C]
:004506A7 EB13                    jmp 004506BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450692(C)
|

* Possible StringData Ref from Data Obj ->"e1f"
                                  |
:004506A9 68E0D24700              push 0047D2E0
:004506AE 6A01                    push 00000001
:004506B0 6A01                    push 00000001
:004506B2 8B55F8                  mov edx, dword ptr [ebp-08]
:004506B5 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004506B6 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004506A7(U)
|
:004506BC 8B45E0                  mov eax, dword ptr [ebp-20]
:004506BF 83781800                cmp dword ptr [eax+18], 00000000
:004506C3 7415                    je 004506DA

* Possible StringData Ref from Data Obj ->"oNޡe&2f"
                                  |
:004506C5 68ECD24700              push 0047D2EC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004506CA 6A02                    push 00000002
:004506CC 6A00                    push 00000000
:004506CE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004506D1 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004506D2 FF151C874B00            Call dword ptr [004B871C]
:004506D8 EB13                    jmp 004506ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004506C3(C)
|

* Possible StringData Ref from Data Obj ->"oNޡe2f"
                                  |
:004506DA 68FCD24700              push 0047D2FC

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004506DF 6A02                    push 00000002
:004506E1 6A01                    push 00000001
:004506E3 8B55F8                  mov edx, dword ptr [ebp-08]
:004506E6 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004506E7 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004506D8(U)
|
:004506ED 8B45E0                  mov eax, dword ptr [ebp-20]
:004506F0 83781C00                cmp dword ptr [eax+1C], 00000000
:004506F4 7415                    je 0045070B

* Possible StringData Ref from Data Obj ->"De&3f"
                                  |
:004506F6 6808D34700              push 0047D308

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004506FB 6A03                    push 00000003
:004506FD 6A00                    push 00000000
:004506FF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450702 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450703 FF151C874B00            Call dword ptr [004B871C]
:00450709 EB13                    jmp 0045071E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004506F4(C)
|

* Possible StringData Ref from Data Obj ->"De3f"
                                  |
:0045070B 6814D34700              push 0047D314

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00450710 6A03                    push 00000003
:00450712 6A01                    push 00000001
:00450714 8B55F8                  mov edx, dword ptr [ebp-08]
:00450717 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450718 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450709(U)
|
:0045071E 8B45E0                  mov eax, dword ptr [ebp-20]
:00450721 83782000                cmp dword ptr [eax+20], 00000000
:00450725 7415                    je 0045073C

* Possible StringData Ref from Data Obj ->"Xe&4f"
                                  |
:00450727 6820D34700              push 0047D320

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045072C 6A04                    push 00000004
:0045072E 6A00                    push 00000000
:00450730 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450733 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450734 FF151C874B00            Call dword ptr [004B871C]
:0045073A EB13                    jmp 0045074F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450725(C)
|

* Possible StringData Ref from Data Obj ->"Xe4f"
                                  |
:0045073C 682CD34700              push 0047D32C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450741 6A04                    push 00000004
:00450743 6A01                    push 00000001
:00450745 8B55F8                  mov edx, dword ptr [ebp-08]
:00450748 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450749 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045073A(U)
|
:0045074F 8B45E0                  mov eax, dword ptr [ebp-20]
:00450752 83782400                cmp dword ptr [eax+24], 00000000
:00450756 7415                    je 0045076D

* Possible StringData Ref from Data Obj ->"ݩRe&5f"
                                  |
:00450758 6838D34700              push 0047D338

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045075D 6A05                    push 00000005
:0045075F 6A00                    push 00000000
:00450761 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450764 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450765 FF151C874B00            Call dword ptr [004B871C]
:0045076B EB13                    jmp 00450780

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450756(C)
|

* Possible StringData Ref from Data Obj ->"ݩRe5f"
                                  |
:0045076D 6844D34700              push 0047D344

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00450772 6A05                    push 00000005
:00450774 6A01                    push 00000001
:00450776 8B55F8                  mov edx, dword ptr [ebp-08]
:00450779 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:0045077A FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045076B(U)
|

* Possible StringData Ref from Data Obj ->"eESCf"
                                  |
:00450780 6850D34700              push 0047D350

* Possible Reference to String Resource ID=00006: ""
                                  |
:00450785 6A06                    push 00000006
:00450787 6A00                    push 00000000
:00450789 8B45F8                  mov eax, dword ptr [ebp-08]
:0045078C 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:0045078D FF151C874B00            Call dword ptr [004B871C]
:00450793 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00450796 51                      push ecx
:00450797 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045079A E8EAFDFFFF              call 00450589
:0045079F C745F482010000          mov [ebp-0C], 00000182
:004507A6 6A00                    push 00000000
:004507A8 8B15380E4B00            mov edx, dword ptr [004B0E38]
:004507AE 52                      push edx
:004507AF 6A00                    push 00000000
:004507B1 8B45E8                  mov eax, dword ptr [ebp-18]
:004507B4 50                      push eax
:004507B5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004507B8 51                      push ecx
:004507B9 8B55F4                  mov edx, dword ptr [ebp-0C]
:004507BC 52                      push edx
:004507BD 8B45F8                  mov eax, dword ptr [ebp-08]
:004507C0 50                      push eax

* Reference To: USER32.TrackPopupMenu, Ord:023Fh
                                  |
:004507C1 FF15B8874B00            Call dword ptr [004B87B8]
:004507C7 8945FC                  mov dword ptr [ebp-04], eax
:004507CA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004507CD 51                      push ecx

* Reference To: USER32.DestroyMenu, Ord:0089h
                                  |
:004507CE FF15B4874B00            Call dword ptr [004B87B4]
:004507D4 837DFC00                cmp dword ptr [ebp-04], 00000000
:004507D8 7E06                    jle 004507E0
:004507DA 837DFC05                cmp dword ptr [ebp-04], 00000005
:004507DE 7E04                    jle 004507E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004507D8(C)
|
:004507E0 0CFF                    or al, FF
:004507E2 EB09                    jmp 004507ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004507DE(C)
|
:004507E4 8B55FC                  mov edx, dword ptr [ebp-04]
:004507E7 8A829BD24700            mov al, byte ptr [edx+0047D29B]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045067A(U), :004507E2(U)
|
:004507ED 8BE5                    mov esp, ebp
:004507EF 5D                      pop ebp
:004507F0 C3                      ret



* Referenced by a CALL at Address:
|:004523FD   
|
:004507F1 55                      push ebp
:004507F2 8BEC                    mov ebp, esp
:004507F4 51                      push ecx
:004507F5 894DFC                  mov dword ptr [ebp-04], ecx
:004507F8 8B4508                  mov eax, dword ptr [ebp+08]
:004507FB 50                      push eax
:004507FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004507FF E85C260000              call 00452E60
:00450804 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450807 E8C3FCFFFF              call 004504CF
:0045080C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045080F C7412401000000          mov [ecx+24], 00000001
:00450816 8B55FC                  mov edx, dword ptr [ebp-04]
:00450819 8B4214                  mov eax, dword ptr [edx+14]
:0045081C 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0507, ";"
                                  |
:0045081D 6807050000              push 00000507
:00450822 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450825 E8A6EEFDFF              call 0042F6D0
:0045082A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045082B FF15AC864B00            Call dword ptr [004B86AC]
:00450831 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450832 FF1514874B00            Call dword ptr [004B8714]
:00450838 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045083B 8B5118                  mov edx, dword ptr [ecx+18]
:0045083E 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0508, ""
                                  |
:0045083F 6808050000              push 00000508
:00450844 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450847 E884EEFDFF              call 0042F6D0
:0045084C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045084D FF15AC864B00            Call dword ptr [004B86AC]
:00450853 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450854 FF1514874B00            Call dword ptr [004B8714]
:0045085A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045085D 8B481C                  mov ecx, dword ptr [eax+1C]
:00450860 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0509, "Sw"
                                  |
:00450861 6809050000              push 00000509
:00450866 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450869 E862EEFDFF              call 0042F6D0
:0045086E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045086F FF15AC864B00            Call dword ptr [004B86AC]
:00450875 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450876 FF1514874B00            Call dword ptr [004B8714]
:0045087C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045087F 8B4220                  mov eax, dword ptr [edx+20]
:00450882 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050C, ""
                                  |
:00450883 680C050000              push 0000050C
:00450888 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045088B E840EEFDFF              call 0042F6D0
:00450890 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450891 FF15AC864B00            Call dword ptr [004B86AC]
:00450897 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450898 FF1514874B00            Call dword ptr [004B8714]
:0045089E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004508A1 8B5124                  mov edx, dword ptr [ecx+24]
:004508A4 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050B, ""
                                  |
:004508A5 680B050000              push 0000050B
:004508AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004508AD E81EEEFDFF              call 0042F6D0
:004508B2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004508B3 FF15AC864B00            Call dword ptr [004B86AC]
:004508B9 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004508BA FF1514874B00            Call dword ptr [004B8714]
:004508C0 8BE5                    mov esp, ebp
:004508C2 5D                      pop ebp
:004508C3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0043122A   
|
:004508C6 55                      push ebp
:004508C7 8BEC                    mov ebp, esp
:004508C9 51                      push ecx
:004508CA 894DFC                  mov dword ptr [ebp-04], ecx
:004508CD 8B45FC                  mov eax, dword ptr [ebp-04]
:004508D0 C7401400000000          mov [eax+14], 00000000
:004508D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004508DA C7411800000000          mov [ecx+18], 00000000
:004508E1 8B55FC                  mov edx, dword ptr [ebp-04]
:004508E4 C7421C00000000          mov [edx+1C], 00000000
:004508EB 8B45FC                  mov eax, dword ptr [ebp-04]
:004508EE C7402000000000          mov [eax+20], 00000000
:004508F5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004508F8 C7412400000000          mov [ecx+24], 00000000
:004508FF 6A00                    push 00000000
:00450901 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450904 E857250000              call 00452E60

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450909 68FF000000              push 000000FF
:0045090E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450911 E8EAFCFFFF              call 00450600
:00450916 8A550C                  mov dl, byte ptr [ebp+0C]
:00450919 52                      push edx
:0045091A 8A4508                  mov al, byte ptr [ebp+08]
:0045091D 50                      push eax
:0045091E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450921 E86AFAFFFF              call 00450390
:00450926 8BE5                    mov esp, ebp
:00450928 5D                      pop ebp
:00450929 C20800                  ret 0008



* Referenced by a CALL at Address:
|:004521EC   
|
:0045092C 55                      push ebp
:0045092D 8BEC                    mov ebp, esp
:0045092F 83EC20                  sub esp, 00000020
:00450932 894DE0                  mov dword ptr [ebp-20], ecx

* Reference To: USER32.CreatePopupMenu, Ord:0054h
                                  |
:00450935 FF1518874B00            Call dword ptr [004B8718]
:0045093B 8945F8                  mov dword ptr [ebp-08], eax
:0045093E 837DF800                cmp dword ptr [ebp-08], 00000000
:00450942 751F                    jne 00450963
:00450944 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"DRO"
                                  |
:00450946 685CD34700              push 0047D35C

* Possible StringData Ref from Data Obj ->"LkiDROǳ"
                                  |
:0045094B 686CD34700              push 0047D36C
:00450950 A1380E4B00              mov eax, dword ptr [004B0E38]
:00450955 50                      push eax

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00450956 FF1598864B00            Call dword ptr [004B8698]
:0045095C 0CFF                    or al, FF
:0045095E E93D010000              jmp 00450AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450942(C)
|
:00450963 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450966 51                      push ecx
:00450967 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045096A E851250000              call 00452EC0
:0045096F 8B55E0                  mov edx, dword ptr [ebp-20]
:00450972 837A1800                cmp dword ptr [edx+18], 00000000
:00450976 7415                    je 0045098D

* Possible StringData Ref from Data Obj ->"W}e&1f"
                                  |
:00450978 6884D34700              push 0047D384
:0045097D 6A01                    push 00000001
:0045097F 6A00                    push 00000000
:00450981 8B45F8                  mov eax, dword ptr [ebp-08]
:00450984 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450985 FF151C874B00            Call dword ptr [004B871C]
:0045098B EB13                    jmp 004509A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450976(C)
|

* Possible StringData Ref from Data Obj ->"W}e1f"
                                  |
:0045098D 6890D34700              push 0047D390
:00450992 6A01                    push 00000001
:00450994 6A01                    push 00000001
:00450996 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450999 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:0045099A FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045098B(U)
|
:004509A0 8B55E0                  mov edx, dword ptr [ebp-20]
:004509A3 837A1400                cmp dword ptr [edx+14], 00000000
:004509A7 7415                    je 004509BE

* Possible StringData Ref from Data Obj ->"e&2f"
                                  |
:004509A9 689CD34700              push 0047D39C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004509AE 6A02                    push 00000002
:004509B0 6A00                    push 00000000
:004509B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004509B5 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004509B6 FF151C874B00            Call dword ptr [004B871C]
:004509BC EB13                    jmp 004509D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004509A7(C)
|

* Possible StringData Ref from Data Obj ->"e2f"
                                  |
:004509BE 68A8D34700              push 0047D3A8

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004509C3 6A02                    push 00000002
:004509C5 6A01                    push 00000001
:004509C7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004509CA 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004509CB FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004509BC(U)
|
:004509D1 8B55E0                  mov edx, dword ptr [ebp-20]
:004509D4 837A1C00                cmp dword ptr [edx+1C], 00000000
:004509D8 7415                    je 004509EF

* Possible StringData Ref from Data Obj ->"ܮwe&3f"
                                  |
:004509DA 68B4D34700              push 0047D3B4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004509DF 6A03                    push 00000003
:004509E1 6A00                    push 00000000
:004509E3 8B45F8                  mov eax, dword ptr [ebp-08]
:004509E6 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004509E7 FF151C874B00            Call dword ptr [004B871C]
:004509ED EB13                    jmp 00450A02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004509D8(C)
|

* Possible StringData Ref from Data Obj ->"ܮwe3f"
                                  |
:004509EF 68C0D34700              push 0047D3C0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004509F4 6A03                    push 00000003
:004509F6 6A01                    push 00000001
:004509F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004509FB 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:004509FC FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004509ED(U)
|
:00450A02 8B55E0                  mov edx, dword ptr [ebp-20]
:00450A05 837A2000                cmp dword ptr [edx+20], 00000000
:00450A09 7415                    je 00450A20

* Possible StringData Ref from Data Obj ->"Mhe&4f"
                                  |
:00450A0B 68CCD34700              push 0047D3CC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450A10 6A04                    push 00000004
:00450A12 6A00                    push 00000000
:00450A14 8B45F8                  mov eax, dword ptr [ebp-08]
:00450A17 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450A18 FF151C874B00            Call dword ptr [004B871C]
:00450A1E EB13                    jmp 00450A33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450A09(C)
|

* Possible StringData Ref from Data Obj ->"Mhe4f"
                                  |
:00450A20 68D8D34700              push 0047D3D8

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450A25 6A04                    push 00000004
:00450A27 6A01                    push 00000001
:00450A29 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450A2C 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450A2D FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450A1E(U)
|

* Possible StringData Ref from Data Obj ->"eESCf"
                                  |
:00450A33 68E4D34700              push 0047D3E4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00450A38 6A05                    push 00000005
:00450A3A 6A00                    push 00000000
:00450A3C 8B55F8                  mov edx, dword ptr [ebp-08]
:00450A3F 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450A40 FF151C874B00            Call dword ptr [004B871C]
:00450A46 8D45E4                  lea eax, dword ptr [ebp-1C]
:00450A49 50                      push eax
:00450A4A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00450A4D E837FBFFFF              call 00450589
:00450A52 C745F480010000          mov [ebp-0C], 00000180
:00450A59 6A00                    push 00000000
:00450A5B 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00450A61 51                      push ecx
:00450A62 6A00                    push 00000000
:00450A64 8B55E8                  mov edx, dword ptr [ebp-18]
:00450A67 52                      push edx
:00450A68 8B45E4                  mov eax, dword ptr [ebp-1C]
:00450A6B 50                      push eax
:00450A6C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00450A6F 51                      push ecx
:00450A70 8B55F8                  mov edx, dword ptr [ebp-08]
:00450A73 52                      push edx

* Reference To: USER32.TrackPopupMenu, Ord:023Fh
                                  |
:00450A74 FF15B8874B00            Call dword ptr [004B87B8]
:00450A7A 8945FC                  mov dword ptr [ebp-04], eax
:00450A7D 8B45F8                  mov eax, dword ptr [ebp-08]
:00450A80 50                      push eax

* Reference To: USER32.DestroyMenu, Ord:0089h
                                  |
:00450A81 FF15B4874B00            Call dword ptr [004B87B4]
:00450A87 837DFC00                cmp dword ptr [ebp-04], 00000000
:00450A8B 7E06                    jle 00450A93
:00450A8D 837DFC04                cmp dword ptr [ebp-04], 00000004
:00450A91 7E04                    jle 00450A97

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450A8B(C)
|
:00450A93 0CFF                    or al, FF
:00450A95 EB09                    jmp 00450AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450A91(C)
|
:00450A97 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450A9A 8A81A3D24700            mov al, byte ptr [ecx+0047D2A3]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045095E(U), :00450A95(U)
|
:00450AA0 8BE5                    mov esp, ebp
:00450AA2 5D                      pop ebp
:00450AA3 C3                      ret



* Referenced by a CALL at Address:
|:004524E3   
|
:00450AA4 55                      push ebp
:00450AA5 8BEC                    mov ebp, esp
:00450AA7 51                      push ecx
:00450AA8 894DFC                  mov dword ptr [ebp-04], ecx
:00450AAB 8B4508                  mov eax, dword ptr [ebp+08]
:00450AAE 50                      push eax
:00450AAF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450AB2 E8A9230000              call 00452E60
:00450AB7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450ABA E810FAFFFF              call 004504CF
:00450ABF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450AC2 8B5114                  mov edx, dword ptr [ecx+14]
:00450AC5 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0509, "Sw"
                                  |
:00450AC6 6809050000              push 00000509
:00450ACB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450ACE E8FDEBFDFF              call 0042F6D0
:00450AD3 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450AD4 FF15AC864B00            Call dword ptr [004B86AC]
:00450ADA 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450ADB FF1514874B00            Call dword ptr [004B8714]
:00450AE1 8B45FC                  mov eax, dword ptr [ebp-04]
:00450AE4 8B4818                  mov ecx, dword ptr [eax+18]
:00450AE7 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050A, "
"
                                  |
:00450AE8 680A050000              push 0000050A
:00450AED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450AF0 E8DBEBFDFF              call 0042F6D0
:00450AF5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450AF6 FF15AC864B00            Call dword ptr [004B86AC]
:00450AFC 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450AFD FF1514874B00            Call dword ptr [004B8714]
:00450B03 8B55FC                  mov edx, dword ptr [ebp-04]
:00450B06 8B421C                  mov eax, dword ptr [edx+1C]
:00450B09 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050C, ""
                                  |
:00450B0A 680C050000              push 0000050C
:00450B0F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B12 E8B9EBFDFF              call 0042F6D0
:00450B17 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450B18 FF15AC864B00            Call dword ptr [004B86AC]
:00450B1E 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450B1F FF1514874B00            Call dword ptr [004B8714]
:00450B25 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B28 8B5120                  mov edx, dword ptr [ecx+20]
:00450B2B 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050D, ""
                                  |
:00450B2C 680D050000              push 0000050D
:00450B31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B34 E897EBFDFF              call 0042F6D0
:00450B39 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450B3A FF15AC864B00            Call dword ptr [004B86AC]
:00450B40 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450B41 FF1514874B00            Call dword ptr [004B8714]
:00450B47 8BE5                    mov esp, ebp
:00450B49 5D                      pop ebp
:00450B4A C20400                  ret 0004



* Referenced by a CALL at Address:
|:00446AA2   
|
:00450B4D 55                      push ebp
:00450B4E 8BEC                    mov ebp, esp
:00450B50 51                      push ecx
:00450B51 894DFC                  mov dword ptr [ebp-04], ecx
:00450B54 8B45FC                  mov eax, dword ptr [ebp-04]
:00450B57 C7401400000000          mov [eax+14], 00000000
:00450B5E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B61 C7411800000000          mov [ecx+18], 00000000
:00450B68 8B55FC                  mov edx, dword ptr [ebp-04]
:00450B6B C7421C00000000          mov [edx+1C], 00000000
:00450B72 8B45FC                  mov eax, dword ptr [ebp-04]
:00450B75 C7402000000000          mov [eax+20], 00000000
:00450B7C 6A00                    push 00000000
:00450B7E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B81 E8DA220000              call 00452E60

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450B86 68FF000000              push 000000FF
:00450B8B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B8E E86DFAFFFF              call 00450600
:00450B93 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00450B96 51                      push ecx
:00450B97 8A5508                  mov dl, byte ptr [ebp+08]
:00450B9A 52                      push edx
:00450B9B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B9E E8EDF7FFFF              call 00450390
:00450BA3 8BE5                    mov esp, ebp
:00450BA5 5D                      pop ebp
:00450BA6 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00452227   
|
:00450BA9 55                      push ebp
:00450BAA 8BEC                    mov ebp, esp
:00450BAC 83EC20                  sub esp, 00000020
:00450BAF 894DE0                  mov dword ptr [ebp-20], ecx

* Reference To: USER32.CreatePopupMenu, Ord:0054h
                                  |
:00450BB2 FF1518874B00            Call dword ptr [004B8718]
:00450BB8 8945F8                  mov dword ptr [ebp-08], eax
:00450BBB 837DF800                cmp dword ptr [ebp-08], 00000000
:00450BBF 751F                    jne 00450BE0
:00450BC1 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"DO"
                                  |
:00450BC3 68F0D34700              push 0047D3F0

* Possible StringData Ref from Data Obj ->"LkiDOǳ"
                                  |
:00450BC8 6800D44700              push 0047D400
:00450BCD A1380E4B00              mov eax, dword ptr [004B0E38]
:00450BD2 50                      push eax

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00450BD3 FF1598864B00            Call dword ptr [004B8698]
:00450BD9 0CFF                    or al, FF
:00450BDB E90C010000              jmp 00450CEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450BBF(C)
|
:00450BE0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450BE3 51                      push ecx
:00450BE4 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00450BE7 E8D4220000              call 00452EC0
:00450BEC 8B55E0                  mov edx, dword ptr [ebp-20]
:00450BEF 837A1400                cmp dword ptr [edx+14], 00000000
:00450BF3 7415                    je 00450C0A

* Possible StringData Ref from Data Obj ->"ϥΡe&1f"
                                  |
:00450BF5 6818D44700              push 0047D418
:00450BFA 6A01                    push 00000001
:00450BFC 6A00                    push 00000000
:00450BFE 8B45F8                  mov eax, dword ptr [ebp-08]
:00450C01 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450C02 FF151C874B00            Call dword ptr [004B871C]
:00450C08 EB13                    jmp 00450C1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450BF3(C)
|

* Possible StringData Ref from Data Obj ->"ϥΡe1f"
                                  |
:00450C0A 6824D44700              push 0047D424
:00450C0F 6A01                    push 00000001
:00450C11 6A01                    push 00000001
:00450C13 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450C16 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450C17 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450C08(U)
|
:00450C1D 8B55E0                  mov edx, dword ptr [ebp-20]
:00450C20 837A1800                cmp dword ptr [edx+18], 00000000
:00450C24 7415                    je 00450C3B

* Possible StringData Ref from Data Obj ->"Xe&2f"
                                  |
:00450C26 6830D44700              push 0047D430

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00450C2B 6A02                    push 00000002
:00450C2D 6A00                    push 00000000
:00450C2F 8B45F8                  mov eax, dword ptr [ebp-08]
:00450C32 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450C33 FF151C874B00            Call dword ptr [004B871C]
:00450C39 EB13                    jmp 00450C4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450C24(C)
|

* Possible StringData Ref from Data Obj ->"Xe2f"
                                  |
:00450C3B 683CD44700              push 0047D43C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00450C40 6A02                    push 00000002
:00450C42 6A01                    push 00000001
:00450C44 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450C47 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450C48 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450C39(U)
|
:00450C4E 8B55E0                  mov edx, dword ptr [ebp-20]
:00450C51 837A1C00                cmp dword ptr [edx+1C], 00000000
:00450C55 7415                    je 00450C6C

* Possible StringData Ref from Data Obj ->"ae&3f"
                                  |
:00450C57 6848D44700              push 0047D448

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00450C5C 6A03                    push 00000003
:00450C5E 6A00                    push 00000000
:00450C60 8B45F8                  mov eax, dword ptr [ebp-08]
:00450C63 50                      push eax

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450C64 FF151C874B00            Call dword ptr [004B871C]
:00450C6A EB13                    jmp 00450C7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450C55(C)
|

* Possible StringData Ref from Data Obj ->"ae3f"
                                  |
:00450C6C 6854D44700              push 0047D454

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00450C71 6A03                    push 00000003
:00450C73 6A01                    push 00000001
:00450C75 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450C78 51                      push ecx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450C79 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450C6A(U)
|

* Possible StringData Ref from Data Obj ->"eESCf"
                                  |
:00450C7F 6860D44700              push 0047D460

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450C84 6A04                    push 00000004
:00450C86 6A00                    push 00000000
:00450C88 8B55F8                  mov edx, dword ptr [ebp-08]
:00450C8B 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:00450C8C FF151C874B00            Call dword ptr [004B871C]
:00450C92 8D45E4                  lea eax, dword ptr [ebp-1C]
:00450C95 50                      push eax
:00450C96 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00450C99 E8EBF8FFFF              call 00450589
:00450C9E C745F480010000          mov [ebp-0C], 00000180
:00450CA5 6A00                    push 00000000
:00450CA7 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00450CAD 51                      push ecx
:00450CAE 6A00                    push 00000000
:00450CB0 8B55E8                  mov edx, dword ptr [ebp-18]
:00450CB3 52                      push edx
:00450CB4 8B45E4                  mov eax, dword ptr [ebp-1C]
:00450CB7 50                      push eax
:00450CB8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00450CBB 51                      push ecx
:00450CBC 8B55F8                  mov edx, dword ptr [ebp-08]
:00450CBF 52                      push edx

* Reference To: USER32.TrackPopupMenu, Ord:023Fh
                                  |
:00450CC0 FF15B8874B00            Call dword ptr [004B87B8]
:00450CC6 8945FC                  mov dword ptr [ebp-04], eax
:00450CC9 8B45F8                  mov eax, dword ptr [ebp-08]
:00450CCC 50                      push eax

* Reference To: USER32.DestroyMenu, Ord:0089h
                                  |
:00450CCD FF15B4874B00            Call dword ptr [004B87B4]
:00450CD3 837DFC00                cmp dword ptr [ebp-04], 00000000
:00450CD7 7E06                    jle 00450CDF
:00450CD9 837DFC03                cmp dword ptr [ebp-04], 00000003
:00450CDD 7E04                    jle 00450CE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450CD7(C)
|
:00450CDF 0CFF                    or al, FF
:00450CE1 EB09                    jmp 00450CEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450CDD(C)
|
:00450CE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450CE6 8A81A7D24700            mov al, byte ptr [ecx+0047D2A7]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450BDB(U), :00450CE1(U)
|
:00450CEC 8BE5                    mov esp, ebp
:00450CEE 5D                      pop ebp
:00450CEF C3                      ret



* Referenced by a CALL at Address:
|:004525AA   
|
:00450CF0 55                      push ebp
:00450CF1 8BEC                    mov ebp, esp
:00450CF3 51                      push ecx
:00450CF4 894DFC                  mov dword ptr [ebp-04], ecx
:00450CF7 8B4508                  mov eax, dword ptr [ebp+08]
:00450CFA 50                      push eax
:00450CFB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450CFE E85D210000              call 00452E60
:00450D03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450D06 E8C4F7FFFF              call 004504CF
:00450D0B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450D0E 8B5114                  mov edx, dword ptr [ecx+14]
:00450D11 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00450D12 6A03                    push 00000003
:00450D14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450D17 E8B4E9FDFF              call 0042F6D0
:00450D1C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450D1D FF15AC864B00            Call dword ptr [004B86AC]
:00450D23 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450D24 FF1514874B00            Call dword ptr [004B8714]
:00450D2A 8B45FC                  mov eax, dword ptr [ebp-04]
:00450D2D 8B4818                  mov ecx, dword ptr [eax+18]
:00450D30 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450D31 6A04                    push 00000004
:00450D33 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450D36 E895E9FDFF              call 0042F6D0
:00450D3B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450D3C FF15AC864B00            Call dword ptr [004B86AC]
:00450D42 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450D43 FF1514874B00            Call dword ptr [004B8714]
:00450D49 8B55FC                  mov edx, dword ptr [ebp-04]
:00450D4C 8B421C                  mov eax, dword ptr [edx+1C]
:00450D4F 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00450D50 6A05                    push 00000005
:00450D52 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450D55 E876E9FDFF              call 0042F6D0
:00450D5A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450D5B FF15AC864B00            Call dword ptr [004B86AC]
:00450D61 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450D62 FF1514874B00            Call dword ptr [004B8714]
:00450D68 8BE5                    mov esp, ebp
:00450D6A 5D                      pop ebp
:00450D6B C20400                  ret 0004



* Referenced by a CALL at Address:
|:00431DB8   
|
:00450D6E 55                      push ebp
:00450D6F 8BEC                    mov ebp, esp
:00450D71 51                      push ecx
:00450D72 894DFC                  mov dword ptr [ebp-04], ecx
:00450D75 8B45FC                  mov eax, dword ptr [ebp-04]
:00450D78 C7401401000000          mov [eax+14], 00000001
:00450D7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450D82 C7411801000000          mov [ecx+18], 00000001
:00450D89 8B55FC                  mov edx, dword ptr [ebp-04]
:00450D8C C7421C01000000          mov [edx+1C], 00000001
:00450D93 6A00                    push 00000000
:00450D95 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450D98 E8C3200000              call 00452E60

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450D9D 68FF000000              push 000000FF
:00450DA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450DA5 E856F8FFFF              call 00450600
:00450DAA 8A450C                  mov al, byte ptr [ebp+0C]
:00450DAD 50                      push eax
:00450DAE 8A4D08                  mov cl, byte ptr [ebp+08]
:00450DB1 51                      push ecx
:00450DB2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450DB5 E8D6F5FFFF              call 00450390
:00450DBA 8BE5                    mov esp, ebp
:00450DBC 5D                      pop ebp
:00450DBD C20800                  ret 0008



* Referenced by a CALL at Address:
|:00452270   
|
:00450DC0 55                      push ebp
:00450DC1 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450DC3 6AFF                    push FFFFFFFF
:00450DC5 68383B4700              push 00473B38
:00450DCA 64A100000000            mov eax, dword ptr fs:[00000000]
:00450DD0 50                      push eax
:00450DD1 64892500000000          mov dword ptr fs:[00000000], esp
:00450DD8 51                      push ecx
:00450DD9 894DF0                  mov dword ptr [ebp-10], ecx
:00450DDC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450DDF 83C10C                  add ecx, 0000000C
:00450DE2 E8394FFDFF              call 00425D20
:00450DE7 C745FC00000000          mov [ebp-04], 00000000
:00450DEE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450DF1 83C118                  add ecx, 00000018
:00450DF4 E8274FFDFF              call 00425D20
:00450DF9 C645FC01                mov [ebp-04], 01
:00450DFD 8B45F0                  mov eax, dword ptr [ebp-10]
:00450E00 C70000000000            mov dword ptr [eax], 00000000
:00450E06 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450E09 C64108FF                mov [ecx+08], FF
:00450E0D 8B55F0                  mov edx, dword ptr [ebp-10]
:00450E10 C64209FF                mov [edx+09], FF
:00450E14 8B45F0                  mov eax, dword ptr [ebp-10]
:00450E17 C7400400000000          mov [eax+04], 00000000
:00450E1E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450E21 C7412400000000          mov [ecx+24], 00000000
:00450E28 8B55F0                  mov edx, dword ptr [ebp-10]
:00450E2B C7422800000000          mov [edx+28], 00000000
:00450E32 6800B00100              push 0001B000
:00450E37 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450E3A 83C10C                  add ecx, 0000000C
:00450E3D E8FC26FCFF              call 0041353E
:00450E42 85C0                    test eax, eax
:00450E44 750D                    jne 00450E53

* Possible StringData Ref from Data Obj ->"SelectBushouClass::Can't Alloc "
                                        ->"Memory!!"
                                  |
:00450E46 686CD44700              push 0047D46C
:00450E4B E8EF51FDFF              call 0042603F
:00450E50 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450E44(C)
|
:00450E53 6800B00100              push 0001B000
:00450E58 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450E5B 83C118                  add ecx, 00000018
:00450E5E E8DB26FCFF              call 0041353E
:00450E63 85C0                    test eax, eax
:00450E65 750D                    jne 00450E74

* Possible StringData Ref from Data Obj ->"SelectBushouClass::Can't Alloc "
                                        ->"Memory!!"
                                  |
:00450E67 6894D44700              push 0047D494
:00450E6C E8CE51FDFF              call 0042603F
:00450E71 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450E65(C)
|
:00450E74 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00450E7B 8B45F0                  mov eax, dword ptr [ebp-10]
:00450E7E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00450E81 64890D00000000          mov dword ptr fs:[00000000], ecx
:00450E88 8BE5                    mov esp, ebp
:00450E8A 5D                      pop ebp
:00450E8B C3                      ret



* Referenced by a CALL at Address:
|:00452E1A   
|
:00450E8C 55                      push ebp
:00450E8D 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450E8F 6AFF                    push FFFFFFFF
:00450E91 685A3B4700              push 00473B5A
:00450E96 64A100000000            mov eax, dword ptr fs:[00000000]
:00450E9C 50                      push eax
:00450E9D 64892500000000          mov dword ptr fs:[00000000], esp
:00450EA4 51                      push ecx
:00450EA5 894DF0                  mov dword ptr [ebp-10], ecx
:00450EA8 C745FC01000000          mov [ebp-04], 00000001
:00450EAF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450EB2 83C10C                  add ecx, 0000000C
:00450EB5 E83926FCFF              call 004134F3
:00450EBA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450EBD 83C118                  add ecx, 00000018
:00450EC0 E82E26FCFF              call 004134F3
:00450EC5 C645FC00                mov [ebp-04], 00
:00450EC9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450ECC 83C118                  add ecx, 00000018
:00450ECF E80C26FCFF              call 004134E0
:00450ED4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00450EDB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00450EDE 83C10C                  add ecx, 0000000C
:00450EE1 E8FA25FCFF              call 004134E0
:00450EE6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00450EE9 64890D00000000          mov dword ptr fs:[00000000], ecx
:00450EF0 8BE5                    mov esp, ebp
:00450EF2 5D                      pop ebp
:00450EF3 C3                      ret



* Referenced by a CALL at Address:
|:00452BC9   
|
:00450EF4 55                      push ebp
:00450EF5 8BEC                    mov ebp, esp
:00450EF7 51                      push ecx
:00450EF8 894DFC                  mov dword ptr [ebp-04], ecx
:00450EFB 8B45FC                  mov eax, dword ptr [ebp-04]
:00450EFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450F01 8A5108                  mov dl, byte ptr [ecx+08]
:00450F04 885009                  mov byte ptr [eax+09], dl
:00450F07 8BE5                    mov esp, ebp
:00450F09 5D                      pop ebp
:00450F0A C3                      ret



* Referenced by a CALL at Addresses:
|:00416321   , :00452703   
|
:00450F0B 55                      push ebp
:00450F0C 8BEC                    mov ebp, esp
:00450F0E 51                      push ecx
:00450F0F 894DFC                  mov dword ptr [ebp-04], ecx
:00450F12 8B45FC                  mov eax, dword ptr [ebp-04]
:00450F15 8A4D08                  mov cl, byte ptr [ebp+08]
:00450F18 884809                  mov byte ptr [eax+09], cl
:00450F1B 8B55FC                  mov edx, dword ptr [ebp-04]
:00450F1E 33C0                    xor eax, eax
:00450F20 8A4209                  mov al, byte ptr [edx+09]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450F23 3DFF000000              cmp eax, 000000FF
:00450F28 741A                    je 00450F44
:00450F2A 6A01                    push 00000001
:00450F2C 6A01                    push 00000001
:00450F2E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450F31 8B5124                  mov edx, dword ptr [ecx+24]
:00450F34 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450F35 FF15AC864B00            Call dword ptr [004B86AC]
:00450F3B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450F3C FF1514874B00            Call dword ptr [004B8714]
:00450F42 EB18                    jmp 00450F5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450F28(C)
|
:00450F44 6A00                    push 00000000
:00450F46 6A01                    push 00000001
:00450F48 8B45FC                  mov eax, dword ptr [ebp-04]
:00450F4B 8B4824                  mov ecx, dword ptr [eax+24]
:00450F4E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00450F4F FF15AC864B00            Call dword ptr [004B86AC]
:00450F55 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00450F56 FF1514874B00            Call dword ptr [004B8714]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450F42(U)
|
:00450F5C 8BE5                    mov esp, ebp
:00450F5E 5D                      pop ebp
:00450F5F C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045230D   
|
:00450F62 55                      push ebp
:00450F63 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00450F65 6AFF                    push FFFFFFFF
:00450F67 68703B4700              push 00473B70
:00450F6C 64A100000000            mov eax, dword ptr fs:[00000000]
:00450F72 50                      push eax
:00450F73 64892500000000          mov dword ptr fs:[00000000], esp
:00450F7A 81EC1C010000            sub esp, 0000011C
:00450F80 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:00450F86 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00450F90 C785ECFEFFFF00000000    mov dword ptr [ebp+FFFFFEEC], 00000000
:00450F9A C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:00450FA4 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00450FAA C64008FF                mov [eax+08], FF
:00450FAE 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:00450FB4 C64109FF                mov [ecx+09], FF
:00450FB8 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:00450FBE C7422400000000          mov [edx+24], 00000000
:00450FC5 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00450FCB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450FCE 8908                    mov dword ptr [eax], ecx
:00450FD0 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:00450FD6 8B450C                  mov eax, dword ptr [ebp+0C]
:00450FD9 898210010000            mov dword ptr [edx+00000110], eax
:00450FDF 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:00450FE5 8B5510                  mov edx, dword ptr [ebp+10]
:00450FE8 899114010000            mov dword ptr [ecx+00000114], edx
:00450FEE 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00450FF4 E80767FBFF              call 00407700
:00450FF9 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_BS.E4"
                                  |
:00451000 68607B4700              push 00477B60
:00451005 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045100B E82533FCFF              call 00414335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045109A(U)
|
:00451010 8B4508                  mov eax, dword ptr [ebp+08]
:00451013 833800                  cmp dword ptr [eax], 00000000
:00451016 0F8483000000            je 0045109F
:0045101C 6A00                    push 00000000
:0045101E B930DA4A00              mov ecx, 004ADA30
:00451023 E87625FCFF              call 0041359E
:00451028 50                      push eax
:00451029 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045102C 8B09                    mov ecx, dword ptr [ecx]
:0045102E E89303FBFF              call 004013C6
:00451033 25FF000000              and eax, 000000FF
:00451038 50                      push eax
:00451039 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045103F E84534FCFF              call 00414489
:00451044 6800090000              push 00000900
:00451049 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0045104F 69D200090000            imul edx, 00000900
:00451055 52                      push edx
:00451056 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:0045105C 83C10C                  add ecx, 0000000C
:0045105F E83A25FCFF              call 0041359E
:00451064 50                      push eax
:00451065 6800360000              push 00003600
:0045106A B930DA4A00              mov ecx, 004ADA30
:0045106F E82A25FCFF              call 0041359E
:00451074 50                      push eax
:00451075 E8B5170100              call 0046282F
:0045107A 83C40C                  add esp, 0000000C
:0045107D 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00451083 83C001                  add eax, 00000001
:00451086 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0045108C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045108F 83C104                  add ecx, 00000004
:00451092 894D08                  mov dword ptr [ebp+08], ecx
:00451095 E8B4B40100              call 0046C54E
:0045109A E971FFFFFF              jmp 00451010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451016(C)
|
:0045109F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004510A5 E862F5FBFF              call 0041060C
:004510AA 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:004510B0 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:004510B6 894204                  mov dword ptr [edx+04], eax
:004510B9 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:004510BF E894080000              call 00451958
:004510C4 E8005BFFFF              call 00446BC9
:004510C9 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:004510CF 8981F0000000            mov dword ptr [ecx+000000F0], eax
:004510D5 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:004510DB 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:004510E1 8B8AF0000000            mov ecx, dword ptr [edx+000000F0]
:004510E7 3B4804                  cmp ecx, dword ptr [eax+04]
:004510EA 7615                    jbe 00451101
:004510EC 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:004510F2 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:004510F8 8B4804                  mov ecx, dword ptr [eax+04]
:004510FB 898AF0000000            mov dword ptr [edx+000000F0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004510EA(C)
|
:00451101 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:00451107 837A0410                cmp dword ptr [edx+04], 00000010
:0045110B 770F                    ja 0045111C
:0045110D 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00451113 C7402802000000          mov [eax+28], 00000002
:0045111A EB28                    jmp 00451144

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045110B(C)
|
:0045111C 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:00451122 83790420                cmp dword ptr [ecx+04], 00000020
:00451126 760F                    jbe 00451137
:00451128 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:0045112E C7422800000000          mov [edx+28], 00000000
:00451135 EB0D                    jmp 00451144

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451126(C)
|
:00451137 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0045113D C7402801000000          mov [eax+28], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045111A(U), :00451135(U)
|
:00451144 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:0045114A 8B11                    mov edx, dword ptr [ecx]
:0045114C 8995E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], edx
:00451152 C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:0045115C EB0F                    jmp 0045116D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004511A4(U)
|
:0045115E 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:00451164 83C001                  add eax, 00000001
:00451167 8985DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045115C(U)
|
:0045116D 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:00451173 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:00451179 3B5104                  cmp edx, dword ptr [ecx+04]
:0045117C 7328                    jnb 004511A6
:0045117E 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:00451184 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0045118A 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0045118D E85E36FBFF              call 004047F0
:00451192 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:00451198 0395DCFEFFFF            add edx, dword ptr [ebp+FFFFFEDC]
:0045119E 8882F4000000            mov byte ptr [edx+000000F4], al
:004511A4 EBB8                    jmp 0045115E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045117C(C)
|
:004511A6 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004511AD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004511B3 E86865FBFF              call 00407720
:004511B8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004511BB 64890D00000000          mov dword ptr fs:[00000000], ecx
:004511C2 8BE5                    mov esp, ebp
:004511C4 5D                      pop ebp
:004511C5 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0041624F   , :00452683   
|
:004511C8 55                      push ebp
:004511C9 8BEC                    mov ebp, esp
:004511CB 51                      push ecx
:004511CC 894DFC                  mov dword ptr [ebp-04], ecx
:004511CF 837D0800                cmp dword ptr [ebp+08], 00000000
:004511D3 7409                    je 004511DE
:004511D5 8B45FC                  mov eax, dword ptr [ebp-04]
:004511D8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004511DB 894824                  mov dword ptr [eax+24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004511D3(C)
|
:004511DE 8BE5                    mov esp, ebp
:004511E0 5D                      pop ebp
:004511E1 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00415EFA   , :0045168E   
|
:004511E4 55                      push ebp
:004511E5 8BEC                    mov ebp, esp
:004511E7 83EC08                  sub esp, 00000008
:004511EA 894DF8                  mov dword ptr [ebp-08], ecx
:004511ED C745FC00000000          mov [ebp-04], 00000000
:004511F4 8B450C                  mov eax, dword ptr [ebp+0C]
:004511F7 33D2                    xor edx, edx
:004511F9 B930000000              mov ecx, 00000030
:004511FE F7F1                    div ecx
:00451200 8B55FC                  mov edx, dword ptr [ebp-04]
:00451203 8D04C2                  lea eax, dword ptr [edx+8*eax]
:00451206 8945FC                  mov dword ptr [ebp-04], eax
:00451209 8B4508                  mov eax, dword ptr [ebp+08]
:0045120C 33D2                    xor edx, edx
:0045120E B930000000              mov ecx, 00000030
:00451213 F7F1                    div ecx
:00451215 8B55FC                  mov edx, dword ptr [ebp-04]
:00451218 03D0                    add edx, eax
:0045121A 8955FC                  mov dword ptr [ebp-04], edx
:0045121D 8B45F8                  mov eax, dword ptr [ebp-08]
:00451220 8B4828                  mov ecx, dword ptr [eax+28]
:00451223 C1E103                  shl ecx, 03
:00451226 8B55FC                  mov edx, dword ptr [ebp-04]
:00451229 2BD1                    sub edx, ecx
:0045122B 8955FC                  mov dword ptr [ebp-04], edx
:0045122E 8B45F8                  mov eax, dword ptr [ebp-08]
:00451231 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451234 3B4804                  cmp ecx, dword ptr [eax+04]
:00451237 7207                    jb 00451240

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00451239 C745FCFF000000          mov [ebp-04], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451237(C)
|
:00451240 8A45FC                  mov al, byte ptr [ebp-04]
:00451243 8BE5                    mov esp, ebp
:00451245 5D                      pop ebp
:00451246 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00416270   , :004516CF   , :00451783   , :004526A4   
|
:00451249 55                      push ebp
:0045124A 8BEC                    mov ebp, esp
:0045124C 83EC14                  sub esp, 00000014
:0045124F 894DEC                  mov dword ptr [ebp-14], ecx
:00451252 8B45EC                  mov eax, dword ptr [ebp-14]
:00451255 83782400                cmp dword ptr [eax+24], 00000000
:00451259 7505                    jne 00451260
:0045125B E916040000              jmp 00451676

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451259(C)
|
:00451260 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00451263 33D2                    xor edx, edx
:00451265 8A5108                  mov dl, byte ptr [ecx+08]
:00451268 81FAFF000000            cmp edx, 000000FF
:0045126E 0F8564010000            jne 004513D8
:00451274 68A4094B00              push 004B09A4
:00451279 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:0045127B 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0473, "T0w"
                                  |
:0045127D 6873040000              push 00000473
:00451282 8B45EC                  mov eax, dword ptr [ebp-14]
:00451285 8B4824                  mov ecx, dword ptr [eax+24]
:00451288 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00451289 FF15B4864B00            Call dword ptr [004B86B4]
:0045128F 68A8094B00              push 004B09A8
:00451294 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451296 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0475, ""
                                  |
:00451298 6875040000              push 00000475
:0045129D 8B55EC                  mov edx, dword ptr [ebp-14]
:004512A0 8B4224                  mov eax, dword ptr [edx+24]
:004512A3 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004512A4 FF15B4864B00            Call dword ptr [004B86B4]
:004512AA 68AC094B00              push 004B09AC
:004512AF 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004512B1 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:004512B3 68F9030000              push 000003F9
:004512B8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004512BB 8B5124                  mov edx, dword ptr [ecx+24]
:004512BE 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004512BF FF15B4864B00            Call dword ptr [004B86B4]
:004512C5 68B0094B00              push 004B09B0
:004512CA 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004512CC 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:004512CE 6802040000              push 00000402
:004512D3 8B45EC                  mov eax, dword ptr [ebp-14]
:004512D6 8B4824                  mov ecx, dword ptr [eax+24]
:004512D9 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004512DA FF15B4864B00            Call dword ptr [004B86B4]
:004512E0 68B4094B00              push 004B09B4
:004512E5 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004512E7 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:004512E9 6803040000              push 00000403
:004512EE 8B55EC                  mov edx, dword ptr [ebp-14]
:004512F1 8B4224                  mov eax, dword ptr [edx+24]
:004512F4 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004512F5 FF15B4864B00            Call dword ptr [004B86B4]
:004512FB 68B8094B00              push 004B09B8
:00451300 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451302 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:00451304 68FE030000              push 000003FE
:00451309 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045130C 8B5124                  mov edx, dword ptr [ecx+24]
:0045130F 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00451310 FF15B4864B00            Call dword ptr [004B86B4]
:00451316 68BC094B00              push 004B09BC
:0045131B 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:0045131D 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:0045131F 68F3030000              push 000003F3
:00451324 8B45EC                  mov eax, dword ptr [ebp-14]
:00451327 8B4824                  mov ecx, dword ptr [eax+24]
:0045132A 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045132B FF15B4864B00            Call dword ptr [004B86B4]
:00451331 68C0094B00              push 004B09C0
:00451336 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451338 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0474, "1000"
                                  |
:0045133A 6874040000              push 00000474
:0045133F 8B55EC                  mov edx, dword ptr [ebp-14]
:00451342 8B4224                  mov eax, dword ptr [edx+24]
:00451345 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00451346 FF15B4864B00            Call dword ptr [004B86B4]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045134C 68FF000000              push 000000FF
:00451351 6A00                    push 00000000
:00451353 6806040000              push 00000406
:00451358 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045135B 8B5124                  mov edx, dword ptr [ecx+24]
:0045135E 52                      push edx
:0045135F E8A7390100              call 00464D0B
:00451364 83C410                  add esp, 00000010
:00451367 68C4094B00              push 004B09C4
:0045136C 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:0045136E 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:00451370 6800040000              push 00000400
:00451375 8B45EC                  mov eax, dword ptr [ebp-14]
:00451378 8B4824                  mov ecx, dword ptr [eax+24]
:0045137B 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045137C FF15B4864B00            Call dword ptr [004B86B4]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00451382 68FF000000              push 000000FF
:00451387 6A00                    push 00000000
:00451389 6807040000              push 00000407
:0045138E 8B55EC                  mov edx, dword ptr [ebp-14]
:00451391 8B4224                  mov eax, dword ptr [edx+24]
:00451394 50                      push eax
:00451395 E871390100              call 00464D0B
:0045139A 83C410                  add esp, 00000010
:0045139D 68C8094B00              push 004B09C8
:004513A2 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004513A4 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004513A6 6801040000              push 00000401
:004513AB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004513AE 8B5124                  mov edx, dword ptr [ecx+24]
:004513B1 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004513B2 FF15B4864B00            Call dword ptr [004B86B4]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004513B8 68FF000000              push 000000FF
:004513BD 6A00                    push 00000000
:004513BF 680A040000              push 0000040A
:004513C4 8B45EC                  mov eax, dword ptr [ebp-14]
:004513C7 8B4824                  mov ecx, dword ptr [eax+24]
:004513CA 51                      push ecx
:004513CB E83B390100              call 00464D0B
:004513D0 83C410                  add esp, 00000010
:004513D3 E99E020000              jmp 00451676

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045126E(C)
|
:004513D8 8B55EC                  mov edx, dword ptr [ebp-14]
:004513DB 33C0                    xor eax, eax
:004513DD 8A4208                  mov al, byte ptr [edx+08]
:004513E0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004513E3 8B11                    mov edx, dword ptr [ecx]
:004513E5 8B0482                  mov eax, dword ptr [edx+4*eax]
:004513E8 8945F0                  mov dword ptr [ebp-10], eax
:004513EB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004513EE E8AF27FBFF              call 00403BA2
:004513F3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004513F4 68BCD44700              push 0047D4BC
:004513F9 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004513FC 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004513FD FF1500874B00            Call dword ptr [004B8700]
:00451403 83C40C                  add esp, 0000000C
:00451406 8D55F4                  lea edx, dword ptr [ebp-0C]
:00451409 52                      push edx
:0045140A 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:0045140C 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0473, "T0w"
                                  |
:0045140E 6873040000              push 00000473
:00451413 8B45EC                  mov eax, dword ptr [ebp-14]
:00451416 8B4824                  mov ecx, dword ptr [eax+24]
:00451419 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045141A FF15B4864B00            Call dword ptr [004B86B4]
:00451420 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451423 E84833FBFF              call 00404770
:00451428 25FF000000              and eax, 000000FF
:0045142D 50                      push eax
:0045142E E86058FBFF              call 00406C93
:00451433 83C404                  add esp, 00000004
:00451436 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00451437 68C0D44700              push 0047D4C0
:0045143C 8D55F4                  lea edx, dword ptr [ebp-0C]
:0045143F 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00451440 FF1500874B00            Call dword ptr [004B8700]
:00451446 83C40C                  add esp, 0000000C
:00451449 8D45F4                  lea eax, dword ptr [ebp-0C]
:0045144C 50                      push eax
:0045144D 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:0045144F 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0475, ""
                                  |
:00451451 6875040000              push 00000475
:00451456 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00451459 8B5124                  mov edx, dword ptr [ecx+24]
:0045145C 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045145D FF15B4864B00            Call dword ptr [004B86B4]
:00451463 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451466 E86533FBFF              call 004047D0
:0045146B 25FF000000              and eax, 000000FF
:00451470 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00451471 68C4D44700              push 0047D4C4
:00451476 8D45F4                  lea eax, dword ptr [ebp-0C]
:00451479 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045147A FF1500874B00            Call dword ptr [004B8700]
:00451480 83C40C                  add esp, 0000000C
:00451483 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00451486 51                      push ecx
:00451487 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451489 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0045148B 68F9030000              push 000003F9
:00451490 8B55EC                  mov edx, dword ptr [ebp-14]
:00451493 8B4224                  mov eax, dword ptr [edx+24]
:00451496 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00451497 FF15B4864B00            Call dword ptr [004B86B4]
:0045149D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004514A0 E8EB33FBFF              call 00404890
:004514A5 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:004514A6 68C8D44700              push 0047D4C8
:004514AB 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004514AE 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004514AF FF1500874B00            Call dword ptr [004B8700]
:004514B5 83C40C                  add esp, 0000000C
:004514B8 8D55F4                  lea edx, dword ptr [ebp-0C]
:004514BB 52                      push edx
:004514BC 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004514BE 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:004514C0 6802040000              push 00000402
:004514C5 8B45EC                  mov eax, dword ptr [ebp-14]
:004514C8 8B4824                  mov ecx, dword ptr [eax+24]
:004514CB 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004514CC FF15B4864B00            Call dword ptr [004B86B4]
:004514D2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004514D5 E80610FBFF              call 004024E0
:004514DA 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:004514DB 68CCD44700              push 0047D4CC
:004514E0 8D55F4                  lea edx, dword ptr [ebp-0C]
:004514E3 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004514E4 FF1500874B00            Call dword ptr [004B8700]
:004514EA 83C40C                  add esp, 0000000C
:004514ED 8D45F4                  lea eax, dword ptr [ebp-0C]
:004514F0 50                      push eax
:004514F1 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004514F3 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:004514F5 68FE030000              push 000003FE
:004514FA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004514FD 8B5124                  mov edx, dword ptr [ecx+24]
:00451500 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00451501 FF15B4864B00            Call dword ptr [004B86B4]
:00451507 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045150A E8C133FBFF              call 004048D0
:0045150F 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00451510 68D0D44700              push 0047D4D0
:00451515 8D45F4                  lea eax, dword ptr [ebp-0C]
:00451518 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00451519 FF1500874B00            Call dword ptr [004B8700]
:0045151F 83C40C                  add esp, 0000000C
:00451522 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00451525 51                      push ecx
:00451526 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451528 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:0045152A 6803040000              push 00000403
:0045152F 8B55EC                  mov edx, dword ptr [ebp-14]
:00451532 8B4224                  mov eax, dword ptr [edx+24]
:00451535 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00451536 FF15B4864B00            Call dword ptr [004B86B4]
:0045153C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045153F E8CD0FFBFF              call 00402511
:00451544 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00451545 68D4D44700              push 0047D4D4
:0045154A 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0045154D 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045154E FF1500874B00            Call dword ptr [004B8700]
:00451554 83C40C                  add esp, 0000000C
:00451557 8D55F4                  lea edx, dword ptr [ebp-0C]
:0045155A 52                      push edx
:0045155B 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:0045155D 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:0045155F 68F3030000              push 000003F3
:00451564 8B45EC                  mov eax, dword ptr [ebp-14]
:00451567 8B4824                  mov ecx, dword ptr [eax+24]
:0045156A 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045156B FF15B4864B00            Call dword ptr [004B86B4]
:00451571 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451574 E8470EFBFF              call 004023C0
:00451579 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:0045157A 68D8D44700              push 0047D4D8
:0045157F 8D55F4                  lea edx, dword ptr [ebp-0C]
:00451582 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00451583 FF1500874B00            Call dword ptr [004B8700]
:00451589 83C40C                  add esp, 0000000C
:0045158C 8D45F4                  lea eax, dword ptr [ebp-0C]
:0045158F 50                      push eax
:00451590 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451592 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0474, "1000"
                                  |
:00451594 6874040000              push 00000474
:00451599 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045159C 8B5124                  mov edx, dword ptr [ecx+24]
:0045159F 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004515A0 FF15B4864B00            Call dword ptr [004B86B4]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004515A6 68FF000000              push 000000FF
:004515AB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004515AE E80D0EFBFF              call 004023C0
:004515B3 50                      push eax
:004515B4 6806040000              push 00000406
:004515B9 8B45EC                  mov eax, dword ptr [ebp-14]
:004515BC 8B4824                  mov ecx, dword ptr [eax+24]
:004515BF 51                      push ecx
:004515C0 E846370100              call 00464D0B
:004515C5 83C410                  add esp, 00000010
:004515C8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004515CB E8230EFBFF              call 004023F3
:004515D0 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:004515D1 68DCD44700              push 0047D4DC
:004515D6 8D55F4                  lea edx, dword ptr [ebp-0C]
:004515D9 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004515DA FF1500874B00            Call dword ptr [004B8700]
:004515E0 83C40C                  add esp, 0000000C
:004515E3 8D45F4                  lea eax, dword ptr [ebp-0C]
:004515E6 50                      push eax
:004515E7 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004515E9 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:004515EB 6800040000              push 00000400
:004515F0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004515F3 8B5124                  mov edx, dword ptr [ecx+24]
:004515F6 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004515F7 FF15B4864B00            Call dword ptr [004B86B4]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004515FD 68FF000000              push 000000FF
:00451602 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451605 E8E90DFBFF              call 004023F3
:0045160A 50                      push eax
:0045160B 6807040000              push 00000407
:00451610 8B45EC                  mov eax, dword ptr [ebp-14]
:00451613 8B4824                  mov ecx, dword ptr [eax+24]
:00451616 51                      push ecx
:00451617 E8EF360100              call 00464D0B
:0045161C 83C410                  add esp, 00000010
:0045161F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451622 E8FF0DFBFF              call 00402426
:00451627 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00451628 68E0D44700              push 0047D4E0
:0045162D 8D55F4                  lea edx, dword ptr [ebp-0C]
:00451630 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00451631 FF1500874B00            Call dword ptr [004B8700]
:00451637 83C40C                  add esp, 0000000C
:0045163A 8D45F4                  lea eax, dword ptr [ebp-0C]
:0045163D 50                      push eax
:0045163E 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451640 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00451642 6801040000              push 00000401
:00451647 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045164A 8B5124                  mov edx, dword ptr [ecx+24]
:0045164D 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045164E FF15B4864B00            Call dword ptr [004B86B4]
:00451654 68F4010000              push 000001F4
:00451659 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045165C E8C50DFBFF              call 00402426
:00451661 50                      push eax
:00451662 680A040000              push 0000040A
:00451667 8B45EC                  mov eax, dword ptr [ebp-14]
:0045166A 8B4824                  mov ecx, dword ptr [eax+24]
:0045166D 51                      push ecx
:0045166E E898360100              call 00464D0B
:00451673 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045125B(U), :004513D3(U)
|
:00451676 8BE5                    mov esp, ebp
:00451678 5D                      pop ebp
:00451679 C3                      ret



* Referenced by a CALL at Addresses:
|:00415D25   , :00452BB0   
|
:0045167A 55                      push ebp
:0045167B 8BEC                    mov ebp, esp
:0045167D 83EC10                  sub esp, 00000010
:00451680 894DF0                  mov dword ptr [ebp-10], ecx
:00451683 8B450C                  mov eax, dword ptr [ebp+0C]
:00451686 50                      push eax
:00451687 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045168A 51                      push ecx
:0045168B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045168E E851FBFFFF              call 004511E4
:00451693 8845FC                  mov byte ptr [ebp-04], al
:00451696 8B55F0                  mov edx, dword ptr [ebp-10]
:00451699 33C0                    xor eax, eax
:0045169B 8A4208                  mov al, byte ptr [edx+08]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045169E 3DFF000000              cmp eax, 000000FF
:004516A3 7411                    je 004516B6
:004516A5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004516A8 33D2                    xor edx, edx
:004516AA 8A5108                  mov dl, byte ptr [ecx+08]
:004516AD 52                      push edx
:004516AE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004516B1 E8D8000000              call 0045178E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004516A3(C)
|
:004516B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004516B9 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004516BE 3DFF000000              cmp eax, 000000FF
:004516C3 7514                    jne 004516D9
:004516C5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004516C8 C64108FF                mov [ecx+08], FF
:004516CC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004516CF E875FBFFFF              call 00451249
:004516D4 E9AF000000              jmp 00451788

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004516C3(C)
|
:004516D9 8B45FC                  mov eax, dword ptr [ebp-04]
:004516DC 25FF000000              and eax, 000000FF
:004516E1 99                      cdq
:004516E2 33C2                    xor eax, edx
:004516E4 2BC2                    sub eax, edx
:004516E6 83E007                  and eax, 00000007
:004516E9 33C2                    xor eax, edx
:004516EB 2BC2                    sub eax, edx
:004516ED 6BC030                  imul eax, 00000030
:004516F0 8945F8                  mov dword ptr [ebp-08], eax
:004516F3 8B45FC                  mov eax, dword ptr [ebp-04]
:004516F6 25FF000000              and eax, 000000FF
:004516FB 99                      cdq
:004516FC 83E207                  and edx, 00000007
:004516FF 03C2                    add eax, edx
:00451701 C1F803                  sar eax, 03
:00451704 6BC030                  imul eax, 00000030
:00451707 8945F4                  mov dword ptr [ebp-0C], eax
:0045170A 8B55F0                  mov edx, dword ptr [ebp-10]
:0045170D 8B4228                  mov eax, dword ptr [edx+28]
:00451710 6BC030                  imul eax, 00000030
:00451713 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00451716 03C8                    add ecx, eax
:00451718 894DF4                  mov dword ptr [ebp-0C], ecx
:0045171B 8B55F0                  mov edx, dword ptr [ebp-10]
:0045171E 8B8214010000            mov eax, dword ptr [edx+00000114]
:00451724 50                      push eax
:00451725 E8FD8F0100              call 0046A727
:0045172A 83C404                  add esp, 00000004
:0045172D 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045172F 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451731 6A04                    push 00000004
:00451733 E8D8960100              call 0046AE10
:00451738 83C40C                  add esp, 0000000C
:0045173B 68003B0000              push 00003B00
:00451740 B940DF4A00              mov ecx, 004ADF40
:00451745 E8541EFCFF              call 0041359E
:0045174A 50                      push eax
:0045174B 6A30                    push 00000030
:0045174D 6A30                    push 00000030
:0045174F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00451752 51                      push ecx
:00451753 8B55F8                  mov edx, dword ptr [ebp-08]
:00451756 52                      push edx
:00451757 E88BA40100              call 0046BBE7
:0045175C 83C414                  add esp, 00000014
:0045175F 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00451761 6A0A                    push 0000000A
:00451763 6A00                    push 00000000
:00451765 E8A6960100              call 0046AE10
:0045176A 83C40C                  add esp, 0000000C
:0045176D 6A00                    push 00000000
:0045176F E8B38F0100              call 0046A727
:00451774 83C404                  add esp, 00000004
:00451777 8B45F0                  mov eax, dword ptr [ebp-10]
:0045177A 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045177D 884808                  mov byte ptr [eax+08], cl
:00451780 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451783 E8C1FAFFFF              call 00451249

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004516D4(U)
|
:00451788 8BE5                    mov esp, ebp
:0045178A 5D                      pop ebp
:0045178B C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004516B1   , :004518EC   , :00451A24   , :004520B0   
|
:0045178E 55                      push ebp
:0045178F 8BEC                    mov ebp, esp
:00451791 83EC10                  sub esp, 00000010
:00451794 894DF0                  mov dword ptr [ebp-10], ecx
:00451797 8B45F0                  mov eax, dword ptr [ebp-10]
:0045179A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045179D 3B4804                  cmp ecx, dword ptr [eax+04]
:004517A0 7205                    jb 004517A7
:004517A2 E9FB000000              jmp 004518A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004517A0(C)
|
:004517A7 8B55F0                  mov edx, dword ptr [ebp-10]
:004517AA 8B02                    mov eax, dword ptr [edx]
:004517AC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004517AF 833C8800                cmp dword ptr [eax+4*ecx], 00000000
:004517B3 7505                    jne 004517BA
:004517B5 E9E8000000              jmp 004518A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004517B3(C)
|
:004517BA 8B55F0                  mov edx, dword ptr [ebp-10]
:004517BD 8B8214010000            mov eax, dword ptr [edx+00000114]
:004517C3 50                      push eax
:004517C4 E85E8F0100              call 0046A727
:004517C9 83C404                  add esp, 00000004
:004517CC C745FC00000000          mov [ebp-04], 00000000
:004517D3 8B4508                  mov eax, dword ptr [ebp+08]
:004517D6 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00008: ""
                                  |
:004517D8 B908000000              mov ecx, 00000008
:004517DD F7F1                    div ecx
:004517DF 6BD230                  imul edx, 00000030
:004517E2 8955F8                  mov dword ptr [ebp-08], edx
:004517E5 8B5508                  mov edx, dword ptr [ebp+08]
:004517E8 C1EA03                  shr edx, 03
:004517EB 6BD230                  imul edx, 00000030
:004517EE 8955F4                  mov dword ptr [ebp-0C], edx
:004517F1 8B45F0                  mov eax, dword ptr [ebp-10]
:004517F4 8B4828                  mov ecx, dword ptr [eax+28]
:004517F7 6BC930                  imul ecx, 00000030
:004517FA 8B55F4                  mov edx, dword ptr [ebp-0C]
:004517FD 03D1                    add edx, ecx
:004517FF 8955F4                  mov dword ptr [ebp-0C], edx
:00451802 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00451804 6A0A                    push 0000000A
:00451806 6A00                    push 00000000
:00451808 E803960100              call 0046AE10
:0045180D 83C40C                  add esp, 0000000C
:00451810 8B4508                  mov eax, dword ptr [ebp+08]
:00451813 69C000090000            imul eax, 00000900
:00451819 50                      push eax
:0045181A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045181D 83C118                  add ecx, 00000018
:00451820 E8791DFCFF              call 0041359E
:00451825 8945FC                  mov dword ptr [ebp-04], eax
:00451828 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045182B 51                      push ecx
:0045182C 6A30                    push 00000030
:0045182E 6A30                    push 00000030
:00451830 8B55F4                  mov edx, dword ptr [ebp-0C]
:00451833 52                      push edx
:00451834 8B45F8                  mov eax, dword ptr [ebp-08]
:00451837 50                      push eax
:00451838 E8AAA30100              call 0046BBE7
:0045183D 83C414                  add esp, 00000014
:00451840 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00451842 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451844 6A04                    push 00000004
:00451846 E8C5950100              call 0046AE10
:0045184B 83C40C                  add esp, 0000000C
:0045184E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451851 69C900090000            imul ecx, 00000900
:00451857 51                      push ecx
:00451858 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045185B 83C10C                  add ecx, 0000000C
:0045185E E83B1DFCFF              call 0041359E
:00451863 8945FC                  mov dword ptr [ebp-04], eax
:00451866 8B55FC                  mov edx, dword ptr [ebp-04]
:00451869 52                      push edx
:0045186A 6A30                    push 00000030
:0045186C 6A30                    push 00000030
:0045186E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00451871 50                      push eax
:00451872 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00451875 51                      push ecx
:00451876 E86CA30100              call 0046BBE7
:0045187B 83C414                  add esp, 00000014
:0045187E 8B5508                  mov edx, dword ptr [ebp+08]
:00451881 52                      push edx
:00451882 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451885 E8E3010000              call 00451A6D
:0045188A 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045188C 6A0A                    push 0000000A
:0045188E 6A00                    push 00000000
:00451890 E87B950100              call 0046AE10
:00451895 83C40C                  add esp, 0000000C
:00451898 6A00                    push 00000000
:0045189A E8888E0100              call 0046A727
:0045189F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004517A2(U), :004517B5(U)
|
:004518A2 8BE5                    mov esp, ebp
:004518A4 5D                      pop ebp
:004518A5 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00416265   , :00451B6A   , :00452699   
|
:004518A8 55                      push ebp
:004518A9 8BEC                    mov ebp, esp
:004518AB 83EC08                  sub esp, 00000008
:004518AE 894DF8                  mov dword ptr [ebp-08], ecx
:004518B1 6A00                    push 00000000
:004518B3 8B45F8                  mov eax, dword ptr [ebp-08]
:004518B6 8B8810010000            mov ecx, dword ptr [eax+00000110]
:004518BC 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004518BD FF15E4864B00            Call dword ptr [004B86E4]
:004518C3 E86A15FCFF              call 00412E32
:004518C8 C745FC00000000          mov [ebp-04], 00000000
:004518CF EB09                    jmp 004518DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004518F1(U)
|
:004518D1 8B55FC                  mov edx, dword ptr [ebp-04]
:004518D4 83C201                  add edx, 00000001
:004518D7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004518CF(U)
|
:004518DA 8B45F8                  mov eax, dword ptr [ebp-08]
:004518DD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004518E0 3B4804                  cmp ecx, dword ptr [eax+04]
:004518E3 730E                    jnb 004518F3
:004518E5 8B55FC                  mov edx, dword ptr [ebp-04]
:004518E8 52                      push edx
:004518E9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004518EC E89DFEFFFF              call 0045178E
:004518F1 EBDE                    jmp 004518D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004518E3(C)
|
:004518F3 E85515FCFF              call 00412E4D
:004518F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004518FB E8FE010000              call 00451AFE

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00451900 6A05                    push 00000005
:00451902 8B45F8                  mov eax, dword ptr [ebp-08]
:00451905 8B8810010000            mov ecx, dword ptr [eax+00000110]
:0045190B 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045190C FF15E4864B00            Call dword ptr [004B86E4]
:00451912 8BE5                    mov esp, ebp
:00451914 5D                      pop ebp
:00451915 C3                      ret


:00451916 55                      push ebp
:00451917 8BEC                    mov ebp, esp
:00451919 51                      push ecx
:0045191A 894DFC                  mov dword ptr [ebp-04], ecx
:0045191D 6A00                    push 00000000
:0045191F 6A01                    push 00000001
:00451921 6811010000              push 00000111
:00451926 8B45FC                  mov eax, dword ptr [ebp-04]
:00451929 8B4824                  mov ecx, dword ptr [eax+24]
:0045192C 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045192D FF15D8864B00            Call dword ptr [004B86D8]
:00451933 8BE5                    mov esp, ebp
:00451935 5D                      pop ebp
:00451936 C3                      ret


:00451937 55                      push ebp
:00451938 8BEC                    mov ebp, esp
:0045193A 51                      push ecx
:0045193B 894DFC                  mov dword ptr [ebp-04], ecx
:0045193E 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00451940 6A02                    push 00000002
:00451942 6811010000              push 00000111
:00451947 8B45FC                  mov eax, dword ptr [ebp-04]
:0045194A 8B4824                  mov ecx, dword ptr [eax+24]
:0045194D 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045194E FF15D8864B00            Call dword ptr [004B86D8]
:00451954 8BE5                    mov esp, ebp
:00451956 5D                      pop ebp
:00451957 C3                      ret



* Referenced by a CALL at Addresses:
|:0041632C   , :004510BF   , :00451B5F   , :0045270E   
|
:00451958 55                      push ebp
:00451959 8BEC                    mov ebp, esp
:0045195B 83EC08                  sub esp, 00000008
:0045195E 894DF8                  mov dword ptr [ebp-08], ecx
:00451961 C745FC00000000          mov [ebp-04], 00000000
:00451968 EB09                    jmp 00451973

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451987(U)
|
:0045196A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045196D 83C001                  add eax, 00000001
:00451970 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451968(U)
|
:00451973 837DFC30                cmp dword ptr [ebp-04], 00000030
:00451977 7310                    jnb 00451989
:00451979 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045197C 8B55F8                  mov edx, dword ptr [ebp-08]
:0045197F C7448A2C00000000        mov [edx+4*ecx+2C], 00000000
:00451987 EBE1                    jmp 0045196A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451977(C)
|
:00451989 8B45F8                  mov eax, dword ptr [ebp-08]
:0045198C C780EC00000000000000    mov dword ptr [ebx+000000EC], 00000000
:00451996 8BE5                    mov esp, ebp
:00451998 5D                      pop ebp
:00451999 C3                      ret



* Referenced by a CALL at Addresses:
|:00451E11   , :00452BFC   
|
:0045199A 55                      push ebp
:0045199B 8BEC                    mov ebp, esp
:0045199D 51                      push ecx
:0045199E 894DFC                  mov dword ptr [ebp-04], ecx
:004519A1 8B4508                  mov eax, dword ptr [ebp+08]
:004519A4 50                      push eax
:004519A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004519A8 E893150000              call 00452F40
:004519AD 85C0                    test eax, eax
:004519AF 742D                    je 004519DE
:004519B1 6A00                    push 00000000
:004519B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004519B6 51                      push ecx
:004519B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004519BA E8A1150000              call 00452F60
:004519BF 6A01                    push 00000001
:004519C1 8B55FC                  mov edx, dword ptr [ebp-04]
:004519C4 8B82EC000000            mov eax, dword ptr [edx+000000EC]
:004519CA 50                      push eax
:004519CB E8F4050100              call 00461FC4
:004519D0 83C408                  add esp, 00000008
:004519D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004519D6 8981EC000000            mov dword ptr [ecx+000000EC], eax
:004519DC EB37                    jmp 00451A15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004519AF(C)
|
:004519DE 8B55FC                  mov edx, dword ptr [ebp-04]
:004519E1 8B45FC                  mov eax, dword ptr [ebp-04]
:004519E4 8B8AEC000000            mov ecx, dword ptr [edx+000000EC]
:004519EA 3B88F0000000            cmp ecx, dword ptr [eax+000000F0]
:004519F0 7323                    jnb 00451A15
:004519F2 6A01                    push 00000001
:004519F4 8B5508                  mov edx, dword ptr [ebp+08]
:004519F7 52                      push edx
:004519F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004519FB E860150000              call 00452F60
:00451A00 8B45FC                  mov eax, dword ptr [ebp-04]
:00451A03 8B88EC000000            mov ecx, dword ptr [eax+000000EC]
:00451A09 83C101                  add ecx, 00000001
:00451A0C 8B55FC                  mov edx, dword ptr [ebp-04]
:00451A0F 898AEC000000            mov dword ptr [edx+000000EC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004519DC(U), :004519F0(C)
|
:00451A15 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451A18 E8E1000000              call 00451AFE
:00451A1D 8B4508                  mov eax, dword ptr [ebp+08]
:00451A20 50                      push eax
:00451A21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451A24 E865FDFFFF              call 0045178E
:00451A29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451A2C 83B9EC00000000          cmp dword ptr [ecx+000000EC], 00000000
:00451A33 761A                    jbe 00451A4F
:00451A35 6A01                    push 00000001
:00451A37 6A01                    push 00000001
:00451A39 8B55FC                  mov edx, dword ptr [ebp-04]
:00451A3C 8B4224                  mov eax, dword ptr [edx+24]
:00451A3F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00451A40 FF15AC864B00            Call dword ptr [004B86AC]
:00451A46 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00451A47 FF1514874B00            Call dword ptr [004B8714]
:00451A4D EB18                    jmp 00451A67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451A33(C)
|
:00451A4F 6A00                    push 00000000
:00451A51 6A01                    push 00000001
:00451A53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451A56 8B5124                  mov edx, dword ptr [ecx+24]
:00451A59 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00451A5A FF15AC864B00            Call dword ptr [004B86AC]
:00451A60 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00451A61 FF1514874B00            Call dword ptr [004B8714]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451A4D(U)
|
:00451A67 8BE5                    mov esp, ebp
:00451A69 5D                      pop ebp
:00451A6A C20400                  ret 0004



* Referenced by a CALL at Address:
|:00451885   
|
:00451A6D 55                      push ebp
:00451A6E 8BEC                    mov ebp, esp
:00451A70 83EC0C                  sub esp, 0000000C
:00451A73 894DF4                  mov dword ptr [ebp-0C], ecx
:00451A76 8B4508                  mov eax, dword ptr [ebp+08]
:00451A79 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00451A7C 837C812C00              cmp dword ptr [ecx+4*eax+2C], 00000000
:00451A81 7475                    je 00451AF8
:00451A83 8B4508                  mov eax, dword ptr [ebp+08]
:00451A86 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00008: ""
                                  |
:00451A88 B908000000              mov ecx, 00000008
:00451A8D F7F1                    div ecx
:00451A8F 6BD230                  imul edx, 00000030
:00451A92 8955FC                  mov dword ptr [ebp-04], edx
:00451A95 8B5508                  mov edx, dword ptr [ebp+08]
:00451A98 C1EA03                  shr edx, 03
:00451A9B 6BD230                  imul edx, 00000030
:00451A9E 8955F8                  mov dword ptr [ebp-08], edx
:00451AA1 8B45F4                  mov eax, dword ptr [ebp-0C]
:00451AA4 8B4828                  mov ecx, dword ptr [eax+28]
:00451AA7 6BC930                  imul ecx, 00000030
:00451AAA 8B55F8                  mov edx, dword ptr [ebp-08]
:00451AAD 03D1                    add edx, ecx
:00451AAF 8955F8                  mov dword ptr [ebp-08], edx
:00451AB2 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00451AB4 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451AB6 6A04                    push 00000004
:00451AB8 E853930100              call 0046AE10
:00451ABD 83C40C                  add esp, 0000000C
:00451AC0 68401B0000              push 00001B40
:00451AC5 B940DF4A00              mov ecx, 004ADF40
:00451ACA E8CF1AFCFF              call 0041359E
:00451ACF 50                      push eax
:00451AD0 6A18                    push 00000018
:00451AD2 6A18                    push 00000018
:00451AD4 8B45F8                  mov eax, dword ptr [ebp-08]
:00451AD7 83C00C                  add eax, 0000000C
:00451ADA 50                      push eax
:00451ADB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451ADE 83C10C                  add ecx, 0000000C
:00451AE1 51                      push ecx
:00451AE2 E800A10100              call 0046BBE7
:00451AE7 83C414                  add esp, 00000014
:00451AEA 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00451AEC 6A0A                    push 0000000A
:00451AEE 6A00                    push 00000000
:00451AF0 E81B930100              call 0046AE10
:00451AF5 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451A81(C)
|
:00451AF8 8BE5                    mov esp, ebp
:00451AFA 5D                      pop ebp
:00451AFB C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004518FB   , :00451A18   
|
:00451AFE 55                      push ebp
:00451AFF 8BEC                    mov ebp, esp
:00451B01 83EC10                  sub esp, 00000010
:00451B04 894DF0                  mov dword ptr [ebp-10], ecx
:00451B07 8B45F0                  mov eax, dword ptr [ebp-10]
:00451B0A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451B0D 8B90F0000000            mov edx, dword ptr [eax+000000F0]
:00451B13 2B91EC000000            sub edx, dword ptr [ecx+000000EC]
:00451B19 52                      push edx

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00451B1A 68E4D44700              push 0047D4E4
:00451B1F 8D45F4                  lea eax, dword ptr [ebp-0C]
:00451B22 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00451B23 FF1500874B00            Call dword ptr [004B8700]
:00451B29 83C40C                  add esp, 0000000C
:00451B2C 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00451B2F 51                      push ecx
:00451B30 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00451B32 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0536, "99"
                                  |
:00451B34 6836050000              push 00000536
:00451B39 8B55F0                  mov edx, dword ptr [ebp-10]
:00451B3C 8B4224                  mov eax, dword ptr [edx+24]
:00451B3F 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00451B40 FF15B4864B00            Call dword ptr [004B86B4]
:00451B46 8BE5                    mov esp, ebp
:00451B48 5D                      pop ebp
:00451B49 C3                      ret



* Referenced by a CALL at Addresses:
|:00452781   , :0045279F   , :004527BB   
|
:00451B4A 55                      push ebp
:00451B4B 8BEC                    mov ebp, esp
:00451B4D 81ECA4010000            sub esp, 000001A4
:00451B53 898D60FEFFFF            mov dword ptr [ebp+FFFFFE60], ecx
:00451B59 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00451B5F E8F4FDFFFF              call 00451958
:00451B64 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00451B6A E839FDFFFF              call 004518A8
:00451B6F C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:00451B79 EB0F                    jmp 00451B8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451BB5(U)
|
:00451B7B 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00451B81 83C001                  add eax, 00000001
:00451B84 89856CFEFFFF            mov dword ptr [ebp+FFFFFE6C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451B79(U)
|
:00451B8A 83BD6CFEFFFF31          cmp dword ptr [ebp+FFFFFE6C], 00000031
:00451B91 7324                    jnb 00451BB7
:00451B93 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:00451B99 C7848D74FEFFFFFFFF0000  mov dword ptr [ebp+4*ecx-0000018C], 0000FFFF
:00451BA4 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451BAA C7849538FFFFFF00000000  mov dword ptr [ebp+4*edx-000000C8], 00000000
:00451BB5 EBC4                    jmp 00451B7B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451B91(C)
|
:00451BB7 C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:00451BC1 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:00451BC7 8B08                    mov ecx, dword ptr [eax]
:00451BC9 8B11                    mov edx, dword ptr [ecx]
:00451BCB 899568FEFFFF            mov dword ptr [ebp+FFFFFE68], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451CAD(U)
|
:00451BD1 83BD68FEFFFF00          cmp dword ptr [ebp+FFFFFE68], 00000000
:00451BD8 0F84D4000000            je 00451CB2
:00451BDE 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00451BE4 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:00451BEA 898C8574FEFFFF          mov dword ptr [ebp+4*eax-0000018C], ecx
:00451BF1 8B5508                  mov edx, dword ptr [ebp+08]
:00451BF4 89955CFEFFFF            mov dword ptr [ebp+FFFFFE5C], edx
:00451BFA 83BD5CFEFFFF00          cmp dword ptr [ebp+FFFFFE5C], 00000000
:00451C01 7414                    je 00451C17
:00451C03 83BD5CFEFFFF01          cmp dword ptr [ebp+FFFFFE5C], 00000001
:00451C0A 742A                    je 00451C36
:00451C0C 83BD5CFEFFFF02          cmp dword ptr [ebp+FFFFFE5C], 00000002
:00451C13 743B                    je 00451C50
:00451C15 EB53                    jmp 00451C6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451C01(C)
|
:00451C17 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:00451C1D E8AE2BFBFF              call 004047D0
:00451C22 25FF000000              and eax, 000000FF
:00451C27 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:00451C2D 89848D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], eax
:00451C34 EB51                    jmp 00451C87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451C0A(C)
|
:00451C36 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:00451C3C E87F07FBFF              call 004023C0
:00451C41 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451C47 89849538FFFFFF          mov dword ptr [ebp+4*edx-000000C8], eax
:00451C4E EB37                    jmp 00451C87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451C13(C)
|
:00451C50 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:00451C56 E89807FBFF              call 004023F3
:00451C5B 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:00451C61 89848D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], eax
:00451C68 EB1D                    jmp 00451C87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451C15(U)
|
:00451C6A 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:00451C70 E85B2BFBFF              call 004047D0
:00451C75 25FF000000              and eax, 000000FF
:00451C7A 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451C80 89849538FFFFFF          mov dword ptr [ebp+4*edx-000000C8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451C34(U), :00451C4E(U), :00451C68(U)
|
:00451C87 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00451C8D 83C001                  add eax, 00000001
:00451C90 89856CFEFFFF            mov dword ptr [ebp+FFFFFE6C], eax
:00451C96 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00451C9C 8B11                    mov edx, dword ptr [ecx]
:00451C9E 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00451CA4 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:00451CA7 898D68FEFFFF            mov dword ptr [ebp+FFFFFE68], ecx
:00451CAD E91FFFFFFF              jmp 00451BD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451BD8(C)
|
:00451CB2 C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:00451CBC EB0F                    jmp 00451CCD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451DA2(U)
|
:00451CBE 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451CC4 83C201                  add edx, 00000001
:00451CC7 89956CFEFFFF            mov dword ptr [ebp+FFFFFE6C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451CBC(U)
|
:00451CCD 83BD6CFEFFFF30          cmp dword ptr [ebp+FFFFFE6C], 00000030
:00451CD4 0F83CD000000            jnb 00451DA7
:00451CDA 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00451CE0 83C001                  add eax, 00000001
:00451CE3 898564FEFFFF            mov dword ptr [ebp+FFFFFE64], eax
:00451CE9 EB0F                    jmp 00451CFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451D9D(U)
|
:00451CEB 8B8D64FEFFFF            mov ecx, dword ptr [ebp+FFFFFE64]
:00451CF1 83C101                  add ecx, 00000001
:00451CF4 898D64FEFFFF            mov dword ptr [ebp+FFFFFE64], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451CE9(U)
|
:00451CFA 83BD64FEFFFF30          cmp dword ptr [ebp+FFFFFE64], 00000030
:00451D01 0F839B000000            jnb 00451DA2
:00451D07 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451D0D 8B8564FEFFFF            mov eax, dword ptr [ebp+FFFFFE64]
:00451D13 8B8C9538FFFFFF          mov ecx, dword ptr [ebp+4*edx-000000C8]
:00451D1A 3B8C8538FFFFFF          cmp ecx, dword ptr [ebp+4*eax-000000C8]
:00451D21 737A                    jnb 00451D9D
:00451D23 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451D29 8B849538FFFFFF          mov eax, dword ptr [ebp+4*edx-000000C8]
:00451D30 8945FC                  mov dword ptr [ebp-04], eax
:00451D33 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:00451D39 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00451D3F 8B849538FFFFFF          mov eax, dword ptr [ebp+4*edx-000000C8]
:00451D46 89848D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], eax
:00451D4D 8B8D64FEFFFF            mov ecx, dword ptr [ebp+FFFFFE64]
:00451D53 8B55FC                  mov edx, dword ptr [ebp-04]
:00451D56 89948D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], edx
:00451D5D 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00451D63 8B8C8574FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000018C]
:00451D6A 898D70FEFFFF            mov dword ptr [ebp+FFFFFE70], ecx
:00451D70 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451D76 8B8564FEFFFF            mov eax, dword ptr [ebp+FFFFFE64]
:00451D7C 8B8C8574FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000018C]
:00451D83 898C9574FEFFFF          mov dword ptr [ebp+4*edx-0000018C], ecx
:00451D8A 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00451D90 8B8570FEFFFF            mov eax, dword ptr [ebp+FFFFFE70]
:00451D96 89849574FEFFFF          mov dword ptr [ebp+4*edx-0000018C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451D21(C)
|
:00451D9D E949FFFFFF              jmp 00451CEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451D01(C)
|
:00451DA2 E917FFFFFF              jmp 00451CBE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451CD4(C)
|
:00451DA7 C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:00451DB1 EB0F                    jmp 00451DC2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451E34(U)
|
:00451DB3 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:00451DB9 83C101                  add ecx, 00000001
:00451DBC 898D6CFEFFFF            mov dword ptr [ebp+FFFFFE6C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451DB1(U)
|
:00451DC2 83BD6CFEFFFF30          cmp dword ptr [ebp+FFFFFE6C], 00000030
:00451DC9 736E                    jnb 00451E39
:00451DCB 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451DD1 81BC9574FEFFFFFFFF0000  cmp dword ptr [ebp+4*edx-0000018C], 0000FFFF
:00451DDC 7502                    jne 00451DE0
:00451DDE EB59                    jmp 00451E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451DDC(C)
|
:00451DE0 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00451DE6 8B8C8574FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000018C]
:00451DED 51                      push ecx
:00451DEE 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00451DF4 E847110000              call 00452F40
:00451DF9 85C0                    test eax, eax
:00451DFB 7537                    jne 00451E34
:00451DFD 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00451E03 8B849574FEFFFF          mov eax, dword ptr [ebp+4*edx-0000018C]
:00451E0A 50                      push eax
:00451E0B 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00451E11 E884FBFFFF              call 0045199A
:00451E16 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00451E1C 8B9560FEFFFF            mov edx, dword ptr [ebp+FFFFFE60]
:00451E22 8B81F0000000            mov eax, dword ptr [ecx+000000F0]
:00451E28 2B82EC000000            sub eax, dword ptr [edx+000000EC]
:00451E2E 85C0                    test eax, eax
:00451E30 7702                    ja 00451E34
:00451E32 EB05                    jmp 00451E39

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451DFB(C), :00451E30(C)
|
:00451E34 E97AFFFFFF              jmp 00451DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451DC9(C), :00451DDE(U), :00451E32(U)
|
:00451E39 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00451E3F C64108FF                mov [ecx+08], FF
:00451E43 8BE5                    mov esp, ebp
:00451E45 5D                      pop ebp
:00451E46 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0041625A   , :0045268E   
|
:00451E49 55                      push ebp
:00451E4A 8BEC                    mov ebp, esp
:00451E4C 83EC14                  sub esp, 00000014
:00451E4F 894DEC                  mov dword ptr [ebp-14], ecx
:00451E52 C745FC00000000          mov [ebp-04], 00000000
:00451E59 C745F800000000          mov [ebp-08], 00000000
:00451E60 C745F400000000          mov [ebp-0C], 00000000
:00451E67 8B45EC                  mov eax, dword ptr [ebp-14]
:00451E6A 8B8814010000            mov ecx, dword ptr [eax+00000114]
:00451E70 51                      push ecx
:00451E71 E8B1880100              call 0046A727
:00451E76 83C404                  add esp, 00000004
:00451E79 C745F000000000          mov [ebp-10], 00000000
:00451E80 EB09                    jmp 00451E8B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451EF5(U)
|
:00451E82 8B55F0                  mov edx, dword ptr [ebp-10]
:00451E85 83C201                  add edx, 00000001
:00451E88 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451E80(U)
|
:00451E8B 8B45EC                  mov eax, dword ptr [ebp-14]
:00451E8E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451E91 3B4804                  cmp ecx, dword ptr [eax+04]
:00451E94 7361                    jnb 00451EF7
:00451E96 8B55F0                  mov edx, dword ptr [ebp-10]
:00451E99 69D200090000            imul edx, 00000900
:00451E9F 52                      push edx
:00451EA0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00451EA3 83C118                  add ecx, 00000018
:00451EA6 E8F316FCFF              call 0041359E
:00451EAB 8945FC                  mov dword ptr [ebp-04], eax
:00451EAE 8B45F0                  mov eax, dword ptr [ebp-10]
:00451EB1 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00008: ""
                                  |
:00451EB3 B908000000              mov ecx, 00000008
:00451EB8 F7F1                    div ecx
:00451EBA 6BD230                  imul edx, 00000030
:00451EBD 8955F8                  mov dword ptr [ebp-08], edx
:00451EC0 8B55F0                  mov edx, dword ptr [ebp-10]
:00451EC3 C1EA03                  shr edx, 03
:00451EC6 6BD230                  imul edx, 00000030
:00451EC9 8955F4                  mov dword ptr [ebp-0C], edx
:00451ECC 8B45EC                  mov eax, dword ptr [ebp-14]
:00451ECF 8B4828                  mov ecx, dword ptr [eax+28]
:00451ED2 6BC930                  imul ecx, 00000030
:00451ED5 8B55F4                  mov edx, dword ptr [ebp-0C]
:00451ED8 03D1                    add edx, ecx
:00451EDA 8955F4                  mov dword ptr [ebp-0C], edx
:00451EDD 8B45FC                  mov eax, dword ptr [ebp-04]
:00451EE0 50                      push eax
:00451EE1 6A30                    push 00000030
:00451EE3 6A30                    push 00000030
:00451EE5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00451EE8 51                      push ecx
:00451EE9 8B55F8                  mov edx, dword ptr [ebp-08]
:00451EEC 52                      push edx
:00451EED E8AB9E0100              call 0046BD9D
:00451EF2 83C414                  add esp, 00000014
:00451EF5 EB8B                    jmp 00451E82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451E94(C)
|
:00451EF7 6A00                    push 00000000
:00451EF9 E829880100              call 0046A727
:00451EFE 83C404                  add esp, 00000004
:00451F01 8BE5                    mov esp, ebp
:00451F03 5D                      pop ebp
:00451F04 C3                      ret



* Referenced by a CALL at Addresses:
|:00415D8D   , :00452C39   
|
:00451F05 55                      push ebp
:00451F06 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00451F08 6AFF                    push FFFFFFFF
:00451F0A 68863B4700              push 00473B86
:00451F0F 64A100000000            mov eax, dword ptr fs:[00000000]
:00451F15 50                      push eax
:00451F16 64892500000000          mov dword ptr fs:[00000000], esp
:00451F1D 81EC78010000            sub esp, 00000178
:00451F23 898D7CFEFFFF            mov dword ptr [ebp+FFFFFE7C], ecx
:00451F29 8B4508                  mov eax, dword ptr [ebp+08]
:00451F2C 25FF000000              and eax, 000000FF
:00451F31 50                      push eax
:00451F32 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:00451F38 E83349FCFF              call 00416870
:00451F3D 898584FEFFFF            mov dword ptr [ebp+FFFFFE84], eax
:00451F43 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00451F46 51                      push ecx
:00451F47 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:00451F4D E8BE27FBFF              call 00404710
:00451F52 50                      push eax
:00451F53 E891FDFDFF              call 00431CE9
:00451F58 83C408                  add esp, 00000008
:00451F5B 898588FEFFFF            mov dword ptr [ebp+FFFFFE88], eax
:00451F61 81BD88FEFFFFFF000000    cmp dword ptr [ebp+FFFFFE88], 000000FF
:00451F6B 7505                    jne 00451F72
:00451F6D E955010000              jmp 004520C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451F6B(C)
|
:00451F72 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:00451F78 52                      push edx
:00451F79 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:00451F7F E809FDFAFF              call 00401C8D
:00451F84 85C0                    test eax, eax
:00451F86 7546                    jne 00451FCE
:00451F88 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:00451F8E E80F1CFBFF              call 00403BA2
:00451F93 50                      push eax

* Possible StringData Ref from Data Obj ->"%sLk˳ƨDC"
                                  |
:00451F94 68E8D44700              push 0047D4E8
:00451F99 8D858CFEFFFF            lea eax, dword ptr [ebp+FFFFFE8C]
:00451F9F 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00451FA0 FF1500874B00            Call dword ptr [004B8700]
:00451FA6 83C40C                  add esp, 0000000C
:00451FA9 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"˳ƹDܿ"
                                  |
:00451FAB 6800D54700              push 0047D500
:00451FB0 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00451FB6 51                      push ecx
:00451FB7 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00451FBD E86E48FCFF              call 00416830
:00451FC2 50                      push eax

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00451FC3 FF1598864B00            Call dword ptr [004B8698]
:00451FC9 E9F9000000              jmp 004520C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451F86(C)
|
:00451FCE 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:00451FD4 52                      push edx
:00451FD5 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:00451FDB E89306FBFF              call 00402673
:00451FE0 888580FEFFFF            mov byte ptr [ebp+FFFFFE80], al
:00451FE6 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00451FEC 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00451FF1 3DFF000000              cmp eax, 000000FF
:00451FF6 7505                    jne 00451FFD
:00451FF8 E9CA000000              jmp 004520C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451FF6(C)
|
:00451FFD 8A8D80FEFFFF            mov cl, byte ptr [ebp+FFFFFE80]
:00452003 51                      push ecx
:00452004 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:0045200A E852FDFAFF              call 00401D61
:0045200F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00452015 E8E656FBFF              call 00407700
:0045201A C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_BS.E4"
                                  |
:00452021 68607B4700              push 00477B60
:00452026 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045202C E80423FCFF              call 00414335
:00452031 6A00                    push 00000000
:00452033 B930DA4A00              mov ecx, 004ADA30
:00452038 E86115FCFF              call 0041359E
:0045203D 50                      push eax
:0045203E 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:00452044 E87DF3FAFF              call 004013C6
:00452049 25FF000000              and eax, 000000FF
:0045204E 50                      push eax
:0045204F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00452055 E82F24FCFF              call 00414489
:0045205A 6800090000              push 00000900
:0045205F 8B5508                  mov edx, dword ptr [ebp+08]
:00452062 81E2FF000000            and edx, 000000FF
:00452068 69D200090000            imul edx, 00000900
:0045206E 52                      push edx
:0045206F 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:00452075 83C10C                  add ecx, 0000000C
:00452078 E82115FCFF              call 0041359E
:0045207D 50                      push eax
:0045207E 6800360000              push 00003600
:00452083 B930DA4A00              mov ecx, 004ADA30
:00452088 E81115FCFF              call 0041359E
:0045208D 50                      push eax
:0045208E E89C070100              call 0046282F
:00452093 83C40C                  add esp, 0000000C
:00452096 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045209C E86BE5FBFF              call 0041060C
:004520A1 8B4508                  mov eax, dword ptr [ebp+08]
:004520A4 25FF000000              and eax, 000000FF
:004520A9 50                      push eax
:004520AA 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:004520B0 E8D9F6FFFF              call 0045178E
:004520B5 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004520BC 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004520C2 E85956FBFF              call 00407720

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451F6D(U), :00451FC9(U), :00451FF8(U)
|
:004520C7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004520CA 64890D00000000          mov dword ptr fs:[00000000], ecx
:004520D1 8BE5                    mov esp, ebp
:004520D3 5D                      pop ebp
:004520D4 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0041635B   , :0045273D   
|
:004520D7 55                      push ebp
:004520D8 8BEC                    mov ebp, esp
:004520DA 83EC0C                  sub esp, 0000000C
:004520DD 894DF4                  mov dword ptr [ebp-0C], ecx
:004520E0 8B45F4                  mov eax, dword ptr [ebp-0C]
:004520E3 8B08                    mov ecx, dword ptr [eax]
:004520E5 894DFC                  mov dword ptr [ebp-04], ecx
:004520E8 C745F800000000          mov [ebp-08], 00000000
:004520EF EB09                    jmp 004520FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452120(U)
|
:004520F1 8B55F8                  mov edx, dword ptr [ebp-08]
:004520F4 83C201                  add edx, 00000001
:004520F7 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004520EF(U)
|
:004520FA 8B45F4                  mov eax, dword ptr [ebp-0C]
:004520FD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00452100 3B4804                  cmp ecx, dword ptr [eax+04]
:00452103 731D                    jnb 00452122
:00452105 8B55F4                  mov edx, dword ptr [ebp-0C]
:00452108 0355F8                  add edx, dword ptr [ebp-08]
:0045210B 8A82F4000000            mov al, byte ptr [edx+000000F4]
:00452111 50                      push eax
:00452112 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00452115 8B55FC                  mov edx, dword ptr [ebp-04]
:00452118 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:0045211B E841FCFAFF              call 00401D61
:00452120 EBCF                    jmp 004520F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452103(C)
|
:00452122 8BE5                    mov esp, ebp
:00452124 5D                      pop ebp
:00452125 C3                      ret


:00452126 55                      push ebp
:00452127 8BEC                    mov ebp, esp
:00452129 E807000000              call 00452135
:0045212E E811000000              call 00452144
:00452133 5D                      pop ebp
:00452134 C3                      ret



* Referenced by a CALL at Address:
|:00452129   
|
:00452135 55                      push ebp
:00452136 8BEC                    mov ebp, esp
:00452138 B9B8084B00              mov ecx, 004B08B8
:0045213D E89E0D0000              call 00452EE0
:00452142 5D                      pop ebp
:00452143 C3                      ret



* Referenced by a CALL at Address:
|:0045212E   
|
:00452144 55                      push ebp
:00452145 8BEC                    mov ebp, esp
:00452147 6856214500              push 00452156
:0045214C E81FB30100              call 0046D470
:00452151 83C404                  add esp, 00000004
:00452154 5D                      pop ebp
:00452155 C3                      ret


:00452156 55                      push ebp
:00452157 8BEC                    mov ebp, esp
:00452159 B9B8084B00              mov ecx, 004B08B8
:0045215E E89D0D0000              call 00452F00
:00452163 5D                      pop ebp
:00452164 C3                      ret


:00452165 55                      push ebp
:00452166 8BEC                    mov ebp, esp
:00452168 E807000000              call 00452174
:0045216D E811000000              call 00452183
:00452172 5D                      pop ebp
:00452173 C3                      ret



* Referenced by a CALL at Address:
|:00452168   
|
:00452174 55                      push ebp
:00452175 8BEC                    mov ebp, esp
:00452177 B990084B00              mov ecx, 004B0890
:0045217C E85F0D0000              call 00452EE0
:00452181 5D                      pop ebp
:00452182 C3                      ret



* Referenced by a CALL at Address:
|:0045216D   
|
:00452183 55                      push ebp
:00452184 8BEC                    mov ebp, esp
:00452186 6895214500              push 00452195
:0045218B E8E0B20100              call 0046D470
:00452190 83C404                  add esp, 00000004
:00452193 5D                      pop ebp
:00452194 C3                      ret


:00452195 55                      push ebp
:00452196 8BEC                    mov ebp, esp
:00452198 B990084B00              mov ecx, 004B0890
:0045219D E85E0D0000              call 00452F00
:004521A2 5D                      pop ebp
:004521A3 C3                      ret


:004521A4 55                      push ebp
:004521A5 8BEC                    mov ebp, esp
:004521A7 E807000000              call 004521B3
:004521AC E811000000              call 004521C2
:004521B1 5D                      pop ebp
:004521B2 C3                      ret



* Referenced by a CALL at Address:
|:004521A7   
|
:004521B3 55                      push ebp
:004521B4 8BEC                    mov ebp, esp
:004521B6 B958084B00              mov ecx, 004B0858
:004521BB E8200D0000              call 00452EE0
:004521C0 5D                      pop ebp
:004521C1 C3                      ret



* Referenced by a CALL at Address:
|:004521AC   
|
:004521C2 55                      push ebp
:004521C3 8BEC                    mov ebp, esp
:004521C5 68D4214500              push 004521D4
:004521CA E8A1B20100              call 0046D470
:004521CF 83C404                  add esp, 00000004
:004521D2 5D                      pop ebp
:004521D3 C3                      ret


:004521D4 55                      push ebp
:004521D5 8BEC                    mov ebp, esp
:004521D7 B958084B00              mov ecx, 004B0858
:004521DC E81F0D0000              call 00452F00
:004521E1 5D                      pop ebp
:004521E2 C3                      ret



* Referenced by a CALL at Address:
|:00446ACE   
|
:004521E3 55                      push ebp
:004521E4 8BEC                    mov ebp, esp
:004521E6 51                      push ecx
:004521E7 B990084B00              mov ecx, 004B0890
:004521EC E83BE7FFFF              call 0045092C
:004521F1 8845FC                  mov byte ptr [ebp-04], al
:004521F4 6A00                    push 00000000
:004521F6 6A00                    push 00000000
:004521F8 6802020000              push 00000202
:004521FD A1380E4B00              mov eax, dword ptr [004B0E38]
:00452202 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00452203 FF15D8864B00            Call dword ptr [004B86D8]
:00452209 8A45FC                  mov al, byte ptr [ebp-04]
:0045220C 8BE5                    mov esp, ebp
:0045220E 5D                      pop ebp
:0045220F C3                      ret



* Referenced by a CALL at Address:
|:0043142D   
|
:00452210 55                      push ebp
:00452211 8BEC                    mov ebp, esp
:00452213 B9B8084B00              mov ecx, 004B08B8
:00452218 E820E4FFFF              call 0045063D
:0045221D 5D                      pop ebp
:0045221E C3                      ret



* Referenced by a CALL at Address:
|:00431DE5   
|
:0045221F 55                      push ebp
:00452220 8BEC                    mov ebp, esp
:00452222 B958084B00              mov ecx, 004B0858
:00452227 E87DE9FFFF              call 00450BA9
:0045222C 5D                      pop ebp
:0045222D C3                      ret



* Referenced by a CALL at Address:
|:00446C72   
|
:0045222E 55                      push ebp
:0045222F 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00452231 6AFF                    push FFFFFFFF
:00452233 689B3B4700              push 00473B9B
:00452238 64A100000000            mov eax, dword ptr fs:[00000000]
:0045223E 50                      push eax
:0045223F 64892500000000          mov dword ptr fs:[00000000], esp
:00452246 83EC24                  sub esp, 00000024
:00452249 C745EC00000000          mov [ebp-14], 00000000

* Possible Reference to Dialog: DialogID_0118 
                                  |
:00452250 6818010000              push 00000118
:00452255 E866B70100              call 0046D9C0
:0045225A 83C404                  add esp, 00000004
:0045225D 8945E4                  mov dword ptr [ebp-1C], eax
:00452260 C745FC00000000          mov [ebp-04], 00000000
:00452267 837DE400                cmp dword ptr [ebp-1C], 00000000
:0045226B 740D                    je 0045227A
:0045226D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00452270 E84BEBFFFF              call 00450DC0
:00452275 8945D4                  mov dword ptr [ebp-2C], eax
:00452278 EB07                    jmp 00452281

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045226B(C)
|
:0045227A C745D400000000          mov [ebp-2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452278(U)
|
:00452281 8B45D4                  mov eax, dword ptr [ebp-2C]
:00452284 8945E0                  mov dword ptr [ebp-20], eax
:00452287 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045228E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00452291 890D78084B00            mov dword ptr [004B0878], ecx
:00452297 33D2                    xor edx, edx
:00452299 833D78084B0000          cmp dword ptr [004B0878], 00000000
:004522A0 0F94C2                  sete dl
:004522A3 8855E8                  mov byte ptr [ebp-18], dl
:004522A6 8B45E8                  mov eax, dword ptr [ebp-18]
:004522A9 25FF000000              and eax, 000000FF
:004522AE 85C0                    test eax, eax
:004522B0 7420                    je 004522D2
:004522B2 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"ZNܿ"
                                  |
:004522B4 6814D54700              push 0047D514

* Possible StringData Ref from Data Obj ->"LkiZNܪǳ"
                                  |
:004522B9 6824D54700              push 0047D524
:004522BE 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004522C4 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:004522C5 FF1598864B00            Call dword ptr [004B8698]
:004522CB 33C0                    xor eax, eax
:004522CD E9F3000000              jmp 004523C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004522B0(C)
|
:004522D2 C745EC00000000          mov [ebp-14], 00000000
:004522D9 EB09                    jmp 004522E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004522F8(U)
|
:004522DB 8B55EC                  mov edx, dword ptr [ebp-14]
:004522DE 83C201                  add edx, 00000001
:004522E1 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004522D9(U)
|
:004522E4 837DEC31                cmp dword ptr [ebp-14], 00000031
:004522E8 7310                    jnb 004522FA
:004522EA 8B45EC                  mov eax, dword ptr [ebp-14]
:004522ED C7048590074B0000000000  mov dword ptr [4*eax+004B0790], 00000000
:004522F8 EBE1                    jmp 004522DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004522E8(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:004522FA 6A06                    push 00000006
:004522FC 8B0DCC0C4B00            mov ecx, dword ptr [004B0CCC]
:00452302 51                      push ecx
:00452303 8B5508                  mov edx, dword ptr [ebp+08]
:00452306 52                      push edx
:00452307 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045230D E850ECFFFF              call 00450F62
:00452312 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEEM+M}"
                                  |
:00452314 6823264500              push 00452623
:00452319 A1380E4B00              mov eax, dword ptr [004B0E38]
:0045231E 50                      push eax

* Possible Reference to Dialog: DialogID_00EC 
                                  |
:0045231F 68EC000000              push 000000EC
:00452324 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0045232A 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045232B FF1520874B00            Call dword ptr [004B8720]
:00452331 C745F000000000          mov [ebp-10], 00000000
:00452338 C745EC00000000          mov [ebp-14], 00000000
:0045233F EB09                    jmp 0045234A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452385(U)
|
:00452341 8B55EC                  mov edx, dword ptr [ebp-14]
:00452344 83C201                  add edx, 00000001
:00452347 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045233F(U)
|
:0045234A 837DEC30                cmp dword ptr [ebp-14], 00000030
:0045234E 7337                    jnb 00452387
:00452350 8B45EC                  mov eax, dword ptr [ebp-14]
:00452353 50                      push eax
:00452354 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045235A E8E10B0000              call 00452F40
:0045235F 85C0                    test eax, eax
:00452361 7422                    je 00452385
:00452363 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452366 51                      push ecx
:00452367 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045236D E8FE44FCFF              call 00416870
:00452372 8B55F0                  mov edx, dword ptr [ebp-10]
:00452375 89049590074B00          mov dword ptr [4*edx+004B0790], eax
:0045237C 8B45F0                  mov eax, dword ptr [ebp-10]
:0045237F 83C001                  add eax, 00000001
:00452382 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452361(C)
|
:00452385 EBBA                    jmp 00452341

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045234E(C)
|
:00452387 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045238A C7048D90074B0000000000  mov dword ptr [4*ecx+004B0790], 00000000
:00452395 8B1578084B00            mov edx, dword ptr [004B0878]
:0045239B 8955D8                  mov dword ptr [ebp-28], edx
:0045239E 8B45D8                  mov eax, dword ptr [ebp-28]
:004523A1 8945DC                  mov dword ptr [ebp-24], eax
:004523A4 837DDC00                cmp dword ptr [ebp-24], 00000000
:004523A8 740F                    je 004523B9
:004523AA 6A01                    push 00000001
:004523AC 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004523AF E85C0A0000              call 00452E10
:004523B4 8945D0                  mov dword ptr [ebp-30], eax
:004523B7 EB07                    jmp 004523C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004523A8(C)
|
:004523B9 C745D000000000          mov [ebp-30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004523B7(U)
|
:004523C0 B890074B00              mov eax, 004B0790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004522CD(U)
|
:004523C5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004523C8 64890D00000000          mov dword ptr fs:[00000000], ecx
:004523CF 8BE5                    mov esp, ebp
:004523D1 5D                      pop ebp
:004523D2 C3                      ret


:004523D3 55                      push ebp
:004523D4 8BEC                    mov ebp, esp
:004523D6 51                      push ecx
:004523D7 8B450C                  mov eax, dword ptr [ebp+0C]
:004523DA 8945FC                  mov dword ptr [ebp-04], eax
:004523DD 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:004523E4 740E                    je 004523F4
:004523E6 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004523ED 7418                    je 00452407
:004523EF E9BD000000              jmp 004524B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004523E4(C)
|
:004523F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004523F7 51                      push ecx
:004523F8 B9B8084B00              mov ecx, 004B08B8
:004523FD E8EFE3FFFF              call 004507F1
:00452402 E9AA000000              jmp 004524B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004523ED(C)
|
:00452407 8B5510                  mov edx, dword ptr [ebp+10]
:0045240A 81E2FFFF0000            and edx, 0000FFFF
:00452410 81FA07050000            cmp edx, 00000507
:00452416 750C                    jne 00452424
:00452418 6A01                    push 00000001
:0045241A B9B8084B00              mov ecx, 004B08B8
:0045241F E8F2E1FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452416(C)
|
:00452424 8B4510                  mov eax, dword ptr [ebp+10]
:00452427 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0508, ""
                                  |
:0045242C 3D08050000              cmp eax, 00000508
:00452431 750C                    jne 0045243F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00452433 6A02                    push 00000002
:00452435 B9B8084B00              mov ecx, 004B08B8
:0045243A E8D7E1FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452431(C)
|
:0045243F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00452442 81E1FFFF0000            and ecx, 0000FFFF
:00452448 81F909050000            cmp ecx, 00000509
:0045244E 750C                    jne 0045245C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00452450 6A03                    push 00000003
:00452452 B9B8084B00              mov ecx, 004B08B8
:00452457 E8BAE1FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045244E(C)
|
:0045245C 8B5510                  mov edx, dword ptr [ebp+10]
:0045245F 81E2FFFF0000            and edx, 0000FFFF
:00452465 81FA0C050000            cmp edx, 0000050C
:0045246B 750C                    jne 00452479

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045246D 6A04                    push 00000004
:0045246F B9B8084B00              mov ecx, 004B08B8
:00452474 E89DE1FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045246B(C)
|
:00452479 8B4510                  mov eax, dword ptr [ebp+10]
:0045247C 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050B, ""
                                  |
:00452481 3D0B050000              cmp eax, 0000050B
:00452486 750C                    jne 00452494

* Possible Reference to String Resource ID=00006: ""
                                  |
:00452488 6A06                    push 00000006
:0045248A B9B8084B00              mov ecx, 004B08B8
:0045248F E882E1FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452486(C)
|
:00452494 8B4D10                  mov ecx, dword ptr [ebp+10]
:00452497 81E1FFFF0000            and ecx, 0000FFFF
:0045249D 83F902                  cmp ecx, 00000002
:004524A0 750F                    jne 004524B1

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004524A2 68FF000000              push 000000FF
:004524A7 B9B8084B00              mov ecx, 004B08B8
:004524AC E865E1FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004523EF(U), :00452402(U), :004524A0(C)
|
:004524B1 33C0                    xor eax, eax
:004524B3 8BE5                    mov esp, ebp
:004524B5 5D                      pop ebp
:004524B6 C21000                  ret 0010


:004524B9 55                      push ebp
:004524BA 8BEC                    mov ebp, esp
:004524BC 51                      push ecx
:004524BD 8B450C                  mov eax, dword ptr [ebp+0C]
:004524C0 8945FC                  mov dword ptr [ebp-04], eax
:004524C3 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:004524CA 740E                    je 004524DA
:004524CC 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004524D3 7418                    je 004524ED
:004524D5 E9A1000000              jmp 0045257B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004524CA(C)
|
:004524DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004524DD 51                      push ecx
:004524DE B990084B00              mov ecx, 004B0890
:004524E3 E8BCE5FFFF              call 00450AA4
:004524E8 E98E000000              jmp 0045257B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004524D3(C)
|
:004524ED 8B5510                  mov edx, dword ptr [ebp+10]
:004524F0 81E2FFFF0000            and edx, 0000FFFF
:004524F6 81FA09050000            cmp edx, 00000509
:004524FC 750C                    jne 0045250A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004524FE 6A02                    push 00000002
:00452500 B990084B00              mov ecx, 004B0890
:00452505 E80CE1FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004524FC(C)
|
:0045250A 8B4510                  mov eax, dword ptr [ebp+10]
:0045250D 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050A, "
"
                                  |
:00452512 3D0A050000              cmp eax, 0000050A
:00452517 750C                    jne 00452525
:00452519 6A00                    push 00000000
:0045251B B990084B00              mov ecx, 004B0890
:00452520 E8F1E0FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452517(C)
|
:00452525 8B4D10                  mov ecx, dword ptr [ebp+10]
:00452528 81E1FFFF0000            and ecx, 0000FFFF
:0045252E 81F90C050000            cmp ecx, 0000050C
:00452534 750C                    jne 00452542
:00452536 6A01                    push 00000001
:00452538 B990084B00              mov ecx, 004B0890
:0045253D E8D4E0FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452534(C)
|
:00452542 8B5510                  mov edx, dword ptr [ebp+10]
:00452545 81E2FFFF0000            and edx, 0000FFFF
:0045254B 81FA0D050000            cmp edx, 0000050D
:00452551 750C                    jne 0045255F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00452553 6A03                    push 00000003
:00452555 B990084B00              mov ecx, 004B0890
:0045255A E8B7E0FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452551(C)
|
:0045255F 8B4510                  mov eax, dword ptr [ebp+10]
:00452562 25FFFF0000              and eax, 0000FFFF
:00452567 83F802                  cmp eax, 00000002
:0045256A 750F                    jne 0045257B

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045256C 68FF000000              push 000000FF
:00452571 B990084B00              mov ecx, 004B0890
:00452576 E89BE0FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004524D5(U), :004524E8(U), :0045256A(C)
|
:0045257B 33C0                    xor eax, eax
:0045257D 8BE5                    mov esp, ebp
:0045257F 5D                      pop ebp
:00452580 C21000                  ret 0010


:00452583 55                      push ebp
:00452584 8BEC                    mov ebp, esp
:00452586 51                      push ecx
:00452587 8B450C                  mov eax, dword ptr [ebp+0C]
:0045258A 8945FC                  mov dword ptr [ebp-04], eax
:0045258D 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00452594 740B                    je 004525A1
:00452596 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045259D 7412                    je 004525B1
:0045259F EB7A                    jmp 0045261B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452594(C)
|
:004525A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004525A4 51                      push ecx
:004525A5 B958084B00              mov ecx, 004B0858
:004525AA E841E7FFFF              call 00450CF0
:004525AF EB6A                    jmp 0045261B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045259D(C)
|
:004525B1 8B5510                  mov edx, dword ptr [ebp+10]
:004525B4 81E2FFFF0000            and edx, 0000FFFF
:004525BA 83FA03                  cmp edx, 00000003
:004525BD 750C                    jne 004525CB
:004525BF 6A00                    push 00000000
:004525C1 B958084B00              mov ecx, 004B0858
:004525C6 E84BE0FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004525BD(C)
|
:004525CB 8B4510                  mov eax, dword ptr [ebp+10]
:004525CE 25FFFF0000              and eax, 0000FFFF
:004525D3 83F804                  cmp eax, 00000004
:004525D6 750C                    jne 004525E4
:004525D8 6A01                    push 00000001
:004525DA B958084B00              mov ecx, 004B0858
:004525DF E832E0FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004525D6(C)
|
:004525E4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004525E7 81E1FFFF0000            and ecx, 0000FFFF
:004525ED 83F905                  cmp ecx, 00000005
:004525F0 750C                    jne 004525FE

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004525F2 6A02                    push 00000002
:004525F4 B958084B00              mov ecx, 004B0858
:004525F9 E818E0FFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004525F0(C)
|
:004525FE 8B5510                  mov edx, dword ptr [ebp+10]
:00452601 81E2FFFF0000            and edx, 0000FFFF
:00452607 83FA02                  cmp edx, 00000002
:0045260A 750F                    jne 0045261B

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045260C 68FF000000              push 000000FF
:00452611 B958084B00              mov ecx, 004B0858
:00452616 E8FBDFFFFF              call 00450616

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045259F(U), :004525AF(U), :0045260A(C)
|
:0045261B 33C0                    xor eax, eax
:0045261D 8BE5                    mov esp, ebp
:0045261F 5D                      pop ebp
:00452620 C21000                  ret 0010


:00452623 55                      push ebp
:00452624 8BEC                    mov ebp, esp
:00452626 51                      push ecx
:00452627 8B450C                  mov eax, dword ptr [ebp+0C]
:0045262A 8945FC                  mov dword ptr [ebp-04], eax
:0045262D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452630 83E92B                  sub ecx, 0000002B
:00452633 894DFC                  mov dword ptr [ebp-04], ecx
:00452636 817DFCE6000000          cmp dword ptr [ebp-04], 000000E6
:0045263D 0F87A9010000            ja 004527EC
:00452643 8B45FC                  mov eax, dword ptr [ebp-04]
:00452646 33D2                    xor edx, edx
:00452648 8A9008284500            mov dl, byte ptr [eax+00452808]
:0045264E FF2495F4274500          jmp dword ptr [4*edx+004527F4]
:00452655 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045265B E85042FCFF              call 004168B0
:00452660 50                      push eax
:00452661 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452667 E82442FCFF              call 00416890
:0045266C 50                      push eax
:0045266D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452670 51                      push ecx
:00452671 E879020000              call 004528EF
:00452676 83C40C                  add esp, 0000000C
:00452679 8B5508                  mov edx, dword ptr [ebp+08]
:0045267C 52                      push edx
:0045267D 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452683 E840EBFFFF              call 004511C8
:00452688 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045268E E8B6F7FFFF              call 00451E49
:00452693 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452699 E80AF2FFFF              call 004518A8
:0045269E 8B0D78084B00            mov ecx, dword ptr [004B0878]
:004526A4 E8A0EBFFFF              call 00451249
:004526A9 E93E010000              jmp 004527EC
:004526AE 8B4510                  mov eax, dword ptr [ebp+10]
:004526B1 25FFFF0000              and eax, 0000FFFF
:004526B6 83F801                  cmp eax, 00000001
:004526B9 7530                    jne 004526EB
:004526BB 8B0D78084B00            mov ecx, dword ptr [004B0878]
:004526C1 E8EA41FCFF              call 004168B0
:004526C6 50                      push eax
:004526C7 8B0D78084B00            mov ecx, dword ptr [004B0878]
:004526CD E8BE41FCFF              call 00416890
:004526D2 50                      push eax
:004526D3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004526D6 51                      push ecx
:004526D7 E8CD030000              call 00452AA9
:004526DC 83C40C                  add esp, 0000000C
:004526DF 6A00                    push 00000000
:004526E1 8B5508                  mov edx, dword ptr [ebp+08]
:004526E4 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004526E5 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004526B9(C)
|
:004526EB 8B4510                  mov eax, dword ptr [ebp+10]
:004526EE 25FFFF0000              and eax, 0000FFFF
:004526F3 83F802                  cmp eax, 00000002
:004526F6 7556                    jne 0045274E

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004526F8 68FF000000              push 000000FF
:004526FD 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452703 E803E8FFFF              call 00450F0B
:00452708 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045270E E845F2FFFF              call 00451958
:00452713 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452719 E89241FCFF              call 004168B0
:0045271E 50                      push eax
:0045271F 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452725 E86641FCFF              call 00416890
:0045272A 50                      push eax
:0045272B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045272E 51                      push ecx
:0045272F E875030000              call 00452AA9
:00452734 83C40C                  add esp, 0000000C
:00452737 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045273D E895F9FFFF              call 004520D7
:00452742 6A00                    push 00000000
:00452744 8B5508                  mov edx, dword ptr [ebp+08]
:00452747 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00452748 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004526F6(C)
|
:0045274E 8B4510                  mov eax, dword ptr [ebp+10]
:00452751 25FFFF0000              and eax, 0000FFFF
:00452756 83F809                  cmp eax, 00000009
:00452759 750D                    jne 00452768
:0045275B 683A0C0000              push 00000C3A
:00452760 E8FD110100              call 00463962
:00452765 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452759(C)
|
:00452768 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045276B 81E1FFFF0000            and ecx, 0000FFFF
:00452771 81F93F050000            cmp ecx, 0000053F
:00452777 750D                    jne 00452786
:00452779 6A00                    push 00000000
:0045277B 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452781 E8C4F3FFFF              call 00451B4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452777(C)
|
:00452786 8B5510                  mov edx, dword ptr [ebp+10]
:00452789 81E2FFFF0000            and edx, 0000FFFF
:0045278F 81FA40050000            cmp edx, 00000540
:00452795 750D                    jne 004527A4
:00452797 6A01                    push 00000001
:00452799 8B0D78084B00            mov ecx, dword ptr [004B0878]
:0045279F E8A6F3FFFF              call 00451B4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452795(C)
|
:004527A4 8B4510                  mov eax, dword ptr [ebp+10]
:004527A7 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:053E, ""
                                  |
:004527AC 3D3E050000              cmp eax, 0000053E
:004527B1 750D                    jne 004527C0

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004527B3 6A02                    push 00000002
:004527B5 8B0D78084B00            mov ecx, dword ptr [004B0878]
:004527BB E88AF3FFFF              call 00451B4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004527B1(C)
|
:004527C0 EB2A                    jmp 004527EC
:004527C2 8B4D14                  mov ecx, dword ptr [ebp+14]
:004527C5 51                      push ecx
:004527C6 E85D33FCFF              call 00415B28
:004527CB 83C404                  add esp, 00000004
:004527CE B801000000              mov eax, 00000001
:004527D3 EB19                    jmp 004527EE
:004527D5 8B5514                  mov edx, dword ptr [ebp+14]
:004527D8 52                      push edx
:004527D9 8B4508                  mov eax, dword ptr [ebp+08]
:004527DC 50                      push eax
:004527DD E85F33FCFF              call 00415B41
:004527E2 83C408                  add esp, 00000008
:004527E5 B801000000              mov eax, 00000001
:004527EA EB02                    jmp 004527EE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045263D(C), :004526A9(U), :004527C0(U)
|
:004527EC 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004527D3(U), :004527EA(U)
|
:004527EE 8BE5                    mov esp, ebp
:004527F0 5D                      pop ebp
:004527F1 C21000                  ret 0010



:004527F4 D5274500                DWORD 004527D5
:004527F8 C2274500                DWORD 004527C2
:004527FC 55264500                DWORD 00452655
:00452800 AE264500                DWORD 004526AE
:00452804 EC274500                DWORD 004527EC


:00452808 0001                    add byte ptr [ecx], al
:0045280A 0404                    add al, 04
:0045280C 0404                    add al, 04
:0045280E 0404                    add al, 04
:00452810 0404                    add al, 04
:00452812 0404                    add al, 04
:00452814 0404                    add al, 04
:00452816 0404                    add al, 04
:00452818 0404                    add al, 04
:0045281A 0404                    add al, 04
:0045281C 0404                    add al, 04
:0045281E 0404                    add al, 04
:00452820 0404                    add al, 04
:00452822 0404                    add al, 04
:00452824 0404                    add al, 04
:00452826 0404                    add al, 04
:00452828 0404                    add al, 04
:0045282A 0404                    add al, 04
:0045282C 0404                    add al, 04
:0045282E 0404                    add al, 04
:00452830 0404                    add al, 04
:00452832 0404                    add al, 04
:00452834 0404                    add al, 04
:00452836 0404                    add al, 04
:00452838 0404                    add al, 04
:0045283A 0404                    add al, 04
:0045283C 0404                    add al, 04
:0045283E 0404                    add al, 04
:00452840 0404                    add al, 04
:00452842 0404                    add al, 04
:00452844 0404                    add al, 04
:00452846 0404                    add al, 04
:00452848 0404                    add al, 04
:0045284A 0404                    add al, 04
:0045284C 0404                    add al, 04
:0045284E 0404                    add al, 04
:00452850 0404                    add al, 04
:00452852 0404                    add al, 04
:00452854 0404                    add al, 04
:00452856 0404                    add al, 04
:00452858 0404                    add al, 04
:0045285A 0404                    add al, 04
:0045285C 0404                    add al, 04
:0045285E 0404                    add al, 04
:00452860 0404                    add al, 04
:00452862 0404                    add al, 04
:00452864 0404                    add al, 04
:00452866 0404                    add al, 04
:00452868 0404                    add al, 04
:0045286A 0404                    add al, 04
:0045286C 0404                    add al, 04
:0045286E 0404                    add al, 04
:00452870 0404                    add al, 04
:00452872 0404                    add al, 04
:00452874 0404                    add al, 04
:00452876 0404                    add al, 04
:00452878 0404                    add al, 04
:0045287A 0404                    add al, 04
:0045287C 0404                    add al, 04
:0045287E 0404                    add al, 04
:00452880 0404                    add al, 04
:00452882 0404                    add al, 04
:00452884 0404                    add al, 04
:00452886 0404                    add al, 04
:00452888 0404                    add al, 04
:0045288A 0404                    add al, 04
:0045288C 0404                    add al, 04
:0045288E 0404                    add al, 04
:00452890 0404                    add al, 04
:00452892 0404                    add al, 04
:00452894 0404                    add al, 04
:00452896 0404                    add al, 04
:00452898 0404                    add al, 04
:0045289A 0404                    add al, 04
:0045289C 0404                    add al, 04
:0045289E 0404                    add al, 04
:004528A0 0404                    add al, 04
:004528A2 0404                    add al, 04
:004528A4 0404                    add al, 04
:004528A6 0404                    add al, 04
:004528A8 0404                    add al, 04
:004528AA 0404                    add al, 04
:004528AC 0404                    add al, 04
:004528AE 0404                    add al, 04
:004528B0 0404                    add al, 04
:004528B2 0404                    add al, 04
:004528B4 0404                    add al, 04
:004528B6 0404                    add al, 04
:004528B8 0404                    add al, 04
:004528BA 0404                    add al, 04
:004528BC 0404                    add al, 04
:004528BE 0404                    add al, 04
:004528C0 0404                    add al, 04
:004528C2 0404                    add al, 04
:004528C4 0404                    add al, 04
:004528C6 0404                    add al, 04
:004528C8 0404                    add al, 04
:004528CA 0404                    add al, 04
:004528CC 0404                    add al, 04
:004528CE 0404                    add al, 04
:004528D0 0404                    add al, 04
:004528D2 0404                    add al, 04
:004528D4 0404                    add al, 04
:004528D6 0404                    add al, 04
:004528D8 0404                    add al, 04
:004528DA 0404                    add al, 04
:004528DC 0404                    add al, 04
:004528DE 0404                    add al, 04
:004528E0 0404                    add al, 04
:004528E2 0404                    add al, 04
:004528E4 0404                    add al, 04
:004528E6 0404                    add al, 04
:004528E8 0404                    add al, 04
:004528EA 0404                    add al, 04
:004528EC 0402                    add al, 02
:004528EE 03                      BYTE 03h


* Referenced by a CALL at Addresses:
|:0041623D   , :00452671   
|
:004528EF 55                      push ebp
:004528F0 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004528F2 6AFF                    push FFFFFFFF
:004528F4 68B13B4700              push 00473BB1
:004528F9 64A100000000            mov eax, dword ptr fs:[00000000]
:004528FF 50                      push eax
:00452900 64892500000000          mov dword ptr fs:[00000000], esp
:00452907 81EC1C010000            sub esp, 0000011C
:0045290D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00452913 E8E84DFBFF              call 00407700
:00452918 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"bslct.e4"
                                  |
:0045291F 683CD54700              push 0047D53C
:00452924 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045292A E8061AFCFF              call 00414335
:0045292F 6A00                    push 00000000
:00452931 B930DA4A00              mov ecx, 004ADA30
:00452936 E8630CFCFF              call 0041359E
:0045293B 50                      push eax
:0045293C 6A00                    push 00000000
:0045293E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00452944 E8401BFCFF              call 00414489
:00452949 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045294F E8B8DCFBFF              call 0041060C
:00452954 6A00                    push 00000000
:00452956 8B450C                  mov eax, dword ptr [ebp+0C]
:00452959 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045295A FF15E4864B00            Call dword ptr [004B86E4]
:00452960 8B4D10                  mov ecx, dword ptr [ebp+10]
:00452963 51                      push ecx
:00452964 E8BE7D0100              call 0046A727
:00452969 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045296C 6A07                    push 00000007
:0045296E E876840100              call 0046ADE9
:00452973 83C404                  add esp, 00000004
:00452976 8B15BC4C4700            mov edx, dword ptr [00474CBC]
:0045297C 52                      push edx
:0045297D A1B84C4700              mov eax, dword ptr [00474CB8]
:00452982 50                      push eax
:00452983 6A00                    push 00000000
:00452985 6A00                    push 00000000
:00452987 E814850100              call 0046AEA0
:0045298C 83C410                  add esp, 00000010
:0045298F E8CB850100              call 0046AF5F
:00452994 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00452996 6A0A                    push 0000000A
:00452998 6A00                    push 00000000
:0045299A E871840100              call 0046AE10
:0045299F 83C40C                  add esp, 0000000C
:004529A2 6A00                    push 00000000
:004529A4 B930DA4A00              mov ecx, 004ADA30
:004529A9 E8F00BFCFF              call 0041359E
:004529AE 50                      push eax
:004529AF 8B0DBC4C4700            mov ecx, dword ptr [00474CBC]
:004529B5 51                      push ecx
:004529B6 8B15B84C4700            mov edx, dword ptr [00474CB8]
:004529BC 52                      push edx
:004529BD 6A00                    push 00000000
:004529BF 6A00                    push 00000000
:004529C1 E821920100              call 0046BBE7
:004529C6 83C414                  add esp, 00000014
:004529C9 6A00                    push 00000000
:004529CB E8577D0100              call 0046A727
:004529D0 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:043F, ""
                                  |
:004529D3 683F040000              push 0000043F
:004529D8 8B4508                  mov eax, dword ptr [ebp+08]
:004529DB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004529DC FF15AC864B00            Call dword ptr [004B86AC]
:004529E2 50                      push eax
:004529E3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004529E6 51                      push ecx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:004529E7 FF1510874B00            Call dword ptr [004B8710]
:004529ED 85C0                    test eax, eax
:004529EF 7516                    jne 00452A07
:004529F1 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Err"
                                  |
:004529F3 6848D54700              push 0047D548

* Possible StringData Ref from Data Obj ->"Err"
                                  |
:004529F8 684CD54700              push 0047D54C
:004529FD 8B5508                  mov edx, dword ptr [ebp+08]
:00452A00 52                      push edx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00452A01 FF1598864B00            Call dword ptr [004B8698]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004529EF(C)
|
:00452A07 8D85D8FEFFFF            lea eax, dword ptr [ebp+FFFFFED8]
:00452A0D 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:043F, ""
                                  |
:00452A0E 683F040000              push 0000043F
:00452A13 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452A16 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00452A17 FF15AC864B00            Call dword ptr [004B86AC]
:00452A1D 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00452A1E FF15C8864B00            Call dword ptr [004B86C8]
:00452A24 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:00452A2A 83C001                  add eax, 00000001
:00452A2D 99                      cdq
:00452A2E 2BC2                    sub eax, edx
:00452A30 D1F8                    sar eax, 1
:00452A32 2DC0000000              sub eax, 000000C0
:00452A37 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:00452A3D 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00452A43 83C001                  add eax, 00000001
:00452A46 99                      cdq
:00452A47 2BC2                    sub eax, edx
:00452A49 D1F8                    sar eax, 1
:00452A4B 2D90000000              sub eax, 00000090
:00452A50 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:00452A56 6A00                    push 00000000
:00452A58 8B15BC4C4700            mov edx, dword ptr [00474CBC]
:00452A5E 52                      push edx
:00452A5F A1B84C4700              mov eax, dword ptr [00474CB8]
:00452A64 50                      push eax
:00452A65 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00452A6B 51                      push ecx
:00452A6C 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:00452A72 52                      push edx
:00452A73 8B450C                  mov eax, dword ptr [ebp+0C]
:00452A76 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00452A77 FF15FC864B00            Call dword ptr [004B86FC]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00452A7D 6A05                    push 00000005
:00452A7F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00452A82 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00452A83 FF15E4864B00            Call dword ptr [004B86E4]
:00452A89 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00452A90 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00452A96 E8854CFBFF              call 00407720
:00452A9B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00452A9E 64890D00000000          mov dword ptr fs:[00000000], ecx
:00452AA5 8BE5                    mov esp, ebp
:00452AA7 5D                      pop ebp
:00452AA8 C3                      ret



* Referenced by a CALL at Addresses:
|:00416300   , :0041634D   , :004526D7   , :0045272F   
|
:00452AA9 55                      push ebp
:00452AAA 8BEC                    mov ebp, esp
:00452AAC 6A00                    push 00000000
:00452AAE 8B450C                  mov eax, dword ptr [ebp+0C]
:00452AB1 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00452AB2 FF15E4864B00            Call dword ptr [004B86E4]
:00452AB8 8B4D10                  mov ecx, dword ptr [ebp+10]
:00452ABB 51                      push ecx
:00452ABC E8667C0100              call 0046A727
:00452AC1 83C404                  add esp, 00000004
:00452AC4 E896840100              call 0046AF5F
:00452AC9 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00452ACB 6A0A                    push 0000000A
:00452ACD 6A00                    push 00000000
:00452ACF E83C830100              call 0046AE10
:00452AD4 83C40C                  add esp, 0000000C
:00452AD7 6A00                    push 00000000
:00452AD9 E8497C0100              call 0046A727
:00452ADE 83C404                  add esp, 00000004
:00452AE1 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00452AE7 52                      push edx
:00452AE8 8B450C                  mov eax, dword ptr [ebp+0C]
:00452AEB 50                      push eax

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:00452AEC FF1510874B00            Call dword ptr [004B8710]
:00452AF2 B9A8034B00              mov ecx, 004B03A8
:00452AF7 E8B43DFFFF              call 004468B0
:00452AFC 83C007                  add eax, 00000007
:00452AFF 99                      cdq
:00452B00 B930000000              mov ecx, 00000030
:00452B05 F7F9                    idiv ecx
:00452B07 6BC030                  imul eax, 00000030
:00452B0A 83C028                  add eax, 00000028
:00452B0D 50                      push eax
:00452B0E B9A8034B00              mov ecx, 004B03A8
:00452B13 E8713DFFFF              call 00446889
:00452B18 83C02F                  add eax, 0000002F
:00452B1B 99                      cdq
:00452B1C B930000000              mov ecx, 00000030
:00452B21 F7F9                    idiv ecx
:00452B23 6BC030                  imul eax, 00000030
:00452B26 50                      push eax
:00452B27 6A28                    push 00000028
:00452B29 6A00                    push 00000000
:00452B2B E870830100              call 0046AEA0
:00452B30 83C410                  add esp, 00000010
:00452B33 5D                      pop ebp
:00452B34 C3                      ret


:00452B35 55                      push ebp
:00452B36 8BEC                    mov ebp, esp
:00452B38 51                      push ecx
:00452B39 8B450C                  mov eax, dword ptr [ebp+0C]
:00452B3C 8945FC                  mov dword ptr [ebp-04], eax
:00452B3F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452B42 81E911010000            sub ecx, 00000111
:00452B48 894DFC                  mov dword ptr [ebp-04], ecx
:00452B4B 817DFCF4000000          cmp dword ptr [ebp-04], 000000F4
:00452B52 0F87E6000000            ja 00452C3E
:00452B58 8B45FC                  mov eax, dword ptr [ebp-04]
:00452B5B 33D2                    xor edx, edx
:00452B5D 8A90702C4500            mov dl, byte ptr [eax+00452C70]
:00452B63 FF24955C2C4500          jmp dword ptr [4*edx+00452C5C]
:00452B6A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00452B6D 51                      push ecx
:00452B6E 8B5510                  mov edx, dword ptr [ebp+10]
:00452B71 52                      push edx
:00452B72 8B450C                  mov eax, dword ptr [ebp+0C]
:00452B75 50                      push eax
:00452B76 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452B79 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00452B7A FF15DC864B00            Call dword ptr [004B86DC]
:00452B80 E9D1000000              jmp 00452C56
:00452B85 833D78084B0000          cmp dword ptr [004B0878], 00000000
:00452B8C 7427                    je 00452BB5
:00452B8E 8B5514                  mov edx, dword ptr [ebp+14]
:00452B91 C1EA10                  shr edx, 10
:00452B94 81E2FFFF0000            and edx, 0000FFFF
:00452B9A 81E2FFFF0000            and edx, 0000FFFF
:00452BA0 52                      push edx
:00452BA1 8B4514                  mov eax, dword ptr [ebp+14]
:00452BA4 25FFFF0000              and eax, 0000FFFF
:00452BA9 50                      push eax
:00452BAA 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452BB0 E8C5EAFFFF              call 0045167A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452B8C(C)
|
:00452BB5 E984000000              jmp 00452C3E
:00452BBA 833D78084B0000          cmp dword ptr [004B0878], 00000000
:00452BC1 743E                    je 00452C01
:00452BC3 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452BC9 E826E3FFFF              call 00450EF4
:00452BCE 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452BD4 E847030000              call 00452F20
:00452BD9 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00452BDE 3DFF000000              cmp eax, 000000FF
:00452BE3 741C                    je 00452C01
:00452BE5 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452BEB E830030000              call 00452F20
:00452BF0 25FF000000              and eax, 000000FF
:00452BF5 50                      push eax
:00452BF6 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452BFC E899EDFFFF              call 0045199A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452BC1(C), :00452BE3(C)
|
:00452C01 EB3B                    jmp 00452C3E
:00452C03 833D78084B0000          cmp dword ptr [004B0878], 00000000
:00452C0A 7432                    je 00452C3E
:00452C0C 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452C12 E8393CFCFF              call 00416850
:00452C17 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00452C1C 3DFF000000              cmp eax, 000000FF
:00452C21 741B                    je 00452C3E
:00452C23 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452C26 51                      push ecx
:00452C27 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452C2D E81E3CFCFF              call 00416850
:00452C32 50                      push eax
:00452C33 8B0D78084B00            mov ecx, dword ptr [004B0878]
:00452C39 E8C7F2FFFF              call 00451F05

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452B52(C), :00452BB5(U), :00452C01(U), :00452C0A(C), :00452C21(C)
|
:00452C3E 8B5514                  mov edx, dword ptr [ebp+14]
:00452C41 52                      push edx
:00452C42 8B4510                  mov eax, dword ptr [ebp+10]
:00452C45 50                      push eax
:00452C46 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00452C49 51                      push ecx
:00452C4A 8B5508                  mov edx, dword ptr [ebp+08]
:00452C4D 52                      push edx
:00452C4E E8969D0100              call 0046C9E9
:00452C53 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452B80(U)
|
:00452C56 8BE5                    mov esp, ebp
:00452C58 5D                      pop ebp
:00452C59 C21000                  ret 0010



:00452C5C 6A2B4500                DWORD 00452B6A
:00452C60 852B4500                DWORD 00452B85
:00452C64 BA2B4500                DWORD 00452BBA
:00452C68 032C4500                DWORD 00452C03
:00452C6C 3E2C4500                DWORD 00452C3E


:00452C70 000404                  add byte ptr [esp+eax], al
:00452C73 0404                    add al, 04
:00452C75 0404                    add al, 04
:00452C77 0404                    add al, 04
:00452C79 0404                    add al, 04
:00452C7B 0404                    add al, 04
:00452C7D 0404                    add al, 04
:00452C7F 0404                    add al, 04
:00452C81 0404                    add al, 04
:00452C83 0404                    add al, 04
:00452C85 0404                    add al, 04
:00452C87 0404                    add al, 04
:00452C89 0404                    add al, 04
:00452C8B 0404                    add al, 04
:00452C8D 0404                    add al, 04
:00452C8F 0404                    add al, 04
:00452C91 0404                    add al, 04
:00452C93 0404                    add al, 04
:00452C95 0404                    add al, 04
:00452C97 0404                    add al, 04
:00452C99 0404                    add al, 04
:00452C9B 0404                    add al, 04
:00452C9D 0404                    add al, 04
:00452C9F 0404                    add al, 04
:00452CA1 0404                    add al, 04
:00452CA3 0404                    add al, 04
:00452CA5 0404                    add al, 04
:00452CA7 0404                    add al, 04
:00452CA9 0404                    add al, 04
:00452CAB 0404                    add al, 04
:00452CAD 0404                    add al, 04
:00452CAF 0404                    add al, 04
:00452CB1 0404                    add al, 04
:00452CB3 0404                    add al, 04
:00452CB5 0404                    add al, 04
:00452CB7 0404                    add al, 04
:00452CB9 0404                    add al, 04
:00452CBB 0404                    add al, 04
:00452CBD 0404                    add al, 04
:00452CBF 0404                    add al, 04
:00452CC1 0404                    add al, 04
:00452CC3 0404                    add al, 04
:00452CC5 0404                    add al, 04
:00452CC7 0404                    add al, 04
:00452CC9 0404                    add al, 04
:00452CCB 0404                    add al, 04
:00452CCD 0404                    add al, 04
:00452CCF 0404                    add al, 04
:00452CD1 0404                    add al, 04
:00452CD3 0404                    add al, 04
:00452CD5 0404                    add al, 04
:00452CD7 0404                    add al, 04
:00452CD9 0404                    add al, 04
:00452CDB 0404                    add al, 04
:00452CDD 0404                    add al, 04
:00452CDF 0404                    add al, 04
:00452CE1 0404                    add al, 04
:00452CE3 0404                    add al, 04
:00452CE5 0404                    add al, 04
:00452CE7 0404                    add al, 04
:00452CE9 0404                    add al, 04
:00452CEB 0404                    add al, 04
:00452CED 0404                    add al, 04
:00452CEF 0404                    add al, 04
:00452CF1 0404                    add al, 04
:00452CF3 0404                    add al, 04
:00452CF5 0404                    add al, 04
:00452CF7 0404                    add al, 04
:00452CF9 0404                    add al, 04
:00452CFB 0404                    add al, 04
:00452CFD 0404                    add al, 04
:00452CFF 0404                    add al, 04
:00452D01 0404                    add al, 04
:00452D03 0404                    add al, 04
:00452D05 0404                    add al, 04
:00452D07 0404                    add al, 04
:00452D09 0404                    add al, 04
:00452D0B 0404                    add al, 04
:00452D0D 0404                    add al, 04
:00452D0F 0404                    add al, 04
:00452D11 0404                    add al, 04
:00452D13 0404                    add al, 04
:00452D15 0404                    add al, 04
:00452D17 0404                    add al, 04
:00452D19 0404                    add al, 04
:00452D1B 0404                    add al, 04
:00452D1D 0404                    add al, 04
:00452D1F 0404                    add al, 04
:00452D21 0404                    add al, 04
:00452D23 0404                    add al, 04
:00452D25 0404                    add al, 04
:00452D27 0404                    add al, 04
:00452D29 0404                    add al, 04
:00452D2B 0404                    add al, 04
:00452D2D 0404                    add al, 04
:00452D2F 0404                    add al, 04
:00452D31 0404                    add al, 04
:00452D33 0404                    add al, 04
:00452D35 0404                    add al, 04
:00452D37 0404                    add al, 04
:00452D39 0404                    add al, 04
:00452D3B 0404                    add al, 04
:00452D3D 0404                    add al, 04
:00452D3F 0404                    add al, 04
:00452D41 0404                    add al, 04
:00452D43 0404                    add al, 04
:00452D45 0404                    add al, 04
:00452D47 0404                    add al, 04
:00452D49 0404                    add al, 04
:00452D4B 0404                    add al, 04
:00452D4D 0404                    add al, 04
:00452D4F 0404                    add al, 04
:00452D51 0404                    add al, 04
:00452D53 0404                    add al, 04
:00452D55 0404                    add al, 04
:00452D57 0404                    add al, 04
:00452D59 0404                    add al, 04
:00452D5B 0404                    add al, 04
:00452D5D 0404                    add al, 04
:00452D5F 0102                    add dword ptr [edx], eax
:00452D61 0404                    add al, 04
:00452D63 0403                    add al, 03

* Referenced by a CALL at Address:
|:004471F1   
|
:00452D65 55                      push ebp
:00452D66 8BEC                    mov ebp, esp
:00452D68 8B4508                  mov eax, dword ptr [ebp+08]
:00452D6B 50                      push eax
:00452D6C B910584800              mov ecx, 00485810
:00452D71 E8CA000000              call 00452E40
:00452D76 E83EA8FCFF              call 0041D5B9
:00452D7B 6A00                    push 00000000
:00452D7D B910584800              mov ecx, 00485810
:00452D82 E8B9000000              call 00452E40
:00452D87 837D0800                cmp dword ptr [ebp+08], 00000000
:00452D8B 7411                    je 00452D9E
:00452D8D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452D90 E87B19FBFF              call 00404710
:00452D95 50                      push eax
:00452D96 E8B5410100              call 00466F50
:00452D9B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452D8B(C)
|
:00452D9E 5D                      pop ebp
:00452D9F C3                      ret



* Referenced by a CALL at Addresses:
|:00402BB7   , :0040CF35   
|
:00452DA0 55                      push ebp
:00452DA1 8BEC                    mov ebp, esp
:00452DA3 51                      push ecx
:00452DA4 6828924900              push 00499228
:00452DA9 B910584800              mov ecx, 00485810
:00452DAE E88D000000              call 00452E40
:00452DB3 E801A8FCFF              call 0041D5B9
:00452DB8 6A00                    push 00000000
:00452DBA B910584800              mov ecx, 00485810
:00452DBF E87C000000              call 00452E40
:00452DC4 C745FC00000000          mov [ebp-04], 00000000
:00452DCB EB09                    jmp 00452DD6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452DFB(U)
|
:00452DCD 8B45FC                  mov eax, dword ptr [ebp-04]
:00452DD0 83C001                  add eax, 00000001
:00452DD3 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452DCB(U)
|
:00452DD6 817DFCC8000000          cmp dword ptr [ebp-04], 000000C8
:00452DDD 731E                    jnb 00452DFD
:00452DDF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452DE2 51                      push ecx
:00452DE3 E838DBFBFF              call 00410920
:00452DE8 83C404                  add esp, 00000004
:00452DEB 85C0                    test eax, eax
:00452DED 740C                    je 00452DFB
:00452DEF 8B55FC                  mov edx, dword ptr [ebp-04]
:00452DF2 52                      push edx
:00452DF3 E858410100              call 00466F50
:00452DF8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452DED(C)
|
:00452DFB EBD0                    jmp 00452DCD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452DDD(C)
|
:00452DFD 8BE5                    mov esp, ebp
:00452DFF 5D                      pop ebp
:00452E00 C3                      ret


:00452E01 CC                      int 03
:00452E02 CC                      int 03
:00452E03 CC                      int 03
:00452E04 CC                      int 03
:00452E05 CC                      int 03
:00452E06 CC                      int 03
:00452E07 CC                      int 03
:00452E08 CC                      int 03
:00452E09 CC                      int 03
:00452E0A CC                      int 03
:00452E0B CC                      int 03
:00452E0C CC                      int 03
:00452E0D CC                      int 03
:00452E0E CC                      int 03
:00452E0F CC                      int 03

* Referenced by a CALL at Address:
|:004523AF   
|
:00452E10 55                      push ebp
:00452E11 8BEC                    mov ebp, esp
:00452E13 51                      push ecx
:00452E14 894DFC                  mov dword ptr [ebp-04], ecx
:00452E17 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452E1A E86DE0FFFF              call 00450E8C
:00452E1F 8B4508                  mov eax, dword ptr [ebp+08]
:00452E22 83E001                  and eax, 00000001
:00452E25 85C0                    test eax, eax
:00452E27 740C                    je 00452E35
:00452E29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452E2C 51                      push ecx
:00452E2D E8EEAA0100              call 0046D920
:00452E32 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452E27(C)
|
:00452E35 8B45FC                  mov eax, dword ptr [ebp-04]
:00452E38 8BE5                    mov esp, ebp
:00452E3A 5D                      pop ebp
:00452E3B C20400                  ret 0004


:00452E3E CC                      int 03
:00452E3F CC                      int 03

* Referenced by a CALL at Addresses:
|:00431270   , :0044726F   , :00452D71   , :00452D82   , :00452DAE   
|:00452DBF   , :00453157   
|
:00452E40 55                      push ebp
:00452E41 8BEC                    mov ebp, esp
:00452E43 51                      push ecx
:00452E44 894DFC                  mov dword ptr [ebp-04], ecx
:00452E47 8B45FC                  mov eax, dword ptr [ebp-04]
:00452E4A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452E4D 894814                  mov dword ptr [eax+14], ecx
:00452E50 8BE5                    mov esp, ebp
:00452E52 5D                      pop ebp
:00452E53 C20400                  ret 0004


:00452E56 CC                      int 03
:00452E57 CC                      int 03
:00452E58 CC                      int 03
:00452E59 CC                      int 03
:00452E5A CC                      int 03
:00452E5B CC                      int 03
:00452E5C CC                      int 03
:00452E5D CC                      int 03
:00452E5E CC                      int 03
:00452E5F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404A81   , :004507FF   , :00450904   , :00450AB2   , :00450B81   
|:00450CFE   , :00450D98   , :00452FD0   
|
:00452E60 55                      push ebp
:00452E61 8BEC                    mov ebp, esp
:00452E63 51                      push ecx
:00452E64 894DFC                  mov dword ptr [ebp-04], ecx
:00452E67 8B45FC                  mov eax, dword ptr [ebp-04]
:00452E6A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452E6D 8908                    mov dword ptr [eax], ecx
:00452E6F 8BE5                    mov esp, ebp
:00452E71 5D                      pop ebp
:00452E72 C20400                  ret 0004


:00452E75 CC                      int 03
:00452E76 CC                      int 03
:00452E77 CC                      int 03
:00452E78 CC                      int 03
:00452E79 CC                      int 03
:00452E7A CC                      int 03
:00452E7B CC                      int 03
:00452E7C CC                      int 03
:00452E7D CC                      int 03
:00452E7E CC                      int 03
:00452E7F CC                      int 03

* Referenced by a CALL at Addresses:
|:004073E0   , :0040955F   , :0040AB12   , :0040C487   , :0040CE61   
|:0040D3D4   , :0040D58B   , :0040D9A3   , :0040DBCF   , :0040DFDB   
|:0040E08C   , :0040E13D   , :0041AF60   , :0041C4A9   , :0041CA71   
|:004504EE   , :004505A6   , :00453AA3   , :0045EF57   , :0045F2AB   
|:0045F335   
|
:00452E80 55                      push ebp
:00452E81 8BEC                    mov ebp, esp
:00452E83 51                      push ecx
:00452E84 894DFC                  mov dword ptr [ebp-04], ecx
:00452E87 8B45FC                  mov eax, dword ptr [ebp-04]
:00452E8A 8B4008                  mov eax, dword ptr [eax+08]
:00452E8D 8BE5                    mov esp, ebp
:00452E8F 5D                      pop ebp
:00452E90 C3                      ret


:00452E91 CC                      int 03
:00452E92 CC                      int 03
:00452E93 CC                      int 03
:00452E94 CC                      int 03
:00452E95 CC                      int 03
:00452E96 CC                      int 03
:00452E97 CC                      int 03
:00452E98 CC                      int 03
:00452E99 CC                      int 03
:00452E9A CC                      int 03
:00452E9B CC                      int 03
:00452E9C CC                      int 03
:00452E9D CC                      int 03
:00452E9E CC                      int 03
:00452E9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00418501   , :00419324   , :0041BA12   , :0041E3BD   , :004504F9   
|:004505B1   , :0045C793   , :0045DC66   , :0045E3D9   
|
:00452EA0 55                      push ebp
:00452EA1 8BEC                    mov ebp, esp
:00452EA3 51                      push ecx
:00452EA4 894DFC                  mov dword ptr [ebp-04], ecx
:00452EA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00452EAA 8B400C                  mov eax, dword ptr [eax+0C]
:00452EAD 8BE5                    mov esp, ebp
:00452EAF 5D                      pop ebp
:00452EB0 C3                      ret


:00452EB1 CC                      int 03
:00452EB2 CC                      int 03
:00452EB3 CC                      int 03
:00452EB4 CC                      int 03
:00452EB5 CC                      int 03
:00452EB6 CC                      int 03
:00452EB7 CC                      int 03
:00452EB8 CC                      int 03
:00452EB9 CC                      int 03
:00452EBA CC                      int 03
:00452EBB CC                      int 03
:00452EBC CC                      int 03
:00452EBD CC                      int 03
:00452EBE CC                      int 03
:00452EBF CC                      int 03

* Referenced by a CALL at Addresses:
|:004210BE   , :0042136E   , :00450686   , :0045096A   , :00450BE7   
|
:00452EC0 55                      push ebp
:00452EC1 8BEC                    mov ebp, esp
:00452EC3 51                      push ecx
:00452EC4 894DFC                  mov dword ptr [ebp-04], ecx
:00452EC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00452ECA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452ECD 894810                  mov dword ptr [eax+10], ecx
:00452ED0 8BE5                    mov esp, ebp
:00452ED2 5D                      pop ebp
:00452ED3 C20400                  ret 0004


:00452ED6 CC                      int 03
:00452ED7 CC                      int 03
:00452ED8 CC                      int 03
:00452ED9 CC                      int 03
:00452EDA CC                      int 03
:00452EDB CC                      int 03
:00452EDC CC                      int 03
:00452EDD CC                      int 03
:00452EDE CC                      int 03
:00452EDF CC                      int 03

* Referenced by a CALL at Addresses:
|:0045213D   , :0045217C   , :004521BB   
|
:00452EE0 55                      push ebp
:00452EE1 8BEC                    mov ebp, esp
:00452EE3 51                      push ecx
:00452EE4 894DFC                  mov dword ptr [ebp-04], ecx
:00452EE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452EEA E8C148FBFF              call 004077B0
:00452EEF 8B45FC                  mov eax, dword ptr [ebp-04]
:00452EF2 8BE5                    mov esp, ebp
:00452EF4 5D                      pop ebp
:00452EF5 C3                      ret


:00452EF6 CC                      int 03
:00452EF7 CC                      int 03
:00452EF8 CC                      int 03
:00452EF9 CC                      int 03
:00452EFA CC                      int 03
:00452EFB CC                      int 03
:00452EFC CC                      int 03
:00452EFD CC                      int 03
:00452EFE CC                      int 03
:00452EFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00420D08   , :0045215E   , :0045219D   , :004521DC   
|
:00452F00 55                      push ebp
:00452F01 8BEC                    mov ebp, esp
:00452F03 51                      push ecx
:00452F04 894DFC                  mov dword ptr [ebp-04], ecx
:00452F07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452F0A E8912DFDFF              call 00425CA0
:00452F0F 8BE5                    mov esp, ebp
:00452F11 5D                      pop ebp
:00452F12 C3                      ret


:00452F13 CC                      int 03
:00452F14 CC                      int 03
:00452F15 CC                      int 03
:00452F16 CC                      int 03
:00452F17 CC                      int 03
:00452F18 CC                      int 03
:00452F19 CC                      int 03
:00452F1A CC                      int 03
:00452F1B CC                      int 03
:00452F1C CC                      int 03
:00452F1D CC                      int 03
:00452F1E CC                      int 03
:00452F1F CC                      int 03

* Referenced by a CALL at Addresses:
|:00452BD4   , :00452BEB   
|
:00452F20 55                      push ebp
:00452F21 8BEC                    mov ebp, esp
:00452F23 51                      push ecx
:00452F24 894DFC                  mov dword ptr [ebp-04], ecx
:00452F27 8B45FC                  mov eax, dword ptr [ebp-04]
:00452F2A 8A4009                  mov al, byte ptr [eax+09]
:00452F2D 8BE5                    mov esp, ebp
:00452F2F 5D                      pop ebp
:00452F30 C3                      ret


:00452F31 CC                      int 03
:00452F32 CC                      int 03
:00452F33 CC                      int 03
:00452F34 CC                      int 03
:00452F35 CC                      int 03
:00452F36 CC                      int 03
:00452F37 CC                      int 03
:00452F38 CC                      int 03
:00452F39 CC                      int 03
:00452F3A CC                      int 03
:00452F3B CC                      int 03
:00452F3C CC                      int 03
:00452F3D CC                      int 03
:00452F3E CC                      int 03
:00452F3F CC                      int 03

* Referenced by a CALL at Addresses:
|:004519A8   , :00451DF4   , :0045235A   
|
:00452F40 55                      push ebp
:00452F41 8BEC                    mov ebp, esp
:00452F43 51                      push ecx
:00452F44 894DFC                  mov dword ptr [ebp-04], ecx
:00452F47 8B4508                  mov eax, dword ptr [ebp+08]
:00452F4A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452F4D 8B44812C                mov eax, dword ptr [ecx+4*eax+2C]
:00452F51 8BE5                    mov esp, ebp
:00452F53 5D                      pop ebp
:00452F54 C20400                  ret 0004


:00452F57 CC                      int 03
:00452F58 CC                      int 03
:00452F59 CC                      int 03
:00452F5A CC                      int 03
:00452F5B CC                      int 03
:00452F5C CC                      int 03
:00452F5D CC                      int 03
:00452F5E CC                      int 03
:00452F5F CC                      int 03

* Referenced by a CALL at Addresses:
|:004519BA   , :004519FB   
|
:00452F60 55                      push ebp
:00452F61 8BEC                    mov ebp, esp
:00452F63 51                      push ecx
:00452F64 894DFC                  mov dword ptr [ebp-04], ecx
:00452F67 8B4508                  mov eax, dword ptr [ebp+08]
:00452F6A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452F6D 8B550C                  mov edx, dword ptr [ebp+0C]
:00452F70 8954812C                mov dword ptr [ecx+4*eax+2C], edx
:00452F74 8BE5                    mov esp, ebp
:00452F76 5D                      pop ebp
:00452F77 C20800                  ret 0008


:00452F7A CC                      int 03
:00452F7B CC                      int 03
:00452F7C CC                      int 03
:00452F7D CC                      int 03
:00452F7E CC                      int 03
:00452F7F CC                      int 03
:00452F80 55                      push ebp
:00452F81 8BEC                    mov ebp, esp
:00452F83 E807000000              call 00452F8F
:00452F88 E811000000              call 00452F9E
:00452F8D 5D                      pop ebp
:00452F8E C3                      ret



* Referenced by a CALL at Address:
|:00452F83   
|
:00452F8F 55                      push ebp
:00452F90 8BEC                    mov ebp, esp
:00452F92 B9D8094B00              mov ecx, 004B09D8
:00452F97 E8F4150000              call 00454590
:00452F9C 5D                      pop ebp
:00452F9D C3                      ret



* Referenced by a CALL at Address:
|:00452F88   
|
:00452F9E 55                      push ebp
:00452F9F 8BEC                    mov ebp, esp
:00452FA1 68B02F4500              push 00452FB0
:00452FA6 E8C5A40100              call 0046D470
:00452FAB 83C404                  add esp, 00000004
:00452FAE 5D                      pop ebp
:00452FAF C3                      ret


:00452FB0 55                      push ebp
:00452FB1 8BEC                    mov ebp, esp
:00452FB3 B9D8094B00              mov ecx, 004B09D8
:00452FB8 E823160000              call 004545E0
:00452FBD 5D                      pop ebp
:00452FBE C3                      ret



* Referenced by a CALL at Address:
|:004318C3   
|
:00452FBF 55                      push ebp
:00452FC0 8BEC                    mov ebp, esp
:00452FC2 51                      push ecx
:00452FC3 C645FCFF                mov [ebp-04], FF
:00452FC7 8B4508                  mov eax, dword ptr [ebp+08]
:00452FCA 50                      push eax
:00452FCB B9D8094B00              mov ecx, 004B09D8
:00452FD0 E88BFEFFFF              call 00452E60
:00452FD5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00452FD8 51                      push ecx
:00452FD9 B9D8094B00              mov ecx, 004B09D8
:00452FDE E81DC7FDFF              call 0042F700
:00452FE3 8B5510                  mov edx, dword ptr [ebp+10]
:00452FE6 52                      push edx
:00452FE7 B9D8094B00              mov ecx, 004B09D8
:00452FEC E8CF6AFEFF              call 00439AC0
:00452FF1 B9D8094B00              mov ecx, 004B09D8
:00452FF6 E845160000              call 00454640

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00452FFB 68FF000000              push 000000FF
:00453000 B9D8094B00              mov ecx, 004B09D8
:00453005 E816160000              call 00454620
:0045300A 8B4514                  mov eax, dword ptr [ebp+14]
:0045300D 50                      push eax
:0045300E 6898304500              push 00453098
:00453013 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00453019 51                      push ecx

* Possible Reference to Dialog: DialogID_0122 
                                  |
:0045301A 6822010000              push 00000122
:0045301F 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00453025 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00453026 FF1520874B00            Call dword ptr [004B8720]
:0045302C 8845FC                  mov byte ptr [ebp-04], al
:0045302F 8A45FC                  mov al, byte ptr [ebp-04]
:00453032 8BE5                    mov esp, ebp
:00453034 5D                      pop ebp
:00453035 C3                      ret



* Referenced by a CALL at Addresses:
|:00453F84   , :0045401F   
|
:00453036 55                      push ebp
:00453037 8BEC                    mov ebp, esp
:00453039 83EC0C                  sub esp, 0000000C
:0045303C 6A00                    push 00000000
:0045303E 6A00                    push 00000000
:00453040 6804100000              push 00001004
:00453045 8B4508                  mov eax, dword ptr [ebp+08]
:00453048 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453049 FF15D8864B00            Call dword ptr [004B86D8]
:0045304F 8945F8                  mov dword ptr [ebp-08], eax
:00453052 C745F400000000          mov [ebp-0C], 00000000
:00453059 EB09                    jmp 00453064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045308F(U)
|
:0045305B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045305E 83C101                  add ecx, 00000001
:00453061 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453059(U)
|
:00453064 8B55F4                  mov edx, dword ptr [ebp-0C]
:00453067 3B55F8                  cmp edx, dword ptr [ebp-08]
:0045306A 7D25                    jge 00453091

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045306C 6A02                    push 00000002
:0045306E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00453071 50                      push eax
:00453072 682C100000              push 0000102C
:00453077 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045307A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045307B FF15D8864B00            Call dword ptr [004B86D8]
:00453081 8945FC                  mov dword ptr [ebp-04], eax
:00453084 837DFC02                cmp dword ptr [ebp-04], 00000002
:00453088 7505                    jne 0045308F
:0045308A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045308D EB05                    jmp 00453094

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453088(C)
|
:0045308F EBCA                    jmp 0045305B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045306A(C)
|
:00453091 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045308D(U)
|
:00453094 8BE5                    mov esp, ebp
:00453096 5D                      pop ebp
:00453097 C3                      ret


:00453098 55                      push ebp
:00453099 8BEC                    mov ebp, esp
:0045309B 83EC40                  sub esp, 00000040
:0045309E 8B450C                  mov eax, dword ptr [ebp+0C]
:004530A1 8945C0                  mov dword ptr [ebp-40], eax
:004530A4 837DC005                cmp dword ptr [ebp-40], 00000005
:004530A8 7719                    ja 004530C3
:004530AA 837DC005                cmp dword ptr [ebp-40], 00000005
:004530AE 0F8420010000            je 004531D4
:004530B4 837DC002                cmp dword ptr [ebp-40], 00000002
:004530B8 0F84EB000000            je 004531A9
:004530BE E932050000              jmp 004535F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530A8(C)
|
:004530C3 837DC02B                cmp dword ptr [ebp-40], 0000002B
:004530C7 7723                    ja 004530EC
:004530C9 837DC02B                cmp dword ptr [ebp-40], 0000002B
:004530CD 0F84C0010000            je 00453293
:004530D3 837DC00F                cmp dword ptr [ebp-40], 0000000F
:004530D7 0F847B010000            je 00453258
:004530DD 837DC010                cmp dword ptr [ebp-40], 00000010
:004530E1 0F841A010000            je 00453201
:004530E7 E909050000              jmp 004535F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530C7(C)
|
:004530EC 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004530EF 83E92C                  sub ecx, 0000002C
:004530F2 894DC0                  mov dword ptr [ebp-40], ecx
:004530F5 817DC0E5000000          cmp dword ptr [ebp-40], 000000E5
:004530FC 0F87F3040000            ja 004535F5
:00453102 8B45C0                  mov eax, dword ptr [ebp-40]
:00453105 33D2                    xor edx, edx
:00453107 8A9011364500            mov dl, byte ptr [eax+00453611]
:0045310D FF2495FD354500          jmp dword ptr [4*edx+004535FD]
:00453114 6A00                    push 00000000
:00453116 B9D8094B00              mov ecx, 004B09D8
:0045311B E8E044FFFF              call 00447600
:00453120 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453123 51                      push ecx
:00453124 B9D8094B00              mov ecx, 004B09D8
:00453129 E838120000              call 00454366
:0045312E 8B5514                  mov edx, dword ptr [ebp+14]
:00453131 8915D0094B00            mov dword ptr [004B09D0], edx

* Possible StringData Ref from Data Obj ->"MgcIcon.dll"
                                  |
:00453137 68B07A4700              push 00477AB0
:0045313C E873D0FBFF              call 004101B4
:00453141 83C404                  add esp, 00000004
:00453144 50                      push eax

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:00453145 FF1564854B00            Call dword ptr [004B8564]
:0045314B 8945FC                  mov dword ptr [ebp-04], eax
:0045314E 8B45FC                  mov eax, dword ptr [ebp-04]
:00453151 50                      push eax
:00453152 B9D8094B00              mov ecx, 004B09D8
:00453157 E8E4FCFFFF              call 00452E40
:0045315C 8B0DD0094B00            mov ecx, dword ptr [004B09D0]
:00453162 51                      push ecx
:00453163 8B5508                  mov edx, dword ptr [ebp+08]
:00453166 52                      push edx
:00453167 E85B070000              call 004538C7
:0045316C 83C408                  add esp, 00000008
:0045316F 68000A4B00              push 004B0A00
:00453174 8B4508                  mov eax, dword ptr [ebp+08]
:00453177 50                      push eax
:00453178 E86F9AFCFF              call 0041CBEC
:0045317D 83C408                  add esp, 00000008
:00453180 6889000000              push 00000089
:00453185 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0045318B 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045318C FF15E8864B00            Call dword ptr [004B86E8]
:00453192 50                      push eax
:00453193 6ADE                    push FFFFFFDE
:00453195 8B5508                  mov edx, dword ptr [ebp+08]
:00453198 52                      push edx

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00453199 FF15A0874B00            Call dword ptr [004B87A0]
:0045319F B801000000              mov eax, 00000001
:004531A4 E94E040000              jmp 004535F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530B8(C)
|
:004531A9 B9D8094B00              mov ecx, 004B09D8
:004531AE E81DCEFCFF              call 0041FFD0
:004531B3 8945FC                  mov dword ptr [ebp-04], eax
:004531B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004531B9 50                      push eax

* Reference To: KERNEL32.FreeLibrary, Ord:0098h
                                  |
:004531BA FF1568854B00            Call dword ptr [004B8568]
:004531C0 68000A4B00              push 004B0A00
:004531C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004531C8 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004531C9 FF1558874B00            Call dword ptr [004B8758]
:004531CF E921040000              jmp 004535F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530AE(C)
|
:004531D4 8B5514                  mov edx, dword ptr [ebp+14]
:004531D7 C1EA10                  shr edx, 10
:004531DA 81E2FFFF0000            and edx, 0000FFFF
:004531E0 81E2FFFF0000            and edx, 0000FFFF
:004531E6 52                      push edx
:004531E7 8B4514                  mov eax, dword ptr [ebp+14]
:004531EA 25FFFF0000              and eax, 0000FFFF
:004531EF 50                      push eax
:004531F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004531F3 51                      push ecx
:004531F4 E8FE040000              call 004536F7
:004531F9 83C40C                  add esp, 0000000C
:004531FC E9F4030000              jmp 004535F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530E1(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453201 68FF000000              push 000000FF
:00453206 8B5508                  mov edx, dword ptr [ebp+08]
:00453209 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045320A FF15B0874B00            Call dword ptr [004B87B0]
:00453210 E9E0030000              jmp 004535F5
:00453215 8B4514                  mov eax, dword ptr [ebp+14]
:00453218 50                      push eax
:00453219 668B4D10                mov cx, word ptr [ebp+10]
:0045321D 51                      push ecx
:0045321E 8B5510                  mov edx, dword ptr [ebp+10]
:00453221 C1EA10                  shr edx, 10
:00453224 81E2FFFF0000            and edx, 0000FFFF
:0045322A 52                      push edx
:0045322B 8B4508                  mov eax, dword ptr [ebp+08]
:0045322E 50                      push eax
:0045322F E8E60B0000              call 00453E1A
:00453234 83C410                  add esp, 00000010
:00453237 E9B9030000              jmp 004535F5
:0045323C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045323F 51                      push ecx
:00453240 8B15D0094B00            mov edx, dword ptr [004B09D0]
:00453246 52                      push edx
:00453247 8B4508                  mov eax, dword ptr [ebp+08]
:0045324A 50                      push eax
:0045324B E8DC0C0000              call 00453F2C
:00453250 83C40C                  add esp, 0000000C
:00453253 E99D030000              jmp 004535F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530D7(C)
|
:00453258 6842010000              push 00000142
:0045325D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453260 51                      push ecx
:00453261 E8887B0000              call 0045ADEE
:00453266 83C408                  add esp, 00000008
:00453269 E987030000              jmp 004535F5
:0045326E 8B5514                  mov edx, dword ptr [ebp+14]
:00453271 52                      push edx
:00453272 8B4510                  mov eax, dword ptr [ebp+10]
:00453275 50                      push eax
:00453276 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453279 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045327A FF15AC864B00            Call dword ptr [004B86AC]
:00453280 50                      push eax
:00453281 E84651FCFF              call 004183CC
:00453286 83C408                  add esp, 00000008
:00453289 B801000000              mov eax, 00000001
:0045328E E964030000              jmp 004535F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530CD(C)
|
:00453293 8B5514                  mov edx, dword ptr [ebp+14]
:00453296 8955F4                  mov dword ptr [ebp-0C], edx
:00453299 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045329C 8B4814                  mov ecx, dword ptr [eax+14]
:0045329F 894DCC                  mov dword ptr [ebp-34], ecx
:004532A2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004532A5 8B4208                  mov eax, dword ptr [edx+08]
:004532A8 50                      push eax
:004532A9 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004532AC 51                      push ecx
:004532AD E8C443FCFF              call 00417676
:004532B2 83C408                  add esp, 00000008
:004532B5 8945C8                  mov dword ptr [ebp-38], eax
:004532B8 8B55C8                  mov edx, dword ptr [ebp-38]
:004532BB 81E2FFFF0000            and edx, 0000FFFF
:004532C1 8955F8                  mov dword ptr [ebp-08], edx
:004532C4 8B45C8                  mov eax, dword ptr [ebp-38]
:004532C7 C1E810                  shr eax, 10
:004532CA 25FFFF0000              and eax, 0000FFFF
:004532CF 25FFFF0000              and eax, 0000FFFF
:004532D4 8945E0                  mov dword ptr [ebp-20], eax
:004532D7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004532DA 83C11C                  add ecx, 0000001C
:004532DD 8B11                    mov edx, dword ptr [ecx]
:004532DF 8955E4                  mov dword ptr [ebp-1C], edx
:004532E2 8B4104                  mov eax, dword ptr [ecx+04]
:004532E5 8945E8                  mov dword ptr [ebp-18], eax
:004532E8 8B5108                  mov edx, dword ptr [ecx+08]
:004532EB 8955EC                  mov dword ptr [ebp-14], edx
:004532EE 8B410C                  mov eax, dword ptr [ecx+0C]
:004532F1 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004532F4 6A02                    push 00000002
:004532F6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004532F9 8B5108                  mov edx, dword ptr [ecx+08]
:004532FC 52                      push edx
:004532FD 682C100000              push 0000102C
:00453302 8B45CC                  mov eax, dword ptr [ebp-34]
:00453305 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453306 FF15D8864B00            Call dword ptr [004B86D8]
:0045330C 33C9                    xor ecx, ecx
:0045330E 83F802                  cmp eax, 00000002
:00453311 0F94C1                  sete cl
:00453314 894DC4                  mov dword ptr [ebp-3C], ecx
:00453317 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045331A 8955D0                  mov dword ptr [ebp-30], edx
:0045331D 8B45E8                  mov eax, dword ptr [ebp-18]
:00453320 8945D4                  mov dword ptr [ebp-2C], eax
:00453323 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00453326 894DD8                  mov dword ptr [ebp-28], ecx
:00453329 8B55F0                  mov edx, dword ptr [ebp-10]
:0045332C 8955DC                  mov dword ptr [ebp-24], edx
:0045332F C745D000000000          mov [ebp-30], 00000000
:00453336 6A00                    push 00000000
:00453338 6A00                    push 00000000
:0045333A 681D100000              push 0000101D
:0045333F 8B45CC                  mov eax, dword ptr [ebp-34]
:00453342 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453343 FF15D8864B00            Call dword ptr [004B86D8]
:00453349 8945D8                  mov dword ptr [ebp-28], eax
:0045334C 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0045334F 51                      push ecx
:00453350 8D55D0                  lea edx, dword ptr [ebp-30]
:00453353 52                      push edx
:00453354 8B45F4                  mov eax, dword ptr [ebp-0C]
:00453357 8B4818                  mov ecx, dword ptr [eax+18]
:0045335A 51                      push ecx
:0045335B E8D5A9FCFF              call 0041DD35
:00453360 83C40C                  add esp, 0000000C
:00453363 6A00                    push 00000000
:00453365 8B55F4                  mov edx, dword ptr [ebp-0C]
:00453368 8B4220                  mov eax, dword ptr [edx+20]
:0045336B 50                      push eax
:0045336C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045336F 8B511C                  mov edx, dword ptr [ecx+1C]
:00453372 52                      push edx
:00453373 8B45F4                  mov eax, dword ptr [ebp-0C]
:00453376 8B4818                  mov ecx, dword ptr [eax+18]
:00453379 51                      push ecx
:0045337A 8B55E0                  mov edx, dword ptr [ebp-20]
:0045337D 52                      push edx
:0045337E 6A00                    push 00000000
:00453380 6A01                    push 00000001
:00453382 6802100000              push 00001002
:00453387 8B45CC                  mov eax, dword ptr [ebp-34]
:0045338A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045338B FF15D8864B00            Call dword ptr [004B86D8]
:00453391 50                      push eax

* Reference To: COMCTL32.ImageList_Draw, Ord:001Ch
                                  |
:00453392 FF1558844B00            Call dword ptr [004B8458]
:00453398 6A00                    push 00000000
:0045339A 6A00                    push 00000000
:0045339C 681D100000              push 0000101D
:004533A1 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004533A4 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004533A5 FF15D8864B00            Call dword ptr [004B86D8]
:004533AB 8B55E4                  mov edx, dword ptr [ebp-1C]
:004533AE 8D4402FD                lea eax, dword ptr [edx+eax-03]
:004533B2 8945EC                  mov dword ptr [ebp-14], eax
:004533B5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004533B8 83C112                  add ecx, 00000012
:004533BB 894DE4                  mov dword ptr [ebp-1C], ecx
:004533BE 6A00                    push 00000000
:004533C0 6824800000              push 00008024
:004533C5 8D55E4                  lea edx, dword ptr [ebp-1C]
:004533C8 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004533C9 6AFF                    push FFFFFFFF
:004533CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004533CE 6BC911                  imul ecx, 00000011
:004533D1 81C180DF4A00            add ecx, 004ADF80
:004533D7 E8D443FBFF              call 004077B0
:004533DC 50                      push eax
:004533DD 8B45F4                  mov eax, dword ptr [ebp-0C]
:004533E0 8B4818                  mov ecx, dword ptr [eax+18]
:004533E3 51                      push ecx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:004533E4 FF1564874B00            Call dword ptr [004B8764]
:004533EA 8B55D8                  mov edx, dword ptr [ebp-28]
:004533ED 8955D0                  mov dword ptr [ebp-30], edx
:004533F0 6A00                    push 00000000
:004533F2 6A01                    push 00000001
:004533F4 681D100000              push 0000101D
:004533F9 8B45CC                  mov eax, dword ptr [ebp-34]
:004533FC 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004533FD FF15D8864B00            Call dword ptr [004B86D8]
:00453403 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00453406 03C8                    add ecx, eax
:00453408 894DD8                  mov dword ptr [ebp-28], ecx
:0045340B 8B55C4                  mov edx, dword ptr [ebp-3C]
:0045340E 52                      push edx
:0045340F 8D45D0                  lea eax, dword ptr [ebp-30]
:00453412 50                      push eax
:00453413 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00453416 8B5118                  mov edx, dword ptr [ecx+18]
:00453419 52                      push edx
:0045341A E816A9FCFF              call 0041DD35
:0045341F 83C40C                  add esp, 0000000C
:00453422 8B45EC                  mov eax, dword ptr [ebp-14]
:00453425 83C008                  add eax, 00000008
:00453428 8945E4                  mov dword ptr [ebp-1C], eax
:0045342B 6A00                    push 00000000
:0045342D 6A01                    push 00000001
:0045342F 681D100000              push 0000101D
:00453434 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00453437 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453438 FF15D8864B00            Call dword ptr [004B86D8]
:0045343E 8B55EC                  mov edx, dword ptr [ebp-14]
:00453441 8D4402FD                lea eax, dword ptr [edx+eax-03]
:00453445 8945EC                  mov dword ptr [ebp-14], eax
:00453448 6A00                    push 00000000
:0045344A 6824800000              push 00008024
:0045344F 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00453452 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453453 6AFF                    push FFFFFFFF
:00453455 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00453458 6BC911                  imul ecx, 00000011
:0045345B 81C180DF4A00            add ecx, 004ADF80
:00453461 E88AC8FDFF              call 0042FCF0
:00453466 25FF000000              and eax, 000000FF
:0045346B 50                      push eax

* Possible StringData Ref from Data Obj ->"%2u"
                                  |
:0045346C 68B8D64700              push 0047D6B8
:00453471 E85144FCFF              call 004178C7
:00453476 83C408                  add esp, 00000008
:00453479 50                      push eax
:0045347A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045347D 8B4218                  mov eax, dword ptr [edx+18]
:00453480 50                      push eax

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00453481 FF1564874B00            Call dword ptr [004B8764]
:00453487 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045348A 894DD0                  mov dword ptr [ebp-30], ecx
:0045348D 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045348F 6A02                    push 00000002
:00453491 681D100000              push 0000101D
:00453496 8B55CC                  mov edx, dword ptr [ebp-34]
:00453499 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045349A FF15D8864B00            Call dword ptr [004B86D8]
:004534A0 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004534A3 03C8                    add ecx, eax
:004534A5 894DD8                  mov dword ptr [ebp-28], ecx
:004534A8 8B55C4                  mov edx, dword ptr [ebp-3C]
:004534AB 52                      push edx
:004534AC 8D45D0                  lea eax, dword ptr [ebp-30]
:004534AF 50                      push eax
:004534B0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004534B3 8B5118                  mov edx, dword ptr [ecx+18]
:004534B6 52                      push edx
:004534B7 E879A8FCFF              call 0041DD35
:004534BC 83C40C                  add esp, 0000000C
:004534BF 8B45EC                  mov eax, dword ptr [ebp-14]
:004534C2 83C008                  add eax, 00000008
:004534C5 8945E4                  mov dword ptr [ebp-1C], eax
:004534C8 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004534CA 6A02                    push 00000002
:004534CC 681D100000              push 0000101D
:004534D1 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004534D4 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004534D5 FF15D8864B00            Call dword ptr [004B86D8]
:004534DB 8B55EC                  mov edx, dword ptr [ebp-14]
:004534DE 8D4402FD                lea eax, dword ptr [edx+eax-03]
:004534E2 8945EC                  mov dword ptr [ebp-14], eax
:004534E5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004534E8 6BC911                  imul ecx, 00000011
:004534EB 81C180DF4A00            add ecx, 004ADF80
:004534F1 E8AAF2FBFF              call 004127A0
:004534F6 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004534FB 3DFF000000              cmp eax, 000000FF
:00453500 743A                    je 0045353C
:00453502 6A00                    push 00000000
:00453504 6824800000              push 00008024
:00453509 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0045350C 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045350D 6AFF                    push FFFFFFFF
:0045350F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00453512 6BC911                  imul ecx, 00000011
:00453515 81C180DF4A00            add ecx, 004ADF80
:0045351B E880F2FBFF              call 004127A0
:00453520 25FF000000              and eax, 000000FF
:00453525 8B1485707B4700          mov edx, dword ptr [4*eax+00477B70]
:0045352C 52                      push edx
:0045352D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00453530 8B4818                  mov ecx, dword ptr [eax+18]
:00453533 51                      push ecx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00453534 FF1564874B00            Call dword ptr [004B8764]
:0045353A EB1F                    jmp 0045355B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453500(C)
|
:0045353C 6A00                    push 00000000
:0045353E 6824800000              push 00008024
:00453543 8D55E4                  lea edx, dword ptr [ebp-1C]
:00453546 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453547 6AFF                    push FFFFFFFF

* Possible StringData Ref from Data Obj ->"L"
                                  |
:00453549 68BCD64700              push 0047D6BC
:0045354E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00453551 8B4818                  mov ecx, dword ptr [eax+18]
:00453554 51                      push ecx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00453555 FF1564874B00            Call dword ptr [004B8764]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045353A(U)
|
:0045355B 8B55D8                  mov edx, dword ptr [ebp-28]
:0045355E 8955D0                  mov dword ptr [ebp-30], edx
:00453561 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00453563 6A03                    push 00000003
:00453565 681D100000              push 0000101D
:0045356A 8B45CC                  mov eax, dword ptr [ebp-34]
:0045356D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045356E FF15D8864B00            Call dword ptr [004B86D8]
:00453574 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00453577 03C8                    add ecx, eax
:00453579 894DD8                  mov dword ptr [ebp-28], ecx
:0045357C 8B55C4                  mov edx, dword ptr [ebp-3C]
:0045357F 52                      push edx
:00453580 8D45D0                  lea eax, dword ptr [ebp-30]
:00453583 50                      push eax
:00453584 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00453587 8B5118                  mov edx, dword ptr [ecx+18]
:0045358A 52                      push edx
:0045358B E8A5A7FCFF              call 0041DD35
:00453590 83C40C                  add esp, 0000000C
:00453593 8B45EC                  mov eax, dword ptr [ebp-14]
:00453596 83C008                  add eax, 00000008
:00453599 8945E4                  mov dword ptr [ebp-1C], eax
:0045359C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045359E 6A03                    push 00000003
:004535A0 681D100000              push 0000101D
:004535A5 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004535A8 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004535A9 FF15D8864B00            Call dword ptr [004B86D8]
:004535AF 8B55EC                  mov edx, dword ptr [ebp-14]
:004535B2 8D4402FD                lea eax, dword ptr [edx+eax-03]
:004535B6 8945EC                  mov dword ptr [ebp-14], eax
:004535B9 6A00                    push 00000000
:004535BB 6824800000              push 00008024
:004535C0 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:004535C3 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004535C4 6AFF                    push FFFFFFFF
:004535C6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004535C9 6BC911                  imul ecx, 00000011
:004535CC 81C180DF4A00            add ecx, 004ADF80
:004535D2 E8F9C2FDFF              call 0042F8D0
:004535D7 50                      push eax
:004535D8 E8B7020000              call 00453894
:004535DD 83C404                  add esp, 00000004
:004535E0 50                      push eax
:004535E1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004535E4 8B4218                  mov eax, dword ptr [edx+18]
:004535E7 50                      push eax

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:004535E8 FF1564874B00            Call dword ptr [004B8764]
:004535EE B801000000              mov eax, 00000001
:004535F3 EB02                    jmp 004535F7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004530BE(U), :004530E7(U), :004530FC(C), :004531CF(U), :004531FC(U)
|:00453210(U), :00453237(U), :00453253(U), :00453269(U)
|
:004535F5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004531A4(U), :0045328E(U), :004535F3(U)
|
:004535F7 8BE5                    mov esp, ebp
:004535F9 5D                      pop ebp
:004535FA C21000                  ret 0010



:004535FD 6E324500                DWORD 0045326E
:00453601 3C324500                DWORD 0045323C
:00453605 14314500                DWORD 00453114
:00453609 15324500                DWORD 00453215
:0045360D F5354500                DWORD 004535F5


:00453611 000404                  add byte ptr [esp+eax], al
:00453614 0404                    add al, 04
:00453616 0404                    add al, 04
:00453618 0404                    add al, 04
:0045361A 0404                    add al, 04
:0045361C 0404                    add al, 04
:0045361E 0404                    add al, 04
:00453620 0404                    add al, 04
:00453622 0404                    add al, 04
:00453624 0404                    add al, 04
:00453626 0404                    add al, 04
:00453628 0404                    add al, 04
:0045362A 0404                    add al, 04
:0045362C 0404                    add al, 04
:0045362E 0404                    add al, 04
:00453630 0404                    add al, 04
:00453632 0401                    add al, 01
:00453634 0404                    add al, 04
:00453636 0404                    add al, 04
:00453638 0404                    add al, 04
:0045363A 0404                    add al, 04
:0045363C 0404                    add al, 04
:0045363E 0404                    add al, 04
:00453640 0404                    add al, 04
:00453642 0404                    add al, 04
:00453644 0404                    add al, 04
:00453646 0404                    add al, 04
:00453648 0404                    add al, 04
:0045364A 0404                    add al, 04
:0045364C 0404                    add al, 04
:0045364E 0404                    add al, 04
:00453650 0404                    add al, 04
:00453652 0404                    add al, 04
:00453654 0404                    add al, 04
:00453656 0404                    add al, 04
:00453658 0404                    add al, 04
:0045365A 0404                    add al, 04
:0045365C 0404                    add al, 04
:0045365E 0404                    add al, 04
:00453660 0404                    add al, 04
:00453662 0404                    add al, 04
:00453664 0404                    add al, 04
:00453666 0404                    add al, 04
:00453668 0404                    add al, 04
:0045366A 0404                    add al, 04
:0045366C 0404                    add al, 04
:0045366E 0404                    add al, 04
:00453670 0404                    add al, 04
:00453672 0404                    add al, 04
:00453674 0404                    add al, 04
:00453676 0404                    add al, 04
:00453678 0404                    add al, 04
:0045367A 0404                    add al, 04
:0045367C 0404                    add al, 04
:0045367E 0404                    add al, 04
:00453680 0404                    add al, 04
:00453682 0404                    add al, 04
:00453684 0404                    add al, 04
:00453686 0404                    add al, 04
:00453688 0404                    add al, 04
:0045368A 0404                    add al, 04
:0045368C 0404                    add al, 04
:0045368E 0404                    add al, 04
:00453690 0404                    add al, 04
:00453692 0404                    add al, 04
:00453694 0404                    add al, 04
:00453696 0404                    add al, 04
:00453698 0404                    add al, 04
:0045369A 0404                    add al, 04
:0045369C 0404                    add al, 04
:0045369E 0404                    add al, 04
:004536A0 0404                    add al, 04
:004536A2 0404                    add al, 04
:004536A4 0404                    add al, 04
:004536A6 0404                    add al, 04
:004536A8 0404                    add al, 04
:004536AA 0404                    add al, 04
:004536AC 0404                    add al, 04
:004536AE 0404                    add al, 04
:004536B0 0404                    add al, 04
:004536B2 0404                    add al, 04
:004536B4 0404                    add al, 04
:004536B6 0404                    add al, 04
:004536B8 0404                    add al, 04
:004536BA 0404                    add al, 04
:004536BC 0404                    add al, 04
:004536BE 0404                    add al, 04
:004536C0 0404                    add al, 04
:004536C2 0404                    add al, 04
:004536C4 0404                    add al, 04
:004536C6 0404                    add al, 04
:004536C8 0404                    add al, 04
:004536CA 0404                    add al, 04
:004536CC 0404                    add al, 04
:004536CE 0404                    add al, 04
:004536D0 0404                    add al, 04
:004536D2 0404                    add al, 04
:004536D4 0404                    add al, 04
:004536D6 0404                    add al, 04
:004536D8 0404                    add al, 04
:004536DA 0404                    add al, 04
:004536DC 0404                    add al, 04
:004536DE 0404                    add al, 04
:004536E0 0404                    add al, 04
:004536E2 0404                    add al, 04
:004536E4 0404                    add al, 04
:004536E6 0404                    add al, 04
:004536E8 0404                    add al, 04
:004536EA 0404                    add al, 04
:004536EC 0404                    add al, 04
:004536EE 0404                    add al, 04
:004536F0 0404                    add al, 04
:004536F2 0404                    add al, 04
:004536F4 0402                    add al, 02
:004536F6 03                      BYTE 03h


* Referenced by a CALL at Address:
|:004531F4   
|
:004536F7 55                      push ebp
:004536F8 8BEC                    mov ebp, esp
:004536FA 83EC14                  sub esp, 00000014
:004536FD C745FC01000000          mov [ebp-04], 00000001
:00453704 EB09                    jmp 0045370F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004537D7(U)
|
:00453706 8B45FC                  mov eax, dword ptr [ebp-04]
:00453709 83C001                  add eax, 00000001
:0045370C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453704(U)
|
:0045370F 837DFC03                cmp dword ptr [ebp-04], 00000003
:00453713 0F8DC3000000            jnl 004537DC
:00453719 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0045371C 51                      push ecx
:0045371D 8B55FC                  mov edx, dword ptr [ebp-04]
:00453720 6BD214                  imul edx, 00000014
:00453723 8B8250D54700            mov eax, dword ptr [edx+0047D550]
:00453729 50                      push eax
:0045372A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045372D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045372E FF15AC864B00            Call dword ptr [004B86AC]
:00453734 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00453735 FF15C8864B00            Call dword ptr [004B86C8]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045373B 6A09                    push 00000009
:0045373D 6A00                    push 00000000
:0045373F 6A00                    push 00000000
:00453741 8B55FC                  mov edx, dword ptr [ebp-04]
:00453744 6BD214                  imul edx, 00000014
:00453747 8B8258D54700            mov eax, dword ptr [edx+0047D558]
:0045374D 0FAF4510                imul eax, dword ptr [ebp+10]
:00453751 99                      cdq
:00453752 F73D60D54700            idiv dword ptr [0047D560]
:00453758 8BC8                    mov ecx, eax
:0045375A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045375D 6BD214                  imul edx, 00000014
:00453760 8B8260D54700            mov eax, dword ptr [edx+0047D560]
:00453766 0FAF4510                imul eax, dword ptr [ebp+10]
:0045376A 99                      cdq
:0045376B F73D60D54700            idiv dword ptr [0047D560]
:00453771 2B45F8                  sub eax, dword ptr [ebp-08]
:00453774 99                      cdq
:00453775 2BC2                    sub eax, edx
:00453777 D1F8                    sar eax, 1
:00453779 03C8                    add ecx, eax
:0045377B 51                      push ecx
:0045377C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045377F 6BC014                  imul eax, 00000014
:00453782 8B8054D54700            mov eax, dword ptr [eax+0047D554]
:00453788 0FAF450C                imul eax, dword ptr [ebp+0C]
:0045378C 99                      cdq
:0045378D F73D5CD54700            idiv dword ptr [0047D55C]
:00453793 8BC8                    mov ecx, eax
:00453795 8B55FC                  mov edx, dword ptr [ebp-04]
:00453798 6BD214                  imul edx, 00000014
:0045379B 8B825CD54700            mov eax, dword ptr [edx+0047D55C]
:004537A1 0FAF450C                imul eax, dword ptr [ebp+0C]
:004537A5 99                      cdq
:004537A6 F73D5CD54700            idiv dword ptr [0047D55C]
:004537AC 2B45F4                  sub eax, dword ptr [ebp-0C]
:004537AF 99                      cdq
:004537B0 2BC2                    sub eax, edx
:004537B2 D1F8                    sar eax, 1
:004537B4 03C8                    add ecx, eax
:004537B6 51                      push ecx
:004537B7 6A00                    push 00000000
:004537B9 8B45FC                  mov eax, dword ptr [ebp-04]
:004537BC 6BC014                  imul eax, 00000014
:004537BF 8B8850D54700            mov ecx, dword ptr [eax+0047D550]
:004537C5 51                      push ecx
:004537C6 8B5508                  mov edx, dword ptr [ebp+08]
:004537C9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004537CA FF15AC864B00            Call dword ptr [004B86AC]
:004537D0 50                      push eax

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:004537D1 FF15AC874B00            Call dword ptr [004B87AC]
:004537D7 E92AFFFFFF              jmp 00453706

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453713(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004537DC C745FC03000000          mov [ebp-04], 00000003
:004537E3 EB09                    jmp 004537EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453878(U)
|
:004537E5 8B45FC                  mov eax, dword ptr [ebp-04]
:004537E8 83C001                  add eax, 00000001
:004537EB 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004537E3(U)
|
:004537EE 837DFC12                cmp dword ptr [ebp-04], 00000012
:004537F2 0F8385000000            jnb 0045387D
:004537F8 6A00                    push 00000000
:004537FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004537FD 6BC914                  imul ecx, 00000014
:00453800 8B8160D54700            mov eax, dword ptr [ecx+0047D560]
:00453806 0FAF4510                imul eax, dword ptr [ebp+10]
:0045380A 99                      cdq
:0045380B F73D60D54700            idiv dword ptr [0047D560]
:00453811 50                      push eax
:00453812 8B55FC                  mov edx, dword ptr [ebp-04]
:00453815 6BD214                  imul edx, 00000014
:00453818 8B825CD54700            mov eax, dword ptr [edx+0047D55C]
:0045381E 0FAF450C                imul eax, dword ptr [ebp+0C]
:00453822 99                      cdq
:00453823 F73D5CD54700            idiv dword ptr [0047D55C]
:00453829 50                      push eax
:0045382A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045382D 6BC014                  imul eax, 00000014
:00453830 8B8058D54700            mov eax, dword ptr [eax+0047D558]
:00453836 0FAF4510                imul eax, dword ptr [ebp+10]
:0045383A 99                      cdq
:0045383B F73D60D54700            idiv dword ptr [0047D560]
:00453841 50                      push eax
:00453842 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00453845 6BC914                  imul ecx, 00000014
:00453848 8B8154D54700            mov eax, dword ptr [ecx+0047D554]
:0045384E 0FAF450C                imul eax, dword ptr [ebp+0C]
:00453852 99                      cdq
:00453853 F73D5CD54700            idiv dword ptr [0047D55C]
:00453859 50                      push eax
:0045385A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045385D 6BD214                  imul edx, 00000014
:00453860 8B8250D54700            mov eax, dword ptr [edx+0047D550]
:00453866 50                      push eax
:00453867 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045386A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045386B FF15AC864B00            Call dword ptr [004B86AC]
:00453871 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00453872 FF15FC864B00            Call dword ptr [004B86FC]
:00453878 E968FFFFFF              jmp 004537E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004537F2(C)
|
:0045387D 6801010000              push 00000101
:00453882 6A00                    push 00000000
:00453884 6A00                    push 00000000
:00453886 8B5508                  mov edx, dword ptr [ebp+08]
:00453889 52                      push edx

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0045388A FF1590874B00            Call dword ptr [004B8790]
:00453890 8BE5                    mov esp, ebp
:00453892 5D                      pop ebp
:00453893 C3                      ret



* Referenced by a CALL at Addresses:
|:004535D8   , :00454222   
|
:00453894 55                      push ebp
:00453895 8BEC                    mov ebp, esp
:00453897 8B4508                  mov eax, dword ptr [ebp+08]
:0045389A 25FF000000              and eax, 000000FF
:0045389F 85C0                    test eax, eax
:004538A1 7C20                    jl 004538C3
:004538A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004538A6 81E1FF000000            and ecx, 000000FF
:004538AC 83F903                  cmp ecx, 00000003
:004538AF 7F12                    jg 004538C3
:004538B1 8B5508                  mov edx, dword ptr [ebp+08]
:004538B4 81E2FF000000            and edx, 000000FF
:004538BA 8B0495C0D64700          mov eax, dword ptr [4*edx+0047D6C0]
:004538C1 EB02                    jmp 004538C5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004538A1(C), :004538AF(C)
|
:004538C3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004538C1(U)
|
:004538C5 5D                      pop ebp
:004538C6 C3                      ret



* Referenced by a CALL at Address:
|:00453167   
|
:004538C7 55                      push ebp
:004538C8 8BEC                    mov ebp, esp
:004538CA 83EC10                  sub esp, 00000010

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004538CD 6A04                    push 00000004
:004538CF B9C8E24A00              mov ecx, 004AE2C8
:004538D4 E8C7C6FCFF              call 0041FFA0
:004538D9 85C0                    test eax, eax
:004538DB 743B                    je 00453918
:004538DD 6A00                    push 00000000
:004538DF 6A01                    push 00000001
:004538E1 68F1000000              push 000000F1
:004538E6 6811050000              push 00000511
:004538EB 8B4508                  mov eax, dword ptr [ebp+08]
:004538EE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004538EF FF15AC864B00            Call dword ptr [004B86AC]
:004538F5 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004538F6 FF15D8864B00            Call dword ptr [004B86D8]
:004538FC 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050C, ""
                                  |
:004538FE 680C050000              push 0000050C
:00453903 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453906 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453907 FF15AC864B00            Call dword ptr [004B86AC]
:0045390D 50                      push eax
:0045390E E82938FCFF              call 0041713C
:00453913 83C408                  add esp, 00000008
:00453916 EB39                    jmp 00453951

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004538DB(C)
|
:00453918 6A00                    push 00000000
:0045391A 6A01                    push 00000001
:0045391C 68F1000000              push 000000F1
:00453921 6812050000              push 00000512
:00453926 8B5508                  mov edx, dword ptr [ebp+08]
:00453929 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045392A FF15AC864B00            Call dword ptr [004B86AC]
:00453930 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453931 FF15D8864B00            Call dword ptr [004B86D8]
:00453937 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050C, ""
                                  |
:00453939 680C050000              push 0000050C
:0045393E 8B4508                  mov eax, dword ptr [ebp+08]
:00453941 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453942 FF15AC864B00            Call dword ptr [004B86AC]
:00453948 50                      push eax
:00453949 E8EE37FCFF              call 0041713C
:0045394E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453916(U)
|
:00453951 6A00                    push 00000000
:00453953 6A30                    push 00000030
:00453955 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00453958 51                      push ecx
:00453959 8D55F8                  lea edx, dword ptr [ebp-08]
:0045395C 52                      push edx
:0045395D 8B4508                  mov eax, dword ptr [ebp+08]
:00453960 50                      push eax
:00453961 E8BCC4FCFF              call 0041FE22
:00453966 83C414                  add esp, 00000014
:00453969 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045396C 51                      push ecx
:0045396D 8B55F8                  mov edx, dword ptr [ebp-08]
:00453970 52                      push edx
:00453971 E890000000              call 00453A06
:00453976 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050C, ""
                                  |
:00453979 680C050000              push 0000050C
:0045397E 8B4508                  mov eax, dword ptr [ebp+08]
:00453981 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453982 FF15AC864B00            Call dword ptr [004B86AC]
:00453988 8945F4                  mov dword ptr [ebp-0C], eax
:0045398B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045398E 51                      push ecx
:0045398F 8B55F8                  mov edx, dword ptr [ebp-08]
:00453992 52                      push edx
:00453993 8B45F4                  mov eax, dword ptr [ebp-0C]
:00453996 50                      push eax
:00453997 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045399A 51                      push ecx
:0045399B E860010000              call 00453B00
:004539A0 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004539A3 68FF000000              push 000000FF
:004539A8 B9D8094B00              mov ecx, 004B09D8
:004539AD E86E0C0000              call 00454620
:004539B2 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004539B6 7410                    je 004539C8
:004539B8 8B550C                  mov edx, dword ptr [ebp+0C]
:004539BB 52                      push edx
:004539BC 8B4508                  mov eax, dword ptr [ebp+08]
:004539BF 50                      push eax
:004539C0 E82A030000              call 00453CEF
:004539C5 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004539B6(C)
|
:004539C8 B9D8094B00              mov ecx, 004B09D8
:004539CD E8FEBCFDFF              call 0042F6D0
:004539D2 8945F0                  mov dword ptr [ebp-10], eax
:004539D5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004539D8 833900                  cmp dword ptr [ecx], 00000000
:004539DB 7525                    jne 00453A02

* Possible StringData Ref from Data Obj ->"SiHܪoN"
                                  |
:004539DD 68F0D64700              push 0047D6F0
:004539E2 8B5508                  mov edx, dword ptr [ebp+08]
:004539E5 52                      push edx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004539E6 FF15B0864B00            Call dword ptr [004B86B0]
:004539EC 6800000002              push 02000000
:004539F1 6A00                    push 00000000
:004539F3 6801100000              push 00001001
:004539F8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004539FB 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004539FC FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004539DB(C)
|
:00453A02 8BE5                    mov esp, ebp
:00453A04 5D                      pop ebp
:00453A05 C3                      ret



* Referenced by a CALL at Address:
|:00453971   
|
:00453A06 55                      push ebp
:00453A07 8BEC                    mov ebp, esp
:00453A09 83EC14                  sub esp, 00000014
:00453A0C B9D8094B00              mov ecx, 004B09D8
:00453A11 E8BAC5FCFF              call 0041FFD0
:00453A16 8945F8                  mov dword ptr [ebp-08], eax
:00453A19 C745EC00000000          mov [ebp-14], 00000000
:00453A20 EB09                    jmp 00453A2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453A9C(U)
|
:00453A22 8B45EC                  mov eax, dword ptr [ebp-14]
:00453A25 83C001                  add eax, 00000001
:00453A28 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453A20(U)
|
:00453A2B B9D8094B00              mov ecx, 004B09D8
:00453A30 E8C7090000              call 004543FC
:00453A35 3945EC                  cmp dword ptr [ebp-14], eax
:00453A38 7D64                    jge 00453A9E
:00453A3A B9D8094B00              mov ecx, 004B09D8
:00453A3F E81C0C0000              call 00454660
:00453A44 8945F4                  mov dword ptr [ebp-0C], eax
:00453A47 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00453A4A 034DEC                  add ecx, dword ptr [ebp-14]
:00453A4D 33D2                    xor edx, edx
:00453A4F 8A11                    mov dl, byte ptr [ecx]
:00453A51 8BCA                    mov ecx, edx
:00453A53 6BC911                  imul ecx, 00000011
:00453A56 81C180DF4A00            add ecx, 004ADF80
:00453A5C E81F0C0000              call 00454680
:00453A61 25FF000000              and eax, 000000FF
:00453A66 83C064                  add eax, 00000064
:00453A69 25FFFF0000              and eax, 0000FFFF
:00453A6E 50                      push eax
:00453A6F 8B45F8                  mov eax, dword ptr [ebp-08]
:00453A72 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00453A73 FF15E8864B00            Call dword ptr [004B86E8]
:00453A79 8945FC                  mov dword ptr [ebp-04], eax
:00453A7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00453A7F 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453A80 6AFF                    push FFFFFFFF
:00453A82 8B5508                  mov edx, dword ptr [ebp+08]
:00453A85 52                      push edx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00453A86 FF1574844B00            Call dword ptr [004B8474]
:00453A8C 8B45FC                  mov eax, dword ptr [ebp-04]
:00453A8F 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453A90 6AFF                    push FFFFFFFF
:00453A92 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453A95 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00453A96 FF1574844B00            Call dword ptr [004B8474]
:00453A9C EB84                    jmp 00453A22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453A38(C)
|
:00453A9E B9D8094B00              mov ecx, 004B09D8
:00453AA3 E8D8F3FFFF              call 00452E80
:00453AA8 8945F0                  mov dword ptr [ebp-10], eax
:00453AAB C745EC00000000          mov [ebp-14], 00000000
:00453AB2 EB09                    jmp 00453ABD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453AFA(U)
|
:00453AB4 8B55EC                  mov edx, dword ptr [ebp-14]
:00453AB7 83C201                  add edx, 00000001
:00453ABA 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453AB2(U)
|
:00453ABD B9D8094B00              mov ecx, 004B09D8
:00453AC2 E835090000              call 004543FC
:00453AC7 3945EC                  cmp dword ptr [ebp-14], eax
:00453ACA 7D30                    jge 00453AFC
:00453ACC 8B45F0                  mov eax, dword ptr [ebp-10]
:00453ACF 0345EC                  add eax, dword ptr [ebp-14]
:00453AD2 33C9                    xor ecx, ecx
:00453AD4 8A08                    mov cl, byte ptr [eax]
:00453AD6 85C9                    test ecx, ecx
:00453AD8 7520                    jne 00453AFA
:00453ADA 8B5508                  mov edx, dword ptr [ebp+08]
:00453ADD 52                      push edx
:00453ADE 8B45EC                  mov eax, dword ptr [ebp-14]
:00453AE1 50                      push eax
:00453AE2 E8C4A30000              call 0045DEAB
:00453AE7 83C408                  add esp, 00000008
:00453AEA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453AED 51                      push ecx
:00453AEE 8B55EC                  mov edx, dword ptr [ebp-14]
:00453AF1 52                      push edx
:00453AF2 E8B4A30000              call 0045DEAB
:00453AF7 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453AD8(C)
|
:00453AFA EBB8                    jmp 00453AB4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453ACA(C)
|
:00453AFC 8BE5                    mov esp, ebp
:00453AFE 5D                      pop ebp
:00453AFF C3                      ret



* Referenced by a CALL at Address:
|:0045399B   
|
:00453B00 55                      push ebp
:00453B01 8BEC                    mov ebp, esp
:00453B03 8B450C                  mov eax, dword ptr [ebp+0C]
:00453B06 50                      push eax
:00453B07 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453B0A 51                      push ecx
:00453B0B E86B000000              call 00453B7B
:00453B10 83C408                  add esp, 00000008
:00453B13 8B5510                  mov edx, dword ptr [ebp+10]
:00453B16 52                      push edx
:00453B17 6A01                    push 00000001
:00453B19 6803100000              push 00001003
:00453B1E 8B450C                  mov eax, dword ptr [ebp+0C]
:00453B21 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453B22 FF15D8864B00            Call dword ptr [004B86D8]
:00453B28 8B4D14                  mov ecx, dword ptr [ebp+14]
:00453B2B 51                      push ecx
:00453B2C 6A00                    push 00000000
:00453B2E 6803100000              push 00001003
:00453B33 8B550C                  mov edx, dword ptr [ebp+0C]
:00453B36 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453B37 FF15D8864B00            Call dword ptr [004B86D8]
:00453B3D 8B450C                  mov eax, dword ptr [ebp+0C]
:00453B40 50                      push eax
:00453B41 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453B44 51                      push ecx
:00453B45 E8F5000000              call 00453C3F
:00453B4A 83C408                  add esp, 00000008
:00453B4D 68BDBDBD02              push 02BDBDBD
:00453B52 6A00                    push 00000000
:00453B54 6801100000              push 00001001
:00453B59 8B550C                  mov edx, dword ptr [ebp+0C]
:00453B5C 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453B5D FF15D8864B00            Call dword ptr [004B86D8]
:00453B63 68BDBDBD02              push 02BDBDBD
:00453B68 6A00                    push 00000000
:00453B6A 6826100000              push 00001026
:00453B6F 8B450C                  mov eax, dword ptr [ebp+0C]
:00453B72 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453B73 FF15D8864B00            Call dword ptr [004B86D8]
:00453B79 5D                      pop ebp
:00453B7A C3                      ret



* Referenced by a CALL at Address:
|:00453B0B   
|
:00453B7B 55                      push ebp
:00453B7C 8BEC                    mov ebp, esp
:00453B7E 83EC44                  sub esp, 00000044
:00453B81 6A20                    push 00000020
:00453B83 6A00                    push 00000000
:00453B85 8D45C0                  lea eax, dword ptr [ebp-40]
:00453B88 50                      push eax
:00453B89 E8D29D0100              call 0046D960
:00453B8E 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00015: ""
                                  |
:00453B91 C745C00F000000          mov [ebp-40], 0000000F
:00453B98 C745C400000000          mov [ebp-3C], 00000000
:00453B9F C745D020000000          mov [ebp-30], 00000020

* Possible StringData Ref from Data Obj ->"oNަW"
                                  |
:00453BA6 C745F008D74700          mov [ebp-10], 0047D708

* Possible StringData Ref from Data Obj ->"MPӶq"
                                  |
:00453BAD C745F414D74700          mov [ebp-0C], 0047D714

* Possible StringData Ref from Data Obj ->"n_"
                                  |
:00453BB4 C745F820D74700          mov [ebp-08], 0047D720

* Possible StringData Ref from Data Obj ->"H"
                                  |
:00453BBB C745FC2CD74700          mov [ebp-04], 0047D72C

* Possible StringData Ref from Data Obj ->"oNަW"
                                  |
:00453BC2 C745E034D74700          mov [ebp-20], 0047D734

* Possible StringData Ref from Data Obj ->"MPӶq"
                                  |
:00453BC9 C745E444D74700          mov [ebp-1C], 0047D744

* Possible StringData Ref from Data Obj ->"n_"
                                  |
:00453BD0 C745E854D74700          mov [ebp-18], 0047D754

* Possible StringData Ref from Data Obj ->"H"
                                  |
:00453BD7 C745EC64D74700          mov [ebp-14], 0047D764
:00453BDE C745BC00000000          mov [ebp-44], 00000000
:00453BE5 EB09                    jmp 00453BF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C39(U)
|
:00453BE7 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00453BEA 83C101                  add ecx, 00000001
:00453BED 894DBC                  mov dword ptr [ebp-44], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453BE5(U)
|
:00453BF0 837DBC04                cmp dword ptr [ebp-44], 00000004
:00453BF4 7D45                    jge 00453C3B
:00453BF6 8B55BC                  mov edx, dword ptr [ebp-44]
:00453BF9 8B4495E0                mov eax, dword ptr [ebp+4*edx-20]
:00453BFD 50                      push eax
:00453BFE 6A00                    push 00000000
:00453C00 6811100000              push 00001011
:00453C05 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453C08 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453C09 FF15D8864B00            Call dword ptr [004B86D8]
:00453C0F 8945C8                  mov dword ptr [ebp-38], eax
:00453C12 8B55BC                  mov edx, dword ptr [ebp-44]
:00453C15 8B4495F0                mov eax, dword ptr [ebp+4*edx-10]
:00453C19 8945CC                  mov dword ptr [ebp-34], eax
:00453C1C 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00453C1F 894DD4                  mov dword ptr [ebp-2C], ecx
:00453C22 8D55C0                  lea edx, dword ptr [ebp-40]
:00453C25 52                      push edx
:00453C26 8B45BC                  mov eax, dword ptr [ebp-44]
:00453C29 50                      push eax
:00453C2A 681B100000              push 0000101B
:00453C2F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453C32 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453C33 FF15D8864B00            Call dword ptr [004B86D8]
:00453C39 EBAC                    jmp 00453BE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453BF4(C)
|
:00453C3B 8BE5                    mov esp, ebp
:00453C3D 5D                      pop ebp
:00453C3E C3                      ret



* Referenced by a CALL at Address:
|:00453B45   
|
:00453C3F 55                      push ebp
:00453C40 8BEC                    mov ebp, esp
:00453C42 83EC30                  sub esp, 00000030
:00453C45 6A28                    push 00000028
:00453C47 6A00                    push 00000000
:00453C49 8D45D4                  lea eax, dword ptr [ebp-2C]
:00453C4C 50                      push eax
:00453C4D E80E9D0100              call 0046D960
:00453C52 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00015: ""
                                  |
:00453C55 C745D40F000000          mov [ebp-2C], 0000000F
:00453C5C C745E000000000          mov [ebp-20], 00000000
:00453C63 C745E400000000          mov [ebp-1C], 00000000
:00453C6A C745DC00000000          mov [ebp-24], 00000000
:00453C71 C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:00453C78 C745EC20000000          mov [ebp-14], 00000020
:00453C7F C745D000000000          mov [ebp-30], 00000000
:00453C86 EB09                    jmp 00453C91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453CE9(U)
|
:00453C88 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00453C8B 83C101                  add ecx, 00000001
:00453C8E 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C86(U)
|
:00453C91 B9D8094B00              mov ecx, 004B09D8
:00453C96 E861070000              call 004543FC
:00453C9B 3945D0                  cmp dword ptr [ebp-30], eax
:00453C9E 7D4B                    jge 00453CEB
:00453CA0 8B55D0                  mov edx, dword ptr [ebp-30]
:00453CA3 8955D8                  mov dword ptr [ebp-28], edx
:00453CA6 B9D8094B00              mov ecx, 004B09D8
:00453CAB E8B0090000              call 00454660
:00453CB0 8945FC                  mov dword ptr [ebp-04], eax
:00453CB3 8B45FC                  mov eax, dword ptr [ebp-04]
:00453CB6 0345D0                  add eax, dword ptr [ebp-30]
:00453CB9 33C9                    xor ecx, ecx
:00453CBB 8A08                    mov cl, byte ptr [eax]
:00453CBD 8B55D0                  mov edx, dword ptr [ebp-30]
:00453CC0 81E2FFFF0000            and edx, 0000FFFF
:00453CC6 C1E210                  shl edx, 10
:00453CC9 0BCA                    or ecx, edx
:00453CCB 894DF4                  mov dword ptr [ebp-0C], ecx
:00453CCE 8B45D0                  mov eax, dword ptr [ebp-30]
:00453CD1 8945F0                  mov dword ptr [ebp-10], eax
:00453CD4 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00453CD7 51                      push ecx
:00453CD8 6A00                    push 00000000
:00453CDA 6807100000              push 00001007
:00453CDF 8B550C                  mov edx, dword ptr [ebp+0C]
:00453CE2 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453CE3 FF15D8864B00            Call dword ptr [004B86D8]
:00453CE9 EB9D                    jmp 00453C88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C9E(C)
|
:00453CEB 8BE5                    mov esp, ebp
:00453CED 5D                      pop ebp
:00453CEE C3                      ret



* Referenced by a CALL at Address:
|:004539C0   
|
:00453CEF 55                      push ebp
:00453CF0 8BEC                    mov ebp, esp
:00453CF2 83EC08                  sub esp, 00000008
:00453CF5 C745FC00000000          mov [ebp-04], 00000000
:00453CFC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453CFF E846150100              call 0046524A
:00453D04 8845F8                  mov byte ptr [ebp-08], al
:00453D07 8B45F8                  mov eax, dword ptr [ebp-08]
:00453D0A 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453D0F 3DFF000000              cmp eax, 000000FF
:00453D14 741C                    je 00453D32
:00453D16 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00453D19 81E1FF000000            and ecx, 000000FF
:00453D1F 6BC924                  imul ecx, 00000024
:00453D22 81C108F54A00            add ecx, 004AF508
:00453D28 E8830BFBFF              call 004048B0
:00453D2D 8945FC                  mov dword ptr [ebp-04], eax
:00453D30 EB07                    jmp 00453D39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453D14(C)
|
:00453D32 C745FC64000000          mov [ebp-04], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453D30(U)
|
:00453D39 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453D3C E8D0E7FAFF              call 00402511
:00453D41 50                      push eax
:00453D42 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00453D45 51                      push ecx

* Possible StringData Ref from Data Obj ->"ޯ %u/%u"
                                  |
:00453D46 6870D74700              push 0047D770

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:05C5, "fh4
"
                                  |
:00453D4B 68C5050000              push 000005C5
:00453D50 8B5508                  mov edx, dword ptr [ebp+08]
:00453D53 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453D54 FF15AC864B00            Call dword ptr [004B86AC]
:00453D5A 50                      push eax
:00453D5B E8AAFA0000              call 0046380A
:00453D60 83C410                  add esp, 00000010
:00453D63 6800006400              push 00640000
:00453D68 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00453D6A 6801040000              push 00000401
:00453D6F 6808040000              push 00000408
:00453D74 8B4508                  mov eax, dword ptr [ebp+08]
:00453D77 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00453D78 FF15B4864B00            Call dword ptr [004B86B4]
:00453D7E 6A00                    push 00000000
:00453D80 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:00453D82 6802040000              push 00000402
:00453D87 6808040000              push 00000408
:00453D8C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453D8F 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00453D90 FF15B4864B00            Call dword ptr [004B86B4]
:00453D96 68100A4B00              push 004B0A10

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:00453D9B 68FF030000              push 000003FF
:00453DA0 8B5508                  mov edx, dword ptr [ebp+08]
:00453DA3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453DA4 FF15AC864B00            Call dword ptr [004B86AC]
:00453DAA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00453DAB FF15B0864B00            Call dword ptr [004B86B0]
:00453DB1 68E9030000              push 000003E9
:00453DB6 8B4508                  mov eax, dword ptr [ebp+08]
:00453DB9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453DBA FF15AC864B00            Call dword ptr [004B86AC]
:00453DC0 50                      push eax
:00453DC1 E81F000000              call 00453DE5
:00453DC6 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00453DC9 68EA030000              push 000003EA
:00453DCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453DD1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453DD2 FF15AC864B00            Call dword ptr [004B86AC]
:00453DD8 50                      push eax
:00453DD9 E807000000              call 00453DE5
:00453DDE 83C404                  add esp, 00000004
:00453DE1 8BE5                    mov esp, ebp
:00453DE3 5D                      pop ebp
:00453DE4 C3                      ret



* Referenced by a CALL at Addresses:
|:00453DC1   , :00453DD9   
|
:00453DE5 55                      push ebp
:00453DE6 8BEC                    mov ebp, esp
:00453DE8 51                      push ecx
:00453DE9 8B4508                  mov eax, dword ptr [ebp+08]
:00453DEC 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00453DED FF15B8864B00            Call dword ptr [004B86B8]
:00453DF3 8945FC                  mov dword ptr [ebp-04], eax
:00453DF6 6A00                    push 00000000
:00453DF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00453DFB 51                      push ecx

* Possible Reference to String Resource ID=00015: ""
                                  |
:00453DFC 6A0F                    push 0000000F
:00453DFE 8B5508                  mov edx, dword ptr [ebp+08]
:00453E01 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00453E02 FF15D8864B00            Call dword ptr [004B86D8]
:00453E08 8B45FC                  mov eax, dword ptr [ebp-04]
:00453E0B 50                      push eax
:00453E0C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453E0F 51                      push ecx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00453E10 FF15BC864B00            Call dword ptr [004B86BC]
:00453E16 8BE5                    mov esp, ebp
:00453E18 5D                      pop ebp
:00453E19 C3                      ret



* Referenced by a CALL at Address:
|:0045322F   
|
:00453E1A 55                      push ebp
:00453E1B 8BEC                    mov ebp, esp
:00453E1D 51                      push ecx
:00453E1E 8B4510                  mov eax, dword ptr [ebp+10]
:00453E21 25FFFF0000              and eax, 0000FFFF
:00453E26 8945FC                  mov dword ptr [ebp-04], eax
:00453E29 817DFCA9040000          cmp dword ptr [ebp-04], 000004A9
:00453E30 7F1E                    jg 00453E50
:00453E32 817DFCA9040000          cmp dword ptr [ebp-04], 000004A9
:00453E39 0F84DA000000            je 00453F19
:00453E3F 837DFC01                cmp dword ptr [ebp-04], 00000001
:00453E43 7422                    je 00453E67
:00453E45 837DFC02                cmp dword ptr [ebp-04], 00000002
:00453E49 743B                    je 00453E86
:00453E4B E9D6000000              jmp 00453F26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E30(C)
|
:00453E50 817DFC11050000          cmp dword ptr [ebp-04], 00000511
:00453E57 7441                    je 00453E9A
:00453E59 817DFC12050000          cmp dword ptr [ebp-04], 00000512
:00453E60 7477                    je 00453ED9
:00453E62 E9BF000000              jmp 00453F26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E43(C)
|
:00453E67 B9D8094B00              mov ecx, 004B09D8
:00453E6C E80F080000              call 00454680
:00453E71 25FF000000              and eax, 000000FF
:00453E76 50                      push eax
:00453E77 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453E7A 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00453E7B FF15B0874B00            Call dword ptr [004B87B0]
:00453E81 E9A0000000              jmp 00453F26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E49(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453E86 68FF000000              push 000000FF
:00453E8B 8B5508                  mov edx, dword ptr [ebp+08]
:00453E8E 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00453E8F FF15B0874B00            Call dword ptr [004B87B0]
:00453E95 E98C000000              jmp 00453F26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E57(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00453E9A 6A04                    push 00000004
:00453E9C B9C8E24A00              mov ecx, 004AE2C8
:00453EA1 E8FAC0FCFF              call 0041FFA0
:00453EA6 85C0                    test eax, eax
:00453EA8 7528                    jne 00453ED2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00453EAA 6A04                    push 00000004
:00453EAC 6A01                    push 00000001
:00453EAE B9C8E24A00              mov ecx, 004AE2C8
:00453EB3 E8B8C1FCFF              call 00420070
:00453EB8 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050C, ""
                                  |
:00453EBA 680C050000              push 0000050C
:00453EBF 8B4508                  mov eax, dword ptr [ebp+08]
:00453EC2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453EC3 FF15AC864B00            Call dword ptr [004B86AC]
:00453EC9 50                      push eax
:00453ECA E86D32FCFF              call 0041713C
:00453ECF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453EA8(C)
|
:00453ED2 B801000000              mov eax, 00000001
:00453ED7 EB4F                    jmp 00453F28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E60(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00453ED9 6A04                    push 00000004
:00453EDB B9C8E24A00              mov ecx, 004AE2C8
:00453EE0 E8BBC0FCFF              call 0041FFA0
:00453EE5 83F801                  cmp eax, 00000001
:00453EE8 7528                    jne 00453F12

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00453EEA 6A04                    push 00000004
:00453EEC 6A00                    push 00000000
:00453EEE B9C8E24A00              mov ecx, 004AE2C8
:00453EF3 E878C1FCFF              call 00420070
:00453EF8 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:050C, ""
                                  |
:00453EFA 680C050000              push 0000050C
:00453EFF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453F02 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00453F03 FF15AC864B00            Call dword ptr [004B86AC]
:00453F09 50                      push eax
:00453F0A E82D32FCFF              call 0041713C
:00453F0F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453EE8(C)
|
:00453F12 B801000000              mov eax, 00000001
:00453F17 EB0F                    jmp 00453F28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E39(C)
|
:00453F19 68620C0000              push 00000C62
:00453F1E E83FFA0000              call 00463962
:00453F23 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453E4B(U), :00453E62(U), :00453E81(U), :00453E95(U)
|
:00453F26 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453ED7(U), :00453F17(U)
|
:00453F28 8BE5                    mov esp, ebp
:00453F2A 5D                      pop ebp
:00453F2B C3                      ret



* Referenced by a CALL at Address:
|:0045324B   
|
:00453F2C 55                      push ebp
:00453F2D 8BEC                    mov ebp, esp
:00453F2F 83EC18                  sub esp, 00000018
:00453F32 8B4510                  mov eax, dword ptr [ebp+10]
:00453F35 8945F8                  mov dword ptr [ebp-08], eax
:00453F38 8B4D10                  mov ecx, dword ptr [ebp+10]
:00453F3B 894DFC                  mov dword ptr [ebp-04], ecx
:00453F3E 8B55F8                  mov edx, dword ptr [ebp-08]
:00453F41 8B4208                  mov eax, dword ptr [edx+08]
:00453F44 8945E8                  mov dword ptr [ebp-18], eax
:00453F47 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00453F4A 81C196000000            add ecx, 00000096
:00453F50 894DE8                  mov dword ptr [ebp-18], ecx
:00453F53 817DE894000000          cmp dword ptr [ebp-18], 00000094
:00453F5A 0F8730010000            ja 00454090
:00453F60 8B45E8                  mov eax, dword ptr [ebp-18]
:00453F63 33D2                    xor edx, edx
:00453F65 8A90B6404500            mov dl, byte ptr [eax+004540B6]
:00453F6B FF249596404500          jmp dword ptr [4*edx+00454096]
:00453F72 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00453F75 8179040C050000          cmp dword ptr [ecx+04], 0000050C
:00453F7C 7545                    jne 00453FC3
:00453F7E 8B55F8                  mov edx, dword ptr [ebp-08]
:00453F81 8B02                    mov eax, dword ptr [edx]
:00453F83 50                      push eax
:00453F84 E8ADF0FFFF              call 00453036
:00453F89 83C404                  add esp, 00000004
:00453F8C 8945F4                  mov dword ptr [ebp-0C], eax
:00453F8F 837DF400                cmp dword ptr [ebp-0C], 00000000
:00453F93 7D2E                    jge 00453FC3

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00453F95 68FF000000              push 000000FF
:00453F9A B9D8094B00              mov ecx, 004B09D8
:00453F9F E87C060000              call 00454620
:00453FA4 6A00                    push 00000000
:00453FA6 B9D8094B00              mov ecx, 004B09D8
:00453FAB E85036FFFF              call 00447600
:00453FB0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453FB3 51                      push ecx
:00453FB4 B9D8094B00              mov ecx, 004B09D8
:00453FB9 E8A8030000              call 00454366
:00453FBE E9CD000000              jmp 00454090

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453F7C(C), :00453F93(C)
|
:00453FC3 E9C8000000              jmp 00454090
:00453FC8 8B5510                  mov edx, dword ptr [ebp+10]
:00453FCB 8955F0                  mov dword ptr [ebp-10], edx
:00453FCE 8B45F0                  mov eax, dword ptr [ebp-10]
:00453FD1 8B4814                  mov ecx, dword ptr [eax+14]
:00453FD4 83E102                  and ecx, 00000002
:00453FD7 85C9                    test ecx, ecx
:00453FD9 743C                    je 00454017
:00453FDB 8B55F0                  mov edx, dword ptr [ebp-10]
:00453FDE 8B420C                  mov eax, dword ptr [edx+0C]
:00453FE1 50                      push eax
:00453FE2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453FE5 8B11                    mov edx, dword ptr [ecx]
:00453FE7 52                      push edx
:00453FE8 E88936FCFF              call 00417676
:00453FED 83C408                  add esp, 00000008
:00453FF0 C1E810                  shr eax, 10
:00453FF3 25FFFF0000              and eax, 0000FFFF
:00453FF8 8845EC                  mov byte ptr [ebp-14], al
:00453FFB 8A45EC                  mov al, byte ptr [ebp-14]
:00453FFE 50                      push eax
:00453FFF B9D8094B00              mov ecx, 004B09D8
:00454004 E817060000              call 00454620
:00454009 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045400C 51                      push ecx
:0045400D B9D8094B00              mov ecx, 004B09D8
:00454012 E830040000              call 00454447

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453FD9(C)
|
:00454017 EB77                    jmp 00454090
:00454019 8B55F8                  mov edx, dword ptr [ebp-08]
:0045401C 8B02                    mov eax, dword ptr [edx]
:0045401E 50                      push eax
:0045401F E812F0FFFF              call 00453036
:00454024 83C404                  add esp, 00000004
:00454027 85C0                    test eax, eax
:00454029 7D02                    jge 0045402D
:0045402B EB63                    jmp 00454090

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454029(C)
|
:0045402D B9D8094B00              mov ecx, 004B09D8
:00454032 E849060000              call 00454680
:00454037 25FF000000              and eax, 000000FF
:0045403C 50                      push eax
:0045403D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454040 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00454041 FF15B0874B00            Call dword ptr [004B87B0]
:00454047 EB47                    jmp 00454090
:00454049 8B5510                  mov edx, dword ptr [ebp+10]
:0045404C 52                      push edx
:0045404D E8F9000000              call 0045414B
:00454052 83C404                  add esp, 00000004
:00454055 EB39                    jmp 00454090
:00454057 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00454059 6AFF                    push FFFFFFFF
:0045405B 6817100000              push 00001017
:00454060 8B45FC                  mov eax, dword ptr [ebp-04]
:00454063 8B08                    mov ecx, dword ptr [eax]
:00454065 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00454066 FF15D8864B00            Call dword ptr [004B86D8]
:0045406C B801000000              mov eax, 00000001
:00454071 EB1F                    jmp 00454092

* Possible StringData Ref from Code Obj ->"USE%"
                                  |
:00454073 6849424500              push 00454249
:00454078 8B55FC                  mov edx, dword ptr [ebp-04]
:0045407B 8B4210                  mov eax, dword ptr [edx+10]
:0045407E 50                      push eax
:0045407F 6830100000              push 00001030
:00454084 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454087 8B11                    mov edx, dword ptr [ecx]
:00454089 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045408A FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453F5A(C), :00453FBE(U), :00453FC3(U), :00454017(U), :0045402B(U)
|:00454047(U), :00454055(U)
|
:00454090 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454071(U)
|
:00454092 8BE5                    mov esp, ebp
:00454094 5D                      pop ebp
:00454095 C3                      ret



:00454096 49404500                DWORD 00454049
:0045409A 73404500                DWORD 00454073
:0045409E 57404500                DWORD 00454057
:004540A2 C83F4500                DWORD 00453FC8
:004540A6 723F4500                DWORD 00453F72
:004540AA 19404500                DWORD 00454019
:004540AE 723F4500                DWORD 00453F72
:004540B2 90404500                DWORD 00454090


:004540B6 0007                    add byte ptr [edi], al
:004540B8 07                      pop es
:004540B9 07                      pop es
:004540BA 07                      pop es
:004540BB 07                      pop es
:004540BC 07                      pop es
:004540BD 07                      pop es
:004540BE 07                      pop es
:004540BF 07                      pop es
:004540C0 07                      pop es
:004540C1 07                      pop es
:004540C2 07                      pop es
:004540C3 07                      pop es
:004540C4 07                      pop es
:004540C5 07                      pop es
:004540C6 07                      pop es
:004540C7 07                      pop es
:004540C8 07                      pop es
:004540C9 07                      pop es
:004540CA 07                      pop es
:004540CB 07                      pop es
:004540CC 07                      pop es
:004540CD 07                      pop es
:004540CE 07                      pop es
:004540CF 07                      pop es
:004540D0 07                      pop es
:004540D1 07                      pop es
:004540D2 07                      pop es
:004540D3 07                      pop es
:004540D4 07                      pop es
:004540D5 07                      pop es
:004540D6 07                      pop es
:004540D7 07                      pop es
:004540D8 07                      pop es
:004540D9 07                      pop es
:004540DA 07                      pop es
:004540DB 07                      pop es
:004540DC 07                      pop es
:004540DD 07                      pop es
:004540DE 07                      pop es
:004540DF 07                      pop es
:004540E0 0107                    add dword ptr [edi], eax
:004540E2 07                      pop es
:004540E3 0207                    add al, byte ptr [edi]
:004540E5 07                      pop es
:004540E6 07                      pop es
:004540E7 0307                    add eax, dword ptr [edi]
:004540E9 07                      pop es
:004540EA 07                      pop es
:004540EB 07                      pop es
:004540EC 07                      pop es
:004540ED 07                      pop es
:004540EE 07                      pop es
:004540EF 07                      pop es
:004540F0 07                      pop es
:004540F1 07                      pop es
:004540F2 07                      pop es
:004540F3 07                      pop es
:004540F4 07                      pop es
:004540F5 07                      pop es
:004540F6 07                      pop es
:004540F7 07                      pop es
:004540F8 07                      pop es
:004540F9 07                      pop es
:004540FA 07                      pop es
:004540FB 07                      pop es
:004540FC 07                      pop es
:004540FD 07                      pop es
:004540FE 07                      pop es
:004540FF 07                      pop es
:00454100 07                      pop es
:00454101 07                      pop es
:00454102 07                      pop es
:00454103 07                      pop es
:00454104 07                      pop es
:00454105 07                      pop es
:00454106 07                      pop es
:00454107 07                      pop es
:00454108 07                      pop es
:00454109 07                      pop es
:0045410A 07                      pop es
:0045410B 07                      pop es
:0045410C 07                      pop es
:0045410D 07                      pop es
:0045410E 07                      pop es
:0045410F 07                      pop es
:00454110 07                      pop es
:00454111 07                      pop es
:00454112 07                      pop es
:00454113 07                      pop es
:00454114 07                      pop es
:00454115 07                      pop es
:00454116 07                      pop es
:00454117 07                      pop es
:00454118 07                      pop es
:00454119 07                      pop es
:0045411A 07                      pop es
:0045411B 07                      pop es
:0045411C 07                      pop es
:0045411D 07                      pop es
:0045411E 07                      pop es
:0045411F 07                      pop es
:00454120 07                      pop es
:00454121 07                      pop es
:00454122 07                      pop es
:00454123 07                      pop es
:00454124 07                      pop es
:00454125 07                      pop es
:00454126 07                      pop es
:00454127 07                      pop es
:00454128 07                      pop es
:00454129 07                      pop es
:0045412A 07                      pop es
:0045412B 07                      pop es
:0045412C 07                      pop es
:0045412D 07                      pop es
:0045412E 07                      pop es
:0045412F 07                      pop es
:00454130 07                      pop es
:00454131 07                      pop es
:00454132 07                      pop es
:00454133 07                      pop es
:00454134 07                      pop es
:00454135 07                      pop es
:00454136 07                      pop es
:00454137 07                      pop es
:00454138 07                      pop es
:00454139 07                      pop es
:0045413A 07                      pop es
:0045413B 07                      pop es
:0045413C 07                      pop es
:0045413D 07                      pop es
:0045413E 07                      pop es
:0045413F 07                      pop es
:00454140 07                      pop es
:00454141 07                      pop es
:00454142 07                      pop es
:00454143 07                      pop es
:00454144 07                      pop es
:00454145 07                      pop es
:00454146 07                      pop es
:00454147 0407                    add al, 07
:00454149 05                      BYTE 05h
:0045414A 06                      BYTE 06h


* Referenced by a CALL at Address:
|:0045404D   
|
:0045414B 55                      push ebp
:0045414C 8BEC                    mov ebp, esp
:0045414E 83EC08                  sub esp, 00000008
:00454151 8B4508                  mov eax, dword ptr [ebp+08]
:00454154 33C9                    xor ecx, ecx
:00454156 668B482C                mov cx, word ptr [eax+2C]
:0045415A 894DFC                  mov dword ptr [ebp-04], ecx
:0045415D 8B5508                  mov edx, dword ptr [ebp+08]
:00454160 8B4214                  mov eax, dword ptr [edx+14]
:00454163 8945F8                  mov dword ptr [ebp-08], eax
:00454166 837DF803                cmp dword ptr [ebp-08], 00000003
:0045416A 0F87C0000000            ja 00454230
:00454170 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00454173 FF248D39424500          jmp dword ptr [4*ecx+00454239]
:0045417A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045417D 6BC911                  imul ecx, 00000011
:00454180 81C180DF4A00            add ecx, 004ADF80
:00454186 E82536FBFF              call 004077B0
:0045418B 8B5508                  mov edx, dword ptr [ebp+08]
:0045418E 894220                  mov dword ptr [edx+20], eax
:00454191 E99A000000              jmp 00454230
:00454196 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454199 6BC911                  imul ecx, 00000011
:0045419C 81C180DF4A00            add ecx, 004ADF80
:004541A2 E849BBFDFF              call 0042FCF0
:004541A7 25FF000000              and eax, 000000FF
:004541AC 50                      push eax

* Possible StringData Ref from Data Obj ->"%2u"
                                  |
:004541AD 6880D74700              push 0047D780
:004541B2 E81037FCFF              call 004178C7
:004541B7 83C408                  add esp, 00000008
:004541BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004541BD 894120                  mov dword ptr [ecx+20], eax
:004541C0 EB6E                    jmp 00454230
:004541C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004541C5 6BC911                  imul ecx, 00000011
:004541C8 81C180DF4A00            add ecx, 004ADF80
:004541CE E8CDE5FBFF              call 004127A0
:004541D3 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004541D8 3DFF000000              cmp eax, 000000FF
:004541DD 7425                    je 00454204
:004541DF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004541E2 6BC911                  imul ecx, 00000011
:004541E5 81C180DF4A00            add ecx, 004ADF80
:004541EB E8B0E5FBFF              call 004127A0
:004541F0 25FF000000              and eax, 000000FF
:004541F5 8B5508                  mov edx, dword ptr [ebp+08]
:004541F8 8B0485707B4700          mov eax, dword ptr [4*eax+00477B70]
:004541FF 894220                  mov dword ptr [edx+20], eax
:00454202 EB0A                    jmp 0045420E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004541DD(C)
|
:00454204 8B4D08                  mov ecx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"L"
                                  |
:00454207 C7412084D74700          mov [ecx+20], 0047D784

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454202(U)
|
:0045420E EB20                    jmp 00454230
:00454210 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454213 6BC911                  imul ecx, 00000011
:00454216 81C180DF4A00            add ecx, 004ADF80
:0045421C E8AFB6FDFF              call 0042F8D0
:00454221 50                      push eax
:00454222 E86DF6FFFF              call 00453894
:00454227 83C404                  add esp, 00000004
:0045422A 8B5508                  mov edx, dword ptr [ebp+08]
:0045422D 894220                  mov dword ptr [edx+20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045416A(C), :00454191(U), :004541C0(U), :0045420E(U)
|
:00454230 B801000000              mov eax, 00000001
:00454235 8BE5                    mov esp, ebp
:00454237 5D                      pop ebp
:00454238 C3                      ret



:00454239 7A414500                DWORD 0045417A
:0045423D 96414500                DWORD 00454196
:00454241 C2414500                DWORD 004541C2
:00454245 10424500                DWORD 00454210


:00454249 55                      push ebp
:0045424A 8BEC                    mov ebp, esp
:0045424C 83EC10                  sub esp, 00000010
:0045424F 53                      push ebx
:00454250 8B4508                  mov eax, dword ptr [ebp+08]
:00454253 25FFFF0000              and eax, 0000FFFF
:00454258 8945F4                  mov dword ptr [ebp-0C], eax
:0045425B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045425E 81E1FFFF0000            and ecx, 0000FFFF
:00454264 894DF8                  mov dword ptr [ebp-08], ecx
:00454267 837D0800                cmp dword ptr [ebp+08], 00000000
:0045426B 0F84DB000000            je 0045434C
:00454271 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00454275 0F84D1000000            je 0045434C
:0045427B 8B5510                  mov edx, dword ptr [ebp+10]
:0045427E 8955F0                  mov dword ptr [ebp-10], edx
:00454281 837DF003                cmp dword ptr [ebp-10], 00000003
:00454285 0F87BA000000            ja 00454345
:0045428B 8B45F0                  mov eax, dword ptr [ebp-10]
:0045428E FF248556434500          jmp dword ptr [4*eax+00454356]
:00454295 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00454298 2B4DF8                  sub ecx, dword ptr [ebp-08]
:0045429B 894DFC                  mov dword ptr [ebp-04], ecx
:0045429E E9A9000000              jmp 0045434C
:004542A3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004542A6 6BC911                  imul ecx, 00000011
:004542A9 81C180DF4A00            add ecx, 004ADF80
:004542AF E83CBAFDFF              call 0042FCF0
:004542B4 8AD8                    mov bl, al
:004542B6 81E3FF000000            and ebx, 000000FF
:004542BC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004542BF 6BC911                  imul ecx, 00000011
:004542C2 81C180DF4A00            add ecx, 004ADF80
:004542C8 E823BAFDFF              call 0042FCF0
:004542CD 25FF000000              and eax, 000000FF
:004542D2 2BD8                    sub ebx, eax
:004542D4 895DFC                  mov dword ptr [ebp-04], ebx
:004542D7 EB73                    jmp 0045434C
:004542D9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004542DC 6BC911                  imul ecx, 00000011
:004542DF 81C180DF4A00            add ecx, 004ADF80
:004542E5 E8B6E4FBFF              call 004127A0
:004542EA 8AD8                    mov bl, al
:004542EC 81E3FF000000            and ebx, 000000FF
:004542F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004542F5 6BC911                  imul ecx, 00000011
:004542F8 81C180DF4A00            add ecx, 004ADF80
:004542FE E89DE4FBFF              call 004127A0
:00454303 25FF000000              and eax, 000000FF
:00454308 2BD8                    sub ebx, eax
:0045430A 895DFC                  mov dword ptr [ebp-04], ebx
:0045430D EB3D                    jmp 0045434C
:0045430F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00454312 6BC911                  imul ecx, 00000011
:00454315 81C180DF4A00            add ecx, 004ADF80
:0045431B E8B0B5FDFF              call 0042F8D0
:00454320 8AD8                    mov bl, al
:00454322 81E3FF000000            and ebx, 000000FF
:00454328 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045432B 6BC911                  imul ecx, 00000011
:0045432E 81C180DF4A00            add ecx, 004ADF80
:00454334 E897B5FDFF              call 0042F8D0
:00454339 25FF000000              and eax, 000000FF
:0045433E 2BD8                    sub ebx, eax
:00454340 895DFC                  mov dword ptr [ebp-04], ebx
:00454343 EB07                    jmp 0045434C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454285(C)
|
:00454345 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045426B(C), :00454275(C), :0045429E(U), :004542D7(U), :0045430D(U)
|:00454343(U)
|
:0045434C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045434F 5B                      pop ebx
:00454350 8BE5                    mov esp, ebp
:00454352 5D                      pop ebp
:00454353 C20C00                  ret 000C



:00454356 95424500                DWORD 00454295
:0045435A A3424500                DWORD 004542A3
:0045435E D9424500                DWORD 004542D9
:00454362 0F434500                DWORD 0045430F



* Referenced by a CALL at Addresses:
|:00453129   , :00453FB9   , :0045457E   
|
:00454366 55                      push ebp
:00454367 8BEC                    mov ebp, esp
:00454369 83EC0C                  sub esp, 0000000C
:0045436C 894DF4                  mov dword ptr [ebp-0C], ecx
:0045436F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00454372 83781800                cmp dword ptr [eax+18], 00000000
:00454376 750A                    jne 00454382
:00454378 C645FCFF                mov [ebp-04], FF
:0045437C C645F8FF                mov [ebp-08], FF
:00454380 EB1C                    jmp 0045439E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454376(C)
|
:00454382 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00454385 8B4918                  mov ecx, dword ptr [ecx+18]
:00454388 E85334FBFF              call 004077E0
:0045438D 8845FC                  mov byte ptr [ebp-04], al
:00454390 8B55F4                  mov edx, dword ptr [ebp-0C]
:00454393 8B4A18                  mov ecx, dword ptr [edx+18]
:00454396 E855B5FDFF              call 0042F8F0
:0045439B 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454380(U)
|
:0045439E 8B45FC                  mov eax, dword ptr [ebp-04]
:004543A1 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004543A6 3DFF000000              cmp eax, 000000FF
:004543AB 7504                    jne 004543B1
:004543AD C645FC0B                mov [ebp-04], 0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004543AB(C)
|
:004543B1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004543B4 81E1FF000000            and ecx, 000000FF
:004543BA 81F9FF000000            cmp ecx, 000000FF
:004543C0 7504                    jne 004543C6
:004543C2 C645F80A                mov [ebp-08], 0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004543C0(C)
|
:004543C6 68E9030000              push 000003E9
:004543CB 8A55FC                  mov dl, byte ptr [ebp-04]
:004543CE 52                      push edx
:004543CF 8B4508                  mov eax, dword ptr [ebp+08]
:004543D2 50                      push eax
:004543D3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004543D6 83C11C                  add ecx, 0000001C
:004543D9 E877AE0000              call 0045F255

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:004543DE 68EA030000              push 000003EA
:004543E3 8A4DF8                  mov cl, byte ptr [ebp-08]
:004543E6 51                      push ecx
:004543E7 8B5508                  mov edx, dword ptr [ebp+08]
:004543EA 52                      push edx
:004543EB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004543EE 83C11C                  add ecx, 0000001C
:004543F1 E8E9AE0000              call 0045F2DF
:004543F6 8BE5                    mov esp, ebp
:004543F8 5D                      pop ebp
:004543F9 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00453A30   , :00453AC2   , :00453C96   
|
:004543FC 55                      push ebp
:004543FD 8BEC                    mov ebp, esp
:004543FF 83EC08                  sub esp, 00000008
:00454402 894DF8                  mov dword ptr [ebp-08], ecx
:00454405 8B45F8                  mov eax, dword ptr [ebp-08]
:00454408 83780C00                cmp dword ptr [eax+0C], 00000000
:0045440C 7408                    je 00454416
:0045440E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00454411 8B410C                  mov eax, dword ptr [ecx+0C]
:00454414 EB2D                    jmp 00454443

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045440C(C)
|
:00454416 C745FC00000000          mov [ebp-04], 00000000
:0045441D EB09                    jmp 00454428

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045443E(U)
|
:0045441F 8B55FC                  mov edx, dword ptr [ebp-04]
:00454422 83C201                  add edx, 00000001
:00454425 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045441D(U)
|
:00454428 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0045442C 7D12                    jge 00454440
:0045442E 8B45F8                  mov eax, dword ptr [ebp-08]
:00454431 8B08                    mov ecx, dword ptr [eax]
:00454433 8B55FC                  mov edx, dword ptr [ebp-04]
:00454436 833C9100                cmp dword ptr [ecx+4*edx], 00000000
:0045443A 7502                    jne 0045443E
:0045443C EB02                    jmp 00454440

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045443A(C)
|
:0045443E EBDF                    jmp 0045441F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045442C(C), :0045443C(U)
|
:00454440 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454414(U)
|
:00454443 8BE5                    mov esp, ebp
:00454445 5D                      pop ebp
:00454446 C3                      ret



* Referenced by a CALL at Address:
|:00454012   
|
:00454447 55                      push ebp
:00454448 8BEC                    mov ebp, esp
:0045444A 83EC70                  sub esp, 00000070
:0045444D 894D90                  mov dword ptr [ebp-70], ecx
:00454450 8B4590                  mov eax, dword ptr [ebp-70]
:00454453 33C9                    xor ecx, ecx
:00454455 8A4810                  mov cl, byte ptr [eax+10]
:00454458 81F9FF000000            cmp ecx, 000000FF
:0045445E 7505                    jne 00454465
:00454460 E91E010000              jmp 00454583

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045445E(C)
|
:00454465 8B5590                  mov edx, dword ptr [ebp-70]
:00454468 33C0                    xor eax, eax
:0045446A 8A4210                  mov al, byte ptr [edx+10]
:0045446D 8B4D90                  mov ecx, dword ptr [ebp-70]
:00454470 8B5104                  mov edx, dword ptr [ecx+04]
:00454473 33C9                    xor ecx, ecx
:00454475 8A0C02                  mov cl, byte ptr [edx+eax]
:00454478 6BC911                  imul ecx, 00000011
:0045447B 81C180DF4A00            add ecx, 004ADF80
:00454481 8B5590                  mov edx, dword ptr [ebp-70]
:00454484 894A18                  mov dword ptr [edx+18], ecx
:00454487 8B4590                  mov eax, dword ptr [ebp-70]
:0045448A 33C9                    xor ecx, ecx
:0045448C 8A4810                  mov cl, byte ptr [eax+10]
:0045448F 8B5590                  mov edx, dword ptr [ebp-70]
:00454492 8B4204                  mov eax, dword ptr [edx+04]
:00454495 33D2                    xor edx, edx
:00454497 8A1408                  mov dl, byte ptr [eax+ecx]
:0045449A 52                      push edx
:0045449B 8D4594                  lea eax, dword ptr [ebp-6C]
:0045449E 50                      push eax
:0045449F E8F114FBFF              call 00405995
:004544A4 83C408                  add esp, 00000008
:004544A7 6A00                    push 00000000
:004544A9 8B4D90                  mov ecx, dword ptr [ebp-70]
:004544AC 8B4918                  mov ecx, dword ptr [ecx+18]
:004544AF E83CB8FDFF              call 0042FCF0
:004544B4 25FF000000              and eax, 000000FF
:004544B9 50                      push eax

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:004544BA 6802040000              push 00000402
:004544BF 6808040000              push 00000408
:004544C4 8B5508                  mov edx, dword ptr [ebp+08]
:004544C7 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004544C8 FF15B4864B00            Call dword ptr [004B86B4]
:004544CE 8B4590                  mov eax, dword ptr [ebp-70]
:004544D1 8B4818                  mov ecx, dword ptr [eax+18]
:004544D4 E817B8FDFF              call 0042FCF0
:004544D9 25FF000000              and eax, 000000FF
:004544DE 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:004544DF 6888D74700              push 0047D788

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:004544E4 68FD030000              push 000003FD
:004544E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004544EC 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004544ED FF15AC864B00            Call dword ptr [004B86AC]
:004544F3 50                      push eax
:004544F4 E811F30000              call 0046380A
:004544F9 83C40C                  add esp, 0000000C
:004544FC 8B5590                  mov edx, dword ptr [ebp-70]
:004544FF 8B4A18                  mov ecx, dword ptr [edx+18]
:00454502 E899E2FBFF              call 004127A0
:00454507 8845FC                  mov byte ptr [ebp-04], al
:0045450A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045450D 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00454512 3DFF000000              cmp eax, 000000FF
:00454517 7429                    je 00454542
:00454519 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045451C 81E1FF000000            and ecx, 000000FF
:00454522 8B148D707B4700          mov edx, dword ptr [4*ecx+00477B70]
:00454529 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:0045452A 68FF030000              push 000003FF
:0045452F 8B4508                  mov eax, dword ptr [ebp+08]
:00454532 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00454533 FF15AC864B00            Call dword ptr [004B86AC]
:00454539 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045453A FF15B0864B00            Call dword ptr [004B86B0]
:00454540 EB1B                    jmp 0045455D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454517(C)
|

* Possible StringData Ref from Data Obj ->"L"
                                  |
:00454542 688CD74700              push 0047D78C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:00454547 68FF030000              push 000003FF
:0045454C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045454F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00454550 FF15AC864B00            Call dword ptr [004B86AC]
:00454556 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00454557 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454540(U)
|
:0045455D 8D5594                  lea edx, dword ptr [ebp-6C]
:00454560 52                      push edx
:00454561 682A050000              push 0000052A
:00454566 8B4508                  mov eax, dword ptr [ebp+08]
:00454569 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045456A FF15AC864B00            Call dword ptr [004B86AC]
:00454570 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00454571 FF15B0864B00            Call dword ptr [004B86B0]
:00454577 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045457A 51                      push ecx
:0045457B 8B4D90                  mov ecx, dword ptr [ebp-70]
:0045457E E8E3FDFFFF              call 00454366

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454460(U)
|
:00454583 8BE5                    mov esp, ebp
:00454585 5D                      pop ebp
:00454586 C20400                  ret 0004


:00454589 CC                      int 03
:0045458A CC                      int 03
:0045458B CC                      int 03
:0045458C CC                      int 03
:0045458D CC                      int 03
:0045458E CC                      int 03
:0045458F CC                      int 03

* Referenced by a CALL at Address:
|:00452F97   
|
:00454590 55                      push ebp
:00454591 8BEC                    mov ebp, esp
:00454593 51                      push ecx
:00454594 894DFC                  mov dword ptr [ebp-04], ecx
:00454597 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045459A 83C11C                  add ecx, 0000001C
:0045459D E80E000000              call 004545B0
:004545A2 8B45FC                  mov eax, dword ptr [ebp-04]
:004545A5 8BE5                    mov esp, ebp
:004545A7 5D                      pop ebp
:004545A8 C3                      ret


:004545A9 CC                      int 03
:004545AA CC                      int 03
:004545AB CC                      int 03
:004545AC CC                      int 03
:004545AD CC                      int 03
:004545AE CC                      int 03
:004545AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0045459D   , :0045A741   , :0045A753   , :0045A762   , :0045F1A6   
|:0045F1E5   
|
:004545B0 55                      push ebp
:004545B1 8BEC                    mov ebp, esp
:004545B3 51                      push ecx
:004545B4 894DFC                  mov dword ptr [ebp-04], ecx
:004545B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004545BA C7400400000000          mov [eax+04], 00000000
:004545C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004545C4 C70100000000            mov dword ptr [ecx], 00000000
:004545CA 8B45FC                  mov eax, dword ptr [ebp-04]
:004545CD 8BE5                    mov esp, ebp
:004545CF 5D                      pop ebp
:004545D0 C3                      ret


:004545D1 CC                      int 03
:004545D2 CC                      int 03
:004545D3 CC                      int 03
:004545D4 CC                      int 03
:004545D5 CC                      int 03
:004545D6 CC                      int 03
:004545D7 CC                      int 03
:004545D8 CC                      int 03
:004545D9 CC                      int 03
:004545DA CC                      int 03
:004545DB CC                      int 03
:004545DC CC                      int 03
:004545DD CC                      int 03
:004545DE CC                      int 03
:004545DF CC                      int 03

* Referenced by a CALL at Address:
|:00452FB8   
|
:004545E0 55                      push ebp
:004545E1 8BEC                    mov ebp, esp
:004545E3 51                      push ecx
:004545E4 894DFC                  mov dword ptr [ebp-04], ecx
:004545E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004545EA 83C11C                  add ecx, 0000001C
:004545ED E80E000000              call 00454600
:004545F2 8BE5                    mov esp, ebp
:004545F4 5D                      pop ebp
:004545F5 C3                      ret


:004545F6 CC                      int 03
:004545F7 CC                      int 03
:004545F8 CC                      int 03
:004545F9 CC                      int 03
:004545FA CC                      int 03
:004545FB CC                      int 03
:004545FC CC                      int 03
:004545FD CC                      int 03
:004545FE CC                      int 03
:004545FF CC                      int 03

* Referenced by a CALL at Addresses:
|:004545ED   , :0045A7B1   , :0045A7C0   , :0045A7D2   , :0045F1C7   
|:0045F206   , :00473C16   , :00473C22   , :00473C38   , :00473C44   
|
:00454600 55                      push ebp
:00454601 8BEC                    mov ebp, esp
:00454603 51                      push ecx
:00454604 894DFC                  mov dword ptr [ebp-04], ecx
:00454607 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045460A E8FEAB0000              call 0045F20D
:0045460F 8BE5                    mov esp, ebp
:00454611 5D                      pop ebp
:00454612 C3                      ret


:00454613 CC                      int 03
:00454614 CC                      int 03
:00454615 CC                      int 03
:00454616 CC                      int 03
:00454617 CC                      int 03
:00454618 CC                      int 03
:00454619 CC                      int 03
:0045461A CC                      int 03
:0045461B CC                      int 03
:0045461C CC                      int 03
:0045461D CC                      int 03
:0045461E CC                      int 03
:0045461F CC                      int 03

* Referenced by a CALL at Addresses:
|:00411FF6   , :00453005   , :004539AD   , :00453F9F   , :00454004   
|
:00454620 55                      push ebp
:00454621 8BEC                    mov ebp, esp
:00454623 51                      push ecx
:00454624 894DFC                  mov dword ptr [ebp-04], ecx
:00454627 8B45FC                  mov eax, dword ptr [ebp-04]
:0045462A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045462D 884810                  mov byte ptr [eax+10], cl
:00454630 8BE5                    mov esp, ebp
:00454632 5D                      pop ebp
:00454633 C20400                  ret 0004


:00454636 CC                      int 03
:00454637 CC                      int 03
:00454638 CC                      int 03
:00454639 CC                      int 03
:0045463A CC                      int 03
:0045463B CC                      int 03
:0045463C CC                      int 03
:0045463D CC                      int 03
:0045463E CC                      int 03
:0045463F CC                      int 03

* Referenced by a CALL at Address:
|:00452FF6   
|
:00454640 55                      push ebp
:00454641 8BEC                    mov ebp, esp
:00454643 51                      push ecx
:00454644 894DFC                  mov dword ptr [ebp-04], ecx
:00454647 8B45FC                  mov eax, dword ptr [ebp-04]
:0045464A C7400C00000000          mov [eax+0C], 00000000
:00454651 8BE5                    mov esp, ebp
:00454653 5D                      pop ebp
:00454654 C3                      ret


:00454655 CC                      int 03
:00454656 CC                      int 03
:00454657 CC                      int 03
:00454658 CC                      int 03
:00454659 CC                      int 03
:0045465A CC                      int 03
:0045465B CC                      int 03
:0045465C CC                      int 03
:0045465D CC                      int 03
:0045465E CC                      int 03
:0045465F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404E60   , :00405F8D   , :004131B3   , :004148D7   , :00414B6D   
|:00414C8C   , :00414DAB   , :00414ECA   , :00414FE9   , :00416529   
|:004276C1   , :00450236   , :00453A3F   , :00453CAB   , :0045AE34   
|:0045B7C9   , :0045CDF1   , :0045CF88   , :0045FAE7   , :0045FB17   
|:004644F1   , :004691E1   , :004697BC   , :004699C3   
|
:00454660 55                      push ebp
:00454661 8BEC                    mov ebp, esp
:00454663 51                      push ecx
:00454664 894DFC                  mov dword ptr [ebp-04], ecx
:00454667 8B45FC                  mov eax, dword ptr [ebp-04]
:0045466A 8B4004                  mov eax, dword ptr [eax+04]
:0045466D 8BE5                    mov esp, ebp
:0045466F 5D                      pop ebp
:00454670 C3                      ret


:00454671 CC                      int 03
:00454672 CC                      int 03
:00454673 CC                      int 03
:00454674 CC                      int 03
:00454675 CC                      int 03
:00454676 CC                      int 03
:00454677 CC                      int 03
:00454678 CC                      int 03
:00454679 CC                      int 03
:0045467A CC                      int 03
:0045467B CC                      int 03
:0045467C CC                      int 03
:0045467D CC                      int 03
:0045467E CC                      int 03
:0045467F CC                      int 03

* Referenced by a CALL at Addresses:
|:00407309   , :004122A8   , :004454F7   , :00445513   , :00453A5C   
|:00453E6C   , :00454032   
|
:00454680 55                      push ebp
:00454681 8BEC                    mov ebp, esp
:00454683 51                      push ecx
:00454684 894DFC                  mov dword ptr [ebp-04], ecx
:00454687 8B45FC                  mov eax, dword ptr [ebp-04]
:0045468A 8A4010                  mov al, byte ptr [eax+10]
:0045468D 8BE5                    mov esp, ebp
:0045468F 5D                      pop ebp
:00454690 C3                      ret


:00454691 CC                      int 03
:00454692 CC                      int 03
:00454693 CC                      int 03
:00454694 CC                      int 03
:00454695 CC                      int 03
:00454696 CC                      int 03
:00454697 CC                      int 03
:00454698 CC                      int 03
:00454699 CC                      int 03
:0045469A CC                      int 03
:0045469B CC                      int 03
:0045469C CC                      int 03
:0045469D CC                      int 03
:0045469E CC                      int 03
:0045469F CC                      int 03
:004546A0 55                      push ebp
:004546A1 8BEC                    mov ebp, esp
:004546A3 E807000000              call 004546AF
:004546A8 E811000000              call 004546BE
:004546AD 5D                      pop ebp
:004546AE C3                      ret



* Referenced by a CALL at Address:
|:004546A3   
|
:004546AF 55                      push ebp
:004546B0 8BEC                    mov ebp, esp
:004546B2 B9180A4B00              mov ecx, 004B0A18
:004546B7 E8F4410000              call 004588B0
:004546BC 5D                      pop ebp
:004546BD C3                      ret



* Referenced by a CALL at Address:
|:004546A8   
|
:004546BE 55                      push ebp
:004546BF 8BEC                    mov ebp, esp
:004546C1 68D0464500              push 004546D0
:004546C6 E8A58D0100              call 0046D470
:004546CB 83C404                  add esp, 00000004
:004546CE 5D                      pop ebp
:004546CF C3                      ret


:004546D0 55                      push ebp
:004546D1 8BEC                    mov ebp, esp
:004546D3 B9180A4B00              mov ecx, 004B0A18
:004546D8 E8C315FDFF              call 00425CA0
:004546DD 5D                      pop ebp
:004546DE C3                      ret


:004546DF 55                      push ebp
:004546E0 8BEC                    mov ebp, esp
:004546E2 E802000000              call 004546E9
:004546E7 5D                      pop ebp
:004546E8 C3                      ret



* Referenced by a CALL at Address:
|:004546E2   
|
:004546E9 55                      push ebp
:004546EA 8BEC                    mov ebp, esp
:004546EC B9800A4B00              mov ecx, 004B0A80
:004546F1 E8BA30FBFF              call 004077B0
:004546F6 5D                      pop ebp
:004546F7 C3                      ret



* Referenced by a CALL at Address:
|:00457B42   
|
:004546F8 55                      push ebp
:004546F9 8BEC                    mov ebp, esp
:004546FB 51                      push ecx
:004546FC B9180A4B00              mov ecx, 004B0A18
:00454701 E83AB5FDFF              call 0042FC40
:00454706 25FF000000              and eax, 000000FF
:0045470B 85C0                    test eax, eax
:0045470D 750F                    jne 0045471E
:0045470F 6A00                    push 00000000
:00454711 B9F8134800              mov ecx, 004813F8
:00454716 E878A3FBFF              call 0040EA93
:0045471B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045470D(C)
|
:0045471E 8B45FC                  mov eax, dword ptr [ebp-04]
:00454721 8BE5                    mov esp, ebp
:00454723 5D                      pop ebp
:00454724 C3                      ret



* Referenced by a CALL at Address:
|:004584F1   
|
:00454725 55                      push ebp
:00454726 8BEC                    mov ebp, esp
:00454728 51                      push ecx
:00454729 894DFC                  mov dword ptr [ebp-04], ecx
:0045472C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045472F C6403000                mov [eax+30], 00
:00454733 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454736 C6413100                mov [ecx+31], 00
:0045473A 8BE5                    mov esp, ebp
:0045473C 5D                      pop ebp
:0045473D C3                      ret



* Referenced by a CALL at Addresses:
|:00438F3B   , :00447061   , :00454B2B   , :00454C61   
|
:0045473E 55                      push ebp
:0045473F 8BEC                    mov ebp, esp
:00454741 83EC08                  sub esp, 00000008
:00454744 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00454747 6A03                    push 00000003
:00454749 E8D95F0100              call 0046A727
:0045474E 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00454751 6A07                    push 00000007
:00454753 E891660100              call 0046ADE9
:00454758 83C404                  add esp, 00000004
:0045475B C745FC00000000          mov [ebp-04], 00000000
:00454762 EB09                    jmp 0045476D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004548D6(U)
|
:00454764 8B45FC                  mov eax, dword ptr [ebp-04]
:00454767 83C001                  add eax, 00000001
:0045476A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454762(U)
|
:0045476D 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:00454771 0F8D64010000            jnl 004548DB
:00454777 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045477A 6BC924                  imul ecx, 00000024
:0045477D 81C108F54A00            add ecx, 004AF508
:00454783 E848B1FDFF              call 0042F8D0
:00454788 25FF000000              and eax, 000000FF
:0045478D 83F802                  cmp eax, 00000002
:00454790 0F8540010000            jne 004548D6
:00454796 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454799 6BC924                  imul ecx, 00000024
:0045479C 81C108F54A00            add ecx, 004AF508
:004547A2 E81A51FDFF              call 004298C1
:004547A7 25FF000000              and eax, 000000FF
:004547AC 83F802                  cmp eax, 00000002
:004547AF 7510                    jne 004547C1
:004547B1 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:004547B3 6A0C                    push 0000000C
:004547B5 6A00                    push 00000000
:004547B7 E854660100              call 0046AE10
:004547BC 83C40C                  add esp, 0000000C
:004547BF EB63                    jmp 00454824

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004547AF(C)
|
:004547C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004547C4 6BC924                  imul ecx, 00000024
:004547C7 81C108F54A00            add ecx, 004AF508
:004547CD E8EF50FDFF              call 004298C1
:004547D2 25FF000000              and eax, 000000FF
:004547D7 85C0                    test eax, eax
:004547D9 7510                    jne 004547EB
:004547DB 6A00                    push 00000000

* Possible Reference to String Resource ID=00011: "
"
                                  |
:004547DD 6A0B                    push 0000000B
:004547DF 6A00                    push 00000000
:004547E1 E82A660100              call 0046AE10
:004547E6 83C40C                  add esp, 0000000C
:004547E9 EB39                    jmp 00454824

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004547D9(C)
|
:004547EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004547EE 6BC924                  imul ecx, 00000024
:004547F1 81C108F54A00            add ecx, 004AF508
:004547F7 E8C550FDFF              call 004298C1
:004547FC 25FF000000              and eax, 000000FF
:00454801 83F803                  cmp eax, 00000003
:00454804 7510                    jne 00454816
:00454806 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:00454808 6A0C                    push 0000000C
:0045480A 6A00                    push 00000000
:0045480C E8FF650100              call 0046AE10
:00454811 83C40C                  add esp, 0000000C
:00454814 EB0E                    jmp 00454824

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454804(C)
|
:00454816 6A00                    push 00000000

* Possible Reference to String Resource ID=00014: ""
                                  |
:00454818 6A0E                    push 0000000E
:0045481A 6A00                    push 00000000
:0045481C E8EF650100              call 0046AE10
:00454821 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004547BF(U), :004547E9(U), :00454814(U)
|
:00454824 E809E6FBFF              call 00412E32
:00454829 6A00                    push 00000000
:0045482B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045482E 6BC924                  imul ecx, 00000024
:00454831 81C108F54A00            add ecx, 004AF508
:00454837 E8644BFDFF              call 004293A0
:0045483C 33C9                    xor ecx, ecx
:0045483E 8A4801                  mov cl, byte ptr [eax+01]
:00454841 8D540902                lea edx, dword ptr [ecx+ecx+02]
:00454845 6BD203                  imul edx, 00000003
:00454848 8B45F8                  mov eax, dword ptr [ebp-08]
:0045484B 33C9                    xor ecx, ecx
:0045484D 8A4831                  mov cl, byte ptr [eax+31]
:00454850 8D540AFE                lea edx, dword ptr [edx+ecx-02]
:00454854 52                      push edx
:00454855 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454858 6BC924                  imul ecx, 00000024
:0045485B 81C108F54A00            add ecx, 004AF508
:00454861 E83A4BFDFF              call 004293A0
:00454866 33C9                    xor ecx, ecx
:00454868 8A08                    mov cl, byte ptr [eax]
:0045486A 8D540902                lea edx, dword ptr [ecx+ecx+02]
:0045486E 6BD203                  imul edx, 00000003
:00454871 8B45F8                  mov eax, dword ptr [ebp-08]
:00454874 33C9                    xor ecx, ecx
:00454876 8A4830                  mov cl, byte ptr [eax+30]
:00454879 8D540AFE                lea edx, dword ptr [edx+ecx-02]
:0045487D 52                      push edx
:0045487E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454881 6BC924                  imul ecx, 00000024
:00454884 81C108F54A00            add ecx, 004AF508
:0045488A E8114BFDFF              call 004293A0
:0045488F 33C9                    xor ecx, ecx
:00454891 8A4801                  mov cl, byte ptr [eax+01]
:00454894 D1E1                    shl ecx, 1
:00454896 6BC903                  imul ecx, 00000003
:00454899 8B55F8                  mov edx, dword ptr [ebp-08]
:0045489C 33C0                    xor eax, eax
:0045489E 8A4231                  mov al, byte ptr [edx+31]
:004548A1 03C8                    add ecx, eax
:004548A3 51                      push ecx
:004548A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004548A7 6BC924                  imul ecx, 00000024
:004548AA 81C108F54A00            add ecx, 004AF508
:004548B0 E8EB4AFDFF              call 004293A0
:004548B5 33C9                    xor ecx, ecx
:004548B7 8A08                    mov cl, byte ptr [eax]
:004548B9 D1E1                    shl ecx, 1
:004548BB 6BC903                  imul ecx, 00000003
:004548BE 8B55F8                  mov edx, dword ptr [ebp-08]
:004548C1 33C0                    xor eax, eax
:004548C3 8A4230                  mov al, byte ptr [edx+30]
:004548C6 03C8                    add ecx, eax
:004548C8 51                      push ecx
:004548C9 E8416E0100              call 0046B70F
:004548CE 83C414                  add esp, 00000014
:004548D1 E877E5FBFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454790(C)
|
:004548D6 E989FEFFFF              jmp 00454764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454771(C)
|
:004548DB 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004548DD 6A0A                    push 0000000A
:004548DF 6A00                    push 00000000
:004548E1 E82A650100              call 0046AE10
:004548E6 83C40C                  add esp, 0000000C
:004548E9 6A00                    push 00000000
:004548EB E8375E0100              call 0046A727
:004548F0 83C404                  add esp, 00000004
:004548F3 8BE5                    mov esp, ebp
:004548F5 5D                      pop ebp
:004548F6 C3                      ret



* Referenced by a CALL at Addresses:
|:004458CF   , :00454C79   , :004585E9   , :00469985   , :00469B8C   
|
:004548F7 55                      push ebp
:004548F8 8BEC                    mov ebp, esp
:004548FA 51                      push ecx
:004548FB 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004548FE 6A03                    push 00000003
:00454900 E8225E0100              call 0046A727
:00454905 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00454908 6A07                    push 00000007
:0045490A E8DA640100              call 0046ADE9
:0045490F 83C404                  add esp, 00000004
:00454912 8B45FC                  mov eax, dword ptr [ebp-04]
:00454915 83784400                cmp dword ptr [eax+44], 00000000
:00454919 7435                    je 00454950
:0045491B 6A01                    push 00000001
:0045491D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454920 83C134                  add ecx, 00000034
:00454923 83EC10                  sub esp, 00000010
:00454926 8BD4                    mov edx, esp
:00454928 8B01                    mov eax, dword ptr [ecx]
:0045492A 8902                    mov dword ptr [edx], eax
:0045492C 8B4104                  mov eax, dword ptr [ecx+04]
:0045492F 894204                  mov dword ptr [edx+04], eax
:00454932 8B4108                  mov eax, dword ptr [ecx+08]
:00454935 894208                  mov dword ptr [edx+08], eax
:00454938 8B490C                  mov ecx, dword ptr [ecx+0C]
:0045493B 894A0C                  mov dword ptr [edx+0C], ecx
:0045493E E8B2BC0000              call 004605F5
:00454943 83C414                  add esp, 00000014
:00454946 8B55FC                  mov edx, dword ptr [ebp-04]
:00454949 C7424400000000          mov [edx+44], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454919(C)
|
:00454950 8B45FC                  mov eax, dword ptr [ebp-04]
:00454953 83784400                cmp dword ptr [eax+44], 00000000
:00454957 0F85B1000000            jne 00454A0E
:0045495D B9A8034B00              mov ecx, 004B03A8
:00454962 E8861EFFFF              call 004467ED
:00454967 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045496A 33D2                    xor edx, edx
:0045496C 8A5130                  mov dl, byte ptr [ecx+30]
:0045496F 8D0442                  lea eax, dword ptr [edx+2*eax]
:00454972 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454975 894134                  mov dword ptr [ecx+34], eax
:00454978 B9A8034B00              mov ecx, 004B03A8
:0045497D E8921EFFFF              call 00446814
:00454982 8B55FC                  mov edx, dword ptr [ebp-04]
:00454985 33C9                    xor ecx, ecx
:00454987 8A4A31                  mov cl, byte ptr [edx+31]
:0045498A 8D1441                  lea edx, dword ptr [ecx+2*eax]
:0045498D 8B45FC                  mov eax, dword ptr [ebp-04]
:00454990 895038                  mov dword ptr [eax+38], edx
:00454993 B9A8034B00              mov ecx, 004B03A8
:00454998 E8EC1EFFFF              call 00446889
:0045499D 99                      cdq
:0045499E 83E207                  and edx, 00000007
:004549A1 03C2                    add eax, edx
:004549A3 C1F803                  sar eax, 03
:004549A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004549A9 8B5134                  mov edx, dword ptr [ecx+34]
:004549AC 8D4402FE                lea eax, dword ptr [edx+eax-02]
:004549B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004549B3 89413C                  mov dword ptr [ecx+3C], eax
:004549B6 B9A8034B00              mov ecx, 004B03A8
:004549BB E8F01EFFFF              call 004468B0
:004549C0 99                      cdq
:004549C1 83E207                  and edx, 00000007
:004549C4 03C2                    add eax, edx
:004549C6 C1F803                  sar eax, 03
:004549C9 8B55FC                  mov edx, dword ptr [ebp-04]
:004549CC 8B4A38                  mov ecx, dword ptr [edx+38]
:004549CF 8D5401FE                lea edx, dword ptr [ecx+eax-02]
:004549D3 8B45FC                  mov eax, dword ptr [ebp-04]
:004549D6 895040                  mov dword ptr [eax+40], edx
:004549D9 6A00                    push 00000000
:004549DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004549DE 83C134                  add ecx, 00000034
:004549E1 83EC10                  sub esp, 00000010
:004549E4 8BD4                    mov edx, esp
:004549E6 8B01                    mov eax, dword ptr [ecx]
:004549E8 8902                    mov dword ptr [edx], eax
:004549EA 8B4104                  mov eax, dword ptr [ecx+04]
:004549ED 894204                  mov dword ptr [edx+04], eax
:004549F0 8B4108                  mov eax, dword ptr [ecx+08]
:004549F3 894208                  mov dword ptr [edx+08], eax
:004549F6 8B490C                  mov ecx, dword ptr [ecx+0C]
:004549F9 894A0C                  mov dword ptr [edx+0C], ecx
:004549FC E8F4BB0000              call 004605F5
:00454A01 83C414                  add esp, 00000014
:00454A04 8B55FC                  mov edx, dword ptr [ebp-04]
:00454A07 C7424401000000          mov [edx+44], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454957(C)
|
:00454A0E 6A00                    push 00000000
:00454A10 E8125D0100              call 0046A727
:00454A15 83C404                  add esp, 00000004
:00454A18 8BE5                    mov esp, ebp
:00454A1A 5D                      pop ebp
:00454A1B C3                      ret



* Referenced by a CALL at Address:
|:0046054A   
|
:00454A1C 55                      push ebp
:00454A1D 8BEC                    mov ebp, esp
:00454A1F 51                      push ecx
:00454A20 894DFC                  mov dword ptr [ebp-04], ecx
:00454A23 8B45FC                  mov eax, dword ptr [ebp-04]
:00454A26 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454A29 8B11                    mov edx, dword ptr [ecx]
:00454A2B 895034                  mov dword ptr [eax+34], edx
:00454A2E 8B45FC                  mov eax, dword ptr [ebp-04]
:00454A31 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454A34 8B5108                  mov edx, dword ptr [ecx+08]
:00454A37 89503C                  mov dword ptr [eax+3C], edx
:00454A3A 8B45FC                  mov eax, dword ptr [ebp-04]
:00454A3D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454A40 8B5104                  mov edx, dword ptr [ecx+04]
:00454A43 895038                  mov dword ptr [eax+38], edx
:00454A46 8B45FC                  mov eax, dword ptr [ebp-04]
:00454A49 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454A4C 8B510C                  mov edx, dword ptr [ecx+0C]
:00454A4F 895040                  mov dword ptr [eax+40], edx
:00454A52 8BE5                    mov esp, ebp
:00454A54 5D                      pop ebp
:00454A55 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00458533   
|
:00454A58 55                      push ebp
:00454A59 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00454A5B 6AFF                    push FFFFFFFF
:00454A5D 68CC3B4700              push 00473BCC
:00454A62 64A100000000            mov eax, dword ptr fs:[00000000]
:00454A68 50                      push eax
:00454A69 64892500000000          mov dword ptr fs:[00000000], esp
:00454A70 81EC08010000            sub esp, 00000108
:00454A76 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:00454A7C 6A00                    push 00000000
:00454A7E A1C00C4B00              mov eax, dword ptr [004B0CC0]
:00454A83 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00454A84 FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00454A8A 6A03                    push 00000003
:00454A8C E8965C0100              call 0046A727
:00454A91 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00454A94 6A07                    push 00000007
:00454A96 E84E630100              call 0046ADE9
:00454A9B 83C404                  add esp, 00000004
:00454A9E 6A00                    push 00000000
:00454AA0 6A4F                    push 0000004F
:00454AA2 6A00                    push 00000000
:00454AA4 E867630100              call 0046AE10
:00454AA9 83C40C                  add esp, 0000000C
:00454AAC 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454AB2 E8492CFBFF              call 00407700
:00454AB7 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"SMLMAP.E4"
                                  |
:00454ABE 68007B4700              push 00477B00
:00454AC3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454AC9 E867F8FBFF              call 00414335
:00454ACE 6A00                    push 00000000
:00454AD0 B950DF4A00              mov ecx, 004ADF50
:00454AD5 E8C4EAFBFF              call 0041359E
:00454ADA 50                      push eax
:00454ADB 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00454AE1 33D2                    xor edx, edx
:00454AE3 8A11                    mov dl, byte ptr [ecx]
:00454AE5 52                      push edx
:00454AE6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454AEC E898F9FBFF              call 00414489
:00454AF1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454AF7 E810BBFBFF              call 0041060C
:00454AFC 6A00                    push 00000000
:00454AFE B950DF4A00              mov ecx, 004ADF50
:00454B03 E896EAFBFF              call 0041359E
:00454B08 50                      push eax
:00454B09 8B4514                  mov eax, dword ptr [ebp+14]
:00454B0C D1E0                    shl eax, 1
:00454B0E 50                      push eax
:00454B0F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00454B12 D1E1                    shl ecx, 1
:00454B14 51                      push ecx
:00454B15 8B550C                  mov edx, dword ptr [ebp+0C]
:00454B18 52                      push edx
:00454B19 8B4508                  mov eax, dword ptr [ebp+08]
:00454B1C 50                      push eax
:00454B1D E8C5700100              call 0046BBE7
:00454B22 83C414                  add esp, 00000014
:00454B25 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00454B2B E80EFCFFFF              call 0045473E
:00454B30 6A00                    push 00000000
:00454B32 8B0DC40C4B00            mov ecx, dword ptr [004B0CC4]
:00454B38 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00454B39 FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00454B3F 6A04                    push 00000004
:00454B41 E8E15B0100              call 0046A727
:00454B46 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00454B49 6A07                    push 00000007
:00454B4B E899620100              call 0046ADE9
:00454B50 83C404                  add esp, 00000004
:00454B53 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00454B55 6A0A                    push 0000000A
:00454B57 6A00                    push 00000000
:00454B59 E8B2620100              call 0046AE10
:00454B5E 83C40C                  add esp, 0000000C
:00454B61 B9180A4B00              mov ecx, 004B0A18
:00454B66 E883380000              call 004583EE
:00454B6B 25FF000000              and eax, 000000FF
:00454B70 99                      cdq
:00454B71 33C2                    xor eax, edx
:00454B73 2BC2                    sub eax, edx
:00454B75 83E003                  and eax, 00000003
:00454B78 33C2                    xor eax, edx
:00454B7A 2BC2                    sub eax, edx
:00454B7C C1E00A                  shl eax, 0A
:00454B7F 05801D0000              add eax, 00001D80
:00454B84 50                      push eax
:00454B85 B940DF4A00              mov ecx, 004ADF40
:00454B8A E80FEAFBFF              call 0041359E
:00454B8F 50                      push eax
:00454B90 8B159C4C4700            mov edx, dword ptr [00474C9C]
:00454B96 52                      push edx
:00454B97 A1984C4700              mov eax, dword ptr [00474C98]
:00454B9C 50                      push eax
:00454B9D 6A00                    push 00000000
:00454B9F 6A00                    push 00000000
:00454BA1 E841700100              call 0046BBE7
:00454BA6 83C414                  add esp, 00000014
:00454BA9 6A00                    push 00000000
:00454BAB E8775B0100              call 0046A727
:00454BB0 83C404                  add esp, 00000004
:00454BB3 E86BB10000              call 0045FD23
:00454BB8 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00454BBF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454BC5 E8562BFBFF              call 00407720
:00454BCA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00454BCD 64890D00000000          mov dword ptr fs:[00000000], ecx
:00454BD4 8BE5                    mov esp, ebp
:00454BD6 5D                      pop ebp
:00454BD7 C21000                  ret 0010



* Referenced by a CALL at Address:
|:004587E6   
|
:00454BDA 55                      push ebp
:00454BDB 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00454BDD 6AFF                    push FFFFFFFF
:00454BDF 68E23B4700              push 00473BE2
:00454BE4 64A100000000            mov eax, dword ptr fs:[00000000]
:00454BEA 50                      push eax
:00454BEB 64892500000000          mov dword ptr fs:[00000000], esp
:00454BF2 81EC08010000            sub esp, 00000108
:00454BF8 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:00454BFE 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454C04 E8F72AFBFF              call 00407700
:00454C09 C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00454C10 6A03                    push 00000003
:00454C12 E8105B0100              call 0046A727
:00454C17 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00454C1A 6A07                    push 00000007
:00454C1C E8C8610100              call 0046ADE9
:00454C21 83C404                  add esp, 00000004
:00454C24 6A00                    push 00000000
:00454C26 6A4F                    push 0000004F
:00454C28 6A00                    push 00000000
:00454C2A E8E1610100              call 0046AE10
:00454C2F 83C40C                  add esp, 0000000C
:00454C32 6A00                    push 00000000
:00454C34 B950DF4A00              mov ecx, 004ADF50
:00454C39 E860E9FBFF              call 0041359E
:00454C3E 50                      push eax
:00454C3F 8B4514                  mov eax, dword ptr [ebp+14]
:00454C42 D1E0                    shl eax, 1
:00454C44 50                      push eax
:00454C45 8B4D10                  mov ecx, dword ptr [ebp+10]
:00454C48 D1E1                    shl ecx, 1
:00454C4A 51                      push ecx
:00454C4B 8B550C                  mov edx, dword ptr [ebp+0C]
:00454C4E 52                      push edx
:00454C4F 8B4508                  mov eax, dword ptr [ebp+08]
:00454C52 50                      push eax
:00454C53 E88F6F0100              call 0046BBE7
:00454C58 83C414                  add esp, 00000014
:00454C5B 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00454C61 E8D8FAFFFF              call 0045473E
:00454C66 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00454C6C C7414400000000          mov [ecx+44], 00000000
:00454C73 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00454C79 E879FCFFFF              call 004548F7

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00454C7E 6A04                    push 00000004
:00454C80 E8A25A0100              call 0046A727
:00454C85 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00454C88 6A07                    push 00000007
:00454C8A E85A610100              call 0046ADE9
:00454C8F 83C404                  add esp, 00000004
:00454C92 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00454C94 6A0A                    push 0000000A
:00454C96 6A00                    push 00000000
:00454C98 E873610100              call 0046AE10
:00454C9D 83C40C                  add esp, 0000000C
:00454CA0 B9180A4B00              mov ecx, 004B0A18
:00454CA5 E844370000              call 004583EE
:00454CAA 25FF000000              and eax, 000000FF
:00454CAF 99                      cdq
:00454CB0 33C2                    xor eax, edx
:00454CB2 2BC2                    sub eax, edx
:00454CB4 83E003                  and eax, 00000003
:00454CB7 33C2                    xor eax, edx
:00454CB9 2BC2                    sub eax, edx
:00454CBB C1E00A                  shl eax, 0A
:00454CBE 05801D0000              add eax, 00001D80
:00454CC3 50                      push eax
:00454CC4 B940DF4A00              mov ecx, 004ADF40
:00454CC9 E8D0E8FBFF              call 0041359E
:00454CCE 50                      push eax
:00454CCF 8B159C4C4700            mov edx, dword ptr [00474C9C]
:00454CD5 52                      push edx
:00454CD6 A1984C4700              mov eax, dword ptr [00474C98]
:00454CDB 50                      push eax
:00454CDC 6A00                    push 00000000
:00454CDE 6A00                    push 00000000
:00454CE0 E8026F0100              call 0046BBE7
:00454CE5 83C414                  add esp, 00000014
:00454CE8 6A00                    push 00000000
:00454CEA E8385A0100              call 0046A727
:00454CEF 83C404                  add esp, 00000004
:00454CF2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00454CF9 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454CFF E81C2AFBFF              call 00407720
:00454D04 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00454D07 64890D00000000          mov dword ptr fs:[00000000], ecx
:00454D0E 8BE5                    mov esp, ebp
:00454D10 5D                      pop ebp
:00454D11 C21000                  ret 0010



* Referenced by a CALL at Address:
|:00454ED2   
|
:00454D14 55                      push ebp
:00454D15 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00454D17 6AFF                    push FFFFFFFF
:00454D19 68F83B4700              push 00473BF8
:00454D1E 64A100000000            mov eax, dword ptr fs:[00000000]
:00454D24 50                      push eax
:00454D25 64892500000000          mov dword ptr fs:[00000000], esp
:00454D2C 81EC08010000            sub esp, 00000108
:00454D32 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:00454D38 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454D3E E8BD29FBFF              call 00407700
:00454D43 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"HEXZMAP.E4"
                                  |
:00454D4A 68107B4700              push 00477B10
:00454D4F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454D55 E8DBF5FBFF              call 00414335
:00454D5A 6A00                    push 00000000
:00454D5C B930DA4A00              mov ecx, 004ADA30
:00454D61 E838E8FBFF              call 0041359E
:00454D66 50                      push eax
:00454D67 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:00454D6D 33C9                    xor ecx, ecx
:00454D6F 8A08                    mov cl, byte ptr [eax]
:00454D71 51                      push ecx
:00454D72 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454D78 E80CF7FBFF              call 00414489
:00454D7D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454D83 E884B8FBFF              call 0041060C
:00454D88 6A00                    push 00000000
:00454D8A B930DA4A00              mov ecx, 004ADA30
:00454D8F E80AE8FBFF              call 0041359E
:00454D94 33D2                    xor edx, edx
:00454D96 8A10                    mov dl, byte ptr [eax]
:00454D98 8BC2                    mov eax, edx
:00454D9A 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00454D9B B903000000              mov ecx, 00000003
:00454DA0 F7F9                    idiv ecx
:00454DA2 A2800A4B00              mov byte ptr [004B0A80], al
:00454DA7 6A01                    push 00000001
:00454DA9 B930DA4A00              mov ecx, 004ADA30
:00454DAE E8EBE7FBFF              call 0041359E
:00454DB3 33D2                    xor edx, edx
:00454DB5 8A10                    mov dl, byte ptr [eax]
:00454DB7 8BC2                    mov eax, edx
:00454DB9 99                      cdq

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00454DBA B903000000              mov ecx, 00000003
:00454DBF F7F9                    idiv ecx
:00454DC1 A2810A4B00              mov byte ptr [004B0A81], al
:00454DC6 33D2                    xor edx, edx
:00454DC8 8A15800A4B00            mov dl, byte ptr [004B0A80]
:00454DCE 33C0                    xor eax, eax
:00454DD0 A0810A4B00              mov al, byte ptr [004B0A81]
:00454DD5 0FAFD0                  imul edx, eax
:00454DD8 52                      push edx
:00454DD9 6880430000              push 00004380
:00454DDE B930DF4A00              mov ecx, 004ADF30
:00454DE3 E8B6E7FBFF              call 0041359E
:00454DE8 50                      push eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00454DE9 6A02                    push 00000002
:00454DEB B930DA4A00              mov ecx, 004ADA30
:00454DF0 E8A9E7FBFF              call 0041359E
:00454DF5 50                      push eax
:00454DF6 E834DA0000              call 0046282F
:00454DFB 83C40C                  add esp, 0000000C
:00454DFE C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00454E05 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00454E0B E81029FBFF              call 00407720
:00454E10 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00454E13 64890D00000000          mov dword ptr fs:[00000000], ecx
:00454E1A 8BE5                    mov esp, ebp
:00454E1C 5D                      pop ebp
:00454E1D C3                      ret



* Referenced by a CALL at Addresses:
|:00454F99   , :00457F63   
|
:00454E1E 55                      push ebp
:00454E1F 8BEC                    mov ebp, esp
:00454E21 83EC0C                  sub esp, 0000000C
:00454E24 894DF4                  mov dword ptr [ebp-0C], ecx
:00454E27 8B45F4                  mov eax, dword ptr [ebp-0C]
:00454E2A 8A4D08                  mov cl, byte ptr [ebp+08]
:00454E2D 8808                    mov byte ptr [eax], cl

* Possible StringData Ref from Data Obj ->"HM00.E4"
                                  |
:00454E2F C745F80CD84700          mov [ebp-08], 0047D80C
:00454E36 8B55F8                  mov edx, dword ptr [ebp-08]
:00454E39 83C202                  add edx, 00000002
:00454E3C 8955FC                  mov dword ptr [ebp-04], edx
:00454E3F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00454E42 33C9                    xor ecx, ecx
:00454E44 8A08                    mov cl, byte ptr [eax]
:00454E46 8BC1                    mov eax, ecx
:00454E48 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00454E49 B90A000000              mov ecx, 0000000A
:00454E4E F7F9                    idiv ecx
:00454E50 83C030                  add eax, 00000030
:00454E53 8B55FC                  mov edx, dword ptr [ebp-04]
:00454E56 8802                    mov byte ptr [edx], al
:00454E58 8B45FC                  mov eax, dword ptr [ebp-04]
:00454E5B 83C001                  add eax, 00000001
:00454E5E 8945FC                  mov dword ptr [ebp-04], eax
:00454E61 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00454E64 33C0                    xor eax, eax
:00454E66 8A01                    mov al, byte ptr [ecx]
:00454E68 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00454E69 B90A000000              mov ecx, 0000000A
:00454E6E F7F9                    idiv ecx
:00454E70 83C230                  add edx, 00000030
:00454E73 8B45FC                  mov eax, dword ptr [ebp-04]
:00454E76 8810                    mov byte ptr [eax], dl
:00454E78 6A00                    push 00000000
:00454E7A B908DA4A00              mov ecx, 004ADA08
:00454E7F E81AE7FBFF              call 0041359E
:00454E84 50                      push eax
:00454E85 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00454E88 51                      push ecx
:00454E89 B920194B00              mov ecx, 004B1920
:00454E8E E866530100              call 0046A1F9
:00454E93 8B5508                  mov edx, dword ptr [ebp+08]
:00454E96 81E2FF000000            and edx, 000000FF
:00454E9C 89153C7A4700            mov dword ptr [00477A3C], edx
:00454EA2 8BE5                    mov esp, ebp
:00454EA4 5D                      pop ebp
:00454EA5 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00450059   , :00457FED   
|
:00454EA8 55                      push ebp
:00454EA9 8BEC                    mov ebp, esp
:00454EAB 51                      push ecx
:00454EAC 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454EC2(U)
|
:00454EAF B920194B00              mov ecx, 004B1920
:00454EB4 E8AD520100              call 0046A166
:00454EB9 85C0                    test eax, eax
:00454EBB 7507                    jne 00454EC4
:00454EBD E88C760100              call 0046C54E
:00454EC2 EBEB                    jmp 00454EAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454EBB(C)
|
:00454EC4 8BE5                    mov esp, ebp
:00454EC6 5D                      pop ebp
:00454EC7 C3                      ret



* Referenced by a CALL at Addresses:
|:00454FE8   , :00457F79   
|
:00454EC8 55                      push ebp
:00454EC9 8BEC                    mov ebp, esp
:00454ECB 51                      push ecx
:00454ECC 894DFC                  mov dword ptr [ebp-04], ecx
:00454ECF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00454ED2 E83DFEFFFF              call 00454D14
:00454ED7 B9880B4B00              mov ecx, 004B0B88
:00454EDC E862410000              call 00459043
:00454EE1 8BE5                    mov esp, ebp
:00454EE3 5D                      pop ebp
:00454EE4 C3                      ret



* Referenced by a CALL at Addresses:
|:00457DF9   , :00458EAB   
|
:00454EE5 55                      push ebp
:00454EE6 8BEC                    mov ebp, esp
:00454EE8 83EC14                  sub esp, 00000014
:00454EEB 894DF0                  mov dword ptr [ebp-10], ecx
:00454EEE E833210100              call 00467026
:00454EF3 A1C80C4B00              mov eax, dword ptr [004B0CC8]
:00454EF8 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00454EF9 FF15E0864B00            Call dword ptr [004B86E0]
:00454EFF 85C0                    test eax, eax
:00454F01 740A                    je 00454F0D
:00454F03 B9D80C4B00              mov ecx, 004B0CD8
:00454F08 E84DB00000              call 0045FF5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454F01(C)
|
:00454F0D B9C8E24A00              mov ecx, 004AE2C8
:00454F12 E8B9A2FBFF              call 0040F1D0
:00454F17 2500400000              and eax, 00004000
:00454F1C 85C0                    test eax, eax
:00454F1E 7409                    je 00454F29
:00454F20 C745EC00000000          mov [ebp-14], 00000000
:00454F27 EB12                    jmp 00454F3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454F1E(C)
|
:00454F29 B9C8E24A00              mov ecx, 004AE2C8
:00454F2E E8FDA3FBFF              call 0040F330
:00454F33 25FF000000              and eax, 000000FF
:00454F38 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454F27(U)
|
:00454F3B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00454F3E 8A55EC                  mov dl, byte ptr [ebp-14]
:00454F41 885125                  mov byte ptr [ecx+25], dl
:00454F44 C705347A4700FFFF0000    mov dword ptr [00477A34], 0000FFFF
:00454F4E C705307A4700FFFF0000    mov dword ptr [00477A30], 0000FFFF
:00454F58 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00454F5B E888330000              call 004582E8
:00454F60 8B45F0                  mov eax, dword ptr [ebp-10]
:00454F63 8A08                    mov cl, byte ptr [eax]
:00454F65 51                      push ecx
:00454F66 B9C8E24A00              mov ecx, 004AE2C8
:00454F6B E8501BFDFF              call 00426AC0
:00454F70 B9880D4B00              mov ecx, 004B0D88
:00454F75 E8CECB0000              call 00461B48
:00454F7A B9800D4B00              mov ecx, 004B0D80
:00454F7F E8FDCB0000              call 00461B81
:00454F84 6A61                    push 00000061
:00454F86 B9800D4B00              mov ecx, 004B0D80
:00454F8B E834CC0000              call 00461BC4
:00454F90 8B55F0                  mov edx, dword ptr [ebp-10]
:00454F93 8A02                    mov al, byte ptr [edx]
:00454F95 50                      push eax
:00454F96 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00454F99 E880FEFFFF              call 00454E1E
:00454F9E C6057C0B4B0000          mov byte ptr [004B0B7C], 00
:00454FA5 C605800B4B0000          mov byte ptr [004B0B80], 00
:00454FAC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00454FAF C6410500                mov [ecx+05], 00
:00454FB3 8B55F0                  mov edx, dword ptr [ebp-10]
:00454FB6 C6420100                mov [edx+01], 00
:00454FBA 8B45F0                  mov eax, dword ptr [ebp-10]
:00454FBD C6402400                mov [eax+24], 00
:00454FC1 837D0800                cmp dword ptr [ebp+08], 00000000
:00454FC5 750C                    jne 00454FD3
:00454FC7 B9880B4B00              mov ecx, 004B0B88
:00454FCC E895390000              call 00458966
:00454FD1 EB0A                    jmp 00454FDD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454FC5(C)
|
:00454FD3 B9880B4B00              mov ecx, 004B0B88
:00454FD8 E8AF390000              call 0045898C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454FD1(U)
|
:00454FDD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00454FE0 E80E330000              call 004582F3
:00454FE5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00454FE8 E8DBFEFFFF              call 00454EC8
:00454FED 837D0800                cmp dword ptr [ebp+08], 00000000
:00454FF1 7536                    jne 00455029

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00454FF3 68FF000000              push 000000FF
:00454FF8 6880070000              push 00000780
:00454FFD 68004B0000              push 00004B00
:00455002 B930DF4A00              mov ecx, 004ADF30
:00455007 E892E5FBFF              call 0041359E
:0045500C 50                      push eax
:0045500D E836D80000              call 00462848
:00455012 83C40C                  add esp, 0000000C
:00455015 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00455018 C7414C00000000          mov [ecx+4C], 00000000
:0045501F 8B55F0                  mov edx, dword ptr [ebp-10]
:00455022 C7425000000000          mov [edx+50], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454FF1(C)
|
:00455029 6880010000              push 00000180
:0045502E 6870020000              push 00000270
:00455033 6A20                    push 00000020
:00455035 6A00                    push 00000000
:00455037 B9A8034B00              mov ecx, 004B03A8
:0045503C E861DDFEFF              call 00442DA2
:00455041 8B45F0                  mov eax, dword ptr [ebp-10]
:00455044 C6400200                mov [eax+02], 00
:00455048 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045504B C6410401                mov [ecx+04], 01
:0045504F C645FC00                mov [ebp-04], 00
:00455053 EB09                    jmp 0045505E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455086(U)
|
:00455055 8A55FC                  mov dl, byte ptr [ebp-04]
:00455058 80C201                  add dl, 01
:0045505B 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455053(U)
|
:0045505E 8B45FC                  mov eax, dword ptr [ebp-04]
:00455061 25FF000000              and eax, 000000FF
:00455066 83F85A                  cmp eax, 0000005A
:00455069 7D1D                    jge 00455088
:0045506B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045506E 51                      push ecx
:0045506F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455072 81E1FF000000            and ecx, 000000FF
:00455078 6BC924                  imul ecx, 00000024
:0045507B 81C108F54A00            add ecx, 004AF508
:00455081 E85C70FDFF              call 0042C0E2
:00455086 EBCD                    jmp 00455055

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455069(C)
|
:00455088 B9F8134800              mov ecx, 004813F8
:0045508D E8AE370000              call 00458840
:00455092 8B55F0                  mov edx, dword ptr [ebp-10]
:00455095 884203                  mov byte ptr [edx+03], al
:00455098 6A01                    push 00000001
:0045509A B9C8E24A00              mov ecx, 004AE2C8
:0045509F E80CA3FBFF              call 0040F3B0
:004550A4 25FF000000              and eax, 000000FF
:004550A9 50                      push eax
:004550AA E83008FBFF              call 004058DF
:004550AF 83C404                  add esp, 00000004
:004550B2 50                      push eax
:004550B3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004550B6 E86590FFFF              call 0044E120
:004550BB E872DDFBFF              call 00412E32
:004550C0 6A00                    push 00000000
:004550C2 E851F60000              call 00464718
:004550C7 83C404                  add esp, 00000004
:004550CA 837D0800                cmp dword ptr [ebp+08], 00000000
:004550CE 0F8516010000            jne 004551EA
:004550D4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004550D7 E8CD020000              call 004553A9
:004550DC C645FC00                mov [ebp-04], 00
:004550E0 EB08                    jmp 004550EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455165(U)
|
:004550E2 8A45FC                  mov al, byte ptr [ebp-04]
:004550E5 0401                    add al, 01
:004550E7 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004550E0(U)
|
:004550EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004550ED 81E1FF000000            and ecx, 000000FF
:004550F3 83F95A                  cmp ecx, 0000005A
:004550F6 7D72                    jge 0045516A
:004550F8 8B55FC                  mov edx, dword ptr [ebp-04]
:004550FB 81E2FF000000            and edx, 000000FF
:00455101 6BD224                  imul edx, 00000024
:00455104 81C208F54A00            add edx, 004AF508
:0045510A 8955F4                  mov dword ptr [ebp-0C], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045510D 6A04                    push 00000004
:0045510F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455112 E8A9A9FDFF              call 0042FAC0
:00455117 6A7E                    push 0000007E
:00455119 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045511C E8AFA8FDFF              call 0042F9D0
:00455121 8B45FC                  mov eax, dword ptr [ebp-04]
:00455124 25FF000000              and eax, 000000FF
:00455129 83F81E                  cmp eax, 0000001E
:0045512C 7D37                    jge 00455165
:0045512E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455131 E89AA5FDFF              call 0042F6D0
:00455136 8BC8                    mov ecx, eax
:00455138 6BC970                  imul ecx, 00000070
:0045513B 81C198224900            add ecx, 00492298
:00455141 E8AAF7FAFF              call 004048F0
:00455146 25FF000000              and eax, 000000FF
:0045514B 85C0                    test eax, eax
:0045514D 750C                    jne 0045515B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045514F 6A07                    push 00000007
:00455151 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455154 E85981FDFF              call 0042D2B2
:00455159 EB0A                    jmp 00455165

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045514D(C)
|
:0045515B 6A01                    push 00000001
:0045515D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455160 E84D81FDFF              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045512C(C), :00455159(U)
|
:00455165 E978FFFFFF              jmp 004550E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004550F6(C)
|
:0045516A C645FC00                mov [ebp-04], 00
:0045516E EB09                    jmp 00455179

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004551E8(U)
|
:00455170 8A4DFC                  mov cl, byte ptr [ebp-04]
:00455173 80C101                  add cl, 01
:00455176 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045516E(U)
|
:00455179 8B55FC                  mov edx, dword ptr [ebp-04]
:0045517C 81E2FF000000            and edx, 000000FF
:00455182 81FAC8000000            cmp edx, 000000C8
:00455188 7360                    jnb 004551EA
:0045518A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045518D 81E1FF000000            and ecx, 000000FF
:00455193 6BC970                  imul ecx, 00000070
:00455196 81C198224900            add ecx, 00492298
:0045519C E83FD3FAFF              call 004024E0
:004551A1 50                      push eax
:004551A2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004551A5 81E1FF000000            and ecx, 000000FF
:004551AB 6BC970                  imul ecx, 00000070
:004551AE 81C198224900            add ecx, 00492298
:004551B4 E887A6FDFF              call 0042F840
:004551B9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004551BC 81E1FF000000            and ecx, 000000FF
:004551C2 6BC970                  imul ecx, 00000070
:004551C5 81C198224900            add ecx, 00492298
:004551CB E841D3FAFF              call 00402511
:004551D0 50                      push eax
:004551D1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004551D4 81E1FF000000            and ecx, 000000FF
:004551DA 6BC970                  imul ecx, 00000070
:004551DD 81C198224900            add ecx, 00492298
:004551E3 E878A6FDFF              call 0042F860
:004551E8 EB86                    jmp 00455170

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004550CE(C), :00455188(C)
|
:004551EA C645FC00                mov [ebp-04], 00
:004551EE EB08                    jmp 004551F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045523D(U)
|
:004551F0 8A45FC                  mov al, byte ptr [ebp-04]
:004551F3 0401                    add al, 01
:004551F5 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004551EE(U)
|
:004551F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004551FB 81E1FF000000            and ecx, 000000FF
:00455201 83F95A                  cmp ecx, 0000005A
:00455204 7D39                    jge 0045523F
:00455206 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455209 81E1FF000000            and ecx, 000000FF
:0045520F 6BC924                  imul ecx, 00000024
:00455212 81C108F54A00            add ecx, 004AF508
:00455218 E8B3A6FDFF              call 0042F8D0
:0045521D 25FF000000              and eax, 000000FF
:00455222 85C0                    test eax, eax
:00455224 7417                    je 0045523D
:00455226 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455229 81E1FF000000            and ecx, 000000FF
:0045522F 6BC924                  imul ecx, 00000024
:00455232 81C108F54A00            add ecx, 004AF508
:00455238 E88172FDFF              call 0042C4BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455224(C)
|
:0045523D EBB1                    jmp 004551F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455204(C)
|
:0045523F 8B55F0                  mov edx, dword ptr [ebp-10]
:00455242 C7424801000000          mov [edx+48], 00000001
:00455249 6A01                    push 00000001
:0045524B B9180A4B00              mov ecx, 004B0A18
:00455250 E8BB17FFFF              call 00446A10
:00455255 50                      push eax
:00455256 E8E93B0100              call 00468E44
:0045525B 83C408                  add esp, 00000008
:0045525E B9A8034B00              mov ecx, 004B03A8
:00455263 E816F5FEFF              call 0044477E
:00455268 8B45F0                  mov eax, dword ptr [ebp-10]
:0045526B 83785400                cmp dword ptr [eax+54], 00000000
:0045526F 7460                    je 004552D1
:00455271 E88B3E0100              call 00469101
:00455276 85C0                    test eax, eax
:00455278 741B                    je 00455295
:0045527A 6A00                    push 00000000
:0045527C 6830F00000              push 0000F030
:00455281 6812010000              push 00000112
:00455286 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045528C 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045528D FF15D8864B00            Call dword ptr [004B86D8]
:00455293 EB3C                    jmp 004552D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455278(C)
|
:00455295 6A01                    push 00000001
:00455297 8B55F0                  mov edx, dword ptr [ebp-10]
:0045529A 8B45F0                  mov eax, dword ptr [ebp-10]
:0045529D 8B4A64                  mov ecx, dword ptr [edx+64]
:004552A0 2B485C                  sub ecx, dword ptr [eax+5C]
:004552A3 83C101                  add ecx, 00000001
:004552A6 51                      push ecx
:004552A7 8B55F0                  mov edx, dword ptr [ebp-10]
:004552AA 8B45F0                  mov eax, dword ptr [ebp-10]
:004552AD 8B4A60                  mov ecx, dword ptr [edx+60]
:004552B0 2B4858                  sub ecx, dword ptr [eax+58]
:004552B3 83C101                  add ecx, 00000001
:004552B6 51                      push ecx
:004552B7 8B55F0                  mov edx, dword ptr [ebp-10]
:004552BA 8B425C                  mov eax, dword ptr [edx+5C]
:004552BD 50                      push eax
:004552BE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004552C1 8B5158                  mov edx, dword ptr [ecx+58]
:004552C4 52                      push edx
:004552C5 A1380E4B00              mov eax, dword ptr [004B0E38]
:004552CA 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004552CB FF15FC864B00            Call dword ptr [004B86FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045526F(C), :00455293(U)
|
:004552D1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004552D4 C7414800000000          mov [ecx+48], 00000000
:004552DB 6A01                    push 00000001
:004552DD B9180A4B00              mov ecx, 004B0A18
:004552E2 E82917FFFF              call 00446A10
:004552E7 50                      push eax
:004552E8 E8573B0100              call 00468E44
:004552ED 83C408                  add esp, 00000008
:004552F0 B9A8034B00              mov ecx, 004B03A8
:004552F5 E884F4FEFF              call 0044477E
:004552FA B908F54A00              mov ecx, 004AF508
:004552FF E89C40FDFF              call 004293A0
:00455304 668B10                  mov dx, word ptr [eax]
:00455307 668955F8                mov word ptr [ebp-08], dx
:0045530B 8A45F9                  mov al, byte ptr [ebp-07]
:0045530E 50                      push eax
:0045530F 8A4DF8                  mov cl, byte ptr [ebp-08]
:00455312 51                      push ecx
:00455313 B9A8034B00              mov ecx, 004B03A8
:00455318 E81A07FFFF              call 00445A37
:0045531D B9A8034B00              mov ecx, 004B03A8
:00455322 E8E60DFFFF              call 0044610D
:00455327 E821DBFBFF              call 00412E4D
:0045532C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045532F E8FD2F0000              call 00458331
:00455334 6A00                    push 00000000
:00455336 8B55F0                  mov edx, dword ptr [ebp-10]
:00455339 660FB602                movzx ax, byte ptr [edx]
:0045533D 50                      push eax
:0045533E E85DD5FBFF              call 004128A0
:00455343 83C408                  add esp, 00000008
:00455346 B9800D4B00              mov ecx, 004B0D80
:0045534B E831C80000              call 00461B81
:00455350 E8CEDAFBFF              call 00412E23
:00455355 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045535B 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0045535C FF15A4864B00            Call dword ptr [004B86A4]
:00455362 E8EE18FDFF              call 00426C55
:00455367 8B55F0                  mov edx, dword ptr [ebp-10]
:0045536A C7424400000000          mov [edx+44], 00000000
:00455371 B9A8034B00              mov ecx, 004B03A8
:00455376 E80E15FFFF              call 00446889
:0045537B 50                      push eax
:0045537C B9A8034B00              mov ecx, 004B03A8
:00455381 E86215FFFF              call 004468E8
:00455386 B9A8034B00              mov ecx, 004B03A8
:0045538B E82015FFFF              call 004468B0
:00455390 50                      push eax
:00455391 B9A8034B00              mov ecx, 004B03A8
:00455396 E87415FFFF              call 0044690F
:0045539B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045539E E889300000              call 0045842C
:004553A3 8BE5                    mov esp, ebp
:004553A5 5D                      pop ebp
:004553A6 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004550D7   
|
:004553A9 55                      push ebp
:004553AA 8BEC                    mov ebp, esp
:004553AC 83EC3C                  sub esp, 0000003C
:004553AF 894DC8                  mov dword ptr [ebp-38], ecx
:004553B2 C645D800                mov [ebp-28], 00
:004553B6 C645E41E                mov [ebp-1C], 1E
:004553BA C645FC00                mov [ebp-04], 00
:004553BE C60590D74700FF          mov byte ptr [0047D790], FF
:004553C5 6A00                    push 00000000
:004553C7 B930DA4A00              mov ecx, 004ADA30
:004553CC E8CDE1FBFF              call 0041359E
:004553D1 50                      push eax
:004553D2 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"DATA.E4"
                                  |
:004553D4 68907A4700              push 00477A90
:004553D9 E8A9C6FBFF              call 00411A87
:004553DE 83C40C                  add esp, 0000000C
:004553E1 C745D0FFFF0000          mov [ebp-30], 0000FFFF
:004553E8 C745F400000000          mov [ebp-0C], 00000000
:004553EF 6A01                    push 00000001
:004553F1 E886F1FAFF              call 0040457C
:004553F6 83C404                  add esp, 00000004
:004553F9 25FF000000              and eax, 000000FF
:004553FE 8945EC                  mov dword ptr [ebp-14], eax
:00455401 C745DC00000000          mov [ebp-24], 00000000
:00455408 C745E800000000          mov [ebp-18], 00000000
:0045540F EB09                    jmp 0045541A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455B68(U)
|
:00455411 8B45E8                  mov eax, dword ptr [ebp-18]
:00455414 83C001                  add eax, 00000001
:00455417 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045540F(U)
|
:0045541A 837DE85A                cmp dword ptr [ebp-18], 0000005A
:0045541E 0F8349070000            jnb 00455B6D
:00455424 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00455427 51                      push ecx
:00455428 B9F8134800              mov ecx, 004813F8
:0045542D E83E9FFBFF              call 0040F370
:00455432 8945E0                  mov dword ptr [ebp-20], eax
:00455435 8B55E0                  mov edx, dword ptr [ebp-20]
:00455438 8955F8                  mov dword ptr [ebp-08], edx
:0045543B 8B45F8                  mov eax, dword ptr [ebp-08]
:0045543E 8B08                    mov ecx, dword ptr [eax]
:00455440 894DD0                  mov dword ptr [ebp-30], ecx
:00455443 8B55F8                  mov edx, dword ptr [ebp-08]
:00455446 83C204                  add edx, 00000004
:00455449 8955D4                  mov dword ptr [ebp-2C], edx
:0045544C 8B45F8                  mov eax, dword ptr [ebp-08]
:0045544F 8B4808                  mov ecx, dword ptr [eax+08]
:00455452 894DF4                  mov dword ptr [ebp-0C], ecx
:00455455 817DD0FFFF0000          cmp dword ptr [ebp-30], 0000FFFF
:0045545C 0F8406070000            je 00455B68
:00455462 817DD000040000          cmp dword ptr [ebp-30], 00000400
:00455469 0F84F9060000            je 00455B68
:0045546F B9C8E24A00              mov ecx, 004AE2C8
:00455474 E8379FFBFF              call 0040F3B0
:00455479 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_00A6 
                                  |
:0045547E 3DA6000000              cmp eax, 000000A6
:00455483 7446                    je 004554CB
:00455485 B9C8E24A00              mov ecx, 004AE2C8
:0045548A E8219FFBFF              call 0040F3B0
:0045548F 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_00A7 
                                  |
:00455494 3DA7000000              cmp eax, 000000A7
:00455499 7430                    je 004554CB
:0045549B 817DD0C8000000          cmp dword ptr [ebp-30], 000000C8
:004554A2 730A                    jnb 004554AE
:004554A4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004554A7 83E201                  and edx, 00000001
:004554AA 85D2                    test edx, edx
:004554AC 741B                    je 004554C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004554A2(C)
|
:004554AE 6A00                    push 00000000
:004554B0 8B45D0                  mov eax, dword ptr [ebp-30]
:004554B3 50                      push eax
:004554B4 6A00                    push 00000000
:004554B6 B930DA4A00              mov ecx, 004ADA30
:004554BB E8DEE0FBFF              call 0041359E
:004554C0 50                      push eax
:004554C1 E8A9C6FBFF              call 00411B6F
:004554C6 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004554AC(C)
|
:004554C9 EB43                    jmp 0045550E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455483(C), :00455499(C)
|
:004554CB 817DD0C8000000          cmp dword ptr [ebp-30], 000000C8
:004554D2 730A                    jnb 004554DE
:004554D4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004554D7 83E101                  and ecx, 00000001
:004554DA 85C9                    test ecx, ecx
:004554DC 7430                    je 0045550E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004554D2(C)
|
:004554DE 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004554E1 6BC970                  imul ecx, 00000070
:004554E4 81C198224900            add ecx, 00492298
:004554EA E890E7FAFF              call 00403C7F
:004554EF 85C0                    test eax, eax
:004554F1 751B                    jne 0045550E
:004554F3 6A00                    push 00000000
:004554F5 8B55D0                  mov edx, dword ptr [ebp-30]
:004554F8 52                      push edx
:004554F9 6A00                    push 00000000
:004554FB B930DA4A00              mov ecx, 004ADA30
:00455500 E899E0FBFF              call 0041359E
:00455505 50                      push eax
:00455506 E864C6FBFF              call 00411B6F
:0045550B 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004554C9(U), :004554DC(C), :004554F1(C)
|
:0045550E 33C0                    xor eax, eax
:00455510 A090D74700              mov al, byte ptr [0047D790]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455515 3DFF000000              cmp eax, 000000FF
:0045551A 7519                    jne 00455535
:0045551C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045551F 51                      push ecx
:00455520 E8FBB3FBFF              call 00410920
:00455525 83C404                  add esp, 00000004
:00455528 85C0                    test eax, eax
:0045552A 7409                    je 00455535
:0045552C 8A55D8                  mov dl, byte ptr [ebp-28]
:0045552F 881590D74700            mov byte ptr [0047D790], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045551A(C), :0045552A(C)
|
:00455535 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455538 83E001                  and eax, 00000001
:0045553B 85C0                    test eax, eax
:0045553D 0F8554020000            jne 00455797
:00455543 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455546 51                      push ecx
:00455547 E8D4B3FBFF              call 00410920
:0045554C 83C404                  add esp, 00000004
:0045554F 8945F0                  mov dword ptr [ebp-10], eax
:00455552 837DF000                cmp dword ptr [ebp-10], 00000000
:00455556 752B                    jne 00455583
:00455558 8B55D0                  mov edx, dword ptr [ebp-30]
:0045555B 52                      push edx
:0045555C E807070000              call 00455C68
:00455561 83C404                  add esp, 00000004
:00455564 85C0                    test eax, eax
:00455566 741B                    je 00455583
:00455568 6A00                    push 00000000
:0045556A 8B45D0                  mov eax, dword ptr [ebp-30]
:0045556D 50                      push eax
:0045556E 6A00                    push 00000000
:00455570 B930DA4A00              mov ecx, 004ADA30
:00455575 E824E0FBFF              call 0041359E
:0045557A 50                      push eax
:0045557B E8EFC5FBFF              call 00411B6F
:00455580 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455556(C), :00455566(C)
|
:00455583 33C9                    xor ecx, ecx
:00455585 837DF000                cmp dword ptr [ebp-10], 00000000
:00455589 0F94C1                  sete cl
:0045558C 51                      push ecx
:0045558D 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00455590 81E1FF000000            and ecx, 000000FF
:00455596 6BC924                  imul ecx, 00000024
:00455599 81C108F54A00            add ecx, 004AF508
:0045559F E8BC42FDFF              call 00429860
:004555A4 8B55D0                  mov edx, dword ptr [ebp-30]
:004555A7 52                      push edx
:004555A8 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004555AB 81E1FF000000            and ecx, 000000FF
:004555B1 6BC924                  imul ecx, 00000024
:004555B4 81C108F54A00            add ecx, 004AF508
:004555BA E84A69FDFF              call 0042BF09
:004555BF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004555C2 83E002                  and eax, 00000002
:004555C5 85C0                    test eax, eax
:004555C7 755E                    jne 00455627
:004555C9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004555CC 83E104                  and ecx, 00000004
:004555CF 83E904                  sub ecx, 00000004
:004555D2 F7D9                    neg ecx
:004555D4 1BC9                    sbb ecx, ecx
:004555D6 83E102                  and ecx, 00000002
:004555D9 83C101                  add ecx, 00000001
:004555DC 51                      push ecx
:004555DD 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004555E0 81E1FF000000            and ecx, 000000FF
:004555E6 6BC924                  imul ecx, 00000024
:004555E9 81C108F54A00            add ecx, 004AF508
:004555EF E8EC45FEFF              call 00439BE0
:004555F4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004555F7 83E204                  and edx, 00000004
:004555FA 33C0                    xor eax, eax
:004555FC 83FA04                  cmp edx, 00000004
:004555FF 0F94C0                  sete al
:00455602 50                      push eax
:00455603 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00455606 8A5101                  mov dl, byte ptr [ecx+01]
:00455609 52                      push edx
:0045560A 8B45D4                  mov eax, dword ptr [ebp-2C]
:0045560D 8A08                    mov cl, byte ptr [eax]
:0045560F 51                      push ecx
:00455610 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00455613 81E1FF000000            and ecx, 000000FF
:00455619 6BC924                  imul ecx, 00000024
:0045561C 81C108F54A00            add ecx, 004AF508
:00455622 E8086FFDFF              call 0042C52F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004555C7(C)
|
:00455627 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045562A 6BC970                  imul ecx, 00000070
:0045562D 81C198224900            add ecx, 00492298
:00455633 E8A8CEFAFF              call 004024E0
:00455638 50                      push eax
:00455639 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045563C 81E1FF000000            and ecx, 000000FF
:00455642 6BC924                  imul ecx, 00000024
:00455645 81C108F54A00            add ecx, 004AF508
:0045564B E81053FDFF              call 0042A960
:00455650 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455653 6BC970                  imul ecx, 00000070
:00455656 81C198224900            add ecx, 00492298
:0045565C E8B0CEFAFF              call 00402511
:00455661 50                      push eax
:00455662 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00455665 81E1FF000000            and ecx, 000000FF
:0045566B 6BC924                  imul ecx, 00000024
:0045566E 81C108F54A00            add ecx, 004AF508
:00455674 E84453FDFF              call 0042A9BD
:00455679 837DF000                cmp dword ptr [ebp-10], 00000000
:0045567D 742B                    je 004556AA
:0045567F B9C8E24A00              mov ecx, 004AE2C8
:00455684 E8279DFBFF              call 0040F3B0
:00455689 25FF000000              and eax, 000000FF
:0045568E 83F875                  cmp eax, 00000075
:00455691 7517                    jne 004556AA
:00455693 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00455696 81E1FF000000            and ecx, 000000FF
:0045569C 6BC924                  imul ecx, 00000024
:0045569F 81C108F54A00            add ecx, 004AF508
:004556A5 E8E59FFDFF              call 0042F68F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045567D(C), :00455691(C)
|
:004556AA 837DF000                cmp dword ptr [ebp-10], 00000000
:004556AE 0F85D5000000            jne 00455789
:004556B4 8B55D0                  mov edx, dword ptr [ebp-30]
:004556B7 52                      push edx
:004556B8 E8AB050000              call 00455C68
:004556BD 83C404                  add esp, 00000004
:004556C0 85C0                    test eax, eax
:004556C2 0F84C1000000            je 00455789
:004556C8 8B45D0                  mov eax, dword ptr [ebp-30]
:004556CB 50                      push eax
:004556CC E80F050000              call 00455BE0
:004556D1 83C404                  add esp, 00000004
:004556D4 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004556D7 8B5114                  mov edx, dword ptr [ecx+14]
:004556DA 52                      push edx
:004556DB 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004556DE 81E1FF000000            and ecx, 000000FF
:004556E4 6BC924                  imul ecx, 00000024
:004556E7 81C108F54A00            add ecx, 004AF508
:004556ED E81C69FDFF              call 0042C00E
:004556F2 8B45E0                  mov eax, dword ptr [ebp-20]
:004556F5 817818FF000000          cmp dword ptr [eax+18], 000000FF
:004556FC 7318                    jnb 00455716
:004556FE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455701 8B5118                  mov edx, dword ptr [ecx+18]
:00455704 52                      push edx
:00455705 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455708 6BC970                  imul ecx, 00000070
:0045570B 81C198224900            add ecx, 00492298
:00455711 E823D3FAFF              call 00402A39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004556FC(C)
|
:00455716 8B45E0                  mov eax, dword ptr [ebp-20]
:00455719 81781CFF000000          cmp dword ptr [eax+1C], 000000FF
:00455720 7318                    jnb 0045573A
:00455722 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455725 8B511C                  mov edx, dword ptr [ecx+1C]
:00455728 52                      push edx
:00455729 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045572C 6BC970                  imul ecx, 00000070
:0045572F 81C198224900            add ecx, 00492298
:00455735 E8FFD2FAFF              call 00402A39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455720(C)
|
:0045573A 8A45EC                  mov al, byte ptr [ebp-14]
:0045573D 50                      push eax
:0045573E 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455741 6BC970                  imul ecx, 00000070
:00455744 81C198224900            add ecx, 00492298
:0045574A E8B1A2FDFF              call 0042FA00
:0045574F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455752 8A5138                  mov dl, byte ptr [ecx+38]
:00455755 52                      push edx
:00455756 8B45E0                  mov eax, dword ptr [ebp-20]
:00455759 8B4834                  mov ecx, dword ptr [eax+34]
:0045575C 51                      push ecx
:0045575D 8B55E0                  mov edx, dword ptr [ebp-20]
:00455760 8A422F                  mov al, byte ptr [edx+2F]
:00455763 50                      push eax
:00455764 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455767 8A5130                  mov dl, byte ptr [ecx+30]
:0045576A 52                      push edx
:0045576B 8B45E0                  mov eax, dword ptr [ebp-20]
:0045576E 8A482E                  mov cl, byte ptr [eax+2E]
:00455771 51                      push ecx
:00455772 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00455775 81E1FF000000            and ecx, 000000FF
:0045577B 6BC924                  imul ecx, 00000024
:0045577E 81C108F54A00            add ecx, 004AF508
:00455784 E8B467FDFF              call 0042BF3D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004556AE(C), :004556C2(C)
|
:00455789 8A55D8                  mov dl, byte ptr [ebp-28]
:0045578C 80C201                  add dl, 01
:0045578F 8855D8                  mov byte ptr [ebp-28], dl
:00455792 E9D1030000              jmp 00455B68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045553D(C)
|
:00455797 8B45E4                  mov eax, dword ptr [ebp-1C]
:0045579A 25FF000000              and eax, 000000FF
:0045579F 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004557A2 890C85100A4B00          mov dword ptr [4*eax+004B0A10], ecx
:004557A9 8B55D0                  mov edx, dword ptr [ebp-30]
:004557AC 52                      push edx
:004557AD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004557B0 81E1FF000000            and ecx, 000000FF
:004557B6 6BC924                  imul ecx, 00000024
:004557B9 81C108F54A00            add ecx, 004AF508
:004557BF E84567FDFF              call 0042BF09
:004557C4 8B45E0                  mov eax, dword ptr [ebp-20]
:004557C7 8A4812                  mov cl, byte ptr [eax+12]
:004557CA 51                      push ecx
:004557CB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004557CE 81E1FF000000            and ecx, 000000FF
:004557D4 6BC924                  imul ecx, 00000024
:004557D7 81C108F54A00            add ecx, 004AF508
:004557DD E87E40FDFF              call 00429860
:004557E2 8B55D0                  mov edx, dword ptr [ebp-30]
:004557E5 52                      push edx
:004557E6 E87D040000              call 00455C68
:004557EB 83C404                  add esp, 00000004
:004557EE 85C0                    test eax, eax
:004557F0 7451                    je 00455843
:004557F2 8B45EC                  mov eax, dword ptr [ebp-14]
:004557F5 8945DC                  mov dword ptr [ebp-24], eax
:004557F8 837DDC00                cmp dword ptr [ebp-24], 00000000
:004557FC 7F07                    jg 00455805
:004557FE C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004557FC(C)
|
:00455805 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455808 0FBE5111                movsx edx, byte ptr [ecx+11]
:0045580C 8B45EC                  mov eax, dword ptr [ebp-14]
:0045580F 03C2                    add eax, edx
:00455811 8945DC                  mov dword ptr [ebp-24], eax
:00455814 837DDC00                cmp dword ptr [ebp-24], 00000000
:00455818 7F07                    jg 00455821
:0045581A C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455818(C)
|
:00455821 8A4DDC                  mov cl, byte ptr [ebp-24]
:00455824 51                      push ecx
:00455825 8B55E0                  mov edx, dword ptr [ebp-20]
:00455828 8A4210                  mov al, byte ptr [edx+10]
:0045582B 50                      push eax
:0045582C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045582F 81E1FF000000            and ecx, 000000FF
:00455835 6BC924                  imul ecx, 00000024
:00455838 81C108F54A00            add ecx, 004AF508
:0045583E E83265FDFF              call 0042BD75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004557F0(C)
|
:00455843 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455846 6BC970                  imul ecx, 00000070
:00455849 81C198224900            add ecx, 00492298
:0045584F E87CEFFAFF              call 004047D0
:00455854 25FF000000              and eax, 000000FF
:00455859 85C0                    test eax, eax
:0045585B 7540                    jne 0045589D
:0045585D 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455860 51                      push ecx
:00455861 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455864 81E1FF000000            and ecx, 000000FF
:0045586A 6BC924                  imul ecx, 00000024
:0045586D 81C108F54A00            add ecx, 004AF508
:00455873 E8689EFDFF              call 0042F6E0
:00455878 50                      push eax

* Possible StringData Ref from Data Obj ->"ĪZN]wERRG%seNo.%dfOLevel10C"
                                  |
:00455879 6814D84700              push 0047D814

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045587E 6A05                    push 00000005
:00455880 E8E732FDFF              call 00428B6C
:00455885 83C410                  add esp, 00000010
:00455888 8A55EC                  mov dl, byte ptr [ebp-14]
:0045588B 52                      push edx
:0045588C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045588F 6BC970                  imul ecx, 00000070
:00455892 81C198224900            add ecx, 00492298
:00455898 E863A1FDFF              call 0042FA00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045585B(C)
|
:0045589D C645CC00                mov [ebp-34], 00
:004558A1 EB08                    jmp 004558AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455903(U)
|
:004558A3 8A45CC                  mov al, byte ptr [ebp-34]
:004558A6 0401                    add al, 01
:004558A8 8845CC                  mov byte ptr [ebp-34], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004558A1(U)
|
:004558AB 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004558AE 81E1FF000000            and ecx, 000000FF
:004558B4 8B55E4                  mov edx, dword ptr [ebp-1C]
:004558B7 81E2FF000000            and edx, 000000FF
:004558BD 83EA1E                  sub edx, 0000001E
:004558C0 3BCA                    cmp ecx, edx
:004558C2 7D41                    jge 00455905
:004558C4 8B45CC                  mov eax, dword ptr [ebp-34]
:004558C7 25FF000000              and eax, 000000FF
:004558CC 8B0C85880A4B00          mov ecx, dword ptr [4*eax+004B0A88]
:004558D3 3B4DD0                  cmp ecx, dword ptr [ebp-30]
:004558D6 752B                    jne 00455903
:004558D8 8B55D0                  mov edx, dword ptr [ebp-30]
:004558DB 52                      push edx
:004558DC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004558DF 81E1FF000000            and ecx, 000000FF
:004558E5 6BC924                  imul ecx, 00000024
:004558E8 81C108F54A00            add ecx, 004AF508
:004558EE E8ED9DFDFF              call 0042F6E0
:004558F3 50                      push eax

* Possible StringData Ref from Data Obj ->"ĪZN]wERRORG%seNo.%3dfФFC"
                                  |
:004558F4 683CD84700              push 0047D83C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004558F9 6A05                    push 00000005
:004558FB E86C32FDFF              call 00428B6C
:00455900 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004558D6(C)
|
:00455903 EB9E                    jmp 004558A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004558C2(C)
|
:00455905 8B45D0                  mov eax, dword ptr [ebp-30]
:00455908 50                      push eax
:00455909 E8C0030000              call 00455CCE
:0045590E 83C404                  add esp, 00000004
:00455911 85C0                    test eax, eax
:00455913 7472                    je 00455987
:00455915 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455918 51                      push ecx
:00455919 E8C2020000              call 00455BE0
:0045591E 83C404                  add esp, 00000004
:00455921 8B55E0                  mov edx, dword ptr [ebp-20]
:00455924 8B4214                  mov eax, dword ptr [edx+14]
:00455927 50                      push eax
:00455928 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045592B 81E1FF000000            and ecx, 000000FF
:00455931 6BC924                  imul ecx, 00000024
:00455934 81C108F54A00            add ecx, 004AF508
:0045593A E8CF66FDFF              call 0042C00E
:0045593F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455942 817918FF000000          cmp dword ptr [ecx+18], 000000FF
:00455949 7318                    jnb 00455963
:0045594B 8B55E0                  mov edx, dword ptr [ebp-20]
:0045594E 8B4218                  mov eax, dword ptr [edx+18]
:00455951 50                      push eax
:00455952 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455955 6BC970                  imul ecx, 00000070
:00455958 81C198224900            add ecx, 00492298
:0045595E E8D6D0FAFF              call 00402A39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455949(C)
|
:00455963 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455966 81791CFF000000          cmp dword ptr [ecx+1C], 000000FF
:0045596D 7318                    jnb 00455987
:0045596F 8B55E0                  mov edx, dword ptr [ebp-20]
:00455972 8B421C                  mov eax, dword ptr [edx+1C]
:00455975 50                      push eax
:00455976 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455979 6BC970                  imul ecx, 00000070
:0045597C 81C198224900            add ecx, 00492298
:00455982 E8B2D0FAFF              call 00402A39

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455913(C), :0045596D(C)
|
:00455987 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045598A 51                      push ecx
:0045598B E8D8020000              call 00455C68
:00455990 83C404                  add esp, 00000004
:00455993 85C0                    test eax, eax
:00455995 0F84F4000000            je 00455A8F
:0045599B 8B55E0                  mov edx, dword ptr [ebp-20]
:0045599E 8A4238                  mov al, byte ptr [edx+38]
:004559A1 50                      push eax
:004559A2 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004559A5 8B5134                  mov edx, dword ptr [ecx+34]
:004559A8 52                      push edx
:004559A9 8B45E0                  mov eax, dword ptr [ebp-20]
:004559AC 8A482F                  mov cl, byte ptr [eax+2F]
:004559AF 51                      push ecx
:004559B0 8B55E0                  mov edx, dword ptr [ebp-20]
:004559B3 8A4230                  mov al, byte ptr [edx+30]
:004559B6 50                      push eax
:004559B7 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004559BA 8A512E                  mov dl, byte ptr [ecx+2E]
:004559BD 52                      push edx
:004559BE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004559C1 81E1FF000000            and ecx, 000000FF
:004559C7 6BC924                  imul ecx, 00000024
:004559CA 81C108F54A00            add ecx, 004AF508
:004559D0 E86865FDFF              call 0042BF3D
:004559D5 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004559D8 6BC970                  imul ecx, 00000070
:004559DB 81C198224900            add ecx, 00492298
:004559E1 E8EAEDFAFF              call 004047D0
:004559E6 25FF000000              and eax, 000000FF
:004559EB 83F814                  cmp eax, 00000014
:004559EE 0F8C84000000            jl 00455A78
:004559F4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004559F7 81E1FF000000            and ecx, 000000FF
:004559FD 6BC924                  imul ecx, 00000024
:00455A00 81C108F54A00            add ecx, 004AF508
:00455A06 E875A2FDFF              call 0042FC80
:00455A0B 25FF000000              and eax, 000000FF
:00455A10 83F816                  cmp eax, 00000016
:00455A13 7D63                    jge 00455A78
:00455A15 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455A18 81E1FF000000            and ecx, 000000FF
:00455A1E 6BC924                  imul ecx, 00000024
:00455A21 81C108F54A00            add ecx, 004AF508
:00455A27 E854A2FDFF              call 0042FC80
:00455A2C 25FF000000              and eax, 000000FF
:00455A31 99                      cdq
:00455A32 33C2                    xor eax, edx
:00455A34 2BC2                    sub eax, edx
:00455A36 83E001                  and eax, 00000001
:00455A39 33C2                    xor eax, edx
:00455A3B 2BC2                    sub eax, edx
:00455A3D 85C0                    test eax, eax
:00455A3F 7537                    jne 00455A78
:00455A41 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455A44 81E1FF000000            and ecx, 000000FF
:00455A4A 6BC924                  imul ecx, 00000024
:00455A4D 81C108F54A00            add ecx, 004AF508
:00455A53 E828A2FDFF              call 0042FC80
:00455A58 25FF000000              and eax, 000000FF
:00455A5D 83C001                  add eax, 00000001
:00455A60 50                      push eax
:00455A61 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455A64 81E1FF000000            and ecx, 000000FF
:00455A6A 6BC924                  imul ecx, 00000024
:00455A6D 81C108F54A00            add ecx, 004AF508
:00455A73 E8082E0000              call 00458880

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004559EE(C), :00455A13(C), :00455A3F(C)
|
:00455A78 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455A7B 81E1FF000000            and ecx, 000000FF
:00455A81 6BC924                  imul ecx, 00000024
:00455A84 81C108F54A00            add ecx, 004AF508
:00455A8A E81E70FDFF              call 0042CAAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455995(C)
|
:00455A8F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455A92 83E002                  and eax, 00000002
:00455A95 85C0                    test eax, eax
:00455A97 755E                    jne 00455AF7
:00455A99 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455A9C 83E104                  and ecx, 00000004
:00455A9F 83E904                  sub ecx, 00000004
:00455AA2 F7D9                    neg ecx
:00455AA4 1BC9                    sbb ecx, ecx
:00455AA6 83E102                  and ecx, 00000002
:00455AA9 83C101                  add ecx, 00000001
:00455AAC 51                      push ecx
:00455AAD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455AB0 81E1FF000000            and ecx, 000000FF
:00455AB6 6BC924                  imul ecx, 00000024
:00455AB9 81C108F54A00            add ecx, 004AF508
:00455ABF E81C41FEFF              call 00439BE0
:00455AC4 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455AC7 83E204                  and edx, 00000004
:00455ACA 33C0                    xor eax, eax
:00455ACC 83FA04                  cmp edx, 00000004
:00455ACF 0F94C0                  sete al
:00455AD2 50                      push eax
:00455AD3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00455AD6 8A5101                  mov dl, byte ptr [ecx+01]
:00455AD9 52                      push edx
:00455ADA 8B45D4                  mov eax, dword ptr [ebp-2C]
:00455ADD 8A08                    mov cl, byte ptr [eax]
:00455ADF 51                      push ecx
:00455AE0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455AE3 81E1FF000000            and ecx, 000000FF
:00455AE9 6BC924                  imul ecx, 00000024
:00455AEC 81C108F54A00            add ecx, 004AF508
:00455AF2 E8386AFDFF              call 0042C52F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455A97(C)
|
:00455AF7 8B55E0                  mov edx, dword ptr [ebp-20]
:00455AFA 8A420C                  mov al, byte ptr [edx+0C]
:00455AFD 50                      push eax
:00455AFE 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455B01 51                      push ecx
:00455B02 B9880B4B00              mov ecx, 004B0B88
:00455B07 E8A8340000              call 00458FB4
:00455B0C 8B55E0                  mov edx, dword ptr [ebp-20]
:00455B0F 33C0                    xor eax, eax
:00455B11 8A420C                  mov al, byte ptr [edx+0C]
:00455B14 8945C4                  mov dword ptr [ebp-3C], eax
:00455B17 837DC406                cmp dword ptr [ebp-3C], 00000006
:00455B1B 7742                    ja 00455B5F
:00455B1D 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00455B20 FF248DC45B4500          jmp dword ptr [4*ecx+00455BC4]
:00455B27 EB36                    jmp 00455B5F
:00455B29 8B55E0                  mov edx, dword ptr [ebp-20]
:00455B2C 33C0                    xor eax, eax
:00455B2E 668B420E                mov ax, word ptr [edx+0E]
:00455B32 50                      push eax
:00455B33 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00455B36 51                      push ecx
:00455B37 B9880B4B00              mov ecx, 004B0B88
:00455B3C E8D03B0000              call 00459711
:00455B41 EB1C                    jmp 00455B5F
:00455B43 8B55E0                  mov edx, dword ptr [ebp-20]
:00455B46 8A420F                  mov al, byte ptr [edx+0F]
:00455B49 50                      push eax
:00455B4A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455B4D 8A510E                  mov dl, byte ptr [ecx+0E]
:00455B50 52                      push edx
:00455B51 8B45D0                  mov eax, dword ptr [ebp-30]
:00455B54 50                      push eax
:00455B55 B9880B4B00              mov ecx, 004B0B88
:00455B5A E8233B0000              call 00459682

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455B1B(C), :00455B27(U), :00455B41(U)
|
:00455B5F 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00455B62 80C101                  add cl, 01
:00455B65 884DE4                  mov byte ptr [ebp-1C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045545C(C), :00455469(C), :00455792(U)
|
:00455B68 E9A4F8FFFF              jmp 00455411

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045541E(C)
|
:00455B6D EB09                    jmp 00455B78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455BB4(U)
|
:00455B6F 8A55E4                  mov dl, byte ptr [ebp-1C]
:00455B72 80C201                  add dl, 01
:00455B75 8855E4                  mov byte ptr [ebp-1C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455B6D(U)
|
:00455B78 8B45E4                  mov eax, dword ptr [ebp-1C]
:00455B7B 25FF000000              and eax, 000000FF
:00455B80 83F85A                  cmp eax, 0000005A
:00455B83 7D31                    jge 00455BB6
:00455B85 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00455B88 51                      push ecx
:00455B89 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455B8C 81E1FF000000            and ecx, 000000FF
:00455B92 6BC924                  imul ecx, 00000024
:00455B95 81C108F54A00            add ecx, 004AF508
:00455B9B E84265FDFF              call 0042C0E2
:00455BA0 8B55E4                  mov edx, dword ptr [ebp-1C]
:00455BA3 81E2FF000000            and edx, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455BA9 C70495100A4B00FF000000  mov dword ptr [4*edx+004B0A10], 000000FF
:00455BB4 EBB9                    jmp 00455B6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455B83(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455BB6 C705780B4B00FF000000    mov dword ptr [004B0B78], 000000FF
:00455BC0 8BE5                    mov esp, ebp
:00455BC2 5D                      pop ebp
:00455BC3 C3                      ret



:00455BC4 275B4500                DWORD 00455B27
:00455BC8 5F5B4500                DWORD 00455B5F
:00455BCC 5F5B4500                DWORD 00455B5F
:00455BD0 295B4500                DWORD 00455B29
:00455BD4 435B4500                DWORD 00455B43
:00455BD8 295B4500                DWORD 00455B29
:00455BDC 435B4500                DWORD 00455B43



* Referenced by a CALL at Addresses:
|:004556CC   , :00455919   
|
:00455BE0 55                      push ebp
:00455BE1 8BEC                    mov ebp, esp
:00455BE3 83EC08                  sub esp, 00000008
:00455BE6 C745FC00000000          mov [ebp-04], 00000000
:00455BED C745F800000000          mov [ebp-08], 00000000
:00455BF4 EB09                    jmp 00455BFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455C2B(U), :00455C62(U)
|
:00455BF6 8B45F8                  mov eax, dword ptr [ebp-08]
:00455BF9 83C001                  add eax, 00000001
:00455BFC 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455BF4(U)
|
:00455BFF 837DF808                cmp dword ptr [ebp-08], 00000008
:00455C03 735F                    jnb 00455C64
:00455C05 8A4DF8                  mov cl, byte ptr [ebp-08]
:00455C08 51                      push ecx
:00455C09 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455C0C 6BC970                  imul ecx, 00000070
:00455C0F 81C198224900            add ecx, 00492298
:00455C15 E8F6EBFAFF              call 00404810
:00455C1A 25FF000000              and eax, 000000FF
:00455C1F 8945FC                  mov dword ptr [ebp-04], eax
:00455C22 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00455C29 7502                    jne 00455C2D
:00455C2B EBC9                    jmp 00455BF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C29(C)
|
:00455C2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455C30 6BC933                  imul ecx, 00000033
:00455C33 81C1C8EF4800            add ecx, 0048EFC8
:00455C39 E852EAFAFF              call 00404690
:00455C3E 25FF000000              and eax, 000000FF
:00455C43 83F807                  cmp eax, 00000007
:00455C46 751A                    jne 00455C62

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455C48 68FF000000              push 000000FF
:00455C4D 8A55F8                  mov dl, byte ptr [ebp-08]
:00455C50 52                      push edx
:00455C51 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455C54 6BC970                  imul ecx, 00000070
:00455C57 81C198224900            add ecx, 00492298
:00455C5D E8CEEBFAFF              call 00404830

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C46(C)
|
:00455C62 EB92                    jmp 00455BF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C03(C)
|
:00455C64 8BE5                    mov esp, ebp
:00455C66 5D                      pop ebp
:00455C67 C3                      ret



* Referenced by a CALL at Addresses:
|:0045555C   , :004556B8   , :004557E6   , :0045598B   
|
:00455C68 55                      push ebp
:00455C69 8BEC                    mov ebp, esp
:00455C6B B9C8E24A00              mov ecx, 004AE2C8
:00455C70 E83B97FBFF              call 0040F3B0
:00455C75 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_00A7 
                                  |
:00455C7A 3DA7000000              cmp eax, 000000A7
:00455C7F 7518                    jne 00455C99
:00455C81 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455C84 6BC970                  imul ecx, 00000070
:00455C87 81C198224900            add ecx, 00492298
:00455C8D E8EDDFFAFF              call 00403C7F
:00455C92 F7D8                    neg eax
:00455C94 1BC0                    sbb eax, eax
:00455C96 40                      inc eax
:00455C97 EB33                    jmp 00455CCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C7F(C)
|
:00455C99 B9C8E24A00              mov ecx, 004AE2C8
:00455C9E E80D97FBFF              call 0040F3B0
:00455CA3 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_00A6 
                                  |
:00455CA8 3DA6000000              cmp eax, 000000A6
:00455CAD 7518                    jne 00455CC7
:00455CAF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455CB2 6BC970                  imul ecx, 00000070
:00455CB5 81C198224900            add ecx, 00492298
:00455CBB E8BFDFFAFF              call 00403C7F
:00455CC0 F7D8                    neg eax
:00455CC2 1BC0                    sbb eax, eax
:00455CC4 40                      inc eax
:00455CC5 EB05                    jmp 00455CCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455CAD(C)
|
:00455CC7 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455C97(U), :00455CC5(U)
|
:00455CCC 5D                      pop ebp
:00455CCD C3                      ret



* Referenced by a CALL at Address:
|:00455909   
|
:00455CCE 55                      push ebp
:00455CCF 8BEC                    mov ebp, esp
:00455CD1 B9C8E24A00              mov ecx, 004AE2C8
:00455CD6 E8D596FBFF              call 0040F3B0
:00455CDB 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_00A7 
                                  |
:00455CE0 3DA7000000              cmp eax, 000000A7
:00455CE5 7553                    jne 00455D3A
:00455CE7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455CEA 6BC970                  imul ecx, 00000070
:00455CED 81C198224900            add ecx, 00492298
:00455CF3 E887DFFAFF              call 00403C7F
:00455CF8 85C0                    test eax, eax
:00455CFA 743E                    je 00455D3A
:00455CFC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455CFF 6BC970                  imul ecx, 00000070
:00455D02 81C198224900            add ecx, 00492298
:00455D08 E8E3EBFAFF              call 004048F0
:00455D0D 25FF000000              and eax, 000000FF
:00455D12 85C0                    test eax, eax
:00455D14 7424                    je 00455D3A
:00455D16 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455D19 6BC970                  imul ecx, 00000070
:00455D1C 81C198224900            add ecx, 00492298
:00455D22 E8C9EAFAFF              call 004047F0
:00455D27 25FF000000              and eax, 000000FF
:00455D2C 33C9                    xor ecx, ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455D2E 3DFF000000              cmp eax, 000000FF
:00455D33 0F94C1                  sete cl
:00455D36 8BC1                    mov eax, ecx
:00455D38 EB05                    jmp 00455D3F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455CE5(C), :00455CFA(C), :00455D14(C)
|
:00455D3A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455D38(U)
|
:00455D3F 5D                      pop ebp
:00455D40 C3                      ret



* Referenced by a CALL at Address:
|:00457286   
|
:00455D41 55                      push ebp
:00455D42 8BEC                    mov ebp, esp
:00455D44 51                      push ecx
:00455D45 894DFC                  mov dword ptr [ebp-04], ecx
:00455D48 33C0                    xor eax, eax
:00455D4A 8BE5                    mov esp, ebp
:00455D4C 5D                      pop ebp
:00455D4D C3                      ret



* Referenced by a CALL at Addresses:
|:0045602E   , :00456292   
|
:00455D4E 55                      push ebp
:00455D4F 8BEC                    mov ebp, esp
:00455D51 83EC1C                  sub esp, 0000001C
:00455D54 894DE8                  mov dword ptr [ebp-18], ecx
:00455D57 837D0800                cmp dword ptr [ebp+08], 00000000
:00455D5B 740A                    je 00455D67
:00455D5D C645F800                mov [ebp-08], 00
:00455D61 C645F01E                mov [ebp-10], 1E
:00455D65 EB08                    jmp 00455D6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455D5B(C)
|
:00455D67 C645F81E                mov [ebp-08], 1E
:00455D6B C645F05A                mov [ebp-10], 5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455D65(U)
|
:00455D6F 8A45F8                  mov al, byte ptr [ebp-08]
:00455D72 8845F4                  mov byte ptr [ebp-0C], al
:00455D75 EB09                    jmp 00455D80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455DB1(U)
|
:00455D77 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00455D7A 80C101                  add cl, 01
:00455D7D 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455D75(U)
|
:00455D80 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455D83 81E2FF000000            and edx, 000000FF
:00455D89 8B45F0                  mov eax, dword ptr [ebp-10]
:00455D8C 25FF000000              and eax, 000000FF
:00455D91 3BD0                    cmp edx, eax
:00455D93 7D1E                    jge 00455DB3

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455D95 68FF000000              push 000000FF
:00455D9A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455D9D 81E1FF000000            and ecx, 000000FF
:00455DA3 6BC924                  imul ecx, 00000024
:00455DA6 81C108F54A00            add ecx, 004AF508
:00455DAC E8AF2A0000              call 00458860
:00455DB1 EBC4                    jmp 00455D77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455D93(C)
|
:00455DB3 C645FC00                mov [ebp-04], 00
:00455DB7 8A4DF8                  mov cl, byte ptr [ebp-08]
:00455DBA 884DF4                  mov byte ptr [ebp-0C], cl
:00455DBD EB09                    jmp 00455DC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455E57(U)
|
:00455DBF 8A55F4                  mov dl, byte ptr [ebp-0C]
:00455DC2 80C201                  add dl, 01
:00455DC5 8855F4                  mov byte ptr [ebp-0C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455DBD(U)
|
:00455DC8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455DCB 25FF000000              and eax, 000000FF
:00455DD0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00455DD3 81E1FF000000            and ecx, 000000FF
:00455DD9 3BC1                    cmp eax, ecx
:00455DDB 7D7F                    jge 00455E5C
:00455DDD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455DE0 81E1FF000000            and ecx, 000000FF
:00455DE6 6BC924                  imul ecx, 00000024
:00455DE9 81C108F54A00            add ecx, 004AF508
:00455DEF E8AC35FDFF              call 004293A0
:00455DF4 668B10                  mov dx, word ptr [eax]
:00455DF7 668955EC                mov word ptr [ebp-14], dx
:00455DFB 8D45EC                  lea eax, dword ptr [ebp-14]
:00455DFE 50                      push eax
:00455DFF E88519FFFF              call 00447789
:00455E04 83C404                  add esp, 00000004
:00455E07 85C0                    test eax, eax
:00455E09 744C                    je 00455E57
:00455E0B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455E0E 81E1FF000000            and ecx, 000000FF
:00455E14 6BC924                  imul ecx, 00000024
:00455E17 81C108F54A00            add ecx, 004AF508
:00455E1D E8DE3CFEFF              call 00439B00
:00455E22 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455E27 3DFF000000              cmp eax, 000000FF
:00455E2C 7529                    jne 00455E57
:00455E2E 8A4DFC                  mov cl, byte ptr [ebp-04]
:00455E31 884DE7                  mov byte ptr [ebp-19], cl
:00455E34 8A55E7                  mov dl, byte ptr [ebp-19]
:00455E37 52                      push edx
:00455E38 8A45FC                  mov al, byte ptr [ebp-04]
:00455E3B 0401                    add al, 01
:00455E3D 8845FC                  mov byte ptr [ebp-04], al
:00455E40 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455E43 81E1FF000000            and ecx, 000000FF
:00455E49 6BC924                  imul ecx, 00000024
:00455E4C 81C108F54A00            add ecx, 004AF508
:00455E52 E8092A0000              call 00458860

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455E09(C), :00455E2C(C)
|
:00455E57 E963FFFFFF              jmp 00455DBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455DDB(C)
|
:00455E5C 8A4DF8                  mov cl, byte ptr [ebp-08]
:00455E5F 884DF4                  mov byte ptr [ebp-0C], cl
:00455E62 EB09                    jmp 00455E6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455EEA(U)
|
:00455E64 8A55F4                  mov dl, byte ptr [ebp-0C]
:00455E67 80C201                  add dl, 01
:00455E6A 8855F4                  mov byte ptr [ebp-0C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455E62(U)
|
:00455E6D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455E70 25FF000000              and eax, 000000FF
:00455E75 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00455E78 81E1FF000000            and ecx, 000000FF
:00455E7E 3BC1                    cmp eax, ecx
:00455E80 7D6D                    jge 00455EEF
:00455E82 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455E85 81E1FF000000            and ecx, 000000FF
:00455E8B 6BC924                  imul ecx, 00000024
:00455E8E 81C108F54A00            add ecx, 004AF508
:00455E94 E87F29FFFF              call 00448818
:00455E99 85C0                    test eax, eax
:00455E9B 744D                    je 00455EEA
:00455E9D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455EA0 81E1FF000000            and ecx, 000000FF
:00455EA6 6BC924                  imul ecx, 00000024
:00455EA9 81C108F54A00            add ecx, 004AF508
:00455EAF E84C3CFEFF              call 00439B00
:00455EB4 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455EB9 3DFF000000              cmp eax, 000000FF
:00455EBE 752A                    jne 00455EEA
:00455EC0 8A55FC                  mov dl, byte ptr [ebp-04]
:00455EC3 8855E6                  mov byte ptr [ebp-1A], dl
:00455EC6 8A45E6                  mov al, byte ptr [ebp-1A]
:00455EC9 50                      push eax
:00455ECA 8A4DFC                  mov cl, byte ptr [ebp-04]
:00455ECD 80C101                  add cl, 01
:00455ED0 884DFC                  mov byte ptr [ebp-04], cl
:00455ED3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455ED6 81E1FF000000            and ecx, 000000FF
:00455EDC 6BC924                  imul ecx, 00000024
:00455EDF 81C108F54A00            add ecx, 004AF508
:00455EE5 E876290000              call 00458860

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455E9B(C), :00455EBE(C)
|
:00455EEA E975FFFFFF              jmp 00455E64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455E80(C)
|
:00455EEF 8A55F8                  mov dl, byte ptr [ebp-08]
:00455EF2 8855F4                  mov byte ptr [ebp-0C], dl
:00455EF5 EB08                    jmp 00455EFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455F62(U)
|
:00455EF7 8A45F4                  mov al, byte ptr [ebp-0C]
:00455EFA 0401                    add al, 01
:00455EFC 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455EF5(U)
|
:00455EFF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455F02 81E1FF000000            and ecx, 000000FF
:00455F08 8B55F0                  mov edx, dword ptr [ebp-10]
:00455F0B 81E2FF000000            and edx, 000000FF
:00455F11 3BCA                    cmp ecx, edx
:00455F13 7D4F                    jge 00455F64
:00455F15 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455F18 81E1FF000000            and ecx, 000000FF
:00455F1E 6BC924                  imul ecx, 00000024
:00455F21 81C108F54A00            add ecx, 004AF508
:00455F27 E8D43BFEFF              call 00439B00
:00455F2C 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00455F31 3DFF000000              cmp eax, 000000FF
:00455F36 752A                    jne 00455F62
:00455F38 8A45FC                  mov al, byte ptr [ebp-04]
:00455F3B 8845E5                  mov byte ptr [ebp-1B], al
:00455F3E 8A4DE5                  mov cl, byte ptr [ebp-1B]
:00455F41 51                      push ecx
:00455F42 8A55FC                  mov dl, byte ptr [ebp-04]
:00455F45 80C201                  add dl, 01
:00455F48 8855FC                  mov byte ptr [ebp-04], dl
:00455F4B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455F4E 81E1FF000000            and ecx, 000000FF
:00455F54 6BC924                  imul ecx, 00000024
:00455F57 81C108F54A00            add ecx, 004AF508
:00455F5D E8FE280000              call 00458860

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455F36(C)
|
:00455F62 EB93                    jmp 00455EF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455F13(C)
|
:00455F64 8BE5                    mov esp, ebp
:00455F66 5D                      pop ebp
:00455F67 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00457BC6   
|
:00455F6A 55                      push ebp
:00455F6B 8BEC                    mov ebp, esp
:00455F6D 83EC28                  sub esp, 00000028
:00455F70 894DD8                  mov dword ptr [ebp-28], ecx
:00455F73 8B45D8                  mov eax, dword ptr [ebp-28]
:00455F76 C7402C00000000          mov [eax+2C], 00000000
:00455F7D C645F400                mov [ebp-0C], 00
:00455F81 EB09                    jmp 00455F8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004562AA(U)
|
:00455F83 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00455F86 80C101                  add cl, 01
:00455F89 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455F81(U)
|
:00455F8C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455F8F 81E2FF000000            and edx, 000000FF
:00455F95 83FA02                  cmp edx, 00000002
:00455F98 0F8D11030000            jnl 004562AF
:00455F9E 8B45D8                  mov eax, dword ptr [ebp-28]
:00455FA1 33C9                    xor ecx, ecx
:00455FA3 8A4801                  mov cl, byte ptr [eax+01]
:00455FA6 85C9                    test ecx, ecx
:00455FA8 0F8501030000            jne 004562AF
:00455FAE E89B650100              call 0046C54E
:00455FB3 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455FB6 81E2FF000000            and edx, 000000FF
:00455FBC 83FA01                  cmp edx, 00000001
:00455FBF 755B                    jne 0045601C

* Possible StringData Ref from Data Obj ->"ĭxp"
                                  |
:00455FC1 6864D84700              push 0047D864
:00455FC6 6A00                    push 00000000
:00455FC8 E89F2BFDFF              call 00428B6C
:00455FCD 83C408                  add esp, 00000008
:00455FD0 C645E41E                mov [ebp-1C], 1E
:00455FD4 EB08                    jmp 00455FDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045601A(U)
|
:00455FD6 8A45E4                  mov al, byte ptr [ebp-1C]
:00455FD9 0401                    add al, 01
:00455FDB 8845E4                  mov byte ptr [ebp-1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455FD4(U)
|
:00455FDE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455FE1 81E1FF000000            and ecx, 000000FF
:00455FE7 83F95A                  cmp ecx, 0000005A
:00455FEA 7D30                    jge 0045601C
:00455FEC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455FEF 81E1FF000000            and ecx, 000000FF
:00455FF5 6BC924                  imul ecx, 00000024
:00455FF8 81C108F54A00            add ecx, 004AF508
:00455FFE E8D954FDFF              call 0042B4DC
:00456003 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00456006 81E1FF000000            and ecx, 000000FF
:0045600C 6BC924                  imul ecx, 00000024
:0045600F 81C108F54A00            add ecx, 004AF508
:00456015 E8735BFDFF              call 0042BB8D
:0045601A EBBA                    jmp 00455FD6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455FBF(C), :00455FEA(C)
|
:0045601C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045601F 81E2FF000000            and edx, 000000FF
:00456025 F7DA                    neg edx
:00456027 1BD2                    sbb edx, edx
:00456029 42                      inc edx
:0045602A 52                      push edx
:0045602B 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045602E E81BFDFFFF              call 00455D4E
:00456033 C745E800000000          mov [ebp-18], 00000000
:0045603A C645FC00                mov [ebp-04], 00
:0045603E EB08                    jmp 00456048

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004562A5(U)
|
:00456040 8A45FC                  mov al, byte ptr [ebp-04]
:00456043 0401                    add al, 01
:00456045 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045603E(U)
|
:00456048 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045604B 33D2                    xor edx, edx
:0045604D 8A5101                  mov dl, byte ptr [ecx+01]
:00456050 85D2                    test edx, edx
:00456052 0F8552020000            jne 004562AA
:00456058 0FBE45FC                movsx eax, byte ptr [ebp-04]
:0045605C 83F85A                  cmp eax, 0000005A
:0045605F 0F8D45020000            jnl 004562AA
:00456065 E8E4640100              call 0046C54E
:0045606A 33C9                    xor ecx, ecx
:0045606C 8A0D7C0B4B00            mov cl, byte ptr [004B0B7C]
:00456072 83E101                  and ecx, 00000001
:00456075 85C9                    test ecx, ecx
:00456077 0F848D000000            je 0045610A
:0045607D B980594800              mov ecx, 00485980
:00456082 E8E6A0FCFF              call 0042016D
:00456087 83F802                  cmp eax, 00000002
:0045608A 757E                    jne 0045610A
:0045608C 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:00456092 80E2FE                  and dl, FE
:00456095 88157C0B4B00            mov byte ptr [004B0B7C], dl

* Possible StringData Ref from Data Obj ->"hX0HC"
                                  |
:0045609B 6870D84700              push 0047D870
:004560A0 6A00                    push 00000000
:004560A2 E8C52AFDFF              call 00428B6C
:004560A7 83C408                  add esp, 00000008
:004560AA C645E000                mov [ebp-20], 00
:004560AE EB08                    jmp 004560B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456103(U)
|
:004560B0 8A45E0                  mov al, byte ptr [ebp-20]
:004560B3 0401                    add al, 01
:004560B5 8845E0                  mov byte ptr [ebp-20], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004560AE(U)
|
:004560B8 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004560BB 81E1FF000000            and ecx, 000000FF
:004560C1 83F91E                  cmp ecx, 0000001E
:004560C4 7D3F                    jge 00456105
:004560C6 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004560C9 81E1FF000000            and ecx, 000000FF
:004560CF 6BC924                  imul ecx, 00000024
:004560D2 81C108F54A00            add ecx, 004AF508
:004560D8 E8F395FDFF              call 0042F6D0
:004560DD 50                      push eax
:004560DE E83DA8FBFF              call 00410920
:004560E3 83C404                  add esp, 00000004
:004560E6 85C0                    test eax, eax
:004560E8 7419                    je 00456103

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004560EA 6A07                    push 00000007
:004560EC 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004560EF 81E1FF000000            and ecx, 000000FF
:004560F5 6BC924                  imul ecx, 00000024
:004560F8 81C108F54A00            add ecx, 004AF508
:004560FE E8AF71FDFF              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004560E8(C)
|
:00456103 EBAB                    jmp 004560B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004560C4(C)
|
:00456105 E9DB010000              jmp 004562E5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456077(C), :0045608A(C)
|
:0045610A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045610D 81E2FF000000            and edx, 000000FF
:00456113 F7DA                    neg edx
:00456115 1BD2                    sbb edx, edx
:00456117 83E21E                  and edx, 0000001E
:0045611A 8855EC                  mov byte ptr [ebp-14], dl
:0045611D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456120 25FF000000              and eax, 000000FF
:00456125 F7D8                    neg eax
:00456127 1AC0                    sbb al, al
:00456129 243C                    and al, 3C
:0045612B 041E                    add al, 1E
:0045612D 8845F8                  mov byte ptr [ebp-08], al
:00456130 8A4DEC                  mov cl, byte ptr [ebp-14]
:00456133 884DF0                  mov byte ptr [ebp-10], cl
:00456136 EB09                    jmp 00456141

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456191(U), :00456272(U)
|
:00456138 8A55F0                  mov dl, byte ptr [ebp-10]
:0045613B 80C201                  add dl, 01
:0045613E 8855F0                  mov byte ptr [ebp-10], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456136(U)
|
:00456141 8B45F0                  mov eax, dword ptr [ebp-10]
:00456144 25FF000000              and eax, 000000FF
:00456149 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045614C 81E1FF000000            and ecx, 000000FF
:00456152 3BC1                    cmp eax, ecx
:00456154 0F8D1D010000            jnl 00456277
:0045615A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045615D 81E1FF000000            and ecx, 000000FF
:00456163 6BC924                  imul ecx, 00000024
:00456166 81C108F54A00            add ecx, 004AF508
:0045616C E83593FDFF              call 0042F4A6
:00456171 85C0                    test eax, eax
:00456173 751E                    jne 00456193
:00456175 6880000000              push 00000080
:0045617A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045617D 81E1FF000000            and ecx, 000000FF
:00456183 6BC924                  imul ecx, 00000024
:00456186 81C108F54A00            add ecx, 004AF508
:0045618C E88892FDFF              call 0042F419
:00456191 EBA5                    jmp 00456138

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456173(C)
|
:00456193 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456196 81E1FF000000            and ecx, 000000FF
:0045619C 6BC924                  imul ecx, 00000024
:0045619F 81C108F54A00            add ecx, 004AF508
:004561A5 E85639FEFF              call 00439B00
:004561AA 25FF000000              and eax, 000000FF
:004561AF 0FBE55FC                movsx edx, byte ptr [ebp-04]
:004561B3 3BC2                    cmp eax, edx
:004561B5 0F85B7000000            jne 00456272
:004561BB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004561BE 81E1FF000000            and ecx, 000000FF
:004561C4 6BC924                  imul ecx, 00000024
:004561C7 81C108F54A00            add ecx, 004AF508
:004561CD E81E97FDFF              call 0042F8F0
:004561D2 25FF000000              and eax, 000000FF
:004561D7 83F807                  cmp eax, 00000007
:004561DA 0F8492000000            je 00456272
:004561E0 6A40                    push 00000040
:004561E2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004561E5 81E1FF000000            and ecx, 000000FF
:004561EB 6BC924                  imul ecx, 00000024
:004561EE 81C108F54A00            add ecx, 004AF508
:004561F4 E8F798FDFF              call 0042FAF0
:004561F9 85C0                    test eax, eax
:004561FB 7575                    jne 00456272
:004561FD 6880000000              push 00000080
:00456202 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456205 81E1FF000000            and ecx, 000000FF
:0045620B 6BC924                  imul ecx, 00000024
:0045620E 81C108F54A00            add ecx, 004AF508
:00456214 E8D798FDFF              call 0042FAF0
:00456219 85C0                    test eax, eax
:0045621B 7555                    jne 00456272
:0045621D 33C0                    xor eax, eax
:0045621F A07C0B4B00              mov al, byte ptr [004B0B7C]
:00456224 83E004                  and eax, 00000004
:00456227 85C0                    test eax, eax
:00456229 7545                    jne 00456270
:0045622B 6A00                    push 00000000
:0045622D E84603FDFF              call 00426578
:00456232 83C404                  add esp, 00000004
:00456235 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456238 81E1FF000000            and ecx, 000000FF
:0045623E 6BC924                  imul ecx, 00000024
:00456241 81C108F54A00            add ecx, 004AF508
:00456247 E8893DFFFF              call 00449FD5
:0045624C 6A00                    push 00000000
:0045624E 6A00                    push 00000000
:00456250 6802020000              push 00000202
:00456255 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045625B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045625C FF15D8864B00            Call dword ptr [004B86D8]
:00456262 8A55F0                  mov dl, byte ptr [ebp-10]
:00456265 52                      push edx
:00456266 B9880B4B00              mov ecx, 004B0B88
:0045626B E8C83B0000              call 00459E38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456229(C)
|
:00456270 EB05                    jmp 00456277

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004561B5(C), :004561DA(C), :004561FB(C), :0045621B(C)
|
:00456272 E9C1FEFFFF              jmp 00456138

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456154(C), :00456270(U)
|
:00456277 8B45D8                  mov eax, dword ptr [ebp-28]
:0045627A 83782C00                cmp dword ptr [eax+2C], 00000000
:0045627E 7425                    je 004562A5
:00456280 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00456283 81E1FF000000            and ecx, 000000FF
:00456289 F7D9                    neg ecx
:0045628B 1BC9                    sbb ecx, ecx
:0045628D 41                      inc ecx
:0045628E 51                      push ecx
:0045628F 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00456292 E8B7FAFFFF              call 00455D4E
:00456297 8B55D8                  mov edx, dword ptr [ebp-28]
:0045629A C7422C00000000          mov [edx+2C], 00000000
:004562A1 C645FCFF                mov [ebp-04], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045627E(C)
|
:004562A5 E996FDFFFF              jmp 00456040

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456052(C), :0045605F(C)
|
:004562AA E9D4FCFFFF              jmp 00455F83

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455F98(C), :00455FA8(C)
|
:004562AF 8B45D8                  mov eax, dword ptr [ebp-28]
:004562B2 33C9                    xor ecx, ecx
:004562B4 8A4801                  mov cl, byte ptr [eax+01]
:004562B7 83F902                  cmp ecx, 00000002
:004562BA 7529                    jne 004562E5
:004562BC C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004562E3(U)
|
:004562C3 837DDC04                cmp dword ptr [ebp-24], 00000004
:004562C7 741C                    je 004562E5
:004562C9 837DDC02                cmp dword ptr [ebp-24], 00000002
:004562CD 7416                    je 004562E5
:004562CF 6A00                    push 00000000
:004562D1 B9F8134800              mov ecx, 004813F8
:004562D6 E8B887FBFF              call 0040EA93
:004562DB 8945DC                  mov dword ptr [ebp-24], eax
:004562DE E86B620100              call 0046C54E
:004562E3 EBDE                    jmp 004562C3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456105(U), :004562BA(C), :004562C7(C), :004562CD(C)
|
:004562E5 8BE5                    mov esp, ebp
:004562E7 5D                      pop ebp
:004562E8 C3                      ret



* Referenced by a CALL at Address:
|:004569F7   
|
:004562E9 55                      push ebp
:004562EA 8BEC                    mov ebp, esp
:004562EC 51                      push ecx
:004562ED 894DFC                  mov dword ptr [ebp-04], ecx
:004562F0 8B45FC                  mov eax, dword ptr [ebp-04]
:004562F3 8B08                    mov ecx, dword ptr [eax]
:004562F5 81E1FF000000            and ecx, 000000FF
:004562FB 8B5508                  mov edx, dword ptr [ebp+08]
:004562FE 880A                    mov byte ptr [edx], cl
:00456300 8B4508                  mov eax, dword ptr [ebp+08]
:00456303 83C001                  add eax, 00000001
:00456306 894508                  mov dword ptr [ebp+08], eax
:00456309 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045630C 8B11                    mov edx, dword ptr [ecx]
:0045630E C1EA08                  shr edx, 08
:00456311 8B4508                  mov eax, dword ptr [ebp+08]
:00456314 8810                    mov byte ptr [eax], dl
:00456316 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456319 83C101                  add ecx, 00000001
:0045631C 894D08                  mov dword ptr [ebp+08], ecx
:0045631F 8B55FC                  mov edx, dword ptr [ebp-04]
:00456322 8B4210                  mov eax, dword ptr [edx+10]
:00456325 25FF000000              and eax, 000000FF
:0045632A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045632D 8801                    mov byte ptr [ecx], al
:0045632F 8B5508                  mov edx, dword ptr [ebp+08]
:00456332 83C201                  add edx, 00000001
:00456335 895508                  mov dword ptr [ebp+08], edx
:00456338 8B45FC                  mov eax, dword ptr [ebp-04]
:0045633B 8B4810                  mov ecx, dword ptr [eax+10]
:0045633E C1E908                  shr ecx, 08
:00456341 8B5508                  mov edx, dword ptr [ebp+08]
:00456344 880A                    mov byte ptr [edx], cl
:00456346 8B4508                  mov eax, dword ptr [ebp+08]
:00456349 83C001                  add eax, 00000001
:0045634C 894508                  mov dword ptr [ebp+08], eax
:0045634F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456352 8B5114                  mov edx, dword ptr [ecx+14]
:00456355 81E2FF000000            and edx, 000000FF
:0045635B 8B4508                  mov eax, dword ptr [ebp+08]
:0045635E 8810                    mov byte ptr [eax], dl
:00456360 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456363 83C101                  add ecx, 00000001
:00456366 894D08                  mov dword ptr [ebp+08], ecx
:00456369 8B55FC                  mov edx, dword ptr [ebp-04]
:0045636C 8B4214                  mov eax, dword ptr [edx+14]
:0045636F C1E808                  shr eax, 08
:00456372 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456375 8801                    mov byte ptr [ecx], al
:00456377 8B5508                  mov edx, dword ptr [ebp+08]
:0045637A 83C201                  add edx, 00000001
:0045637D 895508                  mov dword ptr [ebp+08], edx
:00456380 8B4508                  mov eax, dword ptr [ebp+08]
:00456383 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456386 8A5105                  mov dl, byte ptr [ecx+05]
:00456389 8810                    mov byte ptr [eax], dl
:0045638B 8B4508                  mov eax, dword ptr [ebp+08]
:0045638E 83C001                  add eax, 00000001
:00456391 894508                  mov dword ptr [ebp+08], eax
:00456394 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456397 8B55FC                  mov edx, dword ptr [ebp-04]
:0045639A 8A4206                  mov al, byte ptr [edx+06]
:0045639D 8801                    mov byte ptr [ecx], al
:0045639F 8B4D08                  mov ecx, dword ptr [ebp+08]
:004563A2 83C101                  add ecx, 00000001
:004563A5 894D08                  mov dword ptr [ebp+08], ecx
:004563A8 8B5508                  mov edx, dword ptr [ebp+08]
:004563AB 8B45FC                  mov eax, dword ptr [ebp-04]
:004563AE 8A4808                  mov cl, byte ptr [eax+08]
:004563B1 880A                    mov byte ptr [edx], cl
:004563B3 8B5508                  mov edx, dword ptr [ebp+08]
:004563B6 83C201                  add edx, 00000001
:004563B9 895508                  mov dword ptr [ebp+08], edx
:004563BC 8B4508                  mov eax, dword ptr [ebp+08]
:004563BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004563C2 8A5109                  mov dl, byte ptr [ecx+09]
:004563C5 8810                    mov byte ptr [eax], dl
:004563C7 8B4508                  mov eax, dword ptr [ebp+08]
:004563CA 83C001                  add eax, 00000001
:004563CD 894508                  mov dword ptr [ebp+08], eax
:004563D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004563D3 8B55FC                  mov edx, dword ptr [ebp-04]
:004563D6 8A4204                  mov al, byte ptr [edx+04]
:004563D9 8801                    mov byte ptr [ecx], al
:004563DB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004563DE 83C101                  add ecx, 00000001
:004563E1 894D08                  mov dword ptr [ebp+08], ecx
:004563E4 8B5508                  mov edx, dword ptr [ebp+08]
:004563E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004563EA 8A4807                  mov cl, byte ptr [eax+07]
:004563ED 880A                    mov byte ptr [edx], cl
:004563EF 8B5508                  mov edx, dword ptr [ebp+08]
:004563F2 83C201                  add edx, 00000001
:004563F5 895508                  mov dword ptr [ebp+08], edx
:004563F8 8B4508                  mov eax, dword ptr [ebp+08]
:004563FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004563FE 8A510A                  mov dl, byte ptr [ecx+0A]
:00456401 8810                    mov byte ptr [eax], dl
:00456403 8B4508                  mov eax, dword ptr [ebp+08]
:00456406 83C001                  add eax, 00000001
:00456409 894508                  mov dword ptr [ebp+08], eax
:0045640C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045640F 8B55FC                  mov edx, dword ptr [ebp-04]
:00456412 8A420B                  mov al, byte ptr [edx+0B]
:00456415 8801                    mov byte ptr [ecx], al
:00456417 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045641A 83C101                  add ecx, 00000001
:0045641D 894D08                  mov dword ptr [ebp+08], ecx
:00456420 8B5508                  mov edx, dword ptr [ebp+08]
:00456423 8B45FC                  mov eax, dword ptr [ebp-04]
:00456426 8A480C                  mov cl, byte ptr [eax+0C]
:00456429 880A                    mov byte ptr [edx], cl
:0045642B 8B5508                  mov edx, dword ptr [ebp+08]
:0045642E 83C201                  add edx, 00000001
:00456431 895508                  mov dword ptr [ebp+08], edx
:00456434 8B4508                  mov eax, dword ptr [ebp+08]
:00456437 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045643A 8A510D                  mov dl, byte ptr [ecx+0D]
:0045643D 8810                    mov byte ptr [eax], dl
:0045643F 8B4508                  mov eax, dword ptr [ebp+08]
:00456442 83C001                  add eax, 00000001
:00456445 894508                  mov dword ptr [ebp+08], eax
:00456448 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045644B 8B55FC                  mov edx, dword ptr [ebp-04]
:0045644E 8A420E                  mov al, byte ptr [edx+0E]
:00456451 8801                    mov byte ptr [ecx], al
:00456453 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456456 83C101                  add ecx, 00000001
:00456459 894D08                  mov dword ptr [ebp+08], ecx
:0045645C 8B5508                  mov edx, dword ptr [ebp+08]
:0045645F 8B45FC                  mov eax, dword ptr [ebp-04]
:00456462 8A4818                  mov cl, byte ptr [eax+18]
:00456465 880A                    mov byte ptr [edx], cl
:00456467 8B5508                  mov edx, dword ptr [ebp+08]
:0045646A 83C201                  add edx, 00000001
:0045646D 895508                  mov dword ptr [ebp+08], edx
:00456470 8B4508                  mov eax, dword ptr [ebp+08]
:00456473 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456476 8A5119                  mov dl, byte ptr [ecx+19]
:00456479 8810                    mov byte ptr [eax], dl
:0045647B 8B4508                  mov eax, dword ptr [ebp+08]
:0045647E 83C001                  add eax, 00000001
:00456481 894508                  mov dword ptr [ebp+08], eax
:00456484 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456487 8B55FC                  mov edx, dword ptr [ebp-04]
:0045648A 8A421A                  mov al, byte ptr [edx+1A]
:0045648D 8801                    mov byte ptr [ecx], al
:0045648F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456492 83C101                  add ecx, 00000001
:00456495 894D08                  mov dword ptr [ebp+08], ecx
:00456498 8B5508                  mov edx, dword ptr [ebp+08]
:0045649B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045649E 8A481B                  mov cl, byte ptr [eax+1B]
:004564A1 880A                    mov byte ptr [edx], cl
:004564A3 8B5508                  mov edx, dword ptr [ebp+08]
:004564A6 83C201                  add edx, 00000001
:004564A9 895508                  mov dword ptr [ebp+08], edx
:004564AC 8B4508                  mov eax, dword ptr [ebp+08]
:004564AF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004564B2 8A511C                  mov dl, byte ptr [ecx+1C]
:004564B5 8810                    mov byte ptr [eax], dl
:004564B7 8B4508                  mov eax, dword ptr [ebp+08]
:004564BA 83C001                  add eax, 00000001
:004564BD 894508                  mov dword ptr [ebp+08], eax
:004564C0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004564C3 8B55FC                  mov edx, dword ptr [ebp-04]
:004564C6 8A421D                  mov al, byte ptr [edx+1D]
:004564C9 8801                    mov byte ptr [ecx], al
:004564CB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004564CE 83C101                  add ecx, 00000001
:004564D1 894D08                  mov dword ptr [ebp+08], ecx
:004564D4 8B5508                  mov edx, dword ptr [ebp+08]
:004564D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004564DA 8A481E                  mov cl, byte ptr [eax+1E]
:004564DD 880A                    mov byte ptr [edx], cl
:004564DF 8B5508                  mov edx, dword ptr [ebp+08]
:004564E2 83C201                  add edx, 00000001
:004564E5 895508                  mov dword ptr [ebp+08], edx
:004564E8 8B4508                  mov eax, dword ptr [ebp+08]
:004564EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004564EE 8A5120                  mov dl, byte ptr [ecx+20]
:004564F1 8810                    mov byte ptr [eax], dl
:004564F3 8B4508                  mov eax, dword ptr [ebp+08]
:004564F6 83C001                  add eax, 00000001
:004564F9 894508                  mov dword ptr [ebp+08], eax
:004564FC 8B4508                  mov eax, dword ptr [ebp+08]
:004564FF 8BE5                    mov esp, ebp
:00456501 5D                      pop ebp
:00456502 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00456B47   
|
:00456505 55                      push ebp
:00456506 8BEC                    mov ebp, esp
:00456508 83EC08                  sub esp, 00000008
:0045650B 894DF8                  mov dword ptr [ebp-08], ecx
:0045650E 8B4508                  mov eax, dword ptr [ebp+08]
:00456511 33C9                    xor ecx, ecx
:00456513 8A08                    mov cl, byte ptr [eax]
:00456515 894DFC                  mov dword ptr [ebp-04], ecx
:00456518 8B5508                  mov edx, dword ptr [ebp+08]
:0045651B 83C201                  add edx, 00000001
:0045651E 895508                  mov dword ptr [ebp+08], edx
:00456521 8B4508                  mov eax, dword ptr [ebp+08]
:00456524 33C9                    xor ecx, ecx
:00456526 8A08                    mov cl, byte ptr [eax]
:00456528 C1E108                  shl ecx, 08
:0045652B 8B55FC                  mov edx, dword ptr [ebp-04]
:0045652E 03D1                    add edx, ecx
:00456530 8955FC                  mov dword ptr [ebp-04], edx
:00456533 8B4508                  mov eax, dword ptr [ebp+08]
:00456536 83C001                  add eax, 00000001
:00456539 894508                  mov dword ptr [ebp+08], eax
:0045653C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045653F 8B55FC                  mov edx, dword ptr [ebp-04]
:00456542 8911                    mov dword ptr [ecx], edx
:00456544 8B4508                  mov eax, dword ptr [ebp+08]
:00456547 33C9                    xor ecx, ecx
:00456549 8A08                    mov cl, byte ptr [eax]
:0045654B 894DFC                  mov dword ptr [ebp-04], ecx
:0045654E 8B5508                  mov edx, dword ptr [ebp+08]
:00456551 83C201                  add edx, 00000001
:00456554 895508                  mov dword ptr [ebp+08], edx
:00456557 8B4508                  mov eax, dword ptr [ebp+08]
:0045655A 33C9                    xor ecx, ecx
:0045655C 8A08                    mov cl, byte ptr [eax]
:0045655E C1E108                  shl ecx, 08
:00456561 8B55FC                  mov edx, dword ptr [ebp-04]
:00456564 03D1                    add edx, ecx
:00456566 8955FC                  mov dword ptr [ebp-04], edx
:00456569 8B4508                  mov eax, dword ptr [ebp+08]
:0045656C 83C001                  add eax, 00000001
:0045656F 894508                  mov dword ptr [ebp+08], eax
:00456572 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00456575 8B55FC                  mov edx, dword ptr [ebp-04]
:00456578 895110                  mov dword ptr [ecx+10], edx
:0045657B 8B4508                  mov eax, dword ptr [ebp+08]
:0045657E 33C9                    xor ecx, ecx
:00456580 8A08                    mov cl, byte ptr [eax]
:00456582 894DFC                  mov dword ptr [ebp-04], ecx
:00456585 8B5508                  mov edx, dword ptr [ebp+08]
:00456588 83C201                  add edx, 00000001
:0045658B 895508                  mov dword ptr [ebp+08], edx
:0045658E 8B4508                  mov eax, dword ptr [ebp+08]
:00456591 33C9                    xor ecx, ecx
:00456593 8A08                    mov cl, byte ptr [eax]
:00456595 C1E108                  shl ecx, 08
:00456598 8B55FC                  mov edx, dword ptr [ebp-04]
:0045659B 03D1                    add edx, ecx
:0045659D 8955FC                  mov dword ptr [ebp-04], edx
:004565A0 8B4508                  mov eax, dword ptr [ebp+08]
:004565A3 83C001                  add eax, 00000001
:004565A6 894508                  mov dword ptr [ebp+08], eax
:004565A9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004565AC 8B55FC                  mov edx, dword ptr [ebp-04]
:004565AF 895114                  mov dword ptr [ecx+14], edx
:004565B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004565B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004565B8 8A11                    mov dl, byte ptr [ecx]
:004565BA 885005                  mov byte ptr [eax+05], dl
:004565BD 8B4508                  mov eax, dword ptr [ebp+08]
:004565C0 83C001                  add eax, 00000001
:004565C3 894508                  mov dword ptr [ebp+08], eax
:004565C6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004565C9 8B5508                  mov edx, dword ptr [ebp+08]
:004565CC 8A02                    mov al, byte ptr [edx]
:004565CE 884106                  mov byte ptr [ecx+06], al
:004565D1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004565D4 83C101                  add ecx, 00000001
:004565D7 894D08                  mov dword ptr [ebp+08], ecx
:004565DA 8B55F8                  mov edx, dword ptr [ebp-08]
:004565DD 8B4508                  mov eax, dword ptr [ebp+08]
:004565E0 8A08                    mov cl, byte ptr [eax]
:004565E2 884A08                  mov byte ptr [edx+08], cl
:004565E5 8B5508                  mov edx, dword ptr [ebp+08]
:004565E8 83C201                  add edx, 00000001
:004565EB 895508                  mov dword ptr [ebp+08], edx
:004565EE 8B45F8                  mov eax, dword ptr [ebp-08]
:004565F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004565F4 8A11                    mov dl, byte ptr [ecx]
:004565F6 885009                  mov byte ptr [eax+09], dl
:004565F9 8B4508                  mov eax, dword ptr [ebp+08]
:004565FC 83C001                  add eax, 00000001
:004565FF 894508                  mov dword ptr [ebp+08], eax
:00456602 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00456605 8B5508                  mov edx, dword ptr [ebp+08]
:00456608 8A02                    mov al, byte ptr [edx]
:0045660A 884104                  mov byte ptr [ecx+04], al
:0045660D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456610 83C101                  add ecx, 00000001
:00456613 894D08                  mov dword ptr [ebp+08], ecx
:00456616 8B55F8                  mov edx, dword ptr [ebp-08]
:00456619 8B4508                  mov eax, dword ptr [ebp+08]
:0045661C 8A08                    mov cl, byte ptr [eax]
:0045661E 884A07                  mov byte ptr [edx+07], cl
:00456621 8B5508                  mov edx, dword ptr [ebp+08]
:00456624 83C201                  add edx, 00000001
:00456627 895508                  mov dword ptr [ebp+08], edx
:0045662A 8B45F8                  mov eax, dword ptr [ebp-08]
:0045662D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456630 8A11                    mov dl, byte ptr [ecx]
:00456632 88500A                  mov byte ptr [eax+0A], dl
:00456635 8B4508                  mov eax, dword ptr [ebp+08]
:00456638 83C001                  add eax, 00000001
:0045663B 894508                  mov dword ptr [ebp+08], eax
:0045663E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00456641 8B5508                  mov edx, dword ptr [ebp+08]
:00456644 8A02                    mov al, byte ptr [edx]
:00456646 88410B                  mov byte ptr [ecx+0B], al
:00456649 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045664C 83C101                  add ecx, 00000001
:0045664F 894D08                  mov dword ptr [ebp+08], ecx
:00456652 8B55F8                  mov edx, dword ptr [ebp-08]
:00456655 8B4508                  mov eax, dword ptr [ebp+08]
:00456658 8A08                    mov cl, byte ptr [eax]
:0045665A 884A0C                  mov byte ptr [edx+0C], cl
:0045665D 8B5508                  mov edx, dword ptr [ebp+08]
:00456660 83C201                  add edx, 00000001
:00456663 895508                  mov dword ptr [ebp+08], edx
:00456666 8B45F8                  mov eax, dword ptr [ebp-08]
:00456669 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045666C 8A11                    mov dl, byte ptr [ecx]
:0045666E 88500D                  mov byte ptr [eax+0D], dl
:00456671 8B4508                  mov eax, dword ptr [ebp+08]
:00456674 83C001                  add eax, 00000001
:00456677 894508                  mov dword ptr [ebp+08], eax
:0045667A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045667D 8B5508                  mov edx, dword ptr [ebp+08]
:00456680 8A02                    mov al, byte ptr [edx]
:00456682 88410E                  mov byte ptr [ecx+0E], al
:00456685 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456688 83C101                  add ecx, 00000001
:0045668B 894D08                  mov dword ptr [ebp+08], ecx
:0045668E 8B55F8                  mov edx, dword ptr [ebp-08]
:00456691 8B4508                  mov eax, dword ptr [ebp+08]
:00456694 8A08                    mov cl, byte ptr [eax]
:00456696 884A18                  mov byte ptr [edx+18], cl
:00456699 8B5508                  mov edx, dword ptr [ebp+08]
:0045669C 83C201                  add edx, 00000001
:0045669F 895508                  mov dword ptr [ebp+08], edx
:004566A2 8B45F8                  mov eax, dword ptr [ebp-08]
:004566A5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004566A8 8A11                    mov dl, byte ptr [ecx]
:004566AA 885019                  mov byte ptr [eax+19], dl
:004566AD 8B4508                  mov eax, dword ptr [ebp+08]
:004566B0 83C001                  add eax, 00000001
:004566B3 894508                  mov dword ptr [ebp+08], eax
:004566B6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004566B9 8B5508                  mov edx, dword ptr [ebp+08]
:004566BC 8A02                    mov al, byte ptr [edx]
:004566BE 88411A                  mov byte ptr [ecx+1A], al
:004566C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004566C4 83C101                  add ecx, 00000001
:004566C7 894D08                  mov dword ptr [ebp+08], ecx
:004566CA 8B55F8                  mov edx, dword ptr [ebp-08]
:004566CD 8B4508                  mov eax, dword ptr [ebp+08]
:004566D0 8A08                    mov cl, byte ptr [eax]
:004566D2 884A1B                  mov byte ptr [edx+1B], cl
:004566D5 8B5508                  mov edx, dword ptr [ebp+08]
:004566D8 83C201                  add edx, 00000001
:004566DB 895508                  mov dword ptr [ebp+08], edx
:004566DE 8B45F8                  mov eax, dword ptr [ebp-08]
:004566E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004566E4 8A11                    mov dl, byte ptr [ecx]
:004566E6 88501C                  mov byte ptr [eax+1C], dl
:004566E9 8B4508                  mov eax, dword ptr [ebp+08]
:004566EC 83C001                  add eax, 00000001
:004566EF 894508                  mov dword ptr [ebp+08], eax
:004566F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004566F5 8B5508                  mov edx, dword ptr [ebp+08]
:004566F8 8A02                    mov al, byte ptr [edx]
:004566FA 88411D                  mov byte ptr [ecx+1D], al
:004566FD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456700 83C101                  add ecx, 00000001
:00456703 894D08                  mov dword ptr [ebp+08], ecx
:00456706 8B55F8                  mov edx, dword ptr [ebp-08]
:00456709 8B4508                  mov eax, dword ptr [ebp+08]
:0045670C 8A08                    mov cl, byte ptr [eax]
:0045670E 884A1E                  mov byte ptr [edx+1E], cl
:00456711 8B5508                  mov edx, dword ptr [ebp+08]
:00456714 83C201                  add edx, 00000001
:00456717 895508                  mov dword ptr [ebp+08], edx
:0045671A 8B4508                  mov eax, dword ptr [ebp+08]
:0045671D 33C9                    xor ecx, ecx
:0045671F 8A08                    mov cl, byte ptr [eax]
:00456721 8B55F8                  mov edx, dword ptr [ebp-08]
:00456724 894A20                  mov dword ptr [edx+20], ecx
:00456727 8B4508                  mov eax, dword ptr [ebp+08]
:0045672A 83C001                  add eax, 00000001
:0045672D 894508                  mov dword ptr [ebp+08], eax
:00456730 8B4508                  mov eax, dword ptr [ebp+08]
:00456733 8BE5                    mov esp, ebp
:00456735 5D                      pop ebp
:00456736 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004569C7   
|
:00456739 55                      push ebp
:0045673A 8BEC                    mov ebp, esp
:0045673C 51                      push ecx
:0045673D 894DFC                  mov dword ptr [ebp-04], ecx
:00456740 8B4508                  mov eax, dword ptr [ebp+08]
:00456743 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456746 8A11                    mov dl, byte ptr [ecx]
:00456748 8810                    mov byte ptr [eax], dl
:0045674A 8B4508                  mov eax, dword ptr [ebp+08]
:0045674D 83C001                  add eax, 00000001
:00456750 894508                  mov dword ptr [ebp+08], eax
:00456753 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456756 8B55FC                  mov edx, dword ptr [ebp-04]
:00456759 8A4201                  mov al, byte ptr [edx+01]
:0045675C 8801                    mov byte ptr [ecx], al
:0045675E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456761 83C101                  add ecx, 00000001
:00456764 894D08                  mov dword ptr [ebp+08], ecx
:00456767 8B5508                  mov edx, dword ptr [ebp+08]
:0045676A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045676D 8A4802                  mov cl, byte ptr [eax+02]
:00456770 880A                    mov byte ptr [edx], cl
:00456772 8B5508                  mov edx, dword ptr [ebp+08]
:00456775 83C201                  add edx, 00000001
:00456778 895508                  mov dword ptr [ebp+08], edx
:0045677B 8B4508                  mov eax, dword ptr [ebp+08]
:0045677E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456781 8A5103                  mov dl, byte ptr [ecx+03]
:00456784 8810                    mov byte ptr [eax], dl
:00456786 8B4508                  mov eax, dword ptr [ebp+08]
:00456789 83C001                  add eax, 00000001
:0045678C 894508                  mov dword ptr [ebp+08], eax
:0045678F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456792 8B55FC                  mov edx, dword ptr [ebp-04]
:00456795 8A4204                  mov al, byte ptr [edx+04]
:00456798 8801                    mov byte ptr [ecx], al
:0045679A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045679D 83C101                  add ecx, 00000001
:004567A0 894D08                  mov dword ptr [ebp+08], ecx
:004567A3 8B5508                  mov edx, dword ptr [ebp+08]
:004567A6 8B45FC                  mov eax, dword ptr [ebp-04]
:004567A9 8A4805                  mov cl, byte ptr [eax+05]
:004567AC 880A                    mov byte ptr [edx], cl
:004567AE 8B5508                  mov edx, dword ptr [ebp+08]
:004567B1 83C201                  add edx, 00000001
:004567B4 895508                  mov dword ptr [ebp+08], edx
:004567B7 8B4508                  mov eax, dword ptr [ebp+08]
:004567BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004567BD 8A5124                  mov dl, byte ptr [ecx+24]
:004567C0 8810                    mov byte ptr [eax], dl
:004567C2 8B4508                  mov eax, dword ptr [ebp+08]
:004567C5 83C001                  add eax, 00000001
:004567C8 894508                  mov dword ptr [ebp+08], eax
:004567CB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004567CE 8B55FC                  mov edx, dword ptr [ebp-04]
:004567D1 8A4225                  mov al, byte ptr [edx+25]
:004567D4 8801                    mov byte ptr [ecx], al
:004567D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004567D9 83C101                  add ecx, 00000001
:004567DC 894D08                  mov dword ptr [ebp+08], ecx
:004567DF 8B5508                  mov edx, dword ptr [ebp+08]
:004567E2 8B45FC                  mov eax, dword ptr [ebp-04]
:004567E5 8A4828                  mov cl, byte ptr [eax+28]
:004567E8 880A                    mov byte ptr [edx], cl
:004567EA 8B5508                  mov edx, dword ptr [ebp+08]
:004567ED 83C201                  add edx, 00000001
:004567F0 895508                  mov dword ptr [ebp+08], edx
:004567F3 8B4508                  mov eax, dword ptr [ebp+08]
:004567F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004567F9 8A512C                  mov dl, byte ptr [ecx+2C]
:004567FC 8810                    mov byte ptr [eax], dl
:004567FE 8B4508                  mov eax, dword ptr [ebp+08]
:00456801 83C001                  add eax, 00000001
:00456804 894508                  mov dword ptr [ebp+08], eax
:00456807 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045680A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045680D 8A424C                  mov al, byte ptr [edx+4C]
:00456810 8801                    mov byte ptr [ecx], al
:00456812 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456815 83C101                  add ecx, 00000001
:00456818 894D08                  mov dword ptr [ebp+08], ecx
:0045681B 8B5508                  mov edx, dword ptr [ebp+08]
:0045681E 8B45FC                  mov eax, dword ptr [ebp-04]
:00456821 8A4850                  mov cl, byte ptr [eax+50]
:00456824 880A                    mov byte ptr [edx], cl
:00456826 8B5508                  mov edx, dword ptr [ebp+08]
:00456829 83C201                  add edx, 00000001
:0045682C 895508                  mov dword ptr [ebp+08], edx
:0045682F 8B4508                  mov eax, dword ptr [ebp+08]
:00456832 8BE5                    mov esp, ebp
:00456834 5D                      pop ebp
:00456835 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00456B17   
|
:00456838 55                      push ebp
:00456839 8BEC                    mov ebp, esp
:0045683B 51                      push ecx
:0045683C 894DFC                  mov dword ptr [ebp-04], ecx
:0045683F 8B45FC                  mov eax, dword ptr [ebp-04]
:00456842 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456845 8A11                    mov dl, byte ptr [ecx]
:00456847 8810                    mov byte ptr [eax], dl
:00456849 8B4508                  mov eax, dword ptr [ebp+08]
:0045684C 83C001                  add eax, 00000001
:0045684F 894508                  mov dword ptr [ebp+08], eax
:00456852 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456855 8B5508                  mov edx, dword ptr [ebp+08]
:00456858 8A02                    mov al, byte ptr [edx]
:0045685A 884101                  mov byte ptr [ecx+01], al
:0045685D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456860 83C101                  add ecx, 00000001
:00456863 894D08                  mov dword ptr [ebp+08], ecx
:00456866 8B55FC                  mov edx, dword ptr [ebp-04]
:00456869 8B4508                  mov eax, dword ptr [ebp+08]
:0045686C 8A08                    mov cl, byte ptr [eax]
:0045686E 884A02                  mov byte ptr [edx+02], cl
:00456871 8B5508                  mov edx, dword ptr [ebp+08]
:00456874 83C201                  add edx, 00000001
:00456877 895508                  mov dword ptr [ebp+08], edx
:0045687A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045687D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456880 8A11                    mov dl, byte ptr [ecx]
:00456882 885003                  mov byte ptr [eax+03], dl
:00456885 8B4508                  mov eax, dword ptr [ebp+08]
:00456888 83C001                  add eax, 00000001
:0045688B 894508                  mov dword ptr [ebp+08], eax
:0045688E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456891 8B5508                  mov edx, dword ptr [ebp+08]
:00456894 8A02                    mov al, byte ptr [edx]
:00456896 884104                  mov byte ptr [ecx+04], al
:00456899 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045689C 83C101                  add ecx, 00000001
:0045689F 894D08                  mov dword ptr [ebp+08], ecx
:004568A2 8B55FC                  mov edx, dword ptr [ebp-04]
:004568A5 8B4508                  mov eax, dword ptr [ebp+08]
:004568A8 8A08                    mov cl, byte ptr [eax]
:004568AA 884A05                  mov byte ptr [edx+05], cl
:004568AD 8B5508                  mov edx, dword ptr [ebp+08]
:004568B0 83C201                  add edx, 00000001
:004568B3 895508                  mov dword ptr [ebp+08], edx
:004568B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004568B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004568BC 8A11                    mov dl, byte ptr [ecx]
:004568BE 885024                  mov byte ptr [eax+24], dl
:004568C1 8B4508                  mov eax, dword ptr [ebp+08]
:004568C4 83C001                  add eax, 00000001
:004568C7 894508                  mov dword ptr [ebp+08], eax
:004568CA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004568CD 8B5508                  mov edx, dword ptr [ebp+08]
:004568D0 8A02                    mov al, byte ptr [edx]
:004568D2 884125                  mov byte ptr [ecx+25], al
:004568D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004568D8 83C101                  add ecx, 00000001
:004568DB 894D08                  mov dword ptr [ebp+08], ecx
:004568DE 8B5508                  mov edx, dword ptr [ebp+08]
:004568E1 33C0                    xor eax, eax
:004568E3 8A02                    mov al, byte ptr [edx]
:004568E5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004568E8 894128                  mov dword ptr [ecx+28], eax
:004568EB 8B5508                  mov edx, dword ptr [ebp+08]
:004568EE 83C201                  add edx, 00000001
:004568F1 895508                  mov dword ptr [ebp+08], edx
:004568F4 8B4508                  mov eax, dword ptr [ebp+08]
:004568F7 33C9                    xor ecx, ecx
:004568F9 8A08                    mov cl, byte ptr [eax]
:004568FB 8B55FC                  mov edx, dword ptr [ebp-04]
:004568FE 894A2C                  mov dword ptr [edx+2C], ecx
:00456901 8B4508                  mov eax, dword ptr [ebp+08]
:00456904 83C001                  add eax, 00000001
:00456907 894508                  mov dword ptr [ebp+08], eax
:0045690A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045690D 33D2                    xor edx, edx
:0045690F 8A11                    mov dl, byte ptr [ecx]
:00456911 8B45FC                  mov eax, dword ptr [ebp-04]
:00456914 89504C                  mov dword ptr [eax+4C], edx
:00456917 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045691A 83C101                  add ecx, 00000001
:0045691D 894D08                  mov dword ptr [ebp+08], ecx
:00456920 8B5508                  mov edx, dword ptr [ebp+08]
:00456923 33C0                    xor eax, eax
:00456925 8A02                    mov al, byte ptr [edx]
:00456927 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045692A 894150                  mov dword ptr [ecx+50], eax
:0045692D 8B5508                  mov edx, dword ptr [ebp+08]
:00456930 83C201                  add edx, 00000001
:00456933 895508                  mov dword ptr [ebp+08], edx
:00456936 8B4508                  mov eax, dword ptr [ebp+08]
:00456939 8BE5                    mov esp, ebp
:0045693B 5D                      pop ebp
:0045693C C20400                  ret 0004



* Referenced by a CALL at Address:
|:004119ED   
|
:0045693F 55                      push ebp
:00456940 8BEC                    mov ebp, esp
:00456942 83EC14                  sub esp, 00000014
:00456945 894DEC                  mov dword ptr [ebp-14], ecx
:00456948 6A19                    push 00000019
:0045694A E829FCFCFF              call 00426578
:0045694F 83C404                  add esp, 00000004
:00456952 6A00                    push 00000000
:00456954 B960DF4A00              mov ecx, 004ADF60
:00456959 E840CCFBFF              call 0041359E
:0045695E 8945F0                  mov dword ptr [ebp-10], eax
:00456961 8B45F0                  mov eax, dword ptr [ebp-10]
:00456964 8945FC                  mov dword ptr [ebp-04], eax
:00456967 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045696A C60101                  mov byte ptr [ecx], 01
:0045696D 8B55FC                  mov edx, dword ptr [ebp-04]
:00456970 83C201                  add edx, 00000001
:00456973 8955FC                  mov dword ptr [ebp-04], edx
:00456976 B998224900              mov ecx, 00492298
:0045697B E850DEFAFF              call 004047D0
:00456980 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456983 884101                  mov byte ptr [ecx+01], al
:00456986 8B55EC                  mov edx, dword ptr [ebp-14]
:00456989 33C0                    xor eax, eax
:0045698B 8A4202                  mov al, byte ptr [edx+02]
:0045698E 83C001                  add eax, 00000001
:00456991 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456994 884102                  mov byte ptr [ecx+02], al
:00456997 8B55F0                  mov edx, dword ptr [ebp-10]
:0045699A 83C205                  add edx, 00000005
:0045699D 8955FC                  mov dword ptr [ebp-04], edx
:004569A0 B9F8134800              mov ecx, 004813F8
:004569A5 E8B6BEFBFF              call 00412860
:004569AA 50                      push eax
:004569AB 8B45FC                  mov eax, dword ptr [ebp-04]
:004569AE 50                      push eax
:004569AF E82BBC0000              call 004625DF
:004569B4 83C408                  add esp, 00000008
:004569B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004569BA 83C11E                  add ecx, 0000001E
:004569BD 894DFC                  mov dword ptr [ebp-04], ecx
:004569C0 8B55FC                  mov edx, dword ptr [ebp-04]
:004569C3 52                      push edx
:004569C4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004569C7 E86DFDFFFF              call 00456739
:004569CC 8945FC                  mov dword ptr [ebp-04], eax
:004569CF C745F400000000          mov [ebp-0C], 00000000
:004569D6 EB09                    jmp 004569E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004569FF(U)
|
:004569D8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004569DB 83C001                  add eax, 00000001
:004569DE 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004569D6(U)
|
:004569E1 837DF45A                cmp dword ptr [ebp-0C], 0000005A
:004569E5 731A                    jnb 00456A01
:004569E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004569EA 51                      push ecx
:004569EB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004569EE 6BC924                  imul ecx, 00000024
:004569F1 81C108F54A00            add ecx, 004AF508
:004569F7 E8EDF8FFFF              call 004562E9
:004569FC 8945FC                  mov dword ptr [ebp-04], eax
:004569FF EBD7                    jmp 004569D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004569E5(C)
|
:00456A01 C745F880070000          mov [ebp-08], 00000780
:00456A08 8B55F8                  mov edx, dword ptr [ebp-08]
:00456A0B 52                      push edx
:00456A0C 8B45FC                  mov eax, dword ptr [ebp-04]
:00456A0F 50                      push eax
:00456A10 68004B0000              push 00004B00
:00456A15 B930DF4A00              mov ecx, 004ADF30
:00456A1A E87FCBFBFF              call 0041359E
:00456A1F 50                      push eax
:00456A20 E80ABE0000              call 0046282F
:00456A25 83C40C                  add esp, 0000000C
:00456A28 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456A2B 034DF8                  add ecx, dword ptr [ebp-08]
:00456A2E 894DFC                  mov dword ptr [ebp-04], ecx
:00456A31 6A3D                    push 0000003D
:00456A33 8B55FC                  mov edx, dword ptr [ebp-04]
:00456A36 52                      push edx
:00456A37 68880A4B00              push 004B0A88
:00456A3C E8EEBD0000              call 0046282F
:00456A41 83C40C                  add esp, 0000000C
:00456A44 8B45FC                  mov eax, dword ptr [ebp-04]
:00456A47 83C03D                  add eax, 0000003D
:00456A4A 8945FC                  mov dword ptr [ebp-04], eax
:00456A4D 6860090000              push 00000960
:00456A52 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456A55 51                      push ecx
:00456A56 68A89F4A00              push 004A9FA8
:00456A5B E8CFBD0000              call 0046282F
:00456A60 83C40C                  add esp, 0000000C
:00456A63 8B55FC                  mov edx, dword ptr [ebp-04]
:00456A66 81C260090000            add edx, 00000960
:00456A6C 8955FC                  mov dword ptr [ebp-04], edx
:00456A6F A1940B4B00              mov eax, dword ptr [004B0B94]
:00456A74 25FF000000              and eax, 000000FF
:00456A79 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456A7C 8801                    mov byte ptr [ecx], al
:00456A7E 8B55FC                  mov edx, dword ptr [ebp-04]
:00456A81 83C201                  add edx, 00000001
:00456A84 8955FC                  mov dword ptr [ebp-04], edx
:00456A87 A1940B4B00              mov eax, dword ptr [004B0B94]
:00456A8C C1E808                  shr eax, 08
:00456A8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456A92 8801                    mov byte ptr [ecx], al
:00456A94 8B55FC                  mov edx, dword ptr [ebp-04]
:00456A97 83C201                  add edx, 00000001
:00456A9A 8955FC                  mov dword ptr [ebp-04], edx
:00456A9D 8B45FC                  mov eax, dword ptr [ebp-04]
:00456AA0 2B45F0                  sub eax, dword ptr [ebp-10]
:00456AA3 8945F8                  mov dword ptr [ebp-08], eax
:00456AA6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00456AA9 51                      push ecx
:00456AAA 8B55F0                  mov edx, dword ptr [ebp-10]
:00456AAD 52                      push edx
:00456AAE 6A00                    push 00000000
:00456AB0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456AB3 E8299BFBFF              call 004105E1
:00456AB8 8945F8                  mov dword ptr [ebp-08], eax
:00456ABB 6A00                    push 00000000
:00456ABD E8B6FAFCFF              call 00426578
:00456AC2 83C404                  add esp, 00000004
:00456AC5 8BE5                    mov esp, ebp
:00456AC7 5D                      pop ebp
:00456AC8 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00411246   
|
:00456ACB 55                      push ebp
:00456ACC 8BEC                    mov ebp, esp
:00456ACE 83EC14                  sub esp, 00000014
:00456AD1 894DEC                  mov dword ptr [ebp-14], ecx
:00456AD4 C745F880070000          mov [ebp-08], 00000780
:00456ADB 6A19                    push 00000019
:00456ADD E896FAFCFF              call 00426578
:00456AE2 83C404                  add esp, 00000004
:00456AE5 6A00                    push 00000000
:00456AE7 B960DF4A00              mov ecx, 004ADF60
:00456AEC E8ADCAFBFF              call 0041359E
:00456AF1 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:5000, "iOl"
                                  |
:00456AF4 6800500000              push 00005000
:00456AF9 8B45F0                  mov eax, dword ptr [ebp-10]
:00456AFC 50                      push eax
:00456AFD 6A00                    push 00000000
:00456AFF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456B02 E8A799FBFF              call 004104AE
:00456B07 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456B0A 83C123                  add ecx, 00000023
:00456B0D 894DFC                  mov dword ptr [ebp-04], ecx
:00456B10 8B55FC                  mov edx, dword ptr [ebp-04]
:00456B13 52                      push edx
:00456B14 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00456B17 E81CFDFFFF              call 00456838
:00456B1C 8945FC                  mov dword ptr [ebp-04], eax
:00456B1F C745F400000000          mov [ebp-0C], 00000000
:00456B26 EB09                    jmp 00456B31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456B4F(U)
|
:00456B28 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456B2B 83C001                  add eax, 00000001
:00456B2E 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456B26(U)
|
:00456B31 837DF45A                cmp dword ptr [ebp-0C], 0000005A
:00456B35 731A                    jnb 00456B51
:00456B37 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456B3A 51                      push ecx
:00456B3B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00456B3E 6BC924                  imul ecx, 00000024
:00456B41 81C108F54A00            add ecx, 004AF508
:00456B47 E8B9F9FFFF              call 00456505
:00456B4C 8945FC                  mov dword ptr [ebp-04], eax
:00456B4F EBD7                    jmp 00456B28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456B35(C)
|
:00456B51 8B55F8                  mov edx, dword ptr [ebp-08]
:00456B54 52                      push edx
:00456B55 68004B0000              push 00004B00
:00456B5A B930DF4A00              mov ecx, 004ADF30
:00456B5F E83ACAFBFF              call 0041359E
:00456B64 50                      push eax
:00456B65 8B45FC                  mov eax, dword ptr [ebp-04]
:00456B68 50                      push eax
:00456B69 E8C1BC0000              call 0046282F
:00456B6E 83C40C                  add esp, 0000000C
:00456B71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456B74 034DF8                  add ecx, dword ptr [ebp-08]
:00456B77 894DFC                  mov dword ptr [ebp-04], ecx
:00456B7A 6A3D                    push 0000003D
:00456B7C 68880A4B00              push 004B0A88
:00456B81 8B55FC                  mov edx, dword ptr [ebp-04]
:00456B84 52                      push edx
:00456B85 E8A5BC0000              call 0046282F
:00456B8A 83C40C                  add esp, 0000000C
:00456B8D 8B45FC                  mov eax, dword ptr [ebp-04]
:00456B90 83C03D                  add eax, 0000003D
:00456B93 8945FC                  mov dword ptr [ebp-04], eax
:00456B96 6860090000              push 00000960
:00456B9B 68A89F4A00              push 004A9FA8
:00456BA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456BA3 51                      push ecx
:00456BA4 E886BC0000              call 0046282F
:00456BA9 83C40C                  add esp, 0000000C
:00456BAC 8B55FC                  mov edx, dword ptr [ebp-04]
:00456BAF 81C260090000            add edx, 00000960
:00456BB5 8955FC                  mov dword ptr [ebp-04], edx
:00456BB8 8B45FC                  mov eax, dword ptr [ebp-04]
:00456BBB 33C9                    xor ecx, ecx
:00456BBD 8A08                    mov cl, byte ptr [eax]
:00456BBF 894DF4                  mov dword ptr [ebp-0C], ecx
:00456BC2 8B55FC                  mov edx, dword ptr [ebp-04]
:00456BC5 83C201                  add edx, 00000001
:00456BC8 8955FC                  mov dword ptr [ebp-04], edx
:00456BCB 8B45FC                  mov eax, dword ptr [ebp-04]
:00456BCE 33C9                    xor ecx, ecx
:00456BD0 8A08                    mov cl, byte ptr [eax]
:00456BD2 C1E108                  shl ecx, 08
:00456BD5 8B55F4                  mov edx, dword ptr [ebp-0C]
:00456BD8 03D1                    add edx, ecx
:00456BDA 8955F4                  mov dword ptr [ebp-0C], edx
:00456BDD 8B45FC                  mov eax, dword ptr [ebp-04]
:00456BE0 83C001                  add eax, 00000001
:00456BE3 8945FC                  mov dword ptr [ebp-04], eax
:00456BE6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00456BE9 890D940B4B00            mov dword ptr [004B0B94], ecx
:00456BEF 6A00                    push 00000000
:00456BF1 E882F9FCFF              call 00426578
:00456BF6 83C404                  add esp, 00000004
:00456BF9 8BE5                    mov esp, ebp
:00456BFB 5D                      pop ebp
:00456BFC C20400                  ret 0004



* Referenced by a CALL at Address:
|:00463A99   
|
:00456BFF 55                      push ebp
:00456C00 8BEC                    mov ebp, esp
:00456C02 E8FCFCFBFF              call 00416903
:00456C07 25FF000000              and eax, 000000FF
:00456C0C 83F803                  cmp eax, 00000003
:00456C0F 7516                    jne 00456C27

* Possible Reference to String Resource ID=00006: ""
                                  |
:00456C11 6A06                    push 00000006
:00456C13 B9180A4B00              mov ecx, 004B0A18
:00456C18 E823BCFBFF              call 00412840
:00456C1D B9A8034B00              mov ecx, 004B03A8
:00456C22 E8B9DDFEFF              call 004449E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456C0F(C)
|
:00456C27 5D                      pop ebp
:00456C28 C3                      ret



* Referenced by a CALL at Addresses:
|:00463AA5   , :00463AB4   
|
:00456C29 55                      push ebp
:00456C2A 8BEC                    mov ebp, esp
:00456C2C E8D2FCFBFF              call 00416903
:00456C31 25FF000000              and eax, 000000FF
:00456C36 83F803                  cmp eax, 00000003
:00456C39 7515                    jne 00456C50
:00456C3B 8B4508                  mov eax, dword ptr [ebp+08]
:00456C3E F7D8                    neg eax
:00456C40 1BC0                    sbb eax, eax
:00456C42 83C008                  add eax, 00000008
:00456C45 50                      push eax
:00456C46 B9180A4B00              mov ecx, 004B0A18
:00456C4B E8F0BBFBFF              call 00412840

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456C39(C)
|
:00456C50 5D                      pop ebp
:00456C51 C3                      ret



* Referenced by a CALL at Address:
|:00457B81   
|
:00456C52 55                      push ebp
:00456C53 8BEC                    mov ebp, esp
:00456C55 83EC3C                  sub esp, 0000003C
:00456C58 894DC4                  mov dword ptr [ebp-3C], ecx
:00456C5B C645ECFF                mov [ebp-14], FF
:00456C5F C645D4FF                mov [ebp-2C], FF
:00456C63 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00456C66 E8450BFBFF              call 004077B0
:00456C6B C745F801000000          mov [ebp-08], 00000001
:00456C72 C745E400000000          mov [ebp-1C], 00000000
:00456C79 8B45C4                  mov eax, dword ptr [ebp-3C]
:00456C7C 33C9                    xor ecx, ecx
:00456C7E 8A4801                  mov cl, byte ptr [eax+01]
:00456C81 85C9                    test ecx, ecx
:00456C83 7405                    je 00456C8A
:00456C85 E9E7070000              jmp 00457471

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456C83(C)
|
:00456C8A C745F000000000          mov [ebp-10], 00000000
:00456C91 EB09                    jmp 00456C9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D02(U)
|
:00456C93 8B55F0                  mov edx, dword ptr [ebp-10]
:00456C96 83C201                  add edx, 00000001
:00456C99 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456C91(U)
|
:00456C9C 837DF01E                cmp dword ptr [ebp-10], 0000001E
:00456CA0 7362                    jnb 00456D04
:00456CA2 8B45C4                  mov eax, dword ptr [ebp-3C]
:00456CA5 33C9                    xor ecx, ecx
:00456CA7 8A4801                  mov cl, byte ptr [eax+01]
:00456CAA 85C9                    test ecx, ecx
:00456CAC 7556                    jne 00456D04

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456CAE 6A04                    push 00000004
:00456CB0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456CB3 6BC924                  imul ecx, 00000024
:00456CB6 81C108F54A00            add ecx, 004AF508
:00456CBC E82F8EFDFF              call 0042FAF0
:00456CC1 85C0                    test eax, eax
:00456CC3 753D                    jne 00456D02
:00456CC5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456CC8 6BC924                  imul ecx, 00000024
:00456CCB 81C108F54A00            add ecx, 004AF508
:00456CD1 E81A8CFDFF              call 0042F8F0
:00456CD6 25FF000000              and eax, 000000FF
:00456CDB 83F807                  cmp eax, 00000007
:00456CDE 7522                    jne 00456D02
:00456CE0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456CE3 6BC924                  imul ecx, 00000024
:00456CE6 81C108F54A00            add ecx, 004AF508
:00456CEC E8DF8BFDFF              call 0042F8D0
:00456CF1 25FF000000              and eax, 000000FF
:00456CF6 83F802                  cmp eax, 00000002
:00456CF9 7507                    jne 00456D02
:00456CFB C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456CC3(C), :00456CDE(C), :00456CF9(C)
|
:00456D02 EB8F                    jmp 00456C93

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456CA0(C), :00456CAC(C)
|
:00456D04 837DF800                cmp dword ptr [ebp-08], 00000000
:00456D08 7423                    je 00456D2D
:00456D0A B908F54A00              mov ecx, 004AF508
:00456D0F E88C26FDFF              call 004293A0
:00456D14 668B10                  mov dx, word ptr [eax]
:00456D17 668955CC                mov word ptr [ebp-34], dx
:00456D1B 8A45CD                  mov al, byte ptr [ebp-33]
:00456D1E 50                      push eax
:00456D1F 8A4DCC                  mov cl, byte ptr [ebp-34]
:00456D22 51                      push ecx
:00456D23 B9A8034B00              mov ecx, 004B03A8
:00456D28 E80AEDFEFF              call 00445A37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D08(C)
|
:00456D2D 8B55C4                  mov edx, dword ptr [ebp-3C]
:00456D30 C6420500                mov [edx+05], 00

* Possible StringData Ref from Data Obj ->"ڭxp"
                                  |
:00456D34 687CD84700              push 0047D87C
:00456D39 6A00                    push 00000000
:00456D3B E82C1EFDFF              call 00428B6C
:00456D40 83C408                  add esp, 00000008
:00456D43 C645F400                mov [ebp-0C], 00
:00456D47 C645D800                mov [ebp-28], 00
:00456D4B C745DC00000000          mov [ebp-24], 00000000
:00456D52 6A01                    push 00000001
:00456D54 E8BFD90000              call 00464718
:00456D59 83C404                  add esp, 00000004
:00456D5C 6A00                    push 00000000
:00456D5E E815F8FCFF              call 00426578
:00456D63 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045741E(U)
|
:00456D66 837DF800                cmp dword ptr [ebp-08], 00000000
:00456D6A 0F85B3060000            jne 00457423

* Possible Reference to String Resource ID=00008: ""
                                  |
:00456D70 6A08                    push 00000008
:00456D72 E804FEFCFF              call 00426B7B
:00456D77 83C404                  add esp, 00000004
:00456D7A E8CF570100              call 0046C54E
:00456D7F C745F000000000          mov [ebp-10], 00000000
:00456D86 EB09                    jmp 00456D91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457419(U)
|
:00456D88 8B45F0                  mov eax, dword ptr [ebp-10]
:00456D8B 83C001                  add eax, 00000001
:00456D8E 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D86(U)
|
:00456D91 837DF800                cmp dword ptr [ebp-08], 00000000
:00456D95 0F8583060000            jne 0045741E
:00456D9B E8AE570100              call 0046C54E
:00456DA0 B9A8034B00              mov ecx, 004B03A8
:00456DA5 E8ACDCFEFF              call 00444A56
:00456DAA B9A8034B00              mov ecx, 004B03A8
:00456DAF E8FBE3FEFF              call 004451AF
:00456DB4 8945E8                  mov dword ptr [ebp-18], eax
:00456DB7 B9F8F44A00              mov ecx, 004AF4F8
:00456DBC E8EFE6FCFF              call 004254B0
:00456DC1 85C0                    test eax, eax
:00456DC3 7429                    je 00456DEE
:00456DC5 837DE800                cmp dword ptr [ebp-18], 00000000
:00456DC9 7523                    jne 00456DEE

* Possible Reference to String Resource ID=00008: ""
                                  |
:00456DCB 6A08                    push 00000008
:00456DCD E8A9FDFCFF              call 00426B7B
:00456DD2 83C404                  add esp, 00000004
:00456DD5 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00456DD8 8A5105                  mov dl, byte ptr [ecx+05]
:00456DDB 80F201                  xor dl, 01
:00456DDE 8B45C4                  mov eax, dword ptr [ebp-3C]
:00456DE1 885005                  mov byte ptr [eax+05], dl
:00456DE4 B9A8034B00              mov ecx, 004B03A8
:00456DE9 E890D9FEFF              call 0044477E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456DC3(C), :00456DC9(C)
|
:00456DEE B9A8034B00              mov ecx, 004B03A8
:00456DF3 E8ADDDFEFF              call 00444BA5
:00456DF8 50                      push eax
:00456DF9 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00456DFC E88F89FDFF              call 0042F790
:00456E01 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00456E04 51                      push ecx
:00456E05 E8070BFFFF              call 00447911
:00456E0A 83C404                  add esp, 00000004
:00456E0D 8845D0                  mov byte ptr [ebp-30], al
:00456E10 8B55EC                  mov edx, dword ptr [ebp-14]
:00456E13 81E2FF000000            and edx, 000000FF
:00456E19 8B45D0                  mov eax, dword ptr [ebp-30]
:00456E1C 25FF000000              and eax, 000000FF
:00456E21 3BD0                    cmp edx, eax
:00456E23 0F84B3000000            je 00456EDC
:00456E29 B9A8034B00              mov ecx, 004B03A8
:00456E2E E812DCFEFF              call 00444A45
:00456E33 85C0                    test eax, eax
:00456E35 740E                    je 00456E45
:00456E37 B9A8034B00              mov ecx, 004B03A8
:00456E3C E89FDBFEFF              call 004449E0
:00456E41 C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456E35(C)
|
:00456E45 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00456E48 81E1FF000000            and ecx, 000000FF
:00456E4E 81F9FF000000            cmp ecx, 000000FF
:00456E54 0F8482000000            je 00456EDC
:00456E5A 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00456E5D 81E1FF000000            and ecx, 000000FF
:00456E63 6BC924                  imul ecx, 00000024
:00456E66 81C108F54A00            add ecx, 004AF508
:00456E6C E85F8AFDFF              call 0042F8D0
:00456E71 25FF000000              and eax, 000000FF
:00456E76 83F802                  cmp eax, 00000002
:00456E79 7561                    jne 00456EDC
:00456E7B 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00456E7E 81E1FF000000            and ecx, 000000FF
:00456E84 6BC924                  imul ecx, 00000024
:00456E87 81C108F54A00            add ecx, 004AF508
:00456E8D E83E84FBFF              call 0040F2D0
:00456E92 85C0                    test eax, eax
:00456E94 751D                    jne 00456EB3
:00456E96 6A20                    push 00000020
:00456E98 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00456E9B 81E1FF000000            and ecx, 000000FF
:00456EA1 6BC924                  imul ecx, 00000024
:00456EA4 81C108F54A00            add ecx, 004AF508
:00456EAA E8418CFDFF              call 0042FAF0
:00456EAF 85C0                    test eax, eax
:00456EB1 7429                    je 00456EDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456E94(C)
|
:00456EB3 33D2                    xor edx, edx
:00456EB5 8A15800B4B00            mov dl, byte ptr [004B0B80]
:00456EBB 85D2                    test edx, edx
:00456EBD 751D                    jne 00456EDC
:00456EBF 8A45D0                  mov al, byte ptr [ebp-30]
:00456EC2 8845EC                  mov byte ptr [ebp-14], al
:00456EC5 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00456EC8 81E1FF000000            and ecx, 000000FF
:00456ECE 6BC924                  imul ecx, 00000024
:00456ED1 81C108F54A00            add ecx, 004AF508
:00456ED7 E8105EFDFF              call 0042CCEC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456E23(C), :00456E54(C), :00456E79(C), :00456EB1(C), :00456EBD(C)
|
:00456EDC C6050C414A00FF          mov byte ptr [004A410C], FF
:00456EE3 8B4DE1                  mov ecx, dword ptr [ebp-1F]
:00456EE6 81E1FF000000            and ecx, 000000FF
:00456EEC 33D2                    xor edx, edx
:00456EEE 81F9FF000000            cmp ecx, 000000FF
:00456EF4 0F95C2                  setne dl
:00456EF7 8B45C4                  mov eax, dword ptr [ebp-3C]
:00456EFA 895028                  mov dword ptr [eax+28], edx
:00456EFD 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00456F00 83792800                cmp dword ptr [ecx+28], 00000000
:00456F04 7433                    je 00456F39
:00456F06 8B55D0                  mov edx, dword ptr [ebp-30]
:00456F09 81E2FF000000            and edx, 000000FF
:00456F0F 81FAFF000000            cmp edx, 000000FF
:00456F15 7522                    jne 00456F39
:00456F17 B9A8034B00              mov ecx, 004B03A8
:00456F1C E824DBFEFF              call 00444A45
:00456F21 85C0                    test eax, eax
:00456F23 7414                    je 00456F39
:00456F25 B9A8034B00              mov ecx, 004B03A8
:00456F2A E8B1DAFEFF              call 004449E0
:00456F2F 8B45C4                  mov eax, dword ptr [ebp-3C]
:00456F32 C7402800000000          mov [eax+28], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456F04(C), :00456F15(C), :00456F23(C)
|
:00456F39 8B4DE1                  mov ecx, dword ptr [ebp-1F]
:00456F3C 81E1FF000000            and ecx, 000000FF
:00456F42 81F9FF000000            cmp ecx, 000000FF
:00456F48 7505                    jne 00456F4F
:00456F4A E80CDC0000              call 00464B5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456F48(C)
|
:00456F4F E8FA550100              call 0046C54E
:00456F54 B980594800              mov ecx, 00485980
:00456F59 E80F92FCFF              call 0042016D
:00456F5E 83F801                  cmp eax, 00000001
:00456F61 0F8500020000            jne 00457167
:00456F67 33D2                    xor edx, edx
:00456F69 8A15800B4B00            mov dl, byte ptr [004B0B80]
:00456F6F 85D2                    test edx, edx
:00456F71 0F85F0010000            jne 00457167
:00456F77 6A00                    push 00000000
:00456F79 E89AD70000              call 00464718
:00456F7E 83C404                  add esp, 00000004
:00456F81 8D45E0                  lea eax, dword ptr [ebp-20]
:00456F84 50                      push eax
:00456F85 E8F509FFFF              call 0044797F
:00456F8A 83C404                  add esp, 00000004
:00456F8D 25FF000000              and eax, 000000FF
:00456F92 83F81F                  cmp eax, 0000001F
:00456F95 0F85B9000000            jne 00457054
:00456F9B B9A8034B00              mov ecx, 004B03A8
:00456FA0 E83BDAFEFF              call 004449E0
:00456FA5 8A4DEC                  mov cl, byte ptr [ebp-14]
:00456FA8 51                      push ecx
:00456FA9 8D55E0                  lea edx, dword ptr [ebp-20]
:00456FAC 52                      push edx
:00456FAD 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00456FB0 E89BFAFEFF              call 00446A50
:00456FB5 85C0                    test eax, eax
:00456FB7 747A                    je 00457033
:00456FB9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00456FBC 81E1FF000000            and ecx, 000000FF
:00456FC2 6BC924                  imul ecx, 00000024
:00456FC5 81C108F54A00            add ecx, 004AF508
:00456FCB E8D684FDFF              call 0042F4A6
:00456FD0 85C0                    test eax, eax
:00456FD2 745F                    je 00457033
:00456FD4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00456FD7 81E1FF000000            and ecx, 000000FF
:00456FDD 6BC924                  imul ecx, 00000024
:00456FE0 81C108F54A00            add ecx, 004AF508
:00456FE6 E81FA1FDFF              call 0043110A
:00456FEB 8945E4                  mov dword ptr [ebp-1C], eax
:00456FEE 6A00                    push 00000000
:00456FF0 6A00                    push 00000000
:00456FF2 6802020000              push 00000202
:00456FF7 A1380E4B00              mov eax, dword ptr [004B0E38]
:00456FFC 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00456FFD FF15D8864B00            Call dword ptr [004B86D8]
:00457003 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00457006 81E1FF000000            and ecx, 000000FF
:0045700C 6BC924                  imul ecx, 00000024
:0045700F 81C108F54A00            add ecx, 004AF508
:00457015 E8B686FDFF              call 0042F6D0
:0045701A 50                      push eax
:0045701B B9880B4B00              mov ecx, 004B0B88
:00457020 E89B2AFEFF              call 00439AC0
:00457025 8A4DEC                  mov cl, byte ptr [ebp-14]
:00457028 51                      push ecx
:00457029 B9880B4B00              mov ecx, 004B0B88
:0045702E E8052E0000              call 00459E38

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456FB7(C), :00456FD2(C)
|
:00457033 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00457036 E8058CFDFF              call 0042FC40
:0045703B 25FF000000              and eax, 000000FF
:00457040 85C0                    test eax, eax
:00457042 7407                    je 0045704B
:00457044 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457042(C)
|
:0045704B C645ECFF                mov [ebp-14], FF
:0045704F E909010000              jmp 0045715D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456F95(C)
|
:00457054 8B55EC                  mov edx, dword ptr [ebp-14]
:00457057 81E2FF000000            and edx, 000000FF
:0045705D 81FAFF000000            cmp edx, 000000FF
:00457063 0F84D5000000            je 0045713E
:00457069 8B45EC                  mov eax, dword ptr [ebp-14]
:0045706C 25FF000000              and eax, 000000FF
:00457071 83F85A                  cmp eax, 0000005A
:00457074 0F8DC4000000            jnl 0045713E
:0045707A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045707D 81E1FF000000            and ecx, 000000FF
:00457083 6BC924                  imul ecx, 00000024
:00457086 81C108F54A00            add ecx, 004AF508
:0045708C E81584FDFF              call 0042F4A6
:00457091 85C0                    test eax, eax
:00457093 0F8480000000            je 00457119
:00457099 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045709C 81E1FF000000            and ecx, 000000FF
:004570A2 6BC924                  imul ecx, 00000024
:004570A5 81C108F54A00            add ecx, 004AF508
:004570AB E85AA0FDFF              call 0043110A
:004570B0 8945E4                  mov dword ptr [ebp-1C], eax
:004570B3 6A00                    push 00000000
:004570B5 6A00                    push 00000000
:004570B7 6802020000              push 00000202
:004570BC 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004570C2 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004570C3 FF15D8864B00            Call dword ptr [004B86D8]
:004570C9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004570CC 81E1FF000000            and ecx, 000000FF
:004570D2 6BC924                  imul ecx, 00000024
:004570D5 81C108F54A00            add ecx, 004AF508
:004570DB E8F085FDFF              call 0042F6D0
:004570E0 50                      push eax
:004570E1 B9880B4B00              mov ecx, 004B0B88
:004570E6 E8D529FEFF              call 00439AC0
:004570EB 8A55EC                  mov dl, byte ptr [ebp-14]
:004570EE 52                      push edx
:004570EF B9880B4B00              mov ecx, 004B0B88
:004570F4 E83F2D0000              call 00459E38
:004570F9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004570FC 81E1FF000000            and ecx, 000000FF
:00457102 6BC924                  imul ecx, 00000024
:00457105 81C108F54A00            add ecx, 004AF508
:0045710B E8C085FDFF              call 0042F6D0
:00457110 50                      push eax
:00457111 E83AFE0000              call 00466F50
:00457116 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457093(C)
|
:00457119 B9180A4B00              mov ecx, 004B0A18
:0045711E E87D150000              call 004586A0
:00457123 C645ECFF                mov [ebp-14], FF
:00457127 6A00                    push 00000000
:00457129 6A00                    push 00000000
:0045712B 6802020000              push 00000202
:00457130 A1380E4B00              mov eax, dword ptr [004B0E38]
:00457135 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00457136 FF15D8864B00            Call dword ptr [004B86D8]
:0045713C EB1F                    jmp 0045715D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457063(C), :00457074(C)
|
:0045713E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00457141 81E1FF000000            and ecx, 000000FF
:00457147 81F9FF000000            cmp ecx, 000000FF
:0045714D 750E                    jne 0045715D
:0045714F 8D55E0                  lea edx, dword ptr [ebp-20]
:00457152 52                      push edx
:00457153 B9A8034B00              mov ecx, 004B03A8
:00457158 E8F4EFFEFF              call 00446151

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045704F(U), :0045713C(U), :0045714D(C)
|
:0045715D 6A01                    push 00000001
:0045715F E8B4D50000              call 00464718
:00457164 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456F61(C), :00456F71(C)
|
:00457167 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0045716A E8D18AFDFF              call 0042FC40
:0045716F 25FF000000              and eax, 000000FF
:00457174 8945FC                  mov dword ptr [ebp-04], eax
:00457177 837DFC07                cmp dword ptr [ebp-04], 00000007
:0045717B 7406                    je 00457183
:0045717D 837DFC08                cmp dword ptr [ebp-04], 00000008
:00457181 752C                    jne 004571AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045717B(C)
|
:00457183 6A00                    push 00000000
:00457185 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00457188 E8B3B6FBFF              call 00412840
:0045718D 33C0                    xor eax, eax
:0045718F 837DFC07                cmp dword ptr [ebp-04], 00000007
:00457193 0F94C0                  sete al
:00457196 50                      push eax
:00457197 E8D9020000              call 00457475
:0045719C 83C404                  add esp, 00000004
:0045719F 85C0                    test eax, eax
:004571A1 740C                    je 004571AF

* Possible Reference to String Resource ID=00006: ""
                                  |
:004571A3 6A06                    push 00000006
:004571A5 B9180A4B00              mov ecx, 004B0A18
:004571AA E891B6FBFF              call 00412840

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457181(C), :004571A1(C)
|
:004571AF B980594800              mov ecx, 00485980
:004571B4 E8B48FFCFF              call 0042016D
:004571B9 83F802                  cmp eax, 00000002
:004571BC 7555                    jne 00457213
:004571BE 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004571C1 51                      push ecx
:004571C2 E84A07FFFF              call 00447911
:004571C7 83C404                  add esp, 00000004
:004571CA 8845C8                  mov byte ptr [ebp-38], al
:004571CD 8B55C8                  mov edx, dword ptr [ebp-38]
:004571D0 81E2FF000000            and edx, 000000FF
:004571D6 81FAFF000000            cmp edx, 000000FF
:004571DC 7422                    je 00457200
:004571DE 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004571E1 81E1FF000000            and ecx, 000000FF
:004571E7 6BC924                  imul ecx, 00000024
:004571EA 81C108F54A00            add ecx, 004AF508
:004571F0 E8DB84FDFF              call 0042F6D0
:004571F5 50                      push eax
:004571F6 E8E5FA0000              call 00466CE0
:004571FB 83C404                  add esp, 00000004
:004571FE EB13                    jmp 00457213

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004571DC(C)
|
:00457200 E8C12A0100              call 00469CC6
:00457205 85C0                    test eax, eax
:00457207 750A                    jne 00457213

* Possible Reference to String Resource ID=00006: ""
                                  |
:00457209 6A06                    push 00000006
:0045720B 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0045720E E82DB6FBFF              call 00412840

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004571BC(C), :004571FE(U), :00457207(C)
|
:00457213 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00457216 E8258AFDFF              call 0042FC40
:0045721B 25FF000000              and eax, 000000FF
:00457220 83F806                  cmp eax, 00000006
:00457223 0F8584000000            jne 004572AD
:00457229 8B45EC                  mov eax, dword ptr [ebp-14]
:0045722C 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00457231 3DFF000000              cmp eax, 000000FF
:00457236 740E                    je 00457246
:00457238 B9A8034B00              mov ecx, 004B03A8
:0045723D E89ED7FEFF              call 004449E0
:00457242 C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457236(C)
|
:00457246 6A00                    push 00000000
:00457248 E8CBD40000              call 00464718
:0045724D 83C404                  add esp, 00000004
:00457250 B9A8034B00              mov ecx, 004B03A8
:00457255 E898DEFEFF              call 004450F2

* Possible StringData Ref from Data Obj ->"OܡH"
                                  |
:0045725A 8B0DB0D74700            mov ecx, dword ptr [0047D7B0]
:00457260 51                      push ecx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00457261 6A06                    push 00000006
:00457263 E80419FDFF              call 00428B6C
:00457268 83C408                  add esp, 00000008
:0045726B 8945F8                  mov dword ptr [ebp-08], eax
:0045726E 837DF800                cmp dword ptr [ebp-08], 00000000
:00457272 7525                    jne 00457299
:00457274 33D2                    xor edx, edx
:00457276 8A157C0B4B00            mov dl, byte ptr [004B0B7C]
:0045727C 83E202                  and edx, 00000002
:0045727F 85D2                    test edx, edx
:00457281 7416                    je 00457299
:00457283 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00457286 E8B6EAFFFF              call 00455D41
:0045728B 8945F8                  mov dword ptr [ebp-08], eax
:0045728E 837DF800                cmp dword ptr [ebp-08], 00000000
:00457292 7405                    je 00457299
:00457294 E9D8010000              jmp 00457471

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457272(C), :00457281(C), :00457292(C)
|
:00457299 6A00                    push 00000000
:0045729B 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0045729E E89DB5FBFF              call 00412840
:004572A3 6A01                    push 00000001
:004572A5 E86ED40000              call 00464718
:004572AA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457223(C)
|
:004572AD 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004572B0 E88B89FDFF              call 0042FC40
:004572B5 25FF000000              and eax, 000000FF
:004572BA 83F805                  cmp eax, 00000005
:004572BD 7505                    jne 004572C4
:004572BF E9AD010000              jmp 00457471

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004572BD(C)
|
:004572C4 837DE400                cmp dword ptr [ebp-1C], 00000000
:004572C8 0F844B010000            je 00457419
:004572CE 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004572D1 E8B40E0000              call 0045818A
:004572D6 8B45C4                  mov eax, dword ptr [ebp-3C]
:004572D9 33C9                    xor ecx, ecx
:004572DB 8A4801                  mov cl, byte ptr [eax+01]
:004572DE 85C9                    test ecx, ecx
:004572E0 7405                    je 004572E7
:004572E2 E98A010000              jmp 00457471

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004572E0(C)
|
:004572E7 B9180A4B00              mov ecx, 004B0A18
:004572EC E8AF130000              call 004586A0
:004572F1 C645F400                mov [ebp-0C], 00
:004572F5 C645D800                mov [ebp-28], 00
:004572F9 C745DC00000000          mov [ebp-24], 00000000
:00457300 EB09                    jmp 0045730B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004573C3(U)
|
:00457302 8B55DC                  mov edx, dword ptr [ebp-24]
:00457305 83C201                  add edx, 00000001
:00457308 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457300(U)
|
:0045730B 837DDC1E                cmp dword ptr [ebp-24], 0000001E
:0045730F 0F83B3000000            jnb 004573C8
:00457315 6880000000              push 00000080
:0045731A 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045731D 6BC924                  imul ecx, 00000024
:00457320 81C108F54A00            add ecx, 004AF508
:00457326 E8C587FDFF              call 0042FAF0
:0045732B 85C0                    test eax, eax
:0045732D 7555                    jne 00457384

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0045732F 6A10                    push 00000010
:00457331 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00457334 6BC924                  imul ecx, 00000024
:00457337 81C108F54A00            add ecx, 004AF508
:0045733D E81E84FDFF              call 0042F760
:00457342 85C0                    test eax, eax
:00457344 753E                    jne 00457384
:00457346 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00457349 6BC924                  imul ecx, 00000024
:0045734C 81C108F54A00            add ecx, 004AF508
:00457352 E87985FDFF              call 0042F8D0
:00457357 25FF000000              and eax, 000000FF
:0045735C 83F802                  cmp eax, 00000002
:0045735F 7523                    jne 00457384
:00457361 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00457364 6BC924                  imul ecx, 00000024
:00457367 81C108F54A00            add ecx, 004AF508
:0045736D E87E85FDFF              call 0042F8F0
:00457372 25FF000000              and eax, 000000FF
:00457377 83F807                  cmp eax, 00000007
:0045737A 7508                    jne 00457384
:0045737C 8A45F4                  mov al, byte ptr [ebp-0C]
:0045737F 0401                    add al, 01
:00457381 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045732D(C), :00457344(C), :0045735F(C), :0045737A(C)
|
:00457384 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00457387 6BC924                  imul ecx, 00000024
:0045738A 81C108F54A00            add ecx, 004AF508
:00457390 E85B85FDFF              call 0042F8F0
:00457395 25FF000000              and eax, 000000FF
:0045739A 83F807                  cmp eax, 00000007
:0045739D 7524                    jne 004573C3
:0045739F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004573A2 6BC924                  imul ecx, 00000024
:004573A5 81C108F54A00            add ecx, 004AF508
:004573AB E82085FDFF              call 0042F8D0
:004573B0 25FF000000              and eax, 000000FF
:004573B5 83F802                  cmp eax, 00000002
:004573B8 7509                    jne 004573C3
:004573BA 8A4DD8                  mov cl, byte ptr [ebp-28]
:004573BD 80C101                  add cl, 01
:004573C0 884DD8                  mov byte ptr [ebp-28], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045739D(C), :004573B8(C)
|
:004573C3 E93AFFFFFF              jmp 00457302

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045730F(C)
|
:004573C8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004573CB 81E2FF000000            and edx, 000000FF
:004573D1 85D2                    test edx, edx
:004573D3 753D                    jne 00457412
:004573D5 8B45D8                  mov eax, dword ptr [ebp-28]
:004573D8 25FF000000              and eax, 000000FF
:004573DD 83F801                  cmp eax, 00000001
:004573E0 7F12                    jg 004573F4
:004573E2 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004573E5 E8A661FEFF              call 0043D590
:004573EA 25FF000000              and eax, 000000FF
:004573EF 83F801                  cmp eax, 00000001
:004573F2 7E1E                    jle 00457412

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004573E0(C)
|
:004573F4 B9A8034B00              mov ecx, 004B03A8
:004573F9 E8F4DCFEFF              call 004450F2

* Possible StringData Ref from Data Obj ->"OܡH"
                                  |
:004573FE 8B0DB0D74700            mov ecx, dword ptr [0047D7B0]
:00457404 51                      push ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00457405 6A02                    push 00000002
:00457407 E86017FDFF              call 00428B6C
:0045740C 83C408                  add esp, 00000008
:0045740F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004573D3(C), :004573F2(C)
|
:00457412 C745E400000000          mov [ebp-1C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004572C8(C)
|
:00457419 E96AF9FFFF              jmp 00456D88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D95(C)
|
:0045741E E943F9FFFF              jmp 00456D66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D6A(C)
|
:00457423 B9A8034B00              mov ecx, 004B03A8
:00457428 E8C5DCFEFF              call 004450F2
:0045742D C745F000000000          mov [ebp-10], 00000000
:00457434 EB09                    jmp 0045743F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045745B(U)
|
:00457436 8B55F0                  mov edx, dword ptr [ebp-10]
:00457439 83C201                  add edx, 00000001
:0045743C 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457434(U)
|
:0045743F 837DF05A                cmp dword ptr [ebp-10], 0000005A
:00457443 7318                    jnb 0045745D
:00457445 68C0000000              push 000000C0
:0045744A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045744D 6BC924                  imul ecx, 00000024
:00457450 81C108F54A00            add ecx, 004AF508
:00457456 E86586FDFF              call 0042FAC0
:0045745B EBD9                    jmp 00457436

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457443(C)
|
:0045745D B9A8034B00              mov ecx, 004B03A8
:00457462 E817D3FEFF              call 0044477E
:00457467 B9A8034B00              mov ecx, 004B03A8
:0045746C E89CECFEFF              call 0044610D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456C85(U), :00457294(U), :004572BF(U), :004572E2(U)
|
:00457471 8BE5                    mov esp, ebp
:00457473 5D                      pop ebp
:00457474 C3                      ret



* Referenced by a CALL at Address:
|:00457197   
|
:00457475 55                      push ebp
:00457476 8BEC                    mov ebp, esp
:00457478 83EC28                  sub esp, 00000028
:0045747B C645DC00                mov [ebp-24], 00
:0045747F C745D800000000          mov [ebp-28], 00000000
:00457486 EB09                    jmp 00457491

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045752F(U)
|
:00457488 8B45D8                  mov eax, dword ptr [ebp-28]
:0045748B 83C001                  add eax, 00000001
:0045748E 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457486(U)
|
:00457491 837DD81E                cmp dword ptr [ebp-28], 0000001E
:00457495 0F8399000000            jnb 00457534
:0045749B 6880000000              push 00000080
:004574A0 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004574A3 6BC924                  imul ecx, 00000024
:004574A6 81C108F54A00            add ecx, 004AF508
:004574AC E83F86FDFF              call 0042FAF0
:004574B1 85C0                    test eax, eax
:004574B3 757A                    jne 0045752F
:004574B5 6A40                    push 00000040
:004574B7 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004574BA 6BC924                  imul ecx, 00000024
:004574BD 81C108F54A00            add ecx, 004AF508
:004574C3 E82886FDFF              call 0042FAF0
:004574C8 85C0                    test eax, eax
:004574CA 7563                    jne 0045752F
:004574CC 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004574CF 6BC924                  imul ecx, 00000024
:004574D2 81C108F54A00            add ecx, 004AF508
:004574D8 E8F383FDFF              call 0042F8D0
:004574DD 25FF000000              and eax, 000000FF
:004574E2 83F802                  cmp eax, 00000002
:004574E5 7548                    jne 0045752F
:004574E7 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004574EA 6BC924                  imul ecx, 00000024
:004574ED 81C108F54A00            add ecx, 004AF508
:004574F3 E8F883FDFF              call 0042F8F0
:004574F8 25FF000000              and eax, 000000FF
:004574FD 83F807                  cmp eax, 00000007
:00457500 752D                    jne 0045752F
:00457502 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00457505 6BC924                  imul ecx, 00000024
:00457508 81C108F54A00            add ecx, 004AF508
:0045750E E8495FFDFF              call 0042D45C
:00457513 85C0                    test eax, eax
:00457515 7518                    jne 0045752F
:00457517 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045751A 81E1FF000000            and ecx, 000000FF
:00457520 8A55D8                  mov dl, byte ptr [ebp-28]
:00457523 88540DE0                mov byte ptr [ebp+ecx-20], dl
:00457527 8A45DC                  mov al, byte ptr [ebp-24]
:0045752A 0401                    add al, 01
:0045752C 8845DC                  mov byte ptr [ebp-24], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004574B3(C), :004574CA(C), :004574E5(C), :00457500(C), :00457515(C)
|
:0045752F E954FFFFFF              jmp 00457488

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457495(C)
|
:00457534 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00457537 81E1FF000000            and ecx, 000000FF
:0045753D 85C9                    test ecx, ecx
:0045753F 7519                    jne 0045755A

* Possible StringData Ref from Data Obj ->"SiHʪC"
                                  |
:00457541 6888D84700              push 0047D888

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00457546 6A05                    push 00000005
:00457548 E81F16FDFF              call 00428B6C
:0045754D 83C408                  add esp, 00000008
:00457550 B801000000              mov eax, 00000001
:00457555 E983000000              jmp 004575DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045753F(C)
|
:0045755A 837D0800                cmp dword ptr [ebp+08], 00000000
:0045755E 7411                    je 00457571
:00457560 8A15840B4B00            mov dl, byte ptr [004B0B84]
:00457566 80C201                  add dl, 01
:00457569 8815840B4B00            mov byte ptr [004B0B84], dl
:0045756F EB2E                    jmp 0045759F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045755E(C)
|
:00457571 33C0                    xor eax, eax
:00457573 A0840B4B00              mov al, byte ptr [004B0B84]
:00457578 85C0                    test eax, eax
:0045757A 7514                    jne 00457590
:0045757C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045757F 81E1FF000000            and ecx, 000000FF
:00457585 83E901                  sub ecx, 00000001
:00457588 880D840B4B00            mov byte ptr [004B0B84], cl
:0045758E EB0F                    jmp 0045759F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045757A(C)
|
:00457590 8A15840B4B00            mov dl, byte ptr [004B0B84]
:00457596 80EA01                  sub dl, 01
:00457599 8815840B4B00            mov byte ptr [004B0B84], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045756F(U), :0045758E(U)
|
:0045759F 33C0                    xor eax, eax
:004575A1 A0840B4B00              mov al, byte ptr [004B0B84]
:004575A6 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004575A9 81E1FF000000            and ecx, 000000FF
:004575AF 3BC1                    cmp eax, ecx
:004575B1 7C07                    jl 004575BA
:004575B3 C605840B4B0000          mov byte ptr [004B0B84], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004575B1(C)
|
:004575BA B9A8034B00              mov ecx, 004B03A8
:004575BF E81CD4FEFF              call 004449E0
:004575C4 33D2                    xor edx, edx
:004575C6 8A15840B4B00            mov dl, byte ptr [004B0B84]
:004575CC 8A4415E0                mov al, byte ptr [ebp+edx-20]
:004575D0 50                      push eax
:004575D1 B9A8034B00              mov ecx, 004B03A8
:004575D6 E88AE6FEFF              call 00445C65
:004575DB 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457555(U)
|
:004575DD 8BE5                    mov esp, ebp
:004575DF 5D                      pop ebp
:004575E0 C3                      ret



* Referenced by a CALL at Addresses:
|:00457B3D   , :00457BBE   
|
:004575E1 55                      push ebp
:004575E2 8BEC                    mov ebp, esp
:004575E4 83EC18                  sub esp, 00000018
:004575E7 894DE8                  mov dword ptr [ebp-18], ecx
:004575EA 8B4508                  mov eax, dword ptr [ebp+08]
:004575ED F7D8                    neg eax
:004575EF 1BC0                    sbb eax, eax
:004575F1 83E01E                  and eax, 0000001E
:004575F4 8945EC                  mov dword ptr [ebp-14], eax
:004575F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004575FA F7D9                    neg ecx
:004575FC 1BC9                    sbb ecx, ecx
:004575FE 83E13C                  and ecx, 0000003C
:00457601 83C11E                  add ecx, 0000001E
:00457604 894DF4                  mov dword ptr [ebp-0C], ecx
:00457607 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045760A E8A101FBFF              call 004077B0
:0045760F C745F800000000          mov [ebp-08], 00000000
:00457616 8B55EC                  mov edx, dword ptr [ebp-14]
:00457619 8955F0                  mov dword ptr [ebp-10], edx
:0045761C EB09                    jmp 00457627

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457866(U)
|
:0045761E 8B45F0                  mov eax, dword ptr [ebp-10]
:00457621 83C001                  add eax, 00000001
:00457624 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045761C(U)
|
:00457627 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045762A 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0045762D 0F8338020000            jnb 0045786B
:00457633 6A20                    push 00000020
:00457635 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457638 6BC924                  imul ecx, 00000024
:0045763B 81C108F54A00            add ecx, 004AF508
:00457641 E81A81FDFF              call 0042F760
:00457646 85C0                    test eax, eax
:00457648 0F840B010000            je 00457759
:0045764E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457651 6BC924                  imul ecx, 00000024
:00457654 81C108F54A00            add ecx, 004AF508
:0045765A E8477EFDFF              call 0042F4A6
:0045765F 85C0                    test eax, eax
:00457661 0F84F2000000            je 00457759
:00457667 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045766A 6BC924                  imul ecx, 00000024
:0045766D 81C108F54A00            add ecx, 004AF508
:00457673 E8F823FEFF              call 00439A70
:00457678 C1E804                  shr eax, 04
:0045767B 83C001                  add eax, 00000001
:0045767E 8945F8                  mov dword ptr [ebp-08], eax
:00457681 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457684 6BC924                  imul ecx, 00000024
:00457687 81C108F54A00            add ecx, 004AF508
:0045768D E8DED1FAFF              call 00404870
:00457692 3B45F8                  cmp eax, dword ptr [ebp-08]
:00457695 7717                    ja 004576AE
:00457697 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045769A 6BC924                  imul ecx, 00000024
:0045769D 81C108F54A00            add ecx, 004AF508
:004576A3 E8C8D1FAFF              call 00404870
:004576A8 83E801                  sub eax, 00000001
:004576AB 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457695(C)
|
:004576AE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004576B1 6BC924                  imul ecx, 00000024
:004576B4 81C108F54A00            add ecx, 004AF508
:004576BA E8E11CFDFF              call 004293A0
:004576BF 50                      push eax
:004576C0 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004576C3 E8C880FDFF              call 0042F790
:004576C8 8A55FD                  mov dl, byte ptr [ebp-03]
:004576CB 52                      push edx
:004576CC 8A45FC                  mov al, byte ptr [ebp-04]
:004576CF 50                      push eax
:004576D0 B9A8034B00              mov ecx, 004B03A8
:004576D5 E85DE3FEFF              call 00445A37
:004576DA 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004576DC 6A03                    push 00000003
:004576DE 6A28                    push 00000028
:004576E0 8A4DF0                  mov cl, byte ptr [ebp-10]
:004576E3 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004576E4 68FF000000              push 000000FF
:004576E9 B9A8034B00              mov ecx, 004B03A8
:004576EE E8E3EFFEFF              call 004466D6
:004576F3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004576F6 6BC924                  imul ecx, 00000024
:004576F9 81C108F54A00            add ecx, 004AF508
:004576FF E86CD1FAFF              call 00404870
:00457704 2B45F8                  sub eax, dword ptr [ebp-08]
:00457707 50                      push eax
:00457708 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045770B 6BC924                  imul ecx, 00000024
:0045770E 81C108F54A00            add ecx, 004AF508
:00457714 E84732FDFF              call 0042A960
:00457719 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045771C 6BC924                  imul ecx, 00000024
:0045771F 81C108F54A00            add ecx, 004AF508
:00457725 E8A67FFDFF              call 0042F6D0
:0045772A 50                      push eax
:0045772B E820F80000              call 00466F50
:00457730 83C404                  add esp, 00000004
:00457733 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457736 6BC924                  imul ecx, 00000024
:00457739 81C108F54A00            add ecx, 004AF508
:0045773F E8927DFDFF              call 0042F4D6
:00457744 85C0                    test eax, eax
:00457746 7411                    je 00457759
:00457748 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045774B 6BC924                  imul ecx, 00000024
:0045774E 81C108F54A00            add ecx, 004AF508
:00457754 E81B4FFDFF              call 0042C674

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457648(C), :00457661(C), :00457746(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00457759 6A04                    push 00000004
:0045775B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045775E 6BC924                  imul ecx, 00000024
:00457761 81C108F54A00            add ecx, 004AF508
:00457767 E8F47FFDFF              call 0042F760
:0045776C 85C0                    test eax, eax
:0045776E 0F84F2000000            je 00457866
:00457774 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457777 6BC924                  imul ecx, 00000024
:0045777A 81C108F54A00            add ecx, 004AF508
:00457780 E8217DFDFF              call 0042F4A6
:00457785 85C0                    test eax, eax
:00457787 0F84D9000000            je 00457866
:0045778D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457790 6BC924                  imul ecx, 00000024
:00457793 81C108F54A00            add ecx, 004AF508
:00457799 E8327FFDFF              call 0042F6D0
:0045779E 8BC8                    mov ecx, eax
:004577A0 6BC970                  imul ecx, 00000070
:004577A3 81C198224900            add ecx, 00492298
:004577A9 E863ADFAFF              call 00402511
:004577AE C1E804                  shr eax, 04
:004577B1 83C001                  add eax, 00000001
:004577B4 8945F8                  mov dword ptr [ebp-08], eax
:004577B7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004577BA 6BC924                  imul ecx, 00000024
:004577BD 81C108F54A00            add ecx, 004AF508
:004577C3 E8E8D0FAFF              call 004048B0
:004577C8 3B45F8                  cmp eax, dword ptr [ebp-08]
:004577CB 7714                    ja 004577E1
:004577CD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004577D0 6BC924                  imul ecx, 00000024
:004577D3 81C108F54A00            add ecx, 004AF508
:004577D9 E8D2D0FAFF              call 004048B0
:004577DE 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004577CB(C)
|
:004577E1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004577E4 6BC924                  imul ecx, 00000024
:004577E7 81C108F54A00            add ecx, 004AF508
:004577ED E8AE1BFDFF              call 004293A0
:004577F2 50                      push eax
:004577F3 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004577F6 E8957FFDFF              call 0042F790
:004577FB 8A55FD                  mov dl, byte ptr [ebp-03]
:004577FE 52                      push edx
:004577FF 8A45FC                  mov al, byte ptr [ebp-04]
:00457802 50                      push eax
:00457803 B9A8034B00              mov ecx, 004B03A8
:00457808 E82AE2FEFF              call 00445A37
:0045780D 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045780F 6A03                    push 00000003
:00457811 6A2A                    push 0000002A
:00457813 8A4DF0                  mov cl, byte ptr [ebp-10]
:00457816 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00457817 68FF000000              push 000000FF
:0045781C B9A8034B00              mov ecx, 004B03A8
:00457821 E8B0EEFEFF              call 004466D6
:00457826 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457829 6BC924                  imul ecx, 00000024
:0045782C 81C108F54A00            add ecx, 004AF508
:00457832 E879D0FAFF              call 004048B0
:00457837 2B45F8                  sub eax, dword ptr [ebp-08]
:0045783A 50                      push eax
:0045783B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045783E 6BC924                  imul ecx, 00000024
:00457841 81C108F54A00            add ecx, 004AF508
:00457847 E87131FDFF              call 0042A9BD
:0045784C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045784F 6BC924                  imul ecx, 00000024
:00457852 81C108F54A00            add ecx, 004AF508
:00457858 E8737EFDFF              call 0042F6D0
:0045785D 50                      push eax
:0045785E E8EDF60000              call 00466F50
:00457863 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045776E(C), :00457787(C)
|
:00457866 E9B3FDFFFF              jmp 0045761E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045762D(C)
|
:0045786B 8BE5                    mov esp, ebp
:0045786D 5D                      pop ebp
:0045786E C20400                  ret 0004



* Referenced by a CALL at Address:
|:00457D5F   
|
:00457871 55                      push ebp
:00457872 8BEC                    mov ebp, esp
:00457874 83EC0C                  sub esp, 0000000C
:00457877 56                      push esi
:00457878 894DF4                  mov dword ptr [ebp-0C], ecx
:0045787B C745FC00000000          mov [ebp-04], 00000000
:00457882 837D0800                cmp dword ptr [ebp+08], 00000000
:00457886 0F85BB020000            jne 00457B47
:0045788C C645F800                mov [ebp-08], 00
:00457890 EB08                    jmp 0045789A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457930(U)
|
:00457892 8A45F8                  mov al, byte ptr [ebp-08]
:00457895 0401                    add al, 01
:00457897 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457890(U)
|
:0045789A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045789D 81E1FF000000            and ecx, 000000FF
:004578A3 83F95A                  cmp ecx, 0000005A
:004578A6 0F8D89000000            jnl 00457935
:004578AC 68C0000000              push 000000C0
:004578B1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004578B4 81E1FF000000            and ecx, 000000FF
:004578BA 6BC924                  imul ecx, 00000024
:004578BD 81C108F54A00            add ecx, 004AF508
:004578C3 E8F881FDFF              call 0042FAC0
:004578C8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004578CB 81E1FF000000            and ecx, 000000FF
:004578D1 6BC924                  imul ecx, 00000024
:004578D4 81C108F54A00            add ecx, 004AF508
:004578DA E81439FDFF              call 0042B1F3
:004578DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004578E2 81E1FF000000            and ecx, 000000FF
:004578E8 6BC924                  imul ecx, 00000024
:004578EB 81C108F54A00            add ecx, 004AF508
:004578F1 E8E63BFDFF              call 0042B4DC
:004578F6 6A01                    push 00000001
:004578F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004578FB 81E1FF000000            and ecx, 000000FF
:00457901 6BC924                  imul ecx, 00000024
:00457904 81C108F54A00            add ecx, 004AF508
:0045790A E86184FDFF              call 0042FD70
:0045790F 50                      push eax
:00457910 E823A70000              call 00462038
:00457915 83C408                  add esp, 00000008
:00457918 50                      push eax
:00457919 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045791C 81E1FF000000            and ecx, 000000FF
:00457922 6BC924                  imul ecx, 00000024
:00457925 81C108F54A00            add ecx, 004AF508
:0045792B E81022FEFF              call 00439B40
:00457930 E95DFFFFFF              jmp 00457892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004578A6(C)
|
:00457935 C645F800                mov [ebp-08], 00
:00457939 EB09                    jmp 00457944

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457AFE(U)
|
:0045793B 8A55F8                  mov dl, byte ptr [ebp-08]
:0045793E 80C201                  add dl, 01
:00457941 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457939(U)
|
:00457944 8B45F8                  mov eax, dword ptr [ebp-08]
:00457947 25FF000000              and eax, 000000FF
:0045794C 83F819                  cmp eax, 00000019
:0045794F 0F8DAE010000            jnl 00457B03
:00457955 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457958 81E1FF000000            and ecx, 000000FF
:0045795E 6BC970                  imul ecx, 00000070
:00457961 81C198224900            add ecx, 00492298
:00457967 E884CFFAFF              call 004048F0
:0045796C 25FF000000              and eax, 000000FF
:00457971 85C0                    test eax, eax
:00457973 0F8585010000            jne 00457AFE
:00457979 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045797C 81E1FF000000            and ecx, 000000FF
:00457982 6BC970                  imul ecx, 00000070
:00457985 81C198224900            add ecx, 00492298
:0045798B E8BAD80000              call 0046524A
:00457990 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00457995 3DFF000000              cmp eax, 000000FF
:0045799A 0F855E010000            jne 00457AFE
:004579A0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004579A3 81E1FF000000            and ecx, 000000FF
:004579A9 6BC970                  imul ecx, 00000070
:004579AC 81C198224900            add ecx, 00492298
:004579B2 E829ABFAFF              call 004024E0
:004579B7 8BF0                    mov esi, eax
:004579B9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004579BC 81E1FF000000            and ecx, 000000FF
:004579C2 6BC970                  imul ecx, 00000070
:004579C5 81C198224900            add ecx, 00492298
:004579CB E8C0CEFAFF              call 00404890
:004579D0 3BF0                    cmp esi, eax
:004579D2 767B                    jbe 00457A4F

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004579D4 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004579D6 6A02                    push 00000002
:004579D8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004579DB 81E1FF000000            and ecx, 000000FF
:004579E1 6BC970                  imul ecx, 00000070
:004579E4 81C198224900            add ecx, 00492298
:004579EA E8F1AAFAFF              call 004024E0
:004579EF 50                      push eax
:004579F0 E86BA50000              call 00461F60
:004579F5 83C40C                  add esp, 0000000C
:004579F8 8945FC                  mov dword ptr [ebp-04], eax
:004579FB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004579FE 81E1FF000000            and ecx, 000000FF
:00457A04 6BC970                  imul ecx, 00000070
:00457A07 81C198224900            add ecx, 00492298
:00457A0D E8CEAAFAFF              call 004024E0
:00457A12 50                      push eax
:00457A13 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A16 51                      push ecx
:00457A17 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457A1A 81E1FF000000            and ecx, 000000FF
:00457A20 6BC970                  imul ecx, 00000070
:00457A23 81C198224900            add ecx, 00492298
:00457A29 E862CEFAFF              call 00404890
:00457A2E 50                      push eax
:00457A2F E85EA50000              call 00461F92
:00457A34 83C40C                  add esp, 0000000C
:00457A37 50                      push eax
:00457A38 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457A3B 81E1FF000000            and ecx, 000000FF
:00457A41 6BC970                  imul ecx, 00000070
:00457A44 81C198224900            add ecx, 00492298
:00457A4A E8F17DFDFF              call 0042F840

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004579D2(C)
|
:00457A4F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457A52 81E1FF000000            and ecx, 000000FF
:00457A58 6BC970                  imul ecx, 00000070
:00457A5B 81C198224900            add ecx, 00492298
:00457A61 E8ABAAFAFF              call 00402511
:00457A66 8BF0                    mov esi, eax
:00457A68 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457A6B 81E1FF000000            and ecx, 000000FF
:00457A71 6BC970                  imul ecx, 00000070
:00457A74 81C198224900            add ecx, 00492298
:00457A7A E851CEFAFF              call 004048D0
:00457A7F 3BF0                    cmp esi, eax
:00457A81 767B                    jbe 00457AFE

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00457A83 6A0A                    push 0000000A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00457A85 6A02                    push 00000002
:00457A87 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457A8A 81E1FF000000            and ecx, 000000FF
:00457A90 6BC970                  imul ecx, 00000070
:00457A93 81C198224900            add ecx, 00492298
:00457A99 E873AAFAFF              call 00402511
:00457A9E 50                      push eax
:00457A9F E8BCA40000              call 00461F60
:00457AA4 83C40C                  add esp, 0000000C
:00457AA7 8945FC                  mov dword ptr [ebp-04], eax
:00457AAA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457AAD 81E1FF000000            and ecx, 000000FF
:00457AB3 6BC970                  imul ecx, 00000070
:00457AB6 81C198224900            add ecx, 00492298
:00457ABC E850AAFAFF              call 00402511
:00457AC1 50                      push eax
:00457AC2 8B55FC                  mov edx, dword ptr [ebp-04]
:00457AC5 52                      push edx
:00457AC6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457AC9 81E1FF000000            and ecx, 000000FF
:00457ACF 6BC970                  imul ecx, 00000070
:00457AD2 81C198224900            add ecx, 00492298
:00457AD8 E8F3CDFAFF              call 004048D0
:00457ADD 50                      push eax
:00457ADE E8AFA40000              call 00461F92
:00457AE3 83C40C                  add esp, 0000000C
:00457AE6 50                      push eax
:00457AE7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457AEA 81E1FF000000            and ecx, 000000FF
:00457AF0 6BC970                  imul ecx, 00000070
:00457AF3 81C198224900            add ecx, 00492298
:00457AF9 E8627DFDFF              call 0042F860

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457973(C), :0045799A(C), :00457A81(C)
|
:00457AFE E938FEFFFF              jmp 0045793B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045794F(C)
|
:00457B03 C645F800                mov [ebp-08], 00
:00457B07 EB08                    jmp 00457B11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457B36(U)
|
:00457B09 8A45F8                  mov al, byte ptr [ebp-08]
:00457B0C 0401                    add al, 01
:00457B0E 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457B07(U)
|
:00457B11 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457B14 81E1FF000000            and ecx, 000000FF
:00457B1A 83F91E                  cmp ecx, 0000001E
:00457B1D 7D19                    jge 00457B38
:00457B1F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457B22 81E1FF000000            and ecx, 000000FF
:00457B28 6BC924                  imul ecx, 00000024
:00457B2B 81C108F54A00            add ecx, 004AF508
:00457B31 E85740FDFF              call 0042BB8D
:00457B36 EBD1                    jmp 00457B09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457B1D(C)
|
:00457B38 6A00                    push 00000000
:00457B3A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457B3D E89FFAFFFF              call 004575E1
:00457B42 E8B1CBFFFF              call 004546F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457886(C)
|
:00457B47 B9A8034B00              mov ecx, 004B03A8
:00457B4C E8DFE5FEFF              call 00446130
:00457B51 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457B54 E8470B0000              call 004586A0
:00457B59 6A01                    push 00000001
:00457B5B E8B8CB0000              call 00464718
:00457B60 83C404                  add esp, 00000004
:00457B63 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457B66 C7424801000000          mov [edx+48], 00000001
:00457B6D 6A00                    push 00000000
:00457B6F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457B72 8B4848                  mov ecx, dword ptr [eax+48]
:00457B75 51                      push ecx
:00457B76 E8C9120100              call 00468E44
:00457B7B 83C408                  add esp, 00000008
:00457B7E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457B81 E8CCF0FFFF              call 00456C52
:00457B86 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457B89 C7424800000000          mov [edx+48], 00000000
:00457B90 6A00                    push 00000000
:00457B92 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457B95 8B4848                  mov ecx, dword ptr [eax+48]
:00457B98 51                      push ecx
:00457B99 E8A6120100              call 00468E44
:00457B9E 83C408                  add esp, 00000008
:00457BA1 6A00                    push 00000000
:00457BA3 E870CB0000              call 00464718
:00457BA8 83C404                  add esp, 00000004
:00457BAB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457BAE 33C0                    xor eax, eax
:00457BB0 8A4201                  mov al, byte ptr [edx+01]
:00457BB3 85C0                    test eax, eax
:00457BB5 7402                    je 00457BB9
:00457BB7 EB12                    jmp 00457BCB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457BB5(C)
|
:00457BB9 6A01                    push 00000001
:00457BBB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457BBE E81EFAFFFF              call 004575E1
:00457BC3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457BC6 E89FE3FFFF              call 00455F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457BB7(U)
|
:00457BCB 5E                      pop esi
:00457BCC 8BE5                    mov esp, ebp
:00457BCE 5D                      pop ebp
:00457BCF C20400                  ret 0004



* Referenced by a CALL at Address:
|:00457E0F   
|
:00457BD2 55                      push ebp
:00457BD3 8BEC                    mov ebp, esp
:00457BD5 83EC0C                  sub esp, 0000000C
:00457BD8 894DF4                  mov dword ptr [ebp-0C], ecx
:00457BDB EB0F                    jmp 00457BEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457D94(U)
|
:00457BDD 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457BE0 8A4802                  mov cl, byte ptr [eax+02]
:00457BE3 80C101                  add cl, 01
:00457BE6 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457BE9 884A02                  mov byte ptr [edx+02], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457BDB(U)
|
:00457BEC 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457BEF 33C9                    xor ecx, ecx
:00457BF1 8A4801                  mov cl, byte ptr [eax+01]
:00457BF4 85C9                    test ecx, ecx
:00457BF6 0F859D010000            jne 00457D99
:00457BFC 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457BFF 33C0                    xor eax, eax
:00457C01 8A4202                  mov al, byte ptr [edx+02]
:00457C04 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457C07 33D2                    xor edx, edx
:00457C09 8A5103                  mov dl, byte ptr [ecx+03]
:00457C0C 3BC2                    cmp eax, edx
:00457C0E 0F8CE0000000            jl 00457CF4

* Possible StringData Ref from Data Obj ->"԰FAMhC"
                                  |
:00457C14 68A0D84700              push 0047D8A0
:00457C19 6A00                    push 00000000
:00457C1B E84C0FFDFF              call 00428B6C
:00457C20 83C408                  add esp, 00000008
:00457C23 C745FC01000000          mov [ebp-04], 00000001
:00457C2A C645F801                mov [ebp-08], 01
:00457C2E EB08                    jmp 00457C38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457CBC(U)
|
:00457C30 8A45F8                  mov al, byte ptr [ebp-08]
:00457C33 0401                    add al, 01
:00457C35 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457C2E(U)
|
:00457C38 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457C3B 81E1FF000000            and ecx, 000000FF
:00457C41 83F91E                  cmp ecx, 0000001E
:00457C44 7D7B                    jge 00457CC1
:00457C46 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457C49 81E1FF000000            and ecx, 000000FF
:00457C4F 6BC924                  imul ecx, 00000024
:00457C52 81C108F54A00            add ecx, 004AF508
:00457C58 E8737CFDFF              call 0042F8D0
:00457C5D 25FF000000              and eax, 000000FF
:00457C62 83F802                  cmp eax, 00000002
:00457C65 7555                    jne 00457CBC

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00457C67 68FF000000              push 000000FF
:00457C6C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457C6F 81E1FF000000            and ecx, 000000FF
:00457C75 6BC924                  imul ecx, 00000024
:00457C78 81C108F54A00            add ecx, 004AF508
:00457C7E E81D17FDFF              call 004293A0
:00457C83 50                      push eax
:00457C84 E837FEFEFF              call 00447AC0
:00457C89 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00457C8C 6A04                    push 00000004
:00457C8E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457C91 81E1FF000000            and ecx, 000000FF
:00457C97 6BC924                  imul ecx, 00000024
:00457C9A 81C108F54A00            add ecx, 004AF508
:00457CA0 E87B7DFDFF              call 0042FA20
:00457CA5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457CA8 81E1FF000000            and ecx, 000000FF
:00457CAE 6BC924                  imul ecx, 00000024
:00457CB1 81C108F54A00            add ecx, 004AF508
:00457CB7 E88C4FFDFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457C65(C)
|
:00457CBC E96FFFFFFF              jmp 00457C30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457C44(C)
|
:00457CC1 837DFC00                cmp dword ptr [ebp-04], 00000000
:00457CC5 7428                    je 00457CEF
:00457CC7 B908F54A00              mov ecx, 004AF508
:00457CCC E8FF7BFDFF              call 0042F8D0
:00457CD1 25FF000000              and eax, 000000FF
:00457CD6 83F802                  cmp eax, 00000002
:00457CD9 7514                    jne 00457CEF
:00457CDB B908F54A00              mov ecx, 004AF508
:00457CE0 E88F49FDFF              call 0042C674
:00457CE5 B9180A4B00              mov ecx, 004B0A18
:00457CEA E89B040000              call 0045818A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457CC5(C), :00457CD9(C)
|
:00457CEF E9A5000000              jmp 00457D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457C0E(C)
|
:00457CF4 C605840B4B0000          mov byte ptr [004B0B84], 00
:00457CFB 837D0800                cmp dword ptr [ebp+08], 00000000
:00457CFF 7508                    jne 00457D09
:00457D01 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457D04 E84E060000              call 00458357

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457CFF(C)
|
:00457D09 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457D0C 33C0                    xor eax, eax
:00457D0E 8A4202                  mov al, byte ptr [edx+02]
:00457D11 83C001                  add eax, 00000001
:00457D14 50                      push eax

* Possible StringData Ref from Data Obj ->"%w^X"
                                  |
:00457D15 68B4D84700              push 0047D8B4
:00457D1A 6A00                    push 00000000
:00457D1C E84B0EFDFF              call 00428B6C
:00457D21 83C40C                  add esp, 0000000C
:00457D24 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457D27 33D2                    xor edx, edx
:00457D29 8A5101                  mov dl, byte ptr [ecx+01]
:00457D2C 85D2                    test edx, edx
:00457D2E 751C                    jne 00457D4C
:00457D30 837D0800                cmp dword ptr [ebp+08], 00000000
:00457D34 7516                    jne 00457D4C
:00457D36 6A00                    push 00000000
:00457D38 B9F8134800              mov ecx, 004813F8
:00457D3D E8516DFBFF              call 0040EA93
:00457D42 B9180A4B00              mov ecx, 004B0A18
:00457D47 E83E040000              call 0045818A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457D2E(C), :00457D34(C)
|
:00457D4C 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457D4F 33C9                    xor ecx, ecx
:00457D51 8A4801                  mov cl, byte ptr [eax+01]
:00457D54 85C9                    test ecx, ecx
:00457D56 753C                    jne 00457D94
:00457D58 8B5508                  mov edx, dword ptr [ebp+08]
:00457D5B 52                      push edx
:00457D5C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457D5F E80DFBFFFF              call 00457871
:00457D64 837D0800                cmp dword ptr [ebp+08], 00000000
:00457D68 7407                    je 00457D71
:00457D6A C7450800000000          mov [ebp+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457D68(C)
|
:00457D71 E8AB480100              call 0046C621
:00457D76 50                      push eax
:00457D77 E822A30000              call 0046209E
:00457D7C 83C404                  add esp, 00000004
:00457D7F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457D82 33C9                    xor ecx, ecx
:00457D84 8A4801                  mov cl, byte ptr [eax+01]
:00457D87 83F905                  cmp ecx, 00000005
:00457D8A 7508                    jne 00457D94
:00457D8C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457D8F 8A4201                  mov al, byte ptr [edx+01]
:00457D92 EB31                    jmp 00457DC5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457D56(C), :00457D8A(C)
|
:00457D94 E944FEFFFF              jmp 00457BDD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00457BF6(C), :00457CEF(U)
|
:00457D99 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00457D9C E8FE020000              call 0045809F
:00457DA1 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457DA4 83C058                  add eax, 00000058
:00457DA7 50                      push eax
:00457DA8 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00457DAE 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00457DAF FF1558874B00            Call dword ptr [004B8758]
:00457DB5 8B55F4                  mov edx, dword ptr [ebp-0C]
:00457DB8 C7425401000000          mov [edx+54], 00000001
:00457DBF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00457DC2 8A4001                  mov al, byte ptr [eax+01]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457D92(U)
|
:00457DC5 8BE5                    mov esp, ebp
:00457DC7 5D                      pop ebp
:00457DC8 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042690D   
|
:00457DCB 55                      push ebp
:00457DCC 8BEC                    mov ebp, esp
:00457DCE 83EC08                  sub esp, 00000008
:00457DD1 894DF8                  mov dword ptr [ebp-08], ecx
:00457DD4 A1E8534800              mov eax, dword ptr [004853E8]
:00457DD9 8945FC                  mov dword ptr [ebp-04], eax
:00457DDC 833DE853480000          cmp dword ptr [004853E8], 00000000
:00457DE3 740A                    je 00457DEF
:00457DE5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457DE8 E836000000              call 00457E23
:00457DED EB0F                    jmp 00457DFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457DE3(C)
|
:00457DEF 8B0DE8534800            mov ecx, dword ptr [004853E8]
:00457DF5 51                      push ecx
:00457DF6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457DF9 E8E7D0FFFF              call 00454EE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457DED(U)
|
:00457DFE C705E853480000000000    mov dword ptr [004853E8], 00000000
:00457E08 8B55FC                  mov edx, dword ptr [ebp-04]
:00457E0B 52                      push edx
:00457E0C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457E0F E8BEFDFFFF              call 00457BD2
:00457E14 E86BF20000              call 00467084
:00457E19 8B45F8                  mov eax, dword ptr [ebp-08]
:00457E1C 8A4001                  mov al, byte ptr [eax+01]
:00457E1F 8BE5                    mov esp, ebp
:00457E21 5D                      pop ebp
:00457E22 C3                      ret



* Referenced by a CALL at Address:
|:00457DE8   
|
:00457E23 55                      push ebp
:00457E24 8BEC                    mov ebp, esp
:00457E26 83EC14                  sub esp, 00000014
:00457E29 894DF0                  mov dword ptr [ebp-10], ecx
:00457E2C A1C80C4B00              mov eax, dword ptr [004B0CC8]
:00457E31 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00457E32 FF15E0864B00            Call dword ptr [004B86E0]
:00457E38 85C0                    test eax, eax
:00457E3A 740A                    je 00457E46
:00457E3C B9D80C4B00              mov ecx, 004B0CD8
:00457E41 E814810000              call 0045FF5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457E3A(C)
|
:00457E46 6A19                    push 00000019
:00457E48 E82BE7FCFF              call 00426578
:00457E4D 83C404                  add esp, 00000004
:00457E50 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457E53 C6410100                mov [ecx+01], 00
:00457E57 E8CAF10000              call 00467026
:00457E5C B9C8E24A00              mov ecx, 004AE2C8
:00457E61 E86A73FBFF              call 0040F1D0
:00457E66 2500400000              and eax, 00004000
:00457E6B 85C0                    test eax, eax
:00457E6D 7409                    je 00457E78
:00457E6F C745EC00000000          mov [ebp-14], 00000000
:00457E76 EB12                    jmp 00457E8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457E6D(C)
|
:00457E78 B9C8E24A00              mov ecx, 004AE2C8
:00457E7D E8AE74FBFF              call 0040F330
:00457E82 25FF000000              and eax, 000000FF
:00457E87 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457E76(U)
|
:00457E8A 8B55F0                  mov edx, dword ptr [ebp-10]
:00457E8D 8A45EC                  mov al, byte ptr [ebp-14]
:00457E90 884225                  mov byte ptr [edx+25], al
:00457E93 E89AAFFBFF              call 00412E32
:00457E98 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457E9B E853040000              call 004582F3
:00457EA0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457EA3 E889040000              call 00458331
:00457EA8 B9880B4B00              mov ecx, 004B0B88
:00457EAD E8DA0A0000              call 0045898C
:00457EB2 E82FB0FBFF              call 00412EE6
:00457EB7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457EBA E8B184FFFF              call 00450370
:00457EBF 50                      push eax
:00457EC0 E8DEA60000              call 004625A3
:00457EC5 83C404                  add esp, 00000004
:00457EC8 8945FC                  mov dword ptr [ebp-04], eax
:00457ECB 6A00                    push 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:00457ECD 6A06                    push 00000006
:00457ECF 6A38                    push 00000038
:00457ED1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457ED4 8D14CD40000000          lea edx, dword ptr [8*ecx+00000040]
:00457EDB 52                      push edx

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00457EDC 68C8000000              push 000000C8
:00457EE1 8B45FC                  mov eax, dword ptr [ebp-04]
:00457EE4 C1E002                  shl eax, 02
:00457EE7 B940010000              mov ecx, 00000140
:00457EEC 2BC8                    sub ecx, eax
:00457EEE 83E920                  sub ecx, 00000020
:00457EF1 51                      push ecx
:00457EF2 B9000D4B00              mov ecx, 004B0D00
:00457EF7 E8BD8A0000              call 004609B9
:00457EFC 68DC000000              push 000000DC
:00457F01 8B55FC                  mov edx, dword ptr [ebp-04]
:00457F04 D1EA                    shr edx, 1
:00457F06 B828000000              mov eax, 00000028
:00457F0B 2BC2                    sub eax, edx
:00457F0D 50                      push eax
:00457F0E B9A8134800              mov ecx, 004813A8
:00457F13 E89300FBFF              call 00407FAB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00457F18 6A04                    push 00000004
:00457F1A B9A8134800              mov ecx, 004813A8
:00457F1F E8D001FBFF              call 004080F4
:00457F24 6A4F                    push 0000004F
:00457F26 B9A8134800              mov ecx, 004813A8
:00457F2B E82801FBFF              call 00408058
:00457F30 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457F33 E83884FFFF              call 00450370
:00457F38 50                      push eax
:00457F39 68A8134800              push 004813A8
:00457F3E E8AF0CFBFF              call 00408BF2
:00457F43 83C408                  add esp, 00000008
:00457F46 E802AFFBFF              call 00412E4D
:00457F4B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457F4E 33D2                    xor edx, edx
:00457F50 8A11                    mov dl, byte ptr [ecx]
:00457F52 3B153C7A4700            cmp edx, dword ptr [00477A3C]
:00457F58 740E                    je 00457F68
:00457F5A 8B45F0                  mov eax, dword ptr [ebp-10]
:00457F5D 8A08                    mov cl, byte ptr [eax]
:00457F5F 51                      push ecx
:00457F60 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457F63 E8B6CEFFFF              call 00454E1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457F58(C)
|
:00457F68 C6057C0B4B0000          mov byte ptr [004B0B7C], 00
:00457F6F C605800B4B0000          mov byte ptr [004B0B80], 00
:00457F76 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457F79 E84ACFFFFF              call 00454EC8
:00457F7E C745F800000000          mov [ebp-08], 00000000
:00457F85 EB09                    jmp 00457F90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457FC1(U)
|
:00457F87 8B55F8                  mov edx, dword ptr [ebp-08]
:00457F8A 83C201                  add edx, 00000001
:00457F8D 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457F85(U)
|
:00457F90 837DF85A                cmp dword ptr [ebp-08], 0000005A
:00457F94 732D                    jnb 00457FC3
:00457F96 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457F99 6BC924                  imul ecx, 00000024
:00457F9C 81C108F54A00            add ecx, 004AF508
:00457FA2 E82979FDFF              call 0042F8D0
:00457FA7 25FF000000              and eax, 000000FF
:00457FAC 85C0                    test eax, eax
:00457FAE 7411                    je 00457FC1
:00457FB0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00457FB3 6BC924                  imul ecx, 00000024
:00457FB6 81C108F54A00            add ecx, 004AF508
:00457FBC E8FD44FDFF              call 0042C4BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457FAE(C)
|
:00457FC1 EBC4                    jmp 00457F87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457F94(C)
|
:00457FC3 6880010000              push 00000180
:00457FC8 6870020000              push 00000270
:00457FCD 6A20                    push 00000020
:00457FCF 6A00                    push 00000000
:00457FD1 B9A8034B00              mov ecx, 004B03A8
:00457FD6 E8C7ADFEFF              call 00442DA2
:00457FDB E852AEFBFF              call 00412E32
:00457FE0 6A00                    push 00000000
:00457FE2 E831C70000              call 00464718
:00457FE7 83C404                  add esp, 00000004
:00457FEA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00457FED E8B6CEFFFF              call 00454EA8
:00457FF2 B9800D4B00              mov ecx, 004B0D80
:00457FF7 E8859B0000              call 00461B81
:00457FFC B9C8E24A00              mov ecx, 004AE2C8
:00458001 E8EA7CFDFF              call 0042FCF0
:00458006 25FF000000              and eax, 000000FF
:0045800B 50                      push eax
:0045800C B9880D4B00              mov ecx, 004B0D88
:00458011 E8179B0000              call 00461B2D
:00458016 B908F54A00              mov ecx, 004AF508
:0045801B E88013FDFF              call 004293A0
:00458020 668B00                  mov ax, word ptr [eax]
:00458023 668945F4                mov word ptr [ebp-0C], ax
:00458027 8A4DF5                  mov cl, byte ptr [ebp-0B]
:0045802A 51                      push ecx
:0045802B 8A55F4                  mov dl, byte ptr [ebp-0C]
:0045802E 52                      push edx
:0045802F B9A8034B00              mov ecx, 004B03A8
:00458034 E8FED9FEFF              call 00445A37
:00458039 B9A8034B00              mov ecx, 004B03A8
:0045803E E8CAE0FEFF              call 0044610D
:00458043 B9A8034B00              mov ecx, 004B03A8
:00458048 E831C7FEFF              call 0044477E
:0045804D E8FBADFBFF              call 00412E4D
:00458052 6A00                    push 00000000
:00458054 8B45F0                  mov eax, dword ptr [ebp-10]
:00458057 660FB608                movzx cx, byte ptr [eax]
:0045805B 51                      push ecx
:0045805C E83FA8FBFF              call 004128A0
:00458061 83C408                  add esp, 00000008
:00458064 E8BAADFBFF              call 00412E23
:00458069 E8E7EBFCFF              call 00426C55
:0045806E 6A00                    push 00000000
:00458070 E803E5FCFF              call 00426578
:00458075 83C404                  add esp, 00000004
:00458078 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045807B E8AC030000              call 0045842C
:00458080 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00458086 52                      push edx

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:00458087 FF1528874B00            Call dword ptr [004B8728]
:0045808D A1380E4B00              mov eax, dword ptr [004B0E38]
:00458092 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00458093 FF15A4864B00            Call dword ptr [004B86A4]
:00458099 32C0                    xor al, al
:0045809B 8BE5                    mov esp, ebp
:0045809D 5D                      pop ebp
:0045809E C3                      ret



* Referenced by a CALL at Address:
|:00457D9C   
|
:0045809F 55                      push ebp
:004580A0 8BEC                    mov ebp, esp
:004580A2 83EC08                  sub esp, 00000008
:004580A5 894DF8                  mov dword ptr [ebp-08], ecx
:004580A8 6A00                    push 00000000
:004580AA E869C60000              call 00464718
:004580AF 83C404                  add esp, 00000004
:004580B2 C645FC00                mov [ebp-04], 00
:004580B6 EB08                    jmp 004580C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458108(U)
|
:004580B8 8A45FC                  mov al, byte ptr [ebp-04]
:004580BB 0401                    add al, 01
:004580BD 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004580B6(U)
|
:004580C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004580C3 81E1FF000000            and ecx, 000000FF
:004580C9 83F95A                  cmp ecx, 0000005A
:004580CC 7D3C                    jge 0045810A
:004580CE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004580D1 81E1FF000000            and ecx, 000000FF
:004580D7 6BC924                  imul ecx, 00000024
:004580DA 81C108F54A00            add ecx, 004AF508
:004580E0 E8EB77FDFF              call 0042F8D0
:004580E5 25FF000000              and eax, 000000FF
:004580EA 83F802                  cmp eax, 00000002
:004580ED 7519                    jne 00458108
:004580EF 6A01                    push 00000001
:004580F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004580F4 81E1FF000000            and ecx, 000000FF
:004580FA 6BC924                  imul ecx, 00000024
:004580FD 81C108F54A00            add ecx, 004AF508
:00458103 E81879FDFF              call 0042FA20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004580ED(C)
|
:00458108 EBAE                    jmp 004580B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004580CC(C)
|
:0045810A C645FC00                mov [ebp-04], 00
:0045810E EB09                    jmp 00458119

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458184(U)
|
:00458110 8A55FC                  mov dl, byte ptr [ebp-04]
:00458113 80C201                  add dl, 01
:00458116 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045810E(U)
|
:00458119 8B45FC                  mov eax, dword ptr [ebp-04]
:0045811C 25FF000000              and eax, 000000FF
:00458121 83F819                  cmp eax, 00000019
:00458124 7D60                    jge 00458186
:00458126 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458129 81E1FF000000            and ecx, 000000FF
:0045812F 6BC970                  imul ecx, 00000070
:00458132 81C198224900            add ecx, 00492298
:00458138 E8A3A3FAFF              call 004024E0
:0045813D 50                      push eax
:0045813E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458141 81E1FF000000            and ecx, 000000FF
:00458147 6BC970                  imul ecx, 00000070
:0045814A 81C198224900            add ecx, 00492298
:00458150 E8EB76FDFF              call 0042F840
:00458155 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458158 81E1FF000000            and ecx, 000000FF
:0045815E 6BC970                  imul ecx, 00000070
:00458161 81C198224900            add ecx, 00492298
:00458167 E8A5A3FAFF              call 00402511
:0045816C 50                      push eax
:0045816D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458170 81E1FF000000            and ecx, 000000FF
:00458176 6BC970                  imul ecx, 00000070
:00458179 81C198224900            add ecx, 00492298
:0045817F E8DC76FDFF              call 0042F860
:00458184 EB8A                    jmp 00458110

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458124(C)
|
:00458186 8BE5                    mov esp, ebp
:00458188 5D                      pop ebp
:00458189 C3                      ret



* Referenced by a CALL at Addresses:
|:0042C8ED   , :004572D1   , :00457CEA   , :00457D47   
|
:0045818A 55                      push ebp
:0045818B 8BEC                    mov ebp, esp
:0045818D 83EC18                  sub esp, 00000018
:00458190 894DE8                  mov dword ptr [ebp-18], ecx
:00458193 C745F800000000          mov [ebp-08], 00000000
:0045819A 8B45E8                  mov eax, dword ptr [ebp-18]
:0045819D 33C9                    xor ecx, ecx
:0045819F 8A4801                  mov cl, byte ptr [eax+01]
:004581A2 85C9                    test ecx, ecx
:004581A4 7416                    je 004581BC
:004581A6 6A00                    push 00000000
:004581A8 B9F8134800              mov ecx, 004813F8
:004581AD E8E168FBFF              call 0040EA93
:004581B2 B801000000              mov eax, 00000001
:004581B7 E928010000              jmp 004582E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004581A4(C)
|
:004581BC C745F000000000          mov [ebp-10], 00000000
:004581C3 C645F41E                mov [ebp-0C], 1E
:004581C7 EB09                    jmp 004581D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458209(U)
|
:004581C9 8A55F4                  mov dl, byte ptr [ebp-0C]
:004581CC 80C201                  add dl, 01
:004581CF 8855F4                  mov byte ptr [ebp-0C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004581C7(U)
|
:004581D2 8B45F4                  mov eax, dword ptr [ebp-0C]
:004581D5 25FF000000              and eax, 000000FF
:004581DA 83F85A                  cmp eax, 0000005A
:004581DD 7D2C                    jge 0045820B
:004581DF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004581E2 81E1FF000000            and ecx, 000000FF
:004581E8 6BC924                  imul ecx, 00000024
:004581EB 81C108F54A00            add ecx, 004AF508
:004581F1 E8DA76FDFF              call 0042F8D0
:004581F6 25FF000000              and eax, 000000FF
:004581FB 83F802                  cmp eax, 00000002
:004581FE 7509                    jne 00458209
:00458200 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458203 83C101                  add ecx, 00000001
:00458206 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004581FE(C)
|
:00458209 EBBE                    jmp 004581C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004581DD(C)
|
:0045820B C745FC00000000          mov [ebp-04], 00000000
:00458212 C645F400                mov [ebp-0C], 00
:00458216 EB09                    jmp 00458221

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458258(U)
|
:00458218 8A55F4                  mov dl, byte ptr [ebp-0C]
:0045821B 80C201                  add dl, 01
:0045821E 8855F4                  mov byte ptr [ebp-0C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458216(U)
|
:00458221 8B45F4                  mov eax, dword ptr [ebp-0C]
:00458224 25FF000000              and eax, 000000FF
:00458229 83F81E                  cmp eax, 0000001E
:0045822C 7D2C                    jge 0045825A
:0045822E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00458231 81E1FF000000            and ecx, 000000FF
:00458237 6BC924                  imul ecx, 00000024
:0045823A 81C108F54A00            add ecx, 004AF508
:00458240 E88B76FDFF              call 0042F8D0
:00458245 25FF000000              and eax, 000000FF
:0045824A 83F802                  cmp eax, 00000002
:0045824D 7509                    jne 00458258
:0045824F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458252 83C101                  add ecx, 00000001
:00458255 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045824D(C)
|
:00458258 EBBE                    jmp 00458218

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045822C(C)
|
:0045825A 837DF000                cmp dword ptr [ebp-10], 00000000
:0045825E 7406                    je 00458266
:00458260 837DFC00                cmp dword ptr [ebp-04], 00000000
:00458264 7507                    jne 0045826D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045825E(C)
|
:00458266 C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458264(C)
|
:0045826D 837DF800                cmp dword ptr [ebp-08], 00000000
:00458271 746F                    je 004582E2
:00458273 837DF000                cmp dword ptr [ebp-10], 00000000
:00458277 750E                    jne 00458287
:00458279 6A01                    push 00000001
:0045827B B9F8134800              mov ecx, 004813F8
:00458280 E83B79FDFF              call 0042FBC0
:00458285 EB0C                    jmp 00458293

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458277(C)
|
:00458287 6A01                    push 00000001
:00458289 B9F8134800              mov ecx, 004813F8
:0045828E E84D79FDFF              call 0042FBE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458285(U)
|
:00458293 C745EC00000000          mov [ebp-14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004582BA(U)
|
:0045829A 837DEC04                cmp dword ptr [ebp-14], 00000004
:0045829E 741C                    je 004582BC
:004582A0 837DEC02                cmp dword ptr [ebp-14], 00000002
:004582A4 7416                    je 004582BC
:004582A6 6A00                    push 00000000
:004582A8 B9F8134800              mov ecx, 004813F8
:004582AD E8E167FBFF              call 0040EA93
:004582B2 8945EC                  mov dword ptr [ebp-14], eax
:004582B5 E894420100              call 0046C54E
:004582BA EBDE                    jmp 0045829A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045829E(C), :004582A4(C)
|
:004582BC B9180A4B00              mov ecx, 004B0A18
:004582C1 E87A79FDFF              call 0042FC40
:004582C6 25FF000000              and eax, 000000FF
:004582CB 85C0                    test eax, eax
:004582CD 750C                    jne 004582DB

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004582CF 6A03                    push 00000003
:004582D1 B9180A4B00              mov ecx, 004B0A18
:004582D6 E865A5FBFF              call 00412840

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004582CD(C)
|
:004582DB B801000000              mov eax, 00000001
:004582E0 EB02                    jmp 004582E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458271(C)
|
:004582E2 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004581B7(U), :004582E0(U)
|
:004582E4 8BE5                    mov esp, ebp
:004582E6 5D                      pop ebp
:004582E7 C3                      ret



* Referenced by a CALL at Address:
|:00454F5B   
|
:004582E8 55                      push ebp
:004582E9 8BEC                    mov ebp, esp
:004582EB 51                      push ecx
:004582EC 894DFC                  mov dword ptr [ebp-04], ecx
:004582EF 8BE5                    mov esp, ebp
:004582F1 5D                      pop ebp
:004582F2 C3                      ret



* Referenced by a CALL at Addresses:
|:00454FE0   , :00457E9B   
|
:004582F3 55                      push ebp
:004582F4 8BEC                    mov ebp, esp
:004582F6 83EC6C                  sub esp, 0000006C
:004582F9 894D94                  mov dword ptr [ebp-6C], ecx
:004582FC B9C8E24A00              mov ecx, 004AE2C8
:00458301 E8AA70FBFF              call 0040F3B0
:00458306 25FF000000              and eax, 000000FF
:0045830B 50                      push eax
:0045830C 8D4598                  lea eax, dword ptr [ebp-68]
:0045830F 50                      push eax
:00458310 E8E6D6FAFF              call 004059FB
:00458315 83C408                  add esp, 00000008
:00458318 6A1E                    push 0000001E
:0045831A 8D4D98                  lea ecx, dword ptr [ebp-68]
:0045831D 51                      push ecx
:0045831E 8B5594                  mov edx, dword ptr [ebp-6C]
:00458321 83C206                  add edx, 00000006
:00458324 52                      push edx
:00458325 E8A6560100              call 0046D9D0
:0045832A 83C40C                  add esp, 0000000C
:0045832D 8BE5                    mov esp, ebp
:0045832F 5D                      pop ebp
:00458330 C3                      ret



* Referenced by a CALL at Addresses:
|:004320F1   , :0045532F   , :00457EA3   
|
:00458331 55                      push ebp
:00458332 8BEC                    mov ebp, esp
:00458334 51                      push ecx
:00458335 894DFC                  mov dword ptr [ebp-04], ecx
:00458338 E8F5AAFBFF              call 00412E32
:0045833D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458340 E82B80FFFF              call 00450370
:00458345 50                      push eax
:00458346 E886C70000              call 00464AD1
:0045834B 83C404                  add esp, 00000004
:0045834E E8FAAAFBFF              call 00412E4D
:00458353 8BE5                    mov esp, ebp
:00458355 5D                      pop ebp
:00458356 C3                      ret



* Referenced by a CALL at Address:
|:00457D04   
|
:00458357 55                      push ebp
:00458358 8BEC                    mov ebp, esp
:0045835A 83EC0C                  sub esp, 0000000C
:0045835D 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00006: ""
                                  |
:00458360 6A06                    push 00000006
:00458362 E84E9D0000              call 004620B5
:00458367 83C404                  add esp, 00000004
:0045836A 8845F8                  mov byte ptr [ebp-08], al
:0045836D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00458370 8A4804                  mov cl, byte ptr [eax+04]
:00458373 884DFC                  mov byte ptr [ebp-04], cl
:00458376 8B55FC                  mov edx, dword ptr [ebp-04]
:00458379 81E2FF000000            and edx, 000000FF
:0045837F 8B45F8                  mov eax, dword ptr [ebp-08]
:00458382 25FF000000              and eax, 000000FF
:00458387 3BD0                    cmp edx, eax
:00458389 7E0B                    jle 00458396
:0045838B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045838E 80E901                  sub cl, 01
:00458391 884DFC                  mov byte ptr [ebp-04], cl
:00458394 EB1E                    jmp 004583B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458389(C)
|
:00458396 8B55FC                  mov edx, dword ptr [ebp-04]
:00458399 81E2FF000000            and edx, 000000FF
:0045839F 8B45F8                  mov eax, dword ptr [ebp-08]
:004583A2 25FF000000              and eax, 000000FF
:004583A7 3BD0                    cmp edx, eax
:004583A9 7D09                    jge 004583B4
:004583AB 8A4DFC                  mov cl, byte ptr [ebp-04]
:004583AE 80C101                  add cl, 01
:004583B1 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458394(U), :004583A9(C)
|
:004583B4 8B55FC                  mov edx, dword ptr [ebp-04]
:004583B7 81E2FF000000            and edx, 000000FF
:004583BD 85D2                    test edx, edx
:004583BF 7509                    jne 004583CA
:004583C1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004583C4 C6400405                mov [eax+04], 05
:004583C8 EB20                    jmp 004583EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004583BF(C)
|
:004583CA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004583CD 81E1FF000000            and ecx, 000000FF
:004583D3 83F905                  cmp ecx, 00000005
:004583D6 7509                    jne 004583E1
:004583D8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004583DB C6420400                mov [edx+04], 00
:004583DF EB09                    jmp 004583EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004583D6(C)
|
:004583E1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004583E4 8A4DFC                  mov cl, byte ptr [ebp-04]
:004583E7 884804                  mov byte ptr [eax+04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004583C8(U), :004583DF(U)
|
:004583EA 8BE5                    mov esp, ebp
:004583EC 5D                      pop ebp
:004583ED C3                      ret



* Referenced by a CALL at Addresses:
|:0042B0EE   , :0042B102   , :0042E49E   , :0042E4B2   , :0042EB5F   
|:0042EB73   , :0042F27A   , :0042F28E   , :0042F56B   , :004302B5   
|:004303AF   , :004303F0   , :00430431   , :0043930E   , :0043A131   
|:0043A145   , :0043A2D1   , :0043A2E5   , :0043AD61   , :0043AD75   
|:0043AEEB   , :0043AEFF   , :0043B255   , :0043B269   , :0043B48F   
|:0043B4A3   , :0043BC25   , :0043BC39   , :0044005E   , :00440072   
|:004405FD   , :00440611   , :00440741   , :00440755   , :00441474   
|:00441488   , :004415CD   , :004415E1   , :004418D1   , :004418E5   
|:00443911   , :00443925   , :00448D76   , :00454B66   , :00454CA5   
|
:004583EE 55                      push ebp
:004583EF 8BEC                    mov ebp, esp
:004583F1 51                      push ecx
:004583F2 894DFC                  mov dword ptr [ebp-04], ecx
:004583F5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004583F8 E83379FDFF              call 0042FD30
:004583FD 85C0                    test eax, eax
:004583FF 7419                    je 0045841A
:00458401 8B45FC                  mov eax, dword ptr [ebp-04]
:00458404 33C9                    xor ecx, ecx
:00458406 8A4804                  mov cl, byte ptr [eax+04]
:00458409 33D2                    xor edx, edx
:0045840B 8A91A8D74700            mov dl, byte ptr [ecx+0047D7A8]
:00458411 83FA02                  cmp edx, 00000002
:00458414 7504                    jne 0045841A
:00458416 B003                    mov al, 03
:00458418 EB0E                    jmp 00458428

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004583FF(C), :00458414(C)
|
:0045841A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045841D 33C9                    xor ecx, ecx
:0045841F 8A4804                  mov cl, byte ptr [eax+04]
:00458422 8A81A8D74700            mov al, byte ptr [ecx+0047D7A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458418(U)
|
:00458428 8BE5                    mov esp, ebp
:0045842A 5D                      pop ebp
:0045842B C3                      ret



* Referenced by a CALL at Addresses:
|:0045539E   , :0045807B   
|
:0045842C 55                      push ebp
:0045842D 8BEC                    mov ebp, esp
:0045842F 83EC38                  sub esp, 00000038
:00458432 56                      push esi
:00458433 894DC8                  mov dword ptr [ebp-38], ecx
:00458436 8D45FC                  lea eax, dword ptr [ebp-04]
:00458439 50                      push eax
:0045843A 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0045843D 51                      push ecx
:0045843E E872420100              call 0046C6B5
:00458443 83C408                  add esp, 00000008
:00458446 B9A8034B00              mov ecx, 004B03A8
:0045844B E839E4FEFF              call 00446889
:00458450 8945E0                  mov dword ptr [ebp-20], eax
:00458453 C745E400000000          mov [ebp-1C], 00000000
:0045845A 8D55E0                  lea edx, dword ptr [ebp-20]
:0045845D 52                      push edx
:0045845E A1380E4B00              mov eax, dword ptr [004B0E38]
:00458463 50                      push eax

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00458464 FF15F8864B00            Call dword ptr [004B86F8]
:0045846A C745CC00000000          mov [ebp-34], 00000000
:00458471 C745D000000000          mov [ebp-30], 00000000
:00458478 B9A8034B00              mov ecx, 004B03A8
:0045847D E83FE5FEFF              call 004469C1
:00458482 83E801                  sub eax, 00000001
:00458485 99                      cdq
:00458486 83E207                  and edx, 00000007
:00458489 03C2                    add eax, edx
:0045848B C1F803                  sar eax, 03
:0045848E 8945D4                  mov dword ptr [ebp-2C], eax
:00458491 B9A8034B00              mov ecx, 004B03A8
:00458496 E84DE5FEFF              call 004469E8
:0045849B 83E801                  sub eax, 00000001
:0045849E 99                      cdq
:0045849F 83E207                  and edx, 00000007
:004584A2 03C2                    add eax, edx
:004584A4 C1F803                  sar eax, 03
:004584A7 8945D8                  mov dword ptr [ebp-28], eax
:004584AA 6A01                    push 00000001
:004584AC 6AF0                    push FFFFFFF0
:004584AE 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:004584B4 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:004584B5 FF158C874B00            Call dword ptr [004B878C]
:004584BB 50                      push eax
:004584BC 8D55CC                  lea edx, dword ptr [ebp-34]
:004584BF 52                      push edx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:004584C0 FF150C874B00            Call dword ptr [004B870C]
:004584C6 8B45E0                  mov eax, dword ptr [ebp-20]
:004584C9 0345D4                  add eax, dword ptr [ebp-2C]
:004584CC 2B45CC                  sub eax, dword ptr [ebp-34]
:004584CF 83C001                  add eax, 00000001
:004584D2 3B45E8                  cmp eax, dword ptr [ebp-18]
:004584D5 7E17                    jle 004584EE
:004584D7 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004584DA 034DD4                  add ecx, dword ptr [ebp-2C]
:004584DD 2B4DCC                  sub ecx, dword ptr [ebp-34]
:004584E0 83C101                  add ecx, 00000001
:004584E3 2B4DE8                  sub ecx, dword ptr [ebp-18]
:004584E6 8B55E0                  mov edx, dword ptr [ebp-20]
:004584E9 2BD1                    sub edx, ecx
:004584EB 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004584D5(C)
|
:004584EE 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004584F1 E82FC2FFFF              call 00454725
:004584F6 B9A8034B00              mov ecx, 004B03A8
:004584FB E8E8E4FEFF              call 004469E8
:00458500 99                      cdq
:00458501 83E20F                  and edx, 0000000F
:00458504 03C2                    add eax, edx
:00458506 C1F804                  sar eax, 04
:00458509 50                      push eax
:0045850A B9A8034B00              mov ecx, 004B03A8
:0045850F E8ADE4FEFF              call 004469C1
:00458514 99                      cdq
:00458515 83E20F                  and edx, 0000000F
:00458518 03C2                    add eax, edx
:0045851A C1F804                  sar eax, 04
:0045851D 50                      push eax
:0045851E 8B45C8                  mov eax, dword ptr [ebp-38]
:00458521 33C9                    xor ecx, ecx
:00458523 8A4831                  mov cl, byte ptr [eax+31]
:00458526 51                      push ecx
:00458527 8B55C8                  mov edx, dword ptr [ebp-38]
:0045852A 33C0                    xor eax, eax
:0045852C 8A4230                  mov al, byte ptr [edx+30]
:0045852F 50                      push eax
:00458530 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00458533 E820C5FFFF              call 00454A58
:00458538 6A00                    push 00000000
:0045853A 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045853D 2B4DD0                  sub ecx, dword ptr [ebp-30]
:00458540 83C101                  add ecx, 00000001
:00458543 51                      push ecx
:00458544 8B55D4                  mov edx, dword ptr [ebp-2C]
:00458547 2B55CC                  sub edx, dword ptr [ebp-34]
:0045854A 83C201                  add edx, 00000001
:0045854D 52                      push edx
:0045854E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00458551 50                      push eax
:00458552 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00458555 51                      push ecx
:00458556 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:0045855C 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045855D FF15FC864B00            Call dword ptr [004B86FC]
:00458563 8D45EC                  lea eax, dword ptr [ebp-14]
:00458566 50                      push eax
:00458567 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:0045856D 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045856E FF15C8864B00            Call dword ptr [004B86C8]
:00458574 8B75F8                  mov esi, dword ptr [ebp-08]
:00458577 2B75F0                  sub esi, dword ptr [ebp-10]
:0045857A 83C601                  add esi, 00000001
:0045857D B9A8034B00              mov ecx, 004B03A8
:00458582 E861E4FEFF              call 004469E8
:00458587 99                      cdq
:00458588 83E207                  and edx, 00000007
:0045858B 03C2                    add eax, edx
:0045858D C1F803                  sar eax, 03
:00458590 3BF0                    cmp esi, eax
:00458592 7D3A                    jge 004585CE

* Possible Reference to String Resource ID=00015: ""
                                  |
:00458594 6A0F                    push 0000000F

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00458596 FF1578874B00            Call dword ptr [004B8778]
:0045859C 8945DC                  mov dword ptr [ebp-24], eax
:0045859F 6A00                    push 00000000
:004585A1 8B55D8                  mov edx, dword ptr [ebp-28]
:004585A4 2B55D0                  sub edx, dword ptr [ebp-30]
:004585A7 8B45DC                  mov eax, dword ptr [ebp-24]
:004585AA 8D4C0201                lea ecx, dword ptr [edx+eax+01]
:004585AE 51                      push ecx
:004585AF 8B55D4                  mov edx, dword ptr [ebp-2C]
:004585B2 2B55CC                  sub edx, dword ptr [ebp-34]
:004585B5 83C201                  add edx, 00000001
:004585B8 52                      push edx
:004585B9 8B45E4                  mov eax, dword ptr [ebp-1C]
:004585BC 50                      push eax
:004585BD 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004585C0 51                      push ecx
:004585C1 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:004585C7 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004585C8 FF15FC864B00            Call dword ptr [004B86FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458592(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004585CE 6A05                    push 00000005
:004585D0 A1C00C4B00              mov eax, dword ptr [004B0CC0]
:004585D5 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004585D6 FF15E4864B00            Call dword ptr [004B86E4]
:004585DC 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004585DF C7414400000000          mov [ecx+44], 00000000
:004585E6 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004585E9 E809C3FFFF              call 004548F7
:004585EE 5E                      pop esi
:004585EF 8BE5                    mov esp, ebp
:004585F1 5D                      pop ebp
:004585F2 C3                      ret



* Referenced by a CALL at Addresses:
|:00409705   , :0040972C   , :00448878   
|
:004585F3 55                      push ebp
:004585F4 8BEC                    mov ebp, esp
:004585F6 83EC18                  sub esp, 00000018
:004585F9 894DEC                  mov dword ptr [ebp-14], ecx
:004585FC C645F800                mov [ebp-08], 00
:00458600 8A4508                  mov al, byte ptr [ebp+08]
:00458603 8845E8                  mov byte ptr [ebp-18], al
:00458606 807DE800                cmp byte ptr [ebp-18], 00
:0045860A 740E                    je 0045861A
:0045860C 807DE801                cmp byte ptr [ebp-18], 01
:00458610 7418                    je 0045862A
:00458612 807DE802                cmp byte ptr [ebp-18], 02
:00458616 7422                    je 0045863A
:00458618 EB30                    jmp 0045864A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045860A(C)
|
:0045861A C745FC00000000          mov [ebp-04], 00000000
:00458621 C745F05A000000          mov [ebp-10], 0000005A
:00458628 EB2E                    jmp 00458658

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458610(C)
|
:0045862A C745FC00000000          mov [ebp-04], 00000000
:00458631 C745F01E000000          mov [ebp-10], 0000001E
:00458638 EB1E                    jmp 00458658

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458616(C)
|
:0045863A C745FC1E000000          mov [ebp-04], 0000001E
:00458641 C745F05A000000          mov [ebp-10], 0000005A
:00458648 EB0E                    jmp 00458658

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458618(U)
|
:0045864A C745FC00000000          mov [ebp-04], 00000000
:00458651 C745F05A000000          mov [ebp-10], 0000005A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458628(U), :00458638(U), :00458648(U)
|
:00458658 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045865B 894DF4                  mov dword ptr [ebp-0C], ecx
:0045865E EB09                    jmp 00458669

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458695(U)
|
:00458660 8B55F4                  mov edx, dword ptr [ebp-0C]
:00458663 83C201                  add edx, 00000001
:00458666 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045865E(U)
|
:00458669 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045866C 3B45F0                  cmp eax, dword ptr [ebp-10]
:0045866F 7326                    jnb 00458697
:00458671 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00458674 6BC924                  imul ecx, 00000024
:00458677 81C108F54A00            add ecx, 004AF508
:0045867D E84E72FDFF              call 0042F8D0
:00458682 25FF000000              and eax, 000000FF
:00458687 83F802                  cmp eax, 00000002
:0045868A 7509                    jne 00458695
:0045868C 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045868F 80C101                  add cl, 01
:00458692 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045868A(C)
|
:00458695 EBC9                    jmp 00458660

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045866F(C)
|
:00458697 8A45F8                  mov al, byte ptr [ebp-08]
:0045869A 8BE5                    mov esp, ebp
:0045869C 5D                      pop ebp
:0045869D C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00438990   , :0044A621   , :0045711E   , :004572EC   , :00457B54   
|:00458834   , :00458C81   , :00459672   
|
:004586A0 55                      push ebp
:004586A1 8BEC                    mov ebp, esp
:004586A3 81EC80000000            sub esp, 00000080
:004586A9 894D88                  mov dword ptr [ebp-78], ecx
:004586AC 8B4588                  mov eax, dword ptr [ebp-78]
:004586AF 33C9                    xor ecx, ecx
:004586B1 8A4802                  mov cl, byte ptr [eax+02]
:004586B4 8BC1                    mov eax, ecx
:004586B6 83C001                  add eax, 00000001
:004586B9 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004586BA B90A000000              mov ecx, 0000000A
:004586BF F7F9                    idiv ecx
:004586C1 884598                  mov byte ptr [ebp-68], al
:004586C4 8B5588                  mov edx, dword ptr [ebp-78]
:004586C7 33C0                    xor eax, eax
:004586C9 8A4202                  mov al, byte ptr [edx+02]
:004586CC 83C001                  add eax, 00000001
:004586CF 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004586D0 B90A000000              mov ecx, 0000000A
:004586D5 F7F9                    idiv ecx
:004586D7 885594                  mov byte ptr [ebp-6C], dl
:004586DA 8B5588                  mov edx, dword ptr [ebp-78]
:004586DD 33C0                    xor eax, eax
:004586DF 8A4203                  mov al, byte ptr [edx+03]
:004586E2 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004586E3 B90A000000              mov ecx, 0000000A
:004586E8 F7F9                    idiv ecx
:004586EA 884590                  mov byte ptr [ebp-70], al
:004586ED 8B5588                  mov edx, dword ptr [ebp-78]
:004586F0 33C0                    xor eax, eax
:004586F2 8A4203                  mov al, byte ptr [edx+03]
:004586F5 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004586F6 B90A000000              mov ecx, 0000000A
:004586FB F7F9                    idiv ecx
:004586FD 88558C                  mov byte ptr [ebp-74], dl
:00458700 8B5590                  mov edx, dword ptr [ebp-70]
:00458703 81E2FF000000            and edx, 000000FF
:00458709 85D2                    test edx, edx
:0045870B 7414                    je 00458721
:0045870D 8B4590                  mov eax, dword ptr [ebp-70]
:00458710 25FF000000              and eax, 000000FF
:00458715 8B0C85C0D84700          mov ecx, dword ptr [4*eax+0047D8C0]
:0045871C 894D84                  mov dword ptr [ebp-7C], ecx
:0045871F EB07                    jmp 00458728

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045870B(C)
|

* Possible StringData Ref from Data Obj ->"  "
                                  |
:00458721 C7458410D94700          mov [ebp-7C], 0047D910

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045871F(U)
|
:00458728 8B5598                  mov edx, dword ptr [ebp-68]
:0045872B 81E2FF000000            and edx, 000000FF
:00458731 85D2                    test edx, edx
:00458733 7414                    je 00458749
:00458735 8B4598                  mov eax, dword ptr [ebp-68]
:00458738 25FF000000              and eax, 000000FF
:0045873D 8B0C85C0D84700          mov ecx, dword ptr [4*eax+0047D8C0]
:00458744 894D80                  mov dword ptr [ebp-80], ecx
:00458747 EB07                    jmp 00458750

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458733(C)
|

* Possible StringData Ref from Data Obj ->"  "
                                  |
:00458749 C7458014D94700          mov [ebp-80], 0047D914

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458747(U)
|
:00458750 8B558C                  mov edx, dword ptr [ebp-74]
:00458753 81E2FF000000            and edx, 000000FF
:00458759 8B0495C0D84700          mov eax, dword ptr [4*edx+0047D8C0]
:00458760 50                      push eax
:00458761 8B4D84                  mov ecx, dword ptr [ebp-7C]
:00458764 51                      push ecx
:00458765 8B5594                  mov edx, dword ptr [ebp-6C]
:00458768 81E2FF000000            and edx, 000000FF
:0045876E 8B0495C0D84700          mov eax, dword ptr [4*edx+0047D8C0]
:00458775 50                      push eax
:00458776 8B4D80                  mov ecx, dword ptr [ebp-80]
:00458779 51                      push ecx

* Possible StringData Ref from Data Obj ->"^X%s%s/%s%s"
                                  |
:0045877A 6818D94700              push 0047D918
:0045877F 8D559C                  lea edx, dword ptr [ebp-64]
:00458782 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458783 FF1500874B00            Call dword ptr [004B8700]
:00458789 83C418                  add esp, 00000018
:0045878C 8D459C                  lea eax, dword ptr [ebp-64]
:0045878F 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:00458790 68FA030000              push 000003FA
:00458795 8B0D90184B00            mov ecx, dword ptr [004B1890]
:0045879B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045879C FF15AC864B00            Call dword ptr [004B86AC]
:004587A2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004587A3 FF15B0864B00            Call dword ptr [004B86B0]
:004587A9 B9A8034B00              mov ecx, 004B03A8
:004587AE E835E2FEFF              call 004469E8
:004587B3 99                      cdq
:004587B4 83E20F                  and edx, 0000000F
:004587B7 03C2                    add eax, edx
:004587B9 C1F804                  sar eax, 04
:004587BC 50                      push eax
:004587BD B9A8034B00              mov ecx, 004B03A8
:004587C2 E8FAE1FEFF              call 004469C1
:004587C7 99                      cdq
:004587C8 83E20F                  and edx, 0000000F
:004587CB 03C2                    add eax, edx
:004587CD C1F804                  sar eax, 04
:004587D0 50                      push eax
:004587D1 8B5588                  mov edx, dword ptr [ebp-78]
:004587D4 33C0                    xor eax, eax
:004587D6 8A4231                  mov al, byte ptr [edx+31]
:004587D9 50                      push eax
:004587DA 8B4D88                  mov ecx, dword ptr [ebp-78]
:004587DD 33D2                    xor edx, edx
:004587DF 8A5130                  mov dl, byte ptr [ecx+30]
:004587E2 52                      push edx
:004587E3 8B4D88                  mov ecx, dword ptr [ebp-78]
:004587E6 E8EFC3FFFF              call 00454BDA
:004587EB 8BE5                    mov esp, ebp
:004587ED 5D                      pop ebp
:004587EE C3                      ret



* Referenced by a CALL at Address:
|:00463A8F   
|
:004587EF 55                      push ebp
:004587F0 8BEC                    mov ebp, esp
:004587F2 E80CE1FBFF              call 00416903
:004587F7 25FF000000              and eax, 000000FF
:004587FC 83F803                  cmp eax, 00000003
:004587FF 7538                    jne 00458839
:00458801 A1C00C4B00              mov eax, dword ptr [004B0CC0]
:00458806 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00458807 FF15E0864B00            Call dword ptr [004B86E0]
:0045880D 85C0                    test eax, eax
:0045880F 740F                    je 00458820
:00458811 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:00458817 51                      push ecx

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:00458818 FF1508874B00            Call dword ptr [004B8708]
:0045881E EB19                    jmp 00458839

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045880F(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00458820 6A05                    push 00000005
:00458822 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00458828 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00458829 FF15E4864B00            Call dword ptr [004B86E4]
:0045882F B9180A4B00              mov ecx, 004B0A18
:00458834 E867FEFFFF              call 004586A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004587FF(C), :0045881E(U)
|
:00458839 5D                      pop ebp
:0045883A C3                      ret


:0045883B CC                      int 03
:0045883C CC                      int 03
:0045883D CC                      int 03
:0045883E CC                      int 03
:0045883F CC                      int 03

* Referenced by a CALL at Address:
|:0045508D   
|
:00458840 55                      push ebp
:00458841 8BEC                    mov ebp, esp
:00458843 51                      push ecx
:00458844 894DFC                  mov dword ptr [ebp-04], ecx
:00458847 8B45FC                  mov eax, dword ptr [ebp-04]
:0045884A 33C9                    xor ecx, ecx
:0045884C 8A8866350000            mov cl, byte ptr [eax+00003566]
:00458852 8BC1                    mov eax, ecx
:00458854 8BE5                    mov esp, ebp
:00458856 5D                      pop ebp
:00458857 C3                      ret


:00458858 CC                      int 03
:00458859 CC                      int 03
:0045885A CC                      int 03
:0045885B CC                      int 03
:0045885C CC                      int 03
:0045885D CC                      int 03
:0045885E CC                      int 03
:0045885F CC                      int 03

* Referenced by a CALL at Addresses:
|:00455DAC   , :00455E52   , :00455EE5   , :00455F5D   
|
:00458860 55                      push ebp
:00458861 8BEC                    mov ebp, esp
:00458863 51                      push ecx
:00458864 894DFC                  mov dword ptr [ebp-04], ecx
:00458867 8B45FC                  mov eax, dword ptr [ebp-04]
:0045886A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045886D 88480A                  mov byte ptr [eax+0A], cl
:00458870 8BE5                    mov esp, ebp
:00458872 5D                      pop ebp
:00458873 C20400                  ret 0004


:00458876 CC                      int 03
:00458877 CC                      int 03
:00458878 CC                      int 03
:00458879 CC                      int 03
:0045887A CC                      int 03
:0045887B CC                      int 03
:0045887C CC                      int 03
:0045887D CC                      int 03
:0045887E CC                      int 03
:0045887F CC                      int 03

* Referenced by a CALL at Address:
|:00455A73   
|
:00458880 55                      push ebp
:00458881 8BEC                    mov ebp, esp
:00458883 51                      push ecx
:00458884 894DFC                  mov dword ptr [ebp-04], ecx
:00458887 8A4508                  mov al, byte ptr [ebp+08]
:0045888A 50                      push eax
:0045888B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045888E 8B09                    mov ecx, dword ptr [ecx]
:00458890 6BC970                  imul ecx, 00000070
:00458893 81C198224900            add ecx, 00492298
:00458899 E812BFFAFF              call 004047B0
:0045889E 8BE5                    mov esp, ebp
:004588A0 5D                      pop ebp
:004588A1 C20400                  ret 0004


:004588A4 CC                      int 03
:004588A5 CC                      int 03
:004588A6 CC                      int 03
:004588A7 CC                      int 03
:004588A8 CC                      int 03
:004588A9 CC                      int 03
:004588AA CC                      int 03
:004588AB CC                      int 03
:004588AC CC                      int 03
:004588AD CC                      int 03
:004588AE CC                      int 03
:004588AF CC                      int 03

* Referenced by a CALL at Address:
|:004546B7   
|
:004588B0 55                      push ebp
:004588B1 8BEC                    mov ebp, esp
:004588B3 51                      push ecx
:004588B4 894DFC                  mov dword ptr [ebp-04], ecx
:004588B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004588BA 83C130                  add ecx, 00000030
:004588BD E8EEEEFAFF              call 004077B0
:004588C2 8B45FC                  mov eax, dword ptr [ebp-04]
:004588C5 C7404800000000          mov [eax+48], 00000000
:004588CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004588CF C7415400000000          mov [ecx+54], 00000000
:004588D6 8B45FC                  mov eax, dword ptr [ebp-04]
:004588D9 8BE5                    mov esp, ebp
:004588DB 5D                      pop ebp
:004588DC C3                      ret


:004588DD CC                      int 03
:004588DE CC                      int 03
:004588DF CC                      int 03
:004588E0 55                      push ebp
:004588E1 8BEC                    mov ebp, esp
:004588E3 E802000000              call 004588EA
:004588E8 5D                      pop ebp
:004588E9 C3                      ret



* Referenced by a CALL at Address:
|:004588E3   
|
:004588EA 55                      push ebp
:004588EB 8BEC                    mov ebp, esp
:004588ED 5D                      pop ebp
:004588EE C3                      ret



* Referenced by a CALL at Addresses:
|:004589BC   , :00458AF9   , :00458C9C   , :00458E18   , :00458FC1   
|:00459428   , :0045968F   , :0045971E   , :00459738   , :004598E4   
|
:004588EF 55                      push ebp
:004588F0 8BEC                    mov ebp, esp
:004588F2 51                      push ecx
:004588F3 C645FC00                mov [ebp-04], 00
:004588F7 EB08                    jmp 00458901

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045895D(U)
|
:004588F9 8A45FC                  mov al, byte ptr [ebp-04]
:004588FC 0401                    add al, 01
:004588FE 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004588F7(U)
|
:00458901 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458904 81E1FF000000            and ecx, 000000FF
:0045890A 83F95A                  cmp ecx, 0000005A
:0045890D 7D50                    jge 0045895F
:0045890F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458912 81E1FF000000            and ecx, 000000FF
:00458918 6BC924                  imul ecx, 00000024
:0045891B 81C108F54A00            add ecx, 004AF508
:00458921 E8AA6DFDFF              call 0042F6D0
:00458926 3B4508                  cmp eax, dword ptr [ebp+08]
:00458929 7532                    jne 0045895D
:0045892B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045892E 81E1FF000000            and ecx, 000000FF
:00458934 6BC924                  imul ecx, 00000024
:00458937 81C108F54A00            add ecx, 004AF508
:0045893D E88E6FFDFF              call 0042F8D0
:00458942 25FF000000              and eax, 000000FF
:00458947 85C0                    test eax, eax
:00458949 7412                    je 0045895D
:0045894B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045894E 25FF000000              and eax, 000000FF
:00458953 6BC024                  imul eax, 00000024
:00458956 0508F54A00              add eax, 004AF508
:0045895B EB05                    jmp 00458962

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458929(C), :00458949(C)
|
:0045895D EB9A                    jmp 004588F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045890D(C)
|
:0045895F 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045895B(U)
|
:00458962 8BE5                    mov esp, ebp
:00458964 5D                      pop ebp
:00458965 C3                      ret



* Referenced by a CALL at Address:
|:00454FCC   
|
:00458966 55                      push ebp
:00458967 8BEC                    mov ebp, esp
:00458969 51                      push ecx
:0045896A 894DFC                  mov dword ptr [ebp-04], ecx
:0045896D 8B45FC                  mov eax, dword ptr [ebp-04]
:00458970 C600FF                  mov byte ptr [eax], FF
:00458973 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458976 C7410C00000000          mov [ecx+0C], 00000000
:0045897D BA70A04A00              mov edx, 004AA070
:00458982 8B45FC                  mov eax, dword ptr [ebp-04]
:00458985 895004                  mov dword ptr [eax+04], edx
:00458988 8BE5                    mov esp, ebp
:0045898A 5D                      pop ebp
:0045898B C3                      ret



* Referenced by a CALL at Addresses:
|:00454FD8   , :00457EAD   
|
:0045898C 55                      push ebp
:0045898D 8BEC                    mov ebp, esp
:0045898F 51                      push ecx
:00458990 894DFC                  mov dword ptr [ebp-04], ecx
:00458993 8B45FC                  mov eax, dword ptr [ebp-04]
:00458996 C600FF                  mov byte ptr [eax], FF
:00458999 B970A04A00              mov ecx, 004AA070
:0045899E 8B55FC                  mov edx, dword ptr [ebp-04]
:004589A1 894A04                  mov dword ptr [edx+04], ecx
:004589A4 8BE5                    mov esp, ebp
:004589A6 5D                      pop ebp
:004589A7 C3                      ret



* Referenced by a CALL at Addresses:
|:0040BDE4   , :0040D715   
|
:004589A8 55                      push ebp
:004589A9 8BEC                    mov ebp, esp
:004589AB 83EC24                  sub esp, 00000024
:004589AE 894DDC                  mov dword ptr [ebp-24], ecx
:004589B1 C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF
:004589B8 8B4508                  mov eax, dword ptr [ebp+08]
:004589BB 50                      push eax
:004589BC E82EFFFFFF              call 004588EF
:004589C1 83C404                  add esp, 00000004
:004589C4 8945EC                  mov dword ptr [ebp-14], eax
:004589C7 C645FCFF                mov [ebp-04], FF
:004589CB 837DECFF                cmp dword ptr [ebp-14], FFFFFFFF
:004589CF 0F84F2000000            je 00458AC7
:004589D5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004589D8 E8F36EFDFF              call 0042F8D0
:004589DD 25FF000000              and eax, 000000FF
:004589E2 83F801                  cmp eax, 00000001
:004589E5 0F85D5000000            jne 00458AC0
:004589EB C745E800000000          mov [ebp-18], 00000000
:004589F2 EB09                    jmp 004589FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458A2C(U)
|
:004589F4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004589F7 83C101                  add ecx, 00000001
:004589FA 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004589F2(U)
|
:004589FD 837DE85A                cmp dword ptr [ebp-18], 0000005A
:00458A01 732B                    jnb 00458A2E
:00458A03 8B55E8                  mov edx, dword ptr [ebp-18]
:00458A06 52                      push edx
:00458A07 B9F8134800              mov ecx, 004813F8
:00458A0C E85F69FBFF              call 0040F370
:00458A11 8945F0                  mov dword ptr [ebp-10], eax
:00458A14 8B45F0                  mov eax, dword ptr [ebp-10]
:00458A17 8945F8                  mov dword ptr [ebp-08], eax
:00458A1A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00458A1D 8B11                    mov edx, dword ptr [ecx]
:00458A1F 3B5508                  cmp edx, dword ptr [ebp+08]
:00458A22 7508                    jne 00458A2C
:00458A24 8A45E8                  mov al, byte ptr [ebp-18]
:00458A27 8845FC                  mov byte ptr [ebp-04], al
:00458A2A EB02                    jmp 00458A2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458A22(C)
|
:00458A2C EBC6                    jmp 004589F4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458A01(C), :00458A2A(U)
|
:00458A2E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458A31 81E1FF000000            and ecx, 000000FF
:00458A37 81F9FF000000            cmp ecx, 000000FF
:00458A3D 7478                    je 00458AB7

* Possible Reference to String Resource ID=00012: ""
                                  |
:00458A3F 6A0C                    push 0000000C
:00458A41 B9800D4B00              mov ecx, 004B0D80
:00458A46 E85E910000              call 00461BA9
:00458A4B 8B55F8                  mov edx, dword ptr [ebp-08]
:00458A4E 8B4208                  mov eax, dword ptr [edx+08]
:00458A51 83E004                  and eax, 00000004
:00458A54 33C9                    xor ecx, ecx
:00458A56 83F804                  cmp eax, 00000004
:00458A59 0F94C1                  sete cl
:00458A5C 894DE4                  mov dword ptr [ebp-1C], ecx
:00458A5F 8B55F8                  mov edx, dword ptr [ebp-08]
:00458A62 83C204                  add edx, 00000004
:00458A65 8955E0                  mov dword ptr [ebp-20], edx
:00458A68 8B45E0                  mov eax, dword ptr [ebp-20]
:00458A6B 8A4801                  mov cl, byte ptr [eax+01]
:00458A6E 51                      push ecx
:00458A6F 8B55E0                  mov edx, dword ptr [ebp-20]
:00458A72 8A02                    mov al, byte ptr [edx]
:00458A74 50                      push eax
:00458A75 B9A8034B00              mov ecx, 004B03A8
:00458A7A E8B8CFFEFF              call 00445A37
:00458A7F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00458A82 F7D9                    neg ecx
:00458A84 1BC9                    sbb ecx, ecx
:00458A86 83E1FE                  and ecx, FFFFFFFE
:00458A89 83C103                  add ecx, 00000003
:00458A8C 51                      push ecx
:00458A8D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458A90 E84B11FEFF              call 00439BE0
:00458A95 8B55E4                  mov edx, dword ptr [ebp-1C]
:00458A98 52                      push edx
:00458A99 8B45E0                  mov eax, dword ptr [ebp-20]
:00458A9C 8A4801                  mov cl, byte ptr [eax+01]
:00458A9F 51                      push ecx
:00458AA0 8B55E0                  mov edx, dword ptr [ebp-20]
:00458AA3 8A02                    mov al, byte ptr [edx]
:00458AA5 50                      push eax
:00458AA6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458AA9 E8813AFDFF              call 0042C52F
:00458AAE C745F401000000          mov [ebp-0C], 00000001
:00458AB5 EB07                    jmp 00458ABE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458A3D(C)
|
:00458AB7 C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458AB5(U)
|
:00458ABE EB07                    jmp 00458AC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004589E5(C)
|
:00458AC0 C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004589CF(C), :00458ABE(U)
|
:00458AC7 8B45F4                  mov eax, dword ptr [ebp-0C]
:00458ACA 8BE5                    mov esp, ebp
:00458ACC 5D                      pop ebp
:00458ACD C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0040DE30   
|
:00458AD0 55                      push ebp
:00458AD1 8BEC                    mov ebp, esp
:00458AD3 83EC24                  sub esp, 00000024
:00458AD6 894DDC                  mov dword ptr [ebp-24], ecx
:00458AD9 C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF
:00458AE0 C645FCFF                mov [ebp-04], FF
:00458AE4 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00458AEB 7208                    jb 00458AF5
:00458AED 83C8FF                  or eax, FFFFFFFF
:00458AF0 E994010000              jmp 00458C89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458AEB(C)
|
:00458AF5 8B4508                  mov eax, dword ptr [ebp+08]
:00458AF8 50                      push eax
:00458AF9 E8F1FDFFFF              call 004588EF
:00458AFE 83C404                  add esp, 00000004
:00458B01 8945EC                  mov dword ptr [ebp-14], eax
:00458B04 837DECFF                cmp dword ptr [ebp-14], FFFFFFFF
:00458B08 0F8452010000            je 00458C60
:00458B0E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458B11 E8BA6DFDFF              call 0042F8D0
:00458B16 25FF000000              and eax, 000000FF
:00458B1B 83F804                  cmp eax, 00000004
:00458B1E 0F8535010000            jne 00458C59
:00458B24 C745E800000000          mov [ebp-18], 00000000
:00458B2B EB09                    jmp 00458B36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B65(U)
|
:00458B2D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00458B30 83C101                  add ecx, 00000001
:00458B33 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B2B(U)
|
:00458B36 837DE85A                cmp dword ptr [ebp-18], 0000005A
:00458B3A 732B                    jnb 00458B67
:00458B3C 8B55E8                  mov edx, dword ptr [ebp-18]
:00458B3F 52                      push edx
:00458B40 B9F8134800              mov ecx, 004813F8
:00458B45 E82668FBFF              call 0040F370
:00458B4A 8945F0                  mov dword ptr [ebp-10], eax
:00458B4D 8B45F0                  mov eax, dword ptr [ebp-10]
:00458B50 8945F8                  mov dword ptr [ebp-08], eax
:00458B53 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00458B56 8B11                    mov edx, dword ptr [ecx]
:00458B58 3B5508                  cmp edx, dword ptr [ebp+08]
:00458B5B 7508                    jne 00458B65
:00458B5D 8A45E8                  mov al, byte ptr [ebp-18]
:00458B60 8845FC                  mov byte ptr [ebp-04], al
:00458B63 EB02                    jmp 00458B67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B5B(C)
|
:00458B65 EBC6                    jmp 00458B2D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458B3A(C), :00458B63(U)
|
:00458B67 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458B6A 81E1FF000000            and ecx, 000000FF
:00458B70 81F9FF000000            cmp ecx, 000000FF
:00458B76 0F84D4000000            je 00458C50

* Possible Reference to String Resource ID=00012: ""
                                  |
:00458B7C 6A0C                    push 0000000C
:00458B7E B9800D4B00              mov ecx, 004B0D80
:00458B83 E821900000              call 00461BA9
:00458B88 8B55F8                  mov edx, dword ptr [ebp-08]
:00458B8B 8B4208                  mov eax, dword ptr [edx+08]
:00458B8E 83E004                  and eax, 00000004
:00458B91 33C9                    xor ecx, ecx
:00458B93 83F804                  cmp eax, 00000004
:00458B96 0F94C1                  sete cl
:00458B99 894DE4                  mov dword ptr [ebp-1C], ecx
:00458B9C 8B55F8                  mov edx, dword ptr [ebp-08]
:00458B9F 83C204                  add edx, 00000004
:00458BA2 8955E0                  mov dword ptr [ebp-20], edx
:00458BA5 8B45E0                  mov eax, dword ptr [ebp-20]
:00458BA8 8A4801                  mov cl, byte ptr [eax+01]
:00458BAB 51                      push ecx
:00458BAC 8B55E0                  mov edx, dword ptr [ebp-20]
:00458BAF 8A02                    mov al, byte ptr [edx]
:00458BB1 50                      push eax
:00458BB2 B9A8034B00              mov ecx, 004B03A8
:00458BB7 E87BCEFEFF              call 00445A37
:00458BBC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00458BBF 6BC970                  imul ecx, 00000070
:00458BC2 81C198224900            add ecx, 00492298
:00458BC8 E81399FAFF              call 004024E0
:00458BCD 50                      push eax
:00458BCE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458BD1 E88A1DFDFF              call 0042A960
:00458BD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00458BD9 6BC970                  imul ecx, 00000070
:00458BDC 81C198224900            add ecx, 00492298
:00458BE2 E82A99FAFF              call 00402511
:00458BE7 50                      push eax
:00458BE8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458BEB E8CD1DFDFF              call 0042A9BD
:00458BF0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00458BF3 F7D9                    neg ecx
:00458BF5 1BC9                    sbb ecx, ecx
:00458BF7 83E1FE                  and ecx, FFFFFFFE
:00458BFA 83C103                  add ecx, 00000003
:00458BFD 51                      push ecx
:00458BFE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C01 E8DA0FFEFF              call 00439BE0
:00458C06 6A01                    push 00000001
:00458C08 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C0B E8206DFDFF              call 0042F930
:00458C10 6A01                    push 00000001
:00458C12 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C15 E8566DFDFF              call 0042F970
:00458C1A 6A00                    push 00000000
:00458C1C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C1F E83C0FFEFF              call 00439B60
:00458C24 6A01                    push 00000001
:00458C26 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C29 E8F26DFDFF              call 0042FA20
:00458C2E 8B55E4                  mov edx, dword ptr [ebp-1C]
:00458C31 52                      push edx
:00458C32 8B45E0                  mov eax, dword ptr [ebp-20]
:00458C35 8A4801                  mov cl, byte ptr [eax+01]
:00458C38 51                      push ecx
:00458C39 8B55E0                  mov edx, dword ptr [ebp-20]
:00458C3C 8A02                    mov al, byte ptr [edx]
:00458C3E 50                      push eax
:00458C3F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C42 E8E838FDFF              call 0042C52F
:00458C47 C745F401000000          mov [ebp-0C], 00000001
:00458C4E EB07                    jmp 00458C57

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B76(C)
|
:00458C50 C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458C4E(U)
|
:00458C57 EB07                    jmp 00458C60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B1E(C)
|
:00458C59 C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458B08(C), :00458C57(U)
|
:00458C60 837DF401                cmp dword ptr [ebp-0C], 00000001
:00458C64 7405                    je 00458C6B
:00458C66 8B45F4                  mov eax, dword ptr [ebp-0C]
:00458C69 EB1E                    jmp 00458C89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458C64(C)
|
:00458C6B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C6E E85D6AFDFF              call 0042F6D0
:00458C73 50                      push eax
:00458C74 E8D7E20000              call 00466F50
:00458C79 83C404                  add esp, 00000004
:00458C7C B9180A4B00              mov ecx, 004B0A18
:00458C81 E81AFAFFFF              call 004586A0
:00458C86 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458AF0(U), :00458C69(U)
|
:00458C89 8BE5                    mov esp, ebp
:00458C8B 5D                      pop ebp
:00458C8C C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0040C02E   
|
:00458C8F 55                      push ebp
:00458C90 8BEC                    mov ebp, esp
:00458C92 83EC10                  sub esp, 00000010
:00458C95 894DF0                  mov dword ptr [ebp-10], ecx
:00458C98 8B4508                  mov eax, dword ptr [ebp+08]
:00458C9B 50                      push eax
:00458C9C E84EFCFFFF              call 004588EF
:00458CA1 83C404                  add esp, 00000004
:00458CA4 8945FC                  mov dword ptr [ebp-04], eax
:00458CA7 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00458CAB 7508                    jne 00458CB5
:00458CAD 83C8FF                  or eax, FFFFFFFF
:00458CB0 E950010000              jmp 00458E05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458CAB(C)
|
:00458CB5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458CB8 E8136CFDFF              call 0042F8D0
:00458CBD 25FF000000              and eax, 000000FF
:00458CC2 83F804                  cmp eax, 00000004
:00458CC5 752A                    jne 00458CF1
:00458CC7 8A4D10                  mov cl, byte ptr [ebp+10]
:00458CCA 51                      push ecx
:00458CCB 8A550C                  mov dl, byte ptr [ebp+0C]
:00458CCE 52                      push edx
:00458CCF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458CD2 E8B666FDFF              call 0042F38D
:00458CD7 6A00                    push 00000000
:00458CD9 8A4510                  mov al, byte ptr [ebp+10]
:00458CDC 50                      push eax
:00458CDD 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00458CE0 51                      push ecx
:00458CE1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458CE4 E84638FDFF              call 0042C52F
:00458CE9 83C8FF                  or eax, FFFFFFFF
:00458CEC E914010000              jmp 00458E05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458CC5(C)
|
:00458CF1 8B550C                  mov edx, dword ptr [ebp+0C]
:00458CF4 81E2FF000000            and edx, 000000FF
:00458CFA 33C0                    xor eax, eax
:00458CFC A0800A4B00              mov al, byte ptr [004B0A80]
:00458D01 3BD0                    cmp edx, eax
:00458D03 0F8DF9000000            jnl 00458E02
:00458D09 8B4D10                  mov ecx, dword ptr [ebp+10]
:00458D0C 81E1FF000000            and ecx, 000000FF
:00458D12 33D2                    xor edx, edx
:00458D14 8A15810A4B00            mov dl, byte ptr [004B0A81]
:00458D1A 3BCA                    cmp ecx, edx
:00458D1C 0F8DE0000000            jnl 00458E02
:00458D22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458D25 E8C66BFDFF              call 0042F8F0
:00458D2A 8845F4                  mov byte ptr [ebp-0C], al

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00458D2D 6A04                    push 00000004
:00458D2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458D32 E8E266FDFF              call 0042F419
:00458D37 6A00                    push 00000000
:00458D39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458D3C E87145FDFF              call 0042D2B2
:00458D41 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00458D44 E867EAFAFF              call 004077B0
:00458D49 8A450C                  mov al, byte ptr [ebp+0C]
:00458D4C 8845F8                  mov byte ptr [ebp-08], al
:00458D4F 8A4D10                  mov cl, byte ptr [ebp+10]
:00458D52 884DF9                  mov byte ptr [ebp-07], cl
:00458D55 8D55F8                  lea edx, dword ptr [ebp-08]
:00458D58 52                      push edx
:00458D59 E8B3EBFEFF              call 00447911
:00458D5E 83C404                  add esp, 00000004
:00458D61 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00458D66 3DFF000000              cmp eax, 000000FF
:00458D6B 7428                    je 00458D95
:00458D6D C605B0014B00FF          mov byte ptr [004B01B0], FF

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00458D74 6A0A                    push 0000000A
:00458D76 668B45F8                mov ax, word ptr [ebp-08]
:00458D7A 50                      push eax
:00458D7B E8C315FDFF              call 0042A343
:00458D80 83C408                  add esp, 00000008
:00458D83 8A0DB0014B00            mov cl, byte ptr [004B01B0]
:00458D89 884D0C                  mov byte ptr [ebp+0C], cl
:00458D8C 8A15B1014B00            mov dl, byte ptr [004B01B1]
:00458D92 885510                  mov byte ptr [ebp+10], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458D6B(C)
|
:00458D95 8A4510                  mov al, byte ptr [ebp+10]
:00458D98 50                      push eax
:00458D99 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00458D9C 51                      push ecx
:00458D9D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458DA0 E8E865FDFF              call 0042F38D
:00458DA5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458DA8 E82812FFFF              call 00449FD5
:00458DAD 8B55F4                  mov edx, dword ptr [ebp-0C]
:00458DB0 81E2FF000000            and edx, 000000FF
:00458DB6 83FA07                  cmp edx, 00000007
:00458DB9 750A                    jne 00458DC5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00458DBB 6A07                    push 00000007
:00458DBD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458DC0 E8ED44FDFF              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458DB9(C)
|
:00458DC5 68C4000000              push 000000C4
:00458DCA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458DCD E8EE6CFDFF              call 0042FAC0
:00458DD2 8B4514                  mov eax, dword ptr [ebp+14]
:00458DD5 25FF000000              and eax, 000000FF
:00458DDA 83F803                  cmp eax, 00000003
:00458DDD 7F1C                    jg 00458DFB
:00458DDF 8A4D14                  mov cl, byte ptr [ebp+14]
:00458DE2 51                      push ecx
:00458DE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458DE6 E8F50DFEFF              call 00439BE0
:00458DEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458DEE E8A635FDFF              call 0042C399
:00458DF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458DF6 E84D3EFDFF              call 0042CC48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458DDD(C)
|
:00458DFB B801000000              mov eax, 00000001
:00458E00 EB03                    jmp 00458E05

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458D03(C), :00458D1C(C)
|
:00458E02 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458CB0(U), :00458CEC(U), :00458E00(U)
|
:00458E05 8BE5                    mov esp, ebp
:00458E07 5D                      pop ebp
:00458E08 C21000                  ret 0010


:00458E0B 55                      push ebp
:00458E0C 8BEC                    mov ebp, esp
:00458E0E 83EC0C                  sub esp, 0000000C
:00458E11 894DF4                  mov dword ptr [ebp-0C], ecx
:00458E14 8B4508                  mov eax, dword ptr [ebp+08]
:00458E17 50                      push eax
:00458E18 E8D2FAFFFF              call 004588EF
:00458E1D 83C404                  add esp, 00000004
:00458E20 8945F8                  mov dword ptr [ebp-08], eax
:00458E23 C745FC00000000          mov [ebp-04], 00000000
:00458E2A 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:00458E2E 7509                    jne 00458E39
:00458E30 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00458E37 EB13                    jmp 00458E4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458E2E(C)
|
:00458E39 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00458E3C E89444FDFF              call 0042D2D5
:00458E41 85C0                    test eax, eax
:00458E43 7407                    je 00458E4C
:00458E45 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458E37(U), :00458E43(C)
|
:00458E4C 8B45FC                  mov eax, dword ptr [ebp-04]
:00458E4F 8BE5                    mov esp, ebp
:00458E51 5D                      pop ebp
:00458E52 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040DC3E   , :0040DD39   
|
:00458E55 55                      push ebp
:00458E56 8BEC                    mov ebp, esp
:00458E58 51                      push ecx
:00458E59 894DFC                  mov dword ptr [ebp-04], ecx
:00458E5C E8B1DAFBFF              call 00416912
:00458E61 85C0                    test eax, eax
:00458E63 742F                    je 00458E94
:00458E65 8A4508                  mov al, byte ptr [ebp+08]
:00458E68 50                      push eax
:00458E69 B9180A4B00              mov ecx, 004B0A18
:00458E6E E8CD99FBFF              call 00412840
:00458E73 8B4D08                  mov ecx, dword ptr [ebp+08]
:00458E76 81E1FF000000            and ecx, 000000FF
:00458E7C 83F903                  cmp ecx, 00000003
:00458E7F 750C                    jne 00458E8D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00458E81 6A05                    push 00000005
:00458E83 B9880D4B00              mov ecx, 004B0D88
:00458E88 E8A08C0000              call 00461B2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458E7F(C)
|
:00458E8D B801000000              mov eax, 00000001
:00458E92 EB03                    jmp 00458E97

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458E63(C)
|
:00458E94 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458E92(U)
|
:00458E97 8BE5                    mov esp, ebp
:00458E99 5D                      pop ebp
:00458E9A C20400                  ret 0004


:00458E9D 55                      push ebp
:00458E9E 8BEC                    mov ebp, esp
:00458EA0 51                      push ecx
:00458EA1 894DFC                  mov dword ptr [ebp-04], ecx
:00458EA4 6A00                    push 00000000
:00458EA6 B9180A4B00              mov ecx, 004B0A18
:00458EAB E835C0FFFF              call 00454EE5
:00458EB0 8BE5                    mov esp, ebp
:00458EB2 5D                      pop ebp
:00458EB3 C3                      ret


:00458EB4 55                      push ebp
:00458EB5 8BEC                    mov ebp, esp
:00458EB7 51                      push ecx
:00458EB8 894DFC                  mov dword ptr [ebp-04], ecx
:00458EBB 8BE5                    mov esp, ebp
:00458EBD 5D                      pop ebp
:00458EBE C3                      ret



* Referenced by a CALL at Addresses:
|:0040C5FF   , :0042C639   , :0042C66B   , :0042CAA4   
|
:00458EBF 55                      push ebp
:00458EC0 8BEC                    mov ebp, esp
:00458EC2 83EC14                  sub esp, 00000014
:00458EC5 894DEC                  mov dword ptr [ebp-14], ecx
:00458EC8 C745F800000000          mov [ebp-08], 00000000
:00458ECF C645F400                mov [ebp-0C], 00
:00458ED3 EB08                    jmp 00458EDD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458F25(U)
|
:00458ED5 8A45F4                  mov al, byte ptr [ebp-0C]
:00458ED8 0401                    add al, 01
:00458EDA 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458ED3(U)
|
:00458EDD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00458EE0 81E1FF000000            and ecx, 000000FF
:00458EE6 83F95A                  cmp ecx, 0000005A
:00458EE9 7D3C                    jge 00458F27
:00458EEB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00458EEE 81E1FF000000            and ecx, 000000FF
:00458EF4 6BC924                  imul ecx, 00000024
:00458EF7 81C108F54A00            add ecx, 004AF508
:00458EFD E8CE67FDFF              call 0042F6D0
:00458F02 3B450C                  cmp eax, dword ptr [ebp+0C]
:00458F05 751E                    jne 00458F25
:00458F07 8B55F4                  mov edx, dword ptr [ebp-0C]
:00458F0A 81E2FF000000            and edx, 000000FF
:00458F10 6BD224                  imul edx, 00000024
:00458F13 81C208F54A00            add edx, 004AF508
:00458F19 8955F0                  mov dword ptr [ebp-10], edx
:00458F1C C745F801000000          mov [ebp-08], 00000001
:00458F23 EB02                    jmp 00458F27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458F05(C)
|
:00458F25 EBAE                    jmp 00458ED5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458EE9(C), :00458F23(U)
|
:00458F27 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00458F2A E881E8FAFF              call 004077B0
:00458F2F 837DF801                cmp dword ptr [ebp-08], 00000001
:00458F33 7545                    jne 00458F7A
:00458F35 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458F38 E89369FDFF              call 0042F8D0
:00458F3D 25FF000000              and eax, 000000FF
:00458F42 83F802                  cmp eax, 00000002
:00458F45 7531                    jne 00458F78
:00458F47 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458F4A E85104FDFF              call 004293A0
:00458F4F 50                      push eax
:00458F50 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00458F53 E83868FDFF              call 0042F790
:00458F58 8A45FD                  mov al, byte ptr [ebp-03]
:00458F5B 50                      push eax
:00458F5C 8A4DFC                  mov cl, byte ptr [ebp-04]
:00458F5F 51                      push ecx
:00458F60 B9A8034B00              mov ecx, 004B03A8
:00458F65 E8CDCAFEFF              call 00445A37
:00458F6A 8D55FC                  lea edx, dword ptr [ebp-04]
:00458F6D 52                      push edx
:00458F6E B9A8034B00              mov ecx, 004B03A8
:00458F73 E877C0FEFF              call 00444FEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458F45(C)
|
:00458F78 EB04                    jmp 00458F7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458F33(C)
|
:00458F7A C645FD00                mov [ebp-03], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458F78(U)
|
:00458F7E E8D2DCFCFF              call 00426C55
:00458F83 6A00                    push 00000000
:00458F85 6A00                    push 00000000
:00458F87 8B450C                  mov eax, dword ptr [ebp+0C]
:00458F8A 50                      push eax
:00458F8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00458F8E 51                      push ecx
:00458F8F E845E2FCFF              call 004271D9
:00458F94 83C410                  add esp, 00000010
:00458F97 B9A8034B00              mov ecx, 004B03A8
:00458F9C E851C1FEFF              call 004450F2
:00458FA1 8BE5                    mov esp, ebp
:00458FA3 5D                      pop ebp
:00458FA4 C20800                  ret 0008


:00458FA7 55                      push ebp
:00458FA8 8BEC                    mov ebp, esp
:00458FAA 51                      push ecx
:00458FAB 894DFC                  mov dword ptr [ebp-04], ecx
:00458FAE 8BE5                    mov esp, ebp
:00458FB0 5D                      pop ebp
:00458FB1 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040D09A   , :00455B07   
|
:00458FB4 55                      push ebp
:00458FB5 8BEC                    mov ebp, esp
:00458FB7 83EC08                  sub esp, 00000008
:00458FBA 894DF8                  mov dword ptr [ebp-08], ecx
:00458FBD 8B4508                  mov eax, dword ptr [ebp+08]
:00458FC0 50                      push eax
:00458FC1 E829F9FFFF              call 004588EF
:00458FC6 83C404                  add esp, 00000004
:00458FC9 8945FC                  mov dword ptr [ebp-04], eax
:00458FCC 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00458FD0 7505                    jne 00458FD7
:00458FD2 83C8FF                  or eax, FFFFFFFF
:00458FD5 EB66                    jmp 0045903D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458FD0(C)
|
:00458FD7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00458FDA 6BC970                  imul ecx, 00000070
:00458FDD 81C198224900            add ecx, 00492298
:00458FE3 E808B9FAFF              call 004048F0
:00458FE8 25FF000000              and eax, 000000FF
:00458FED 85C0                    test eax, eax
:00458FEF 7449                    je 0045903A
:00458FF1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00458FF4 81E1FF000000            and ecx, 000000FF
:00458FFA 85C9                    test ecx, ecx
:00458FFC 7C37                    jl 00459035
:00458FFE 8B550C                  mov edx, dword ptr [ebp+0C]
:00459001 81E2FF000000            and edx, 000000FF
:00459007 83FA06                  cmp edx, 00000006
:0045900A 7F29                    jg 00459035

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045900C 6A04                    push 00000004
:0045900E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459011 E8AA6AFDFF              call 0042FAC0
:00459016 8B450C                  mov eax, dword ptr [ebp+0C]
:00459019 25FF000000              and eax, 000000FF
:0045901E 8A0C8528D94700          mov cl, byte ptr [4*eax+0047D928]
:00459025 51                      push ecx
:00459026 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459029 E88442FDFF              call 0042D2B2
:0045902E B801000000              mov eax, 00000001
:00459033 EB08                    jmp 0045903D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458FFC(C), :0045900A(C)
|
:00459035 83C8FF                  or eax, FFFFFFFF
:00459038 EB03                    jmp 0045903D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458FEF(C)
|
:0045903A 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458FD5(U), :00459033(U), :00459038(U)
|
:0045903D 8BE5                    mov esp, ebp
:0045903F 5D                      pop ebp
:00459040 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00454EDC   
|
:00459043 55                      push ebp
:00459044 8BEC                    mov ebp, esp
:00459046 83EC0C                  sub esp, 0000000C
:00459049 56                      push esi
:0045904A 57                      push edi
:0045904B 894DF4                  mov dword ptr [ebp-0C], ecx
:0045904E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00459051 E85AE7FAFF              call 004077B0
:00459056 C745F800000000          mov [ebp-08], 00000000
:0045905D EB09                    jmp 00459068

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459106(U)
|
:0045905F 8B45F8                  mov eax, dword ptr [ebp-08]
:00459062 83C004                  add eax, 00000004
:00459065 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045905D(U)
|
:00459068 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045906B 8B55F8                  mov edx, dword ptr [ebp-08]
:0045906E 3B510C                  cmp edx, dword ptr [ecx+0C]
:00459071 0F8394000000            jnb 0045910B
:00459077 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045907A 8B4804                  mov ecx, dword ptr [eax+04]
:0045907D 8B55F8                  mov edx, dword ptr [ebp-08]
:00459080 8A0411                  mov al, byte ptr [ecx+edx]
:00459083 8845FC                  mov byte ptr [ebp-04], al
:00459086 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00459089 8B5104                  mov edx, dword ptr [ecx+04]
:0045908C 8B45F8                  mov eax, dword ptr [ebp-08]
:0045908F 8A4C0201                mov cl, byte ptr [edx+eax+01]
:00459093 884DFD                  mov byte ptr [ebp-03], cl
:00459096 8D55FC                  lea edx, dword ptr [ebp-04]
:00459099 52                      push edx
:0045909A E872E8FEFF              call 00447911
:0045909F 83C404                  add esp, 00000004
:004590A2 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004590A7 3DFF000000              cmp eax, 000000FF
:004590AC 7558                    jne 00459106
:004590AE 8B45F4                  mov eax, dword ptr [ebp-0C]
:004590B1 8B4804                  mov ecx, dword ptr [eax+04]
:004590B4 8B55F8                  mov edx, dword ptr [ebp-08]
:004590B7 33C0                    xor eax, eax
:004590B9 8A441102                mov al, byte ptr [ecx+edx+02]
:004590BD 83C05A                  add eax, 0000005A
:004590C0 50                      push eax
:004590C1 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004590C4 51                      push ecx
:004590C5 E8F6E9FEFF              call 00447AC0
:004590CA 83C408                  add esp, 00000008
:004590CD 8B55F4                  mov edx, dword ptr [ebp-0C]
:004590D0 8B4204                  mov eax, dword ptr [edx+04]
:004590D3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004590D6 33D2                    xor edx, edx
:004590D8 8A540802                mov dl, byte ptr [eax+ecx+02]
:004590DC 8BF2                    mov esi, edx
:004590DE 6A00                    push 00000000
:004590E0 B930DF4A00              mov ecx, 004ADF30
:004590E5 E8B4A4FBFF              call 0041359E
:004590EA 8BF8                    mov edi, eax
:004590EC 68800A4B00              push 004B0A80
:004590F1 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004590F4 E894E5FAFF              call 0040768D
:004590F9 8A8E44D94700            mov cl, byte ptr [esi+0047D944]
:004590FF 888C0780430000          mov byte ptr [edi+eax+00004380], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004590AC(C)
|
:00459106 E954FFFFFF              jmp 0045905F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459071(C)
|
:0045910B 5F                      pop edi
:0045910C 5E                      pop esi
:0045910D 8BE5                    mov esp, ebp
:0045910F 5D                      pop ebp
:00459110 C3                      ret



* Referenced by a CALL at Address:
|:0040CAFF   
|
:00459111 55                      push ebp
:00459112 8BEC                    mov ebp, esp
:00459114 83EC10                  sub esp, 00000010
:00459117 56                      push esi
:00459118 57                      push edi
:00459119 894DF0                  mov dword ptr [ebp-10], ecx
:0045911C 8A450C                  mov al, byte ptr [ebp+0C]
:0045911F 50                      push eax
:00459120 8A4D08                  mov cl, byte ptr [ebp+08]
:00459123 51                      push ecx
:00459124 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00459127 E85467FDFF              call 0042F880
:0045912C 8B5510                  mov edx, dword ptr [ebp+10]
:0045912F 81E2FF000000            and edx, 000000FF
:00459135 83FA02                  cmp edx, 00000002
:00459138 7412                    je 0045914C
:0045913A 8A45FD                  mov al, byte ptr [ebp-03]
:0045913D 50                      push eax
:0045913E 8A4DFC                  mov cl, byte ptr [ebp-04]
:00459141 51                      push ecx
:00459142 B9A8034B00              mov ecx, 004B03A8
:00459147 E8EBC8FEFF              call 00445A37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459138(C)
|
:0045914C 8D55FC                  lea edx, dword ptr [ebp-04]
:0045914F 52                      push edx
:00459150 E8BCE7FEFF              call 00447911
:00459155 83C404                  add esp, 00000004
:00459158 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045915D 3DFF000000              cmp eax, 000000FF
:00459162 0F854E020000            jne 004593B6
:00459168 8B4510                  mov eax, dword ptr [ebp+10]
:0045916B 25FF000000              and eax, 000000FF
:00459170 83F802                  cmp eax, 00000002
:00459173 0F8D06010000            jnl 0045927F
:00459179 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045917C 81E1FF000000            and ecx, 000000FF
:00459182 83C15A                  add ecx, 0000005A
:00459185 51                      push ecx
:00459186 8D55FC                  lea edx, dword ptr [ebp-04]
:00459189 52                      push edx
:0045918A E831E9FEFF              call 00447AC0
:0045918F 83C408                  add esp, 00000008
:00459192 6880430000              push 00004380
:00459197 B930DF4A00              mov ecx, 004ADF30
:0045919C E8FDA3FBFF              call 0041359E
:004591A1 8BF0                    mov esi, eax
:004591A3 68800A4B00              push 004B0A80
:004591A8 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004591AB E8DDE4FAFF              call 0040768D
:004591B0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004591B3 8B510C                  mov edx, dword ptr [ecx+0C]
:004591B6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004591B9 8B4904                  mov ecx, dword ptr [ecx+04]
:004591BC 8A0406                  mov al, byte ptr [esi+eax]
:004591BF 88441103                mov byte ptr [ecx+edx+03], al
:004591C3 8B7510                  mov esi, dword ptr [ebp+10]
:004591C6 81E6FF000000            and esi, 000000FF
:004591CC 6880430000              push 00004380
:004591D1 B930DF4A00              mov ecx, 004ADF30
:004591D6 E8C3A3FBFF              call 0041359E
:004591DB 8BF8                    mov edi, eax
:004591DD 68800A4B00              push 004B0A80
:004591E2 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004591E5 E8A3E4FAFF              call 0040768D
:004591EA 8A8E44D94700            mov cl, byte ptr [esi+0047D944]
:004591F0 880C07                  mov byte ptr [edi+eax], cl
:004591F3 8B55F0                  mov edx, dword ptr [ebp-10]
:004591F6 8B4204                  mov eax, dword ptr [edx+04]
:004591F9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004591FC 8B510C                  mov edx, dword ptr [ecx+0C]
:004591FF 8A4D08                  mov cl, byte ptr [ebp+08]
:00459202 880C10                  mov byte ptr [eax+edx], cl
:00459205 8B55F0                  mov edx, dword ptr [ebp-10]
:00459208 8B420C                  mov eax, dword ptr [edx+0C]
:0045920B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045920E 8B5104                  mov edx, dword ptr [ecx+04]
:00459211 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00459214 884C0201                mov byte ptr [edx+eax+01], cl
:00459218 8B55F0                  mov edx, dword ptr [ebp-10]
:0045921B 8B420C                  mov eax, dword ptr [edx+0C]
:0045921E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459221 8B5104                  mov edx, dword ptr [ecx+04]
:00459224 8A4D10                  mov cl, byte ptr [ebp+10]
:00459227 884C0202                mov byte ptr [edx+eax+02], cl
:0045922B 8B55F0                  mov edx, dword ptr [ebp-10]
:0045922E 8B420C                  mov eax, dword ptr [edx+0C]
:00459231 83C004                  add eax, 00000004
:00459234 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459237 89410C                  mov dword ptr [ecx+0C], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045923A 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045923C 6A03                    push 00000003
:0045923E 8B75FD                  mov esi, dword ptr [ebp-03]
:00459241 81E6FF000000            and esi, 000000FF
:00459247 6BF603                  imul esi, 00000003
:0045924A B9A8034B00              mov ecx, 004B03A8
:0045924F E83D9BFEFF              call 00442D91
:00459254 2BF0                    sub esi, eax
:00459256 56                      push esi
:00459257 8B75FC                  mov esi, dword ptr [ebp-04]
:0045925A 81E6FF000000            and esi, 000000FF
:00459260 6BF603                  imul esi, 00000003
:00459263 B9A8034B00              mov ecx, 004B03A8
:00459268 E8139BFEFF              call 00442D80
:0045926D 2BF0                    sub esi, eax
:0045926F 56                      push esi
:00459270 B9A8034B00              mov ecx, 004B03A8
:00459275 E8C49DFEFF              call 0044303E
:0045927A E937010000              jmp 004593B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459173(C)
|
:0045927F C745F800000000          mov [ebp-08], 00000000
:00459286 EB09                    jmp 00459291

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004593B1(U)
|
:00459288 8B55F8                  mov edx, dword ptr [ebp-08]
:0045928B 83C204                  add edx, 00000004
:0045928E 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459286(U)
|
:00459291 8B45F0                  mov eax, dword ptr [ebp-10]
:00459294 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00459297 3B480C                  cmp ecx, dword ptr [eax+0C]
:0045929A 0F8316010000            jnb 004593B6
:004592A0 8B55F0                  mov edx, dword ptr [ebp-10]
:004592A3 8B4204                  mov eax, dword ptr [edx+04]
:004592A6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004592A9 33D2                    xor edx, edx
:004592AB 8A1408                  mov dl, byte ptr [eax+ecx]
:004592AE 8B45FC                  mov eax, dword ptr [ebp-04]
:004592B1 25FF000000              and eax, 000000FF
:004592B6 3BD0                    cmp edx, eax
:004592B8 0F85F3000000            jne 004593B1
:004592BE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004592C1 8B5104                  mov edx, dword ptr [ecx+04]
:004592C4 8B45F8                  mov eax, dword ptr [ebp-08]
:004592C7 33C9                    xor ecx, ecx
:004592C9 8A4C0201                mov cl, byte ptr [edx+eax+01]
:004592CD 8B55FD                  mov edx, dword ptr [ebp-03]
:004592D0 81E2FF000000            and edx, 000000FF
:004592D6 3BCA                    cmp ecx, edx
:004592D8 0F85D3000000            jne 004593B1
:004592DE 8B45F0                  mov eax, dword ptr [ebp-10]
:004592E1 8B7004                  mov esi, dword ptr [eax+04]
:004592E4 6880430000              push 00004380
:004592E9 B930DF4A00              mov ecx, 004ADF30
:004592EE E8ABA2FBFF              call 0041359E
:004592F3 8BF8                    mov edi, eax
:004592F5 68800A4B00              push 004B0A80
:004592FA 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004592FD E88BE3FAFF              call 0040768D
:00459302 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00459305 8A540E03                mov dl, byte ptr [esi+ecx+03]
:00459309 881407                  mov byte ptr [edi+eax], dl

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045930C 68FF000000              push 000000FF
:00459311 8D45FC                  lea eax, dword ptr [ebp-04]
:00459314 50                      push eax
:00459315 E8A6E7FEFF              call 00447AC0
:0045931A 83C408                  add esp, 00000008
:0045931D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00459320 894DF4                  mov dword ptr [ebp-0C], ecx
:00459323 EB09                    jmp 0045932E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045935E(U)
|
:00459325 8B55F4                  mov edx, dword ptr [ebp-0C]
:00459328 83C204                  add edx, 00000004
:0045932B 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459323(U)
|
:0045932E 8B45F0                  mov eax, dword ptr [ebp-10]
:00459331 8B480C                  mov ecx, dword ptr [eax+0C]
:00459334 83E904                  sub ecx, 00000004
:00459337 394DF4                  cmp dword ptr [ebp-0C], ecx
:0045933A 7324                    jnb 00459360

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045933C 6A04                    push 00000004
:0045933E 8B55F0                  mov edx, dword ptr [ebp-10]
:00459341 8B4204                  mov eax, dword ptr [edx+04]
:00459344 0345F4                  add eax, dword ptr [ebp-0C]
:00459347 50                      push eax
:00459348 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045934B 8B5104                  mov edx, dword ptr [ecx+04]
:0045934E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00459351 8D4C0204                lea ecx, dword ptr [edx+eax+04]
:00459355 51                      push ecx
:00459356 E8D4940000              call 0046282F
:0045935B 83C40C                  add esp, 0000000C
:0045935E EBC5                    jmp 00459325

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045933A(C)
|
:00459360 8B55F0                  mov edx, dword ptr [ebp-10]
:00459363 8B420C                  mov eax, dword ptr [edx+0C]
:00459366 83E804                  sub eax, 00000004
:00459369 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045936C 89410C                  mov dword ptr [ecx+0C], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045936F 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00459371 6A03                    push 00000003
:00459373 8B75FD                  mov esi, dword ptr [ebp-03]
:00459376 81E6FF000000            and esi, 000000FF
:0045937C 6BF603                  imul esi, 00000003
:0045937F B9A8034B00              mov ecx, 004B03A8
:00459384 E8089AFEFF              call 00442D91
:00459389 2BF0                    sub esi, eax
:0045938B 56                      push esi
:0045938C 8B75FC                  mov esi, dword ptr [ebp-04]
:0045938F 81E6FF000000            and esi, 000000FF
:00459395 6BF603                  imul esi, 00000003
:00459398 B9A8034B00              mov ecx, 004B03A8
:0045939D E8DE99FEFF              call 00442D80
:004593A2 2BF0                    sub esi, eax
:004593A4 56                      push esi
:004593A5 B9A8034B00              mov ecx, 004B03A8
:004593AA E88F9CFEFF              call 0044303E
:004593AF EB05                    jmp 004593B6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004592B8(C), :004592D8(C)
|
:004593B1 E9D2FEFFFF              jmp 00459288

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459162(C), :0045927A(U), :0045929A(C), :004593AF(U)
|
:004593B6 5F                      pop edi
:004593B7 5E                      pop esi
:004593B8 8BE5                    mov esp, ebp
:004593BA 5D                      pop ebp
:004593BB C20C00                  ret 000C


:004593BE 55                      push ebp
:004593BF 8BEC                    mov ebp, esp
:004593C1 51                      push ecx
:004593C2 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004593C5 6A04                    push 00000004
:004593C7 B9800D4B00              mov ecx, 004B0D80
:004593CC E8D8870000              call 00461BA9

* Possible Reference to String Resource ID=00008: ""
                                  |
:004593D1 6A08                    push 00000008
:004593D3 E8A3D7FCFF              call 00426B7B
:004593D8 83C404                  add esp, 00000004
:004593DB 8B4510                  mov eax, dword ptr [ebp+10]
:004593DE 25FF000000              and eax, 000000FF
:004593E3 83F804                  cmp eax, 00000004
:004593E6 7516                    jne 004593FE

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004593E8 6A02                    push 00000002
:004593EA E827000000              call 00459416
:004593EF 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004593F2 6A03                    push 00000003
:004593F4 E81D000000              call 00459416
:004593F9 83C404                  add esp, 00000004
:004593FC EB12                    jmp 00459410

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004593E6(C)
|
:004593FE 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459401 81E1FF000000            and ecx, 000000FF
:00459407 51                      push ecx
:00459408 E809000000              call 00459416
:0045940D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004593FC(U)
|
:00459410 8BE5                    mov esp, ebp
:00459412 5D                      pop ebp
:00459413 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:004593EA   , :004593F4   , :00459408   
|
:00459416 55                      push ebp
:00459417 8BEC                    mov ebp, esp
:00459419 5D                      pop ebp
:0045941A C3                      ret



* Referenced by a CALL at Address:
|:0040D189   
|
:0045941B 55                      push ebp
:0045941C 8BEC                    mov ebp, esp
:0045941E 83EC14                  sub esp, 00000014
:00459421 894DEC                  mov dword ptr [ebp-14], ecx
:00459424 8B4508                  mov eax, dword ptr [ebp+08]
:00459427 50                      push eax
:00459428 E8C2F4FFFF              call 004588EF
:0045942D 83C404                  add esp, 00000004
:00459430 8945F4                  mov dword ptr [ebp-0C], eax
:00459433 C745FC00000000          mov [ebp-04], 00000000
:0045943A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045943D 6BC970                  imul ecx, 00000070
:00459440 81C198224900            add ecx, 00492298
:00459446 E8A5B4FAFF              call 004048F0
:0045944B 25FF000000              and eax, 000000FF
:00459450 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00459453 81E1FF000000            and ecx, 000000FF
:00459459 3BC1                    cmp eax, ecx
:0045945B 750A                    jne 00459467
:0045945D B801000000              mov eax, 00000001
:00459462 E915020000              jmp 0045967C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045945B(C)
|
:00459467 837DF4FF                cmp dword ptr [ebp-0C], FFFFFFFF
:0045946B 751F                    jne 0045948C
:0045946D 8A550C                  mov dl, byte ptr [ebp+0C]
:00459470 52                      push edx
:00459471 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459474 6BC970                  imul ecx, 00000070
:00459477 81C198224900            add ecx, 00492298
:0045947D E87EE3FAFF              call 00407800
:00459482 B801000000              mov eax, 00000001
:00459487 E9F0010000              jmp 0045967C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045946B(C)
|
:0045948C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045948F E83C64FDFF              call 0042F8D0
:00459494 25FF000000              and eax, 000000FF
:00459499 83F804                  cmp eax, 00000004
:0045949C 751F                    jne 004594BD
:0045949E 8A450C                  mov al, byte ptr [ebp+0C]
:004594A1 50                      push eax
:004594A2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004594A5 6BC970                  imul ecx, 00000070
:004594A8 81C198224900            add ecx, 00492298
:004594AE E84DE3FAFF              call 00407800
:004594B3 B801000000              mov eax, 00000001
:004594B8 E9BF010000              jmp 0045967C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045949C(C)
|
:004594BD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004594C0 E80B5EFBFF              call 0040F2D0
:004594C5 8945F8                  mov dword ptr [ebp-08], eax
:004594C8 837DF800                cmp dword ptr [ebp-08], 00000000
:004594CC 7415                    je 004594E3
:004594CE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004594D1 81E1FF000000            and ecx, 000000FF
:004594D7 85C9                    test ecx, ecx
:004594D9 7508                    jne 004594E3
:004594DB 8B55F4                  mov edx, dword ptr [ebp-0C]
:004594DE 8955FC                  mov dword ptr [ebp-04], edx
:004594E1 EB6B                    jmp 0045954E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004594CC(C), :004594D9(C)
|
:004594E3 8B45F8                  mov eax, dword ptr [ebp-08]
:004594E6 F7D8                    neg eax
:004594E8 1BC0                    sbb eax, eax
:004594EA 83E01E                  and eax, 0000001E
:004594ED 8845F0                  mov byte ptr [ebp-10], al
:004594F0 EB09                    jmp 004594FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045954C(U)
|
:004594F2 8A4DF0                  mov cl, byte ptr [ebp-10]
:004594F5 80C101                  add cl, 01
:004594F8 884DF0                  mov byte ptr [ebp-10], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004594F0(U)
|
:004594FB 8B55F0                  mov edx, dword ptr [ebp-10]
:004594FE 81E2FF000000            and edx, 000000FF
:00459504 8B45F8                  mov eax, dword ptr [ebp-08]
:00459507 F7D8                    neg eax
:00459509 1BC0                    sbb eax, eax
:0045950B 83E03C                  and eax, 0000003C
:0045950E 83C01E                  add eax, 0000001E
:00459511 3BD0                    cmp edx, eax
:00459513 7D39                    jge 0045954E
:00459515 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459518 81E1FF000000            and ecx, 000000FF
:0045951E 6BC924                  imul ecx, 00000024
:00459521 81C108F54A00            add ecx, 004AF508
:00459527 E8A463FDFF              call 0042F8D0
:0045952C 25FF000000              and eax, 000000FF
:00459531 85C0                    test eax, eax
:00459533 7517                    jne 0045954C
:00459535 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459538 81E1FF000000            and ecx, 000000FF
:0045953E 6BC924                  imul ecx, 00000024
:00459541 81C108F54A00            add ecx, 004AF508
:00459547 894DFC                  mov dword ptr [ebp-04], ecx
:0045954A EB02                    jmp 0045954E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459533(C)
|
:0045954C EBA4                    jmp 004594F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004594E1(U), :00459513(C), :0045954A(U)
|
:0045954E 837DFC00                cmp dword ptr [ebp-04], 00000000
:00459552 7525                    jne 00459579
:00459554 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00459557 E81831FDFF              call 0042C674
:0045955C 8A550C                  mov dl, byte ptr [ebp+0C]
:0045955F 52                      push edx
:00459560 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459563 6BC970                  imul ecx, 00000070
:00459566 81C198224900            add ecx, 00492298
:0045956C E88FE2FAFF              call 00407800
:00459571 83C8FF                  or eax, FFFFFFFF
:00459574 E903010000              jmp 0045967C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459552(C)
|
:00459579 8A450C                  mov al, byte ptr [ebp+0C]
:0045957C 50                      push eax
:0045957D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459580 6BC970                  imul ecx, 00000070
:00459583 81C198224900            add ecx, 00492298
:00459589 E872E2FAFF              call 00407800
:0045958E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00459591 E83A63FDFF              call 0042F8D0
:00459596 25FF000000              and eax, 000000FF
:0045959B 83F802                  cmp eax, 00000002
:0045959E 7508                    jne 004595A8
:004595A0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004595A3 E8682FFDFF              call 0042C510

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045959E(C)
|
:004595A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004595AB 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:004595AE 7427                    je 004595D7
:004595B0 8B55F4                  mov edx, dword ptr [ebp-0C]
:004595B3 52                      push edx
:004595B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004595B7 E8940F0000              call 0045A550
:004595BC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004595BF E85C62FDFF              call 0042F820
:004595C4 50                      push eax
:004595C5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004595C8 E8152BFDFF              call 0042C0E2
:004595CD 6A00                    push 00000000
:004595CF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004595D2 E84964FDFF              call 0042FA20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595AE(C)
|
:004595D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004595DA E8F15CFBFF              call 0040F2D0
:004595DF 85C0                    test eax, eax
:004595E1 7424                    je 00459607
:004595E3 8B450C                  mov eax, dword ptr [ebp+0C]
:004595E6 25FF000000              and eax, 000000FF
:004595EB 85C0                    test eax, eax
:004595ED 750C                    jne 004595FB
:004595EF 6A00                    push 00000000
:004595F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004595F4 E86702FDFF              call 00429860
:004595F9 EB0A                    jmp 00459605

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595ED(C)
|
:004595FB 6A01                    push 00000001
:004595FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459600 E85B02FDFF              call 00429860

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595F9(U)
|
:00459605 EB2D                    jmp 00459634

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595E1(C)
|
:00459607 B940F94A00              mov ecx, 004AF940
:0045960C E84B3EFDFF              call 0042D45C
:00459611 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00459614 81E1FF000000            and ecx, 000000FF
:0045961A 3BC1                    cmp eax, ecx
:0045961C 750C                    jne 0045962A

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045961E 6A02                    push 00000002
:00459620 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459623 E83802FDFF              call 00429860
:00459628 EB0A                    jmp 00459634

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045961C(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045962A 6A03                    push 00000003
:0045962C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045962F E82C02FDFF              call 00429860

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459605(U), :00459628(U)
|
:00459634 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459637 E8822EFDFF              call 0042C4BE
:0045963C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045963F E88C62FDFF              call 0042F8D0
:00459644 25FF000000              and eax, 000000FF
:00459649 83F802                  cmp eax, 00000002
:0045964C 7529                    jne 00459677
:0045964E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459651 E8912EFDFF              call 0042C4E7
:00459656 8B550C                  mov edx, dword ptr [ebp+0C]
:00459659 81E2FF000000            and edx, 000000FF
:0045965F 85D2                    test edx, edx
:00459661 750A                    jne 0045966D

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00459663 6A07                    push 00000007
:00459665 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459668 E8453CFDFF              call 0042D2B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459661(C)
|
:0045966D B9180A4B00              mov ecx, 004B0A18
:00459672 E829F0FFFF              call 004586A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045964C(C)
|
:00459677 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459462(U), :00459487(U), :004594B8(U), :00459574(U)
|
:0045967C 8BE5                    mov esp, ebp
:0045967E 5D                      pop ebp
:0045967F C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040D0F4   , :00455B5A   
|
:00459682 55                      push ebp
:00459683 8BEC                    mov ebp, esp
:00459685 83EC08                  sub esp, 00000008
:00459688 894DF8                  mov dword ptr [ebp-08], ecx
:0045968B 8B4508                  mov eax, dword ptr [ebp+08]
:0045968E 50                      push eax
:0045968F E85BF2FFFF              call 004588EF
:00459694 83C404                  add esp, 00000004
:00459697 8945FC                  mov dword ptr [ebp-04], eax
:0045969A 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0045969E 7505                    jne 004596A5
:004596A0 83C8FF                  or eax, FFFFFFFF
:004596A3 EB66                    jmp 0045970B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045969E(C)
|
:004596A5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004596A8 81E1FF000000            and ecx, 000000FF
:004596AE 85C9                    test ecx, ecx
:004596B0 7C56                    jl 00459708
:004596B2 8B5510                  mov edx, dword ptr [ebp+10]
:004596B5 81E2FF000000            and edx, 000000FF
:004596BB 85D2                    test edx, edx
:004596BD 7C49                    jl 00459708
:004596BF 8B450C                  mov eax, dword ptr [ebp+0C]
:004596C2 25FF000000              and eax, 000000FF
:004596C7 33C9                    xor ecx, ecx
:004596C9 8A0D800A4B00            mov cl, byte ptr [004B0A80]
:004596CF 3BC1                    cmp eax, ecx
:004596D1 7D35                    jge 00459708
:004596D3 8B5510                  mov edx, dword ptr [ebp+10]
:004596D6 81E2FF000000            and edx, 000000FF
:004596DC 33C0                    xor eax, eax
:004596DE A0810A4B00              mov al, byte ptr [004B0A81]
:004596E3 3BD0                    cmp edx, eax
:004596E5 7D21                    jge 00459708

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004596E7 6A04                    push 00000004
:004596E9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004596EC E8CF63FDFF              call 0042FAC0
:004596F1 8A4D10                  mov cl, byte ptr [ebp+10]
:004596F4 51                      push ecx
:004596F5 8A550C                  mov dl, byte ptr [ebp+0C]
:004596F8 52                      push edx
:004596F9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004596FC E88C5CFDFF              call 0042F38D
:00459701 B801000000              mov eax, 00000001
:00459706 EB03                    jmp 0045970B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004596B0(C), :004596BD(C), :004596D1(C), :004596E5(C)
|
:00459708 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004596A3(U), :00459706(U)
|
:0045970B 8BE5                    mov esp, ebp
:0045970D 5D                      pop ebp
:0045970E C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040D0D6   , :00455B3C   
|
:00459711 55                      push ebp
:00459712 8BEC                    mov ebp, esp
:00459714 83EC0C                  sub esp, 0000000C
:00459717 894DF4                  mov dword ptr [ebp-0C], ecx
:0045971A 8B4508                  mov eax, dword ptr [ebp+08]
:0045971D 50                      push eax
:0045971E E8CCF1FFFF              call 004588EF
:00459723 83C404                  add esp, 00000004
:00459726 8945FC                  mov dword ptr [ebp-04], eax
:00459729 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0045972D 7505                    jne 00459734
:0045972F 83C8FF                  or eax, FFFFFFFF
:00459732 EB3A                    jmp 0045976E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045972D(C)
|
:00459734 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00459737 51                      push ecx
:00459738 E8B2F1FFFF              call 004588EF
:0045973D 83C404                  add esp, 00000004
:00459740 8945F8                  mov dword ptr [ebp-08], eax
:00459743 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:00459747 7505                    jne 0045974E
:00459749 83C8FF                  or eax, FFFFFFFF
:0045974C EB20                    jmp 0045976E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459747(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045974E 6A04                    push 00000004
:00459750 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459753 E86863FDFF              call 0042FAC0
:00459758 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045975B E8C060FDFF              call 0042F820
:00459760 50                      push eax
:00459761 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459764 E8B764FDFF              call 0042FC20
:00459769 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459732(U), :0045974C(U)
|
:0045976E 8BE5                    mov esp, ebp
:00459770 5D                      pop ebp
:00459771 C20800                  ret 0008


:00459774 55                      push ebp
:00459775 8BEC                    mov ebp, esp
:00459777 83EC24                  sub esp, 00000024
:0045977A 894DE4                  mov dword ptr [ebp-1C], ecx
:0045977D 8B4508                  mov eax, dword ptr [ebp+08]
:00459780 25FF000000              and eax, 000000FF
:00459785 85C0                    test eax, eax
:00459787 7510                    jne 00459799
:00459789 C745F400000000          mov [ebp-0C], 00000000
:00459790 C745FC1E000000          mov [ebp-04], 0000001E
:00459797 EB0E                    jmp 004597A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459787(C)
|
:00459799 C745F41E000000          mov [ebp-0C], 0000001E
:004597A0 C745FC5A000000          mov [ebp-04], 0000005A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459797(U)
|
:004597A7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004597AA 894DF8                  mov dword ptr [ebp-08], ecx
:004597AD EB09                    jmp 004597B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004598CC(U)
|
:004597AF 8B55F8                  mov edx, dword ptr [ebp-08]
:004597B2 83C201                  add edx, 00000001
:004597B5 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004597AD(U)
|
:004597B8 8B45F8                  mov eax, dword ptr [ebp-08]
:004597BB 3B45FC                  cmp eax, dword ptr [ebp-04]
:004597BE 0F830D010000            jnb 004598D1
:004597C4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004597C7 6BC924                  imul ecx, 00000024
:004597CA 81C108F54A00            add ecx, 004AF508
:004597D0 E8FB60FDFF              call 0042F8D0
:004597D5 25FF000000              and eax, 000000FF
:004597DA 83F802                  cmp eax, 00000002
:004597DD 0F85E9000000            jne 004598CC
:004597E3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004597E6 81E1FF000000            and ecx, 000000FF
:004597EC 85C9                    test ecx, ecx
:004597EE 744F                    je 0045983F
:004597F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004597F3 6BC924                  imul ecx, 00000024
:004597F6 81C108F54A00            add ecx, 004AF508
:004597FC E86FB0FAFF              call 00404870
:00459801 8945F0                  mov dword ptr [ebp-10], eax
:00459804 8B55F0                  mov edx, dword ptr [ebp-10]
:00459807 D1EA                    shr edx, 1
:00459809 83FA01                  cmp edx, 00000001
:0045980C 7E0A                    jle 00459818
:0045980E 8B45F0                  mov eax, dword ptr [ebp-10]
:00459811 D1E8                    shr eax, 1
:00459813 8945E0                  mov dword ptr [ebp-20], eax
:00459816 EB07                    jmp 0045981F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045980C(C)
|
:00459818 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459816(U)
|
:0045981F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00459822 894DF0                  mov dword ptr [ebp-10], ecx
:00459825 8B55F0                  mov edx, dword ptr [ebp-10]
:00459828 52                      push edx
:00459829 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045982C 6BC924                  imul ecx, 00000024
:0045982F 81C108F54A00            add ecx, 004AF508
:00459835 E82611FDFF              call 0042A960
:0045983A E98D000000              jmp 004598CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004597EE(C)
|
:0045983F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00459842 6BC924                  imul ecx, 00000024
:00459845 81C108F54A00            add ecx, 004AF508
:0045984B E86060FDFF              call 0042F8B0
:00459850 8845E8                  mov byte ptr [ebp-18], al
:00459853 8B45E8                  mov eax, dword ptr [ebp-18]
:00459856 25FF000000              and eax, 000000FF
:0045985B 99                      cdq
:0045985C 2BC2                    sub eax, edx
:0045985E D1F8                    sar eax, 1
:00459860 8845EC                  mov byte ptr [ebp-14], al
:00459863 8B45EC                  mov eax, dword ptr [ebp-14]
:00459866 25FF000000              and eax, 000000FF
:0045986B 83F801                  cmp eax, 00000001
:0045986E 7D09                    jge 00459879
:00459870 C745DC01000000          mov [ebp-24], 00000001
:00459877 EB0C                    jmp 00459885

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045986E(C)
|
:00459879 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045987C 81E1FF000000            and ecx, 000000FF
:00459882 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459877(U)
|
:00459885 8A55DC                  mov dl, byte ptr [ebp-24]
:00459888 8855EC                  mov byte ptr [ebp-14], dl
:0045988B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045988E 81E1FF000000            and ecx, 000000FF
:00459894 8B45E8                  mov eax, dword ptr [ebp-18]
:00459897 25FF000000              and eax, 000000FF
:0045989C 99                      cdq
:0045989D 2BC2                    sub eax, edx
:0045989F D1F8                    sar eax, 1
:004598A1 03C8                    add ecx, eax
:004598A3 51                      push ecx
:004598A4 E80C880000              call 004620B5
:004598A9 83C404                  add esp, 00000004
:004598AC 8B55EC                  mov edx, dword ptr [ebp-14]
:004598AF 81E2FF000000            and edx, 000000FF
:004598B5 3BC2                    cmp eax, edx
:004598B7 7713                    ja 004598CC

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004598B9 6A10                    push 00000010
:004598BB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004598BE 6BC924                  imul ecx, 00000024
:004598C1 81C108F54A00            add ecx, 004AF508
:004598C7 E89402FEFF              call 00439B60

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004597DD(C), :0045983A(U), :004598B7(C)
|
:004598CC E9DEFEFFFF              jmp 004597AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004597BE(C)
|
:004598D1 8BE5                    mov esp, ebp
:004598D3 5D                      pop ebp
:004598D4 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040DBE6   , :00459A1D   , :00459A68   , :00459A8A   
|
:004598D7 55                      push ebp
:004598D8 8BEC                    mov ebp, esp
:004598DA 83EC08                  sub esp, 00000008
:004598DD 894DF8                  mov dword ptr [ebp-08], ecx
:004598E0 8B4508                  mov eax, dword ptr [ebp+08]
:004598E3 50                      push eax
:004598E4 E806F0FFFF              call 004588EF
:004598E9 83C404                  add esp, 00000004
:004598EC 8945FC                  mov dword ptr [ebp-04], eax
:004598EF 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:004598F3 7505                    jne 004598FA
:004598F5 83C8FF                  or eax, FFFFFFFF
:004598F8 EB21                    jmp 0045991B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004598F3(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004598FA 6A04                    push 00000004
:004598FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004598FF E8155BFDFF              call 0042F419
:00459904 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459907 E8682DFDFF              call 0042C674

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045990C 6A04                    push 00000004
:0045990E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459911 E8AA61FDFF              call 0042FAC0
:00459916 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004598F8(U)
|
:0045991B 8BE5                    mov esp, ebp
:0045991D 5D                      pop ebp
:0045991E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040BF30   , :0040DC1D   
|
:00459921 55                      push ebp
:00459922 8BEC                    mov ebp, esp
:00459924 83EC14                  sub esp, 00000014
:00459927 894DEC                  mov dword ptr [ebp-14], ecx
:0045992A 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0045992D E87EDEFAFF              call 004077B0
:00459932 8A450C                  mov al, byte ptr [ebp+0C]
:00459935 8845F4                  mov byte ptr [ebp-0C], al
:00459938 EB09                    jmp 00459943

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459A94(U)
|
:0045993A 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0045993D 80C101                  add cl, 01
:00459940 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459938(U)
|
:00459943 8B55F4                  mov edx, dword ptr [ebp-0C]
:00459946 81E2FF000000            and edx, 000000FF
:0045994C 8B4514                  mov eax, dword ptr [ebp+14]
:0045994F 25FF000000              and eax, 000000FF
:00459954 3BD0                    cmp edx, eax
:00459956 0F8F3D010000            jg 00459A99
:0045995C 8A4D08                  mov cl, byte ptr [ebp+08]
:0045995F 884DF8                  mov byte ptr [ebp-08], cl
:00459962 EB09                    jmp 0045996D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459A8F(U)
|
:00459964 8A55F8                  mov dl, byte ptr [ebp-08]
:00459967 80C201                  add dl, 01
:0045996A 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459962(U)
|
:0045996D 8B45F8                  mov eax, dword ptr [ebp-08]
:00459970 25FF000000              and eax, 000000FF
:00459975 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459978 81E1FF000000            and ecx, 000000FF
:0045997E 3BC1                    cmp eax, ecx
:00459980 0F8F0E010000            jg 00459A94
:00459986 8A55F8                  mov dl, byte ptr [ebp-08]
:00459989 8855F0                  mov byte ptr [ebp-10], dl
:0045998C 8A45F4                  mov al, byte ptr [ebp-0C]
:0045998F 8845F1                  mov byte ptr [ebp-0F], al
:00459992 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00459995 51                      push ecx
:00459996 E876DFFEFF              call 00447911
:0045999B 83C404                  add esp, 00000004
:0045999E 8845FC                  mov byte ptr [ebp-04], al
:004599A1 8B55FC                  mov edx, dword ptr [ebp-04]
:004599A4 81E2FF000000            and edx, 000000FF
:004599AA 81FAFF000000            cmp edx, 000000FF
:004599B0 0F84D9000000            je 00459A8F
:004599B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004599B9 81E1FF000000            and ecx, 000000FF
:004599BF 6BC924                  imul ecx, 00000024
:004599C2 81C108F54A00            add ecx, 004AF508
:004599C8 E8035FFDFF              call 0042F8D0
:004599CD 25FF000000              and eax, 000000FF
:004599D2 83F802                  cmp eax, 00000002
:004599D5 0F85B4000000            jne 00459A8F
:004599DB 8B4518                  mov eax, dword ptr [ebp+18]
:004599DE 25FF000000              and eax, 000000FF
:004599E3 85C0                    test eax, eax
:004599E5 753D                    jne 00459A24
:004599E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004599EA 81E1FF000000            and ecx, 000000FF
:004599F0 6BC924                  imul ecx, 00000024
:004599F3 81C108F54A00            add ecx, 004AF508
:004599F9 E8D258FBFF              call 0040F2D0
:004599FE 85C0                    test eax, eax
:00459A00 7520                    jne 00459A22
:00459A02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459A05 81E1FF000000            and ecx, 000000FF
:00459A0B 6BC924                  imul ecx, 00000024
:00459A0E 81C108F54A00            add ecx, 004AF508
:00459A14 E8B75CFDFF              call 0042F6D0
:00459A19 50                      push eax
:00459A1A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00459A1D E8B5FEFFFF              call 004598D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459A00(C)
|
:00459A22 EB6B                    jmp 00459A8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004599E5(C)
|
:00459A24 8B4D18                  mov ecx, dword ptr [ebp+18]
:00459A27 81E1FF000000            and ecx, 000000FF
:00459A2D 83F901                  cmp ecx, 00000001
:00459A30 753D                    jne 00459A6F
:00459A32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459A35 81E1FF000000            and ecx, 000000FF
:00459A3B 6BC924                  imul ecx, 00000024
:00459A3E 81C108F54A00            add ecx, 004AF508
:00459A44 E88758FBFF              call 0040F2D0
:00459A49 85C0                    test eax, eax
:00459A4B 7420                    je 00459A6D
:00459A4D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459A50 81E1FF000000            and ecx, 000000FF
:00459A56 6BC924                  imul ecx, 00000024
:00459A59 81C108F54A00            add ecx, 004AF508
:00459A5F E86C5CFDFF              call 0042F6D0
:00459A64 50                      push eax
:00459A65 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00459A68 E86AFEFFFF              call 004598D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459A4B(C)
|
:00459A6D EB20                    jmp 00459A8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459A30(C)
|
:00459A6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459A72 81E1FF000000            and ecx, 000000FF
:00459A78 6BC924                  imul ecx, 00000024
:00459A7B 81C108F54A00            add ecx, 004AF508
:00459A81 E84A5CFDFF              call 0042F6D0
:00459A86 50                      push eax
:00459A87 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00459A8A E848FEFFFF              call 004598D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004599B0(C), :004599D5(C), :00459A22(U), :00459A6D(U)
|
:00459A8F E9D0FEFFFF              jmp 00459964

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459980(C)
|
:00459A94 E9A1FEFFFF              jmp 0045993A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459956(C)
|
:00459A99 8BE5                    mov esp, ebp
:00459A9B 5D                      pop ebp
:00459A9C C21400                  ret 0014



* Referenced by a CALL at Addresses:
|:0040D9C5   , :0042B783   , :0042B844   , :0042B8B4   , :0042B93A   
|:0042B9AC   , :0042B9DA   , :0042BA08   , :0042BA3E   , :0042BAC2   
|:0042BB02   , :0042BB42   , :0042BB82   , :00459E08   
|
:00459A9F 55                      push ebp
:00459AA0 8BEC                    mov ebp, esp
:00459AA2 83EC1C                  sub esp, 0000001C
:00459AA5 894DF0                  mov dword ptr [ebp-10], ecx
:00459AA8 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00459AAF 7605                    jbe 00459AB6
:00459AB1 E90E020000              jmp 00459CC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459AAF(C)
|
:00459AB6 8B4508                  mov eax, dword ptr [ebp+08]
:00459AB9 50                      push eax
:00459ABA E870FCFCFF              call 0042972F
:00459ABF 83C404                  add esp, 00000004
:00459AC2 8845FC                  mov byte ptr [ebp-04], al
:00459AC5 C745F800000000          mov [ebp-08], 00000000
:00459ACC C745F401000000          mov [ebp-0C], 00000001
:00459AD3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459AD6 81E1FF000000            and ecx, 000000FF
:00459ADC 81F9FF000000            cmp ecx, 000000FF
:00459AE2 7421                    je 00459B05
:00459AE4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459AE7 81E1FF000000            and ecx, 000000FF
:00459AED 6BC924                  imul ecx, 00000024
:00459AF0 81C108F54A00            add ecx, 004AF508
:00459AF6 E8D55DFDFF              call 0042F8D0
:00459AFB 25FF000000              and eax, 000000FF
:00459B00 83F802                  cmp eax, 00000002
:00459B03 7405                    je 00459B0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459AE2(C)
|
:00459B05 E9BA010000              jmp 00459CC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459B03(C)
|
:00459B0A 837D1400                cmp dword ptr [ebp+14], 00000000
:00459B0E 7416                    je 00459B26
:00459B10 6A00                    push 00000000
:00459B12 8A5510                  mov dl, byte ptr [ebp+10]
:00459B15 52                      push edx
:00459B16 8A450C                  mov al, byte ptr [ebp+0C]
:00459B19 50                      push eax
:00459B1A 8A4DFC                  mov cl, byte ptr [ebp-04]
:00459B1D 51                      push ecx
:00459B1E E804FEFCFF              call 00429927
:00459B23 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459B0E(C)
|
:00459B26 8B550C                  mov edx, dword ptr [ebp+0C]
:00459B29 81E2FF000000            and edx, 000000FF
:00459B2F 8955EC                  mov dword ptr [ebp-14], edx
:00459B32 837DEC03                cmp dword ptr [ebp-14], 00000003
:00459B36 0F8768010000            ja 00459CA4
:00459B3C 8B45EC                  mov eax, dword ptr [ebp-14]
:00459B3F FF2485CA9C4500          jmp dword ptr [4*eax+00459CCA]
:00459B46 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459B49 81E1FF000000            and ecx, 000000FF
:00459B4F 83C940                  or ecx, 00000040
:00459B52 51                      push ecx
:00459B53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459B56 81E1FF000000            and ecx, 000000FF
:00459B5C 6BC924                  imul ecx, 00000024
:00459B5F 81C108F54A00            add ecx, 004AF508
:00459B65 E8C65DFDFF              call 0042F930
:00459B6A E935010000              jmp 00459CA4
:00459B6F 8B5510                  mov edx, dword ptr [ebp+10]
:00459B72 81E2FF000000            and edx, 000000FF
:00459B78 83CA40                  or edx, 00000040
:00459B7B 52                      push edx
:00459B7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459B7F 81E1FF000000            and ecx, 000000FF
:00459B85 6BC924                  imul ecx, 00000024
:00459B88 81C108F54A00            add ecx, 004AF508
:00459B8E E8DD5DFDFF              call 0042F970
:00459B93 E90C010000              jmp 00459CA4
:00459B98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459B9B 81E1FF000000            and ecx, 000000FF
:00459BA1 6BC924                  imul ecx, 00000024
:00459BA4 81C108F54A00            add ecx, 004AF508
:00459BAA E8C1ACFAFF              call 00404870
:00459BAF 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459BB2 81E1FF000000            and ecx, 000000FF
:00459BB8 3BC1                    cmp eax, ecx
:00459BBA 7D1C                    jge 00459BD8
:00459BBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459BBF 81E1FF000000            and ecx, 000000FF
:00459BC5 6BC924                  imul ecx, 00000024
:00459BC8 81C108F54A00            add ecx, 004AF508
:00459BCE E89DACFAFF              call 00404870
:00459BD3 8945E8                  mov dword ptr [ebp-18], eax
:00459BD6 EB0C                    jmp 00459BE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459BBA(C)
|
:00459BD8 8B5510                  mov edx, dword ptr [ebp+10]
:00459BDB 81E2FF000000            and edx, 000000FF
:00459BE1 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459BD6(U)
|
:00459BE4 8B45E8                  mov eax, dword ptr [ebp-18]
:00459BE7 8945F8                  mov dword ptr [ebp-08], eax
:00459BEA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459BED 81E1FF000000            and ecx, 000000FF
:00459BF3 6BC924                  imul ecx, 00000024
:00459BF6 81C108F54A00            add ecx, 004AF508
:00459BFC E86FACFAFF              call 00404870
:00459C01 2B45F8                  sub eax, dword ptr [ebp-08]
:00459C04 83F801                  cmp eax, 00000001
:00459C07 761F                    jbe 00459C28
:00459C09 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459C0C 81E1FF000000            and ecx, 000000FF
:00459C12 6BC924                  imul ecx, 00000024
:00459C15 81C108F54A00            add ecx, 004AF508
:00459C1B E850ACFAFF              call 00404870
:00459C20 2B45F8                  sub eax, dword ptr [ebp-08]
:00459C23 8945E4                  mov dword ptr [ebp-1C], eax
:00459C26 EB07                    jmp 00459C2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C07(C)
|
:00459C28 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C26(U)
|
:00459C2F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00459C32 894DF4                  mov dword ptr [ebp-0C], ecx
:00459C35 8B55F4                  mov edx, dword ptr [ebp-0C]
:00459C38 52                      push edx
:00459C39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459C3C 81E1FF000000            and ecx, 000000FF
:00459C42 6BC924                  imul ecx, 00000024
:00459C45 81C108F54A00            add ecx, 004AF508
:00459C4B E8100DFDFF              call 0042A960
:00459C50 EB52                    jmp 00459CA4
:00459C52 8B4510                  mov eax, dword ptr [ebp+10]
:00459C55 25FF000000              and eax, 000000FF
:00459C5A 2580000000              and eax, 00000080
:00459C5F 85C0                    test eax, eax
:00459C61 741D                    je 00459C80
:00459C63 8A4D10                  mov cl, byte ptr [ebp+10]
:00459C66 51                      push ecx
:00459C67 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459C6A 81E1FF000000            and ecx, 000000FF
:00459C70 6BC924                  imul ecx, 00000024
:00459C73 81C108F54A00            add ecx, 004AF508
:00459C79 E8525DFDFF              call 0042F9D0
:00459C7E EB24                    jmp 00459CA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C61(C)
|
:00459C80 8B5510                  mov edx, dword ptr [ebp+10]
:00459C83 81E2FF000000            and edx, 000000FF
:00459C89 83CA40                  or edx, 00000040
:00459C8C 52                      push edx
:00459C8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459C90 81E1FF000000            and ecx, 000000FF
:00459C96 6BC924                  imul ecx, 00000024
:00459C99 81C108F54A00            add ecx, 004AF508
:00459C9F E8BCFEFDFF              call 00439B60

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459B36(C), :00459B6A(U), :00459B93(U), :00459C50(U), :00459C7E(U)
|
:00459CA4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459CA7 81E1FF000000            and ecx, 000000FF
:00459CAD 6BC924                  imul ecx, 00000024
:00459CB0 81C108F54A00            add ecx, 004AF508
:00459CB6 E8155AFDFF              call 0042F6D0
:00459CBB 50                      push eax
:00459CBC E88FD20000              call 00466F50
:00459CC1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459AB1(U), :00459B05(U)
|
:00459CC4 8BE5                    mov esp, ebp
:00459CC6 5D                      pop ebp
:00459CC7 C21000                  ret 0010



:00459CCA 469B4500                DWORD 00459B46
:00459CCE 6F9B4500                DWORD 00459B6F
:00459CD2 989B4500                DWORD 00459B98
:00459CD6 529C4500                DWORD 00459C52



* Referenced by a CALL at Address:
|:0040DA41   
|
:00459CDA 55                      push ebp
:00459CDB 8BEC                    mov ebp, esp
:00459CDD 83EC18                  sub esp, 00000018
:00459CE0 894DE8                  mov dword ptr [ebp-18], ecx
:00459CE3 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00459CE6 E8C5DAFAFF              call 004077B0
:00459CEB 8A450C                  mov al, byte ptr [ebp+0C]
:00459CEE 8845F4                  mov byte ptr [ebp-0C], al
:00459CF1 EB09                    jmp 00459CFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E12(U)
|
:00459CF3 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00459CF6 80C101                  add cl, 01
:00459CF9 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459CF1(U)
|
:00459CFC 8B55F4                  mov edx, dword ptr [ebp-0C]
:00459CFF 81E2FF000000            and edx, 000000FF
:00459D05 8B4514                  mov eax, dword ptr [ebp+14]
:00459D08 25FF000000              and eax, 000000FF
:00459D0D 3BD0                    cmp edx, eax
:00459D0F 0F8F02010000            jg 00459E17
:00459D15 8A4D08                  mov cl, byte ptr [ebp+08]
:00459D18 884DF8                  mov byte ptr [ebp-08], cl
:00459D1B EB09                    jmp 00459D26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E0D(U)
|
:00459D1D 8A55F8                  mov dl, byte ptr [ebp-08]
:00459D20 80C201                  add dl, 01
:00459D23 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D1B(U)
|
:00459D26 8B45F8                  mov eax, dword ptr [ebp-08]
:00459D29 25FF000000              and eax, 000000FF
:00459D2E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459D31 81E1FF000000            and ecx, 000000FF
:00459D37 3BC1                    cmp eax, ecx
:00459D39 0F8FD3000000            jg 00459E12
:00459D3F 8A55F8                  mov dl, byte ptr [ebp-08]
:00459D42 8855F0                  mov byte ptr [ebp-10], dl
:00459D45 8A45F4                  mov al, byte ptr [ebp-0C]
:00459D48 8845F1                  mov byte ptr [ebp-0F], al
:00459D4B 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00459D4E 51                      push ecx
:00459D4F E8BDDBFEFF              call 00447911
:00459D54 83C404                  add esp, 00000004
:00459D57 8845FC                  mov byte ptr [ebp-04], al
:00459D5A 8B55FC                  mov edx, dword ptr [ebp-04]
:00459D5D 81E2FF000000            and edx, 000000FF
:00459D63 81FAFF000000            cmp edx, 000000FF
:00459D69 0F849E000000            je 00459E0D
:00459D6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459D72 81E1FF000000            and ecx, 000000FF
:00459D78 6BC924                  imul ecx, 00000024
:00459D7B 81C108F54A00            add ecx, 004AF508
:00459D81 E84A5BFDFF              call 0042F8D0
:00459D86 25FF000000              and eax, 000000FF
:00459D8B 83F802                  cmp eax, 00000002
:00459D8E 757D                    jne 00459E0D
:00459D90 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459D93 81E1FF000000            and ecx, 000000FF
:00459D99 6BC924                  imul ecx, 00000024
:00459D9C 81C108F54A00            add ecx, 004AF508
:00459DA2 E8FF56FDFF              call 0042F4A6
:00459DA7 85C0                    test eax, eax
:00459DA9 7462                    je 00459E0D
:00459DAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459DAE 81E1FF000000            and ecx, 000000FF
:00459DB4 6BC924                  imul ecx, 00000024
:00459DB7 81C108F54A00            add ecx, 004AF508
:00459DBD E80E55FBFF              call 0040F2D0
:00459DC2 8B4D18                  mov ecx, dword ptr [ebp+18]
:00459DC5 81E1FF000000            and ecx, 000000FF
:00459DCB 3BC1                    cmp eax, ecx
:00459DCD 750E                    jne 00459DDD
:00459DCF 8B5518                  mov edx, dword ptr [ebp+18]
:00459DD2 81E2FF000000            and edx, 000000FF
:00459DD8 83FA02                  cmp edx, 00000002
:00459DDB 7530                    jne 00459E0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459DCD(C)
|
:00459DDD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459DE0 81E1FF000000            and ecx, 000000FF
:00459DE6 6BC924                  imul ecx, 00000024
:00459DE9 81C108F54A00            add ecx, 004AF508
:00459DEF E8DC58FDFF              call 0042F6D0
:00459DF4 8945EC                  mov dword ptr [ebp-14], eax
:00459DF7 6A01                    push 00000001
:00459DF9 8A4520                  mov al, byte ptr [ebp+20]
:00459DFC 50                      push eax
:00459DFD 8A4D1C                  mov cl, byte ptr [ebp+1C]
:00459E00 51                      push ecx
:00459E01 8B55EC                  mov edx, dword ptr [ebp-14]
:00459E04 52                      push edx
:00459E05 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00459E08 E892FCFFFF              call 00459A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459D69(C), :00459D8E(C), :00459DA9(C), :00459DDB(C)
|
:00459E0D E90BFFFFFF              jmp 00459D1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D39(C)
|
:00459E12 E9DCFEFFFF              jmp 00459CF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D0F(C)
|
:00459E17 8BE5                    mov esp, ebp
:00459E19 5D                      pop ebp
:00459E1A C21C00                  ret 001C


:00459E1D 55                      push ebp
:00459E1E 8BEC                    mov ebp, esp
:00459E20 51                      push ecx
:00459E21 894DFC                  mov dword ptr [ebp-04], ecx
:00459E24 8B4508                  mov eax, dword ptr [ebp+08]
:00459E27 50                      push eax
:00459E28 B9180A4B00              mov ecx, 004B0A18
:00459E2D E88E080000              call 0045A6C0
:00459E32 8BE5                    mov esp, ebp
:00459E34 5D                      pop ebp
:00459E35 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00431C82   , :00446D39   , :0045626B   , :0045702E   , :004570F4   
|
:00459E38 55                      push ebp
:00459E39 8BEC                    mov ebp, esp
:00459E3B 83EC28                  sub esp, 00000028
:00459E3E 894DD8                  mov dword ptr [ebp-28], ecx
:00459E41 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00459E44 E867D9FAFF              call 004077B0
:00459E49 6A40                    push 00000040
:00459E4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459E4E 81E1FF000000            and ecx, 000000FF
:00459E54 6BC924                  imul ecx, 00000024
:00459E57 81C108F54A00            add ecx, 004AF508
:00459E5D E88E5CFDFF              call 0042FAF0
:00459E62 85C0                    test eax, eax
:00459E64 7414                    je 00459E7A
:00459E66 B9180A4B00              mov ecx, 004B0A18
:00459E6B E8D05DFDFF              call 0042FC40
:00459E70 25FF000000              and eax, 000000FF
:00459E75 83F802                  cmp eax, 00000002
:00459E78 7505                    jne 00459E7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E64(C)
|
:00459E7A E9DF010000              jmp 0045A05E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E78(C)
|
:00459E7F B9180A4B00              mov ecx, 004B0A18
:00459E84 E8B75DFDFF              call 0042FC40
:00459E89 25FF000000              and eax, 000000FF
:00459E8E 83F803                  cmp eax, 00000003
:00459E91 7505                    jne 00459E98
:00459E93 E9C6010000              jmp 0045A05E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E91(C)
|
:00459E98 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459E9B 81E1FF000000            and ecx, 000000FF
:00459EA1 6BC924                  imul ecx, 00000024
:00459EA4 81C108F54A00            add ecx, 004AF508
:00459EAA E8215AFDFF              call 0042F8D0
:00459EAF 25FF000000              and eax, 000000FF
:00459EB4 83F802                  cmp eax, 00000002
:00459EB7 7405                    je 00459EBE
:00459EB9 E9A0010000              jmp 0045A05E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459EB7(C)
|
:00459EBE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459EC1 81E1FF000000            and ecx, 000000FF
:00459EC7 6BC924                  imul ecx, 00000024
:00459ECA 81C108F54A00            add ecx, 004AF508
:00459ED0 E8FB57FDFF              call 0042F6D0
:00459ED5 8945FC                  mov dword ptr [ebp-04], eax
:00459ED8 8B45FC                  mov eax, dword ptr [ebp-04]
:00459EDB 8945F0                  mov dword ptr [ebp-10], eax
:00459EDE C645F800                mov [ebp-08], 00
:00459EE2 EB09                    jmp 00459EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459FEF(U)
|
:00459EE4 8A4DF8                  mov cl, byte ptr [ebp-08]
:00459EE7 80C101                  add cl, 01
:00459EEA 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459EE2(U)
|
:00459EED 8B55F8                  mov edx, dword ptr [ebp-08]
:00459EF0 81E2FF000000            and edx, 000000FF
:00459EF6 83FA04                  cmp edx, 00000004
:00459EF9 0F8DF5000000            jnl 00459FF4
:00459EFF 8A45F8                  mov al, byte ptr [ebp-08]
:00459F02 50                      push eax
:00459F03 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459F06 81E1FF000000            and ecx, 000000FF
:00459F0C 6BC924                  imul ecx, 00000024
:00459F0F 81C108F54A00            add ecx, 004AF508
:00459F15 E886F4FCFF              call 004293A0
:00459F1A 50                      push eax
:00459F1B E8E8DAFEFF              call 00447A08
:00459F20 83C408                  add esp, 00000008
:00459F23 50                      push eax
:00459F24 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00459F27 E86458FDFF              call 0042F790
:00459F2C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00459F2F 81E1FF000000            and ecx, 000000FF
:00459F35 81F9FF000000            cmp ecx, 000000FF
:00459F3B 0F84AE000000            je 00459FEF
:00459F41 8D55E0                  lea edx, dword ptr [ebp-20]
:00459F44 52                      push edx
:00459F45 E8C7D9FEFF              call 00447911
:00459F4A 83C404                  add esp, 00000004
:00459F4D 8845DC                  mov byte ptr [ebp-24], al
:00459F50 8B45DC                  mov eax, dword ptr [ebp-24]
:00459F53 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00459F58 3DFF000000              cmp eax, 000000FF
:00459F5D 0F848C000000            je 00459FEF
:00459F63 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00459F66 81E1FF000000            and ecx, 000000FF
:00459F6C 6BC924                  imul ecx, 00000024
:00459F6F 81C108F54A00            add ecx, 004AF508
:00459F75 E85659FDFF              call 0042F8D0
:00459F7A 25FF000000              and eax, 000000FF
:00459F7F 83F802                  cmp eax, 00000002
:00459F82 756B                    jne 00459FEF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00459F84 6A02                    push 00000002
:00459F86 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459F89 81E1FF000000            and ecx, 000000FF
:00459F8F 6BC924                  imul ecx, 00000024
:00459F92 81C108F54A00            add ecx, 004AF508
:00459F98 E8535BFDFF              call 0042FAF0
:00459F9D 85C0                    test eax, eax
:00459F9F 754E                    jne 00459FEF
:00459FA1 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00459FA4 81E1FF000000            and ecx, 000000FF
:00459FAA 6BC924                  imul ecx, 00000024
:00459FAD 81C108F54A00            add ecx, 004AF508
:00459FB3 E81857FDFF              call 0042F6D0
:00459FB8 8945F4                  mov dword ptr [ebp-0C], eax
:00459FBB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00459FBE 51                      push ecx
:00459FBF 8B55F0                  mov edx, dword ptr [ebp-10]
:00459FC2 52                      push edx
:00459FC3 B9F8134800              mov ecx, 004813F8
:00459FC8 E843050000              call 0045A510
:00459FCD 6A00                    push 00000000
:00459FCF B9F8134800              mov ecx, 004813F8
:00459FD4 E8BA4AFBFF              call 0040EA93
:00459FD9 B9180A4B00              mov ecx, 004B0A18
:00459FDE E85D5CFDFF              call 0042FC40
:00459FE3 25FF000000              and eax, 000000FF
:00459FE8 83F802                  cmp eax, 00000002
:00459FEB 7502                    jne 00459FEF
:00459FED EB6F                    jmp 0045A05E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459F3B(C), :00459F5D(C), :00459F82(C), :00459F9F(C), :00459FEB(C)
|
:00459FEF E9F0FEFFFF              jmp 00459EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459EF9(C)
|
:00459FF4 8B45FC                  mov eax, dword ptr [ebp-04]
:00459FF7 8945E4                  mov dword ptr [ebp-1C], eax
:00459FFA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459FFD 81E1FF000000            and ecx, 000000FF
:0045A003 6BC924                  imul ecx, 00000024
:0045A006 81C108F54A00            add ecx, 004AF508
:0045A00C E88FF3FCFF              call 004293A0
:0045A011 50                      push eax
:0045A012 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0045A015 E87657FDFF              call 0042F790
:0045A01A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045A01D 81E1FF000000            and ecx, 000000FF
:0045A023 894DE8                  mov dword ptr [ebp-18], ecx
:0045A026 8B55E1                  mov edx, dword ptr [ebp-1F]
:0045A029 81E2FF000000            and edx, 000000FF
:0045A02F 8955EC                  mov dword ptr [ebp-14], edx
:0045A032 83EC0C                  sub esp, 0000000C
:0045A035 8BC4                    mov eax, esp
:0045A037 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045A03A 8908                    mov dword ptr [eax], ecx
:0045A03C 8B55E8                  mov edx, dword ptr [ebp-18]
:0045A03F 895004                  mov dword ptr [eax+04], edx
:0045A042 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045A045 894808                  mov dword ptr [eax+08], ecx
:0045A048 B9F8134800              mov ecx, 004813F8
:0045A04D E8DE040000              call 0045A530
:0045A052 6A00                    push 00000000
:0045A054 B9F8134800              mov ecx, 004813F8
:0045A059 E8354AFBFF              call 0040EA93

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459E7A(U), :00459E93(U), :00459EB9(U), :00459FED(U)
|
:0045A05E 8BE5                    mov esp, ebp
:0045A060 5D                      pop ebp
:0045A061 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040AB88   
|
:0045A064 55                      push ebp
:0045A065 8BEC                    mov ebp, esp
:0045A067 83EC28                  sub esp, 00000028
:0045A06A 894DF0                  mov dword ptr [ebp-10], ecx
:0045A06D C745FC00000000          mov [ebp-04], 00000000
:0045A074 C745F400000000          mov [ebp-0C], 00000000
:0045A07B 817D0885020000          cmp dword ptr [ebp+08], 00000285
:0045A082 7205                    jb 0045A089
:0045A084 E98F010000              jmp 0045A218

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A082(C)
|
:0045A089 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A08C 6BC970                  imul ecx, 00000070
:0045A08F 81C198224900            add ecx, 00492298
:0045A095 E8B0B10000              call 0046524A
:0045A09A 8845F8                  mov byte ptr [ebp-08], al
:0045A09D 8B45F8                  mov eax, dword ptr [ebp-08]
:0045A0A0 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045A0A5 3DFF000000              cmp eax, 000000FF
:0045A0AA 7505                    jne 0045A0B1
:0045A0AC E967010000              jmp 0045A218

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A0AA(C)
|
:0045A0B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045A0B4 81E1FF000000            and ecx, 000000FF
:0045A0BA 83F90F                  cmp ecx, 0000000F
:0045A0BD 7530                    jne 0045A0EF
:0045A0BF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045A0C2 81E1FF000000            and ecx, 000000FF
:0045A0C8 6BC924                  imul ecx, 00000024
:0045A0CB 81C108F54A00            add ecx, 004AF508
:0045A0D1 E89AA7FAFF              call 00404870
:0045A0D6 8945FC                  mov dword ptr [ebp-04], eax
:0045A0D9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A0DC 6BC970                  imul ecx, 00000070
:0045A0DF 81C198224900            add ecx, 00492298
:0045A0E5 E8F683FAFF              call 004024E0
:0045A0EA 8945F4                  mov dword ptr [ebp-0C], eax
:0045A0ED EB2E                    jmp 0045A11D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A0BD(C)
|
:0045A0EF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045A0F2 81E1FF000000            and ecx, 000000FF
:0045A0F8 6BC924                  imul ecx, 00000024
:0045A0FB 81C108F54A00            add ecx, 004AF508
:0045A101 E8AAA7FAFF              call 004048B0
:0045A106 8945FC                  mov dword ptr [ebp-04], eax
:0045A109 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A10C 6BC970                  imul ecx, 00000070
:0045A10F 81C198224900            add ecx, 00492298
:0045A115 E8F783FAFF              call 00402511
:0045A11A 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A0ED(U)
|
:0045A11D 8A5510                  mov dl, byte ptr [ebp+10]
:0045A120 8855EC                  mov byte ptr [ebp-14], dl
:0045A123 807DEC00                cmp byte ptr [ebp-14], 00
:0045A127 7411                    je 0045A13A
:0045A129 807DEC01                cmp byte ptr [ebp-14], 01
:0045A12D 7429                    je 0045A158
:0045A12F 807DEC02                cmp byte ptr [ebp-14], 02
:0045A133 7447                    je 0045A17C
:0045A135 E998000000              jmp 0045A1D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A127(C)
|
:0045A13A 8B4514                  mov eax, dword ptr [ebp+14]
:0045A13D 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0045A140 7D08                    jge 0045A14A
:0045A142 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045A145 894DE8                  mov dword ptr [ebp-18], ecx
:0045A148 EB06                    jmp 0045A150

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A140(C)
|
:0045A14A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045A14D 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A148(U)
|
:0045A150 8B45E8                  mov eax, dword ptr [ebp-18]
:0045A153 8945FC                  mov dword ptr [ebp-04], eax
:0045A156 EB7A                    jmp 0045A1D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A12D(C)
|
:0045A158 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A15B 034D14                  add ecx, dword ptr [ebp+14]
:0045A15E 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0045A161 7D0B                    jge 0045A16E
:0045A163 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A166 035514                  add edx, dword ptr [ebp+14]
:0045A169 8955E4                  mov dword ptr [ebp-1C], edx
:0045A16C EB06                    jmp 0045A174

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A161(C)
|
:0045A16E 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045A171 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A16C(U)
|
:0045A174 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045A177 894DFC                  mov dword ptr [ebp-04], ecx
:0045A17A EB56                    jmp 0045A1D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A133(C)
|
:0045A17C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A17F 2B5514                  sub edx, dword ptr [ebp+14]
:0045A182 83FA01                  cmp edx, 00000001
:0045A185 7E0B                    jle 0045A192
:0045A187 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A18A 2B4514                  sub eax, dword ptr [ebp+14]
:0045A18D 8945E0                  mov dword ptr [ebp-20], eax
:0045A190 EB07                    jmp 0045A199

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A185(C)
|
:0045A192 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A190(U)
|
:0045A199 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045A19C 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0045A19F 7D25                    jge 0045A1C6
:0045A1A1 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A1A4 2B5514                  sub edx, dword ptr [ebp+14]
:0045A1A7 83FA01                  cmp edx, 00000001
:0045A1AA 7E0B                    jle 0045A1B7
:0045A1AC 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A1AF 2B4514                  sub eax, dword ptr [ebp+14]
:0045A1B2 8945DC                  mov dword ptr [ebp-24], eax
:0045A1B5 EB07                    jmp 0045A1BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A1AA(C)
|
:0045A1B7 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A1B5(U)
|
:0045A1BE 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045A1C1 894DD8                  mov dword ptr [ebp-28], ecx
:0045A1C4 EB06                    jmp 0045A1CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A19F(C)
|
:0045A1C6 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045A1C9 8955D8                  mov dword ptr [ebp-28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A1C4(U)
|
:0045A1CC 8B45D8                  mov eax, dword ptr [ebp-28]
:0045A1CF 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A135(U), :0045A156(U), :0045A17A(U)
|
:0045A1D2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045A1D5 81E1FF000000            and ecx, 000000FF
:0045A1DB 83F90F                  cmp ecx, 0000000F
:0045A1DE 751D                    jne 0045A1FD
:0045A1E0 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A1E3 52                      push edx
:0045A1E4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045A1E7 81E1FF000000            and ecx, 000000FF
:0045A1ED 6BC924                  imul ecx, 00000024
:0045A1F0 81C108F54A00            add ecx, 004AF508
:0045A1F6 E86507FDFF              call 0042A960
:0045A1FB EB1B                    jmp 0045A218

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A1DE(C)
|
:0045A1FD 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A200 50                      push eax
:0045A201 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045A204 81E1FF000000            and ecx, 000000FF
:0045A20A 6BC924                  imul ecx, 00000024
:0045A20D 81C108F54A00            add ecx, 004AF508
:0045A213 E8A507FDFF              call 0042A9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A084(U), :0045A0AC(U), :0045A1FB(U)
|
:0045A218 8BE5                    mov esp, ebp
:0045A21A 5D                      pop ebp
:0045A21B C21000                  ret 0010



* Referenced by a CALL at Address:
|:0040DFFD   
|
:0045A21E 55                      push ebp
:0045A21F 8BEC                    mov ebp, esp
:0045A221 51                      push ecx
:0045A222 894DFC                  mov dword ptr [ebp-04], ecx
:0045A225 817D0885020000          cmp dword ptr [ebp+08], 00000285
:0045A22C 7317                    jnb 0045A245
:0045A22E 6A01                    push 00000001
:0045A230 8A450C                  mov al, byte ptr [ebp+0C]
:0045A233 50                      push eax
:0045A234 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A237 6BC970                  imul ecx, 00000070
:0045A23A 81C198224900            add ecx, 00492298
:0045A240 E8159CFAFF              call 00403E5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A22C(C)
|
:0045A245 8BE5                    mov esp, ebp
:0045A247 5D                      pop ebp
:0045A248 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040E0AE   
|
:0045A24B 55                      push ebp
:0045A24C 8BEC                    mov ebp, esp
:0045A24E 51                      push ecx
:0045A24F 894DFC                  mov dword ptr [ebp-04], ecx
:0045A252 837D0C20                cmp dword ptr [ebp+0C], 00000020
:0045A256 7602                    jbe 0045A25A
:0045A258 EB20                    jmp 0045A27A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A256(C)
|
:0045A25A 817D0885020000          cmp dword ptr [ebp+08], 00000285
:0045A261 7317                    jnb 0045A27A
:0045A263 6A00                    push 00000000
:0045A265 8A450C                  mov al, byte ptr [ebp+0C]
:0045A268 50                      push eax
:0045A269 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A26C 6BC970                  imul ecx, 00000070
:0045A26F 81C198224900            add ecx, 00492298
:0045A275 E8A49DFAFF              call 0040401E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A258(U), :0045A261(C)
|
:0045A27A 8BE5                    mov esp, ebp
:0045A27C 5D                      pop ebp
:0045A27D C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040E15F   
|
:0045A280 55                      push ebp
:0045A281 8BEC                    mov ebp, esp
:0045A283 51                      push ecx
:0045A284 894DFC                  mov dword ptr [ebp-04], ecx
:0045A287 837D0C20                cmp dword ptr [ebp+0C], 00000020
:0045A28B 7602                    jbe 0045A28F
:0045A28D EB20                    jmp 0045A2AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A28B(C)
|
:0045A28F 817D0885020000          cmp dword ptr [ebp+08], 00000285
:0045A296 7317                    jnb 0045A2AF
:0045A298 6A00                    push 00000000
:0045A29A 8A450C                  mov al, byte ptr [ebp+0C]
:0045A29D 50                      push eax
:0045A29E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A2A1 6BC970                  imul ecx, 00000070
:0045A2A4 81C198224900            add ecx, 00492298
:0045A2AA E8B89EFAFF              call 00404167

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A28D(U), :0045A296(C)
|
:0045A2AF 8BE5                    mov esp, ebp
:0045A2B1 5D                      pop ebp
:0045A2B2 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040E19B   , :0040E1A9   
|
:0045A2B5 55                      push ebp
:0045A2B6 8BEC                    mov ebp, esp
:0045A2B8 51                      push ecx
:0045A2B9 894DFC                  mov dword ptr [ebp-04], ecx
:0045A2BC 8B4508                  mov eax, dword ptr [ebp+08]
:0045A2BF 50                      push eax
:0045A2C0 B9180A4B00              mov ecx, 004B0A18
:0045A2C5 E8B6030000              call 0045A680
:0045A2CA 8BE5                    mov esp, ebp
:0045A2CC 5D                      pop ebp
:0045A2CD C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040E22F   , :0040E23F   , :0042647E   
|
:0045A2D0 55                      push ebp
:0045A2D1 8BEC                    mov ebp, esp
:0045A2D3 83EC08                  sub esp, 00000008
:0045A2D6 894DFC                  mov dword ptr [ebp-04], ecx
:0045A2D9 B9180A4B00              mov ecx, 004B0A18
:0045A2DE E8BDC7FCFF              call 00426AA0
:0045A2E3 3B4508                  cmp eax, dword ptr [ebp+08]
:0045A2E6 7502                    jne 0045A2EA
:0045A2E8 EB59                    jmp 0045A343

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A2E6(C)
|
:0045A2EA 8B4508                  mov eax, dword ptr [ebp+08]
:0045A2ED 50                      push eax
:0045A2EE B9180A4B00              mov ecx, 004B0A18
:0045A2F3 E888C4FBFF              call 00416780
:0045A2F8 6633C9                  xor cx, cx
:0045A2FB 8AC8                    mov cl, al
:0045A2FD 51                      push ecx
:0045A2FE E8BE86FBFF              call 004129C1
:0045A303 83C408                  add esp, 00000008
:0045A306 8B5508                  mov edx, dword ptr [ebp+08]
:0045A309 52                      push edx
:0045A30A B9180A4B00              mov ecx, 004B0A18
:0045A30F E88C030000              call 0045A6A0
:0045A314 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0045A318 7429                    je 0045A343
:0045A31A 837D0800                cmp dword ptr [ebp+08], 00000000
:0045A31E 7409                    je 0045A329

* Possible StringData Ref from Data Obj ->"¤FC"
                                  |
:0045A320 C745F848D94700          mov [ebp-08], 0047D948
:0045A327 EB07                    jmp 0045A330

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A31E(C)
|

* Possible StringData Ref from Data Obj ->"GFC"
                                  |
:0045A329 C745F850D94700          mov [ebp-08], 0047D950

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A327(U)
|
:0045A330 8B45F8                  mov eax, dword ptr [ebp-08]
:0045A333 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0045A334 6858D94700              push 0047D958
:0045A339 6A00                    push 00000000
:0045A33B E82CE8FCFF              call 00428B6C
:0045A340 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A2E8(U), :0045A318(C)
|
:0045A343 8BE5                    mov esp, ebp
:0045A345 5D                      pop ebp
:0045A346 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040D6C3   
|
:0045A349 55                      push ebp
:0045A34A 8BEC                    mov ebp, esp
:0045A34C 51                      push ecx
:0045A34D 894DFC                  mov dword ptr [ebp-04], ecx
:0045A350 8A4508                  mov al, byte ptr [ebp+08]
:0045A353 50                      push eax
:0045A354 B9180A4B00              mov ecx, 004B0A18
:0045A359 E842F8FDFF              call 00439BA0
:0045A35E B9A8034B00              mov ecx, 004B03A8
:0045A363 E816A4FEFF              call 0044477E
:0045A368 8BE5                    mov esp, ebp
:0045A36A 5D                      pop ebp
:0045A36B C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040E2CB   
|
:0045A36E 55                      push ebp
:0045A36F 8BEC                    mov ebp, esp
:0045A371 83EC24                  sub esp, 00000024
:0045A374 56                      push esi
:0045A375 894DE8                  mov dword ptr [ebp-18], ecx
:0045A378 C645EC00                mov [ebp-14], 00
:0045A37C C645F800                mov [ebp-08], 00
:0045A380 8A4508                  mov al, byte ptr [ebp+08]
:0045A383 8845E4                  mov byte ptr [ebp-1C], al
:0045A386 807DE400                cmp byte ptr [ebp-1C], 00
:0045A38A 740E                    je 0045A39A
:0045A38C 807DE401                cmp byte ptr [ebp-1C], 01
:0045A390 7412                    je 0045A3A4
:0045A392 807DE402                cmp byte ptr [ebp-1C], 02
:0045A396 7416                    je 0045A3AE
:0045A398 EB1E                    jmp 0045A3B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A38A(C)
|
:0045A39A C645EC1E                mov [ebp-14], 1E
:0045A39E C645F85A                mov [ebp-08], 5A
:0045A3A2 EB19                    jmp 0045A3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A390(C)
|
:0045A3A4 C645EC00                mov [ebp-14], 00
:0045A3A8 C645F81E                mov [ebp-08], 1E
:0045A3AC EB0F                    jmp 0045A3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A396(C)
|
:0045A3AE C645EC00                mov [ebp-14], 00
:0045A3B2 C645F85A                mov [ebp-08], 5A
:0045A3B6 EB05                    jmp 0045A3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A398(U)
|
:0045A3B8 E93E010000              jmp 0045A4FB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A3A2(U), :0045A3AC(U), :0045A3B6(U)
|
:0045A3BD C745F000000000          mov [ebp-10], 00000000
:0045A3C4 C745FC00000000          mov [ebp-04], 00000000
:0045A3CB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045A3CE 81E1FF000000            and ecx, 000000FF
:0045A3D4 894DF4                  mov dword ptr [ebp-0C], ecx
:0045A3D7 EB09                    jmp 0045A3E2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A40E(U), :0045A4F6(U)
|
:0045A3D9 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045A3DC 83C201                  add edx, 00000001
:0045A3DF 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A3D7(U)
|
:0045A3E2 8B45F8                  mov eax, dword ptr [ebp-08]
:0045A3E5 25FF000000              and eax, 000000FF
:0045A3EA 3945F4                  cmp dword ptr [ebp-0C], eax
:0045A3ED 0F8308010000            jnb 0045A4FB
:0045A3F3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A3F6 6BC924                  imul ecx, 00000024
:0045A3F9 81C108F54A00            add ecx, 004AF508
:0045A3FF E8CC54FDFF              call 0042F8D0
:0045A404 25FF000000              and eax, 000000FF
:0045A409 83F802                  cmp eax, 00000002
:0045A40C 7402                    je 0045A410
:0045A40E EBC9                    jmp 0045A3D9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A40C(C)
|
:0045A410 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A413 6BC924                  imul ecx, 00000024
:0045A416 81C108F54A00            add ecx, 004AF508
:0045A41C E84FF6FDFF              call 00439A70
:0045A421 8BF0                    mov esi, eax
:0045A423 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A426 6BC924                  imul ecx, 00000024
:0045A429 81C108F54A00            add ecx, 004AF508
:0045A42F E83CA4FAFF              call 00404870
:0045A434 03450C                  add eax, dword ptr [ebp+0C]
:0045A437 3BF0                    cmp esi, eax
:0045A439 7D16                    jge 0045A451
:0045A43B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A43E 6BC924                  imul ecx, 00000024
:0045A441 81C108F54A00            add ecx, 004AF508
:0045A447 E824F6FDFF              call 00439A70
:0045A44C 8945E0                  mov dword ptr [ebp-20], eax
:0045A44F EB17                    jmp 0045A468

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A439(C)
|
:0045A451 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A454 6BC924                  imul ecx, 00000024
:0045A457 81C108F54A00            add ecx, 004AF508
:0045A45D E80EA4FAFF              call 00404870
:0045A462 03450C                  add eax, dword ptr [ebp+0C]
:0045A465 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A44F(U)
|
:0045A468 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045A46B 894DF0                  mov dword ptr [ebp-10], ecx
:0045A46E 8B55F0                  mov edx, dword ptr [ebp-10]
:0045A471 52                      push edx
:0045A472 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A475 6BC924                  imul ecx, 00000024
:0045A478 81C108F54A00            add ecx, 004AF508
:0045A47E E8DD04FDFF              call 0042A960
:0045A483 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A486 6BC924                  imul ecx, 00000024
:0045A489 81C108F54A00            add ecx, 004AF508
:0045A48F E88CF6FDFF              call 00439B20
:0045A494 8BF0                    mov esi, eax
:0045A496 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A499 6BC924                  imul ecx, 00000024
:0045A49C 81C108F54A00            add ecx, 004AF508
:0045A4A2 E809A4FAFF              call 004048B0
:0045A4A7 034510                  add eax, dword ptr [ebp+10]
:0045A4AA 3BF0                    cmp esi, eax
:0045A4AC 7D16                    jge 0045A4C4
:0045A4AE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A4B1 6BC924                  imul ecx, 00000024
:0045A4B4 81C108F54A00            add ecx, 004AF508
:0045A4BA E861F6FDFF              call 00439B20
:0045A4BF 8945DC                  mov dword ptr [ebp-24], eax
:0045A4C2 EB17                    jmp 0045A4DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A4AC(C)
|
:0045A4C4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A4C7 6BC924                  imul ecx, 00000024
:0045A4CA 81C108F54A00            add ecx, 004AF508
:0045A4D0 E8DBA3FAFF              call 004048B0
:0045A4D5 034510                  add eax, dword ptr [ebp+10]
:0045A4D8 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A4C2(U)
|
:0045A4DB 8B45DC                  mov eax, dword ptr [ebp-24]
:0045A4DE 8945FC                  mov dword ptr [ebp-04], eax
:0045A4E1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045A4E4 51                      push ecx
:0045A4E5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A4E8 6BC924                  imul ecx, 00000024
:0045A4EB 81C108F54A00            add ecx, 004AF508
:0045A4F1 E8C704FDFF              call 0042A9BD
:0045A4F6 E9DEFEFFFF              jmp 0045A3D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A3B8(U), :0045A3ED(C)
|
:0045A4FB 5E                      pop esi
:0045A4FC 8BE5                    mov esp, ebp
:0045A4FE 5D                      pop ebp
:0045A4FF C20C00                  ret 000C


:0045A502 CC                      int 03
:0045A503 CC                      int 03
:0045A504 CC                      int 03
:0045A505 CC                      int 03
:0045A506 CC                      int 03
:0045A507 CC                      int 03
:0045A508 CC                      int 03
:0045A509 CC                      int 03
:0045A50A CC                      int 03
:0045A50B CC                      int 03
:0045A50C CC                      int 03
:0045A50D CC                      int 03
:0045A50E CC                      int 03
:0045A50F CC                      int 03

* Referenced by a CALL at Address:
|:00459FC8   
|
:0045A510 55                      push ebp
:0045A511 8BEC                    mov ebp, esp
:0045A513 51                      push ecx
:0045A514 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to String Resource ID=00008: ""
                                  |
:0045A517 6A08                    push 00000008
:0045A519 8D4508                  lea eax, dword ptr [ebp+08]
:0045A51C 50                      push eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045A51D 6A02                    push 00000002
:0045A51F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A522 E8BE53FBFF              call 0040F8E5
:0045A527 8BE5                    mov esp, ebp
:0045A529 5D                      pop ebp
:0045A52A C20800                  ret 0008


:0045A52D CC                      int 03
:0045A52E CC                      int 03
:0045A52F CC                      int 03

* Referenced by a CALL at Address:
|:0045A04D   
|
:0045A530 55                      push ebp
:0045A531 8BEC                    mov ebp, esp
:0045A533 51                      push ecx
:0045A534 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to String Resource ID=00012: ""
                                  |
:0045A537 6A0C                    push 0000000C
:0045A539 8D4508                  lea eax, dword ptr [ebp+08]
:0045A53C 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045A53D 6A03                    push 00000003
:0045A53F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A542 E89E53FBFF              call 0040F8E5
:0045A547 8BE5                    mov esp, ebp
:0045A549 5D                      pop ebp
:0045A54A C20C00                  ret 000C


:0045A54D CC                      int 03
:0045A54E CC                      int 03
:0045A54F CC                      int 03

* Referenced by a CALL at Address:
|:004595B7   
|
:0045A550 55                      push ebp
:0045A551 8BEC                    mov ebp, esp
:0045A553 83EC08                  sub esp, 00000008
:0045A556 894DFC                  mov dword ptr [ebp-04], ecx
:0045A559 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A55C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A55F 8B11                    mov edx, dword ptr [ecx]
:0045A561 8910                    mov dword ptr [eax], edx
:0045A563 8B4508                  mov eax, dword ptr [ebp+08]
:0045A566 83C005                  add eax, 00000005
:0045A569 50                      push eax
:0045A56A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A56D 83C105                  add ecx, 00000005
:0045A570 E81B52FDFF              call 0042F790
:0045A575 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A578 8B5508                  mov edx, dword ptr [ebp+08]
:0045A57B 8A4207                  mov al, byte ptr [edx+07]
:0045A57E 884107                  mov byte ptr [ecx+07], al
:0045A581 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A584 83C108                  add ecx, 00000008
:0045A587 51                      push ecx
:0045A588 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A58B 83C108                  add ecx, 00000008
:0045A58E E8FD51FDFF              call 0042F790
:0045A593 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A596 8B4508                  mov eax, dword ptr [ebp+08]
:0045A599 8A480B                  mov cl, byte ptr [eax+0B]
:0045A59C 884A0B                  mov byte ptr [edx+0B], cl
:0045A59F 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A5A2 8B4508                  mov eax, dword ptr [ebp+08]
:0045A5A5 8A480C                  mov cl, byte ptr [eax+0C]
:0045A5A8 884A0C                  mov byte ptr [edx+0C], cl
:0045A5AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A5AE E81D4DFBFF              call 0040F2D0
:0045A5B3 85C0                    test eax, eax
:0045A5B5 7425                    je 0045A5DC
:0045A5B7 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A5BA 8B0A                    mov ecx, dword ptr [edx]
:0045A5BC 6BC970                  imul ecx, 00000070
:0045A5BF 81C198224900            add ecx, 00492298
:0045A5C5 E826A3FAFF              call 004048F0
:0045A5CA 25FF000000              and eax, 000000FF
:0045A5CF 85C0                    test eax, eax
:0045A5D1 7509                    jne 0045A5DC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045A5D3 C745F807000000          mov [ebp-08], 00000007
:0045A5DA EB07                    jmp 0045A5E3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A5B5(C), :0045A5D1(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045A5DC C745F803000000          mov [ebp-08], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A5DA(U)
|
:0045A5E3 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A5E6 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045A5E9 88480D                  mov byte ptr [eax+0D], cl
:0045A5EC 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A5EF 8B4508                  mov eax, dword ptr [ebp+08]
:0045A5F2 8A480A                  mov cl, byte ptr [eax+0A]
:0045A5F5 884A0A                  mov byte ptr [edx+0A], cl
:0045A5F8 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A5FB 8B4508                  mov eax, dword ptr [ebp+08]
:0045A5FE 8A480E                  mov cl, byte ptr [eax+0E]
:0045A601 884A0E                  mov byte ptr [edx+0E], cl
:0045A604 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A607 8B4508                  mov eax, dword ptr [ebp+08]
:0045A60A 8B4810                  mov ecx, dword ptr [eax+10]
:0045A60D 894A10                  mov dword ptr [edx+10], ecx
:0045A610 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A613 8B4508                  mov eax, dword ptr [ebp+08]
:0045A616 8B4814                  mov ecx, dword ptr [eax+14]
:0045A619 894A14                  mov dword ptr [edx+14], ecx
:0045A61C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A61F 8B4508                  mov eax, dword ptr [ebp+08]
:0045A622 8A4818                  mov cl, byte ptr [eax+18]
:0045A625 884A18                  mov byte ptr [edx+18], cl
:0045A628 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A62B 8B4508                  mov eax, dword ptr [ebp+08]
:0045A62E 8A4819                  mov cl, byte ptr [eax+19]
:0045A631 884A19                  mov byte ptr [edx+19], cl
:0045A634 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A637 8B4508                  mov eax, dword ptr [ebp+08]
:0045A63A 8A481A                  mov cl, byte ptr [eax+1A]
:0045A63D 884A1A                  mov byte ptr [edx+1A], cl
:0045A640 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A643 8B4508                  mov eax, dword ptr [ebp+08]
:0045A646 8A481C                  mov cl, byte ptr [eax+1C]
:0045A649 884A1C                  mov byte ptr [edx+1C], cl
:0045A64C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A64F 8B4508                  mov eax, dword ptr [ebp+08]
:0045A652 8A481E                  mov cl, byte ptr [eax+1E]
:0045A655 884A1E                  mov byte ptr [edx+1E], cl
:0045A658 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A65B 8B4508                  mov eax, dword ptr [ebp+08]
:0045A65E 8B4820                  mov ecx, dword ptr [eax+20]
:0045A661 894A20                  mov dword ptr [edx+20], ecx
:0045A664 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A667 8B4508                  mov eax, dword ptr [ebp+08]
:0045A66A 8A481D                  mov cl, byte ptr [eax+1D]
:0045A66D 884A1D                  mov byte ptr [edx+1D], cl
:0045A670 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A673 8BE5                    mov esp, ebp
:0045A675 5D                      pop ebp
:0045A676 C20400                  ret 0004


:0045A679 CC                      int 03
:0045A67A CC                      int 03
:0045A67B CC                      int 03
:0045A67C CC                      int 03
:0045A67D CC                      int 03
:0045A67E CC                      int 03
:0045A67F CC                      int 03

* Referenced by a CALL at Address:
|:0045A2C5   
|
:0045A680 55                      push ebp
:0045A681 8BEC                    mov ebp, esp
:0045A683 51                      push ecx
:0045A684 894DFC                  mov dword ptr [ebp-04], ecx
:0045A687 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A68A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A68D 89484C                  mov dword ptr [eax+4C], ecx
:0045A690 8BE5                    mov esp, ebp
:0045A692 5D                      pop ebp
:0045A693 C20400                  ret 0004


:0045A696 CC                      int 03
:0045A697 CC                      int 03
:0045A698 CC                      int 03
:0045A699 CC                      int 03
:0045A69A CC                      int 03
:0045A69B CC                      int 03
:0045A69C CC                      int 03
:0045A69D CC                      int 03
:0045A69E CC                      int 03
:0045A69F CC                      int 03

* Referenced by a CALL at Address:
|:0045A30F   
|
:0045A6A0 55                      push ebp
:0045A6A1 8BEC                    mov ebp, esp
:0045A6A3 51                      push ecx
:0045A6A4 894DFC                  mov dword ptr [ebp-04], ecx
:0045A6A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A6AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A6AD 894850                  mov dword ptr [eax+50], ecx
:0045A6B0 8BE5                    mov esp, ebp
:0045A6B2 5D                      pop ebp
:0045A6B3 C20400                  ret 0004


:0045A6B6 CC                      int 03
:0045A6B7 CC                      int 03
:0045A6B8 CC                      int 03
:0045A6B9 CC                      int 03
:0045A6BA CC                      int 03
:0045A6BB CC                      int 03
:0045A6BC CC                      int 03
:0045A6BD CC                      int 03
:0045A6BE CC                      int 03
:0045A6BF CC                      int 03

* Referenced by a CALL at Address:
|:00459E2D   
|
:0045A6C0 55                      push ebp
:0045A6C1 8BEC                    mov ebp, esp
:0045A6C3 51                      push ecx
:0045A6C4 894DFC                  mov dword ptr [ebp-04], ecx
:0045A6C7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A6CA 8A4D08                  mov cl, byte ptr [ebp+08]
:0045A6CD 884824                  mov byte ptr [eax+24], cl
:0045A6D0 8BE5                    mov esp, ebp
:0045A6D2 5D                      pop ebp
:0045A6D3 C20400                  ret 0004


:0045A6D6 CC                      int 03
:0045A6D7 CC                      int 03
:0045A6D8 CC                      int 03
:0045A6D9 CC                      int 03
:0045A6DA CC                      int 03
:0045A6DB CC                      int 03
:0045A6DC CC                      int 03
:0045A6DD CC                      int 03
:0045A6DE CC                      int 03
:0045A6DF CC                      int 03
:0045A6E0 55                      push ebp
:0045A6E1 8BEC                    mov ebp, esp
:0045A6E3 E807000000              call 0045A6EF
:0045A6E8 E811000000              call 0045A6FE
:0045A6ED 5D                      pop ebp
:0045A6EE C3                      ret



* Referenced by a CALL at Address:
|:0045A6E3   
|
:0045A6EF 55                      push ebp
:0045A6F0 8BEC                    mov ebp, esp
:0045A6F2 B9980B4B00              mov ecx, 004B0B98
:0045A6F7 E823000000              call 0045A71F
:0045A6FC 5D                      pop ebp
:0045A6FD C3                      ret



* Referenced by a CALL at Address:
|:0045A6E8   
|
:0045A6FE 55                      push ebp
:0045A6FF 8BEC                    mov ebp, esp
:0045A701 6810A74500              push 0045A710
:0045A706 E8652D0100              call 0046D470
:0045A70B 83C404                  add esp, 00000004
:0045A70E 5D                      pop ebp
:0045A70F C3                      ret


:0045A710 55                      push ebp
:0045A711 8BEC                    mov ebp, esp
:0045A713 B9980B4B00              mov ecx, 004B0B98
:0045A718 E86B000000              call 0045A788
:0045A71D 5D                      pop ebp
:0045A71E C3                      ret



* Referenced by a CALL at Address:
|:0045A6F7   
|
:0045A71F 55                      push ebp
:0045A720 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045A722 6AFF                    push FFFFFFFF
:0045A724 68283C4700              push 00473C28
:0045A729 64A100000000            mov eax, dword ptr fs:[00000000]
:0045A72F 50                      push eax
:0045A730 64892500000000          mov dword ptr fs:[00000000], esp
:0045A737 51                      push ecx
:0045A738 894DF0                  mov dword ptr [ebp-10], ecx
:0045A73B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045A73E 83C104                  add ecx, 00000004
:0045A741 E86A9EFFFF              call 004545B0
:0045A746 C745FC00000000          mov [ebp-04], 00000000
:0045A74D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045A750 83C10C                  add ecx, 0000000C
:0045A753 E8589EFFFF              call 004545B0
:0045A758 C645FC01                mov [ebp-04], 01
:0045A75C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045A75F 83C114                  add ecx, 00000014
:0045A762 E8499EFFFF              call 004545B0
:0045A767 8B45F0                  mov eax, dword ptr [ebp-10]
:0045A76A C70000000000            mov dword ptr [eax], 00000000
:0045A770 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045A777 8B45F0                  mov eax, dword ptr [ebp-10]
:0045A77A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A77D 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045A784 8BE5                    mov esp, ebp
:0045A786 5D                      pop ebp
:0045A787 C3                      ret



* Referenced by a CALL at Address:
|:0045A718   
|
:0045A788 55                      push ebp
:0045A789 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045A78B 6AFF                    push FFFFFFFF
:0045A78D 684A3C4700              push 00473C4A
:0045A792 64A100000000            mov eax, dword ptr fs:[00000000]
:0045A798 50                      push eax
:0045A799 64892500000000          mov dword ptr fs:[00000000], esp
:0045A7A0 51                      push ecx
:0045A7A1 894DF0                  mov dword ptr [ebp-10], ecx
:0045A7A4 C745FC01000000          mov [ebp-04], 00000001
:0045A7AB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045A7AE 83C114                  add ecx, 00000014
:0045A7B1 E84A9EFFFF              call 00454600
:0045A7B6 C645FC00                mov [ebp-04], 00
:0045A7BA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045A7BD 83C10C                  add ecx, 0000000C
:0045A7C0 E83B9EFFFF              call 00454600
:0045A7C5 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045A7CC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045A7CF 83C104                  add ecx, 00000004
:0045A7D2 E8299EFFFF              call 00454600
:0045A7D7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A7DA 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045A7E1 8BE5                    mov esp, ebp
:0045A7E3 5D                      pop ebp
:0045A7E4 C3                      ret



* Referenced by a CALL at Address:
|:0045C4CF   
|
:0045A7E5 55                      push ebp
:0045A7E6 8BEC                    mov ebp, esp
:0045A7E8 51                      push ecx
:0045A7E9 894DFC                  mov dword ptr [ebp-04], ecx
:0045A7EC 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A7EF 833800                  cmp dword ptr [eax], 00000000
:0045A7F2 7519                    jne 0045A80D
:0045A7F4 6839010000              push 00000139
:0045A7F9 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0045A7FF 51                      push ecx
:0045A800 E827A0FBFF              call 0041482C
:0045A805 83C408                  add esp, 00000008
:0045A808 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A80B 8902                    mov dword ptr [edx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A7F2(C)
|
:0045A80D 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A810 8B08                    mov ecx, dword ptr [eax]
:0045A812 51                      push ecx
:0045A813 6A00                    push 00000000
:0045A815 6872010000              push 00000172
:0045A81A 8B5508                  mov edx, dword ptr [ebp+08]
:0045A81D 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045A81E FF15D8864B00            Call dword ptr [004B86D8]
:0045A824 8BE5                    mov esp, ebp
:0045A826 5D                      pop ebp
:0045A827 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045BDFF   
|
:0045A82A 55                      push ebp
:0045A82B 8BEC                    mov ebp, esp
:0045A82D 51                      push ecx
:0045A82E 894DFC                  mov dword ptr [ebp-04], ecx
:0045A831 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A834 8B08                    mov ecx, dword ptr [eax]
:0045A836 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045A837 FF158C844B00            Call dword ptr [004B848C]
:0045A83D 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A840 C70200000000            mov dword ptr [edx], 00000000
:0045A846 8BE5                    mov esp, ebp
:0045A848 5D                      pop ebp
:0045A849 C3                      ret



* Referenced by a CALL at Address:
|:00424C56   
|
:0045A84A 55                      push ebp
:0045A84B 8BEC                    mov ebp, esp
:0045A84D 51                      push ecx
:0045A84E 6A01                    push 00000001
:0045A850 B9C8E24A00              mov ecx, 004AE2C8
:0045A855 E8F64AFBFF              call 0040F350
:0045A85A A1380E4B00              mov eax, dword ptr [004B0E38]
:0045A85F 50                      push eax

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:0045A860 FF1528874B00            Call dword ptr [004B8728]
:0045A866 B9C8E24A00              mov ecx, 004AE2C8
:0045A86B E8404BFBFF              call 0040F3B0
:0045A870 25FF000000              and eax, 000000FF
:0045A875 85C0                    test eax, eax
:0045A877 756D                    jne 0045A8E6
:0045A879 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ˡAХsܮwuáC"
                                  |
:0045A87B 6858DE4700              push 0047DE58
:0045A880 E8E4030000              call 0045AC69
:0045A885 83C408                  add esp, 00000008
:0045A888 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045A88D 6A09                    push 00000009
:0045A88F 686C120000              push 0000126C
:0045A894 E8B686FCFF              call 00422F4F
:0045A899 83C40C                  add esp, 0000000C
:0045A89C 686C020000              push 0000026C

* Possible StringData Ref from Data Obj ->"AhsܮwuáC"
                                  |
:0045A8A1 6870DE4700              push 0047DE70
:0045A8A6 E8BE030000              call 0045AC69
:0045A8AB 83C408                  add esp, 00000008
:0045A8AE 6828020000              push 00000228
:0045A8B3 E8F2000000              call 0045A9AA
:0045A8B8 83C404                  add esp, 00000004
:0045A8BB 6828020000              push 00000228

* Possible StringData Ref from Data Obj ->"HqjHAzsڶܡH"
                                  |
:0045A8C0 6884DE4700              push 0047DE84
:0045A8C5 E89F030000              call 0045AC69
:0045A8CA 83C408                  add esp, 00000008
:0045A8CD 68FFFF0000              push 0000FFFF
:0045A8D2 6A01                    push 00000001
:0045A8D4 686C120000              push 0000126C
:0045A8D9 E87186FCFF              call 00422F4F
:0045A8DE 83C40C                  add esp, 0000000C
:0045A8E1 E983000000              jmp 0045A969

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A877(C)
|
:0045A8E6 C745FC00000000          mov [ebp-04], 00000000
:0045A8ED B9C8E24A00              mov ecx, 004AE2C8
:0045A8F2 E8B94AFBFF              call 0040F3B0
:0045A8F7 25FF000000              and eax, 000000FF
:0045A8FC 83F811                  cmp eax, 00000011
:0045A8FF 7507                    jne 0045A908
:0045A901 C745FC5D020000          mov [ebp-04], 0000025D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A8FF(C)
|
:0045A908 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045A90D 6A09                    push 00000009
:0045A90F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A912 80CD10                  or ch, 10
:0045A915 51                      push ecx
:0045A916 E83486FCFF              call 00422F4F
:0045A91B 83C40C                  add esp, 0000000C
:0045A91E E86E000000              call 0045A991
:0045A923 8B55FC                  mov edx, dword ptr [ebp-04]
:0045A926 52                      push edx

* Possible StringData Ref from Data Obj ->"ܮwuåsӡC"
                                  |
:0045A927 689CDE4700              push 0047DE9C
:0045A92C E838030000              call 0045AC69
:0045A931 83C408                  add esp, 00000008
:0045A934 6828020000              push 00000228
:0045A939 E86C000000              call 0045A9AA
:0045A93E 83C404                  add esp, 00000004
:0045A941 6828020000              push 00000228

* Possible StringData Ref from Data Obj ->"HDAzsڶܡH"
                                  |
:0045A946 68B0DE4700              push 0047DEB0
:0045A94B E819030000              call 0045AC69
:0045A950 83C408                  add esp, 00000008
:0045A953 68FFFF0000              push 0000FFFF
:0045A958 6A01                    push 00000001
:0045A95A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A95D 80CC10                  or ah, 10
:0045A960 50                      push eax
:0045A961 E8E985FCFF              call 00422F4F
:0045A966 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A8E1(U)
|
:0045A969 E84B2CFCFF              call 0041D5B9
:0045A96E 6828020000              push 00000228

* Possible StringData Ref from Data Obj ->"ZFC"
                                  |
:0045A973 68C8DE4700              push 0047DEC8
:0045A978 E8EC020000              call 0045AC69
:0045A97D 83C408                  add esp, 00000008
:0045A980 6828020000              push 00000228
:0045A985 E880020000              call 0045AC0A
:0045A98A 83C404                  add esp, 00000004
:0045A98D 8BE5                    mov esp, ebp
:0045A98F 5D                      pop ebp
:0045A990 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A91E   , :0045AA3C   , :0045AA5D   , :0045AA8B   
|
:0045A991 55                      push ebp
:0045A992 8BEC                    mov ebp, esp
:0045A994 E88278FCFF              call 0042221B
:0045A999 E89484FBFF              call 00412E32
:0045A99E E8DC78FCFF              call 0042227F
:0045A9A3 E8A584FBFF              call 00412E4D
:0045A9A8 5D                      pop ebp
:0045A9A9 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A8B3   , :0045A939   , :0045ACFD   , :0045AD7B   , :0045DDB7   
|:0045DE35   
|
:0045A9AA 55                      push ebp
:0045A9AB 8BEC                    mov ebp, esp
:0045A9AD E8B0010000              call 0045AB62
:0045A9B2 85C0                    test eax, eax
:0045A9B4 7434                    je 0045A9EA
:0045A9B6 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045A9B8 6A03                    push 00000003
:0045A9BA 6A00                    push 00000000

* Possible Reference to String Resource ID=00015: ""
                                  |
:0045A9BC 6A0F                    push 0000000F
:0045A9BE 6A37                    push 00000037
:0045A9C0 668B4508                mov ax, word ptr [ebp+08]
:0045A9C4 50                      push eax
:0045A9C5 E82A8AFCFF              call 004233F4
:0045A9CA 83C418                  add esp, 00000018

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045A9CD 6A02                    push 00000002
:0045A9CF 6A25                    push 00000025
:0045A9D1 6A37                    push 00000037
:0045A9D3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A9D6 81E1FFFF0000            and ecx, 0000FFFF
:0045A9DC 80CD10                  or ch, 10
:0045A9DF 51                      push ecx
:0045A9E0 E8698BFCFF              call 0042354E
:0045A9E5 83C410                  add esp, 00000010
:0045A9E8 EB31                    jmp 0045AA1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A9B4(C)
|
:0045A9EA 6A00                    push 00000000
:0045A9EC 6A01                    push 00000001
:0045A9EE 6A00                    push 00000000
:0045A9F0 6A5A                    push 0000005A
:0045A9F2 6A37                    push 00000037
:0045A9F4 668B5508                mov dx, word ptr [ebp+08]
:0045A9F8 52                      push edx
:0045A9F9 E8F689FCFF              call 004233F4
:0045A9FE 83C418                  add esp, 00000018
:0045AA01 6A00                    push 00000000
:0045AA03 6A46                    push 00000046
:0045AA05 6A37                    push 00000037
:0045AA07 8B4508                  mov eax, dword ptr [ebp+08]
:0045AA0A 25FFFF0000              and eax, 0000FFFF
:0045AA0F 80CC10                  or ah, 10
:0045AA12 50                      push eax
:0045AA13 E8368BFCFF              call 0042354E
:0045AA18 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A9E8(U)
|
:0045AA1B E844000000              call 0045AA64
:0045AA20 68FFFF0000              push 0000FFFF
:0045AA25 6A01                    push 00000001
:0045AA27 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AA2A 81E1FFFF0000            and ecx, 0000FFFF
:0045AA30 80CD10                  or ch, 10
:0045AA33 51                      push ecx
:0045AA34 E81685FCFF              call 00422F4F
:0045AA39 83C40C                  add esp, 0000000C
:0045AA3C E850FFFFFF              call 0045A991
:0045AA41 68FFFF0000              push 0000FFFF

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045AA46 6A0A                    push 0000000A
:0045AA48 8B5508                  mov edx, dword ptr [ebp+08]
:0045AA4B 81E2FFFF0000            and edx, 0000FFFF
:0045AA51 80CE10                  or dh, 10
:0045AA54 52                      push edx
:0045AA55 E8F584FCFF              call 00422F4F
:0045AA5A 83C40C                  add esp, 0000000C
:0045AA5D E82FFFFFFF              call 0045A991
:0045AA62 5D                      pop ebp
:0045AA63 C3                      ret



* Referenced by a CALL at Addresses:
|:0045AA1B   , :0045AC4D   
|
:0045AA64 55                      push ebp
:0045AA65 8BEC                    mov ebp, esp
:0045AA67 51                      push ecx
:0045AA68 C745FC00000000          mov [ebp-04], 00000000
:0045AA6F EB09                    jmp 0045AA7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AA90(U)
|
:0045AA71 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AA74 83C001                  add eax, 00000001
:0045AA77 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AA6F(U)
|
:0045AA7A 837DFC32                cmp dword ptr [ebp-04], 00000032
:0045AA7E 7D12                    jge 0045AA92
:0045AA80 E811000000              call 0045AA96
:0045AA85 85C0                    test eax, eax
:0045AA87 7402                    je 0045AA8B
:0045AA89 EB07                    jmp 0045AA92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AA87(C)
|
:0045AA8B E801FFFFFF              call 0045A991
:0045AA90 EBDF                    jmp 0045AA71

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045AA7E(C), :0045AA89(U)
|
:0045AA92 8BE5                    mov esp, ebp
:0045AA94 5D                      pop ebp
:0045AA95 C3                      ret



* Referenced by a CALL at Address:
|:0045AA80   
|
:0045AA96 55                      push ebp
:0045AA97 8BEC                    mov ebp, esp
:0045AA99 83EC0C                  sub esp, 0000000C
:0045AA9C 6A00                    push 00000000
:0045AA9E E81F65FCFF              call 00420FC2
:0045AAA3 83C404                  add esp, 00000004
:0045AAA6 8945FC                  mov dword ptr [ebp-04], eax
:0045AAA9 66C745F80000            mov [ebp-08], 0000
:0045AAAF EB15                    jmp 0045AAC6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045AB0E(U), :0045AB57(U)
|
:0045AAB1 668B45F8                mov ax, word ptr [ebp-08]
:0045AAB5 66050100                add ax, 0001
:0045AAB9 668945F8                mov word ptr [ebp-08], ax
:0045AABD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AAC0 83C140                  add ecx, 00000040
:0045AAC3 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AAAF(U)
|
:0045AAC6 8B55F8                  mov edx, dword ptr [ebp-08]
:0045AAC9 81E2FFFF0000            and edx, 0000FFFF
:0045AACF 81FA80000000            cmp edx, 00000080
:0045AAD5 0F8D81000000            jnl 0045AB5C
:0045AADB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AADE E80D49FBFF              call 0040F3F0
:0045AAE3 668945F4                mov word ptr [ebp-0C], ax
:0045AAE7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045AAEA 25FFFF0000              and eax, 0000FFFF
:0045AAEF 2500800000              and eax, 00008000
:0045AAF4 85C0                    test eax, eax
:0045AAF6 7416                    je 0045AB0E
:0045AAF8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045AAFB 81E1FFFF0000            and ecx, 0000FFFF
:0045AB01 33D2                    xor edx, edx
:0045AB03 668B15E8A84800          mov dx, word ptr [0048A8E8]
:0045AB0A 3BCA                    cmp ecx, edx
:0045AB0C 7502                    jne 0045AB10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AAF6(C)
|
:0045AB0E EBA1                    jmp 0045AAB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB0C(C)
|
:0045AB10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AB13 E8F848FBFF              call 0040F410
:0045AB18 25FFFF0000              and eax, 0000FFFF
:0045AB1D 83F802                  cmp eax, 00000002
:0045AB20 7529                    jne 0045AB4B
:0045AB22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AB25 E88396FCFF              call 004241AD
:0045AB2A 25FFFF0000              and eax, 0000FFFF
:0045AB2F 3DFFFF0000              cmp eax, 0000FFFF
:0045AB34 7513                    jne 0045AB49
:0045AB36 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AB39 50                      push eax
:0045AB3A E88990FCFF              call 00423BC8
:0045AB3F 83C404                  add esp, 00000004
:0045AB42 B801000000              mov eax, 00000001
:0045AB47 EB15                    jmp 0045AB5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB34(C)
|
:0045AB49 EB0C                    jmp 0045AB57

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB20(C)
|
:0045AB4B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AB4E 51                      push ecx
:0045AB4F E87490FCFF              call 00423BC8
:0045AB54 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB49(U)
|
:0045AB57 E955FFFFFF              jmp 0045AAB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AAD5(C)
|
:0045AB5C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB47(U)
|
:0045AB5E 8BE5                    mov esp, ebp
:0045AB60 5D                      pop ebp
:0045AB61 C3                      ret



* Referenced by a CALL at Address:
|:0045A9AD   
|
:0045AB62 55                      push ebp
:0045AB63 8BEC                    mov ebp, esp
:0045AB65 83EC08                  sub esp, 00000008
:0045AB68 B9C8E24A00              mov ecx, 004AE2C8
:0045AB6D E83E48FBFF              call 0040F3B0
:0045AB72 8845FC                  mov byte ptr [ebp-04], al
:0045AB75 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AB78 25FF000000              and eax, 000000FF
:0045AB7D 8945F8                  mov dword ptr [ebp-08], eax
:0045AB80 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045AB83 83E907                  sub ecx, 00000007
:0045AB86 894DF8                  mov dword ptr [ebp-08], ecx
:0045AB89 837DF829                cmp dword ptr [ebp-08], 00000029
:0045AB8D 772F                    ja 0045ABBE
:0045AB8F 8B45F8                  mov eax, dword ptr [ebp-08]
:0045AB92 33D2                    xor edx, edx
:0045AB94 8A90E0AB4500            mov dl, byte ptr [eax+0045ABE0]
:0045AB9A FF2495C4AB4500          jmp dword ptr [4*edx+0045ABC4]
:0045ABA1 B801000000              mov eax, 00000001
:0045ABA6 EB18                    jmp 0045ABC0
:0045ABA8 6855020000              push 00000255
:0045ABAD B9F8134800              mov ecx, 004813F8
:0045ABB2 E8A542FBFF              call 0040EE5C
:0045ABB7 F7D8                    neg eax
:0045ABB9 1BC0                    sbb eax, eax
:0045ABBB 40                      inc eax
:0045ABBC EB02                    jmp 0045ABC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB8D(C)
|
:0045ABBE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045ABA6(U), :0045ABBC(U)
|
:0045ABC0 8BE5                    mov esp, ebp
:0045ABC2 5D                      pop ebp
:0045ABC3 C3                      ret



:0045ABC4 A1AB4500                DWORD 0045ABA1
:0045ABC8 A1AB4500                DWORD 0045ABA1
:0045ABCC A8AB4500                DWORD 0045ABA8
:0045ABD0 A1AB4500                DWORD 0045ABA1
:0045ABD4 A1AB4500                DWORD 0045ABA1
:0045ABD8 A1AB4500                DWORD 0045ABA1
:0045ABDC BEAB4500                DWORD 0045ABBE


:0045ABE0 0006                    add byte ptr [esi], al
:0045ABE2 0101                    add dword ptr [ecx], eax
:0045ABE4 06                      push es
:0045ABE5 06                      push es
:0045ABE6 06                      push es
:0045ABE7 06                      push es
:0045ABE8 06                      push es
:0045ABE9 06                      push es
:0045ABEA 06                      push es
:0045ABEB 0203                    add al, byte ptr [ebx]
:0045ABED 0306                    add eax, dword ptr [esi]
:0045ABEF 06                      push es
:0045ABF0 06                      push es
:0045ABF1 06                      push es
:0045ABF2 06                      push es
:0045ABF3 06                      push es
:0045ABF4 0404                    add al, 04
:0045ABF6 06                      push es
:0045ABF7 06                      push es
:0045ABF8 06                      push es
:0045ABF9 06                      push es
:0045ABFA 06                      push es
:0045ABFB 06                      push es
:0045ABFC 06                      push es
:0045ABFD 06                      push es
:0045ABFE 06                      push es
:0045ABFF 06                      push es
:0045AC00 06                      push es
:0045AC01 06                      push es
:0045AC02 06                      push es
:0045AC03 06                      push es
:0045AC04 06                      push es
:0045AC05 06                      push es
:0045AC06 06                      push es
:0045AC07 06                      push es
:0045AC08 06                      push es
:0045AC09 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:0045A985   , :0045ADE2   , :0045DE9F   
|
:0045AC0A 55                      push ebp
:0045AC0B 8BEC                    mov ebp, esp
:0045AC0D E850FFFFFF              call 0045AB62
:0045AC12 85C0                    test eax, eax
:0045AC14 741C                    je 0045AC32
:0045AC16 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045AC18 6A0A                    push 0000000A
:0045AC1A 6A37                    push 00000037
:0045AC1C 8B4508                  mov eax, dword ptr [ebp+08]
:0045AC1F 25FFFF0000              and eax, 0000FFFF
:0045AC24 80CC10                  or ah, 10
:0045AC27 50                      push eax
:0045AC28 E82189FCFF              call 0042354E
:0045AC2D 83C410                  add esp, 00000010
:0045AC30 EB1B                    jmp 0045AC4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AC14(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045AC32 6A02                    push 00000002
:0045AC34 6A62                    push 00000062
:0045AC36 6A37                    push 00000037
:0045AC38 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AC3B 81E1FFFF0000            and ecx, 0000FFFF
:0045AC41 80CD10                  or ch, 10
:0045AC44 51                      push ecx
:0045AC45 E80489FCFF              call 0042354E
:0045AC4A 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AC30(U)
|
:0045AC4D E812FEFFFF              call 0045AA64
:0045AC52 8B5508                  mov edx, dword ptr [ebp+08]
:0045AC55 81E2FFFF0000            and edx, 0000FFFF
:0045AC5B 80CE10                  or dh, 10
:0045AC5E 52                      push edx
:0045AC5F E88682FCFF              call 00422EEA
:0045AC64 83C404                  add esp, 00000004
:0045AC67 5D                      pop ebp
:0045AC68 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A880   , :0045A8A6   , :0045A8C5   , :0045A92C   , :0045A94B   
|:0045A978   , :0045ACCA   , :0045ACF0   , :0045AD0F   , :0045AD6E   
|:0045AD8D   , :0045ADD5   , :0045DD84   , :0045DDAA   , :0045DDC9   
|:0045DE28   , :0045DE47   , :0045DE92   
|
:0045AC69 55                      push ebp
:0045AC6A 8BEC                    mov ebp, esp
:0045AC6C A1380E4B00              mov eax, dword ptr [004B0E38]
:0045AC71 50                      push eax

* Reference To: USER32.SetCapture, Ord:01E3h
                                  |
:0045AC72 FF1548874B00            Call dword ptr [004B8748]
:0045AC78 6A00                    push 00000000
:0045AC7A 6A00                    push 00000000
:0045AC7C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045AC7F 51                      push ecx
:0045AC80 8B5508                  mov edx, dword ptr [ebp+08]
:0045AC83 52                      push edx
:0045AC84 E850C5FCFF              call 004271D9
:0045AC89 83C410                  add esp, 00000010

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:0045AC8C FF1554874B00            Call dword ptr [004B8754]
:0045AC92 5D                      pop ebp
:0045AC93 C3                      ret



* Referenced by a CALL at Address:
|:00424C5D   
|
:0045AC94 55                      push ebp
:0045AC95 8BEC                    mov ebp, esp
:0045AC97 51                      push ecx
:0045AC98 6A01                    push 00000001
:0045AC9A B9C8E24A00              mov ecx, 004AE2C8
:0045AC9F E8AC46FBFF              call 0040F350
:0045ACA4 A1380E4B00              mov eax, dword ptr [004B0E38]
:0045ACA9 50                      push eax

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:0045ACAA FF1528874B00            Call dword ptr [004B8728]
:0045ACB0 B9C8E24A00              mov ecx, 004AE2C8
:0045ACB5 E8F646FBFF              call 0040F3B0
:0045ACBA 25FF000000              and eax, 000000FF
:0045ACBF 85C0                    test eax, eax
:0045ACC1 756A                    jne 0045AD2D
:0045ACC3 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ˡAsӤHܡH"
                                  |
:0045ACC5 68D4DE4700              push 0047DED4
:0045ACCA E89AFFFFFF              call 0045AC69
:0045ACCF 83C408                  add esp, 00000008
:0045ACD2 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045ACD7 6A09                    push 00000009
:0045ACD9 686C120000              push 0000126C
:0045ACDE E86C82FCFF              call 00422F4F
:0045ACE3 83C40C                  add esp, 0000000C
:0045ACE6 686C020000              push 0000026C

* Possible StringData Ref from Data Obj ->"AHhsӤHC"
                                  |
:0045ACEB 68E8DE4700              push 0047DEE8
:0045ACF0 E874FFFFFF              call 0045AC69
:0045ACF5 83C408                  add esp, 00000008
:0045ACF8 6853020000              push 00000253
:0045ACFD E8A8FCFFFF              call 0045A9AA
:0045AD02 83C404                  add esp, 00000004
:0045AD05 6853020000              push 00000253

* Possible StringData Ref from Data Obj ->"HqjHAh±zӡC"
                                  |
:0045AD0A 68FCDE4700              push 0047DEFC
:0045AD0F E855FFFFFF              call 0045AC69
:0045AD14 83C408                  add esp, 00000008
:0045AD17 68FFFF0000              push 0000FFFF
:0045AD1C 6A01                    push 00000001
:0045AD1E 686C120000              push 0000126C
:0045AD23 E82782FCFF              call 00422F4F
:0045AD28 83C40C                  add esp, 0000000C
:0045AD2B EB7E                    jmp 0045ADAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ACC1(C)
|
:0045AD2D C745FC00000000          mov [ebp-04], 00000000
:0045AD34 B9C8E24A00              mov ecx, 004AE2C8
:0045AD39 E87246FBFF              call 0040F3B0
:0045AD3E 25FF000000              and eax, 000000FF
:0045AD43 83F811                  cmp eax, 00000011
:0045AD46 7507                    jne 0045AD4F
:0045AD48 C745FC5D020000          mov [ebp-04], 0000025D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AD46(C)
|
:0045AD4F 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045AD54 6A09                    push 00000009
:0045AD56 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AD59 80CD10                  or ch, 10
:0045AD5C 51                      push ecx
:0045AD5D E8ED81FCFF              call 00422F4F
:0045AD62 83C40C                  add esp, 0000000C
:0045AD65 8B55FC                  mov edx, dword ptr [ebp-04]
:0045AD68 52                      push edx

* Possible StringData Ref from Data Obj ->"sӤHC"
                                  |
:0045AD69 6814DF4700              push 0047DF14
:0045AD6E E8F6FEFFFF              call 0045AC69
:0045AD73 83C408                  add esp, 00000008
:0045AD76 6853020000              push 00000253
:0045AD7B E82AFCFFFF              call 0045A9AA
:0045AD80 83C404                  add esp, 00000004
:0045AD83 6853020000              push 00000253

* Possible StringData Ref from Data Obj ->"HjHAh±zӡC"
                                  |
:0045AD88 6820DF4700              push 0047DF20
:0045AD8D E8D7FEFFFF              call 0045AC69
:0045AD92 83C408                  add esp, 00000008
:0045AD95 68FFFF0000              push 0000FFFF
:0045AD9A 6A01                    push 00000001
:0045AD9C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AD9F 80CC10                  or ah, 10
:0045ADA2 50                      push eax
:0045ADA3 E8A781FCFF              call 00422F4F
:0045ADA8 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AD2B(U)
|
:0045ADAB 6A00                    push 00000000
:0045ADAD 68CDDD4100              push 0041DDCD
:0045ADB2 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045ADB8 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED 
                                  |
:0045ADB9 68ED000000              push 000000ED
:0045ADBE 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0045ADC4 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045ADC5 FF1520874B00            Call dword ptr [004B8720]
:0045ADCB 6853020000              push 00000253

* Possible StringData Ref from Data Obj ->"hӡC"
                                  |
:0045ADD0 6838DF4700              push 0047DF38
:0045ADD5 E88FFEFFFF              call 0045AC69
:0045ADDA 83C408                  add esp, 00000008
:0045ADDD 6853020000              push 00000253
:0045ADE2 E823FEFFFF              call 0045AC0A
:0045ADE7 83C404                  add esp, 00000004
:0045ADEA 8BE5                    mov esp, ebp
:0045ADEC 5D                      pop ebp
:0045ADED C3                      ret



* Referenced by a CALL at Addresses:
|:00418945   , :0041B395   , :0041CF8A   , :0041DFCE   , :00453261   
|:0045B911   , :0045BE23   , :0045DFAE   , :00467351   , :00468158   
|
:0045ADEE 55                      push ebp
:0045ADEF 8BEC                    mov ebp, esp
:0045ADF1 83EC40                  sub esp, 00000040
:0045ADF4 8D45C0                  lea eax, dword ptr [ebp-40]
:0045ADF7 50                      push eax
:0045ADF8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045ADFB 51                      push ecx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:0045ADFC FF15D0864B00            Call dword ptr [004B86D0]
:0045AE02 8B55C0                  mov edx, dword ptr [ebp-40]
:0045AE05 52                      push edx
:0045AE06 8B4508                  mov eax, dword ptr [ebp+08]
:0045AE09 50                      push eax
:0045AE0A E815000000              call 0045AE24
:0045AE0F 83C408                  add esp, 00000008
:0045AE12 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0045AE15 51                      push ecx
:0045AE16 8B5508                  mov edx, dword ptr [ebp+08]
:0045AE19 52                      push edx

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:0045AE1A FF15D4864B00            Call dword ptr [004B86D4]
:0045AE20 8BE5                    mov esp, ebp
:0045AE22 5D                      pop ebp
:0045AE23 C3                      ret



* Referenced by a CALL at Addresses:
|:0045AE0A   , :0045B506   
|
:0045AE24 55                      push ebp
:0045AE25 8BEC                    mov ebp, esp
:0045AE27 83EC20                  sub esp, 00000020
:0045AE2A 6842010000              push 00000142
:0045AE2F B910584800              mov ecx, 00485810
:0045AE34 E82798FFFF              call 00454660
:0045AE39 50                      push eax
:0045AE3A E8ED99FBFF              call 0041482C
:0045AE3F 83C408                  add esp, 00000008
:0045AE42 8945E4                  mov dword ptr [ebp-1C], eax
:0045AE45 8B450C                  mov eax, dword ptr [ebp+0C]
:0045AE48 50                      push eax

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:0045AE49 FF15A0844B00            Call dword ptr [004B84A0]
:0045AE4F 8945FC                  mov dword ptr [ebp-04], eax
:0045AE52 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045AE55 51                      push ecx
:0045AE56 8B55FC                  mov edx, dword ptr [ebp-04]
:0045AE59 52                      push edx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0045AE5A FF159C844B00            Call dword ptr [004B849C]
:0045AE60 8D45EC                  lea eax, dword ptr [ebp-14]
:0045AE63 50                      push eax
:0045AE64 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AE67 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045AE68 FF15C8864B00            Call dword ptr [004B86C8]
:0045AE6E C745E800000000          mov [ebp-18], 00000000
:0045AE75 EB09                    jmp 0045AE80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AEC7(U)
|
:0045AE77 8B55E8                  mov edx, dword ptr [ebp-18]
:0045AE7A 83C240                  add edx, 00000040
:0045AE7D 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AE75(U)
|
:0045AE80 8B45E8                  mov eax, dword ptr [ebp-18]
:0045AE83 3B45F8                  cmp eax, dword ptr [ebp-08]
:0045AE86 7D41                    jge 0045AEC9
:0045AE88 C745E000000000          mov [ebp-20], 00000000
:0045AE8F EB09                    jmp 0045AE9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AEC5(U)
|
:0045AE91 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045AE94 83C140                  add ecx, 00000040
:0045AE97 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AE8F(U)
|
:0045AE9A 8B55E0                  mov edx, dword ptr [ebp-20]
:0045AE9D 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0045AEA0 7D25                    jge 0045AEC7
:0045AEA2 682000CC00              push 00CC0020
:0045AEA7 6A00                    push 00000000
:0045AEA9 6A00                    push 00000000
:0045AEAB 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AEAE 50                      push eax
:0045AEAF 6A40                    push 00000040
:0045AEB1 6A40                    push 00000040
:0045AEB3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045AEB6 51                      push ecx
:0045AEB7 8B55E0                  mov edx, dword ptr [ebp-20]
:0045AEBA 52                      push edx
:0045AEBB 8B450C                  mov eax, dword ptr [ebp+0C]
:0045AEBE 50                      push eax

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:0045AEBF FF1598844B00            Call dword ptr [004B8498]
:0045AEC5 EBCA                    jmp 0045AE91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AEA0(C)
|
:0045AEC7 EBAE                    jmp 0045AE77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AE86(C)
|
:0045AEC9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AECC 51                      push ecx

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:0045AECD FF15E4844B00            Call dword ptr [004B84E4]
:0045AED3 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045AED6 52                      push edx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045AED7 FF158C844B00            Call dword ptr [004B848C]
:0045AEDD 8BE5                    mov esp, ebp
:0045AEDF 5D                      pop ebp
:0045AEE0 C3                      ret



* Referenced by a CALL at Addresses:
|:0040DF2B   , :0045C7C0   , :0045C7F8   
|
:0045AEE1 55                      push ebp
:0045AEE2 8BEC                    mov ebp, esp
:0045AEE4 83EC0C                  sub esp, 0000000C
:0045AEE7 C645F800                mov [ebp-08], 00
:0045AEEB C745FC00000000          mov [ebp-04], 00000000
:0045AEF2 EB09                    jmp 0045AEFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AF19(U)
|
:0045AEF4 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AEF7 83C001                  add eax, 00000001
:0045AEFA 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AEF2(U)
|
:0045AEFD 837DFC08                cmp dword ptr [ebp-04], 00000008
:0045AF01 7D18                    jge 0045AF1B
:0045AF03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AF06 51                      push ecx
:0045AF07 B9C8E24A00              mov ecx, 004AE2C8
:0045AF0C E82FC8FAFF              call 00407740
:0045AF11 8A55F8                  mov dl, byte ptr [ebp-08]
:0045AF14 02D0                    add dl, al
:0045AF16 8855F8                  mov byte ptr [ebp-08], dl
:0045AF19 EBD9                    jmp 0045AEF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AF01(C)
|
:0045AF1B 8B45F8                  mov eax, dword ptr [ebp-08]
:0045AF1E 25FF000000              and eax, 000000FF
:0045AF23 6BC005                  imul eax, 00000005

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045AF26 3DFF000000              cmp eax, 000000FF
:0045AF2B 7D11                    jge 0045AF3E
:0045AF2D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045AF30 81E1FF000000            and ecx, 000000FF
:0045AF36 6BC905                  imul ecx, 00000005
:0045AF39 894DF4                  mov dword ptr [ebp-0C], ecx
:0045AF3C EB07                    jmp 0045AF45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AF2B(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045AF3E C745F4FF000000          mov [ebp-0C], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AF3C(U)
|
:0045AF45 8A45F4                  mov al, byte ptr [ebp-0C]
:0045AF48 8BE5                    mov esp, ebp
:0045AF4A 5D                      pop ebp
:0045AF4B C3                      ret


:0045AF4C 55                      push ebp
:0045AF4D 8BEC                    mov ebp, esp
:0045AF4F 83EC20                  sub esp, 00000020

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045AF52 6A02                    push 00000002
:0045AF54 8B4514                  mov eax, dword ptr [ebp+14]
:0045AF57 25FFFF0000              and eax, 0000FFFF
:0045AF5C 50                      push eax
:0045AF5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AF60 51                      push ecx

* Reference To: KERNEL32.FindResourceA, Ord:0089h
                                  |
:0045AF61 FF1524854B00            Call dword ptr [004B8524]
:0045AF67 50                      push eax
:0045AF68 8B5508                  mov edx, dword ptr [ebp+08]
:0045AF6B 52                      push edx

* Reference To: KERNEL32.LoadResource, Ord:0195h
                                  |
:0045AF6C FF1528854B00            Call dword ptr [004B8528]
:0045AF72 8945E4                  mov dword ptr [ebp-1C], eax
:0045AF75 8B45E4                  mov eax, dword ptr [ebp-1C]
:0045AF78 50                      push eax

* Reference To: KERNEL32.LockResource, Ord:01A3h
                                  |
:0045AF79 FF152C854B00            Call dword ptr [004B852C]
:0045AF7F 8945E8                  mov dword ptr [ebp-18], eax
:0045AF82 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045AF85 8B5120                  mov edx, dword ptr [ecx+20]
:0045AF88 8955E0                  mov dword ptr [ebp-20], edx
:0045AF8B 837DE000                cmp dword ptr [ebp-20], 00000000
:0045AF8F 7507                    jne 0045AF98
:0045AF91 C745E000010000          mov [ebp-20], 00000100

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AF8F(C)
|
:0045AF98 8B45E8                  mov eax, dword ptr [ebp-18]
:0045AF9B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045AF9E 0308                    add ecx, dword ptr [eax]
:0045AFA0 8B55E0                  mov edx, dword ptr [ebp-20]
:0045AFA3 8D0491                  lea eax, dword ptr [ecx+4*edx]
:0045AFA6 8945EC                  mov dword ptr [ebp-14], eax
:0045AFA9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0045AFAC 51                      push ecx
:0045AFAD 8B550C                  mov edx, dword ptr [ebp+0C]
:0045AFB0 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045AFB1 FF15C8864B00            Call dword ptr [004B86C8]
:0045AFB7 682000CC00              push 00CC0020
:0045AFBC 6A00                    push 00000000
:0045AFBE 8B45E8                  mov eax, dword ptr [ebp-18]
:0045AFC1 50                      push eax
:0045AFC2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045AFC5 51                      push ecx
:0045AFC6 8B551C                  mov edx, dword ptr [ebp+1C]
:0045AFC9 52                      push edx
:0045AFCA 8B4518                  mov eax, dword ptr [ebp+18]
:0045AFCD 50                      push eax
:0045AFCE 6A00                    push 00000000
:0045AFD0 6A00                    push 00000000
:0045AFD2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AFD5 51                      push ecx
:0045AFD6 8B55F8                  mov edx, dword ptr [ebp-08]
:0045AFD9 52                      push edx
:0045AFDA 6A00                    push 00000000
:0045AFDC 6A00                    push 00000000
:0045AFDE 8B4510                  mov eax, dword ptr [ebp+10]
:0045AFE1 50                      push eax

* Reference To: GDI32.StretchDIBits, Ord:017Fh
                                  |
:0045AFE2 FF15DC844B00            Call dword ptr [004B84DC]
:0045AFE8 8BE5                    mov esp, ebp
:0045AFEA 5D                      pop ebp
:0045AFEB C3                      ret


:0045AFEC 55                      push ebp
:0045AFED 8BEC                    mov ebp, esp
:0045AFEF 83EC0C                  sub esp, 0000000C
:0045AFF2 8B450C                  mov eax, dword ptr [ebp+0C]
:0045AFF5 8945F8                  mov dword ptr [ebp-08], eax
:0045AFF8 837DF80F                cmp dword ptr [ebp-08], 0000000F
:0045AFFC 7719                    ja 0045B017
:0045AFFE 837DF80F                cmp dword ptr [ebp-08], 0000000F
:0045B002 0F84EA010000            je 0045B1F2
:0045B008 837DF802                cmp dword ptr [ebp-08], 00000002
:0045B00C 0F84CB010000            je 0045B1DD
:0045B012 E904020000              jmp 0045B21B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AFFC(C)
|
:0045B017 817DF810010000          cmp dword ptr [ebp-08], 00000110
:0045B01E 7718                    ja 0045B038
:0045B020 817DF810010000          cmp dword ptr [ebp-08], 00000110
:0045B027 743A                    je 0045B063
:0045B029 837DF810                cmp dword ptr [ebp-08], 00000010
:0045B02D 0F849C010000            je 0045B1CF
:0045B033 E9E3010000              jmp 0045B21B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B01E(C)
|
:0045B038 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045B03B 81E913010000            sub ecx, 00000113
:0045B041 894DF8                  mov dword ptr [ebp-08], ecx
:0045B044 817DF8F1000000          cmp dword ptr [ebp-08], 000000F1
:0045B04B 0F87CA010000            ja 0045B21B
:0045B051 8B45F8                  mov eax, dword ptr [ebp-08]
:0045B054 33D2                    xor edx, edx
:0045B056 8A9037B24500            mov dl, byte ptr [eax+0045B237]
:0045B05C FF249523B24500          jmp dword ptr [4*edx+0045B223]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B027(C)
|
:0045B063 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045B066 890DB80B4B00            mov dword ptr [004B0BB8], ecx
:0045B06C 8B15B80B4B00            mov edx, dword ptr [004B0BB8]
:0045B072 8B02                    mov eax, dword ptr [edx]
:0045B074 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B1, ""
                                  |
:0045B075 68B1050000              push 000005B1
:0045B07A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B07D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B07E FF15AC864B00            Call dword ptr [004B86AC]
:0045B084 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B085 FF15B0864B00            Call dword ptr [004B86B0]
:0045B08B 8B15B80B4B00            mov edx, dword ptr [004B0BB8]
:0045B091 8B4204                  mov eax, dword ptr [edx+04]
:0045B094 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B3, ""
                                  |
:0045B095 68B3050000              push 000005B3
:0045B09A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B09D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B09E FF15AC864B00            Call dword ptr [004B86AC]
:0045B0A4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B0A5 FF15B0864B00            Call dword ptr [004B86B0]
:0045B0AB 8B15B80B4B00            mov edx, dword ptr [004B0BB8]
:0045B0B1 8B4208                  mov eax, dword ptr [edx+08]
:0045B0B4 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B4, "1"
                                  |
:0045B0B5 68B4050000              push 000005B4
:0045B0BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B0BD 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B0BE FF15AC864B00            Call dword ptr [004B86AC]
:0045B0C4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B0C5 FF15B0864B00            Call dword ptr [004B86B0]
:0045B0CB 8B15B80B4B00            mov edx, dword ptr [004B0BB8]
:0045B0D1 837A0C00                cmp dword ptr [edx+0C], 00000000
:0045B0D5 7409                    je 0045B0E0

* Possible StringData Ref from Data Obj ->"KK"
                                  |
:0045B0D7 C745F444DF4700          mov [ebp-0C], 0047DF44
:0045B0DE EB07                    jmp 0045B0E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B0D5(C)
|

* Possible StringData Ref from Data Obj ->"ӤH"
                                  |
:0045B0E0 C745F44CDF4700          mov [ebp-0C], 0047DF4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B0DE(U)
|
:0045B0E7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045B0EA 50                      push eax
:0045B0EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B0EE 51                      push ecx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B0EF FF15B0864B00            Call dword ptr [004B86B0]
:0045B0F5 8B15B80B4B00            mov edx, dword ptr [004B0BB8]
:0045B0FB 52                      push edx
:0045B0FC 8B4508                  mov eax, dword ptr [ebp+08]
:0045B0FF 50                      push eax
:0045B100 E824020000              call 0045B329
:0045B105 83C408                  add esp, 00000008
:0045B108 6A00                    push 00000000
:0045B10A 6A01                    push 00000001
:0045B10C 6A6E                    push 0000006E
:0045B10E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B111 51                      push ecx

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:0045B112 FF1594864B00            Call dword ptr [004B8694]
:0045B118 E9FE000000              jmp 0045B21B
:0045B11D 68FFFFFF00              push 00FFFFFF
:0045B122 8B5510                  mov edx, dword ptr [ebp+10]
:0045B125 52                      push edx

* Reference To: GDI32.SetBkColor, Ord:0150h
                                  |
:0045B126 FF15E0844B00            Call dword ptr [004B84E0]
:0045B12C 6A00                    push 00000000

* Reference To: GDI32.GetStockObject, Ord:00FAh
                                  |
:0045B12E FF15C8844B00            Call dword ptr [004B84C8]
:0045B134 E9E4000000              jmp 0045B21D

* Reference To: USER32.GetCapture, Ord:00D8h
                                  |
:0045B139 FF1590864B00            Call dword ptr [004B8690]
:0045B13F 3B4508                  cmp eax, dword ptr [ebp+08]
:0045B142 741F                    je 0045B163
:0045B144 8B4508                  mov eax, dword ptr [ebp+08]
:0045B147 50                      push eax

* Reference To: USER32.SetCapture, Ord:01E3h
                                  |
:0045B148 FF1548874B00            Call dword ptr [004B8748]
:0045B14E 6A00                    push 00000000
:0045B150 682C010000              push 0000012C
:0045B155 6A6E                    push 0000006E
:0045B157 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B15A 51                      push ecx

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:0045B15B FF1594864B00            Call dword ptr [004B8694]
:0045B161 EB51                    jmp 0045B1B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B142(C)
|
:0045B163 8A15540C4B00            mov dl, byte ptr [004B0C54]
:0045B169 80C201                  add dl, 01
:0045B16C 8815540C4B00            mov byte ptr [004B0C54], dl

* Reference To: USER32.GetCursor, Ord:00EBh
                                  |
:0045B172 FF158C864B00            Call dword ptr [004B868C]
:0045B178 3B05E8594800            cmp eax, dword ptr [004859E8]
:0045B17E 740E                    je 0045B18E
:0045B180 A1E8594800              mov eax, dword ptr [004859E8]
:0045B185 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:0045B186 FF1588864B00            Call dword ptr [004B8688]
:0045B18C EB0D                    jmp 0045B19B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B17E(C)
|
:0045B18E 8B0DEC594800            mov ecx, dword ptr [004859EC]
:0045B194 51                      push ecx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:0045B195 FF1588864B00            Call dword ptr [004B8688]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B18C(U)
|
:0045B19B 33D2                    xor edx, edx
:0045B19D 8A15540C4B00            mov dl, byte ptr [004B0C54]
:0045B1A3 83FA0F                  cmp edx, 0000000F
:0045B1A6 7E0C                    jle 0045B1B4
:0045B1A8 6A00                    push 00000000
:0045B1AA 8B4508                  mov eax, dword ptr [ebp+08]
:0045B1AD 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B1AE FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B161(U), :0045B1A6(C)
|
:0045B1B4 EB65                    jmp 0045B21B

* Reference To: USER32.GetCapture, Ord:00D8h
                                  |
:0045B1B6 FF1590864B00            Call dword ptr [004B8690]
:0045B1BC 3B4508                  cmp eax, dword ptr [ebp+08]
:0045B1BF 750C                    jne 0045B1CD
:0045B1C1 6A00                    push 00000000
:0045B1C3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B1C6 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B1C7 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B1BF(C)
|
:0045B1CD EB4C                    jmp 0045B21B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B02D(C)
|
:0045B1CF 6A00                    push 00000000
:0045B1D1 8B5508                  mov edx, dword ptr [ebp+08]
:0045B1D4 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B1D5 FF15B0874B00            Call dword ptr [004B87B0]
:0045B1DB EB3E                    jmp 0045B21B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B00C(C)
|
:0045B1DD C605540C4B0000          mov byte ptr [004B0C54], 00
:0045B1E4 6A6E                    push 0000006E
:0045B1E6 8B4508                  mov eax, dword ptr [ebp+08]
:0045B1E9 50                      push eax

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:0045B1EA FF1504874B00            Call dword ptr [004B8704]
:0045B1F0 EB29                    jmp 0045B21B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B002(C)
|
:0045B1F2 8B0DB80B4B00            mov ecx, dword ptr [004B0BB8]
:0045B1F8 8B510C                  mov edx, dword ptr [ecx+0C]
:0045B1FB F7DA                    neg edx
:0045B1FD 1BD2                    sbb edx, edx
:0045B1FF 83E2DB                  and edx, FFFFFFDB
:0045B202 81C25E010000            add edx, 0000015E
:0045B208 8955FC                  mov dword ptr [ebp-04], edx
:0045B20B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B20E 50                      push eax
:0045B20F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B212 51                      push ecx
:0045B213 E8D2020000              call 0045B4EA
:0045B218 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B012(U), :0045B033(U), :0045B04B(C), :0045B118(U), :0045B1B4(U)
|:0045B1CD(U), :0045B1DB(U), :0045B1F0(U)
|
:0045B21B 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B134(U)
|
:0045B21D 8BE5                    mov esp, ebp
:0045B21F 5D                      pop ebp
:0045B220 C21000                  ret 0010



:0045B223 39B14500                DWORD 0045B139
:0045B227 1DB14500                DWORD 0045B11D
:0045B22B B6B14500                DWORD 0045B1B6
:0045B22F B6B14500                DWORD 0045B1B6
:0045B233 1BB24500                DWORD 0045B21B


:0045B237 000404                  add byte ptr [esp+eax], al
:0045B23A 0404                    add al, 04
:0045B23C 0404                    add al, 04
:0045B23E 0404                    add al, 04
:0045B240 0404                    add al, 04
:0045B242 0404                    add al, 04
:0045B244 0404                    add al, 04
:0045B246 0404                    add al, 04
:0045B248 0404                    add al, 04
:0045B24A 0404                    add al, 04
:0045B24C 0404                    add al, 04
:0045B24E 0404                    add al, 04
:0045B250 0404                    add al, 04
:0045B252 0404                    add al, 04
:0045B254 0404                    add al, 04
:0045B256 0404                    add al, 04
:0045B258 0404                    add al, 04
:0045B25A 0404                    add al, 04
:0045B25C 010404                  add dword ptr [esp+eax], eax
:0045B25F 0404                    add al, 04
:0045B261 0404                    add al, 04
:0045B263 0404                    add al, 04
:0045B265 0404                    add al, 04
:0045B267 0404                    add al, 04
:0045B269 0404                    add al, 04
:0045B26B 0404                    add al, 04
:0045B26D 0404                    add al, 04
:0045B26F 0404                    add al, 04
:0045B271 0404                    add al, 04
:0045B273 0404                    add al, 04
:0045B275 0404                    add al, 04
:0045B277 0404                    add al, 04
:0045B279 0404                    add al, 04
:0045B27B 0404                    add al, 04
:0045B27D 0404                    add al, 04
:0045B27F 0404                    add al, 04
:0045B281 0404                    add al, 04
:0045B283 0404                    add al, 04
:0045B285 0404                    add al, 04
:0045B287 0404                    add al, 04
:0045B289 0404                    add al, 04
:0045B28B 0404                    add al, 04
:0045B28D 0404                    add al, 04
:0045B28F 0404                    add al, 04
:0045B291 0404                    add al, 04
:0045B293 0404                    add al, 04
:0045B295 0404                    add al, 04
:0045B297 0404                    add al, 04
:0045B299 0404                    add al, 04
:0045B29B 0404                    add al, 04
:0045B29D 0404                    add al, 04
:0045B29F 0404                    add al, 04
:0045B2A1 0404                    add al, 04
:0045B2A3 0404                    add al, 04
:0045B2A5 0404                    add al, 04
:0045B2A7 0404                    add al, 04
:0045B2A9 0404                    add al, 04
:0045B2AB 0404                    add al, 04
:0045B2AD 0404                    add al, 04
:0045B2AF 0404                    add al, 04
:0045B2B1 0404                    add al, 04
:0045B2B3 0404                    add al, 04
:0045B2B5 0404                    add al, 04
:0045B2B7 0404                    add al, 04
:0045B2B9 0404                    add al, 04
:0045B2BB 0404                    add al, 04
:0045B2BD 0404                    add al, 04
:0045B2BF 0404                    add al, 04
:0045B2C1 0404                    add al, 04
:0045B2C3 0404                    add al, 04
:0045B2C5 0404                    add al, 04
:0045B2C7 0404                    add al, 04
:0045B2C9 0404                    add al, 04
:0045B2CB 0404                    add al, 04
:0045B2CD 0404                    add al, 04
:0045B2CF 0404                    add al, 04
:0045B2D1 0404                    add al, 04
:0045B2D3 0404                    add al, 04
:0045B2D5 0404                    add al, 04
:0045B2D7 0404                    add al, 04
:0045B2D9 0404                    add al, 04
:0045B2DB 0404                    add al, 04
:0045B2DD 0404                    add al, 04
:0045B2DF 0404                    add al, 04
:0045B2E1 0404                    add al, 04
:0045B2E3 0404                    add al, 04
:0045B2E5 0404                    add al, 04
:0045B2E7 0404                    add al, 04
:0045B2E9 0404                    add al, 04
:0045B2EB 0404                    add al, 04
:0045B2ED 0404                    add al, 04
:0045B2EF 0404                    add al, 04
:0045B2F1 0404                    add al, 04
:0045B2F3 0404                    add al, 04
:0045B2F5 0404                    add al, 04
:0045B2F7 0404                    add al, 04
:0045B2F9 0404                    add al, 04
:0045B2FB 0404                    add al, 04
:0045B2FD 0404                    add al, 04
:0045B2FF 0404                    add al, 04
:0045B301 0404                    add al, 04
:0045B303 0404                    add al, 04
:0045B305 0404                    add al, 04
:0045B307 0404                    add al, 04
:0045B309 0404                    add al, 04
:0045B30B 0404                    add al, 04
:0045B30D 0404                    add al, 04
:0045B30F 0404                    add al, 04
:0045B311 0404                    add al, 04
:0045B313 0404                    add al, 04
:0045B315 0404                    add al, 04
:0045B317 0404                    add al, 04
:0045B319 0404                    add al, 04
:0045B31B 0404                    add al, 04
:0045B31D 0404                    add al, 04
:0045B31F 0404                    add al, 04
:0045B321 0404                    add al, 04
:0045B323 0404                    add al, 04
:0045B325 020404                  add al, byte ptr [esp+eax]
:0045B328 03                      BYTE 03h


* Referenced by a CALL at Address:
|:0045B100   
|
:0045B329 55                      push ebp
:0045B32A 8BEC                    mov ebp, esp
:0045B32C 83EC10                  sub esp, 00000010
:0045B32F 56                      push esi

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045B330 6A07                    push 00000007

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0045B332 FF1578874B00            Call dword ptr [004B8778]
:0045B338 8D8400F0000000          lea eax, dword ptr [eax+eax+000000F0]
:0045B33F 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:0045B342 6A08                    push 00000008

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0045B344 FF1578874B00            Call dword ptr [004B8778]
:0045B34A 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045B34C 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0045B34E FF1578874B00            Call dword ptr [004B8778]
:0045B354 8D4C7070                lea ecx, dword ptr [eax+2*esi+70]
:0045B358 894DF8                  mov dword ptr [ebp-08], ecx
:0045B35B 6A00                    push 00000000

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0045B35D FF1578874B00            Call dword ptr [004B8778]
:0045B363 2B45FC                  sub eax, dword ptr [ebp-04]
:0045B366 99                      cdq
:0045B367 2BC2                    sub eax, edx
:0045B369 D1F8                    sar eax, 1
:0045B36B 8945F0                  mov dword ptr [ebp-10], eax
:0045B36E 6A01                    push 00000001

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0045B370 FF1578874B00            Call dword ptr [004B8778]
:0045B376 2B45F8                  sub eax, dword ptr [ebp-08]
:0045B379 99                      cdq
:0045B37A 2BC2                    sub eax, edx
:0045B37C D1F8                    sar eax, 1
:0045B37E 8945F4                  mov dword ptr [ebp-0C], eax
:0045B381 8B550C                  mov edx, dword ptr [ebp+0C]
:0045B384 52                      push edx
:0045B385 8B4508                  mov eax, dword ptr [ebp+08]
:0045B388 50                      push eax
:0045B389 E824000000              call 0045B3B2
:0045B38E 83C408                  add esp, 00000008
:0045B391 6A00                    push 00000000
:0045B393 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045B396 51                      push ecx
:0045B397 8B55FC                  mov edx, dword ptr [ebp-04]
:0045B39A 52                      push edx
:0045B39B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045B39E 50                      push eax
:0045B39F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045B3A2 51                      push ecx
:0045B3A3 8B5508                  mov edx, dword ptr [ebp+08]
:0045B3A6 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045B3A7 FF15FC864B00            Call dword ptr [004B86FC]
:0045B3AD 5E                      pop esi
:0045B3AE 8BE5                    mov esp, ebp
:0045B3B0 5D                      pop ebp
:0045B3B1 C3                      ret



* Referenced by a CALL at Address:
|:0045B389   
|
:0045B3B2 55                      push ebp
:0045B3B3 8BEC                    mov ebp, esp
:0045B3B5 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B3B8 83780400                cmp dword ptr [eax+04], 00000000
:0045B3BC 7558                    jne 0045B416
:0045B3BE 6A00                    push 00000000
:0045B3C0 6A18                    push 00000018
:0045B3C2 6892000000              push 00000092
:0045B3C7 6A2E                    push 0000002E
:0045B3C9 6A5A                    push 0000005A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B1, ""
                                  |
:0045B3CB 68B1050000              push 000005B1
:0045B3D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B3D3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B3D4 FF15AC864B00            Call dword ptr [004B86AC]
:0045B3DA 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045B3DB FF15FC864B00            Call dword ptr [004B86FC]
:0045B3E1 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B3, ""
                                  |
:0045B3E3 68B3050000              push 000005B3
:0045B3E8 8B5508                  mov edx, dword ptr [ebp+08]
:0045B3EB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B3EC FF15AC864B00            Call dword ptr [004B86AC]
:0045B3F2 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045B3F3 FF15E4864B00            Call dword ptr [004B86E4]
:0045B3F9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B4, "1"
                                  |
:0045B3FB 68B4050000              push 000005B4
:0045B400 8B4508                  mov eax, dword ptr [ebp+08]
:0045B403 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B404 FF15AC864B00            Call dword ptr [004B86AC]
:0045B40A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045B40B FF15E4864B00            Call dword ptr [004B86E4]
:0045B411 E9D2000000              jmp 0045B4E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B3BC(C)
|
:0045B416 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B419 83790800                cmp dword ptr [ecx+08], 00000000
:0045B41D 7560                    jne 0045B47F
:0045B41F 6A00                    push 00000000
:0045B421 6A18                    push 00000018
:0045B423 6892000000              push 00000092
:0045B428 6A1D                    push 0000001D
:0045B42A 6A5A                    push 0000005A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B1, ""
                                  |
:0045B42C 68B1050000              push 000005B1
:0045B431 8B5508                  mov edx, dword ptr [ebp+08]
:0045B434 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B435 FF15AC864B00            Call dword ptr [004B86AC]
:0045B43B 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045B43C FF15FC864B00            Call dword ptr [004B86FC]
:0045B442 6A00                    push 00000000
:0045B444 6A18                    push 00000018
:0045B446 6892000000              push 00000092
:0045B44B 6A45                    push 00000045
:0045B44D 6A5A                    push 0000005A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B3, ""
                                  |
:0045B44F 68B3050000              push 000005B3
:0045B454 8B4508                  mov eax, dword ptr [ebp+08]
:0045B457 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B458 FF15AC864B00            Call dword ptr [004B86AC]
:0045B45E 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045B45F FF15FC864B00            Call dword ptr [004B86FC]
:0045B465 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B4, "1"
                                  |
:0045B467 68B4050000              push 000005B4
:0045B46C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B46F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B470 FF15AC864B00            Call dword ptr [004B86AC]
:0045B476 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045B477 FF15E4864B00            Call dword ptr [004B86E4]
:0045B47D EB69                    jmp 0045B4E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B41D(C)
|
:0045B47F 6A00                    push 00000000
:0045B481 6A18                    push 00000018
:0045B483 6892000000              push 00000092

* Possible Reference to String Resource ID=00013: ""
                                  |
:0045B488 6A0D                    push 0000000D
:0045B48A 6A5A                    push 0000005A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B1, ""
                                  |
:0045B48C 68B1050000              push 000005B1
:0045B491 8B5508                  mov edx, dword ptr [ebp+08]
:0045B494 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B495 FF15AC864B00            Call dword ptr [004B86AC]
:0045B49B 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045B49C FF15FC864B00            Call dword ptr [004B86FC]
:0045B4A2 6A00                    push 00000000
:0045B4A4 6A18                    push 00000018
:0045B4A6 6892000000              push 00000092
:0045B4AB 6A2D                    push 0000002D
:0045B4AD 6A5A                    push 0000005A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B3, ""
                                  |
:0045B4AF 68B3050000              push 000005B3
:0045B4B4 8B4508                  mov eax, dword ptr [ebp+08]
:0045B4B7 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B4B8 FF15AC864B00            Call dword ptr [004B86AC]
:0045B4BE 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045B4BF FF15FC864B00            Call dword ptr [004B86FC]
:0045B4C5 6A00                    push 00000000
:0045B4C7 6A18                    push 00000018
:0045B4C9 6892000000              push 00000092
:0045B4CE 6A4D                    push 0000004D
:0045B4D0 6A5A                    push 0000005A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B4, "1"
                                  |
:0045B4D2 68B4050000              push 000005B4
:0045B4D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B4DA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B4DB FF15AC864B00            Call dword ptr [004B86AC]
:0045B4E1 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045B4E2 FF15FC864B00            Call dword ptr [004B86FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B411(U), :0045B47D(U)
|
:0045B4E8 5D                      pop ebp
:0045B4E9 C3                      ret



* Referenced by a CALL at Address:
|:0045B213   
|
:0045B4EA 55                      push ebp
:0045B4EB 8BEC                    mov ebp, esp
:0045B4ED 83EC58                  sub esp, 00000058
:0045B4F0 8D45B0                  lea eax, dword ptr [ebp-50]
:0045B4F3 50                      push eax
:0045B4F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B4F7 51                      push ecx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:0045B4F8 FF15D0864B00            Call dword ptr [004B86D0]
:0045B4FE 8B55B0                  mov edx, dword ptr [ebp-50]
:0045B501 52                      push edx
:0045B502 8B4508                  mov eax, dword ptr [ebp+08]
:0045B505 50                      push eax
:0045B506 E819F9FFFF              call 0045AE24
:0045B50B 83C408                  add esp, 00000008
:0045B50E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B511 51                      push ecx
:0045B512 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0045B518 52                      push edx
:0045B519 E80E93FBFF              call 0041482C
:0045B51E 83C408                  add esp, 00000008
:0045B521 8945F0                  mov dword ptr [ebp-10], eax
:0045B524 6849010000              push 00000149
:0045B529 A1300E4B00              mov eax, dword ptr [004B0E30]
:0045B52E 50                      push eax

* Reference To: USER32.LoadBitmapA, Ord:0170h
                                  |
:0045B52F FF159C874B00            Call dword ptr [004B879C]
:0045B535 8945A8                  mov dword ptr [ebp-58], eax
:0045B538 6847010000              push 00000147
:0045B53D 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0045B543 51                      push ecx

* Reference To: USER32.LoadBitmapA, Ord:0170h
                                  |
:0045B544 FF159C874B00            Call dword ptr [004B879C]
:0045B54A 8945F4                  mov dword ptr [ebp-0C], eax
:0045B54D 8B55B0                  mov edx, dword ptr [ebp-50]
:0045B550 52                      push edx

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:0045B551 FF15A0844B00            Call dword ptr [004B84A0]
:0045B557 8945AC                  mov dword ptr [ebp-54], eax
:0045B55A 8B45B0                  mov eax, dword ptr [ebp-50]
:0045B55D 50                      push eax

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:0045B55E FF15A0844B00            Call dword ptr [004B84A0]
:0045B564 8945FC                  mov dword ptr [ebp-04], eax
:0045B567 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0045B56A 51                      push ecx

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:0045B56B FF15A0844B00            Call dword ptr [004B84A0]
:0045B571 8945F8                  mov dword ptr [ebp-08], eax
:0045B574 8B55F0                  mov edx, dword ptr [ebp-10]
:0045B577 52                      push edx
:0045B578 8B45AC                  mov eax, dword ptr [ebp-54]
:0045B57B 50                      push eax

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0045B57C FF159C844B00            Call dword ptr [004B849C]
:0045B582 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0045B585 51                      push ecx
:0045B586 8B55FC                  mov edx, dword ptr [ebp-04]
:0045B589 52                      push edx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0045B58A FF159C844B00            Call dword ptr [004B849C]
:0045B590 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045B593 50                      push eax
:0045B594 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045B597 51                      push ecx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0045B598 FF159C844B00            Call dword ptr [004B849C]
:0045B59E 682000CC00              push 00CC0020
:0045B5A3 6A00                    push 00000000
:0045B5A5 6A00                    push 00000000
:0045B5A7 8B55AC                  mov edx, dword ptr [ebp-54]
:0045B5AA 52                      push edx

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:0045B5AB 6A70                    push 00000070
:0045B5AD 6A40                    push 00000040

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0045B5AF 6A10                    push 00000010
:0045B5B1 6A00                    push 00000000
:0045B5B3 8B45B0                  mov eax, dword ptr [ebp-50]
:0045B5B6 50                      push eax

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:0045B5B7 FF1598844B00            Call dword ptr [004B8498]
:0045B5BD 688600EE00              push 00EE0086
:0045B5C2 6A00                    push 00000000
:0045B5C4 6A00                    push 00000000
:0045B5C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B5C9 51                      push ecx

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:0045B5CA 6A70                    push 00000070
:0045B5CC 68B0000000              push 000000B0
:0045B5D1 6A00                    push 00000000
:0045B5D3 6A40                    push 00000040
:0045B5D5 8B55B0                  mov edx, dword ptr [ebp-50]
:0045B5D8 52                      push edx

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:0045B5D9 FF1598844B00            Call dword ptr [004B8498]
:0045B5DF 68C6008800              push 008800C6
:0045B5E4 6A00                    push 00000000
:0045B5E6 6A00                    push 00000000
:0045B5E8 8B45F8                  mov eax, dword ptr [ebp-08]
:0045B5EB 50                      push eax

* Possible Ref to Menu: DBGMENU, Item: "(K)"
                                  |
:0045B5EC 6A70                    push 00000070
:0045B5EE 68B0000000              push 000000B0
:0045B5F3 6A00                    push 00000000
:0045B5F5 6A40                    push 00000040
:0045B5F7 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0045B5FA 51                      push ecx

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:0045B5FB FF1598844B00            Call dword ptr [004B8498]
:0045B601 8B55AC                  mov edx, dword ptr [ebp-54]
:0045B604 52                      push edx

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:0045B605 FF15E4844B00            Call dword ptr [004B84E4]
:0045B60B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B60E 50                      push eax

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:0045B60F FF15E4844B00            Call dword ptr [004B84E4]
:0045B615 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045B618 51                      push ecx

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:0045B619 FF15E4844B00            Call dword ptr [004B84E4]
:0045B61F 8B55F0                  mov edx, dword ptr [ebp-10]
:0045B622 52                      push edx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045B623 FF158C844B00            Call dword ptr [004B848C]
:0045B629 8B45A8                  mov eax, dword ptr [ebp-58]
:0045B62C 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045B62D FF158C844B00            Call dword ptr [004B848C]
:0045B633 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045B636 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045B637 FF158C844B00            Call dword ptr [004B848C]
:0045B63D 8D55B0                  lea edx, dword ptr [ebp-50]
:0045B640 52                      push edx
:0045B641 8B4508                  mov eax, dword ptr [ebp+08]
:0045B644 50                      push eax

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:0045B645 FF15D4864B00            Call dword ptr [004B86D4]
:0045B64B 8BE5                    mov esp, ebp
:0045B64D 5D                      pop ebp
:0045B64E C3                      ret



* Referenced by a CALL at Addresses:
|:0041EBBD   , :0045BCBE   , :0045BCDB   , :0045BCF8   , :0045BD15   
|:0045BD32   , :0045BD4F   , :0045BD6C   , :0045BD86   , :0045D572   
|:0045D5AF   , :0045D5F1   , :0045D67D   , :0045D6E4   
|
:0045B64F 55                      push ebp
:0045B650 8BEC                    mov ebp, esp
:0045B652 83EC10                  sub esp, 00000010
:0045B655 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B658 8945F0                  mov dword ptr [ebp-10], eax
:0045B65B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045B65E 894DF4                  mov dword ptr [ebp-0C], ecx
:0045B661 8B5514                  mov edx, dword ptr [ebp+14]
:0045B664 8955F8                  mov dword ptr [ebp-08], edx
:0045B667 8B4518                  mov eax, dword ptr [ebp+18]
:0045B66A 8945FC                  mov dword ptr [ebp-04], eax
:0045B66D 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0045B670 51                      push ecx
:0045B671 68ECAF4500              push 0045AFEC
:0045B676 8B5508                  mov edx, dword ptr [ebp+08]
:0045B679 52                      push edx

* Possible Reference to Dialog: DialogID_011E 
                                  |
:0045B67A 681E010000              push 0000011E
:0045B67F A1300E4B00              mov eax, dword ptr [004B0E30]
:0045B684 50                      push eax

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045B685 FF1520874B00            Call dword ptr [004B8720]
:0045B68B 8BE5                    mov esp, ebp
:0045B68D 5D                      pop ebp
:0045B68E C3                      ret


:0045B68F 55                      push ebp
:0045B690 8BEC                    mov ebp, esp
:0045B692 83EC14                  sub esp, 00000014
:0045B695 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B698 8945F0                  mov dword ptr [ebp-10], eax
:0045B69B 837DF00F                cmp dword ptr [ebp-10], 0000000F
:0045B69F 7719                    ja 0045B6BA
:0045B6A1 837DF00F                cmp dword ptr [ebp-10], 0000000F
:0045B6A5 0F845D020000            je 0045B908
:0045B6AB 837DF002                cmp dword ptr [ebp-10], 00000002
:0045B6AF 0F843E020000            je 0045B8F3
:0045B6B5 E95F020000              jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B69F(C)
|
:0045B6BA 817DF010010000          cmp dword ptr [ebp-10], 00000110
:0045B6C1 7718                    ja 0045B6DB
:0045B6C3 817DF010010000          cmp dword ptr [ebp-10], 00000110
:0045B6CA 742E                    je 0045B6FA
:0045B6CC 837DF010                cmp dword ptr [ebp-10], 00000010
:0045B6D0 0F84DA010000            je 0045B8B0
:0045B6D6 E93E020000              jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B6C1(C)
|
:0045B6DB 817DF011010000          cmp dword ptr [ebp-10], 00000111
:0045B6E2 0F84D6010000            je 0045B8BE
:0045B6E8 817DF013010000          cmp dword ptr [ebp-10], 00000113
:0045B6EF 0F8412010000            je 0045B807
:0045B6F5 E91F020000              jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B6CA(C)
|
:0045B6FA 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045B6FD 81E1FFFF0000            and ecx, 0000FFFF
:0045B703 894DFC                  mov dword ptr [ebp-04], ecx
:0045B706 8B5514                  mov edx, dword ptr [ebp+14]
:0045B709 C1EA10                  shr edx, 10
:0045B70C 81E2FFFF0000            and edx, 0000FFFF
:0045B712 81E2FFFF0000            and edx, 0000FFFF
:0045B718 8915500C4B00            mov dword ptr [004B0C50], edx
:0045B71E 688B050000              push 0000058B
:0045B723 68CF050000              push 000005CF
:0045B728 68CE050000              push 000005CE
:0045B72D 68CD050000              push 000005CD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B3, ""
                                  |
:0045B732 68B3050000              push 000005B3
:0045B737 A1500C4B00              mov eax, dword ptr [004B0C50]
:0045B73C 50                      push eax
:0045B73D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B740 51                      push ecx
:0045B741 E81A020000              call 0045B960
:0045B746 83C41C                  add esp, 0000001C
:0045B749 8B55FC                  mov edx, dword ptr [ebp-04]
:0045B74C 52                      push edx
:0045B74D E8ED010000              call 0045B93F
:0045B752 83C404                  add esp, 00000004
:0045B755 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045B756 6854DF4700              push 0047DF54

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B4, "1"
                                  |
:0045B75B 68B4050000              push 000005B4
:0045B760 8B4508                  mov eax, dword ptr [ebp+08]
:0045B763 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B764 FF15AC864B00            Call dword ptr [004B86AC]
:0045B76A 50                      push eax
:0045B76B E89A800000              call 0046380A
:0045B770 83C40C                  add esp, 0000000C
:0045B773 8B0D500C4B00            mov ecx, dword ptr [004B0C50]
:0045B779 51                      push ecx
:0045B77A E8A2010000              call 0045B921
:0045B77F 83C404                  add esp, 00000004
:0045B782 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045B783 6858DF4700              push 0047DF58
:0045B788 68B5050000              push 000005B5
:0045B78D 8B5508                  mov edx, dword ptr [ebp+08]
:0045B790 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B791 FF15AC864B00            Call dword ptr [004B86AC]
:0045B797 50                      push eax
:0045B798 E86D800000              call 0046380A
:0045B79D 83C40C                  add esp, 0000000C
:0045B7A0 8B0D500C4B00            mov ecx, dword ptr [004B0C50]
:0045B7A6 6BC933                  imul ecx, 00000033
:0045B7A9 81C1C8EF4800            add ecx, 0048EFC8
:0045B7AF E8FC8EFAFF              call 004046B0
:0045B7B4 25FF000000              and eax, 000000FF
:0045B7B9 05C2010000              add eax, 000001C2
:0045B7BE 25FFFF0000              and eax, 0000FFFF
:0045B7C3 50                      push eax
:0045B7C4 B910584800              mov ecx, 00485810
:0045B7C9 E8928EFFFF              call 00454660
:0045B7CE 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045B7CF FF15E8864B00            Call dword ptr [004B86E8]
:0045B7D5 8945F8                  mov dword ptr [ebp-08], eax
:0045B7D8 6A00                    push 00000000
:0045B7DA 8B45F8                  mov eax, dword ptr [ebp-08]
:0045B7DD 50                      push eax
:0045B7DE 6870010000              push 00000170
:0045B7E3 68B2050000              push 000005B2
:0045B7E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B7EB 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045B7EC FF15B4864B00            Call dword ptr [004B86B4]
:0045B7F2 6A00                    push 00000000
:0045B7F4 6A28                    push 00000028
:0045B7F6 6A6E                    push 0000006E
:0045B7F8 8B5508                  mov edx, dword ptr [ebp+08]
:0045B7FB 52                      push edx

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:0045B7FC FF1594864B00            Call dword ptr [004B8694]
:0045B802 E912010000              jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B6EF(C)
|
:0045B807 68B2050000              push 000005B2
:0045B80C 8B4508                  mov eax, dword ptr [ebp+08]
:0045B80F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B810 FF15AC864B00            Call dword ptr [004B86AC]
:0045B816 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0045B817 FF15B8864B00            Call dword ptr [004B86B8]
:0045B81D 8945F4                  mov dword ptr [ebp-0C], eax
:0045B820 33C9                    xor ecx, ecx
:0045B822 8A0D4CDE4700            mov cl, byte ptr [0047DE4C]
:0045B828 51                      push ecx
:0045B829 E8CA020000              call 0045BAF8
:0045B82E 83C404                  add esp, 00000004
:0045B831 50                      push eax
:0045B832 6A00                    push 00000000
:0045B834 6A00                    push 00000000
:0045B836 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045B839 52                      push edx
:0045B83A 8B0D500C4B00            mov ecx, dword ptr [004B0C50]
:0045B840 6BC933                  imul ecx, 00000033
:0045B843 81C1C8EF4800            add ecx, 0048EFC8
:0045B849 E8628EFAFF              call 004046B0
:0045B84E 25FF000000              and eax, 000000FF
:0045B853 50                      push eax
:0045B854 B910584800              mov ecx, 00485810
:0045B859 E832AFFBFF              call 00416790
:0045B85E 50                      push eax

* Reference To: COMCTL32.ImageList_Draw, Ord:001Ch
                                  |
:0045B85F FF1558844B00            Call dword ptr [004B8458]
:0045B865 68B2050000              push 000005B2
:0045B86A 8B4508                  mov eax, dword ptr [ebp+08]
:0045B86D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B86E FF15AC864B00            Call dword ptr [004B86AC]
:0045B874 50                      push eax
:0045B875 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045B878 51                      push ecx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0045B879 FF15BC864B00            Call dword ptr [004B86BC]
:0045B87F 33D2                    xor edx, edx
:0045B881 8A154CDE4700            mov dl, byte ptr [0047DE4C]
:0045B887 83FA01                  cmp edx, 00000001
:0045B88A 7F13                    jg 0045B89F
:0045B88C 6A6E                    push 0000006E
:0045B88E 8B4508                  mov eax, dword ptr [ebp+08]
:0045B891 50                      push eax

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:0045B892 FF1504874B00            Call dword ptr [004B8704]
:0045B898 C6054CDE470005          mov byte ptr [0047DE4C], 05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B88A(C)
|
:0045B89F 8A0D4CDE4700            mov cl, byte ptr [0047DE4C]
:0045B8A5 80E901                  sub cl, 01
:0045B8A8 880D4CDE4700            mov byte ptr [0047DE4C], cl
:0045B8AE EB69                    jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B6D0(C)
|
:0045B8B0 6A00                    push 00000000
:0045B8B2 8B5508                  mov edx, dword ptr [ebp+08]
:0045B8B5 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B8B6 FF15B0874B00            Call dword ptr [004B87B0]
:0045B8BC EB5B                    jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B6E2(C)
|
:0045B8BE 8B4510                  mov eax, dword ptr [ebp+10]
:0045B8C1 25FFFF0000              and eax, 0000FFFF
:0045B8C6 8945EC                  mov dword ptr [ebp-14], eax
:0045B8C9 837DEC01                cmp dword ptr [ebp-14], 00000001
:0045B8CD 7416                    je 0045B8E5
:0045B8CF 837DEC02                cmp dword ptr [ebp-14], 00000002
:0045B8D3 7402                    je 0045B8D7
:0045B8D5 EB1A                    jmp 0045B8F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B8D3(C)
|
:0045B8D7 6A00                    push 00000000
:0045B8D9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B8DC 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B8DD FF15B0874B00            Call dword ptr [004B87B0]
:0045B8E3 EB0C                    jmp 0045B8F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B8CD(C)
|
:0045B8E5 6A01                    push 00000001
:0045B8E7 8B5508                  mov edx, dword ptr [ebp+08]
:0045B8EA 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B8EB FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B8D5(U), :0045B8E3(U)
|
:0045B8F1 EB26                    jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B6AF(C)
|
:0045B8F3 C6054CDE470005          mov byte ptr [0047DE4C], 05
:0045B8FA 6A6E                    push 0000006E
:0045B8FC 8B4508                  mov eax, dword ptr [ebp+08]
:0045B8FF 50                      push eax

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:0045B900 FF1504874B00            Call dword ptr [004B8704]
:0045B906 EB11                    jmp 0045B919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B6A5(C)
|
:0045B908 6842010000              push 00000142
:0045B90D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B910 51                      push ecx
:0045B911 E8D8F4FFFF              call 0045ADEE
:0045B916 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B6B5(U), :0045B6D6(U), :0045B6F5(U), :0045B802(U), :0045B8AE(U)
|:0045B8BC(U), :0045B8F1(U), :0045B906(U)
|
:0045B919 33C0                    xor eax, eax
:0045B91B 8BE5                    mov esp, ebp
:0045B91D 5D                      pop ebp
:0045B91E C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0045B77A   , :0045CA96   , :0045CB54   , :0045D583   
|
:0045B921 55                      push ebp
:0045B922 8BEC                    mov ebp, esp
:0045B924 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B927 6BC933                  imul ecx, 00000033
:0045B92A 81C1C8EF4800            add ecx, 0048EFC8
:0045B930 E8FB46FCFF              call 00420030
:0045B935 25FF000000              and eax, 000000FF
:0045B93A 6BC00A                  imul eax, 0000000A
:0045B93D 5D                      pop ebp
:0045B93E C3                      ret



* Referenced by a CALL at Addresses:
|:0045B74D   , :0045CA6C   , :0045CB2A   , :0045D5C0   
|
:0045B93F 55                      push ebp
:0045B940 8BEC                    mov ebp, esp
:0045B942 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B945 6BC933                  imul ecx, 00000033
:0045B948 81C1C8EF4800            add ecx, 0048EFC8
:0045B94E E8BD46FCFF              call 00420010
:0045B953 25FF000000              and eax, 000000FF
:0045B958 83C001                  add eax, 00000001
:0045B95B 6BC00A                  imul eax, 0000000A
:0045B95E 5D                      pop ebp
:0045B95F C3                      ret



* Referenced by a CALL at Addresses:
|:0045B741   , :0045CA2E   , :0045CA57   , :0045CB15   
|
:0045B960 55                      push ebp
:0045B961 8BEC                    mov ebp, esp
:0045B963 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:0045B96A 0F8413010000            je 0045BA83
:0045B970 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B973 6BC933                  imul ecx, 00000033
:0045B976 81C1C8EF4800            add ecx, 0048EFC8
:0045B97C E88F46FCFF              call 00420010
:0045B981 25FF000000              and eax, 000000FF
:0045B986 50                      push eax
:0045B987 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B98A 6BC933                  imul ecx, 00000033
:0045B98D 81C1C8EF4800            add ecx, 0048EFC8
:0045B993 E818BEFAFF              call 004077B0
:0045B998 50                      push eax

* Possible StringData Ref from Data Obj ->"%s Lv.%u"
                                  |
:0045B999 685CDF4700              push 0047DF5C
:0045B99E 8B4510                  mov eax, dword ptr [ebp+10]
:0045B9A1 50                      push eax
:0045B9A2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B9A5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B9A6 FF15AC864B00            Call dword ptr [004B86AC]
:0045B9AC 50                      push eax
:0045B9AD E8587E0000              call 0046380A
:0045B9B2 83C410                  add esp, 00000010
:0045B9B5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B9B8 6BC933                  imul ecx, 00000033
:0045B9BB 81C1C8EF4800            add ecx, 0048EFC8
:0045B9C1 E86A46FCFF              call 00420030
:0045B9C6 25FF000000              and eax, 000000FF
:0045B9CB 50                      push eax

* Possible StringData Ref from Data Obj ->"ĪG
%u"
                                  |
:0045B9CC 6868DF4700              push 0047DF68
:0045B9D1 8B5514                  mov edx, dword ptr [ebp+14]
:0045B9D4 52                      push edx
:0045B9D5 8B4508                  mov eax, dword ptr [ebp+08]
:0045B9D8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B9D9 FF15AC864B00            Call dword ptr [004B86AC]
:0045B9DF 50                      push eax
:0045B9E0 E8257E0000              call 0046380A
:0045B9E5 83C40C                  add esp, 0000000C
:0045B9E8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B9EB 6BC933                  imul ecx, 00000033
:0045B9EE 81C1C8EF4800            add ecx, 0048EFC8
:0045B9F4 E8F78CFAFF              call 004046F0
:0045B9F9 25FF000000              and eax, 000000FF
:0045B9FE 50                      push eax

* Possible StringData Ref from Data Obj ->"R
%u"
                                  |
:0045B9FF 6870DF4700              push 0047DF70
:0045BA04 8B4D18                  mov ecx, dword ptr [ebp+18]
:0045BA07 51                      push ecx
:0045BA08 8B5508                  mov edx, dword ptr [ebp+08]
:0045BA0B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BA0C FF15AC864B00            Call dword ptr [004B86AC]
:0045BA12 50                      push eax
:0045BA13 E8F27D0000              call 0046380A
:0045BA18 83C40C                  add esp, 0000000C
:0045BA1B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045BA1E 6BC933                  imul ecx, 00000033
:0045BA21 81C1C8EF4800            add ecx, 0048EFC8
:0045BA27 E8048DFAFF              call 00404730
:0045BA2C 25FF000000              and eax, 000000FF
:0045BA31 50                      push eax

* Possible StringData Ref from Data Obj ->"q
%u"
                                  |
:0045BA32 6878DF4700              push 0047DF78
:0045BA37 8B451C                  mov eax, dword ptr [ebp+1C]
:0045BA3A 50                      push eax
:0045BA3B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BA3E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BA3F FF15AC864B00            Call dword ptr [004B86AC]
:0045BA45 50                      push eax
:0045BA46 E8BF7D0000              call 0046380A
:0045BA4B 83C40C                  add esp, 0000000C
:0045BA4E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045BA51 6BC933                  imul ecx, 00000033
:0045BA54 81C1C8EF4800            add ecx, 0048EFC8
:0045BA5A E8118DFAFF              call 00404770
:0045BA5F 25FF000000              and eax, 000000FF
:0045BA64 50                      push eax

* Possible StringData Ref from Data Obj ->"O
%u"
                                  |
:0045BA65 6880DF4700              push 0047DF80
:0045BA6A 8B5520                  mov edx, dword ptr [ebp+20]
:0045BA6D 52                      push edx
:0045BA6E 8B4508                  mov eax, dword ptr [ebp+08]
:0045BA71 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BA72 FF15AC864B00            Call dword ptr [004B86AC]
:0045BA78 50                      push eax
:0045BA79 E88C7D0000              call 0046380A
:0045BA7E 83C40C                  add esp, 0000000C
:0045BA81 EB73                    jmp 0045BAF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B96A(C)
|
:0045BA83 6A00                    push 00000000
:0045BA85 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045BA88 51                      push ecx
:0045BA89 8B5508                  mov edx, dword ptr [ebp+08]
:0045BA8C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BA8D FF15AC864B00            Call dword ptr [004B86AC]
:0045BA93 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045BA94 FF15B0864B00            Call dword ptr [004B86B0]
:0045BA9A 6A00                    push 00000000
:0045BA9C 8B4514                  mov eax, dword ptr [ebp+14]
:0045BA9F 50                      push eax
:0045BAA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BAA3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BAA4 FF15AC864B00            Call dword ptr [004B86AC]
:0045BAAA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045BAAB FF15B0864B00            Call dword ptr [004B86B0]
:0045BAB1 6A00                    push 00000000
:0045BAB3 8B5518                  mov edx, dword ptr [ebp+18]
:0045BAB6 52                      push edx
:0045BAB7 8B4508                  mov eax, dword ptr [ebp+08]
:0045BABA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BABB FF15AC864B00            Call dword ptr [004B86AC]
:0045BAC1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045BAC2 FF15B0864B00            Call dword ptr [004B86B0]
:0045BAC8 6A00                    push 00000000
:0045BACA 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0045BACD 51                      push ecx
:0045BACE 8B5508                  mov edx, dword ptr [ebp+08]
:0045BAD1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BAD2 FF15AC864B00            Call dword ptr [004B86AC]
:0045BAD8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045BAD9 FF15B0864B00            Call dword ptr [004B86B0]
:0045BADF 6A00                    push 00000000
:0045BAE1 8B4520                  mov eax, dword ptr [ebp+20]
:0045BAE4 50                      push eax
:0045BAE5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BAE8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BAE9 FF15AC864B00            Call dword ptr [004B86AC]
:0045BAEF 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045BAF0 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BA81(U)
|
:0045BAF6 5D                      pop ebp
:0045BAF7 C3                      ret



* Referenced by a CALL at Address:
|:0045B829   
|
:0045BAF8 55                      push ebp
:0045BAF9 8BEC                    mov ebp, esp
:0045BAFB 83EC08                  sub esp, 00000008
:0045BAFE 8B4508                  mov eax, dword ptr [ebp+08]
:0045BB01 8945F8                  mov dword ptr [ebp-08], eax
:0045BB04 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045BB07 83E901                  sub ecx, 00000001
:0045BB0A 894DF8                  mov dword ptr [ebp-08], ecx
:0045BB0D 837DF804                cmp dword ptr [ebp-08], 00000004
:0045BB11 7725                    ja 0045BB38
:0045BB13 8B55F8                  mov edx, dword ptr [ebp-08]
:0045BB16 FF249546BB4500          jmp dword ptr [4*edx+0045BB46]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045BB1D C745FC02000000          mov [ebp-04], 00000002
:0045BB24 EB19                    jmp 0045BB3F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045BB26 C745FC04000000          mov [ebp-04], 00000004
:0045BB2D EB10                    jmp 0045BB3F
:0045BB2F C745FC00000000          mov [ebp-04], 00000000
:0045BB36 EB07                    jmp 0045BB3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB11(C)
|
:0045BB38 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045BB24(U), :0045BB2D(U), :0045BB36(U)
|
:0045BB3F 8B45FC                  mov eax, dword ptr [ebp-04]
:0045BB42 8BE5                    mov esp, ebp
:0045BB44 5D                      pop ebp
:0045BB45 C3                      ret



:0045BB46 2FBB4500                DWORD 0045BB2F
:0045BB4A 26BB4500                DWORD 0045BB26
:0045BB4E 26BB4500                DWORD 0045BB26
:0045BB52 1DBB4500                DWORD 0045BB1D
:0045BB56 1DBB4500                DWORD 0045BB1D


:0045BB5A 55                      push ebp
:0045BB5B 8BEC                    mov ebp, esp
:0045BB5D 83EC14                  sub esp, 00000014
:0045BB60 8B450C                  mov eax, dword ptr [ebp+0C]
:0045BB63 8945F0                  mov dword ptr [ebp-10], eax
:0045BB66 837DF005                cmp dword ptr [ebp-10], 00000005
:0045BB6A 7719                    ja 0045BB85
:0045BB6C 837DF005                cmp dword ptr [ebp-10], 00000005
:0045BB70 0F841D020000            je 0045BD93
:0045BB76 837DF002                cmp dword ptr [ebp-10], 00000002
:0045BB7A 0F844C020000            je 0045BDCC
:0045BB80 E95D050000              jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB6A(C)
|
:0045BB85 837DF02B                cmp dword ptr [ebp-10], 0000002B
:0045BB89 7723                    ja 0045BBAE
:0045BB8B 837DF02B                cmp dword ptr [ebp-10], 0000002B
:0045BB8F 0F8404040000            je 0045BF99
:0045BB95 837DF00F                cmp dword ptr [ebp-10], 0000000F
:0045BB99 0F847B020000            je 0045BE1A
:0045BB9F 837DF010                cmp dword ptr [ebp-10], 00000010
:0045BBA3 0F8460020000            je 0045BE09
:0045BBA9 E934050000              jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB89(C)
|
:0045BBAE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045BBB1 83E92C                  sub ecx, 0000002C
:0045BBB4 894DF0                  mov dword ptr [ebp-10], ecx
:0045BBB7 817DF0E7000000          cmp dword ptr [ebp-10], 000000E7
:0045BBBE 0F871E050000            ja 0045C0E2
:0045BBC4 8B45F0                  mov eax, dword ptr [ebp-10]
:0045BBC7 33D2                    xor edx, edx
:0045BBC9 8A9002C14500            mov dl, byte ptr [eax+0045C102]
:0045BBCF FF2495EAC04500          jmp dword ptr [4*edx+0045C0EA]
:0045BBD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BBD9 51                      push ecx
:0045BBDA E853080000              call 0045C432
:0045BBDF 83C404                  add esp, 00000004
:0045BBE2 A350DE4700              mov dword ptr [0047DE50], eax
:0045BBE7 833D50DE4700FF          cmp dword ptr [0047DE50], FFFFFFFF
:0045BBEE 7413                    je 0045BC03
:0045BBF0 8B1550DE4700            mov edx, dword ptr [0047DE50]
:0045BBF6 52                      push edx
:0045BBF7 8B4508                  mov eax, dword ptr [ebp+08]
:0045BBFA 50                      push eax
:0045BBFB E89D0D0000              call 0045C99D
:0045BC00 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BBEE(C)
|
:0045BC03 6A00                    push 00000000
:0045BC05 68E0010000              push 000001E0
:0045BC0A 6880020000              push 00000280
:0045BC0F 6A01                    push 00000001

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0045BC11 FF1578874B00            Call dword ptr [004B8778]
:0045BC17 2DE0010000              sub eax, 000001E0
:0045BC1C 99                      cdq
:0045BC1D 2BC2                    sub eax, edx
:0045BC1F D1F8                    sar eax, 1
:0045BC21 50                      push eax
:0045BC22 6A00                    push 00000000

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0045BC24 FF1578874B00            Call dword ptr [004B8778]
:0045BC2A 2D80020000              sub eax, 00000280
:0045BC2F 99                      cdq
:0045BC30 2BC2                    sub eax, edx
:0045BC32 D1F8                    sar eax, 1
:0045BC34 50                      push eax
:0045BC35 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BC38 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045BC39 FF15FC864B00            Call dword ptr [004B86FC]
:0045BC3F 6889000000              push 00000089
:0045BC44 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0045BC4A 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045BC4B FF15E8864B00            Call dword ptr [004B86E8]
:0045BC51 50                      push eax
:0045BC52 6ADE                    push FFFFFFDE
:0045BC54 8B4508                  mov eax, dword ptr [ebp+08]
:0045BC57 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:0045BC58 FF15A0874B00            Call dword ptr [004B87A0]
:0045BC5E B9C8E24A00              mov ecx, 004AE2C8
:0045BC63 E84837FBFF              call 0040F3B0
:0045BC68 25FF000000              and eax, 000000FF
:0045BC6D 85C0                    test eax, eax
:0045BC6F 7510                    jne 0045BC81
:0045BC71 6A00                    push 00000000
:0045BC73 6A01                    push 00000001
:0045BC75 6A6F                    push 0000006F
:0045BC77 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BC7A 51                      push ecx

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:0045BC7B FF1594864B00            Call dword ptr [004B8694]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BC6F(C)
|
:0045BC81 B801000000              mov eax, 00000001
:0045BC86 E959040000              jmp 0045C0E4
:0045BC8B 8B5508                  mov edx, dword ptr [ebp+08]
:0045BC8E 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0045BC8F FF15E0864B00            Call dword ptr [004B86E0]
:0045BC95 85C0                    test eax, eax
:0045BC97 0F84F1000000            je 0045BD8E
:0045BC9D 6A6F                    push 0000006F
:0045BC9F 8B4508                  mov eax, dword ptr [ebp+08]
:0045BCA2 50                      push eax

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:0045BCA3 FF1504874B00            Call dword ptr [004B8704]
:0045BCA9 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"NХ浹ڧaC"
                                  |
:0045BCAB 6888DF4700              push 0047DF88

* Possible StringData Ref from Data Obj ->"}ZN@㪺"
                                  |
:0045BCB0 6898DF4700              push 0047DF98

* Possible StringData Ref from Data Obj ->"HDA "
                                  |
:0045BCB5 68ACDF4700              push 0047DFAC
:0045BCBA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BCBD 51                      push ecx
:0045BCBE E88CF9FFFF              call 0045B64F
:0045BCC3 83C414                  add esp, 00000014
:0045BCC6 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"M@C"
                                  |
:0045BCC8 68B8DF4700              push 0047DFB8

* Possible StringData Ref from Data Obj ->"ܷQ}Z"
                                  |
:0045BCCD 68C4DF4700              push 0047DFC4

* Possible StringData Ref from Data Obj ->"qU@"
                                  |
:0045BCD2 68D8DF4700              push 0047DFD8
:0045BCD7 8B5508                  mov edx, dword ptr [ebp+08]
:0045BCDA 52                      push edx
:0045BCDB E86FF9FFFF              call 0045B64F
:0045BCE0 83C414                  add esp, 00000014
:0045BCE3 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"WN}C"
                                  |
:0045BCE5 68ECDF4700              push 0047DFEC

* Possible StringData Ref from Data Obj ->"ŦsA"
                                  |
:0045BCEA 68FCDF4700              push 0047DFFC

* Possible StringData Ref from Data Obj ->"pGU}G"
                                  |
:0045BCEF 6808E04700              push 0047E008
:0045BCF4 8B4508                  mov eax, dword ptr [ebp+08]
:0045BCF7 50                      push eax
:0045BCF8 E852F9FFFF              call 0045B64F
:0045BCFD 83C414                  add esp, 00000014
:0045BD00 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"Ъ`NC"
                                  |
:0045BD02 681CE04700              push 0047E01C

* Possible StringData Ref from Data Obj ->"MڪޯA"
                                  |
:0045BD07 6828E04700              push 0047E028

* Possible StringData Ref from Data Obj ->"}ݭnO"
                                  |
:0045BD0C 6838E04700              push 0047E038
:0045BD11 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BD14 51                      push ecx
:0045BD15 E835F9FFFF              call 0045B64F
:0045BD1A 83C414                  add esp, 00000014
:0045BD1D 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"pڪ޳NȡC"
                                  |
:0045BD1F 6848E04700              push 0047E048

* Possible StringData Ref from Data Obj ->"ܪƦr"
                                  |
:0045BD24 685CE04700              push 0047E05C

* Possible StringData Ref from Data Obj ->"Wu޳NvU"
                                  |
:0045BD29 686CE04700              push 0047E06C
:0045BD2E 8B5508                  mov edx, dword ptr [ebp+08]
:0045BD31 52                      push edx
:0045BD32 E818F9FFFF              call 0045B64F
:0045BD37 83C414                  add esp, 00000014
:0045BD3A 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"nFC"
                                  |
:0045BD3C 6880E04700              push 0047E080

* Possible StringData Ref from Data Obj ->"KLk}X"
                                  |
:0045BD41 688CE04700              push 0047E08C

* Possible StringData Ref from Data Obj ->"pG޳NȤӧCA"
                                  |
:0045BD46 689CE04700              push 0047E09C
:0045BD4B 8B4508                  mov eax, dword ptr [ebp+08]
:0045BD4E 50                      push eax
:0045BD4F E8FBF8FFFF              call 0045B64F
:0045BD54 83C414                  add esp, 00000014
:0045BD57 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"PtΪFC"
                                  |
:0045BD59 68B0E04700              push 0047E0B0

* Possible StringData Ref from Data Obj ->"ڧ}X"
                                  |
:0045BD5E 68C0E04700              push 0047E0C0

* Possible StringData Ref from Data Obj ->"pGnA"
                                  |
:0045BD63 68D0E04700              push 0047E0D0
:0045BD68 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BD6B 51                      push ecx
:0045BD6C E8DEF8FFFF              call 0045B64F
:0045BD71 83C414                  add esp, 00000014
:0045BD74 6A01                    push 00000001
:0045BD76 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ЫܡC"
                                  |
:0045BD78 68E0E04700              push 0047E0E0

* Possible StringData Ref from Data Obj ->"naAQ}H"
                                  |
:0045BD7D 68ECE04700              push 0047E0EC
:0045BD82 8B5508                  mov edx, dword ptr [ebp+08]
:0045BD85 52                      push edx
:0045BD86 E8C4F8FFFF              call 0045B64F
:0045BD8B 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BC97(C)
|
:0045BD8E E94F030000              jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB70(C)
|
:0045BD93 8B4514                  mov eax, dword ptr [ebp+14]
:0045BD96 25FFFF0000              and eax, 0000FFFF
:0045BD9B 8945FC                  mov dword ptr [ebp-04], eax
:0045BD9E 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045BDA1 C1E910                  shr ecx, 10
:0045BDA4 81E1FFFF0000            and ecx, 0000FFFF
:0045BDAA 81E1FFFF0000            and ecx, 0000FFFF
:0045BDB0 894DF8                  mov dword ptr [ebp-08], ecx
:0045BDB3 8B55F8                  mov edx, dword ptr [ebp-08]
:0045BDB6 52                      push edx
:0045BDB7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045BDBA 50                      push eax
:0045BDBB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BDBE 51                      push ecx
:0045BDBF E8D1040000              call 0045C295
:0045BDC4 83C40C                  add esp, 0000000C
:0045BDC7 E916030000              jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB7A(C)
|
:0045BDCC B9C8E24A00              mov ecx, 004AE2C8
:0045BDD1 E8DA35FBFF              call 0040F3B0
:0045BDD6 25FF000000              and eax, 000000FF
:0045BDDB 85C0                    test eax, eax
:0045BDDD 750C                    jne 0045BDEB
:0045BDDF 6A6F                    push 0000006F
:0045BDE1 8B5508                  mov edx, dword ptr [ebp+08]
:0045BDE4 52                      push edx

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:0045BDE5 FF1504874B00            Call dword ptr [004B8704]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BDDD(C)
|
:0045BDEB 68580C4B00              push 004B0C58
:0045BDF0 8B4508                  mov eax, dword ptr [ebp+08]
:0045BDF3 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0045BDF4 FF1558874B00            Call dword ptr [004B8758]
:0045BDFA B9980B4B00              mov ecx, 004B0B98
:0045BDFF E826EAFFFF              call 0045A82A
:0045BE04 E9D9020000              jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BBA3(C)
|
:0045BE09 6A00                    push 00000000
:0045BE0B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BE0E 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045BE0F FF15B0874B00            Call dword ptr [004B87B0]
:0045BE15 E9C8020000              jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB99(C)
|
:0045BE1A 6842010000              push 00000142
:0045BE1F 8B5508                  mov edx, dword ptr [ebp+08]
:0045BE22 52                      push edx
:0045BE23 E8C6EFFFFF              call 0045ADEE
:0045BE28 83C408                  add esp, 00000008
:0045BE2B 68AE050000              push 000005AE
:0045BE30 8B4508                  mov eax, dword ptr [ebp+08]
:0045BE33 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BE34 FF15AC864B00            Call dword ptr [004B86AC]
:0045BE3A 50                      push eax
:0045BE3B E884150000              call 0045D3C4
:0045BE40 83C404                  add esp, 00000004
:0045BE43 6842010000              push 00000142
:0045BE48 6870050000              push 00000570
:0045BE4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BE50 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BE51 FF15AC864B00            Call dword ptr [004B86AC]
:0045BE57 50                      push eax
:0045BE58 E8E5150000              call 0045D442
:0045BE5D 83C408                  add esp, 00000008
:0045BE60 6845010000              push 00000145
:0045BE65 6871050000              push 00000571
:0045BE6A 8B5508                  mov edx, dword ptr [ebp+08]
:0045BE6D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BE6E FF15AC864B00            Call dword ptr [004B86AC]
:0045BE74 50                      push eax
:0045BE75 E8C8150000              call 0045D442
:0045BE7A 83C408                  add esp, 00000008
:0045BE7D 683F010000              push 0000013F
:0045BE82 6873050000              push 00000573
:0045BE87 8B4508                  mov eax, dword ptr [ebp+08]
:0045BE8A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BE8B FF15AC864B00            Call dword ptr [004B86AC]
:0045BE91 50                      push eax
:0045BE92 E8AB150000              call 0045D442
:0045BE97 83C408                  add esp, 00000008
:0045BE9A 6843010000              push 00000143
:0045BE9F 6874050000              push 00000574
:0045BEA4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BEA7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BEA8 FF15AC864B00            Call dword ptr [004B86AC]
:0045BEAE 50                      push eax
:0045BEAF E88E150000              call 0045D442
:0045BEB4 83C408                  add esp, 00000008
:0045BEB7 6841010000              push 00000141
:0045BEBC 6875050000              push 00000575
:0045BEC1 8B5508                  mov edx, dword ptr [ebp+08]
:0045BEC4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BEC5 FF15AC864B00            Call dword ptr [004B86AC]
:0045BECB 50                      push eax
:0045BECC E871150000              call 0045D442
:0045BED1 83C408                  add esp, 00000008
:0045BED4 6847010000              push 00000147
:0045BED9 6876050000              push 00000576
:0045BEDE 8B4508                  mov eax, dword ptr [ebp+08]
:0045BEE1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BEE2 FF15AC864B00            Call dword ptr [004B86AC]
:0045BEE8 50                      push eax
:0045BEE9 E854150000              call 0045D442
:0045BEEE 83C408                  add esp, 00000008
:0045BEF1 6840010000              push 00000140
:0045BEF6 6877050000              push 00000577
:0045BEFB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BEFE 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BEFF FF15AC864B00            Call dword ptr [004B86AC]
:0045BF05 50                      push eax
:0045BF06 E837150000              call 0045D442
:0045BF0B 83C408                  add esp, 00000008
:0045BF0E 6846010000              push 00000146
:0045BF13 6878050000              push 00000578
:0045BF18 8B5508                  mov edx, dword ptr [ebp+08]
:0045BF1B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BF1C FF15AC864B00            Call dword ptr [004B86AC]
:0045BF22 50                      push eax
:0045BF23 E81A150000              call 0045D442
:0045BF28 83C408                  add esp, 00000008
:0045BF2B 6895050000              push 00000595
:0045BF30 8B4508                  mov eax, dword ptr [ebp+08]
:0045BF33 50                      push eax
:0045BF34 E84D1EFCFF              call 0041DD86
:0045BF39 83C408                  add esp, 00000008
:0045BF3C E9A1010000              jmp 0045C0E2
:0045BF41 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045BF44 894DF4                  mov dword ptr [ebp-0C], ecx
:0045BF47 817DF4AF050000          cmp dword ptr [ebp-0C], 000005AF
:0045BF4E 7515                    jne 0045BF65

* Possible StringData Ref from Data Obj ->""
                                  |
:0045BF50 6850DE4700              push 0047DE50
:0045BF55 8B5514                  mov edx, dword ptr [ebp+14]
:0045BF58 52                      push edx
:0045BF59 8B4508                  mov eax, dword ptr [ebp+08]
:0045BF5C 50                      push eax
:0045BF5D E8E9100000              call 0045D04B
:0045BF62 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BF4E(C)
|
:0045BF65 E978010000              jmp 0045C0E2
:0045BF6A 817D10AF050000          cmp dword ptr [ebp+10], 000005AF
:0045BF71 751C                    jne 0045BF8F
:0045BF73 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045BF76 51                      push ecx
:0045BF77 68AF050000              push 000005AF
:0045BF7C 8B5508                  mov edx, dword ptr [ebp+08]
:0045BF7F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BF80 FF15AC864B00            Call dword ptr [004B86AC]
:0045BF86 50                      push eax
:0045BF87 E840C4FBFF              call 004183CC
:0045BF8C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BF71(C)
|
:0045BF8F B801000000              mov eax, 00000001
:0045BF94 E94B010000              jmp 0045C0E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB8F(C)
|
:0045BF99 A150DE4700              mov eax, dword ptr [0047DE50]
:0045BF9E 50                      push eax
:0045BF9F 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045BFA2 51                      push ecx
:0045BFA3 8B5514                  mov edx, dword ptr [ebp+14]
:0045BFA6 52                      push edx
:0045BFA7 8B4508                  mov eax, dword ptr [ebp+08]
:0045BFAA 50                      push eax
:0045BFAB E8D41A0000              call 0045DA84
:0045BFB0 83C410                  add esp, 00000010
:0045BFB3 E92A010000              jmp 0045C0E2
:0045BFB8 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045BFBB 81E1FFFF0000            and ecx, 0000FFFF
:0045BFC1 894DEC                  mov dword ptr [ebp-14], ecx
:0045BFC4 837DEC09                cmp dword ptr [ebp-14], 00000009
:0045BFC8 7F15                    jg 0045BFDF
:0045BFCA 837DEC09                cmp dword ptr [ebp-14], 00000009
:0045BFCE 0F8401010000            je 0045C0D5
:0045BFD4 837DEC02                cmp dword ptr [ebp-14], 00000002
:0045BFD8 7430                    je 0045C00A
:0045BFDA E903010000              jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BFC8(C)
|
:0045BFDF 8B55EC                  mov edx, dword ptr [ebp-14]
:0045BFE2 81EA11050000            sub edx, 00000511
:0045BFE8 8955EC                  mov dword ptr [ebp-14], edx
:0045BFEB 817DEC96000000          cmp dword ptr [ebp-14], 00000096
:0045BFF2 0F87EA000000            ja 0045C0E2
:0045BFF8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045BFFB 33C0                    xor eax, eax
:0045BFFD 8A81FEC14500            mov al, byte ptr [ecx+0045C1FE]
:0045C003 FF2485EAC14500          jmp dword ptr [4*eax+0045C1EA]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BFD8(C)
|
:0045C00A 6A00                    push 00000000
:0045C00C 8B5508                  mov edx, dword ptr [ebp+08]
:0045C00F 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045C010 FF15B0874B00            Call dword ptr [004B87B0]
:0045C016 E9C7000000              jmp 0045C0E2
:0045C01B 6A01                    push 00000001
:0045C01D B9C8E24A00              mov ecx, 004AE2C8
:0045C022 E8793FFCFF              call 0041FFA0
:0045C027 85C0                    test eax, eax
:0045C029 7540                    jne 0045C06B
:0045C02B 6A01                    push 00000001
:0045C02D 6A01                    push 00000001
:0045C02F B9C8E24A00              mov ecx, 004AE2C8
:0045C034 E83740FCFF              call 00420070
:0045C039 68AF050000              push 000005AF
:0045C03E 8B4508                  mov eax, dword ptr [ebp+08]
:0045C041 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C042 FF15AC864B00            Call dword ptr [004B86AC]
:0045C048 50                      push eax
:0045C049 E867140000              call 0045D4B5
:0045C04E 83C404                  add esp, 00000004
:0045C051 6A00                    push 00000000
:0045C053 68AF050000              push 000005AF
:0045C058 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C05B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C05C FF15AC864B00            Call dword ptr [004B86AC]
:0045C062 50                      push eax
:0045C063 E8D4B0FBFF              call 0041713C
:0045C068 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C029(C)
|
:0045C06B EB75                    jmp 0045C0E2
:0045C06D 6A01                    push 00000001
:0045C06F B9C8E24A00              mov ecx, 004AE2C8
:0045C074 E8273FFCFF              call 0041FFA0
:0045C079 83F801                  cmp eax, 00000001
:0045C07C 7528                    jne 0045C0A6
:0045C07E 6A01                    push 00000001
:0045C080 6A00                    push 00000000
:0045C082 B9C8E24A00              mov ecx, 004AE2C8
:0045C087 E8E43FFCFF              call 00420070
:0045C08C 6A01                    push 00000001
:0045C08E 68AF050000              push 000005AF
:0045C093 8B5508                  mov edx, dword ptr [ebp+08]
:0045C096 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C097 FF15AC864B00            Call dword ptr [004B86AC]
:0045C09D 50                      push eax
:0045C09E E899B0FBFF              call 0041713C
:0045C0A3 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C07C(C)
|
:0045C0A6 EB3A                    jmp 0045C0E2
:0045C0A8 6A00                    push 00000000
:0045C0AA A150DE4700              mov eax, dword ptr [0047DE50]
:0045C0AF 50                      push eax
:0045C0B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C0B3 51                      push ecx
:0045C0B4 E820140000              call 0045D4D9
:0045C0B9 83C40C                  add esp, 0000000C
:0045C0BC EB24                    jmp 0045C0E2
:0045C0BE 6A01                    push 00000001
:0045C0C0 8B1550DE4700            mov edx, dword ptr [0047DE50]
:0045C0C6 52                      push edx
:0045C0C7 8B4508                  mov eax, dword ptr [ebp+08]
:0045C0CA 50                      push eax
:0045C0CB E809140000              call 0045D4D9
:0045C0D0 83C40C                  add esp, 0000000C
:0045C0D3 EB0D                    jmp 0045C0E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BFCE(C)
|
:0045C0D5 683E080000              push 0000083E
:0045C0DA E883780000              call 00463962
:0045C0DF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045BB80(U), :0045BBA9(U), :0045BBBE(C), :0045BD8E(U), :0045BDC7(U)
|:0045BE04(U), :0045BE15(U), :0045BF3C(U), :0045BF65(U), :0045BFB3(U)
|:0045BFDA(U), :0045BFF2(C), :0045C016(U), :0045C06B(U), :0045C0A6(U)
|:0045C0BC(U), :0045C0D3(U)
|
:0045C0E2 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045BC86(U), :0045BF94(U)
|
:0045C0E4 8BE5                    mov esp, ebp
:0045C0E6 5D                      pop ebp
:0045C0E7 C21000                  ret 0010



:0045C0EA 6ABF4500                DWORD 0045BF6A
:0045C0EE 41BF4500                DWORD 0045BF41
:0045C0F2 D6BB4500                DWORD 0045BBD6
:0045C0F6 B8BF4500                DWORD 0045BFB8
:0045C0FA 8BBC4500                DWORD 0045BC8B
:0045C0FE E2C04500                DWORD 0045C0E2


:0045C102 000505050505            add byte ptr [05050505], al
:0045C108 0505050505              add eax, 05050505
:0045C10D 0505050505              add eax, 05050505
:0045C112 0505050505              add eax, 05050505
:0045C117 0505050505              add eax, 05050505
:0045C11C 0505050505              add eax, 05050505
:0045C121 0505050105              add eax, 05010505
:0045C126 0505050505              add eax, 05050505
:0045C12B 0505050505              add eax, 05050505
:0045C130 0505050505              add eax, 05050505
:0045C135 0505050505              add eax, 05050505
:0045C13A 0505050505              add eax, 05050505
:0045C13F 0505050505              add eax, 05050505
:0045C144 0505050505              add eax, 05050505
:0045C149 0505050505              add eax, 05050505
:0045C14E 0505050505              add eax, 05050505
:0045C153 0505050505              add eax, 05050505
:0045C158 0505050505              add eax, 05050505
:0045C15D 0505050505              add eax, 05050505
:0045C162 0505050505              add eax, 05050505
:0045C167 0505050505              add eax, 05050505
:0045C16C 0505050505              add eax, 05050505
:0045C171 0505050505              add eax, 05050505
:0045C176 0505050505              add eax, 05050505
:0045C17B 0505050505              add eax, 05050505
:0045C180 0505050505              add eax, 05050505
:0045C185 0505050505              add eax, 05050505
:0045C18A 0505050505              add eax, 05050505
:0045C18F 0505050505              add eax, 05050505
:0045C194 0505050505              add eax, 05050505
:0045C199 0505050505              add eax, 05050505
:0045C19E 0505050505              add eax, 05050505
:0045C1A3 0505050505              add eax, 05050505
:0045C1A8 0505050505              add eax, 05050505
:0045C1AD 0505050505              add eax, 05050505
:0045C1B2 0505050505              add eax, 05050505
:0045C1B7 0505050505              add eax, 05050505
:0045C1BC 0505050505              add eax, 05050505
:0045C1C1 0505050505              add eax, 05050505
:0045C1C6 0505050505              add eax, 05050505
:0045C1CB 0505050505              add eax, 05050505
:0045C1D0 0505050505              add eax, 05050505
:0045C1D5 0505050505              add eax, 05050505
:0045C1DA 0505050505              add eax, 05050505
:0045C1DF 0505050505              add eax, 05050505
:0045C1E4 0505020305              add eax, 05030205
:0045C1E9 041B                    add al, 1B
:0045C1EB C045006D                rol byte ptr [ebp+00], 6D
:0045C1EF C04500BE                rol byte ptr [ebp+00], BE
:0045C1F3 C04500A8                rol byte ptr [ebp+00], A8
:0045C1F7 C04500E2                rol byte ptr [ebp+00], E2
:0045C1FB C0450000                rol byte ptr [ebp+00], 00
:0045C1FF 010404                  add dword ptr [esp+eax], eax
:0045C202 0404                    add al, 04
:0045C204 0404                    add al, 04
:0045C206 0404                    add al, 04
:0045C208 0404                    add al, 04
:0045C20A 0404                    add al, 04
:0045C20C 0404                    add al, 04
:0045C20E 0404                    add al, 04
:0045C210 0404                    add al, 04
:0045C212 0404                    add al, 04
:0045C214 0404                    add al, 04
:0045C216 0404                    add al, 04
:0045C218 0404                    add al, 04
:0045C21A 0404                    add al, 04
:0045C21C 0404                    add al, 04
:0045C21E 0404                    add al, 04
:0045C220 0404                    add al, 04
:0045C222 0404                    add al, 04
:0045C224 0404                    add al, 04
:0045C226 0404                    add al, 04
:0045C228 0404                    add al, 04
:0045C22A 0404                    add al, 04
:0045C22C 0404                    add al, 04
:0045C22E 0404                    add al, 04
:0045C230 0404                    add al, 04
:0045C232 0404                    add al, 04
:0045C234 0404                    add al, 04
:0045C236 0404                    add al, 04
:0045C238 0404                    add al, 04
:0045C23A 0404                    add al, 04
:0045C23C 0404                    add al, 04
:0045C23E 0404                    add al, 04
:0045C240 0404                    add al, 04
:0045C242 0404                    add al, 04
:0045C244 0404                    add al, 04
:0045C246 0404                    add al, 04
:0045C248 0404                    add al, 04
:0045C24A 0404                    add al, 04
:0045C24C 0404                    add al, 04
:0045C24E 0404                    add al, 04
:0045C250 0404                    add al, 04
:0045C252 0404                    add al, 04
:0045C254 0404                    add al, 04
:0045C256 0404                    add al, 04
:0045C258 0404                    add al, 04
:0045C25A 0404                    add al, 04
:0045C25C 0404                    add al, 04
:0045C25E 0404                    add al, 04
:0045C260 0404                    add al, 04
:0045C262 0404                    add al, 04
:0045C264 0404                    add al, 04
:0045C266 0404                    add al, 04
:0045C268 0404                    add al, 04
:0045C26A 0404                    add al, 04
:0045C26C 0404                    add al, 04
:0045C26E 0404                    add al, 04
:0045C270 0404                    add al, 04
:0045C272 0404                    add al, 04
:0045C274 0404                    add al, 04
:0045C276 0404                    add al, 04
:0045C278 0404                    add al, 04
:0045C27A 0404                    add al, 04
:0045C27C 0404                    add al, 04
:0045C27E 0404                    add al, 04
:0045C280 0404                    add al, 04
:0045C282 0404                    add al, 04
:0045C284 0404                    add al, 04
:0045C286 0404                    add al, 04
:0045C288 020404                  add al, byte ptr [esp+eax]
:0045C28B 0404                    add al, 04
:0045C28D 0404                    add al, 04
:0045C28F 0404                    add al, 04
:0045C291 0404                    add al, 04
:0045C293 0403                    add al, 03

* Referenced by a CALL at Address:
|:0045BDBF   
|
:0045C295 55                      push ebp
:0045C296 8BEC                    mov ebp, esp
:0045C298 83EC14                  sub esp, 00000014
:0045C29B C745FC01000000          mov [ebp-04], 00000001
:0045C2A2 EB09                    jmp 0045C2AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C375(U)
|
:0045C2A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C2A7 83C001                  add eax, 00000001
:0045C2AA 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C2A2(U)
|
:0045C2AD 837DFC08                cmp dword ptr [ebp-04], 00000008
:0045C2B1 0F8DC3000000            jnl 0045C37A
:0045C2B7 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0045C2BA 51                      push ecx
:0045C2BB 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C2BE 6BD214                  imul edx, 00000014
:0045C2C1 8B8260D94700            mov eax, dword ptr [edx+0047D960]
:0045C2C7 50                      push eax
:0045C2C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C2CB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C2CC FF15AC864B00            Call dword ptr [004B86AC]
:0045C2D2 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045C2D3 FF15C8864B00            Call dword ptr [004B86C8]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045C2D9 6A09                    push 00000009
:0045C2DB 6A00                    push 00000000
:0045C2DD 6A00                    push 00000000
:0045C2DF 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C2E2 6BD214                  imul edx, 00000014
:0045C2E5 8B8268D94700            mov eax, dword ptr [edx+0047D968]
:0045C2EB 0FAF4510                imul eax, dword ptr [ebp+10]
:0045C2EF 99                      cdq
:0045C2F0 F73D70D94700            idiv dword ptr [0047D970]
:0045C2F6 8BC8                    mov ecx, eax
:0045C2F8 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C2FB 6BD214                  imul edx, 00000014
:0045C2FE 8B8270D94700            mov eax, dword ptr [edx+0047D970]
:0045C304 0FAF4510                imul eax, dword ptr [ebp+10]
:0045C308 99                      cdq
:0045C309 F73D70D94700            idiv dword ptr [0047D970]
:0045C30F 2B45F8                  sub eax, dword ptr [ebp-08]
:0045C312 99                      cdq
:0045C313 2BC2                    sub eax, edx
:0045C315 D1F8                    sar eax, 1
:0045C317 03C8                    add ecx, eax
:0045C319 51                      push ecx
:0045C31A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C31D 6BC014                  imul eax, 00000014
:0045C320 8B8064D94700            mov eax, dword ptr [eax+0047D964]
:0045C326 0FAF450C                imul eax, dword ptr [ebp+0C]
:0045C32A 99                      cdq
:0045C32B F73D6CD94700            idiv dword ptr [0047D96C]
:0045C331 8BC8                    mov ecx, eax
:0045C333 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C336 6BD214                  imul edx, 00000014
:0045C339 8B826CD94700            mov eax, dword ptr [edx+0047D96C]
:0045C33F 0FAF450C                imul eax, dword ptr [ebp+0C]
:0045C343 99                      cdq
:0045C344 F73D6CD94700            idiv dword ptr [0047D96C]
:0045C34A 2B45F4                  sub eax, dword ptr [ebp-0C]
:0045C34D 99                      cdq
:0045C34E 2BC2                    sub eax, edx
:0045C350 D1F8                    sar eax, 1
:0045C352 03C8                    add ecx, eax
:0045C354 51                      push ecx
:0045C355 6A00                    push 00000000
:0045C357 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C35A 6BC014                  imul eax, 00000014
:0045C35D 8B8860D94700            mov ecx, dword ptr [eax+0047D960]
:0045C363 51                      push ecx
:0045C364 8B5508                  mov edx, dword ptr [ebp+08]
:0045C367 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C368 FF15AC864B00            Call dword ptr [004B86AC]
:0045C36E 50                      push eax

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:0045C36F FF15AC874B00            Call dword ptr [004B87AC]
:0045C375 E92AFFFFFF              jmp 0045C2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C2B1(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:0045C37A C745FC08000000          mov [ebp-04], 00000008
:0045C381 EB09                    jmp 0045C38C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C416(U)
|
:0045C383 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C386 83C001                  add eax, 00000001
:0045C389 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C381(U)
|
:0045C38C 837DFC3F                cmp dword ptr [ebp-04], 0000003F
:0045C390 0F8385000000            jnb 0045C41B
:0045C396 6A00                    push 00000000
:0045C398 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C39B 6BC914                  imul ecx, 00000014
:0045C39E 8B8170D94700            mov eax, dword ptr [ecx+0047D970]
:0045C3A4 0FAF4510                imul eax, dword ptr [ebp+10]
:0045C3A8 99                      cdq
:0045C3A9 F73D70D94700            idiv dword ptr [0047D970]
:0045C3AF 50                      push eax
:0045C3B0 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C3B3 6BD214                  imul edx, 00000014
:0045C3B6 8B826CD94700            mov eax, dword ptr [edx+0047D96C]
:0045C3BC 0FAF450C                imul eax, dword ptr [ebp+0C]
:0045C3C0 99                      cdq
:0045C3C1 F73D6CD94700            idiv dword ptr [0047D96C]
:0045C3C7 50                      push eax
:0045C3C8 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C3CB 6BC014                  imul eax, 00000014
:0045C3CE 8B8068D94700            mov eax, dword ptr [eax+0047D968]
:0045C3D4 0FAF4510                imul eax, dword ptr [ebp+10]
:0045C3D8 99                      cdq
:0045C3D9 F73D70D94700            idiv dword ptr [0047D970]
:0045C3DF 50                      push eax
:0045C3E0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C3E3 6BC914                  imul ecx, 00000014
:0045C3E6 8B8164D94700            mov eax, dword ptr [ecx+0047D964]
:0045C3EC 0FAF450C                imul eax, dword ptr [ebp+0C]
:0045C3F0 99                      cdq
:0045C3F1 F73D6CD94700            idiv dword ptr [0047D96C]
:0045C3F7 50                      push eax
:0045C3F8 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C3FB 6BD214                  imul edx, 00000014
:0045C3FE 8B8260D94700            mov eax, dword ptr [edx+0047D960]
:0045C404 50                      push eax
:0045C405 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C408 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C409 FF15AC864B00            Call dword ptr [004B86AC]
:0045C40F 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045C410 FF15FC864B00            Call dword ptr [004B86FC]
:0045C416 E968FFFFFF              jmp 0045C383

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C390(C)
|
:0045C41B 6801010000              push 00000101
:0045C420 6A00                    push 00000000
:0045C422 6A00                    push 00000000
:0045C424 8B5508                  mov edx, dword ptr [ebp+08]
:0045C427 52                      push edx

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0045C428 FF1590874B00            Call dword ptr [004B8790]
:0045C42E 8BE5                    mov esp, ebp
:0045C430 5D                      pop ebp
:0045C431 C3                      ret



* Referenced by a CALL at Address:
|:0045BBDA   
|
:0045C432 55                      push ebp
:0045C433 8BEC                    mov ebp, esp
:0045C435 51                      push ecx
:0045C436 6A01                    push 00000001
:0045C438 B9C8E24A00              mov ecx, 004AE2C8
:0045C43D E85E3BFCFF              call 0041FFA0
:0045C442 85C0                    test eax, eax
:0045C444 743B                    je 0045C481
:0045C446 6A00                    push 00000000
:0045C448 6A01                    push 00000001
:0045C44A 68F1000000              push 000000F1
:0045C44F 6811050000              push 00000511
:0045C454 8B4508                  mov eax, dword ptr [ebp+08]
:0045C457 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C458 FF15AC864B00            Call dword ptr [004B86AC]
:0045C45E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C45F FF15D8864B00            Call dword ptr [004B86D8]
:0045C465 6A00                    push 00000000
:0045C467 68AF050000              push 000005AF
:0045C46C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C46F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C470 FF15AC864B00            Call dword ptr [004B86AC]
:0045C476 50                      push eax
:0045C477 E8C0ACFBFF              call 0041713C
:0045C47C 83C408                  add esp, 00000008
:0045C47F EB39                    jmp 0045C4BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C444(C)
|
:0045C481 6A00                    push 00000000
:0045C483 6A01                    push 00000001
:0045C485 68F1000000              push 000000F1
:0045C48A 6812050000              push 00000512
:0045C48F 8B5508                  mov edx, dword ptr [ebp+08]
:0045C492 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C493 FF15AC864B00            Call dword ptr [004B86AC]
:0045C499 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C49A FF15D8864B00            Call dword ptr [004B86D8]
:0045C4A0 6A01                    push 00000001
:0045C4A2 68AF050000              push 000005AF
:0045C4A7 8B4508                  mov eax, dword ptr [ebp+08]
:0045C4AA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C4AB FF15AC864B00            Call dword ptr [004B86AC]
:0045C4B1 50                      push eax
:0045C4B2 E885ACFBFF              call 0041713C
:0045C4B7 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C47F(U)
|
:0045C4BA 686C050000              push 0000056C
:0045C4BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C4C2 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C4C3 FF15AC864B00            Call dword ptr [004B86AC]
:0045C4C9 50                      push eax
:0045C4CA B9980B4B00              mov ecx, 004B0B98
:0045C4CF E811E3FFFF              call 0045A7E5
:0045C4D4 8B5508                  mov edx, dword ptr [ebp+08]
:0045C4D7 52                      push edx
:0045C4D8 E819000000              call 0045C4F6
:0045C4DD 83C404                  add esp, 00000004
:0045C4E0 8945FC                  mov dword ptr [ebp-04], eax
:0045C4E3 8B4508                  mov eax, dword ptr [ebp+08]
:0045C4E6 50                      push eax
:0045C4E7 E8C0020000              call 0045C7AC
:0045C4EC 83C404                  add esp, 00000004
:0045C4EF 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C4F2 8BE5                    mov esp, ebp
:0045C4F4 5D                      pop ebp
:0045C4F5 C3                      ret



* Referenced by a CALL at Address:
|:0045C4D8   
|
:0045C4F6 55                      push ebp
:0045C4F7 8BEC                    mov ebp, esp
:0045C4F9 83EC30                  sub esp, 00000030
:0045C4FC 68AF050000              push 000005AF
:0045C501 8B4508                  mov eax, dword ptr [ebp+08]
:0045C504 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C505 FF15AC864B00            Call dword ptr [004B86AC]
:0045C50B 8945F8                  mov dword ptr [ebp-08], eax
:0045C50E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045C511 51                      push ecx
:0045C512 E874000000              call 0045C58B
:0045C517 83C404                  add esp, 00000004
:0045C51A 8B55F8                  mov edx, dword ptr [ebp-08]
:0045C51D 52                      push edx
:0045C51E E84C020000              call 0045C76F
:0045C523 83C404                  add esp, 00000004
:0045C526 8B45F8                  mov eax, dword ptr [ebp-08]
:0045C529 50                      push eax
:0045C52A E806010000              call 0045C635
:0045C52F 83C404                  add esp, 00000004
:0045C532 8945FC                  mov dword ptr [ebp-04], eax
:0045C535 68BDBDBD02              push 02BDBDBD
:0045C53A 6A00                    push 00000000
:0045C53C 6801100000              push 00001001
:0045C541 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045C544 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C545 FF15D8864B00            Call dword ptr [004B86D8]
:0045C54B 68BDBDBD02              push 02BDBDBD
:0045C550 6A00                    push 00000000
:0045C552 6826100000              push 00001026
:0045C557 8B55F8                  mov edx, dword ptr [ebp-08]
:0045C55A 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C55B FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045C561 C745E003000000          mov [ebp-20], 00000003

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045C568 C745DC03000000          mov [ebp-24], 00000003
:0045C56F 8D45D0                  lea eax, dword ptr [ebp-30]
:0045C572 50                      push eax
:0045C573 6A00                    push 00000000
:0045C575 682B100000              push 0000102B
:0045C57A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045C57D 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C57E FF15D8864B00            Call dword ptr [004B86D8]
:0045C584 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C587 8BE5                    mov esp, ebp
:0045C589 5D                      pop ebp
:0045C58A C3                      ret



* Referenced by a CALL at Address:
|:0045C512   
|
:0045C58B 55                      push ebp
:0045C58C 8BEC                    mov ebp, esp
:0045C58E 83EC2C                  sub esp, 0000002C
:0045C591 8D45E0                  lea eax, dword ptr [ebp-20]
:0045C594 50                      push eax
:0045C595 E869000000              call 0045C603
:0045C59A 83C404                  add esp, 00000004

* Possible StringData Ref from Data Obj ->"_W"
                                  |
:0045C59D C745D800E14700          mov [ebp-28], 0047E100

* Possible StringData Ref from Data Obj ->"ZN"
                                  |
:0045C5A4 C745DC08E14700          mov [ebp-24], 0047E108
:0045C5AB C745D400000000          mov [ebp-2C], 00000000
:0045C5B2 EB09                    jmp 0045C5BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C5FD(U)
|
:0045C5B4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045C5B7 83C101                  add ecx, 00000001
:0045C5BA 894DD4                  mov dword ptr [ebp-2C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C5B2(U)
|
:0045C5BD 837DD402                cmp dword ptr [ebp-2C], 00000002
:0045C5C1 7D3C                    jge 0045C5FF
:0045C5C3 8B55D4                  mov edx, dword ptr [ebp-2C]
:0045C5C6 F7DA                    neg edx
:0045C5C8 1BD2                    sbb edx, edx
:0045C5CA 83E2EC                  and edx, FFFFFFEC
:0045C5CD 81C28C000000            add edx, 0000008C
:0045C5D3 8955E8                  mov dword ptr [ebp-18], edx
:0045C5D6 8B45D4                  mov eax, dword ptr [ebp-2C]
:0045C5D9 8945F4                  mov dword ptr [ebp-0C], eax
:0045C5DC 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045C5DF 8B548DD8                mov edx, dword ptr [ebp+4*ecx-28]
:0045C5E3 8955EC                  mov dword ptr [ebp-14], edx
:0045C5E6 8D45E0                  lea eax, dword ptr [ebp-20]
:0045C5E9 50                      push eax
:0045C5EA 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045C5ED 51                      push ecx
:0045C5EE 681B100000              push 0000101B
:0045C5F3 8B5508                  mov edx, dword ptr [ebp+08]
:0045C5F6 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C5F7 FF15D8864B00            Call dword ptr [004B86D8]
:0045C5FD EBB5                    jmp 0045C5B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C5C1(C)
|
:0045C5FF 8BE5                    mov esp, ebp
:0045C601 5D                      pop ebp
:0045C602 C3                      ret



* Referenced by a CALL at Address:
|:0045C595   
|
:0045C603 55                      push ebp
:0045C604 8BEC                    mov ebp, esp
:0045C606 6A20                    push 00000020
:0045C608 6A00                    push 00000000
:0045C60A 8B4508                  mov eax, dword ptr [ebp+08]
:0045C60D 50                      push eax
:0045C60E E84D130100              call 0046D960
:0045C613 83C40C                  add esp, 0000000C
:0045C616 8B4D08                  mov ecx, dword ptr [ebp+08]

* Possible Reference to String Resource ID=00015: ""
                                  |
:0045C619 C7010F000000            mov dword ptr [ecx], 0000000F
:0045C61F 8B5508                  mov edx, dword ptr [ebp+08]
:0045C622 C7420400000000          mov [edx+04], 00000000
:0045C629 8B4508                  mov eax, dword ptr [ebp+08]
:0045C62C C7401020000000          mov [eax+10], 00000020
:0045C633 5D                      pop ebp
:0045C634 C3                      ret



* Referenced by a CALL at Addresses:
|:0045C52A   , :0045D4CF   
|
:0045C635 55                      push ebp
:0045C636 8BEC                    mov ebp, esp
:0045C638 83EC40                  sub esp, 00000040
:0045C63B 6A28                    push 00000028
:0045C63D 6A00                    push 00000000
:0045C63F 8D45CC                  lea eax, dword ptr [ebp-34]
:0045C642 50                      push eax
:0045C643 E818130100              call 0046D960
:0045C648 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00015: ""
                                  |
:0045C64B C745CC0F000000          mov [ebp-34], 0000000F
:0045C652 C745E420000000          mov [ebp-1C], 00000020
:0045C659 C745E0FFFFFFFF          mov [ebp-20], FFFFFFFF
:0045C660 C745F400000000          mov [ebp-0C], 00000000
:0045C667 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045C66E C745F800000000          mov [ebp-08], 00000000
:0045C675 EB09                    jmp 0045C680

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C763(U)
|
:0045C677 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045C67A 83C101                  add ecx, 00000001
:0045C67D 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C675(U)
|
:0045C680 837DF819                cmp dword ptr [ebp-08], 00000019
:0045C684 0F83DE000000            jnb 0045C768
:0045C68A 8B55F8                  mov edx, dword ptr [ebp-08]
:0045C68D 52                      push edx
:0045C68E E88D42FBFF              call 00410920
:0045C693 83C404                  add esp, 00000004
:0045C696 85C0                    test eax, eax
:0045C698 0F84C5000000            je 0045C763
:0045C69E C745C800000000          mov [ebp-38], 00000000
:0045C6A5 EB09                    jmp 0045C6B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C75E(U)
|
:0045C6A7 8B45C8                  mov eax, dword ptr [ebp-38]
:0045C6AA 83C001                  add eax, 00000001
:0045C6AD 8945C8                  mov dword ptr [ebp-38], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C6A5(U)
|
:0045C6B0 837DC808                cmp dword ptr [ebp-38], 00000008
:0045C6B4 0F83A9000000            jnb 0045C763
:0045C6BA 8A4DC8                  mov cl, byte ptr [ebp-38]
:0045C6BD 51                      push ecx
:0045C6BE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045C6C1 6BC970                  imul ecx, 00000070
:0045C6C4 81C198224900            add ecx, 00492298
:0045C6CA E84181FAFF              call 00404810
:0045C6CF 25FF000000              and eax, 000000FF
:0045C6D4 8945C4                  mov dword ptr [ebp-3C], eax
:0045C6D7 817DC4FF000000          cmp dword ptr [ebp-3C], 000000FF
:0045C6DE 747E                    je 0045C75E
:0045C6E0 8B55C4                  mov edx, dword ptr [ebp-3C]
:0045C6E3 52                      push edx
:0045C6E4 E88554FAFF              call 00401B6E
:0045C6E9 83C404                  add esp, 00000004
:0045C6EC 25FF000000              and eax, 000000FF
:0045C6F1 83F801                  cmp eax, 00000001
:0045C6F4 7F68                    jg 0045C75E
:0045C6F6 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0045C6F9 6BC933                  imul ecx, 00000033
:0045C6FC 81C1C8EF4800            add ecx, 0048EFC8
:0045C702 E8A97FFAFF              call 004046B0
:0045C707 25FF000000              and eax, 000000FF
:0045C70C 8945E8                  mov dword ptr [ebp-18], eax
:0045C70F 8B45F8                  mov eax, dword ptr [ebp-08]
:0045C712 25FFFF0000              and eax, 0000FFFF
:0045C717 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045C71A 81E1FFFF0000            and ecx, 0000FFFF
:0045C720 C1E110                  shl ecx, 10
:0045C723 0BC1                    or eax, ecx
:0045C725 8945C0                  mov dword ptr [ebp-40], eax
:0045C728 837DF400                cmp dword ptr [ebp-0C], 00000000
:0045C72C 7506                    jne 0045C734
:0045C72E 8B55C0                  mov edx, dword ptr [ebp-40]
:0045C731 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C72C(C)
|
:0045C734 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045C737 8945D0                  mov dword ptr [ebp-30], eax
:0045C73A 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0045C73D 894DEC                  mov dword ptr [ebp-14], ecx
:0045C740 8D55CC                  lea edx, dword ptr [ebp-34]
:0045C743 52                      push edx
:0045C744 6A00                    push 00000000
:0045C746 6807100000              push 00001007
:0045C74B 8B4508                  mov eax, dword ptr [ebp+08]
:0045C74E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C74F FF15D8864B00            Call dword ptr [004B86D8]
:0045C755 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045C758 83C101                  add ecx, 00000001
:0045C75B 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045C6DE(C), :0045C6F4(C)
|
:0045C75E E944FFFFFF              jmp 0045C6A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045C698(C), :0045C6B4(C)
|
:0045C763 E90FFFFFFF              jmp 0045C677

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C684(C)
|
:0045C768 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C76B 8BE5                    mov esp, ebp
:0045C76D 5D                      pop ebp
:0045C76E C3                      ret



* Referenced by a CALL at Address:
|:0045C51E   
|
:0045C76F 55                      push ebp
:0045C770 8BEC                    mov ebp, esp
:0045C772 B910584800              mov ecx, 00485810
:0045C777 E814A0FBFF              call 00416790
:0045C77C 50                      push eax
:0045C77D 6A00                    push 00000000
:0045C77F 6803100000              push 00001003
:0045C784 8B4508                  mov eax, dword ptr [ebp+08]
:0045C787 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C788 FF15D8864B00            Call dword ptr [004B86D8]
:0045C78E B910584800              mov ecx, 00485810
:0045C793 E80867FFFF              call 00452EA0
:0045C798 50                      push eax
:0045C799 6A01                    push 00000001
:0045C79B 6803100000              push 00001003
:0045C7A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C7A3 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045C7A4 FF15D8864B00            Call dword ptr [004B86D8]
:0045C7AA 5D                      pop ebp
:0045C7AB C3                      ret



* Referenced by a CALL at Addresses:
|:0045C4E7   , :0045D6CD   , :0045D9FB   
|
:0045C7AC 55                      push ebp
:0045C7AD 8BEC                    mov ebp, esp
:0045C7AF 6895050000              push 00000595
:0045C7B4 8B4508                  mov eax, dword ptr [ebp+08]
:0045C7B7 50                      push eax
:0045C7B8 E8200EFCFF              call 0041D5DD
:0045C7BD 83C408                  add esp, 00000008
:0045C7C0 E81CE7FFFF              call 0045AEE1
:0045C7C5 25FF000000              and eax, 000000FF
:0045C7CA 50                      push eax
:0045C7CB B9C8E24A00              mov ecx, 004AE2C8
:0045C7D0 E82B34FDFF              call 0042FC00
:0045C7D5 25FF000000              and eax, 000000FF
:0045C7DA 50                      push eax

* Possible StringData Ref from Data Obj ->"%u/%u"
                                  |
:0045C7DB 6810E14700              push 0047E110
:0045C7E0 687B050000              push 0000057B
:0045C7E5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C7E8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C7E9 FF15AC864B00            Call dword ptr [004B86AC]
:0045C7EF 50                      push eax
:0045C7F0 E815700000              call 0046380A
:0045C7F5 83C410                  add esp, 00000010
:0045C7F8 E8E4E6FFFF              call 0045AEE1
:0045C7FD 6633D2                  xor dx, dx
:0045C800 8AD0                    mov dl, al
:0045C802 52                      push edx
:0045C803 B9C8E24A00              mov ecx, 004AE2C8
:0045C808 E8F333FDFF              call 0042FC00
:0045C80D 660FB6C0                movzx ax, al
:0045C811 50                      push eax
:0045C812 687A050000              push 0000057A
:0045C817 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C81A 51                      push ecx
:0045C81B E8EB840000              call 00464D0B
:0045C820 83C410                  add esp, 00000010
:0045C823 6A00                    push 00000000
:0045C825 B9C8E24A00              mov ecx, 004AE2C8
:0045C82A E811AFFAFF              call 00407740
:0045C82F 25FF000000              and eax, 000000FF
:0045C834 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C835 6818E14700              push 0047E118
:0045C83A 6883050000              push 00000583
:0045C83F 8B5508                  mov edx, dword ptr [ebp+08]
:0045C842 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C843 FF15AC864B00            Call dword ptr [004B86AC]
:0045C849 50                      push eax
:0045C84A E8BB6F0000              call 0046380A
:0045C84F 83C40C                  add esp, 0000000C
:0045C852 6A01                    push 00000001
:0045C854 B9C8E24A00              mov ecx, 004AE2C8
:0045C859 E8E2AEFAFF              call 00407740
:0045C85E 25FF000000              and eax, 000000FF
:0045C863 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C864 681CE14700              push 0047E11C
:0045C869 6884050000              push 00000584
:0045C86E 8B4508                  mov eax, dword ptr [ebp+08]
:0045C871 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C872 FF15AC864B00            Call dword ptr [004B86AC]
:0045C878 50                      push eax
:0045C879 E88C6F0000              call 0046380A
:0045C87E 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045C881 6A02                    push 00000002
:0045C883 B9C8E24A00              mov ecx, 004AE2C8
:0045C888 E8B3AEFAFF              call 00407740
:0045C88D 25FF000000              and eax, 000000FF
:0045C892 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C893 6820E14700              push 0047E120
:0045C898 6885050000              push 00000585
:0045C89D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C8A0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C8A1 FF15AC864B00            Call dword ptr [004B86AC]
:0045C8A7 50                      push eax
:0045C8A8 E85D6F0000              call 0046380A
:0045C8AD 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045C8B0 6A03                    push 00000003
:0045C8B2 B9C8E24A00              mov ecx, 004AE2C8
:0045C8B7 E884AEFAFF              call 00407740
:0045C8BC 25FF000000              and eax, 000000FF
:0045C8C1 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C8C2 6824E14700              push 0047E124
:0045C8C7 6886050000              push 00000586
:0045C8CC 8B5508                  mov edx, dword ptr [ebp+08]
:0045C8CF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C8D0 FF15AC864B00            Call dword ptr [004B86AC]
:0045C8D6 50                      push eax
:0045C8D7 E82E6F0000              call 0046380A
:0045C8DC 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C8DF 6A04                    push 00000004
:0045C8E1 B9C8E24A00              mov ecx, 004AE2C8
:0045C8E6 E855AEFAFF              call 00407740
:0045C8EB 25FF000000              and eax, 000000FF
:0045C8F0 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C8F1 6828E14700              push 0047E128
:0045C8F6 6887050000              push 00000587
:0045C8FB 8B4508                  mov eax, dword ptr [ebp+08]
:0045C8FE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C8FF FF15AC864B00            Call dword ptr [004B86AC]
:0045C905 50                      push eax
:0045C906 E8FF6E0000              call 0046380A
:0045C90B 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045C90E 6A05                    push 00000005
:0045C910 B9C8E24A00              mov ecx, 004AE2C8
:0045C915 E826AEFAFF              call 00407740
:0045C91A 25FF000000              and eax, 000000FF
:0045C91F 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C920 682CE14700              push 0047E12C
:0045C925 6888050000              push 00000588
:0045C92A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C92D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C92E FF15AC864B00            Call dword ptr [004B86AC]
:0045C934 50                      push eax
:0045C935 E8D06E0000              call 0046380A
:0045C93A 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045C93D 6A06                    push 00000006
:0045C93F B9C8E24A00              mov ecx, 004AE2C8
:0045C944 E8F7ADFAFF              call 00407740
:0045C949 25FF000000              and eax, 000000FF
:0045C94E 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C94F 6830E14700              push 0047E130
:0045C954 6889050000              push 00000589
:0045C959 8B5508                  mov edx, dword ptr [ebp+08]
:0045C95C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C95D FF15AC864B00            Call dword ptr [004B86AC]
:0045C963 50                      push eax
:0045C964 E8A16E0000              call 0046380A
:0045C969 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045C96C 6A07                    push 00000007
:0045C96E B9C8E24A00              mov ecx, 004AE2C8
:0045C973 E8C8ADFAFF              call 00407740
:0045C978 25FF000000              and eax, 000000FF
:0045C97D 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045C97E 6834E14700              push 0047E134
:0045C983 688A050000              push 0000058A
:0045C988 8B4508                  mov eax, dword ptr [ebp+08]
:0045C98B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C98C FF15AC864B00            Call dword ptr [004B86AC]
:0045C992 50                      push eax
:0045C993 E8726E0000              call 0046380A
:0045C998 83C40C                  add esp, 0000000C
:0045C99B 5D                      pop ebp
:0045C99C C3                      ret



* Referenced by a CALL at Addresses:
|:0045BBFB   , :0045D21C   , :0045D7BA   
|
:0045C99D 55                      push ebp
:0045C99E 8BEC                    mov ebp, esp
:0045C9A0 8B450C                  mov eax, dword ptr [ebp+0C]
:0045C9A3 50                      push eax
:0045C9A4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C9A7 51                      push ecx
:0045C9A8 E863020000              call 0045CC10
:0045C9AD 83C408                  add esp, 00000008
:0045C9B0 8B550C                  mov edx, dword ptr [ebp+0C]
:0045C9B3 52                      push edx
:0045C9B4 8B4508                  mov eax, dword ptr [ebp+08]
:0045C9B7 50                      push eax
:0045C9B8 E805000000              call 0045C9C2
:0045C9BD 83C408                  add esp, 00000008
:0045C9C0 5D                      pop ebp
:0045C9C1 C3                      ret



* Referenced by a CALL at Address:
|:0045C9B8   
|
:0045C9C2 55                      push ebp
:0045C9C3 8BEC                    mov ebp, esp
:0045C9C5 83EC0C                  sub esp, 0000000C
:0045C9C8 8B450C                  mov eax, dword ptr [ebp+0C]
:0045C9CB 50                      push eax
:0045C9CC E8E5010000              call 0045CBB6
:0045C9D1 83C404                  add esp, 00000004
:0045C9D4 8945F4                  mov dword ptr [ebp-0C], eax
:0045C9D7 6A00                    push 00000000
:0045C9D9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045C9DC 6BC933                  imul ecx, 00000033
:0045C9DF 81C1C8EF4800            add ecx, 0048EFC8
:0045C9E5 E886290000              call 0045F370
:0045C9EA 25FF000000              and eax, 000000FF
:0045C9EF 8945F8                  mov dword ptr [ebp-08], eax
:0045C9F2 6A01                    push 00000001
:0045C9F4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045C9F7 6BC933                  imul ecx, 00000033
:0045C9FA 81C1C8EF4800            add ecx, 0048EFC8
:0045CA00 E86B290000              call 0045F370
:0045CA05 25FF000000              and eax, 000000FF
:0045CA0A 8945FC                  mov dword ptr [ebp-04], eax
:0045CA0D 688B050000              push 0000058B
:0045CA12 68CF050000              push 000005CF
:0045CA17 68CE050000              push 000005CE
:0045CA1C 68CD050000              push 000005CD
:0045CA21 689C050000              push 0000059C
:0045CA26 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045CA29 51                      push ecx
:0045CA2A 8B5508                  mov edx, dword ptr [ebp+08]
:0045CA2D 52                      push edx
:0045CA2E E82DEFFFFF              call 0045B960
:0045CA33 83C41C                  add esp, 0000001C
:0045CA36 68AC050000              push 000005AC
:0045CA3B 68AA050000              push 000005AA
:0045CA40 68A9050000              push 000005A9
:0045CA45 68A8050000              push 000005A8
:0045CA4A 68AD050000              push 000005AD
:0045CA4F 8B45F8                  mov eax, dword ptr [ebp-08]
:0045CA52 50                      push eax
:0045CA53 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CA56 51                      push ecx
:0045CA57 E804EFFFFF              call 0045B960
:0045CA5C 83C41C                  add esp, 0000001C
:0045CA5F 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:0045CA66 7456                    je 0045CABE
:0045CA68 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045CA6B 52                      push edx
:0045CA6C E8CEEEFFFF              call 0045B93F
:0045CA71 83C404                  add esp, 00000004
:0045CA74 50                      push eax

* Possible StringData Ref from Data Obj ->"Oޯ %u"
                                  |
:0045CA75 6838E14700              push 0047E138
:0045CA7A 68B0050000              push 000005B0
:0045CA7F 8B4508                  mov eax, dword ptr [ebp+08]
:0045CA82 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CA83 FF15AC864B00            Call dword ptr [004B86AC]
:0045CA89 50                      push eax
:0045CA8A E87B6D0000              call 0046380A
:0045CA8F 83C40C                  add esp, 0000000C
:0045CA92 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045CA95 51                      push ecx
:0045CA96 E886EEFFFF              call 0045B921
:0045CA9B 83C404                  add esp, 00000004
:0045CA9E 50                      push eax

* Possible StringData Ref from Data Obj ->"@OΡ@ %u"
                                  |
:0045CA9F 6844E14700              push 0047E144

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B1, ""
                                  |
:0045CAA4 68B1050000              push 000005B1
:0045CAA9 8B5508                  mov edx, dword ptr [ebp+08]
:0045CAAC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CAAD FF15AC864B00            Call dword ptr [004B86AC]
:0045CAB3 50                      push eax
:0045CAB4 E8516D0000              call 0046380A
:0045CAB9 83C40C                  add esp, 0000000C
:0045CABC EB36                    jmp 0045CAF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CA66(C)
|

* Possible StringData Ref from Data Obj ->"Oޯ"
                                  |
:0045CABE 6850E14700              push 0047E150
:0045CAC3 68B0050000              push 000005B0
:0045CAC8 8B4508                  mov eax, dword ptr [ebp+08]
:0045CACB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CACC FF15AC864B00            Call dword ptr [004B86AC]
:0045CAD2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045CAD3 FF15B0864B00            Call dword ptr [004B86B0]

* Possible StringData Ref from Data Obj ->"@OΡ@"
                                  |
:0045CAD9 685CE14700              push 0047E15C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B1, ""
                                  |
:0045CADE 68B1050000              push 000005B1
:0045CAE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CAE6 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CAE7 FF15AC864B00            Call dword ptr [004B86AC]
:0045CAED 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045CAEE FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CABC(U)
|
:0045CAF4 68A0050000              push 000005A0
:0045CAF9 68A4050000              push 000005A4
:0045CAFE 68A3050000              push 000005A3
:0045CB03 68A2050000              push 000005A2
:0045CB08 68A6050000              push 000005A6
:0045CB0D 8B55FC                  mov edx, dword ptr [ebp-04]
:0045CB10 52                      push edx
:0045CB11 8B4508                  mov eax, dword ptr [ebp+08]
:0045CB14 50                      push eax
:0045CB15 E846EEFFFF              call 0045B960
:0045CB1A 83C41C                  add esp, 0000001C
:0045CB1D 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0045CB24 7456                    je 0045CB7C
:0045CB26 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045CB29 51                      push ecx
:0045CB2A E810EEFFFF              call 0045B93F
:0045CB2F 83C404                  add esp, 00000004
:0045CB32 50                      push eax

* Possible StringData Ref from Data Obj ->"Oޯ %u"
                                  |
:0045CB33 6868E14700              push 0047E168
:0045CB38 68B2050000              push 000005B2
:0045CB3D 8B5508                  mov edx, dword ptr [ebp+08]
:0045CB40 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CB41 FF15AC864B00            Call dword ptr [004B86AC]
:0045CB47 50                      push eax
:0045CB48 E8BD6C0000              call 0046380A
:0045CB4D 83C40C                  add esp, 0000000C
:0045CB50 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CB53 50                      push eax
:0045CB54 E8C8EDFFFF              call 0045B921
:0045CB59 83C404                  add esp, 00000004
:0045CB5C 50                      push eax

* Possible StringData Ref from Data Obj ->"@OΡ@ %u"
                                  |
:0045CB5D 6874E14700              push 0047E174

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B3, ""
                                  |
:0045CB62 68B3050000              push 000005B3
:0045CB67 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CB6A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CB6B FF15AC864B00            Call dword ptr [004B86AC]
:0045CB71 50                      push eax
:0045CB72 E8936C0000              call 0046380A
:0045CB77 83C40C                  add esp, 0000000C
:0045CB7A EB36                    jmp 0045CBB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CB24(C)
|

* Possible StringData Ref from Data Obj ->"Oޯ"
                                  |
:0045CB7C 6880E14700              push 0047E180
:0045CB81 68B2050000              push 000005B2
:0045CB86 8B5508                  mov edx, dword ptr [ebp+08]
:0045CB89 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CB8A FF15AC864B00            Call dword ptr [004B86AC]
:0045CB90 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045CB91 FF15B0864B00            Call dword ptr [004B86B0]

* Possible StringData Ref from Data Obj ->"@OΡ@"
                                  |
:0045CB97 688CE14700              push 0047E18C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:05B3, ""
                                  |
:0045CB9C 68B3050000              push 000005B3
:0045CBA1 8B4508                  mov eax, dword ptr [ebp+08]
:0045CBA4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CBA5 FF15AC864B00            Call dword ptr [004B86AC]
:0045CBAB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045CBAC FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CB7A(U)
|
:0045CBB2 8BE5                    mov esp, ebp
:0045CBB4 5D                      pop ebp
:0045CBB5 C3                      ret



* Referenced by a CALL at Addresses:
|:0045C9CC   , :0045CC3A   , :0045D4E3   , :0045DACB   
|
:0045CBB6 55                      push ebp
:0045CBB7 8BEC                    mov ebp, esp
:0045CBB9 83EC08                  sub esp, 00000008
:0045CBBC 8B4508                  mov eax, dword ptr [ebp+08]
:0045CBBF 25FFFF0000              and eax, 0000FFFF
:0045CBC4 8945FC                  mov dword ptr [ebp-04], eax
:0045CBC7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CBCA C1E910                  shr ecx, 10
:0045CBCD 81E1FFFF0000            and ecx, 0000FFFF
:0045CBD3 81E1FFFF0000            and ecx, 0000FFFF
:0045CBD9 894DF8                  mov dword ptr [ebp-08], ecx
:0045CBDC 817DFC85020000          cmp dword ptr [ebp-04], 00000285
:0045CBE3 7322                    jnb 0045CC07
:0045CBE5 837DF808                cmp dword ptr [ebp-08], 00000008
:0045CBE9 731C                    jnb 0045CC07
:0045CBEB 8A55F8                  mov dl, byte ptr [ebp-08]
:0045CBEE 52                      push edx
:0045CBEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CBF2 6BC970                  imul ecx, 00000070
:0045CBF5 81C198224900            add ecx, 00492298
:0045CBFB E8107CFAFF              call 00404810
:0045CC00 25FF000000              and eax, 000000FF
:0045CC05 EB05                    jmp 0045CC0C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CBE3(C), :0045CBE9(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045CC07 B8FF000000              mov eax, 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CC05(U)
|
:0045CC0C 8BE5                    mov esp, ebp
:0045CC0E 5D                      pop ebp
:0045CC0F C3                      ret



* Referenced by a CALL at Address:
|:0045C9A8   
|
:0045CC10 55                      push ebp
:0045CC11 8BEC                    mov ebp, esp
:0045CC13 83EC24                  sub esp, 00000024
:0045CC16 687F050000              push 0000057F
:0045CC1B 8B4508                  mov eax, dword ptr [ebp+08]
:0045CC1E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CC1F FF15AC864B00            Call dword ptr [004B86AC]
:0045CC25 8945F8                  mov dword ptr [ebp-08], eax
:0045CC28 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0045CC2B 51                      push ecx
:0045CC2C 8B55F8                  mov edx, dword ptr [ebp-08]
:0045CC2F 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045CC30 FF15C8864B00            Call dword ptr [004B86C8]
:0045CC36 8B450C                  mov eax, dword ptr [ebp+0C]
:0045CC39 50                      push eax
:0045CC3A E877FFFFFF              call 0045CBB6
:0045CC3F 83C404                  add esp, 00000004
:0045CC42 8945FC                  mov dword ptr [ebp-04], eax
:0045CC45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CC48 51                      push ecx
:0045CC49 6899050000              push 00000599
:0045CC4E 8B5508                  mov edx, dword ptr [ebp+08]
:0045CC51 52                      push edx
:0045CC52 E85E010000              call 0045CDB5
:0045CC57 83C40C                  add esp, 0000000C
:0045CC5A 687F050000              push 0000057F
:0045CC5F 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CC62 50                      push eax
:0045CC63 E849030000              call 0045CFB1
:0045CC68 83C404                  add esp, 00000004
:0045CC6B 50                      push eax
:0045CC6C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CC6F 51                      push ecx
:0045CC70 B99C0B4B00              mov ecx, 004B0B9C
:0045CC75 E8DB250000              call 0045F255
:0045CC7A 6881050000              push 00000581
:0045CC7F 8B55FC                  mov edx, dword ptr [ebp-04]
:0045CC82 52                      push edx
:0045CC83 E876030000              call 0045CFFE
:0045CC88 83C404                  add esp, 00000004
:0045CC8B 50                      push eax
:0045CC8C 8B4508                  mov eax, dword ptr [ebp+08]
:0045CC8F 50                      push eax
:0045CC90 B99C0B4B00              mov ecx, 004B0B9C
:0045CC95 E845260000              call 0045F2DF
:0045CC9A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CC9D 6BC933                  imul ecx, 00000033
:0045CCA0 81C1C8EF4800            add ecx, 0048EFC8
:0045CCA6 E8E579FAFF              call 00404690
:0045CCAB 25FF000000              and eax, 000000FF
:0045CCB0 50                      push eax
:0045CCB1 B9C8E24A00              mov ecx, 004AE2C8
:0045CCB6 E885AAFAFF              call 00407740
:0045CCBB 25FF000000              and eax, 000000FF
:0045CCC0 8945DC                  mov dword ptr [ebp-24], eax
:0045CCC3 6A00                    push 00000000
:0045CCC5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CCC8 6BC933                  imul ecx, 00000033
:0045CCCB 81C1C8EF4800            add ecx, 0048EFC8
:0045CCD1 E89A260000              call 0045F370
:0045CCD6 25FF000000              and eax, 000000FF
:0045CCDB 8945E4                  mov dword ptr [ebp-1C], eax
:0045CCDE 6A01                    push 00000001
:0045CCE0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CCE3 6BC933                  imul ecx, 00000033
:0045CCE6 81C1C8EF4800            add ecx, 0048EFC8
:0045CCEC E87F260000              call 0045F370
:0045CCF1 25FF000000              and eax, 000000FF
:0045CCF6 8945E0                  mov dword ptr [ebp-20], eax
:0045CCF9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CCFC 51                      push ecx
:0045CCFD 68A7050000              push 000005A7
:0045CD02 8B5508                  mov edx, dword ptr [ebp+08]
:0045CD05 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CD06 FF15AC864B00            Call dword ptr [004B86AC]
:0045CD0C 50                      push eax
:0045CD0D E82F010000              call 0045CE41
:0045CD12 83C408                  add esp, 00000008
:0045CD15 6880050000              push 00000580
:0045CD1A 8B45E4                  mov eax, dword ptr [ebp-1C]
:0045CD1D 50                      push eax
:0045CD1E E88E020000              call 0045CFB1
:0045CD23 83C404                  add esp, 00000004
:0045CD26 50                      push eax
:0045CD27 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CD2A 51                      push ecx
:0045CD2B B9A40B4B00              mov ecx, 004B0BA4
:0045CD30 E820250000              call 0045F255
:0045CD35 689F050000              push 0000059F
:0045CD3A 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045CD3D 52                      push edx
:0045CD3E E8BB020000              call 0045CFFE
:0045CD43 83C404                  add esp, 00000004
:0045CD46 50                      push eax
:0045CD47 8B4508                  mov eax, dword ptr [ebp+08]
:0045CD4A 50                      push eax
:0045CD4B B9A40B4B00              mov ecx, 004B0BA4
:0045CD50 E88A250000              call 0045F2DF
:0045CD55 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045CD58 51                      push ecx
:0045CD59 689B050000              push 0000059B
:0045CD5E 8B5508                  mov edx, dword ptr [ebp+08]
:0045CD61 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045CD62 FF15AC864B00            Call dword ptr [004B86AC]
:0045CD68 50                      push eax
:0045CD69 E8D3000000              call 0045CE41
:0045CD6E 83C408                  add esp, 00000008
:0045CD71 6898050000              push 00000598
:0045CD76 8B45E0                  mov eax, dword ptr [ebp-20]
:0045CD79 50                      push eax
:0045CD7A E832020000              call 0045CFB1
:0045CD7F 83C404                  add esp, 00000004
:0045CD82 50                      push eax
:0045CD83 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CD86 51                      push ecx
:0045CD87 B9AC0B4B00              mov ecx, 004B0BAC
:0045CD8C E8C4240000              call 0045F255
:0045CD91 68A1050000              push 000005A1
:0045CD96 8B55E0                  mov edx, dword ptr [ebp-20]
:0045CD99 52                      push edx
:0045CD9A E85F020000              call 0045CFFE
:0045CD9F 83C404                  add esp, 00000004
:0045CDA2 50                      push eax
:0045CDA3 8B4508                  mov eax, dword ptr [ebp+08]
:0045CDA6 50                      push eax
:0045CDA7 B9AC0B4B00              mov ecx, 004B0BAC
:0045CDAC E82E250000              call 0045F2DF
:0045CDB1 8BE5                    mov esp, ebp
:0045CDB3 5D                      pop ebp
:0045CDB4 C3                      ret



* Referenced by a CALL at Address:
|:0045CC52   
|
:0045CDB5 55                      push ebp
:0045CDB6 8BEC                    mov ebp, esp
:0045CDB8 51                      push ecx
:0045CDB9 817D10FF000000          cmp dword ptr [ebp+10], 000000FF
:0045CDC0 7509                    jne 0045CDCB
:0045CDC2 C745FC00000000          mov [ebp-04], 00000000
:0045CDC9 EB35                    jmp 0045CE00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CDC0(C)
|
:0045CDCB 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045CDCE 6BC933                  imul ecx, 00000033
:0045CDD1 81C1C8EF4800            add ecx, 0048EFC8
:0045CDD7 E8D478FAFF              call 004046B0
:0045CDDC 25FF000000              and eax, 000000FF
:0045CDE1 05C2010000              add eax, 000001C2
:0045CDE6 25FFFF0000              and eax, 0000FFFF
:0045CDEB 50                      push eax
:0045CDEC B910584800              mov ecx, 00485810
:0045CDF1 E86A78FFFF              call 00454660
:0045CDF6 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045CDF7 FF15E8864B00            Call dword ptr [004B86E8]
:0045CDFD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CDC9(U)
|
:0045CE00 817D0C99050000          cmp dword ptr [ebp+0C], 00000599
:0045CE07 751B                    jne 0045CE24
:0045CE09 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CE0C 50                      push eax
:0045CE0D 6A01                    push 00000001
:0045CE0F 6872010000              push 00000172
:0045CE14 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045CE17 51                      push ecx
:0045CE18 8B5508                  mov edx, dword ptr [ebp+08]
:0045CE1B 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045CE1C FF15B4864B00            Call dword ptr [004B86B4]
:0045CE22 EB19                    jmp 0045CE3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CE07(C)
|
:0045CE24 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CE27 50                      push eax
:0045CE28 6A01                    push 00000001
:0045CE2A 68F7000000              push 000000F7
:0045CE2F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045CE32 51                      push ecx
:0045CE33 8B5508                  mov edx, dword ptr [ebp+08]
:0045CE36 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045CE37 FF15B4864B00            Call dword ptr [004B86B4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CE22(U)
|
:0045CE3D 8BE5                    mov esp, ebp
:0045CE3F 5D                      pop ebp
:0045CE40 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CD0D   , :0045CD69   
|
:0045CE41 55                      push ebp
:0045CE42 8BEC                    mov ebp, esp
:0045CE44 51                      push ecx
:0045CE45 8B4508                  mov eax, dword ptr [ebp+08]
:0045CE48 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0045CE49 FF15B8864B00            Call dword ptr [004B86B8]
:0045CE4F 8945FC                  mov dword ptr [ebp-04], eax
:0045CE52 6A00                    push 00000000
:0045CE54 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045CE57 51                      push ecx
:0045CE58 8B55FC                  mov edx, dword ptr [ebp-04]
:0045CE5B 52                      push edx
:0045CE5C 8B4508                  mov eax, dword ptr [ebp+08]
:0045CE5F 50                      push eax
:0045CE60 E815000000              call 0045CE7A
:0045CE65 83C410                  add esp, 00000010
:0045CE68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CE6B 51                      push ecx
:0045CE6C 8B5508                  mov edx, dword ptr [ebp+08]
:0045CE6F 52                      push edx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0045CE70 FF15BC864B00            Call dword ptr [004B86BC]
:0045CE76 8BE5                    mov esp, ebp
:0045CE78 5D                      pop ebp
:0045CE79 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CE60   , :0045DB35   
|
:0045CE7A 55                      push ebp
:0045CE7B 8BEC                    mov ebp, esp
:0045CE7D 83EC24                  sub esp, 00000024
:0045CE80 33C0                    xor eax, eax
:0045CE82 837D1400                cmp dword ptr [ebp+14], 00000000
:0045CE86 0F95C0                  setne al
:0045CE89 055C010000              add eax, 0000015C
:0045CE8E 8945DC                  mov dword ptr [ebp-24], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045CE91 6A02                    push 00000002
:0045CE93 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045CE96 81E1FFFF0000            and ecx, 0000FFFF
:0045CE9C 51                      push ecx
:0045CE9D 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0045CEA3 52                      push edx

* Reference To: KERNEL32.FindResourceA, Ord:0089h
                                  |
:0045CEA4 FF1524854B00            Call dword ptr [004B8524]
:0045CEAA 50                      push eax
:0045CEAB A1300E4B00              mov eax, dword ptr [004B0E30]
:0045CEB0 50                      push eax

* Reference To: KERNEL32.LoadResource, Ord:0195h
                                  |
:0045CEB1 FF1528854B00            Call dword ptr [004B8528]
:0045CEB7 8945E4                  mov dword ptr [ebp-1C], eax
:0045CEBA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CEBD 51                      push ecx

* Reference To: KERNEL32.LockResource, Ord:01A3h
                                  |
:0045CEBE FF152C854B00            Call dword ptr [004B852C]
:0045CEC4 8945E8                  mov dword ptr [ebp-18], eax
:0045CEC7 8B55E8                  mov edx, dword ptr [ebp-18]
:0045CECA 8B4220                  mov eax, dword ptr [edx+20]
:0045CECD 8945E0                  mov dword ptr [ebp-20], eax
:0045CED0 837DE000                cmp dword ptr [ebp-20], 00000000
:0045CED4 7507                    jne 0045CEDD
:0045CED6 C745E000010000          mov [ebp-20], 00000100

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CED4(C)
|
:0045CEDD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045CEE0 8B55E8                  mov edx, dword ptr [ebp-18]
:0045CEE3 0311                    add edx, dword ptr [ecx]
:0045CEE5 8B45E0                  mov eax, dword ptr [ebp-20]
:0045CEE8 8D0C82                  lea ecx, dword ptr [edx+4*eax]
:0045CEEB 894DEC                  mov dword ptr [ebp-14], ecx
:0045CEEE 8D55F0                  lea edx, dword ptr [ebp-10]
:0045CEF1 52                      push edx
:0045CEF2 8B4508                  mov eax, dword ptr [ebp+08]
:0045CEF5 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045CEF6 FF15C8864B00            Call dword ptr [004B86C8]
:0045CEFC 682000CC00              push 00CC0020
:0045CF01 6A00                    push 00000000
:0045CF03 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045CF06 51                      push ecx
:0045CF07 8B55EC                  mov edx, dword ptr [ebp-14]
:0045CF0A 52                      push edx
:0045CF0B 6A20                    push 00000020
:0045CF0D 6A20                    push 00000020
:0045CF0F 6A00                    push 00000000
:0045CF11 6A00                    push 00000000
:0045CF13 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CF16 50                      push eax
:0045CF17 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045CF1A 51                      push ecx
:0045CF1B 6A00                    push 00000000
:0045CF1D 6A00                    push 00000000
:0045CF1F 8B550C                  mov edx, dword ptr [ebp+0C]
:0045CF22 52                      push edx

* Reference To: GDI32.StretchDIBits, Ord:017Fh
                                  |
:0045CF23 FF15DC844B00            Call dword ptr [004B84DC]
:0045CF29 8B4510                  mov eax, dword ptr [ebp+10]
:0045CF2C 50                      push eax
:0045CF2D 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CF30 83E820                  sub eax, 00000020
:0045CF33 99                      cdq
:0045CF34 2BC2                    sub eax, edx
:0045CF36 D1F8                    sar eax, 1
:0045CF38 50                      push eax
:0045CF39 8B45F8                  mov eax, dword ptr [ebp-08]
:0045CF3C 83E820                  sub eax, 00000020
:0045CF3F 99                      cdq
:0045CF40 2BC2                    sub eax, edx
:0045CF42 D1F8                    sar eax, 1
:0045CF44 50                      push eax
:0045CF45 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045CF48 51                      push ecx
:0045CF49 E807000000              call 0045CF55
:0045CF4E 83C410                  add esp, 00000010
:0045CF51 8BE5                    mov esp, ebp
:0045CF53 5D                      pop ebp
:0045CF54 C3                      ret



* Referenced by a CALL at Address:
|:0045CF49   
|
:0045CF55 55                      push ebp
:0045CF56 8BEC                    mov ebp, esp
:0045CF58 51                      push ecx
:0045CF59 817D14FF000000          cmp dword ptr [ebp+14], 000000FF
:0045CF60 744B                    je 0045CFAD
:0045CF62 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045CF65 6BC933                  imul ecx, 00000033
:0045CF68 81C1C8EF4800            add ecx, 0048EFC8
:0045CF6E E83D77FAFF              call 004046B0
:0045CF73 25FF000000              and eax, 000000FF
:0045CF78 05C2010000              add eax, 000001C2
:0045CF7D 25FFFF0000              and eax, 0000FFFF
:0045CF82 50                      push eax
:0045CF83 B910584800              mov ecx, 00485810
:0045CF88 E8D376FFFF              call 00454660
:0045CF8D 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045CF8E FF15E8864B00            Call dword ptr [004B86E8]
:0045CF94 8945FC                  mov dword ptr [ebp-04], eax
:0045CF97 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CF9A 50                      push eax
:0045CF9B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045CF9E 51                      push ecx
:0045CF9F 8B550C                  mov edx, dword ptr [ebp+0C]
:0045CFA2 52                      push edx
:0045CFA3 8B4508                  mov eax, dword ptr [ebp+08]
:0045CFA6 50                      push eax

* Reference To: USER32.DrawIcon, Ord:00A4h
                                  |
:0045CFA7 FF15BC874B00            Call dword ptr [004B87BC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CF60(C)
|
:0045CFAD 8BE5                    mov esp, ebp
:0045CFAF 5D                      pop ebp
:0045CFB0 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CC63   , :0045CD1E   , :0045CD7A   
|
:0045CFB1 55                      push ebp
:0045CFB2 8BEC                    mov ebp, esp
:0045CFB4 51                      push ecx
:0045CFB5 C645FCFF                mov [ebp-04], FF
:0045CFB9 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:0045CFC0 7435                    je 0045CFF7
:0045CFC2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CFC5 6BC933                  imul ecx, 00000033
:0045CFC8 81C1C8EF4800            add ecx, 0048EFC8
:0045CFCE E8BD76FAFF              call 00404690
:0045CFD3 25FF000000              and eax, 000000FF
:0045CFD8 83F807                  cmp eax, 00000007
:0045CFDB 7506                    jne 0045CFE3
:0045CFDD C645FC0B                mov [ebp-04], 0B
:0045CFE1 EB14                    jmp 0045CFF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CFDB(C)
|
:0045CFE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045CFE6 6BC933                  imul ecx, 00000033
:0045CFE9 81C1C8EF4800            add ecx, 0048EFC8
:0045CFEF E89C77FAFF              call 00404790
:0045CFF4 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CFC0(C), :0045CFE1(U)
|
:0045CFF7 8A45FC                  mov al, byte ptr [ebp-04]
:0045CFFA 8BE5                    mov esp, ebp
:0045CFFC 5D                      pop ebp
:0045CFFD C3                      ret



* Referenced by a CALL at Addresses:
|:0045CC83   , :0045CD3E   , :0045CD9A   
|
:0045CFFE 55                      push ebp
:0045CFFF 8BEC                    mov ebp, esp
:0045D001 51                      push ecx
:0045D002 C645FCFF                mov [ebp-04], FF
:0045D006 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:0045D00D 7435                    je 0045D044
:0045D00F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D012 6BC933                  imul ecx, 00000033
:0045D015 81C1C8EF4800            add ecx, 0048EFC8
:0045D01B E87076FAFF              call 00404690
:0045D020 25FF000000              and eax, 000000FF
:0045D025 83F807                  cmp eax, 00000007
:0045D028 7506                    jne 0045D030
:0045D02A C645FC0A                mov [ebp-04], 0A
:0045D02E EB14                    jmp 0045D044

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D028(C)
|
:0045D030 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D033 6BC933                  imul ecx, 00000033
:0045D036 81C1C8EF4800            add ecx, 0048EFC8
:0045D03C E80F30FCFF              call 00420050
:0045D041 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D00D(C), :0045D02E(U)
|
:0045D044 8A45FC                  mov al, byte ptr [ebp-04]
:0045D047 8BE5                    mov esp, ebp
:0045D049 5D                      pop ebp
:0045D04A C3                      ret



* Referenced by a CALL at Address:
|:0045BF5D   
|
:0045D04B 55                      push ebp
:0045D04C 8BEC                    mov ebp, esp
:0045D04E 83EC30                  sub esp, 00000030
:0045D051 8B450C                  mov eax, dword ptr [ebp+0C]
:0045D054 8945FC                  mov dword ptr [ebp-04], eax
:0045D057 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D05A 8B5108                  mov edx, dword ptr [ecx+08]
:0045D05D 8955D4                  mov dword ptr [ebp-2C], edx
:0045D060 8B45D4                  mov eax, dword ptr [ebp-2C]
:0045D063 0596000000              add eax, 00000096
:0045D068 8945D4                  mov dword ptr [ebp-2C], eax
:0045D06B 817DD494000000          cmp dword ptr [ebp-2C], 00000094
:0045D072 0F87AC010000            ja 0045D224
:0045D078 8B55D4                  mov edx, dword ptr [ebp-2C]
:0045D07B 33C9                    xor ecx, ecx
:0045D07D 8A8A44D24500            mov cl, byte ptr [edx+0045D244]
:0045D083 FF248D28D24500          jmp dword ptr [4*ecx+0045D228]
:0045D08A 8B450C                  mov eax, dword ptr [ebp+0C]
:0045D08D 8945EC                  mov dword ptr [ebp-14], eax
:0045D090 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D093 33D2                    xor edx, edx
:0045D095 668B512C                mov dx, word ptr [ecx+2C]
:0045D099 8955F4                  mov dword ptr [ebp-0C], edx
:0045D09C 8B45EC                  mov eax, dword ptr [ebp-14]
:0045D09F 8B482C                  mov ecx, dword ptr [eax+2C]
:0045D0A2 C1E910                  shr ecx, 10
:0045D0A5 81E1FFFF0000            and ecx, 0000FFFF
:0045D0AB 81E1FFFF0000            and ecx, 0000FFFF
:0045D0B1 894DF0                  mov dword ptr [ebp-10], ecx
:0045D0B4 8A55F0                  mov dl, byte ptr [ebp-10]
:0045D0B7 52                      push edx
:0045D0B8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D0BB 6BC970                  imul ecx, 00000070
:0045D0BE 81C198224900            add ecx, 00492298
:0045D0C4 E84777FAFF              call 00404810
:0045D0C9 25FF000000              and eax, 000000FF
:0045D0CE 8945F8                  mov dword ptr [ebp-08], eax
:0045D0D1 8B45EC                  mov eax, dword ptr [ebp-14]
:0045D0D4 8B4814                  mov ecx, dword ptr [eax+14]
:0045D0D7 894DD0                  mov dword ptr [ebp-30], ecx
:0045D0DA 837DD000                cmp dword ptr [ebp-30], 00000000
:0045D0DE 7408                    je 0045D0E8
:0045D0E0 837DD001                cmp dword ptr [ebp-30], 00000001
:0045D0E4 745F                    je 0045D145
:0045D0E6 EB74                    jmp 0045D15C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D0DE(C)
|
:0045D0E8 6A01                    push 00000001
:0045D0EA B9C8E24A00              mov ecx, 004AE2C8
:0045D0EF E8AC2EFCFF              call 0041FFA0
:0045D0F4 85C0                    test eax, eax
:0045D0F6 7434                    je 0045D12C
:0045D0F8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D0FB 6BC970                  imul ecx, 00000070
:0045D0FE 81C198224900            add ecx, 00492298
:0045D104 E8996AFAFF              call 00403BA2
:0045D109 50                      push eax
:0045D10A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D10D 6BC933                  imul ecx, 00000033
:0045D110 81C1C8EF4800            add ecx, 0048EFC8
:0045D116 E895A6FAFF              call 004077B0
:0045D11B 50                      push eax
:0045D11C E865020000              call 0045D386
:0045D121 83C408                  add esp, 00000008
:0045D124 8B55EC                  mov edx, dword ptr [ebp-14]
:0045D127 894220                  mov dword ptr [edx+20], eax
:0045D12A EB17                    jmp 0045D143

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D0F6(C)
|
:0045D12C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D12F 6BC933                  imul ecx, 00000033
:0045D132 81C1C8EF4800            add ecx, 0048EFC8
:0045D138 E873A6FAFF              call 004077B0
:0045D13D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D140 894120                  mov dword ptr [ecx+20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D12A(U)
|
:0045D143 EB17                    jmp 0045D15C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D0E4(C)
|
:0045D145 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D148 6BC970                  imul ecx, 00000070
:0045D14B 81C198224900            add ecx, 00492298
:0045D151 E84C6AFAFF              call 00403BA2
:0045D156 8B55EC                  mov edx, dword ptr [ebp-14]
:0045D159 894220                  mov dword ptr [edx+20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D0E6(U), :0045D143(U)
|
:0045D15C E9C3000000              jmp 0045D224
:0045D161 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045D163 6AFF                    push FFFFFFFF
:0045D165 6817100000              push 00001017
:0045D16A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D16D 8B08                    mov ecx, dword ptr [eax]
:0045D16F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045D170 FF15D8864B00            Call dword ptr [004B86D8]
:0045D176 E9A9000000              jmp 0045D224
:0045D17B 8B550C                  mov edx, dword ptr [ebp+0C]
:0045D17E 8955E8                  mov dword ptr [ebp-18], edx
:0045D181 68D9D24500              push 0045D2D9
:0045D186 8B45E8                  mov eax, dword ptr [ebp-18]
:0045D189 8B4810                  mov ecx, dword ptr [eax+10]
:0045D18C 51                      push ecx
:0045D18D 6830100000              push 00001030
:0045D192 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D195 8B02                    mov eax, dword ptr [edx]
:0045D197 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045D198 FF15D8864B00            Call dword ptr [004B86D8]
:0045D19E B910584800              mov ecx, 00485810
:0045D1A3 E8982DFCFF              call 0041FF40
:0045D1A8 EB7A                    jmp 0045D224
:0045D1AA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D1AD 894DE0                  mov dword ptr [ebp-20], ecx
:0045D1B0 8B55E0                  mov edx, dword ptr [ebp-20]
:0045D1B3 8B02                    mov eax, dword ptr [edx]
:0045D1B5 50                      push eax
:0045D1B6 E837A5FBFF              call 004176F2
:0045D1BB 83C404                  add esp, 00000004
:0045D1BE 8945E4                  mov dword ptr [ebp-1C], eax
:0045D1C1 837DE400                cmp dword ptr [ebp-1C], 00000000
:0045D1C5 7C12                    jl 0045D1D9
:0045D1C7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045D1CA 51                      push ecx
:0045D1CB 8B55E0                  mov edx, dword ptr [ebp-20]
:0045D1CE 8B02                    mov eax, dword ptr [edx]
:0045D1D0 50                      push eax
:0045D1D1 E8379FFBFF              call 0041710D
:0045D1D6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D1C5(C)
|
:0045D1D9 EB49                    jmp 0045D224
:0045D1DB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D1DE 894DDC                  mov dword ptr [ebp-24], ecx
:0045D1E1 8B55DC                  mov edx, dword ptr [ebp-24]
:0045D1E4 8B4214                  mov eax, dword ptr [edx+14]
:0045D1E7 83E002                  and eax, 00000002
:0045D1EA 85C0                    test eax, eax
:0045D1EC 7436                    je 0045D224
:0045D1EE 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045D1F1 8B5128                  mov edx, dword ptr [ecx+28]
:0045D1F4 8955D8                  mov dword ptr [ebp-28], edx
:0045D1F7 8B4510                  mov eax, dword ptr [ebp+10]
:0045D1FA 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045D1FD 8908                    mov dword ptr [eax], ecx
:0045D1FF 6801010000              push 00000101
:0045D204 6A00                    push 00000000
:0045D206 6A00                    push 00000000
:0045D208 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D20B 8B02                    mov eax, dword ptr [edx]
:0045D20D 50                      push eax

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0045D20E FF1590874B00            Call dword ptr [004B8790]
:0045D214 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045D217 51                      push ecx
:0045D218 8B5508                  mov edx, dword ptr [ebp+08]
:0045D21B 52                      push edx
:0045D21C E87CF7FFFF              call 0045C99D
:0045D221 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D072(C), :0045D15C(U), :0045D176(U), :0045D1A8(U), :0045D1D9(U)
|:0045D1EC(C)
|
:0045D224 8BE5                    mov esp, ebp
:0045D226 5D                      pop ebp
:0045D227 C3                      ret



:0045D228 8AD04500                DWORD 0045D08A
:0045D22C 7BD14500                DWORD 0045D17B
:0045D230 61D14500                DWORD 0045D161
:0045D234 DBD14500                DWORD 0045D1DB
:0045D238 AAD14500                DWORD 0045D1AA
:0045D23C AAD14500                DWORD 0045D1AA
:0045D240 24D24500                DWORD 0045D224


:0045D244 0006                    add byte ptr [esi], al
:0045D246 06                      push es
:0045D247 06                      push es
:0045D248 06                      push es
:0045D249 06                      push es
:0045D24A 06                      push es
:0045D24B 06                      push es
:0045D24C 06                      push es
:0045D24D 06                      push es
:0045D24E 06                      push es
:0045D24F 06                      push es
:0045D250 06                      push es
:0045D251 06                      push es
:0045D252 06                      push es
:0045D253 06                      push es
:0045D254 06                      push es
:0045D255 06                      push es
:0045D256 06                      push es
:0045D257 06                      push es
:0045D258 06                      push es
:0045D259 06                      push es
:0045D25A 06                      push es
:0045D25B 06                      push es
:0045D25C 06                      push es
:0045D25D 06                      push es
:0045D25E 06                      push es
:0045D25F 06                      push es
:0045D260 06                      push es
:0045D261 06                      push es
:0045D262 06                      push es
:0045D263 06                      push es
:0045D264 06                      push es
:0045D265 06                      push es
:0045D266 06                      push es
:0045D267 06                      push es
:0045D268 06                      push es
:0045D269 06                      push es
:0045D26A 06                      push es
:0045D26B 06                      push es
:0045D26C 06                      push es
:0045D26D 06                      push es
:0045D26E 0106                    add dword ptr [esi], eax
:0045D270 06                      push es
:0045D271 0206                    add al, byte ptr [esi]
:0045D273 06                      push es
:0045D274 06                      push es
:0045D275 0306                    add eax, dword ptr [esi]
:0045D277 06                      push es
:0045D278 06                      push es
:0045D279 06                      push es
:0045D27A 06                      push es
:0045D27B 06                      push es
:0045D27C 06                      push es
:0045D27D 06                      push es
:0045D27E 06                      push es
:0045D27F 06                      push es
:0045D280 06                      push es
:0045D281 06                      push es
:0045D282 06                      push es
:0045D283 06                      push es
:0045D284 06                      push es
:0045D285 06                      push es
:0045D286 06                      push es
:0045D287 06                      push es
:0045D288 06                      push es
:0045D289 06                      push es
:0045D28A 06                      push es
:0045D28B 06                      push es
:0045D28C 06                      push es
:0045D28D 06                      push es
:0045D28E 06                      push es
:0045D28F 06                      push es
:0045D290 06                      push es
:0045D291 06                      push es
:0045D292 06                      push es
:0045D293 06                      push es
:0045D294 06                      push es
:0045D295 06                      push es
:0045D296 06                      push es
:0045D297 06                      push es
:0045D298 06                      push es
:0045D299 06                      push es
:0045D29A 06                      push es
:0045D29B 06                      push es
:0045D29C 06                      push es
:0045D29D 06                      push es
:0045D29E 06                      push es
:0045D29F 06                      push es
:0045D2A0 06                      push es
:0045D2A1 06                      push es
:0045D2A2 06                      push es
:0045D2A3 06                      push es
:0045D2A4 06                      push es
:0045D2A5 06                      push es
:0045D2A6 06                      push es
:0045D2A7 06                      push es
:0045D2A8 06                      push es
:0045D2A9 06                      push es
:0045D2AA 06                      push es
:0045D2AB 06                      push es
:0045D2AC 06                      push es
:0045D2AD 06                      push es
:0045D2AE 06                      push es
:0045D2AF 06                      push es
:0045D2B0 06                      push es
:0045D2B1 06                      push es
:0045D2B2 06                      push es
:0045D2B3 06                      push es
:0045D2B4 06                      push es
:0045D2B5 06                      push es
:0045D2B6 06                      push es
:0045D2B7 06                      push es
:0045D2B8 06                      push es
:0045D2B9 06                      push es
:0045D2BA 06                      push es
:0045D2BB 06                      push es
:0045D2BC 06                      push es
:0045D2BD 06                      push es
:0045D2BE 06                      push es
:0045D2BF 06                      push es
:0045D2C0 06                      push es
:0045D2C1 06                      push es
:0045D2C2 06                      push es
:0045D2C3 06                      push es
:0045D2C4 06                      push es
:0045D2C5 06                      push es
:0045D2C6 06                      push es
:0045D2C7 06                      push es
:0045D2C8 06                      push es
:0045D2C9 06                      push es
:0045D2CA 06                      push es
:0045D2CB 06                      push es
:0045D2CC 06                      push es
:0045D2CD 06                      push es
:0045D2CE 06                      push es
:0045D2CF 06                      push es
:0045D2D0 06                      push es
:0045D2D1 06                      push es
:0045D2D2 06                      push es
:0045D2D3 06                      push es
:0045D2D4 0404                    add al, 04
:0045D2D6 06                      push es
:0045D2D7 0505558BEC              add eax, EC8B5505
:0045D2DC 83EC18                  sub esp, 00000018
:0045D2DF 8B4508                  mov eax, dword ptr [ebp+08]
:0045D2E2 25FFFF0000              and eax, 0000FFFF
:0045D2E7 8945F0                  mov dword ptr [ebp-10], eax
:0045D2EA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D2ED 81E1FFFF0000            and ecx, 0000FFFF
:0045D2F3 894DEC                  mov dword ptr [ebp-14], ecx
:0045D2F6 8B5508                  mov edx, dword ptr [ebp+08]
:0045D2F9 C1EA10                  shr edx, 10
:0045D2FC 81E2FFFF0000            and edx, 0000FFFF
:0045D302 52                      push edx
:0045D303 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D306 6BC970                  imul ecx, 00000070
:0045D309 81C198224900            add ecx, 00492298
:0045D30F E8FC74FAFF              call 00404810
:0045D314 25FF000000              and eax, 000000FF
:0045D319 8945F8                  mov dword ptr [ebp-08], eax
:0045D31C 8B450C                  mov eax, dword ptr [ebp+0C]
:0045D31F C1E810                  shr eax, 10
:0045D322 25FFFF0000              and eax, 0000FFFF
:0045D327 50                      push eax
:0045D328 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D32B 6BC970                  imul ecx, 00000070
:0045D32E 81C198224900            add ecx, 00492298
:0045D334 E8D774FAFF              call 00404810
:0045D339 25FF000000              and eax, 000000FF
:0045D33E 8945F4                  mov dword ptr [ebp-0C], eax
:0045D341 C745FC00000000          mov [ebp-04], 00000000
:0045D348 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045D34B 894DE8                  mov dword ptr [ebp-18], ecx
:0045D34E 837DE800                cmp dword ptr [ebp-18], 00000000
:0045D352 7408                    je 0045D35C
:0045D354 837DE801                cmp dword ptr [ebp-18], 00000001
:0045D358 740D                    je 0045D367
:0045D35A EB14                    jmp 0045D370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D352(C)
|
:0045D35C 8B55F8                  mov edx, dword ptr [ebp-08]
:0045D35F 2B55F4                  sub edx, dword ptr [ebp-0C]
:0045D362 8955FC                  mov dword ptr [ebp-04], edx
:0045D365 EB09                    jmp 0045D370

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D358(C)
|
:0045D367 8B45F0                  mov eax, dword ptr [ebp-10]
:0045D36A 2B45EC                  sub eax, dword ptr [ebp-14]
:0045D36D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D35A(U), :0045D365(U)
|
:0045D370 B910584800              mov ecx, 00485810
:0045D375 E8062CFCFF              call 0041FF80
:0045D37A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D37D 0FAFC1                  imul eax, ecx
:0045D380 8BE5                    mov esp, ebp
:0045D382 5D                      pop ebp
:0045D383 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0045D11C   
|
:0045D386 55                      push ebp
:0045D387 8BEC                    mov ebp, esp
:0045D389 8B4508                  mov eax, dword ptr [ebp+08]
:0045D38C 50                      push eax
:0045D38D 68D00B4B00              push 004B0BD0
:0045D392 E848520000              call 004625DF
:0045D397 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->"
"
                                  |
:0045D39A 6898E14700              push 0047E198
:0045D39F 68D00B4B00              push 004B0BD0
:0045D3A4 E875520000              call 0046261E
:0045D3A9 83C408                  add esp, 00000008
:0045D3AC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D3AF 51                      push ecx
:0045D3B0 68D00B4B00              push 004B0BD0
:0045D3B5 E864520000              call 0046261E
:0045D3BA 83C408                  add esp, 00000008
:0045D3BD B8D00B4B00              mov eax, 004B0BD0
:0045D3C2 5D                      pop ebp
:0045D3C3 C3                      ret



* Referenced by a CALL at Address:
|:0045BE3B   
|
:0045D3C4 55                      push ebp
:0045D3C5 8BEC                    mov ebp, esp
:0045D3C7 83EC54                  sub esp, 00000054
:0045D3CA 8D45AC                  lea eax, dword ptr [ebp-54]
:0045D3CD 50                      push eax
:0045D3CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D3D1 51                      push ecx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:0045D3D2 FF15D0864B00            Call dword ptr [004B86D0]
:0045D3D8 8D55F0                  lea edx, dword ptr [ebp-10]
:0045D3DB 52                      push edx
:0045D3DC 8B4508                  mov eax, dword ptr [ebp+08]
:0045D3DF 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045D3E0 FF15C8864B00            Call dword ptr [004B86C8]
:0045D3E6 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA 
                                  |
:0045D3E8 68DA000000              push 000000DA
:0045D3ED 6A64                    push 00000064
:0045D3EF 6A01                    push 00000001
:0045D3F1 6860010000              push 00000160
:0045D3F6 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0045D3FC 51                      push ecx

* Reference To: USER32.LoadImageA, Ord:0178h
                                  |
:0045D3FD FF1530864B00            Call dword ptr [004B8630]
:0045D403 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045D406 6A03                    push 00000003
:0045D408 6A00                    push 00000000
:0045D40A 6A00                    push 00000000
:0045D40C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D40F 52                      push edx
:0045D410 8B45F8                  mov eax, dword ptr [ebp-08]
:0045D413 50                      push eax
:0045D414 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D417 51                      push ecx
:0045D418 6A00                    push 00000000
:0045D41A 6A00                    push 00000000
:0045D41C 8B55AC                  mov edx, dword ptr [ebp-54]
:0045D41F 52                      push edx

* Reference To: USER32.DrawIconEx, Ord:00A5h
                                  |
:0045D420 FF153C874B00            Call dword ptr [004B873C]
:0045D426 8B45EC                  mov eax, dword ptr [ebp-14]
:0045D429 50                      push eax

* Reference To: USER32.DestroyIcon, Ord:0088h
                                  |
:0045D42A FF152C864B00            Call dword ptr [004B862C]
:0045D430 8D4DAC                  lea ecx, dword ptr [ebp-54]
:0045D433 51                      push ecx
:0045D434 8B5508                  mov edx, dword ptr [ebp+08]
:0045D437 52                      push edx

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:0045D438 FF15D4864B00            Call dword ptr [004B86D4]
:0045D43E 8BE5                    mov esp, ebp
:0045D440 5D                      pop ebp
:0045D441 C3                      ret



* Referenced by a CALL at Addresses:
|:0045BE58   , :0045BE75   , :0045BE92   , :0045BEAF   , :0045BECC   
|:0045BEE9   , :0045BF06   , :0045BF23   
|
:0045D442 55                      push ebp
:0045D443 8BEC                    mov ebp, esp
:0045D445 83EC54                  sub esp, 00000054
:0045D448 8D45F0                  lea eax, dword ptr [ebp-10]
:0045D44B 50                      push eax
:0045D44C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D44F 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045D450 FF15C8864B00            Call dword ptr [004B86C8]
:0045D456 8B550C                  mov edx, dword ptr [ebp+0C]
:0045D459 81E2FFFF0000            and edx, 0000FFFF
:0045D45F 52                      push edx
:0045D460 A1300E4B00              mov eax, dword ptr [004B0E30]
:0045D465 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045D466 FF15E8864B00            Call dword ptr [004B86E8]
:0045D46C 8945EC                  mov dword ptr [ebp-14], eax
:0045D46F 8D4DAC                  lea ecx, dword ptr [ebp-54]
:0045D472 51                      push ecx
:0045D473 8B5508                  mov edx, dword ptr [ebp+08]
:0045D476 52                      push edx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:0045D477 FF15D0864B00            Call dword ptr [004B86D0]
:0045D47D 8B45EC                  mov eax, dword ptr [ebp-14]
:0045D480 50                      push eax
:0045D481 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D484 83E820                  sub eax, 00000020
:0045D487 99                      cdq
:0045D488 2BC2                    sub eax, edx
:0045D48A D1F8                    sar eax, 1
:0045D48C 50                      push eax
:0045D48D 8B45F8                  mov eax, dword ptr [ebp-08]
:0045D490 83E820                  sub eax, 00000020
:0045D493 99                      cdq
:0045D494 2BC2                    sub eax, edx
:0045D496 D1F8                    sar eax, 1
:0045D498 50                      push eax
:0045D499 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0045D49C 51                      push ecx

* Reference To: USER32.DrawIcon, Ord:00A4h
                                  |
:0045D49D FF15BC874B00            Call dword ptr [004B87BC]
:0045D4A3 8D55AC                  lea edx, dword ptr [ebp-54]
:0045D4A6 52                      push edx
:0045D4A7 8B4508                  mov eax, dword ptr [ebp+08]
:0045D4AA 50                      push eax

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:0045D4AB FF15D4864B00            Call dword ptr [004B86D4]
:0045D4B1 8BE5                    mov esp, ebp
:0045D4B3 5D                      pop ebp
:0045D4B4 C3                      ret



* Referenced by a CALL at Address:
|:0045C049   
|
:0045D4B5 55                      push ebp
:0045D4B6 8BEC                    mov ebp, esp
:0045D4B8 6A00                    push 00000000
:0045D4BA 6A00                    push 00000000
:0045D4BC 6809100000              push 00001009
:0045D4C1 8B4508                  mov eax, dword ptr [ebp+08]
:0045D4C4 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045D4C5 FF15D8864B00            Call dword ptr [004B86D8]
:0045D4CB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D4CE 51                      push ecx
:0045D4CF E861F1FFFF              call 0045C635
:0045D4D4 83C404                  add esp, 00000004
:0045D4D7 5D                      pop ebp
:0045D4D8 C3                      ret



* Referenced by a CALL at Addresses:
|:0045C0B4   , :0045C0CB   
|
:0045D4D9 55                      push ebp
:0045D4DA 8BEC                    mov ebp, esp
:0045D4DC 83EC14                  sub esp, 00000014
:0045D4DF 8B450C                  mov eax, dword ptr [ebp+0C]
:0045D4E2 50                      push eax
:0045D4E3 E8CEF6FFFF              call 0045CBB6
:0045D4E8 83C404                  add esp, 00000004
:0045D4EB 8945F8                  mov dword ptr [ebp-08], eax
:0045D4EE 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045D4F1 51                      push ecx
:0045D4F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D4F5 6BC933                  imul ecx, 00000033
:0045D4F8 81C1C8EF4800            add ecx, 0048EFC8
:0045D4FE E86D1E0000              call 0045F370
:0045D503 25FF000000              and eax, 000000FF
:0045D508 8945FC                  mov dword ptr [ebp-04], eax
:0045D50B 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0045D512 7505                    jne 0045D519
:0045D514 E9E5010000              jmp 0045D6FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D512(C)
|
:0045D519 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D51C 6BC933                  imul ecx, 00000033
:0045D51F 81C1C8EF4800            add ecx, 0048EFC8
:0045D525 E86671FAFF              call 00404690
:0045D52A 25FF000000              and eax, 000000FF
:0045D52F 50                      push eax
:0045D530 B9C8E24A00              mov ecx, 004AE2C8
:0045D535 E806A2FAFF              call 00407740
:0045D53A 25FF000000              and eax, 000000FF
:0045D53F 8945F0                  mov dword ptr [ebp-10], eax
:0045D542 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D545 6BC933                  imul ecx, 00000033
:0045D548 81C1C8EF4800            add ecx, 0048EFC8
:0045D54E E8BD2AFCFF              call 00420010
:0045D553 25FF000000              and eax, 000000FF
:0045D558 83C001                  add eax, 00000001
:0045D55B 3945F0                  cmp dword ptr [ebp-10], eax
:0045D55E 731F                    jnb 0045D57F
:0045D560 6A01                    push 00000001
:0045D562 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"s@FC"
                                  |
:0045D564 689CE14700              push 0047E19C

* Possible StringData Ref from Data Obj ->"å޳N٤A"
                                  |
:0045D569 68A8E14700              push 0047E1A8
:0045D56E 8B5508                  mov edx, dword ptr [ebp+08]
:0045D571 52                      push edx
:0045D572 E8D8E0FFFF              call 0045B64F
:0045D577 83C414                  add esp, 00000014
:0045D57A E97F010000              jmp 0045D6FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D55E(C)
|
:0045D57F 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D582 50                      push eax
:0045D583 E899E3FFFF              call 0045B921
:0045D588 83C404                  add esp, 00000004
:0045D58B 8945EC                  mov dword ptr [ebp-14], eax
:0045D58E B9C8E24A00              mov ecx, 004AE2C8
:0045D593 E83821FDFF              call 0042F6D0
:0045D598 3945EC                  cmp dword ptr [ebp-14], eax
:0045D59B 7C1F                    jl 0045D5BC
:0045D59D 6A01                    push 00000001
:0045D59F 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"٤C"
                                  |
:0045D5A1 68BCE14700              push 0047E1BC

* Possible StringData Ref from Data Obj ->"nyåA"
                                  |
:0045D5A6 68C8E14700              push 0047E1C8
:0045D5AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D5AE 51                      push ecx
:0045D5AF E89BE0FFFF              call 0045B64F
:0045D5B4 83C414                  add esp, 00000014
:0045D5B7 E942010000              jmp 0045D6FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D59B(C)
|
:0045D5BC 8B55F8                  mov edx, dword ptr [ebp-08]
:0045D5BF 52                      push edx
:0045D5C0 E87AE3FFFF              call 0045B93F
:0045D5C5 83C404                  add esp, 00000004
:0045D5C8 8945F4                  mov dword ptr [ebp-0C], eax
:0045D5CB B9C8E24A00              mov ecx, 004AE2C8
:0045D5D0 E82B26FDFF              call 0042FC00
:0045D5D5 25FF000000              and eax, 000000FF
:0045D5DA 3945F4                  cmp dword ptr [ebp-0C], eax
:0045D5DD 761F                    jbe 0045D5FE
:0045D5DF 6A01                    push 00000001
:0045D5E1 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Nֲ֦FC"
                                  |
:0045D5E3 68D8E14700              push 0047E1D8

* Possible StringData Ref from Data Obj ->"ڨSy"
                                  |
:0045D5E8 68E8E14700              push 0047E1E8
:0045D5ED 8B4508                  mov eax, dword ptr [ebp+08]
:0045D5F0 50                      push eax
:0045D5F1 E859E0FFFF              call 0045B64F
:0045D5F6 83C414                  add esp, 00000014
:0045D5F9 E900010000              jmp 0045D6FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D5DD(C)
|
:0045D5FE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D601 81E1FFFF0000            and ecx, 0000FFFF
:0045D607 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D60A 81E2FFFF0000            and edx, 0000FFFF
:0045D610 C1E210                  shl edx, 10
:0045D613 0BCA                    or ecx, edx
:0045D615 51                      push ecx
:0045D616 688FB64500              push 0045B68F
:0045D61B 8B4508                  mov eax, dword ptr [ebp+08]
:0045D61E 50                      push eax

* Possible Reference to Dialog: DialogID_014A 
                                  |
:0045D61F 684A010000              push 0000014A
:0045D624 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0045D62A 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045D62B FF1520874B00            Call dword ptr [004B8720]
:0045D631 85C0                    test eax, eax
:0045D633 0F84C5000000            je 0045D6FE
:0045D639 B9C8E24A00              mov ecx, 004AE2C8
:0045D63E E88D20FDFF              call 0042F6D0
:0045D643 2B45EC                  sub eax, dword ptr [ebp-14]
:0045D646 50                      push eax
:0045D647 B9C8E24A00              mov ecx, 004AE2C8
:0045D64C E82FA1FAFF              call 00407780
:0045D651 B9C8E24A00              mov ecx, 004AE2C8
:0045D656 E8A525FDFF              call 0042FC00
:0045D65B 25FF000000              and eax, 000000FF
:0045D660 2B45F4                  sub eax, dword ptr [ebp-0C]
:0045D663 50                      push eax
:0045D664 B9C8E24A00              mov ecx, 004AE2C8
:0045D669 E8B225FDFF              call 0042FC20
:0045D66E 6A01                    push 00000001
:0045D670 6A00                    push 00000000
:0045D672 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"е@UKK"
                                  |
:0045D674 68F4E14700              push 0047E1F4
:0045D679 8B5508                  mov edx, dword ptr [ebp+08]
:0045D67C 52                      push edx
:0045D67D E8CDDFFFFF              call 0045B64F
:0045D682 83C414                  add esp, 00000014
:0045D685 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D688 50                      push eax
:0045D689 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D68C 51                      push ecx
:0045D68D 8B5508                  mov edx, dword ptr [ebp+08]
:0045D690 52                      push edx
:0045D691 E88D000000              call 0045D723
:0045D696 83C40C                  add esp, 0000000C
:0045D699 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D69C 6BC933                  imul ecx, 00000033
:0045D69F 81C1C8EF4800            add ecx, 0048EFC8
:0045D6A5 E8E66FFAFF              call 00404690
:0045D6AA 25FF000000              and eax, 000000FF
:0045D6AF 50                      push eax
:0045D6B0 8B45F8                  mov eax, dword ptr [ebp-08]
:0045D6B3 50                      push eax
:0045D6B4 E849000000              call 0045D702
:0045D6B9 83C404                  add esp, 00000004
:0045D6BC 50                      push eax
:0045D6BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D6C0 51                      push ecx
:0045D6C1 E837020000              call 0045D8FD
:0045D6C6 83C40C                  add esp, 0000000C
:0045D6C9 8B5508                  mov edx, dword ptr [ebp+08]
:0045D6CC 52                      push edx
:0045D6CD E8DAF0FFFF              call 0045C7AC
:0045D6D2 83C404                  add esp, 00000004
:0045D6D5 6A01                    push 00000001
:0045D6D7 6A00                    push 00000000
:0045D6D9 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ڡAiHFC"
                                  |
:0045D6DB 6804E24700              push 0047E204
:0045D6E0 8B4508                  mov eax, dword ptr [ebp+08]
:0045D6E3 50                      push eax
:0045D6E4 E866DFFFFF              call 0045B64F
:0045D6E9 83C414                  add esp, 00000014
:0045D6EC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D6EF 81E1FFFF0000            and ecx, 0000FFFF
:0045D6F5 51                      push ecx
:0045D6F6 E855980000              call 00466F50
:0045D6FB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D514(U), :0045D57A(U), :0045D5B7(U), :0045D5F9(U), :0045D633(C)
|
:0045D6FE 8BE5                    mov esp, ebp
:0045D700 5D                      pop ebp
:0045D701 C3                      ret



* Referenced by a CALL at Address:
|:0045D6B4   
|
:0045D702 55                      push ebp
:0045D703 8BEC                    mov ebp, esp
:0045D705 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D708 6BC933                  imul ecx, 00000033
:0045D70B 81C1C8EF4800            add ecx, 0048EFC8
:0045D711 E8FA28FCFF              call 00420010
:0045D716 25FF000000              and eax, 000000FF
:0045D71B 83C001                  add eax, 00000001
:0045D71E 6BC00A                  imul eax, 0000000A
:0045D721 5D                      pop ebp
:0045D722 C3                      ret



* Referenced by a CALL at Address:
|:0045D691   
|
:0045D723 55                      push ebp
:0045D724 8BEC                    mov ebp, esp
:0045D726 83EC0C                  sub esp, 0000000C
:0045D729 8B450C                  mov eax, dword ptr [ebp+0C]
:0045D72C 25FFFF0000              and eax, 0000FFFF
:0045D731 8945FC                  mov dword ptr [ebp-04], eax
:0045D734 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D737 C1E910                  shr ecx, 10
:0045D73A 81E1FFFF0000            and ecx, 0000FFFF
:0045D740 81E1FFFF0000            and ecx, 0000FFFF
:0045D746 894DF8                  mov dword ptr [ebp-08], ecx
:0045D749 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D74C 6BC970                  imul ecx, 00000070
:0045D74F 81C198224900            add ecx, 00492298
:0045D755 E89670FAFF              call 004047F0
:0045D75A 25FF000000              and eax, 000000FF
:0045D75F 33D2                    xor edx, edx
:0045D761 3B45F8                  cmp eax, dword ptr [ebp-08]
:0045D764 0F94C2                  sete dl
:0045D767 8955F4                  mov dword ptr [ebp-0C], edx
:0045D76A 8A4510                  mov al, byte ptr [ebp+10]
:0045D76D 50                      push eax
:0045D76E 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045D771 51                      push ecx
:0045D772 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D775 6BC970                  imul ecx, 00000070
:0045D778 81C198224900            add ecx, 00492298
:0045D77E E8AD70FAFF              call 00404830
:0045D783 837DF400                cmp dword ptr [ebp-0C], 00000000
:0045D787 7415                    je 0045D79E
:0045D789 8A55F8                  mov dl, byte ptr [ebp-08]
:0045D78C 52                      push edx
:0045D78D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D790 6BC970                  imul ecx, 00000070
:0045D793 81C198224900            add ecx, 00492298
:0045D799 E8C345FAFF              call 00401D61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D787(C)
|
:0045D79E 8B4510                  mov eax, dword ptr [ebp+10]
:0045D7A1 50                      push eax
:0045D7A2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D7A5 51                      push ecx
:0045D7A6 8B5508                  mov edx, dword ptr [ebp+08]
:0045D7A9 52                      push edx
:0045D7AA E817000000              call 0045D7C6
:0045D7AF 83C40C                  add esp, 0000000C
:0045D7B2 8B450C                  mov eax, dword ptr [ebp+0C]
:0045D7B5 50                      push eax
:0045D7B6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D7B9 51                      push ecx
:0045D7BA E8DEF1FFFF              call 0045C99D
:0045D7BF 83C408                  add esp, 00000008
:0045D7C2 8BE5                    mov esp, ebp
:0045D7C4 5D                      pop ebp
:0045D7C5 C3                      ret



* Referenced by a CALL at Address:
|:0045D7AA   
|
:0045D7C6 55                      push ebp
:0045D7C7 8BEC                    mov ebp, esp
:0045D7C9 83EC30                  sub esp, 00000030
:0045D7CC 68AF050000              push 000005AF
:0045D7D1 8B4508                  mov eax, dword ptr [ebp+08]
:0045D7D4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045D7D5 FF15AC864B00            Call dword ptr [004B86AC]
:0045D7DB 8945F8                  mov dword ptr [ebp-08], eax
:0045D7DE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D7E1 51                      push ecx
:0045D7E2 8B55F8                  mov edx, dword ptr [ebp-08]
:0045D7E5 52                      push edx
:0045D7E6 E84C000000              call 0045D837
:0045D7EB 83C408                  add esp, 00000008
:0045D7EE 8945FC                  mov dword ptr [ebp-04], eax
:0045D7F1 8B4510                  mov eax, dword ptr [ebp+10]
:0045D7F4 50                      push eax
:0045D7F5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D7F8 51                      push ecx
:0045D7F9 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D7FC 52                      push edx
:0045D7FD 8D45D0                  lea eax, dword ptr [ebp-30]
:0045D800 50                      push eax
:0045D801 E889000000              call 0045D88F
:0045D806 83C410                  add esp, 00000010
:0045D809 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0045D80C 51                      push ecx
:0045D80D 6A00                    push 00000000
:0045D80F 6806100000              push 00001006
:0045D814 8B55F8                  mov edx, dword ptr [ebp-08]
:0045D817 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045D818 FF15D8864B00            Call dword ptr [004B86D8]
:0045D81E 6A00                    push 00000000
:0045D820 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D823 50                      push eax
:0045D824 6813100000              push 00001013
:0045D829 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D82C 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045D82D FF15D8864B00            Call dword ptr [004B86D8]
:0045D833 8BE5                    mov esp, ebp
:0045D835 5D                      pop ebp
:0045D836 C3                      ret



* Referenced by a CALL at Address:
|:0045D7E6   
|
:0045D837 55                      push ebp
:0045D838 8BEC                    mov ebp, esp
:0045D83A 83EC08                  sub esp, 00000008
:0045D83D 6A00                    push 00000000
:0045D83F 6A00                    push 00000000
:0045D841 6804100000              push 00001004
:0045D846 8B4508                  mov eax, dword ptr [ebp+08]
:0045D849 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045D84A FF15D8864B00            Call dword ptr [004B86D8]
:0045D850 8945F8                  mov dword ptr [ebp-08], eax
:0045D853 C745FC00000000          mov [ebp-04], 00000000
:0045D85A EB09                    jmp 0045D865

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D887(U)
|
:0045D85C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D85F 83C101                  add ecx, 00000001
:0045D862 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D85A(U)
|
:0045D865 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D868 3B55F8                  cmp edx, dword ptr [ebp-08]
:0045D86B 7D1C                    jge 0045D889
:0045D86D 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D870 50                      push eax
:0045D871 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D874 51                      push ecx
:0045D875 E8FC9DFBFF              call 00417676
:0045D87A 83C408                  add esp, 00000008
:0045D87D 39450C                  cmp dword ptr [ebp+0C], eax
:0045D880 7505                    jne 0045D887
:0045D882 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D885 EB04                    jmp 0045D88B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D880(C)
|
:0045D887 EBD3                    jmp 0045D85C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D86B(C)
|
:0045D889 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D885(U)
|
:0045D88B 8BE5                    mov esp, ebp
:0045D88D 5D                      pop ebp
:0045D88E C3                      ret



* Referenced by a CALL at Address:
|:0045D801   
|
:0045D88F 55                      push ebp
:0045D890 8BEC                    mov ebp, esp
:0045D892 8B4508                  mov eax, dword ptr [ebp+08]

* Possible Reference to String Resource ID=00015: ""
                                  |
:0045D895 C7000F000000            mov dword ptr [eax], 0000000F
:0045D89B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D89E C7410C00000000          mov [ecx+0C], 00000000
:0045D8A5 8B5508                  mov edx, dword ptr [ebp+08]
:0045D8A8 C7421000000000          mov [edx+10], 00000000
:0045D8AF 8B4508                  mov eax, dword ptr [ebp+08]
:0045D8B2 C7400800000000          mov [eax+08], 00000000
:0045D8B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D8BC C74114FFFFFFFF          mov [ecx+14], FFFFFFFF
:0045D8C3 8B5508                  mov edx, dword ptr [ebp+08]
:0045D8C6 C7421820000000          mov [edx+18], 00000020
:0045D8CD 8B4508                  mov eax, dword ptr [ebp+08]
:0045D8D0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045D8D3 894804                  mov dword ptr [eax+04], ecx
:0045D8D6 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045D8D9 6BC933                  imul ecx, 00000033
:0045D8DC 81C1C8EF4800            add ecx, 0048EFC8
:0045D8E2 E8C96DFAFF              call 004046B0
:0045D8E7 25FF000000              and eax, 000000FF
:0045D8EC 8B5508                  mov edx, dword ptr [ebp+08]
:0045D8EF 89421C                  mov dword ptr [edx+1C], eax
:0045D8F2 8B4508                  mov eax, dword ptr [ebp+08]
:0045D8F5 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045D8F8 894820                  mov dword ptr [eax+20], ecx
:0045D8FB 5D                      pop ebp
:0045D8FC C3                      ret



* Referenced by a CALL at Address:
|:0045D6C1   
|
:0045D8FD 55                      push ebp
:0045D8FE 8BEC                    mov ebp, esp
:0045D900 83EC24                  sub esp, 00000024
:0045D903 53                      push ebx
:0045D904 8B4510                  mov eax, dword ptr [ebp+10]
:0045D907 50                      push eax
:0045D908 B9C8E24A00              mov ecx, 004AE2C8
:0045D90D E89E1A0000              call 0045F3B0
:0045D912 25FF000000              and eax, 000000FF
:0045D917 03450C                  add eax, dword ptr [ebp+0C]
:0045D91A 50                      push eax
:0045D91B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045D91E 51                      push ecx
:0045D91F B9C8E24A00              mov ecx, 004AE2C8
:0045D924 E8A71A0000              call 0045F3D0
:0045D929 C745FC00000000          mov [ebp-04], 00000000
:0045D930 EB09                    jmp 0045D93B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DA7A(U)
|
:0045D932 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D935 83C201                  add edx, 00000001
:0045D938 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D930(U)
|
:0045D93B 837DFC03                cmp dword ptr [ebp-04], 00000003
:0045D93F 0F8D3A010000            jnl 0045DA7F
:0045D945 8B4510                  mov eax, dword ptr [ebp+10]
:0045D948 50                      push eax
:0045D949 B9C8E24A00              mov ecx, 004AE2C8
:0045D94E E85D1A0000              call 0045F3B0
:0045D953 8AD8                    mov bl, al
:0045D955 81E3FF000000            and ebx, 000000FF
:0045D95B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045D95E 51                      push ecx
:0045D95F B9C8E24A00              mov ecx, 004AE2C8
:0045D964 E8D79DFAFF              call 00407740
:0045D969 25FF000000              and eax, 000000FF
:0045D96E 6BC028                  imul eax, 00000028
:0045D971 3BD8                    cmp ebx, eax
:0045D973 0F8CFF000000            jl 0045DA78
:0045D979 8B5510                  mov edx, dword ptr [ebp+10]
:0045D97C 52                      push edx
:0045D97D B9C8E24A00              mov ecx, 004AE2C8
:0045D982 E8B99DFAFF              call 00407740
:0045D987 25FF000000              and eax, 000000FF
:0045D98C 83F803                  cmp eax, 00000003
:0045D98F 0F8DE3000000            jnl 0045DA78
:0045D995 8B4510                  mov eax, dword ptr [ebp+10]
:0045D998 50                      push eax
:0045D999 B9C8E24A00              mov ecx, 004AE2C8
:0045D99E E80D1A0000              call 0045F3B0
:0045D9A3 8AD8                    mov bl, al
:0045D9A5 81E3FF000000            and ebx, 000000FF
:0045D9AB 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045D9AE 51                      push ecx
:0045D9AF B9C8E24A00              mov ecx, 004AE2C8
:0045D9B4 E8879DFAFF              call 00407740
:0045D9B9 25FF000000              and eax, 000000FF
:0045D9BE 6BC028                  imul eax, 00000028
:0045D9C1 2BD8                    sub ebx, eax
:0045D9C3 53                      push ebx
:0045D9C4 8B5510                  mov edx, dword ptr [ebp+10]
:0045D9C7 52                      push edx
:0045D9C8 B9C8E24A00              mov ecx, 004AE2C8
:0045D9CD E8FE190000              call 0045F3D0
:0045D9D2 8B4510                  mov eax, dword ptr [ebp+10]
:0045D9D5 50                      push eax
:0045D9D6 B9C8E24A00              mov ecx, 004AE2C8
:0045D9DB E8609DFAFF              call 00407740
:0045D9E0 25FF000000              and eax, 000000FF
:0045D9E5 83C001                  add eax, 00000001
:0045D9E8 50                      push eax
:0045D9E9 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045D9EC 51                      push ecx
:0045D9ED B9C8E24A00              mov ecx, 004AE2C8
:0045D9F2 E899190000              call 0045F390
:0045D9F7 8B5508                  mov edx, dword ptr [ebp+08]
:0045D9FA 52                      push edx
:0045D9FB E8ACEDFFFF              call 0045C7AC
:0045DA00 83C404                  add esp, 00000004

* Possible StringData Ref from Data Obj ->"M"
                                  |
:0045DA03 C745DC14E24700          mov [ebp-24], 0047E214

* Possible StringData Ref from Data Obj ->"j"
                                  |
:0045DA0A C745E018E24700          mov [ebp-20], 0047E218

* Possible StringData Ref from Data Obj ->"}"
                                  |
:0045DA11 C745E41CE24700          mov [ebp-1C], 0047E21C

* Possible StringData Ref from Data Obj ->"vj"
                                  |
:0045DA18 C745E820E24700          mov [ebp-18], 0047E220

* Possible StringData Ref from Data Obj ->"j"
                                  |
:0045DA1F C745EC28E24700          mov [ebp-14], 0047E228

* Possible StringData Ref from Data Obj ->"Ԩ"
                                  |
:0045DA26 C745F030E24700          mov [ebp-10], 0047E230

* Possible StringData Ref from Data Obj ->"x"
                                  |
:0045DA2D C745F438E24700          mov [ebp-0C], 0047E238

* Possible StringData Ref from Data Obj ->"@"
                                  |
:0045DA34 C745F840E24700          mov [ebp-08], 0047E240

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045DA3B 6A05                    push 00000005
:0045DA3D B9800D4B00              mov ecx, 004B0D80
:0045DA42 E862410000              call 00461BA9
:0045DA47 8B4510                  mov eax, dword ptr [ebp+10]
:0045DA4A 50                      push eax
:0045DA4B B9C8E24A00              mov ecx, 004AE2C8
:0045DA50 E8EB9CFAFF              call 00407740
:0045DA55 25FF000000              and eax, 000000FF
:0045DA5A 50                      push eax
:0045DA5B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045DA5E 8B548DDC                mov edx, dword ptr [ebp+4*ecx-24]
:0045DA62 52                      push edx

* Possible StringData Ref from Data Obj ->"%sjƪ޳NF%uFC"
                                  |
:0045DA63 6848E24700              push 0047E248
:0045DA68 6A00                    push 00000000
:0045DA6A 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA6D 50                      push eax
:0045DA6E E8EC95FBFF              call 0041705F
:0045DA73 83C414                  add esp, 00000014
:0045DA76 EB02                    jmp 0045DA7A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D973(C), :0045D98F(C)
|
:0045DA78 EB05                    jmp 0045DA7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DA76(U)
|
:0045DA7A E9B3FEFFFF              jmp 0045D932

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D93F(C), :0045DA78(U)
|
:0045DA7F 5B                      pop ebx
:0045DA80 8BE5                    mov esp, ebp
:0045DA82 5D                      pop ebp
:0045DA83 C3                      ret



* Referenced by a CALL at Address:
|:0045BFAB   
|
:0045DA84 55                      push ebp
:0045DA85 8BEC                    mov ebp, esp
:0045DA87 83EC0C                  sub esp, 0000000C
:0045DA8A 817D10AF050000          cmp dword ptr [ebp+10], 000005AF
:0045DA91 7525                    jne 0045DAB8
:0045DA93 6A01                    push 00000001
:0045DA95 B9C8E24A00              mov ecx, 004AE2C8
:0045DA9A E80125FCFF              call 0041FFA0
:0045DA9F 85C0                    test eax, eax
:0045DAA1 7510                    jne 0045DAB3
:0045DAA3 8B450C                  mov eax, dword ptr [ebp+0C]
:0045DAA6 50                      push eax
:0045DAA7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DAAA 51                      push ecx
:0045DAAB E891000000              call 0045DB41
:0045DAB0 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DAA1(C)
|
:0045DAB3 E985000000              jmp 0045DB3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DA91(C)
|
:0045DAB8 8B550C                  mov edx, dword ptr [ebp+0C]
:0045DABB 8B420C                  mov eax, dword ptr [edx+0C]
:0045DABE 83E004                  and eax, 00000004
:0045DAC1 85C0                    test eax, eax
:0045DAC3 7402                    je 0045DAC7
:0045DAC5 EB76                    jmp 0045DB3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DAC3(C)
|
:0045DAC7 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045DACA 51                      push ecx
:0045DACB E8E6F0FFFF              call 0045CBB6
:0045DAD0 83C404                  add esp, 00000004
:0045DAD3 8945FC                  mov dword ptr [ebp-04], eax
:0045DAD6 817D10A7050000          cmp dword ptr [ebp+10], 000005A7
:0045DADD 7518                    jne 0045DAF7
:0045DADF 6A00                    push 00000000
:0045DAE1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DAE4 6BC933                  imul ecx, 00000033
:0045DAE7 81C1C8EF4800            add ecx, 0048EFC8
:0045DAED E87E180000              call 0045F370
:0045DAF2 8845F4                  mov byte ptr [ebp-0C], al
:0045DAF5 EB16                    jmp 0045DB0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DADD(C)
|
:0045DAF7 6A01                    push 00000001
:0045DAF9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DAFC 6BC933                  imul ecx, 00000033
:0045DAFF 81C1C8EF4800            add ecx, 0048EFC8
:0045DB05 E866180000              call 0045F370
:0045DB0A 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DAF5(U)
|
:0045DB0D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045DB10 81E2FF000000            and edx, 000000FF
:0045DB16 8955F8                  mov dword ptr [ebp-08], edx
:0045DB19 8B450C                  mov eax, dword ptr [ebp+0C]
:0045DB1C 8B4810                  mov ecx, dword ptr [eax+10]
:0045DB1F 83E101                  and ecx, 00000001
:0045DB22 51                      push ecx
:0045DB23 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DB26 52                      push edx
:0045DB27 8B450C                  mov eax, dword ptr [ebp+0C]
:0045DB2A 8B4818                  mov ecx, dword ptr [eax+18]
:0045DB2D 51                      push ecx
:0045DB2E 8B550C                  mov edx, dword ptr [ebp+0C]
:0045DB31 8B4214                  mov eax, dword ptr [edx+14]
:0045DB34 50                      push eax
:0045DB35 E840F3FFFF              call 0045CE7A
:0045DB3A 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045DAB3(U), :0045DAC5(U)
|
:0045DB3D 8BE5                    mov esp, ebp
:0045DB3F 5D                      pop ebp
:0045DB40 C3                      ret



* Referenced by a CALL at Address:
|:0045DAAB   
|
:0045DB41 55                      push ebp
:0045DB42 8BEC                    mov ebp, esp
:0045DB44 83EC38                  sub esp, 00000038
:0045DB47 68AF050000              push 000005AF
:0045DB4C 8B4508                  mov eax, dword ptr [ebp+08]
:0045DB4F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045DB50 FF15AC864B00            Call dword ptr [004B86AC]
:0045DB56 8945CC                  mov dword ptr [ebp-34], eax
:0045DB59 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045DB5C 8B5108                  mov edx, dword ptr [ecx+08]
:0045DB5F 52                      push edx
:0045DB60 8B45CC                  mov eax, dword ptr [ebp-34]
:0045DB63 50                      push eax
:0045DB64 E80D9BFBFF              call 00417676
:0045DB69 83C408                  add esp, 00000008
:0045DB6C 8945E4                  mov dword ptr [ebp-1C], eax
:0045DB6F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045DB72 81E1FFFF0000            and ecx, 0000FFFF
:0045DB78 894DE8                  mov dword ptr [ebp-18], ecx
:0045DB7B 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045DB7E C1EA10                  shr edx, 10
:0045DB81 81E2FFFF0000            and edx, 0000FFFF
:0045DB87 8855E0                  mov byte ptr [ebp-20], dl
:0045DB8A 8A45E0                  mov al, byte ptr [ebp-20]
:0045DB8D 50                      push eax
:0045DB8E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045DB91 6BC970                  imul ecx, 00000070
:0045DB94 81C198224900            add ecx, 00492298
:0045DB9A E8716CFAFF              call 00404810
:0045DB9F 25FF000000              and eax, 000000FF
:0045DBA4 8945FC                  mov dword ptr [ebp-04], eax
:0045DBA7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045DBAA 83C11C                  add ecx, 0000001C
:0045DBAD 8B11                    mov edx, dword ptr [ecx]
:0045DBAF 8955EC                  mov dword ptr [ebp-14], edx
:0045DBB2 8B4104                  mov eax, dword ptr [ecx+04]
:0045DBB5 8945F0                  mov dword ptr [ebp-10], eax
:0045DBB8 8B5108                  mov edx, dword ptr [ecx+08]
:0045DBBB 8955F4                  mov dword ptr [ebp-0C], edx
:0045DBBE 8B410C                  mov eax, dword ptr [ecx+0C]
:0045DBC1 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045DBC4 6A02                    push 00000002
:0045DBC6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045DBC9 8B5108                  mov edx, dword ptr [ecx+08]
:0045DBCC 52                      push edx
:0045DBCD 682C100000              push 0000102C
:0045DBD2 8B45CC                  mov eax, dword ptr [ebp-34]
:0045DBD5 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045DBD6 FF15D8864B00            Call dword ptr [004B86D8]
:0045DBDC 33C9                    xor ecx, ecx
:0045DBDE 83F802                  cmp eax, 00000002
:0045DBE1 0F94C1                  sete cl
:0045DBE4 894DC8                  mov dword ptr [ebp-38], ecx
:0045DBE7 8B55EC                  mov edx, dword ptr [ebp-14]
:0045DBEA 8955D0                  mov dword ptr [ebp-30], edx
:0045DBED 8B45F0                  mov eax, dword ptr [ebp-10]
:0045DBF0 8945D4                  mov dword ptr [ebp-2C], eax
:0045DBF3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045DBF6 894DD8                  mov dword ptr [ebp-28], ecx
:0045DBF9 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DBFC 8955DC                  mov dword ptr [ebp-24], edx
:0045DBFF C745D000000000          mov [ebp-30], 00000000
:0045DC06 6A00                    push 00000000
:0045DC08 6A00                    push 00000000
:0045DC0A 681D100000              push 0000101D
:0045DC0F 8B45CC                  mov eax, dword ptr [ebp-34]
:0045DC12 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045DC13 FF15D8864B00            Call dword ptr [004B86D8]
:0045DC19 8945D8                  mov dword ptr [ebp-28], eax
:0045DC1C 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045DC1F 51                      push ecx
:0045DC20 8D55D0                  lea edx, dword ptr [ebp-30]
:0045DC23 52                      push edx
:0045DC24 8B450C                  mov eax, dword ptr [ebp+0C]
:0045DC27 8B4818                  mov ecx, dword ptr [eax+18]
:0045DC2A 51                      push ecx
:0045DC2B E80501FCFF              call 0041DD35
:0045DC30 83C40C                  add esp, 0000000C
:0045DC33 6A00                    push 00000000
:0045DC35 8B550C                  mov edx, dword ptr [ebp+0C]
:0045DC38 8B4220                  mov eax, dword ptr [edx+20]
:0045DC3B 50                      push eax
:0045DC3C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045DC3F 8B511C                  mov edx, dword ptr [ecx+1C]
:0045DC42 52                      push edx
:0045DC43 8B450C                  mov eax, dword ptr [ebp+0C]
:0045DC46 8B4818                  mov ecx, dword ptr [eax+18]
:0045DC49 51                      push ecx
:0045DC4A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DC4D 6BC933                  imul ecx, 00000033
:0045DC50 81C1C8EF4800            add ecx, 0048EFC8
:0045DC56 E8556AFAFF              call 004046B0
:0045DC5B 25FF000000              and eax, 000000FF
:0045DC60 50                      push eax
:0045DC61 B910584800              mov ecx, 00485810
:0045DC66 E83552FFFF              call 00452EA0
:0045DC6B 50                      push eax

* Reference To: COMCTL32.ImageList_Draw, Ord:001Ch
                                  |
:0045DC6C FF1558844B00            Call dword ptr [004B8458]
:0045DC72 6A00                    push 00000000
:0045DC74 6A00                    push 00000000
:0045DC76 681D100000              push 0000101D
:0045DC7B 8B55CC                  mov edx, dword ptr [ebp-34]
:0045DC7E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045DC7F FF15D8864B00            Call dword ptr [004B86D8]
:0045DC85 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045DC88 8D5401FE                lea edx, dword ptr [ecx+eax-02]
:0045DC8C 8955F4                  mov dword ptr [ebp-0C], edx
:0045DC8F 8B45EC                  mov eax, dword ptr [ebp-14]
:0045DC92 83C012                  add eax, 00000012
:0045DC95 8945EC                  mov dword ptr [ebp-14], eax
:0045DC98 6A00                    push 00000000
:0045DC9A 6A24                    push 00000024
:0045DC9C 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0045DC9F 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045DCA0 6AFF                    push FFFFFFFF
:0045DCA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DCA5 6BC933                  imul ecx, 00000033
:0045DCA8 81C1C8EF4800            add ecx, 0048EFC8
:0045DCAE E8FD9AFAFF              call 004077B0
:0045DCB3 50                      push eax
:0045DCB4 8B550C                  mov edx, dword ptr [ebp+0C]
:0045DCB7 8B4218                  mov eax, dword ptr [edx+18]
:0045DCBA 50                      push eax

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:0045DCBB FF1564874B00            Call dword ptr [004B8764]
:0045DCC1 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045DCC4 894DD0                  mov dword ptr [ebp-30], ecx
:0045DCC7 6A00                    push 00000000
:0045DCC9 6A01                    push 00000001
:0045DCCB 681D100000              push 0000101D
:0045DCD0 8B55CC                  mov edx, dword ptr [ebp-34]
:0045DCD3 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045DCD4 FF15D8864B00            Call dword ptr [004B86D8]
:0045DCDA 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045DCDD 03C8                    add ecx, eax
:0045DCDF 894DD8                  mov dword ptr [ebp-28], ecx
:0045DCE2 8B55C8                  mov edx, dword ptr [ebp-38]
:0045DCE5 52                      push edx
:0045DCE6 8D45D0                  lea eax, dword ptr [ebp-30]
:0045DCE9 50                      push eax
:0045DCEA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045DCED 8B5118                  mov edx, dword ptr [ecx+18]
:0045DCF0 52                      push edx
:0045DCF1 E83F00FCFF              call 0041DD35
:0045DCF6 83C40C                  add esp, 0000000C
:0045DCF9 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045DCFC 83C007                  add eax, 00000007
:0045DCFF 8945EC                  mov dword ptr [ebp-14], eax
:0045DD02 6A00                    push 00000000
:0045DD04 6A01                    push 00000001
:0045DD06 681D100000              push 0000101D
:0045DD0B 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0045DD0E 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045DD0F FF15D8864B00            Call dword ptr [004B86D8]
:0045DD15 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045DD18 8D4402FE                lea eax, dword ptr [edx+eax-02]
:0045DD1C 8945F4                  mov dword ptr [ebp-0C], eax
:0045DD1F 6A00                    push 00000000
:0045DD21 6A24                    push 00000024
:0045DD23 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0045DD26 51                      push ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045DD27 6AFF                    push FFFFFFFF
:0045DD29 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045DD2C 6BC970                  imul ecx, 00000070
:0045DD2F 81C198224900            add ecx, 00492298
:0045DD35 E8685EFAFF              call 00403BA2
:0045DD3A 50                      push eax
:0045DD3B 8B550C                  mov edx, dword ptr [ebp+0C]
:0045DD3E 8B4218                  mov eax, dword ptr [edx+18]
:0045DD41 50                      push eax

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:0045DD42 FF1564874B00            Call dword ptr [004B8764]
:0045DD48 8BE5                    mov esp, ebp
:0045DD4A 5D                      pop ebp
:0045DD4B C3                      ret



* Referenced by a CALL at Address:
|:00424C64   
|
:0045DD4C 55                      push ebp
:0045DD4D 8BEC                    mov ebp, esp
:0045DD4F 83EC08                  sub esp, 00000008
:0045DD52 6A01                    push 00000001
:0045DD54 B9C8E24A00              mov ecx, 004AE2C8
:0045DD59 E8F215FBFF              call 0040F350
:0045DD5E A1380E4B00              mov eax, dword ptr [004B0E38]
:0045DD63 50                      push eax

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:0045DD64 FF1528874B00            Call dword ptr [004B8728]
:0045DD6A B9C8E24A00              mov ecx, 004AE2C8
:0045DD6F E83C16FBFF              call 0040F3B0
:0045DD74 25FF000000              and eax, 000000FF
:0045DD79 85C0                    test eax, eax
:0045DD7B 756A                    jne 0045DDE7
:0045DD7D 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ˡAХsKKC"
                                  |
:0045DD7F 6860E24700              push 0047E260
:0045DD84 E8E0CEFFFF              call 0045AC69
:0045DD89 83C408                  add esp, 00000008
:0045DD8C 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045DD91 6A09                    push 00000009
:0045DD93 686C120000              push 0000126C
:0045DD98 E8B251FCFF              call 00422F4F
:0045DD9D 83C40C                  add esp, 0000000C
:0045DDA0 686C020000              push 0000026C

* Possible StringData Ref from Data Obj ->"AHKKsӡC"
                                  |
:0045DDA5 6874E24700              push 0047E274
:0045DDAA E8BACEFFFF              call 0045AC69
:0045DDAF 83C408                  add esp, 00000008
:0045DDB2 6857020000              push 00000257
:0045DDB7 E8EECBFFFF              call 0045A9AA
:0045DDBC 83C404                  add esp, 00000004
:0045DDBF 6857020000              push 00000257

* Possible StringData Ref from Data Obj ->"HqjHAzsڡH"
                                  |
:0045DDC4 688CE24700              push 0047E28C
:0045DDC9 E89BCEFFFF              call 0045AC69
:0045DDCE 83C408                  add esp, 00000008
:0045DDD1 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045DDD6 6A09                    push 00000009
:0045DDD8 686C120000              push 0000126C
:0045DDDD E86D51FCFF              call 00422F4F
:0045DDE2 83C40C                  add esp, 0000000C
:0045DDE5 EB7E                    jmp 0045DE65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DD7B(C)
|
:0045DDE7 C745F800000000          mov [ebp-08], 00000000
:0045DDEE B9C8E24A00              mov ecx, 004AE2C8
:0045DDF3 E8B815FBFF              call 0040F3B0
:0045DDF8 25FF000000              and eax, 000000FF
:0045DDFD 83F811                  cmp eax, 00000011
:0045DE00 7507                    jne 0045DE09
:0045DE02 C745F85D020000          mov [ebp-08], 0000025D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DE00(C)
|
:0045DE09 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0045DE0E 6A09                    push 00000009
:0045DE10 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DE13 80CD10                  or ch, 10
:0045DE16 51                      push ecx
:0045DE17 E83351FCFF              call 00422F4F
:0045DE1C 83C40C                  add esp, 0000000C
:0045DE1F 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DE22 52                      push edx

* Possible StringData Ref from Data Obj ->"hsKKC"
                                  |
:0045DE23 68A0E24700              push 0047E2A0
:0045DE28 E83CCEFFFF              call 0045AC69
:0045DE2D 83C408                  add esp, 00000008
:0045DE30 6857020000              push 00000257
:0045DE35 E870CBFFFF              call 0045A9AA
:0045DE3A 83C404                  add esp, 00000004
:0045DE3D 6857020000              push 00000257

* Possible StringData Ref from Data Obj ->"HjHAzsڶܡH"
                                  |
:0045DE42 68ACE24700              push 0047E2AC
:0045DE47 E81DCEFFFF              call 0045AC69
:0045DE4C 83C408                  add esp, 00000008
:0045DE4F 68FFFF0000              push 0000FFFF
:0045DE54 6A01                    push 00000001
:0045DE56 8B45F8                  mov eax, dword ptr [ebp-08]
:0045DE59 80CC10                  or ah, 10
:0045DE5C 50                      push eax
:0045DE5D E8ED50FCFF              call 00422F4F
:0045DE62 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DDE5(U)
|
:0045DE65 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UEE}w}"
                                  |
:0045DE67 685ABB4500              push 0045BB5A
:0045DE6C 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045DE72 51                      push ecx

* Possible Reference to Dialog: DialogID_0138 
                                  |
:0045DE73 6838010000              push 00000138
:0045DE78 8B15300E4B00            mov edx, dword ptr [004B0E30]
:0045DE7E 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045DE7F FF1520874B00            Call dword ptr [004B8720]
:0045DE85 8945FC                  mov dword ptr [ebp-04], eax
:0045DE88 6857020000              push 00000257

* Possible StringData Ref from Data Obj ->"¦hӡC"
                                  |
:0045DE8D 68C4E24700              push 0047E2C4
:0045DE92 E8D2CDFFFF              call 0045AC69
:0045DE97 83C408                  add esp, 00000008
:0045DE9A 6857020000              push 00000257
:0045DE9F E866CDFFFF              call 0045AC0A
:0045DEA4 83C404                  add esp, 00000004
:0045DEA7 8BE5                    mov esp, ebp
:0045DEA9 5D                      pop ebp
:0045DEAA C3                      ret



* Referenced by a CALL at Addresses:
|:0041D1E8   , :00453AE2   , :00453AF2   
|
:0045DEAB 55                      push ebp
:0045DEAC 8BEC                    mov ebp, esp
:0045DEAE 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045DEAF 6A03                    push 00000003
:0045DEB1 8B4508                  mov eax, dword ptr [ebp+08]
:0045DEB4 50                      push eax
:0045DEB5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045DEB8 51                      push ecx

* Reference To: COMCTL32.ImageList_GetIcon, Ord:0021h
                                  |
:0045DEB9 FF157C844B00            Call dword ptr [004B847C]
:0045DEBF 8945FC                  mov dword ptr [ebp-04], eax
:0045DEC2 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DEC5 52                      push edx
:0045DEC6 8B4508                  mov eax, dword ptr [ebp+08]
:0045DEC9 50                      push eax
:0045DECA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045DECD 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0045DECE FF1574844B00            Call dword ptr [004B8474]
:0045DED4 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DED7 52                      push edx

* Reference To: USER32.DestroyIcon, Ord:0088h
                                  |
:0045DED8 FF152C864B00            Call dword ptr [004B862C]
:0045DEDE 8BE5                    mov esp, ebp
:0045DEE0 5D                      pop ebp
:0045DEE1 C3                      ret


:0045DEE2 55                      push ebp
:0045DEE3 8BEC                    mov ebp, esp
:0045DEE5 83EC18                  sub esp, 00000018
:0045DEE8 8B450C                  mov eax, dword ptr [ebp+0C]
:0045DEEB 8945EC                  mov dword ptr [ebp-14], eax
:0045DEEE 837DEC2B                cmp dword ptr [ebp-14], 0000002B
:0045DEF2 7719                    ja 0045DF0D
:0045DEF4 837DEC2B                cmp dword ptr [ebp-14], 0000002B
:0045DEF8 0F84E2000000            je 0045DFE0
:0045DEFE 837DEC0F                cmp dword ptr [ebp-14], 0000000F
:0045DF02 0F849D000000            je 0045DFA5
:0045DF08 E956020000              jmp 0045E163

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DEF2(C)
|
:0045DF0D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045DF10 83E92C                  sub ecx, 0000002C
:0045DF13 894DEC                  mov dword ptr [ebp-14], ecx
:0045DF16 817DECE5000000          cmp dword ptr [ebp-14], 000000E5
:0045DF1D 0F8740020000            ja 0045E163
:0045DF23 8B45EC                  mov eax, dword ptr [ebp-14]
:0045DF26 33D2                    xor edx, edx
:0045DF28 8A907FE14500            mov dl, byte ptr [eax+0045E17F]
:0045DF2E FF24956BE14500          jmp dword ptr [4*edx+0045E16B]
:0045DF35 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045DF38 890DB40B4B00            mov dword ptr [004B0BB4], ecx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045DF3E C70554DE4700FF000000    mov dword ptr [0047DE54], 000000FF
:0045DF48 8B15B40B4B00            mov edx, dword ptr [004B0BB4]
:0045DF4E 52                      push edx
:0045DF4F 8B4508                  mov eax, dword ptr [ebp+08]
:0045DF52 50                      push eax
:0045DF53 E885030000              call 0045E2DD
:0045DF58 83C408                  add esp, 00000008
:0045DF5B 6889000000              push 00000089
:0045DF60 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:0045DF66 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045DF67 FF15E8864B00            Call dword ptr [004B86E8]
:0045DF6D 50                      push eax
:0045DF6E 6ADE                    push FFFFFFDE
:0045DF70 8B5508                  mov edx, dword ptr [ebp+08]
:0045DF73 52                      push edx

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:0045DF74 FF15A0874B00            Call dword ptr [004B87A0]
:0045DF7A B801000000              mov eax, 00000001
:0045DF7F E9E1010000              jmp 0045E165
:0045DF84 6854DE4700              push 0047DE54
:0045DF89 A1B40B4B00              mov eax, dword ptr [004B0BB4]
:0045DF8E 50                      push eax
:0045DF8F 668B4D10                mov cx, word ptr [ebp+10]
:0045DF93 51                      push ecx
:0045DF94 8B5508                  mov edx, dword ptr [ebp+08]
:0045DF97 52                      push edx
:0045DF98 E8F3080000              call 0045E890
:0045DF9D 83C410                  add esp, 00000010
:0045DFA0 E9BE010000              jmp 0045E163

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DF02(C)
|
:0045DFA5 6842010000              push 00000142
:0045DFAA 8B4508                  mov eax, dword ptr [ebp+08]
:0045DFAD 50                      push eax
:0045DFAE E83BCEFFFF              call 0045ADEE
:0045DFB3 83C408                  add esp, 00000008
:0045DFB6 E9A8010000              jmp 0045E163
:0045DFBB 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045DFBE 51                      push ecx
:0045DFBF 8B5510                  mov edx, dword ptr [ebp+10]
:0045DFC2 52                      push edx
:0045DFC3 8B4508                  mov eax, dword ptr [ebp+08]
:0045DFC6 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045DFC7 FF15AC864B00            Call dword ptr [004B86AC]
:0045DFCD 50                      push eax
:0045DFCE E8F9A3FBFF              call 004183CC
:0045DFD3 83C408                  add esp, 00000008
:0045DFD6 B801000000              mov eax, 00000001
:0045DFDB E985010000              jmp 0045E165

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DEF8(C)
|
:0045DFE0 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045DFE3 51                      push ecx
:0045DFE4 8B15B40B4B00            mov edx, dword ptr [004B0BB4]
:0045DFEA 52                      push edx
:0045DFEB E807A4FBFF              call 004183F7
:0045DFF0 83C408                  add esp, 00000008
:0045DFF3 E96B010000              jmp 0045E163
:0045DFF8 8B4514                  mov eax, dword ptr [ebp+14]
:0045DFFB 8945FC                  mov dword ptr [ebp-04], eax
:0045DFFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045E001 8B5108                  mov edx, dword ptr [ecx+08]
:0045E004 8955E8                  mov dword ptr [ebp-18], edx
:0045E007 8B45E8                  mov eax, dword ptr [ebp-18]
:0045E00A 83C065                  add eax, 00000065
:0045E00D 8945E8                  mov dword ptr [ebp-18], eax
:0045E010 837DE863                cmp dword ptr [ebp-18], 00000063
:0045E014 0F8707010000            ja 0045E121
:0045E01A 8B55E8                  mov edx, dword ptr [ebp-18]
:0045E01D 33C9                    xor ecx, ecx
:0045E01F 8A8A79E24500            mov cl, byte ptr [edx+0045E279]
:0045E025 FF248D65E24500          jmp dword ptr [4*ecx+0045E265]
:0045E02C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E02F 50                      push eax
:0045E030 8B0DB40B4B00            mov ecx, dword ptr [004B0BB4]
:0045E036 51                      push ecx
:0045E037 8B5508                  mov edx, dword ptr [ebp+08]
:0045E03A 52                      push edx
:0045E03B E8A1090000              call 0045E9E1
:0045E040 83C40C                  add esp, 0000000C
:0045E043 A354DE4700              mov dword ptr [0047DE54], eax
:0045E048 813D54DE4700FF000000    cmp dword ptr [0047DE54], 000000FF
:0045E052 7410                    je 0045E064
:0045E054 A154DE4700              mov eax, dword ptr [0047DE54]
:0045E059 50                      push eax
:0045E05A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E05D 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045E05E FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E052(C)
|
:0045E064 E9FA000000              jmp 0045E163
:0045E069 8B55FC                  mov edx, dword ptr [ebp-04]
:0045E06C 817A04AB040000          cmp dword ptr [edx+04], 000004AB
:0045E073 751E                    jne 0045E093
:0045E075 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E078 50                      push eax
:0045E079 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E07C 51                      push ecx
:0045E07D E8AE090000              call 0045EA30
:0045E082 83C408                  add esp, 00000008
:0045E085 85C0                    test eax, eax
:0045E087 750A                    jne 0045E093

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045E089 C70554DE4700FF000000    mov dword ptr [0047DE54], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E073(C), :0045E087(C)
|
:0045E093 E9CB000000              jmp 0045E163
:0045E098 8B55FC                  mov edx, dword ptr [ebp-04]
:0045E09B 817A04AB040000          cmp dword ptr [edx+04], 000004AB
:0045E0A2 7525                    jne 0045E0C9
:0045E0A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E0A7 50                      push eax
:0045E0A8 8B0DB40B4B00            mov ecx, dword ptr [004B0BB4]
:0045E0AE 51                      push ecx
:0045E0AF 8B5508                  mov edx, dword ptr [ebp+08]
:0045E0B2 52                      push edx
:0045E0B3 E8C8090000              call 0045EA80
:0045E0B8 83C40C                  add esp, 0000000C
:0045E0BB 85C0                    test eax, eax
:0045E0BD 750A                    jne 0045E0C9

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045E0BF C70554DE4700FF000000    mov dword ptr [0047DE54], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E0A2(C), :0045E0BD(C)
|
:0045E0C9 E995000000              jmp 0045E163
:0045E0CE 8B4514                  mov eax, dword ptr [ebp+14]
:0045E0D1 8945F8                  mov dword ptr [ebp-08], eax
:0045E0D4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045E0D7 8B5114                  mov edx, dword ptr [ecx+14]
:0045E0DA 83E202                  and edx, 00000002
:0045E0DD 85D2                    test edx, edx
:0045E0DF 743E                    je 0045E11F
:0045E0E1 8B4514                  mov eax, dword ptr [ebp+14]
:0045E0E4 8945F4                  mov dword ptr [ebp-0C], eax
:0045E0E7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045E0EA 8B510C                  mov edx, dword ptr [ecx+0C]
:0045E0ED 52                      push edx
:0045E0EE 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045E0F1 8B08                    mov ecx, dword ptr [eax]
:0045E0F3 51                      push ecx
:0045E0F4 E87D95FBFF              call 00417676
:0045E0F9 83C408                  add esp, 00000008
:0045E0FC 25FFFF0000              and eax, 0000FFFF
:0045E101 A354DE4700              mov dword ptr [0047DE54], eax
:0045E106 8B1554DE4700            mov edx, dword ptr [0047DE54]
:0045E10C 52                      push edx
:0045E10D A1B40B4B00              mov eax, dword ptr [004B0BB4]
:0045E112 50                      push eax
:0045E113 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E116 51                      push ecx
:0045E117 E89E090000              call 0045EABA
:0045E11C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E0DF(C)
|
:0045E11F EB42                    jmp 0045E163

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E014(C)
|
:0045E121 817D10AB040000          cmp dword ptr [ebp+10], 000004AB
:0045E128 7539                    jne 0045E163
:0045E12A 6A00                    push 00000000
:0045E12C 6A00                    push 00000000
:0045E12E 68F0000000              push 000000F0
:0045E133 68AC040000              push 000004AC
:0045E138 8B5508                  mov edx, dword ptr [ebp+08]
:0045E13B 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045E13C FF15B4864B00            Call dword ptr [004B86B4]
:0045E142 8945F0                  mov dword ptr [ebp-10], eax
:0045E145 8B45F0                  mov eax, dword ptr [ebp-10]
:0045E148 50                      push eax
:0045E149 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045E14C 51                      push ecx
:0045E14D 8B5510                  mov edx, dword ptr [ebp+10]
:0045E150 52                      push edx
:0045E151 8B450C                  mov eax, dword ptr [ebp+0C]
:0045E154 50                      push eax
:0045E155 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E158 51                      push ecx
:0045E159 E88F97FBFF              call 004178ED
:0045E15E 83C414                  add esp, 00000014
:0045E161 EB02                    jmp 0045E165

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045DF08(U), :0045DF1D(C), :0045DFA0(U), :0045DFB6(U), :0045DFF3(U)
|:0045E064(U), :0045E093(U), :0045E0C9(U), :0045E11F(U), :0045E128(C)
|
:0045E163 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045DF7F(U), :0045DFDB(U), :0045E161(U)
|
:0045E165 8BE5                    mov esp, ebp
:0045E167 5D                      pop ebp
:0045E168 C21000                  ret 0010



:0045E16B BBDF4500                DWORD 0045DFBB
:0045E16F F8DF4500                DWORD 0045DFF8
:0045E173 35DF4500                DWORD 0045DF35
:0045E177 84DF4500                DWORD 0045DF84
:0045E17B 63E14500                DWORD 0045E163


:0045E17F 000404                  add byte ptr [esp+eax], al
:0045E182 0404                    add al, 04
:0045E184 0404                    add al, 04
:0045E186 0404                    add al, 04
:0045E188 0404                    add al, 04
:0045E18A 0404                    add al, 04
:0045E18C 0404                    add al, 04
:0045E18E 0404                    add al, 04
:0045E190 0404                    add al, 04
:0045E192 0404                    add al, 04
:0045E194 0404                    add al, 04
:0045E196 0404                    add al, 04
:0045E198 0404                    add al, 04
:0045E19A 0404                    add al, 04
:0045E19C 0404                    add al, 04
:0045E19E 0404                    add al, 04
:0045E1A0 0401                    add al, 01
:0045E1A2 0404                    add al, 04
:0045E1A4 0404                    add al, 04
:0045E1A6 0404                    add al, 04
:0045E1A8 0404                    add al, 04
:0045E1AA 0404                    add al, 04
:0045E1AC 0404                    add al, 04
:0045E1AE 0404                    add al, 04
:0045E1B0 0404                    add al, 04
:0045E1B2 0404                    add al, 04
:0045E1B4 0404                    add al, 04
:0045E1B6 0404                    add al, 04
:0045E1B8 0404                    add al, 04
:0045E1BA 0404                    add al, 04
:0045E1BC 0404                    add al, 04
:0045E1BE 0404                    add al, 04
:0045E1C0 0404                    add al, 04
:0045E1C2 0404                    add al, 04
:0045E1C4 0404                    add al, 04
:0045E1C6 0404                    add al, 04
:0045E1C8 0404                    add al, 04
:0045E1CA 0404                    add al, 04
:0045E1CC 0404                    add al, 04
:0045E1CE 0404                    add al, 04
:0045E1D0 0404                    add al, 04
:0045E1D2 0404                    add al, 04
:0045E1D4 0404                    add al, 04
:0045E1D6 0404                    add al, 04
:0045E1D8 0404                    add al, 04
:0045E1DA 0404                    add al, 04
:0045E1DC 0404                    add al, 04
:0045E1DE 0404                    add al, 04
:0045E1E0 0404                    add al, 04
:0045E1E2 0404                    add al, 04
:0045E1E4 0404                    add al, 04
:0045E1E6 0404                    add al, 04
:0045E1E8 0404                    add al, 04
:0045E1EA 0404                    add al, 04
:0045E1EC 0404                    add al, 04
:0045E1EE 0404                    add al, 04
:0045E1F0 0404                    add al, 04
:0045E1F2 0404                    add al, 04
:0045E1F4 0404                    add al, 04
:0045E1F6 0404                    add al, 04
:0045E1F8 0404                    add al, 04
:0045E1FA 0404                    add al, 04
:0045E1FC 0404                    add al, 04
:0045E1FE 0404                    add al, 04
:0045E200 0404                    add al, 04
:0045E202 0404                    add al, 04
:0045E204 0404                    add al, 04
:0045E206 0404                    add al, 04
:0045E208 0404                    add al, 04
:0045E20A 0404                    add al, 04
:0045E20C 0404                    add al, 04
:0045E20E 0404                    add al, 04
:0045E210 0404                    add al, 04
:0045E212 0404                    add al, 04
:0045E214 0404                    add al, 04
:0045E216 0404                    add al, 04
:0045E218 0404                    add al, 04
:0045E21A 0404                    add al, 04
:0045E21C 0404                    add al, 04
:0045E21E 0404                    add al, 04
:0045E220 0404                    add al, 04
:0045E222 0404                    add al, 04
:0045E224 0404                    add al, 04
:0045E226 0404                    add al, 04
:0045E228 0404                    add al, 04
:0045E22A 0404                    add al, 04
:0045E22C 0404                    add al, 04
:0045E22E 0404                    add al, 04
:0045E230 0404                    add al, 04
:0045E232 0404                    add al, 04
:0045E234 0404                    add al, 04
:0045E236 0404                    add al, 04
:0045E238 0404                    add al, 04
:0045E23A 0404                    add al, 04
:0045E23C 0404                    add al, 04
:0045E23E 0404                    add al, 04
:0045E240 0404                    add al, 04
:0045E242 0404                    add al, 04
:0045E244 0404                    add al, 04
:0045E246 0404                    add al, 04
:0045E248 0404                    add al, 04
:0045E24A 0404                    add al, 04
:0045E24C 0404                    add al, 04
:0045E24E 0404                    add al, 04
:0045E250 0404                    add al, 04
:0045E252 0404                    add al, 04
:0045E254 0404                    add al, 04
:0045E256 0404                    add al, 04
:0045E258 0404                    add al, 04
:0045E25A 0404                    add al, 04
:0045E25C 0404                    add al, 04
:0045E25E 0404                    add al, 04
:0045E260 0404                    add al, 04
:0045E262 0402                    add al, 02
:0045E264 03CE                    add ecx, esi
:0045E266 E045                    loopnz 0045E2AD
:0045E268 0069E0                  add byte ptr [ecx-20], ch
:0045E26B 45                      inc ebp
:0045E26C 002CE0                  add byte ptr [eax], ch
:0045E26F 45                      inc ebp
:0045E270 0098E0450021            add byte ptr [eax+210045E0], bl
:0045E276 E145                    loopz 0045E2BD
:0045E278 0000                    add byte ptr [eax], al
:0045E27A 0404                    add al, 04
:0045E27C 0404                    add al, 04
:0045E27E 0404                    add al, 04
:0045E280 0404                    add al, 04
:0045E282 0404                    add al, 04
:0045E284 0404                    add al, 04
:0045E286 0404                    add al, 04
:0045E288 0404                    add al, 04
:0045E28A 0404                    add al, 04
:0045E28C 0404                    add al, 04
:0045E28E 0404                    add al, 04
:0045E290 0404                    add al, 04
:0045E292 0404                    add al, 04
:0045E294 0404                    add al, 04
:0045E296 0404                    add al, 04
:0045E298 0404                    add al, 04
:0045E29A 0404                    add al, 04
:0045E29C 0404                    add al, 04
:0045E29E 0404                    add al, 04
:0045E2A0 0404                    add al, 04
:0045E2A2 0404                    add al, 04
:0045E2A4 0404                    add al, 04
:0045E2A6 0404                    add al, 04
:0045E2A8 0404                    add al, 04
:0045E2AA 0404                    add al, 04
:0045E2AC 0404                    add al, 04
:0045E2AE 0404                    add al, 04
:0045E2B0 0404                    add al, 04
:0045E2B2 0404                    add al, 04
:0045E2B4 0404                    add al, 04
:0045E2B6 0404                    add al, 04
:0045E2B8 0404                    add al, 04
:0045E2BA 0404                    add al, 04
:0045E2BC 0404                    add al, 04
:0045E2BE 0404                    add al, 04
:0045E2C0 0404                    add al, 04
:0045E2C2 0404                    add al, 04
:0045E2C4 0404                    add al, 04
:0045E2C6 0404                    add al, 04
:0045E2C8 0404                    add al, 04
:0045E2CA 0404                    add al, 04
:0045E2CC 0404                    add al, 04
:0045E2CE 0404                    add al, 04
:0045E2D0 0404                    add al, 04
:0045E2D2 0404                    add al, 04
:0045E2D4 0404                    add al, 04
:0045E2D6 0404                    add al, 04
:0045E2D8 0401                    add al, 01
:0045E2DA 0402                    add al, 02
:0045E2DC 03                      BYTE 03h


* Referenced by a CALL at Address:
|:0045DF53   
|
:0045E2DD 55                      push ebp
:0045E2DE 8BEC                    mov ebp, esp
:0045E2E0 83EC0C                  sub esp, 0000000C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045E2E3 6A05                    push 00000005
:0045E2E5 B9C8E24A00              mov ecx, 004AE2C8
:0045E2EA E8B11CFCFF              call 0041FFA0
:0045E2EF 85C0                    test eax, eax
:0045E2F1 743B                    je 0045E32E
:0045E2F3 6A00                    push 00000000
:0045E2F5 6A01                    push 00000001
:0045E2F7 68F1000000              push 000000F1
:0045E2FC 68AC040000              push 000004AC
:0045E301 8B4508                  mov eax, dword ptr [ebp+08]
:0045E304 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E305 FF15AC864B00            Call dword ptr [004B86AC]
:0045E30B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E30C FF15D8864B00            Call dword ptr [004B86D8]
:0045E312 6A00                    push 00000000
:0045E314 68AB040000              push 000004AB
:0045E319 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E31C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E31D FF15AC864B00            Call dword ptr [004B86AC]
:0045E323 50                      push eax
:0045E324 E8138EFBFF              call 0041713C
:0045E329 83C408                  add esp, 00000008
:0045E32C EB39                    jmp 0045E367

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E2F1(C)
|
:0045E32E 6A00                    push 00000000
:0045E330 6A01                    push 00000001
:0045E332 68F1000000              push 000000F1
:0045E337 68AD040000              push 000004AD
:0045E33C 8B5508                  mov edx, dword ptr [ebp+08]
:0045E33F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E340 FF15AC864B00            Call dword ptr [004B86AC]
:0045E346 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E347 FF15D8864B00            Call dword ptr [004B86D8]
:0045E34D 6A01                    push 00000001
:0045E34F 68AB040000              push 000004AB
:0045E354 8B4508                  mov eax, dword ptr [ebp+08]
:0045E357 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E358 FF15AC864B00            Call dword ptr [004B86AC]
:0045E35E 50                      push eax
:0045E35F E8D88DFBFF              call 0041713C
:0045E364 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E32C(U)
|
:0045E367 68AE040000              push 000004AE
:0045E36C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E36F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E370 FF15AC864B00            Call dword ptr [004B86AC]
:0045E376 8945F4                  mov dword ptr [ebp-0C], eax
:0045E379 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E37C 6BC970                  imul ecx, 00000070
:0045E37F 81C198224900            add ecx, 00492298
:0045E385 E81858FAFF              call 00403BA2
:0045E38A 50                      push eax
:0045E38B 6A00                    push 00000000
:0045E38D 6843010000              push 00000143
:0045E392 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045E395 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E396 FF15D8864B00            Call dword ptr [004B86D8]
:0045E39C 8B450C                  mov eax, dword ptr [ebp+0C]
:0045E39F 50                      push eax
:0045E3A0 6A00                    push 00000000
:0045E3A2 6851010000              push 00000151
:0045E3A7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045E3AA 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E3AB FF15D8864B00            Call dword ptr [004B86D8]
:0045E3B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E3B4 6BC970                  imul ecx, 00000070
:0045E3B7 81C198224900            add ecx, 00492298
:0045E3BD E8E057FAFF              call 00403BA2
:0045E3C2 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045E3C3 6AFF                    push FFFFFFFF

* Possible Reference to Dialog: DialogID_014D 
                                  |
:0045E3C5 684D010000              push 0000014D
:0045E3CA 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045E3CD 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E3CE FF15D8864B00            Call dword ptr [004B86D8]
:0045E3D4 B910584800              mov ecx, 00485810
:0045E3D9 E8C24AFFFF              call 00452EA0
:0045E3DE 8945F8                  mov dword ptr [ebp-08], eax
:0045E3E1 B910584800              mov ecx, 00485810
:0045E3E6 E8A583FBFF              call 00416790
:0045E3EB 8945FC                  mov dword ptr [ebp-04], eax
:0045E3EE 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E3F1 50                      push eax
:0045E3F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045E3F5 51                      push ecx
:0045E3F6 8B550C                  mov edx, dword ptr [ebp+0C]
:0045E3F9 52                      push edx
:0045E3FA 68AB040000              push 000004AB
:0045E3FF 8B4508                  mov eax, dword ptr [ebp+08]
:0045E402 50                      push eax
:0045E403 E835000000              call 0045E43D
:0045E408 83C414                  add esp, 00000014
:0045E40B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E40E 51                      push ecx
:0045E40F 68B0040000              push 000004B0
:0045E414 8B5508                  mov edx, dword ptr [ebp+08]
:0045E417 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E418 FF15AC864B00            Call dword ptr [004B86AC]
:0045E41E 50                      push eax
:0045E41F E85A91FBFF              call 0041757E
:0045E424 83C408                  add esp, 00000008
:0045E427 6A01                    push 00000001
:0045E429 8B450C                  mov eax, dword ptr [ebp+0C]
:0045E42C 50                      push eax
:0045E42D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E430 51                      push ecx
:0045E431 E858010000              call 0045E58E
:0045E436 83C40C                  add esp, 0000000C
:0045E439 8BE5                    mov esp, ebp
:0045E43B 5D                      pop ebp
:0045E43C C3                      ret



* Referenced by a CALL at Address:
|:0045E403   
|
:0045E43D 55                      push ebp
:0045E43E 8BEC                    mov ebp, esp
:0045E440 51                      push ecx
:0045E441 8B450C                  mov eax, dword ptr [ebp+0C]
:0045E444 50                      push eax
:0045E445 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E448 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E449 FF15AC864B00            Call dword ptr [004B86AC]
:0045E44F 8945FC                  mov dword ptr [ebp-04], eax
:0045E452 8B55FC                  mov edx, dword ptr [ebp-04]
:0045E455 52                      push edx
:0045E456 8B4508                  mov eax, dword ptr [ebp+08]
:0045E459 50                      push eax
:0045E45A E8118FFBFF              call 00417370
:0045E45F 83C408                  add esp, 00000008
:0045E462 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045E465 51                      push ecx
:0045E466 6A01                    push 00000001
:0045E468 6803100000              push 00001003
:0045E46D 8B55FC                  mov edx, dword ptr [ebp-04]
:0045E470 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E471 FF15D8864B00            Call dword ptr [004B86D8]
:0045E477 8B4518                  mov eax, dword ptr [ebp+18]
:0045E47A 50                      push eax
:0045E47B 6A00                    push 00000000
:0045E47D 6803100000              push 00001003
:0045E482 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045E485 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E486 FF15D8864B00            Call dword ptr [004B86D8]
:0045E48C 8B5510                  mov edx, dword ptr [ebp+10]
:0045E48F 52                      push edx
:0045E490 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E493 50                      push eax
:0045E494 E833000000              call 0045E4CC
:0045E499 83C408                  add esp, 00000008
:0045E49C 68BDBDBD02              push 02BDBDBD
:0045E4A1 6A00                    push 00000000
:0045E4A3 6801100000              push 00001001
:0045E4A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045E4AB 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E4AC FF15D8864B00            Call dword ptr [004B86D8]
:0045E4B2 68BDBDBD02              push 02BDBDBD
:0045E4B7 6A00                    push 00000000
:0045E4B9 6826100000              push 00001026
:0045E4BE 8B55FC                  mov edx, dword ptr [ebp-04]
:0045E4C1 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E4C2 FF15D8864B00            Call dword ptr [004B86D8]
:0045E4C8 8BE5                    mov esp, ebp
:0045E4CA 5D                      pop ebp
:0045E4CB C3                      ret



* Referenced by a CALL at Address:
|:0045E494   
|
:0045E4CC 55                      push ebp
:0045E4CD 8BEC                    mov ebp, esp
:0045E4CF 83EC30                  sub esp, 00000030

* Possible Reference to String Resource ID=00015: ""
                                  |
:0045E4D2 C745D40F000000          mov [ebp-2C], 0000000F
:0045E4D9 C745E000000000          mov [ebp-20], 00000000
:0045E4E0 C745E400000000          mov [ebp-1C], 00000000
:0045E4E7 C745DC00000000          mov [ebp-24], 00000000
:0045E4EE C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:0045E4F5 C745EC20000000          mov [ebp-14], 00000020
:0045E4FC C745FC00000000          mov [ebp-04], 00000000
:0045E503 EB09                    jmp 0045E50E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E585(U)
|
:0045E505 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E508 83C001                  add eax, 00000001
:0045E50B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E503(U)
|
:0045E50E 837DFC08                cmp dword ptr [ebp-04], 00000008
:0045E512 7376                    jnb 0045E58A
:0045E514 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045E517 51                      push ecx
:0045E518 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E51B 6BC970                  imul ecx, 00000070
:0045E51E 81C198224900            add ecx, 00492298
:0045E524 E8E762FAFF              call 00404810
:0045E529 25FF000000              and eax, 000000FF
:0045E52E 8945D0                  mov dword ptr [ebp-30], eax
:0045E531 817DD0FF000000          cmp dword ptr [ebp-30], 000000FF
:0045E538 734B                    jnb 0045E585
:0045E53A 8A55FC                  mov dl, byte ptr [ebp-04]
:0045E53D 52                      push edx
:0045E53E 8B45D0                  mov eax, dword ptr [ebp-30]
:0045E541 50                      push eax
:0045E542 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E545 51                      push ecx
:0045E546 E82E8CFBFF              call 00417179
:0045E54B 83C40C                  add esp, 0000000C
:0045E54E 8945F0                  mov dword ptr [ebp-10], eax
:0045E551 8B55FC                  mov edx, dword ptr [ebp-04]
:0045E554 8955D8                  mov dword ptr [ebp-28], edx
:0045E557 8B45D0                  mov eax, dword ptr [ebp-30]
:0045E55A 25FFFF0000              and eax, 0000FFFF
:0045E55F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045E562 81E1FFFF0000            and ecx, 0000FFFF
:0045E568 C1E110                  shl ecx, 10
:0045E56B 0BC1                    or eax, ecx
:0045E56D 8945F4                  mov dword ptr [ebp-0C], eax
:0045E570 8D55D4                  lea edx, dword ptr [ebp-2C]
:0045E573 52                      push edx
:0045E574 6A00                    push 00000000
:0045E576 6807100000              push 00001007
:0045E57B 8B4508                  mov eax, dword ptr [ebp+08]
:0045E57E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E57F FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E538(C)
|
:0045E585 E97BFFFFFF              jmp 0045E505

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E512(C)
|
:0045E58A 8BE5                    mov esp, ebp
:0045E58C 5D                      pop ebp
:0045E58D C3                      ret



* Referenced by a CALL at Addresses:
|:0045E431   , :0045E96E   , :0045E9C4   , :0045EA06   , :0045EAA5   
|:0045ECDC   , :0045F059   
|
:0045E58E 55                      push ebp
:0045E58F 8BEC                    mov ebp, esp
:0045E591 51                      push ecx
:0045E592 837D1000                cmp dword ptr [ebp+10], 00000000
:0045E596 741B                    je 0045E5B3

* Possible StringData Ref from Data Obj ->"п_C"
                                  |
:0045E598 68D4E24700              push 0047E2D4
:0045E59D 68AA040000              push 000004AA
:0045E5A2 8B4508                  mov eax, dword ptr [ebp+08]
:0045E5A5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E5A6 FF15AC864B00            Call dword ptr [004B86AC]
:0045E5AC 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045E5AD FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E596(C)
|
:0045E5B3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E5B6 6BC970                  imul ecx, 00000070
:0045E5B9 81C198224900            add ecx, 00492298
:0045E5BF E82C62FAFF              call 004047F0
:0045E5C4 8845FC                  mov byte ptr [ebp-04], al
:0045E5C7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045E5CA 81E1FF000000            and ecx, 000000FF
:0045E5D0 81F9FF000000            cmp ecx, 000000FF
:0045E5D6 744B                    je 0045E623
:0045E5D8 8A55FC                  mov dl, byte ptr [ebp-04]
:0045E5DB 52                      push edx
:0045E5DC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E5DF 6BC970                  imul ecx, 00000070
:0045E5E2 81C198224900            add ecx, 00492298
:0045E5E8 E82362FAFF              call 00404810
:0045E5ED 8AC8                    mov cl, al
:0045E5EF 81E1FF000000            and ecx, 000000FF
:0045E5F5 6BC933                  imul ecx, 00000033
:0045E5F8 81C1C8EF4800            add ecx, 0048EFC8
:0045E5FE E8AD91FAFF              call 004077B0
:0045E603 50                      push eax

* Possible StringData Ref from Data Obj ->"˳ƪZ: %s"
                                  |
:0045E604 68E4E24700              push 0047E2E4
:0045E609 68B2040000              push 000004B2
:0045E60E 8B4508                  mov eax, dword ptr [ebp+08]
:0045E611 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E612 FF15AC864B00            Call dword ptr [004B86AC]
:0045E618 50                      push eax
:0045E619 E8EC510000              call 0046380A
:0045E61E 83C40C                  add esp, 0000000C
:0045E621 EB1B                    jmp 0045E63E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E5D6(C)
|

* Possible StringData Ref from Data Obj ->"˳ƪZ: L"
                                  |
:0045E623 68F4E24700              push 0047E2F4
:0045E628 68B2040000              push 000004B2
:0045E62D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E630 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E631 FF15AC864B00            Call dword ptr [004B86AC]
:0045E637 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045E638 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E621(U)
|
:0045E63E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E641 6BC970                  imul ecx, 00000070
:0045E644 81C198224900            add ecx, 00492298
:0045E64A E8713DFAFF              call 004023C0
:0045E64F 50                      push eax

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:0045E650 6808E34700              push 0047E308
:0045E655 68B3040000              push 000004B3
:0045E65A 8B5508                  mov edx, dword ptr [ebp+08]
:0045E65D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E65E FF15AC864B00            Call dword ptr [004B86AC]
:0045E664 50                      push eax
:0045E665 E8A0510000              call 0046380A
:0045E66A 83C40C                  add esp, 0000000C
:0045E66D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E670 6BC970                  imul ecx, 00000070
:0045E673 81C198224900            add ecx, 00492298
:0045E679 E8753DFAFF              call 004023F3
:0045E67E 50                      push eax

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:0045E67F 6814E34700              push 0047E314
:0045E684 68B4040000              push 000004B4
:0045E689 8B4508                  mov eax, dword ptr [ebp+08]
:0045E68C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E68D FF15AC864B00            Call dword ptr [004B86AC]
:0045E693 50                      push eax
:0045E694 E871510000              call 0046380A
:0045E699 83C40C                  add esp, 0000000C
:0045E69C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E69F 6BC970                  imul ecx, 00000070
:0045E6A2 81C198224900            add ecx, 00492298
:0045E6A8 E8793DFAFF              call 00402426
:0045E6AD 50                      push eax

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0045E6AE 6820E34700              push 0047E320
:0045E6B3 68B5040000              push 000004B5
:0045E6B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E6BB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E6BC FF15AC864B00            Call dword ptr [004B86AC]
:0045E6C2 50                      push eax
:0045E6C3 E842510000              call 0046380A
:0045E6C8 83C40C                  add esp, 0000000C
:0045E6CB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E6CE 6BC970                  imul ecx, 00000070
:0045E6D1 81C198224900            add ecx, 00492298
:0045E6D7 E8D13DFAFF              call 004024AD
:0045E6DC 50                      push eax

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:0045E6DD 682CE34700              push 0047E32C
:0045E6E2 68B6040000              push 000004B6
:0045E6E7 8B5508                  mov edx, dword ptr [ebp+08]
:0045E6EA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E6EB FF15AC864B00            Call dword ptr [004B86AC]
:0045E6F1 50                      push eax
:0045E6F2 E813510000              call 0046380A
:0045E6F7 83C40C                  add esp, 0000000C
:0045E6FA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E6FD 6BC970                  imul ecx, 00000070
:0045E700 81C198224900            add ecx, 00492298
:0045E706 E8D53DFAFF              call 004024E0
:0045E70B 50                      push eax

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:0045E70C 6838E34700              push 0047E338
:0045E711 68B7040000              push 000004B7
:0045E716 8B4508                  mov eax, dword ptr [ebp+08]
:0045E719 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E71A FF15AC864B00            Call dword ptr [004B86AC]
:0045E720 50                      push eax
:0045E721 E8E4500000              call 0046380A
:0045E726 83C40C                  add esp, 0000000C
:0045E729 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E72C 6BC970                  imul ecx, 00000070
:0045E72F 81C198224900            add ecx, 00492298
:0045E735 E8D73DFAFF              call 00402511
:0045E73A 50                      push eax

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:0045E73B 6848E34700              push 0047E348
:0045E740 68B8040000              push 000004B8
:0045E745 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E748 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E749 FF15AC864B00            Call dword ptr [004B86AC]
:0045E74F 50                      push eax
:0045E750 E8B5500000              call 0046380A
:0045E755 83C40C                  add esp, 0000000C
:0045E758 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E75B 6BC970                  imul ecx, 00000070
:0045E75E 81C198224900            add ecx, 00492298
:0045E764 E8DB3DFAFF              call 00402544
:0045E769 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:0045E76A 6858E34700              push 0047E358
:0045E76F 68B9040000              push 000004B9
:0045E774 8B5508                  mov edx, dword ptr [ebp+08]
:0045E777 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E778 FF15AC864B00            Call dword ptr [004B86AC]
:0045E77E 50                      push eax
:0045E77F E886500000              call 0046380A
:0045E784 83C40C                  add esp, 0000000C
:0045E787 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045E78A 6BC970                  imul ecx, 00000070
:0045E78D 81C198224900            add ecx, 00492298
:0045E793 E8643EFAFF              call 004025FC
:0045E798 25FF000000              and eax, 000000FF
:0045E79D 50                      push eax

* Possible StringData Ref from Data Obj ->"ӱ@@  %3u"
                                  |
:0045E79E 6868E34700              push 0047E368
:0045E7A3 68BA040000              push 000004BA
:0045E7A8 8B4508                  mov eax, dword ptr [ebp+08]
:0045E7AB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E7AC FF15AC864B00            Call dword ptr [004B86AC]
:0045E7B2 50                      push eax
:0045E7B3 E852500000              call 0046380A
:0045E7B8 83C40C                  add esp, 0000000C
:0045E7BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E7BE 51                      push ecx
:0045E7BF E807000000              call 0045E7CB
:0045E7C4 83C404                  add esp, 00000004
:0045E7C7 8BE5                    mov esp, ebp
:0045E7C9 5D                      pop ebp
:0045E7CA C3                      ret



* Referenced by a CALL at Addresses:
|:0045E7BF   , :0045EAC6   
|
:0045E7CB 55                      push ebp
:0045E7CC 8BEC                    mov ebp, esp
:0045E7CE 6A00                    push 00000000
:0045E7D0 68BB040000              push 000004BB
:0045E7D5 8B4508                  mov eax, dword ptr [ebp+08]
:0045E7D8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E7D9 FF15AC864B00            Call dword ptr [004B86AC]
:0045E7DF 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E7E0 FF15E4864B00            Call dword ptr [004B86E4]
:0045E7E6 6A00                    push 00000000
:0045E7E8 68BD040000              push 000004BD
:0045E7ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E7F0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E7F1 FF15AC864B00            Call dword ptr [004B86AC]
:0045E7F7 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E7F8 FF15E4864B00            Call dword ptr [004B86E4]
:0045E7FE 6A00                    push 00000000
:0045E800 68BF040000              push 000004BF
:0045E805 8B5508                  mov edx, dword ptr [ebp+08]
:0045E808 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E809 FF15AC864B00            Call dword ptr [004B86AC]
:0045E80F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E810 FF15E4864B00            Call dword ptr [004B86E4]
:0045E816 6A00                    push 00000000
:0045E818 68C1040000              push 000004C1
:0045E81D 8B4508                  mov eax, dword ptr [ebp+08]
:0045E820 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E821 FF15AC864B00            Call dword ptr [004B86AC]
:0045E827 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E828 FF15E4864B00            Call dword ptr [004B86E4]
:0045E82E 6A00                    push 00000000
:0045E830 68BC040000              push 000004BC
:0045E835 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E838 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E839 FF15AC864B00            Call dword ptr [004B86AC]
:0045E83F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E840 FF15E4864B00            Call dword ptr [004B86E4]
:0045E846 6A00                    push 00000000
:0045E848 68BE040000              push 000004BE
:0045E84D 8B5508                  mov edx, dword ptr [ebp+08]
:0045E850 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E851 FF15AC864B00            Call dword ptr [004B86AC]
:0045E857 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E858 FF15E4864B00            Call dword ptr [004B86E4]
:0045E85E 6A00                    push 00000000
:0045E860 68C0040000              push 000004C0
:0045E865 8B4508                  mov eax, dword ptr [ebp+08]
:0045E868 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E869 FF15AC864B00            Call dword ptr [004B86AC]
:0045E86F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E870 FF15E4864B00            Call dword ptr [004B86E4]
:0045E876 6A00                    push 00000000
:0045E878 68C2040000              push 000004C2
:0045E87D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E880 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E881 FF15AC864B00            Call dword ptr [004B86AC]
:0045E887 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045E888 FF15E4864B00            Call dword ptr [004B86E4]
:0045E88E 5D                      pop ebp
:0045E88F C3                      ret



* Referenced by a CALL at Address:
|:0045DF98   
|
:0045E890 55                      push ebp
:0045E891 8BEC                    mov ebp, esp
:0045E893 51                      push ecx
:0045E894 8B450C                  mov eax, dword ptr [ebp+0C]
:0045E897 25FFFF0000              and eax, 0000FFFF
:0045E89C 8945FC                  mov dword ptr [ebp-04], eax
:0045E89F 817DFCAC040000          cmp dword ptr [ebp-04], 000004AC
:0045E8A6 7F24                    jg 0045E8CC
:0045E8A8 817DFCAC040000          cmp dword ptr [ebp-04], 000004AC
:0045E8AF 7456                    je 0045E907
:0045E8B1 837DFC01                cmp dword ptr [ebp-04], 00000001
:0045E8B5 743B                    je 0045E8F2
:0045E8B7 837DFC02                cmp dword ptr [ebp-04], 00000002
:0045E8BB 7421                    je 0045E8DE
:0045E8BD 837DFC03                cmp dword ptr [ebp-04], 00000003
:0045E8C1 0F8407010000            je 0045E9CE
:0045E8C7 E90F010000              jmp 0045E9DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8A6(C)
|
:0045E8CC 817DFCAD040000          cmp dword ptr [ebp-04], 000004AD
:0045E8D3 0F849F000000            je 0045E978
:0045E8D9 E9FD000000              jmp 0045E9DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8BB(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045E8DE 68FF000000              push 000000FF
:0045E8E3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E8E6 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045E8E7 FF15B0874B00            Call dword ptr [004B87B0]
:0045E8ED E9E9000000              jmp 0045E9DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8B5(C)
|
:0045E8F2 8B5514                  mov edx, dword ptr [ebp+14]
:0045E8F5 8B02                    mov eax, dword ptr [edx]
:0045E8F7 50                      push eax
:0045E8F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E8FB 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045E8FC FF15B0874B00            Call dword ptr [004B87B0]
:0045E902 E9D4000000              jmp 0045E9DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8AF(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045E907 6A05                    push 00000005
:0045E909 B9C8E24A00              mov ecx, 004AE2C8
:0045E90E E88D16FCFF              call 0041FFA0
:0045E913 85C0                    test eax, eax
:0045E915 755F                    jne 0045E976

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045E917 6A05                    push 00000005
:0045E919 6A01                    push 00000001
:0045E91B B9C8E24A00              mov ecx, 004AE2C8
:0045E920 E84B17FCFF              call 00420070
:0045E925 8B5514                  mov edx, dword ptr [ebp+14]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045E928 C702FF000000            mov dword ptr [edx], 000000FF
:0045E92E 8B4510                  mov eax, dword ptr [ebp+10]
:0045E931 50                      push eax
:0045E932 68AB040000              push 000004AB
:0045E937 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E93A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E93B FF15AC864B00            Call dword ptr [004B86AC]
:0045E941 50                      push eax
:0045E942 E82A89FBFF              call 00417271
:0045E947 83C408                  add esp, 00000008
:0045E94A 6A00                    push 00000000
:0045E94C 68AB040000              push 000004AB
:0045E951 8B5508                  mov edx, dword ptr [ebp+08]
:0045E954 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E955 FF15AC864B00            Call dword ptr [004B86AC]
:0045E95B 50                      push eax
:0045E95C E8DB87FBFF              call 0041713C
:0045E961 83C408                  add esp, 00000008
:0045E964 6A01                    push 00000001
:0045E966 8B4510                  mov eax, dword ptr [ebp+10]
:0045E969 50                      push eax
:0045E96A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E96D 51                      push ecx
:0045E96E E81BFCFFFF              call 0045E58E
:0045E973 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E915(C)
|
:0045E976 EB63                    jmp 0045E9DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8D3(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045E978 6A05                    push 00000005
:0045E97A B9C8E24A00              mov ecx, 004AE2C8
:0045E97F E81C16FCFF              call 0041FFA0
:0045E984 83F801                  cmp eax, 00000001
:0045E987 7543                    jne 0045E9CC

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045E989 6A05                    push 00000005
:0045E98B 6A00                    push 00000000
:0045E98D B9C8E24A00              mov ecx, 004AE2C8
:0045E992 E8D916FCFF              call 00420070
:0045E997 8B5514                  mov edx, dword ptr [ebp+14]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045E99A C702FF000000            mov dword ptr [edx], 000000FF
:0045E9A0 6A01                    push 00000001
:0045E9A2 68AB040000              push 000004AB
:0045E9A7 8B4508                  mov eax, dword ptr [ebp+08]
:0045E9AA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045E9AB FF15AC864B00            Call dword ptr [004B86AC]
:0045E9B1 50                      push eax
:0045E9B2 E88587FBFF              call 0041713C
:0045E9B7 83C408                  add esp, 00000008
:0045E9BA 6A01                    push 00000001
:0045E9BC 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045E9BF 51                      push ecx
:0045E9C0 8B5508                  mov edx, dword ptr [ebp+08]
:0045E9C3 52                      push edx
:0045E9C4 E8C5FBFFFF              call 0045E58E
:0045E9C9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E987(C)
|
:0045E9CC EB0D                    jmp 0045E9DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8C1(C)
|
:0045E9CE 686C0C0000              push 00000C6C
:0045E9D3 E88A4F0000              call 00463962
:0045E9D8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E8C7(U), :0045E8D9(U), :0045E8ED(U), :0045E902(U), :0045E976(U)
|:0045E9CC(U)
|
:0045E9DB 33C0                    xor eax, eax
:0045E9DD 8BE5                    mov esp, ebp
:0045E9DF 5D                      pop ebp
:0045E9E0 C3                      ret



* Referenced by a CALL at Address:
|:0045E03B   
|
:0045E9E1 55                      push ebp
:0045E9E2 8BEC                    mov ebp, esp
:0045E9E4 51                      push ecx
:0045E9E5 8B4510                  mov eax, dword ptr [ebp+10]
:0045E9E8 8B08                    mov ecx, dword ptr [eax]
:0045E9EA 51                      push ecx
:0045E9EB E8028DFBFF              call 004176F2
:0045E9F0 83C404                  add esp, 00000004
:0045E9F3 8945FC                  mov dword ptr [ebp-04], eax
:0045E9F6 837DFC00                cmp dword ptr [ebp-04], 00000000
:0045E9FA 7D19                    jge 0045EA15
:0045E9FC 6A01                    push 00000001
:0045E9FE 8B550C                  mov edx, dword ptr [ebp+0C]
:0045EA01 52                      push edx
:0045EA02 8B4508                  mov eax, dword ptr [ebp+08]
:0045EA05 50                      push eax
:0045EA06 E883FBFFFF              call 0045E58E
:0045EA0B 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045EA0E B8FF000000              mov eax, 000000FF
:0045EA13 EB17                    jmp 0045EA2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E9FA(C)
|
:0045EA15 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045EA18 51                      push ecx
:0045EA19 8B5510                  mov edx, dword ptr [ebp+10]
:0045EA1C 8B02                    mov eax, dword ptr [edx]
:0045EA1E 50                      push eax
:0045EA1F E8528CFBFF              call 00417676
:0045EA24 83C408                  add esp, 00000008
:0045EA27 25FFFF0000              and eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EA13(U)
|
:0045EA2C 8BE5                    mov esp, ebp
:0045EA2E 5D                      pop ebp
:0045EA2F C3                      ret



* Referenced by a CALL at Address:
|:0045E07D   
|
:0045EA30 55                      push ebp
:0045EA31 8BEC                    mov ebp, esp
:0045EA33 83EC08                  sub esp, 00000008
:0045EA36 8B450C                  mov eax, dword ptr [ebp+0C]
:0045EA39 8B08                    mov ecx, dword ptr [eax]
:0045EA3B 894DFC                  mov dword ptr [ebp-04], ecx
:0045EA3E 8B55FC                  mov edx, dword ptr [ebp-04]
:0045EA41 52                      push edx
:0045EA42 E8AB8CFBFF              call 004176F2
:0045EA47 83C404                  add esp, 00000004
:0045EA4A 8945F8                  mov dword ptr [ebp-08], eax
:0045EA4D 837DF800                cmp dword ptr [ebp-08], 00000000
:0045EA51 7D04                    jge 0045EA57
:0045EA53 33C0                    xor eax, eax
:0045EA55 EB25                    jmp 0045EA7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EA51(C)
|
:0045EA57 8B45F8                  mov eax, dword ptr [ebp-08]
:0045EA5A 50                      push eax
:0045EA5B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EA5E 8B11                    mov edx, dword ptr [ecx]
:0045EA60 52                      push edx
:0045EA61 E8108CFBFF              call 00417676
:0045EA66 83C408                  add esp, 00000008
:0045EA69 25FFFF0000              and eax, 0000FFFF
:0045EA6E 50                      push eax
:0045EA6F E87D76FAFF              call 004060F1
:0045EA74 83C404                  add esp, 00000004
:0045EA77 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EA55(U)
|
:0045EA7C 8BE5                    mov esp, ebp
:0045EA7E 5D                      pop ebp
:0045EA7F C3                      ret



* Referenced by a CALL at Address:
|:0045E0B3   
|
:0045EA80 55                      push ebp
:0045EA81 8BEC                    mov ebp, esp
:0045EA83 51                      push ecx
:0045EA84 8B4510                  mov eax, dword ptr [ebp+10]
:0045EA87 8B08                    mov ecx, dword ptr [eax]
:0045EA89 51                      push ecx
:0045EA8A E8638CFBFF              call 004176F2
:0045EA8F 83C404                  add esp, 00000004
:0045EA92 8945FC                  mov dword ptr [ebp-04], eax
:0045EA95 837DFC00                cmp dword ptr [ebp-04], 00000000
:0045EA99 7D16                    jge 0045EAB1
:0045EA9B 6A01                    push 00000001
:0045EA9D 8B550C                  mov edx, dword ptr [ebp+0C]
:0045EAA0 52                      push edx
:0045EAA1 8B4508                  mov eax, dword ptr [ebp+08]
:0045EAA4 50                      push eax
:0045EAA5 E8E4FAFFFF              call 0045E58E
:0045EAAA 83C40C                  add esp, 0000000C
:0045EAAD 33C0                    xor eax, eax
:0045EAAF EB05                    jmp 0045EAB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EA99(C)
|
:0045EAB1 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EAAF(U)
|
:0045EAB6 8BE5                    mov esp, ebp
:0045EAB8 5D                      pop ebp
:0045EAB9 C3                      ret



* Referenced by a CALL at Address:
|:0045E117   
|
:0045EABA 55                      push ebp
:0045EABB 8BEC                    mov ebp, esp
:0045EABD 83EC14                  sub esp, 00000014
:0045EAC0 53                      push ebx
:0045EAC1 56                      push esi
:0045EAC2 8B4508                  mov eax, dword ptr [ebp+08]
:0045EAC5 50                      push eax
:0045EAC6 E800FDFFFF              call 0045E7CB
:0045EACB 83C404                  add esp, 00000004
:0045EACE 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EAD1 6BC933                  imul ecx, 00000033
:0045EAD4 81C1C8EF4800            add ecx, 0048EFC8
:0045EADA E8B15BFAFF              call 00404690
:0045EADF 25FF000000              and eax, 000000FF
:0045EAE4 8945FC                  mov dword ptr [ebp-04], eax
:0045EAE7 837DFC06                cmp dword ptr [ebp-04], 00000006
:0045EAEB 0F8F18020000            jg 0045ED09
:0045EAF1 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EAF4 51                      push ecx
:0045EAF5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EAF8 6BC970                  imul ecx, 00000070
:0045EAFB 81C198224900            add ecx, 00492298
:0045EB01 E88731FAFF              call 00401C8D
:0045EB06 85C0                    test eax, eax
:0045EB08 0F84C4010000            je 0045ECD2

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:0045EB0E 6878E34700              push 0047E378
:0045EB13 68AA040000              push 000004AA
:0045EB18 8B5508                  mov edx, dword ptr [ebp+08]
:0045EB1B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045EB1C FF15AC864B00            Call dword ptr [004B86AC]
:0045EB22 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045EB23 FF15B0864B00            Call dword ptr [004B86B0]
:0045EB29 68F4010000              push 000001F4
:0045EB2E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EB31 6BC970                  imul ecx, 00000070
:0045EB34 81C198224900            add ecx, 00492298
:0045EB3A E8715BFAFF              call 004046B0
:0045EB3F 8AD8                    mov bl, al
:0045EB41 81E3FF000000            and ebx, 000000FF
:0045EB47 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EB4A 6BC933                  imul ecx, 00000033
:0045EB4D 81C1C8EF4800            add ecx, 0048EFC8
:0045EB53 E8D814FCFF              call 00420030
:0045EB58 25FF000000              and eax, 000000FF
:0045EB5D 03D8                    add ebx, eax
:0045EB5F 53                      push ebx
:0045EB60 6A00                    push 00000000
:0045EB62 E8D58BFBFF              call 0041773C
:0045EB67 83C40C                  add esp, 0000000C
:0045EB6A 8945F4                  mov dword ptr [ebp-0C], eax
:0045EB6D 68F4010000              push 000001F4
:0045EB72 8B450C                  mov eax, dword ptr [ebp+0C]
:0045EB75 50                      push eax
:0045EB76 E8E08CFBFF              call 0041785B
:0045EB7B 83C404                  add esp, 00000004
:0045EB7E 8BF0                    mov esi, eax
:0045EB80 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EB83 6BC933                  imul ecx, 00000033
:0045EB86 81C1C8EF4800            add ecx, 0048EFC8
:0045EB8C E85F5BFAFF              call 004046F0
:0045EB91 25FF000000              and eax, 000000FF
:0045EB96 99                      cdq
:0045EB97 2BC2                    sub eax, edx
:0045EB99 D1F8                    sar eax, 1
:0045EB9B 03F0                    add esi, eax
:0045EB9D 56                      push esi
:0045EB9E 6A00                    push 00000000
:0045EBA0 E8978BFBFF              call 0041773C
:0045EBA5 83C40C                  add esp, 0000000C
:0045EBA8 8945F0                  mov dword ptr [ebp-10], eax
:0045EBAB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045EBAE 51                      push ecx

* Possible StringData Ref from Data Obj ->"O %3u"
                                  |
:0045EBAF 6884E34700              push 0047E384
:0045EBB4 68B3040000              push 000004B3
:0045EBB9 8B5508                  mov edx, dword ptr [ebp+08]
:0045EBBC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045EBBD FF15AC864B00            Call dword ptr [004B86AC]
:0045EBC3 50                      push eax
:0045EBC4 E8414C0000              call 0046380A
:0045EBC9 83C40C                  add esp, 0000000C
:0045EBCC 8B45F0                  mov eax, dword ptr [ebp-10]
:0045EBCF 50                      push eax

* Possible StringData Ref from Data Obj ->"RO@@%3u"
                                  |
:0045EBD0 6890E34700              push 0047E390
:0045EBD5 68B9040000              push 000004B9
:0045EBDA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045EBDD 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045EBDE FF15AC864B00            Call dword ptr [004B86AC]
:0045EBE4 50                      push eax
:0045EBE5 E8204C0000              call 0046380A
:0045EBEA 83C40C                  add esp, 0000000C
:0045EBED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EBF0 6BC970                  imul ecx, 00000070
:0045EBF3 81C198224900            add ecx, 00492298
:0045EBF9 E8C237FAFF              call 004023C0
:0045EBFE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045EC01 2BD0                    sub edx, eax
:0045EC03 52                      push edx
:0045EC04 68BB040000              push 000004BB
:0045EC09 8B4508                  mov eax, dword ptr [ebp+08]
:0045EC0C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045EC0D FF15AC864B00            Call dword ptr [004B86AC]
:0045EC13 50                      push eax
:0045EC14 E8728BFBFF              call 0041778B
:0045EC19 83C408                  add esp, 00000008
:0045EC1C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EC1F 6BC970                  imul ecx, 00000070
:0045EC22 81C198224900            add ecx, 00492298
:0045EC28 E81739FAFF              call 00402544
:0045EC2D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EC30 2BC8                    sub ecx, eax
:0045EC32 51                      push ecx
:0045EC33 68C0040000              push 000004C0
:0045EC38 8B5508                  mov edx, dword ptr [ebp+08]
:0045EC3B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045EC3C FF15AC864B00            Call dword ptr [004B86AC]
:0045EC42 50                      push eax
:0045EC43 E8438BFBFF              call 0041778B
:0045EC48 83C408                  add esp, 00000008
:0045EC4B 837DFC06                cmp dword ptr [ebp-04], 00000006
:0045EC4F 757F                    jne 0045ECD0
:0045EC51 68F4010000              push 000001F4
:0045EC56 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EC59 6BC970                  imul ecx, 00000070
:0045EC5C 81C198224900            add ecx, 00492298
:0045EC62 E8A913FCFF              call 00420010
:0045EC67 8AD8                    mov bl, al
:0045EC69 81E3FF000000            and ebx, 000000FF
:0045EC6F 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EC72 6BC933                  imul ecx, 00000033
:0045EC75 81C1C8EF4800            add ecx, 0048EFC8
:0045EC7B E8F05AFAFF              call 00404770
:0045EC80 25FF000000              and eax, 000000FF
:0045EC85 03D8                    add ebx, eax
:0045EC87 53                      push ebx
:0045EC88 6A00                    push 00000000
:0045EC8A E8AD8AFBFF              call 0041773C
:0045EC8F 83C40C                  add esp, 0000000C
:0045EC92 8945F8                  mov dword ptr [ebp-08], eax
:0045EC95 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EC98 6BC970                  imul ecx, 00000070
:0045EC9B 81C198224900            add ecx, 00492298
:0045ECA1 E88037FAFF              call 00402426
:0045ECA6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045ECA9 2BC8                    sub ecx, eax
:0045ECAB 51                      push ecx
:0045ECAC 8B55F8                  mov edx, dword ptr [ebp-08]
:0045ECAF 52                      push edx
:0045ECB0 68AA040000              push 000004AA
:0045ECB5 68BF040000              push 000004BF

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0045ECBA 68A0E34700              push 0047E3A0
:0045ECBF 68B5040000              push 000004B5
:0045ECC4 8B4508                  mov eax, dword ptr [ebp+08]
:0045ECC7 50                      push eax
:0045ECC8 E8188BFBFF              call 004177E5
:0045ECCD 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EC4F(C)
|
:0045ECD0 EB32                    jmp 0045ED04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EB08(C)
|
:0045ECD2 6A00                    push 00000000
:0045ECD4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045ECD7 51                      push ecx
:0045ECD8 8B5508                  mov edx, dword ptr [ebp+08]
:0045ECDB 52                      push edx
:0045ECDC E8ADF8FFFF              call 0045E58E
:0045ECE1 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Lk˳ƨZC"
                                  |
:0045ECE4 68ACE34700              push 0047E3AC
:0045ECE9 68AA040000              push 000004AA
:0045ECEE 8B4508                  mov eax, dword ptr [ebp+08]
:0045ECF1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045ECF2 FF15AC864B00            Call dword ptr [004B86AC]
:0045ECF8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045ECF9 FF15B0864B00            Call dword ptr [004B86B0]
:0045ECFF E978030000              jmp 0045F07C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ECD0(U)
|
:0045ED04 E973030000              jmp 0045F07C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EAEB(C)
|
:0045ED09 837DFC07                cmp dword ptr [ebp-04], 00000007
:0045ED0D 0F8511010000            jne 0045EE24

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045ED13 68FF000000              push 000000FF
:0045ED18 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045ED1B 6BC970                  imul ecx, 00000070
:0045ED1E 81C198224900            add ecx, 00492298
:0045ED24 E82713FCFF              call 00420050
:0045ED29 8AD8                    mov bl, al
:0045ED2B 81E3FF000000            and ebx, 000000FF
:0045ED31 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045ED34 6BC933                  imul ecx, 00000033
:0045ED37 81C1C8EF4800            add ecx, 0048EFC8
:0045ED3D E8EE59FAFF              call 00404730
:0045ED42 25FF000000              and eax, 000000FF
:0045ED47 2BD8                    sub ebx, eax
:0045ED49 53                      push ebx
:0045ED4A 6A00                    push 00000000
:0045ED4C E8EB89FBFF              call 0041773C
:0045ED51 83C40C                  add esp, 0000000C
:0045ED54 8945EC                  mov dword ptr [ebp-14], eax
:0045ED57 6A00                    push 00000000
:0045ED59 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045ED5C 51                      push ecx
:0045ED5D 68BA040000              push 000004BA
:0045ED62 8B5508                  mov edx, dword ptr [ebp+08]
:0045ED65 52                      push edx

* Reference To: USER32.SetDlgItemInt, Ord:01F1h
                                  |
:0045ED66 FF1550874B00            Call dword ptr [004B8750]
:0045ED6C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045ED6F 6BC970                  imul ecx, 00000070
:0045ED72 81C198224900            add ecx, 00492298
:0045ED78 E87F38FAFF              call 004025FC
:0045ED7D 25FF000000              and eax, 000000FF
:0045ED82 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045ED85 2BC8                    sub ecx, eax
:0045ED87 51                      push ecx
:0045ED88 68C2040000              push 000004C2
:0045ED8D 8B5508                  mov edx, dword ptr [ebp+08]
:0045ED90 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045ED91 FF15AC864B00            Call dword ptr [004B86AC]
:0045ED97 50                      push eax
:0045ED98 E8EE89FBFF              call 0041778B
:0045ED9D 83C408                  add esp, 00000008
:0045EDA0 68F4010000              push 000001F4
:0045EDA5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EDA8 6BC970                  imul ecx, 00000070
:0045EDAB 81C198224900            add ecx, 00492298
:0045EDB1 E83A12FCFF              call 0041FFF0
:0045EDB6 8AD8                    mov bl, al
:0045EDB8 81E3FF000000            and ebx, 000000FF
:0045EDBE 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EDC1 6BC933                  imul ecx, 00000033
:0045EDC4 81C1C8EF4800            add ecx, 0048EFC8
:0045EDCA E86112FCFF              call 00420030
:0045EDCF 25FF000000              and eax, 000000FF
:0045EDD4 03D8                    add ebx, eax
:0045EDD6 53                      push ebx
:0045EDD7 6A00                    push 00000000
:0045EDD9 E85E89FBFF              call 0041773C
:0045EDDE 83C40C                  add esp, 0000000C
:0045EDE1 8945F8                  mov dword ptr [ebp-08], eax
:0045EDE4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EDE7 6BC970                  imul ecx, 00000070
:0045EDEA 81C198224900            add ecx, 00492298
:0045EDF0 E8FE35FAFF              call 004023F3
:0045EDF5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EDF8 2BC8                    sub ecx, eax
:0045EDFA 51                      push ecx
:0045EDFB 8B55F8                  mov edx, dword ptr [ebp-08]
:0045EDFE 52                      push edx
:0045EDFF 68AA040000              push 000004AA
:0045EE04 68BD040000              push 000004BD

* Possible StringData Ref from Data Obj ->"mO %3u"
                                  |
:0045EE09 68C0E34700              push 0047E3C0
:0045EE0E 68B4040000              push 000004B4
:0045EE13 8B4508                  mov eax, dword ptr [ebp+08]
:0045EE16 50                      push eax
:0045EE17 E8C989FBFF              call 004177E5
:0045EE1C 83C41C                  add esp, 0000001C
:0045EE1F E958020000              jmp 0045F07C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ED0D(C)
|
:0045EE24 837DFC08                cmp dword ptr [ebp-04], 00000008
:0045EE28 0F8584000000            jne 0045EEB2
:0045EE2E 68F4010000              push 000001F4
:0045EE33 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EE36 6BC970                  imul ecx, 00000070
:0045EE39 81C198224900            add ecx, 00492298
:0045EE3F E8CC11FCFF              call 00420010
:0045EE44 8AD8                    mov bl, al
:0045EE46 81E3FF000000            and ebx, 000000FF
:0045EE4C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EE4F 6BC933                  imul ecx, 00000033
:0045EE52 81C1C8EF4800            add ecx, 0048EFC8
:0045EE58 E8D311FCFF              call 00420030
:0045EE5D 25FF000000              and eax, 000000FF
:0045EE62 03D8                    add ebx, eax
:0045EE64 53                      push ebx
:0045EE65 6A00                    push 00000000
:0045EE67 E8D088FBFF              call 0041773C
:0045EE6C 83C40C                  add esp, 0000000C
:0045EE6F 8945F8                  mov dword ptr [ebp-08], eax
:0045EE72 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EE75 6BC970                  imul ecx, 00000070
:0045EE78 81C198224900            add ecx, 00492298
:0045EE7E E8A335FAFF              call 00402426
:0045EE83 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EE86 2BC8                    sub ecx, eax
:0045EE88 51                      push ecx
:0045EE89 8B55F8                  mov edx, dword ptr [ebp-08]
:0045EE8C 52                      push edx
:0045EE8D 68AA040000              push 000004AA
:0045EE92 68BF040000              push 000004BF

* Possible StringData Ref from Data Obj ->"O@ %3u"
                                  |
:0045EE97 68CCE34700              push 0047E3CC
:0045EE9C 68B5040000              push 000004B5
:0045EEA1 8B4508                  mov eax, dword ptr [ebp+08]
:0045EEA4 50                      push eax
:0045EEA5 E83B89FBFF              call 004177E5
:0045EEAA 83C41C                  add esp, 0000001C
:0045EEAD E9CA010000              jmp 0045F07C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EE28(C)
|
:0045EEB2 837DFC09                cmp dword ptr [ebp-04], 00000009
:0045EEB6 0F8584000000            jne 0045EF40
:0045EEBC 68F4010000              push 000001F4
:0045EEC1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EEC4 6BC970                  imul ecx, 00000070
:0045EEC7 81C198224900            add ecx, 00492298
:0045EECD E85E11FCFF              call 00420030
:0045EED2 8AD8                    mov bl, al
:0045EED4 81E3FF000000            and ebx, 000000FF
:0045EEDA 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EEDD 6BC933                  imul ecx, 00000033
:0045EEE0 81C1C8EF4800            add ecx, 0048EFC8
:0045EEE6 E84511FCFF              call 00420030
:0045EEEB 25FF000000              and eax, 000000FF
:0045EEF0 03D8                    add ebx, eax
:0045EEF2 53                      push ebx
:0045EEF3 6A00                    push 00000000
:0045EEF5 E84288FBFF              call 0041773C
:0045EEFA 83C40C                  add esp, 0000000C
:0045EEFD 8945F8                  mov dword ptr [ebp-08], eax
:0045EF00 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EF03 6BC970                  imul ecx, 00000070
:0045EF06 81C198224900            add ecx, 00492298
:0045EF0C E89C35FAFF              call 004024AD
:0045EF11 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EF14 2BC8                    sub ecx, eax
:0045EF16 51                      push ecx
:0045EF17 8B55F8                  mov edx, dword ptr [ebp-08]
:0045EF1A 52                      push edx
:0045EF1B 68AA040000              push 000004AA
:0045EF20 68C1040000              push 000004C1

* Possible StringData Ref from Data Obj ->"B@ %3u"
                                  |
:0045EF25 68D8E34700              push 0047E3D8
:0045EF2A 68B6040000              push 000004B6
:0045EF2F 8B4508                  mov eax, dword ptr [ebp+08]
:0045EF32 50                      push eax
:0045EF33 E8AD88FBFF              call 004177E5
:0045EF38 83C41C                  add esp, 0000001C
:0045EF3B E93C010000              jmp 0045F07C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EEB6(C)
|
:0045EF40 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0045EF44 757E                    jne 0045EFC4
:0045EF46 68E8030000              push 000003E8
:0045EF4B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EF4E 6BC970                  imul ecx, 00000070
:0045EF51 81C198224900            add ecx, 00492298
:0045EF57 E8243FFFFF              call 00452E80
:0045EF5C 8BF0                    mov esi, eax
:0045EF5E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EF61 6BC933                  imul ecx, 00000033
:0045EF64 81C1C8EF4800            add ecx, 0048EFC8
:0045EF6A E8C110FCFF              call 00420030
:0045EF6F 25FF000000              and eax, 000000FF
:0045EF74 03F0                    add esi, eax
:0045EF76 56                      push esi
:0045EF77 6A00                    push 00000000
:0045EF79 E8BE87FBFF              call 0041773C
:0045EF7E 83C40C                  add esp, 0000000C
:0045EF81 8945F8                  mov dword ptr [ebp-08], eax
:0045EF84 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EF87 6BC970                  imul ecx, 00000070
:0045EF8A 81C198224900            add ecx, 00492298
:0045EF90 E84B35FAFF              call 004024E0
:0045EF95 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EF98 2BC8                    sub ecx, eax
:0045EF9A 51                      push ecx
:0045EF9B 8B55F8                  mov edx, dword ptr [ebp-08]
:0045EF9E 52                      push edx
:0045EF9F 68AA040000              push 000004AA
:0045EFA4 68BC040000              push 000004BC

* Possible StringData Ref from Data Obj ->"̤j@[O%3u"
                                  |
:0045EFA9 68E4E34700              push 0047E3E4
:0045EFAE 68B7040000              push 000004B7
:0045EFB3 8B4508                  mov eax, dword ptr [ebp+08]
:0045EFB6 50                      push eax
:0045EFB7 E82988FBFF              call 004177E5
:0045EFBC 83C41C                  add esp, 0000001C
:0045EFBF E9B8000000              jmp 0045F07C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EF44(C)
|
:0045EFC4 837DFC0B                cmp dword ptr [ebp-04], 0000000B
:0045EFC8 0F8581000000            jne 0045F04F
:0045EFCE 68F4010000              push 000001F4
:0045EFD3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045EFD6 6BC970                  imul ecx, 00000070
:0045EFD9 81C198224900            add ecx, 00492298
:0045EFDF E80C57FAFF              call 004046F0
:0045EFE4 8AD8                    mov bl, al
:0045EFE6 81E3FF000000            and ebx, 000000FF
:0045EFEC 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045EFEF 6BC933                  imul ecx, 00000033
:0045EFF2 81C1C8EF4800            add ecx, 0048EFC8
:0045EFF8 E83310FCFF              call 00420030
:0045EFFD 25FF000000              and eax, 000000FF
:0045F002 03D8                    add ebx, eax
:0045F004 53                      push ebx
:0045F005 6A00                    push 00000000
:0045F007 E83087FBFF              call 0041773C
:0045F00C 83C40C                  add esp, 0000000C
:0045F00F 8945F8                  mov dword ptr [ebp-08], eax
:0045F012 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045F015 6BC970                  imul ecx, 00000070
:0045F018 81C198224900            add ecx, 00492298
:0045F01E E8EE34FAFF              call 00402511
:0045F023 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F026 2BC8                    sub ecx, eax
:0045F028 51                      push ecx
:0045F029 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F02C 52                      push edx
:0045F02D 68AA040000              push 000004AA
:0045F032 68BE040000              push 000004BE

* Possible StringData Ref from Data Obj ->"̤jޯ%3u"
                                  |
:0045F037 68F4E34700              push 0047E3F4
:0045F03C 68B8040000              push 000004B8
:0045F041 8B4508                  mov eax, dword ptr [ebp+08]
:0045F044 50                      push eax
:0045F045 E89B87FBFF              call 004177E5
:0045F04A 83C41C                  add esp, 0000001C
:0045F04D EB2D                    jmp 0045F07C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EFC8(C)
|
:0045F04F 6A00                    push 00000000
:0045F051 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045F054 51                      push ecx
:0045F055 8B5508                  mov edx, dword ptr [ebp+08]
:0045F058 52                      push edx
:0045F059 E830F5FFFF              call 0045E58E
:0045F05E 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0045F061 6804E44700              push 0047E404
:0045F066 68AA040000              push 000004AA
:0045F06B 8B4508                  mov eax, dword ptr [ebp+08]
:0045F06E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045F06F FF15AC864B00            Call dword ptr [004B86AC]
:0045F075 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045F076 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045ECFF(U), :0045ED04(U), :0045EE1F(U), :0045EEAD(U), :0045EF3B(U)
|:0045EFBF(U), :0045F04D(U)
|
:0045F07C 5E                      pop esi
:0045F07D 5B                      pop ebx
:0045F07E 8BE5                    mov esp, ebp
:0045F080 5D                      pop ebp
:0045F081 C3                      ret



* Referenced by a CALL at Address:
|:00431D17   
|
:0045F082 55                      push ebp
:0045F083 8BEC                    mov ebp, esp
:0045F085 83EC1C                  sub esp, 0000001C
:0045F088 8D45EC                  lea eax, dword ptr [ebp-14]
:0045F08B 50                      push eax

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:0045F08C FF1560874B00            Call dword ptr [004B8760]

* Reference To: USER32.CreatePopupMenu, Ord:0054h
                                  |
:0045F092 FF1518874B00            Call dword ptr [004B8718]
:0045F098 8945F8                  mov dword ptr [ebp-08], eax
:0045F09B C645E800                mov [ebp-18], 00
:0045F09F EB09                    jmp 0045F0AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F12A(U)
|
:0045F0A1 8A4DE8                  mov cl, byte ptr [ebp-18]
:0045F0A4 80C101                  add cl, 01
:0045F0A7 884DE8                  mov byte ptr [ebp-18], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F09F(U)
|
:0045F0AA 8B55E8                  mov edx, dword ptr [ebp-18]
:0045F0AD 81E2FF000000            and edx, 000000FF
:0045F0B3 83FA08                  cmp edx, 00000008
:0045F0B6 7D77                    jge 0045F12F
:0045F0B8 8A45E8                  mov al, byte ptr [ebp-18]
:0045F0BB 50                      push eax
:0045F0BC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F0BF 6BC970                  imul ecx, 00000070
:0045F0C2 81C198224900            add ecx, 00492298
:0045F0C8 E84357FAFF              call 00404810
:0045F0CD 25FF000000              and eax, 000000FF
:0045F0D2 8945E4                  mov dword ptr [ebp-1C], eax
:0045F0D5 817DE4FF000000          cmp dword ptr [ebp-1C], 000000FF
:0045F0DC 744C                    je 0045F12A
:0045F0DE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045F0E1 51                      push ecx
:0045F0E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F0E5 6BC970                  imul ecx, 00000070
:0045F0E8 81C198224900            add ecx, 00492298
:0045F0EE E89A2BFAFF              call 00401C8D
:0045F0F3 85C0                    test eax, eax
:0045F0F5 7433                    je 0045F12A
:0045F0F7 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045F0FA 81E2FFFF0000            and edx, 0000FFFF
:0045F100 8B4508                  mov eax, dword ptr [ebp+08]
:0045F103 25FFFF0000              and eax, 0000FFFF
:0045F108 C1E010                  shl eax, 10
:0045F10B 0BD0                    or edx, eax
:0045F10D 52                      push edx
:0045F10E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045F111 81E1FF000000            and ecx, 000000FF
:0045F117 83C101                  add ecx, 00000001
:0045F11A 51                      push ecx
:0045F11B 6800010000              push 00000100
:0045F120 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F123 52                      push edx

* Reference To: USER32.AppendMenuA, Ord:0004h
                                  |
:0045F124 FF151C874B00            Call dword ptr [004B871C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F0DC(C), :0045F0F5(C)
|
:0045F12A E972FFFFFF              jmp 0045F0A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F0B6(C)
|
:0045F12F 6A00                    push 00000000
:0045F131 8B450C                  mov eax, dword ptr [ebp+0C]
:0045F134 50                      push eax
:0045F135 6A00                    push 00000000
:0045F137 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045F13A 51                      push ecx
:0045F13B 8B55EC                  mov edx, dword ptr [ebp-14]
:0045F13E 52                      push edx
:0045F13F 6806010000              push 00000106
:0045F144 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F147 50                      push eax

* Reference To: USER32.TrackPopupMenu, Ord:023Fh
                                  |
:0045F148 FF15B8874B00            Call dword ptr [004B87B8]
:0045F14E 8945FC                  mov dword ptr [ebp-04], eax
:0045F151 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F154 51                      push ecx

* Reference To: USER32.DestroyMenu, Ord:0089h
                                  |
:0045F155 FF15B4874B00            Call dword ptr [004B87B4]
:0045F15B 837DFC00                cmp dword ptr [ebp-04], 00000000
:0045F15F 7F07                    jg 0045F168

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0045F161 B8FF000000              mov eax, 000000FF
:0045F166 EB23                    jmp 0045F18B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F15F(C)
|
:0045F168 8B55FC                  mov edx, dword ptr [ebp-04]
:0045F16B 83EA01                  sub edx, 00000001
:0045F16E 8855F4                  mov byte ptr [ebp-0C], dl
:0045F171 8A45F4                  mov al, byte ptr [ebp-0C]
:0045F174 50                      push eax
:0045F175 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F178 6BC970                  imul ecx, 00000070
:0045F17B 81C198224900            add ecx, 00492298
:0045F181 E88A56FAFF              call 00404810
:0045F186 25FF000000              and eax, 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F166(U)
|
:0045F18B 8BE5                    mov esp, ebp
:0045F18D 5D                      pop ebp
:0045F18E C3                      ret


:0045F18F 55                      push ebp
:0045F190 8BEC                    mov ebp, esp
:0045F192 E807000000              call 0045F19E
:0045F197 E811000000              call 0045F1AD
:0045F19C 5D                      pop ebp
:0045F19D C3                      ret



* Referenced by a CALL at Address:
|:0045F192   
|
:0045F19E 55                      push ebp
:0045F19F 8BEC                    mov ebp, esp
:0045F1A1 B9C00B4B00              mov ecx, 004B0BC0
:0045F1A6 E80554FFFF              call 004545B0
:0045F1AB 5D                      pop ebp
:0045F1AC C3                      ret



* Referenced by a CALL at Address:
|:0045F197   
|
:0045F1AD 55                      push ebp
:0045F1AE 8BEC                    mov ebp, esp
:0045F1B0 68BFF14500              push 0045F1BF
:0045F1B5 E8B6E20000              call 0046D470
:0045F1BA 83C404                  add esp, 00000004
:0045F1BD 5D                      pop ebp
:0045F1BE C3                      ret


:0045F1BF 55                      push ebp
:0045F1C0 8BEC                    mov ebp, esp
:0045F1C2 B9C00B4B00              mov ecx, 004B0BC0
:0045F1C7 E83454FFFF              call 00454600
:0045F1CC 5D                      pop ebp
:0045F1CD C3                      ret


:0045F1CE 55                      push ebp
:0045F1CF 8BEC                    mov ebp, esp
:0045F1D1 E807000000              call 0045F1DD
:0045F1D6 E811000000              call 0045F1EC
:0045F1DB 5D                      pop ebp
:0045F1DC C3                      ret



* Referenced by a CALL at Address:
|:0045F1D1   
|
:0045F1DD 55                      push ebp
:0045F1DE 8BEC                    mov ebp, esp
:0045F1E0 B9C80B4B00              mov ecx, 004B0BC8
:0045F1E5 E8C653FFFF              call 004545B0
:0045F1EA 5D                      pop ebp
:0045F1EB C3                      ret



* Referenced by a CALL at Address:
|:0045F1D6   
|
:0045F1EC 55                      push ebp
:0045F1ED 8BEC                    mov ebp, esp
:0045F1EF 68FEF14500              push 0045F1FE
:0045F1F4 E877E20000              call 0046D470
:0045F1F9 83C404                  add esp, 00000004
:0045F1FC 5D                      pop ebp
:0045F1FD C3                      ret


:0045F1FE 55                      push ebp
:0045F1FF 8BEC                    mov ebp, esp
:0045F201 B9C80B4B00              mov ecx, 004B0BC8
:0045F206 E8F553FFFF              call 00454600
:0045F20B 5D                      pop ebp
:0045F20C C3                      ret



* Referenced by a CALL at Address:
|:0045460A   
|
:0045F20D 55                      push ebp
:0045F20E 8BEC                    mov ebp, esp
:0045F210 51                      push ecx
:0045F211 894DFC                  mov dword ptr [ebp-04], ecx
:0045F214 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F217 833800                  cmp dword ptr [eax], 00000000
:0045F21A 7415                    je 0045F231
:0045F21C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F21F 8B11                    mov edx, dword ptr [ecx]
:0045F221 52                      push edx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045F222 FF158C844B00            Call dword ptr [004B848C]
:0045F228 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F22B C70000000000            mov dword ptr [eax], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F21A(C)
|
:0045F231 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F234 83790400                cmp dword ptr [ecx+04], 00000000
:0045F238 7417                    je 0045F251
:0045F23A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045F23D 8B4204                  mov eax, dword ptr [edx+04]
:0045F240 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045F241 FF158C844B00            Call dword ptr [004B848C]
:0045F247 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F24A C7410400000000          mov [ecx+04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F238(C)
|
:0045F251 8BE5                    mov esp, ebp
:0045F253 5D                      pop ebp
:0045F254 C3                      ret



* Referenced by a CALL at Addresses:
|:00405B61   , :0040722B   , :004543D9   , :0045CC75   , :0045CD30   
|:0045CD8C   
|
:0045F255 55                      push ebp
:0045F256 8BEC                    mov ebp, esp
:0045F258 83EC08                  sub esp, 00000008
:0045F25B 894DF8                  mov dword ptr [ebp-08], ecx
:0045F25E 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F261 833800                  cmp dword ptr [eax], 00000000
:0045F264 7415                    je 0045F27B
:0045F266 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F269 8B11                    mov edx, dword ptr [ecx]
:0045F26B 52                      push edx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045F26C FF158C844B00            Call dword ptr [004B848C]
:0045F272 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F275 C70000000000            mov dword ptr [eax], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F264(C)
|
:0045F27B C745FCD3000000          mov [ebp-04], 000000D3
:0045F282 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045F285 81E1FF000000            and ecx, 000000FF
:0045F28B 83F90B                  cmp ecx, 0000000B
:0045F28E 7D12                    jge 0045F2A2
:0045F290 8B550C                  mov edx, dword ptr [ebp+0C]
:0045F293 81E2FF000000            and edx, 000000FF
:0045F299 81C2C8000000            add edx, 000000C8
:0045F29F 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F28E(C)
|
:0045F2A2 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F2A5 50                      push eax
:0045F2A6 B910584800              mov ecx, 00485810
:0045F2AB E8D03BFFFF              call 00452E80
:0045F2B0 50                      push eax
:0045F2B1 E87655FBFF              call 0041482C
:0045F2B6 83C408                  add esp, 00000008
:0045F2B9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F2BC 8901                    mov dword ptr [ecx], eax
:0045F2BE 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F2C1 8B02                    mov eax, dword ptr [edx]
:0045F2C3 50                      push eax
:0045F2C4 6A00                    push 00000000
:0045F2C6 6872010000              push 00000172
:0045F2CB 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045F2CE 51                      push ecx
:0045F2CF 8B5508                  mov edx, dword ptr [ebp+08]
:0045F2D2 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045F2D3 FF15B4864B00            Call dword ptr [004B86B4]
:0045F2D9 8BE5                    mov esp, ebp
:0045F2DB 5D                      pop ebp
:0045F2DC C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00405B7B   , :004072CC   , :004543F1   , :0045CC95   , :0045CD50   
|:0045CDAC   
|
:0045F2DF 55                      push ebp
:0045F2E0 8BEC                    mov ebp, esp
:0045F2E2 83EC08                  sub esp, 00000008
:0045F2E5 894DF8                  mov dword ptr [ebp-08], ecx
:0045F2E8 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F2EB 83780400                cmp dword ptr [eax+04], 00000000
:0045F2EF 7417                    je 0045F308
:0045F2F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F2F4 8B5104                  mov edx, dword ptr [ecx+04]
:0045F2F7 52                      push edx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0045F2F8 FF158C844B00            Call dword ptr [004B848C]
:0045F2FE 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F301 C7400400000000          mov [eax+04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F2EF(C)
|

* Possible Reference to Dialog: DialogID_00A6 
                                  |
:0045F308 C745FCA6000000          mov [ebp-04], 000000A6
:0045F30F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045F312 81E1FF000000            and ecx, 000000FF
:0045F318 83F90A                  cmp ecx, 0000000A
:0045F31B 7D0F                    jge 0045F32C
:0045F31D 8B550C                  mov edx, dword ptr [ebp+0C]
:0045F320 81E2FF000000            and edx, 000000FF
:0045F326 83C264                  add edx, 00000064
:0045F329 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F31B(C)
|
:0045F32C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F32F 50                      push eax
:0045F330 B910584800              mov ecx, 00485810
:0045F335 E8463BFFFF              call 00452E80
:0045F33A 50                      push eax
:0045F33B E8EC54FBFF              call 0041482C
:0045F340 83C408                  add esp, 00000008
:0045F343 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F346 894104                  mov dword ptr [ecx+04], eax
:0045F349 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F34C 8B4204                  mov eax, dword ptr [edx+04]
:0045F34F 50                      push eax
:0045F350 6A00                    push 00000000
:0045F352 6872010000              push 00000172
:0045F357 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045F35A 51                      push ecx
:0045F35B 8B5508                  mov edx, dword ptr [ebp+08]
:0045F35E 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045F35F FF15B4864B00            Call dword ptr [004B86B4]
:0045F365 8BE5                    mov esp, ebp
:0045F367 5D                      pop ebp
:0045F368 C20C00                  ret 000C


:0045F36B CC                      int 03
:0045F36C CC                      int 03
:0045F36D CC                      int 03
:0045F36E CC                      int 03
:0045F36F CC                      int 03

* Referenced by a CALL at Addresses:
|:0045C9E5   , :0045CA00   , :0045CCD1   , :0045CCEC   , :0045D4FE   
|:0045DAED   , :0045DB05   
|
:0045F370 55                      push ebp
:0045F371 8BEC                    mov ebp, esp
:0045F373 51                      push ecx
:0045F374 894DFC                  mov dword ptr [ebp-04], ecx
:0045F377 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F37A 034508                  add eax, dword ptr [ebp+08]
:0045F37D 8A4030                  mov al, byte ptr [eax+30]
:0045F380 8BE5                    mov esp, ebp
:0045F382 5D                      pop ebp
:0045F383 C20400                  ret 0004


:0045F386 CC                      int 03
:0045F387 CC                      int 03
:0045F388 CC                      int 03
:0045F389 CC                      int 03
:0045F38A CC                      int 03
:0045F38B CC                      int 03
:0045F38C CC                      int 03
:0045F38D CC                      int 03
:0045F38E CC                      int 03
:0045F38F CC                      int 03

* Referenced by a CALL at Address:
|:0045D9F2   
|
:0045F390 55                      push ebp
:0045F391 8BEC                    mov ebp, esp
:0045F393 51                      push ecx
:0045F394 894DFC                  mov dword ptr [ebp-04], ecx
:0045F397 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F39A 034508                  add eax, dword ptr [ebp+08]
:0045F39D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045F3A0 884816                  mov byte ptr [eax+16], cl
:0045F3A3 8BE5                    mov esp, ebp
:0045F3A5 5D                      pop ebp
:0045F3A6 C20800                  ret 0008


:0045F3A9 CC                      int 03
:0045F3AA CC                      int 03
:0045F3AB CC                      int 03
:0045F3AC CC                      int 03
:0045F3AD CC                      int 03
:0045F3AE CC                      int 03
:0045F3AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0045D90D   , :0045D94E   , :0045D99E   
|
:0045F3B0 55                      push ebp
:0045F3B1 8BEC                    mov ebp, esp
:0045F3B3 51                      push ecx
:0045F3B4 894DFC                  mov dword ptr [ebp-04], ecx
:0045F3B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F3BA 034508                  add eax, dword ptr [ebp+08]
:0045F3BD 8A401E                  mov al, byte ptr [eax+1E]
:0045F3C0 8BE5                    mov esp, ebp
:0045F3C2 5D                      pop ebp
:0045F3C3 C20400                  ret 0004


:0045F3C6 CC                      int 03
:0045F3C7 CC                      int 03
:0045F3C8 CC                      int 03
:0045F3C9 CC                      int 03
:0045F3CA CC                      int 03
:0045F3CB CC                      int 03
:0045F3CC CC                      int 03
:0045F3CD CC                      int 03
:0045F3CE CC                      int 03
:0045F3CF CC                      int 03

* Referenced by a CALL at Addresses:
|:0045D924   , :0045D9CD   
|
:0045F3D0 55                      push ebp
:0045F3D1 8BEC                    mov ebp, esp
:0045F3D3 51                      push ecx
:0045F3D4 894DFC                  mov dword ptr [ebp-04], ecx
:0045F3D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F3DA 034508                  add eax, dword ptr [ebp+08]
:0045F3DD 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045F3E0 88481E                  mov byte ptr [eax+1E], cl
:0045F3E3 8BE5                    mov esp, ebp
:0045F3E5 5D                      pop ebp
:0045F3E6 C20800                  ret 0008


:0045F3E9 CC                      int 03
:0045F3EA CC                      int 03
:0045F3EB CC                      int 03
:0045F3EC CC                      int 03
:0045F3ED CC                      int 03
:0045F3EE CC                      int 03
:0045F3EF CC                      int 03
:0045F3F0 55                      push ebp
:0045F3F1 8BEC                    mov ebp, esp
:0045F3F3 E807000000              call 0045F3FF
:0045F3F8 E811000000              call 0045F40E
:0045F3FD 5D                      pop ebp
:0045F3FE C3                      ret



* Referenced by a CALL at Address:
|:0045F3F3   
|
:0045F3FF 55                      push ebp
:0045F400 8BEC                    mov ebp, esp
:0045F402 B9680C4B00              mov ecx, 004B0C68
:0045F407 E8C4130000              call 004607D0
:0045F40C 5D                      pop ebp
:0045F40D C3                      ret



* Referenced by a CALL at Address:
|:0045F3F8   
|
:0045F40E 55                      push ebp
:0045F40F 8BEC                    mov ebp, esp
:0045F411 6820F44500              push 0045F420
:0045F416 E855E00000              call 0046D470
:0045F41B 83C404                  add esp, 00000004
:0045F41E 5D                      pop ebp
:0045F41F C3                      ret


:0045F420 55                      push ebp
:0045F421 8BEC                    mov ebp, esp
:0045F423 B9680C4B00              mov ecx, 004B0C68
:0045F428 E87368FCFF              call 00425CA0
:0045F42D 5D                      pop ebp
:0045F42E C3                      ret


:0045F42F 55                      push ebp
:0045F430 8BEC                    mov ebp, esp
:0045F432 E807000000              call 0045F43E
:0045F437 E811000000              call 0045F44D
:0045F43C 5D                      pop ebp
:0045F43D C3                      ret



* Referenced by a CALL at Address:
|:0045F432   
|
:0045F43E 55                      push ebp
:0045F43F 8BEC                    mov ebp, esp
:0045F441 B9D80C4B00              mov ecx, 004B0CD8
:0045F446 E8A5130000              call 004607F0
:0045F44B 5D                      pop ebp
:0045F44C C3                      ret



* Referenced by a CALL at Address:
|:0045F437   
|
:0045F44D 55                      push ebp
:0045F44E 8BEC                    mov ebp, esp
:0045F450 685FF44500              push 0045F45F
:0045F455 E816E00000              call 0046D470
:0045F45A 83C404                  add esp, 00000004
:0045F45D 5D                      pop ebp
:0045F45E C3                      ret


:0045F45F 55                      push ebp
:0045F460 8BEC                    mov ebp, esp
:0045F462 B9D80C4B00              mov ecx, 004B0CD8
:0045F467 E83468FCFF              call 00425CA0
:0045F46C 5D                      pop ebp
:0045F46D C3                      ret



* Referenced by a CALL at Address:
|:004643FA   
|
:0045F46E 55                      push ebp
:0045F46F 8BEC                    mov ebp, esp
:0045F471 83EC14                  sub esp, 00000014
:0045F474 8B4508                  mov eax, dword ptr [ebp+08]
:0045F477 50                      push eax
:0045F478 E8FB010000              call 0045F678
:0045F47D 83C404                  add esp, 00000004
:0045F480 85C0                    test eax, eax
:0045F482 7507                    jne 0045F48B
:0045F484 33C0                    xor eax, eax
:0045F486 E9E9010000              jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F482(C)
|
:0045F48B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F48E 51                      push ecx
:0045F48F E84D020000              call 0045F6E1
:0045F494 83C404                  add esp, 00000004
:0045F497 85C0                    test eax, eax
:0045F499 7507                    jne 0045F4A2
:0045F49B 33C0                    xor eax, eax
:0045F49D E9D2010000              jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F499(C)
|
:0045F4A2 8B5508                  mov edx, dword ptr [ebp+08]
:0045F4A5 52                      push edx
:0045F4A6 E89F020000              call 0045F74A
:0045F4AB 83C404                  add esp, 00000004
:0045F4AE 85C0                    test eax, eax
:0045F4B0 7507                    jne 0045F4B9
:0045F4B2 33C0                    xor eax, eax
:0045F4B4 E9BB010000              jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F4B0(C)
|
:0045F4B9 8B4508                  mov eax, dword ptr [ebp+08]
:0045F4BC 50                      push eax
:0045F4BD E8FC020000              call 0045F7BE
:0045F4C2 83C404                  add esp, 00000004
:0045F4C5 85C0                    test eax, eax
:0045F4C7 7507                    jne 0045F4D0
:0045F4C9 33C0                    xor eax, eax
:0045F4CB E9A4010000              jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F4C7(C)
|
:0045F4D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F4D3 51                      push ecx
:0045F4D4 E84E030000              call 0045F827
:0045F4D9 83C404                  add esp, 00000004
:0045F4DC 85C0                    test eax, eax
:0045F4DE 7507                    jne 0045F4E7
:0045F4E0 33C0                    xor eax, eax
:0045F4E2 E98D010000              jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F4DE(C)
|
:0045F4E7 8B5508                  mov edx, dword ptr [ebp+08]
:0045F4EA 52                      push edx
:0045F4EB E897030000              call 0045F887
:0045F4F0 83C404                  add esp, 00000004
:0045F4F3 85C0                    test eax, eax
:0045F4F5 7507                    jne 0045F4FE
:0045F4F7 33C0                    xor eax, eax
:0045F4F9 E976010000              jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F4F5(C)
|
:0045F4FE 8B4508                  mov eax, dword ptr [ebp+08]
:0045F501 50                      push eax
:0045F502 E8E9030000              call 0045F8F0
:0045F507 83C404                  add esp, 00000004
:0045F50A 85C0                    test eax, eax
:0045F50C 7507                    jne 0045F515
:0045F50E 33C0                    xor eax, eax
:0045F510 E95F010000              jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F50C(C)
|
:0045F515 C745F800000000          mov [ebp-08], 00000000
:0045F51C EB09                    jmp 0045F527

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F660(U)
|
:0045F51E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F521 83C101                  add ecx, 00000001
:0045F524 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F51C(U)
|
:0045F527 837DF807                cmp dword ptr [ebp-08], 00000007
:0045F52B 0F8D34010000            jnl 0045F665
:0045F531 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F534 C1E204                  shl edx, 04
:0045F537 8B82604C4700            mov eax, dword ptr [edx+00474C60]
:0045F53D 8945F0                  mov dword ptr [ebp-10], eax
:0045F540 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F543 C1E104                  shl ecx, 04
:0045F546 8B91644C4700            mov edx, dword ptr [ecx+00474C64]
:0045F54C 8955F4                  mov dword ptr [ebp-0C], edx
:0045F54F 8D45F0                  lea eax, dword ptr [ebp-10]
:0045F552 50                      push eax
:0045F553 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045F559 51                      push ecx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:0045F55A FF15F8864B00            Call dword ptr [004B86F8]
:0045F560 8B55F0                  mov edx, dword ptr [ebp-10]
:0045F563 0315F4E44700            add edx, dword ptr [0047E4F4]
:0045F569 8955FC                  mov dword ptr [ebp-04], edx
:0045F56C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F56F 0305F8E44700            add eax, dword ptr [0047E4F8]
:0045F575 8945EC                  mov dword ptr [ebp-14], eax
:0045F578 837DF802                cmp dword ptr [ebp-08], 00000002
:0045F57C 744C                    je 0045F5CA
:0045F57E 6A00                    push 00000000
:0045F580 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F583 51                      push ecx
:0045F584 6A00                    push 00000000
:0045F586 8B15380E4B00            mov edx, dword ptr [004B0E38]
:0045F58C 52                      push edx
:0045F58D 6800000080              push 80000000
:0045F592 6800000080              push 80000000
:0045F597 8B45EC                  mov eax, dword ptr [ebp-14]
:0045F59A 50                      push eax
:0045F59B 33C9                    xor ecx, ecx
:0045F59D 2B0DF4E44700            sub ecx, dword ptr [0047E4F4]
:0045F5A3 51                      push ecx
:0045F5A4 6800000054              push 54000000
:0045F5A9 6A00                    push 00000000
:0045F5AB 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F5AE 8B049510E44700          mov eax, dword ptr [4*edx+0047E410]
:0045F5B5 50                      push eax
:0045F5B6 6A00                    push 00000000

* Reference To: USER32.CreateWindowExA, Ord:0055h
                                  |
:0045F5B8 FF15F4864B00            Call dword ptr [004B86F4]
:0045F5BE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F5C1 89048DB80C4B00          mov dword ptr [4*ecx+004B0CB8], eax
:0045F5C8 EB4C                    jmp 0045F616

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F57C(C)
|
:0045F5CA 6A00                    push 00000000
:0045F5CC 8B5508                  mov edx, dword ptr [ebp+08]
:0045F5CF 52                      push edx
:0045F5D0 6A00                    push 00000000
:0045F5D2 A1380E4B00              mov eax, dword ptr [004B0E38]
:0045F5D7 50                      push eax
:0045F5D8 6800000080              push 80000000
:0045F5DD 6800000080              push 80000000
:0045F5E2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045F5E5 51                      push ecx
:0045F5E6 33D2                    xor edx, edx
:0045F5E8 2B15F4E44700            sub edx, dword ptr [0047E4F4]
:0045F5EE 52                      push edx
:0045F5EF 680000C880              push 80C80000

* Possible StringData Ref from Data Obj ->"ԳYp"
                                  |
:0045F5F4 6830E44700              push 0047E430
:0045F5F9 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F5FC 8B0C8510E44700          mov ecx, dword ptr [4*eax+0047E410]
:0045F603 51                      push ecx
:0045F604 6A00                    push 00000000

* Reference To: USER32.CreateWindowExA, Ord:0055h
                                  |
:0045F606 FF15F4864B00            Call dword ptr [004B86F4]
:0045F60C 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F60F 890495B80C4B00          mov dword ptr [4*edx+004B0CB8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F5C8(U)
|
:0045F616 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F619 833C85B80C4B0000        cmp dword ptr [4*eax+004B0CB8], 00000000
:0045F621 750E                    jne 0045F631
:0045F623 6A00                    push 00000000
:0045F625 E8FDB00000              call 0046A727
:0045F62A 83C404                  add esp, 00000004
:0045F62D 33C0                    xor eax, eax
:0045F62F EB43                    jmp 0045F674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F621(C)
|
:0045F631 6A00                    push 00000000
:0045F633 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F636 C1E104                  shl ecx, 04
:0045F639 8B916C4C4700            mov edx, dword ptr [ecx+00474C6C]
:0045F63F 52                      push edx
:0045F640 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F643 C1E004                  shl eax, 04
:0045F646 8B88684C4700            mov ecx, dword ptr [eax+00474C68]
:0045F64C 51                      push ecx
:0045F64D 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F650 8B0495B80C4B00          mov eax, dword ptr [4*edx+004B0CB8]
:0045F657 50                      push eax
:0045F658 E86FB00000              call 0046A6CC
:0045F65D 83C410                  add esp, 00000010
:0045F660 E9B9FEFFFF              jmp 0045F51E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F52B(C)
|
:0045F665 6A00                    push 00000000
:0045F667 E8BBB00000              call 0046A727
:0045F66C 83C404                  add esp, 00000004
:0045F66F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F486(U), :0045F49D(U), :0045F4B4(U), :0045F4CB(U), :0045F4E2(U)
|:0045F4F9(U), :0045F510(U), :0045F62F(U)
|
:0045F674 8BE5                    mov esp, ebp
:0045F676 5D                      pop ebp
:0045F677 C3                      ret



* Referenced by a CALL at Address:
|:0045F478   
|
:0045F678 55                      push ebp
:0045F679 8BEC                    mov ebp, esp
:0045F67B 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045F67E C745D803000000          mov [ebp-28], 00000003
:0045F685 C745DC59F94500          mov [ebp-24], 0045F959
:0045F68C C745E000000000          mov [ebp-20], 00000000
:0045F693 C745E400000000          mov [ebp-1C], 00000000
:0045F69A 8B4508                  mov eax, dword ptr [ebp+08]
:0045F69D 8945E8                  mov dword ptr [ebp-18], eax
:0045F6A0 C745EC00000000          mov [ebp-14], 00000000
:0045F6A7 68007F0000              push 00007F00
:0045F6AC 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0045F6AE FF15EC864B00            Call dword ptr [004B86EC]
:0045F6B4 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F6B7 C745F406000000          mov [ebp-0C], 00000006
:0045F6BE C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"SoldierFace"
                                  |
:0045F6C5 8B0D10E44700            mov ecx, dword ptr [0047E410]
:0045F6CB 894DFC                  mov dword ptr [ebp-04], ecx
:0045F6CE 8D55D8                  lea edx, dword ptr [ebp-28]
:0045F6D1 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0045F6D2 FF15F0864B00            Call dword ptr [004B86F0]
:0045F6D8 25FFFF0000              and eax, 0000FFFF
:0045F6DD 8BE5                    mov esp, ebp
:0045F6DF 5D                      pop ebp
:0045F6E0 C3                      ret



* Referenced by a CALL at Address:
|:0045F48F   
|
:0045F6E1 55                      push ebp
:0045F6E2 8BEC                    mov ebp, esp
:0045F6E4 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045F6E7 C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:0045F6EE C745DCA4F94500          mov [ebp-24], 0045F9A4
:0045F6F5 C745E000000000          mov [ebp-20], 00000000
:0045F6FC C745E400000000          mov [ebp-1C], 00000000
:0045F703 8B4508                  mov eax, dword ptr [ebp+08]
:0045F706 8945E8                  mov dword ptr [ebp-18], eax
:0045F709 C745EC00000000          mov [ebp-14], 00000000
:0045F710 68007F0000              push 00007F00
:0045F715 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0045F717 FF15EC864B00            Call dword ptr [004B86EC]
:0045F71D 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F720 C745F406000000          mov [ebp-0C], 00000006
:0045F727 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"SoldierChar"
                                  |
:0045F72E 8B0D14E44700            mov ecx, dword ptr [0047E414]
:0045F734 894DFC                  mov dword ptr [ebp-04], ecx
:0045F737 8D55D8                  lea edx, dword ptr [ebp-28]
:0045F73A 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0045F73B FF15F0864B00            Call dword ptr [004B86F0]
:0045F741 25FFFF0000              and eax, 0000FFFF
:0045F746 8BE5                    mov esp, ebp
:0045F748 5D                      pop ebp
:0045F749 C3                      ret



* Referenced by a CALL at Address:
|:0045F4A6   
|
:0045F74A 55                      push ebp
:0045F74B 8BEC                    mov ebp, esp
:0045F74D 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045F750 C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UEE}w}tT}tk,"
                                  |
:0045F757 C745DCEFF94500          mov [ebp-24], 0045F9EF
:0045F75E C745E000000000          mov [ebp-20], 00000000
:0045F765 C745E400000000          mov [ebp-1C], 00000000
:0045F76C 8B4508                  mov eax, dword ptr [ebp+08]
:0045F76F 8945E8                  mov dword ptr [ebp-18], eax
:0045F772 6889000000              push 00000089
:0045F777 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F77A 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045F77B FF15E8864B00            Call dword ptr [004B86E8]
:0045F781 8945EC                  mov dword ptr [ebp-14], eax
:0045F784 68007F0000              push 00007F00
:0045F789 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0045F78B FF15EC864B00            Call dword ptr [004B86EC]
:0045F791 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F794 C745F406000000          mov [ebp-0C], 00000006

* Possible StringData Ref from Data Obj ->"SMAPMENU"
                                  |
:0045F79B C745F884E44700          mov [ebp-08], 0047E484

* Possible StringData Ref from Data Obj ->"SmallMap"
                                  |
:0045F7A2 8B1518E44700            mov edx, dword ptr [0047E418]
:0045F7A8 8955FC                  mov dword ptr [ebp-04], edx
:0045F7AB 8D45D8                  lea eax, dword ptr [ebp-28]
:0045F7AE 50                      push eax

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0045F7AF FF15F0864B00            Call dword ptr [004B86F0]
:0045F7B5 25FFFF0000              and eax, 0000FFFF
:0045F7BA 8BE5                    mov esp, ebp
:0045F7BC 5D                      pop ebp
:0045F7BD C3                      ret



* Referenced by a CALL at Address:
|:0045F4BD   
|
:0045F7BE 55                      push ebp
:0045F7BF 8BEC                    mov ebp, esp
:0045F7C1 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0045F7C4 C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:0045F7CB C745DC5CFB4500          mov [ebp-24], 0045FB5C
:0045F7D2 C745E000000000          mov [ebp-20], 00000000
:0045F7D9 C745E400000000          mov [ebp-1C], 00000000
:0045F7E0 8B4508                  mov eax, dword ptr [ebp+08]
:0045F7E3 8945E8                  mov dword ptr [ebp-18], eax
:0045F7E6 C745EC00000000          mov [ebp-14], 00000000
:0045F7ED 68007F0000              push 00007F00
:0045F7F2 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0045F7F4 FF15EC864B00            Call dword ptr [004B86EC]
:0045F7FA 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F7FD C745F406000000          mov [ebp-0C], 00000006
:0045F804 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"Weather"
                                  |
:0045F80B 8B0D1CE44700            mov ecx, dword ptr [0047E41C]
:0045F811 894DFC                  mov dword ptr [ebp-04], ecx
:0045F814 8D55D8                  lea edx, dword ptr [ebp-28]
:0045F817 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0045F818 FF15F0864B00            Call dword ptr [004B86F0]
:0045F81E 25FFFF0000              and eax, 0000FFFF
:0045F823 8BE5                    mov esp, ebp
:0045F825 5D                      pop ebp
:0045F826 C3                      ret



* Referenced by a CALL at Address:
|:0045F4D4   
|
:0045F827 55                      push ebp
:0045F828 8BEC                    mov ebp, esp
:0045F82A 83EC28                  sub esp, 00000028

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0045F82D C745D80B000000          mov [ebp-28], 0000000B

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:0045F834 C745DCA7FB4500          mov [ebp-24], 0045FBA7
:0045F83B C745E000000000          mov [ebp-20], 00000000
:0045F842 C745E400000000          mov [ebp-1C], 00000000
:0045F849 8B4508                  mov eax, dword ptr [ebp+08]
:0045F84C 8945E8                  mov dword ptr [ebp-18], eax
:0045F84F C745EC00000000          mov [ebp-14], 00000000
:0045F856 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F85D C745F406000000          mov [ebp-0C], 00000006
:0045F864 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"NamePut"
                                  |
:0045F86B 8B0D20E44700            mov ecx, dword ptr [0047E420]
:0045F871 894DFC                  mov dword ptr [ebp-04], ecx
:0045F874 8D55D8                  lea edx, dword ptr [ebp-28]
:0045F877 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0045F878 FF15F0864B00            Call dword ptr [004B86F0]
:0045F87E 25FFFF0000              and eax, 0000FFFF
:0045F883 8BE5                    mov esp, ebp
:0045F885 5D                      pop ebp
:0045F886 C3                      ret



* Referenced by a CALL at Address:
|:0045F4EB   
|
:0045F887 55                      push ebp
:0045F888 8BEC                    mov ebp, esp
:0045F88A 83EC28                  sub esp, 00000028

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0045F88D C745D80B000000          mov [ebp-28], 0000000B
:0045F894 C745DC352B4500          mov [ebp-24], 00452B35
:0045F89B C745E000000000          mov [ebp-20], 00000000
:0045F8A2 C745E400000000          mov [ebp-1C], 00000000
:0045F8A9 8B4508                  mov eax, dword ptr [ebp+08]
:0045F8AC 8945E8                  mov dword ptr [ebp-18], eax
:0045F8AF C745EC00000000          mov [ebp-14], 00000000
:0045F8B6 68007F0000              push 00007F00
:0045F8BB 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0045F8BD FF15EC864B00            Call dword ptr [004B86EC]
:0045F8C3 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F8C6 C745F406000000          mov [ebp-0C], 00000006
:0045F8CD C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"HButaiSlct"
                                  |
:0045F8D4 8B0D24E44700            mov ecx, dword ptr [0047E424]
:0045F8DA 894DFC                  mov dword ptr [ebp-04], ecx
:0045F8DD 8D55D8                  lea edx, dword ptr [ebp-28]
:0045F8E0 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0045F8E1 FF15F0864B00            Call dword ptr [004B86F0]
:0045F8E7 25FFFF0000              and eax, 0000FFFF
:0045F8EC 8BE5                    mov esp, ebp
:0045F8EE 5D                      pop ebp
:0045F8EF C3                      ret



* Referenced by a CALL at Address:
|:0045F502   
|
:0045F8F0 55                      push ebp
:0045F8F1 8BEC                    mov ebp, esp
:0045F8F3 83EC28                  sub esp, 00000028

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0045F8F6 C745D80B000000          mov [ebp-28], 0000000B
:0045F8FD C745DCA85C4100          mov [ebp-24], 00415CA8
:0045F904 C745E000000000          mov [ebp-20], 00000000
:0045F90B C745E400000000          mov [ebp-1C], 00000000
:0045F912 8B4508                  mov eax, dword ptr [ebp+08]
:0045F915 8945E8                  mov dword ptr [ebp-18], eax
:0045F918 C745EC00000000          mov [ebp-14], 00000000
:0045F91F 68007F0000              push 00007F00
:0045F924 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0045F926 FF15EC864B00            Call dword ptr [004B86EC]
:0045F92C 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F92F C745F406000000          mov [ebp-0C], 00000006
:0045F936 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"Hensei"
                                  |
:0045F93D 8B0D28E44700            mov ecx, dword ptr [0047E428]
:0045F943 894DFC                  mov dword ptr [ebp-04], ecx
:0045F946 8D55D8                  lea edx, dword ptr [ebp-28]
:0045F949 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0045F94A FF15F0864B00            Call dword ptr [004B86F0]
:0045F950 25FFFF0000              and eax, 0000FFFF
:0045F955 8BE5                    mov esp, ebp
:0045F957 5D                      pop ebp
:0045F958 C3                      ret


:0045F959 55                      push ebp
:0045F95A 8BEC                    mov ebp, esp
:0045F95C 51                      push ecx
:0045F95D 8B450C                  mov eax, dword ptr [ebp+0C]
:0045F960 8945FC                  mov dword ptr [ebp-04], eax
:0045F963 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045F96A 7402                    je 0045F96E
:0045F96C EB18                    jmp 0045F986

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F96A(C)
|
:0045F96E 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045F971 51                      push ecx
:0045F972 8B5510                  mov edx, dword ptr [ebp+10]
:0045F975 52                      push edx
:0045F976 8B450C                  mov eax, dword ptr [ebp+0C]
:0045F979 50                      push eax
:0045F97A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F97D 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0045F97E FF15DC864B00            Call dword ptr [004B86DC]
:0045F984 EB18                    jmp 0045F99E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F96C(U)
|
:0045F986 8B5514                  mov edx, dword ptr [ebp+14]
:0045F989 52                      push edx
:0045F98A 8B4510                  mov eax, dword ptr [ebp+10]
:0045F98D 50                      push eax
:0045F98E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045F991 51                      push ecx
:0045F992 8B5508                  mov edx, dword ptr [ebp+08]
:0045F995 52                      push edx
:0045F996 E84ED00000              call 0046C9E9
:0045F99B 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F984(U)
|
:0045F99E 8BE5                    mov esp, ebp
:0045F9A0 5D                      pop ebp
:0045F9A1 C21000                  ret 0010


:0045F9A4 55                      push ebp
:0045F9A5 8BEC                    mov ebp, esp
:0045F9A7 51                      push ecx
:0045F9A8 8B450C                  mov eax, dword ptr [ebp+0C]
:0045F9AB 8945FC                  mov dword ptr [ebp-04], eax
:0045F9AE 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045F9B5 7402                    je 0045F9B9
:0045F9B7 EB18                    jmp 0045F9D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9B5(C)
|
:0045F9B9 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045F9BC 51                      push ecx
:0045F9BD 8B5510                  mov edx, dword ptr [ebp+10]
:0045F9C0 52                      push edx
:0045F9C1 8B450C                  mov eax, dword ptr [ebp+0C]
:0045F9C4 50                      push eax
:0045F9C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045F9C8 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0045F9C9 FF15DC864B00            Call dword ptr [004B86DC]
:0045F9CF EB18                    jmp 0045F9E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9B7(U)
|
:0045F9D1 8B5514                  mov edx, dword ptr [ebp+14]
:0045F9D4 52                      push edx
:0045F9D5 8B4510                  mov eax, dword ptr [ebp+10]
:0045F9D8 50                      push eax
:0045F9D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045F9DC 51                      push ecx
:0045F9DD 8B5508                  mov edx, dword ptr [ebp+08]
:0045F9E0 52                      push edx
:0045F9E1 E803D00000              call 0046C9E9
:0045F9E6 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9CF(U)
|
:0045F9E9 8BE5                    mov esp, ebp
:0045F9EB 5D                      pop ebp
:0045F9EC C21000                  ret 0010


:0045F9EF 55                      push ebp
:0045F9F0 8BEC                    mov ebp, esp
:0045F9F2 83EC08                  sub esp, 00000008
:0045F9F5 8B450C                  mov eax, dword ptr [ebp+0C]
:0045F9F8 8945FC                  mov dword ptr [ebp-04], eax
:0045F9FB 837DFC06                cmp dword ptr [ebp-04], 00000006
:0045F9FF 7711                    ja 0045FA12
:0045FA01 837DFC06                cmp dword ptr [ebp-04], 00000006
:0045FA05 7454                    je 0045FA5B
:0045FA07 837DFC02                cmp dword ptr [ebp-04], 00000002
:0045FA0B 746B                    je 0045FA78
:0045FA0D E92C010000              jmp 0045FB3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9FF(C)
|
:0045FA12 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045FA19 7714                    ja 0045FA2F
:0045FA1B 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045FA22 7467                    je 0045FA8B
:0045FA24 837DFC10                cmp dword ptr [ebp-04], 00000010
:0045FA28 744E                    je 0045FA78
:0045FA2A E90F010000              jmp 0045FB3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA19(C)
|
:0045FA2F 817DFC00020000          cmp dword ptr [ebp-04], 00000200
:0045FA36 0F849C000000            je 0045FAD8
:0045FA3C 817DFC01020000          cmp dword ptr [ebp-04], 00000201
:0045FA43 0F84BB000000            je 0045FB04
:0045FA49 817DFC02020000          cmp dword ptr [ebp-04], 00000202
:0045FA50 0F84DE000000            je 0045FB34
:0045FA56 E9E3000000              jmp 0045FB3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA05(C)
|
:0045FA5B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FA5E 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0045FA5F FF15E0864B00            Call dword ptr [004B86E0]
:0045FA65 85C0                    test eax, eax
:0045FA67 740A                    je 0045FA73
:0045FA69 8B5508                  mov edx, dword ptr [ebp+08]
:0045FA6C 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0045FA6D FF15A4864B00            Call dword ptr [004B86A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA67(C)
|
:0045FA73 E9C6000000              jmp 0045FB3E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FA0B(C), :0045FA28(C)
|
:0045FA78 6A00                    push 00000000
:0045FA7A 8B4508                  mov eax, dword ptr [ebp+08]
:0045FA7D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FA7E FF15E4864B00            Call dword ptr [004B86E4]
:0045FA84 33C0                    xor eax, eax
:0045FA86 E9CB000000              jmp 0045FB56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA22(C)
|
:0045FA8B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045FA8E 894DF8                  mov dword ptr [ebp-08], ecx
:0045FA91 817DF8BD9C0000          cmp dword ptr [ebp-08], 00009CBD
:0045FA98 740B                    je 0045FAA5
:0045FA9A 817DF8BE9C0000          cmp dword ptr [ebp-08], 00009CBE
:0045FAA1 7410                    je 0045FAB3
:0045FAA3 EB1B                    jmp 0045FAC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA98(C)
|
:0045FAA5 6A00                    push 00000000
:0045FAA7 8B5508                  mov edx, dword ptr [ebp+08]
:0045FAAA 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FAAB FF15E4864B00            Call dword ptr [004B86E4]
:0045FAB1 EB0D                    jmp 0045FAC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FAA1(C)
|
:0045FAB3 68EA0B0000              push 00000BEA
:0045FAB8 E8A53E0000              call 00463962
:0045FABD 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FAA3(U), :0045FAB1(U)
|
:0045FAC0 8B4514                  mov eax, dword ptr [ebp+14]
:0045FAC3 50                      push eax
:0045FAC4 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045FAC7 51                      push ecx
:0045FAC8 8B550C                  mov edx, dword ptr [ebp+0C]
:0045FACB 52                      push edx
:0045FACC 8B4508                  mov eax, dword ptr [ebp+08]
:0045FACF 50                      push eax

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0045FAD0 FF15DC864B00            Call dword ptr [004B86DC]
:0045FAD6 EB7E                    jmp 0045FB56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA36(C)
|
:0045FAD8 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045FADB 83E101                  and ecx, 00000001
:0045FADE 85C9                    test ecx, ecx
:0045FAE0 7420                    je 0045FB02
:0045FAE2 B9680C4B00              mov ecx, 004B0C68
:0045FAE7 E8744BFFFF              call 00454660
:0045FAEC 85C0                    test eax, eax
:0045FAEE 7412                    je 0045FB02
:0045FAF0 8B5514                  mov edx, dword ptr [ebp+14]
:0045FAF3 52                      push edx
:0045FAF4 8B4508                  mov eax, dword ptr [ebp+08]
:0045FAF7 50                      push eax
:0045FAF8 B9680C4B00              mov ecx, 004B0C68
:0045FAFD E88A070000              call 0046028C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FAE0(C), :0045FAEE(C)
|
:0045FB02 EB3A                    jmp 0045FB3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA43(C)
|
:0045FB04 B9180A4B00              mov ecx, 004B0A18
:0045FB09 E8026FFEFF              call 00446A10
:0045FB0E 85C0                    test eax, eax
:0045FB10 7420                    je 0045FB32
:0045FB12 B9680C4B00              mov ecx, 004B0C68
:0045FB17 E8444BFFFF              call 00454660
:0045FB1C 85C0                    test eax, eax
:0045FB1E 7412                    je 0045FB32
:0045FB20 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045FB23 51                      push ecx
:0045FB24 8B5508                  mov edx, dword ptr [ebp+08]
:0045FB27 52                      push edx
:0045FB28 B9680C4B00              mov ecx, 004B0C68
:0045FB2D E84D050000              call 0046007F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FB10(C), :0045FB1E(C)
|
:0045FB32 EB0A                    jmp 0045FB3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA50(C)
|
:0045FB34 B9680C4B00              mov ecx, 004B0C68
:0045FB39 E8E3090000              call 00460521

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FA0D(U), :0045FA2A(U), :0045FA56(U), :0045FA73(U), :0045FB02(U)
|:0045FB32(U)
|
:0045FB3E 8B4514                  mov eax, dword ptr [ebp+14]
:0045FB41 50                      push eax
:0045FB42 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045FB45 51                      push ecx
:0045FB46 8B550C                  mov edx, dword ptr [ebp+0C]
:0045FB49 52                      push edx
:0045FB4A 8B4508                  mov eax, dword ptr [ebp+08]
:0045FB4D 50                      push eax
:0045FB4E E896CE0000              call 0046C9E9
:0045FB53 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FA86(U), :0045FAD6(U)
|
:0045FB56 8BE5                    mov esp, ebp
:0045FB58 5D                      pop ebp
:0045FB59 C21000                  ret 0010


:0045FB5C 55                      push ebp
:0045FB5D 8BEC                    mov ebp, esp
:0045FB5F 51                      push ecx
:0045FB60 8B450C                  mov eax, dword ptr [ebp+0C]
:0045FB63 8945FC                  mov dword ptr [ebp-04], eax
:0045FB66 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045FB6D 7402                    je 0045FB71
:0045FB6F EB18                    jmp 0045FB89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FB6D(C)
|
:0045FB71 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045FB74 51                      push ecx
:0045FB75 8B5510                  mov edx, dword ptr [ebp+10]
:0045FB78 52                      push edx
:0045FB79 8B450C                  mov eax, dword ptr [ebp+0C]
:0045FB7C 50                      push eax
:0045FB7D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FB80 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0045FB81 FF15DC864B00            Call dword ptr [004B86DC]
:0045FB87 EB18                    jmp 0045FBA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FB6F(U)
|
:0045FB89 8B5514                  mov edx, dword ptr [ebp+14]
:0045FB8C 52                      push edx
:0045FB8D 8B4510                  mov eax, dword ptr [ebp+10]
:0045FB90 50                      push eax
:0045FB91 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045FB94 51                      push ecx
:0045FB95 8B5508                  mov edx, dword ptr [ebp+08]
:0045FB98 52                      push edx
:0045FB99 E84BCE0000              call 0046C9E9
:0045FB9E 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FB87(U)
|
:0045FBA1 8BE5                    mov esp, ebp
:0045FBA3 5D                      pop ebp
:0045FBA4 C21000                  ret 0010


:0045FBA7 55                      push ebp
:0045FBA8 8BEC                    mov ebp, esp
:0045FBAA 51                      push ecx
:0045FBAB 8B450C                  mov eax, dword ptr [ebp+0C]
:0045FBAE 8945FC                  mov dword ptr [ebp-04], eax
:0045FBB1 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045FBB8 7402                    je 0045FBBC
:0045FBBA EB18                    jmp 0045FBD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FBB8(C)
|
:0045FBBC 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045FBBF 51                      push ecx
:0045FBC0 8B5510                  mov edx, dword ptr [ebp+10]
:0045FBC3 52                      push edx
:0045FBC4 8B450C                  mov eax, dword ptr [ebp+0C]
:0045FBC7 50                      push eax
:0045FBC8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FBCB 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0045FBCC FF15DC864B00            Call dword ptr [004B86DC]
:0045FBD2 EB18                    jmp 0045FBEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FBBA(U)
|
:0045FBD4 8B5514                  mov edx, dword ptr [ebp+14]
:0045FBD7 52                      push edx
:0045FBD8 8B4510                  mov eax, dword ptr [ebp+10]
:0045FBDB 50                      push eax
:0045FBDC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045FBDF 51                      push ecx
:0045FBE0 8B5508                  mov edx, dword ptr [ebp+08]
:0045FBE3 52                      push edx
:0045FBE4 E800CE0000              call 0046C9E9
:0045FBE9 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FBD2(U)
|
:0045FBEC 8BE5                    mov esp, ebp
:0045FBEE 5D                      pop ebp
:0045FBEF C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00426492   , :004266C4   , :0046701A   
|
:0045FBF2 55                      push ebp
:0045FBF3 8BEC                    mov ebp, esp
:0045FBF5 51                      push ecx
:0045FBF6 C745FC00000000          mov [ebp-04], 00000000
:0045FBFD EB09                    jmp 0045FC08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FC72(U)
|
:0045FBFF 8B45FC                  mov eax, dword ptr [ebp-04]
:0045FC02 83C001                  add eax, 00000001
:0045FC05 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FBFD(U)
|
:0045FC08 837DFC07                cmp dword ptr [ebp-04], 00000007
:0045FC0C 7D66                    jge 0045FC74
:0045FC0E 6A00                    push 00000000
:0045FC10 8B0D6C4C4700            mov ecx, dword ptr [00474C6C]
:0045FC16 51                      push ecx
:0045FC17 8B15684C4700            mov edx, dword ptr [00474C68]
:0045FC1D 52                      push edx
:0045FC1E 6A00                    push 00000000
:0045FC20 33C0                    xor eax, eax
:0045FC22 2B05F4E44700            sub eax, dword ptr [0047E4F4]
:0045FC28 50                      push eax
:0045FC29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FC2C 8B148DB80C4B00          mov edx, dword ptr [4*ecx+004B0CB8]
:0045FC33 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045FC34 FF15FC864B00            Call dword ptr [004B86FC]
:0045FC3A 837DFC02                cmp dword ptr [ebp-04], 00000002
:0045FC3E 7415                    je 0045FC55
:0045FC40 6A00                    push 00000000
:0045FC42 8B45FC                  mov eax, dword ptr [ebp-04]
:0045FC45 8B0C85B80C4B00          mov ecx, dword ptr [4*eax+004B0CB8]
:0045FC4C 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FC4D FF15E4864B00            Call dword ptr [004B86E4]
:0045FC53 EB1D                    jmp 0045FC72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FC3E(C)
|
:0045FC55 6A00                    push 00000000

* Possible Ref to Menu: SMAPMENU, Item: "܉(C)"
                                  |
:0045FC57 68BD9C0000              push 00009CBD
:0045FC5C 6811010000              push 00000111
:0045FC61 8B55FC                  mov edx, dword ptr [ebp-04]
:0045FC64 8B0495B80C4B00          mov eax, dword ptr [4*edx+004B0CB8]
:0045FC6B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045FC6C FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FC53(U)
|
:0045FC72 EB8B                    jmp 0045FBFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FC0C(C)
|
:0045FC74 6A00                    push 00000000
:0045FC76 E8ACAA0000              call 0046A727
:0045FC7B 83C404                  add esp, 00000004
:0045FC7E 8BE5                    mov esp, ebp
:0045FC80 5D                      pop ebp
:0045FC81 C3                      ret



* Referenced by a CALL at Address:
|:00466130   
|
:0045FC82 55                      push ebp
:0045FC83 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0434, ""
                                  |
:0045FC85 6834040000              push 00000434
:0045FC8A A1700E4B00              mov eax, dword ptr [004B0E70]
:0045FC8F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045FC90 FF15AC864B00            Call dword ptr [004B86AC]
:0045FC96 50                      push eax
:0045FC97 8B0DB80C4B00            mov ecx, dword ptr [004B0CB8]
:0045FC9D 51                      push ecx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045FC9E FF1510874B00            Call dword ptr [004B8710]
:0045FCA4 6A00                    push 00000000
:0045FCA6 8B156C4C4700            mov edx, dword ptr [00474C6C]
:0045FCAC 52                      push edx
:0045FCAD A1684C4700              mov eax, dword ptr [00474C68]
:0045FCB2 50                      push eax
:0045FCB3 6A00                    push 00000000
:0045FCB5 6A00                    push 00000000
:0045FCB7 8B0DB80C4B00            mov ecx, dword ptr [004B0CB8]
:0045FCBD 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045FCBE FF15FC864B00            Call dword ptr [004B86FC]

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0045FCC4 68FA030000              push 000003FA
:0045FCC9 8B15700E4B00            mov edx, dword ptr [004B0E70]
:0045FCCF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045FCD0 FF15AC864B00            Call dword ptr [004B86AC]
:0045FCD6 50                      push eax
:0045FCD7 A1BC0C4B00              mov eax, dword ptr [004B0CBC]
:0045FCDC 50                      push eax

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045FCDD FF1510874B00            Call dword ptr [004B8710]
:0045FCE3 6A00                    push 00000000
:0045FCE5 8B0D7C4C4700            mov ecx, dword ptr [00474C7C]
:0045FCEB 51                      push ecx
:0045FCEC 8B15784C4700            mov edx, dword ptr [00474C78]
:0045FCF2 52                      push edx
:0045FCF3 6A00                    push 00000000
:0045FCF5 6A00                    push 00000000
:0045FCF7 A1BC0C4B00              mov eax, dword ptr [004B0CBC]
:0045FCFC 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045FCFD FF15FC864B00            Call dword ptr [004B86FC]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045FD03 6A05                    push 00000005
:0045FD05 8B0DB80C4B00            mov ecx, dword ptr [004B0CB8]
:0045FD0B 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FD0C FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045FD12 6A05                    push 00000005
:0045FD14 8B15BC0C4B00            mov edx, dword ptr [004B0CBC]
:0045FD1A 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FD1B FF15E4864B00            Call dword ptr [004B86E4]
:0045FD21 5D                      pop ebp
:0045FD22 C3                      ret



* Referenced by a CALL at Address:
|:00454BB3   
|
:0045FD23 55                      push ebp
:0045FD24 8BEC                    mov ebp, esp
:0045FD26 A1480E4B00              mov eax, dword ptr [004B0E48]
:0045FD2B 50                      push eax

* Reference To: USER32.IsWindow, Ord:0167h
                                  |
:0045FD2C FF1534864B00            Call dword ptr [004B8634]
:0045FD32 85C0                    test eax, eax
:0045FD34 7437                    je 0045FD6D
:0045FD36 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:0045FD3C 51                      push ecx
:0045FD3D 8B15C40C4B00            mov edx, dword ptr [004B0CC4]
:0045FD43 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045FD44 FF1510874B00            Call dword ptr [004B8710]
:0045FD4A 6A00                    push 00000000
:0045FD4C A19C4C4700              mov eax, dword ptr [00474C9C]
:0045FD51 50                      push eax
:0045FD52 8B0D984C4700            mov ecx, dword ptr [00474C98]
:0045FD58 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045FD59 6A04                    push 00000004
:0045FD5B 6848020000              push 00000248
:0045FD60 8B15C40C4B00            mov edx, dword ptr [004B0CC4]
:0045FD66 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045FD67 FF15FC864B00            Call dword ptr [004B86FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FD34(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045FD6D 6A05                    push 00000005
:0045FD6F A1C40C4B00              mov eax, dword ptr [004B0CC4]
:0045FD74 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FD75 FF15E4864B00            Call dword ptr [004B86E4]
:0045FD7B 5D                      pop ebp
:0045FD7C C3                      ret



* Referenced by a CALL at Address:
|:00424CF0   
|
:0045FD7D 55                      push ebp
:0045FD7E 8BEC                    mov ebp, esp
:0045FD80 83EC24                  sub esp, 00000024
:0045FD83 894DDC                  mov dword ptr [ebp-24], ecx
:0045FD86 B980594800              mov ecx, 00485980
:0045FD8B E89203FCFF              call 00420122
:0045FD90 B980594800              mov ecx, 00485980
:0045FD95 E8EC03FCFF              call 00420186
:0045FD9A 8945E8                  mov dword ptr [ebp-18], eax
:0045FD9D B980594800              mov ecx, 00485980
:0045FDA2 E80E04FCFF              call 004201B5
:0045FDA7 8945E4                  mov dword ptr [ebp-1C], eax
:0045FDAA 8D45F0                  lea eax, dword ptr [ebp-10]
:0045FDAD 50                      push eax
:0045FDAE 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0045FDB4 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045FDB5 FF15C8864B00            Call dword ptr [004B86C8]
:0045FDBB 8B5508                  mov edx, dword ptr [ebp+08]
:0045FDBE 52                      push edx

* Reference To: KERNEL32.lstrlenA, Ord:02A1h
                                  |
:0045FDBF FF1560854B00            Call dword ptr [004B8560]
:0045FDC5 8945EC                  mov dword ptr [ebp-14], eax
:0045FDC8 837DEC00                cmp dword ptr [ebp-14], 00000000
:0045FDCC 742C                    je 0045FDFA
:0045FDCE B9C8E24A00              mov ecx, 004AE2C8
:0045FDD3 E82869FAFF              call 00406700
:0045FDD8 85C0                    test eax, eax
:0045FDDA 741E                    je 0045FDFA
:0045FDDC 837DE428                cmp dword ptr [ebp-1C], 00000028
:0045FDE0 7C18                    jl 0045FDFA
:0045FDE2 8B45E8                  mov eax, dword ptr [ebp-18]
:0045FDE5 3B45F0                  cmp eax, dword ptr [ebp-10]
:0045FDE8 7C10                    jl 0045FDFA
:0045FDEA 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045FDED 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0045FDF0 7F08                    jg 0045FDFA
:0045FDF2 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045FDF5 3B55FC                  cmp edx, dword ptr [ebp-04]
:0045FDF8 7E21                    jle 0045FE1B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FDCC(C), :0045FDDA(C), :0045FDE0(C), :0045FDE8(C), :0045FDF0(C)
|
:0045FDFA 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FDFD E858010000              call 0045FF5A
:0045FE02 68F40C4B00              push 004B0CF4
:0045FE07 8B45DC                  mov eax, dword ptr [ebp-24]
:0045FE0A 83C00C                  add eax, 0000000C
:0045FE0D 50                      push eax
:0045FE0E E8CC270000              call 004625DF
:0045FE13 83C408                  add esp, 00000008
:0045FE16 E939010000              jmp 0045FF54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FDF8(C)
|
:0045FE1B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FE1E E803020000              call 00460026
:0045FE23 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FE26 51                      push ecx
:0045FE27 8B5508                  mov edx, dword ptr [ebp+08]
:0045FE2A 52                      push edx
:0045FE2B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FE2E E852010000              call 0045FF85
:0045FE33 8945E0                  mov dword ptr [ebp-20], eax
:0045FE36 8B45E8                  mov eax, dword ptr [ebp-18]
:0045FE39 83C008                  add eax, 00000008
:0045FE3C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FE3F 394104                  cmp dword ptr [ecx+04], eax
:0045FE42 7F45                    jg 0045FE89
:0045FE44 8B55E8                  mov edx, dword ptr [ebp-18]
:0045FE47 83EA08                  sub edx, 00000008
:0045FE4A 8B45DC                  mov eax, dword ptr [ebp-24]
:0045FE4D 395004                  cmp dword ptr [eax+04], edx
:0045FE50 7C37                    jl 0045FE89
:0045FE52 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045FE55 83C108                  add ecx, 00000008
:0045FE58 8B55DC                  mov edx, dword ptr [ebp-24]
:0045FE5B 394A08                  cmp dword ptr [edx+08], ecx
:0045FE5E 7F29                    jg 0045FE89
:0045FE60 8B45E4                  mov eax, dword ptr [ebp-1C]
:0045FE63 83E808                  sub eax, 00000008
:0045FE66 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FE69 394108                  cmp dword ptr [ecx+08], eax
:0045FE6C 7C1B                    jl 0045FE89
:0045FE6E 8B55DC                  mov edx, dword ptr [ebp-24]
:0045FE71 83C20C                  add edx, 0000000C
:0045FE74 52                      push edx
:0045FE75 8B4508                  mov eax, dword ptr [ebp+08]
:0045FE78 50                      push eax
:0045FE79 E835280000              call 004626B3
:0045FE7E 83C408                  add esp, 00000008
:0045FE81 85C0                    test eax, eax
:0045FE83 0F84B4000000            je 0045FF3D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FE42(C), :0045FE50(C), :0045FE5E(C), :0045FE6C(C)
|
:0045FE89 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FE8C E8C9000000              call 0045FF5A
:0045FE91 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FE94 8B55E8                  mov edx, dword ptr [ebp-18]
:0045FE97 895104                  mov dword ptr [ecx+04], edx
:0045FE9A 8B45DC                  mov eax, dword ptr [ebp-24]
:0045FE9D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045FEA0 894808                  mov dword ptr [eax+08], ecx
:0045FEA3 B9A8034B00              mov ecx, 004B03A8
:0045FEA8 E8DC69FEFF              call 00446889
:0045FEAD 2B45E0                  sub eax, dword ptr [ebp-20]
:0045FEB0 83E820                  sub eax, 00000020
:0045FEB3 3945E8                  cmp dword ptr [ebp-18], eax
:0045FEB6 7C0C                    jl 0045FEC4
:0045FEB8 8B55E8                  mov edx, dword ptr [ebp-18]
:0045FEBB 2B55E0                  sub edx, dword ptr [ebp-20]
:0045FEBE 83EA28                  sub edx, 00000028
:0045FEC1 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FEB6(C)
|
:0045FEC4 6A00                    push 00000000
:0045FEC6 A1AC4C4700              mov eax, dword ptr [00474CAC]
:0045FECB 50                      push eax
:0045FECC 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045FECF 51                      push ecx
:0045FED0 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045FED3 52                      push edx
:0045FED4 8B45E8                  mov eax, dword ptr [ebp-18]
:0045FED7 83C020                  add eax, 00000020
:0045FEDA 50                      push eax
:0045FEDB 8B0DC80C4B00            mov ecx, dword ptr [004B0CC8]
:0045FEE1 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045FEE2 FF15FC864B00            Call dword ptr [004B86FC]
:0045FEE8 8B55DC                  mov edx, dword ptr [ebp-24]
:0045FEEB 833A00                  cmp dword ptr [edx], 00000000
:0045FEEE 744B                    je 0045FF3B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045FEF0 6A05                    push 00000005
:0045FEF2 A1C80C4B00              mov eax, dword ptr [004B0CC8]
:0045FEF7 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FEF8 FF15E4864B00            Call dword ptr [004B86E4]
:0045FEFE 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FF01 C70100000000            mov dword ptr [ecx], 00000000
:0045FF07 68F80C4B00              push 004B0CF8
:0045FF0C 8B55DC                  mov edx, dword ptr [ebp-24]
:0045FF0F 83C20C                  add edx, 0000000C
:0045FF12 52                      push edx
:0045FF13 E8C7260000              call 004625DF
:0045FF18 83C408                  add esp, 00000008
:0045FF1B 8B4508                  mov eax, dword ptr [ebp+08]
:0045FF1E 50                      push eax
:0045FF1F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FF22 83C10C                  add ecx, 0000000C
:0045FF25 51                      push ecx
:0045FF26 E8B4260000              call 004625DF
:0045FF2B 83C408                  add esp, 00000008
:0045FF2E 8B15C80C4B00            mov edx, dword ptr [004B0CC8]
:0045FF34 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0045FF35 FF15A4864B00            Call dword ptr [004B86A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FEEE(C)
|
:0045FF3B EB17                    jmp 0045FF54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FE83(C)
|
:0045FF3D B980594800              mov ecx, 00485980
:0045FF42 E82602FCFF              call 0042016D
:0045FF47 83F801                  cmp eax, 00000001
:0045FF4A 7508                    jne 0045FF54
:0045FF4C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045FF4F E806000000              call 0045FF5A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FE16(U), :0045FF3B(U), :0045FF4A(C)
|
:0045FF54 8BE5                    mov esp, ebp
:0045FF56 5D                      pop ebp
:0045FF57 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00423F39   , :00424CFC   , :00454F08   , :00457E41   , :0045FDFD   
|:0045FE8C   , :0045FF4F   
|
:0045FF5A 55                      push ebp
:0045FF5B 8BEC                    mov ebp, esp
:0045FF5D 51                      push ecx
:0045FF5E 894DFC                  mov dword ptr [ebp-04], ecx
:0045FF61 8B45FC                  mov eax, dword ptr [ebp-04]
:0045FF64 833800                  cmp dword ptr [eax], 00000000
:0045FF67 7518                    jne 0045FF81
:0045FF69 6A00                    push 00000000
:0045FF6B 8B0DC80C4B00            mov ecx, dword ptr [004B0CC8]
:0045FF71 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045FF72 FF15E4864B00            Call dword ptr [004B86E4]
:0045FF78 8B55FC                  mov edx, dword ptr [ebp-04]
:0045FF7B C70201000000            mov dword ptr [edx], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FF67(C)
|
:0045FF81 8BE5                    mov esp, ebp
:0045FF83 5D                      pop ebp
:0045FF84 C3                      ret



* Referenced by a CALL at Address:
|:0045FE2E   
|
:0045FF85 55                      push ebp
:0045FF86 8BEC                    mov ebp, esp
:0045FF88 83EC08                  sub esp, 00000008
:0045FF8B 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045FF8E 6A05                    push 00000005
:0045FF90 E892A70000              call 0046A727
:0045FF95 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045FF98 6A07                    push 00000007
:0045FF9A E84AAE0000              call 0046ADE9
:0045FF9F 83C404                  add esp, 00000004
:0045FFA2 E88B2EFBFF              call 00412E32

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0045FFA7 6A02                    push 00000002
:0045FFA9 6A01                    push 00000001
:0045FFAB B9A8134800              mov ecx, 004813A8
:0045FFB0 E8F67FFAFF              call 00407FAB

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045FFB5 6A0A                    push 0000000A
:0045FFB7 B9A8134800              mov ecx, 004813A8
:0045FFBC E89780FAFF              call 00408058
:0045FFC1 6A4F                    push 0000004F
:0045FFC3 B9A8134800              mov ecx, 004813A8
:0045FFC8 E8C380FAFF              call 00408090
:0045FFCD 8B4508                  mov eax, dword ptr [ebp+08]
:0045FFD0 50                      push eax
:0045FFD1 68A8134800              push 004813A8
:0045FFD6 E89D8CFAFF              call 00408C78
:0045FFDB 83C408                  add esp, 00000008
:0045FFDE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045FFE1 8D14CD10000000          lea edx, dword ptr [8*ecx+00000010]
:0045FFE8 8955FC                  mov dword ptr [ebp-04], edx

* Possible Reference to String Resource ID=00011: "
"
                                  |
:0045FFEB 6A0B                    push 0000000B
:0045FFED 6A01                    push 00000001
:0045FFEF A1AC4C4700              mov eax, dword ptr [00474CAC]
:0045FFF4 50                      push eax
:0045FFF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FFF8 51                      push ecx
:0045FFF9 8B15A44C4700            mov edx, dword ptr [00474CA4]
:0045FFFF 52                      push edx
:00460000 A1A04C4700              mov eax, dword ptr [00474CA0]
:00460005 50                      push eax
:00460006 E8EF2EFBFF              call 00412EFA
:0046000B 83C418                  add esp, 00000018
:0046000E E83A2EFBFF              call 00412E4D
:00460013 6A00                    push 00000000
:00460015 E80DA70000              call 0046A727
:0046001A 83C404                  add esp, 00000004
:0046001D 8B45FC                  mov eax, dword ptr [ebp-04]
:00460020 8BE5                    mov esp, ebp
:00460022 5D                      pop ebp
:00460023 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0045FE1E   
|
:00460026 55                      push ebp
:00460027 8BEC                    mov ebp, esp
:00460029 51                      push ecx
:0046002A 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046002D 6A05                    push 00000005
:0046002F E8F3A60000              call 0046A727
:00460034 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00460037 6A07                    push 00000007
:00460039 E8ABAD0000              call 0046ADE9
:0046003E 83C404                  add esp, 00000004
:00460041 E8EC2DFBFF              call 00412E32
:00460046 6A4F                    push 0000004F
:00460048 6A00                    push 00000000
:0046004A A1AC4C4700              mov eax, dword ptr [00474CAC]
:0046004F 50                      push eax
:00460050 8B0DA84C4700            mov ecx, dword ptr [00474CA8]
:00460056 51                      push ecx
:00460057 8B15A44C4700            mov edx, dword ptr [00474CA4]
:0046005D 52                      push edx
:0046005E A1A04C4700              mov eax, dword ptr [00474CA0]
:00460063 50                      push eax
:00460064 E8912EFBFF              call 00412EFA
:00460069 83C418                  add esp, 00000018
:0046006C E8DC2DFBFF              call 00412E4D
:00460071 6A00                    push 00000000
:00460073 E8AFA60000              call 0046A727
:00460078 83C404                  add esp, 00000004
:0046007B 8BE5                    mov esp, ebp
:0046007D 5D                      pop ebp
:0046007E C3                      ret



* Referenced by a CALL at Address:
|:0045FB2D   
|
:0046007F 55                      push ebp
:00460080 8BEC                    mov ebp, esp
:00460082 51                      push ecx
:00460083 894DFC                  mov dword ptr [ebp-04], ecx
:00460086 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460089 E899000000              call 00460127
:0046008E 8B450C                  mov eax, dword ptr [ebp+0C]
:00460091 25FFFF0000              and eax, 0000FFFF
:00460096 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460099 894110                  mov dword ptr [ecx+10], eax
:0046009C 8B550C                  mov edx, dword ptr [ebp+0C]
:0046009F C1EA10                  shr edx, 10
:004600A2 81E2FFFF0000            and edx, 0000FFFF
:004600A8 81E2FFFF0000            and edx, 0000FFFF
:004600AE 8B45FC                  mov eax, dword ptr [ebp-04]
:004600B1 895014                  mov dword ptr [eax+14], edx
:004600B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004600B7 8B55FC                  mov edx, dword ptr [ebp-04]
:004600BA 8B4110                  mov eax, dword ptr [ecx+10]
:004600BD 3B4228                  cmp eax, dword ptr [edx+28]
:004600C0 7C57                    jl 00460119
:004600C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004600C5 8B55FC                  mov edx, dword ptr [ebp-04]
:004600C8 8B4110                  mov eax, dword ptr [ecx+10]
:004600CB 3B4230                  cmp eax, dword ptr [edx+30]
:004600CE 7F49                    jg 00460119
:004600D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004600D3 8B55FC                  mov edx, dword ptr [ebp-04]
:004600D6 8B4114                  mov eax, dword ptr [ecx+14]
:004600D9 3B422C                  cmp eax, dword ptr [edx+2C]
:004600DC 7C3B                    jl 00460119
:004600DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004600E1 8B55FC                  mov edx, dword ptr [ebp-04]
:004600E4 8B4114                  mov eax, dword ptr [ecx+14]
:004600E7 3B4234                  cmp eax, dword ptr [edx+34]
:004600EA 7F2D                    jg 00460119
:004600EC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004600EF 51                      push ecx

* Reference To: USER32.SetCapture, Ord:01E3h
                                  |
:004600F0 FF1548874B00            Call dword ptr [004B8748]
:004600F6 8B55FC                  mov edx, dword ptr [ebp-04]
:004600F9 8B45FC                  mov eax, dword ptr [ebp-04]
:004600FC 8B4810                  mov ecx, dword ptr [eax+10]
:004600FF 894A08                  mov dword ptr [edx+08], ecx
:00460102 8B55FC                  mov edx, dword ptr [ebp-04]
:00460105 8B45FC                  mov eax, dword ptr [ebp-04]
:00460108 8B4814                  mov ecx, dword ptr [eax+14]
:0046010B 894A0C                  mov dword ptr [edx+0C], ecx
:0046010E 8B55FC                  mov edx, dword ptr [ebp-04]
:00460111 C70201000000            mov dword ptr [edx], 00000001
:00460117 EB08                    jmp 00460121

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004600C0(C), :004600CE(C), :004600DC(C), :004600EA(C)
|
:00460119 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046011C E806000000              call 00460127

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460117(U)
|
:00460121 8BE5                    mov esp, ebp
:00460123 5D                      pop ebp
:00460124 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00460089   , :0046011C   , :004604D0   , :004605DC   , :004607E4   
|
:00460127 55                      push ebp
:00460128 8BEC                    mov ebp, esp
:0046012A 51                      push ecx
:0046012B 894DFC                  mov dword ptr [ebp-04], ecx
:0046012E 8B45FC                  mov eax, dword ptr [ebp-04]
:00460131 C7401000000000          mov [eax+10], 00000000
:00460138 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046013B C7411400000000          mov [ecx+14], 00000000
:00460142 8B55FC                  mov edx, dword ptr [ebp-04]
:00460145 C7420800000000          mov [edx+08], 00000000
:0046014C 8B45FC                  mov eax, dword ptr [ebp-04]
:0046014F C7400C00000000          mov [eax+0C], 00000000
:00460156 B9180A4B00              mov ecx, 004B0A18
:0046015B E8E0060000              call 00460840
:00460160 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460163 8B10                    mov edx, dword ptr [eax]
:00460165 895138                  mov dword ptr [ecx+38], edx
:00460168 B9180A4B00              mov ecx, 004B0A18
:0046016D E8CE060000              call 00460840
:00460172 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460175 8B5004                  mov edx, dword ptr [eax+04]
:00460178 89513C                  mov dword ptr [ecx+3C], edx
:0046017B B9180A4B00              mov ecx, 004B0A18
:00460180 E8BB060000              call 00460840
:00460185 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460188 8B5008                  mov edx, dword ptr [eax+08]
:0046018B 895140                  mov dword ptr [ecx+40], edx
:0046018E B9180A4B00              mov ecx, 004B0A18
:00460193 E8A8060000              call 00460840
:00460198 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046019B 8B500C                  mov edx, dword ptr [eax+0C]
:0046019E 895144                  mov dword ptr [ecx+44], edx
:004601A1 B9180A4B00              mov ecx, 004B0A18
:004601A6 E895060000              call 00460840
:004601AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004601AE 8B10                    mov edx, dword ptr [eax]
:004601B0 895128                  mov dword ptr [ecx+28], edx
:004601B3 B9180A4B00              mov ecx, 004B0A18
:004601B8 E883060000              call 00460840
:004601BD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004601C0 8B5004                  mov edx, dword ptr [eax+04]
:004601C3 89512C                  mov dword ptr [ecx+2C], edx
:004601C6 B9180A4B00              mov ecx, 004B0A18
:004601CB E870060000              call 00460840
:004601D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004601D3 8B5008                  mov edx, dword ptr [eax+08]
:004601D6 895130                  mov dword ptr [ecx+30], edx
:004601D9 B9180A4B00              mov ecx, 004B0A18
:004601DE E85D060000              call 00460840
:004601E3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004601E6 8B500C                  mov edx, dword ptr [eax+0C]
:004601E9 895134                  mov dword ptr [ecx+34], edx
:004601EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004601EF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004601F2 8B5030                  mov edx, dword ptr [eax+30]
:004601F5 2B5128                  sub edx, dword ptr [ecx+28]
:004601F8 8B45FC                  mov eax, dword ptr [ebp-04]
:004601FB 895048                  mov dword ptr [eax+48], edx
:004601FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460201 8B55FC                  mov edx, dword ptr [ebp-04]
:00460204 8B4134                  mov eax, dword ptr [ecx+34]
:00460207 2B422C                  sub eax, dword ptr [edx+2C]
:0046020A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046020D 89414C                  mov dword ptr [ecx+4C], eax
:00460210 B9180A4B00              mov ecx, 004B0A18
:00460215 E806060000              call 00460820
:0046021A 33D2                    xor edx, edx
:0046021C 8A10                    mov dl, byte ptr [eax]
:0046021E 8B45FC                  mov eax, dword ptr [ebp-04]
:00460221 895018                  mov dword ptr [eax+18], edx
:00460224 B9180A4B00              mov ecx, 004B0A18
:00460229 E8F2050000              call 00460820
:0046022E 33C9                    xor ecx, ecx
:00460230 8A4801                  mov cl, byte ptr [eax+01]
:00460233 8B55FC                  mov edx, dword ptr [ebp-04]
:00460236 894A1C                  mov dword ptr [edx+1C], ecx
:00460239 B9A8034B00              mov ecx, 004B03A8
:0046023E E87E67FEFF              call 004469C1
:00460243 99                      cdq
:00460244 83E207                  and edx, 00000007
:00460247 03C2                    add eax, edx
:00460249 C1F803                  sar eax, 03
:0046024C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046024F 8B5118                  mov edx, dword ptr [ecx+18]
:00460252 8D4402FE                lea eax, dword ptr [edx+eax-02]
:00460256 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460259 894120                  mov dword ptr [ecx+20], eax
:0046025C B9A8034B00              mov ecx, 004B03A8
:00460261 E88267FEFF              call 004469E8
:00460266 99                      cdq
:00460267 83E207                  and edx, 00000007
:0046026A 03C2                    add eax, edx
:0046026C C1F803                  sar eax, 03
:0046026F 8B55FC                  mov edx, dword ptr [ebp-04]
:00460272 8B4A1C                  mov ecx, dword ptr [edx+1C]
:00460275 8D5401FE                lea edx, dword ptr [ecx+eax-02]
:00460279 8B45FC                  mov eax, dword ptr [ebp-04]
:0046027C 895024                  mov dword ptr [eax+24], edx
:0046027F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460282 C70100000000            mov dword ptr [ecx], 00000000
:00460288 8BE5                    mov esp, ebp
:0046028A 5D                      pop ebp
:0046028B C3                      ret



* Referenced by a CALL at Address:
|:0045FAFD   
|
:0046028C 55                      push ebp
:0046028D 8BEC                    mov ebp, esp
:0046028F 83EC08                  sub esp, 00000008
:00460292 894DF8                  mov dword ptr [ebp-08], ecx
:00460295 8B45F8                  mov eax, dword ptr [ebp-08]
:00460298 833800                  cmp dword ptr [eax], 00000000
:0046029B 0F847A020000            je 0046051B
:004602A1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004602A4 81E1FFFF0000            and ecx, 0000FFFF
:004602AA 8B55F8                  mov edx, dword ptr [ebp-08]
:004602AD 894A10                  mov dword ptr [edx+10], ecx
:004602B0 8B450C                  mov eax, dword ptr [ebp+0C]
:004602B3 C1E810                  shr eax, 10
:004602B6 25FFFF0000              and eax, 0000FFFF
:004602BB 25FFFF0000              and eax, 0000FFFF
:004602C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004602C3 894114                  mov dword ptr [ecx+14], eax
:004602C6 8B55F8                  mov edx, dword ptr [ebp-08]
:004602C9 8B45F8                  mov eax, dword ptr [ebp-08]
:004602CC 8B4A08                  mov ecx, dword ptr [edx+08]
:004602CF 3B4810                  cmp ecx, dword ptr [eax+10]
:004602D2 7512                    jne 004602E6
:004602D4 8B55F8                  mov edx, dword ptr [ebp-08]
:004602D7 8B45F8                  mov eax, dword ptr [ebp-08]
:004602DA 8B4A0C                  mov ecx, dword ptr [edx+0C]
:004602DD 3B4814                  cmp ecx, dword ptr [eax+14]
:004602E0 0F842B020000            je 00460511

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004602D2(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004602E6 6A03                    push 00000003
:004602E8 E83AA40000              call 0046A727
:004602ED 83C404                  add esp, 00000004
:004602F0 6A01                    push 00000001
:004602F2 8B55F8                  mov edx, dword ptr [ebp-08]
:004602F5 83C238                  add edx, 00000038
:004602F8 83EC10                  sub esp, 00000010
:004602FB 8BC4                    mov eax, esp
:004602FD 8B0A                    mov ecx, dword ptr [edx]
:004602FF 8908                    mov dword ptr [eax], ecx
:00460301 8B4A04                  mov ecx, dword ptr [edx+04]
:00460304 894804                  mov dword ptr [eax+04], ecx
:00460307 8B4A08                  mov ecx, dword ptr [edx+08]
:0046030A 894808                  mov dword ptr [eax+08], ecx
:0046030D 8B520C                  mov edx, dword ptr [edx+0C]
:00460310 89500C                  mov dword ptr [eax+0C], edx
:00460313 E8DD020000              call 004605F5
:00460318 83C414                  add esp, 00000014
:0046031B 8B45F8                  mov eax, dword ptr [ebp-08]
:0046031E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460321 8B4010                  mov eax, dword ptr [eax+10]
:00460324 2B4108                  sub eax, dword ptr [ecx+08]
:00460327 99                      cdq

* Possible Reference to String Resource ID=00006: ""
                                  |
:00460328 B906000000              mov ecx, 00000006
:0046032D F7F9                    idiv ecx
:0046032F 6BC006                  imul eax, 00000006
:00460332 8945FC                  mov dword ptr [ebp-04], eax
:00460335 8B55F8                  mov edx, dword ptr [ebp-08]
:00460338 8B4228                  mov eax, dword ptr [edx+28]
:0046033B 0345FC                  add eax, dword ptr [ebp-04]
:0046033E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460341 894138                  mov dword ptr [ecx+38], eax
:00460344 8B55F8                  mov edx, dword ptr [ebp-08]
:00460347 8B4230                  mov eax, dword ptr [edx+30]
:0046034A 0345FC                  add eax, dword ptr [ebp-04]
:0046034D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460350 894140                  mov dword ptr [ecx+40], eax
:00460353 8B55F8                  mov edx, dword ptr [ebp-08]
:00460356 8B45F8                  mov eax, dword ptr [ebp-08]
:00460359 8B4A38                  mov ecx, dword ptr [edx+38]
:0046035C 3B4818                  cmp ecx, dword ptr [eax+18]
:0046035F 7D20                    jge 00460381
:00460361 8B55F8                  mov edx, dword ptr [ebp-08]
:00460364 8B45F8                  mov eax, dword ptr [ebp-08]
:00460367 8B4818                  mov ecx, dword ptr [eax+18]
:0046036A 894A38                  mov dword ptr [edx+38], ecx
:0046036D 8B55F8                  mov edx, dword ptr [ebp-08]
:00460370 8B4238                  mov eax, dword ptr [edx+38]
:00460373 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460376 034148                  add eax, dword ptr [ecx+48]
:00460379 8B55F8                  mov edx, dword ptr [ebp-08]
:0046037C 894240                  mov dword ptr [edx+40], eax
:0046037F EB2C                    jmp 004603AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046035F(C)
|
:00460381 8B45F8                  mov eax, dword ptr [ebp-08]
:00460384 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460387 8B5040                  mov edx, dword ptr [eax+40]
:0046038A 3B5120                  cmp edx, dword ptr [ecx+20]
:0046038D 7E1E                    jle 004603AD
:0046038F 8B45F8                  mov eax, dword ptr [ebp-08]
:00460392 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460395 8B5120                  mov edx, dword ptr [ecx+20]
:00460398 895040                  mov dword ptr [eax+40], edx
:0046039B 8B45F8                  mov eax, dword ptr [ebp-08]
:0046039E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004603A1 8B5040                  mov edx, dword ptr [eax+40]
:004603A4 2B5148                  sub edx, dword ptr [ecx+48]
:004603A7 8B45F8                  mov eax, dword ptr [ebp-08]
:004603AA 895038                  mov dword ptr [eax+38], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046037F(U), :0046038D(C)
|
:004603AD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004603B0 8B55F8                  mov edx, dword ptr [ebp-08]
:004603B3 8B4114                  mov eax, dword ptr [ecx+14]
:004603B6 2B420C                  sub eax, dword ptr [edx+0C]
:004603B9 99                      cdq

* Possible Reference to String Resource ID=00006: ""
                                  |
:004603BA B906000000              mov ecx, 00000006
:004603BF F7F9                    idiv ecx
:004603C1 6BC006                  imul eax, 00000006
:004603C4 8945FC                  mov dword ptr [ebp-04], eax
:004603C7 8B55F8                  mov edx, dword ptr [ebp-08]
:004603CA 8B422C                  mov eax, dword ptr [edx+2C]
:004603CD 0345FC                  add eax, dword ptr [ebp-04]
:004603D0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004603D3 89413C                  mov dword ptr [ecx+3C], eax
:004603D6 8B55F8                  mov edx, dword ptr [ebp-08]
:004603D9 8B4234                  mov eax, dword ptr [edx+34]
:004603DC 0345FC                  add eax, dword ptr [ebp-04]
:004603DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004603E2 894144                  mov dword ptr [ecx+44], eax
:004603E5 8B55F8                  mov edx, dword ptr [ebp-08]
:004603E8 8B45F8                  mov eax, dword ptr [ebp-08]
:004603EB 8B4A3C                  mov ecx, dword ptr [edx+3C]
:004603EE 3B481C                  cmp ecx, dword ptr [eax+1C]
:004603F1 7D20                    jge 00460413
:004603F3 8B55F8                  mov edx, dword ptr [ebp-08]
:004603F6 8B45F8                  mov eax, dword ptr [ebp-08]
:004603F9 8B481C                  mov ecx, dword ptr [eax+1C]
:004603FC 894A3C                  mov dword ptr [edx+3C], ecx
:004603FF 8B55F8                  mov edx, dword ptr [ebp-08]
:00460402 8B423C                  mov eax, dword ptr [edx+3C]
:00460405 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460408 03414C                  add eax, dword ptr [ecx+4C]
:0046040B 8B55F8                  mov edx, dword ptr [ebp-08]
:0046040E 894244                  mov dword ptr [edx+44], eax
:00460411 EB2C                    jmp 0046043F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004603F1(C)
|
:00460413 8B45F8                  mov eax, dword ptr [ebp-08]
:00460416 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460419 8B5044                  mov edx, dword ptr [eax+44]
:0046041C 3B5124                  cmp edx, dword ptr [ecx+24]
:0046041F 7E1E                    jle 0046043F
:00460421 8B45F8                  mov eax, dword ptr [ebp-08]
:00460424 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460427 8B5124                  mov edx, dword ptr [ecx+24]
:0046042A 895044                  mov dword ptr [eax+44], edx
:0046042D 8B45F8                  mov eax, dword ptr [ebp-08]
:00460430 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460433 8B5044                  mov edx, dword ptr [eax+44]
:00460436 2B514C                  sub edx, dword ptr [ecx+4C]
:00460439 8B45F8                  mov eax, dword ptr [ebp-08]
:0046043C 89503C                  mov dword ptr [eax+3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460411(U), :0046041F(C)
|
:0046043F 6A00                    push 00000000
:00460441 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460444 83C138                  add ecx, 00000038
:00460447 83EC10                  sub esp, 00000010
:0046044A 8BD4                    mov edx, esp
:0046044C 8B01                    mov eax, dword ptr [ecx]
:0046044E 8902                    mov dword ptr [edx], eax
:00460450 8B4104                  mov eax, dword ptr [ecx+04]
:00460453 894204                  mov dword ptr [edx+04], eax
:00460456 8B4108                  mov eax, dword ptr [ecx+08]
:00460459 894208                  mov dword ptr [edx+08], eax
:0046045C 8B490C                  mov ecx, dword ptr [ecx+0C]
:0046045F 894A0C                  mov dword ptr [edx+0C], ecx
:00460462 E88E010000              call 004605F5
:00460467 83C414                  add esp, 00000014
:0046046A 8B55F8                  mov edx, dword ptr [ebp-08]
:0046046D 8B45F8                  mov eax, dword ptr [ebp-08]
:00460470 8B4A10                  mov ecx, dword ptr [edx+10]
:00460473 3B4818                  cmp ecx, dword ptr [eax+18]
:00460476 7C2A                    jl 004604A2
:00460478 8B55F8                  mov edx, dword ptr [ebp-08]
:0046047B 8B45F8                  mov eax, dword ptr [ebp-08]
:0046047E 8B4A10                  mov ecx, dword ptr [edx+10]
:00460481 3B4820                  cmp ecx, dword ptr [eax+20]
:00460484 7F1C                    jg 004604A2
:00460486 8B55F8                  mov edx, dword ptr [ebp-08]
:00460489 8B45F8                  mov eax, dword ptr [ebp-08]
:0046048C 8B4A14                  mov ecx, dword ptr [edx+14]
:0046048F 3B481C                  cmp ecx, dword ptr [eax+1C]
:00460492 7C0E                    jl 004604A2
:00460494 8B55F8                  mov edx, dword ptr [ebp-08]
:00460497 8B45F8                  mov eax, dword ptr [ebp-08]
:0046049A 8B4A14                  mov ecx, dword ptr [edx+14]
:0046049D 3B4824                  cmp ecx, dword ptr [eax+24]
:004604A0 7E6F                    jle 00460511

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460476(C), :00460484(C), :00460492(C)
|
:004604A2 6A01                    push 00000001
:004604A4 8B55F8                  mov edx, dword ptr [ebp-08]
:004604A7 83C238                  add edx, 00000038
:004604AA 83EC10                  sub esp, 00000010
:004604AD 8BC4                    mov eax, esp
:004604AF 8B0A                    mov ecx, dword ptr [edx]
:004604B1 8908                    mov dword ptr [eax], ecx
:004604B3 8B4A04                  mov ecx, dword ptr [edx+04]
:004604B6 894804                  mov dword ptr [eax+04], ecx
:004604B9 8B4A08                  mov ecx, dword ptr [edx+08]
:004604BC 894808                  mov dword ptr [eax+08], ecx
:004604BF 8B520C                  mov edx, dword ptr [edx+0C]
:004604C2 89500C                  mov dword ptr [eax+0C], edx
:004604C5 E82B010000              call 004605F5
:004604CA 83C414                  add esp, 00000014
:004604CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004604D0 E852FCFFFF              call 00460127
:004604D5 6A00                    push 00000000
:004604D7 8B45F8                  mov eax, dword ptr [ebp-08]
:004604DA 83C038                  add eax, 00000038
:004604DD 83EC10                  sub esp, 00000010
:004604E0 8BCC                    mov ecx, esp
:004604E2 8B10                    mov edx, dword ptr [eax]
:004604E4 8911                    mov dword ptr [ecx], edx
:004604E6 8B5004                  mov edx, dword ptr [eax+04]
:004604E9 895104                  mov dword ptr [ecx+04], edx
:004604EC 8B5008                  mov edx, dword ptr [eax+08]
:004604EF 895108                  mov dword ptr [ecx+08], edx
:004604F2 8B400C                  mov eax, dword ptr [eax+0C]
:004604F5 89410C                  mov dword ptr [ecx+0C], eax
:004604F8 E8F8000000              call 004605F5
:004604FD 83C414                  add esp, 00000014

* Reference To: USER32.GetCapture, Ord:00D8h
                                  |
:00460500 FF1590864B00            Call dword ptr [004B8690]
:00460506 3B4508                  cmp eax, dword ptr [ebp+08]
:00460509 7506                    jne 00460511

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:0046050B FF1554874B00            Call dword ptr [004B8754]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004602E0(C), :004604A0(C), :00460509(C)
|
:00460511 6A00                    push 00000000
:00460513 E80FA20000              call 0046A727
:00460518 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046029B(C)
|
:0046051B 8BE5                    mov esp, ebp
:0046051D 5D                      pop ebp
:0046051E C20800                  ret 0008



* Referenced by a CALL at Address:
|:0045FB39   
|
:00460521 55                      push ebp
:00460522 8BEC                    mov ebp, esp
:00460524 51                      push ecx
:00460525 894DFC                  mov dword ptr [ebp-04], ecx
:00460528 8B45FC                  mov eax, dword ptr [ebp-04]
:0046052B 833800                  cmp dword ptr [eax], 00000000
:0046052E 0F84B3000000            je 004605E7
:00460534 B9A8034B00              mov ecx, 004B03A8
:00460539 E8B44BFEFF              call 004450F2
:0046053E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460541 83C138                  add ecx, 00000038
:00460544 51                      push ecx
:00460545 B9180A4B00              mov ecx, 004B0A18
:0046054A E8CD44FFFF              call 00454A1C
:0046054F B9180A4B00              mov ecx, 004B0A18
:00460554 E8C7020000              call 00460820
:00460559 33D2                    xor edx, edx
:0046055B 8A10                    mov dl, byte ptr [eax]
:0046055D 8B45FC                  mov eax, dword ptr [ebp-04]
:00460560 8B4038                  mov eax, dword ptr [eax+38]
:00460563 2BC2                    sub eax, edx
:00460565 99                      cdq
:00460566 2BC2                    sub eax, edx
:00460568 D1F8                    sar eax, 1
:0046056A 50                      push eax
:0046056B B9A8034B00              mov ecx, 004B03A8
:00460570 E88962FEFF              call 004467FE
:00460575 B9180A4B00              mov ecx, 004B0A18
:0046057A E8A1020000              call 00460820
:0046057F 33C9                    xor ecx, ecx
:00460581 8A4801                  mov cl, byte ptr [eax+01]
:00460584 8B55FC                  mov edx, dword ptr [ebp-04]
:00460587 8B423C                  mov eax, dword ptr [edx+3C]
:0046058A 2BC1                    sub eax, ecx
:0046058C 99                      cdq
:0046058D 2BC2                    sub eax, edx
:0046058F D1F8                    sar eax, 1
:00460591 50                      push eax
:00460592 B9A8034B00              mov ecx, 004B03A8
:00460597 E88962FEFF              call 00446825
:0046059C 6A01                    push 00000001
:0046059E B9A8034B00              mov ecx, 004B03A8
:004605A3 E84562FEFF              call 004467ED
:004605A8 C1E004                  shl eax, 04
:004605AB 50                      push eax
:004605AC 6A00                    push 00000000
:004605AE A1380E4B00              mov eax, dword ptr [004B0E38]
:004605B3 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:004605B4 FF15C4864B00            Call dword ptr [004B86C4]
:004605BA 6A01                    push 00000001
:004605BC B9A8034B00              mov ecx, 004B03A8
:004605C1 E84E62FEFF              call 00446814
:004605C6 C1E004                  shl eax, 04
:004605C9 50                      push eax
:004605CA 6A01                    push 00000001
:004605CC 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004605D2 51                      push ecx

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:004605D3 FF15C4864B00            Call dword ptr [004B86C4]
:004605D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004605DC E846FBFFFF              call 00460127

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:004605E1 FF1554874B00            Call dword ptr [004B8754]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046052E(C)
|
:004605E7 6A00                    push 00000000
:004605E9 E839A10000              call 0046A727
:004605EE 83C404                  add esp, 00000004
:004605F1 8BE5                    mov esp, ebp
:004605F3 5D                      pop ebp
:004605F4 C3                      ret



* Referenced by a CALL at Addresses:
|:0045493E   , :004549FC   , :00460313   , :00460462   , :004604C5   
|:004604F8   
|
:004605F5 55                      push ebp
:004605F6 8BEC                    mov ebp, esp
:004605F8 A1C00C4B00              mov eax, dword ptr [004B0CC0]
:004605FD 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:004605FE FF15E0864B00            Call dword ptr [004B86E0]
:00460604 85C0                    test eax, eax
:00460606 7505                    jne 0046060D
:00460608 E9BF010000              jmp 004607CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460606(C)
|
:0046060D E82028FBFF              call 00412E32
:00460612 6A00                    push 00000000
:00460614 6A4F                    push 0000004F
:00460616 6A00                    push 00000000
:00460618 E8F3A70000              call 0046AE10
:0046061D 83C40C                  add esp, 0000000C
:00460620 837D1800                cmp dword ptr [ebp+18], 00000000
:00460624 0F84BD000000            je 004606E7
:0046062A 6A00                    push 00000000
:0046062C B950DF4A00              mov ecx, 004ADF50
:00460631 E8682FFBFF              call 0041359E
:00460636 05000E0100              add eax, 00010E00
:0046063B 50                      push eax
:0046063C 6A01                    push 00000001
:0046063E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00460641 2B4D08                  sub ecx, dword ptr [ebp+08]
:00460644 83C101                  add ecx, 00000001
:00460647 51                      push ecx
:00460648 8B550C                  mov edx, dword ptr [ebp+0C]
:0046064B 52                      push edx
:0046064C 8B4508                  mov eax, dword ptr [ebp+08]
:0046064F 50                      push eax
:00460650 E892B50000              call 0046BBE7
:00460655 83C414                  add esp, 00000014
:00460658 6A00                    push 00000000
:0046065A B950DF4A00              mov ecx, 004ADF50
:0046065F E83A2FFBFF              call 0041359E
:00460664 0500130100              add eax, 00011300
:00460669 50                      push eax
:0046066A 6A01                    push 00000001
:0046066C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046066F 2B4D08                  sub ecx, dword ptr [ebp+08]
:00460672 83C101                  add ecx, 00000001
:00460675 51                      push ecx
:00460676 8B5514                  mov edx, dword ptr [ebp+14]
:00460679 52                      push edx
:0046067A 8B4508                  mov eax, dword ptr [ebp+08]
:0046067D 50                      push eax
:0046067E E864B50000              call 0046BBE7
:00460683 83C414                  add esp, 00000014
:00460686 6A00                    push 00000000
:00460688 B950DF4A00              mov ecx, 004ADF50
:0046068D E80C2FFBFF              call 0041359E
:00460692 0500180100              add eax, 00011800
:00460697 50                      push eax
:00460698 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046069B 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:0046069E 83C101                  add ecx, 00000001
:004606A1 51                      push ecx
:004606A2 6A01                    push 00000001
:004606A4 8B550C                  mov edx, dword ptr [ebp+0C]
:004606A7 52                      push edx
:004606A8 8B4508                  mov eax, dword ptr [ebp+08]
:004606AB 50                      push eax
:004606AC E836B50000              call 0046BBE7
:004606B1 83C414                  add esp, 00000014
:004606B4 6A00                    push 00000000
:004606B6 B950DF4A00              mov ecx, 004ADF50
:004606BB E8DE2EFBFF              call 0041359E
:004606C0 05001D0100              add eax, 00011D00
:004606C5 50                      push eax
:004606C6 8B4D14                  mov ecx, dword ptr [ebp+14]
:004606C9 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:004606CC 83C101                  add ecx, 00000001
:004606CF 51                      push ecx
:004606D0 6A01                    push 00000001
:004606D2 8B550C                  mov edx, dword ptr [ebp+0C]
:004606D5 52                      push edx
:004606D6 8B4510                  mov eax, dword ptr [ebp+10]
:004606D9 50                      push eax
:004606DA E808B50000              call 0046BBE7
:004606DF 83C414                  add esp, 00000014
:004606E2 E9D2000000              jmp 004607B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460624(C)
|
:004606E7 6A00                    push 00000000
:004606E9 B950DF4A00              mov ecx, 004ADF50
:004606EE E8AB2EFBFF              call 0041359E
:004606F3 05000E0100              add eax, 00010E00
:004606F8 50                      push eax
:004606F9 6A01                    push 00000001
:004606FB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004606FE 2B4D08                  sub ecx, dword ptr [ebp+08]
:00460701 83C101                  add ecx, 00000001
:00460704 51                      push ecx
:00460705 8B550C                  mov edx, dword ptr [ebp+0C]
:00460708 52                      push edx
:00460709 8B4508                  mov eax, dword ptr [ebp+08]
:0046070C 50                      push eax
:0046070D E88BB60000              call 0046BD9D
:00460712 83C414                  add esp, 00000014
:00460715 6A00                    push 00000000
:00460717 B950DF4A00              mov ecx, 004ADF50
:0046071C E87D2EFBFF              call 0041359E
:00460721 0500130100              add eax, 00011300
:00460726 50                      push eax
:00460727 6A01                    push 00000001
:00460729 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046072C 2B4D08                  sub ecx, dword ptr [ebp+08]
:0046072F 83C101                  add ecx, 00000001
:00460732 51                      push ecx
:00460733 8B5514                  mov edx, dword ptr [ebp+14]
:00460736 52                      push edx
:00460737 8B4508                  mov eax, dword ptr [ebp+08]
:0046073A 50                      push eax
:0046073B E85DB60000              call 0046BD9D
:00460740 83C414                  add esp, 00000014
:00460743 6A00                    push 00000000
:00460745 B950DF4A00              mov ecx, 004ADF50
:0046074A E84F2EFBFF              call 0041359E
:0046074F 0500180100              add eax, 00011800
:00460754 50                      push eax
:00460755 8B4D14                  mov ecx, dword ptr [ebp+14]
:00460758 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:0046075B 83C101                  add ecx, 00000001
:0046075E 51                      push ecx
:0046075F 6A01                    push 00000001
:00460761 8B550C                  mov edx, dword ptr [ebp+0C]
:00460764 52                      push edx
:00460765 8B4508                  mov eax, dword ptr [ebp+08]
:00460768 50                      push eax
:00460769 E82FB60000              call 0046BD9D
:0046076E 83C414                  add esp, 00000014
:00460771 6A00                    push 00000000
:00460773 B950DF4A00              mov ecx, 004ADF50
:00460778 E8212EFBFF              call 0041359E
:0046077D 05001D0100              add eax, 00011D00
:00460782 50                      push eax
:00460783 8B4D14                  mov ecx, dword ptr [ebp+14]
:00460786 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:00460789 83C101                  add ecx, 00000001
:0046078C 51                      push ecx
:0046078D 6A01                    push 00000001
:0046078F 8B550C                  mov edx, dword ptr [ebp+0C]
:00460792 52                      push edx
:00460793 8B4510                  mov eax, dword ptr [ebp+10]
:00460796 50                      push eax
:00460797 E801B60000              call 0046BD9D
:0046079C 83C414                  add esp, 00000014
:0046079F 6A01                    push 00000001
:004607A1 8B4D14                  mov ecx, dword ptr [ebp+14]
:004607A4 51                      push ecx
:004607A5 8B5510                  mov edx, dword ptr [ebp+10]
:004607A8 52                      push edx
:004607A9 8B450C                  mov eax, dword ptr [ebp+0C]
:004607AC 50                      push eax
:004607AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004607B0 51                      push ecx
:004607B1 E859AF0000              call 0046B70F
:004607B6 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004606E2(U)
|
:004607B9 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004607BB 6A0A                    push 0000000A
:004607BD 6A00                    push 00000000
:004607BF E84CA60000              call 0046AE10
:004607C4 83C40C                  add esp, 0000000C
:004607C7 E88126FBFF              call 00412E4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460608(U)
|
:004607CC 5D                      pop ebp
:004607CD C3                      ret


:004607CE CC                      int 03
:004607CF CC                      int 03

* Referenced by a CALL at Address:
|:0045F407   
|
:004607D0 55                      push ebp
:004607D1 8BEC                    mov ebp, esp
:004607D3 51                      push ecx
:004607D4 894DFC                  mov dword ptr [ebp-04], ecx
:004607D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004607DA C7400401000000          mov [eax+04], 00000001
:004607E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004607E4 E83EF9FFFF              call 00460127
:004607E9 8B45FC                  mov eax, dword ptr [ebp-04]
:004607EC 8BE5                    mov esp, ebp
:004607EE 5D                      pop ebp
:004607EF C3                      ret



* Referenced by a CALL at Address:
|:0045F446   
|
:004607F0 55                      push ebp
:004607F1 8BEC                    mov ebp, esp
:004607F3 51                      push ecx
:004607F4 894DFC                  mov dword ptr [ebp-04], ecx
:004607F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004607FA C70001000000            mov dword ptr [eax], 00000001
:00460800 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460803 C7410400000000          mov [ecx+04], 00000000
:0046080A 8B55FC                  mov edx, dword ptr [ebp-04]
:0046080D C7420800000000          mov [edx+08], 00000000
:00460814 8B45FC                  mov eax, dword ptr [ebp-04]
:00460817 8BE5                    mov esp, ebp
:00460819 5D                      pop ebp
:0046081A C3                      ret


:0046081B CC                      int 03
:0046081C CC                      int 03
:0046081D CC                      int 03
:0046081E CC                      int 03
:0046081F CC                      int 03

* Referenced by a CALL at Addresses:
|:00460215   , :00460229   , :00460554   , :0046057A   
|
:00460820 55                      push ebp
:00460821 8BEC                    mov ebp, esp
:00460823 51                      push ecx
:00460824 894DFC                  mov dword ptr [ebp-04], ecx
:00460827 8B45FC                  mov eax, dword ptr [ebp-04]
:0046082A 83C030                  add eax, 00000030
:0046082D 8BE5                    mov esp, ebp
:0046082F 5D                      pop ebp
:00460830 C3                      ret


:00460831 CC                      int 03
:00460832 CC                      int 03
:00460833 CC                      int 03
:00460834 CC                      int 03
:00460835 CC                      int 03
:00460836 CC                      int 03
:00460837 CC                      int 03
:00460838 CC                      int 03
:00460839 CC                      int 03
:0046083A CC                      int 03
:0046083B CC                      int 03
:0046083C CC                      int 03
:0046083D CC                      int 03
:0046083E CC                      int 03
:0046083F CC                      int 03

* Referenced by a CALL at Addresses:
|:0046015B   , :0046016D   , :00460180   , :00460193   , :004601A6   
|:004601B8   , :004601CB   , :004601DE   
|
:00460840 55                      push ebp
:00460841 8BEC                    mov ebp, esp
:00460843 51                      push ecx
:00460844 894DFC                  mov dword ptr [ebp-04], ecx
:00460847 8B45FC                  mov eax, dword ptr [ebp-04]
:0046084A 83C034                  add eax, 00000034
:0046084D 8BE5                    mov esp, ebp
:0046084F 5D                      pop ebp
:00460850 C3                      ret


:00460851 CC                      int 03
:00460852 CC                      int 03
:00460853 CC                      int 03
:00460854 CC                      int 03
:00460855 CC                      int 03
:00460856 CC                      int 03
:00460857 CC                      int 03
:00460858 CC                      int 03
:00460859 CC                      int 03
:0046085A CC                      int 03
:0046085B CC                      int 03
:0046085C CC                      int 03
:0046085D CC                      int 03
:0046085E CC                      int 03
:0046085F CC                      int 03

* Referenced by a CALL at Addresses:
|:00426778   , :004608DD   
|
:00460860 55                      push ebp
:00460861 8BEC                    mov ebp, esp
:00460863 83EC08                  sub esp, 00000008
:00460866 894DF8                  mov dword ptr [ebp-08], ecx
:00460869 C745FC00000000          mov [ebp-04], 00000000
:00460870 EB09                    jmp 0046087B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004608C6(U)
|
:00460872 8B45FC                  mov eax, dword ptr [ebp-04]
:00460875 83C001                  add eax, 00000001
:00460878 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460870(U)
|
:0046087B 837DFC06                cmp dword ptr [ebp-04], 00000006
:0046087F 7347                    jnb 004608C8
:00460881 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460884 8B55F8                  mov edx, dword ptr [ebp-08]
:00460887 C7048A00000000          mov dword ptr [edx+4*ecx], 00000000
:0046088E 8B45FC                  mov eax, dword ptr [ebp-04]
:00460891 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460894 C744811800000000        mov [ecx+4*eax+18], 00000000
:0046089C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046089F 8B45F8                  mov eax, dword ptr [ebp-08]
:004608A2 C744903000000000        mov [eax+4*edx+30], 00000000
:004608AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004608AD 8B55F8                  mov edx, dword ptr [ebp-08]
:004608B0 C7448A4800000000        mov [edx+4*ecx+48], 00000000
:004608B8 8B45FC                  mov eax, dword ptr [ebp-04]
:004608BB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004608BE C744816000000000        mov [ecx+4*eax+60], 00000000
:004608C6 EBAA                    jmp 00460872

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046087F(C)
|
:004608C8 8B55F8                  mov edx, dword ptr [ebp-08]
:004608CB C6427800                mov [edx+78], 00
:004608CF 8BE5                    mov esp, ebp
:004608D1 5D                      pop ebp
:004608D2 C3                      ret



* Referenced by a CALL at Address:
|:004617B4   
|
:004608D3 55                      push ebp
:004608D4 8BEC                    mov ebp, esp
:004608D6 51                      push ecx
:004608D7 894DFC                  mov dword ptr [ebp-04], ecx
:004608DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004608DD E87EFFFFFF              call 00460860
:004608E2 8B45FC                  mov eax, dword ptr [ebp-04]
:004608E5 C7407C00000000          mov [eax+7C], 00000000
:004608EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004608EF 8BE5                    mov esp, ebp
:004608F1 5D                      pop ebp
:004608F2 C3                      ret



* Referenced by a CALL at Addresses:
|:00460A39   , :00460A74   , :00460A92   
|
:004608F3 55                      push ebp
:004608F4 8BEC                    mov ebp, esp
:004608F6 83EC08                  sub esp, 00000008
:004608F9 894DF8                  mov dword ptr [ebp-08], ecx
:004608FC 8B4510                  mov eax, dword ptr [ebp+10]
:004608FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460902 8D5401F8                lea edx, dword ptr [ecx+eax-08]
:00460906 8955FC                  mov dword ptr [ebp-04], edx
:00460909 8B4514                  mov eax, dword ptr [ebp+14]
:0046090C 8B0C8590E44700          mov ecx, dword ptr [4*eax+0047E490]
:00460913 51                      push ecx
:00460914 B940DF4A00              mov ecx, 004ADF40
:00460919 E8802CFBFF              call 0041359E
:0046091E 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046091F 6A08                    push 00000008

* Possible Reference to String Resource ID=00008: ""
                                  |
:00460921 6A08                    push 00000008
:00460923 8B550C                  mov edx, dword ptr [ebp+0C]
:00460926 52                      push edx
:00460927 8B4508                  mov eax, dword ptr [ebp+08]
:0046092A 50                      push eax
:0046092B E8B7B20000              call 0046BBE7
:00460930 83C414                  add esp, 00000014
:00460933 837D2000                cmp dword ptr [ebp+20], 00000000
:00460937 744A                    je 00460983
:00460939 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046093C 83C108                  add ecx, 00000008
:0046093F 894D08                  mov dword ptr [ebp+08], ecx
:00460942 EB09                    jmp 0046094D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046097F(U)
|
:00460944 8B5508                  mov edx, dword ptr [ebp+08]
:00460947 83C208                  add edx, 00000008
:0046094A 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460942(U)
|
:0046094D 8B4508                  mov eax, dword ptr [ebp+08]
:00460950 3B45FC                  cmp eax, dword ptr [ebp-04]
:00460953 732C                    jnb 00460981
:00460955 8B4D18                  mov ecx, dword ptr [ebp+18]
:00460958 8B148D90E44700          mov edx, dword ptr [4*ecx+0047E490]
:0046095F 52                      push edx
:00460960 B940DF4A00              mov ecx, 004ADF40
:00460965 E8342CFBFF              call 0041359E
:0046096A 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046096B 6A08                    push 00000008

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046096D 6A08                    push 00000008
:0046096F 8B450C                  mov eax, dword ptr [ebp+0C]
:00460972 50                      push eax
:00460973 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460976 51                      push ecx
:00460977 E86BB20000              call 0046BBE7
:0046097C 83C414                  add esp, 00000014
:0046097F EBC3                    jmp 00460944

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460953(C)
|
:00460981 EB06                    jmp 00460989

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460937(C)
|
:00460983 8B55FC                  mov edx, dword ptr [ebp-04]
:00460986 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460981(U)
|
:00460989 8B451C                  mov eax, dword ptr [ebp+1C]
:0046098C 8B0C8590E44700          mov ecx, dword ptr [4*eax+0047E490]
:00460993 51                      push ecx
:00460994 B940DF4A00              mov ecx, 004ADF40
:00460999 E8002CFBFF              call 0041359E
:0046099E 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046099F 6A08                    push 00000008

* Possible Reference to String Resource ID=00008: ""
                                  |
:004609A1 6A08                    push 00000008
:004609A3 8B550C                  mov edx, dword ptr [ebp+0C]
:004609A6 52                      push edx
:004609A7 8B4508                  mov eax, dword ptr [ebp+08]
:004609AA 50                      push eax
:004609AB E837B20000              call 0046BBE7
:004609B0 83C414                  add esp, 00000014
:004609B3 8BE5                    mov esp, ebp
:004609B5 5D                      pop ebp
:004609B6 C21C00                  ret 001C



* Referenced by a CALL at Addresses:
|:00427DC5   , :00457EF7   , :00460BC1   
|
:004609B9 55                      push ebp
:004609BA 8BEC                    mov ebp, esp
:004609BC 83EC08                  sub esp, 00000008
:004609BF 894DF8                  mov dword ptr [ebp-08], ecx
:004609C2 C745FC00000000          mov [ebp-04], 00000000
:004609C9 8B4518                  mov eax, dword ptr [ebp+18]
:004609CC 50                      push eax
:004609CD B9000D4B00              mov ecx, 004B0D00
:004609D2 E8E90D0000              call 004617C0
:004609D7 E85624FBFF              call 00412E32
:004609DC 837D1C00                cmp dword ptr [ebp+1C], 00000000
:004609E0 7529                    jne 00460A0B
:004609E2 68FFFF0000              push 0000FFFF
:004609E7 8B4D14                  mov ecx, dword ptr [ebp+14]
:004609EA 83E910                  sub ecx, 00000010
:004609ED 51                      push ecx
:004609EE 8B5510                  mov edx, dword ptr [ebp+10]
:004609F1 83EA10                  sub edx, 00000010
:004609F4 52                      push edx
:004609F5 8B450C                  mov eax, dword ptr [ebp+0C]
:004609F8 83C008                  add eax, 00000008
:004609FB 50                      push eax
:004609FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004609FF 83C108                  add ecx, 00000008
:00460A02 51                      push ecx
:00460A03 E80E2AFBFF              call 00413416
:00460A08 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004609E0(C)
|
:00460A0B 8B5514                  mov edx, dword ptr [ebp+14]
:00460A0E 8B450C                  mov eax, dword ptr [ebp+0C]
:00460A11 8D4C10F8                lea ecx, dword ptr [eax+edx-08]
:00460A15 894DFC                  mov dword ptr [ebp-04], ecx
:00460A18 6A00                    push 00000000
:00460A1A E8089D0000              call 0046A727
:00460A1F 83C404                  add esp, 00000004
:00460A22 6A01                    push 00000001
:00460A24 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460A26 6A04                    push 00000004
:00460A28 6A00                    push 00000000
:00460A2A 8B5510                  mov edx, dword ptr [ebp+10]
:00460A2D 52                      push edx
:00460A2E 8B450C                  mov eax, dword ptr [ebp+0C]
:00460A31 50                      push eax
:00460A32 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460A35 51                      push ecx
:00460A36 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460A39 E8B5FEFFFF              call 004608F3
:00460A3E 8B550C                  mov edx, dword ptr [ebp+0C]
:00460A41 83C208                  add edx, 00000008
:00460A44 89550C                  mov dword ptr [ebp+0C], edx
:00460A47 EB09                    jmp 00460A52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460A79(U)
|
:00460A49 8B450C                  mov eax, dword ptr [ebp+0C]
:00460A4C 83C008                  add eax, 00000008
:00460A4F 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460A47(U)
|
:00460A52 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00460A55 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00460A58 7321                    jnb 00460A7B
:00460A5A 6A00                    push 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00460A5C 6A07                    push 00000007
:00460A5E 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00460A63 6A05                    push 00000005
:00460A65 8B5510                  mov edx, dword ptr [ebp+10]
:00460A68 52                      push edx
:00460A69 8B450C                  mov eax, dword ptr [ebp+0C]
:00460A6C 50                      push eax
:00460A6D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460A70 51                      push ecx
:00460A71 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460A74 E87AFEFFFF              call 004608F3
:00460A79 EBCE                    jmp 00460A49

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460A58(C)
|
:00460A7B 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00460A7D 6A03                    push 00000003

* Possible Reference to String Resource ID=00006: ""
                                  |
:00460A7F 6A06                    push 00000006

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00460A81 6A02                    push 00000002
:00460A83 8B5510                  mov edx, dword ptr [ebp+10]
:00460A86 52                      push edx
:00460A87 8B450C                  mov eax, dword ptr [ebp+0C]
:00460A8A 50                      push eax
:00460A8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460A8E 51                      push ecx
:00460A8F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460A92 E85CFEFFFF              call 004608F3
:00460A97 E8B123FBFF              call 00412E4D
:00460A9C 8BE5                    mov esp, ebp
:00460A9E 5D                      pop ebp
:00460A9F C21800                  ret 0018



* Referenced by a CALL at Addresses:
|:00427627   , :00460BA3   
|
:00460AA2 55                      push ebp
:00460AA3 8BEC                    mov ebp, esp
:00460AA5 83EC0C                  sub esp, 0000000C
:00460AA8 894DF4                  mov dword ptr [ebp-0C], ecx
:00460AAB 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460AAE 33C9                    xor ecx, ecx
:00460AB0 8A4878                  mov cl, byte ptr [eax+78]
:00460AB3 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460AB6 8B4508                  mov eax, dword ptr [ebp+08]
:00460AB9 89048A                  mov dword ptr [edx+4*ecx], eax
:00460ABC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460ABF 33D2                    xor edx, edx
:00460AC1 8A5178                  mov dl, byte ptr [ecx+78]
:00460AC4 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460AC7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00460ACA 894C9018                mov dword ptr [eax+4*edx+18], ecx
:00460ACE 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460AD1 33C0                    xor eax, eax
:00460AD3 8A4278                  mov al, byte ptr [edx+78]
:00460AD6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460AD9 8B5510                  mov edx, dword ptr [ebp+10]
:00460ADC 89548130                mov dword ptr [ecx+4*eax+30], edx
:00460AE0 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460AE3 33C9                    xor ecx, ecx
:00460AE5 8A4878                  mov cl, byte ptr [eax+78]
:00460AE8 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460AEB 8B4514                  mov eax, dword ptr [ebp+14]
:00460AEE 89448A48                mov dword ptr [edx+4*ecx+48], eax
:00460AF2 8B4D10                  mov ecx, dword ptr [ebp+10]
:00460AF5 0FAF4D14                imul ecx, dword ptr [ebp+14]
:00460AF9 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460AFC 33C0                    xor eax, eax
:00460AFE 8A4278                  mov al, byte ptr [edx+78]
:00460B01 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460B04 894C8260                mov dword ptr [edx+4*eax+60], ecx
:00460B08 C745F800000000          mov [ebp-08], 00000000
:00460B0F C745FC00000000          mov [ebp-04], 00000000
:00460B16 EB09                    jmp 00460B21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B3E(U)
|
:00460B18 8B45F8                  mov eax, dword ptr [ebp-08]
:00460B1B 83C001                  add eax, 00000001
:00460B1E 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B16(U)
|
:00460B21 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460B24 33D2                    xor edx, edx
:00460B26 8A5178                  mov dl, byte ptr [ecx+78]
:00460B29 3955F8                  cmp dword ptr [ebp-08], edx
:00460B2C 7312                    jnb 00460B40
:00460B2E 8B45F8                  mov eax, dword ptr [ebp-08]
:00460B31 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460B34 8B55FC                  mov edx, dword ptr [ebp-04]
:00460B37 03548160                add edx, dword ptr [ecx+4*eax+60]
:00460B3B 8955FC                  mov dword ptr [ebp-04], edx
:00460B3E EBD8                    jmp 00460B18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B2C(C)
|
:00460B40 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460B43 33D2                    xor edx, edx
:00460B45 8A5178                  mov dl, byte ptr [ecx+78]
:00460B48 83FA06                  cmp edx, 00000006
:00460B4B 7D0F                    jge 00460B5C
:00460B4D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460B50 8A4878                  mov cl, byte ptr [eax+78]
:00460B53 80C101                  add cl, 01
:00460B56 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460B59 884A78                  mov byte ptr [edx+78], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B4B(C)
|
:00460B5C 8B45FC                  mov eax, dword ptr [ebp-04]
:00460B5F 50                      push eax
:00460B60 B910414A00              mov ecx, 004A4110
:00460B65 E8342AFBFF              call 0041359E
:00460B6A 50                      push eax
:00460B6B 8B4D14                  mov ecx, dword ptr [ebp+14]
:00460B6E 51                      push ecx
:00460B6F 8B5510                  mov edx, dword ptr [ebp+10]
:00460B72 52                      push edx
:00460B73 8B450C                  mov eax, dword ptr [ebp+0C]
:00460B76 50                      push eax
:00460B77 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460B7A 51                      push ecx
:00460B7B E8F622FBFF              call 00412E76
:00460B80 83C414                  add esp, 00000014
:00460B83 8BE5                    mov esp, ebp
:00460B85 5D                      pop ebp
:00460B86 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004274B9   , :00427DF4   , :00428AF2   , :00428E7E   
|
:00460B89 55                      push ebp
:00460B8A 8BEC                    mov ebp, esp
:00460B8C 51                      push ecx
:00460B8D 894DFC                  mov dword ptr [ebp-04], ecx
:00460B90 8B4514                  mov eax, dword ptr [ebp+14]
:00460B93 50                      push eax
:00460B94 8B4D10                  mov ecx, dword ptr [ebp+10]
:00460B97 51                      push ecx
:00460B98 8B550C                  mov edx, dword ptr [ebp+0C]
:00460B9B 52                      push edx
:00460B9C 8B4508                  mov eax, dword ptr [ebp+08]
:00460B9F 50                      push eax
:00460BA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460BA3 E8FAFEFFFF              call 00460AA2
:00460BA8 6A00                    push 00000000
:00460BAA 8B4D18                  mov ecx, dword ptr [ebp+18]
:00460BAD 51                      push ecx
:00460BAE 8B5514                  mov edx, dword ptr [ebp+14]
:00460BB1 52                      push edx
:00460BB2 8B4510                  mov eax, dword ptr [ebp+10]
:00460BB5 50                      push eax
:00460BB6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00460BB9 51                      push ecx
:00460BBA 8B5508                  mov edx, dword ptr [ebp+08]
:00460BBD 52                      push edx
:00460BBE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460BC1 E8F3FDFFFF              call 004609B9
:00460BC6 8BE5                    mov esp, ebp
:00460BC8 5D                      pop ebp
:00460BC9 C21400                  ret 0014



* Referenced by a CALL at Address:
|:00460BFD   
|
:00460BCC 55                      push ebp
:00460BCD 8BEC                    mov ebp, esp
:00460BCF 51                      push ecx
:00460BD0 894DFC                  mov dword ptr [ebp-04], ecx
:00460BD3 8B45FC                  mov eax, dword ptr [ebp-04]
:00460BD6 33C9                    xor ecx, ecx
:00460BD8 8A4878                  mov cl, byte ptr [eax+78]
:00460BDB 85C9                    test ecx, ecx
:00460BDD 7E0E                    jle 00460BED
:00460BDF 8B55FC                  mov edx, dword ptr [ebp-04]
:00460BE2 8A4278                  mov al, byte ptr [edx+78]
:00460BE5 2C01                    sub al, 01
:00460BE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460BEA 884178                  mov byte ptr [ecx+78], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460BDD(C)
|
:00460BED 8BE5                    mov esp, ebp
:00460BEF 5D                      pop ebp
:00460BF0 C3                      ret



* Referenced by a CALL at Addresses:
|:004279D1   , :00428615   , :00428B63   , :0042903C   
|
:00460BF1 55                      push ebp
:00460BF2 8BEC                    mov ebp, esp
:00460BF4 83EC0C                  sub esp, 0000000C
:00460BF7 894DF4                  mov dword ptr [ebp-0C], ecx
:00460BFA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460BFD E8CAFFFFFF              call 00460BCC
:00460C02 C745F800000000          mov [ebp-08], 00000000
:00460C09 C745FC00000000          mov [ebp-04], 00000000
:00460C10 EB09                    jmp 00460C1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460C38(U)
|
:00460C12 8B45F8                  mov eax, dword ptr [ebp-08]
:00460C15 83C001                  add eax, 00000001
:00460C18 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460C10(U)
|
:00460C1B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460C1E 33D2                    xor edx, edx
:00460C20 8A5178                  mov dl, byte ptr [ecx+78]
:00460C23 3955F8                  cmp dword ptr [ebp-08], edx
:00460C26 7312                    jnb 00460C3A
:00460C28 8B45F8                  mov eax, dword ptr [ebp-08]
:00460C2B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460C2E 8B55FC                  mov edx, dword ptr [ebp-04]
:00460C31 03548160                add edx, dword ptr [ecx+4*eax+60]
:00460C35 8955FC                  mov dword ptr [ebp-04], edx
:00460C38 EBD8                    jmp 00460C12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460C26(C)
|
:00460C3A E8F321FBFF              call 00412E32
:00460C3F 8B45FC                  mov eax, dword ptr [ebp-04]
:00460C42 50                      push eax
:00460C43 B910414A00              mov ecx, 004A4110
:00460C48 E85129FBFF              call 0041359E
:00460C4D 50                      push eax
:00460C4E 6A00                    push 00000000
:00460C50 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460C53 33D2                    xor edx, edx
:00460C55 8A5178                  mov dl, byte ptr [ecx+78]
:00460C58 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460C5B 8B4C9048                mov ecx, dword ptr [eax+4*edx+48]
:00460C5F 51                      push ecx
:00460C60 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460C63 33C0                    xor eax, eax
:00460C65 8A4278                  mov al, byte ptr [edx+78]
:00460C68 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460C6B 8B548130                mov edx, dword ptr [ecx+4*eax+30]
:00460C6F 52                      push edx
:00460C70 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460C73 33C9                    xor ecx, ecx
:00460C75 8A4878                  mov cl, byte ptr [eax+78]
:00460C78 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460C7B 8B448A18                mov eax, dword ptr [edx+4*ecx+18]
:00460C7F 50                      push eax
:00460C80 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460C83 33D2                    xor edx, edx
:00460C85 8A5178                  mov dl, byte ptr [ecx+78]
:00460C88 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460C8B 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00460C8E 51                      push ecx
:00460C8F E80D22FBFF              call 00412EA1
:00460C94 83C418                  add esp, 00000018
:00460C97 E8B121FBFF              call 00412E4D
:00460C9C 8BE5                    mov esp, ebp
:00460C9E 5D                      pop ebp
:00460C9F C3                      ret



* Referenced by a CALL at Address:
|:00427EB7   
|
:00460CA0 55                      push ebp
:00460CA1 8BEC                    mov ebp, esp
:00460CA3 51                      push ecx
:00460CA4 894DFC                  mov dword ptr [ebp-04], ecx
:00460CA7 6A01                    push 00000001
:00460CA9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460CAC E8CD030000              call 0046107E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00460CB1 6A03                    push 00000003
:00460CB3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460CB6 E8C3030000              call 0046107E
:00460CBB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460CBE E855040000              call 00461118
:00460CC3 6A00                    push 00000000
:00460CC5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460CC8 E8B1030000              call 0046107E
:00460CCD 8BE5                    mov esp, ebp
:00460CCF 5D                      pop ebp
:00460CD0 C3                      ret



* Referenced by a CALL at Address:
|:00428366   
|
:00460CD1 55                      push ebp
:00460CD2 8BEC                    mov ebp, esp
:00460CD4 83EC1C                  sub esp, 0000001C
:00460CD7 894DE4                  mov dword ptr [ebp-1C], ecx
:00460CDA B980594800              mov ecx, 00485980
:00460CDF E83EF4FBFF              call 00420122
:00460CE4 B980594800              mov ecx, 00485980
:00460CE9 E898F4FBFF              call 00420186
:00460CEE 8945FC                  mov dword ptr [ebp-04], eax
:00460CF1 B980594800              mov ecx, 00485980
:00460CF6 E8BAF4FBFF              call 004201B5
:00460CFB 8945F8                  mov dword ptr [ebp-08], eax
:00460CFE 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460D01 8B4814                  mov ecx, dword ptr [eax+14]
:00460D04 894DF4                  mov dword ptr [ebp-0C], ecx
:00460D07 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460D0A 8B45FC                  mov eax, dword ptr [ebp-04]
:00460D0D 3B02                    cmp eax, dword ptr [edx]
:00460D0F 0F8CB9020000            jl 00460FCE
:00460D15 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460D18 8B55F8                  mov edx, dword ptr [ebp-08]
:00460D1B 3B5104                  cmp edx, dword ptr [ecx+04]
:00460D1E 0F8CAA020000            jl 00460FCE
:00460D24 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460D27 8B08                    mov ecx, dword ptr [eax]
:00460D29 83C110                  add ecx, 00000010
:00460D2C 394DFC                  cmp dword ptr [ebp-04], ecx
:00460D2F 0F8D99020000            jnl 00460FCE
:00460D35 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460D38 8B4204                  mov eax, dword ptr [edx+04]
:00460D3B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460D3E 034108                  add eax, dword ptr [ecx+08]
:00460D41 3945F8                  cmp dword ptr [ebp-08], eax
:00460D44 0F8D84020000            jnl 00460FCE
:00460D4A B980594800              mov ecx, 00485980
:00460D4F E819F4FBFF              call 0042016D
:00460D54 83F801                  cmp eax, 00000001
:00460D57 0F8571020000            jne 00460FCE
:00460D5D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460D60 8B45F8                  mov eax, dword ptr [ebp-08]
:00460D63 3B4204                  cmp eax, dword ptr [edx+04]
:00460D66 7C48                    jl 00460DB0
:00460D68 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460D6B 8B5104                  mov edx, dword ptr [ecx+04]
:00460D6E 83C210                  add edx, 00000010
:00460D71 3955F8                  cmp dword ptr [ebp-08], edx
:00460D74 7D3A                    jge 00460DB0
:00460D76 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460D79 83781400                cmp dword ptr [eax+14], 00000000
:00460D7D 762C                    jbe 00460DAB
:00460D7F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460D82 83E901                  sub ecx, 00000001
:00460D85 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00460D88 6A02                    push 00000002
:00460D8A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460D8D E8EC020000              call 0046107E
:00460D92 B980594800              mov ecx, 00485980
:00460D97 E812FAFBFF              call 004207AE
:00460D9C E85D5FFCFF              call 00426CFE
:00460DA1 6A01                    push 00000001
:00460DA3 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460DA6 E8D3020000              call 0046107E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460D7D(C)
|
:00460DAB E91E020000              jmp 00460FCE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460D66(C), :00460D74(C)
|
:00460DB0 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460DB3 8B4204                  mov eax, dword ptr [edx+04]
:00460DB6 83C010                  add eax, 00000010
:00460DB9 3945F8                  cmp dword ptr [ebp-08], eax
:00460DBC 7C42                    jl 00460E00
:00460DBE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460DC1 E81A0A0000              call 004617E0
:00460DC6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460DC9 8B5104                  mov edx, dword ptr [ecx+04]
:00460DCC 03D0                    add edx, eax
:00460DCE 3955F8                  cmp dword ptr [ebp-08], edx
:00460DD1 7D2D                    jge 00460E00
:00460DD3 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460DD6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460DD9 8B5014                  mov edx, dword ptr [eax+14]
:00460DDC 3B510C                  cmp edx, dword ptr [ecx+0C]
:00460DDF 7709                    ja 00460DEA
:00460DE1 C745F400000000          mov [ebp-0C], 00000000
:00460DE8 EB0C                    jmp 00460DF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460DDF(C)
|
:00460DEA 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460DED 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460DF0 2B480C                  sub ecx, dword ptr [eax+0C]
:00460DF3 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460DE8(U)
|
:00460DF6 E8035FFCFF              call 00426CFE
:00460DFB E9CE010000              jmp 00460FCE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460DBC(C), :00460DD1(C)
|
:00460E00 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460E03 E8D8090000              call 004617E0
:00460E08 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460E0B 8B4A04                  mov ecx, dword ptr [edx+04]
:00460E0E 03C8                    add ecx, eax
:00460E10 394DF8                  cmp dword ptr [ebp-08], ecx
:00460E13 0F8CE3000000            jl 00460EFC
:00460E19 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460E1C E8BF090000              call 004617E0
:00460E21 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460E24 8B4A04                  mov ecx, dword ptr [edx+04]
:00460E27 8D540110                lea edx, dword ptr [ecx+eax+10]
:00460E2B 3955F8                  cmp dword ptr [ebp-08], edx
:00460E2E 0F8DC8000000            jnl 00460EFC
:00460E34 C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460EF2(U)
|
:00460E3B B980594800              mov ecx, 00485980
:00460E40 E828F3FBFF              call 0042016D
:00460E45 83F801                  cmp eax, 00000001
:00460E48 0F85A9000000            jne 00460EF7
:00460E4E B980594800              mov ecx, 00485980
:00460E53 E8CAF2FBFF              call 00420122
:00460E58 B980594800              mov ecx, 00485980
:00460E5D E824F3FBFF              call 00420186
:00460E62 8945F0                  mov dword ptr [ebp-10], eax
:00460E65 B980594800              mov ecx, 00485980
:00460E6A E846F3FBFF              call 004201B5
:00460E6F 8945EC                  mov dword ptr [ebp-14], eax
:00460E72 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460E75 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00460E78 3B08                    cmp ecx, dword ptr [eax]
:00460E7A 7C30                    jl 00460EAC
:00460E7C 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460E7F 8B4204                  mov eax, dword ptr [edx+04]
:00460E82 83C010                  add eax, 00000010
:00460E85 3945EC                  cmp dword ptr [ebp-14], eax
:00460E88 7C22                    jl 00460EAC
:00460E8A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460E8D 8B11                    mov edx, dword ptr [ecx]
:00460E8F 83C210                  add edx, 00000010
:00460E92 3955F0                  cmp dword ptr [ebp-10], edx
:00460E95 7D15                    jge 00460EAC
:00460E97 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460E9A 8B4804                  mov ecx, dword ptr [eax+04]
:00460E9D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460EA0 8B4208                  mov eax, dword ptr [edx+08]
:00460EA3 8D4C01F0                lea ecx, dword ptr [ecx+eax-10]
:00460EA7 394DEC                  cmp dword ptr [ebp-14], ecx
:00460EAA 7C02                    jl 00460EAE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460E7A(C), :00460E88(C), :00460E95(C)
|
:00460EAC EB49                    jmp 00460EF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460EAA(C)
|
:00460EAE 8B55EC                  mov edx, dword ptr [ebp-14]
:00460EB1 52                      push edx
:00460EB2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460EB5 E856090000              call 00461810
:00460EBA 8945F4                  mov dword ptr [ebp-0C], eax
:00460EBD 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460EC0 8B4814                  mov ecx, dword ptr [eax+14]
:00460EC3 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:00460EC6 7407                    je 00460ECF
:00460EC8 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460EC6(C)
|
:00460ECF 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460ED2 52                      push edx
:00460ED3 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460ED6 E834010000              call 0046100F
:00460EDB 837DE800                cmp dword ptr [ebp-18], 00000000
:00460EDF 7411                    je 00460EF2
:00460EE1 B980594800              mov ecx, 00485980
:00460EE6 E8C3F8FBFF              call 004207AE
:00460EEB C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460EDF(C)
|
:00460EF2 E944FFFFFF              jmp 00460E3B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460E48(C), :00460EAC(U)
|
:00460EF7 E9D2000000              jmp 00460FCE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460E13(C), :00460E2E(C)
|
:00460EFC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460EFF E8DC080000              call 004617E0
:00460F04 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460F07 8B5104                  mov edx, dword ptr [ecx+04]
:00460F0A 8D440210                lea eax, dword ptr [edx+eax+10]
:00460F0E 3945F8                  cmp dword ptr [ebp-08], eax
:00460F11 7C55                    jl 00460F68
:00460F13 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460F16 8B5104                  mov edx, dword ptr [ecx+04]
:00460F19 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460F1C 8B4808                  mov ecx, dword ptr [eax+08]
:00460F1F 8D540AF0                lea edx, dword ptr [edx+ecx-10]
:00460F23 3955F8                  cmp dword ptr [ebp-08], edx
:00460F26 7D40                    jge 00460F68
:00460F28 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460F2B 8B4814                  mov ecx, dword ptr [eax+14]
:00460F2E 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460F31 034A0C                  add ecx, dword ptr [edx+0C]
:00460F34 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460F37 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460F3A 8B4010                  mov eax, dword ptr [eax+10]
:00460F3D 2B420C                  sub eax, dword ptr [edx+0C]
:00460F40 3BC8                    cmp ecx, eax
:00460F42 7211                    jb 00460F55
:00460F44 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460F47 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460F4A 8B4110                  mov eax, dword ptr [ecx+10]
:00460F4D 2B420C                  sub eax, dword ptr [edx+0C]
:00460F50 8945F4                  mov dword ptr [ebp-0C], eax
:00460F53 EB0C                    jmp 00460F61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F42(C)
|
:00460F55 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460F58 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460F5B 03510C                  add edx, dword ptr [ecx+0C]
:00460F5E 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F53(U)
|
:00460F61 E8985DFCFF              call 00426CFE
:00460F66 EB66                    jmp 00460FCE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460F11(C), :00460F26(C)
|
:00460F68 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460F6B 8B4804                  mov ecx, dword ptr [eax+04]
:00460F6E 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460F71 8B4208                  mov eax, dword ptr [edx+08]
:00460F74 8D4C01F0                lea ecx, dword ptr [ecx+eax-10]
:00460F78 394DF8                  cmp dword ptr [ebp-08], ecx
:00460F7B 7C51                    jl 00460FCE
:00460F7D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460F80 8B4204                  mov eax, dword ptr [edx+04]
:00460F83 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460F86 034108                  add eax, dword ptr [ecx+08]
:00460F89 3945F8                  cmp dword ptr [ebp-08], eax
:00460F8C 7D40                    jge 00460FCE
:00460F8E 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460F91 8B45E4                  mov eax, dword ptr [ebp-1C]
:00460F94 8B4A10                  mov ecx, dword ptr [edx+10]
:00460F97 2B480C                  sub ecx, dword ptr [eax+0C]
:00460F9A 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460F9D 394A14                  cmp dword ptr [edx+14], ecx
:00460FA0 732C                    jnb 00460FCE
:00460FA2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460FA5 83C001                  add eax, 00000001
:00460FA8 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460FAB 6A04                    push 00000004
:00460FAD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460FB0 E8C9000000              call 0046107E
:00460FB5 B980594800              mov ecx, 00485980
:00460FBA E8EFF7FBFF              call 004207AE
:00460FBF E83A5DFCFF              call 00426CFE

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00460FC4 6A03                    push 00000003
:00460FC6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460FC9 E8B0000000              call 0046107E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460D0F(C), :00460D1E(C), :00460D2F(C), :00460D44(C), :00460D57(C)
|:00460DAB(U), :00460DFB(U), :00460EF7(U), :00460F66(U), :00460F7B(C)
|:00460F8C(C), :00460FA0(C)
|
:00460FCE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460FD1 51                      push ecx
:00460FD2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460FD5 E835000000              call 0046100F
:00460FDA 8B55E4                  mov edx, dword ptr [ebp-1C]
:00460FDD 8B4214                  mov eax, dword ptr [edx+14]
:00460FE0 8BE5                    mov esp, ebp
:00460FE2 5D                      pop ebp
:00460FE3 C3                      ret


:00460FE4 55                      push ebp
:00460FE5 8BEC                    mov ebp, esp
:00460FE7 51                      push ecx
:00460FE8 894DFC                  mov dword ptr [ebp-04], ecx
:00460FEB 8B45FC                  mov eax, dword ptr [ebp-04]
:00460FEE 8B4810                  mov ecx, dword ptr [eax+10]
:00460FF1 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00460FF4 7413                    je 00461009
:00460FF6 6A00                    push 00000000
:00460FF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460FFB E80F000000              call 0046100F
:00461000 8B55FC                  mov edx, dword ptr [ebp-04]
:00461003 8B4508                  mov eax, dword ptr [ebp+08]
:00461006 894210                  mov dword ptr [edx+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460FF4(C)
|
:00461009 8BE5                    mov esp, ebp
:0046100B 5D                      pop ebp
:0046100C C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00427EAF   , :00460ED6   , :00460FD5   , :00460FFB   
|
:0046100F 55                      push ebp
:00461010 8BEC                    mov ebp, esp
:00461012 51                      push ecx
:00461013 894DFC                  mov dword ptr [ebp-04], ecx
:00461016 8B45FC                  mov eax, dword ptr [ebp-04]
:00461019 8B4814                  mov ecx, dword ptr [eax+14]
:0046101C 3B4D08                  cmp ecx, dword ptr [ebp+08]
:0046101F 7457                    je 00461078
:00461021 6A00                    push 00000000
:00461023 E8FF960000              call 0046A727
:00461028 83C404                  add esp, 00000004
:0046102B E8021EFBFF              call 00412E32
:00461030 6A00                    push 00000000
:00461032 B940DF4A00              mov ecx, 004ADF40
:00461037 E86225FBFF              call 0041359E
:0046103C 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046103D 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046103F 6A10                    push 00000010
:00461041 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461044 E897070000              call 004617E0
:00461049 8B55FC                  mov edx, dword ptr [ebp-04]
:0046104C 8B4A04                  mov ecx, dword ptr [edx+04]
:0046104F 03C8                    add ecx, eax
:00461051 51                      push ecx
:00461052 8B55FC                  mov edx, dword ptr [ebp-04]
:00461055 8B02                    mov eax, dword ptr [edx]
:00461057 50                      push eax
:00461058 E88AAB0000              call 0046BBE7
:0046105D 83C414                  add esp, 00000014
:00461060 E8E81DFBFF              call 00412E4D
:00461065 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461068 8B5508                  mov edx, dword ptr [ebp+08]
:0046106B 895114                  mov dword ptr [ecx+14], edx
:0046106E 6A00                    push 00000000
:00461070 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461073 E806000000              call 0046107E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046101F(C)
|
:00461078 8BE5                    mov esp, ebp
:0046107A 5D                      pop ebp
:0046107B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00460CAC   , :00460CB6   , :00460CC8   , :00460D8D   , :00460DA6   
|:00460FB0   , :00460FC9   , :00461073   
|
:0046107E 55                      push ebp
:0046107F 8BEC                    mov ebp, esp
:00461081 83EC0C                  sub esp, 0000000C
:00461084 894DF8                  mov dword ptr [ebp-08], ecx
:00461087 8B45F8                  mov eax, dword ptr [ebp-08]
:0046108A 8B4804                  mov ecx, dword ptr [eax+04]
:0046108D 894DFC                  mov dword ptr [ebp-04], ecx
:00461090 8A5508                  mov dl, byte ptr [ebp+08]
:00461093 8855F4                  mov byte ptr [ebp-0C], dl
:00461096 807DF400                cmp byte ptr [ebp-0C], 00
:0046109A 740E                    je 004610AA
:0046109C 807DF402                cmp byte ptr [ebp-0C], 02
:004610A0 762A                    jbe 004610CC
:004610A2 807DF404                cmp byte ptr [ebp-0C], 04
:004610A6 7614                    jbe 004610BC
:004610A8 EB22                    jmp 004610CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046109A(C)
|
:004610AA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004610AD E82E070000              call 004617E0
:004610B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004610B5 03C8                    add ecx, eax
:004610B7 894DFC                  mov dword ptr [ebp-04], ecx
:004610BA EB10                    jmp 004610CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004610A6(C)
|
:004610BC 8B55F8                  mov edx, dword ptr [ebp-08]
:004610BF 8B4208                  mov eax, dword ptr [edx+08]
:004610C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004610C5 8D5401F0                lea edx, dword ptr [ecx+eax-10]
:004610C9 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004610A0(C), :004610A8(U), :004610BA(U)
|
:004610CC 6A00                    push 00000000
:004610CE E854960000              call 0046A727
:004610D3 83C404                  add esp, 00000004
:004610D6 E8571DFBFF              call 00412E32
:004610DB 8B4508                  mov eax, dword ptr [ebp+08]
:004610DE 25FF000000              and eax, 000000FF
:004610E3 C1E008                  shl eax, 08
:004610E6 0500010000              add eax, 00000100
:004610EB 50                      push eax
:004610EC B940DF4A00              mov ecx, 004ADF40
:004610F1 E8A824FBFF              call 0041359E
:004610F6 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004610F7 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004610F9 6A10                    push 00000010
:004610FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004610FE 51                      push ecx
:004610FF 8B55F8                  mov edx, dword ptr [ebp-08]
:00461102 8B02                    mov eax, dword ptr [edx]
:00461104 50                      push eax
:00461105 E8DDAA0000              call 0046BBE7
:0046110A 83C414                  add esp, 00000014
:0046110D E83B1DFBFF              call 00412E4D
:00461112 8BE5                    mov esp, ebp
:00461114 5D                      pop ebp
:00461115 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00460CBE   
|
:00461118 55                      push ebp
:00461119 8BEC                    mov ebp, esp
:0046111B 83EC0C                  sub esp, 0000000C
:0046111E 894DF4                  mov dword ptr [ebp-0C], ecx
:00461121 8B45F4                  mov eax, dword ptr [ebp-0C]
:00461124 8B4808                  mov ecx, dword ptr [eax+08]
:00461127 83E920                  sub ecx, 00000020
:0046112A C1E904                  shr ecx, 04
:0046112D 894DFC                  mov dword ptr [ebp-04], ecx
:00461130 6A00                    push 00000000
:00461132 E8F0950000              call 0046A727
:00461137 83C404                  add esp, 00000004
:0046113A E8F31CFBFF              call 00412E32
:0046113F C745F800000000          mov [ebp-08], 00000000
:00461146 EB09                    jmp 00461151

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461189(U)
|
:00461148 8B55F8                  mov edx, dword ptr [ebp-08]
:0046114B 83C201                  add edx, 00000001
:0046114E 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461146(U)
|
:00461151 8B45F8                  mov eax, dword ptr [ebp-08]
:00461154 3B45FC                  cmp eax, dword ptr [ebp-04]
:00461157 7332                    jnb 0046118B
:00461159 6A00                    push 00000000
:0046115B B940DF4A00              mov ecx, 004ADF40
:00461160 E83924FBFF              call 0041359E
:00461165 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00461166 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00461168 6A10                    push 00000010
:0046116A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046116D 8B5104                  mov edx, dword ptr [ecx+04]
:00461170 8B45F8                  mov eax, dword ptr [ebp-08]
:00461173 C1E004                  shl eax, 04
:00461176 8D4C0210                lea ecx, dword ptr [edx+eax+10]
:0046117A 51                      push ecx
:0046117B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046117E 8B02                    mov eax, dword ptr [edx]
:00461180 50                      push eax
:00461181 E861AA0000              call 0046BBE7
:00461186 83C414                  add esp, 00000014
:00461189 EBBD                    jmp 00461148

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461157(C)
|
:0046118B 6A00                    push 00000000
:0046118D B940DF4A00              mov ecx, 004ADF40
:00461192 E80724FBFF              call 0041359E
:00461197 50                      push eax
:00461198 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046119B C1E104                  shl ecx, 04
:0046119E 8B55F4                  mov edx, dword ptr [ebp-0C]
:004611A1 8B4208                  mov eax, dword ptr [edx+08]
:004611A4 2BC1                    sub eax, ecx
:004611A6 83E820                  sub eax, 00000020
:004611A9 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004611AA 6A10                    push 00000010
:004611AC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004611AF 8B5104                  mov edx, dword ptr [ecx+04]
:004611B2 8B45FC                  mov eax, dword ptr [ebp-04]
:004611B5 C1E004                  shl eax, 04
:004611B8 8D4C0210                lea ecx, dword ptr [edx+eax+10]
:004611BC 51                      push ecx
:004611BD 8B55F4                  mov edx, dword ptr [ebp-0C]
:004611C0 8B02                    mov eax, dword ptr [edx]
:004611C2 50                      push eax
:004611C3 E81FAA0000              call 0046BBE7
:004611C8 83C414                  add esp, 00000014
:004611CB E87D1CFBFF              call 00412E4D
:004611D0 8BE5                    mov esp, ebp
:004611D2 5D                      pop ebp
:004611D3 C3                      ret



* Referenced by a CALL at Addresses:
|:004615A6   , :004616E9   
|
:004611D4 55                      push ebp
:004611D5 8BEC                    mov ebp, esp
:004611D7 83EC14                  sub esp, 00000014
:004611DA 894DF0                  mov dword ptr [ebp-10], ecx
:004611DD 8B45F0                  mov eax, dword ptr [ebp-10]
:004611E0 8B4810                  mov ecx, dword ptr [eax+10]
:004611E3 51                      push ecx
:004611E4 E8BA130000              call 004625A3
:004611E9 83C404                  add esp, 00000004
:004611EC 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004611EF 6A04                    push 00000004
:004611F1 B9A8134800              mov ecx, 004813A8
:004611F6 E8F96EFAFF              call 004080F4
:004611FB 8B55F0                  mov edx, dword ptr [ebp-10]
:004611FE 33C0                    xor eax, eax
:00461200 8A4215                  mov al, byte ptr [edx+15]
:00461203 83E040                  and eax, 00000040
:00461206 85C0                    test eax, eax
:00461208 740E                    je 00461218

* Possible Reference to String Resource ID=00014: ""
                                  |
:0046120A 6A0E                    push 0000000E
:0046120C B9A8134800              mov ecx, 004813A8
:00461211 E8426EFAFF              call 00408058
:00461216 EB0C                    jmp 00461224

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461208(C)
|
:00461218 6A4F                    push 0000004F
:0046121A B9A8134800              mov ecx, 004813A8
:0046121F E8346EFAFF              call 00408058

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461216(U)
|
:00461224 6A00                    push 00000000
:00461226 B9A8134800              mov ecx, 004813A8
:0046122B E8606EFAFF              call 00408090
:00461230 6A00                    push 00000000
:00461232 E8F0940000              call 0046A727
:00461237 83C404                  add esp, 00000004
:0046123A E8F31BFBFF              call 00412E32
:0046123F 6800060000              push 00000600
:00461244 B940DF4A00              mov ecx, 004ADF40
:00461249 E85023FBFF              call 0041359E
:0046124E 50                      push eax
:0046124F 6A14                    push 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:00461251 6A08                    push 00000008
:00461253 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00461256 8B5104                  mov edx, dword ptr [ecx+04]
:00461259 52                      push edx
:0046125A 8B45F0                  mov eax, dword ptr [ebp-10]
:0046125D 8B08                    mov ecx, dword ptr [eax]
:0046125F 51                      push ecx
:00461260 E882A90000              call 0046BBE7
:00461265 83C414                  add esp, 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:00461268 C745F408000000          mov [ebp-0C], 00000008
:0046126F EB09                    jmp 0046127A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004612B4(U)
|
:00461271 8B55F4                  mov edx, dword ptr [ebp-0C]
:00461274 83C208                  add edx, 00000008
:00461277 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046126F(U)
|
:0046127A 8B45F0                  mov eax, dword ptr [ebp-10]
:0046127D 8B4808                  mov ecx, dword ptr [eax+08]
:00461280 83E908                  sub ecx, 00000008
:00461283 394DF4                  cmp dword ptr [ebp-0C], ecx
:00461286 732E                    jnb 004612B6
:00461288 68A0060000              push 000006A0
:0046128D B940DF4A00              mov ecx, 004ADF40
:00461292 E80723FBFF              call 0041359E
:00461297 50                      push eax
:00461298 6A14                    push 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046129A 6A08                    push 00000008
:0046129C 8B55F0                  mov edx, dword ptr [ebp-10]
:0046129F 8B4204                  mov eax, dword ptr [edx+04]
:004612A2 50                      push eax
:004612A3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004612A6 8B11                    mov edx, dword ptr [ecx]
:004612A8 0355F4                  add edx, dword ptr [ebp-0C]
:004612AB 52                      push edx
:004612AC E836A90000              call 0046BBE7
:004612B1 83C414                  add esp, 00000014
:004612B4 EBBB                    jmp 00461271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461286(C)
|
:004612B6 6840070000              push 00000740
:004612BB B940DF4A00              mov ecx, 004ADF40
:004612C0 E8D922FBFF              call 0041359E
:004612C5 50                      push eax
:004612C6 6A14                    push 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:004612C8 6A08                    push 00000008
:004612CA 8B45F0                  mov eax, dword ptr [ebp-10]
:004612CD 8B4804                  mov ecx, dword ptr [eax+04]
:004612D0 51                      push ecx
:004612D1 8B55F0                  mov edx, dword ptr [ebp-10]
:004612D4 8B02                    mov eax, dword ptr [edx]
:004612D6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004612D9 8B5108                  mov edx, dword ptr [ecx+08]
:004612DC 8D4410F8                lea eax, dword ptr [eax+edx-08]
:004612E0 50                      push eax
:004612E1 E801A90000              call 0046BBE7
:004612E6 83C414                  add esp, 00000014
:004612E9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004612EC 8B5104                  mov edx, dword ptr [ecx+04]
:004612EF 83C203                  add edx, 00000003
:004612F2 52                      push edx
:004612F3 8B45F0                  mov eax, dword ptr [ebp-10]
:004612F6 8B08                    mov ecx, dword ptr [eax]
:004612F8 C1E903                  shr ecx, 03
:004612FB 83C101                  add ecx, 00000001
:004612FE 51                      push ecx
:004612FF B9A8134800              mov ecx, 004813A8
:00461304 E8A26CFAFF              call 00407FAB
:00461309 8B55F0                  mov edx, dword ptr [ebp-10]
:0046130C 33C0                    xor eax, eax
:0046130E 8A4215                  mov al, byte ptr [edx+15]
:00461311 83E003                  and eax, 00000003
:00461314 8945EC                  mov dword ptr [ebp-14], eax
:00461317 837DEC00                cmp dword ptr [ebp-14], 00000000
:0046131B 7C5B                    jl 00461378
:0046131D 837DEC01                cmp dword ptr [ebp-14], 00000001
:00461321 7E02                    jle 00461325
:00461323 EB53                    jmp 00461378

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461321(C)
|
:00461325 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00461328 83791000                cmp dword ptr [ecx+10], 00000000
:0046132C 744A                    je 00461378
:0046132E 8B55F0                  mov edx, dword ptr [ebp-10]
:00461331 8B4208                  mov eax, dword ptr [edx+08]
:00461334 C1E803                  shr eax, 03
:00461337 2B45F8                  sub eax, dword ptr [ebp-08]
:0046133A D1E8                    shr eax, 1
:0046133C 8945FC                  mov dword ptr [ebp-04], eax
:0046133F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00461342 8B5104                  mov edx, dword ptr [ecx+04]
:00461345 83C203                  add edx, 00000003
:00461348 52                      push edx
:00461349 8B45F0                  mov eax, dword ptr [ebp-10]
:0046134C 8B08                    mov ecx, dword ptr [eax]
:0046134E C1E903                  shr ecx, 03
:00461351 034DFC                  add ecx, dword ptr [ebp-04]
:00461354 51                      push ecx
:00461355 B9A8134800              mov ecx, 004813A8
:0046135A E84C6CFAFF              call 00407FAB
:0046135F 8B55F0                  mov edx, dword ptr [ebp-10]
:00461362 8B4210                  mov eax, dword ptr [edx+10]
:00461365 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00461366 68B0E44700              push 0047E4B0
:0046136B 68A8134800              push 004813A8
:00461370 E80379FAFF              call 00408C78
:00461375 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046131B(C), :00461323(U), :0046132C(C)
|
:00461378 E8D01AFBFF              call 00412E4D
:0046137D 8BE5                    mov esp, ebp
:0046137F 5D                      pop ebp
:00461380 C3                      ret



* Referenced by a CALL at Address:
|:00461745   
|
:00461381 55                      push ebp
:00461382 8BEC                    mov ebp, esp
:00461384 83EC18                  sub esp, 00000018
:00461387 894DEC                  mov dword ptr [ebp-14], ecx
:0046138A B980594800              mov ecx, 00485980
:0046138F E88EEDFBFF              call 00420122
:00461394 B980594800              mov ecx, 00485980
:00461399 E8E8EDFBFF              call 00420186
:0046139E 8945FC                  mov dword ptr [ebp-04], eax
:004613A1 B980594800              mov ecx, 00485980
:004613A6 E80AEEFBFF              call 004201B5
:004613AB 8945F8                  mov dword ptr [ebp-08], eax
:004613AE C645F4FF                mov [ebp-0C], FF
:004613B2 8B45EC                  mov eax, dword ptr [ebp-14]
:004613B5 C6401600                mov [eax+16], 00
:004613B9 B980594800              mov ecx, 00485980
:004613BE E8AAEDFBFF              call 0042016D
:004613C3 83F801                  cmp eax, 00000001
:004613C6 0F8531020000            jne 004615FD
:004613CC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004613CF 33D2                    xor edx, edx
:004613D1 8A5115                  mov dl, byte ptr [ecx+15]
:004613D4 83E240                  and edx, 00000040
:004613D7 85D2                    test edx, edx
:004613D9 0F851E020000            jne 004615FD
:004613DF 8B45EC                  mov eax, dword ptr [ebp-14]
:004613E2 33C9                    xor ecx, ecx
:004613E4 8A4815                  mov cl, byte ptr [eax+15]
:004613E7 81E180000000            and ecx, 00000080
:004613ED 85C9                    test ecx, ecx
:004613EF 7546                    jne 00461437
:004613F1 8B55EC                  mov edx, dword ptr [ebp-14]
:004613F4 8B45FC                  mov eax, dword ptr [ebp-04]
:004613F7 3B02                    cmp eax, dword ptr [edx]
:004613F9 0F8CFE010000            jl 004615FD
:004613FF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00461402 8B55F8                  mov edx, dword ptr [ebp-08]
:00461405 3B5104                  cmp edx, dword ptr [ecx+04]
:00461408 0F8CEF010000            jl 004615FD
:0046140E 8B45EC                  mov eax, dword ptr [ebp-14]
:00461411 8B08                    mov ecx, dword ptr [eax]
:00461413 8B55EC                  mov edx, dword ptr [ebp-14]
:00461416 034A08                  add ecx, dword ptr [edx+08]
:00461419 394DFC                  cmp dword ptr [ebp-04], ecx
:0046141C 0F8DDB010000            jnl 004615FD
:00461422 8B45EC                  mov eax, dword ptr [ebp-14]
:00461425 8B4804                  mov ecx, dword ptr [eax+04]
:00461428 8B55EC                  mov edx, dword ptr [ebp-14]
:0046142B 034A0C                  add ecx, dword ptr [edx+0C]
:0046142E 394DF8                  cmp dword ptr [ebp-08], ecx
:00461431 0F8DC6010000            jnl 004615FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004613EF(C)
|
:00461437 B980594800              mov ecx, 00485980
:0046143C E86DF3FBFF              call 004207AE
:00461441 8B45EC                  mov eax, dword ptr [ebp-14]
:00461444 33C9                    xor ecx, ecx
:00461446 8A4815                  mov cl, byte ptr [eax+15]
:00461449 83E103                  and ecx, 00000003
:0046144C 894DE8                  mov dword ptr [ebp-18], ecx
:0046144F E8DE19FBFF              call 00412E32
:00461454 6A00                    push 00000000
:00461456 B960DF4A00              mov ecx, 004ADF60
:0046145B E83E21FBFF              call 0041359E
:00461460 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00461461 6A10                    push 00000010
:00461463 8B55EC                  mov edx, dword ptr [ebp-14]
:00461466 8B4208                  mov eax, dword ptr [edx+08]
:00461469 83E810                  sub eax, 00000010
:0046146C 50                      push eax
:0046146D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00461470 8B5104                  mov edx, dword ptr [ecx+04]
:00461473 83C203                  add edx, 00000003
:00461476 52                      push edx
:00461477 8B45EC                  mov eax, dword ptr [ebp-14]
:0046147A 8B08                    mov ecx, dword ptr [eax]
:0046147C 83C108                  add ecx, 00000008
:0046147F 51                      push ecx
:00461480 E818A90000              call 0046BD9D
:00461485 83C414                  add esp, 00000014
:00461488 68E0070000              push 000007E0
:0046148D B940DF4A00              mov ecx, 004ADF40
:00461492 E80721FBFF              call 0041359E
:00461497 50                      push eax
:00461498 6A14                    push 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046149A 6A08                    push 00000008
:0046149C 8B55EC                  mov edx, dword ptr [ebp-14]
:0046149F 8B4204                  mov eax, dword ptr [edx+04]
:004614A2 50                      push eax
:004614A3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004614A6 8B11                    mov edx, dword ptr [ecx]
:004614A8 52                      push edx
:004614A9 E839A70000              call 0046BBE7
:004614AE 83C414                  add esp, 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:004614B1 C745F008000000          mov [ebp-10], 00000008
:004614B8 EB09                    jmp 004614C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004614FD(U)
|
:004614BA 8B45F0                  mov eax, dword ptr [ebp-10]
:004614BD 83C008                  add eax, 00000008
:004614C0 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004614B8(U)
|
:004614C3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004614C6 8B5108                  mov edx, dword ptr [ecx+08]
:004614C9 83EA08                  sub edx, 00000008
:004614CC 3955F0                  cmp dword ptr [ebp-10], edx
:004614CF 732E                    jnb 004614FF
:004614D1 6880080000              push 00000880
:004614D6 B940DF4A00              mov ecx, 004ADF40
:004614DB E8BE20FBFF              call 0041359E
:004614E0 50                      push eax
:004614E1 6A14                    push 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:004614E3 6A08                    push 00000008
:004614E5 8B45EC                  mov eax, dword ptr [ebp-14]
:004614E8 8B4804                  mov ecx, dword ptr [eax+04]
:004614EB 51                      push ecx
:004614EC 8B55EC                  mov edx, dword ptr [ebp-14]
:004614EF 8B02                    mov eax, dword ptr [edx]
:004614F1 0345F0                  add eax, dword ptr [ebp-10]
:004614F4 50                      push eax
:004614F5 E8EDA60000              call 0046BBE7
:004614FA 83C414                  add esp, 00000014
:004614FD EBBB                    jmp 004614BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004614CF(C)
|
:004614FF 6820090000              push 00000920
:00461504 B940DF4A00              mov ecx, 004ADF40
:00461509 E89020FBFF              call 0041359E
:0046150E 50                      push eax
:0046150F 6A14                    push 00000014

* Possible Reference to String Resource ID=00008: ""
                                  |
:00461511 6A08                    push 00000008
:00461513 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00461516 8B5104                  mov edx, dword ptr [ecx+04]
:00461519 52                      push edx
:0046151A 8B45EC                  mov eax, dword ptr [ebp-14]
:0046151D 8B08                    mov ecx, dword ptr [eax]
:0046151F 8B55EC                  mov edx, dword ptr [ebp-14]
:00461522 8B4208                  mov eax, dword ptr [edx+08]
:00461525 8D4C01F8                lea ecx, dword ptr [ecx+eax-08]
:00461529 51                      push ecx
:0046152A E8B8A60000              call 0046BBE7
:0046152F 83C414                  add esp, 00000014
:00461532 6A00                    push 00000000
:00461534 B960DF4A00              mov ecx, 004ADF60
:00461539 E86020FBFF              call 0041359E
:0046153E 50                      push eax

* Possible Reference to String Resource ID=00015: ""
                                  |
:0046153F 6A0F                    push 0000000F
:00461541 8B55EC                  mov edx, dword ptr [ebp-14]
:00461544 8B4208                  mov eax, dword ptr [edx+08]
:00461547 83E810                  sub eax, 00000010
:0046154A 50                      push eax
:0046154B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046154E 8B5104                  mov edx, dword ptr [ecx+04]
:00461551 83C204                  add edx, 00000004
:00461554 52                      push edx
:00461555 8B45EC                  mov eax, dword ptr [ebp-14]
:00461558 8B08                    mov ecx, dword ptr [eax]
:0046155A 83C108                  add ecx, 00000008
:0046155D 51                      push ecx
:0046155E E884A60000              call 0046BBE7
:00461563 83C414                  add esp, 00000014
:00461566 E8E218FBFF              call 00412E4D
:0046156B E88E57FCFF              call 00426CFE
:00461570 B980594800              mov ecx, 00485980
:00461575 E8A8EBFBFF              call 00420122
:0046157A B980594800              mov ecx, 00485980
:0046157F E802ECFBFF              call 00420186
:00461584 8945FC                  mov dword ptr [ebp-04], eax
:00461587 B980594800              mov ecx, 00485980
:0046158C E824ECFBFF              call 004201B5
:00461591 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00461594 6A02                    push 00000002
:00461596 E8E055FCFF              call 00426B7B
:0046159B 83C404                  add esp, 00000004
:0046159E E8ED55FCFF              call 00426B90
:004615A3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004615A6 E829FCFFFF              call 004611D4
:004615AB 8B55EC                  mov edx, dword ptr [ebp-14]
:004615AE 8B45FC                  mov eax, dword ptr [ebp-04]
:004615B1 3B02                    cmp eax, dword ptr [edx]
:004615B3 7C37                    jl 004615EC
:004615B5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004615B8 8B55F8                  mov edx, dword ptr [ebp-08]
:004615BB 3B5104                  cmp edx, dword ptr [ecx+04]
:004615BE 7C2C                    jl 004615EC
:004615C0 8B45EC                  mov eax, dword ptr [ebp-14]
:004615C3 8B08                    mov ecx, dword ptr [eax]
:004615C5 8B55EC                  mov edx, dword ptr [ebp-14]
:004615C8 034A08                  add ecx, dword ptr [edx+08]
:004615CB 394DFC                  cmp dword ptr [ebp-04], ecx
:004615CE 7D1C                    jge 004615EC
:004615D0 8B45EC                  mov eax, dword ptr [ebp-14]
:004615D3 8B4804                  mov ecx, dword ptr [eax+04]
:004615D6 8B55EC                  mov edx, dword ptr [ebp-14]
:004615D9 034A0C                  add ecx, dword ptr [edx+0C]
:004615DC 394DF8                  cmp dword ptr [ebp-08], ecx
:004615DF 7D0B                    jge 004615EC
:004615E1 8B45EC                  mov eax, dword ptr [ebp-14]
:004615E4 8A4814                  mov cl, byte ptr [eax+14]
:004615E7 884DF4                  mov byte ptr [ebp-0C], cl
:004615EA EB11                    jmp 004615FD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004615B3(C), :004615BE(C), :004615CE(C), :004615DF(C)
|
:004615EC B980594800              mov ecx, 00485980
:004615F1 E8B8F1FBFF              call 004207AE
:004615F6 8B55EC                  mov edx, dword ptr [ebp-14]
:004615F9 C6421601                mov [edx+16], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004613C6(C), :004613D9(C), :004613F9(C), :00461408(C), :0046141C(C)
|:00461431(C), :004615EA(U)
|
:004615FD 8A45F4                  mov al, byte ptr [ebp-0C]
:00461600 8BE5                    mov esp, ebp
:00461602 5D                      pop ebp
:00461603 C3                      ret



* Referenced by a CALL at Address:
|:00428034   
|
:00461604 55                      push ebp
:00461605 8BEC                    mov ebp, esp
:00461607 83EC14                  sub esp, 00000014
:0046160A 894DF0                  mov dword ptr [ebp-10], ecx
:0046160D 8B45F0                  mov eax, dword ptr [ebp-10]
:00461610 8A4801                  mov cl, byte ptr [eax+01]
:00461613 884DF8                  mov byte ptr [ebp-08], cl
:00461616 C645F400                mov [ebp-0C], 00
:0046161A E81318FBFF              call 00412E32
:0046161F C645FC00                mov [ebp-04], 00
:00461623 EB08                    jmp 0046162D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004616EE(U)
|
:00461625 8A45FC                  mov al, byte ptr [ebp-04]
:00461628 0401                    add al, 01
:0046162A 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461623(U)
|
:0046162D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461630 81E1FF000000            and ecx, 000000FF
:00461636 8B55F0                  mov edx, dword ptr [ebp-10]
:00461639 33C0                    xor eax, eax
:0046163B 8A02                    mov al, byte ptr [edx]
:0046163D 3BC8                    cmp ecx, eax
:0046163F 0F8DAE000000            jnl 004616F3
:00461645 8B4D14                  mov ecx, dword ptr [ebp+14]
:00461648 81E1FF000000            and ecx, 000000FF
:0046164E 85C9                    test ecx, ecx
:00461650 7512                    jne 00461664
:00461652 8B55FC                  mov edx, dword ptr [ebp-04]
:00461655 81E2FF000000            and edx, 000000FF
:0046165B 0FAF5510                imul edx, dword ptr [ebp+10]
:0046165F 8955EC                  mov dword ptr [ebp-14], edx
:00461662 EB07                    jmp 0046166B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461650(C)
|
:00461664 C745EC00000000          mov [ebp-14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461662(U)
|
:0046166B 8B45FC                  mov eax, dword ptr [ebp-04]
:0046166E 25FF000000              and eax, 000000FF
:00461673 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00461676 33D2                    xor edx, edx
:00461678 8A940128010000          mov dl, byte ptr [ecx+eax+00000128]
:0046167F 83EA01                  sub edx, 00000001
:00461682 F7DA                    neg edx
:00461684 1BD2                    sbb edx, edx
:00461686 83E2C0                  and edx, FFFFFFC0
:00461689 83C240                  add edx, 00000040
:0046168C 52                      push edx
:0046168D 8A45FC                  mov al, byte ptr [ebp-04]
:00461690 50                      push eax
:00461691 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461694 81E1FF000000            and ecx, 000000FF
:0046169A 8B55F0                  mov edx, dword ptr [ebp-10]
:0046169D 8B4204                  mov eax, dword ptr [edx+04]
:004616A0 8B0C88                  mov ecx, dword ptr [eax+4*ecx]
:004616A3 51                      push ecx
:004616A4 6A14                    push 00000014
:004616A6 8B55F8                  mov edx, dword ptr [ebp-08]
:004616A9 81E2FF000000            and edx, 000000FF
:004616AF 83C202                  add edx, 00000002
:004616B2 52                      push edx
:004616B3 8B45EC                  mov eax, dword ptr [ebp-14]
:004616B6 03450C                  add eax, dword ptr [ebp+0C]
:004616B9 50                      push eax
:004616BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004616BD 51                      push ecx
:004616BE 8B55FC                  mov edx, dword ptr [ebp-04]
:004616C1 81E2FF000000            and edx, 000000FF
:004616C7 6BD218                  imul edx, 00000018
:004616CA 8B45F0                  mov eax, dword ptr [ebp-10]
:004616CD 8D4C1008                lea ecx, dword ptr [eax+edx+08]
:004616D1 E88A7FFCFF              call 00429660
:004616D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004616D9 81E1FF000000            and ecx, 000000FF
:004616DF 6BC918                  imul ecx, 00000018
:004616E2 8B55F0                  mov edx, dword ptr [ebp-10]
:004616E5 8D4C0A08                lea ecx, dword ptr [edx+ecx+08]
:004616E9 E8E6FAFFFF              call 004611D4
:004616EE E932FFFFFF              jmp 00461625

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046163F(C)
|
:004616F3 E85517FBFF              call 00412E4D
:004616F8 8BE5                    mov esp, ebp
:004616FA 5D                      pop ebp
:004616FB C21000                  ret 0010



* Referenced by a CALL at Address:
|:004280AD   
|
:004616FE 55                      push ebp
:004616FF 8BEC                    mov ebp, esp
:00461701 83EC0C                  sub esp, 0000000C
:00461704 894DF4                  mov dword ptr [ebp-0C], ecx
:00461707 C645FCFF                mov [ebp-04], FF
:0046170B C745F800000000          mov [ebp-08], 00000000
:00461712 EB09                    jmp 0046171D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046174D(U)
|
:00461714 8B45F8                  mov eax, dword ptr [ebp-08]
:00461717 83C001                  add eax, 00000001
:0046171A 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461712(U)
|
:0046171D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00461720 33D2                    xor edx, edx
:00461722 8A11                    mov dl, byte ptr [ecx]
:00461724 3955F8                  cmp dword ptr [ebp-08], edx
:00461727 7326                    jnb 0046174F
:00461729 8B45FC                  mov eax, dword ptr [ebp-04]
:0046172C 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00461731 3DFF000000              cmp eax, 000000FF
:00461736 7517                    jne 0046174F
:00461738 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046173B 6BC918                  imul ecx, 00000018
:0046173E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00461741 8D4C0A08                lea ecx, dword ptr [edx+ecx+08]
:00461745 E837FCFFFF              call 00461381
:0046174A 8845FC                  mov byte ptr [ebp-04], al
:0046174D EBC5                    jmp 00461714

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461727(C), :00461736(C)
|
:0046174F 8A45FC                  mov al, byte ptr [ebp-04]
:00461752 8BE5                    mov esp, ebp
:00461754 5D                      pop ebp
:00461755 C3                      ret



* Referenced by a CALL at Address:
|:004280D4   
|
:00461756 55                      push ebp
:00461757 8BEC                    mov ebp, esp
:00461759 83EC08                  sub esp, 00000008
:0046175C 894DF8                  mov dword ptr [ebp-08], ecx
:0046175F C745FC00000000          mov [ebp-04], 00000000
:00461766 EB09                    jmp 00461771

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046179A(U)
|
:00461768 8B45FC                  mov eax, dword ptr [ebp-04]
:0046176B 83C001                  add eax, 00000001
:0046176E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461766(U)
|
:00461771 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00461774 33D2                    xor edx, edx
:00461776 8A11                    mov dl, byte ptr [ecx]
:00461778 3955FC                  cmp dword ptr [ebp-04], edx
:0046177B 731F                    jnb 0046179C
:0046177D 8B45FC                  mov eax, dword ptr [ebp-04]
:00461780 6BC018                  imul eax, 00000018
:00461783 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00461786 8D4C0108                lea ecx, dword ptr [ecx+eax+08]
:0046178A E8F1000000              call 00461880
:0046178F 85C0                    test eax, eax
:00461791 7407                    je 0046179A
:00461793 B801000000              mov eax, 00000001
:00461798 EB04                    jmp 0046179E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461791(C)
|
:0046179A EBCC                    jmp 00461768

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046177B(C)
|
:0046179C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461798(U)
|
:0046179E 8BE5                    mov esp, ebp
:004617A0 5D                      pop ebp
:004617A1 C3                      ret


:004617A2 55                      push ebp
:004617A3 8BEC                    mov ebp, esp
:004617A5 E802000000              call 004617AC
:004617AA 5D                      pop ebp
:004617AB C3                      ret



* Referenced by a CALL at Address:
|:004617A5   
|
:004617AC 55                      push ebp
:004617AD 8BEC                    mov ebp, esp
:004617AF B9000D4B00              mov ecx, 004B0D00
:004617B4 E81AF1FFFF              call 004608D3
:004617B9 5D                      pop ebp
:004617BA C3                      ret


:004617BB CC                      int 03
:004617BC CC                      int 03
:004617BD CC                      int 03
:004617BE CC                      int 03
:004617BF CC                      int 03

* Referenced by a CALL at Address:
|:004609D2   
|
:004617C0 55                      push ebp
:004617C1 8BEC                    mov ebp, esp
:004617C3 51                      push ecx
:004617C4 894DFC                  mov dword ptr [ebp-04], ecx
:004617C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004617CA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004617CD 89487C                  mov dword ptr [eax+7C], ecx
:004617D0 8BE5                    mov esp, ebp
:004617D2 5D                      pop ebp
:004617D3 C20400                  ret 0004


:004617D6 CC                      int 03
:004617D7 CC                      int 03
:004617D8 CC                      int 03
:004617D9 CC                      int 03
:004617DA CC                      int 03
:004617DB CC                      int 03
:004617DC CC                      int 03
:004617DD CC                      int 03
:004617DE CC                      int 03
:004617DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00460DC1   , :00460E03   , :00460E1C   , :00460EFF   , :00461044   
|:004610AD   
|
:004617E0 55                      push ebp
:004617E1 8BEC                    mov ebp, esp
:004617E3 51                      push ecx
:004617E4 56                      push esi
:004617E5 894DFC                  mov dword ptr [ebp-04], ecx
:004617E8 8B45FC                  mov eax, dword ptr [ebp-04]
:004617EB 8B4008                  mov eax, dword ptr [eax+08]
:004617EE 83E830                  sub eax, 00000030
:004617F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004617F4 0FAF4114                imul eax, dword ptr [ecx+14]
:004617F8 8B55FC                  mov edx, dword ptr [ebp-04]
:004617FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004617FE 8B7210                  mov esi, dword ptr [edx+10]
:00461801 2B710C                  sub esi, dword ptr [ecx+0C]
:00461804 33D2                    xor edx, edx
:00461806 F7F6                    div esi
:00461808 83C010                  add eax, 00000010
:0046180B 5E                      pop esi
:0046180C 8BE5                    mov esp, ebp
:0046180E 5D                      pop ebp
:0046180F C3                      ret



* Referenced by a CALL at Address:
|:00460EB5   
|
:00461810 55                      push ebp
:00461811 8BEC                    mov ebp, esp
:00461813 83EC0C                  sub esp, 0000000C
:00461816 56                      push esi
:00461817 894DF8                  mov dword ptr [ebp-08], ecx
:0046181A 8B45F8                  mov eax, dword ptr [ebp-08]
:0046181D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461820 2B4804                  sub ecx, dword ptr [eax+04]
:00461823 83E910                  sub ecx, 00000010
:00461826 8B55F8                  mov edx, dword ptr [ebp-08]
:00461829 8B45F8                  mov eax, dword ptr [ebp-08]
:0046182C 8B5210                  mov edx, dword ptr [edx+10]
:0046182F 2B500C                  sub edx, dword ptr [eax+0C]
:00461832 0FAFCA                  imul ecx, edx
:00461835 8B45F8                  mov eax, dword ptr [ebp-08]
:00461838 8B7008                  mov esi, dword ptr [eax+08]
:0046183B 83EE30                  sub esi, 00000030
:0046183E 8BC1                    mov eax, ecx
:00461840 33D2                    xor edx, edx
:00461842 F7F6                    div esi
:00461844 8945FC                  mov dword ptr [ebp-04], eax
:00461847 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046184A 8B55F8                  mov edx, dword ptr [ebp-08]
:0046184D 8B4110                  mov eax, dword ptr [ecx+10]
:00461850 2B420C                  sub eax, dword ptr [edx+0C]
:00461853 3945FC                  cmp dword ptr [ebp-04], eax
:00461856 7D08                    jge 00461860
:00461858 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046185B 894DF4                  mov dword ptr [ebp-0C], ecx
:0046185E EB0F                    jmp 0046186F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461856(C)
|
:00461860 8B55F8                  mov edx, dword ptr [ebp-08]
:00461863 8B45F8                  mov eax, dword ptr [ebp-08]
:00461866 8B4A10                  mov ecx, dword ptr [edx+10]
:00461869 2B480C                  sub ecx, dword ptr [eax+0C]
:0046186C 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046185E(U)
|
:0046186F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00461872 8955FC                  mov dword ptr [ebp-04], edx
:00461875 8B45FC                  mov eax, dword ptr [ebp-04]
:00461878 5E                      pop esi
:00461879 8BE5                    mov esp, ebp
:0046187B 5D                      pop ebp
:0046187C C20400                  ret 0004


:0046187F CC                      int 03

* Referenced by a CALL at Address:
|:0046178A   
|
:00461880 55                      push ebp
:00461881 8BEC                    mov ebp, esp
:00461883 51                      push ecx
:00461884 894DFC                  mov dword ptr [ebp-04], ecx
:00461887 8B45FC                  mov eax, dword ptr [ebp-04]
:0046188A 33C9                    xor ecx, ecx
:0046188C 8A4816                  mov cl, byte ptr [eax+16]
:0046188F 8BC1                    mov eax, ecx
:00461891 F7D8                    neg eax
:00461893 1BC0                    sbb eax, eax
:00461895 F7D8                    neg eax
:00461897 8BE5                    mov esp, ebp
:00461899 5D                      pop ebp
:0046189A C3                      ret


:0046189B CC                      int 03
:0046189C CC                      int 03
:0046189D CC                      int 03
:0046189E CC                      int 03
:0046189F CC                      int 03
:004618A0 55                      push ebp
:004618A1 8BEC                    mov ebp, esp
:004618A3 E807000000              call 004618AF
:004618A8 E811000000              call 004618BE
:004618AD 5D                      pop ebp
:004618AE C3                      ret



* Referenced by a CALL at Address:
|:004618A3   
|
:004618AF 55                      push ebp
:004618B0 8BEC                    mov ebp, esp
:004618B2 B9880D4B00              mov ecx, 004B0D88
:004618B7 E824060000              call 00461EE0
:004618BC 5D                      pop ebp
:004618BD C3                      ret



* Referenced by a CALL at Address:
|:004618A8   
|
:004618BE 55                      push ebp
:004618BF 8BEC                    mov ebp, esp
:004618C1 68D0184600              push 004618D0
:004618C6 E8A5BB0000              call 0046D470
:004618CB 83C404                  add esp, 00000004
:004618CE 5D                      pop ebp
:004618CF C3                      ret


:004618D0 55                      push ebp
:004618D1 8BEC                    mov ebp, esp
:004618D3 B9880D4B00              mov ecx, 004B0D88
:004618D8 E841000000              call 0046191E
:004618DD 5D                      pop ebp
:004618DE C3                      ret


:004618DF 55                      push ebp
:004618E0 8BEC                    mov ebp, esp
:004618E2 E807000000              call 004618EE
:004618E7 E811000000              call 004618FD
:004618EC 5D                      pop ebp
:004618ED C3                      ret



* Referenced by a CALL at Address:
|:004618E2   
|
:004618EE 55                      push ebp
:004618EF 8BEC                    mov ebp, esp
:004618F1 B9800D4B00              mov ecx, 004B0D80
:004618F6 E835060000              call 00461F30
:004618FB 5D                      pop ebp
:004618FC C3                      ret



* Referenced by a CALL at Address:
|:004618E7   
|
:004618FD 55                      push ebp
:004618FE 8BEC                    mov ebp, esp
:00461900 680F194600              push 0046190F
:00461905 E866BB0000              call 0046D470
:0046190A 83C404                  add esp, 00000004
:0046190D 5D                      pop ebp
:0046190E C3                      ret


:0046190F 55                      push ebp
:00461910 8BEC                    mov ebp, esp
:00461912 B9800D4B00              mov ecx, 004B0D80
:00461917 E852020000              call 00461B6E
:0046191C 5D                      pop ebp
:0046191D C3                      ret



* Referenced by a CALL at Address:
|:004618D8   
|
:0046191E 55                      push ebp
:0046191F 8BEC                    mov ebp, esp
:00461921 51                      push ecx
:00461922 894DFC                  mov dword ptr [ebp-04], ecx
:00461925 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461928 E841000000              call 0046196E
:0046192D 8BE5                    mov esp, ebp
:0046192F 5D                      pop ebp
:00461930 C3                      ret



* Referenced by a CALL at Address:
|:00426A52   
|
:00461931 55                      push ebp
:00461932 8BEC                    mov ebp, esp
:00461934 51                      push ecx
:00461935 894DFC                  mov dword ptr [ebp-04], ecx

* Reference To: koeicda.CDAudioInitialize, Ord:0008h
                                  |
:00461938 FF15FC874B00            Call dword ptr [004B87FC]
:0046193E 85C0                    test eax, eax
:00461940 7504                    jne 00461946
:00461942 33C0                    xor eax, eax
:00461944 EB24                    jmp 0046196A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461940(C)
|

* Reference To: koeicda.CDAudioGetNumDrives, Ord:0003h
                                  |
:00461946 FF1500884B00            Call dword ptr [004B8800]
:0046194C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046194F 8901                    mov dword ptr [ecx], eax

* Possible StringData Ref from Data Obj ->"EKD4"
                                  |
:00461951 6868644700              push 00476468

* Reference To: koeicda.CDAudioOpen, Ord:000Dh
                                  |
:00461956 FF1504884B00            Call dword ptr [004B8804]
:0046195C 83C404                  add esp, 00000004
:0046195F 8B55FC                  mov edx, dword ptr [ebp-04]
:00461962 894204                  mov dword ptr [edx+04], eax
:00461965 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461944(U)
|
:0046196A 8BE5                    mov esp, ebp
:0046196C 5D                      pop ebp
:0046196D C3                      ret



* Referenced by a CALL at Addresses:
|:004264B0   , :00461928   
|
:0046196E 55                      push ebp
:0046196F 8BEC                    mov ebp, esp
:00461971 51                      push ecx
:00461972 894DFC                  mov dword ptr [ebp-04], ecx
:00461975 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461978 E886000000              call 00461A03

* Reference To: koeicda.CDAudioTerminate, Ord:0013h
                                  |
:0046197D FF15F8874B00            Call dword ptr [004B87F8]
:00461983 8BE5                    mov esp, ebp
:00461985 5D                      pop ebp
:00461986 C3                      ret



* Referenced by a CALL at Address:
|:00461B22   
|
:00461987 55                      push ebp
:00461988 8BEC                    mov ebp, esp
:0046198A 51                      push ecx
:0046198B 894DFC                  mov dword ptr [ebp-04], ecx
:0046198E 8B45FC                  mov eax, dword ptr [ebp-04]
:00461991 8B4804                  mov ecx, dword ptr [eax+04]
:00461994 51                      push ecx

* Reference To: koeicda.CDAudioGetDriveLetter, Ord:0002h
                                  |
:00461995 FF1508884B00            Call dword ptr [004B8808]
:0046199B 83C404                  add esp, 00000004
:0046199E 0FBED0                  movsx edx, al
:004619A1 85D2                    test edx, edx
:004619A3 7504                    jne 004619A9
:004619A5 33C0                    xor eax, eax
:004619A7 EB54                    jmp 004619FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619A3(C)
|
:004619A9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004619AC E8AF000000              call 00461A60
:004619B1 85C0                    test eax, eax
:004619B3 741A                    je 004619CF
:004619B5 8B45FC                  mov eax, dword ptr [ebp-04]
:004619B8 8B480C                  mov ecx, dword ptr [eax+0C]
:004619BB 3B4D08                  cmp ecx, dword ptr [ebp+08]
:004619BE 7507                    jne 004619C7
:004619C0 B801000000              mov eax, 00000001
:004619C5 EB36                    jmp 004619FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619BE(C)
|
:004619C7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004619CA E834000000              call 00461A03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619B3(C)
|
:004619CF 8B550C                  mov edx, dword ptr [ebp+0C]
:004619D2 52                      push edx
:004619D3 8B4508                  mov eax, dword ptr [ebp+08]
:004619D6 50                      push eax
:004619D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004619DA 8B5104                  mov edx, dword ptr [ecx+04]
:004619DD 52                      push edx

* Reference To: koeicda.CDAudioPlayTrack, Ord:0010h
                                  |
:004619DE FF15F4874B00            Call dword ptr [004B87F4]
:004619E4 83C40C                  add esp, 0000000C
:004619E7 85C0                    test eax, eax
:004619E9 7504                    jne 004619EF
:004619EB 33C0                    xor eax, eax
:004619ED EB0E                    jmp 004619FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619E9(C)
|
:004619EF 8B45FC                  mov eax, dword ptr [ebp-04]
:004619F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004619F5 89480C                  mov dword ptr [eax+0C], ecx
:004619F8 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004619A7(U), :004619C5(U), :004619ED(U)
|
:004619FD 8BE5                    mov esp, ebp
:004619FF 5D                      pop ebp
:00461A00 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00461978   , :004619CA   , :00461B52   
|
:00461A03 55                      push ebp
:00461A04 8BEC                    mov ebp, esp
:00461A06 51                      push ecx
:00461A07 894DFC                  mov dword ptr [ebp-04], ecx
:00461A0A 6A00                    push 00000000
:00461A0C 8B45FC                  mov eax, dword ptr [ebp-04]
:00461A0F 8B4804                  mov ecx, dword ptr [eax+04]
:00461A12 51                      push ecx

* Reference To: koeicda.CDAudioStop, Ord:0012h
                                  |
:00461A13 FF15F0874B00            Call dword ptr [004B87F0]
:00461A19 83C408                  add esp, 00000008
:00461A1C 8B55FC                  mov edx, dword ptr [ebp-04]
:00461A1F C7420C00000000          mov [edx+0C], 00000000
:00461A26 8BE5                    mov esp, ebp
:00461A28 5D                      pop ebp
:00461A29 C3                      ret



* Referenced by a CALL at Address:
|:00469032   
|
:00461A2A 55                      push ebp
:00461A2B 8BEC                    mov ebp, esp
:00461A2D 51                      push ecx
:00461A2E 894DFC                  mov dword ptr [ebp-04], ecx
:00461A31 8B45FC                  mov eax, dword ptr [ebp-04]
:00461A34 8B4804                  mov ecx, dword ptr [eax+04]
:00461A37 51                      push ecx

* Reference To: koeicda.CDAudioPause, Ord:000Eh
                                  |
:00461A38 FF150C884B00            Call dword ptr [004B880C]
:00461A3E 83C404                  add esp, 00000004
:00461A41 8BE5                    mov esp, ebp
:00461A43 5D                      pop ebp
:00461A44 C3                      ret



* Referenced by a CALL at Address:
|:004690F5   
|
:00461A45 55                      push ebp
:00461A46 8BEC                    mov ebp, esp
:00461A48 51                      push ecx
:00461A49 894DFC                  mov dword ptr [ebp-04], ecx
:00461A4C 8B45FC                  mov eax, dword ptr [ebp-04]
:00461A4F 8B4804                  mov ecx, dword ptr [eax+04]
:00461A52 51                      push ecx

* Reference To: koeicda.CDAudioResume, Ord:0011h
                                  |
:00461A53 FF15E0874B00            Call dword ptr [004B87E0]
:00461A59 83C404                  add esp, 00000004
:00461A5C 8BE5                    mov esp, ebp
:00461A5E 5D                      pop ebp
:00461A5F C3                      ret



* Referenced by a CALL at Addresses:
|:004619AC   , :00461B65   
|
:00461A60 55                      push ebp
:00461A61 8BEC                    mov ebp, esp
:00461A63 51                      push ecx
:00461A64 894DFC                  mov dword ptr [ebp-04], ecx
:00461A67 8B45FC                  mov eax, dword ptr [ebp-04]
:00461A6A 8B4804                  mov ecx, dword ptr [eax+04]
:00461A6D 51                      push ecx

* Reference To: koeicda.CDAudioIsPlaying, Ord:000Ah
                                  |
:00461A6E FF15E4874B00            Call dword ptr [004B87E4]
:00461A74 83C404                  add esp, 00000004
:00461A77 8BE5                    mov esp, ebp
:00461A79 5D                      pop ebp
:00461A7A C3                      ret


:00461A7B 55                      push ebp
:00461A7C 8BEC                    mov ebp, esp
:00461A7E 51                      push ecx
:00461A7F 894DFC                  mov dword ptr [ebp-04], ecx
:00461A82 8B45FC                  mov eax, dword ptr [ebp-04]
:00461A85 83C01F                  add eax, 0000001F
:00461A88 50                      push eax
:00461A89 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461A8C 83C11E                  add ecx, 0000001E
:00461A8F 51                      push ecx
:00461A90 8B55FC                  mov edx, dword ptr [ebp-04]
:00461A93 83C21D                  add edx, 0000001D
:00461A96 52                      push edx
:00461A97 8B45FC                  mov eax, dword ptr [ebp-04]
:00461A9A 83C01C                  add eax, 0000001C
:00461A9D 50                      push eax
:00461A9E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461AA1 8B5104                  mov edx, dword ptr [ecx+04]
:00461AA4 52                      push edx

* Reference To: koeicda.CDAudioGetPlayingPos, Ord:0005h
                                  |
:00461AA5 FF15E8874B00            Call dword ptr [004B87E8]
:00461AAB 83C414                  add esp, 00000014
:00461AAE 85C0                    test eax, eax
:00461AB0 7505                    jne 00461AB7
:00461AB2 83C8FF                  or eax, FFFFFFFF
:00461AB5 EB0A                    jmp 00461AC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461AB0(C)
|
:00461AB7 8B45FC                  mov eax, dword ptr [ebp-04]
:00461ABA 33C9                    xor ecx, ecx
:00461ABC 8A481C                  mov cl, byte ptr [eax+1C]
:00461ABF 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461AB5(U)
|
:00461AC1 8BE5                    mov esp, ebp
:00461AC3 5D                      pop ebp
:00461AC4 C3                      ret


:00461AC5 55                      push ebp
:00461AC6 8BEC                    mov ebp, esp
:00461AC8 51                      push ecx
:00461AC9 894DFC                  mov dword ptr [ebp-04], ecx
:00461ACC 8B45FC                  mov eax, dword ptr [ebp-04]
:00461ACF 8B4804                  mov ecx, dword ptr [eax+04]
:00461AD2 51                      push ecx

* Reference To: koeicda.CDAudioGetNumTracks, Ord:0004h
                                  |
:00461AD3 FF15EC874B00            Call dword ptr [004B87EC]
:00461AD9 83C404                  add esp, 00000004
:00461ADC 8BE5                    mov esp, ebp
:00461ADE 5D                      pop ebp
:00461ADF C3                      ret



* Referenced by a CALL at Address:
|:00461B3D   
|
:00461AE0 55                      push ebp
:00461AE1 8BEC                    mov ebp, esp
:00461AE3 51                      push ecx
:00461AE4 894DFC                  mov dword ptr [ebp-04], ecx
:00461AE7 837D080C                cmp dword ptr [ebp+08], 0000000C
:00461AEB 7202                    jb 00461AEF
:00461AED EB38                    jmp 00461B27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461AEB(C)
|
:00461AEF 8B4508                  mov eax, dword ptr [ebp+08]
:00461AF2 25FF000000              and eax, 000000FF
:00461AF7 50                      push eax
:00461AF8 B9C8E24A00              mov ecx, 004AE2C8
:00461AFD E8DE80FDFF              call 00439BE0
:00461B02 B9C8E24A00              mov ecx, 004AE2C8
:00461B07 E8C4D6FAFF              call 0040F1D0
:00461B0C 2500200000              and eax, 00002000
:00461B11 85C0                    test eax, eax
:00461B13 7502                    jne 00461B17
:00461B15 EB10                    jmp 00461B27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461B13(C)
|
:00461B17 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00461B1A 51                      push ecx
:00461B1B 8B5508                  mov edx, dword ptr [ebp+08]
:00461B1E 52                      push edx
:00461B1F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461B22 E860FEFFFF              call 00461987

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461AED(U), :00461B15(U)
|
:00461B27 8BE5                    mov esp, ebp
:00461B29 5D                      pop ebp
:00461B2A C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040DCFD   , :00411286   , :00412187   , :0042936D   , :00458011   
|:00458E88   , :004688A1   
|
:00461B2D 55                      push ebp
:00461B2E 8BEC                    mov ebp, esp
:00461B30 51                      push ecx
:00461B31 894DFC                  mov dword ptr [ebp-04], ecx
:00461B34 6A01                    push 00000001
:00461B36 8B4508                  mov eax, dword ptr [ebp+08]
:00461B39 50                      push eax
:00461B3A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461B3D E89EFFFFFF              call 00461AE0
:00461B42 8BE5                    mov esp, ebp
:00461B44 5D                      pop ebp
:00461B45 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040DD18   , :00411160   , :0041213B   , :0042626C   , :004264A6   
|:00426504   , :004267E0   , :00429315   , :00454F75   , :0046884A   
|
:00461B48 55                      push ebp
:00461B49 8BEC                    mov ebp, esp
:00461B4B 51                      push ecx
:00461B4C 894DFC                  mov dword ptr [ebp-04], ecx
:00461B4F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461B52 E8ACFEFFFF              call 00461A03
:00461B57 8BE5                    mov esp, ebp
:00461B59 5D                      pop ebp
:00461B5A C3                      ret


:00461B5B 55                      push ebp
:00461B5C 8BEC                    mov ebp, esp
:00461B5E 51                      push ecx
:00461B5F 894DFC                  mov dword ptr [ebp-04], ecx
:00461B62 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461B65 E8F6FEFFFF              call 00461A60
:00461B6A 8BE5                    mov esp, ebp
:00461B6C 5D                      pop ebp
:00461B6D C3                      ret



* Referenced by a CALL at Address:
|:00461917   
|
:00461B6E 55                      push ebp
:00461B6F 8BEC                    mov ebp, esp
:00461B71 51                      push ecx
:00461B72 894DFC                  mov dword ptr [ebp-04], ecx
:00461B75 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461B78 E804000000              call 00461B81
:00461B7D 8BE5                    mov esp, ebp
:00461B7F 5D                      pop ebp
:00461B80 C3                      ret



* Referenced by a CALL at Addresses:
|:0041117F   , :004111D6   , :004120F3   , :004264BA   , :004264FA   
|:0042931F   , :00439A05   , :0043A4C7   , :0043C4E3   , :00454F7F   
|:0045534B   , :00457FF7   , :00461B78   , :00461DAD   , :00461DCD   
|:00461E4F   , :00461E8B   
|
:00461B81 55                      push ebp
:00461B82 8BEC                    mov ebp, esp
:00461B84 51                      push ecx
:00461B85 894DFC                  mov dword ptr [ebp-04], ecx
:00461B88 6A00                    push 00000000
:00461B8A 6A00                    push 00000000

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00461B8C FF15D8874B00            Call dword ptr [004B87D8]
:00461B92 8B45FC                  mov eax, dword ptr [ebp-04]
:00461B95 C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:00461B9B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461B9E C7410400000000          mov [ecx+04], 00000000
:00461BA5 8BE5                    mov esp, ebp
:00461BA7 5D                      pop ebp
:00461BA8 C3                      ret



* Referenced by a CALL at Addresses:
|:00402CD8   , :00402EAD   , :00402FC5   , :0042C6C0   , :0042C9AC   
|:0042DD95   , :0042F5BF   , :0042F61A   , :0042F66C   , :004302D1   
|:00430331   , :0043038A   , :004303CB   , :0043040C   , :0043044D   
|:00430490   , :004304CF   , :00430512   , :0043056D   , :004305A3   
|:00430603   , :0043065C   , :0043069F   , :004306F8   , :004307A4   
|:004314C9   , :00431521   , :00431910   , :00431D70   , :00431E0A   
|:00431E94   , :00431EB4   , :00432008   , :0043203D   , :004322EB   
|:0043265B   , :00432AC8   , :00432B02   , :00432F3B   , :00432F6E   
|:00432F9E   , :00432FCE   , :00433295   , :004332CC   , :0043330C   
|:004334A5   , :00433E4E   , :00434A03   , :00434BBA   , :00434D77   
|:00434FCE   , :00435235   , :004353D6   , :004353F3   , :0043550B   
|:004355CF   , :004356E3   , :00435ED8   , :00435F15   , :0043605D   
|:004361D1   , :00436331   , :0043668C   , :0043679E   , :004368F7   
|:00436A08   , :00436B86   , :00436BC4   , :00436CAB   , :00436E7C   
|:00436F7D   , :0043700B   , :00437269   , :004372E9   , :0043737F   
|:004373BA   , :004377D2   , :00437F9F   , :004382E6   , :004386AE   
|:00438708   , :00438C37   , :004399D2   , :00439A1A   , :0043A079   
|:0043A3E5   , :0043A472   , :0043A480   , :0043A48E   , :0043A49C   
|:0043A4AA   , :0043A4B8   , :0043A4E9   , :0043A4F7   , :0043A505   
|:0043A513   , :0043A521   , :0043A52F   , :0043A53D   , :0043D0BC   
|:0043D106   , :0043FDEC   , :00441CCB   , :00441CFC   , :00441D1F   
|:00441D43   , :00441D66   , :00441D86   , :00441DB0   , :00441DD0   
|:004426D3   , :00445F63   , :00445F9F   , :00446000   , :0044603C   
|:00446066   , :004460E3   , :00446655   , :00448BB8   , :0044D8A1   
|:0044D915   , :0044DC94   , :0044DD61   , :0044DE33   , :00458A46   
|:00458B83   , :004593CC   , :0045DA42   , :00461E9F   , :004687CC   
|
:00461BA9 55                      push ebp
:00461BAA 8BEC                    mov ebp, esp
:00461BAC 51                      push ecx
:00461BAD 894DFC                  mov dword ptr [ebp-04], ecx
:00461BB0 6A01                    push 00000001
:00461BB2 8B4508                  mov eax, dword ptr [ebp+08]
:00461BB5 50                      push eax
:00461BB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461BB9 E8AF000000              call 00461C6D
:00461BBE 8BE5                    mov esp, ebp
:00461BC0 5D                      pop ebp
:00461BC1 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0041119C   , :004111E2   , :0041211E   , :00454F8B   , :00461C5D   
|:00461E5B   
|
:00461BC4 55                      push ebp
:00461BC5 8BEC                    mov ebp, esp
:00461BC7 83EC08                  sub esp, 00000008
:00461BCA 894DF8                  mov dword ptr [ebp-08], ecx
:00461BCD 6A00                    push 00000000
:00461BCF 8B4508                  mov eax, dword ptr [ebp+08]
:00461BD2 50                      push eax
:00461BD3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00461BD6 E892000000              call 00461C6D
:00461BDB 8945FC                  mov dword ptr [ebp-04], eax
:00461BDE 837DFC00                cmp dword ptr [ebp-04], 00000000
:00461BE2 740A                    je 00461BEE
:00461BE4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00461BE7 C7410401000000          mov [ecx+04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461BE2(C)
|
:00461BEE 8B45FC                  mov eax, dword ptr [ebp-04]
:00461BF1 8BE5                    mov esp, ebp
:00461BF3 5D                      pop ebp
:00461BF4 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00461EB1   
|
:00461BF7 55                      push ebp
:00461BF8 8BEC                    mov ebp, esp
:00461BFA 51                      push ecx
:00461BFB 894DFC                  mov dword ptr [ebp-04], ecx
:00461BFE 8B450C                  mov eax, dword ptr [ebp+0C]
:00461C01 50                      push eax
:00461C02 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461C05 51                      push ecx
:00461C06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461C09 E85F000000              call 00461C6D
:00461C0E 8BE5                    mov esp, ebp
:00461C10 5D                      pop ebp
:00461C11 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0046903C   
|
:00461C14 55                      push ebp
:00461C15 8BEC                    mov ebp, esp
:00461C17 51                      push ecx
:00461C18 894DFC                  mov dword ptr [ebp-04], ecx
:00461C1B 8B45FC                  mov eax, dword ptr [ebp-04]
:00461C1E 83780400                cmp dword ptr [eax+04], 00000000
:00461C22 740A                    je 00461C2E
:00461C24 6A00                    push 00000000
:00461C26 6A00                    push 00000000

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00461C28 FF15D8874B00            Call dword ptr [004B87D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C22(C)
|
:00461C2E 8BE5                    mov esp, ebp
:00461C30 5D                      pop ebp
:00461C31 C3                      ret



* Referenced by a CALL at Address:
|:004690EB   
|
:00461C32 55                      push ebp
:00461C33 8BEC                    mov ebp, esp
:00461C35 51                      push ecx
:00461C36 894DFC                  mov dword ptr [ebp-04], ecx
:00461C39 8B45FC                  mov eax, dword ptr [ebp-04]
:00461C3C 83780400                cmp dword ptr [eax+04], 00000000
:00461C40 7422                    je 00461C64
:00461C42 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461C45 8339FF                  cmp dword ptr [ecx], FFFFFFFF
:00461C48 741A                    je 00461C64
:00461C4A 8B55FC                  mov edx, dword ptr [ebp-04]
:00461C4D C7420400000000          mov [edx+04], 00000000
:00461C54 8B45FC                  mov eax, dword ptr [ebp-04]
:00461C57 8B08                    mov ecx, dword ptr [eax]
:00461C59 51                      push ecx
:00461C5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461C5D E862FFFFFF              call 00461BC4
:00461C62 EB05                    jmp 00461C69

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461C40(C), :00461C48(C)
|
:00461C64 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C62(U)
|
:00461C69 8BE5                    mov esp, ebp
:00461C6B 5D                      pop ebp
:00461C6C C3                      ret



* Referenced by a CALL at Addresses:
|:00461BB9   , :00461BD6   , :00461C09   
|
:00461C6D 55                      push ebp
:00461C6E 8BEC                    mov ebp, esp
:00461C70 83EC38                  sub esp, 00000038
:00461C73 894DC8                  mov dword ptr [ebp-38], ecx
:00461C76 B9C8E24A00              mov ecx, 004AE2C8
:00461C7B E850D5FAFF              call 0040F1D0
:00461C80 2500100000              and eax, 00001000
:00461C85 85C0                    test eax, eax
:00461C87 7507                    jne 00461C90
:00461C89 33C0                    xor eax, eax
:00461C8B E9A9010000              jmp 00461E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C87(C)
|
:00461C90 837D0868                cmp dword ptr [ebp+08], 00000068
:00461C94 7C07                    jl 00461C9D
:00461C96 33C0                    xor eax, eax
:00461C98 E99C010000              jmp 00461E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C94(C)
|
:00461C9D 8B45C8                  mov eax, dword ptr [ebp-38]
:00461CA0 83780400                cmp dword ptr [eax+04], 00000000
:00461CA4 7407                    je 00461CAD
:00461CA6 33C0                    xor eax, eax
:00461CA8 E98C010000              jmp 00461E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461CA4(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00461CAD C745D403000000          mov [ebp-2C], 00000003
:00461CB4 C745D000000000          mov [ebp-30], 00000000
:00461CBB 8B0DB8E44700            mov ecx, dword ptr [0047E4B8]
:00461CC1 894DEC                  mov dword ptr [ebp-14], ecx
:00461CC4 8B15BCE44700            mov edx, dword ptr [0047E4BC]
:00461CCA 8955F0                  mov dword ptr [ebp-10], edx
:00461CCD A0C0E44700              mov al, byte ptr [0047E4C0]
:00461CD2 8845F4                  mov byte ptr [ebp-0C], al
:00461CD5 33C9                    xor ecx, ecx
:00461CD7 894DF5                  mov dword ptr [ebp-0B], ecx
:00461CDA 894DF9                  mov dword ptr [ebp-07], ecx
:00461CDD 66894DFD                mov word ptr [ebp-03], cx
:00461CE1 884DFF                  mov byte ptr [ebp-01], cl
:00461CE4 8B15C4E44700            mov edx, dword ptr [0047E4C4]
:00461CEA 8955D8                  mov dword ptr [ebp-28], edx
:00461CED A1C8E44700              mov eax, dword ptr [0047E4C8]
:00461CF2 8945DC                  mov dword ptr [ebp-24], eax
:00461CF5 668B0DCCE44700          mov cx, word ptr [0047E4CC]
:00461CFC 66894DE0                mov word ptr [ebp-20], cx
:00461D00 33D2                    xor edx, edx
:00461D02 8955E2                  mov dword ptr [ebp-1E], edx
:00461D05 8955E6                  mov dword ptr [ebp-1A], edx
:00461D08 668955EA                mov word ptr [ebp-16], dx
:00461D0C 837D0864                cmp dword ptr [ebp+08], 00000064
:00461D10 7C3C                    jl 00461D4E
:00461D12 8B4508                  mov eax, dword ptr [ebp+08]
:00461D15 83E864                  sub eax, 00000064
:00461D18 894508                  mov dword ptr [ebp+08], eax
:00461D1B 8B4508                  mov eax, dword ptr [ebp+08]
:00461D1E 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00461D1F B90A000000              mov ecx, 0000000A
:00461D24 F7F9                    idiv ecx
:00461D26 83C030                  add eax, 00000030
:00461D29 8845DB                  mov byte ptr [ebp-25], al
:00461D2C 8B4508                  mov eax, dword ptr [ebp+08]
:00461D2F 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00461D30 B90A000000              mov ecx, 0000000A
:00461D35 F7F9                    idiv ecx
:00461D37 83C230                  add edx, 00000030
:00461D3A 8855DC                  mov byte ptr [ebp-24], dl
:00461D3D 8D55D8                  lea edx, dword ptr [ebp-28]
:00461D40 52                      push edx
:00461D41 E86EE4FAFF              call 004101B4
:00461D46 83C404                  add esp, 00000004
:00461D49 8945CC                  mov dword ptr [ebp-34], eax
:00461D4C EB31                    jmp 00461D7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461D10(C)
|
:00461D4E 8B4508                  mov eax, dword ptr [ebp+08]
:00461D51 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00461D52 B90A000000              mov ecx, 0000000A
:00461D57 F7F9                    idiv ecx
:00461D59 83C030                  add eax, 00000030
:00461D5C 8845EE                  mov byte ptr [ebp-12], al
:00461D5F 8B4508                  mov eax, dword ptr [ebp+08]
:00461D62 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00461D63 B90A000000              mov ecx, 0000000A
:00461D68 F7F9                    idiv ecx
:00461D6A 83C230                  add edx, 00000030
:00461D6D 8855EF                  mov byte ptr [ebp-11], dl
:00461D70 8D55EC                  lea edx, dword ptr [ebp-14]
:00461D73 52                      push edx
:00461D74 E83BE4FAFF              call 004101B4
:00461D79 83C404                  add esp, 00000004
:00461D7C 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461D4C(U)
|
:00461D7F 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00461D83 7545                    jne 00461DCA
:00461D85 8B45C8                  mov eax, dword ptr [ebp-38]
:00461D88 8B08                    mov ecx, dword ptr [eax]
:00461D8A 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00461D8D 751B                    jne 00461DAA
:00461D8F 8B55D4                  mov edx, dword ptr [ebp-2C]
:00461D92 83CA10                  or edx, 00000010
:00461D95 52                      push edx
:00461D96 8B45CC                  mov eax, dword ptr [ebp-34]
:00461D99 50                      push eax

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00461D9A FF15D8874B00            Call dword ptr [004B87D8]
:00461DA0 B801000000              mov eax, 00000001
:00461DA5 E98F000000              jmp 00461E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461D8D(C)
|
:00461DAA 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00461DAD E8CFFDFFFF              call 00461B81
:00461DB2 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00461DB5 8B5508                  mov edx, dword ptr [ebp+08]
:00461DB8 8911                    mov dword ptr [ecx], edx
:00461DBA 8B45D4                  mov eax, dword ptr [ebp-2C]
:00461DBD 50                      push eax
:00461DBE 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00461DC1 51                      push ecx

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00461DC2 FF15D8874B00            Call dword ptr [004B87D8]
:00461DC8 EB6F                    jmp 00461E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461D83(C)
|
:00461DCA 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00461DCD E8AFFDFFFF              call 00461B81
:00461DD2 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00461DD6 751B                    jne 00461DF3
:00461DD8 8B55C8                  mov edx, dword ptr [ebp-38]
:00461DDB 8B4508                  mov eax, dword ptr [ebp+08]
:00461DDE 8902                    mov dword ptr [edx], eax
:00461DE0 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00461DE3 83C908                  or ecx, 00000008
:00461DE6 51                      push ecx
:00461DE7 8B55CC                  mov edx, dword ptr [ebp-34]
:00461DEA 52                      push edx

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00461DEB FF15D8874B00            Call dword ptr [004B87D8]
:00461DF1 EB46                    jmp 00461E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461DD6(C)
|
:00461DF3 8B45C8                  mov eax, dword ptr [ebp-38]
:00461DF6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461DF9 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E29(C)
|
:00461DFB 8B55D4                  mov edx, dword ptr [ebp-2C]
:00461DFE 83CA10                  or edx, 00000010
:00461E01 52                      push edx
:00461E02 8B45CC                  mov eax, dword ptr [ebp-34]
:00461E05 50                      push eax

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00461E06 FF15D8874B00            Call dword ptr [004B87D8]
:00461E0C 85C0                    test eax, eax
:00461E0E 7409                    je 00461E19
:00461E10 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00461E13 83C101                  add ecx, 00000001
:00461E16 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E0E(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:00461E19 6A06                    push 00000006
:00461E1B E8B24DFCFF              call 00426BD2
:00461E20 83C404                  add esp, 00000004
:00461E23 8B55D0                  mov edx, dword ptr [ebp-30]
:00461E26 3B550C                  cmp edx, dword ptr [ebp+0C]
:00461E29 7CD0                    jl 00461DFB
:00461E2B 8B45C8                  mov eax, dword ptr [ebp-38]
:00461E2E C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:00461E34 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461C8B(U), :00461C98(U), :00461CA8(U), :00461DA5(U), :00461DC8(U)
|:00461DF1(U)
|
:00461E39 8BE5                    mov esp, ebp
:00461E3B 5D                      pop ebp
:00461E3C C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040DCA4   
|
:00461E3F 55                      push ebp
:00461E40 8BEC                    mov ebp, esp
:00461E42 51                      push ecx
:00461E43 894DFC                  mov dword ptr [ebp-04], ecx
:00461E46 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00461E4A 7524                    jne 00461E70
:00461E4C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461E4F E82DFDFFFF              call 00461B81
:00461E54 8B4508                  mov eax, dword ptr [ebp+08]
:00461E57 50                      push eax
:00461E58 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461E5B E864FDFFFF              call 00461BC4
:00461E60 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461E63 51                      push ecx
:00461E64 B9C8E24A00              mov ecx, 004AE2C8
:00461E69 E852000000              call 00461EC0
:00461E6E EB46                    jmp 00461EB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E4A(C)
|
:00461E70 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:00461E77 7519                    jne 00461E92
:00461E79 68FFFF0000              push 0000FFFF
:00461E7E B9C8E24A00              mov ecx, 004AE2C8
:00461E83 E838000000              call 00461EC0
:00461E88 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461E8B E8F1FCFFFF              call 00461B81
:00461E90 EB24                    jmp 00461EB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E77(C)
|
:00461E92 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00461E96 750E                    jne 00461EA6
:00461E98 8B5508                  mov edx, dword ptr [ebp+08]
:00461E9B 52                      push edx
:00461E9C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461E9F E805FDFFFF              call 00461BA9
:00461EA4 EB10                    jmp 00461EB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E96(C)
|
:00461EA6 8B450C                  mov eax, dword ptr [ebp+0C]
:00461EA9 50                      push eax
:00461EAA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461EAD 51                      push ecx
:00461EAE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461EB1 E841FDFFFF              call 00461BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461E6E(U), :00461E90(U), :00461EA4(U)
|
:00461EB6 8BE5                    mov esp, ebp
:00461EB8 5D                      pop ebp
:00461EB9 C20800                  ret 0008


:00461EBC CC                      int 03
:00461EBD CC                      int 03
:00461EBE CC                      int 03
:00461EBF CC                      int 03

* Referenced by a CALL at Addresses:
|:00461E69   , :00461E83   
|
:00461EC0 55                      push ebp
:00461EC1 8BEC                    mov ebp, esp
:00461EC3 51                      push ecx
:00461EC4 894DFC                  mov dword ptr [ebp-04], ecx
:00461EC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00461ECA 8A4D08                  mov cl, byte ptr [ebp+08]
:00461ECD 88480F                  mov byte ptr [eax+0F], cl
:00461ED0 8BE5                    mov esp, ebp
:00461ED2 5D                      pop ebp
:00461ED3 C20400                  ret 0004


:00461ED6 CC                      int 03
:00461ED7 CC                      int 03
:00461ED8 CC                      int 03
:00461ED9 CC                      int 03
:00461EDA CC                      int 03
:00461EDB CC                      int 03
:00461EDC CC                      int 03
:00461EDD CC                      int 03
:00461EDE CC                      int 03
:00461EDF CC                      int 03

* Referenced by a CALL at Address:
|:004618B7   
|
:00461EE0 55                      push ebp
:00461EE1 8BEC                    mov ebp, esp
:00461EE3 51                      push ecx
:00461EE4 894DFC                  mov dword ptr [ebp-04], ecx
:00461EE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00461EEA C70001000000            mov dword ptr [eax], 00000001
:00461EF0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461EF3 C74104FFFFFFFF          mov [ecx+04], FFFFFFFF
:00461EFA 8B55FC                  mov edx, dword ptr [ebp-04]
:00461EFD C6420844                mov [edx+08], 44
:00461F01 8B45FC                  mov eax, dword ptr [ebp-04]
:00461F04 C7400C00000000          mov [eax+0C], 00000000
:00461F0B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461F0E C7411000000000          mov [ecx+10], 00000000
:00461F15 8B55FC                  mov edx, dword ptr [ebp-04]
:00461F18 C74220FFFF0000          mov [edx+20], 0000FFFF
:00461F1F 8B45FC                  mov eax, dword ptr [ebp-04]
:00461F22 8BE5                    mov esp, ebp
:00461F24 5D                      pop ebp
:00461F25 C3                      ret


:00461F26 CC                      int 03
:00461F27 CC                      int 03
:00461F28 CC                      int 03
:00461F29 CC                      int 03
:00461F2A CC                      int 03
:00461F2B CC                      int 03
:00461F2C CC                      int 03
:00461F2D CC                      int 03
:00461F2E CC                      int 03
:00461F2F CC                      int 03

* Referenced by a CALL at Address:
|:004618F6   
|
:00461F30 55                      push ebp
:00461F31 8BEC                    mov ebp, esp
:00461F33 51                      push ecx
:00461F34 894DFC                  mov dword ptr [ebp-04], ecx
:00461F37 8B45FC                  mov eax, dword ptr [ebp-04]
:00461F3A C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:00461F40 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461F43 C7410400000000          mov [ecx+04], 00000000
:00461F4A 8B45FC                  mov eax, dword ptr [ebp-04]
:00461F4D 8BE5                    mov esp, ebp
:00461F4F 5D                      pop ebp
:00461F50 C3                      ret


:00461F51 CC                      int 03
:00461F52 CC                      int 03
:00461F53 CC                      int 03
:00461F54 CC                      int 03
:00461F55 CC                      int 03
:00461F56 CC                      int 03
:00461F57 CC                      int 03
:00461F58 CC                      int 03
:00461F59 CC                      int 03
:00461F5A CC                      int 03
:00461F5B CC                      int 03
:00461F5C CC                      int 03
:00461F5D CC                      int 03
:00461F5E CC                      int 03
:00461F5F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042A49A   , :0042A4AF   , :0042AD78   , :0042AF3D   , :0042AF58   
|:0042AF78   , :0042AFCF   , :0042AFF4   , :0042B0BF   , :0042B119   
|:0042B27D   , :0042B2B4   , :0042B55C   , :004391FD   , :004392BA   
|:00439340   , :00439370   , :0043BE4F   , :0043C08F   , :0043C0F1   
|:0044921A   , :0044AAE9   , :0044B6B1   , :0044C14C   , :004579F0   
|:00457A9F   , :00461F88   
|
:00461F60 55                      push ebp
:00461F61 8BEC                    mov ebp, esp
:00461F63 837D1000                cmp dword ptr [ebp+10], 00000000
:00461F67 7505                    jne 00461F6E
:00461F69 83C8FF                  or eax, FFFFFFFF
:00461F6C EB0B                    jmp 00461F79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461F67(C)
|
:00461F6E 8B4508                  mov eax, dword ptr [ebp+08]
:00461F71 0FAF450C                imul eax, dword ptr [ebp+0C]
:00461F75 99                      cdq
:00461F76 F77D10                  idiv [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461F6C(U)
|
:00461F79 5D                      pop ebp
:00461F7A C3                      ret


:00461F7B 55                      push ebp
:00461F7C 8BEC                    mov ebp, esp
:00461F7E 6A64                    push 00000064
:00461F80 8B450C                  mov eax, dword ptr [ebp+0C]
:00461F83 50                      push eax
:00461F84 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461F87 51                      push ecx
:00461F88 E8D3FFFFFF              call 00461F60
:00461F8D 83C40C                  add esp, 0000000C
:00461F90 5D                      pop ebp
:00461F91 C3                      ret



* Referenced by a CALL at Addresses:
|:0040164C   , :00401680   , :004016B4   , :004016E8   , :0040171C   
|:00401773   , :004017A7   , :004017D9   , :0040182B   , :0040185F   
|:00401897   , :004018D1   , :00401908   , :0040193F   , :00401976   
|:004019E1   , :00401A69   , :004023E7   , :0040241A   , :004024A1   
|:004024D4   , :00402505   , :00402538   , :004025A4   , :00406AA8   
|:0043B36E   , :00457A2F   , :00457ADE   , :00465EE5   , :00466B57   
|
:00461F92 55                      push ebp
:00461F93 8BEC                    mov ebp, esp
:00461F95 83EC08                  sub esp, 00000008
:00461F98 8B4508                  mov eax, dword ptr [ebp+08]
:00461F9B 03450C                  add eax, dword ptr [ebp+0C]
:00461F9E 8945FC                  mov dword ptr [ebp-04], eax
:00461FA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461FA4 3B4D10                  cmp ecx, dword ptr [ebp+10]
:00461FA7 7E08                    jle 00461FB1
:00461FA9 8B5510                  mov edx, dword ptr [ebp+10]
:00461FAC 8955F8                  mov dword ptr [ebp-08], edx
:00461FAF EB06                    jmp 00461FB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461FA7(C)
|
:00461FB1 8B45FC                  mov eax, dword ptr [ebp-04]
:00461FB4 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461FAF(U)
|
:00461FB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00461FBA 894D08                  mov dword ptr [ebp+08], ecx
:00461FBD 8B4508                  mov eax, dword ptr [ebp+08]
:00461FC0 8BE5                    mov esp, ebp
:00461FC2 5D                      pop ebp
:00461FC3 C3                      ret



* Referenced by a CALL at Addresses:
|:00406AE7   , :0040AC22   , :0042AE1F   , :00430C29   , :0043396E   
|:00433FF5   , :00434E40   , :00438BDF   , :00439259   , :004519CB   
|:00466B05   
|
:00461FC4 55                      push ebp
:00461FC5 8BEC                    mov ebp, esp
:00461FC7 51                      push ecx
:00461FC8 8B4508                  mov eax, dword ptr [ebp+08]
:00461FCB 3B450C                  cmp eax, dword ptr [ebp+0C]
:00461FCE 760B                    jbe 00461FDB
:00461FD0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461FD3 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:00461FD6 894DFC                  mov dword ptr [ebp-04], ecx
:00461FD9 EB07                    jmp 00461FE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461FCE(C)
|
:00461FDB C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461FD9(U)
|
:00461FE2 8B45FC                  mov eax, dword ptr [ebp-04]
:00461FE5 8BE5                    mov esp, ebp
:00461FE7 5D                      pop ebp
:00461FE8 C3                      ret



* Referenced by a CALL at Addresses:
|:0040290C   , :0043C7E6   , :0043C82E   , :0043C87A   , :0043C8C2   
|:0043C90F   , :0043C956   
|
:00461FE9 55                      push ebp
:00461FEA 8BEC                    mov ebp, esp
:00461FEC 51                      push ecx
:00461FED 8B4508                  mov eax, dword ptr [ebp+08]
:00461FF0 25FF000000              and eax, 000000FF
:00461FF5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00461FF8 81E1FF000000            and ecx, 000000FF
:00461FFE 03C1                    add eax, ecx
:00462000 8B5510                  mov edx, dword ptr [ebp+10]
:00462003 81E2FF000000            and edx, 000000FF
:00462009 3BC2                    cmp eax, edx
:0046200B 7318                    jnb 00462025
:0046200D 8B4508                  mov eax, dword ptr [ebp+08]
:00462010 25FF000000              and eax, 000000FF
:00462015 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462018 81E1FF000000            and ecx, 000000FF
:0046201E 03C1                    add eax, ecx
:00462020 8945FC                  mov dword ptr [ebp-04], eax
:00462023 EB0C                    jmp 00462031

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046200B(C)
|
:00462025 8B5510                  mov edx, dword ptr [ebp+10]
:00462028 81E2FF000000            and edx, 000000FF
:0046202E 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462023(U)
|
:00462031 8A45FC                  mov al, byte ptr [ebp-04]
:00462034 8BE5                    mov esp, ebp
:00462036 5D                      pop ebp
:00462037 C3                      ret



* Referenced by a CALL at Addresses:
|:00402613   , :00403132   , :00457910   
|
:00462038 55                      push ebp
:00462039 8BEC                    mov ebp, esp
:0046203B 51                      push ecx
:0046203C 8B4508                  mov eax, dword ptr [ebp+08]
:0046203F 25FF000000              and eax, 000000FF
:00462044 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462047 81E1FF000000            and ecx, 000000FF
:0046204D 3BC1                    cmp eax, ecx
:0046204F 7E18                    jle 00462069
:00462051 8B5508                  mov edx, dword ptr [ebp+08]
:00462054 81E2FF000000            and edx, 000000FF
:0046205A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046205D 25FF000000              and eax, 000000FF
:00462062 2BD0                    sub edx, eax
:00462064 8955FC                  mov dword ptr [ebp-04], edx
:00462067 EB07                    jmp 00462070

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046204F(C)
|
:00462069 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462067(U)
|
:00462070 8A45FC                  mov al, byte ptr [ebp-04]
:00462073 8BE5                    mov esp, ebp
:00462075 5D                      pop ebp
:00462076 C3                      ret



* Referenced by a CALL at Address:
|:004620C2   
|
:00462077 55                      push ebp
:00462078 8BEC                    mov ebp, esp
:0046207A A1D0E44700              mov eax, dword ptr [0047E4D0]
:0046207F 69C06D4EC641            imul eax, 41C64E6D
:00462085 0539300000              add eax, 00003039
:0046208A A3D0E44700              mov dword ptr [0047E4D0], eax
:0046208F A1D0E44700              mov eax, dword ptr [0047E4D0]
:00462094 C1F810                  sar eax, 10
:00462097 25FF7F0000              and eax, 00007FFF
:0046209C 5D                      pop ebp
:0046209D C3                      ret



* Referenced by a CALL at Addresses:
|:00423EF0   , :00426900   , :00426A81   , :00457D77   
|
:0046209E 55                      push ebp
:0046209F 8BEC                    mov ebp, esp
:004620A1 8B4508                  mov eax, dword ptr [ebp+08]
:004620A4 A3D0E44700              mov dword ptr [0047E4D0], eax
:004620A9 5D                      pop ebp
:004620AA C3                      ret


:004620AB 55                      push ebp
:004620AC 8BEC                    mov ebp, esp
:004620AE A1D0E44700              mov eax, dword ptr [0047E4D0]
:004620B3 5D                      pop ebp
:004620B4 C3                      ret



* Referenced by a CALL at Addresses:
|:00416E33   , :0042302D   , :004231C5   , :004231D5   , :0042441D   
|:0042AC58   , :0042AC9F   , :0042ACE3   , :0042AD25   , :0042AD86   
|:0042AE40   , :0042B57C   , :0042B735   , :0042B7EE   , :00430C4F   
|:0043467C   , :00435623   , :00435631   , :00439102   , :00439110   
|:004391AC   , :004391BA   , :00439278   , :00439286   , :0043938A   
|:00439398   , :004393B3   , :004393ED   , :004393FB   , :00439453   
|:004395D0   , :004395DE   , :00439639   , :00439647   , :0043A6BB   
|:0043A6CD   , :0043A6DD   , :0043A6EF   , :0043A6FF   , :0043A711   
|:0043A721   , :0043A733   , :0043BC4A   , :0043BCA4   , :0043BD14   
|:0043BD4C   , :0043BDCE   , :0043D368   , :0044884D   , :0044B089   
|:0044B1AB   , :0044B85E   , :0044BA66   , :0044BE55   , :0044C066   
|:0044C099   , :0044C0AB   , :0044C15B   , :0044C16A   , :0044C636   
|:0044C644   , :0044C69F   , :0044C6AD   , :00458362   , :004598A4   
|:00462194   
|
:004620B5 55                      push ebp
:004620B6 8BEC                    mov ebp, esp
:004620B8 837D0802                cmp dword ptr [ebp+08], 00000002
:004620BC 7304                    jnb 004620C2
:004620BE 33C0                    xor eax, eax
:004620C0 EB0C                    jmp 004620CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004620BC(C)
|
:004620C2 E8B0FFFFFF              call 00462077
:004620C7 33D2                    xor edx, edx
:004620C9 F77508                  div [ebp+08]
:004620CC 8BC2                    mov eax, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004620C0(U)
|
:004620CE 5D                      pop ebp
:004620CF C3                      ret


:004620D0 55                      push ebp
:004620D1 8BEC                    mov ebp, esp
:004620D3 51                      push ecx
:004620D4 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004620D8 750A                    jne 004620E4
:004620DA 837D1400                cmp dword ptr [ebp+14], 00000000
:004620DE 7504                    jne 004620E4
:004620E0 33C0                    xor eax, eax
:004620E2 EB1F                    jmp 00462103

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004620D8(C), :004620DE(C)
|
:004620E4 8B4508                  mov eax, dword ptr [ebp+08]
:004620E7 0FAF450C                imul eax, dword ptr [ebp+0C]
:004620EB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004620EE 0FAF4D14                imul ecx, dword ptr [ebp+14]
:004620F2 03C1                    add eax, ecx
:004620F4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004620F7 034D14                  add ecx, dword ptr [ebp+14]
:004620FA 99                      cdq
:004620FB F7F9                    idiv ecx
:004620FD 8945FC                  mov dword ptr [ebp-04], eax
:00462100 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004620E2(U)
|
:00462103 8BE5                    mov esp, ebp
:00462105 5D                      pop ebp
:00462106 C3                      ret


:00462107 55                      push ebp
:00462108 8BEC                    mov ebp, esp
:0046210A 837D0800                cmp dword ptr [ebp+08], 00000000
:0046210E 750D                    jne 0046211D
:00462110 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00462114 7507                    jne 0046211D
:00462116 B832000000              mov eax, 00000032
:0046211B EB10                    jmp 0046212D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046210E(C), :00462114(C)
|
:0046211D 8B4508                  mov eax, dword ptr [ebp+08]
:00462120 6BC064                  imul eax, 00000064
:00462123 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462126 034D0C                  add ecx, dword ptr [ebp+0C]
:00462129 33D2                    xor edx, edx
:0046212B F7F1                    div ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046211B(U)
|
:0046212D 5D                      pop ebp
:0046212E C3                      ret


:0046212F 55                      push ebp
:00462130 8BEC                    mov ebp, esp
:00462132 83EC08                  sub esp, 00000008
:00462135 8B4508                  mov eax, dword ptr [ebp+08]
:00462138 8945F8                  mov dword ptr [ebp-08], eax
:0046213B 837DF800                cmp dword ptr [ebp-08], 00000000
:0046213F 7447                    je 00462188
:00462141 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462160(U)
|
:00462148 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046214B 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0046214E 7312                    jnb 00462162
:00462150 8B55FC                  mov edx, dword ptr [ebp-04]
:00462153 D1E2                    shl edx, 1
:00462155 8955FC                  mov dword ptr [ebp-04], edx
:00462158 8B45F8                  mov eax, dword ptr [ebp-08]
:0046215B D1E8                    shr eax, 1
:0046215D 8945F8                  mov dword ptr [ebp-08], eax
:00462160 EBE6                    jmp 00462148

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046214E(C), :00462186(C)
|
:00462162 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462165 894DF8                  mov dword ptr [ebp-08], ecx
:00462168 8B4508                  mov eax, dword ptr [ebp+08]
:0046216B 33D2                    xor edx, edx
:0046216D F775FC                  div [ebp-04]
:00462170 8B55FC                  mov edx, dword ptr [ebp-04]
:00462173 03D0                    add edx, eax
:00462175 8955FC                  mov dword ptr [ebp-04], edx
:00462178 8B45FC                  mov eax, dword ptr [ebp-04]
:0046217B D1E8                    shr eax, 1
:0046217D 8945FC                  mov dword ptr [ebp-04], eax
:00462180 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462183 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:00462186 72DA                    jb 00462162

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046213F(C)
|
:00462188 8B45F8                  mov eax, dword ptr [ebp-08]
:0046218B 8BE5                    mov esp, ebp
:0046218D 5D                      pop ebp
:0046218E C3                      ret


:0046218F 55                      push ebp
:00462190 8BEC                    mov ebp, esp
:00462192 6A64                    push 00000064
:00462194 E81CFFFFFF              call 004620B5
:00462199 83C404                  add esp, 00000004
:0046219C 3B4508                  cmp eax, dword ptr [ebp+08]
:0046219F 1BC0                    sbb eax, eax
:004621A1 F7D8                    neg eax
:004621A3 5D                      pop ebp
:004621A4 C3                      ret


:004621A5 55                      push ebp
:004621A6 8BEC                    mov ebp, esp
:004621A8 83EC18                  sub esp, 00000018
:004621AB C745F400000000          mov [ebp-0C], 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004621B2 C745F80A000000          mov [ebp-08], 0000000A
:004621B9 8B4508                  mov eax, dword ptr [ebp+08]
:004621BC 8A08                    mov cl, byte ptr [eax]
:004621BE 884DEC                  mov byte ptr [ebp-14], cl
:004621C1 807DEC2B                cmp byte ptr [ebp-14], 2B
:004621C5 7415                    je 004621DC
:004621C7 807DEC2D                cmp byte ptr [ebp-14], 2D
:004621CB 7408                    je 004621D5
:004621CD 807DEC30                cmp byte ptr [ebp-14], 30
:004621D1 7414                    je 004621E7
:004621D3 EB48                    jmp 0046221D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621CB(C)
|
:004621D5 C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621C5(C)
|
:004621DC 8B5508                  mov edx, dword ptr [ebp+08]
:004621DF 83C201                  add edx, 00000001
:004621E2 895508                  mov dword ptr [ebp+08], edx
:004621E5 EB36                    jmp 0046221D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621D1(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:004621E7 C745F808000000          mov [ebp-08], 00000008
:004621EE 8B4508                  mov eax, dword ptr [ebp+08]
:004621F1 83C001                  add eax, 00000001
:004621F4 894508                  mov dword ptr [ebp+08], eax
:004621F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004621FA 0FBE11                  movsx edx, byte ptr [ecx]
:004621FD 83FA78                  cmp edx, 00000078
:00462200 740B                    je 0046220D
:00462202 8B4508                  mov eax, dword ptr [ebp+08]
:00462205 0FBE08                  movsx ecx, byte ptr [eax]
:00462208 83F958                  cmp ecx, 00000058
:0046220B 7510                    jne 0046221D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462200(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046220D C745F810000000          mov [ebp-08], 00000010
:00462214 8B5508                  mov edx, dword ptr [ebp+08]
:00462217 83C201                  add edx, 00000001
:0046221A 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004621D3(U), :004621E5(U), :0046220B(C)
|
:0046221D C745F000000000          mov [ebp-10], 00000000
:00462224 EB09                    jmp 0046222F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462270(U)
|
:00462226 8B4508                  mov eax, dword ptr [ebp+08]
:00462229 83C001                  add eax, 00000001
:0046222C 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462224(U)
|
:0046222F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462232 0FBE11                  movsx edx, byte ptr [ecx]
:00462235 85D2                    test edx, edx
:00462237 7439                    je 00462272
:00462239 8B4508                  mov eax, dword ptr [ebp+08]
:0046223C 0FBE08                  movsx ecx, byte ptr [eax]
:0046223F 83E930                  sub ecx, 00000030
:00462242 894DFC                  mov dword ptr [ebp-04], ecx
:00462245 837DFC09                cmp dword ptr [ebp-04], 00000009
:00462249 7E18                    jle 00462263
:0046224B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046224E 83EA07                  sub edx, 00000007
:00462251 8955FC                  mov dword ptr [ebp-04], edx
:00462254 837DFC0F                cmp dword ptr [ebp-04], 0000000F
:00462258 7E09                    jle 00462263
:0046225A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046225D 83E820                  sub eax, 00000020
:00462260 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462249(C), :00462258(C)
|
:00462263 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462266 0FAF4DF8                imul ecx, dword ptr [ebp-08]
:0046226A 034DFC                  add ecx, dword ptr [ebp-04]
:0046226D 894DF0                  mov dword ptr [ebp-10], ecx
:00462270 EBB4                    jmp 00462226

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462237(C)
|
:00462272 837DF400                cmp dword ptr [ebp-0C], 00000000
:00462276 740A                    je 00462282
:00462278 8B55F0                  mov edx, dword ptr [ebp-10]
:0046227B F7DA                    neg edx
:0046227D 8955E8                  mov dword ptr [ebp-18], edx
:00462280 EB06                    jmp 00462288

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462276(C)
|
:00462282 8B45F0                  mov eax, dword ptr [ebp-10]
:00462285 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462280(U)
|
:00462288 8B45E8                  mov eax, dword ptr [ebp-18]
:0046228B 8BE5                    mov esp, ebp
:0046228D 5D                      pop ebp
:0046228E C3                      ret


:0046228F 55                      push ebp
:00462290 8BEC                    mov ebp, esp
:00462292 83EC18                  sub esp, 00000018
:00462295 C745F400000000          mov [ebp-0C], 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046229C C745F80A000000          mov [ebp-08], 0000000A
:004622A3 8B4508                  mov eax, dword ptr [ebp+08]
:004622A6 8A08                    mov cl, byte ptr [eax]
:004622A8 884DEC                  mov byte ptr [ebp-14], cl
:004622AB 807DEC2B                cmp byte ptr [ebp-14], 2B
:004622AF 7415                    je 004622C6
:004622B1 807DEC2D                cmp byte ptr [ebp-14], 2D
:004622B5 7408                    je 004622BF
:004622B7 807DEC30                cmp byte ptr [ebp-14], 30
:004622BB 7414                    je 004622D1
:004622BD EB48                    jmp 00462307

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004622B5(C)
|
:004622BF C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004622AF(C)
|
:004622C6 8B5508                  mov edx, dword ptr [ebp+08]
:004622C9 83C201                  add edx, 00000001
:004622CC 895508                  mov dword ptr [ebp+08], edx
:004622CF EB36                    jmp 00462307

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004622BB(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:004622D1 C745F808000000          mov [ebp-08], 00000008
:004622D8 8B4508                  mov eax, dword ptr [ebp+08]
:004622DB 83C001                  add eax, 00000001
:004622DE 894508                  mov dword ptr [ebp+08], eax
:004622E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004622E4 0FBE11                  movsx edx, byte ptr [ecx]
:004622E7 83FA78                  cmp edx, 00000078
:004622EA 740B                    je 004622F7
:004622EC 8B4508                  mov eax, dword ptr [ebp+08]
:004622EF 0FBE08                  movsx ecx, byte ptr [eax]
:004622F2 83F958                  cmp ecx, 00000058
:004622F5 7510                    jne 00462307

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004622EA(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004622F7 C745F810000000          mov [ebp-08], 00000010
:004622FE 8B5508                  mov edx, dword ptr [ebp+08]
:00462301 83C201                  add edx, 00000001
:00462304 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004622BD(U), :004622CF(U), :004622F5(C)
|
:00462307 C745F000000000          mov [ebp-10], 00000000
:0046230E EB09                    jmp 00462319

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046235A(U)
|
:00462310 8B4508                  mov eax, dword ptr [ebp+08]
:00462313 83C001                  add eax, 00000001
:00462316 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046230E(U)
|
:00462319 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046231C 0FBE11                  movsx edx, byte ptr [ecx]
:0046231F 85D2                    test edx, edx
:00462321 7439                    je 0046235C
:00462323 8B4508                  mov eax, dword ptr [ebp+08]
:00462326 0FBE08                  movsx ecx, byte ptr [eax]
:00462329 83E930                  sub ecx, 00000030
:0046232C 894DFC                  mov dword ptr [ebp-04], ecx
:0046232F 837DFC09                cmp dword ptr [ebp-04], 00000009
:00462333 7E18                    jle 0046234D
:00462335 8B55FC                  mov edx, dword ptr [ebp-04]
:00462338 83EA07                  sub edx, 00000007
:0046233B 8955FC                  mov dword ptr [ebp-04], edx
:0046233E 837DFC0F                cmp dword ptr [ebp-04], 0000000F
:00462342 7E09                    jle 0046234D
:00462344 8B45FC                  mov eax, dword ptr [ebp-04]
:00462347 83E820                  sub eax, 00000020
:0046234A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462333(C), :00462342(C)
|
:0046234D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462350 0FAF4DF8                imul ecx, dword ptr [ebp-08]
:00462354 034DFC                  add ecx, dword ptr [ebp-04]
:00462357 894DF0                  mov dword ptr [ebp-10], ecx
:0046235A EBB4                    jmp 00462310

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462321(C)
|
:0046235C 837DF400                cmp dword ptr [ebp-0C], 00000000
:00462360 740A                    je 0046236C
:00462362 8B55F0                  mov edx, dword ptr [ebp-10]
:00462365 F7DA                    neg edx
:00462367 8955E8                  mov dword ptr [ebp-18], edx
:0046236A EB06                    jmp 00462372

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462360(C)
|
:0046236C 8B45F0                  mov eax, dword ptr [ebp-10]
:0046236F 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046236A(U)
|
:00462372 8B45E8                  mov eax, dword ptr [ebp-18]
:00462375 8BE5                    mov esp, ebp
:00462377 5D                      pop ebp
:00462378 C3                      ret



* Referenced by a CALL at Address:
|:0046447F   
|
:00462379 55                      push ebp
:0046237A 8BEC                    mov ebp, esp
:0046237C 51                      push ecx
:0046237D 8B450C                  mov eax, dword ptr [ebp+0C]
:00462380 8945FC                  mov dword ptr [ebp-04], eax
:00462383 837D0800                cmp dword ptr [ebp+08], 00000000
:00462387 7D1D                    jge 004623A6
:00462389 837D100A                cmp dword ptr [ebp+10], 0000000A
:0046238D 7517                    jne 004623A6
:0046238F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462392 C6012D                  mov byte ptr [ecx], 2D
:00462395 8B55FC                  mov edx, dword ptr [ebp-04]
:00462398 83C201                  add edx, 00000001
:0046239B 8955FC                  mov dword ptr [ebp-04], edx
:0046239E 8B4508                  mov eax, dword ptr [ebp+08]
:004623A1 F7D8                    neg eax
:004623A3 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462387(C), :0046238D(C)
|
:004623A6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004623A9 51                      push ecx
:004623AA 8B55FC                  mov edx, dword ptr [ebp-04]
:004623AD 52                      push edx
:004623AE 8B4508                  mov eax, dword ptr [ebp+08]
:004623B1 50                      push eax
:004623B2 E80A000000              call 004623C1
:004623B7 83C40C                  add esp, 0000000C
:004623BA 8B450C                  mov eax, dword ptr [ebp+0C]
:004623BD 8BE5                    mov esp, ebp
:004623BF 5D                      pop ebp
:004623C0 C3                      ret



* Referenced by a CALL at Addresses:
|:004623B2   , :004623DD   
|
:004623C1 55                      push ebp
:004623C2 8BEC                    mov ebp, esp
:004623C4 8B4508                  mov eax, dword ptr [ebp+08]
:004623C7 3B4510                  cmp eax, dword ptr [ebp+10]
:004623CA 721C                    jb 004623E8
:004623CC 8B4D10                  mov ecx, dword ptr [ebp+10]
:004623CF 51                      push ecx
:004623D0 8B550C                  mov edx, dword ptr [ebp+0C]
:004623D3 52                      push edx
:004623D4 8B4508                  mov eax, dword ptr [ebp+08]
:004623D7 33D2                    xor edx, edx
:004623D9 F77510                  div [ebp+10]
:004623DC 50                      push eax
:004623DD E8DFFFFFFF              call 004623C1
:004623E2 83C40C                  add esp, 0000000C
:004623E5 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004623CA(C)
|
:004623E8 8B4508                  mov eax, dword ptr [ebp+08]
:004623EB 33D2                    xor edx, edx
:004623ED F77510                  div [ebp+10]
:004623F0 83C230                  add edx, 00000030
:004623F3 8B450C                  mov eax, dword ptr [ebp+0C]
:004623F6 8810                    mov byte ptr [eax], dl
:004623F8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004623FB 0FBE11                  movsx edx, byte ptr [ecx]
:004623FE 83FA39                  cmp edx, 00000039
:00462401 7E0D                    jle 00462410
:00462403 8B450C                  mov eax, dword ptr [ebp+0C]
:00462406 8A08                    mov cl, byte ptr [eax]
:00462408 80C127                  add cl, 27
:0046240B 8B550C                  mov edx, dword ptr [ebp+0C]
:0046240E 880A                    mov byte ptr [edx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462401(C)
|
:00462410 8B450C                  mov eax, dword ptr [ebp+0C]
:00462413 83C001                  add eax, 00000001
:00462416 89450C                  mov dword ptr [ebp+0C], eax
:00462419 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046241C C60100                  mov byte ptr [ecx], 00
:0046241F 8B450C                  mov eax, dword ptr [ebp+0C]
:00462422 5D                      pop ebp
:00462423 C3                      ret


:00462424 55                      push ebp
:00462425 8BEC                    mov ebp, esp
:00462427 51                      push ecx
:00462428 8B450C                  mov eax, dword ptr [ebp+0C]
:0046242B 8945FC                  mov dword ptr [ebp-04], eax
:0046242E 837D0800                cmp dword ptr [ebp+08], 00000000
:00462432 7D1D                    jge 00462451
:00462434 837D100A                cmp dword ptr [ebp+10], 0000000A
:00462438 7517                    jne 00462451
:0046243A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046243D C6012D                  mov byte ptr [ecx], 2D
:00462440 8B55FC                  mov edx, dword ptr [ebp-04]
:00462443 83C201                  add edx, 00000001
:00462446 8955FC                  mov dword ptr [ebp-04], edx
:00462449 8B4508                  mov eax, dword ptr [ebp+08]
:0046244C F7D8                    neg eax
:0046244E 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462432(C), :00462438(C)
|
:00462451 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462454 51                      push ecx
:00462455 8B55FC                  mov edx, dword ptr [ebp-04]
:00462458 52                      push edx
:00462459 8B4508                  mov eax, dword ptr [ebp+08]
:0046245C 50                      push eax
:0046245D E80A000000              call 0046246C
:00462462 83C40C                  add esp, 0000000C
:00462465 8B450C                  mov eax, dword ptr [ebp+0C]
:00462468 8BE5                    mov esp, ebp
:0046246A 5D                      pop ebp
:0046246B C3                      ret



* Referenced by a CALL at Addresses:
|:0046245D   , :00462488   , :004631CF   
|
:0046246C 55                      push ebp
:0046246D 8BEC                    mov ebp, esp
:0046246F 8B4508                  mov eax, dword ptr [ebp+08]
:00462472 3B4510                  cmp eax, dword ptr [ebp+10]
:00462475 721C                    jb 00462493
:00462477 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046247A 51                      push ecx
:0046247B 8B550C                  mov edx, dword ptr [ebp+0C]
:0046247E 52                      push edx
:0046247F 8B4508                  mov eax, dword ptr [ebp+08]
:00462482 33D2                    xor edx, edx
:00462484 F77510                  div [ebp+10]
:00462487 50                      push eax
:00462488 E8DFFFFFFF              call 0046246C
:0046248D 83C40C                  add esp, 0000000C
:00462490 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462475(C)
|
:00462493 8B4508                  mov eax, dword ptr [ebp+08]
:00462496 33D2                    xor edx, edx
:00462498 F77510                  div [ebp+10]
:0046249B 83C230                  add edx, 00000030
:0046249E 8B450C                  mov eax, dword ptr [ebp+0C]
:004624A1 8810                    mov byte ptr [eax], dl
:004624A3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004624A6 0FBE11                  movsx edx, byte ptr [ecx]
:004624A9 83FA39                  cmp edx, 00000039
:004624AC 7E0D                    jle 004624BB
:004624AE 8B450C                  mov eax, dword ptr [ebp+0C]
:004624B1 8A08                    mov cl, byte ptr [eax]
:004624B3 80C127                  add cl, 27
:004624B6 8B550C                  mov edx, dword ptr [ebp+0C]
:004624B9 880A                    mov byte ptr [edx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004624AC(C)
|
:004624BB 8B450C                  mov eax, dword ptr [ebp+0C]
:004624BE 83C001                  add eax, 00000001
:004624C1 89450C                  mov dword ptr [ebp+0C], eax
:004624C4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004624C7 C60100                  mov byte ptr [ecx], 00
:004624CA 8B450C                  mov eax, dword ptr [ebp+0C]
:004624CD 5D                      pop ebp
:004624CE C3                      ret


:004624CF 55                      push ebp
:004624D0 8BEC                    mov ebp, esp
:004624D2 51                      push ecx
:004624D3 817D0881000000          cmp dword ptr [ebp+08], 00000081
:004624DA 7209                    jb 004624E5
:004624DC 817D089F000000          cmp dword ptr [ebp+08], 0000009F
:004624E3 761B                    jbe 00462500

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004624DA(C)
|
:004624E5 817D08E0000000          cmp dword ptr [ebp+08], 000000E0
:004624EC 7209                    jb 004624F7
:004624EE 817D08FC000000          cmp dword ptr [ebp+08], 000000FC
:004624F5 7609                    jbe 00462500

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004624EC(C)
|
:004624F7 C745FC00000000          mov [ebp-04], 00000000
:004624FE EB07                    jmp 00462507

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004624E3(C), :004624F5(C)
|
:00462500 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004624FE(U)
|
:00462507 8B45FC                  mov eax, dword ptr [ebp-04]
:0046250A 8BE5                    mov esp, ebp
:0046250C 5D                      pop ebp
:0046250D C3                      ret


:0046250E 55                      push ebp
:0046250F 8BEC                    mov ebp, esp
:00462511 83EC08                  sub esp, 00000008
:00462514 8B4508                  mov eax, dword ptr [ebp+08]
:00462517 C1E808                  shr eax, 08
:0046251A 8845F8                  mov byte ptr [ebp-08], al
:0046251D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462520 81E1FF000000            and ecx, 000000FF
:00462526 884DFC                  mov byte ptr [ebp-04], cl
:00462529 8A55F8                  mov dl, byte ptr [ebp-08]
:0046252C D0E2                    shl dl, 1
:0046252E 8855F8                  mov byte ptr [ebp-08], dl
:00462531 8A45FC                  mov al, byte ptr [ebp-04]
:00462534 2C1F                    sub al, 1F
:00462536 8845FC                  mov byte ptr [ebp-04], al
:00462539 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046253C 81E1FF000000            and ecx, 000000FF
:00462542 81E180000000            and ecx, 00000080
:00462548 85C9                    test ecx, ecx
:0046254A 751F                    jne 0046256B
:0046254C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046254F 81E2FF000000            and edx, 000000FF
:00462555 83FA61                  cmp edx, 00000061
:00462558 7D08                    jge 00462562
:0046255A 8A45FC                  mov al, byte ptr [ebp-04]
:0046255D 0401                    add al, 01
:0046255F 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462558(C)
|
:00462562 8A4DFC                  mov cl, byte ptr [ebp-04]
:00462565 80C1DE                  add cl, DE
:00462568 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046254A(C)
|
:0046256B 8B55F8                  mov edx, dword ptr [ebp-08]
:0046256E 81E2FF000000            and edx, 000000FF
:00462574 C1E208                  shl edx, 08
:00462577 8B45FC                  mov eax, dword ptr [ebp-04]
:0046257A 25FF000000              and eax, 000000FF
:0046257F 03D0                    add edx, eax
:00462581 895508                  mov dword ptr [ebp+08], edx
:00462584 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462587 81C1A11F0000            add ecx, 00001FA1
:0046258D 894D08                  mov dword ptr [ebp+08], ecx
:00462590 8B5508                  mov edx, dword ptr [ebp+08]
:00462593 81E27F7F0000            and edx, 00007F7F
:00462599 895508                  mov dword ptr [ebp+08], edx
:0046259C 8B4508                  mov eax, dword ptr [ebp+08]
:0046259F 8BE5                    mov esp, ebp
:004625A1 5D                      pop ebp
:004625A2 C3                      ret



* Referenced by a CALL at Addresses:
|:00404C7F   , :00405212   , :00407BD3   , :00408C1B   , :0041240D   
|:00415B02   , :00417B16   , :00417BBF   , :0041D246   , :0042717F   
|:00427F3D   , :004284BE   , :0042887F   , :0042893F   , :004289AC   
|:00428A4C   , :004315A0   , :004316C9   , :00441EB4   , :00457EC0   
|:004611E4   , :00462629   , :00462666   , :004631FB   , :00463496   
|:004634A7   , :00465593   , :004655A7   
|
:004625A3 55                      push ebp
:004625A4 8BEC                    mov ebp, esp
:004625A6 51                      push ecx
:004625A7 837D0800                cmp dword ptr [ebp+08], 00000000
:004625AB 7504                    jne 004625B1
:004625AD 33C0                    xor eax, eax
:004625AF EB2A                    jmp 004625DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625AB(C)
|
:004625B1 C745FC00000000          mov [ebp-04], 00000000
:004625B8 EB09                    jmp 004625C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625D6(U)
|
:004625BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004625BD 83C001                  add eax, 00000001
:004625C0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625B8(U)
|
:004625C3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004625C6 0FBE11                  movsx edx, byte ptr [ecx]
:004625C9 8B4508                  mov eax, dword ptr [ebp+08]
:004625CC 83C001                  add eax, 00000001
:004625CF 894508                  mov dword ptr [ebp+08], eax
:004625D2 85D2                    test edx, edx
:004625D4 7402                    je 004625D8
:004625D6 EBE2                    jmp 004625BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625D4(C)
|
:004625D8 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625AF(U)
|
:004625DB 8BE5                    mov esp, ebp
:004625DD 5D                      pop ebp
:004625DE C3                      ret



* Referenced by a CALL at Addresses:
|:00402D34   , :00410D3B   , :00410FA9   , :004117C6   , :004117D9   
|:00416937   , :004289A0   , :00429783   , :004315F1   , :004569AF   
|:0045D392   , :0045FE0E   , :0045FF13   , :0045FF26   , :00462637   
|:00462689   , :0046551D   , :004655E1   , :0046597E   , :00465991   
|:004659A4   , :004659B7   , :004659CA   , :004659DD   , :004659F0   
|
:004625DF 55                      push ebp
:004625E0 8BEC                    mov ebp, esp
:004625E2 51                      push ecx
:004625E3 8B4508                  mov eax, dword ptr [ebp+08]
:004625E6 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046260F(U)
|
:004625E9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004625EC 0FBE11                  movsx edx, byte ptr [ecx]
:004625EF 85D2                    test edx, edx
:004625F1 741E                    je 00462611
:004625F3 8B4508                  mov eax, dword ptr [ebp+08]
:004625F6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004625F9 8A11                    mov dl, byte ptr [ecx]
:004625FB 8810                    mov byte ptr [eax], dl
:004625FD 8B4508                  mov eax, dword ptr [ebp+08]
:00462600 83C001                  add eax, 00000001
:00462603 894508                  mov dword ptr [ebp+08], eax
:00462606 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462609 83C101                  add ecx, 00000001
:0046260C 894D0C                  mov dword ptr [ebp+0C], ecx
:0046260F EBD8                    jmp 004625E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625F1(C)
|
:00462611 8B5508                  mov edx, dword ptr [ebp+08]
:00462614 C60200                  mov byte ptr [edx], 00
:00462617 8B45FC                  mov eax, dword ptr [ebp-04]
:0046261A 8BE5                    mov esp, ebp
:0046261C 5D                      pop ebp
:0046261D C3                      ret



* Referenced by a CALL at Addresses:
|:00402E0C   , :00402F7C   , :00402F99   , :00402FD6   , :00428871   
|:004297AB   , :004297BC   , :004297E5   , :004297F6   , :0043162B   
|:00431660   , :00431684   , :004316F2   , :00431718   , :0045D3A4   
|:0045D3B5   , :0046552E   , :00465541   , :00465552   , :004679C4   
|
:0046261E 55                      push ebp
:0046261F 8BEC                    mov ebp, esp
:00462621 8B450C                  mov eax, dword ptr [ebp+0C]
:00462624 50                      push eax
:00462625 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462628 51                      push ecx
:00462629 E875FFFFFF              call 004625A3
:0046262E 83C404                  add esp, 00000004
:00462631 8B5508                  mov edx, dword ptr [ebp+08]
:00462634 03D0                    add edx, eax
:00462636 52                      push edx
:00462637 E8A3FFFFFF              call 004625DF
:0046263C 83C408                  add esp, 00000008
:0046263F 8B4508                  mov eax, dword ptr [ebp+08]
:00462642 5D                      pop ebp
:00462643 C3                      ret


:00462644 55                      push ebp
:00462645 8BEC                    mov ebp, esp
:00462647 51                      push ecx
:00462648 8B4508                  mov eax, dword ptr [ebp+08]
:0046264B 8B08                    mov ecx, dword ptr [eax]
:0046264D 894DFC                  mov dword ptr [ebp-04], ecx
:00462650 8B55FC                  mov edx, dword ptr [ebp-04]
:00462653 52                      push edx
:00462654 E8C7B20000              call 0046D920
:00462659 83C404                  add esp, 00000004
:0046265C 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00462660 7431                    je 00462693
:00462662 8B450C                  mov eax, dword ptr [ebp+0C]
:00462665 50                      push eax
:00462666 E838FFFFFF              call 004625A3
:0046266B 83C404                  add esp, 00000004
:0046266E 83C001                  add eax, 00000001
:00462671 50                      push eax
:00462672 E849B30000              call 0046D9C0
:00462677 83C404                  add esp, 00000004
:0046267A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046267D 8901                    mov dword ptr [ecx], eax
:0046267F 8B550C                  mov edx, dword ptr [ebp+0C]
:00462682 52                      push edx
:00462683 8B4508                  mov eax, dword ptr [ebp+08]
:00462686 8B08                    mov ecx, dword ptr [eax]
:00462688 51                      push ecx
:00462689 E851FFFFFF              call 004625DF
:0046268E 83C408                  add esp, 00000008
:00462691 EB17                    jmp 004626AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462660(C)
|
:00462693 6A01                    push 00000001
:00462695 E826B30000              call 0046D9C0
:0046269A 83C404                  add esp, 00000004
:0046269D 8B5508                  mov edx, dword ptr [ebp+08]
:004626A0 8902                    mov dword ptr [edx], eax
:004626A2 8B4508                  mov eax, dword ptr [ebp+08]
:004626A5 8B08                    mov ecx, dword ptr [eax]
:004626A7 C60100                  mov byte ptr [ecx], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462691(U)
|
:004626AA 8B5508                  mov edx, dword ptr [ebp+08]
:004626AD 8B02                    mov eax, dword ptr [edx]
:004626AF 8BE5                    mov esp, ebp
:004626B1 5D                      pop ebp
:004626B2 C3                      ret



* Referenced by a CALL at Addresses:
|:0041349E   , :0045FE79   
|
:004626B3 55                      push ebp
:004626B4 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004626FE(U)
|
:004626B6 8B4508                  mov eax, dword ptr [ebp+08]
:004626B9 0FBE08                  movsx ecx, byte ptr [eax]
:004626BC 85C9                    test ecx, ecx
:004626BE 7440                    je 00462700
:004626C0 8B5508                  mov edx, dword ptr [ebp+08]
:004626C3 0FBE02                  movsx eax, byte ptr [edx]
:004626C6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004626C9 0FBE11                  movsx edx, byte ptr [ecx]
:004626CC 3BC2                    cmp eax, edx
:004626CE 7D05                    jge 004626D5
:004626D0 83C8FF                  or eax, FFFFFFFF
:004626D3 EB37                    jmp 0046270C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004626CE(C)
|
:004626D5 8B4508                  mov eax, dword ptr [ebp+08]
:004626D8 0FBE08                  movsx ecx, byte ptr [eax]
:004626DB 8B550C                  mov edx, dword ptr [ebp+0C]
:004626DE 0FBE02                  movsx eax, byte ptr [edx]
:004626E1 3BC8                    cmp ecx, eax
:004626E3 7E07                    jle 004626EC
:004626E5 B801000000              mov eax, 00000001
:004626EA EB20                    jmp 0046270C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004626E3(C)
|
:004626EC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004626EF 83C101                  add ecx, 00000001
:004626F2 894D08                  mov dword ptr [ebp+08], ecx
:004626F5 8B550C                  mov edx, dword ptr [ebp+0C]
:004626F8 83C201                  add edx, 00000001
:004626FB 89550C                  mov dword ptr [ebp+0C], edx
:004626FE EBB6                    jmp 004626B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004626BE(C)
|
:00462700 8B450C                  mov eax, dword ptr [ebp+0C]
:00462703 0FBE00                  movsx eax, byte ptr [eax]
:00462706 F7D8                    neg eax
:00462708 1BC0                    sbb eax, eax
:0046270A F7D8                    neg eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004626D3(U), :004626EA(U)
|
:0046270C 5D                      pop ebp
:0046270D C3                      ret


:0046270E 55                      push ebp
:0046270F 8BEC                    mov ebp, esp
:00462711 83EC10                  sub esp, 00000010
:00462714 C745F800000000          mov [ebp-08], 00000000
:0046271B C745FC00000000          mov [ebp-04], 00000000
:00462722 8B4508                  mov eax, dword ptr [ebp+08]
:00462725 C70000000000            mov dword ptr [eax], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004627AD(U)
|
:0046272B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046272E 0FBE11                  movsx edx, byte ptr [ecx]
:00462731 85D2                    test edx, edx
:00462733 747D                    je 004627B2
:00462735 8B450C                  mov eax, dword ptr [ebp+0C]
:00462738 0FBE08                  movsx ecx, byte ptr [eax]
:0046273B 894DF4                  mov dword ptr [ebp-0C], ecx
:0046273E 8B550C                  mov edx, dword ptr [ebp+0C]
:00462741 83C201                  add edx, 00000001
:00462744 89550C                  mov dword ptr [ebp+0C], edx
:00462747 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046274A 8945F0                  mov dword ptr [ebp-10], eax
:0046274D 837DF00A                cmp dword ptr [ebp-10], 0000000A
:00462751 742D                    je 00462780
:00462753 837DF00D                cmp dword ptr [ebp-10], 0000000D
:00462757 7413                    je 0046276C
:00462759 837DF01B                cmp dword ptr [ebp-10], 0000001B
:0046275D 7402                    je 00462761
:0046275F EB43                    jmp 004627A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046275D(C)
|
:00462761 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462764 83C102                  add ecx, 00000002
:00462767 894D0C                  mov dword ptr [ebp+0C], ecx
:0046276A EB41                    jmp 004627AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462757(C)
|
:0046276C 8B550C                  mov edx, dword ptr [ebp+0C]
:0046276F 0FBE02                  movsx eax, byte ptr [edx]
:00462772 83F80A                  cmp eax, 0000000A
:00462775 7509                    jne 00462780
:00462777 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046277A 83C101                  add ecx, 00000001
:0046277D 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462751(C), :00462775(C)
|
:00462780 8B55F8                  mov edx, dword ptr [ebp-08]
:00462783 3B55FC                  cmp edx, dword ptr [ebp-04]
:00462786 7606                    jbe 0046278E
:00462788 8B45F8                  mov eax, dword ptr [ebp-08]
:0046278B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462786(C)
|
:0046278E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462791 8B11                    mov edx, dword ptr [ecx]
:00462793 83C201                  add edx, 00000001
:00462796 8B4508                  mov eax, dword ptr [ebp+08]
:00462799 8910                    mov dword ptr [eax], edx
:0046279B C745F800000000          mov [ebp-08], 00000000
:004627A2 EB09                    jmp 004627AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046275F(U)
|
:004627A4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004627A7 83C101                  add ecx, 00000001
:004627AA 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046276A(U), :004627A2(U)
|
:004627AD E979FFFFFF              jmp 0046272B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462733(C)
|
:004627B2 8B55F8                  mov edx, dword ptr [ebp-08]
:004627B5 3B55FC                  cmp edx, dword ptr [ebp-04]
:004627B8 7606                    jbe 004627C0
:004627BA 8B45F8                  mov eax, dword ptr [ebp-08]
:004627BD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004627B8(C)
|
:004627C0 837DF800                cmp dword ptr [ebp-08], 00000000
:004627C4 760D                    jbe 004627D3
:004627C6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004627C9 8B11                    mov edx, dword ptr [ecx]
:004627CB 83C201                  add edx, 00000001
:004627CE 8B4508                  mov eax, dword ptr [ebp+08]
:004627D1 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004627C4(C)
|
:004627D3 8B45FC                  mov eax, dword ptr [ebp-04]
:004627D6 8BE5                    mov esp, ebp
:004627D8 5D                      pop ebp
:004627D9 C3                      ret


:004627DA 55                      push ebp
:004627DB 8BEC                    mov ebp, esp
:004627DD 83EC0C                  sub esp, 0000000C
:004627E0 8B4508                  mov eax, dword ptr [ebp+08]
:004627E3 8945FC                  mov dword ptr [ebp-04], eax
:004627E6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004627E9 894DF8                  mov dword ptr [ebp-08], ecx
:004627EC EB09                    jmp 004627F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462829(U)
|
:004627EE 8B5510                  mov edx, dword ptr [ebp+10]
:004627F1 83EA01                  sub edx, 00000001
:004627F4 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004627EC(U)
|
:004627F7 837D1000                cmp dword ptr [ebp+10], 00000000
:004627FB 742E                    je 0046282B
:004627FD 8B45FC                  mov eax, dword ptr [ebp-04]
:00462800 8A08                    mov cl, byte ptr [eax]
:00462802 884DF4                  mov byte ptr [ebp-0C], cl
:00462805 8B55FC                  mov edx, dword ptr [ebp-04]
:00462808 8B45F8                  mov eax, dword ptr [ebp-08]
:0046280B 8A08                    mov cl, byte ptr [eax]
:0046280D 880A                    mov byte ptr [edx], cl
:0046280F 8B55FC                  mov edx, dword ptr [ebp-04]
:00462812 83C201                  add edx, 00000001
:00462815 8955FC                  mov dword ptr [ebp-04], edx
:00462818 8B45F8                  mov eax, dword ptr [ebp-08]
:0046281B 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0046281E 8808                    mov byte ptr [eax], cl
:00462820 8B55F8                  mov edx, dword ptr [ebp-08]
:00462823 83C201                  add edx, 00000001
:00462826 8955F8                  mov dword ptr [ebp-08], edx
:00462829 EBC3                    jmp 004627EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004627FB(C)
|
:0046282B 8BE5                    mov esp, ebp
:0046282D 5D                      pop ebp
:0046282E C3                      ret



* Referenced by a CALL at Addresses:
|:0040863F   , :0040893B   , :00410F4F   , :00425E1C   , :00425E7B   
|:00425EDA   , :00425F39   , :00425F98   , :0042C1E5   , :0042C241   
|:0043AB30   , :0043B710   , :0043B779   , :0043B7AB   , :0043B96A   
|:0043B99D   , :0043B9C9   , :0043DF51   , :0043DFC8   , :0043E001   
|:0043F0A8   , :0043F0FD   , :0043F446   , :0043F4BA   , :0043F4F3   
|:00443AF8   , :00451075   , :0045208E   , :00454DF6   , :00456A20   
|:00456A3C   , :00456A5B   , :00456B69   , :00456B85   , :00456BA4   
|:00459356   , :00466099   , :0046873E   
|
:0046282F 55                      push ebp
:00462830 8BEC                    mov ebp, esp
:00462832 8B4510                  mov eax, dword ptr [ebp+10]
:00462835 50                      push eax
:00462836 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462839 51                      push ecx
:0046283A 8B550C                  mov edx, dword ptr [ebp+0C]
:0046283D 52                      push edx
:0046283E E8DDBA0000              call 0046E320
:00462843 83C40C                  add esp, 0000000C
:00462846 5D                      pop ebp
:00462847 C3                      ret



* Referenced by a CALL at Addresses:
|:00407F0F   , :00410B2A   , :0041248D   , :00412C3A   , :00428921   
|:00432508   , :004327BA   , :0043299F   , :00432E07   , :00433C0F   
|:00433F0C   , :004341EC   , :00434405   , :0043484F   , :004349B8   
|:00434B6F   , :00434D2C   , :00435089   , :004351EA   , :004354C0   
|:00435AF9   , :0043656D   , :004368AC   , :00436E31   , :00437C40   
|:0043834A   , :00439875   , :00442814   , :00442EF7   , :00442F19   
|:00444755   , :00445D90   , :00448921   , :004489FD   , :004498E0   
|:00449E1F   , :0045500D   
|
:00462848 55                      push ebp
:00462849 8BEC                    mov ebp, esp
:0046284B 8B450C                  mov eax, dword ptr [ebp+0C]
:0046284E 50                      push eax
:0046284F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462852 81E1FF000000            and ecx, 000000FF
:00462858 51                      push ecx
:00462859 8B5508                  mov edx, dword ptr [ebp+08]
:0046285C 52                      push edx
:0046285D E8FEB00000              call 0046D960
:00462862 83C40C                  add esp, 0000000C
:00462865 5D                      pop ebp
:00462866 C3                      ret


:00462867 55                      push ebp
:00462868 8BEC                    mov ebp, esp
:0046286A 51                      push ecx
:0046286B 8B450C                  mov eax, dword ptr [ebp+0C]
:0046286E 25FF000000              and eax, 000000FF
:00462873 F7D0                    not eax
:00462875 83C001                  add eax, 00000001
:00462878 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046287B 81E1FF000000            and ecx, 000000FF
:00462881 23C1                    and eax, ecx
:00462883 8845FC                  mov byte ptr [ebp-04], al
:00462886 8B55FC                  mov edx, dword ptr [ebp-04]
:00462889 81E2FF000000            and edx, 000000FF
:0046288F 85D2                    test edx, edx
:00462891 7504                    jne 00462897
:00462893 32C0                    xor al, al
:00462895 EB1F                    jmp 004628B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462891(C)
|
:00462897 8B4508                  mov eax, dword ptr [ebp+08]
:0046289A 25FF000000              and eax, 000000FF
:0046289F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004628A2 81E1FF000000            and ecx, 000000FF
:004628A8 23C1                    and eax, ecx
:004628AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004628AD 81E1FF000000            and ecx, 000000FF
:004628B3 99                      cdq
:004628B4 F7F9                    idiv ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462895(U)
|
:004628B6 8BE5                    mov esp, ebp
:004628B8 5D                      pop ebp
:004628B9 C3                      ret


:004628BA 55                      push ebp
:004628BB 8BEC                    mov ebp, esp
:004628BD 8B4510                  mov eax, dword ptr [ebp+10]
:004628C0 25FF000000              and eax, 000000FF
:004628C5 F7D0                    not eax
:004628C7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004628CA 8A11                    mov dl, byte ptr [ecx]
:004628CC 22D0                    and dl, al
:004628CE 8B4508                  mov eax, dword ptr [ebp+08]
:004628D1 8810                    mov byte ptr [eax], dl
:004628D3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004628D6 81E1FF000000            and ecx, 000000FF
:004628DC 8B5510                  mov edx, dword ptr [ebp+10]
:004628DF 81E2FF000000            and edx, 000000FF
:004628E5 F7D2                    not edx
:004628E7 83C201                  add edx, 00000001
:004628EA 8B4510                  mov eax, dword ptr [ebp+10]
:004628ED 25FF000000              and eax, 000000FF
:004628F2 23D0                    and edx, eax
:004628F4 0FAFCA                  imul ecx, edx
:004628F7 8B5508                  mov edx, dword ptr [ebp+08]
:004628FA 8A02                    mov al, byte ptr [edx]
:004628FC 0AC1                    or al, cl
:004628FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462901 8801                    mov byte ptr [ecx], al
:00462903 5D                      pop ebp
:00462904 C3                      ret


:00462905 55                      push ebp
:00462906 8BEC                    mov ebp, esp
:00462908 51                      push ecx
:00462909 8B450C                  mov eax, dword ptr [ebp+0C]
:0046290C F7D0                    not eax
:0046290E 83C001                  add eax, 00000001
:00462911 23450C                  and eax, dword ptr [ebp+0C]
:00462914 8945FC                  mov dword ptr [ebp-04], eax
:00462917 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046291B 7504                    jne 00462921
:0046291D 33C0                    xor eax, eax
:0046291F EB0B                    jmp 0046292C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046291B(C)
|
:00462921 8B4508                  mov eax, dword ptr [ebp+08]
:00462924 23450C                  and eax, dword ptr [ebp+0C]
:00462927 33D2                    xor edx, edx
:00462929 F775FC                  div [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046291F(U)
|
:0046292C 8BE5                    mov esp, ebp
:0046292E 5D                      pop ebp
:0046292F C3                      ret


:00462930 55                      push ebp
:00462931 8BEC                    mov ebp, esp
:00462933 8B4510                  mov eax, dword ptr [ebp+10]
:00462936 F7D0                    not eax
:00462938 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046293B 8B11                    mov edx, dword ptr [ecx]
:0046293D 23D0                    and edx, eax
:0046293F 8B4508                  mov eax, dword ptr [ebp+08]
:00462942 8910                    mov dword ptr [eax], edx
:00462944 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462947 F7D1                    not ecx
:00462949 83C101                  add ecx, 00000001
:0046294C 234D10                  and ecx, dword ptr [ebp+10]
:0046294F 8B550C                  mov edx, dword ptr [ebp+0C]
:00462952 0FAFD1                  imul edx, ecx
:00462955 8B4508                  mov eax, dword ptr [ebp+08]
:00462958 8B08                    mov ecx, dword ptr [eax]
:0046295A 0BCA                    or ecx, edx
:0046295C 8B5508                  mov edx, dword ptr [ebp+08]
:0046295F 890A                    mov dword ptr [edx], ecx
:00462961 5D                      pop ebp
:00462962 C3                      ret


:00462963 55                      push ebp
:00462964 8BEC                    mov ebp, esp
:00462966 51                      push ecx
:00462967 8B450C                  mov eax, dword ptr [ebp+0C]
:0046296A 25FFFF0000              and eax, 0000FFFF
:0046296F F7D0                    not eax
:00462971 83C001                  add eax, 00000001
:00462974 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462977 81E1FFFF0000            and ecx, 0000FFFF
:0046297D 23C1                    and eax, ecx
:0046297F 668945FC                mov word ptr [ebp-04], ax
:00462983 8B55FC                  mov edx, dword ptr [ebp-04]
:00462986 81E2FFFF0000            and edx, 0000FFFF
:0046298C 85D2                    test edx, edx
:0046298E 7505                    jne 00462995
:00462990 6633C0                  xor ax, ax
:00462993 EB1F                    jmp 004629B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046298E(C)
|
:00462995 8B4508                  mov eax, dword ptr [ebp+08]
:00462998 25FFFF0000              and eax, 0000FFFF
:0046299D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004629A0 81E1FFFF0000            and ecx, 0000FFFF
:004629A6 23C1                    and eax, ecx
:004629A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004629AB 81E1FFFF0000            and ecx, 0000FFFF
:004629B1 99                      cdq
:004629B2 F7F9                    idiv ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462993(U)
|
:004629B4 8BE5                    mov esp, ebp
:004629B6 5D                      pop ebp
:004629B7 C3                      ret


:004629B8 55                      push ebp
:004629B9 8BEC                    mov ebp, esp
:004629BB 8B4510                  mov eax, dword ptr [ebp+10]
:004629BE 25FFFF0000              and eax, 0000FFFF
:004629C3 F7D0                    not eax
:004629C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004629C8 668B11                  mov dx, word ptr [ecx]
:004629CB 6623D0                  and dx, ax
:004629CE 8B4508                  mov eax, dword ptr [ebp+08]
:004629D1 668910                  mov word ptr [eax], dx
:004629D4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004629D7 81E1FFFF0000            and ecx, 0000FFFF
:004629DD 8B5510                  mov edx, dword ptr [ebp+10]
:004629E0 81E2FFFF0000            and edx, 0000FFFF
:004629E6 F7D2                    not edx
:004629E8 83C201                  add edx, 00000001
:004629EB 8B4510                  mov eax, dword ptr [ebp+10]
:004629EE 25FFFF0000              and eax, 0000FFFF
:004629F3 23D0                    and edx, eax
:004629F5 0FAFCA                  imul ecx, edx
:004629F8 8B5508                  mov edx, dword ptr [ebp+08]
:004629FB 668B02                  mov ax, word ptr [edx]
:004629FE 660BC1                  or ax, cx
:00462A01 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462A04 668901                  mov word ptr [ecx], ax
:00462A07 5D                      pop ebp
:00462A08 C3                      ret



* Referenced by a CALL at Address:
|:004635F4   
|
:00462A09 55                      push ebp
:00462A0A 8BEC                    mov ebp, esp
:00462A0C 83EC30                  sub esp, 00000030
:00462A0F C745EC00000000          mov [ebp-14], 00000000
:00462A16 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462A5B(U), :00462A96(U), :00462E6F(U), :00462E74(U)
|
:00462A1D 8B450C                  mov eax, dword ptr [ebp+0C]
:00462A20 0FBE08                  movsx ecx, byte ptr [eax]
:00462A23 85C9                    test ecx, ecx
:00462A25 0F844E040000            je 00462E79
:00462A2B 8B550C                  mov edx, dword ptr [ebp+0C]
:00462A2E 0FBE02                  movsx eax, byte ptr [edx]
:00462A31 83F825                  cmp eax, 00000025
:00462A34 7427                    je 00462A5D
:00462A36 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462A39 0FBE11                  movsx edx, byte ptr [ecx]
:00462A3C 8955DC                  mov dword ptr [ebp-24], edx
:00462A3F 8B45DC                  mov eax, dword ptr [ebp-24]
:00462A42 50                      push eax
:00462A43 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462A46 83C101                  add ecx, 00000001
:00462A49 894D0C                  mov dword ptr [ebp+0C], ecx
:00462A4C FF5508                  call [ebp+08]
:00462A4F 83C404                  add esp, 00000004
:00462A52 8B55F8                  mov edx, dword ptr [ebp-08]
:00462A55 83C201                  add edx, 00000001
:00462A58 8955F8                  mov dword ptr [ebp-08], edx
:00462A5B EBC0                    jmp 00462A1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462A34(C)
|
:00462A5D 8B450C                  mov eax, dword ptr [ebp+0C]
:00462A60 83C001                  add eax, 00000001
:00462A63 89450C                  mov dword ptr [ebp+0C], eax
:00462A66 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462A69 0FBE11                  movsx edx, byte ptr [ecx]
:00462A6C 83FA25                  cmp edx, 00000025
:00462A6F 7527                    jne 00462A98
:00462A71 8B450C                  mov eax, dword ptr [ebp+0C]
:00462A74 0FBE08                  movsx ecx, byte ptr [eax]
:00462A77 894DD8                  mov dword ptr [ebp-28], ecx
:00462A7A 8B55D8                  mov edx, dword ptr [ebp-28]
:00462A7D 52                      push edx
:00462A7E 8B450C                  mov eax, dword ptr [ebp+0C]
:00462A81 83C001                  add eax, 00000001
:00462A84 89450C                  mov dword ptr [ebp+0C], eax
:00462A87 FF5508                  call [ebp+08]
:00462A8A 83C404                  add esp, 00000004
:00462A8D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462A90 83C101                  add ecx, 00000001
:00462A93 894DF8                  mov dword ptr [ebp-08], ecx
:00462A96 EB85                    jmp 00462A1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462A6F(C)
|
:00462A98 8D550C                  lea edx, dword ptr [ebp+0C]
:00462A9B 52                      push edx
:00462A9C E824040000              call 00462EC5
:00462AA1 83C404                  add esp, 00000004
:00462AA4 8945F0                  mov dword ptr [ebp-10], eax
:00462AA7 8D450C                  lea eax, dword ptr [ebp+0C]
:00462AAA 50                      push eax
:00462AAB E865050000              call 00463015
:00462AB0 83C404                  add esp, 00000004
:00462AB3 8945FC                  mov dword ptr [ebp-04], eax
:00462AB6 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00462ABA 7512                    jne 00462ACE
:00462ABC 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462ABF 83C104                  add ecx, 00000004
:00462AC2 894D10                  mov dword ptr [ebp+10], ecx
:00462AC5 8B5510                  mov edx, dword ptr [ebp+10]
:00462AC8 8B42FC                  mov eax, dword ptr [edx-04]
:00462ACB 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462ABA(C)
|
:00462ACE 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:00462AD1 51                      push ecx
:00462AD2 E8AD050000              call 00463084
:00462AD7 83C404                  add esp, 00000004
:00462ADA 8945E8                  mov dword ptr [ebp-18], eax
:00462ADD 837DE8FF                cmp dword ptr [ebp-18], FFFFFFFF
:00462AE1 7512                    jne 00462AF5
:00462AE3 8B5510                  mov edx, dword ptr [ebp+10]
:00462AE6 83C204                  add edx, 00000004
:00462AE9 895510                  mov dword ptr [ebp+10], edx
:00462AEC 8B4510                  mov eax, dword ptr [ebp+10]
:00462AEF 8B48FC                  mov ecx, dword ptr [eax-04]
:00462AF2 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462AE1(C)
|
:00462AF5 8D550C                  lea edx, dword ptr [ebp+0C]
:00462AF8 52                      push edx
:00462AF9 E8C1050000              call 004630BF
:00462AFE 83C404                  add esp, 00000004
:00462B01 8945F4                  mov dword ptr [ebp-0C], eax
:00462B04 8B450C                  mov eax, dword ptr [ebp+0C]
:00462B07 0FBE08                  movsx ecx, byte ptr [eax]
:00462B0A 894DD4                  mov dword ptr [ebp-2C], ecx
:00462B0D 8B550C                  mov edx, dword ptr [ebp+0C]
:00462B10 83C201                  add edx, 00000001
:00462B13 89550C                  mov dword ptr [ebp+0C], edx
:00462B16 8B45D4                  mov eax, dword ptr [ebp-2C]
:00462B19 8945D0                  mov dword ptr [ebp-30], eax
:00462B1C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00462B1F 83E958                  sub ecx, 00000058
:00462B22 894DD0                  mov dword ptr [ebp-30], ecx
:00462B25 837DD020                cmp dword ptr [ebp-30], 00000020
:00462B29 0F8740030000            ja 00462E6F
:00462B2F 8B45D0                  mov eax, dword ptr [ebp-30]
:00462B32 33D2                    xor edx, edx
:00462B34 8A90A42E4600            mov dl, byte ptr [eax+00462EA4]
:00462B3A FF2495802E4600          jmp dword ptr [4*edx+00462E80]
:00462B41 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462B44 83E1EF                  and ecx, FFFFFFEF
:00462B47 894DF0                  mov dword ptr [ebp-10], ecx
:00462B4A 837DF401                cmp dword ptr [ebp-0C], 00000001
:00462B4E 755B                    jne 00462BAB
:00462B50 8B5510                  mov edx, dword ptr [ebp+10]
:00462B53 83C204                  add edx, 00000004
:00462B56 895510                  mov dword ptr [ebp+10], edx
:00462B59 8B4510                  mov eax, dword ptr [ebp+10]
:00462B5C 8B48FC                  mov ecx, dword ptr [eax-04]
:00462B5F 894DE4                  mov dword ptr [ebp-1C], ecx
:00462B62 837DE400                cmp dword ptr [ebp-1C], 00000000
:00462B66 7D19                    jge 00462B81
:00462B68 8B55E4                  mov edx, dword ptr [ebp-1C]
:00462B6B F7DA                    neg edx
:00462B6D 8955E4                  mov dword ptr [ebp-1C], edx
:00462B70 8B45F0                  mov eax, dword ptr [ebp-10]
:00462B73 0C40                    or al, 40
:00462B75 8945F0                  mov dword ptr [ebp-10], eax
:00462B78 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462B7B 83E1FD                  and ecx, FFFFFFFD
:00462B7E 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462B66(C)
|
:00462B81 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00462B83 6A0A                    push 0000000A
:00462B85 8B55E8                  mov edx, dword ptr [ebp-18]
:00462B88 52                      push edx
:00462B89 8B45FC                  mov eax, dword ptr [ebp-04]
:00462B8C 50                      push eax
:00462B8D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462B90 51                      push ecx
:00462B91 8B55E4                  mov edx, dword ptr [ebp-1C]
:00462B94 52                      push edx
:00462B95 8B4508                  mov eax, dword ptr [ebp+08]
:00462B98 50                      push eax
:00462B99 E8DC050000              call 0046317A
:00462B9E 83C41C                  add esp, 0000001C
:00462BA1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462BA4 03C8                    add ecx, eax
:00462BA6 894DF8                  mov dword ptr [ebp-08], ecx
:00462BA9 EB59                    jmp 00462C04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462B4E(C)
|
:00462BAB 8B5510                  mov edx, dword ptr [ebp+10]
:00462BAE 83C204                  add edx, 00000004
:00462BB1 895510                  mov dword ptr [ebp+10], edx
:00462BB4 8B4510                  mov eax, dword ptr [ebp+10]
:00462BB7 8B48FC                  mov ecx, dword ptr [eax-04]
:00462BBA 894DE0                  mov dword ptr [ebp-20], ecx
:00462BBD 837DE000                cmp dword ptr [ebp-20], 00000000
:00462BC1 7D19                    jge 00462BDC
:00462BC3 8B55E0                  mov edx, dword ptr [ebp-20]
:00462BC6 F7DA                    neg edx
:00462BC8 8955E0                  mov dword ptr [ebp-20], edx
:00462BCB 8B45F0                  mov eax, dword ptr [ebp-10]
:00462BCE 0C40                    or al, 40
:00462BD0 8945F0                  mov dword ptr [ebp-10], eax
:00462BD3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462BD6 83E1FD                  and ecx, FFFFFFFD
:00462BD9 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462BC1(C)
|
:00462BDC 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00462BDE 6A0A                    push 0000000A
:00462BE0 8B55E8                  mov edx, dword ptr [ebp-18]
:00462BE3 52                      push edx
:00462BE4 8B45FC                  mov eax, dword ptr [ebp-04]
:00462BE7 50                      push eax
:00462BE8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462BEB 51                      push ecx
:00462BEC 8B55E0                  mov edx, dword ptr [ebp-20]
:00462BEF 52                      push edx
:00462BF0 8B4508                  mov eax, dword ptr [ebp+08]
:00462BF3 50                      push eax
:00462BF4 E881050000              call 0046317A
:00462BF9 83C41C                  add esp, 0000001C
:00462BFC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462BFF 03C8                    add ecx, eax
:00462C01 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462BA9(U)
|
:00462C04 E96B020000              jmp 00462E74
:00462C09 8B55F0                  mov edx, dword ptr [ebp-10]
:00462C0C 83E2EF                  and edx, FFFFFFEF
:00462C0F 8955F0                  mov dword ptr [ebp-10], edx
:00462C12 837DF401                cmp dword ptr [ebp-0C], 00000001
:00462C16 7536                    jne 00462C4E
:00462C18 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00462C1A 6A0A                    push 0000000A
:00462C1C 8B45E8                  mov eax, dword ptr [ebp-18]
:00462C1F 50                      push eax
:00462C20 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462C23 51                      push ecx
:00462C24 8B55F0                  mov edx, dword ptr [ebp-10]
:00462C27 52                      push edx
:00462C28 8B4510                  mov eax, dword ptr [ebp+10]
:00462C2B 83C004                  add eax, 00000004
:00462C2E 894510                  mov dword ptr [ebp+10], eax
:00462C31 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462C34 8B51FC                  mov edx, dword ptr [ecx-04]
:00462C37 52                      push edx
:00462C38 8B4508                  mov eax, dword ptr [ebp+08]
:00462C3B 50                      push eax
:00462C3C E839050000              call 0046317A
:00462C41 83C41C                  add esp, 0000001C
:00462C44 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462C47 03C8                    add ecx, eax
:00462C49 894DF8                  mov dword ptr [ebp-08], ecx
:00462C4C EB34                    jmp 00462C82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462C16(C)
|
:00462C4E 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00462C50 6A0A                    push 0000000A
:00462C52 8B55E8                  mov edx, dword ptr [ebp-18]
:00462C55 52                      push edx
:00462C56 8B45FC                  mov eax, dword ptr [ebp-04]
:00462C59 50                      push eax
:00462C5A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462C5D 51                      push ecx
:00462C5E 8B5510                  mov edx, dword ptr [ebp+10]
:00462C61 83C204                  add edx, 00000004
:00462C64 895510                  mov dword ptr [ebp+10], edx
:00462C67 8B4510                  mov eax, dword ptr [ebp+10]
:00462C6A 8B48FC                  mov ecx, dword ptr [eax-04]
:00462C6D 51                      push ecx
:00462C6E 8B5508                  mov edx, dword ptr [ebp+08]
:00462C71 52                      push edx
:00462C72 E803050000              call 0046317A
:00462C77 83C41C                  add esp, 0000001C
:00462C7A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462C7D 03C8                    add ecx, eax
:00462C7F 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462C4C(U)
|
:00462C82 E9ED010000              jmp 00462E74
:00462C87 8B55F0                  mov edx, dword ptr [ebp-10]
:00462C8A 83E2F5                  and edx, FFFFFFF5
:00462C8D 8955F0                  mov dword ptr [ebp-10], edx
:00462C90 837DF401                cmp dword ptr [ebp-0C], 00000001
:00462C94 7536                    jne 00462CCC
:00462C96 6A00                    push 00000000

* Possible Reference to String Resource ID=00008: ""
                                  |
:00462C98 6A08                    push 00000008
:00462C9A 8B45E8                  mov eax, dword ptr [ebp-18]
:00462C9D 50                      push eax
:00462C9E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462CA1 51                      push ecx
:00462CA2 8B55F0                  mov edx, dword ptr [ebp-10]
:00462CA5 52                      push edx
:00462CA6 8B4510                  mov eax, dword ptr [ebp+10]
:00462CA9 83C004                  add eax, 00000004
:00462CAC 894510                  mov dword ptr [ebp+10], eax
:00462CAF 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462CB2 8B51FC                  mov edx, dword ptr [ecx-04]
:00462CB5 52                      push edx
:00462CB6 8B4508                  mov eax, dword ptr [ebp+08]
:00462CB9 50                      push eax
:00462CBA E8BB040000              call 0046317A
:00462CBF 83C41C                  add esp, 0000001C
:00462CC2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462CC5 03C8                    add ecx, eax
:00462CC7 894DF8                  mov dword ptr [ebp-08], ecx
:00462CCA EB34                    jmp 00462D00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462C94(C)
|
:00462CCC 6A00                    push 00000000

* Possible Reference to String Resource ID=00008: ""
                                  |
:00462CCE 6A08                    push 00000008
:00462CD0 8B55E8                  mov edx, dword ptr [ebp-18]
:00462CD3 52                      push edx
:00462CD4 8B45FC                  mov eax, dword ptr [ebp-04]
:00462CD7 50                      push eax
:00462CD8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462CDB 51                      push ecx
:00462CDC 8B5510                  mov edx, dword ptr [ebp+10]
:00462CDF 83C204                  add edx, 00000004
:00462CE2 895510                  mov dword ptr [ebp+10], edx
:00462CE5 8B4510                  mov eax, dword ptr [ebp+10]
:00462CE8 8B48FC                  mov ecx, dword ptr [eax-04]
:00462CEB 51                      push ecx
:00462CEC 8B5508                  mov edx, dword ptr [ebp+08]
:00462CEF 52                      push edx
:00462CF0 E885040000              call 0046317A
:00462CF5 83C41C                  add esp, 0000001C
:00462CF8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462CFB 03C8                    add ecx, eax
:00462CFD 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462CCA(U)
|
:00462D00 E96F010000              jmp 00462E74
:00462D05 C745EC20000000          mov [ebp-14], 00000020
:00462D0C 8B55F0                  mov edx, dword ptr [ebp-10]
:00462D0F 83E2F5                  and edx, FFFFFFF5
:00462D12 8955F0                  mov dword ptr [ebp-10], edx
:00462D15 8B45F0                  mov eax, dword ptr [ebp-10]
:00462D18 83E010                  and eax, 00000010
:00462D1B 85C0                    test eax, eax
:00462D1D 7409                    je 00462D28
:00462D1F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462D22 83C920                  or ecx, 00000020
:00462D25 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D1D(C)
|
:00462D28 837DF401                cmp dword ptr [ebp-0C], 00000001
:00462D2C 7538                    jne 00462D66
:00462D2E 8B55EC                  mov edx, dword ptr [ebp-14]
:00462D31 52                      push edx

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00462D32 6A10                    push 00000010
:00462D34 8B45E8                  mov eax, dword ptr [ebp-18]
:00462D37 50                      push eax
:00462D38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462D3B 51                      push ecx
:00462D3C 8B55F0                  mov edx, dword ptr [ebp-10]
:00462D3F 52                      push edx
:00462D40 8B4510                  mov eax, dword ptr [ebp+10]
:00462D43 83C004                  add eax, 00000004
:00462D46 894510                  mov dword ptr [ebp+10], eax
:00462D49 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462D4C 8B51FC                  mov edx, dword ptr [ecx-04]
:00462D4F 52                      push edx
:00462D50 8B4508                  mov eax, dword ptr [ebp+08]
:00462D53 50                      push eax
:00462D54 E821040000              call 0046317A
:00462D59 83C41C                  add esp, 0000001C
:00462D5C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462D5F 03C8                    add ecx, eax
:00462D61 894DF8                  mov dword ptr [ebp-08], ecx
:00462D64 EB36                    jmp 00462D9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D2C(C)
|
:00462D66 8B55EC                  mov edx, dword ptr [ebp-14]
:00462D69 52                      push edx

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00462D6A 6A10                    push 00000010
:00462D6C 8B45E8                  mov eax, dword ptr [ebp-18]
:00462D6F 50                      push eax
:00462D70 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462D73 51                      push ecx
:00462D74 8B55F0                  mov edx, dword ptr [ebp-10]
:00462D77 52                      push edx
:00462D78 8B4510                  mov eax, dword ptr [ebp+10]
:00462D7B 83C004                  add eax, 00000004
:00462D7E 894510                  mov dword ptr [ebp+10], eax
:00462D81 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462D84 8B51FC                  mov edx, dword ptr [ecx-04]
:00462D87 52                      push edx
:00462D88 8B4508                  mov eax, dword ptr [ebp+08]
:00462D8B 50                      push eax
:00462D8C E8E9030000              call 0046317A
:00462D91 83C41C                  add esp, 0000001C
:00462D94 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462D97 03C8                    add ecx, eax
:00462D99 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D64(U)
|
:00462D9C C745EC00000000          mov [ebp-14], 00000000
:00462DA3 E9CC000000              jmp 00462E74
:00462DA8 8B5510                  mov edx, dword ptr [ebp+10]
:00462DAB 83C204                  add edx, 00000004
:00462DAE 895510                  mov dword ptr [ebp+10], edx
:00462DB1 8B4510                  mov eax, dword ptr [ebp+10]
:00462DB4 0FBE48FC                movsx ecx, byte ptr [eax-04]
:00462DB8 51                      push ecx
:00462DB9 FF5508                  call [ebp+08]
:00462DBC 83C404                  add esp, 00000004
:00462DBF 8B55F8                  mov edx, dword ptr [ebp-08]
:00462DC2 83C201                  add edx, 00000001
:00462DC5 8955F8                  mov dword ptr [ebp-08], edx
:00462DC8 E9A7000000              jmp 00462E74
:00462DCD 837DF402                cmp dword ptr [ebp-0C], 00000002
:00462DD1 7532                    jne 00462E05
:00462DD3 8B45E8                  mov eax, dword ptr [ebp-18]
:00462DD6 50                      push eax
:00462DD7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462DDA 51                      push ecx
:00462DDB 8B55F0                  mov edx, dword ptr [ebp-10]
:00462DDE 52                      push edx
:00462DDF 8B4510                  mov eax, dword ptr [ebp+10]
:00462DE2 83C004                  add eax, 00000004
:00462DE5 894510                  mov dword ptr [ebp+10], eax
:00462DE8 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462DEB 8B51FC                  mov edx, dword ptr [ecx-04]
:00462DEE 52                      push edx
:00462DEF 8B4508                  mov eax, dword ptr [ebp+08]
:00462DF2 50                      push eax
:00462DF3 E887060000              call 0046347F
:00462DF8 83C414                  add esp, 00000014
:00462DFB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462DFE 03C8                    add ecx, eax
:00462E00 894DF8                  mov dword ptr [ebp-08], ecx
:00462E03 EB68                    jmp 00462E6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462DD1(C)
|
:00462E05 837DF403                cmp dword ptr [ebp-0C], 00000003
:00462E09 7532                    jne 00462E3D
:00462E0B 8B55E8                  mov edx, dword ptr [ebp-18]
:00462E0E 52                      push edx
:00462E0F 8B45FC                  mov eax, dword ptr [ebp-04]
:00462E12 50                      push eax
:00462E13 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462E16 51                      push ecx
:00462E17 8B5510                  mov edx, dword ptr [ebp+10]
:00462E1A 83C204                  add edx, 00000004
:00462E1D 895510                  mov dword ptr [ebp+10], edx
:00462E20 8B4510                  mov eax, dword ptr [ebp+10]
:00462E23 8B48FC                  mov ecx, dword ptr [eax-04]
:00462E26 51                      push ecx
:00462E27 8B5508                  mov edx, dword ptr [ebp+08]
:00462E2A 52                      push edx
:00462E2B E84F060000              call 0046347F
:00462E30 83C414                  add esp, 00000014
:00462E33 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462E36 03C8                    add ecx, eax
:00462E38 894DF8                  mov dword ptr [ebp-08], ecx
:00462E3B EB30                    jmp 00462E6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462E09(C)
|
:00462E3D 8B55E8                  mov edx, dword ptr [ebp-18]
:00462E40 52                      push edx
:00462E41 8B45FC                  mov eax, dword ptr [ebp-04]
:00462E44 50                      push eax
:00462E45 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462E48 51                      push ecx
:00462E49 8B5510                  mov edx, dword ptr [ebp+10]
:00462E4C 83C204                  add edx, 00000004
:00462E4F 895510                  mov dword ptr [ebp+10], edx
:00462E52 8B4510                  mov eax, dword ptr [ebp+10]
:00462E55 8B48FC                  mov ecx, dword ptr [eax-04]
:00462E58 51                      push ecx
:00462E59 8B5508                  mov edx, dword ptr [ebp+08]
:00462E5C 52                      push edx
:00462E5D E81D060000              call 0046347F
:00462E62 83C414                  add esp, 00000014
:00462E65 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462E68 03C8                    add ecx, eax
:00462E6A 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462E03(U), :00462E3B(U)
|
:00462E6D EB05                    jmp 00462E74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462B29(C)
|
:00462E6F E9A9FBFFFF              jmp 00462A1D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462C04(U), :00462C82(U), :00462D00(U), :00462DA3(U), :00462DC8(U)
|:00462E6D(U)
|
:00462E74 E9A4FBFFFF              jmp 00462A1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462A25(C)
|
:00462E79 8B45F8                  mov eax, dword ptr [ebp-08]
:00462E7C 8BE5                    mov esp, ebp
:00462E7E 5D                      pop ebp
:00462E7F C3                      ret



:00462E80 0C2D4600                DWORD 00462D0C
:00462E84 A82D4600                DWORD 00462DA8
:00462E88 412B4600                DWORD 00462B41
:00462E8C 412B4600                DWORD 00462B41
:00462E90 872C4600                DWORD 00462C87
:00462E94 CD2D4600                DWORD 00462DCD
:00462E98 092C4600                DWORD 00462C09
:00462E9C 052D4600                DWORD 00462D05
:00462EA0 6F2E4600                DWORD 00462E6F


:00462EA4 0008                    add byte ptr [eax], cl
:00462EA6 0808                    or byte ptr [eax], cl
:00462EA8 0808                    or byte ptr [eax], cl
:00462EAA 0808                    or byte ptr [eax], cl
:00462EAC 0808                    or byte ptr [eax], cl
:00462EAE 0801                    or byte ptr [ecx], al
:00462EB0 0208                    add cl, byte ptr [eax]
:00462EB2 0808                    or byte ptr [eax], cl
:00462EB4 0803                    or byte ptr [ebx], al
:00462EB6 0808                    or byte ptr [eax], cl
:00462EB8 0808                    or byte ptr [eax], cl
:00462EBA 080408                  or byte ptr [eax+ecx], al
:00462EBD 0808                    or byte ptr [eax], cl
:00462EBF 0508060808              add eax, 08080608
:00462EC4 07                      pop es

* Referenced by a CALL at Address:
|:00462A9C   
|
:00462EC5 55                      push ebp
:00462EC6 8BEC                    mov ebp, esp
:00462EC8 83EC0C                  sub esp, 0000000C
:00462ECB C745F800000000          mov [ebp-08], 00000000
:00462ED2 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462FA8(U)
|
:00462ED9 837DF800                cmp dword ptr [ebp-08], 00000000
:00462EDD 0F85CA000000            jne 00462FAD
:00462EE3 8B4508                  mov eax, dword ptr [ebp+08]
:00462EE6 8B08                    mov ecx, dword ptr [eax]
:00462EE8 0FBE11                  movsx edx, byte ptr [ecx]
:00462EEB 8955F4                  mov dword ptr [ebp-0C], edx
:00462EEE 8B45F4                  mov eax, dword ptr [ebp-0C]
:00462EF1 83E820                  sub eax, 00000020
:00462EF4 8945F4                  mov dword ptr [ebp-0C], eax
:00462EF7 837DF41D                cmp dword ptr [ebp-0C], 0000001D
:00462EFB 0F87A0000000            ja 00462FA1
:00462F01 8B55F4                  mov edx, dword ptr [ebp-0C]
:00462F04 33C9                    xor ecx, ecx
:00462F06 8A8AF72F4600            mov cl, byte ptr [edx+00462FF7]
:00462F0C FF248DDB2F4600          jmp dword ptr [4*ecx+00462FDB]
:00462F13 8B45FC                  mov eax, dword ptr [ebp-04]
:00462F16 0C01                    or al, 01
:00462F18 8945FC                  mov dword ptr [ebp-04], eax
:00462F1B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462F1E 8B11                    mov edx, dword ptr [ecx]
:00462F20 83C201                  add edx, 00000001
:00462F23 8B4508                  mov eax, dword ptr [ebp+08]
:00462F26 8910                    mov dword ptr [eax], edx
:00462F28 EB7E                    jmp 00462FA8
:00462F2A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462F2D 83C902                  or ecx, 00000002
:00462F30 894DFC                  mov dword ptr [ebp-04], ecx
:00462F33 8B5508                  mov edx, dword ptr [ebp+08]
:00462F36 8B02                    mov eax, dword ptr [edx]
:00462F38 83C001                  add eax, 00000001
:00462F3B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462F3E 8901                    mov dword ptr [ecx], eax
:00462F40 EB66                    jmp 00462FA8
:00462F42 8B55FC                  mov edx, dword ptr [ebp-04]
:00462F45 83CA04                  or edx, 00000004
:00462F48 8955FC                  mov dword ptr [ebp-04], edx
:00462F4B 8B4508                  mov eax, dword ptr [ebp+08]
:00462F4E 8B08                    mov ecx, dword ptr [eax]
:00462F50 83C101                  add ecx, 00000001
:00462F53 8B5508                  mov edx, dword ptr [ebp+08]
:00462F56 890A                    mov dword ptr [edx], ecx
:00462F58 EB4E                    jmp 00462FA8
:00462F5A 8B45FC                  mov eax, dword ptr [ebp-04]
:00462F5D 0C08                    or al, 08
:00462F5F 8945FC                  mov dword ptr [ebp-04], eax
:00462F62 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462F65 8B11                    mov edx, dword ptr [ecx]
:00462F67 83C201                  add edx, 00000001
:00462F6A 8B4508                  mov eax, dword ptr [ebp+08]
:00462F6D 8910                    mov dword ptr [eax], edx
:00462F6F EB37                    jmp 00462FA8
:00462F71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462F74 83C910                  or ecx, 00000010
:00462F77 894DFC                  mov dword ptr [ebp-04], ecx
:00462F7A 8B5508                  mov edx, dword ptr [ebp+08]
:00462F7D 8B02                    mov eax, dword ptr [edx]
:00462F7F 83C001                  add eax, 00000001
:00462F82 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462F85 8901                    mov dword ptr [ecx], eax
:00462F87 EB1F                    jmp 00462FA8
:00462F89 8B55FC                  mov edx, dword ptr [ebp-04]
:00462F8C 80CA80                  or dl, 80
:00462F8F 8955FC                  mov dword ptr [ebp-04], edx
:00462F92 8B4508                  mov eax, dword ptr [ebp+08]
:00462F95 8B08                    mov ecx, dword ptr [eax]
:00462F97 83C101                  add ecx, 00000001
:00462F9A 8B5508                  mov edx, dword ptr [ebp+08]
:00462F9D 890A                    mov dword ptr [edx], ecx
:00462F9F EB07                    jmp 00462FA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462EFB(C)
|
:00462FA1 C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462F28(U), :00462F40(U), :00462F58(U), :00462F6F(U), :00462F87(U)
|:00462F9F(U)
|
:00462FA8 E92CFFFFFF              jmp 00462ED9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462EDD(C)
|
:00462FAD 8B45FC                  mov eax, dword ptr [ebp-04]
:00462FB0 2581000000              and eax, 00000081
:00462FB5 85C0                    test eax, eax
:00462FB7 7409                    je 00462FC2
:00462FB9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462FBC 83E1FB                  and ecx, FFFFFFFB
:00462FBF 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462FB7(C)
|
:00462FC2 8B55FC                  mov edx, dword ptr [ebp-04]
:00462FC5 83E202                  and edx, 00000002
:00462FC8 85D2                    test edx, edx
:00462FCA 7408                    je 00462FD4
:00462FCC 8B45FC                  mov eax, dword ptr [ebp-04]
:00462FCF 24F7                    and al, F7
:00462FD1 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462FCA(C)
|
:00462FD4 8B45FC                  mov eax, dword ptr [ebp-04]
:00462FD7 8BE5                    mov esp, ebp
:00462FD9 5D                      pop ebp
:00462FDA C3                      ret



:00462FDB 5A2F4600                DWORD 00462F5A
:00462FDF 712F4600                DWORD 00462F71
:00462FE3 2A2F4600                DWORD 00462F2A
:00462FE7 132F4600                DWORD 00462F13
:00462FEB 422F4600                DWORD 00462F42
:00462FEF 892F4600                DWORD 00462F89
:00462FF3 A12F4600                DWORD 00462FA1


:00462FF7 0006                    add byte ptr [esi], al
:00462FF9 06                      push es
:00462FFA 0106                    add dword ptr [esi], eax
:00462FFC 06                      push es
:00462FFD 06                      push es
:00462FFE 06                      push es
:00462FFF 06                      push es
:00463000 06                      push es
:00463001 06                      push es
:00463002 0206                    add al, byte ptr [esi]
:00463004 0306                    add eax, dword ptr [esi]
:00463006 06                      push es
:00463007 0406                    add al, 06
:00463009 06                      push es
:0046300A 06                      push es
:0046300B 06                      push es
:0046300C 06                      push es
:0046300D 06                      push es
:0046300E 06                      push es
:0046300F 06                      push es
:00463010 06                      push es
:00463011 06                      push es
:00463012 06                      push es
:00463013 06                      push es
:00463014 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:00462AAB   , :004630AD   
|
:00463015 55                      push ebp
:00463016 8BEC                    mov ebp, esp
:00463018 51                      push ecx
:00463019 C745FC00000000          mov [ebp-04], 00000000
:00463020 8B4508                  mov eax, dword ptr [ebp+08]
:00463023 8B08                    mov ecx, dword ptr [eax]
:00463025 0FBE11                  movsx edx, byte ptr [ecx]
:00463028 83FA2A                  cmp edx, 0000002A
:0046302B 7512                    jne 0046303F
:0046302D 8B4508                  mov eax, dword ptr [ebp+08]
:00463030 8B08                    mov ecx, dword ptr [eax]
:00463032 83C101                  add ecx, 00000001
:00463035 8B5508                  mov edx, dword ptr [ebp+08]
:00463038 890A                    mov dword ptr [edx], ecx
:0046303A 83C8FF                  or eax, FFFFFFFF
:0046303D EB41                    jmp 00463080

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046302B(C), :0046307B(U)
|
:0046303F 8B4508                  mov eax, dword ptr [ebp+08]
:00463042 8B08                    mov ecx, dword ptr [eax]
:00463044 0FBE11                  movsx edx, byte ptr [ecx]
:00463047 83FA30                  cmp edx, 00000030
:0046304A 7C31                    jl 0046307D
:0046304C 8B4508                  mov eax, dword ptr [ebp+08]
:0046304F 8B08                    mov ecx, dword ptr [eax]
:00463051 0FBE11                  movsx edx, byte ptr [ecx]
:00463054 83FA39                  cmp edx, 00000039
:00463057 7F24                    jg 0046307D
:00463059 8B45FC                  mov eax, dword ptr [ebp-04]
:0046305C 6BC00A                  imul eax, 0000000A
:0046305F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463062 8B11                    mov edx, dword ptr [ecx]
:00463064 0FBE0A                  movsx ecx, byte ptr [edx]
:00463067 8D5408D0                lea edx, dword ptr [eax+ecx-30]
:0046306B 8955FC                  mov dword ptr [ebp-04], edx
:0046306E 8B4508                  mov eax, dword ptr [ebp+08]
:00463071 8B08                    mov ecx, dword ptr [eax]
:00463073 83C101                  add ecx, 00000001
:00463076 8B5508                  mov edx, dword ptr [ebp+08]
:00463079 890A                    mov dword ptr [edx], ecx
:0046307B EBC2                    jmp 0046303F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046304A(C), :00463057(C)
|
:0046307D 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046303D(U)
|
:00463080 8BE5                    mov esp, ebp
:00463082 5D                      pop ebp
:00463083 C3                      ret



* Referenced by a CALL at Address:
|:00462AD2   
|
:00463084 55                      push ebp
:00463085 8BEC                    mov ebp, esp
:00463087 51                      push ecx
:00463088 C745FC00000000          mov [ebp-04], 00000000
:0046308F 8B4508                  mov eax, dword ptr [ebp+08]
:00463092 8B08                    mov ecx, dword ptr [eax]
:00463094 0FBE11                  movsx edx, byte ptr [ecx]
:00463097 83FA2E                  cmp edx, 0000002E
:0046309A 751C                    jne 004630B8
:0046309C 8B4508                  mov eax, dword ptr [ebp+08]
:0046309F 8B08                    mov ecx, dword ptr [eax]
:004630A1 83C101                  add ecx, 00000001
:004630A4 8B5508                  mov edx, dword ptr [ebp+08]
:004630A7 890A                    mov dword ptr [edx], ecx
:004630A9 8B4508                  mov eax, dword ptr [ebp+08]
:004630AC 50                      push eax
:004630AD E863FFFFFF              call 00463015
:004630B2 83C404                  add esp, 00000004
:004630B5 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046309A(C)
|
:004630B8 8B45FC                  mov eax, dword ptr [ebp-04]
:004630BB 8BE5                    mov esp, ebp
:004630BD 5D                      pop ebp
:004630BE C3                      ret



* Referenced by a CALL at Address:
|:00462AF9   
|
:004630BF 55                      push ebp
:004630C0 8BEC                    mov ebp, esp
:004630C2 83EC08                  sub esp, 00000008
:004630C5 C745FC00000000          mov [ebp-04], 00000000
:004630CC 8B4508                  mov eax, dword ptr [ebp+08]
:004630CF 8B08                    mov ecx, dword ptr [eax]
:004630D1 0FBE11                  movsx edx, byte ptr [ecx]
:004630D4 8955F8                  mov dword ptr [ebp-08], edx
:004630D7 8B45F8                  mov eax, dword ptr [ebp-08]
:004630DA 83E846                  sub eax, 00000046
:004630DD 8945F8                  mov dword ptr [ebp-08], eax
:004630E0 837DF826                cmp dword ptr [ebp-08], 00000026
:004630E4 7752                    ja 00463138
:004630E6 8B55F8                  mov edx, dword ptr [ebp-08]
:004630E9 33C9                    xor ecx, ecx
:004630EB 8A8A53314600            mov cl, byte ptr [edx+00463153]
:004630F1 FF248D3F314600          jmp dword ptr [4*ecx+0046313F]
:004630F8 C745FC01000000          mov [ebp-04], 00000001
:004630FF 8B4508                  mov eax, dword ptr [ebp+08]
:00463102 8B08                    mov ecx, dword ptr [eax]
:00463104 83C101                  add ecx, 00000001
:00463107 8B5508                  mov edx, dword ptr [ebp+08]
:0046310A 890A                    mov dword ptr [edx], ecx
:0046310C EB2A                    jmp 00463138

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0046310E C745FC02000000          mov [ebp-04], 00000002
:00463115 8B4508                  mov eax, dword ptr [ebp+08]
:00463118 8B08                    mov ecx, dword ptr [eax]
:0046311A 83C101                  add ecx, 00000001
:0046311D 8B5508                  mov edx, dword ptr [ebp+08]
:00463120 890A                    mov dword ptr [edx], ecx
:00463122 EB14                    jmp 00463138

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00463124 C745FC03000000          mov [ebp-04], 00000003
:0046312B 8B4508                  mov eax, dword ptr [ebp+08]
:0046312E 8B08                    mov ecx, dword ptr [eax]
:00463130 83C101                  add ecx, 00000001
:00463133 8B5508                  mov edx, dword ptr [ebp+08]
:00463136 890A                    mov dword ptr [edx], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004630E4(C), :0046310C(U), :00463122(U)
|
:00463138 8B45FC                  mov eax, dword ptr [ebp-04]
:0046313B 8BE5                    mov esp, ebp
:0046313D 5D                      pop ebp
:0046313E C3                      ret



:0046313F 0E314600                DWORD 0046310E
:00463143 24314600                DWORD 00463124
:00463147 FF304600                DWORD 004630FF
:0046314B F8304600                DWORD 004630F8
:0046314F 38314600                DWORD 00463138


:00463153 000404                  add byte ptr [esp+eax], al
:00463156 0404                    add al, 04
:00463158 0404                    add al, 04
:0046315A 0401                    add al, 01
:0046315C 0404                    add al, 04
:0046315E 0404                    add al, 04
:00463160 0404                    add al, 04
:00463162 0404                    add al, 04
:00463164 0404                    add al, 04
:00463166 0404                    add al, 04
:00463168 0404                    add al, 04
:0046316A 0404                    add al, 04
:0046316C 0404                    add al, 04
:0046316E 0404                    add al, 04
:00463170 0404                    add al, 04
:00463172 0404                    add al, 04
:00463174 0402                    add al, 02
:00463176 0404                    add al, 04
:00463178 0403                    add al, 03

* Referenced by a CALL at Addresses:
|:00462B99   , :00462BF4   , :00462C3C   , :00462C72   , :00462CBA   
|:00462CF0   , :00462D54   , :00462D8C   
|
:0046317A 55                      push ebp
:0046317B 8BEC                    mov ebp, esp
:0046317D 83EC1C                  sub esp, 0000001C
:00463180 C645F800                mov [ebp-08], 00
:00463184 C745FC00000000          mov [ebp-04], 00000000
:0046318B 8B4510                  mov eax, dword ptr [ebp+10]
:0046318E 83E002                  and eax, 00000002
:00463191 85C0                    test eax, eax
:00463193 7404                    je 00463199
:00463195 C645F82B                mov [ebp-08], 2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463193(C)
|
:00463199 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046319C 83E108                  and ecx, 00000008
:0046319F 85C9                    test ecx, ecx
:004631A1 7404                    je 004631A7
:004631A3 C645F820                mov [ebp-08], 20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004631A1(C)
|
:004631A7 8B5510                  mov edx, dword ptr [ebp+10]
:004631AA 83E210                  and edx, 00000010
:004631AD 85D2                    test edx, edx
:004631AF 7404                    je 004631B5
:004631B1 C645F830                mov [ebp-08], 30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004631AF(C)
|
:004631B5 8B4510                  mov eax, dword ptr [ebp+10]
:004631B8 83E040                  and eax, 00000040
:004631BB 85C0                    test eax, eax
:004631BD 7404                    je 004631C3
:004631BF C645F82D                mov [ebp-08], 2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004631BD(C)
|
:004631C3 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:004631C6 51                      push ecx
:004631C7 8D55EC                  lea edx, dword ptr [ebp-14]
:004631CA 52                      push edx
:004631CB 8B450C                  mov eax, dword ptr [ebp+0C]
:004631CE 50                      push eax
:004631CF E898F2FFFF              call 0046246C
:004631D4 83C40C                  add esp, 0000000C
:004631D7 0FBE4DEC                movsx ecx, byte ptr [ebp-14]
:004631DB 83F961                  cmp ecx, 00000061
:004631DE 7C17                    jl 004631F7
:004631E0 0FBE55EC                movsx edx, byte ptr [ebp-14]
:004631E4 83FA66                  cmp edx, 00000066
:004631E7 7F0E                    jg 004631F7
:004631E9 837D2000                cmp dword ptr [ebp+20], 00000000
:004631ED 7508                    jne 004631F7
:004631EF 8A45EC                  mov al, byte ptr [ebp-14]
:004631F2 2C20                    sub al, 20
:004631F4 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004631DE(C), :004631E7(C), :004631ED(C)
|
:004631F7 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004631FA 51                      push ecx
:004631FB E8A3F3FFFF              call 004625A3
:00463200 83C404                  add esp, 00000004
:00463203 8945E8                  mov dword ptr [ebp-18], eax
:00463206 8B5518                  mov edx, dword ptr [ebp+18]
:00463209 3B55E8                  cmp edx, dword ptr [ebp-18]
:0046320C 7D08                    jge 00463216
:0046320E 8B45E8                  mov eax, dword ptr [ebp-18]
:00463211 8945E4                  mov dword ptr [ebp-1C], eax
:00463214 EB06                    jmp 0046321C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046320C(C)
|
:00463216 8B4D18                  mov ecx, dword ptr [ebp+18]
:00463219 894DE4                  mov dword ptr [ebp-1C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463214(U)
|
:0046321C 0FBE55F8                movsx edx, byte ptr [ebp-08]
:00463220 F7DA                    neg edx
:00463222 1BD2                    sbb edx, edx
:00463224 F7DA                    neg edx
:00463226 8B45E4                  mov eax, dword ptr [ebp-1C]
:00463229 03C2                    add eax, edx
:0046322B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046322E 83E120                  and ecx, 00000020
:00463231 F7D9                    neg ecx
:00463233 1BC9                    sbb ecx, ecx
:00463235 F7D9                    neg ecx
:00463237 03C1                    add eax, ecx
:00463239 8B5514                  mov edx, dword ptr [ebp+14]
:0046323C 2BD0                    sub edx, eax
:0046323E 895514                  mov dword ptr [ebp+14], edx
:00463241 8B4518                  mov eax, dword ptr [ebp+18]
:00463244 2B45E8                  sub eax, dword ptr [ebp-18]
:00463247 894518                  mov dword ptr [ebp+18], eax
:0046324A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046324D 83E101                  and ecx, 00000001
:00463250 85C9                    test ecx, ecx
:00463252 745B                    je 004632AF
:00463254 8B5520                  mov edx, dword ptr [ebp+20]
:00463257 52                      push edx
:00463258 8B4510                  mov eax, dword ptr [ebp+10]
:0046325B 50                      push eax
:0046325C 8A4DF8                  mov cl, byte ptr [ebp-08]
:0046325F 51                      push ecx
:00463260 8B5508                  mov edx, dword ptr [ebp+08]
:00463263 52                      push edx
:00463264 E88F010000              call 004633F8
:00463269 83C410                  add esp, 00000010
:0046326C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046326F 03C8                    add ecx, eax
:00463271 894DFC                  mov dword ptr [ebp-04], ecx
:00463274 8B5518                  mov edx, dword ptr [ebp+18]
:00463277 52                      push edx
:00463278 8D45EC                  lea eax, dword ptr [ebp-14]
:0046327B 50                      push eax
:0046327C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046327F 51                      push ecx
:00463280 E812010000              call 00463397
:00463285 83C40C                  add esp, 0000000C
:00463288 8B55FC                  mov edx, dword ptr [ebp-04]
:0046328B 03D0                    add edx, eax
:0046328D 8955FC                  mov dword ptr [ebp-04], edx
:00463290 6A20                    push 00000020
:00463292 8B4514                  mov eax, dword ptr [ebp+14]
:00463295 50                      push eax
:00463296 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463299 51                      push ecx
:0046329A E8A7010000              call 00463446
:0046329F 83C40C                  add esp, 0000000C
:004632A2 8B55FC                  mov edx, dword ptr [ebp-04]
:004632A5 03D0                    add edx, eax
:004632A7 8955FC                  mov dword ptr [ebp-04], edx
:004632AA E9E1000000              jmp 00463390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463252(C)
|
:004632AF 8B4510                  mov eax, dword ptr [ebp+10]
:004632B2 83E004                  and eax, 00000004
:004632B5 85C0                    test eax, eax
:004632B7 7420                    je 004632D9
:004632B9 8B4D20                  mov ecx, dword ptr [ebp+20]
:004632BC 51                      push ecx
:004632BD 8B5510                  mov edx, dword ptr [ebp+10]
:004632C0 52                      push edx
:004632C1 8A45F8                  mov al, byte ptr [ebp-08]
:004632C4 50                      push eax
:004632C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004632C8 51                      push ecx
:004632C9 E82A010000              call 004633F8
:004632CE 83C410                  add esp, 00000010
:004632D1 8B55FC                  mov edx, dword ptr [ebp-04]
:004632D4 03D0                    add edx, eax
:004632D6 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004632B7(C)
|
:004632D9 8B4514                  mov eax, dword ptr [ebp+14]
:004632DC 8945E8                  mov dword ptr [ebp-18], eax
:004632DF 8B4D10                  mov ecx, dword ptr [ebp+10]
:004632E2 81E180000000            and ecx, 00000080
:004632E8 85C9                    test ecx, ecx
:004632EA 740B                    je 004632F7
:004632EC 8B45E8                  mov eax, dword ptr [ebp-18]
:004632EF 99                      cdq
:004632F0 2BC2                    sub eax, edx
:004632F2 D1F8                    sar eax, 1
:004632F4 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004632EA(C)
|
:004632F7 8B5510                  mov edx, dword ptr [ebp+10]
:004632FA 83E204                  and edx, 00000004
:004632FD F7DA                    neg edx
:004632FF 1AD2                    sbb dl, dl
:00463301 80E210                  and dl, 10
:00463304 80C220                  add dl, 20
:00463307 52                      push edx
:00463308 8B45E8                  mov eax, dword ptr [ebp-18]
:0046330B 50                      push eax
:0046330C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046330F 51                      push ecx
:00463310 E831010000              call 00463446
:00463315 83C40C                  add esp, 0000000C
:00463318 8B55FC                  mov edx, dword ptr [ebp-04]
:0046331B 03D0                    add edx, eax
:0046331D 8955FC                  mov dword ptr [ebp-04], edx
:00463320 8B4510                  mov eax, dword ptr [ebp+10]
:00463323 83E004                  and eax, 00000004
:00463326 85C0                    test eax, eax
:00463328 7520                    jne 0046334A
:0046332A 8B4D20                  mov ecx, dword ptr [ebp+20]
:0046332D 51                      push ecx
:0046332E 8B5510                  mov edx, dword ptr [ebp+10]
:00463331 52                      push edx
:00463332 8A45F8                  mov al, byte ptr [ebp-08]
:00463335 50                      push eax
:00463336 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463339 51                      push ecx
:0046333A E8B9000000              call 004633F8
:0046333F 83C410                  add esp, 00000010
:00463342 8B55FC                  mov edx, dword ptr [ebp-04]
:00463345 03D0                    add edx, eax
:00463347 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463328(C)
|
:0046334A 8B4518                  mov eax, dword ptr [ebp+18]
:0046334D 50                      push eax
:0046334E 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00463351 51                      push ecx
:00463352 8B5508                  mov edx, dword ptr [ebp+08]
:00463355 52                      push edx
:00463356 E83C000000              call 00463397
:0046335B 83C40C                  add esp, 0000000C
:0046335E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463361 03C8                    add ecx, eax
:00463363 894DFC                  mov dword ptr [ebp-04], ecx
:00463366 8B5510                  mov edx, dword ptr [ebp+10]
:00463369 81E280000000            and edx, 00000080
:0046336F 85D2                    test edx, edx
:00463371 741D                    je 00463390
:00463373 6A20                    push 00000020
:00463375 8B4514                  mov eax, dword ptr [ebp+14]
:00463378 2B45E8                  sub eax, dword ptr [ebp-18]
:0046337B 50                      push eax
:0046337C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046337F 51                      push ecx
:00463380 E8C1000000              call 00463446
:00463385 83C40C                  add esp, 0000000C
:00463388 8B55FC                  mov edx, dword ptr [ebp-04]
:0046338B 03D0                    add edx, eax
:0046338D 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004632AA(U), :00463371(C)
|
:00463390 8B45FC                  mov eax, dword ptr [ebp-04]
:00463393 8BE5                    mov esp, ebp
:00463395 5D                      pop ebp
:00463396 C3                      ret



* Referenced by a CALL at Addresses:
|:00463280   , :00463356   
|
:00463397 55                      push ebp
:00463398 8BEC                    mov ebp, esp
:0046339A 51                      push ecx
:0046339B C745FC00000000          mov [ebp-04], 00000000
:004633A2 8B45FC                  mov eax, dword ptr [ebp-04]
:004633A5 034510                  add eax, dword ptr [ebp+10]
:004633A8 8945FC                  mov dword ptr [ebp-04], eax
:004633AB EB09                    jmp 004633B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004633C4(U)
|
:004633AD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004633B0 83E901                  sub ecx, 00000001
:004633B3 894D10                  mov dword ptr [ebp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004633AB(U)
|
:004633B6 837D1000                cmp dword ptr [ebp+10], 00000000
:004633BA 7E0A                    jle 004633C6
:004633BC 6A30                    push 00000030
:004633BE FF5508                  call [ebp+08]
:004633C1 83C404                  add esp, 00000004
:004633C4 EBE7                    jmp 004633AD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004633BA(C), :004633EF(U)
|
:004633C6 8B550C                  mov edx, dword ptr [ebp+0C]
:004633C9 0FBE02                  movsx eax, byte ptr [edx]
:004633CC 85C0                    test eax, eax
:004633CE 7421                    je 004633F1
:004633D0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004633D3 0FBE11                  movsx edx, byte ptr [ecx]
:004633D6 52                      push edx
:004633D7 FF5508                  call [ebp+08]
:004633DA 83C404                  add esp, 00000004
:004633DD 8B450C                  mov eax, dword ptr [ebp+0C]
:004633E0 83C001                  add eax, 00000001
:004633E3 89450C                  mov dword ptr [ebp+0C], eax
:004633E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004633E9 83C101                  add ecx, 00000001
:004633EC 894DFC                  mov dword ptr [ebp-04], ecx
:004633EF EBD5                    jmp 004633C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004633CE(C)
|
:004633F1 8B45FC                  mov eax, dword ptr [ebp-04]
:004633F4 8BE5                    mov esp, ebp
:004633F6 5D                      pop ebp
:004633F7 C3                      ret



* Referenced by a CALL at Addresses:
|:00463264   , :004632C9   , :0046333A   
|
:004633F8 55                      push ebp
:004633F9 8BEC                    mov ebp, esp
:004633FB 51                      push ecx
:004633FC C745FC00000000          mov [ebp-04], 00000000
:00463403 0FBE450C                movsx eax, byte ptr [ebp+0C]
:00463407 85C0                    test eax, eax
:00463409 7414                    je 0046341F
:0046340B 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:0046340F 51                      push ecx
:00463410 FF5508                  call [ebp+08]
:00463413 83C404                  add esp, 00000004
:00463416 8B55FC                  mov edx, dword ptr [ebp-04]
:00463419 83C201                  add edx, 00000001
:0046341C 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463409(C)
|
:0046341F 8B4510                  mov eax, dword ptr [ebp+10]
:00463422 83E020                  and eax, 00000020
:00463425 85C0                    test eax, eax
:00463427 7416                    je 0046343F
:00463429 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046342C 83C158                  add ecx, 00000058
:0046342F 51                      push ecx
:00463430 FF5508                  call [ebp+08]
:00463433 83C404                  add esp, 00000004
:00463436 8B55FC                  mov edx, dword ptr [ebp-04]
:00463439 83C201                  add edx, 00000001
:0046343C 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463427(C)
|
:0046343F 8B45FC                  mov eax, dword ptr [ebp-04]
:00463442 8BE5                    mov esp, ebp
:00463444 5D                      pop ebp
:00463445 C3                      ret



* Referenced by a CALL at Addresses:
|:0046329A   , :00463310   , :00463380   , :0046350E   , :0046355F   
|:004635BB   
|
:00463446 55                      push ebp
:00463447 8BEC                    mov ebp, esp
:00463449 51                      push ecx
:0046344A C745FC00000000          mov [ebp-04], 00000000
:00463451 8B45FC                  mov eax, dword ptr [ebp-04]
:00463454 03450C                  add eax, dword ptr [ebp+0C]
:00463457 8945FC                  mov dword ptr [ebp-04], eax
:0046345A EB09                    jmp 00463465

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463476(U)
|
:0046345C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046345F 83E901                  sub ecx, 00000001
:00463462 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046345A(U)
|
:00463465 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00463469 7E0D                    jle 00463478
:0046346B 0FBE5510                movsx edx, byte ptr [ebp+10]
:0046346F 52                      push edx
:00463470 FF5508                  call [ebp+08]
:00463473 83C404                  add esp, 00000004
:00463476 EBE4                    jmp 0046345C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463469(C)
|
:00463478 8B45FC                  mov eax, dword ptr [ebp-04]
:0046347B 8BE5                    mov esp, ebp
:0046347D 5D                      pop ebp
:0046347E C3                      ret



* Referenced by a CALL at Addresses:
|:00462DF3   , :00462E2B   , :00462E5D   
|
:0046347F 55                      push ebp
:00463480 8BEC                    mov ebp, esp
:00463482 83EC0C                  sub esp, 0000000C
:00463485 C745FC00000000          mov [ebp-04], 00000000
:0046348C 837D1800                cmp dword ptr [ebp+18], 00000000
:00463490 7411                    je 004634A3
:00463492 8B450C                  mov eax, dword ptr [ebp+0C]
:00463495 50                      push eax
:00463496 E808F1FFFF              call 004625A3
:0046349B 83C404                  add esp, 00000004
:0046349E 394518                  cmp dword ptr [ebp+18], eax
:004634A1 7E0F                    jle 004634B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463490(C)
|
:004634A3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004634A6 51                      push ecx
:004634A7 E8F7F0FFFF              call 004625A3
:004634AC 83C404                  add esp, 00000004
:004634AF 894518                  mov dword ptr [ebp+18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004634A1(C)
|
:004634B2 8B5514                  mov edx, dword ptr [ebp+14]
:004634B5 2B5518                  sub edx, dword ptr [ebp+18]
:004634B8 895514                  mov dword ptr [ebp+14], edx
:004634BB 837D1400                cmp dword ptr [ebp+14], 00000000
:004634BF 7D07                    jge 004634C8
:004634C1 C7451400000000          mov [ebp+14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004634BF(C)
|
:004634C8 8B4510                  mov eax, dword ptr [ebp+10]
:004634CB 83E001                  and eax, 00000001
:004634CE 85C0                    test eax, eax
:004634D0 7451                    je 00463523
:004634D2 EB09                    jmp 004634DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463502(U)
|
:004634D4 8B4D18                  mov ecx, dword ptr [ebp+18]
:004634D7 83E901                  sub ecx, 00000001
:004634DA 894D18                  mov dword ptr [ebp+18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004634D2(U)
|
:004634DD 837D1800                cmp dword ptr [ebp+18], 00000000
:004634E1 7E21                    jle 00463504
:004634E3 8B550C                  mov edx, dword ptr [ebp+0C]
:004634E6 0FBE02                  movsx eax, byte ptr [edx]
:004634E9 50                      push eax
:004634EA FF5508                  call [ebp+08]
:004634ED 83C404                  add esp, 00000004
:004634F0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004634F3 83C101                  add ecx, 00000001
:004634F6 894D0C                  mov dword ptr [ebp+0C], ecx
:004634F9 8B55FC                  mov edx, dword ptr [ebp-04]
:004634FC 83C201                  add edx, 00000001
:004634FF 8955FC                  mov dword ptr [ebp-04], edx
:00463502 EBD0                    jmp 004634D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004634E1(C)
|
:00463504 6A20                    push 00000020
:00463506 8B4514                  mov eax, dword ptr [ebp+14]
:00463509 50                      push eax
:0046350A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046350D 51                      push ecx
:0046350E E833FFFFFF              call 00463446
:00463513 83C40C                  add esp, 0000000C
:00463516 8B55FC                  mov edx, dword ptr [ebp-04]
:00463519 03D0                    add edx, eax
:0046351B 8955FC                  mov dword ptr [ebp-04], edx
:0046351E E9A8000000              jmp 004635CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004634D0(C)
|
:00463523 8B4510                  mov eax, dword ptr [ebp+10]
:00463526 2580000000              and eax, 00000080
:0046352B 85C0                    test eax, eax
:0046352D 740D                    je 0046353C
:0046352F 8B4514                  mov eax, dword ptr [ebp+14]
:00463532 99                      cdq
:00463533 2BC2                    sub eax, edx
:00463535 D1F8                    sar eax, 1
:00463537 8945F4                  mov dword ptr [ebp-0C], eax
:0046353A EB06                    jmp 00463542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046352D(C)
|
:0046353C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046353F 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046353A(U)
|
:00463542 8B55F4                  mov edx, dword ptr [ebp-0C]
:00463545 8955F8                  mov dword ptr [ebp-08], edx
:00463548 8B4510                  mov eax, dword ptr [ebp+10]
:0046354B 83E004                  and eax, 00000004
:0046354E F7D8                    neg eax
:00463550 1AC0                    sbb al, al
:00463552 2410                    and al, 10
:00463554 0420                    add al, 20
:00463556 50                      push eax
:00463557 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046355A 51                      push ecx
:0046355B 8B5508                  mov edx, dword ptr [ebp+08]
:0046355E 52                      push edx
:0046355F E8E2FEFFFF              call 00463446
:00463564 83C40C                  add esp, 0000000C
:00463567 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046356A 03C8                    add ecx, eax
:0046356C 894DFC                  mov dword ptr [ebp-04], ecx
:0046356F 8B55FC                  mov edx, dword ptr [ebp-04]
:00463572 035518                  add edx, dword ptr [ebp+18]
:00463575 8955FC                  mov dword ptr [ebp-04], edx
:00463578 EB09                    jmp 00463583

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046359F(U)
|
:0046357A 8B4518                  mov eax, dword ptr [ebp+18]
:0046357D 83E801                  sub eax, 00000001
:00463580 894518                  mov dword ptr [ebp+18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463578(U)
|
:00463583 837D1800                cmp dword ptr [ebp+18], 00000000
:00463587 7E18                    jle 004635A1
:00463589 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046358C 0FBE11                  movsx edx, byte ptr [ecx]
:0046358F 52                      push edx
:00463590 FF5508                  call [ebp+08]
:00463593 83C404                  add esp, 00000004
:00463596 8B450C                  mov eax, dword ptr [ebp+0C]
:00463599 83C001                  add eax, 00000001
:0046359C 89450C                  mov dword ptr [ebp+0C], eax
:0046359F EBD9                    jmp 0046357A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463587(C)
|
:004635A1 8B4D10                  mov ecx, dword ptr [ebp+10]
:004635A4 81E180000000            and ecx, 00000080
:004635AA 85C9                    test ecx, ecx
:004635AC 741D                    je 004635CB
:004635AE 6A20                    push 00000020
:004635B0 8B5514                  mov edx, dword ptr [ebp+14]
:004635B3 2B55F8                  sub edx, dword ptr [ebp-08]
:004635B6 52                      push edx
:004635B7 8B4508                  mov eax, dword ptr [ebp+08]
:004635BA 50                      push eax
:004635BB E886FEFFFF              call 00463446
:004635C0 83C40C                  add esp, 0000000C
:004635C3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004635C6 03C8                    add ecx, eax
:004635C8 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046351E(U), :004635AC(C)
|
:004635CB 8B45FC                  mov eax, dword ptr [ebp-04]
:004635CE 8BE5                    mov esp, ebp
:004635D0 5D                      pop ebp
:004635D1 C3                      ret



* Referenced by a CALL at Addresses:
|:00467731   , :0046775B   , :00467785   , :004677AF   , :004677D9   
|:00467803   , :0046782D   , :00467859   , :0046788D   
|
:004635D2 55                      push ebp
:004635D3 8BEC                    mov ebp, esp
:004635D5 83EC08                  sub esp, 00000008
:004635D8 8D4510                  lea eax, dword ptr [ebp+10]
:004635DB 8945FC                  mov dword ptr [ebp-04], eax
:004635DE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004635E1 890DAC0D4B00            mov dword ptr [004B0DAC], ecx
:004635E7 8B55FC                  mov edx, dword ptr [ebp-04]
:004635EA 52                      push edx
:004635EB 8B450C                  mov eax, dword ptr [ebp+0C]
:004635EE 50                      push eax
:004635EF 680F364600              push 0046360F
:004635F4 E810F4FFFF              call 00462A09
:004635F9 83C40C                  add esp, 0000000C
:004635FC 8945F8                  mov dword ptr [ebp-08], eax
:004635FF 8B0DAC0D4B00            mov ecx, dword ptr [004B0DAC]
:00463605 C60100                  mov byte ptr [ecx], 00
:00463608 8B45F8                  mov eax, dword ptr [ebp-08]
:0046360B 8BE5                    mov esp, ebp
:0046360D 5D                      pop ebp
:0046360E C3                      ret


:0046360F 55                      push ebp
:00463610 8BEC                    mov ebp, esp
:00463612 A1AC0D4B00              mov eax, dword ptr [004B0DAC]
:00463617 8A4D08                  mov cl, byte ptr [ebp+08]
:0046361A 8808                    mov byte ptr [eax], cl
:0046361C 8B15AC0D4B00            mov edx, dword ptr [004B0DAC]
:00463622 83C201                  add edx, 00000001
:00463625 8915AC0D4B00            mov dword ptr [004B0DAC], edx
:0046362B 5D                      pop ebp
:0046362C C3                      ret


:0046362D CC                      int 03
:0046362E CC                      int 03
:0046362F CC                      int 03

* Referenced by a CALL at Addresses:
|:00402B24   , :00402B91   , :00402BDA   , :0040CF23   , :0040CF58   
|:0041021F   , :00410803   , :00410E9A   , :004116A0   , :0041255C   
|:00428C3D   , :00463938   
|
:00463630 55                      push ebp
:00463631 8BEC                    mov ebp, esp
:00463633 83EC28                  sub esp, 00000028
:00463636 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0046363A 7507                    jne 00463643

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:0046363C C7450CFCE44700          mov [ebp+0C], 0047E4FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046363A(C)
|
:00463643 C745D828000000          mov [ebp-28], 00000028
:0046364A A1380E4B00              mov eax, dword ptr [004B0E38]
:0046364F 8945DC                  mov dword ptr [ebp-24], eax
:00463652 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00463658 894DE0                  mov dword ptr [ebp-20], ecx
:0046365B 8B5508                  mov edx, dword ptr [ebp+08]
:0046365E 8955E4                  mov dword ptr [ebp-1C], edx
:00463661 8B450C                  mov eax, dword ptr [ebp+0C]
:00463664 8945E8                  mov dword ptr [ebp-18], eax
:00463667 C745EC84200000          mov [ebp-14], 00002084
:0046366E C745F089000000          mov [ebp-10], 00000089
:00463675 C745F400000000          mov [ebp-0C], 00000000
:0046367C C745F800000000          mov [ebp-08], 00000000
:00463683 C745FC11040000          mov [ebp-04], 00000411
:0046368A 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0046368D 51                      push ecx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:0046368E FF1580874B00            Call dword ptr [004B8780]
:00463694 83F806                  cmp eax, 00000006
:00463697 7507                    jne 004636A0
:00463699 B801000000              mov eax, 00000001
:0046369E EB02                    jmp 004636A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463697(C)
|
:004636A0 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046369E(U)
|
:004636A2 8BE5                    mov esp, ebp
:004636A4 5D                      pop ebp
:004636A5 C3                      ret


:004636A6 55                      push ebp
:004636A7 8BEC                    mov ebp, esp
:004636A9 81EC2C010000            sub esp, 0000012C
:004636AF 8D4510                  lea eax, dword ptr [ebp+10]
:004636B2 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax
:004636B8 8B8DFCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEFC]
:004636BE 51                      push ecx
:004636BF 8B550C                  mov edx, dword ptr [ebp+0C]
:004636C2 52                      push edx
:004636C3 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:004636C9 50                      push eax

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:004636CA FF157C874B00            Call dword ptr [004B877C]
:004636D0 837D0800                cmp dword ptr [ebp+08], 00000000
:004636D4 7507                    jne 004636DD

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:004636D6 C7450808E54700          mov [ebp+08], 0047E508

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004636D4(C)
|
:004636DD C785D4FEFFFF28000000    mov dword ptr [ebp+FFFFFED4], 00000028
:004636E7 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004636ED 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:004636F3 8B15300E4B00            mov edx, dword ptr [004B0E30]
:004636F9 8995DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], edx
:004636FF 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:00463705 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax
:0046370B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046370E 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:00463714 C785E8FEFFFF84200000    mov dword ptr [ebp+FFFFFEE8], 00002084
:0046371E C785ECFEFFFF89000000    mov dword ptr [ebp+FFFFFEEC], 00000089
:00463728 C785F0FEFFFF00000000    mov dword ptr [ebp+FFFFFEF0], 00000000
:00463732 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:0046373C C785F8FEFFFF11040000    mov dword ptr [ebp+FFFFFEF8], 00000411
:00463746 8D95D4FEFFFF            lea edx, dword ptr [ebp+FFFFFED4]
:0046374C 52                      push edx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:0046374D FF1580874B00            Call dword ptr [004B8780]
:00463753 83F806                  cmp eax, 00000006
:00463756 7507                    jne 0046375F
:00463758 B801000000              mov eax, 00000001
:0046375D EB02                    jmp 00463761

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463756(C)
|
:0046375F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046375D(U)
|
:00463761 8BE5                    mov esp, ebp
:00463763 5D                      pop ebp
:00463764 C3                      ret



* Referenced by a CALL at Addresses:
|:00410A3A   , :00410E32   , :00410F6B   , :0041243E   , :00428C11   
|
:00463765 55                      push ebp
:00463766 8BEC                    mov ebp, esp
:00463768 81EC2C010000            sub esp, 0000012C
:0046376E 8D450C                  lea eax, dword ptr [ebp+0C]
:00463771 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax
:00463777 8B8DFCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEFC]
:0046377D 51                      push ecx
:0046377E 8B5508                  mov edx, dword ptr [ebp+08]
:00463781 52                      push edx
:00463782 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:00463788 50                      push eax

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:00463789 FF157C874B00            Call dword ptr [004B877C]
:0046378F C785D4FEFFFF28000000    mov dword ptr [ebp+FFFFFED4], 00000028
:00463799 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:0046379F 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:004637A5 8B15300E4B00            mov edx, dword ptr [004B0E30]
:004637AB 8995DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], edx
:004637B1 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:004637B7 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:004637BD C785E4FEFFFFD8E44700    mov dword ptr [ebp+FFFFFEE4], 0047E4D8
:004637C7 C785E8FEFFFF80200000    mov dword ptr [ebp+FFFFFEE8], 00002080
:004637D1 C785ECFEFFFF89000000    mov dword ptr [ebp+FFFFFEEC], 00000089
:004637DB C785F0FEFFFF00000000    mov dword ptr [ebp+FFFFFEF0], 00000000
:004637E5 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:004637EF C785F8FEFFFF11040000    mov dword ptr [ebp+FFFFFEF8], 00000411
:004637F9 8D8DD4FEFFFF            lea ecx, dword ptr [ebp+FFFFFED4]
:004637FF 51                      push ecx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:00463800 FF1580874B00            Call dword ptr [004B8780]
:00463806 8BE5                    mov esp, ebp
:00463808 5D                      pop ebp
:00463809 C3                      ret



* Referenced by a CALL at Addresses:
|:00415C80   , :004175B1   , :00417819   , :00418EB5   , :00418F01   
|:00418F30   , :00418F5F   , :00418F8E   , :00418FBD   , :00418FEC   
|:0041901B   , :0041904F   , :004195E9   , :0041A409   , :0041A455   
|:0041A484   , :0041A4B3   , :0041A4E2   , :0041A511   , :0041A540   
|:0041A56F   , :0041A5A3   , :0041A708   , :0041A754   , :0041A783   
|:0041A7B2   , :0041A7E1   , :0041A810   , :0041A83F   , :0041A86E   
|:0041A8A2   , :0041ABC1   , :0041ABE2   , :0041AD6D   , :0041C116   
|:0041C137   , :0041C6DE   , :0041C6FF   , :0041D97D   , :0041DB74   
|:0041DBEC   , :00453D5B   , :004544F4   , :0045B76B   , :0045B798   
|:0045B9AD   , :0045B9E0   , :0045BA13   , :0045BA46   , :0045BA79   
|:0045C7F0   , :0045C84A   , :0045C879   , :0045C8A8   , :0045C8D7   
|:0045C906   , :0045C935   , :0045C964   , :0045C993   , :0045CA8A   
|:0045CAB4   , :0045CB48   , :0045CB72   , :0045E619   , :0045E665   
|:0045E694   , :0045E6C3   , :0045E6F2   , :0045E721   , :0045E750   
|:0045E77F   , :0045E7B3   , :0045EBC4   , :0045EBE5   
|
:0046380A 55                      push ebp
:0046380B 8BEC                    mov ebp, esp
:0046380D 81EC04010000            sub esp, 00000104
:00463813 8D4510                  lea eax, dword ptr [ebp+10]
:00463816 8985FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], eax
:0046381C 8B8DFCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEFC]
:00463822 51                      push ecx
:00463823 8B550C                  mov edx, dword ptr [ebp+0C]
:00463826 52                      push edx
:00463827 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:0046382D 50                      push eax

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:0046382E FF157C874B00            Call dword ptr [004B877C]
:00463834 8D8D00FFFFFF            lea ecx, dword ptr [ebp+FFFFFF00]
:0046383A 51                      push ecx
:0046383B 8B5508                  mov edx, dword ptr [ebp+08]
:0046383E 52                      push edx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046383F FF15B0864B00            Call dword ptr [004B86B0]
:00463845 8BE5                    mov esp, ebp
:00463847 5D                      pop ebp
:00463848 C3                      ret



* Referenced by a CALL at Address:
|:00413D90   
|
:00463849 55                      push ebp
:0046384A 8BEC                    mov ebp, esp
:0046384C 81EC80000000            sub esp, 00000080
:00463852 8D450C                  lea eax, dword ptr [ebp+0C]
:00463855 50                      push eax
:00463856 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463859 51                      push ecx
:0046385A 8D5580                  lea edx, dword ptr [ebp-80]
:0046385D 52                      push edx

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:0046385E FF157C874B00            Call dword ptr [004B877C]
:00463864 6835200000              push 00002035

* Possible StringData Ref from Data Obj ->"´ЫHǰ"
                                  |
:00463869 6814E54700              push 0047E514
:0046386E 8D4580                  lea eax, dword ptr [ebp-80]
:00463871 50                      push eax
:00463872 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00463878 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00463879 FF1598864B00            Call dword ptr [004B8698]
:0046387F 83F804                  cmp eax, 00000004
:00463882 7507                    jne 0046388B
:00463884 B801000000              mov eax, 00000001
:00463889 EB02                    jmp 0046388D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463882(C)
|
:0046388B 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463889(U)
|
:0046388D 8BE5                    mov esp, ebp
:0046388F 5D                      pop ebp
:00463890 C3                      ret



* Referenced by a CALL at Addresses:
|:0041260A   , :0046402E   , :0046407C   , :00464122   
|
:00463891 55                      push ebp
:00463892 8BEC                    mov ebp, esp
:00463894 81EC80000000            sub esp, 00000080
:0046389A 8D450C                  lea eax, dword ptr [ebp+0C]
:0046389D 50                      push eax
:0046389E 8B4D08                  mov ecx, dword ptr [ebp+08]
:004638A1 51                      push ecx
:004638A2 8D5580                  lea edx, dword ptr [ebp-80]
:004638A5 52                      push edx

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:004638A6 FF157C874B00            Call dword ptr [004B877C]
:004638AC 6830200000              push 00002030

* Possible StringData Ref from Data Obj ->"´ЫHǰ"
                                  |
:004638B1 6828E54700              push 0047E528
:004638B6 8D4580                  lea eax, dword ptr [ebp-80]
:004638B9 50                      push eax
:004638BA 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:004638C0 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:004638C1 FF1598864B00            Call dword ptr [004B8698]
:004638C7 8BE5                    mov esp, ebp
:004638C9 5D                      pop ebp
:004638CA C3                      ret


:004638CB 55                      push ebp
:004638CC 8BEC                    mov ebp, esp
:004638CE 51                      push ecx
:004638CF 8B450C                  mov eax, dword ptr [ebp+0C]
:004638D2 8945FC                  mov dword ptr [ebp-04], eax
:004638D5 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:004638DC 7435                    je 00463913
:004638DE 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004638E5 7402                    je 004638E9
:004638E7 EB31                    jmp 0046391A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004638E5(C)
|
:004638E9 8B4D10                  mov ecx, dword ptr [ebp+10]
:004638EC 81E1FFFF0000            and ecx, 0000FFFF
:004638F2 83F901                  cmp ecx, 00000001
:004638F5 740E                    je 00463905
:004638F7 8B5510                  mov edx, dword ptr [ebp+10]
:004638FA 81E2FFFF0000            and edx, 0000FFFF
:00463900 83FA02                  cmp edx, 00000002
:00463903 750C                    jne 00463911

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004638F5(C)
|
:00463905 6A01                    push 00000001
:00463907 8B4508                  mov eax, dword ptr [ebp+08]
:0046390A 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0046390B FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463903(C)
|
:00463911 EB07                    jmp 0046391A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004638DC(C)
|
:00463913 B801000000              mov eax, 00000001
:00463918 EB02                    jmp 0046391C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004638E7(U), :00463911(U)
|
:0046391A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463918(U)
|
:0046391C 8BE5                    mov esp, ebp
:0046391E 5D                      pop ebp
:0046391F C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00410811   , :00410910   
|
:00463922 55                      push ebp
:00463923 8BEC                    mov ebp, esp
:00463925 833D3C0E4B0000          cmp dword ptr [004B0E3C], 00000000
:0046392C 7532                    jne 00463960

* Possible StringData Ref from Data Obj ->"´ЫHǵ"
                                  |
:0046392E 683CE54700              push 0047E53C

* Possible StringData Ref from Data Obj ->"´ЫHǡC"
                                  |
:00463933 684CE54700              push 0047E54C
:00463938 E8F3FCFFFF              call 00463630
:0046393D 83C408                  add esp, 00000008
:00463940 85C0                    test eax, eax
:00463942 741C                    je 00463960
:00463944 E8A1620000              call 00469BEA
:00463949 E8282DFCFF              call 00426676
:0046394E 6A00                    push 00000000
:00463950 6A00                    push 00000000

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00463952 6A10                    push 00000010
:00463954 A1380E4B00              mov eax, dword ptr [004B0E38]
:00463959 50                      push eax

* Reference To: USER32.PostMessageA, Ord:01B1h
                                  |
:0046395A FF15A8874B00            Call dword ptr [004B87A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046392C(C), :00463942(C)
|
:00463960 5D                      pop ebp
:00463961 C3                      ret



* Referenced by a CALL at Addresses:
|:004060E1   , :0040742F   , :0040762A   , :0041137E   , :004121EA   
|:00412589   , :004125D5   , :00416373   , :004197E8   , :0041CF25   
|:0041CF34   , :0041E93F   , :00452760   , :00453F1E   , :0045C0DA   
|:0045E9D3   , :0045FAB8   , :00466AEF   , :00467322   , :004680EF   
|
:00463962 55                      push ebp
:00463963 8BEC                    mov ebp, esp
:00463965 833D407A4700FF          cmp dword ptr [00477A40], FFFFFFFF
:0046396C 7421                    je 0046398F
:0046396E 8B4508                  mov eax, dword ptr [ebp+08]
:00463971 50                      push eax
:00463972 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"EKD4.HLP"
                                  |
:00463974 68E8E44700              push 0047E4E8
:00463979 E836C8FAFF              call 004101B4
:0046397E 83C404                  add esp, 00000004
:00463981 50                      push eax
:00463982 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00463988 51                      push ecx

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00463989 FF1538864B00            Call dword ptr [004B8638]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046396C(C)
|
:0046398F 5D                      pop ebp
:00463990 C3                      ret



* Referenced by a CALL at Address:
|:00463D7D   
|
:00463991 55                      push ebp
:00463992 8BEC                    mov ebp, esp
:00463994 83EC08                  sub esp, 00000008
:00463997 8B4510                  mov eax, dword ptr [ebp+10]
:0046399A 8945F8                  mov dword ptr [ebp-08], eax
:0046399D 837DF865                cmp dword ptr [ebp-08], 00000065
:004639A1 7711                    ja 004639B4
:004639A3 837DF865                cmp dword ptr [ebp-08], 00000065
:004639A7 7464                    je 00463A0D
:004639A9 837DF814                cmp dword ptr [ebp-08], 00000014
:004639AD 7457                    je 00463A06
:004639AF E9BB010000              jmp 00463B6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004639A1(C)
|
:004639B4 817DF8859C0000          cmp dword ptr [ebp-08], 00009C85
:004639BB 772A                    ja 004639E7
:004639BD 817DF8859C0000          cmp dword ptr [ebp-08], 00009C85
:004639C4 0F84F7000000            je 00463AC1
:004639CA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004639CD 83E966                  sub ecx, 00000066
:004639D0 894DF8                  mov dword ptr [ebp-08], ecx
:004639D3 837DF80A                cmp dword ptr [ebp-08], 0000000A
:004639D7 0F8792010000            ja 00463B6F
:004639DD 8B55F8                  mov edx, dword ptr [ebp-08]
:004639E0 FF2495753B4600          jmp dword ptr [4*edx+00463B75]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004639BB(C)
|
:004639E7 8B45F8                  mov eax, dword ptr [ebp-08]
:004639EA 2D869C0000              sub eax, 00009C86
:004639EF 8945F8                  mov dword ptr [ebp-08], eax
:004639F2 837DF804                cmp dword ptr [ebp-08], 00000004
:004639F6 0F8773010000            ja 00463B6F
:004639FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004639FF FF248DA13B4600          jmp dword ptr [4*ecx+00463BA1]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004639AD(C)
|
:00463A06 33C0                    xor eax, eax
:00463A08 E964010000              jmp 00463B71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004639A7(C)
|
:00463A0D E82EDBFAFF              call 00411540
:00463A12 E958010000              jmp 00463B6F
:00463A17 E8DBDAFAFF              call 004114F7
:00463A1C E94E010000              jmp 00463B6F
:00463A21 6A00                    push 00000000
:00463A23 6A00                    push 00000000

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00463A25 6A10                    push 00000010
:00463A27 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00463A2D 52                      push edx

* Reference To: USER32.PostMessageA, Ord:01B1h
                                  |
:00463A2E FF15A8874B00            Call dword ptr [004B87A8]
:00463A34 E936010000              jmp 00463B6F
:00463A39 8B4508                  mov eax, dword ptr [ebp+08]
:00463A3C 50                      push eax
:00463A3D 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00463A43 51                      push ecx
:00463A44 E844480000              call 0046828D
:00463A49 83C408                  add esp, 00000008
:00463A4C E91E010000              jmp 00463B6F
:00463A51 8B5508                  mov edx, dword ptr [ebp+08]
:00463A54 52                      push edx
:00463A55 A1300E4B00              mov eax, dword ptr [004B0E30]
:00463A5A 50                      push eax
:00463A5B E896E9FAFF              call 004123F6
:00463A60 83C408                  add esp, 00000008
:00463A63 E907010000              jmp 00463B6F
:00463A68 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463A6B 51                      push ecx
:00463A6C 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00463A72 52                      push edx
:00463A73 E8602CFBFF              call 004166D8
:00463A78 83C408                  add esp, 00000008
:00463A7B E9EF000000              jmp 00463B6F
:00463A80 6A00                    push 00000000
:00463A82 E848E9FAFF              call 004123CF
:00463A87 83C404                  add esp, 00000004
:00463A8A E9E0000000              jmp 00463B6F
:00463A8F E85B4DFFFF              call 004587EF
:00463A94 E9D6000000              jmp 00463B6F
:00463A99 E86131FFFF              call 00456BFF
:00463A9E E9CC000000              jmp 00463B6F
:00463AA3 6A01                    push 00000001
:00463AA5 E87F31FFFF              call 00456C29
:00463AAA 83C404                  add esp, 00000004
:00463AAD E9BD000000              jmp 00463B6F
:00463AB2 6A00                    push 00000000
:00463AB4 E87031FFFF              call 00456C29
:00463AB9 83C404                  add esp, 00000004
:00463ABC E9AE000000              jmp 00463B6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004639C4(C)
|
:00463AC1 6A00                    push 00000000

* Possible Reference to String Resource ID=00011: "
"
                                  |
:00463AC3 6A0B                    push 0000000B

* Possible StringData Ref from Data Obj ->"EKD4.HLP"
                                  |
:00463AC5 68E8E44700              push 0047E4E8
:00463ACA E8E5C6FAFF              call 004101B4
:00463ACF 83C404                  add esp, 00000004
:00463AD2 50                      push eax
:00463AD3 8B4508                  mov eax, dword ptr [ebp+08]
:00463AD6 50                      push eax

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00463AD7 FF1538864B00            Call dword ptr [004B8638]
:00463ADD E98D000000              jmp 00463B6F
:00463AE2 C645FC00                mov [ebp-04], 00
:00463AE6 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00463AE9 51                      push ecx
:00463AEA 6805010000              push 00000105

* Possible StringData Ref from Data Obj ->"EKD4.HLP"
                                  |
:00463AEF 68E8E44700              push 0047E4E8
:00463AF4 E8BBC6FAFF              call 004101B4
:00463AF9 83C404                  add esp, 00000004
:00463AFC 50                      push eax
:00463AFD 8B5508                  mov edx, dword ptr [ebp+08]
:00463B00 52                      push edx

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00463B01 FF1538864B00            Call dword ptr [004B8638]
:00463B07 EB66                    jmp 00463B6F
:00463B09 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00463B0B 6A04                    push 00000004

* Possible StringData Ref from Data Obj ->"EKD4.HLP"
                                  |
:00463B0D 68E8E44700              push 0047E4E8
:00463B12 E89DC6FAFF              call 004101B4
:00463B17 83C404                  add esp, 00000004
:00463B1A 50                      push eax
:00463B1B 8B4508                  mov eax, dword ptr [ebp+08]
:00463B1E 50                      push eax

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00463B1F FF1538864B00            Call dword ptr [004B8638]
:00463B25 EB48                    jmp 00463B6F
:00463B27 6A00                    push 00000000
:00463B29 68CB384600              push 004638CB
:00463B2E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463B31 51                      push ecx

* Possible StringData Ref from Data Obj ->"AppVersion"
                                  |
:00463B32 6860E54700              push 0047E560
:00463B37 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00463B3D 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00463B3E FF1520874B00            Call dword ptr [004B8720]
:00463B44 EB29                    jmp 00463B6F
:00463B46 833D407A4700FF          cmp dword ptr [00477A40], FFFFFFFF
:00463B4D 7420                    je 00463B6F
:00463B4F A1407A4700              mov eax, dword ptr [00477A40]
:00463B54 50                      push eax
:00463B55 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"EKD4.HLP"
                                  |
:00463B57 68E8E44700              push 0047E4E8
:00463B5C E853C6FAFF              call 004101B4
:00463B61 83C404                  add esp, 00000004
:00463B64 50                      push eax
:00463B65 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463B68 51                      push ecx

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00463B69 FF1538864B00            Call dword ptr [004B8638]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004639AF(U), :004639D7(C), :004639F6(C), :00463A12(U), :00463A1C(U)
|:00463A34(U), :00463A4C(U), :00463A63(U), :00463A7B(U), :00463A8A(U)
|:00463A94(U), :00463A9E(U), :00463AAD(U), :00463ABC(U), :00463ADD(U)
|:00463B07(U), :00463B25(U), :00463B44(U), :00463B4D(C)
|
:00463B6F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463A08(U)
|
:00463B71 8BE5                    mov esp, ebp
:00463B73 5D                      pop ebp
:00463B74 C3                      ret



:00463B75 173A4600                DWORD 00463A17
:00463B79 6F3B4600                DWORD 00463B6F
:00463B7D 213A4600                DWORD 00463A21
:00463B81 393A4600                DWORD 00463A39
:00463B85 513A4600                DWORD 00463A51
:00463B89 803A4600                DWORD 00463A80
:00463B8D 8F3A4600                DWORD 00463A8F
:00463B91 993A4600                DWORD 00463A99
:00463B95 A33A4600                DWORD 00463AA3
:00463B99 B23A4600                DWORD 00463AB2
:00463B9D 683A4600                DWORD 00463A68
:00463BA1 E23A4600                DWORD 00463AE2
:00463BA5 093B4600                DWORD 00463B09
:00463BA9 6F3B4600                DWORD 00463B6F
:00463BAD 273B4600                DWORD 00463B27
:00463BB1 463B4600                DWORD 00463B46


:00463BB5 55                      push ebp
:00463BB6 8BEC                    mov ebp, esp
:00463BB8 83EC14                  sub esp, 00000014
:00463BBB 8B450C                  mov eax, dword ptr [ebp+0C]
:00463BBE 8945F8                  mov dword ptr [ebp-08], eax
:00463BC1 837DF814                cmp dword ptr [ebp-08], 00000014
:00463BC5 7727                    ja 00463BEE
:00463BC7 837DF814                cmp dword ptr [ebp-08], 00000014
:00463BCB 0F8460020000            je 00463E31
:00463BD1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00463BD4 83E901                  sub ecx, 00000001
:00463BD7 894DF8                  mov dword ptr [ebp-08], ecx
:00463BDA 837DF805                cmp dword ptr [ebp-08], 00000005
:00463BDE 0F8766030000            ja 00463F4A
:00463BE4 8B55F8                  mov edx, dword ptr [ebp-08]
:00463BE7 FF2495683F4600          jmp dword ptr [4*edx+00463F68]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463BC5(C)
|
:00463BEE 837DF847                cmp dword ptr [ebp-08], 00000047
:00463BF2 7719                    ja 00463C0D
:00463BF4 837DF847                cmp dword ptr [ebp-08], 00000047
:00463BF8 0F8451020000            je 00463E4F
:00463BFE 837DF824                cmp dword ptr [ebp-08], 00000024
:00463C02 0F8430020000            je 00463E38
:00463C08 E93D030000              jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463BF2(C)
|
:00463C0D 817DF800010000          cmp dword ptr [ebp-08], 00000100
:00463C14 771C                    ja 00463C32
:00463C16 817DF800010000          cmp dword ptr [ebp-08], 00000100
:00463C1D 0F8458020000            je 00463E7B
:00463C23 837DF84E                cmp dword ptr [ebp-08], 0000004E
:00463C27 0F8459020000            je 00463E86
:00463C2D E918030000              jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C14(C)
|
:00463C32 817DF806020000          cmp dword ptr [ebp-08], 00000206
:00463C39 772C                    ja 00463C67
:00463C3B 817DF800020000          cmp dword ptr [ebp-08], 00000200
:00463C42 0F8318020000            jnb 00463E60
:00463C48 8B45F8                  mov eax, dword ptr [ebp-08]
:00463C4B 2D11010000              sub eax, 00000111
:00463C50 8945F8                  mov dword ptr [ebp-08], eax
:00463C53 837DF804                cmp dword ptr [ebp-08], 00000004
:00463C57 0F87ED020000            ja 00463F4A
:00463C5D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00463C60 FF248D803F4600          jmp dword ptr [4*ecx+00463F80]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C39(C)
|
:00463C67 817DF8B9030000          cmp dword ptr [ebp-08], 000003B9
:00463C6E 0F84C6020000            je 00463F3A
:00463C74 817DF801040000          cmp dword ptr [ebp-08], 00000401
:00463C7B 0F8434010000            je 00463DB5
:00463C81 E9C4020000              jmp 00463F4A
:00463C86 8B5508                  mov edx, dword ptr [ebp+08]
:00463C89 52                      push edx
:00463C8A E8114D0000              call 004689A0
:00463C8F 83C404                  add esp, 00000004
:00463C92 E9B3020000              jmp 00463F4A
:00463C97 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00463C99 6A03                    push 00000003
:00463C9B A1380E4B00              mov eax, dword ptr [004B0E38]
:00463CA0 50                      push eax

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00463CA1 FF1540864B00            Call dword ptr [004B8640]
:00463CA7 833D407A470028          cmp dword ptr [00477A40], 00000028
:00463CAE 741C                    je 00463CCC
:00463CB0 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00463CB2 6A02                    push 00000002

* Possible StringData Ref from Data Obj ->"EKD4.HLP"
                                  |
:00463CB4 68E8E44700              push 0047E4E8
:00463CB9 E8F6C4FAFF              call 004101B4
:00463CBE 83C404                  add esp, 00000004
:00463CC1 50                      push eax
:00463CC2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463CC5 51                      push ecx

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00463CC6 FF1538864B00            Call dword ptr [004B8638]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463CAE(C)
|
:00463CCC E979020000              jmp 00463F4A
:00463CD1 8B5510                  mov edx, dword ptr [ebp+10]
:00463CD4 8955F4                  mov dword ptr [ebp-0C], edx
:00463CD7 817DF420F00000          cmp dword ptr [ebp-0C], 0000F020
:00463CDE 7414                    je 00463CF4
:00463CE0 817DF430F00000          cmp dword ptr [ebp-0C], 0000F030
:00463CE7 7443                    je 00463D2C
:00463CE9 817DF420F10000          cmp dword ptr [ebp-0C], 0000F120
:00463CF0 7448                    je 00463D3A
:00463CF2 EB74                    jmp 00463D68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463CDE(C)
|
:00463CF4 8B4508                  mov eax, dword ptr [ebp+08]
:00463CF7 50                      push eax
:00463CF8 E828530000              call 00469025
:00463CFD 83C404                  add esp, 00000004
:00463D00 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:00463D06 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00463D07 FF15E0864B00            Call dword ptr [004B86E0]
:00463D0D 85C0                    test eax, eax
:00463D0F 7419                    je 00463D2A
:00463D11 C705440E4B0001000000    mov dword ptr [004B0E44], 00000001
:00463D1B 6A00                    push 00000000
:00463D1D 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00463D23 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00463D24 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463D0F(C)
|
:00463D2A EB3C                    jmp 00463D68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463CE7(C)
|
:00463D2C 8B4508                  mov eax, dword ptr [ebp+08]
:00463D2F 50                      push eax
:00463D30 E838530000              call 0046906D
:00463D35 83C404                  add esp, 00000004
:00463D38 EB2E                    jmp 00463D68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463CF0(C)
|
:00463D3A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463D3D 51                      push ecx
:00463D3E E863530000              call 004690A6
:00463D43 83C404                  add esp, 00000004
:00463D46 833D440E4B0000          cmp dword ptr [004B0E44], 00000000
:00463D4D 7419                    je 00463D68
:00463D4F C705440E4B0000000000    mov dword ptr [004B0E44], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00463D59 6A05                    push 00000005
:00463D5B 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00463D61 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00463D62 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00463CF2(U), :00463D2A(U), :00463D38(U), :00463D4D(C)
|
:00463D68 E9DD010000              jmp 00463F4A
:00463D6D 8B4514                  mov eax, dword ptr [ebp+14]
:00463D70 50                      push eax
:00463D71 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463D74 51                      push ecx
:00463D75 8B550C                  mov edx, dword ptr [ebp+0C]
:00463D78 52                      push edx
:00463D79 8B4508                  mov eax, dword ptr [ebp+08]
:00463D7C 50                      push eax
:00463D7D E80FFCFFFF              call 00463991
:00463D82 83C410                  add esp, 00000010
:00463D85 E9D8010000              jmp 00463F62
:00463D8A 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463D8D 890D400E4B00            mov dword ptr [004B0E40], ecx
:00463D93 833D400E4B0000          cmp dword ptr [004B0E40], 00000000
:00463D9A 7414                    je 00463DB0
:00463D9C 8B5508                  mov edx, dword ptr [ebp+08]
:00463D9F 52                      push edx

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:00463DA0 FF1508874B00            Call dword ptr [004B8708]
:00463DA6 8B4508                  mov eax, dword ptr [ebp+08]
:00463DA9 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00463DAA FF15A4864B00            Call dword ptr [004B86A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463D9A(C)
|
:00463DB0 E995010000              jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C7B(C)
|
:00463DB5 8B4D14                  mov ecx, dword ptr [ebp+14]
:00463DB8 51                      push ecx
:00463DB9 8B5510                  mov edx, dword ptr [ebp+10]
:00463DBC 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00463DBD 6A05                    push 00000005
:00463DBF A1480E4B00              mov eax, dword ptr [004B0E48]
:00463DC4 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463DC5 FF15D8864B00            Call dword ptr [004B86D8]
:00463DCB E97A010000              jmp 00463F4A
:00463DD0 8B4D14                  mov ecx, dword ptr [ebp+14]
:00463DD3 51                      push ecx
:00463DD4 8B5510                  mov edx, dword ptr [ebp+10]
:00463DD7 52                      push edx
:00463DD8 8B4508                  mov eax, dword ptr [ebp+08]
:00463DDB 50                      push eax
:00463DDC E8D7550000              call 004693B8
:00463DE1 83C40C                  add esp, 0000000C
:00463DE4 8B4D14                  mov ecx, dword ptr [ebp+14]
:00463DE7 51                      push ecx
:00463DE8 8B5510                  mov edx, dword ptr [ebp+10]
:00463DEB 52                      push edx
:00463DEC 8B450C                  mov eax, dword ptr [ebp+0C]
:00463DEF 50                      push eax
:00463DF0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463DF3 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00463DF4 FF15DC864B00            Call dword ptr [004B86DC]
:00463DFA E963010000              jmp 00463F62
:00463DFF 8B5514                  mov edx, dword ptr [ebp+14]
:00463E02 52                      push edx
:00463E03 8B4510                  mov eax, dword ptr [ebp+10]
:00463E06 50                      push eax
:00463E07 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463E0A 51                      push ecx
:00463E0B E88F590000              call 0046979F
:00463E10 83C40C                  add esp, 0000000C
:00463E13 E932010000              jmp 00463F4A
:00463E18 8B5514                  mov edx, dword ptr [ebp+14]
:00463E1B 52                      push edx
:00463E1C 8B4510                  mov eax, dword ptr [ebp+10]
:00463E1F 50                      push eax
:00463E20 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463E23 51                      push ecx
:00463E24 E87D5B0000              call 004699A6
:00463E29 83C40C                  add esp, 0000000C
:00463E2C E919010000              jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463BCB(C)
|
:00463E31 33C0                    xor eax, eax
:00463E33 E92A010000              jmp 00463F62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C02(C)
|
:00463E38 8B5514                  mov edx, dword ptr [ebp+14]
:00463E3B 52                      push edx
:00463E3C 8B4508                  mov eax, dword ptr [ebp+08]
:00463E3F 50                      push eax
:00463E40 E8C6520000              call 0046910B
:00463E45 83C408                  add esp, 00000008
:00463E48 33C0                    xor eax, eax
:00463E4A E913010000              jmp 00463F62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463BF8(C)
|
:00463E4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463E52 51                      push ecx
:00463E53 E8F301FBFF              call 0041404B
:00463E58 83C404                  add esp, 00000004
:00463E5B E9EA000000              jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C42(C)
|
:00463E60 8B5514                  mov edx, dword ptr [ebp+14]
:00463E63 52                      push edx
:00463E64 8B450C                  mov eax, dword ptr [ebp+0C]
:00463E67 50                      push eax
:00463E68 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463E6B 51                      push ecx
:00463E6C B980594800              mov ecx, 00485980
:00463E71 E884C9FBFF              call 004207FA
:00463E76 E9CF000000              jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C1D(C)
|
:00463E7B 8B5510                  mov edx, dword ptr [ebp+10]
:00463E7E 8955F0                  mov dword ptr [ebp-10], edx
:00463E81 E9C4000000              jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C27(C)
|
:00463E86 8B4514                  mov eax, dword ptr [ebp+14]
:00463E89 8945FC                  mov dword ptr [ebp-04], eax
:00463E8C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463E8F 817908F8FDFFFF          cmp dword ptr [ecx+08], FFFFFDF8
:00463E96 0F859C000000            jne 00463F38
:00463E9C 8B55FC                  mov edx, dword ptr [ebp-04]
:00463E9F 8B4204                  mov eax, dword ptr [edx+04]
:00463EA2 8945EC                  mov dword ptr [ebp-14], eax
:00463EA5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00463EA8 83E965                  sub ecx, 00000065
:00463EAB 894DEC                  mov dword ptr [ebp-14], ecx
:00463EAE 837DEC0A                cmp dword ptr [ebp-14], 0000000A
:00463EB2 0F8780000000            ja 00463F38
:00463EB8 8B55EC                  mov edx, dword ptr [ebp-14]
:00463EBB FF2495943F4600          jmp dword ptr [4*edx+00463F94]
:00463EC2 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"xs"
                                  |
:00463EC5 C7400C6CE54700          mov [eax+0C], 0047E56C
:00463ECC EB6A                    jmp 00463F38
:00463ECE 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"J"
                                  |
:00463ED1 C7410C74E54700          mov [ecx+0C], 0047E574
:00463ED8 EB5E                    jmp 00463F38
:00463EDA 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->""
                                  |
:00463EDD C7420C7CE54700          mov [edx+0C], 0047E57C
:00463EE4 EB52                    jmp 00463F38
:00463EE6 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ZN@"
                                  |
:00463EE9 C7400C84E54700          mov [eax+0C], 0047E584
:00463EF0 EB46                    jmp 00463F38
:00463EF2 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ӧQ"
                                  |
:00463EF5 C7410C90E54700          mov [ecx+0C], 0047E590
:00463EFC EB3A                    jmp 00463F38
:00463EFE 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ҳ]w"
                                  |
:00463F01 C7420C9CE54700          mov [edx+0C], 0047E59C
:00463F08 EB2E                    jmp 00463F38
:00463F0A 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ԳYp"
                                  |
:00463F0D C7400CA8E54700          mov [eax+0C], 0047E5A8
:00463F14 EB22                    jmp 00463F38
:00463F16 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"^X"
                                  |
:00463F19 C7410CB4E54700          mov [ecx+0C], 0047E5B4
:00463F20 EB16                    jmp 00463F38
:00463F22 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"e"
                                  |
:00463F25 C7420CC0E54700          mov [edx+0C], 0047E5C0
:00463F2C EB0A                    jmp 00463F38
:00463F2E 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"fe"
                                  |
:00463F31 C7400CC8E54700          mov [eax+0C], 0047E5C8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00463E96(C), :00463EB2(C), :00463ECC(U), :00463ED8(U), :00463EE4(U)
|:00463EF0(U), :00463EFC(U), :00463F08(U), :00463F14(U), :00463F20(U)
|:00463F2C(U)
|
:00463F38 EB10                    jmp 00463F4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C6E(C)
|
:00463F3A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00463F3D 51                      push ecx
:00463F3E 8B5510                  mov edx, dword ptr [ebp+10]
:00463F41 52                      push edx
:00463F42 E8ED00FBFF              call 00414034
:00463F47 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00463BDE(C), :00463C08(U), :00463C2D(U), :00463C57(C), :00463C81(U)
|:00463C92(U), :00463CCC(U), :00463D68(U), :00463DB0(U), :00463DCB(U)
|:00463E13(U), :00463E2C(U), :00463E5B(U), :00463E76(U), :00463E81(U)
|:00463F38(U)
|
:00463F4A 8B4514                  mov eax, dword ptr [ebp+14]
:00463F4D 50                      push eax
:00463F4E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463F51 51                      push ecx
:00463F52 8B550C                  mov edx, dword ptr [ebp+0C]
:00463F55 52                      push edx
:00463F56 8B4508                  mov eax, dword ptr [ebp+08]
:00463F59 50                      push eax
:00463F5A E88A8A0000              call 0046C9E9
:00463F5F 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00463D85(U), :00463DFA(U), :00463E33(U), :00463E4A(U)
|
:00463F62 8BE5                    mov esp, ebp
:00463F64 5D                      pop ebp
:00463F65 C21000                  ret 0010



:00463F68 863C4600                DWORD 00463C86
:00463F6C 973C4600                DWORD 00463C97
:00463F70 4A3F4600                DWORD 00463F4A
:00463F74 4A3F4600                DWORD 00463F4A
:00463F78 D03D4600                DWORD 00463DD0
:00463F7C 8A3D4600                DWORD 00463D8A
:00463F80 6D3D4600                DWORD 00463D6D
:00463F84 D13C4600                DWORD 00463CD1
:00463F88 4A3F4600                DWORD 00463F4A
:00463F8C FF3D4600                DWORD 00463DFF
:00463F90 183E4600                DWORD 00463E18
:00463F94 C23E4600                DWORD 00463EC2
:00463F98 CE3E4600                DWORD 00463ECE
:00463F9C 383F4600                DWORD 00463F38
:00463FA0 DA3E4600                DWORD 00463EDA
:00463FA4 E63E4600                DWORD 00463EE6
:00463FA8 F23E4600                DWORD 00463EF2
:00463FAC FE3E4600                DWORD 00463EFE
:00463FB0 0A3F4600                DWORD 00463F0A
:00463FB4 163F4600                DWORD 00463F16
:00463FB8 223F4600                DWORD 00463F22
:00463FBC 2E3F4600                DWORD 00463F2E



* Referenced by a CALL at Address:
|:0046443E   
|
:00463FC0 55                      push ebp
:00463FC1 8BEC                    mov ebp, esp
:00463FC3 83EC7C                  sub esp, 0000007C
:00463FC6 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:00463FC8 68D8E44700              push 0047E4D8

* Reference To: USER32.FindWindowA, Ord:00CDh
                                  |
:00463FCD FF154C864B00            Call dword ptr [004B864C]
:00463FD3 8945F0                  mov dword ptr [ebp-10], eax
:00463FD6 837DF000                cmp dword ptr [ebp-10], 00000000
:00463FDA 7461                    je 0046403D
:00463FDC 8B45F0                  mov eax, dword ptr [ebp-10]
:00463FDF 50                      push eax

* Reference To: USER32.IsIconic, Ord:0164h
                                  |
:00463FE0 FF1548864B00            Call dword ptr [004B8648]
:00463FE6 85C0                    test eax, eax
:00463FE8 7416                    je 00464000
:00463FEA 6A00                    push 00000000
:00463FEC 6820F10000              push 0000F120
:00463FF1 6812010000              push 00000112
:00463FF6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00463FF9 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463FFA FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463FE8(C)
|
:00464000 8B55F0                  mov edx, dword ptr [ebp-10]
:00464003 52                      push edx

* Reference To: USER32.GetLastActivePopup, Ord:0108h
                                  |
:00464004 FF1544864B00            Call dword ptr [004B8644]
:0046400A 8945C0                  mov dword ptr [ebp-40], eax
:0046400D 8B45F0                  mov eax, dword ptr [ebp-10]
:00464010 50                      push eax

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:00464011 FF1508874B00            Call dword ptr [004B8708]
:00464017 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046401A 3B4DC0                  cmp ecx, dword ptr [ebp-40]
:0046401D 740A                    je 00464029
:0046401F 8B55C0                  mov edx, dword ptr [ebp-40]
:00464022 52                      push edx

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:00464023 FF1508874B00            Call dword ptr [004B8708]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046401D(C)
|

* Possible StringData Ref from Data Obj ->"bC"
                                  |
:00464029 68D0E54700              push 0047E5D0
:0046402E E85EF8FFFF              call 00463891
:00464033 83C404                  add esp, 00000004
:00464036 33C0                    xor eax, eax
:00464038 E9ED030000              jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463FDA(C)
|
:0046403D 8B4508                  mov eax, dword ptr [ebp+08]
:00464040 A3300E4B00              mov dword ptr [004B0E30], eax
:00464045 6A00                    push 00000000

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00464047 FF15B8864B00            Call dword ptr [004B86B8]
:0046404D 8945C4                  mov dword ptr [ebp-3C], eax
:00464050 837DC400                cmp dword ptr [ebp-3C], 00000000
:00464054 7435                    je 0046408B

* Possible Reference to String Resource ID=00012: ""
                                  |
:00464056 6A0C                    push 0000000C
:00464058 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0046405B 51                      push ecx

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:0046405C FF15D0844B00            Call dword ptr [004B84D0]
:00464062 8945B8                  mov dword ptr [ebp-48], eax
:00464065 8B55C4                  mov edx, dword ptr [ebp-3C]
:00464068 52                      push edx
:00464069 6A00                    push 00000000

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046406B FF15BC864B00            Call dword ptr [004B86BC]
:00464071 837DB808                cmp dword ptr [ebp-48], 00000008
:00464075 7D14                    jge 0046408B

* Possible StringData Ref from Data Obj ->"Шϥ256HWܾC"
                                  |
:00464077 68DCE54700              push 0047E5DC
:0046407C E810F8FFFF              call 00463891
:00464081 83C404                  add esp, 00000004
:00464084 33C0                    xor eax, eax
:00464086 E99F030000              jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464054(C), :00464075(C)
|
:0046408B 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0046408F 756A                    jne 004640FB
:00464091 C745C80B100000          mov [ebp-38], 0000100B

* Possible StringData Ref from Code Obj ->"UEE}w'}`"
                                  |
:00464098 C745CCB53B4600          mov [ebp-34], 00463BB5
:0046409F C745D400000000          mov [ebp-2C], 00000000
:004640A6 C745D000000000          mov [ebp-30], 00000000
:004640AD 8B4508                  mov eax, dword ptr [ebp+08]
:004640B0 8945D8                  mov dword ptr [ebp-28], eax
:004640B3 6889000000              push 00000089
:004640B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004640BB 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:004640BC FF15E8864B00            Call dword ptr [004B86E8]
:004640C2 8945DC                  mov dword ptr [ebp-24], eax
:004640C5 C745E000000000          mov [ebp-20], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:004640CC C745E406000000          mov [ebp-1C], 00000006

* Possible StringData Ref from Data Obj ->"APPMENU"
                                  |
:004640D3 C745E8F8E54700          mov [ebp-18], 0047E5F8

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:004640DA C745ECD8E44700          mov [ebp-14], 0047E4D8
:004640E1 8D55C8                  lea edx, dword ptr [ebp-38]
:004640E4 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:004640E5 FF15F0864B00            Call dword ptr [004B86F0]
:004640EB 25FFFF0000              and eax, 0000FFFF
:004640F0 85C0                    test eax, eax
:004640F2 7507                    jne 004640FB
:004640F4 33C0                    xor eax, eax
:004640F6 E92F030000              jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046408F(C), :004640F2(C)
|
:004640FB 8D45FC                  lea eax, dword ptr [ebp-04]
:004640FE 50                      push eax
:004640FF 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00464102 51                      push ecx
:00464103 E8AD850000              call 0046C6B5
:00464108 83C408                  add esp, 00000008
:0046410B 817DF880020000          cmp dword ptr [ebp-08], 00000280
:00464112 7C09                    jl 0046411D
:00464114 817DFC88010000          cmp dword ptr [ebp-04], 00000188
:0046411B 7D14                    jge 00464131

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464112(C)
|

* Possible StringData Ref from Data Obj ->"ݭn640480HWܯOC"
                                  |
:0046411D 6800E64700              push 0047E600
:00464122 E86AF7FFFF              call 00463891
:00464127 83C404                  add esp, 00000004
:0046412A 33C0                    xor eax, eax
:0046412C E9F9020000              jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046411B(C)
|
:00464131 817DF800050000          cmp dword ptr [ebp-08], 00000500
:00464138 7C49                    jl 00464183

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:0500, "[+"
                                  |
:0046413A C745BC00050000          mov [ebp-44], 00000500
:00464141 817DFC00040000          cmp dword ptr [ebp-04], 00000400
:00464148 7C09                    jl 00464153

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046414A C745AC00040000          mov [ebp-54], 00000400
:00464151 EB25                    jmp 00464178

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464148(C)
|
:00464153 8B55FC                  mov edx, dword ptr [ebp-04]
:00464156 83E2F0                  and edx, FFFFFFF0
:00464159 81FAE0010000            cmp edx, 000001E0
:0046415F 7D09                    jge 0046416A
:00464161 C745A8E0010000          mov [ebp-58], 000001E0
:00464168 EB08                    jmp 00464172

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046415F(C)
|
:0046416A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046416D 24F0                    and al, F0
:0046416F 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464168(U)
|
:00464172 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00464175 894DAC                  mov dword ptr [ebp-54], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464151(U)
|
:00464178 8B55AC                  mov edx, dword ptr [ebp-54]
:0046417B 8955F4                  mov dword ptr [ebp-0C], edx
:0046417E E9EE000000              jmp 00464271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464138(C)
|
:00464183 817DF800040000          cmp dword ptr [ebp-08], 00000400
:0046418A 7C48                    jl 004641D4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046418C C745BC00040000          mov [ebp-44], 00000400
:00464193 817DFC00030000          cmp dword ptr [ebp-04], 00000300
:0046419A 7C09                    jl 004641A5
:0046419C C745A400030000          mov [ebp-5C], 00000300
:004641A3 EB24                    jmp 004641C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046419A(C)
|
:004641A5 8B45FC                  mov eax, dword ptr [ebp-04]
:004641A8 24F0                    and al, F0
:004641AA 3DE0010000              cmp eax, 000001E0
:004641AF 7D09                    jge 004641BA
:004641B1 C745A0E0010000          mov [ebp-60], 000001E0
:004641B8 EB09                    jmp 004641C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641AF(C)
|
:004641BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004641BD 83E1F0                  and ecx, FFFFFFF0
:004641C0 894DA0                  mov dword ptr [ebp-60], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641B8(U)
|
:004641C3 8B55A0                  mov edx, dword ptr [ebp-60]
:004641C6 8955A4                  mov dword ptr [ebp-5C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641A3(U)
|
:004641C9 8B45A4                  mov eax, dword ptr [ebp-5C]
:004641CC 8945F4                  mov dword ptr [ebp-0C], eax
:004641CF E99D000000              jmp 00464271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046418A(C)
|
:004641D4 817DF820030000          cmp dword ptr [ebp-08], 00000320
:004641DB 7C47                    jl 00464224
:004641DD C745BC20030000          mov [ebp-44], 00000320
:004641E4 817DFC58020000          cmp dword ptr [ebp-04], 00000258
:004641EB 7C09                    jl 004641F6
:004641ED C7459C58020000          mov [ebp-64], 00000258
:004641F4 EB26                    jmp 0046421C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641EB(C)
|
:004641F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004641F9 83E1F0                  and ecx, FFFFFFF0
:004641FC 81F9E0010000            cmp ecx, 000001E0
:00464202 7D09                    jge 0046420D
:00464204 C74598E0010000          mov [ebp-68], 000001E0
:0046420B EB09                    jmp 00464216

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464202(C)
|
:0046420D 8B55FC                  mov edx, dword ptr [ebp-04]
:00464210 83E2F0                  and edx, FFFFFFF0
:00464213 895598                  mov dword ptr [ebp-68], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046420B(U)
|
:00464216 8B4598                  mov eax, dword ptr [ebp-68]
:00464219 89459C                  mov dword ptr [ebp-64], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641F4(U)
|
:0046421C 8B4D9C                  mov ecx, dword ptr [ebp-64]
:0046421F 894DF4                  mov dword ptr [ebp-0C], ecx
:00464222 EB4D                    jmp 00464271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641DB(C)
|
:00464224 817DF880020000          cmp dword ptr [ebp-08], 00000280
:0046422B 7C44                    jl 00464271
:0046422D C745BC80020000          mov [ebp-44], 00000280
:00464234 817DFCE0010000          cmp dword ptr [ebp-04], 000001E0
:0046423B 7C09                    jl 00464246
:0046423D C74594E0010000          mov [ebp-6C], 000001E0
:00464244 EB25                    jmp 0046426B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046423B(C)
|
:00464246 8B55FC                  mov edx, dword ptr [ebp-04]
:00464249 83E2F0                  and edx, FFFFFFF0
:0046424C 81FAE0010000            cmp edx, 000001E0
:00464252 7D09                    jge 0046425D
:00464254 C74590E0010000          mov [ebp-70], 000001E0
:0046425B EB08                    jmp 00464265

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464252(C)
|
:0046425D 8B45FC                  mov eax, dword ptr [ebp-04]
:00464260 24F0                    and al, F0
:00464262 894590                  mov dword ptr [ebp-70], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046425B(U)
|
:00464265 8B4D90                  mov ecx, dword ptr [ebp-70]
:00464268 894D94                  mov dword ptr [ebp-6C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464244(U)
|
:0046426B 8B5594                  mov edx, dword ptr [ebp-6C]
:0046426E 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046417E(U), :004641CF(U), :00464222(U), :0046422B(C)
|
:00464271 8B45F4                  mov eax, dword ptr [ebp-0C]
:00464274 50                      push eax
:00464275 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00464278 51                      push ecx
:00464279 E8C9470000              call 00468A47
:0046427E 83C408                  add esp, 00000008
:00464281 6A00                    push 00000000
:00464283 8B5508                  mov edx, dword ptr [ebp+08]
:00464286 52                      push edx
:00464287 6A00                    push 00000000
:00464289 6A00                    push 00000000
:0046428B 6800000080              push 80000000
:00464290 6800000080              push 80000000
:00464295 6800000080              push 80000000
:0046429A 6800000080              push 80000000
:0046429F 6800003F02              push 023F0000

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:004642A4 68D8E44700              push 0047E4D8

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:004642A9 68D8E44700              push 0047E4D8
:004642AE 6A00                    push 00000000

* Reference To: USER32.CreateWindowExA, Ord:0055h
                                  |
:004642B0 FF15F4864B00            Call dword ptr [004B86F4]
:004642B6 A3380E4B00              mov dword ptr [004B0E38], eax
:004642BB 833D380E4B0000          cmp dword ptr [004B0E38], 00000000
:004642C2 0F8460010000            je 00464428
:004642C8 6A01                    push 00000001
:004642CA 8B45F4                  mov eax, dword ptr [ebp-0C]
:004642CD 50                      push eax
:004642CE 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004642D1 51                      push ecx
:004642D2 8B15380E4B00            mov edx, dword ptr [004B0E38]
:004642D8 52                      push edx
:004642D9 E8EE630000              call 0046A6CC
:004642DE 83C410                  add esp, 00000010
:004642E1 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004642E3 6A03                    push 00000003
:004642E5 A1380E4B00              mov eax, dword ptr [004B0E38]
:004642EA 50                      push eax

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:004642EB FF1540864B00            Call dword ptr [004B8640]
:004642F1 6A00                    push 00000000
:004642F3 E82F640000              call 0046A727
:004642F8 83C404                  add esp, 00000004
:004642FB 6A15                    push 00000015

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004642FD FF1578874B00            Call dword ptr [004B8778]
:00464303 8945B0                  mov dword ptr [ebp-50], eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00464306 6A02                    push 00000002

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00464308 FF1578874B00            Call dword ptr [004B8778]
:0046430E 8945B4                  mov dword ptr [ebp-4C], eax
:00464311 8B45B0                  mov eax, dword ptr [ebp-50]
:00464314 99                      cdq
:00464315 B930000000              mov ecx, 00000030
:0046431A F7F9                    idiv ecx
:0046431C 83FA08                  cmp edx, 00000008
:0046431F 7E3F                    jle 00464360
:00464321 8B45B0                  mov eax, dword ptr [ebp-50]
:00464324 99                      cdq
:00464325 B930000000              mov ecx, 00000030
:0046432A F7F9                    idiv ecx
:0046432C 83FA10                  cmp edx, 00000010
:0046432F 7D2F                    jge 00464360

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00464331 BA10000000              mov edx, 00000010
:00464336 2B55B0                  sub edx, dword ptr [ebp-50]
:00464339 85D2                    test edx, edx
:0046433B 7D09                    jge 00464346
:0046433D C7458C00000000          mov [ebp-74], 00000000
:00464344 EB0B                    jmp 00464351

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046433B(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00464346 B810000000              mov eax, 00000010
:0046434B 2B45B0                  sub eax, dword ptr [ebp-50]
:0046434E 89458C                  mov dword ptr [ebp-74], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464344(U)
|
:00464351 8B0DF4E44700            mov ecx, dword ptr [0047E4F4]
:00464357 2B4D8C                  sub ecx, dword ptr [ebp-74]
:0046435A 890DF4E44700            mov dword ptr [0047E4F4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046431F(C), :0046432F(C)
|
:00464360 8B45B4                  mov eax, dword ptr [ebp-4C]
:00464363 99                      cdq
:00464364 B930000000              mov ecx, 00000030
:00464369 F7F9                    idiv ecx
:0046436B 83FA08                  cmp edx, 00000008
:0046436E 7E3F                    jle 004643AF
:00464370 8B45B4                  mov eax, dword ptr [ebp-4C]
:00464373 99                      cdq
:00464374 B930000000              mov ecx, 00000030
:00464379 F7F9                    idiv ecx
:0046437B 83FA10                  cmp edx, 00000010
:0046437E 7D2F                    jge 004643AF

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00464380 BA10000000              mov edx, 00000010
:00464385 2B55B4                  sub edx, dword ptr [ebp-4C]
:00464388 85D2                    test edx, edx
:0046438A 7D09                    jge 00464395
:0046438C C7458800000000          mov [ebp-78], 00000000
:00464393 EB0B                    jmp 004643A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046438A(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00464395 B810000000              mov eax, 00000010
:0046439A 2B45B4                  sub eax, dword ptr [ebp-4C]
:0046439D 894588                  mov dword ptr [ebp-78], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464393(U)
|
:004643A0 8B0DF8E44700            mov ecx, dword ptr [0047E4F8]
:004643A6 2B4D88                  sub ecx, dword ptr [ebp-78]
:004643A9 890DF8E44700            mov dword ptr [0047E4F8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046436E(C), :0046437E(C)
|
:004643AF 8B15F8E44700            mov edx, dword ptr [0047E4F8]
:004643B5 3B55F4                  cmp edx, dword ptr [ebp-0C]
:004643B8 7D0A                    jge 004643C4
:004643BA A1F8E44700              mov eax, dword ptr [0047E4F8]
:004643BF 894584                  mov dword ptr [ebp-7C], eax
:004643C2 EB06                    jmp 004643CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004643B8(C)
|
:004643C4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004643C7 894D84                  mov dword ptr [ebp-7C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004643C2(U)
|
:004643CA 6A00                    push 00000000
:004643CC 8B5584                  mov edx, dword ptr [ebp-7C]
:004643CF 83EA28                  sub edx, 00000028
:004643D2 52                      push edx
:004643D3 A1F4E44700              mov eax, dword ptr [0047E4F4]
:004643D8 50                      push eax
:004643D9 E82E830000              call 0046C70C
:004643DE 83C40C                  add esp, 0000000C
:004643E1 B980594800              mov ecx, 00485980
:004643E6 E817BEFBFF              call 00420202
:004643EB 85C0                    test eax, eax
:004643ED 7504                    jne 004643F3
:004643EF 33C0                    xor eax, eax
:004643F1 EB37                    jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004643ED(C)
|
:004643F3 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004643F9 51                      push ecx
:004643FA E86FB0FFFF              call 0045F46E
:004643FF 83C404                  add esp, 00000004
:00464402 85C0                    test eax, eax
:00464404 7504                    jne 0046440A
:00464406 33C0                    xor eax, eax
:00464408 EB20                    jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464404(C)
|
:0046440A 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00464410 52                      push edx
:00464411 E857070000              call 00464B6D
:00464416 83C404                  add esp, 00000004
:00464419 85C0                    test eax, eax
:0046441B 7404                    je 00464421
:0046441D 33C0                    xor eax, eax
:0046441F EB09                    jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046441B(C)
|
:00464421 B801000000              mov eax, 00000001
:00464426 EB02                    jmp 0046442A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004642C2(C)
|
:00464428 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464038(U), :00464086(U), :004640F6(U), :0046412C(U), :004643F1(U)
|:00464408(U), :0046441F(U), :00464426(U)
|
:0046442A 8BE5                    mov esp, ebp
:0046442C 5D                      pop ebp
:0046442D C20800                  ret 0008



* Referenced by a CALL at Address:
|:0046E79A   
|
:00464430 55                      push ebp
:00464431 8BEC                    mov ebp, esp
:00464433 83EC1C                  sub esp, 0000001C
:00464436 8B450C                  mov eax, dword ptr [ebp+0C]
:00464439 50                      push eax
:0046443A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046443D 51                      push ecx
:0046443E E87DFBFFFF              call 00463FC0
:00464443 85C0                    test eax, eax
:00464445 7504                    jne 0046444B
:00464447 33C0                    xor eax, eax
:00464449 EB1F                    jmp 0046446A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464445(C)
|

* Possible StringData Ref from Code Obj ->"U=<K"
                                  |
:0046444B 6822394600              push 00463922
:00464450 E8EF800000              call 0046C544
:00464455 83C404                  add esp, 00000004
:00464458 E87625FCFF              call 004269D3
:0046445D B980594800              mov ecx, 00485980
:00464462 E88CC2FBFF              call 004206F3
:00464467 8B45EC                  mov eax, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464449(U)
|
:0046446A 8BE5                    mov esp, ebp
:0046446C 5D                      pop ebp
:0046446D C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00405C86   , :00405D81   , :00405E5F   , :00405EB8   , :00405F14   
|:00405F48   , :00407048   , :0041759F   , :004177A5   , :004177B9   
|:00464E21   , :00464E65   , :00464EA9   , :00464EF2   , :00464F3F   
|:00464F91   , :00465074   , :004650B8   , :00465101   , :0046512F   
|:0046515D   , :004651F3   , :00465D9F   
|
:00464470 55                      push ebp
:00464471 8BEC                    mov ebp, esp
:00464473 8B4510                  mov eax, dword ptr [ebp+10]
:00464476 50                      push eax
:00464477 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046447A 51                      push ecx
:0046447B 8B5508                  mov edx, dword ptr [ebp+08]
:0046447E 52                      push edx
:0046447F E8F5DEFFFF              call 00462379
:00464484 83C40C                  add esp, 0000000C
:00464487 5D                      pop ebp
:00464488 C3                      ret



* Referenced by a CALL at Address:
|:0041FECB   
|
:00464489 55                      push ebp
:0046448A 8BEC                    mov ebp, esp
:0046448C 83EC0C                  sub esp, 0000000C
:0046448F 894DF4                  mov dword ptr [ebp-0C], ecx
:00464492 6A00                    push 00000000
:00464494 6A3A                    push 0000003A

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00464496 68FF000000              push 000000FF

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046449B 6A10                    push 00000010

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046449D 6A10                    push 00000010

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:0046449F FF1578844B00            Call dword ptr [004B8478]
:004644A5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004644A8 89410C                  mov dword ptr [ecx+0C], eax
:004644AB 6A00                    push 00000000
:004644AD 6A3A                    push 0000003A

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004644AF 68FF000000              push 000000FF
:004644B4 6A20                    push 00000020
:004644B6 6A20                    push 00000020

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:004644B8 FF1578844B00            Call dword ptr [004B8478]
:004644BE 8B55F4                  mov edx, dword ptr [ebp-0C]
:004644C1 894210                  mov dword ptr [edx+10], eax
:004644C4 C745F800000000          mov [ebp-08], 00000000
:004644CB EB09                    jmp 004644D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464526(U)
|
:004644CD 8B45F8                  mov eax, dword ptr [ebp-08]
:004644D0 83C001                  add eax, 00000001
:004644D3 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004644CB(U)
|
:004644D6 837DF83A                cmp dword ptr [ebp-08], 0000003A
:004644DA 7D4C                    jge 00464528
:004644DC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004644DF 81C1C2010000            add ecx, 000001C2
:004644E5 81E1FFFF0000            and ecx, 0000FFFF
:004644EB 51                      push ecx
:004644EC B910584800              mov ecx, 00485810
:004644F1 E86A01FFFF              call 00454660
:004644F6 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:004644F7 FF15E8864B00            Call dword ptr [004B86E8]
:004644FD 8945FC                  mov dword ptr [ebp-04], eax
:00464500 8B55FC                  mov edx, dword ptr [ebp-04]
:00464503 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00464504 6AFF                    push FFFFFFFF
:00464506 8B45F4                  mov eax, dword ptr [ebp-0C]
:00464509 8B480C                  mov ecx, dword ptr [eax+0C]
:0046450C 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0046450D FF1574844B00            Call dword ptr [004B8474]
:00464513 8B55FC                  mov edx, dword ptr [ebp-04]
:00464516 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00464517 6AFF                    push FFFFFFFF
:00464519 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046451C 8B4810                  mov ecx, dword ptr [eax+10]
:0046451F 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00464520 FF1574844B00            Call dword ptr [004B8474]
:00464526 EBA5                    jmp 004644CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004644DA(C)
|
:00464528 8BE5                    mov esp, ebp
:0046452A 5D                      pop ebp
:0046452B C3                      ret



* Referenced by a CALL at Addresses:
|:00414AC0   , :004682A6   
|
:0046452C 55                      push ebp
:0046452D 8BEC                    mov ebp, esp
:0046452F 51                      push ecx
:00464530 894DFC                  mov dword ptr [ebp-04], ecx
:00464533 8B45FC                  mov eax, dword ptr [ebp-04]
:00464536 833800                  cmp dword ptr [eax], 00000000
:00464539 7521                    jne 0046455C
:0046453B 6A00                    push 00000000
:0046453D 68B8714600              push 004671B8
:00464542 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464545 51                      push ecx

* Possible Reference to Dialog: DialogID_00D4 
                                  |
:00464546 68D4000000              push 000000D4
:0046454B 8B5508                  mov edx, dword ptr [ebp+08]
:0046454E 52                      push edx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0046454F FF15A0864B00            Call dword ptr [004B86A0]
:00464555 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464558 8901                    mov dword ptr [ecx], eax
:0046455A EB0E                    jmp 0046456A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464539(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0046455C 6A09                    push 00000009
:0046455E 8B55FC                  mov edx, dword ptr [ebp-04]
:00464561 8B02                    mov eax, dword ptr [edx]
:00464563 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464564 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046455A(U)
|
:0046456A 8BE5                    mov esp, ebp
:0046456C 5D                      pop ebp
:0046456D C20800                  ret 0008



* Referenced by a CALL at Address:
|:004682BA   
|
:00464570 55                      push ebp
:00464571 8BEC                    mov ebp, esp
:00464573 51                      push ecx
:00464574 894DFC                  mov dword ptr [ebp-04], ecx
:00464577 8B45FC                  mov eax, dword ptr [ebp-04]
:0046457A 83780400                cmp dword ptr [eax+04], 00000000
:0046457E 7522                    jne 004645A2
:00464580 6A00                    push 00000000
:00464582 680F7F4600              push 00467F0F
:00464587 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046458A 51                      push ecx

* Possible Reference to Dialog: DialogID_00BA 
                                  |
:0046458B 68BA000000              push 000000BA
:00464590 8B5508                  mov edx, dword ptr [ebp+08]
:00464593 52                      push edx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00464594 FF15A0864B00            Call dword ptr [004B86A0]
:0046459A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046459D 894104                  mov dword ptr [ecx+04], eax
:004645A0 EB0F                    jmp 004645B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046457E(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:004645A2 6A09                    push 00000009
:004645A4 8B55FC                  mov edx, dword ptr [ebp-04]
:004645A7 8B4204                  mov eax, dword ptr [edx+04]
:004645AA 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004645AB FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004645A0(U)
|
:004645B1 8BE5                    mov esp, ebp
:004645B3 5D                      pop ebp
:004645B4 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0041111F   , :00414A6D   , :00467055   , :0046711B   , :00467316   
|:004680A5   
|
:004645B7 55                      push ebp
:004645B8 8BEC                    mov ebp, esp
:004645BA 51                      push ecx
:004645BB 894DFC                  mov dword ptr [ebp-04], ecx
:004645BE 8B45FC                  mov eax, dword ptr [ebp-04]
:004645C1 833800                  cmp dword ptr [eax], 00000000
:004645C4 740A                    je 004645D0
:004645C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004645C9 E852430000              call 00468920
:004645CE EB11                    jmp 004645E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004645C4(C)
|
:004645D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004645D3 83790400                cmp dword ptr [ecx+04], 00000000
:004645D7 7408                    je 004645E1
:004645D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004645DC E85F430000              call 00468940

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004645CE(U), :004645D7(C)
|
:004645E1 8BE5                    mov esp, ebp
:004645E3 5D                      pop ebp
:004645E4 C3                      ret



* Referenced by a CALL at Address:
|:00466F58   
|
:004645E5 55                      push ebp
:004645E6 8BEC                    mov ebp, esp
:004645E8 51                      push ecx
:004645E9 894DFC                  mov dword ptr [ebp-04], ecx
:004645EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004645EF 833800                  cmp dword ptr [eax], 00000000
:004645F2 7417                    je 0046460B
:004645F4 6801010000              push 00000101
:004645F9 6A00                    push 00000000
:004645FB 6A00                    push 00000000
:004645FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464600 8B11                    mov edx, dword ptr [ecx]
:00464602 52                      push edx

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:00464603 FF1590874B00            Call dword ptr [004B8790]
:00464609 EB1F                    jmp 0046462A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004645F2(C)
|
:0046460B 8B45FC                  mov eax, dword ptr [ebp-04]
:0046460E 83780400                cmp dword ptr [eax+04], 00000000
:00464612 7416                    je 0046462A
:00464614 6801010000              push 00000101
:00464619 6A00                    push 00000000
:0046461B 6A00                    push 00000000
:0046461D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464620 8B5104                  mov edx, dword ptr [ecx+04]
:00464623 52                      push edx

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:00464624 FF1590874B00            Call dword ptr [004B8790]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464609(U), :00464612(C)
|
:0046462A 8BE5                    mov esp, ebp
:0046462C 5D                      pop ebp
:0046462D C3                      ret



* Referenced by a CALL at Address:
|:00446D0D   
|
:0046462E 55                      push ebp
:0046462F 8BEC                    mov ebp, esp
:00464631 51                      push ecx
:00464632 894DFC                  mov dword ptr [ebp-04], ecx
:00464635 8B45FC                  mov eax, dword ptr [ebp-04]
:00464638 833800                  cmp dword ptr [eax], 00000000
:0046463B 7417                    je 00464654
:0046463D 6A00                    push 00000000
:0046463F 6A00                    push 00000000
:00464641 6810010000              push 00000110
:00464646 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464649 8B11                    mov edx, dword ptr [ecx]
:0046464B 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046464C FF15D8864B00            Call dword ptr [004B86D8]
:00464652 EB1F                    jmp 00464673

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046463B(C)
|
:00464654 8B45FC                  mov eax, dword ptr [ebp-04]
:00464657 83780400                cmp dword ptr [eax+04], 00000000
:0046465B 7416                    je 00464673
:0046465D 6A00                    push 00000000
:0046465F 6A00                    push 00000000
:00464661 6810010000              push 00000110
:00464666 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464669 8B5104                  mov edx, dword ptr [ecx+04]
:0046466C 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046466D FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464652(U), :0046465B(C)
|
:00464673 8BE5                    mov esp, ebp
:00464675 5D                      pop ebp
:00464676 C3                      ret


:00464677 55                      push ebp
:00464678 8BEC                    mov ebp, esp
:0046467A E807000000              call 00464686
:0046467F E811000000              call 00464695
:00464684 5D                      pop ebp
:00464685 C3                      ret



* Referenced by a CALL at Address:
|:0046467A   
|
:00464686 55                      push ebp
:00464687 8BEC                    mov ebp, esp
:00464689 B9500E4B00              mov ecx, 004B0E50
:0046468E E8DD420000              call 00468970
:00464693 5D                      pop ebp
:00464694 C3                      ret



* Referenced by a CALL at Address:
|:0046467F   
|
:00464695 55                      push ebp
:00464696 8BEC                    mov ebp, esp
:00464698 68A7464600              push 004646A7
:0046469D E8CE8D0000              call 0046D470
:004646A2 83C404                  add esp, 00000004
:004646A5 5D                      pop ebp
:004646A6 C3                      ret


:004646A7 55                      push ebp
:004646A8 8BEC                    mov ebp, esp
:004646AA B9500E4B00              mov ecx, 004B0E50
:004646AF E8EC15FCFF              call 00425CA0
:004646B4 5D                      pop ebp
:004646B5 C3                      ret



* Referenced by a CALL at Addresses:
|:00412461   , :004124F4   , :0041252A   , :004125CB   , :00426688   
|:00426781   , :00426888   , :004268A7   , :004268C1   , :004268EF   
|
:004646B6 55                      push ebp
:004646B7 8BEC                    mov ebp, esp
:004646B9 8B4508                  mov eax, dword ptr [ebp+08]
:004646BC A3407A4700              mov dword ptr [00477A40], eax
:004646C1 5D                      pop ebp
:004646C2 C3                      ret



* Referenced by a CALL at Address:
|:00426A89   
|
:004646C3 55                      push ebp
:004646C4 8BEC                    mov ebp, esp
:004646C6 83EC08                  sub esp, 00000008
:004646C9 A1380E4B00              mov eax, dword ptr [004B0E38]
:004646CE 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:004646CF FF152C874B00            Call dword ptr [004B872C]
:004646D5 8945F8                  mov dword ptr [ebp-08], eax

* Possible StringData Ref from Data Obj ->"APPMENU"
                                  |
:004646D8 6840E84700              push 0047E840
:004646DD 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:004646E3 51                      push ecx

* Reference To: USER32.LoadMenuA, Ord:017Eh
                                  |
:004646E4 FF1558864B00            Call dword ptr [004B8658]
:004646EA 8945FC                  mov dword ptr [ebp-04], eax
:004646ED 8B55FC                  mov edx, dword ptr [ebp-04]
:004646F0 52                      push edx
:004646F1 A1380E4B00              mov eax, dword ptr [004B0E38]
:004646F6 50                      push eax

* Reference To: USER32.SetMenu, Ord:01FBh
                                  |
:004646F7 FF1554864B00            Call dword ptr [004B8654]
:004646FD 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00464703 51                      push ecx

* Reference To: USER32.DrawMenuBar, Ord:00A6h
                                  |
:00464704 FF1550864B00            Call dword ptr [004B8650]
:0046470A 8B55F8                  mov edx, dword ptr [ebp-08]
:0046470D 52                      push edx

* Reference To: USER32.DestroyMenu, Ord:0089h
                                  |
:0046470E FF15B4874B00            Call dword ptr [004B87B4]
:00464714 8BE5                    mov esp, ebp
:00464716 5D                      pop ebp
:00464717 C3                      ret



* Referenced by a CALL at Addresses:
|:00416DC9   , :00416E94   , :00416EFE   , :00416F2F   , :00421047   
|:0042648A   , :00426559   , :00426800   , :00426859   , :0042696F   
|:004269F1   , :00429308   , :00431AEB   , :00431CD8   , :004550C2   
|:00456D54   , :00456F79   , :0045715F   , :00457248   , :004572A5   
|:00457B5B   , :00457BA3   , :00457FE2   , :004580AA   , :00464BA5   
|
:00464718 55                      push ebp
:00464719 8BEC                    mov ebp, esp
:0046471B 83EC14                  sub esp, 00000014
:0046471E A1380E4B00              mov eax, dword ptr [004B0E38]
:00464723 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:00464724 FF152C874B00            Call dword ptr [004B872C]
:0046472A 8945FC                  mov dword ptr [ebp-04], eax
:0046472D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464730 51                      push ecx

* Reference To: USER32.GetMenuItemCount, Ord:010Dh
                                  |
:00464731 FF1564864B00            Call dword ptr [004B8664]
:00464737 8945EC                  mov dword ptr [ebp-14], eax
:0046473A 8B5508                  mov edx, dword ptr [ebp+08]
:0046473D 52                      push edx
:0046473E E818010000              call 0046485B
:00464743 83C404                  add esp, 00000004
:00464746 8B4508                  mov eax, dword ptr [ebp+08]
:00464749 F7D8                    neg eax
:0046474B 1BC0                    sbb eax, eax
:0046474D 0501040000              add eax, 00000401
:00464752 8945F4                  mov dword ptr [ebp-0C], eax
:00464755 C745F000000000          mov [ebp-10], 00000000
:0046475C EB09                    jmp 00464767

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046477F(U)
|
:0046475E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00464761 83C101                  add ecx, 00000001
:00464764 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046475C(U)
|
:00464767 837DF005                cmp dword ptr [ebp-10], 00000005
:0046476B 7314                    jnb 00464781
:0046476D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00464770 52                      push edx
:00464771 8B45F0                  mov eax, dword ptr [ebp-10]
:00464774 50                      push eax
:00464775 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464778 51                      push ecx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:00464779 FF1560864B00            Call dword ptr [004B8660]
:0046477F EBDD                    jmp 0046475E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046476B(C)
|
:00464781 6A01                    push 00000001
:00464783 8B55FC                  mov edx, dword ptr [ebp-04]
:00464786 52                      push edx

* Reference To: USER32.GetSubMenu, Ord:0128h
                                  |
:00464787 FF155C864B00            Call dword ptr [004B865C]
:0046478D 8945F8                  mov dword ptr [ebp-08], eax
:00464790 8B45F4                  mov eax, dword ptr [ebp-0C]
:00464793 50                      push eax
:00464794 6A00                    push 00000000
:00464796 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464799 51                      push ecx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046479A FF1560864B00            Call dword ptr [004B8660]
:004647A0 837D0801                cmp dword ptr [ebp+08], 00000001
:004647A4 751C                    jne 004647C2
:004647A6 E86721FBFF              call 00416912
:004647AB 85C0                    test eax, eax
:004647AD 7513                    jne 004647C2

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004647AF 6801040000              push 00000401
:004647B4 6A01                    push 00000001
:004647B6 8B55F8                  mov edx, dword ptr [ebp-08]
:004647B9 52                      push edx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:004647BA FF1560864B00            Call dword ptr [004B8660]
:004647C0 EB10                    jmp 004647D2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004647A4(C), :004647AD(C)
|
:004647C2 8B45F4                  mov eax, dword ptr [ebp-0C]
:004647C5 50                      push eax
:004647C6 6A01                    push 00000001
:004647C8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004647CB 51                      push ecx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:004647CC FF1560864B00            Call dword ptr [004B8660]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004647C0(U)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004647D2 6A02                    push 00000002
:004647D4 8B55FC                  mov edx, dword ptr [ebp-04]
:004647D7 52                      push edx

* Reference To: USER32.GetSubMenu, Ord:0128h
                                  |
:004647D8 FF155C864B00            Call dword ptr [004B865C]
:004647DE 8945F8                  mov dword ptr [ebp-08], eax
:004647E1 C745F000000000          mov [ebp-10], 00000000
:004647E8 EB09                    jmp 004647F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046480B(U)
|
:004647EA 8B45F0                  mov eax, dword ptr [ebp-10]
:004647ED 83C001                  add eax, 00000001
:004647F0 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004647E8(U)
|
:004647F3 837DF003                cmp dword ptr [ebp-10], 00000003
:004647F7 7314                    jnb 0046480D
:004647F9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004647FC 51                      push ecx
:004647FD 8B55F0                  mov edx, dword ptr [ebp-10]
:00464800 52                      push edx
:00464801 8B45F8                  mov eax, dword ptr [ebp-08]
:00464804 50                      push eax

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:00464805 FF1560864B00            Call dword ptr [004B8660]
:0046480B EBDD                    jmp 004647EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004647F7(C)
|
:0046480D 837D0801                cmp dword ptr [ebp+08], 00000001
:00464811 752B                    jne 0046483E
:00464813 E8FA20FBFF              call 00416912
:00464818 85C0                    test eax, eax
:0046481A 7522                    jne 0046483E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:0046481C 6801040000              push 00000401
:00464821 6A01                    push 00000001
:00464823 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464826 51                      push ecx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:00464827 FF1560864B00            Call dword ptr [004B8660]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:0046482D 6801040000              push 00000401

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00464832 6A02                    push 00000002
:00464834 8B55F8                  mov edx, dword ptr [ebp-08]
:00464837 52                      push edx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:00464838 FF1560864B00            Call dword ptr [004B8660]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464811(C), :0046481A(C)
|
:0046483E A1380E4B00              mov eax, dword ptr [004B0E38]
:00464843 50                      push eax

* Reference To: USER32.DrawMenuBar, Ord:00A6h
                                  |
:00464844 FF1550864B00            Call dword ptr [004B8650]
:0046484A 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00464850 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00464851 FF15A4864B00            Call dword ptr [004B86A4]
:00464857 8BE5                    mov esp, ebp
:00464859 5D                      pop ebp
:0046485A C3                      ret



* Referenced by a CALL at Address:
|:0046473E   
|
:0046485B 55                      push ebp
:0046485C 8BEC                    mov ebp, esp
:0046485E 8B4508                  mov eax, dword ptr [ebp+08]
:00464861 25FFFF0000              and eax, 0000FFFF
:00464866 50                      push eax

* Possible Ref to Menu: APPMENU, Item: "2X(S)"
                                  |
:00464867 6A65                    push 00000065

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00464869 6801040000              push 00000401
:0046486E 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:00464874 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464875 FF15D8864B00            Call dword ptr [004B86D8]
:0046487B 8B5508                  mov edx, dword ptr [ebp+08]
:0046487E 81E2FFFF0000            and edx, 0000FFFF
:00464884 52                      push edx

* Possible Ref to Menu: APPMENU, Item: "   e(L)"
                                  |
:00464885 6A66                    push 00000066

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00464887 6801040000              push 00000401
:0046488C A1480E4B00              mov eax, dword ptr [004B0E48]
:00464891 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464892 FF15D8864B00            Call dword ptr [004B86D8]
:00464898 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046489B 81E1FFFF0000            and ecx, 0000FFFF
:004648A1 51                      push ecx

* Possible Ref to Menu: APPMENU, Item: "-(K)"
                                  |
:004648A2 6A6B                    push 0000006B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004648A4 6801040000              push 00000401
:004648A9 8B15480E4B00            mov edx, dword ptr [004B0E48]
:004648AF 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004648B0 FF15D8864B00            Call dword ptr [004B86D8]
:004648B6 8B4508                  mov eax, dword ptr [ebp+08]
:004648B9 25FFFF0000              and eax, 0000FFFF
:004648BE 50                      push eax

* Possible Ref to Menu: APPMENU, Item: "f1(B)"
                                  |
:004648BF 6A69                    push 00000069

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004648C1 6801040000              push 00000401
:004648C6 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:004648CC 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004648CD FF15D8864B00            Call dword ptr [004B86D8]
:004648D3 8B5508                  mov edx, dword ptr [ebp+08]
:004648D6 81E2FFFF0000            and edx, 0000FFFF
:004648DC 52                      push edx

* Possible Ref to Menu: APPMENU, Item: "04.(J)"
                                  |
:004648DD 6A6C                    push 0000006C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004648DF 6801040000              push 00000401
:004648E4 A1480E4B00              mov eax, dword ptr [004B0E48]
:004648E9 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004648EA FF15D8864B00            Call dword ptr [004B86D8]
:004648F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004648F3 81E1FFFF0000            and ecx, 0000FFFF
:004648F9 51                      push ecx

* Possible Ref to Menu: APPMENU, Item: "   P_(E)"
                                  |
:004648FA 6A6D                    push 0000006D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004648FC 6801040000              push 00000401
:00464901 8B15480E4B00            mov edx, dword ptr [004B0E48]
:00464907 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464908 FF15D8864B00            Call dword ptr [004B86D8]
:0046490E 8B4508                  mov eax, dword ptr [ebp+08]
:00464911 25FFFF0000              and eax, 0000FFFF
:00464916 50                      push eax

* Possible Ref to Menu: APPMENU, Item: ")(T)"
                                  |
:00464917 6A6A                    push 0000006A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00464919 6801040000              push 00000401
:0046491E 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:00464924 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464925 FF15D8864B00            Call dword ptr [004B86D8]
:0046492B 8B5508                  mov edx, dword ptr [ebp+08]
:0046492E 81E2FFFF0000            and edx, 0000FFFF
:00464934 52                      push edx
:00464935 6A6E                    push 0000006E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00464937 6801040000              push 00000401
:0046493C A1480E4B00              mov eax, dword ptr [004B0E48]
:00464941 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464942 FF15D8864B00            Call dword ptr [004B86D8]
:00464948 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046494B 81E1FFFF0000            and ecx, 0000FFFF
:00464951 51                      push ecx
:00464952 6A6F                    push 0000006F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00464954 6801040000              push 00000401
:00464959 8B15480E4B00            mov edx, dword ptr [004B0E48]
:0046495F 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464960 FF15D8864B00            Call dword ptr [004B86D8]
:00464966 837D0800                cmp dword ptr [ebp+08], 00000000
:0046496A 7475                    je 004649E1
:0046496C E8A11FFBFF              call 00416912
:00464971 85C0                    test eax, eax
:00464973 756C                    jne 004649E1
:00464975 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: "04.(J)"
                                  |
:00464977 6A6C                    push 0000006C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00464979 6801040000              push 00000401
:0046497E A1480E4B00              mov eax, dword ptr [004B0E48]
:00464983 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464984 FF15D8864B00            Call dword ptr [004B86D8]
:0046498A 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: "   P_(E)"
                                  |
:0046498C 6A6D                    push 0000006D

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:0046498E 6801040000              push 00000401
:00464993 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:00464999 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046499A FF15D8864B00            Call dword ptr [004B86D8]
:004649A0 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: ")(T)"
                                  |
:004649A2 6A6A                    push 0000006A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004649A4 6801040000              push 00000401
:004649A9 8B15480E4B00            mov edx, dword ptr [004B0E48]
:004649AF 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004649B0 FF15D8864B00            Call dword ptr [004B86D8]
:004649B6 6A00                    push 00000000
:004649B8 6A6E                    push 0000006E

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004649BA 6801040000              push 00000401
:004649BF A1480E4B00              mov eax, dword ptr [004B0E48]
:004649C4 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004649C5 FF15D8864B00            Call dword ptr [004B86D8]
:004649CB 6A00                    push 00000000
:004649CD 6A6F                    push 0000006F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:004649CF 6801040000              push 00000401
:004649D4 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:004649DA 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004649DB FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046496A(C), :00464973(C)
|
:004649E1 5D                      pop ebp
:004649E2 C3                      ret


:004649E3 55                      push ebp
:004649E4 8BEC                    mov ebp, esp
:004649E6 83EC10                  sub esp, 00000010
:004649E9 A1380E4B00              mov eax, dword ptr [004B0E38]
:004649EE 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:004649EF FF152C874B00            Call dword ptr [004B872C]
:004649F5 8945FC                  mov dword ptr [ebp-04], eax
:004649F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004649FB 51                      push ecx

* Reference To: USER32.GetMenuItemCount, Ord:010Dh
                                  |
:004649FC FF1564864B00            Call dword ptr [004B8664]
:00464A02 8945F0                  mov dword ptr [ebp-10], eax
:00464A05 C745F400000000          mov [ebp-0C], 00000000
:00464A0C EB09                    jmp 00464A17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464A3F(U)
|
:00464A0E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00464A11 83C201                  add edx, 00000001
:00464A14 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464A0C(U)
|
:00464A17 837DF405                cmp dword ptr [ebp-0C], 00000005
:00464A1B 7324                    jnb 00464A41
:00464A1D 837DF403                cmp dword ptr [ebp-0C], 00000003
:00464A21 1BC0                    sbb eax, eax
:00464A23 F7D8                    neg eax
:00464A25 0500040000              add eax, 00000400
:00464A2A 8945F8                  mov dword ptr [ebp-08], eax
:00464A2D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464A30 51                      push ecx
:00464A31 8B55F4                  mov edx, dword ptr [ebp-0C]
:00464A34 52                      push edx
:00464A35 8B45FC                  mov eax, dword ptr [ebp-04]
:00464A38 50                      push eax

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:00464A39 FF1560864B00            Call dword ptr [004B8660]
:00464A3F EBCD                    jmp 00464A0E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464A1B(C)
|
:00464A41 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00464A47 51                      push ecx

* Reference To: USER32.DrawMenuBar, Ord:00A6h
                                  |
:00464A48 FF1550864B00            Call dword ptr [004B8650]
:00464A4E 8BE5                    mov esp, ebp
:00464A50 5D                      pop ebp
:00464A51 C3                      ret


:00464A52 55                      push ebp
:00464A53 8BEC                    mov ebp, esp
:00464A55 51                      push ecx
:00464A56 C745FC00000000          mov [ebp-04], 00000000
:00464A5D EB09                    jmp 00464A68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464A83(U)
|
:00464A5F 8B45FC                  mov eax, dword ptr [ebp-04]
:00464A62 83C001                  add eax, 00000001
:00464A65 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464A5D(U)
|
:00464A68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464A6B 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:00464A6E 7315                    jnb 00464A85

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:00464A70 6800040000              push 00000400
:00464A75 8B55FC                  mov edx, dword ptr [ebp-04]
:00464A78 52                      push edx
:00464A79 8B4508                  mov eax, dword ptr [ebp+08]
:00464A7C 50                      push eax

* Reference To: USER32.CheckMenuItem, Ord:0030h
                                  |
:00464A7D FF1568864B00            Call dword ptr [004B8668]
:00464A83 EBDA                    jmp 00464A5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464A6E(C)
|
:00464A85 8BE5                    mov esp, ebp
:00464A87 5D                      pop ebp
:00464A88 C3                      ret



* Referenced by a CALL at Address:
|:00464B7A   
|
:00464A89 55                      push ebp
:00464A8A 8BEC                    mov ebp, esp
:00464A8C 6A14                    push 00000014
:00464A8E 6A00                    push 00000000
:00464A90 6A00                    push 00000000
:00464A92 6A1C                    push 0000001C

* Possible Reference to String Resource ID=00014: ""
                                  |
:00464A94 6A0E                    push 0000000E

* Possible Reference to String Resource ID=00011: "
"
                                  |
:00464A96 6A0B                    push 0000000B
:00464A98 6828E64700              push 0047E628

* Possible Ref to Menu: APPMENU, Item: ")(T)"
                                  |
:00464A9D 6A6A                    push 0000006A
:00464A9F A1300E4B00              mov eax, dword ptr [004B0E30]
:00464AA4 50                      push eax

* Possible Reference to String Resource ID=00013: ""
                                  |
:00464AA5 6A0D                    push 0000000D
:00464AA7 6A71                    push 00000071
:00464AA9 6800010050              push 50000100
:00464AAE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464AB1 51                      push ecx

* Reference To: COMCTL32.CreateToolbarEx, Ord:0008h
                                  |
:00464AB2 FF1568844B00            Call dword ptr [004B8468]
:00464AB8 A3480E4B00              mov dword ptr [004B0E48], eax
:00464ABD 833D480E4B0000          cmp dword ptr [004B0E48], 00000000
:00464AC4 7504                    jne 00464ACA
:00464AC6 33C0                    xor eax, eax
:00464AC8 EB05                    jmp 00464ACF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464AC4(C)
|
:00464ACA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464AC8(U)
|
:00464ACF 5D                      pop ebp
:00464AD0 C3                      ret



* Referenced by a CALL at Addresses:
|:0041129A   , :00416943   , :00416D64   , :00458346   , :00464B3F   
|
:00464AD1 55                      push ebp
:00464AD2 8BEC                    mov ebp, esp
:00464AD4 8B4508                  mov eax, dword ptr [ebp+08]
:00464AD7 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00464AD8 68F7030000              push 000003F7
:00464ADD 8B0D90184B00            mov ecx, dword ptr [004B1890]
:00464AE3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464AE4 FF15AC864B00            Call dword ptr [004B86AC]
:00464AEA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464AEB FF15B0864B00            Call dword ptr [004B86B0]
:00464AF1 5D                      pop ebp
:00464AF2 C3                      ret



* Referenced by a CALL at Addresses:
|:00424CD3   , :004451A1   , :00464B51   
|
:00464AF3 55                      push ebp
:00464AF4 8BEC                    mov ebp, esp
:00464AF6 8B4508                  mov eax, dword ptr [ebp+08]
:00464AF9 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:00464AFA 68F8030000              push 000003F8
:00464AFF 8B0D90184B00            mov ecx, dword ptr [004B1890]
:00464B05 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464B06 FF15AC864B00            Call dword ptr [004B86AC]
:00464B0C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464B0D FF15B0864B00            Call dword ptr [004B86B0]
:00464B13 5D                      pop ebp
:00464B14 C3                      ret



* Referenced by a CALL at Addresses:
|:004450E4   , :00464B63   
|
:00464B15 55                      push ebp
:00464B16 8BEC                    mov ebp, esp
:00464B18 8B4508                  mov eax, dword ptr [ebp+08]
:00464B1B 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00464B1C 68F9030000              push 000003F9
:00464B21 8B0D90184B00            mov ecx, dword ptr [004B1890]
:00464B27 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464B28 FF15AC864B00            Call dword ptr [004B86AC]
:00464B2E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464B2F FF15B0864B00            Call dword ptr [004B86B0]
:00464B35 5D                      pop ebp
:00464B36 C3                      ret



* Referenced by a CALL at Address:
|:004124AE   
|
:00464B37 55                      push ebp
:00464B38 8BEC                    mov ebp, esp
:00464B3A 68AC184B00              push 004B18AC
:00464B3F E88DFFFFFF              call 00464AD1
:00464B44 83C404                  add esp, 00000004
:00464B47 5D                      pop ebp
:00464B48 C3                      ret



* Referenced by a CALL at Addresses:
|:00416E70   , :00445134   , :00445198   , :00467111   
|
:00464B49 55                      push ebp
:00464B4A 8BEC                    mov ebp, esp
:00464B4C 68B0184B00              push 004B18B0
:00464B51 E89DFFFFFF              call 00464AF3
:00464B56 83C404                  add esp, 00000004
:00464B59 5D                      pop ebp
:00464B5A C3                      ret



* Referenced by a CALL at Addresses:
|:00456F4A   , :0046710C   
|
:00464B5B 55                      push ebp
:00464B5C 8BEC                    mov ebp, esp
:00464B5E 68B4184B00              push 004B18B4
:00464B63 E8ADFFFFFF              call 00464B15
:00464B68 83C404                  add esp, 00000004
:00464B6B 5D                      pop ebp
:00464B6C C3                      ret



* Referenced by a CALL at Address:
|:00464411   
|
:00464B6D 55                      push ebp
:00464B6E 8BEC                    mov ebp, esp

* Reference To: COMCTL32.InitCommonControls, Ord:0011h
                                  |
:00464B70 FF156C844B00            Call dword ptr [004B846C]
:00464B76 8B4508                  mov eax, dword ptr [ebp+08]
:00464B79 50                      push eax
:00464B7A E80AFFFFFF              call 00464A89
:00464B7F 83C404                  add esp, 00000004
:00464B82 85C0                    test eax, eax
:00464B84 7505                    jne 00464B8B
:00464B86 83C8FF                  or eax, FFFFFFFF
:00464B89 EB24                    jmp 00464BAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464B84(C)
|
:00464B8B 8B0D480E4B00            mov ecx, dword ptr [004B0E48]
:00464B91 51                      push ecx
:00464B92 E81A000000              call 00464BB1
:00464B97 83C404                  add esp, 00000004
:00464B9A 85C0                    test eax, eax
:00464B9C 7505                    jne 00464BA3
:00464B9E 83C8FF                  or eax, FFFFFFFF
:00464BA1 EB0C                    jmp 00464BAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464B9C(C)
|
:00464BA3 6A00                    push 00000000
:00464BA5 E86EFBFFFF              call 00464718
:00464BAA 83C404                  add esp, 00000004
:00464BAD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464B89(U), :00464BA1(U)
|
:00464BAF 5D                      pop ebp
:00464BB0 C3                      ret



* Referenced by a CALL at Address:
|:00464B92   
|
:00464BB1 55                      push ebp
:00464BB2 8BEC                    mov ebp, esp
:00464BB4 83EC10                  sub esp, 00000010
:00464BB7 6A00                    push 00000000
:00464BB9 68924C4600              push 00464C92
:00464BBE 8B4508                  mov eax, dword ptr [ebp+08]
:00464BC1 50                      push eax

* Possible Reference to Dialog: DialogID_00D0 
                                  |
:00464BC2 68D0000000              push 000000D0
:00464BC7 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00464BCD 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00464BCE FF15A0864B00            Call dword ptr [004B86A0]
:00464BD4 A390184B00              mov dword ptr [004B1890], eax
:00464BD9 8D55F0                  lea edx, dword ptr [ebp-10]
:00464BDC 52                      push edx
:00464BDD A190184B00              mov eax, dword ptr [004B1890]
:00464BE2 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00464BE3 FF1558874B00            Call dword ptr [004B8758]
:00464BE9 6A00                    push 00000000
:00464BEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464BEE 2B4DF4                  sub ecx, dword ptr [ebp-0C]
:00464BF1 83C101                  add ecx, 00000001
:00464BF4 51                      push ecx
:00464BF5 8B55F8                  mov edx, dword ptr [ebp-08]
:00464BF8 2B55F0                  sub edx, dword ptr [ebp-10]
:00464BFB 83C201                  add edx, 00000001
:00464BFE 52                      push edx
:00464BFF 6A00                    push 00000000
:00464C01 68E7000000              push 000000E7
:00464C06 A190184B00              mov eax, dword ptr [004B1890]
:00464C0B 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00464C0C FF15FC864B00            Call dword ptr [004B86FC]
:00464C12 68A8EF4800              push 0048EFA8

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00464C17 68F7030000              push 000003F7
:00464C1C 8B0D90184B00            mov ecx, dword ptr [004B1890]
:00464C22 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464C23 FF15AC864B00            Call dword ptr [004B86AC]
:00464C29 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464C2A FF15B0864B00            Call dword ptr [004B86B0]
:00464C30 68B8184B00              push 004B18B8

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:00464C35 68F8030000              push 000003F8
:00464C3A 8B1590184B00            mov edx, dword ptr [004B1890]
:00464C40 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464C41 FF15AC864B00            Call dword ptr [004B86AC]
:00464C47 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464C48 FF15B0864B00            Call dword ptr [004B86B0]
:00464C4E 68BC184B00              push 004B18BC

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00464C53 68F9030000              push 000003F9
:00464C58 A190184B00              mov eax, dword ptr [004B1890]
:00464C5D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464C5E FF15AC864B00            Call dword ptr [004B86AC]
:00464C64 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464C65 FF15B0864B00            Call dword ptr [004B86B0]
:00464C6B 68C0184B00              push 004B18C0

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:00464C70 68FA030000              push 000003FA
:00464C75 8B0D90184B00            mov ecx, dword ptr [004B1890]
:00464C7B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464C7C FF15AC864B00            Call dword ptr [004B86AC]
:00464C82 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464C83 FF15B0864B00            Call dword ptr [004B86B0]
:00464C89 B801000000              mov eax, 00000001
:00464C8E 8BE5                    mov esp, ebp
:00464C90 5D                      pop ebp
:00464C91 C3                      ret


:00464C92 55                      push ebp
:00464C93 8BEC                    mov ebp, esp
:00464C95 33C0                    xor eax, eax
:00464C97 5D                      pop ebp
:00464C98 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0046721D   
|
:00464C9B 55                      push ebp
:00464C9C 8BEC                    mov ebp, esp
:00464C9E 83EC08                  sub esp, 00000008
:00464CA1 C745FC00000000          mov [ebp-04], 00000000
:00464CA8 68140A0000              push 00000A14
:00464CAD 68FFFF0000              push 0000FFFF
:00464CB2 68780E4B00              push 004B0E78
:00464CB7 E8A48C0000              call 0046D960
:00464CBC 83C40C                  add esp, 0000000C
:00464CBF C745F800000000          mov [ebp-08], 00000000
:00464CC6 EB09                    jmp 00464CD1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464CEA(U), :00464D02(U)
|
:00464CC8 8B45F8                  mov eax, dword ptr [ebp-08]
:00464CCB 83C001                  add eax, 00000001
:00464CCE 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464CC6(U)
|
:00464CD1 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:00464CD8 732A                    jnb 00464D04
:00464CDA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464CDD 51                      push ecx
:00464CDE E83DBCFAFF              call 00410920
:00464CE3 83C404                  add esp, 00000004
:00464CE6 85C0                    test eax, eax
:00464CE8 7502                    jne 00464CEC
:00464CEA EBDC                    jmp 00464CC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464CE8(C)
|
:00464CEC 8B55FC                  mov edx, dword ptr [ebp-04]
:00464CEF 8B45F8                  mov eax, dword ptr [ebp-08]
:00464CF2 890495780E4B00          mov dword ptr [4*edx+004B0E78], eax
:00464CF9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464CFC 83C101                  add ecx, 00000001
:00464CFF 894DFC                  mov dword ptr [ebp-04], ecx
:00464D02 EBC4                    jmp 00464CC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464CD8(C)
|
:00464D04 8B45FC                  mov eax, dword ptr [ebp-04]
:00464D07 8BE5                    mov esp, ebp
:00464D09 5D                      pop ebp
:00464D0A C3                      ret



* Referenced by a CALL at Addresses:
|:00405CBF   , :00405DBA   , :00405E98   , :00405EF4   , :00407095   
|:00415C9B   , :0045135F   , :00451395   , :004513CB   , :004515C0   
|:00451617   , :0045166E   , :0045C81B   , :00464E53   , :00464E97   
|:00464EDB   , :00464F28   , :00464F75   , :00464FCC   , :004650A6   
|:004650EA   , :00465190   , :00465AA1   
|
:00464D0B 55                      push ebp
:00464D0C 8BEC                    mov ebp, esp
:00464D0E 51                      push ecx
:00464D0F 8B450C                  mov eax, dword ptr [ebp+0C]
:00464D12 25FFFF0000              and eax, 0000FFFF
:00464D17 50                      push eax
:00464D18 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464D1B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464D1C FF15AC864B00            Call dword ptr [004B86AC]
:00464D22 8945FC                  mov dword ptr [ebp-04], eax
:00464D25 8B5514                  mov edx, dword ptr [ebp+14]
:00464D28 81E2FFFF0000            and edx, 0000FFFF
:00464D2E C1E210                  shl edx, 10
:00464D31 52                      push edx
:00464D32 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0401, "1000"
                                  |
:00464D34 6801040000              push 00000401
:00464D39 8B45FC                  mov eax, dword ptr [ebp-04]
:00464D3C 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464D3D FF15D8864B00            Call dword ptr [004B86D8]
:00464D43 6A00                    push 00000000
:00464D45 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464D48 81E1FFFF0000            and ecx, 0000FFFF
:00464D4E 51                      push ecx

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:00464D4F 6802040000              push 00000402
:00464D54 8B55FC                  mov edx, dword ptr [ebp-04]
:00464D57 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464D58 FF15D8864B00            Call dword ptr [004B86D8]
:00464D5E 8BE5                    mov esp, ebp
:00464D60 5D                      pop ebp
:00464D61 C3                      ret



* Referenced by a CALL at Addresses:
|:004663C8   , :004665D3   
|
:00464D62 55                      push ebp
:00464D63 8BEC                    mov ebp, esp
:00464D65 83EC78                  sub esp, 00000078
:00464D68 894D88                  mov dword ptr [ebp-78], ecx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EE, "255"
                                  |
:00464D6B 68EE030000              push 000003EE
:00464D70 8B4508                  mov eax, dword ptr [ebp+08]
:00464D73 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464D74 FF15AC864B00            Call dword ptr [004B86AC]
:00464D7A 85C0                    test eax, eax
:00464D7C 7505                    jne 00464D83
:00464D7E E951020000              jmp 00464FD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464D7C(C)
|
:00464D83 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464D86 E835D6F9FF              call 004023C0
:00464D8B 894594                  mov dword ptr [ebp-6C], eax
:00464D8E 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464D91 E85DD6F9FF              call 004023F3
:00464D96 894590                  mov dword ptr [ebp-70], eax
:00464D99 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464D9C E885D6F9FF              call 00402426
:00464DA1 894598                  mov dword ptr [ebp-68], eax
:00464DA4 E8691BFBFF              call 00416912
:00464DA9 85C0                    test eax, eax
:00464DAB 746A                    je 00464E17
:00464DAD 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464DB0 E895040000              call 0046524A
:00464DB5 88458C                  mov byte ptr [ebp-74], al
:00464DB8 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00464DBB 81E1FF000000            and ecx, 000000FF
:00464DC1 81F9FF000000            cmp ecx, 000000FF
:00464DC7 744E                    je 00464E17
:00464DC9 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00464DCC 81E1FF000000            and ecx, 000000FF
:00464DD2 6BC924                  imul ecx, 00000024
:00464DD5 81C108F54A00            add ecx, 004AF508
:00464DDB E86556FCFF              call 0042A445
:00464DE0 894594                  mov dword ptr [ebp-6C], eax
:00464DE3 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00464DE6 81E1FF000000            and ecx, 000000FF
:00464DEC 6BC924                  imul ecx, 00000024
:00464DEF 81C108F54A00            add ecx, 004AF508
:00464DF5 E8C756FCFF              call 0042A4C1
:00464DFA 894590                  mov dword ptr [ebp-70], eax
:00464DFD 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00464E00 81E1FF000000            and ecx, 000000FF
:00464E06 6BC924                  imul ecx, 00000024
:00464E09 81C108F54A00            add ecx, 004AF508
:00464E0F E8DB56FCFF              call 0042A4EF
:00464E14 894598                  mov dword ptr [ebp-68], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464DAB(C), :00464DC7(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00464E17 6A0A                    push 0000000A
:00464E19 8D559C                  lea edx, dword ptr [ebp-64]
:00464E1C 52                      push edx
:00464E1D 8B4594                  mov eax, dword ptr [ebp-6C]
:00464E20 50                      push eax
:00464E21 E84AF6FFFF              call 00464470
:00464E26 83C40C                  add esp, 0000000C
:00464E29 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EE, "255"
                                  |
:00464E2A 68EE030000              push 000003EE
:00464E2F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464E32 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464E33 FF15AC864B00            Call dword ptr [004B86AC]
:00464E39 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464E3A FF15B0864B00            Call dword ptr [004B86B0]
:00464E40 68F4010000              push 000001F4
:00464E45 668B5594                mov dx, word ptr [ebp-6C]
:00464E49 52                      push edx
:00464E4A 6806040000              push 00000406
:00464E4F 8B4508                  mov eax, dword ptr [ebp+08]
:00464E52 50                      push eax
:00464E53 E8B3FEFFFF              call 00464D0B
:00464E58 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00464E5B 6A0A                    push 0000000A
:00464E5D 8D4D9C                  lea ecx, dword ptr [ebp-64]
:00464E60 51                      push ecx
:00464E61 8B5590                  mov edx, dword ptr [ebp-70]
:00464E64 52                      push edx
:00464E65 E806F6FFFF              call 00464470
:00464E6A 83C40C                  add esp, 0000000C
:00464E6D 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EF, "255"
                                  |
:00464E6E 68EF030000              push 000003EF
:00464E73 8B4508                  mov eax, dword ptr [ebp+08]
:00464E76 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464E77 FF15AC864B00            Call dword ptr [004B86AC]
:00464E7D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464E7E FF15B0864B00            Call dword ptr [004B86B0]
:00464E84 68F4010000              push 000001F4
:00464E89 668B4D90                mov cx, word ptr [ebp-70]
:00464E8D 51                      push ecx
:00464E8E 680B040000              push 0000040B
:00464E93 8B5508                  mov edx, dword ptr [ebp+08]
:00464E96 52                      push edx
:00464E97 E86FFEFFFF              call 00464D0B
:00464E9C 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00464E9F 6A0A                    push 0000000A
:00464EA1 8D459C                  lea eax, dword ptr [ebp-64]
:00464EA4 50                      push eax
:00464EA5 8B4D98                  mov ecx, dword ptr [ebp-68]
:00464EA8 51                      push ecx
:00464EA9 E8C2F5FFFF              call 00464470
:00464EAE 83C40C                  add esp, 0000000C
:00464EB1 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F0, "255"
                                  |
:00464EB2 68F0030000              push 000003F0
:00464EB7 8B5508                  mov edx, dword ptr [ebp+08]
:00464EBA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464EBB FF15AC864B00            Call dword ptr [004B86AC]
:00464EC1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464EC2 FF15B0864B00            Call dword ptr [004B86B0]
:00464EC8 68F4010000              push 000001F4
:00464ECD 668B4598                mov ax, word ptr [ebp-68]
:00464ED1 50                      push eax
:00464ED2 6807040000              push 00000407
:00464ED7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464EDA 51                      push ecx
:00464EDB E82BFEFFFF              call 00464D0B
:00464EE0 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00464EE3 6A0A                    push 0000000A
:00464EE5 8D559C                  lea edx, dword ptr [ebp-64]
:00464EE8 52                      push edx
:00464EE9 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464EEC E8BCD5F9FF              call 004024AD
:00464EF1 50                      push eax
:00464EF2 E879F5FFFF              call 00464470
:00464EF7 83C40C                  add esp, 0000000C
:00464EFA 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F1, "255"
                                  |
:00464EFB 68F1030000              push 000003F1
:00464F00 8B4508                  mov eax, dword ptr [ebp+08]
:00464F03 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464F04 FF15AC864B00            Call dword ptr [004B86AC]
:00464F0A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464F0B FF15B0864B00            Call dword ptr [004B86B0]
:00464F11 68F4010000              push 000001F4
:00464F16 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464F19 E88FD5F9FF              call 004024AD
:00464F1E 50                      push eax
:00464F1F 680A040000              push 0000040A
:00464F24 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464F27 51                      push ecx
:00464F28 E8DEFDFFFF              call 00464D0B
:00464F2D 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00464F30 6A0A                    push 0000000A
:00464F32 8D559C                  lea edx, dword ptr [ebp-64]
:00464F35 52                      push edx
:00464F36 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464F39 E806D6F9FF              call 00402544
:00464F3E 50                      push eax
:00464F3F E82CF5FFFF              call 00464470
:00464F44 83C40C                  add esp, 0000000C
:00464F47 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:00464F48 68F3030000              push 000003F3
:00464F4D 8B4508                  mov eax, dword ptr [ebp+08]
:00464F50 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464F51 FF15AC864B00            Call dword ptr [004B86AC]
:00464F57 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464F58 FF15B0864B00            Call dword ptr [004B86B0]
:00464F5E 68F4010000              push 000001F4
:00464F63 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464F66 E8D9D5F9FF              call 00402544
:00464F6B 50                      push eax
:00464F6C 6808040000              push 00000408
:00464F71 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464F74 51                      push ecx
:00464F75 E891FDFFFF              call 00464D0B
:00464F7A 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00464F7D 6A0A                    push 0000000A
:00464F7F 8D559C                  lea edx, dword ptr [ebp-64]
:00464F82 52                      push edx
:00464F83 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464F86 E871D6F9FF              call 004025FC
:00464F8B 25FF000000              and eax, 000000FF
:00464F90 50                      push eax
:00464F91 E8DAF4FFFF              call 00464470
:00464F96 83C40C                  add esp, 0000000C
:00464F99 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F4, "255"
                                  |
:00464F9A 68F4030000              push 000003F4
:00464F9F 8B4508                  mov eax, dword ptr [ebp+08]
:00464FA2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464FA3 FF15AC864B00            Call dword ptr [004B86AC]
:00464FA9 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464FAA FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00464FB0 68FF000000              push 000000FF
:00464FB5 8B4D88                  mov ecx, dword ptr [ebp-78]
:00464FB8 E83FD6F9FF              call 004025FC
:00464FBD 6633C9                  xor cx, cx
:00464FC0 8AC8                    mov cl, al
:00464FC2 51                      push ecx
:00464FC3 6809040000              push 00000409
:00464FC8 8B5508                  mov edx, dword ptr [ebp+08]
:00464FCB 52                      push edx
:00464FCC E83AFDFFFF              call 00464D0B
:00464FD1 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464D7E(U)
|
:00464FD4 8BE5                    mov esp, ebp
:00464FD6 5D                      pop ebp
:00464FD7 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004663E1   , :0046661E   
|
:00464FDA 55                      push ebp
:00464FDB 8BEC                    mov ebp, esp
:00464FDD 83EC74                  sub esp, 00000074
:00464FE0 894D8C                  mov dword ptr [ebp-74], ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:00464FE3 68FD030000              push 000003FD
:00464FE8 8B4508                  mov eax, dword ptr [ebp+08]
:00464FEB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464FEC FF15AC864B00            Call dword ptr [004B86AC]
:00464FF2 85C0                    test eax, eax
:00464FF4 7505                    jne 00464FFB
:00464FF6 E949020000              jmp 00465244

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464FF4(C)
|
:00464FFB 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00464FFE E8DDD4F9FF              call 004024E0
:00465003 8945F8                  mov dword ptr [ebp-08], eax
:00465006 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00465009 E803D5F9FF              call 00402511
:0046500E 8945FC                  mov dword ptr [ebp-04], eax
:00465011 E8FC18FBFF              call 00416912
:00465016 85C0                    test eax, eax
:00465018 7450                    je 0046506A
:0046501A 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046501D E828020000              call 0046524A
:00465022 884590                  mov byte ptr [ebp-70], al
:00465025 8B4D90                  mov ecx, dword ptr [ebp-70]
:00465028 81E1FF000000            and ecx, 000000FF
:0046502E 81F9FF000000            cmp ecx, 000000FF
:00465034 7434                    je 0046506A
:00465036 8B4D90                  mov ecx, dword ptr [ebp-70]
:00465039 81E1FF000000            and ecx, 000000FF
:0046503F 6BC924                  imul ecx, 00000024
:00465042 81C108F54A00            add ecx, 004AF508
:00465048 E823F8F9FF              call 00404870
:0046504D 8945F8                  mov dword ptr [ebp-08], eax
:00465050 8B4D90                  mov ecx, dword ptr [ebp-70]
:00465053 81E1FF000000            and ecx, 000000FF
:00465059 6BC924                  imul ecx, 00000024
:0046505C 81C108F54A00            add ecx, 004AF508
:00465062 E849F8F9FF              call 004048B0
:00465067 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465018(C), :00465034(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046506A 6A0A                    push 0000000A
:0046506C 8D5594                  lea edx, dword ptr [ebp-6C]
:0046506F 52                      push edx
:00465070 8B45F8                  mov eax, dword ptr [ebp-08]
:00465073 50                      push eax
:00465074 E8F7F3FFFF              call 00464470
:00465079 83C40C                  add esp, 0000000C
:0046507C 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:0046507D 68FD030000              push 000003FD
:00465082 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465085 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465086 FF15AC864B00            Call dword ptr [004B86AC]
:0046508C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046508D FF15B0864B00            Call dword ptr [004B86B0]
:00465093 68E8030000              push 000003E8
:00465098 668B55F8                mov dx, word ptr [ebp-08]
:0046509C 52                      push edx
:0046509D 6806040000              push 00000406
:004650A2 8B4508                  mov eax, dword ptr [ebp+08]
:004650A5 50                      push eax
:004650A6 E860FCFFFF              call 00464D0B
:004650AB 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004650AE 6A0A                    push 0000000A
:004650B0 8D4D94                  lea ecx, dword ptr [ebp-6C]
:004650B3 51                      push ecx
:004650B4 8B55FC                  mov edx, dword ptr [ebp-04]
:004650B7 52                      push edx
:004650B8 E8B3F3FFFF              call 00464470
:004650BD 83C40C                  add esp, 0000000C
:004650C0 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:004650C1 68F2030000              push 000003F2
:004650C6 8B4508                  mov eax, dword ptr [ebp+08]
:004650C9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004650CA FF15AC864B00            Call dword ptr [004B86AC]
:004650D0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004650D1 FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004650D7 68FF000000              push 000000FF
:004650DC 668B4DFC                mov cx, word ptr [ebp-04]
:004650E0 51                      push ecx
:004650E1 6807040000              push 00000407
:004650E6 8B5508                  mov edx, dword ptr [ebp+08]
:004650E9 52                      push edx
:004650EA E81CFCFFFF              call 00464D0B
:004650EF 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004650F2 6A0A                    push 0000000A
:004650F4 8D4594                  lea eax, dword ptr [ebp-6C]
:004650F7 50                      push eax
:004650F8 8B4D8C                  mov ecx, dword ptr [ebp-74]
:004650FB E8E0D3F9FF              call 004024E0
:00465100 50                      push eax
:00465101 E86AF3FFFF              call 00464470
:00465106 83C40C                  add esp, 0000000C
:00465109 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:0046510A 68FE030000              push 000003FE
:0046510F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465112 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465113 FF15AC864B00            Call dword ptr [004B86AC]
:00465119 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046511A FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00465120 6A0A                    push 0000000A
:00465122 8D5594                  lea edx, dword ptr [ebp-6C]
:00465125 52                      push edx
:00465126 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00465129 E8E3D3F9FF              call 00402511
:0046512E 50                      push eax
:0046512F E83CF3FFFF              call 00464470
:00465134 83C40C                  add esp, 0000000C
:00465137 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:00465138 68F3030000              push 000003F3
:0046513D 8B4508                  mov eax, dword ptr [ebp+08]
:00465140 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465141 FF15AC864B00            Call dword ptr [004B86AC]
:00465147 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465148 FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046514E 6A0A                    push 0000000A
:00465150 8D4D94                  lea ecx, dword ptr [ebp-6C]
:00465153 51                      push ecx
:00465154 8B558C                  mov edx, dword ptr [ebp-74]
:00465157 33C0                    xor eax, eax
:00465159 8A4234                  mov al, byte ptr [edx+34]
:0046515C 50                      push eax
:0046515D E80EF3FFFF              call 00464470
:00465162 83C40C                  add esp, 0000000C
:00465165 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F5, "255"
                                  |
:00465166 68F5030000              push 000003F5
:0046516B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046516E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046516F FF15AC864B00            Call dword ptr [004B86AC]
:00465175 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465176 FF15B0864B00            Call dword ptr [004B86B0]
:0046517C 6A64                    push 00000064
:0046517E 8B558C                  mov edx, dword ptr [ebp-74]
:00465181 660FB64234              movzx ax, byte ptr [edx+34]
:00465186 50                      push eax
:00465187 6808040000              push 00000408
:0046518C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046518F 51                      push ecx
:00465190 E876FBFFFF              call 00464D0B
:00465195 83C410                  add esp, 00000010
:00465198 6A00                    push 00000000
:0046519A E881B7FAFF              call 00410920
:0046519F 83C404                  add esp, 00000004
:004651A2 85C0                    test eax, eax
:004651A4 746E                    je 00465214
:004651A6 8B4D8C                  mov ecx, dword ptr [ebp-74]
:004651A9 E862F5F9FF              call 00404710
:004651AE 85C0                    test eax, eax
:004651B0 7562                    jne 00465214

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004651B2 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:052B, "@"
                                  |
:004651B4 682B050000              push 0000052B
:004651B9 8B5508                  mov edx, dword ptr [ebp+08]
:004651BC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004651BD FF15AC864B00            Call dword ptr [004B86AC]
:004651C3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004651C4 FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004651CA 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:004651CC 6832040000              push 00000432
:004651D1 8B4508                  mov eax, dword ptr [ebp+08]
:004651D4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004651D5 FF15AC864B00            Call dword ptr [004B86AC]
:004651DB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004651DC FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004651E2 6A0A                    push 0000000A
:004651E4 8D4D94                  lea ecx, dword ptr [ebp-6C]
:004651E7 51                      push ecx
:004651E8 B9C8E24A00              mov ecx, 004AE2C8
:004651ED E8DEA4FCFF              call 0042F6D0
:004651F2 50                      push eax
:004651F3 E878F2FFFF              call 00464470
:004651F8 83C40C                  add esp, 0000000C
:004651FB 50                      push eax

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:004651FC 6832040000              push 00000432
:00465201 8B5508                  mov edx, dword ptr [ebp+08]
:00465204 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465205 FF15AC864B00            Call dword ptr [004B86AC]
:0046520B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046520C FF15B0864B00            Call dword ptr [004B86B0]
:00465212 EB30                    jmp 00465244

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004651A4(C), :004651B0(C)
|
:00465214 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:052B, "@"
                                  |
:00465216 682B050000              push 0000052B
:0046521B 8B4508                  mov eax, dword ptr [ebp+08]
:0046521E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046521F FF15AC864B00            Call dword ptr [004B86AC]
:00465225 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00465226 FF15E4864B00            Call dword ptr [004B86E4]
:0046522C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:0046522E 6832040000              push 00000432
:00465233 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465236 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465237 FF15AC864B00            Call dword ptr [004B86AC]
:0046523D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046523E FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464FF6(U), :00465212(U)
|
:00465244 8BE5                    mov esp, ebp
:00465246 5D                      pop ebp
:00465247 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401521   , :0040155A   , :00401998   , :00401A20   , :004095A9   
|:00409D47   , :00409D6B   , :0040A0BE   , :0040A16B   , :0040A430   
|:0040A4DD   , :0040D403   , :0040D630   , :00427302   , :00453CFF   
|:0045798B   , :0045A095   , :00464DB0   , :0046501D   , :00465695   
|:00465E01   , :00465FC8   
|
:0046524A 55                      push ebp
:0046524B 8BEC                    mov ebp, esp
:0046524D 83EC08                  sub esp, 00000008
:00465250 56                      push esi
:00465251 894DF8                  mov dword ptr [ebp-08], ecx
:00465254 E8B916FBFF              call 00416912
:00465259 85C0                    test eax, eax
:0046525B 7504                    jne 00465261
:0046525D 0CFF                    or al, FF
:0046525F EB6A                    jmp 004652CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046525B(C)
|
:00465261 C645FC00                mov [ebp-04], 00
:00465265 EB08                    jmp 0046526F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004652C7(U)
|
:00465267 8A45FC                  mov al, byte ptr [ebp-04]
:0046526A 0401                    add al, 01
:0046526C 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465265(U)
|
:0046526F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465272 81E1FF000000            and ecx, 000000FF
:00465278 83F95A                  cmp ecx, 0000005A
:0046527B 7D4C                    jge 004652C9
:0046527D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465280 81E1FF000000            and ecx, 000000FF
:00465286 6BC924                  imul ecx, 00000024
:00465289 81C108F54A00            add ecx, 004AF508
:0046528F E83CA6FCFF              call 0042F8D0
:00465294 25FF000000              and eax, 000000FF
:00465299 85C0                    test eax, eax
:0046529B 742A                    je 004652C7
:0046529D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004652A0 81E1FF000000            and ecx, 000000FF
:004652A6 6BC924                  imul ecx, 00000024
:004652A9 81C108F54A00            add ecx, 004AF508
:004652AF E81CA4FCFF              call 0042F6D0
:004652B4 8BF0                    mov esi, eax
:004652B6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004652B9 E852F4F9FF              call 00404710
:004652BE 3BF0                    cmp esi, eax
:004652C0 7505                    jne 004652C7
:004652C2 8A45FC                  mov al, byte ptr [ebp-04]
:004652C5 EB04                    jmp 004652CB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046529B(C), :004652C0(C)
|
:004652C7 EB9E                    jmp 00465267

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046527B(C)
|
:004652C9 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046525F(U), :004652C5(U)
|
:004652CB 5E                      pop esi
:004652CC 8BE5                    mov esp, ebp
:004652CE 5D                      pop ebp
:004652CF C3                      ret



* Referenced by a CALL at Addresses:
|:0046642C   , :00466697   
|
:004652D0 55                      push ebp
:004652D1 8BEC                    mov ebp, esp
:004652D3 83EC18                  sub esp, 00000018
:004652D6 894DE8                  mov dword ptr [ebp-18], ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0521, ""
                                  |
:004652D9 6821050000              push 00000521
:004652DE 8B4508                  mov eax, dword ptr [ebp+08]
:004652E1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004652E2 FF15AC864B00            Call dword ptr [004B86AC]
:004652E8 8945F8                  mov dword ptr [ebp-08], eax
:004652EB 837DF800                cmp dword ptr [ebp-08], 00000000
:004652EF 7505                    jne 004652F6
:004652F1 E936010000              jmp 0046542C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004652EF(C)
|
:004652F6 6A00                    push 00000000
:004652F8 6A00                    push 00000000
:004652FA 6884010000              push 00000184
:004652FF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465302 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465303 FF15D8864B00            Call dword ptr [004B86D8]
:00465309 C745FCFFFF0000          mov [ebp-04], 0000FFFF
:00465310 C645ECFF                mov [ebp-14], FF
:00465314 C745F000000000          mov [ebp-10], 00000000
:0046531B 8B55F0                  mov edx, dword ptr [ebp-10]
:0046531E 8955F4                  mov dword ptr [ebp-0C], edx
:00465321 EB09                    jmp 0046532C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004653BA(U)
|
:00465323 8B45F0                  mov eax, dword ptr [ebp-10]
:00465326 83C001                  add eax, 00000001
:00465329 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465321(U)
|
:0046532C 837DF008                cmp dword ptr [ebp-10], 00000008
:00465330 0F8389000000            jnb 004653BF
:00465336 8A4DF0                  mov cl, byte ptr [ebp-10]
:00465339 51                      push ecx
:0046533A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046533D E853ECF9FF              call 00403F95
:00465342 8845EC                  mov byte ptr [ebp-14], al
:00465345 8B55EC                  mov edx, dword ptr [ebp-14]
:00465348 81E2FF000000            and edx, 000000FF
:0046534E 81FAFF000000            cmp edx, 000000FF
:00465354 7464                    je 004653BA
:00465356 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00465359 81E1FF000000            and ecx, 000000FF
:0046535F 6BC911                  imul ecx, 00000011
:00465362 81C180DF4A00            add ecx, 004ADF80
:00465368 E84324FAFF              call 004077B0
:0046536D 50                      push eax
:0046536E 6A00                    push 00000000
:00465370 6880010000              push 00000180
:00465375 8B45F8                  mov eax, dword ptr [ebp-08]
:00465378 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465379 FF15D8864B00            Call dword ptr [004B86D8]
:0046537F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00465382 81E1FF000000            and ecx, 000000FF
:00465388 51                      push ecx
:00465389 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046538C 52                      push edx
:0046538D 689A010000              push 0000019A
:00465392 8B45F8                  mov eax, dword ptr [ebp-08]
:00465395 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465396 FF15D8864B00            Call dword ptr [004B86D8]
:0046539C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046539F 83C101                  add ecx, 00000001
:004653A2 894DF4                  mov dword ptr [ebp-0C], ecx
:004653A5 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:004653AC 750C                    jne 004653BA
:004653AE 8B55EC                  mov edx, dword ptr [ebp-14]
:004653B1 81E2FF000000            and edx, 000000FF
:004653B7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465354(C), :004653AC(C)
|
:004653BA E964FFFFFF              jmp 00465323

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465330(C)
|
:004653BF 837DF400                cmp dword ptr [ebp-0C], 00000000
:004653C3 7544                    jne 00465409

* Possible StringData Ref from Data Obj ->"L"
                                  |
:004653C5 6848E84700              push 0047E848
:004653CA 6A00                    push 00000000
:004653CC 6880010000              push 00000180
:004653D1 8B45F8                  mov eax, dword ptr [ebp-08]
:004653D4 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004653D5 FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004653DB 68FF000000              push 000000FF
:004653E0 6A00                    push 00000000
:004653E2 689A010000              push 0000019A
:004653E7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004653EA 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004653EB FF15D8864B00            Call dword ptr [004B86D8]

* Possible StringData Ref from Data Obj ->"L"
                                  |
:004653F1 684CE84700              push 0047E84C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004653F6 6AFF                    push FFFFFFFF
:004653F8 688C010000              push 0000018C
:004653FD 8B55F8                  mov edx, dword ptr [ebp-08]
:00465400 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465401 FF15D8864B00            Call dword ptr [004B86D8]
:00465407 EB23                    jmp 0046542C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004653C3(C)
|
:00465409 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046540C 6BC911                  imul ecx, 00000011
:0046540F 81C180DF4A00            add ecx, 004ADF80
:00465415 E89623FAFF              call 004077B0
:0046541A 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046541B 6AFF                    push FFFFFFFF
:0046541D 688C010000              push 0000018C
:00465422 8B45F8                  mov eax, dword ptr [ebp-08]
:00465425 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465426 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004652F1(U), :00465407(U)
|
:0046542C 8BE5                    mov esp, ebp
:0046542E 5D                      pop ebp
:0046542F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00466445   , :004667B1   
|
:00465432 55                      push ebp
:00465433 8BEC                    mov ebp, esp
:00465435 81EC6C010000            sub esp, 0000016C
:0046543B 898D94FEFFFF            mov dword ptr [ebp+FFFFFE94], ecx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:056B, ""
                                  |
:00465441 686B050000              push 0000056B
:00465446 8B4508                  mov eax, dword ptr [ebp+08]
:00465449 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046544A FF15AC864B00            Call dword ptr [004B86AC]
:00465450 8945F8                  mov dword ptr [ebp-08], eax
:00465453 837DF800                cmp dword ptr [ebp-08], 00000000
:00465457 7505                    jne 0046545E
:00465459 E90D020000              jmp 0046566B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465457(C)
|
:0046545E 6A00                    push 00000000
:00465460 6A00                    push 00000000
:00465462 6884010000              push 00000184
:00465467 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046546A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046546B FF15D8864B00            Call dword ptr [004B86D8]
:00465471 C745FCFFFF0000          mov [ebp-04], 0000FFFF
:00465478 C68598FEFFFFFF          mov byte ptr [ebp+FFFFFE98], FF
:0046547F C7857CFFFFFF00000000    mov dword ptr [ebp+FFFFFF7C], 00000000
:00465489 C78504FFFFFF00000000    mov dword ptr [ebp+FFFFFF04], 00000000
:00465493 8B9504FFFFFF            mov edx, dword ptr [ebp+FFFFFF04]
:00465499 8955F4                  mov dword ptr [ebp-0C], edx
:0046549C EB0F                    jmp 004654AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004655E9(U)
|
:0046549E 8B8504FFFFFF            mov eax, dword ptr [ebp+FFFFFF04]
:004654A4 83C001                  add eax, 00000001
:004654A7 898504FFFFFF            mov dword ptr [ebp+FFFFFF04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046549C(U)
|
:004654AD 83BD04FFFFFF08          cmp dword ptr [ebp+FFFFFF04], 00000008
:004654B4 0F8334010000            jnb 004655EE
:004654BA 8A8D04FFFFFF            mov cl, byte ptr [ebp+FFFFFF04]
:004654C0 51                      push ecx
:004654C1 8B8D94FEFFFF            mov ecx, dword ptr [ebp+FFFFFE94]
:004654C7 E8E8EDF9FF              call 004042B4
:004654CC 888598FEFFFF            mov byte ptr [ebp+FFFFFE98], al
:004654D2 8B9598FEFFFF            mov edx, dword ptr [ebp+FFFFFE98]
:004654D8 81E2FF000000            and edx, 000000FF
:004654DE 81FAFF000000            cmp edx, 000000FF
:004654E4 0F84FF000000            je 004655E9
:004654EA 8B8598FEFFFF            mov eax, dword ptr [ebp+FFFFFE98]
:004654F0 25FF000000              and eax, 000000FF
:004654F5 50                      push eax
:004654F6 8D8D9CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE9C]
:004654FC 51                      push ecx
:004654FD E83605FAFF              call 00405A38
:00465502 83C408                  add esp, 00000008
:00465505 8B9598FEFFFF            mov edx, dword ptr [ebp+FFFFFE98]
:0046550B 81E2FF000000            and edx, 000000FF
:00465511 8B0495507C4700          mov eax, dword ptr [4*edx+00477C50]
:00465518 50                      push eax
:00465519 8D4D80                  lea ecx, dword ptr [ebp-80]
:0046551C 51                      push ecx
:0046551D E8BDD0FFFF              call 004625DF
:00465522 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->"("
                                  |
:00465525 6850E84700              push 0047E850
:0046552A 8D5580                  lea edx, dword ptr [ebp-80]
:0046552D 52                      push edx
:0046552E E8EBD0FFFF              call 0046261E
:00465533 83C408                  add esp, 00000008
:00465536 8D859CFEFFFF            lea eax, dword ptr [ebp+FFFFFE9C]
:0046553C 50                      push eax
:0046553D 8D4D80                  lea ecx, dword ptr [ebp-80]
:00465540 51                      push ecx
:00465541 E8D8D0FFFF              call 0046261E
:00465546 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->")"
                                  |
:00465549 6854E84700              push 0047E854
:0046554E 8D5580                  lea edx, dword ptr [ebp-80]
:00465551 52                      push edx
:00465552 E8C7D0FFFF              call 0046261E
:00465557 83C408                  add esp, 00000008
:0046555A 8D4580                  lea eax, dword ptr [ebp-80]
:0046555D 50                      push eax
:0046555E 6A00                    push 00000000
:00465560 6880010000              push 00000180
:00465565 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465568 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465569 FF15D8864B00            Call dword ptr [004B86D8]
:0046556F 8B9598FEFFFF            mov edx, dword ptr [ebp+FFFFFE98]
:00465575 81E2FF000000            and edx, 000000FF
:0046557B 52                      push edx
:0046557C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046557F 50                      push eax
:00465580 689A010000              push 0000019A
:00465585 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465588 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465589 FF15D8864B00            Call dword ptr [004B86D8]
:0046558F 8D5580                  lea edx, dword ptr [ebp-80]
:00465592 52                      push edx
:00465593 E80BD0FFFF              call 004625A3
:00465598 83C404                  add esp, 00000004
:0046559B 39857CFFFFFF            cmp dword ptr [ebp+FFFFFF7C], eax
:004655A1 7312                    jnb 004655B5
:004655A3 8D4580                  lea eax, dword ptr [ebp-80]
:004655A6 50                      push eax
:004655A7 E8F7CFFFFF              call 004625A3
:004655AC 83C404                  add esp, 00000004
:004655AF 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004655A1(C)
|
:004655B5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004655B8 83C101                  add ecx, 00000001
:004655BB 894DF4                  mov dword ptr [ebp-0C], ecx
:004655BE 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:004655C5 7522                    jne 004655E9
:004655C7 8B9598FEFFFF            mov edx, dword ptr [ebp+FFFFFE98]
:004655CD 81E2FF000000            and edx, 000000FF
:004655D3 8955FC                  mov dword ptr [ebp-04], edx
:004655D6 8D4580                  lea eax, dword ptr [ebp-80]
:004655D9 50                      push eax
:004655DA 8D8D08FFFFFF            lea ecx, dword ptr [ebp+FFFFFF08]
:004655E0 51                      push ecx
:004655E1 E8F9CFFFFF              call 004625DF
:004655E6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004654E4(C), :004655C5(C)
|
:004655E9 E9B0FEFFFF              jmp 0046549E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004654B4(C)
|
:004655EE 837DF400                cmp dword ptr [ebp-0C], 00000000
:004655F2 7544                    jne 00465638

* Possible StringData Ref from Data Obj ->"L"
                                  |
:004655F4 6858E84700              push 0047E858
:004655F9 6A00                    push 00000000
:004655FB 6880010000              push 00000180
:00465600 8B55F8                  mov edx, dword ptr [ebp-08]
:00465603 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465604 FF15D8864B00            Call dword ptr [004B86D8]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046560A 68FF000000              push 000000FF
:0046560F 6A00                    push 00000000
:00465611 689A010000              push 0000019A
:00465616 8B45F8                  mov eax, dword ptr [ebp-08]
:00465619 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046561A FF15D8864B00            Call dword ptr [004B86D8]

* Possible StringData Ref from Data Obj ->"L"
                                  |
:00465620 685CE84700              push 0047E85C

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00465625 6AFF                    push FFFFFFFF
:00465627 688C010000              push 0000018C
:0046562C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046562F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465630 FF15D8864B00            Call dword ptr [004B86D8]
:00465636 EB33                    jmp 0046566B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004655F2(C)
|
:00465638 8D9508FFFFFF            lea edx, dword ptr [ebp+FFFFFF08]
:0046563E 52                      push edx

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046563F 6AFF                    push FFFFFFFF
:00465641 688C010000              push 0000018C
:00465646 8B45F8                  mov eax, dword ptr [ebp-08]
:00465649 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046564A FF15D8864B00            Call dword ptr [004B86D8]
:00465650 6A00                    push 00000000
:00465652 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:00465658 C1E103                  shl ecx, 03
:0046565B 51                      push ecx
:0046565C 6894010000              push 00000194
:00465661 8B55F8                  mov edx, dword ptr [ebp-08]
:00465664 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465665 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465459(U), :00465636(U)
|
:0046566B 8BE5                    mov esp, ebp
:0046566D 5D                      pop ebp
:0046566E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00466413   , :00466828   
|
:00465671 55                      push ebp
:00465672 8BEC                    mov ebp, esp
:00465674 83EC10                  sub esp, 00000010
:00465677 894DF0                  mov dword ptr [ebp-10], ecx
:0046567A 6838050000              push 00000538
:0046567F 8B4508                  mov eax, dword ptr [ebp+08]
:00465682 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465683 FF15AC864B00            Call dword ptr [004B86AC]
:00465689 85C0                    test eax, eax
:0046568B 7505                    jne 00465692
:0046568D E99A020000              jmp 0046592C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046568B(C)
|
:00465692 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00465695 E8B0FBFFFF              call 0046524A
:0046569A 8845F4                  mov byte ptr [ebp-0C], al
:0046569D C745FC01000000          mov [ebp-04], 00000001
:004656A4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004656A7 81E1FF000000            and ecx, 000000FF
:004656AD 81F9FF000000            cmp ecx, 000000FF
:004656B3 7507                    jne 004656BC
:004656B5 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004656B3(C)
|
:004656BC 6838050000              push 00000538
:004656C1 8B5508                  mov edx, dword ptr [ebp+08]
:004656C4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004656C5 FF15AC864B00            Call dword ptr [004B86AC]
:004656CB 8945F8                  mov dword ptr [ebp-08], eax
:004656CE 837DF800                cmp dword ptr [ebp-08], 00000000
:004656D2 7444                    je 00465718
:004656D4 837DFC00                cmp dword ptr [ebp-04], 00000000
:004656D8 742B                    je 00465705
:004656DA 6838050000              push 00000538
:004656DF 8B4508                  mov eax, dword ptr [ebp+08]
:004656E2 50                      push eax
:004656E3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004656E6 81E1FF000000            and ecx, 000000FF
:004656EC 6BC924                  imul ecx, 00000024
:004656EF 81C108F54A00            add ecx, 004AF508
:004656F5 E826A0FCFF              call 0042F720
:004656FA 50                      push eax
:004656FB E842030000              call 00465A42
:00465700 83C40C                  add esp, 0000000C
:00465703 EB13                    jmp 00465718

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004656D8(C)
|
:00465705 6838050000              push 00000538
:0046570A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046570D 51                      push ecx
:0046570E 6A01                    push 00000001
:00465710 E82D030000              call 00465A42
:00465715 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004656D2(C), :00465703(U)
|
:00465718 6839050000              push 00000539
:0046571D 8B5508                  mov edx, dword ptr [ebp+08]
:00465720 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465721 FF15AC864B00            Call dword ptr [004B86AC]
:00465727 8945F8                  mov dword ptr [ebp-08], eax
:0046572A 837DF800                cmp dword ptr [ebp-08], 00000000
:0046572E 7444                    je 00465774
:00465730 837DFC00                cmp dword ptr [ebp-04], 00000000
:00465734 742B                    je 00465761
:00465736 6839050000              push 00000539
:0046573B 8B4508                  mov eax, dword ptr [ebp+08]
:0046573E 50                      push eax
:0046573F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00465742 81E1FF000000            and ecx, 000000FF
:00465748 6BC924                  imul ecx, 00000024
:0046574B 81C108F54A00            add ecx, 004AF508
:00465751 E8EA9FFCFF              call 0042F740
:00465756 50                      push eax
:00465757 E8E6020000              call 00465A42
:0046575C 83C40C                  add esp, 0000000C
:0046575F EB13                    jmp 00465774

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465734(C)
|
:00465761 6839050000              push 00000539
:00465766 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465769 51                      push ecx
:0046576A 6A01                    push 00000001
:0046576C E8D1020000              call 00465A42
:00465771 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046572E(C), :0046575F(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:053B, ""
                                  |
:00465774 683B050000              push 0000053B
:00465779 8B5508                  mov edx, dword ptr [ebp+08]
:0046577C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046577D FF15AC864B00            Call dword ptr [004B86AC]
:00465783 8945F8                  mov dword ptr [ebp-08], eax
:00465786 837DF800                cmp dword ptr [ebp-08], 00000000
:0046578A 7440                    je 004657CC
:0046578C 837DFC00                cmp dword ptr [ebp-04], 00000000
:00465790 742A                    je 004657BC

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00465792 6A10                    push 00000010
:00465794 8B45F8                  mov eax, dword ptr [ebp-08]
:00465797 50                      push eax

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:00465798 6A10                    push 00000010
:0046579A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046579D 81E1FF000000            and ecx, 000000FF
:004657A3 6BC924                  imul ecx, 00000024
:004657A6 81C108F54A00            add ecx, 004AF508
:004657AC E8AF9FFCFF              call 0042F760
:004657B1 50                      push eax
:004657B2 E87B010000              call 00465932
:004657B7 83C40C                  add esp, 0000000C
:004657BA EB10                    jmp 004657CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465790(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:004657BC 6A10                    push 00000010
:004657BE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004657C1 51                      push ecx
:004657C2 6A00                    push 00000000
:004657C4 E869010000              call 00465932
:004657C9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046578A(C), :004657BA(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:04FF, "
"
                                  |
:004657CC 68FF040000              push 000004FF
:004657D1 8B5508                  mov edx, dword ptr [ebp+08]
:004657D4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004657D5 FF15AC864B00            Call dword ptr [004B86AC]
:004657DB 8945F8                  mov dword ptr [ebp-08], eax
:004657DE 837DF800                cmp dword ptr [ebp-08], 00000000
:004657E2 7440                    je 00465824
:004657E4 837DFC00                cmp dword ptr [ebp-04], 00000000
:004657E8 742A                    je 00465814
:004657EA 6A01                    push 00000001
:004657EC 8B45F8                  mov eax, dword ptr [ebp-08]
:004657EF 50                      push eax
:004657F0 6A01                    push 00000001
:004657F2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004657F5 81E1FF000000            and ecx, 000000FF
:004657FB 6BC924                  imul ecx, 00000024
:004657FE 81C108F54A00            add ecx, 004AF508
:00465804 E8579FFCFF              call 0042F760
:00465809 50                      push eax
:0046580A E823010000              call 00465932
:0046580F 83C40C                  add esp, 0000000C
:00465812 EB10                    jmp 00465824

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004657E8(C)
|
:00465814 6A01                    push 00000001
:00465816 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465819 51                      push ecx
:0046581A 6A00                    push 00000000
:0046581C E811010000              call 00465932
:00465821 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004657E2(C), :00465812(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:0500, "[+"
                                  |
:00465824 6800050000              push 00000500
:00465829 8B5508                  mov edx, dword ptr [ebp+08]
:0046582C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046582D FF15AC864B00            Call dword ptr [004B86AC]
:00465833 8945F8                  mov dword ptr [ebp-08], eax
:00465836 837DF800                cmp dword ptr [ebp-08], 00000000
:0046583A 7440                    je 0046587C
:0046583C 837DFC00                cmp dword ptr [ebp-04], 00000000
:00465840 742A                    je 0046586C

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00465842 6A04                    push 00000004
:00465844 8B45F8                  mov eax, dword ptr [ebp-08]
:00465847 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00465848 6A04                    push 00000004
:0046584A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046584D 81E1FF000000            and ecx, 000000FF
:00465853 6BC924                  imul ecx, 00000024
:00465856 81C108F54A00            add ecx, 004AF508
:0046585C E8FF9EFCFF              call 0042F760
:00465861 50                      push eax
:00465862 E8CB000000              call 00465932
:00465867 83C40C                  add esp, 0000000C
:0046586A EB10                    jmp 0046587C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465840(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046586C 6A04                    push 00000004
:0046586E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465871 51                      push ecx
:00465872 6A00                    push 00000000
:00465874 E8B9000000              call 00465932
:00465879 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046583A(C), :0046586A(U)
|
:0046587C 6801050000              push 00000501
:00465881 8B5508                  mov edx, dword ptr [ebp+08]
:00465884 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465885 FF15AC864B00            Call dword ptr [004B86AC]
:0046588B 8945F8                  mov dword ptr [ebp-08], eax
:0046588E 837DF800                cmp dword ptr [ebp-08], 00000000
:00465892 7440                    je 004658D4
:00465894 837DFC00                cmp dword ptr [ebp-04], 00000000
:00465898 742A                    je 004658C4

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0046589A 6A02                    push 00000002
:0046589C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046589F 50                      push eax

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004658A0 6A02                    push 00000002
:004658A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004658A5 81E1FF000000            and ecx, 000000FF
:004658AB 6BC924                  imul ecx, 00000024
:004658AE 81C108F54A00            add ecx, 004AF508
:004658B4 E8A79EFCFF              call 0042F760
:004658B9 50                      push eax
:004658BA E873000000              call 00465932
:004658BF 83C40C                  add esp, 0000000C
:004658C2 EB10                    jmp 004658D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465898(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004658C4 6A02                    push 00000002
:004658C6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004658C9 51                      push ecx
:004658CA 6A00                    push 00000000
:004658CC E861000000              call 00465932
:004658D1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465892(C), :004658C2(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:0502, ""
                                  |
:004658D4 6802050000              push 00000502
:004658D9 8B5508                  mov edx, dword ptr [ebp+08]
:004658DC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004658DD FF15AC864B00            Call dword ptr [004B86AC]
:004658E3 8945F8                  mov dword ptr [ebp-08], eax
:004658E6 837DF800                cmp dword ptr [ebp-08], 00000000
:004658EA 7440                    je 0046592C
:004658EC 837DFC00                cmp dword ptr [ebp-04], 00000000
:004658F0 742A                    je 0046591C
:004658F2 6A20                    push 00000020
:004658F4 8B45F8                  mov eax, dword ptr [ebp-08]
:004658F7 50                      push eax
:004658F8 6A20                    push 00000020
:004658FA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004658FD 81E1FF000000            and ecx, 000000FF
:00465903 6BC924                  imul ecx, 00000024
:00465906 81C108F54A00            add ecx, 004AF508
:0046590C E84F9EFCFF              call 0042F760
:00465911 50                      push eax
:00465912 E81B000000              call 00465932
:00465917 83C40C                  add esp, 0000000C
:0046591A EB10                    jmp 0046592C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004658F0(C)
|
:0046591C 6A20                    push 00000020
:0046591E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465921 51                      push ecx
:00465922 6A00                    push 00000000
:00465924 E809000000              call 00465932
:00465929 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046568D(U), :004658EA(C), :0046591A(U)
|
:0046592C 8BE5                    mov esp, ebp
:0046592E 5D                      pop ebp
:0046592F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004657B2   , :004657C4   , :0046580A   , :0046581C   , :00465862   
|:00465874   , :004658BA   , :004658CC   , :00465912   , :00465924   
|
:00465932 55                      push ebp
:00465933 8BEC                    mov ebp, esp
:00465935 83EC24                  sub esp, 00000024
:00465938 8B4508                  mov eax, dword ptr [ebp+08]
:0046593B 25FF000000              and eax, 000000FF
:00465940 85C0                    test eax, eax
:00465942 0F849F000000            je 004659E7
:00465948 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046594B 81E1FF000000            and ecx, 000000FF
:00465951 894DDC                  mov dword ptr [ebp-24], ecx
:00465954 8B55DC                  mov edx, dword ptr [ebp-24]
:00465957 83EA01                  sub edx, 00000001
:0046595A 8955DC                  mov dword ptr [ebp-24], edx
:0046595D 837DDC1F                cmp dword ptr [ebp-24], 0000001F
:00465961 7771                    ja 004659D4
:00465963 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00465966 33C0                    xor eax, eax
:00465968 8A81225A4600            mov al, byte ptr [ecx+00465A22]
:0046596E FF24850A5A4600          jmp dword ptr [4*eax+00465A0A]

* Possible StringData Ref from Data Obj ->""
                                  |
:00465975 6860E84700              push 0047E860
:0046597A 8D55E0                  lea edx, dword ptr [ebp-20]
:0046597D 52                      push edx
:0046597E E85CCCFFFF              call 004625DF
:00465983 83C408                  add esp, 00000008
:00465986 EB5D                    jmp 004659E5

* Possible StringData Ref from Data Obj ->""
                                  |
:00465988 6868E84700              push 0047E868
:0046598D 8D45E0                  lea eax, dword ptr [ebp-20]
:00465990 50                      push eax
:00465991 E849CCFFFF              call 004625DF
:00465996 83C408                  add esp, 00000008
:00465999 EB4A                    jmp 004659E5

* Possible StringData Ref from Data Obj ->""
                                  |
:0046599B 6870E84700              push 0047E870
:004659A0 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004659A3 51                      push ecx
:004659A4 E836CCFFFF              call 004625DF
:004659A9 83C408                  add esp, 00000008
:004659AC EB37                    jmp 004659E5

* Possible StringData Ref from Data Obj ->"V"
                                  |
:004659AE 6878E84700              push 0047E878
:004659B3 8D55E0                  lea edx, dword ptr [ebp-20]
:004659B6 52                      push edx
:004659B7 E823CCFFFF              call 004625DF
:004659BC 83C408                  add esp, 00000008
:004659BF EB24                    jmp 004659E5

* Possible StringData Ref from Data Obj ->""
                                  |
:004659C1 6880E84700              push 0047E880
:004659C6 8D45E0                  lea eax, dword ptr [ebp-20]
:004659C9 50                      push eax
:004659CA E810CCFFFF              call 004625DF
:004659CF 83C408                  add esp, 00000008
:004659D2 EB11                    jmp 004659E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465961(C)
|

* Possible StringData Ref from Data Obj ->"L"
                                  |
:004659D4 6888E84700              push 0047E888
:004659D9 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004659DC 51                      push ecx
:004659DD E8FDCBFFFF              call 004625DF
:004659E2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465986(U), :00465999(U), :004659AC(U), :004659BF(U), :004659D2(U)
|
:004659E5 EB11                    jmp 004659F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465942(C)
|

* Possible StringData Ref from Data Obj ->"L"
                                  |
:004659E7 688CE84700              push 0047E88C
:004659EC 8D55E0                  lea edx, dword ptr [ebp-20]
:004659EF 52                      push edx
:004659F0 E8EACBFFFF              call 004625DF
:004659F5 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004659E5(U)
|
:004659F8 8D45E0                  lea eax, dword ptr [ebp-20]
:004659FB 50                      push eax
:004659FC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004659FF 51                      push ecx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465A00 FF15B0864B00            Call dword ptr [004B86B0]
:00465A06 8BE5                    mov esp, ebp
:00465A08 5D                      pop ebp
:00465A09 C3                      ret



:00465A0A 75594600                DWORD 00465975
:00465A0E 88594600                DWORD 00465988
:00465A12 9B594600                DWORD 0046599B
:00465A16 AE594600                DWORD 004659AE
:00465A1A C1594600                DWORD 004659C1
:00465A1E D4594600                DWORD 004659D4


:00465A22 0001                    add byte ptr [ecx], al
:00465A24 0502050505              add eax, 05050502
:00465A29 0505050505              add eax, 05050505
:00465A2E 0505050305              add eax, 05030505
:00465A33 0505050505              add eax, 05050505
:00465A38 0505050505              add eax, 05050505
:00465A3D 0505050504              add eax, 04050505

* Referenced by a CALL at Addresses:
|:004656FB   , :00465710   , :00465757   , :0046576C   
|
:00465A42 55                      push ebp
:00465A43 8BEC                    mov ebp, esp
:00465A45 83EC0C                  sub esp, 0000000C
:00465A48 C745FC00000000          mov [ebp-04], 00000000
:00465A4F C645F82A                mov [ebp-08], 2A
:00465A53 8A4508                  mov al, byte ptr [ebp+08]
:00465A56 8845F4                  mov byte ptr [ebp-0C], al
:00465A59 807DF400                cmp byte ptr [ebp-0C], 00
:00465A5D 740E                    je 00465A6D
:00465A5F 807DF401                cmp byte ptr [ebp-0C], 01
:00465A63 7411                    je 00465A76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465A0A(C)
|
:00465A65 807DF402                cmp byte ptr [ebp-0C], 02
:00465A69 741C                    je 00465A87
:00465A6B EB21                    jmp 00465A8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465A5D(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00465A6D C745FCFF000000          mov [ebp-04], 000000FF
:00465A74 EB18                    jmp 00465A8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465A63(C)
|
:00465A76 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465A79 81E1FF000000            and ecx, 000000FF
:00465A7F 6BC903                  imul ecx, 00000003
:00465A82 894DFC                  mov dword ptr [ebp-04], ecx
:00465A85 EB07                    jmp 00465A8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465A69(C)
|
:00465A87 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465A6B(U), :00465A74(U), :00465A85(U)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00465A8E 68FF000000              push 000000FF
:00465A93 668B55FC                mov dx, word ptr [ebp-04]
:00465A97 52                      push edx
:00465A98 668B4510                mov ax, word ptr [ebp+10]
:00465A9C 50                      push eax
:00465A9D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465AA0 51                      push ecx
:00465AA1 E865F2FFFF              call 00464D0B
:00465AA6 83C410                  add esp, 00000010
:00465AA9 8BE5                    mov esp, ebp
:00465AAB 5D                      pop ebp
:00465AAC C3                      ret



* Referenced by a CALL at Addresses:
|:004663FA   , :004668A4   
|
:00465AAD 55                      push ebp
:00465AAE 8BEC                    mov ebp, esp
:00465AB0 83EC0C                  sub esp, 0000000C
:00465AB3 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:00465AB6 6813050000              push 00000513
:00465ABB 8B4508                  mov eax, dword ptr [ebp+08]
:00465ABE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465ABF FF15AC864B00            Call dword ptr [004B86AC]
:00465AC5 85C0                    test eax, eax
:00465AC7 7505                    jne 00465ACE
:00465AC9 E9E6000000              jmp 00465BB4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465AC7(C)
|
:00465ACE 8B0DA8184B00            mov ecx, dword ptr [004B18A8]
:00465AD4 8B0C8D780E4B00          mov ecx, dword ptr [4*ecx+004B0E78]
:00465ADB 6BC970                  imul ecx, 00000070
:00465ADE 81C198224900            add ecx, 00492298
:00465AE4 E862CCF9FF              call 0040274B
:00465AE9 8945F8                  mov dword ptr [ebp-08], eax
:00465AEC 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:00465AF3 751D                    jne 00465B12

* Possible StringData Ref from Data Obj ->"L"
                                  |
:00465AF5 6890E84700              push 0047E890

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:00465AFA 6813050000              push 00000513
:00465AFF 8B5508                  mov edx, dword ptr [ebp+08]
:00465B02 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465B03 FF15AC864B00            Call dword ptr [004B86AC]
:00465B09 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465B0A FF15B0864B00            Call dword ptr [004B86B0]
:00465B10 EB23                    jmp 00465B35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465AF3(C)
|
:00465B12 8B45F8                  mov eax, dword ptr [ebp-08]
:00465B15 50                      push eax
:00465B16 E85DFDF9FF              call 00405878
:00465B1B 83C404                  add esp, 00000004
:00465B1E 50                      push eax

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:00465B1F 6813050000              push 00000513
:00465B24 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465B27 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465B28 FF15AC864B00            Call dword ptr [004B86AC]
:00465B2E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465B2F FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465B10(U)
|

* Possible StringData Ref from Data Obj ->"ҫD"
                                  |
:00465B35 6894E84700              push 0047E894

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:052E, "@Sw"
                                  |
:00465B3A 682E050000              push 0000052E
:00465B3F 8B5508                  mov edx, dword ptr [ebp+08]
:00465B42 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465B43 FF15AC864B00            Call dword ptr [004B86AC]
:00465B49 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465B4A FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00465B50 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:052F, ""
                                  |
:00465B52 682F050000              push 0000052F
:00465B57 8B4508                  mov eax, dword ptr [ebp+08]
:00465B5A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465B5B FF15AC864B00            Call dword ptr [004B86AC]
:00465B61 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00465B62 FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00465B68 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:00465B6A 6813050000              push 00000513
:00465B6F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465B72 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465B73 FF15AC864B00            Call dword ptr [004B86AC]
:00465B79 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00465B7A FF15E4864B00            Call dword ptr [004B86E4]

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:03EB, ""
                                  |
:00465B80 68EB030000              push 000003EB
:00465B85 8B5508                  mov edx, dword ptr [ebp+08]
:00465B88 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465B89 FF15AC864B00            Call dword ptr [004B86AC]
:00465B8F 8945FC                  mov dword ptr [ebp-04], eax
:00465B92 837DFC00                cmp dword ptr [ebp-04], 00000000
:00465B96 741C                    je 00465BB4
:00465B98 A1A8184B00              mov eax, dword ptr [004B18A8]
:00465B9D 8B0C85780E4B00          mov ecx, dword ptr [4*eax+004B0E78]
:00465BA4 51                      push ecx
:00465BA5 8B55FC                  mov edx, dword ptr [ebp-04]
:00465BA8 52                      push edx
:00465BA9 E80C000000              call 00465BBA
:00465BAE 83C408                  add esp, 00000008
:00465BB1 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465AC9(U), :00465B96(C)
|
:00465BB4 8BE5                    mov esp, ebp
:00465BB6 5D                      pop ebp
:00465BB7 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00465BA9   
|
:00465BBA 55                      push ebp
:00465BBB 8BEC                    mov ebp, esp
:00465BBD 83EC10                  sub esp, 00000010
:00465BC0 817D0C85020000          cmp dword ptr [ebp+0C], 00000285
:00465BC7 760A                    jbe 00465BD3
:00465BC9 B8FFFF0000              mov eax, 0000FFFF
:00465BCE E922010000              jmp 00465CF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465BC7(C)
|
:00465BD3 6A00                    push 00000000
:00465BD5 6A00                    push 00000000
:00465BD7 6884010000              push 00000184
:00465BDC 8B4508                  mov eax, dword ptr [ebp+08]
:00465BDF 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465BE0 FF15D8864B00            Call dword ptr [004B86D8]
:00465BE6 C745F4FFFF0000          mov [ebp-0C], 0000FFFF
:00465BED C745F800000000          mov [ebp-08], 00000000
:00465BF4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465BF7 894DF0                  mov dword ptr [ebp-10], ecx
:00465BFA EB09                    jmp 00465C05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465C7E(U)
|
:00465BFC 8B55F0                  mov edx, dword ptr [ebp-10]
:00465BFF 83C201                  add edx, 00000001
:00465C02 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465BFA(U)
|
:00465C05 837DF008                cmp dword ptr [ebp-10], 00000008
:00465C09 7378                    jnb 00465C83
:00465C0B 8A45F0                  mov al, byte ptr [ebp-10]
:00465C0E 50                      push eax
:00465C0F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465C12 6BC970                  imul ecx, 00000070
:00465C15 81C198224900            add ecx, 00492298
:00465C1B E8F0EBF9FF              call 00404810
:00465C20 25FF000000              and eax, 000000FF
:00465C25 8945FC                  mov dword ptr [ebp-04], eax
:00465C28 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00465C2F 744D                    je 00465C7E
:00465C31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465C34 51                      push ecx
:00465C35 E83EFCF9FF              call 00405878
:00465C3A 83C404                  add esp, 00000004
:00465C3D 50                      push eax
:00465C3E 6A00                    push 00000000
:00465C40 6880010000              push 00000180
:00465C45 8B5508                  mov edx, dword ptr [ebp+08]
:00465C48 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465C49 FF15D8864B00            Call dword ptr [004B86D8]
:00465C4F 8B45FC                  mov eax, dword ptr [ebp-04]
:00465C52 50                      push eax
:00465C53 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465C56 51                      push ecx
:00465C57 689A010000              push 0000019A
:00465C5C 8B5508                  mov edx, dword ptr [ebp+08]
:00465C5F 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465C60 FF15D8864B00            Call dword ptr [004B86D8]
:00465C66 8B45F8                  mov eax, dword ptr [ebp-08]
:00465C69 83C001                  add eax, 00000001
:00465C6C 8945F8                  mov dword ptr [ebp-08], eax
:00465C6F 817DF4FFFF0000          cmp dword ptr [ebp-0C], 0000FFFF
:00465C76 7506                    jne 00465C7E
:00465C78 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465C7B 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465C2F(C), :00465C76(C)
|
:00465C7E E979FFFFFF              jmp 00465BFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465C09(C)
|
:00465C83 817DF4FFFF0000          cmp dword ptr [ebp-0C], 0000FFFF
:00465C8A 741E                    je 00465CAA
:00465C8C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00465C8F 52                      push edx
:00465C90 E8E3FBF9FF              call 00405878
:00465C95 83C404                  add esp, 00000004
:00465C98 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00465C99 6AFF                    push FFFFFFFF
:00465C9B 688C010000              push 0000018C
:00465CA0 8B4508                  mov eax, dword ptr [ebp+08]
:00465CA3 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465CA4 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465C8A(C)
|
:00465CAA 837DF800                cmp dword ptr [ebp-08], 00000000
:00465CAE 7542                    jne 00465CF2

* Possible StringData Ref from Data Obj ->"L"
                                  |
:00465CB0 68A0E84700              push 0047E8A0
:00465CB5 6A00                    push 00000000
:00465CB7 6880010000              push 00000180
:00465CBC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465CBF 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465CC0 FF15D8864B00            Call dword ptr [004B86D8]
:00465CC6 68FFFF0000              push 0000FFFF
:00465CCB 6A00                    push 00000000
:00465CCD 689A010000              push 0000019A
:00465CD2 8B5508                  mov edx, dword ptr [ebp+08]
:00465CD5 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465CD6 FF15D8864B00            Call dword ptr [004B86D8]

* Possible StringData Ref from Data Obj ->"L"
                                  |
:00465CDC 68A4E84700              push 0047E8A4

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00465CE1 6AFF                    push FFFFFFFF
:00465CE3 688C010000              push 0000018C
:00465CE8 8B4508                  mov eax, dword ptr [ebp+08]
:00465CEB 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465CEC FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465CAE(C)
|
:00465CF2 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465BCE(U)
|
:00465CF5 8BE5                    mov esp, ebp
:00465CF7 5D                      pop ebp
:00465CF8 C3                      ret



* Referenced by a CALL at Addresses:
|:0046654D   , :00466B2C   , :00466B97   , :00466CB3   
|
:00465CF9 55                      push ebp
:00465CFA 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00465CFC 6AFF                    push FFFFFFFF
:00465CFE 686C3C4700              push 00473C6C
:00465D03 64A100000000            mov eax, dword ptr fs:[00000000]
:00465D09 50                      push eax
:00465D0A 64892500000000          mov dword ptr fs:[00000000], esp
:00465D11 81ECE0010000            sub esp, 000001E0
:00465D17 898D14FEFFFF            mov dword ptr [ebp+FFFFFE14], ecx
:00465D1D 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465D23 E87ADEF9FF              call 00403BA2
:00465D28 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00465D29 68EA030000              push 000003EA
:00465D2E 8B4508                  mov eax, dword ptr [ebp+08]
:00465D31 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465D32 FF15AC864B00            Call dword ptr [004B86AC]
:00465D38 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465D39 FF15B0864B00            Call dword ptr [004B86B0]
:00465D3F 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465D45 83C119                  add ecx, 00000019
:00465D48 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FB, "rubi"
                                  |
:00465D49 68FB030000              push 000003FB
:00465D4E 8B5508                  mov edx, dword ptr [ebp+08]
:00465D51 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465D52 FF15AC864B00            Call dword ptr [004B86AC]
:00465D58 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465D59 FF15B0864B00            Call dword ptr [004B86B0]
:00465D5F 8B8514FEFFFF            mov eax, dword ptr [ebp+FFFFFE14]
:00465D65 33C9                    xor ecx, ecx
:00465D67 8A4832                  mov cl, byte ptr [eax+32]
:00465D6A 51                      push ecx
:00465D6B E8230FFAFF              call 00406C93
:00465D70 83C404                  add esp, 00000004
:00465D73 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:00465D74 68F8030000              push 000003F8
:00465D79 8B5508                  mov edx, dword ptr [ebp+08]
:00465D7C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465D7D FF15AC864B00            Call dword ptr [004B86AC]
:00465D83 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465D84 FF15B0864B00            Call dword ptr [004B86B0]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00465D8A 6A0A                    push 0000000A
:00465D8C 8D8588FEFFFF            lea eax, dword ptr [ebp+FFFFFE88]
:00465D92 50                      push eax
:00465D93 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465D99 33D2                    xor edx, edx
:00465D9B 8A5133                  mov dl, byte ptr [ecx+33]
:00465D9E 52                      push edx
:00465D9F E8CCE6FFFF              call 00464470
:00465DA4 83C40C                  add esp, 0000000C
:00465DA7 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00465DA8 68F9030000              push 000003F9
:00465DAD 8B4508                  mov eax, dword ptr [ebp+08]
:00465DB0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465DB1 FF15AC864B00            Call dword ptr [004B86AC]
:00465DB7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465DB8 FF15B0864B00            Call dword ptr [004B86B0]
:00465DBE 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465DC4 33D2                    xor edx, edx
:00465DC6 8A5131                  mov dl, byte ptr [ecx+31]
:00465DC9 85D2                    test edx, edx
:00465DCB 752E                    jne 00465DFB
:00465DCD 8B8514FEFFFF            mov eax, dword ptr [ebp+FFFFFE14]
:00465DD3 33C9                    xor ecx, ecx
:00465DD5 8A4831                  mov cl, byte ptr [eax+31]
:00465DD8 8B148D987B4700          mov edx, dword ptr [4*ecx+00477B98]
:00465DDF 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00465DE0 68F7030000              push 000003F7
:00465DE5 8B4508                  mov eax, dword ptr [ebp+08]
:00465DE8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465DE9 FF15AC864B00            Call dword ptr [004B86AC]
:00465DEF 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465DF0 FF15B0864B00            Call dword ptr [004B86B0]
:00465DF6 E9A1000000              jmp 00465E9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465DCB(C)
|
:00465DFB 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465E01 E844F4FFFF              call 0046524A
:00465E06 88851CFEFFFF            mov byte ptr [ebp+FFFFFE1C], al
:00465E0C 8B8D1CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE1C]
:00465E12 81E1FF000000            and ecx, 000000FF
:00465E18 81F9FF000000            cmp ecx, 000000FF
:00465E1E 7461                    je 00465E81
:00465E20 E8ED0AFBFF              call 00416912
:00465E25 85C0                    test eax, eax
:00465E27 7458                    je 00465E81
:00465E29 8B8D1CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE1C]
:00465E2F 81E1FF000000            and ecx, 000000FF
:00465E35 6BC924                  imul ecx, 00000024
:00465E38 81C108F54A00            add ecx, 004AF508
:00465E3E E88D94FAFF              call 0040F2D0
:00465E43 85C0                    test eax, eax
:00465E45 741D                    je 00465E64

* Possible StringData Ref from Data Obj ->"ڤ"
                                  |
:00465E47 68A8E84700              push 0047E8A8

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00465E4C 68F7030000              push 000003F7
:00465E51 8B5508                  mov edx, dword ptr [ebp+08]
:00465E54 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465E55 FF15AC864B00            Call dword ptr [004B86AC]
:00465E5B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465E5C FF15B0864B00            Call dword ptr [004B86B0]
:00465E62 EB1B                    jmp 00465E7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465E45(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:00465E64 68B0E84700              push 0047E8B0

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00465E69 68F7030000              push 000003F7
:00465E6E 8B4508                  mov eax, dword ptr [ebp+08]
:00465E71 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465E72 FF15AC864B00            Call dword ptr [004B86AC]
:00465E78 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465E79 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465E62(U)
|
:00465E7F EB1B                    jmp 00465E9C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465E1E(C), :00465E27(C)
|
:00465E81 68C4184B00              push 004B18C4

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@l"
                                  |
:00465E86 68F7030000              push 000003F7
:00465E8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465E8E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465E8F FF15AC864B00            Call dword ptr [004B86AC]
:00465E95 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465E96 FF15B0864B00            Call dword ptr [004B86B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465DF6(U), :00465E7F(U)
|
:00465E9C 833DA8184B0000          cmp dword ptr [004B18A8], 00000000
:00465EA3 751A                    jne 00465EBF
:00465EA5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:00465EA7 6803040000              push 00000403
:00465EAC 8B5508                  mov edx, dword ptr [ebp+08]
:00465EAF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465EB0 FF15AC864B00            Call dword ptr [004B86AC]
:00465EB6 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00465EB7 FF1514874B00            Call dword ptr [004B8714]
:00465EBD EB18                    jmp 00465ED7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465EA3(C)
|
:00465EBF 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:00465EC1 6803040000              push 00000403
:00465EC6 8B4508                  mov eax, dword ptr [ebp+08]
:00465EC9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465ECA FF15AC864B00            Call dword ptr [004B86AC]
:00465ED0 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00465ED1 FF1514874B00            Call dword ptr [004B8714]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465EBD(U)
|
:00465ED7 6885020000              push 00000285
:00465EDC 6A01                    push 00000001
:00465EDE 8B0DA8184B00            mov ecx, dword ptr [004B18A8]
:00465EE4 51                      push ecx
:00465EE5 E8A8C0FFFF              call 00461F92
:00465EEA 83C40C                  add esp, 0000000C
:00465EED 813C85780E4B0085020000  cmp dword ptr [4*eax+004B0E78], 00000285
:00465EF8 761A                    jbe 00465F14
:00465EFA 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:00465EFC 6804040000              push 00000404
:00465F01 8B5508                  mov edx, dword ptr [ebp+08]
:00465F04 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465F05 FF15AC864B00            Call dword ptr [004B86AC]
:00465F0B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00465F0C FF1514874B00            Call dword ptr [004B8714]
:00465F12 EB18                    jmp 00465F2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465EF8(C)
|
:00465F14 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:00465F16 6804040000              push 00000404
:00465F1B 8B4508                  mov eax, dword ptr [ebp+08]
:00465F1E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465F1F FF15AC864B00            Call dword ptr [004B86AC]
:00465F25 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00465F26 FF1514874B00            Call dword ptr [004B8714]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465F12(U)
|
:00465F2C 6A00                    push 00000000
:00465F2E B998EF4800              mov ecx, 0048EF98
:00465F33 E866D6FAFF              call 0041359E
:00465F38 50                      push eax
:00465F39 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465F3F 8B5104                  mov edx, dword ptr [ecx+04]
:00465F42 52                      push edx
:00465F43 E8F1CFFAFF              call 00412F39
:00465F48 83C408                  add esp, 00000008
:00465F4B 6A01                    push 00000001
:00465F4D E8D5470000              call 0046A727
:00465F52 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00465F55 6A07                    push 00000007
:00465F57 E88D4E0000              call 0046ADE9
:00465F5C 83C404                  add esp, 00000004
:00465F5F 6A00                    push 00000000
:00465F61 B998EF4800              mov ecx, 0048EF98
:00465F66 E833D6FAFF              call 0041359E
:00465F6B 50                      push eax
:00465F6C A16C4C4700              mov eax, dword ptr [00474C6C]
:00465F71 50                      push eax
:00465F72 8B0D684C4700            mov ecx, dword ptr [00474C68]
:00465F78 51                      push ecx
:00465F79 6A00                    push 00000000
:00465F7B 6A00                    push 00000000
:00465F7D E8655C0000              call 0046BBE7
:00465F82 83C414                  add esp, 00000014
:00465F85 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465F8B E880E7F9FF              call 00404710
:00465F90 898520FEFFFF            mov dword ptr [ebp+FFFFFE20], eax
:00465F96 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465F9C E825B4F9FF              call 004013C6
:00465FA1 25FF000000              and eax, 000000FF
:00465FA6 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:00465FAC 83BDECFEFFFF57          cmp dword ptr [ebp+FFFFFEEC], 00000057
:00465FB3 0F8382000000            jnb 0046603B
:00465FB9 E85409FBFF              call 00416912
:00465FBE 85C0                    test eax, eax
:00465FC0 7457                    je 00466019
:00465FC2 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00465FC8 E87DF2FFFF              call 0046524A
:00465FCD 888518FEFFFF            mov byte ptr [ebp+FFFFFE18], al
:00465FD3 8B9518FEFFFF            mov edx, dword ptr [ebp+FFFFFE18]
:00465FD9 81E2FF000000            and edx, 000000FF
:00465FDF 81FAFF000000            cmp edx, 000000FF
:00465FE5 7430                    je 00466017
:00465FE7 8B8D18FEFFFF            mov ecx, dword ptr [ebp+FFFFFE18]
:00465FED 81E1FF000000            and ecx, 000000FF
:00465FF3 6BC924                  imul ecx, 00000024
:00465FF6 81C108F54A00            add ecx, 004AF508
:00465FFC E8C038FCFF              call 004298C1
:00466001 25FF000000              and eax, 000000FF
:00466006 6BC01C                  imul eax, 0000001C
:00466009 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0046600F 03C8                    add ecx, eax
:00466011 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465FE5(C)
|
:00466017 EB22                    jmp 0046603B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465FC0(C)
|
:00466019 8B9520FEFFFF            mov edx, dword ptr [ebp+FFFFFE20]
:0046601F 52                      push edx
:00466020 E8FBA8FAFF              call 00410920
:00466025 83C404                  add esp, 00000004
:00466028 85C0                    test eax, eax
:0046602A 750F                    jne 0046603B
:0046602C 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:00466032 83C038                  add eax, 00000038
:00466035 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465FB3(C), :00466017(U), :0046602A(C)
|
:0046603B 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00466041 E8BA16FAFF              call 00407700
:00466046 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_BS.E4"
                                  |
:0046604D 68607B4700              push 00477B60
:00466052 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00466058 E8D8E2FAFF              call 00414335
:0046605D 6800E70100              push 0001E700
:00466062 B930DA4A00              mov ecx, 004ADA30
:00466067 E832D5FAFF              call 0041359E
:0046606C 50                      push eax
:0046606D 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00466073 51                      push ecx
:00466074 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0046607A E80AE4FAFF              call 00414489
:0046607F 6800090000              push 00000900
:00466084 68488C4A00              push 004A8C48
:00466089 68001D0200              push 00021D00
:0046608E B930DA4A00              mov ecx, 004ADA30
:00466093 E806D5FAFF              call 0041359E
:00466098 50                      push eax
:00466099 E891C7FFFF              call 0046282F
:0046609E 83C40C                  add esp, 0000000C
:004660A1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004660A7 E860A5FAFF              call 0041060C

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004660AC 6A02                    push 00000002
:004660AE E874460000              call 0046A727
:004660B3 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004660B6 6A07                    push 00000007
:004660B8 E82C4D0000              call 0046ADE9
:004660BD 83C404                  add esp, 00000004
:004660C0 68C0090000              push 000009C0
:004660C5 B940DF4A00              mov ecx, 004ADF40
:004660CA E8CFD4FAFF              call 0041359E
:004660CF 50                      push eax

* Possible Reference to String Resource ID=00008: ""
                                  |
:004660D0 6A08                    push 00000008

* Possible Reference to String Resource ID=00008: ""
                                  |
:004660D2 6A08                    push 00000008
:004660D4 E8D34E0000              call 0046AFAC
:004660D9 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00013: ""
                                  |
:004660DC 6A0D                    push 0000000D

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004660DE 6A02                    push 00000002
:004660E0 8B157C4C4700            mov edx, dword ptr [00474C7C]
:004660E6 52                      push edx
:004660E7 A1784C4700              mov eax, dword ptr [00474C78]
:004660EC 50                      push eax
:004660ED 6A00                    push 00000000
:004660EF 6A00                    push 00000000
:004660F1 E804CEFAFF              call 00412EFA
:004660F6 83C418                  add esp, 00000018
:004660F9 6A00                    push 00000000
:004660FB 6A4F                    push 0000004F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004660FD 6A04                    push 00000004
:004660FF E80C4D0000              call 0046AE10
:00466104 83C40C                  add esp, 0000000C
:00466107 68488C4A00              push 004A8C48
:0046610C 8B0D7C4C4700            mov ecx, dword ptr [00474C7C]
:00466112 51                      push ecx
:00466113 8B15784C4700            mov edx, dword ptr [00474C78]
:00466119 52                      push edx
:0046611A 6A00                    push 00000000
:0046611C 6A00                    push 00000000
:0046611E E8C45A0000              call 0046BBE7
:00466123 83C414                  add esp, 00000014
:00466126 6A00                    push 00000000
:00466128 E8FA450000              call 0046A727
:0046612D 83C404                  add esp, 00000004
:00466130 E84D9BFFFF              call 0045FC82

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FC, "
"
                                  |
:00466135 C78564FEFFFFFC030000    mov dword ptr [ebp+FFFFFE64], 000003FC

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FD, "'2
"
                                  |
:0046613F C78568FEFFFFFD030000    mov dword ptr [ebp+FFFFFE68], 000003FD

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FE, ""
                                  |
:00466149 C7856CFEFFFFFE030000    mov dword ptr [ebp+FFFFFE6C], 000003FE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FF, ""
                                  |
:00466153 C78570FEFFFFFF030000    mov dword ptr [ebp+FFFFFE70], 000003FF
:0046615D C78540FEFFFF42010000    mov dword ptr [ebp+FFFFFE40], 00000142
:00466167 C78544FEFFFF45010000    mov dword ptr [ebp+FFFFFE44], 00000145
:00466171 C78548FEFFFF3F010000    mov dword ptr [ebp+FFFFFE48], 0000013F
:0046617B C7854CFEFFFF43010000    mov dword ptr [ebp+FFFFFE4C], 00000143
:00466185 C78550FEFFFF41010000    mov dword ptr [ebp+FFFFFE50], 00000141
:0046618F C78554FEFFFF47010000    mov dword ptr [ebp+FFFFFE54], 00000147
:00466199 C78558FEFFFF40010000    mov dword ptr [ebp+FFFFFE58], 00000140

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05BE, ""
                                  |
:004661A3 C78574FEFFFFBE050000    mov dword ptr [ebp+FFFFFE74], 000005BE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05BF, ""
                                  |
:004661AD C78578FEFFFFBF050000    mov dword ptr [ebp+FFFFFE78], 000005BF

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05C0, ""
                                  |
:004661B7 C7857CFEFFFFC0050000    mov dword ptr [ebp+FFFFFE7C], 000005C0

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:05C1, ""
                                  |
:004661C1 C78580FEFFFFC1050000    mov dword ptr [ebp+FFFFFE80], 000005C1

* Possible StringData Ref from Data Obj ->"M"
                                  |
:004661CB C78524FEFFFFB4E84700    mov dword ptr [ebp+FFFFFE24], 0047E8B4

* Possible StringData Ref from Data Obj ->"j"
                                  |
:004661D5 C78528FEFFFFB8E84700    mov dword ptr [ebp+FFFFFE28], 0047E8B8

* Possible StringData Ref from Data Obj ->"}"
                                  |
:004661DF C7852CFEFFFFBCE84700    mov dword ptr [ebp+FFFFFE2C], 0047E8BC

* Possible StringData Ref from Data Obj ->"vj"
                                  |
:004661E9 C78530FEFFFFC0E84700    mov dword ptr [ebp+FFFFFE30], 0047E8C0

* Possible StringData Ref from Data Obj ->"j"
                                  |
:004661F3 C78534FEFFFFC8E84700    mov dword ptr [ebp+FFFFFE34], 0047E8C8

* Possible StringData Ref from Data Obj ->"Ԩ"
                                  |
:004661FD C78538FEFFFFD0E84700    mov dword ptr [ebp+FFFFFE38], 0047E8D0

* Possible StringData Ref from Data Obj ->"x"
                                  |
:00466207 C7853CFEFFFFD8E84700    mov dword ptr [ebp+FFFFFE3C], 0047E8D8
:00466211 C78584FEFFFF00000000    mov dword ptr [ebp+FFFFFE84], 00000000
:0046621B C7855CFEFFFF00000000    mov dword ptr [ebp+FFFFFE5C], 00000000
:00466225 EB0F                    jmp 00466236

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466321(U)
|
:00466227 8B855CFEFFFF            mov eax, dword ptr [ebp+FFFFFE5C]
:0046622D 83C001                  add eax, 00000001
:00466230 89855CFEFFFF            mov dword ptr [ebp+FFFFFE5C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466225(U)
|
:00466236 83BD5CFEFFFF07          cmp dword ptr [ebp+FFFFFE5C], 00000007
:0046623D 0F8DE3000000            jnl 00466326
:00466243 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00466249 038D5CFEFFFF            add ecx, dword ptr [ebp+FFFFFE5C]
:0046624F 33D2                    xor edx, edx
:00466251 8A515E                  mov dl, byte ptr [ecx+5E]
:00466254 85D2                    test edx, edx
:00466256 0F84BA000000            je 00466316
:0046625C 8A855CFEFFFF            mov al, byte ptr [ebp+FFFFFE5C]
:00466262 50                      push eax
:00466263 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00466269 E8ADD9F9FF              call 00403C1B
:0046626E 85C0                    test eax, eax
:00466270 0F84A0000000            je 00466316
:00466276 6A00                    push 00000000
:00466278 8B8D5CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE5C]
:0046627E 33D2                    xor edx, edx
:00466280 668B948D40FEFFFF        mov dx, word ptr [ebp+4*ecx-000001C0]
:00466288 52                      push edx
:00466289 A1300E4B00              mov eax, dword ptr [004B0E30]
:0046628E 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0046628F FF15E8864B00            Call dword ptr [004B86E8]
:00466295 50                      push eax
:00466296 6870010000              push 00000170
:0046629B 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:004662A1 8B948D74FEFFFF          mov edx, dword ptr [ebp+4*ecx-0000018C]
:004662A8 52                      push edx
:004662A9 8B4508                  mov eax, dword ptr [ebp+08]
:004662AC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004662AD FF15AC864B00            Call dword ptr [004B86AC]
:004662B3 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004662B4 FF15D8864B00            Call dword ptr [004B86D8]
:004662BA 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:004662C0 038D5CFEFFFF            add ecx, dword ptr [ebp+FFFFFE5C]
:004662C6 33D2                    xor edx, edx
:004662C8 8A515E                  mov dl, byte ptr [ecx+5E]
:004662CB 52                      push edx
:004662CC 8B855CFEFFFF            mov eax, dword ptr [ebp+FFFFFE5C]
:004662D2 8B8C8524FEFFFF          mov ecx, dword ptr [ebp+4*eax-000001DC]
:004662D9 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s
%u"
                                  |
:004662DA 68E0E84700              push 0047E8E0
:004662DF E8E315FBFF              call 004178C7
:004662E4 83C40C                  add esp, 0000000C
:004662E7 50                      push eax
:004662E8 8B9584FEFFFF            mov edx, dword ptr [ebp+FFFFFE84]
:004662EE 8B849564FEFFFF          mov eax, dword ptr [ebp+4*edx-0000019C]
:004662F5 50                      push eax
:004662F6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004662F9 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004662FA FF15AC864B00            Call dword ptr [004B86AC]
:00466300 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00466301 FF15B0864B00            Call dword ptr [004B86B0]
:00466307 8B9584FEFFFF            mov edx, dword ptr [ebp+FFFFFE84]
:0046630D 83C201                  add edx, 00000001
:00466310 899584FEFFFF            mov dword ptr [ebp+FFFFFE84], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466256(C), :00466270(C)
|
:00466316 83BD84FEFFFF04          cmp dword ptr [ebp+FFFFFE84], 00000004
:0046631D 7C02                    jl 00466321
:0046631F EB05                    jmp 00466326

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046631D(C)
|
:00466321 E901FFFFFF              jmp 00466227

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046623D(C), :0046631F(U), :0046638A(U)
|
:00466326 83BD84FEFFFF04          cmp dword ptr [ebp+FFFFFE84], 00000004
:0046632D 7F5D                    jg 0046638C
:0046632F 6A00                    push 00000000
:00466331 6A00                    push 00000000
:00466333 6870010000              push 00000170
:00466338 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:0046633E 8B8C8574FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000018C]
:00466345 51                      push ecx
:00466346 8B5508                  mov edx, dword ptr [ebp+08]
:00466349 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046634A FF15AC864B00            Call dword ptr [004B86AC]
:00466350 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466351 FF15D8864B00            Call dword ptr [004B86D8]
:00466357 68C8184B00              push 004B18C8
:0046635C 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:00466362 8B8C8564FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000019C]
:00466369 51                      push ecx
:0046636A 8B5508                  mov edx, dword ptr [ebp+08]
:0046636D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046636E FF15AC864B00            Call dword ptr [004B86AC]
:00466374 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00466375 FF15B0864B00            Call dword ptr [004B86B0]
:0046637B 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:00466381 83C001                  add eax, 00000001
:00466384 898584FEFFFF            mov dword ptr [ebp+FFFFFE84], eax
:0046638A EB9A                    jmp 00466326

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046632D(C)
|
:0046638C C78560FEFFFF00000000    mov dword ptr [ebp+FFFFFE60], 00000000
:00466396 EB0F                    jmp 004663A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046644A(U)
|
:00466398 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:0046639E 83C101                  add ecx, 00000001
:004663A1 898D60FEFFFF            mov dword ptr [ebp+FFFFFE60], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466396(U)
|
:004663A7 83BD60FEFFFF06          cmp dword ptr [ebp+FFFFFE60], 00000006
:004663AE 0F8D9B000000            jnl 0046644F
:004663B4 8B9560FEFFFF            mov edx, dword ptr [ebp+FFFFFE60]
:004663BA 8B0495580E4B00          mov eax, dword ptr [4*edx+004B0E58]
:004663C1 50                      push eax
:004663C2 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:004663C8 E895E9FFFF              call 00464D62
:004663CD 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:004663D3 8B148D580E4B00          mov edx, dword ptr [4*ecx+004B0E58]
:004663DA 52                      push edx
:004663DB 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:004663E1 E8F4EBFFFF              call 00464FDA
:004663E6 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:004663EC 8B0C85580E4B00          mov ecx, dword ptr [4*eax+004B0E58]
:004663F3 51                      push ecx
:004663F4 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:004663FA E8AEF6FFFF              call 00465AAD
:004663FF 8B9560FEFFFF            mov edx, dword ptr [ebp+FFFFFE60]
:00466405 8B0495580E4B00          mov eax, dword ptr [4*edx+004B0E58]
:0046640C 50                      push eax
:0046640D 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00466413 E859F2FFFF              call 00465671
:00466418 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:0046641E 8B148D580E4B00          mov edx, dword ptr [4*ecx+004B0E58]
:00466425 52                      push edx
:00466426 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:0046642C E89FEEFFFF              call 004652D0
:00466431 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:00466437 8B0C85580E4B00          mov ecx, dword ptr [4*eax+004B0E58]
:0046643E 51                      push ecx
:0046643F 8B8D14FEFFFF            mov ecx, dword ptr [ebp+FFFFFE14]
:00466445 E8E8EFFFFF              call 00465432
:0046644A E949FFFFFF              jmp 00466398

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004663AE(C)
|
:0046644F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00466456 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0046645C E8BF12FAFF              call 00407720
:00466461 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00466464 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046646B 8BE5                    mov esp, ebp
:0046646D 5D                      pop ebp
:0046646E C20400                  ret 0004



* Referenced by a CALL at Address:
|:004669F7   
|
:00466471 55                      push ebp
:00466472 8BEC                    mov ebp, esp
:00466474 83EC28                  sub esp, 00000028
:00466477 894DD8                  mov dword ptr [ebp-28], ecx
:0046647A 6AFA                    push FFFFFFFA
:0046647C 8B4508                  mov eax, dword ptr [ebp+08]
:0046647F 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00466480 FF158C874B00            Call dword ptr [004B878C]
:00466486 8945FC                  mov dword ptr [ebp-04], eax
:00466489 C745E001000000          mov [ebp-20], 00000001
:00466490 C745DC00000000          mov [ebp-24], 00000000
:00466497 EB09                    jmp 004664A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466516(U)
|
:00466499 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046649C 83C101                  add ecx, 00000001
:0046649F 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466497(U)
|
:004664A2 837DDC06                cmp dword ptr [ebp-24], 00000006
:004664A6 7D70                    jge 00466518
:004664A8 8B55DC                  mov edx, dword ptr [ebp-24]
:004664AB 6BD20C                  imul edx, 0000000C
:004664AE 8B82ECE84700            mov eax, dword ptr [edx+0047E8EC]
:004664B4 8945EC                  mov dword ptr [ebp-14], eax
:004664B7 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004664BA 51                      push ecx
:004664BB 8B55DC                  mov edx, dword ptr [ebp-24]
:004664BE 52                      push edx
:004664BF 6807130000              push 00001307
:004664C4 6805040000              push 00000405
:004664C9 8B4508                  mov eax, dword ptr [ebp+08]
:004664CC 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004664CD FF15B4864B00            Call dword ptr [004B86B4]
:004664D3 6A00                    push 00000000
:004664D5 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004664D8 6BC90C                  imul ecx, 0000000C
:004664DB 8B91F0E84700            mov edx, dword ptr [ecx+0047E8F0]
:004664E1 52                      push edx
:004664E2 6805040000              push 00000405
:004664E7 8B4508                  mov eax, dword ptr [ebp+08]
:004664EA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004664EB FF15AC864B00            Call dword ptr [004B86AC]
:004664F1 50                      push eax
:004664F2 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004664F5 6BC90C                  imul ecx, 0000000C
:004664F8 33D2                    xor edx, edx
:004664FA 668B91E8E84700          mov dx, word ptr [ecx+0047E8E8]
:00466501 52                      push edx
:00466502 8B45FC                  mov eax, dword ptr [ebp-04]
:00466505 50                      push eax

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00466506 FF15A0864B00            Call dword ptr [004B86A0]
:0046650C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046650F 89048D580E4B00          mov dword ptr [4*ecx+004B0E58], eax
:00466516 EB81                    jmp 00466499

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004664A6(C)
|
:00466518 8B1520E64700            mov edx, dword ptr [0047E620]
:0046651E 52                      push edx
:0046651F E834000000              call 00466558
:00466524 83C404                  add esp, 00000004
:00466527 6A00                    push 00000000
:00466529 A120E64700              mov eax, dword ptr [0047E620]
:0046652E 50                      push eax
:0046652F 680C130000              push 0000130C
:00466534 6805040000              push 00000405
:00466539 8B0D4C0E4B00            mov ecx, dword ptr [004B0E4C]
:0046653F 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00466540 FF15B4864B00            Call dword ptr [004B86B4]
:00466546 8B5508                  mov edx, dword ptr [ebp+08]
:00466549 52                      push edx
:0046654A 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0046654D E8A7F7FFFF              call 00465CF9
:00466552 8BE5                    mov esp, ebp
:00466554 5D                      pop ebp
:00466555 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046651F   , :00466BEF   
|
:00466558 55                      push ebp
:00466559 8BEC                    mov ebp, esp
:0046655B 833D20E64700FF          cmp dword ptr [0047E620], FFFFFFFF
:00466562 7415                    je 00466579
:00466564 6A00                    push 00000000
:00466566 A120E64700              mov eax, dword ptr [0047E620]
:0046656B 8B0C85580E4B00          mov ecx, dword ptr [4*eax+004B0E58]
:00466572 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00466573 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466562(C)
|
:00466579 837D08FF                cmp dword ptr [ebp+08], FFFFFFFF
:0046657D 7507                    jne 00466586
:0046657F C7450800000000          mov [ebp+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046657D(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00466586 6A05                    push 00000005
:00466588 8B5508                  mov edx, dword ptr [ebp+08]
:0046658B 8B0495580E4B00          mov eax, dword ptr [4*edx+004B0E58]
:00466592 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00466593 FF15E4864B00            Call dword ptr [004B86E4]
:00466599 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046659C 890D20E64700            mov dword ptr [0047E620], ecx
:004665A2 5D                      pop ebp
:004665A3 C3                      ret


:004665A4 55                      push ebp
:004665A5 8BEC                    mov ebp, esp
:004665A7 51                      push ecx
:004665A8 8B450C                  mov eax, dword ptr [ebp+0C]
:004665AB 8945FC                  mov dword ptr [ebp-04], eax
:004665AE 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:004665B5 7402                    je 004665B9
:004665B7 EB21                    jmp 004665DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004665B5(C)
|
:004665B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004665BC 51                      push ecx
:004665BD 8B15A8184B00            mov edx, dword ptr [004B18A8]
:004665C3 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:004665CA 6BC970                  imul ecx, 00000070
:004665CD 81C198224900            add ecx, 00492298
:004665D3 E88AE7FFFF              call 00464D62
:004665D8 EB04                    jmp 004665DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004665B7(U)
|
:004665DA 33C0                    xor eax, eax
:004665DC EB02                    jmp 004665E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004665D8(U)
|
:004665DE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004665DC(U)
|
:004665E0 8BE5                    mov esp, ebp
:004665E2 5D                      pop ebp
:004665E3 C21000                  ret 0010


:004665E6 55                      push ebp
:004665E7 8BEC                    mov ebp, esp
:004665E9 51                      push ecx
:004665EA 8B450C                  mov eax, dword ptr [ebp+0C]
:004665ED 8945FC                  mov dword ptr [ebp-04], eax
:004665F0 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:004665F7 740B                    je 00466604
:004665F9 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00466600 7423                    je 00466625
:00466602 EB4A                    jmp 0046664E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004665F7(C)
|
:00466604 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466607 51                      push ecx
:00466608 8B15A8184B00            mov edx, dword ptr [004B18A8]
:0046660E 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:00466615 6BC970                  imul ecx, 00000070
:00466618 81C198224900            add ecx, 00492298
:0046661E E8B7E9FFFF              call 00464FDA
:00466623 EB2D                    jmp 00466652

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466600(C)
|
:00466625 8B4510                  mov eax, dword ptr [ebp+10]
:00466628 25FFFF0000              and eax, 0000FFFF
:0046662D 83F801                  cmp eax, 00000001
:00466630 740E                    je 00466640
:00466632 8B4D10                  mov ecx, dword ptr [ebp+10]
:00466635 81E1FFFF0000            and ecx, 0000FFFF
:0046663B 83F902                  cmp ecx, 00000002
:0046663E 750C                    jne 0046664C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466630(C)
|
:00466640 6A01                    push 00000001
:00466642 8B5508                  mov edx, dword ptr [ebp+08]
:00466645 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00466646 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046663E(C)
|
:0046664C EB04                    jmp 00466652

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466602(U)
|
:0046664E 33C0                    xor eax, eax
:00466650 EB02                    jmp 00466654

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466623(U), :0046664C(U)
|
:00466652 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466650(U)
|
:00466654 8BE5                    mov esp, ebp
:00466656 5D                      pop ebp
:00466657 C21000                  ret 0010


:0046665A 55                      push ebp
:0046665B 8BEC                    mov ebp, esp
:0046665D 83EC18                  sub esp, 00000018
:00466660 8B450C                  mov eax, dword ptr [ebp+0C]
:00466663 8945F0                  mov dword ptr [ebp-10], eax
:00466666 817DF010010000          cmp dword ptr [ebp-10], 00000110
:0046666D 740E                    je 0046667D
:0046666F 817DF011010000          cmp dword ptr [ebp-10], 00000111
:00466676 7429                    je 004666A1
:00466678 E9ED000000              jmp 0046676A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046666D(C)
|
:0046667D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466680 51                      push ecx
:00466681 8B15A8184B00            mov edx, dword ptr [004B18A8]
:00466687 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:0046668E 6BC970                  imul ecx, 00000070
:00466691 81C198224900            add ecx, 00492298
:00466697 E834ECFFFF              call 004652D0
:0046669C E9CD000000              jmp 0046676E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466676(C)
|
:004666A1 8B4510                  mov eax, dword ptr [ebp+10]
:004666A4 25FFFF0000              and eax, 0000FFFF
:004666A9 83F801                  cmp eax, 00000001
:004666AC 740E                    je 004666BC
:004666AE 8B4D10                  mov ecx, dword ptr [ebp+10]
:004666B1 81E1FFFF0000            and ecx, 0000FFFF
:004666B7 83F902                  cmp ecx, 00000002
:004666BA 750C                    jne 004666C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666AC(C)
|
:004666BC 6A01                    push 00000001
:004666BE 8B5508                  mov edx, dword ptr [ebp+08]
:004666C1 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004666C2 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666BA(C)
|
:004666C8 8B4510                  mov eax, dword ptr [ebp+10]
:004666CB 25FFFF0000              and eax, 0000FFFF
:004666D0 8945EC                  mov dword ptr [ebp-14], eax
:004666D3 817DEC21050000          cmp dword ptr [ebp-14], 00000521
:004666DA 7405                    je 004666E1
:004666DC E987000000              jmp 00466768

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666DA(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0521, ""
                                  |
:004666E1 6821050000              push 00000521
:004666E6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004666E9 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004666EA FF15AC864B00            Call dword ptr [004B86AC]
:004666F0 8945FC                  mov dword ptr [ebp-04], eax
:004666F3 8B5510                  mov edx, dword ptr [ebp+10]
:004666F6 C1EA10                  shr edx, 10
:004666F9 81E2FFFF0000            and edx, 0000FFFF
:004666FF 81E2FFFF0000            and edx, 0000FFFF
:00466705 8955E8                  mov dword ptr [ebp-18], edx
:00466708 837DE801                cmp dword ptr [ebp-18], 00000001
:0046670C 7402                    je 00466710
:0046670E EB58                    jmp 00466768

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046670C(C)
|
:00466710 6A00                    push 00000000
:00466712 6A00                    push 00000000
:00466714 6888010000              push 00000188

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0521, ""
                                  |
:00466719 6821050000              push 00000521
:0046671E 8B4508                  mov eax, dword ptr [ebp+08]
:00466721 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00466722 FF15B4864B00            Call dword ptr [004B86B4]
:00466728 668945F8                mov word ptr [ebp-08], ax
:0046672C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046672F 81E1FFFF0000            and ecx, 0000FFFF
:00466735 83F9FF                  cmp ecx, FFFFFFFF
:00466738 7502                    jne 0046673C
:0046673A EB2C                    jmp 00466768

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466738(C)
|
:0046673C 6A00                    push 00000000
:0046673E 8B55F8                  mov edx, dword ptr [ebp-08]
:00466741 81E2FFFF0000            and edx, 0000FFFF
:00466747 52                      push edx
:00466748 6899010000              push 00000199
:0046674D 8B45FC                  mov eax, dword ptr [ebp-04]
:00466750 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466751 FF15D8864B00            Call dword ptr [004B86D8]
:00466757 8945F4                  mov dword ptr [ebp-0C], eax
:0046675A 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0046675D 51                      push ecx
:0046675E B9B8114800              mov ecx, 004811B8
:00466763 E85508FAFF              call 00406FBD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004666DC(U), :0046670E(U), :0046673A(U)
|
:00466768 EB04                    jmp 0046676E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466678(U)
|
:0046676A 33C0                    xor eax, eax
:0046676C EB05                    jmp 00466773

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046669C(U), :00466768(U)
|
:0046676E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046676C(U)
|
:00466773 8BE5                    mov esp, ebp
:00466775 5D                      pop ebp
:00466776 C21000                  ret 0010


:00466779 55                      push ebp
:0046677A 8BEC                    mov ebp, esp
:0046677C 51                      push ecx
:0046677D 8B450C                  mov eax, dword ptr [ebp+0C]
:00466780 8945FC                  mov dword ptr [ebp-04], eax
:00466783 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0046678A 740B                    je 00466797
:0046678C 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00466793 7423                    je 004667B8
:00466795 EB4A                    jmp 004667E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046678A(C)
|
:00466797 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046679A 51                      push ecx
:0046679B 8B15A8184B00            mov edx, dword ptr [004B18A8]
:004667A1 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:004667A8 6BC970                  imul ecx, 00000070
:004667AB 81C198224900            add ecx, 00492298
:004667B1 E87CECFFFF              call 00465432
:004667B6 EB2D                    jmp 004667E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466793(C)
|
:004667B8 8B4510                  mov eax, dword ptr [ebp+10]
:004667BB 25FFFF0000              and eax, 0000FFFF
:004667C0 83F801                  cmp eax, 00000001
:004667C3 740E                    je 004667D3
:004667C5 8B4D10                  mov ecx, dword ptr [ebp+10]
:004667C8 81E1FFFF0000            and ecx, 0000FFFF
:004667CE 83F902                  cmp ecx, 00000002
:004667D1 750C                    jne 004667DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004667C3(C)
|
:004667D3 6A01                    push 00000001
:004667D5 8B5508                  mov edx, dword ptr [ebp+08]
:004667D8 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004667D9 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004667D1(C)
|
:004667DF EB04                    jmp 004667E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466795(U)
|
:004667E1 33C0                    xor eax, eax
:004667E3 EB05                    jmp 004667EA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004667B6(U), :004667DF(U)
|
:004667E5 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004667E3(U)
|
:004667EA 8BE5                    mov esp, ebp
:004667EC 5D                      pop ebp
:004667ED C21000                  ret 0010


:004667F0 55                      push ebp
:004667F1 8BEC                    mov ebp, esp
:004667F3 51                      push ecx
:004667F4 8B450C                  mov eax, dword ptr [ebp+0C]
:004667F7 8945FC                  mov dword ptr [ebp-04], eax
:004667FA 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00466801 740B                    je 0046680E
:00466803 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0046680A 7423                    je 0046682F
:0046680C EB4A                    jmp 00466858

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466801(C)
|
:0046680E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466811 51                      push ecx
:00466812 8B15A8184B00            mov edx, dword ptr [004B18A8]
:00466818 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:0046681F 6BC970                  imul ecx, 00000070
:00466822 81C198224900            add ecx, 00492298
:00466828 E844EEFFFF              call 00465671
:0046682D EB2D                    jmp 0046685C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046680A(C)
|
:0046682F 8B4510                  mov eax, dword ptr [ebp+10]
:00466832 25FFFF0000              and eax, 0000FFFF
:00466837 83F801                  cmp eax, 00000001
:0046683A 740E                    je 0046684A
:0046683C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046683F 81E1FFFF0000            and ecx, 0000FFFF
:00466845 83F902                  cmp ecx, 00000002
:00466848 750C                    jne 00466856

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046683A(C)
|
:0046684A 6A01                    push 00000001
:0046684C 8B5508                  mov edx, dword ptr [ebp+08]
:0046684F 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00466850 FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466848(C)
|
:00466856 EB04                    jmp 0046685C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046680C(U)
|
:00466858 33C0                    xor eax, eax
:0046685A EB05                    jmp 00466861

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046682D(U), :00466856(U)
|
:0046685C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046685A(U)
|
:00466861 8BE5                    mov esp, ebp
:00466863 5D                      pop ebp
:00466864 C21000                  ret 0010


:00466867 55                      push ebp
:00466868 8BEC                    mov ebp, esp
:0046686A 83EC14                  sub esp, 00000014
:0046686D 8B450C                  mov eax, dword ptr [ebp+0C]
:00466870 8945F4                  mov dword ptr [ebp-0C], eax
:00466873 817DF410010000          cmp dword ptr [ebp-0C], 00000110
:0046687A 740E                    je 0046688A
:0046687C 817DF411010000          cmp dword ptr [ebp-0C], 00000111
:00466883 7429                    je 004668AE
:00466885 E9F6000000              jmp 00466980

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046687A(C)
|
:0046688A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046688D 51                      push ecx
:0046688E 8B15A8184B00            mov edx, dword ptr [004B18A8]
:00466894 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:0046689B 6BC970                  imul ecx, 00000070
:0046689E 81C198224900            add ecx, 00492298
:004668A4 E804F2FFFF              call 00465AAD
:004668A9 E9D6000000              jmp 00466984

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466883(C)
|
:004668AE 8B4510                  mov eax, dword ptr [ebp+10]
:004668B1 25FFFF0000              and eax, 0000FFFF
:004668B6 83F801                  cmp eax, 00000001
:004668B9 740E                    je 004668C9
:004668BB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004668BE 81E1FFFF0000            and ecx, 0000FFFF
:004668C4 83F902                  cmp ecx, 00000002
:004668C7 750C                    jne 004668D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004668B9(C)
|
:004668C9 6A01                    push 00000001
:004668CB 8B5508                  mov edx, dword ptr [ebp+08]
:004668CE 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004668CF FF15B0874B00            Call dword ptr [004B87B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004668C7(C)
|
:004668D5 8B4510                  mov eax, dword ptr [ebp+10]
:004668D8 25FFFF0000              and eax, 0000FFFF
:004668DD 8945F0                  mov dword ptr [ebp-10], eax
:004668E0 817DF0EB030000          cmp dword ptr [ebp-10], 000003EB
:004668E7 7405                    je 004668EE
:004668E9 E98C000000              jmp 0046697A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004668E7(C)
|

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:03EB, ""
                                  |
:004668EE 68EB030000              push 000003EB
:004668F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004668F6 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004668F7 FF15AC864B00            Call dword ptr [004B86AC]
:004668FD 8945FC                  mov dword ptr [ebp-04], eax
:00466900 8B5510                  mov edx, dword ptr [ebp+10]
:00466903 C1EA10                  shr edx, 10
:00466906 81E2FFFF0000            and edx, 0000FFFF
:0046690C 81E2FFFF0000            and edx, 0000FFFF
:00466912 8955EC                  mov dword ptr [ebp-14], edx
:00466915 837DEC01                cmp dword ptr [ebp-14], 00000001
:00466919 7402                    je 0046691D
:0046691B EB5B                    jmp 00466978

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466919(C)
|
:0046691D 6A00                    push 00000000
:0046691F 6A00                    push 00000000
:00466921 6888010000              push 00000188

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:03EB, ""
                                  |
:00466926 68EB030000              push 000003EB
:0046692B 8B4508                  mov eax, dword ptr [ebp+08]
:0046692E 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0046692F FF15B4864B00            Call dword ptr [004B86B4]
:00466935 668945F8                mov word ptr [ebp-08], ax
:00466939 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046693C 81E1FFFF0000            and ecx, 0000FFFF
:00466942 83F9FF                  cmp ecx, FFFFFFFF
:00466945 7502                    jne 00466949
:00466947 EB2F                    jmp 00466978

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466945(C)
|
:00466949 6A00                    push 00000000
:0046694B 8B55F8                  mov edx, dword ptr [ebp-08]
:0046694E 81E2FFFF0000            and edx, 0000FFFF
:00466954 52                      push edx
:00466955 6899010000              push 00000199
:0046695A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046695D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046695E FF15D8864B00            Call dword ptr [004B86D8]
:00466964 A3D8534800              mov dword ptr [004853D8], eax
:00466969 8B0DD8534800            mov ecx, dword ptr [004853D8]
:0046696F 51                      push ecx
:00466970 E87CF7F9FF              call 004060F1
:00466975 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046691B(U), :00466947(U)
|
:00466978 EB04                    jmp 0046697E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004668E9(U)
|
:0046697A 33C0                    xor eax, eax
:0046697C EB08                    jmp 00466986

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466978(U)
|
:0046697E EB04                    jmp 00466984

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466885(U)
|
:00466980 33C0                    xor eax, eax
:00466982 EB02                    jmp 00466986

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004668A9(U), :0046697E(U)
|
:00466984 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046697C(U), :00466982(U)
|
:00466986 8BE5                    mov esp, ebp
:00466988 5D                      pop ebp
:00466989 C21000                  ret 0010


:0046698C 55                      push ebp
:0046698D 8BEC                    mov ebp, esp
:0046698F 83EC20                  sub esp, 00000020
:00466992 8B450C                  mov eax, dword ptr [ebp+0C]
:00466995 8945EC                  mov dword ptr [ebp-14], eax
:00466998 817DEC10010000          cmp dword ptr [ebp-14], 00000110
:0046699F 7718                    ja 004669B9
:004669A1 817DEC10010000          cmp dword ptr [ebp-14], 00000110
:004669A8 7433                    je 004669DD
:004669AA 837DEC4E                cmp dword ptr [ebp-14], 0000004E
:004669AE 0F8405020000            je 00466BB9
:004669B4 E93E020000              jmp 00466BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046699F(C)
|
:004669B9 817DEC11010000          cmp dword ptr [ebp-14], 00000111
:004669C0 0F84B8000000            je 00466A7E
:004669C6 817DEC12010000          cmp dword ptr [ebp-14], 00000112
:004669CD 7468                    je 00466A37
:004669CF 817DEC11030000          cmp dword ptr [ebp-14], 00000311
:004669D6 7447                    je 00466A1F
:004669D8 E91A020000              jmp 00466BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004669A8(C)
|
:004669DD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004669E0 51                      push ecx
:004669E1 8B15A8184B00            mov edx, dword ptr [004B18A8]
:004669E7 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:004669EE 6BC970                  imul ecx, 00000070
:004669F1 81C198224900            add ecx, 00492298
:004669F7 E875FAFFFF              call 00466471
:004669FC 6889000000              push 00000089
:00466A01 A1300E4B00              mov eax, dword ptr [004B0E30]
:00466A06 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00466A07 FF15E8864B00            Call dword ptr [004B86E8]
:00466A0D 50                      push eax
:00466A0E 6ADE                    push FFFFFFDE
:00466A10 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466A13 51                      push ecx

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00466A14 FF15A0874B00            Call dword ptr [004B87A0]
:00466A1A E9D8010000              jmp 00466BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004669D6(C)
|
:00466A1F 6A00                    push 00000000
:00466A21 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466A23 6A06                    push 00000006
:00466A25 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00466A2B 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466A2C FF15D8864B00            Call dword ptr [004B86D8]
:00466A32 E9C0010000              jmp 00466BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004669CD(C)
|
:00466A37 8B4510                  mov eax, dword ptr [ebp+10]
:00466A3A 8945E8                  mov dword ptr [ebp-18], eax
:00466A3D 817DE820F00000          cmp dword ptr [ebp-18], 0000F020
:00466A44 740B                    je 00466A51
:00466A46 817DE820F10000          cmp dword ptr [ebp-18], 0000F120
:00466A4D 7404                    je 00466A53
:00466A4F EB28                    jmp 00466A79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466A44(C)
|
:00466A51 EB26                    jmp 00466A79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466A4D(C)
|
:00466A53 6A00                    push 00000000
:00466A55 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466A57 6A06                    push 00000006
:00466A59 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:00466A5F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466A60 FF15D8864B00            Call dword ptr [004B86D8]
:00466A66 6A00                    push 00000000
:00466A68 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466A6A 6A06                    push 00000006
:00466A6C 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00466A72 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466A73 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466A4F(U), :00466A51(U)
|
:00466A79 E979010000              jmp 00466BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004669C0(C)
|
:00466A7E 8B4510                  mov eax, dword ptr [ebp+10]
:00466A81 25FFFF0000              and eax, 0000FFFF
:00466A86 8945F8                  mov dword ptr [ebp-08], eax
:00466A89 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466A8C 894DE4                  mov dword ptr [ebp-1C], ecx
:00466A8F 817DE403040000          cmp dword ptr [ebp-1C], 00000403
:00466A96 7F1E                    jg 00466AB6
:00466A98 817DE403040000          cmp dword ptr [ebp-1C], 00000403
:00466A9F 745B                    je 00466AFC
:00466AA1 837DE400                cmp dword ptr [ebp-1C], 00000000
:00466AA5 0F8E0C010000            jle 00466BB7
:00466AAB 837DE402                cmp dword ptr [ebp-1C], 00000002
:00466AAF 7E20                    jle 00466AD1
:00466AB1 E901010000              jmp 00466BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466A96(C)
|
:00466AB6 817DE404040000          cmp dword ptr [ebp-1C], 00000404
:00466ABD 0F8486000000            je 00466B49
:00466AC3 817DE4A9040000          cmp dword ptr [ebp-1C], 000004A9
:00466ACA 7416                    je 00466AE2
:00466ACC E9E6000000              jmp 00466BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466AAF(C)
|
:00466AD1 6A00                    push 00000000
:00466AD3 8B5508                  mov edx, dword ptr [ebp+08]
:00466AD6 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00466AD7 FF15E4864B00            Call dword ptr [004B86E4]
:00466ADD E9D5000000              jmp 00466BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466ACA(C)
|
:00466AE2 A120E64700              mov eax, dword ptr [0047E620]
:00466AE7 8B0C8508E74700          mov ecx, dword ptr [4*eax+0047E708]
:00466AEE 51                      push ecx
:00466AEF E86ECEFFFF              call 00463962
:00466AF4 83C404                  add esp, 00000004
:00466AF7 E9BB000000              jmp 00466BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466A9F(C)
|
:00466AFC 6A01                    push 00000001
:00466AFE 8B15A8184B00            mov edx, dword ptr [004B18A8]
:00466B04 52                      push edx
:00466B05 E8BAB4FFFF              call 00461FC4
:00466B0A 83C408                  add esp, 00000008
:00466B0D A3A8184B00              mov dword ptr [004B18A8], eax
:00466B12 8B4508                  mov eax, dword ptr [ebp+08]
:00466B15 50                      push eax
:00466B16 8B0DA8184B00            mov ecx, dword ptr [004B18A8]
:00466B1C 8B0C8D780E4B00          mov ecx, dword ptr [4*ecx+004B0E78]
:00466B23 6BC970                  imul ecx, 00000070
:00466B26 81C198224900            add ecx, 00492298
:00466B2C E8C8F1FFFF              call 00465CF9
:00466B31 8B5508                  mov edx, dword ptr [ebp+08]
:00466B34 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00466B35 FF15A4864B00            Call dword ptr [004B86A4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00466B3B 6A05                    push 00000005
:00466B3D 8B4508                  mov eax, dword ptr [ebp+08]
:00466B40 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00466B41 FF15E4864B00            Call dword ptr [004B86E4]
:00466B47 EB6E                    jmp 00466BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466ABD(C)
|
:00466B49 6885020000              push 00000285
:00466B4E 6A01                    push 00000001
:00466B50 8B0DA8184B00            mov ecx, dword ptr [004B18A8]
:00466B56 51                      push ecx
:00466B57 E836B4FFFF              call 00461F92
:00466B5C 83C40C                  add esp, 0000000C
:00466B5F 8945FC                  mov dword ptr [ebp-04], eax
:00466B62 8B55FC                  mov edx, dword ptr [ebp-04]
:00466B65 813C95780E4B0085020000  cmp dword ptr [4*edx+004B0E78], 00000285
:00466B70 7345                    jnb 00466BB7
:00466B72 8B45FC                  mov eax, dword ptr [ebp-04]
:00466B75 A3A8184B00              mov dword ptr [004B18A8], eax
:00466B7A 8B0D700E4B00            mov ecx, dword ptr [004B0E70]
:00466B80 51                      push ecx
:00466B81 8B15A8184B00            mov edx, dword ptr [004B18A8]
:00466B87 8B0C95780E4B00          mov ecx, dword ptr [4*edx+004B0E78]
:00466B8E 6BC970                  imul ecx, 00000070
:00466B91 81C198224900            add ecx, 00492298
:00466B97 E85DF1FFFF              call 00465CF9
:00466B9C A1700E4B00              mov eax, dword ptr [004B0E70]
:00466BA1 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00466BA2 FF15A4864B00            Call dword ptr [004B86A4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00466BA8 6A05                    push 00000005
:00466BAA 8B0D700E4B00            mov ecx, dword ptr [004B0E70]
:00466BB0 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00466BB1 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466AA5(C), :00466AB1(U), :00466ACC(U), :00466ADD(U), :00466AF7(U)
|:00466B47(U), :00466B70(C)
|
:00466BB7 EB3E                    jmp 00466BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004669AE(C)
|
:00466BB9 8B5514                  mov edx, dword ptr [ebp+14]
:00466BBC 8955F4                  mov dword ptr [ebp-0C], edx
:00466BBF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00466BC2 8B4808                  mov ecx, dword ptr [eax+08]
:00466BC5 894DE0                  mov dword ptr [ebp-20], ecx
:00466BC8 817DE0D9FDFFFF          cmp dword ptr [ebp-20], FFFFFDD9
:00466BCF 7402                    je 00466BD3
:00466BD1 EB24                    jmp 00466BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466BCF(C)
|
:00466BD3 6A00                    push 00000000
:00466BD5 6A00                    push 00000000
:00466BD7 680B130000              push 0000130B
:00466BDC 8B55F4                  mov edx, dword ptr [ebp-0C]
:00466BDF 8B02                    mov eax, dword ptr [edx]
:00466BE1 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466BE2 FF15D8864B00            Call dword ptr [004B86D8]
:00466BE8 8945F0                  mov dword ptr [ebp-10], eax
:00466BEB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00466BEE 51                      push ecx
:00466BEF E864F9FFFF              call 00466558
:00466BF4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004669B4(U), :004669D8(U), :00466A1A(U), :00466A32(U), :00466A79(U)
|:00466BB7(U), :00466BD1(U)
|
:00466BF7 33C0                    xor eax, eax
:00466BF9 8BE5                    mov esp, ebp
:00466BFB 5D                      pop ebp
:00466BFC C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00466CFA   , :00466D21   , :00466D48   , :00466F11   
|
:00466BFF 55                      push ebp
:00466C00 8BEC                    mov ebp, esp
:00466C02 83EC08                  sub esp, 00000008
:00466C05 C745F8FFFF0000          mov [ebp-08], 0000FFFF
:00466C0C C745FC00000000          mov [ebp-04], 00000000
:00466C13 EB09                    jmp 00466C1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C3E(U)
|
:00466C15 8B45FC                  mov eax, dword ptr [ebp-04]
:00466C18 83C001                  add eax, 00000001
:00466C1B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C13(U)
|
:00466C1E 817DFC85020000          cmp dword ptr [ebp-04], 00000285
:00466C25 7319                    jnb 00466C40
:00466C27 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466C2A 8B148D780E4B00          mov edx, dword ptr [4*ecx+004B0E78]
:00466C31 3B5508                  cmp edx, dword ptr [ebp+08]
:00466C34 7508                    jne 00466C3E
:00466C36 8B45FC                  mov eax, dword ptr [ebp-04]
:00466C39 8945F8                  mov dword ptr [ebp-08], eax
:00466C3C EB02                    jmp 00466C40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C34(C)
|
:00466C3E EBD5                    jmp 00466C15

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466C25(C), :00466C3C(U)
|
:00466C40 8B45F8                  mov eax, dword ptr [ebp-08]
:00466C43 8BE5                    mov esp, ebp
:00466C45 5D                      pop ebp
:00466C46 C3                      ret



* Referenced by a CALL at Address:
|:00467EDF   
|
:00466C47 55                      push ebp
:00466C48 8BEC                    mov ebp, esp
:00466C4A 83EC08                  sub esp, 00000008
:00466C4D C745F8FFFF0000          mov [ebp-08], 0000FFFF
:00466C54 C745FC00000000          mov [ebp-04], 00000000
:00466C5B EB09                    jmp 00466C66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C8A(U)
|
:00466C5D 8B45FC                  mov eax, dword ptr [ebp-04]
:00466C60 83C001                  add eax, 00000001
:00466C63 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C5B(U)
|
:00466C66 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:00466C6A 7320                    jnb 00466C8C
:00466C6C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466C6F 6BC924                  imul ecx, 00000024
:00466C72 81C108F54A00            add ecx, 004AF508
:00466C78 E8538AFCFF              call 0042F6D0
:00466C7D 3B4508                  cmp eax, dword ptr [ebp+08]
:00466C80 7508                    jne 00466C8A
:00466C82 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466C85 894DF8                  mov dword ptr [ebp-08], ecx
:00466C88 EB02                    jmp 00466C8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C80(C)
|
:00466C8A EBD1                    jmp 00466C5D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466C6A(C), :00466C88(U)
|
:00466C8C 8B45F8                  mov eax, dword ptr [ebp-08]
:00466C8F 8BE5                    mov esp, ebp
:00466C91 5D                      pop ebp
:00466C92 C3                      ret



* Referenced by a CALL at Addresses:
|:00466D62   , :00466E97   , :00466EF3   , :00466F46   
|
:00466C93 55                      push ebp
:00466C94 8BEC                    mov ebp, esp
:00466C96 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00466C9D 7202                    jb 00466CA1
:00466C9F EB3D                    jmp 00466CDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C9D(C)
|
:00466CA1 A1700E4B00              mov eax, dword ptr [004B0E70]
:00466CA6 50                      push eax
:00466CA7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466CAA 6BC970                  imul ecx, 00000070
:00466CAD 81C198224900            add ecx, 00492298
:00466CB3 E841F0FFFF              call 00465CF9
:00466CB8 8B0D700E4B00            mov ecx, dword ptr [004B0E70]
:00466CBE 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00466CBF FF15A4864B00            Call dword ptr [004B86A4]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00466CC5 6A09                    push 00000009
:00466CC7 8B15700E4B00            mov edx, dword ptr [004B0E70]
:00466CCD 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00466CCE FF15E4864B00            Call dword ptr [004B86E4]
:00466CD4 6A00                    push 00000000
:00466CD6 E84C3A0000              call 0046A727
:00466CDB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466C9F(U)
|
:00466CDE 5D                      pop ebp
:00466CDF C3                      ret



* Referenced by a CALL at Addresses:
|:0043119C   , :0043196F   , :004571F6   , :00466F85   , :004671A0   
|
:00466CE0 55                      push ebp
:00466CE1 8BEC                    mov ebp, esp
:00466CE3 E82AFCFAFF              call 00416912
:00466CE8 85C0                    test eax, eax
:00466CEA 740A                    je 00466CF6
:00466CEC 6A01                    push 00000001
:00466CEE E879000000              call 00466D6C
:00466CF3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466CEA(C)
|
:00466CF6 8B4508                  mov eax, dword ptr [ebp+08]
:00466CF9 50                      push eax
:00466CFA E800FFFFFF              call 00466BFF
:00466CFF 83C404                  add esp, 00000004
:00466D02 A3A8184B00              mov dword ptr [004B18A8], eax
:00466D07 813DA8184B00FFFF0000    cmp dword ptr [004B18A8], 0000FFFF
:00466D11 7542                    jne 00466D55
:00466D13 6A01                    push 00000001
:00466D15 E852000000              call 00466D6C
:00466D1A 83C404                  add esp, 00000004
:00466D1D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466D20 51                      push ecx
:00466D21 E8D9FEFFFF              call 00466BFF
:00466D26 83C404                  add esp, 00000004
:00466D29 A3A8184B00              mov dword ptr [004B18A8], eax
:00466D2E 813DA8184B00FFFF0000    cmp dword ptr [004B18A8], 0000FFFF
:00466D38 751B                    jne 00466D55
:00466D3A 6A00                    push 00000000
:00466D3C E82B000000              call 00466D6C
:00466D41 83C404                  add esp, 00000004
:00466D44 8B5508                  mov edx, dword ptr [ebp+08]
:00466D47 52                      push edx
:00466D48 E8B2FEFFFF              call 00466BFF
:00466D4D 83C404                  add esp, 00000004
:00466D50 A3A8184B00              mov dword ptr [004B18A8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466D11(C), :00466D38(C)
|
:00466D55 A1A8184B00              mov eax, dword ptr [004B18A8]
:00466D5A 8B0C85780E4B00          mov ecx, dword ptr [4*eax+004B0E78]
:00466D61 51                      push ecx
:00466D62 E82CFFFFFF              call 00466C93
:00466D67 83C404                  add esp, 00000004
:00466D6A 5D                      pop ebp
:00466D6B C3                      ret



* Referenced by a CALL at Addresses:
|:00466CEE   , :00466D15   , :00466D3C   , :00467F90   , :004680FB   
|:0046811C   
|
:00466D6C 55                      push ebp
:00466D6D 8BEC                    mov ebp, esp
:00466D6F 83EC08                  sub esp, 00000008
:00466D72 C745FC00000000          mov [ebp-04], 00000000
:00466D79 68140A0000              push 00000A14
:00466D7E 68FFFF0000              push 0000FFFF
:00466D83 68780E4B00              push 004B0E78
:00466D88 E8D36B0000              call 0046D960
:00466D8D 83C40C                  add esp, 0000000C
:00466D90 C745F800000000          mov [ebp-08], 00000000
:00466D97 EB09                    jmp 00466DA2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466DDE(U), :00466DFB(U), :00466E21(U)
|
:00466D99 8B45F8                  mov eax, dword ptr [ebp-08]
:00466D9C 83C001                  add eax, 00000001
:00466D9F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466D97(U)
|
:00466DA2 837DF85A                cmp dword ptr [ebp-08], 0000005A
:00466DA6 737E                    jnb 00466E26
:00466DA8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466DAB 6BC924                  imul ecx, 00000024
:00466DAE 81C108F54A00            add ecx, 004AF508
:00466DB4 E8178BFCFF              call 0042F8D0
:00466DB9 25FF000000              and eax, 000000FF
:00466DBE 83F802                  cmp eax, 00000002
:00466DC1 755E                    jne 00466E21
:00466DC3 837D0800                cmp dword ptr [ebp+08], 00000000
:00466DC7 7417                    je 00466DE0
:00466DC9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466DCC 6BC924                  imul ecx, 00000024
:00466DCF 81C108F54A00            add ecx, 004AF508
:00466DD5 E8F684FAFF              call 0040F2D0
:00466DDA 85C0                    test eax, eax
:00466DDC 7502                    jne 00466DE0
:00466DDE EBB9                    jmp 00466D99

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466DC7(C), :00466DDC(C)
|
:00466DE0 837D0800                cmp dword ptr [ebp+08], 00000000
:00466DE4 7517                    jne 00466DFD
:00466DE6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466DE9 6BC924                  imul ecx, 00000024
:00466DEC 81C108F54A00            add ecx, 004AF508
:00466DF2 E8D984FAFF              call 0040F2D0
:00466DF7 85C0                    test eax, eax
:00466DF9 7402                    je 00466DFD
:00466DFB EB9C                    jmp 00466D99

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466DE4(C), :00466DF9(C)
|
:00466DFD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466E00 6BC924                  imul ecx, 00000024
:00466E03 81C108F54A00            add ecx, 004AF508
:00466E09 E8C288FCFF              call 0042F6D0
:00466E0E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466E11 89048D780E4B00          mov dword ptr [4*ecx+004B0E78], eax
:00466E18 8B55FC                  mov edx, dword ptr [ebp-04]
:00466E1B 83C201                  add edx, 00000001
:00466E1E 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466DC1(C)
|
:00466E21 E973FFFFFF              jmp 00466D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466DA6(C)
|
:00466E26 8B45FC                  mov eax, dword ptr [ebp-04]
:00466E29 8BE5                    mov esp, ebp
:00466E2B 5D                      pop ebp
:00466E2C C3                      ret



* Referenced by a CALL at Address:
|:00446D58   
|
:00466E2D 55                      push ebp
:00466E2E 8BEC                    mov ebp, esp
:00466E30 6A00                    push 00000000
:00466E32 6A01                    push 00000001
:00466E34 6811010000              push 00000111
:00466E39 A1700E4B00              mov eax, dword ptr [004B0E70]
:00466E3E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466E3F FF15D8864B00            Call dword ptr [004B86D8]
:00466E45 5D                      pop ebp
:00466E46 C3                      ret



* Referenced by a CALL at Address:
|:00466F2E   
|
:00466E47 55                      push ebp
:00466E48 8BEC                    mov ebp, esp
:00466E4A 51                      push ecx
:00466E4B C745FC00000000          mov [ebp-04], 00000000
:00466E52 EB09                    jmp 00466E5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466E74(U)
|
:00466E54 8B45FC                  mov eax, dword ptr [ebp-04]
:00466E57 83C001                  add eax, 00000001
:00466E5A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466E52(U)
|
:00466E5D 817DFC85020000          cmp dword ptr [ebp-04], 00000285
:00466E64 7310                    jnb 00466E76
:00466E66 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466E69 C7048D780E4B00FFFF0000  mov dword ptr [4*ecx+004B0E78], 0000FFFF
:00466E74 EBDE                    jmp 00466E54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466E64(C)
|
:00466E76 C705A8184B0000000000    mov dword ptr [004B18A8], 00000000
:00466E80 8B5508                  mov edx, dword ptr [ebp+08]
:00466E83 8915780E4B00            mov dword ptr [004B0E78], edx
:00466E89 C7057C0E4B00FFFF0000    mov dword ptr [004B0E7C], 0000FFFF
:00466E93 8B4508                  mov eax, dword ptr [ebp+08]
:00466E96 50                      push eax
:00466E97 E8F7FDFFFF              call 00466C93
:00466E9C 83C404                  add esp, 00000004
:00466E9F 8BE5                    mov esp, ebp
:00466EA1 5D                      pop ebp
:00466EA2 C3                      ret


:00466EA3 55                      push ebp
:00466EA4 8BEC                    mov ebp, esp
:00466EA6 51                      push ecx
:00466EA7 C745FC00000000          mov [ebp-04], 00000000
:00466EAE EB09                    jmp 00466EB9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466ED0(U)
|
:00466EB0 8B45FC                  mov eax, dword ptr [ebp-04]
:00466EB3 83C001                  add eax, 00000001
:00466EB6 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466EAE(U)
|
:00466EB9 817DFC85020000          cmp dword ptr [ebp-04], 00000285
:00466EC0 7310                    jnb 00466ED2
:00466EC2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466EC5 C7048D780E4B00FFFF0000  mov dword ptr [4*ecx+004B0E78], 0000FFFF
:00466ED0 EBDE                    jmp 00466EB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466EC0(C)
|
:00466ED2 C705A8184B0000000000    mov dword ptr [004B18A8], 00000000
:00466EDC 8B5508                  mov edx, dword ptr [ebp+08]
:00466EDF 8915780E4B00            mov dword ptr [004B0E78], edx
:00466EE5 C7057C0E4B00FFFF0000    mov dword ptr [004B0E7C], 0000FFFF
:00466EEF 8B4508                  mov eax, dword ptr [ebp+08]
:00466EF2 50                      push eax
:00466EF3 E89BFDFFFF              call 00466C93
:00466EF8 83C404                  add esp, 00000004
:00466EFB 8BE5                    mov esp, ebp
:00466EFD 5D                      pop ebp
:00466EFE C3                      ret



* Referenced by a CALL at Addresses:
|:00423D5C   , :00446CC6   
|
:00466EFF 55                      push ebp
:00466F00 8BEC                    mov ebp, esp
:00466F02 817D0885020000          cmp dword ptr [ebp+08], 00000285
:00466F09 7202                    jb 00466F0D
:00466F0B EB41                    jmp 00466F4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466F09(C)
|
:00466F0D 8B4508                  mov eax, dword ptr [ebp+08]
:00466F10 50                      push eax
:00466F11 E8E9FCFFFF              call 00466BFF
:00466F16 83C404                  add esp, 00000004
:00466F19 A3A8184B00              mov dword ptr [004B18A8], eax
:00466F1E 813DA8184B00FFFF0000    cmp dword ptr [004B18A8], 0000FFFF
:00466F28 750E                    jne 00466F38
:00466F2A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466F2D 51                      push ecx
:00466F2E E814FFFFFF              call 00466E47
:00466F33 83C404                  add esp, 00000004
:00466F36 EB16                    jmp 00466F4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466F28(C)
|
:00466F38 8B15A8184B00            mov edx, dword ptr [004B18A8]
:00466F3E 8B0495780E4B00          mov eax, dword ptr [4*edx+004B0E78]
:00466F45 50                      push eax
:00466F46 E848FDFFFF              call 00466C93
:00466F4B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466F0B(U), :00466F36(U)
|
:00466F4E 5D                      pop ebp
:00466F4F C3                      ret



* Referenced by a CALL at Addresses:
|:0040300C   , :00403F87   , :00404159   , :004042A6   , :0040AA34   
|:0040AC5F   , :0040CFA7   , :0040D4F5   , :0040D681   , :0040D9D4   
|:00415DBA   , :004172A4   , :00418A55   , :0041B33C   , :0041B35D   
|:0041DF66   , :0042A02C   , :0042C6DD   , :0042C9C9   , :004321CD   
|:00432360   , :00432BF9   , :00432C38   , :00433428   , :00435905   
|:00436030   , :00436304   , :00436771   , :004367EB   , :00436D6E   
|:00437069   , :00437336   , :00437785   , :004377A5   , :0043804C   
|:00438592   , :004385D1   , :00438C0A   , :0043BB4D   , :0043CF4B   
|:0043CF67   , :0043D148   , :00452D96   , :00452DF3   , :00457111   
|:0045772B   , :0045785E   , :00458C74   , :00459CBC   , :0045D6F6   
|
:00466F50 55                      push ebp
:00466F51 8BEC                    mov ebp, esp
:00466F53 B9500E4B00              mov ecx, 004B0E50
:00466F58 E888D6FFFF              call 004645E5
:00466F5D A1700E4B00              mov eax, dword ptr [004B0E70]
:00466F62 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00466F63 FF15E0864B00            Call dword ptr [004B86E0]
:00466F69 85C0                    test eax, eax
:00466F6B 7502                    jne 00466F6F
:00466F6D EB1E                    jmp 00466F8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466F6B(C)
|
:00466F6F 8B0DA8184B00            mov ecx, dword ptr [004B18A8]
:00466F75 8B148D780E4B00          mov edx, dword ptr [4*ecx+004B0E78]
:00466F7C 3B5508                  cmp edx, dword ptr [ebp+08]
:00466F7F 750C                    jne 00466F8D
:00466F81 8B4508                  mov eax, dword ptr [ebp+08]
:00466F84 50                      push eax
:00466F85 E856FDFFFF              call 00466CE0
:00466F8A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466F6D(U), :00466F7F(C)
|
:00466F8D 5D                      pop ebp
:00466F8E C3                      ret



* Referenced by a CALL at Address:
|:00466FE6   
|
:00466F8F 55                      push ebp
:00466F90 8BEC                    mov ebp, esp
:00466F92 C705A8184B0000000000    mov dword ptr [004B18A8], 00000000
:00466F9C 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"U EE}"
                                  |
:00466F9E 688C694600              push 0046698C
:00466FA3 A1380E4B00              mov eax, dword ptr [004B0E38]
:00466FA8 50                      push eax

* Possible Reference to Dialog: DialogID_00A6 
                                  |
:00466FA9 68A6000000              push 000000A6
:00466FAE 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00466FB4 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00466FB5 FF15A0864B00            Call dword ptr [004B86A0]
:00466FBB A3700E4B00              mov dword ptr [004B0E70], eax
:00466FC0 833D700E4B0000          cmp dword ptr [004B0E70], 00000000
:00466FC7 7504                    jne 00466FCD
:00466FC9 33C0                    xor eax, eax
:00466FCB EB14                    jmp 00466FE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FC7(C)
|
:00466FCD 6A00                    push 00000000
:00466FCF 8B15700E4B00            mov edx, dword ptr [004B0E70]
:00466FD5 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00466FD6 FF15E4864B00            Call dword ptr [004B86E4]
:00466FDC B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FCB(U)
|
:00466FE1 5D                      pop ebp
:00466FE2 C3                      ret



* Referenced by a CALL at Address:
|:004125FC   
|
:00466FE3 55                      push ebp
:00466FE4 8BEC                    mov ebp, esp
:00466FE6 E8A4FFFFFF              call 00466F8F
:00466FEB 85C0                    test eax, eax
:00466FED 7504                    jne 00466FF3
:00466FEF 33C0                    xor eax, eax
:00466FF1 EB31                    jmp 00467024

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FED(C)
|
:00466FF3 E857F1F9FF              call 0040614F
:00466FF8 85C0                    test eax, eax
:00466FFA 7504                    jne 00467000
:00466FFC 33C0                    xor eax, eax
:00466FFE EB24                    jmp 00467024

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FFA(C)
|
:00467000 E83A04FAFF              call 0040743F
:00467005 85C0                    test eax, eax
:00467007 7504                    jne 0046700D
:00467009 33C0                    xor eax, eax
:0046700B EB17                    jmp 00467024

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467007(C)
|
:0046700D E82806FAFF              call 0040763A
:00467012 85C0                    test eax, eax
:00467014 7504                    jne 0046701A
:00467016 33C0                    xor eax, eax
:00467018 EB0A                    jmp 00467024

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467014(C)
|
:0046701A E8D38BFFFF              call 0045FBF2
:0046701F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466FF1(U), :00466FFE(U), :0046700B(U), :00467018(U)
|
:00467024 5D                      pop ebp
:00467025 C3                      ret



* Referenced by a CALL at Addresses:
|:00454EEE   , :00457E57   
|
:00467026 55                      push ebp
:00467027 8BEC                    mov ebp, esp
:00467029 6A00                    push 00000000
:0046702B A1700E4B00              mov eax, dword ptr [004B0E70]
:00467030 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00467031 FF15E4864B00            Call dword ptr [004B86E4]
:00467037 6A00                    push 00000000
:00467039 8B0D8C184B00            mov ecx, dword ptr [004B188C]
:0046703F 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00467040 FF15E4864B00            Call dword ptr [004B86E4]
:00467046 B9B8114800              mov ecx, 004811B8
:0046704B E83A01FAFF              call 0040718A
:00467050 B9500E4B00              mov ecx, 004B0E50
:00467055 E85DD5FFFF              call 004645B7
:0046705A B9B0114800              mov ecx, 004811B0
:0046705F E86C86FCFF              call 0042F6D0
:00467064 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00467065 FF15E0864B00            Call dword ptr [004B86E0]
:0046706B 85C0                    test eax, eax
:0046706D 7413                    je 00467082
:0046706F 6A00                    push 00000000
:00467071 B9B0114800              mov ecx, 004811B0
:00467076 E85586FCFF              call 0042F6D0
:0046707B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046707C FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046706D(C)
|
:00467082 5D                      pop ebp
:00467083 C3                      ret



* Referenced by a CALL at Address:
|:00457E14   
|
:00467084 55                      push ebp
:00467085 8BEC                    mov ebp, esp
:00467087 6A00                    push 00000000
:00467089 A1C00C4B00              mov eax, dword ptr [004B0CC0]
:0046708E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046708F FF15E4864B00            Call dword ptr [004B86E4]
:00467095 6A00                    push 00000000
:00467097 8B0DC40C4B00            mov ecx, dword ptr [004B0CC4]
:0046709D 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046709E FF15E4864B00            Call dword ptr [004B86E4]
:004670A4 6A00                    push 00000000
:004670A6 8B15700E4B00            mov edx, dword ptr [004B0E70]
:004670AC 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004670AD FF15E4864B00            Call dword ptr [004B86E4]
:004670B3 6A00                    push 00000000
:004670B5 A18C184B00              mov eax, dword ptr [004B188C]
:004670BA 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004670BB FF15E4864B00            Call dword ptr [004B86E4]
:004670C1 B9B8114800              mov ecx, 004811B8
:004670C6 E8BF00FAFF              call 0040718A
:004670CB C705387A4700FFFF0000    mov dword ptr [00477A38], 0000FFFF
:004670D5 C705347A4700FFFF0000    mov dword ptr [00477A34], 0000FFFF
:004670DF C705307A4700FFFF0000    mov dword ptr [00477A30], 0000FFFF
:004670E9 E8DB9FFBFF              call 004210C9
:004670EE 68CC184B00              push 004B18CC

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:004670F3 68FA030000              push 000003FA
:004670F8 8B0D90184B00            mov ecx, dword ptr [004B1890]
:004670FE 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004670FF FF15AC864B00            Call dword ptr [004B86AC]
:00467105 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00467106 FF15B0864B00            Call dword ptr [004B86B0]
:0046710C E84ADAFFFF              call 00464B5B
:00467111 E833DAFFFF              call 00464B49
:00467116 B9500E4B00              mov ecx, 004B0E50
:0046711B E897D4FFFF              call 004645B7
:00467120 5D                      pop ebp
:00467121 C3                      ret



* Referenced by a CALL at Addresses:
|:0046729F   , :00467EC7   
|
:00467122 55                      push ebp
:00467123 8BEC                    mov ebp, esp
:00467125 83EC34                  sub esp, 00000034
:00467128 8B450C                  mov eax, dword ptr [ebp+0C]
:0046712B 8945D4                  mov dword ptr [ebp-2C], eax
:0046712E C745D800000000          mov [ebp-28], 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00467135 C745D004000000          mov [ebp-30], 00000004
:0046713C 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0046713F 51                      push ecx
:00467140 6A00                    push 00000000
:00467142 6805100000              push 00001005
:00467147 8B5508                  mov edx, dword ptr [ebp+08]
:0046714A 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046714B FF15D8864B00            Call dword ptr [004B86D8]
:00467151 8B45F0                  mov eax, dword ptr [ebp-10]
:00467154 8945F8                  mov dword ptr [ebp-08], eax
:00467157 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046715A E8B1D5F9FF              call 00404710
:0046715F 8945CC                  mov dword ptr [ebp-34], eax
:00467162 C745FC00000000          mov [ebp-04], 00000000
:00467169 EB09                    jmp 00467174

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671AD(U)
|
:0046716B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046716E 83C101                  add ecx, 00000001
:00467171 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467169(U)
|
:00467174 817DFC85020000          cmp dword ptr [ebp-04], 00000285
:0046717B 7332                    jnb 004671AF
:0046717D 8B55FC                  mov edx, dword ptr [ebp-04]
:00467180 813C95780E4B00FFFF0000  cmp dword ptr [4*edx+004B0E78], 0000FFFF
:0046718B 7420                    je 004671AD
:0046718D 8B45FC                  mov eax, dword ptr [ebp-04]
:00467190 8B0C85780E4B00          mov ecx, dword ptr [4*eax+004B0E78]
:00467197 3B4DCC                  cmp ecx, dword ptr [ebp-34]
:0046719A 7511                    jne 004671AD
:0046719C 8B55CC                  mov edx, dword ptr [ebp-34]
:0046719F 52                      push edx
:004671A0 E83BFBFFFF              call 00466CE0
:004671A5 83C404                  add esp, 00000004
:004671A8 8B45CC                  mov eax, dword ptr [ebp-34]
:004671AB EB07                    jmp 004671B4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046718B(C), :0046719A(C)
|
:004671AD EBBC                    jmp 0046716B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046717B(C)
|
:004671AF B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671AB(U)
|
:004671B4 8BE5                    mov esp, ebp
:004671B6 5D                      pop ebp
:004671B7 C3                      ret


:004671B8 55                      push ebp
:004671B9 8BEC                    mov ebp, esp
:004671BB 83EC18                  sub esp, 00000018

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:004671BE 6802040000              push 00000402
:004671C3 8B4508                  mov eax, dword ptr [ebp+08]
:004671C6 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004671C7 FF15AC864B00            Call dword ptr [004B86AC]
:004671CD 8945FC                  mov dword ptr [ebp-04], eax
:004671D0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004671D3 894DF0                  mov dword ptr [ebp-10], ecx
:004671D6 837DF00F                cmp dword ptr [ebp-10], 0000000F
:004671DA 7719                    ja 004671F5
:004671DC 837DF00F                cmp dword ptr [ebp-10], 0000000F
:004671E0 0F8462010000            je 00467348
:004671E6 837DF005                cmp dword ptr [ebp-10], 00000005
:004671EA 0F8444010000            je 00467334
:004671F0 E97C010000              jmp 00467371

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671DA(C)
|
:004671F5 8B55F0                  mov edx, dword ptr [ebp-10]
:004671F8 83EA24                  sub edx, 00000024
:004671FB 8955F0                  mov dword ptr [ebp-10], edx
:004671FE 817DF0ED000000          cmp dword ptr [ebp-10], 000000ED
:00467205 0F8766010000            ja 00467371
:0046720B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046720E 33C0                    xor eax, eax
:00467210 8A8198734600            mov al, byte ptr [ecx+00467398]
:00467216 FF248580734600          jmp dword ptr [4*eax+00467380]
:0046721D E879DAFFFF              call 00464C9B
:00467222 8945F8                  mov dword ptr [ebp-08], eax
:00467225 6A01                    push 00000001
:00467227 8B55F8                  mov edx, dword ptr [ebp-08]
:0046722A 52                      push edx
:0046722B 8B4508                  mov eax, dword ptr [ebp+08]
:0046722E 50                      push eax
:0046722F E898060000              call 004678CC
:00467234 83C40C                  add esp, 0000000C
:00467237 6889000000              push 00000089
:0046723C 8B0D300E4B00            mov ecx, dword ptr [004B0E30]
:00467242 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00467243 FF15E8864B00            Call dword ptr [004B86E8]
:00467249 50                      push eax
:0046724A 6ADE                    push FFFFFFDE
:0046724C 8B5508                  mov edx, dword ptr [ebp+08]
:0046724F 52                      push edx

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00467250 FF15A0874B00            Call dword ptr [004B87A0]
:00467256 B801000000              mov eax, 00000001
:0046725B E91A010000              jmp 0046737A
:00467260 8B4514                  mov eax, dword ptr [ebp+14]
:00467263 8B4808                  mov ecx, dword ptr [eax+08]
:00467266 894DEC                  mov dword ptr [ebp-14], ecx
:00467269 837DEC9B                cmp dword ptr [ebp-14], FFFFFF9B
:0046726D 7408                    je 00467277
:0046726F 837DECFE                cmp dword ptr [ebp-14], FFFFFFFE
:00467273 7434                    je 004672A9
:00467275 EB41                    jmp 004672B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046726D(C)
|
:00467277 8B5514                  mov edx, dword ptr [ebp+14]
:0046727A 8955F4                  mov dword ptr [ebp-0C], edx
:0046727D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467280 81780C85020000          cmp dword ptr [eax+0C], 00000285
:00467287 7D0C                    jge 00467295
:00467289 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046728C 8B510C                  mov edx, dword ptr [ecx+0C]
:0046728F 8915D8534800            mov dword ptr [004853D8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467287(C)
|
:00467295 A1D8534800              mov eax, dword ptr [004853D8]
:0046729A 50                      push eax
:0046729B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046729E 51                      push ecx
:0046729F E87EFEFFFF              call 00467122
:004672A4 83C408                  add esp, 00000008
:004672A7 EB2C                    jmp 004672D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467273(C)
|
:004672A9 8B15700E4B00            mov edx, dword ptr [004B0E70]
:004672AF 52                      push edx

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:004672B0 FF1528874B00            Call dword ptr [004B8728]
:004672B6 EB1D                    jmp 004672D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467275(U)
|
:004672B8 8B4514                  mov eax, dword ptr [ebp+14]
:004672BB 50                      push eax
:004672BC 8B4D10                  mov ecx, dword ptr [ebp+10]
:004672BF 51                      push ecx
:004672C0 8B550C                  mov edx, dword ptr [ebp+0C]
:004672C3 52                      push edx
:004672C4 8B4508                  mov eax, dword ptr [ebp+08]
:004672C7 50                      push eax
:004672C8 E8B9010000              call 00467486
:004672CD 83C410                  add esp, 00000010
:004672D0 E9A5000000              jmp 0046737A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004672A7(U), :004672B6(U)
|
:004672D5 E99B000000              jmp 00467375
:004672DA 8B4D14                  mov ecx, dword ptr [ebp+14]
:004672DD 51                      push ecx
:004672DE E804080000              call 00467AE7
:004672E3 83C404                  add esp, 00000004
:004672E6 E98A000000              jmp 00467375
:004672EB 8B5510                  mov edx, dword ptr [ebp+10]
:004672EE 81E2FFFF0000            and edx, 0000FFFF
:004672F4 8955E8                  mov dword ptr [ebp-18], edx
:004672F7 837DE802                cmp dword ptr [ebp-18], 00000002
:004672FB 7414                    je 00467311
:004672FD 817DE802040000          cmp dword ptr [ebp-18], 00000402
:00467304 7426                    je 0046732C
:00467306 817DE8A9040000          cmp dword ptr [ebp-18], 000004A9
:0046730D 740E                    je 0046731D
:0046730F EB1D                    jmp 0046732E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004672FB(C)
|
:00467311 B9500E4B00              mov ecx, 004B0E50
:00467316 E89CD2FFFF              call 004645B7
:0046731B EB15                    jmp 00467332

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046730D(C)
|
:0046731D 68C80F0000              push 00000FC8
:00467322 E83BC6FFFF              call 00463962
:00467327 83C404                  add esp, 00000004
:0046732A EB06                    jmp 00467332

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467304(C)
|
:0046732C EB04                    jmp 00467332

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046730F(U)
|
:0046732E 33C0                    xor eax, eax
:00467330 EB48                    jmp 0046737A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046731B(U), :0046732A(U), :0046732C(U)
|
:00467332 EB41                    jmp 00467375

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671EA(C)
|
:00467334 6A00                    push 00000000
:00467336 8B4514                  mov eax, dword ptr [ebp+14]
:00467339 50                      push eax
:0046733A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046733D 51                      push ecx
:0046733E E87E0F0000              call 004682C1
:00467343 83C40C                  add esp, 0000000C
:00467346 EB2D                    jmp 00467375

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671E0(C)
|
:00467348 6842010000              push 00000142
:0046734D 8B5508                  mov edx, dword ptr [ebp+08]
:00467350 52                      push edx
:00467351 E8983AFFFF              call 0045ADEE
:00467356 83C408                  add esp, 00000008
:00467359 EB1A                    jmp 00467375
:0046735B 6A00                    push 00000000
:0046735D 8B4514                  mov eax, dword ptr [ebp+14]
:00467360 50                      push eax
:00467361 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467364 51                      push ecx
:00467365 E80E120000              call 00468578
:0046736A 83C40C                  add esp, 0000000C
:0046736D 33C0                    xor eax, eax
:0046736F EB09                    jmp 0046737A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004671F0(U), :00467205(C)
|
:00467371 33C0                    xor eax, eax
:00467373 EB05                    jmp 0046737A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004672D5(U), :004672E6(U), :00467332(U), :00467346(U), :00467359(U)
|
:00467375 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046725B(U), :004672D0(U), :00467330(U), :0046736F(U), :00467373(U)
|
:0046737A 8BE5                    mov esp, ebp
:0046737C 5D                      pop ebp
:0046737D C21000                  ret 0010



:00467380 5B734600                DWORD 0046735B
:00467384 DA724600                DWORD 004672DA
:00467388 60724600                DWORD 00467260
:0046738C 1D724600                DWORD 0046721D
:00467390 EB724600                DWORD 004672EB
:00467394 71734600                DWORD 00467371


:00467398 000505050505            add byte ptr [05050505], al
:0046739E 0501050505              add eax, 05050501
:004673A3 0505050505              add eax, 05050505
:004673A8 0505050505              add eax, 05050505
:004673AD 0505050505              add eax, 05050505
:004673B2 0505050505              add eax, 05050505
:004673B7 0505050505              add eax, 05050505
:004673BC 0505050505              add eax, 05050505
:004673C1 0502050505              add eax, 05050502
:004673C6 0505050505              add eax, 05050505
:004673CB 0505050505              add eax, 05050505
:004673D0 0505050505              add eax, 05050505
:004673D5 0505050505              add eax, 05050505
:004673DA 0505050505              add eax, 05050505
:004673DF 0505050505              add eax, 05050505
:004673E4 0505050505              add eax, 05050505
:004673E9 0505050505              add eax, 05050505
:004673EE 0505050505              add eax, 05050505
:004673F3 0505050505              add eax, 05050505
:004673F8 0505050505              add eax, 05050505
:004673FD 0505050505              add eax, 05050505
:00467402 0505050505              add eax, 05050505
:00467407 0505050505              add eax, 05050505
:0046740C 0505050505              add eax, 05050505
:00467411 0505050505              add eax, 05050505
:00467416 0505050505              add eax, 05050505
:0046741B 0505050505              add eax, 05050505
:00467420 0505050505              add eax, 05050505
:00467425 0505050505              add eax, 05050505
:0046742A 0505050505              add eax, 05050505
:0046742F 0505050505              add eax, 05050505
:00467434 0505050505              add eax, 05050505
:00467439 0505050505              add eax, 05050505
:0046743E 0505050505              add eax, 05050505
:00467443 0505050505              add eax, 05050505
:00467448 0505050505              add eax, 05050505
:0046744D 0505050505              add eax, 05050505
:00467452 0505050505              add eax, 05050505
:00467457 0505050505              add eax, 05050505
:0046745C 0505050505              add eax, 05050505
:00467461 0505050505              add eax, 05050505
:00467466 0505050505              add eax, 05050505
:0046746B 0505050505              add eax, 05050505
:00467470 0505050505              add eax, 05050505
:00467475 0505050505              add eax, 05050505
:0046747A 0505050505              add eax, 05050505
:0046747F 0505050505              add eax, 05050505
:00467484 03                      BYTE 03h
:00467485 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:004672C8   , :00468040   
|
:00467486 55                      push ebp
:00467487 8BEC                    mov ebp, esp
:00467489 83EC0C                  sub esp, 0000000C
:0046748C 8B4514                  mov eax, dword ptr [ebp+14]
:0046748F 8945F8                  mov dword ptr [ebp-08], eax
:00467492 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467495 894DFC                  mov dword ptr [ebp-04], ecx
:00467498 817D1002040000          cmp dword ptr [ebp+10], 00000402
:0046749F 7404                    je 004674A5
:004674A1 33C0                    xor eax, eax
:004674A3 EB6F                    jmp 00467514

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046749F(C)
|
:004674A5 8B55F8                  mov edx, dword ptr [ebp-08]
:004674A8 8B4208                  mov eax, dword ptr [edx+08]
:004674AB 8945F4                  mov dword ptr [ebp-0C], eax
:004674AE 817DF46AFFFFFF          cmp dword ptr [ebp-0C], FFFFFF6A
:004674B5 740E                    je 004674C5
:004674B7 837DF494                cmp dword ptr [ebp-0C], FFFFFF94
:004674BB 741D                    je 004674DA
:004674BD 837DF497                cmp dword ptr [ebp-0C], FFFFFF97
:004674C1 7410                    je 004674D3
:004674C3 EB4D                    jmp 00467512

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004674B5(C)
|
:004674C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004674C8 51                      push ecx
:004674C9 E8FB010000              call 004676C9
:004674CE 83C404                  add esp, 00000004
:004674D1 EB41                    jmp 00467514

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004674C1(C)
|
:004674D3 B801000000              mov eax, 00000001
:004674D8 EB3A                    jmp 00467514

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004674BB(C)
|
:004674DA 6818754600              push 00467518
:004674DF 8B55FC                  mov edx, dword ptr [ebp-04]
:004674E2 8B4210                  mov eax, dword ptr [edx+10]
:004674E5 50                      push eax
:004674E6 6830100000              push 00001030
:004674EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004674EE 8B11                    mov edx, dword ptr [ecx]
:004674F0 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004674F1 FF15D8864B00            Call dword ptr [004B86D8]
:004674F7 B910584800              mov ecx, 00485810
:004674FC E83F8AFBFF              call 0041FF40
:00467501 8B4508                  mov eax, dword ptr [ebp+08]
:00467504 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00467505 FF15A4864B00            Call dword ptr [004B86A4]
:0046750B B801000000              mov eax, 00000001
:00467510 EB02                    jmp 00467514

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004674C3(U)
|
:00467512 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004674A3(U), :004674D1(U), :004674D8(U), :00467510(U)
|
:00467514 8BE5                    mov esp, ebp
:00467516 5D                      pop ebp
:00467517 C3                      ret


:00467518 55                      push ebp
:00467519 8BEC                    mov ebp, esp
:0046751B 83EC14                  sub esp, 00000014
:0046751E 53                      push ebx
:0046751F 56                      push esi
:00467520 8B4508                  mov eax, dword ptr [ebp+08]
:00467523 8945F8                  mov dword ptr [ebp-08], eax
:00467526 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00467529 894DF4                  mov dword ptr [ebp-0C], ecx
:0046752C 837DF800                cmp dword ptr [ebp-08], 00000000
:00467530 0F8453010000            je 00467689
:00467536 837DF400                cmp dword ptr [ebp-0C], 00000000
:0046753A 0F8449010000            je 00467689
:00467540 8B5510                  mov edx, dword ptr [ebp+10]
:00467543 8955EC                  mov dword ptr [ebp-14], edx
:00467546 837DEC09                cmp dword ptr [ebp-14], 00000009
:0046754A 0F8732010000            ja 00467682
:00467550 8B45EC                  mov eax, dword ptr [ebp-14]
:00467553 FF2485A1764600          jmp dword ptr [4*eax+004676A1]
:0046755A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046755D E89ED8FBFF              call 00424E00
:00467562 8BF0                    mov esi, eax
:00467564 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00467567 E894D8FBFF              call 00424E00
:0046756C 2BF0                    sub esi, eax
:0046756E 8975FC                  mov dword ptr [ebp-04], esi
:00467571 E913010000              jmp 00467689
:00467576 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00467579 E842AEF9FF              call 004023C0
:0046757E 8BF0                    mov esi, eax
:00467580 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467583 E838AEF9FF              call 004023C0
:00467588 2BF0                    sub esi, eax
:0046758A 8975FC                  mov dword ptr [ebp-04], esi
:0046758D E9F7000000              jmp 00467689
:00467592 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00467595 E859AEF9FF              call 004023F3
:0046759A 8BF0                    mov esi, eax
:0046759C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046759F E84FAEF9FF              call 004023F3
:004675A4 2BF0                    sub esi, eax
:004675A6 8975FC                  mov dword ptr [ebp-04], esi
:004675A9 E9DB000000              jmp 00467689
:004675AE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004675B1 E870AEF9FF              call 00402426
:004675B6 8BF0                    mov esi, eax
:004675B8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004675BB E866AEF9FF              call 00402426
:004675C0 2BF0                    sub esi, eax
:004675C2 8975FC                  mov dword ptr [ebp-04], esi
:004675C5 E9BF000000              jmp 00467689
:004675CA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004675CD E8DBAEF9FF              call 004024AD
:004675D2 8BF0                    mov esi, eax
:004675D4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004675D7 E8D1AEF9FF              call 004024AD
:004675DC 2BF0                    sub esi, eax
:004675DE 8975FC                  mov dword ptr [ebp-04], esi
:004675E1 E9A3000000              jmp 00467689
:004675E6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004675E9 E8F2AEF9FF              call 004024E0
:004675EE 8BF0                    mov esi, eax
:004675F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004675F3 E8E8AEF9FF              call 004024E0
:004675F8 2BF0                    sub esi, eax
:004675FA 8975FC                  mov dword ptr [ebp-04], esi
:004675FD E987000000              jmp 00467689
:00467602 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00467605 E807AFF9FF              call 00402511
:0046760A 8BF0                    mov esi, eax
:0046760C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046760F E8FDAEF9FF              call 00402511
:00467614 2BF0                    sub esi, eax
:00467616 8975FC                  mov dword ptr [ebp-04], esi
:00467619 EB6E                    jmp 00467689
:0046761B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046761E E821AFF9FF              call 00402544
:00467623 8BF0                    mov esi, eax
:00467625 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467628 E817AFF9FF              call 00402544
:0046762D 2BF0                    sub esi, eax
:0046762F 8975FC                  mov dword ptr [ebp-04], esi
:00467632 EB55                    jmp 00467689
:00467634 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00467637 E8C0AFF9FF              call 004025FC
:0046763C 8AD8                    mov bl, al
:0046763E 81E3FF000000            and ebx, 000000FF
:00467644 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467647 E8B0AFF9FF              call 004025FC
:0046764C 25FF000000              and eax, 000000FF
:00467651 2BD8                    sub ebx, eax
:00467653 895DFC                  mov dword ptr [ebp-04], ebx
:00467656 EB31                    jmp 00467689
:00467658 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046765B 83E901                  sub ecx, 00000001
:0046765E 894DF0                  mov dword ptr [ebp-10], ecx
:00467661 8B55F0                  mov edx, dword ptr [ebp-10]
:00467664 52                      push edx
:00467665 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00467668 E8C59DF9FF              call 00401432
:0046766D 8BF0                    mov esi, eax
:0046766F 8B45F0                  mov eax, dword ptr [ebp-10]
:00467672 50                      push eax
:00467673 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467676 E8B79DF9FF              call 00401432
:0046767B 2BF0                    sub esi, eax
:0046767D 8975FC                  mov dword ptr [ebp-04], esi
:00467680 EB07                    jmp 00467689

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046754A(C)
|
:00467682 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467530(C), :0046753A(C), :00467571(U), :0046758D(U), :004675A9(U)
|:004675C5(U), :004675E1(U), :004675FD(U), :00467619(U), :00467632(U)
|:00467656(U), :00467680(U)
|
:00467689 B910584800              mov ecx, 00485810
:0046768E E8ED88FBFF              call 0041FF80
:00467693 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467696 0FAFC1                  imul eax, ecx
:00467699 5E                      pop esi
:0046769A 5B                      pop ebx
:0046769B 8BE5                    mov esp, ebp
:0046769D 5D                      pop ebp
:0046769E C20C00                  ret 000C



:004676A1 5A754600                DWORD 0046755A
:004676A5 76754600                DWORD 00467576
:004676A9 92754600                DWORD 00467592
:004676AD AE754600                DWORD 004675AE
:004676B1 CA754600                DWORD 004675CA
:004676B5 E6754600                DWORD 004675E6
:004676B9 02764600                DWORD 00467602
:004676BD 1B764600                DWORD 0046761B
:004676C1 34764600                DWORD 00467634
:004676C5 58764600                DWORD 00467658



* Referenced by a CALL at Address:
|:004674C9   
|
:004676C9 55                      push ebp
:004676CA 8BEC                    mov ebp, esp
:004676CC 83EC0C                  sub esp, 0000000C
:004676CF 8B4508                  mov eax, dword ptr [ebp+08]
:004676D2 8B482C                  mov ecx, dword ptr [eax+2C]
:004676D5 894DFC                  mov dword ptr [ebp-04], ecx
:004676D8 837DFC00                cmp dword ptr [ebp-04], 00000000
:004676DC 750A                    jne 004676E8
:004676DE B801000000              mov eax, 00000001
:004676E3 E9BC010000              jmp 004678A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004676DC(C)
|
:004676E8 8B5508                  mov edx, dword ptr [ebp+08]
:004676EB 8B4214                  mov eax, dword ptr [edx+14]
:004676EE 8945F8                  mov dword ptr [ebp-08], eax
:004676F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004676F4 894DF4                  mov dword ptr [ebp-0C], ecx
:004676F7 837DF408                cmp dword ptr [ebp-0C], 00000008
:004676FB 0F876C010000            ja 0046786D
:00467701 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467704 FF2495A8784600          jmp dword ptr [4*edx+004678A8]
:0046770B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046770E E88FC4F9FF              call 00403BA2
:00467713 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467716 894120                  mov dword ptr [ecx+20], eax
:00467719 E981010000              jmp 0046789F
:0046771E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467721 E89AACF9FF              call 004023C0
:00467726 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467727 6860E94700              push 0047E960
:0046772C 6898184B00              push 004B1898
:00467731 E89CBEFFFF              call 004635D2
:00467736 83C40C                  add esp, 0000000C
:00467739 8B5508                  mov edx, dword ptr [ebp+08]
:0046773C C7422098184B00          mov [edx+20], 004B1898
:00467743 E957010000              jmp 0046789F
:00467748 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046774B E8A3ACF9FF              call 004023F3
:00467750 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467751 6864E94700              push 0047E964
:00467756 6898184B00              push 004B1898
:0046775B E872BEFFFF              call 004635D2
:00467760 83C40C                  add esp, 0000000C
:00467763 8B4508                  mov eax, dword ptr [ebp+08]
:00467766 C7402098184B00          mov [eax+20], 004B1898
:0046776D E92D010000              jmp 0046789F
:00467772 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467775 E8ACACF9FF              call 00402426
:0046777A 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046777B 6868E94700              push 0047E968
:00467780 6898184B00              push 004B1898
:00467785 E848BEFFFF              call 004635D2
:0046778A 83C40C                  add esp, 0000000C
:0046778D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467790 C7412098184B00          mov [ecx+20], 004B1898
:00467797 E903010000              jmp 0046789F
:0046779C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046779F E809ADF9FF              call 004024AD
:004677A4 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:004677A5 686CE94700              push 0047E96C
:004677AA 6898184B00              push 004B1898
:004677AF E81EBEFFFF              call 004635D2
:004677B4 83C40C                  add esp, 0000000C
:004677B7 8B5508                  mov edx, dword ptr [ebp+08]
:004677BA C7422098184B00          mov [edx+20], 004B1898
:004677C1 E9D9000000              jmp 0046789F
:004677C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004677C9 E812ADF9FF              call 004024E0
:004677CE 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:004677CF 6870E94700              push 0047E970
:004677D4 6898184B00              push 004B1898
:004677D9 E8F4BDFFFF              call 004635D2
:004677DE 83C40C                  add esp, 0000000C
:004677E1 8B4508                  mov eax, dword ptr [ebp+08]
:004677E4 C7402098184B00          mov [eax+20], 004B1898
:004677EB E9AF000000              jmp 0046789F
:004677F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004677F3 E819ADF9FF              call 00402511
:004677F8 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:004677F9 6874E94700              push 0047E974
:004677FE 6898184B00              push 004B1898
:00467803 E8CABDFFFF              call 004635D2
:00467808 83C40C                  add esp, 0000000C
:0046780B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046780E C7412098184B00          mov [ecx+20], 004B1898
:00467815 E985000000              jmp 0046789F
:0046781A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046781D E822ADF9FF              call 00402544
:00467822 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467823 6878E94700              push 0047E978
:00467828 6898184B00              push 004B1898
:0046782D E8A0BDFFFF              call 004635D2
:00467832 83C40C                  add esp, 0000000C
:00467835 8B5508                  mov edx, dword ptr [ebp+08]
:00467838 C7422098184B00          mov [edx+20], 004B1898
:0046783F EB5E                    jmp 0046789F
:00467841 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467844 E8B3ADF9FF              call 004025FC
:00467849 25FF000000              and eax, 000000FF
:0046784E 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046784F 687CE94700              push 0047E97C
:00467854 6898184B00              push 004B1898
:00467859 E874BDFFFF              call 004635D2
:0046785E 83C40C                  add esp, 0000000C
:00467861 8B4508                  mov eax, dword ptr [ebp+08]
:00467864 C7402098184B00          mov [eax+20], 004B1898
:0046786B EB32                    jmp 0046789F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004676FB(C)
|
:0046786D 837DF811                cmp dword ptr [ebp-08], 00000011
:00467871 732C                    jnb 0046789F
:00467873 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467876 83E901                  sub ecx, 00000001
:00467879 51                      push ecx
:0046787A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046787D E8B09BF9FF              call 00401432
:00467882 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467883 6880E94700              push 0047E980
:00467888 6898184B00              push 004B1898
:0046788D E840BDFFFF              call 004635D2
:00467892 83C40C                  add esp, 0000000C
:00467895 8B5508                  mov edx, dword ptr [ebp+08]
:00467898 C7422098184B00          mov [edx+20], 004B1898

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467719(U), :00467743(U), :0046776D(U), :00467797(U), :004677C1(U)
|:004677EB(U), :00467815(U), :0046783F(U), :0046786B(U), :00467871(C)
|
:0046789F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004676E3(U)
|
:004678A4 8BE5                    mov esp, ebp
:004678A6 5D                      pop ebp
:004678A7 C3                      ret



:004678A8 0B774600                DWORD 0046770B
:004678AC 1E774600                DWORD 0046771E
:004678B0 48774600                DWORD 00467748
:004678B4 72774600                DWORD 00467772
:004678B8 9C774600                DWORD 0046779C
:004678BC C6774600                DWORD 004677C6
:004678C0 F0774600                DWORD 004677F0
:004678C4 1A784600                DWORD 0046781A
:004678C8 41784600                DWORD 00467841



* Referenced by a CALL at Addresses:
|:0046722F   , :00467FA5   , :00468110   , :00468131   
|
:004678CC 55                      push ebp
:004678CD 8BEC                    mov ebp, esp
:004678CF 83EC6C                  sub esp, 0000006C

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:004678D2 6802040000              push 00000402
:004678D7 8B4508                  mov eax, dword ptr [ebp+08]
:004678DA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004678DB FF15AC864B00            Call dword ptr [004B86AC]
:004678E1 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to String Resource ID=00015: ""
                                  |
:004678E4 C745D40F000000          mov [ebp-2C], 0000000F
:004678EB C745D800000000          mov [ebp-28], 00000000
:004678F2 6A00                    push 00000000
:004678F4 6A00                    push 00000000
:004678F6 6809100000              push 00001009
:004678FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004678FE 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004678FF FF15D8864B00            Call dword ptr [004B86D8]
:00467905 894594                  mov dword ptr [ebp-6C], eax
:00467908 837D1000                cmp dword ptr [ebp+10], 00000000
:0046790C 0F84FE000000            je 00467A10
:00467912 C745F800000000          mov [ebp-08], 00000000
:00467919 EB09                    jmp 00467924

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467A0B(U)
|
:0046791B 8B55F8                  mov edx, dword ptr [ebp-08]
:0046791E 83C201                  add edx, 00000001
:00467921 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467919(U)
|
:00467924 837DF80A                cmp dword ptr [ebp-08], 0000000A
:00467928 0F83E2000000            jnb 00467A10
:0046792E 8B45F8                  mov eax, dword ptr [ebp-08]
:00467931 8945E8                  mov dword ptr [ebp-18], eax
:00467934 837DF800                cmp dword ptr [ebp-08], 00000000
:00467938 0F8496000000            je 004679D4
:0046793E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467941 83E901                  sub ecx, 00000001
:00467944 83F905                  cmp ecx, 00000005
:00467947 740B                    je 00467954
:00467949 8B55F8                  mov edx, dword ptr [ebp-08]
:0046794C 83EA01                  sub edx, 00000001
:0046794F 83FA04                  cmp edx, 00000004
:00467952 751F                    jne 00467973

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467947(C)
|
:00467954 C645C000                mov [ebp-40], 00

* Possible StringData Ref from Data Obj ->"@["
                                  |
:00467958 6884E94700              push 0047E984
:0046795D 6A00                    push 00000000
:0046795F 6811100000              push 00001011
:00467964 8B45FC                  mov eax, dword ptr [ebp-04]
:00467967 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467968 FF15D8864B00            Call dword ptr [004B86D8]
:0046796E 8945DC                  mov dword ptr [ebp-24], eax
:00467971 EB42                    jmp 004679B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467952(C)
|
:00467973 837DF809                cmp dword ptr [ebp-08], 00000009
:00467977 751F                    jne 00467998
:00467979 C645C000                mov [ebp-40], 00

* Possible StringData Ref from Data Obj ->"š"
                                  |
:0046797D 688CE94700              push 0047E98C
:00467982 6A00                    push 00000000
:00467984 6811100000              push 00001011
:00467989 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046798C 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046798D FF15D8864B00            Call dword ptr [004B86D8]
:00467993 8945DC                  mov dword ptr [ebp-24], eax
:00467996 EB1D                    jmp 004679B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467977(C)
|
:00467998 C645C000                mov [ebp-40], 00

* Possible StringData Ref from Data Obj ->"R"
                                  |
:0046799C 6894E94700              push 0047E994
:004679A1 6A00                    push 00000000
:004679A3 6811100000              push 00001011
:004679A8 8B55FC                  mov edx, dword ptr [ebp-04]
:004679AB 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004679AC FF15D8864B00            Call dword ptr [004B86D8]
:004679B2 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467971(U), :00467996(U)
|
:004679B5 8B45F8                  mov eax, dword ptr [ebp-08]
:004679B8 8B0C85FC7B4700          mov ecx, dword ptr [4*eax+00477BFC]
:004679BF 51                      push ecx
:004679C0 8D55C0                  lea edx, dword ptr [ebp-40]
:004679C3 52                      push edx
:004679C4 E855ACFFFF              call 0046261E
:004679C9 83C408                  add esp, 00000008
:004679CC 8D45C0                  lea eax, dword ptr [ebp-40]
:004679CF 8945E0                  mov dword ptr [ebp-20], eax
:004679D2 EB20                    jmp 004679F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467938(C)
|

* Possible StringData Ref from Data Obj ->"ZNW"
                                  |
:004679D4 C745E09CE94700          mov [ebp-20], 0047E99C

* Possible StringData Ref from Data Obj ->"vڳˡ"
                                  |
:004679DB 68A4E94700              push 0047E9A4
:004679E0 6A00                    push 00000000
:004679E2 6811100000              push 00001011
:004679E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004679EA 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004679EB FF15D8864B00            Call dword ptr [004B86D8]
:004679F1 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004679D2(U)
|
:004679F4 8D55D4                  lea edx, dword ptr [ebp-2C]
:004679F7 52                      push edx
:004679F8 8B45F8                  mov eax, dword ptr [ebp-08]
:004679FB 50                      push eax
:004679FC 681B100000              push 0000101B
:00467A01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A04 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467A05 FF15D8864B00            Call dword ptr [004B86D8]
:00467A0B E90BFFFFFF              jmp 0046791B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046790C(C), :00467928(C)
|
:00467A10 8D5598                  lea edx, dword ptr [ebp-68]
:00467A13 52                      push edx
:00467A14 E88E000000              call 00467AA7
:00467A19 83C404                  add esp, 00000004
:00467A1C C745ACFFFFFFFF          mov [ebp-54], FFFFFFFF
:00467A23 C745F400000000          mov [ebp-0C], 00000000
:00467A2A EB09                    jmp 00467A35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467A75(U)
|
:00467A2C 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467A2F 83C001                  add eax, 00000001
:00467A32 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467A2A(U)
|
:00467A35 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00467A38 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:00467A3B 733A                    jnb 00467A77
:00467A3D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467A40 89559C                  mov dword ptr [ebp-64], edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00467A43 C7459805000000          mov [ebp-68], 00000005
:00467A4A 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467A4D 8B0C85780E4B00          mov ecx, dword ptr [4*eax+004B0E78]
:00467A54 6BC970                  imul ecx, 00000070
:00467A57 81C198224900            add ecx, 00492298
:00467A5D 894DB8                  mov dword ptr [ebp-48], ecx
:00467A60 8D5598                  lea edx, dword ptr [ebp-68]
:00467A63 52                      push edx
:00467A64 6A00                    push 00000000
:00467A66 6807100000              push 00001007
:00467A6B 8B45FC                  mov eax, dword ptr [ebp-04]
:00467A6E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467A6F FF15D8864B00            Call dword ptr [004B86D8]
:00467A75 EBB5                    jmp 00467A2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467A3B(C)
|
:00467A77 68BDBDBD02              push 02BDBDBD
:00467A7C 6A00                    push 00000000
:00467A7E 6801100000              push 00001001
:00467A83 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A86 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467A87 FF15D8864B00            Call dword ptr [004B86D8]
:00467A8D 68BDBDBD02              push 02BDBDBD
:00467A92 6A00                    push 00000000
:00467A94 6826100000              push 00001026
:00467A99 8B55FC                  mov edx, dword ptr [ebp-04]
:00467A9C 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467A9D FF15D8864B00            Call dword ptr [004B86D8]
:00467AA3 8BE5                    mov esp, ebp
:00467AA5 5D                      pop ebp
:00467AA6 C3                      ret



* Referenced by a CALL at Address:
|:00467A14   
|
:00467AA7 55                      push ebp
:00467AA8 8BEC                    mov ebp, esp
:00467AAA 8B4508                  mov eax, dword ptr [ebp+08]

* Possible Reference to String Resource ID=00015: ""
                                  |
:00467AAD C7000F000000            mov dword ptr [eax], 0000000F
:00467AB3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467AB6 C7410C00000000          mov [ecx+0C], 00000000
:00467ABD 8B5508                  mov edx, dword ptr [ebp+08]
:00467AC0 C7421000000000          mov [edx+10], 00000000
:00467AC7 8B4508                  mov eax, dword ptr [ebp+08]
:00467ACA C7400800000000          mov [eax+08], 00000000
:00467AD1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467AD4 C74114FFFFFFFF          mov [ecx+14], FFFFFFFF
:00467ADB 8B5508                  mov edx, dword ptr [ebp+08]

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00467ADE C7421811000000          mov [edx+18], 00000011
:00467AE5 5D                      pop ebp
:00467AE6 C3                      ret



* Referenced by a CALL at Addresses:
|:004672DE   , :00467FDA   
|
:00467AE7 55                      push ebp
:00467AE8 8BEC                    mov ebp, esp
:00467AEA 83EC1C                  sub esp, 0000001C
:00467AED 8B4508                  mov eax, dword ptr [ebp+08]
:00467AF0 8B4814                  mov ecx, dword ptr [eax+14]
:00467AF3 894DE8                  mov dword ptr [ebp-18], ecx
:00467AF6 8B5508                  mov edx, dword ptr [ebp+08]
:00467AF9 8B4208                  mov eax, dword ptr [edx+08]
:00467AFC 50                      push eax
:00467AFD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467B00 51                      push ecx
:00467B01 E870FBFAFF              call 00417676
:00467B06 83C408                  add esp, 00000008
:00467B09 8945FC                  mov dword ptr [ebp-04], eax
:00467B0C 8B5508                  mov edx, dword ptr [ebp+08]
:00467B0F 83C21C                  add edx, 0000001C
:00467B12 8B02                    mov eax, dword ptr [edx]
:00467B14 8945EC                  mov dword ptr [ebp-14], eax
:00467B17 8B4A04                  mov ecx, dword ptr [edx+04]
:00467B1A 894DF0                  mov dword ptr [ebp-10], ecx
:00467B1D 8B4208                  mov eax, dword ptr [edx+08]
:00467B20 8945F4                  mov dword ptr [ebp-0C], eax
:00467B23 8B4A0C                  mov ecx, dword ptr [edx+0C]
:00467B26 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00467B29 6A02                    push 00000002
:00467B2B 8B5508                  mov edx, dword ptr [ebp+08]
:00467B2E 8B4208                  mov eax, dword ptr [edx+08]
:00467B31 50                      push eax
:00467B32 682C100000              push 0000102C
:00467B37 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467B3A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467B3B FF15D8864B00            Call dword ptr [004B86D8]
:00467B41 33D2                    xor edx, edx
:00467B43 83F802                  cmp eax, 00000002
:00467B46 0F94C2                  sete dl
:00467B49 8955E4                  mov dword ptr [ebp-1C], edx
:00467B4C 8B45E4                  mov eax, dword ptr [ebp-1C]
:00467B4F 50                      push eax
:00467B50 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00467B53 51                      push ecx
:00467B54 8B5508                  mov edx, dword ptr [ebp+08]
:00467B57 8B4218                  mov eax, dword ptr [edx+18]
:00467B5A 50                      push eax
:00467B5B E8D561FBFF              call 0041DD35
:00467B60 83C40C                  add esp, 0000000C
:00467B63 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00467B66 83C105                  add ecx, 00000005
:00467B69 894DEC                  mov dword ptr [ebp-14], ecx
:00467B6C 6A00                    push 00000000
:00467B6E 6A00                    push 00000000
:00467B70 681D100000              push 0000101D
:00467B75 8B55E8                  mov edx, dword ptr [ebp-18]
:00467B78 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467B79 FF15D8864B00            Call dword ptr [004B86D8]
:00467B7F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00467B82 8D5401FB                lea edx, dword ptr [ecx+eax-05]
:00467B86 8955F4                  mov dword ptr [ebp-0C], edx
:00467B89 6A00                    push 00000000
:00467B8B 6824800000              push 00008024
:00467B90 8D45EC                  lea eax, dword ptr [ebp-14]
:00467B93 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467B94 6AFF                    push FFFFFFFF
:00467B96 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467B99 E804C0F9FF              call 00403BA2
:00467B9E 50                      push eax
:00467B9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467BA2 8B5118                  mov edx, dword ptr [ecx+18]
:00467BA5 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467BA6 FF1564874B00            Call dword ptr [004B8764]
:00467BAC 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467BAF 83C00A                  add eax, 0000000A
:00467BB2 8945EC                  mov dword ptr [ebp-14], eax
:00467BB5 6A00                    push 00000000
:00467BB7 6A01                    push 00000001
:00467BB9 681D100000              push 0000101D
:00467BBE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467BC1 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467BC2 FF15D8864B00            Call dword ptr [004B86D8]
:00467BC8 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467BCB 03D0                    add edx, eax
:00467BCD 8955F4                  mov dword ptr [ebp-0C], edx
:00467BD0 6A00                    push 00000000
:00467BD2 6824800000              push 00008024
:00467BD7 8D45EC                  lea eax, dword ptr [ebp-14]
:00467BDA 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467BDB 6AFF                    push FFFFFFFF
:00467BDD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467BE0 E8DBA7F9FF              call 004023C0
:00467BE5 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467BE6 68B4E94700              push 0047E9B4
:00467BEB E8D7FCFAFF              call 004178C7
:00467BF0 83C408                  add esp, 00000008
:00467BF3 50                      push eax
:00467BF4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467BF7 8B5118                  mov edx, dword ptr [ecx+18]
:00467BFA 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467BFB FF1564874B00            Call dword ptr [004B8764]
:00467C01 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467C04 83C00A                  add eax, 0000000A
:00467C07 8945EC                  mov dword ptr [ebp-14], eax
:00467C0A 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00467C0C 6A02                    push 00000002
:00467C0E 681D100000              push 0000101D
:00467C13 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467C16 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467C17 FF15D8864B00            Call dword ptr [004B86D8]
:00467C1D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467C20 03D0                    add edx, eax
:00467C22 8955F4                  mov dword ptr [ebp-0C], edx
:00467C25 6A00                    push 00000000
:00467C27 6824800000              push 00008024
:00467C2C 8D45EC                  lea eax, dword ptr [ebp-14]
:00467C2F 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467C30 6AFF                    push FFFFFFFF
:00467C32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467C35 E8B9A7F9FF              call 004023F3
:00467C3A 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467C3B 68B8E94700              push 0047E9B8
:00467C40 E882FCFAFF              call 004178C7
:00467C45 83C408                  add esp, 00000008
:00467C48 50                      push eax
:00467C49 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467C4C 8B5118                  mov edx, dword ptr [ecx+18]
:00467C4F 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467C50 FF1564874B00            Call dword ptr [004B8764]
:00467C56 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467C59 83C00A                  add eax, 0000000A
:00467C5C 8945EC                  mov dword ptr [ebp-14], eax
:00467C5F 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00467C61 6A03                    push 00000003
:00467C63 681D100000              push 0000101D
:00467C68 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467C6B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467C6C FF15D8864B00            Call dword ptr [004B86D8]
:00467C72 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467C75 03D0                    add edx, eax
:00467C77 8955F4                  mov dword ptr [ebp-0C], edx
:00467C7A 6A00                    push 00000000
:00467C7C 6824800000              push 00008024
:00467C81 8D45EC                  lea eax, dword ptr [ebp-14]
:00467C84 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467C85 6AFF                    push FFFFFFFF
:00467C87 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467C8A E897A7F9FF              call 00402426
:00467C8F 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467C90 68BCE94700              push 0047E9BC
:00467C95 E82DFCFAFF              call 004178C7
:00467C9A 83C408                  add esp, 00000008
:00467C9D 50                      push eax
:00467C9E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467CA1 8B5118                  mov edx, dword ptr [ecx+18]
:00467CA4 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467CA5 FF1564874B00            Call dword ptr [004B8764]
:00467CAB 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467CAE 83C00A                  add eax, 0000000A
:00467CB1 8945EC                  mov dword ptr [ebp-14], eax
:00467CB4 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00467CB6 6A04                    push 00000004
:00467CB8 681D100000              push 0000101D
:00467CBD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467CC0 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467CC1 FF15D8864B00            Call dword ptr [004B86D8]
:00467CC7 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467CCA 03D0                    add edx, eax
:00467CCC 8955F4                  mov dword ptr [ebp-0C], edx
:00467CCF 6A00                    push 00000000
:00467CD1 6824800000              push 00008024
:00467CD6 8D45EC                  lea eax, dword ptr [ebp-14]
:00467CD9 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467CDA 6AFF                    push FFFFFFFF
:00467CDC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467CDF E8C9A7F9FF              call 004024AD
:00467CE4 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467CE5 68C0E94700              push 0047E9C0
:00467CEA E8D8FBFAFF              call 004178C7
:00467CEF 83C408                  add esp, 00000008
:00467CF2 50                      push eax
:00467CF3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467CF6 8B5118                  mov edx, dword ptr [ecx+18]
:00467CF9 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467CFA FF1564874B00            Call dword ptr [004B8764]
:00467D00 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467D03 83C00A                  add eax, 0000000A
:00467D06 8945EC                  mov dword ptr [ebp-14], eax
:00467D09 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00467D0B 6A05                    push 00000005
:00467D0D 681D100000              push 0000101D
:00467D12 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467D15 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467D16 FF15D8864B00            Call dword ptr [004B86D8]
:00467D1C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467D1F 03D0                    add edx, eax
:00467D21 8955F4                  mov dword ptr [ebp-0C], edx
:00467D24 6A00                    push 00000000
:00467D26 6824800000              push 00008024
:00467D2B 8D45EC                  lea eax, dword ptr [ebp-14]
:00467D2E 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467D2F 6AFF                    push FFFFFFFF
:00467D31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467D34 E8A7A7F9FF              call 004024E0
:00467D39 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467D3A 68C4E94700              push 0047E9C4
:00467D3F E883FBFAFF              call 004178C7
:00467D44 83C408                  add esp, 00000008
:00467D47 50                      push eax
:00467D48 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467D4B 8B5118                  mov edx, dword ptr [ecx+18]
:00467D4E 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467D4F FF1564874B00            Call dword ptr [004B8764]
:00467D55 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467D58 83C00A                  add eax, 0000000A
:00467D5B 8945EC                  mov dword ptr [ebp-14], eax
:00467D5E 6A00                    push 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:00467D60 6A06                    push 00000006
:00467D62 681D100000              push 0000101D
:00467D67 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467D6A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467D6B FF15D8864B00            Call dword ptr [004B86D8]
:00467D71 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467D74 03D0                    add edx, eax
:00467D76 8955F4                  mov dword ptr [ebp-0C], edx
:00467D79 6A00                    push 00000000
:00467D7B 6824800000              push 00008024
:00467D80 8D45EC                  lea eax, dword ptr [ebp-14]
:00467D83 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467D84 6AFF                    push FFFFFFFF
:00467D86 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467D89 E883A7F9FF              call 00402511
:00467D8E 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467D8F 68C8E94700              push 0047E9C8
:00467D94 E82EFBFAFF              call 004178C7
:00467D99 83C408                  add esp, 00000008
:00467D9C 50                      push eax
:00467D9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467DA0 8B5118                  mov edx, dword ptr [ecx+18]
:00467DA3 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467DA4 FF1564874B00            Call dword ptr [004B8764]
:00467DAA 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467DAD 83C00A                  add eax, 0000000A
:00467DB0 8945EC                  mov dword ptr [ebp-14], eax
:00467DB3 6A00                    push 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00467DB5 6A07                    push 00000007
:00467DB7 681D100000              push 0000101D
:00467DBC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467DBF 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467DC0 FF15D8864B00            Call dword ptr [004B86D8]
:00467DC6 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467DC9 03D0                    add edx, eax
:00467DCB 8955F4                  mov dword ptr [ebp-0C], edx
:00467DCE 6A00                    push 00000000
:00467DD0 6824800000              push 00008024
:00467DD5 8D45EC                  lea eax, dword ptr [ebp-14]
:00467DD8 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467DD9 6AFF                    push FFFFFFFF
:00467DDB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467DDE E861A7F9FF              call 00402544
:00467DE3 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467DE4 68CCE94700              push 0047E9CC
:00467DE9 E8D9FAFAFF              call 004178C7
:00467DEE 83C408                  add esp, 00000008
:00467DF1 50                      push eax
:00467DF2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467DF5 8B5118                  mov edx, dword ptr [ecx+18]
:00467DF8 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467DF9 FF1564874B00            Call dword ptr [004B8764]
:00467DFF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467E02 83C00A                  add eax, 0000000A
:00467E05 8945EC                  mov dword ptr [ebp-14], eax
:00467E08 6A00                    push 00000000

* Possible Reference to String Resource ID=00008: ""
                                  |
:00467E0A 6A08                    push 00000008
:00467E0C 681D100000              push 0000101D
:00467E11 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467E14 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467E15 FF15D8864B00            Call dword ptr [004B86D8]
:00467E1B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467E1E 03D0                    add edx, eax
:00467E20 8955F4                  mov dword ptr [ebp-0C], edx
:00467E23 6A00                    push 00000000
:00467E25 6824800000              push 00008024
:00467E2A 8D45EC                  lea eax, dword ptr [ebp-14]
:00467E2D 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467E2E 6AFF                    push FFFFFFFF
:00467E30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467E33 E8C4A7F9FF              call 004025FC
:00467E38 25FF000000              and eax, 000000FF
:00467E3D 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467E3E 68D0E94700              push 0047E9D0
:00467E43 E87FFAFAFF              call 004178C7
:00467E48 83C408                  add esp, 00000008
:00467E4B 50                      push eax
:00467E4C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467E4F 8B5118                  mov edx, dword ptr [ecx+18]
:00467E52 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467E53 FF1564874B00            Call dword ptr [004B8764]
:00467E59 8B45F4                  mov eax, dword ptr [ebp-0C]
:00467E5C 83C00A                  add eax, 0000000A
:00467E5F 8945EC                  mov dword ptr [ebp-14], eax
:00467E62 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00467E64 6A09                    push 00000009
:00467E66 681D100000              push 0000101D
:00467E6B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00467E6E 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00467E6F FF15D8864B00            Call dword ptr [004B86D8]
:00467E75 8B55F4                  mov edx, dword ptr [ebp-0C]
:00467E78 03D0                    add edx, eax
:00467E7A 8955F4                  mov dword ptr [ebp-0C], edx
:00467E7D 6A00                    push 00000000
:00467E7F 6824800000              push 00008024
:00467E84 8D45EC                  lea eax, dword ptr [ebp-14]
:00467E87 50                      push eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00467E88 6AFF                    push FFFFFFFF
:00467E8A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467E8D E83EC9F9FF              call 004047D0
:00467E92 25FF000000              and eax, 000000FF
:00467E97 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00467E98 68D4E94700              push 0047E9D4
:00467E9D E825FAFAFF              call 004178C7
:00467EA2 83C408                  add esp, 00000008
:00467EA5 50                      push eax
:00467EA6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467EA9 8B5118                  mov edx, dword ptr [ecx+18]
:00467EAC 52                      push edx

* Reference To: USER32.DrawTextExA, Ord:00ABh
                                  |
:00467EAD FF1564874B00            Call dword ptr [004B8764]
:00467EB3 8BE5                    mov esp, ebp
:00467EB5 5D                      pop ebp
:00467EB6 C3                      ret



* Referenced by a CALL at Addresses:
|:0046801A   , :004680E0   
|
:00467EB7 55                      push ebp
:00467EB8 8BEC                    mov ebp, esp
:00467EBA 83EC08                  sub esp, 00000008
:00467EBD A1D8534800              mov eax, dword ptr [004853D8]
:00467EC2 50                      push eax
:00467EC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467EC6 51                      push ecx
:00467EC7 E856F2FFFF              call 00467122
:00467ECC 83C408                  add esp, 00000008
:00467ECF 8945FC                  mov dword ptr [ebp-04], eax
:00467ED2 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:00467ED9 7430                    je 00467F0B
:00467EDB 8B55FC                  mov edx, dword ptr [ebp-04]
:00467EDE 52                      push edx
:00467EDF E863EDFFFF              call 00466C47
:00467EE4 83C404                  add esp, 00000004
:00467EE7 8945F8                  mov dword ptr [ebp-08], eax
:00467EEA 817DF8FFFF0000          cmp dword ptr [ebp-08], 0000FFFF
:00467EF1 7418                    je 00467F0B
:00467EF3 B9A8034B00              mov ecx, 004B03A8
:00467EF8 E8E3CAFDFF              call 004449E0
:00467EFD 8A45F8                  mov al, byte ptr [ebp-08]
:00467F00 50                      push eax
:00467F01 B9A8034B00              mov ecx, 004B03A8
:00467F06 E85ADDFDFF              call 00445C65

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467ED9(C), :00467EF1(C)
|
:00467F0B 8BE5                    mov esp, ebp
:00467F0D 5D                      pop ebp
:00467F0E C3                      ret


:00467F0F 55                      push ebp
:00467F10 8BEC                    mov ebp, esp
:00467F12 83EC1C                  sub esp, 0000001C

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:00467F15 6802040000              push 00000402
:00467F1A 8B4508                  mov eax, dword ptr [ebp+08]
:00467F1D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00467F1E FF15AC864B00            Call dword ptr [004B86AC]
:00467F24 8945FC                  mov dword ptr [ebp-04], eax
:00467F27 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00467F2A 894DEC                  mov dword ptr [ebp-14], ecx
:00467F2D 837DEC0F                cmp dword ptr [ebp-14], 0000000F
:00467F31 7719                    ja 00467F4C
:00467F33 837DEC0F                cmp dword ptr [ebp-14], 0000000F
:00467F37 0F8412020000            je 0046814F
:00467F3D 837DEC05                cmp dword ptr [ebp-14], 00000005
:00467F41 0F84F4010000            je 0046813B
:00467F47 E92C020000              jmp 00468178

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467F31(C)
|
:00467F4C 8B55EC                  mov edx, dword ptr [ebp-14]
:00467F4F 83EA24                  sub edx, 00000024
:00467F52 8955EC                  mov dword ptr [ebp-14], edx
:00467F55 817DECED000000          cmp dword ptr [ebp-14], 000000ED
:00467F5C 0F8716020000            ja 00468178
:00467F62 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00467F65 33C0                    xor eax, eax
:00467F67 8A819F814600            mov al, byte ptr [ecx+0046819F]
:00467F6D FF248587814600          jmp dword ptr [4*eax+00468187]
:00467F74 6A01                    push 00000001
:00467F76 6809040000              push 00000409
:00467F7B 8B5508                  mov edx, dword ptr [ebp+08]
:00467F7E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00467F7F FF15AC864B00            Call dword ptr [004B86AC]
:00467F85 50                      push eax
:00467F86 E8759FFAFF              call 00411F00
:00467F8B 83C408                  add esp, 00000008
:00467F8E 6A01                    push 00000001
:00467F90 E8D7EDFFFF              call 00466D6C
:00467F95 83C404                  add esp, 00000004
:00467F98 8945F8                  mov dword ptr [ebp-08], eax
:00467F9B 6A01                    push 00000001
:00467F9D 8B45F8                  mov eax, dword ptr [ebp-08]
:00467FA0 50                      push eax
:00467FA1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467FA4 51                      push ecx
:00467FA5 E822F9FFFF              call 004678CC
:00467FAA 83C40C                  add esp, 0000000C
:00467FAD 6889000000              push 00000089
:00467FB2 8B15300E4B00            mov edx, dword ptr [004B0E30]
:00467FB8 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00467FB9 FF15E8864B00            Call dword ptr [004B86E8]
:00467FBF 50                      push eax
:00467FC0 6ADE                    push FFFFFFDE
:00467FC2 8B4508                  mov eax, dword ptr [ebp+08]
:00467FC5 50                      push eax

* Reference To: USER32.SetClassLongA, Ord:01E6h
                                  |
:00467FC6 FF15A0874B00            Call dword ptr [004B87A0]
:00467FCC B801000000              mov eax, 00000001
:00467FD1 E9AB010000              jmp 00468181
:00467FD6 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467FD9 51                      push ecx
:00467FDA E808FBFFFF              call 00467AE7
:00467FDF 83C404                  add esp, 00000004
:00467FE2 E995010000              jmp 0046817C
:00467FE7 8B5514                  mov edx, dword ptr [ebp+14]
:00467FEA 8B4208                  mov eax, dword ptr [edx+08]
:00467FED 8945E8                  mov dword ptr [ebp-18], eax
:00467FF0 837DE89B                cmp dword ptr [ebp-18], FFFFFF9B
:00467FF4 7402                    je 00467FF8
:00467FF6 EB38                    jmp 00468030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467FF4(C)
|
:00467FF8 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467FFB 894DF4                  mov dword ptr [ebp-0C], ecx
:00467FFE 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468001 817A0C85020000          cmp dword ptr [edx+0C], 00000285
:00468008 7D0C                    jge 00468016
:0046800A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046800D 8B480C                  mov ecx, dword ptr [eax+0C]
:00468010 890DD8534800            mov dword ptr [004853D8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468008(C)
|
:00468016 8B55FC                  mov edx, dword ptr [ebp-04]
:00468019 52                      push edx
:0046801A E898FEFFFF              call 00467EB7
:0046801F 83C404                  add esp, 00000004
:00468022 A1700E4B00              mov eax, dword ptr [004B0E70]
:00468027 50                      push eax

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:00468028 FF1528874B00            Call dword ptr [004B8728]
:0046802E EB1D                    jmp 0046804D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467FF6(U)
|
:00468030 8B4D14                  mov ecx, dword ptr [ebp+14]
:00468033 51                      push ecx
:00468034 8B5510                  mov edx, dword ptr [ebp+10]
:00468037 52                      push edx
:00468038 8B450C                  mov eax, dword ptr [ebp+0C]
:0046803B 50                      push eax
:0046803C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046803F 51                      push ecx
:00468040 E841F4FFFF              call 00467486
:00468045 83C410                  add esp, 00000010
:00468048 E934010000              jmp 00468181

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046802E(U)
|
:0046804D E92A010000              jmp 0046817C
:00468052 8B5510                  mov edx, dword ptr [ebp+10]
:00468055 81E2FFFF0000            and edx, 0000FFFF
:0046805B 8955E4                  mov dword ptr [ebp-1C], edx
:0046805E 817DE409040000          cmp dword ptr [ebp-1C], 00000409
:00468065 7F1E                    jg 00468085
:00468067 817DE409040000          cmp dword ptr [ebp-1C], 00000409
:0046806E 0F8485000000            je 004680F9
:00468074 837DE401                cmp dword ptr [ebp-1C], 00000001
:00468078 7446                    je 004680C0
:0046807A 837DE402                cmp dword ptr [ebp-1C], 00000002
:0046807E 7420                    je 004680A0
:00468080 E9B4000000              jmp 00468139

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468065(C)
|
:00468085 817DE413040000          cmp dword ptr [ebp-1C], 00000413
:0046808C 0F8488000000            je 0046811A
:00468092 817DE4A9040000          cmp dword ptr [ebp-1C], 000004A9
:00468099 744F                    je 004680EA
:0046809B E999000000              jmp 00468139

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046807E(C)
|
:004680A0 B9500E4B00              mov ecx, 004B0E50
:004680A5 E80DC5FFFF              call 004645B7
:004680AA B9A8034B00              mov ecx, 004B03A8
:004680AF E82CC9FDFF              call 004449E0
:004680B4 C705400A4B0000000000    mov dword ptr [004B0A40], 00000000
:004680BE EB79                    jmp 00468139

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468078(C)
|
:004680C0 6A00                    push 00000000
:004680C2 6A00                    push 00000000
:004680C4 6832100000              push 00001032
:004680C9 8B45FC                  mov eax, dword ptr [ebp-04]
:004680CC 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004680CD FF15D8864B00            Call dword ptr [004B86D8]
:004680D3 8945F0                  mov dword ptr [ebp-10], eax
:004680D6 837DF001                cmp dword ptr [ebp-10], 00000001
:004680DA 750C                    jne 004680E8
:004680DC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004680DF 51                      push ecx
:004680E0 E8D2FDFFFF              call 00467EB7
:004680E5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004680DA(C)
|
:004680E8 EB4F                    jmp 00468139

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468099(C)
|
:004680EA 68C80F0000              push 00000FC8
:004680EF E86EB8FFFF              call 00463962
:004680F4 83C404                  add esp, 00000004
:004680F7 EB40                    jmp 00468139

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046806E(C)
|
:004680F9 6A01                    push 00000001
:004680FB E86CECFFFF              call 00466D6C
:00468100 83C404                  add esp, 00000004
:00468103 8945F8                  mov dword ptr [ebp-08], eax
:00468106 6A00                    push 00000000
:00468108 8B55F8                  mov edx, dword ptr [ebp-08]
:0046810B 52                      push edx
:0046810C 8B4508                  mov eax, dword ptr [ebp+08]
:0046810F 50                      push eax
:00468110 E8B7F7FFFF              call 004678CC
:00468115 83C40C                  add esp, 0000000C
:00468118 EB1F                    jmp 00468139

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046808C(C)
|
:0046811A 6A00                    push 00000000
:0046811C E84BECFFFF              call 00466D6C
:00468121 83C404                  add esp, 00000004
:00468124 8945F8                  mov dword ptr [ebp-08], eax
:00468127 6A00                    push 00000000
:00468129 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046812C 51                      push ecx
:0046812D 8B5508                  mov edx, dword ptr [ebp+08]
:00468130 52                      push edx
:00468131 E896F7FFFF              call 004678CC
:00468136 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468080(U), :0046809B(U), :004680BE(U), :004680E8(U), :004680F7(U)
|:00468118(U)
|
:00468139 EB41                    jmp 0046817C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467F41(C)
|
:0046813B 6A01                    push 00000001
:0046813D 8B4514                  mov eax, dword ptr [ebp+14]
:00468140 50                      push eax
:00468141 8B4D08                  mov ecx, dword ptr [ebp+08]
:00468144 51                      push ecx
:00468145 E877010000              call 004682C1
:0046814A 83C40C                  add esp, 0000000C
:0046814D EB2D                    jmp 0046817C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467F37(C)
|
:0046814F 6842010000              push 00000142
:00468154 8B5508                  mov edx, dword ptr [ebp+08]
:00468157 52                      push edx
:00468158 E8912CFFFF              call 0045ADEE
:0046815D 83C408                  add esp, 00000008
:00468160 EB1A                    jmp 0046817C
:00468162 6A01                    push 00000001
:00468164 8B4514                  mov eax, dword ptr [ebp+14]
:00468167 50                      push eax
:00468168 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046816B 51                      push ecx
:0046816C E807040000              call 00468578
:00468171 83C40C                  add esp, 0000000C
:00468174 33C0                    xor eax, eax
:00468176 EB09                    jmp 00468181

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467F47(U), :00467F5C(C)
|
:00468178 33C0                    xor eax, eax
:0046817A EB05                    jmp 00468181

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467FE2(U), :0046804D(U), :00468139(U), :0046814D(U), :00468160(U)
|
:0046817C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467FD1(U), :00468048(U), :00468176(U), :0046817A(U)
|
:00468181 8BE5                    mov esp, ebp
:00468183 5D                      pop ebp
:00468184 C21000                  ret 0010



:00468187 62814600                DWORD 00468162
:0046818B D67F4600                DWORD 00467FD6
:0046818F E77F4600                DWORD 00467FE7
:00468193 747F4600                DWORD 00467F74
:00468197 52804600                DWORD 00468052
:0046819B 78814600                DWORD 00468178


:0046819F 000505050505            add byte ptr [05050505], al
:004681A5 0501050505              add eax, 05050501
:004681AA 0505050505              add eax, 05050505
:004681AF 0505050505              add eax, 05050505
:004681B4 0505050505              add eax, 05050505
:004681B9 0505050505              add eax, 05050505
:004681BE 0505050505              add eax, 05050505
:004681C3 0505050505              add eax, 05050505
:004681C8 0502050505              add eax, 05050502
:004681CD 0505050505              add eax, 05050505
:004681D2 0505050505              add eax, 05050505
:004681D7 0505050505              add eax, 05050505
:004681DC 0505050505              add eax, 05050505
:004681E1 0505050505              add eax, 05050505
:004681E6 0505050505              add eax, 05050505
:004681EB 0505050505              add eax, 05050505
:004681F0 0505050505              add eax, 05050505
:004681F5 0505050505              add eax, 05050505
:004681FA 0505050505              add eax, 05050505
:004681FF 0505050505              add eax, 05050505
:00468204 0505050505              add eax, 05050505
:00468209 0505050505              add eax, 05050505
:0046820E 0505050505              add eax, 05050505
:00468213 0505050505              add eax, 05050505
:00468218 0505050505              add eax, 05050505
:0046821D 0505050505              add eax, 05050505
:00468222 0505050505              add eax, 05050505
:00468227 0505050505              add eax, 05050505
:0046822C 0505050505              add eax, 05050505
:00468231 0505050505              add eax, 05050505
:00468236 0505050505              add eax, 05050505
:0046823B 0505050505              add eax, 05050505
:00468240 0505050505              add eax, 05050505
:00468245 0505050505              add eax, 05050505
:0046824A 0505050505              add eax, 05050505
:0046824F 0505050505              add eax, 05050505
:00468254 0505050505              add eax, 05050505
:00468259 0505050505              add eax, 05050505
:0046825E 0505050505              add eax, 05050505
:00468263 0505050505              add eax, 05050505
:00468268 0505050505              add eax, 05050505
:0046826D 0505050505              add eax, 05050505
:00468272 0505050505              add eax, 05050505
:00468277 0505050505              add eax, 05050505
:0046827C 0505050505              add eax, 05050505
:00468281 0505050505              add eax, 05050505
:00468286 0505050505              add eax, 05050505
:0046828B 03                      BYTE 03h
:0046828C 04                      BYTE 04h


* Referenced by a CALL at Address:
|:00463A44   
|
:0046828D 55                      push ebp
:0046828E 8BEC                    mov ebp, esp
:00468290 E87DE6FAFF              call 00416912
:00468295 85C0                    test eax, eax
:00468297 7514                    jne 004682AD
:00468299 8B450C                  mov eax, dword ptr [ebp+0C]
:0046829C 50                      push eax
:0046829D 8B4D08                  mov ecx, dword ptr [ebp+08]
:004682A0 51                      push ecx
:004682A1 B9500E4B00              mov ecx, 004B0E50
:004682A6 E881C2FFFF              call 0046452C
:004682AB EB12                    jmp 004682BF
:004682AD 8B550C                  mov edx, dword ptr [ebp+0C]
:004682B0 52                      push edx
:004682B1 8B4508                  mov eax, dword ptr [ebp+08]
:004682B4 50                      push eax
:004682B5 B9500E4B00              mov ecx, 004B0E50
:004682BA E8B1C2FFFF              call 00464570

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004682AB(U)
|
:004682BF 5D                      pop ebp
:004682C0 C3                      ret



* Referenced by a CALL at Addresses:
|:0046733E   , :00468145   
|
:004682C1 55                      push ebp
:004682C2 8BEC                    mov ebp, esp
:004682C4 83EC2C                  sub esp, 0000002C
:004682C7 8B450C                  mov eax, dword ptr [ebp+0C]
:004682CA 25FFFF0000              and eax, 0000FFFF
:004682CF 8945EC                  mov dword ptr [ebp-14], eax
:004682D2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004682D5 C1E910                  shr ecx, 10
:004682D8 81E1FFFF0000            and ecx, 0000FFFF
:004682DE 81E1FFFF0000            and ecx, 0000FFFF
:004682E4 894DE4                  mov dword ptr [ebp-1C], ecx
:004682E7 837D1000                cmp dword ptr [ebp+10], 00000000
:004682EB 0F843B010000            je 0046842C
:004682F1 8B15204D4700            mov edx, dword ptr [00474D20]
:004682F7 8955F0                  mov dword ptr [ebp-10], edx
:004682FA A1244D4700              mov eax, dword ptr [00474D24]
:004682FF 8945F4                  mov dword ptr [ebp-0C], eax
:00468302 8B0D284D4700            mov ecx, dword ptr [00474D28]
:00468308 894DF8                  mov dword ptr [ebp-08], ecx
:0046830B 8B152C4D4700            mov edx, dword ptr [00474D2C]
:00468311 8955FC                  mov dword ptr [ebp-04], edx
:00468314 8D45F0                  lea eax, dword ptr [ebp-10]
:00468317 50                      push eax
:00468318 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046831B 51                      push ecx

* Reference To: USER32.MapDialogRect, Ord:018Bh
                                  |
:0046831C FF156C864B00            Call dword ptr [004B866C]
:00468322 C745E801000000          mov [ebp-18], 00000001
:00468329 EB09                    jmp 00468334

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468422(U)
|
:0046832B 8B55E8                  mov edx, dword ptr [ebp-18]
:0046832E 83C201                  add edx, 00000001
:00468331 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468329(U)
|
:00468334 837DE806                cmp dword ptr [ebp-18], 00000006
:00468338 0F8DE9000000            jnl 00468427
:0046833E 8B45E8                  mov eax, dword ptr [ebp-18]
:00468341 6BC014                  imul eax, 00000014
:00468344 8B88204D4700            mov ecx, dword ptr [eax+00474D20]
:0046834A 894DD4                  mov dword ptr [ebp-2C], ecx
:0046834D 8B55E8                  mov edx, dword ptr [ebp-18]
:00468350 6BD214                  imul edx, 00000014
:00468353 8B82244D4700            mov eax, dword ptr [edx+00474D24]
:00468359 8945D8                  mov dword ptr [ebp-28], eax
:0046835C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046835F 6BC914                  imul ecx, 00000014
:00468362 8B91284D4700            mov edx, dword ptr [ecx+00474D28]
:00468368 8955DC                  mov dword ptr [ebp-24], edx
:0046836B 8B45E8                  mov eax, dword ptr [ebp-18]
:0046836E 6BC014                  imul eax, 00000014
:00468371 8B882C4D4700            mov ecx, dword ptr [eax+00474D2C]
:00468377 894DE0                  mov dword ptr [ebp-20], ecx
:0046837A 8D55D4                  lea edx, dword ptr [ebp-2C]
:0046837D 52                      push edx
:0046837E 8B4508                  mov eax, dword ptr [ebp+08]
:00468381 50                      push eax

* Reference To: USER32.MapDialogRect, Ord:018Bh
                                  |
:00468382 FF156C864B00            Call dword ptr [004B866C]
:00468388 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046838B 6BC914                  imul ecx, 00000014
:0046838E 81B9304D470002040000    cmp dword ptr [ecx+00474D30], 00000402
:00468398 7442                    je 004683DC
:0046839A 6A00                    push 00000000
:0046839C 8B55E0                  mov edx, dword ptr [ebp-20]
:0046839F 52                      push edx
:004683A0 8B45DC                  mov eax, dword ptr [ebp-24]
:004683A3 50                      push eax
:004683A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004683A7 2B4DD8                  sub ecx, dword ptr [ebp-28]
:004683AA 8B55E4                  mov edx, dword ptr [ebp-1C]
:004683AD 2BD1                    sub edx, ecx
:004683AF 52                      push edx
:004683B0 8B45D4                  mov eax, dword ptr [ebp-2C]
:004683B3 0FAF45EC                imul eax, dword ptr [ebp-14]
:004683B7 99                      cdq
:004683B8 F77DF8                  idiv [ebp-08]
:004683BB 50                      push eax
:004683BC 8B45E8                  mov eax, dword ptr [ebp-18]
:004683BF 6BC014                  imul eax, 00000014
:004683C2 8B88304D4700            mov ecx, dword ptr [eax+00474D30]
:004683C8 51                      push ecx
:004683C9 8B5508                  mov edx, dword ptr [ebp+08]
:004683CC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004683CD FF15AC864B00            Call dword ptr [004B86AC]
:004683D3 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004683D4 FF15FC864B00            Call dword ptr [004B86FC]
:004683DA EB46                    jmp 00468422

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468398(C)
|
:004683DC 6A00                    push 00000000
:004683DE 8B45FC                  mov eax, dword ptr [ebp-04]
:004683E1 2B45D8                  sub eax, dword ptr [ebp-28]
:004683E4 2B45E0                  sub eax, dword ptr [ebp-20]
:004683E7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004683EA 2BC8                    sub ecx, eax
:004683EC 51                      push ecx
:004683ED 8B55F8                  mov edx, dword ptr [ebp-08]
:004683F0 2B55D4                  sub edx, dword ptr [ebp-2C]
:004683F3 2B55DC                  sub edx, dword ptr [ebp-24]
:004683F6 8B45EC                  mov eax, dword ptr [ebp-14]
:004683F9 2BC2                    sub eax, edx
:004683FB 50                      push eax
:004683FC 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004683FF 51                      push ecx
:00468400 8B55D4                  mov edx, dword ptr [ebp-2C]
:00468403 52                      push edx
:00468404 8B45E8                  mov eax, dword ptr [ebp-18]
:00468407 6BC014                  imul eax, 00000014
:0046840A 8B88304D4700            mov ecx, dword ptr [eax+00474D30]
:00468410 51                      push ecx
:00468411 8B5508                  mov edx, dword ptr [ebp+08]
:00468414 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00468415 FF15AC864B00            Call dword ptr [004B86AC]
:0046841B 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0046841C FF15FC864B00            Call dword ptr [004B86FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004683DA(U)
|
:00468422 E904FFFFFF              jmp 0046832B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468338(C)
|
:00468427 E935010000              jmp 00468561

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004682EB(C)
|
:0046842C A1D04C4700              mov eax, dword ptr [00474CD0]
:00468431 8945F0                  mov dword ptr [ebp-10], eax
:00468434 8B0DD44C4700            mov ecx, dword ptr [00474CD4]
:0046843A 894DF4                  mov dword ptr [ebp-0C], ecx
:0046843D 8B15D84C4700            mov edx, dword ptr [00474CD8]
:00468443 8955F8                  mov dword ptr [ebp-08], edx
:00468446 A1DC4C4700              mov eax, dword ptr [00474CDC]
:0046844B 8945FC                  mov dword ptr [ebp-04], eax
:0046844E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00468451 51                      push ecx
:00468452 8B5508                  mov edx, dword ptr [ebp+08]
:00468455 52                      push edx

* Reference To: USER32.MapDialogRect, Ord:018Bh
                                  |
:00468456 FF156C864B00            Call dword ptr [004B866C]
:0046845C C745E801000000          mov [ebp-18], 00000001
:00468463 EB09                    jmp 0046846E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046855C(U)
|
:00468465 8B45E8                  mov eax, dword ptr [ebp-18]
:00468468 83C001                  add eax, 00000001
:0046846B 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468463(U)
|
:0046846E 837DE804                cmp dword ptr [ebp-18], 00000004
:00468472 0F8DE9000000            jnl 00468561
:00468478 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046847B 6BC914                  imul ecx, 00000014
:0046847E 8B91D04C4700            mov edx, dword ptr [ecx+00474CD0]
:00468484 8955D4                  mov dword ptr [ebp-2C], edx
:00468487 8B45E8                  mov eax, dword ptr [ebp-18]
:0046848A 6BC014                  imul eax, 00000014
:0046848D 8B88D44C4700            mov ecx, dword ptr [eax+00474CD4]
:00468493 894DD8                  mov dword ptr [ebp-28], ecx
:00468496 8B55E8                  mov edx, dword ptr [ebp-18]
:00468499 6BD214                  imul edx, 00000014
:0046849C 8B82D84C4700            mov eax, dword ptr [edx+00474CD8]
:004684A2 8945DC                  mov dword ptr [ebp-24], eax
:004684A5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004684A8 6BC914                  imul ecx, 00000014
:004684AB 8B91DC4C4700            mov edx, dword ptr [ecx+00474CDC]
:004684B1 8955E0                  mov dword ptr [ebp-20], edx
:004684B4 8D45D4                  lea eax, dword ptr [ebp-2C]
:004684B7 50                      push eax
:004684B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004684BB 51                      push ecx

* Reference To: USER32.MapDialogRect, Ord:018Bh
                                  |
:004684BC FF156C864B00            Call dword ptr [004B866C]
:004684C2 8B55E8                  mov edx, dword ptr [ebp-18]
:004684C5 6BD214                  imul edx, 00000014
:004684C8 81BAE04C470002040000    cmp dword ptr [edx+00474CE0], 00000402
:004684D2 7442                    je 00468516
:004684D4 6A00                    push 00000000
:004684D6 8B45E0                  mov eax, dword ptr [ebp-20]
:004684D9 50                      push eax
:004684DA 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004684DD 51                      push ecx
:004684DE 8B55FC                  mov edx, dword ptr [ebp-04]
:004684E1 2B55D8                  sub edx, dword ptr [ebp-28]
:004684E4 8B45E4                  mov eax, dword ptr [ebp-1C]
:004684E7 2BC2                    sub eax, edx
:004684E9 50                      push eax
:004684EA 8B45D4                  mov eax, dword ptr [ebp-2C]
:004684ED 0FAF45EC                imul eax, dword ptr [ebp-14]
:004684F1 99                      cdq
:004684F2 F77DF8                  idiv [ebp-08]
:004684F5 50                      push eax
:004684F6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004684F9 6BC914                  imul ecx, 00000014
:004684FC 8B91E04C4700            mov edx, dword ptr [ecx+00474CE0]
:00468502 52                      push edx
:00468503 8B4508                  mov eax, dword ptr [ebp+08]
:00468506 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00468507 FF15AC864B00            Call dword ptr [004B86AC]
:0046850D 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0046850E FF15FC864B00            Call dword ptr [004B86FC]
:00468514 EB46                    jmp 0046855C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004684D2(C)
|
:00468516 6A00                    push 00000000
:00468518 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046851B 2B4DD8                  sub ecx, dword ptr [ebp-28]
:0046851E 2B4DE0                  sub ecx, dword ptr [ebp-20]
:00468521 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468524 2BD1                    sub edx, ecx
:00468526 52                      push edx
:00468527 8B45F8                  mov eax, dword ptr [ebp-08]
:0046852A 2B45D4                  sub eax, dword ptr [ebp-2C]
:0046852D 2B45DC                  sub eax, dword ptr [ebp-24]
:00468530 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468533 2BC8                    sub ecx, eax
:00468535 51                      push ecx
:00468536 8B55D8                  mov edx, dword ptr [ebp-28]
:00468539 52                      push edx
:0046853A 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046853D 50                      push eax
:0046853E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00468541 6BC914                  imul ecx, 00000014
:00468544 8B91E04C4700            mov edx, dword ptr [ecx+00474CE0]
:0046854A 52                      push edx
:0046854B 8B4508                  mov eax, dword ptr [ebp+08]
:0046854E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046854F FF15AC864B00            Call dword ptr [004B86AC]
:00468555 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00468556 FF15FC864B00            Call dword ptr [004B86FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468514(U)
|
:0046855C E904FFFFFF              jmp 00468465

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468427(U), :00468472(C)
|
:00468561 6801010000              push 00000101
:00468566 6A00                    push 00000000
:00468568 6A00                    push 00000000
:0046856A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046856D 51                      push ecx

* Reference To: USER32.RedrawWindow, Ord:01BDh
                                  |
:0046856E FF1590874B00            Call dword ptr [004B8790]
:00468574 8BE5                    mov esp, ebp
:00468576 5D                      pop ebp
:00468577 C3                      ret



* Referenced by a CALL at Addresses:
|:00467365   , :0046816C   
|
:00468578 55                      push ebp
:00468579 8BEC                    mov ebp, esp
:0046857B 83EC38                  sub esp, 00000038
:0046857E 837D1000                cmp dword ptr [ebp+10], 00000000
:00468582 7424                    je 004685A8
:00468584 A1204D4700              mov eax, dword ptr [00474D20]
:00468589 8945F0                  mov dword ptr [ebp-10], eax
:0046858C 8B0D244D4700            mov ecx, dword ptr [00474D24]
:00468592 894DF4                  mov dword ptr [ebp-0C], ecx
:00468595 8B15284D4700            mov edx, dword ptr [00474D28]
:0046859B 8955F8                  mov dword ptr [ebp-08], edx
:0046859E A12C4D4700              mov eax, dword ptr [00474D2C]
:004685A3 8945FC                  mov dword ptr [ebp-04], eax
:004685A6 EB23                    jmp 004685CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468582(C)
|
:004685A8 8B0DD04C4700            mov ecx, dword ptr [00474CD0]
:004685AE 894DF0                  mov dword ptr [ebp-10], ecx
:004685B1 8B15D44C4700            mov edx, dword ptr [00474CD4]
:004685B7 8955F4                  mov dword ptr [ebp-0C], edx
:004685BA A1D84C4700              mov eax, dword ptr [00474CD8]
:004685BF 8945F8                  mov dword ptr [ebp-08], eax
:004685C2 8B0DDC4C4700            mov ecx, dword ptr [00474CDC]
:004685C8 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004685A6(U)
|
:004685CB 8D55F0                  lea edx, dword ptr [ebp-10]
:004685CE 52                      push edx
:004685CF 8B4508                  mov eax, dword ptr [ebp+08]
:004685D2 50                      push eax

* Reference To: USER32.MapDialogRect, Ord:018Bh
                                  |
:004685D3 FF156C864B00            Call dword ptr [004B866C]
:004685D9 C745D400000000          mov [ebp-2C], 00000000
:004685E0 C745D800000000          mov [ebp-28], 00000000
:004685E7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004685EA 8B55F0                  mov edx, dword ptr [ebp-10]
:004685ED 8D440AFF                lea eax, dword ptr [edx+ecx-01]
:004685F1 8945DC                  mov dword ptr [ebp-24], eax
:004685F4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004685F7 8B55F4                  mov edx, dword ptr [ebp-0C]
:004685FA 8D440AFF                lea eax, dword ptr [edx+ecx-01]
:004685FE 8945E0                  mov dword ptr [ebp-20], eax
:00468601 6A00                    push 00000000
:00468603 6AF0                    push FFFFFFF0
:00468605 8B4D08                  mov ecx, dword ptr [ebp+08]
:00468608 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00468609 FF158C874B00            Call dword ptr [004B878C]
:0046860F 50                      push eax
:00468610 8D55D4                  lea edx, dword ptr [ebp-2C]
:00468613 52                      push edx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:00468614 FF150C874B00            Call dword ptr [004B870C]
:0046861A 8D45EC                  lea eax, dword ptr [ebp-14]
:0046861D 50                      push eax
:0046861E 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00468621 51                      push ecx
:00468622 E88E400000              call 0046C6B5
:00468627 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046862A 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046862C FF1578874B00            Call dword ptr [004B8778]
:00468632 8945E4                  mov dword ptr [ebp-1C], eax
:00468635 8B550C                  mov edx, dword ptr [ebp+0C]
:00468638 8955D0                  mov dword ptr [ebp-30], edx
:0046863B 8B45DC                  mov eax, dword ptr [ebp-24]
:0046863E 2B45D4                  sub eax, dword ptr [ebp-2C]
:00468641 83C001                  add eax, 00000001
:00468644 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00468647 894118                  mov dword ptr [ecx+18], eax
:0046864A 8B55E0                  mov edx, dword ptr [ebp-20]
:0046864D 2B55D8                  sub edx, dword ptr [ebp-28]
:00468650 83C201                  add edx, 00000001
:00468653 8B45D0                  mov eax, dword ptr [ebp-30]
:00468656 89501C                  mov dword ptr [eax+1C], edx
:00468659 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0046865C 8B55E8                  mov edx, dword ptr [ebp-18]
:0046865F 3B5118                  cmp edx, dword ptr [ecx+18]
:00468662 7E08                    jle 0046866C
:00468664 8B45E8                  mov eax, dword ptr [ebp-18]
:00468667 8945CC                  mov dword ptr [ebp-34], eax
:0046866A EB09                    jmp 00468675

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468662(C)
|
:0046866C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0046866F 8B5118                  mov edx, dword ptr [ecx+18]
:00468672 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046866A(U)
|
:00468675 8B45D0                  mov eax, dword ptr [ebp-30]
:00468678 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0046867B 894808                  mov dword ptr [eax+08], ecx
:0046867E 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468681 8B45EC                  mov eax, dword ptr [ebp-14]
:00468684 8D0C50                  lea ecx, dword ptr [eax+2*edx]
:00468687 8B55D0                  mov edx, dword ptr [ebp-30]
:0046868A 3B4A1C                  cmp ecx, dword ptr [edx+1C]
:0046868D 7E0E                    jle 0046869D
:0046868F 8B45E4                  mov eax, dword ptr [ebp-1C]
:00468692 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468695 8D1441                  lea edx, dword ptr [ecx+2*eax]
:00468698 8955C8                  mov dword ptr [ebp-38], edx
:0046869B EB09                    jmp 004686A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046868D(C)
|
:0046869D 8B45D0                  mov eax, dword ptr [ebp-30]
:004686A0 8B481C                  mov ecx, dword ptr [eax+1C]
:004686A3 894DC8                  mov dword ptr [ebp-38], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046869B(U)
|
:004686A6 8B55D0                  mov edx, dword ptr [ebp-30]
:004686A9 8B45C8                  mov eax, dword ptr [ebp-38]
:004686AC 89420C                  mov dword ptr [edx+0C], eax
:004686AF 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004686B2 8B55D0                  mov edx, dword ptr [ebp-30]
:004686B5 8B4208                  mov eax, dword ptr [edx+08]
:004686B8 894120                  mov dword ptr [ecx+20], eax
:004686BB 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004686BE 8B55D0                  mov edx, dword ptr [ebp-30]
:004686C1 8B420C                  mov eax, dword ptr [edx+0C]
:004686C4 894124                  mov dword ptr [ecx+24], eax
:004686C7 8BE5                    mov esp, ebp
:004686C9 5D                      pop ebp
:004686CA C3                      ret



* Referenced by a CALL at Address:
|:0046884F   
|
:004686CB 55                      push ebp
:004686CC 8BEC                    mov ebp, esp
:004686CE B858120000              mov eax, 00001258
:004686D3 E858520000              call 0046D930
:004686D8 8D851CEEFFFF            lea eax, dword ptr [ebp+FFFFEE1C]
:004686DE 8985ACEDFFFF            mov dword ptr [ebp+FFFFEDAC], eax
:004686E4 C785B0EDFFFF00000000    mov dword ptr [ebp+FFFFEDB0], 00000000
:004686EE EB0F                    jmp 004686FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046876D(U)
|
:004686F0 8B8DB0EDFFFF            mov ecx, dword ptr [ebp+FFFFEDB0]
:004686F6 83C101                  add ecx, 00000001
:004686F9 898DB0EDFFFF            mov dword ptr [ebp+FFFFEDB0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004686EE(U)
|
:004686FF 83BDB0EDFFFF68          cmp dword ptr [ebp+FFFFEDB0], 00000068
:00468706 7367                    jnb 0046876F
:00468708 8B95B0EDFFFF            mov edx, dword ptr [ebp+FFFFEDB0]
:0046870E 81C23B020000            add edx, 0000023B
:00468714 52                      push edx
:00468715 8D85B4EDFFFF            lea eax, dword ptr [ebp+FFFFEDB4]
:0046871B 50                      push eax
:0046871C E851D2F9FF              call 00405972
:00468721 83C408                  add esp, 00000008
:00468724 6A28                    push 00000028
:00468726 8B8DB0EDFFFF            mov ecx, dword ptr [ebp+FFFFEDB0]
:0046872C 6BC928                  imul ecx, 00000028
:0046872F 8D940DC0EFFFFF          lea edx, dword ptr [ebp+ecx-00001040]
:00468736 52                      push edx
:00468737 8D85B4EDFFFF            lea eax, dword ptr [ebp+FFFFEDB4]
:0046873D 50                      push eax
:0046873E E8ECA0FFFF              call 0046282F
:00468743 83C40C                  add esp, 0000000C
:00468746 8B8DB0EDFFFF            mov ecx, dword ptr [ebp+FFFFEDB0]
:0046874C 6BC928                  imul ecx, 00000028
:0046874F 8D940DC0EFFFFF          lea edx, dword ptr [ebp+ecx-00001040]
:00468756 8B85ACEDFFFF            mov eax, dword ptr [ebp+FFFFEDAC]
:0046875C 8910                    mov dword ptr [eax], edx
:0046875E 8B8DACEDFFFF            mov ecx, dword ptr [ebp+FFFFEDAC]
:00468764 83C104                  add ecx, 00000004
:00468767 898DACEDFFFF            mov dword ptr [ebp+FFFFEDAC], ecx
:0046876D EB81                    jmp 004686F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468706(C)
|
:0046876F 8B95ACEDFFFF            mov edx, dword ptr [ebp+FFFFEDAC]
:00468775 C70200000000            mov dword ptr [edx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004687D1(U)
|
:0046877B 6A00                    push 00000000

* Possible Reference to String Resource ID=00012: ""
                                  |
:0046877D 6A0C                    push 0000000C
:0046877F 6A00                    push 00000000

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:00468781 68A0000000              push 000000A0

* Possible Reference to String Resource ID=00018: "G"
                                  |
:00468786 6A12                    push 00000012
:00468788 8D851CEEFFFF            lea eax, dword ptr [ebp+FFFFEE1C]
:0046878E 50                      push eax
:0046878F 6A3C                    push 0000003C

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00468791 68C8000000              push 000000C8
:00468796 E8FBF2FBFF              call 00427A96
:0046879B 83C420                  add esp, 00000020
:0046879E 8885A8EDFFFF            mov byte ptr [ebp+FFFFEDA8], al
:004687A4 8B8DA8EDFFFF            mov ecx, dword ptr [ebp+FFFFEDA8]
:004687AA 81E1FF000000            and ecx, 000000FF
:004687B0 81F9FF000000            cmp ecx, 000000FF
:004687B6 7502                    jne 004687BA
:004687B8 EB19                    jmp 004687D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004687B6(C)
|
:004687BA 8B95A8EDFFFF            mov edx, dword ptr [ebp+FFFFEDA8]
:004687C0 81E2FF000000            and edx, 000000FF
:004687C6 52                      push edx
:004687C7 B9800D4B00              mov ecx, 004B0D80
:004687CC E8D893FFFF              call 00461BA9
:004687D1 EBA8                    jmp 0046877B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004687B8(U)
|
:004687D3 8BE5                    mov esp, ebp
:004687D5 5D                      pop ebp
:004687D6 C3                      ret



* Referenced by a CALL at Address:
|:004125AD   
|
:004687D7 55                      push ebp
:004687D8 8BEC                    mov ebp, esp
:004687DA 83EC08                  sub esp, 00000008
:004687DD E804A7FAFF              call 00412EE6
:004687E2 E8FEA5FAFF              call 00412DE5
:004687E7 6A00                    push 00000000

* Possible Reference to String Resource ID=00008: ""
                                  |
:004687E9 6A08                    push 00000008
:004687EB 6A00                    push 00000000
:004687ED 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004687F2 6A05                    push 00000005

* Possible Indirect StringData Ref from Data Obj ->"L"
                                  |
:004687F4 6828E74700              push 0047E728
:004687F9 6A64                    push 00000064
:004687FB 682C010000              push 0000012C
:00468800 E891F2FBFF              call 00427A96
:00468805 83C420                  add esp, 00000020
:00468808 8845FC                  mov byte ptr [ebp-04], al
:0046880B 8B45FC                  mov eax, dword ptr [ebp-04]
:0046880E 25FF000000              and eax, 000000FF
:00468813 8945F8                  mov dword ptr [ebp-08], eax
:00468816 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:0046881D 7F21                    jg 00468840
:0046881F 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:00468826 0F84CE000000            je 004688FA
:0046882C 837DF804                cmp dword ptr [ebp-08], 00000004
:00468830 0F87C9000000            ja 004688FF
:00468836 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00468839 FF248D05894600          jmp dword ptr [4*ecx+00468905]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046881D(C)
|
:00468840 E9BA000000              jmp 004688FF
:00468845 B9880D4B00              mov ecx, 004B0D88
:0046884A E8F992FFFF              call 00461B48
:0046884F E877FEFFFF              call 004686CB
:00468854 E9A6000000              jmp 004688FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004688A6(U)
|
:00468859 6A00                    push 00000000

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046885B 6A0A                    push 0000000A
:0046885D 6A00                    push 00000000

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:0046885F 68A0000000              push 000000A0

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00468864 6A0A                    push 0000000A

* Possible Indirect StringData Ref from Data Obj ->"1GD۫  Wo"
                                  |
:00468866 6840E74700              push 0047E740
:0046886B 6A64                    push 00000064

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0046886D 68C8000000              push 000000C8
:00468872 E81FF2FBFF              call 00427A96
:00468877 83C420                  add esp, 00000020
:0046887A 8845FC                  mov byte ptr [ebp-04], al
:0046887D 8B55FC                  mov edx, dword ptr [ebp-04]
:00468880 81E2FF000000            and edx, 000000FF
:00468886 81FAFF000000            cmp edx, 000000FF
:0046888C 7502                    jne 00468890
:0046888E EB18                    jmp 004688A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046888C(C)
|
:00468890 8B45FC                  mov eax, dword ptr [ebp-04]
:00468893 25FF000000              and eax, 000000FF
:00468898 83C002                  add eax, 00000002
:0046889B 50                      push eax
:0046889C B9880D4B00              mov ecx, 004B0D88
:004688A1 E88792FFFF              call 00461B2D
:004688A6 EBB1                    jmp 00468859

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046888E(U)
|
:004688A8 EB55                    jmp 004688FF
:004688AA 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004688AC 6A04                    push 00000004
:004688AE 6A00                    push 00000000
:004688B0 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004688B5 6A03                    push 00000003

* Possible Indirect StringData Ref from Data Obj ->"OPEN"
                                  |
:004688B7 6870E74700              push 0047E770
:004688BC 6A64                    push 00000064
:004688BE 682C010000              push 0000012C
:004688C3 E8CEF1FBFF              call 00427A96
:004688C8 83C420                  add esp, 00000020
:004688CB 8845FC                  mov byte ptr [ebp-04], al
:004688CE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004688D1 81E1FF000000            and ecx, 000000FF
:004688D7 81F9FF000000            cmp ecx, 000000FF
:004688DD 7412                    je 004688F1
:004688DF 8B55FC                  mov edx, dword ptr [ebp-04]
:004688E2 81E2FF000000            and edx, 000000FF
:004688E8 52                      push edx
:004688E9 E8E009FCFF              call 004292CE
:004688EE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004688DD(C)
|
:004688F1 EB0C                    jmp 004688FF
:004688F3 E8FBA9FAFF              call 004132F3
:004688F8 EB05                    jmp 004688FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468826(C)
|
:004688FA E8E7A5FAFF              call 00412EE6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468830(C), :00468840(U), :00468854(U), :004688A8(U), :004688F1(U)
|:004688F8(U)
|
:004688FF 33C0                    xor eax, eax
:00468901 8BE5                    mov esp, ebp
:00468903 5D                      pop ebp
:00468904 C3                      ret



:00468905 FF884600                DWORD 004688FF
:00468909 45884600                DWORD 00468845
:0046890D 59884600                DWORD 00468859
:00468911 AA884600                DWORD 004688AA
:00468915 F3884600                DWORD 004688F3


:00468919 CC                      int 03
:0046891A CC                      int 03
:0046891B CC                      int 03
:0046891C CC                      int 03
:0046891D CC                      int 03
:0046891E CC                      int 03
:0046891F CC                      int 03

* Referenced by a CALL at Address:
|:004645C9   
|
:00468920 55                      push ebp
:00468921 8BEC                    mov ebp, esp
:00468923 51                      push ecx
:00468924 894DFC                  mov dword ptr [ebp-04], ecx
:00468927 8B45FC                  mov eax, dword ptr [ebp-04]
:0046892A 8B08                    mov ecx, dword ptr [eax]
:0046892C 51                      push ecx

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:0046892D FF15A4874B00            Call dword ptr [004B87A4]
:00468933 8B55FC                  mov edx, dword ptr [ebp-04]
:00468936 C70200000000            mov dword ptr [edx], 00000000
:0046893C 8BE5                    mov esp, ebp
:0046893E 5D                      pop ebp
:0046893F C3                      ret



* Referenced by a CALL at Address:
|:004645DC   
|
:00468940 55                      push ebp
:00468941 8BEC                    mov ebp, esp
:00468943 51                      push ecx
:00468944 894DFC                  mov dword ptr [ebp-04], ecx
:00468947 8B45FC                  mov eax, dword ptr [ebp-04]
:0046894A 8B4804                  mov ecx, dword ptr [eax+04]
:0046894D 51                      push ecx

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:0046894E FF15A4874B00            Call dword ptr [004B87A4]
:00468954 8B55FC                  mov edx, dword ptr [ebp-04]
:00468957 C7420400000000          mov [edx+04], 00000000
:0046895E 8BE5                    mov esp, ebp
:00468960 5D                      pop ebp
:00468961 C3                      ret


:00468962 CC                      int 03
:00468963 CC                      int 03
:00468964 CC                      int 03
:00468965 CC                      int 03
:00468966 CC                      int 03
:00468967 CC                      int 03
:00468968 CC                      int 03
:00468969 CC                      int 03
:0046896A CC                      int 03
:0046896B CC                      int 03
:0046896C CC                      int 03
:0046896D CC                      int 03
:0046896E CC                      int 03
:0046896F CC                      int 03

* Referenced by a CALL at Address:
|:0046468E   
|
:00468970 55                      push ebp
:00468971 8BEC                    mov ebp, esp
:00468973 51                      push ecx
:00468974 894DFC                  mov dword ptr [ebp-04], ecx
:00468977 8B45FC                  mov eax, dword ptr [ebp-04]
:0046897A C70000000000            mov dword ptr [eax], 00000000
:00468980 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468983 C7410400000000          mov [ecx+04], 00000000
:0046898A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046898D 8BE5                    mov esp, ebp
:0046898F 5D                      pop ebp
:00468990 C3                      ret


:00468991 CC                      int 03
:00468992 CC                      int 03
:00468993 CC                      int 03
:00468994 CC                      int 03
:00468995 CC                      int 03
:00468996 CC                      int 03
:00468997 CC                      int 03
:00468998 CC                      int 03
:00468999 CC                      int 03
:0046899A CC                      int 03
:0046899B CC                      int 03
:0046899C CC                      int 03
:0046899D CC                      int 03
:0046899E CC                      int 03
:0046899F CC                      int 03

* Referenced by a CALL at Address:
|:00463C8A   
|
:004689A0 55                      push ebp
:004689A1 8BEC                    mov ebp, esp
:004689A3 C705E0184B001C000000    mov dword ptr [004B18E0], 0000001C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004689AD C705E4184B0007000000    mov dword ptr [004B18E4], 00000007
:004689B7 C705E8184B0000000000    mov dword ptr [004B18E8], 00000000
:004689C1 A1F4E44700              mov eax, dword ptr [0047E4F4]
:004689C6 A3EC184B00              mov dword ptr [004B18EC], eax
:004689CB 8B0DF4E44700            mov ecx, dword ptr [0047E4F4]
:004689D1 890DF0184B00            mov dword ptr [004B18F0], ecx
:004689D7 C705F4184B0000000000    mov dword ptr [004B18F4], 00000000
:004689E1 6A00                    push 00000000
:004689E3 68E0184B00              push 004B18E0
:004689E8 6A00                    push 00000000
:004689EA 8B5508                  mov edx, dword ptr [ebp+08]
:004689ED 52                      push edx

* Reference To: USER32.SetScrollInfo, Ord:020Ah
                                  |
:004689EE FF1570864B00            Call dword ptr [004B8670]
:004689F4 C70500194B001C000000    mov dword ptr [004B1900], 0000001C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004689FE C70504194B0007000000    mov dword ptr [004B1904], 00000007
:00468A08 C70508194B0000000000    mov dword ptr [004B1908], 00000000
:00468A12 A1F8E44700              mov eax, dword ptr [0047E4F8]
:00468A17 A30C194B00              mov dword ptr [004B190C], eax
:00468A1C 8B0DF8E44700            mov ecx, dword ptr [0047E4F8]
:00468A22 890D10194B00            mov dword ptr [004B1910], ecx
:00468A28 C70514194B0000000000    mov dword ptr [004B1914], 00000000
:00468A32 6A00                    push 00000000
:00468A34 6800194B00              push 004B1900
:00468A39 6A01                    push 00000001
:00468A3B 8B5508                  mov edx, dword ptr [ebp+08]
:00468A3E 52                      push edx

* Reference To: USER32.SetScrollInfo, Ord:020Ah
                                  |
:00468A3F FF1570864B00            Call dword ptr [004B8670]
:00468A45 5D                      pop ebp
:00468A46 C3                      ret



* Referenced by a CALL at Address:
|:00464279   
|
:00468A47 55                      push ebp
:00468A48 8BEC                    mov ebp, esp
:00468A4A 83EC0C                  sub esp, 0000000C
:00468A4D 8B4508                  mov eax, dword ptr [ebp+08]
:00468A50 99                      cdq
:00468A51 B930000000              mov ecx, 00000030
:00468A56 F7F9                    idiv ecx
:00468A58 6BC030                  imul eax, 00000030
:00468A5B 8945F8                  mov dword ptr [ebp-08], eax
:00468A5E 8B450C                  mov eax, dword ptr [ebp+0C]
:00468A61 83E828                  sub eax, 00000028
:00468A64 99                      cdq
:00468A65 B930000000              mov ecx, 00000030
:00468A6A F7F9                    idiv ecx
:00468A6C 6BC030                  imul eax, 00000030
:00468A6F 83C028                  add eax, 00000028
:00468A72 8945FC                  mov dword ptr [ebp-04], eax
:00468A75 8B55F8                  mov edx, dword ptr [ebp-08]
:00468A78 52                      push edx
:00468A79 B9A8034B00              mov ecx, 004B03A8
:00468A7E E801DFFDFF              call 00446984
:00468A83 8B45F8                  mov eax, dword ptr [ebp-08]
:00468A86 50                      push eax
:00468A87 B9A8034B00              mov ecx, 004B03A8
:00468A8C E8A5DEFDFF              call 00446936
:00468A91 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00468A94 51                      push ecx
:00468A95 B9A8034B00              mov ecx, 004B03A8
:00468A9A E833DFFDFF              call 004469D2
:00468A9F 8B55FC                  mov edx, dword ptr [ebp-04]
:00468AA2 52                      push edx
:00468AA3 B9A8034B00              mov ecx, 004B03A8
:00468AA8 E8FEDEFDFF              call 004469AB
:00468AAD 8B45FC                  mov eax, dword ptr [ebp-04]
:00468AB0 50                      push eax
:00468AB1 B9A8034B00              mov ecx, 004B03A8
:00468AB6 E8A2DEFDFF              call 0044695D
:00468ABB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468ABE 51                      push ecx
:00468ABF B9A8034B00              mov ecx, 004B03A8
:00468AC4 E830DFFDFF              call 004469F9
:00468AC9 6A00                    push 00000000
:00468ACB B9A8034B00              mov ecx, 004B03A8
:00468AD0 E877DDFDFF              call 0044684C
:00468AD5 6A00                    push 00000000
:00468AD7 B9A8034B00              mov ecx, 004B03A8
:00468ADC E892DDFDFF              call 00446873
:00468AE1 6A00                    push 00000000
:00468AE3 B9A8034B00              mov ecx, 004B03A8
:00468AE8 E8EBDCFDFF              call 004467D8
:00468AED 8B15F4E44700            mov edx, dword ptr [0047E4F4]
:00468AF3 52                      push edx
:00468AF4 B9A8034B00              mov ecx, 004B03A8
:00468AF9 E89CDDFDFF              call 0044689A
:00468AFE A1F8E44700              mov eax, dword ptr [0047E4F8]
:00468B03 3B450C                  cmp eax, dword ptr [ebp+0C]
:00468B06 7D0B                    jge 00468B13
:00468B08 8B0DF8E44700            mov ecx, dword ptr [0047E4F8]
:00468B0E 894DF4                  mov dword ptr [ebp-0C], ecx
:00468B11 EB06                    jmp 00468B19

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468B06(C)
|
:00468B13 8B550C                  mov edx, dword ptr [ebp+0C]
:00468B16 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468B11(U)
|
:00468B19 8B45F4                  mov eax, dword ptr [ebp-0C]
:00468B1C 83E828                  sub eax, 00000028
:00468B1F 50                      push eax
:00468B20 B9A8034B00              mov ecx, 004B03A8
:00468B25 E897DDFDFF              call 004468C1
:00468B2A 8BE5                    mov esp, ebp
:00468B2C 5D                      pop ebp
:00468B2D C3                      ret



* Referenced by a CALL at Addresses:
|:00411534   , :00416D07   , :00416D1D   , :00426262   , :00426370   
|:00426483   , :004267EF   , :0042695E   , :00426A24   
|
:00468B2E 55                      push ebp
:00468B2F 8BEC                    mov ebp, esp
:00468B31 83EC2C                  sub esp, 0000002C
:00468B34 56                      push esi
:00468B35 A1380E4B00              mov eax, dword ptr [004B0E38]
:00468B3A 50                      push eax

* Reference To: USER32.IsZoomed, Ord:016Bh
                                  |
:00468B3B FF1574864B00            Call dword ptr [004B8674]
:00468B41 85C0                    test eax, eax
:00468B43 7419                    je 00468B5E
:00468B45 6A00                    push 00000000
:00468B47 6820F10000              push 0000F120
:00468B4C 6812010000              push 00000112
:00468B51 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468B57 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00468B58 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468B43(C)
|
:00468B5E 6A00                    push 00000000
:00468B60 B9A8034B00              mov ecx, 004B03A8
:00468B65 E894DCFDFF              call 004467FE
:00468B6A 6A00                    push 00000000
:00468B6C B9A8034B00              mov ecx, 004B03A8
:00468B71 E8AFDCFDFF              call 00446825
:00468B76 B9A8034B00              mov ecx, 004B03A8
:00468B7B E8F3DDFDFF              call 00446973
:00468B80 3905F4E44700            cmp dword ptr [0047E4F4], eax
:00468B86 7D0B                    jge 00468B93
:00468B88 8B15F4E44700            mov edx, dword ptr [0047E4F4]
:00468B8E 8955E0                  mov dword ptr [ebp-20], edx
:00468B91 EB0D                    jmp 00468BA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468B86(C)
|
:00468B93 B9A8034B00              mov ecx, 004B03A8
:00468B98 E8D6DDFDFF              call 00446973
:00468B9D 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468B91(U)
|
:00468BA0 8B45E0                  mov eax, dword ptr [ebp-20]
:00468BA3 50                      push eax
:00468BA4 B9A8034B00              mov ecx, 004B03A8
:00468BA9 E888DDFDFF              call 00446936
:00468BAE B9A8034B00              mov ecx, 004B03A8
:00468BB3 E8E2DDFDFF              call 0044699A
:00468BB8 3905F8E44700            cmp dword ptr [0047E4F8], eax
:00468BBE 7D0B                    jge 00468BCB
:00468BC0 8B0DF8E44700            mov ecx, dword ptr [0047E4F8]
:00468BC6 894DDC                  mov dword ptr [ebp-24], ecx
:00468BC9 EB0D                    jmp 00468BD8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468BBE(C)
|
:00468BCB B9A8034B00              mov ecx, 004B03A8
:00468BD0 E8C5DDFDFF              call 0044699A
:00468BD5 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468BC9(U)
|
:00468BD8 8B55DC                  mov edx, dword ptr [ebp-24]
:00468BDB 52                      push edx
:00468BDC B9A8034B00              mov ecx, 004B03A8
:00468BE1 E877DDFDFF              call 0044695D
:00468BE6 A1F4E44700              mov eax, dword ptr [0047E4F4]
:00468BEB 50                      push eax
:00468BEC B9A8034B00              mov ecx, 004B03A8
:00468BF1 E8DCDDFDFF              call 004469D2
:00468BF6 8B0DF8E44700            mov ecx, dword ptr [0047E4F8]
:00468BFC 51                      push ecx
:00468BFD B9A8034B00              mov ecx, 004B03A8
:00468C02 E8F2DDFDFF              call 004469F9
:00468C07 8B15F4E44700            mov edx, dword ptr [0047E4F4]
:00468C0D 52                      push edx
:00468C0E B9A8034B00              mov ecx, 004B03A8
:00468C13 E882DCFDFF              call 0044689A
:00468C18 A1F8E44700              mov eax, dword ptr [0047E4F8]
:00468C1D 83E828                  sub eax, 00000028
:00468C20 50                      push eax
:00468C21 B9A8034B00              mov ecx, 004B03A8
:00468C26 E896DCFDFF              call 004468C1
:00468C2B 6A00                    push 00000000
:00468C2D B9A8034B00              mov ecx, 004B03A8
:00468C32 E8A1DBFDFF              call 004467D8
:00468C37 6AF0                    push FFFFFFF0
:00468C39 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468C3F 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00468C40 FF158C874B00            Call dword ptr [004B878C]
:00468C46 8945E4                  mov dword ptr [ebp-1C], eax
:00468C49 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468C4C 81CA00000200            or edx, 00020000
:00468C52 81E2FFFFFBFF            and edx, FFFBFFFF
:00468C58 81E2FFFFFEFF            and edx, FFFEFFFF
:00468C5E 81E2FFFFEFFF            and edx, FFEFFFFF
:00468C64 81E2FFFFDFFF            and edx, FFDFFFFF
:00468C6A 8955E4                  mov dword ptr [ebp-1C], edx
:00468C6D 8B45E4                  mov eax, dword ptr [ebp-1C]
:00468C70 50                      push eax
:00468C71 6AF0                    push FFFFFFF0
:00468C73 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468C79 51                      push ecx

* Reference To: USER32.SetWindowLongA, Ord:021Bh
                                  |
:00468C7A FF156C874B00            Call dword ptr [004B876C]
:00468C80 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00468C82 6A03                    push 00000003
:00468C84 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00468C8A 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468C8B FF1540864B00            Call dword ptr [004B8640]
:00468C91 C745F000000000          mov [ebp-10], 00000000
:00468C98 C745F400000000          mov [ebp-0C], 00000000
:00468C9F B9A8034B00              mov ecx, 004B03A8
:00468CA4 E87CDCFDFF              call 00446925
:00468CA9 83E801                  sub eax, 00000001
:00468CAC 8945F8                  mov dword ptr [ebp-08], eax
:00468CAF B9A8034B00              mov ecx, 004B03A8
:00468CB4 E893DCFDFF              call 0044694C
:00468CB9 83E829                  sub eax, 00000029
:00468CBC 8945FC                  mov dword ptr [ebp-04], eax
:00468CBF 6A00                    push 00000000
:00468CC1 6800003F02              push 023F0000
:00468CC6 8D45F0                  lea eax, dword ptr [ebp-10]
:00468CC9 50                      push eax

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:00468CCA FF150C874B00            Call dword ptr [004B870C]
:00468CD0 B9A8034B00              mov ecx, 004B03A8
:00468CD5 E8E7DCFDFF              call 004469C1
:00468CDA 8BF0                    mov esi, eax
:00468CDC B9A8034B00              mov ecx, 004B03A8
:00468CE1 E8A3DBFDFF              call 00446889
:00468CE6 99                      cdq
:00468CE7 83E20F                  and edx, 0000000F
:00468CEA 03C2                    add eax, edx
:00468CEC C1F804                  sar eax, 04
:00468CEF C1E004                  shl eax, 04
:00468CF2 2BF0                    sub esi, eax
:00468CF4 85F6                    test esi, esi
:00468CF6 7D09                    jge 00468D01
:00468CF8 C745D800000000          mov [ebp-28], 00000000
:00468CFF EB27                    jmp 00468D28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468CF6(C)
|
:00468D01 B9A8034B00              mov ecx, 004B03A8
:00468D06 E8B6DCFDFF              call 004469C1
:00468D0B 8BF0                    mov esi, eax
:00468D0D B9A8034B00              mov ecx, 004B03A8
:00468D12 E872DBFDFF              call 00446889
:00468D17 99                      cdq
:00468D18 83E20F                  and edx, 0000000F
:00468D1B 03C2                    add eax, edx
:00468D1D C1F804                  sar eax, 04
:00468D20 C1E004                  shl eax, 04
:00468D23 2BF0                    sub esi, eax
:00468D25 8975D8                  mov dword ptr [ebp-28], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468CFF(U)
|
:00468D28 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00468D2B 894DEC                  mov dword ptr [ebp-14], ecx
:00468D2E B9A8034B00              mov ecx, 004B03A8
:00468D33 E8B0DCFDFF              call 004469E8
:00468D38 8BF0                    mov esi, eax
:00468D3A B9A8034B00              mov ecx, 004B03A8
:00468D3F E86CDBFDFF              call 004468B0
:00468D44 83E828                  sub eax, 00000028
:00468D47 99                      cdq
:00468D48 83E20F                  and edx, 0000000F
:00468D4B 03C2                    add eax, edx
:00468D4D C1F804                  sar eax, 04
:00468D50 C1E004                  shl eax, 04
:00468D53 2BF0                    sub esi, eax
:00468D55 85F6                    test esi, esi
:00468D57 7D09                    jge 00468D62
:00468D59 C745D400000000          mov [ebp-2C], 00000000
:00468D60 EB2A                    jmp 00468D8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468D57(C)
|
:00468D62 B9A8034B00              mov ecx, 004B03A8
:00468D67 E87CDCFDFF              call 004469E8
:00468D6C 8BF0                    mov esi, eax
:00468D6E B9A8034B00              mov ecx, 004B03A8
:00468D73 E838DBFDFF              call 004468B0
:00468D78 83E828                  sub eax, 00000028
:00468D7B 99                      cdq
:00468D7C 83E20F                  and edx, 0000000F
:00468D7F 03C2                    add eax, edx
:00468D81 C1F804                  sar eax, 04
:00468D84 C1E004                  shl eax, 04
:00468D87 2BF0                    sub esi, eax
:00468D89 8975D4                  mov dword ptr [ebp-2C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468D60(U)
|
:00468D8C 8B55D4                  mov edx, dword ptr [ebp-2C]
:00468D8F 8955E8                  mov dword ptr [ebp-18], edx
:00468D92 8B45EC                  mov eax, dword ptr [ebp-14]
:00468D95 50                      push eax
:00468D96 B9A8034B00              mov ecx, 004B03A8
:00468D9B E8ACDAFDFF              call 0044684C
:00468DA0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00468DA3 51                      push ecx
:00468DA4 B9A8034B00              mov ecx, 004B03A8
:00468DA9 E8C5DAFDFF              call 00446873
:00468DAE 6A00                    push 00000000
:00468DB0 E872190000              call 0046A727
:00468DB5 83C404                  add esp, 00000004
:00468DB8 6A00                    push 00000000
:00468DBA 8B55FC                  mov edx, dword ptr [ebp-04]
:00468DBD 2B55F4                  sub edx, dword ptr [ebp-0C]
:00468DC0 83C201                  add edx, 00000001
:00468DC3 52                      push edx
:00468DC4 8B45F8                  mov eax, dword ptr [ebp-08]
:00468DC7 2B45F0                  sub eax, dword ptr [ebp-10]
:00468DCA 83C001                  add eax, 00000001
:00468DCD 50                      push eax
:00468DCE E839390000              call 0046C70C
:00468DD3 83C40C                  add esp, 0000000C
:00468DD6 B9A8034B00              mov ecx, 004B03A8
:00468DDB E8D0DAFDFF              call 004468B0
:00468DE0 50                      push eax
:00468DE1 B9A8034B00              mov ecx, 004B03A8
:00468DE6 E89EDAFDFF              call 00446889
:00468DEB 50                      push eax
:00468DEC 6A00                    push 00000000
:00468DEE 6A00                    push 00000000
:00468DF0 E8AB200000              call 0046AEA0
:00468DF5 83C410                  add esp, 00000010
:00468DF8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00468DFB 2B4DF0                  sub ecx, dword ptr [ebp-10]
:00468DFE 83C101                  add ecx, 00000001
:00468E01 8B55FC                  mov edx, dword ptr [ebp-04]
:00468E04 2B55F4                  sub edx, dword ptr [ebp-0C]
:00468E07 83C201                  add edx, 00000001
:00468E0A C1E208                  shl edx, 08
:00468E0D 0BCA                    or ecx, edx
:00468E0F 51                      push ecx
:00468E10 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00468E12 6A05                    push 00000005
:00468E14 A1480E4B00              mov eax, dword ptr [004B0E48]
:00468E19 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00468E1A FF15D8864B00            Call dword ptr [004B86D8]

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:00468E20 68D8E44700              push 0047E4D8
:00468E25 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468E2B 51                      push ecx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00468E2C FF15B0864B00            Call dword ptr [004B86B0]
:00468E32 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00468E38 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00468E39 FF15A4864B00            Call dword ptr [004B86A4]
:00468E3F 5E                      pop esi
:00468E40 8BE5                    mov esp, ebp
:00468E42 5D                      pop ebp
:00468E43 C3                      ret



* Referenced by a CALL at Addresses:
|:004299AE   , :0042A038   , :0042B25A   , :0042B2FE   , :0042B4C3   
|:00431B05   , :00431CCE   , :0043221D   , :0043237B   , :004334EB   
|:004339BB   , :0043CC5F   , :0043D18D   , :00442ECB   , :004461B4   
|:00455256   , :004552E8   , :00457B76   , :00457B99   
|
:00468E44 55                      push ebp
:00468E45 8BEC                    mov ebp, esp
:00468E47 83EC20                  sub esp, 00000020
:00468E4A 56                      push esi
:00468E4B 6AF0                    push FFFFFFF0
:00468E4D A1380E4B00              mov eax, dword ptr [004B0E38]
:00468E52 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00468E53 FF158C874B00            Call dword ptr [004B878C]
:00468E59 8945F8                  mov dword ptr [ebp-08], eax
:00468E5C 837D0800                cmp dword ptr [ebp+08], 00000000
:00468E60 7426                    je 00468E88
:00468E62 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00468E65 81C900000400            or ecx, 00040000
:00468E6B 81C900000100            or ecx, 00010000
:00468E71 81C900000200            or ecx, 00020000
:00468E77 81C900001000            or ecx, 00100000
:00468E7D 81C900002000            or ecx, 00200000
:00468E83 894DF8                  mov dword ptr [ebp-08], ecx
:00468E86 EB1E                    jmp 00468EA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468E60(C)
|
:00468E88 8B55F8                  mov edx, dword ptr [ebp-08]
:00468E8B 81E2FFFFFEFF            and edx, FFFEFFFF
:00468E91 81E2FFFFFDFF            and edx, FFFDFFFF
:00468E97 81CA00001000            or edx, 00100000
:00468E9D 81CA00002000            or edx, 00200000
:00468EA3 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468E86(U)
|
:00468EA6 8B45F8                  mov eax, dword ptr [ebp-08]
:00468EA9 50                      push eax
:00468EAA 6AF0                    push FFFFFFF0
:00468EAC 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468EB2 51                      push ecx

* Reference To: USER32.SetWindowLongA, Ord:021Bh
                                  |
:00468EB3 FF156C874B00            Call dword ptr [004B876C]
:00468EB9 8945FC                  mov dword ptr [ebp-04], eax
:00468EBC 8D55E8                  lea edx, dword ptr [ebp-18]
:00468EBF 52                      push edx
:00468EC0 A1380E4B00              mov eax, dword ptr [004B0E38]
:00468EC5 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00468EC6 FF1558874B00            Call dword ptr [004B8758]
:00468ECC 8B75F4                  mov esi, dword ptr [ebp-0C]
:00468ECF 2B75EC                  sub esi, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468ED2 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00468ED4 FF1578874B00            Call dword ptr [004B8778]
:00468EDA 2BF0                    sub esi, eax
:00468EDC 6A37                    push 00000037

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00468EDE FF1578874B00            Call dword ptr [004B8778]
:00468EE4 2BF0                    sub esi, eax
:00468EE6 83EE28                  sub esi, 00000028
:00468EE9 85F6                    test esi, esi
:00468EEB 7D09                    jge 00468EF6
:00468EED C745E000000000          mov [ebp-20], 00000000
:00468EF4 EB20                    jmp 00468F16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468EEB(C)
|
:00468EF6 8B75F4                  mov esi, dword ptr [ebp-0C]
:00468EF9 2B75EC                  sub esi, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468EFC 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00468EFE FF1578874B00            Call dword ptr [004B8778]
:00468F04 2BF0                    sub esi, eax
:00468F06 6A37                    push 00000037

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00468F08 FF1578874B00            Call dword ptr [004B8778]
:00468F0E 2BF0                    sub esi, eax
:00468F10 83EE28                  sub esi, 00000028
:00468F13 8975E0                  mov dword ptr [ebp-20], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468EF4(U)
|
:00468F16 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00468F19 894DE4                  mov dword ptr [ebp-1C], ecx
:00468F1C 8B75F0                  mov esi, dword ptr [ebp-10]
:00468F1F 2B75E8                  sub esi, dword ptr [ebp-18]
:00468F22 B9A8034B00              mov ecx, 004B03A8
:00468F27 E895DAFDFF              call 004469C1
:00468F2C 3BF0                    cmp esi, eax
:00468F2E 7E25                    jle 00468F55
:00468F30 B9A8034B00              mov ecx, 004B03A8
:00468F35 E8AEDAFDFF              call 004469E8
:00468F3A 3945E4                  cmp dword ptr [ebp-1C], eax
:00468F3D 7E16                    jle 00468F55
:00468F3F 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00468F41 6A03                    push 00000003
:00468F43 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00468F49 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468F4A FF1540864B00            Call dword ptr [004B8640]
:00468F50 E98B000000              jmp 00468FE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468F2E(C), :00468F3D(C)
|
:00468F55 8B75F0                  mov esi, dword ptr [ebp-10]
:00468F58 2B75E8                  sub esi, dword ptr [ebp-18]
:00468F5B B9A8034B00              mov ecx, 004B03A8
:00468F60 E85CDAFDFF              call 004469C1
:00468F65 3BF0                    cmp esi, eax
:00468F67 7E23                    jle 00468F8C
:00468F69 6A01                    push 00000001
:00468F6B 6A01                    push 00000001
:00468F6D A1380E4B00              mov eax, dword ptr [004B0E38]
:00468F72 50                      push eax

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468F73 FF1540864B00            Call dword ptr [004B8640]
:00468F79 6A00                    push 00000000
:00468F7B 6A00                    push 00000000
:00468F7D 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468F83 51                      push ecx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468F84 FF1540864B00            Call dword ptr [004B8640]
:00468F8A EB54                    jmp 00468FE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468F67(C)
|
:00468F8C B9A8034B00              mov ecx, 004B03A8
:00468F91 E852DAFDFF              call 004469E8
:00468F96 3945E4                  cmp dword ptr [ebp-1C], eax
:00468F99 7E23                    jle 00468FBE
:00468F9B 6A01                    push 00000001
:00468F9D 6A00                    push 00000000
:00468F9F 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00468FA5 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468FA6 FF1540864B00            Call dword ptr [004B8640]
:00468FAC 6A00                    push 00000000
:00468FAE 6A01                    push 00000001
:00468FB0 A1380E4B00              mov eax, dword ptr [004B0E38]
:00468FB5 50                      push eax

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468FB6 FF1540864B00            Call dword ptr [004B8640]
:00468FBC EB22                    jmp 00468FE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468F99(C)
|
:00468FBE 6A01                    push 00000001
:00468FC0 6A00                    push 00000000
:00468FC2 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468FC8 51                      push ecx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468FC9 FF1540864B00            Call dword ptr [004B8640]
:00468FCF 6A01                    push 00000001
:00468FD1 6A01                    push 00000001
:00468FD3 8B15380E4B00            mov edx, dword ptr [004B0E38]
:00468FD9 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00468FDA FF1540864B00            Call dword ptr [004B8640]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468F50(U), :00468F8A(U), :00468FBC(U)
|
:00468FE0 A1380E4B00              mov eax, dword ptr [004B0E38]
:00468FE5 50                      push eax

* Reference To: USER32.IsIconic, Ord:0164h
                                  |
:00468FE6 FF1548864B00            Call dword ptr [004B8648]
:00468FEC 85C0                    test eax, eax
:00468FEE 7512                    jne 00469002
:00468FF0 68D0184B00              push 004B18D0
:00468FF5 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00468FFB 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00468FFC FF1558874B00            Call dword ptr [004B8758]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468FEE(C)
|

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:00469002 68D8E44700              push 0047E4D8
:00469007 8B15380E4B00            mov edx, dword ptr [004B0E38]
:0046900D 52                      push edx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046900E FF15B0864B00            Call dword ptr [004B86B0]
:00469014 A1380E4B00              mov eax, dword ptr [004B0E38]
:00469019 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046901A FF15A4864B00            Call dword ptr [004B86A4]
:00469020 5E                      pop esi
:00469021 8BE5                    mov esp, ebp
:00469023 5D                      pop ebp
:00469024 C3                      ret



* Referenced by a CALL at Address:
|:00463CF8   
|
:00469025 55                      push ebp
:00469026 8BEC                    mov ebp, esp
:00469028 E883B0FAFF              call 004140B0
:0046902D B9880D4B00              mov ecx, 004B0D88
:00469032 E8F389FFFF              call 00461A2A
:00469037 B9800D4B00              mov ecx, 004B0D80
:0046903C E8D38BFFFF              call 00461C14
:00469041 B9A8034B00              mov ecx, 004B03A8
:00469046 E83ED8FDFF              call 00446889
:0046904B 50                      push eax
:0046904C B9A8034B00              mov ecx, 004B03A8
:00469051 E892D8FDFF              call 004468E8
:00469056 B9A8034B00              mov ecx, 004B03A8
:0046905B E850D8FDFF              call 004468B0
:00469060 50                      push eax
:00469061 B9A8034B00              mov ecx, 004B03A8
:00469066 E8A4D8FDFF              call 0044690F
:0046906B 5D                      pop ebp
:0046906C C3                      ret



* Referenced by a CALL at Address:
|:00463D30   
|
:0046906D 55                      push ebp
:0046906E 8BEC                    mov ebp, esp
:00469070 C7051C194B0001000000    mov dword ptr [004B191C], 00000001
:0046907A B9A8034B00              mov ecx, 004B03A8
:0046907F E805D8FDFF              call 00446889
:00469084 50                      push eax
:00469085 B9A8034B00              mov ecx, 004B03A8
:0046908A E859D8FDFF              call 004468E8
:0046908F B9A8034B00              mov ecx, 004B03A8
:00469094 E817D8FDFF              call 004468B0
:00469099 50                      push eax
:0046909A B9A8034B00              mov ecx, 004B03A8
:0046909F E86BD8FDFF              call 0044690F
:004690A4 5D                      pop ebp
:004690A5 C3                      ret



* Referenced by a CALL at Address:
|:00463D3E   
|
:004690A6 55                      push ebp
:004690A7 8BEC                    mov ebp, esp
:004690A9 E864D8FAFF              call 00416912
:004690AE 85C0                    test eax, eax
:004690B0 740A                    je 004690BC
:004690B2 C7051C194B0000000000    mov dword ptr [004B191C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004690B0(C)
|
:004690BC B9A8034B00              mov ecx, 004B03A8
:004690C1 E811D8FDFF              call 004468D7
:004690C6 50                      push eax
:004690C7 B9A8034B00              mov ecx, 004B03A8
:004690CC E8C9D7FDFF              call 0044689A
:004690D1 B9A8034B00              mov ecx, 004B03A8
:004690D6 E823D8FDFF              call 004468FE
:004690DB 50                      push eax
:004690DC B9A8034B00              mov ecx, 004B03A8
:004690E1 E8DBD7FDFF              call 004468C1
:004690E6 B9800D4B00              mov ecx, 004B0D80
:004690EB E8428BFFFF              call 00461C32
:004690F0 B9880D4B00              mov ecx, 004B0D88
:004690F5 E84B89FFFF              call 00461A45
:004690FA E8C0AFFAFF              call 004140BF
:004690FF 5D                      pop ebp
:00469100 C3                      ret



* Referenced by a CALL at Address:
|:00455271   
|
:00469101 55                      push ebp
:00469102 8BEC                    mov ebp, esp
:00469104 A11C194B00              mov eax, dword ptr [004B191C]
:00469109 5D                      pop ebp
:0046910A C3                      ret



* Referenced by a CALL at Address:
|:00463E40   
|
:0046910B 55                      push ebp
:0046910C 8BEC                    mov ebp, esp
:0046910E 83EC20                  sub esp, 00000020
:00469111 56                      push esi
:00469112 C745F000000000          mov [ebp-10], 00000000
:00469119 C745F400000000          mov [ebp-0C], 00000000
:00469120 B9A8034B00              mov ecx, 004B03A8
:00469125 E89ED6FDFF              call 004467C8
:0046912A 85C0                    test eax, eax
:0046912C 0F8598000000            jne 004691CA
:00469132 B9A8034B00              mov ecx, 004B03A8
:00469137 E84DD7FDFF              call 00446889
:0046913C 83E801                  sub eax, 00000001
:0046913F 8945F8                  mov dword ptr [ebp-08], eax
:00469142 B9A8034B00              mov ecx, 004B03A8
:00469147 E864D7FDFF              call 004468B0
:0046914C 83E801                  sub eax, 00000001
:0046914F 8945FC                  mov dword ptr [ebp-04], eax
:00469152 6A01                    push 00000001
:00469154 6AF0                    push FFFFFFF0
:00469156 8B4508                  mov eax, dword ptr [ebp+08]
:00469159 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:0046915A FF158C874B00            Call dword ptr [004B878C]
:00469160 50                      push eax
:00469161 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00469164 51                      push ecx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:00469165 FF150C874B00            Call dword ptr [004B870C]
:0046916B 8B550C                  mov edx, dword ptr [ebp+0C]
:0046916E 8955EC                  mov dword ptr [ebp-14], edx
:00469171 8B45F8                  mov eax, dword ptr [ebp-08]
:00469174 2B45F0                  sub eax, dword ptr [ebp-10]
:00469177 83C001                  add eax, 00000001
:0046917A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046917D 894118                  mov dword ptr [ecx+18], eax
:00469180 8B55FC                  mov edx, dword ptr [ebp-04]
:00469183 2B55F4                  sub edx, dword ptr [ebp-0C]
:00469186 83C201                  add edx, 00000001
:00469189 8B45EC                  mov eax, dword ptr [ebp-14]
:0046918C 89501C                  mov dword ptr [eax+1C], edx
:0046918F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469192 2B4DF0                  sub ecx, dword ptr [ebp-10]
:00469195 83C101                  add ecx, 00000001
:00469198 8B55EC                  mov edx, dword ptr [ebp-14]
:0046919B 894A08                  mov dword ptr [edx+08], ecx
:0046919E 8B45FC                  mov eax, dword ptr [ebp-04]
:004691A1 2B45F4                  sub eax, dword ptr [ebp-0C]
:004691A4 83C001                  add eax, 00000001
:004691A7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004691AA 89410C                  mov dword ptr [ecx+0C], eax
:004691AD 8B55EC                  mov edx, dword ptr [ebp-14]
:004691B0 8B45EC                  mov eax, dword ptr [ebp-14]
:004691B3 8B4808                  mov ecx, dword ptr [eax+08]
:004691B6 894A20                  mov dword ptr [edx+20], ecx
:004691B9 8B55EC                  mov edx, dword ptr [ebp-14]
:004691BC 8B45EC                  mov eax, dword ptr [ebp-14]
:004691BF 8B480C                  mov ecx, dword ptr [eax+0C]
:004691C2 894A24                  mov dword ptr [edx+24], ecx
:004691C5 E9E9010000              jmp 004693B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046912C(C)
|
:004691CA B9180A4B00              mov ecx, 004B0A18
:004691CF E83CD8FDFF              call 00446A10
:004691D4 85C0                    test eax, eax
:004691D6 0F8472010000            je 0046934E
:004691DC B9680C4B00              mov ecx, 004B0C68
:004691E1 E87AB4FEFF              call 00454660
:004691E6 85C0                    test eax, eax
:004691E8 0F8460010000            je 0046934E
:004691EE B9A8034B00              mov ecx, 004B03A8
:004691F3 E82DD7FDFF              call 00446925
:004691F8 8BF0                    mov esi, eax
:004691FA 83EE01                  sub esi, 00000001
:004691FD B9A8034B00              mov ecx, 004B03A8
:00469202 E8BAD7FDFF              call 004469C1
:00469207 83E801                  sub eax, 00000001
:0046920A 3BF0                    cmp esi, eax
:0046920C 7D12                    jge 00469220
:0046920E B9A8034B00              mov ecx, 004B03A8
:00469213 E80DD7FDFF              call 00446925
:00469218 83E801                  sub eax, 00000001
:0046921B 8945E8                  mov dword ptr [ebp-18], eax
:0046921E EB10                    jmp 00469230

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046920C(C)
|
:00469220 B9A8034B00              mov ecx, 004B03A8
:00469225 E897D7FDFF              call 004469C1
:0046922A 83E801                  sub eax, 00000001
:0046922D 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046921E(U)
|
:00469230 8B55E8                  mov edx, dword ptr [ebp-18]
:00469233 8955F8                  mov dword ptr [ebp-08], edx
:00469236 B9A8034B00              mov ecx, 004B03A8
:0046923B E80CD7FDFF              call 0044694C
:00469240 8BF0                    mov esi, eax
:00469242 83EE01                  sub esi, 00000001
:00469245 B9A8034B00              mov ecx, 004B03A8
:0046924A E899D7FDFF              call 004469E8
:0046924F 83C027                  add eax, 00000027
:00469252 3BF0                    cmp esi, eax
:00469254 7D12                    jge 00469268
:00469256 B9A8034B00              mov ecx, 004B03A8
:0046925B E8ECD6FDFF              call 0044694C
:00469260 83E801                  sub eax, 00000001
:00469263 8945E4                  mov dword ptr [ebp-1C], eax
:00469266 EB10                    jmp 00469278

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469254(C)
|
:00469268 B9A8034B00              mov ecx, 004B03A8
:0046926D E876D7FDFF              call 004469E8
:00469272 83C027                  add eax, 00000027
:00469275 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469266(U)
|
:00469278 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046927B 8945FC                  mov dword ptr [ebp-04], eax
:0046927E 6A01                    push 00000001
:00469280 6AF0                    push FFFFFFF0
:00469282 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469285 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00469286 FF158C874B00            Call dword ptr [004B878C]
:0046928C 50                      push eax
:0046928D 8D55F0                  lea edx, dword ptr [ebp-10]
:00469290 52                      push edx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:00469291 FF150C874B00            Call dword ptr [004B870C]
:00469297 8B450C                  mov eax, dword ptr [ebp+0C]
:0046929A 8945EC                  mov dword ptr [ebp-14], eax
:0046929D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004692A0 D1E1                    shl ecx, 1
:004692A2 8B15F4E44700            mov edx, dword ptr [0047E4F4]
:004692A8 2BD1                    sub edx, ecx
:004692AA 8B45EC                  mov eax, dword ptr [ebp-14]
:004692AD 895018                  mov dword ptr [eax+18], edx
:004692B0 B9A8034B00              mov ecx, 004B03A8
:004692B5 E892D6FDFF              call 0044694C
:004692BA 3905F8E44700            cmp dword ptr [0047E4F8], eax
:004692C0 7D0B                    jge 004692CD
:004692C2 8B0DF8E44700            mov ecx, dword ptr [0047E4F8]
:004692C8 894DE0                  mov dword ptr [ebp-20], ecx
:004692CB EB0D                    jmp 004692DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004692C0(C)
|
:004692CD B9A8034B00              mov ecx, 004B03A8
:004692D2 E875D6FDFF              call 0044694C
:004692D7 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004692CB(U)
|
:004692DA 8B55F4                  mov edx, dword ptr [ebp-0C]
:004692DD 8D441250                lea eax, dword ptr [edx+edx+50]
:004692E1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004692E4 2BC8                    sub ecx, eax
:004692E6 83C102                  add ecx, 00000002
:004692E9 8B55EC                  mov edx, dword ptr [ebp-14]
:004692EC 894A1C                  mov dword ptr [edx+1C], ecx
:004692EF 8B45F8                  mov eax, dword ptr [ebp-08]
:004692F2 2B45F0                  sub eax, dword ptr [ebp-10]
:004692F5 83C001                  add eax, 00000001
:004692F8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004692FB 894108                  mov dword ptr [ecx+08], eax
:004692FE 8B55FC                  mov edx, dword ptr [ebp-04]
:00469301 2B55F4                  sub edx, dword ptr [ebp-0C]
:00469304 83C201                  add edx, 00000001
:00469307 8B45EC                  mov eax, dword ptr [ebp-14]
:0046930A 89500C                  mov dword ptr [eax+0C], edx
:0046930D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00469310 8B55EC                  mov edx, dword ptr [ebp-14]
:00469313 8B4208                  mov eax, dword ptr [edx+08]
:00469316 894120                  mov dword ptr [ecx+20], eax
:00469319 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046931C 8B55EC                  mov edx, dword ptr [ebp-14]
:0046931F 8B420C                  mov eax, dword ptr [edx+0C]
:00469322 894124                  mov dword ptr [ecx+24], eax
:00469325 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:0046932B 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046932C FF15E0864B00            Call dword ptr [004B86E0]
:00469332 85C0                    test eax, eax
:00469334 7416                    je 0046934C
:00469336 6A00                    push 00000000
:00469338 6A01                    push 00000001
:0046933A 6811010000              push 00000111
:0046933F 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00469345 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00469346 FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469334(C)
|
:0046934C EB65                    jmp 004693B3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004691D6(C), :004691E8(C)
|
:0046934E 8B450C                  mov eax, dword ptr [ebp+0C]
:00469351 8945EC                  mov dword ptr [ebp-14], eax
:00469354 8B0DD8184B00            mov ecx, dword ptr [004B18D8]
:0046935A 2B0DD0184B00            sub ecx, dword ptr [004B18D0]
:00469360 8B55EC                  mov edx, dword ptr [ebp-14]
:00469363 894A18                  mov dword ptr [edx+18], ecx
:00469366 A1DC184B00              mov eax, dword ptr [004B18DC]
:0046936B 2B05D4184B00            sub eax, dword ptr [004B18D4]
:00469371 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00469374 89411C                  mov dword ptr [ecx+1C], eax
:00469377 8B15D8184B00            mov edx, dword ptr [004B18D8]
:0046937D 2B15D0184B00            sub edx, dword ptr [004B18D0]
:00469383 8B45EC                  mov eax, dword ptr [ebp-14]
:00469386 895008                  mov dword ptr [eax+08], edx
:00469389 8B0DDC184B00            mov ecx, dword ptr [004B18DC]
:0046938F 2B0DD4184B00            sub ecx, dword ptr [004B18D4]
:00469395 8B55EC                  mov edx, dword ptr [ebp-14]
:00469398 894A0C                  mov dword ptr [edx+0C], ecx
:0046939B 8B45EC                  mov eax, dword ptr [ebp-14]
:0046939E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004693A1 8B5108                  mov edx, dword ptr [ecx+08]
:004693A4 895020                  mov dword ptr [eax+20], edx
:004693A7 8B45EC                  mov eax, dword ptr [ebp-14]
:004693AA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004693AD 8B510C                  mov edx, dword ptr [ecx+0C]
:004693B0 895024                  mov dword ptr [eax+24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004691C5(U), :0046934C(U)
|
:004693B3 5E                      pop esi
:004693B4 8BE5                    mov esp, ebp
:004693B6 5D                      pop ebp
:004693B7 C3                      ret



* Referenced by a CALL at Address:
|:00463DDC   
|
:004693B8 55                      push ebp
:004693B9 8BEC                    mov ebp, esp
:004693BB 83EC58                  sub esp, 00000058
:004693BE 56                      push esi
:004693BF 8B4510                  mov eax, dword ptr [ebp+10]
:004693C2 50                      push eax
:004693C3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004693C6 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004693C7 6A05                    push 00000005
:004693C9 8B15480E4B00            mov edx, dword ptr [004B0E48]
:004693CF 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004693D0 FF15D8864B00            Call dword ptr [004B86D8]
:004693D6 B9A8034B00              mov ecx, 004B03A8
:004693DB E8E8D3FDFF              call 004467C8
:004693E0 85C0                    test eax, eax
:004693E2 0F84B2030000            je 0046979A
:004693E8 B9A8034B00              mov ecx, 004B03A8
:004693ED E853B6FDFF              call 00444A45
:004693F2 85C0                    test eax, eax
:004693F4 740A                    je 00469400
:004693F6 B9A8034B00              mov ecx, 004B03A8
:004693FB E8E0B5FDFF              call 004449E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004693F4(C)
|
:00469400 8B4510                  mov eax, dword ptr [ebp+10]
:00469403 25FFFF0000              and eax, 0000FFFF
:00469408 8945BC                  mov dword ptr [ebp-44], eax
:0046940B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046940E C1E910                  shr ecx, 10
:00469411 81E1FFFF0000            and ecx, 0000FFFF
:00469417 81E1FFFF0000            and ecx, 0000FFFF
:0046941D 894DB8                  mov dword ptr [ebp-48], ecx
:00469420 C745F000000000          mov [ebp-10], 00000000
:00469427 C745F400000000          mov [ebp-0C], 00000000
:0046942E 8B55BC                  mov edx, dword ptr [ebp-44]
:00469431 83EA01                  sub edx, 00000001
:00469434 8955F8                  mov dword ptr [ebp-08], edx
:00469437 8B45B8                  mov eax, dword ptr [ebp-48]
:0046943A 83E801                  sub eax, 00000001
:0046943D 8945FC                  mov dword ptr [ebp-04], eax
:00469440 6A00                    push 00000000
:00469442 6800003F02              push 023F0000
:00469447 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0046944A 51                      push ecx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:0046944B FF150C874B00            Call dword ptr [004B870C]
:00469451 8B45BC                  mov eax, dword ptr [ebp-44]
:00469454 83C02F                  add eax, 0000002F
:00469457 99                      cdq
:00469458 B930000000              mov ecx, 00000030
:0046945D F7F9                    idiv ecx
:0046945F 6BC030                  imul eax, 00000030
:00469462 8945BC                  mov dword ptr [ebp-44], eax
:00469465 8B45B8                  mov eax, dword ptr [ebp-48]
:00469468 83C007                  add eax, 00000007
:0046946B 99                      cdq
:0046946C B930000000              mov ecx, 00000030
:00469471 F7F9                    idiv ecx
:00469473 6BC030                  imul eax, 00000030
:00469476 8945B8                  mov dword ptr [ebp-48], eax
:00469479 8B55BC                  mov edx, dword ptr [ebp-44]
:0046947C 52                      push edx
:0046947D B9A8034B00              mov ecx, 004B03A8
:00469482 E813D4FDFF              call 0044689A
:00469487 8B45B8                  mov eax, dword ptr [ebp-48]
:0046948A 50                      push eax
:0046948B B9A8034B00              mov ecx, 004B03A8
:00469490 E82CD4FDFF              call 004468C1
:00469495 B9A8034B00              mov ecx, 004B03A8
:0046949A E822D5FDFF              call 004469C1
:0046949F 8945E0                  mov dword ptr [ebp-20], eax
:004694A2 B9A8034B00              mov ecx, 004B03A8
:004694A7 E83CD5FDFF              call 004469E8
:004694AC 8945EC                  mov dword ptr [ebp-14], eax
:004694AF 8B45BC                  mov eax, dword ptr [ebp-44]
:004694B2 99                      cdq
:004694B3 83E20F                  and edx, 0000000F
:004694B6 03C2                    add eax, edx
:004694B8 C1F804                  sar eax, 04
:004694BB C1E004                  shl eax, 04
:004694BE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004694C1 2BC8                    sub ecx, eax
:004694C3 85C9                    test ecx, ecx
:004694C5 7D09                    jge 004694D0
:004694C7 C745B000000000          mov [ebp-50], 00000000
:004694CE EB17                    jmp 004694E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004694C5(C)
|
:004694D0 8B45BC                  mov eax, dword ptr [ebp-44]
:004694D3 99                      cdq
:004694D4 83E20F                  and edx, 0000000F
:004694D7 03C2                    add eax, edx
:004694D9 C1F804                  sar eax, 04
:004694DC C1E004                  shl eax, 04
:004694DF 8B55E0                  mov edx, dword ptr [ebp-20]
:004694E2 2BD0                    sub edx, eax
:004694E4 8955B0                  mov dword ptr [ebp-50], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004694CE(U)
|
:004694E7 8B45B0                  mov eax, dword ptr [ebp-50]
:004694EA 8945E4                  mov dword ptr [ebp-1C], eax
:004694ED 8B45B8                  mov eax, dword ptr [ebp-48]
:004694F0 99                      cdq
:004694F1 83E20F                  and edx, 0000000F
:004694F4 03C2                    add eax, edx
:004694F6 C1F804                  sar eax, 04
:004694F9 C1E004                  shl eax, 04
:004694FC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004694FF 2BC8                    sub ecx, eax
:00469501 85C9                    test ecx, ecx
:00469503 7D09                    jge 0046950E
:00469505 C745AC00000000          mov [ebp-54], 00000000
:0046950C EB17                    jmp 00469525

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469503(C)
|
:0046950E 8B45B8                  mov eax, dword ptr [ebp-48]
:00469511 99                      cdq
:00469512 83E20F                  and edx, 0000000F
:00469515 03C2                    add eax, edx
:00469517 C1F804                  sar eax, 04
:0046951A C1E004                  shl eax, 04
:0046951D 8B55EC                  mov edx, dword ptr [ebp-14]
:00469520 2BD0                    sub edx, eax
:00469522 8955AC                  mov dword ptr [ebp-54], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046950C(U)
|
:00469525 8B45AC                  mov eax, dword ptr [ebp-54]
:00469528 8945DC                  mov dword ptr [ebp-24], eax
:0046952B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046952E 51                      push ecx
:0046952F B9A8034B00              mov ecx, 004B03A8
:00469534 E813D3FDFF              call 0044684C
:00469539 8B55DC                  mov edx, dword ptr [ebp-24]
:0046953C 52                      push edx
:0046953D B9A8034B00              mov ecx, 004B03A8
:00469542 E82CD3FDFF              call 00446873
:00469547 B9A8034B00              mov ecx, 004B03A8
:0046954C E89CD2FDFF              call 004467ED
:00469551 C1E004                  shl eax, 04
:00469554 8945C4                  mov dword ptr [ebp-3C], eax
:00469557 B9A8034B00              mov ecx, 004B03A8
:0046955C E8B3D2FDFF              call 00446814
:00469561 C1E004                  shl eax, 04
:00469564 8945E8                  mov dword ptr [ebp-18], eax
:00469567 C705E0184B001C000000    mov dword ptr [004B18E0], 0000001C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00469571 C705E4184B0007000000    mov dword ptr [004B18E4], 00000007
:0046957B C705E8184B0000000000    mov dword ptr [004B18E8], 00000000
:00469585 8B45E0                  mov eax, dword ptr [ebp-20]
:00469588 A3EC184B00              mov dword ptr [004B18EC], eax
:0046958D 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00469590 890DF0184B00            mov dword ptr [004B18F0], ecx
:00469596 8B55C4                  mov edx, dword ptr [ebp-3C]
:00469599 8915F4184B00            mov dword ptr [004B18F4], edx
:0046959F 6A01                    push 00000001
:004695A1 68E0184B00              push 004B18E0
:004695A6 6A00                    push 00000000
:004695A8 8B4508                  mov eax, dword ptr [ebp+08]
:004695AB 50                      push eax

* Reference To: USER32.SetScrollInfo, Ord:020Ah
                                  |
:004695AC FF1570864B00            Call dword ptr [004B8670]
:004695B2 C70500194B001C000000    mov dword ptr [004B1900], 0000001C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004695BC C70504194B0007000000    mov dword ptr [004B1904], 00000007
:004695C6 C70508194B0000000000    mov dword ptr [004B1908], 00000000
:004695D0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004695D3 890D0C194B00            mov dword ptr [004B190C], ecx
:004695D9 8B55B8                  mov edx, dword ptr [ebp-48]
:004695DC 891510194B00            mov dword ptr [004B1910], edx
:004695E2 8B45E8                  mov eax, dword ptr [ebp-18]
:004695E5 A314194B00              mov dword ptr [004B1914], eax
:004695EA 6A01                    push 00000001
:004695EC 6800194B00              push 004B1900
:004695F1 6A01                    push 00000001
:004695F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004695F6 51                      push ecx

* Reference To: USER32.SetScrollInfo, Ord:020Ah
                                  |
:004695F7 FF1570864B00            Call dword ptr [004B8670]
:004695FD B9A8034B00              mov ecx, 004B03A8
:00469602 E8E6D1FDFF              call 004467ED
:00469607 8945D8                  mov dword ptr [ebp-28], eax
:0046960A 8B45BC                  mov eax, dword ptr [ebp-44]
:0046960D 99                      cdq
:0046960E 83E20F                  and edx, 0000000F
:00469611 03C2                    add eax, edx
:00469613 C1F804                  sar eax, 04
:00469616 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00469619 03C8                    add ecx, eax
:0046961B 8B45E0                  mov eax, dword ptr [ebp-20]
:0046961E 99                      cdq
:0046961F 83E20F                  and edx, 0000000F
:00469622 03C2                    add eax, edx
:00469624 C1F804                  sar eax, 04
:00469627 3BC8                    cmp ecx, eax
:00469629 7E35                    jle 00469660
:0046962B 8B45BC                  mov eax, dword ptr [ebp-44]
:0046962E 99                      cdq
:0046962F 83E20F                  and edx, 0000000F
:00469632 03C2                    add eax, edx
:00469634 C1F804                  sar eax, 04
:00469637 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0046963A 03C8                    add ecx, eax
:0046963C 8B45E0                  mov eax, dword ptr [ebp-20]
:0046963F 99                      cdq
:00469640 83E20F                  and edx, 0000000F
:00469643 03C2                    add eax, edx
:00469645 C1F804                  sar eax, 04
:00469648 2BC8                    sub ecx, eax
:0046964A 8B55D8                  mov edx, dword ptr [ebp-28]
:0046964D 2BD1                    sub edx, ecx
:0046964F 8955D8                  mov dword ptr [ebp-28], edx
:00469652 8B45D8                  mov eax, dword ptr [ebp-28]
:00469655 50                      push eax
:00469656 B9A8034B00              mov ecx, 004B03A8
:0046965B E89ED1FDFF              call 004467FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469629(C)
|
:00469660 B9A8034B00              mov ecx, 004B03A8
:00469665 E8AAD1FDFF              call 00446814
:0046966A 8945C0                  mov dword ptr [ebp-40], eax
:0046966D 8B45B8                  mov eax, dword ptr [ebp-48]
:00469670 99                      cdq
:00469671 83E20F                  and edx, 0000000F
:00469674 03C2                    add eax, edx
:00469676 C1F804                  sar eax, 04
:00469679 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0046967C 03C8                    add ecx, eax
:0046967E 8B45EC                  mov eax, dword ptr [ebp-14]
:00469681 99                      cdq
:00469682 83E20F                  and edx, 0000000F
:00469685 03C2                    add eax, edx
:00469687 C1F804                  sar eax, 04
:0046968A 3BC8                    cmp ecx, eax
:0046968C 7E35                    jle 004696C3
:0046968E 8B45B8                  mov eax, dword ptr [ebp-48]
:00469691 99                      cdq
:00469692 83E20F                  and edx, 0000000F
:00469695 03C2                    add eax, edx
:00469697 C1F804                  sar eax, 04
:0046969A 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0046969D 03C8                    add ecx, eax
:0046969F 8B45EC                  mov eax, dword ptr [ebp-14]
:004696A2 99                      cdq
:004696A3 83E20F                  and edx, 0000000F
:004696A6 03C2                    add eax, edx
:004696A8 C1F804                  sar eax, 04
:004696AB 2BC8                    sub ecx, eax
:004696AD 8B55C0                  mov edx, dword ptr [ebp-40]
:004696B0 2BD1                    sub edx, ecx
:004696B2 8955C0                  mov dword ptr [ebp-40], edx
:004696B5 8B45C0                  mov eax, dword ptr [ebp-40]
:004696B8 50                      push eax
:004696B9 B9A8034B00              mov ecx, 004B03A8
:004696BE E862D1FDFF              call 00446825

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046968C(C)
|
:004696C3 8D4DC8                  lea ecx, dword ptr [ebp-38]
:004696C6 51                      push ecx
:004696C7 8B5508                  mov edx, dword ptr [ebp+08]
:004696CA 52                      push edx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004696CB FF1558874B00            Call dword ptr [004B8758]
:004696D1 8B75D0                  mov esi, dword ptr [ebp-30]
:004696D4 2B75C8                  sub esi, dword ptr [ebp-38]
:004696D7 B9A8034B00              mov ecx, 004B03A8
:004696DC E8E0D2FDFF              call 004469C1
:004696E1 3BF0                    cmp esi, eax
:004696E3 7E0E                    jle 004696F3
:004696E5 6A00                    push 00000000
:004696E7 6A00                    push 00000000
:004696E9 8B4508                  mov eax, dword ptr [ebp+08]
:004696EC 50                      push eax

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:004696ED FF1540864B00            Call dword ptr [004B8640]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004696E3(C)
|
:004696F3 8B75D4                  mov esi, dword ptr [ebp-2C]
:004696F6 2B75CC                  sub esi, dword ptr [ebp-34]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004696F9 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004696FB FF1578874B00            Call dword ptr [004B8778]
:00469701 2BF0                    sub esi, eax
:00469703 6A37                    push 00000037

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00469705 FF1578874B00            Call dword ptr [004B8778]
:0046970B 2BF0                    sub esi, eax
:0046970D 83EE28                  sub esi, 00000028
:00469710 85F6                    test esi, esi
:00469712 7D09                    jge 0046971D
:00469714 C745A800000000          mov [ebp-58], 00000000
:0046971B EB20                    jmp 0046973D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469712(C)
|
:0046971D 8B75D4                  mov esi, dword ptr [ebp-2C]
:00469720 2B75CC                  sub esi, dword ptr [ebp-34]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00469723 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00469725 FF1578874B00            Call dword ptr [004B8778]
:0046972B 2BF0                    sub esi, eax
:0046972D 6A37                    push 00000037

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046972F FF1578874B00            Call dword ptr [004B8778]
:00469735 2BF0                    sub esi, eax
:00469737 83EE28                  sub esi, 00000028
:0046973A 8975A8                  mov dword ptr [ebp-58], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046971B(U)
|
:0046973D 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00469740 894DB4                  mov dword ptr [ebp-4C], ecx
:00469743 B9A8034B00              mov ecx, 004B03A8
:00469748 E89BD2FDFF              call 004469E8
:0046974D 3945B4                  cmp dword ptr [ebp-4C], eax
:00469750 7E0E                    jle 00469760
:00469752 6A00                    push 00000000
:00469754 6A01                    push 00000001
:00469756 8B5508                  mov edx, dword ptr [ebp+08]
:00469759 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:0046975A FF1540864B00            Call dword ptr [004B8640]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469750(C)
|
:00469760 6A00                    push 00000000
:00469762 B9A8034B00              mov ecx, 004B03A8
:00469767 E8A8D0FDFF              call 00446814
:0046976C 50                      push eax
:0046976D B9A8034B00              mov ecx, 004B03A8
:00469772 E876D0FDFF              call 004467ED
:00469777 50                      push eax
:00469778 B9A8034B00              mov ecx, 004B03A8
:0046977D E8A2BFFDFF              call 00445724
:00469782 6A01                    push 00000001
:00469784 6A00                    push 00000000
:00469786 8B4508                  mov eax, dword ptr [ebp+08]
:00469789 50                      push eax

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:0046978A FF15CC864B00            Call dword ptr [004B86CC]
:00469790 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469793 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00469794 FF15A4864B00            Call dword ptr [004B86A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004693E2(C)
|
:0046979A 5E                      pop esi
:0046979B 8BE5                    mov esp, ebp
:0046979D 5D                      pop ebp
:0046979E C3                      ret



* Referenced by a CALL at Address:
|:00463E0B   
|
:0046979F 55                      push ebp
:004697A0 8BEC                    mov ebp, esp
:004697A2 83EC14                  sub esp, 00000014
:004697A5 B9180A4B00              mov ecx, 004B0A18
:004697AA E861D2FDFF              call 00446A10
:004697AF 85C0                    test eax, eax
:004697B1 0F84D3010000            je 0046998A
:004697B7 B9680C4B00              mov ecx, 004B0C68
:004697BC E89FAEFEFF              call 00454660
:004697C1 85C0                    test eax, eax
:004697C3 0F84C1010000            je 0046998A
:004697C9 B9A8034B00              mov ecx, 004B03A8
:004697CE E81AD0FDFF              call 004467ED
:004697D3 8945F8                  mov dword ptr [ebp-08], eax
:004697D6 6A00                    push 00000000
:004697D8 8B4508                  mov eax, dword ptr [ebp+08]
:004697DB 50                      push eax

* Reference To: USER32.GetScrollPos, Ord:0125h
                                  |
:004697DC FF1578864B00            Call dword ptr [004B8678]
:004697E2 8945FC                  mov dword ptr [ebp-04], eax
:004697E5 B9A8034B00              mov ecx, 004B03A8
:004697EA E803B9FDFF              call 004450F2
:004697EF B9A8034B00              mov ecx, 004B03A8
:004697F4 E84CB2FDFF              call 00444A45
:004697F9 85C0                    test eax, eax
:004697FB 740A                    je 00469807
:004697FD B9A8034B00              mov ecx, 004B03A8
:00469802 E8D9B1FDFF              call 004449E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004697FB(C)
|
:00469807 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046980A 81E1FFFF0000            and ecx, 0000FFFF
:00469810 894DF4                  mov dword ptr [ebp-0C], ecx
:00469813 837DF405                cmp dword ptr [ebp-0C], 00000005
:00469817 0F871E010000            ja 0046993B
:0046981D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00469820 FF24958E994600          jmp dword ptr [4*edx+0046998E]
:00469827 8B45F8                  mov eax, dword ptr [ebp-08]
:0046982A 83E803                  sub eax, 00000003
:0046982D 8945F8                  mov dword ptr [ebp-08], eax
:00469830 33C9                    xor ecx, ecx
:00469832 837DF800                cmp dword ptr [ebp-08], 00000000
:00469836 0F9CC1                  setl cl
:00469839 49                      dec ecx
:0046983A 234DF8                  and ecx, dword ptr [ebp-08]
:0046983D 894DF8                  mov dword ptr [ebp-08], ecx
:00469840 E9F6000000              jmp 0046993B
:00469845 8B55F8                  mov edx, dword ptr [ebp-08]
:00469848 83C203                  add edx, 00000003
:0046984B 8955F8                  mov dword ptr [ebp-08], edx
:0046984E B9A8034B00              mov ecx, 004B03A8
:00469853 E8E3CFFDFF              call 0044683B
:00469858 99                      cdq
:00469859 B930000000              mov ecx, 00000030
:0046985E F7F9                    idiv ecx
:00469860 6BC003                  imul eax, 00000003
:00469863 3945F8                  cmp dword ptr [ebp-08], eax
:00469866 7D08                    jge 00469870
:00469868 8B55F8                  mov edx, dword ptr [ebp-08]
:0046986B 8955F0                  mov dword ptr [ebp-10], edx
:0046986E EB18                    jmp 00469888

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469866(C)
|
:00469870 B9A8034B00              mov ecx, 004B03A8
:00469875 E8C1CFFDFF              call 0044683B
:0046987A 99                      cdq
:0046987B B930000000              mov ecx, 00000030
:00469880 F7F9                    idiv ecx
:00469882 6BC003                  imul eax, 00000003
:00469885 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046986E(U)
|
:00469888 8B55F0                  mov edx, dword ptr [ebp-10]
:0046988B 8955F8                  mov dword ptr [ebp-08], edx
:0046988E E9A8000000              jmp 0046993B
:00469893 B9A8034B00              mov ecx, 004B03A8
:00469898 E8ECCFFDFF              call 00446889
:0046989D 99                      cdq
:0046989E 83E20F                  and edx, 0000000F
:004698A1 03C2                    add eax, edx
:004698A3 C1F804                  sar eax, 04
:004698A6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004698A9 2BC8                    sub ecx, eax
:004698AB 894DF8                  mov dword ptr [ebp-08], ecx
:004698AE 33D2                    xor edx, edx
:004698B0 837DF800                cmp dword ptr [ebp-08], 00000000
:004698B4 0F9CC2                  setl dl
:004698B7 4A                      dec edx
:004698B8 2355F8                  and edx, dword ptr [ebp-08]
:004698BB 8955F8                  mov dword ptr [ebp-08], edx
:004698BE EB7B                    jmp 0046993B
:004698C0 B9A8034B00              mov ecx, 004B03A8
:004698C5 E8BFCFFDFF              call 00446889
:004698CA 99                      cdq
:004698CB 83E20F                  and edx, 0000000F
:004698CE 03C2                    add eax, edx
:004698D0 C1F804                  sar eax, 04
:004698D3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004698D6 03C8                    add ecx, eax
:004698D8 894DF8                  mov dword ptr [ebp-08], ecx
:004698DB B9A8034B00              mov ecx, 004B03A8
:004698E0 E856CFFDFF              call 0044683B
:004698E5 99                      cdq
:004698E6 B930000000              mov ecx, 00000030
:004698EB F7F9                    idiv ecx
:004698ED 6BC003                  imul eax, 00000003
:004698F0 3945F8                  cmp dword ptr [ebp-08], eax
:004698F3 7D08                    jge 004698FD
:004698F5 8B55F8                  mov edx, dword ptr [ebp-08]
:004698F8 8955EC                  mov dword ptr [ebp-14], edx
:004698FB EB18                    jmp 00469915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004698F3(C)
|
:004698FD B9A8034B00              mov ecx, 004B03A8
:00469902 E834CFFDFF              call 0044683B
:00469907 99                      cdq
:00469908 B930000000              mov ecx, 00000030
:0046990D F7F9                    idiv ecx
:0046990F 6BC003                  imul eax, 00000003
:00469912 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004698FB(U)
|
:00469915 8B55EC                  mov edx, dword ptr [ebp-14]
:00469918 8955F8                  mov dword ptr [ebp-08], edx
:0046991B EB1E                    jmp 0046993B
:0046991D 8B450C                  mov eax, dword ptr [ebp+0C]
:00469920 C1E810                  shr eax, 10
:00469923 25FFFF0000              and eax, 0000FFFF
:00469928 25FFFF0000              and eax, 0000FFFF
:0046992D 99                      cdq
:0046992E B930000000              mov ecx, 00000030
:00469933 F7F9                    idiv ecx
:00469935 6BC003                  imul eax, 00000003
:00469938 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469817(C), :00469840(U), :0046988E(U), :004698BE(U), :0046991B(U)
|
:0046993B 8B45FC                  mov eax, dword ptr [ebp-04]
:0046993E 99                      cdq
:0046993F 83E20F                  and edx, 0000000F
:00469942 03C2                    add eax, edx
:00469944 C1F804                  sar eax, 04
:00469947 3945F8                  cmp dword ptr [ebp-08], eax
:0046994A 743E                    je 0046998A
:0046994C 8B55F8                  mov edx, dword ptr [ebp-08]
:0046994F 52                      push edx
:00469950 B9A8034B00              mov ecx, 004B03A8
:00469955 E8A4CEFDFF              call 004467FE
:0046995A 6A01                    push 00000001
:0046995C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046995F C1E004                  shl eax, 04
:00469962 50                      push eax
:00469963 6A00                    push 00000000
:00469965 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469968 51                      push ecx

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:00469969 FF15C4864B00            Call dword ptr [004B86C4]
:0046996F 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00469975 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469976 FF15E0864B00            Call dword ptr [004B86E0]
:0046997C 85C0                    test eax, eax
:0046997E 740A                    je 0046998A
:00469980 B9180A4B00              mov ecx, 004B0A18
:00469985 E86DAFFEFF              call 004548F7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004697B1(C), :004697C3(C), :0046994A(C), :0046997E(C)
|
:0046998A 8BE5                    mov esp, ebp
:0046998C 5D                      pop ebp
:0046998D C3                      ret



:0046998E 27984600                DWORD 00469827
:00469992 45984600                DWORD 00469845
:00469996 93984600                DWORD 00469893
:0046999A C0984600                DWORD 004698C0
:0046999E 3B994600                DWORD 0046993B
:004699A2 1D994600                DWORD 0046991D



* Referenced by a CALL at Address:
|:00463E24   
|
:004699A6 55                      push ebp
:004699A7 8BEC                    mov ebp, esp
:004699A9 83EC14                  sub esp, 00000014
:004699AC B9180A4B00              mov ecx, 004B0A18
:004699B1 E85AD0FDFF              call 00446A10
:004699B6 85C0                    test eax, eax
:004699B8 0F84D3010000            je 00469B91
:004699BE B9680C4B00              mov ecx, 004B0C68
:004699C3 E898ACFEFF              call 00454660
:004699C8 85C0                    test eax, eax
:004699CA 0F84C1010000            je 00469B91
:004699D0 B9A8034B00              mov ecx, 004B03A8
:004699D5 E83ACEFDFF              call 00446814
:004699DA 8945F8                  mov dword ptr [ebp-08], eax
:004699DD 6A01                    push 00000001
:004699DF 8B4508                  mov eax, dword ptr [ebp+08]
:004699E2 50                      push eax

* Reference To: USER32.GetScrollPos, Ord:0125h
                                  |
:004699E3 FF1578864B00            Call dword ptr [004B8678]
:004699E9 8945FC                  mov dword ptr [ebp-04], eax
:004699EC B9A8034B00              mov ecx, 004B03A8
:004699F1 E8FCB6FDFF              call 004450F2
:004699F6 B9A8034B00              mov ecx, 004B03A8
:004699FB E845B0FDFF              call 00444A45
:00469A00 85C0                    test eax, eax
:00469A02 740A                    je 00469A0E
:00469A04 B9A8034B00              mov ecx, 004B03A8
:00469A09 E8D2AFFDFF              call 004449E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A02(C)
|
:00469A0E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00469A11 81E1FFFF0000            and ecx, 0000FFFF
:00469A17 894DF4                  mov dword ptr [ebp-0C], ecx
:00469A1A 837DF405                cmp dword ptr [ebp-0C], 00000005
:00469A1E 0F871E010000            ja 00469B42
:00469A24 8B55F4                  mov edx, dword ptr [ebp-0C]
:00469A27 FF2495959B4600          jmp dword ptr [4*edx+00469B95]
:00469A2E 8B45F8                  mov eax, dword ptr [ebp-08]
:00469A31 83E803                  sub eax, 00000003
:00469A34 8945F8                  mov dword ptr [ebp-08], eax
:00469A37 33C9                    xor ecx, ecx
:00469A39 837DF800                cmp dword ptr [ebp-08], 00000000
:00469A3D 0F9CC1                  setl cl
:00469A40 49                      dec ecx
:00469A41 234DF8                  and ecx, dword ptr [ebp-08]
:00469A44 894DF8                  mov dword ptr [ebp-08], ecx
:00469A47 E9F6000000              jmp 00469B42
:00469A4C 8B55F8                  mov edx, dword ptr [ebp-08]
:00469A4F 83C203                  add edx, 00000003
:00469A52 8955F8                  mov dword ptr [ebp-08], edx
:00469A55 B9A8034B00              mov ecx, 004B03A8
:00469A5A E803CEFDFF              call 00446862
:00469A5F 99                      cdq
:00469A60 B930000000              mov ecx, 00000030
:00469A65 F7F9                    idiv ecx
:00469A67 6BC003                  imul eax, 00000003
:00469A6A 3945F8                  cmp dword ptr [ebp-08], eax
:00469A6D 7D08                    jge 00469A77
:00469A6F 8B55F8                  mov edx, dword ptr [ebp-08]
:00469A72 8955F0                  mov dword ptr [ebp-10], edx
:00469A75 EB18                    jmp 00469A8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A6D(C)
|
:00469A77 B9A8034B00              mov ecx, 004B03A8
:00469A7C E8E1CDFDFF              call 00446862
:00469A81 99                      cdq
:00469A82 B930000000              mov ecx, 00000030
:00469A87 F7F9                    idiv ecx
:00469A89 6BC003                  imul eax, 00000003
:00469A8C 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A75(U)
|
:00469A8F 8B55F0                  mov edx, dword ptr [ebp-10]
:00469A92 8955F8                  mov dword ptr [ebp-08], edx
:00469A95 E9A8000000              jmp 00469B42
:00469A9A B9A8034B00              mov ecx, 004B03A8
:00469A9F E80CCEFDFF              call 004468B0
:00469AA4 99                      cdq
:00469AA5 83E20F                  and edx, 0000000F
:00469AA8 03C2                    add eax, edx
:00469AAA C1F804                  sar eax, 04
:00469AAD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469AB0 2BC8                    sub ecx, eax
:00469AB2 894DF8                  mov dword ptr [ebp-08], ecx
:00469AB5 33D2                    xor edx, edx
:00469AB7 837DF800                cmp dword ptr [ebp-08], 00000000
:00469ABB 0F9CC2                  setl dl
:00469ABE 4A                      dec edx
:00469ABF 2355F8                  and edx, dword ptr [ebp-08]
:00469AC2 8955F8                  mov dword ptr [ebp-08], edx
:00469AC5 EB7B                    jmp 00469B42
:00469AC7 B9A8034B00              mov ecx, 004B03A8
:00469ACC E8DFCDFDFF              call 004468B0
:00469AD1 99                      cdq
:00469AD2 83E20F                  and edx, 0000000F
:00469AD5 03C2                    add eax, edx
:00469AD7 C1F804                  sar eax, 04
:00469ADA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469ADD 03C8                    add ecx, eax
:00469ADF 894DF8                  mov dword ptr [ebp-08], ecx
:00469AE2 B9A8034B00              mov ecx, 004B03A8
:00469AE7 E876CDFDFF              call 00446862
:00469AEC 99                      cdq
:00469AED B930000000              mov ecx, 00000030
:00469AF2 F7F9                    idiv ecx
:00469AF4 6BC003                  imul eax, 00000003
:00469AF7 3945F8                  cmp dword ptr [ebp-08], eax
:00469AFA 7D08                    jge 00469B04
:00469AFC 8B55F8                  mov edx, dword ptr [ebp-08]
:00469AFF 8955EC                  mov dword ptr [ebp-14], edx
:00469B02 EB18                    jmp 00469B1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469AFA(C)
|
:00469B04 B9A8034B00              mov ecx, 004B03A8
:00469B09 E854CDFDFF              call 00446862
:00469B0E 99                      cdq
:00469B0F B930000000              mov ecx, 00000030
:00469B14 F7F9                    idiv ecx
:00469B16 6BC003                  imul eax, 00000003
:00469B19 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469B02(U)
|
:00469B1C 8B55EC                  mov edx, dword ptr [ebp-14]
:00469B1F 8955F8                  mov dword ptr [ebp-08], edx
:00469B22 EB1E                    jmp 00469B42
:00469B24 8B450C                  mov eax, dword ptr [ebp+0C]
:00469B27 C1E810                  shr eax, 10
:00469B2A 25FFFF0000              and eax, 0000FFFF
:00469B2F 25FFFF0000              and eax, 0000FFFF
:00469B34 99                      cdq
:00469B35 B930000000              mov ecx, 00000030
:00469B3A F7F9                    idiv ecx
:00469B3C 6BC003                  imul eax, 00000003
:00469B3F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469A1E(C), :00469A47(U), :00469A95(U), :00469AC5(U), :00469B22(U)
|
:00469B42 8B45FC                  mov eax, dword ptr [ebp-04]
:00469B45 99                      cdq
:00469B46 83E20F                  and edx, 0000000F
:00469B49 03C2                    add eax, edx
:00469B4B C1F804                  sar eax, 04
:00469B4E 3945F8                  cmp dword ptr [ebp-08], eax
:00469B51 743E                    je 00469B91
:00469B53 8B55F8                  mov edx, dword ptr [ebp-08]
:00469B56 52                      push edx
:00469B57 B9A8034B00              mov ecx, 004B03A8
:00469B5C E8C4CCFDFF              call 00446825
:00469B61 6A01                    push 00000001
:00469B63 8B45F8                  mov eax, dword ptr [ebp-08]
:00469B66 C1E004                  shl eax, 04
:00469B69 50                      push eax
:00469B6A 6A01                    push 00000001
:00469B6C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469B6F 51                      push ecx

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:00469B70 FF15C4864B00            Call dword ptr [004B86C4]
:00469B76 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00469B7C 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469B7D FF15E0864B00            Call dword ptr [004B86E0]
:00469B83 85C0                    test eax, eax
:00469B85 740A                    je 00469B91
:00469B87 B9180A4B00              mov ecx, 004B0A18
:00469B8C E866ADFEFF              call 004548F7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004699B8(C), :004699CA(C), :00469B51(C), :00469B85(C)
|
:00469B91 8BE5                    mov esp, ebp
:00469B93 5D                      pop ebp
:00469B94 C3                      ret



:00469B95 2E9A4600                DWORD 00469A2E
:00469B99 4C9A4600                DWORD 00469A4C
:00469B9D 9A9A4600                DWORD 00469A9A
:00469BA1 C79A4600                DWORD 00469AC7
:00469BA5 429B4600                DWORD 00469B42
:00469BA9 249B4600                DWORD 00469B24


:00469BAD 55                      push ebp
:00469BAE 8BEC                    mov ebp, esp
:00469BB0 83EC08                  sub esp, 00000008
:00469BB3 837D0801                cmp dword ptr [ebp+08], 00000001
:00469BB7 7D09                    jge 00469BC2
:00469BB9 C745FC01000000          mov [ebp-04], 00000001
:00469BC0 EB06                    jmp 00469BC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469BB7(C)
|
:00469BC2 8B4508                  mov eax, dword ptr [ebp+08]
:00469BC5 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469BC0(U)
|
:00469BC8 837D0818                cmp dword ptr [ebp+08], 00000018
:00469BCC 7E09                    jle 00469BD7
:00469BCE C745F818000000          mov [ebp-08], 00000018
:00469BD5 EB06                    jmp 00469BDD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469BCC(C)
|
:00469BD7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469BDA 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469BD5(U)
|
:00469BDD 8B5508                  mov edx, dword ptr [ebp+08]
:00469BE0 8915D8E94700            mov dword ptr [0047E9D8], edx
:00469BE6 8BE5                    mov esp, ebp
:00469BE8 5D                      pop ebp
:00469BE9 C3                      ret



* Referenced by a CALL at Addresses:
|:00412612   , :00463944   
|
:00469BEA 55                      push ebp
:00469BEB 8BEC                    mov ebp, esp
:00469BED A1C40C4B00              mov eax, dword ptr [004B0CC4]
:00469BF2 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469BF3 FF15E0864B00            Call dword ptr [004B86E0]
:00469BF9 85C0                    test eax, eax
:00469BFB 740F                    je 00469C0C
:00469BFD 6A00                    push 00000000
:00469BFF 8B0DC40C4B00            mov ecx, dword ptr [004B0CC4]
:00469C05 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00469C06 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469BFB(C)
|
:00469C0C 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00469C12 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469C13 FF15E0864B00            Call dword ptr [004B86E0]
:00469C19 85C0                    test eax, eax
:00469C1B 7418                    je 00469C35
:00469C1D 6A00                    push 00000000

* Possible Ref to Menu: SMAPMENU, Item: "܉(C)"
                                  |
:00469C1F 68BD9C0000              push 00009CBD
:00469C24 6811010000              push 00000111
:00469C29 A1C00C4B00              mov eax, dword ptr [004B0CC0]
:00469C2E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00469C2F FF15D8864B00            Call dword ptr [004B86D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469C1B(C)
|
:00469C35 8B0D8C184B00            mov ecx, dword ptr [004B188C]
:00469C3B 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469C3C FF15E0864B00            Call dword ptr [004B86E0]
:00469C42 85C0                    test eax, eax
:00469C44 740F                    je 00469C55
:00469C46 6A00                    push 00000000
:00469C48 8B158C184B00            mov edx, dword ptr [004B188C]
:00469C4E 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00469C4F FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469C44(C)
|
:00469C55 A1700E4B00              mov eax, dword ptr [004B0E70]
:00469C5A 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469C5B FF15E0864B00            Call dword ptr [004B86E0]
:00469C61 85C0                    test eax, eax
:00469C63 740F                    je 00469C74
:00469C65 6A00                    push 00000000
:00469C67 8B0D700E4B00            mov ecx, dword ptr [004B0E70]
:00469C6D 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00469C6E FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469C63(C)
|
:00469C74 B9B0114800              mov ecx, 004811B0
:00469C79 E8525AFCFF              call 0042F6D0
:00469C7E 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469C7F FF15E0864B00            Call dword ptr [004B86E0]
:00469C85 85C0                    test eax, eax
:00469C87 7413                    je 00469C9C
:00469C89 6A00                    push 00000000
:00469C8B B9B0114800              mov ecx, 004811B0
:00469C90 E83B5AFCFF              call 0042F6D0
:00469C95 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00469C96 FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469C87(C)
|
:00469C9C B9B8114800              mov ecx, 004811B8
:00469CA1 E82A5AFCFF              call 0042F6D0
:00469CA6 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469CA7 FF15E0864B00            Call dword ptr [004B86E0]
:00469CAD 85C0                    test eax, eax
:00469CAF 7413                    je 00469CC4
:00469CB1 6A00                    push 00000000
:00469CB3 B9B8114800              mov ecx, 004811B8
:00469CB8 E8135AFCFF              call 0042F6D0
:00469CBD 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00469CBE FF15E4864B00            Call dword ptr [004B86E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469CAF(C)
|
:00469CC4 5D                      pop ebp
:00469CC5 C3                      ret



* Referenced by a CALL at Addresses:
|:004265C6   , :00445217   , :00457200   
|
:00469CC6 55                      push ebp
:00469CC7 8BEC                    mov ebp, esp
:00469CC9 83EC1C                  sub esp, 0000001C
:00469CCC C745FC00000000          mov [ebp-04], 00000000
:00469CD3 A1380E4B00              mov eax, dword ptr [004B0E38]
:00469CD8 50                      push eax
:00469CD9 B980594800              mov ecx, 00485980
:00469CDE E8386CFBFF              call 0042091B
:00469CE3 8B08                    mov ecx, dword ptr [eax]
:00469CE5 8B5004                  mov edx, dword ptr [eax+04]
:00469CE8 894DF4                  mov dword ptr [ebp-0C], ecx
:00469CEB 8955F8                  mov dword ptr [ebp-08], edx
:00469CEE 8D45F4                  lea eax, dword ptr [ebp-0C]
:00469CF1 50                      push eax
:00469CF2 8B0D380E4B00            mov ecx, dword ptr [004B0E38]
:00469CF8 51                      push ecx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00469CF9 FF15F8864B00            Call dword ptr [004B86F8]
:00469CFF 8D55E4                  lea edx, dword ptr [ebp-1C]
:00469D02 52                      push edx
:00469D03 A1380E4B00              mov eax, dword ptr [004B0E38]
:00469D08 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00469D09 FF1558874B00            Call dword ptr [004B8758]
:00469D0F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00469D12 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:00469D15 7C18                    jl 00469D2F
:00469D17 8B55F4                  mov edx, dword ptr [ebp-0C]
:00469D1A 3B55EC                  cmp edx, dword ptr [ebp-14]
:00469D1D 7F10                    jg 00469D2F
:00469D1F 8B45F8                  mov eax, dword ptr [ebp-08]
:00469D22 3B45E8                  cmp eax, dword ptr [ebp-18]
:00469D25 7C08                    jl 00469D2F
:00469D27 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469D2A 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00469D2D 7E08                    jle 00469D37

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469D15(C), :00469D1D(C), :00469D25(C)
|
:00469D2F 8B45FC                  mov eax, dword ptr [ebp-04]
:00469D32 E97E010000              jmp 00469EB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D2D(C)
|
:00469D37 8B15C00C4B00            mov edx, dword ptr [004B0CC0]
:00469D3D 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469D3E FF15E0864B00            Call dword ptr [004B86E0]
:00469D44 85C0                    test eax, eax
:00469D46 7438                    je 00469D80
:00469D48 8D45E4                  lea eax, dword ptr [ebp-1C]
:00469D4B 50                      push eax
:00469D4C 8B0DC00C4B00            mov ecx, dword ptr [004B0CC0]
:00469D52 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00469D53 FF1558874B00            Call dword ptr [004B8758]
:00469D59 8B55F4                  mov edx, dword ptr [ebp-0C]
:00469D5C 3B55E4                  cmp edx, dword ptr [ebp-1C]
:00469D5F 7C1F                    jl 00469D80
:00469D61 8B45F4                  mov eax, dword ptr [ebp-0C]
:00469D64 3B45EC                  cmp eax, dword ptr [ebp-14]
:00469D67 7F17                    jg 00469D80
:00469D69 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469D6C 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:00469D6F 7C0F                    jl 00469D80
:00469D71 8B55F8                  mov edx, dword ptr [ebp-08]
:00469D74 3B55F0                  cmp edx, dword ptr [ebp-10]
:00469D77 7F07                    jg 00469D80
:00469D79 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469D46(C), :00469D5F(C), :00469D67(C), :00469D6F(C), :00469D77(C)
|
:00469D80 A1700E4B00              mov eax, dword ptr [004B0E70]
:00469D85 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469D86 FF15E0864B00            Call dword ptr [004B86E0]
:00469D8C 85C0                    test eax, eax
:00469D8E 7438                    je 00469DC8
:00469D90 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00469D93 51                      push ecx
:00469D94 8B15700E4B00            mov edx, dword ptr [004B0E70]
:00469D9A 52                      push edx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00469D9B FF1558874B00            Call dword ptr [004B8758]
:00469DA1 8B45F4                  mov eax, dword ptr [ebp-0C]
:00469DA4 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00469DA7 7C1F                    jl 00469DC8
:00469DA9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00469DAC 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:00469DAF 7F17                    jg 00469DC8
:00469DB1 8B55F8                  mov edx, dword ptr [ebp-08]
:00469DB4 3B55E8                  cmp edx, dword ptr [ebp-18]
:00469DB7 7C0F                    jl 00469DC8
:00469DB9 8B45F8                  mov eax, dword ptr [ebp-08]
:00469DBC 3B45F0                  cmp eax, dword ptr [ebp-10]
:00469DBF 7F07                    jg 00469DC8
:00469DC1 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469D8E(C), :00469DA7(C), :00469DAF(C), :00469DB7(C), :00469DBF(C)
|
:00469DC8 8B0D8C184B00            mov ecx, dword ptr [004B188C]
:00469DCE 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469DCF FF15E0864B00            Call dword ptr [004B86E0]
:00469DD5 85C0                    test eax, eax
:00469DD7 7437                    je 00469E10
:00469DD9 8D55E4                  lea edx, dword ptr [ebp-1C]
:00469DDC 52                      push edx
:00469DDD A18C184B00              mov eax, dword ptr [004B188C]
:00469DE2 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00469DE3 FF1558874B00            Call dword ptr [004B8758]
:00469DE9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00469DEC 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:00469DEF 7C1F                    jl 00469E10
:00469DF1 8B55F4                  mov edx, dword ptr [ebp-0C]
:00469DF4 3B55EC                  cmp edx, dword ptr [ebp-14]
:00469DF7 7F17                    jg 00469E10
:00469DF9 8B45F8                  mov eax, dword ptr [ebp-08]
:00469DFC 3B45E8                  cmp eax, dword ptr [ebp-18]
:00469DFF 7C0F                    jl 00469E10
:00469E01 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469E04 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00469E07 7F07                    jg 00469E10
:00469E09 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469DD7(C), :00469DEF(C), :00469DF7(C), :00469DFF(C), :00469E07(C)
|
:00469E10 B9B8114800              mov ecx, 004811B8
:00469E15 E8B658FCFF              call 0042F6D0
:00469E1A 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469E1B FF15E0864B00            Call dword ptr [004B86E0]
:00469E21 85C0                    test eax, eax
:00469E23 743C                    je 00469E61
:00469E25 8D55E4                  lea edx, dword ptr [ebp-1C]
:00469E28 52                      push edx
:00469E29 B9B8114800              mov ecx, 004811B8
:00469E2E E89D58FCFF              call 0042F6D0
:00469E33 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00469E34 FF1558874B00            Call dword ptr [004B8758]
:00469E3A 8B45F4                  mov eax, dword ptr [ebp-0C]
:00469E3D 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00469E40 7C1F                    jl 00469E61
:00469E42 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00469E45 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:00469E48 7F17                    jg 00469E61
:00469E4A 8B55F8                  mov edx, dword ptr [ebp-08]
:00469E4D 3B55E8                  cmp edx, dword ptr [ebp-18]
:00469E50 7C0F                    jl 00469E61
:00469E52 8B45F8                  mov eax, dword ptr [ebp-08]
:00469E55 3B45F0                  cmp eax, dword ptr [ebp-10]
:00469E58 7F07                    jg 00469E61
:00469E5A C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469E23(C), :00469E40(C), :00469E48(C), :00469E50(C), :00469E58(C)
|
:00469E61 B9B0114800              mov ecx, 004811B0
:00469E66 E86558FCFF              call 0042F6D0
:00469E6B 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469E6C FF15E0864B00            Call dword ptr [004B86E0]
:00469E72 85C0                    test eax, eax
:00469E74 743C                    je 00469EB2
:00469E76 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00469E79 51                      push ecx
:00469E7A B9B0114800              mov ecx, 004811B0
:00469E7F E84C58FCFF              call 0042F6D0
:00469E84 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00469E85 FF1558874B00            Call dword ptr [004B8758]
:00469E8B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00469E8E 3B55E4                  cmp edx, dword ptr [ebp-1C]
:00469E91 7C1F                    jl 00469EB2
:00469E93 8B45F4                  mov eax, dword ptr [ebp-0C]
:00469E96 3B45EC                  cmp eax, dword ptr [ebp-14]
:00469E99 7F17                    jg 00469EB2
:00469E9B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469E9E 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:00469EA1 7C0F                    jl 00469EB2
:00469EA3 8B55F8                  mov edx, dword ptr [ebp-08]
:00469EA6 3B55F0                  cmp edx, dword ptr [ebp-10]
:00469EA9 7F07                    jg 00469EB2
:00469EAB C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469E74(C), :00469E91(C), :00469E99(C), :00469EA1(C), :00469EA9(C)
|
:00469EB2 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D32(U)
|
:00469EB5 8BE5                    mov esp, ebp
:00469EB7 5D                      pop ebp
:00469EB8 C3                      ret


:00469EB9 CC                      int 03
:00469EBA CC                      int 03
:00469EBB CC                      int 03
:00469EBC CC                      int 03
:00469EBD CC                      int 03
:00469EBE CC                      int 03
:00469EBF CC                      int 03

* Referenced by a CALL at Address:
|:0046A129   
|
:00469EC0 55                      push ebp
:00469EC1 8BEC                    mov ebp, esp
:00469EC3 51                      push ecx
:00469EC4 894DFC                  mov dword ptr [ebp-04], ecx
:00469EC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00469ECA C7401400000000          mov [eax+14], 00000000
:00469ED1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469ED4 C7411000000000          mov [ecx+10], 00000000
:00469EDB 8B55FC                  mov edx, dword ptr [ebp-04]
:00469EDE C7420C00000000          mov [edx+0C], 00000000
:00469EE5 8B45FC                  mov eax, dword ptr [ebp-04]
:00469EE8 C7400800000000          mov [eax+08], 00000000
:00469EEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469EF2 C70100000000            mov dword ptr [ecx], 00000000
:00469EF8 8B45FC                  mov eax, dword ptr [ebp-04]
:00469EFB 8BE5                    mov esp, ebp
:00469EFD 5D                      pop ebp
:00469EFE C3                      ret



* Referenced by a CALL at Address:
|:0046A15D   
|
:00469EFF 55                      push ebp
:00469F00 8BEC                    mov ebp, esp
:00469F02 51                      push ecx
:00469F03 894DFC                  mov dword ptr [ebp-04], ecx
:00469F06 8BE5                    mov esp, ebp
:00469F08 5D                      pop ebp
:00469F09 C3                      ret



* Referenced by a CALL at Address:
|:0046A235   
|
:00469F0A 55                      push ebp
:00469F0B 8BEC                    mov ebp, esp
:00469F0D 51                      push ecx
:00469F0E 894DFC                  mov dword ptr [ebp-04], ecx
:00469F11 8B45FC                  mov eax, dword ptr [ebp-04]
:00469F14 83C004                  add eax, 00000004
:00469F17 50                      push eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00469F18 6A04                    push 00000004
:00469F1A 6A00                    push 00000000
:00469F1C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469F1F 51                      push ecx
:00469F20 6A00                    push 00000000
:00469F22 6A00                    push 00000000

* Reference To: KERNEL32.CreateThread, Ord:0043h
                                  |
:00469F24 FF1520854B00            Call dword ptr [004B8520]
:00469F2A 8B55FC                  mov edx, dword ptr [ebp-04]
:00469F2D 8902                    mov dword ptr [edx], eax
:00469F2F 8B45FC                  mov eax, dword ptr [ebp-04]
:00469F32 833800                  cmp dword ptr [eax], 00000000
:00469F35 7507                    jne 00469F3E
:00469F37 E81FC5FBFF              call 0042645B
:00469F3C EB16                    jmp 00469F54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469F35(C)
|
:00469F3E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00469F41 51                      push ecx
:00469F42 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469F45 E810000000              call 00469F5A
:00469F4A 8B55FC                  mov edx, dword ptr [ebp-04]
:00469F4D C7420800000000          mov [edx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469F3C(U)
|
:00469F54 8BE5                    mov esp, ebp
:00469F56 5D                      pop ebp
:00469F57 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00469F45   
|
:00469F5A 55                      push ebp
:00469F5B 8BEC                    mov ebp, esp
:00469F5D 51                      push ecx
:00469F5E 894DFC                  mov dword ptr [ebp-04], ecx
:00469F61 8B4508                  mov eax, dword ptr [ebp+08]
:00469F64 50                      push eax
:00469F65 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469F68 8B11                    mov edx, dword ptr [ecx]
:00469F6A 52                      push edx

* Reference To: KERNEL32.SetThreadPriority, Ord:0233h
                                  |
:00469F6B FF151C854B00            Call dword ptr [004B851C]
:00469F71 85C0                    test eax, eax
:00469F73 7505                    jne 00469F7A
:00469F75 E8E1C4FBFF              call 0042645B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469F73(C)
|
:00469F7A 8BE5                    mov esp, ebp
:00469F7C 5D                      pop ebp
:00469F7D C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046A170   , :0046A203   
|
:00469F80 55                      push ebp
:00469F81 8BEC                    mov ebp, esp
:00469F83 51                      push ecx
:00469F84 894DFC                  mov dword ptr [ebp-04], ecx
:00469F87 8B45FC                  mov eax, dword ptr [ebp-04]
:00469F8A 833800                  cmp dword ptr [eax], 00000000
:00469F8D 7507                    jne 00469F96
:00469F8F B801000000              mov eax, 00000001
:00469F94 EB13                    jmp 00469FA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469F8D(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00469F96 6AFF                    push FFFFFFFF
:00469F98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469F9B 8B11                    mov edx, dword ptr [ecx]
:00469F9D 52                      push edx

* Reference To: KERNEL32.WaitForSingleObject, Ord:026Ah
                                  |
:00469F9E FF1510854B00            Call dword ptr [004B8510]
:00469FA4 F7D8                    neg eax
:00469FA6 1BC0                    sbb eax, eax
:00469FA8 40                      inc eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469F94(U)
|
:00469FA9 8BE5                    mov esp, ebp
:00469FAB 5D                      pop ebp
:00469FAC C3                      ret


:00469FAD 55                      push ebp
:00469FAE 8BEC                    mov ebp, esp
:00469FB0 51                      push ecx
:00469FB1 894DFC                  mov dword ptr [ebp-04], ecx
:00469FB4 8B45FC                  mov eax, dword ptr [ebp-04]
:00469FB7 833800                  cmp dword ptr [eax], 00000000
:00469FBA 741F                    je 00469FDB
:00469FBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469FBF 83790800                cmp dword ptr [ecx+08], 00000000
:00469FC3 7416                    je 00469FDB
:00469FC5 8B55FC                  mov edx, dword ptr [ebp-04]
:00469FC8 8B02                    mov eax, dword ptr [edx]
:00469FCA 50                      push eax

* Reference To: KERNEL32.SuspendThread, Ord:0241h
                                  |
:00469FCB FF156C854B00            Call dword ptr [004B856C]
:00469FD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469FD4 C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469FBA(C), :00469FC3(C)
|
:00469FDB 8BE5                    mov esp, ebp
:00469FDD 5D                      pop ebp
:00469FDE C3                      ret



* Referenced by a CALL at Address:
|:0046A23D   
|
:00469FDF 55                      push ebp
:00469FE0 8BEC                    mov ebp, esp
:00469FE2 51                      push ecx
:00469FE3 894DFC                  mov dword ptr [ebp-04], ecx
:00469FE6 8B45FC                  mov eax, dword ptr [ebp-04]
:00469FE9 833800                  cmp dword ptr [eax], 00000000
:00469FEC 741F                    je 0046A00D
:00469FEE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469FF1 83790800                cmp dword ptr [ecx+08], 00000000
:00469FF5 7516                    jne 0046A00D
:00469FF7 8B55FC                  mov edx, dword ptr [ebp-04]
:00469FFA 8B02                    mov eax, dword ptr [edx]
:00469FFC 50                      push eax

* Reference To: KERNEL32.ResumeThread, Ord:01E2h
                                  |
:00469FFD FF1570854B00            Call dword ptr [004B8570]
:0046A003 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A006 C7410801000000          mov [ecx+08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469FEC(C), :00469FF5(C)
|
:0046A00D 8BE5                    mov esp, ebp
:0046A00F 5D                      pop ebp
:0046A010 C3                      ret


:0046A011 55                      push ebp
:0046A012 8BEC                    mov ebp, esp
:0046A014 51                      push ecx
:0046A015 894DFC                  mov dword ptr [ebp-04], ecx
:0046A018 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A01B 83780C00                cmp dword ptr [eax+0C], 00000000
:0046A01F 7427                    je 0046A048
:0046A021 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A024 C7410800000000          mov [ecx+08], 00000000
:0046A02B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A02E C7420C00000000          mov [edx+0C], 00000000
:0046A035 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A038 C70000000000            mov dword ptr [eax], 00000000
:0046A03E 6A00                    push 00000000

* Reference To: KERNEL32.ExitThread, Ord:006Ch
                                  |
:0046A040 FF1514854B00            Call dword ptr [004B8514]
:0046A046 EB2D                    jmp 0046A075

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A01F(C)
|
:0046A048 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A04B 83791000                cmp dword ptr [ecx+10], 00000000
:0046A04F 7424                    je 0046A075
:0046A051 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A054 C7421401000000          mov [edx+14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A069(U)
|
:0046A05B 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A05E 83781000                cmp dword ptr [eax+10], 00000000
:0046A062 7407                    je 0046A06B
:0046A064 E8E5240000              call 0046C54E
:0046A069 EBF0                    jmp 0046A05B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A062(C)
|
:0046A06B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A06E C7411400000000          mov [ecx+14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A046(U), :0046A04F(C)
|
:0046A075 8BE5                    mov esp, ebp
:0046A077 5D                      pop ebp
:0046A078 C3                      ret



* Referenced by a CALL at Address:
|:0046A0D2   
|
:0046A079 55                      push ebp
:0046A07A 8BEC                    mov ebp, esp
:0046A07C 51                      push ecx
:0046A07D 894DFC                  mov dword ptr [ebp-04], ecx
:0046A080 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A083 833800                  cmp dword ptr [eax], 00000000
:0046A086 7421                    je 0046A0A9
:0046A088 6A00                    push 00000000
:0046A08A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A08D 8B11                    mov edx, dword ptr [ecx]
:0046A08F 52                      push edx

* Reference To: KERNEL32.TerminateThread, Ord:0247h
                                  |
:0046A090 FF1518854B00            Call dword ptr [004B8518]
:0046A096 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A099 C70000000000            mov dword ptr [eax], 00000000
:0046A09F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A0A2 C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A086(C)
|
:0046A0A9 8BE5                    mov esp, ebp
:0046A0AB 5D                      pop ebp
:0046A0AC C3                      ret


:0046A0AD 55                      push ebp
:0046A0AE 8BEC                    mov ebp, esp
:0046A0B0 51                      push ecx
:0046A0B1 894DFC                  mov dword ptr [ebp-04], ecx
:0046A0B4 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A0B7 833800                  cmp dword ptr [eax], 00000000
:0046A0BA 742A                    je 0046A0E6
:0046A0BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A0BF C7410C01000000          mov [ecx+0C], 00000001
:0046A0C6 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A0C9 837A0800                cmp dword ptr [edx+08], 00000000
:0046A0CD 7508                    jne 0046A0D7
:0046A0CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A0D2 E8A2FFFFFF              call 0046A079

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A0CD(C), :0046A0E4(U)
|
:0046A0D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A0DA 833800                  cmp dword ptr [eax], 00000000
:0046A0DD 7407                    je 0046A0E6
:0046A0DF E86A240000              call 0046C54E
:0046A0E4 EBF1                    jmp 0046A0D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A0BA(C), :0046A0DD(C)
|
:0046A0E6 8BE5                    mov esp, ebp
:0046A0E8 5D                      pop ebp
:0046A0E9 C3                      ret


:0046A0EA 55                      push ebp
:0046A0EB 8BEC                    mov ebp, esp
:0046A0ED 51                      push ecx
:0046A0EE 894DFC                  mov dword ptr [ebp-04], ecx
:0046A0F1 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A0F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A0F7 894810                  mov dword ptr [eax+10], ecx
:0046A0FA 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A0FD 837A0800                cmp dword ptr [edx+08], 00000000
:0046A101 7416                    je 0046A119
:0046A103 837D0800                cmp dword ptr [ebp+08], 00000000
:0046A107 7410                    je 0046A119

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A117(U)
|
:0046A109 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A10C 83781400                cmp dword ptr [eax+14], 00000000
:0046A110 7507                    jne 0046A119
:0046A112 E837240000              call 0046C54E
:0046A117 EBF0                    jmp 0046A109

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A101(C), :0046A107(C), :0046A110(C)
|
:0046A119 8BE5                    mov esp, ebp
:0046A11B 5D                      pop ebp
:0046A11C C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046A264   
|
:0046A11F 55                      push ebp
:0046A120 8BEC                    mov ebp, esp
:0046A122 51                      push ecx
:0046A123 894DFC                  mov dword ptr [ebp-04], ecx
:0046A126 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A129 E892FDFFFF              call 00469EC0
:0046A12E 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A131 C7401800000000          mov [eax+18], 00000000
:0046A138 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A13B C7411C00000000          mov [ecx+1C], 00000000
:0046A142 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A145 C7422000000000          mov [edx+20], 00000000
:0046A14C 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A14F 8BE5                    mov esp, ebp
:0046A151 5D                      pop ebp
:0046A152 C3                      ret



* Referenced by a CALL at Address:
|:0046A285   
|
:0046A153 55                      push ebp
:0046A154 8BEC                    mov ebp, esp
:0046A156 51                      push ecx
:0046A157 894DFC                  mov dword ptr [ebp-04], ecx
:0046A15A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A15D E89DFDFFFF              call 00469EFF
:0046A162 8BE5                    mov esp, ebp
:0046A164 5D                      pop ebp
:0046A165 C3                      ret



* Referenced by a CALL at Address:
|:00454EB4   
|
:0046A166 55                      push ebp
:0046A167 8BEC                    mov ebp, esp
:0046A169 51                      push ecx
:0046A16A 894DFC                  mov dword ptr [ebp-04], ecx
:0046A16D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A170 E80BFEFFFF              call 00469F80
:0046A175 8BE5                    mov esp, ebp
:0046A177 5D                      pop ebp
:0046A178 C3                      ret



* Referenced by a CALL at Address:
|:0046A2DF   
|
:0046A179 55                      push ebp
:0046A17A 8BEC                    mov ebp, esp
:0046A17C 51                      push ecx
:0046A17D 894DFC                  mov dword ptr [ebp-04], ecx
:0046A180 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A183 8B4018                  mov eax, dword ptr [eax+18]
:0046A186 8BE5                    mov esp, ebp
:0046A188 5D                      pop ebp
:0046A189 C3                      ret


:0046A18A 55                      push ebp
:0046A18B 8BEC                    mov ebp, esp
:0046A18D 51                      push ecx
:0046A18E 894DFC                  mov dword ptr [ebp-04], ecx
:0046A191 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A194 8B401C                  mov eax, dword ptr [eax+1C]
:0046A197 8BE5                    mov esp, ebp
:0046A199 5D                      pop ebp
:0046A19A C3                      ret



* Referenced by a CALL at Address:
|:0046A2EC   
|
:0046A19B 55                      push ebp
:0046A19C 8BEC                    mov ebp, esp
:0046A19E 51                      push ecx
:0046A19F 894DFC                  mov dword ptr [ebp-04], ecx
:0046A1A2 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A1A5 8B4020                  mov eax, dword ptr [eax+20]
:0046A1A8 8BE5                    mov esp, ebp
:0046A1AA 5D                      pop ebp
:0046A1AB C3                      ret



* Referenced by a CALL at Address:
|:0046A21A   
|
:0046A1AC 55                      push ebp
:0046A1AD 8BEC                    mov ebp, esp
:0046A1AF 51                      push ecx
:0046A1B0 894DFC                  mov dword ptr [ebp-04], ecx
:0046A1B3 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A1B6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A1B9 894818                  mov dword ptr [eax+18], ecx
:0046A1BC 8BE5                    mov esp, ebp
:0046A1BE 5D                      pop ebp
:0046A1BF C20400                  ret 0004


:0046A1C2 55                      push ebp
:0046A1C3 8BEC                    mov ebp, esp
:0046A1C5 51                      push ecx
:0046A1C6 894DFC                  mov dword ptr [ebp-04], ecx
:0046A1C9 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A1CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A1CF 89481C                  mov dword ptr [eax+1C], ecx
:0046A1D2 8BE5                    mov esp, ebp
:0046A1D4 5D                      pop ebp
:0046A1D5 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046A226   
|
:0046A1D8 55                      push ebp
:0046A1D9 8BEC                    mov ebp, esp
:0046A1DB 51                      push ecx
:0046A1DC 894DFC                  mov dword ptr [ebp-04], ecx
:0046A1DF 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A1E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A1E5 894820                  mov dword ptr [eax+20], ecx
:0046A1E8 8BE5                    mov esp, ebp
:0046A1EA 5D                      pop ebp
:0046A1EB C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046A366   
|
:0046A1EE 55                      push ebp
:0046A1EF 8BEC                    mov ebp, esp
:0046A1F1 51                      push ecx
:0046A1F2 894DFC                  mov dword ptr [ebp-04], ecx
:0046A1F5 8BE5                    mov esp, ebp
:0046A1F7 5D                      pop ebp
:0046A1F8 C3                      ret



* Referenced by a CALL at Address:
|:00454E8E   
|
:0046A1F9 55                      push ebp
:0046A1FA 8BEC                    mov ebp, esp
:0046A1FC 51                      push ecx
:0046A1FD 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A211(U)
|
:0046A200 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A203 E878FDFFFF              call 00469F80
:0046A208 85C0                    test eax, eax
:0046A20A 7507                    jne 0046A213
:0046A20C E83D230000              call 0046C54E
:0046A211 EBED                    jmp 0046A200

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A20A(C)
|
:0046A213 8B4508                  mov eax, dword ptr [ebp+08]
:0046A216 50                      push eax
:0046A217 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A21A E88DFFFFFF              call 0046A1AC
:0046A21F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046A222 51                      push ecx
:0046A223 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A226 E8ADFFFFFF              call 0046A1D8
:0046A22B 6A01                    push 00000001
:0046A22D 688CA24600              push 0046A28C
:0046A232 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A235 E8D0FCFFFF              call 00469F0A
:0046A23A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A23D E89DFDFFFF              call 00469FDF
:0046A242 B801000000              mov eax, 00000001
:0046A247 8BE5                    mov esp, ebp
:0046A249 5D                      pop ebp
:0046A24A C20800                  ret 0008


:0046A24D 55                      push ebp
:0046A24E 8BEC                    mov ebp, esp
:0046A250 E807000000              call 0046A25C
:0046A255 E811000000              call 0046A26B
:0046A25A 5D                      pop ebp
:0046A25B C3                      ret



* Referenced by a CALL at Address:
|:0046A250   
|
:0046A25C 55                      push ebp
:0046A25D 8BEC                    mov ebp, esp
:0046A25F B920194B00              mov ecx, 004B1920
:0046A264 E8B6FEFFFF              call 0046A11F
:0046A269 5D                      pop ebp
:0046A26A C3                      ret



* Referenced by a CALL at Address:
|:0046A255   
|
:0046A26B 55                      push ebp
:0046A26C 8BEC                    mov ebp, esp
:0046A26E 687DA24600              push 0046A27D
:0046A273 E8F8310000              call 0046D470
:0046A278 83C404                  add esp, 00000004
:0046A27B 5D                      pop ebp
:0046A27C C3                      ret


:0046A27D 55                      push ebp
:0046A27E 8BEC                    mov ebp, esp
:0046A280 B920194B00              mov ecx, 004B1920
:0046A285 E8C9FEFFFF              call 0046A153
:0046A28A 5D                      pop ebp
:0046A28B C3                      ret


:0046A28C 55                      push ebp
:0046A28D 8BEC                    mov ebp, esp
:0046A28F 51                      push ecx
:0046A290 C745FC00000000          mov [ebp-04], 00000000
:0046A297 E814000000              call 0046A2B0
:0046A29C 85C0                    test eax, eax
:0046A29E 7507                    jne 0046A2A7
:0046A2A0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A29E(C)
|
:0046A2A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A2AA 8BE5                    mov esp, ebp
:0046A2AC 5D                      pop ebp
:0046A2AD C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046A297   
|
:0046A2B0 55                      push ebp
:0046A2B1 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046A2B3 6AFF                    push FFFFFFFF
:0046A2B5 68893C4700              push 00473C89
:0046A2BA 64A100000000            mov eax, dword ptr fs:[00000000]
:0046A2C0 50                      push eax
:0046A2C1 64892500000000          mov dword ptr fs:[00000000], esp
:0046A2C8 83EC18                  sub esp, 00000018
:0046A2CB 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A2CE E86DD5F9FF              call 00407840
:0046A2D3 C745FC00000000          mov [ebp-04], 00000000
:0046A2DA B920194B00              mov ecx, 004B1920
:0046A2DF E895FEFFFF              call 0046A179
:0046A2E4 8945EC                  mov dword ptr [ebp-14], eax
:0046A2E7 B920194B00              mov ecx, 004B1920
:0046A2EC E8AAFEFFFF              call 0046A19B
:0046A2F1 8945F0                  mov dword ptr [ebp-10], eax
:0046A2F4 6A00                    push 00000000
:0046A2F6 8B45EC                  mov eax, dword ptr [ebp-14]
:0046A2F9 50                      push eax
:0046A2FA 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A2FD E84F5FFAFF              call 00410251
:0046A302 85C0                    test eax, eax
:0046A304 751B                    jne 0046A321
:0046A306 C745E400000000          mov [ebp-1C], 00000000
:0046A30D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046A314 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A317 E8225FFAFF              call 0041023E
:0046A31C 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046A31F EB63                    jmp 0046A384

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A304(C)
|
:0046A321 6800804300              push 00438000
:0046A326 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046A329 51                      push ecx
:0046A32A 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A32D E85F61FAFF              call 00410491
:0046A332 85C0                    test eax, eax
:0046A334 7523                    jne 0046A359
:0046A336 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A339 E8CE62FAFF              call 0041060C
:0046A33E C745E000000000          mov [ebp-20], 00000000
:0046A345 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046A34C 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A34F E8EA5EFAFF              call 0041023E
:0046A354 8B45E0                  mov eax, dword ptr [ebp-20]
:0046A357 EB2B                    jmp 0046A384

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A334(C)
|
:0046A359 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A35C E8AB62FAFF              call 0041060C
:0046A361 B920194B00              mov ecx, 004B1920
:0046A366 E883FEFFFF              call 0046A1EE
:0046A36B C745DC01000000          mov [ebp-24], 00000001
:0046A372 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046A379 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046A37C E8BD5EFAFF              call 0041023E
:0046A381 8B45DC                  mov eax, dword ptr [ebp-24]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A31F(U), :0046A357(U)
|
:0046A384 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046A387 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046A38E 8BE5                    mov esp, ebp
:0046A390 5D                      pop ebp
:0046A391 C3                      ret



* Referenced by a CALL at Address:
|:0040FC72   
|

* Reference To: USER32.DdeClientTransaction, Ord:005Ch
                                  |
:0046A392 FF259C864B00            Jmp dword ptr [004B869C]

* Referenced by a CALL at Addresses:
|:00413D66   , :00413DA3   , :00413E7B   , :00414025   , :0046CB7A   
|
:0046A398 55                      push ebp
:0046A399 8BEC                    mov ebp, esp
:0046A39B 51                      push ecx
:0046A39C A1A42F4B00              mov eax, dword ptr [004B2FA4]
:0046A3A1 53                      push ebx
:0046A3A2 33DB                    xor ebx, ebx
:0046A3A4 3BC3                    cmp eax, ebx
:0046A3A6 0F8418010000            je 0046A4C4
:0046A3AC 57                      push edi
:0046A3AD 56                      push esi
:0046A3AE 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0046A3AF FF158C844B00            Call dword ptr [004B848C]
:0046A3B5 E83C2C0000              call 0046CFF6
:0046A3BA BF10394B00              mov edi, 004B3910
:0046A3BF 57                      push edi
:0046A3C0 FF750C                  push [ebp+0C]
:0046A3C3 FF7508                  push [ebp+08]
:0046A3C6 E8042B0000              call 0046CECF
:0046A3CB 83C40C                  add esp, 0000000C
:0046A3CE BE00010000              mov esi, 00000100
:0046A3D3 A3A42F4B00              mov dword ptr [004B2FA4], eax
:0046A3D8 68D8414B00              push 004B41D8
:0046A3DD 56                      push esi
:0046A3DE 53                      push ebx
:0046A3DF 50                      push eax

* Reference To: GDI32.GetPaletteEntries, Ord:00EFh
                                  |
:0046A3E0 FF1594844B00            Call dword ptr [004B8494]
:0046A3E6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A414(C)
|
:0046A3E8 8A88DA414B00            mov cl, byte ptr [eax+004B41DA]
:0046A3EE 888810394B00            mov byte ptr [eax+004B3910], cl
:0046A3F4 8A88D8414B00            mov cl, byte ptr [eax+004B41D8]
:0046A3FA 888812394B00            mov byte ptr [eax+004B3912], cl
:0046A400 8A88D9414B00            mov cl, byte ptr [eax+004B41D9]
:0046A406 888811394B00            mov byte ptr [eax+004B3911], cl
:0046A40C 83C004                  add eax, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046A40F 3D00040000              cmp eax, 00000400
:0046A414 7CD2                    jl 0046A3E8
:0046A416 391D78214B00            cmp dword ptr [004B2178], ebx
:0046A41C 742B                    je 0046A449
:0046A41E 833DF0634B0000          cmp dword ptr [004B63F0], 00000000
:0046A425 7E22                    jle 0046A449
:0046A427 C745FC103D4B00          mov [ebp-04], 004B3D10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A447(C)
|
:0046A42E 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A431 57                      push edi
:0046A432 56                      push esi
:0046A433 6A00                    push 00000000
:0046A435 FF30                    push dword ptr [eax]
:0046A437 E8502A0000              call 0046CE8C
:0046A43C 8345FC04                add dword ptr [ebp-04], 00000004
:0046A440 43                      inc ebx
:0046A441 3B1DF0634B00            cmp ebx, dword ptr [004B63F0]
:0046A447 7CE5                    jl 0046A42E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A41C(C), :0046A425(C)
|
:0046A449 A184724B00              mov eax, dword ptr [004B7284]
:0046A44E FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046A455 FF15B8864B00            Call dword ptr [004B86B8]
:0046A45B 6A00                    push 00000000
:0046A45D 8BF0                    mov esi, eax
:0046A45F FF35A42F4B00            push dword ptr [004B2FA4]
:0046A465 56                      push esi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:0046A466 FF15F4844B00            Call dword ptr [004B84F4]
:0046A46C 56                      push esi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:0046A46D FF15F0844B00            Call dword ptr [004B84F0]
:0046A473 85C0                    test eax, eax
:0046A475 7428                    je 0046A49F
:0046A477 A184724B00              mov eax, dword ptr [004B7284]
:0046A47C 6A01                    push 00000001
:0046A47E 6A00                    push 00000000
:0046A480 FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:0046A487 FF15CC864B00            Call dword ptr [004B86CC]
:0046A48D A184724B00              mov eax, dword ptr [004B7284]
:0046A492 FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046A499 FF15A4864B00            Call dword ptr [004B86A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A475(C)
|
:0046A49F A184724B00              mov eax, dword ptr [004B7284]
:0046A4A4 56                      push esi
:0046A4A5 FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046A4AC FF15BC864B00            Call dword ptr [004B86BC]
:0046A4B2 8B4508                  mov eax, dword ptr [ebp+08]
:0046A4B5 5E                      pop esi
:0046A4B6 A3A02F4B00              mov dword ptr [004B2FA0], eax
:0046A4BB 8B450C                  mov eax, dword ptr [ebp+0C]
:0046A4BE A3A03E4B00              mov dword ptr [004B3EA0], eax
:0046A4C3 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A3A6(C)
|
:0046A4C4 5B                      pop ebx
:0046A4C5 C9                      leave
:0046A4C6 C3                      ret



* Referenced by a CALL at Addresses:
|:0046AFA3   , :0046B1C8   , :0046B8CE   , :0046B971   , :0046BB2E   
|:0046BB63   , :0046BB9E   , :0046BBDA   , :0046BD90   , :0046C127   
|
:0046A4C7 55                      push ebp
:0046A4C8 8BEC                    mov ebp, esp
:0046A4CA 53                      push ebx
:0046A4CB 56                      push esi
:0046A4CC 57                      push edi
:0046A4CD 8B7D10                  mov edi, dword ptr [ebp+10]
:0046A4D0 85FF                    test edi, edi
:0046A4D2 0F84CD000000            je 0046A5A5
:0046A4D8 8B5D14                  mov ebx, dword ptr [ebp+14]
:0046A4DB 85DB                    test ebx, ebx
:0046A4DD 0F84C2000000            je 0046A5A5
:0046A4E3 833DE0634B0000          cmp dword ptr [004B63E0], 00000000
:0046A4EA 751B                    jne 0046A507
:0046A4EC 53                      push ebx
:0046A4ED 57                      push edi
:0046A4EE FF750C                  push [ebp+0C]
:0046A4F1 FF7508                  push [ebp+08]
:0046A4F4 FF3584724B00            push dword ptr [004B7284]
:0046A4FA E8AB000000              call 0046A5AA
:0046A4FF 83C414                  add esp, 00000014
:0046A502 E99E000000              jmp 0046A5A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A4EA(C)
|
:0046A507 A184724B00              mov eax, dword ptr [004B7284]
:0046A50C C1E002                  shl eax, 02
:0046A50F 8BB0581E4B00            mov esi, dword ptr [eax+004B1E58]
:0046A515 85F6                    test esi, esi
:0046A517 7511                    jne 0046A52A
:0046A519 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A51C 89B8581E4B00            mov dword ptr [eax+004B1E58], edi
:0046A522 898890214B00            mov dword ptr [eax+004B2190], ecx
:0046A528 EB31                    jmp 0046A55B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A517(C)
|
:0046A52A 8B5508                  mov edx, dword ptr [ebp+08]
:0046A52D 8B8890214B00            mov ecx, dword ptr [eax+004B2190]
:0046A533 03F1                    add esi, ecx
:0046A535 8D1C17                  lea ebx, dword ptr [edi+edx]
:0046A538 3BDE                    cmp ebx, esi
:0046A53A 7E0A                    jle 0046A546
:0046A53C 03FA                    add edi, edx
:0046A53E 2BF9                    sub edi, ecx
:0046A540 89B8581E4B00            mov dword ptr [eax+004B1E58], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A53A(C)
|
:0046A546 3BD1                    cmp edx, ecx
:0046A548 7D0E                    jge 0046A558
:0046A54A 2BCA                    sub ecx, edx
:0046A54C 899090214B00            mov dword ptr [eax+004B2190], edx
:0046A552 0188581E4B00            add dword ptr [eax+004B1E58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A548(C)
|
:0046A558 8B5D14                  mov ebx, dword ptr [ebp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A528(U)
|
:0046A55B 8B90E81F4B00            mov edx, dword ptr [eax+004B1FE8]
:0046A561 85D2                    test edx, edx
:0046A563 7511                    jne 0046A576
:0046A565 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046A568 8998E81F4B00            mov dword ptr [eax+004B1FE8], ebx
:0046A56E 898820234B00            mov dword ptr [eax+004B2320], ecx
:0046A574 EB2F                    jmp 0046A5A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A563(C)
|
:0046A576 8B8820234B00            mov ecx, dword ptr [eax+004B2320]
:0046A57C 8D3411                  lea esi, dword ptr [ecx+edx]
:0046A57F 8B550C                  mov edx, dword ptr [ebp+0C]
:0046A582 8D3C13                  lea edi, dword ptr [ebx+edx]
:0046A585 3BFE                    cmp edi, esi
:0046A587 7E0A                    jle 0046A593
:0046A589 03DA                    add ebx, edx
:0046A58B 2BD9                    sub ebx, ecx
:0046A58D 8998E81F4B00            mov dword ptr [eax+004B1FE8], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A587(C)
|
:0046A593 3BD1                    cmp edx, ecx
:0046A595 7D0E                    jge 0046A5A5
:0046A597 2BCA                    sub ecx, edx
:0046A599 899020234B00            mov dword ptr [eax+004B2320], edx
:0046A59F 0188E81F4B00            add dword ptr [eax+004B1FE8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A4D2(C), :0046A4DD(C), :0046A502(U), :0046A574(U), :0046A595(C)
|
:0046A5A5 5F                      pop edi
:0046A5A6 5E                      pop esi
:0046A5A7 5B                      pop ebx
:0046A5A8 5D                      pop ebp
:0046A5A9 C3                      ret



* Referenced by a CALL at Addresses:
|:0046A4FA   , :0046C4DA   , :0046C66B   , :0046CB0B   
|
:0046A5AA 55                      push ebp
:0046A5AB 8BEC                    mov ebp, esp
:0046A5AD 81EC00080000            sub esp, 00000800
:0046A5B3 53                      push ebx
:0046A5B4 33DB                    xor ebx, ebx
:0046A5B6 391DF4634B00            cmp dword ptr [004B63F4], ebx
:0046A5BC 56                      push esi
:0046A5BD 0F8505010000            jne 0046A6C8
:0046A5C3 395D14                  cmp dword ptr [ebp+14], ebx
:0046A5C6 0F84FC000000            je 0046A6C8
:0046A5CC 395D18                  cmp dword ptr [ebp+18], ebx
:0046A5CF 0F84F3000000            je 0046A6C8
:0046A5D5 8B4508                  mov eax, dword ptr [ebp+08]
:0046A5D8 8BF0                    mov esi, eax
:0046A5DA C1E602                  shl esi, 02
:0046A5DD 399E103D4B00            cmp dword ptr [esi+004B3D10], ebx
:0046A5E3 0F84DF000000            je 0046A6C8
:0046A5E9 391D78214B00            cmp dword ptr [004B2178], ebx
:0046A5EF 57                      push edi
:0046A5F0 756B                    jne 0046A65D
:0046A5F2 8D8500F8FFFF            lea eax, dword ptr [ebp+FFFFF800]
:0046A5F8 BF00010000              mov edi, 00000100
:0046A5FD 50                      push eax
:0046A5FE 57                      push edi
:0046A5FF 53                      push ebx
:0046A600 FF35A42F4B00            push dword ptr [004B2FA4]

* Reference To: GDI32.GetPaletteEntries, Ord:00EFh
                                  |
:0046A606 FF1594844B00            Call dword ptr [004B8494]
:0046A60C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A647(C)
|
:0046A60E 8A8C0502F8FFFF          mov cl, byte ptr [ebp+eax-000007FE]
:0046A615 888C0500FCFFFF          mov byte ptr [ebp+eax-00000400], cl
:0046A61C 8A8C0500F8FFFF          mov cl, byte ptr [ebp+eax-00000800]
:0046A623 888C0502FCFFFF          mov byte ptr [ebp+eax-000003FE], cl
:0046A62A 8A8C0501F8FFFF          mov cl, byte ptr [ebp+eax-000007FF]
:0046A631 888C0501FCFFFF          mov byte ptr [ebp+eax-000003FF], cl
:0046A638 889C0503FCFFFF          mov byte ptr [ebp+eax-000003FD], bl
:0046A63F 83C004                  add eax, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046A642 3D00040000              cmp eax, 00000400
:0046A647 7CC5                    jl 0046A60E
:0046A649 8D8500FCFFFF            lea eax, dword ptr [ebp+FFFFFC00]
:0046A64F 50                      push eax
:0046A650 57                      push edi
:0046A651 53                      push ebx
:0046A652 FFB6103D4B00            push dword ptr [esi+004B3D10]
:0046A658 E82F280000              call 0046CE8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A5F0(C)
|
:0046A65D 8B86E8354B00            mov eax, dword ptr [esi+004B35E8]
:0046A663 394514                  cmp dword ptr [ebp+14], eax
:0046A666 7E03                    jle 0046A66B
:0046A668 894514                  mov dword ptr [ebp+14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A666(C)
|
:0046A66B 8B86A83E4B00            mov eax, dword ptr [esi+004B3EA8]
:0046A671 394518                  cmp dword ptr [ebp+18], eax
:0046A674 7E03                    jle 0046A679
:0046A676 894518                  mov dword ptr [ebp+18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A674(C)
|
:0046A679 FFB648624B00            push dword ptr [esi+004B6248]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046A67F FF15B8864B00            Call dword ptr [004B86B8]
:0046A685 53                      push ebx
:0046A686 8BF8                    mov edi, eax
:0046A688 FF35A42F4B00            push dword ptr [004B2FA4]
:0046A68E 57                      push edi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:0046A68F FF15F4844B00            Call dword ptr [004B84F4]
:0046A695 57                      push edi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:0046A696 FF15F0844B00            Call dword ptr [004B84F0]
:0046A69C FF7510                  push [ebp+10]
:0046A69F FF750C                  push [ebp+0C]
:0046A6A2 FFB6103D4B00            push dword ptr [esi+004B3D10]
:0046A6A8 FF7518                  push [ebp+18]
:0046A6AB FF7514                  push [ebp+14]
:0046A6AE FF7510                  push [ebp+10]
:0046A6B1 FF750C                  push [ebp+0C]
:0046A6B4 57                      push edi
:0046A6B5 E8EB270000              call 0046CEA5
:0046A6BA 57                      push edi
:0046A6BB FFB648624B00            push dword ptr [esi+004B6248]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046A6C1 FF15BC864B00            Call dword ptr [004B86BC]
:0046A6C7 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A5BD(C), :0046A5C6(C), :0046A5CF(C), :0046A5E3(C)
|
:0046A6C8 5E                      pop esi
:0046A6C9 5B                      pop ebx
:0046A6CA C9                      leave
:0046A6CB C3                      ret



* Referenced by a CALL at Addresses:
|:0045F658   , :004642D9   
|
:0046A6CC 55                      push ebp
:0046A6CD 8BEC                    mov ebp, esp
:0046A6CF A1F0634B00              mov eax, dword ptr [004B63F0]
:0046A6D4 FF7510                  push [ebp+10]
:0046A6D7 8B5508                  mov edx, dword ptr [ebp+08]
:0046A6DA 8BC8                    mov ecx, eax
:0046A6DC FF750C                  push [ebp+0C]
:0046A6DF A384724B00              mov dword ptr [004B7284], eax
:0046A6E4 C1E102                  shl ecx, 02
:0046A6E7 8389E8354B00FF          or dword ptr [ecx+004B35E8], FFFFFFFF
:0046A6EE 899148624B00            mov dword ptr [ecx+004B6248], edx
:0046A6F4 E89E210000              call 0046C897
:0046A6F9 8B4514                  mov eax, dword ptr [ebp+14]
:0046A6FC 59                      pop ecx
:0046A6FD F7D8                    neg eax
:0046A6FF 1BC0                    sbb eax, eax
:0046A701 59                      pop ecx
:0046A702 66250180                and ax, 8001
:0046A706 0500800000              add eax, 00008000
:0046A70B 50                      push eax
:0046A70C FF7510                  push [ebp+10]
:0046A70F FF750C                  push [ebp+0C]
:0046A712 E8F51F0000              call 0046C70C
:0046A717 A1F0634B00              mov eax, dword ptr [004B63F0]
:0046A71C 83C40C                  add esp, 0000000C
:0046A71F FF05F0634B00            inc dword ptr [004B63F0]
:0046A725 5D                      pop ebp
:0046A726 C3                      ret



* Referenced by a CALL at Addresses:
|:00406138   , :00412EA6   , :00412EEB   , :00416D10   , :00421D29   
|:004222C7   , :004262E4   , :004263E8   , :0042822F   , :00451725   
|:0045176F   , :004517C4   , :0045189A   , :00451E71   , :00451EF9   
|:00452964   , :004529CB   , :00452ABC   , :00452AD9   , :00454749   
|:004548EB   , :00454900   , :00454A10   , :00454A8C   , :00454B41   
|:00454BAB   , :00454C12   , :00454C80   , :00454CEA   , :0045F625   
|:0045F667   , :0045FC76   , :0045FF90   , :00460015   , :0046002F   
|:00460073   , :004602E8   , :00460513   , :004605E9   , :00460A1A   
|:00461023   , :004610CE   , :00461132   , :00461232   , :004642F3   
|:00465F4D   , :004660AE   , :00466128   , :00466CD6   , :00468DB0   
|:0046AD1D   , :0046AD32   , :0046C8E2   
|
:0046A727 55                      push ebp
:0046A728 8BEC                    mov ebp, esp
:0046A72A 81EC28040000            sub esp, 00000428
:0046A730 8B4508                  mov eax, dword ptr [ebp+08]
:0046A733 3B05F0634B00            cmp eax, dword ptr [004B63F0]
:0046A739 7D1D                    jge 0046A758
:0046A73B 8D8DD8FBFFFF            lea ecx, dword ptr [ebp+FFFFFBD8]
:0046A741 A384724B00              mov dword ptr [004B7284], eax
:0046A746 51                      push ecx
:0046A747 FF3485181B4B00          push dword ptr [4*eax+004B1B18]
:0046A74E E81D270000              call 0046CE70
:0046A753 A3E4454B00              mov dword ptr [004B45E4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A739(C)
|
:0046A758 C9                      leave
:0046A759 C3                      ret



* Referenced by a CALL at Addresses:
|:00426A29   , :0046C8CB   
|
:0046A75A 55                      push ebp
:0046A75B 8BEC                    mov ebp, esp
:0046A75D 81EC04050000            sub esp, 00000504
:0046A763 53                      push ebx
:0046A764 33DB                    xor ebx, ebx
:0046A766 391D103D4B00            cmp dword ptr [004B3D10], ebx
:0046A76C 56                      push esi
:0046A76D 57                      push edi
:0046A76E 0F8513020000            jne 0046A987
:0046A774 391DF0634B00            cmp dword ptr [004B63F0], ebx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0046A77A 8B3D9C844B00            mov edi, dword ptr [004B849C]
:0046A780 895DF8                  mov dword ptr [ebp-08], ebx
:0046A783 7E52                    jle 0046A7D7
:0046A785 C745FCE8354B00          mov [ebp-04], 004B35E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A7D5(C)
|
:0046A78C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046A78F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A792 8BF0                    mov esi, eax
:0046A794 C1E602                  shl esi, 02
:0046A797 FFB6A83E4B00            push dword ptr [esi+004B3EA8]
:0046A79D 899EC01C4B00            mov dword ptr [esi+004B1CC0], ebx
:0046A7A3 FF31                    push dword ptr [ecx]
:0046A7A5 50                      push eax
:0046A7A6 E842210000              call 0046C8ED
:0046A7AB 83C40C                  add esp, 0000000C
:0046A7AE 3BC3                    cmp eax, ebx
:0046A7B0 8986103D4B00            mov dword ptr [esi+004B3D10], eax
:0046A7B6 0F84D2010000            je 0046A98E
:0046A7BC FFB6181B4B00            push dword ptr [esi+004B1B18]
:0046A7C2 50                      push eax
:0046A7C3 FFD7                    call edi
:0046A7C5 FF45F8                  inc [ebp-08]
:0046A7C8 8345FC04                add dword ptr [ebp-04], 00000004
:0046A7CC 8B45F8                  mov eax, dword ptr [ebp-08]
:0046A7CF 3B05F0634B00            cmp eax, dword ptr [004B63F0]
:0046A7D5 7CB5                    jl 0046A78C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A783(C)
|
:0046A7D7 8D85FCFAFFFF            lea eax, dword ptr [ebp+FFFFFAFC]
:0046A7DD 50                      push eax
:0046A7DE FF35181B4B00            push dword ptr [004B1B18]
:0046A7E4 E887260000              call 0046CE70
:0046A7E9 A3E4454B00              mov dword ptr [004B45E4], eax
:0046A7EE E8A0010000              call 0046A993
:0046A7F3 33F6                    xor esi, esi
:0046A7F5 391DF0634B00            cmp dword ptr [004B63F0], ebx
:0046A7FB 7E29                    jle 0046A826
:0046A7FD C745FC103D4B00          mov [ebp-04], 004B3D10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A824(C)
|
:0046A804 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A807 6810394B00              push 004B3910
:0046A80C 6800010000              push 00000100
:0046A811 53                      push ebx
:0046A812 FF30                    push dword ptr [eax]
:0046A814 E873260000              call 0046CE8C
:0046A819 8345FC04                add dword ptr [ebp-04], 00000004
:0046A81D 46                      inc esi
:0046A81E 3B35F0634B00            cmp esi, dword ptr [004B63F0]
:0046A824 7CDE                    jl 0046A804

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A7FB(C)
|

* Possible StringData Ref from Data Obj ->"ө"
                                  |
:0046A826 68DCE94700              push 0047E9DC
:0046A82B 53                      push ebx
:0046A82C 53                      push ebx
:0046A82D 53                      push ebx
:0046A82E 53                      push ebx
:0046A82F 6888000000              push 00000088
:0046A834 53                      push ebx
:0046A835 53                      push ebx
:0046A836 53                      push ebx
:0046A837 53                      push ebx
:0046A838 53                      push ebx
:0046A839 53                      push ebx

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046A83A 6A08                    push 00000008
:0046A83C 6AF0                    push FFFFFFF0

* Reference To: GDI32.CreateFontA, Ord:002Bh
                                  |
:0046A83E FF15A8844B00            Call dword ptr [004B84A8]
:0046A844 800D76194B00FF          or byte ptr [004B1976], FF
:0046A84B 800D74194B00FF          or byte ptr [004B1974], FF
:0046A852 800D75194B00FF          or byte ptr [004B1975], FF
:0046A859 A3CC414B00              mov dword ptr [004B41CC], eax
:0046A85E 6A40                    push 00000040
:0046A860 8D45B8                  lea eax, dword ptr [ebp-48]
:0046A863 53                      push ebx
:0046A864 50                      push eax
:0046A865 C70548194B0028000000    mov dword ptr [004B1948], 00000028
:0046A86F C7054C194B0020000000    mov dword ptr [004B194C], 00000020

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046A879 C70550194B0010000000    mov dword ptr [004B1950], 00000010
:0046A883 66C70554194B000100      mov word ptr [004B1954], 0001
:0046A88C 66C70556194B000100      mov word ptr [004B1956], 0001
:0046A895 891D58194B00            mov dword ptr [004B1958], ebx
:0046A89B 891D5C194B00            mov dword ptr [004B195C], ebx
:0046A8A1 891D60194B00            mov dword ptr [004B1960], ebx
:0046A8A7 891D64194B00            mov dword ptr [004B1964], ebx
:0046A8AD 891D68194B00            mov dword ptr [004B1968], ebx
:0046A8B3 891D6C194B00            mov dword ptr [004B196C], ebx
:0046A8B9 881D72194B00            mov byte ptr [004B1972], bl
:0046A8BF 881D70194B00            mov byte ptr [004B1970], bl
:0046A8C5 881D71194B00            mov byte ptr [004B1971], bl
:0046A8CB E890300000              call 0046D960
:0046A8D0 83C40C                  add esp, 0000000C
:0046A8D3 FF3548624B00            push dword ptr [004B6248]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046A8D9 FF15B8864B00            Call dword ptr [004B86B8]
:0046A8DF 8BF0                    mov esi, eax
:0046A8E1 56                      push esi

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:0046A8E2 FF15A0844B00            Call dword ptr [004B84A0]
:0046A8E8 A3A81C4B00              mov dword ptr [004B1CA8], eax
:0046A8ED B848194B00              mov eax, 004B1948
:0046A8F2 53                      push ebx
:0046A8F3 8D4DB8                  lea ecx, dword ptr [ebp-48]
:0046A8F6 50                      push eax
:0046A8F7 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046A8F8 6A04                    push 00000004
:0046A8FA 50                      push eax
:0046A8FB 56                      push esi

* Reference To: GDI32.CreateDIBitmap, Ord:0025h
                                  |
:0046A8FC FF15E8844B00            Call dword ptr [004B84E8]
:0046A902 50                      push eax
:0046A903 A3C8414B00              mov dword ptr [004B41C8], eax
:0046A908 FF35A81C4B00            push dword ptr [004B1CA8]
:0046A90E FFD7                    call edi
:0046A910 6A01                    push 00000001
:0046A912 A3501E4B00              mov dword ptr [004B1E50], eax
:0046A917 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.SetMapMode, Ord:0161h
                                  |
:0046A91D FF1590844B00            Call dword ptr [004B8490]
:0046A923 FF35CC414B00            push dword ptr [004B41CC]
:0046A929 A384474B00              mov dword ptr [004B4784], eax
:0046A92E FF35A81C4B00            push dword ptr [004B1CA8]
:0046A934 FFD7                    call edi
:0046A936 6820734B00              push 004B7320
:0046A93B A3E0454B00              mov dword ptr [004B45E0], eax
:0046A940 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.GetTextMetricsA, Ord:010Bh
                                  |
:0046A946 FF15B4844B00            Call dword ptr [004B84B4]
:0046A94C 56                      push esi
:0046A94D FF3548624B00            push dword ptr [004B6248]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046A953 FF15BC864B00            Call dword ptr [004B86BC]
:0046A959 8D8524FFFFFF            lea eax, dword ptr [ebp+FFFFFF24]
:0046A95F C78524FFFFFF94000000    mov dword ptr [ebp+FFFFFF24], 00000094
:0046A969 50                      push eax

* Reference To: KERNEL32.GetVersionExA, Ord:014Dh
                                  |
:0046A96A FF1518864B00            Call dword ptr [004B8618]
:0046A970 33C0                    xor eax, eax
:0046A972 83BD34FFFFFF01          cmp dword ptr [ebp+FFFFFF34], 00000001
:0046A979 0F94C0                  sete al
:0046A97C A378214B00              mov dword ptr [004B2178], eax
:0046A981 891D84724B00            mov dword ptr [004B7284], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A76E(C)
|
:0046A987 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A991(U)
|
:0046A989 5F                      pop edi
:0046A98A 5E                      pop esi
:0046A98B 5B                      pop ebx
:0046A98C C9                      leave
:0046A98D C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A7B6(C)
|
:0046A98E 83C8FF                  or eax, FFFFFFFF
:0046A991 EBF6                    jmp 0046A989

* Referenced by a CALL at Address:
|:0046A7EE   
|
:0046A993 53                      push ebx
:0046A994 33DB                    xor ebx, ebx
:0046A996 56                      push esi
:0046A997 33D2                    xor edx, edx
:0046A999 B812394B00              mov eax, 004B3912

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A9F5(C)
|
:0046A99E 8ACA                    mov cl, dl
:0046A9A0 8850FE                  mov byte ptr [eax-02], dl
:0046A9A3 8810                    mov byte ptr [eax], dl
:0046A9A5 80C107                  add cl, 07
:0046A9A8 8850FF                  mov byte ptr [eax-01], dl
:0046A9AB 884802                  mov byte ptr [eax+02], cl
:0046A9AE 885804                  mov byte ptr [eax+04], bl
:0046A9B1 885803                  mov byte ptr [eax+03], bl
:0046A9B4 885806                  mov byte ptr [eax+06], bl
:0046A9B7 884808                  mov byte ptr [eax+08], cl
:0046A9BA 885807                  mov byte ptr [eax+07], bl
:0046A9BD 88480A                  mov byte ptr [eax+0A], cl
:0046A9C0 88480C                  mov byte ptr [eax+0C], cl
:0046A9C3 88580B                  mov byte ptr [eax+0B], bl
:0046A9C6 88580E                  mov byte ptr [eax+0E], bl
:0046A9C9 885810                  mov byte ptr [eax+10], bl
:0046A9CC 88480F                  mov byte ptr [eax+0F], cl
:0046A9CF 884812                  mov byte ptr [eax+12], cl
:0046A9D2 885814                  mov byte ptr [eax+14], bl
:0046A9D5 884813                  mov byte ptr [eax+13], cl
:0046A9D8 885816                  mov byte ptr [eax+16], bl
:0046A9DB 884818                  mov byte ptr [eax+18], cl
:0046A9DE 884817                  mov byte ptr [eax+17], cl
:0046A9E1 88481A                  mov byte ptr [eax+1A], cl
:0046A9E4 88481C                  mov byte ptr [eax+1C], cl
:0046A9E7 88481B                  mov byte ptr [eax+1B], cl
:0046A9EA 83C020                  add eax, 00000020
:0046A9ED 83C208                  add edx, 00000008
:0046A9F0 3D123D4B00              cmp eax, 004B3D12
:0046A9F5 7CA7                    jl 0046A99E
:0046A9F7 B0FF                    mov al, FF
:0046A9F9 881D50394B00            mov byte ptr [004B3950], bl
:0046A9FF 881D52394B00            mov byte ptr [004B3952], bl
:0046AA05 881D51394B00            mov byte ptr [004B3951], bl
:0046AA0B C60554394B00A0          mov byte ptr [004B3954], A0
:0046AA12 881D56394B00            mov byte ptr [004B3956], bl
:0046AA18 881D55394B00            mov byte ptr [004B3955], bl
:0046AA1E 881D58394B00            mov byte ptr [004B3958], bl
:0046AA24 C6055A394B00A0          mov byte ptr [004B395A], A0
:0046AA2B 881D59394B00            mov byte ptr [004B3959], bl
:0046AA31 C6055C394B00A0          mov byte ptr [004B395C], A0
:0046AA38 C6055E394B00A0          mov byte ptr [004B395E], A0
:0046AA3F 881D5D394B00            mov byte ptr [004B395D], bl
:0046AA45 881D60394B00            mov byte ptr [004B3960], bl
:0046AA4B 881D62394B00            mov byte ptr [004B3962], bl
:0046AA51 C60561394B00A0          mov byte ptr [004B3961], A0
:0046AA58 C60564394B00A0          mov byte ptr [004B3964], A0
:0046AA5F 881D66394B00            mov byte ptr [004B3966], bl
:0046AA65 C60565394B00A0          mov byte ptr [004B3965], A0
:0046AA6C 881D68394B00            mov byte ptr [004B3968], bl
:0046AA72 C6056A394B00A0          mov byte ptr [004B396A], A0
:0046AA79 C60569394B00A0          mov byte ptr [004B3969], A0
:0046AA80 C6056C394B00A0          mov byte ptr [004B396C], A0
:0046AA87 C6056E394B00A0          mov byte ptr [004B396E], A0
:0046AA8E C6056D394B00A0          mov byte ptr [004B396D], A0
:0046AA95 C60570394B0080          mov byte ptr [004B3970], 80
:0046AA9C C60572394B0080          mov byte ptr [004B3972], 80
:0046AAA3 C60571394B0080          mov byte ptr [004B3971], 80
:0046AAAA A274394B00              mov byte ptr [004B3974], al
:0046AAAF 881D76394B00            mov byte ptr [004B3976], bl
:0046AAB5 881D75394B00            mov byte ptr [004B3975], bl
:0046AABB 881D78394B00            mov byte ptr [004B3978], bl
:0046AAC1 A27A394B00              mov byte ptr [004B397A], al
:0046AAC6 881D79394B00            mov byte ptr [004B3979], bl
:0046AACC A27C394B00              mov byte ptr [004B397C], al
:0046AAD1 A27E394B00              mov byte ptr [004B397E], al
:0046AAD6 881D7D394B00            mov byte ptr [004B397D], bl
:0046AADC 881D80394B00            mov byte ptr [004B3980], bl
:0046AAE2 881D82394B00            mov byte ptr [004B3982], bl
:0046AAE8 A281394B00              mov byte ptr [004B3981], al
:0046AAED A284394B00              mov byte ptr [004B3984], al
:0046AAF2 881D86394B00            mov byte ptr [004B3986], bl
:0046AAF8 A285394B00              mov byte ptr [004B3985], al
:0046AAFD 881D88394B00            mov byte ptr [004B3988], bl
:0046AB03 A28A394B00              mov byte ptr [004B398A], al
:0046AB08 A289394B00              mov byte ptr [004B3989], al
:0046AB0D A28C394B00              mov byte ptr [004B398C], al
:0046AB12 A28E394B00              mov byte ptr [004B398E], al
:0046AB17 A28D394B00              mov byte ptr [004B398D], al
:0046AB1C E8D5240000              call 0046CFF6
:0046AB21 BE00010000              mov esi, 00000100
:0046AB26 6810394B00              push 004B3910
:0046AB2B 56                      push esi
:0046AB2C 53                      push ebx
:0046AB2D E89D230000              call 0046CECF
:0046AB32 83C40C                  add esp, 0000000C
:0046AB35 A3A42F4B00              mov dword ptr [004B2FA4], eax
:0046AB3A 68D8414B00              push 004B41D8
:0046AB3F 56                      push esi
:0046AB40 53                      push ebx
:0046AB41 50                      push eax

* Reference To: GDI32.GetPaletteEntries, Ord:00EFh
                                  |
:0046AB42 FF1594844B00            Call dword ptr [004B8494]
:0046AB48 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AB7C(C)
|
:0046AB4A 8A88DA414B00            mov cl, byte ptr [eax+004B41DA]
:0046AB50 888810394B00            mov byte ptr [eax+004B3910], cl
:0046AB56 8A88D8414B00            mov cl, byte ptr [eax+004B41D8]
:0046AB5C 888812394B00            mov byte ptr [eax+004B3912], cl
:0046AB62 8A88D9414B00            mov cl, byte ptr [eax+004B41D9]
:0046AB68 888811394B00            mov byte ptr [eax+004B3911], cl
:0046AB6E 889813394B00            mov byte ptr [eax+004B3913], bl
:0046AB74 83C004                  add eax, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046AB77 3D00040000              cmp eax, 00000400
:0046AB7C 7CCC                    jl 0046AB4A
:0046AB7E 8935A03E4B00            mov dword ptr [004B3EA0], esi
:0046AB84 891DA02F4B00            mov dword ptr [004B2FA0], ebx
:0046AB8A 5E                      pop esi
:0046AB8B 5B                      pop ebx
:0046AB8C C3                      ret



* Referenced by a CALL at Address:
|:00426A32   
|
:0046AB8D 55                      push ebp
:0046AB8E 8BEC                    mov ebp, esp
:0046AB90 83EC18                  sub esp, 00000018
:0046AB93 8B15F0634B00            mov edx, dword ptr [004B63F0]
:0046AB99 53                      push ebx
:0046AB9A 33DB                    xor ebx, ebx
:0046AB9C 56                      push esi
:0046AB9D 3BD3                    cmp edx, ebx
:0046AB9F 57                      push edi
:0046ABA0 895DF0                  mov dword ptr [ebp-10], ebx
:0046ABA3 0F8E49010000            jle 0046ACF2
:0046ABA9 8BF2                    mov esi, edx

* Possible Reference to String Resource ID=00015: ""
                                  |
:0046ABAB 6A0F                    push 0000000F
:0046ABAD C1E602                  shl esi, 02
:0046ABB0 8BCE                    mov ecx, esi
:0046ABB2 58                      pop eax
:0046ABB3 C1E902                  shr ecx, 02
:0046ABB6 BF40264B00              mov edi, 004B2640

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046ABBB 6A10                    push 00000010
:0046ABBD F3                      repz
:0046ABBE AB                      stosd
:0046ABBF 8BCE                    mov ecx, esi
:0046ABC1 58                      pop eax
:0046ABC2 C1E902                  shr ecx, 02
:0046ABC5 BFD0274B00              mov edi, 004B27D0
:0046ABCA 6A1F                    push 0000001F
:0046ABCC F3                      repz
:0046ABCD AB                      stosd
:0046ABCE 8BCE                    mov ecx, esi
:0046ABD0 58                      pop eax
:0046ABD1 C1E902                  shr ecx, 02
:0046ABD4 BFB0244B00              mov edi, 004B24B0

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046ABD9 6A10                    push 00000010
:0046ABDB F3                      repz
:0046ABDC AB                      stosd
:0046ABDD 8BCE                    mov ecx, esi
:0046ABDF 58                      pop eax
:0046ABE0 C1E902                  shr ecx, 02
:0046ABE3 BF80374B00              mov edi, 004B3780
:0046ABE8 6A1F                    push 0000001F
:0046ABEA F3                      repz
:0046ABEB AB                      stosd
:0046ABEC 8BCE                    mov ecx, esi
:0046ABEE 58                      pop eax
:0046ABEF C1E902                  shr ecx, 02
:0046ABF2 BF38404B00              mov edi, 004B4038

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046ABF7 6A04                    push 00000004
:0046ABF9 F3                      repz
:0046ABFA AB                      stosd
:0046ABFB 8BCE                    mov ecx, esi
:0046ABFD 33C0                    xor eax, eax
:0046ABFF C1E902                  shr ecx, 02
:0046AC02 BF88194B00              mov edi, 004B1988
:0046AC07 C745E864294B00          mov [ebp-18], 004B2964
:0046AC0E F3                      repz
:0046AC0F AB                      stosd
:0046AC10 8BCE                    mov ecx, esi
:0046AC12 BFA8474B00              mov edi, 004B47A8
:0046AC17 C1E902                  shr ecx, 02
:0046AC1A F3                      repz
:0046AC1B AB                      stosd
:0046AC1C 8BCE                    mov ecx, esi
:0046AC1E 58                      pop eax
:0046AC1F C1E902                  shr ecx, 02
:0046AC22 BFF0454B00              mov edi, 004B45F0

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046AC27 6A03                    push 00000003
:0046AC29 F3                      repz
:0046AC2A AB                      stosd
:0046AC2B 8BCE                    mov ecx, esi
:0046AC2D 58                      pop eax
:0046AC2E C1E902                  shr ecx, 02
:0046AC31 BF802C4B00              mov edi, 004B2C80
:0046AC36 C745F4A83E4B00          mov [ebp-0C], 004B3EA8
:0046AC3D F3                      repz
:0046AC3E AB                      stosd
:0046AC3F 8BCE                    mov ecx, esi
:0046AC41 33C0                    xor eax, eax
:0046AC43 C1E902                  shr ecx, 02
:0046AC46 BF581E4B00              mov edi, 004B1E58
:0046AC4B C745EC68734B00          mov [ebp-14], 004B7368
:0046AC52 F3                      repz
:0046AC53 AB                      stosd
:0046AC54 8BCE                    mov ecx, esi
:0046AC56 BFE81F4B00              mov edi, 004B1FE8
:0046AC5B C1E902                  shr ecx, 02
:0046AC5E 2145FC                  and dword ptr [ebp-04], eax
:0046AC61 C745F860734B00          mov [ebp-08], 004B7360
:0046AC68 F3                      repz
:0046AC69 AB                      stosd

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ACEA(C)
|
:0046AC6A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046AC6D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046AC70 8B3C9DE8354B00          mov edi, dword ptr [4*ebx+004B35E8]
:0046AC77 8345F404                add dword ptr [ebp-0C], 00000004
:0046AC7B 8B09                    mov ecx, dword ptr [ecx]
:0046AC7D 83A0AC2F4B0000          and dword ptr [eax+004B2FAC], 00000000
:0046AC84 83A0A82F4B0000          and dword ptr [eax+004B2FA8], 00000000
:0046AC8B 8D80A82F4B00            lea eax, dword ptr [eax+004B2FA8]
:0046AC91 8D71FF                  lea esi, dword ptr [ecx-01]
:0046AC94 8D5FFF                  lea ebx, dword ptr [edi-01]
:0046AC97 89700C                  mov dword ptr [eax+0C], esi
:0046AC9A 895808                  mov dword ptr [eax+08], ebx
:0046AC9D 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ACA0 8345FC10                add dword ptr [ebp-04], 00000010
:0046ACA4 83A064734B0000          and dword ptr [eax+004B7364], 00000000
:0046ACAB 8B45F8                  mov eax, dword ptr [ebp-08]
:0046ACAE 8345F810                add dword ptr [ebp-08], 00000010
:0046ACB2 832000                  and dword ptr [eax], 00000000
:0046ACB5 8B45EC                  mov eax, dword ptr [ebp-14]
:0046ACB8 897004                  mov dword ptr [eax+04], esi
:0046ACBB 8918                    mov dword ptr [eax], ebx
:0046ACBD 8B5DF0                  mov ebx, dword ptr [ebp-10]
:0046ACC0 83C010                  add eax, 00000010
:0046ACC3 8945EC                  mov dword ptr [ebp-14], eax
:0046ACC6 890C9D20234B00          mov dword ptr [4*ebx+004B2320], ecx
:0046ACCD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046ACD0 893C9D90214B00          mov dword ptr [4*ebx+004B2190], edi
:0046ACD7 8361FC00                and dword ptr [ecx-04], 00000000
:0046ACDB 832100                  and dword ptr [ecx], 00000000
:0046ACDE 43                      inc ebx
:0046ACDF 83C108                  add ecx, 00000008
:0046ACE2 3BDA                    cmp ebx, edx
:0046ACE4 895DF0                  mov dword ptr [ebp-10], ebx
:0046ACE7 894DE8                  mov dword ptr [ebp-18], ecx
:0046ACEA 0F8C7AFFFFFF            jl 0046AC6A
:0046ACF0 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ABA3(C)
|
:0046ACF2 8B3584724B00            mov esi, dword ptr [004B7284]
:0046ACF8 33FF                    xor edi, edi
:0046ACFA 3BD3                    cmp edx, ebx
:0046ACFC 891D80474B00            mov dword ptr [004B4780], ebx
:0046AD02 891DD8454B00            mov dword ptr [004B45D8], ebx
:0046AD08 891DE4634B00            mov dword ptr [004B63E4], ebx
:0046AD0E 891DE8634B00            mov dword ptr [004B63E8], ebx
:0046AD14 891DEC634B00            mov dword ptr [004B63EC], ebx
:0046AD1A 7E15                    jle 0046AD31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AD2F(C)
|
:0046AD1C 57                      push edi
:0046AD1D E805FAFFFF              call 0046A727
:0046AD22 59                      pop ecx
:0046AD23 E837020000              call 0046AF5F
:0046AD28 47                      inc edi
:0046AD29 3B3DF0634B00            cmp edi, dword ptr [004B63F0]
:0046AD2F 7CEB                    jl 0046AD1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AD1A(C)
|
:0046AD31 56                      push esi
:0046AD32 E8F0F9FFFF              call 0046A727
:0046AD37 59                      pop ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046AD38 6A05                    push 00000005
:0046AD3A FF3548624B00            push dword ptr [004B6248]

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046AD40 FF15E4864B00            Call dword ptr [004B86E4]
:0046AD46 5F                      pop edi
:0046AD47 5E                      pop esi
:0046AD48 5B                      pop ebx
:0046AD49 C9                      leave
:0046AD4A C3                      ret



* Referenced by a CALL at Addresses:
|:0042608D   , :004264E1   , :0046C8C6   , :0046CA0C   
|
:0046AD4B 833D103D4B0000          cmp dword ptr [004B3D10], 00000000
:0046AD52 53                      push ebx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0046AD53 8B1D8C844B00            mov ebx, dword ptr [004B848C]
:0046AD59 56                      push esi
:0046AD5A 57                      push edi
:0046AD5B 7475                    je 0046ADD2
:0046AD5D 33F6                    xor esi, esi
:0046AD5F 3935F0634B00            cmp dword ptr [004B63F0], esi
:0046AD65 7E1B                    jle 0046AD82
:0046AD67 BF103D4B00              mov edi, 004B3D10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AD80(C)
|
:0046AD6C 56                      push esi
:0046AD6D E8371C0000              call 0046C9A9
:0046AD72 832700                  and dword ptr [edi], 00000000
:0046AD75 46                      inc esi
:0046AD76 83C704                  add edi, 00000004
:0046AD79 3B35F0634B00            cmp esi, dword ptr [004B63F0]
:0046AD7F 59                      pop ecx
:0046AD80 7CEA                    jl 0046AD6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AD65(C)
|
:0046AD82 FF3584474B00            push dword ptr [004B4784]
:0046AD88 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.SetMapMode, Ord:0161h
                                  |
:0046AD8E FF1590844B00            Call dword ptr [004B8490]
:0046AD94 FF35E0454B00            push dword ptr [004B45E0]

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0046AD9A 8B359C844B00            mov esi, dword ptr [004B849C]
:0046ADA0 FF35A81C4B00            push dword ptr [004B1CA8]
:0046ADA6 FFD6                    call esi
:0046ADA8 FF35501E4B00            push dword ptr [004B1E50]
:0046ADAE FF35A81C4B00            push dword ptr [004B1CA8]
:0046ADB4 FFD6                    call esi
:0046ADB6 FF35C8414B00            push dword ptr [004B41C8]
:0046ADBC FFD3                    call ebx
:0046ADBE FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:0046ADC4 FF15E4844B00            Call dword ptr [004B84E4]
:0046ADCA FF35CC414B00            push dword ptr [004B41CC]
:0046ADD0 FFD3                    call ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AD5B(C)
|
:0046ADD2 A1A42F4B00              mov eax, dword ptr [004B2FA4]
:0046ADD7 85C0                    test eax, eax
:0046ADD9 740A                    je 0046ADE5
:0046ADDB 50                      push eax
:0046ADDC FFD3                    call ebx
:0046ADDE 8325A42F4B0000          and dword ptr [004B2FA4], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ADD9(C)
|
:0046ADE5 5F                      pop edi
:0046ADE6 5E                      pop esi
:0046ADE7 5B                      pop ebx
:0046ADE8 C3                      ret



* Referenced by a CALL at Addresses:
|:00412907   , :00412A7C   , :00412B61   , :00412DFA   , :00412E7B   
|:00412EB0   , :00416D3D   , :0045296E   , :00454753   , :0045490A   
|:00454A96   , :00454B4B   , :00454C1C   , :00454C8A   , :0045FF9A   
|:00460039   , :00465F57   , :004660B8   
|
:0046ADE9 A184724B00              mov eax, dword ptr [004B7284]
:0046ADEE 8B542404                mov edx, dword ptr [esp+04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046ADF2 6A03                    push 00000003
:0046ADF4 C1E002                  shl eax, 02
:0046ADF7 59                      pop ecx
:0046ADF8 3BD1                    cmp edx, ecx
:0046ADFA 8990802C4B00            mov dword ptr [eax+004B2C80], edx
:0046AE00 7F0D                    jg 0046AE0F

* Possible Reference to String Resource ID=00015: ""
                                  |
:0046AE02 6A0F                    push 0000000F
:0046AE04 2BCA                    sub ecx, edx
:0046AE06 5A                      pop edx
:0046AE07 D3FA                    sar edx, cl
:0046AE09 899040264B00            mov dword ptr [eax+004B2640], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AE00(C)
|
:0046AE0F C3                      ret

* Referenced by a CALL at Addresses:
|:00412EC0   , :00412F05   , :00421D37   , :00421DDD   , :004222D5   
|:0042754B   , :00427632   , :004276B6   , :0042CED6   , :0042CF56   
|:00442C5E   , :00442C88   , :004501FB   , :0045026F   , :004502BF   
|:00450329   , :00451733   , :00451765   , :00451808   , :00451846   
|:00451890   , :00451AB8   , :00451AF0   , :0045299A   , :00452ACF   
|:004547B7   , :004547E1   , :0045480C   , :0045481C   , :004548E1   
|:00454AA4   , :00454B59   , :00454C2A   , :00454C98   , :00460618   
|:004607BF   , :004660FF   
|
:0046AE10 55                      push ebp
:0046AE11 8BEC                    mov ebp, esp
:0046AE13 A184724B00              mov eax, dword ptr [004B7284]
:0046AE18 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046AE1B C1E002                  shl eax, 02
:0046AE1E 83B8802C4B0003          cmp dword ptr [eax+004B2C80], 00000003
:0046AE25 8988A8474B00            mov dword ptr [eax+004B47A8], ecx
:0046AE2B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046AE2E 7F17                    jg 0046AE47
:0046AE30 83E10F                  and ecx, 0000000F
:0046AE33 83C110                  add ecx, 00000010
:0046AE36 898838404B00            mov dword ptr [eax+004B4038], ecx
:0046AE3C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046AE3F 83E10F                  and ecx, 0000000F
:0046AE42 83C110                  add ecx, 00000010
:0046AE45 EB09                    jmp 0046AE50

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AE2E(C)
|
:0046AE47 898838404B00            mov dword ptr [eax+004B4038], ecx
:0046AE4D 8B4D10                  mov ecx, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AE45(U)
|
:0046AE50 898880374B00            mov dword ptr [eax+004B3780], ecx
:0046AE56 5D                      pop ebp
:0046AE57 C3                      ret



* Referenced by a CALL at Addresses:
|:00408082   , :004080BA   , :0040811D   , :004088CD   , :00408A0F   
|:00408A6A   , :00408AB6   , :00408B09   
|
:0046AE58 55                      push ebp
:0046AE59 8BEC                    mov ebp, esp
:0046AE5B A184724B00              mov eax, dword ptr [004B7284]
:0046AE60 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046AE63 C1E002                  shl eax, 02
:0046AE66 83B8802C4B0003          cmp dword ptr [eax+004B2C80], 00000003
:0046AE6D 898888194B00            mov dword ptr [eax+004B1988], ecx
:0046AE73 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046AE76 7F17                    jg 0046AE8F
:0046AE78 83E10F                  and ecx, 0000000F
:0046AE7B 83C110                  add ecx, 00000010
:0046AE7E 8988B0244B00            mov dword ptr [eax+004B24B0], ecx
:0046AE84 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046AE87 83E10F                  and ecx, 0000000F
:0046AE8A 83C110                  add ecx, 00000010
:0046AE8D EB09                    jmp 0046AE98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AE76(C)
|
:0046AE8F 8988B0244B00            mov dword ptr [eax+004B24B0], ecx
:0046AE95 8B4D10                  mov ecx, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AE8D(U)
|
:0046AE98 8988D0274B00            mov dword ptr [eax+004B27D0], ecx
:0046AE9E 5D                      pop ebp
:0046AE9F C3                      ret



* Referenced by a CALL at Addresses:
|:0042229D   , :004223DD   , :00439CF6   , :00439DBB   , :00442C4E   
|:00442CC9   , :00452987   , :00452B2B   , :00468DF0   
|
:0046AEA0 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046AEA6 53                      push ebx
:0046AEA7 8B442408                mov eax, dword ptr [esp+08]
:0046AEAB 56                      push esi
:0046AEAC 57                      push edi
:0046AEAD 8BF9                    mov edi, ecx
:0046AEAF C1E703                  shl edi, 03
:0046AEB2 8B9760294B00            mov edx, dword ptr [edi+004B2960]
:0046AEB8 8D3410                  lea esi, dword ptr [eax+edx]
:0046AEBB 8BC1                    mov eax, ecx
:0046AEBD C1E004                  shl eax, 04
:0046AEC0 85F6                    test esi, esi
:0046AEC2 8D9860734B00            lea ebx, dword ptr [eax+004B7360]
:0046AEC8 8933                    mov dword ptr [ebx], esi
:0046AECA 7D03                    jge 0046AECF
:0046AECC 832300                  and dword ptr [ebx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AECA(C)
|
:0046AECF 8B742418                mov esi, dword ptr [esp+18]
:0046AED3 C1E102                  shl ecx, 02
:0046AED6 03D6                    add edx, esi
:0046AED8 8DB068734B00            lea esi, dword ptr [eax+004B7368]
:0046AEDE 8B99E8354B00            mov ebx, dword ptr [ecx+004B35E8]
:0046AEE4 4B                      dec ebx
:0046AEE5 8916                    mov dword ptr [esi], edx
:0046AEE7 3BD3                    cmp edx, ebx
:0046AEE9 7E02                    jle 0046AEED
:0046AEEB 891E                    mov dword ptr [esi], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AEE9(C)
|
:0046AEED 8B9764294B00            mov edx, dword ptr [edi+004B2964]
:0046AEF3 8B742414                mov esi, dword ptr [esp+14]
:0046AEF7 03F2                    add esi, edx
:0046AEF9 8DB864734B00            lea edi, dword ptr [eax+004B7364]
:0046AEFF 85F6                    test esi, esi
:0046AF01 8937                    mov dword ptr [edi], esi
:0046AF03 7D03                    jge 0046AF08
:0046AF05 832700                  and dword ptr [edi], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AF03(C)
|
:0046AF08 8B74241C                mov esi, dword ptr [esp+1C]
:0046AF0C 8B89A83E4B00            mov ecx, dword ptr [ecx+004B3EA8]
:0046AF12 03D6                    add edx, esi
:0046AF14 8D806C734B00            lea eax, dword ptr [eax+004B736C]
:0046AF1A 49                      dec ecx
:0046AF1B 3BD1                    cmp edx, ecx
:0046AF1D 8910                    mov dword ptr [eax], edx
:0046AF1F 7E02                    jle 0046AF23
:0046AF21 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AF1F(C)
|
:0046AF23 5F                      pop edi
:0046AF24 5E                      pop esi
:0046AF25 5B                      pop ebx
:0046AF26 C3                      ret



* Referenced by a CALL at Addresses:
|:0046B2D2   , :0046B3F2   , :0046B6A8   , :0046B7DE   , :0046B91F   
|:0046BC95   , :0046BE0A   , :0046BF8E   
|
:0046AF27 A184724B00              mov eax, dword ptr [004B7284]
:0046AF2C C1E002                  shl eax, 02
:0046AF2F 83B8102E4B0000          cmp dword ptr [eax+004B2E10], 00000000
:0046AF36 7D06                    jge 0046AF3E
:0046AF38 8B4C2408                mov ecx, dword ptr [esp+08]
:0046AF3C EB0D                    jmp 0046AF4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AF36(C)
|
:0046AF3E 8B88A83E4B00            mov ecx, dword ptr [eax+004B3EA8]
:0046AF44 2B4C2408                sub ecx, dword ptr [esp+08]
:0046AF48 83C10F                  add ecx, 0000000F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AF3C(U)
|
:0046AF4B 8B80E8354B00            mov eax, dword ptr [eax+004B35E8]
:0046AF51 0FAFC1                  imul eax, ecx
:0046AF54 03442404                add eax, dword ptr [esp+04]
:0046AF58 0305E4454B00            add eax, dword ptr [004B45E4]
:0046AF5E C3                      ret



* Referenced by a CALL at Addresses:
|:00412EF3   , :0045298F   , :00452AC4   , :0046AD23   
|
:0046AF5F A184724B00              mov eax, dword ptr [004B7284]
:0046AF64 C1E002                  shl eax, 02
:0046AF67 FFB0802C4B00            push dword ptr [eax+004B2C80]
:0046AF6D 8B88A83E4B00            mov ecx, dword ptr [eax+004B3EA8]
:0046AF73 83C110                  add ecx, 00000010
:0046AF76 FF35E4454B00            push dword ptr [004B45E4]
:0046AF7C 51                      push ecx
:0046AF7D FFB0E8354B00            push dword ptr [eax+004B35E8]
:0046AF83 E8FB200000              call 0046D083
:0046AF88 A184724B00              mov eax, dword ptr [004B7284]
:0046AF8D 83C410                  add esp, 00000010
:0046AF90 C1E002                  shl eax, 02
:0046AF93 FFB0A83E4B00            push dword ptr [eax+004B3EA8]
:0046AF99 FFB0E8354B00            push dword ptr [eax+004B35E8]
:0046AF9F 6A00                    push 00000000
:0046AFA1 6A00                    push 00000000
:0046AFA3 E81FF5FFFF              call 0046A4C7
:0046AFA8 83C410                  add esp, 00000010
:0046AFAB C3                      ret



* Referenced by a CALL at Addresses:
|:00413432   , :004429F1   , :004660D4   
|
:0046AFAC A184724B00              mov eax, dword ptr [004B7284]
:0046AFB1 8B542408                mov edx, dword ptr [esp+08]
:0046AFB5 8B4C240C                mov ecx, dword ptr [esp+0C]
:0046AFB9 56                      push esi
:0046AFBA 833C85802C4B0007        cmp dword ptr [4*eax+004B2C80], 00000007
:0046AFC2 8915A0794B00            mov dword ptr [004B79A0], edx
:0046AFC8 7516                    jne 0046AFE0
:0046AFCA 8BC2                    mov eax, edx
:0046AFCC C1E003                  shl eax, 03
:0046AFCF 50                      push eax
:0046AFD0 51                      push ecx
:0046AFD1 68A0724B00              push 004B72A0
:0046AFD6 E8F5290000              call 0046D9D0
:0046AFDB 83C40C                  add esp, 0000000C
:0046AFDE 5E                      pop esi
:0046AFDF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AFC8(C)
|
:0046AFE0 C1E202                  shl edx, 02
:0046AFE3 85D2                    test edx, edx
:0046AFE5 B8A0724B00              mov eax, 004B72A0
:0046AFEA 7E1C                    jle 0046B008
:0046AFEC 8BF2                    mov esi, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B006(C)
|
:0046AFEE 8A11                    mov dl, byte ptr [ecx]
:0046AFF0 C0EA04                  shr dl, 04
:0046AFF3 80C210                  add dl, 10
:0046AFF6 8810                    mov byte ptr [eax], dl
:0046AFF8 8A11                    mov dl, byte ptr [ecx]
:0046AFFA 80E20F                  and dl, 0F
:0046AFFD 40                      inc eax
:0046AFFE 80C210                  add dl, 10
:0046B001 8810                    mov byte ptr [eax], dl
:0046B003 40                      inc eax
:0046B004 41                      inc ecx
:0046B005 4E                      dec esi
:0046B006 75E6                    jne 0046AFEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AFEA(C)
|
:0046B008 5E                      pop esi
:0046B009 C3                      ret



* Referenced by a CALL at Address:
|:0042CF46   
|
:0046B00A 55                      push ebp
:0046B00B 8BEC                    mov ebp, esp
:0046B00D 83EC20                  sub esp, 00000020
:0046B010 A184724B00              mov eax, dword ptr [004B7284]
:0046B015 53                      push ebx
:0046B016 8B5D10                  mov ebx, dword ptr [ebp+10]
:0046B019 56                      push esi
:0046B01A C1E003                  shl eax, 03
:0046B01D 8B750C                  mov esi, dword ptr [ebp+0C]
:0046B020 57                      push edi
:0046B021 8B8860294B00            mov ecx, dword ptr [eax+004B2960]
:0046B027 8B7D08                  mov edi, dword ptr [ebp+08]
:0046B02A 8B8064294B00            mov eax, dword ptr [eax+004B2964]
:0046B030 FF7518                  push [ebp+18]
:0046B033 8D140F                  lea edx, dword ptr [edi+ecx]
:0046B036 03CB                    add ecx, ebx
:0046B038 894DF8                  mov dword ptr [ebp-08], ecx
:0046B03B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046B03E 8955F0                  mov dword ptr [ebp-10], edx
:0046B041 8D1406                  lea edx, dword ptr [esi+eax]
:0046B044 03C8                    add ecx, eax
:0046B046 8955F4                  mov dword ptr [ebp-0C], edx
:0046B049 894DFC                  mov dword ptr [ebp-04], ecx
:0046B04C E81E020000              call 0046B26F
:0046B051 3BFB                    cmp edi, ebx
:0046B053 59                      pop ecx
:0046B054 757E                    jne 0046B0D4
:0046B056 8B1584724B00            mov edx, dword ptr [004B7284]
:0046B05C 8B7DF0                  mov edi, dword ptr [ebp-10]
:0046B05F 8BF2                    mov esi, edx
:0046B061 C1E604                  shl esi, 04
:0046B064 3BBE60734B00            cmp edi, dword ptr [esi+004B7360]
:0046B06A 0F8C60010000            jl 0046B1D0
:0046B070 3BBE68734B00            cmp edi, dword ptr [esi+004B7368]
:0046B076 0F8F54010000            jg 0046B1D0
:0046B07C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B07F 8B45FC                  mov eax, dword ptr [ebp-04]
:0046B082 3BC8                    cmp ecx, eax
:0046B084 7E17                    jle 0046B09D
:0046B086 8B04D564294B00          mov eax, dword ptr [8*edx+004B2964]
:0046B08D 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046B090 8B550C                  mov edx, dword ptr [ebp+0C]
:0046B093 03C8                    add ecx, eax
:0046B095 03C2                    add eax, edx
:0046B097 894DF4                  mov dword ptr [ebp-0C], ecx
:0046B09A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B084(C)
|
:0046B09D 8B9664734B00            mov edx, dword ptr [esi+004B7364]
:0046B0A3 3BCA                    cmp ecx, edx
:0046B0A5 7D05                    jge 0046B0AC
:0046B0A7 8BCA                    mov ecx, edx
:0046B0A9 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B0A5(C)
|
:0046B0AC 8BB66C734B00            mov esi, dword ptr [esi+004B736C]
:0046B0B2 3BC6                    cmp eax, esi
:0046B0B4 7E05                    jle 0046B0BB
:0046B0B6 8BC6                    mov eax, esi
:0046B0B8 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B0B4(C)
|
:0046B0BB 2BC1                    sub eax, ecx
:0046B0BD 897DE0                  mov dword ptr [ebp-20], edi
:0046B0C0 40                      inc eax
:0046B0C1 6A01                    push 00000001
:0046B0C3 8BF8                    mov edi, eax
:0046B0C5 5E                      pop esi
:0046B0C6 8D45F0                  lea eax, dword ptr [ebp-10]
:0046B0C9 894DE4                  mov dword ptr [ebp-1C], ecx
:0046B0CC 50                      push eax
:0046B0CD E815030000              call 0046B3E7
:0046B0D2 EB7F                    jmp 0046B153

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B054(C)
|
:0046B0D4 3B7514                  cmp esi, dword ptr [ebp+14]
:0046B0D7 757D                    jne 0046B156
:0046B0D9 8B1584724B00            mov edx, dword ptr [004B7284]
:0046B0DF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046B0E2 8BF2                    mov esi, edx
:0046B0E4 C1E604                  shl esi, 04
:0046B0E7 3B8664734B00            cmp eax, dword ptr [esi+004B7364]
:0046B0ED 0F8CDD000000            jl 0046B1D0
:0046B0F3 3B866C734B00            cmp eax, dword ptr [esi+004B736C]
:0046B0F9 0F8FD1000000            jg 0046B1D0
:0046B0FF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046B102 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B105 3BC8                    cmp ecx, eax
:0046B107 7E12                    jle 0046B11B
:0046B109 8B04D560294B00          mov eax, dword ptr [8*edx+004B2960]
:0046B110 8D0C03                  lea ecx, dword ptr [ebx+eax]
:0046B113 03C7                    add eax, edi
:0046B115 894DF0                  mov dword ptr [ebp-10], ecx
:0046B118 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B107(C)
|
:0046B11B 8B9660734B00            mov edx, dword ptr [esi+004B7360]
:0046B121 3BCA                    cmp ecx, edx
:0046B123 7D05                    jge 0046B12A
:0046B125 8BCA                    mov ecx, edx
:0046B127 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B123(C)
|
:0046B12A 8BB668734B00            mov esi, dword ptr [esi+004B7368]
:0046B130 3BC6                    cmp eax, esi
:0046B132 7E05                    jle 0046B139
:0046B134 8BC6                    mov eax, esi
:0046B136 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B132(C)
|
:0046B139 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046B13C 2BC1                    sub eax, ecx
:0046B13E 40                      inc eax
:0046B13F 6A01                    push 00000001
:0046B141 8BF0                    mov esi, eax
:0046B143 5F                      pop edi
:0046B144 8D45F0                  lea eax, dword ptr [ebp-10]
:0046B147 8955E4                  mov dword ptr [ebp-1C], edx
:0046B14A 50                      push eax
:0046B14B 894DE0                  mov dword ptr [ebp-20], ecx
:0046B14E E874010000              call 0046B2C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B0D2(U)
|
:0046B153 59                      pop ecx
:0046B154 EB6A                    jmp 0046B1C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B0D7(C)
|
:0046B156 8B45F0                  mov eax, dword ptr [ebp-10]
:0046B159 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B15C 3BC1                    cmp eax, ecx
:0046B15E 7D08                    jge 0046B168
:0046B160 8945E0                  mov dword ptr [ebp-20], eax
:0046B163 894DE8                  mov dword ptr [ebp-18], ecx
:0046B166 EB06                    jmp 0046B16E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B15E(C)
|
:0046B168 894DE0                  mov dword ptr [ebp-20], ecx
:0046B16B 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B166(U)
|
:0046B16E 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046B171 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046B174 3BC1                    cmp eax, ecx
:0046B176 7D08                    jge 0046B180
:0046B178 8945E4                  mov dword ptr [ebp-1C], eax
:0046B17B 894DEC                  mov dword ptr [ebp-14], ecx
:0046B17E EB06                    jmp 0046B186

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B176(C)
|
:0046B180 894DE4                  mov dword ptr [ebp-1C], ecx
:0046B183 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B17E(U)
|
:0046B186 A184724B00              mov eax, dword ptr [004B7284]
:0046B18B C1E004                  shl eax, 04
:0046B18E 0560734B00              add eax, 004B7360
:0046B193 50                      push eax
:0046B194 8D45E0                  lea eax, dword ptr [ebp-20]
:0046B197 50                      push eax
:0046B198 8D45E0                  lea eax, dword ptr [ebp-20]
:0046B19B 50                      push eax
:0046B19C E834000000              call 0046B1D5
:0046B1A1 83C40C                  add esp, 0000000C
:0046B1A4 85C0                    test eax, eax
:0046B1A6 7428                    je 0046B1D0
:0046B1A8 8D45F0                  lea eax, dword ptr [ebp-10]
:0046B1AB 50                      push eax
:0046B1AC E8A4030000              call 0046B555
:0046B1B1 8B75E8                  mov esi, dword ptr [ebp-18]
:0046B1B4 8B7DEC                  mov edi, dword ptr [ebp-14]
:0046B1B7 2B75E0                  sub esi, dword ptr [ebp-20]
:0046B1BA 2B7DE4                  sub edi, dword ptr [ebp-1C]
:0046B1BD 59                      pop ecx
:0046B1BE 46                      inc esi
:0046B1BF 47                      inc edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B154(U)
|
:0046B1C0 57                      push edi
:0046B1C1 56                      push esi
:0046B1C2 FF75E4                  push [ebp-1C]
:0046B1C5 FF75E0                  push [ebp-20]
:0046B1C8 E8FAF2FFFF              call 0046A4C7
:0046B1CD 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B06A(C), :0046B076(C), :0046B0ED(C), :0046B0F9(C), :0046B1A6(C)
|
:0046B1D0 5F                      pop edi
:0046B1D1 5E                      pop esi
:0046B1D2 5B                      pop ebx
:0046B1D3 C9                      leave
:0046B1D4 C3                      ret



* Referenced by a CALL at Addresses:
|:0046B19C   , :0046B7B7   , :0046B8F6   , :0046BAE6   , :0046BC3F   
|:0046BDF4   , :0046BF25   
|
:0046B1D5 55                      push ebp
:0046B1D6 8BEC                    mov ebp, esp
:0046B1D8 53                      push ebx
:0046B1D9 56                      push esi
:0046B1DA 8B750C                  mov esi, dword ptr [ebp+0C]
:0046B1DD 57                      push edi
:0046B1DE 8B7D10                  mov edi, dword ptr [ebp+10]
:0046B1E1 8B4604                  mov eax, dword ptr [esi+04]
:0046B1E4 8B4F04                  mov ecx, dword ptr [edi+04]
:0046B1E7 89450C                  mov dword ptr [ebp+0C], eax
:0046B1EA 3BC1                    cmp eax, ecx
:0046B1EC 7F03                    jg 0046B1F1
:0046B1EE 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B1EC(C)
|
:0046B1F1 8B4508                  mov eax, dword ptr [ebp+08]
:0046B1F4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046B1F7 894804                  mov dword ptr [eax+04], ecx
:0046B1FA 8B0E                    mov ecx, dword ptr [esi]
:0046B1FC 8B17                    mov edx, dword ptr [edi]
:0046B1FE 3BCA                    cmp ecx, edx
:0046B200 7E02                    jle 0046B204
:0046B202 8BD1                    mov edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B200(C)
|
:0046B204 895510                  mov dword ptr [ebp+10], edx
:0046B207 8910                    mov dword ptr [eax], edx
:0046B209 8B4E08                  mov ecx, dword ptr [esi+08]
:0046B20C 8B5708                  mov edx, dword ptr [edi+08]
:0046B20F 3BCA                    cmp ecx, edx
:0046B211 7C02                    jl 0046B215
:0046B213 8BCA                    mov ecx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B211(C)
|
:0046B215 894808                  mov dword ptr [eax+08], ecx
:0046B218 8B560C                  mov edx, dword ptr [esi+0C]
:0046B21B 8B5F0C                  mov ebx, dword ptr [edi+0C]
:0046B21E 3BD3                    cmp edx, ebx
:0046B220 7D02                    jge 0046B224
:0046B222 8BDA                    mov ebx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B220(C)
|
:0046B224 89580C                  mov dword ptr [eax+0C], ebx
:0046B227 8B4510                  mov eax, dword ptr [ebp+10]
:0046B22A 03C1                    add eax, ecx
:0046B22C 99                      cdq
:0046B22D 2BC2                    sub eax, edx
:0046B22F 8BC8                    mov ecx, eax
:0046B231 8B450C                  mov eax, dword ptr [ebp+0C]
:0046B234 03C3                    add eax, ebx
:0046B236 99                      cdq
:0046B237 2BC2                    sub eax, edx
:0046B239 D1F9                    sar ecx, 1
:0046B23B D1F8                    sar eax, 1
:0046B23D 390E                    cmp dword ptr [esi], ecx
:0046B23F 7F27                    jg 0046B268
:0046B241 3B4E08                  cmp ecx, dword ptr [esi+08]
:0046B244 7F22                    jg 0046B268
:0046B246 394604                  cmp dword ptr [esi+04], eax
:0046B249 7F1D                    jg 0046B268
:0046B24B 3B460C                  cmp eax, dword ptr [esi+0C]
:0046B24E 7F18                    jg 0046B268
:0046B250 390F                    cmp dword ptr [edi], ecx
:0046B252 7F14                    jg 0046B268
:0046B254 3B4F08                  cmp ecx, dword ptr [edi+08]
:0046B257 7F0F                    jg 0046B268
:0046B259 394704                  cmp dword ptr [edi+04], eax
:0046B25C 7F0A                    jg 0046B268
:0046B25E 3B470C                  cmp eax, dword ptr [edi+0C]
:0046B261 7F05                    jg 0046B268
:0046B263 6A01                    push 00000001
:0046B265 58                      pop eax
:0046B266 EB02                    jmp 0046B26A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B23F(C), :0046B244(C), :0046B249(C), :0046B24E(C), :0046B252(C)
|:0046B257(C), :0046B25C(C), :0046B261(C)
|
:0046B268 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B266(U)
|
:0046B26A 5F                      pop edi
:0046B26B 5E                      pop esi
:0046B26C 5B                      pop ebx
:0046B26D 5D                      pop ebp
:0046B26E C3                      ret



* Referenced by a CALL at Addresses:
|:0046B04C   , :0046B77D   
|
:0046B26F A184724B00              mov eax, dword ptr [004B7284]
:0046B274 C1E002                  shl eax, 02
:0046B277 8B88A8474B00            mov ecx, dword ptr [eax+004B47A8]
:0046B27D 83F905                  cmp ecx, 00000005
:0046B280 7417                    je 0046B299
:0046B282 8B9038404B00            mov edx, dword ptr [eax+004B4038]
:0046B288 83F904                  cmp ecx, 00000004
:0046B28B 7504                    jne 0046B291
:0046B28D 33C0                    xor eax, eax
:0046B28F EB14                    jmp 0046B2A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B28B(C)
|
:0046B291 8B8080374B00            mov eax, dword ptr [eax+004B3780]
:0046B297 EB0C                    jmp 0046B2A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B280(C)
|
:0046B299 8B9080374B00            mov edx, dword ptr [eax+004B3780]
:0046B29F 8B8038404B00            mov eax, dword ptr [eax+004B4038]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B28F(U), :0046B297(U)
|
:0046B2A5 33C9                    xor ecx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2C4(C)
|
:0046B2A7 F644240580              test [esp+05], 80
:0046B2AC 7408                    je 0046B2B6
:0046B2AE 8891B01C4B00            mov byte ptr [ecx+004B1CB0], dl
:0046B2B4 EB06                    jmp 0046B2BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2AC(C)
|
:0046B2B6 8881B01C4B00            mov byte ptr [ecx+004B1CB0], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2B4(U)
|
:0046B2BC D1642404                shl dword ptr [esp+04], 1
:0046B2C0 41                      inc ecx
:0046B2C1 83F910                  cmp ecx, 00000010
:0046B2C4 7CE1                    jl 0046B2A7
:0046B2C6 C3                      ret



* Referenced by a CALL at Addresses:
|:0046B14E   , :0046BB1F   , :0046BB8F   
|
:0046B2C7 56                      push esi
:0046B2C8 8B742408                mov esi, dword ptr [esp+08]
:0046B2CC 57                      push edi
:0046B2CD FF7604                  push [esi+04]
:0046B2D0 FF36                    push dword ptr [esi]
:0046B2D2 E850FCFFFF              call 0046AF27
:0046B2D7 59                      pop ecx
:0046B2D8 59                      pop ecx
:0046B2D9 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046B2DF 8B0C8DA8474B00          mov ecx, dword ptr [4*ecx+004B47A8]
:0046B2E6 83E900                  sub ecx, 00000000
:0046B2E9 0F84D4000000            je 0046B3C3
:0046B2EF 49                      dec ecx
:0046B2F0 0F8490000000            je 0046B386
:0046B2F6 49                      dec ecx
:0046B2F7 746A                    je 0046B363
:0046B2F9 49                      dec ecx
:0046B2FA 743D                    je 0046B339
:0046B2FC 49                      dec ecx
:0046B2FD 740C                    je 0046B30B
:0046B2FF 49                      dec ecx
:0046B300 0F84BD000000            je 0046B3C3
:0046B306 E9D9000000              jmp 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2FD(C)
|
:0046B30B 8B4E08                  mov ecx, dword ptr [esi+08]
:0046B30E 33D2                    xor edx, edx
:0046B310 2B0E                    sub ecx, dword ptr [esi]
:0046B312 0F88CC000000            js 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B332(C)
|
:0046B318 8BCA                    mov ecx, edx
:0046B31A 83E10F                  and ecx, 0000000F
:0046B31D 8A89B01C4B00            mov cl, byte ptr [ecx+004B1CB0]
:0046B323 84C9                    test cl, cl
:0046B325 7402                    je 0046B329
:0046B327 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B325(C)
|
:0046B329 8B4E08                  mov ecx, dword ptr [esi+08]
:0046B32C 40                      inc eax
:0046B32D 2B0E                    sub ecx, dword ptr [esi]
:0046B32F 42                      inc edx
:0046B330 3BD1                    cmp edx, ecx
:0046B332 7EE4                    jle 0046B318
:0046B334 E9AB000000              jmp 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2FA(C)
|
:0046B339 8B5608                  mov edx, dword ptr [esi+08]
:0046B33C 33C9                    xor ecx, ecx
:0046B33E 2B16                    sub edx, dword ptr [esi]
:0046B340 0F889E000000            js 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B35C(C)
|
:0046B346 8BD1                    mov edx, ecx
:0046B348 83E20F                  and edx, 0000000F
:0046B34B 8A92B01C4B00            mov dl, byte ptr [edx+004B1CB0]
:0046B351 0810                    or byte ptr [eax], dl
:0046B353 8B5608                  mov edx, dword ptr [esi+08]
:0046B356 2B16                    sub edx, dword ptr [esi]
:0046B358 40                      inc eax
:0046B359 41                      inc ecx
:0046B35A 3BCA                    cmp ecx, edx
:0046B35C 7EE8                    jle 0046B346
:0046B35E E981000000              jmp 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2F7(C)
|
:0046B363 8B5608                  mov edx, dword ptr [esi+08]
:0046B366 33C9                    xor ecx, ecx
:0046B368 2B16                    sub edx, dword ptr [esi]
:0046B36A 7878                    js 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B382(C)
|
:0046B36C 8BD1                    mov edx, ecx
:0046B36E 83E20F                  and edx, 0000000F
:0046B371 8A92B01C4B00            mov dl, byte ptr [edx+004B1CB0]
:0046B377 2010                    and byte ptr [eax], dl
:0046B379 8B5608                  mov edx, dword ptr [esi+08]
:0046B37C 2B16                    sub edx, dword ptr [esi]
:0046B37E 40                      inc eax
:0046B37F 41                      inc ecx
:0046B380 3BCA                    cmp ecx, edx
:0046B382 7EE8                    jle 0046B36C
:0046B384 EB5E                    jmp 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2F0(C)
|
:0046B386 8B4E08                  mov ecx, dword ptr [esi+08]
:0046B389 33D2                    xor edx, edx
:0046B38B 2B0E                    sub ecx, dword ptr [esi]
:0046B38D 7855                    js 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B3BF(C)
|
:0046B38F 8BCA                    mov ecx, edx
:0046B391 83E10F                  and ecx, 0000000F
:0046B394 8A89B01C4B00            mov cl, byte ptr [ecx+004B1CB0]
:0046B39A 3008                    xor byte ptr [eax], cl
:0046B39C 8B3D84724B00            mov edi, dword ptr [004B7284]
:0046B3A2 8A08                    mov cl, byte ptr [eax]
:0046B3A4 833CBD802C4B0007        cmp dword ptr [4*edi+004B2C80], 00000007
:0046B3AC 7408                    je 0046B3B6
:0046B3AE 80E10F                  and cl, 0F
:0046B3B1 80C910                  or cl, 10
:0046B3B4 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B3AC(C)
|
:0046B3B6 8B4E08                  mov ecx, dword ptr [esi+08]
:0046B3B9 40                      inc eax
:0046B3BA 2B0E                    sub ecx, dword ptr [esi]
:0046B3BC 42                      inc edx
:0046B3BD 3BD1                    cmp edx, ecx
:0046B3BF 7ECE                    jle 0046B38F
:0046B3C1 EB21                    jmp 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B2E9(C), :0046B300(C)
|
:0046B3C3 8B5608                  mov edx, dword ptr [esi+08]
:0046B3C6 33C9                    xor ecx, ecx
:0046B3C8 2B16                    sub edx, dword ptr [esi]
:0046B3CA 7818                    js 0046B3E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B3E2(C)
|
:0046B3CC 8BD1                    mov edx, ecx
:0046B3CE 83E20F                  and edx, 0000000F
:0046B3D1 8A92B01C4B00            mov dl, byte ptr [edx+004B1CB0]
:0046B3D7 8810                    mov byte ptr [eax], dl
:0046B3D9 8B5608                  mov edx, dword ptr [esi+08]
:0046B3DC 2B16                    sub edx, dword ptr [esi]
:0046B3DE 40                      inc eax
:0046B3DF 41                      inc ecx
:0046B3E0 3BCA                    cmp ecx, edx
:0046B3E2 7EE8                    jle 0046B3CC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B306(U), :0046B312(C), :0046B334(U), :0046B340(C), :0046B35E(U)
|:0046B36A(C), :0046B384(U), :0046B38D(C), :0046B3C1(U), :0046B3CA(C)
|
:0046B3E4 5F                      pop edi
:0046B3E5 5E                      pop esi
:0046B3E6 C3                      ret



* Referenced by a CALL at Addresses:
|:0046B0CD   , :0046BB54   , :0046BBCB   
|
:0046B3E7 56                      push esi
:0046B3E8 8B742408                mov esi, dword ptr [esp+08]
:0046B3EC 57                      push edi
:0046B3ED FF7604                  push [esi+04]
:0046B3F0 FF36                    push dword ptr [esi]
:0046B3F2 E830FBFFFF              call 0046AF27
:0046B3F7 59                      pop ecx
:0046B3F8 59                      pop ecx
:0046B3F9 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046B3FF 8B0C8DA8474B00          mov ecx, dword ptr [4*ecx+004B47A8]
:0046B406 83E900                  sub ecx, 00000000
:0046B409 0F8414010000            je 0046B523
:0046B40F 49                      dec ecx
:0046B410 0F84C2000000            je 0046B4D8
:0046B416 49                      dec ecx
:0046B417 0F8486000000            je 0046B4A3
:0046B41D 49                      dec ecx
:0046B41E 744B                    je 0046B46B
:0046B420 49                      dec ecx
:0046B421 740C                    je 0046B42F
:0046B423 49                      dec ecx
:0046B424 0F84F9000000            je 0046B523
:0046B42A E923010000              jmp 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B421(C)
|
:0046B42F 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0046B432 33D2                    xor edx, edx
:0046B434 2B4E04                  sub ecx, dword ptr [esi+04]
:0046B437 0F8815010000            js 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B464(C)
|
:0046B43D 8BCA                    mov ecx, edx
:0046B43F 83E10F                  and ecx, 0000000F
:0046B442 8A89B01C4B00            mov cl, byte ptr [ecx+004B1CB0]
:0046B448 84C9                    test cl, cl
:0046B44A 7402                    je 0046B44E
:0046B44C 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B44A(C)
|
:0046B44E 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046B454 03048D38494B00          add eax, dword ptr [4*ecx+004B4938]
:0046B45B 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0046B45E 2B4E04                  sub ecx, dword ptr [esi+04]
:0046B461 42                      inc edx
:0046B462 3BD1                    cmp edx, ecx
:0046B464 7ED7                    jle 0046B43D
:0046B466 E9E7000000              jmp 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B41E(C)
|
:0046B46B 8B560C                  mov edx, dword ptr [esi+0C]
:0046B46E 33C9                    xor ecx, ecx
:0046B470 2B5604                  sub edx, dword ptr [esi+04]
:0046B473 0F88D9000000            js 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B49C(C)
|
:0046B479 8BD1                    mov edx, ecx
:0046B47B 83E20F                  and edx, 0000000F
:0046B47E 8A92B01C4B00            mov dl, byte ptr [edx+004B1CB0]
:0046B484 0810                    or byte ptr [eax], dl
:0046B486 8B1584724B00            mov edx, dword ptr [004B7284]
:0046B48C 03049538494B00          add eax, dword ptr [4*edx+004B4938]
:0046B493 8B560C                  mov edx, dword ptr [esi+0C]
:0046B496 2B5604                  sub edx, dword ptr [esi+04]
:0046B499 41                      inc ecx
:0046B49A 3BCA                    cmp ecx, edx
:0046B49C 7EDB                    jle 0046B479
:0046B49E E9AF000000              jmp 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B417(C)
|
:0046B4A3 8B560C                  mov edx, dword ptr [esi+0C]
:0046B4A6 33C9                    xor ecx, ecx
:0046B4A8 2B5604                  sub edx, dword ptr [esi+04]
:0046B4AB 0F88A1000000            js 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B4D4(C)
|
:0046B4B1 8BD1                    mov edx, ecx
:0046B4B3 83E20F                  and edx, 0000000F
:0046B4B6 8A92B01C4B00            mov dl, byte ptr [edx+004B1CB0]
:0046B4BC 2010                    and byte ptr [eax], dl
:0046B4BE 8B1584724B00            mov edx, dword ptr [004B7284]
:0046B4C4 03049538494B00          add eax, dword ptr [4*edx+004B4938]
:0046B4CB 8B560C                  mov edx, dword ptr [esi+0C]
:0046B4CE 2B5604                  sub edx, dword ptr [esi+04]
:0046B4D1 41                      inc ecx
:0046B4D2 3BCA                    cmp ecx, edx
:0046B4D4 7EDB                    jle 0046B4B1
:0046B4D6 EB7A                    jmp 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B410(C)
|
:0046B4D8 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0046B4DB 33D2                    xor edx, edx
:0046B4DD 2B4E04                  sub ecx, dword ptr [esi+04]
:0046B4E0 7870                    js 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B51F(C)
|
:0046B4E2 8BCA                    mov ecx, edx
:0046B4E4 83E10F                  and ecx, 0000000F
:0046B4E7 8A89B01C4B00            mov cl, byte ptr [ecx+004B1CB0]
:0046B4ED 3008                    xor byte ptr [eax], cl
:0046B4EF 8B3D84724B00            mov edi, dword ptr [004B7284]
:0046B4F5 8A08                    mov cl, byte ptr [eax]
:0046B4F7 833CBD802C4B0007        cmp dword ptr [4*edi+004B2C80], 00000007
:0046B4FF 7408                    je 0046B509
:0046B501 80E10F                  and cl, 0F
:0046B504 80C910                  or cl, 10
:0046B507 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B4FF(C)
|
:0046B509 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046B50F 03048D38494B00          add eax, dword ptr [4*ecx+004B4938]
:0046B516 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0046B519 2B4E04                  sub ecx, dword ptr [esi+04]
:0046B51C 42                      inc edx
:0046B51D 3BD1                    cmp edx, ecx
:0046B51F 7EC1                    jle 0046B4E2
:0046B521 EB2F                    jmp 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B409(C), :0046B424(C)
|
:0046B523 8B560C                  mov edx, dword ptr [esi+0C]
:0046B526 33C9                    xor ecx, ecx
:0046B528 2B5604                  sub edx, dword ptr [esi+04]
:0046B52B 7825                    js 0046B552

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B550(C)
|
:0046B52D 8BD1                    mov edx, ecx
:0046B52F 83E20F                  and edx, 0000000F
:0046B532 8A92B01C4B00            mov dl, byte ptr [edx+004B1CB0]
:0046B538 8810                    mov byte ptr [eax], dl
:0046B53A 8B1584724B00            mov edx, dword ptr [004B7284]
:0046B540 03049538494B00          add eax, dword ptr [4*edx+004B4938]
:0046B547 8B560C                  mov edx, dword ptr [esi+0C]
:0046B54A 2B5604                  sub edx, dword ptr [esi+04]
:0046B54D 41                      inc ecx
:0046B54E 3BCA                    cmp ecx, edx
:0046B550 7EDB                    jle 0046B52D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B42A(U), :0046B437(C), :0046B466(U), :0046B473(C), :0046B49E(U)
|:0046B4AB(C), :0046B4D6(U), :0046B4E0(C), :0046B521(U), :0046B52B(C)
|
:0046B552 5F                      pop edi
:0046B553 5E                      pop esi
:0046B554 C3                      ret



* Referenced by a CALL at Address:
|:0046B1AC   
|
:0046B555 55                      push ebp
:0046B556 8BEC                    mov ebp, esp
:0046B558 51                      push ecx
:0046B559 51                      push ecx
:0046B55A 53                      push ebx
:0046B55B 56                      push esi
:0046B55C 8B7508                  mov esi, dword ptr [ebp+08]
:0046B55F 57                      push edi
:0046B560 8B7E08                  mov edi, dword ptr [esi+08]
:0046B563 8B16                    mov edx, dword ptr [esi]
:0046B565 8BC7                    mov eax, edi
:0046B567 2BC2                    sub eax, edx
:0046B569 8945FC                  mov dword ptr [ebp-04], eax
:0046B56C 7905                    jns 0046B573
:0046B56E F7D8                    neg eax
:0046B570 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B56C(C)
|
:0046B573 8B460C                  mov eax, dword ptr [esi+0C]
:0046B576 8B4E04                  mov ecx, dword ptr [esi+04]
:0046B579 8BD8                    mov ebx, eax
:0046B57B 2BD9                    sub ebx, ecx
:0046B57D 895DF8                  mov dword ptr [ebp-08], ebx
:0046B580 7905                    jns 0046B587
:0046B582 F7DB                    neg ebx
:0046B584 895DF8                  mov dword ptr [ebp-08], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B580(C)
|
:0046B587 395DFC                  cmp dword ptr [ebp-04], ebx
:0046B58A 7E72                    jle 0046B5FE
:0046B58C 33DB                    xor ebx, ebx
:0046B58E 3BC8                    cmp ecx, eax
:0046B590 0F9DC3                  setnl bl
:0046B593 4B                      dec ebx
:0046B594 83E302                  and ebx, 00000002
:0046B597 4B                      dec ebx
:0046B598 3BD7                    cmp edx, edi
:0046B59A 7E0D                    jle 0046B5A9
:0046B59C 893E                    mov dword ptr [esi], edi
:0046B59E 895608                  mov dword ptr [esi+08], edx
:0046B5A1 894604                  mov dword ptr [esi+04], eax
:0046B5A4 894E0C                  mov dword ptr [esi+0C], ecx
:0046B5A7 F7DB                    neg ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B59A(C)
|
:0046B5A9 A0B01C4B00              mov al, byte ptr [004B1CB0]
:0046B5AE 50                      push eax
:0046B5AF FF7604                  push [esi+04]
:0046B5B2 FF36                    push dword ptr [esi]
:0046B5B4 E8B8000000              call 0046B671
:0046B5B9 8B7DFC                  mov edi, dword ptr [ebp-04]
:0046B5BC 83C40C                  add esp, 0000000C
:0046B5BF C7450801000000          mov [ebp+08], 00000001
:0046B5C6 D1FF                    sar edi, 1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B5FC(U)
|
:0046B5C8 FF06                    inc dword ptr [esi]
:0046B5CA 8B06                    mov eax, dword ptr [esi]
:0046B5CC 3B4608                  cmp eax, dword ptr [esi+08]
:0046B5CF 0F8F97000000            jg 0046B66C
:0046B5D5 2B7DF8                  sub edi, dword ptr [ebp-08]
:0046B5D8 7906                    jns 0046B5E0
:0046B5DA 037DFC                  add edi, dword ptr [ebp-04]
:0046B5DD 015E04                  add dword ptr [esi+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B5D8(C)
|
:0046B5E0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B5E3 83E10F                  and ecx, 0000000F
:0046B5E6 8A89B01C4B00            mov cl, byte ptr [ecx+004B1CB0]
:0046B5EC 51                      push ecx
:0046B5ED FF7604                  push [esi+04]
:0046B5F0 50                      push eax
:0046B5F1 E87B000000              call 0046B671
:0046B5F6 83C40C                  add esp, 0000000C
:0046B5F9 FF4508                  inc [ebp+08]
:0046B5FC EBCA                    jmp 0046B5C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B58A(C)
|
:0046B5FE 33DB                    xor ebx, ebx
:0046B600 3BD7                    cmp edx, edi
:0046B602 0F9DC3                  setnl bl
:0046B605 4B                      dec ebx
:0046B606 83E302                  and ebx, 00000002
:0046B609 4B                      dec ebx
:0046B60A 3BC8                    cmp ecx, eax
:0046B60C 7E0D                    jle 0046B61B
:0046B60E 894604                  mov dword ptr [esi+04], eax
:0046B611 894E0C                  mov dword ptr [esi+0C], ecx
:0046B614 893E                    mov dword ptr [esi], edi
:0046B616 895608                  mov dword ptr [esi+08], edx
:0046B619 F7DB                    neg ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B60C(C)
|
:0046B61B A0B01C4B00              mov al, byte ptr [004B1CB0]
:0046B620 50                      push eax
:0046B621 FF7604                  push [esi+04]
:0046B624 FF36                    push dword ptr [esi]
:0046B626 E846000000              call 0046B671
:0046B62B 8B7DF8                  mov edi, dword ptr [ebp-08]
:0046B62E 83C40C                  add esp, 0000000C
:0046B631 C7450801000000          mov [ebp+08], 00000001
:0046B638 D1FF                    sar edi, 1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B66A(U)
|
:0046B63A FF4604                  inc [esi+04]
:0046B63D 8B4604                  mov eax, dword ptr [esi+04]
:0046B640 3B460C                  cmp eax, dword ptr [esi+0C]
:0046B643 7F27                    jg 0046B66C
:0046B645 2B7DFC                  sub edi, dword ptr [ebp-04]
:0046B648 7905                    jns 0046B64F
:0046B64A 037DF8                  add edi, dword ptr [ebp-08]
:0046B64D 011E                    add dword ptr [esi], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B648(C)
|
:0046B64F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B652 83E10F                  and ecx, 0000000F
:0046B655 8A89B01C4B00            mov cl, byte ptr [ecx+004B1CB0]
:0046B65B 51                      push ecx
:0046B65C 50                      push eax
:0046B65D FF36                    push dword ptr [esi]
:0046B65F E80D000000              call 0046B671
:0046B664 83C40C                  add esp, 0000000C
:0046B667 FF4508                  inc [ebp+08]
:0046B66A EBCE                    jmp 0046B63A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B5CF(C), :0046B643(C)
|
:0046B66C 5F                      pop edi
:0046B66D 5E                      pop esi
:0046B66E 5B                      pop ebx
:0046B66F C9                      leave
:0046B670 C3                      ret



* Referenced by a CALL at Addresses:
|:0046B5B4   , :0046B5F1   , :0046B626   , :0046B65F   
|
:0046B671 55                      push ebp
:0046B672 8BEC                    mov ebp, esp
:0046B674 A184724B00              mov eax, dword ptr [004B7284]
:0046B679 8B5508                  mov edx, dword ptr [ebp+08]
:0046B67C C1E004                  shl eax, 04
:0046B67F 3B9060734B00            cmp edx, dword ptr [eax+004B7360]
:0046B685 0F8C82000000            jl 0046B70D
:0046B68B 3B9068734B00            cmp edx, dword ptr [eax+004B7368]
:0046B691 7F7A                    jg 0046B70D
:0046B693 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046B696 3B8864734B00            cmp ecx, dword ptr [eax+004B7364]
:0046B69C 7C6F                    jl 0046B70D
:0046B69E 3B886C734B00            cmp ecx, dword ptr [eax+004B736C]
:0046B6A4 7F67                    jg 0046B70D
:0046B6A6 51                      push ecx
:0046B6A7 52                      push edx
:0046B6A8 E87AF8FFFF              call 0046AF27
:0046B6AD 59                      pop ecx
:0046B6AE 59                      pop ecx
:0046B6AF 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046B6B5 8B0C8DA8474B00          mov ecx, dword ptr [4*ecx+004B47A8]
:0046B6BC 83E900                  sub ecx, 00000000
:0046B6BF 7447                    je 0046B708
:0046B6C1 49                      dec ecx
:0046B6C2 7425                    je 0046B6E9
:0046B6C4 49                      dec ecx
:0046B6C5 741B                    je 0046B6E2
:0046B6C7 49                      dec ecx
:0046B6C8 7411                    je 0046B6DB
:0046B6CA 49                      dec ecx
:0046B6CB 7405                    je 0046B6D2
:0046B6CD 49                      dec ecx
:0046B6CE 7438                    je 0046B708
:0046B6D0 5D                      pop ebp
:0046B6D1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B6CB(C)
|
:0046B6D2 8A4D10                  mov cl, byte ptr [ebp+10]
:0046B6D5 84C9                    test cl, cl
:0046B6D7 7434                    je 0046B70D
:0046B6D9 EB30                    jmp 0046B70B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B6C8(C)
|
:0046B6DB 8A4D10                  mov cl, byte ptr [ebp+10]
:0046B6DE 0808                    or byte ptr [eax], cl
:0046B6E0 5D                      pop ebp
:0046B6E1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B6C5(C)
|
:0046B6E2 8A4D10                  mov cl, byte ptr [ebp+10]
:0046B6E5 2008                    and byte ptr [eax], cl
:0046B6E7 5D                      pop ebp
:0046B6E8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B6C2(C)
|
:0046B6E9 8A4D10                  mov cl, byte ptr [ebp+10]
:0046B6EC 3008                    xor byte ptr [eax], cl
:0046B6EE 8B1584724B00            mov edx, dword ptr [004B7284]
:0046B6F4 8A08                    mov cl, byte ptr [eax]
:0046B6F6 833C95802C4B0007        cmp dword ptr [4*edx+004B2C80], 00000007
:0046B6FE 740D                    je 0046B70D
:0046B700 80E10F                  and cl, 0F
:0046B703 80C910                  or cl, 10
:0046B706 EB03                    jmp 0046B70B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B6BF(C), :0046B6CE(C)
|
:0046B708 8A4D10                  mov cl, byte ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B6D9(U), :0046B706(U)
|
:0046B70B 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B685(C), :0046B691(C), :0046B69C(C), :0046B6A4(C), :0046B6D7(C)
|:0046B6FE(C)
|
:0046B70D 5D                      pop ebp
:0046B70E C3                      ret



* Referenced by a CALL at Addresses:
|:00412F2F   , :0041345A   , :00442A3B   , :004548C9   , :004607B1   
|
:0046B70F 55                      push ebp
:0046B710 8BEC                    mov ebp, esp
:0046B712 83EC10                  sub esp, 00000010
:0046B715 A184724B00              mov eax, dword ptr [004B7284]
:0046B71A 8B5508                  mov edx, dword ptr [ebp+08]
:0046B71D C1E003                  shl eax, 03
:0046B720 56                      push esi
:0046B721 8B750C                  mov esi, dword ptr [ebp+0C]
:0046B724 8B8860294B00            mov ecx, dword ptr [eax+004B2960]
:0046B72A 8B8064294B00            mov eax, dword ptr [eax+004B2964]
:0046B730 57                      push edi
:0046B731 8B7D10                  mov edi, dword ptr [ebp+10]
:0046B734 03D1                    add edx, ecx
:0046B736 03CF                    add ecx, edi
:0046B738 8B7D14                  mov edi, dword ptr [ebp+14]
:0046B73B 03F0                    add esi, eax
:0046B73D 03C7                    add eax, edi
:0046B73F 3BD1                    cmp edx, ecx
:0046B741 8955F0                  mov dword ptr [ebp-10], edx
:0046B744 8975F4                  mov dword ptr [ebp-0C], esi
:0046B747 894DF8                  mov dword ptr [ebp-08], ecx
:0046B74A 8945FC                  mov dword ptr [ebp-04], eax
:0046B74D 7E06                    jle 0046B755
:0046B74F 894DF0                  mov dword ptr [ebp-10], ecx
:0046B752 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B74D(C)
|
:0046B755 3BF0                    cmp esi, eax
:0046B757 7E06                    jle 0046B75F
:0046B759 8945F4                  mov dword ptr [ebp-0C], eax
:0046B75C 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B757(C)
|
:0046B75F 8B4518                  mov eax, dword ptr [ebp+18]
:0046B762 83E800                  sub eax, 00000000
:0046B765 7427                    je 0046B78E
:0046B767 48                      dec eax
:0046B768 740E                    je 0046B778
:0046B76A 48                      dec eax
:0046B76B 752B                    jne 0046B798
:0046B76D 8D45F0                  lea eax, dword ptr [ebp-10]
:0046B770 50                      push eax
:0046B771 E865010000              call 0046B8DB
:0046B776 EB1F                    jmp 0046B797

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B768(C)
|
:0046B778 68FFFF0000              push 0000FFFF
:0046B77D E8EDFAFFFF              call 0046B26F
:0046B782 59                      pop ecx
:0046B783 8D45F0                  lea eax, dword ptr [ebp-10]
:0046B786 50                      push eax
:0046B787 E83B030000              call 0046BAC7
:0046B78C EB09                    jmp 0046B797

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B765(C)
|
:0046B78E 8D45F0                  lea eax, dword ptr [ebp-10]
:0046B791 50                      push eax
:0046B792 E805000000              call 0046B79C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B776(U), :0046B78C(U)
|
:0046B797 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B76B(C)
|
:0046B798 5F                      pop edi
:0046B799 5E                      pop esi
:0046B79A C9                      leave
:0046B79B C3                      ret



* Referenced by a CALL at Address:
|:0046B792   
|
:0046B79C 55                      push ebp
:0046B79D 8BEC                    mov ebp, esp
:0046B79F 83EC18                  sub esp, 00000018
:0046B7A2 A184724B00              mov eax, dword ptr [004B7284]
:0046B7A7 C1E004                  shl eax, 04
:0046B7AA 0560734B00              add eax, 004B7360
:0046B7AF 50                      push eax
:0046B7B0 8D45E8                  lea eax, dword ptr [ebp-18]
:0046B7B3 FF7508                  push [ebp+08]
:0046B7B6 50                      push eax
:0046B7B7 E819FAFFFF              call 0046B1D5
:0046B7BC 83C40C                  add esp, 0000000C
:0046B7BF 85C0                    test eax, eax
:0046B7C1 0F8412010000            je 0046B8D9
:0046B7C7 57                      push edi
:0046B7C8 8B7DF4                  mov edi, dword ptr [ebp-0C]
:0046B7CB 2B7DEC                  sub edi, dword ptr [ebp-14]
:0046B7CE 56                      push esi
:0046B7CF 8B75F0                  mov esi, dword ptr [ebp-10]
:0046B7D2 53                      push ebx
:0046B7D3 FF75EC                  push [ebp-14]
:0046B7D6 2B75E8                  sub esi, dword ptr [ebp-18]
:0046B7D9 FF75E8                  push [ebp-18]
:0046B7DC 46                      inc esi
:0046B7DD 47                      inc edi
:0046B7DE E844F7FFFF              call 0046AF27
:0046B7E3 59                      pop ecx
:0046B7E4 59                      pop ecx
:0046B7E5 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046B7EB C1E102                  shl ecx, 02
:0046B7EE 8A9138404B00            mov dl, byte ptr [ecx+004B4038]
:0046B7F4 8B9938494B00            mov ebx, dword ptr [ecx+004B4938]
:0046B7FA 885508                  mov byte ptr [ebp+08], dl
:0046B7FD 8B91A8474B00            mov edx, dword ptr [ecx+004B47A8]
:0046B803 895DF8                  mov dword ptr [ebp-08], ebx
:0046B806 2BDE                    sub ebx, esi
:0046B808 83EA00                  sub edx, 00000000
:0046B80B 0F84A0000000            je 0046B8B1
:0046B811 4A                      dec edx
:0046B812 7461                    je 0046B875
:0046B814 4A                      dec edx
:0046B815 743F                    je 0046B856
:0046B817 4A                      dec edx
:0046B818 7419                    je 0046B833
:0046B81A 4A                      dec edx
:0046B81B 0F8490000000            je 0046B8B1
:0046B821 4A                      dec edx
:0046B822 0F859E000000            jne 0046B8C6
:0046B828 8A8980374B00            mov cl, byte ptr [ecx+004B3780]
:0046B82E E981000000              jmp 0046B8B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B818(C)
|
:0046B833 85FF                    test edi, edi
:0046B835 0F8E8B000000            jle 0046B8C6
:0046B83B 897DFC                  mov dword ptr [ebp-04], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B852(C)
|
:0046B83E 85F6                    test esi, esi
:0046B840 7E0B                    jle 0046B84D
:0046B842 8BCE                    mov ecx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B84B(C)
|
:0046B844 8A5508                  mov dl, byte ptr [ebp+08]
:0046B847 0810                    or byte ptr [eax], dl
:0046B849 40                      inc eax
:0046B84A 49                      dec ecx
:0046B84B 75F7                    jne 0046B844

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B840(C)
|
:0046B84D 03C3                    add eax, ebx
:0046B84F FF4DFC                  dec [ebp-04]
:0046B852 75EA                    jne 0046B83E
:0046B854 EB70                    jmp 0046B8C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B815(C)
|
:0046B856 85FF                    test edi, edi
:0046B858 7E6C                    jle 0046B8C6
:0046B85A 897DFC                  mov dword ptr [ebp-04], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B871(C)
|
:0046B85D 85F6                    test esi, esi
:0046B85F 7E0B                    jle 0046B86C
:0046B861 8BCE                    mov ecx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B86A(C)
|
:0046B863 8A5508                  mov dl, byte ptr [ebp+08]
:0046B866 2010                    and byte ptr [eax], dl
:0046B868 40                      inc eax
:0046B869 49                      dec ecx
:0046B86A 75F7                    jne 0046B863

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B85F(C)
|
:0046B86C 03C3                    add eax, ebx
:0046B86E FF4DFC                  dec [ebp-04]
:0046B871 75EA                    jne 0046B85D
:0046B873 EB51                    jmp 0046B8C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B812(C)
|
:0046B875 85FF                    test edi, edi
:0046B877 7E4D                    jle 0046B8C6
:0046B879 897DF8                  mov dword ptr [ebp-08], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B8AD(C)
|
:0046B87C 85F6                    test esi, esi
:0046B87E 7E28                    jle 0046B8A8
:0046B880 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B8A6(C)
|
:0046B883 8A4D08                  mov cl, byte ptr [ebp+08]
:0046B886 3008                    xor byte ptr [eax], cl
:0046B888 8B1584724B00            mov edx, dword ptr [004B7284]
:0046B88E 8A08                    mov cl, byte ptr [eax]
:0046B890 833C95802C4B0007        cmp dword ptr [4*edx+004B2C80], 00000007
:0046B898 7408                    je 0046B8A2
:0046B89A 80E10F                  and cl, 0F
:0046B89D 80C910                  or cl, 10
:0046B8A0 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B898(C)
|
:0046B8A2 40                      inc eax
:0046B8A3 FF4DFC                  dec [ebp-04]
:0046B8A6 75DB                    jne 0046B883

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B87E(C)
|
:0046B8A8 03C3                    add eax, ebx
:0046B8AA FF4DF8                  dec [ebp-08]
:0046B8AD 75CD                    jne 0046B87C
:0046B8AF EB15                    jmp 0046B8C6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B80B(C), :0046B81B(C)
|
:0046B8B1 8A4D08                  mov cl, byte ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B82E(U)
|
:0046B8B4 50                      push eax
:0046B8B5 0FB6C1                  movzx eax, cl
:0046B8B8 50                      push eax
:0046B8B9 FF75F8                  push [ebp-08]
:0046B8BC 57                      push edi
:0046B8BD 56                      push esi
:0046B8BE E8E4170000              call 0046D0A7
:0046B8C3 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B822(C), :0046B835(C), :0046B854(U), :0046B858(C), :0046B873(U)
|:0046B877(C), :0046B8AF(U)
|
:0046B8C6 57                      push edi
:0046B8C7 56                      push esi
:0046B8C8 FF75EC                  push [ebp-14]
:0046B8CB FF75E8                  push [ebp-18]
:0046B8CE E8F4EBFFFF              call 0046A4C7
:0046B8D3 83C410                  add esp, 00000010
:0046B8D6 5B                      pop ebx
:0046B8D7 5E                      pop esi
:0046B8D8 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B7C1(C)
|
:0046B8D9 C9                      leave
:0046B8DA C3                      ret



* Referenced by a CALL at Address:
|:0046B771   
|
:0046B8DB 55                      push ebp
:0046B8DC 8BEC                    mov ebp, esp
:0046B8DE 83EC18                  sub esp, 00000018
:0046B8E1 A184724B00              mov eax, dword ptr [004B7284]
:0046B8E6 C1E004                  shl eax, 04
:0046B8E9 0560734B00              add eax, 004B7360
:0046B8EE 50                      push eax
:0046B8EF 8D45E8                  lea eax, dword ptr [ebp-18]
:0046B8F2 FF7508                  push [ebp+08]
:0046B8F5 50                      push eax
:0046B8F6 E8DAF8FFFF              call 0046B1D5
:0046B8FB 83C40C                  add esp, 0000000C
:0046B8FE 85C0                    test eax, eax
:0046B900 747A                    je 0046B97C
:0046B902 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046B905 57                      push edi
:0046B906 2B45EC                  sub eax, dword ptr [ebp-14]
:0046B909 56                      push esi
:0046B90A 8B75F0                  mov esi, dword ptr [ebp-10]
:0046B90D 53                      push ebx
:0046B90E 2B75E8                  sub esi, dword ptr [ebp-18]
:0046B911 FF75EC                  push [ebp-14]
:0046B914 FF75E8                  push [ebp-18]
:0046B917 46                      inc esi
:0046B918 40                      inc eax
:0046B919 8975F8                  mov dword ptr [ebp-08], esi
:0046B91C 8945FC                  mov dword ptr [ebp-04], eax
:0046B91F E803F6FFFF              call 0046AF27
:0046B924 59                      pop ecx
:0046B925 59                      pop ecx
:0046B926 8BC8                    mov ecx, eax
:0046B928 A184724B00              mov eax, dword ptr [004B7284]
:0046B92D C1E002                  shl eax, 02
:0046B930 8B9838494B00            mov ebx, dword ptr [eax+004B4938]
:0046B936 8B80A8474B00            mov eax, dword ptr [eax+004B47A8]
:0046B93C 2BDE                    sub ebx, esi
:0046B93E 83E800                  sub eax, 00000000
:0046B941 895D08                  mov dword ptr [ebp+08], ebx
:0046B944 0F843F010000            je 0046BA89
:0046B94A 48                      dec eax
:0046B94B 0F84E1000000            je 0046BA32
:0046B951 48                      dec eax
:0046B952 0F849C000000            je 0046B9F4
:0046B958 48                      dec eax
:0046B959 745F                    je 0046B9BA
:0046B95B 48                      dec eax
:0046B95C 7420                    je 0046B97E
:0046B95E 48                      dec eax
:0046B95F 0F8424010000            je 0046BA89

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B984(C), :0046B9C0(C), :0046B9FA(C), :0046BA38(C), :0046BA8F(C)
|
:0046B965 FF75FC                  push [ebp-04]
:0046B968 FF75F8                  push [ebp-08]
:0046B96B FF75EC                  push [ebp-14]
:0046B96E FF75E8                  push [ebp-18]
:0046B971 E851EBFFFF              call 0046A4C7
:0046B976 83C410                  add esp, 00000010
:0046B979 5B                      pop ebx
:0046B97A 5E                      pop esi
:0046B97B 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B900(C)
|
:0046B97C C9                      leave
:0046B97D C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B95C(C)
|
:0046B97E 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9B8(U)
|
:0046B981 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:0046B984 7FDF                    jg 0046B965
:0046B986 8B75E8                  mov esi, dword ptr [ebp-18]
:0046B989 8BC7                    mov eax, edi
:0046B98B 99                      cdq
:0046B98C F73DA0794B00            idiv dword ptr [004B79A0]
:0046B992 8B45F0                  mov eax, dword ptr [ebp-10]
:0046B995 3BF0                    cmp esi, eax
:0046B997 7F1C                    jg 0046B9B5
:0046B999 C1E203                  shl edx, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9B3(C)
|
:0046B99C 8BC6                    mov eax, esi
:0046B99E 83E007                  and eax, 00000007
:0046B9A1 8A8410A0724B00          mov al, byte ptr [eax+edx+004B72A0]
:0046B9A8 84C0                    test al, al
:0046B9AA 7402                    je 0046B9AE
:0046B9AC 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9AA(C)
|
:0046B9AE 41                      inc ecx
:0046B9AF 46                      inc esi
:0046B9B0 3B75F0                  cmp esi, dword ptr [ebp-10]
:0046B9B3 7EE7                    jle 0046B99C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B997(C)
|
:0046B9B5 03CB                    add ecx, ebx
:0046B9B7 47                      inc edi
:0046B9B8 EBC7                    jmp 0046B981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B959(C)
|
:0046B9BA 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9F2(U)
|
:0046B9BD 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:0046B9C0 7FA3                    jg 0046B965
:0046B9C2 8B75E8                  mov esi, dword ptr [ebp-18]
:0046B9C5 8BC7                    mov eax, edi
:0046B9C7 99                      cdq
:0046B9C8 F73DA0794B00            idiv dword ptr [004B79A0]
:0046B9CE 8B45F0                  mov eax, dword ptr [ebp-10]
:0046B9D1 3BF0                    cmp esi, eax
:0046B9D3 7F1A                    jg 0046B9EF
:0046B9D5 8BC2                    mov eax, edx
:0046B9D7 C1E003                  shl eax, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9ED(C)
|
:0046B9DA 8BD6                    mov edx, esi
:0046B9DC 83E207                  and edx, 00000007
:0046B9DF 8A9402A0724B00          mov dl, byte ptr [edx+eax+004B72A0]
:0046B9E6 0811                    or byte ptr [ecx], dl
:0046B9E8 41                      inc ecx
:0046B9E9 46                      inc esi
:0046B9EA 3B75F0                  cmp esi, dword ptr [ebp-10]
:0046B9ED 7EEB                    jle 0046B9DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9D3(C)
|
:0046B9EF 03CB                    add ecx, ebx
:0046B9F1 47                      inc edi
:0046B9F2 EBC9                    jmp 0046B9BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B952(C)
|
:0046B9F4 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA30(U)
|
:0046B9F7 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:0046B9FA 0F8F65FFFFFF            jg 0046B965
:0046BA00 8B75E8                  mov esi, dword ptr [ebp-18]
:0046BA03 8BC7                    mov eax, edi
:0046BA05 99                      cdq
:0046BA06 F73DA0794B00            idiv dword ptr [004B79A0]
:0046BA0C 8B45F0                  mov eax, dword ptr [ebp-10]
:0046BA0F 3BF0                    cmp esi, eax
:0046BA11 7F1A                    jg 0046BA2D
:0046BA13 8BC2                    mov eax, edx
:0046BA15 C1E003                  shl eax, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA2B(C)
|
:0046BA18 8BD6                    mov edx, esi
:0046BA1A 83E207                  and edx, 00000007
:0046BA1D 8A9402A0724B00          mov dl, byte ptr [edx+eax+004B72A0]
:0046BA24 2011                    and byte ptr [ecx], dl
:0046BA26 41                      inc ecx
:0046BA27 46                      inc esi
:0046BA28 3B75F0                  cmp esi, dword ptr [ebp-10]
:0046BA2B 7EEB                    jle 0046BA18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA11(C)
|
:0046BA2D 03CB                    add ecx, ebx
:0046BA2F 47                      inc edi
:0046BA30 EBC5                    jmp 0046B9F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B94B(C)
|
:0046BA32 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA87(U)
|
:0046BA35 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:0046BA38 0F8F27FFFFFF            jg 0046B965
:0046BA3E 8B75E8                  mov esi, dword ptr [ebp-18]
:0046BA41 8BC7                    mov eax, edi
:0046BA43 99                      cdq
:0046BA44 F73DA0794B00            idiv dword ptr [004B79A0]
:0046BA4A 8B45F0                  mov eax, dword ptr [ebp-10]
:0046BA4D 3BF0                    cmp esi, eax
:0046BA4F 7F33                    jg 0046BA84
:0046BA51 C1E203                  shl edx, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA7F(C)
|
:0046BA54 8BC6                    mov eax, esi
:0046BA56 83E007                  and eax, 00000007
:0046BA59 8A8410A0724B00          mov al, byte ptr [eax+edx+004B72A0]
:0046BA60 3001                    xor byte ptr [ecx], al
:0046BA62 8B1D84724B00            mov ebx, dword ptr [004B7284]
:0046BA68 8A01                    mov al, byte ptr [ecx]
:0046BA6A 833C9D802C4B0007        cmp dword ptr [4*ebx+004B2C80], 00000007
:0046BA72 7406                    je 0046BA7A
:0046BA74 240F                    and al, 0F
:0046BA76 0C10                    or al, 10
:0046BA78 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA72(C)
|
:0046BA7A 41                      inc ecx
:0046BA7B 46                      inc esi
:0046BA7C 3B75F0                  cmp esi, dword ptr [ebp-10]
:0046BA7F 7ED3                    jle 0046BA54
:0046BA81 8B5D08                  mov ebx, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA4F(C)
|
:0046BA84 03CB                    add ecx, ebx
:0046BA86 47                      inc edi
:0046BA87 EBAC                    jmp 0046BA35

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B944(C), :0046B95F(C)
|
:0046BA89 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BAC5(U)
|
:0046BA8C 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:0046BA8F 0F8FD0FEFFFF            jg 0046B965
:0046BA95 8B75E8                  mov esi, dword ptr [ebp-18]
:0046BA98 8BC7                    mov eax, edi
:0046BA9A 99                      cdq
:0046BA9B F73DA0794B00            idiv dword ptr [004B79A0]
:0046BAA1 8B45F0                  mov eax, dword ptr [ebp-10]
:0046BAA4 3BF0                    cmp esi, eax
:0046BAA6 7F1A                    jg 0046BAC2
:0046BAA8 8BC2                    mov eax, edx
:0046BAAA C1E003                  shl eax, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BAC0(C)
|
:0046BAAD 8BD6                    mov edx, esi
:0046BAAF 83E207                  and edx, 00000007
:0046BAB2 8A9402A0724B00          mov dl, byte ptr [edx+eax+004B72A0]
:0046BAB9 8811                    mov byte ptr [ecx], dl
:0046BABB 41                      inc ecx
:0046BABC 46                      inc esi
:0046BABD 3B75F0                  cmp esi, dword ptr [ebp-10]
:0046BAC0 7EEB                    jle 0046BAAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BAA6(C)
|
:0046BAC2 03CB                    add ecx, ebx
:0046BAC4 47                      inc edi
:0046BAC5 EBC5                    jmp 0046BA8C

* Referenced by a CALL at Address:
|:0046B787   
|
:0046BAC7 55                      push ebp
:0046BAC8 8BEC                    mov ebp, esp
:0046BACA 83EC10                  sub esp, 00000010
:0046BACD A184724B00              mov eax, dword ptr [004B7284]
:0046BAD2 53                      push ebx
:0046BAD3 C1E004                  shl eax, 04
:0046BAD6 56                      push esi
:0046BAD7 8B7508                  mov esi, dword ptr [ebp+08]
:0046BADA 0560734B00              add eax, 004B7360
:0046BADF 57                      push edi
:0046BAE0 50                      push eax
:0046BAE1 8D45F0                  lea eax, dword ptr [ebp-10]
:0046BAE4 56                      push esi
:0046BAE5 50                      push eax
:0046BAE6 E8EAF6FFFF              call 0046B1D5
:0046BAEB 83C40C                  add esp, 0000000C
:0046BAEE 85C0                    test eax, eax
:0046BAF0 0F84EC000000            je 0046BBE2
:0046BAF6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046BAF9 8B45FC                  mov eax, dword ptr [ebp-04]
:0046BAFC 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046BAFF 8BF9                    mov edi, ecx
:0046BB01 2B7DF0                  sub edi, dword ptr [ebp-10]
:0046BB04 8BD8                    mov ebx, eax
:0046BB06 2BDA                    sub ebx, edx
:0046BB08 47                      inc edi
:0046BB09 43                      inc ebx
:0046BB0A 395604                  cmp dword ptr [esi+04], edx
:0046BB0D 752D                    jne 0046BB3C
:0046BB0F 8B16                    mov edx, dword ptr [esi]
:0046BB11 3B55F0                  cmp edx, dword ptr [ebp-10]
:0046BB14 7F26                    jg 0046BB3C
:0046BB16 394E08                  cmp dword ptr [esi+08], ecx
:0046BB19 7C21                    jl 0046BB3C
:0046BB1B 8D45F0                  lea eax, dword ptr [ebp-10]
:0046BB1E 50                      push eax
:0046BB1F E8A3F7FFFF              call 0046B2C7
:0046BB24 59                      pop ecx
:0046BB25 6A01                    push 00000001
:0046BB27 57                      push edi
:0046BB28 FF75F4                  push [ebp-0C]
:0046BB2B FF75F0                  push [ebp-10]
:0046BB2E E894E9FFFF              call 0046A4C7
:0046BB33 8B45FC                  mov eax, dword ptr [ebp-04]
:0046BB36 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046BB39 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BB0D(C), :0046BB14(C), :0046BB19(C)
|
:0046BB3C 8B55F0                  mov edx, dword ptr [ebp-10]
:0046BB3F 3916                    cmp dword ptr [esi], edx
:0046BB41 752E                    jne 0046BB71
:0046BB43 8B5604                  mov edx, dword ptr [esi+04]
:0046BB46 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0046BB49 7F26                    jg 0046BB71
:0046BB4B 39460C                  cmp dword ptr [esi+0C], eax
:0046BB4E 7C62                    jl 0046BBB2
:0046BB50 8D45F0                  lea eax, dword ptr [ebp-10]
:0046BB53 50                      push eax
:0046BB54 E88EF8FFFF              call 0046B3E7
:0046BB59 59                      pop ecx
:0046BB5A 53                      push ebx
:0046BB5B 6A01                    push 00000001
:0046BB5D FF75F4                  push [ebp-0C]
:0046BB60 FF75F0                  push [ebp-10]
:0046BB63 E85FE9FFFF              call 0046A4C7
:0046BB68 8B45FC                  mov eax, dword ptr [ebp-04]
:0046BB6B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046BB6E 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BB41(C), :0046BB49(C)
|
:0046BB71 39460C                  cmp dword ptr [esi+0C], eax
:0046BB74 753C                    jne 0046BBB2
:0046BB76 8B55F0                  mov edx, dword ptr [ebp-10]
:0046BB79 3916                    cmp dword ptr [esi], edx
:0046BB7B 7F35                    jg 0046BBB2
:0046BB7D 394E08                  cmp dword ptr [esi+08], ecx
:0046BB80 7C60                    jl 0046BBE2
:0046BB82 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046BB85 8945F4                  mov dword ptr [ebp-0C], eax
:0046BB88 8D45F0                  lea eax, dword ptr [ebp-10]
:0046BB8B 894D08                  mov dword ptr [ebp+08], ecx
:0046BB8E 50                      push eax
:0046BB8F E833F7FFFF              call 0046B2C7
:0046BB94 59                      pop ecx
:0046BB95 6A01                    push 00000001
:0046BB97 57                      push edi
:0046BB98 FF75F4                  push [ebp-0C]
:0046BB9B FF75F0                  push [ebp-10]
:0046BB9E E824E9FFFF              call 0046A4C7
:0046BBA3 8B4508                  mov eax, dword ptr [ebp+08]
:0046BBA6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046BBA9 8945F4                  mov dword ptr [ebp-0C], eax
:0046BBAC 8B45FC                  mov eax, dword ptr [ebp-04]
:0046BBAF 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BB4E(C), :0046BB74(C), :0046BB7B(C)
|
:0046BBB2 394E08                  cmp dword ptr [esi+08], ecx
:0046BBB5 752B                    jne 0046BBE2
:0046BBB7 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046BBBA 395604                  cmp dword ptr [esi+04], edx
:0046BBBD 7F23                    jg 0046BBE2
:0046BBBF 39460C                  cmp dword ptr [esi+0C], eax
:0046BBC2 7C1E                    jl 0046BBE2
:0046BBC4 8D45F0                  lea eax, dword ptr [ebp-10]
:0046BBC7 894DF0                  mov dword ptr [ebp-10], ecx
:0046BBCA 50                      push eax
:0046BBCB E817F8FFFF              call 0046B3E7
:0046BBD0 59                      pop ecx
:0046BBD1 53                      push ebx
:0046BBD2 6A01                    push 00000001
:0046BBD4 FF75F4                  push [ebp-0C]
:0046BBD7 FF75F0                  push [ebp-10]
:0046BBDA E8E8E8FFFF              call 0046A4C7
:0046BBDF 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BAF0(C), :0046BB80(C), :0046BBB5(C), :0046BBBD(C), :0046BBC2(C)
|
:0046BBE2 5F                      pop edi
:0046BBE3 5E                      pop esi
:0046BBE4 5B                      pop ebx
:0046BBE5 C9                      leave
:0046BBE6 C3                      ret



* Referenced by a CALL at Addresses:
|:00412EDC   , :00413108   , :00416D57   , :0042238F   , :00424189   
|:00426311   , :00426415   , :004275DA   , :0042765F   , :00427813   
|:004279F8   , :00428274   , :00442C7A   , :0045031B   , :00451757   
|:00451838   , :00451876   , :00451AE2   , :004529C1   , :00454B1D   
|:00454BA1   , :00454C53   , :00454CE0   , :00460650   , :0046067E   
|:004606AC   , :004606DA   , :0046092B   , :00460977   , :004609AB   
|:00461058   , :00461105   , :00461181   , :004611C3   , :00461260   
|:004612AC   , :004612E1   , :004614A9   , :004614F5   , :0046152A   
|:0046155E   , :00465F7D   , :0046611E   
|
:0046BBE7 55                      push ebp
:0046BBE8 8BEC                    mov ebp, esp
:0046BBEA 83EC20                  sub esp, 00000020
:0046BBED A184724B00              mov eax, dword ptr [004B7284]
:0046BBF2 53                      push ebx
:0046BBF3 56                      push esi
:0046BBF4 8B7508                  mov esi, dword ptr [ebp+08]
:0046BBF7 8B0CC560294B00          mov ecx, dword ptr [8*eax+004B2960]
:0046BBFE 57                      push edi
:0046BBFF 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0046BC02 8D140E                  lea edx, dword ptr [esi+ecx]
:0046BC05 8955E0                  mov dword ptr [ebp-20], edx
:0046BC08 8B14C564294B00          mov edx, dword ptr [8*eax+004B2964]
:0046BC0F C1E004                  shl eax, 04
:0046BC12 8D1C17                  lea ebx, dword ptr [edi+edx]
:0046BC15 0560734B00              add eax, 004B7360
:0046BC1A 895DE4                  mov dword ptr [ebp-1C], ebx
:0046BC1D 8B5D10                  mov ebx, dword ptr [ebp+10]
:0046BC20 03F3                    add esi, ebx
:0046BC22 50                      push eax
:0046BC23 8D45E0                  lea eax, dword ptr [ebp-20]
:0046BC26 8D4C0EFF                lea ecx, dword ptr [esi+ecx-01]
:0046BC2A 8B7514                  mov esi, dword ptr [ebp+14]
:0046BC2D 894DE8                  mov dword ptr [ebp-18], ecx
:0046BC30 50                      push eax
:0046BC31 8D0C3E                  lea ecx, dword ptr [esi+edi]
:0046BC34 8D45F0                  lea eax, dword ptr [ebp-10]
:0046BC37 50                      push eax
:0046BC38 8D4C11FF                lea ecx, dword ptr [ecx+edx-01]
:0046BC3C 894DEC                  mov dword ptr [ebp-14], ecx
:0046BC3F E891F5FFFF              call 0046B1D5
:0046BC44 83C40C                  add esp, 0000000C
:0046BC47 85C0                    test eax, eax
:0046BC49 0F8449010000            je 0046BD98
:0046BC4F A184724B00              mov eax, dword ptr [004B7284]
:0046BC54 833C85802C4B0007        cmp dword ptr [4*eax+004B2C80], 00000007
:0046BC5C 7508                    jne 0046BC66
:0046BC5E 8B4518                  mov eax, dword ptr [ebp+18]
:0046BC61 894508                  mov dword ptr [ebp+08], eax
:0046BC64 EB29                    jmp 0046BC8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BC5C(C)
|
:0046BC66 8BC6                    mov eax, esi
:0046BC68 0FAFC3                  imul eax, ebx
:0046BC6B 50                      push eax
:0046BC6C 6A00                    push 00000000

* Reference To: KERNEL32.GlobalAlloc, Ord:0155h
                                  |
:0046BC6E FF1508864B00            Call dword ptr [004B8608]
:0046BC74 50                      push eax
:0046BC75 89450C                  mov dword ptr [ebp+0C], eax

* Reference To: KERNEL32.GlobalLock, Ord:0160h
                                  |
:0046BC78 FF150C864B00            Call dword ptr [004B860C]
:0046BC7E 50                      push eax
:0046BC7F 894508                  mov dword ptr [ebp+08], eax
:0046BC82 FF7518                  push [ebp+18]
:0046BC85 56                      push esi
:0046BC86 53                      push ebx
:0046BC87 E803170000              call 0046D38F
:0046BC8C 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BC64(U)
|
:0046BC8F FF75F4                  push [ebp-0C]
:0046BC92 FF75F0                  push [ebp-10]
:0046BC95 E88DF2FFFF              call 0046AF27
:0046BC9A 59                      pop ecx
:0046BC9B 8B75F8                  mov esi, dword ptr [ebp-08]
:0046BC9E 59                      pop ecx
:0046BC9F 8B7DFC                  mov edi, dword ptr [ebp-04]
:0046BCA2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046BCA5 2B75F0                  sub esi, dword ptr [ebp-10]
:0046BCA8 2B4DE4                  sub ecx, dword ptr [ebp-1C]
:0046BCAB 2B7DF4                  sub edi, dword ptr [ebp-0C]
:0046BCAE 0FAFCB                  imul ecx, ebx
:0046BCB1 034DF0                  add ecx, dword ptr [ebp-10]
:0046BCB4 2B4DE0                  sub ecx, dword ptr [ebp-20]
:0046BCB7 014D08                  add dword ptr [ebp+08], ecx
:0046BCBA 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046BCC0 C1E102                  shl ecx, 02
:0046BCC3 46                      inc esi
:0046BCC4 47                      inc edi
:0046BCC5 8B91A8474B00            mov edx, dword ptr [ecx+004B47A8]
:0046BCCB 83EA00                  sub edx, 00000000
:0046BCCE 747C                    je 0046BD4C
:0046BCD0 4A                      dec edx
:0046BCD1 745F                    je 0046BD32
:0046BCD3 4A                      dec edx
:0046BCD4 7442                    je 0046BD18
:0046BCD6 4A                      dec edx
:0046BCD7 7425                    je 0046BCFE
:0046BCD9 4A                      dec edx
:0046BCDA 7408                    je 0046BCE4
:0046BCDC 4A                      dec edx
:0046BCDD 746D                    je 0046BD4C
:0046BCDF E983000000              jmp 0046BD67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BCDA(C)
|
:0046BCE4 FFB1802C4B00            push dword ptr [ecx+004B2C80]
:0046BCEA 50                      push eax
:0046BCEB FF7508                  push [ebp+08]
:0046BCEE 53                      push ebx
:0046BCEF FFB138494B00            push dword ptr [ecx+004B4938]
:0046BCF5 57                      push edi
:0046BCF6 56                      push esi
:0046BCF7 E8CE140000              call 0046D1CA
:0046BCFC EB66                    jmp 0046BD64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BCD7(C)
|
:0046BCFE FFB1802C4B00            push dword ptr [ecx+004B2C80]
:0046BD04 50                      push eax
:0046BD05 FF7508                  push [ebp+08]
:0046BD08 53                      push ebx
:0046BD09 FFB138494B00            push dword ptr [ecx+004B4938]
:0046BD0F 57                      push edi
:0046BD10 56                      push esi
:0046BD11 E82B140000              call 0046D141
:0046BD16 EB4C                    jmp 0046BD64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BCD4(C)
|
:0046BD18 FFB1802C4B00            push dword ptr [ecx+004B2C80]
:0046BD1E 50                      push eax
:0046BD1F FF7508                  push [ebp+08]
:0046BD22 53                      push ebx
:0046BD23 FFB138494B00            push dword ptr [ecx+004B4938]
:0046BD29 57                      push edi
:0046BD2A 56                      push esi
:0046BD2B E8D1130000              call 0046D101
:0046BD30 EB32                    jmp 0046BD64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BCD1(C)
|
:0046BD32 FFB1802C4B00            push dword ptr [ecx+004B2C80]
:0046BD38 50                      push eax
:0046BD39 FF7508                  push [ebp+08]
:0046BD3C 53                      push ebx
:0046BD3D FFB138494B00            push dword ptr [ecx+004B4938]
:0046BD43 57                      push edi
:0046BD44 56                      push esi
:0046BD45 E837140000              call 0046D181
:0046BD4A EB18                    jmp 0046BD64

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BCCE(C), :0046BCDD(C)
|
:0046BD4C FFB1802C4B00            push dword ptr [ecx+004B2C80]
:0046BD52 50                      push eax
:0046BD53 FF7508                  push [ebp+08]
:0046BD56 53                      push ebx
:0046BD57 FFB138494B00            push dword ptr [ecx+004B4938]
:0046BD5D 57                      push edi
:0046BD5E 56                      push esi
:0046BD5F E86F130000              call 0046D0D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BCFC(U), :0046BD16(U), :0046BD30(U), :0046BD4A(U)
|
:0046BD64 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BCDF(U)
|
:0046BD67 A184724B00              mov eax, dword ptr [004B7284]
:0046BD6C 833C85802C4B0007        cmp dword ptr [4*eax+004B2C80], 00000007
:0046BD74 7412                    je 0046BD88
:0046BD76 FF750C                  push [ebp+0C]

* Reference To: KERNEL32.GlobalUnlock, Ord:0166h
                                  |
:0046BD79 FF1510864B00            Call dword ptr [004B8610]
:0046BD7F FF750C                  push [ebp+0C]

* Reference To: KERNEL32.GlobalFree, Ord:015Ch
                                  |
:0046BD82 FF1514864B00            Call dword ptr [004B8614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BD74(C)
|
:0046BD88 57                      push edi
:0046BD89 56                      push esi
:0046BD8A FF75F4                  push [ebp-0C]
:0046BD8D FF75F0                  push [ebp-10]
:0046BD90 E832E7FFFF              call 0046A4C7
:0046BD95 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BC49(C)
|
:0046BD98 5F                      pop edi
:0046BD99 5E                      pop esi
:0046BD9A 5B                      pop ebx
:0046BD9B C9                      leave
:0046BD9C C3                      ret



* Referenced by a CALL at Addresses:
|:00412E97   , :0042759B   , :004276A8   , :004282D9   , :00442CEA   
|:004461EA   , :00451EED   , :0046070D   , :0046073B   , :00460769   
|:00460797   , :00461480   
|
:0046BD9D 55                      push ebp
:0046BD9E 8BEC                    mov ebp, esp
:0046BDA0 83EC20                  sub esp, 00000020
:0046BDA3 A184724B00              mov eax, dword ptr [004B7284]
:0046BDA8 53                      push ebx
:0046BDA9 56                      push esi
:0046BDAA 8B7508                  mov esi, dword ptr [ebp+08]
:0046BDAD 8B0CC560294B00          mov ecx, dword ptr [8*eax+004B2960]
:0046BDB4 57                      push edi
:0046BDB5 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0046BDB8 8D140E                  lea edx, dword ptr [esi+ecx]
:0046BDBB 8955E0                  mov dword ptr [ebp-20], edx
:0046BDBE 8B14C564294B00          mov edx, dword ptr [8*eax+004B2964]
:0046BDC5 C1E004                  shl eax, 04
:0046BDC8 8D1C17                  lea ebx, dword ptr [edi+edx]
:0046BDCB 05A82F4B00              add eax, 004B2FA8
:0046BDD0 895DE4                  mov dword ptr [ebp-1C], ebx
:0046BDD3 8B5D10                  mov ebx, dword ptr [ebp+10]
:0046BDD6 03F3                    add esi, ebx
:0046BDD8 50                      push eax
:0046BDD9 8D45E0                  lea eax, dword ptr [ebp-20]
:0046BDDC 8D4C0EFF                lea ecx, dword ptr [esi+ecx-01]
:0046BDE0 50                      push eax
:0046BDE1 894DE8                  mov dword ptr [ebp-18], ecx
:0046BDE4 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046BDE7 03CF                    add ecx, edi
:0046BDE9 8D45F0                  lea eax, dword ptr [ebp-10]
:0046BDEC 50                      push eax
:0046BDED 8D4C11FF                lea ecx, dword ptr [ecx+edx-01]
:0046BDF1 894DEC                  mov dword ptr [ebp-14], ecx
:0046BDF4 E8DCF3FFFF              call 0046B1D5
:0046BDF9 83C40C                  add esp, 0000000C
:0046BDFC 85C0                    test eax, eax
:0046BDFE 0F84C5000000            je 0046BEC9
:0046BE04 FF75F4                  push [ebp-0C]
:0046BE07 FF75F0                  push [ebp-10]
:0046BE0A E818F1FFFF              call 0046AF27
:0046BE0F 8B75F8                  mov esi, dword ptr [ebp-08]
:0046BE12 8B7DFC                  mov edi, dword ptr [ebp-04]
:0046BE15 2B75F0                  sub esi, dword ptr [ebp-10]
:0046BE18 59                      pop ecx
:0046BE19 59                      pop ecx
:0046BE1A 89450C                  mov dword ptr [ebp+0C], eax
:0046BE1D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046BE20 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046BE26 2BF8                    sub edi, eax
:0046BE28 46                      inc esi
:0046BE29 C1E102                  shl ecx, 02
:0046BE2C 47                      inc edi
:0046BE2D 83B9802C4B0003          cmp dword ptr [ecx+004B2C80], 00000003
:0046BE34 7F6F                    jg 0046BEA5
:0046BE36 8B4514                  mov eax, dword ptr [ebp+14]
:0046BE39 0FAFC3                  imul eax, ebx
:0046BE3C 40                      inc eax
:0046BE3D 50                      push eax
:0046BE3E 6A00                    push 00000000

* Reference To: KERNEL32.GlobalAlloc, Ord:0155h
                                  |
:0046BE40 FF1508864B00            Call dword ptr [004B8608]
:0046BE46 50                      push eax
:0046BE47 894508                  mov dword ptr [ebp+08], eax

* Reference To: KERNEL32.GlobalLock, Ord:0160h
                                  |
:0046BE4A FF150C864B00            Call dword ptr [004B860C]
:0046BE50 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046BE53 894510                  mov dword ptr [ebp+10], eax
:0046BE56 2B4DE4                  sub ecx, dword ptr [ebp-1C]
:0046BE59 0FAFCB                  imul ecx, ebx
:0046BE5C 03C8                    add ecx, eax
:0046BE5E A184724B00              mov eax, dword ptr [004B7284]
:0046BE63 034DF0                  add ecx, dword ptr [ebp-10]
:0046BE66 2B4DE0                  sub ecx, dword ptr [ebp-20]
:0046BE69 51                      push ecx
:0046BE6A FF750C                  push [ebp+0C]
:0046BE6D 53                      push ebx
:0046BE6E FF348538494B00          push dword ptr [4*eax+004B4938]
:0046BE75 57                      push edi
:0046BE76 56                      push esi
:0046BE77 E8A2130000              call 0046D21E
:0046BE7C 83C418                  add esp, 00000018
:0046BE7F FF7518                  push [ebp+18]
:0046BE82 FF7510                  push [ebp+10]
:0046BE85 FF7514                  push [ebp+14]
:0046BE88 53                      push ebx
:0046BE89 E8A8140000              call 0046D336
:0046BE8E 83C410                  add esp, 00000010
:0046BE91 FF7508                  push [ebp+08]

* Reference To: KERNEL32.GlobalUnlock, Ord:0166h
                                  |
:0046BE94 FF1510864B00            Call dword ptr [004B8610]
:0046BE9A FF7508                  push [ebp+08]

* Reference To: KERNEL32.GlobalFree, Ord:015Ch
                                  |
:0046BE9D FF1514864B00            Call dword ptr [004B8614]
:0046BEA3 EB24                    jmp 0046BEC9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BE34(C)
|
:0046BEA5 2B45E4                  sub eax, dword ptr [ebp-1C]
:0046BEA8 0FAFC3                  imul eax, ebx
:0046BEAB 0345F0                  add eax, dword ptr [ebp-10]
:0046BEAE 034518                  add eax, dword ptr [ebp+18]
:0046BEB1 2B45E0                  sub eax, dword ptr [ebp-20]
:0046BEB4 50                      push eax
:0046BEB5 FF750C                  push [ebp+0C]
:0046BEB8 53                      push ebx
:0046BEB9 FFB138494B00            push dword ptr [ecx+004B4938]
:0046BEBF 57                      push edi
:0046BEC0 56                      push esi
:0046BEC1 E858130000              call 0046D21E
:0046BEC6 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BDFE(C), :0046BEA3(U)
|
:0046BEC9 5F                      pop edi
:0046BECA 5E                      pop esi
:0046BECB 5B                      pop ebx
:0046BECC C9                      leave
:0046BECD C3                      ret



* Referenced by a CALL at Addresses:
|:004088EF   , :00408A3A   , :00408A92   , :00408ADE   
|
:0046BECE 55                      push ebp
:0046BECF 8BEC                    mov ebp, esp
:0046BED1 83EC28                  sub esp, 00000028
:0046BED4 A184724B00              mov eax, dword ptr [004B7284]
:0046BED9 53                      push ebx
:0046BEDA 56                      push esi
:0046BEDB 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046BEDE 8B0CC560294B00          mov ecx, dword ptr [8*eax+004B2960]
:0046BEE5 57                      push edi
:0046BEE6 8B7D08                  mov edi, dword ptr [ebp+08]
:0046BEE9 8D140F                  lea edx, dword ptr [edi+ecx]
:0046BEEC 8955D8                  mov dword ptr [ebp-28], edx
:0046BEEF 8B14C564294B00          mov edx, dword ptr [8*eax+004B2964]
:0046BEF6 C1E004                  shl eax, 04
:0046BEF9 8D3413                  lea esi, dword ptr [ebx+edx]
:0046BEFC 0560734B00              add eax, 004B7360
:0046BF01 8975DC                  mov dword ptr [ebp-24], esi
:0046BF04 8B7510                  mov esi, dword ptr [ebp+10]
:0046BF07 03FE                    add edi, esi
:0046BF09 50                      push eax
:0046BF0A 8D45D8                  lea eax, dword ptr [ebp-28]
:0046BF0D 8D4C0FFF                lea ecx, dword ptr [edi+ecx-01]
:0046BF11 50                      push eax
:0046BF12 894DE0                  mov dword ptr [ebp-20], ecx
:0046BF15 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046BF18 03CB                    add ecx, ebx
:0046BF1A 8D45E8                  lea eax, dword ptr [ebp-18]
:0046BF1D 50                      push eax
:0046BF1E 8D4C11FF                lea ecx, dword ptr [ecx+edx-01]
:0046BF22 894DE4                  mov dword ptr [ebp-1C], ecx
:0046BF25 E8ABF2FFFF              call 0046B1D5
:0046BF2A 83C40C                  add esp, 0000000C
:0046BF2D 85C0                    test eax, eax
:0046BF2F 0F84FA010000            je 0046C12F
:0046BF35 A184724B00              mov eax, dword ptr [004B7284]
:0046BF3A C1E002                  shl eax, 02
:0046BF3D 8B8888194B00            mov ecx, dword ptr [eax+004B1988]
:0046BF43 85C9                    test ecx, ecx
:0046BF45 7C41                    jl 0046BF88
:0046BF47 83F903                  cmp ecx, 00000003
:0046BF4A 7E2A                    jle 0046BF76
:0046BF4C 83F904                  cmp ecx, 00000004
:0046BF4F 7416                    je 0046BF67
:0046BF51 83F905                  cmp ecx, 00000005
:0046BF54 7532                    jne 0046BF88
:0046BF56 8B88D0274B00            mov ecx, dword ptr [eax+004B27D0]
:0046BF5C 8B80B0244B00            mov eax, dword ptr [eax+004B24B0]
:0046BF62 894D10                  mov dword ptr [ebp+10], ecx
:0046BF65 EB1E                    jmp 0046BF85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BF4F(C)
|
:0046BF67 8B80B0244B00            mov eax, dword ptr [eax+004B24B0]
:0046BF6D 83650C00                and dword ptr [ebp+0C], 00000000
:0046BF71 894510                  mov dword ptr [ebp+10], eax
:0046BF74 EB12                    jmp 0046BF88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BF4A(C)
|
:0046BF76 8B88B0244B00            mov ecx, dword ptr [eax+004B24B0]
:0046BF7C 8B80D0274B00            mov eax, dword ptr [eax+004B27D0]
:0046BF82 894D10                  mov dword ptr [ebp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BF65(U)
|
:0046BF85 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BF45(C), :0046BF54(C), :0046BF74(U)
|
:0046BF88 FF75EC                  push [ebp-14]
:0046BF8B FF75E8                  push [ebp-18]
:0046BF8E E894EFFFFF              call 0046AF27
:0046BF93 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046BF96 8B7DF0                  mov edi, dword ptr [ebp-10]
:0046BF99 59                      pop ecx
:0046BF9A 894508                  mov dword ptr [ebp+08], eax
:0046BF9D 8B45EC                  mov eax, dword ptr [ebp-14]
:0046BFA0 59                      pop ecx
:0046BFA1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046BFA4 8BDA                    mov ebx, edx
:0046BFA6 2BF9                    sub edi, ecx
:0046BFA8 2BD8                    sub ebx, eax
:0046BFAA 47                      inc edi
:0046BFAB 43                      inc ebx
:0046BFAC 3B45DC                  cmp eax, dword ptr [ebp-24]
:0046BFAF 7539                    jne 0046BFEA
:0046BFB1 3B4DD8                  cmp ecx, dword ptr [ebp-28]
:0046BFB4 7534                    jne 0046BFEA
:0046BFB6 3B55E4                  cmp edx, dword ptr [ebp-1C]
:0046BFB9 752F                    jne 0046BFEA
:0046BFBB 8B45F0                  mov eax, dword ptr [ebp-10]
:0046BFBE 3B45E0                  cmp eax, dword ptr [ebp-20]
:0046BFC1 7527                    jne 0046BFEA
:0046BFC3 A184724B00              mov eax, dword ptr [004B7284]
:0046BFC8 C1E002                  shl eax, 02
:0046BFCB 8B8888194B00            mov ecx, dword ptr [eax+004B1988]
:0046BFD1 83E900                  sub ecx, 00000000
:0046BFD4 0F8475010000            je 0046C14F
:0046BFDA 83E904                  sub ecx, 00000004
:0046BFDD 0F8451010000            je 0046C134
:0046BFE3 49                      dec ecx
:0046BFE4 0F8465010000            je 0046C14F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BFAF(C), :0046BFB4(C), :0046BFB9(C), :0046BFC1(C)
|
:0046BFEA 8D4607                  lea eax, dword ptr [esi+07]
:0046BFED 0FAF4514                imul eax, dword ptr [ebp+14]
:0046BFF1 50                      push eax
:0046BFF2 6A00                    push 00000000

* Reference To: KERNEL32.GlobalAlloc, Ord:0155h
                                  |
:0046BFF4 FF1508864B00            Call dword ptr [004B8608]
:0046BFFA 50                      push eax
:0046BFFB 8945FC                  mov dword ptr [ebp-04], eax

* Reference To: KERNEL32.GlobalLock, Ord:0160h
                                  |
:0046BFFE FF150C864B00            Call dword ptr [004B860C]
:0046C004 FF750C                  push [ebp+0C]
:0046C007 8945F8                  mov dword ptr [ebp-08], eax
:0046C00A FF7510                  push [ebp+10]
:0046C00D 50                      push eax
:0046C00E FF7518                  push [ebp+18]
:0046C011 FF7514                  push [ebp+14]
:0046C014 56                      push esi
:0046C015 E853010000              call 0046C16D
:0046C01A 8B45EC                  mov eax, dword ptr [ebp-14]
:0046C01D 8B55F8                  mov edx, dword ptr [ebp-08]
:0046C020 2B45DC                  sub eax, dword ptr [ebp-24]
:0046C023 83C418                  add esp, 00000018
:0046C026 0FAFC6                  imul eax, esi
:0046C029 0345E8                  add eax, dword ptr [ebp-18]
:0046C02C 2B45D8                  sub eax, dword ptr [ebp-28]
:0046C02F 03D0                    add edx, eax
:0046C031 A184724B00              mov eax, dword ptr [004B7284]
:0046C036 C1E002                  shl eax, 02
:0046C039 8B8888194B00            mov ecx, dword ptr [eax+004B1988]
:0046C03F 83E900                  sub ecx, 00000000
:0046C042 0F84AA000000            je 0046C0F2
:0046C048 49                      dec ecx
:0046C049 0F8489000000            je 0046C0D8
:0046C04F 49                      dec ecx
:0046C050 746C                    je 0046C0BE
:0046C052 49                      dec ecx
:0046C053 744F                    je 0046C0A4
:0046C055 49                      dec ecx
:0046C056 740C                    je 0046C064
:0046C058 49                      dec ecx
:0046C059 0F8493000000            je 0046C0F2
:0046C05F E9A9000000              jmp 0046C10D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C056(C)
|
:0046C064 8B8038494B00            mov eax, dword ptr [eax+004B4938]
:0046C06A 2BF7                    sub esi, edi
:0046C06C 2BC7                    sub eax, edi
:0046C06E 89750C                  mov dword ptr [ebp+0C], esi
:0046C071 85DB                    test ebx, ebx
:0046C073 0F8E94000000            jle 0046C10D
:0046C079 895D14                  mov dword ptr [ebp+14], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C0A0(C)
|
:0046C07C 85FF                    test edi, edi
:0046C07E 7E17                    jle 0046C097
:0046C080 897D18                  mov dword ptr [ebp+18], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C095(C)
|
:0046C083 8A0A                    mov cl, byte ptr [edx]
:0046C085 84C9                    test cl, cl
:0046C087 7405                    je 0046C08E
:0046C089 8B7508                  mov esi, dword ptr [ebp+08]
:0046C08C 880E                    mov byte ptr [esi], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C087(C)
|
:0046C08E FF4508                  inc [ebp+08]
:0046C091 42                      inc edx
:0046C092 FF4D18                  dec [ebp+18]
:0046C095 75EC                    jne 0046C083

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C07E(C)
|
:0046C097 014508                  add dword ptr [ebp+08], eax
:0046C09A 03550C                  add edx, dword ptr [ebp+0C]
:0046C09D FF4D14                  dec [ebp+14]
:0046C0A0 75DA                    jne 0046C07C
:0046C0A2 EB69                    jmp 0046C10D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C053(C)
|
:0046C0A4 FFB0802C4B00            push dword ptr [eax+004B2C80]
:0046C0AA FF7508                  push [ebp+08]
:0046C0AD 52                      push edx
:0046C0AE 56                      push esi
:0046C0AF FFB038494B00            push dword ptr [eax+004B4938]
:0046C0B5 53                      push ebx
:0046C0B6 57                      push edi
:0046C0B7 E885100000              call 0046D141
:0046C0BC EB4C                    jmp 0046C10A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C050(C)
|
:0046C0BE FFB0802C4B00            push dword ptr [eax+004B2C80]
:0046C0C4 FF7508                  push [ebp+08]
:0046C0C7 52                      push edx
:0046C0C8 56                      push esi
:0046C0C9 FFB038494B00            push dword ptr [eax+004B4938]
:0046C0CF 53                      push ebx
:0046C0D0 57                      push edi
:0046C0D1 E82B100000              call 0046D101
:0046C0D6 EB32                    jmp 0046C10A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C049(C)
|
:0046C0D8 FFB0802C4B00            push dword ptr [eax+004B2C80]
:0046C0DE FF7508                  push [ebp+08]
:0046C0E1 52                      push edx
:0046C0E2 56                      push esi
:0046C0E3 FFB038494B00            push dword ptr [eax+004B4938]
:0046C0E9 53                      push ebx
:0046C0EA 57                      push edi
:0046C0EB E891100000              call 0046D181
:0046C0F0 EB18                    jmp 0046C10A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C042(C), :0046C059(C)
|
:0046C0F2 FFB0802C4B00            push dword ptr [eax+004B2C80]
:0046C0F8 FF7508                  push [ebp+08]
:0046C0FB 52                      push edx
:0046C0FC 56                      push esi
:0046C0FD FFB038494B00            push dword ptr [eax+004B4938]
:0046C103 53                      push ebx
:0046C104 57                      push edi
:0046C105 E8C90F0000              call 0046D0D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C0BC(U), :0046C0D6(U), :0046C0F0(U)
|
:0046C10A 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C05F(U), :0046C073(C), :0046C0A2(U)
|
:0046C10D FF75FC                  push [ebp-04]

* Reference To: KERNEL32.GlobalUnlock, Ord:0166h
                                  |
:0046C110 FF1510864B00            Call dword ptr [004B8610]
:0046C116 FF75FC                  push [ebp-04]

* Reference To: KERNEL32.GlobalFree, Ord:015Ch
                                  |
:0046C119 FF1514864B00            Call dword ptr [004B8614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C16B(U)
|
:0046C11F 53                      push ebx
:0046C120 57                      push edi
:0046C121 FF75EC                  push [ebp-14]
:0046C124 FF75E8                  push [ebp-18]
:0046C127 E89BE3FFFF              call 0046A4C7
:0046C12C 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BF2F(C)
|
:0046C12F 5F                      pop edi
:0046C130 5E                      pop esi
:0046C131 5B                      pop ebx
:0046C132 C9                      leave
:0046C133 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BFDD(C)
|
:0046C134 FF7508                  push [ebp+08]
:0046C137 FF7518                  push [ebp+18]
:0046C13A FF750C                  push [ebp+0C]
:0046C13D FF7510                  push [ebp+10]
:0046C140 FFB038494B00            push dword ptr [eax+004B4938]
:0046C146 53                      push ebx
:0046C147 57                      push edi
:0046C148 E878110000              call 0046D2C5
:0046C14D EB19                    jmp 0046C168

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BFD4(C), :0046BFE4(C)
|
:0046C14F FF7508                  push [ebp+08]
:0046C152 FF7518                  push [ebp+18]
:0046C155 FF750C                  push [ebp+0C]
:0046C158 FF7510                  push [ebp+10]
:0046C15B FFB038494B00            push dword ptr [eax+004B4938]
:0046C161 53                      push ebx
:0046C162 57                      push edi
:0046C163 E8E4100000              call 0046D24C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C14D(U)
|
:0046C168 83C41C                  add esp, 0000001C
:0046C16B EBB2                    jmp 0046C11F

* Referenced by a CALL at Address:
|:0046C015   
|
:0046C16D 55                      push ebp
:0046C16E 8BEC                    mov ebp, esp
:0046C170 51                      push ecx
:0046C171 8B4508                  mov eax, dword ptr [ebp+08]
:0046C174 56                      push esi
:0046C175 8BF0                    mov esi, eax
:0046C177 83E007                  and eax, 00000007
:0046C17A 8945FC                  mov dword ptr [ebp-04], eax
:0046C17D 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C180 C1FE03                  sar esi, 03
:0046C183 85C0                    test eax, eax
:0046C185 7E5A                    jle 0046C1E1
:0046C187 8B5514                  mov edx, dword ptr [ebp+14]
:0046C18A 57                      push edi
:0046C18B 8B7D10                  mov edi, dword ptr [ebp+10]
:0046C18E 53                      push ebx
:0046C18F 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C1DD(C)
|
:0046C192 85F6                    test esi, esi
:0046C194 7423                    je 0046C1B9
:0046C196 8D06                    lea eax, dword ptr [esi]
:0046C198 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C1B7(C)
|
:0046C19B 8A0F                    mov cl, byte ptr [edi]

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046C19D 6A08                    push 00000008
:0046C19F 47                      inc edi
:0046C1A0 5B                      pop ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C1B2(C)
|
:0046C1A1 8A4518                  mov al, byte ptr [ebp+18]
:0046C1A4 F6C180                  test cl, 80
:0046C1A7 7503                    jne 0046C1AC
:0046C1A9 8A451C                  mov al, byte ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C1A7(C)
|
:0046C1AC 8802                    mov byte ptr [edx], al
:0046C1AE 42                      inc edx
:0046C1AF D0E1                    shl cl, 1
:0046C1B1 4B                      dec ebx
:0046C1B2 75ED                    jne 0046C1A1
:0046C1B4 FF4D08                  dec [ebp+08]
:0046C1B7 75E2                    jne 0046C19B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C194(C)
|
:0046C1B9 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C1BC 85C0                    test eax, eax
:0046C1BE 741A                    je 0046C1DA
:0046C1C0 8A0F                    mov cl, byte ptr [edi]
:0046C1C2 47                      inc edi
:0046C1C3 85C0                    test eax, eax
:0046C1C5 7E13                    jle 0046C1DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C1D8(C)
|
:0046C1C7 8A5D18                  mov bl, byte ptr [ebp+18]
:0046C1CA F6C180                  test cl, 80
:0046C1CD 7503                    jne 0046C1D2
:0046C1CF 8A5D1C                  mov bl, byte ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C1CD(C)
|
:0046C1D2 881A                    mov byte ptr [edx], bl
:0046C1D4 42                      inc edx
:0046C1D5 D0E1                    shl cl, 1
:0046C1D7 48                      dec eax
:0046C1D8 75ED                    jne 0046C1C7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C1BE(C), :0046C1C5(C)
|
:0046C1DA FF4D0C                  dec [ebp+0C]
:0046C1DD 75B3                    jne 0046C192
:0046C1DF 5B                      pop ebx
:0046C1E0 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C185(C)
|
:0046C1E1 5E                      pop esi
:0046C1E2 C9                      leave
:0046C1E3 C3                      ret



* Referenced by a CALL at Address:
|:004089AD   
|
:0046C1E4 FF742408                push [esp+08]
:0046C1E8 FF742408                push [esp+08]
:0046C1EC E803000000              call 0046C1F4
:0046C1F1 59                      pop ecx
:0046C1F2 59                      pop ecx
:0046C1F3 C3                      ret



* Referenced by a CALL at Address:
|:0046C1EC   
|
:0046C1F4 55                      push ebp
:0046C1F5 8BEC                    mov ebp, esp
:0046C1F7 83EC40                  sub esp, 00000040
:0046C1FA 53                      push ebx
:0046C1FB 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046C1FE 56                      push esi
:0046C1FF 57                      push edi
:0046C200 33F6                    xor esi, esi
:0046C202 6A20                    push 00000020
:0046C204 56                      push esi
:0046C205 53                      push ebx
:0046C206 E855170000              call 0046D960
:0046C20B 83C40C                  add esp, 0000000C
:0046C20E 8B4508                  mov eax, dword ptr [ebp+08]
:0046C211 8BC8                    mov ecx, eax
:0046C213 88450D                  mov byte ptr [ebp+0D], al
:0046C216 6A42                    push 00000042

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046C218 6A10                    push 00000010
:0046C21A 5F                      pop edi
:0046C21B 57                      push edi
:0046C21C 57                      push edi
:0046C21D 56                      push esi
:0046C21E 56                      push esi
:0046C21F FF35A81C4B00            push dword ptr [004B1CA8]
:0046C225 C1F908                  sar ecx, 08
:0046C228 884D0C                  mov byte ptr [ebp+0C], cl

* Reference To: GDI32.PatBlt, Ord:0122h
                                  |
:0046C22B FF15C0844B00            Call dword ptr [004B84C0]
:0046C231 6A01                    push 00000001
:0046C233 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:0046C239 FF15AC844B00            Call dword ptr [004B84AC]
:0046C23F 68FFFFFF00              push 00FFFFFF
:0046C244 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:0046C24A FF15B0844B00            Call dword ptr [004B84B0]
:0046C250 8D450C                  lea eax, dword ptr [ebp+0C]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0046C253 6A02                    push 00000002
:0046C255 50                      push eax
:0046C256 56                      push esi
:0046C257 56                      push esi
:0046C258 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:0046C25E FF15A4844B00            Call dword ptr [004B84A4]
:0046C264 56                      push esi
:0046C265 8D45C0                  lea eax, dword ptr [ebp-40]
:0046C268 6848194B00              push 004B1948
:0046C26D 50                      push eax
:0046C26E 57                      push edi
:0046C26F 56                      push esi
:0046C270 FF35C8414B00            push dword ptr [004B41C8]
:0046C276 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.GetDIBits, Ord:00C6h
                                  |
:0046C27C FF15EC844B00            Call dword ptr [004B84EC]
:0046C282 8D45FC                  lea eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C291(C)
|
:0046C285 668B08                  mov cx, word ptr [eax]
:0046C288 83E804                  sub eax, 00000004
:0046C28B 66890B                  mov word ptr [ebx], cx
:0046C28E 43                      inc ebx
:0046C28F 43                      inc ebx
:0046C290 4F                      dec edi
:0046C291 75F2                    jne 0046C285
:0046C293 5F                      pop edi
:0046C294 5E                      pop esi
:0046C295 5B                      pop ebx
:0046C296 C9                      leave
:0046C297 C3                      ret



* Referenced by a CALL at Address:
|:00408991   
|
:0046C298 55                      push ebp
:0046C299 8BEC                    mov ebp, esp
:0046C29B 83EC40                  sub esp, 00000040
:0046C29E 53                      push ebx
:0046C29F 56                      push esi
:0046C2A0 57                      push edi

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046C2A1 6A10                    push 00000010
:0046C2A3 5F                      pop edi
:0046C2A4 33F6                    xor esi, esi
:0046C2A6 57                      push edi
:0046C2A7 56                      push esi
:0046C2A8 FF750C                  push [ebp+0C]
:0046C2AB E8B0160000              call 0046D960
:0046C2B0 83C40C                  add esp, 0000000C
:0046C2B3 837D0820                cmp dword ptr [ebp+08], 00000020
:0046C2B7 0F84A3000000            je 0046C360
:0046C2BD 6A42                    push 00000042
:0046C2BF 57                      push edi
:0046C2C0 57                      push edi
:0046C2C1 56                      push esi
:0046C2C2 56                      push esi
:0046C2C3 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.PatBlt, Ord:0122h
                                  |
:0046C2C9 FF15C0844B00            Call dword ptr [004B84C0]
:0046C2CF 6A01                    push 00000001
:0046C2D1 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:0046C2D7 FF15AC844B00            Call dword ptr [004B84AC]
:0046C2DD 68FFFFFF00              push 00FFFFFF
:0046C2E2 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:0046C2E8 FF15B0844B00            Call dword ptr [004B84B0]
:0046C2EE 0FBE4508                movsx eax, byte ptr [ebp+08]
:0046C2F2 6A01                    push 00000001
:0046C2F4 50                      push eax
:0046C2F5 56                      push esi
:0046C2F6 56                      push esi
:0046C2F7 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:0046C2FD FF15A4844B00            Call dword ptr [004B84A4]
:0046C303 56                      push esi
:0046C304 8D45C0                  lea eax, dword ptr [ebp-40]
:0046C307 6848194B00              push 004B1948
:0046C30C 50                      push eax
:0046C30D 57                      push edi
:0046C30E 56                      push esi
:0046C30F FF35C8414B00            push dword ptr [004B41C8]
:0046C315 FF35A81C4B00            push dword ptr [004B1CA8]

* Reference To: GDI32.GetDIBits, Ord:00C6h
                                  |
:0046C31B FF15EC844B00            Call dword ptr [004B84EC]
:0046C321 A128734B00              mov eax, dword ptr [004B7328]
:0046C326 8B0D30734B00            mov ecx, dword ptr [004B7330]
:0046C32C 3BC1                    cmp eax, ecx
:0046C32E 7C02                    jl 0046C332
:0046C330 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C32E(C)
|
:0046C332 2B0520734B00            sub eax, dword ptr [004B7320]
:0046C338 03C7                    add eax, edi
:0046C33A 8BD8                    mov ebx, eax
:0046C33C 7902                    jns 0046C340
:0046C33E 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C33C(C)
|
:0046C340 8BC3                    mov eax, ebx
:0046C342 99                      cdq
:0046C343 2BC2                    sub eax, edx
:0046C345 D1F8                    sar eax, 1
:0046C347 03450C                  add eax, dword ptr [ebp+0C]
:0046C34A 3BDF                    cmp ebx, edi
:0046C34C 7D12                    jge 0046C360
:0046C34E 8BCF                    mov ecx, edi
:0046C350 8D75FC                  lea esi, dword ptr [ebp-04]
:0046C353 2BCB                    sub ecx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C35E(C)
|
:0046C355 8A16                    mov dl, byte ptr [esi]
:0046C357 83EE04                  sub esi, 00000004
:0046C35A 8810                    mov byte ptr [eax], dl
:0046C35C 40                      inc eax
:0046C35D 49                      dec ecx
:0046C35E 75F5                    jne 0046C355

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C2B7(C), :0046C34C(C)
|
:0046C360 5F                      pop edi
:0046C361 5E                      pop esi
:0046C362 5B                      pop ebx
:0046C363 C9                      leave
:0046C364 C3                      ret



* Referenced by a CALL at Addresses:
|:00412C56   , :00412C6E   , :00412E17   
|
:0046C365 55                      push ebp
:0046C366 8BEC                    mov ebp, esp
:0046C368 51                      push ecx
:0046C369 51                      push ecx
:0046C36A A184724B00              mov eax, dword ptr [004B7284]
:0046C36F 53                      push ebx
:0046C370 C1E002                  shl eax, 02
:0046C373 56                      push esi
:0046C374 8B7510                  mov esi, dword ptr [ebp+10]
:0046C377 83B8802C4B0007          cmp dword ptr [eax+004B2C80], 00000007
:0046C37E 57                      push edi
:0046C37F 8B7D08                  mov edi, dword ptr [ebp+08]
:0046C382 8945FC                  mov dword ptr [ebp-04], eax
:0046C385 7403                    je 0046C38A
:0046C387 83C710                  add edi, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C385(C)
|
:0046C38A 83FF0A                  cmp edi, 0000000A
:0046C38D 7D12                    jge 0046C3A1
:0046C38F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046C392 2BF7                    sub esi, edi

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046C394 6A0A                    push 0000000A
:0046C396 83C60A                  add esi, 0000000A
:0046C399 8D4C39F6                lea ecx, dword ptr [ecx+edi-0A]
:0046C39D 5F                      pop edi
:0046C39E 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C38D(C)
|
:0046C3A1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046C3A4 8D1439                  lea edx, dword ptr [ecx+edi]
:0046C3A7 B9F6000000              mov ecx, 000000F6
:0046C3AC 3BD1                    cmp edx, ecx
:0046C3AE 7C05                    jl 0046C3B5
:0046C3B0 2BCF                    sub ecx, edi
:0046C3B2 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C3AE(C)
|
:0046C3B5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046C3B8 897D08                  mov dword ptr [ebp+08], edi
:0046C3BB 03CF                    add ecx, edi
:0046C3BD 3BF9                    cmp edi, ecx
:0046C3BF 894DF8                  mov dword ptr [ebp-08], ecx
:0046C3C2 7D69                    jge 0046C42D
:0046C3C4 8D0CBDD9414B00          lea ecx, dword ptr [4*edi+004B41D9]
:0046C3CB 8D1CBD12394B00          lea ebx, dword ptr [4*edi+004B3912]
:0046C3D2 894D10                  mov dword ptr [ebp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C42B(C)
|
:0046C3D5 8A16                    mov dl, byte ptr [esi]
:0046C3D7 8B88F0454B00            mov ecx, dword ptr [eax+004B45F0]
:0046C3DD 8B4508                  mov eax, dword ptr [ebp+08]
:0046C3E0 D2E2                    shl dl, cl
:0046C3E2 C1E002                  shl eax, 02
:0046C3E5 46                      inc esi
:0046C3E6 889010394B00            mov byte ptr [eax+004B3910], dl
:0046C3EC 8890DA414B00            mov byte ptr [eax+004B41DA], dl
:0046C3F2 8A16                    mov dl, byte ptr [esi]
:0046C3F4 D2E2                    shl dl, cl
:0046C3F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046C3F9 46                      inc esi
:0046C3FA 8B89F0454B00            mov ecx, dword ptr [ecx+004B45F0]
:0046C400 8813                    mov byte ptr [ebx], dl
:0046C402 8890D8414B00            mov byte ptr [eax+004B41D8], dl
:0046C408 8A16                    mov dl, byte ptr [esi]
:0046C40A 83C304                  add ebx, 00000004
:0046C40D D2E2                    shl dl, cl
:0046C40F 46                      inc esi
:0046C410 FF4508                  inc [ebp+08]
:0046C413 889011394B00            mov byte ptr [eax+004B3911], dl
:0046C419 8B4510                  mov eax, dword ptr [ebp+10]
:0046C41C 83451004                add dword ptr [ebp+10], 00000004
:0046C420 8810                    mov byte ptr [eax], dl
:0046C422 8B4508                  mov eax, dword ptr [ebp+08]
:0046C425 3B45F8                  cmp eax, dword ptr [ebp-08]
:0046C428 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C42B 7CA8                    jl 0046C3D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C3C2(C)
|
:0046C42D 33F6                    xor esi, esi
:0046C42F 393578214B00            cmp dword ptr [004B2178], esi
:0046C435 7435                    je 0046C46C
:0046C437 33DB                    xor ebx, ebx
:0046C439 3935F0634B00            cmp dword ptr [004B63F0], esi
:0046C43F 7E50                    jle 0046C491
:0046C441 C74508103D4B00          mov [ebp+08], 004B3D10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C468(C)
|
:0046C448 8B4508                  mov eax, dword ptr [ebp+08]
:0046C44B 6810394B00              push 004B3910
:0046C450 6800010000              push 00000100
:0046C455 56                      push esi
:0046C456 FF30                    push dword ptr [eax]
:0046C458 E82F0A0000              call 0046CE8C
:0046C45D 83450804                add dword ptr [ebp+08], 00000004
:0046C461 43                      inc ebx
:0046C462 3B1DF0634B00            cmp ebx, dword ptr [004B63F0]
:0046C468 7CDE                    jl 0046C448
:0046C46A EB25                    jmp 0046C491

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C435(C)
|
:0046C46C 56                      push esi
:0046C46D FF35A42F4B00            push dword ptr [004B2FA4]
:0046C473 FFB0103D4B00            push dword ptr [eax+004B3D10]

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:0046C479 FF15F4844B00            Call dword ptr [004B84F4]
:0046C47F A184724B00              mov eax, dword ptr [004B7284]
:0046C484 FF3485103D4B00          push dword ptr [4*eax+004B3D10]

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:0046C48B FF15F0844B00            Call dword ptr [004B84F0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C43F(C), :0046C46A(U)
|
:0046C491 8D04BDD8414B00          lea eax, dword ptr [4*edi+004B41D8]
:0046C498 50                      push eax
:0046C499 FF750C                  push [ebp+0C]
:0046C49C 57                      push edi
:0046C49D FF35A42F4B00            push dword ptr [004B2FA4]

* Reference To: GDI32.AnimatePalette, Ord:0006h
                                  |
:0046C4A3 FF1500854B00            Call dword ptr [004B8500]
:0046C4A9 56                      push esi

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046C4AA FF15B8864B00            Call dword ptr [004B86B8]
:0046C4B0 8BF8                    mov edi, eax
:0046C4B2 3BFE                    cmp edi, esi
:0046C4B4 7434                    je 0046C4EA

* Possible Reference to String Resource ID=00012: ""
                                  |
:0046C4B6 6A0C                    push 0000000C
:0046C4B8 57                      push edi

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:0046C4B9 FF15D0844B00            Call dword ptr [004B84D0]
:0046C4BF 83F808                  cmp eax, 00000008
:0046C4C2 7E1E                    jle 0046C4E2
:0046C4C4 A184724B00              mov eax, dword ptr [004B7284]
:0046C4C9 FF3485A83E4B00          push dword ptr [4*eax+004B3EA8]
:0046C4D0 FF3485E8354B00          push dword ptr [4*eax+004B35E8]
:0046C4D7 56                      push esi
:0046C4D8 56                      push esi
:0046C4D9 50                      push eax
:0046C4DA E8CBE0FFFF              call 0046A5AA
:0046C4DF 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C4C2(C)
|
:0046C4E2 57                      push edi
:0046C4E3 56                      push esi

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046C4E4 FF15BC864B00            Call dword ptr [004B86BC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C4B4(C)
|
:0046C4EA 5F                      pop edi
:0046C4EB 5E                      pop esi
:0046C4EC 5B                      pop ebx
:0046C4ED C9                      leave
:0046C4EE C3                      ret



* Referenced by a CALL at Addresses:
|:00426C48   , :0046C603   
|
:0046C4EF E85A000000              call 0046C54E
:0046C4F4 33C0                    xor eax, eax
:0046C4F6 3905E4634B00            cmp dword ptr [004B63E4], eax
:0046C4FC 0F95C0                  setne al
:0046C4FF C3                      ret



* Referenced by a CALL at Address:
|:00426C39   
|
:0046C500 8B442404                mov eax, dword ptr [esp+04]
:0046C504 C3                      ret



* Referenced by a CALL at Addresses:
|:00426C29   , :0046C614   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C513(U)
|
:0046C505 833DE4634B0000          cmp dword ptr [004B63E4], 00000000
:0046C50C 7507                    jne 0046C515
:0046C50E E83B000000              call 0046C54E
:0046C513 EBF0                    jmp 0046C505

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C50C(C)
|
:0046C515 A1EC634B00              mov eax, dword ptr [004B63EC]
:0046C51A 8B4C2404                mov ecx, dword ptr [esp+04]
:0046C51E 0FB7044588474B00        movzx eax, word ptr [2*eax+004B4788]
:0046C526 8901                    mov dword ptr [ecx], eax
:0046C528 8B442408                mov eax, dword ptr [esp+08]
:0046C52C 832000                  and dword ptr [eax], 00000000
:0046C52F A1EC634B00              mov eax, dword ptr [004B63EC]
:0046C534 40                      inc eax
:0046C535 83E00F                  and eax, 0000000F
:0046C538 FF0DE4634B00            dec dword ptr [004B63E4]
:0046C53E A3EC634B00              mov dword ptr [004B63EC], eax
:0046C543 C3                      ret



* Referenced by a CALL at Address:
|:00464450   
|
:0046C544 8B442404                mov eax, dword ptr [esp+04]
:0046C548 A3DC634B00              mov dword ptr [004B63DC], eax
:0046C54D C3                      ret



* Referenced by a CALL at Addresses:
|:00413DDA   , :00420129   , :00420B0C   , :00420BF7   , :00420C66   
|:0042657E   , :00426BA1   , :00426BC9   , :00426C14   , :00426C62   
|:00426C6D   , :00426D0A   , :00426D31   , :00426D95   , :00426E83   
|:0042807A   , :0042C949   , :00443477   , :00444DE9   , :00444E7E   
|:00445E90   , :00446AD6   , :0044D850   , :0044D8C4   , :00451095   
|:00454EBD   , :00455FAE   , :00456065   , :004562DE   , :00456D7A   
|:00456D9B   , :00456F4F   , :004582B5   , :0046A064   , :0046A0DF   
|:0046A112   , :0046A20C   , :0046C4EF   , :0046C50E   
|
:0046C54E 55                      push ebp
:0046C54F 8BEC                    mov ebp, esp
:0046C551 83EC1C                  sub esp, 0000001C
:0046C554 33C0                    xor eax, eax
:0046C556 6A01                    push 00000001
:0046C558 50                      push eax
:0046C559 50                      push eax
:0046C55A 50                      push eax
:0046C55B 8D45E4                  lea eax, dword ptr [ebp-1C]
:0046C55E 50                      push eax

* Reference To: USER32.PeekMessageA, Ord:01AFh
                                  |
:0046C55F FF1598874B00            Call dword ptr [004B8798]
:0046C565 85C0                    test eax, eax
:0046C567 7414                    je 0046C57D
:0046C569 8D45E4                  lea eax, dword ptr [ebp-1C]
:0046C56C 50                      push eax

* Reference To: USER32.TranslateMessage, Ord:0245h
                                  |
:0046C56D FF15C8874B00            Call dword ptr [004B87C8]
:0046C573 8D45E4                  lea eax, dword ptr [ebp-1C]
:0046C576 50                      push eax

* Reference To: USER32.DispatchMessageA, Ord:0090h
                                  |
:0046C577 FF15C4874B00            Call dword ptr [004B87C4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C567(C)
|
:0046C57D C9                      leave
:0046C57E C3                      ret



* Referenced by a CALL at Addresses:
|:00426C0C   , :00426C5A   
|
:0046C57F 55                      push ebp
:0046C580 8BEC                    mov ebp, esp
:0046C582 83EC20                  sub esp, 00000020
:0046C585 8B4508                  mov eax, dword ptr [ebp+08]
:0046C588 56                      push esi
:0046C589 48                      dec eax
:0046C58A 57                      push edi
:0046C58B 7476                    je 0046C603
:0046C58D 48                      dec eax
:0046C58E 0F8589000000            jne 0046C61D

* Reference To: USER32.PeekMessageA, Ord:01AFh
                                  |
:0046C594 8B3598874B00            mov esi, dword ptr [004B8798]
:0046C59A 33FF                    xor edi, edi
:0046C59C 6A01                    push 00000001
:0046C59E 57                      push edi
:0046C59F 57                      push edi
:0046C5A0 8D45E0                  lea eax, dword ptr [ebp-20]
:0046C5A3 57                      push edi
:0046C5A4 50                      push eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C601(U)
|
:0046C5A5 FFD6                    call esi
:0046C5A7 85C0                    test eax, eax
:0046C5A9 7472                    je 0046C61D
:0046C5AB 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046C5AE 2D01020000              sub eax, 00000201
:0046C5B3 7425                    je 0046C5DA
:0046C5B5 48                      dec eax
:0046C5B6 7419                    je 0046C5D1
:0046C5B8 48                      dec eax
:0046C5B9 48                      dec eax
:0046C5BA 740C                    je 0046C5C8
:0046C5BC 48                      dec eax
:0046C5BD 7525                    jne 0046C5E4
:0046C5BF 832580474B00FD          and dword ptr [004B4780], FFFFFFFD
:0046C5C6 EB19                    jmp 0046C5E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C5BA(C)
|
:0046C5C8 830D80474B0002          or dword ptr [004B4780], 00000002
:0046C5CF EB10                    jmp 0046C5E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C5B6(C)
|
:0046C5D1 832580474B00FE          and dword ptr [004B4780], FFFFFFFE
:0046C5D8 EB07                    jmp 0046C5E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C5B3(C)
|
:0046C5DA 830D80474B0001          or dword ptr [004B4780], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C5C6(U), :0046C5CF(U), :0046C5D8(U)
|
:0046C5E1 897DE4                  mov dword ptr [ebp-1C], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C5BD(C)
|
:0046C5E4 8D45E0                  lea eax, dword ptr [ebp-20]
:0046C5E7 50                      push eax

* Reference To: USER32.TranslateMessage, Ord:0245h
                                  |
:0046C5E8 FF15C8874B00            Call dword ptr [004B87C8]
:0046C5EE 8D45E0                  lea eax, dword ptr [ebp-20]
:0046C5F1 50                      push eax

* Reference To: USER32.DispatchMessageA, Ord:0090h
                                  |
:0046C5F2 FF15C4874B00            Call dword ptr [004B87C4]
:0046C5F8 6A01                    push 00000001
:0046C5FA 57                      push edi
:0046C5FB 57                      push edi
:0046C5FC 8D45E0                  lea eax, dword ptr [ebp-20]
:0046C5FF 57                      push edi
:0046C600 50                      push eax
:0046C601 EBA2                    jmp 0046C5A5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C58B(C), :0046C61B(U)
|
:0046C603 E8E7FEFFFF              call 0046C4EF
:0046C608 85C0                    test eax, eax
:0046C60A 7411                    je 0046C61D
:0046C60C 8D4508                  lea eax, dword ptr [ebp+08]
:0046C60F 50                      push eax
:0046C610 8D45FC                  lea eax, dword ptr [ebp-04]
:0046C613 50                      push eax
:0046C614 E8ECFEFFFF              call 0046C505
:0046C619 59                      pop ecx
:0046C61A 59                      pop ecx
:0046C61B EBE6                    jmp 0046C603

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C58E(C), :0046C5A9(C), :0046C60A(C)
|
:0046C61D 5F                      pop edi
:0046C61E 5E                      pop esi
:0046C61F C9                      leave
:0046C620 C3                      ret



* Referenced by a CALL at Addresses:
|:00423EEA   , :00426B16   , :00426B32   , :00426B3E   , :00426B5F   
|:00426B6E   , :00457D71   
|

* Reference To: KERNEL32.GetTickCount, Ord:0145h
                                  |
:0046C621 FF1504864B00            Call dword ptr [004B8604]
:0046C627 6A32                    push 00000032
:0046C629 33D2                    xor edx, edx
:0046C62B 59                      pop ecx
:0046C62C F7F1                    div ecx
:0046C62E C3                      ret



* Referenced by a CALL at Addresses:
|:00412E43   , :00412E5D   
|
:0046C62F 837C240401              cmp dword ptr [esp+04], 00000001
:0046C634 756D                    jne 0046C6A3
:0046C636 833DE0634B0000          cmp dword ptr [004B63E0], 00000000
:0046C63D 7E6A                    jle 0046C6A9
:0046C63F FF0DE0634B00            dec dword ptr [004B63E0]
:0046C645 7562                    jne 0046C6A9
:0046C647 8B0D84724B00            mov ecx, dword ptr [004B7284]
:0046C64D 8BC1                    mov eax, ecx
:0046C64F C1E002                  shl eax, 02
:0046C652 FFB0E81F4B00            push dword ptr [eax+004B1FE8]
:0046C658 FFB0581E4B00            push dword ptr [eax+004B1E58]
:0046C65E FFB020234B00            push dword ptr [eax+004B2320]
:0046C664 FFB090214B00            push dword ptr [eax+004B2190]
:0046C66A 51                      push ecx
:0046C66B E83ADFFFFF              call 0046A5AA
:0046C670 A184724B00              mov eax, dword ptr [004B7284]
:0046C675 83C414                  add esp, 00000014
:0046C678 C1E002                  shl eax, 02
:0046C67B 8B88E8354B00            mov ecx, dword ptr [eax+004B35E8]
:0046C681 83A0E81F4B0000          and dword ptr [eax+004B1FE8], 00000000
:0046C688 83A0581E4B0000          and dword ptr [eax+004B1E58], 00000000
:0046C68F 898890214B00            mov dword ptr [eax+004B2190], ecx
:0046C695 8B88A83E4B00            mov ecx, dword ptr [eax+004B3EA8]
:0046C69B 898820234B00            mov dword ptr [eax+004B2320], ecx
:0046C6A1 EB06                    jmp 0046C6A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C634(C)
|
:0046C6A3 FF05E0634B00            inc dword ptr [004B63E0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C63D(C), :0046C645(C), :0046C6A1(U)
|
:0046C6A9 33C0                    xor eax, eax
:0046C6AB 3905E0634B00            cmp dword ptr [004B63E0], eax
:0046C6B1 0F9FC0                  setg al
:0046C6B4 C3                      ret



* Referenced by a CALL at Addresses:
|:0045843E   , :00464103   , :00468622   
|
:0046C6B5 55                      push ebp
:0046C6B6 8BEC                    mov ebp, esp
:0046C6B8 83EC10                  sub esp, 00000010
:0046C6BB 53                      push ebx
:0046C6BC 56                      push esi
:0046C6BD 57                      push edi
:0046C6BE 33FF                    xor edi, edi
:0046C6C0 8D45F0                  lea eax, dword ptr [ebp-10]
:0046C6C3 57                      push edi
:0046C6C4 50                      push eax
:0046C6C5 57                      push edi
:0046C6C6 6A30                    push 00000030

* Reference To: USER32.SystemParametersInfoA, Ord:0234h
                                  |
:0046C6C8 FF15CC874B00            Call dword ptr [004B87CC]

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046C6CE 8B3578874B00            mov esi, dword ptr [004B8778]
:0046C6D4 85C0                    test eax, eax
:0046C6D6 7410                    je 0046C6E8
:0046C6D8 8B4508                  mov eax, dword ptr [ebp+08]
:0046C6DB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046C6DE 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0046C6E1 8908                    mov dword ptr [eax], ecx
:0046C6E3 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C6E6 EB0F                    jmp 0046C6F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C6D6(C)
|
:0046C6E8 57                      push edi
:0046C6E9 FFD6                    call esi
:0046C6EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C6EE 6A01                    push 00000001
:0046C6F0 8901                    mov dword ptr [ecx], eax
:0046C6F2 FFD6                    call esi
:0046C6F4 8B7D0C                  mov edi, dword ptr [ebp+0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C6E6(U)
|

* Possible Reference to String Resource ID=00015: ""
                                  |
:0046C6F7 6A0F                    push 0000000F
:0046C6F9 8907                    mov dword ptr [edi], eax
:0046C6FB FFD6                    call esi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046C6FD 6A04                    push 00000004
:0046C6FF 8BD8                    mov ebx, eax
:0046C701 FFD6                    call esi
:0046C703 03D8                    add ebx, eax
:0046C705 291F                    sub dword ptr [edi], ebx
:0046C707 5F                      pop edi
:0046C708 5E                      pop esi
:0046C709 5B                      pop ebx
:0046C70A C9                      leave
:0046C70B C3                      ret



* Referenced by a CALL at Addresses:
|:00426A1C   , :004643D9   , :00468DCE   , :0046A712   , :0046CA5F   
|
:0046C70C 55                      push ebp
:0046C70D 8BEC                    mov ebp, esp
:0046C70F 83EC1C                  sub esp, 0000001C
:0046C712 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C715 834DF8FF                or dword ptr [ebp-08], FFFFFFFF
:0046C719 834DF4FF                or dword ptr [ebp-0C], FFFFFFFF
:0046C71D 53                      push ebx
:0046C71E 57                      push edi
:0046C71F 8B7D08                  mov edi, dword ptr [ebp+08]
:0046C722 A3E8454B00              mov dword ptr [004B45E8], eax
:0046C727 8B4510                  mov eax, dword ptr [ebp+10]
:0046C72A 33DB                    xor ebx, ebx
:0046C72C 893D80194B00            mov dword ptr [004B1980], edi
:0046C732 391DF4634B00            cmp dword ptr [004B63F4], ebx
:0046C738 A3D0414B00              mov dword ptr [004B41D0], eax
:0046C73D 0F8550010000            jne 0046C893
:0046C743 56                      push esi
:0046C744 8D45E4                  lea eax, dword ptr [ebp-1C]
:0046C747 53                      push ebx
:0046C748 50                      push eax
:0046C749 53                      push ebx
:0046C74A 6A30                    push 00000030

* Reference To: USER32.SystemParametersInfoA, Ord:0234h
                                  |
:0046C74C FF15CC874B00            Call dword ptr [004B87CC]
:0046C752 85C0                    test eax, eax
:0046C754 740B                    je 0046C761
:0046C756 8B45EC                  mov eax, dword ptr [ebp-14]
:0046C759 894508                  mov dword ptr [ebp+08], eax
:0046C75C 8B45F0                  mov eax, dword ptr [ebp-10]
:0046C75F EB10                    jmp 0046C771

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C754(C)
|

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046C761 8B3578874B00            mov esi, dword ptr [004B8778]
:0046C767 53                      push ebx
:0046C768 FFD6                    call esi
:0046C76A 6A01                    push 00000001
:0046C76C 894508                  mov dword ptr [ebp+08], eax
:0046C76F FFD6                    call esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C75F(U)
|
:0046C771 8945FC                  mov dword ptr [ebp-04], eax
:0046C774 A184724B00              mov eax, dword ptr [004B7284]
:0046C779 8BC8                    mov ecx, eax
:0046C77B C1E102                  shl ecx, 02
:0046C77E 8B81E8354B00            mov eax, dword ptr [ecx+004B35E8]
:0046C784 3BF8                    cmp edi, eax
:0046C786 7E02                    jle 0046C78A
:0046C788 8BF8                    mov edi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C786(C)
|
:0046C78A 8B81A83E4B00            mov eax, dword ptr [ecx+004B3EA8]
:0046C790 39450C                  cmp dword ptr [ebp+0C], eax
:0046C793 7E03                    jle 0046C798
:0046C795 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C793(C), :0046C808(C), :0046C80D(C)
|
:0046C798 A184724B00              mov eax, dword ptr [004B7284]

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046C79D 6A06                    push 00000006
:0046C79F FF750C                  push [ebp+0C]
:0046C7A2 57                      push edi
:0046C7A3 53                      push ebx
:0046C7A4 53                      push ebx
:0046C7A5 53                      push ebx
:0046C7A6 FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:0046C7AD FF15AC874B00            Call dword ptr [004B87AC]
:0046C7B3 8D45E4                  lea eax, dword ptr [ebp-1C]
:0046C7B6 50                      push eax
:0046C7B7 A184724B00              mov eax, dword ptr [004B7284]
:0046C7BC FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0046C7C3 FF15C8864B00            Call dword ptr [004B86C8]
:0046C7C9 8B55EC                  mov edx, dword ptr [ebp-14]
:0046C7CC A180194B00              mov eax, dword ptr [004B1980]
:0046C7D1 8B0DE8454B00            mov ecx, dword ptr [004B45E8]
:0046C7D7 3BD0                    cmp edx, eax
:0046C7D9 7505                    jne 0046C7E0
:0046C7DB 394DF0                  cmp dword ptr [ebp-10], ecx
:0046C7DE 7426                    je 0046C806

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C7D9(C)
|
:0046C7E0 3B55F8                  cmp edx, dword ptr [ebp-08]
:0046C7E3 7508                    jne 0046C7ED
:0046C7E5 8B75F0                  mov esi, dword ptr [ebp-10]
:0046C7E8 3B75F4                  cmp esi, dword ptr [ebp-0C]
:0046C7EB 7422                    je 0046C80F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C7E3(C)
|
:0046C7ED 8BF0                    mov esi, eax
:0046C7EF 8955F8                  mov dword ptr [ebp-08], edx
:0046C7F2 2BF2                    sub esi, edx
:0046C7F4 03FE                    add edi, esi
:0046C7F6 8BF1                    mov esi, ecx
:0046C7F8 2B75F0                  sub esi, dword ptr [ebp-10]
:0046C7FB 01750C                  add dword ptr [ebp+0C], esi
:0046C7FE 8B75F0                  mov esi, dword ptr [ebp-10]
:0046C801 8975F4                  mov dword ptr [ebp-0C], esi
:0046C804 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C7DE(C)
|
:0046C806 3BD0                    cmp edx, eax
:0046C808 758E                    jne 0046C798
:0046C80A 394DF0                  cmp dword ptr [ebp-10], ecx
:0046C80D 7589                    jne 0046C798

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C7EB(C)
|
:0046C80F 8D45E4                  lea eax, dword ptr [ebp-1C]
:0046C812 50                      push eax
:0046C813 A184724B00              mov eax, dword ptr [004B7284]
:0046C818 FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046C81F FF1558874B00            Call dword ptr [004B8758]
:0046C825 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046C828 8B7DE4                  mov edi, dword ptr [ebp-1C]
:0046C82B 8B75F0                  mov esi, dword ptr [ebp-10]
:0046C82E 8B45E8                  mov eax, dword ptr [ebp-18]
:0046C831 2BCF                    sub ecx, edi
:0046C833 2BF0                    sub esi, eax
:0046C835 F6451001                test [ebp+10], 01
:0046C839 741B                    je 0046C856
:0046C83B 8B4508                  mov eax, dword ptr [ebp+08]
:0046C83E 2BC1                    sub eax, ecx
:0046C840 99                      cdq
:0046C841 2BC2                    sub eax, edx
:0046C843 8BF8                    mov edi, eax
:0046C845 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C848 2BC6                    sub eax, esi
:0046C84A 99                      cdq
:0046C84B D1FF                    sar edi, 1
:0046C84D 2BC2                    sub eax, edx
:0046C84F 897DE4                  mov dword ptr [ebp-1C], edi
:0046C852 D1F8                    sar eax, 1
:0046C854 EB21                    jmp 0046C877

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C839(C)
|
:0046C856 F6451180                test [ebp+11], 80
:0046C85A 741E                    je 0046C87A
:0046C85C 8B5508                  mov edx, dword ptr [ebp+08]
:0046C85F 3955EC                  cmp dword ptr [ebp-14], edx
:0046C862 7E07                    jle 0046C86B
:0046C864 2BD1                    sub edx, ecx
:0046C866 8BFA                    mov edi, edx
:0046C868 897DE4                  mov dword ptr [ebp-1C], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C862(C)
|
:0046C86B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046C86E 3955F0                  cmp dword ptr [ebp-10], edx
:0046C871 7E07                    jle 0046C87A
:0046C873 2BD6                    sub edx, esi
:0046C875 8BC2                    mov eax, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C854(U)
|
:0046C877 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C85A(C), :0046C871(C)
|
:0046C87A 6A01                    push 00000001
:0046C87C 56                      push esi
:0046C87D 51                      push ecx
:0046C87E 50                      push eax
:0046C87F A184724B00              mov eax, dword ptr [004B7284]
:0046C884 57                      push edi
:0046C885 FF348548624B00          push dword ptr [4*eax+004B6248]

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0046C88C FF15FC864B00            Call dword ptr [004B86FC]
:0046C892 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C73D(C)
|
:0046C893 5F                      pop edi
:0046C894 5B                      pop ebx
:0046C895 C9                      leave
:0046C896 C3                      ret



* Referenced by a CALL at Address:
|:0046A6F4   
|
:0046C897 A184724B00              mov eax, dword ptr [004B7284]
:0046C89C 33D2                    xor edx, edx
:0046C89E C1E002                  shl eax, 02
:0046C8A1 83B8E8354B00FF          cmp dword ptr [eax+004B35E8], FFFFFFFF
:0046C8A8 56                      push esi
:0046C8A9 8B742408                mov esi, dword ptr [esp+08]
:0046C8AD 8D88E8354B00            lea ecx, dword ptr [eax+004B35E8]
:0046C8B3 0F94C2                  sete dl
:0046C8B6 8931                    mov dword ptr [ecx], esi
:0046C8B8 8B4C240C                mov ecx, dword ptr [esp+0C]
:0046C8BC 85D2                    test edx, edx
:0046C8BE 8988A83E4B00            mov dword ptr [eax+004B3EA8], ecx
:0046C8C4 7522                    jne 0046C8E8
:0046C8C6 E880E4FFFF              call 0046AD4B
:0046C8CB E88ADEFFFF              call 0046A75A
:0046C8D0 85C0                    test eax, eax
:0046C8D2 7404                    je 0046C8D8
:0046C8D4 33C0                    xor eax, eax
:0046C8D6 5E                      pop esi
:0046C8D7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C8D2(C)
|
:0046C8D8 A184724B00              mov eax, dword ptr [004B7284]
:0046C8DD 85C0                    test eax, eax
:0046C8DF 7407                    je 0046C8E8
:0046C8E1 50                      push eax
:0046C8E2 E840DEFFFF              call 0046A727
:0046C8E7 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C8C4(C), :0046C8DF(C)
|
:0046C8E8 6A01                    push 00000001
:0046C8EA 58                      pop eax
:0046C8EB 5E                      pop esi
:0046C8EC C3                      ret



* Referenced by a CALL at Address:
|:0046A7A6   
|
:0046C8ED 55                      push ebp
:0046C8EE 8BEC                    mov ebp, esp
:0046C8F0 81EC2C040000            sub esp, 0000042C
:0046C8F6 8D85D4FBFFFF            lea eax, dword ptr [ebp+FFFFFBD4]
:0046C8FC 50                      push eax
:0046C8FD E8F6040000              call 0046CDF8
:0046C902 85C0                    test eax, eax
:0046C904 7502                    jne 0046C908
:0046C906 C9                      leave
:0046C907 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C904(C)
|
:0046C908 8B4508                  mov eax, dword ptr [ebp+08]
:0046C90B 83BDDCFBFFFF00          cmp dword ptr [ebp+FFFFFBDC], 00000000
:0046C912 57                      push edi
:0046C913 56                      push esi
:0046C914 53                      push ebx
:0046C915 8BF0                    mov esi, eax
:0046C917 7D15                    jge 0046C92E
:0046C919 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C91C C1E602                  shl esi, 02
:0046C91F 838E102E4B00FF          or dword ptr [esi+004B2E10], FFFFFFFF
:0046C926 898638494B00            mov dword ptr [esi+004B4938], eax
:0046C92C EB1A                    jmp 0046C948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C917(C)
|
:0046C92E 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C931 8BC8                    mov ecx, eax
:0046C933 C1E602                  shl esi, 02
:0046C936 F7D9                    neg ecx
:0046C938 C786102E4B0001000000    mov dword ptr [esi+004B2E10], 00000001
:0046C942 898E38494B00            mov dword ptr [esi+004B4938], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C92C(U)
|
:0046C948 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046C94B 8985D8FBFFFF            mov dword ptr [ebp+FFFFFBD8], eax
:0046C951 83C110                  add ecx, 00000010
:0046C954 0FAF8DDCFBFFFF          imul ecx, dword ptr [ebp+FFFFFBDC]
:0046C95B 898DDCFBFFFF            mov dword ptr [ebp+FFFFFBDC], ecx
:0046C961 E862040000              call 0046CDC8
:0046C966 8BF8                    mov edi, eax
:0046C968 85FF                    test edi, edi
:0046C96A 7436                    je 0046C9A2
:0046C96C 8D45FC                  lea eax, dword ptr [ebp-04]
:0046C96F 50                      push eax
:0046C970 8D85D4FBFFFF            lea eax, dword ptr [ebp+FFFFFBD4]
:0046C976 50                      push eax
:0046C977 57                      push edi
:0046C978 E8D9040000              call 0046CE56
:0046C97D 8BD8                    mov ebx, eax
:0046C97F 85DB                    test ebx, ebx
:0046C981 7416                    je 0046C999
:0046C983 53                      push ebx
:0046C984 57                      push edi

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0046C985 FF159C844B00            Call dword ptr [004B849C]
:0046C98B 8986C01C4B00            mov dword ptr [esi+004B1CC0], eax
:0046C991 899E181B4B00            mov dword ptr [esi+004B1B18], ebx
:0046C997 EB09                    jmp 0046C9A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C981(C)
|
:0046C999 57                      push edi

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:0046C99A FF15E4844B00            Call dword ptr [004B84E4]
:0046C9A0 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C96A(C), :0046C997(U)
|
:0046C9A2 5B                      pop ebx
:0046C9A3 8BC7                    mov eax, edi
:0046C9A5 5E                      pop esi
:0046C9A6 5F                      pop edi
:0046C9A7 C9                      leave
:0046C9A8 C3                      ret



* Referenced by a CALL at Address:
|:0046AD6D   
|
:0046C9A9 8B442404                mov eax, dword ptr [esp+04]
:0046C9AD 56                      push esi
:0046C9AE 8BF0                    mov esi, eax
:0046C9B0 C1E602                  shl esi, 02
:0046C9B3 8B86103D4B00            mov eax, dword ptr [esi+004B3D10]
:0046C9B9 85C0                    test eax, eax
:0046C9BB 742A                    je 0046C9E7
:0046C9BD 8B8EC01C4B00            mov ecx, dword ptr [esi+004B1CC0]
:0046C9C3 85C9                    test ecx, ecx
:0046C9C5 7420                    je 0046C9E7
:0046C9C7 51                      push ecx
:0046C9C8 50                      push eax

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0046C9C9 FF159C844B00            Call dword ptr [004B849C]
:0046C9CF FFB6181B4B00            push dword ptr [esi+004B1B18]

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0046C9D5 FF158C844B00            Call dword ptr [004B848C]
:0046C9DB FFB6103D4B00            push dword ptr [esi+004B3D10]

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:0046C9E1 FF15E4844B00            Call dword ptr [004B84E4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C9BB(C), :0046C9C5(C)
|
:0046C9E7 5E                      pop esi
:0046C9E8 C3                      ret



* Referenced by a CALL at Addresses:
|:00404BD8   , :00415DD2   , :00452C4E   , :0045F996   , :0045F9E1   
|:0045FB4E   , :0045FB99   , :0045FBE4   , :00463F5A   
|
:0046C9E9 55                      push ebp
:0046C9EA 8BEC                    mov ebp, esp
:0046C9EC 83EC40                  sub esp, 00000040
:0046C9EF 53                      push ebx
:0046C9F0 56                      push esi
:0046C9F1 8B750C                  mov esi, dword ptr [ebp+0C]
:0046C9F4 57                      push edi
:0046C9F5 8B7D10                  mov edi, dword ptr [ebp+10]
:0046C9F8 83FE05                  cmp esi, 00000005
:0046C9FB 776F                    ja 0046CA6C
:0046C9FD 83FE05                  cmp esi, 00000005
:0046CA00 7420                    je 0046CA22
:0046CA02 8BC6                    mov eax, esi
:0046CA04 48                      dec eax
:0046CA05 48                      dec eax
:0046CA06 0F856A020000            jne 0046CC76
:0046CA0C E83AE3FFFF              call 0046AD4B
:0046CA11 FF357C374B00            push dword ptr [004B377C]

* Reference To: USER32.PostQuitMessage, Ord:01B3h
                                  |
:0046CA17 FF15C0874B00            Call dword ptr [004B87C0]
:0046CA1D E971020000              jmp 0046CC93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA00(C)
|
:0046CA22 6A01                    push 00000001
:0046CA24 58                      pop eax
:0046CA25 3BF8                    cmp edi, eax
:0046CA27 750A                    jne 0046CA33
:0046CA29 A3F4634B00              mov dword ptr [004B63F4], eax
:0046CA2E E943020000              jmp 0046CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA27(C)
|
:0046CA33 85FF                    test edi, edi
:0046CA35 0F853B020000            jne 0046CC76
:0046CA3B 393DF4634B00            cmp dword ptr [004B63F4], edi
:0046CA41 0F842F020000            je 0046CC76
:0046CA47 FF35D0414B00            push dword ptr [004B41D0]
:0046CA4D 213DF4634B00            and dword ptr [004B63F4], edi
:0046CA53 FF35E8454B00            push dword ptr [004B45E8]
:0046CA59 FF3580194B00            push dword ptr [004B1980]
:0046CA5F E8A8FCFFFF              call 0046C70C
:0046CA64 83C40C                  add esp, 0000000C
:0046CA67 E90A020000              jmp 0046CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C9FB(C)
|
:0046CA6C 83FE0F                  cmp esi, 0000000F
:0046CA6F 0F87AE000000            ja 0046CB23
:0046CA75 743C                    je 0046CAB3
:0046CA77 8BC6                    mov eax, esi
:0046CA79 83E806                  sub eax, 00000006
:0046CA7C 7419                    je 0046CA97
:0046CA7E 48                      dec eax
:0046CA7F 0F85F1010000            jne 0046CC76
:0046CA85 6A01                    push 00000001
:0046CA87 6A00                    push 00000000
:0046CA89 FF7508                  push [ebp+08]

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:0046CA8C FF15CC864B00            Call dword ptr [004B86CC]
:0046CA92 E9FC010000              jmp 0046CC93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA7C(C)
|
:0046CA97 A1D8634B00              mov eax, dword ptr [004B63D8]
:0046CA9C 85C0                    test eax, eax
:0046CA9E 0F84D2010000            je 0046CC76
:0046CAA4 33C9                    xor ecx, ecx
:0046CAA6 85FF                    test edi, edi
:0046CAA8 0F95C1                  setne cl
:0046CAAB 51                      push ecx
:0046CAAC FFD0                    call eax
:0046CAAE E9CD000000              jmp 0046CB80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA75(C)
|
:0046CAB3 8B5D08                  mov ebx, dword ptr [ebp+08]
:0046CAB6 8D45C0                  lea eax, dword ptr [ebp-40]
:0046CAB9 50                      push eax
:0046CABA 53                      push ebx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:0046CABB FF15D0864B00            Call dword ptr [004B86D0]
:0046CAC1 8BF0                    mov esi, eax
:0046CAC3 A1A42F4B00              mov eax, dword ptr [004B2FA4]
:0046CAC8 33FF                    xor edi, edi
:0046CACA 3BC7                    cmp eax, edi
:0046CACC 7410                    je 0046CADE
:0046CACE 57                      push edi
:0046CACF 50                      push eax
:0046CAD0 56                      push esi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:0046CAD1 FF15F4844B00            Call dword ptr [004B84F4]
:0046CAD7 56                      push esi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:0046CAD8 FF15F0844B00            Call dword ptr [004B84F0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CACC(C)
|
:0046CADE A1F0634B00              mov eax, dword ptr [004B63F0]
:0046CAE3 33C9                    xor ecx, ecx
:0046CAE5 3BC7                    cmp eax, edi
:0046CAE7 7E11                    jle 0046CAFA
:0046CAE9 BA48624B00              mov edx, 004B6248

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CAF8(C)
|
:0046CAEE 391A                    cmp dword ptr [edx], ebx
:0046CAF0 7408                    je 0046CAFA
:0046CAF2 41                      inc ecx
:0046CAF3 83C204                  add edx, 00000004
:0046CAF6 3BC8                    cmp ecx, eax
:0046CAF8 7CF4                    jl 0046CAEE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CAE7(C), :0046CAF0(C)
|
:0046CAFA FF348DA83E4B00          push dword ptr [4*ecx+004B3EA8]
:0046CB01 FF348DE8354B00          push dword ptr [4*ecx+004B35E8]
:0046CB08 57                      push edi
:0046CB09 57                      push edi
:0046CB0A 51                      push ecx
:0046CB0B E89ADAFFFF              call 0046A5AA
:0046CB10 83C414                  add esp, 00000014
:0046CB13 8D45C0                  lea eax, dword ptr [ebp-40]
:0046CB16 50                      push eax
:0046CB17 53                      push ebx

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:0046CB18 FF15D4864B00            Call dword ptr [004B86D4]
:0046CB1E E970010000              jmp 0046CC93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA6F(C)
|
:0046CB23 83FE14                  cmp esi, 00000014
:0046CB26 7732                    ja 0046CB5A
:0046CB28 0F8465010000            je 0046CC93
:0046CB2E 83FE10                  cmp esi, 00000010
:0046CB31 0F853F010000            jne 0046CC76
:0046CB37 A1DC634B00              mov eax, dword ptr [004B63DC]
:0046CB3C 85C0                    test eax, eax
:0046CB3E 0F844F010000            je 0046CC93
:0046CB44 8325DC634B0000          and dword ptr [004B63DC], 00000000
:0046CB4B 8BF0                    mov esi, eax
:0046CB4D FFD6                    call esi
:0046CB4F 8935DC634B00            mov dword ptr [004B63DC], esi
:0046CB55 E939010000              jmp 0046CC93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB26(C)
|
:0046CB5A BB00010000              mov ebx, 00000100
:0046CB5F 3BF3                    cmp esi, ebx
:0046CB61 7733                    ja 0046CB96
:0046CB63 7421                    je 0046CB86
:0046CB65 83FE7E                  cmp esi, 0000007E
:0046CB68 0F8508010000            jne 0046CC76
:0046CB6E FF35A03E4B00            push dword ptr [004B3EA0]
:0046CB74 FF35A02F4B00            push dword ptr [004B2FA0]
:0046CB7A E819D8FFFF              call 0046A398
:0046CB7F 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CAAE(U)
|
:0046CB80 59                      pop ecx
:0046CB81 E9F0000000              jmp 0046CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB63(C)
|
:0046CB86 FF7514                  push [ebp+14]
:0046CB89 FF7510                  push [ebp+10]
:0046CB8C E844010000              call 0046CCD5
:0046CB91 E9FB000000              jmp 0046CC91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB61(C)
|
:0046CB96 8BC6                    mov eax, esi
:0046CB98 2D02010000              sub eax, 00000102
:0046CB9D 0F84E3000000            je 0046CC86
:0046CBA3 2DFF000000              sub eax, 000000FF
:0046CBA8 0F84C1000000            je 0046CC6F
:0046CBAE 48                      dec eax
:0046CBAF 0F84B1000000            je 0046CC66
:0046CBB5 48                      dec eax
:0046CBB6 48                      dec eax
:0046CBB7 0F84A0000000            je 0046CC5D
:0046CBBD 48                      dec eax
:0046CBBE 0F8490000000            je 0046CC54
:0046CBC4 2D0A010000              sub eax, 0000010A
:0046CBC9 7411                    je 0046CBDC
:0046CBCB 48                      dec eax
:0046CBCC 48                      dec eax
:0046CBCD 0F85A3000000            jne 0046CC76
:0046CBD3 3B7D08                  cmp edi, dword ptr [ebp+08]
:0046CBD6 0F849A000000            je 0046CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBC9(C)
|
:0046CBDC 33F6                    xor esi, esi
:0046CBDE 393578214B00            cmp dword ptr [004B2178], esi
:0046CBE4 7428                    je 0046CC0E
:0046CBE6 3935F0634B00            cmp dword ptr [004B63F0], esi
:0046CBEC 7E20                    jle 0046CC0E
:0046CBEE BF103D4B00              mov edi, 004B3D10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CC0C(C)
|
:0046CBF3 6810394B00              push 004B3910
:0046CBF8 53                      push ebx
:0046CBF9 6A00                    push 00000000
:0046CBFB FF37                    push dword ptr [edi]
:0046CBFD E88A020000              call 0046CE8C
:0046CC02 46                      inc esi
:0046CC03 83C704                  add edi, 00000004
:0046CC06 3B35F0634B00            cmp esi, dword ptr [004B63F0]
:0046CC0C 7CE5                    jl 0046CBF3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CBE4(C), :0046CBEC(C)
|
:0046CC0E FF7508                  push [ebp+08]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046CC11 FF15B8864B00            Call dword ptr [004B86B8]
:0046CC17 8BF0                    mov esi, eax
:0046CC19 A1A42F4B00              mov eax, dword ptr [004B2FA4]
:0046CC1E 85C0                    test eax, eax
:0046CC20 740A                    je 0046CC2C
:0046CC22 6A00                    push 00000000
:0046CC24 50                      push eax
:0046CC25 56                      push esi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:0046CC26 FF15F4844B00            Call dword ptr [004B84F4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CC20(C)
|
:0046CC2C 56                      push esi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:0046CC2D FF15F0844B00            Call dword ptr [004B84F0]
:0046CC33 56                      push esi
:0046CC34 8BF8                    mov edi, eax
:0046CC36 FF7508                  push [ebp+08]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046CC39 FF15BC864B00            Call dword ptr [004B86BC]
:0046CC3F 85FF                    test edi, edi
:0046CC41 740D                    je 0046CC50
:0046CC43 6A01                    push 00000001
:0046CC45 6A00                    push 00000000
:0046CC47 FF7508                  push [ebp+08]

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:0046CC4A FF15CC864B00            Call dword ptr [004B86CC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CC41(C)
|
:0046CC50 8BC7                    mov eax, edi
:0046CC52 EB41                    jmp 0046CC95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBBE(C)
|
:0046CC54 832580474B00FD          and dword ptr [004B4780], FFFFFFFD
:0046CC5B EB19                    jmp 0046CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBB7(C)
|
:0046CC5D 830D80474B0002          or dword ptr [004B4780], 00000002
:0046CC64 EB10                    jmp 0046CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBAF(C)
|
:0046CC66 832580474B00FE          and dword ptr [004B4780], FFFFFFFE
:0046CC6D EB07                    jmp 0046CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBA8(C)
|
:0046CC6F 830D80474B0001          or dword ptr [004B4780], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CA06(C), :0046CA2E(U), :0046CA35(C), :0046CA41(C), :0046CA67(U)
|:0046CA7F(C), :0046CA9E(C), :0046CB31(C), :0046CB68(C), :0046CB81(U)
|:0046CBCD(C), :0046CBD6(C), :0046CC5B(U), :0046CC64(U), :0046CC6D(U)
|
:0046CC76 FF7514                  push [ebp+14]
:0046CC79 57                      push edi
:0046CC7A 56                      push esi
:0046CC7B FF7508                  push [ebp+08]

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0046CC7E FF15DC864B00            Call dword ptr [004B86DC]
:0046CC84 EB0F                    jmp 0046CC95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB9D(C)
|
:0046CC86 FF7514                  push [ebp+14]
:0046CC89 FF7510                  push [ebp+10]
:0046CC8C E809000000              call 0046CC9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB91(U)
|
:0046CC91 59                      pop ecx
:0046CC92 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CA1D(U), :0046CA92(U), :0046CB1E(U), :0046CB28(C), :0046CB3E(C)
|:0046CB55(U)
|
:0046CC93 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CC52(U), :0046CC84(U)
|
:0046CC95 5F                      pop edi
:0046CC96 5E                      pop esi
:0046CC97 5B                      pop ebx
:0046CC98 C9                      leave
:0046CC99 C3                      ret



* Referenced by a CALL at Address:
|:0046CC8C   
|
:0046CC9A 8A442404                mov al, byte ptr [esp+04]
:0046CC9E 6625FF00                and ax, 00FF
:0046CCA2 50                      push eax
:0046CCA3 E802000000              call 0046CCAA
:0046CCA8 59                      pop ecx
:0046CCA9 C3                      ret



* Referenced by a CALL at Addresses:
|:0046CCA3   , :0046CD4F   
|
:0046CCAA 833DE4634B0010          cmp dword ptr [004B63E4], 00000010
:0046CCB1 7D21                    jge 0046CCD4
:0046CCB3 A1E8634B00              mov eax, dword ptr [004B63E8]
:0046CCB8 668B4C2404              mov cx, word ptr [esp+04]
:0046CCBD 66890C4588474B00        mov word ptr [2*eax+004B4788], cx
:0046CCC5 40                      inc eax
:0046CCC6 83E00F                  and eax, 0000000F
:0046CCC9 FF05E4634B00            inc dword ptr [004B63E4]
:0046CCCF A3E8634B00              mov dword ptr [004B63E8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CCB1(C)
|
:0046CCD4 C3                      ret

* Referenced by a CALL at Address:
|:0046CB8C   
|
:0046CCD5 8B442404                mov eax, dword ptr [esp+04]
:0046CCD9 33C9                    xor ecx, ecx
:0046CCDB 663D7000                cmp ax, 0070
:0046CCDF 7212                    jb 0046CCF3
:0046CCE1 663D7900                cmp ax, 0079
:0046CCE5 770C                    ja 0046CCF3
:0046CCE7 83E00F                  and eax, 0000000F
:0046CCEA 05003B0000              add eax, 00003B00
:0046CCEF 8BC8                    mov ecx, eax
:0046CCF1 EB56                    jmp 0046CD49

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CCDF(C), :0046CCE5(C)
|
:0046CCF3 0FB7C0                  movzx eax, ax
:0046CCF6 83C0DF                  add eax, FFFFFFDF
:0046CCF9 83F80D                  cmp eax, 0000000D
:0046CCFC 774B                    ja 0046CD49
:0046CCFE FF248556CD4600          jmp dword ptr [4*eax+0046CD56]
:0046CD05 B900490000              mov ecx, 00004900
:0046CD0A EB3D                    jmp 0046CD49
:0046CD0C B900510000              mov ecx, 00005100
:0046CD11 EB36                    jmp 0046CD49
:0046CD13 B9004F0000              mov ecx, 00004F00
:0046CD18 EB2F                    jmp 0046CD49
:0046CD1A B900470000              mov ecx, 00004700
:0046CD1F EB28                    jmp 0046CD49
:0046CD21 B9004B0000              mov ecx, 00004B00
:0046CD26 EB21                    jmp 0046CD49
:0046CD28 B900480000              mov ecx, 00004800
:0046CD2D EB1A                    jmp 0046CD49
:0046CD2F B9004D0000              mov ecx, 00004D00
:0046CD34 EB13                    jmp 0046CD49

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:5000, "iOl"
                                  |
:0046CD36 B900500000              mov ecx, 00005000
:0046CD3B EB0C                    jmp 0046CD49
:0046CD3D B900520000              mov ecx, 00005200
:0046CD42 EB05                    jmp 0046CD49
:0046CD44 B900530000              mov ecx, 00005300

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CCF1(U), :0046CCFC(C), :0046CD0A(U), :0046CD11(U), :0046CD18(U)
|:0046CD1F(U), :0046CD26(U), :0046CD2D(U), :0046CD34(U), :0046CD3B(U)
|:0046CD42(U)
|
:0046CD49 6685C9                  test cx, cx
:0046CD4C 7407                    je 0046CD55
:0046CD4E 51                      push ecx
:0046CD4F E856FFFFFF              call 0046CCAA
:0046CD54 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CD4C(C)
|
:0046CD55 C3                      ret

:0046CD56 05CD4600                DWORD 0046CD05
:0046CD5A 0CCD4600                DWORD 0046CD0C
:0046CD5E 13CD4600                DWORD 0046CD13
:0046CD62 1ACD4600                DWORD 0046CD1A
:0046CD66 21CD4600                DWORD 0046CD21
:0046CD6A 28CD4600                DWORD 0046CD28
:0046CD6E 2FCD4600                DWORD 0046CD2F
:0046CD72 36CD4600                DWORD 0046CD36
:0046CD76 49CD4600                DWORD 0046CD49
:0046CD7A 49CD4600                DWORD 0046CD49
:0046CD7E 49CD4600                DWORD 0046CD49
:0046CD82 49CD4600                DWORD 0046CD49
:0046CD86 3DCD4600                DWORD 0046CD3D
:0046CD8A 44CD4600                DWORD 0046CD44



* Referenced by a CALL at Addresses:
|:00426094   , :004264E8   
|
:0046CD8E 833DF8634B0000          cmp dword ptr [004B63F8], 00000000
:0046CD95 7530                    jne 0046CDC7
:0046CD97 8325DC634B0000          and dword ptr [004B63DC], 00000000
:0046CD9E 56                      push esi
:0046CD9F 8B742408                mov esi, dword ptr [esp+08]
:0046CDA3 FF3548624B00            push dword ptr [004B6248]
:0046CDA9 C705F8634B0001000000    mov dword ptr [004B63F8], 00000001
:0046CDB3 89357C374B00            mov dword ptr [004B377C], esi

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:0046CDB9 FF15A4874B00            Call dword ptr [004B87A4]
:0046CDBF 56                      push esi

* Reference To: KERNEL32.ExitProcess, Ord:006Bh
                                  |
:0046CDC0 FF1524864B00            Call dword ptr [004B8624]
:0046CDC6 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CD95(C)
|
:0046CDC7 C3                      ret

* Referenced by a CALL at Address:
|:0046C961   
|
:0046CDC8 56                      push esi
:0046CDC9 57                      push edi
:0046CDCA 6A00                    push 00000000

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046CDCC FF15B8864B00            Call dword ptr [004B86B8]
:0046CDD2 8BF8                    mov edi, eax
:0046CDD4 57                      push edi

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:0046CDD5 FF15A0844B00            Call dword ptr [004B84A0]
:0046CDDB 8BF0                    mov esi, eax
:0046CDDD 85F6                    test esi, esi
:0046CDDF 7409                    je 0046CDEA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046CDE1 6A03                    push 00000003
:0046CDE3 56                      push esi

* Reference To: GDI32.SetStretchBltMode, Ord:016Eh
                                  |
:0046CDE4 FF1504854B00            Call dword ptr [004B8504]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CDDF(C)
|
:0046CDEA 57                      push edi
:0046CDEB 6A00                    push 00000000

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046CDED FF15BC864B00            Call dword ptr [004B86BC]
:0046CDF3 8BC6                    mov eax, esi
:0046CDF5 5F                      pop edi
:0046CDF6 5E                      pop esi
:0046CDF7 C3                      ret



* Referenced by a CALL at Address:
|:0046C8FD   
|
:0046CDF8 53                      push ebx
:0046CDF9 33DB                    xor ebx, ebx
:0046CDFB 56                      push esi
:0046CDFC 53                      push ebx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046CDFD FF15B8864B00            Call dword ptr [004B86B8]
:0046CE03 8BF0                    mov esi, eax

* Possible Reference to String Resource ID=00012: ""
                                  |
:0046CE05 6A0C                    push 0000000C
:0046CE07 56                      push esi

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:0046CE08 FF15D0844B00            Call dword ptr [004B84D0]
:0046CE0E 56                      push esi
:0046CE0F 53                      push ebx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046CE10 FF15BC864B00            Call dword ptr [004B86BC]
:0046CE16 6A01                    push 00000001
:0046CE18 8B4C2410                mov ecx, dword ptr [esp+10]
:0046CE1C 58                      pop eax
:0046CE1D 5E                      pop esi
:0046CE1E 895910                  mov dword ptr [ecx+10], ebx
:0046CE21 895914                  mov dword ptr [ecx+14], ebx
:0046CE24 895918                  mov dword ptr [ecx+18], ebx
:0046CE27 89591C                  mov dword ptr [ecx+1C], ebx
:0046CE2A 895920                  mov dword ptr [ecx+20], ebx
:0046CE2D 895924                  mov dword ptr [ecx+24], ebx
:0046CE30 885928                  mov byte ptr [ecx+28], bl
:0046CE33 88592A                  mov byte ptr [ecx+2A], bl
:0046CE36 885929                  mov byte ptr [ecx+29], bl
:0046CE39 88592B                  mov byte ptr [ecx+2B], bl
:0046CE3C C70128000000            mov dword ptr [ecx], 00000028
:0046CE42 894104                  mov dword ptr [ecx+04], eax
:0046CE45 894108                  mov dword ptr [ecx+08], eax
:0046CE48 6689410C                mov word ptr [ecx+0C], ax
:0046CE4C 66C7410E0800            mov [ecx+0E], 0008
:0046CE52 5B                      pop ebx
:0046CE53 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046C978   
|
:0046CE56 33C0                    xor eax, eax
:0046CE58 50                      push eax
:0046CE59 50                      push eax
:0046CE5A FF742414                push [esp+14]
:0046CE5E 50                      push eax
:0046CE5F FF742418                push [esp+18]
:0046CE63 FF742418                push [esp+18]

* Reference To: GDI32.CreateDIBSection, Ord:0024h
                                  |
:0046CE67 FF1508854B00            Call dword ptr [004B8508]
:0046CE6D C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0046A74E   , :0046A7E4   
|
:0046CE70 55                      push ebp
:0046CE71 8BEC                    mov ebp, esp
:0046CE73 83EC18                  sub esp, 00000018
:0046CE76 8D45E8                  lea eax, dword ptr [ebp-18]
:0046CE79 50                      push eax
:0046CE7A 6A18                    push 00000018
:0046CE7C FF7508                  push [ebp+08]

* Reference To: GDI32.GetObjectA, Ord:00EAh
                                  |
:0046CE7F FF15F8844B00            Call dword ptr [004B84F8]
:0046CE85 8B45FC                  mov eax, dword ptr [ebp-04]
:0046CE88 C9                      leave
:0046CE89 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0046A437   , :0046A658   , :0046A814   , :0046C458   , :0046CBFD   
|
:0046CE8C FF742410                push [esp+10]
:0046CE90 FF742410                push [esp+10]
:0046CE94 FF742410                push [esp+10]
:0046CE98 FF742410                push [esp+10]

* Reference To: GDI32.SetDIBColorTable, Ord:0156h
                                  |
:0046CE9C FF15FC844B00            Call dword ptr [004B84FC]
:0046CEA2 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0046A6B5   
|
:0046CEA5 55                      push ebp
:0046CEA6 8BEC                    mov ebp, esp
:0046CEA8 682000CC00              push 00CC0020
:0046CEAD FF7524                  push [ebp+24]
:0046CEB0 FF7520                  push [ebp+20]
:0046CEB3 FF751C                  push [ebp+1C]
:0046CEB6 FF7518                  push [ebp+18]
:0046CEB9 FF7514                  push [ebp+14]
:0046CEBC FF7510                  push [ebp+10]
:0046CEBF FF750C                  push [ebp+0C]
:0046CEC2 FF7508                  push [ebp+08]

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:0046CEC5 FF1598844B00            Call dword ptr [004B8498]
:0046CECB 5D                      pop ebp
:0046CECC C22000                  ret 0020



* Referenced by a CALL at Addresses:
|:0046A3C6   , :0046AB2D   
|
:0046CECF 55                      push ebp
:0046CED0 8BEC                    mov ebp, esp
:0046CED2 81EC08040000            sub esp, 00000408
:0046CED8 53                      push ebx
:0046CED9 56                      push esi
:0046CEDA BB00010000              mov ebx, 00000100
:0046CEDF 57                      push edi
:0046CEE0 8BCB                    mov ecx, ebx
:0046CEE2 33C0                    xor eax, eax
:0046CEE4 8DBDFCFBFFFF            lea edi, dword ptr [ebp+FFFFFBFC]
:0046CEEA 66C785F8FBFFFF0003      mov word ptr [ebp+FFFFFBF8], 0300
:0046CEF3 66899DFAFBFFFF          mov word ptr [ebp+FFFFFBFA], bx
:0046CEFA 50                      push eax
:0046CEFB F3                      repz
:0046CEFC AB                      stosd

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046CEFD FF15B8864B00            Call dword ptr [004B86B8]
:0046CF03 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046CF06 8B5508                  mov edx, dword ptr [ebp+08]
:0046CF09 6A18                    push 00000018
:0046CF0B 50                      push eax
:0046CF0C 8945FC                  mov dword ptr [ebp-04], eax
:0046CF0F 8D7411FF                lea esi, dword ptr [ecx+edx-01]

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:0046CF13 FF15D0844B00            Call dword ptr [004B84D0]
:0046CF19 99                      cdq
:0046CF1A 2BC2                    sub eax, edx
:0046CF1C 8BF8                    mov edi, eax
:0046CF1E 8D85FCFBFFFF            lea eax, dword ptr [ebp+FFFFFBFC]
:0046CF24 50                      push eax
:0046CF25 53                      push ebx
:0046CF26 6A00                    push 00000000
:0046CF28 FF75FC                  push [ebp-04]
:0046CF2B D1FF                    sar edi, 1

* Reference To: GDI32.GetSystemPaletteEntries, Ord:00FCh
                                  |
:0046CF2D FF1588844B00            Call dword ptr [004B8488]
:0046CF33 397D08                  cmp dword ptr [ebp+08], edi
:0046CF36 7D03                    jge 0046CF3B
:0046CF38 897D08                  mov dword ptr [ebp+08], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF36(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046CF3B B8FF000000              mov eax, 000000FF
:0046CF40 2BC7                    sub eax, edi
:0046CF42 3BF0                    cmp esi, eax
:0046CF44 7E02                    jle 0046CF48
:0046CF46 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF44(C)
|
:0046CF48 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046CF4B 33D2                    xor edx, edx
:0046CF4D 85C9                    test ecx, ecx
:0046CF4F 7E11                    jle 0046CF62
:0046CF51 8D85FFFBFFFF            lea eax, dword ptr [ebp+FFFFFBFF]
:0046CF57 8BD1                    mov edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF60(C)
|
:0046CF59 802000                  and byte ptr [eax], 00
:0046CF5C 83C004                  add eax, 00000004
:0046CF5F 49                      dec ecx
:0046CF60 75F7                    jne 0046CF59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF4F(C)
|
:0046CF62 3BD6                    cmp edx, esi
:0046CF64 7F5D                    jg 0046CFC3
:0046CF66 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046CF69 8D9DFCFBFFFF            lea ebx, dword ptr [ebp+FFFFFBFC]
:0046CF6F 2BD9                    sub ebx, ecx
:0046CF71 8DBDFBFBFFFF            lea edi, dword ptr [ebp+FFFFFBFB]
:0046CF77 895D0C                  mov dword ptr [ebp+0C], ebx
:0046CF7A 8D9DFDFBFFFF            lea ebx, dword ptr [ebp+FFFFFBFD]
:0046CF80 2BD9                    sub ebx, ecx
:0046CF82 2BF2                    sub esi, edx
:0046CF84 895D10                  mov dword ptr [ebp+10], ebx
:0046CF87 8D9DFEFBFFFF            lea ebx, dword ptr [ebp+FFFFFBFE]
:0046CF8D 2BF9                    sub edi, ecx
:0046CF8F 2BD9                    sub ebx, ecx
:0046CF91 46                      inc esi
:0046CF92 8D449101                lea eax, dword ptr [ecx+4*edx+01]
:0046CF96 897508                  mov dword ptr [ebp+08], esi
:0046CF99 03D6                    add edx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CFBC(C)
|
:0046CF9B 8A4801                  mov cl, byte ptr [eax+01]
:0046CF9E 8B750C                  mov esi, dword ptr [ebp+0C]
:0046CFA1 880C07                  mov byte ptr [edi+eax], cl
:0046CFA4 8A08                    mov cl, byte ptr [eax]
:0046CFA6 880C06                  mov byte ptr [esi+eax], cl
:0046CFA9 8B7510                  mov esi, dword ptr [ebp+10]
:0046CFAC 8A48FF                  mov cl, byte ptr [eax-01]
:0046CFAF 880C06                  mov byte ptr [esi+eax], cl
:0046CFB2 C6040301                mov byte ptr [ebx+eax], 01
:0046CFB6 83C004                  add eax, 00000004
:0046CFB9 FF4D08                  dec [ebp+08]
:0046CFBC 75DD                    jne 0046CF9B
:0046CFBE BB00010000              mov ebx, 00000100

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF64(C)
|
:0046CFC3 3BD3                    cmp edx, ebx
:0046CFC5 7D12                    jge 0046CFD9
:0046CFC7 8D8495FFFBFFFF          lea eax, dword ptr [ebp+4*edx-00000401]
:0046CFCE 2BDA                    sub ebx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CFD7(C)
|
:0046CFD0 802000                  and byte ptr [eax], 00
:0046CFD3 83C004                  add eax, 00000004
:0046CFD6 4B                      dec ebx
:0046CFD7 75F7                    jne 0046CFD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CFC5(C)
|
:0046CFD9 FF75FC                  push [ebp-04]
:0046CFDC 6A00                    push 00000000

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046CFDE FF15BC864B00            Call dword ptr [004B86BC]
:0046CFE4 8D85F8FBFFFF            lea eax, dword ptr [ebp+FFFFFBF8]
:0046CFEA 50                      push eax

* Reference To: GDI32.CreatePalette, Ord:0035h
                                  |
:0046CFEB FF1584844B00            Call dword ptr [004B8484]
:0046CFF1 5F                      pop edi
:0046CFF2 5E                      pop esi
:0046CFF3 5B                      pop ebx
:0046CFF4 C9                      leave
:0046CFF5 C3                      ret



* Referenced by a CALL at Addresses:
|:0046A3B5   , :0046AB1C   
|
:0046CFF6 55                      push ebp
:0046CFF7 8BEC                    mov ebp, esp
:0046CFF9 81EC08040000            sub esp, 00000408
:0046CFFF 53                      push ebx
:0046D000 56                      push esi
:0046D001 BA00010000              mov edx, 00000100
:0046D006 57                      push edi
:0046D007 8BCA                    mov ecx, edx
:0046D009 33C0                    xor eax, eax
:0046D00B 8DBDFCFBFFFF            lea edi, dword ptr [ebp+FFFFFBFC]
:0046D011 66C785F8FBFFFF0003      mov word ptr [ebp+FFFFFBF8], 0300
:0046D01A 668995FAFBFFFF          mov word ptr [ebp+FFFFFBFA], dx
:0046D021 33DB                    xor ebx, ebx
:0046D023 F3                      repz
:0046D024 AB                      stosd
:0046D025 8D85FDFBFFFF            lea eax, dword ptr [ebp+FFFFFBFD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D03B(C)
|
:0046D02B 8858FF                  mov byte ptr [eax-01], bl
:0046D02E 8818                    mov byte ptr [eax], bl
:0046D030 885801                  mov byte ptr [eax+01], bl
:0046D033 C6400204                mov [eax+02], 04
:0046D037 83C004                  add eax, 00000004
:0046D03A 4A                      dec edx
:0046D03B 75EE                    jne 0046D02B
:0046D03D 53                      push ebx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046D03E FF15B8864B00            Call dword ptr [004B86B8]
:0046D044 8BF8                    mov edi, eax
:0046D046 8D85F8FBFFFF            lea eax, dword ptr [ebp+FFFFFBF8]
:0046D04C 50                      push eax

* Reference To: GDI32.CreatePalette, Ord:0035h
                                  |
:0046D04D FF1584844B00            Call dword ptr [004B8484]

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:0046D053 8B35F4844B00            mov esi, dword ptr [004B84F4]
:0046D059 53                      push ebx
:0046D05A 50                      push eax
:0046D05B 57                      push edi
:0046D05C FFD6                    call esi
:0046D05E 57                      push edi
:0046D05F 8945FC                  mov dword ptr [ebp-04], eax

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:0046D062 FF15F0844B00            Call dword ptr [004B84F0]
:0046D068 53                      push ebx
:0046D069 FF75FC                  push [ebp-04]
:0046D06C 57                      push edi
:0046D06D FFD6                    call esi
:0046D06F 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0046D070 FF158C844B00            Call dword ptr [004B848C]
:0046D076 57                      push edi
:0046D077 53                      push ebx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046D078 FF15BC864B00            Call dword ptr [004B86BC]
:0046D07E 5F                      pop edi
:0046D07F 5E                      pop esi
:0046D080 5B                      pop ebx
:0046D081 C9                      leave
:0046D082 C3                      ret



* Referenced by a CALL at Address:
|:0046AF83   
|
:0046D083 55                      push ebp
:0046D084 8BEC                    mov ebp, esp
:0046D086 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D089 0FAF4508                imul eax, dword ptr [ebp+08]
:0046D08D 837D1407                cmp dword ptr [ebp+14], 00000007
:0046D091 50                      push eax
:0046D092 7504                    jne 0046D098
:0046D094 6A00                    push 00000000
:0046D096 EB02                    jmp 0046D09A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D092(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046D098 6A10                    push 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D096(U)
|
:0046D09A FF7510                  push [ebp+10]
:0046D09D E8BE080000              call 0046D960
:0046D0A2 83C40C                  add esp, 0000000C
:0046D0A5 5D                      pop ebp
:0046D0A6 C3                      ret



* Referenced by a CALL at Address:
|:0046B8BE   
|
:0046D0A7 55                      push ebp
:0046D0A8 8BEC                    mov ebp, esp
:0046D0AA 53                      push ebx
:0046D0AB 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046D0AE 85DB                    test ebx, ebx
:0046D0B0 7E1E                    jle 0046D0D0
:0046D0B2 57                      push edi
:0046D0B3 8B7D18                  mov edi, dword ptr [ebp+18]
:0046D0B6 56                      push esi
:0046D0B7 0FB67514                movzx esi, byte ptr [ebp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D0CC(C)
|
:0046D0BB FF7508                  push [ebp+08]
:0046D0BE 56                      push esi
:0046D0BF 57                      push edi
:0046D0C0 E89B080000              call 0046D960
:0046D0C5 037D10                  add edi, dword ptr [ebp+10]
:0046D0C8 83C40C                  add esp, 0000000C
:0046D0CB 4B                      dec ebx
:0046D0CC 75ED                    jne 0046D0BB
:0046D0CE 5E                      pop esi
:0046D0CF 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D0B0(C)
|
:0046D0D0 5B                      pop ebx
:0046D0D1 5D                      pop ebp
:0046D0D2 C3                      ret



* Referenced by a CALL at Addresses:
|:0046BD5F   , :0046C105   
|
:0046D0D3 55                      push ebp
:0046D0D4 8BEC                    mov ebp, esp
:0046D0D6 53                      push ebx
:0046D0D7 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046D0DA 85DB                    test ebx, ebx
:0046D0DC 7E20                    jle 0046D0FE
:0046D0DE 57                      push edi
:0046D0DF 8B7D18                  mov edi, dword ptr [ebp+18]
:0046D0E2 56                      push esi
:0046D0E3 8B751C                  mov esi, dword ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D0FA(C)
|
:0046D0E6 FF7508                  push [ebp+08]
:0046D0E9 57                      push edi
:0046D0EA 56                      push esi
:0046D0EB E8E0080000              call 0046D9D0
:0046D0F0 037510                  add esi, dword ptr [ebp+10]
:0046D0F3 037D14                  add edi, dword ptr [ebp+14]
:0046D0F6 83C40C                  add esp, 0000000C
:0046D0F9 4B                      dec ebx
:0046D0FA 75EA                    jne 0046D0E6
:0046D0FC 5E                      pop esi
:0046D0FD 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D0DC(C)
|
:0046D0FE 5B                      pop ebx
:0046D0FF 5D                      pop ebp
:0046D100 C3                      ret



* Referenced by a CALL at Addresses:
|:0046BD2B   , :0046C0D1   
|
:0046D101 55                      push ebp
:0046D102 8BEC                    mov ebp, esp
:0046D104 8B4510                  mov eax, dword ptr [ebp+10]
:0046D107 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D10A 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D10D 2B4508                  sub eax, dword ptr [ebp+08]
:0046D110 2B4D08                  sub ecx, dword ptr [ebp+08]
:0046D113 85D2                    test edx, edx
:0046D115 7E28                    jle 0046D13F
:0046D117 57                      push edi
:0046D118 8B7D18                  mov edi, dword ptr [ebp+18]
:0046D11B 56                      push esi
:0046D11C 8B751C                  mov esi, dword ptr [ebp+1C]
:0046D11F 53                      push ebx
:0046D120 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D13A(C)
|
:0046D123 8B5508                  mov edx, dword ptr [ebp+08]
:0046D126 85D2                    test edx, edx
:0046D128 7E09                    jle 0046D133

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D131(C)
|
:0046D12A 8A1F                    mov bl, byte ptr [edi]
:0046D12C 201E                    and byte ptr [esi], bl
:0046D12E 47                      inc edi
:0046D12F 46                      inc esi
:0046D130 4A                      dec edx
:0046D131 75F7                    jne 0046D12A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D128(C)
|
:0046D133 03F0                    add esi, eax
:0046D135 03F9                    add edi, ecx
:0046D137 FF4D10                  dec [ebp+10]
:0046D13A 75E7                    jne 0046D123
:0046D13C 5B                      pop ebx
:0046D13D 5E                      pop esi
:0046D13E 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D115(C)
|
:0046D13F 5D                      pop ebp
:0046D140 C3                      ret



* Referenced by a CALL at Addresses:
|:0046BD11   , :0046C0B7   
|
:0046D141 55                      push ebp
:0046D142 8BEC                    mov ebp, esp
:0046D144 8B4510                  mov eax, dword ptr [ebp+10]
:0046D147 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D14A 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D14D 2B4508                  sub eax, dword ptr [ebp+08]
:0046D150 2B4D08                  sub ecx, dword ptr [ebp+08]
:0046D153 85D2                    test edx, edx
:0046D155 7E28                    jle 0046D17F
:0046D157 57                      push edi
:0046D158 8B7D18                  mov edi, dword ptr [ebp+18]
:0046D15B 56                      push esi
:0046D15C 8B751C                  mov esi, dword ptr [ebp+1C]
:0046D15F 53                      push ebx
:0046D160 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D17A(C)
|
:0046D163 8B5508                  mov edx, dword ptr [ebp+08]
:0046D166 85D2                    test edx, edx
:0046D168 7E09                    jle 0046D173

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D171(C)
|
:0046D16A 8A1F                    mov bl, byte ptr [edi]
:0046D16C 081E                    or byte ptr [esi], bl
:0046D16E 47                      inc edi
:0046D16F 46                      inc esi
:0046D170 4A                      dec edx
:0046D171 75F7                    jne 0046D16A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D168(C)
|
:0046D173 03F0                    add esi, eax
:0046D175 03F9                    add edi, ecx
:0046D177 FF4D10                  dec [ebp+10]
:0046D17A 75E7                    jne 0046D163
:0046D17C 5B                      pop ebx
:0046D17D 5E                      pop esi
:0046D17E 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D155(C)
|
:0046D17F 5D                      pop ebp
:0046D180 C3                      ret



* Referenced by a CALL at Addresses:
|:0046BD45   , :0046C0EB   
|
:0046D181 55                      push ebp
:0046D182 8BEC                    mov ebp, esp
:0046D184 8B4510                  mov eax, dword ptr [ebp+10]
:0046D187 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D18A 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D18D 2B4508                  sub eax, dword ptr [ebp+08]
:0046D190 2B4D08                  sub ecx, dword ptr [ebp+08]
:0046D193 85D2                    test edx, edx
:0046D195 7E31                    jle 0046D1C8
:0046D197 57                      push edi
:0046D198 8B7D18                  mov edi, dword ptr [ebp+18]
:0046D19B 56                      push esi
:0046D19C 8B751C                  mov esi, dword ptr [ebp+1C]
:0046D19F 53                      push ebx
:0046D1A0 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D1C3(C)
|
:0046D1A3 8B5508                  mov edx, dword ptr [ebp+08]
:0046D1A6 85D2                    test edx, edx
:0046D1A8 7E12                    jle 0046D1BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D1BA(C)
|
:0046D1AA 837D2007                cmp dword ptr [ebp+20], 00000007
:0046D1AE 7403                    je 0046D1B3
:0046D1B0 80260F                  and byte ptr [esi], 0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D1AE(C)
|
:0046D1B3 8A1F                    mov bl, byte ptr [edi]
:0046D1B5 301E                    xor byte ptr [esi], bl
:0046D1B7 47                      inc edi
:0046D1B8 46                      inc esi
:0046D1B9 4A                      dec edx
:0046D1BA 75EE                    jne 0046D1AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D1A8(C)
|
:0046D1BC 03F0                    add esi, eax
:0046D1BE 03F9                    add edi, ecx
:0046D1C0 FF4D10                  dec [ebp+10]
:0046D1C3 75DE                    jne 0046D1A3
:0046D1C5 5B                      pop ebx
:0046D1C6 5E                      pop esi
:0046D1C7 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D195(C)
|
:0046D1C8 5D                      pop ebp
:0046D1C9 C3                      ret



* Referenced by a CALL at Address:
|:0046BCF7   
|
:0046D1CA 55                      push ebp
:0046D1CB 8BEC                    mov ebp, esp
:0046D1CD 8B4510                  mov eax, dword ptr [ebp+10]
:0046D1D0 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D1D3 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D1D6 2B4508                  sub eax, dword ptr [ebp+08]
:0046D1D9 2B4D08                  sub ecx, dword ptr [ebp+08]
:0046D1DC 85D2                    test edx, edx
:0046D1DE 7E3C                    jle 0046D21C
:0046D1E0 57                      push edi
:0046D1E1 8B7D1C                  mov edi, dword ptr [ebp+1C]
:0046D1E4 56                      push esi
:0046D1E5 8B7518                  mov esi, dword ptr [ebp+18]
:0046D1E8 53                      push ebx
:0046D1E9 895514                  mov dword ptr [ebp+14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D217(C)
|
:0046D1EC 8B5508                  mov edx, dword ptr [ebp+08]
:0046D1EF 85D2                    test edx, edx
:0046D1F1 7E1D                    jle 0046D210
:0046D1F3 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D20E(C)
|
:0046D1F6 8A16                    mov dl, byte ptr [esi]
:0046D1F8 837D2007                cmp dword ptr [ebp+20], 00000007
:0046D1FC 8ADA                    mov bl, dl
:0046D1FE 7403                    je 0046D203
:0046D200 80E30F                  and bl, 0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D1FE(C)
|
:0046D203 84DB                    test bl, bl
:0046D205 7402                    je 0046D209
:0046D207 8817                    mov byte ptr [edi], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D205(C)
|
:0046D209 47                      inc edi
:0046D20A 46                      inc esi
:0046D20B FF4D10                  dec [ebp+10]
:0046D20E 75E6                    jne 0046D1F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D1F1(C)
|
:0046D210 03F8                    add edi, eax
:0046D212 03F1                    add esi, ecx
:0046D214 FF4D14                  dec [ebp+14]
:0046D217 75D3                    jne 0046D1EC
:0046D219 5B                      pop ebx
:0046D21A 5E                      pop esi
:0046D21B 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D1DE(C)
|
:0046D21C 5D                      pop ebp
:0046D21D C3                      ret



* Referenced by a CALL at Addresses:
|:0046BE77   , :0046BEC1   
|
:0046D21E 55                      push ebp
:0046D21F 8BEC                    mov ebp, esp
:0046D221 53                      push ebx
:0046D222 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046D225 85DB                    test ebx, ebx
:0046D227 7E20                    jle 0046D249
:0046D229 57                      push edi
:0046D22A 8B7D18                  mov edi, dword ptr [ebp+18]
:0046D22D 56                      push esi
:0046D22E 8B751C                  mov esi, dword ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D245(C)
|
:0046D231 FF7508                  push [ebp+08]
:0046D234 57                      push edi
:0046D235 56                      push esi
:0046D236 E895070000              call 0046D9D0
:0046D23B 037514                  add esi, dword ptr [ebp+14]
:0046D23E 037D10                  add edi, dword ptr [ebp+10]
:0046D241 83C40C                  add esp, 0000000C
:0046D244 4B                      dec ebx
:0046D245 75EA                    jne 0046D231
:0046D247 5E                      pop esi
:0046D248 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D227(C)
|
:0046D249 5B                      pop ebx
:0046D24A 5D                      pop ebp
:0046D24B C3                      ret



* Referenced by a CALL at Address:
|:0046C163   
|
:0046D24C 55                      push ebp
:0046D24D 8BEC                    mov ebp, esp
:0046D24F 51                      push ecx
:0046D250 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D253 85C0                    test eax, eax
:0046D255 7E6C                    jle 0046D2C3
:0046D257 57                      push edi
:0046D258 8B7D1C                  mov edi, dword ptr [ebp+1C]
:0046D25B 56                      push esi
:0046D25C 53                      push ebx
:0046D25D 8B5D08                  mov ebx, dword ptr [ebp+08]
:0046D260 89450C                  mov dword ptr [ebp+0C], eax
:0046D263 C1FB03                  sar ebx, 03
:0046D266 895DFC                  mov dword ptr [ebp-04], ebx
:0046D269 EB03                    jmp 0046D26E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D2BE(C)
|
:0046D26B 8B5DFC                  mov ebx, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D269(U)
|
:0046D26E 8B7520                  mov esi, dword ptr [ebp+20]
:0046D271 85DB                    test ebx, ebx
:0046D273 741E                    je 0046D293
:0046D275 7E1C                    jle 0046D293

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D291(C)
|
:0046D277 8A0F                    mov cl, byte ptr [edi]

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046D279 6A08                    push 00000008
:0046D27B 47                      inc edi
:0046D27C 5A                      pop edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D28E(C)
|
:0046D27D 8B4514                  mov eax, dword ptr [ebp+14]
:0046D280 F6C180                  test cl, 80
:0046D283 7503                    jne 0046D288
:0046D285 8B4518                  mov eax, dword ptr [ebp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D283(C)
|
:0046D288 8806                    mov byte ptr [esi], al
:0046D28A 46                      inc esi
:0046D28B D0E1                    shl cl, 1
:0046D28D 4A                      dec edx
:0046D28E 75ED                    jne 0046D27D
:0046D290 4B                      dec ebx
:0046D291 75E4                    jne 0046D277

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D273(C), :0046D275(C)
|
:0046D293 8B4508                  mov eax, dword ptr [ebp+08]
:0046D296 83E007                  and eax, 00000007
:0046D299 741A                    je 0046D2B5
:0046D29B 8A17                    mov dl, byte ptr [edi]
:0046D29D 47                      inc edi
:0046D29E 85C0                    test eax, eax
:0046D2A0 7E13                    jle 0046D2B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D2B3(C)
|
:0046D2A2 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D2A5 F6C280                  test dl, 80
:0046D2A8 7503                    jne 0046D2AD
:0046D2AA 8B4D18                  mov ecx, dword ptr [ebp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D2A8(C)
|
:0046D2AD 880E                    mov byte ptr [esi], cl
:0046D2AF 46                      inc esi
:0046D2B0 D0E2                    shl dl, 1
:0046D2B2 48                      dec eax
:0046D2B3 75ED                    jne 0046D2A2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D299(C), :0046D2A0(C)
|
:0046D2B5 8B4510                  mov eax, dword ptr [ebp+10]
:0046D2B8 014520                  add dword ptr [ebp+20], eax
:0046D2BB FF4D0C                  dec [ebp+0C]
:0046D2BE 75AB                    jne 0046D26B
:0046D2C0 5B                      pop ebx
:0046D2C1 5E                      pop esi
:0046D2C2 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D255(C)
|
:0046D2C3 C9                      leave
:0046D2C4 C3                      ret



* Referenced by a CALL at Address:
|:0046C148   
|
:0046D2C5 55                      push ebp
:0046D2C6 8BEC                    mov ebp, esp
:0046D2C8 51                      push ecx
:0046D2C9 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D2CC 85C0                    test eax, eax
:0046D2CE 7E64                    jle 0046D334
:0046D2D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D2D3 57                      push edi
:0046D2D4 8B7D1C                  mov edi, dword ptr [ebp+1C]
:0046D2D7 56                      push esi
:0046D2D8 C1F903                  sar ecx, 03
:0046D2DB 53                      push ebx
:0046D2DC 8A5D14                  mov bl, byte ptr [ebp+14]
:0046D2DF 894DFC                  mov dword ptr [ebp-04], ecx
:0046D2E2 89450C                  mov dword ptr [ebp+0C], eax
:0046D2E5 EB03                    jmp 0046D2EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D32F(C)
|
:0046D2E7 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D2E5(U)
|
:0046D2EA 8B5520                  mov edx, dword ptr [ebp+20]
:0046D2ED 85C9                    test ecx, ecx
:0046D2EF 7417                    je 0046D308
:0046D2F1 7E15                    jle 0046D308

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D306(C)
|
:0046D2F3 8A07                    mov al, byte ptr [edi]

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046D2F5 6A08                    push 00000008
:0046D2F7 47                      inc edi
:0046D2F8 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D303(C)
|
:0046D2F9 A880                    test al, 80
:0046D2FB 7402                    je 0046D2FF
:0046D2FD 881A                    mov byte ptr [edx], bl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D2FB(C)
|
:0046D2FF 42                      inc edx
:0046D300 D0E0                    shl al, 1
:0046D302 4E                      dec esi
:0046D303 75F4                    jne 0046D2F9
:0046D305 49                      dec ecx
:0046D306 75EB                    jne 0046D2F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D2EF(C), :0046D2F1(C)
|
:0046D308 8B4508                  mov eax, dword ptr [ebp+08]
:0046D30B 83E007                  and eax, 00000007
:0046D30E 7416                    je 0046D326
:0046D310 8A0F                    mov cl, byte ptr [edi]
:0046D312 47                      inc edi
:0046D313 85C0                    test eax, eax
:0046D315 7E0F                    jle 0046D326
:0046D317 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D324(C)
|
:0046D319 F6C180                  test cl, 80
:0046D31C 7402                    je 0046D320
:0046D31E 881A                    mov byte ptr [edx], bl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D31C(C)
|
:0046D320 42                      inc edx
:0046D321 D0E1                    shl cl, 1
:0046D323 4E                      dec esi
:0046D324 75F3                    jne 0046D319

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D30E(C), :0046D315(C)
|
:0046D326 8B4510                  mov eax, dword ptr [ebp+10]
:0046D329 014520                  add dword ptr [ebp+20], eax
:0046D32C FF4D0C                  dec [ebp+0C]
:0046D32F 75B6                    jne 0046D2E7
:0046D331 5B                      pop ebx
:0046D332 5E                      pop esi
:0046D333 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D2CE(C)
|
:0046D334 C9                      leave
:0046D335 C3                      ret



* Referenced by a CALL at Address:
|:0046BE89   
|
:0046D336 55                      push ebp
:0046D337 8BEC                    mov ebp, esp
:0046D339 51                      push ecx
:0046D33A 8B4508                  mov eax, dword ptr [ebp+08]
:0046D33D 56                      push esi
:0046D33E 8BF0                    mov esi, eax
:0046D340 83E001                  and eax, 00000001
:0046D343 8945FC                  mov dword ptr [ebp-04], eax
:0046D346 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D349 D1FE                    sar esi, 1
:0046D34B 85C0                    test eax, eax
:0046D34D 7E3D                    jle 0046D38C
:0046D34F 8B5510                  mov edx, dword ptr [ebp+10]
:0046D352 57                      push edi
:0046D353 8B7D14                  mov edi, dword ptr [ebp+14]
:0046D356 53                      push ebx
:0046D357 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D388(C)
|
:0046D35A 85F6                    test esi, esi
:0046D35C 7418                    je 0046D376
:0046D35E 7E16                    jle 0046D376
:0046D360 8BDE                    mov ebx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D374(C)
|
:0046D362 8A0A                    mov cl, byte ptr [edx]
:0046D364 8A4201                  mov al, byte ptr [edx+01]
:0046D367 42                      inc edx
:0046D368 240F                    and al, 0F
:0046D36A C0E104                  shl cl, 04
:0046D36D 02C1                    add al, cl
:0046D36F 42                      inc edx
:0046D370 8807                    mov byte ptr [edi], al
:0046D372 47                      inc edi
:0046D373 4B                      dec ebx
:0046D374 75EC                    jne 0046D362

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D35C(C), :0046D35E(C)
|
:0046D376 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046D37A 7409                    je 0046D385
:0046D37C 8A02                    mov al, byte ptr [edx]
:0046D37E 42                      inc edx
:0046D37F C0E004                  shl al, 04
:0046D382 8807                    mov byte ptr [edi], al
:0046D384 47                      inc edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D37A(C)
|
:0046D385 FF4D08                  dec [ebp+08]
:0046D388 75D0                    jne 0046D35A
:0046D38A 5B                      pop ebx
:0046D38B 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D34D(C)
|
:0046D38C 5E                      pop esi
:0046D38D C9                      leave
:0046D38E C3                      ret



* Referenced by a CALL at Address:
|:0046BC87   
|
:0046D38F 55                      push ebp
:0046D390 8BEC                    mov ebp, esp
:0046D392 8B4508                  mov eax, dword ptr [ebp+08]
:0046D395 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046D398 56                      push esi
:0046D399 8BF0                    mov esi, eax
:0046D39B D1FE                    sar esi, 1
:0046D39D 83E001                  and eax, 00000001
:0046D3A0 85C9                    test ecx, ecx
:0046D3A2 7E44                    jle 0046D3E8
:0046D3A4 8B5510                  mov edx, dword ptr [ebp+10]
:0046D3A7 57                      push edi
:0046D3A8 894D08                  mov dword ptr [ebp+08], ecx
:0046D3AB 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D3AE 53                      push ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D3E4(C)
|
:0046D3AF 85F6                    test esi, esi
:0046D3B1 741E                    je 0046D3D1
:0046D3B3 7E1C                    jle 0046D3D1
:0046D3B5 8BFE                    mov edi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D3CF(C)
|
:0046D3B7 8A1A                    mov bl, byte ptr [edx]
:0046D3B9 C0EB04                  shr bl, 04
:0046D3BC 80CB10                  or bl, 10
:0046D3BF 8819                    mov byte ptr [ecx], bl
:0046D3C1 8A1A                    mov bl, byte ptr [edx]
:0046D3C3 80E30F                  and bl, 0F
:0046D3C6 41                      inc ecx
:0046D3C7 80CB10                  or bl, 10
:0046D3CA 8819                    mov byte ptr [ecx], bl
:0046D3CC 41                      inc ecx
:0046D3CD 42                      inc edx
:0046D3CE 4F                      dec edi
:0046D3CF 75E6                    jne 0046D3B7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D3B1(C), :0046D3B3(C)
|
:0046D3D1 85C0                    test eax, eax
:0046D3D3 740C                    je 0046D3E1
:0046D3D5 8A1A                    mov bl, byte ptr [edx]
:0046D3D7 C0EB04                  shr bl, 04
:0046D3DA 80CB10                  or bl, 10
:0046D3DD 8819                    mov byte ptr [ecx], bl
:0046D3DF 41                      inc ecx
:0046D3E0 42                      inc edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D3D3(C)
|
:0046D3E1 FF4D08                  dec [ebp+08]
:0046D3E4 75C9                    jne 0046D3AF
:0046D3E6 5B                      pop ebx
:0046D3E7 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D3A2(C)
|
:0046D3E8 5E                      pop esi
:0046D3E9 5D                      pop ebp
:0046D3EA C3                      ret


:0046D3EB CC                      int 03
:0046D3EC CC                      int 03
:0046D3ED CC                      int 03
:0046D3EE CC                      int 03
:0046D3EF CC                      int 03

* Referenced by a CALL at Address:
|:0046D475   
|
:0046D3F0 A1CC7A4B00              mov eax, dword ptr [004B7ACC]
:0046D3F5 56                      push esi
:0046D3F6 50                      push eax
:0046D3F7 E814170000              call 0046EB10
:0046D3FC 8B0DC87A4B00            mov ecx, dword ptr [004B7AC8]
:0046D402 8B15CC7A4B00            mov edx, dword ptr [004B7ACC]
:0046D408 8BF1                    mov esi, ecx
:0046D40A 83C404                  add esp, 00000004
:0046D40D 2BF2                    sub esi, edx
:0046D40F 83C604                  add esi, 00000004
:0046D412 3BC6                    cmp eax, esi
:0046D414 7341                    jnb 0046D457
:0046D416 52                      push edx
:0046D417 E8F4160000              call 0046EB10
:0046D41C 8B0DCC7A4B00            mov ecx, dword ptr [004B7ACC]
:0046D422 83C404                  add esp, 00000004
:0046D425 83C010                  add eax, 00000010
:0046D428 50                      push eax
:0046D429 51                      push ecx
:0046D42A E801140000              call 0046E830
:0046D42F 83C408                  add esp, 00000008
:0046D432 85C0                    test eax, eax
:0046D434 7502                    jne 0046D438
:0046D436 5E                      pop esi
:0046D437 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D434(C)
|
:0046D438 8B15C87A4B00            mov edx, dword ptr [004B7AC8]
:0046D43E 8B35CC7A4B00            mov esi, dword ptr [004B7ACC]
:0046D444 2BD6                    sub edx, esi
:0046D446 A3CC7A4B00              mov dword ptr [004B7ACC], eax
:0046D44B C1FA02                  sar edx, 02
:0046D44E 8D0C90                  lea ecx, dword ptr [eax+4*edx]
:0046D451 890DC87A4B00            mov dword ptr [004B7AC8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D414(C)
|
:0046D457 8B442408                mov eax, dword ptr [esp+08]
:0046D45B 5E                      pop esi
:0046D45C 8901                    mov dword ptr [ecx], eax
:0046D45E 8B0DC87A4B00            mov ecx, dword ptr [004B7AC8]
:0046D464 83C104                  add ecx, 00000004
:0046D467 890DC87A4B00            mov dword ptr [004B7AC8], ecx
:0046D46D C3                      ret


:0046D46E 90                      nop
:0046D46F 90                      nop

* Referenced by a CALL at Addresses:
|:00404936   , :00407372   , :004075BA   , :00408D56   , :004137D6   
|:00413815   , :004146D6   , :00417046   , :004200F6   , :00420CF6   
|:00420D46   , :00425527   , :00425580   , :004255D6   , :0042562C   
|:00425682   , :004256D8   , :00425720   , :00425770   , :004257C9   
|:0042581F   , :00425867   , :004258A6   , :004258E5   , :00425924   
|:00425963   , :004259A2   , :004259E1   , :00425A20   , :00425A5F   
|:00425A9E   , :00425ADD   , :00425B1C   , :00425B5B   , :004296F4   
|:00439C26   , :0043D5F6   , :00441E26   , :00441E72   , :00444AC0   
|:00444BDA   , :00444D4F   , :00447A37   , :0045214C   , :0045218B   
|:004521CA   , :00452FA6   , :004546C6   , :0045A706   , :0045F1B5   
|:0045F1F4   , :0045F416   , :0045F455   , :004618C6   , :00461905   
|:0046469D   , :0046A273   
|
:0046D470 8B442404                mov eax, dword ptr [esp+04]
:0046D474 50                      push eax
:0046D475 E876FFFFFF              call 0046D3F0
:0046D47A 83C404                  add esp, 00000004
:0046D47D F7D8                    neg eax
:0046D47F 1BC0                    sbb eax, eax
:0046D481 F7D8                    neg eax
:0046D483 48                      dec eax
:0046D484 C3                      ret


:0046D485 90                      nop
:0046D486 90                      nop
:0046D487 90                      nop
:0046D488 90                      nop
:0046D489 90                      nop
:0046D48A 90                      nop
:0046D48B 90                      nop
:0046D48C 90                      nop
:0046D48D 90                      nop
:0046D48E 90                      nop
:0046D48F 90                      nop
:0046D490 6880000000              push 00000080
:0046D495 E8F60A0000              call 0046DF90
:0046D49A 83C404                  add esp, 00000004
:0046D49D A3CC7A4B00              mov dword ptr [004B7ACC], eax
:0046D4A2 85C0                    test eax, eax
:0046D4A4 750F                    jne 0046D4B5
:0046D4A6 6A18                    push 00000018
:0046D4A8 E853130000              call 0046E800
:0046D4AD A1CC7A4B00              mov eax, dword ptr [004B7ACC]
:0046D4B2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D4A4(C)
|
:0046D4B5 C70000000000            mov dword ptr [eax], 00000000
:0046D4BB A1CC7A4B00              mov eax, dword ptr [004B7ACC]
:0046D4C0 A3C87A4B00              mov dword ptr [004B7AC8], eax
:0046D4C5 C3                      ret


:0046D4C6 90                      nop
:0046D4C7 90                      nop
:0046D4C8 90                      nop
:0046D4C9 90                      nop
:0046D4CA 90                      nop
:0046D4CB 90                      nop
:0046D4CC 90                      nop
:0046D4CD 90                      nop
:0046D4CE 90                      nop
:0046D4CF 90                      nop

* Referenced by a CALL at Address:
|:0046F0FF   
|
:0046D4D0 55                      push ebp
:0046D4D1 8BEC                    mov ebp, esp
:0046D4D3 51                      push ecx
:0046D4D4 53                      push ebx
:0046D4D5 56                      push esi
:0046D4D6 57                      push edi
:0046D4D7 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D4DA 83C00C                  add eax, 0000000C
:0046D4DD 8945FC                  mov dword ptr [ebp-04], eax
:0046D4E0 648B1D00000000          mov ebx, dword ptr fs:[00000000]
:0046D4E7 8B03                    mov eax, dword ptr [ebx]
:0046D4E9 64A300000000            mov dword ptr fs:[00000000], eax
:0046D4EF 8B4508                  mov eax, dword ptr [ebp+08]
:0046D4F2 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046D4F5 8B63FC                  mov esp, dword ptr [ebx-04]
:0046D4F8 8B6DFC                  mov ebp, dword ptr [ebp-04]
:0046D4FB FFE0                    jmp eax
:0046D4FD 5F                      pop edi
:0046D4FE 5E                      pop esi
:0046D4FF 5B                      pop ebx
:0046D500 8BE5                    mov esp, ebp
:0046D502 5D                      pop ebp
:0046D503 C20800                  ret 0008


:0046D506 CC                      int 03
:0046D507 CC                      int 03
:0046D508 CC                      int 03
:0046D509 CC                      int 03
:0046D50A CC                      int 03
:0046D50B CC                      int 03
:0046D50C CC                      int 03
:0046D50D CC                      int 03
:0046D50E CC                      int 03
:0046D50F CC                      int 03

* Referenced by a CALL at Addresses:
|:0046F440   , :0046F45D   , :0046F4E3   
|
:0046D510 58                      pop eax
:0046D511 59                      pop ecx
:0046D512 870424                  xchg dword ptr [esp], eax
:0046D515 FFE0                    jmp eax
:0046D517 CC                      int 03
:0046D518 CC                      int 03
:0046D519 CC                      int 03
:0046D51A CC                      int 03
:0046D51B CC                      int 03
:0046D51C CC                      int 03
:0046D51D CC                      int 03
:0046D51E CC                      int 03
:0046D51F CC                      int 03

* Referenced by a CALL at Addresses:
|:0046D786   , :0046F0B1   
|
:0046D520 55                      push ebp
:0046D521 8BEC                    mov ebp, esp
:0046D523 83EC08                  sub esp, 00000008
:0046D526 53                      push ebx
:0046D527 56                      push esi
:0046D528 57                      push edi
:0046D529 64A100000000            mov eax, dword ptr fs:[00000000]
:0046D52F 8945F8                  mov dword ptr [ebp-08], eax

* Possible StringData Ref from Code Obj ->"EHUJd"
                                  |
:0046D532 C745FC4CD54600          mov [ebp-04], 0046D54C
:0046D539 6A00                    push 00000000
:0046D53B 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D53E 50                      push eax
:0046D53F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D542 51                      push ecx
:0046D543 8B5508                  mov edx, dword ptr [ebp+08]
:0046D546 52                      push edx

* Reference To: KERNEL32.RtlUnwind, Ord:01E5h
                                  |
:0046D547 E8B4610000              Call 00473700
:0046D54C 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D54F 8B4804                  mov ecx, dword ptr [eax+04]
:0046D552 83E1FD                  and ecx, FFFFFFFD
:0046D555 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D558 894A04                  mov dword ptr [edx+04], ecx
:0046D55B 64A100000000            mov eax, dword ptr fs:[00000000]
:0046D561 8B5DF8                  mov ebx, dword ptr [ebp-08]
:0046D564 8903                    mov dword ptr [ebx], eax
:0046D566 64891D00000000          mov dword ptr fs:[00000000], ebx
:0046D56D 5F                      pop edi
:0046D56E 5E                      pop esi
:0046D56F 5B                      pop ebx
:0046D570 8BE5                    mov esp, ebp
:0046D572 5D                      pop ebp
:0046D573 C20800                  ret 0008


:0046D576 CC                      int 03
:0046D577 CC                      int 03
:0046D578 CC                      int 03
:0046D579 CC                      int 03
:0046D57A CC                      int 03
:0046D57B CC                      int 03
:0046D57C CC                      int 03
:0046D57D CC                      int 03
:0046D57E CC                      int 03
:0046D57F CC                      int 03

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047371E(U), :00473731(U), :00473744(U), :00473757(U), :00473771(U)
|:00473787(U), :0047379D(U), :004737BE(U), :004737E1(U), :004737FE(U)
|:00473811(U), :00473824(U), :0047383E(U), :0047385E(U), :00473874(U)
|:00473887(U), :0047389D(U), :004738C1(U), :004738D7(U), :004738ED(U)
|:00473911(U), :00473927(U), :0047394A(U), :00473960(U), :00473976(U)
|:0047399A(U), :004739BA(U), :004739D0(U), :004739E6(U), :00473A01(U)
|:00473A17(U), :00473A2D(U), :00473A43(U), :00473A61(U), :00473A77(U)
|:00473A8D(U), :00473AA3(U), :00473AB9(U), :00473ACF(U), :00473AE5(U)
|:00473AFB(U), :00473B11(U), :00473B3D(U), :00473B5F(U), :00473B75(U)
|:00473B8B(U), :00473BA0(U), :00473BB6(U), :00473BD1(U), :00473BE7(U)
|:00473BFD(U), :00473C2D(U), :00473C4F(U), :00473C71(U), :00473C8E(U)
|
:0046D580 55                      push ebp
:0046D581 8BEC                    mov ebp, esp
:0046D583 83EC04                  sub esp, 00000004
:0046D586 53                      push ebx
:0046D587 56                      push esi
:0046D588 57                      push edi
:0046D589 FC                      cld
:0046D58A 8945FC                  mov dword ptr [ebp-04], eax
:0046D58D 8B45FC                  mov eax, dword ptr [ebp-04]
:0046D590 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D593 8B5510                  mov edx, dword ptr [ebp+10]
:0046D596 6A00                    push 00000000
:0046D598 6A00                    push 00000000
:0046D59A 6A00                    push 00000000
:0046D59C 50                      push eax
:0046D59D 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D5A0 51                      push ecx
:0046D5A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D5A4 52                      push edx
:0046D5A5 50                      push eax
:0046D5A6 51                      push ecx
:0046D5A7 E8A4150000              call 0046EB50
:0046D5AC 83C420                  add esp, 00000020
:0046D5AF 894514                  mov dword ptr [ebp+14], eax
:0046D5B2 5F                      pop edi
:0046D5B3 5E                      pop esi
:0046D5B4 5B                      pop ebx
:0046D5B5 8B4514                  mov eax, dword ptr [ebp+14]
:0046D5B8 8BE5                    mov esp, ebp
:0046D5BA 5D                      pop ebp
:0046D5BB C3                      ret


:0046D5BC 90                      nop
:0046D5BD 90                      nop
:0046D5BE 90                      nop
:0046D5BF 90                      nop

* Referenced by a CALL at Address:
|:0046F186   
|
:0046D5C0 55                      push ebp
:0046D5C1 8BEC                    mov ebp, esp
:0046D5C3 83EC14                  sub esp, 00000014
:0046D5C6 8B5514                  mov edx, dword ptr [ebp+14]
:0046D5C9 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D5CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D5CF 42                      inc edx
:0046D5D0 C745EC00000000          mov [ebp-14], 00000000
:0046D5D7 C745F020D64600          mov [ebp-10], 0046D620
:0046D5DE 8945F4                  mov dword ptr [ebp-0C], eax
:0046D5E1 894DF8                  mov dword ptr [ebp-08], ecx
:0046D5E4 8955FC                  mov dword ptr [ebp-04], edx
:0046D5E7 64A100000000            mov eax, dword ptr fs:[00000000]
:0046D5ED 8945EC                  mov dword ptr [ebp-14], eax
:0046D5F0 8D85ECFFFFFF            lea eax, dword ptr [ebp+FFFFFFEC]
:0046D5F6 64A300000000            mov dword ptr fs:[00000000], eax
:0046D5FC 8B4518                  mov eax, dword ptr [ebp+18]
:0046D5FF 50                      push eax
:0046D600 51                      push ecx
:0046D601 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046D604 51                      push ecx
:0046D605 E8461F0000              call 0046F550
:0046D60A 8BC8                    mov ecx, eax
:0046D60C 8B45EC                  mov eax, dword ptr [ebp-14]
:0046D60F 64A300000000            mov dword ptr fs:[00000000], eax
:0046D615 8BC1                    mov eax, ecx
:0046D617 8BE5                    mov esp, ebp
:0046D619 5D                      pop ebp
:0046D61A C3                      ret


:0046D61B 90                      nop
:0046D61C 90                      nop
:0046D61D 90                      nop
:0046D61E 90                      nop
:0046D61F 90                      nop
:0046D620 55                      push ebp
:0046D621 8BEC                    mov ebp, esp
:0046D623 FC                      cld
:0046D624 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D627 6A00                    push 00000000
:0046D629 50                      push eax
:0046D62A 8B4810                  mov ecx, dword ptr [eax+10]
:0046D62D 8B5008                  mov edx, dword ptr [eax+08]
:0046D630 51                      push ecx
:0046D631 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046D634 52                      push edx
:0046D635 8B500C                  mov edx, dword ptr [eax+0C]
:0046D638 8B4508                  mov eax, dword ptr [ebp+08]
:0046D63B 6A00                    push 00000000
:0046D63D 51                      push ecx
:0046D63E 52                      push edx
:0046D63F 50                      push eax
:0046D640 E80B150000              call 0046EB50
:0046D645 83C420                  add esp, 00000020
:0046D648 5D                      pop ebp
:0046D649 C3                      ret


:0046D64A 90                      nop
:0046D64B 90                      nop
:0046D64C 90                      nop
:0046D64D 90                      nop
:0046D64E 90                      nop
:0046D64F 90                      nop

* Referenced by a CALL at Address:
|:0046EF00   
|
:0046D650 55                      push ebp
:0046D651 8BEC                    mov ebp, esp
:0046D653 83EC34                  sub esp, 00000034
:0046D656 53                      push ebx
:0046D657 56                      push esi
:0046D658 57                      push edi
:0046D659 C745D800000000          mov [ebp-28], 00000000
:0046D660 C745DC20D74600          mov [ebp-24], 0046D720
:0046D667 8B4518                  mov eax, dword ptr [ebp+18]
:0046D66A 8945E0                  mov dword ptr [ebp-20], eax
:0046D66D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046D670 894DE4                  mov dword ptr [ebp-1C], ecx
:0046D673 8B551C                  mov edx, dword ptr [ebp+1C]
:0046D676 8955E8                  mov dword ptr [ebp-18], edx
:0046D679 8B4520                  mov eax, dword ptr [ebp+20]
:0046D67C 8945EC                  mov dword ptr [ebp-14], eax
:0046D67F C745F000000000          mov [ebp-10], 00000000
:0046D686 C745F400000000          mov [ebp-0C], 00000000
:0046D68D C745F800000000          mov [ebp-08], 00000000
:0046D694 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Code Obj ->"}"
                                  |
:0046D69B C745F0EAD64600          mov [ebp-10], 0046D6EA
:0046D6A2 8965F4                  mov dword ptr [ebp-0C], esp
:0046D6A5 896DF8                  mov dword ptr [ebp-08], ebp
:0046D6A8 64A100000000            mov eax, dword ptr fs:[00000000]
:0046D6AE 8945D8                  mov dword ptr [ebp-28], eax
:0046D6B1 8D85D8FFFFFF            lea eax, dword ptr [ebp+FFFFFFD8]
:0046D6B7 64A300000000            mov dword ptr fs:[00000000], eax
:0046D6BD C745CC01000000          mov [ebp-34], 00000001
:0046D6C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D6C7 894DD0                  mov dword ptr [ebp-30], ecx
:0046D6CA 8B5510                  mov edx, dword ptr [ebp+10]
:0046D6CD 8955D4                  mov dword ptr [ebp-2C], edx
:0046D6D0 8D45D0                  lea eax, dword ptr [ebp-30]
:0046D6D3 50                      push eax
:0046D6D4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D6D7 8B11                    mov edx, dword ptr [ecx]
:0046D6D9 52                      push edx
:0046D6DA FF15A86F4B00            call dword ptr [004B6FA8]
:0046D6E0 83C408                  add esp, 00000008
:0046D6E3 C745CC00000000          mov [ebp-34], 00000000
:0046D6EA 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046D6EE 7417                    je 0046D707
:0046D6F0 648B1D00000000          mov ebx, dword ptr fs:[00000000]
:0046D6F7 8B03                    mov eax, dword ptr [ebx]
:0046D6F9 8B5DD8                  mov ebx, dword ptr [ebp-28]
:0046D6FC 8903                    mov dword ptr [ebx], eax
:0046D6FE 64891D00000000          mov dword ptr fs:[00000000], ebx
:0046D705 EB09                    jmp 0046D710

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D6EE(C)
|
:0046D707 8B45D8                  mov eax, dword ptr [ebp-28]
:0046D70A 64A300000000            mov dword ptr fs:[00000000], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D705(U)
|
:0046D710 8B45CC                  mov eax, dword ptr [ebp-34]
:0046D713 5F                      pop edi
:0046D714 5E                      pop esi
:0046D715 5B                      pop ebx
:0046D716 8BE5                    mov esp, ebp
:0046D718 5D                      pop ebp
:0046D719 C3                      ret


:0046D71A CC                      int 03
:0046D71B CC                      int 03
:0046D71C CC                      int 03
:0046D71D CC                      int 03
:0046D71E CC                      int 03
:0046D71F CC                      int 03
:0046D720 55                      push ebp
:0046D721 8BEC                    mov ebp, esp
:0046D723 53                      push ebx
:0046D724 56                      push esi
:0046D725 57                      push edi
:0046D726 FC                      cld
:0046D727 8B4508                  mov eax, dword ptr [ebp+08]
:0046D72A 8B4804                  mov ecx, dword ptr [eax+04]
:0046D72D 83E166                  and ecx, 00000066
:0046D730 85C9                    test ecx, ecx
:0046D732 7411                    je 0046D745
:0046D734 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D737 C7422401000000          mov [edx+24], 00000001
:0046D73E B801000000              mov eax, 00000001
:0046D743 EB57                    jmp 0046D79C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D732(C)
|
:0046D745 6A01                    push 00000001
:0046D747 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D74A 8B4814                  mov ecx, dword ptr [eax+14]
:0046D74D 51                      push ecx
:0046D74E 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D751 8B4210                  mov eax, dword ptr [edx+10]
:0046D754 50                      push eax
:0046D755 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046D758 8B5108                  mov edx, dword ptr [ecx+08]
:0046D75B 52                      push edx
:0046D75C 6A00                    push 00000000
:0046D75E 8B4510                  mov eax, dword ptr [ebp+10]
:0046D761 50                      push eax
:0046D762 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046D765 8B510C                  mov edx, dword ptr [ecx+0C]
:0046D768 52                      push edx
:0046D769 8B4508                  mov eax, dword ptr [ebp+08]
:0046D76C 50                      push eax
:0046D76D E8DE130000              call 0046EB50
:0046D772 83C420                  add esp, 00000020
:0046D775 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046D778 83792400                cmp dword ptr [ecx+24], 00000000
:0046D77C 750D                    jne 0046D78B
:0046D77E 8B5508                  mov edx, dword ptr [ebp+08]
:0046D781 52                      push edx
:0046D782 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D785 50                      push eax
:0046D786 E895FDFFFF              call 0046D520

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D77C(C)
|
:0046D78B 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046D78E 8B631C                  mov esp, dword ptr [ebx+1C]
:0046D791 8B6B20                  mov ebp, dword ptr [ebx+20]
:0046D794 FF6318                  jmp [ebx+18]
:0046D797 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D743(U)
|
:0046D79C 5F                      pop edi
:0046D79D 5E                      pop esi
:0046D79E 5B                      pop ebx
:0046D79F 5D                      pop ebp
:0046D7A0 C3                      ret


:0046D7A1 CC                      int 03
:0046D7A2 CC                      int 03
:0046D7A3 CC                      int 03
:0046D7A4 CC                      int 03
:0046D7A5 CC                      int 03
:0046D7A6 CC                      int 03
:0046D7A7 CC                      int 03
:0046D7A8 CC                      int 03
:0046D7A9 CC                      int 03
:0046D7AA CC                      int 03
:0046D7AB CC                      int 03
:0046D7AC CC                      int 03
:0046D7AD CC                      int 03
:0046D7AE CC                      int 03
:0046D7AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0046ECF6   , :0046EF21   
|
:0046D7B0 51                      push ecx
:0046D7B1 8B442408                mov eax, dword ptr [esp+08]
:0046D7B5 53                      push ebx
:0046D7B6 8B5C2410                mov ebx, dword ptr [esp+10]
:0046D7BA 55                      push ebp
:0046D7BB 8B4810                  mov ecx, dword ptr [eax+10]
:0046D7BE 56                      push esi
:0046D7BF 8B700C                  mov esi, dword ptr [eax+0C]
:0046D7C2 57                      push edi
:0046D7C3 85DB                    test ebx, ebx
:0046D7C5 894C2410                mov dword ptr [esp+10], ecx
:0046D7C9 8BEE                    mov ebp, esi
:0046D7CB 8BFE                    mov edi, esi
:0046D7CD 7C35                    jl 0046D804

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7FE(C)
|
:0046D7CF 83FEFF                  cmp esi, FFFFFFFF
:0046D7D2 7505                    jne 0046D7D9
:0046D7D4 E8571E0000              call 0046F630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7D2(C)
|
:0046D7D9 8B442410                mov eax, dword ptr [esp+10]
:0046D7DD 4E                      dec esi
:0046D7DE 8B4C2420                mov ecx, dword ptr [esp+20]
:0046D7E2 8D14B6                  lea edx, dword ptr [esi+4*esi]
:0046D7E5 8D0490                  lea eax, dword ptr [eax+4*edx]
:0046D7E8 394804                  cmp dword ptr [eax+04], ecx
:0046D7EB 7D05                    jge 0046D7F2
:0046D7ED 3B4808                  cmp ecx, dword ptr [eax+08]
:0046D7F0 7E05                    jle 0046D7F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7EB(C)
|
:0046D7F2 83FEFF                  cmp esi, FFFFFFFF
:0046D7F5 7505                    jne 0046D7FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7F0(C)
|
:0046D7F7 8BEF                    mov ebp, edi
:0046D7F9 4B                      dec ebx
:0046D7FA 8BFE                    mov edi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7F5(C)
|
:0046D7FC 85DB                    test ebx, ebx
:0046D7FE 7DCF                    jge 0046D7CF
:0046D800 8B442418                mov eax, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7CD(C)
|
:0046D804 8B4C2424                mov ecx, dword ptr [esp+24]
:0046D808 8B542428                mov edx, dword ptr [esp+28]
:0046D80C 46                      inc esi
:0046D80D 8931                    mov dword ptr [ecx], esi
:0046D80F 892A                    mov dword ptr [edx], ebp
:0046D811 3B680C                  cmp ebp, dword ptr [eax+0C]
:0046D814 7704                    ja 0046D81A
:0046D816 3BF5                    cmp esi, ebp
:0046D818 7605                    jbe 0046D81F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D814(C)
|
:0046D81A E8111E0000              call 0046F630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D818(C)
|
:0046D81F 8B4C2410                mov ecx, dword ptr [esp+10]
:0046D823 8D04B6                  lea eax, dword ptr [esi+4*esi]
:0046D826 5F                      pop edi
:0046D827 5E                      pop esi
:0046D828 5D                      pop ebp
:0046D829 8D0481                  lea eax, dword ptr [ecx+4*eax]
:0046D82C 5B                      pop ebx
:0046D82D 59                      pop ecx
:0046D82E C3                      ret


:0046D82F 90                      nop

* Referenced by a CALL at Address:
|:00470552   
|
:0046D830 55                      push ebp
:0046D831 8BEC                    mov ebp, esp
:0046D833 53                      push ebx
:0046D834 56                      push esi
:0046D835 57                      push edi
:0046D836 55                      push ebp
:0046D837 6A00                    push 00000000
:0046D839 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"]_^[]ËL$A"
                                  |
:0046D83B 6848D84600              push 0046D848
:0046D840 FF7508                  push [ebp+08]

* Reference To: KERNEL32.RtlUnwind, Ord:01E5h
                                  |
:0046D843 E8B85E0000              Call 00473700
:0046D848 5D                      pop ebp
:0046D849 5F                      pop edi
:0046D84A 5E                      pop esi
:0046D84B 5B                      pop ebx
:0046D84C 8BE5                    mov esp, ebp
:0046D84E 5D                      pop ebp
:0046D84F C3                      ret


:0046D850 8B4C2404                mov ecx, dword ptr [esp+04]

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046D854 F7410406000000          test [ecx+04], 00000006
:0046D85B B801000000              mov eax, 00000001
:0046D860 740F                    je 0046D871
:0046D862 8B442408                mov eax, dword ptr [esp+08]
:0046D866 8B542410                mov edx, dword ptr [esp+10]
:0046D86A 8902                    mov dword ptr [edx], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046D86C B803000000              mov eax, 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D860(C)
|
:0046D871 C3                      ret

* Referenced by a CALL at Addresses:
|:0046F1D6   , :0047055F   , :0047059F   , :004705C4   
|
:0046D872 53                      push ebx
:0046D873 56                      push esi
:0046D874 57                      push edi
:0046D875 8B442410                mov eax, dword ptr [esp+10]
:0046D879 50                      push eax
:0046D87A 6AFE                    push FFFFFFFE
:0046D87C 6850D84600              push 0046D850
:0046D881 64FF3500000000          push dword ptr fs:[00000000]
:0046D888 64892500000000          mov dword ptr fs:[00000000], esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D8CA(U)
|
:0046D88F 8B442420                mov eax, dword ptr [esp+20]
:0046D893 8B5808                  mov ebx, dword ptr [eax+08]
:0046D896 8B700C                  mov esi, dword ptr [eax+0C]
:0046D899 83FEFF                  cmp esi, FFFFFFFF
:0046D89C 742E                    je 0046D8CC
:0046D89E 3B742424                cmp esi, dword ptr [esp+24]
:0046D8A2 7428                    je 0046D8CC
:0046D8A4 8D3476                  lea esi, dword ptr [esi+2*esi]
:0046D8A7 8B0CB3                  mov ecx, dword ptr [ebx+4*esi]
:0046D8AA 894C2408                mov dword ptr [esp+08], ecx
:0046D8AE 89480C                  mov dword ptr [eax+0C], ecx
:0046D8B1 837CB30400              cmp dword ptr [ebx+4*esi+04], 00000000
:0046D8B6 7512                    jne 0046D8CA
:0046D8B8 6801010000              push 00000101
:0046D8BD 8B44B308                mov eax, dword ptr [ebx+4*esi+08]
:0046D8C1 E840000000              call 0046D906
:0046D8C6 FF54B308                call [ebx+4*esi+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D8B6(C)
|
:0046D8CA EBC3                    jmp 0046D88F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D89C(C), :0046D8A2(C)
|
:0046D8CC 648F0500000000          pop dword ptr fs:[00000000]
:0046D8D3 83C40C                  add esp, 0000000C
:0046D8D6 5F                      pop edi
:0046D8D7 5E                      pop esi
:0046D8D8 5B                      pop ebx
:0046D8D9 C3                      ret



* Referenced by a CALL at Address:
|:0046F234   
|
:0046D8DA 33C0                    xor eax, eax
:0046D8DC 648B0D00000000          mov ecx, dword ptr fs:[00000000]
:0046D8E3 81790450D84600          cmp dword ptr [ecx+04], 0046D850
:0046D8EA 7510                    jne 0046D8FC
:0046D8EC 8B510C                  mov edx, dword ptr [ecx+0C]
:0046D8EF 8B520C                  mov edx, dword ptr [edx+0C]
:0046D8F2 395108                  cmp dword ptr [ecx+08], edx
:0046D8F5 7505                    jne 0046D8FC
:0046D8F7 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D8EA(C), :0046D8F5(C)
|
:0046D8FC C3                      ret

* Referenced by a CALL at Addresses:
|:0046F56E   , :0046F590   
|
:0046D8FD 53                      push ebx
:0046D8FE 51                      push ecx

* Possible StringData Ref from Data Obj ->" "
                                  |
:0046D8FF BBE4E94700              mov ebx, 0047E9E4
:0046D904 EB0A                    jmp 0046D910

* Referenced by a CALL at Addresses:
|:0046D8C1   , :00470570   
|
:0046D906 53                      push ebx
:0046D907 51                      push ecx

* Possible StringData Ref from Data Obj ->" "
                                  |
:0046D908 BBE4E94700              mov ebx, 0047E9E4
:0046D90D 8B4D08                  mov ecx, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D904(U)
|
:0046D910 894B08                  mov dword ptr [ebx+08], ecx
:0046D913 894304                  mov dword ptr [ebx+04], eax
:0046D916 896B0C                  mov dword ptr [ebx+0C], ebp
:0046D919 59                      pop ecx
:0046D91A 5B                      pop ebx
:0046D91B C20400                  ret 0004


:0046D91E CC                      int 03
:0046D91F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040F11E   , :0040F135   , :0040F14A   , :0040F741   , :0040F758   
|:0040F7E5   , :0040F862   , :0040FB00   , :00413515   , :00452E2D   
|:00462654   , :00473B94   
|
:0046D920 8B442404                mov eax, dword ptr [esp+04]
:0046D924 50                      push eax
:0046D925 E816060000              call 0046DF40
:0046D92A 83C404                  add esp, 00000004
:0046D92D C3                      ret


:0046D92E 90                      nop
:0046D92F 90                      nop

* Referenced by a CALL at Addresses:
|:0040B3BE   , :004686D3   
|
:0046D930 51                      push ecx
:0046D931 3D00100000              cmp eax, 00001000
:0046D936 8D4C2408                lea ecx, dword ptr [esp+08]
:0046D93A 7214                    jb 0046D950

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D94E(C)
|
:0046D93C 81E900100000            sub ecx, 00001000
:0046D942 2D00100000              sub eax, 00001000
:0046D947 8501                    test dword ptr [ecx], eax
:0046D949 3D00100000              cmp eax, 00001000
:0046D94E 73EC                    jnb 0046D93C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D93A(C)
|
:0046D950 2BC8                    sub ecx, eax
:0046D952 8BC4                    mov eax, esp
:0046D954 8501                    test dword ptr [ecx], eax
:0046D956 8BE1                    mov esp, ecx
:0046D958 8B08                    mov ecx, dword ptr [eax]
:0046D95A 8B4004                  mov eax, dword ptr [eax+04]
:0046D95D 50                      push eax
:0046D95E C3                      ret


:0046D95F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C404   , :0040C5BB   , :004109B3   , :004109C6   , :004109DF   
|:004109F7   , :004173A1   , :00417B70   , :00417B81   , :00417C23   
|:00417C33   , :00417CEA   , :00417CFA   , :0041D22D   , :0041E661   
|:00425C44   , :00425C5A   , :00425C73   , :00425C8B   , :00453B89   
|:00453C4D   , :0045C60E   , :0045C643   , :0046285D   , :00464CB7   
|:00466D88   , :0046A8CB   , :0046C206   , :0046C2AB   , :0046D09D   
|:0046D0C0   
|
:0046D960 8B54240C                mov edx, dword ptr [esp+0C]
:0046D964 8B4C2404                mov ecx, dword ptr [esp+04]
:0046D968 85D2                    test edx, edx
:0046D96A 7447                    je 0046D9B3
:0046D96C 33C0                    xor eax, eax
:0046D96E 8A442408                mov al, byte ptr [esp+08]
:0046D972 57                      push edi
:0046D973 8BF9                    mov edi, ecx
:0046D975 83FA04                  cmp edx, 00000004
:0046D978 722D                    jb 0046D9A7
:0046D97A F7D9                    neg ecx
:0046D97C 83E103                  and ecx, 00000003
:0046D97F 7408                    je 0046D989
:0046D981 2BD1                    sub edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D987(C)
|
:0046D983 8807                    mov byte ptr [edi], al
:0046D985 47                      inc edi
:0046D986 49                      dec ecx
:0046D987 75FA                    jne 0046D983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D97F(C)
|
:0046D989 8BC8                    mov ecx, eax
:0046D98B C1E008                  shl eax, 08
:0046D98E 03C1                    add eax, ecx
:0046D990 8BC8                    mov ecx, eax
:0046D992 C1E010                  shl eax, 10
:0046D995 03C1                    add eax, ecx
:0046D997 8BCA                    mov ecx, edx
:0046D999 83E203                  and edx, 00000003
:0046D99C C1E902                  shr ecx, 02
:0046D99F 7406                    je 0046D9A7
:0046D9A1 F3                      repz
:0046D9A2 AB                      stosd
:0046D9A3 85D2                    test edx, edx
:0046D9A5 7406                    je 0046D9AD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D978(C), :0046D99F(C), :0046D9AB(C)
|
:0046D9A7 8807                    mov byte ptr [edi], al
:0046D9A9 47                      inc edi
:0046D9AA 4A                      dec edx
:0046D9AB 75FA                    jne 0046D9A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D9A5(C)
|
:0046D9AD 8B442408                mov eax, dword ptr [esp+08]
:0046D9B1 5F                      pop edi
:0046D9B2 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D96A(C)
|
:0046D9B3 8B442404                mov eax, dword ptr [esp+04]
:0046D9B7 C3                      ret


:0046D9B8 CC                      int 03
:0046D9B9 CC                      int 03
:0046D9BA CC                      int 03
:0046D9BB CC                      int 03
:0046D9BC CC                      int 03
:0046D9BD CC                      int 03
:0046D9BE CC                      int 03
:0046D9BF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040E960   , :0040F773   , :0040F7B5   , :0040FCA8   , :00413557   
|:00452255   , :00462672   , :00462695   
|
:0046D9C0 8B442404                mov eax, dword ptr [esp+04]
:0046D9C4 6A01                    push 00000001
:0046D9C6 50                      push eax
:0046D9C7 E8E4050000              call 0046DFB0
:0046D9CC 83C408                  add esp, 00000008
:0046D9CF C3                      ret



* Referenced by a CALL at Addresses:
|:0040F8D7   , :0040F901   , :0040FCD2   , :004147AF   , :00458325   
|:0046AFD6   , :0046D0EB   , :0046D236   
|
:0046D9D0 55                      push ebp
:0046D9D1 8BEC                    mov ebp, esp
:0046D9D3 57                      push edi
:0046D9D4 56                      push esi
:0046D9D5 8B750C                  mov esi, dword ptr [ebp+0C]
:0046D9D8 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046D9DB 8B7D08                  mov edi, dword ptr [ebp+08]
:0046D9DE 8BC1                    mov eax, ecx
:0046D9E0 8BD1                    mov edx, ecx
:0046D9E2 03C6                    add eax, esi
:0046D9E4 3BFE                    cmp edi, esi
:0046D9E6 7608                    jbe 0046D9F0
:0046D9E8 3BF8                    cmp edi, eax
:0046D9EA 0F8278010000            jb 0046DB68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D9E6(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046D9F0 F7C703000000            test edi, 00000003
:0046D9F6 7514                    jne 0046DA0C
:0046D9F8 C1E902                  shr ecx, 02
:0046D9FB 83E203                  and edx, 00000003
:0046D9FE 83F908                  cmp ecx, 00000008
:0046DA01 7229                    jb 0046DA2C
:0046DA03 F3                      repz
:0046DA04 A5                      movsd
:0046DA05 FF249518DB4600          jmp dword ptr [4*edx+0046DB18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D9F6(C)
|
:0046DA0C 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DA0E BA03000000              mov edx, 00000003
:0046DA13 83E904                  sub ecx, 00000004
:0046DA16 720C                    jb 0046DA24
:0046DA18 83E003                  and eax, 00000003
:0046DA1B 03C8                    add ecx, eax
:0046DA1D FF248530DA4600          jmp dword ptr [4*eax+0046DA30]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DA16(C)
|
:0046DA24 FF248D28DB4600          jmp dword ptr [4*ecx+0046DB28]
:0046DA2B 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DA01(C), :0046DA5E(C), :0046DA84(C), :0046DA9E(C)
|
:0046DA2C FF248DACDA4600          jmp dword ptr [4*ecx+0046DAAC]
:0046DA33 90                      nop

:0046DA34 40DA4600                DWORD 0046DA40
:0046DA38 6CDA4600                DWORD 0046DA6C
:0046DA3C 90DA4600                DWORD 0046DA90


:0046DA40 23D1                    and edx, ecx
:0046DA42 8A06                    mov al, byte ptr [esi]
:0046DA44 8807                    mov byte ptr [edi], al
:0046DA46 8A4601                  mov al, byte ptr [esi+01]
:0046DA49 884701                  mov byte ptr [edi+01], al
:0046DA4C 8A4602                  mov al, byte ptr [esi+02]
:0046DA4F C1E902                  shr ecx, 02
:0046DA52 884702                  mov byte ptr [edi+02], al
:0046DA55 83C603                  add esi, 00000003
:0046DA58 83C703                  add edi, 00000003
:0046DA5B 83F908                  cmp ecx, 00000008
:0046DA5E 72CC                    jb 0046DA2C
:0046DA60 F3                      repz
:0046DA61 A5                      movsd
:0046DA62 FF249518DB4600          jmp dword ptr [4*edx+0046DB18]
:0046DA69 2E8BC0                  mov eax, eax
:0046DA6C 23D1                    and edx, ecx
:0046DA6E 8A06                    mov al, byte ptr [esi]
:0046DA70 8807                    mov byte ptr [edi], al
:0046DA72 8A4601                  mov al, byte ptr [esi+01]
:0046DA75 C1E902                  shr ecx, 02
:0046DA78 884701                  mov byte ptr [edi+01], al
:0046DA7B 83C602                  add esi, 00000002
:0046DA7E 83C702                  add edi, 00000002
:0046DA81 83F908                  cmp ecx, 00000008
:0046DA84 72A6                    jb 0046DA2C
:0046DA86 F3                      repz
:0046DA87 A5                      movsd
:0046DA88 FF249518DB4600          jmp dword ptr [4*edx+0046DB18]
:0046DA8F 90                      nop
:0046DA90 23D1                    and edx, ecx
:0046DA92 8A06                    mov al, byte ptr [esi]
:0046DA94 8807                    mov byte ptr [edi], al
:0046DA96 46                      inc esi
:0046DA97 C1E902                  shr ecx, 02
:0046DA9A 47                      inc edi
:0046DA9B 83F908                  cmp ecx, 00000008
:0046DA9E 728C                    jb 0046DA2C
:0046DAA0 F3                      repz
:0046DAA1 A5                      movsd
:0046DAA2 FF249518DB4600          jmp dword ptr [4*edx+0046DB18]
:0046DAA9 2E8BC0                  mov eax, eax

:0046DAAC 0FDB4600                DWORD 0046DB0F
:0046DAB0 FCDA4600                DWORD 0046DAFC
:0046DAB4 F4DA4600                DWORD 0046DAF4
:0046DAB8 ECDA4600                DWORD 0046DAEC
:0046DABC E4DA4600                DWORD 0046DAE4
:0046DAC0 DCDA4600                DWORD 0046DADC
:0046DAC4 D4DA4600                DWORD 0046DAD4
:0046DAC8 CCDA4600                DWORD 0046DACC


:0046DACC 8B448EE4                mov eax, dword ptr [esi+4*ecx-1C]
:0046DAD0 89448FE4                mov dword ptr [edi+4*ecx-1C], eax
:0046DAD4 8B448EE8                mov eax, dword ptr [esi+4*ecx-18]
:0046DAD8 89448FE8                mov dword ptr [edi+4*ecx-18], eax
:0046DADC 8B448EEC                mov eax, dword ptr [esi+4*ecx-14]
:0046DAE0 89448FEC                mov dword ptr [edi+4*ecx-14], eax
:0046DAE4 8B448EF0                mov eax, dword ptr [esi+4*ecx-10]
:0046DAE8 89448FF0                mov dword ptr [edi+4*ecx-10], eax
:0046DAEC 8B448EF4                mov eax, dword ptr [esi+4*ecx-0C]
:0046DAF0 89448FF4                mov dword ptr [edi+4*ecx-0C], eax
:0046DAF4 8B448EF8                mov eax, dword ptr [esi+4*ecx-08]
:0046DAF8 89448FF8                mov dword ptr [edi+4*ecx-08], eax
:0046DAFC 8B448EFC                mov eax, dword ptr [esi+4*ecx-04]
:0046DB00 89448FFC                mov dword ptr [edi+4*ecx-04], eax
:0046DB04 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:0046DB0B 03F0                    add esi, eax
:0046DB0D 03F8                    add edi, eax
:0046DB0F FF249518DB4600          jmp dword ptr [4*edx+0046DB18]
:0046DB16 8BC0                    mov eax, eax

:0046DB18 28DB4600                DWORD 0046DB28
:0046DB1C 30DB4600                DWORD 0046DB30
:0046DB20 3CDB4600                DWORD 0046DB3C
:0046DB24 50DB4600                DWORD 0046DB50


:0046DB28 8B4508                  mov eax, dword ptr [ebp+08]
:0046DB2B 5E                      pop esi
:0046DB2C 5F                      pop edi
:0046DB2D C9                      leave
:0046DB2E C3                      ret


:0046DB2F 90                      nop
:0046DB30 8A06                    mov al, byte ptr [esi]
:0046DB32 8807                    mov byte ptr [edi], al
:0046DB34 8B4508                  mov eax, dword ptr [ebp+08]
:0046DB37 5E                      pop esi
:0046DB38 5F                      pop edi
:0046DB39 C9                      leave
:0046DB3A C3                      ret


:0046DB3B 90                      nop
:0046DB3C 8A06                    mov al, byte ptr [esi]
:0046DB3E 8807                    mov byte ptr [edi], al
:0046DB40 8A4601                  mov al, byte ptr [esi+01]
:0046DB43 884701                  mov byte ptr [edi+01], al
:0046DB46 8B4508                  mov eax, dword ptr [ebp+08]
:0046DB49 5E                      pop esi
:0046DB4A 5F                      pop edi
:0046DB4B C9                      leave
:0046DB4C C3                      ret


:0046DB4D 2E8BC0                  mov eax, eax
:0046DB50 8A06                    mov al, byte ptr [esi]
:0046DB52 8807                    mov byte ptr [edi], al
:0046DB54 8A4601                  mov al, byte ptr [esi+01]
:0046DB57 884701                  mov byte ptr [edi+01], al
:0046DB5A 8A4602                  mov al, byte ptr [esi+02]
:0046DB5D 884702                  mov byte ptr [edi+02], al
:0046DB60 8B4508                  mov eax, dword ptr [ebp+08]
:0046DB63 5E                      pop esi
:0046DB64 5F                      pop edi
:0046DB65 C9                      leave
:0046DB66 C3                      ret


:0046DB67 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D9EA(C)
|
:0046DB68 8D7431FC                lea esi, dword ptr [ecx+esi-04]
:0046DB6C 8D7C39FC                lea edi, dword ptr [ecx+edi-04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DB70 F7C703000000            test edi, 00000003
:0046DB76 7524                    jne 0046DB9C
:0046DB78 C1E902                  shr ecx, 02
:0046DB7B 83E203                  and edx, 00000003
:0046DB7E 83F908                  cmp ecx, 00000008
:0046DB81 720D                    jb 0046DB90
:0046DB83 FD                      std
:0046DB84 F3                      repz
:0046DB85 A5                      movsd
:0046DB86 FC                      cld
:0046DB87 FF2495B0DC4600          jmp dword ptr [4*edx+0046DCB0]
:0046DB8E 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DB81(C), :0046DBD8(C), :0046DC02(C), :0046DC30(C)
|
:0046DB90 F7D9                    neg ecx
:0046DB92 FF248D60DC4600          jmp dword ptr [4*ecx+0046DC60]
:0046DB99 2E8BC0                  mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DB76(C)
|
:0046DB9C 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DB9E BA03000000              mov edx, 00000003
:0046DBA3 83F904                  cmp ecx, 00000004
:0046DBA6 720C                    jb 0046DBB4
:0046DBA8 83E003                  and eax, 00000003
:0046DBAB 2BC8                    sub ecx, eax
:0046DBAD FF2485B8DB4600          jmp dword ptr [4*eax+0046DBB8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DBA6(C)
|
:0046DBB4 FF248DB0DC4600          jmp dword ptr [4*ecx+0046DCB0]
:0046DBBB 90                      nop

:0046DBBC C8DB4600                DWORD 0046DBC8
:0046DBC0 E8DB4600                DWORD 0046DBE8
:0046DBC4 10DC4600                DWORD 0046DC10


:0046DBC8 8A4603                  mov al, byte ptr [esi+03]
:0046DBCB 23D1                    and edx, ecx
:0046DBCD 884703                  mov byte ptr [edi+03], al
:0046DBD0 4E                      dec esi
:0046DBD1 C1E902                  shr ecx, 02
:0046DBD4 4F                      dec edi
:0046DBD5 83F908                  cmp ecx, 00000008
:0046DBD8 72B6                    jb 0046DB90
:0046DBDA FD                      std
:0046DBDB F3                      repz
:0046DBDC A5                      movsd
:0046DBDD FC                      cld
:0046DBDE FF2495B0DC4600          jmp dword ptr [4*edx+0046DCB0]
:0046DBE5 2E8BC0                  mov eax, eax
:0046DBE8 8A4603                  mov al, byte ptr [esi+03]
:0046DBEB 23D1                    and edx, ecx
:0046DBED 884703                  mov byte ptr [edi+03], al
:0046DBF0 8A4602                  mov al, byte ptr [esi+02]
:0046DBF3 C1E902                  shr ecx, 02
:0046DBF6 884702                  mov byte ptr [edi+02], al
:0046DBF9 83EE02                  sub esi, 00000002
:0046DBFC 83EF02                  sub edi, 00000002
:0046DBFF 83F908                  cmp ecx, 00000008
:0046DC02 728C                    jb 0046DB90
:0046DC04 FD                      std
:0046DC05 F3                      repz
:0046DC06 A5                      movsd
:0046DC07 FC                      cld
:0046DC08 FF2495B0DC4600          jmp dword ptr [4*edx+0046DCB0]
:0046DC0F 90                      nop
:0046DC10 8A4603                  mov al, byte ptr [esi+03]
:0046DC13 23D1                    and edx, ecx
:0046DC15 884703                  mov byte ptr [edi+03], al
:0046DC18 8A4602                  mov al, byte ptr [esi+02]
:0046DC1B 884702                  mov byte ptr [edi+02], al
:0046DC1E 8A4601                  mov al, byte ptr [esi+01]
:0046DC21 C1E902                  shr ecx, 02
:0046DC24 884701                  mov byte ptr [edi+01], al
:0046DC27 83EE03                  sub esi, 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DC4C(C)
|
:0046DC2A 83EF03                  sub edi, 00000003
:0046DC2D 83F908                  cmp ecx, 00000008
:0046DC30 0F825AFFFFFF            jb 0046DB90
:0046DC36 FD                      std
:0046DC37 F3                      repz
:0046DC38 A5                      movsd
:0046DC39 FC                      cld
:0046DC3A FF2495B0DC4600          jmp dword ptr [4*edx+0046DCB0]
:0046DC41 2E8BC0                  mov eax, eax

:0046DC44 64DC4600                DWORD 0046DC64
:0046DC48 6CDC4600                DWORD 0046DC6C
:0046DC4C 74DC4600                DWORD 0046DC74
:0046DC50 7CDC4600                DWORD 0046DC7C
:0046DC54 84DC4600                DWORD 0046DC84
:0046DC58 8CDC4600                DWORD 0046DC8C
:0046DC5C 94DC4600                DWORD 0046DC94
:0046DC60 A7DC4600                DWORD 0046DCA7


:0046DC64 8B448E1C                mov eax, dword ptr [esi+4*ecx+1C]
:0046DC68 89448F1C                mov dword ptr [edi+4*ecx+1C], eax
:0046DC6C 8B448E18                mov eax, dword ptr [esi+4*ecx+18]
:0046DC70 89448F18                mov dword ptr [edi+4*ecx+18], eax
:0046DC74 8B448E14                mov eax, dword ptr [esi+4*ecx+14]
:0046DC78 89448F14                mov dword ptr [edi+4*ecx+14], eax
:0046DC7C 8B448E10                mov eax, dword ptr [esi+4*ecx+10]
:0046DC80 89448F10                mov dword ptr [edi+4*ecx+10], eax
:0046DC84 8B448E0C                mov eax, dword ptr [esi+4*ecx+0C]
:0046DC88 89448F0C                mov dword ptr [edi+4*ecx+0C], eax
:0046DC8C 8B448E08                mov eax, dword ptr [esi+4*ecx+08]
:0046DC90 89448F08                mov dword ptr [edi+4*ecx+08], eax
:0046DC94 8B448E04                mov eax, dword ptr [esi+4*ecx+04]
:0046DC98 89448F04                mov dword ptr [edi+4*ecx+04], eax
:0046DC9C 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:0046DCA3 03F0                    add esi, eax
:0046DCA5 03F8                    add edi, eax
:0046DCA7 FF2495B0DC4600          jmp dword ptr [4*edx+0046DCB0]
:0046DCAE 8BC0                    mov eax, eax

:0046DCB0 C0DC4600                DWORD 0046DCC0
:0046DCB4 C8DC4600                DWORD 0046DCC8
:0046DCB8 D8DC4600                DWORD 0046DCD8
:0046DCBC ECDC4600                DWORD 0046DCEC


:0046DCC0 8B4508                  mov eax, dword ptr [ebp+08]
:0046DCC3 5E                      pop esi
:0046DCC4 5F                      pop edi
:0046DCC5 C9                      leave
:0046DCC6 C3                      ret


:0046DCC7 90                      nop
:0046DCC8 8A4603                  mov al, byte ptr [esi+03]
:0046DCCB 884703                  mov byte ptr [edi+03], al
:0046DCCE 8B4508                  mov eax, dword ptr [ebp+08]
:0046DCD1 5E                      pop esi
:0046DCD2 5F                      pop edi
:0046DCD3 C9                      leave
:0046DCD4 C3                      ret


:0046DCD5 2E8BC0                  mov eax, eax
:0046DCD8 8A4603                  mov al, byte ptr [esi+03]
:0046DCDB 884703                  mov byte ptr [edi+03], al
:0046DCDE 8A4602                  mov al, byte ptr [esi+02]
:0046DCE1 884702                  mov byte ptr [edi+02], al
:0046DCE4 8B4508                  mov eax, dword ptr [ebp+08]
:0046DCE7 5E                      pop esi
:0046DCE8 5F                      pop edi
:0046DCE9 C9                      leave
:0046DCEA C3                      ret


:0046DCEB 90                      nop
:0046DCEC 8A4603                  mov al, byte ptr [esi+03]
:0046DCEF 884703                  mov byte ptr [edi+03], al
:0046DCF2 8A4602                  mov al, byte ptr [esi+02]
:0046DCF5 884702                  mov byte ptr [edi+02], al
:0046DCF8 8A4601                  mov al, byte ptr [esi+01]
:0046DCFB 884701                  mov byte ptr [edi+01], al
:0046DCFE 8B4508                  mov eax, dword ptr [ebp+08]
:0046DD01 5E                      pop esi
:0046DD02 5F                      pop edi
:0046DD03 C9                      leave
:0046DD04 C3                      ret


:0046DD05 CC                      int 03
:0046DD06 CC                      int 03
:0046DD07 CC                      int 03
:0046DD08 CC                      int 03
:0046DD09 CC                      int 03
:0046DD0A CC                      int 03
:0046DD0B CC                      int 03
:0046DD0C CC                      int 03
:0046DD0D CC                      int 03
:0046DD0E CC                      int 03
:0046DD0F CC                      int 03

* Referenced by a CALL at Address:
|:0040FB23   
|
:0046DD10 8B44240C                mov eax, dword ptr [esp+0C]
:0046DD14 85C0                    test eax, eax
:0046DD16 7444                    je 0046DD5C
:0046DD18 8B542404                mov edx, dword ptr [esp+04]
:0046DD1C 56                      push esi
:0046DD1D 57                      push edi
:0046DD1E 8BF2                    mov esi, edx
:0046DD20 8B7C2410                mov edi, dword ptr [esp+10]
:0046DD24 0BD7                    or edx, edi
:0046DD26 83E203                  and edx, 00000003
:0046DD29 7432                    je 0046DD5D
:0046DD2B A901000000              test eax, 00000001
:0046DD30 740B                    je 0046DD3D
:0046DD32 8A0E                    mov cl, byte ptr [esi]
:0046DD34 3A0F                    cmp cl, byte ptr [edi]
:0046DD36 7552                    jne 0046DD8A
:0046DD38 46                      inc esi
:0046DD39 47                      inc edi
:0046DD3A 48                      dec eax
:0046DD3B 741D                    je 0046DD5A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DD30(C), :0046DD58(C)
|
:0046DD3D 8A0E                    mov cl, byte ptr [esi]
:0046DD3F 8A17                    mov dl, byte ptr [edi]
:0046DD41 38D1                    cmp cl, dl
:0046DD43 7545                    jne 0046DD8A
:0046DD45 8A4E01                  mov cl, byte ptr [esi+01]
:0046DD48 8A5701                  mov dl, byte ptr [edi+01]
:0046DD4B 38D1                    cmp cl, dl
:0046DD4D 753B                    jne 0046DD8A
:0046DD4F 83C702                  add edi, 00000002
:0046DD52 83C602                  add esi, 00000002
:0046DD55 83E802                  sub eax, 00000002
:0046DD58 75E3                    jne 0046DD3D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DD3B(C), :0046DD94(C)
|
:0046DD5A 5F                      pop edi
:0046DD5B 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DD16(C)
|
:0046DD5C C3                      ret

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DD29(C)
|
:0046DD5D 8BC8                    mov ecx, eax
:0046DD5F 83E003                  and eax, 00000003
:0046DD62 C1E902                  shr ecx, 02
:0046DD65 742B                    je 0046DD92
:0046DD67 F3                      repz
:0046DD68 A7                      cmpsd
:0046DD69 7427                    je 0046DD92
:0046DD6B 8B4EFC                  mov ecx, dword ptr [esi-04]
:0046DD6E 8B57FC                  mov edx, dword ptr [edi-04]
:0046DD71 38D1                    cmp cl, dl
:0046DD73 7510                    jne 0046DD85
:0046DD75 38F5                    cmp ch, dh
:0046DD77 750C                    jne 0046DD85
:0046DD79 C1E910                  shr ecx, 10
:0046DD7C C1EA10                  shr edx, 10
:0046DD7F 38D1                    cmp cl, dl
:0046DD81 7502                    jne 0046DD85
:0046DD83 38F5                    cmp ch, dh

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DD73(C), :0046DD77(C), :0046DD81(C), :0046DD9C(C), :0046DDA3(C)
|:0046DDB6(C)
|
:0046DD85 B800000000              mov eax, 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DD36(C), :0046DD43(C), :0046DD4D(C)
|
:0046DD8A 1BC0                    sbb eax, eax
:0046DD8C 5F                      pop edi
:0046DD8D 83D8FF                  sbb eax, FFFFFFFF
:0046DD90 5E                      pop esi
:0046DD91 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DD65(C), :0046DD69(C)
|
:0046DD92 85C0                    test eax, eax
:0046DD94 74C4                    je 0046DD5A
:0046DD96 8B16                    mov edx, dword ptr [esi]
:0046DD98 8B0F                    mov ecx, dword ptr [edi]
:0046DD9A 38CA                    cmp dl, cl
:0046DD9C 75E7                    jne 0046DD85
:0046DD9E 48                      dec eax
:0046DD9F 7418                    je 0046DDB9
:0046DDA1 38EE                    cmp dh, ch
:0046DDA3 75E0                    jne 0046DD85
:0046DDA5 48                      dec eax
:0046DDA6 7411                    je 0046DDB9
:0046DDA8 81E10000FF00            and ecx, 00FF0000
:0046DDAE 81E20000FF00            and edx, 00FF0000
:0046DDB4 3BD1                    cmp edx, ecx
:0046DDB6 75CD                    jne 0046DD85
:0046DDB8 48                      dec eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DD9F(C), :0046DDA6(C)
|
:0046DDB9 5F                      pop edi
:0046DDBA 5E                      pop esi
:0046DDBB C3                      ret


:0046DDBC CC                      int 03
:0046DDBD CC                      int 03
:0046DDBE CC                      int 03
:0046DDBF CC                      int 03

* Referenced by a CALL at Addresses:
|:00410182   , :004101FB   
|
:0046DDC0 57                      push edi
:0046DDC1 8B7C2408                mov edi, dword ptr [esp+08]
:0046DDC5 EB6A                    jmp 0046DE31
:0046DDC7 2E8BC0                  mov eax, eax
:0046DDCA 2E8BC0                  mov eax, eax
:0046DDCD 2E8BC0                  mov eax, eax

* Referenced by a CALL at Addresses:
|:00410194   , :004101A5   
|
:0046DDD0 8B4C2404                mov ecx, dword ptr [esp+04]
:0046DDD4 57                      push edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DDD5 F7C103000000            test ecx, 00000003
:0046DDDB 740F                    je 0046DDEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DDEA(C)
|
:0046DDDD 8A01                    mov al, byte ptr [ecx]
:0046DDDF 41                      inc ecx
:0046DDE0 84C0                    test al, al
:0046DDE2 743B                    je 0046DE1F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DDE4 F7C103000000            test ecx, 00000003
:0046DDEA 75F1                    jne 0046DDDD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DDDB(C), :0046DE02(C), :0046DE1D(U)
|
:0046DDEC 8B01                    mov eax, dword ptr [ecx]
:0046DDEE BAFFFEFE7E              mov edx, 7EFEFEFF
:0046DDF3 03D0                    add edx, eax
:0046DDF5 83F0FF                  xor eax, FFFFFFFF
:0046DDF8 33C2                    xor eax, edx
:0046DDFA 83C104                  add ecx, 00000004
:0046DDFD A900010181              test eax, 81010100
:0046DE02 74E8                    je 0046DDEC
:0046DE04 8B41FC                  mov eax, dword ptr [ecx-04]
:0046DE07 84C0                    test al, al
:0046DE09 7423                    je 0046DE2E
:0046DE0B 84E4                    test ah, ah
:0046DE0D 741A                    je 0046DE29
:0046DE0F A90000FF00              test eax, 00FF0000
:0046DE14 740E                    je 0046DE24
:0046DE16 A9000000FF              test eax, FF000000
:0046DE1B 7402                    je 0046DE1F
:0046DE1D EBCD                    jmp 0046DDEC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DDE2(C), :0046DE1B(C)
|
:0046DE1F 8D79FF                  lea edi, dword ptr [ecx-01]
:0046DE22 EB0D                    jmp 0046DE31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DE14(C)
|
:0046DE24 8D79FE                  lea edi, dword ptr [ecx-02]
:0046DE27 EB08                    jmp 0046DE31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DE0D(C)
|
:0046DE29 8D79FD                  lea edi, dword ptr [ecx-03]
:0046DE2C EB03                    jmp 0046DE31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DE09(C)
|
:0046DE2E 8D79FC                  lea edi, dword ptr [ecx-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DDC5(U), :0046DE22(U), :0046DE27(U), :0046DE2C(U)
|
:0046DE31 8B4C240C                mov ecx, dword ptr [esp+0C]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DE35 F7C103000000            test ecx, 00000003
:0046DE3B 7419                    je 0046DE56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DE4D(C)
|
:0046DE3D 8A11                    mov dl, byte ptr [ecx]
:0046DE3F 41                      inc ecx
:0046DE40 84D2                    test dl, dl
:0046DE42 7464                    je 0046DEA8
:0046DE44 8817                    mov byte ptr [edi], dl
:0046DE46 47                      inc edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DE47 F7C103000000            test ecx, 00000003
:0046DE4D 75EE                    jne 0046DE3D
:0046DE4F EB05                    jmp 0046DE56

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DE6E(C), :0046DE88(U)
|
:0046DE51 8917                    mov dword ptr [edi], edx
:0046DE53 83C704                  add edi, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DE3B(C), :0046DE4F(U)
|
:0046DE56 BAFFFEFE7E              mov edx, 7EFEFEFF
:0046DE5B 8B01                    mov eax, dword ptr [ecx]
:0046DE5D 03D0                    add edx, eax
:0046DE5F 83F0FF                  xor eax, FFFFFFFF
:0046DE62 33C2                    xor eax, edx
:0046DE64 8B11                    mov edx, dword ptr [ecx]
:0046DE66 83C104                  add ecx, 00000004
:0046DE69 A900010181              test eax, 81010100
:0046DE6E 74E1                    je 0046DE51
:0046DE70 84D2                    test dl, dl
:0046DE72 7434                    je 0046DEA8
:0046DE74 84F6                    test dh, dh
:0046DE76 7427                    je 0046DE9F
:0046DE78 F7C20000FF00            test edx, 00FF0000
:0046DE7E 7412                    je 0046DE92
:0046DE80 F7C2000000FF            test edx, FF000000
:0046DE86 7402                    je 0046DE8A
:0046DE88 EBC7                    jmp 0046DE51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DE86(C)
|
:0046DE8A 8917                    mov dword ptr [edi], edx
:0046DE8C 8B442408                mov eax, dword ptr [esp+08]
:0046DE90 5F                      pop edi
:0046DE91 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DE7E(C)
|
:0046DE92 668917                  mov word ptr [edi], dx
:0046DE95 8B442408                mov eax, dword ptr [esp+08]
:0046DE99 C6470200                mov [edi+02], 00
:0046DE9D 5F                      pop edi
:0046DE9E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DE76(C)
|
:0046DE9F 668917                  mov word ptr [edi], dx
:0046DEA2 8B442408                mov eax, dword ptr [esp+08]
:0046DEA6 5F                      pop edi
:0046DEA7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DE42(C), :0046DE72(C)
|
:0046DEA8 8817                    mov byte ptr [edi], dl
:0046DEAA 8B442408                mov eax, dword ptr [esp+08]
:0046DEAE 5F                      pop edi
:0046DEAF C3                      ret



* Referenced by a CALL at Address:
|:004108B9   
|
:0046DEB0 8B542404                mov edx, dword ptr [esp+04]
:0046DEB4 8B4C2408                mov ecx, dword ptr [esp+08]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046DEB8 F7C203000000            test edx, 00000003
:0046DEBE 753C                    jne 0046DEFC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DEEC(C), :0046DF16(C), :0046DF32(U)
|
:0046DEC0 8B02                    mov eax, dword ptr [edx]
:0046DEC2 3A01                    cmp al, byte ptr [ecx]
:0046DEC4 752E                    jne 0046DEF4
:0046DEC6 0AC0                    or al, al
:0046DEC8 7426                    je 0046DEF0
:0046DECA 3A6101                  cmp ah, byte ptr [ecx+01]
:0046DECD 7525                    jne 0046DEF4
:0046DECF 0AE4                    or ah, ah
:0046DED1 741D                    je 0046DEF0
:0046DED3 C1E810                  shr eax, 10
:0046DED6 3A4102                  cmp al, byte ptr [ecx+02]
:0046DED9 7519                    jne 0046DEF4
:0046DEDB 0AC0                    or al, al
:0046DEDD 7411                    je 0046DEF0
:0046DEDF 3A6103                  cmp ah, byte ptr [ecx+03]
:0046DEE2 7510                    jne 0046DEF4
:0046DEE4 83C104                  add ecx, 00000004
:0046DEE7 83C204                  add edx, 00000004
:0046DEEA 0AE4                    or ah, ah
:0046DEEC 75D2                    jne 0046DEC0
:0046DEEE 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DEC8(C), :0046DED1(C), :0046DEDD(C), :0046DF0E(C), :0046DF24(C)
|:0046DF2D(C)
|
:0046DEF0 33C0                    xor eax, eax
:0046DEF2 C3                      ret


:0046DEF3 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DEC4(C), :0046DECD(C), :0046DED9(C), :0046DEE2(C), :0046DF09(C)
|:0046DF20(C), :0046DF29(C)
|
:0046DEF4 1BC0                    sbb eax, eax
:0046DEF6 D1E0                    shl eax, 1
:0046DEF8 40                      inc eax
:0046DEF9 C3                      ret


:0046DEFA 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DEBE(C)
|
:0046DEFC F7C201000000            test edx, 00000001
:0046DF02 7414                    je 0046DF18
:0046DF04 8A02                    mov al, byte ptr [edx]
:0046DF06 42                      inc edx
:0046DF07 3A01                    cmp al, byte ptr [ecx]
:0046DF09 75E9                    jne 0046DEF4
:0046DF0B 41                      inc ecx
:0046DF0C 0AC0                    or al, al
:0046DF0E 74E0                    je 0046DEF0

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0046DF10 F7C202000000            test edx, 00000002
:0046DF16 74A8                    je 0046DEC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DF02(C)
|
:0046DF18 668B02                  mov ax, word ptr [edx]
:0046DF1B 83C202                  add edx, 00000002
:0046DF1E 3A01                    cmp al, byte ptr [ecx]
:0046DF20 75D2                    jne 0046DEF4
:0046DF22 0AC0                    or al, al
:0046DF24 74CA                    je 0046DEF0
:0046DF26 3A6101                  cmp ah, byte ptr [ecx+01]
:0046DF29 75C9                    jne 0046DEF4
:0046DF2B 0AE4                    or ah, ah
:0046DF2D 74C1                    je 0046DEF0
:0046DF2F 83C102                  add ecx, 00000002
:0046DF32 EB8C                    jmp 0046DEC0
:0046DF34 CC                      int 03
:0046DF35 CC                      int 03
:0046DF36 CC                      int 03
:0046DF37 CC                      int 03
:0046DF38 CC                      int 03
:0046DF39 CC                      int 03
:0046DF3A CC                      int 03
:0046DF3B CC                      int 03
:0046DF3C CC                      int 03
:0046DF3D CC                      int 03
:0046DF3E CC                      int 03
:0046DF3F CC                      int 03

* Referenced by a CALL at Addresses:
|:004147D6   , :0046D925   , :0046E85D   , :00470890   , :00470C1C   
|:00472349   , :0047235E   , :00472505   , :00472512   , :004725A0   
|:004725AD   
|
:0046DF40 51                      push ecx
:0046DF41 56                      push esi
:0046DF42 8B74240C                mov esi, dword ptr [esp+0C]
:0046DF46 85F6                    test esi, esi
:0046DF48 743D                    je 0046DF87
:0046DF4A 8D44240C                lea eax, dword ptr [esp+0C]
:0046DF4E 8D4C2404                lea ecx, dword ptr [esp+04]
:0046DF52 50                      push eax
:0046DF53 51                      push ecx
:0046DF54 56                      push esi
:0046DF55 E8461A0000              call 0046F9A0
:0046DF5A 83C40C                  add esp, 0000000C
:0046DF5D 85C0                    test eax, eax
:0046DF5F 7416                    je 0046DF77
:0046DF61 8B54240C                mov edx, dword ptr [esp+0C]
:0046DF65 50                      push eax
:0046DF66 8B442408                mov eax, dword ptr [esp+08]
:0046DF6A 52                      push edx
:0046DF6B 50                      push eax
:0046DF6C E88F1A0000              call 0046FA00
:0046DF71 83C40C                  add esp, 0000000C
:0046DF74 5E                      pop esi
:0046DF75 59                      pop ecx
:0046DF76 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DF5F(C)
|
:0046DF77 8B0DC47A4B00            mov ecx, dword ptr [004B7AC4]
:0046DF7D 56                      push esi
:0046DF7E 6A00                    push 00000000
:0046DF80 51                      push ecx

* Reference To: KERNEL32.HeapFree, Ord:016Eh
                                  |
:0046DF81 FF1500864B00            Call dword ptr [004B8600]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DF48(C)
|
:0046DF87 5E                      pop esi
:0046DF88 59                      pop ecx
:0046DF89 C3                      ret


:0046DF8A 90                      nop
:0046DF8B 90                      nop
:0046DF8C 90                      nop
:0046DF8D 90                      nop
:0046DF8E 90                      nop
:0046DF8F 90                      nop

* Referenced by a CALL at Addresses:
|:00414766   , :0046D495   , :0046E844   , :004707F8   , :0047083C   
|:00470904   , :00470BF7   , :00470C71   , :00470FAC   , :00471057   
|:00472484   , :00472525   
|
:0046DF90 A1B46F4B00              mov eax, dword ptr [004B6FB4]
:0046DF95 8B4C2404                mov ecx, dword ptr [esp+04]
:0046DF99 50                      push eax
:0046DF9A 51                      push ecx
:0046DF9B E810000000              call 0046DFB0
:0046DFA0 83C408                  add esp, 00000008
:0046DFA3 C3                      ret


:0046DFA4 90                      nop
:0046DFA5 90                      nop
:0046DFA6 90                      nop
:0046DFA7 90                      nop
:0046DFA8 90                      nop
:0046DFA9 90                      nop
:0046DFAA 90                      nop
:0046DFAB 90                      nop
:0046DFAC 90                      nop
:0046DFAD 90                      nop
:0046DFAE 90                      nop
:0046DFAF 90                      nop

* Referenced by a CALL at Addresses:
|:0046D9C7   , :0046DF9B   
|
:0046DFB0 56                      push esi
:0046DFB1 8B742408                mov esi, dword ptr [esp+08]
:0046DFB5 83FEE0                  cmp esi, FFFFFFE0
:0046DFB8 57                      push edi
:0046DFB9 7734                    ja 0046DFEF
:0046DFBB 85F6                    test esi, esi
:0046DFBD 7505                    jne 0046DFC4
:0046DFBF BE01000000              mov esi, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFBD(C)
|
:0046DFC4 8B7C2410                mov edi, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFED(C)
|
:0046DFC8 83FEE0                  cmp esi, FFFFFFE0
:0046DFCB 770B                    ja 0046DFD8
:0046DFCD 56                      push esi
:0046DFCE E82D000000              call 0046E000
:0046DFD3 83C404                  add esp, 00000004
:0046DFD6 EB02                    jmp 0046DFDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFCB(C)
|
:0046DFD8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFD6(U)
|
:0046DFDA 85C0                    test eax, eax
:0046DFDC 7513                    jne 0046DFF1
:0046DFDE 85FF                    test edi, edi
:0046DFE0 740F                    je 0046DFF1
:0046DFE2 56                      push esi
:0046DFE3 E8081F0000              call 0046FEF0
:0046DFE8 83C404                  add esp, 00000004
:0046DFEB 85C0                    test eax, eax
:0046DFED 75D9                    jne 0046DFC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFB9(C)
|
:0046DFEF 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DFDC(C), :0046DFE0(C)
|
:0046DFF1 5F                      pop edi
:0046DFF2 5E                      pop esi
:0046DFF3 C3                      ret


:0046DFF4 90                      nop
:0046DFF5 90                      nop
:0046DFF6 90                      nop
:0046DFF7 90                      nop
:0046DFF8 90                      nop
:0046DFF9 90                      nop
:0046DFFA 90                      nop
:0046DFFB 90                      nop
:0046DFFC 90                      nop
:0046DFFD 90                      nop
:0046DFFE 90                      nop
:0046DFFF 90                      nop

* Referenced by a CALL at Address:
|:0046DFCE   
|
:0046E000 8B442404                mov eax, dword ptr [esp+04]
:0046E004 56                      push esi
:0046E005 8D700F                  lea esi, dword ptr [eax+0F]
:0046E008 A1640A4800              mov eax, dword ptr [00480A64]
:0046E00D 83E6F0                  and esi, FFFFFFF0
:0046E010 3BF0                    cmp esi, eax
:0046E012 7712                    ja 0046E026
:0046E014 8BCE                    mov ecx, esi
:0046E016 C1E904                  shr ecx, 04
:0046E019 51                      push ecx
:0046E01A E8411A0000              call 0046FA60
:0046E01F 83C404                  add esp, 00000004
:0046E022 85C0                    test eax, eax
:0046E024 7510                    jne 0046E036

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E012(C)
|
:0046E026 8B15C47A4B00            mov edx, dword ptr [004B7AC4]
:0046E02C 56                      push esi
:0046E02D 6A00                    push 00000000
:0046E02F 52                      push edx

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:0046E030 FF15F0854B00            Call dword ptr [004B85F0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E024(C)
|
:0046E036 5E                      pop esi
:0046E037 C3                      ret


:0046E038 90                      nop
:0046E039 90                      nop
:0046E03A 90                      nop
:0046E03B 90                      nop
:0046E03C 90                      nop
:0046E03D 90                      nop
:0046E03E 90                      nop
:0046E03F 90                      nop

* Referenced by a CALL at Address:
|:00415815   
|
:0046E040 8B4C2404                mov ecx, dword ptr [esp+04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046E044 F7C103000000            test ecx, 00000003
:0046E04A 7414                    je 0046E060

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E059(C)
|
:0046E04C 8A01                    mov al, byte ptr [ecx]
:0046E04E 41                      inc ecx
:0046E04F 84C0                    test al, al
:0046E051 7440                    je 0046E093

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046E053 F7C103000000            test ecx, 00000003
:0046E059 75F1                    jne 0046E04C
:0046E05B 0500000000              add eax, 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E04A(C), :0046E076(C), :0046E091(U)
|
:0046E060 8B01                    mov eax, dword ptr [ecx]
:0046E062 BAFFFEFE7E              mov edx, 7EFEFEFF
:0046E067 03D0                    add edx, eax
:0046E069 83F0FF                  xor eax, FFFFFFFF
:0046E06C 33C2                    xor eax, edx
:0046E06E 83C104                  add ecx, 00000004
:0046E071 A900010181              test eax, 81010100
:0046E076 74E8                    je 0046E060
:0046E078 8B41FC                  mov eax, dword ptr [ecx-04]
:0046E07B 84C0                    test al, al
:0046E07D 7432                    je 0046E0B1
:0046E07F 84E4                    test ah, ah
:0046E081 7424                    je 0046E0A7
:0046E083 A90000FF00              test eax, 00FF0000
:0046E088 7413                    je 0046E09D
:0046E08A A9000000FF              test eax, FF000000
:0046E08F 7402                    je 0046E093
:0046E091 EBCD                    jmp 0046E060

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E051(C), :0046E08F(C)
|
:0046E093 8D41FF                  lea eax, dword ptr [ecx-01]
:0046E096 8B4C2404                mov ecx, dword ptr [esp+04]
:0046E09A 2BC1                    sub eax, ecx
:0046E09C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E088(C)
|
:0046E09D 8D41FE                  lea eax, dword ptr [ecx-02]
:0046E0A0 8B4C2404                mov ecx, dword ptr [esp+04]
:0046E0A4 2BC1                    sub eax, ecx
:0046E0A6 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E081(C)
|
:0046E0A7 8D41FD                  lea eax, dword ptr [ecx-03]
:0046E0AA 8B4C2404                mov ecx, dword ptr [esp+04]
:0046E0AE 2BC1                    sub eax, ecx
:0046E0B0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E07D(C)
|
:0046E0B1 8D41FC                  lea eax, dword ptr [ecx-04]
:0046E0B4 8B4C2404                mov ecx, dword ptr [esp+04]
:0046E0B8 2BC1                    sub eax, ecx
:0046E0BA C3                      ret


:0046E0BB CC                      int 03
:0046E0BC CC                      int 03
:0046E0BD CC                      int 03
:0046E0BE CC                      int 03
:0046E0BF CC                      int 03
:0046E0C0 E82B000000              call 0046E0F0
:0046E0C5 E8B61E0000              call 0046FF80
:0046E0CA A3446F4B00              mov dword ptr [004B6F44], eax
:0046E0CF E83C1E0000              call 0046FF10
:0046E0D4 DBE2                    fclex
:0046E0D6 C3                      ret


:0046E0D7 90                      nop
:0046E0D8 90                      nop
:0046E0D9 90                      nop
:0046E0DA 90                      nop
:0046E0DB 90                      nop
:0046E0DC 90                      nop
:0046E0DD 90                      nop
:0046E0DE 90                      nop
:0046E0DF 90                      nop
:0046E0E0 C3                      ret


:0046E0E1 90                      nop
:0046E0E2 90                      nop
:0046E0E3 90                      nop
:0046E0E4 90                      nop
:0046E0E5 90                      nop
:0046E0E6 90                      nop
:0046E0E7 90                      nop
:0046E0E8 90                      nop
:0046E0E9 90                      nop
:0046E0EA 90                      nop
:0046E0EB 90                      nop
:0046E0EC 90                      nop
:0046E0ED 90                      nop
:0046E0EE 90                      nop
:0046E0EF 90                      nop

* Referenced by a CALL at Address:
|:0046E0C0   
|
:0046E0F0 B850044700              mov eax, 00470450
:0046E0F5 C7056C0A480010004700    mov dword ptr [00480A6C], 00470010
:0046E0FF A3680A4800              mov dword ptr [00480A68], eax
:0046E104 C705700A4800A0004700    mov dword ptr [00480A70], 004700A0
:0046E10E C705740A4800B0FF4600    mov dword ptr [00480A74], 0046FFB0
:0046E118 C705780A480080004700    mov dword ptr [00480A78], 00470080
:0046E122 A37C0A4800              mov dword ptr [00480A7C], eax
:0046E127 C3                      ret


:0046E128 90                      nop
:0046E129 90                      nop
:0046E12A 90                      nop
:0046E12B 90                      nop
:0046E12C 90                      nop
:0046E12D 90                      nop
:0046E12E 90                      nop
:0046E12F 90                      nop

* Referenced by a CALL at Addresses:
|:0041D343   , :0041D916   , :0041F0A2   
|
:0046E130 55                      push ebp
:0046E131 8BEC                    mov ebp, esp
:0046E133 83C4F4                  add esp, FFFFFFF4
:0046E136 9B                      wait
:0046E137 D97DFE                  fstcw word ptr [ebp-02]
:0046E13A 9B                      wait
:0046E13B 668B45FE                mov ax, word ptr [ebp-02]
:0046E13F 80CC0C                  or ah, 0C
:0046E142 668945FC                mov word ptr [ebp-04], ax
:0046E146 D96DFC                  fldcw  [ebp-04]
:0046E149 DF7DF4                  fistp qword ptr [ebp-0C]
:0046E14C D96DFE                  fldcw  [ebp-02]
:0046E14F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046E152 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E155 C9                      leave
:0046E156 C3                      ret


:0046E157 CC                      int 03
:0046E158 CC                      int 03
:0046E159 CC                      int 03
:0046E15A CC                      int 03
:0046E15B CC                      int 03
:0046E15C CC                      int 03
:0046E15D CC                      int 03
:0046E15E CC                      int 03
:0046E15F CC                      int 03

* Referenced by a CALL at Addresses:
|:00420D37   , :00425518   , :00425571   , :004255C7   , :0042561D   
|:00425673   , :004256C9   , :00425761   , :004257BA   , :00425810   
|:0042945F   , :004296E5   
|
:0046E160 55                      push ebp
:0046E161 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046E163 6AFF                    push FFFFFFFF
:0046E165 68984D4700              push 00474D98
:0046E16A 68F8044700              push 004704F8
:0046E16F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046E175 50                      push eax
:0046E176 64892500000000          mov dword ptr fs:[00000000], esp
:0046E17D 83C4F0                  add esp, FFFFFFF0
:0046E180 53                      push ebx
:0046E181 56                      push esi
:0046E182 57                      push edi
:0046E183 33F6                    xor esi, esi
:0046E185 8975E0                  mov dword ptr [ebp-20], esi
:0046E188 8975FC                  mov dword ptr [ebp-04], esi
:0046E18B 8975E4                  mov dword ptr [ebp-1C], esi
:0046E18E 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046E191 8B7D08                  mov edi, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E1A7(U)
|
:0046E194 3B7510                  cmp esi, dword ptr [ebp+10]
:0046E197 7D10                    jge 0046E1A9
:0046E199 8BCF                    mov ecx, edi
:0046E19B FF5514                  call [ebp+14]
:0046E19E 03FB                    add edi, ebx
:0046E1A0 897D08                  mov dword ptr [ebp+08], edi
:0046E1A3 46                      inc esi
:0046E1A4 8975E4                  mov dword ptr [ebp-1C], esi
:0046E1A7 EBEB                    jmp 0046E194

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E197(C)
|
:0046E1A9 C745E001000000          mov [ebp-20], 00000001
:0046E1B0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046E1B7 E81C000000              call 0046E1D8
:0046E1BC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046E1BF 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046E1C6 5F                      pop edi
:0046E1C7 5E                      pop esi
:0046E1C8 5B                      pop ebx
:0046E1C9 8BE5                    mov esp, ebp
:0046E1CB 5D                      pop ebp
:0046E1CC C21400                  ret 0014


:0046E1CF 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046E1D2 8B7D08                  mov edi, dword ptr [ebp+08]
:0046E1D5 8B75E4                  mov esi, dword ptr [ebp-1C]

* Referenced by a CALL at Address:
|:0046E1B7   
|
:0046E1D8 8B45E0                  mov eax, dword ptr [ebp-20]
:0046E1DB 85C0                    test eax, eax
:0046E1DD 750C                    jne 0046E1EB
:0046E1DF 8B4518                  mov eax, dword ptr [ebp+18]
:0046E1E2 50                      push eax
:0046E1E3 56                      push esi
:0046E1E4 53                      push ebx
:0046E1E5 57                      push edi
:0046E1E6 E8C5000000              call 0046E2B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E1DD(C)
|
:0046E1EB C3                      ret
:0046E1EC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046E1EF 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046E1F6 5F                      pop edi
:0046E1F7 5E                      pop esi
:0046E1F8 5B                      pop ebx
:0046E1F9 8BE5                    mov esp, ebp
:0046E1FB 5D                      pop ebp
:0046E1FC C21400                  ret 0014


:0046E1FF 90                      nop

* Referenced by a CALL at Addresses:
|:00420D64   , :00425545   , :0042559B   , :004255F1   , :00425647   
|:0042569D   , :004256F3   , :0042578E   , :004257E4   , :0042583A   
|:004295E7   , :0042970F   
|
:0046E200 55                      push ebp
:0046E201 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046E203 6AFF                    push FFFFFFFF
:0046E205 68A84D4700              push 00474DA8
:0046E20A 68F8044700              push 004704F8
:0046E20F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046E215 50                      push eax
:0046E216 64892500000000          mov dword ptr fs:[00000000], esp
:0046E21D 83C4F4                  add esp, FFFFFFF4
:0046E220 53                      push ebx
:0046E221 56                      push esi
:0046E222 57                      push edi
:0046E223 33C0                    xor eax, eax
:0046E225 8945E4                  mov dword ptr [ebp-1C], eax
:0046E228 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046E22B 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0046E22E 0FAFCF                  imul ecx, edi
:0046E231 8B7508                  mov esi, dword ptr [ebp+08]
:0046E234 03F1                    add esi, ecx
:0046E236 897508                  mov dword ptr [ebp+08], esi
:0046E239 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E24B(U)
|
:0046E23C FF4D10                  dec [ebp+10]
:0046E23F 780C                    js 0046E24D
:0046E241 2BF7                    sub esi, edi
:0046E243 897508                  mov dword ptr [ebp+08], esi
:0046E246 8BCE                    mov ecx, esi
:0046E248 FF5514                  call [ebp+14]
:0046E24B EBEF                    jmp 0046E23C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E23F(C)
|
:0046E24D C745E401000000          mov [ebp-1C], 00000001
:0046E254 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046E25B E819000000              call 0046E279
:0046E260 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046E263 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046E26A 5F                      pop edi
:0046E26B 5E                      pop esi
:0046E26C 5B                      pop ebx
:0046E26D 8BE5                    mov esp, ebp
:0046E26F 5D                      pop ebp
:0046E270 C21000                  ret 0010


:0046E273 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0046E276 8B7508                  mov esi, dword ptr [ebp+08]

* Referenced by a CALL at Address:
|:0046E25B   
|
:0046E279 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046E27C 85C0                    test eax, eax
:0046E27E 750F                    jne 0046E28F
:0046E280 8B5514                  mov edx, dword ptr [ebp+14]
:0046E283 52                      push edx
:0046E284 8B4510                  mov eax, dword ptr [ebp+10]
:0046E287 50                      push eax
:0046E288 57                      push edi
:0046E289 56                      push esi
:0046E28A E821000000              call 0046E2B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E27E(C)
|
:0046E28F C3                      ret
:0046E290 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046E293 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046E29A 5F                      pop edi
:0046E29B 5E                      pop esi
:0046E29C 5B                      pop ebx
:0046E29D 8BE5                    mov esp, ebp
:0046E29F 5D                      pop ebp
:0046E2A0 C21000                  ret 0010


:0046E2A3 90                      nop
:0046E2A4 90                      nop
:0046E2A5 90                      nop
:0046E2A6 90                      nop
:0046E2A7 90                      nop
:0046E2A8 90                      nop
:0046E2A9 90                      nop
:0046E2AA 90                      nop
:0046E2AB 90                      nop
:0046E2AC 90                      nop
:0046E2AD 90                      nop
:0046E2AE 90                      nop
:0046E2AF 90                      nop

* Referenced by a CALL at Addresses:
|:0046E1E6   , :0046E28A   
|
:0046E2B0 55                      push ebp
:0046E2B1 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046E2B3 6AFF                    push FFFFFFFF
:0046E2B5 68B84D4700              push 00474DB8
:0046E2BA 68F8044700              push 004704F8
:0046E2BF 64A100000000            mov eax, dword ptr fs:[00000000]
:0046E2C5 50                      push eax
:0046E2C6 64892500000000          mov dword ptr fs:[00000000], esp
:0046E2CD 83EC08                  sub esp, 00000008
:0046E2D0 53                      push ebx
:0046E2D1 56                      push esi
:0046E2D2 57                      push edi
:0046E2D3 8965E8                  mov dword ptr [ebp-18], esp
:0046E2D6 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E2EE(U)
|
:0046E2DD FF4D10                  dec [ebp+10]
:0046E2E0 781E                    js 0046E300
:0046E2E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E2E5 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:0046E2E8 894D08                  mov dword ptr [ebp+08], ecx
:0046E2EB FF5514                  call [ebp+14]
:0046E2EE EBED                    jmp 0046E2DD
:0046E2F0 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E2F3 50                      push eax
:0046E2F4 E8670D0000              call 0046F060
:0046E2F9 83C404                  add esp, 00000004
:0046E2FC C3                      ret


:0046E2FD 8B65E8                  mov esp, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E2E0(C)
|
:0046E300 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046E307 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046E30A 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046E311 5F                      pop edi
:0046E312 5E                      pop esi
:0046E313 5B                      pop ebx
:0046E314 8BE5                    mov esp, ebp
:0046E316 5D                      pop ebp
:0046E317 C21000                  ret 0010


:0046E31A 90                      nop
:0046E31B 90                      nop
:0046E31C 90                      nop
:0046E31D 90                      nop
:0046E31E 90                      nop
:0046E31F 90                      nop

* Referenced by a CALL at Addresses:
|:0046283E   , :0046F372   , :0046F3EB   , :004704DE   
|
:0046E320 55                      push ebp
:0046E321 8BEC                    mov ebp, esp
:0046E323 57                      push edi
:0046E324 56                      push esi
:0046E325 8B750C                  mov esi, dword ptr [ebp+0C]
:0046E328 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046E32B 8B7D08                  mov edi, dword ptr [ebp+08]
:0046E32E 8BC1                    mov eax, ecx
:0046E330 8BD1                    mov edx, ecx
:0046E332 03C6                    add eax, esi
:0046E334 3BFE                    cmp edi, esi
:0046E336 7608                    jbe 0046E340
:0046E338 3BF8                    cmp edi, eax
:0046E33A 0F8278010000            jb 0046E4B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E336(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046E340 F7C703000000            test edi, 00000003
:0046E346 7514                    jne 0046E35C
:0046E348 C1E902                  shr ecx, 02
:0046E34B 83E203                  and edx, 00000003
:0046E34E 83F908                  cmp ecx, 00000008
:0046E351 7229                    jb 0046E37C
:0046E353 F3                      repz
:0046E354 A5                      movsd
:0046E355 FF249568E44600          jmp dword ptr [4*edx+0046E468]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E346(C)
|
:0046E35C 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046E35E BA03000000              mov edx, 00000003
:0046E363 83E904                  sub ecx, 00000004
:0046E366 720C                    jb 0046E374
:0046E368 83E003                  and eax, 00000003
:0046E36B 03C8                    add ecx, eax
:0046E36D FF248580E34600          jmp dword ptr [4*eax+0046E380]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E366(C)
|
:0046E374 FF248D78E44600          jmp dword ptr [4*ecx+0046E478]
:0046E37B 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E351(C), :0046E3AE(C), :0046E3D4(C), :0046E3EE(C)
|
:0046E37C FF248DFCE34600          jmp dword ptr [4*ecx+0046E3FC]
:0046E383 90                      nop

:0046E384 90E34600                DWORD 0046E390
:0046E388 BCE34600                DWORD 0046E3BC
:0046E38C E0E34600                DWORD 0046E3E0


:0046E390 23D1                    and edx, ecx
:0046E392 8A06                    mov al, byte ptr [esi]
:0046E394 8807                    mov byte ptr [edi], al
:0046E396 8A4601                  mov al, byte ptr [esi+01]
:0046E399 884701                  mov byte ptr [edi+01], al
:0046E39C 8A4602                  mov al, byte ptr [esi+02]
:0046E39F C1E902                  shr ecx, 02
:0046E3A2 884702                  mov byte ptr [edi+02], al
:0046E3A5 83C603                  add esi, 00000003
:0046E3A8 83C703                  add edi, 00000003
:0046E3AB 83F908                  cmp ecx, 00000008
:0046E3AE 72CC                    jb 0046E37C
:0046E3B0 F3                      repz
:0046E3B1 A5                      movsd
:0046E3B2 FF249568E44600          jmp dword ptr [4*edx+0046E468]
:0046E3B9 2E8BC0                  mov eax, eax
:0046E3BC 23D1                    and edx, ecx
:0046E3BE 8A06                    mov al, byte ptr [esi]
:0046E3C0 8807                    mov byte ptr [edi], al
:0046E3C2 8A4601                  mov al, byte ptr [esi+01]
:0046E3C5 C1E902                  shr ecx, 02
:0046E3C8 884701                  mov byte ptr [edi+01], al
:0046E3CB 83C602                  add esi, 00000002
:0046E3CE 83C702                  add edi, 00000002
:0046E3D1 83F908                  cmp ecx, 00000008
:0046E3D4 72A6                    jb 0046E37C
:0046E3D6 F3                      repz
:0046E3D7 A5                      movsd
:0046E3D8 FF249568E44600          jmp dword ptr [4*edx+0046E468]
:0046E3DF 90                      nop
:0046E3E0 23D1                    and edx, ecx
:0046E3E2 8A06                    mov al, byte ptr [esi]
:0046E3E4 8807                    mov byte ptr [edi], al
:0046E3E6 46                      inc esi
:0046E3E7 C1E902                  shr ecx, 02
:0046E3EA 47                      inc edi
:0046E3EB 83F908                  cmp ecx, 00000008
:0046E3EE 728C                    jb 0046E37C
:0046E3F0 F3                      repz
:0046E3F1 A5                      movsd
:0046E3F2 FF249568E44600          jmp dword ptr [4*edx+0046E468]
:0046E3F9 2E8BC0                  mov eax, eax

:0046E3FC 5FE44600                DWORD 0046E45F
:0046E400 4CE44600                DWORD 0046E44C
:0046E404 44E44600                DWORD 0046E444
:0046E408 3CE44600                DWORD 0046E43C
:0046E40C 34E44600                DWORD 0046E434
:0046E410 2CE44600                DWORD 0046E42C
:0046E414 24E44600                DWORD 0046E424
:0046E418 1CE44600                DWORD 0046E41C


:0046E41C 8B448EE4                mov eax, dword ptr [esi+4*ecx-1C]
:0046E420 89448FE4                mov dword ptr [edi+4*ecx-1C], eax
:0046E424 8B448EE8                mov eax, dword ptr [esi+4*ecx-18]
:0046E428 89448FE8                mov dword ptr [edi+4*ecx-18], eax
:0046E42C 8B448EEC                mov eax, dword ptr [esi+4*ecx-14]
:0046E430 89448FEC                mov dword ptr [edi+4*ecx-14], eax
:0046E434 8B448EF0                mov eax, dword ptr [esi+4*ecx-10]
:0046E438 89448FF0                mov dword ptr [edi+4*ecx-10], eax
:0046E43C 8B448EF4                mov eax, dword ptr [esi+4*ecx-0C]
:0046E440 89448FF4                mov dword ptr [edi+4*ecx-0C], eax
:0046E444 8B448EF8                mov eax, dword ptr [esi+4*ecx-08]
:0046E448 89448FF8                mov dword ptr [edi+4*ecx-08], eax
:0046E44C 8B448EFC                mov eax, dword ptr [esi+4*ecx-04]
:0046E450 89448FFC                mov dword ptr [edi+4*ecx-04], eax
:0046E454 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:0046E45B 03F0                    add esi, eax
:0046E45D 03F8                    add edi, eax
:0046E45F FF249568E44600          jmp dword ptr [4*edx+0046E468]
:0046E466 8BC0                    mov eax, eax

:0046E468 78E44600                DWORD 0046E478
:0046E46C 80E44600                DWORD 0046E480
:0046E470 8CE44600                DWORD 0046E48C
:0046E474 A0E44600                DWORD 0046E4A0


:0046E478 8B4508                  mov eax, dword ptr [ebp+08]
:0046E47B 5E                      pop esi
:0046E47C 5F                      pop edi
:0046E47D C9                      leave
:0046E47E C3                      ret


:0046E47F 90                      nop
:0046E480 8A06                    mov al, byte ptr [esi]
:0046E482 8807                    mov byte ptr [edi], al
:0046E484 8B4508                  mov eax, dword ptr [ebp+08]
:0046E487 5E                      pop esi
:0046E488 5F                      pop edi
:0046E489 C9                      leave
:0046E48A C3                      ret


:0046E48B 90                      nop
:0046E48C 8A06                    mov al, byte ptr [esi]
:0046E48E 8807                    mov byte ptr [edi], al
:0046E490 8A4601                  mov al, byte ptr [esi+01]
:0046E493 884701                  mov byte ptr [edi+01], al
:0046E496 8B4508                  mov eax, dword ptr [ebp+08]
:0046E499 5E                      pop esi
:0046E49A 5F                      pop edi
:0046E49B C9                      leave
:0046E49C C3                      ret


:0046E49D 2E8BC0                  mov eax, eax
:0046E4A0 8A06                    mov al, byte ptr [esi]
:0046E4A2 8807                    mov byte ptr [edi], al
:0046E4A4 8A4601                  mov al, byte ptr [esi+01]
:0046E4A7 884701                  mov byte ptr [edi+01], al
:0046E4AA 8A4602                  mov al, byte ptr [esi+02]
:0046E4AD 884702                  mov byte ptr [edi+02], al
:0046E4B0 8B4508                  mov eax, dword ptr [ebp+08]
:0046E4B3 5E                      pop esi
:0046E4B4 5F                      pop edi
:0046E4B5 C9                      leave
:0046E4B6 C3                      ret


:0046E4B7 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E33A(C)
|
:0046E4B8 8D7431FC                lea esi, dword ptr [ecx+esi-04]
:0046E4BC 8D7C39FC                lea edi, dword ptr [ecx+edi-04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046E4C0 F7C703000000            test edi, 00000003
:0046E4C6 7524                    jne 0046E4EC
:0046E4C8 C1E902                  shr ecx, 02
:0046E4CB 83E203                  and edx, 00000003
:0046E4CE 83F908                  cmp ecx, 00000008
:0046E4D1 720D                    jb 0046E4E0
:0046E4D3 FD                      std
:0046E4D4 F3                      repz
:0046E4D5 A5                      movsd
:0046E4D6 FC                      cld
:0046E4D7 FF249500E64600          jmp dword ptr [4*edx+0046E600]
:0046E4DE 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E4D1(C), :0046E528(C), :0046E552(C), :0046E580(C)
|
:0046E4E0 F7D9                    neg ecx
:0046E4E2 FF248DB0E54600          jmp dword ptr [4*ecx+0046E5B0]
:0046E4E9 2E8BC0                  mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E4C6(C)
|
:0046E4EC 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046E4EE BA03000000              mov edx, 00000003
:0046E4F3 83F904                  cmp ecx, 00000004
:0046E4F6 720C                    jb 0046E504
:0046E4F8 83E003                  and eax, 00000003
:0046E4FB 2BC8                    sub ecx, eax
:0046E4FD FF248508E54600          jmp dword ptr [4*eax+0046E508]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E4F6(C)
|
:0046E504 FF248D00E64600          jmp dword ptr [4*ecx+0046E600]
:0046E50B 90                      nop

:0046E50C 18E54600                DWORD 0046E518
:0046E510 38E54600                DWORD 0046E538
:0046E514 60E54600                DWORD 0046E560


:0046E518 8A4603                  mov al, byte ptr [esi+03]
:0046E51B 23D1                    and edx, ecx
:0046E51D 884703                  mov byte ptr [edi+03], al
:0046E520 4E                      dec esi
:0046E521 C1E902                  shr ecx, 02
:0046E524 4F                      dec edi
:0046E525 83F908                  cmp ecx, 00000008
:0046E528 72B6                    jb 0046E4E0
:0046E52A FD                      std
:0046E52B F3                      repz
:0046E52C A5                      movsd
:0046E52D FC                      cld
:0046E52E FF249500E64600          jmp dword ptr [4*edx+0046E600]
:0046E535 2E8BC0                  mov eax, eax
:0046E538 8A4603                  mov al, byte ptr [esi+03]
:0046E53B 23D1                    and edx, ecx
:0046E53D 884703                  mov byte ptr [edi+03], al
:0046E540 8A4602                  mov al, byte ptr [esi+02]
:0046E543 C1E902                  shr ecx, 02
:0046E546 884702                  mov byte ptr [edi+02], al
:0046E549 83EE02                  sub esi, 00000002
:0046E54C 83EF02                  sub edi, 00000002
:0046E54F 83F908                  cmp ecx, 00000008
:0046E552 728C                    jb 0046E4E0
:0046E554 FD                      std
:0046E555 F3                      repz
:0046E556 A5                      movsd
:0046E557 FC                      cld
:0046E558 FF249500E64600          jmp dword ptr [4*edx+0046E600]
:0046E55F 90                      nop
:0046E560 8A4603                  mov al, byte ptr [esi+03]
:0046E563 23D1                    and edx, ecx
:0046E565 884703                  mov byte ptr [edi+03], al
:0046E568 8A4602                  mov al, byte ptr [esi+02]
:0046E56B 884702                  mov byte ptr [edi+02], al
:0046E56E 8A4601                  mov al, byte ptr [esi+01]
:0046E571 C1E902                  shr ecx, 02
:0046E574 884701                  mov byte ptr [edi+01], al
:0046E577 83EE03                  sub esi, 00000003
:0046E57A 83EF03                  sub edi, 00000003
:0046E57D 83F908                  cmp ecx, 00000008
:0046E580 0F825AFFFFFF            jb 0046E4E0
:0046E586 FD                      std
:0046E587 F3                      repz
:0046E588 A5                      movsd
:0046E589 FC                      cld
:0046E58A FF249500E64600          jmp dword ptr [4*edx+0046E600]
:0046E591 2E8BC0                  mov eax, eax

:0046E594 B4E54600                DWORD 0046E5B4
:0046E598 BCE54600                DWORD 0046E5BC
:0046E59C C4E54600                DWORD 0046E5C4
:0046E5A0 CCE54600                DWORD 0046E5CC
:0046E5A4 D4E54600                DWORD 0046E5D4
:0046E5A8 DCE54600                DWORD 0046E5DC
:0046E5AC E4E54600                DWORD 0046E5E4
:0046E5B0 F7E54600                DWORD 0046E5F7


:0046E5B4 8B448E1C                mov eax, dword ptr [esi+4*ecx+1C]
:0046E5B8 89448F1C                mov dword ptr [edi+4*ecx+1C], eax
:0046E5BC 8B448E18                mov eax, dword ptr [esi+4*ecx+18]
:0046E5C0 89448F18                mov dword ptr [edi+4*ecx+18], eax
:0046E5C4 8B448E14                mov eax, dword ptr [esi+4*ecx+14]
:0046E5C8 89448F14                mov dword ptr [edi+4*ecx+14], eax
:0046E5CC 8B448E10                mov eax, dword ptr [esi+4*ecx+10]
:0046E5D0 89448F10                mov dword ptr [edi+4*ecx+10], eax
:0046E5D4 8B448E0C                mov eax, dword ptr [esi+4*ecx+0C]
:0046E5D8 89448F0C                mov dword ptr [edi+4*ecx+0C], eax
:0046E5DC 8B448E08                mov eax, dword ptr [esi+4*ecx+08]
:0046E5E0 89448F08                mov dword ptr [edi+4*ecx+08], eax
:0046E5E4 8B448E04                mov eax, dword ptr [esi+4*ecx+04]
:0046E5E8 89448F04                mov dword ptr [edi+4*ecx+04], eax
:0046E5EC 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:0046E5F3 03F0                    add esi, eax
:0046E5F5 03F8                    add edi, eax
:0046E5F7 FF249500E64600          jmp dword ptr [4*edx+0046E600]
:0046E5FE 8BC0                    mov eax, eax

:0046E600 10E64600                DWORD 0046E610
:0046E604 18E64600                DWORD 0046E618
:0046E608 28E64600                DWORD 0046E628
:0046E60C 3CE64600                DWORD 0046E63C


:0046E610 8B4508                  mov eax, dword ptr [ebp+08]
:0046E613 5E                      pop esi
:0046E614 5F                      pop edi
:0046E615 C9                      leave
:0046E616 C3                      ret


:0046E617 90                      nop
:0046E618 8A4603                  mov al, byte ptr [esi+03]
:0046E61B 884703                  mov byte ptr [edi+03], al
:0046E61E 8B4508                  mov eax, dword ptr [ebp+08]
:0046E621 5E                      pop esi
:0046E622 5F                      pop edi
:0046E623 C9                      leave
:0046E624 C3                      ret


:0046E625 2E8BC0                  mov eax, eax
:0046E628 8A4603                  mov al, byte ptr [esi+03]
:0046E62B 884703                  mov byte ptr [edi+03], al
:0046E62E 8A4602                  mov al, byte ptr [esi+02]
:0046E631 884702                  mov byte ptr [edi+02], al
:0046E634 8B4508                  mov eax, dword ptr [ebp+08]
:0046E637 5E                      pop esi
:0046E638 5F                      pop edi
:0046E639 C9                      leave
:0046E63A C3                      ret


:0046E63B 90                      nop
:0046E63C 8A4603                  mov al, byte ptr [esi+03]
:0046E63F 884703                  mov byte ptr [edi+03], al
:0046E642 8A4602                  mov al, byte ptr [esi+02]
:0046E645 884702                  mov byte ptr [edi+02], al
:0046E648 8A4601                  mov al, byte ptr [esi+01]
:0046E64B 884701                  mov byte ptr [edi+01], al
:0046E64E 8B4508                  mov eax, dword ptr [ebp+08]
:0046E651 5E                      pop esi
:0046E652 5F                      pop edi
:0046E653 C9                      leave
:0046E654 C3                      ret


:0046E655 CC                      int 03
:0046E656 CC                      int 03
:0046E657 CC                      int 03
:0046E658 CC                      int 03
:0046E659 CC                      int 03
:0046E65A CC                      int 03
:0046E65B CC                      int 03
:0046E65C CC                      int 03
:0046E65D CC                      int 03
:0046E65E CC                      int 03
:0046E65F CC                      int 03

//******************** Program Entry Point ********
:0046E660 55                      push ebp
:0046E661 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046E663 6AFF                    push FFFFFFFF
:0046E665 68C84D4700              push 00474DC8
:0046E66A 68F8044700              push 004704F8
:0046E66F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046E675 50                      push eax
:0046E676 64892500000000          mov dword ptr fs:[00000000], esp
:0046E67D 83C4A8                  add esp, FFFFFFA8
:0046E680 53                      push ebx
:0046E681 56                      push esi
:0046E682 57                      push edi
:0046E683 8965E8                  mov dword ptr [ebp-18], esp

* Reference To: KERNEL32.GetVersion, Ord:014Ch
                                  |
:0046E686 FF15E0854B00            Call dword ptr [004B85E0]
:0046E68C 33D2                    xor edx, edx
:0046E68E 8AD4                    mov dl, ah
:0046E690 89156C6F4B00            mov dword ptr [004B6F6C], edx
:0046E696 8BC8                    mov ecx, eax
:0046E698 81E1FF000000            and ecx, 000000FF
:0046E69E 890D686F4B00            mov dword ptr [004B6F68], ecx
:0046E6A4 C1E108                  shl ecx, 08
:0046E6A7 03CA                    add ecx, edx
:0046E6A9 890D646F4B00            mov dword ptr [004B6F64], ecx
:0046E6AF C1E810                  shr eax, 10
:0046E6B2 A3606F4B00              mov dword ptr [004B6F60], eax
:0046E6B7 E804100000              call 0046F6C0
:0046E6BC 85C0                    test eax, eax
:0046E6BE 750A                    jne 0046E6CA
:0046E6C0 6A1C                    push 0000001C
:0046E6C2 E839010000              call 0046E800
:0046E6C7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E6BE(C)
|
:0046E6CA C745FC00000000          mov [ebp-04], 00000000
:0046E6D1 E8CA280000              call 00470FA0
:0046E6D6 E8B5280000              call 00470F90

* Reference To: KERNEL32.GetCommandLineA, Ord:00AAh
                                  |
:0046E6DB FF15E4854B00            Call dword ptr [004B85E4]
:0046E6E1 A3D07A4B00              mov dword ptr [004B7AD0], eax
:0046E6E6 E875240000              call 00470B60
:0046E6EB A3486F4B00              mov dword ptr [004B6F48], eax
:0046E6F0 85C0                    test eax, eax
:0046E6F2 7409                    je 0046E6FD
:0046E6F4 A1D07A4B00              mov eax, dword ptr [004B7AD0]
:0046E6F9 85C0                    test eax, eax
:0046E6FB 750A                    jne 0046E707

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E6F2(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046E6FD 6AFF                    push FFFFFFFF
:0046E6FF E8FC020000              call 0046EA00
:0046E704 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E6FB(C)
|
:0046E707 E8A4210000              call 004708B0
:0046E70C E8AF200000              call 004707C0
:0046E711 E8BA020000              call 0046E9D0
:0046E716 8B35D07A4B00            mov esi, dword ptr [004B7AD0]
:0046E71C 89759C                  mov dword ptr [ebp-64], esi
:0046E71F 803E22                  cmp byte ptr [esi], 22
:0046E722 0F85BE000000            jne 0046E7E6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E746(C), :0046E74C(U)
|
:0046E728 46                      inc esi
:0046E729 89759C                  mov dword ptr [ebp-64], esi
:0046E72C 8A06                    mov al, byte ptr [esi]
:0046E72E 3C22                    cmp al, 22
:0046E730 741C                    je 0046E74E
:0046E732 84C0                    test al, al
:0046E734 7418                    je 0046E74E
:0046E736 25FF000000              and eax, 000000FF
:0046E73B 50                      push eax
:0046E73C E81F200000              call 00470760
:0046E741 83C404                  add esp, 00000004
:0046E744 85C0                    test eax, eax
:0046E746 74E0                    je 0046E728
:0046E748 46                      inc esi
:0046E749 89759C                  mov dword ptr [ebp-64], esi
:0046E74C EBDA                    jmp 0046E728

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E730(C), :0046E734(C)
|
:0046E74E 803E22                  cmp byte ptr [esi], 22
:0046E751 7504                    jne 0046E757
:0046E753 46                      inc esi
:0046E754 89759C                  mov dword ptr [ebp-64], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E751(C), :0046E765(U), :0046E7E9(C)
|
:0046E757 8A06                    mov al, byte ptr [esi]
:0046E759 84C0                    test al, al
:0046E75B 740A                    je 0046E767
:0046E75D 3C20                    cmp al, 20
:0046E75F 7706                    ja 0046E767
:0046E761 46                      inc esi
:0046E762 89759C                  mov dword ptr [ebp-64], esi
:0046E765 EBF0                    jmp 0046E757

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E75B(C), :0046E75F(C)
|
:0046E767 C745D000000000          mov [ebp-30], 00000000
:0046E76E 8D45A4                  lea eax, dword ptr [ebp-5C]
:0046E771 50                      push eax

* Reference To: KERNEL32.GetStartupInfoA, Ord:0128h
                                  |
:0046E772 FF15F4854B00            Call dword ptr [004B85F4]
:0046E778 F645D001                test [ebp-30], 01
:0046E77C 740A                    je 0046E788
:0046E77E 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046E781 25FFFF0000              and eax, 0000FFFF
:0046E786 EB05                    jmp 0046E78D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E77C(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046E788 B80A000000              mov eax, 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E786(U)
|
:0046E78D 50                      push eax
:0046E78E 56                      push esi
:0046E78F 6A00                    push 00000000
:0046E791 6A00                    push 00000000

* Reference To: KERNEL32.GetModuleHandleA, Ord:00FEh
                                  |
:0046E793 FF15EC854B00            Call dword ptr [004B85EC]
:0046E799 50                      push eax
:0046E79A E8915CFFFF              call 00464430
:0046E79F 8945A0                  mov dword ptr [ebp-60], eax
:0046E7A2 50                      push eax
:0046E7A3 E858020000              call 0046EA00
:0046E7A8 EB21                    jmp 0046E7CB
:0046E7AA 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E7AD 8B08                    mov ecx, dword ptr [eax]
:0046E7AF 8B09                    mov ecx, dword ptr [ecx]
:0046E7B1 894D98                  mov dword ptr [ebp-68], ecx
:0046E7B4 50                      push eax
:0046E7B5 51                      push ecx
:0046E7B6 E8151E0000              call 004705D0
:0046E7BB 83C408                  add esp, 00000008
:0046E7BE C3                      ret


:0046E7BF 8B65E8                  mov esp, dword ptr [ebp-18]
:0046E7C2 8B5598                  mov edx, dword ptr [ebp-68]
:0046E7C5 52                      push edx
:0046E7C6 E855020000              call 0046EA20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E7A8(U)
|
:0046E7CB 83C404                  add esp, 00000004
:0046E7CE C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046E7D5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046E7D8 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046E7DF 5F                      pop edi
:0046E7E0 5E                      pop esi
:0046E7E1 5B                      pop ebx
:0046E7E2 8BE5                    mov esp, ebp
:0046E7E4 5D                      pop ebp
:0046E7E5 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E722(C), :0046E7F3(U)
|
:0046E7E6 803E20                  cmp byte ptr [esi], 20
:0046E7E9 0F8668FFFFFF            jbe 0046E757
:0046E7EF 46                      inc esi
:0046E7F0 89759C                  mov dword ptr [ebp-64], esi
:0046E7F3 EBF1                    jmp 0046E7E6
:0046E7F5 90                      nop
:0046E7F6 90                      nop
:0046E7F7 90                      nop
:0046E7F8 90                      nop
:0046E7F9 90                      nop
:0046E7FA 90                      nop
:0046E7FB 90                      nop
:0046E7FC 90                      nop
:0046E7FD 90                      nop
:0046E7FE 90                      nop
:0046E7FF 90                      nop

* Referenced by a CALL at Addresses:
|:0046D4A8   , :0046E6C2   , :00470812   , :0047084C   , :00470914   
|:00470FBC   , :00471F02   
|
:0046E800 833D506F4B0001          cmp dword ptr [004B6F50], 00000001
:0046E807 7505                    jne 0046E80E
:0046E809 E892290000              call 004711A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E807(C)
|
:0046E80E 8B442404                mov eax, dword ptr [esp+04]
:0046E812 50                      push eax
:0046E813 E8C8290000              call 004711E0
:0046E818 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046E81B 68FF000000              push 000000FF
:0046E820 FF1520EA4700            call dword ptr [0047EA20]
:0046E826 83C404                  add esp, 00000004
:0046E829 C3                      ret


:0046E82A 90                      nop
:0046E82B 90                      nop
:0046E82C 90                      nop
:0046E82D 90                      nop
:0046E82E 90                      nop
:0046E82F 90                      nop

* Referenced by a CALL at Address:
|:0046D42A   
|
:0046E830 83EC08                  sub esp, 00000008
:0046E833 53                      push ebx
:0046E834 55                      push ebp
:0046E835 56                      push esi
:0046E836 57                      push edi
:0046E837 8B7C241C                mov edi, dword ptr [esp+1C]
:0046E83B 85FF                    test edi, edi
:0046E83D 7515                    jne 0046E854
:0046E83F 8B442420                mov eax, dword ptr [esp+20]
:0046E843 50                      push eax
:0046E844 E847F7FFFF              call 0046DF90
:0046E849 83C404                  add esp, 00000004
:0046E84C 5F                      pop edi
:0046E84D 5E                      pop esi
:0046E84E 5D                      pop ebp
:0046E84F 5B                      pop ebx
:0046E850 83C408                  add esp, 00000008
:0046E853 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E83D(C)
|
:0046E854 8B6C2420                mov ebp, dword ptr [esp+20]
:0046E858 85ED                    test ebp, ebp
:0046E85A 7513                    jne 0046E86F
:0046E85C 57                      push edi
:0046E85D E8DEF6FFFF              call 0046DF40
:0046E862 83C404                  add esp, 00000004
:0046E865 33C0                    xor eax, eax
:0046E867 5F                      pop edi
:0046E868 5E                      pop esi
:0046E869 5D                      pop ebp
:0046E86A 5B                      pop ebx
:0046E86B 83C408                  add esp, 00000008
:0046E86E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E85A(C)
|
:0046E86F 83FDE0                  cmp ebp, FFFFFFE0
:0046E872 7717                    ja 0046E88B
:0046E874 85ED                    test ebp, ebp
:0046E876 7608                    jbe 0046E880
:0046E878 83C50F                  add ebp, 0000000F
:0046E87B 83E5F0                  and ebp, FFFFFFF0
:0046E87E EB0B                    jmp 0046E88B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E876(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046E880 BD10000000              mov ebp, 00000010
:0046E885 EB04                    jmp 0046E88B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E9B2(C)
|
:0046E887 8B7C241C                mov edi, dword ptr [esp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E872(C), :0046E87E(U), :0046E885(U)
|
:0046E88B 33DB                    xor ebx, ebx
:0046E88D 83FDE0                  cmp ebp, FFFFFFE0
:0046E890 0F8704010000            ja 0046E99A
:0046E896 8D4C2410                lea ecx, dword ptr [esp+10]
:0046E89A 8D542414                lea edx, dword ptr [esp+14]
:0046E89E 51                      push ecx
:0046E89F 52                      push edx
:0046E8A0 57                      push edi
:0046E8A1 E8FA100000              call 0046F9A0
:0046E8A6 8BF0                    mov esi, eax
:0046E8A8 83C40C                  add esp, 0000000C
:0046E8AB 85F6                    test esi, esi
:0046E8AD 89742420                mov dword ptr [esp+20], esi
:0046E8B1 0F84D1000000            je 0046E988
:0046E8B7 3B2D640A4800            cmp ebp, dword ptr [00480A64]
:0046E8BD 7370                    jnb 0046E92F
:0046E8BF 8B442410                mov eax, dword ptr [esp+10]
:0046E8C3 8B4C2414                mov ecx, dword ptr [esp+14]
:0046E8C7 8BFD                    mov edi, ebp
:0046E8C9 C1EF04                  shr edi, 04
:0046E8CC 57                      push edi
:0046E8CD 56                      push esi
:0046E8CE 50                      push eax
:0046E8CF 51                      push ecx
:0046E8D0 E84B150000              call 0046FE20
:0046E8D5 83C410                  add esp, 00000010
:0046E8D8 85C0                    test eax, eax
:0046E8DA 7406                    je 0046E8E2
:0046E8DC 8B5C241C                mov ebx, dword ptr [esp+1C]
:0046E8E0 EB4D                    jmp 0046E92F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E8DA(C)
|
:0046E8E2 57                      push edi
:0046E8E3 E878110000              call 0046FA60
:0046E8E8 8BD8                    mov ebx, eax
:0046E8EA 83C404                  add esp, 00000004
:0046E8ED 85DB                    test ebx, ebx
:0046E8EF 7446                    je 0046E937
:0046E8F1 33C0                    xor eax, eax
:0046E8F3 8A06                    mov al, byte ptr [esi]
:0046E8F5 C1E004                  shl eax, 04
:0046E8F8 3BC5                    cmp eax, ebp
:0046E8FA 7202                    jb 0046E8FE
:0046E8FC 8BC5                    mov eax, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E8FA(C)
|
:0046E8FE 8B74241C                mov esi, dword ptr [esp+1C]
:0046E902 8BC8                    mov ecx, eax
:0046E904 8BD1                    mov edx, ecx
:0046E906 8BFB                    mov edi, ebx
:0046E908 C1E902                  shr ecx, 02
:0046E90B F3                      repz
:0046E90C A5                      movsd
:0046E90D 8B442420                mov eax, dword ptr [esp+20]
:0046E911 8BCA                    mov ecx, edx
:0046E913 83E103                  and ecx, 00000003
:0046E916 50                      push eax
:0046E917 F3                      repz
:0046E918 A4                      movsb
:0046E919 8B4C2414                mov ecx, dword ptr [esp+14]
:0046E91D 8B542418                mov edx, dword ptr [esp+18]
:0046E921 51                      push ecx
:0046E922 52                      push edx
:0046E923 E8D8100000              call 0046FA00
:0046E928 8B74242C                mov esi, dword ptr [esp+2C]
:0046E92C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E8BD(C), :0046E8E0(U)
|
:0046E92F 85DB                    test ebx, ebx
:0046E931 0F8589000000            jne 0046E9C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E8EF(C)
|
:0046E937 A1C47A4B00              mov eax, dword ptr [004B7AC4]
:0046E93C 55                      push ebp
:0046E93D 6A00                    push 00000000
:0046E93F 50                      push eax

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:0046E940 FF15F0854B00            Call dword ptr [004B85F0]
:0046E946 8BD8                    mov ebx, eax
:0046E948 85DB                    test ebx, ebx
:0046E94A 7452                    je 0046E99E
:0046E94C 33C0                    xor eax, eax
:0046E94E 8A06                    mov al, byte ptr [esi]
:0046E950 C1E004                  shl eax, 04
:0046E953 3BC5                    cmp eax, ebp
:0046E955 7202                    jb 0046E959
:0046E957 8BC5                    mov eax, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E955(C)
|
:0046E959 8B74241C                mov esi, dword ptr [esp+1C]
:0046E95D 8BC8                    mov ecx, eax
:0046E95F 8BD1                    mov edx, ecx
:0046E961 8BFB                    mov edi, ebx
:0046E963 C1E902                  shr ecx, 02
:0046E966 F3                      repz
:0046E967 A5                      movsd
:0046E968 8B442420                mov eax, dword ptr [esp+20]
:0046E96C 8BCA                    mov ecx, edx
:0046E96E 83E103                  and ecx, 00000003
:0046E971 50                      push eax
:0046E972 F3                      repz
:0046E973 A4                      movsb
:0046E974 8B4C2414                mov ecx, dword ptr [esp+14]
:0046E978 8B542418                mov edx, dword ptr [esp+18]
:0046E97C 51                      push ecx
:0046E97D 52                      push edx
:0046E97E E87D100000              call 0046FA00
:0046E983 83C40C                  add esp, 0000000C
:0046E986 EB12                    jmp 0046E99A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E8B1(C)
|
:0046E988 A1C47A4B00              mov eax, dword ptr [004B7AC4]
:0046E98D 55                      push ebp
:0046E98E 57                      push edi
:0046E98F 6A00                    push 00000000
:0046E991 50                      push eax

* Reference To: KERNEL32.HeapReAlloc, Ord:0171h
                                  |
:0046E992 FF15E8854B00            Call dword ptr [004B85E8]
:0046E998 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E890(C), :0046E986(U)
|
:0046E99A 85DB                    test ebx, ebx
:0046E99C 7522                    jne 0046E9C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E94A(C)
|
:0046E99E A1B46F4B00              mov eax, dword ptr [004B6FB4]
:0046E9A3 85C0                    test eax, eax
:0046E9A5 7419                    je 0046E9C0
:0046E9A7 55                      push ebp
:0046E9A8 E843150000              call 0046FEF0
:0046E9AD 83C404                  add esp, 00000004
:0046E9B0 85C0                    test eax, eax
:0046E9B2 0F85CFFEFFFF            jne 0046E887
:0046E9B8 5F                      pop edi
:0046E9B9 5E                      pop esi
:0046E9BA 5D                      pop ebp
:0046E9BB 5B                      pop ebx
:0046E9BC 83C408                  add esp, 00000008
:0046E9BF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E931(C), :0046E99C(C), :0046E9A5(C)
|
:0046E9C0 5F                      pop edi
:0046E9C1 5E                      pop esi
:0046E9C2 8BC3                    mov eax, ebx
:0046E9C4 5D                      pop ebp
:0046E9C5 5B                      pop ebx
:0046E9C6 83C408                  add esp, 00000008
:0046E9C9 C3                      ret


:0046E9CA 90                      nop
:0046E9CB 90                      nop
:0046E9CC 90                      nop
:0046E9CD 90                      nop
:0046E9CE 90                      nop
:0046E9CF 90                      nop

* Referenced by a CALL at Address:
|:0046E711   
|
:0046E9D0 A108EA4700              mov eax, dword ptr [0047EA08]
:0046E9D5 85C0                    test eax, eax
:0046E9D7 7402                    je 0046E9DB
:0046E9D9 FFD0                    call eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E9D7(C)
|
:0046E9DB 6810614700              push 00476110
:0046E9E0 6804614700              push 00476104
:0046E9E5 E806010000              call 0046EAF0
:0046E9EA 83C408                  add esp, 00000008
:0046E9ED 6800614700              push 00476100
:0046E9F2 6800604700              push 00476000
:0046E9F7 E8F4000000              call 0046EAF0
:0046E9FC 83C408                  add esp, 00000008
:0046E9FF C3                      ret



* Referenced by a CALL at Addresses:
|:0046E6FF   , :0046E7A3   
|
:0046EA00 8B442404                mov eax, dword ptr [esp+04]
:0046EA04 6A00                    push 00000000
:0046EA06 6A00                    push 00000000
:0046EA08 50                      push eax
:0046EA09 E832000000              call 0046EA40
:0046EA0E 83C40C                  add esp, 0000000C
:0046EA11 C3                      ret


:0046EA12 90                      nop
:0046EA13 90                      nop
:0046EA14 90                      nop
:0046EA15 90                      nop
:0046EA16 90                      nop
:0046EA17 90                      nop
:0046EA18 90                      nop
:0046EA19 90                      nop
:0046EA1A 90                      nop
:0046EA1B 90                      nop
:0046EA1C 90                      nop
:0046EA1D 90                      nop
:0046EA1E 90                      nop
:0046EA1F 90                      nop

* Referenced by a CALL at Addresses:
|:0046E7C6   , :004714C6   , :00472119   
|
:0046EA20 8B442404                mov eax, dword ptr [esp+04]
:0046EA24 6A00                    push 00000000
:0046EA26 6A01                    push 00000001
:0046EA28 50                      push eax
:0046EA29 E812000000              call 0046EA40
:0046EA2E 83C40C                  add esp, 0000000C
:0046EA31 C3                      ret


:0046EA32 90                      nop
:0046EA33 90                      nop
:0046EA34 90                      nop
:0046EA35 90                      nop
:0046EA36 90                      nop
:0046EA37 90                      nop
:0046EA38 90                      nop
:0046EA39 90                      nop
:0046EA3A 90                      nop
:0046EA3B 90                      nop
:0046EA3C 90                      nop
:0046EA3D 90                      nop
:0046EA3E 90                      nop
:0046EA3F 90                      nop

* Referenced by a CALL at Addresses:
|:0046EA09   , :0046EA29   
|
:0046EA40 A19C6F4B00              mov eax, dword ptr [004B6F9C]
:0046EA45 53                      push ebx
:0046EA46 55                      push ebp
:0046EA47 8B6C240C                mov ebp, dword ptr [esp+0C]
:0046EA4B 83F801                  cmp eax, 00000001
:0046EA4E 56                      push esi
:0046EA4F 750E                    jne 0046EA5F
:0046EA51 55                      push ebp

* Reference To: KERNEL32.GetCurrentProcess, Ord:00D3h
                                  |
:0046EA52 FF15D4854B00            Call dword ptr [004B85D4]
:0046EA58 50                      push eax

* Reference To: KERNEL32.TerminateProcess, Ord:0246h
                                  |
:0046EA59 FF15D8854B00            Call dword ptr [004B85D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EA4F(C)
|
:0046EA5F 8B442414                mov eax, dword ptr [esp+14]
:0046EA63 8B5C2418                mov ebx, dword ptr [esp+18]
:0046EA67 85C0                    test eax, eax
:0046EA69 C705986F4B0001000000    mov dword ptr [004B6F98], 00000001
:0046EA73 881D946F4B00            mov byte ptr [004B6F94], bl
:0046EA79 753E                    jne 0046EAB9
:0046EA7B 8B0DCC7A4B00            mov ecx, dword ptr [004B7ACC]
:0046EA81 85C9                    test ecx, ecx
:0046EA83 7422                    je 0046EAA7
:0046EA85 8B35C87A4B00            mov esi, dword ptr [004B7AC8]
:0046EA8B 83EE04                  sub esi, 00000004
:0046EA8E 3BF1                    cmp esi, ecx
:0046EA90 7215                    jb 0046EAA7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EAA5(C)
|
:0046EA92 8B06                    mov eax, dword ptr [esi]
:0046EA94 85C0                    test eax, eax
:0046EA96 7408                    je 0046EAA0
:0046EA98 FFD0                    call eax
:0046EA9A 8B0DCC7A4B00            mov ecx, dword ptr [004B7ACC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EA96(C)
|
:0046EAA0 83EE04                  sub esi, 00000004
:0046EAA3 3BF1                    cmp esi, ecx
:0046EAA5 73EB                    jnb 0046EA92

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EA83(C), :0046EA90(C)
|
:0046EAA7 6818614700              push 00476118
:0046EAAC 6814614700              push 00476114
:0046EAB1 E83A000000              call 0046EAF0
:0046EAB6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EA79(C)
|
:0046EAB9 6824614700              push 00476124
:0046EABE 681C614700              push 0047611C
:0046EAC3 E828000000              call 0046EAF0
:0046EAC8 83C408                  add esp, 00000008
:0046EACB 85DB                    test ebx, ebx
:0046EACD 7511                    jne 0046EAE0
:0046EACF 55                      push ebp
:0046EAD0 C7059C6F4B0001000000    mov dword ptr [004B6F9C], 00000001

* Reference To: KERNEL32.ExitProcess, Ord:006Bh
                                  |
:0046EADA FF1524864B00            Call dword ptr [004B8624]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EACD(C)
|
:0046EAE0 5E                      pop esi
:0046EAE1 5D                      pop ebp
:0046EAE2 5B                      pop ebx
:0046EAE3 C3                      ret


:0046EAE4 90                      nop
:0046EAE5 90                      nop
:0046EAE6 90                      nop
:0046EAE7 90                      nop
:0046EAE8 90                      nop
:0046EAE9 90                      nop
:0046EAEA 90                      nop
:0046EAEB 90                      nop
:0046EAEC 90                      nop
:0046EAED 90                      nop
:0046EAEE 90                      nop
:0046EAEF 90                      nop

* Referenced by a CALL at Addresses:
|:0046E9E5   , :0046E9F7   , :0046EAB1   , :0046EAC3   
|
:0046EAF0 56                      push esi
:0046EAF1 8B742408                mov esi, dword ptr [esp+08]
:0046EAF5 57                      push edi
:0046EAF6 8B7C2410                mov edi, dword ptr [esp+10]
:0046EAFA 3BF7                    cmp esi, edi
:0046EAFC 730F                    jnb 0046EB0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EB0B(C)
|
:0046EAFE 8B06                    mov eax, dword ptr [esi]
:0046EB00 85C0                    test eax, eax
:0046EB02 7402                    je 0046EB06
:0046EB04 FFD0                    call eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EB02(C)
|
:0046EB06 83C604                  add esi, 00000004
:0046EB09 3BF7                    cmp esi, edi
:0046EB0B 72F1                    jb 0046EAFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EAFC(C)
|
:0046EB0D 5F                      pop edi
:0046EB0E 5E                      pop esi
:0046EB0F C3                      ret



* Referenced by a CALL at Addresses:
|:0046D3F7   , :0046D417   
|
:0046EB10 51                      push ecx
:0046EB11 8D442408                lea eax, dword ptr [esp+08]
:0046EB15 56                      push esi
:0046EB16 8B74240C                mov esi, dword ptr [esp+0C]
:0046EB1A 8D4C2404                lea ecx, dword ptr [esp+04]
:0046EB1E 50                      push eax
:0046EB1F 51                      push ecx
:0046EB20 56                      push esi
:0046EB21 E87A0E0000              call 0046F9A0
:0046EB26 83C40C                  add esp, 0000000C
:0046EB29 85C0                    test eax, eax
:0046EB2B 740C                    je 0046EB39
:0046EB2D 33D2                    xor edx, edx
:0046EB2F 8A10                    mov dl, byte ptr [eax]
:0046EB31 8BC2                    mov eax, edx
:0046EB33 C1E004                  shl eax, 04
:0046EB36 5E                      pop esi
:0046EB37 59                      pop ecx
:0046EB38 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EB2B(C)
|
:0046EB39 A1C47A4B00              mov eax, dword ptr [004B7AC4]
:0046EB3E 56                      push esi
:0046EB3F 6A00                    push 00000000
:0046EB41 50                      push eax

* Reference To: KERNEL32.HeapSize, Ord:0172h
                                  |
:0046EB42 FF15DC854B00            Call dword ptr [004B85DC]
:0046EB48 5E                      pop esi
:0046EB49 59                      pop ecx
:0046EB4A C3                      ret


:0046EB4B 90                      nop
:0046EB4C 90                      nop
:0046EB4D 90                      nop
:0046EB4E 90                      nop
:0046EB4F 90                      nop

* Referenced by a CALL at Addresses:
|:0046D5A7   , :0046D640   , :0046D76D   
|
:0046EB50 56                      push esi
:0046EB51 8B742418                mov esi, dword ptr [esp+18]
:0046EB55 813E20059319            cmp dword ptr [esi], 19930520
:0046EB5B 7405                    je 0046EB62
:0046EB5D E8CE0A0000              call 0046F630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EB5B(C)
|
:0046EB62 8B442408                mov eax, dword ptr [esp+08]
:0046EB66 F6400466                test [eax+04], 66
:0046EB6A 7433                    je 0046EB9F
:0046EB6C 8B4604                  mov eax, dword ptr [esi+04]
:0046EB6F 85C0                    test eax, eax
:0046EB71 0F8499000000            je 0046EC10
:0046EB77 8B44241C                mov eax, dword ptr [esp+1C]
:0046EB7B 85C0                    test eax, eax
:0046EB7D 0F858D000000            jne 0046EC10
:0046EB83 8B442414                mov eax, dword ptr [esp+14]
:0046EB87 8B4C240C                mov ecx, dword ptr [esp+0C]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046EB8B 6AFF                    push FFFFFFFF
:0046EB8D 56                      push esi
:0046EB8E 50                      push eax
:0046EB8F 51                      push ecx
:0046EB90 E80B040000              call 0046EFA0
:0046EB95 83C410                  add esp, 00000010
:0046EB98 B801000000              mov eax, 00000001
:0046EB9D 5E                      pop esi
:0046EB9E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EB6A(C)
|
:0046EB9F 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0046EBA2 85C9                    test ecx, ecx
:0046EBA4 746A                    je 0046EC10
:0046EBA6 813863736DE0            cmp dword ptr [eax], E06D7363
:0046EBAC 753A                    jne 0046EBE8
:0046EBAE 81781420059319          cmp dword ptr [eax+14], 19930520
:0046EBB5 7631                    jbe 0046EBE8
:0046EBB7 8B501C                  mov edx, dword ptr [eax+1C]
:0046EBBA 8B4A08                  mov ecx, dword ptr [edx+08]
:0046EBBD 85C9                    test ecx, ecx
:0046EBBF 7427                    je 0046EBE8
:0046EBC1 8B542424                mov edx, dword ptr [esp+24]
:0046EBC5 52                      push edx
:0046EBC6 8B542424                mov edx, dword ptr [esp+24]
:0046EBCA 52                      push edx
:0046EBCB 8B542424                mov edx, dword ptr [esp+24]
:0046EBCF 52                      push edx
:0046EBD0 8B542420                mov edx, dword ptr [esp+20]
:0046EBD4 56                      push esi
:0046EBD5 52                      push edx
:0046EBD6 8B542424                mov edx, dword ptr [esp+24]
:0046EBDA 52                      push edx
:0046EBDB 8B542424                mov edx, dword ptr [esp+24]
:0046EBDF 52                      push edx
:0046EBE0 50                      push eax
:0046EBE1 FFD1                    call ecx
:0046EBE3 83C420                  add esp, 00000020
:0046EBE6 5E                      pop esi
:0046EBE7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EBAC(C), :0046EBB5(C), :0046EBBF(C)
|
:0046EBE8 8B4C2420                mov ecx, dword ptr [esp+20]
:0046EBEC 8B54241C                mov edx, dword ptr [esp+1C]
:0046EBF0 51                      push ecx
:0046EBF1 8B4C2428                mov ecx, dword ptr [esp+28]
:0046EBF5 52                      push edx
:0046EBF6 8B54241C                mov edx, dword ptr [esp+1C]
:0046EBFA 51                      push ecx
:0046EBFB 8B4C241C                mov ecx, dword ptr [esp+1C]
:0046EBFF 56                      push esi
:0046EC00 52                      push edx
:0046EC01 8B542420                mov edx, dword ptr [esp+20]
:0046EC05 51                      push ecx
:0046EC06 52                      push edx
:0046EC07 50                      push eax
:0046EC08 E813000000              call 0046EC20
:0046EC0D 83C420                  add esp, 00000020

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EB71(C), :0046EB7D(C), :0046EBA4(C)
|
:0046EC10 B801000000              mov eax, 00000001
:0046EC15 5E                      pop esi
:0046EC16 C3                      ret


:0046EC17 90                      nop
:0046EC18 90                      nop
:0046EC19 90                      nop
:0046EC1A 90                      nop
:0046EC1B 90                      nop
:0046EC1C 90                      nop
:0046EC1D 90                      nop
:0046EC1E 90                      nop
:0046EC1F 90                      nop

* Referenced by a CALL at Address:
|:0046EC08   
|
:0046EC20 83EC24                  sub esp, 00000024
:0046EC23 8B44242C                mov eax, dword ptr [esp+2C]
:0046EC27 53                      push ebx
:0046EC28 55                      push ebp
:0046EC29 56                      push esi
:0046EC2A 8B6808                  mov ebp, dword ptr [eax+08]
:0046EC2D 57                      push edi
:0046EC2E 83FDFF                  cmp ebp, FFFFFFFF
:0046EC31 896C2424                mov dword ptr [esp+24], ebp
:0046EC35 7C09                    jl 0046EC40
:0046EC37 8B4C2448                mov ecx, dword ptr [esp+48]
:0046EC3B 3B6904                  cmp ebp, dword ptr [ecx+04]
:0046EC3E 7C05                    jl 0046EC45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EC35(C)
|
:0046EC40 E8EB090000              call 0046F630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EC3E(C)
|
:0046EC45 8B5C2438                mov ebx, dword ptr [esp+38]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0046EC49 BE03000000              mov esi, 00000003
:0046EC4E BF20059319              mov edi, 19930520
:0046EC53 813B63736DE0            cmp dword ptr [ebx], E06D7363
:0046EC59 0F852C020000            jne 0046EE8B
:0046EC5F 397310                  cmp dword ptr [ebx+10], esi
:0046EC62 755F                    jne 0046ECC3
:0046EC64 397B14                  cmp dword ptr [ebx+14], edi
:0046EC67 755A                    jne 0046ECC3
:0046EC69 8B431C                  mov eax, dword ptr [ebx+1C]
:0046EC6C 85C0                    test eax, eax
:0046EC6E 7553                    jne 0046ECC3
:0046EC70 A1A06F4B00              mov eax, dword ptr [004B6FA0]
:0046EC75 85C0                    test eax, eax
:0046EC77 0F844B020000            je 0046EEC8
:0046EC7D 8B15A46F4B00            mov edx, dword ptr [004B6FA4]
:0046EC83 8BD8                    mov ebx, eax
:0046EC85 6A01                    push 00000001
:0046EC87 53                      push ebx
:0046EC88 895C2440                mov dword ptr [esp+40], ebx
:0046EC8C 89542448                mov dword ptr [esp+48], edx
:0046EC90 E8BB270000              call 00471450
:0046EC95 83C408                  add esp, 00000008
:0046EC98 85C0                    test eax, eax
:0046EC9A 7505                    jne 0046ECA1
:0046EC9C E88F090000              call 0046F630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EC9A(C)
|
:0046ECA1 813B63736DE0            cmp dword ptr [ebx], E06D7363
:0046ECA7 0F85DE010000            jne 0046EE8B
:0046ECAD 397310                  cmp dword ptr [ebx+10], esi
:0046ECB0 7511                    jne 0046ECC3
:0046ECB2 397B14                  cmp dword ptr [ebx+14], edi
:0046ECB5 750C                    jne 0046ECC3
:0046ECB7 8B431C                  mov eax, dword ptr [ebx+1C]
:0046ECBA 85C0                    test eax, eax
:0046ECBC 7505                    jne 0046ECC3
:0046ECBE E86D090000              call 0046F630

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EC62(C), :0046EC67(C), :0046EC6E(C), :0046ECB0(C), :0046ECB5(C)
|:0046ECBC(C)
|
:0046ECC3 813B63736DE0            cmp dword ptr [ebx], E06D7363
:0046ECC9 0F85BC010000            jne 0046EE8B
:0046ECCF 397310                  cmp dword ptr [ebx+10], esi
:0046ECD2 0F85B3010000            jne 0046EE8B
:0046ECD8 397B14                  cmp dword ptr [ebx+14], edi
:0046ECDB 0F85AA010000            jne 0046EE8B
:0046ECE1 8B542450                mov edx, dword ptr [esp+50]
:0046ECE5 8D442428                lea eax, dword ptr [esp+28]
:0046ECE9 8D4C2414                lea ecx, dword ptr [esp+14]
:0046ECED 50                      push eax
:0046ECEE 8B44244C                mov eax, dword ptr [esp+4C]
:0046ECF2 51                      push ecx
:0046ECF3 55                      push ebp
:0046ECF4 52                      push edx
:0046ECF5 50                      push eax
:0046ECF6 E8B5EAFFFF              call 0046D7B0
:0046ECFB 8B4C2428                mov ecx, dword ptr [esp+28]
:0046ECFF 8B54243C                mov edx, dword ptr [esp+3C]
:0046ED03 83C414                  add esp, 00000014
:0046ED06 3BCA                    cmp ecx, edx
:0046ED08 89442418                mov dword ptr [esp+18], eax
:0046ED0C 0F835E010000            jnb 0046EE70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EE6A(C)
|
:0046ED12 3928                    cmp dword ptr [eax], ebp
:0046ED14 0F8F3A010000            jg 0046EE54
:0046ED1A 3B6804                  cmp ebp, dword ptr [eax+04]
:0046ED1D 0F8F31010000            jg 0046EE54
:0046ED23 8B480C                  mov ecx, dword ptr [eax+0C]
:0046ED26 8B7010                  mov esi, dword ptr [eax+10]
:0046ED29 85C9                    test ecx, ecx
:0046ED2B 89742410                mov dword ptr [esp+10], esi
:0046ED2F 894C2420                mov dword ptr [esp+20], ecx
:0046ED33 0F8E17010000            jle 0046EE50
:0046ED39 8B431C                  mov eax, dword ptr [ebx+1C]
:0046ED3C 8B400C                  mov eax, dword ptr [eax+0C]
:0046ED3F 8D5004                  lea edx, dword ptr [eax+04]
:0046ED42 8B00                    mov eax, dword ptr [eax]
:0046ED44 8954242C                mov dword ptr [esp+2C], edx
:0046ED48 89442430                mov dword ptr [esp+30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EE13(C)
|
:0046ED4C 8B442430                mov eax, dword ptr [esp+30]
:0046ED50 8B6C242C                mov ebp, dword ptr [esp+2C]
:0046ED54 85C0                    test eax, eax
:0046ED56 8944241C                mov dword ptr [esp+1C], eax
:0046ED5A 0F8EA5000000            jle 0046EE05
:0046ED60 8B5604                  mov edx, dword ptr [esi+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EDFB(C)
|
:0046ED63 8B7D00                  mov edi, dword ptr [ebp+00]
:0046ED66 85D2                    test edx, edx
:0046ED68 747A                    je 0046EDE4
:0046ED6A 8A4A08                  mov cl, byte ptr [edx+08]
:0046ED6D 8D4208                  lea eax, dword ptr [edx+08]
:0046ED70 84C9                    test cl, cl
:0046ED72 7470                    je 0046EDE4
:0046ED74 8B4F04                  mov ecx, dword ptr [edi+04]
:0046ED77 3BD1                    cmp edx, ecx
:0046ED79 7444                    je 0046EDBF
:0046ED7B 8D7108                  lea esi, dword ptr [ecx+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ED9C(C)
|
:0046ED7E 8A18                    mov bl, byte ptr [eax]
:0046ED80 8ACB                    mov cl, bl
:0046ED82 3A1E                    cmp bl, byte ptr [esi]
:0046ED84 751C                    jne 0046EDA2
:0046ED86 84C9                    test cl, cl
:0046ED88 7414                    je 0046ED9E
:0046ED8A 8A5801                  mov bl, byte ptr [eax+01]
:0046ED8D 8ACB                    mov cl, bl
:0046ED8F 3A5E01                  cmp bl, byte ptr [esi+01]
:0046ED92 750E                    jne 0046EDA2
:0046ED94 83C002                  add eax, 00000002
:0046ED97 83C602                  add esi, 00000002
:0046ED9A 84C9                    test cl, cl
:0046ED9C 75E0                    jne 0046ED7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ED88(C)
|
:0046ED9E 33C0                    xor eax, eax
:0046EDA0 EB05                    jmp 0046EDA7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046ED84(C), :0046ED92(C)
|
:0046EDA2 1BC0                    sbb eax, eax
:0046EDA4 83D8FF                  sbb eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EDA0(U)
|
:0046EDA7 85C0                    test eax, eax
:0046EDA9 740C                    je 0046EDB7
:0046EDAB 8B5C2438                mov ebx, dword ptr [esp+38]
:0046EDAF 8B742410                mov esi, dword ptr [esp+10]
:0046EDB3 33C0                    xor eax, eax
:0046EDB5 EB32                    jmp 0046EDE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EDA9(C)
|
:0046EDB7 8B5C2438                mov ebx, dword ptr [esp+38]
:0046EDBB 8B742410                mov esi, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ED79(C)
|
:0046EDBF F60702                  test byte ptr [edi], 02
:0046EDC2 7405                    je 0046EDC9
:0046EDC4 F60608                  test byte ptr [esi], 08
:0046EDC7 7417                    je 0046EDE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EDC2(C)
|
:0046EDC9 8B431C                  mov eax, dword ptr [ebx+1C]
:0046EDCC 8B00                    mov eax, dword ptr [eax]
:0046EDCE A801                    test al, 01
:0046EDD0 7405                    je 0046EDD7
:0046EDD2 F60601                  test byte ptr [esi], 01
:0046EDD5 7409                    je 0046EDE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EDD0(C)
|
:0046EDD7 A802                    test al, 02
:0046EDD9 7409                    je 0046EDE4
:0046EDDB F60602                  test byte ptr [esi], 02
:0046EDDE 7504                    jne 0046EDE4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EDC7(C), :0046EDD5(C)
|
:0046EDE0 33C0                    xor eax, eax
:0046EDE2 EB05                    jmp 0046EDE9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046ED68(C), :0046ED72(C), :0046EDD9(C), :0046EDDE(C)
|
:0046EDE4 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EDB5(U), :0046EDE2(U)
|
:0046EDE9 85C0                    test eax, eax
:0046EDEB 752E                    jne 0046EE1B
:0046EDED 8B44241C                mov eax, dword ptr [esp+1C]
:0046EDF1 83C504                  add ebp, 00000004
:0046EDF4 48                      dec eax
:0046EDF5 85C0                    test eax, eax
:0046EDF7 8944241C                mov dword ptr [esp+1C], eax
:0046EDFB 0F8F62FFFFFF            jg 0046ED63
:0046EE01 8B4C2420                mov ecx, dword ptr [esp+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ED5A(C)
|
:0046EE05 49                      dec ecx
:0046EE06 83C610                  add esi, 00000010
:0046EE09 85C9                    test ecx, ecx
:0046EE0B 894C2420                mov dword ptr [esp+20], ecx
:0046EE0F 89742410                mov dword ptr [esp+10], esi
:0046EE13 0F8F33FFFFFF            jg 0046ED4C
:0046EE19 EB31                    jmp 0046EE4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EDEB(C)
|
:0046EE1B 8B4C2454                mov ecx, dword ptr [esp+54]
:0046EE1F 8B542450                mov edx, dword ptr [esp+50]
:0046EE23 8B442418                mov eax, dword ptr [esp+18]
:0046EE27 51                      push ecx
:0046EE28 8B4D00                  mov ecx, dword ptr [ebp+00]
:0046EE2B 52                      push edx
:0046EE2C 8B542450                mov edx, dword ptr [esp+50]
:0046EE30 50                      push eax
:0046EE31 8B442450                mov eax, dword ptr [esp+50]
:0046EE35 51                      push ecx
:0046EE36 8B4C2450                mov ecx, dword ptr [esp+50]
:0046EE3A 56                      push esi
:0046EE3B 52                      push edx
:0046EE3C 8B542454                mov edx, dword ptr [esp+54]
:0046EE40 50                      push eax
:0046EE41 51                      push ecx
:0046EE42 52                      push edx
:0046EE43 53                      push ebx
:0046EE44 E837020000              call 0046F080
:0046EE49 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EE19(U)
|
:0046EE4C 8B6C2424                mov ebp, dword ptr [esp+24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ED33(C)
|
:0046EE50 8B442418                mov eax, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046ED14(C), :0046ED1D(C)
|
:0046EE54 8B4C2414                mov ecx, dword ptr [esp+14]
:0046EE58 8B542428                mov edx, dword ptr [esp+28]
:0046EE5C 41                      inc ecx
:0046EE5D 83C014                  add eax, 00000014
:0046EE60 3BCA                    cmp ecx, edx
:0046EE62 894C2414                mov dword ptr [esp+14], ecx
:0046EE66 89442418                mov dword ptr [esp+18], eax
:0046EE6A 0F82A2FEFFFF            jb 0046ED12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ED0C(C)
|
:0046EE70 8A44244C                mov al, byte ptr [esp+4C]
:0046EE74 84C0                    test al, al
:0046EE76 7450                    je 0046EEC8
:0046EE78 6A01                    push 00000001
:0046EE7A 53                      push ebx
:0046EE7B E820060000              call 0046F4A0
:0046EE80 83C408                  add esp, 00000008
:0046EE83 5F                      pop edi
:0046EE84 5E                      pop esi
:0046EE85 5D                      pop ebp
:0046EE86 5B                      pop ebx
:0046EE87 83C424                  add esp, 00000024
:0046EE8A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EC59(C), :0046ECA7(C), :0046ECC9(C), :0046ECD2(C), :0046ECDB(C)
|
:0046EE8B 8A44244C                mov al, byte ptr [esp+4C]
:0046EE8F 84C0                    test al, al
:0046EE91 7530                    jne 0046EEC3
:0046EE93 8B442454                mov eax, dword ptr [esp+54]
:0046EE97 8B4C2450                mov ecx, dword ptr [esp+50]
:0046EE9B 8B542448                mov edx, dword ptr [esp+48]
:0046EE9F 50                      push eax
:0046EEA0 8B442448                mov eax, dword ptr [esp+48]
:0046EEA4 51                      push ecx
:0046EEA5 8B4C2448                mov ecx, dword ptr [esp+48]
:0046EEA9 55                      push ebp
:0046EEAA 52                      push edx
:0046EEAB 8B54244C                mov edx, dword ptr [esp+4C]
:0046EEAF 50                      push eax
:0046EEB0 51                      push ecx
:0046EEB1 52                      push edx
:0046EEB2 53                      push ebx
:0046EEB3 E818000000              call 0046EED0
:0046EEB8 83C420                  add esp, 00000020
:0046EEBB 5F                      pop edi
:0046EEBC 5E                      pop esi
:0046EEBD 5D                      pop ebp
:0046EEBE 5B                      pop ebx
:0046EEBF 83C424                  add esp, 00000024
:0046EEC2 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EE91(C)
|
:0046EEC3 E8D8060000              call 0046F5A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EC77(C), :0046EE76(C)
|
:0046EEC8 5F                      pop edi
:0046EEC9 5E                      pop esi
:0046EECA 5D                      pop ebp
:0046EECB 5B                      pop ebx
:0046EECC 83C424                  add esp, 00000024
:0046EECF C3                      ret



* Referenced by a CALL at Address:
|:0046EEB3   
|
:0046EED0 A1A86F4B00              mov eax, dword ptr [004B6FA8]
:0046EED5 53                      push ebx
:0046EED6 8B5C2418                mov ebx, dword ptr [esp+18]
:0046EEDA 55                      push ebp
:0046EEDB 8B6C2428                mov ebp, dword ptr [esp+28]
:0046EEDF 56                      push esi
:0046EEE0 57                      push edi
:0046EEE1 8B7C242C                mov edi, dword ptr [esp+2C]
:0046EEE5 85C0                    test eax, eax
:0046EEE7 7427                    je 0046EF10
:0046EEE9 8B442420                mov eax, dword ptr [esp+20]
:0046EEED 8B4C241C                mov ecx, dword ptr [esp+1C]
:0046EEF1 8B542418                mov edx, dword ptr [esp+18]
:0046EEF5 55                      push ebp
:0046EEF6 57                      push edi
:0046EEF7 53                      push ebx
:0046EEF8 50                      push eax
:0046EEF9 8B442424                mov eax, dword ptr [esp+24]
:0046EEFD 51                      push ecx
:0046EEFE 52                      push edx
:0046EEFF 50                      push eax
:0046EF00 E84BE7FFFF              call 0046D650
:0046EF05 83C41C                  add esp, 0000001C
:0046EF08 85C0                    test eax, eax
:0046EF0A 0F8589000000            jne 0046EF99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EEE7(C)
|
:0046EF10 8B442428                mov eax, dword ptr [esp+28]
:0046EF14 8D4C242C                lea ecx, dword ptr [esp+2C]
:0046EF18 8D542430                lea edx, dword ptr [esp+30]
:0046EF1C 51                      push ecx
:0046EF1D 52                      push edx
:0046EF1E 50                      push eax
:0046EF1F 57                      push edi
:0046EF20 53                      push ebx
:0046EF21 E88AE8FFFF              call 0046D7B0
:0046EF26 8B4C2444                mov ecx, dword ptr [esp+44]
:0046EF2A 8BF0                    mov esi, eax
:0046EF2C 8B442440                mov eax, dword ptr [esp+40]
:0046EF30 83C414                  add esp, 00000014
:0046EF33 3BC8                    cmp ecx, eax
:0046EF35 7362                    jnb 0046EF99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EF97(C)
|
:0046EF37 8B442428                mov eax, dword ptr [esp+28]
:0046EF3B 8B0E                    mov ecx, dword ptr [esi]
:0046EF3D 3BC1                    cmp eax, ecx
:0046EF3F 7C44                    jl 0046EF85
:0046EF41 3B4604                  cmp eax, dword ptr [esi+04]
:0046EF44 7F3F                    jg 0046EF85
:0046EF46 8B560C                  mov edx, dword ptr [esi+0C]
:0046EF49 8B4610                  mov eax, dword ptr [esi+10]
:0046EF4C C1E204                  shl edx, 04
:0046EF4F 03C2                    add eax, edx
:0046EF51 8B48F4                  mov ecx, dword ptr [eax-0C]
:0046EF54 85C9                    test ecx, ecx
:0046EF56 7407                    je 0046EF5F
:0046EF58 8A5108                  mov dl, byte ptr [ecx+08]
:0046EF5B 84D2                    test dl, dl
:0046EF5D 7526                    jne 0046EF85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EF56(C)
|
:0046EF5F 8B4C2420                mov ecx, dword ptr [esp+20]
:0046EF63 8B54241C                mov edx, dword ptr [esp+1C]
:0046EF67 55                      push ebp
:0046EF68 57                      push edi
:0046EF69 56                      push esi
:0046EF6A 83C0F0                  add eax, FFFFFFF0
:0046EF6D 6A00                    push 00000000
:0046EF6F 50                      push eax
:0046EF70 8B44242C                mov eax, dword ptr [esp+2C]
:0046EF74 53                      push ebx
:0046EF75 51                      push ecx
:0046EF76 8B4C2430                mov ecx, dword ptr [esp+30]
:0046EF7A 52                      push edx
:0046EF7B 50                      push eax
:0046EF7C 51                      push ecx
:0046EF7D E8FE000000              call 0046F080
:0046EF82 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EF3F(C), :0046EF44(C), :0046EF5D(C)
|
:0046EF85 8B442430                mov eax, dword ptr [esp+30]
:0046EF89 8B4C242C                mov ecx, dword ptr [esp+2C]
:0046EF8D 40                      inc eax
:0046EF8E 83C614                  add esi, 00000014
:0046EF91 3BC1                    cmp eax, ecx
:0046EF93 89442430                mov dword ptr [esp+30], eax
:0046EF97 729E                    jb 0046EF37

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EF0A(C), :0046EF35(C)
|
:0046EF99 5F                      pop edi
:0046EF9A 5E                      pop esi
:0046EF9B 5D                      pop ebp
:0046EF9C 5B                      pop ebx
:0046EF9D C3                      ret


:0046EF9E 90                      nop
:0046EF9F 90                      nop

* Referenced by a CALL at Addresses:
|:0046EB90   , :0046F0C8   
|
:0046EFA0 55                      push ebp
:0046EFA1 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046EFA3 6AFF                    push FFFFFFFF
:0046EFA5 68D84D4700              push 00474DD8
:0046EFAA 68F8044700              push 004704F8
:0046EFAF 64A100000000            mov eax, dword ptr fs:[00000000]
:0046EFB5 50                      push eax
:0046EFB6 64892500000000          mov dword ptr fs:[00000000], esp
:0046EFBD 83C4F4                  add esp, FFFFFFF4
:0046EFC0 53                      push ebx
:0046EFC1 56                      push esi
:0046EFC2 57                      push edi
:0046EFC3 8965E8                  mov dword ptr [ebp-18], esp
:0046EFC6 8B5D08                  mov ebx, dword ptr [ebp+08]
:0046EFC9 8B7308                  mov esi, dword ptr [ebx+08]
:0046EFCC 8975E4                  mov dword ptr [ebp-1C], esi
:0046EFCF 8B7D10                  mov edi, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F014(U), :0046F03F(U)
|
:0046EFD2 3B7514                  cmp esi, dword ptr [ebp+14]
:0046EFD5 746A                    je 0046F041
:0046EFD7 83FEFF                  cmp esi, FFFFFFFF
:0046EFDA 7E05                    jle 0046EFE1
:0046EFDC 3B7704                  cmp esi, dword ptr [edi+04]
:0046EFDF 7C05                    jl 0046EFE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EFDA(C)
|
:0046EFE1 E84A060000              call 0046F630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EFDF(C)
|
:0046EFE6 C745FC00000000          mov [ebp-04], 00000000
:0046EFED 8B4708                  mov eax, dword ptr [edi+08]
:0046EFF0 8B44F004                mov eax, dword ptr [eax+8*esi+04]
:0046EFF4 85C0                    test eax, eax
:0046EFF6 740C                    je 0046F004
:0046EFF8 6803010000              push 00000103
:0046EFFD 53                      push ebx
:0046EFFE 50                      push eax
:0046EFFF E84C050000              call 0046F550

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EFF6(C)
|
:0046F004 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046F00B 8B5708                  mov edx, dword ptr [edi+08]
:0046F00E 8B34F2                  mov esi, dword ptr [edx+8*esi]
:0046F011 8975E4                  mov dword ptr [ebp-1C], esi
:0046F014 EBBC                    jmp 0046EFD2
:0046F016 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046F019 51                      push ecx
:0046F01A E841000000              call 0046F060
:0046F01F 83C404                  add esp, 00000004
:0046F022 C3                      ret


:0046F023 8B65E8                  mov esp, dword ptr [ebp-18]
:0046F026 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046F02D 8B7D10                  mov edi, dword ptr [ebp+10]
:0046F030 8B5D08                  mov ebx, dword ptr [ebp+08]
:0046F033 8B75E4                  mov esi, dword ptr [ebp-1C]
:0046F036 8B5708                  mov edx, dword ptr [edi+08]
:0046F039 8B34F2                  mov esi, dword ptr [edx+8*esi]
:0046F03C 8975E4                  mov dword ptr [ebp-1C], esi
:0046F03F EB91                    jmp 0046EFD2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EFD5(C)
|
:0046F041 897308                  mov dword ptr [ebx+08], esi
:0046F044 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F047 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F04E 5F                      pop edi
:0046F04F 5E                      pop esi
:0046F050 5B                      pop ebx
:0046F051 8BE5                    mov esp, ebp
:0046F053 5D                      pop ebp
:0046F054 C3                      ret


:0046F055 90                      nop
:0046F056 90                      nop
:0046F057 90                      nop
:0046F058 90                      nop
:0046F059 90                      nop
:0046F05A 90                      nop
:0046F05B 90                      nop
:0046F05C 90                      nop
:0046F05D 90                      nop
:0046F05E 90                      nop
:0046F05F 90                      nop

* Referenced by a CALL at Addresses:
|:0046E2F4   , :0046F01A   
|
:0046F060 8B442404                mov eax, dword ptr [esp+04]
:0046F064 8B08                    mov ecx, dword ptr [eax]
:0046F066 813963736DE0            cmp dword ptr [ecx], E06D7363
:0046F06C 7505                    jne 0046F073
:0046F06E E82D050000              call 0046F5A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F06C(C)
|
:0046F073 33C0                    xor eax, eax
:0046F075 C3                      ret


:0046F076 90                      nop
:0046F077 90                      nop
:0046F078 90                      nop
:0046F079 90                      nop
:0046F07A 90                      nop
:0046F07B 90                      nop
:0046F07C 90                      nop
:0046F07D 90                      nop
:0046F07E 90                      nop
:0046F07F 90                      nop

* Referenced by a CALL at Addresses:
|:0046EE44   , :0046EF7D   
|
:0046F080 8B44241C                mov eax, dword ptr [esp+1C]
:0046F084 53                      push ebx
:0046F085 55                      push ebp
:0046F086 8B6C240C                mov ebp, dword ptr [esp+0C]
:0046F08A 56                      push esi
:0046F08B 8B742414                mov esi, dword ptr [esp+14]
:0046F08F 85C0                    test eax, eax
:0046F091 57                      push edi
:0046F092 7410                    je 0046F0A4
:0046F094 50                      push eax
:0046F095 8B44242C                mov eax, dword ptr [esp+2C]
:0046F099 50                      push eax
:0046F09A 56                      push esi
:0046F09B 55                      push ebp
:0046F09C E8EF010000              call 0046F290
:0046F0A1 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F092(C)
|
:0046F0A4 8B442438                mov eax, dword ptr [esp+38]
:0046F0A8 55                      push ebp
:0046F0A9 85C0                    test eax, eax
:0046F0AB 7503                    jne 0046F0B0
:0046F0AD 56                      push esi
:0046F0AE EB01                    jmp 0046F0B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F0AB(C)
|
:0046F0B0 50                      push eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F0AE(U)
|
:0046F0B1 E86AE4FFFF              call 0046D520
:0046F0B6 8B7C2430                mov edi, dword ptr [esp+30]
:0046F0BA 8B5C2424                mov ebx, dword ptr [esp+24]
:0046F0BE 8B542420                mov edx, dword ptr [esp+20]
:0046F0C2 8B0F                    mov ecx, dword ptr [edi]
:0046F0C4 51                      push ecx
:0046F0C5 53                      push ebx
:0046F0C6 52                      push edx
:0046F0C7 56                      push esi
:0046F0C8 E8D3FEFFFF              call 0046EFA0
:0046F0CD 8B4704                  mov eax, dword ptr [edi+04]
:0046F0D0 8B542438                mov edx, dword ptr [esp+38]
:0046F0D4 8B4C2444                mov ecx, dword ptr [esp+44]
:0046F0D8 83C410                  add esp, 00000010
:0046F0DB 40                      inc eax
:0046F0DC 894608                  mov dword ptr [esi+08], eax
:0046F0DF 8B420C                  mov eax, dword ptr [edx+0C]
:0046F0E2 6800010000              push 00000100
:0046F0E7 51                      push ecx
:0046F0E8 8B4C2424                mov ecx, dword ptr [esp+24]
:0046F0EC 50                      push eax
:0046F0ED 53                      push ebx
:0046F0EE 51                      push ecx
:0046F0EF 56                      push esi
:0046F0F0 55                      push ebp
:0046F0F1 E81A000000              call 0046F110
:0046F0F6 83C41C                  add esp, 0000001C
:0046F0F9 85C0                    test eax, eax
:0046F0FB 7407                    je 0046F104
:0046F0FD 56                      push esi
:0046F0FE 50                      push eax
:0046F0FF E8CCE3FFFF              call 0046D4D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F0FB(C)
|
:0046F104 5F                      pop edi
:0046F105 5E                      pop esi
:0046F106 5D                      pop ebp
:0046F107 5B                      pop ebx
:0046F108 C3                      ret


:0046F109 90                      nop
:0046F10A 90                      nop
:0046F10B 90                      nop
:0046F10C 90                      nop
:0046F10D 90                      nop
:0046F10E 90                      nop
:0046F10F 90                      nop

* Referenced by a CALL at Address:
|:0046F0F1   
|
:0046F110 55                      push ebp
:0046F111 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046F113 6AFF                    push FFFFFFFF
:0046F115 68E84D4700              push 00474DE8
:0046F11A 68F8044700              push 004704F8
:0046F11F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F125 50                      push eax
:0046F126 64892500000000          mov dword ptr fs:[00000000], esp
:0046F12D 83C4E4                  add esp, FFFFFFE4
:0046F130 53                      push ebx
:0046F131 56                      push esi
:0046F132 57                      push edi
:0046F133 8965E8                  mov dword ptr [ebp-18], esp
:0046F136 8B4518                  mov eax, dword ptr [ebp+18]
:0046F139 8945D4                  mov dword ptr [ebp-2C], eax
:0046F13C 33C9                    xor ecx, ecx
:0046F13E 894DDC                  mov dword ptr [ebp-24], ecx
:0046F141 8B750C                  mov esi, dword ptr [ebp+0C]
:0046F144 8B56FC                  mov edx, dword ptr [esi-04]
:0046F147 8955D8                  mov dword ptr [ebp-28], edx
:0046F14A 8B15A06F4B00            mov edx, dword ptr [004B6FA0]
:0046F150 8955E4                  mov dword ptr [ebp-1C], edx
:0046F153 8B15A46F4B00            mov edx, dword ptr [004B6FA4]
:0046F159 8955E0                  mov dword ptr [ebp-20], edx
:0046F15C 8B7D08                  mov edi, dword ptr [ebp+08]
:0046F15F 893DA06F4B00            mov dword ptr [004B6FA0], edi
:0046F165 8B5510                  mov edx, dword ptr [ebp+10]
:0046F168 8915A46F4B00            mov dword ptr [004B6FA4], edx
:0046F16E 894DFC                  mov dword ptr [ebp-04], ecx
:0046F171 C745FC01000000          mov [ebp-04], 00000001
:0046F178 8B4D20                  mov ecx, dword ptr [ebp+20]
:0046F17B 51                      push ecx
:0046F17C 8B551C                  mov edx, dword ptr [ebp+1C]
:0046F17F 52                      push edx
:0046F180 50                      push eax
:0046F181 8B4514                  mov eax, dword ptr [ebp+14]
:0046F184 50                      push eax
:0046F185 56                      push esi
:0046F186 E835E4FFFF              call 0046D5C0
:0046F18B 83C414                  add esp, 00000014
:0046F18E 8BD8                    mov ebx, eax
:0046F190 895DD4                  mov dword ptr [ebp-2C], ebx
:0046F193 C745FC00000000          mov [ebp-04], 00000000
:0046F19A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046F1A1 E854000000              call 0046F1FA
:0046F1A6 8BC3                    mov eax, ebx
:0046F1A8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F1AB 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F1B2 5F                      pop edi
:0046F1B3 5E                      pop esi
:0046F1B4 5B                      pop ebx
:0046F1B5 8BE5                    mov esp, ebp
:0046F1B7 5D                      pop ebp
:0046F1B8 C3                      ret


:0046F1B9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046F1BC 51                      push ecx
:0046F1BD E89E000000              call 0046F260
:0046F1C2 83C404                  add esp, 00000004
:0046F1C5 C3                      ret


:0046F1C6 8B65E8                  mov esp, dword ptr [ebp-18]
:0046F1C9 C745D400000000          mov [ebp-2C], 00000000

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046F1D0 6AFF                    push FFFFFFFF
:0046F1D2 8D55F0                  lea edx, dword ptr [ebp-10]
:0046F1D5 52                      push edx
:0046F1D6 E897E6FFFF              call 0046D872
:0046F1DB 83C408                  add esp, 00000008
:0046F1DE 33C0                    xor eax, eax
:0046F1E0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F1E3 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F1EA 5F                      pop edi
:0046F1EB 5E                      pop esi
:0046F1EC 5B                      pop ebx
:0046F1ED 8BE5                    mov esp, ebp
:0046F1EF 5D                      pop ebp
:0046F1F0 C3                      ret


:0046F1F1 8B750C                  mov esi, dword ptr [ebp+0C]
:0046F1F4 8B7D08                  mov edi, dword ptr [ebp+08]
:0046F1F7 8B5DD4                  mov ebx, dword ptr [ebp-2C]

* Referenced by a CALL at Address:
|:0046F1A1   
|
:0046F1FA 8B45D8                  mov eax, dword ptr [ebp-28]
:0046F1FD 8946FC                  mov dword ptr [esi-04], eax
:0046F200 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046F203 890DA06F4B00            mov dword ptr [004B6FA0], ecx
:0046F209 8B55E0                  mov edx, dword ptr [ebp-20]
:0046F20C 8915A46F4B00            mov dword ptr [004B6FA4], edx
:0046F212 813F63736DE0            cmp dword ptr [edi], E06D7363
:0046F218 7529                    jne 0046F243
:0046F21A 837F1003                cmp dword ptr [edi+10], 00000003
:0046F21E 7523                    jne 0046F243
:0046F220 817F1420059319          cmp dword ptr [edi+14], 19930520
:0046F227 751A                    jne 0046F243
:0046F229 8B45DC                  mov eax, dword ptr [ebp-24]
:0046F22C 85C0                    test eax, eax
:0046F22E 7513                    jne 0046F243
:0046F230 85DB                    test ebx, ebx
:0046F232 740F                    je 0046F243
:0046F234 E8A1E6FFFF              call 0046D8DA
:0046F239 50                      push eax
:0046F23A 57                      push edi
:0046F23B E860020000              call 0046F4A0
:0046F240 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F218(C), :0046F21E(C), :0046F227(C), :0046F22E(C), :0046F232(C)
|
:0046F243 C3                      ret
:0046F244 8BC3                    mov eax, ebx
:0046F246 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F249 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F250 5F                      pop edi
:0046F251 5E                      pop esi
:0046F252 5B                      pop ebx
:0046F253 8BE5                    mov esp, ebp
:0046F255 5D                      pop ebp
:0046F256 C3                      ret


:0046F257 90                      nop
:0046F258 90                      nop
:0046F259 90                      nop
:0046F25A 90                      nop
:0046F25B 90                      nop
:0046F25C 90                      nop
:0046F25D 90                      nop
:0046F25E 90                      nop
:0046F25F 90                      nop

* Referenced by a CALL at Address:
|:0046F1BD   
|
:0046F260 8B442404                mov eax, dword ptr [esp+04]
:0046F264 8B00                    mov eax, dword ptr [eax]
:0046F266 813863736DE0            cmp dword ptr [eax], E06D7363
:0046F26C 751C                    jne 0046F28A
:0046F26E 83781003                cmp dword ptr [eax+10], 00000003
:0046F272 7516                    jne 0046F28A
:0046F274 81781420059319          cmp dword ptr [eax+14], 19930520
:0046F27B 750D                    jne 0046F28A
:0046F27D 8B481C                  mov ecx, dword ptr [eax+1C]
:0046F280 85C9                    test ecx, ecx
:0046F282 7506                    jne 0046F28A
:0046F284 B801000000              mov eax, 00000001
:0046F289 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F26C(C), :0046F272(C), :0046F27B(C), :0046F282(C)
|
:0046F28A 33C0                    xor eax, eax
:0046F28C C3                      ret


:0046F28D 90                      nop
:0046F28E 90                      nop
:0046F28F 90                      nop

* Referenced by a CALL at Address:
|:0046F09C   
|
:0046F290 55                      push ebp
:0046F291 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046F293 6AFF                    push FFFFFFFF
:0046F295 68004E4700              push 00474E00
:0046F29A 68F8044700              push 004704F8
:0046F29F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F2A5 50                      push eax
:0046F2A6 64892500000000          mov dword ptr fs:[00000000], esp
:0046F2AD 83C4F4                  add esp, FFFFFFF4
:0046F2B0 53                      push ebx
:0046F2B1 56                      push esi
:0046F2B2 57                      push edi
:0046F2B3 8965E8                  mov dword ptr [ebp-18], esp
:0046F2B6 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046F2B9 8B4104                  mov eax, dword ptr [ecx+04]
:0046F2BC 85C0                    test eax, eax
:0046F2BE 0F84BC010000            je 0046F480
:0046F2C4 8A5008                  mov dl, byte ptr [eax+08]
:0046F2C7 84D2                    test dl, dl
:0046F2C9 0F84B1010000            je 0046F480
:0046F2CF 8B4108                  mov eax, dword ptr [ecx+08]
:0046F2D2 85C0                    test eax, eax
:0046F2D4 0F84A6010000            je 0046F480
:0046F2DA 8B550C                  mov edx, dword ptr [ebp+0C]
:0046F2DD 8D74020C                lea esi, dword ptr [edx+eax+0C]
:0046F2E1 C745FC00000000          mov [ebp-04], 00000000
:0046F2E8 F60108                  test byte ptr [ecx], 08
:0046F2EB 7448                    je 0046F335
:0046F2ED 8B7D08                  mov edi, dword ptr [ebp+08]
:0046F2F0 6A01                    push 00000001
:0046F2F2 8B4718                  mov eax, dword ptr [edi+18]
:0046F2F5 50                      push eax
:0046F2F6 E855210000              call 00471450
:0046F2FB 83C408                  add esp, 00000008
:0046F2FE 85C0                    test eax, eax
:0046F300 0F845E010000            je 0046F464
:0046F306 6A01                    push 00000001
:0046F308 56                      push esi
:0046F309 E862210000              call 00471470
:0046F30E 83C408                  add esp, 00000008
:0046F311 85C0                    test eax, eax
:0046F313 0F844B010000            je 0046F464
:0046F319 8B4718                  mov eax, dword ptr [edi+18]
:0046F31C 8906                    mov dword ptr [esi], eax
:0046F31E 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046F321 83C108                  add ecx, 00000008
:0046F324 51                      push ecx
:0046F325 50                      push eax
:0046F326 E8F5010000              call 0046F520
:0046F32B 83C408                  add esp, 00000008
:0046F32E 8906                    mov dword ptr [esi], eax
:0046F330 E944010000              jmp 0046F479

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F2EB(C)
|
:0046F335 8B7D14                  mov edi, dword ptr [ebp+14]
:0046F338 F60701                  test byte ptr [edi], 01
:0046F33B 7465                    je 0046F3A2
:0046F33D 8B5D08                  mov ebx, dword ptr [ebp+08]
:0046F340 6A01                    push 00000001
:0046F342 8B5318                  mov edx, dword ptr [ebx+18]
:0046F345 52                      push edx
:0046F346 E805210000              call 00471450
:0046F34B 83C408                  add esp, 00000008
:0046F34E 85C0                    test eax, eax
:0046F350 0F840E010000            je 0046F464
:0046F356 6A01                    push 00000001
:0046F358 56                      push esi
:0046F359 E812210000              call 00471470
:0046F35E 83C408                  add esp, 00000008
:0046F361 85C0                    test eax, eax
:0046F363 0F84FB000000            je 0046F464
:0046F369 8B4714                  mov eax, dword ptr [edi+14]
:0046F36C 50                      push eax
:0046F36D 8B4B18                  mov ecx, dword ptr [ebx+18]
:0046F370 51                      push ecx
:0046F371 56                      push esi
:0046F372 E8A9EFFFFF              call 0046E320
:0046F377 83C40C                  add esp, 0000000C
:0046F37A 837F1404                cmp dword ptr [edi+14], 00000004
:0046F37E 0F85F5000000            jne 0046F479
:0046F384 8B06                    mov eax, dword ptr [esi]
:0046F386 85C0                    test eax, eax
:0046F388 0F84EB000000            je 0046F479
:0046F38E 83C708                  add edi, 00000008
:0046F391 57                      push edi
:0046F392 50                      push eax
:0046F393 E888010000              call 0046F520
:0046F398 83C408                  add esp, 00000008
:0046F39B 8906                    mov dword ptr [esi], eax
:0046F39D E9D7000000              jmp 0046F479

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F33B(C)
|
:0046F3A2 8B4718                  mov eax, dword ptr [edi+18]
:0046F3A5 85C0                    test eax, eax
:0046F3A7 8B5D08                  mov ebx, dword ptr [ebp+08]
:0046F3AA 6A01                    push 00000001
:0046F3AC 8B5318                  mov edx, dword ptr [ebx+18]
:0046F3AF 52                      push edx
:0046F3B0 7546                    jne 0046F3F8
:0046F3B2 E899200000              call 00471450
:0046F3B7 83C408                  add esp, 00000008
:0046F3BA 85C0                    test eax, eax
:0046F3BC 0F84A2000000            je 0046F464
:0046F3C2 6A01                    push 00000001
:0046F3C4 56                      push esi
:0046F3C5 E8A6200000              call 00471470
:0046F3CA 83C408                  add esp, 00000008
:0046F3CD 85C0                    test eax, eax
:0046F3CF 0F848F000000            je 0046F464
:0046F3D5 8B4714                  mov eax, dword ptr [edi+14]
:0046F3D8 50                      push eax
:0046F3D9 83C708                  add edi, 00000008
:0046F3DC 57                      push edi
:0046F3DD 8B4B18                  mov ecx, dword ptr [ebx+18]
:0046F3E0 51                      push ecx
:0046F3E1 E83A010000              call 0046F520
:0046F3E6 83C408                  add esp, 00000008
:0046F3E9 50                      push eax
:0046F3EA 56                      push esi
:0046F3EB E830EFFFFF              call 0046E320
:0046F3F0 83C40C                  add esp, 0000000C
:0046F3F3 E981000000              jmp 0046F479

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F3B0(C)
|
:0046F3F8 E853200000              call 00471450
:0046F3FD 83C408                  add esp, 00000008
:0046F400 85C0                    test eax, eax
:0046F402 7460                    je 0046F464
:0046F404 6A01                    push 00000001
:0046F406 56                      push esi
:0046F407 E864200000              call 00471470
:0046F40C 83C408                  add esp, 00000008
:0046F40F 85C0                    test eax, eax
:0046F411 7451                    je 0046F464
:0046F413 8B4718                  mov eax, dword ptr [edi+18]
:0046F416 50                      push eax
:0046F417 E874200000              call 00471490
:0046F41C 83C404                  add esp, 00000004
:0046F41F 85C0                    test eax, eax
:0046F421 7441                    je 0046F464
:0046F423 F60704                  test byte ptr [edi], 04
:0046F426 741F                    je 0046F447
:0046F428 6A01                    push 00000001
:0046F42A 8D4F08                  lea ecx, dword ptr [edi+08]
:0046F42D 51                      push ecx
:0046F42E 8B5318                  mov edx, dword ptr [ebx+18]
:0046F431 52                      push edx
:0046F432 E8E9000000              call 0046F520
:0046F437 83C408                  add esp, 00000008
:0046F43A 50                      push eax
:0046F43B 8B4718                  mov eax, dword ptr [edi+18]
:0046F43E 50                      push eax
:0046F43F 56                      push esi
:0046F440 E8CBE0FFFF              call 0046D510
:0046F445 EB32                    jmp 0046F479

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F426(C)
|
:0046F447 8D4F08                  lea ecx, dword ptr [edi+08]
:0046F44A 51                      push ecx
:0046F44B 8B5318                  mov edx, dword ptr [ebx+18]
:0046F44E 52                      push edx
:0046F44F E8CC000000              call 0046F520
:0046F454 83C408                  add esp, 00000008
:0046F457 50                      push eax
:0046F458 8B4718                  mov eax, dword ptr [edi+18]
:0046F45B 50                      push eax
:0046F45C 56                      push esi
:0046F45D E8AEE0FFFF              call 0046D510
:0046F462 EB15                    jmp 0046F479

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F300(C), :0046F313(C), :0046F350(C), :0046F363(C), :0046F3BC(C)
|:0046F3CF(C), :0046F402(C), :0046F411(C), :0046F421(C)
|
:0046F464 E8C7010000              call 0046F630
:0046F469 EB0E                    jmp 0046F479
:0046F46B B801000000              mov eax, 00000001
:0046F470 C3                      ret


:0046F471 8B65E8                  mov esp, dword ptr [ebp-18]
:0046F474 E827010000              call 0046F5A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F330(U), :0046F37E(C), :0046F388(C), :0046F39D(U), :0046F3F3(U)
|:0046F445(U), :0046F462(U), :0046F469(U)
|
:0046F479 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F2BE(C), :0046F2C9(C), :0046F2D4(C)
|
:0046F480 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F483 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F48A 5F                      pop edi
:0046F48B 5E                      pop esi
:0046F48C 5B                      pop ebx
:0046F48D 8BE5                    mov esp, ebp
:0046F48F 5D                      pop ebp
:0046F490 C3                      ret


:0046F491 90                      nop
:0046F492 90                      nop
:0046F493 90                      nop
:0046F494 90                      nop
:0046F495 90                      nop
:0046F496 90                      nop
:0046F497 90                      nop
:0046F498 90                      nop
:0046F499 90                      nop
:0046F49A 90                      nop
:0046F49B 90                      nop
:0046F49C 90                      nop
:0046F49D 90                      nop
:0046F49E 90                      nop
:0046F49F 90                      nop

* Referenced by a CALL at Addresses:
|:0046EE7B   , :0046F23B   
|
:0046F4A0 55                      push ebp
:0046F4A1 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046F4A3 6AFF                    push FFFFFFFF
:0046F4A5 68104E4700              push 00474E10
:0046F4AA 68F8044700              push 004704F8
:0046F4AF 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F4B5 50                      push eax
:0046F4B6 64892500000000          mov dword ptr fs:[00000000], esp
:0046F4BD 83EC08                  sub esp, 00000008
:0046F4C0 53                      push ebx
:0046F4C1 56                      push esi
:0046F4C2 57                      push edi
:0046F4C3 8965E8                  mov dword ptr [ebp-18], esp
:0046F4C6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046F4C9 85C9                    test ecx, ecx
:0046F4CB 7437                    je 0046F504
:0046F4CD 8B411C                  mov eax, dword ptr [ecx+1C]
:0046F4D0 8B4004                  mov eax, dword ptr [eax+04]
:0046F4D3 85C0                    test eax, eax
:0046F4D5 742D                    je 0046F504
:0046F4D7 C745FC00000000          mov [ebp-04], 00000000
:0046F4DE 50                      push eax
:0046F4DF 8B4918                  mov ecx, dword ptr [ecx+18]
:0046F4E2 51                      push ecx
:0046F4E3 E828E0FFFF              call 0046D510
:0046F4E8 EB13                    jmp 0046F4FD
:0046F4EA 33C0                    xor eax, eax
:0046F4EC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0046F4EF 84C9                    test cl, cl
:0046F4F1 0F95C0                  setne al
:0046F4F4 C3                      ret


:0046F4F5 8B65E8                  mov esp, dword ptr [ebp-18]
:0046F4F8 E8A3000000              call 0046F5A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F4E8(U)
|
:0046F4FD C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F4CB(C), :0046F4D5(C)
|
:0046F504 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F507 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F50E 5F                      pop edi
:0046F50F 5E                      pop esi
:0046F510 5B                      pop ebx
:0046F511 8BE5                    mov esp, ebp
:0046F513 5D                      pop ebp
:0046F514 C3                      ret


:0046F515 90                      nop
:0046F516 90                      nop
:0046F517 90                      nop
:0046F518 90                      nop
:0046F519 90                      nop
:0046F51A 90                      nop
:0046F51B 90                      nop
:0046F51C 90                      nop
:0046F51D 90                      nop
:0046F51E 90                      nop
:0046F51F 90                      nop

* Referenced by a CALL at Addresses:
|:0046F326   , :0046F393   , :0046F3E1   , :0046F432   , :0046F44F   
|
:0046F520 8B542408                mov edx, dword ptr [esp+08]
:0046F524 56                      push esi
:0046F525 8B742408                mov esi, dword ptr [esp+08]
:0046F529 8B0A                    mov ecx, dword ptr [edx]
:0046F52B 8BC6                    mov eax, esi
:0046F52D 03C1                    add eax, ecx
:0046F52F 8B4A04                  mov ecx, dword ptr [edx+04]
:0046F532 85C9                    test ecx, ecx
:0046F534 7C0D                    jl 0046F543
:0046F536 8B340E                  mov esi, dword ptr [esi+ecx]
:0046F539 8B5208                  mov edx, dword ptr [edx+08]
:0046F53C 8B1416                  mov edx, dword ptr [esi+edx]
:0046F53F 03D1                    add edx, ecx
:0046F541 03C2                    add eax, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F534(C)
|
:0046F543 5E                      pop esi
:0046F544 C3                      ret


:0046F545 90                      nop
:0046F546 90                      nop
:0046F547 90                      nop
:0046F548 90                      nop
:0046F549 90                      nop
:0046F54A 90                      nop
:0046F54B 90                      nop
:0046F54C 90                      nop
:0046F54D 90                      nop
:0046F54E 90                      nop
:0046F54F 90                      nop

* Referenced by a CALL at Addresses:
|:0046D605   , :0046EFFF   
|
:0046F550 55                      push ebp
:0046F551 8BEC                    mov ebp, esp
:0046F553 83EC04                  sub esp, 00000004
:0046F556 53                      push ebx
:0046F557 51                      push ecx
:0046F558 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F55B 83C00C                  add eax, 0000000C
:0046F55E 8945FC                  mov dword ptr [ebp-04], eax
:0046F561 8B4508                  mov eax, dword ptr [ebp+08]
:0046F564 55                      push ebp
:0046F565 FF7510                  push [ebp+10]
:0046F568 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046F56B 8B6DFC                  mov ebp, dword ptr [ebp-04]
:0046F56E E88AE3FFFF              call 0046D8FD
:0046F573 56                      push esi
:0046F574 57                      push edi
:0046F575 FFD0                    call eax
:0046F577 5F                      pop edi
:0046F578 5E                      pop esi
:0046F579 8BDD                    mov ebx, ebp
:0046F57B 5D                      pop ebp
:0046F57C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046F57F 55                      push ebp
:0046F580 8BEB                    mov ebp, ebx
:0046F582 81F900010000            cmp ecx, 00000100
:0046F588 7505                    jne 0046F58F

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0046F58A B902000000              mov ecx, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F588(C)
|
:0046F58F 51                      push ecx
:0046F590 E868E3FFFF              call 0046D8FD
:0046F595 5D                      pop ebp
:0046F596 59                      pop ecx
:0046F597 5B                      pop ebx
:0046F598 C9                      leave
:0046F599 C20C00                  ret 000C


:0046F59C CC                      int 03
:0046F59D CC                      int 03
:0046F59E CC                      int 03
:0046F59F CC                      int 03

* Referenced by a CALL at Addresses:
|:0046EEC3   , :0046F06E   , :0046F474   , :0046F4F8   , :0046F69E   
|:004713DE   
|
:0046F5A0 55                      push ebp
:0046F5A1 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046F5A3 6AFF                    push FFFFFFFF
:0046F5A5 68204E4700              push 00474E20
:0046F5AA 68F8044700              push 004704F8
:0046F5AF 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F5B5 50                      push eax
:0046F5B6 64892500000000          mov dword ptr fs:[00000000], esp
:0046F5BD 83EC08                  sub esp, 00000008
:0046F5C0 53                      push ebx
:0046F5C1 56                      push esi
:0046F5C2 57                      push edi
:0046F5C3 8965E8                  mov dword ptr [ebp-18], esp
:0046F5C6 C745FC00000000          mov [ebp-04], 00000000
:0046F5CD A1AC6F4B00              mov eax, dword ptr [004B6FAC]
:0046F5D2 85C0                    test eax, eax
:0046F5D4 741B                    je 0046F5F1
:0046F5D6 C745FC01000000          mov [ebp-04], 00000001
:0046F5DD FFD0                    call eax
:0046F5DF EB09                    jmp 0046F5EA
:0046F5E1 B801000000              mov eax, 00000001
:0046F5E6 C3                      ret


:0046F5E7 8B65E8                  mov esp, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F5DF(U)
|
:0046F5EA C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F5D4(C)
|
:0046F5F1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046F5F8 E811000000              call 0046F60E
:0046F5FD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F600 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F607 5F                      pop edi
:0046F608 5E                      pop esi
:0046F609 5B                      pop ebx
:0046F60A 8BE5                    mov esp, ebp
:0046F60C 5D                      pop ebp
:0046F60D C3                      ret



* Referenced by a CALL at Address:
|:0046F5F8   
|
:0046F60E E89D1E0000              call 004714B0
:0046F613 C3                      ret


:0046F614 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F617 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F61E 5F                      pop edi
:0046F61F 5E                      pop esi
:0046F620 5B                      pop ebx
:0046F621 8BE5                    mov esp, ebp
:0046F623 5D                      pop ebp
:0046F624 C3                      ret


:0046F625 90                      nop
:0046F626 90                      nop
:0046F627 90                      nop
:0046F628 90                      nop
:0046F629 90                      nop
:0046F62A 90                      nop
:0046F62B 90                      nop
:0046F62C 90                      nop
:0046F62D 90                      nop
:0046F62E 90                      nop
:0046F62F 90                      nop

* Referenced by a CALL at Addresses:
|:0046D7D4   , :0046D81A   , :0046EB5D   , :0046EC40   , :0046EC9C   
|:0046ECBE   , :0046EFE1   , :0046F464   
|
:0046F630 55                      push ebp
:0046F631 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0046F633 6AFF                    push FFFFFFFF
:0046F635 68384E4700              push 00474E38
:0046F63A 68F8044700              push 004704F8
:0046F63F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F645 50                      push eax
:0046F646 64892500000000          mov dword ptr fs:[00000000], esp
:0046F64D 83EC08                  sub esp, 00000008
:0046F650 53                      push ebx
:0046F651 56                      push esi
:0046F652 57                      push edi
:0046F653 8965E8                  mov dword ptr [ebp-18], esp
:0046F656 C745FC00000000          mov [ebp-04], 00000000
:0046F65D A134EA4700              mov eax, dword ptr [0047EA34]
:0046F662 85C0                    test eax, eax
:0046F664 741B                    je 0046F681
:0046F666 C745FC01000000          mov [ebp-04], 00000001
:0046F66D FFD0                    call eax
:0046F66F EB09                    jmp 0046F67A
:0046F671 B801000000              mov eax, 00000001
:0046F676 C3                      ret


:0046F677 8B65E8                  mov esp, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F66F(U)
|
:0046F67A C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F664(C)
|
:0046F681 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046F688 E811000000              call 0046F69E
:0046F68D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F690 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F697 5F                      pop edi
:0046F698 5E                      pop esi
:0046F699 5B                      pop ebx
:0046F69A 8BE5                    mov esp, ebp
:0046F69C 5D                      pop ebp
:0046F69D C3                      ret



* Referenced by a CALL at Address:
|:0046F688   
|
:0046F69E E8FDFEFFFF              call 0046F5A0
:0046F6A3 C3                      ret


:0046F6A4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046F6A7 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046F6AE 5F                      pop edi
:0046F6AF 5E                      pop esi
:0046F6B0 5B                      pop ebx
:0046F6B1 8BE5                    mov esp, ebp
:0046F6B3 5D                      pop ebp
:0046F6B4 C3                      ret


:0046F6B5 90                      nop
:0046F6B6 90                      nop
:0046F6B7 90                      nop
:0046F6B8 90                      nop
:0046F6B9 90                      nop
:0046F6BA 90                      nop
:0046F6BB 90                      nop
:0046F6BC 90                      nop
:0046F6BD 90                      nop
:0046F6BE 90                      nop
:0046F6BF 90                      nop

* Referenced by a CALL at Address:
|:0046E6B7   
|
:0046F6C0 6A00                    push 00000000
:0046F6C2 6800100000              push 00001000
:0046F6C7 6A01                    push 00000001

* Reference To: KERNEL32.HeapCreate, Ord:016Ah
                                  |
:0046F6C9 FF15C8854B00            Call dword ptr [004B85C8]
:0046F6CF 85C0                    test eax, eax
:0046F6D1 A3C47A4B00              mov dword ptr [004B7AC4], eax
:0046F6D6 7501                    jne 0046F6D9
:0046F6D8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F6D6(C)
|
:0046F6D9 E822000000              call 0046F700
:0046F6DE 85C0                    test eax, eax
:0046F6E0 750F                    jne 0046F6F1
:0046F6E2 A1C47A4B00              mov eax, dword ptr [004B7AC4]
:0046F6E7 50                      push eax

* Reference To: KERNEL32.HeapDestroy, Ord:016Ch
                                  |
:0046F6E8 FF15CC854B00            Call dword ptr [004B85CC]
:0046F6EE 33C0                    xor eax, eax
:0046F6F0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F6E0(C)
|
:0046F6F1 B801000000              mov eax, 00000001
:0046F6F6 C3                      ret


:0046F6F7 90                      nop
:0046F6F8 90                      nop
:0046F6F9 90                      nop
:0046F6FA 90                      nop
:0046F6FB 90                      nop
:0046F6FC 90                      nop
:0046F6FD 90                      nop
:0046F6FE 90                      nop
:0046F6FF 90                      nop

* Referenced by a CALL at Addresses:
|:0046F6D9   , :0046FC4D   
|
:0046F700 A150EA4700              mov eax, dword ptr [0047EA50]
:0046F705 55                      push ebp
:0046F706 56                      push esi
:0046F707 83F8FF                  cmp eax, FFFFFFFF
:0046F70A 57                      push edi
:0046F70B 7507                    jne 0046F714

* Possible Indirect StringData Ref from Data Obj ->"@G"
                                  |
:0046F70D BD40EA4700              mov ebp, 0047EA40
:0046F712 EB1D                    jmp 0046F731

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F70B(C)
|
:0046F714 A1C47A4B00              mov eax, dword ptr [004B7AC4]
:0046F719 6820200000              push 00002020
:0046F71E 6A00                    push 00000000
:0046F720 50                      push eax

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:0046F721 FF15F0854B00            Call dword ptr [004B85F0]
:0046F727 8BE8                    mov ebp, eax
:0046F729 85ED                    test ebp, ebp
:0046F72B 0F842B010000            je 0046F85C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F712(U)
|

* Reference To: KERNEL32.VirtualAlloc, Ord:025Bh
                                  |
:0046F731 8B3DC0854B00            mov edi, dword ptr [004B85C0]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046F737 6A04                    push 00000004
:0046F739 6800200000              push 00002000
:0046F73E 6800004000              push 00400000
:0046F743 6A00                    push 00000000
:0046F745 FFD7                    call edi
:0046F747 8BF0                    mov esi, eax
:0046F749 85F6                    test esi, esi
:0046F74B 0F84F4000000            je 0046F845

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046F751 6A04                    push 00000004
:0046F753 6800100000              push 00001000
:0046F758 6800000100              push 00010000
:0046F75D 56                      push esi
:0046F75E FFD7                    call edi
:0046F760 85C0                    test eax, eax
:0046F762 0F84CF000000            je 0046F837
:0046F768 81FD40EA4700            cmp ebp, 0047EA40
:0046F76E 7528                    jne 0046F798

* Possible StringData Ref from Data Obj ->"@G"
                                  |
:0046F770 A140EA4700              mov eax, dword ptr [0047EA40]
:0046F775 85C0                    test eax, eax
:0046F777 750A                    jne 0046F783

* Possible Indirect StringData Ref from Data Obj ->"@G"
                                  |
:0046F779 C70540EA470040EA4700    mov dword ptr [0047EA40], 0047EA40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F777(C)
|

* Possible StringData Ref from Data Obj ->"@G"
                                  |
:0046F783 A144EA4700              mov eax, dword ptr [0047EA44]
:0046F788 85C0                    test eax, eax
:0046F78A 7527                    jne 0046F7B3

* Possible Indirect StringData Ref from Data Obj ->"@G"
                                  |
:0046F78C C70544EA470040EA4700    mov dword ptr [0047EA44], 0047EA40
:0046F796 EB1B                    jmp 0046F7B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F76E(C)
|

* Possible Indirect StringData Ref from Data Obj ->"@G"
                                  |
:0046F798 C7450040EA4700          mov [ebp+00], 0047EA40

* Possible StringData Ref from Data Obj ->"@G"
                                  |
:0046F79F 8B0D44EA4700            mov ecx, dword ptr [0047EA44]
:0046F7A5 894D04                  mov dword ptr [ebp+04], ecx
:0046F7A8 892D44EA4700            mov dword ptr [0047EA44], ebp
:0046F7AE 8B5504                  mov edx, dword ptr [ebp+04]
:0046F7B1 892A                    mov dword ptr [edx], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F78A(C), :0046F796(U)
|
:0046F7B3 8D8600004000            lea eax, dword ptr [esi+00400000]
:0046F7B9 8D4D18                  lea ecx, dword ptr [ebp+18]
:0046F7BC 8D9598000000            lea edx, dword ptr [ebp+00000098]
:0046F7C2 894514                  mov dword ptr [ebp+14], eax
:0046F7C5 897510                  mov dword ptr [ebp+10], esi
:0046F7C8 894D08                  mov dword ptr [ebp+08], ecx
:0046F7CB 89550C                  mov dword ptr [ebp+0C], edx
:0046F7CE 33C0                    xor eax, eax
:0046F7D0 BFF1000000              mov edi, 000000F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F7F0(C)
|
:0046F7D5 33D2                    xor edx, edx
:0046F7D7 83F810                  cmp eax, 00000010
:0046F7DA 0F9DC2                  setnl dl
:0046F7DD 4A                      dec edx
:0046F7DE 83C108                  add ecx, 00000008
:0046F7E1 23D7                    and edx, edi
:0046F7E3 4A                      dec edx
:0046F7E4 40                      inc eax
:0046F7E5 8951F8                  mov dword ptr [ecx-08], edx
:0046F7E8 8979FC                  mov dword ptr [ecx-04], edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046F7EB 3D00040000              cmp eax, 00000400
:0046F7F0 7CE3                    jl 0046F7D5
:0046F7F2 B900400000              mov ecx, 00004000
:0046F7F7 33C0                    xor eax, eax
:0046F7F9 8BFE                    mov edi, esi
:0046F7FB F3                      repz
:0046F7FC AB                      stosd
:0046F7FD 8B4510                  mov eax, dword ptr [ebp+10]
:0046F800 0500000100              add eax, 00010000
:0046F805 3BF0                    cmp esi, eax
:0046F807 7328                    jnb 0046F831
:0046F809 B9F0000000              mov ecx, 000000F0
:0046F80E B0FF                    mov al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F82F(C)
|
:0046F810 8D5608                  lea edx, dword ptr [esi+08]
:0046F813 894E04                  mov dword ptr [esi+04], ecx
:0046F816 8916                    mov dword ptr [esi], edx
:0046F818 8886F8000000            mov byte ptr [esi+000000F8], al
:0046F81E 8B5510                  mov edx, dword ptr [ebp+10]
:0046F821 81C600100000            add esi, 00001000
:0046F827 81C200000100            add edx, 00010000
:0046F82D 3BF2                    cmp esi, edx
:0046F82F 72DF                    jb 0046F810

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F807(C)
|
:0046F831 8BC5                    mov eax, ebp
:0046F833 5F                      pop edi
:0046F834 5E                      pop esi
:0046F835 5D                      pop ebp
:0046F836 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F762(C)
|
:0046F837 6800800000              push 00008000
:0046F83C 6A00                    push 00000000
:0046F83E 56                      push esi

* Reference To: KERNEL32.VirtualFree, Ord:025Eh
                                  |
:0046F83F FF15D0854B00            Call dword ptr [004B85D0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F74B(C)
|
:0046F845 81FD40EA4700            cmp ebp, 0047EA40
:0046F84B 740F                    je 0046F85C
:0046F84D A1C47A4B00              mov eax, dword ptr [004B7AC4]
:0046F852 55                      push ebp
:0046F853 6A00                    push 00000000
:0046F855 50                      push eax

* Reference To: KERNEL32.HeapFree, Ord:016Eh
                                  |
:0046F856 FF1500864B00            Call dword ptr [004B8600]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F72B(C), :0046F84B(C)
|
:0046F85C 5F                      pop edi
:0046F85D 5E                      pop esi
:0046F85E 33C0                    xor eax, eax
:0046F860 5D                      pop ebp
:0046F861 C3                      ret


:0046F862 90                      nop
:0046F863 90                      nop
:0046F864 90                      nop
:0046F865 90                      nop
:0046F866 90                      nop
:0046F867 90                      nop
:0046F868 90                      nop
:0046F869 90                      nop
:0046F86A 90                      nop
:0046F86B 90                      nop
:0046F86C 90                      nop
:0046F86D 90                      nop
:0046F86E 90                      nop
:0046F86F 90                      nop

* Referenced by a CALL at Address:
|:0046F97C   
|
:0046F870 56                      push esi
:0046F871 8B742408                mov esi, dword ptr [esp+08]
:0046F875 6800800000              push 00008000
:0046F87A 6A00                    push 00000000
:0046F87C 8B4610                  mov eax, dword ptr [esi+10]
:0046F87F 50                      push eax

* Reference To: KERNEL32.VirtualFree, Ord:025Eh
                                  |
:0046F880 FF15D0854B00            Call dword ptr [004B85D0]
:0046F886 3935600A4800            cmp dword ptr [00480A60], esi
:0046F88C 7509                    jne 0046F897
:0046F88E 8B4E04                  mov ecx, dword ptr [esi+04]
:0046F891 890D600A4800            mov dword ptr [00480A60], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F88C(C)
|
:0046F897 81FE40EA4700            cmp esi, 0047EA40
:0046F89D 7420                    je 0046F8BF
:0046F89F 8B5604                  mov edx, dword ptr [esi+04]
:0046F8A2 8B06                    mov eax, dword ptr [esi]
:0046F8A4 56                      push esi
:0046F8A5 6A00                    push 00000000
:0046F8A7 8902                    mov dword ptr [edx], eax
:0046F8A9 8B0E                    mov ecx, dword ptr [esi]
:0046F8AB 8B5604                  mov edx, dword ptr [esi+04]
:0046F8AE 895104                  mov dword ptr [ecx+04], edx
:0046F8B1 A1C47A4B00              mov eax, dword ptr [004B7AC4]
:0046F8B6 50                      push eax

* Reference To: KERNEL32.HeapFree, Ord:016Eh
                                  |
:0046F8B7 FF1500864B00            Call dword ptr [004B8600]
:0046F8BD 5E                      pop esi
:0046F8BE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F89D(C)
|
:0046F8BF C70550EA4700FFFFFFFF    mov dword ptr [0047EA50], FFFFFFFF
:0046F8C9 5E                      pop esi
:0046F8CA C3                      ret


:0046F8CB 90                      nop
:0046F8CC 90                      nop
:0046F8CD 90                      nop
:0046F8CE 90                      nop
:0046F8CF 90                      nop

* Referenced by a CALL at Address:
|:0046FA49   
|
:0046F8D0 53                      push ebx
:0046F8D1 55                      push ebp
:0046F8D2 56                      push esi
:0046F8D3 57                      push edi

* Possible StringData Ref from Data Obj ->"@G"
                                  |
:0046F8D4 8B3D44EA4700            mov edi, dword ptr [0047EA44]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F992(C)
|
:0046F8DA 837F10FF                cmp dword ptr [edi+10], FFFFFFFF
:0046F8DE 0F84A0000000            je 0046F984
:0046F8E4 33ED                    xor ebp, ebp
:0046F8E6 8DB710200000            lea esi, dword ptr [edi+00002010]
:0046F8EC BB00F03F00              mov ebx, 003FF000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F94B(C)
|
:0046F8F1 813EF0000000            cmp dword ptr [esi], 000000F0
:0046F8F7 7547                    jne 0046F940
:0046F8F9 8B4710                  mov eax, dword ptr [edi+10]
:0046F8FC 6800400000              push 00004000
:0046F901 03C3                    add eax, ebx
:0046F903 6800100000              push 00001000
:0046F908 50                      push eax

* Reference To: KERNEL32.VirtualFree, Ord:025Eh
                                  |
:0046F909 FF15D0854B00            Call dword ptr [004B85D0]
:0046F90F 85C0                    test eax, eax
:0046F911 742D                    je 0046F940
:0046F913 C706FFFFFFFF            mov dword ptr [esi], FFFFFFFF
:0046F919 8B15B06F4B00            mov edx, dword ptr [004B6FB0]
:0046F91F 4A                      dec edx
:0046F920 8915B06F4B00            mov dword ptr [004B6FB0], edx
:0046F926 8B470C                  mov eax, dword ptr [edi+0C]
:0046F929 85C0                    test eax, eax
:0046F92B 7404                    je 0046F931
:0046F92D 3BC6                    cmp eax, esi
:0046F92F 7603                    jbe 0046F934

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F92B(C)
|
:0046F931 89770C                  mov dword ptr [edi+0C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F92F(C)
|
:0046F934 8B442414                mov eax, dword ptr [esp+14]
:0046F938 45                      inc ebp
:0046F939 48                      dec eax
:0046F93A 89442414                mov dword ptr [esp+14], eax
:0046F93E 740D                    je 0046F94D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F8F7(C), :0046F911(C)
|
:0046F940 81EB00100000            sub ebx, 00001000
:0046F946 83EE08                  sub esi, 00000008
:0046F949 85DB                    test ebx, ebx
:0046F94B 7DA4                    jge 0046F8F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F93E(C)
|
:0046F94D 8BD7                    mov edx, edi
:0046F94F 8B7F04                  mov edi, dword ptr [edi+04]
:0046F952 85ED                    test ebp, ebp
:0046F954 742E                    je 0046F984
:0046F956 837A18FF                cmp dword ptr [edx+18], FFFFFFFF
:0046F95A 7528                    jne 0046F984
:0046F95C B801000000              mov eax, 00000001
:0046F961 8D4A20                  lea ecx, dword ptr [edx+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F972(C)
|
:0046F964 8339FF                  cmp dword ptr [ecx], FFFFFFFF
:0046F967 750B                    jne 0046F974
:0046F969 40                      inc eax
:0046F96A 83C108                  add ecx, 00000008

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046F96D 3D00040000              cmp eax, 00000400
:0046F972 7CF0                    jl 0046F964

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F967(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:0046F974 3D00040000              cmp eax, 00000400
:0046F979 7509                    jne 0046F984
:0046F97B 52                      push edx
:0046F97C E8EFFEFFFF              call 0046F870
:0046F981 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F8DE(C), :0046F954(C), :0046F95A(C), :0046F979(C)
|
:0046F984 3B3D44EA4700            cmp edi, dword ptr [0047EA44]
:0046F98A 740C                    je 0046F998
:0046F98C 8B442414                mov eax, dword ptr [esp+14]
:0046F990 85C0                    test eax, eax
:0046F992 0F8F42FFFFFF            jg 0046F8DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F98A(C)
|
:0046F998 5F                      pop edi
:0046F999 5E                      pop esi
:0046F99A 5D                      pop ebp
:0046F99B 5B                      pop ebx
:0046F99C C3                      ret


:0046F99D 90                      nop
:0046F99E 90                      nop
:0046F99F 90                      nop

* Referenced by a CALL at Addresses:
|:0046DF55   , :0046E8A1   , :0046EB21   
|
:0046F9A0 8B4C2404                mov ecx, dword ptr [esp+04]

* Possible Indirect StringData Ref from Data Obj ->"@G"
                                  |
:0046F9A4 B840EA4700              mov eax, 0047EA40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F9BC(U)
|
:0046F9A9 3B4810                  cmp ecx, dword ptr [eax+10]
:0046F9AC 7605                    jbe 0046F9B3
:0046F9AE 3B4814                  cmp ecx, dword ptr [eax+14]
:0046F9B1 720B                    jb 0046F9BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F9AC(C)
|
:0046F9B3 8B00                    mov eax, dword ptr [eax]
:0046F9B5 3D40EA4700              cmp eax, 0047EA40
:0046F9BA 743A                    je 0046F9F6
:0046F9BC EBEB                    jmp 0046F9A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F9B1(C)
|
:0046F9BE F6C10F                  test cl, 0F
:0046F9C1 7533                    jne 0046F9F6
:0046F9C3 8BD1                    mov edx, ecx
:0046F9C5 81E2FF0F0000            and edx, 00000FFF
:0046F9CB 81FA00010000            cmp edx, 00000100
:0046F9D1 7223                    jb 0046F9F6
:0046F9D3 8B542408                mov edx, dword ptr [esp+08]
:0046F9D7 8902                    mov dword ptr [edx], eax
:0046F9D9 8B54240C                mov edx, dword ptr [esp+0C]
:0046F9DD 8BC1                    mov eax, ecx
:0046F9DF 2500F0FFFF              and eax, FFFFF000
:0046F9E4 2BC8                    sub ecx, eax
:0046F9E6 8902                    mov dword ptr [edx], eax
:0046F9E8 81E900010000            sub ecx, 00000100
:0046F9EE C1F904                  sar ecx, 04
:0046F9F1 8D440108                lea eax, dword ptr [ecx+eax+08]
:0046F9F5 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F9BA(C), :0046F9C1(C), :0046F9D1(C)
|
:0046F9F6 33C0                    xor eax, eax
:0046F9F8 C3                      ret


:0046F9F9 90                      nop
:0046F9FA 90                      nop
:0046F9FB 90                      nop
:0046F9FC 90                      nop
:0046F9FD 90                      nop
:0046F9FE 90                      nop
:0046F9FF 90                      nop

* Referenced by a CALL at Addresses:
|:0046DF6C   , :0046E923   , :0046E97E   
|
:0046FA00 8B442404                mov eax, dword ptr [esp+04]
:0046FA04 8B4C2408                mov ecx, dword ptr [esp+08]
:0046FA08 56                      push esi
:0046FA09 33D2                    xor edx, edx
:0046FA0B 2B4810                  sub ecx, dword ptr [eax+10]
:0046FA0E C1F90C                  sar ecx, 0C
:0046FA11 8B74C818                mov esi, dword ptr [eax+8*ecx+18]
:0046FA15 8D44C818                lea eax, dword ptr [eax+8*ecx+18]
:0046FA19 8B4C2410                mov ecx, dword ptr [esp+10]
:0046FA1D 8A11                    mov dl, byte ptr [ecx]
:0046FA1F 03F2                    add esi, edx
:0046FA21 8930                    mov dword ptr [eax], esi
:0046FA23 C60100                  mov byte ptr [ecx], 00
:0046FA26 8B08                    mov ecx, dword ptr [eax]
:0046FA28 C74004F1000000          mov [eax+04], 000000F1
:0046FA2F 81F9F0000000            cmp ecx, 000000F0
:0046FA35 751A                    jne 0046FA51
:0046FA37 A1B06F4B00              mov eax, dword ptr [004B6FB0]
:0046FA3C 40                      inc eax
:0046FA3D 83F820                  cmp eax, 00000020
:0046FA40 A3B06F4B00              mov dword ptr [004B6FB0], eax
:0046FA45 750A                    jne 0046FA51

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0046FA47 6A10                    push 00000010
:0046FA49 E882FEFFFF              call 0046F8D0
:0046FA4E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FA35(C), :0046FA45(C)
|
:0046FA51 5E                      pop esi
:0046FA52 C3                      ret


:0046FA53 90                      nop
:0046FA54 90                      nop
:0046FA55 90                      nop
:0046FA56 90                      nop
:0046FA57 90                      nop
:0046FA58 90                      nop
:0046FA59 90                      nop
:0046FA5A 90                      nop
:0046FA5B 90                      nop
:0046FA5C 90                      nop
:0046FA5D 90                      nop
:0046FA5E 90                      nop
:0046FA5F 90                      nop

* Referenced by a CALL at Addresses:
|:0046E01A   , :0046E8E3   , :0047334E   
|
:0046FA60 51                      push ecx

* Possible StringData Ref from Data Obj ->"@G"
                                  |
:0046FA61 8B0D600A4800            mov ecx, dword ptr [00480A60]
:0046FA67 53                      push ebx
:0046FA68 8B5C240C                mov ebx, dword ptr [esp+0C]
:0046FA6C 55                      push ebp
:0046FA6D 56                      push esi
:0046FA6E 57                      push edi
:0046FA6F 894C2410                mov dword ptr [esp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB13(U)
|
:0046FA73 8B4110                  mov eax, dword ptr [ecx+10]
:0046FA76 83F8FF                  cmp eax, FFFFFFFF
:0046FA79 0F8485000000            je 0046FB04
:0046FA7F 8B7908                  mov edi, dword ptr [ecx+08]
:0046FA82 8DA918200000            lea ebp, dword ptr [ecx+00002018]
:0046FA88 8BF7                    mov esi, edi
:0046FA8A 2BF1                    sub esi, ecx
:0046FA8C 83EE18                  sub esi, 00000018
:0046FA8F C1FE03                  sar esi, 03
:0046FA92 C1E60C                  shl esi, 0C
:0046FA95 03F0                    add esi, eax
:0046FA97 3BFD                    cmp edi, ebp
:0046FA99 732E                    jnb 0046FAC9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FAC7(C)
|
:0046FA9B 8B07                    mov eax, dword ptr [edi]
:0046FA9D 3BC3                    cmp eax, ebx
:0046FA9F 7C1B                    jl 0046FABC
:0046FAA1 395F04                  cmp dword ptr [edi+04], ebx
:0046FAA4 7616                    jbe 0046FABC
:0046FAA6 53                      push ebx
:0046FAA7 50                      push eax
:0046FAA8 56                      push esi
:0046FAA9 E8F2010000              call 0046FCA0
:0046FAAE 83C40C                  add esp, 0000000C
:0046FAB1 85C0                    test eax, eax
:0046FAB3 7563                    jne 0046FB18
:0046FAB5 8B4C2410                mov ecx, dword ptr [esp+10]
:0046FAB9 895F04                  mov dword ptr [edi+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FA9F(C), :0046FAA4(C)
|
:0046FABC 83C708                  add edi, 00000008
:0046FABF 81C600100000            add esi, 00001000
:0046FAC5 3BFD                    cmp edi, ebp
:0046FAC7 72D2                    jb 0046FA9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FA99(C)
|
:0046FAC9 8B6908                  mov ebp, dword ptr [ecx+08]
:0046FACC 8B7910                  mov edi, dword ptr [ecx+10]
:0046FACF 8D7118                  lea esi, dword ptr [ecx+18]
:0046FAD2 3BF5                    cmp esi, ebp
:0046FAD4 732E                    jnb 0046FB04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB02(C)
|
:0046FAD6 8B06                    mov eax, dword ptr [esi]
:0046FAD8 3BC3                    cmp eax, ebx
:0046FADA 7C1B                    jl 0046FAF7
:0046FADC 395E04                  cmp dword ptr [esi+04], ebx
:0046FADF 7616                    jbe 0046FAF7
:0046FAE1 53                      push ebx
:0046FAE2 50                      push eax
:0046FAE3 57                      push edi
:0046FAE4 E8B7010000              call 0046FCA0
:0046FAE9 83C40C                  add esp, 0000000C
:0046FAEC 85C0                    test eax, eax
:0046FAEE 7541                    jne 0046FB31
:0046FAF0 8B4C2410                mov ecx, dword ptr [esp+10]
:0046FAF4 895E04                  mov dword ptr [esi+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FADA(C), :0046FADF(C)
|
:0046FAF7 83C608                  add esi, 00000008
:0046FAFA 81C700100000            add edi, 00001000
:0046FB00 3BF5                    cmp esi, ebp
:0046FB02 72D2                    jb 0046FAD6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FA79(C), :0046FAD4(C)
|
:0046FB04 8B09                    mov ecx, dword ptr [ecx]

* Possible StringData Ref from Data Obj ->"@G"
                                  |
:0046FB06 A1600A4800              mov eax, dword ptr [00480A60]
:0046FB0B 3BC8                    cmp ecx, eax
:0046FB0D 894C2410                mov dword ptr [esp+10], ecx
:0046FB11 7437                    je 0046FB4A
:0046FB13 E95BFFFFFF              jmp 0046FA73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FAB3(C)
|
:0046FB18 8B4C2410                mov ecx, dword ptr [esp+10]
:0046FB1C 890D600A4800            mov dword ptr [00480A60], ecx
:0046FB22 8B17                    mov edx, dword ptr [edi]
:0046FB24 2BD3                    sub edx, ebx
:0046FB26 8917                    mov dword ptr [edi], edx
:0046FB28 897908                  mov dword ptr [ecx+08], edi
:0046FB2B 5F                      pop edi
:0046FB2C 5E                      pop esi
:0046FB2D 5D                      pop ebp
:0046FB2E 5B                      pop ebx
:0046FB2F 59                      pop ecx
:0046FB30 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FAEE(C)
|
:0046FB31 8B4C2410                mov ecx, dword ptr [esp+10]
:0046FB35 890D600A4800            mov dword ptr [00480A60], ecx
:0046FB3B 8B16                    mov edx, dword ptr [esi]
:0046FB3D 2BD3                    sub edx, ebx
:0046FB3F 8916                    mov dword ptr [esi], edx
:0046FB41 897108                  mov dword ptr [ecx+08], esi
:0046FB44 5F                      pop edi
:0046FB45 5E                      pop esi
:0046FB46 5D                      pop ebp
:0046FB47 5B                      pop ebx
:0046FB48 59                      pop ecx
:0046FB49 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB11(C)
|

* Possible Indirect StringData Ref from Data Obj ->"@G"
                                  |
:0046FB4A BD40EA4700              mov ebp, 0047EA40
:0046FB4F 83C9FF                  or ecx, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB6D(U)
|
:0046FB52 394D10                  cmp dword ptr [ebp+10], ecx
:0046FB55 7407                    je 0046FB5E
:0046FB57 8B450C                  mov eax, dword ptr [ebp+0C]
:0046FB5A 85C0                    test eax, eax
:0046FB5C 7511                    jne 0046FB6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB55(C)
|
:0046FB5E 8B6D00                  mov ebp, dword ptr [ebp+00]
:0046FB61 81FD40EA4700            cmp ebp, 0047EA40
:0046FB67 0F84E0000000            je 0046FC4D
:0046FB6D EBE3                    jmp 0046FB52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB5C(C)
|
:0046FB6F 8B450C                  mov eax, dword ptr [ebp+0C]
:0046FB72 8B7510                  mov esi, dword ptr [ebp+10]
:0046FB75 8BF8                    mov edi, eax
:0046FB77 89442418                mov dword ptr [esp+18], eax
:0046FB7B 2BFD                    sub edi, ebp
:0046FB7D 8B10                    mov edx, dword ptr [eax]
:0046FB7F 83EF18                  sub edi, 00000018
:0046FB82 C1FF03                  sar edi, 03
:0046FB85 C1E70C                  shl edi, 0C
:0046FB88 03FE                    add edi, esi
:0046FB8A 33F6                    xor esi, esi
:0046FB8C 3BD1                    cmp edx, ecx
:0046FB8E 7510                    jne 0046FBA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB9E(C)
|
:0046FB90 83FE10                  cmp esi, 00000010
:0046FB93 7D0B                    jge 0046FBA0
:0046FB95 8B5008                  mov edx, dword ptr [eax+08]
:0046FB98 83C008                  add eax, 00000008
:0046FB9B 46                      inc esi
:0046FB9C 3BD1                    cmp edx, ecx
:0046FB9E 74F0                    je 0046FB90

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FB8E(C), :0046FB93(C)
|
:0046FBA0 8BC6                    mov eax, esi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046FBA2 6A04                    push 00000004
:0046FBA4 C1E00C                  shl eax, 0C
:0046FBA7 6800100000              push 00001000
:0046FBAC 50                      push eax
:0046FBAD 57                      push edi
:0046FBAE 89442420                mov dword ptr [esp+20], eax

* Reference To: KERNEL32.VirtualAlloc, Ord:025Bh
                                  |
:0046FBB2 FF15C0854B00            Call dword ptr [004B85C0]
:0046FBB8 3BC7                    cmp eax, edi
:0046FBBA 0F85CB000000            jne 0046FC8B
:0046FBC0 8B542418                mov edx, dword ptr [esp+18]
:0046FBC4 8B442410                mov eax, dword ptr [esp+10]
:0046FBC8 33C9                    xor ecx, ecx
:0046FBCA 85F6                    test esi, esi
:0046FBCC 8BCA                    mov ecx, edx
:0046FBCE 7E32                    jle 0046FC02
:0046FBD0 8D4704                  lea eax, dword ptr [edi+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FBFC(C)
|
:0046FBD3 8D5004                  lea edx, dword ptr [eax+04]
:0046FBD6 C700F0000000            mov dword ptr [eax], 000000F0
:0046FBDC 8950FC                  mov dword ptr [eax-04], edx
:0046FBDF C680F4000000FF          mov byte ptr [eax+000000F4], FF
:0046FBE6 C701F0000000            mov dword ptr [ecx], 000000F0
:0046FBEC C74104F1000000          mov [ecx+04], 000000F1
:0046FBF3 0500100000              add eax, 00001000
:0046FBF8 83C108                  add ecx, 00000008
:0046FBFB 4E                      dec esi
:0046FBFC 75D5                    jne 0046FBD3
:0046FBFE 8B542418                mov edx, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FBCE(C)
|
:0046FC02 8D8518200000            lea eax, dword ptr [ebp+00002018]
:0046FC08 892D600A4800            mov dword ptr [00480A60], ebp
:0046FC0E 3BC8                    cmp ecx, eax
:0046FC10 730E                    jnb 0046FC20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FC1C(C)
|
:0046FC12 8339FF                  cmp dword ptr [ecx], FFFFFFFF
:0046FC15 7407                    je 0046FC1E
:0046FC17 83C108                  add ecx, 00000008
:0046FC1A 3BC8                    cmp ecx, eax
:0046FC1C 72F4                    jb 0046FC12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FC15(C)
|
:0046FC1E 3BC8                    cmp ecx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FC10(C)
|
:0046FC20 1BC0                    sbb eax, eax
:0046FC22 23C1                    and eax, ecx
:0046FC24 89450C                  mov dword ptr [ebp+0C], eax
:0046FC27 885F08                  mov byte ptr [edi+08], bl
:0046FC2A 895508                  mov dword ptr [ebp+08], edx
:0046FC2D 8B0A                    mov ecx, dword ptr [edx]
:0046FC2F 2BCB                    sub ecx, ebx
:0046FC31 890A                    mov dword ptr [edx], ecx
:0046FC33 8B4704                  mov eax, dword ptr [edi+04]
:0046FC36 2BC3                    sub eax, ebx
:0046FC38 8D4C1F08                lea ecx, dword ptr [edi+ebx+08]
:0046FC3C 894704                  mov dword ptr [edi+04], eax
:0046FC3F 890F                    mov dword ptr [edi], ecx
:0046FC41 8D8700010000            lea eax, dword ptr [edi+00000100]
:0046FC47 5F                      pop edi
:0046FC48 5E                      pop esi
:0046FC49 5D                      pop ebp
:0046FC4A 5B                      pop ebx
:0046FC4B 59                      pop ecx
:0046FC4C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB67(C)
|
:0046FC4D E8AEFAFFFF              call 0046F700
:0046FC52 85C0                    test eax, eax
:0046FC54 7435                    je 0046FC8B
:0046FC56 8B4810                  mov ecx, dword ptr [eax+10]
:0046FC59 885908                  mov byte ptr [ecx+08], bl
:0046FC5C 8D541908                lea edx, dword ptr [ecx+ebx+08]
:0046FC60 A3600A4800              mov dword ptr [00480A60], eax
:0046FC65 8911                    mov dword ptr [ecx], edx
:0046FC67 BAF0000000              mov edx, 000000F0
:0046FC6C 2BD3                    sub edx, ebx
:0046FC6E 81E3FF000000            and ebx, 000000FF
:0046FC74 895104                  mov dword ptr [ecx+04], edx
:0046FC77 8B5018                  mov edx, dword ptr [eax+18]
:0046FC7A 2BD3                    sub edx, ebx
:0046FC7C 895018                  mov dword ptr [eax+18], edx
:0046FC7F 8D8100010000            lea eax, dword ptr [ecx+00000100]
:0046FC85 5F                      pop edi
:0046FC86 5E                      pop esi
:0046FC87 5D                      pop ebp
:0046FC88 5B                      pop ebx
:0046FC89 59                      pop ecx
:0046FC8A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FBBA(C), :0046FC54(C)
|
:0046FC8B 5F                      pop edi
:0046FC8C 5E                      pop esi
:0046FC8D 5D                      pop ebp
:0046FC8E 33C0                    xor eax, eax
:0046FC90 5B                      pop ebx
:0046FC91 59                      pop ecx
:0046FC92 C3                      ret


:0046FC93 90                      nop
:0046FC94 90                      nop
:0046FC95 90                      nop
:0046FC96 90                      nop
:0046FC97 90                      nop
:0046FC98 90                      nop
:0046FC99 90                      nop
:0046FC9A 90                      nop
:0046FC9B 90                      nop
:0046FC9C 90                      nop
:0046FC9D 90                      nop
:0046FC9E 90                      nop
:0046FC9F 90                      nop

* Referenced by a CALL at Addresses:
|:0046FAA9   , :0046FAE4   
|
:0046FCA0 8B54240C                mov edx, dword ptr [esp+0C]
:0046FCA4 53                      push ebx
:0046FCA5 55                      push ebp
:0046FCA6 56                      push esi
:0046FCA7 57                      push edi
:0046FCA8 8B7C2414                mov edi, dword ptr [esp+14]
:0046FCAC 8B4704                  mov eax, dword ptr [edi+04]
:0046FCAF 8B0F                    mov ecx, dword ptr [edi]
:0046FCB1 3BC2                    cmp eax, edx
:0046FCB3 894C2414                mov dword ptr [esp+14], ecx
:0046FCB7 8BF1                    mov esi, ecx
:0046FCB9 8D9FF8000000            lea ebx, dword ptr [edi+000000F8]
:0046FCBF 723A                    jb 0046FCFB
:0046FCC1 8D0411                  lea eax, dword ptr [ecx+edx]
:0046FCC4 8811                    mov byte ptr [ecx], dl
:0046FCC6 3BC3                    cmp eax, ebx
:0046FCC8 7310                    jnb 0046FCDA
:0046FCCA 8B37                    mov esi, dword ptr [edi]
:0046FCCC 8B4704                  mov eax, dword ptr [edi+04]
:0046FCCF 03F2                    add esi, edx
:0046FCD1 2BC2                    sub eax, edx
:0046FCD3 8937                    mov dword ptr [edi], esi
:0046FCD5 894704                  mov dword ptr [edi+04], eax
:0046FCD8 EB0C                    jmp 0046FCE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FCC8(C)
|
:0046FCDA 8D5708                  lea edx, dword ptr [edi+08]
:0046FCDD C7470400000000          mov [edi+04], 00000000
:0046FCE4 8917                    mov dword ptr [edi], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FCD8(U)
|
:0046FCE6 8D047F                  lea eax, dword ptr [edi+2*edi]
:0046FCE9 8D0480                  lea eax, dword ptr [eax+4*eax]
:0046FCEC 8BD0                    mov edx, eax
:0046FCEE 8D4108                  lea eax, dword ptr [ecx+08]
:0046FCF1 C1E004                  shl eax, 04
:0046FCF4 2BC2                    sub eax, edx
:0046FCF6 5F                      pop edi
:0046FCF7 5E                      pop esi
:0046FCF8 5D                      pop ebp
:0046FCF9 5B                      pop ebx
:0046FCFA C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FCBF(C)
|
:0046FCFB 03C1                    add eax, ecx
:0046FCFD 803800                  cmp byte ptr [eax], 00
:0046FD00 7402                    je 0046FD04
:0046FD02 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD00(C)
|
:0046FD04 8D0416                  lea eax, dword ptr [esi+edx]
:0046FD07 3BC3                    cmp eax, ebx
:0046FD09 8B5C2418                mov ebx, dword ptr [esp+18]
:0046FD0D 7375                    jnb 0046FD84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD63(C)
|
:0046FD0F 8A06                    mov al, byte ptr [esi]
:0046FD11 84C0                    test al, al
:0046FD13 753C                    jne 0046FD51
:0046FD15 807E0100                cmp byte ptr [esi+01], 00
:0046FD19 8D4601                  lea eax, dword ptr [esi+01]
:0046FD1C B901000000              mov ecx, 00000001
:0046FD21 7507                    jne 0046FD2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD28(C)
|
:0046FD23 40                      inc eax
:0046FD24 41                      inc ecx
:0046FD25 803800                  cmp byte ptr [eax], 00
:0046FD28 74F9                    je 0046FD23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD21(C)
|
:0046FD2A 3BCA                    cmp ecx, edx
:0046FD2C 7339                    jnb 0046FD67
:0046FD2E 8B6C2414                mov ebp, dword ptr [esp+14]
:0046FD32 3BF5                    cmp esi, ebp
:0046FD34 7509                    jne 0046FD3F
:0046FD36 894F04                  mov dword ptr [edi+04], ecx
:0046FD39 8BF0                    mov esi, eax
:0046FD3B 8BCD                    mov ecx, ebp
:0046FD3D EB19                    jmp 0046FD58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD34(C)
|
:0046FD3F 2BD9                    sub ebx, ecx
:0046FD41 3BDA                    cmp ebx, edx
:0046FD43 0F82C2000000            jb 0046FE0B
:0046FD49 8B4C2414                mov ecx, dword ptr [esp+14]
:0046FD4D 8BF0                    mov esi, eax
:0046FD4F EB07                    jmp 0046FD58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD13(C)
|
:0046FD51 25FF000000              and eax, 000000FF
:0046FD56 03F0                    add esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FD3D(U), :0046FD4F(U)
|
:0046FD58 8D2C16                  lea ebp, dword ptr [esi+edx]
:0046FD5B 8D87F8000000            lea eax, dword ptr [edi+000000F8]
:0046FD61 3BE8                    cmp ebp, eax
:0046FD63 72AA                    jb 0046FD0F
:0046FD65 EB1D                    jmp 0046FD84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD2C(C)
|
:0046FD67 8D0416                  lea eax, dword ptr [esi+edx]
:0046FD6A 8D9FF8000000            lea ebx, dword ptr [edi+000000F8]
:0046FD70 3BC3                    cmp eax, ebx
:0046FD72 7309                    jnb 0046FD7D
:0046FD74 2BCA                    sub ecx, edx
:0046FD76 8907                    mov dword ptr [edi], eax
:0046FD78 894F04                  mov dword ptr [edi+04], ecx
:0046FD7B EB79                    jmp 0046FDF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD72(C)
|
:0046FD7D 8D4F08                  lea ecx, dword ptr [edi+08]
:0046FD80 890F                    mov dword ptr [edi], ecx
:0046FD82 EB6B                    jmp 0046FDEF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FD0D(C), :0046FD65(U)
|
:0046FD84 8D6F08                  lea ebp, dword ptr [edi+08]
:0046FD87 8BF5                    mov esi, ebp
:0046FD89 3BF1                    cmp esi, ecx
:0046FD8B 737E                    jnb 0046FE0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FDCE(C)
|
:0046FD8D 8D0C16                  lea ecx, dword ptr [esi+edx]
:0046FD90 8D87F8000000            lea eax, dword ptr [edi+000000F8]
:0046FD96 3BC8                    cmp ecx, eax
:0046FD98 7371                    jnb 0046FE0B
:0046FD9A 8A06                    mov al, byte ptr [esi]
:0046FD9C 84C0                    test al, al
:0046FD9E 7523                    jne 0046FDC3
:0046FDA0 807E0100                cmp byte ptr [esi+01], 00
:0046FDA4 8D4601                  lea eax, dword ptr [esi+01]
:0046FDA7 B901000000              mov ecx, 00000001
:0046FDAC 7507                    jne 0046FDB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FDB3(C)
|
:0046FDAE 40                      inc eax
:0046FDAF 41                      inc ecx
:0046FDB0 803800                  cmp byte ptr [eax], 00
:0046FDB3 74F9                    je 0046FDAE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FDAC(C)
|
:0046FDB5 3BCA                    cmp ecx, edx
:0046FDB7 731E                    jnb 0046FDD7
:0046FDB9 2BD9                    sub ebx, ecx
:0046FDBB 3BDA                    cmp ebx, edx
:0046FDBD 724C                    jb 0046FE0B
:0046FDBF 8BF0                    mov esi, eax
:0046FDC1 EB07                    jmp 0046FDCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD9E(C)
|
:0046FDC3 25FF000000              and eax, 000000FF
:0046FDC8 03F0                    add esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FDC1(U)
|
:0046FDCA 3B742414                cmp esi, dword ptr [esp+14]
:0046FDCE 72BD                    jb 0046FD8D
:0046FDD0 33C0                    xor eax, eax
:0046FDD2 5F                      pop edi
:0046FDD3 5E                      pop esi
:0046FDD4 5D                      pop ebp
:0046FDD5 5B                      pop ebx
:0046FDD6 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FDB7(C)
|
:0046FDD7 8D0416                  lea eax, dword ptr [esi+edx]
:0046FDDA 8D9FF8000000            lea ebx, dword ptr [edi+000000F8]
:0046FDE0 3BC3                    cmp eax, ebx
:0046FDE2 7309                    jnb 0046FDED
:0046FDE4 2BCA                    sub ecx, edx
:0046FDE6 8907                    mov dword ptr [edi], eax
:0046FDE8 894F04                  mov dword ptr [edi+04], ecx
:0046FDEB EB09                    jmp 0046FDF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FDE2(C)
|
:0046FDED 892F                    mov dword ptr [edi], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD82(U)
|
:0046FDEF C7470400000000          mov [edi+04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FD7B(U), :0046FDEB(U)
|
:0046FDF6 8D047F                  lea eax, dword ptr [edi+2*edi]
:0046FDF9 8816                    mov byte ptr [esi], dl
:0046FDFB 8D1480                  lea edx, dword ptr [eax+4*eax]
:0046FDFE 8D4608                  lea eax, dword ptr [esi+08]
:0046FE01 C1E004                  shl eax, 04
:0046FE04 2BC2                    sub eax, edx
:0046FE06 5F                      pop edi
:0046FE07 5E                      pop esi
:0046FE08 5D                      pop ebp
:0046FE09 5B                      pop ebx
:0046FE0A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FD43(C), :0046FD8B(C), :0046FD98(C), :0046FDBD(C)
|
:0046FE0B 5F                      pop edi
:0046FE0C 5E                      pop esi
:0046FE0D 5D                      pop ebp
:0046FE0E 33C0                    xor eax, eax
:0046FE10 5B                      pop ebx
:0046FE11 C3                      ret


:0046FE12 90                      nop
:0046FE13 90                      nop
:0046FE14 90                      nop
:0046FE15 90                      nop
:0046FE16 90                      nop
:0046FE17 90                      nop
:0046FE18 90                      nop
:0046FE19 90                      nop
:0046FE1A 90                      nop
:0046FE1B 90                      nop
:0046FE1C 90                      nop
:0046FE1D 90                      nop
:0046FE1E 90                      nop
:0046FE1F 90                      nop

* Referenced by a CALL at Address:
|:0046E8D0   
|
:0046FE20 8B4C2404                mov ecx, dword ptr [esp+04]
:0046FE24 53                      push ebx
:0046FE25 55                      push ebp
:0046FE26 8B6C2410                mov ebp, dword ptr [esp+10]
:0046FE2A 56                      push esi
:0046FE2B 57                      push edi
:0046FE2C 8B7910                  mov edi, dword ptr [ecx+10]
:0046FE2F 8BD5                    mov edx, ebp
:0046FE31 2BD7                    sub edx, edi
:0046FE33 8B7C241C                mov edi, dword ptr [esp+1C]
:0046FE37 C1FA0C                  sar edx, 0C
:0046FE3A 8B5C2420                mov ebx, dword ptr [esp+20]
:0046FE3E 33C0                    xor eax, eax
:0046FE40 8D4CD118                lea ecx, dword ptr [ecx+8*edx+18]
:0046FE44 33D2                    xor edx, edx
:0046FE46 8A17                    mov dl, byte ptr [edi]
:0046FE48 894C2418                mov dword ptr [esp+18], ecx
:0046FE4C 8BF2                    mov esi, edx
:0046FE4E 3BF3                    cmp esi, ebx
:0046FE50 761B                    jbe 0046FE6D
:0046FE52 881F                    mov byte ptr [edi], bl
:0046FE54 8B01                    mov eax, dword ptr [ecx]
:0046FE56 2BF3                    sub esi, ebx
:0046FE58 C74104F1000000          mov [ecx+04], 000000F1
:0046FE5F 03C6                    add eax, esi
:0046FE61 8901                    mov dword ptr [ecx], eax
:0046FE63 B801000000              mov eax, 00000001
:0046FE68 5F                      pop edi
:0046FE69 5E                      pop esi
:0046FE6A 5D                      pop ebp
:0046FE6B 5B                      pop ebx
:0046FE6C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FE50(C)
|
:0046FE6D 7370                    jnb 0046FEDF
:0046FE6F 8D0C3B                  lea ecx, dword ptr [ebx+edi]
:0046FE72 8D95F8000000            lea edx, dword ptr [ebp+000000F8]
:0046FE78 3BCA                    cmp ecx, edx
:0046FE7A 7763                    ja 0046FEDF
:0046FE7C 8D143E                  lea edx, dword ptr [esi+edi]
:0046FE7F 3BD1                    cmp edx, ecx
:0046FE81 730C                    jnb 0046FE8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FE8B(C)
|
:0046FE83 803A00                  cmp byte ptr [edx], 00
:0046FE86 7505                    jne 0046FE8D
:0046FE88 42                      inc edx
:0046FE89 3BD1                    cmp edx, ecx
:0046FE8B 72F6                    jb 0046FE83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FE86(C)
|
:0046FE8D 3BD1                    cmp edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FE81(C)
|
:0046FE8F 754E                    jne 0046FEDF
:0046FE91 881F                    mov byte ptr [edi], bl
:0046FE93 8B4500                  mov eax, dword ptr [ebp+00]
:0046FE96 3BF8                    cmp edi, eax
:0046FE98 7734                    ja 0046FECE
:0046FE9A 3BC8                    cmp ecx, eax
:0046FE9C 7630                    jbe 0046FECE
:0046FE9E 8D85F8000000            lea eax, dword ptr [ebp+000000F8]
:0046FEA4 3BC8                    cmp ecx, eax
:0046FEA6 7319                    jnb 0046FEC1
:0046FEA8 894D00                  mov dword ptr [ebp+00], ecx
:0046FEAB 8A11                    mov dl, byte ptr [ecx]
:0046FEAD 33C0                    xor eax, eax
:0046FEAF 84D2                    test dl, dl
:0046FEB1 7509                    jne 0046FEBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FEBA(C)
|
:0046FEB3 8A540801                mov dl, byte ptr [eax+ecx+01]
:0046FEB7 40                      inc eax
:0046FEB8 84D2                    test dl, dl
:0046FEBA 74F7                    je 0046FEB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FEB1(C)
|
:0046FEBC 894504                  mov dword ptr [ebp+04], eax
:0046FEBF EB0D                    jmp 0046FECE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FEA6(C)
|
:0046FEC1 8D4508                  lea eax, dword ptr [ebp+08]
:0046FEC4 C7450400000000          mov [ebp+04], 00000000
:0046FECB 894500                  mov dword ptr [ebp+00], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FE98(C), :0046FE9C(C), :0046FEBF(U)
|
:0046FECE 8B442418                mov eax, dword ptr [esp+18]
:0046FED2 2BF3                    sub esi, ebx
:0046FED4 8B08                    mov ecx, dword ptr [eax]
:0046FED6 03CE                    add ecx, esi
:0046FED8 8908                    mov dword ptr [eax], ecx
:0046FEDA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FE6D(C), :0046FE7A(C), :0046FE8F(C)
|
:0046FEDF 5F                      pop edi
:0046FEE0 5E                      pop esi
:0046FEE1 5D                      pop ebp
:0046FEE2 5B                      pop ebx
:0046FEE3 C3                      ret


:0046FEE4 90                      nop
:0046FEE5 90                      nop
:0046FEE6 90                      nop
:0046FEE7 90                      nop
:0046FEE8 90                      nop
:0046FEE9 90                      nop
:0046FEEA 90                      nop
:0046FEEB 90                      nop
:0046FEEC 90                      nop
:0046FEED 90                      nop
:0046FEEE 90                      nop
:0046FEEF 90                      nop

* Referenced by a CALL at Addresses:
|:0046DFE3   , :0046E9A8   , :00473390   
|
:0046FEF0 A1B86F4B00              mov eax, dword ptr [004B6FB8]
:0046FEF5 85C0                    test eax, eax
:0046FEF7 7414                    je 0046FF0D
:0046FEF9 8B4C2404                mov ecx, dword ptr [esp+04]
:0046FEFD 51                      push ecx
:0046FEFE FFD0                    call eax
:0046FF00 83C404                  add esp, 00000004
:0046FF03 85C0                    test eax, eax
:0046FF05 7406                    je 0046FF0D
:0046FF07 B801000000              mov eax, 00000001
:0046FF0C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FEF7(C), :0046FF05(C)
|
:0046FF0D 33C0                    xor eax, eax
:0046FF0F C3                      ret



* Referenced by a CALL at Address:
|:0046E0CF   
|
:0046FF10 6800000300              push 00030000
:0046FF15 6800000100              push 00010000
:0046FF1A E8F1150000              call 00471510
:0046FF1F 83C408                  add esp, 00000008
:0046FF22 C3                      ret


:0046FF23 90                      nop
:0046FF24 90                      nop
:0046FF25 90                      nop
:0046FF26 90                      nop
:0046FF27 90                      nop
:0046FF28 90                      nop
:0046FF29 90                      nop
:0046FF2A 90                      nop
:0046FF2B 90                      nop
:0046FF2C 90                      nop
:0046FF2D 90                      nop
:0046FF2E 90                      nop
:0046FF2F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FFA4(U)
|
:0046FF30 55                      push ebp
:0046FF31 8BEC                    mov ebp, esp
:0046FF33 83EC18                  sub esp, 00000018
:0046FF36 C745F800000080          mov [ebp-08], 80000000
:0046FF3D C745FCFFFF4741          mov [ebp-04], 4147FFFF
:0046FF44 C745F0000000C0          mov [ebp-10], C0000000
:0046FF4B C745F47E015041          mov [ebp-0C], 4150017E
:0046FF52 DD45F0                  fld qword ptr [ebp-10]
:0046FF55 DC75F8                  fdiv qword ptr [ebp-08]
:0046FF58 DC4DF8                  fmul qword ptr [ebp-08]
:0046FF5B DC6DF0                  fsubr qword ptr [ebp-10]
:0046FF5E DD5DE8                  fstp qword ptr [ebp-18]
:0046FF61 DD45E8                  fld qword ptr [ebp-18]
:0046FF64 DC1D504E4700            fcomp qword ptr [00474E50]
:0046FF6A DFE0                    fstsw ax
:0046FF6C F6C441                  test ah, 41
:0046FF6F 7509                    jne 0046FF7A
:0046FF71 B801000000              mov eax, 00000001
:0046FF76 8BE5                    mov esp, ebp
:0046FF78 5D                      pop ebp
:0046FF79 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FF6F(C)
|
:0046FF7A 33C0                    xor eax, eax
:0046FF7C 8BE5                    mov esp, ebp
:0046FF7E 5D                      pop ebp
:0046FF7F C3                      ret



* Referenced by a CALL at Address:
|:0046E0C5   
|
:0046FF80 68744E4700              push 00474E74

* Reference To: KERNEL32.GetModuleHandleA, Ord:00FEh
                                  |
:0046FF85 FF15EC854B00            Call dword ptr [004B85EC]
:0046FF8B 85C0                    test eax, eax
:0046FF8D 7415                    je 0046FFA4
:0046FF8F 68584E4700              push 00474E58
:0046FF94 50                      push eax

* Reference To: KERNEL32.GetProcAddress, Ord:0116h
                                  |
:0046FF95 FF15BC854B00            Call dword ptr [004B85BC]
:0046FF9B 85C0                    test eax, eax
:0046FF9D 7405                    je 0046FFA4
:0046FF9F 6A00                    push 00000000
:0046FFA1 FFD0                    call eax
:0046FFA3 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FF8D(C), :0046FF9D(C)
|
:0046FFA4 E987FFFFFF              jmp 0046FF30
:0046FFA9 90                      nop
:0046FFAA 90                      nop
:0046FFAB 90                      nop
:0046FFAC 90                      nop
:0046FFAD 90                      nop
:0046FFAE 90                      nop
:0046FFAF 90                      nop
:0046FFB0 56                      push esi
:0046FFB1 8B742408                mov esi, dword ptr [esp+08]
:0046FFB5 0FBE06                  movsx eax, byte ptr [esi]
:0046FFB8 50                      push eax
:0046FFB9 E842170000              call 00471700
:0046FFBE 83C404                  add esp, 00000004
:0046FFC1 83F865                  cmp eax, 00000065
:0046FFC4 742D                    je 0046FFF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FFF1(C)
|
:0046FFC6 A1980C4800              mov eax, dword ptr [00480C98]
:0046FFCB 46                      inc esi
:0046FFCC 83F801                  cmp eax, 00000001
:0046FFCF 7E10                    jle 0046FFE1
:0046FFD1 0FBE0E                  movsx ecx, byte ptr [esi]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046FFD4 6A04                    push 00000004
:0046FFD6 51                      push ecx
:0046FFD7 E884160000              call 00471660
:0046FFDC 83C408                  add esp, 00000008
:0046FFDF EB0E                    jmp 0046FFEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FFCF(C)
|
:0046FFE1 0FBE16                  movsx edx, byte ptr [esi]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:0046FFE4 A1A80C4800              mov eax, dword ptr [00480CA8]
:0046FFE9 8A0450                  mov al, byte ptr [eax+2*edx]
:0046FFEC 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FFDF(U)
|
:0046FFEF 85C0                    test eax, eax
:0046FFF1 75D3                    jne 0046FFC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FFC4(C)
|
:0046FFF3 8A0D9C0C4800            mov cl, byte ptr [00480C9C]
:0046FFF9 8A06                    mov al, byte ptr [esi]
:0046FFFB 880E                    mov byte ptr [esi], cl
:0046FFFD 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470009(C)
|
:0046FFFE 8A0E                    mov cl, byte ptr [esi]
:00470000 8806                    mov byte ptr [esi], al
:00470002 8A16                    mov dl, byte ptr [esi]
:00470004 46                      inc esi
:00470005 84D2                    test dl, dl
:00470007 8AC1                    mov al, cl
:00470009 75F3                    jne 0046FFFE
:0047000B 5E                      pop esi
:0047000C C3                      ret


:0047000D 90                      nop
:0047000E 90                      nop
:0047000F 90                      nop
:00470010 8B442404                mov eax, dword ptr [esp+04]
:00470014 53                      push ebx
:00470015 8A1D9C0C4800            mov bl, byte ptr [00480C9C]
:0047001B 8A08                    mov cl, byte ptr [eax]
:0047001D 84C9                    test cl, cl
:0047001F 740C                    je 0047002D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047002B(C)
|
:00470021 3ACB                    cmp cl, bl
:00470023 7408                    je 0047002D
:00470025 8A4801                  mov cl, byte ptr [eax+01]
:00470028 40                      inc eax
:00470029 84C9                    test cl, cl
:0047002B 75F4                    jne 00470021

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047001F(C), :00470023(C)
|
:0047002D 8A08                    mov cl, byte ptr [eax]
:0047002F 40                      inc eax
:00470030 84C9                    test cl, cl
:00470032 7445                    je 00470079
:00470034 8A08                    mov cl, byte ptr [eax]
:00470036 84C9                    test cl, cl
:00470038 7412                    je 0047004C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047004A(C)
|
:0047003A 80F965                  cmp cl, 65
:0047003D 740D                    je 0047004C
:0047003F 80F945                  cmp cl, 45
:00470042 7408                    je 0047004C
:00470044 8A4801                  mov cl, byte ptr [eax+01]
:00470047 40                      inc eax
:00470048 84C9                    test cl, cl
:0047004A 75EE                    jne 0047003A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470038(C), :0047003D(C), :00470042(C)
|
:0047004C 8A48FF                  mov cl, byte ptr [eax-01]
:0047004F 8BD0                    mov edx, eax
:00470051 48                      dec eax
:00470052 80F930                  cmp cl, 30
:00470055 7509                    jne 00470060

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047005E(C)
|
:00470057 8A48FF                  mov cl, byte ptr [eax-01]
:0047005A 48                      dec eax
:0047005B 80F930                  cmp cl, 30
:0047005E 74F7                    je 00470057

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470055(C)
|
:00470060 3818                    cmp byte ptr [eax], bl
:00470062 7501                    jne 00470065
:00470064 48                      dec eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470062(C)
|
:00470065 8A0A                    mov cl, byte ptr [edx]
:00470067 40                      inc eax
:00470068 42                      inc edx
:00470069 84C9                    test cl, cl
:0047006B 8808                    mov byte ptr [eax], cl
:0047006D 740A                    je 00470079

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470077(C)
|
:0047006F 8A0A                    mov cl, byte ptr [edx]
:00470071 40                      inc eax
:00470072 42                      inc edx
:00470073 84C9                    test cl, cl
:00470075 8808                    mov byte ptr [eax], cl
:00470077 75F6                    jne 0047006F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470032(C), :0047006D(C)
|
:00470079 5B                      pop ebx
:0047007A C3                      ret


:0047007B 90                      nop
:0047007C 90                      nop
:0047007D 90                      nop
:0047007E 90                      nop
:0047007F 90                      nop
:00470080 8B442404                mov eax, dword ptr [esp+04]
:00470084 DD00                    fld qword ptr [eax]
:00470086 DC1D804E4700            fcomp qword ptr [00474E80]
:0047008C DFE0                    fstsw ax
:0047008E F6C401                  test ah, 01
:00470091 7506                    jne 00470099
:00470093 B801000000              mov eax, 00000001
:00470098 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470091(C)
|
:00470099 33C0                    xor eax, eax
:0047009B C3                      ret


:0047009C 90                      nop
:0047009D 90                      nop
:0047009E 90                      nop
:0047009F 90                      nop
:004700A0 8B442404                mov eax, dword ptr [esp+04]
:004700A4 83EC08                  sub esp, 00000008
:004700A7 85C0                    test eax, eax
:004700A9 7427                    je 004700D2
:004700AB 8B442414                mov eax, dword ptr [esp+14]
:004700AF 8D4C2400                lea ecx, dword ptr [esp]
:004700B3 50                      push eax
:004700B4 51                      push ecx
:004700B5 E8E61B0000              call 00471CA0
:004700BA 8B442418                mov eax, dword ptr [esp+18]
:004700BE 8B542408                mov edx, dword ptr [esp+08]
:004700C2 8B4C240C                mov ecx, dword ptr [esp+0C]
:004700C6 83C408                  add esp, 00000008
:004700C9 8910                    mov dword ptr [eax], edx
:004700CB 894804                  mov dword ptr [eax+04], ecx
:004700CE 83C408                  add esp, 00000008
:004700D1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004700A9(C)
|
:004700D2 8B542414                mov edx, dword ptr [esp+14]
:004700D6 8D442414                lea eax, dword ptr [esp+14]
:004700DA 52                      push edx
:004700DB 50                      push eax
:004700DC E8FF1B0000              call 00471CE0
:004700E1 8B4C2418                mov ecx, dword ptr [esp+18]
:004700E5 8B54241C                mov edx, dword ptr [esp+1C]
:004700E9 83C408                  add esp, 00000008
:004700EC 8911                    mov dword ptr [ecx], edx
:004700EE 83C408                  add esp, 00000008
:004700F1 C3                      ret


:004700F2 90                      nop
:004700F3 90                      nop
:004700F4 90                      nop
:004700F5 90                      nop
:004700F6 90                      nop
:004700F7 90                      nop
:004700F8 90                      nop
:004700F9 90                      nop
:004700FA 90                      nop
:004700FB 90                      nop
:004700FC 90                      nop
:004700FD 90                      nop
:004700FE 90                      nop
:004700FF 90                      nop

* Referenced by a CALL at Addresses:
|:0047040B   , :004704AC   
|
:00470100 A0C06F4B00              mov al, byte ptr [004B6FC0]
:00470105 53                      push ebx
:00470106 56                      push esi
:00470107 57                      push edi
:00470108 84C0                    test al, al
:0047010A 742D                    je 00470139
:0047010C 8B742418                mov esi, dword ptr [esp+18]
:00470110 8B3DBC6F4B00            mov edi, dword ptr [004B6FBC]
:00470116 8B5C2414                mov ebx, dword ptr [esp+14]
:0047011A 33C0                    xor eax, eax
:0047011C 8B17                    mov edx, dword ptr [edi]
:0047011E 85F6                    test esi, esi
:00470120 0F9FC0                  setg al
:00470123 33C9                    xor ecx, ecx
:00470125 83FA2D                  cmp edx, 0000002D
:00470128 0F94C1                  sete cl
:0047012B 03CB                    add ecx, ebx
:0047012D 50                      push eax
:0047012E 51                      push ecx
:0047012F E88C030000              call 004704C0
:00470134 83C408                  add esp, 00000008
:00470137 EB42                    jmp 0047017B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047010A(C)
|
:00470139 8B442410                mov eax, dword ptr [esp+10]
:0047013D 8B5004                  mov edx, dword ptr [eax+04]
:00470140 8B00                    mov eax, dword ptr [eax]
:00470142 52                      push edx
:00470143 50                      push eax
:00470144 E8771C0000              call 00471DC0
:00470149 8B742420                mov esi, dword ptr [esp+20]
:0047014D 8B5C241C                mov ebx, dword ptr [esp+1C]
:00470151 83C408                  add esp, 00000008
:00470154 8BF8                    mov edi, eax
:00470156 8D4E01                  lea ecx, dword ptr [esi+01]
:00470159 33D2                    xor edx, edx
:0047015B 57                      push edi
:0047015C 51                      push ecx
:0047015D 8B0F                    mov ecx, dword ptr [edi]
:0047015F 85F6                    test esi, esi
:00470161 0F9FC2                  setg dl
:00470164 33C0                    xor eax, eax
:00470166 83F92D                  cmp ecx, 0000002D
:00470169 8BCB                    mov ecx, ebx
:0047016B 0F94C0                  sete al
:0047016E 03CA                    add ecx, edx
:00470170 03C1                    add eax, ecx
:00470172 50                      push eax
:00470173 E8A81B0000              call 00471D20
:00470178 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470137(U)
|
:0047017B 8B0F                    mov ecx, dword ptr [edi]
:0047017D 8BC3                    mov eax, ebx
:0047017F 83F92D                  cmp ecx, 0000002D
:00470182 7506                    jne 0047018A
:00470184 C6032D                  mov byte ptr [ebx], 2D
:00470187 8D4301                  lea eax, dword ptr [ebx+01]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470182(C)
|
:0047018A 85F6                    test esi, esi
:0047018C 7E0E                    jle 0047019C
:0047018E 8A5001                  mov dl, byte ptr [eax+01]
:00470191 8810                    mov byte ptr [eax], dl
:00470193 8A0D9C0C4800            mov cl, byte ptr [00480C9C]
:00470199 40                      inc eax
:0047019A 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047018C(C)
|
:0047019C 8A0DC06F4B00            mov cl, byte ptr [004B6FC0]
:004701A2 33D2                    xor edx, edx
:004701A4 84C9                    test cl, cl
:004701A6 8B0D884E4700            mov ecx, dword ptr [00474E88]
:004701AC 0F94C2                  sete dl
:004701AF 03D0                    add edx, eax
:004701B1 03F2                    add esi, edx
:004701B3 8BC6                    mov eax, esi
:004701B5 8908                    mov dword ptr [eax], ecx
:004701B7 668B158C4E4700          mov dx, word ptr [00474E8C]
:004701BE 66895004                mov word ptr [eax+04], dx
:004701C2 8B44241C                mov eax, dword ptr [esp+1C]
:004701C6 85C0                    test eax, eax
:004701C8 7403                    je 004701CD
:004701CA C60645                  mov byte ptr [esi], 45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701C8(C)
|
:004701CD 8B470C                  mov eax, dword ptr [edi+0C]
:004701D0 46                      inc esi
:004701D1 803830                  cmp byte ptr [eax], 30
:004701D4 7460                    je 00470236
:004701D6 8B4F04                  mov ecx, dword ptr [edi+04]
:004701D9 49                      dec ecx
:004701DA 7905                    jns 004701E1
:004701DC F7D9                    neg ecx
:004701DE C6062D                  mov byte ptr [esi], 2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701DA(C)
|
:004701E1 46                      inc esi
:004701E2 83F964                  cmp ecx, 00000064
:004701E5 7C23                    jl 0047020A
:004701E7 B81F85EB51              mov eax, 51EB851F
:004701EC F7E9                    imul ecx
:004701EE C1FA05                  sar edx, 05
:004701F1 8BC2                    mov eax, edx
:004701F3 C1E81F                  shr eax, 1F
:004701F6 03D0                    add edx, eax
:004701F8 8A06                    mov al, byte ptr [esi]
:004701FA 02C2                    add al, dl
:004701FC 8806                    mov byte ptr [esi], al
:004701FE 8BC1                    mov eax, ecx
:00470200 99                      cdq
:00470201 B964000000              mov ecx, 00000064
:00470206 F7F9                    idiv ecx
:00470208 8BCA                    mov ecx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701E5(C)
|
:0047020A 46                      inc esi
:0047020B 83F90A                  cmp ecx, 0000000A
:0047020E 7C23                    jl 00470233
:00470210 B867666666              mov eax, 66666667
:00470215 F7E9                    imul ecx
:00470217 C1FA02                  sar edx, 02
:0047021A 8BC2                    mov eax, edx
:0047021C C1E81F                  shr eax, 1F
:0047021F 03D0                    add edx, eax
:00470221 8A06                    mov al, byte ptr [esi]
:00470223 02C2                    add al, dl
:00470225 8806                    mov byte ptr [esi], al
:00470227 8BC1                    mov eax, ecx
:00470229 99                      cdq

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0047022A B90A000000              mov ecx, 0000000A
:0047022F F7F9                    idiv ecx
:00470231 8BCA                    mov ecx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047020E(C)
|
:00470233 004E01                  add byte ptr [esi+01], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701D4(C)
|
:00470236 5F                      pop edi
:00470237 8BC3                    mov eax, ebx
:00470239 5E                      pop esi
:0047023A 5B                      pop ebx
:0047023B C3                      ret


:0047023C 90                      nop
:0047023D 90                      nop
:0047023E 90                      nop
:0047023F 90                      nop

* Referenced by a CALL at Addresses:
|:00470436   , :00470472   
|
:00470240 A0C06F4B00              mov al, byte ptr [004B6FC0]
:00470245 53                      push ebx
:00470246 55                      push ebp
:00470247 56                      push esi
:00470248 84C0                    test al, al
:0047024A 57                      push edi
:0047024B 742F                    je 0047027C
:0047024D 8B35BC6F4B00            mov esi, dword ptr [004B6FBC]
:00470253 8B6C2418                mov ebp, dword ptr [esp+18]
:00470257 8B0DC46F4B00            mov ecx, dword ptr [004B6FC4]
:0047025D 33C0                    xor eax, eax
:0047025F 8B1E                    mov ebx, dword ptr [esi]
:00470261 83FB2D                  cmp ebx, 0000002D
:00470264 8B5C241C                mov ebx, dword ptr [esp+1C]
:00470268 0F94C0                  sete al
:0047026B 03C5                    add eax, ebp
:0047026D 3BCB                    cmp ecx, ebx
:0047026F 7544                    jne 004702B5
:00470271 03C1                    add eax, ecx
:00470273 C60030                  mov byte ptr [eax], 30
:00470276 C6400100                mov [eax+01], 00
:0047027A EB39                    jmp 004702B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047024B(C)
|
:0047027C 8B442414                mov eax, dword ptr [esp+14]
:00470280 8B4804                  mov ecx, dword ptr [eax+04]
:00470283 8B10                    mov edx, dword ptr [eax]
:00470285 51                      push ecx
:00470286 52                      push edx
:00470287 E8341B0000              call 00471DC0
:0047028C 8B5C2424                mov ebx, dword ptr [esp+24]
:00470290 8BF0                    mov esi, eax
:00470292 83C408                  add esp, 00000008
:00470295 33C9                    xor ecx, ecx
:00470297 8B4604                  mov eax, dword ptr [esi+04]
:0047029A 8B2E                    mov ebp, dword ptr [esi]
:0047029C 03C3                    add eax, ebx
:0047029E 83FD2D                  cmp ebp, 0000002D
:004702A1 8B6C2418                mov ebp, dword ptr [esp+18]
:004702A5 56                      push esi
:004702A6 0F94C1                  sete cl
:004702A9 03CD                    add ecx, ebp
:004702AB 50                      push eax
:004702AC 51                      push ecx
:004702AD E86E1A0000              call 00471D20
:004702B2 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047026F(C), :0047027A(U)
|
:004702B5 8B06                    mov eax, dword ptr [esi]
:004702B7 8BFD                    mov edi, ebp
:004702B9 83F82D                  cmp eax, 0000002D
:004702BC 7507                    jne 004702C5
:004702BE C645002D                mov [ebp+00], 2D
:004702C2 8D7D01                  lea edi, dword ptr [ebp+01]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004702BC(C)
|
:004702C5 8B4604                  mov eax, dword ptr [esi+04]
:004702C8 85C0                    test eax, eax
:004702CA 7F11                    jg 004702DD
:004702CC 6A01                    push 00000001
:004702CE 57                      push edi
:004702CF E8EC010000              call 004704C0
:004702D4 83C408                  add esp, 00000008
:004702D7 C60730                  mov byte ptr [edi], 30
:004702DA 47                      inc edi
:004702DB EB02                    jmp 004702DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004702CA(C)
|
:004702DD 03F8                    add edi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004702DB(U)
|
:004702DF 85DB                    test ebx, ebx
:004702E1 7E4F                    jle 00470332
:004702E3 6A01                    push 00000001
:004702E5 57                      push edi
:004702E6 E8D5010000              call 004704C0
:004702EB 8A159C0C4800            mov dl, byte ptr [00480C9C]
:004702F1 83C408                  add esp, 00000008
:004702F4 8817                    mov byte ptr [edi], dl
:004702F6 8B7604                  mov esi, dword ptr [esi+04]
:004702F9 47                      inc edi
:004702FA 85F6                    test esi, esi
:004702FC 7D34                    jge 00470332
:004702FE A0C06F4B00              mov al, byte ptr [004B6FC0]
:00470303 84C0                    test al, al
:00470305 7404                    je 0047030B
:00470307 F7DE                    neg esi
:00470309 EB06                    jmp 00470311

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470305(C)
|
:0047030B F7DE                    neg esi
:0047030D 3BDE                    cmp ebx, esi
:0047030F 7C02                    jl 00470313

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470309(U)
|
:00470311 8BDE                    mov ebx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047030F(C)
|
:00470313 53                      push ebx
:00470314 57                      push edi
:00470315 E8A6010000              call 004704C0
:0047031A 8BCB                    mov ecx, ebx
:0047031C B830303030              mov eax, 30303030
:00470321 8BD1                    mov edx, ecx
:00470323 83C408                  add esp, 00000008
:00470326 C1E902                  shr ecx, 02
:00470329 F3                      repz
:0047032A AB                      stosd
:0047032B 8BCA                    mov ecx, edx
:0047032D 83E103                  and ecx, 00000003
:00470330 F3                      repz
:00470331 AA                      stosb

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004702E1(C), :004702FC(C)
|
:00470332 5F                      pop edi
:00470333 8BC5                    mov eax, ebp
:00470335 5E                      pop esi
:00470336 5D                      pop ebp
:00470337 5B                      pop ebx
:00470338 C3                      ret


:00470339 90                      nop
:0047033A 90                      nop
:0047033B 90                      nop
:0047033C 90                      nop
:0047033D 90                      nop
:0047033E 90                      nop
:0047033F 90                      nop

* Referenced by a CALL at Address:
|:0047048F   
|
:00470340 53                      push ebx
:00470341 55                      push ebp
:00470342 56                      push esi
:00470343 57                      push edi
:00470344 8B7C2414                mov edi, dword ptr [esp+14]
:00470348 8B4704                  mov eax, dword ptr [edi+04]
:0047034B 8B0F                    mov ecx, dword ptr [edi]
:0047034D 50                      push eax
:0047034E 51                      push ecx
:0047034F E86C1A0000              call 00471DC0
:00470354 A3BC6F4B00              mov dword ptr [004B6FBC], eax
:00470359 8B5004                  mov edx, dword ptr [eax+04]
:0047035C 83C408                  add esp, 00000008
:0047035F 8B6C2418                mov ebp, dword ptr [esp+18]
:00470363 4A                      dec edx
:00470364 33C9                    xor ecx, ecx
:00470366 8915C46F4B00            mov dword ptr [004B6FC4], edx
:0047036C 8B18                    mov ebx, dword ptr [eax]
:0047036E 83FB2D                  cmp ebx, 0000002D
:00470371 8B5C241C                mov ebx, dword ptr [esp+1C]
:00470375 0F94C1                  sete cl
:00470378 03CD                    add ecx, ebp
:0047037A 50                      push eax
:0047037B 8BF1                    mov esi, ecx
:0047037D 53                      push ebx
:0047037E 56                      push esi
:0047037F E89C190000              call 00471D20
:00470384 A1BC6F4B00              mov eax, dword ptr [004B6FBC]
:00470389 83C40C                  add esp, 0000000C
:0047038C 33C9                    xor ecx, ecx
:0047038E 8B5004                  mov edx, dword ptr [eax+04]
:00470391 4A                      dec edx
:00470392 3915C46F4B00            cmp dword ptr [004B6FC4], edx
:00470398 0F9CC1                  setl cl
:0047039B 880DC86F4B00            mov byte ptr [004B6FC8], cl
:004703A1 8B4004                  mov eax, dword ptr [eax+04]
:004703A4 48                      dec eax
:004703A5 83F8FC                  cmp eax, FFFFFFFC
:004703A8 A3C46F4B00              mov dword ptr [004B6FC4], eax
:004703AD 7C2A                    jl 004703D9
:004703AF 3BC3                    cmp eax, ebx
:004703B1 7D26                    jge 004703D9
:004703B3 84C9                    test cl, cl
:004703B5 7412                    je 004703C9
:004703B7 8A06                    mov al, byte ptr [esi]
:004703B9 46                      inc esi
:004703BA 84C0                    test al, al
:004703BC 7407                    je 004703C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004703C3(C)
|
:004703BE 8A0E                    mov cl, byte ptr [esi]
:004703C0 46                      inc esi
:004703C1 84C9                    test cl, cl
:004703C3 75F9                    jne 004703BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004703BC(C)
|
:004703C5 C646FE00                mov [esi-02], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004703B5(C)
|
:004703C9 53                      push ebx
:004703CA 55                      push ebp
:004703CB 57                      push edi
:004703CC E84F000000              call 00470420
:004703D1 83C40C                  add esp, 0000000C
:004703D4 5F                      pop edi
:004703D5 5E                      pop esi
:004703D6 5D                      pop ebp
:004703D7 5B                      pop ebx
:004703D8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004703AD(C), :004703B1(C)
|
:004703D9 8B542420                mov edx, dword ptr [esp+20]
:004703DD 52                      push edx
:004703DE 53                      push ebx
:004703DF 55                      push ebp
:004703E0 57                      push edi
:004703E1 E80A000000              call 004703F0
:004703E6 83C410                  add esp, 00000010
:004703E9 5F                      pop edi
:004703EA 5E                      pop esi
:004703EB 5D                      pop ebp
:004703EC 5B                      pop ebx
:004703ED C3                      ret


:004703EE 90                      nop
:004703EF 90                      nop

* Referenced by a CALL at Address:
|:004703E1   
|
:004703F0 8B442410                mov eax, dword ptr [esp+10]
:004703F4 8B4C240C                mov ecx, dword ptr [esp+0C]
:004703F8 8B542408                mov edx, dword ptr [esp+08]
:004703FC 50                      push eax
:004703FD 8B442408                mov eax, dword ptr [esp+08]
:00470401 51                      push ecx
:00470402 52                      push edx
:00470403 50                      push eax
:00470404 C605C06F4B0001          mov byte ptr [004B6FC0], 01
:0047040B E8F0FCFFFF              call 00470100
:00470410 83C410                  add esp, 00000010
:00470413 C605C06F4B0000          mov byte ptr [004B6FC0], 00
:0047041A C3                      ret


:0047041B 90                      nop
:0047041C 90                      nop
:0047041D 90                      nop
:0047041E 90                      nop
:0047041F 90                      nop

* Referenced by a CALL at Address:
|:004703CC   
|
:00470420 8B44240C                mov eax, dword ptr [esp+0C]
:00470424 8B4C2408                mov ecx, dword ptr [esp+08]
:00470428 8B542404                mov edx, dword ptr [esp+04]
:0047042C 50                      push eax
:0047042D 51                      push ecx
:0047042E 52                      push edx
:0047042F C605C06F4B0001          mov byte ptr [004B6FC0], 01
:00470436 E805FEFFFF              call 00470240
:0047043B 83C40C                  add esp, 0000000C
:0047043E C605C06F4B0000          mov byte ptr [004B6FC0], 00
:00470445 C3                      ret


:00470446 90                      nop
:00470447 90                      nop
:00470448 90                      nop
:00470449 90                      nop
:0047044A 90                      nop
:0047044B 90                      nop
:0047044C 90                      nop
:0047044D 90                      nop
:0047044E 90                      nop
:0047044F 90                      nop
:00470450 8B44240C                mov eax, dword ptr [esp+0C]
:00470454 83F865                  cmp eax, 00000065
:00470457 743F                    je 00470498
:00470459 83F845                  cmp eax, 00000045
:0047045C 743A                    je 00470498
:0047045E 83F866                  cmp eax, 00000066
:00470461 7518                    jne 0047047B
:00470463 8B442410                mov eax, dword ptr [esp+10]
:00470467 8B4C2408                mov ecx, dword ptr [esp+08]
:0047046B 8B542404                mov edx, dword ptr [esp+04]
:0047046F 50                      push eax
:00470470 51                      push ecx
:00470471 52                      push edx
:00470472 E8C9FDFFFF              call 00470240
:00470477 83C40C                  add esp, 0000000C
:0047047A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470461(C)
|
:0047047B 8B442414                mov eax, dword ptr [esp+14]
:0047047F 8B4C2410                mov ecx, dword ptr [esp+10]
:00470483 8B542408                mov edx, dword ptr [esp+08]
:00470487 50                      push eax
:00470488 8B442408                mov eax, dword ptr [esp+08]
:0047048C 51                      push ecx
:0047048D 52                      push edx
:0047048E 50                      push eax
:0047048F E8ACFEFFFF              call 00470340
:00470494 83C410                  add esp, 00000010
:00470497 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470457(C), :0047045C(C)
|
:00470498 8B4C2414                mov ecx, dword ptr [esp+14]
:0047049C 8B542410                mov edx, dword ptr [esp+10]
:004704A0 8B442408                mov eax, dword ptr [esp+08]
:004704A4 51                      push ecx
:004704A5 8B4C2408                mov ecx, dword ptr [esp+08]
:004704A9 52                      push edx
:004704AA 50                      push eax
:004704AB 51                      push ecx
:004704AC E84FFCFFFF              call 00470100
:004704B1 83C410                  add esp, 00000010
:004704B4 C3                      ret


:004704B5 90                      nop
:004704B6 90                      nop
:004704B7 90                      nop
:004704B8 90                      nop
:004704B9 90                      nop
:004704BA 90                      nop
:004704BB 90                      nop
:004704BC 90                      nop
:004704BD 90                      nop
:004704BE 90                      nop
:004704BF 90                      nop

* Referenced by a CALL at Addresses:
|:0047012F   , :004702CF   , :004702E6   , :00470315   
|
:004704C0 56                      push esi
:004704C1 8B74240C                mov esi, dword ptr [esp+0C]
:004704C5 85F6                    test esi, esi
:004704C7 741E                    je 004704E7
:004704C9 8B542408                mov edx, dword ptr [esp+08]
:004704CD 57                      push edi
:004704CE 8BFA                    mov edi, edx
:004704D0 83C9FF                  or ecx, FFFFFFFF
:004704D3 33C0                    xor eax, eax
:004704D5 03F2                    add esi, edx
:004704D7 F2                      repnz
:004704D8 AE                      scasb
:004704D9 F7D1                    not ecx
:004704DB 51                      push ecx
:004704DC 52                      push edx
:004704DD 56                      push esi
:004704DE E83DDEFFFF              call 0046E320
:004704E3 83C40C                  add esp, 0000000C
:004704E6 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004704C7(C)
|
:004704E7 5E                      pop esi
:004704E8 C3                      ret


:004704E9 90                      nop
:004704EA 90                      nop
:004704EB 90                      nop
:004704EC 90                      nop
:004704ED 90                      nop
:004704EE 90                      nop
:004704EF 90                      nop
:004704F0 56                      push esi
:004704F1 43                      inc ebx
:004704F2 3230                    xor dh, byte ptr [eax]
:004704F4 58                      pop eax
:004704F5 43                      inc ebx
:004704F6 3030                    xor byte ptr [eax], dh
:004704F8 55                      push ebp
:004704F9 8BEC                    mov ebp, esp
:004704FB 83EC08                  sub esp, 00000008
:004704FE 53                      push ebx
:004704FF 56                      push esi
:00470500 57                      push edi
:00470501 55                      push ebp
:00470502 FC                      cld
:00470503 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:00470506 8B4508                  mov eax, dword ptr [ebp+08]

* Possible Reference to String Resource ID=00006: ""
                                  |
:00470509 F7400406000000          test [eax+04], 00000006
:00470510 0F8582000000            jne 00470598
:00470516 8945F8                  mov dword ptr [ebp-08], eax
:00470519 8B4510                  mov eax, dword ptr [ebp+10]
:0047051C 8945FC                  mov dword ptr [ebp-04], eax
:0047051F 8D45F8                  lea eax, dword ptr [ebp-08]
:00470522 8943FC                  mov dword ptr [ebx-04], eax
:00470525 8B730C                  mov esi, dword ptr [ebx+0C]
:00470528 8B7B08                  mov edi, dword ptr [ebx+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470588(U)
|
:0047052B 83FEFF                  cmp esi, FFFFFFFF
:0047052E 7461                    je 00470591
:00470530 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00470533 837C8F0400              cmp dword ptr [edi+4*ecx+04], 00000000
:00470538 7445                    je 0047057F
:0047053A 56                      push esi
:0047053B 55                      push ebp
:0047053C 8D6B10                  lea ebp, dword ptr [ebx+10]
:0047053F FF548F04                call [edi+4*ecx+04]
:00470543 5D                      pop ebp
:00470544 5E                      pop esi
:00470545 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:00470548 0BC0                    or eax, eax
:0047054A 7433                    je 0047057F
:0047054C 783C                    js 0047058A
:0047054E 8B7B08                  mov edi, dword ptr [ebx+08]
:00470551 53                      push ebx
:00470552 E8D9D2FFFF              call 0046D830
:00470557 83C404                  add esp, 00000004
:0047055A 8D6B10                  lea ebp, dword ptr [ebx+10]
:0047055D 56                      push esi
:0047055E 53                      push ebx
:0047055F E80ED3FFFF              call 0046D872
:00470564 83C408                  add esp, 00000008
:00470567 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:0047056A 6A01                    push 00000001
:0047056C 8B448F08                mov eax, dword ptr [edi+4*ecx+08]
:00470570 E891D3FFFF              call 0046D906
:00470575 8B048F                  mov eax, dword ptr [edi+4*ecx]
:00470578 89430C                  mov dword ptr [ebx+0C], eax
:0047057B FF548F08                call [edi+4*ecx+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470538(C), :0047054A(C)
|
:0047057F 8B7B08                  mov edi, dword ptr [ebx+08]
:00470582 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00470585 8B348F                  mov esi, dword ptr [edi+4*ecx]
:00470588 EBA1                    jmp 0047052B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047054C(C)
|
:0047058A B800000000              mov eax, 00000000
:0047058F EB1C                    jmp 004705AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047052E(C)
|
:00470591 B801000000              mov eax, 00000001
:00470596 EB15                    jmp 004705AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470510(C)
|
:00470598 55                      push ebp
:00470599 8D6B10                  lea ebp, dword ptr [ebx+10]

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:0047059C 6AFF                    push FFFFFFFF
:0047059E 53                      push ebx
:0047059F E8CED2FFFF              call 0046D872
:004705A4 83C408                  add esp, 00000008
:004705A7 5D                      pop ebp
:004705A8 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047058F(U), :00470596(U)
|
:004705AD 5D                      pop ebp
:004705AE 5F                      pop edi
:004705AF 5E                      pop esi
:004705B0 5B                      pop ebx
:004705B1 8BE5                    mov esp, ebp
:004705B3 5D                      pop ebp
:004705B4 C3                      ret


:004705B5 55                      push ebp
:004705B6 8B4C2408                mov ecx, dword ptr [esp+08]
:004705BA 8B29                    mov ebp, dword ptr [ecx]
:004705BC 8B411C                  mov eax, dword ptr [ecx+1C]
:004705BF 50                      push eax
:004705C0 8B4118                  mov eax, dword ptr [ecx+18]
:004705C3 50                      push eax
:004705C4 E8A9D2FFFF              call 0046D872
:004705C9 83C408                  add esp, 00000008
:004705CC 5D                      pop ebp
:004705CD C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046E7B6   
|
:004705D0 8B442404                mov eax, dword ptr [esp+04]
:004705D4 53                      push ebx
:004705D5 55                      push ebp
:004705D6 56                      push esi
:004705D7 50                      push eax
:004705D8 E833010000              call 00470710
:004705DD 83C404                  add esp, 00000004
:004705E0 85C0                    test eax, eax
:004705E2 0F8417010000            je 004706FF
:004705E8 8B5808                  mov ebx, dword ptr [eax+08]
:004705EB 85DB                    test ebx, ebx
:004705ED 0F840C010000            je 004706FF
:004705F3 83FB05                  cmp ebx, 00000005
:004705F6 7510                    jne 00470608
:004705F8 C7400800000000          mov [eax+08], 00000000
:004705FF B801000000              mov eax, 00000001
:00470604 5E                      pop esi
:00470605 5D                      pop ebp
:00470606 5B                      pop ebx
:00470607 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004705F6(C)
|
:00470608 83FB01                  cmp ebx, 00000001
:0047060B 7507                    jne 00470614
:0047060D 83C8FF                  or eax, FFFFFFFF
:00470610 5E                      pop esi
:00470611 5D                      pop ebp
:00470612 5B                      pop ebx
:00470613 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047060B(C)
|
:00470614 8B4C2414                mov ecx, dword ptr [esp+14]
:00470618 8B2DCC6F4B00            mov ebp, dword ptr [004B6FCC]
:0047061E 890DCC6F4B00            mov dword ptr [004B6FCC], ecx
:00470624 8B4804                  mov ecx, dword ptr [eax+04]
:00470627 83F908                  cmp ecx, 00000008
:0047062A 0F85B5000000            jne 004706E5
:00470630 8B35F80A4800            mov esi, dword ptr [00480AF8]
:00470636 8B15FC0A4800            mov edx, dword ptr [00480AFC]
:0047063C 03D6                    add edx, esi
:0047063E 3BF2                    cmp esi, edx
:00470640 7D18                    jge 0047065A
:00470642 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00470645 2BD6                    sub edx, esi
:00470647 8D0C8D880A4800          lea ecx, dword ptr [4*ecx+00480A88]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470658(C)
|
:0047064E C70100000000            mov dword ptr [ecx], 00000000
:00470654 83C10C                  add ecx, 0000000C
:00470657 4A                      dec edx
:00470658 75F4                    jne 0047064E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470640(C)
|
:0047065A 8B00                    mov eax, dword ptr [eax]
:0047065C 8B0D040B4800            mov ecx, dword ptr [00480B04]
:00470662 3D8E0000C0              cmp eax, C000008E
:00470667 8BF1                    mov esi, ecx
:00470669 7507                    jne 00470672
:0047066B B983000000              mov ecx, 00000083
:00470670 EB52                    jmp 004706C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470669(C)
|
:00470672 3D900000C0              cmp eax, C0000090
:00470677 7507                    jne 00470680
:00470679 B981000000              mov ecx, 00000081
:0047067E EB44                    jmp 004706C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470677(C)
|
:00470680 3D910000C0              cmp eax, C0000091
:00470685 7507                    jne 0047068E
:00470687 B984000000              mov ecx, 00000084
:0047068C EB36                    jmp 004706C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470685(C)
|
:0047068E 3D930000C0              cmp eax, C0000093
:00470693 7507                    jne 0047069C
:00470695 B985000000              mov ecx, 00000085
:0047069A EB28                    jmp 004706C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470693(C)
|
:0047069C 3D8D0000C0              cmp eax, C000008D
:004706A1 7507                    jne 004706AA
:004706A3 B982000000              mov ecx, 00000082
:004706A8 EB1A                    jmp 004706C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004706A1(C)
|
:004706AA 3D8F0000C0              cmp eax, C000008F
:004706AF 7507                    jne 004706B8
:004706B1 B986000000              mov ecx, 00000086
:004706B6 EB0C                    jmp 004706C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004706AF(C)
|
:004706B8 3D920000C0              cmp eax, C0000092
:004706BD 750B                    jne 004706CA
:004706BF B98A000000              mov ecx, 0000008A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470670(U), :0047067E(U), :0047068C(U), :0047069A(U), :004706A8(U)
|:004706B6(U)
|
:004706C4 890D040B4800            mov dword ptr [00480B04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004706BD(C)
|
:004706CA 51                      push ecx

* Possible Reference to String Resource ID=00008: ""
                                  |
:004706CB 6A08                    push 00000008
:004706CD FFD3                    call ebx
:004706CF 83C408                  add esp, 00000008
:004706D2 8935040B4800            mov dword ptr [00480B04], esi
:004706D8 892DCC6F4B00            mov dword ptr [004B6FCC], ebp
:004706DE 83C8FF                  or eax, FFFFFFFF
:004706E1 5E                      pop esi
:004706E2 5D                      pop ebp
:004706E3 5B                      pop ebx
:004706E4 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047062A(C)
|
:004706E5 51                      push ecx
:004706E6 C7400800000000          mov [eax+08], 00000000
:004706ED FFD3                    call ebx
:004706EF 83C404                  add esp, 00000004
:004706F2 892DCC6F4B00            mov dword ptr [004B6FCC], ebp
:004706F8 83C8FF                  or eax, FFFFFFFF
:004706FB 5E                      pop esi
:004706FC 5D                      pop ebp
:004706FD 5B                      pop ebx
:004706FE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004705E2(C), :004705ED(C)
|
:004706FF 8B542414                mov edx, dword ptr [esp+14]
:00470703 52                      push edx

* Reference To: KERNEL32.UnhandledExceptionFilter, Ord:0250h
                                  |
:00470704 FF15C4854B00            Call dword ptr [004B85C4]
:0047070A 5E                      pop esi
:0047070B 5D                      pop ebp
:0047070C 5B                      pop ebx
:0047070D C3                      ret


:0047070E 90                      nop
:0047070F 90                      nop

* Referenced by a CALL at Address:
|:004705D8   
|
:00470710 8B542404                mov edx, dword ptr [esp+04]
:00470714 8B0D800A4800            mov ecx, dword ptr [00480A80]
:0047071A 56                      push esi
:0047071B 8B35000B4800            mov esi, dword ptr [00480B00]
:00470721 3BCA                    cmp ecx, edx

* Possible StringData Ref from Data Obj ->""
                                  |
:00470723 B8800A4800              mov eax, 00480A80
:00470728 7415                    je 0047073F
:0047072A 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:0047072D 8D0C8D800A4800          lea ecx, dword ptr [4*ecx+00480A80]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047073D(C)
|
:00470734 83C00C                  add eax, 0000000C
:00470737 3BC1                    cmp eax, ecx
:00470739 7304                    jnb 0047073F
:0047073B 3910                    cmp dword ptr [eax], edx
:0047073D 75F5                    jne 00470734

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470728(C), :00470739(C)
|
:0047073F 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00470742 8D0C8D800A4800          lea ecx, dword ptr [4*ecx+00480A80]
:00470749 3BC1                    cmp eax, ecx
:0047074B 7304                    jnb 00470751
:0047074D 3910                    cmp dword ptr [eax], edx
:0047074F 7402                    je 00470753

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047074B(C)
|
:00470751 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047074F(C)
|
:00470753 5E                      pop esi
:00470754 C3                      ret


:00470755 90                      nop
:00470756 90                      nop
:00470757 90                      nop
:00470758 90                      nop
:00470759 90                      nop
:0047075A 90                      nop
:0047075B 90                      nop
:0047075C 90                      nop
:0047075D 90                      nop
:0047075E 90                      nop
:0047075F 90                      nop

* Referenced by a CALL at Address:
|:0046E73C   
|
:00470760 8B442404                mov eax, dword ptr [esp+04]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00470764 6A04                    push 00000004
:00470766 6A00                    push 00000000
:00470768 50                      push eax
:00470769 E812000000              call 00470780
:0047076E 83C40C                  add esp, 0000000C
:00470771 C3                      ret


:00470772 90                      nop
:00470773 90                      nop
:00470774 90                      nop
:00470775 90                      nop
:00470776 90                      nop
:00470777 90                      nop
:00470778 90                      nop
:00470779 90                      nop
:0047077A 90                      nop
:0047077B 90                      nop
:0047077C 90                      nop
:0047077D 90                      nop
:0047077E 90                      nop
:0047077F 90                      nop

* Referenced by a CALL at Address:
|:00470769   
|
:00470780 8B442404                mov eax, dword ptr [esp+04]
:00470784 8A4C240C                mov cl, byte ptr [esp+0C]
:00470788 25FF000000              and eax, 000000FF
:0047078D 8488E1704B00            test byte ptr [eax+004B70E1], cl
:00470793 751F                    jne 004707B4
:00470795 8B4C2408                mov ecx, dword ptr [esp+08]
:00470799 85C9                    test ecx, ecx
:0047079B 7410                    je 004707AD
:0047079D 33D2                    xor edx, edx
:0047079F 668B1445B20C4800        mov dx, word ptr [2*eax+00480CB2]
:004707A7 8BC2                    mov eax, edx
:004707A9 23C1                    and eax, ecx
:004707AB EB02                    jmp 004707AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047079B(C)
|
:004707AD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004707AB(U)
|
:004707AF 85C0                    test eax, eax
:004707B1 7501                    jne 004707B4
:004707B3 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470793(C), :004707B1(C)
|
:004707B4 B801000000              mov eax, 00000001
:004707B9 C3                      ret


:004707BA 90                      nop
:004707BB 90                      nop
:004707BC 90                      nop
:004707BD 90                      nop
:004707BE 90                      nop
:004707BF 90                      nop

* Referenced by a CALL at Address:
|:0046E70C   
|
:004707C0 51                      push ecx
:004707C1 8B15486F4B00            mov edx, dword ptr [004B6F48]
:004707C7 53                      push ebx
:004707C8 55                      push ebp
:004707C9 56                      push esi
:004707CA 8A02                    mov al, byte ptr [edx]
:004707CC 33F6                    xor esi, esi
:004707CE 84C0                    test al, al
:004707D0 57                      push edi
:004707D1 741D                    je 004707F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004707EE(C)
|
:004707D3 3C3D                    cmp al, 3D
:004707D5 7401                    je 004707D8
:004707D7 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004707D5(C)
|
:004707D8 8BFA                    mov edi, edx
:004707DA 83C9FF                  or ecx, FFFFFFFF
:004707DD 33C0                    xor eax, eax
:004707DF F2                      repnz
:004707E0 AE                      scasb
:004707E1 F7D1                    not ecx
:004707E3 49                      dec ecx
:004707E4 8A440A01                mov al, byte ptr [edx+ecx+01]
:004707E8 8D540A01                lea edx, dword ptr [edx+ecx+01]
:004707EC 84C0                    test al, al
:004707EE 75E3                    jne 004707D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004707D1(C)
|
:004707F0 8D04B504000000          lea eax, dword ptr [4*esi+00000004]
:004707F7 50                      push eax
:004707F8 E893D7FFFF              call 0046DF90
:004707FD 8BF0                    mov esi, eax
:004707FF 83C404                  add esp, 00000004
:00470802 85F6                    test esi, esi
:00470804 89742410                mov dword ptr [esp+10], esi
:00470808 89357C6F4B00            mov dword ptr [004B6F7C], esi
:0047080E 750A                    jne 0047081A

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00470810 6A09                    push 00000009
:00470812 E8E9DFFFFF              call 0046E800
:00470817 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047080E(C)
|
:0047081A 8B2D486F4B00            mov ebp, dword ptr [004B6F48]
:00470820 8A5500                  mov dl, byte ptr [ebp+00]
:00470823 84D2                    test dl, dl
:00470825 7463                    je 0047088A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470888(C)
|
:00470827 8BFD                    mov edi, ebp
:00470829 83C9FF                  or ecx, FFFFFFFF
:0047082C 33C0                    xor eax, eax
:0047082E F2                      repnz
:0047082F AE                      scasb
:00470830 F7D1                    not ecx
:00470832 49                      dec ecx
:00470833 8BD9                    mov ebx, ecx
:00470835 43                      inc ebx
:00470836 80FA3D                  cmp dl, 3D
:00470839 7445                    je 00470880
:0047083B 53                      push ebx
:0047083C E84FD7FFFF              call 0046DF90
:00470841 83C404                  add esp, 00000004
:00470844 8906                    mov dword ptr [esi], eax
:00470846 85C0                    test eax, eax
:00470848 750A                    jne 00470854

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0047084A 6A09                    push 00000009
:0047084C E8AFDFFFFF              call 0046E800
:00470851 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470848(C)
|
:00470854 8BFD                    mov edi, ebp
:00470856 83C9FF                  or ecx, FFFFFFFF
:00470859 33C0                    xor eax, eax
:0047085B F2                      repnz
:0047085C AE                      scasb
:0047085D 8B442410                mov eax, dword ptr [esp+10]
:00470861 F7D1                    not ecx
:00470863 2BF9                    sub edi, ecx
:00470865 8BD1                    mov edx, ecx
:00470867 8BF7                    mov esi, edi
:00470869 8B38                    mov edi, dword ptr [eax]
:0047086B C1E902                  shr ecx, 02
:0047086E F3                      repz
:0047086F A5                      movsd
:00470870 8BCA                    mov ecx, edx
:00470872 83E103                  and ecx, 00000003
:00470875 83C004                  add eax, 00000004
:00470878 F3                      repz
:00470879 A4                      movsb
:0047087A 89442410                mov dword ptr [esp+10], eax
:0047087E 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470839(C)
|
:00470880 8A541D00                mov dl, byte ptr [ebp+ebx]
:00470884 03EB                    add ebp, ebx
:00470886 84D2                    test dl, dl
:00470888 759D                    jne 00470827

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470825(C)
|
:0047088A A1486F4B00              mov eax, dword ptr [004B6F48]
:0047088F 50                      push eax
:00470890 E8ABD6FFFF              call 0046DF40
:00470895 83C404                  add esp, 00000004
:00470898 C705486F4B0000000000    mov dword ptr [004B6F48], 00000000
:004708A2 C70600000000            mov dword ptr [esi], 00000000
:004708A8 5F                      pop edi
:004708A9 5E                      pop esi
:004708AA 5D                      pop ebp
:004708AB 5B                      pop ebx
:004708AC 59                      pop ecx
:004708AD C3                      ret


:004708AE 90                      nop
:004708AF 90                      nop

* Referenced by a CALL at Address:
|:0046E707   
|
:004708B0 83EC08                  sub esp, 00000008
:004708B3 56                      push esi
:004708B4 57                      push edi
:004708B5 6804010000              push 00000104
:004708BA 68D06F4B00              push 004B6FD0
:004708BF 6A00                    push 00000000

* Reference To: KERNEL32.GetModuleFileNameA, Ord:00FCh
                                  |
:004708C1 FF15B4854B00            Call dword ptr [004B85B4]
:004708C7 8B3DD07A4B00            mov edi, dword ptr [004B7AD0]
:004708CD C7058C6F4B00D06F4B00    mov dword ptr [004B6F8C], 004B6FD0
:004708D7 803F00                  cmp byte ptr [edi], 00
:004708DA 7505                    jne 004708E1
:004708DC BFD06F4B00              mov edi, 004B6FD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004708DA(C)
|
:004708E1 8D44240C                lea eax, dword ptr [esp+0C]
:004708E5 8D4C2408                lea ecx, dword ptr [esp+08]
:004708E9 50                      push eax
:004708EA 51                      push ecx
:004708EB 6A00                    push 00000000
:004708ED 6A00                    push 00000000
:004708EF 57                      push edi
:004708F0 E85B000000              call 00470950
:004708F5 8B542420                mov edx, dword ptr [esp+20]
:004708F9 8B44241C                mov eax, dword ptr [esp+1C]
:004708FD 83C414                  add esp, 00000014
:00470900 8D0C82                  lea ecx, dword ptr [edx+4*eax]
:00470903 51                      push ecx
:00470904 E887D6FFFF              call 0046DF90
:00470909 8BF0                    mov esi, eax
:0047090B 83C404                  add esp, 00000004
:0047090E 85F6                    test esi, esi
:00470910 750A                    jne 0047091C

* Possible Reference to String Resource ID=00008: ""
                                  |
:00470912 6A08                    push 00000008
:00470914 E8E7DEFFFF              call 0046E800
:00470919 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470910(C)
|
:0047091C 8B4C2408                mov ecx, dword ptr [esp+08]
:00470920 8D54240C                lea edx, dword ptr [esp+0C]
:00470924 52                      push edx
:00470925 8D44240C                lea eax, dword ptr [esp+0C]
:00470929 8D148E                  lea edx, dword ptr [esi+4*ecx]
:0047092C 50                      push eax
:0047092D 52                      push edx
:0047092E 56                      push esi
:0047092F 57                      push edi
:00470930 E81B000000              call 00470950
:00470935 8B44241C                mov eax, dword ptr [esp+1C]
:00470939 83C414                  add esp, 00000014
:0047093C 48                      dec eax
:0047093D 8935746F4B00            mov dword ptr [004B6F74], esi
:00470943 5F                      pop edi
:00470944 A3706F4B00              mov dword ptr [004B6F70], eax
:00470949 5E                      pop esi
:0047094A 83C408                  add esp, 00000008
:0047094D C3                      ret


:0047094E 90                      nop
:0047094F 90                      nop

* Referenced by a CALL at Addresses:
|:004708F0   , :00470930   
|
:00470950 8B442410                mov eax, dword ptr [esp+10]
:00470954 53                      push ebx
:00470955 55                      push ebp
:00470956 8B6C2410                mov ebp, dword ptr [esp+10]
:0047095A 56                      push esi
:0047095B 8B742418                mov esi, dword ptr [esp+18]
:0047095F 57                      push edi
:00470960 8B7C2424                mov edi, dword ptr [esp+24]
:00470964 85ED                    test ebp, ebp
:00470966 C70700000000            mov dword ptr [edi], 00000000
:0047096C C70001000000            mov dword ptr [eax], 00000001
:00470972 8B442414                mov eax, dword ptr [esp+14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00470976 BB04000000              mov ebx, 00000004
:0047097B 7409                    je 00470986
:0047097D 897500                  mov dword ptr [ebp+00], esi
:00470980 03EB                    add ebp, ebx
:00470982 896C2418                mov dword ptr [esp+18], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047097B(C)
|
:00470986 803822                  cmp byte ptr [eax], 22
:00470989 7556                    jne 004709E1
:0047098B 8A4801                  mov cl, byte ptr [eax+01]
:0047098E 40                      inc eax
:0047098F 80F922                  cmp cl, 22
:00470992 7438                    je 004709CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004709CA(C)
|
:00470994 84C9                    test cl, cl
:00470996 7434                    je 004709CC
:00470998 81E1FF000000            and ecx, 000000FF
:0047099E 8499E1704B00            test byte ptr [ecx+004B70E1], bl
:004709A4 740F                    je 004709B5
:004709A6 8B17                    mov edx, dword ptr [edi]
:004709A8 42                      inc edx
:004709A9 85F6                    test esi, esi
:004709AB 8917                    mov dword ptr [edi], edx
:004709AD 7406                    je 004709B5
:004709AF 8A08                    mov cl, byte ptr [eax]
:004709B1 880E                    mov byte ptr [esi], cl
:004709B3 46                      inc esi
:004709B4 40                      inc eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004709A4(C), :004709AD(C)
|
:004709B5 8B17                    mov edx, dword ptr [edi]
:004709B7 42                      inc edx
:004709B8 85F6                    test esi, esi
:004709BA 8917                    mov dword ptr [edi], edx
:004709BC 7405                    je 004709C3
:004709BE 8A10                    mov dl, byte ptr [eax]
:004709C0 8816                    mov byte ptr [esi], dl
:004709C2 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004709BC(C)
|
:004709C3 8A4801                  mov cl, byte ptr [eax+01]
:004709C6 40                      inc eax
:004709C7 80F922                  cmp cl, 22
:004709CA 75C8                    jne 00470994

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470992(C), :00470996(C)
|
:004709CC 8B17                    mov edx, dword ptr [edi]
:004709CE 42                      inc edx
:004709CF 85F6                    test esi, esi
:004709D1 8917                    mov dword ptr [edi], edx
:004709D3 7404                    je 004709D9
:004709D5 C60600                  mov byte ptr [esi], 00
:004709D8 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004709D3(C)
|
:004709D9 803822                  cmp byte ptr [eax], 22
:004709DC 7556                    jne 00470A34
:004709DE 40                      inc eax
:004709DF EB53                    jmp 00470A34

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470989(C), :00470A23(C)
|
:004709E1 8B17                    mov edx, dword ptr [edi]
:004709E3 42                      inc edx
:004709E4 85F6                    test esi, esi
:004709E6 8917                    mov dword ptr [edi], edx
:004709E8 7405                    je 004709EF
:004709EA 8A08                    mov cl, byte ptr [eax]
:004709EC 880E                    mov byte ptr [esi], cl
:004709EE 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004709E8(C)
|
:004709EF 8A08                    mov cl, byte ptr [eax]
:004709F1 40                      inc eax
:004709F2 884C2424                mov byte ptr [esp+24], cl
:004709F6 8B542424                mov edx, dword ptr [esp+24]
:004709FA 81E2FF000000            and edx, 000000FF
:00470A00 849AE1704B00            test byte ptr [edx+004B70E1], bl
:00470A06 740F                    je 00470A17
:00470A08 8B17                    mov edx, dword ptr [edi]
:00470A0A 42                      inc edx
:00470A0B 85F6                    test esi, esi
:00470A0D 8917                    mov dword ptr [edi], edx
:00470A0F 7405                    je 00470A16
:00470A11 8A10                    mov dl, byte ptr [eax]
:00470A13 8816                    mov byte ptr [esi], dl
:00470A15 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A0F(C)
|
:00470A16 40                      inc eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A06(C)
|
:00470A17 80F920                  cmp cl, 20
:00470A1A 7409                    je 00470A25
:00470A1C 84C9                    test cl, cl
:00470A1E 7409                    je 00470A29
:00470A20 80F909                  cmp cl, 09
:00470A23 75BC                    jne 004709E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A1A(C)
|
:00470A25 84C9                    test cl, cl
:00470A27 7503                    jne 00470A2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A1E(C)
|
:00470A29 48                      dec eax
:00470A2A EB08                    jmp 00470A34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A27(C)
|
:00470A2C 85F6                    test esi, esi
:00470A2E 7404                    je 00470A34
:00470A30 C646FF00                mov [esi-01], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004709DC(C), :004709DF(U), :00470A2A(U), :00470A2E(C)
|
:00470A34 33D2                    xor edx, edx
:00470A36 89542424                mov dword ptr [esp+24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B41(U)
|
:00470A3A 803800                  cmp byte ptr [eax], 00
:00470A3D 0F8403010000            je 00470B46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A50(U)
|
:00470A43 8A08                    mov cl, byte ptr [eax]
:00470A45 80F920                  cmp cl, 20
:00470A48 7405                    je 00470A4F
:00470A4A 80F909                  cmp cl, 09
:00470A4D 7503                    jne 00470A52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A48(C)
|
:00470A4F 40                      inc eax
:00470A50 EBF1                    jmp 00470A43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A4D(C)
|
:00470A52 803800                  cmp byte ptr [eax], 00
:00470A55 0F84EB000000            je 00470B46
:00470A5B 85ED                    test ebp, ebp
:00470A5D 7409                    je 00470A68
:00470A5F 897500                  mov dword ptr [ebp+00], esi
:00470A62 03EB                    add ebp, ebx
:00470A64 896C2418                mov dword ptr [esp+18], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A5D(C)
|
:00470A68 8B4C2420                mov ecx, dword ptr [esp+20]
:00470A6C FF01                    inc dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470B09(U), :00470B26(U)
|
:00470A6E 8A18                    mov bl, byte ptr [eax]
:00470A70 33C9                    xor ecx, ecx
:00470A72 80FB5C                  cmp bl, 5C
:00470A75 BD01000000              mov ebp, 00000001
:00470A7A 750A                    jne 00470A86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A84(C)
|
:00470A7C 8A5801                  mov bl, byte ptr [eax+01]
:00470A7F 40                      inc eax
:00470A80 41                      inc ecx
:00470A81 80FB5C                  cmp bl, 5C
:00470A84 74F6                    je 00470A7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A7A(C)
|
:00470A86 803822                  cmp byte ptr [eax], 22
:00470A89 7525                    jne 00470AB0
:00470A8B F6C101                  test cl, 01
:00470A8E 751E                    jne 00470AAE
:00470A90 85D2                    test edx, edx
:00470A92 7409                    je 00470A9D
:00470A94 80780122                cmp byte ptr [eax+01], 22
:00470A98 7503                    jne 00470A9D
:00470A9A 40                      inc eax
:00470A9B EB02                    jmp 00470A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470A92(C), :00470A98(C)
|
:00470A9D 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A9B(U)
|
:00470A9F 8B5C2424                mov ebx, dword ptr [esp+24]
:00470AA3 33D2                    xor edx, edx
:00470AA5 85DB                    test ebx, ebx
:00470AA7 0F94C2                  sete dl
:00470AAA 89542424                mov dword ptr [esp+24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A8E(C)
|
:00470AAE D1E9                    shr ecx, 1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A89(C)
|
:00470AB0 8BD9                    mov ebx, ecx
:00470AB2 49                      dec ecx
:00470AB3 85DB                    test ebx, ebx
:00470AB5 7411                    je 00470AC8
:00470AB7 41                      inc ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470AC6(C)
|
:00470AB8 85F6                    test esi, esi
:00470ABA 7404                    je 00470AC0
:00470ABC C6065C                  mov byte ptr [esi], 5C
:00470ABF 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470ABA(C)
|
:00470AC0 8B1F                    mov ebx, dword ptr [edi]
:00470AC2 43                      inc ebx
:00470AC3 49                      dec ecx
:00470AC4 891F                    mov dword ptr [edi], ebx
:00470AC6 75F0                    jne 00470AB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470AB5(C)
|
:00470AC8 8A08                    mov cl, byte ptr [eax]
:00470ACA 84C9                    test cl, cl
:00470ACC 745D                    je 00470B2B
:00470ACE 85D2                    test edx, edx
:00470AD0 750A                    jne 00470ADC
:00470AD2 80F920                  cmp cl, 20
:00470AD5 7454                    je 00470B2B
:00470AD7 80F909                  cmp cl, 09
:00470ADA 744F                    je 00470B2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470AD0(C)
|
:00470ADC 85ED                    test ebp, ebp
:00470ADE 7445                    je 00470B25
:00470AE0 85F6                    test esi, esi
:00470AE2 742A                    je 00470B0E
:00470AE4 8BD9                    mov ebx, ecx
:00470AE6 81E3FF000000            and ebx, 000000FF
:00470AEC F683E1704B0004          test byte ptr [ebx+004B70E1], 04
:00470AF3 7409                    je 00470AFE
:00470AF5 880E                    mov byte ptr [esi], cl
:00470AF7 8B0F                    mov ecx, dword ptr [edi]
:00470AF9 46                      inc esi
:00470AFA 40                      inc eax
:00470AFB 41                      inc ecx
:00470AFC 890F                    mov dword ptr [edi], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470AF3(C)
|
:00470AFE 8A08                    mov cl, byte ptr [eax]
:00470B00 880E                    mov byte ptr [esi], cl
:00470B02 8B0F                    mov ecx, dword ptr [edi]
:00470B04 46                      inc esi
:00470B05 41                      inc ecx
:00470B06 890F                    mov dword ptr [edi], ecx
:00470B08 40                      inc eax
:00470B09 E960FFFFFF              jmp 00470A6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470AE2(C)
|
:00470B0E 81E1FF000000            and ecx, 000000FF
:00470B14 F681E1704B0004          test byte ptr [ecx+004B70E1], 04
:00470B1B 7406                    je 00470B23
:00470B1D 8B0F                    mov ecx, dword ptr [edi]
:00470B1F 40                      inc eax
:00470B20 41                      inc ecx
:00470B21 890F                    mov dword ptr [edi], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B1B(C)
|
:00470B23 FF07                    inc dword ptr [edi]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470ADE(C)
|
:00470B25 40                      inc eax
:00470B26 E943FFFFFF              jmp 00470A6E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470ACC(C), :00470AD5(C), :00470ADA(C)
|
:00470B2B 85F6                    test esi, esi
:00470B2D 7404                    je 00470B33
:00470B2F C60600                  mov byte ptr [esi], 00
:00470B32 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B2D(C)
|
:00470B33 8B0F                    mov ecx, dword ptr [edi]
:00470B35 8B6C2418                mov ebp, dword ptr [esp+18]
:00470B39 41                      inc ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00470B3A BB04000000              mov ebx, 00000004
:00470B3F 890F                    mov dword ptr [edi], ecx
:00470B41 E9F4FEFFFF              jmp 00470A3A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470A3D(C), :00470A55(C)
|
:00470B46 85ED                    test ebp, ebp
:00470B48 7407                    je 00470B51
:00470B4A C7450000000000          mov [ebp+00], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B48(C)
|
:00470B51 8B442420                mov eax, dword ptr [esp+20]
:00470B55 5F                      pop edi
:00470B56 5E                      pop esi
:00470B57 5D                      pop ebp
:00470B58 8B08                    mov ecx, dword ptr [eax]
:00470B5A 5B                      pop ebx
:00470B5B 41                      inc ecx
:00470B5C 8908                    mov dword ptr [eax], ecx
:00470B5E C3                      ret


:00470B5F 90                      nop

* Referenced by a CALL at Address:
|:0046E6E6   
|
:00470B60 A1D8704B00              mov eax, dword ptr [004B70D8]
:00470B65 53                      push ebx
:00470B66 55                      push ebp

* Reference To: KERNEL32.GetEnvironmentStrings, Ord:00E1h
                                  |
:00470B67 8B2DA4854B00            mov ebp, dword ptr [004B85A4]
:00470B6D 56                      push esi
:00470B6E 33F6                    xor esi, esi
:00470B70 33DB                    xor ebx, ebx
:00470B72 57                      push edi

* Reference To: KERNEL32.GetEnvironmentStringsW, Ord:00E3h
                                  |
:00470B73 8B3DAC854B00            mov edi, dword ptr [004B85AC]
:00470B79 85C0                    test eax, eax
:00470B7B 7525                    jne 00470BA2
:00470B7D FFD7                    call edi
:00470B7F 8BF0                    mov esi, eax
:00470B81 85F6                    test esi, esi
:00470B83 7407                    je 00470B8C
:00470B85 B801000000              mov eax, 00000001
:00470B8A EB11                    jmp 00470B9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B83(C)
|
:00470B8C FFD5                    call ebp
:00470B8E 8BD8                    mov ebx, eax
:00470B90 85DB                    test ebx, ebx
:00470B92 0F8417010000            je 00470CAF

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00470B98 B802000000              mov eax, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B8A(U)
|
:00470B9D A3D8704B00              mov dword ptr [004B70D8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B7B(C)
|
:00470BA2 83F801                  cmp eax, 00000001
:00470BA5 0F8597000000            jne 00470C42
:00470BAB 85F6                    test esi, esi
:00470BAD 750C                    jne 00470BBB
:00470BAF FFD7                    call edi
:00470BB1 8BF0                    mov esi, eax
:00470BB3 85F6                    test esi, esi
:00470BB5 0F84F4000000            je 00470CAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470BAD(C)
|
:00470BBB 66833E00                cmp word ptr [esi], 0000
:00470BBF 8BC6                    mov eax, esi
:00470BC1 7412                    je 00470BD5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470BCA(C), :00470BD3(C)
|
:00470BC3 83C002                  add eax, 00000002
:00470BC6 66833800                cmp word ptr [eax], 0000
:00470BCA 75F7                    jne 00470BC3
:00470BCC 83C002                  add eax, 00000002
:00470BCF 66833800                cmp word ptr [eax], 0000
:00470BD3 75EE                    jne 00470BC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470BC1(C)
|
:00470BD5 2BC6                    sub eax, esi
:00470BD7 6A00                    push 00000000
:00470BD9 D1F8                    sar eax, 1
:00470BDB 40                      inc eax
:00470BDC 6A00                    push 00000000
:00470BDE 8BE8                    mov ebp, eax
:00470BE0 6A00                    push 00000000
:00470BE2 6A00                    push 00000000
:00470BE4 55                      push ebp
:00470BE5 56                      push esi
:00470BE6 6A00                    push 00000000
:00470BE8 6A00                    push 00000000

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:00470BEA FF159C854B00            Call dword ptr [004B859C]
:00470BF0 8BF8                    mov edi, eax
:00470BF2 85FF                    test edi, edi
:00470BF4 743E                    je 00470C34
:00470BF6 57                      push edi
:00470BF7 E894D3FFFF              call 0046DF90
:00470BFC 8BD8                    mov ebx, eax
:00470BFE 83C404                  add esp, 00000004
:00470C01 85DB                    test ebx, ebx
:00470C03 742F                    je 00470C34
:00470C05 6A00                    push 00000000
:00470C07 6A00                    push 00000000
:00470C09 57                      push edi
:00470C0A 53                      push ebx
:00470C0B 55                      push ebp
:00470C0C 56                      push esi
:00470C0D 6A00                    push 00000000
:00470C0F 6A00                    push 00000000

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:00470C11 FF159C854B00            Call dword ptr [004B859C]
:00470C17 85C0                    test eax, eax
:00470C19 750B                    jne 00470C26
:00470C1B 53                      push ebx
:00470C1C E81FD3FFFF              call 0046DF40
:00470C21 83C404                  add esp, 00000004
:00470C24 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470C19(C)
|
:00470C26 56                      push esi

* Reference To: KERNEL32.FreeEnvironmentStringsW, Ord:0097h
                                  |
:00470C27 FF15A8854B00            Call dword ptr [004B85A8]
:00470C2D 8BC3                    mov eax, ebx
:00470C2F 5F                      pop edi
:00470C30 5E                      pop esi
:00470C31 5D                      pop ebp
:00470C32 5B                      pop ebx
:00470C33 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470BF4(C), :00470C03(C)
|
:00470C34 56                      push esi

* Reference To: KERNEL32.FreeEnvironmentStringsW, Ord:0097h
                                  |
:00470C35 FF15A8854B00            Call dword ptr [004B85A8]
:00470C3B 33C0                    xor eax, eax
:00470C3D 5F                      pop edi
:00470C3E 5E                      pop esi
:00470C3F 5D                      pop ebp
:00470C40 5B                      pop ebx
:00470C41 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470BA5(C)
|
:00470C42 83F802                  cmp eax, 00000002
:00470C45 7568                    jne 00470CAF
:00470C47 85DB                    test ebx, ebx
:00470C49 7508                    jne 00470C53
:00470C4B FFD5                    call ebp
:00470C4D 8BD8                    mov ebx, eax
:00470C4F 85DB                    test ebx, ebx
:00470C51 745C                    je 00470CAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470C49(C)
|
:00470C53 8A0B                    mov cl, byte ptr [ebx]
:00470C55 8BC3                    mov eax, ebx
:00470C57 84C9                    test cl, cl
:00470C59 7410                    je 00470C6B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470C61(C), :00470C69(C)
|
:00470C5B 8A4801                  mov cl, byte ptr [eax+01]
:00470C5E 40                      inc eax
:00470C5F 84C9                    test cl, cl
:00470C61 75F8                    jne 00470C5B
:00470C63 8A4801                  mov cl, byte ptr [eax+01]
:00470C66 40                      inc eax
:00470C67 84C9                    test cl, cl
:00470C69 75F0                    jne 00470C5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470C59(C)
|
:00470C6B 2BC3                    sub eax, ebx
:00470C6D 40                      inc eax
:00470C6E 8BF0                    mov esi, eax
:00470C70 56                      push esi
:00470C71 E81AD3FFFF              call 0046DF90
:00470C76 8BE8                    mov ebp, eax
:00470C78 83C404                  add esp, 00000004
:00470C7B 85ED                    test ebp, ebp
:00470C7D 750E                    jne 00470C8D
:00470C7F 53                      push ebx

* Reference To: KERNEL32.FreeEnvironmentStringsA, Ord:0096h
                                  |
:00470C80 FF15B0854B00            Call dword ptr [004B85B0]
:00470C86 33C0                    xor eax, eax
:00470C88 5F                      pop edi
:00470C89 5E                      pop esi
:00470C8A 5D                      pop ebp
:00470C8B 5B                      pop ebx
:00470C8C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470C7D(C)
|
:00470C8D 8BCE                    mov ecx, esi
:00470C8F 8BF3                    mov esi, ebx
:00470C91 8BC1                    mov eax, ecx
:00470C93 8BFD                    mov edi, ebp
:00470C95 C1E902                  shr ecx, 02
:00470C98 F3                      repz
:00470C99 A5                      movsd
:00470C9A 8BC8                    mov ecx, eax
:00470C9C 53                      push ebx
:00470C9D 83E103                  and ecx, 00000003
:00470CA0 F3                      repz
:00470CA1 A4                      movsb

* Reference To: KERNEL32.FreeEnvironmentStringsA, Ord:0096h
                                  |
:00470CA2 FF15B0854B00            Call dword ptr [004B85B0]
:00470CA8 8BC5                    mov eax, ebp
:00470CAA 5F                      pop edi
:00470CAB 5E                      pop esi
:00470CAC 5D                      pop ebp
:00470CAD 5B                      pop ebx
:00470CAE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470B92(C), :00470BB5(C), :00470C45(C), :00470C51(C)
|
:00470CAF 5F                      pop edi
:00470CB0 5E                      pop esi
:00470CB1 5D                      pop ebp
:00470CB2 33C0                    xor eax, eax
:00470CB4 5B                      pop ebx
:00470CB5 C3                      ret


:00470CB6 90                      nop
:00470CB7 90                      nop
:00470CB8 90                      nop
:00470CB9 90                      nop
:00470CBA 90                      nop
:00470CBB 90                      nop
:00470CBC 90                      nop
:00470CBD 90                      nop
:00470CBE 90                      nop
:00470CBF 90                      nop

* Referenced by a CALL at Address:
|:00470F92   
|
:00470CC0 8B442404                mov eax, dword ptr [esp+04]
:00470CC4 83EC14                  sub esp, 00000014
:00470CC7 53                      push ebx
:00470CC8 55                      push ebp
:00470CC9 56                      push esi
:00470CCA 57                      push edi
:00470CCB 50                      push eax
:00470CCC E8DF010000              call 00470EB0
:00470CD1 8BE8                    mov ebp, eax
:00470CD3 A1E4714B00              mov eax, dword ptr [004B71E4]
:00470CD8 83C404                  add esp, 00000004
:00470CDB 3BE8                    cmp ebp, eax
:00470CDD 896C2428                mov dword ptr [esp+28], ebp
:00470CE1 750A                    jne 00470CED
:00470CE3 33C0                    xor eax, eax
:00470CE5 5F                      pop edi
:00470CE6 5E                      pop esi
:00470CE7 5D                      pop ebp
:00470CE8 5B                      pop ebx
:00470CE9 83C414                  add esp, 00000014
:00470CEC C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470CE1(C)
|
:00470CED 33F6                    xor esi, esi
:00470CEF 3BEE                    cmp ebp, esi
:00470CF1 750F                    jne 00470D02
:00470CF3 E868020000              call 00470F60
:00470CF8 33C0                    xor eax, eax
:00470CFA 5F                      pop edi
:00470CFB 5E                      pop esi
:00470CFC 5D                      pop ebp
:00470CFD 5B                      pop ebx
:00470CFE 83C414                  add esp, 00000014
:00470D01 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470CF1(C)
|
:00470D02 33D2                    xor edx, edx

* Possible StringData Ref from Data Obj ->""
                                  |
:00470D04 B8100B4800              mov eax, 00480B10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D1A(C)
|
:00470D09 3928                    cmp dword ptr [eax], ebp
:00470D0B 0F84F3000000            je 00470E04
:00470D11 83C030                  add eax, 00000030
:00470D14 42                      inc edx
:00470D15 3D000C4800              cmp eax, 00480C00
:00470D1A 72ED                    jb 00470D09
:00470D1C 8D4C2410                lea ecx, dword ptr [esp+10]
:00470D20 51                      push ecx
:00470D21 55                      push ebp

* Reference To: KERNEL32.GetCPInfo, Ord:00A3h
                                  |
:00470D22 FF1598854B00            Call dword ptr [004B8598]
:00470D28 83F801                  cmp eax, 00000001
:00470D2B 0F85B1000000            jne 00470DE2
:00470D31 B940000000              mov ecx, 00000040
:00470D36 33C0                    xor eax, eax
:00470D38 BFE0704B00              mov edi, 004B70E0
:00470D3D F3                      repz
:00470D3E AB                      stosd
:00470D3F AA                      stosb
:00470D40 837C241001              cmp dword ptr [esp+10], 00000001
:00470D45 7671                    jbe 00470DB8
:00470D47 8A442416                mov al, byte ptr [esp+16]
:00470D4B 84C0                    test al, al
:00470D4D 7437                    je 00470D86
:00470D4F 8D542417                lea edx, dword ptr [esp+17]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D84(C)
|
:00470D53 8A0A                    mov cl, byte ptr [edx]
:00470D55 84C9                    test cl, cl
:00470D57 742D                    je 00470D86
:00470D59 33C0                    xor eax, eax
:00470D5B 81E1FF000000            and ecx, 000000FF
:00470D61 8A42FF                  mov al, byte ptr [edx-01]
:00470D64 3BC1                    cmp eax, ecx
:00470D66 7714                    ja 00470D7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D7A(C)
|
:00470D68 8A98E1704B00            mov bl, byte ptr [eax+004B70E1]
:00470D6E 80CB04                  or bl, 04
:00470D71 8898E1704B00            mov byte ptr [eax+004B70E1], bl
:00470D77 40                      inc eax
:00470D78 3BC1                    cmp eax, ecx
:00470D7A 76EC                    jbe 00470D68

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D66(C)
|
:00470D7C 8A4201                  mov al, byte ptr [edx+01]
:00470D7F 83C202                  add edx, 00000002
:00470D82 84C0                    test al, al
:00470D84 75CD                    jne 00470D53

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470D4D(C), :00470D57(C)
|
:00470D86 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470DA0(C)
|
:00470D8B 8A98E1704B00            mov bl, byte ptr [eax+004B70E1]
:00470D91 80CB08                  or bl, 08
:00470D94 8898E1704B00            mov byte ptr [eax+004B70E1], bl
:00470D9A 40                      inc eax

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:00470D9B 3DFF000000              cmp eax, 000000FF
:00470DA0 72E9                    jb 00470D8B
:00470DA2 55                      push ebp
:00470DA3 892DE4714B00            mov dword ptr [004B71E4], ebp
:00470DA9 E852010000              call 00470F00
:00470DAE 83C404                  add esp, 00000004
:00470DB1 A3E8714B00              mov dword ptr [004B71E8], eax
:00470DB6 EB0C                    jmp 00470DC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D45(C)
|
:00470DB8 8935E4714B00            mov dword ptr [004B71E4], esi
:00470DBE 8935E8714B00            mov dword ptr [004B71E8], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470DB6(U)
|
:00470DC4 33D2                    xor edx, edx
:00470DC6 33C0                    xor eax, eax
:00470DC8 8915F0714B00            mov dword ptr [004B71F0], edx
:00470DCE 8915F4714B00            mov dword ptr [004B71F4], edx
:00470DD4 8915F8714B00            mov dword ptr [004B71F8], edx
:00470DDA 5F                      pop edi
:00470DDB 5E                      pop esi
:00470DDC 5D                      pop ebp
:00470DDD 5B                      pop ebx
:00470DDE 83C414                  add esp, 00000014
:00470DE1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D2B(C)
|
:00470DE2 3935FC714B00            cmp dword ptr [004B71FC], esi
:00470DE8 740F                    je 00470DF9
:00470DEA E871010000              call 00470F60
:00470DEF 33C0                    xor eax, eax
:00470DF1 5F                      pop edi
:00470DF2 5E                      pop esi
:00470DF3 5D                      pop ebp
:00470DF4 5B                      pop ebx
:00470DF5 83C414                  add esp, 00000014
:00470DF8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470DE8(C)
|
:00470DF9 83C8FF                  or eax, FFFFFFFF
:00470DFC 5F                      pop edi
:00470DFD 5E                      pop esi
:00470DFE 5D                      pop ebp
:00470DFF 5B                      pop ebx
:00470E00 83C414                  add esp, 00000014
:00470E03 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D0B(C)
|
:00470E04 B940000000              mov ecx, 00000040
:00470E09 33C0                    xor eax, eax
:00470E0B BFE0704B00              mov edi, 004B70E0
:00470E10 8D1C52                  lea ebx, dword ptr [edx+2*edx]
:00470E13 F3                      repz
:00470E14 AB                      stosd
:00470E15 AA                      stosb
:00470E16 33FF                    xor edi, edi
:00470E18 C1E304                  shl ebx, 04
:00470E1B 8DAB200B4800            lea ebp, dword ptr [ebx+00480B20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E61(C)
|
:00470E21 8A4500                  mov al, byte ptr [ebp+00]
:00470E24 8BF5                    mov esi, ebp
:00470E26 84C0                    test al, al
:00470E28 7430                    je 00470E5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E58(C)
|
:00470E2A 8A4E01                  mov cl, byte ptr [esi+01]
:00470E2D 84C9                    test cl, cl
:00470E2F 7429                    je 00470E5A
:00470E31 33C0                    xor eax, eax
:00470E33 81E1FF000000            and ecx, 000000FF
:00470E39 8A06                    mov al, byte ptr [esi]
:00470E3B 3BC1                    cmp eax, ecx
:00470E3D 7711                    ja 00470E50
:00470E3F 8A97080B4800            mov dl, byte ptr [edi+00480B08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E4E(C)
|
:00470E45 0890E1704B00            or byte ptr [eax+004B70E1], dl
:00470E4B 40                      inc eax
:00470E4C 3BC1                    cmp eax, ecx
:00470E4E 76F5                    jbe 00470E45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E3D(C)
|
:00470E50 8A4602                  mov al, byte ptr [esi+02]
:00470E53 83C602                  add esi, 00000002
:00470E56 84C0                    test al, al
:00470E58 75D0                    jne 00470E2A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470E28(C), :00470E2F(C)
|
:00470E5A 47                      inc edi
:00470E5B 83C508                  add ebp, 00000008
:00470E5E 83FF04                  cmp edi, 00000004
:00470E61 72BE                    jb 00470E21
:00470E63 8B442428                mov eax, dword ptr [esp+28]
:00470E67 50                      push eax
:00470E68 A3E4714B00              mov dword ptr [004B71E4], eax
:00470E6D E88E000000              call 00470F00
:00470E72 8B8B140B4800            mov ecx, dword ptr [ebx+00480B14]
:00470E78 8B93180B4800            mov edx, dword ptr [ebx+00480B18]
:00470E7E A3E8714B00              mov dword ptr [004B71E8], eax
:00470E83 8D83140B4800            lea eax, dword ptr [ebx+00480B14]
:00470E89 83C404                  add esp, 00000004
:00470E8C 890DF0714B00            mov dword ptr [004B71F0], ecx
:00470E92 8B4008                  mov eax, dword ptr [eax+08]
:00470E95 8915F4714B00            mov dword ptr [004B71F4], edx
:00470E9B 5F                      pop edi
:00470E9C 5E                      pop esi
:00470E9D A3F8714B00              mov dword ptr [004B71F8], eax
:00470EA2 5D                      pop ebp
:00470EA3 33C0                    xor eax, eax
:00470EA5 5B                      pop ebx
:00470EA6 83C414                  add esp, 00000014
:00470EA9 C3                      ret


:00470EAA 90                      nop
:00470EAB 90                      nop
:00470EAC 90                      nop
:00470EAD 90                      nop
:00470EAE 90                      nop
:00470EAF 90                      nop

* Referenced by a CALL at Address:
|:00470CCC   
|
:00470EB0 8B442404                mov eax, dword ptr [esp+04]
:00470EB4 C705FC714B0000000000    mov dword ptr [004B71FC], 00000000
:00470EBE 83F8FE                  cmp eax, FFFFFFFE
:00470EC1 7510                    jne 00470ED3
:00470EC3 C705FC714B0001000000    mov dword ptr [004B71FC], 00000001

* Reference To: KERNEL32.GetOEMCP, Ord:0109h
                                  |
:00470ECD FF2590854B00            Jmp dword ptr [004B8590]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470EC1(C)
|
:00470ED3 83F8FD                  cmp eax, FFFFFFFD
:00470ED6 7510                    jne 00470EE8
:00470ED8 C705FC714B0001000000    mov dword ptr [004B71FC], 00000001

* Reference To: KERNEL32.GetACP, Ord:009Dh
                                  |
:00470EE2 FF25A0854B00            Jmp dword ptr [004B85A0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470ED6(C)
|
:00470EE8 83F8FC                  cmp eax, FFFFFFFC
:00470EEB 750F                    jne 00470EFC
:00470EED A150724B00              mov eax, dword ptr [004B7250]
:00470EF2 C705FC714B0001000000    mov dword ptr [004B71FC], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470EEB(C)
|
:00470EFC C3                      ret
:00470EFD 90                      nop
:00470EFE 90                      nop
:00470EFF 90                      nop

* Referenced by a CALL at Addresses:
|:00470DA9   , :00470E6D   
|
:00470F00 8B442404                mov eax, dword ptr [esp+04]
:00470F04 055CFCFFFF              add eax, FFFFFC5C
:00470F09 83F812                  cmp eax, 00000012
:00470F0C 7727                    ja 00470F35
:00470F0E 33C9                    xor ecx, ecx
:00470F10 8A884C0F4700            mov cl, byte ptr [eax+00470F4C]
:00470F16 FF248D380F4700          jmp dword ptr [4*ecx+00470F38]
:00470F1D B811040000              mov eax, 00000411
:00470F22 C3                      ret


:00470F23 B804080000              mov eax, 00000804
:00470F28 C3                      ret


:00470F29 B812040000              mov eax, 00000412
:00470F2E C3                      ret



* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:00470F2F B804040000              mov eax, 00000404
:00470F34 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470F0C(C)
|
:00470F35 33C0                    xor eax, eax
:00470F37 C3                      ret



:00470F38 1D0F4700                DWORD 00470F1D
:00470F3C 230F4700                DWORD 00470F23
:00470F40 290F4700                DWORD 00470F29
:00470F44 2F0F4700                DWORD 00470F2F
:00470F48 350F4700                DWORD 00470F35


:00470F4C 000404                  add byte ptr [esp+eax], al
:00470F4F 0401                    add al, 01
:00470F51 0404                    add al, 04
:00470F53 0404                    add al, 04
:00470F55 0404                    add al, 04
:00470F57 0404                    add al, 04
:00470F59 0404                    add al, 04
:00470F5B 0404                    add al, 04
:00470F5D 0203                    add al, byte ptr [ebx]
:00470F5F 90                      nop

* Referenced by a CALL at Addresses:
|:00470CF3   , :00470DEA   
|
:00470F60 57                      push edi
:00470F61 B940000000              mov ecx, 00000040
:00470F66 33C0                    xor eax, eax
:00470F68 BFE0704B00              mov edi, 004B70E0
:00470F6D F3                      repz
:00470F6E AB                      stosd
:00470F6F AA                      stosb
:00470F70 33C0                    xor eax, eax
:00470F72 5F                      pop edi
:00470F73 A3E4714B00              mov dword ptr [004B71E4], eax
:00470F78 A3E8714B00              mov dword ptr [004B71E8], eax
:00470F7D A3F0714B00              mov dword ptr [004B71F0], eax
:00470F82 A3F4714B00              mov dword ptr [004B71F4], eax
:00470F87 A3F8714B00              mov dword ptr [004B71F8], eax
:00470F8C C3                      ret


:00470F8D 90                      nop
:00470F8E 90                      nop
:00470F8F 90                      nop

* Referenced by a CALL at Address:
|:0046E6D6   
|
:00470F90 6AFD                    push FFFFFFFD
:00470F92 E829FDFFFF              call 00470CC0
:00470F97 83C404                  add esp, 00000004
:00470F9A C3                      ret


:00470F9B 90                      nop
:00470F9C 90                      nop
:00470F9D 90                      nop
:00470F9E 90                      nop
:00470F9F 90                      nop

* Referenced by a CALL at Address:
|:0046E6D1   
|
:00470FA0 83EC48                  sub esp, 00000048
:00470FA3 53                      push ebx
:00470FA4 55                      push ebp
:00470FA5 56                      push esi
:00470FA6 57                      push edi
:00470FA7 6800010000              push 00000100
:00470FAC E8DFCFFFFF              call 0046DF90
:00470FB1 8BF0                    mov esi, eax
:00470FB3 83C404                  add esp, 00000004
:00470FB6 85F6                    test esi, esi
:00470FB8 750A                    jne 00470FC4
:00470FBA 6A1B                    push 0000001B
:00470FBC E83FD8FFFF              call 0046E800
:00470FC1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FB8(C)
|
:00470FC4 8D8600010000            lea eax, dword ptr [esi+00000100]
:00470FCA 8935C0794B00            mov dword ptr [004B79C0], esi
:00470FD0 3BF0                    cmp esi, eax
:00470FD2 C705C07A4B0020000000    mov dword ptr [004B7AC0], 00000020
:00470FDC B30A                    mov bl, 0A
:00470FDE 7320                    jnb 00471000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FFE(C)
|
:00470FE0 C6460400                mov [esi+04], 00
:00470FE4 C706FFFFFFFF            mov dword ptr [esi], FFFFFFFF
:00470FEA 885E05                  mov byte ptr [esi+05], bl
:00470FED 8B0DC0794B00            mov ecx, dword ptr [004B79C0]
:00470FF3 83C608                  add esi, 00000008
:00470FF6 81C100010000            add ecx, 00000100
:00470FFC 3BF1                    cmp esi, ecx
:00470FFE 72E0                    jb 00470FE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FDE(C)
|
:00471000 8D542414                lea edx, dword ptr [esp+14]
:00471004 52                      push edx

* Reference To: KERNEL32.GetStartupInfoA, Ord:0128h
                                  |
:00471005 FF15F4854B00            Call dword ptr [004B85F4]
:0047100B 66837C244600            cmp word ptr [esp+46], 0000
:00471011 0F84F2000000            je 00471109
:00471017 8B442448                mov eax, dword ptr [esp+48]
:0047101B 85C0                    test eax, eax
:0047101D 0F84E6000000            je 00471109
:00471023 8B08                    mov ecx, dword ptr [eax]
:00471025 8D7804                  lea edi, dword ptr [eax+04]
:00471028 81F900080000            cmp ecx, 00000800
:0047102E 894C2410                mov dword ptr [esp+10], ecx
:00471032 8D2C0F                  lea ebp, dword ptr [edi+ecx]
:00471035 7C08                    jl 0047103F
:00471037 C744241000080000        mov [esp+10], 00000800

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471035(C)
|
:0047103F 8B442410                mov eax, dword ptr [esp+10]
:00471043 8B0DC07A4B00            mov ecx, dword ptr [004B7AC0]
:00471049 3BC8                    cmp ecx, eax
:0047104B 7D69                    jge 004710B6
:0047104D BEC4794B00              mov esi, 004B79C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004710A8(C)
|
:00471052 6800010000              push 00000100
:00471057 E834CFFFFF              call 0046DF90
:0047105C 83C404                  add esp, 00000004
:0047105F 85C0                    test eax, eax
:00471061 7449                    je 004710AC
:00471063 8B0DC07A4B00            mov ecx, dword ptr [004B7AC0]
:00471069 8906                    mov dword ptr [esi], eax
:0047106B 83C120                  add ecx, 00000020
:0047106E 890DC07A4B00            mov dword ptr [004B7AC0], ecx
:00471074 8D8800010000            lea ecx, dword ptr [eax+00000100]
:0047107A 3BC1                    cmp eax, ecx
:0047107C 731C                    jnb 0047109A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471098(C)
|
:0047107E C6400400                mov [eax+04], 00
:00471082 C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:00471088 885805                  mov byte ptr [eax+05], bl
:0047108B 8B16                    mov edx, dword ptr [esi]
:0047108D 83C008                  add eax, 00000008
:00471090 81C200010000            add edx, 00000100
:00471096 3BC2                    cmp eax, edx
:00471098 72E4                    jb 0047107E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047107C(C)
|
:0047109A A1C07A4B00              mov eax, dword ptr [004B7AC0]
:0047109F 8B4C2410                mov ecx, dword ptr [esp+10]
:004710A3 83C604                  add esi, 00000004
:004710A6 3BC1                    cmp eax, ecx
:004710A8 7CA8                    jl 00471052
:004710AA EB0A                    jmp 004710B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471061(C)
|
:004710AC 8B0DC07A4B00            mov ecx, dword ptr [004B7AC0]
:004710B2 894C2410                mov dword ptr [esp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047104B(C), :004710AA(U)
|
:004710B6 8B442410                mov eax, dword ptr [esp+10]
:004710BA 33F6                    xor esi, esi
:004710BC 85C0                    test eax, eax
:004710BE 7E49                    jle 00471109

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471107(C)
|
:004710C0 8B4D00                  mov ecx, dword ptr [ebp+00]
:004710C3 83F9FF                  cmp ecx, FFFFFFFF
:004710C6 7434                    je 004710FC
:004710C8 8A07                    mov al, byte ptr [edi]
:004710CA A801                    test al, 01
:004710CC 742E                    je 004710FC
:004710CE A808                    test al, 08
:004710D0 750B                    jne 004710DD
:004710D2 51                      push ecx

* Reference To: KERNEL32.GetFileType, Ord:00EFh
                                  |
:004710D3 FF1584854B00            Call dword ptr [004B8584]
:004710D9 85C0                    test eax, eax
:004710DB 741F                    je 004710FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004710D0(C)
|
:004710DD 8BD6                    mov edx, esi
:004710DF 8BC6                    mov eax, esi
:004710E1 C1FA05                  sar edx, 05
:004710E4 83E01F                  and eax, 0000001F
:004710E7 8B0C95C0794B00          mov ecx, dword ptr [4*edx+004B79C0]
:004710EE 8B5500                  mov edx, dword ptr [ebp+00]
:004710F1 8914C1                  mov dword ptr [ecx+8*eax], edx
:004710F4 8D04C1                  lea eax, dword ptr [ecx+8*eax]
:004710F7 8A0F                    mov cl, byte ptr [edi]
:004710F9 884804                  mov byte ptr [eax+04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004710C6(C), :004710CC(C), :004710DB(C)
|
:004710FC 8B442410                mov eax, dword ptr [esp+10]
:00471100 46                      inc esi
:00471101 47                      inc edi
:00471102 83C504                  add ebp, 00000004
:00471105 3BF0                    cmp esi, eax
:00471107 7CB7                    jl 004710C0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471011(C), :0047101D(C), :004710BE(C)
|

* Reference To: KERNEL32.GetStdHandle, Ord:012Ah
                                  |
:00471109 8B2D94854B00            mov ebp, dword ptr [004B8594]
:0047110F 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471182(C)
|
:00471111 8B15C0794B00            mov edx, dword ptr [004B79C0]
:00471117 8B04DA                  mov eax, dword ptr [edx+8*ebx]
:0047111A 8D34DA                  lea esi, dword ptr [edx+8*ebx]
:0047111D 83F8FF                  cmp eax, FFFFFFFF
:00471120 7554                    jne 00471176
:00471122 85DB                    test ebx, ebx
:00471124 C6460481                mov [esi+04], 81
:00471128 7507                    jne 00471131
:0047112A B8F6FFFFFF              mov eax, FFFFFFF6
:0047112F EB0A                    jmp 0047113B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471128(C)
|
:00471131 8BC3                    mov eax, ebx
:00471133 48                      dec eax
:00471134 F7D8                    neg eax
:00471136 1BC0                    sbb eax, eax
:00471138 83C0F5                  add eax, FFFFFFF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047112F(U)
|
:0047113B 50                      push eax
:0047113C FFD5                    call ebp
:0047113E 8BF8                    mov edi, eax
:00471140 83FFFF                  cmp edi, FFFFFFFF
:00471143 742A                    je 0047116F
:00471145 57                      push edi

* Reference To: KERNEL32.GetFileType, Ord:00EFh
                                  |
:00471146 FF1584854B00            Call dword ptr [004B8584]
:0047114C 85C0                    test eax, eax
:0047114E 741F                    je 0047116F
:00471150 25FF000000              and eax, 000000FF
:00471155 893E                    mov dword ptr [esi], edi
:00471157 83F802                  cmp eax, 00000002
:0047115A 7507                    jne 00471163
:0047115C 8A4604                  mov al, byte ptr [esi+04]
:0047115F 0C40                    or al, 40
:00471161 EB18                    jmp 0047117B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047115A(C)
|
:00471163 83F803                  cmp eax, 00000003
:00471166 7516                    jne 0047117E
:00471168 8A4604                  mov al, byte ptr [esi+04]
:0047116B 0C08                    or al, 08
:0047116D EB0C                    jmp 0047117B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471143(C), :0047114E(C)
|
:0047116F 8A4604                  mov al, byte ptr [esi+04]
:00471172 0C40                    or al, 40
:00471174 EB05                    jmp 0047117B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471120(C)
|
:00471176 8A4604                  mov al, byte ptr [esi+04]
:00471179 0C80                    or al, 80

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471161(U), :0047116D(U), :00471174(U)
|
:0047117B 884604                  mov byte ptr [esi+04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471166(C)
|
:0047117E 43                      inc ebx
:0047117F 83FB03                  cmp ebx, 00000003
:00471182 7C8D                    jl 00471111
:00471184 A1C07A4B00              mov eax, dword ptr [004B7AC0]
:00471189 50                      push eax

* Reference To: KERNEL32.SetHandleCount, Ord:021Bh
                                  |
:0047118A FF158C854B00            Call dword ptr [004B858C]
:00471190 5F                      pop edi
:00471191 5E                      pop esi
:00471192 5D                      pop ebp
:00471193 5B                      pop ebx
:00471194 83C448                  add esp, 00000048
:00471197 C3                      ret


:00471198 90                      nop
:00471199 90                      nop
:0047119A 90                      nop
:0047119B 90                      nop
:0047119C 90                      nop
:0047119D 90                      nop
:0047119E 90                      nop
:0047119F 90                      nop

* Referenced by a CALL at Address:
|:0046E809   
|
:004711A0 A1506F4B00              mov eax, dword ptr [004B6F50]
:004711A5 83F801                  cmp eax, 00000001
:004711A8 740D                    je 004711B7
:004711AA 85C0                    test eax, eax
:004711AC 752E                    jne 004711DC
:004711AE 833D24EA470001          cmp dword ptr [0047EA24], 00000001
:004711B5 7525                    jne 004711DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711A8(C)
|
:004711B7 68FC000000              push 000000FC
:004711BC E81F000000              call 004711E0
:004711C1 A100724B00              mov eax, dword ptr [004B7200]
:004711C6 83C404                  add esp, 00000004
:004711C9 85C0                    test eax, eax
:004711CB 7402                    je 004711CF
:004711CD FFD0                    call eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711CB(C)
|

* Possible Reference to Dialog: DialogID_0129, CONTROL_ID:00FF, ""
                                  |
:004711CF 68FF000000              push 000000FF
:004711D4 E807000000              call 004711E0
:004711D9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004711AC(C), :004711B5(C)
|
:004711DC C3                      ret
:004711DD 90                      nop
:004711DE 90                      nop
:004711DF 90                      nop

* Referenced by a CALL at Addresses:
|:0046E813   , :004711BC   , :004711D4   , :004714B2   
|
:004711E0 8B4C2404                mov ecx, dword ptr [esp+04]
:004711E4 81ECA8010000            sub esp, 000001A8

* Possible StringData Ref from Data Obj ->""
                                  |
:004711EA B8080C4800              mov eax, 00480C08
:004711EF 53                      push ebx
:004711F0 55                      push ebp
:004711F1 56                      push esi
:004711F2 57                      push edi
:004711F3 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471202(C)
|
:004711F5 3B08                    cmp ecx, dword ptr [eax]
:004711F7 740B                    je 00471204
:004711F9 83C008                  add eax, 00000008
:004711FC 45                      inc ebp
:004711FD 3D980C4800              cmp eax, 00480C98
:00471202 72F1                    jb 004711F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711F7(C)
|
:00471204 3B0CED080C4800          cmp ecx, dword ptr [8*ebp+00480C08]
:0047120B 0F859A010000            jne 004713AB
:00471211 A1506F4B00              mov eax, dword ptr [004B6F50]
:00471216 83F801                  cmp eax, 00000001
:00471219 0F844E010000            je 0047136D
:0047121F 85C0                    test eax, eax
:00471221 750D                    jne 00471230
:00471223 833D24EA470001          cmp dword ptr [0047EA24], 00000001
:0047122A 0F843D010000            je 0047136D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471221(C)
|
:00471230 81F9FC000000            cmp ecx, 000000FC
:00471236 0F846F010000            je 004713AB
:0047123C 8D8424B4000000          lea eax, dword ptr [esp+000000B4]
:00471243 6804010000              push 00000104
:00471248 50                      push eax
:00471249 6A00                    push 00000000

* Reference To: KERNEL32.GetModuleFileNameA, Ord:00FCh
                                  |
:0047124B FF15B4854B00            Call dword ptr [004B85B4]
:00471251 85C0                    test eax, eax
:00471253 7516                    jne 0047126B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00471255 B905000000              mov ecx, 00000005
:0047125A BE68514700              mov esi, 00475168
:0047125F 8DBC24B4000000          lea edi, dword ptr [esp+000000B4]
:00471266 F3                      repz
:00471267 A5                      movsd
:00471268 66A5                    movsw
:0047126A A4                      movsb

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471253(C)
|
:0047126B 8DBC24B4000000          lea edi, dword ptr [esp+000000B4]
:00471272 83C9FF                  or ecx, FFFFFFFF
:00471275 33C0                    xor eax, eax
:00471277 8D9C24B4000000          lea ebx, dword ptr [esp+000000B4]
:0047127E F2                      repnz
:0047127F AE                      scasb
:00471280 F7D1                    not ecx
:00471282 83F93C                  cmp ecx, 0000003C
:00471285 762D                    jbe 004712B4
:00471287 8DBC24B4000000          lea edi, dword ptr [esp+000000B4]
:0047128E 83C9FF                  or ecx, FFFFFFFF
:00471291 F2                      repnz
:00471292 AE                      scasb
:00471293 F7D1                    not ecx
:00471295 49                      dec ecx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00471296 6A03                    push 00000003
:00471298 8BD9                    mov ebx, ecx
:0047129A 8D8C24B8000000          lea ecx, dword ptr [esp+000000B8]
:004712A1 83E93B                  sub ecx, 0000003B
:004712A4 6864514700              push 00475164
:004712A9 03D9                    add ebx, ecx
:004712AB 53                      push ebx
:004712AC E8EF0C0000              call 00471FA0
:004712B1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471285(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:004712B4 B906000000              mov ecx, 00000006
:004712B9 BE48514700              mov esi, 00475148
:004712BE 8D7C2414                lea edi, dword ptr [esp+14]
:004712C2 33C0                    xor eax, eax
:004712C4 F3                      repz
:004712C5 A5                      movsd
:004712C6 66A5                    movsw
:004712C8 83C9FF                  or ecx, FFFFFFFF
:004712CB 8BFB                    mov edi, ebx
:004712CD F2                      repnz
:004712CE AE                      scasb
:004712CF F7D1                    not ecx
:004712D1 2BF9                    sub edi, ecx
:004712D3 8D542414                lea edx, dword ptr [esp+14]
:004712D7 8BD9                    mov ebx, ecx
:004712D9 8BF7                    mov esi, edi
:004712DB 83C9FF                  or ecx, FFFFFFFF
:004712DE 8BFA                    mov edi, edx
:004712E0 F2                      repnz
:004712E1 AE                      scasb
:004712E2 8BCB                    mov ecx, ebx
:004712E4 4F                      dec edi
:004712E5 C1E902                  shr ecx, 02
:004712E8 F3                      repz
:004712E9 A5                      movsd
:004712EA 8BCB                    mov ecx, ebx
:004712EC 8D542414                lea edx, dword ptr [esp+14]
:004712F0 83E103                  and ecx, 00000003
:004712F3 6810200100              push 00012010
:004712F8 F3                      repz
:004712F9 A4                      movsb
:004712FA BF44514700              mov edi, 00475144
:004712FF 83C9FF                  or ecx, FFFFFFFF
:00471302 F2                      repnz
:00471303 AE                      scasb
:00471304 F7D1                    not ecx
:00471306 2BF9                    sub edi, ecx
:00471308 681C514700              push 0047511C
:0047130D 8BF7                    mov esi, edi
:0047130F 8BD9                    mov ebx, ecx
:00471311 8BFA                    mov edi, edx
:00471313 83C9FF                  or ecx, FFFFFFFF
:00471316 F2                      repnz
:00471317 AE                      scasb
:00471318 8BCB                    mov ecx, ebx
:0047131A 4F                      dec edi
:0047131B C1E902                  shr ecx, 02
:0047131E F3                      repz
:0047131F A5                      movsd
:00471320 8BCB                    mov ecx, ebx
:00471322 8D54241C                lea edx, dword ptr [esp+1C]
:00471326 83E103                  and ecx, 00000003
:00471329 F3                      repz
:0047132A A4                      movsb
:0047132B 8B3CED0C0C4800          mov edi, dword ptr [8*ebp+00480C0C]
:00471332 83C9FF                  or ecx, FFFFFFFF
:00471335 F2                      repnz
:00471336 AE                      scasb
:00471337 F7D1                    not ecx
:00471339 2BF9                    sub edi, ecx
:0047133B 8BF7                    mov esi, edi
:0047133D 8BD9                    mov ebx, ecx
:0047133F 8BFA                    mov edi, edx
:00471341 83C9FF                  or ecx, FFFFFFFF
:00471344 F2                      repnz
:00471345 AE                      scasb
:00471346 8BCB                    mov ecx, ebx
:00471348 4F                      dec edi
:00471349 C1E902                  shr ecx, 02
:0047134C F3                      repz
:0047134D A5                      movsd
:0047134E 8BCB                    mov ecx, ebx
:00471350 8D44241C                lea eax, dword ptr [esp+1C]
:00471354 83E103                  and ecx, 00000003
:00471357 50                      push eax
:00471358 F3                      repz
:00471359 A4                      movsb
:0047135A E8B10B0000              call 00471F10
:0047135F 83C40C                  add esp, 0000000C
:00471362 5F                      pop edi
:00471363 5E                      pop esi
:00471364 5D                      pop ebp
:00471365 5B                      pop ebx
:00471366 81C4A8010000            add esp, 000001A8
:0047136C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471219(C), :0047122A(C)
|
:0047136D A1C0794B00              mov eax, dword ptr [004B79C0]
:00471372 85C0                    test eax, eax
:00471374 7408                    je 0047137E
:00471376 8B7010                  mov esi, dword ptr [eax+10]
:00471379 83FEFF                  cmp esi, FFFFFFFF
:0047137C 750A                    jne 00471388

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471374(C)
|
:0047137E 6AF4                    push FFFFFFF4

* Reference To: KERNEL32.GetStdHandle, Ord:012Ah
                                  |
:00471380 FF1594854B00            Call dword ptr [004B8594]
:00471386 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047137C(C)
|
:00471388 8B14ED0C0C4800          mov edx, dword ptr [8*ebp+00480C0C]
:0047138F 8D4C2410                lea ecx, dword ptr [esp+10]
:00471393 6A00                    push 00000000
:00471395 51                      push ecx
:00471396 8BFA                    mov edi, edx
:00471398 83C9FF                  or ecx, FFFFFFFF
:0047139B 33C0                    xor eax, eax
:0047139D F2                      repnz
:0047139E AE                      scasb
:0047139F F7D1                    not ecx
:004713A1 49                      dec ecx
:004713A2 51                      push ecx
:004713A3 52                      push edx
:004713A4 56                      push esi

* Reference To: KERNEL32.WriteFile, Ord:027Bh
                                  |
:004713A5 FF154C854B00            Call dword ptr [004B854C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047120B(C), :00471236(C)
|
:004713AB 5F                      pop edi
:004713AC 5E                      pop esi
:004713AD 5D                      pop ebp
:004713AE 5B                      pop ebx
:004713AF 81C4A8010000            add esp, 000001A8
:004713B5 C3                      ret


:004713B6 90                      nop
:004713B7 90                      nop
:004713B8 90                      nop
:004713B9 90                      nop
:004713BA 90                      nop
:004713BB 90                      nop
:004713BC 90                      nop
:004713BD 90                      nop
:004713BE 90                      nop
:004713BF 90                      nop
:004713C0 56                      push esi
:004713C1 8B742408                mov esi, dword ptr [esp+08]
:004713C5 8B06                    mov eax, dword ptr [esi]
:004713C7 813863736DE0            cmp dword ptr [eax], E06D7363
:004713CD 751D                    jne 004713EC
:004713CF 83781003                cmp dword ptr [eax+10], 00000003
:004713D3 7517                    jne 004713EC
:004713D5 81781420059319          cmp dword ptr [eax+14], 19930520
:004713DC 750E                    jne 004713EC
:004713DE E8BDE1FFFF              call 0046F5A0
:004713E3 B801000000              mov eax, 00000001
:004713E8 5E                      pop esi
:004713E9 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004713CD(C), :004713D3(C), :004713DC(C)
|
:004713EC A104724B00              mov eax, dword ptr [004B7204]
:004713F1 85C0                    test eax, eax
:004713F3 7418                    je 0047140D
:004713F5 50                      push eax
:004713F6 E895000000              call 00471490
:004713FB 83C404                  add esp, 00000004
:004713FE 85C0                    test eax, eax
:00471400 740B                    je 0047140D
:00471402 56                      push esi
:00471403 FF1504724B00            call dword ptr [004B7204]
:00471409 5E                      pop esi
:0047140A C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004713F3(C), :00471400(C)
|
:0047140D 33C0                    xor eax, eax
:0047140F 5E                      pop esi
:00471410 C20400                  ret 0004


:00471413 90                      nop
:00471414 90                      nop
:00471415 90                      nop
:00471416 90                      nop
:00471417 90                      nop
:00471418 90                      nop
:00471419 90                      nop
:0047141A 90                      nop
:0047141B 90                      nop
:0047141C 90                      nop
:0047141D 90                      nop
:0047141E 90                      nop
:0047141F 90                      nop
:00471420 68C0134700              push 004713C0

* Reference To: KERNEL32.SetUnhandledExceptionFilter, Ord:0236h
                                  |
:00471425 FF1580854B00            Call dword ptr [004B8580]
:0047142B A304724B00              mov dword ptr [004B7204], eax
:00471430 C3                      ret


:00471431 90                      nop
:00471432 90                      nop
:00471433 90                      nop
:00471434 90                      nop
:00471435 90                      nop
:00471436 90                      nop
:00471437 90                      nop
:00471438 90                      nop
:00471439 90                      nop
:0047143A 90                      nop
:0047143B 90                      nop
:0047143C 90                      nop
:0047143D 90                      nop
:0047143E 90                      nop
:0047143F 90                      nop
:00471440 A104724B00              mov eax, dword ptr [004B7204]
:00471445 50                      push eax

* Reference To: KERNEL32.SetUnhandledExceptionFilter, Ord:0236h
                                  |
:00471446 FF1580854B00            Call dword ptr [004B8580]
:0047144C C3                      ret


:0047144D 90                      nop
:0047144E 90                      nop
:0047144F 90                      nop

* Referenced by a CALL at Addresses:
|:0046EC90   , :0046F2F6   , :0046F346   , :0046F3B2   , :0046F3F8   
|
:00471450 8B442408                mov eax, dword ptr [esp+08]
:00471454 8B4C2404                mov ecx, dword ptr [esp+04]
:00471458 56                      push esi
:00471459 50                      push eax
:0047145A 51                      push ecx
:0047145B BE01000000              mov esi, 00000001

* Reference To: KERNEL32.IsBadReadPtr, Ord:0183h
                                  |
:00471460 FF1588854B00            Call dword ptr [004B8588]
:00471466 85C0                    test eax, eax
:00471468 7402                    je 0047146C
:0047146A 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471468(C)
|
:0047146C 8BC6                    mov eax, esi
:0047146E 5E                      pop esi
:0047146F C3                      ret



* Referenced by a CALL at Addresses:
|:0046F309   , :0046F359   , :0046F3C5   , :0046F407   
|
:00471470 8B442408                mov eax, dword ptr [esp+08]
:00471474 8B4C2404                mov ecx, dword ptr [esp+04]
:00471478 56                      push esi
:00471479 50                      push eax
:0047147A 51                      push ecx
:0047147B BE01000000              mov esi, 00000001

* Reference To: KERNEL32.IsBadWritePtr, Ord:0186h
                                  |
:00471480 FF157C854B00            Call dword ptr [004B857C]
:00471486 85C0                    test eax, eax
:00471488 7402                    je 0047148C
:0047148A 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471488(C)
|
:0047148C 8BC6                    mov eax, esi
:0047148E 5E                      pop esi
:0047148F C3                      ret



* Referenced by a CALL at Addresses:
|:0046F417   , :004713F6   
|
:00471490 8B442404                mov eax, dword ptr [esp+04]
:00471494 56                      push esi
:00471495 50                      push eax
:00471496 BE01000000              mov esi, 00000001

* Reference To: KERNEL32.IsBadCodePtr, Ord:0180h
                                  |
:0047149B FF1578854B00            Call dword ptr [004B8578]
:004714A1 85C0                    test eax, eax
:004714A3 7402                    je 004714A7
:004714A5 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004714A3(C)
|
:004714A7 8BC6                    mov eax, esi
:004714A9 5E                      pop esi
:004714AA C3                      ret


:004714AB 90                      nop
:004714AC 90                      nop
:004714AD 90                      nop
:004714AE 90                      nop
:004714AF 90                      nop

* Referenced by a CALL at Address:
|:0046F60E   
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004714B0 6A0A                    push 0000000A
:004714B2 E829FDFFFF              call 004711E0
:004714B7 83C404                  add esp, 00000004
:004714BA 6A16                    push 00000016
:004714BC E8DF0B0000              call 004720A0
:004714C1 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004714C4 6A03                    push 00000003
:004714C6 E855D5FFFF              call 0046EA20
:004714CB 83C404                  add esp, 00000004
:004714CE C3                      ret


:004714CF 90                      nop

* Referenced by a CALL at Address:
|:0047151F   
|
:004714D0 55                      push ebp
:004714D1 8BEC                    mov ebp, esp
:004714D3 51                      push ecx
:004714D4 56                      push esi
:004714D5 9B                      wait
:004714D6 D97DFC                  fstcw word ptr [ebp-04]
:004714D9 8B45FC                  mov eax, dword ptr [ebp-04]
:004714DC 50                      push eax
:004714DD E84E000000              call 00471530
:004714E2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004714E5 8B5508                  mov edx, dword ptr [ebp+08]
:004714E8 8BF1                    mov esi, ecx
:004714EA 83C404                  add esp, 00000004
:004714ED F7D1                    not ecx
:004714EF 23F2                    and esi, edx
:004714F1 23C8                    and ecx, eax
:004714F3 0BF1                    or esi, ecx
:004714F5 56                      push esi
:004714F6 E8D5000000              call 004715D0
:004714FB 83C404                  add esp, 00000004
:004714FE 89450C                  mov dword ptr [ebp+0C], eax
:00471501 D96D0C                  fldcw  [ebp+0C]
:00471504 8BC6                    mov eax, esi
:00471506 5E                      pop esi
:00471507 8BE5                    mov esp, ebp
:00471509 5D                      pop ebp
:0047150A C3                      ret


:0047150B 90                      nop
:0047150C 90                      nop
:0047150D 90                      nop
:0047150E 90                      nop
:0047150F 90                      nop

* Referenced by a CALL at Address:
|:0046FF1A   
|
:00471510 8B442408                mov eax, dword ptr [esp+08]
:00471514 8B4C2404                mov ecx, dword ptr [esp+04]
:00471518 25FFFFF7FF              and eax, FFF7FFFF
:0047151D 50                      push eax
:0047151E 51                      push ecx
:0047151F E8ACFFFFFF              call 004714D0
:00471524 83C408                  add esp, 00000008
:00471527 C3                      ret


:00471528 90                      nop
:00471529 90                      nop
:0047152A 90                      nop
:0047152B 90                      nop
:0047152C 90                      nop
:0047152D 90                      nop
:0047152E 90                      nop
:0047152F 90                      nop

* Referenced by a CALL at Address:
|:004714DD   
|
:00471530 53                      push ebx
:00471531 8B5C2408                mov ebx, dword ptr [esp+08]
:00471535 33C0                    xor eax, eax
:00471537 F6C301                  test bl, 01
:0047153A 7405                    je 00471541

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0047153C B810000000              mov eax, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047153A(C)
|
:00471541 F6C304                  test bl, 04
:00471544 7402                    je 00471548
:00471546 0C08                    or al, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471544(C)
|
:00471548 F6C308                  test bl, 08
:0047154B 7402                    je 0047154F
:0047154D 0C04                    or al, 04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047154B(C)
|
:0047154F F6C310                  test bl, 10
:00471552 7402                    je 00471556
:00471554 0C02                    or al, 02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471552(C)
|
:00471556 F6C320                  test bl, 20
:00471559 7402                    je 0047155D
:0047155B 0C01                    or al, 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471559(C)
|
:0047155D F6C302                  test bl, 02
:00471560 7405                    je 00471567
:00471562 0D00000800              or eax, 00080000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471560(C)
|
:00471567 8BD3                    mov edx, ebx
:00471569 81E2FFFF0000            and edx, 0000FFFF
:0047156F 8BCA                    mov ecx, edx
:00471571 81E1000C0000            and ecx, 00000C00
:00471577 81F900040000            cmp ecx, 00000400
:0047157D 7F07                    jg 00471586
:0047157F 751D                    jne 0047159E
:00471581 80CC01                  or ah, 01
:00471584 EB18                    jmp 0047159E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047157D(C)
|
:00471586 81F900080000            cmp ecx, 00000800
:0047158C 740D                    je 0047159B
:0047158E 81F9000C0000            cmp ecx, 00000C00
:00471594 7508                    jne 0047159E
:00471596 80CC03                  or ah, 03
:00471599 EB03                    jmp 0047159E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047158C(C)
|
:0047159B 80CC02                  or ah, 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047157F(C), :00471584(U), :00471594(C), :00471599(U)
|
:0047159E 81E200030000            and edx, 00000300
:004715A4 740F                    je 004715B5
:004715A6 81FA00020000            cmp edx, 00000200
:004715AC 750C                    jne 004715BA
:004715AE 0D00000100              or eax, 00010000
:004715B3 EB05                    jmp 004715BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715A4(C)
|
:004715B5 0D00000200              or eax, 00020000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004715AC(C), :004715B3(U)
|
:004715BA F6C710                  test bh, 10
:004715BD 7405                    je 004715C4
:004715BF 0D00000400              or eax, 00040000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715BD(C)
|
:004715C4 5B                      pop ebx
:004715C5 C3                      ret


:004715C6 90                      nop
:004715C7 90                      nop
:004715C8 90                      nop
:004715C9 90                      nop
:004715CA 90                      nop
:004715CB 90                      nop
:004715CC 90                      nop
:004715CD 90                      nop
:004715CE 90                      nop
:004715CF 90                      nop

* Referenced by a CALL at Address:
|:004714F6   
|
:004715D0 8B542404                mov edx, dword ptr [esp+04]
:004715D4 33C0                    xor eax, eax
:004715D6 F6C210                  test dl, 10
:004715D9 7405                    je 004715E0
:004715DB B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715D9(C)
|
:004715E0 F6C208                  test dl, 08
:004715E3 7402                    je 004715E7
:004715E5 0C04                    or al, 04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715E3(C)
|
:004715E7 F6C204                  test dl, 04
:004715EA 7402                    je 004715EE
:004715EC 0C08                    or al, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715EA(C)
|
:004715EE F6C202                  test dl, 02
:004715F1 7402                    je 004715F5
:004715F3 0C10                    or al, 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715F1(C)
|
:004715F5 F6C201                  test dl, 01
:004715F8 7402                    je 004715FC
:004715FA 0C20                    or al, 20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715F8(C)
|
:004715FC F7C200000800            test edx, 00080000
:00471602 7402                    je 00471606
:00471604 0C02                    or al, 02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471602(C)
|
:00471606 8BCA                    mov ecx, edx
:00471608 81E100030000            and ecx, 00000300
:0047160E 81F900010000            cmp ecx, 00000100
:00471614 7707                    ja 0047161D
:00471616 751D                    jne 00471635
:00471618 80CC04                  or ah, 04
:0047161B EB18                    jmp 00471635

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471614(C)
|
:0047161D 81F900020000            cmp ecx, 00000200
:00471623 740D                    je 00471632
:00471625 81F900030000            cmp ecx, 00000300
:0047162B 7508                    jne 00471635
:0047162D 80CC0C                  or ah, 0C
:00471630 EB03                    jmp 00471635

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471623(C)
|
:00471632 80CC08                  or ah, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471616(C), :0047161B(U), :0047162B(C), :00471630(U)
|
:00471635 8BCA                    mov ecx, edx
:00471637 81E100000300            and ecx, 00030000
:0047163D 740D                    je 0047164C
:0047163F 81F900000100            cmp ecx, 00010000
:00471645 7508                    jne 0047164F
:00471647 80CC02                  or ah, 02
:0047164A EB03                    jmp 0047164F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047163D(C)
|
:0047164C 80CC03                  or ah, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471645(C), :0047164A(U)
|
:0047164F F7C200000400            test edx, 00040000
:00471655 7403                    je 0047165A
:00471657 80CC10                  or ah, 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471655(C)
|
:0047165A C3                      ret
:0047165B 90                      nop
:0047165C 90                      nop
:0047165D 90                      nop
:0047165E 90                      nop
:0047165F 90                      nop

* Referenced by a CALL at Addresses:
|:0046FFD7   , :00471743   , :00472983   , :00472A48   , :00472AE7   
|:00472BDA   , :00472C3C   
|
:00471660 51                      push ecx
:00471661 8B4C2408                mov ecx, dword ptr [esp+08]
:00471665 56                      push esi
:00471666 8D4101                  lea eax, dword ptr [ecx+01]
:00471669 3D00010000              cmp eax, 00000100
:0047166E 7715                    ja 00471685

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00471670 8B15A80C4800            mov edx, dword ptr [00480CA8]
:00471676 33C0                    xor eax, eax
:00471678 668B044A                mov ax, word ptr [edx+2*ecx]
:0047167C 8B4C2410                mov ecx, dword ptr [esp+10]
:00471680 23C1                    and eax, ecx
:00471682 5E                      pop esi
:00471683 59                      pop ecx
:00471684 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047166E(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00471685 8B35A80C4800            mov esi, dword ptr [00480CA8]
:0047168B 8BC1                    mov eax, ecx
:0047168D C1F808                  sar eax, 08
:00471690 8BD0                    mov edx, eax
:00471692 81E2FF000000            and edx, 000000FF
:00471698 F644560180              test [esi+2*edx+01], 80
:0047169D 7414                    je 004716B3
:0047169F 8844240C                mov byte ptr [esp+0C], al
:004716A3 884C240D                mov byte ptr [esp+0D], cl
:004716A7 C644240E00              mov [esp+0E], 00

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004716AC B802000000              mov eax, 00000002
:004716B1 EB0E                    jmp 004716C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047169D(C)
|
:004716B3 884C240C                mov byte ptr [esp+0C], cl
:004716B7 C644240D00              mov [esp+0D], 00
:004716BC B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004716B1(U)
|
:004716C1 6A00                    push 00000000
:004716C3 8D4C2408                lea ecx, dword ptr [esp+08]
:004716C7 6A00                    push 00000000
:004716C9 51                      push ecx
:004716CA 8D542418                lea edx, dword ptr [esp+18]
:004716CE 50                      push eax
:004716CF 52                      push edx
:004716D0 6A01                    push 00000001
:004716D2 E8990B0000              call 00472270
:004716D7 83C418                  add esp, 00000018
:004716DA 85C0                    test eax, eax
:004716DC 7503                    jne 004716E1
:004716DE 5E                      pop esi
:004716DF 59                      pop ecx
:004716E0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004716DC(C)
|
:004716E1 8B442404                mov eax, dword ptr [esp+04]
:004716E5 8B4C2410                mov ecx, dword ptr [esp+10]
:004716E9 25FFFF0000              and eax, 0000FFFF
:004716EE 5E                      pop esi
:004716EF 23C1                    and eax, ecx
:004716F1 59                      pop ecx
:004716F2 C3                      ret


:004716F3 90                      nop
:004716F4 90                      nop
:004716F5 90                      nop
:004716F6 90                      nop
:004716F7 90                      nop
:004716F8 90                      nop
:004716F9 90                      nop
:004716FA 90                      nop
:004716FB 90                      nop
:004716FC 90                      nop
:004716FD 90                      nop
:004716FE 90                      nop
:004716FF 90                      nop

* Referenced by a CALL at Address:
|:0046FFB9   
|
:00471700 A140724B00              mov eax, dword ptr [004B7240]
:00471705 83EC08                  sub esp, 00000008
:00471708 85C0                    test eax, eax
:0047170A 53                      push ebx
:0047170B 751E                    jne 0047172B
:0047170D 8B442410                mov eax, dword ptr [esp+10]
:00471711 83F841                  cmp eax, 00000041
:00471714 0F8CDD000000            jl 004717F7
:0047171A 83F85A                  cmp eax, 0000005A
:0047171D 0F8FD4000000            jg 004717F7
:00471723 83C020                  add eax, 00000020
:00471726 5B                      pop ebx
:00471727 83C408                  add esp, 00000008
:0047172A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047170B(C)
|
:0047172B 8B5C2410                mov ebx, dword ptr [esp+10]
:0047172F 81FB00010000            cmp ebx, 00000100
:00471735 7D2C                    jge 00471763
:00471737 833D980C480001          cmp dword ptr [00480C98], 00000001
:0047173E 7E0D                    jle 0047174D
:00471740 6A01                    push 00000001
:00471742 53                      push ebx
:00471743 E818FFFFFF              call 00471660
:00471748 83C408                  add esp, 00000008
:0047174B EB0B                    jmp 00471758

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047173E(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:0047174D A1A80C4800              mov eax, dword ptr [00480CA8]
:00471752 8A0458                  mov al, byte ptr [eax+2*ebx]
:00471755 83E001                  and eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047174B(U)
|
:00471758 85C0                    test eax, eax
:0047175A 7507                    jne 00471763
:0047175C 8BC3                    mov eax, ebx
:0047175E 5B                      pop ebx
:0047175F 83C408                  add esp, 00000008
:00471762 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471735(C), :0047175A(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00471763 8B15A80C4800            mov edx, dword ptr [00480CA8]
:00471769 8BC3                    mov eax, ebx
:0047176B C1F808                  sar eax, 08
:0047176E 8BC8                    mov ecx, eax
:00471770 81E1FF000000            and ecx, 000000FF
:00471776 F6444A0180              test [edx+2*ecx+01], 80
:0047177B 7414                    je 00471791
:0047177D 88442410                mov byte ptr [esp+10], al
:00471781 885C2411                mov byte ptr [esp+11], bl
:00471785 C644241200              mov [esp+12], 00

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0047178A B802000000              mov eax, 00000002
:0047178F EB0E                    jmp 0047179F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047177B(C)
|
:00471791 885C2410                mov byte ptr [esp+10], bl
:00471795 C644241100              mov [esp+11], 00
:0047179A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047178F(U)
|
:0047179F 6A00                    push 00000000
:004717A1 8D4C2408                lea ecx, dword ptr [esp+08]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004717A5 6A03                    push 00000003
:004717A7 51                      push ecx
:004717A8 8D54241C                lea edx, dword ptr [esp+1C]
:004717AC 50                      push eax
:004717AD A140724B00              mov eax, dword ptr [004B7240]
:004717B2 52                      push edx
:004717B3 6800010000              push 00000100
:004717B8 50                      push eax
:004717B9 E8E20B0000              call 004723A0
:004717BE 83C41C                  add esp, 0000001C
:004717C1 85C0                    test eax, eax
:004717C3 7507                    jne 004717CC
:004717C5 8BC3                    mov eax, ebx
:004717C7 5B                      pop ebx
:004717C8 83C408                  add esp, 00000008
:004717CB C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004717C3(C)
|
:004717CC 83F801                  cmp eax, 00000001
:004717CF 750E                    jne 004717DF
:004717D1 8B442404                mov eax, dword ptr [esp+04]
:004717D5 25FF000000              and eax, 000000FF
:004717DA 5B                      pop ebx
:004717DB 83C408                  add esp, 00000008
:004717DE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004717CF(C)
|
:004717DF 8B442405                mov eax, dword ptr [esp+05]
:004717E3 8B4C2404                mov ecx, dword ptr [esp+04]
:004717E7 25FF000000              and eax, 000000FF
:004717EC 81E1FF000000            and ecx, 000000FF
:004717F2 C1E008                  shl eax, 08
:004717F5 0BC1                    or eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471714(C), :0047171D(C)
|
:004717F7 5B                      pop ebx
:004717F8 83C408                  add esp, 00000008
:004717FB C3                      ret


:004717FC 90                      nop
:004717FD 90                      nop
:004717FE 90                      nop
:004717FF 90                      nop

* Referenced by a CALL at Address:
|:00471930   
|
:00471800 8B4C2408                mov ecx, dword ptr [esp+08]
:00471804 56                      push esi
:00471805 8BC1                    mov eax, ecx
:00471807 99                      cdq
:00471808 83E21F                  and edx, 0000001F
:0047180B 03C2                    add eax, edx
:0047180D 8BF0                    mov esi, eax
:0047180F 8BC1                    mov eax, ecx
:00471811 99                      cdq
:00471812 33C2                    xor eax, edx
:00471814 B91F000000              mov ecx, 0000001F
:00471819 2BC2                    sub eax, edx
:0047181B 83E01F                  and eax, 0000001F
:0047181E 33C2                    xor eax, edx
:00471820 2BC2                    sub eax, edx
:00471822 83CAFF                  or edx, FFFFFFFF
:00471825 2BC8                    sub ecx, eax
:00471827 8B442408                mov eax, dword ptr [esp+08]
:0047182B D3E2                    shl edx, cl
:0047182D C1FE05                  sar esi, 05
:00471830 8B0CB0                  mov ecx, dword ptr [eax+4*esi]
:00471833 F7D2                    not edx
:00471835 85D1                    test ecx, edx
:00471837 7404                    je 0047183D
:00471839 33C0                    xor eax, eax
:0047183B 5E                      pop esi
:0047183C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471837(C)
|
:0047183D 46                      inc esi
:0047183E 83FE03                  cmp esi, 00000003
:00471841 7D1C                    jge 0047185F
:00471843 8D04B0                  lea eax, dword ptr [eax+4*esi]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471852(C)
|
:00471846 833800                  cmp dword ptr [eax], 00000000
:00471849 7510                    jne 0047185B
:0047184B 46                      inc esi
:0047184C 83C004                  add eax, 00000004
:0047184F 83FE03                  cmp esi, 00000003
:00471852 7CF2                    jl 00471846
:00471854 B801000000              mov eax, 00000001
:00471859 5E                      pop esi
:0047185A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471849(C)
|
:0047185B 33C0                    xor eax, eax
:0047185D 5E                      pop esi
:0047185E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471841(C)
|
:0047185F B801000000              mov eax, 00000001
:00471864 5E                      pop esi
:00471865 C3                      ret


:00471866 90                      nop
:00471867 90                      nop
:00471868 90                      nop
:00471869 90                      nop
:0047186A 90                      nop
:0047186B 90                      nop
:0047186C 90                      nop
:0047186D 90                      nop
:0047186E 90                      nop
:0047186F 90                      nop

* Referenced by a CALL at Address:
|:00471942   
|
:00471870 8B4C2408                mov ecx, dword ptr [esp+08]
:00471874 53                      push ebx
:00471875 8BC1                    mov eax, ecx
:00471877 56                      push esi
:00471878 99                      cdq
:00471879 83E21F                  and edx, 0000001F
:0047187C 8B5C240C                mov ebx, dword ptr [esp+0C]
:00471880 03C2                    add eax, edx
:00471882 57                      push edi
:00471883 8BF0                    mov esi, eax
:00471885 8BC1                    mov eax, ecx
:00471887 99                      cdq
:00471888 33C2                    xor eax, edx
:0047188A B91F000000              mov ecx, 0000001F
:0047188F 2BC2                    sub eax, edx
:00471891 83E01F                  and eax, 0000001F
:00471894 33C2                    xor eax, edx
:00471896 2BC2                    sub eax, edx
:00471898 2BC8                    sub ecx, eax
:0047189A B801000000              mov eax, 00000001
:0047189F C1FE05                  sar esi, 05
:004718A2 D3E0                    shl eax, cl
:004718A4 8B0CB3                  mov ecx, dword ptr [ebx+4*esi]
:004718A7 8D3CB3                  lea edi, dword ptr [ebx+4*esi]
:004718AA 57                      push edi
:004718AB 50                      push eax
:004718AC 51                      push ecx
:004718AD E83E0D0000              call 004725F0
:004718B2 83C40C                  add esp, 0000000C
:004718B5 4E                      dec esi
:004718B6 781D                    js 004718D5
:004718B8 8D3CB3                  lea edi, dword ptr [ebx+4*esi]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004718D3(C)
|
:004718BB 85C0                    test eax, eax
:004718BD 7416                    je 004718D5
:004718BF 8B17                    mov edx, dword ptr [edi]
:004718C1 57                      push edi
:004718C2 6A01                    push 00000001
:004718C4 52                      push edx
:004718C5 E8260D0000              call 004725F0
:004718CA 83C40C                  add esp, 0000000C
:004718CD 4E                      dec esi
:004718CE 83EF04                  sub edi, 00000004
:004718D1 85F6                    test esi, esi
:004718D3 7DE6                    jge 004718BB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004718B6(C), :004718BD(C)
|
:004718D5 5F                      pop edi
:004718D6 5E                      pop esi
:004718D7 5B                      pop ebx
:004718D8 C3                      ret


:004718D9 90                      nop
:004718DA 90                      nop
:004718DB 90                      nop
:004718DC 90                      nop
:004718DD 90                      nop
:004718DE 90                      nop
:004718DF 90                      nop

* Referenced by a CALL at Addresses:
|:00471B25   , :00471B8A   
|
:004718E0 51                      push ecx
:004718E1 8B44240C                mov eax, dword ptr [esp+0C]
:004718E5 53                      push ebx
:004718E6 55                      push ebp
:004718E7 56                      push esi
:004718E8 8D68FF                  lea ebp, dword ptr [eax-01]
:004718EB 8B5C2414                mov ebx, dword ptr [esp+14]
:004718EF 896C2418                mov dword ptr [esp+18], ebp
:004718F3 45                      inc ebp
:004718F4 8BC5                    mov eax, ebp
:004718F6 57                      push edi
:004718F7 99                      cdq
:004718F8 83E21F                  and edx, 0000001F
:004718FB BF1F000000              mov edi, 0000001F
:00471900 03C2                    add eax, edx
:00471902 C744241000000000        mov [esp+10], 00000000
:0047190A 8BF0                    mov esi, eax
:0047190C 8BC5                    mov eax, ebp
:0047190E 99                      cdq
:0047190F 33C2                    xor eax, edx
:00471911 2BC2                    sub eax, edx
:00471913 83E01F                  and eax, 0000001F
:00471916 33C2                    xor eax, edx
:00471918 2BC2                    sub eax, edx
:0047191A BA01000000              mov edx, 00000001
:0047191F 2BF8                    sub edi, eax
:00471921 8BCF                    mov ecx, edi
:00471923 C1FE05                  sar esi, 05
:00471926 D3E2                    shl edx, cl
:00471928 8514B3                  test dword ptr [ebx+4*esi], edx
:0047192B 7421                    je 0047194E
:0047192D 45                      inc ebp
:0047192E 55                      push ebp
:0047192F 53                      push ebx
:00471930 E8CBFEFFFF              call 00471800
:00471935 83C408                  add esp, 00000008
:00471938 85C0                    test eax, eax
:0047193A 7512                    jne 0047194E
:0047193C 8B44241C                mov eax, dword ptr [esp+1C]
:00471940 50                      push eax
:00471941 53                      push ebx
:00471942 E829FFFFFF              call 00471870
:00471947 83C408                  add esp, 00000008
:0047194A 8BD0                    mov edx, eax
:0047194C EB04                    jmp 00471952

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047192B(C), :0047193A(C)
|
:0047194E 8B542410                mov edx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047194C(U)
|
:00471952 83C8FF                  or eax, FFFFFFFF
:00471955 8BCF                    mov ecx, edi
:00471957 D3E0                    shl eax, cl
:00471959 8B0CB3                  mov ecx, dword ptr [ebx+4*esi]
:0047195C 23C8                    and ecx, eax
:0047195E 890CB3                  mov dword ptr [ebx+4*esi], ecx
:00471961 46                      inc esi
:00471962 83FE03                  cmp esi, 00000003
:00471965 7D0E                    jge 00471975

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00471967 B903000000              mov ecx, 00000003
:0047196C 8D3CB3                  lea edi, dword ptr [ebx+4*esi]
:0047196F 2BCE                    sub ecx, esi
:00471971 33C0                    xor eax, eax
:00471973 F3                      repz
:00471974 AB                      stosd

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471965(C)
|
:00471975 5F                      pop edi
:00471976 5E                      pop esi
:00471977 5D                      pop ebp
:00471978 8BC2                    mov eax, edx
:0047197A 5B                      pop ebx
:0047197B 59                      pop ecx
:0047197C C3                      ret


:0047197D 90                      nop
:0047197E 90                      nop
:0047197F 90                      nop

* Referenced by a CALL at Addresses:
|:00471B14   , :00471B6B   
|
:00471980 8B442408                mov eax, dword ptr [esp+08]
:00471984 8B4C2404                mov ecx, dword ptr [esp+04]
:00471988 56                      push esi
:00471989 2BC8                    sub ecx, eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0047198B BA03000000              mov edx, 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471999(C)
|
:00471990 8B30                    mov esi, dword ptr [eax]
:00471992 893408                  mov dword ptr [eax+ecx], esi
:00471995 83C004                  add eax, 00000004
:00471998 4A                      dec edx
:00471999 75F5                    jne 00471990
:0047199B 5E                      pop esi
:0047199C C3                      ret


:0047199D 90                      nop
:0047199E 90                      nop
:0047199F 90                      nop

* Referenced by a CALL at Addresses:
|:00471AF8   , :00471B45   , :00471BB6   
|
:004719A0 8B4C2404                mov ecx, dword ptr [esp+04]
:004719A4 33C0                    xor eax, eax
:004719A6 8901                    mov dword ptr [ecx], eax
:004719A8 894104                  mov dword ptr [ecx+04], eax
:004719AB 894108                  mov dword ptr [ecx+08], eax
:004719AE C3                      ret


:004719AF 90                      nop

* Referenced by a CALL at Address:
|:00471AE3   
|
:004719B0 8B4C2404                mov ecx, dword ptr [esp+04]
:004719B4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719C2(C)
|
:004719B6 833900                  cmp dword ptr [ecx], 00000000
:004719B9 750F                    jne 004719CA
:004719BB 40                      inc eax
:004719BC 83C104                  add ecx, 00000004
:004719BF 83F803                  cmp eax, 00000003
:004719C2 7CF2                    jl 004719B6
:004719C4 B801000000              mov eax, 00000001
:004719C9 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719B9(C)
|
:004719CA 33C0                    xor eax, eax
:004719CC C3                      ret


:004719CD 90                      nop
:004719CE 90                      nop
:004719CF 90                      nop

* Referenced by a CALL at Addresses:
|:00471B79   , :00471B9C   , :00471BD5   , :00471C07   
|
:004719D0 83EC08                  sub esp, 00000008
:004719D3 8B4C2410                mov ecx, dword ptr [esp+10]
:004719D7 53                      push ebx
:004719D8 8BC1                    mov eax, ecx
:004719DA 55                      push ebp
:004719DB 99                      cdq
:004719DC 83E21F                  and edx, 0000001F
:004719DF 56                      push esi
:004719E0 03C2                    add eax, edx
:004719E2 57                      push edi
:004719E3 C1F805                  sar eax, 05
:004719E6 89442414                mov dword ptr [esp+14], eax
:004719EA 8BC1                    mov eax, ecx
:004719EC 99                      cdq
:004719ED 33C2                    xor eax, edx
:004719EF 8B74241C                mov esi, dword ptr [esp+1C]
:004719F3 2BC2                    sub eax, edx
:004719F5 83CFFF                  or edi, FFFFFFFF
:004719F8 83E01F                  and eax, 0000001F
:004719FB BD20000000              mov ebp, 00000020
:00471A00 33C2                    xor eax, edx
:00471A02 33DB                    xor ebx, ebx
:00471A04 2BC2                    sub eax, edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00471A06 C744242003000000        mov [esp+20], 00000003
:00471A0E 8BC8                    mov ecx, eax
:00471A10 D3E7                    shl edi, cl
:00471A12 2BE8                    sub ebp, eax
:00471A14 F7D7                    not edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A3D(C)
|
:00471A16 8B16                    mov edx, dword ptr [esi]
:00471A18 8BCF                    mov ecx, edi
:00471A1A 23CA                    and ecx, edx
:00471A1C 83C604                  add esi, 00000004
:00471A1F 894C2410                mov dword ptr [esp+10], ecx
:00471A23 8BC8                    mov ecx, eax
:00471A25 D3EA                    shr edx, cl
:00471A27 8BCD                    mov ecx, ebp
:00471A29 0BD3                    or edx, ebx
:00471A2B 8B5C2410                mov ebx, dword ptr [esp+10]
:00471A2F D3E3                    shl ebx, cl
:00471A31 8B4C2420                mov ecx, dword ptr [esp+20]
:00471A35 8956FC                  mov dword ptr [esi-04], edx
:00471A38 49                      dec ecx
:00471A39 894C2420                mov dword ptr [esp+20], ecx
:00471A3D 75D7                    jne 00471A16
:00471A3F 8B5C2414                mov ebx, dword ptr [esp+14]

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00471A43 BE02000000              mov esi, 00000002

* Possible Reference to String Resource ID=00008: ""
                                  |
:00471A48 B908000000              mov ecx, 00000008
:00471A4D 8D3C9D00000000          lea edi, dword ptr [4*ebx+00000000]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A77(C)
|
:00471A54 3BF3                    cmp esi, ebx
:00471A56 7C10                    jl 00471A68
:00471A58 8B54241C                mov edx, dword ptr [esp+1C]
:00471A5C 8BC1                    mov eax, ecx
:00471A5E 2BC7                    sub eax, edi
:00471A60 8B0402                  mov eax, dword ptr [edx+eax]
:00471A63 89040A                  mov dword ptr [edx+ecx], eax
:00471A66 EB0B                    jmp 00471A73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A56(C)
|
:00471A68 8B54241C                mov edx, dword ptr [esp+1C]
:00471A6C C7040A00000000          mov dword ptr [edx+ecx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A66(U)
|
:00471A73 4E                      dec esi
:00471A74 83E904                  sub ecx, 00000004
:00471A77 79DB                    jns 00471A54
:00471A79 5F                      pop edi
:00471A7A 5E                      pop esi
:00471A7B 5D                      pop ebp
:00471A7C 5B                      pop ebx
:00471A7D 83C408                  add esp, 00000008
:00471A80 C3                      ret


:00471A81 90                      nop
:00471A82 90                      nop
:00471A83 90                      nop
:00471A84 90                      nop
:00471A85 90                      nop
:00471A86 90                      nop
:00471A87 90                      nop
:00471A88 90                      nop
:00471A89 90                      nop
:00471A8A 90                      nop
:00471A8B 90                      nop
:00471A8C 90                      nop
:00471A8D 90                      nop
:00471A8E 90                      nop
:00471A8F 90                      nop

* Referenced by a CALL at Addresses:
|:00471C6F   , :00471C8F   
|
:00471A90 83EC18                  sub esp, 00000018
:00471A93 8B4C241C                mov ecx, dword ptr [esp+1C]
:00471A97 33C0                    xor eax, eax
:00471A99 53                      push ebx
:00471A9A 55                      push ebp
:00471A9B 668B410A                mov ax, word ptr [ecx+0A]
:00471A9F 8B5102                  mov edx, dword ptr [ecx+02]
:00471AA2 8BD8                    mov ebx, eax
:00471AA4 2500800000              and eax, 00008000
:00471AA9 8BE8                    mov ebp, eax
:00471AAB 8B4106                  mov eax, dword ptr [ecx+06]
:00471AAE 89442408                mov dword ptr [esp+08], eax
:00471AB2 33C0                    xor eax, eax
:00471AB4 668B01                  mov ax, word ptr [ecx]
:00471AB7 81E3FF7F0000            and ebx, 00007FFF
:00471ABD 81EBFF3F0000            sub ebx, 00003FFF
:00471AC3 56                      push esi
:00471AC4 C1E010                  shl eax, 10
:00471AC7 57                      push edi
:00471AC8 8B7C2434                mov edi, dword ptr [esp+34]
:00471ACC 81FB01C0FFFF            cmp ebx, FFFFC001
:00471AD2 89542414                mov dword ptr [esp+14], edx
:00471AD6 89442418                mov dword ptr [esp+18], eax
:00471ADA 752E                    jne 00471B0A
:00471ADC 8D4C2410                lea ecx, dword ptr [esp+10]
:00471AE0 33F6                    xor esi, esi
:00471AE2 51                      push ecx
:00471AE3 E8C8FEFFFF              call 004719B0
:00471AE8 83C404                  add esp, 00000004
:00471AEB 85C0                    test eax, eax
:00471AED 0F851C010000            jne 00471C0F
:00471AF3 8D542410                lea edx, dword ptr [esp+10]
:00471AF7 52                      push edx
:00471AF8 E8A3FEFFFF              call 004719A0
:00471AFD 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00471B00 B802000000              mov eax, 00000002
:00471B05 E907010000              jmp 00471C11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471ADA(C)
|
:00471B0A 8D442410                lea eax, dword ptr [esp+10]
:00471B0E 8D4C241C                lea ecx, dword ptr [esp+1C]
:00471B12 50                      push eax
:00471B13 51                      push ecx
:00471B14 E867FEFFFF              call 00471980
:00471B19 8B5708                  mov edx, dword ptr [edi+08]
:00471B1C 83C408                  add esp, 00000008
:00471B1F 8D442410                lea eax, dword ptr [esp+10]
:00471B23 52                      push edx
:00471B24 50                      push eax
:00471B25 E8B6FDFFFF              call 004718E0
:00471B2A 83C408                  add esp, 00000008
:00471B2D 85C0                    test eax, eax
:00471B2F 7401                    je 00471B32
:00471B31 43                      inc ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B2F(C)
|
:00471B32 8B4704                  mov eax, dword ptr [edi+04]
:00471B35 8B7708                  mov esi, dword ptr [edi+08]
:00471B38 8BC8                    mov ecx, eax
:00471B3A 2BCE                    sub ecx, esi
:00471B3C 3BD9                    cmp ebx, ecx
:00471B3E 7D19                    jge 00471B59
:00471B40 8D542410                lea edx, dword ptr [esp+10]
:00471B44 52                      push edx
:00471B45 E856FEFFFF              call 004719A0
:00471B4A 83C404                  add esp, 00000004
:00471B4D 33F6                    xor esi, esi

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00471B4F B802000000              mov eax, 00000002
:00471B54 E9B8000000              jmp 00471C11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B3E(C)
|
:00471B59 3BD8                    cmp ebx, eax
:00471B5B 7F50                    jg 00471BAD
:00471B5D 2BC3                    sub eax, ebx
:00471B5F 8D4C2410                lea ecx, dword ptr [esp+10]
:00471B63 8BF0                    mov esi, eax
:00471B65 8D44241C                lea eax, dword ptr [esp+1C]
:00471B69 50                      push eax
:00471B6A 51                      push ecx
:00471B6B E810FEFFFF              call 00471980
:00471B70 83C408                  add esp, 00000008
:00471B73 8D542410                lea edx, dword ptr [esp+10]
:00471B77 56                      push esi
:00471B78 52                      push edx
:00471B79 E852FEFFFF              call 004719D0
:00471B7E 8B4708                  mov eax, dword ptr [edi+08]
:00471B81 83C408                  add esp, 00000008
:00471B84 8D4C2410                lea ecx, dword ptr [esp+10]
:00471B88 50                      push eax
:00471B89 51                      push ecx
:00471B8A E851FDFFFF              call 004718E0
:00471B8F 8B570C                  mov edx, dword ptr [edi+0C]
:00471B92 83C408                  add esp, 00000008
:00471B95 42                      inc edx
:00471B96 8D442410                lea eax, dword ptr [esp+10]
:00471B9A 52                      push edx
:00471B9B 50                      push eax
:00471B9C E82FFEFFFF              call 004719D0
:00471BA1 83C408                  add esp, 00000008
:00471BA4 33F6                    xor esi, esi

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00471BA6 B802000000              mov eax, 00000002
:00471BAB EB64                    jmp 00471C11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B5B(C)
|
:00471BAD 3B1F                    cmp ebx, dword ptr [edi]
:00471BAF 7C3A                    jl 00471BEB
:00471BB1 8D4C2410                lea ecx, dword ptr [esp+10]
:00471BB5 51                      push ecx
:00471BB6 E8E5FDFFFF              call 004719A0
:00471BBB 8B5C2414                mov ebx, dword ptr [esp+14]
:00471BBF 8B570C                  mov edx, dword ptr [edi+0C]
:00471BC2 83C404                  add esp, 00000004
:00471BC5 8D442410                lea eax, dword ptr [esp+10]
:00471BC9 81CB00000080            or ebx, 80000000
:00471BCF 52                      push edx
:00471BD0 50                      push eax
:00471BD1 895C2418                mov dword ptr [esp+18], ebx
:00471BD5 E8F6FDFFFF              call 004719D0
:00471BDA 8B7714                  mov esi, dword ptr [edi+14]
:00471BDD 8B07                    mov eax, dword ptr [edi]
:00471BDF 83C408                  add esp, 00000008
:00471BE2 03F0                    add esi, eax
:00471BE4 B801000000              mov eax, 00000001
:00471BE9 EB26                    jmp 00471C11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471BAF(C)
|
:00471BEB 8B7714                  mov esi, dword ptr [edi+14]
:00471BEE 8B4F0C                  mov ecx, dword ptr [edi+0C]
:00471BF1 03F3                    add esi, ebx
:00471BF3 8B5C2410                mov ebx, dword ptr [esp+10]
:00471BF7 8D542410                lea edx, dword ptr [esp+10]
:00471BFB 81E3FFFFFF7F            and ebx, 7FFFFFFF
:00471C01 51                      push ecx
:00471C02 52                      push edx
:00471C03 895C2418                mov dword ptr [esp+18], ebx
:00471C07 E8C4FDFFFF              call 004719D0
:00471C0C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471AED(C)
|
:00471C0F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471B05(U), :00471B54(U), :00471BAB(U), :00471BE9(U)
|
:00471C11 8B570C                  mov edx, dword ptr [edi+0C]
:00471C14 B91F000000              mov ecx, 0000001F
:00471C19 2BCA                    sub ecx, edx
:00471C1B 8B542410                mov edx, dword ptr [esp+10]
:00471C1F D3E6                    shl esi, cl
:00471C21 8B7F10                  mov edi, dword ptr [edi+10]
:00471C24 F7DD                    neg ebp
:00471C26 1BED                    sbb ebp, ebp
:00471C28 81E500000080            and ebp, 80000000
:00471C2E 0BF5                    or esi, ebp
:00471C30 0BF2                    or esi, edx
:00471C32 83FF40                  cmp edi, 00000040
:00471C35 7515                    jne 00471C4C
:00471C37 8B4C2430                mov ecx, dword ptr [esp+30]
:00471C3B 8B542414                mov edx, dword ptr [esp+14]
:00471C3F 897104                  mov dword ptr [ecx+04], esi
:00471C42 8911                    mov dword ptr [ecx], edx
:00471C44 5F                      pop edi
:00471C45 5E                      pop esi
:00471C46 5D                      pop ebp
:00471C47 5B                      pop ebx
:00471C48 83C418                  add esp, 00000018
:00471C4B C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471C35(C)
|
:00471C4C 83FF20                  cmp edi, 00000020
:00471C4F 7506                    jne 00471C57
:00471C51 8B4C2430                mov ecx, dword ptr [esp+30]
:00471C55 8931                    mov dword ptr [ecx], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471C4F(C)
|
:00471C57 5F                      pop edi
:00471C58 5E                      pop esi
:00471C59 5D                      pop ebp
:00471C5A 5B                      pop ebx
:00471C5B 83C418                  add esp, 00000018
:00471C5E C3                      ret


:00471C5F 90                      nop

* Referenced by a CALL at Address:
|:00471CCC   
|
:00471C60 8B442408                mov eax, dword ptr [esp+08]
:00471C64 8B4C2404                mov ecx, dword ptr [esp+04]
:00471C68 68B80E4800              push 00480EB8
:00471C6D 50                      push eax
:00471C6E 51                      push ecx
:00471C6F E81CFEFFFF              call 00471A90
:00471C74 83C40C                  add esp, 0000000C
:00471C77 C3                      ret


:00471C78 90                      nop
:00471C79 90                      nop
:00471C7A 90                      nop
:00471C7B 90                      nop
:00471C7C 90                      nop
:00471C7D 90                      nop
:00471C7E 90                      nop
:00471C7F 90                      nop

* Referenced by a CALL at Address:
|:00471D0C   
|
:00471C80 8B442408                mov eax, dword ptr [esp+08]
:00471C84 8B4C2404                mov ecx, dword ptr [esp+04]

* Possible StringData Ref from Data Obj ->""
                                  |
:00471C88 68D00E4800              push 00480ED0
:00471C8D 50                      push eax
:00471C8E 51                      push ecx
:00471C8F E8FCFDFFFF              call 00471A90
:00471C94 83C40C                  add esp, 0000000C
:00471C97 C3                      ret


:00471C98 90                      nop
:00471C99 90                      nop
:00471C9A 90                      nop
:00471C9B 90                      nop
:00471C9C 90                      nop
:00471C9D 90                      nop
:00471C9E 90                      nop
:00471C9F 90                      nop

* Referenced by a CALL at Address:
|:004700B5   
|
:00471CA0 8B442408                mov eax, dword ptr [esp+08]
:00471CA4 83EC0C                  sub esp, 0000000C
:00471CA7 8D4C2414                lea ecx, dword ptr [esp+14]
:00471CAB 8D542400                lea edx, dword ptr [esp]
:00471CAF 6A00                    push 00000000
:00471CB1 6A00                    push 00000000
:00471CB3 6A00                    push 00000000
:00471CB5 6A00                    push 00000000
:00471CB7 50                      push eax
:00471CB8 51                      push ecx
:00471CB9 52                      push edx
:00471CBA E8310B0000              call 004727F0
:00471CBF 8B44242C                mov eax, dword ptr [esp+2C]
:00471CC3 83C41C                  add esp, 0000001C
:00471CC6 8D4C2400                lea ecx, dword ptr [esp]
:00471CCA 50                      push eax
:00471CCB 51                      push ecx
:00471CCC E88FFFFFFF              call 00471C60
:00471CD1 83C408                  add esp, 00000008
:00471CD4 83C40C                  add esp, 0000000C
:00471CD7 C3                      ret


:00471CD8 90                      nop
:00471CD9 90                      nop
:00471CDA 90                      nop
:00471CDB 90                      nop
:00471CDC 90                      nop
:00471CDD 90                      nop
:00471CDE 90                      nop
:00471CDF 90                      nop

* Referenced by a CALL at Address:
|:004700DC   
|
:00471CE0 8B442408                mov eax, dword ptr [esp+08]
:00471CE4 83EC0C                  sub esp, 0000000C
:00471CE7 8D4C2414                lea ecx, dword ptr [esp+14]
:00471CEB 8D542400                lea edx, dword ptr [esp]
:00471CEF 6A00                    push 00000000
:00471CF1 6A00                    push 00000000
:00471CF3 6A00                    push 00000000
:00471CF5 6A00                    push 00000000
:00471CF7 50                      push eax
:00471CF8 51                      push ecx
:00471CF9 52                      push edx
:00471CFA E8F10A0000              call 004727F0
:00471CFF 8B44242C                mov eax, dword ptr [esp+2C]
:00471D03 83C41C                  add esp, 0000001C
:00471D06 8D4C2400                lea ecx, dword ptr [esp]
:00471D0A 50                      push eax
:00471D0B 51                      push ecx
:00471D0C E86FFFFFFF              call 00471C80
:00471D11 83C408                  add esp, 00000008
:00471D14 83C40C                  add esp, 0000000C
:00471D17 C3                      ret


:00471D18 90                      nop
:00471D19 90                      nop
:00471D1A 90                      nop
:00471D1B 90                      nop
:00471D1C 90                      nop
:00471D1D 90                      nop
:00471D1E 90                      nop
:00471D1F 90                      nop

* Referenced by a CALL at Addresses:
|:00470173   , :004702AD   , :0047037F   
|
:00471D20 8B4C240C                mov ecx, dword ptr [esp+0C]
:00471D24 53                      push ebx
:00471D25 55                      push ebp
:00471D26 8B6C240C                mov ebp, dword ptr [esp+0C]
:00471D2A 8B510C                  mov edx, dword ptr [ecx+0C]
:00471D2D 56                      push esi
:00471D2E 8B742414                mov esi, dword ptr [esp+14]
:00471D32 57                      push edi
:00471D33 8D7D01                  lea edi, dword ptr [ebp+01]
:00471D36 C6450030                mov [ebp+00], 30
:00471D3A 85F6                    test esi, esi
:00471D3C 8BC7                    mov eax, edi
:00471D3E 7E1E                    jle 00471D5E
:00471D40 8BDE                    mov ebx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D58(C)
|
:00471D42 8A0A                    mov cl, byte ptr [edx]
:00471D44 84C9                    test cl, cl
:00471D46 7406                    je 00471D4E
:00471D48 0FBEC9                  movsx ecx, cl
:00471D4B 42                      inc edx
:00471D4C EB05                    jmp 00471D53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D46(C)
|
:00471D4E B930000000              mov ecx, 00000030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D4C(U)
|
:00471D53 8808                    mov byte ptr [eax], cl
:00471D55 40                      inc eax
:00471D56 4E                      dec esi
:00471D57 4B                      dec ebx
:00471D58 75E8                    jne 00471D42
:00471D5A 8B4C241C                mov ecx, dword ptr [esp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D3E(C)
|
:00471D5E 85F6                    test esi, esi
:00471D60 C60000                  mov byte ptr [eax], 00
:00471D63 7C1C                    jl 00471D81
:00471D65 803A35                  cmp byte ptr [edx], 35
:00471D68 7C17                    jl 00471D81
:00471D6A 8A50FF                  mov dl, byte ptr [eax-01]
:00471D6D 48                      dec eax
:00471D6E 80FA39                  cmp dl, 39
:00471D71 750C                    jne 00471D7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D7D(C)
|
:00471D73 C60030                  mov byte ptr [eax], 30
:00471D76 8A50FF                  mov dl, byte ptr [eax-01]
:00471D79 48                      dec eax
:00471D7A 80FA39                  cmp dl, 39
:00471D7D 74F4                    je 00471D73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D71(C)
|
:00471D7F FE00                    inc byte ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471D63(C), :00471D68(C)
|
:00471D81 807D0031                cmp byte ptr [ebp+00], 31
:00471D85 7508                    jne 00471D8F
:00471D87 FF4104                  inc [ecx+04]
:00471D8A 5F                      pop edi
:00471D8B 5E                      pop esi
:00471D8C 5D                      pop ebp
:00471D8D 5B                      pop ebx
:00471D8E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D85(C)
|
:00471D8F 83C9FF                  or ecx, FFFFFFFF
:00471D92 33C0                    xor eax, eax
:00471D94 F2                      repnz
:00471D95 AE                      scasb
:00471D96 F7D1                    not ecx
:00471D98 2BF9                    sub edi, ecx
:00471D9A 8BC1                    mov eax, ecx
:00471D9C 8BF7                    mov esi, edi
:00471D9E 8BFD                    mov edi, ebp
:00471DA0 C1E902                  shr ecx, 02
:00471DA3 F3                      repz
:00471DA4 A5                      movsd
:00471DA5 8BC8                    mov ecx, eax
:00471DA7 83E103                  and ecx, 00000003
:00471DAA F3                      repz
:00471DAB A4                      movsb
:00471DAC 5F                      pop edi
:00471DAD 5E                      pop esi
:00471DAE 5D                      pop ebp
:00471DAF 5B                      pop ebx
:00471DB0 C3                      ret


:00471DB1 90                      nop
:00471DB2 90                      nop
:00471DB3 90                      nop
:00471DB4 90                      nop
:00471DB5 90                      nop
:00471DB6 90                      nop
:00471DB7 90                      nop
:00471DB8 90                      nop
:00471DB9 90                      nop
:00471DBA 90                      nop
:00471DBB 90                      nop
:00471DBC 90                      nop
:00471DBD 90                      nop
:00471DBE 90                      nop
:00471DBF 90                      nop

* Referenced by a CALL at Addresses:
|:00470144   , :00470287   , :0047034F   
|
:00471DC0 83EC0C                  sub esp, 0000000C
:00471DC3 8D442410                lea eax, dword ptr [esp+10]
:00471DC7 8D4C2400                lea ecx, dword ptr [esp]
:00471DCB 50                      push eax
:00471DCC 51                      push ecx
:00471DCD E86E000000              call 00471E40
:00471DD2 83C408                  add esp, 00000008
:00471DD5 8B442400                mov eax, dword ptr [esp]
:00471DD9 8B4C2404                mov ecx, dword ptr [esp+04]
:00471DDD 6808724B00              push 004B7208
:00471DE2 6A00                    push 00000000

* Possible Reference to String Resource ID=00017: "w"
                                  |
:00471DE4 6A11                    push 00000011
:00471DE6 83EC0C                  sub esp, 0000000C
:00471DE9 8BD4                    mov edx, esp
:00471DEB 8902                    mov dword ptr [edx], eax
:00471DED 668B442420              mov ax, word ptr [esp+20]
:00471DF2 894A04                  mov dword ptr [edx+04], ecx
:00471DF5 66894208                mov word ptr [edx+08], ax
:00471DF9 E882110000              call 00472F80
:00471DFE 0FBE0D0A724B00          movsx ecx, byte ptr [004B720A]
:00471E05 0FBF1508724B00          movsx edx, word ptr [004B7208]
:00471E0C A330724B00              mov dword ptr [004B7230], eax
:00471E11 83C418                  add esp, 00000018
:00471E14 890D28724B00            mov dword ptr [004B7228], ecx
:00471E1A 89152C724B00            mov dword ptr [004B722C], edx
:00471E20 C70534724B000C724B00    mov dword ptr [004B7234], 004B720C
:00471E2A B828724B00              mov eax, 004B7228
:00471E2F 83C40C                  add esp, 0000000C
:00471E32 C3                      ret


:00471E33 90                      nop
:00471E34 90                      nop
:00471E35 90                      nop
:00471E36 90                      nop
:00471E37 90                      nop
:00471E38 90                      nop
:00471E39 90                      nop
:00471E3A 90                      nop
:00471E3B 90                      nop
:00471E3C 90                      nop
:00471E3D 90                      nop
:00471E3E 90                      nop
:00471E3F 90                      nop

* Referenced by a CALL at Address:
|:00471DCD   
|
:00471E40 53                      push ebx
:00471E41 55                      push ebp
:00471E42 56                      push esi
:00471E43 8B742414                mov esi, dword ptr [esp+14]
:00471E47 57                      push edi
:00471E48 BB00000080              mov ebx, 80000000
:00471E4D 668B4E06                mov cx, word ptr [esi+06]
:00471E51 8B5604                  mov edx, dword ptr [esi+04]
:00471E54 8BC1                    mov eax, ecx
:00471E56 8B3E                    mov edi, dword ptr [esi]
:00471E58 C1E804                  shr eax, 04
:00471E5B 81E100800000            and ecx, 00008000
:00471E61 25FF070000              and eax, 000007FF
:00471E66 8BE9                    mov ebp, ecx
:00471E68 8BC8                    mov ecx, eax
:00471E6A 81E2FFFF0F00            and edx, 000FFFFF
:00471E70 81E1FFFF0000            and ecx, 0000FFFF
:00471E76 7417                    je 00471E8F
:00471E78 81F9FF070000            cmp ecx, 000007FF
:00471E7E 7408                    je 00471E88
:00471E80 8DB0003C0000            lea esi, dword ptr [eax+00003C00]
:00471E86 EB29                    jmp 00471EB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471E7E(C)
|
:00471E88 BEFF7F0000              mov esi, 00007FFF
:00471E8D EB22                    jmp 00471EB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471E76(C)
|
:00471E8F 33DB                    xor ebx, ebx
:00471E91 3BD3                    cmp edx, ebx
:00471E93 7516                    jne 00471EAB
:00471E95 3BFB                    cmp edi, ebx
:00471E97 7512                    jne 00471EAB
:00471E99 8B442414                mov eax, dword ptr [esp+14]
:00471E9D 895804                  mov dword ptr [eax+04], ebx
:00471EA0 8918                    mov dword ptr [eax], ebx
:00471EA2 66895808                mov word ptr [eax+08], bx
:00471EA6 5F                      pop edi
:00471EA7 5E                      pop esi
:00471EA8 5D                      pop ebp
:00471EA9 5B                      pop ebx
:00471EAA C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471E93(C), :00471E97(C)
|
:00471EAB 8DB0013C0000            lea esi, dword ptr [eax+00003C01]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471E86(U), :00471E8D(U)
|
:00471EB1 8B442414                mov eax, dword ptr [esp+14]
:00471EB5 8BCF                    mov ecx, edi
:00471EB7 C1E915                  shr ecx, 15
:00471EBA C1E20B                  shl edx, 0B
:00471EBD 0BCA                    or ecx, edx
:00471EBF 0BCB                    or ecx, ebx
:00471EC1 C1E70B                  shl edi, 0B
:00471EC4 F7C100000080            test ecx, 80000000
:00471ECA 894804                  mov dword ptr [eax+04], ecx
:00471ECD 8938                    mov dword ptr [eax], edi
:00471ECF 7522                    jne 00471EF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471EF1(C)
|
:00471ED1 8B10                    mov edx, dword ptr [eax]
:00471ED3 03C9                    add ecx, ecx
:00471ED5 8BFA                    mov edi, edx
:00471ED7 03D2                    add edx, edx
:00471ED9 C1EF1F                  shr edi, 1F
:00471EDC 0BF9                    or edi, ecx
:00471EDE 81C6FFFF0000            add esi, 0000FFFF
:00471EE4 8BCF                    mov ecx, edi
:00471EE6 897804                  mov dword ptr [eax+04], edi
:00471EE9 F7C100000080            test ecx, 80000000
:00471EEF 8910                    mov dword ptr [eax], edx
:00471EF1 74DE                    je 00471ED1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471ECF(C)
|
:00471EF3 0BF5                    or esi, ebp
:00471EF5 5F                      pop edi
:00471EF6 66897008                mov word ptr [eax+08], si
:00471EFA 5E                      pop esi
:00471EFB 5D                      pop ebp
:00471EFC 5B                      pop ebx
:00471EFD C3                      ret


:00471EFE 90                      nop
:00471EFF 90                      nop

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00471F00 6A02                    push 00000002
:00471F02 E8F9C8FFFF              call 0046E800
:00471F07 83C404                  add esp, 00000004
:00471F0A C3                      ret


:00471F0B 90                      nop
:00471F0C 90                      nop
:00471F0D 90                      nop
:00471F0E 90                      nop
:00471F0F 90                      nop

* Referenced by a CALL at Address:
|:0047135A   
|
:00471F10 A154724B00              mov eax, dword ptr [004B7254]
:00471F15 53                      push ebx
:00471F16 33DB                    xor ebx, ebx
:00471F18 56                      push esi
:00471F19 85C0                    test eax, eax
:00471F1B 57                      push edi
:00471F1C 7542                    jne 00471F60
:00471F1E 68B0514700              push 004751B0

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:00471F23 FF1564854B00            Call dword ptr [004B8564]
:00471F29 8BF0                    mov esi, eax
:00471F2B 85F6                    test esi, esi
:00471F2D 746A                    je 00471F99

* Reference To: KERNEL32.GetProcAddress, Ord:0116h
                                  |
:00471F2F 8B3DBC854B00            mov edi, dword ptr [004B85BC]
:00471F35 68A4514700              push 004751A4
:00471F3A 56                      push esi
:00471F3B FFD7                    call edi
:00471F3D 85C0                    test eax, eax
:00471F3F A354724B00              mov dword ptr [004B7254], eax
:00471F44 7453                    je 00471F99
:00471F46 6894514700              push 00475194
:00471F4B 56                      push esi
:00471F4C FFD7                    call edi
:00471F4E 6880514700              push 00475180
:00471F53 56                      push esi
:00471F54 A358724B00              mov dword ptr [004B7258], eax
:00471F59 FFD7                    call edi
:00471F5B A35C724B00              mov dword ptr [004B725C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471F1C(C)
|
:00471F60 A158724B00              mov eax, dword ptr [004B7258]
:00471F65 85C0                    test eax, eax
:00471F67 7404                    je 00471F6D
:00471F69 FFD0                    call eax
:00471F6B 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471F67(C)
|
:00471F6D 85DB                    test ebx, ebx
:00471F6F 740E                    je 00471F7F
:00471F71 A15C724B00              mov eax, dword ptr [004B725C]
:00471F76 85C0                    test eax, eax
:00471F78 7405                    je 00471F7F
:00471F7A 53                      push ebx
:00471F7B FFD0                    call eax
:00471F7D 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471F6F(C), :00471F78(C)
|
:00471F7F 8B442418                mov eax, dword ptr [esp+18]
:00471F83 8B4C2414                mov ecx, dword ptr [esp+14]
:00471F87 8B542410                mov edx, dword ptr [esp+10]
:00471F8B 50                      push eax
:00471F8C 51                      push ecx
:00471F8D 52                      push edx
:00471F8E 53                      push ebx
:00471F8F FF1554724B00            call dword ptr [004B7254]
:00471F95 5F                      pop edi
:00471F96 5E                      pop esi
:00471F97 5B                      pop ebx
:00471F98 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471F2D(C), :00471F44(C)
|
:00471F99 5F                      pop edi
:00471F9A 5E                      pop esi
:00471F9B 33C0                    xor eax, eax
:00471F9D 5B                      pop ebx
:00471F9E C3                      ret


:00471F9F 90                      nop

* Referenced by a CALL at Address:
|:004712AC   
|
:00471FA0 8B4C240C                mov ecx, dword ptr [esp+0C]
:00471FA4 57                      push edi
:00471FA5 85C9                    test ecx, ecx
:00471FA7 747A                    je 00472023
:00471FA9 56                      push esi
:00471FAA 53                      push ebx
:00471FAB 8BD9                    mov ebx, ecx
:00471FAD 8B742414                mov esi, dword ptr [esp+14]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00471FB1 F7C603000000            test esi, 00000003
:00471FB7 8B7C2410                mov edi, dword ptr [esp+10]
:00471FBB 7507                    jne 00471FC4
:00471FBD C1E902                  shr ecx, 02
:00471FC0 756F                    jne 00472031
:00471FC2 EB21                    jmp 00471FE5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471FBB(C), :00471FD7(C)
|
:00471FC4 8A06                    mov al, byte ptr [esi]
:00471FC6 46                      inc esi
:00471FC7 8807                    mov byte ptr [edi], al
:00471FC9 47                      inc edi
:00471FCA 49                      dec ecx
:00471FCB 7425                    je 00471FF2
:00471FCD 84C0                    test al, al
:00471FCF 7429                    je 00471FFA

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00471FD1 F7C603000000            test esi, 00000003
:00471FD7 75EB                    jne 00471FC4
:00471FD9 8BD9                    mov ebx, ecx
:00471FDB C1E902                  shr ecx, 02
:00471FDE 7551                    jne 00472031

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047202F(C)
|
:00471FE0 83E303                  and ebx, 00000003
:00471FE3 740D                    je 00471FF2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471FC2(U), :00471FF0(C)
|
:00471FE5 8A06                    mov al, byte ptr [esi]
:00471FE7 46                      inc esi
:00471FE8 8807                    mov byte ptr [edi], al
:00471FEA 47                      inc edi
:00471FEB 84C0                    test al, al
:00471FED 742F                    je 0047201E
:00471FEF 4B                      dec ebx
:00471FF0 75F3                    jne 00471FE5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471FCB(C), :00471FE3(C)
|
:00471FF2 8B442410                mov eax, dword ptr [esp+10]
:00471FF6 5B                      pop ebx
:00471FF7 5E                      pop esi
:00471FF8 5F                      pop edi
:00471FF9 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471FCF(C)
|

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00471FFA F7C703000000            test edi, 00000003
:00472000 7412                    je 00472014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472012(C)
|
:00472002 8807                    mov byte ptr [edi], al
:00472004 47                      inc edi
:00472005 49                      dec ecx
:00472006 0F848A000000            je 00472096

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:0047200C F7C703000000            test edi, 00000003
:00472012 75EE                    jne 00472002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472000(C)
|
:00472014 8BD9                    mov ebx, ecx
:00472016 C1E902                  shr ecx, 02
:00472019 756C                    jne 00472087

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047201F(C), :00472094(C)
|
:0047201B 8807                    mov byte ptr [edi], al
:0047201D 47                      inc edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471FED(C)
|
:0047201E 4B                      dec ebx
:0047201F 75FA                    jne 0047201B
:00472021 5B                      pop ebx
:00472022 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471FA7(C)
|
:00472023 8B442408                mov eax, dword ptr [esp+08]
:00472027 5F                      pop edi
:00472028 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472049(C), :00472061(C)
|
:00472029 8917                    mov dword ptr [edi], edx
:0047202B 83C704                  add edi, 00000004
:0047202E 49                      dec ecx
:0047202F 74AF                    je 00471FE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471FC0(C), :00471FDE(C)
|
:00472031 BAFFFEFE7E              mov edx, 7EFEFEFF
:00472036 8B06                    mov eax, dword ptr [esi]
:00472038 03D0                    add edx, eax
:0047203A 83F0FF                  xor eax, FFFFFFFF
:0047203D 33C2                    xor eax, edx
:0047203F 8B16                    mov edx, dword ptr [esi]
:00472041 83C604                  add esi, 00000004
:00472044 A900010181              test eax, 81010100
:00472049 74DE                    je 00472029
:0047204B 84D2                    test dl, dl
:0047204D 742C                    je 0047207B
:0047204F 84F6                    test dh, dh
:00472051 741E                    je 00472071
:00472053 F7C20000FF00            test edx, 00FF0000
:00472059 740C                    je 00472067
:0047205B F7C2000000FF            test edx, FF000000
:00472061 75C6                    jne 00472029
:00472063 8917                    mov dword ptr [edi], edx
:00472065 EB18                    jmp 0047207F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472059(C)
|
:00472067 81E2FFFF0000            and edx, 0000FFFF
:0047206D 8917                    mov dword ptr [edi], edx
:0047206F EB0E                    jmp 0047207F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472051(C)
|
:00472071 81E2FF000000            and edx, 000000FF
:00472077 8917                    mov dword ptr [edi], edx
:00472079 EB04                    jmp 0047207F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047204D(C)
|
:0047207B 33D2                    xor edx, edx
:0047207D 8917                    mov dword ptr [edi], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472065(U), :0047206F(U), :00472079(U)
|
:0047207F 83C704                  add edi, 00000004
:00472082 33C0                    xor eax, eax
:00472084 49                      dec ecx
:00472085 740A                    je 00472091

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472019(C)
|
:00472087 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047208F(C)
|
:00472089 8907                    mov dword ptr [edi], eax
:0047208B 83C704                  add edi, 00000004
:0047208E 49                      dec ecx
:0047208F 75F8                    jne 00472089

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472085(C)
|
:00472091 83E303                  and ebx, 00000003
:00472094 7585                    jne 0047201B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472006(C)
|
:00472096 8B442410                mov eax, dword ptr [esp+10]
:0047209A 5B                      pop ebx
:0047209B 5E                      pop esi
:0047209C 5F                      pop edi
:0047209D C3                      ret


:0047209E CC                      int 03
:0047209F CC                      int 03

* Referenced by a CALL at Address:
|:004714BC   
|
:004720A0 53                      push ebx
:004720A1 55                      push ebp
:004720A2 56                      push esi
:004720A3 57                      push edi
:004720A4 8B7C2414                mov edi, dword ptr [esp+14]
:004720A8 8D47FE                  lea eax, dword ptr [edi-02]
:004720AB 83F814                  cmp eax, 00000014
:004720AE 0F8727010000            ja 004721DB
:004720B4 33C9                    xor ecx, ecx
:004720B6 8A8804224700            mov cl, byte ptr [eax+00472204]
:004720BC FF248DE4214700          jmp dword ptr [4*ecx+004721E4]
:004720C3 8B1D60724B00            mov ebx, dword ptr [004B7260]
:004720C9 BE60724B00              mov esi, 004B7260
:004720CE EB37                    jmp 00472107
:004720D0 8B1D64724B00            mov ebx, dword ptr [004B7264]
:004720D6 BE64724B00              mov esi, 004B7264
:004720DB EB2A                    jmp 00472107
:004720DD 8B1D68724B00            mov ebx, dword ptr [004B7268]
:004720E3 BE68724B00              mov esi, 004B7268
:004720E8 EB1D                    jmp 00472107
:004720EA 8B1D6C724B00            mov ebx, dword ptr [004B726C]
:004720F0 BE6C724B00              mov esi, 004B726C
:004720F5 EB10                    jmp 00472107
:004720F7 57                      push edi
:004720F8 E823010000              call 00472220
:004720FD 8BF0                    mov esi, eax
:004720FF 83C404                  add esp, 00000004
:00472102 83C608                  add esi, 00000008
:00472105 8B1E                    mov ebx, dword ptr [esi]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004720CE(U), :004720DB(U), :004720E8(U), :004720F5(U)
|
:00472107 83FB01                  cmp ebx, 00000001
:0047210A 7507                    jne 00472113
:0047210C 33C0                    xor eax, eax
:0047210E 5F                      pop edi
:0047210F 5E                      pop esi
:00472110 5D                      pop ebp
:00472111 5B                      pop ebx
:00472112 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047210A(C)
|
:00472113 85DB                    test ebx, ebx
:00472115 750A                    jne 00472121

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00472117 6A03                    push 00000003
:00472119 E802C9FFFF              call 0046EA20
:0047211E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472115(C)
|
:00472121 83FF08                  cmp edi, 00000008
:00472124 740A                    je 00472130
:00472126 83FF0B                  cmp edi, 0000000B
:00472129 7405                    je 00472130
:0047212B 83FF04                  cmp edi, 00000004
:0047212E 752B                    jne 0047215B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472124(C), :00472129(C)
|
:00472130 8B2DCC6F4B00            mov ebp, dword ptr [004B6FCC]
:00472136 83FF08                  cmp edi, 00000008
:00472139 C705CC6F4B0000000000    mov dword ptr [004B6FCC], 00000000
:00472143 754B                    jne 00472190
:00472145 8B15040B4800            mov edx, dword ptr [00480B04]
:0047214B C705040B48008C000000    mov dword ptr [00480B04], 0000008C
:00472155 89542414                mov dword ptr [esp+14], edx
:00472159 EB04                    jmp 0047215F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047212E(C)
|
:0047215B 8B6C2414                mov ebp, dword ptr [esp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472159(U)
|
:0047215F 83FF08                  cmp edi, 00000008
:00472162 752C                    jne 00472190
:00472164 8B15F80A4800            mov edx, dword ptr [00480AF8]
:0047216A A1FC0A4800              mov eax, dword ptr [00480AFC]
:0047216F 8D0C10                  lea ecx, dword ptr [eax+edx]
:00472172 3BD1                    cmp edx, ecx
:00472174 7D20                    jge 00472196
:00472176 8D0452                  lea eax, dword ptr [edx+2*edx]
:00472179 2BCA                    sub ecx, edx
:0047217B 8D0485880A4800          lea eax, dword ptr [4*eax+00480A88]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047218C(C)
|
:00472182 C70000000000            mov dword ptr [eax], 00000000
:00472188 83C00C                  add eax, 0000000C
:0047218B 49                      dec ecx
:0047218C 75F4                    jne 00472182
:0047218E EB06                    jmp 00472196

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472143(C), :00472162(C)
|
:00472190 C70600000000            mov dword ptr [esi], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472174(C), :0047218E(U)
|
:00472196 83FF08                  cmp edi, 00000008
:00472199 750F                    jne 004721AA
:0047219B 8B0D040B4800            mov ecx, dword ptr [00480B04]
:004721A1 51                      push ecx
:004721A2 57                      push edi
:004721A3 FFD3                    call ebx
:004721A5 83C408                  add esp, 00000008
:004721A8 EB06                    jmp 004721B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472199(C)
|
:004721AA 57                      push edi
:004721AB FFD3                    call ebx
:004721AD 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004721A8(U)
|
:004721B0 83FF08                  cmp edi, 00000008
:004721B3 740A                    je 004721BF
:004721B5 83FF0B                  cmp edi, 0000000B
:004721B8 7405                    je 004721BF
:004721BA 83FF04                  cmp edi, 00000004
:004721BD 7515                    jne 004721D4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004721B3(C), :004721B8(C)
|
:004721BF 83FF08                  cmp edi, 00000008
:004721C2 892DCC6F4B00            mov dword ptr [004B6FCC], ebp
:004721C8 750A                    jne 004721D4
:004721CA 8B542414                mov edx, dword ptr [esp+14]
:004721CE 8915040B4800            mov dword ptr [00480B04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004721BD(C), :004721C8(C)
|
:004721D4 33C0                    xor eax, eax
:004721D6 5F                      pop edi
:004721D7 5E                      pop esi
:004721D8 5D                      pop ebp
:004721D9 5B                      pop ebx
:004721DA C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004720AE(C)
|
:004721DB 5F                      pop edi
:004721DC 5E                      pop esi
:004721DD 5D                      pop ebp
:004721DE 83C8FF                  or eax, FFFFFFFF
:004721E1 5B                      pop ebx
:004721E2 C3                      ret


:004721E3 90                      nop
:004721E4 C3                      ret


:004721E5 204700                  and byte ptr [edi+00], al

:004721E8 F7204700                DWORD 004720F7
:004721EC F7204700                DWORD 004720F7
:004721F0 F7204700                DWORD 004720F7
:004721F4 EA204700                DWORD 004720EA
:004721F8 D0204700                DWORD 004720D0
:004721FC DD204700                DWORD 004720DD
:00472200 DB214700                DWORD 004721DB


:00472204 0007                    add byte ptr [edi], al
:00472206 0107                    add dword ptr [edi], eax
:00472208 07                      pop es
:00472209 07                      pop es
:0047220A 0207                    add al, byte ptr [edi]
:0047220C 07                      pop es
:0047220D 0307                    add eax, dword ptr [edi]
:0047220F 07                      pop es
:00472210 07                      pop es
:00472211 0407                    add al, 07
:00472213 07                      pop es
:00472214 07                      pop es
:00472215 07                      pop es
:00472216 07                      pop es
:00472217 0506909090              add eax, 90909006
:0047221C 90                      nop
:0047221D 90                      nop
:0047221E 90                      nop
:0047221F 90                      nop

* Referenced by a CALL at Address:
|:004720F8   
|
:00472220 8B542404                mov edx, dword ptr [esp+04]
:00472224 8B0D840A4800            mov ecx, dword ptr [00480A84]
:0047222A 56                      push esi
:0047222B 8B35000B4800            mov esi, dword ptr [00480B00]
:00472231 3BCA                    cmp ecx, edx

* Possible StringData Ref from Data Obj ->""
                                  |
:00472233 B8800A4800              mov eax, 00480A80
:00472238 7416                    je 00472250
:0047223A 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:0047223D 8D0C8D800A4800          lea ecx, dword ptr [4*ecx+00480A80]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047224E(C)
|
:00472244 83C00C                  add eax, 0000000C
:00472247 3BC1                    cmp eax, ecx
:00472249 7305                    jnb 00472250
:0047224B 395004                  cmp dword ptr [eax+04], edx
:0047224E 75F4                    jne 00472244

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472238(C), :00472249(C)
|
:00472250 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00472253 8D0C8D800A4800          lea ecx, dword ptr [4*ecx+00480A80]
:0047225A 3BC1                    cmp eax, ecx
:0047225C 7305                    jnb 00472263
:0047225E 395004                  cmp dword ptr [eax+04], edx
:00472261 7402                    je 00472265

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047225C(C)
|
:00472263 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472261(C)
|
:00472265 5E                      pop esi
:00472266 C3                      ret


:00472267 90                      nop
:00472268 90                      nop
:00472269 90                      nop
:0047226A 90                      nop
:0047226B 90                      nop
:0047226C 90                      nop
:0047226D 90                      nop
:0047226E 90                      nop
:0047226F 90                      nop

* Referenced by a CALL at Address:
|:004716D2   
|
:00472270 51                      push ecx
:00472271 A178724B00              mov eax, dword ptr [004B7278]
:00472276 53                      push ebx
:00472277 55                      push ebp
:00472278 56                      push esi

* Reference To: KERNEL32.GetStringTypeA, Ord:012Bh
                                  |
:00472279 8B3574854B00            mov esi, dword ptr [004B8574]
:0047227F 57                      push edi
:00472280 33FF                    xor edi, edi
:00472282 3BC7                    cmp eax, edi
:00472284 7523                    jne 004722A9
:00472286 8D442412                lea eax, dword ptr [esp+12]
:0047228A 50                      push eax
:0047228B 6A01                    push 00000001
:0047228D 68BC514700              push 004751BC
:00472292 6A01                    push 00000001
:00472294 57                      push edi
:00472295 FFD6                    call esi
:00472297 85C0                    test eax, eax
:00472299 0F84CF000000            je 0047236E

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0047229F B802000000              mov eax, 00000002
:004722A4 A378724B00              mov dword ptr [004B7278], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472284(C), :00472390(U)
|
:004722A9 83F802                  cmp eax, 00000002
:004722AC 752A                    jne 004722D8
:004722AE 8B44242C                mov eax, dword ptr [esp+2C]
:004722B2 3BC7                    cmp eax, edi
:004722B4 7505                    jne 004722BB
:004722B6 A140724B00              mov eax, dword ptr [004B7240]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004722B4(C)
|
:004722BB 8B542424                mov edx, dword ptr [esp+24]
:004722BF 8B4C2420                mov ecx, dword ptr [esp+20]
:004722C3 52                      push edx
:004722C4 8B542420                mov edx, dword ptr [esp+20]
:004722C8 51                      push ecx
:004722C9 8B4C2420                mov ecx, dword ptr [esp+20]
:004722CD 52                      push edx
:004722CE 51                      push ecx
:004722CF 50                      push eax
:004722D0 FFD6                    call esi
:004722D2 5F                      pop edi
:004722D3 5E                      pop esi
:004722D4 5D                      pop ebp
:004722D5 5B                      pop ebx
:004722D6 59                      pop ecx
:004722D7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004722AC(C)
|
:004722D8 83F801                  cmp eax, 00000001
:004722DB 0F8587000000            jne 00472368
:004722E1 8B5C2428                mov ebx, dword ptr [esp+28]
:004722E5 897C242C                mov dword ptr [esp+2C], edi
:004722E9 3BDF                    cmp ebx, edi
:004722EB 7506                    jne 004722F3
:004722ED 8B1D50724B00            mov ebx, dword ptr [004B7250]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004722EB(C)
|
:004722F3 8B6C2420                mov ebp, dword ptr [esp+20]
:004722F7 8B54241C                mov edx, dword ptr [esp+1C]
:004722FB 57                      push edi
:004722FC 57                      push edi
:004722FD 55                      push ebp
:004722FE 52                      push edx

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:004722FF 6A09                    push 00000009
:00472301 53                      push ebx

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:00472302 FF15B8854B00            Call dword ptr [004B85B8]
:00472308 8BF0                    mov esi, eax
:0047230A 85F6                    test esi, esi
:0047230C 744B                    je 00472359
:0047230E 56                      push esi

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:0047230F 6A02                    push 00000002
:00472311 E8FA0F0000              call 00473310
:00472316 8BF8                    mov edi, eax
:00472318 83C408                  add esp, 00000008
:0047231B 85FF                    test edi, edi
:0047231D 743A                    je 00472359
:0047231F 8B44241C                mov eax, dword ptr [esp+1C]
:00472323 56                      push esi
:00472324 57                      push edi
:00472325 55                      push ebp
:00472326 50                      push eax
:00472327 6A01                    push 00000001
:00472329 53                      push ebx

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:0047232A FF15B8854B00            Call dword ptr [004B85B8]
:00472330 85C0                    test eax, eax
:00472332 7425                    je 00472359
:00472334 8B4C2424                mov ecx, dword ptr [esp+24]
:00472338 8B542418                mov edx, dword ptr [esp+18]
:0047233C 51                      push ecx
:0047233D 50                      push eax
:0047233E 57                      push edi
:0047233F 52                      push edx

* Reference To: KERNEL32.GetStringTypeW, Ord:012Eh
                                  |
:00472340 FF15FC854B00            Call dword ptr [004B85FC]
:00472346 57                      push edi
:00472347 8BF0                    mov esi, eax
:00472349 E8F2BBFFFF              call 0046DF40
:0047234E 83C404                  add esp, 00000004
:00472351 8BC6                    mov eax, esi
:00472353 5F                      pop edi
:00472354 5E                      pop esi
:00472355 5D                      pop ebp
:00472356 5B                      pop ebx
:00472357 59                      pop ecx
:00472358 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047230C(C), :0047231D(C), :00472332(C)
|
:00472359 8B74242C                mov esi, dword ptr [esp+2C]
:0047235D 57                      push edi
:0047235E E8DDBBFFFF              call 0046DF40
:00472363 83C404                  add esp, 00000004
:00472366 8BC6                    mov eax, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004722DB(C)
|
:00472368 5F                      pop edi
:00472369 5E                      pop esi
:0047236A 5D                      pop ebp
:0047236B 5B                      pop ebx
:0047236C 59                      pop ecx
:0047236D C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472299(C)
|
:0047236E 8D4C2412                lea ecx, dword ptr [esp+12]
:00472372 51                      push ecx
:00472373 6A01                    push 00000001
:00472375 68C0514700              push 004751C0
:0047237A 6A01                    push 00000001

* Reference To: KERNEL32.GetStringTypeW, Ord:012Eh
                                  |
:0047237C FF15FC854B00            Call dword ptr [004B85FC]
:00472382 85C0                    test eax, eax
:00472384 740F                    je 00472395
:00472386 B801000000              mov eax, 00000001
:0047238B A378724B00              mov dword ptr [004B7278], eax
:00472390 E914FFFFFF              jmp 004722A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472384(C)
|
:00472395 5F                      pop edi
:00472396 5E                      pop esi
:00472397 5D                      pop ebp
:00472398 33C0                    xor eax, eax
:0047239A 5B                      pop ebx
:0047239B 59                      pop ecx
:0047239C C3                      ret


:0047239D 90                      nop
:0047239E 90                      nop
:0047239F 90                      nop

* Referenced by a CALL at Address:
|:004717B9   
|
:004723A0 A180724B00              mov eax, dword ptr [004B7280]
:004723A5 53                      push ebx

* Reference To: KERNEL32.LCMapStringA, Ord:018Dh
                                  |
:004723A6 8B1D1C864B00            mov ebx, dword ptr [004B861C]
:004723AC 55                      push ebp
:004723AD 56                      push esi
:004723AE 57                      push edi
:004723AF 85C0                    test eax, eax
:004723B1 7549                    jne 004723FC
:004723B3 6A00                    push 00000000
:004723B5 6A00                    push 00000000
:004723B7 6A01                    push 00000001
:004723B9 68BC514700              push 004751BC
:004723BE 6800010000              push 00000100
:004723C3 6A00                    push 00000000
:004723C5 FFD3                    call ebx
:004723C7 85C0                    test eax, eax
:004723C9 7407                    je 004723D2

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004723CB B802000000              mov eax, 00000002
:004723D0 EB25                    jmp 004723F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004723C9(C)
|
:004723D2 6A00                    push 00000000
:004723D4 6A00                    push 00000000
:004723D6 6A01                    push 00000001
:004723D8 68C0514700              push 004751C0
:004723DD 6800010000              push 00000100
:004723E2 6A00                    push 00000000

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:004723E4 FF1520864B00            Call dword ptr [004B8620]
:004723EA 85C0                    test eax, eax
:004723EC 0F84C3010000            je 004725B5
:004723F2 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004723D0(U)
|
:004723F7 A380724B00              mov dword ptr [004B7280], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004723B1(C)
|
:004723FC 8B742420                mov esi, dword ptr [esp+20]
:00472400 85F6                    test esi, esi
:00472402 7E17                    jle 0047241B
:00472404 8B7C241C                mov edi, dword ptr [esp+1C]
:00472408 56                      push esi
:00472409 57                      push edi
:0047240A E8B1010000              call 004725C0
:0047240F 8BF0                    mov esi, eax
:00472411 A180724B00              mov eax, dword ptr [004B7280]
:00472416 83C408                  add esp, 00000008
:00472419 EB04                    jmp 0047241F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472402(C)
|
:0047241B 8B7C241C                mov edi, dword ptr [esp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472419(U)
|
:0047241F 83F802                  cmp eax, 00000002
:00472422 751D                    jne 00472441
:00472424 8B442428                mov eax, dword ptr [esp+28]
:00472428 8B4C2424                mov ecx, dword ptr [esp+24]
:0047242C 8B542418                mov edx, dword ptr [esp+18]
:00472430 50                      push eax
:00472431 8B442418                mov eax, dword ptr [esp+18]
:00472435 51                      push ecx
:00472436 56                      push esi
:00472437 57                      push edi
:00472438 52                      push edx
:00472439 50                      push eax
:0047243A FFD3                    call ebx
:0047243C 5F                      pop edi
:0047243D 5E                      pop esi
:0047243E 5D                      pop ebp
:0047243F 5B                      pop ebx
:00472440 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472422(C)
|
:00472441 83F801                  cmp eax, 00000001
:00472444 0F85D2000000            jne 0047251C
:0047244A 8B6C242C                mov ebp, dword ptr [esp+2C]
:0047244E C744242000000000        mov [esp+20], 00000000
:00472456 85ED                    test ebp, ebp
:00472458 750C                    jne 00472466
:0047245A 8B0D50724B00            mov ecx, dword ptr [004B7250]
:00472460 894C242C                mov dword ptr [esp+2C], ecx
:00472464 8BE9                    mov ebp, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472458(C)
|
:00472466 6A00                    push 00000000
:00472468 6A00                    push 00000000
:0047246A 56                      push esi
:0047246B 57                      push edi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:0047246C 6A09                    push 00000009
:0047246E 55                      push ebp

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:0047246F FF15B8854B00            Call dword ptr [004B85B8]
:00472475 8BF8                    mov edi, eax
:00472477 85FF                    test edi, edi
:00472479 7505                    jne 00472480
:0047247B 5F                      pop edi
:0047247C 5E                      pop esi
:0047247D 5D                      pop ebp
:0047247E 5B                      pop ebx
:0047247F C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472479(C)
|
:00472480 8D143F                  lea edx, dword ptr [edi+edi]
:00472483 52                      push edx
:00472484 E807BBFFFF              call 0046DF90
:00472489 8BD8                    mov ebx, eax
:0047248B 83C404                  add esp, 00000004
:0047248E 85DB                    test ebx, ebx
:00472490 7505                    jne 00472497
:00472492 5F                      pop edi
:00472493 5E                      pop esi
:00472494 5D                      pop ebp
:00472495 5B                      pop ebx
:00472496 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472490(C)
|
:00472497 8B44241C                mov eax, dword ptr [esp+1C]
:0047249B 57                      push edi
:0047249C 53                      push ebx
:0047249D 56                      push esi
:0047249E 50                      push eax
:0047249F 6A01                    push 00000001
:004724A1 55                      push ebp

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:004724A2 FF15B8854B00            Call dword ptr [004B85B8]
:004724A8 85C0                    test eax, eax
:004724AA 0F84EF000000            je 0047259F
:004724B0 8B6C2418                mov ebp, dword ptr [esp+18]
:004724B4 8B4C2414                mov ecx, dword ptr [esp+14]
:004724B8 6A00                    push 00000000
:004724BA 6A00                    push 00000000
:004724BC 57                      push edi
:004724BD 53                      push ebx
:004724BE 55                      push ebp
:004724BF 51                      push ecx

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:004724C0 FF1520864B00            Call dword ptr [004B8620]
:004724C6 8BF0                    mov esi, eax
:004724C8 85F6                    test esi, esi
:004724CA 0F84CF000000            je 0047259F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0400, "1000"
                                  |
:004724D0 F7C500040000            test ebp, 00000400
:004724D6 7449                    je 00472521
:004724D8 8B442428                mov eax, dword ptr [esp+28]
:004724DC 85C0                    test eax, eax
:004724DE 7424                    je 00472504
:004724E0 3BF0                    cmp esi, eax
:004724E2 0F8FB7000000            jg 0047259F
:004724E8 8B542424                mov edx, dword ptr [esp+24]
:004724EC 50                      push eax
:004724ED 8B442418                mov eax, dword ptr [esp+18]
:004724F1 52                      push edx
:004724F2 57                      push edi
:004724F3 53                      push ebx
:004724F4 55                      push ebp
:004724F5 50                      push eax

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:004724F6 FF1520864B00            Call dword ptr [004B8620]
:004724FC 85C0                    test eax, eax
:004724FE 0F849B000000            je 0047259F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004724DE(C), :00472577(U), :00472599(C)
|
:00472504 53                      push ebx
:00472505 E836BAFFFF              call 0046DF40
:0047250A 8B4C2424                mov ecx, dword ptr [esp+24]
:0047250E 83C404                  add esp, 00000004
:00472511 51                      push ecx
:00472512 E829BAFFFF              call 0046DF40
:00472517 83C404                  add esp, 00000004
:0047251A 8BC6                    mov eax, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472444(C)
|
:0047251C 5F                      pop edi
:0047251D 5E                      pop esi
:0047251E 5D                      pop ebp
:0047251F 5B                      pop ebx
:00472520 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004724D6(C)
|
:00472521 8D0C36                  lea ecx, dword ptr [esi+esi]
:00472524 51                      push ecx
:00472525 E866BAFFFF              call 0046DF90
:0047252A 83C404                  add esp, 00000004
:0047252D 89442420                mov dword ptr [esp+20], eax
:00472531 85C0                    test eax, eax
:00472533 746A                    je 0047259F
:00472535 8BD0                    mov edx, eax
:00472537 8B442414                mov eax, dword ptr [esp+14]
:0047253B 56                      push esi
:0047253C 52                      push edx
:0047253D 57                      push edi
:0047253E 53                      push ebx
:0047253F 55                      push ebp
:00472540 50                      push eax

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:00472541 FF1520864B00            Call dword ptr [004B8620]
:00472547 85C0                    test eax, eax
:00472549 7454                    je 0047259F
:0047254B 8B442428                mov eax, dword ptr [esp+28]
:0047254F 6A00                    push 00000000
:00472551 85C0                    test eax, eax
:00472553 6A00                    push 00000000
:00472555 7522                    jne 00472579
:00472557 8B4C2428                mov ecx, dword ptr [esp+28]
:0047255B 8B542434                mov edx, dword ptr [esp+34]
:0047255F 6A00                    push 00000000
:00472561 6A00                    push 00000000
:00472563 56                      push esi
:00472564 51                      push ecx
:00472565 6820020000              push 00000220
:0047256A 52                      push edx

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:0047256B FF159C854B00            Call dword ptr [004B859C]
:00472571 8BF0                    mov esi, eax
:00472573 85F6                    test esi, esi
:00472575 7428                    je 0047259F
:00472577 EB8B                    jmp 00472504

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472555(C)
|
:00472579 8B4C2428                mov ecx, dword ptr [esp+28]
:0047257D 8B542434                mov edx, dword ptr [esp+34]
:00472581 50                      push eax
:00472582 8B442430                mov eax, dword ptr [esp+30]
:00472586 50                      push eax
:00472587 56                      push esi
:00472588 51                      push ecx
:00472589 6820020000              push 00000220
:0047258E 52                      push edx

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:0047258F FF159C854B00            Call dword ptr [004B859C]
:00472595 8BF0                    mov esi, eax
:00472597 85F6                    test esi, esi
:00472599 0F8565FFFFFF            jne 00472504

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004724AA(C), :004724CA(C), :004724E2(C), :004724FE(C), :00472533(C)
|:00472549(C), :00472575(C)
|
:0047259F 53                      push ebx
:004725A0 E89BB9FFFF              call 0046DF40
:004725A5 8B442424                mov eax, dword ptr [esp+24]
:004725A9 83C404                  add esp, 00000004
:004725AC 50                      push eax
:004725AD E88EB9FFFF              call 0046DF40
:004725B2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004723EC(C)
|
:004725B5 5F                      pop edi
:004725B6 5E                      pop esi
:004725B7 5D                      pop ebp
:004725B8 33C0                    xor eax, eax
:004725BA 5B                      pop ebx
:004725BB C3                      ret


:004725BC 90                      nop
:004725BD 90                      nop
:004725BE 90                      nop
:004725BF 90                      nop

* Referenced by a CALL at Address:
|:0047240A   
|
:004725C0 8B542408                mov edx, dword ptr [esp+08]
:004725C4 56                      push esi
:004725C5 8B742408                mov esi, dword ptr [esp+08]
:004725C9 85D2                    test edx, edx
:004725CB 57                      push edi
:004725CC 8BC6                    mov eax, esi
:004725CE 8D4AFF                  lea ecx, dword ptr [edx-01]
:004725D1 740D                    je 004725E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004725DE(C)
|
:004725D3 803800                  cmp byte ptr [eax], 00
:004725D6 7408                    je 004725E0
:004725D8 40                      inc eax
:004725D9 8BF9                    mov edi, ecx
:004725DB 49                      dec ecx
:004725DC 85FF                    test edi, edi
:004725DE 75F3                    jne 004725D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004725D1(C), :004725D6(C)
|
:004725E0 803800                  cmp byte ptr [eax], 00
:004725E3 7505                    jne 004725EA
:004725E5 2BC6                    sub eax, esi
:004725E7 5F                      pop edi
:004725E8 5E                      pop esi
:004725E9 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004725E3(C)
|
:004725EA 5F                      pop edi
:004725EB 5E                      pop esi
:004725EC 8BC2                    mov eax, edx
:004725EE C3                      ret


:004725EF 90                      nop

* Referenced by a CALL at Addresses:
|:004718AD   , :004718C5   , :00472631   , :00472647   , :00472662   
|:0047267D   , :004734C5   
|
:004725F0 8B542404                mov edx, dword ptr [esp+04]
:004725F4 56                      push esi
:004725F5 8B74240C                mov esi, dword ptr [esp+0C]
:004725F9 33C0                    xor eax, eax
:004725FB 8D0C16                  lea ecx, dword ptr [esi+edx]
:004725FE 3BCA                    cmp ecx, edx
:00472600 7204                    jb 00472606
:00472602 3BCE                    cmp ecx, esi
:00472604 7305                    jnb 0047260B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472600(C)
|
:00472606 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472604(C)
|
:0047260B 8B542410                mov edx, dword ptr [esp+10]
:0047260F 5E                      pop esi
:00472610 890A                    mov dword ptr [edx], ecx
:00472612 C3                      ret


:00472613 90                      nop
:00472614 90                      nop
:00472615 90                      nop
:00472616 90                      nop
:00472617 90                      nop
:00472618 90                      nop
:00472619 90                      nop
:0047261A 90                      nop
:0047261B 90                      nop
:0047261C 90                      nop
:0047261D 90                      nop
:0047261E 90                      nop
:0047261F 90                      nop

* Referenced by a CALL at Addresses:
|:00472748   , :0047276E   , :0047324A   
|
:00472620 56                      push esi
:00472621 8B742408                mov esi, dword ptr [esp+08]
:00472625 57                      push edi
:00472626 8B7C2410                mov edi, dword ptr [esp+10]
:0047262A 8B0E                    mov ecx, dword ptr [esi]
:0047262C 56                      push esi
:0047262D 8B07                    mov eax, dword ptr [edi]
:0047262F 50                      push eax
:00472630 51                      push ecx
:00472631 E8BAFFFFFF              call 004725F0
:00472636 83C40C                  add esp, 0000000C
:00472639 85C0                    test eax, eax
:0047263B 7419                    je 00472656
:0047263D 8B5604                  mov edx, dword ptr [esi+04]
:00472640 8D4604                  lea eax, dword ptr [esi+04]
:00472643 50                      push eax
:00472644 6A01                    push 00000001
:00472646 52                      push edx
:00472647 E8A4FFFFFF              call 004725F0
:0047264C 83C40C                  add esp, 0000000C
:0047264F 85C0                    test eax, eax
:00472651 7403                    je 00472656
:00472653 FF4608                  inc [esi+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047263B(C), :00472651(C)
|
:00472656 8B4F04                  mov ecx, dword ptr [edi+04]
:00472659 8B5604                  mov edx, dword ptr [esi+04]
:0047265C 8D4604                  lea eax, dword ptr [esi+04]
:0047265F 50                      push eax
:00472660 51                      push ecx
:00472661 52                      push edx
:00472662 E889FFFFFF              call 004725F0
:00472667 83C40C                  add esp, 0000000C
:0047266A 85C0                    test eax, eax
:0047266C 7403                    je 00472671
:0047266E FF4608                  inc [esi+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047266C(C)
|
:00472671 8B4F08                  mov ecx, dword ptr [edi+08]
:00472674 8B5608                  mov edx, dword ptr [esi+08]
:00472677 8D4608                  lea eax, dword ptr [esi+08]
:0047267A 50                      push eax
:0047267B 51                      push ecx
:0047267C 52                      push edx
:0047267D E86EFFFFFF              call 004725F0
:00472682 83C40C                  add esp, 0000000C
:00472685 5F                      pop edi
:00472686 5E                      pop esi
:00472687 C3                      ret


:00472688 90                      nop
:00472689 90                      nop
:0047268A 90                      nop
:0047268B 90                      nop
:0047268C 90                      nop
:0047268D 90                      nop
:0047268E 90                      nop
:0047268F 90                      nop

* Referenced by a CALL at Addresses:
|:00472731   , :0047273A   , :00472751   , :004727C0   , :004731D9   
|:0047322B   , :00473238   , :00473257   , :00473531   
|
:00472690 8B442404                mov eax, dword ptr [esp+04]
:00472694 56                      push esi
:00472695 57                      push edi
:00472696 8B30                    mov esi, dword ptr [eax]
:00472698 8B7804                  mov edi, dword ptr [eax+04]
:0047269B 8BCE                    mov ecx, esi
:0047269D 03F6                    add esi, esi
:0047269F 8930                    mov dword ptr [eax], esi
:004726A1 8D343F                  lea esi, dword ptr [edi+edi]
:004726A4 C1E91F                  shr ecx, 1F
:004726A7 0BF1                    or esi, ecx
:004726A9 8B4808                  mov ecx, dword ptr [eax+08]
:004726AC 8BD7                    mov edx, edi
:004726AE 897004                  mov dword ptr [eax+04], esi
:004726B1 C1EA1F                  shr edx, 1F
:004726B4 D1E1                    shl ecx, 1
:004726B6 0BCA                    or ecx, edx
:004726B8 5F                      pop edi
:004726B9 894808                  mov dword ptr [eax+08], ecx
:004726BC 5E                      pop esi
:004726BD C3                      ret


:004726BE 90                      nop
:004726BF 90                      nop

* Referenced by a CALL at Addresses:
|:004731F7   , :00473584   
|
:004726C0 8B442404                mov eax, dword ptr [esp+04]
:004726C4 56                      push esi
:004726C5 57                      push edi
:004726C6 8B5008                  mov edx, dword ptr [eax+08]
:004726C9 8B4804                  mov ecx, dword ptr [eax+04]
:004726CC 8BF2                    mov esi, edx
:004726CE 8BF9                    mov edi, ecx
:004726D0 C1E61F                  shl esi, 1F
:004726D3 D1E9                    shr ecx, 1
:004726D5 0BCE                    or ecx, esi
:004726D7 894804                  mov dword ptr [eax+04], ecx
:004726DA 8B08                    mov ecx, dword ptr [eax]
:004726DC C1E71F                  shl edi, 1F
:004726DF D1E9                    shr ecx, 1
:004726E1 D1EA                    shr edx, 1
:004726E3 0BCF                    or ecx, edi
:004726E5 5F                      pop edi
:004726E6 895008                  mov dword ptr [eax+08], edx
:004726E9 8908                    mov dword ptr [eax], ecx
:004726EB 5E                      pop esi
:004726EC C3                      ret


:004726ED 90                      nop
:004726EE 90                      nop
:004726EF 90                      nop

* Referenced by a CALL at Address:
|:00472D37   
|
:004726F0 8B442408                mov eax, dword ptr [esp+08]
:004726F4 83EC0C                  sub esp, 0000000C
:004726F7 53                      push ebx
:004726F8 55                      push ebp
:004726F9 56                      push esi
:004726FA 8B742424                mov esi, dword ptr [esp+24]
:004726FE 33ED                    xor ebp, ebp
:00472700 57                      push edi
:00472701 3BC5                    cmp eax, ebp
:00472703 BF4E400000              mov edi, 0000404E
:00472708 892E                    mov dword ptr [esi], ebp
:0047270A 896E04                  mov dword ptr [esi+04], ebp
:0047270D 896E08                  mov dword ptr [esi+08], ebp
:00472710 7670                    jbe 00472782
:00472712 8B5C2420                mov ebx, dword ptr [esp+20]
:00472716 89442428                mov dword ptr [esp+28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472780(C)
|
:0047271A 8BC6                    mov eax, esi
:0047271C 56                      push esi
:0047271D 8B08                    mov ecx, dword ptr [eax]
:0047271F 894C2414                mov dword ptr [esp+14], ecx
:00472723 8B5004                  mov edx, dword ptr [eax+04]
:00472726 89542418                mov dword ptr [esp+18], edx
:0047272A 8B4008                  mov eax, dword ptr [eax+08]
:0047272D 8944241C                mov dword ptr [esp+1C], eax
:00472731 E85AFFFFFF              call 00472690
:00472736 83C404                  add esp, 00000004
:00472739 56                      push esi
:0047273A E851FFFFFF              call 00472690
:0047273F 83C404                  add esp, 00000004
:00472742 8D4C2410                lea ecx, dword ptr [esp+10]
:00472746 51                      push ecx
:00472747 56                      push esi
:00472748 E8D3FEFFFF              call 00472620
:0047274D 83C408                  add esp, 00000008
:00472750 56                      push esi
:00472751 E83AFFFFFF              call 00472690
:00472756 0FBE13                  movsx edx, byte ptr [ebx]
:00472759 83C404                  add esp, 00000004
:0047275C 8D442410                lea eax, dword ptr [esp+10]
:00472760 89542410                mov dword ptr [esp+10], edx
:00472764 896C2414                mov dword ptr [esp+14], ebp
:00472768 50                      push eax
:00472769 56                      push esi
:0047276A 896C2420                mov dword ptr [esp+20], ebp
:0047276E E8ADFEFFFF              call 00472620
:00472773 8B442430                mov eax, dword ptr [esp+30]
:00472777 83C408                  add esp, 00000008
:0047277A 43                      inc ebx
:0047277B 48                      dec eax
:0047277C 89442428                mov dword ptr [esp+28], eax
:00472780 7598                    jne 0047271A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472710(C)
|
:00472782 396E08                  cmp dword ptr [esi+08], ebp
:00472785 752C                    jne 004727B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004727B1(C)
|
:00472787 8B4604                  mov eax, dword ptr [esi+04]
:0047278A 81C7F0FF0000            add edi, 0000FFF0
:00472790 8BC8                    mov ecx, eax
:00472792 C1E910                  shr ecx, 10
:00472795 894E08                  mov dword ptr [esi+08], ecx
:00472798 8B0E                    mov ecx, dword ptr [esi]
:0047279A 8BD1                    mov edx, ecx
:0047279C C1EA10                  shr edx, 10
:0047279F C1E010                  shl eax, 10
:004727A2 0BD0                    or edx, eax
:004727A4 8B4608                  mov eax, dword ptr [esi+08]
:004727A7 C1E110                  shl ecx, 10
:004727AA 3BC5                    cmp eax, ebp
:004727AC 895604                  mov dword ptr [esi+04], edx
:004727AF 890E                    mov dword ptr [esi], ecx
:004727B1 74D4                    je 00472787

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472785(C)
|
:004727B3 8B4608                  mov eax, dword ptr [esi+08]
:004727B6 BB00800000              mov ebx, 00008000
:004727BB 85C3                    test ebx, eax
:004727BD 7516                    jne 004727D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004727D3(C)
|
:004727BF 56                      push esi
:004727C0 E8CBFEFFFF              call 00472690
:004727C5 8B4608                  mov eax, dword ptr [esi+08]
:004727C8 83C404                  add esp, 00000004
:004727CB 81C7FFFF0000            add edi, 0000FFFF
:004727D1 85C3                    test ebx, eax
:004727D3 74EA                    je 004727BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004727BD(C)
|
:004727D5 66897E0A                mov word ptr [esi+0A], di
:004727D9 5F                      pop edi
:004727DA 5E                      pop esi
:004727DB 5D                      pop ebp
:004727DC 5B                      pop ebx
:004727DD 83C40C                  add esp, 0000000C
:004727E0 C3                      ret


:004727E1 90                      nop
:004727E2 90                      nop
:004727E3 90                      nop
:004727E4 90                      nop
:004727E5 90                      nop
:004727E6 90                      nop
:004727E7 90                      nop
:004727E8 90                      nop
:004727E9 90                      nop
:004727EA 90                      nop
:004727EB 90                      nop
:004727EC 90                      nop
:004727ED 90                      nop
:004727EE 90                      nop
:004727EF 90                      nop

* Referenced by a CALL at Addresses:
|:00471CBA   , :00471CFA   
|
:004727F0 83EC60                  sub esp, 00000060
:004727F3 8B4C246C                mov ecx, dword ptr [esp+6C]
:004727F7 53                      push ebx
:004727F8 8D442448                lea eax, dword ptr [esp+48]
:004727FC 55                      push ebp
:004727FD 56                      push esi
:004727FE 89442410                mov dword ptr [esp+10], eax
:00472802 57                      push edi
:00472803 33C0                    xor eax, eax
:00472805 33F6                    xor esi, esi
:00472807 33D2                    xor edx, edx
:00472809 8BF9                    mov edi, ecx
:0047280B 89442434                mov dword ptr [esp+34], eax
:0047280F C744242401000000        mov [esp+24], 00000001
:00472817 8974241C                mov dword ptr [esp+1C], esi
:0047281B 89442418                mov dword ptr [esp+18], eax
:0047281F 89442430                mov dword ptr [esp+30], eax
:00472823 8944242C                mov dword ptr [esp+2C], eax
:00472827 89442438                mov dword ptr [esp+38], eax
:0047282B 8944243C                mov dword ptr [esp+3C], eax
:0047282F 89442428                mov dword ptr [esp+28], eax
:00472833 89542410                mov dword ptr [esp+10], edx
:00472837 89442440                mov dword ptr [esp+40], eax
:0047283B 8BE9                    mov ebp, ecx
:0047283D 897C2420                mov dword ptr [esp+20], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472859(U)
|
:00472841 8A4D00                  mov cl, byte ptr [ebp+00]
:00472844 80F920                  cmp cl, 20
:00472847 740F                    je 00472858
:00472849 80F909                  cmp cl, 09
:0047284C 740A                    je 00472858
:0047284E 80F90A                  cmp cl, 0A
:00472851 7405                    je 00472858
:00472853 80F90D                  cmp cl, 0D
:00472856 7503                    jne 0047285B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472847(C), :0047284C(C), :00472851(C)
|
:00472858 45                      inc ebp
:00472859 EBE6                    jmp 00472841

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472856(C)
|
:0047285B B901000000              mov ecx, 00000001
:00472860 EB04                    jmp 00472866

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CC6(C)
|
:00472862 8B542410                mov edx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472860(U)
|
:00472866 8A5D00                  mov bl, byte ptr [ebp+00]
:00472869 45                      inc ebp
:0047286A 83F80B                  cmp eax, 0000000B
:0047286D 885C247C                mov byte ptr [esp+7C], bl
:00472871 0F874C040000            ja 00472CC3
:00472877 FF2485502E4700          jmp dword ptr [4*eax+00472E50]
:0047287E 80FB31                  cmp bl, 31
:00472881 7C0F                    jl 00472892
:00472883 80FB39                  cmp bl, 39
:00472886 7F0A                    jg 00472892

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00472888 B803000000              mov eax, 00000003
:0047288D E930040000              jmp 00472CC2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472881(C), :00472886(C)
|
:00472892 3A1D9C0C4800            cmp bl, byte ptr [00480C9C]
:00472898 750A                    jne 004728A4

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0047289A B805000000              mov eax, 00000005
:0047289F E91F040000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472898(C)
|
:004728A4 0FBEC3                  movsx eax, bl
:004728A7 83E82B                  sub eax, 0000002B
:004728AA 7427                    je 004728D3
:004728AC 83E802                  sub eax, 00000002
:004728AF 7410                    je 004728C1
:004728B1 83E803                  sub eax, 00000003
:004728B4 0F8503040000            jne 00472CBD
:004728BA 8BC1                    mov eax, ecx
:004728BC E902040000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004728AF(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004728C1 B802000000              mov eax, 00000002
:004728C6 C744243400800000        mov [esp+34], 00008000
:004728CE E9F0030000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004728AA(C)
|

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:004728D3 B802000000              mov eax, 00000002
:004728D8 C744243400000000        mov [esp+34], 00000000
:004728E0 E9DE030000              jmp 00472CC3
:004728E5 80FB31                  cmp bl, 31
:004728E8 894C2418                mov dword ptr [esp+18], ecx
:004728EC 7C0F                    jl 004728FD
:004728EE 80FB39                  cmp bl, 39
:004728F1 7F0A                    jg 004728FD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:004728F3 B803000000              mov eax, 00000003
:004728F8 E9C5030000              jmp 00472CC2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004728EC(C), :004728F1(C)
|
:004728FD 3A1D9C0C4800            cmp bl, byte ptr [00480C9C]
:00472903 750A                    jne 0047290F

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472905 B804000000              mov eax, 00000004
:0047290A E9B4030000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472903(C)
|
:0047290F 0FBEC3                  movsx eax, bl
:00472912 83C0D5                  add eax, FFFFFFD5
:00472915 83F83A                  cmp eax, 0000003A
:00472918 0F879F030000            ja 00472CBD
:0047291E 33D2                    xor edx, edx
:00472920 8A90982E4700            mov dl, byte ptr [eax+00472E98]
:00472926 FF2495802E4700          jmp dword ptr [4*edx+00472E80]
:0047292D 80FB31                  cmp bl, 31
:00472930 7C0F                    jl 00472941
:00472932 80FB39                  cmp bl, 39
:00472935 7F0A                    jg 00472941

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "l'"
                                  |
:00472937 B803000000              mov eax, 00000003
:0047293C E981030000              jmp 00472CC2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472930(C), :00472935(C)
|
:00472941 3A1D9C0C4800            cmp bl, byte ptr [00480C9C]
:00472947 750A                    jne 00472953

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00472949 B805000000              mov eax, 00000005
:0047294E E970030000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472947(C)
|
:00472953 80FB30                  cmp bl, 30
:00472956 740C                    je 00472964

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00472958 B80A000000              mov eax, 0000000A
:0047295D 8BEF                    mov ebp, edi
:0047295F E95F030000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472956(C)
|
:00472964 8BC1                    mov eax, ecx
:00472966 E958030000              jmp 00472CC3
:0047296B 894C2418                mov dword ptr [esp+18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004729C7(U), :004729DA(U)
|
:0047296F 390D980C4800            cmp dword ptr [00480C98], ecx
:00472975 7E1B                    jle 00472992
:00472977 8B44247C                mov eax, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0047297B 6A04                    push 00000004
:0047297D 25FF000000              and eax, 000000FF
:00472982 50                      push eax
:00472983 E8D8ECFFFF              call 00471660
:00472988 83C408                  add esp, 00000008
:0047298B B901000000              mov ecx, 00000001
:00472990 EB15                    jmp 004729A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472975(C)
|
:00472992 8B54247C                mov edx, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00472996 A1A80C4800              mov eax, dword ptr [00480CA8]
:0047299B 81E2FF000000            and edx, 000000FF
:004729A1 8A0450                  mov al, byte ptr [eax+2*edx]
:004729A4 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472990(U)
|
:004729A7 85C0                    test eax, eax
:004729A9 7431                    je 004729DC
:004729AB 83FE19                  cmp esi, 00000019
:004729AE 7319                    jnb 004729C9
:004729B0 8B442414                mov eax, dword ptr [esp+14]
:004729B4 80EB30                  sub bl, 30
:004729B7 46                      inc esi
:004729B8 8818                    mov byte ptr [eax], bl
:004729BA 8A5D00                  mov bl, byte ptr [ebp+00]
:004729BD 40                      inc eax
:004729BE 885C247C                mov byte ptr [esp+7C], bl
:004729C2 89442414                mov dword ptr [esp+14], eax
:004729C6 45                      inc ebp
:004729C7 EBA6                    jmp 0047296F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004729AE(C)
|
:004729C9 8B442410                mov eax, dword ptr [esp+10]
:004729CD 8A5D00                  mov bl, byte ptr [ebp+00]
:004729D0 40                      inc eax
:004729D1 885C247C                mov byte ptr [esp+7C], bl
:004729D5 89442410                mov dword ptr [esp+10], eax
:004729D9 45                      inc ebp
:004729DA EB93                    jmp 0047296F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004729A9(C)
|
:004729DC A09C0C4800              mov al, byte ptr [00480C9C]
:004729E1 8974241C                mov dword ptr [esp+1C], esi
:004729E5 3AD8                    cmp bl, al
:004729E7 750A                    jne 004729F3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004729E9 B804000000              mov eax, 00000004
:004729EE E9D0020000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004729E7(C)
|
:004729F3 0FBEC3                  movsx eax, bl
:004729F6 83C0D5                  add eax, FFFFFFD5
:004729F9 83F83A                  cmp eax, 0000003A
:004729FC 0F87BB020000            ja 00472CBD
:00472A02 33D2                    xor edx, edx
:00472A04 8A90E82E4700            mov dl, byte ptr [eax+00472EE8]
:00472A0A FF2495D42E4700          jmp dword ptr [4*edx+00472ED4]
:00472A11 85F6                    test esi, esi
:00472A13 894C2418                mov dword ptr [esp+18], ecx
:00472A17 894C2430                mov dword ptr [esp+30], ecx
:00472A1B 7517                    jne 00472A34
:00472A1D 80FB30                  cmp bl, 30
:00472A20 7512                    jne 00472A34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A2E(C)
|
:00472A22 8A5D00                  mov bl, byte ptr [ebp+00]
:00472A25 4A                      dec edx
:00472A26 45                      inc ebp
:00472A27 80FB30                  cmp bl, 30
:00472A2A 885C247C                mov byte ptr [esp+7C], bl
:00472A2E 74F2                    je 00472A22
:00472A30 89542410                mov dword ptr [esp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472A1B(C), :00472A20(C), :00472A95(U)
|
:00472A34 390D980C4800            cmp dword ptr [00480C98], ecx
:00472A3A 7E1B                    jle 00472A57
:00472A3C 8B44247C                mov eax, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472A40 6A04                    push 00000004
:00472A42 25FF000000              and eax, 000000FF
:00472A47 50                      push eax
:00472A48 E813ECFFFF              call 00471660
:00472A4D 83C408                  add esp, 00000008
:00472A50 B901000000              mov ecx, 00000001
:00472A55 EB15                    jmp 00472A6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A3A(C)
|
:00472A57 8B54247C                mov edx, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00472A5B A1A80C4800              mov eax, dword ptr [00480CA8]
:00472A60 81E2FF000000            and edx, 000000FF
:00472A66 8A0450                  mov al, byte ptr [eax+2*edx]
:00472A69 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A55(U)
|
:00472A6C 85C0                    test eax, eax
:00472A6E 7427                    je 00472A97
:00472A70 83FE19                  cmp esi, 00000019
:00472A73 7318                    jnb 00472A8D
:00472A75 8B442414                mov eax, dword ptr [esp+14]
:00472A79 80EB30                  sub bl, 30
:00472A7C 46                      inc esi
:00472A7D 8818                    mov byte ptr [eax], bl
:00472A7F 40                      inc eax
:00472A80 89442414                mov dword ptr [esp+14], eax
:00472A84 8B442410                mov eax, dword ptr [esp+10]
:00472A88 48                      dec eax
:00472A89 89442410                mov dword ptr [esp+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A73(C)
|
:00472A8D 8A5D00                  mov bl, byte ptr [ebp+00]
:00472A90 45                      inc ebp
:00472A91 885C247C                mov byte ptr [esp+7C], bl
:00472A95 EB9D                    jmp 00472A34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A6E(C)
|
:00472A97 0FBEC3                  movsx eax, bl
:00472A9A 83C0D5                  add eax, FFFFFFD5
:00472A9D 8974241C                mov dword ptr [esp+1C], esi
:00472AA1 83F83A                  cmp eax, 0000003A
:00472AA4 0F8713020000            ja 00472CBD
:00472AAA 33D2                    xor edx, edx
:00472AAC 8A90382F4700            mov dl, byte ptr [eax+00472F38]
:00472AB2 FF2495242F4700          jmp dword ptr [4*edx+00472F24]

* Possible Reference to String Resource ID=00006: ""
                                  |
:00472AB9 B806000000              mov eax, 00000006
:00472ABE E900020000              jmp 00472CC3
:00472AC3 4D                      dec ebp

* Possible Reference to String Resource ID=00011: "
"
                                  |
:00472AC4 B80B000000              mov eax, 0000000B
:00472AC9 E9F5010000              jmp 00472CC3
:00472ACE A1980C4800              mov eax, dword ptr [00480C98]
:00472AD3 894C2430                mov dword ptr [esp+30], ecx
:00472AD7 3BC1                    cmp eax, ecx
:00472AD9 7E16                    jle 00472AF1
:00472ADB 8B44247C                mov eax, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472ADF 6A04                    push 00000004
:00472AE1 25FF000000              and eax, 000000FF
:00472AE6 50                      push eax
:00472AE7 E874EBFFFF              call 00471660
:00472AEC 83C408                  add esp, 00000008
:00472AEF EB16                    jmp 00472B07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472AD9(C)
|
:00472AF1 8B4C247C                mov ecx, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00472AF5 8B15A80C4800            mov edx, dword ptr [00480CA8]
:00472AFB 81E1FF000000            and ecx, 000000FF
:00472B01 8A044A                  mov al, byte ptr [edx+2*ecx]
:00472B04 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472AEF(U)
|
:00472B07 85C0                    test eax, eax
:00472B09 7410                    je 00472B1B

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472B0B B804000000              mov eax, 00000004
:00472B10 4D                      dec ebp
:00472B11 B901000000              mov ecx, 00000001
:00472B16 E9A8010000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472B09(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00472B1B B80A000000              mov eax, 0000000A
:00472B20 8BEF                    mov ebp, edi
:00472B22 B901000000              mov ecx, 00000001
:00472B27 E997010000              jmp 00472CC3
:00472B2C 8D7DFE                  lea edi, dword ptr [ebp-02]
:00472B2F 80FB31                  cmp bl, 31
:00472B32 897C2420                mov dword ptr [esp+20], edi
:00472B36 7C0F                    jl 00472B47
:00472B38 80FB39                  cmp bl, 39
:00472B3B 7F0A                    jg 00472B47

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00472B3D B809000000              mov eax, 00000009
:00472B42 E97B010000              jmp 00472CC2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472B36(C), :00472B3B(C)
|
:00472B47 0FBEC3                  movsx eax, bl
:00472B4A 83E82B                  sub eax, 0000002B
:00472B4D 0F8463010000            je 00472CB6
:00472B53 83E802                  sub eax, 00000002
:00472B56 0F844B010000            je 00472CA7
:00472B5C 83E803                  sub eax, 00000003
:00472B5F EB45                    jmp 00472BA6
:00472B61 80FB30                  cmp bl, 30
:00472B64 894C242C                mov dword ptr [esp+2C], ecx
:00472B68 7509                    jne 00472B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472B71(C)
|
:00472B6A 8A5D00                  mov bl, byte ptr [ebp+00]
:00472B6D 45                      inc ebp
:00472B6E 80FB30                  cmp bl, 30
:00472B71 74F7                    je 00472B6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472B68(C)
|
:00472B73 80FB31                  cmp bl, 31
:00472B76 0F8C41010000            jl 00472CBD
:00472B7C 80FB39                  cmp bl, 39
:00472B7F 0F8F38010000            jg 00472CBD

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00472B85 B809000000              mov eax, 00000009
:00472B8A E933010000              jmp 00472CC2
:00472B8F 80FB31                  cmp bl, 31
:00472B92 7C0F                    jl 00472BA3
:00472B94 80FB39                  cmp bl, 39
:00472B97 7F0A                    jg 00472BA3

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0009, ""
                                  |

* Possible Reference to String Resource ID=00009: "wm.^"
                                  |
:00472B99 B809000000              mov eax, 00000009
:00472B9E E91F010000              jmp 00472CC2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472B92(C), :00472B97(C)
|
:00472BA3 80FB30                  cmp bl, 30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472B5F(U)
|
:00472BA6 740C                    je 00472BB4

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00472BA8 B80A000000              mov eax, 0000000A
:00472BAD 8BEF                    mov ebp, edi
:00472BAF E90F010000              jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472BA6(C)
|

* Possible Reference to String Resource ID=00008: ""
                                  |
:00472BB4 B808000000              mov eax, 00000008
:00472BB9 E905010000              jmp 00472CC3
:00472BBE 894C242C                mov dword ptr [esp+2C], ecx
:00472BC2 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C1F(U)
|
:00472BC4 390D980C4800            cmp dword ptr [00480C98], ecx
:00472BCA 7E18                    jle 00472BE4
:00472BCC 8B74247C                mov esi, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472BD0 6A04                    push 00000004
:00472BD2 8BC6                    mov eax, esi
:00472BD4 25FF000000              and eax, 000000FF
:00472BD9 50                      push eax
:00472BDA E881EAFFFF              call 00471660
:00472BDF 83C408                  add esp, 00000008
:00472BE2 EB18                    jmp 00472BFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472BCA(C)
|
:00472BE4 8B74247C                mov esi, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00472BE8 8B15A80C4800            mov edx, dword ptr [00480CA8]
:00472BEE 8BCE                    mov ecx, esi
:00472BF0 81E1FF000000            and ecx, 000000FF
:00472BF6 8A044A                  mov al, byte ptr [edx+2*ecx]
:00472BF9 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472BE2(U)
|
:00472BFC 85C0                    test eax, eax
:00472BFE 7426                    je 00472C26
:00472C00 0FBECB                  movsx ecx, bl
:00472C03 8D04BF                  lea eax, dword ptr [edi+4*edi]
:00472C06 8D7C41D0                lea edi, dword ptr [ecx+2*eax-30]
:00472C0A 81FF50140000            cmp edi, 00001450
:00472C10 7F0F                    jg 00472C21
:00472C12 8A5D00                  mov bl, byte ptr [ebp+00]
:00472C15 45                      inc ebp
:00472C16 885C247C                mov byte ptr [esp+7C], bl
:00472C1A B901000000              mov ecx, 00000001
:00472C1F EBA3                    jmp 00472BC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C10(C)
|
:00472C21 BF51140000              mov edi, 00001451

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472BFE(C)
|
:00472C26 897C2428                mov dword ptr [esp+28], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C68(U)
|
:00472C2A 833D980C480001          cmp dword ptr [00480C98], 00000001
:00472C31 7E13                    jle 00472C46
:00472C33 81E6FF000000            and esi, 000000FF

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472C39 6A04                    push 00000004
:00472C3B 56                      push esi
:00472C3C E81FEAFFFF              call 00471660
:00472C41 83C408                  add esp, 00000008
:00472C44 EB12                    jmp 00472C58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C31(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00472C46 8B15A80C4800            mov edx, dword ptr [00480CA8]
:00472C4C 81E6FF000000            and esi, 000000FF
:00472C52 8A0472                  mov al, byte ptr [edx+2*esi]
:00472C55 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C44(U)
|
:00472C58 85C0                    test eax, eax
:00472C5A 740E                    je 00472C6A
:00472C5C 8A4500                  mov al, byte ptr [ebp+00]
:00472C5F 45                      inc ebp
:00472C60 8844247C                mov byte ptr [esp+7C], al
:00472C64 8B74247C                mov esi, dword ptr [esp+7C]
:00472C68 EBC0                    jmp 00472C2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C5A(C)
|
:00472C6A 8B74241C                mov esi, dword ptr [esp+1C]
:00472C6E 8B7C2420                mov edi, dword ptr [esp+20]

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00472C72 B80A000000              mov eax, 0000000A
:00472C77 4D                      dec ebp
:00472C78 B901000000              mov ecx, 00000001
:00472C7D EB44                    jmp 00472CC3
:00472C7F 8B84248C000000          mov eax, dword ptr [esp+0000008C]
:00472C86 85C0                    test eax, eax
:00472C88 7433                    je 00472CBD
:00472C8A 0FBEC3                  movsx eax, bl
:00472C8D 8D7DFF                  lea edi, dword ptr [ebp-01]
:00472C90 83E82B                  sub eax, 0000002B
:00472C93 897C2420                mov dword ptr [esp+20], edi
:00472C97 741D                    je 00472CB6
:00472C99 83E802                  sub eax, 00000002
:00472C9C 7409                    je 00472CA7

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00472C9E B80A000000              mov eax, 0000000A
:00472CA3 8BEF                    mov ebp, edi
:00472CA5 EB1C                    jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472B56(C), :00472C9C(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00472CA7 B807000000              mov eax, 00000007
:00472CAC C7442424FFFFFFFF        mov [esp+24], FFFFFFFF
:00472CB4 EB0D                    jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472B4D(C), :00472C97(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00472CB6 B807000000              mov eax, 00000007
:00472CBB EB06                    jmp 00472CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004728B4(C), :00472918(C), :004729FC(C), :00472AA4(C), :00472B76(C)
|:00472B7F(C), :00472C88(C)
|

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00472CBD B80A000000              mov eax, 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047288D(U), :004728F8(U), :0047293C(U), :00472B42(U), :00472B8A(U)
|:00472B9E(U)
|
:00472CC2 4D                      dec ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472871(C), :0047289F(U), :004728BC(U), :004728CE(U), :004728E0(U)
|:0047290A(U), :0047294E(U), :0047295F(U), :00472966(U), :004729EE(U)
|:00472ABE(U), :00472AC9(U), :00472B16(U), :00472B27(U), :00472BAF(U)
|:00472BB9(U), :00472C7D(U), :00472CA5(U), :00472CB4(U), :00472CBB(U)
|
:00472CC3 83F80A                  cmp eax, 0000000A
:00472CC6 0F8596FBFFFF            jne 00472862
:00472CCC 8B4C2478                mov ecx, dword ptr [esp+78]
:00472CD0 8B442418                mov eax, dword ptr [esp+18]
:00472CD4 85C0                    test eax, eax
:00472CD6 8929                    mov dword ptr [ecx], ebp
:00472CD8 0F84A6000000            je 00472D84
:00472CDE 83FE18                  cmp esi, 00000018
:00472CE1 7623                    jbe 00472D06
:00472CE3 8A44246B                mov al, byte ptr [esp+6B]
:00472CE7 3C05                    cmp al, 05
:00472CE9 7C06                    jl 00472CF1
:00472CEB FEC0                    inc al
:00472CED 8844246B                mov byte ptr [esp+6B], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CE9(C)
|
:00472CF1 8B442414                mov eax, dword ptr [esp+14]
:00472CF5 8B4C2410                mov ecx, dword ptr [esp+10]
:00472CF9 48                      dec eax
:00472CFA 41                      inc ecx
:00472CFB BE18000000              mov esi, 00000018
:00472D00 894C2410                mov dword ptr [esp+10], ecx
:00472D04 EB08                    jmp 00472D0E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CE1(C)
|
:00472D06 8B442414                mov eax, dword ptr [esp+14]
:00472D0A 8B4C2410                mov ecx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D04(U)
|
:00472D0E 85F6                    test esi, esi
:00472D10 0F862D010000            jbe 00472E43
:00472D16 8A50FF                  mov dl, byte ptr [eax-01]
:00472D19 48                      dec eax
:00472D1A 84D2                    test dl, dl
:00472D1C 750E                    jne 00472D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D26(C)
|
:00472D1E 8A50FF                  mov dl, byte ptr [eax-01]
:00472D21 4E                      dec esi
:00472D22 41                      inc ecx
:00472D23 48                      dec eax
:00472D24 84D2                    test dl, dl
:00472D26 74F6                    je 00472D1E
:00472D28 894C2410                mov dword ptr [esp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D1C(C)
|
:00472D2C 8D542444                lea edx, dword ptr [esp+44]
:00472D30 8D442454                lea eax, dword ptr [esp+54]
:00472D34 52                      push edx
:00472D35 56                      push esi
:00472D36 50                      push eax
:00472D37 E8B4F9FFFF              call 004726F0
:00472D3C 8B442430                mov eax, dword ptr [esp+30]
:00472D40 83C40C                  add esp, 0000000C
:00472D43 85C0                    test eax, eax
:00472D45 8B442428                mov eax, dword ptr [esp+28]
:00472D49 7D02                    jge 00472D4D
:00472D4B F7D8                    neg eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D49(C)
|
:00472D4D 8B542410                mov edx, dword ptr [esp+10]
:00472D51 8B4C242C                mov ecx, dword ptr [esp+2C]
:00472D55 03C2                    add eax, edx
:00472D57 85C9                    test ecx, ecx
:00472D59 7507                    jne 00472D62
:00472D5B 03842484000000          add eax, dword ptr [esp+00000084]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D59(C)
|
:00472D62 8B4C2430                mov ecx, dword ptr [esp+30]
:00472D66 85C9                    test ecx, ecx
:00472D68 7507                    jne 00472D71
:00472D6A 2B842488000000          sub eax, dword ptr [esp+00000088]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D68(C)
|
:00472D71 3D50140000              cmp eax, 00001450
:00472D76 0F8E88000000            jle 00472E04
:00472D7C C744243801000000        mov [esp+38], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472CD8(C), :00472E13(U)
|
:00472D84 8B74247C                mov esi, dword ptr [esp+7C]
:00472D88 8B54247C                mov edx, dword ptr [esp+7C]
:00472D8C 8B44247C                mov eax, dword ptr [esp+7C]
:00472D90 8B4C247C                mov ecx, dword ptr [esp+7C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472E3E(U), :00472E4B(U)
|
:00472D94 8B7C2418                mov edi, dword ptr [esp+18]
:00472D98 85FF                    test edi, edi
:00472D9A 750F                    jne 00472DAB
:00472D9C 33C9                    xor ecx, ecx
:00472D9E 33C0                    xor eax, eax
:00472DA0 33D2                    xor edx, edx
:00472DA2 33F6                    xor esi, esi

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472DA4 BB04000000              mov ebx, 00000004
:00472DA9 EB38                    jmp 00472DE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D9A(C)
|
:00472DAB 8B7C2438                mov edi, dword ptr [esp+38]
:00472DAF 85FF                    test edi, edi
:00472DB1 7415                    je 00472DC8
:00472DB3 33F6                    xor esi, esi
:00472DB5 B8FF7F0000              mov eax, 00007FFF
:00472DBA BA00000080              mov edx, 80000000
:00472DBF 33C9                    xor ecx, ecx

* Possible Reference to String Resource ID=00002: "
1"
                                  |
:00472DC1 BB02000000              mov ebx, 00000002
:00472DC6 EB1B                    jmp 00472DE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472DB1(C)
|
:00472DC8 8B7C243C                mov edi, dword ptr [esp+3C]
:00472DCC 85FF                    test edi, edi
:00472DCE 740F                    je 00472DDF
:00472DD0 33C9                    xor ecx, ecx
:00472DD2 33C0                    xor eax, eax
:00472DD4 33D2                    xor edx, edx
:00472DD6 33F6                    xor esi, esi
:00472DD8 BB01000000              mov ebx, 00000001
:00472DDD EB04                    jmp 00472DE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472DCE(C)
|
:00472DDF 8B5C2440                mov ebx, dword ptr [esp+40]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472DA9(U), :00472DC6(U), :00472DDD(U)
|
:00472DE3 8B7C2474                mov edi, dword ptr [esp+74]
:00472DE7 66890F                  mov word ptr [edi], cx
:00472DEA 8B4C2434                mov ecx, dword ptr [esp+34]
:00472DEE 0BC1                    or eax, ecx
:00472DF0 897702                  mov dword ptr [edi+02], esi
:00472DF3 895706                  mov dword ptr [edi+06], edx
:00472DF6 6689470A                mov word ptr [edi+0A], ax
:00472DFA 5F                      pop edi
:00472DFB 5E                      pop esi
:00472DFC 8BC3                    mov eax, ebx
:00472DFE 5D                      pop ebp
:00472DFF 5B                      pop ebx
:00472E00 83C460                  add esp, 00000060
:00472E03 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D76(C)
|
:00472E04 3DB0EBFFFF              cmp eax, FFFFEBB0
:00472E09 7D0D                    jge 00472E18
:00472E0B C744243C01000000        mov [esp+3C], 00000001
:00472E13 E96CFFFFFF              jmp 00472D84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E09(C)
|
:00472E18 8B8C2480000000          mov ecx, dword ptr [esp+00000080]
:00472E1F 8D542444                lea edx, dword ptr [esp+44]
:00472E23 51                      push ecx
:00472E24 50                      push eax
:00472E25 52                      push edx
:00472E26 E845080000              call 00473670
:00472E2B 8B4C2450                mov ecx, dword ptr [esp+50]
:00472E2F 8B742452                mov esi, dword ptr [esp+52]
:00472E33 8B542456                mov edx, dword ptr [esp+56]
:00472E37 8B44245A                mov eax, dword ptr [esp+5A]
:00472E3B 83C40C                  add esp, 0000000C
:00472E3E E951FFFFFF              jmp 00472D94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D10(C)
|
:00472E43 33C9                    xor ecx, ecx
:00472E45 33C0                    xor eax, eax
:00472E47 33D2                    xor edx, edx
:00472E49 33F6                    xor esi, esi
:00472E4B E944FFFFFF              jmp 00472D94

:00472E50 7E284700                DWORD 0047287E
:00472E54 E5284700                DWORD 004728E5
:00472E58 2D294700                DWORD 0047292D
:00472E5C 6B294700                DWORD 0047296B
:00472E60 112A4700                DWORD 00472A11
:00472E64 CE2A4700                DWORD 00472ACE
:00472E68 2C2B4700                DWORD 00472B2C
:00472E6C 8F2B4700                DWORD 00472B8F
:00472E70 612B4700                DWORD 00472B61
:00472E74 BE2B4700                DWORD 00472BBE
:00472E78 C32C4700                DWORD 00472CC3
:00472E7C 7F2C4700                DWORD 00472C7F
:00472E80 C32A4700                DWORD 00472AC3
:00472E84 C32A4700                DWORD 00472AC3
:00472E88 64294700                DWORD 00472964
:00472E8C B92A4700                DWORD 00472AB9
:00472E90 B92A4700                DWORD 00472AB9
:00472E94 BD2C4700                DWORD 00472CBD


:00472E98 000501050502            add byte ptr [02050501], al
:00472E9E 0505050505              add eax, 05050505
:00472EA3 0505050505              add eax, 05050505
:00472EA8 0505050505              add eax, 05050505
:00472EAD 0505050503              add eax, 03050505
:00472EB2 030505050505            add eax, dword ptr [05050505]
:00472EB8 0505050505              add eax, 05050505
:00472EBD 0505050505              add eax, 05050505
:00472EC2 0505050505              add eax, 05050505
:00472EC7 0505050505              add eax, 05050505
:00472ECC 0505050505              add eax, 05050505
:00472ED1 0404                    add al, 04
:00472ED3 90                      nop
:00472ED4 C3                      ret


:00472ED5 2A4700                  sub al, byte ptr [edi+00]
:00472ED8 C3                      ret


:00472ED9 2A4700                  sub al, byte ptr [edi+00]

:00472EDC B92A4700                DWORD 00472AB9
:00472EE0 B92A4700                DWORD 00472AB9
:00472EE4 BD2C4700                DWORD 00472CBD


:00472EE8 000401                  add byte ptr [ecx+eax], al
:00472EEB 0404                    add al, 04
:00472EED 0404                    add al, 04
:00472EEF 0404                    add al, 04
:00472EF1 0404                    add al, 04
:00472EF3 0404                    add al, 04
:00472EF5 0404                    add al, 04
:00472EF7 0404                    add al, 04
:00472EF9 0404                    add al, 04
:00472EFB 0404                    add al, 04
:00472EFD 0404                    add al, 04
:00472EFF 0404                    add al, 04
:00472F01 0202                    add al, byte ptr [edx]
:00472F03 0404                    add al, 04
:00472F05 0404                    add al, 04
:00472F07 0404                    add al, 04
:00472F09 0404                    add al, 04
:00472F0B 0404                    add al, 04
:00472F0D 0404                    add al, 04
:00472F0F 0404                    add al, 04
:00472F11 0404                    add al, 04
:00472F13 0404                    add al, 04
:00472F15 0404                    add al, 04
:00472F17 0404                    add al, 04
:00472F19 0404                    add al, 04
:00472F1B 0404                    add al, 04
:00472F1D 0404                    add al, 04
:00472F1F 0404                    add al, 04
:00472F21 0303                    add eax, dword ptr [ebx]
:00472F23 90                      nop
:00472F24 C3                      ret


:00472F25 2A4700                  sub al, byte ptr [edi+00]
:00472F28 C3                      ret


:00472F29 2A4700                  sub al, byte ptr [edi+00]

:00472F2C B92A4700                DWORD 00472AB9
:00472F30 B92A4700                DWORD 00472AB9
:00472F34 BD2C4700                DWORD 00472CBD


:00472F38 000401                  add byte ptr [ecx+eax], al
:00472F3B 0404                    add al, 04
:00472F3D 0404                    add al, 04
:00472F3F 0404                    add al, 04
:00472F41 0404                    add al, 04
:00472F43 0404                    add al, 04
:00472F45 0404                    add al, 04
:00472F47 0404                    add al, 04
:00472F49 0404                    add al, 04
:00472F4B 0404                    add al, 04
:00472F4D 0404                    add al, 04
:00472F4F 0404                    add al, 04
:00472F51 0202                    add al, byte ptr [edx]
:00472F53 0404                    add al, 04
:00472F55 0404                    add al, 04
:00472F57 0404                    add al, 04
:00472F59 0404                    add al, 04
:00472F5B 0404                    add al, 04
:00472F5D 0404                    add al, 04
:00472F5F 0404                    add al, 04
:00472F61 0404                    add al, 04
:00472F63 0404                    add al, 04
:00472F65 0404                    add al, 04
:00472F67 0404                    add al, 04
:00472F69 0404                    add al, 04
:00472F6B 0404                    add al, 04
:00472F6D 0404                    add al, 04
:00472F6F 0404                    add al, 04
:00472F71 0303                    add eax, dword ptr [ebx]
:00472F73 90                      nop
:00472F74 90                      nop
:00472F75 90                      nop
:00472F76 90                      nop
:00472F77 90                      nop
:00472F78 90                      nop
:00472F79 90                      nop
:00472F7A 90                      nop
:00472F7B 90                      nop
:00472F7C 90                      nop
:00472F7D 90                      nop
:00472F7E 90                      nop
:00472F7F 90                      nop

* Referenced by a CALL at Address:
|:00471DF9   
|
:00472F80 83EC20                  sub esp, 00000020
:00472F83 8B4C242C                mov ecx, dword ptr [esp+2C]
:00472F87 B0CC                    mov al, CC
:00472F89 88442404                mov byte ptr [esp+04], al
:00472F8D 88442405                mov byte ptr [esp+05], al
:00472F91 88442406                mov byte ptr [esp+06], al
:00472F95 88442407                mov byte ptr [esp+07], al
:00472F99 88442408                mov byte ptr [esp+08], al
:00472F9D 88442409                mov byte ptr [esp+09], al
:00472FA1 8844240A                mov byte ptr [esp+0A], al
:00472FA5 8844240B                mov byte ptr [esp+0B], al
:00472FA9 8844240C                mov byte ptr [esp+0C], al
:00472FAD 8844240D                mov byte ptr [esp+0D], al
:00472FB1 8BC1                    mov eax, ecx
:00472FB3 53                      push ebx
:00472FB4 2500800000              and eax, 00008000
:00472FB9 55                      push ebp
:00472FBA 81E1FF7F0000            and ecx, 00007FFF
:00472FC0 56                      push esi
:00472FC1 6685C0                  test ax, ax
:00472FC4 57                      push edi
:00472FC5 C644241EFB              mov [esp+1E], FB
:00472FCA C644241F3F              mov [esp+1F], 3F
:00472FCF C744241001000000        mov [esp+10], 00000001
:00472FD7 740A                    je 00472FE3
:00472FD9 8B7C2448                mov edi, dword ptr [esp+48]
:00472FDD C647022D                mov [edi+02], 2D
:00472FE1 EB0A                    jmp 00472FED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472FD7(C)
|
:00472FE3 8B542448                mov edx, dword ptr [esp+48]
:00472FE7 8BFA                    mov edi, edx
:00472FE9 C6420220                mov [edx+02], 20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472FE1(U)
|
:00472FED 8B542438                mov edx, dword ptr [esp+38]
:00472FF1 8B5C2434                mov ebx, dword ptr [esp+34]
:00472FF5 6685C9                  test cx, cx
:00472FF8 7510                    jne 0047300A
:00472FFA 85D2                    test edx, edx
:00472FFC 750C                    jne 0047300A
:00472FFE 85DB                    test ebx, ebx
:00473000 7508                    jne 0047300A
:00473002 66891F                  mov word ptr [edi], bx
:00473005 E985010000              jmp 0047318F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472FF8(C), :00472FFC(C), :00473000(C)
|
:0047300A 6681F9FF7F              cmp cx, 7FFF
:0047300F 0F85D8000000            jne 004730ED
:00473015 81FA00000080            cmp edx, 80000000
:0047301B 66C7070100              mov word ptr [edi], 0001
:00473020 7504                    jne 00473026
:00473022 85DB                    test ebx, ebx
:00473024 7436                    je 0047305C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473020(C)
|
:00473026 F7C200000040            test edx, 40000000
:0047302C 752E                    jne 0047305C
:0047302E 8B0DDC514700            mov ecx, dword ptr [004751DC]
:00473034 8D4704                  lea eax, dword ptr [edi+04]
:00473037 894F04                  mov dword ptr [edi+04], ecx
:0047303A 668B15E0514700          mov dx, word ptr [004751E0]
:00473041 66895004                mov word ptr [eax+04], dx
:00473045 8A0DE2514700            mov cl, byte ptr [004751E2]
:0047304B C6470306                mov [edi+03], 06
:0047304F 884806                  mov byte ptr [eax+06], cl
:00473052 33C0                    xor eax, eax
:00473054 5F                      pop edi
:00473055 5E                      pop esi
:00473056 5D                      pop ebp
:00473057 5B                      pop ebx
:00473058 83C420                  add esp, 00000020
:0047305B C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473024(C), :0047302C(C)
|
:0047305C 6685C0                  test ax, ax
:0047305F 7430                    je 00473091
:00473061 81FA000000C0            cmp edx, C0000000
:00473067 7528                    jne 00473091
:00473069 85DB                    test ebx, ebx
:0047306B 7524                    jne 00473091
:0047306D A1D4514700              mov eax, dword ptr [004751D4]
:00473072 8D5704                  lea edx, dword ptr [edi+04]
:00473075 894704                  mov dword ptr [edi+04], eax
:00473078 668B0DD8514700          mov cx, word ptr [004751D8]
:0047307F C6470305                mov [edi+03], 05
:00473083 33C0                    xor eax, eax
:00473085 66894A04                mov word ptr [edx+04], cx
:00473089 5F                      pop edi
:0047308A 5E                      pop esi
:0047308B 5D                      pop ebp
:0047308C 5B                      pop ebx
:0047308D 83C420                  add esp, 00000020
:00473090 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047305F(C), :00473067(C), :0047306B(C)
|
:00473091 81FA00000080            cmp edx, 80000000
:00473097 7528                    jne 004730C1
:00473099 85DB                    test ebx, ebx
:0047309B 7524                    jne 004730C1
:0047309D A1CC514700              mov eax, dword ptr [004751CC]
:004730A2 8D5704                  lea edx, dword ptr [edi+04]
:004730A5 894704                  mov dword ptr [edi+04], eax
:004730A8 668B0DD0514700          mov cx, word ptr [004751D0]
:004730AF C6470305                mov [edi+03], 05
:004730B3 33C0                    xor eax, eax
:004730B5 66894A04                mov word ptr [edx+04], cx
:004730B9 5F                      pop edi
:004730BA 5E                      pop esi
:004730BB 5D                      pop ebp
:004730BC 5B                      pop ebx
:004730BD 83C420                  add esp, 00000020
:004730C0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473097(C), :0047309B(C)
|
:004730C1 A1C4514700              mov eax, dword ptr [004751C4]
:004730C6 8D5704                  lea edx, dword ptr [edi+04]
:004730C9 894704                  mov dword ptr [edi+04], eax
:004730CC 668B0DC8514700          mov cx, word ptr [004751C8]
:004730D3 66894A04                mov word ptr [edx+04], cx
:004730D7 A0CA514700              mov al, byte ptr [004751CA]
:004730DC C6470306                mov [edi+03], 06
:004730E0 884206                  mov byte ptr [edx+06], al
:004730E3 33C0                    xor eax, eax
:004730E5 5F                      pop edi
:004730E6 5E                      pop esi
:004730E7 5D                      pop ebp
:004730E8 5B                      pop ebx
:004730E9 83C420                  add esp, 00000020
:004730EC C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047300F(C)
|
:004730ED 8BC2                    mov eax, edx
:004730EF 8BF1                    mov esi, ecx
:004730F1 C1E818                  shr eax, 18
:004730F4 81E6FFFF0000            and esi, 0000FFFF
:004730FA 25FFFF0000              and eax, 0000FFFF
:004730FF C1EE08                  shr esi, 08
:00473102 66894C242A              mov word ptr [esp+2A], cx
:00473107 89542426                mov dword ptr [esp+26], edx
:0047310B 8D0446                  lea eax, dword ptr [esi+2*eax]
:0047310E 895C2422                mov dword ptr [esp+22], ebx
:00473112 6A01                    push 00000001
:00473114 8D542424                lea edx, dword ptr [esp+24]
:00473118 8D34C0                  lea esi, dword ptr [eax+8*eax]
:0047311B 33DB                    xor ebx, ebx
:0047311D 66895C2424              mov word ptr [esp+24], bx
:00473122 8D3470                  lea esi, dword ptr [eax+2*esi]
:00473125 8D34B0                  lea esi, dword ptr [eax+4*esi]
:00473128 8BC1                    mov eax, ecx
:0047312A 25FFFF0000              and eax, 0000FFFF
:0047312F 8BE8                    mov ebp, eax
:00473131 C1E504                  shl ebp, 04
:00473134 03E8                    add ebp, eax
:00473136 8D04E8                  lea eax, dword ptr [eax+8*ebp]
:00473139 8D04C0                  lea eax, dword ptr [eax+8*eax]
:0047313C C1E004                  shl eax, 04
:0047313F 8DB4060CEDBCEC          lea esi, dword ptr [esi+eax-134312F4]
:00473146 C1FE10                  sar esi, 10
:00473149 0FBFCE                  movsx ecx, si
:0047314C F7D9                    neg ecx
:0047314E 51                      push ecx
:0047314F 52                      push edx
:00473150 E81B050000              call 00473670
:00473155 83C40C                  add esp, 0000000C
:00473158 66817C242AFF3F          cmp word ptr [esp+2A], 3FFF
:0047315F 7213                    jb 00473174
:00473161 8D442414                lea eax, dword ptr [esp+14]
:00473165 8D4C2420                lea ecx, dword ptr [esp+20]
:00473169 50                      push eax
:0047316A 51                      push ecx
:0047316B 46                      inc esi
:0047316C E83F020000              call 004733B0
:00473171 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047315F(C)
|
:00473174 8A442444                mov al, byte ptr [esp+44]
:00473178 668937                  mov word ptr [edi], si
:0047317B A801                    test al, 01
:0047317D 742D                    je 004731AC
:0047317F 8B6C2440                mov ebp, dword ptr [esp+40]
:00473183 0FBFD6                  movsx edx, si
:00473186 03EA                    add ebp, edx
:00473188 3BEB                    cmp ebp, ebx
:0047318A 7F24                    jg 004731B0
:0047318C 66891F                  mov word ptr [edi], bx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473005(U)
|
:0047318F C6470220                mov [edi+02], 20
:00473193 C6470301                mov [edi+03], 01
:00473197 C6470430                mov [edi+04], 30
:0047319B C6470500                mov [edi+05], 00
:0047319F B801000000              mov eax, 00000001
:004731A4 5F                      pop edi
:004731A5 5E                      pop esi
:004731A6 5D                      pop ebp
:004731A7 5B                      pop ebx
:004731A8 83C420                  add esp, 00000020
:004731AB C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047317D(C)
|
:004731AC 8B6C2440                mov ebp, dword ptr [esp+40]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047318A(C)
|
:004731B0 83FD15                  cmp ebp, 00000015
:004731B3 7E05                    jle 004731BA
:004731B5 BD15000000              mov ebp, 00000015

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004731B3(C)
|
:004731BA 8B74242A                mov esi, dword ptr [esp+2A]
:004731BE 66895C242A              mov word ptr [esp+2A], bx
:004731C3 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00008: ""
                                  |
:004731C9 BB08000000              mov ebx, 00000008
:004731CE 81EEFE3F0000            sub esi, 00003FFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004731E2(C)
|
:004731D4 8D442420                lea eax, dword ptr [esp+20]
:004731D8 50                      push eax
:004731D9 E8B2F4FFFF              call 00472690
:004731DE 83C404                  add esp, 00000004
:004731E1 4B                      dec ebx
:004731E2 75F0                    jne 004731D4
:004731E4 85F6                    test esi, esi
:004731E6 7D1A                    jge 00473202
:004731E8 F7DE                    neg esi
:004731EA 81E6FF000000            and esi, 000000FF
:004731F0 7E10                    jle 00473202

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473200(C)
|
:004731F2 8D4C2420                lea ecx, dword ptr [esp+20]
:004731F6 51                      push ecx
:004731F7 E8C4F4FFFF              call 004726C0
:004731FC 83C404                  add esp, 00000004
:004731FF 4E                      dec esi
:00473200 75F0                    jne 004731F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004731E6(C), :004731F0(C)
|
:00473202 8D7704                  lea esi, dword ptr [edi+04]
:00473205 8D7D01                  lea edi, dword ptr [ebp+01]
:00473208 85FF                    test edi, edi
:0047320A 8BDE                    mov ebx, esi
:0047320C 7E63                    jle 00473271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047326F(C)
|
:0047320E 8B542420                mov edx, dword ptr [esp+20]
:00473212 8B442424                mov eax, dword ptr [esp+24]
:00473216 8B4C2428                mov ecx, dword ptr [esp+28]
:0047321A 89542434                mov dword ptr [esp+34], edx
:0047321E 8D542420                lea edx, dword ptr [esp+20]
:00473222 89442438                mov dword ptr [esp+38], eax
:00473226 52                      push edx
:00473227 894C2440                mov dword ptr [esp+40], ecx
:0047322B E860F4FFFF              call 00472690
:00473230 83C404                  add esp, 00000004
:00473233 8D442420                lea eax, dword ptr [esp+20]
:00473237 50                      push eax
:00473238 E853F4FFFF              call 00472690
:0047323D 83C404                  add esp, 00000004
:00473240 8D4C2434                lea ecx, dword ptr [esp+34]
:00473244 8D542420                lea edx, dword ptr [esp+20]
:00473248 51                      push ecx
:00473249 52                      push edx
:0047324A E8D1F3FFFF              call 00472620
:0047324F 83C408                  add esp, 00000008
:00473252 8D442420                lea eax, dword ptr [esp+20]
:00473256 50                      push eax
:00473257 E834F4FFFF              call 00472690
:0047325C 8A4C242F                mov cl, byte ptr [esp+2F]
:00473260 83C404                  add esp, 00000004
:00473263 80C130                  add cl, 30
:00473266 C644242B00              mov [esp+2B], 00
:0047326B 880B                    mov byte ptr [ebx], cl
:0047326D 43                      inc ebx
:0047326E 4F                      dec edi
:0047326F 759D                    jne 0047320E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047320C(C)
|
:00473271 8A43FF                  mov al, byte ptr [ebx-01]
:00473274 4B                      dec ebx
:00473275 4B                      dec ebx
:00473276 3C35                    cmp al, 35
:00473278 7C31                    jl 004732AB
:0047327A 3BDE                    cmp ebx, esi
:0047327C 7211                    jb 0047328F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473289(C)
|
:0047327E 803B39                  cmp byte ptr [ebx], 39
:00473281 7508                    jne 0047328B
:00473283 C60330                  mov byte ptr [ebx], 30
:00473286 4B                      dec ebx
:00473287 3BDE                    cmp ebx, esi
:00473289 73F3                    jnb 0047327E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473281(C)
|
:0047328B 3BDE                    cmp ebx, esi
:0047328D 7310                    jnb 0047329F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047327C(C)
|
:0047328F 8B442448                mov eax, dword ptr [esp+48]
:00473293 43                      inc ebx
:00473294 66FF00                  inc word ptr [eax]
:00473297 8A0B                    mov cl, byte ptr [ebx]
:00473299 FEC1                    inc cl
:0047329B 880B                    mov byte ptr [ebx], cl
:0047329D EB47                    jmp 004732E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047328D(C)
|
:0047329F 8A0B                    mov cl, byte ptr [ebx]
:004732A1 8B442448                mov eax, dword ptr [esp+48]
:004732A5 FEC1                    inc cl
:004732A7 880B                    mov byte ptr [ebx], cl
:004732A9 EB3B                    jmp 004732E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473278(C)
|
:004732AB 3BDE                    cmp ebx, esi
:004732AD 720E                    jb 004732BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004732B7(C)
|
:004732AF 803B30                  cmp byte ptr [ebx], 30
:004732B2 7505                    jne 004732B9
:004732B4 4B                      dec ebx
:004732B5 3BDE                    cmp ebx, esi
:004732B7 73F6                    jnb 004732AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004732B2(C)
|
:004732B9 3BDE                    cmp ebx, esi
:004732BB 7325                    jnb 004732E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004732AD(C)
|
:004732BD 8B442448                mov eax, dword ptr [esp+48]
:004732C1 C60630                  mov byte ptr [esi], 30
:004732C4 66C7000000              mov word ptr [eax], 0000
:004732C9 C6400220                mov [eax+02], 20
:004732CD C6400301                mov [eax+03], 01
:004732D1 C6400500                mov [eax+05], 00
:004732D5 B801000000              mov eax, 00000001
:004732DA 5F                      pop edi
:004732DB 5E                      pop esi
:004732DC 5D                      pop ebp
:004732DD 5B                      pop ebx
:004732DE 83C420                  add esp, 00000020
:004732E1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004732BB(C)
|
:004732E2 8B442448                mov eax, dword ptr [esp+48]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047329D(U), :004732A9(U)
|
:004732E6 2AD8                    sub bl, al
:004732E8 5F                      pop edi
:004732E9 80EB03                  sub bl, 03
:004732EC 5E                      pop esi
:004732ED 0FBED3                  movsx edx, bl
:004732F0 885803                  mov byte ptr [eax+03], bl
:004732F3 5D                      pop ebp
:004732F4 C644100400              mov [eax+edx+04], 00
:004732F9 8B442404                mov eax, dword ptr [esp+04]
:004732FD 5B                      pop ebx
:004732FE 83C420                  add esp, 00000020
:00473301 C3                      ret


:00473302 90                      nop
:00473303 90                      nop
:00473304 90                      nop
:00473305 90                      nop
:00473306 90                      nop
:00473307 90                      nop
:00473308 90                      nop
:00473309 90                      nop
:0047330A 90                      nop
:0047330B 90                      nop
:0047330C 90                      nop
:0047330D 90                      nop
:0047330E 90                      nop
:0047330F 90                      nop

* Referenced by a CALL at Address:
|:00472311   
|
:00473310 53                      push ebx
:00473311 55                      push ebp
:00473312 56                      push esi
:00473313 8B742414                mov esi, dword ptr [esp+14]
:00473317 0FAF742410              imul esi, dword ptr [esp+10]
:0047331C 83FEE0                  cmp esi, FFFFFFE0
:0047331F 57                      push edi
:00473320 7711                    ja 00473333
:00473322 85F6                    test esi, esi
:00473324 7608                    jbe 0047332E
:00473326 83C60F                  add esi, 0000000F
:00473329 83E6F0                  and esi, FFFFFFF0
:0047332C EB05                    jmp 00473333

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473324(C)
|

* Possible Reference to String Resource ID=00016: "'2"
                                  |
:0047332E BE10000000              mov esi, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473320(C), :0047332C(U)
|

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:00473333 8B1DF0854B00            mov ebx, dword ptr [004B85F0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047339A(C)
|
:00473339 33D2                    xor edx, edx
:0047333B 83FEE0                  cmp esi, FFFFFFE0
:0047333E 7742                    ja 00473382
:00473340 3B35640A4800            cmp esi, dword ptr [00480A64]
:00473346 7728                    ja 00473370
:00473348 8BC6                    mov eax, esi
:0047334A C1E804                  shr eax, 04
:0047334D 50                      push eax
:0047334E E80DC7FFFF              call 0046FA60
:00473353 8BD0                    mov edx, eax
:00473355 83C404                  add esp, 00000004
:00473358 85D2                    test edx, edx
:0047335A 7418                    je 00473374
:0047335C 8BCE                    mov ecx, esi
:0047335E 33C0                    xor eax, eax
:00473360 8BE9                    mov ebp, ecx
:00473362 8BFA                    mov edi, edx
:00473364 C1E902                  shr ecx, 02
:00473367 F3                      repz
:00473368 AB                      stosd
:00473369 8BCD                    mov ecx, ebp
:0047336B 83E103                  and ecx, 00000003
:0047336E F3                      repz
:0047336F AA                      stosb

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473346(C)
|
:00473370 85D2                    test edx, edx
:00473372 752D                    jne 004733A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047335A(C)
|
:00473374 8B0DC47A4B00            mov ecx, dword ptr [004B7AC4]
:0047337A 56                      push esi

* Possible Reference to String Resource ID=00008: ""
                                  |
:0047337B 6A08                    push 00000008
:0047337D 51                      push ecx
:0047337E FFD3                    call ebx
:00473380 8BD0                    mov edx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047333E(C)
|
:00473382 85D2                    test edx, edx
:00473384 751B                    jne 004733A1
:00473386 A1B46F4B00              mov eax, dword ptr [004B6FB4]
:0047338B 85C0                    test eax, eax
:0047338D 7412                    je 004733A1
:0047338F 56                      push esi
:00473390 E85BCBFFFF              call 0046FEF0
:00473395 83C404                  add esp, 00000004
:00473398 85C0                    test eax, eax
:0047339A 759D                    jne 00473339
:0047339C 5F                      pop edi
:0047339D 5E                      pop esi
:0047339E 5D                      pop ebp
:0047339F 5B                      pop ebx
:004733A0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473372(C), :00473384(C), :0047338D(C)
|
:004733A1 5F                      pop edi
:004733A2 5E                      pop esi
:004733A3 5D                      pop ebp
:004733A4 8BC2                    mov eax, edx
:004733A6 5B                      pop ebx
:004733A7 C3                      ret


:004733A8 90                      nop
:004733A9 90                      nop
:004733AA 90                      nop
:004733AB 90                      nop
:004733AC 90                      nop
:004733AD 90                      nop
:004733AE 90                      nop
:004733AF 90                      nop

* Referenced by a CALL at Addresses:
|:0047316C   , :004736E7   
|
:004733B0 83EC24                  sub esp, 00000024
:004733B3 8B542428                mov edx, dword ptr [esp+28]
:004733B7 53                      push ebx
:004733B8 55                      push ebp
:004733B9 56                      push esi
:004733BA 668B420A                mov ax, word ptr [edx+0A]
:004733BE 57                      push edi
:004733BF 8B7C243C                mov edi, dword ptr [esp+3C]
:004733C3 33ED                    xor ebp, ebp
:004733C5 896C2420                mov dword ptr [esp+20], ebp
:004733C9 896C2428                mov dword ptr [esp+28], ebp
:004733CD 668B4F0A                mov cx, word ptr [edi+0A]
:004733D1 896C242C                mov dword ptr [esp+2C], ebp
:004733D5 8BF1                    mov esi, ecx
:004733D7 81E1FF7F0000            and ecx, 00007FFF
:004733DD 33F0                    xor esi, eax
:004733DF 25FF7F0000              and eax, 00007FFF
:004733E4 81E600800000            and esi, 00008000
:004733EA 663DFF7F                cmp ax, 7FFF
:004733EE 8D1C01                  lea ebx, dword ptr [ecx+eax]
:004733F1 896C2430                mov dword ptr [esp+30], ebp
:004733F5 89742418                mov dword ptr [esp+18], esi
:004733F9 895C2410                mov dword ptr [esp+10], ebx
:004733FD 0F8344020000            jnb 00473647
:00473403 6681F9FF7F              cmp cx, 7FFF
:00473408 0F8339020000            jnb 00473647
:0047340E 6681FBFDBF              cmp bx, BFFD
:00473413 0F872E020000            ja 00473647
:00473419 6681FBBF3F              cmp bx, 3FBF
:0047341E 7710                    ja 00473430
:00473420 896A08                  mov dword ptr [edx+08], ebp
:00473423 896A04                  mov dword ptr [edx+04], ebp
:00473426 892A                    mov dword ptr [edx], ebp
:00473428 5F                      pop edi
:00473429 5E                      pop esi
:0047342A 5D                      pop ebp
:0047342B 5B                      pop ebx
:0047342C 83C424                  add esp, 00000024
:0047342F C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047341E(C)
|
:00473430 663BC5                  cmp ax, bp
:00473433 7524                    jne 00473459
:00473435 8B4208                  mov eax, dword ptr [edx+08]
:00473438 43                      inc ebx
:00473439 A9FFFFFF7F              test eax, 7FFFFFFF
:0047343E 895C2410                mov dword ptr [esp+10], ebx
:00473442 7515                    jne 00473459
:00473444 396A04                  cmp dword ptr [edx+04], ebp
:00473447 7510                    jne 00473459
:00473449 392A                    cmp dword ptr [edx], ebp
:0047344B 750C                    jne 00473459
:0047344D 66896A0A                mov word ptr [edx+0A], bp
:00473451 5F                      pop edi
:00473452 5E                      pop esi
:00473453 5D                      pop ebp
:00473454 5B                      pop ebx
:00473455 83C424                  add esp, 00000024
:00473458 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473433(C), :00473442(C), :00473447(C), :0047344B(C)
|
:00473459 663BCD                  cmp cx, bp
:0047345C 7528                    jne 00473486
:0047345E 8B4708                  mov eax, dword ptr [edi+08]
:00473461 43                      inc ebx
:00473462 A9FFFFFF7F              test eax, 7FFFFFFF
:00473467 895C2410                mov dword ptr [esp+10], ebx
:0047346B 7519                    jne 00473486
:0047346D 396F04                  cmp dword ptr [edi+04], ebp
:00473470 7514                    jne 00473486
:00473472 392F                    cmp dword ptr [edi], ebp
:00473474 7510                    jne 00473486
:00473476 896A08                  mov dword ptr [edx+08], ebp
:00473479 896A04                  mov dword ptr [edx+04], ebp
:0047347C 892A                    mov dword ptr [edx], ebp
:0047347E 5F                      pop edi
:0047347F 5E                      pop esi
:00473480 5D                      pop ebp
:00473481 5B                      pop ebx
:00473482 83C424                  add esp, 00000024
:00473485 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047345C(C), :0047346B(C), :00473470(C), :00473474(C)
|
:00473486 8D44242C                lea eax, dword ptr [esp+2C]
:0047348A 896C241C                mov dword ptr [esp+1C], ebp
:0047348E 89442414                mov dword ptr [esp+14], eax

* Possible Reference to Dialog: DialogID_00EB, CONTROL_ID:0005, "h"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00473492 BD05000000              mov ebp, 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473510(C)
|
:00473497 8B4C241C                mov ecx, dword ptr [esp+1C]
:0047349B 85ED                    test ebp, ebp
:0047349D 8D0409                  lea eax, dword ptr [ecx+ecx]
:004734A0 7E57                    jle 004734F9
:004734A2 8B4C2414                mov ecx, dword ptr [esp+14]
:004734A6 83C708                  add edi, 00000008
:004734A9 8D3410                  lea esi, dword ptr [eax+edx]
:004734AC 896C2424                mov dword ptr [esp+24], ebp
:004734B0 8D59FC                  lea ebx, dword ptr [ecx-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004734E7(C)
|
:004734B3 33D2                    xor edx, edx
:004734B5 33C0                    xor eax, eax
:004734B7 668B17                  mov dx, word ptr [edi]
:004734BA 668B06                  mov ax, word ptr [esi]
:004734BD 0FAFD0                  imul edx, eax
:004734C0 8B0B                    mov ecx, dword ptr [ebx]
:004734C2 53                      push ebx
:004734C3 52                      push edx
:004734C4 51                      push ecx
:004734C5 E826F1FFFF              call 004725F0
:004734CA 83C40C                  add esp, 0000000C
:004734CD 85C0                    test eax, eax
:004734CF 7407                    je 004734D8
:004734D1 8B442414                mov eax, dword ptr [esp+14]
:004734D5 66FF00                  inc word ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004734CF(C)
|
:004734D8 8B442424                mov eax, dword ptr [esp+24]
:004734DC 83C602                  add esi, 00000002
:004734DF 83EF02                  sub edi, 00000002
:004734E2 48                      dec eax
:004734E3 89442424                mov dword ptr [esp+24], eax
:004734E7 75CA                    jne 004734B3
:004734E9 8B7C243C                mov edi, dword ptr [esp+3C]
:004734ED 8B542438                mov edx, dword ptr [esp+38]
:004734F1 8B5C2410                mov ebx, dword ptr [esp+10]
:004734F5 8B742418                mov esi, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004734A0(C)
|
:004734F9 8B4C2414                mov ecx, dword ptr [esp+14]
:004734FD 8B44241C                mov eax, dword ptr [esp+1C]
:00473501 83C102                  add ecx, 00000002
:00473504 40                      inc eax
:00473505 4D                      dec ebp
:00473506 894C2414                mov dword ptr [esp+14], ecx
:0047350A 85ED                    test ebp, ebp
:0047350C 8944241C                mov dword ptr [esp+1C], eax
:00473510 7F85                    jg 00473497
:00473512 81C302C00000            add ebx, 0000C002
:00473518 BD00000080              mov ebp, 80000000
:0047351D 6685DB                  test bx, bx
:00473520 895C2410                mov dword ptr [esp+10], ebx
:00473524 7E2F                    jle 00473555

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473553(C)
|
:00473526 856C2430                test dword ptr [esp+30], ebp
:0047352A 7529                    jne 00473555
:0047352C 8D542428                lea edx, dword ptr [esp+28]
:00473530 52                      push edx
:00473531 E85AF1FFFF              call 00472690
:00473536 8B442414                mov eax, dword ptr [esp+14]
:0047353A 8B54243C                mov edx, dword ptr [esp+3C]
:0047353E 8B74241C                mov esi, dword ptr [esp+1C]
:00473542 05FFFF0000              add eax, 0000FFFF
:00473547 83C404                  add esp, 00000004
:0047354A 89442410                mov dword ptr [esp+10], eax
:0047354E 6685C0                  test ax, ax
:00473551 8BD8                    mov ebx, eax
:00473553 7FD1                    jg 00473526

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473524(C), :0047352A(C)
|
:00473555 33C9                    xor ecx, ecx
:00473557 663BD9                  cmp bx, cx
:0047355A 7F4E                    jg 004735AA
:0047355C 81C3FFFF0000            add ebx, 0000FFFF
:00473562 663BD9                  cmp bx, cx
:00473565 7D34                    jge 0047359B
:00473567 0FBFC3                  movsx eax, bx
:0047356A F7D8                    neg eax
:0047356C 03D8                    add ebx, eax
:0047356E 8BF0                    mov esi, eax
:00473570 895C2410                mov dword ptr [esp+10], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047358D(C)
|
:00473574 F644242801              test [esp+28], 01
:00473579 7404                    je 0047357F
:0047357B FF442420                inc [esp+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473579(C)
|
:0047357F 8D442428                lea eax, dword ptr [esp+28]
:00473583 50                      push eax
:00473584 E837F1FFFF              call 004726C0
:00473589 83C404                  add esp, 00000004
:0047358C 4E                      dec esi
:0047358D 75E5                    jne 00473574
:0047358F 8B542438                mov edx, dword ptr [esp+38]
:00473593 8B5C2410                mov ebx, dword ptr [esp+10]
:00473597 8B742418                mov esi, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473565(C)
|
:0047359B 8B442420                mov eax, dword ptr [esp+20]
:0047359F 33C9                    xor ecx, ecx
:004735A1 3BC1                    cmp eax, ecx
:004735A3 7405                    je 004735AA
:004735A5 804C242801              or byte ptr [esp+28], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047355A(C), :004735A3(C)
|
:004735AA BF00800000              mov edi, 00008000
:004735AF 66397C2428              cmp word ptr [esp+28], di
:004735B4 7710                    ja 004735C6
:004735B6 8B442428                mov eax, dword ptr [esp+28]
:004735BA 25FFFF0100              and eax, 0001FFFF
:004735BF 3D00800100              cmp eax, 00018000
:004735C4 7539                    jne 004735FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735B4(C)
|
:004735C6 83C8FF                  or eax, FFFFFFFF
:004735C9 3944242A                cmp dword ptr [esp+2A], eax
:004735CD 752C                    jne 004735FB
:004735CF 3944242E                cmp dword ptr [esp+2E], eax
:004735D3 894C242A                mov dword ptr [esp+2A], ecx
:004735D7 751C                    jne 004735F5
:004735D9 66817C2432FFFF          cmp word ptr [esp+32], FFFF
:004735E0 894C242E                mov dword ptr [esp+2E], ecx
:004735E4 7508                    jne 004735EE
:004735E6 66897C2432              mov word ptr [esp+32], di
:004735EB 43                      inc ebx
:004735EC EB11                    jmp 004735FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735E4(C)
|
:004735EE 66FF442432              inc [esp+32]
:004735F3 EB0A                    jmp 004735FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735D7(C)
|
:004735F5 FF44242E                inc [esp+2E]
:004735F9 EB04                    jmp 004735FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735CD(C)
|
:004735FB FF44242A                inc [esp+2A]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004735C4(C), :004735EC(U), :004735F3(U), :004735F9(U)
|
:004735FF 6681FBFF7F              cmp bx, 7FFF
:00473604 721D                    jb 00473623
:00473606 66F7DE                  neg si
:00473609 1BF6                    sbb esi, esi
:0047360B 894A04                  mov dword ptr [edx+04], ecx
:0047360E 23F5                    and esi, ebp
:00473610 890A                    mov dword ptr [edx], ecx
:00473612 81C60080FF7F            add esi, 7FFF8000
:00473618 897208                  mov dword ptr [edx+08], esi
:0047361B 5F                      pop edi
:0047361C 5E                      pop esi
:0047361D 5D                      pop ebp
:0047361E 5B                      pop ebx
:0047361F 83C424                  add esp, 00000024
:00473622 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473604(C)
|
:00473623 668B4C242A              mov cx, word ptr [esp+2A]
:00473628 8B44242C                mov eax, dword ptr [esp+2C]
:0047362C 66890A                  mov word ptr [edx], cx
:0047362F 8B4C2430                mov ecx, dword ptr [esp+30]
:00473633 0BDE                    or ebx, esi
:00473635 894202                  mov dword ptr [edx+02], eax
:00473638 894A06                  mov dword ptr [edx+06], ecx
:0047363B 66895A0A                mov word ptr [edx+0A], bx
:0047363F 5F                      pop edi
:00473640 5E                      pop esi
:00473641 5D                      pop ebp
:00473642 5B                      pop ebx
:00473643 83C424                  add esp, 00000024
:00473646 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004733FD(C), :00473408(C), :00473413(C)
|
:00473647 66F7DE                  neg si
:0047364A 1BF6                    sbb esi, esi
:0047364C 5F                      pop edi
:0047364D 81E600000080            and esi, 80000000
:00473653 896A04                  mov dword ptr [edx+04], ebp
:00473656 81C60080FF7F            add esi, 7FFF8000
:0047365C 892A                    mov dword ptr [edx], ebp
:0047365E 897208                  mov dword ptr [edx+08], esi
:00473661 5E                      pop esi
:00473662 5D                      pop ebp
:00473663 5B                      pop ebx
:00473664 83C424                  add esp, 00000024
:00473667 C3                      ret


:00473668 90                      nop
:00473669 90                      nop
:0047366A 90                      nop
:0047366B 90                      nop
:0047366C 90                      nop
:0047366D 90                      nop
:0047366E 90                      nop
:0047366F 90                      nop

* Referenced by a CALL at Addresses:
|:00472E26   , :00473150   
|
:00473670 83EC0C                  sub esp, 0000000C
:00473673 53                      push ebx
:00473674 56                      push esi
:00473675 8B74241C                mov esi, dword ptr [esp+1C]
:00473679 57                      push edi
:0047367A BFF00E4800              mov edi, 00480EF0
:0047367F 83EF60                  sub edi, 00000060
:00473682 85F6                    test esi, esi
:00473684 746D                    je 004736F3
:00473686 7D0A                    jge 00473692

* Possible StringData Ref from Data Obj ->"?q=
ףp=
ף?Zd;On?,eX"
                                        ->"?#GGŧ?@il7?3=BzՔ?aw"
                                        ->"̫?/L[Mľ?S;uD?g9Eϔ?$#⼺"
                                        ->";1az?aUY"
                                  |
:00473688 BF50104800              mov edi, 00481050
:0047368D F7DE                    neg esi
:0047368F 83EF60                  sub edi, 00000060

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473686(C)
|
:00473692 8B442424                mov eax, dword ptr [esp+24]
:00473696 8B5C241C                mov ebx, dword ptr [esp+1C]
:0047369A 85C0                    test eax, eax
:0047369C 7505                    jne 004736A3
:0047369E 66C7030000              mov word ptr [ebx], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047369C(C)
|
:004736A3 85F6                    test esi, esi
:004736A5 744C                    je 004736F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004736F1(C)
|
:004736A7 8BC6                    mov eax, esi
:004736A9 83C754                  add edi, 00000054
:004736AC 83E007                  and eax, 00000007
:004736AF C1FE03                  sar esi, 03
:004736B2 85C0                    test eax, eax
:004736B4 7439                    je 004736EF
:004736B6 8D0440                  lea eax, dword ptr [eax+2*eax]
:004736B9 66813C870080            cmp word ptr [edi+4*eax], 8000
:004736BF 8D0487                  lea eax, dword ptr [edi+4*eax]
:004736C2 7221                    jb 004736E5
:004736C4 8B08                    mov ecx, dword ptr [eax]
:004736C6 894C240C                mov dword ptr [esp+0C], ecx
:004736CA 8B5004                  mov edx, dword ptr [eax+04]
:004736CD 89542410                mov dword ptr [esp+10], edx
:004736D1 8B4008                  mov eax, dword ptr [eax+08]
:004736D4 89442414                mov dword ptr [esp+14], eax
:004736D8 8B44240E                mov eax, dword ptr [esp+0E]
:004736DC 48                      dec eax
:004736DD 8944240E                mov dword ptr [esp+0E], eax
:004736E1 8D44240C                lea eax, dword ptr [esp+0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004736C2(C)
|
:004736E5 50                      push eax
:004736E6 53                      push ebx
:004736E7 E8C4FCFFFF              call 004733B0
:004736EC 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004736B4(C)
|
:004736EF 85F6                    test esi, esi
:004736F1 75B4                    jne 004736A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473684(C), :004736A5(C)
|
:004736F3 5F                      pop edi
:004736F4 5E                      pop esi
:004736F5 5B                      pop ebx
:004736F6 83C40C                  add esp, 0000000C
:004736F9 C3                      ret


:004736FA 90                      nop
:004736FB 90                      nop
:004736FC 90                      nop
:004736FD 90                      nop
:004736FE 90                      nop
:004736FF 90                      nop

* Referenced by a CALL at Addresses:
|:0046D547   , :0046D843   
|

* Reference To: KERNEL32.RtlUnwind, Ord:01E5h
                                  |
:00473700 FF25F8854B00            Jmp dword ptr [004B85F8]
:00473706 CC                      int 03
:00473707 CC                      int 03
:00473708 CC                      int 03
:00473709 CC                      int 03
:0047370A CC                      int 03
:0047370B CC                      int 03
:0047370C CC                      int 03
:0047370D CC                      int 03
:0047370E CC                      int 03
:0047370F CC                      int 03
:00473710 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00473713 E826CBF9FF              call 0041023E
:00473718 C3                      ret


:00473719 B8E8514700              mov eax, 004751E8
:0047371E E95D9EFFFF              jmp 0046D580
:00473723 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00473726 E813CBF9FF              call 0041023E
:0047372B C3                      ret


:0047372C B810524700              mov eax, 00475210
:00473731 E94A9EFFFF              jmp 0046D580
:00473736 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00473739 E800CBF9FF              call 0041023E
:0047373E C3                      ret


:0047373F B838524700              mov eax, 00475238
:00473744 E9379EFFFF              jmp 0046D580
:00473749 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0047374C E8EDCAF9FF              call 0041023E
:00473751 C3                      ret


:00473752 B860524700              mov eax, 00475260
:00473757 E9249EFFFF              jmp 0046D580
:0047375C CC                      int 03
:0047375D CC                      int 03
:0047375E CC                      int 03
:0047375F CC                      int 03
:00473760 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473766 E8B53FF9FF              call 00407720
:0047376B C3                      ret


:0047376C B888524700              mov eax, 00475288
:00473771 E90A9EFFFF              jmp 0046D580
:00473776 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047377C E89F3FF9FF              call 00407720
:00473781 C3                      ret


:00473782 B8B0524700              mov eax, 004752B0
:00473787 E9F49DFFFF              jmp 0046D580
:0047378C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473792 E8893FF9FF              call 00407720
:00473797 C3                      ret


:00473798 B8D8524700              mov eax, 004752D8
:0047379D E9DE9DFFFF              jmp 0046D580
:004737A2 CC                      int 03
:004737A3 CC                      int 03
:004737A4 CC                      int 03
:004737A5 CC                      int 03
:004737A6 CC                      int 03
:004737A7 CC                      int 03
:004737A8 CC                      int 03
:004737A9 CC                      int 03
:004737AA CC                      int 03
:004737AB CC                      int 03
:004737AC CC                      int 03
:004737AD CC                      int 03
:004737AE CC                      int 03
:004737AF CC                      int 03
:004737B0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004737B3 E808B9F9FF              call 0040F0C0
:004737B8 C3                      ret


:004737B9 B800534700              mov eax, 00475300
:004737BE E9BD9DFFFF              jmp 0046D580
:004737C3 CC                      int 03
:004737C4 CC                      int 03
:004737C5 CC                      int 03
:004737C6 CC                      int 03
:004737C7 CC                      int 03
:004737C8 CC                      int 03
:004737C9 CC                      int 03
:004737CA CC                      int 03
:004737CB CC                      int 03
:004737CC CC                      int 03
:004737CD CC                      int 03
:004737CE CC                      int 03
:004737CF CC                      int 03
:004737D0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004737D3 83C104                  add ecx, 00000004
:004737D6 E8C524FBFF              call 00425CA0
:004737DB C3                      ret


:004737DC B828534700              mov eax, 00475328
:004737E1 E99A9DFFFF              jmp 0046D580
:004737E6 CC                      int 03
:004737E7 CC                      int 03
:004737E8 CC                      int 03
:004737E9 CC                      int 03
:004737EA CC                      int 03
:004737EB CC                      int 03
:004737EC CC                      int 03
:004737ED CC                      int 03
:004737EE CC                      int 03
:004737EF CC                      int 03
:004737F0 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004737F3 E846CAF9FF              call 0041023E
:004737F8 C3                      ret


:004737F9 B850534700              mov eax, 00475350
:004737FE E97D9DFFFF              jmp 0046D580
:00473803 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00473806 E833CAF9FF              call 0041023E
:0047380B C3                      ret


:0047380C B878534700              mov eax, 00475378
:00473811 E96A9DFFFF              jmp 0046D580
:00473816 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00473819 E820CAF9FF              call 0041023E
:0047381E C3                      ret


:0047381F B8A0534700              mov eax, 004753A0
:00473824 E9579DFFFF              jmp 0046D580
:00473829 CC                      int 03
:0047382A CC                      int 03
:0047382B CC                      int 03
:0047382C CC                      int 03
:0047382D CC                      int 03
:0047382E CC                      int 03
:0047382F CC                      int 03
:00473830 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00473833 E86824FBFF              call 00425CA0
:00473838 C3                      ret


:00473839 B8C8534700              mov eax, 004753C8
:0047383E E93D9DFFFF              jmp 0046D580
:00473843 CC                      int 03
:00473844 CC                      int 03
:00473845 CC                      int 03
:00473846 CC                      int 03
:00473847 CC                      int 03
:00473848 CC                      int 03
:00473849 CC                      int 03
:0047384A CC                      int 03
:0047384B CC                      int 03
:0047384C CC                      int 03
:0047384D CC                      int 03
:0047384E CC                      int 03
:0047384F CC                      int 03
:00473850 8D4DD0                  lea ecx, dword ptr [ebp-30]
:00473853 E8E6C9F9FF              call 0041023E
:00473858 C3                      ret


:00473859 B8F0534700              mov eax, 004753F0
:0047385E E91D9DFFFF              jmp 0046D580
:00473863 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473869 E8D0C9F9FF              call 0041023E
:0047386E C3                      ret


:0047386F B818544700              mov eax, 00475418
:00473874 E9079DFFFF              jmp 0046D580
:00473879 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0047387C E8BDC9F9FF              call 0041023E
:00473881 C3                      ret


:00473882 B840544700              mov eax, 00475440
:00473887 E9F49CFFFF              jmp 0046D580
:0047388C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473892 E8893EF9FF              call 00407720
:00473897 C3                      ret


:00473898 B868544700              mov eax, 00475468
:0047389D E9DE9CFFFF              jmp 0046D580
:004738A2 CC                      int 03
:004738A3 CC                      int 03
:004738A4 CC                      int 03
:004738A5 CC                      int 03
:004738A6 CC                      int 03
:004738A7 CC                      int 03
:004738A8 CC                      int 03
:004738A9 CC                      int 03
:004738AA CC                      int 03
:004738AB CC                      int 03
:004738AC CC                      int 03
:004738AD CC                      int 03
:004738AE CC                      int 03
:004738AF CC                      int 03
:004738B0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004738B6 E8653EF9FF              call 00407720
:004738BB C3                      ret


:004738BC B890544700              mov eax, 00475490
:004738C1 E9BA9CFFFF              jmp 0046D580
:004738C6 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004738CC E84F3EF9FF              call 00407720
:004738D1 C3                      ret


:004738D2 B8B8544700              mov eax, 004754B8
:004738D7 E9A49CFFFF              jmp 0046D580
:004738DC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004738E2 E8393EF9FF              call 00407720
:004738E7 C3                      ret


:004738E8 B8E0544700              mov eax, 004754E0
:004738ED E98E9CFFFF              jmp 0046D580
:004738F2 CC                      int 03
:004738F3 CC                      int 03
:004738F4 CC                      int 03
:004738F5 CC                      int 03
:004738F6 CC                      int 03
:004738F7 CC                      int 03
:004738F8 CC                      int 03
:004738F9 CC                      int 03
:004738FA CC                      int 03
:004738FB CC                      int 03
:004738FC CC                      int 03
:004738FD CC                      int 03
:004738FE CC                      int 03
:004738FF CC                      int 03
:00473900 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473906 E8153EF9FF              call 00407720
:0047390B C3                      ret


:0047390C B808554700              mov eax, 00475508
:00473911 E96A9CFFFF              jmp 0046D580
:00473916 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047391C E8FF3DF9FF              call 00407720
:00473921 C3                      ret


:00473922 B830554700              mov eax, 00475530
:00473927 E9549CFFFF              jmp 0046D580
:0047392C CC                      int 03
:0047392D CC                      int 03
:0047392E CC                      int 03
:0047392F CC                      int 03
:00473930 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00473936 E8E53DF9FF              call 00407720
:0047393B C3                      ret


:0047393C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0047393F E8FAC8F9FF              call 0041023E
:00473944 C3                      ret


:00473945 B858554700              mov eax, 00475558
:0047394A E9319CFFFF              jmp 0046D580
:0047394F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473955 E8C63DF9FF              call 00407720
:0047395A C3                      ret


:0047395B B888554700              mov eax, 00475588
:00473960 E91B9CFFFF              jmp 0046D580
:00473965 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047396B E8B03DF9FF              call 00407720
:00473970 C3                      ret


:00473971 B8B0554700              mov eax, 004755B0
:00473976 E9059CFFFF              jmp 0046D580
:0047397B CC                      int 03
:0047397C CC                      int 03
:0047397D CC                      int 03
:0047397E CC                      int 03
:0047397F CC                      int 03
:00473980 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00473986 E8455CFBFF              call 004295D0
:0047398B C3                      ret


:0047398C 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0047398F E80C23FBFF              call 00425CA0
:00473994 C3                      ret


:00473995 B8D8554700              mov eax, 004755D8
:0047399A E9E19BFFFF              jmp 0046D580
:0047399F CC                      int 03
:004739A0 8D4DE8                  lea ecx, dword ptr [ebp-18]
:004739A3 E838FBF9FF              call 004134E0
:004739A8 C3                      ret


:004739A9 8D8DE4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE4]
:004739AF E86C3DF9FF              call 00407720
:004739B4 C3                      ret


:004739B5 B808564700              mov eax, 00475608
:004739BA E9C19BFFFF              jmp 0046D580
:004739BF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004739C5 E8563DF9FF              call 00407720
:004739CA C3                      ret


:004739CB B838564700              mov eax, 00475638
:004739D0 E9AB9BFFFF              jmp 0046D580
:004739D5 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004739DB E8403DF9FF              call 00407720
:004739E0 C3                      ret


:004739E1 B860564700              mov eax, 00475660
:004739E6 E9959BFFFF              jmp 0046D580
:004739EB CC                      int 03
:004739EC CC                      int 03
:004739ED CC                      int 03
:004739EE CC                      int 03
:004739EF CC                      int 03
:004739F0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004739F6 E8253DF9FF              call 00407720
:004739FB C3                      ret


:004739FC B888564700              mov eax, 00475688
:00473A01 E97A9BFFFF              jmp 0046D580
:00473A06 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473A0C E80F3DF9FF              call 00407720
:00473A11 C3                      ret


:00473A12 B8B0564700              mov eax, 004756B0
:00473A17 E9649BFFFF              jmp 0046D580
:00473A1C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473A22 E8F93CF9FF              call 00407720
:00473A27 C3                      ret


:00473A28 B8D8564700              mov eax, 004756D8
:00473A2D E94E9BFFFF              jmp 0046D580
:00473A32 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473A38 E8E33CF9FF              call 00407720
:00473A3D C3                      ret


:00473A3E B800574700              mov eax, 00475700
:00473A43 E9389BFFFF              jmp 0046D580
:00473A48 CC                      int 03
:00473A49 CC                      int 03
:00473A4A CC                      int 03
:00473A4B CC                      int 03
:00473A4C CC                      int 03
:00473A4D CC                      int 03
:00473A4E CC                      int 03
:00473A4F CC                      int 03
:00473A50 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473A56 E8C53CF9FF              call 00407720
:00473A5B C3                      ret


:00473A5C B828574700              mov eax, 00475728
:00473A61 E91A9BFFFF              jmp 0046D580
:00473A66 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473A6C E8AF3CF9FF              call 00407720
:00473A71 C3                      ret


:00473A72 B850574700              mov eax, 00475750
:00473A77 E9049BFFFF              jmp 0046D580
:00473A7C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473A82 E8993CF9FF              call 00407720
:00473A87 C3                      ret


:00473A88 B878574700              mov eax, 00475778
:00473A8D E9EE9AFFFF              jmp 0046D580
:00473A92 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473A98 E8833CF9FF              call 00407720
:00473A9D C3                      ret


:00473A9E B8A0574700              mov eax, 004757A0
:00473AA3 E9D89AFFFF              jmp 0046D580
:00473AA8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473AAE E86D3CF9FF              call 00407720
:00473AB3 C3                      ret


:00473AB4 B8C8574700              mov eax, 004757C8
:00473AB9 E9C29AFFFF              jmp 0046D580
:00473ABE 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473AC4 E8573CF9FF              call 00407720
:00473AC9 C3                      ret


:00473ACA B8F0574700              mov eax, 004757F0
:00473ACF E9AC9AFFFF              jmp 0046D580
:00473AD4 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00473ADA E8413CF9FF              call 00407720
:00473ADF C3                      ret


:00473AE0 B818584700              mov eax, 00475818
:00473AE5 E9969AFFFF              jmp 0046D580
:00473AEA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473AF0 E82B3CF9FF              call 00407720
:00473AF5 C3                      ret


:00473AF6 B840584700              mov eax, 00475840
:00473AFB E9809AFFFF              jmp 0046D580
:00473B00 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473B06 E8153CF9FF              call 00407720
:00473B0B C3                      ret


:00473B0C B868584700              mov eax, 00475868
:00473B11 E96A9AFFFF              jmp 0046D580
:00473B16 CC                      int 03
:00473B17 CC                      int 03
:00473B18 CC                      int 03
:00473B19 CC                      int 03
:00473B1A CC                      int 03
:00473B1B CC                      int 03
:00473B1C CC                      int 03
:00473B1D CC                      int 03
:00473B1E CC                      int 03
:00473B1F CC                      int 03
:00473B20 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473B23 83C10C                  add ecx, 0000000C
:00473B26 E8B5F9F9FF              call 004134E0
:00473B2B C3                      ret


:00473B2C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473B2F 83C118                  add ecx, 00000018
:00473B32 E8A9F9F9FF              call 004134E0
:00473B37 C3                      ret


:00473B38 B890584700              mov eax, 00475890
:00473B3D E93E9AFFFF              jmp 0046D580
:00473B42 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473B45 83C10C                  add ecx, 0000000C
:00473B48 E893F9F9FF              call 004134E0
:00473B4D C3                      ret


:00473B4E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473B51 83C118                  add ecx, 00000018
:00473B54 E887F9F9FF              call 004134E0
:00473B59 C3                      ret


:00473B5A B8C0584700              mov eax, 004758C0
:00473B5F E91C9AFFFF              jmp 0046D580
:00473B64 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473B6A E8B13BF9FF              call 00407720
:00473B6F C3                      ret


:00473B70 B8F0584700              mov eax, 004758F0
:00473B75 E9069AFFFF              jmp 0046D580
:00473B7A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473B80 E89B3BF9FF              call 00407720
:00473B85 C3                      ret


:00473B86 B818594700              mov eax, 00475918
:00473B8B E9F099FFFF              jmp 0046D580
:00473B90 8B45E4                  mov eax, dword ptr [ebp-1C]
:00473B93 50                      push eax
:00473B94 E8879DFFFF              call 0046D920
:00473B99 59                      pop ecx
:00473B9A C3                      ret


:00473B9B B840594700              mov eax, 00475940
:00473BA0 E9DB99FFFF              jmp 0046D580
:00473BA5 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473BAB E8703BF9FF              call 00407720
:00473BB0 C3                      ret


:00473BB1 B868594700              mov eax, 00475968
:00473BB6 E9C599FFFF              jmp 0046D580
:00473BBB CC                      int 03
:00473BBC CC                      int 03
:00473BBD CC                      int 03
:00473BBE CC                      int 03
:00473BBF CC                      int 03
:00473BC0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473BC6 E8553BF9FF              call 00407720
:00473BCB C3                      ret


:00473BCC B890594700              mov eax, 00475990
:00473BD1 E9AA99FFFF              jmp 0046D580
:00473BD6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473BDC E83F3BF9FF              call 00407720
:00473BE1 C3                      ret


:00473BE2 B8B8594700              mov eax, 004759B8
:00473BE7 E99499FFFF              jmp 0046D580
:00473BEC 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473BF2 E8293BF9FF              call 00407720
:00473BF7 C3                      ret


:00473BF8 B8E0594700              mov eax, 004759E0
:00473BFD E97E99FFFF              jmp 0046D580
:00473C02 CC                      int 03
:00473C03 CC                      int 03
:00473C04 CC                      int 03
:00473C05 CC                      int 03
:00473C06 CC                      int 03
:00473C07 CC                      int 03
:00473C08 CC                      int 03
:00473C09 CC                      int 03
:00473C0A CC                      int 03
:00473C0B CC                      int 03
:00473C0C CC                      int 03
:00473C0D CC                      int 03
:00473C0E CC                      int 03
:00473C0F CC                      int 03
:00473C10 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473C13 83C104                  add ecx, 00000004
:00473C16 E8E509FEFF              call 00454600
:00473C1B C3                      ret


:00473C1C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473C1F 83C10C                  add ecx, 0000000C
:00473C22 E8D909FEFF              call 00454600
:00473C27 C3                      ret


:00473C28 B8085A4700              mov eax, 00475A08
:00473C2D E94E99FFFF              jmp 0046D580
:00473C32 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473C35 83C104                  add ecx, 00000004
:00473C38 E8C309FEFF              call 00454600
:00473C3D C3                      ret


:00473C3E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00473C41 83C10C                  add ecx, 0000000C
:00473C44 E8B709FEFF              call 00454600
:00473C49 C3                      ret


:00473C4A B8385A4700              mov eax, 00475A38
:00473C4F E92C99FFFF              jmp 0046D580
:00473C54 CC                      int 03
:00473C55 CC                      int 03
:00473C56 CC                      int 03
:00473C57 CC                      int 03
:00473C58 CC                      int 03
:00473C59 CC                      int 03
:00473C5A CC                      int 03
:00473C5B CC                      int 03
:00473C5C CC                      int 03
:00473C5D CC                      int 03
:00473C5E CC                      int 03
:00473C5F CC                      int 03
:00473C60 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00473C66 E8B53AF9FF              call 00407720
:00473C6B C3                      ret


:00473C6C B8685A4700              mov eax, 00475A68
:00473C71 E90A99FFFF              jmp 0046D580
:00473C76 CC                      int 03
:00473C77 CC                      int 03
:00473C78 CC                      int 03
:00473C79 CC                      int 03
:00473C7A CC                      int 03
:00473C7B CC                      int 03
:00473C7C CC                      int 03
:00473C7D CC                      int 03
:00473C7E CC                      int 03
:00473C7F CC                      int 03
:00473C80 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00473C83 E8B6C5F9FF              call 0041023E
:00473C88 C3                      ret


:00473C89 B8905A4700              mov eax, 00475A90
:00473C8E E9ED98FFFF              jmp 0046D580
:00473C93 00000000000000000000    BYTE 10 DUP(0)
:00473C9D 00000000000000000000    BYTE 10 DUP(0)
:00473CA7 00000000000000000000    BYTE 10 DUP(0)
:00473CB1 00000000000000000000    BYTE 10 DUP(0)
:00473CBB 00000000000000000000    BYTE 10 DUP(0)
:00473CC5 00000000000000000000    BYTE 10 DUP(0)
:00473CCF 00000000000000000000    BYTE 10 DUP(0)
:00473CD9 00000000000000000000    BYTE 10 DUP(0)
:00473CE3 00000000000000000000    BYTE 10 DUP(0)
:00473CED 00000000000000000000    BYTE 10 DUP(0)
:00473CF7 00000000000000000000    BYTE 10 DUP(0)
:00473D01 00000000000000000000    BYTE 10 DUP(0)
:00473D0B 00000000000000000000    BYTE 10 DUP(0)
:00473D15 00000000000000000000    BYTE 10 DUP(0)
:00473D1F 00000000000000000000    BYTE 10 DUP(0)
:00473D29 00000000000000000000    BYTE 10 DUP(0)
:00473D33 00000000000000000000    BYTE 10 DUP(0)
:00473D3D 00000000000000000000    BYTE 10 DUP(0)
:00473D47 00000000000000000000    BYTE 10 DUP(0)
:00473D51 00000000000000000000    BYTE 10 DUP(0)
:00473D5B 00000000000000000000    BYTE 10 DUP(0)
:00473D65 00000000000000000000    BYTE 10 DUP(0)
:00473D6F 00000000000000000000    BYTE 10 DUP(0)
:00473D79 00000000000000000000    BYTE 10 DUP(0)
:00473D83 00000000000000000000    BYTE 10 DUP(0)
:00473D8D 00000000000000000000    BYTE 10 DUP(0)
:00473D97 00000000000000000000    BYTE 10 DUP(0)
:00473DA1 00000000000000000000    BYTE 10 DUP(0)
:00473DAB 00000000000000000000    BYTE 10 DUP(0)
:00473DB5 00000000000000000000    BYTE 10 DUP(0)
:00473DBF 00000000000000000000    BYTE 10 DUP(0)
:00473DC9 00000000000000000000    BYTE 10 DUP(0)
:00473DD3 00000000000000000000    BYTE 10 DUP(0)
:00473DDD 00000000000000000000    BYTE 10 DUP(0)
:00473DE7 00000000000000000000    BYTE 10 DUP(0)
:00473DF1 00000000000000000000    BYTE 10 DUP(0)
:00473DFB 00000000000400000004    BYTE 10 DUP(0)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
:FFFFFFFF    End Of Listing
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
